@pushary/agent-hooks 0.55.0 → 0.56.0

package/dist/bin/pushary-claude.js

@@ -13,17 +13,18 @@ import {
   describeToolCall,
   fetchModeState,
   getPolicy,
+  repoKeyFor,
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-H6RGO7DN.js";
+} from "../chunk-3EOK3M44.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
 import {
   redactSecrets
-} from "../chunk-P5VOLS3Q.js";
+} from "../chunk-SYAAGYLZ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -528,8 +529,8 @@ var createRemoteApprover = (deps) => {
       const sessionId = deps.getSessionId?.();
       const modeState = await fetchModeState2(deps.apiKey, sessionId);
       if (modeState.kill) return deny("Stopped by user \u2014 this agent was halted from Pushary");
-      const policyConfig = await getPolicy2(deps.apiKey, modeState.policyVersion, "claude_code");
-      const policy = resolvePolicy2(policyConfig, toolName, modeState.mode, input, deps.cwd);
+      const policyConfig = await getPolicy2(deps.apiKey, modeState.policyVersion, "claude_code", true);
+      const policy = resolvePolicy2(policyConfig, toolName, modeState.mode, input, deps.cwd, repoKeyFor(deps.cwd));
       if (policy.timeoutSeconds === 0 && policy.timeoutAction === "approve") return allow(input);
       if (policy.timeoutSeconds === 0 && policy.timeoutAction === "deny") {
         return deny(`Denied by policy for ${policy.tool}`);

package/dist/bin/pushary-clean.js

@@ -6,15 +6,15 @@ import {
   removeCodexHooks,
   removeGeminiSettings,
   removeInstructionBlock
-} from "../chunk-2VW2FEYC.js";
+} from "../chunk-GSERIC6Q.js";
 import {
   execNpm
 } from "../chunk-J7JWI3KU.js";
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-PSZAXNUB.js";
-import "../chunk-P5VOLS3Q.js";
+} from "../chunk-QYQO6RHJ.js";
+import "../chunk-SYAAGYLZ.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, writeFileSync, rmSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -31,21 +31,21 @@ import {
   toCodexWire,
   toPolicyLookup,
   waitForAnswer
-} from "../chunk-H6RGO7DN.js";
+} from "../chunk-3EOK3M44.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-UXIAIMSS.js";
+} from "../chunk-5TECIV6T.js";
 import "../chunk-DWED7BS3.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-P5VOLS3Q.js";
+} from "../chunk-SYAAGYLZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-codex.js

@@ -3,12 +3,12 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-H6RGO7DN.js";
+} from "../chunk-3EOK3M44.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-P5VOLS3Q.js";
+import "../chunk-SYAAGYLZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-doctor.js

@@ -11,18 +11,18 @@ import {
   missingGeminiHookEvents,
   readCodexMcpAuth,
   untrustedCodexHookEvents
-} from "../chunk-2VW2FEYC.js";
+} from "../chunk-GSERIC6Q.js";
 import {
   execNpm
 } from "../chunk-J7JWI3KU.js";
 import {
   readLedgerSummary
-} from "../chunk-UXIAIMSS.js";
+} from "../chunk-5TECIV6T.js";
 import {
   callMcpTool,
   sendMcpRequest
 } from "../chunk-DWED7BS3.js";
-import "../chunk-P5VOLS3Q.js";
+import "../chunk-SYAAGYLZ.js";
 import {
   getBaseUrl
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-gemini-hook.js

@@ -23,21 +23,21 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-H6RGO7DN.js";
+} from "../chunk-3EOK3M44.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-UXIAIMSS.js";
+} from "../chunk-5TECIV6T.js";
 import "../chunk-DWED7BS3.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-P5VOLS3Q.js";
+} from "../chunk-SYAAGYLZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-XKXF2G7T.js";
-import "../chunk-PSZAXNUB.js";
+} from "../chunk-GQPIOJA3.js";
+import "../chunk-QYQO6RHJ.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-H6RGO7DN.js";
+import "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-UXIAIMSS.js";
+import "../chunk-5TECIV6T.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-P5VOLS3Q.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-hook.ts

package/dist/bin/pushary-notification-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-H6RGO7DN.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-P5VOLS3Q.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-notification-hook.ts

