@pushary/agent-hooks 0.28.1 → 0.28.2

package/dist/chunk-PMD5JSV3.js

@@ -1,242 +0,0 @@
-import {
-  askUser,
-  describeToolCall,
-  isPolicyConfig,
-  savePendingQuestion,
-  sendNotification,
-  waitForAnswer
-} from "./chunk-4Z4MB37G.js";
-import {
-  getApiKey,
-  getBaseUrl,
-  withRetry
-} from "./chunk-O6A5RHWY.js";
-
-// src/policy.ts
-import { createHash } from "crypto";
-import { existsSync, readFileSync, writeFileSync } from "fs";
-import { join } from "path";
-import { tmpdir } from "os";
-var CACHE_TTL_MS = 5 * 60 * 1e3;
-var cacheFile = (apiKey) => {
-  const hash = createHash("sha256").update(apiKey).digest("hex").slice(0, 12);
-  return join(tmpdir(), `pushary-policy-${hash}.json`);
-};
-var fetchPolicy = async (apiKey) => {
-  return withRetry(async () => {
-    const baseUrl = getBaseUrl();
-    const response = await fetch(`${baseUrl}/api/mcp/policy`, {
-      headers: { "Authorization": `Bearer ${apiKey}` },
-      signal: AbortSignal.timeout(1e4)
-    });
-    if (!response.ok) {
-      throw new Error(`Failed to fetch policy: ${response.status}`);
-    }
-    const raw = await response.json();
-    if (!isPolicyConfig(raw)) throw new Error("Invalid policy response");
-    return raw;
-  }, { maxAttempts: 2 });
-};
-var getPolicy = async (apiKey) => {
-  const path = cacheFile(apiKey);
-  let staleCache = null;
-  if (existsSync(path)) {
-    try {
-      const stat = readFileSync(path, "utf-8");
-      const cached = JSON.parse(stat);
-      if (!isPolicyConfig(cached)) throw new Error("Corrupted cache");
-      if (!cached._cachedAt || Date.now() - cached._cachedAt < CACHE_TTL_MS) {
-        return cached;
-      }
-      staleCache = cached;
-    } catch {
-    }
-  }
-  try {
-    const policy = await fetchPolicy(apiKey);
-    try {
-      writeFileSync(path, JSON.stringify({ ...policy, _cachedAt: Date.now() }), "utf-8");
-    } catch {
-    }
-    return policy;
-  } catch {
-    if (staleCache) return staleCache;
-    throw new Error("Failed to fetch policy and no cached policy available");
-  }
-};
-var resolvePolicy = (config, toolName, modeOverride) => {
-  const base = config.policies.find((p) => p.tool === toolName) ?? config.policies.find((p) => p.tool === "*") ?? {
-    tool: toolName,
-    timeoutSeconds: config.defaultTimeoutSeconds,
-    timeoutAction: config.defaultTimeoutAction,
-    mode: config.defaultMode ?? "push_first",
-    pushFirstSeconds: config.defaultPushFirstSeconds ?? 20
-  };
-  const effectiveOverride = modeOverride ?? config.modeOverride;
-  if (effectiveOverride) {
-    return { ...base, mode: effectiveOverride };
-  }
-  return base;
-};
-var fetchModeOverride = async (apiKey) => {
-  try {
-    const baseUrl = getBaseUrl();
-    const response = await fetch(`${baseUrl}/api/mcp/mode`, {
-      headers: { "Authorization": `Bearer ${apiKey}` },
-      signal: AbortSignal.timeout(3e3)
-    });
-    if (!response.ok) return null;
-    const data = await response.json();
-    const mode = data.override?.mode;
-    if (mode && ["push_only", "terminal_only", "push_first", "notify_only"].includes(mode)) {
-      return mode;
-    }
-    return null;
-  } catch {
-    return null;
-  }
-};
-
-// src/hook.ts
-import { basename } from "path";
-var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-var allow = () => ({
-  hookSpecificOutput: {
-    hookEventName: "PreToolUse",
-    permissionDecision: "allow"
-  }
-});
-var deny = (reason) => ({
-  hookSpecificOutput: {
-    hookEventName: "PreToolUse",
-    permissionDecision: "deny",
-    permissionDecisionReason: reason
-  }
-});
-var ask = (reason) => ({
-  hookSpecificOutput: {
-    hookEventName: "PreToolUse",
-    permissionDecision: "ask",
-    ...reason ? { permissionDecisionReason: reason } : {}
-  }
-});
-var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
-  while (Date.now() < deadlineMs) {
-    const remaining = Math.min(Math.max(deadlineMs - Date.now(), 1e3), 3e4);
-    let answer;
-    try {
-      answer = await waitForAnswer(apiKey, correlationId, remaining);
-    } catch {
-      if (Date.now() + pollInterval >= deadlineMs) break;
-      await sleep(pollInterval);
-      continue;
-    }
-    if (answer.answered) return answer;
-    if (Date.now() + pollInterval >= deadlineMs) break;
-    await sleep(pollInterval);
-  }
-  return { answered: false };
-};
-var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction) => {
-  let result;
-  try {
-    result = await askUser(apiKey, {
-      question: `Allow ${description}?`,
-      type: "confirm",
