@pushary/agent-hooks 0.28.1 → 0.28.3

package/dist/chunk-WPVL6VIT.js

@@ -1,160 +0,0 @@
-// ../contracts/src/index.ts
-var APPROVAL_MODES = ["push_only", "terminal_only", "push_first", "notify_only"];
-var isApprovalMode = (value) => typeof value === "string" && APPROVAL_MODES.includes(value);
-var MATCH_RANKS = ["none", "tool", "prefix", "exact"];
-var matchRankWeight = (rank) => MATCH_RANKS.indexOf(rank);
-var matchToolPattern = (pattern, toolName, arg) => {
-  const open = pattern.indexOf("(");
-  if (open === -1 || !pattern.endsWith(")")) {
-    return pattern === toolName ? "tool" : "none";
-  }
-  if (pattern.slice(0, open) !== toolName || arg === void 0) return "none";
-  const inner = pattern.slice(open + 1, -1);
-  if (inner.endsWith(":*")) {
-    return arg.startsWith(inner.slice(0, -2)) ? "prefix" : "none";
-  }
-  return arg === inner ? "exact" : "none";
-};
-var POLICY_ARG_KEYS = {
-  Bash: "command",
-  Edit: "file_path",
-  Write: "file_path"
-};
-var extractPolicyArg = (toolName, toolInput) => {
-  const key = POLICY_ARG_KEYS[toolName];
-  if (!key) return void 0;
-  const value = toolInput[key];
-  return typeof value === "string" ? value : void 0;
-};
-var SAFE_SHELL_COMMANDS = /* @__PURE__ */ new Set([
-  "ls",
-  "pwd",
-  "cd",
-  "cat",
-  "head",
-  "tail",
-  "wc",
-  "echo",
-  "printf",
-  "which",
-  "type",
-  "whoami",
-  "id",
-  "uname",
-  "arch",
-  "printenv",
-  "locale",
-  "tty",
-  "dirname",
-  "basename",
-  "realpath",
-  "readlink",
-  "stat",
-  "cut",
-  "nl",
-  "tr",
-  "comm",
-  "diff",
-  "cmp",
-  "grep",
-  "egrep",
-  "fgrep",
-  "jq",
-  "cksum",
-  "md5sum",
-  "sha1sum",
-  "sha256sum",
-  "du",
-  "df",
-  "ps",
-  "true"
-]);
-var SAFE_GIT_SUBCOMMANDS = /* @__PURE__ */ new Set([
-  "status",
-  "log",
-  "diff",
-  "show",
-  "rev-parse",
-  "describe",
-  "blame",
-  "shortlog",
-  "ls-files",
-  "ls-tree",
-  "cat-file",
-  "whatchanged",
-  "rev-list",
-  "name-rev",
-  "for-each-ref",
-  "var",
-  "count-objects"
-]);
-var GIT_WRITE_FLAGS = (token) => token === "--output" || token.startsWith("--output=");
-var UNSAFE_SHELL_CHARS = /[;&|<>(){}`\\\n\r]/;
-var basenameOf = (token) => {
-  const slash = Math.max(token.lastIndexOf("/"), token.lastIndexOf("\\"));
-  return slash === -1 ? token : token.slice(slash + 1);
-};
-var tokenizeShellCommand = (command) => {
-  const tokens = [];
-  let current = "";
-  let quote = null;
-  let started = false;
-  for (const ch of command) {
-    if (quote) {
-      if (ch === quote) quote = null;
-      else current += ch;
-      started = true;
-      continue;
-    }
-    if (ch === '"' || ch === "'") {
-      quote = ch;
-      started = true;
-      continue;
-    }
-    if (ch === " " || ch === "	") {
-      if (started) {
-        tokens.push(current);
-        current = "";
-        started = false;
-      }
-      continue;
-    }
-    current += ch;
-    started = true;
-  }
-  if (quote) return null;
-  if (started) tokens.push(current);
-  return tokens;
-};
-var isSafeReadOnlyCommand = (command) => {
-  const trimmed = command.trim();
-  if (!trimmed || trimmed.length > 2e3) return false;
-  if (UNSAFE_SHELL_CHARS.test(trimmed)) return false;
-  const tokens = tokenizeShellCommand(trimmed);
-  if (!tokens || tokens.length === 0) return false;
-  const first = tokens[0];
-  if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(first) || first.includes("$")) return false;
-  const exe = basenameOf(first);
-  if (exe === "git") {
-    const sub = tokens[1];
-    if (!sub || sub.startsWith("-")) return false;
-    if (!SAFE_GIT_SUBCOMMANDS.has(sub)) return false;
-    return !tokens.some(GIT_WRITE_FLAGS);
-  }
-  return SAFE_SHELL_COMMANDS.has(exe);
-};
-var API_KEY_PATTERN = /^pk_[a-f0-9]+\.[a-f0-9]+$/;
-var isValidApiKey = (value) => API_KEY_PATTERN.test(value);
-var ACTION_BODY_MAX = 4e3;
-var DECISION_LINE_MAX = 500;
-
-export {
-  isApprovalMode,
-  matchRankWeight,
-  matchToolPattern,
-  extractPolicyArg,
