@pushary/agent-hooks 0.37.0 → 0.39.0

package/dist/bin/pushary-clean.js

@@ -1,8 +1,4 @@
 #!/usr/bin/env node
-import {
-  removeClaudeMcpServers,
-  removePusharySettings
-} from "../chunk-JWASPLL3.js";
 import {
   removeCodexHooks,
   removeGeminiSettings,
@@ -11,6 +7,10 @@ import {
 import {
   execNpm
 } from "../chunk-J7JWI3KU.js";
+import {
+  removeClaudeMcpServers,
+  removePusharySettings
+} from "../chunk-7EW3USQF.js";
 import "../chunk-Z5PL3K7C.js";
 
 // bin/pushary-clean.ts

package/dist/bin/pushary-codex-hook.js

@@ -32,7 +32,7 @@ import {
   toCodexWire,
   toPolicyLookup,
   waitForAnswer
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import {
   isGatingMoment,
   recordKeylessMoment

package/dist/bin/pushary-codex.js

@@ -4,7 +4,7 @@ import {
   getMachineId,
   reportEvent,
   waitForAnswer
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import {

package/dist/bin/pushary-doctor.js

@@ -148,14 +148,22 @@ var main = async () => {
   const settings = readJson(CLAUDE_SETTINGS);
   if (settings) {
     const hooks = settings.hooks;
-    const hasPreHook = JSON.stringify(hooks?.PreToolUse ?? []).includes("pushary-hook");
-    const hasPostHook = JSON.stringify(hooks?.PostToolUse ?? []).includes("pushary-post-hook");
-    const hasStopHook = JSON.stringify(hooks?.Stop ?? []).includes("pushary-stop-hook");
-    const hasPromptHook = JSON.stringify(hooks?.UserPromptSubmit ?? []).includes("pushary-prompt-hook");
-    check(hasPreHook, "Claude Code: PreToolUse hook");
-    check(hasPostHook, "Claude Code: PostToolUse hook");
-    check(hasStopHook, "Claude Code: Stop hook");
-    check(hasPromptHook, "Claude Code: UserPromptSubmit hook", hasPromptHook ? void 0 : "missing, re-run setup to register it");
+    const CLAUDE_HOOK_CHECKS = [
+      { event: "PreToolUse", needle: "pushary-hook", label: "PreToolUse hook" },
+      { event: "PostToolUse", needle: "pushary-post-hook", label: "PostToolUse hook" },
+      { event: "UserPromptSubmit", needle: "pushary-prompt-hook", label: "UserPromptSubmit hook" },
+      { event: "Stop", needle: "pushary-stop-hook", label: "Stop hook" },
+      { event: "StopFailure", needle: "pushary-stopfailure-hook", label: "StopFailure hook" },
+      { event: "Notification", needle: "pushary-notification-hook", label: "Notification hook" },
+      { event: "SessionStart", needle: "pushary-session-start-hook", label: "SessionStart hook" },
+      { event: "SessionEnd", needle: "pushary-session-end-hook", label: "SessionEnd hook" },
+      { event: "PermissionRequest", needle: "pushary-permission-hook", label: "PermissionRequest hook" },
+      { event: "PermissionDenied", needle: "pushary-permission-denied-hook", label: "PermissionDenied hook" }
+    ];
+    for (const { event, needle, label } of CLAUDE_HOOK_CHECKS) {
+      const present = JSON.stringify(hooks?.[event] ?? []).includes(needle);
+      check(present, `Claude Code: ${label}`, present ? void 0 : "missing \u2014 run npx @pushary/agent-hooks@latest upgrade");
+    }
     const preHookCommand = extractHookCommand(hooks?.PreToolUse, "pushary-hook");
     if (preHookCommand) {
       const resolves = commandResolves(preHookCommand);

package/dist/bin/pushary-gemini-hook.js

@@ -24,7 +24,7 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import {
   isGatingMoment,
   recordKeylessMoment

package/dist/bin/pushary-hook.js

@@ -1,9 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-BK4RU2BF.js";
+} from "../chunk-X6L25EOF.js";
+import "../chunk-7EW3USQF.js";
 import "../chunk-KQYIHZ5E.js";
-import "../chunk-XVN5SMME.js";
+import "../chunk-JHN3H6LX.js";
 import "../chunk-R5AJNXZS.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";

