@pushary/agent-hooks 0.54.1 → 0.56.0

package/dist/bin/pushary-claude.js

@@ -13,17 +13,18 @@ import {
   describeToolCall,
   fetchModeState,
   getPolicy,
+  repoKeyFor,
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-3EOK3M44.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
 import {
   redactSecrets
-} from "../chunk-SY3NBF67.js";
+} from "../chunk-SYAAGYLZ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -528,8 +529,8 @@ var createRemoteApprover = (deps) => {
       const sessionId = deps.getSessionId?.();
       const modeState = await fetchModeState2(deps.apiKey, sessionId);
       if (modeState.kill) return deny("Stopped by user \u2014 this agent was halted from Pushary");
-      const policyConfig = await getPolicy2(deps.apiKey, modeState.policyVersion, "claude_code");
-      const policy = resolvePolicy2(policyConfig, toolName, modeState.mode, input);
+      const policyConfig = await getPolicy2(deps.apiKey, modeState.policyVersion, "claude_code", true);
+      const policy = resolvePolicy2(policyConfig, toolName, modeState.mode, input, deps.cwd, repoKeyFor(deps.cwd));
       if (policy.timeoutSeconds === 0 && policy.timeoutAction === "approve") return allow(input);
       if (policy.timeoutSeconds === 0 && policy.timeoutAction === "deny") {
         return deny(`Denied by policy for ${policy.tool}`);
@@ -1341,6 +1342,7 @@ var runDualMode = async (binary, args2, startingMode) => {
     apiKey,
     machineId,
     projectName,
+    cwd: process.cwd(),
     getSessionId: () => sessionId
   });
   const initialModeState = await fetchModeState(apiKey).catch(() => null);

package/dist/bin/pushary-clean.js

@@ -6,15 +6,15 @@ import {
   removeCodexHooks,
   removeGeminiSettings,
   removeInstructionBlock
-} from "../chunk-PZWZ77QH.js";
+} from "../chunk-GSERIC6Q.js";
 import {
   execNpm
 } from "../chunk-J7JWI3KU.js";
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-T2EEBR2D.js";
-import "../chunk-SY3NBF67.js";
+} from "../chunk-QYQO6RHJ.js";
+import "../chunk-SYAAGYLZ.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, writeFileSync, rmSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -31,21 +31,21 @@ import {
   toCodexWire,
   toPolicyLookup,
   waitForAnswer
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-3EOK3M44.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-WYQSLB7K.js";
+} from "../chunk-5TECIV6T.js";
 import "../chunk-DWED7BS3.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-SY3NBF67.js";
+} from "../chunk-SYAAGYLZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-codex.js

@@ -3,12 +3,12 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-3EOK3M44.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-SYAAGYLZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-doctor.js

@@ -11,18 +11,18 @@ import {
   missingGeminiHookEvents,
   readCodexMcpAuth,
   untrustedCodexHookEvents
-} from "../chunk-PZWZ77QH.js";
+} from "../chunk-GSERIC6Q.js";
 import {
   execNpm
 } from "../chunk-J7JWI3KU.js";
 import {
   readLedgerSummary
-} from "../chunk-WYQSLB7K.js";
+} from "../chunk-5TECIV6T.js";
 import {
   callMcpTool,
   sendMcpRequest
 } from "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-SYAAGYLZ.js";
 import {
   getBaseUrl
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-gemini-hook.js

@@ -23,21 +23,21 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-3EOK3M44.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-WYQSLB7K.js";
+} from "../chunk-5TECIV6T.js";
 import "../chunk-DWED7BS3.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-SY3NBF67.js";
+} from "../chunk-SYAAGYLZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-SVRDT5PP.js";
-import "../chunk-T2EEBR2D.js";
+} from "../chunk-GQPIOJA3.js";
+import "../chunk-QYQO6RHJ.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-SWNBIHDX.js";
+import "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-WYQSLB7K.js";
+import "../chunk-5TECIV6T.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-hook.ts

package/dist/bin/pushary-notification-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-notification-hook.ts

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-SVRDT5PP.js";
-import "../chunk-T2EEBR2D.js";
+} from "../chunk-GQPIOJA3.js";
+import "../chunk-QYQO6RHJ.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-SWNBIHDX.js";
+import "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-WYQSLB7K.js";
+import "../chunk-5TECIV6T.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-permission-denied-hook.ts

package/dist/bin/pushary-permission-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-SVRDT5PP.js";
-import "../chunk-T2EEBR2D.js";
+} from "../chunk-GQPIOJA3.js";
+import "../chunk-QYQO6RHJ.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-SWNBIHDX.js";
+import "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-WYQSLB7K.js";
+import "../chunk-5TECIV6T.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-permission-hook.ts

package/dist/bin/pushary-post-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-post-hook.ts

package/dist/bin/pushary-prompt-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-prompt-hook.ts

package/dist/bin/pushary-session-end-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-session-end-hook.ts