-  isSafeReadOnlyCommand,
-  isValidApiKey,
-  ACTION_BODY_MAX,
-  DECISION_LINE_MAX
-};

package/dist/chunk-X6LV22NZ.js

@@ -1,229 +0,0 @@
-import {
-  denyReasonFrom,
-  isDeferAnswer
-} from "./chunk-KQYIHZ5E.js";
-import {
-  DEFAULT_SESSION,
-  askUser,
-  cancelQuestion,
-  deriveAction,
-  deriveActionBody,
-  deriveBlocker,
-  deriveToolTarget,
-  describeToolCall,
-  fetchModeState,
-  getMachineId,
-  getPolicy,
-  readLastPrompt,
-  readLastUserPrompt,
-  resolvePolicy,
-  savePendingQuestion,
-  sendNotification,
-  waitForAnswer
-} from "./chunk-UTK3TJC4.js";
-import {
-  hookWaitClamped,
-  hookWaitDeadline
-} from "./chunk-XHTZ2DWC.js";
-import {
-  getApiKey
-} from "./chunk-NKXSILEW.js";
-
-// src/hook.ts
-import { basename } from "path";
-var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-var START_MS = Date.now();
-var allow = () => ({
-  hookSpecificOutput: {
-    hookEventName: "PreToolUse",
-    permissionDecision: "allow"
-  }
-});
-var deny = (reason) => ({
-  hookSpecificOutput: {
-    hookEventName: "PreToolUse",
-    permissionDecision: "deny",
-    permissionDecisionReason: reason
-  }
-});
-var ask = (reason) => ({
-  hookSpecificOutput: {
-    hookEventName: "PreToolUse",
-    permissionDecision: "ask",
-    ...reason ? { permissionDecisionReason: reason } : {}
-  }
-});
-var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
-  while (Date.now() < deadlineMs) {
-    const remaining = Math.min(Math.max(deadlineMs - Date.now(), 1e3), 3e4);
-    let answer;
-    try {
-      answer = await waitForAnswer(apiKey, correlationId, remaining);
-    } catch {
-      if (Date.now() + pollInterval >= deadlineMs) break;
-      await sleep(pollInterval);
-      continue;
-    }
-    if (answer.answered) return answer;
-    if (Date.now() + pollInterval >= deadlineMs) break;
-    await sleep(pollInterval);
-  }
-  return { answered: false };
-};
-var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget, decision) => {
-  let result;
-  try {
-    result = await askUser(apiKey, {
-      question: `Allow ${description}?`,
-      type: "confirm",
-      context: `Agent wants to run this in ${projectName}`,
-      agentName: `Claude Code - ${projectName}`,
-      sessionId,
-      machineId,
-      toolName,
-      toolTarget,
-      ...decision
-    });
-  } catch {
-    switch (timeoutAction) {
-      case "approve":
-        return allow();
-      case "deny":
-        return deny("Push notification failed, denying per policy");
-      default:
-        return ask("Push notification failed, asking in terminal");
-    }
-  }
-  if (result.suppressed) {
-    await cancelQuestion(apiKey, result.correlationId).catch(() => {
-    });
-    return ask("You are at the keyboard \u2014 approve here.");
-  }
-  if (result.noDevices) {
-    switch (timeoutAction) {
-      case "approve":
-        return allow();
-      case "deny":
-        return deny("No device connected to approve on");
-      default:
-        return ask("No device connected \u2014 asking in terminal");
-    }
-  }
-  const now = Date.now();
-  const deadline = hookWaitDeadline(START_MS, timeoutSeconds, "claude", now);
-  const clampCut = hookWaitClamped(START_MS, timeoutSeconds, "claude", now);
-  const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
-  if (answer.answered) {
-    if (isDeferAnswer(answer.value)) return ask("Handling on your machine");
-    return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value));
-  }
-  if (clampCut) {
-    savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId);
-    return ask("Approval window exceeds this hook budget \u2014 asking here.");
-  }
-  switch (timeoutAction) {
-    case "approve":
-      return allow();
-    case "deny":
-      return deny("No response within timeout");
-    default:
-      return ask("No push response, asking in terminal");
-  }
-};
-var handleTerminalOnly = () => {
-  return ask();
-};