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-XKXF2G7T.js";
-import "../chunk-PSZAXNUB.js";
+} from "../chunk-GQPIOJA3.js";
+import "../chunk-QYQO6RHJ.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-H6RGO7DN.js";
+import "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-UXIAIMSS.js";
+import "../chunk-5TECIV6T.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-P5VOLS3Q.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-permission-denied-hook.ts

package/dist/bin/pushary-permission-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-XKXF2G7T.js";
-import "../chunk-PSZAXNUB.js";
+} from "../chunk-GQPIOJA3.js";
+import "../chunk-QYQO6RHJ.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-H6RGO7DN.js";
+import "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-UXIAIMSS.js";
+import "../chunk-5TECIV6T.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-P5VOLS3Q.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-permission-hook.ts

package/dist/bin/pushary-post-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-H6RGO7DN.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-P5VOLS3Q.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-post-hook.ts

package/dist/bin/pushary-prompt-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-H6RGO7DN.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-P5VOLS3Q.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-prompt-hook.ts

package/dist/bin/pushary-session-end-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-H6RGO7DN.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-P5VOLS3Q.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-session-end-hook.ts

package/dist/bin/pushary-session-start-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-H6RGO7DN.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-P5VOLS3Q.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-session-start-hook.ts

package/dist/bin/pushary-setup.js

@@ -13,7 +13,7 @@ import {
   renderAgentInstructions,
   renderProjectAgentInstructions,
   writeInstructionBlock
-} from "../chunk-2VW2FEYC.js";
+} from "../chunk-GSERIC6Q.js";
 import {
   execNpm,
   npmErrorMessage,
@@ -25,15 +25,15 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-PSZAXNUB.js";
+} from "../chunk-QYQO6RHJ.js";
 import {
   reportEvent
-} from "../chunk-H6RGO7DN.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
 import {
   isValidApiKey
-} from "../chunk-P5VOLS3Q.js";
+} from "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-setup.ts

package/dist/bin/pushary-stats.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   readLedgerSummary
-} from "../chunk-UXIAIMSS.js";
-import "../chunk-P5VOLS3Q.js";
+} from "../chunk-5TECIV6T.js";
+import "../chunk-SYAAGYLZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-stop-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-H6RGO7DN.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-P5VOLS3Q.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stop-hook.ts

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-H6RGO7DN.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-P5VOLS3Q.js";
+import "../chunk-SYAAGYLZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stopfailure-hook.ts

package/dist/bin/pushary-upgrade.js

@@ -8,8 +8,8 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-PSZAXNUB.js";
-import "../chunk-P5VOLS3Q.js";
+} from "../chunk-QYQO6RHJ.js";
+import "../chunk-SYAAGYLZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/{chunk-H6RGO7DN.js → chunk-3EOK3M44.js}

@@ -10,13 +10,16 @@ import {
   DECISION_LINE_MAX,
   classifyDecisionRisk,
   isApprovalMode,
+  isRepoKeyMatch,
   isSafeReadOnlyCommand,
+  localRepoKey,
   matchRankWeight,
   matchToolPatternAny,
+  normalizeRepoRemote,
   policyArgForms,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-P5VOLS3Q.js";
+} from "./chunk-SYAAGYLZ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -47,14 +50,19 @@ var isWaitForAnswerResponse = (data) => {
 