package/dist/bin/pushary-session-start-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-session-start-hook.ts

package/dist/bin/pushary-setup.js

@@ -13,7 +13,7 @@ import {
   renderAgentInstructions,
   renderProjectAgentInstructions,
   writeInstructionBlock
-} from "../chunk-PZWZ77QH.js";
+} from "../chunk-GSERIC6Q.js";
 import {
   execNpm,
   npmErrorMessage,
@@ -25,15 +25,15 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-T2EEBR2D.js";
+} from "../chunk-QYQO6RHJ.js";
 import {
   reportEvent
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
 import {
   isValidApiKey
-} from "../chunk-SY3NBF67.js";
+} from "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-setup.ts

package/dist/bin/pushary-stats.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   readLedgerSummary
-} from "../chunk-WYQSLB7K.js";
-import "../chunk-SY3NBF67.js";
+} from "../chunk-5TECIV6T.js";
+import "../chunk-SYAAGYLZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-stop-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stop-hook.ts

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stopfailure-hook.ts

package/dist/bin/pushary-upgrade.js

@@ -8,8 +8,8 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-T2EEBR2D.js";
-import "../chunk-SY3NBF67.js";
+} from "../chunk-QYQO6RHJ.js";
+import "../chunk-SYAAGYLZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/{chunk-SWNBIHDX.js → chunk-3EOK3M44.js}

@@ -9,14 +9,17 @@ import {
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
   classifyDecisionRisk,
-  extractPolicyArg,
   isApprovalMode,
+  isRepoKeyMatch,
   isSafeReadOnlyCommand,
+  localRepoKey,
   matchRankWeight,
-  matchToolPattern,
+  matchToolPatternAny,
+  normalizeRepoRemote,
+  policyArgForms,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-SY3NBF67.js";
+} from "./chunk-SYAAGYLZ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -47,14 +50,19 @@ var isWaitForAnswerResponse = (data) => {
 
 // src/policy.ts
 var CACHE_TTL_MS = 60 * 1e3;
-var cacheFile = (apiKey, agent) => {
-  const hash = createHash("sha256").update(agent ? `${apiKey}:${agent}` : apiKey).digest("hex").slice(0, 12);
+var policyCacheFile = (apiKey, agent, repoAware = false) => {
+  const parts = [apiKey, agent, repoAware ? "repoAware" : void 0].filter(Boolean);
+  const hash = createHash("sha256").update(parts.join(":")).digest("hex").slice(0, 12);
   return join(tmpdir(), `pushary-policy-${hash}.json`);
 };
-var fetchPolicy = async (apiKey, agent) => {
+var fetchPolicy = async (apiKey, agent, repoAware = false) => {
   return withRetry(async () => {
     const baseUrl = getBaseUrl();
-    const url = agent ? `${baseUrl}/api/mcp/policy?agent=${encodeURIComponent(agent)}` : `${baseUrl}/api/mcp/policy`;
+    const params = new URLSearchParams();
+    if (agent) params.set("agent", agent);
+    if (repoAware) params.set("repoAware", "1");
+    const query = params.toString();
+    const url = query ? `${baseUrl}/api/mcp/policy?${query}` : `${baseUrl}/api/mcp/policy`;
     const response = await fetch(url, {
       headers: { "Authorization": `Bearer ${apiKey}` },
       signal: AbortSignal.timeout(1e4)
@@ -67,8 +75,8 @@ var fetchPolicy = async (apiKey, agent) => {
     return raw;
   }, { maxAttempts: 2 });
 };
-var getPolicy = async (apiKey, expectedVersion, agent) => {
-  const path = cacheFile(apiKey, agent);
+var getPolicy = async (apiKey, expectedVersion, agent, repoAware = false) => {
+  const path = policyCacheFile(apiKey, agent, repoAware);
   let staleCache = null;
   if (existsSync(path)) {
     try {
@@ -85,7 +93,7 @@ var getPolicy = async (apiKey, expectedVersion, agent) => {
     }
   }
   try {
-    const policy = await fetchPolicy(apiKey, agent);
+    const policy = await fetchPolicy(apiKey, agent, repoAware);
     try {
       writeFileSync(path, JSON.stringify({ ...policy, _cachedAt: Date.now(), _policyVersion: expectedVersion ?? null }), "utf-8");
     } catch {
@@ -96,18 +104,23 @@ var getPolicy = async (apiKey, expectedVersion, agent) => {
     throw new Error("Failed to fetch policy and no cached policy available");
   }
 };
-var findBestMatch = (policies, toolName, arg) => {
+var findBestMatch = (policies, toolName, args, repoKey) => {
   let best;
   let bestWeight = 0;
+  let bestScoped = -1;
   let bestLength = -1;
   for (const candidate of policies) {
-    const rank = matchToolPattern(candidate.tool, toolName, arg);
+    if (!isRepoKeyMatch(candidate.repoKey, repoKey)) continue;
+    const rank = matchToolPatternAny(candidate.tool, toolName, args);
     if (rank === "none") continue;
     const weight = matchRankWeight(rank);
+    const scoped = candidate.repoKey ? 1 : 0;
     const length = rank === "prefix" ? candidate.tool.length : -1;
-    if (weight > bestWeight || weight === bestWeight && length > bestLength) {
+    const better = weight > bestWeight || weight === bestWeight && scoped > bestScoped || weight === bestWeight && scoped === bestScoped && length > bestLength;
+    if (better) {
       best = { policy: candidate, rank };
       bestWeight = weight;
+      bestScoped = scoped;
       bestLength = length;
     }
   }
@@ -120,18 +133,20 @@ var autoApprove = (tool) => ({
   mode: "terminal_only",
   pushFirstSeconds: 0
 });
-var resolveAutoResolveOrigin = (config, toolName, toolInput) => {
-  const arg = toolInput ? extractPolicyArg(toolName, toolInput) : void 0;
-  const match = findBestMatch(config.policies, toolName, arg);
+var resolveAutoResolveOrigin = (config, toolName, toolInput, cwd, repoKey) => {
+  const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
+  const arg = args[0];
+  const match = findBestMatch(config.policies, toolName, args, repoKey);
   const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
   if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
     return "safe_readonly";
   }
   return "policy_timeout";
 };
-var resolvePolicy = (config, toolName, modeOverride, toolInput) => {
-  const arg = toolInput ? extractPolicyArg(toolName, toolInput) : void 0;
-  const match = findBestMatch(config.policies, toolName, arg);
+var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey) => {
+  const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
+  const arg = args[0];
+  const match = findBestMatch(config.policies, toolName, args, repoKey);
   let base = match?.policy ?? config.policies.find((p) => p.tool === "*") ?? {
     tool: toolName,
     timeoutSeconds: config.defaultTimeoutSeconds,
@@ -639,17 +654,101 @@ var permissionTimeoutDecision = (timeoutAction) => {
 };
 var preToolUseTimeoutDecision = (timeoutAction, denyReason = "No response within timeout") => timeoutAction === "deny" ? codexDeny(denyReason) : codexPass();
 
