@pushary/agent-hooks 0.37.0 → 0.38.0

package/dist/bin/pushary-clean.js

@@ -1,8 +1,4 @@
 #!/usr/bin/env node
-import {
-  removeClaudeMcpServers,
-  removePusharySettings
-} from "../chunk-JWASPLL3.js";
 import {
   removeCodexHooks,
   removeGeminiSettings,
@@ -11,6 +7,10 @@ import {
 import {
   execNpm
 } from "../chunk-J7JWI3KU.js";
+import {
+  removeClaudeMcpServers,
+  removePusharySettings
+} from "../chunk-7EW3USQF.js";
 import "../chunk-Z5PL3K7C.js";
 
 // bin/pushary-clean.ts

package/dist/bin/pushary-codex-hook.js

@@ -32,7 +32,7 @@ import {
   toCodexWire,
   toPolicyLookup,
   waitForAnswer
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import {
   isGatingMoment,
   recordKeylessMoment

package/dist/bin/pushary-codex.js

@@ -4,7 +4,7 @@ import {
   getMachineId,
   reportEvent,
   waitForAnswer
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import {

package/dist/bin/pushary-gemini-hook.js

@@ -24,7 +24,7 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import {
   isGatingMoment,
   recordKeylessMoment

package/dist/bin/pushary-hook.js

@@ -1,9 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-BK4RU2BF.js";
+} from "../chunk-X6L25EOF.js";
+import "../chunk-7EW3USQF.js";
 import "../chunk-KQYIHZ5E.js";
-import "../chunk-XVN5SMME.js";
+import "../chunk-JHN3H6LX.js";
 import "../chunk-R5AJNXZS.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";

package/dist/bin/pushary-notification-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-permission-denied-hook.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-permission-denied-hook.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+import {
+  handlePermissionDenied
+} from "../chunk-X6L25EOF.js";
+import "../chunk-7EW3USQF.js";
+import "../chunk-KQYIHZ5E.js";
+import "../chunk-JHN3H6LX.js";
+import "../chunk-R5AJNXZS.js";
+import "../chunk-DWED7BS3.js";
+import "../chunk-Z5PL3K7C.js";
+import "../chunk-NKXSILEW.js";
+
+// bin/pushary-permission-denied-hook.ts
+var main = async () => {
+  let rawInput = "";
+  for await (const chunk of process.stdin) {
+    rawInput += chunk;
+  }
+  try {
+    const input = rawInput.trim() ? JSON.parse(rawInput) : {};
+    const output = await handlePermissionDenied(input);
+    if (output) process.stdout.write(JSON.stringify(output));
+  } catch {
+  }
+};
+main();

package/dist/bin/pushary-permission-hook.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-permission-hook.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+import {
+  handlePermissionRequest
+} from "../chunk-X6L25EOF.js";
+import "../chunk-7EW3USQF.js";
+import "../chunk-KQYIHZ5E.js";
+import "../chunk-JHN3H6LX.js";
+import "../chunk-R5AJNXZS.js";
+import "../chunk-DWED7BS3.js";
+import "../chunk-Z5PL3K7C.js";
+import "../chunk-NKXSILEW.js";
+
+// bin/pushary-permission-hook.ts
+var main = async () => {
+  let rawInput = "";
+  for await (const chunk of process.stdin) {
+    rawInput += chunk;
+  }
+  try {
+    const input = rawInput.trim() ? JSON.parse(rawInput) : {};
+    const output = await handlePermissionRequest(input);
+    if (output) process.stdout.write(JSON.stringify(output));
+  } catch {
+  }
+};
+main();

package/dist/bin/pushary-post-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-prompt-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-session-end-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-session-start-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-setup.js

@@ -1,9 +1,4 @@
 #!/usr/bin/env node
-import {
-  addClaudeMcpServer,
-  addPusharyHooks,
-  addPusharyToolPermissions
-} from "../chunk-JWASPLL3.js";
 import {
   GEMINI_HOOK_BINARY,
   addCodexHookTrust,
@@ -22,9 +17,14 @@ import {
   resolveGlobalBinDir,
   resolveGlobalBinary
 } from "../chunk-J7JWI3KU.js";
+import {
+  addClaudeMcpServer,
+  addPusharyHooks,
+  addPusharyToolPermissions
+} from "../chunk-7EW3USQF.js";
 import {
   reportEvent
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import {
   isValidApiKey

package/dist/bin/pushary-stop-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/{chunk-JWASPLL3.js → chunk-7EW3USQF.js}

