@pushary/agent-hooks 0.22.0 → 0.24.0

package/data/cursor-plugin/README.md

@@ -48,7 +48,7 @@ Add this to `.cursor/mcp.json` in your project, or `~/.cursor/mcp.json` for ever
     "pushary": {
       "type": "http",
       "url": "https://pushary.com/api/mcp/mcp",
-      "headers": { "Authorization": "Bearer ${PUSHARY_API_KEY}" }
+      "headers": { "Authorization": "Bearer ${env:PUSHARY_API_KEY}" }
     }
   }
 }
@@ -67,6 +67,10 @@ source ~/.zshrc
 
 Install the Pushary app on your phone (or turn on web push) so the agent can reach you.
 
+## Troubleshooting
+
+macOS GUI apps do not read `.zshrc`. If Settings > MCP shows pushary in red after you set the env var, launch Cursor from a terminal where `PUSHARY_API_KEY` is exported, or set the variable system-wide so GUI apps see it.
+
 ## What is in the plugin
 
 | Part | File | What it does |

package/data/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "type": "http",
       "url": "https://pushary.com/api/mcp/mcp",
       "headers": {
-        "Authorization": "Bearer ${PUSHARY_API_KEY}"
+        "Authorization": "Bearer ${env:PUSHARY_API_KEY}"
       }
     }
   }

package/dist/bin/pushary-clean.js

@@ -8,7 +8,7 @@ import {
   removeCodexHooks,
   removeGeminiSettings,
   removeInstructionBlock
-} from "../chunk-BHAMEPOP.js";
+} from "../chunk-JPRRYC5X.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, writeFileSync, rmSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -5,6 +5,7 @@ import {
 } from "../chunk-KQYIHZ5E.js";
 import {
   CODEX_AGENT,
+  DECISION_LINE_MAX,
   DEFAULT_SESSION,
   askUser,
   codexAllow,
@@ -31,10 +32,7 @@ import {
   toCodexWire,
   toPolicyLookup,
   waitForAnswer
-} from "../chunk-M4GDBGXF.js";
-import {
-  DECISION_LINE_MAX
-} from "../chunk-WPVL6VIT.js";
+} from "../chunk-OQZH5PVA.js";
 import "../chunk-DWED7BS3.js";
 import {
   getApiKey

package/dist/bin/pushary-codex.js

@@ -4,8 +4,7 @@ import {
   getMachineId,
   reportEvent,
   waitForAnswer
-} from "../chunk-M4GDBGXF.js";
-import "../chunk-WPVL6VIT.js";
+} from "../chunk-OQZH5PVA.js";
 import "../chunk-DWED7BS3.js";
 import {
   getApiKey

package/dist/bin/pushary-doctor.js

@@ -8,7 +8,7 @@ import {
   missingCodexHookEvents,
   missingGeminiHookEvents,
   untrustedCodexHookEvents
-} from "../chunk-BHAMEPOP.js";
+} from "../chunk-JPRRYC5X.js";
 import {
   callMcpTool,
   sendMcpRequest
@@ -283,7 +283,7 @@ var main = async () => {
     const cursorAuth = cursorServers.pushary?.headers?.Authorization;
     if (!cursorAuth) {
       check(false, "Cursor: API key linked", "no Authorization in plugin mcp.json \u2014 re-run setup");
-    } else if (cursorAuth.includes("${PUSHARY_API_KEY}")) {
+    } else if (cursorAuth.includes("PUSHARY_API_KEY")) {
       check(false, "Cursor: API key linked", "plugin relies on $PUSHARY_API_KEY; re-run setup to embed the key so the gate works when Cursor is launched from the GUI");
     } else {
       check(true, "Cursor: API key linked", "embedded in plugin mcp.json");

package/dist/bin/pushary-gemini-hook.js

@@ -4,6 +4,7 @@ import {
   isDeferAnswer
 } from "../chunk-KQYIHZ5E.js";
 import {
+  DECISION_LINE_MAX,
   DEFAULT_SESSION,
   askUser,
   deriveActionBody,
@@ -23,10 +24,7 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-M4GDBGXF.js";
-import {
-  DECISION_LINE_MAX
-} from "../chunk-WPVL6VIT.js";
+} from "../chunk-OQZH5PVA.js";
 import "../chunk-DWED7BS3.js";
 import {
   getApiKey