+// src/repo.ts
+import { existsSync as existsSync3, readFileSync as readFileSync3, statSync as statSync3 } from "fs";
+import { basename, dirname, isAbsolute as isAbsolute2, join as join4, resolve as resolve2 } from "path";
+var MAX_PARENT_WALK = 64;
+var GIT_FILE_PREFIX = "gitdir:";
+var findGitDir = (startDir) => {
+  let current = resolve2(startDir);
+  for (let depth = 0; depth < MAX_PARENT_WALK; depth += 1) {
+    const candidate = join4(current, ".git");
+    try {
+      if (existsSync3(candidate)) {
+        if (statSync3(candidate).isDirectory()) return candidate;
+        const pointer = readFileSync3(candidate, "utf-8").trim();
+        if (pointer.startsWith(GIT_FILE_PREFIX)) {
+          const target = pointer.slice(GIT_FILE_PREFIX.length).trim();
+          return isAbsolute2(target) ? target : resolve2(current, target);
+        }
+      }
+    } catch {
+    }
+    const parent = dirname(current);
+    if (parent === current) return void 0;
+    current = parent;
+  }
+  return void 0;
+};
+var configPathFor = (gitDir) => {
+  const index = gitDir.replace(/\\/g, "/").indexOf("/worktrees/");
+  return index === -1 ? join4(gitDir, "config") : join4(gitDir.slice(0, index), "config");
+};
+var ORIGIN_SECTION = /^\[remote "origin"\]/;
+var SECTION_HEADER = /^\[/;
+var URL_LINE = /^url\s*=\s*(.+)$/;
+var readOriginRemote = (gitDir) => {
+  try {
+    const configPath = configPathFor(gitDir);
+    if (!existsSync3(configPath)) return void 0;
+    let inOrigin = false;
+    for (const rawLine of readFileSync3(configPath, "utf-8").split("\n")) {
+      const line = rawLine.trim();
+      if (SECTION_HEADER.test(line)) {
+        inOrigin = ORIGIN_SECTION.test(line);
+        continue;
+      }
+      if (!inOrigin) continue;
+      const url = URL_LINE.exec(line);
+      if (url) return url[1]?.trim();
+    }
+  } catch {
+  }
+  return void 0;
+};
+var deriveRepoKey = (cwd) => {
+  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
+  try {
+    const gitDir = findGitDir(dir);
+    if (gitDir) {
+      const remote = readOriginRemote(gitDir);
+      const normalized = remote ? normalizeRepoRemote(remote) : void 0;
+      if (normalized) return normalized;
+      const root = gitDir.endsWith(".git") ? dirname(gitDir) : dir;
+      return localRepoKey(basename(root));
+    }
+    return localRepoKey(basename(resolve2(dir)));
+  } catch {
+    return void 0;
+  }
+};
+var repoKeyCache = /* @__PURE__ */ new Map();
+var REPO_KEY_ENV = "PUSHARY_REPO_KEY";
+var repoKeyFor = (cwd) => {
+  const override = process.env[REPO_KEY_ENV];
+  if (typeof override === "string") {
+    const trimmed = override.trim();
+    if (trimmed.toLowerCase() === "off") return void 0;
+    if (trimmed.length > 0) return trimmed.toLowerCase();
+  }
+  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
+  if (repoKeyCache.has(dir)) return repoKeyCache.get(dir);
+  const derived = deriveRepoKey(dir);
+  repoKeyCache.set(dir, derived);
+  return derived;
+};
+
 // src/throttle.ts
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 import { tmpdir as tmpdir4 } from "os";
 import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, statSync as statSync3, writeFileSync as writeFileSync4 } from "fs";
-var THROTTLE_DIR = join4(tmpdir4(), "pushary-throttle");
-var markerPath = (key) => join4(THROTTLE_DIR, createHash2("sha256").update(key).digest("hex").slice(0, 16));
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "fs";
+var THROTTLE_DIR = join5(tmpdir4(), "pushary-throttle");
+var markerPath = (key) => join5(THROTTLE_DIR, createHash2("sha256").update(key).digest("hex").slice(0, 16));
 var throttlePass = (key, windowMs) => {
   try {
     const path = markerPath(key);
-    if (existsSync3(path) && Date.now() - statSync3(path).mtimeMs < windowMs) return false;
+    if (existsSync4(path) && Date.now() - statSync4(path).mtimeMs < windowMs) return false;
     mkdirSync3(THROTTLE_DIR, { recursive: true });
     writeFileSync4(path, "", "utf-8");
     return true;
@@ -659,15 +758,14 @@ var throttlePass = (key, windowMs) => {
 };
 
