@pushary/agent-hooks 0.49.1 → 0.50.0

package/dist/bin/pushary-claude.js

@@ -16,12 +16,12 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -343,7 +343,7 @@ var createRemoteApprover = (deps) => {
       const sessionId = deps.getSessionId?.();
       const modeState = await fetchModeState2(deps.apiKey, sessionId);
       if (modeState.kill) return deny("Stopped by user \u2014 this agent was halted from Pushary");
-      const policyConfig = await getPolicy2(deps.apiKey, modeState.policyVersion);
+      const policyConfig = await getPolicy2(deps.apiKey, modeState.policyVersion, "claude_code");
       const policy = resolvePolicy2(policyConfig, toolName, modeState.mode, input);
       if (policy.timeoutSeconds === 0 && policy.timeoutAction === "approve") return allow(input);
       if (policy.timeoutSeconds === 0 && policy.timeoutAction === "deny") {

package/dist/bin/pushary-clean.js

@@ -6,15 +6,15 @@ import {
   removeCodexHooks,
   removeGeminiSettings,
   removeInstructionBlock
-} from "../chunk-SVVEC4QV.js";
+} from "../chunk-FDRSMTJS.js";
 import {
   execNpm
 } from "../chunk-J7JWI3KU.js";
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-7EW3USQF.js";
-import "../chunk-Z5PL3K7C.js";
+} from "../chunk-PUT2N5VA.js";
+import "../chunk-WI3F6XNZ.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, writeFileSync, rmSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -31,21 +31,21 @@ import {
   toCodexWire,
   toPolicyLookup,
   waitForAnswer
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-R5AJNXZS.js";
+} from "../chunk-V42K3XQI.js";
 import "../chunk-DWED7BS3.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-Z5PL3K7C.js";
+} from "../chunk-WI3F6XNZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";
@@ -170,7 +170,7 @@ var decidePermissionRequest = async (input) => {
     const modeState = await fetchModeState(apiKey, input.session_id);
     if (modeState.kill) return codexDeny(KILL_REASON);
     const lookup = toPolicyLookup(input.tool_name ?? "", input.tool_input ?? {}, input.cwd);
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "codex");
     const toolPolicy = resolvePolicy(policy, lookup.tool, modeState.mode, lookup.input);
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return codexAllow();
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
@@ -229,7 +229,7 @@ var decidePreToolUse = async (input) => {
     const modeState = await fetchModeState(apiKey, input.session_id);
     if (modeState.kill) return codexDeny(KILL_REASON);
     const lookup = toPolicyLookup(input.tool_name ?? "", input.tool_input ?? {}, input.cwd);
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "codex");
     const toolPolicy = resolvePolicy(policy, lookup.tool, modeState.mode, lookup.input);
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return codexPass();
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {

package/dist/bin/pushary-codex.js

@@ -3,12 +3,12 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-doctor.js

@@ -11,18 +11,18 @@ import {
   missingGeminiHookEvents,
   readCodexMcpAuth,
   untrustedCodexHookEvents
-} from "../chunk-SVVEC4QV.js";
+} from "../chunk-FDRSMTJS.js";
 import {
   execNpm
 } from "../chunk-J7JWI3KU.js";
 import {
   readLedgerSummary
-} from "../chunk-R5AJNXZS.js";
+} from "../chunk-V42K3XQI.js";
 import {
   callMcpTool,
   sendMcpRequest
 } from "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import {
   getBaseUrl
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-gemini-hook.js

@@ -23,21 +23,21 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-R5AJNXZS.js";
+} from "../chunk-V42K3XQI.js";
 import "../chunk-DWED7BS3.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-Z5PL3K7C.js";
+} from "../chunk-WI3F6XNZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";
@@ -209,7 +209,7 @@ var decideBeforeTool = async (input) => {
     const modeState = await fetchModeState(apiKey, input.session_id);
     if (modeState.kill) return geminiDeny(KILL_REASON);
     const lookup = toGeminiPolicyLookup(input.tool_name ?? "", input.tool_input ?? {});
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "gemini_cli");
     const toolPolicy = resolvePolicy(policy, lookup.tool, modeState.mode, lookup.input);
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return geminiAllow();
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {

package/dist/bin/pushary-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-OQMEGREX.js";
-import "../chunk-7EW3USQF.js";
+} from "../chunk-M24KUFLW.js";
+import "../chunk-PUT2N5VA.js";
 import "../chunk-KQYIHZ5E.js";
-import "../chunk-O5MFSRWV.js";
+import "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-R5AJNXZS.js";
+import "../chunk-V42K3XQI.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-hook.ts

package/dist/bin/pushary-notification-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-notification-hook.ts

