@pushary/agent-hooks 0.23.0 → 0.25.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (89) hide show
  1. package/dist/bin/pushary-codex-hook.js +2 -4
  2. package/dist/bin/pushary-codex.js +1 -2
  3. package/dist/bin/pushary-gemini-hook.js +2 -4
  4. package/dist/bin/pushary-hook.js +2 -3
  5. package/dist/bin/pushary-post-hook.js +1 -2
  6. package/dist/bin/pushary-prompt-hook.js +1 -2
  7. package/dist/bin/pushary-setup.js +16 -2
  8. package/dist/bin/pushary-stop-hook.js +1 -2
  9. package/dist/chunk-22CV7V7A.js +38 -0
  10. package/dist/chunk-2BE2IPMO.js +315 -0
  11. package/dist/chunk-2CRLBMOX.js +244 -0
  12. package/dist/chunk-2HMNOZPY.js +109 -0
  13. package/dist/chunk-2I6DLXJN.js +219 -0
  14. package/dist/chunk-2Q6XPZ4Q.js +395 -0
  15. package/dist/chunk-3LC4YUMA.js +194 -0
  16. package/dist/chunk-3MIR7ODJ.js +112 -0
  17. package/dist/chunk-3QZESA66.js +222 -0
  18. package/dist/chunk-4Z4MB37G.js +96 -0
  19. package/dist/chunk-5GFUI5N6.js +132 -0
  20. package/dist/chunk-5JEDLXEC.js +99 -0
  21. package/dist/chunk-5LTQNC7R.js +824 -0
  22. package/dist/chunk-5QHQVXWN.js +174 -0
  23. package/dist/chunk-6A3WCJO2.js +416 -0
  24. package/dist/chunk-6QWFMVCD.js +328 -0
  25. package/dist/chunk-6SRXMZAN.js +99 -0
  26. package/dist/chunk-7PTU7TGE.js +96 -0
  27. package/dist/chunk-AB4KX4XT.js +109 -0
  28. package/dist/chunk-AC4UYAGX.js +136 -0
  29. package/dist/chunk-ACE77TKQ.js +328 -0
  30. package/dist/chunk-BHAMEPOP.js +323 -0
  31. package/dist/chunk-BYNYYZWW.js +412 -0
  32. package/dist/chunk-C5TFTNHG.js +244 -0
  33. package/dist/chunk-CH53PBQN.js +265 -0
  34. package/dist/chunk-DF3BM6BF.js +195 -0
  35. package/dist/chunk-DKZVKEOW.js +175 -0
  36. package/dist/chunk-EMPL27ZV.js +96 -0
  37. package/dist/chunk-EQJXMEIR.js +175 -0
  38. package/dist/chunk-FXYTRZHC.js +177 -0
  39. package/dist/chunk-GTJGZBTQ.js +328 -0
  40. package/dist/chunk-GYPPVD3P.js +1047 -0
  41. package/dist/chunk-HJMFYDWY.js +222 -0
  42. package/dist/chunk-HRQEECB6.js +315 -0
  43. package/dist/chunk-HWEMAAOY.js +370 -0
  44. package/dist/chunk-IBWCHA5M.js +10 -0
  45. package/dist/chunk-KTM4ZQ3W.js +96 -0
  46. package/dist/chunk-KTP2EPVB.js +27 -0
  47. package/dist/chunk-KYARP7KP.js +97 -0
  48. package/dist/chunk-M2N5DYWN.js +247 -0
  49. package/dist/chunk-M5F2L4KF.js +177 -0
  50. package/dist/chunk-M6S3M6E3.js +244 -0
  51. package/dist/chunk-N7VXDBQU.js +6 -0
  52. package/dist/chunk-O2QL6U6G.js +194 -0
  53. package/dist/chunk-O6A5RHWY.js +122 -0
  54. package/dist/chunk-ODUXELPM.js +219 -0
  55. package/dist/chunk-OF5WIOYS.js +129 -0
  56. package/dist/chunk-OP4QAN23.js +99 -0
  57. package/dist/chunk-P4JH2Q7Z.js +102 -0
  58. package/dist/chunk-PMD5JSV3.js +242 -0
  59. package/dist/chunk-PSSHNBEL.js +177 -0
  60. package/dist/chunk-QEPRH7JB.js +315 -0
  61. package/dist/chunk-QRXWPZKN.js +308 -0
  62. package/dist/chunk-QY4L6XHN.js +384 -0
  63. package/dist/chunk-RNWPCELY.js +176 -0
  64. package/dist/chunk-RSHN2AQ7.js +29 -0
  65. package/dist/chunk-RZLVE57X.js +38 -0
  66. package/dist/chunk-SDCIKREA.js +241 -0
  67. package/dist/chunk-SDREQWNI.js +175 -0
  68. package/dist/chunk-SH26ZOHU.js +159 -0
  69. package/dist/chunk-TRLBBLSS.js +176 -0
  70. package/dist/chunk-U6OXZPYC.js +384 -0
  71. package/dist/chunk-UIBTFZUD.js +314 -0
  72. package/dist/chunk-USUCPCUC.js +156 -0
  73. package/dist/chunk-V4GLWPD7.js +174 -0