 // src/events.ts
-import { basename, join as join5 } from "path";
-import { createHash as createHash3 } from "crypto";
-import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync3, statSync as statSync4, writeFileSync as writeFileSync5 } from "fs";
+import { basename as basename2, join as join6 } from "path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync4, statSync as statSync5, writeFileSync as writeFileSync5 } from "fs";
 import { tmpdir as tmpdir5 } from "os";
-var INTENT_DIR = join5(tmpdir5(), "pushary-intent");
+var INTENT_DIR = join6(tmpdir5(), "pushary-intent");
 var INTENT_MAX_BYTES = 2048;
 var INTENT_GRACE_MS = 10 * 60 * 1e3;
 var sanitizeSession = (sessionId) => sessionId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || DEFAULT_SESSION;
-var intentFile = (sessionId) => join5(INTENT_DIR, sanitizeSession(sessionId));
+var intentFile = (sessionId) => join6(INTENT_DIR, sanitizeSession(sessionId));
 var saveLastPrompt = (sessionId, prompt) => {
   try {
     const trimmed = prompt.replace(/\s+/g, " ").trim().slice(0, INTENT_MAX_BYTES);
@@ -680,8 +778,8 @@ var saveLastPrompt = (sessionId, prompt) => {
 var readLastPrompt = (sessionId) => {
   try {
     const path = intentFile(sessionId);
-    if (isDefaultSession(sessionId) && statSync4(path).mtimeMs < Date.now() - INTENT_GRACE_MS) return void 0;
-    const value = readFileSync3(path, "utf-8").trim();
+    if (isDefaultSession(sessionId) && statSync5(path).mtimeMs < Date.now() - INTENT_GRACE_MS) return void 0;
+    const value = readFileSync4(path, "utf-8").trim();
     return value.length > 0 ? value : void 0;
   } catch {
     return void 0;
@@ -737,20 +835,19 @@ var notifyLateAnswers = async (apiKey, late, agentName, sessionId) => {
 var CLAUDE_CODE_AGENT = { type: "claude_code", label: "Claude Code" };
 var POLICY_CACHE_TTL_MS = 5 * 60 * 1e3;
 var readFreshCachedPolicy = (apiKey) => {
-  const hash = createHash3("sha256").update(apiKey).digest("hex").slice(0, 12);
-  const path = join5(tmpdir5(), `pushary-policy-${hash}.json`);
-  if (!existsSync4(path)) return null;
-  const cached = JSON.parse(readFileSync3(path, "utf-8"));
+  const path = policyCacheFile(apiKey);
+  if (!existsSync5(path)) return null;
+  const cached = JSON.parse(readFileSync4(path, "utf-8"));
   if (!isPolicyConfig(cached)) return null;
   if (!cached._cachedAt || Date.now() - cached._cachedAt >= POLICY_CACHE_TTL_MS) return null;
   return cached;
 };
-var deriveDecisionSource = (toolName, toolInput, liveMode) => {
+var deriveDecisionSource = (toolName, toolInput, liveMode, cwd) => {
   try {
     if (liveMode.kill) return "terminal";
     const policy = readFreshCachedPolicy(getApiKey());
     if (!policy) return void 0;
-    const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput);
+    const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput, cwd, repoKeyFor(cwd));
     if (resolved.timeoutSeconds === 0 && resolved.timeoutAction === "approve") return "policy_auto";
     if (resolved.mode === "push_only" || resolved.mode === "push_first") return "human";
     return "terminal";
@@ -758,15 +855,15 @@ var deriveDecisionSource = (toolName, toolInput, liveMode) => {
     return void 0;
   }
 };
-var deriveAutoDecisionBeacon = (toolName, toolInput, liveMode) => {
+var deriveAutoDecisionBeacon = (toolName, toolInput, liveMode, cwd) => {
   try {
     if (liveMode.kill) return void 0;
     const policy = readFreshCachedPolicy(getApiKey());
     if (!policy) return void 0;
-    const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput);
+    const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput, cwd, repoKeyFor(cwd));
     if (resolved.timeoutSeconds !== 0 || resolved.timeoutAction !== "approve") return void 0;
     return {
-      decisionOrigin: resolveAutoResolveOrigin(policy, toolName, toolInput),
+      decisionOrigin: resolveAutoResolveOrigin(policy, toolName, toolInput, cwd, repoKeyFor(cwd)),
       toolName,
       toolTarget: deriveToolTarget(toolName, toolInput)
     };
@@ -807,6 +904,7 @@ var reportEvent = async (event, options = {}) => {
       body: JSON.stringify({
         ...event,
         machineId: event.machineId ?? getMachineId(),
+        repoKey: event.repoKey ?? repoKeyFor(),
         installMode: detectInstallMode(),
         // Link-back for a phone-spawned session: forward the spawn id the daemon
         // set in the environment so the server can map spawnId -> sessionId.
@@ -831,7 +929,7 @@ var reportEvent = async (event, options = {}) => {
 var NON_GATED_MIRROR_TOOLS = /* @__PURE__ */ new Set(["TodoWrite"]);
 var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const action = describeToolCall(input.tool_name, input.tool_input, "event");
     const lookup = toPolicyLookup(input.tool_name, input.tool_input);
     const toolResult = input.tool_response ?? input.tool_result;
@@ -846,8 +944,8 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
       for (const l of late) removePendingQuestion(sessionKey, l.correlationId);
     }
     const isMirrorOnly = NON_GATED_MIRROR_TOOLS.has(input.tool_name);
-    const decisionSource = isMirrorOnly ? void 0 : deriveDecisionSource(lookup.tool, lookup.input, liveMode);
-    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode) : void 0;
+    const decisionSource = isMirrorOnly ? void 0 : deriveDecisionSource(lookup.tool, lookup.input, liveMode, input.cwd);
+    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, input.cwd) : void 0;
     const toolReport = reportEvent({
       event: isError ? "tool_error" : "tool_complete",
       agentType: agent.type,
@@ -886,7 +984,7 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
 var TASK_TITLE_MAX_LENGTH = 120;
 var handleUserPrompt = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const titlesEnabled = process.env.PUSHARY_TASK_TITLES !== "off";
     const taskTitle = titlesEnabled ? input.prompt?.replace(/\s+/g, " ").trim().slice(0, TASK_TITLE_MAX_LENGTH) || void 0 : void 0;
@@ -931,7 +1029,7 @@ var summarizeStop = (input) => {
 };
 var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const late = await reconcilePendingQuestions(sessionKey);
     const tasks = [
@@ -967,7 +1065,7 @@ var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
 };
 var handleSessionStart = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const action = input.source === "resume" ? "Session resumed" : "Session started";
     await reportEvent({
       event: "session_start",
@@ -989,7 +1087,7 @@ var SESSION_END_ACTIONS = {
 };
 var handleSessionEnd = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const action = typeof input.reason === "string" && SESSION_END_ACTIONS[input.reason] || "Session ended";
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const late = await reconcilePendingQuestions(sessionKey);
@@ -1013,7 +1111,7 @@ var NOTIFICATION_PUSH_TYPES = /* @__PURE__ */ new Set(["idle_prompt", "agent_nee
 var NOTIFICATION_THROTTLE_MS = 60 * 1e3;
 var handleNotification = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const notifType = input.notification_type ?? input.type ?? "";
     const sessionKey = input.session_id || DEFAULT_SESSION;
     if (NOTIFICATION_PUSH_TYPES.has(notifType)) {
@@ -1083,7 +1181,7 @@ var handleStopFailure = async (input, agent = CLAUDE_CODE_AGENT) => {
     } catch {
       return;
     }
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const mode = await fetchModeState(apiKey, input.session_id).catch(() => null);
     if (mode?.kill || mode?.mode === "terminal_only") return;
     const reason = describeStopFailure(input.error);
@@ -1115,6 +1213,7 @@ export {
   deriveBlocker,
   DEFAULT_SESSION,
   savePendingQuestion,
+  repoKeyFor,
   throttlePass,
   readLastUserPrompt,
   CODEX_AGENT,