package/dist/bin/pushary-notification-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-permission-denied-hook.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-permission-denied-hook.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+import {
+  handlePermissionDenied
+} from "../chunk-X6L25EOF.js";
+import "../chunk-7EW3USQF.js";
+import "../chunk-KQYIHZ5E.js";
+import "../chunk-JHN3H6LX.js";
+import "../chunk-R5AJNXZS.js";
+import "../chunk-DWED7BS3.js";
+import "../chunk-Z5PL3K7C.js";
+import "../chunk-NKXSILEW.js";
+
+// bin/pushary-permission-denied-hook.ts
+var main = async () => {
+  let rawInput = "";
+  for await (const chunk of process.stdin) {
+    rawInput += chunk;
+  }
+  try {
+    const input = rawInput.trim() ? JSON.parse(rawInput) : {};
+    const output = await handlePermissionDenied(input);
+    if (output) process.stdout.write(JSON.stringify(output));
+  } catch {
+  }
+};
+main();

package/dist/bin/pushary-permission-hook.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-permission-hook.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+import {
+  handlePermissionRequest
+} from "../chunk-X6L25EOF.js";
+import "../chunk-7EW3USQF.js";
+import "../chunk-KQYIHZ5E.js";
+import "../chunk-JHN3H6LX.js";
+import "../chunk-R5AJNXZS.js";
+import "../chunk-DWED7BS3.js";
+import "../chunk-Z5PL3K7C.js";
+import "../chunk-NKXSILEW.js";
+
+// bin/pushary-permission-hook.ts
+var main = async () => {
+  let rawInput = "";
+  for await (const chunk of process.stdin) {
+    rawInput += chunk;
+  }
+  try {
+    const input = rawInput.trim() ? JSON.parse(rawInput) : {};
+    const output = await handlePermissionRequest(input);
+    if (output) process.stdout.write(JSON.stringify(output));
+  } catch {
+  }
+};
+main();

package/dist/bin/pushary-post-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-prompt-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-session-end-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-session-start-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-setup.js

@@ -1,9 +1,4 @@
 #!/usr/bin/env node
-import {
-  addClaudeMcpServer,
-  addPusharyHooks,
-  addPusharyToolPermissions
-} from "../chunk-JWASPLL3.js";
 import {
   GEMINI_HOOK_BINARY,
   addCodexHookTrust,
@@ -22,9 +17,14 @@ import {
   resolveGlobalBinDir,
   resolveGlobalBinary
 } from "../chunk-J7JWI3KU.js";
+import {
+  addClaudeMcpServer,
+  addPusharyHooks,
+  addPusharyToolPermissions
+} from "../chunk-7EW3USQF.js";
 import {
   reportEvent
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import {
   isValidApiKey
@@ -481,7 +481,7 @@ var setupClaudeCode = async (apiKey) => {
     addPusharyToolPermissions(settings);
   });
   await installGlobally();
-  await spinner("Adding hooks (PreToolUse, PostToolUse, UserPromptSubmit, Stop)", async () => {
+  await spinner("Adding hooks (approvals, activity, presence, and lifecycle events)", async () => {
     addPusharyHooks(settings, resolveGlobalBinDir("pushary-hook"));
   });
   await spinner(`Writing ${CLAUDE_SETTINGS}`, async () => {

package/dist/bin/pushary-stop-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";
 import "../chunk-NKXSILEW.js";

