@pushary/agent-hooks 0.49.1 → 0.51.0

package/dist/{chunk-OQMEGREX.js → chunk-ZIQKFF4S.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS
-} from "./chunk-7EW3USQF.js";
+} from "./chunk-K74PMS6N.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -23,23 +23,47 @@ import {
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-O5MFSRWV.js";
+} from "./chunk-BEK4SJNX.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-R5AJNXZS.js";
+} from "./chunk-LRGSMQH2.js";
 import {
+  buildDecisionEpisodeFeatures,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "./chunk-Z5PL3K7C.js";
+} from "./chunk-CJBVT33U.js";
 import {
-  getApiKey
+  getApiKey,
+  getBaseUrl
 } from "./chunk-NKXSILEW.js";
 
+// src/decision-episode.ts
+var EPISODE_PATH = "/api/agent/decision-episode";
+var EMIT_TIMEOUT_MS = 3e3;
+var buildEpisodeBody = (input) => ({
+  sessionId: input.sessionId,
+  machineId: input.machineId,
+  agentType: input.agentType,
+  features: buildDecisionEpisodeFeatures(input)
+});
+var reportDecisionEpisode = async (apiKey, input) => {
+  try {
+    const baseUrl = getBaseUrl();
+    await fetch(`${baseUrl}${EPISODE_PATH}`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", Authorization: `Bearer ${apiKey}` },
+      body: JSON.stringify(buildEpisodeBody(input)),
+      signal: AbortSignal.timeout(EMIT_TIMEOUT_MS)
+    });
+  } catch {
+  }
+};
+
 // src/hook.ts
 import { basename, join } from "path";
 import { tmpdir } from "os";
@@ -90,7 +114,7 @@ var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3
   }
   return { answered: false };
 };
-var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget, decision) => {
+var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget, decision, signals) => {
   let result;
   try {
     result = await askUser(apiKey, {
@@ -136,6 +160,7 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
   const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
   if (answer.answered) {
     if (isDeferAnswer(answer.value)) return ask("Handling on your machine");
+    signals.humanDecision = true;
     return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value));
   }
   if (timeoutAction === "wait" || clampCut) {
@@ -154,7 +179,7 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
 var handleTerminalOnly = () => {
   return ask();
 };
-var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds, sessionId, machineId, toolName, toolTarget, decision) => {
+var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds, sessionId, machineId, toolName, toolTarget, decision, signals) => {
   let result;
   try {
     result = await askUser(apiKey, {
@@ -183,6 +208,7 @@ var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds,
   const answer = await pollForAnswer(apiKey, result.correlationId, deadline, 1500);
   if (answer.answered) {
     if (isDeferAnswer(answer.value)) return ask("Handling on your machine");
+    signals.humanDecision = true;
     return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value));
   }
   savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId);
@@ -201,7 +227,36 @@ var handleNotifyOnly = async (apiKey, description, projectName, sessionId, machi
   }
   return ask();
 };
-var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId) => {
+var CLAUDE_AGENT_TYPE = "claude_code";
+var emitDecisionEpisode = (apiKey, input, toolPolicy, machineId, toolTarget, decision, result) => {
+  const verdict = result?.hookSpecificOutput?.permissionDecision;
+  const outcome = verdict === "allow" ? "approve" : verdict === "deny" ? "deny" : null;
+  if (!outcome) return;
+  const ti = input.tool_input ?? {};
+  const commandOrPath = typeof ti.command === "string" ? ti.command : typeof ti.file_path === "string" ? ti.file_path : typeof ti.path === "string" ? ti.path : void 0;
+  void reportDecisionEpisode(apiKey, {
+    toolName: input.tool_name,
+    commandOrPath,
+    intent: decision.intent,
+    toolTarget,
+    agentType: CLAUDE_AGENT_TYPE,
+    matchedPattern: toolPolicy.tool,
+    policyMode: toolPolicy.mode,
+    timeoutSeconds: toolPolicy.timeoutSeconds,
+    timeoutAction: toolPolicy.timeoutAction,
+    // Reaching a handler means a human gate was requested (auto-allow/deny
+    // returned earlier in the caller before dispatch).
+    requestedGate: "ask",
+    decision: outcome,
+    // Truthfully human: the caller only emits when signals.humanDecision is set
+    // (a real phone answer). Bronze label until reason + execution-outcome land.
+    origin: "human",
+    latencyMs: Date.now() - START_MS,
+    sessionId: input.session_id,
+    machineId
+  });
+};
+var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingConsent = false) => {
   const description = describeToolCall(input.tool_name, input.tool_input, "hook");
   const projectName = basename(input.cwd ?? process.cwd());
   const sessionId = input.session_id;
@@ -213,18 +268,26 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId) => {
     blocker: deriveBlocker(toolPolicy.mode),
     actionBody: deriveActionBody(input.tool_name, input.tool_input)
   };
-  switch (toolPolicy.mode) {
-    case "push_only":
-      return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget, decision);
-    case "terminal_only":
-      return handleTerminalOnly();
-    case "push_first":
-      return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
-    case "notify_only":
-      return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
-    default:
-      return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
+  const signals = {};
+  const runHandler = () => {
+    switch (toolPolicy.mode) {
+      case "push_only":
+        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget, decision, signals);
+      case "terminal_only":
+        return Promise.resolve(handleTerminalOnly());
+      case "push_first":
+        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision, signals);
+      case "notify_only":
+        return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
+      default:
+        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision, signals);
+    }
+  };
+  const result = await runHandler();
+  if (trainingConsent && signals.humanDecision) {
+    emitDecisionEpisode(apiKey, input, toolPolicy, machineId, toolTarget, decision, result);
   }
+  return result;
 };
 var KEYLESS_NOTICE = "[pushary] Not connected (no API key), so your agent runs untouched. Approval moments are counted locally; see them with: npx @pushary/agent-hooks@latest stats. Connect: https://pushary.com/sign-up?utm_source=cli&utm_medium=keyless-hook";
 var keylessNoticeOnce = (sessionId) => {
@@ -322,7 +385,7 @@ var handlePreToolUse = async (input) => {
   }
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code");
     if (modeState.kill) {
       return deny("Stopped by user \u2014 this agent was halted from Pushary");
     }
@@ -339,7 +402,7 @@ var handlePreToolUse = async (input) => {
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
       return deny(`Denied by policy for ${toolPolicy.tool}`);
     }
-    return dispatchModeHandler(apiKey, input, toolPolicy, getMachineId());
+    return dispatchModeHandler(apiKey, input, toolPolicy, getMachineId(), modeState.trainingConsent);
   } catch {
     return void 0;
   }
@@ -374,14 +437,14 @@ var handlePermissionRequest = async (input) => {
   }
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code");
     if (modeState.kill) return permReqDeny("Stopped by user \u2014 this agent was halted from Pushary");
     const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return permReqAllow();
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
       return permReqDeny(`Denied by policy for ${toolPolicy.tool}`);
     }
-    return toPermissionRequestOutput(await dispatchModeHandler(apiKey, input, toolPolicy, getMachineId()));
+    return toPermissionRequestOutput(await dispatchModeHandler(apiKey, input, toolPolicy, getMachineId(), modeState.trainingConsent));
   } catch {
     return void 0;
   }