 // src/policy.ts
 var CACHE_TTL_MS = 60 * 1e3;
-var cacheFile = (apiKey, agent) => {
-  const hash = createHash("sha256").update(agent ? `${apiKey}:${agent}` : apiKey).digest("hex").slice(0, 12);
+var policyCacheFile = (apiKey, agent, repoAware = false) => {
+  const parts = [apiKey, agent, repoAware ? "repoAware" : void 0].filter(Boolean);
+  const hash = createHash("sha256").update(parts.join(":")).digest("hex").slice(0, 12);
   return join(tmpdir(), `pushary-policy-${hash}.json`);
 };
-var fetchPolicy = async (apiKey, agent) => {
+var fetchPolicy = async (apiKey, agent, repoAware = false) => {
   return withRetry(async () => {
     const baseUrl = getBaseUrl();
-    const url = agent ? `${baseUrl}/api/mcp/policy?agent=${encodeURIComponent(agent)}` : `${baseUrl}/api/mcp/policy`;
+    const params = new URLSearchParams();
+    if (agent) params.set("agent", agent);
+    if (repoAware) params.set("repoAware", "1");
+    const query = params.toString();
+    const url = query ? `${baseUrl}/api/mcp/policy?${query}` : `${baseUrl}/api/mcp/policy`;
     const response = await fetch(url, {
       headers: { "Authorization": `Bearer ${apiKey}` },
       signal: AbortSignal.timeout(1e4)
@@ -67,8 +75,8 @@ var fetchPolicy = async (apiKey, agent) => {
     return raw;
   }, { maxAttempts: 2 });
 };
-var getPolicy = async (apiKey, expectedVersion, agent) => {
-  const path = cacheFile(apiKey, agent);
+var getPolicy = async (apiKey, expectedVersion, agent, repoAware = false) => {
+  const path = policyCacheFile(apiKey, agent, repoAware);
   let staleCache = null;
   if (existsSync(path)) {
     try {
@@ -85,7 +93,7 @@ var getPolicy = async (apiKey, expectedVersion, agent) => {
     }
   }
   try {
-    const policy = await fetchPolicy(apiKey, agent);
+    const policy = await fetchPolicy(apiKey, agent, repoAware);
     try {
       writeFileSync(path, JSON.stringify({ ...policy, _cachedAt: Date.now(), _policyVersion: expectedVersion ?? null }), "utf-8");
     } catch {
@@ -96,18 +104,23 @@ var getPolicy = async (apiKey, expectedVersion, agent) => {
     throw new Error("Failed to fetch policy and no cached policy available");
   }
 };
-var findBestMatch = (policies, toolName, args) => {
+var findBestMatch = (policies, toolName, args, repoKey) => {
   let best;
   let bestWeight = 0;
+  let bestScoped = -1;
   let bestLength = -1;
   for (const candidate of policies) {
+    if (!isRepoKeyMatch(candidate.repoKey, repoKey)) continue;
     const rank = matchToolPatternAny(candidate.tool, toolName, args);
     if (rank === "none") continue;
     const weight = matchRankWeight(rank);
+    const scoped = candidate.repoKey ? 1 : 0;
     const length = rank === "prefix" ? candidate.tool.length : -1;
-    if (weight > bestWeight || weight === bestWeight && length > bestLength) {
+    const better = weight > bestWeight || weight === bestWeight && scoped > bestScoped || weight === bestWeight && scoped === bestScoped && length > bestLength;
+    if (better) {
       best = { policy: candidate, rank };
       bestWeight = weight;
+      bestScoped = scoped;
       bestLength = length;
     }
   }
@@ -120,20 +133,20 @@ var autoApprove = (tool) => ({
   mode: "terminal_only",
   pushFirstSeconds: 0
 });
-var resolveAutoResolveOrigin = (config, toolName, toolInput, cwd) => {
+var resolveAutoResolveOrigin = (config, toolName, toolInput, cwd, repoKey) => {
   const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
   const arg = args[0];
-  const match = findBestMatch(config.policies, toolName, args);
+  const match = findBestMatch(config.policies, toolName, args, repoKey);
   const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
   if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
     return "safe_readonly";
   }
   return "policy_timeout";
 };
-var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd) => {
+var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey) => {
   const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
   const arg = args[0];
-  const match = findBestMatch(config.policies, toolName, args);
+  const match = findBestMatch(config.policies, toolName, args, repoKey);
   let base = match?.policy ?? config.policies.find((p) => p.tool === "*") ?? {
     tool: toolName,
     timeoutSeconds: config.defaultTimeoutSeconds,
@@ -641,17 +654,101 @@ var permissionTimeoutDecision = (timeoutAction) => {
 };
 var preToolUseTimeoutDecision = (timeoutAction, denyReason = "No response within timeout") => timeoutAction === "deny" ? codexDeny(denyReason) : codexPass();
 
