@pushary/agent-hooks 0.36.0 → 0.38.0

package/dist/bin/pushary-clean.js

@@ -1,8 +1,4 @@
 #!/usr/bin/env node
-import {
-  removeClaudeMcpServers,
-  removePusharySettings
-} from "../chunk-SO6ZG5ML.js";
 import {
   removeCodexHooks,
   removeGeminiSettings,
@@ -11,6 +7,10 @@ import {
 import {
   execNpm
 } from "../chunk-J7JWI3KU.js";
+import {
+  removeClaudeMcpServers,
+  removePusharySettings
+} from "../chunk-7EW3USQF.js";
 import "../chunk-Z5PL3K7C.js";
 
 // bin/pushary-clean.ts

package/dist/bin/pushary-codex-hook.js

@@ -32,7 +32,7 @@ import {
   toCodexWire,
   toPolicyLookup,
   waitForAnswer
-} from "../chunk-WH5ASAZK.js";
+} from "../chunk-JHN3H6LX.js";
 import {
   isGatingMoment,
   recordKeylessMoment

package/dist/bin/pushary-codex.js

@@ -4,7 +4,7 @@ import {
   getMachineId,
   reportEvent,
   waitForAnswer
-} from "../chunk-WH5ASAZK.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import {

package/dist/bin/pushary-gemini-hook.js

@@ -24,7 +24,7 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-WH5ASAZK.js";
+} from "../chunk-JHN3H6LX.js";
 import {
   isGatingMoment,
   recordKeylessMoment

package/dist/bin/pushary-hook.js

@@ -1,9 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-JR4H3FND.js";
+} from "../chunk-X6L25EOF.js";
+import "../chunk-7EW3USQF.js";
 import "../chunk-KQYIHZ5E.js";
-import "../chunk-WH5ASAZK.js";
+import "../chunk-JHN3H6LX.js";
 import "../chunk-R5AJNXZS.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";

package/dist/bin/pushary-notification-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-WH5ASAZK.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-permission-denied-hook.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-permission-denied-hook.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+import {
+  handlePermissionDenied
+} from "../chunk-X6L25EOF.js";
+import "../chunk-7EW3USQF.js";
+import "../chunk-KQYIHZ5E.js";
+import "../chunk-JHN3H6LX.js";
+import "../chunk-R5AJNXZS.js";
+import "../chunk-DWED7BS3.js";
+import "../chunk-Z5PL3K7C.js";
+import "../chunk-NKXSILEW.js";
+
+// bin/pushary-permission-denied-hook.ts
+var main = async () => {
+  let rawInput = "";
+  for await (const chunk of process.stdin) {
+    rawInput += chunk;
+  }
+  try {
+    const input = rawInput.trim() ? JSON.parse(rawInput) : {};
+    const output = await handlePermissionDenied(input);
+    if (output) process.stdout.write(JSON.stringify(output));
+  } catch {
+  }
+};
+main();

package/dist/bin/pushary-permission-hook.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-permission-hook.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+import {
+  handlePermissionRequest
+} from "../chunk-X6L25EOF.js";
+import "../chunk-7EW3USQF.js";
+import "../chunk-KQYIHZ5E.js";
+import "../chunk-JHN3H6LX.js";
+import "../chunk-R5AJNXZS.js";
+import "../chunk-DWED7BS3.js";
+import "../chunk-Z5PL3K7C.js";
+import "../chunk-NKXSILEW.js";
+
+// bin/pushary-permission-hook.ts
+var main = async () => {
+  let rawInput = "";
+  for await (const chunk of process.stdin) {
+    rawInput += chunk;
+  }
+  try {
+    const input = rawInput.trim() ? JSON.parse(rawInput) : {};
+    const output = await handlePermissionRequest(input);
+    if (output) process.stdout.write(JSON.stringify(output));
+  } catch {
+  }
+};
+main();

package/dist/bin/pushary-post-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-WH5ASAZK.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-prompt-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-WH5ASAZK.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-session-end-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-WH5ASAZK.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-session-start-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-WH5ASAZK.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-setup.js