@@ -6,6 +6,8 @@ import {
 import { join } from "path";
 var PUSHARY_MCP_URL = "https://pushary.com/api/mcp/mcp";
 var PUSHARY_PERMISSION_RULE = "mcp__pushary__*";
+var PRETOOLUSE_GATED_TOOLS = ["Bash", "Write", "Edit", "MultiEdit", "NotebookEdit", "PowerShell", "Monitor"];
+var PRETOOLUSE_HANDLED_TOOLS = /* @__PURE__ */ new Set([...PRETOOLUSE_GATED_TOOLS, "AskUserQuestion"]);
 var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 var ensureRecord = (target, key) => {
   const existing = asRecord(target[key]);
@@ -20,7 +22,7 @@ var isPusharyHook = (entry) => {
   if (!Array.isArray(hooks)) return false;
   return hooks.some((hook) => {
     const command = String(asRecord(hook)?.command ?? "");
-    return command.includes("pushary-hook") || command.includes("pushary-post-hook") || command.includes("pushary-stop-hook") || command.includes("pushary-prompt-hook") || command.includes("pushary-notification-hook") || command.includes("pushary-session-start-hook") || command.includes("pushary-session-end-hook") || command.includes("pushary-stopfailure-hook");
+    return command.includes("pushary-hook") || command.includes("pushary-post-hook") || command.includes("pushary-stop-hook") || command.includes("pushary-prompt-hook") || command.includes("pushary-notification-hook") || command.includes("pushary-session-start-hook") || command.includes("pushary-session-end-hook") || command.includes("pushary-stopfailure-hook") || command.includes("pushary-permission-hook") || command.includes("pushary-permission-denied-hook");
   });
 };
 var addClaudeMcpServer = (config, apiKey) => {
@@ -65,7 +67,7 @@ var addPusharyHooks = (settings, binDir) => {
     return /\s/.test(path) ? `"${path}"` : path;
   };
   const hooks = ensureRecord(settings, "hooks");
-  const SHELL_AND_FILE_TOOLS = "Bash|Write|Edit|MultiEdit|NotebookEdit|PowerShell|Monitor";
+  const SHELL_AND_FILE_TOOLS = PRETOOLUSE_GATED_TOOLS.join("|");
   const preToolUse = (Array.isArray(hooks.PreToolUse) ? hooks.PreToolUse : []).filter((entry) => !isPusharyHook(entry));
   preToolUse.push({
     matcher: `${SHELL_AND_FILE_TOOLS}|AskUserQuestion`,
@@ -142,6 +144,24 @@ var addPusharyHooks = (settings, binDir) => {
     }]
   });
   hooks.StopFailure = stopFailure;
+  const permissionRequest = (Array.isArray(hooks.PermissionRequest) ? hooks.PermissionRequest : []).filter((entry) => !isPusharyHook(entry));
+  permissionRequest.push({
+    hooks: [{
+      type: "command",
+      command: resolve("pushary-permission-hook"),
+      timeout: HOOK_BUDGETS.claude.budgetSeconds
+    }]
+  });
+  hooks.PermissionRequest = permissionRequest;
+  const permissionDenied = (Array.isArray(hooks.PermissionDenied) ? hooks.PermissionDenied : []).filter((entry) => !isPusharyHook(entry));
+  permissionDenied.push({
+    hooks: [{
+      type: "command",
+      command: resolve("pushary-permission-denied-hook"),
+      timeout: 60
+    }]
+  });
+  hooks.PermissionDenied = permissionDenied;
 };
 var removePusharySettings = (settings) => {
   let changed = removeClaudeMcpServers(settings);
@@ -160,7 +180,7 @@ var removePusharySettings = (settings) => {
   }
   const hooks = asRecord(settings.hooks);
   if (hooks) {
-    for (const key of ["PreToolUse", "PostToolUse", "Stop", "StopFailure", "UserPromptSubmit", "Notification", "SessionStart", "SessionEnd"]) {
+    for (const key of ["PreToolUse", "PostToolUse", "Stop", "StopFailure", "UserPromptSubmit", "Notification", "SessionStart", "SessionEnd", "PermissionRequest", "PermissionDenied"]) {
       const entries = hooks[key];
       if (!Array.isArray(entries)) continue;
       const filtered = entries.filter((entry) => !isPusharyHook(entry));
@@ -179,6 +199,7 @@ var removePusharySettings = (settings) => {
 };
 
