@pushary/agent-hooks 0.21.1 → 0.22.0

package/data/cursor-plugin/scripts/pushary-gate.mjs

@@ -231,6 +231,25 @@ const fetchModeState = async (apiKey, sessionId) => {
   }
 }
 
+// ── action body capture + redaction (inlined mirror of describe.ts, since this
+// dependency-free hook cannot import the workspace) ──────────────────────────────
+const ACTION_BODY_MAX = 4000
+const ACTION_BODY_TRUNCATION_MARKER = '\n… [truncated]'
+const REDACTION_RULES = [
+  [/\bsk-[A-Za-z0-9]{20,}\b/g, '[redacted]'],
+  [/\bpk_(?:live|test)_[A-Za-z0-9]+\b/g, '[redacted]'],
+  [/\brk_[A-Za-z0-9]+\b/g, '[redacted]'],
+  [/\bAKIA[0-9A-Z]{16}\b/g, '[redacted]'],
+  [/\bbearer\s+[A-Za-z0-9._-]+/gi, 'bearer [redacted]'],
+  [/\bauthorization:\s*\S+/gi, 'authorization: [redacted]'],
+  [/((?:secret|token|password|passwd|api[_-]?key|private[_-]?key)\s*[=:]\s*)(\S+)/gi, '$1[redacted]'],
+  [/[A-Za-z0-9+/]{40,}={0,2}/g, '[redacted]'],
+]
+const redactSecrets = (text) => REDACTION_RULES.reduce((acc, [pattern, replacement]) => acc.replace(pattern, replacement), text)
+const capActionBody = (text) =>
+  text.length <= ACTION_BODY_MAX ? text : `${text.slice(0, ACTION_BODY_MAX - ACTION_BODY_TRUNCATION_MARKER.length)}${ACTION_BODY_TRUNCATION_MARKER}`
+const deriveActionBody = (command) => capActionBody(redactSecrets(command))
+
 // ── ask / wait ───────────────────────────────────────────────────────────────
 const askArgs = (command, project, ident) => ({
   question: `Allow this command?\n\n${command}`,
@@ -240,6 +259,7 @@ const askArgs = (command, project, ident) => ({
   sessionId: ident.sessionId,
   machineId: ident.machineId,
   toolName: 'Bash',
+  actionBody: deriveActionBody(command),
   wait: false,
 })
 
@@ -278,7 +298,10 @@ const handlePushOnly = async (apiKey, command, project, ident, timeoutSeconds, t
   const realMs = Math.max(timeoutSeconds, 1) * 1000
   const cap = Math.min(realMs, MAX_BLOCK_MS)
   const answer = await pollForAnswer(apiKey, asked.correlationId, Date.now() + cap)
-  if (answer.answered) return answer.value === 'yes' ? ALLOW : deny(DENIED)
+  if (answer.answered) {
+    if (answer.value === 'defer') return ask()
+    return answer.value === 'yes' ? ALLOW : deny(DENIED)
+  }
 
   // If Cursor's hook limit cut us off before the configured timeout, hand off to
   // Cursor's own prompt rather than misapplying the policy's timeout action.
@@ -298,7 +321,10 @@ const handlePushFirst = async (apiKey, command, project, ident, pushFirstSeconds
 
   const cap = Math.min(Math.max(pushFirstSeconds, 1) * 1000, MAX_BLOCK_MS)
   const answer = await pollForAnswer(apiKey, asked.correlationId, Date.now() + cap)
-  if (answer.answered) return answer.value === 'yes' ? ALLOW : deny(DENIED)
+  if (answer.answered) {
+    if (answer.value === 'defer') return ask()
+    return answer.value === 'yes' ? ALLOW : deny(DENIED)
+  }
   return ask('Sent to your phone via Pushary — you can also approve here.')
 }
 