@@ -1,9 +1,4 @@
 #!/usr/bin/env node
-import {
-  addClaudeMcpServer,
-  addPusharyHooks,
-  addPusharyToolPermissions
-} from "../chunk-SO6ZG5ML.js";
 import {
   GEMINI_HOOK_BINARY,
   addCodexHookTrust,
@@ -22,9 +17,14 @@ import {
   resolveGlobalBinDir,
   resolveGlobalBinary
 } from "../chunk-J7JWI3KU.js";
+import {
+  addClaudeMcpServer,
+  addPusharyHooks,
+  addPusharyToolPermissions
+} from "../chunk-7EW3USQF.js";
 import {
   reportEvent
-} from "../chunk-WH5ASAZK.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import {
   isValidApiKey

package/dist/bin/pushary-stop-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-WH5ASAZK.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-stopfailure-hook.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-stopfailure-hook.js

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+import {
+  handleStopFailure
+} from "../chunk-JHN3H6LX.js";
+import "../chunk-DWED7BS3.js";
+import "../chunk-Z5PL3K7C.js";
+import "../chunk-NKXSILEW.js";
+
+// bin/pushary-stopfailure-hook.ts
+var main = async () => {
+  let rawInput = "";
+  for await (const chunk of process.stdin) {
+    rawInput += chunk;
+  }
+  try {
+    const input = rawInput.trim() ? JSON.parse(rawInput) : {};
+    await handleStopFailure(input);
+  } catch {
+  }
+};
+main();