 export {
+  PRETOOLUSE_HANDLED_TOOLS,
   addClaudeMcpServer,
   removeClaudeMcpServers,
   addPusharyToolPermissions,

package/dist/{chunk-XVN5SMME.js → chunk-JHN3H6LX.js}

@@ -1100,6 +1100,7 @@ export {
   getMachineId,
   DEFAULT_SESSION,
   savePendingQuestion,
+  throttlePass,
   readLastUserPrompt,
   CODEX_AGENT,
   codexAllow,

package/dist/{chunk-BK4RU2BF.js → chunk-X6L25EOF.js}

@@ -1,3 +1,6 @@
+import {
+  PRETOOLUSE_HANDLED_TOOLS
+} from "./chunk-7EW3USQF.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -19,8 +22,9 @@ import {
   resolvePolicy,
   savePendingQuestion,
   sendNotification,
+  throttlePass,
   waitForAnswer
-} from "./chunk-XVN5SMME.js";
+} from "./chunk-JHN3H6LX.js";
 import {
   isGatingMoment,
   recordKeylessMoment
@@ -195,6 +199,31 @@ var handleNotifyOnly = async (apiKey, description, projectName, sessionId, machi
   }
   return ask();
 };
+var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId) => {
+  const description = describeToolCall(input.tool_name, input.tool_input, "hook");
+  const projectName = basename(input.cwd ?? process.cwd());
+  const sessionId = input.session_id;
+  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+  const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
+  const decision = {
+    intent,
+    action: deriveAction(input.tool_name, input.tool_input),
+    blocker: deriveBlocker(toolPolicy.mode),
+    actionBody: deriveActionBody(input.tool_name, input.tool_input)
+  };
+  switch (toolPolicy.mode) {
+    case "push_only":
+      return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget, decision);
+    case "terminal_only":
+      return handleTerminalOnly();
+    case "push_first":
+      return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+    case "notify_only":
+      return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
+    default:
+      return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+  }
+};
 var KEYLESS_NOTICE = "[pushary] Not connected (no API key), so your agent runs untouched. Approval moments are counted locally; see them with: npx @pushary/agent-hooks@latest stats. Connect: https://pushary.com/sign-up?utm_source=cli&utm_medium=keyless-hook";
 var keylessNoticeOnce = (sessionId) => {
   try {
@@ -308,35 +337,115 @@ var handlePreToolUse = async (input) => {
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
       return deny(`Denied by policy for ${toolPolicy.tool}`);
     }
-    const description = describeToolCall(input.tool_name, input.tool_input, "hook");
+    return dispatchModeHandler(apiKey, input, toolPolicy, getMachineId());
+  } catch {
+    return void 0;
+  }
+};
+var permReqAllow = (updatedInput) => ({
+  hookSpecificOutput: {
+    hookEventName: "PermissionRequest",
+    decision: { behavior: "allow", ...updatedInput ? { updatedInput } : {} }
+  }
+});
+var permReqDeny = (message) => ({
+  hookSpecificOutput: {
+    hookEventName: "PermissionRequest",
+    decision: { behavior: "deny", ...message ? { message } : {} }
+  }
+});
+var toPermissionRequestOutput = (hookOutput) => {
+  if (!hookOutput) return void 0;
+  const d = hookOutput.hookSpecificOutput;
+  if (d.permissionDecision === "allow") return permReqAllow(d.updatedInput);
+  if (d.permissionDecision === "deny") return permReqDeny(d.permissionDecisionReason);
+  return void 0;
+};
+var handlePermissionRequest = async (input) => {
+  if (PRETOOLUSE_HANDLED_TOOLS.has(input.tool_name)) return void 0;
+  if (input.tool_name.startsWith("mcp__pushary__")) return void 0;
+  let apiKey;
+  try {
+    apiKey = getApiKey();
+  } catch {
+    return void 0;
+  }
+  try {
+    const modeState = await fetchModeState(apiKey, input.session_id);
+    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    if (modeState.kill) return permReqDeny("Stopped by user \u2014 this agent was halted from Pushary");
+    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
+    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return permReqAllow();
+    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
+      return permReqDeny(`Denied by policy for ${toolPolicy.tool}`);
+    }
+    return toPermissionRequestOutput(await dispatchModeHandler(apiKey, input, toolPolicy, getMachineId()));
+  } catch {
+    return void 0;
+  }
+};
+var PERMISSION_DENIED_WINDOW_MS = 5 * 60 * 1e3;
+var PERMISSION_DENIED_WAIT_SECONDS = 25;
+var automodeRetryEnabled = () => {
+  const flag = process.env.PUSHARY_AUTOMODE_RETRY;
+  return flag === "1" || flag === "true";
+};
+var handlePermissionDenied = async (input) => {
+  if (input.tool_name.startsWith("mcp__pushary__")) return void 0;
+  let apiKey;
+  try {
+    apiKey = getApiKey();
+  } catch {
+    return void 0;
+  }
+  try {
     const projectName = basename(input.cwd ?? process.cwd());
-    const sessionId = input.session_id;
-    const machineId = getMachineId();
-    const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
-    const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
-    const decision = {
-      intent,
-      action: deriveAction(input.tool_name, input.tool_input),
-      blocker: deriveBlocker(toolPolicy.mode),
-      actionBody: deriveActionBody(input.tool_name, input.tool_input)
-    };
-    switch (toolPolicy.mode) {
-      case "push_only":
-        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget, decision);
-      case "terminal_only":
-        return handleTerminalOnly();
-      case "push_first":
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
-      case "notify_only":
-        return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
-      default:
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+    const sessionKey = input.session_id || DEFAULT_SESSION;
+    if (!throttlePass(`permdenied:${sessionKey}:${input.tool_name}`, PERMISSION_DENIED_WINDOW_MS)) return void 0;
+    const mode = await fetchModeState(apiKey, input.session_id).catch(() => null);
+    if (mode?.kill || mode?.mode === "terminal_only") return void 0;
+    if (!automodeRetryEnabled()) {
+      await sendNotification(apiKey, {
+        title: `Auto-mode blocked ${input.tool_name}`,
+        body: `Your agent was denied ${input.tool_name} in ${projectName}.`,
+        agentName: `Claude Code - ${projectName}`,
+        sessionId: input.session_id
+      }, 4e3).catch(() => {
+      });
+      return void 0;
+    }
+    let result;
+    try {
+      result = await askUser(apiKey, {
+        question: `Auto-mode blocked ${input.tool_name} in ${projectName}. Let the agent retry it?`,
+        type: "confirm",
+        context: "Your agent hit a permission wall in auto mode",
+        agentName: `Claude Code - ${projectName}`,
+        sessionId: input.session_id,
+        machineId: getMachineId(),
+        toolName: input.tool_name
+      });
+    } catch {
+      return void 0;
     }
+    if (result.suppressed || result.noDevices) {
+      await cancelQuestion(apiKey, result.correlationId).catch(() => {
+      });
+      return void 0;
+    }
+    const deadline = hookWaitDeadline(START_MS, PERMISSION_DENIED_WAIT_SECONDS, "claude", Date.now());
+    const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
+    if (answer.answered && answer.value === "yes") {
+      return { hookSpecificOutput: { hookEventName: "PermissionDenied", retry: true } };
+    }
+    return void 0;
   } catch {
     return void 0;
   }
 };
 