package/dist/bin/pushary-hook.js

@@ -1,10 +1,9 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-FGZZRCOG.js";
+} from "../chunk-U4SSWRVM.js";
 import "../chunk-KQYIHZ5E.js";
-import "../chunk-M4GDBGXF.js";
-import "../chunk-WPVL6VIT.js";
+import "../chunk-OQZH5PVA.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-NKXSILEW.js";
 

package/dist/bin/pushary-post-hook.js

@@ -1,8 +1,7 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-M4GDBGXF.js";
-import "../chunk-WPVL6VIT.js";
+} from "../chunk-OQZH5PVA.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-NKXSILEW.js";
 

package/dist/bin/pushary-prompt-hook.js

@@ -1,8 +1,7 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-M4GDBGXF.js";
-import "../chunk-WPVL6VIT.js";
+} from "../chunk-OQZH5PVA.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-NKXSILEW.js";
 

package/dist/bin/pushary-setup.js

@@ -13,11 +13,15 @@ import {
   execNpm,
   npmErrorMessage,
   renderAgentInstructions,
+  renderProjectAgentInstructions,
   writeInstructionBlock
-} from "../chunk-BHAMEPOP.js";
+} from "../chunk-JPRRYC5X.js";
 import {
-  isValidApiKey
-} from "../chunk-WPVL6VIT.js";
+  isValidApiKey,
+  reportEvent
+} from "../chunk-OQZH5PVA.js";
+import "../chunk-DWED7BS3.js";
+import "../chunk-NKXSILEW.js";
 
 // bin/pushary-setup.ts
 import { existsSync, readFileSync, writeFileSync, appendFileSync, mkdirSync, cpSync, rmSync, chmodSync } from "fs";
@@ -857,6 +861,26 @@ var AGENT_SETUP = {
   cursor: setupCursor,
   custom: setupCustom
 };
+var PROJECT_INSTRUCTION_TARGETS = {
+  claude_code: { file: "CLAUDE.md", label: "Claude Code" },
+  codex: { file: "AGENTS.md", label: "Codex" }
+};
+var offerProjectInstructions = async (agents) => {
+  const targets = agents.map((agent) => PROJECT_INSTRUCTION_TARGETS[agent]).filter((target) => target !== void 0);
+  if (targets.length === 0 || !process.stdout.isTTY) return;
+  console.log();
+  const wanted = await confirm({
+    message: "Add Pushary instructions to this project's CLAUDE.md/AGENTS.md so your whole team's agents can use phone approvals?",
+    default: false
+  });
+  if (!wanted) return;
+  for (const target of targets) {
+    await spinner(`Writing managed block to ${join(process.cwd(), target.file)}`, async () => {
+      writeInstructionBlock(join(process.cwd(), target.file), renderProjectAgentInstructions(target.label));
+    }, { optional: true });
+  }
+  console.log(`  ${dim2("Commit the file to share it. Teammates without a key fall back to the terminal.")}`);
+};
 var main = async () => {
   const version = getPackageVersion();
   console.log();
@@ -939,9 +963,11 @@ var main = async () => {
   ${dim2("No agents selected. API key saved.")}`);
   } else {
     const failed = [];
+    const completed = [];
     for (const agent of agents) {
       try {
         await AGENT_SETUP[agent](trimmedKey);
+        completed.push(agent);
       } catch (err) {
         failed.push(agent.replace("_", " "));
         console.log(`  ${yellow2("!")} ${agent.replace("_", " ")} setup failed: ${formatError(err)}`);
@@ -952,6 +978,16 @@ var main = async () => {
       console.log();
       console.log(`  ${yellow2("!")} Failed: ${failed.join(", ")} ${dim2("(others completed successfully)")}`);
     }
+    await offerProjectInstructions(agents);
+    if (completed.length > 0) {
+      try {
+        await reportEvent(
+          { event: "agent_setup_completed", agentType: "setup", agents: completed },
+          { maxAttempts: 1, timeoutMs: 2e3 }
+        );
+      } catch {
+      }
+    }
   }
   if (connectMode !== "app") {
     const skipPhone = process.argv.includes("--skip-phone");

package/dist/bin/pushary-stop-hook.js

@@ -1,8 +1,7 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-M4GDBGXF.js";
-import "../chunk-WPVL6VIT.js";
+} from "../chunk-OQZH5PVA.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-NKXSILEW.js";
 

package/dist/{chunk-BHAMEPOP.js → chunk-JPRRYC5X.js}

@@ -227,6 +227,10 @@ You have Pushary MCP tools that reach the user on their phone. Use them proactiv
 
