@pushary/agent-hooks 0.27.0 → 0.28.0

package/dist/bin/pushary-clean.js

@@ -2,14 +2,14 @@
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-MVNOP5IZ.js";
+} from "../chunk-76F75WQQ.js";
 import {
   execNpm,
   removeCodexHooks,
   removeGeminiSettings,
   removeInstructionBlock
-} from "../chunk-WXWHRXDK.js";
-import "../chunk-FDR5WYT7.js";
+} from "../chunk-QDPUTE2V.js";
+import "../chunk-YRL4ZB4R.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, writeFileSync, rmSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -32,14 +32,14 @@ import {
   toCodexWire,
   toPolicyLookup,
   waitForAnswer
-} from "../chunk-TUILTFLS.js";
+} from "../chunk-NFKYZY74.js";
 import "../chunk-DWED7BS3.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-FDR5WYT7.js";
+} from "../chunk-YRL4ZB4R.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-codex.js

@@ -4,9 +4,9 @@ import {
   getMachineId,
   reportEvent,
   waitForAnswer
-} from "../chunk-TUILTFLS.js";
+} from "../chunk-NFKYZY74.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-FDR5WYT7.js";
+import "../chunk-YRL4ZB4R.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-doctor.js

@@ -12,12 +12,12 @@ import {
   missingGeminiHookEvents,
   readCodexMcpAuth,
   untrustedCodexHookEvents
-} from "../chunk-WXWHRXDK.js";
+} from "../chunk-QDPUTE2V.js";
 import {
   callMcpTool,
   sendMcpRequest
 } from "../chunk-DWED7BS3.js";
-import "../chunk-FDR5WYT7.js";
+import "../chunk-YRL4ZB4R.js";
 import {
   getBaseUrl
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-gemini-hook.js

@@ -24,14 +24,14 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-TUILTFLS.js";
+} from "../chunk-NFKYZY74.js";
 import "../chunk-DWED7BS3.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-FDR5WYT7.js";
+} from "../chunk-YRL4ZB4R.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-VHD3GMZ3.js";
+} from "../chunk-2BHYQCF7.js";
 import "../chunk-KQYIHZ5E.js";
-import "../chunk-TUILTFLS.js";
+import "../chunk-NFKYZY74.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-FDR5WYT7.js";
+import "../chunk-YRL4ZB4R.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-hook.ts

package/dist/bin/pushary-post-hook.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-TUILTFLS.js";
+} from "../chunk-NFKYZY74.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-FDR5WYT7.js";
+import "../chunk-YRL4ZB4R.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-post-hook.ts

package/dist/bin/pushary-prompt-hook.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-TUILTFLS.js";
+} from "../chunk-NFKYZY74.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-FDR5WYT7.js";
+import "../chunk-YRL4ZB4R.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-prompt-hook.ts

package/dist/bin/pushary-setup.js

@@ -3,7 +3,7 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-MVNOP5IZ.js";
+} from "../chunk-76F75WQQ.js";
 import {
   GEMINI_HOOK_BINARY,
   addCodexHookTrust,
@@ -16,14 +16,14 @@ import {
   renderAgentInstructions,
   renderProjectAgentInstructions,
   writeInstructionBlock
-} from "../chunk-WXWHRXDK.js";
+} from "../chunk-QDPUTE2V.js";
 import {
   reportEvent
-} from "../chunk-TUILTFLS.js";
+} from "../chunk-NFKYZY74.js";
 import "../chunk-DWED7BS3.js";
 import {
   isValidApiKey
-} from "../chunk-FDR5WYT7.js";
+} from "../chunk-YRL4ZB4R.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-setup.ts

package/dist/bin/pushary-stop-hook.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-TUILTFLS.js";
+} from "../chunk-NFKYZY74.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-FDR5WYT7.js";
+import "../chunk-YRL4ZB4R.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stop-hook.ts

package/dist/{chunk-VHD3GMZ3.js → chunk-2BHYQCF7.js}

@@ -20,12 +20,12 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "./chunk-TUILTFLS.js";
+} from "./chunk-NFKYZY74.js";
 import {
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "./chunk-FDR5WYT7.js";
+} from "./chunk-YRL4ZB4R.js";
 import {
   getApiKey
 } from "./chunk-NKXSILEW.js";

package/dist/{chunk-MVNOP5IZ.js → chunk-76F75WQQ.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-FDR5WYT7.js";
+} from "./chunk-YRL4ZB4R.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-TUILTFLS.js → chunk-NFKYZY74.js}

@@ -12,7 +12,7 @@ import {
   matchToolPattern,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-FDR5WYT7.js";
+} from "./chunk-YRL4ZB4R.js";
 import {
   getApiKey,
   getBaseUrl

package/dist/{chunk-WXWHRXDK.js → chunk-QDPUTE2V.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-FDR5WYT7.js";
+} from "./chunk-YRL4ZB4R.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";