package/dist/bin/pushary-upgrade.js

@@ -1,8 +1,67 @@
 #!/usr/bin/env node
 import {
   execNpm,
-  npmErrorMessage
+  npmErrorMessage,
+  resolveGlobalBinDir
 } from "../chunk-J7JWI3KU.js";
+import {
+  addClaudeMcpServer,
+  addPusharyHooks,
+  addPusharyToolPermissions
+} from "../chunk-7EW3USQF.js";
+import "../chunk-Z5PL3K7C.js";
+import {
+  getApiKey
+} from "../chunk-NKXSILEW.js";
+
+// src/reapply.ts
+import { join, dirname } from "path";
+import { homedir } from "os";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+var CLAUDE_SETTINGS = join(homedir(), ".claude", "settings.json");
+var CLAUDE_JSON = join(homedir(), ".claude.json");
+var readJson = (filePath) => {
+  try {
+    return JSON.parse(readFileSync(filePath, "utf-8"));
+  } catch {
+    return null;
+  }
+};
+var writeJson = (filePath, data) => {
+  const dir = dirname(filePath);
+  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+  writeFileSync(filePath, JSON.stringify(data, null, 2) + "\n", "utf-8");
+};
+var hasPusharyClaudeHooks = (settings) => JSON.stringify(settings.hooks ?? {}).includes("pushary-hook");
+var hasPusharyMcp = (claudeJson) => !!claudeJson.mcpServers?.pushary;
+var reapplyClaudeSettings = (apiKey, paths = {}) => {
+  const settingsPath = paths.settingsPath ?? CLAUDE_SETTINGS;
+  const claudeJsonPath = paths.claudeJsonPath ?? CLAUDE_JSON;
+  const settings = readJson(settingsPath);
+  const claudeJson = readJson(claudeJsonPath);
+  const configured = settings != null && hasPusharyClaudeHooks(settings) || claudeJson != null && hasPusharyMcp(claudeJson);
+  if (!configured) return { reapplied: false, hooks: false, mcp: false };
+  let hooks = false;
+  let mcp = false;
+  try {
+    const s = settings ?? {};
+    addPusharyToolPermissions(s);
+    addPusharyHooks(s, resolveGlobalBinDir("pushary-hook"));
+    writeJson(settingsPath, s);
+    hooks = true;
+  } catch {
+  }
+  if (apiKey) {
+    try {
+      const cj = claudeJson ?? {};
+      addClaudeMcpServer(cj, apiKey);
+      writeJson(claudeJsonPath, cj);
+      mcp = true;
+    } catch {
+    }
+  }
+  return { reapplied: hooks || mcp, hooks, mcp };
+};
 
 // bin/pushary-upgrade.ts
 var getInstalledVersion = () => {
@@ -52,7 +111,20 @@ var main = async () => {
     console.error(`Upgrade failed: ${npmErrorMessage(err)}`);
     process.exit(1);
   }
-  console.log("Done. Your hooks point at the global install, so agents pick this up on their next tool call.");
+  let apiKey;
+  try {
+    apiKey = getApiKey();
+  } catch {
+    apiKey = void 0;
+  }
+  try {
+    const result = reapplyClaudeSettings(apiKey);
+    if (result.reapplied) {
+      console.log("Refreshed Claude Code hooks and settings so the new hook set is active now.");
+    }
+  } catch {
+  }
+  console.log("Done. Your hooks point at the global install and settings were refreshed.");
   console.log("Verify with: pushary doctor");
 };
 main();