package/dist/{chunk-SO6ZG5ML.js → chunk-7EW3USQF.js}

@@ -6,6 +6,8 @@ import {
 import { join } from "path";
 var PUSHARY_MCP_URL = "https://pushary.com/api/mcp/mcp";
 var PUSHARY_PERMISSION_RULE = "mcp__pushary__*";
+var PRETOOLUSE_GATED_TOOLS = ["Bash", "Write", "Edit", "MultiEdit", "NotebookEdit", "PowerShell", "Monitor"];
+var PRETOOLUSE_HANDLED_TOOLS = /* @__PURE__ */ new Set([...PRETOOLUSE_GATED_TOOLS, "AskUserQuestion"]);
 var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 var ensureRecord = (target, key) => {
   const existing = asRecord(target[key]);
@@ -20,7 +22,7 @@ var isPusharyHook = (entry) => {
   if (!Array.isArray(hooks)) return false;
   return hooks.some((hook) => {
     const command = String(asRecord(hook)?.command ?? "");
-    return command.includes("pushary-hook") || command.includes("pushary-post-hook") || command.includes("pushary-stop-hook") || command.includes("pushary-prompt-hook") || command.includes("pushary-notification-hook") || command.includes("pushary-session-start-hook") || command.includes("pushary-session-end-hook");
+    return command.includes("pushary-hook") || command.includes("pushary-post-hook") || command.includes("pushary-stop-hook") || command.includes("pushary-prompt-hook") || command.includes("pushary-notification-hook") || command.includes("pushary-session-start-hook") || command.includes("pushary-session-end-hook") || command.includes("pushary-stopfailure-hook") || command.includes("pushary-permission-hook") || command.includes("pushary-permission-denied-hook");
   });
 };
 var addClaudeMcpServer = (config, apiKey) => {
@@ -65,7 +67,7 @@ var addPusharyHooks = (settings, binDir) => {
     return /\s/.test(path) ? `"${path}"` : path;
   };
   const hooks = ensureRecord(settings, "hooks");
-  const SHELL_AND_FILE_TOOLS = "Bash|Write|Edit|MultiEdit|NotebookEdit|PowerShell|Monitor";
+  const SHELL_AND_FILE_TOOLS = PRETOOLUSE_GATED_TOOLS.join("|");
   const preToolUse = (Array.isArray(hooks.PreToolUse) ? hooks.PreToolUse : []).filter((entry) => !isPusharyHook(entry));
   preToolUse.push({
     matcher: `${SHELL_AND_FILE_TOOLS}|AskUserQuestion`,
@@ -133,6 +135,33 @@ var addPusharyHooks = (settings, binDir) => {
     }]
   });
   hooks.SessionEnd = sessionEnd;
+  const stopFailure = (Array.isArray(hooks.StopFailure) ? hooks.StopFailure : []).filter((entry) => !isPusharyHook(entry));
+  stopFailure.push({
+    hooks: [{
+      type: "command",
+      command: resolve("pushary-stopfailure-hook"),
+      timeout: 10
+    }]
+  });
+  hooks.StopFailure = stopFailure;
+  const permissionRequest = (Array.isArray(hooks.PermissionRequest) ? hooks.PermissionRequest : []).filter((entry) => !isPusharyHook(entry));
+  permissionRequest.push({
+    hooks: [{
+      type: "command",
+      command: resolve("pushary-permission-hook"),
+      timeout: HOOK_BUDGETS.claude.budgetSeconds
+    }]
+  });
+  hooks.PermissionRequest = permissionRequest;
+  const permissionDenied = (Array.isArray(hooks.PermissionDenied) ? hooks.PermissionDenied : []).filter((entry) => !isPusharyHook(entry));
+  permissionDenied.push({
+    hooks: [{
+      type: "command",
+      command: resolve("pushary-permission-denied-hook"),
+      timeout: 60
+    }]
+  });
+  hooks.PermissionDenied = permissionDenied;
 };
 var removePusharySettings = (settings) => {
   let changed = removeClaudeMcpServers(settings);
@@ -151,7 +180,7 @@ var removePusharySettings = (settings) => {
   }
   const hooks = asRecord(settings.hooks);
   if (hooks) {
-    for (const key of ["PreToolUse", "PostToolUse", "Stop", "UserPromptSubmit", "Notification", "SessionStart", "SessionEnd"]) {
+    for (const key of ["PreToolUse", "PostToolUse", "Stop", "StopFailure", "UserPromptSubmit", "Notification", "SessionStart", "SessionEnd", "PermissionRequest", "PermissionDenied"]) {
       const entries = hooks[key];
       if (!Array.isArray(entries)) continue;
       const filtered = entries.filter((entry) => !isPusharyHook(entry));
@@ -170,6 +199,7 @@ var removePusharySettings = (settings) => {
 };
 
 export {
+  PRETOOLUSE_HANDLED_TOOLS,
   addClaudeMcpServer,
   removeClaudeMcpServers,
   addPusharyToolPermissions,