package/dist/{chunk-WYQSLB7K.js → chunk-5TECIV6T.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-SY3NBF67.js";
+} from "./chunk-SYAAGYLZ.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-SVRDT5PP.js → chunk-GQPIOJA3.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS
-} from "./chunk-T2EEBR2D.js";
+} from "./chunk-QYQO6RHJ.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -18,25 +18,26 @@ import {
   getPolicy,
   readLastPrompt,
   readLastUserPrompt,
+  repoKeyFor,
   resolvePolicy,
   savePendingQuestion,
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-SWNBIHDX.js";
+} from "./chunk-3EOK3M44.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-WYQSLB7K.js";
+} from "./chunk-5TECIV6T.js";
 import {
   buildDecisionEpisodeFeatures,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "./chunk-SY3NBF67.js";
+} from "./chunk-SYAAGYLZ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -385,7 +386,7 @@ var handlePreToolUse = async (input) => {
   }
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
-    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code");
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code", true);
     if (modeState.kill) {
       return deny("Stopped by user, this agent was halted from Pushary");
     }
@@ -395,7 +396,7 @@ var handlePreToolUse = async (input) => {
     if (shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
       return void 0;
     }
-    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
+    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input, input.cwd, repoKeyFor(input.cwd));
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") {
       return allow();
     }
@@ -440,9 +441,9 @@ var handlePermissionRequest = async (input) => {
   }
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
-    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code");
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code", true);
     if (modeState.kill) return permReqDeny("Stopped by user \u2014 this agent was halted from Pushary");
-    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
+    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input, input.cwd, repoKeyFor(input.cwd));
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return permReqAllow();
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
       return permReqDeny(`Denied by policy for ${toolPolicy.tool}`);

