@pushary/agent-hooks 0.21.1 → 0.23.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (91) hide show
  1. package/data/cursor-plugin/README.md +5 -1
  2. package/data/cursor-plugin/mcp.json +1 -1
  3. package/data/cursor-plugin/scripts/pushary-gate.mjs +28 -2
  4. package/dist/bin/pushary-clean.js +1 -1
  5. package/dist/bin/pushary-codex-hook.js +29 -19
  6. package/dist/bin/pushary-codex.js +3 -5
  7. package/dist/bin/pushary-doctor.js +2 -2
  8. package/dist/bin/pushary-gemini-hook.js +25 -14
  9. package/dist/bin/pushary-hook.js +4 -4
  10. package/dist/bin/pushary-post-hook.js +2 -3
  11. package/dist/bin/pushary-prompt-hook.js +2 -3
  12. package/dist/bin/pushary-setup.js +24 -2
  13. package/dist/bin/pushary-stop-hook.js +2 -3
  14. package/dist/{chunk-FXYTRZHC.js → chunk-FGZZRCOG.js} +27 -10
  15. package/dist/{chunk-BHAMEPOP.js → chunk-JPRRYC5X.js} +5 -0
  16. package/dist/{chunk-N7VXDBQU.js → chunk-KQYIHZ5E.js} +3 -1
  17. package/dist/chunk-M4GDBGXF.js +824 -0
  18. package/dist/{chunk-USUCPCUC.js → chunk-WPVL6VIT.js} +5 -1
  19. package/dist/src/index.d.ts +4 -0
  20. package/dist/src/index.js +8 -10
  21. package/package.json +1 -1
  22. package/dist/chunk-22CV7V7A.js +0 -38
  23. package/dist/chunk-2BE2IPMO.js +0 -315
  24. package/dist/chunk-2CRLBMOX.js +0 -244
  25. package/dist/chunk-2HMNOZPY.js +0 -109
  26. package/dist/chunk-2I6DLXJN.js +0 -219
  27. package/dist/chunk-2Q6XPZ4Q.js +0 -395
  28. package/dist/chunk-3MIR7ODJ.js +0 -112
  29. package/dist/chunk-3QZESA66.js +0 -222
  30. package/dist/chunk-4Z4MB37G.js +0 -96
  31. package/dist/chunk-5GFUI5N6.js +0 -132
  32. package/dist/chunk-5JEDLXEC.js +0 -99
  33. package/dist/chunk-5QHQVXWN.js +0 -174
  34. package/dist/chunk-6A3WCJO2.js +0 -416
  35. package/dist/chunk-6QWFMVCD.js +0 -328
  36. package/dist/chunk-6SRXMZAN.js +0 -99
  37. package/dist/chunk-7PTU7TGE.js +0 -96
  38. package/dist/chunk-AB4KX4XT.js +0 -109
  39. package/dist/chunk-AC4UYAGX.js +0 -136
  40. package/dist/chunk-ACE77TKQ.js +0 -328
  41. package/dist/chunk-BYNYYZWW.js +0 -412
  42. package/dist/chunk-C5TFTNHG.js +0 -244
  43. package/dist/chunk-CH53PBQN.js +0 -265
  44. package/dist/chunk-DF3BM6BF.js +0 -195
  45. package/dist/chunk-DKZVKEOW.js +0 -175
  46. package/dist/chunk-EMPL27ZV.js +0 -96
  47. package/dist/chunk-EQJXMEIR.js +0 -175
  48. package/dist/chunk-GTJGZBTQ.js +0 -328
  49. package/dist/chunk-HJMFYDWY.js +0 -222
  50. package/dist/chunk-HRQEECB6.js +0 -315
  51. package/dist/chunk-HWEMAAOY.js +0 -370
  52. package/dist/chunk-IBWCHA5M.js +0 -10
  53. package/dist/chunk-KTM4ZQ3W.js +0 -96
  54. package/dist/chunk-KTP2EPVB.js +0 -27
  55. package/dist/chunk-KYARP7KP.js +0 -97
  56. package/dist/chunk-M2N5DYWN.js +0 -247
  57. package/dist/chunk-M5F2L4KF.js +0 -177
  58. package/dist/chunk-M6S3M6E3.js +0 -244
  59. package/dist/chunk-O6A5RHWY.js +0 -122
  60. package/dist/chunk-ODUXELPM.js +0 -219
  61. package/dist/chunk-OF5WIOYS.js +0 -129
  62. package/dist/chunk-OP4QAN23.js +0 -99
  63. package/dist/chunk-P4JH2Q7Z.js +0 -102
  64. package/dist/chunk-PMD5JSV3.js +0 -242
  65. package/dist/chunk-PSSHNBEL.js +0 -177
  66. package/dist/chunk-QEPRH7JB.js +0 -315
  67. package/dist/chunk-QRXWPZKN.js +0 -308
  68. package/dist/chunk-QY4L6XHN.js +0 -384
  69. package/dist/chunk-RNWPCELY.js +0 -176
  70. package/dist/chunk-RSHN2AQ7.js +0 -29
  71. package/dist/chunk-RZLVE57X.js +0 -38
  72. package/dist/chunk-SDCIKREA.js +0 -241
  73. package/dist/chunk-SDREQWNI.js +0 -175
  74. package/dist/chunk-SH26ZOHU.js +0 -159
  75. package/dist/chunk-TRLBBLSS.js +0 -176
  76. package/dist/chunk-U6OXZPYC.js +0 -384
  77. package/dist/chunk-UIBTFZUD.js +0 -314
  78. package/dist/chunk-V4GLWPD7.js +0 -174
  79. package/dist/chunk-VC6U3QGF.js +0 -142
  80. package/dist/chunk-VIST7ACL.js +0 -88
  81. package/dist/chunk-VUNL35KE.js +0 -16
  82. package/dist/chunk-VWBNI4SC.js +0 -174