package/dist/bin/pushary-codex-hook.js

@@ -1,36 +1,40 @@
 #!/usr/bin/env node
 import {
-  denyReasonFrom
-} from "../chunk-N7VXDBQU.js";
+  denyReasonFrom,
+  isDeferAnswer
+} from "../chunk-KQYIHZ5E.js";
 import {
   CODEX_AGENT,
+  DEFAULT_SESSION,
+  askUser,
   codexAllow,
   codexDeny,
   codexPass,
+  deriveActionBody,
+  deriveBlocker,
+  deriveToolTarget,
   describeApplyPatch,
+  describeToolCall,
+  fetchModeState,
+  getMachineId,
+  getPolicy,
   handlePostToolUse,
   handleStop,
   handleUserPrompt,
   permissionTimeoutDecision,
   preToolUseTimeoutDecision,
+  readLastPrompt,
   reportEvent,
-  toCodexWire,
-  toPolicyLookup
-} from "../chunk-BYNYYZWW.js";
-import {
-  DEFAULT_SESSION,
-  askUser,
-  deriveToolTarget,
-  describeToolCall,
-  fetchModeState,
-  getMachineId,
-  getPolicy,
   resolvePolicy,
   savePendingQuestion,
   sendNotification,
+  toCodexWire,
+  toPolicyLookup,
   waitForAnswer
-} from "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-M4GDBGXF.js";
+import {
+  DECISION_LINE_MAX
+} from "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import {
   getApiKey
@@ -107,7 +111,7 @@ var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3
 };
 var agentNameFor = (input) => `Codex - ${basename(input.cwd ?? process.cwd())}`;
 var describeFor = (input, lookup) => input.tool_name === "apply_patch" ? describeApplyPatch(input.tool_input?.command) ?? describeToolCall(lookup.tool, lookup.input, "hook") : describeToolCall(lookup.tool, lookup.input, "hook");
-var pushQuestion = async (apiKey, input, lookup, waitSeconds) => {
+var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode) => {
   const projectName = basename(input.cwd ?? process.cwd());
   const description = describeFor(input, lookup);
   const result = await askUser(apiKey, {
@@ -118,7 +122,11 @@ var pushQuestion = async (apiKey, input, lookup, waitSeconds) => {
     sessionId: input.session_id,
     machineId: getMachineId(),
     toolName: lookup.tool,
-    toolTarget: deriveToolTarget(lookup.tool, lookup.input)
+    toolTarget: deriveToolTarget(lookup.tool, lookup.input),
+    intent: readLastPrompt(input.session_id || DEFAULT_SESSION),
+    action: description.slice(0, DECISION_LINE_MAX),
+    blocker: deriveBlocker(mode),
+    actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {})
   });
   const deadline = Math.min(
     Date.now() + Math.min(waitSeconds, MAX_WAIT_SECONDS) * 1e3,
@@ -157,8 +165,9 @@ var decidePermissionRequest = async (input) => {
       return codexPass();
     }
     const waitSeconds = toolPolicy.mode === "push_first" ? toolPolicy.pushFirstSeconds : toolPolicy.timeoutSeconds;
-    const { answer, correlationId } = await pushQuestion(apiKey, input, lookup, waitSeconds);
+    const { answer, correlationId } = await pushQuestion(apiKey, input, lookup, waitSeconds, toolPolicy.mode);
     if (answer.answered) {
+      if (isDeferAnswer(answer.value)) return codexPass();
       if (answer.value === "yes") {
         if (toolPolicy.mode === "push_only") markApproved(input.tool_use_id);
         return codexAllow();
@@ -190,12 +199,13 @@ var decidePreToolUse = async (input) => {
       if (consumeApproval(input.tool_use_id)) return codexPass();
       let pushed;
       try {
-        pushed = await pushQuestion(apiKey, input, lookup, toolPolicy.timeoutSeconds);
+        pushed = await pushQuestion(apiKey, input, lookup, toolPolicy.timeoutSeconds, "push_only");
       } catch {
         return preToolUseTimeoutDecision(toolPolicy.timeoutAction, "Push notification failed, denying per policy");
       }
       const { answer, correlationId } = pushed;
       if (answer.answered) {
+        if (isDeferAnswer(answer.value)) return codexPass();
         return answer.value === "yes" ? codexPass() : codexDeny(denyReasonFrom(answer.value));
       }
       savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);