  74. package/dist/chunk-VC6U3QGF.js +142 -0
  75. package/dist/chunk-VIST7ACL.js +88 -0
  76. package/dist/chunk-VUNL35KE.js +16 -0
  77. package/dist/chunk-VWBNI4SC.js +174 -0
  78. package/dist/chunk-W5KRWUNE.js +262 -0
  79. package/dist/chunk-WCGKLHCL.js +154 -0
  80. package/dist/chunk-WNXGIEX7.js +219 -0
  81. package/dist/chunk-XPVSZIA3.js +315 -0
  82. package/dist/chunk-Y633ZIJF.js +384 -0
  83. package/dist/chunk-YCL4GUFR.js +222 -0
  84. package/dist/chunk-YTMKB44I.js +220 -0
  85. package/dist/chunk-ZWBS3T7Q.js +244 -0
  86. package/dist/pushary-mode-T7XOPI6Z.js +83 -0
  87. package/dist/src/index.d.ts +15 -10
  88. package/dist/src/index.js +2 -3
  89. package/package.json +1 -1
@@ -0,0 +1,220 @@
1
+ import {
2
+ askUser,
3
+ describeToolCall,
4
+ isPolicyConfig,
5
+ savePendingQuestion,
6
+ sendNotification,
7
+ waitForAnswer
8
+ } from "./chunk-4Z4MB37G.js";
9
+ import {
10
+ getApiKey,
11
+ getBaseUrl,
12
+ withRetry
13
+ } from "./chunk-O6A5RHWY.js";
14
+
15
+ // src/policy.ts
16
+ import { createHash } from "crypto";
17
+ import { existsSync, readFileSync, writeFileSync } from "fs";
18
+ import { join } from "path";
19
+ import { tmpdir } from "os";
20
+ var CACHE_TTL_MS = 5 * 60 * 1e3;
21
+ var cacheFile = (apiKey) => {
22
+ const hash = createHash("sha256").update(apiKey).digest("hex").slice(0, 12);
23
+ return join(tmpdir(), `pushary-policy-${hash}.json`);
24
+ };
25
+ var fetchPolicy = async (apiKey) => {
26
+ return withRetry(async () => {
27
+ const baseUrl = getBaseUrl();
28
+ const response = await fetch(`${baseUrl}/api/mcp/policy`, {
29
+ headers: { "Authorization": `Bearer ${apiKey}` },
30
+ signal: AbortSignal.timeout(1e4)
31
+ });
32
+ if (!response.ok) {
33
+ throw new Error(`Failed to fetch policy: ${response.status}`);
34
+ }
35
+ const raw = await response.json();
36
+ if (!isPolicyConfig(raw)) throw new Error("Invalid policy response");
37
+ return raw;
38
+ }, { maxAttempts: 2 });
39
+ };
40
+ var getPolicy = async (apiKey) => {
41
+ const path = cacheFile(apiKey);
42
+ let staleCache = null;
43
+ if (existsSync(path)) {
44
+ try {
45
+ const stat = readFileSync(path, "utf-8");
46
+ const cached = JSON.parse(stat);
47
+ if (!isPolicyConfig(cached)) throw new Error("Corrupted cache");
48
+ if (!cached._cachedAt || Date.now() - cached._cachedAt < CACHE_TTL_MS) {
49
+ return cached;
50
+ }
51
+ staleCache = cached;
52
+ } catch {
53
+ }
54
+ }
55
+ try {
56
+ const policy = await fetchPolicy(apiKey);
57
+ try {
58
+ writeFileSync(path, JSON.stringify({ ...policy, _cachedAt: Date.now() }), "utf-8");
59
+ } catch {
60
+ }
61
+ return policy;
62
+ } catch {
63
+ if (staleCache) return staleCache;
64
+ throw new Error("Failed to fetch policy and no cached policy available");
65
+ }
66
+ };
67
+ var resolvePolicy = (config, toolName, modeOverride) => {
68
+ const base = config.policies.find((p) => p.tool === toolName) ?? config.policies.find((p) => p.tool === "*") ?? {
69
+ tool: toolName,
70
+ timeoutSeconds: config.defaultTimeoutSeconds,
71
+ timeoutAction: config.defaultTimeoutAction,
72
+ mode: config.defaultMode ?? "push_first",
73
+ pushFirstSeconds: config.defaultPushFirstSeconds ?? 20
74
+ };
75
+ const effectiveOverride = modeOverride ?? config.modeOverride;
76
+ if (effectiveOverride) {
77
+ return { ...base, mode: effectiveOverride };
78
+ }
79
+ return base;
80
+ };
81
+