-var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds, sessionId, machineId, toolName, toolTarget, decision) => {
-  let result;
-  try {
-    result = await askUser(apiKey, {
-      question: `Allow ${description}?`,
-      type: "confirm",
-      context: `Agent wants to run this in ${projectName}`,
-      agentName: `Claude Code - ${projectName}`,
-      sessionId,
-      machineId,
-      toolName,
-      toolTarget,
-      ...decision
-    });
-  } catch {
-    return ask("Push notification failed, asking in terminal");
-  }
-  if (result.suppressed) {
-    await cancelQuestion(apiKey, result.correlationId).catch(() => {
-    });
-    return ask("You are at the keyboard \u2014 approve here.");
-  }
-  if (result.noDevices) {
-    return ask("No device connected \u2014 asking in terminal.");
-  }
-  const deadline = hookWaitDeadline(START_MS, pushFirstSeconds, "claude", Date.now());
-  const answer = await pollForAnswer(apiKey, result.correlationId, deadline, 1500);
-  if (answer.answered) {
-    if (isDeferAnswer(answer.value)) return ask("Handling on your machine");
-    return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value));
-  }
-  savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId);
-  return ask("Sent as push notification. You can also approve here.");
-};
-var handleNotifyOnly = async (apiKey, description, projectName, sessionId, machineId) => {
-  try {
-    await sendNotification(apiKey, {
-      title: "Agent needs approval",
-      body: description,
-      agentName: `Claude Code - ${projectName}`,
-      sessionId,
-      machineId
-    });
-  } catch {
-  }
-  return ask();
-};
-var handlePreToolUse = async (input) => {
-  try {
-    const apiKey = getApiKey();
-    const modeState = await fetchModeState(apiKey, input.session_id);
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
-    if (modeState.kill) {
-      return deny("Stopped by user \u2014 this agent was halted from Pushary");
-    }
-    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
-    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") {
-      return allow();
-    }
-    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
-      return deny(`Denied by policy for ${toolPolicy.tool}`);
-    }
-    const description = describeToolCall(input.tool_name, input.tool_input, "hook");
-    const projectName = basename(input.cwd ?? process.cwd());
-    const sessionId = input.session_id;
-    const machineId = getMachineId();
-    const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
-    const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
-    const decision = {
-      intent,
-      action: deriveAction(input.tool_name, input.tool_input),
-      blocker: deriveBlocker(toolPolicy.mode),
-      actionBody: deriveActionBody(input.tool_name, input.tool_input)
-    };
-    switch (toolPolicy.mode) {
-      case "push_only":
-        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget, decision);
-      case "terminal_only":
-        return handleTerminalOnly();
-      case "push_first":
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
-      case "notify_only":
-        return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
-      default:
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
-    }
-  } catch {
-    return ask("Pushary unavailable, falling back to terminal approval");
-  }
-};
-
-export {
-  handlePreToolUse
-};

package/dist/chunk-XHTZ2DWC.js

@@ -1,206 +0,0 @@
-// ../contracts/src/index.ts
-var APPROVAL_MODES = ["push_only", "terminal_only", "push_first", "notify_only"];
-var isApprovalMode = (value) => typeof value === "string" && APPROVAL_MODES.includes(value);
-var HOOK_BUDGETS = {
-  claude: { budgetSeconds: 120, guardSeconds: 10 },
-  codex: { budgetSeconds: 180, guardSeconds: 10 },
-  gemini: { budgetSeconds: 180, guardSeconds: 10 },
-  // The Cursor gate is a dependency-free .mjs that cannot import this module; it
-  // mirrors these as MAX_BLOCK_MS (45s) inside its 60s failClosed budget.