package/dist/{chunk-JWASPLL3.js → chunk-7EW3USQF.js}

@@ -6,6 +6,8 @@ import {
 import { join } from "path";
 var PUSHARY_MCP_URL = "https://pushary.com/api/mcp/mcp";
 var PUSHARY_PERMISSION_RULE = "mcp__pushary__*";
+var PRETOOLUSE_GATED_TOOLS = ["Bash", "Write", "Edit", "MultiEdit", "NotebookEdit", "PowerShell", "Monitor"];
+var PRETOOLUSE_HANDLED_TOOLS = /* @__PURE__ */ new Set([...PRETOOLUSE_GATED_TOOLS, "AskUserQuestion"]);
 var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 var ensureRecord = (target, key) => {
   const existing = asRecord(target[key]);
@@ -20,7 +22,7 @@ var isPusharyHook = (entry) => {
   if (!Array.isArray(hooks)) return false;
   return hooks.some((hook) => {
     const command = String(asRecord(hook)?.command ?? "");
-    return command.includes("pushary-hook") || command.includes("pushary-post-hook") || command.includes("pushary-stop-hook") || command.includes("pushary-prompt-hook") || command.includes("pushary-notification-hook") || command.includes("pushary-session-start-hook") || command.includes("pushary-session-end-hook") || command.includes("pushary-stopfailure-hook");
+    return command.includes("pushary-hook") || command.includes("pushary-post-hook") || command.includes("pushary-stop-hook") || command.includes("pushary-prompt-hook") || command.includes("pushary-notification-hook") || command.includes("pushary-session-start-hook") || command.includes("pushary-session-end-hook") || command.includes("pushary-stopfailure-hook") || command.includes("pushary-permission-hook") || command.includes("pushary-permission-denied-hook");
   });
 };
 var addClaudeMcpServer = (config, apiKey) => {
@@ -65,7 +67,7 @@ var addPusharyHooks = (settings, binDir) => {
     return /\s/.test(path) ? `"${path}"` : path;
   };
   const hooks = ensureRecord(settings, "hooks");
-  const SHELL_AND_FILE_TOOLS = "Bash|Write|Edit|MultiEdit|NotebookEdit|PowerShell|Monitor";
+  const SHELL_AND_FILE_TOOLS = PRETOOLUSE_GATED_TOOLS.join("|");
   const preToolUse = (Array.isArray(hooks.PreToolUse) ? hooks.PreToolUse : []).filter((entry) => !isPusharyHook(entry));
   preToolUse.push({
     matcher: `${SHELL_AND_FILE_TOOLS}|AskUserQuestion`,
@@ -142,6 +144,24 @@ var addPusharyHooks = (settings, binDir) => {
     }]
   });
   hooks.StopFailure = stopFailure;
+  const permissionRequest = (Array.isArray(hooks.PermissionRequest) ? hooks.PermissionRequest : []).filter((entry) => !isPusharyHook(entry));
+  permissionRequest.push({
+    hooks: [{
+      type: "command",
+      command: resolve("pushary-permission-hook"),
+      timeout: HOOK_BUDGETS.claude.budgetSeconds
+    }]
+  });
+  hooks.PermissionRequest = permissionRequest;
+  const permissionDenied = (Array.isArray(hooks.PermissionDenied) ? hooks.PermissionDenied : []).filter((entry) => !isPusharyHook(entry));
+  permissionDenied.push({
+    hooks: [{
+      type: "command",
+      command: resolve("pushary-permission-denied-hook"),
+      timeout: 60
+    }]
+  });
+  hooks.PermissionDenied = permissionDenied;
 };
 var removePusharySettings = (settings) => {
   let changed = removeClaudeMcpServers(settings);
@@ -160,7 +180,7 @@ var removePusharySettings = (settings) => {
   }
   const hooks = asRecord(settings.hooks);
   if (hooks) {
-    for (const key of ["PreToolUse", "PostToolUse", "Stop", "StopFailure", "UserPromptSubmit", "Notification", "SessionStart", "SessionEnd"]) {
+    for (const key of ["PreToolUse", "PostToolUse", "Stop", "StopFailure", "UserPromptSubmit", "Notification", "SessionStart", "SessionEnd", "PermissionRequest", "PermissionDenied"]) {
       const entries = hooks[key];
       if (!Array.isArray(entries)) continue;
       const filtered = entries.filter((entry) => !isPusharyHook(entry));
@@ -179,6 +199,7 @@ var removePusharySettings = (settings) => {
 };
 
 export {
+  PRETOOLUSE_HANDLED_TOOLS,
   addClaudeMcpServer,
   removeClaudeMcpServers,
   addPusharyToolPermissions,

package/dist/{chunk-XVN5SMME.js → chunk-JHN3H6LX.js}

@@ -1100,6 +1100,7 @@ export {
   getMachineId,
   DEFAULT_SESSION,
   savePendingQuestion,
+  throttlePass,
   readLastUserPrompt,
   CODEX_AGENT,
   codexAllow,