  83. package/dist/chunk-W5KRWUNE.js +0 -262
  84. package/dist/chunk-WCGKLHCL.js +0 -154
  85. package/dist/chunk-WNXGIEX7.js +0 -219
  86. package/dist/chunk-XPVSZIA3.js +0 -315
  87. package/dist/chunk-Y633ZIJF.js +0 -384
  88. package/dist/chunk-YCL4GUFR.js +0 -222
  89. package/dist/chunk-YTMKB44I.js +0 -220
  90. package/dist/chunk-ZWBS3T7Q.js +0 -244
  91. package/dist/pushary-mode-T7XOPI6Z.js +0 -83
@@ -1,109 +0,0 @@
1
- // src/codex-config.ts
2
- var CODEX_HOOK_BINARY = "pushary-codex-hook";
3
- var CODEX_HOOK_EVENTS = [
4
- { event: "PermissionRequest", matcher: "Bash|apply_patch", timeout: 180, statusMessage: "Waiting for your phone" },
5
- { event: "PreToolUse", matcher: "Bash|apply_patch", timeout: 180, statusMessage: "Checking Pushary policy" },
6
- { event: "PostToolUse", matcher: "Bash|apply_patch", timeout: 10 },
7
- { event: "UserPromptSubmit", timeout: 10 },
8
- { event: "Stop", timeout: 10 },
9
- { event: "SessionStart", matcher: "startup|resume", timeout: 10 }
10
- ];
11
- var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
12
- var ensureRecord = (target, key) => {
13
- const existing = asRecord(target[key]);
14
- if (existing) return existing;
15
- const created = {};
16
- target[key] = created;
17
- return created;
18
- };
19
- var isPusharyCodexHook = (entry) => {
20
- const hooks = asRecord(entry)?.hooks;
21
- if (!Array.isArray(hooks)) return false;
22
- return hooks.some((hook) => String(asRecord(hook)?.command ?? "").includes(CODEX_HOOK_BINARY));
23
- };
24
- var addCodexHooks = (config, command) => {
25
- const hooks = ensureRecord(config, "hooks");
26
- for (const definition of CODEX_HOOK_EVENTS) {
27
- const existing = Array.isArray(hooks[definition.event]) ? hooks[definition.event] : [];
28
- const entries = existing.filter((entry) => !isPusharyCodexHook(entry));
29
- entries.push({
30
- ...definition.matcher ? { matcher: definition.matcher } : {},
31
- hooks: [{
32
- type: "command",
33
- command,
34
- timeout: definition.timeout,
35
- ...definition.statusMessage ? { statusMessage: definition.statusMessage } : {}
36
- }]
37
- });
38
- hooks[definition.event] = entries;
39
- }
40
- };
41
- var removeCodexHooks = (config) => {
42
- const hooks = asRecord(config.hooks);
43
- if (!hooks) return false;
44
- let changed = false;
45
- for (const definition of CODEX_HOOK_EVENTS) {
46
- const entries = hooks[definition.event];
47
- if (!Array.isArray(entries)) continue;
48
- const filtered = entries.filter((entry) => !isPusharyCodexHook(entry));
49
- if (filtered.length !== entries.length) {
50
- if (filtered.length === 0) {
51
- delete hooks[definition.event];
52
- } else {
53
- hooks[definition.event] = filtered;
54
- }
55
- changed = true;
56
- }
57
- }
58
- if (Object.keys(hooks).length === 0) delete config.hooks;
59
- return changed;
60
- };
61
- var hasCodexHooks = (config) => {
62
- const hooks = asRecord(config.hooks);
63
- if (!hooks) return false;
64
- return CODEX_HOOK_EVENTS.some((definition) => {
65
- const entries = hooks[definition.event];
66
- return Array.isArray(entries) && entries.some(isPusharyCodexHook);
67
- });
68
- };
69
- var missingCodexHookEvents = (config) => {
70
- const hooks = asRecord(config.hooks);
71
- return CODEX_HOOK_EVENTS.filter((definition) => {
72
- const entries = hooks?.[definition.event];
73
- return !Array.isArray(entries) || !entries.some(isPusharyCodexHook);
74
- }).map((definition) => definition.event);
75
- };
76
-
77
- // src/npm.ts
78
- import { execSync } from "child_process";
79
- var cleanNpmEnv = () => {
80
- const env = {};
81
- for (const [key, value] of Object.entries(process.env)) {
82
- if (key.toLowerCase().startsWith("npm_config_workspace")) continue;
83
- env[key] = value;
84
- }
85
- return env;
86
- };
87
- var npmErrorMessage = (err) => {
88
- const e = err;
89
- const text = [e?.stderr, e?.stdout].map((part) => part ? part.toString() : "").join("\n");