+// src/repo.ts
+import { existsSync as existsSync3, readFileSync as readFileSync3, statSync as statSync3 } from "fs";
+import { basename, dirname, isAbsolute as isAbsolute2, join as join4, resolve as resolve2 } from "path";
+var MAX_PARENT_WALK = 64;
+var GIT_FILE_PREFIX = "gitdir:";
+var findGitDir = (startDir) => {
+  let current = resolve2(startDir);
+  for (let depth = 0; depth < MAX_PARENT_WALK; depth += 1) {
+    const candidate = join4(current, ".git");
+    try {
+      if (existsSync3(candidate)) {
+        if (statSync3(candidate).isDirectory()) return candidate;
+        const pointer = readFileSync3(candidate, "utf-8").trim();
+        if (pointer.startsWith(GIT_FILE_PREFIX)) {
+          const target = pointer.slice(GIT_FILE_PREFIX.length).trim();
+          return isAbsolute2(target) ? target : resolve2(current, target);
+        }
+      }
+    } catch {
+    }
+    const parent = dirname(current);
+    if (parent === current) return void 0;
+    current = parent;
+  }
+  return void 0;
+};
+var configPathFor = (gitDir) => {
+  const index = gitDir.replace(/\\/g, "/").indexOf("/worktrees/");
+  return index === -1 ? join4(gitDir, "config") : join4(gitDir.slice(0, index), "config");
+};
+var ORIGIN_SECTION = /^\[remote "origin"\]/;
+var SECTION_HEADER = /^\[/;
+var URL_LINE = /^url\s*=\s*(.+)$/;
+var readOriginRemote = (gitDir) => {
+  try {
+    const configPath = configPathFor(gitDir);
+    if (!existsSync3(configPath)) return void 0;
+    let inOrigin = false;
+    for (const rawLine of readFileSync3(configPath, "utf-8").split("\n")) {
+      const line = rawLine.trim();
+      if (SECTION_HEADER.test(line)) {
+        inOrigin = ORIGIN_SECTION.test(line);
+        continue;
+      }
+      if (!inOrigin) continue;
+      const url = URL_LINE.exec(line);
+      if (url) return url[1]?.trim();
+    }
+  } catch {
+  }
+  return void 0;
+};
+var deriveRepoKey = (cwd) => {
+  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
+  try {
+    const gitDir = findGitDir(dir);
+    if (gitDir) {
+      const remote = readOriginRemote(gitDir);
+      const normalized = remote ? normalizeRepoRemote(remote) : void 0;
+      if (normalized) return normalized;
+      const root = gitDir.endsWith(".git") ? dirname(gitDir) : dir;
+      return localRepoKey(basename(root));
+    }
+    return localRepoKey(basename(resolve2(dir)));
+  } catch {
+    return void 0;
+  }
+};
+var repoKeyCache = /* @__PURE__ */ new Map();
+var REPO_KEY_ENV = "PUSHARY_REPO_KEY";
+var repoKeyFor = (cwd) => {
+  const override = process.env[REPO_KEY_ENV];
+  if (typeof override === "string") {
+    const trimmed = override.trim();
+    if (trimmed.toLowerCase() === "off") return void 0;
+    if (trimmed.length > 0) return trimmed.toLowerCase();
+  }
+  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
+  if (repoKeyCache.has(dir)) return repoKeyCache.get(dir);
+  const derived = deriveRepoKey(dir);
+  repoKeyCache.set(dir, derived);
+  return derived;
+};
+
 // src/throttle.ts
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 import { tmpdir as tmpdir4 } from "os";
 import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, statSync as statSync3, writeFileSync as writeFileSync4 } from "fs";
-var THROTTLE_DIR = join4(tmpdir4(), "pushary-throttle");
-var markerPath = (key) => join4(THROTTLE_DIR, createHash2("sha256").update(key).digest("hex").slice(0, 16));
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "fs";
+var THROTTLE_DIR = join5(tmpdir4(), "pushary-throttle");
+var markerPath = (key) => join5(THROTTLE_DIR, createHash2("sha256").update(key).digest("hex").slice(0, 16));
 var throttlePass = (key, windowMs) => {
   try {
     const path = markerPath(key);
-    if (existsSync3(path) && Date.now() - statSync3(path).mtimeMs < windowMs) return false;
+    if (existsSync4(path) && Date.now() - statSync4(path).mtimeMs < windowMs) return false;
     mkdirSync3(THROTTLE_DIR, { recursive: true });
     writeFileSync4(path, "", "utf-8");
     return true;
@@ -661,15 +758,14 @@ var throttlePass = (key, windowMs) => {
 };
 