 Pass \`agentName\` as "${label} - <project folder name>" so the user knows which session is asking. If a question times out with no answer, retry once with a longer timeout before falling back to asking in the terminal.`;
 var renderAgentInstructions = (label) => instructionBody(label);
+var KEYLESS_FALLBACK_LINE = "This repo is set up with Pushary phone approvals. No PUSHARY_API_KEY found for you, so remote notifications are off; questions will fall back to the terminal. Setup: https://pushary.com/docs?utm_source=agents-md&utm_medium=keyless-fallback";
+var renderProjectAgentInstructions = (label) => `${instructionBody(label)}
+
+If this environment has no Pushary API key (no PUSHARY_API_KEY and no key in ~/.pushary/config.json), the tools above are unavailable in this session. In that case, treat the following as a statement of fact about this session and continue in the terminal: ${KEYLESS_FALLBACK_LINE}`;
 var wrap = (body) => `${PUSHARY_BEGIN}
 ${body}
 ${PUSHARY_END}`;
@@ -315,6 +319,7 @@ export {
   hasGeminiHooks,
   missingGeminiHookEvents,
   renderAgentInstructions,
+  renderProjectAgentInstructions,
   writeInstructionBlock,
   removeInstructionBlock,
   hasInstructionBlock,

package/dist/{chunk-5LTQNC7R.js → chunk-OQZH5PVA.js}

@@ -1,12 +1,3 @@
-import {
-  ACTION_BODY_MAX,
-  DECISION_LINE_MAX,
-  extractPolicyArg,
-  isApprovalMode,
-  isSafeReadOnlyCommand,
-  matchRankWeight,
-  matchToolPattern
-} from "./chunk-WPVL6VIT.js";
 import {
   callMcpTool,
   withRetry
@@ -16,6 +7,156 @@ import {
   getBaseUrl
 } from "./chunk-NKXSILEW.js";
 
