@pushary/agent-hooks 0.26.0 → 0.28.0

package/dist/chunk-YRL4ZB4R.js

@@ -0,0 +1,322 @@
+// ../../../../../packages/contracts/src/index.ts
+var APPROVAL_MODES = ["push_only", "terminal_only", "push_first", "notify_only"];
+var isApprovalMode = (value) => typeof value === "string" && APPROVAL_MODES.includes(value);
+var HOOK_BUDGETS = {
+  claude: { budgetSeconds: 120, guardSeconds: 10 },
+  codex: { budgetSeconds: 180, guardSeconds: 10 },
+  gemini: { budgetSeconds: 180, guardSeconds: 10 },
+  // The Cursor gate is a dependency-free .mjs that cannot import this module; it
+  // mirrors these as MAX_BLOCK_MS (45s) inside its 60s failClosed budget.
+  cursor: { budgetSeconds: 60, guardSeconds: 15 }
+};
+var hookMaxWaitSeconds = (agent) => Math.max(HOOK_BUDGETS[agent].budgetSeconds - HOOK_BUDGETS[agent].guardSeconds, 1);
+var hookWaitDeadline = (startMs, policyWaitSeconds, agent, nowMs) => {
+  const maxWait = hookMaxWaitSeconds(agent);
+  return Math.min(
+    nowMs + Math.min(Math.max(policyWaitSeconds, 0), maxWait) * 1e3,
+    startMs + maxWait * 1e3
+  );
+};
+var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + hookMaxWaitSeconds(agent) * 1e3 < nowMs + Math.max(policyWaitSeconds, 0) * 1e3;
+var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
+var MATCH_RANKS = ["none", "tool", "prefix", "exact"];
+var matchRankWeight = (rank) => MATCH_RANKS.indexOf(rank);
+var matchToolPattern = (pattern, toolName, arg) => {
+  const open = pattern.indexOf("(");
+  if (open === -1 || !pattern.endsWith(")")) {
+    return pattern === toolName ? "tool" : "none";
+  }
+  if (pattern.slice(0, open) !== toolName || arg === void 0) return "none";
+  const inner = pattern.slice(open + 1, -1);
+  if (inner.endsWith(":*")) {
+    return arg.startsWith(inner.slice(0, -2)) ? "prefix" : "none";
+  }
+  return arg === inner ? "exact" : "none";
+};
+var POLICY_ARG_KEYS = {
+  Bash: "command",
+  Edit: "file_path",
+  Write: "file_path"
+};
+var extractPolicyArg = (toolName, toolInput) => {
+  const key = POLICY_ARG_KEYS[toolName];
+  if (!key) return void 0;
+  const value = toolInput[key];
+  return typeof value === "string" ? value : void 0;
+};
+var SAFE_SHELL_COMMANDS = /* @__PURE__ */ new Set([
+  "ls",
+  "pwd",
+  "cd",
+  "cat",
+  "head",
+  "tail",
+  "wc",
+  "echo",
+  "printf",
+  "which",
+  "type",
+  "whoami",
+  "id",
+  "uname",
+  "arch",
+  "printenv",
+  "locale",
+  "tty",
+  "dirname",
+  "basename",
+  "realpath",
+  "readlink",
+  "stat",
+  "cut",
+  "nl",
+  "tr",
+  "comm",
+  "diff",
+  "cmp",
+  "grep",
+  "egrep",
+  "fgrep",
+  "jq",
+  "cksum",
+  "md5sum",
+  "sha1sum",
+  "sha256sum",
+  "du",
+  "df",
+  "ps",
+  "true"
+]);
+var SAFE_GIT_SUBCOMMANDS = /* @__PURE__ */ new Set([
+  "status",
+  "log",
+  "diff",
+  "show",
+  "rev-parse",
+  "describe",
+  "blame",
+  "shortlog",
+  "ls-files",
+  "ls-tree",
+  "cat-file",
+  "whatchanged",
+  "rev-list",
+  "name-rev",
+  "for-each-ref",
+  "var",
+  "count-objects"
+]);
+var GIT_WRITE_FLAGS = (token) => token === "--output" || token.startsWith("--output=");
+var DANGEROUS_FIND_ACTIONS = /* @__PURE__ */ new Set([
+  "-exec",
+  "-execdir",
+  "-ok",
+  "-okdir",
+  "-delete",
+  "-fprintf",
+  "-fprint",
+  "-fprint0",
+  "-fls"
+]);
+var SAFE_FIND_TOKENS = /* @__PURE__ */ new Set([
+  "-name",
+  "-iname",
+  "-path",
+  "-ipath",
+  "-wholename",
+  "-iwholename",
+  "-lname",
+  "-ilname",
+  "-regex",
+  "-iregex",
+  "-type",
+  "-xtype",
+  "-maxdepth",
+  "-mindepth",
+  "-depth",
+  "-mount",
+  "-xdev",
+  "-size",
+  "-empty",
+  "-perm",
+  "-readable",
+  "-writable",
+  "-executable",
+  "-mtime",
+  "-mmin",
+  "-atime",
+  "-amin",
+  "-ctime",
+  "-cmin",
+  "-newer",
+  "-newermt",
+  "-anewer",
+  "-cnewer",
+  "-user",
+  "-uid",
+  "-group",
+  "-gid",
+  "-nouser",
+  "-nogroup",
+  "-samefile",
+  "-inum",
+  "-links",
+  "-print",
+  "-print0",
+  "-printf",
+  "-ls",
+  "-quit",
+  "-prune",
+  "-follow",
+  "-noleaf",
+  "-ignore_readdir_race",
+  "-noignore_readdir_race",
+  "-true",
+  "-false",
+  "-not",
+  "-and",
+  "-or",
+  "-o",
+  "-a",
+  "-P",
+  "-L",
+  "-H",
+  "-D",
+  "-O"
+]);
+var SAFE_REDIRECTION = /\s*(?:[0-9]*>&[0-9-]+|(?:[0-9]*|&)>>?\s*\/dev\/null)/g;
+var basenameOf = (token) => {
+  const slash = Math.max(token.lastIndexOf("/"), token.lastIndexOf("\\"));
+  return slash === -1 ? token : token.slice(slash + 1);
+};
+var TRUSTED_EXE_PREFIXES = [
+  "/bin/",
+  "/sbin/",
+  "/usr/bin/",
+  "/usr/sbin/",
+  "/usr/local/bin/",
+  "/opt/homebrew/bin/"
+];
