@pushary/agent-hooks 0.23.0 → 0.24.0

package/dist/chunk-U4SSWRVM.js

@@ -0,0 +1,194 @@
+import {
+  denyReasonFrom,
+  isDeferAnswer
+} from "./chunk-KQYIHZ5E.js";
+import {
+  DEFAULT_SESSION,
+  askUser,
+  deriveAction,
+  deriveActionBody,
+  deriveBlocker,
+  deriveToolTarget,
+  describeToolCall,
+  fetchModeState,
+  getMachineId,
+  getPolicy,
+  readLastPrompt,
+  readLastUserPrompt,
+  resolvePolicy,
+  savePendingQuestion,
+  sendNotification,
+  waitForAnswer
+} from "./chunk-OQZH5PVA.js";
+import {
+  getApiKey
+} from "./chunk-NKXSILEW.js";
+
+// src/hook.ts
+import { basename } from "path";
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var allow = () => ({
+  hookSpecificOutput: {
+    hookEventName: "PreToolUse",
+    permissionDecision: "allow"
+  }
+});
+var deny = (reason) => ({
+  hookSpecificOutput: {
+    hookEventName: "PreToolUse",
+    permissionDecision: "deny",
+    permissionDecisionReason: reason
+  }
+});
+var ask = (reason) => ({
+  hookSpecificOutput: {
+    hookEventName: "PreToolUse",
+    permissionDecision: "ask",
+    ...reason ? { permissionDecisionReason: reason } : {}
+  }
+});
+var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
+  while (Date.now() < deadlineMs) {
+    const remaining = Math.min(Math.max(deadlineMs - Date.now(), 1e3), 3e4);
+    let answer;
+    try {
+      answer = await waitForAnswer(apiKey, correlationId, remaining);
+    } catch {
+      if (Date.now() + pollInterval >= deadlineMs) break;
+      await sleep(pollInterval);
+      continue;
+    }
+    if (answer.answered) return answer;
+    if (Date.now() + pollInterval >= deadlineMs) break;
+    await sleep(pollInterval);
+  }
+  return { answered: false };
+};
+var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget, decision) => {
+  let result;
+  try {
+    result = await askUser(apiKey, {
+      question: `Allow ${description}?`,
+      type: "confirm",
+      context: `Agent wants to run this in ${projectName}`,
+      agentName: `Claude Code - ${projectName}`,
+      sessionId,
+      machineId,
+      toolName,
+      toolTarget,
+      ...decision
+    });
+  } catch {
+    switch (timeoutAction) {
+      case "approve":
+        return allow();
+      case "deny":
+        return deny("Push notification failed, denying per policy");
+      default:
+        return ask("Push notification failed, asking in terminal");
+    }
+  }
+  const deadline = Date.now() + timeoutSeconds * 1e3;
+  const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
+  if (answer.answered) {
+    if (isDeferAnswer(answer.value)) return ask("Handling on your machine");
+    return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value));
+  }
+  switch (timeoutAction) {
+    case "approve":
+      return allow();
+    case "deny":
+      return deny("No response within timeout");
+    default:
+      return ask("No push response, asking in terminal");
+  }
+};
+var handleTerminalOnly = () => {
+  return ask();
+};
+var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds, sessionId, machineId, toolName, toolTarget, decision) => {
+  let result;
+  try {
+    result = await askUser(apiKey, {
+      question: `Allow ${description}?`,
+      type: "confirm",
+      context: `Agent wants to run this in ${projectName}`,
+      agentName: `Claude Code - ${projectName}`,
+      sessionId,
+      machineId,
+      toolName,
+      toolTarget,
+      ...decision
+    });
+  } catch {
+    return ask("Push notification failed, asking in terminal");
+  }
+  const deadline = Date.now() + pushFirstSeconds * 1e3;
+  const answer = await pollForAnswer(apiKey, result.correlationId, deadline, 1500);
+  if (answer.answered) {
+    if (isDeferAnswer(answer.value)) return ask("Handling on your machine");
+    return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value));
+  }
+  savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId);
+  return ask("Sent as push notification. You can also approve here.");
+};
+var handleNotifyOnly = async (apiKey, description, projectName, sessionId, machineId) => {
+  try {
+    await sendNotification(apiKey, {
+      title: "Agent needs approval",
+      body: description,
+      agentName: `Claude Code - ${projectName}`,
+      sessionId,
+      machineId
+    });
+  } catch {
+  }
+  return ask();
+};
+var handlePreToolUse = async (input) => {
+  try {
+    const apiKey = getApiKey();
+    const modeState = await fetchModeState(apiKey, input.session_id);
+    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    if (modeState.kill) {
+      return deny("Stopped by user \u2014 this agent was halted from Pushary");
+    }
+    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
+    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") {
+      return allow();
+    }
+    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
+      return deny(`Denied by policy for ${toolPolicy.tool}`);
+    }
+    const description = describeToolCall(input.tool_name, input.tool_input, "hook");
+    const projectName = basename(input.cwd ?? process.cwd());
+    const sessionId = input.session_id;
+    const machineId = getMachineId();
+    const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+    const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
+    const decision = {
+      intent,
+      action: deriveAction(input.tool_name, input.tool_input),
+      blocker: deriveBlocker(toolPolicy.mode),
+      actionBody: deriveActionBody(input.tool_name, input.tool_input)
+    };
+    switch (toolPolicy.mode) {
+      case "push_only":
+        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget, decision);
+      case "terminal_only":
+        return handleTerminalOnly();
+      case "push_first":
+        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+      case "notify_only":
+        return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
+      default:
+        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+    }
+  } catch {
+    return ask("Pushary unavailable, falling back to terminal approval");
+  }
+};
+
+export {
+  handlePreToolUse
+};

