@pushary/agent-hooks 0.49.1 → 0.51.0

package/dist/bin/pushary-post-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-BEK4SJNX.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-CJBVT33U.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-post-hook.ts

package/dist/bin/pushary-prompt-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-BEK4SJNX.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-CJBVT33U.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-prompt-hook.ts

package/dist/bin/pushary-session-end-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-BEK4SJNX.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-CJBVT33U.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-session-end-hook.ts

package/dist/bin/pushary-session-start-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-BEK4SJNX.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-CJBVT33U.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-session-start-hook.ts

package/dist/bin/pushary-setup.js

@@ -13,7 +13,7 @@ import {
   renderAgentInstructions,
   renderProjectAgentInstructions,
   writeInstructionBlock
-} from "../chunk-SVVEC4QV.js";
+} from "../chunk-ORKNGSJI.js";
 import {
   execNpm,
   npmErrorMessage,
@@ -25,15 +25,15 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-7EW3USQF.js";
+} from "../chunk-K74PMS6N.js";
 import {
   reportEvent
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-BEK4SJNX.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
 import {
   isValidApiKey
-} from "../chunk-Z5PL3K7C.js";
+} from "../chunk-CJBVT33U.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-setup.ts

package/dist/bin/pushary-stats.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   readLedgerSummary
-} from "../chunk-R5AJNXZS.js";
-import "../chunk-Z5PL3K7C.js";
+} from "../chunk-LRGSMQH2.js";
+import "../chunk-CJBVT33U.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-stop-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-BEK4SJNX.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-CJBVT33U.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stop-hook.ts

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-BEK4SJNX.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-CJBVT33U.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stopfailure-hook.ts

package/dist/bin/pushary-upgrade.js

@@ -8,8 +8,8 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-7EW3USQF.js";
-import "../chunk-Z5PL3K7C.js";
+} from "../chunk-K74PMS6N.js";
+import "../chunk-CJBVT33U.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/{chunk-O5MFSRWV.js → chunk-BEK4SJNX.js}

@@ -8,6 +8,7 @@ import {
 import {
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
+  classifyDecisionRisk,
   extractPolicyArg,
   isApprovalMode,
   isSafeReadOnlyCommand,
@@ -15,7 +16,7 @@ import {
   matchToolPattern,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-Z5PL3K7C.js";
+} from "./chunk-CJBVT33U.js";
 import {
   getApiKey,
   getBaseUrl
@@ -46,14 +47,15 @@ var isWaitForAnswerResponse = (data) => {
 
 // src/policy.ts
 var CACHE_TTL_MS = 60 * 1e3;
-var cacheFile = (apiKey) => {
-  const hash = createHash("sha256").update(apiKey).digest("hex").slice(0, 12);
+var cacheFile = (apiKey, agent) => {
+  const hash = createHash("sha256").update(agent ? `${apiKey}:${agent}` : apiKey).digest("hex").slice(0, 12);
   return join(tmpdir(), `pushary-policy-${hash}.json`);
 };
-var fetchPolicy = async (apiKey) => {
+var fetchPolicy = async (apiKey, agent) => {
   return withRetry(async () => {
     const baseUrl = getBaseUrl();
-    const response = await fetch(`${baseUrl}/api/mcp/policy`, {
+    const url = agent ? `${baseUrl}/api/mcp/policy?agent=${encodeURIComponent(agent)}` : `${baseUrl}/api/mcp/policy`;
+    const response = await fetch(url, {
       headers: { "Authorization": `Bearer ${apiKey}` },
       signal: AbortSignal.timeout(1e4)
     });
@@ -65,8 +67,8 @@ var fetchPolicy = async (apiKey) => {
     return raw;
   }, { maxAttempts: 2 });
 };
-var getPolicy = async (apiKey, expectedVersion) => {
-  const path = cacheFile(apiKey);
+var getPolicy = async (apiKey, expectedVersion, agent) => {
+  const path = cacheFile(apiKey, agent);
   let staleCache = null;
   if (existsSync(path)) {
     try {
@@ -83,7 +85,7 @@ var getPolicy = async (apiKey, expectedVersion) => {
     }
   }
   try {
-    const policy = await fetchPolicy(apiKey);
+    const policy = await fetchPolicy(apiKey, agent);
     try {
       writeFileSync(path, JSON.stringify({ ...policy, _cachedAt: Date.now(), _policyVersion: expectedVersion ?? null }), "utf-8");
     } catch {
@@ -141,6 +143,16 @@ var resolvePolicy = (config, toolName, modeOverride, toolInput) => {
   if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
     base = autoApprove(base.tool);
   }
+  const wouldAutoApprove = base.timeoutSeconds === 0 && base.timeoutAction === "approve";
+  if (!governedBySpecificRule && wouldAutoApprove && toolName === "Bash" && typeof arg === "string" && classifyDecisionRisk(toolName, arg) === "destructive") {
+    base = {
+      tool: base.tool,
+      timeoutSeconds: config.defaultTimeoutSeconds,
+      timeoutAction: "wait",
+      mode: "push_first",
+      pushFirstSeconds: config.defaultPushFirstSeconds ?? 20
+    };
+  }
   const effectiveOverride = modeOverride ?? config.modeOverride;
   if (effectiveOverride) {
     return { ...base, mode: effectiveOverride };
@@ -156,17 +168,18 @@ var fetchModeState = async (apiKey, sessionId) => {
       headers: { "Authorization": `Bearer ${apiKey}` },
       signal: AbortSignal.timeout(3e3)
     });
-    if (!response.ok) return { mode: null, kill: false, policyVersion: null, relayUrl: null };
+    if (!response.ok) return { mode: null, kill: false, policyVersion: null, relayUrl: null, trainingConsent: false };
     const data = await response.json();
     const mode = data.override?.mode;
     return {
       mode: isApprovalMode(mode) ? mode : null,
       kill: data.kill === true,
       policyVersion: toPolicyVersion(data.policyVersion),
-      relayUrl: typeof data.relayUrl === "string" && data.relayUrl.length > 0 ? data.relayUrl : null
+      relayUrl: typeof data.relayUrl === "string" && data.relayUrl.length > 0 ? data.relayUrl : null,
+      trainingConsent: data.trainingConsent === true
     };
   } catch {
-    return { mode: null, kill: false, policyVersion: null, relayUrl: null };
+    return { mode: null, kill: false, policyVersion: null, relayUrl: null, trainingConsent: false };
   }
 };
 var fetchModeOverride = async (apiKey) => (await fetchModeState(apiKey)).mode;
@@ -795,6 +808,9 @@ var reportEvent = async (event, options = {}) => {
         ...event,
         machineId: event.machineId ?? getMachineId(),
         installMode: detectInstallMode(),
+        // Link-back for a phone-spawned session: forward the spawn id the daemon
+        // set in the environment so the server can map spawnId -> sessionId.
+        ...process.env.PUSHARY_SPAWN_ID ? { spawnId: process.env.PUSHARY_SPAWN_ID } : {},
         // Advertise that this client reads `pendingCommand` back off the
         // response, so the server may drain the phone-queued instruction on
         // activity events (tool_complete/tool_error/user_prompt), not only Stop.