package/dist/{chunk-WH5ASAZK.js → chunk-JHN3H6LX.js}

@@ -812,12 +812,14 @@ var reportEvent = async (event, options = {}) => {
     }
   }, { maxAttempts: options.maxAttempts ?? 2, baseDelayMs: 300 });
 };
+var NON_GATED_MIRROR_TOOLS = /* @__PURE__ */ new Set(["TodoWrite"]);
 var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
     const projectName = basename(input.cwd ?? process.cwd());
     const action = describeToolCall(input.tool_name, input.tool_input, "event");
     const lookup = toPolicyLookup(input.tool_name, input.tool_input);
-    const isError = isToolResultError(input.tool_result);
+    const toolResult = input.tool_response ?? input.tool_result;
+    const isError = isToolResultError(toolResult);
     const receiptsEnabled = process.env.PUSHARY_RECEIPTS !== "off";
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const liveMode = await fetchModeState(getApiKey(), input.session_id);
@@ -827,18 +829,19 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
       additionalContext = buildLateAnswerContext(late);
       for (const l of late) removePendingQuestion(sessionKey, l.correlationId);
     }
-    const decisionSource = deriveDecisionSource(lookup.tool, lookup.input, liveMode);
-    const beacon = decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode) : void 0;
+    const isMirrorOnly = NON_GATED_MIRROR_TOOLS.has(input.tool_name);
+    const decisionSource = isMirrorOnly ? void 0 : deriveDecisionSource(lookup.tool, lookup.input, liveMode);
+    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode) : void 0;
     const toolReport = reportEvent({
       event: isError ? "tool_error" : "tool_complete",
       agentType: agent.type,
       agentName: `${agent.label} - ${projectName}`,
       action,
       sessionId: input.session_id,
-      error: isError ? String(input.tool_result?.error ?? input.tool_result?.stderr ?? "").slice(0, 500) : void 0,
+      error: isError ? String(toolResult?.error ?? toolResult?.stderr ?? "").slice(0, 500) : void 0,
       decisionSource,
       ...beacon ? { decisionOrigin: beacon.decisionOrigin, toolName: beacon.toolName, toolTarget: beacon.toolTarget } : {},
-      meta: receiptsEnabled ? deriveReceiptMeta(lookup.tool, lookup.input, input.tool_result, input.cwd ?? process.cwd()) : void 0,
+      meta: receiptsEnabled ? deriveReceiptMeta(lookup.tool, lookup.input, toolResult, input.cwd ?? process.cwd()) : void 0,
       usage: deriveUsage(input.transcript_path, input.session_id)
     }, { maxAttempts: 1 });
     const extraReports = [];
@@ -902,6 +905,14 @@ var summarizeFinalMessage = (message) => {
   if (!collapsed) return "Session ended";
   return collapsed.slice(0, STOP_SUMMARY_MAX_LENGTH);
 };
+var countArray = (value) => Array.isArray(value) ? value.length : 0;
+var summarizeStop = (input) => {
+  const running = countArray(input.background_tasks);
+  if (running > 0) return `Paused with ${running} background task${running === 1 ? "" : "s"} still running`;
+  const crons = countArray(input.session_crons);
+  if (crons > 0) return `Idle until a scheduled task wakes it (${crons} pending)`;
+  return summarizeFinalMessage(input.last_assistant_message);
+};
 var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
     const projectName = basename(input.cwd ?? process.cwd());
@@ -915,7 +926,7 @@ var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
         event: "session_end",
         agentType: agent.type,
         agentName: `${agent.label} - ${projectName}`,