 export {
-  handlePreToolUse
+  handlePreToolUse,
+  handlePermissionRequest,
+  handlePermissionDenied
 };

package/dist/src/index.js

@@ -1,6 +1,7 @@
 import {
   handlePreToolUse
-} from "../chunk-BK4RU2BF.js";
+} from "../chunk-X6L25EOF.js";
+import "../chunk-7EW3USQF.js";
 import "../chunk-KQYIHZ5E.js";
 import {
   askUser,
@@ -14,7 +15,7 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-R5AJNXZS.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.37.0",
+  "version": "0.38.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",
@@ -51,6 +51,8 @@
     "pushary-session-start-hook": "./dist/bin/pushary-session-start-hook.js",
     "pushary-session-end-hook": "./dist/bin/pushary-session-end-hook.js",
     "pushary-stopfailure-hook": "./dist/bin/pushary-stopfailure-hook.js",
+    "pushary-permission-hook": "./dist/bin/pushary-permission-hook.js",
+    "pushary-permission-denied-hook": "./dist/bin/pushary-permission-denied-hook.js",
     "pushary-claude": "./dist/bin/pushary-claude.js",
     "pushary-codex": "./dist/bin/pushary-codex.js",
     "pushary-codex-hook": "./dist/bin/pushary-codex-hook.js",