-      context: `Agent wants to run this in ${projectName}`,
-      agentName: `Claude Code - ${projectName}`
-    });
-  } catch {
-    switch (timeoutAction) {
-      case "approve":
-        return allow();
-      case "deny":
-        return deny("Push notification failed, denying per policy");
-      default:
-        return ask("Push notification failed, asking in terminal");
-    }
-  }
-  const deadline = Date.now() + timeoutSeconds * 1e3;
-  const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
-  if (answer.answered) {
-    return answer.value === "yes" ? allow() : deny("Denied via push notification");
-  }
-  switch (timeoutAction) {
-    case "approve":
-      return allow();
-    case "deny":
-      return deny("No response within timeout");
-    default:
-      return ask("No push response, asking in terminal");
-  }
-};
-var handleTerminalOnly = () => {
-  return ask();
-};
-var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds) => {
-  let result;
-  try {
-    result = await askUser(apiKey, {
-      question: `Allow ${description}?`,
-      type: "confirm",
-      context: `Agent wants to run this in ${projectName}`,
-      agentName: `Claude Code - ${projectName}`
-    });
-  } catch {
-    return ask("Push notification failed, asking in terminal");
-  }
-  const deadline = Date.now() + pushFirstSeconds * 1e3;
-  const answer = await pollForAnswer(apiKey, result.correlationId, deadline, 1500);
-  if (answer.answered) {
-    return answer.value === "yes" ? allow() : deny("Denied via push notification");
-  }
-  savePendingQuestion(result.correlationId);
-  return ask("Sent as push notification. You can also approve here.");
-};
-var handleNotifyOnly = async (apiKey, description, projectName) => {
-  try {
-    await sendNotification(apiKey, {
-      title: "Agent needs approval",
-      body: description,
-      agentName: `Claude Code - ${projectName}`
-    });
-  } catch {
-  }
-  return ask();
-};
-var handlePreToolUse = async (input) => {
-  try {
-    const apiKey = getApiKey();
-    const [policy, modeOverride] = await Promise.all([
-      getPolicy(apiKey),
-      fetchModeOverride(apiKey)
-    ]);
-    const toolPolicy = resolvePolicy(policy, input.tool_name, modeOverride);
-    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") {
-      return allow();
-    }
-    const description = describeToolCall(input.tool_name, input.tool_input, "hook");
-    const projectName = basename(input.cwd ?? process.cwd());
-    switch (toolPolicy.mode) {
-      case "push_only":
-        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction);
-      case "terminal_only":
-        return handleTerminalOnly();
-      case "push_first":
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds);
-      case "notify_only":
-        return handleNotifyOnly(apiKey, description, projectName);
-      default:
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds);
-    }
-  } catch {
-    return ask("Pushary unavailable, falling back to terminal approval");
-  }
-};
-
-export {
-  getPolicy,
-  resolvePolicy,
-  fetchModeOverride,
-  handlePreToolUse
-};

package/dist/chunk-PSSHNBEL.js

@@ -1,177 +0,0 @@
-import {
-  denyReasonFrom
-} from "./chunk-N7VXDBQU.js";
-import {
-  DEFAULT_SESSION,
-  askUser,
-  deriveToolTarget,
-  describeToolCall,
-  fetchModeState,
-  getMachineId,
-  getPolicy,
-  resolvePolicy,
-  savePendingQuestion,
-  sendNotification,
-  waitForAnswer
-} from "./chunk-GTJGZBTQ.js";
-import {
-  getApiKey
-} from "./chunk-NKXSILEW.js";
-
-// src/hook.ts
-import { basename } from "path";
-var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-var allow = () => ({
-  hookSpecificOutput: {
-    hookEventName: "PreToolUse",
-    permissionDecision: "allow"
-  }
-});
-var deny = (reason) => ({
-  hookSpecificOutput: {
-    hookEventName: "PreToolUse",
-    permissionDecision: "deny",
-    permissionDecisionReason: reason
-  }
-});
-var ask = (reason) => ({
-  hookSpecificOutput: {
-    hookEventName: "PreToolUse",
-    permissionDecision: "ask",
-    ...reason ? { permissionDecisionReason: reason } : {}
-  }
-});
-var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
-  while (Date.now() < deadlineMs) {
-    const remaining = Math.min(Math.max(deadlineMs - Date.now(), 1e3), 3e4);
-    let answer;
-    try {
-      answer = await waitForAnswer(apiKey, correlationId, remaining);
-    } catch {
-      if (Date.now() + pollInterval >= deadlineMs) break;
-      await sleep(pollInterval);
-      continue;
-    }
-    if (answer.answered) return answer;