package/dist/src/index.d.ts

@@ -24,6 +24,17 @@ interface ReceiptMeta {
     ok: boolean;
 }
 
+declare const getPolicy: (apiKey: string, expectedVersion?: string | null) => Promise<PolicyConfig>;
+type AutoResolveOrigin = 'safe_readonly' | 'policy_timeout';
+declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>) => ToolPolicy;
+interface ModeState {
+    readonly mode: ApprovalMode | null;
+    readonly kill: boolean;
+    readonly policyVersion: string | null;
+}
+declare const fetchModeState: (apiKey: string, sessionId?: string) => Promise<ModeState>;
+declare const fetchModeOverride: (apiKey: string) => Promise<ApprovalMode | null>;
+
 interface UsageReport {
     readonly tokensIn: number;
     readonly tokensOut: number;
@@ -46,6 +57,10 @@ interface AgentEvent {
     error?: string;
     taskTitle?: string;
     decisionSource?: DecisionSource;
+    decisionOrigin?: AutoResolveOrigin;
+    toolName?: string;
+    toolTarget?: string;
+    agents?: readonly string[];
     meta?: ReceiptMeta;
     usage?: UsageReport;
 }
@@ -111,16 +126,6 @@ declare const askUser: (apiKey: string, params: AskUserParams, timeoutMs?: numbe
 declare const waitForAnswer: (apiKey: string, correlationId: string, timeoutMs?: number) => Promise<WaitForAnswerResponse>;
 declare const cancelQuestion: (apiKey: string, correlationId: string) => Promise<void>;
 
-declare const getPolicy: (apiKey: string, expectedVersion?: string | null) => Promise<PolicyConfig>;
-declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>) => ToolPolicy;
-interface ModeState {
-    readonly mode: ApprovalMode | null;
-    readonly kill: boolean;
-    readonly policyVersion: string | null;
-}
-declare const fetchModeState: (apiKey: string, sessionId?: string) => Promise<ModeState>;
-declare const fetchModeOverride: (apiKey: string) => Promise<ApprovalMode | null>;
-
 declare const getApiKey: () => string;
 declare const getBaseUrl: () => string;
 

package/dist/src/index.js

@@ -1,6 +1,6 @@
 import {
   handlePreToolUse
-} from "../chunk-FGZZRCOG.js";
+} from "../chunk-U4SSWRVM.js";
 import "../chunk-KQYIHZ5E.js";
 import {
   askUser,
@@ -14,8 +14,7 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-M4GDBGXF.js";
-import "../chunk-WPVL6VIT.js";
+} from "../chunk-OQZH5PVA.js";
 import "../chunk-DWED7BS3.js";
 import {
   getApiKey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "author": "Pushary <business@pushary.com>",
   "homepage": "https://pushary.com",