package/dist/{chunk-PZWZ77QH.js → chunk-GSERIC6Q.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-SY3NBF67.js";
+} from "./chunk-SYAAGYLZ.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";

package/dist/{chunk-T2EEBR2D.js → chunk-QYQO6RHJ.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-SY3NBF67.js";
+} from "./chunk-SYAAGYLZ.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-SY3NBF67.js → chunk-SYAAGYLZ.js}

@@ -19,8 +19,112 @@ var hookWaitDeadline = (startMs, policyWaitSeconds, agent, nowMs) => {
 };
 var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + hookMaxWaitSeconds(agent) * 1e3 < nowMs + Math.max(policyWaitSeconds, 0) * 1e3;
 var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
+var REPO_KEY_MAX_LENGTH = 200;
+var isRepoKeyMatch = (ruleRepoKey, currentRepoKey) => {
+  if (!ruleRepoKey) return true;
+  return ruleRepoKey === currentRepoKey;
+};
+var SCP_LIKE_REMOTE = /^[A-Za-z0-9._-]+@([A-Za-z0-9._-]+):(.+)$/;
+var URL_LIKE_REMOTE = /^[A-Za-z][A-Za-z0-9+.-]*:\/\/(.+)$/;
+var NUMERIC_PORT = /:\d+$/;
+var stripCredentials = (host) => {
+  const at = host.lastIndexOf("@");
+  return at === -1 ? host : host.slice(at + 1);
+};
+var normalizeRepoRemote = (remoteUrl) => {
+  const raw = remoteUrl.trim();
+  if (raw.length === 0) return void 0;
+  let hostAndPath;
+  const scp = SCP_LIKE_REMOTE.exec(raw);
+  if (scp) {
+    hostAndPath = `${scp[1]}/${scp[2]}`;
+  } else {
+    const url = URL_LIKE_REMOTE.exec(raw);
+    if (!url) return void 0;
+    if (/^file:/i.test(raw)) return void 0;
+    hostAndPath = url[1];
+  }
+  const slash = hostAndPath.indexOf("/");
+  if (slash <= 0) return void 0;
+  const host = stripCredentials(hostAndPath.slice(0, slash)).replace(NUMERIC_PORT, "");
+  const path = hostAndPath.slice(slash + 1).split("/").filter((segment) => segment.length > 0).join("/");
+  if (host.length === 0 || path.length === 0) return void 0;
+  const key = `${host}/${path}`.replace(/\.git$/i, "").toLowerCase();
+  return key.length > REPO_KEY_MAX_LENGTH ? key.slice(0, REPO_KEY_MAX_LENGTH) : key;
+};
+var localRepoKey = (directoryName) => {
+  const name = directoryName.trim().replace(/[/\\]+$/, "").toLowerCase();
+  if (name.length === 0 || name === "." || name === "..") return void 0;
+  const key = `local/${name}`;
+  return key.length > REPO_KEY_MAX_LENGTH ? key.slice(0, REPO_KEY_MAX_LENGTH) : key;
+};
 var MATCH_RANKS = ["none", "tool", "prefix", "exact"];
 var matchRankWeight = (rank) => MATCH_RANKS.indexOf(rank);
+var GLOB_MAX_WILDCARDS = 8;
+var GLOB_MAX_ARG_LENGTH = 4096;
+var GLOB_CACHE_MAX = 256;
+var tokenizeGlob = (glob) => {
+  let stars = 0;
+  for (const char of glob) if (char === "*") stars += 1;
+  if (stars > GLOB_MAX_WILDCARDS) return void 0;
+  const tokens = [];
+  let literal = "";
+  const flush = () => {
+    if (literal.length > 0) {
+      tokens.push({ kind: "literal", value: literal });
+      literal = "";
+    }
+  };
+  for (let i = 0; i < glob.length; i += 1) {
+    if (glob[i] !== "*") {
+      literal += glob[i];
+      continue;
+    }
+    flush();
+    if (glob[i + 1] === "*") {
+      tokens.push({ kind: "globstar" });
+      i += 1;
+      continue;
+    }
+    tokens.push({ kind: "star" });
+  }
+  flush();
+  return tokens;
+};
+var SLASH = "/".charCodeAt(0);
+var matchGlobTokens = (tokens, text) => {
+  const n = text.length;
+  let reachable = new Uint8Array(n + 1);
+  reachable[0] = 1;
+  for (const token of tokens) {
+    const next = new Uint8Array(n + 1);
+    if (token.kind === "literal") {
+      const { value } = token;
+      for (let p = 0; p <= n - value.length; p += 1) {