-    if (Date.now() + pollInterval >= deadlineMs) break;
-    await sleep(pollInterval);
-  }
-  return { answered: false };
-};
-var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget) => {
-  let result;
-  try {
-    result = await askUser(apiKey, {
-      question: `Allow ${description}?`,
-      type: "confirm",
-      context: `Agent wants to run this in ${projectName}`,
-      agentName: `Claude Code - ${projectName}`,
-      sessionId,
-      machineId,
-      toolName,
-      toolTarget
-    });
-  } catch {
-    switch (timeoutAction) {
-      case "approve":
-        return allow();
-      case "deny":
-        return deny("Push notification failed, denying per policy");
-      default:
-        return ask("Push notification failed, asking in terminal");
-    }
-  }
-  const deadline = Date.now() + timeoutSeconds * 1e3;
-  const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
-  if (answer.answered) {
-    return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value));
-  }
-  switch (timeoutAction) {
-    case "approve":
-      return allow();
-    case "deny":
-      return deny("No response within timeout");
-    default:
-      return ask("No push response, asking in terminal");
-  }
-};
-var handleTerminalOnly = () => {
-  return ask();
-};
-var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds, sessionId, machineId, toolName, toolTarget) => {
-  let result;
-  try {
-    result = await askUser(apiKey, {
-      question: `Allow ${description}?`,
-      type: "confirm",
-      context: `Agent wants to run this in ${projectName}`,
-      agentName: `Claude Code - ${projectName}`,
-      sessionId,
-      machineId,
-      toolName,
-      toolTarget
-    });
-  } catch {
-    return ask("Push notification failed, asking in terminal");
-  }
-  const deadline = Date.now() + pushFirstSeconds * 1e3;
-  const answer = await pollForAnswer(apiKey, result.correlationId, deadline, 1500);
-  if (answer.answered) {
-    return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value));
-  }
-  savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId);
-  return ask("Sent as push notification. You can also approve here.");
-};
-var handleNotifyOnly = async (apiKey, description, projectName, sessionId, machineId) => {
-  try {
-    await sendNotification(apiKey, {
-      title: "Agent needs approval",
-      body: description,
-      agentName: `Claude Code - ${projectName}`,
-      sessionId,
-      machineId
-    });
-  } catch {
-  }
-  return ask();
-};
-var handlePreToolUse = async (input) => {
-  try {
-    const apiKey = getApiKey();
-    const modeState = await fetchModeState(apiKey, input.session_id);
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
-    if (modeState.kill) {
-      return deny("Stopped by user \u2014 this agent was halted from Pushary");
-    }
-    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
-    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") {
-      return allow();
-    }
-    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
-      return deny(`Denied by policy for ${toolPolicy.tool}`);
-    }
-    const description = describeToolCall(input.tool_name, input.tool_input, "hook");
-    const projectName = basename(input.cwd ?? process.cwd());
-    const sessionId = input.session_id;
-    const machineId = getMachineId();
-    const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
-    switch (toolPolicy.mode) {
-      case "push_only":
-        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget);
-      case "terminal_only":
-        return handleTerminalOnly();
-      case "push_first":
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget);
-      case "notify_only":
-        return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
-      default:
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget);
-    }
-  } catch {
-    return ask("Pushary unavailable, falling back to terminal approval");
-  }
-};
-
-export {
-  handlePreToolUse
-};

package/dist/chunk-PZO7RZ5W.js

@@ -1,145 +0,0 @@
-import {
-  HOOK_BUDGETS
-} from "./chunk-XHTZ2DWC.js";
-
-// src/claude-config.ts
-import { join } from "path";
-var PUSHARY_MCP_URL = "https://pushary.com/api/mcp/mcp";
-var PUSHARY_PERMISSION_RULE = "mcp__pushary__*";
-var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
-var ensureRecord = (target, key) => {
-  const existing = asRecord(target[key]);
-  if (existing) return existing;
-  const created = {};
-  target[key] = created;
-  return created;
-};