82
+ // src/hook.ts
83
+ import { basename } from "path";
84
+ var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
85
+ var allow = () => ({
86
+ hookSpecificOutput: {
87
+ hookEventName: "PreToolUse",
88
+ permissionDecision: "allow"
89
+ }
90
+ });
91
+ var deny = (reason) => ({
92
+ hookSpecificOutput: {
93
+ hookEventName: "PreToolUse",
94
+ permissionDecision: "deny",
95
+ permissionDecisionReason: reason
96
+ }
97
+ });
98
+ var ask = (reason) => ({
99
+ hookSpecificOutput: {
100
+ hookEventName: "PreToolUse",
101
+ permissionDecision: "ask",
102
+ ...reason ? { permissionDecisionReason: reason } : {}
103
+ }
104
+ });
105
+ var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
106
+ while (Date.now() < deadlineMs) {
107
+ const remaining = Math.min(Math.max(deadlineMs - Date.now(), 1e3), 3e4);
108
+ let answer;
109
+ try {
110
+ answer = await waitForAnswer(apiKey, correlationId, remaining);
111
+ } catch {
112
+ if (Date.now() + pollInterval >= deadlineMs) break;
113
+ await sleep(pollInterval);
114
+ continue;
115
+ }
116
+ if (answer.answered) return answer;
117
+ if (Date.now() + pollInterval >= deadlineMs) break;
118
+ await sleep(pollInterval);
119
+ }
120
+ return { answered: false };
121
+ };
122
+ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction) => {
123
+ let result;
124
+ try {
125
+ result = await askUser(apiKey, {
126
+ question: `Allow ${description}?`,
127
+ type: "confirm",
128
+ context: `Agent wants to run this in ${projectName}`,
129
+ agentName: `Claude Code - ${projectName}`
130
+ });
131
+ } catch {
132
+ switch (timeoutAction) {
133
+ case "approve":
134
+ return allow();
135
+ case "deny":
136
+ return deny("Push notification failed, denying per policy");
137
+ default:
138
+ return ask("Push notification failed, asking in terminal");
139
+ }
140
+ }
141
+ const deadline = Date.now() + timeoutSeconds * 1e3;
142
+ const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
143
+ if (answer.answered) {
144
+ return answer.value === "yes" ? allow() : deny("Denied via push notification");
145
+ }
146
+ switch (timeoutAction) {
147
+ case "approve":
148
+ return allow();
149
+ case "deny":
150
+ return deny("No response within timeout");
151
+ default:
152
+ return ask("No push response, asking in terminal");
153
+ }
154
+ };
155
+ var handleTerminalOnly = () => {
156
+ return ask();
157
+ };
158
+ var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds) => {
159
+ let result;
160
+ try {
161
+ result = await askUser(apiKey, {
162
+ question: `Allow ${description}?`,
163
+ type: "confirm",
164
+ context: `Agent wants to run this in ${projectName}`,
165
+ agentName: `Claude Code - ${projectName}`
166
+ });
167
+ } catch {
168
+ return ask("Push notification failed, asking in terminal");
169
+ }
170
+ const deadline = Date.now() + pushFirstSeconds * 1e3;
171
+ const answer = await pollForAnswer(apiKey, result.correlationId, deadline, 1500);
172
+ if (answer.answered) {
173
+ return answer.value === "yes" ? allow() : deny("Denied via push notification");
174
+ }
175
+ savePendingQuestion(result.correlationId);
176
+ return ask("Sent as push notification. You can also approve here.");
177
+ };
178
+ var handleNotifyOnly = async (apiKey, description, projectName) => {
179
+ try {
180
+ await sendNotification(apiKey, {
181
+ title: "Agent needs approval",
182
+ body: description,
183