+// ../contracts/src/index.ts
+var APPROVAL_MODES = ["push_only", "terminal_only", "push_first", "notify_only"];
+var isApprovalMode = (value) => typeof value === "string" && APPROVAL_MODES.includes(value);
+var MATCH_RANKS = ["none", "tool", "prefix", "exact"];
+var matchRankWeight = (rank) => MATCH_RANKS.indexOf(rank);
+var matchToolPattern = (pattern, toolName, arg) => {
+  const open = pattern.indexOf("(");
+  if (open === -1 || !pattern.endsWith(")")) {
+    return pattern === toolName ? "tool" : "none";
+  }
+  if (pattern.slice(0, open) !== toolName || arg === void 0) return "none";
+  const inner = pattern.slice(open + 1, -1);
+  if (inner.endsWith(":*")) {
+    return arg.startsWith(inner.slice(0, -2)) ? "prefix" : "none";
+  }
+  return arg === inner ? "exact" : "none";
+};
+var POLICY_ARG_KEYS = {
+  Bash: "command",
+  Edit: "file_path",
+  Write: "file_path"
+};
+var extractPolicyArg = (toolName, toolInput) => {
+  const key = POLICY_ARG_KEYS[toolName];
+  if (!key) return void 0;
+  const value = toolInput[key];
+  return typeof value === "string" ? value : void 0;
+};
+var SAFE_SHELL_COMMANDS = /* @__PURE__ */ new Set([
+  "ls",
+  "pwd",
+  "cd",
+  "cat",
+  "head",
+  "tail",
+  "wc",
+  "echo",
+  "printf",
+  "which",
+  "type",
+  "whoami",
+  "id",
+  "uname",
+  "arch",
+  "printenv",
+  "locale",
+  "tty",
+  "dirname",
+  "basename",
+  "realpath",
+  "readlink",
+  "stat",
+  "cut",
+  "nl",
+  "tr",
+  "comm",
+  "diff",
+  "cmp",
+  "grep",
+  "egrep",
+  "fgrep",
+  "jq",
+  "cksum",
+  "md5sum",
+  "sha1sum",
+  "sha256sum",
+  "du",
+  "df",
+  "ps",
+  "true"
+]);
+var SAFE_GIT_SUBCOMMANDS = /* @__PURE__ */ new Set([
+  "status",
+  "log",
+  "diff",
+  "show",
+  "rev-parse",
+  "describe",
+  "blame",
+  "shortlog",
+  "ls-files",
+  "ls-tree",
+  "cat-file",
+  "whatchanged",
+  "rev-list",
+  "name-rev",
+  "for-each-ref",
+  "var",
+  "count-objects"
+]);
+var GIT_WRITE_FLAGS = (token) => token === "--output" || token.startsWith("--output=");
+var UNSAFE_SHELL_CHARS = /[;&|<>(){}`\\\n\r]/;
+var basenameOf = (token) => {
+  const slash = Math.max(token.lastIndexOf("/"), token.lastIndexOf("\\"));
+  return slash === -1 ? token : token.slice(slash + 1);
+};
+var tokenizeShellCommand = (command) => {
+  const tokens = [];
+  let current = "";
+  let quote = null;
+  let started = false;
+  for (const ch of command) {
+    if (quote) {
+      if (ch === quote) quote = null;
+      else current += ch;
+      started = true;
+      continue;
+    }
+    if (ch === '"' || ch === "'") {
+      quote = ch;
+      started = true;
+      continue;
+    }
+    if (ch === " " || ch === "	") {
+      if (started) {
+        tokens.push(current);
+        current = "";
+        started = false;
+      }
+      continue;
+    }
+    current += ch;
+    started = true;
+  }
+  if (quote) return null;
+  if (started) tokens.push(current);
+  return tokens;
+};
+var isSafeReadOnlyCommand = (command) => {
+  const trimmed = command.trim();
+  if (!trimmed || trimmed.length > 2e3) return false;
+  if (UNSAFE_SHELL_CHARS.test(trimmed)) return false;
+  const tokens = tokenizeShellCommand(trimmed);
+  if (!tokens || tokens.length === 0) return false;
+  const first = tokens[0];
+  if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(first) || first.includes("$")) return false;
+  const exe = basenameOf(first);
+  if (exe === "git") {
+    const sub = tokens[1];
+    if (!sub || sub.startsWith("-")) return false;
+    if (!SAFE_GIT_SUBCOMMANDS.has(sub)) return false;
+    return !tokens.some(GIT_WRITE_FLAGS);
+  }
+  return SAFE_SHELL_COMMANDS.has(exe);
+};
+var API_KEY_PATTERN = /^pk_[a-f0-9]+\.[a-f0-9]+$/;
+var isValidApiKey = (value) => API_KEY_PATTERN.test(value);
+var ACTION_BODY_MAX = 4e3;
+var DECISION_LINE_MAX = 500;
+
 // src/validate.ts
 var isPolicyConfig = (data) => {
   if (!data || typeof data !== "object") return false;
@@ -132,6 +273,15 @@ var autoApprove = (tool) => ({
   mode: "terminal_only",
   pushFirstSeconds: 0
 });
+var resolveAutoResolveOrigin = (config, toolName, toolInput) => {
+  const arg = toolInput ? extractPolicyArg(toolName, toolInput) : void 0;
+  const match = findBestMatch(config.policies, toolName, arg);
+  const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
+  if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
+    return "safe_readonly";
+  }
+  return "policy_timeout";
+};
 var resolvePolicy = (config, toolName, modeOverride, toolInput) => {
   const arg = toolInput ? extractPolicyArg(toolName, toolInput) : void 0;
   const match = findBestMatch(config.policies, toolName, arg);
@@ -305,6 +455,12 @@ var deriveBlocker = (mode, reason) => {
   return text.slice(0, DECISION_LINE_MAX);
 };
 
+// src/identity.ts
+import { createHash as createHash2 } from "crypto";
+import { hostname } from "os";
+var deriveMachineId = (host) => createHash2("sha256").update(host).digest("hex").slice(0, 8);
+var getMachineId = () => deriveMachineId(hostname());
+
 // src/pending.ts
 import { join as join2 } from "path";
 import { tmpdir as tmpdir2 } from "os";
@@ -351,12 +507,6 @@ var removePendingSession = (sessionId) => {
   }
 };
 
-// src/identity.ts
-import { createHash as createHash2 } from "crypto";
-import { hostname } from "os";
-var deriveMachineId = (host) => createHash2("sha256").update(host).digest("hex").slice(0, 8);
-var getMachineId = () => deriveMachineId(hostname());
-
 // src/usage.ts
 import { closeSync, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync2, readSync, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
 import { join as join3 } from "path";
@@ -606,29 +756,48 @@ var permissionTimeoutDecision = (timeoutAction) => {
 };
 var preToolUseTimeoutDecision = (timeoutAction, denyReason = "No response within timeout") => timeoutAction === "deny" ? codexDeny(denyReason) : codexPass();
 