package/dist/{chunk-BK4RU2BF.js → chunk-X6L25EOF.js}

@@ -1,3 +1,6 @@
+import {
+  PRETOOLUSE_HANDLED_TOOLS
+} from "./chunk-7EW3USQF.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -19,8 +22,9 @@ import {
   resolvePolicy,
   savePendingQuestion,
   sendNotification,
+  throttlePass,
   waitForAnswer
-} from "./chunk-XVN5SMME.js";
+} from "./chunk-JHN3H6LX.js";
 import {
   isGatingMoment,
   recordKeylessMoment
@@ -195,6 +199,31 @@ var handleNotifyOnly = async (apiKey, description, projectName, sessionId, machi
   }
   return ask();
 };
+var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId) => {
+  const description = describeToolCall(input.tool_name, input.tool_input, "hook");
+  const projectName = basename(input.cwd ?? process.cwd());
+  const sessionId = input.session_id;
+  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+  const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
+  const decision = {
+    intent,
+    action: deriveAction(input.tool_name, input.tool_input),
+    blocker: deriveBlocker(toolPolicy.mode),
+    actionBody: deriveActionBody(input.tool_name, input.tool_input)
+  };
+  switch (toolPolicy.mode) {
+    case "push_only":
+      return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget, decision);
+    case "terminal_only":
+      return handleTerminalOnly();
+    case "push_first":
+      return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+    case "notify_only":
+      return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
+    default:
+      return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+  }
+};
 var KEYLESS_NOTICE = "[pushary] Not connected (no API key), so your agent runs untouched. Approval moments are counted locally; see them with: npx @pushary/agent-hooks@latest stats. Connect: https://pushary.com/sign-up?utm_source=cli&utm_medium=keyless-hook";
 var keylessNoticeOnce = (sessionId) => {
   try {
@@ -308,35 +337,115 @@ var handlePreToolUse = async (input) => {
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
       return deny(`Denied by policy for ${toolPolicy.tool}`);
     }
-    const description = describeToolCall(input.tool_name, input.tool_input, "hook");
+    return dispatchModeHandler(apiKey, input, toolPolicy, getMachineId());
+  } catch {
+    return void 0;
+  }
+};
+var permReqAllow = (updatedInput) => ({
+  hookSpecificOutput: {
+    hookEventName: "PermissionRequest",
+    decision: { behavior: "allow", ...updatedInput ? { updatedInput } : {} }
+  }
+});
+var permReqDeny = (message) => ({
+  hookSpecificOutput: {
+    hookEventName: "PermissionRequest",
+    decision: { behavior: "deny", ...message ? { message } : {} }
+  }
+});
+var toPermissionRequestOutput = (hookOutput) => {
+  if (!hookOutput) return void 0;
+  const d = hookOutput.hookSpecificOutput;
+  if (d.permissionDecision === "allow") return permReqAllow(d.updatedInput);
+  if (d.permissionDecision === "deny") return permReqDeny(d.permissionDecisionReason);
+  return void 0;
+};
+var handlePermissionRequest = async (input) => {
+  if (PRETOOLUSE_HANDLED_TOOLS.has(input.tool_name)) return void 0;
+  if (input.tool_name.startsWith("mcp__pushary__")) return void 0;
+  let apiKey;
+  try {
+    apiKey = getApiKey();
+  } catch {
+    return void 0;
+  }
+  try {
+    const modeState = await fetchModeState(apiKey, input.session_id);
+    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    if (modeState.kill) return permReqDeny("Stopped by user \u2014 this agent was halted from Pushary");
+    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
+    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return permReqAllow();
+    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
+      return permReqDeny(`Denied by policy for ${toolPolicy.tool}`);
+    }
+    return toPermissionRequestOutput(await dispatchModeHandler(apiKey, input, toolPolicy, getMachineId()));
+  } catch {
+    return void 0;
+  }
+};
+var PERMISSION_DENIED_WINDOW_MS = 5 * 60 * 1e3;
+var PERMISSION_DENIED_WAIT_SECONDS = 25;
+var automodeRetryEnabled = () => {
+  const flag = process.env.PUSHARY_AUTOMODE_RETRY;
+  return flag === "1" || flag === "true";
+};
+var handlePermissionDenied = async (input) => {
+  if (input.tool_name.startsWith("mcp__pushary__")) return void 0;
+  let apiKey;
+  try {
+    apiKey = getApiKey();
+  } catch {
+    return void 0;
+  }
+  try {
     const projectName = basename(input.cwd ?? process.cwd());
-    const sessionId = input.session_id;
-    const machineId = getMachineId();
-    const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
-    const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
-    const decision = {
-      intent,
-      action: deriveAction(input.tool_name, input.tool_input),
-      blocker: deriveBlocker(toolPolicy.mode),
-      actionBody: deriveActionBody(input.tool_name, input.tool_input)
-    };
-    switch (toolPolicy.mode) {
-      case "push_only":
-        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget, decision);
-      case "terminal_only":
-        return handleTerminalOnly();
-      case "push_first":
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
-      case "notify_only":
-        return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
-      default:
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+    const sessionKey = input.session_id || DEFAULT_SESSION;
+    if (!throttlePass(`permdenied:${sessionKey}:${input.tool_name}`, PERMISSION_DENIED_WINDOW_MS)) return void 0;
+    const mode = await fetchModeState(apiKey, input.session_id).catch(() => null);
+    if (mode?.kill || mode?.mode === "terminal_only") return void 0;
+    if (!automodeRetryEnabled()) {
+      await sendNotification(apiKey, {
+        title: `Auto-mode blocked ${input.tool_name}`,
+        body: `Your agent was denied ${input.tool_name} in ${projectName}.`,
+        agentName: `Claude Code - ${projectName}`,
+        sessionId: input.session_id
+      }, 4e3).catch(() => {
+      });
+      return void 0;
+    }
+    let result;
+    try {
+      result = await askUser(apiKey, {
+        question: `Auto-mode blocked ${input.tool_name} in ${projectName}. Let the agent retry it?`,
+        type: "confirm",
+        context: "Your agent hit a permission wall in auto mode",
+        agentName: `Claude Code - ${projectName}`,
+        sessionId: input.session_id,
+        machineId: getMachineId(),
+        toolName: input.tool_name
+      });
+    } catch {
+      return void 0;
     }
+    if (result.suppressed || result.noDevices) {
+      await cancelQuestion(apiKey, result.correlationId).catch(() => {
+      });
+      return void 0;
+    }
+    const deadline = hookWaitDeadline(START_MS, PERMISSION_DENIED_WAIT_SECONDS, "claude", Date.now());
+    const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
+    if (answer.answered && answer.value === "yes") {
+      return { hookSpecificOutput: { hookEventName: "PermissionDenied", retry: true } };
+    }
+    return void 0;
   } catch {
     return void 0;
   }
 };
 