+        if (reachable[p] && text.startsWith(value, p)) next[p + value.length] = 1;
+      }
+    } else {
+      const spansSeparators = token.kind === "globstar";
+      let open = 0;
+      for (let p = 0; p <= n; p += 1) {
+        if (!spansSeparators && p > 0 && text.charCodeAt(p - 1) === SLASH) open = 0;
+        if (reachable[p]) open = 1;
+        if (open) next[p] = 1;
+      }
+    }
+    reachable = next;
+  }
+  return reachable[n] === 1;
+};
+var globCache = /* @__PURE__ */ new Map();
+var compiledGlob = (glob) => {
+  const cached = globCache.get(glob);
+  if (cached !== void 0 || globCache.has(glob)) return cached;
+  const compiled = tokenizeGlob(glob);
+  if (globCache.size >= GLOB_CACHE_MAX) globCache.clear();
+  globCache.set(glob, compiled);
+  return compiled;
+};
 var matchToolPattern = (pattern, toolName, arg) => {
   const open = pattern.indexOf("(");
   if (open === -1 || !pattern.endsWith(")")) {
@@ -31,19 +135,65 @@ var matchToolPattern = (pattern, toolName, arg) => {
   if (inner.endsWith(":*")) {
     return arg.startsWith(inner.slice(0, -2)) ? "prefix" : "none";
   }
+  if (inner.includes("*")) {
+    if (arg.length > GLOB_MAX_ARG_LENGTH) return "none";
+    const compiled = compiledGlob(inner);
+    return compiled && matchGlobTokens(compiled, arg) ? "prefix" : "none";
+  }
   return arg === inner ? "exact" : "none";
 };
-var POLICY_ARG_KEYS = {
-  Bash: "command",
+var POLICY_PATH_KEYS = {
+  Read: "file_path",
   Edit: "file_path",
-  Write: "file_path"
+  Write: "file_path",
+  MultiEdit: "file_path",
+  NotebookEdit: "notebook_path",
+  LS: "path"
 };
+var POLICY_COMMAND_KEYS = {
+  Bash: "command",
+  PowerShell: "command",
+  Monitor: "command"
+};
+var POLICY_ARG_KEYS = { ...POLICY_COMMAND_KEYS, ...POLICY_PATH_KEYS };
 var extractPolicyArg = (toolName, toolInput) => {
   const key = POLICY_ARG_KEYS[toolName];
   if (!key) return void 0;
   const value = toolInput[key];
   return typeof value === "string" ? value : void 0;
 };
+var normalizeSeparators = (value) => value.replace(/\\/g, "/");
+var isAbsolutePath = (value) => value.startsWith("/") || /^[A-Za-z]:\//.test(value);
+var relativeToCwd = (path, cwd) => {
+  const base = normalizeSeparators(cwd).replace(/\/+$/, "");
+  if (!base) return void 0;
+  const prefix = `${base}/`;
+  if (!path.startsWith(prefix)) return void 0;
+  const rest = path.slice(prefix.length);
+  return rest.length > 0 ? rest : void 0;
+};
+var policyArgForms = (toolName, toolInput, cwd) => {
+  const raw = extractPolicyArg(toolName, toolInput);
+  if (raw === void 0) return [];
+  if (!(toolName in POLICY_PATH_KEYS)) return [raw];
+  const forms = [raw];
+  const normalized = normalizeSeparators(raw);
+  if (normalized !== raw) forms.push(normalized);
+  if (cwd && isAbsolutePath(normalized)) {
+    const relative = relativeToCwd(normalized, cwd);
+    if (relative !== void 0) forms.push(relative);
+  }
+  return forms;
+};
+var matchToolPatternAny = (pattern, toolName, args) => {
+  if (args.length === 0) return matchToolPattern(pattern, toolName);
+  let best = "none";
+  for (const arg of args) {
+    const rank = matchToolPattern(pattern, toolName, arg);
+    if (matchRankWeight(rank) > matchRankWeight(best)) best = rank;
+  }
+  return best;
+};
 var SAFE_SHELL_COMMANDS = /* @__PURE__ */ new Set([
   "ls",
   "pwd",
@@ -581,9 +731,12 @@ export {
   hookWaitDeadline,
   hookWaitClamped,
   effectiveWaitSeconds,
+  isRepoKeyMatch,
+  normalizeRepoRemote,
+  localRepoKey,
   matchRankWeight,
-  matchToolPattern,
-  extractPolicyArg,
+  policyArgForms,
+  matchToolPatternAny,
   isSafeReadOnlyCommand,
   isValidApiKey,
   ACTION_BODY_MAX,