package/dist/src/index.d.ts

@@ -26,7 +26,7 @@ interface ReceiptMeta {
     ok: boolean;
 }
 
-declare const getPolicy: (apiKey: string, expectedVersion?: string | null) => Promise<PolicyConfig>;
+declare const getPolicy: (apiKey: string, expectedVersion?: string | null, agent?: string) => Promise<PolicyConfig>;
 type AutoResolveOrigin = 'safe_readonly' | 'policy_timeout';
 declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>) => ToolPolicy;
 interface ModeState {
@@ -34,6 +34,7 @@ interface ModeState {
     readonly kill: boolean;
     readonly policyVersion: string | null;
     readonly relayUrl: string | null;
+    readonly trainingConsent?: boolean;
 }
 declare const fetchModeState: (apiKey: string, sessionId?: string) => Promise<ModeState>;
 declare const fetchModeOverride: (apiKey: string) => Promise<ApprovalMode | null>;

package/dist/src/index.js

@@ -1,7 +1,7 @@
 import {
   handlePreToolUse
-} from "../chunk-OQMEGREX.js";
-import "../chunk-7EW3USQF.js";
+} from "../chunk-ZIQKFF4S.js";
+import "../chunk-K74PMS6N.js";
 import "../chunk-KQYIHZ5E.js";
 import {
   askUser,
@@ -15,11 +15,11 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-BEK4SJNX.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-R5AJNXZS.js";
+import "../chunk-LRGSMQH2.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-CJBVT33U.js";
 import {
   getApiKey,
   getBaseUrl