-// src/events.ts
-import { basename, join as join4 } from "path";
-import { createHash as createHash3 } from "crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, statSync as statSync3, writeFileSync as writeFileSync4 } from "fs";
+// src/throttle.ts
+import { join as join4 } from "path";
 import { tmpdir as tmpdir4 } from "os";
-var INTENT_DIR = join4(tmpdir4(), "pushary-intent");
+import { createHash as createHash3 } from "crypto";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, statSync as statSync3, writeFileSync as writeFileSync4 } from "fs";
+var THROTTLE_DIR = join4(tmpdir4(), "pushary-throttle");
+var markerPath = (key) => join4(THROTTLE_DIR, createHash3("sha256").update(key).digest("hex").slice(0, 16));
+var throttlePass = (key, windowMs) => {
+  try {
+    const path = markerPath(key);
+    if (existsSync3(path) && Date.now() - statSync3(path).mtimeMs < windowMs) return false;
+    mkdirSync3(THROTTLE_DIR, { recursive: true });
+    writeFileSync4(path, "", "utf-8");
+    return true;
+  } catch {
+    return false;
+  }
+};
+
+// src/events.ts
+import { basename, join as join5 } from "path";
+import { createHash as createHash4 } from "crypto";
+import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync3, statSync as statSync4, writeFileSync as writeFileSync5 } from "fs";
+import { tmpdir as tmpdir5 } from "os";
+var INTENT_DIR = join5(tmpdir5(), "pushary-intent");
 var INTENT_MAX_BYTES = 2048;
 var INTENT_GRACE_MS = 10 * 60 * 1e3;
 var sanitizeSession = (sessionId) => sessionId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || DEFAULT_SESSION;
-var intentFile = (sessionId) => join4(INTENT_DIR, sanitizeSession(sessionId));
+var intentFile = (sessionId) => join5(INTENT_DIR, sanitizeSession(sessionId));
 var saveLastPrompt = (sessionId, prompt) => {
   try {
     const trimmed = prompt.replace(/\s+/g, " ").trim().slice(0, INTENT_MAX_BYTES);
     if (!trimmed) return;
-    mkdirSync3(INTENT_DIR, { recursive: true });
-    writeFileSync4(intentFile(sessionId), trimmed, "utf-8");
+    mkdirSync4(INTENT_DIR, { recursive: true });
+    writeFileSync5(intentFile(sessionId), trimmed, "utf-8");
   } catch {
   }
 };
 var readLastPrompt = (sessionId) => {
   try {
     const path = intentFile(sessionId);
-    if (isDefaultSession(sessionId) && statSync3(path).mtimeMs < Date.now() - INTENT_GRACE_MS) return void 0;
+    if (isDefaultSession(sessionId) && statSync4(path).mtimeMs < Date.now() - INTENT_GRACE_MS) return void 0;
     const value = readFileSync3(path, "utf-8").trim();
     return value.length > 0 ? value : void 0;
   } catch {
@@ -653,9 +822,9 @@ var cleanupPendingQuestions = async (sessionId) => {
 var CLAUDE_CODE_AGENT = { type: "claude_code", label: "Claude Code" };
 var POLICY_CACHE_TTL_MS = 5 * 60 * 1e3;
 var readFreshCachedPolicy = (apiKey) => {
-  const hash = createHash3("sha256").update(apiKey).digest("hex").slice(0, 12);
-  const path = join4(tmpdir4(), `pushary-policy-${hash}.json`);
-  if (!existsSync3(path)) return null;
+  const hash = createHash4("sha256").update(apiKey).digest("hex").slice(0, 12);
+  const path = join5(tmpdir5(), `pushary-policy-${hash}.json`);
+  if (!existsSync4(path)) return null;
   const cached = JSON.parse(readFileSync3(path, "utf-8"));
   if (!isPolicyConfig(cached)) return null;
   if (!cached._cachedAt || Date.now() - cached._cachedAt >= POLICY_CACHE_TTL_MS) return null;
@@ -674,6 +843,24 @@ var deriveDecisionSource = (toolName, toolInput, liveMode) => {
     return void 0;
   }
 };
+var deriveAutoDecisionBeacon = (toolName, toolInput, liveMode) => {
+  try {
+    if (liveMode.kill) return void 0;
+    const policy = readFreshCachedPolicy(getApiKey());
+    if (!policy) return void 0;
+    const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput);