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-OQMEGREX.js";
-import "../chunk-7EW3USQF.js";
+} from "../chunk-M24KUFLW.js";
+import "../chunk-PUT2N5VA.js";
 import "../chunk-KQYIHZ5E.js";
-import "../chunk-O5MFSRWV.js";
+import "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-R5AJNXZS.js";
+import "../chunk-V42K3XQI.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-permission-denied-hook.ts

package/dist/bin/pushary-permission-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-OQMEGREX.js";
-import "../chunk-7EW3USQF.js";
+} from "../chunk-M24KUFLW.js";
+import "../chunk-PUT2N5VA.js";
 import "../chunk-KQYIHZ5E.js";
-import "../chunk-O5MFSRWV.js";
+import "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-R5AJNXZS.js";
+import "../chunk-V42K3XQI.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-permission-hook.ts

package/dist/bin/pushary-post-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-post-hook.ts

package/dist/bin/pushary-prompt-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-prompt-hook.ts

package/dist/bin/pushary-session-end-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-session-end-hook.ts

package/dist/bin/pushary-session-start-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-session-start-hook.ts

package/dist/bin/pushary-setup.js

@@ -13,7 +13,7 @@ import {
   renderAgentInstructions,
   renderProjectAgentInstructions,
   writeInstructionBlock
-} from "../chunk-SVVEC4QV.js";
+} from "../chunk-FDRSMTJS.js";
 import {
   execNpm,
   npmErrorMessage,
@@ -25,15 +25,15 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-7EW3USQF.js";
+} from "../chunk-PUT2N5VA.js";
 import {
   reportEvent
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
 import {
   isValidApiKey
-} from "../chunk-Z5PL3K7C.js";
+} from "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-setup.ts

package/dist/bin/pushary-stats.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   readLedgerSummary
-} from "../chunk-R5AJNXZS.js";
-import "../chunk-Z5PL3K7C.js";
+} from "../chunk-V42K3XQI.js";
+import "../chunk-WI3F6XNZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-stop-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stop-hook.ts

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stopfailure-hook.ts

package/dist/bin/pushary-upgrade.js

@@ -8,8 +8,8 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-7EW3USQF.js";
-import "../chunk-Z5PL3K7C.js";
+} from "../chunk-PUT2N5VA.js";
+import "../chunk-WI3F6XNZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/{chunk-SVVEC4QV.js → chunk-FDRSMTJS.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-Z5PL3K7C.js";
+} from "./chunk-WI3F6XNZ.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";

package/dist/{chunk-OQMEGREX.js → chunk-M24KUFLW.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS
-} from "./chunk-7EW3USQF.js";
+} from "./chunk-PUT2N5VA.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -23,19 +23,19 @@ import {
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-O5MFSRWV.js";
+} from "./chunk-SCXPHMAS.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-R5AJNXZS.js";
+} from "./chunk-V42K3XQI.js";
 import {
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "./chunk-Z5PL3K7C.js";
+} from "./chunk-WI3F6XNZ.js";
 import {
   getApiKey
 } from "./chunk-NKXSILEW.js";
@@ -322,7 +322,7 @@ var handlePreToolUse = async (input) => {
   }
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code");
     if (modeState.kill) {
       return deny("Stopped by user \u2014 this agent was halted from Pushary");
     }
@@ -374,7 +374,7 @@ var handlePermissionRequest = async (input) => {
   }
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code");
     if (modeState.kill) return permReqDeny("Stopped by user \u2014 this agent was halted from Pushary");
     const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return permReqAllow();

package/dist/{chunk-7EW3USQF.js → chunk-PUT2N5VA.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-Z5PL3K7C.js";
+} from "./chunk-WI3F6XNZ.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-O5MFSRWV.js → chunk-SCXPHMAS.js}

@@ -8,6 +8,7 @@ import {
 import {
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
+  classifyDecisionRisk,
   extractPolicyArg,
   isApprovalMode,
   isSafeReadOnlyCommand,
@@ -15,7 +16,7 @@ import {
   matchToolPattern,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-Z5PL3K7C.js";
+} from "./chunk-WI3F6XNZ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -46,14 +47,15 @@ var isWaitForAnswerResponse = (data) => {
 