-  cursor: { budgetSeconds: 60, guardSeconds: 15 }
-};
-var hookMaxWaitSeconds = (agent) => Math.max(HOOK_BUDGETS[agent].budgetSeconds - HOOK_BUDGETS[agent].guardSeconds, 1);
-var hookWaitDeadline = (startMs, policyWaitSeconds, agent, nowMs) => {
-  const maxWait = hookMaxWaitSeconds(agent);
-  return Math.min(
-    nowMs + Math.min(Math.max(policyWaitSeconds, 0), maxWait) * 1e3,
-    startMs + maxWait * 1e3
-  );
-};
-var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + hookMaxWaitSeconds(agent) * 1e3 < nowMs + Math.max(policyWaitSeconds, 0) * 1e3;
-var MATCH_RANKS = ["none", "tool", "prefix", "exact"];
-var matchRankWeight = (rank) => MATCH_RANKS.indexOf(rank);
-var matchToolPattern = (pattern, toolName, arg) => {
-  const open = pattern.indexOf("(");
-  if (open === -1 || !pattern.endsWith(")")) {
-    return pattern === toolName ? "tool" : "none";
-  }
-  if (pattern.slice(0, open) !== toolName || arg === void 0) return "none";
-  const inner = pattern.slice(open + 1, -1);
-  if (inner.endsWith(":*")) {
-    return arg.startsWith(inner.slice(0, -2)) ? "prefix" : "none";
-  }
-  return arg === inner ? "exact" : "none";
-};
-var POLICY_ARG_KEYS = {
-  Bash: "command",
-  Edit: "file_path",
-  Write: "file_path"
-};
-var extractPolicyArg = (toolName, toolInput) => {
-  const key = POLICY_ARG_KEYS[toolName];
-  if (!key) return void 0;
-  const value = toolInput[key];
-  return typeof value === "string" ? value : void 0;
-};
-var SAFE_SHELL_COMMANDS = /* @__PURE__ */ new Set([
-  "ls",
-  "pwd",
-  "cd",
-  "cat",
-  "head",
-  "tail",
-  "wc",
-  "echo",
-  "printf",
-  "which",
-  "type",
-  "whoami",
-  "id",
-  "uname",
-  "arch",
-  "printenv",
-  "locale",
-  "tty",
-  "dirname",
-  "basename",
-  "realpath",
-  "readlink",
-  "stat",
-  "cut",
-  "nl",
-  "tr",
-  "comm",
-  "diff",
-  "cmp",
-  "grep",
-  "egrep",
-  "fgrep",
-  "jq",
-  "cksum",
-  "md5sum",
-  "sha1sum",
-  "sha256sum",
-  "du",
-  "df",
-  "ps",
-  "true"
-]);
-var SAFE_GIT_SUBCOMMANDS = /* @__PURE__ */ new Set([
-  "status",
-  "log",
-  "diff",
-  "show",
-  "rev-parse",
-  "describe",
-  "blame",
-  "shortlog",
-  "ls-files",
-  "ls-tree",
-  "cat-file",
-  "whatchanged",
-  "rev-list",
-  "name-rev",
-  "for-each-ref",
-  "var",
-  "count-objects"
-]);
-var GIT_WRITE_FLAGS = (token) => token === "--output" || token.startsWith("--output=");
-var UNSAFE_SHELL_CHARS = /[;&|<>(){}`\\\n\r]/;
-var basenameOf = (token) => {
-  const slash = Math.max(token.lastIndexOf("/"), token.lastIndexOf("\\"));
-  return slash === -1 ? token : token.slice(slash + 1);
-};
-var tokenizeShellCommand = (command) => {
-  const tokens = [];
-  let current = "";
-  let quote = null;
-  let started = false;
-  for (const ch of command) {
-    if (quote) {
-      if (ch === quote) quote = null;
-      else current += ch;
-      started = true;
-      continue;
-    }
-    if (ch === '"' || ch === "'") {
-      quote = ch;
-      started = true;
-      continue;