package/dist/{chunk-FDR5WYT7.js → chunk-YRL4ZB4R.js}

@@ -107,11 +107,101 @@ var SAFE_GIT_SUBCOMMANDS = /* @__PURE__ */ new Set([
   "count-objects"
 ]);
 var GIT_WRITE_FLAGS = (token) => token === "--output" || token.startsWith("--output=");
-var UNSAFE_SHELL_CHARS = /[;&|<>(){}`\\\n\r]/;
+var DANGEROUS_FIND_ACTIONS = /* @__PURE__ */ new Set([
+  "-exec",
+  "-execdir",
+  "-ok",
+  "-okdir",
+  "-delete",
+  "-fprintf",
+  "-fprint",
+  "-fprint0",
+  "-fls"
+]);
+var SAFE_FIND_TOKENS = /* @__PURE__ */ new Set([
+  "-name",
+  "-iname",
+  "-path",
+  "-ipath",
+  "-wholename",
+  "-iwholename",
+  "-lname",
+  "-ilname",
+  "-regex",
+  "-iregex",
+  "-type",
+  "-xtype",
+  "-maxdepth",
+  "-mindepth",
+  "-depth",
+  "-mount",
+  "-xdev",
+  "-size",
+  "-empty",
+  "-perm",
+  "-readable",
+  "-writable",
+  "-executable",
+  "-mtime",
+  "-mmin",
+  "-atime",
+  "-amin",
+  "-ctime",
+  "-cmin",
+  "-newer",
+  "-newermt",
+  "-anewer",
+  "-cnewer",
+  "-user",
+  "-uid",
+  "-group",
+  "-gid",
+  "-nouser",
+  "-nogroup",
+  "-samefile",
+  "-inum",
+  "-links",
+  "-print",
+  "-print0",
+  "-printf",
+  "-ls",
+  "-quit",
+  "-prune",
+  "-follow",
+  "-noleaf",
+  "-ignore_readdir_race",
+  "-noignore_readdir_race",
+  "-true",
+  "-false",
+  "-not",
+  "-and",
+  "-or",
+  "-o",
+  "-a",
+  "-P",
+  "-L",
+  "-H",
+  "-D",
+  "-O"
+]);
+var SAFE_REDIRECTION = /\s*(?:[0-9]*>&[0-9-]+|(?:[0-9]*|&)>>?\s*\/dev\/null)/g;
 var basenameOf = (token) => {
   const slash = Math.max(token.lastIndexOf("/"), token.lastIndexOf("\\"));
   return slash === -1 ? token : token.slice(slash + 1);
 };
+var TRUSTED_EXE_PREFIXES = [
+  "/bin/",
+  "/sbin/",
+  "/usr/bin/",
+  "/usr/sbin/",
+  "/usr/local/bin/",
+  "/opt/homebrew/bin/"
+];
+var isTrustedExecutable = (first) => {
+  if (!first.includes("/")) return true;
+  if (first.includes("..")) return false;
+  return TRUSTED_EXE_PREFIXES.some((prefix) => first.startsWith(prefix));
+};
 var tokenizeShellCommand = (command) => {
   const tokens = [];
   let current = "";
@@ -144,14 +234,12 @@ var tokenizeShellCommand = (command) => {
   if (started) tokens.push(current);
   return tokens;
 };
-var isSafeReadOnlyCommand = (command) => {
-  const trimmed = command.trim();
-  if (!trimmed || trimmed.length > 2e3) return false;
-  if (UNSAFE_SHELL_CHARS.test(trimmed)) return false;
-  const tokens = tokenizeShellCommand(trimmed);
+var isSafeSimpleCommand = (segment) => {
+  const tokens = tokenizeShellCommand(segment.trim());
   if (!tokens || tokens.length === 0) return false;
   const first = tokens[0];
   if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(first) || first.includes("$")) return false;
+  if (!isTrustedExecutable(first)) return false;
   const exe = basenameOf(first);
   if (exe === "git") {
     const sub = tokens[1];
@@ -159,8 +247,34 @@ var isSafeReadOnlyCommand = (command) => {
     if (!SAFE_GIT_SUBCOMMANDS.has(sub)) return false;
     return !tokens.some(GIT_WRITE_FLAGS);
   }
+  if (exe === "find") {
+    for (let i = 1; i < tokens.length; i += 1) {
+      const t = tokens[i];
+      if (t === "(" || t === ")" || t === "!" || t === "\\(" || t === "\\)" || t === "\\!") continue;
+      if (t.startsWith("-") && (DANGEROUS_FIND_ACTIONS.has(t) || !SAFE_FIND_TOKENS.has(t))) return false;
+    }
+    return true;
+  }
   return SAFE_SHELL_COMMANDS.has(exe);
 };
+var isSafeReadOnlyCommand = (command) => {
+  const trimmed = command.trim();
+  if (!trimmed || trimmed.length > 2e3) return false;
+  if (/[`\n\r{}]/.test(trimmed)) return false;
+  if (/;|\|\|/.test(trimmed)) return false;
+  if (/\\(?![()!])/.test(trimmed)) return false;
+  if (/(?<!\\)[()]/.test(trimmed)) return false;
+  const noRedir = trimmed.replace(SAFE_REDIRECTION, " ");
+  if (/[<>]/.test(noRedir)) return false;
+  if (noRedir.replace(/&&/g, "  ").includes("&")) return false;
+  for (const andPart of noRedir.split("&&")) {
+    if (!andPart.trim()) return false;
+    for (const segment of andPart.split("|")) {
+      if (!isSafeSimpleCommand(segment)) return false;
+    }
+  }
+  return true;
+};
 var API_KEY_PATTERN = /^pk_[a-f0-9]+\.[a-f0-9]+$/;
 var isValidApiKey = (value) => API_KEY_PATTERN.test(value);
 var ACTION_BODY_MAX = 4e3;

package/dist/src/index.js

@@ -1,6 +1,6 @@
 import {
   handlePreToolUse
-} from "../chunk-VHD3GMZ3.js";
+} from "../chunk-2BHYQCF7.js";
 import "../chunk-KQYIHZ5E.js";
 import {
   askUser,
@@ -14,9 +14,9 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-TUILTFLS.js";
+} from "../chunk-NFKYZY74.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-FDR5WYT7.js";
+import "../chunk-YRL4ZB4R.js";
 import {
   getApiKey,
   getBaseUrl

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.27.0",
+  "version": "0.28.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "author": "Pushary <business@pushary.com>",
   "homepage": "https://pushary.com",