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.49.1",
+  "version": "0.51.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",
@@ -73,12 +73,13 @@
   "scripts": {
     "build": "node scripts/bundle-plugin.mjs && tsup",
     "dev": "tsup --watch",
-    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/reapply.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts && bun test src/ledger.test.ts && bun test src/wrapper/wrapper.test.ts && bun test src/wrapper/messageQueue.test.ts && bun test src/wrapper/approver.test.ts && bun test src/wrapper/remoteLoop.test.ts && bun test src/wrapper/spawnClaude.test.ts && bun test src/wrapper/wsProtocol.test.ts && bun test src/wrapper/relayClient.test.ts && bun test src/wrapper/modeLoop.test.ts && bun test src/wrapper/stdinHandoff.test.ts && bun test src/wrapper/localLeg.test.ts"
+    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/reapply.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts && bun test src/ledger.test.ts && bun test src/wrapper/wrapper.test.ts && bun test src/wrapper/messageQueue.test.ts && bun test src/wrapper/approver.test.ts && bun test src/wrapper/remoteLoop.test.ts && bun test src/wrapper/spawnClaude.test.ts && bun test src/wrapper/wsProtocol.test.ts && bun test src/wrapper/relayClient.test.ts && bun test src/wrapper/modeLoop.test.ts && bun test src/wrapper/stdinHandoff.test.ts && bun test src/wrapper/localLeg.test.ts && bun test src/crypto.test.ts && bun test src/crypto-vector.test.ts && bun test src/transcript-capture.test.ts && bun test src/transcript-sync.test.ts && bun test src/spawn-daemon.test.ts && bun test src/decision-episode.test.ts"
   },
   "dependencies": {
     "@inquirer/prompts": "^8.4.2",
     "qrcode-terminal": "^0.12.0",
-    "smol-toml": "^1.6.1"
+    "smol-toml": "^1.6.1",
+    "tweetnacl": "^1.0.3"
   },
   "devDependencies": {
     "@pushary/contracts": "workspace:*",