90
- const line = text.split("\n").map((l) => l.replace(/^npm error\s*/i, "").trim()).find((l) => l && !l.startsWith("A complete log") && !/^code\s/i.test(l));
91
- return line || e?.message || String(err);
92
- };
93
- var execNpm = (args, options = {}) => {
94
- return execSync(`npm ${args}`, {
95
- timeout: 12e4,
96
- stdio: "pipe",
97
- ...options,
98
- env: { ...cleanNpmEnv(), ...options.env ?? {} }
99
- });
100
- };
101
-
102
- export {
103
- addCodexHooks,
104
- removeCodexHooks,
105
- hasCodexHooks,
106
- missingCodexHookEvents,
107
- npmErrorMessage,
108
- execNpm
109
- };
@@ -1,219 +0,0 @@
1
- import {
2
- askUser,
3
- describeToolCall,
4
- isPolicyConfig,
5
- savePendingQuestion,
6
- sendNotification,
7
- waitForAnswer
8
- } from "./chunk-4Z4MB37G.js";
9
- import {
10
- getApiKey,
11
- getBaseUrl,
12
- withRetry
13
- } from "./chunk-O6A5RHWY.js";
14
-
15
- // src/policy.ts
16
- import { createHash } from "crypto";
17
- import { existsSync, readFileSync, writeFileSync } from "fs";
18
- import { join } from "path";
19
- import { tmpdir } from "os";
20
- var CACHE_TTL_MS = 5 * 60 * 1e3;
21
- var cacheFile = (apiKey) => {
22
- const hash = createHash("sha256").update(apiKey).digest("hex").slice(0, 12);
23
- return join(tmpdir(), `pushary-policy-${hash}.json`);
24
- };
25
- var fetchPolicy = async (apiKey) => {
26
- return withRetry(async () => {
27
- const baseUrl = getBaseUrl();
28
- const response = await fetch(`${baseUrl}/api/mcp/policy`, {
29
- headers: { "Authorization": `Bearer ${apiKey}` },
30
- signal: AbortSignal.timeout(1e4)
31
- });
32
- if (!response.ok) {
33
- throw new Error(`Failed to fetch policy: ${response.status}`);
34
- }
35
- const raw = await response.json();
36
- if (!isPolicyConfig(raw)) throw new Error("Invalid policy response");
37
- return raw;
38
- }, { maxAttempts: 2 });
39
- };
40
- var getPolicy = async (apiKey) => {
41
- const path = cacheFile(apiKey);
42
- let staleCache = null;
43
- if (existsSync(path)) {
44
- try {
45
- const stat = readFileSync(path, "utf-8");
46
- const cached = JSON.parse(stat);
47
- if (!isPolicyConfig(cached)) throw new Error("Corrupted cache");
48
- if (!cached._cachedAt || Date.now() - cached._cachedAt < CACHE_TTL_MS) {
49
- return cached;
50
- }
51
- staleCache = cached;
52
- } catch {
53
- }
54
- }
55
- try {
56
- const policy = await fetchPolicy(apiKey);
57
- try {
58
- writeFileSync(path, JSON.stringify({ ...policy, _cachedAt: Date.now() }), "utf-8");
59
- } catch {
60
- }
61
- return policy;
62
- } catch {
63
- if (staleCache) return staleCache;
64
- throw new Error("Failed to fetch policy and no cached policy available");
65
- }
66
- };
67
- var resolvePolicy = (config, toolName) => {
68
- const exact = config.policies.find((p) => p.tool === toolName);
69
- if (exact) return exact;
70
- const wildcard = config.policies.find((p) => p.tool === "*");
71
- if (wildcard) return wildcard;
72
- return {
73
- tool: toolName,
74
- timeoutSeconds: config.defaultTimeoutSeconds,
75
- timeoutAction: config.defaultTimeoutAction,
76
- mode: config.defaultMode ?? "push_first",
77
- pushFirstSeconds: config.defaultPushFirstSeconds ?? 20
78
- };
79
- };
80
-
81
- // src/hook.ts
82
- import { basename } from "path";
83
- var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
84
- var allow = () => ({
85
- hookSpecificOutput: {
86
- hookEventName: "PreToolUse",
87
- permissionDecision: "allow"
88
- }
89
- });
90
- var deny = (reason) => ({
91
- hookSpecificOutput: {
92
- hookEventName: "PreToolUse",
93
- permissionDecision: "deny",
94
- permissionDecisionReason: reason
95
- }
96
- });
97
- var ask = (reason) => ({
98
- hookSpecificOutput: {
99
- hookEventName: "PreToolUse",
100
- permissionDecision: "ask",
101
- ...reason ? { permissionDecisionReason: reason } : {}
102
- }
103
- });
104
- var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
105