 // src/events.ts
-import { basename, join as join5 } from "path";
-import { createHash as createHash3 } from "crypto";
-import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync3, statSync as statSync4, writeFileSync as writeFileSync5 } from "fs";
+import { basename as basename2, join as join6 } from "path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync4, statSync as statSync5, writeFileSync as writeFileSync5 } from "fs";
 import { tmpdir as tmpdir5 } from "os";
-var INTENT_DIR = join5(tmpdir5(), "pushary-intent");
+var INTENT_DIR = join6(tmpdir5(), "pushary-intent");
 var INTENT_MAX_BYTES = 2048;
 var INTENT_GRACE_MS = 10 * 60 * 1e3;
 var sanitizeSession = (sessionId) => sessionId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || DEFAULT_SESSION;
-var intentFile = (sessionId) => join5(INTENT_DIR, sanitizeSession(sessionId));
+var intentFile = (sessionId) => join6(INTENT_DIR, sanitizeSession(sessionId));
 var saveLastPrompt = (sessionId, prompt) => {
   try {
     const trimmed = prompt.replace(/\s+/g, " ").trim().slice(0, INTENT_MAX_BYTES);
@@ -682,8 +778,8 @@ var saveLastPrompt = (sessionId, prompt) => {
 var readLastPrompt = (sessionId) => {
   try {
     const path = intentFile(sessionId);
-    if (isDefaultSession(sessionId) && statSync4(path).mtimeMs < Date.now() - INTENT_GRACE_MS) return void 0;
-    const value = readFileSync3(path, "utf-8").trim();
+    if (isDefaultSession(sessionId) && statSync5(path).mtimeMs < Date.now() - INTENT_GRACE_MS) return void 0;
+    const value = readFileSync4(path, "utf-8").trim();
     return value.length > 0 ? value : void 0;
   } catch {
     return void 0;
@@ -739,10 +835,9 @@ var notifyLateAnswers = async (apiKey, late, agentName, sessionId) => {
 var CLAUDE_CODE_AGENT = { type: "claude_code", label: "Claude Code" };
 var POLICY_CACHE_TTL_MS = 5 * 60 * 1e3;
 var readFreshCachedPolicy = (apiKey) => {
-  const hash = createHash3("sha256").update(apiKey).digest("hex").slice(0, 12);
-  const path = join5(tmpdir5(), `pushary-policy-${hash}.json`);
-  if (!existsSync4(path)) return null;
-  const cached = JSON.parse(readFileSync3(path, "utf-8"));
+  const path = policyCacheFile(apiKey);
+  if (!existsSync5(path)) return null;
+  const cached = JSON.parse(readFileSync4(path, "utf-8"));
   if (!isPolicyConfig(cached)) return null;
   if (!cached._cachedAt || Date.now() - cached._cachedAt >= POLICY_CACHE_TTL_MS) return null;
   return cached;
@@ -752,7 +847,7 @@ var deriveDecisionSource = (toolName, toolInput, liveMode, cwd) => {
     if (liveMode.kill) return "terminal";
     const policy = readFreshCachedPolicy(getApiKey());
     if (!policy) return void 0;
-    const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput, cwd);
+    const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput, cwd, repoKeyFor(cwd));
     if (resolved.timeoutSeconds === 0 && resolved.timeoutAction === "approve") return "policy_auto";
     if (resolved.mode === "push_only" || resolved.mode === "push_first") return "human";
     return "terminal";
@@ -765,10 +860,10 @@ var deriveAutoDecisionBeacon = (toolName, toolInput, liveMode, cwd) => {
     if (liveMode.kill) return void 0;
     const policy = readFreshCachedPolicy(getApiKey());
     if (!policy) return void 0;
-    const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput, cwd);
+    const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput, cwd, repoKeyFor(cwd));
     if (resolved.timeoutSeconds !== 0 || resolved.timeoutAction !== "approve") return void 0;
     return {
-      decisionOrigin: resolveAutoResolveOrigin(policy, toolName, toolInput, cwd),
+      decisionOrigin: resolveAutoResolveOrigin(policy, toolName, toolInput, cwd, repoKeyFor(cwd)),
       toolName,
       toolTarget: deriveToolTarget(toolName, toolInput)
     };
@@ -809,6 +904,7 @@ var reportEvent = async (event, options = {}) => {
       body: JSON.stringify({
         ...event,
         machineId: event.machineId ?? getMachineId(),
+        repoKey: event.repoKey ?? repoKeyFor(),
         installMode: detectInstallMode(),
         // Link-back for a phone-spawned session: forward the spawn id the daemon
         // set in the environment so the server can map spawnId -> sessionId.
@@ -833,7 +929,7 @@ var reportEvent = async (event, options = {}) => {
 var NON_GATED_MIRROR_TOOLS = /* @__PURE__ */ new Set(["TodoWrite"]);
 var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const action = describeToolCall(input.tool_name, input.tool_input, "event");
     const lookup = toPolicyLookup(input.tool_name, input.tool_input);
     const toolResult = input.tool_response ?? input.tool_result;
@@ -888,7 +984,7 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
 var TASK_TITLE_MAX_LENGTH = 120;
 var handleUserPrompt = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const titlesEnabled = process.env.PUSHARY_TASK_TITLES !== "off";
     const taskTitle = titlesEnabled ? input.prompt?.replace(/\s+/g, " ").trim().slice(0, TASK_TITLE_MAX_LENGTH) || void 0 : void 0;
@@ -933,7 +1029,7 @@ var summarizeStop = (input) => {
 };
 var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const late = await reconcilePendingQuestions(sessionKey);
     const tasks = [
@@ -969,7 +1065,7 @@ var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
 };
 var handleSessionStart = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const action = input.source === "resume" ? "Session resumed" : "Session started";
     await reportEvent({
       event: "session_start",
@@ -991,7 +1087,7 @@ var SESSION_END_ACTIONS = {
 };
 var handleSessionEnd = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const action = typeof input.reason === "string" && SESSION_END_ACTIONS[input.reason] || "Session ended";
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const late = await reconcilePendingQuestions(sessionKey);
@@ -1015,7 +1111,7 @@ var NOTIFICATION_PUSH_TYPES = /* @__PURE__ */ new Set(["idle_prompt", "agent_nee
 var NOTIFICATION_THROTTLE_MS = 60 * 1e3;
 var handleNotification = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const notifType = input.notification_type ?? input.type ?? "";
     const sessionKey = input.session_id || DEFAULT_SESSION;
     if (NOTIFICATION_PUSH_TYPES.has(notifType)) {
@@ -1085,7 +1181,7 @@ var handleStopFailure = async (input, agent = CLAUDE_CODE_AGENT) => {
     } catch {
       return;
     }
-    const projectName = basename(input.cwd ?? process.cwd());
+    const projectName = basename2(input.cwd ?? process.cwd());
     const mode = await fetchModeState(apiKey, input.session_id).catch(() => null);
     if (mode?.kill || mode?.mode === "terminal_only") return;
     const reason = describeStopFailure(input.error);
@@ -1117,6 +1213,7 @@ export {
   deriveBlocker,
   DEFAULT_SESSION,
   savePendingQuestion,
+  repoKeyFor,
   throttlePass,
   readLastUserPrompt,
   CODEX_AGENT,