package/dist/bin/pushary-codex.js

@@ -1,13 +1,11 @@
 #!/usr/bin/env node
-import {
-  reportEvent
-} from "../chunk-BYNYYZWW.js";
 import {
   askUser,
   getMachineId,
+  reportEvent,
   waitForAnswer
-} from "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-M4GDBGXF.js";
+import "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import {
   getApiKey

package/dist/bin/pushary-gemini-hook.js

@@ -1,27 +1,32 @@
 #!/usr/bin/env node
 import {
-  denyReasonFrom
-} from "../chunk-N7VXDBQU.js";
-import {
-  handlePostToolUse,
-  handleStop,
-  handleUserPrompt,
-  reportEvent
-} from "../chunk-BYNYYZWW.js";
+  denyReasonFrom,
+  isDeferAnswer
+} from "../chunk-KQYIHZ5E.js";
 import {
   DEFAULT_SESSION,
   askUser,
+  deriveActionBody,
+  deriveBlocker,
   deriveToolTarget,
   describeToolCall,
   fetchModeState,
   getMachineId,
   getPolicy,
+  handlePostToolUse,
+  handleStop,
+  handleUserPrompt,
+  readLastPrompt,
+  readLastUserPrompt,
+  reportEvent,
   resolvePolicy,
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-M4GDBGXF.js";
+import {
+  DECISION_LINE_MAX
+} from "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import {
   getApiKey
@@ -86,7 +91,7 @@ var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3
   return { answered: false };
 };
 var agentNameFor = (input) => `${GEMINI_AGENT.label} - ${basename(input.cwd ?? process.cwd())}`;
-var pushQuestion = async (apiKey, input, lookup, waitSeconds, pollInterval = 2e3) => {
+var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode, pollInterval = 2e3) => {
   const projectName = basename(input.cwd ?? process.cwd());
   const description = describeToolCall(lookup.tool, lookup.input, "hook");
   const result = await askUser(apiKey, {
@@ -97,7 +102,11 @@ var pushQuestion = async (apiKey, input, lookup, waitSeconds, pollInterval = 2e3
     sessionId: input.session_id,
     machineId: getMachineId(),
     toolName: lookup.tool,
-    toolTarget: deriveToolTarget(lookup.tool, lookup.input)
+    toolTarget: deriveToolTarget(lookup.tool, lookup.input),
+    intent: readLastPrompt(input.session_id || DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0),
+    action: description.slice(0, DECISION_LINE_MAX),
+    blocker: deriveBlocker(mode),
+    actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {})
   });
   const deadline = Math.min(
     Date.now() + Math.min(waitSeconds, MAX_WAIT_SECONDS) * 1e3,
@@ -121,12 +130,13 @@ var notifyApprovalNeeded = async (apiKey, input, lookup) => {
 var handlePushOnly = async (apiKey, input, lookup, timeoutSeconds, timeoutAction) => {
   let pushed;
   try {
-    pushed = await pushQuestion(apiKey, input, lookup, timeoutSeconds);
+    pushed = await pushQuestion(apiKey, input, lookup, timeoutSeconds, "push_only");
   } catch {
     return geminiTimeoutDecision(timeoutAction, "Push notification failed, denying per policy");
   }
   const { answer, correlationId } = pushed;
   if (answer.answered) {
+    if (isDeferAnswer(answer.value)) return geminiPass();
     return answer.value === "yes" ? geminiAllow() : geminiDeny(denyReasonFrom(answer.value));
   }
   savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);
@@ -135,12 +145,13 @@ var handlePushOnly = async (apiKey, input, lookup, timeoutSeconds, timeoutAction
 var handlePushFirst = async (apiKey, input, lookup, pushFirstSeconds) => {
   let pushed;
   try {
-    pushed = await pushQuestion(apiKey, input, lookup, pushFirstSeconds, 1500);
+    pushed = await pushQuestion(apiKey, input, lookup, pushFirstSeconds, "push_first", 1500);
   } catch {
     return geminiPass();
   }
   const { answer, correlationId } = pushed;
   if (answer.answered) {
+    if (isDeferAnswer(answer.value)) return geminiPass();
     return answer.value === "yes" ? geminiAllow() : geminiDeny(denyReasonFrom(answer.value));
   }
   savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);