-        action: summarizeFinalMessage(input.last_assistant_message),
+        action: summarizeStop(input),
         sessionId: input.session_id,
         usage: deriveUsage(input.transcript_path, input.session_id)
       }, { maxAttempts: 1 })
@@ -948,7 +959,7 @@ var handleSessionStart = async (input, agent = CLAUDE_CODE_AGENT) => {
       agentName: `${agent.label} - ${projectName}`,
       action,
       sessionId: input.session_id
-    }, { maxAttempts: 1, timeoutMs: 800 });
+    }, { maxAttempts: 2, timeoutMs: 4e3 });
   } catch {
   }
 };
@@ -965,6 +976,12 @@ var handleSessionEnd = async (input, agent = CLAUDE_CODE_AGENT) => {
     const projectName = basename(input.cwd ?? process.cwd());
     const action = typeof input.reason === "string" && SESSION_END_ACTIONS[input.reason] || "Session ended";
     const sessionKey = input.session_id || DEFAULT_SESSION;
+    const late = await reconcilePendingQuestions(sessionKey);
+    if (late.length > 0) {
+      await notifyLateAnswers(getApiKey(), late, `${agent.label} - ${projectName}`, input.session_id).catch(() => {
+      });
+      for (const l of late) removePendingQuestion(sessionKey, l.correlationId);
+    }
     if (!isDefaultSession(sessionKey)) removePendingSession(sessionKey);
     await reportEvent({
       event: "session_closed",
@@ -972,7 +989,7 @@ var handleSessionEnd = async (input, agent = CLAUDE_CODE_AGENT) => {
       agentName: `${agent.label} - ${projectName}`,
       action,
       sessionId: input.session_id
-    }, { maxAttempts: 1, timeoutMs: 800 });
+    }, { maxAttempts: 2, timeoutMs: 3e3 });
   } catch {
   }
 };
@@ -1014,6 +1031,57 @@ var handleNotification = async (input, agent = CLAUDE_CODE_AGENT) => {
   } catch {
   }
 };
+var STOPFAILURE_MAX_ERROR_LENGTH = 300;
+var STOPFAILURE_REASONS = {
+  rate_limit: "Rate limited by the API",
+  overloaded: "The API is overloaded right now",
+  authentication_failed: "Authentication failed",
+  billing_error: "A billing error stopped the turn"
+};
+var describeStopFailure = (error) => {
+  const fromString = (s) => {
+    const v = s.trim();
+    if (!v) return void 0;
+    return STOPFAILURE_REASONS[v] ?? v.slice(0, STOPFAILURE_MAX_ERROR_LENGTH);
+  };
+  if (typeof error === "string") {
+    const described = fromString(error);
+    if (described) return described;
+  } else if (error && typeof error === "object") {
+    const e = error;
+    for (const key of ["type", "message", "error", "code"]) {
+      const val = e[key];
+      if (typeof val === "string") {
+        const described = fromString(val);
+        if (described) return described;
+      }
+    }
+  }
+  return "The turn ended on an API error (rate limit, billing, or auth).";
+};
+var handleStopFailure = async (input, agent = CLAUDE_CODE_AGENT) => {
+  try {
+    let apiKey;
+    try {
+      apiKey = getApiKey();
+    } catch {
+      return;
+    }
+    const projectName = basename(input.cwd ?? process.cwd());
+    const mode = await fetchModeState(apiKey, input.session_id).catch(() => null);
+    if (mode?.kill || mode?.mode === "terminal_only") return;
+    const reason = describeStopFailure(input.error);
+    await sendNotification(apiKey, {
+      title: `${agent.label} stopped on an error`,
+      body: reason,
+      agentName: `${agent.label} - ${projectName}`,
+      sessionId: input.session_id,
+      context: { type: "error", errorMessage: reason }
+    }, 4e3).catch(() => {
+    });
+  } catch {
+  }
+};
 