+var isTrustedExecutable = (first) => {
+  if (!first.includes("/")) return true;
+  if (first.includes("..")) return false;
+  return TRUSTED_EXE_PREFIXES.some((prefix) => first.startsWith(prefix));
+};
+var tokenizeShellCommand = (command) => {
+  const tokens = [];
+  let current = "";
+  let quote = null;
+  let started = false;
+  for (const ch of command) {
+    if (quote) {
+      if (ch === quote) quote = null;
+      else current += ch;
+      started = true;
+      continue;
+    }
+    if (ch === '"' || ch === "'") {
+      quote = ch;
+      started = true;
+      continue;
+    }
+    if (ch === " " || ch === "	") {
+      if (started) {
+        tokens.push(current);
+        current = "";
+        started = false;
+      }
+      continue;
+    }
+    current += ch;
+    started = true;
+  }
+  if (quote) return null;
+  if (started) tokens.push(current);
+  return tokens;
+};
+var isSafeSimpleCommand = (segment) => {
+  const tokens = tokenizeShellCommand(segment.trim());
+  if (!tokens || tokens.length === 0) return false;
+  const first = tokens[0];
+  if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(first) || first.includes("$")) return false;
+  if (!isTrustedExecutable(first)) return false;
+  const exe = basenameOf(first);
+  if (exe === "git") {
+    const sub = tokens[1];
+    if (!sub || sub.startsWith("-")) return false;
+    if (!SAFE_GIT_SUBCOMMANDS.has(sub)) return false;
+    return !tokens.some(GIT_WRITE_FLAGS);
+  }
+  if (exe === "find") {
+    for (let i = 1; i < tokens.length; i += 1) {
+      const t = tokens[i];
+      if (t === "(" || t === ")" || t === "!" || t === "\\(" || t === "\\)" || t === "\\!") continue;
+      if (t.startsWith("-") && (DANGEROUS_FIND_ACTIONS.has(t) || !SAFE_FIND_TOKENS.has(t))) return false;
+    }
+    return true;
+  }
+  return SAFE_SHELL_COMMANDS.has(exe);
+};
+var isSafeReadOnlyCommand = (command) => {
+  const trimmed = command.trim();
+  if (!trimmed || trimmed.length > 2e3) return false;
+  if (/[`\n\r{}]/.test(trimmed)) return false;
+  if (/;|\|\|/.test(trimmed)) return false;
+  if (/\\(?![()!])/.test(trimmed)) return false;
+  if (/(?<!\\)[()]/.test(trimmed)) return false;
+  const noRedir = trimmed.replace(SAFE_REDIRECTION, " ");
+  if (/[<>]/.test(noRedir)) return false;
+  if (noRedir.replace(/&&/g, "  ").includes("&")) return false;
+  for (const andPart of noRedir.split("&&")) {
+    if (!andPart.trim()) return false;
+    for (const segment of andPart.split("|")) {
+      if (!isSafeSimpleCommand(segment)) return false;
+    }
+  }
+  return true;
+};
+var API_KEY_PATTERN = /^pk_[a-f0-9]+\.[a-f0-9]+$/;
+var isValidApiKey = (value) => API_KEY_PATTERN.test(value);
+var ACTION_BODY_MAX = 4e3;
+var DECISION_LINE_MAX = 500;
+var SECRET_REDACTION_RULES = [
+  { pattern: /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, replacement: "[redacted key]" },
+  { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, replacement: "[redacted]" },
+  { pattern: /\b[spr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bwhsec_[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
+  { pattern: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bgithub_pat_[A-Za-z0-9_]{22,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bglpat-[A-Za-z0-9_-]{20,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bAIza[A-Za-z0-9_-]{35}\b/g, replacement: "[redacted]" },
+  { pattern: /\bAKIA[0-9A-Z]{16}\b/g, replacement: "[redacted]" },
+  { pattern: /\bnpm_[A-Za-z0-9]{36}\b/g, replacement: "[redacted]" },
+  { pattern: /\bxai-[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
+  { pattern: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bbearer\s+[A-Za-z0-9._~+/=-]+/gi, replacement: "bearer [redacted]" },
+  { pattern: /\bauthorization:\s*\S+/gi, replacement: "authorization: [redacted]" },
+  {
+    pattern: /((?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)\s*[=:]\s*)("[^"]*"|'[^']*'|\S+)/gi,
+    replacement: "$1[redacted]"
+  }
+];
+var HIGH_ENTROPY_RULE = { pattern: /[A-Za-z0-9+/]{40,}={0,2}/g, replacement: "[redacted]" };
+var redactSecrets = (text) => SECRET_REDACTION_RULES.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
+var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
+
+export {
+  isApprovalMode,
+  HOOK_BUDGETS,
+  hookWaitDeadline,
+  hookWaitClamped,
+  effectiveWaitSeconds,
+  matchRankWeight,
+  matchToolPattern,
+  extractPolicyArg,
+  isSafeReadOnlyCommand,
+  isValidApiKey,
+  ACTION_BODY_MAX,
+  DECISION_LINE_MAX,
+  redactSecrets,
+  redactSecretsDeep
+};