-var isPusharyPermission = (rule) => typeof rule === "string" && (rule.includes("pushary") || rule.includes("MCP(pushary"));
-var isPusharyHook = (entry) => {
-  const hooks = asRecord(entry)?.hooks;
-  if (!Array.isArray(hooks)) return false;
-  return hooks.some((hook) => {
-    const command = String(asRecord(hook)?.command ?? "");
-    return command.includes("pushary-hook") || command.includes("pushary-post-hook") || command.includes("pushary-stop-hook") || command.includes("pushary-prompt-hook");
-  });
-};
-var addClaudeMcpServer = (config, apiKey) => {
-  const mcpServers = ensureRecord(config, "mcpServers");
-  mcpServers.pushary = {
-    type: "http",
-    url: PUSHARY_MCP_URL,
-    headers: { Authorization: `Bearer ${apiKey}` }
-  };
-};
-var removeClaudeMcpServers = (config) => {
-  let changed = false;
-  const removeFrom = (target) => {
-    const mcpServers = asRecord(target.mcpServers);
-    if (!mcpServers?.pushary) return;
-    delete mcpServers.pushary;
-    if (Object.keys(mcpServers).length === 0) delete target.mcpServers;
-    changed = true;
-  };
-  removeFrom(config);
-  const projects = asRecord(config.projects);
-  if (projects) {
-    for (const project of Object.values(projects)) {
-      const projectConfig = asRecord(project);
-      if (projectConfig) removeFrom(projectConfig);
-    }
-  }
-  return changed;
-};
-var addPusharyToolPermissions = (settings) => {
-  const permissions = ensureRecord(settings, "permissions");
-  const allow = Array.isArray(permissions.allow) ? permissions.allow : [];
-  const filtered = allow.filter((rule) => !isPusharyPermission(rule));
-  if (!filtered.includes(PUSHARY_PERMISSION_RULE)) {
-    filtered.push(PUSHARY_PERMISSION_RULE);
-  }
-  permissions.allow = filtered;
-};
-var addPusharyHooks = (settings, binDir) => {
-  const resolve = (name) => binDir ? join(binDir, name) : name;
-  const hooks = ensureRecord(settings, "hooks");
-  const preToolUse = (Array.isArray(hooks.PreToolUse) ? hooks.PreToolUse : []).filter((entry) => !isPusharyHook(entry));
-  preToolUse.push({
-    matcher: "Bash|Write|Edit",
-    hooks: [{
-      type: "command",
-      command: resolve("pushary-hook"),
-      timeout: HOOK_BUDGETS.claude.budgetSeconds
-    }]
-  });
-  hooks.PreToolUse = preToolUse;
-  const postToolUse = (Array.isArray(hooks.PostToolUse) ? hooks.PostToolUse : []).filter((entry) => !isPusharyHook(entry));
-  postToolUse.push({
-    matcher: "Bash|Write|Edit",
-    hooks: [{
-      type: "command",
-      command: resolve("pushary-post-hook"),
-      timeout: 10
-    }]
-  });
-  hooks.PostToolUse = postToolUse;
-  const stop = (Array.isArray(hooks.Stop) ? hooks.Stop : []).filter((entry) => !isPusharyHook(entry));
-  stop.push({
-    hooks: [{
-      type: "command",
-      command: resolve("pushary-stop-hook"),
-      timeout: 10
-    }]
-  });
-  hooks.Stop = stop;
-  const userPromptSubmit = (Array.isArray(hooks.UserPromptSubmit) ? hooks.UserPromptSubmit : []).filter((entry) => !isPusharyHook(entry));
-  userPromptSubmit.push({
-    hooks: [{
-      type: "command",
-      command: resolve("pushary-prompt-hook"),
-      timeout: 10
-    }]
-  });
-  hooks.UserPromptSubmit = userPromptSubmit;
-};
-var removePusharySettings = (settings) => {
-  let changed = removeClaudeMcpServers(settings);
-  const permissions = asRecord(settings.permissions);
-  if (permissions && Array.isArray(permissions.allow)) {
-    const filtered = permissions.allow.filter((rule) => !isPusharyPermission(rule));
-    if (filtered.length !== permissions.allow.length) {
-      if (filtered.length === 0) {
-        delete permissions.allow;
-      } else {
-        permissions.allow = filtered;
-      }
-      if (Object.keys(permissions).length === 0) delete settings.permissions;
-      changed = true;
-    }
-  }
-  const hooks = asRecord(settings.hooks);
-  if (hooks) {
-    for (const key of ["PreToolUse", "PostToolUse", "Stop", "UserPromptSubmit"]) {
-      const entries = hooks[key];
-      if (!Array.isArray(entries)) continue;
-      const filtered = entries.filter((entry) => !isPusharyHook(entry));
-      if (filtered.length !== entries.length) {
-        if (filtered.length === 0) {
-          delete hooks[key];
-        } else {
-          hooks[key] = filtered;
-        }
-        changed = true;
-      }
-    }
-    if (Object.keys(hooks).length === 0) delete settings.hooks;
-  }
-  return changed;
-};
-
-export {
-  addClaudeMcpServer,
-  removeClaudeMcpServers,
-  addPusharyToolPermissions,
-  addPusharyHooks,
-  removePusharySettings
-};