+ agentName: `Claude Code - ${projectName}`
184
+ });
185
+ } catch {
186
+ }
187
+ return ask();
188
+ };
189
+ var handlePreToolUse = async (input) => {
190
+ try {
191
+ const apiKey = getApiKey();
192
+ const policy = await getPolicy(apiKey);
193
+ const toolPolicy = resolvePolicy(policy, input.tool_name);
194
+ if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") {
195
+ return allow();
196
+ }
197
+ const description = describeToolCall(input.tool_name, input.tool_input, "hook");
198
+ const projectName = basename(input.cwd ?? process.cwd());
199
+ switch (toolPolicy.mode) {
200
+ case "push_only":
201
+ return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction);
202
+ case "terminal_only":
203
+ return handleTerminalOnly();
204
+ case "push_first":
205
+ return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds);
206
+ case "notify_only":
207
+ return handleNotifyOnly(apiKey, description, projectName);
208
+ default:
209
+ return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds);
210
+ }
211
+ } catch {
212
+ return ask("Pushary unavailable, falling back to terminal approval");
213
+ }
214
+ };
215
+
216
+ export {
217
+ getPolicy,
218
+ resolvePolicy,
219
+ handlePreToolUse
220
+ };
@@ -0,0 +1,244 @@
1
+ // src/codex-config.ts
2
+ import { createHash } from "crypto";
3
+ var CODEX_HOOK_BINARY = "pushary-codex-hook";
4
+ var CODEX_HOOK_EVENTS = [
5
+ { event: "PermissionRequest", matcher: "Bash|apply_patch", timeout: 180, statusMessage: "Waiting for your phone" },
6
+ { event: "PreToolUse", matcher: "Bash|apply_patch", timeout: 180, statusMessage: "Checking Pushary policy" },
7
+ { event: "PostToolUse", matcher: "Bash|apply_patch", timeout: 10 },
8
+ { event: "UserPromptSubmit", timeout: 10 },
9
+ { event: "Stop", timeout: 10 },
10
+ { event: "SessionStart", matcher: "startup|resume", timeout: 10 }
11
+ ];
12
+ var CODEX_EVENT_KEY = {
13
+ PermissionRequest: "permission_request",
14
+ PreToolUse: "pre_tool_use",
15
+ PostToolUse: "post_tool_use",
16
+ UserPromptSubmit: "user_prompt_submit",
17
+ Stop: "stop",
18
+ SessionStart: "session_start"
19
+ };
20
+ var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
21
+ var ensureRecord = (target, key) => {
22
+ const existing = asRecord(target[key]);
23
+ if (existing) return existing;
24
+ const created = {};
25
+ target[key] = created;
26
+ return created;
27
+ };
28
+ var isPusharyCodexHook = (entry) => {
29
+ const hooks = asRecord(entry)?.hooks;
30
+ if (!Array.isArray(hooks)) return false;
31
+ return hooks.some((hook) => String(asRecord(hook)?.command ?? "").includes(CODEX_HOOK_BINARY));
32
+ };
33
+ var addCodexHooks = (config, command) => {
34
+ const hooks = ensureRecord(config, "hooks");
35
+ for (const definition of CODEX_HOOK_EVENTS) {
36
+ const existing = Array.isArray(hooks[definition.event]) ? hooks[definition.event] : [];
37
+ const entries = existing.filter((entry) => !isPusharyCodexHook(entry));
38
+ entries.push({
39
+ ...definition.matcher ? { matcher: definition.matcher } : {},
40
+ hooks: [{
41
+ type: "command",
42
+ command,
43
+ timeout: definition.timeout,
44
+ ...definition.statusMessage ? { statusMessage: definition.statusMessage } : {}
45
+ }]
46
+ });
47
+ hooks[definition.event] = entries;
48
+ }
49
+ };
50
+ var removeCodexHooks = (config) => {
51
+ const hooks = asRecord(config.hooks);
52
+ if (!hooks) return false;