+    if (resolved.timeoutSeconds !== 0 || resolved.timeoutAction !== "approve") return void 0;
+    return {
+      decisionOrigin: resolveAutoResolveOrigin(policy, toolName, toolInput),
+      toolName,
+      toolTarget: deriveToolTarget(toolName, toolInput)
+    };
+  } catch {
+    return void 0;
+  }
+};
+var AUTO_DECISION_WINDOW_MS = 15 * 60 * 1e3;
+var HOOK_ACTIVE_WINDOW_MS = 30 * 60 * 1e3;
 var deriveUsage = (transcriptPath, sessionId) => {
   if (!transcriptPath || process.env.PUSHARY_COST_TRACKING === "off") return void 0;
   try {
@@ -682,6 +869,7 @@ var deriveUsage = (transcriptPath, sessionId) => {
     return void 0;
   }
 };
+var detectInstallMode = () => (process.argv[1] ?? "").includes("_npx") ? "npx" : "cli";
 var reportEvent = async (event, options = {}) => {
   const apiKey = getApiKey();
   const baseUrl = getBaseUrl();
@@ -694,7 +882,8 @@ var reportEvent = async (event, options = {}) => {
       },
       body: JSON.stringify({
         ...event,
-        machineId: event.machineId ?? getMachineId()
+        machineId: event.machineId ?? getMachineId(),
+        installMode: detectInstallMode()
       }),
       signal: AbortSignal.timeout(options.timeoutMs ?? 1e4)
     });
@@ -712,9 +901,12 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
     const lookup = toPolicyLookup(input.tool_name, input.tool_input);
     const isError = isToolResultError(input.tool_result);
     const receiptsEnabled = process.env.PUSHARY_RECEIPTS !== "off";
+    const sessionKey = input.session_id || DEFAULT_SESSION;
     const liveMode = await fetchModeState(getApiKey(), input.session_id);
-    await Promise.allSettled([
-      cleanupPendingQuestions(input.session_id || DEFAULT_SESSION),
+    const decisionSource = deriveDecisionSource(lookup.tool, lookup.input, liveMode);
+    const beacon = decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode) : void 0;
+    const reports = [
+      cleanupPendingQuestions(sessionKey),
       reportEvent({
         event: isError ? "tool_error" : "tool_complete",
         agentType: agent.type,
@@ -722,11 +914,26 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
         action,
         sessionId: input.session_id,
         error: isError ? String(input.tool_result?.error ?? input.tool_result?.stderr ?? "").slice(0, 500) : void 0,
-        decisionSource: deriveDecisionSource(lookup.tool, lookup.input, liveMode),
+        decisionSource,
+        ...beacon ? { decisionOrigin: beacon.decisionOrigin, toolName: beacon.toolName, toolTarget: beacon.toolTarget } : {},
         meta: receiptsEnabled ? deriveReceiptMeta(lookup.tool, lookup.input, input.tool_result, input.cwd ?? process.cwd()) : void 0,
         usage: deriveUsage(input.transcript_path, input.session_id)
       })
-    ]);
+    ];
+    if (throttlePass(`hookactive:${sessionKey}`, HOOK_ACTIVE_WINDOW_MS)) {
+      reports.push(
+        reportEvent(
+          {
+            event: "agent_hook_active",
+            agentType: agent.type,
+            agentName: `${agent.label} - ${projectName}`,
+            sessionId: input.session_id
+          },
+          { maxAttempts: 1, timeoutMs: 800 }
+        )
+      );
+    }
+    await Promise.allSettled(reports);
   } catch {
   }
 };
@@ -789,6 +996,8 @@ var handleNotification = async (input) => {
 };
 
 export {
+  isValidApiKey,
+  DECISION_LINE_MAX,
   askUser,
   waitForAnswer,
   cancelQuestion,
@@ -802,9 +1011,9 @@ export {
   deriveActionBody,
   deriveAction,
   deriveBlocker,
+  getMachineId,
   DEFAULT_SESSION,
   savePendingQuestion,
-  getMachineId,
   readLastUserPrompt,
   CODEX_AGENT,
   codexAllow,

package/dist/{chunk-3LC4YUMA.js → chunk-U4SSWRVM.js}

@@ -19,7 +19,7 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "./chunk-5LTQNC7R.js";
+} from "./chunk-OQZH5PVA.js";
 import {
   getApiKey
 } from "./chunk-NKXSILEW.js";