-    }
-    if (ch === " " || ch === "	") {
-      if (started) {
-        tokens.push(current);
-        current = "";
-        started = false;
-      }
-      continue;
-    }
-    current += ch;
-    started = true;
-  }
-  if (quote) return null;
-  if (started) tokens.push(current);
-  return tokens;
-};
-var isSafeReadOnlyCommand = (command) => {
-  const trimmed = command.trim();
-  if (!trimmed || trimmed.length > 2e3) return false;
-  if (UNSAFE_SHELL_CHARS.test(trimmed)) return false;
-  const tokens = tokenizeShellCommand(trimmed);
-  if (!tokens || tokens.length === 0) return false;
-  const first = tokens[0];
-  if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(first) || first.includes("$")) return false;
-  const exe = basenameOf(first);
-  if (exe === "git") {
-    const sub = tokens[1];
-    if (!sub || sub.startsWith("-")) return false;
-    if (!SAFE_GIT_SUBCOMMANDS.has(sub)) return false;
-    return !tokens.some(GIT_WRITE_FLAGS);
-  }
-  return SAFE_SHELL_COMMANDS.has(exe);
-};
-var API_KEY_PATTERN = /^pk_[a-f0-9]+\.[a-f0-9]+$/;
-var isValidApiKey = (value) => API_KEY_PATTERN.test(value);
-var ACTION_BODY_MAX = 4e3;
-var DECISION_LINE_MAX = 500;
-var SECRET_REDACTION_RULES = [
-  { pattern: /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, replacement: "[redacted key]" },
-  { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, replacement: "[redacted]" },
-  { pattern: /\b[spr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bwhsec_[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
-  { pattern: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bgithub_pat_[A-Za-z0-9_]{22,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bglpat-[A-Za-z0-9_-]{20,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bAIza[A-Za-z0-9_-]{35}\b/g, replacement: "[redacted]" },
-  { pattern: /\bAKIA[0-9A-Z]{16}\b/g, replacement: "[redacted]" },
-  { pattern: /\bnpm_[A-Za-z0-9]{36}\b/g, replacement: "[redacted]" },
-  { pattern: /\bxai-[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
-  { pattern: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bbearer\s+[A-Za-z0-9._~+/=-]+/gi, replacement: "bearer [redacted]" },
-  { pattern: /\bauthorization:\s*\S+/gi, replacement: "authorization: [redacted]" },
-  {
-    pattern: /((?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)\s*[=:]\s*)("[^"]*"|'[^']*'|\S+)/gi,
-    replacement: "$1[redacted]"
-  }
-];
-var HIGH_ENTROPY_RULE = { pattern: /[A-Za-z0-9+/]{40,}={0,2}/g, replacement: "[redacted]" };
-var redactSecrets = (text) => SECRET_REDACTION_RULES.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
-var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
-
-export {
-  isApprovalMode,
-  HOOK_BUDGETS,
-  hookWaitDeadline,
-  hookWaitClamped,
-  matchRankWeight,
-  matchToolPattern,
-  extractPolicyArg,
-  isSafeReadOnlyCommand,
-  isValidApiKey,
-  ACTION_BODY_MAX,
-  DECISION_LINE_MAX,
-  redactSecrets,
-  redactSecretsDeep
-};