53
+ let changed = false;
54
+ for (const definition of CODEX_HOOK_EVENTS) {
55
+ const entries = hooks[definition.event];
56
+ if (!Array.isArray(entries)) continue;
57
+ const filtered = entries.filter((entry) => !isPusharyCodexHook(entry));
58
+ if (filtered.length !== entries.length) {
59
+ if (filtered.length === 0) {
60
+ delete hooks[definition.event];
61
+ } else {
62
+ hooks[definition.event] = filtered;
63
+ }
64
+ changed = true;
65
+ }
66
+ }
67
+ if (Object.keys(hooks).length === 0) delete config.hooks;
68
+ return changed;
69
+ };
70
+ var hasCodexHooks = (config) => {
71
+ const hooks = asRecord(config.hooks);
72
+ if (!hooks) return false;
73
+ return CODEX_HOOK_EVENTS.some((definition) => {
74
+ const entries = hooks[definition.event];
75
+ return Array.isArray(entries) && entries.some(isPusharyCodexHook);
76
+ });
77
+ };
78
+ var missingCodexHookEvents = (config) => {
79
+ const hooks = asRecord(config.hooks);
80
+ return CODEX_HOOK_EVENTS.filter((definition) => {
81
+ const entries = hooks?.[definition.event];
82
+ return !Array.isArray(entries) || !entries.some(isPusharyCodexHook);
83
+ }).map((definition) => definition.event);
84
+ };
85
+ var canonicalJson = (value) => {
86
+ if (value === null || typeof value !== "object") return JSON.stringify(value);
87
+ if (Array.isArray(value)) return "[" + value.map(canonicalJson).join(",") + "]";
88
+ const obj = value;
89
+ return "{" + Object.keys(obj).sort().map((key) => JSON.stringify(key) + ":" + canonicalJson(obj[key])).join(",") + "}";
90
+ };
91
+ var codexHookTrustHash = (definition, command) => {
92
+ const hook = { async: false, command, timeout: definition.timeout, type: "command" };
93
+ if (definition.statusMessage) hook.statusMessage = definition.statusMessage;
94
+ const identity = { event_name: CODEX_EVENT_KEY[definition.event], hooks: [hook] };
95
+ if (definition.matcher) identity.matcher = definition.matcher;
96
+ return "sha256:" + createHash("sha256").update(canonicalJson(identity), "utf8").digest("hex");
97
+ };
98
+ var codexHookStateKey = (hooksJsonPath, event) => `${hooksJsonPath}:${CODEX_EVENT_KEY[event]}:0:0`;
99
+ var addCodexHookTrust = (config, hooksJsonPath, command) => {
100
+ const hooks = ensureRecord(config, "hooks");
101
+ const state = ensureRecord(hooks, "state");
102
+ for (const definition of CODEX_HOOK_EVENTS) {
103
+ const key = codexHookStateKey(hooksJsonPath, definition.event);
104
+ const existing = asRecord(state[key]) ?? {};
105
+ state[key] = { ...existing, trusted_hash: codexHookTrustHash(definition, command) };
106
+ }
107
+ };
108
+
109
+ // src/gemini-config.ts
110
+ var GEMINI_HOOK_BINARY = "pushary-gemini-hook";
111
+ var GEMINI_MCP_URL = "https://pushary.com/api/mcp/mcp";
112
+ var GEMINI_HOOK_EVENTS = [
113
+ { event: "BeforeTool", matcher: "run_shell_command|write_file|replace", timeoutMs: 18e4 },
114
+ { event: "AfterTool", matcher: "run_shell_command|write_file|replace", timeoutMs: 1e4 },
115
+ { event: "BeforeAgent", timeoutMs: 1e4 },
116
+ { event: "SessionStart", timeoutMs: 1e4 },
117
+ { event: "SessionEnd", timeoutMs: 1e4 }
118
+ ];
119
+ var asRecord2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
120
+ var ensureRecord2 = (target, key) => {
121
+ const existing = asRecord2(target[key]);
122
+ if (existing) return existing;
123
+ const created = {};
124
+ target[key] = created;
125