package/dist/chunk-Z5PL3K7C.js

@@ -1,322 +0,0 @@
-// ../contracts/src/index.ts
-var APPROVAL_MODES = ["push_only", "terminal_only", "push_first", "notify_only"];
-var isApprovalMode = (value) => typeof value === "string" && APPROVAL_MODES.includes(value);
-var HOOK_BUDGETS = {
-  claude: { budgetSeconds: 120, guardSeconds: 10 },
-  codex: { budgetSeconds: 180, guardSeconds: 10 },
-  gemini: { budgetSeconds: 180, guardSeconds: 10 },
-  // The Cursor gate is a dependency-free .mjs that cannot import this module; it
-  // mirrors these as MAX_BLOCK_MS (45s) inside its 60s failClosed budget.
-  cursor: { budgetSeconds: 60, guardSeconds: 15 }
-};
-var hookMaxWaitSeconds = (agent) => Math.max(HOOK_BUDGETS[agent].budgetSeconds - HOOK_BUDGETS[agent].guardSeconds, 1);
-var hookWaitDeadline = (startMs, policyWaitSeconds, agent, nowMs) => {
-  const maxWait = hookMaxWaitSeconds(agent);
-  return Math.min(
-    nowMs + Math.min(Math.max(policyWaitSeconds, 0), maxWait) * 1e3,
-    startMs + maxWait * 1e3
-  );
-};
-var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + hookMaxWaitSeconds(agent) * 1e3 < nowMs + Math.max(policyWaitSeconds, 0) * 1e3;
-var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
-var MATCH_RANKS = ["none", "tool", "prefix", "exact"];
-var matchRankWeight = (rank) => MATCH_RANKS.indexOf(rank);
-var matchToolPattern = (pattern, toolName, arg) => {
-  const open = pattern.indexOf("(");
-  if (open === -1 || !pattern.endsWith(")")) {
-    return pattern === toolName ? "tool" : "none";
-  }
-  if (pattern.slice(0, open) !== toolName || arg === void 0) return "none";
-  const inner = pattern.slice(open + 1, -1);
-  if (inner.endsWith(":*")) {
-    return arg.startsWith(inner.slice(0, -2)) ? "prefix" : "none";
-  }
-  return arg === inner ? "exact" : "none";
-};
-var POLICY_ARG_KEYS = {
-  Bash: "command",
-  Edit: "file_path",
-  Write: "file_path"
-};
-var extractPolicyArg = (toolName, toolInput) => {
-  const key = POLICY_ARG_KEYS[toolName];
-  if (!key) return void 0;
-  const value = toolInput[key];
-  return typeof value === "string" ? value : void 0;
-};
-var SAFE_SHELL_COMMANDS = /* @__PURE__ */ new Set([
-  "ls",
-  "pwd",
-  "cd",
-  "cat",
-  "head",
-  "tail",
-  "wc",
-  "echo",
-  "printf",
-  "which",
-  "type",
-  "whoami",
-  "id",
-  "uname",
-  "arch",
-  "printenv",
-  "locale",
-  "tty",
-  "dirname",
-  "basename",
-  "realpath",
-  "readlink",
-  "stat",
-  "cut",
-  "nl",
-  "tr",
-  "comm",
-  "diff",
-  "cmp",
-  "grep",
-  "egrep",
-  "fgrep",
-  "jq",
-  "cksum",
-  "md5sum",
-  "sha1sum",
-  "sha256sum",
-  "du",
-  "df",
-  "ps",
-  "true"
-]);
-var SAFE_GIT_SUBCOMMANDS = /* @__PURE__ */ new Set([
-  "status",
-  "log",
-  "diff",
-  "show",
-  "rev-parse",
-  "describe",
-  "blame",
-  "shortlog",
-  "ls-files",
-  "ls-tree",
-  "cat-file",
-  "whatchanged",
-  "rev-list",
-  "name-rev",
-  "for-each-ref",
-  "var",
-  "count-objects"
-]);
-var GIT_WRITE_FLAGS = (token) => token === "--output" || token.startsWith("--output=");
-var DANGEROUS_FIND_ACTIONS = /* @__PURE__ */ new Set([
-  "-exec",
-  "-execdir",
-  "-ok",
-  "-okdir",
-  "-delete",
-  "-fprintf",
-  "-fprint",
-  "-fprint0",
-  "-fls"
-]);
-var SAFE_FIND_TOKENS = /* @__PURE__ */ new Set([
-  "-name",
-  "-iname",
-  "-path",
-  "-ipath",
-  "-wholename",
-  "-iwholename",
-  "-lname",
-  "-ilname",
-  "-regex",
-  "-iregex",
-  "-type",
-  "-xtype",
-  "-maxdepth",
-  "-mindepth",
-  "-depth",
-  "-mount",
-  "-xdev",
-  "-size",
-  "-empty",
-  "-perm",
-  "-readable",
-  "-writable",
-  "-executable",
-  "-mtime",
-  "-mmin",
-  "-atime",
-  "-amin",
-  "-ctime",
-  "-cmin",
-  "-newer",
-  "-newermt",
-  "-anewer",
-  "-cnewer",
-  "-user",
-  "-uid",
-  "-group",
-  "-gid",
-  "-nouser",
-  "-nogroup",
-  "-samefile",
-  "-inum",
-  "-links",
-  "-print",
-  "-print0",
-  "-printf",
-  "-ls",
-  "-quit",
-  "-prune",
-  "-follow",
-  "-noleaf",
-  "-ignore_readdir_race",
-  "-noignore_readdir_race",
-  "-true",
-  "-false",
-  "-not",
-  "-and",
-  "-or",
-  "-o",
-  "-a",
-  "-P",
-  "-L",
-  "-H",
-  "-D",
-  "-O"
-]);
-var SAFE_REDIRECTION = /\s*(?:[0-9]*>&[0-9-]+|(?:[0-9]*|&)>>?\s*\/dev\/null)/g;
-var basenameOf = (token) => {
-  const slash = Math.max(token.lastIndexOf("/"), token.lastIndexOf("\\"));
-  return slash === -1 ? token : token.slice(slash + 1);
-};
-var TRUSTED_EXE_PREFIXES = [
-  "/bin/",
-  "/sbin/",
-  "/usr/bin/",
-  "/usr/sbin/",
-  "/usr/local/bin/",
-  "/opt/homebrew/bin/"
-];
-var isTrustedExecutable = (first) => {