package/dist/src/index.d.ts

@@ -80,7 +80,7 @@ declare const handlePostToolUse: (input: {
     cwd?: string;
     session_id?: string;
     transcript_path?: string;
-}, agent?: AgentIdentity) => Promise<void>;
+}, agent?: AgentIdentity) => Promise<string | undefined>;
 interface StopHookOutput {
     readonly decision: 'block';
     readonly reason: string;
@@ -117,6 +117,12 @@ interface AskUserParams {
 interface AskUserResponse {
     correlationId: string;
     status: string;
+    delivery?: {
+        web: number;
+        mobile: number;
+    };
+    suppressed?: boolean;
+    noDevices?: boolean;
 }
 interface WaitForAnswerResponse {
     answered: boolean;

package/dist/src/index.js

@@ -1,6 +1,6 @@
 import {
   handlePreToolUse
-} from "../chunk-SA4BDS7T.js";
+} from "../chunk-2BHYQCF7.js";
 import "../chunk-KQYIHZ5E.js";
 import {
   askUser,
@@ -14,8 +14,9 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-A7DQCA2N.js";
+} from "../chunk-NFKYZY74.js";
 import "../chunk-DWED7BS3.js";
+import "../chunk-YRL4ZB4R.js";
 import {
   getApiKey,
   getBaseUrl

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.26.0",
+  "version": "0.28.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "author": "Pushary <business@pushary.com>",
   "homepage": "https://pushary.com",
@@ -29,7 +29,8 @@
     "pushary-setup": "./dist/bin/pushary-setup.js",
     "pushary-clean": "./dist/bin/pushary-clean.js",
     "pushary-doctor": "./dist/bin/pushary-doctor.js",
-    "pushary-mode": "./dist/bin/pushary-mode.js"
+    "pushary-mode": "./dist/bin/pushary-mode.js",
+    "pushary-wait": "./dist/bin/pushary-wait.js"
   },
   "files": [
     "dist",
@@ -38,7 +39,7 @@
   "scripts": {
     "build": "node scripts/bundle-plugin.mjs && tsup",
     "dev": "tsup --watch",
-    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts"
+    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts"
   },
   "dependencies": {
     "@inquirer/prompts": "^8.4.2",