package/dist/{chunk-UXIAIMSS.js → chunk-5TECIV6T.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-P5VOLS3Q.js";
+} from "./chunk-SYAAGYLZ.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-XKXF2G7T.js → chunk-GQPIOJA3.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS
-} from "./chunk-PSZAXNUB.js";
+} from "./chunk-QYQO6RHJ.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -18,25 +18,26 @@ import {
   getPolicy,
   readLastPrompt,
   readLastUserPrompt,
+  repoKeyFor,
   resolvePolicy,
   savePendingQuestion,
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-H6RGO7DN.js";
+} from "./chunk-3EOK3M44.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-UXIAIMSS.js";
+} from "./chunk-5TECIV6T.js";
 import {
   buildDecisionEpisodeFeatures,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "./chunk-P5VOLS3Q.js";
+} from "./chunk-SYAAGYLZ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -385,7 +386,7 @@ var handlePreToolUse = async (input) => {
   }
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
-    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code");
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code", true);
     if (modeState.kill) {
       return deny("Stopped by user, this agent was halted from Pushary");
     }
@@ -395,7 +396,7 @@ var handlePreToolUse = async (input) => {
     if (shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
       return void 0;
     }
-    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input, input.cwd);
+    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input, input.cwd, repoKeyFor(input.cwd));
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") {
       return allow();
     }
@@ -440,9 +441,9 @@ var handlePermissionRequest = async (input) => {
   }
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
-    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code");
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code", true);
     if (modeState.kill) return permReqDeny("Stopped by user \u2014 this agent was halted from Pushary");
-    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input, input.cwd);
+    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input, input.cwd, repoKeyFor(input.cwd));
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return permReqAllow();
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
       return permReqDeny(`Denied by policy for ${toolPolicy.tool}`);