-  if (!first.includes("/")) return true;
-  if (first.includes("..")) return false;
-  return TRUSTED_EXE_PREFIXES.some((prefix) => first.startsWith(prefix));
-};
-var tokenizeShellCommand = (command) => {
-  const tokens = [];
-  let current = "";
-  let quote = null;
-  let started = false;
-  for (const ch of command) {
-    if (quote) {
-      if (ch === quote) quote = null;
-      else current += ch;
-      started = true;
-      continue;
-    }
-    if (ch === '"' || ch === "'") {
-      quote = ch;
-      started = true;
-      continue;
-    }
-    if (ch === " " || ch === "	") {
-      if (started) {
-        tokens.push(current);
-        current = "";
-        started = false;
-      }
-      continue;
-    }
-    current += ch;
-    started = true;
-  }
-  if (quote) return null;
-  if (started) tokens.push(current);
-  return tokens;
-};
-var isSafeSimpleCommand = (segment) => {
-  const tokens = tokenizeShellCommand(segment.trim());
-  if (!tokens || tokens.length === 0) return false;
-  const first = tokens[0];
-  if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(first) || first.includes("$")) return false;
-  if (!isTrustedExecutable(first)) return false;
-  const exe = basenameOf(first);
-  if (exe === "git") {
-    const sub = tokens[1];
-    if (!sub || sub.startsWith("-")) return false;
-    if (!SAFE_GIT_SUBCOMMANDS.has(sub)) return false;
-    return !tokens.some(GIT_WRITE_FLAGS);
-  }
-  if (exe === "find") {
-    for (let i = 1; i < tokens.length; i += 1) {
-      const t = tokens[i];
-      if (t === "(" || t === ")" || t === "!" || t === "\\(" || t === "\\)" || t === "\\!") continue;
-      if (t.startsWith("-") && (DANGEROUS_FIND_ACTIONS.has(t) || !SAFE_FIND_TOKENS.has(t))) return false;
-    }
-    return true;
-  }
-  return SAFE_SHELL_COMMANDS.has(exe);
-};
-var isSafeReadOnlyCommand = (command) => {
-  const trimmed = command.trim();
-  if (!trimmed || trimmed.length > 2e3) return false;
-  if (/[`\n\r{}]/.test(trimmed)) return false;
-  if (/;|\|\|/.test(trimmed)) return false;
-  if (/\\(?![()!])/.test(trimmed)) return false;
-  if (/(?<!\\)[()]/.test(trimmed)) return false;
-  const noRedir = trimmed.replace(SAFE_REDIRECTION, " ");
-  if (/[<>]/.test(noRedir)) return false;
-  if (noRedir.replace(/&&/g, "  ").includes("&")) return false;
-  for (const andPart of noRedir.split("&&")) {
-    if (!andPart.trim()) return false;
-    for (const segment of andPart.split("|")) {
-      if (!isSafeSimpleCommand(segment)) return false;
-    }
-  }
-  return true;
-};
-var API_KEY_PATTERN = /^pk_[a-f0-9]+\.[a-f0-9]+$/;
-var isValidApiKey = (value) => API_KEY_PATTERN.test(value);
-var ACTION_BODY_MAX = 4e3;
-var DECISION_LINE_MAX = 500;
-var SECRET_REDACTION_RULES = [
-  { pattern: /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, replacement: "[redacted key]" },
-  { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, replacement: "[redacted]" },
-  { pattern: /\b[spr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bwhsec_[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
-  { pattern: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bgithub_pat_[A-Za-z0-9_]{22,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bglpat-[A-Za-z0-9_-]{20,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bAIza[A-Za-z0-9_-]{35}\b/g, replacement: "[redacted]" },
-  { pattern: /\bAKIA[0-9A-Z]{16}\b/g, replacement: "[redacted]" },
-  { pattern: /\bnpm_[A-Za-z0-9]{36}\b/g, replacement: "[redacted]" },
-  { pattern: /\bxai-[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
-  { pattern: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bbearer\s+[A-Za-z0-9._~+/=-]+/gi, replacement: "bearer [redacted]" },
-  { pattern: /\bauthorization:\s*\S+/gi, replacement: "authorization: [redacted]" },
-  {
-    pattern: /((?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)\s*[=:]\s*)("[^"]*"|'[^']*'|\S+)/gi,
-    replacement: "$1[redacted]"
-  }
-];
-var HIGH_ENTROPY_RULE = { pattern: /[A-Za-z0-9+/]{40,}={0,2}/g, replacement: "[redacted]" };
-var redactSecrets = (text) => SECRET_REDACTION_RULES.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
-var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
-
-export {
-  isApprovalMode,
-  HOOK_BUDGETS,
-  hookWaitDeadline,
-  hookWaitClamped,
-  effectiveWaitSeconds,
-  matchRankWeight,
-  matchToolPattern,
-  extractPolicyArg,
-  isSafeReadOnlyCommand,
-  isValidApiKey,
-  ACTION_BODY_MAX,
-  DECISION_LINE_MAX,
-  redactSecrets,
-  redactSecretsDeep
-};