package/dist/src/index.d.ts

@@ -26,9 +26,9 @@ interface ReceiptMeta {
     ok: boolean;
 }
 
-declare const getPolicy: (apiKey: string, expectedVersion?: string | null, agent?: string) => Promise<PolicyConfig>;
+declare const getPolicy: (apiKey: string, expectedVersion?: string | null, agent?: string, repoAware?: boolean) => Promise<PolicyConfig>;
 type AutoResolveOrigin = 'safe_readonly' | 'policy_timeout';
-declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>) => ToolPolicy;
+declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>, cwd?: string, repoKey?: string) => ToolPolicy;
 interface ModeState {
     readonly mode: ApprovalMode | null;
     readonly kill: boolean;
@@ -57,6 +57,7 @@ interface AgentEvent {
     agentName?: string;
     action?: string;
     machineId?: string;
+    repoKey?: string;
     sessionId?: string;
     error?: string;
     taskTitle?: string;

package/dist/src/index.js

@@ -1,7 +1,7 @@
 import {
   handlePreToolUse
-} from "../chunk-SVRDT5PP.js";
-import "../chunk-T2EEBR2D.js";
+} from "../chunk-GQPIOJA3.js";
+import "../chunk-QYQO6RHJ.js";
 import "../chunk-YHG74UFF.js";
 import {
   askUser,
@@ -15,11 +15,11 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-SWNBIHDX.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-WYQSLB7K.js";
+import "../chunk-5TECIV6T.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-SY3NBF67.js";
+import "../chunk-SYAAGYLZ.js";
 import {
   getApiKey,
   getBaseUrl

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.54.1",
+  "version": "0.56.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",
@@ -74,7 +74,7 @@
   "scripts": {
     "build": "node scripts/bundle-plugin.mjs && tsup",
     "dev": "tsup --watch",
-    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/reapply.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts && bun test src/ledger.test.ts && bun test src/wrapper/wrapper.test.ts && bun test src/wrapper/messageQueue.test.ts && bun test src/wrapper/approver.test.ts && bun test src/wrapper/remoteLoop.test.ts && bun test src/wrapper/spawnClaude.test.ts && bun test src/wrapper/wsProtocol.test.ts && bun test src/wrapper/relayClient.test.ts && bun test src/wrapper/modeLoop.test.ts && bun test src/wrapper/stdinHandoff.test.ts && bun test src/wrapper/localLeg.test.ts && bun test src/crypto.test.ts && bun test src/crypto-vector.test.ts && bun test src/transcript-capture.test.ts && bun test src/transcript-sync.test.ts && bun test src/spawn-daemon.test.ts && bun test src/decision-episode.test.ts"
+    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/reapply.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts && bun test src/ledger.test.ts && bun test src/wrapper/wrapper.test.ts && bun test src/wrapper/messageQueue.test.ts && bun test src/wrapper/approver.test.ts && bun test src/wrapper/remoteLoop.test.ts && bun test src/wrapper/spawnClaude.test.ts && bun test src/wrapper/wsProtocol.test.ts && bun test src/wrapper/relayClient.test.ts && bun test src/wrapper/modeLoop.test.ts && bun test src/wrapper/stdinHandoff.test.ts && bun test src/wrapper/localLeg.test.ts && bun test src/crypto.test.ts && bun test src/crypto-vector.test.ts && bun test src/transcript-capture.test.ts && bun test src/transcript-sync.test.ts && bun test src/spawn-daemon.test.ts && bun test src/decision-episode.test.ts && bun test src/repo.test.ts"
   },
   "dependencies": {
     "@inquirer/prompts": "^8.4.2",