package/dist/bin/pushary-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-M5F2L4KF.js";
-import "../chunk-N7VXDBQU.js";
-import "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-FGZZRCOG.js";
+import "../chunk-KQYIHZ5E.js";
+import "../chunk-M4GDBGXF.js";
+import "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-NKXSILEW.js";
 

package/dist/bin/pushary-post-hook.js

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-BYNYYZWW.js";
-import "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-M4GDBGXF.js";
+import "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-NKXSILEW.js";
 

package/dist/bin/pushary-prompt-hook.js

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-BYNYYZWW.js";
-import "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-M4GDBGXF.js";
+import "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-NKXSILEW.js";
 

package/dist/bin/pushary-setup.js

@@ -17,7 +17,7 @@ import {
 } from "../chunk-BHAMEPOP.js";
 import {
   isValidApiKey
-} from "../chunk-USUCPCUC.js";
+} from "../chunk-WPVL6VIT.js";
 
 // bin/pushary-setup.ts
 import { existsSync, readFileSync, writeFileSync, appendFileSync, mkdirSync, cpSync, rmSync, chmodSync } from "fs";

package/dist/bin/pushary-stop-hook.js

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-BYNYYZWW.js";
-import "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-M4GDBGXF.js";
+import "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-NKXSILEW.js";
 