package/dist/{chunk-2VW2FEYC.js → chunk-GSERIC6Q.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-P5VOLS3Q.js";
+} from "./chunk-SYAAGYLZ.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";

package/dist/{chunk-PSZAXNUB.js → chunk-QYQO6RHJ.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-P5VOLS3Q.js";
+} from "./chunk-SYAAGYLZ.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-P5VOLS3Q.js → chunk-SYAAGYLZ.js}

@@ -19,6 +19,45 @@ var hookWaitDeadline = (startMs, policyWaitSeconds, agent, nowMs) => {
 };
 var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + hookMaxWaitSeconds(agent) * 1e3 < nowMs + Math.max(policyWaitSeconds, 0) * 1e3;
 var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
+var REPO_KEY_MAX_LENGTH = 200;
+var isRepoKeyMatch = (ruleRepoKey, currentRepoKey) => {
+  if (!ruleRepoKey) return true;
+  return ruleRepoKey === currentRepoKey;
+};
+var SCP_LIKE_REMOTE = /^[A-Za-z0-9._-]+@([A-Za-z0-9._-]+):(.+)$/;
+var URL_LIKE_REMOTE = /^[A-Za-z][A-Za-z0-9+.-]*:\/\/(.+)$/;
+var NUMERIC_PORT = /:\d+$/;
+var stripCredentials = (host) => {
+  const at = host.lastIndexOf("@");
+  return at === -1 ? host : host.slice(at + 1);
+};
+var normalizeRepoRemote = (remoteUrl) => {
+  const raw = remoteUrl.trim();
+  if (raw.length === 0) return void 0;
+  let hostAndPath;
+  const scp = SCP_LIKE_REMOTE.exec(raw);
+  if (scp) {
+    hostAndPath = `${scp[1]}/${scp[2]}`;
+  } else {
+    const url = URL_LIKE_REMOTE.exec(raw);
+    if (!url) return void 0;
+    if (/^file:/i.test(raw)) return void 0;
+    hostAndPath = url[1];
+  }
+  const slash = hostAndPath.indexOf("/");
+  if (slash <= 0) return void 0;
+  const host = stripCredentials(hostAndPath.slice(0, slash)).replace(NUMERIC_PORT, "");
+  const path = hostAndPath.slice(slash + 1).split("/").filter((segment) => segment.length > 0).join("/");
+  if (host.length === 0 || path.length === 0) return void 0;
+  const key = `${host}/${path}`.replace(/\.git$/i, "").toLowerCase();
+  return key.length > REPO_KEY_MAX_LENGTH ? key.slice(0, REPO_KEY_MAX_LENGTH) : key;
+};
+var localRepoKey = (directoryName) => {
+  const name = directoryName.trim().replace(/[/\\]+$/, "").toLowerCase();
+  if (name.length === 0 || name === "." || name === "..") return void 0;
+  const key = `local/${name}`;
+  return key.length > REPO_KEY_MAX_LENGTH ? key.slice(0, REPO_KEY_MAX_LENGTH) : key;
+};
 var MATCH_RANKS = ["none", "tool", "prefix", "exact"];
 var matchRankWeight = (rank) => MATCH_RANKS.indexOf(rank);
 var GLOB_MAX_WILDCARDS = 8;
@@ -692,6 +731,9 @@ export {
   hookWaitDeadline,
   hookWaitClamped,
   effectiveWaitSeconds,
+  isRepoKeyMatch,
+  normalizeRepoRemote,
+  localRepoKey,
   matchRankWeight,
   policyArgForms,
   matchToolPatternAny,