 export {
   askUser,
@@ -1032,6 +1100,7 @@ export {
   getMachineId,
   DEFAULT_SESSION,
   savePendingQuestion,
+  throttlePass,
   readLastUserPrompt,
   CODEX_AGENT,
   codexAllow,
@@ -1049,5 +1118,6 @@ export {
   handleStop,
   handleSessionStart,
   handleSessionEnd,
-  handleNotification
+  handleNotification,
+  handleStopFailure
 };

package/dist/{chunk-JR4H3FND.js → chunk-X6L25EOF.js}

@@ -1,3 +1,6 @@
+import {
+  PRETOOLUSE_HANDLED_TOOLS
+} from "./chunk-7EW3USQF.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -19,8 +22,9 @@ import {
   resolvePolicy,
   savePendingQuestion,
   sendNotification,
+  throttlePass,
   waitForAnswer
-} from "./chunk-WH5ASAZK.js";
+} from "./chunk-JHN3H6LX.js";
 import {
   isGatingMoment,
   recordKeylessMoment
@@ -195,6 +199,31 @@ var handleNotifyOnly = async (apiKey, description, projectName, sessionId, machi
   }
   return ask();
 };
+var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId) => {
+  const description = describeToolCall(input.tool_name, input.tool_input, "hook");
+  const projectName = basename(input.cwd ?? process.cwd());
+  const sessionId = input.session_id;
+  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+  const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
+  const decision = {
+    intent,
+    action: deriveAction(input.tool_name, input.tool_input),
+    blocker: deriveBlocker(toolPolicy.mode),
+    actionBody: deriveActionBody(input.tool_name, input.tool_input)
+  };
+  switch (toolPolicy.mode) {
+    case "push_only":
+      return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget, decision);
+    case "terminal_only":
+      return handleTerminalOnly();
+    case "push_first":
+      return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+    case "notify_only":
+      return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
+    default:
+      return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+  }
+};
 var KEYLESS_NOTICE = "[pushary] Not connected (no API key), so your agent runs untouched. Approval moments are counted locally; see them with: npx @pushary/agent-hooks@latest stats. Connect: https://pushary.com/sign-up?utm_source=cli&utm_medium=keyless-hook";
 var keylessNoticeOnce = (sessionId) => {
   try {
@@ -308,35 +337,115 @@ var handlePreToolUse = async (input) => {
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
       return deny(`Denied by policy for ${toolPolicy.tool}`);
     }
-    const description = describeToolCall(input.tool_name, input.tool_input, "hook");
+    return dispatchModeHandler(apiKey, input, toolPolicy, getMachineId());
+  } catch {
+    return void 0;
+  }
+};
+var permReqAllow = (updatedInput) => ({
+  hookSpecificOutput: {
+    hookEventName: "PermissionRequest",
+    decision: { behavior: "allow", ...updatedInput ? { updatedInput } : {} }
+  }
+});
+var permReqDeny = (message) => ({
+  hookSpecificOutput: {
+    hookEventName: "PermissionRequest",
+    decision: { behavior: "deny", ...message ? { message } : {} }
+  }
+});
+var toPermissionRequestOutput = (hookOutput) => {
+  if (!hookOutput) return void 0;
+  const d = hookOutput.hookSpecificOutput;
+  if (d.permissionDecision === "allow") return permReqAllow(d.updatedInput);
+  if (d.permissionDecision === "deny") return permReqDeny(d.permissionDecisionReason);
+  return void 0;
+};
+var handlePermissionRequest = async (input) => {
+  if (PRETOOLUSE_HANDLED_TOOLS.has(input.tool_name)) return void 0;
+  if (input.tool_name.startsWith("mcp__pushary__")) return void 0;
+  let apiKey;
+  try {
+    apiKey = getApiKey();
+  } catch {
+    return void 0;
+  }
+  try {
+    const modeState = await fetchModeState(apiKey, input.session_id);
+    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    if (modeState.kill) return permReqDeny("Stopped by user \u2014 this agent was halted from Pushary");
+    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
+    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return permReqAllow();
+    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
+      return permReqDeny(`Denied by policy for ${toolPolicy.tool}`);
+    }
+    return toPermissionRequestOutput(await dispatchModeHandler(apiKey, input, toolPolicy, getMachineId()));
+  } catch {
+    return void 0;
+  }
+};
+var PERMISSION_DENIED_WINDOW_MS = 5 * 60 * 1e3;
+var PERMISSION_DENIED_WAIT_SECONDS = 25;
+var automodeRetryEnabled = () => {
+  const flag = process.env.PUSHARY_AUTOMODE_RETRY;
+  return flag === "1" || flag === "true";
+};
+var handlePermissionDenied = async (input) => {
+  if (input.tool_name.startsWith("mcp__pushary__")) return void 0;
+  let apiKey;
+  try {
+    apiKey = getApiKey();
+  } catch {
+    return void 0;
+  }
+  try {
     const projectName = basename(input.cwd ?? process.cwd());
-    const sessionId = input.session_id;
-    const machineId = getMachineId();
-    const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
-    const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
-    const decision = {
-      intent,
-      action: deriveAction(input.tool_name, input.tool_input),
-      blocker: deriveBlocker(toolPolicy.mode),
-      actionBody: deriveActionBody(input.tool_name, input.tool_input)
-    };
-    switch (toolPolicy.mode) {
-      case "push_only":
-        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget, decision);
-      case "terminal_only":
-        return handleTerminalOnly();
-      case "push_first":
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
-      case "notify_only":
-        return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
-      default:
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+    const sessionKey = input.session_id || DEFAULT_SESSION;
+    if (!throttlePass(`permdenied:${sessionKey}:${input.tool_name}`, PERMISSION_DENIED_WINDOW_MS)) return void 0;
+    const mode = await fetchModeState(apiKey, input.session_id).catch(() => null);
+    if (mode?.kill || mode?.mode === "terminal_only") return void 0;
+    if (!automodeRetryEnabled()) {
+      await sendNotification(apiKey, {
+        title: `Auto-mode blocked ${input.tool_name}`,
+        body: `Your agent was denied ${input.tool_name} in ${projectName}.`,
+        agentName: `Claude Code - ${projectName}`,
+        sessionId: input.session_id
+      }, 4e3).catch(() => {
+      });
+      return void 0;
+    }
+    let result;
+    try {
+      result = await askUser(apiKey, {
+        question: `Auto-mode blocked ${input.tool_name} in ${projectName}. Let the agent retry it?`,
+        type: "confirm",
+        context: "Your agent hit a permission wall in auto mode",
+        agentName: `Claude Code - ${projectName}`,
+        sessionId: input.session_id,
+        machineId: getMachineId(),
+        toolName: input.tool_name
+      });
+    } catch {
+      return void 0;
     }
+    if (result.suppressed || result.noDevices) {
+      await cancelQuestion(apiKey, result.correlationId).catch(() => {
+      });
+      return void 0;
+    }
+    const deadline = hookWaitDeadline(START_MS, PERMISSION_DENIED_WAIT_SECONDS, "claude", Date.now());
+    const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
+    if (answer.answered && answer.value === "yes") {
+      return { hookSpecificOutput: { hookEventName: "PermissionDenied", retry: true } };
+    }
+    return void 0;
   } catch {
     return void 0;
   }
 };
 