+ return created;
126
+ };
127
+ var isPusharyGeminiHook = (entry) => {
128
+ const hooks = asRecord2(entry)?.hooks;
129
+ if (!Array.isArray(hooks)) return false;
130
+ return hooks.some((hook) => String(asRecord2(hook)?.command ?? "").includes(GEMINI_HOOK_BINARY));
131
+ };
132
+ var addGeminiMcpServer = (settings, apiKey) => {
133
+ const mcpServers = ensureRecord2(settings, "mcpServers");
134
+ mcpServers.pushary = {
135
+ httpUrl: GEMINI_MCP_URL,
136
+ headers: { Authorization: `Bearer ${apiKey}` },
137
+ trust: true
138
+ };
139
+ };
140
+ var addGeminiHooks = (settings, command) => {
141
+ const hooks = ensureRecord2(settings, "hooks");
142
+ for (const definition of GEMINI_HOOK_EVENTS) {
143
+ const existing = Array.isArray(hooks[definition.event]) ? hooks[definition.event] : [];
144
+ const entries = existing.filter((entry) => !isPusharyGeminiHook(entry));
145
+ entries.push({
146
+ ...definition.matcher ? { matcher: definition.matcher } : {},
147
+ hooks: [{
148
+ name: "pushary",
149
+ type: "command",
150
+ command,
151
+ timeout: definition.timeoutMs
152
+ }]
153
+ });
154
+ hooks[definition.event] = entries;
155
+ }
156
+ };
157
+ var removeGeminiHooks = (settings) => {
158
+ const hooks = asRecord2(settings.hooks);
159
+ if (!hooks) return false;
160
+ let changed = false;
161
+ for (const definition of GEMINI_HOOK_EVENTS) {
162
+ const entries = hooks[definition.event];
163
+ if (!Array.isArray(entries)) continue;
164
+ const filtered = entries.filter((entry) => !isPusharyGeminiHook(entry));
165
+ if (filtered.length !== entries.length) {
166
+ if (filtered.length === 0) {
167
+ delete hooks[definition.event];
168
+ } else {
169
+ hooks[definition.event] = filtered;
170
+ }
171
+ changed = true;
172
+ }
173
+ }
174
+ if (Object.keys(hooks).length === 0) delete settings.hooks;
175
+ return changed;
176
+ };
177
+ var removeGeminiMcpServer = (settings) => {
178
+ const mcpServers = asRecord2(settings.mcpServers);
179
+ if (!mcpServers?.pushary) return false;
180
+ delete mcpServers.pushary;
181
+ if (Object.keys(mcpServers).length === 0) delete settings.mcpServers;
182
+ return true;
183
+ };
184
+ var removeGeminiSettings = (settings) => {
185
+ const mcpRemoved = removeGeminiMcpServer(settings);
186
+ const hooksRemoved = removeGeminiHooks(settings);
187
+ return mcpRemoved || hooksRemoved;
188
+ };
189
+ var hasGeminiHooks = (settings) => {
190
+ const hooks = asRecord2(settings.hooks);
191
+ if (!hooks) return false;
192
+ return GEMINI_HOOK_EVENTS.some((definition) => {
193
+ const entries = hooks[definition.event];
194
+ return Array.isArray(entries) && entries.some(isPusharyGeminiHook);
195
+ });
196
+ };
197
+ var missingGeminiHookEvents = (settings) => {
198
+ const hooks = asRecord2(settings.hooks);
199
+ return GEMINI_HOOK_EVENTS.filter((definition) => {
200
+ const entries = hooks?.[definition.event];
201
+ return !Array.isArray(entries) || !entries.some(isPusharyGeminiHook);
202
+ }).map((definition) => definition.event);
203
+ };
204
+
205
+ // src/npm.ts
206
+ import { execSync } from "child_process";
207
+ var cleanNpmEnv = () => {
208
+ const env = {};
209
+ for (const [key, value] of Object.entries(process.env)) {
210
+ if (key.toLowerCase().startsWith("npm_config_workspace")) continue;
211
+ env[key] = value;
212
+ }
213
+ return env;
214
+ };
215
+ var npmErrorMessage = (err) => {
216
+ const e = err;