 // src/policy.ts
 var CACHE_TTL_MS = 60 * 1e3;
-var cacheFile = (apiKey) => {
-  const hash = createHash("sha256").update(apiKey).digest("hex").slice(0, 12);
+var cacheFile = (apiKey, agent) => {
+  const hash = createHash("sha256").update(agent ? `${apiKey}:${agent}` : apiKey).digest("hex").slice(0, 12);
   return join(tmpdir(), `pushary-policy-${hash}.json`);
 };
-var fetchPolicy = async (apiKey) => {
+var fetchPolicy = async (apiKey, agent) => {
   return withRetry(async () => {
     const baseUrl = getBaseUrl();
-    const response = await fetch(`${baseUrl}/api/mcp/policy`, {
+    const url = agent ? `${baseUrl}/api/mcp/policy?agent=${encodeURIComponent(agent)}` : `${baseUrl}/api/mcp/policy`;
+    const response = await fetch(url, {
       headers: { "Authorization": `Bearer ${apiKey}` },
       signal: AbortSignal.timeout(1e4)
     });
@@ -65,8 +67,8 @@ var fetchPolicy = async (apiKey) => {
     return raw;
   }, { maxAttempts: 2 });
 };
-var getPolicy = async (apiKey, expectedVersion) => {
-  const path = cacheFile(apiKey);
+var getPolicy = async (apiKey, expectedVersion, agent) => {
+  const path = cacheFile(apiKey, agent);
   let staleCache = null;
   if (existsSync(path)) {
     try {
@@ -83,7 +85,7 @@ var getPolicy = async (apiKey, expectedVersion) => {
     }
   }
   try {
-    const policy = await fetchPolicy(apiKey);
+    const policy = await fetchPolicy(apiKey, agent);
     try {
       writeFileSync(path, JSON.stringify({ ...policy, _cachedAt: Date.now(), _policyVersion: expectedVersion ?? null }), "utf-8");
     } catch {
@@ -141,6 +143,16 @@ var resolvePolicy = (config, toolName, modeOverride, toolInput) => {
   if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
     base = autoApprove(base.tool);
   }
+  const wouldAutoApprove = base.timeoutSeconds === 0 && base.timeoutAction === "approve";
+  if (!governedBySpecificRule && wouldAutoApprove && toolName === "Bash" && typeof arg === "string" && classifyDecisionRisk(toolName, arg) === "destructive") {
+    base = {
+      tool: base.tool,
+      timeoutSeconds: config.defaultTimeoutSeconds,
+      timeoutAction: "wait",
+      mode: "push_first",
+      pushFirstSeconds: config.defaultPushFirstSeconds ?? 20
+    };
+  }
   const effectiveOverride = modeOverride ?? config.modeOverride;
   if (effectiveOverride) {
     return { ...base, mode: effectiveOverride };

package/dist/{chunk-R5AJNXZS.js → chunk-V42K3XQI.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-Z5PL3K7C.js";
+} from "./chunk-WI3F6XNZ.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-Z5PL3K7C.js → chunk-WI3F6XNZ.js}