 export {
-  handlePreToolUse
+  handlePreToolUse,
+  handlePermissionRequest,
+  handlePermissionDenied
 };

package/dist/src/index.js

@@ -1,6 +1,7 @@
 import {
   handlePreToolUse
-} from "../chunk-BK4RU2BF.js";
+} from "../chunk-X6L25EOF.js";
+import "../chunk-7EW3USQF.js";
 import "../chunk-KQYIHZ5E.js";
 import {
   askUser,
@@ -14,7 +15,7 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-XVN5SMME.js";
+} from "../chunk-JHN3H6LX.js";
 import "../chunk-R5AJNXZS.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-Z5PL3K7C.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.37.0",
+  "version": "0.39.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",
@@ -51,6 +51,8 @@
     "pushary-session-start-hook": "./dist/bin/pushary-session-start-hook.js",
     "pushary-session-end-hook": "./dist/bin/pushary-session-end-hook.js",
     "pushary-stopfailure-hook": "./dist/bin/pushary-stopfailure-hook.js",
+    "pushary-permission-hook": "./dist/bin/pushary-permission-hook.js",
+    "pushary-permission-denied-hook": "./dist/bin/pushary-permission-denied-hook.js",
     "pushary-claude": "./dist/bin/pushary-claude.js",
     "pushary-codex": "./dist/bin/pushary-codex.js",
     "pushary-codex-hook": "./dist/bin/pushary-codex-hook.js",
@@ -70,7 +72,7 @@
   "scripts": {
     "build": "node scripts/bundle-plugin.mjs && tsup",
     "dev": "tsup --watch",
-    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts && bun test src/ledger.test.ts && bun test src/wrapper/wrapper.test.ts"
+    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/reapply.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts && bun test src/ledger.test.ts && bun test src/wrapper/wrapper.test.ts"
   },
   "dependencies": {
     "@inquirer/prompts": "^8.4.2",