package/dist/chunk-3LC4YUMA.js

@@ -0,0 +1,194 @@
+import {
+  denyReasonFrom,
+  isDeferAnswer
+} from "./chunk-KQYIHZ5E.js";
+import {
+  DEFAULT_SESSION,
+  askUser,
+  deriveAction,
+  deriveActionBody,
+  deriveBlocker,
+  deriveToolTarget,
+  describeToolCall,
+  fetchModeState,
+  getMachineId,
+  getPolicy,
+  readLastPrompt,
+  readLastUserPrompt,
+  resolvePolicy,
+  savePendingQuestion,
+  sendNotification,
+  waitForAnswer
+} from "./chunk-5LTQNC7R.js";
+import {
+  getApiKey
+} from "./chunk-NKXSILEW.js";
+
+// src/hook.ts
+import { basename } from "path";
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var allow = () => ({
+  hookSpecificOutput: {
+    hookEventName: "PreToolUse",
+    permissionDecision: "allow"
+  }
+});
+var deny = (reason) => ({
+  hookSpecificOutput: {
+    hookEventName: "PreToolUse",
+    permissionDecision: "deny",
+    permissionDecisionReason: reason
+  }
+});
+var ask = (reason) => ({
+  hookSpecificOutput: {
+    hookEventName: "PreToolUse",
+    permissionDecision: "ask",
+    ...reason ? { permissionDecisionReason: reason } : {}
+  }
+});
+var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
+  while (Date.now() < deadlineMs) {
+    const remaining = Math.min(Math.max(deadlineMs - Date.now(), 1e3), 3e4);
+    let answer;
+    try {
+      answer = await waitForAnswer(apiKey, correlationId, remaining);
+    } catch {
+      if (Date.now() + pollInterval >= deadlineMs) break;
+      await sleep(pollInterval);
+      continue;
+    }
+    if (answer.answered) return answer;
+    if (Date.now() + pollInterval >= deadlineMs) break;
+    await sleep(pollInterval);
+  }
+  return { answered: false };
+};
+var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget, decision) => {
+  let result;
+  try {
+    result = await askUser(apiKey, {
+      question: `Allow ${description}?`,
+      type: "confirm",
+      context: `Agent wants to run this in ${projectName}`,
+      agentName: `Claude Code - ${projectName}`,
+      sessionId,
+      machineId,
+      toolName,
+      toolTarget,
+      ...decision
+    });
+  } catch {
+    switch (timeoutAction) {
+      case "approve":
+        return allow();
+      case "deny":
+        return deny("Push notification failed, denying per policy");
+      default:
+        return ask("Push notification failed, asking in terminal");
+    }
+  }
+  const deadline = Date.now() + timeoutSeconds * 1e3;
+  const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
+  if (answer.answered) {
+    if (isDeferAnswer(answer.value)) return ask("Handling on your machine");
+    return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value));
+  }
+  switch (timeoutAction) {
+    case "approve":
+      return allow();
+    case "deny":
+      return deny("No response within timeout");
+    default:
+      return ask("No push response, asking in terminal");
+  }
+};
+var handleTerminalOnly = () => {
+  return ask();
+};
+var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds, sessionId, machineId, toolName, toolTarget, decision) => {
+  let result;
+  try {
+    result = await askUser(apiKey, {
+      question: `Allow ${description}?`,
+      type: "confirm",
+      context: `Agent wants to run this in ${projectName}`,
+      agentName: `Claude Code - ${projectName}`,
+      sessionId,
+      machineId,
+      toolName,
+      toolTarget,
+      ...decision
+    });
+  } catch {
+    return ask("Push notification failed, asking in terminal");
+  }
+  const deadline = Date.now() + pushFirstSeconds * 1e3;
+  const answer = await pollForAnswer(apiKey, result.correlationId, deadline, 1500);
+  if (answer.answered) {
+    if (isDeferAnswer(answer.value)) return ask("Handling on your machine");
+    return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value));
+  }
+  savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId);
+  return ask("Sent as push notification. You can also approve here.");
+};
+var handleNotifyOnly = async (apiKey, description, projectName, sessionId, machineId) => {
+  try {
+    await sendNotification(apiKey, {
+      title: "Agent needs approval",
+      body: description,
+      agentName: `Claude Code - ${projectName}`,
+      sessionId,
+      machineId
+    });
+  } catch {
+  }
+  return ask();
+};
+var handlePreToolUse = async (input) => {
+  try {
+    const apiKey = getApiKey();
+    const modeState = await fetchModeState(apiKey, input.session_id);
+    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    if (modeState.kill) {
+      return deny("Stopped by user \u2014 this agent was halted from Pushary");
+    }
+    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
+    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") {
+      return allow();
+    }
+    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
+      return deny(`Denied by policy for ${toolPolicy.tool}`);
+    }
+    const description = describeToolCall(input.tool_name, input.tool_input, "hook");
+    const projectName = basename(input.cwd ?? process.cwd());
+    const sessionId = input.session_id;
+    const machineId = getMachineId();
+    const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+    const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
+    const decision = {
+      intent,
+      action: deriveAction(input.tool_name, input.tool_input),
+      blocker: deriveBlocker(toolPolicy.mode),
+      actionBody: deriveActionBody(input.tool_name, input.tool_input)
+    };
+    switch (toolPolicy.mode) {
+      case "push_only":
+        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget, decision);
+      case "terminal_only":
+        return handleTerminalOnly();
+      case "push_first":
+        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+      case "notify_only":
+        return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
+      default:
+        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+    }
+  } catch {
+    return ask("Pushary unavailable, falling back to terminal approval");
+  }
+};
+
+export {
+  handlePreToolUse
+};