217
+ const text = [e?.stderr, e?.stdout].map((part) => part ? part.toString() : "").join("\n");
218
+ const line = text.split("\n").map((l) => l.replace(/^npm error\s*/i, "").trim()).find((l) => l && !l.startsWith("A complete log") && !/^code\s/i.test(l));
219
+ return line || e?.message || String(err);
220
+ };
221
+ var execNpm = (args, options = {}) => {
222
+ return execSync(`npm ${args}`, {
223
+ timeout: 12e4,
224
+ stdio: "pipe",
225
+ ...options,
226
+ env: { ...cleanNpmEnv(), ...options.env ?? {} }
227
+ });
228
+ };
229
+
230
+ export {
231
+ addCodexHooks,
232
+ removeCodexHooks,
233
+ hasCodexHooks,
234
+ missingCodexHookEvents,
235
+ addCodexHookTrust,
236
+ GEMINI_HOOK_BINARY,
237
+ addGeminiMcpServer,
238
+ addGeminiHooks,
239
+ removeGeminiSettings,
240
+ hasGeminiHooks,
241
+ missingGeminiHookEvents,
242
+ npmErrorMessage,
243
+ execNpm
244
+ };
@@ -0,0 +1,83 @@
1
+ #!/usr/bin/env node
2
+ import {
3
+ getApiKey,
4
+ getBaseUrl
5
+ } from "./chunk-VUNL35KE.js";
6
+
7
+ // bin/pushary-mode.ts
8
+ var VALID_MODES = ["push_only", "push_first", "terminal_only", "notify_only"];
9
+ var dim = (s) => `\x1B[2m${s}\x1B[0m`;
10
+ var green = (s) => `\x1B[32m${s}\x1B[0m`;
11
+ var cyan = (s) => `\x1B[36m${s}\x1B[0m`;
12
+ var yellow = (s) => `\x1B[33m${s}\x1B[0m`;
13
+ var parseDuration = (value) => {
14
+ const match = value.match(/^(\d+)(m|h)$/);
15
+ if (!match) return null;
16
+ const num = Number(match[1]);
17
+ return match[2] === "h" ? num * 3600 : num * 60;
18
+ };
19
+ var main = async () => {
20
+ const apiKey = getApiKey();
21
+ const baseUrl = getBaseUrl();
22
+ const mode = process.argv[2];
23
+ const forFlag = process.argv[3];
24
+ const forValue = process.argv[4];
25
+ const headers = {
26
+ "Authorization": `Bearer ${apiKey}`,
27
+ "Content-Type": "application/json"
28
+ };
29
+ if (!mode || mode === "status") {
30
+ const res2 = await fetch(`${baseUrl}/api/mcp/mode`, { headers });
31
+ const data2 = await res2.json();
32
+ if (!data2.override) {
33
+ console.log(` Mode: ${cyan("default")} ${dim("(using per-tool policies)")}`);
34
+ } else {
35
+ console.log(` Mode: ${green(data2.override.mode)}`);
36
+ if (data2.override.expiresAt) {
37
+ console.log(` Expires: ${new Date(data2.override.expiresAt).toLocaleString()}`);
38
+ } else {
39
+ console.log(` ${dim("Sticky (no expiry)")}`);
40
+ }
41
+ }
42
+ return;
43
+ }
44
+ if (mode === "clear" || mode === "reset") {
45
+ await fetch(`${baseUrl}/api/mcp/mode`, { method: "DELETE", headers });
46
+ console.log(` ${green("\u2713")} Mode override cleared \u2014 using per-tool policies`);
47
+ return;
48
+ }
49
+ if (!VALID_MODES.includes(mode)) {
50
+ console.log(` ${yellow("!")} Invalid mode: ${mode}`);
51
+ console.log(` Valid modes: ${VALID_MODES.join(", ")}`);
52
+ console.log(` ${dim("Usage: pushary mode <mode> [--for <duration>]")}`);
53
+ console.log(` ${dim("Example: pushary mode push_only --for 30m")}`);
54
+ return;
55
+ }
56
+ let ttlSeconds;
57
+ if (forFlag === "--for" && forValue) {
58
+ ttlSeconds = parseDuration(forValue);
59
+ if (!ttlSeconds) {
60
+ console.log(` ${yellow("!")} Invalid duration: ${forValue} ${dim("(use e.g. 30m, 1h)")}`);
61
+ return;
62
+ }
63
+ }
64
+ const res = await fetch(`${baseUrl}/api/mcp/mode`, {
65
+ method: "PUT",
66
+ headers,
67
+ body: JSON.stringify({ mode, ttlSeconds })
68
+ });
69
+ if (!res.ok) {
70