- while (Date.now() < deadlineMs) {
106
- const remaining = Math.min(Math.max(deadlineMs - Date.now(), 1e3), 3e4);
107
- let answer;
108
- try {
109
- answer = await waitForAnswer(apiKey, correlationId, remaining);
110
- } catch {
111
- if (Date.now() + pollInterval >= deadlineMs) break;
112
- await sleep(pollInterval);
113
- continue;
114
- }
115
- if (answer.answered) return answer;
116
- if (Date.now() + pollInterval >= deadlineMs) break;
117
- await sleep(pollInterval);
118
- }
119
- return { answered: false };
120
- };
121
- var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction) => {
122
- let result;
123
- try {
124
- result = await askUser(apiKey, {
125
- question: `Allow ${description}?`,
126
- type: "confirm",
127
- context: `Agent wants to run this in ${projectName}`,
128
- agentName: `Claude Code - ${projectName}`
129
- });
130
- } catch {
131
- switch (timeoutAction) {
132
- case "approve":
133
- return allow();
134
- case "deny":
135
- return deny("Push notification failed, denying per policy");
136
- default:
137
- return ask("Push notification failed, asking in terminal");
138
- }
139
- }
140
- const deadline = Date.now() + timeoutSeconds * 1e3;
141
- const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
142
- if (answer.answered) {
143
- return answer.value === "yes" ? allow() : deny("Denied via push notification");
144
- }
145
- switch (timeoutAction) {
146
- case "approve":
147
- return allow();
148
- case "deny":
149
- return deny("No response within timeout");
150
- default:
151
- return ask("No push response, asking in terminal");
152
- }
153
- };
154
- var handleTerminalOnly = () => {
155
- return ask();
156
- };
157
- var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds) => {
158
- let result;
159
- try {
160
- result = await askUser(apiKey, {
161
- question: `Allow ${description}?`,
162
- type: "confirm",
163
- context: `Agent wants to run this in ${projectName}`,
164
- agentName: `Claude Code - ${projectName}`
165
- });
166
- } catch {
167
- return ask("Push notification failed, asking in terminal");
168
- }
169
- const deadline = Date.now() + pushFirstSeconds * 1e3;
170
- const answer = await pollForAnswer(apiKey, result.correlationId, deadline, 1500);
171
- if (answer.answered) {
172
- return answer.value === "yes" ? allow() : deny("Denied via push notification");
173
- }
174
- savePendingQuestion(result.correlationId);
175
- return ask("Sent as push notification. You can also approve here.");
176
- };
177
- var handleNotifyOnly = async (apiKey, description, projectName) => {
178
- try {
179
- await sendNotification(apiKey, {
180
- title: "Agent needs approval",
181
- body: description,
182
- agentName: `Claude Code - ${projectName}`
183
- });
184
- } catch {
185
- }
186
- return ask();
187
- };
188
- var handlePreToolUse = async (input) => {
189
- try {
190
- const apiKey = getApiKey();
191
- const policy = await getPolicy(apiKey);
192
- const toolPolicy = resolvePolicy(policy, input.tool_name);
193
- if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") {
194
- return allow();
195
- }
196
- const description = describeToolCall(input.tool_name, input.tool_input, "hook");
197
- const projectName = basename(input.cwd ?? process.cwd());
198
- switch (toolPolicy.mode) {
199
- case "push_only":
200
- return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction);
201
- case "terminal_only":
202
- return handleTerminalOnly();
203
- case "push_first":
204
- return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds);
205
- case "notify_only":
206
- return handleNotifyOnly(apiKey, description, projectName);
207
- default:
208
- return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds);
209
- }
210
- } catch {
211
- return ask("Pushary unavailable, falling back to terminal approval");
212
- }
213
- };
214
-
215
- export {
216
- getPolicy,
217
- resolvePolicy,
218
- handlePreToolUse
219
- };