package/dist/src/index.d.ts

@@ -26,9 +26,9 @@ interface ReceiptMeta {
     ok: boolean;
 }
 
-declare const getPolicy: (apiKey: string, expectedVersion?: string | null, agent?: string) => Promise<PolicyConfig>;
+declare const getPolicy: (apiKey: string, expectedVersion?: string | null, agent?: string, repoAware?: boolean) => Promise<PolicyConfig>;
 type AutoResolveOrigin = 'safe_readonly' | 'policy_timeout';
-declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>, cwd?: string) => ToolPolicy;
+declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>, cwd?: string, repoKey?: string) => ToolPolicy;
 interface ModeState {
     readonly mode: ApprovalMode | null;
     readonly kill: boolean;
@@ -57,6 +57,7 @@ interface AgentEvent {
     agentName?: string;
     action?: string;
     machineId?: string;
+    repoKey?: string;
     sessionId?: string;
     error?: string;
     taskTitle?: string;

package/dist/src/index.js

@@ -1,7 +1,7 @@
 import {
   handlePreToolUse
-} from "../chunk-XKXF2G7T.js";
-import "../chunk-PSZAXNUB.js";
+} from "../chunk-GQPIOJA3.js";
+import "../chunk-QYQO6RHJ.js";
 import "../chunk-YHG74UFF.js";
 import {
   askUser,
@@ -15,11 +15,11 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-H6RGO7DN.js";
+} from "../chunk-3EOK3M44.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-UXIAIMSS.js";
+import "../chunk-5TECIV6T.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-P5VOLS3Q.js";
+import "../chunk-SYAAGYLZ.js";
 import {
   getApiKey,
   getBaseUrl

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.55.0",
+  "version": "0.56.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",
@@ -74,7 +74,7 @@
   "scripts": {
     "build": "node scripts/bundle-plugin.mjs && tsup",
     "dev": "tsup --watch",
-    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/reapply.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts && bun test src/ledger.test.ts && bun test src/wrapper/wrapper.test.ts && bun test src/wrapper/messageQueue.test.ts && bun test src/wrapper/approver.test.ts && bun test src/wrapper/remoteLoop.test.ts && bun test src/wrapper/spawnClaude.test.ts && bun test src/wrapper/wsProtocol.test.ts && bun test src/wrapper/relayClient.test.ts && bun test src/wrapper/modeLoop.test.ts && bun test src/wrapper/stdinHandoff.test.ts && bun test src/wrapper/localLeg.test.ts && bun test src/crypto.test.ts && bun test src/crypto-vector.test.ts && bun test src/transcript-capture.test.ts && bun test src/transcript-sync.test.ts && bun test src/spawn-daemon.test.ts && bun test src/decision-episode.test.ts"
+    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/reapply.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts && bun test src/ledger.test.ts && bun test src/wrapper/wrapper.test.ts && bun test src/wrapper/messageQueue.test.ts && bun test src/wrapper/approver.test.ts && bun test src/wrapper/remoteLoop.test.ts && bun test src/wrapper/spawnClaude.test.ts && bun test src/wrapper/wsProtocol.test.ts && bun test src/wrapper/relayClient.test.ts && bun test src/wrapper/modeLoop.test.ts && bun test src/wrapper/stdinHandoff.test.ts && bun test src/wrapper/localLeg.test.ts && bun test src/crypto.test.ts && bun test src/crypto-vector.test.ts && bun test src/transcript-capture.test.ts && bun test src/transcript-sync.test.ts && bun test src/spawn-daemon.test.ts && bun test src/decision-episode.test.ts && bun test src/repo.test.ts"
   },
   "dependencies": {
     "@inquirer/prompts": "^8.4.2",