+ const err = await res.json();
71
+ console.log(` ${yellow("!")} Failed: ${err.error ?? res.statusText}`);
72
+ return;
73
+ }
74
+ const data = await res.json();
75
+ console.log(` ${green("\u2713")} Mode set to ${cyan(data.override.mode)}`);
76
+ if (data.override.expiresAt) {
77
+ console.log(` Expires: ${new Date(data.override.expiresAt).toLocaleString()}`);
78
+ }
79
+ };
80
+ main().catch((err) => {
81
+ console.error(` ${yellow("!")} ${err instanceof Error ? err.message : err}`);
82
+ process.exit(1);
83
+ });
@@ -24,6 +24,17 @@ interface ReceiptMeta {
24
24
  ok: boolean;
25
25
  }
26
26
 
27
+ declare const getPolicy: (apiKey: string, expectedVersion?: string | null) => Promise<PolicyConfig>;
28
+ type AutoResolveOrigin = 'safe_readonly' | 'policy_timeout';
29
+ declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>) => ToolPolicy;
30
+ interface ModeState {
31
+ readonly mode: ApprovalMode | null;
32
+ readonly kill: boolean;
33
+ readonly policyVersion: string | null;
34
+ }
35
+ declare const fetchModeState: (apiKey: string, sessionId?: string) => Promise<ModeState>;
36
+ declare const fetchModeOverride: (apiKey: string) => Promise<ApprovalMode | null>;
37
+
27
38
  interface UsageReport {
28
39
  readonly tokensIn: number;
29
40
  readonly tokensOut: number;
@@ -46,6 +57,10 @@ interface AgentEvent {
46
57
  error?: string;
47
58
  taskTitle?: string;
48
59
  decisionSource?: DecisionSource;
60
+ decisionOrigin?: AutoResolveOrigin;
61
+ toolName?: string;
62
+ toolTarget?: string;
63
+ agents?: readonly string[];
49
64
  meta?: ReceiptMeta;
50
65
  usage?: UsageReport;
51
66
  }
@@ -111,16 +126,6 @@ declare const askUser: (apiKey: string, params: AskUserParams, timeoutMs?: numbe
111
126
  declare const waitForAnswer: (apiKey: string, correlationId: string, timeoutMs?: number) => Promise<WaitForAnswerResponse>;
112
127
  declare const cancelQuestion: (apiKey: string, correlationId: string) => Promise<void>;
113
128
 
114
- declare const getPolicy: (apiKey: string, expectedVersion?: string | null) => Promise<PolicyConfig>;
115
- declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>) => ToolPolicy;
116
- interface ModeState {
117
- readonly mode: ApprovalMode | null;
118
- readonly kill: boolean;
119
- readonly policyVersion: string | null;
120
- }
121
- declare const fetchModeState: (apiKey: string, sessionId?: string) => Promise<ModeState>;
122
- declare const fetchModeOverride: (apiKey: string) => Promise<ApprovalMode | null>;
123
-
124
129
  declare const getApiKey: () => string;
125
130
  declare const getBaseUrl: () => string;
126
131
 
package/dist/src/index.js CHANGED
@@ -1,6 +1,6 @@
1
1
  import {
2
2
  handlePreToolUse
3
- } from "../chunk-FGZZRCOG.js";
3
+ } from "../chunk-O2QL6U6G.js";
4
4
  import "../chunk-KQYIHZ5E.js";
5
5
  import {
6
6
  askUser,
@@ -14,8 +14,7 @@ import {
14
14
  reportEvent,
15
15
  resolvePolicy,
16
16
  waitForAnswer
17
- } from "../chunk-M4GDBGXF.js";
18
- import "../chunk-WPVL6VIT.js";
17
+ } from "../chunk-GYPPVD3P.js";
19
18
  import "../chunk-DWED7BS3.js";
20
19
  import {
21
20
  getApiKey,
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@pushary/agent-hooks",
3
- "version": "0.23.0",
3
+ "version": "0.25.0",
4
4
  "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
5
5
  "author": "Pushary <business@pushary.com>",
6
6
  "homepage": "https://pushary.com",