 export {
-  handlePreToolUse
+  handlePreToolUse,
+  handlePermissionRequest,
+  handlePermissionDenied
 };

package/dist/src/index.d.ts

@@ -78,6 +78,7 @@ declare const reportEvent: (event: AgentEvent, options?: ReportEventOptions) =>
 declare const handlePostToolUse: (input: {
     tool_name: string;
     tool_input: Record<string, unknown>;
+    tool_response?: Record<string, unknown>;
     tool_result?: Record<string, unknown>;
     cwd?: string;
     session_id?: string;
@@ -93,6 +94,8 @@ declare const handleStop: (input: {
     stop_hook_active?: boolean;
     transcript_path?: string;
     last_assistant_message?: string;
+    background_tasks?: unknown;
+    session_crons?: unknown;
 }, agent?: AgentIdentity) => Promise<StopHookOutput | undefined>;
 declare const handleNotification: (input: {
     message?: string;

package/dist/src/index.js

@@ -1,6 +1,7 @@
 import {
   handlePreToolUse
-} from "../chunk-JR4H3FND.js";
+} from "../chunk-X6L25EOF.js";
+import "../chunk-7EW3USQF.js";
 import "../chunk-KQYIHZ5E.js";
 import {
   askUser,
@@ -14,7 +15,7 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-WH5ASAZK.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-R5AJNXZS.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.36.0",
+  "version": "0.38.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",
@@ -50,6 +50,9 @@
     "pushary-notification-hook": "./dist/bin/pushary-notification-hook.js",
     "pushary-session-start-hook": "./dist/bin/pushary-session-start-hook.js",
     "pushary-session-end-hook": "./dist/bin/pushary-session-end-hook.js",
+    "pushary-stopfailure-hook": "./dist/bin/pushary-stopfailure-hook.js",
+    "pushary-permission-hook": "./dist/bin/pushary-permission-hook.js",
+    "pushary-permission-denied-hook": "./dist/bin/pushary-permission-denied-hook.js",
     "pushary-claude": "./dist/bin/pushary-claude.js",
     "pushary-codex": "./dist/bin/pushary-codex.js",
     "pushary-codex-hook": "./dist/bin/pushary-codex-hook.js",