@@ -279,6 +279,31 @@ var API_KEY_PATTERN = /^pk_[a-f0-9]+\.[a-f0-9]+$/;
 var isValidApiKey = (value) => API_KEY_PATTERN.test(value);
 var ACTION_BODY_MAX = 4e3;
 var DECISION_LINE_MAX = 500;
+var APPROVAL_FATIGUE_FLAG_PATTERNS = [
+  /\brm\s+-[a-z]*r/i,
+  /\brmdir\b/i,
+  /git\s+push[^\n]*(--force|--force-with-lease|\s-f\b)/i,
+  /git\s+reset\s+--hard/i,
+  /git\s+clean\s+-[a-z]*f/i,
+  /\bdrop\s+(table|database|schema)\b/i,
+  /\bdelete\s+from\b/i,
+  /\btruncate\b/i,
+  /\b(deploy|publish|release)\b/i,
+  /\bnpm\s+publish\b/i,
+  /\bsudo\b/i,
+  /chmod\s+-?R?\s*777/i,
+  /\bkubectl\s+delete\b/i,
+  /\bterraform\s+(apply|destroy)\b/i,
+  /\bdocker\s+system\s+prune\b/i
+];
+var HIGH_CONSEQUENCE_PATTERNS = [
+  /(^|[\\/])\.env(\.|$|[\\/])/i,
+  /secrets?/i,
+  /credentials?/i,
+  /(^|[\\/])deploy/i,
+  /\.github[\\/]workflows/i,
+  /package\.json/i
+];
 var SECRET_REDACTION_RULES = [
   { pattern: /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, replacement: "[redacted key]" },
   { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, replacement: "[redacted]" },
@@ -303,6 +328,13 @@ var SECRET_REDACTION_RULES = [
 var HIGH_ENTROPY_RULE = { pattern: /[A-Za-z0-9+/]{40,}={0,2}/g, replacement: "[redacted]" };
 var redactSecrets = (text) => SECRET_REDACTION_RULES.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
 var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
+var classifyDecisionRisk = (toolName, toolTarget) => {
+  const parts = [toolName, toolTarget ?? ""];
+  const matchesAny = (patterns) => parts.some((part) => patterns.some((re) => re.test(part)));
+  if (matchesAny(APPROVAL_FATIGUE_FLAG_PATTERNS)) return "destructive";
+  if (matchesAny(HIGH_CONSEQUENCE_PATTERNS)) return "elevated";
+  return "standard";
+};
 
 export {
   isApprovalMode,
@@ -318,5 +350,6 @@ export {
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
   redactSecrets,
-  redactSecretsDeep
+  redactSecretsDeep,
+  classifyDecisionRisk
 };

package/dist/src/index.d.ts

@@ -26,7 +26,7 @@ interface ReceiptMeta {
     ok: boolean;
 }
 
-declare const getPolicy: (apiKey: string, expectedVersion?: string | null) => Promise<PolicyConfig>;
+declare const getPolicy: (apiKey: string, expectedVersion?: string | null, agent?: string) => Promise<PolicyConfig>;
 type AutoResolveOrigin = 'safe_readonly' | 'policy_timeout';
 declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>) => ToolPolicy;
 interface ModeState {

package/dist/src/index.js

@@ -1,7 +1,7 @@
 import {
   handlePreToolUse
-} from "../chunk-OQMEGREX.js";
-import "../chunk-7EW3USQF.js";
+} from "../chunk-M24KUFLW.js";
+import "../chunk-PUT2N5VA.js";
 import "../chunk-KQYIHZ5E.js";
 import {
   askUser,
@@ -15,11 +15,11 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-R5AJNXZS.js";
+import "../chunk-V42K3XQI.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import {
   getApiKey,
   getBaseUrl

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.49.1",
+  "version": "0.50.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",
@@ -73,12 +73,13 @@
   "scripts": {
     "build": "node scripts/bundle-plugin.mjs && tsup",
     "dev": "tsup --watch",
-    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/reapply.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts && bun test src/ledger.test.ts && bun test src/wrapper/wrapper.test.ts && bun test src/wrapper/messageQueue.test.ts && bun test src/wrapper/approver.test.ts && bun test src/wrapper/remoteLoop.test.ts && bun test src/wrapper/spawnClaude.test.ts && bun test src/wrapper/wsProtocol.test.ts && bun test src/wrapper/relayClient.test.ts && bun test src/wrapper/modeLoop.test.ts && bun test src/wrapper/stdinHandoff.test.ts && bun test src/wrapper/localLeg.test.ts"
+    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/reapply.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts && bun test src/ledger.test.ts && bun test src/wrapper/wrapper.test.ts && bun test src/wrapper/messageQueue.test.ts && bun test src/wrapper/approver.test.ts && bun test src/wrapper/remoteLoop.test.ts && bun test src/wrapper/spawnClaude.test.ts && bun test src/wrapper/wsProtocol.test.ts && bun test src/wrapper/relayClient.test.ts && bun test src/wrapper/modeLoop.test.ts && bun test src/wrapper/stdinHandoff.test.ts && bun test src/wrapper/localLeg.test.ts && bun test src/crypto.test.ts && bun test src/transcript-capture.test.ts"
   },
   "dependencies": {
     "@inquirer/prompts": "^8.4.2",
     "qrcode-terminal": "^0.12.0",
-    "smol-toml": "^1.6.1"
+    "smol-toml": "^1.6.1",
+    "tweetnacl": "^1.0.3"
   },
   "devDependencies": {
     "@pushary/contracts": "workspace:*",