@pushary/agent-hooks 0.68.0 → 0.69.0

package/dist/chunk-3USMXNVB.js

@@ -0,0 +1,64 @@
+import {
+  isModeStateDegraded,
+  resolveAutoResolveOrigin,
+  resolvePolicyAcross
+} from "./chunk-H46LSQRT.js";
+import {
+  evaluateScope,
+  scopeChangeReason,
+  scopeRequiresHuman
+} from "./chunk-DQAN3JQP.js";
+
+// src/answer.ts
+var denyReasonFrom = (value, note) => {
+  const trimmed = note?.trim();
+  if (trimmed) return `Denied from your phone: ${trimmed}`;
+  return value && value !== "no" && value !== "yes" ? `Denied from your phone: ${value}` : "Denied via push notification";
+};
+var isDeferAnswer = (value) => value === "defer";
+
+// src/gate.ts
+var KILL_REASON = "Stopped by user, this agent was halted from Pushary";
+var strictestScopeVerdict = (scope, paths) => {
+  if (paths.length === 0) return evaluateScope(scope, void 0);
+  let worst = { outcome: "in_scope" };
+  for (const path of paths) {
+    const verdict = evaluateScope(scope, path);
+    if (verdict.outcome === "off_limits") return verdict;
+    if (verdict.outcome === "out_of_scope") worst = verdict;
+  }
+  return worst;
+};
+var survivesDegraded = (config, toolName, toolInputs, cwd, repoKey) => toolInputs.length === 1 && resolveAutoResolveOrigin(config, toolName, toolInputs[0], cwd, repoKey) === "safe_readonly";
+var resolveGate = (input) => {
+  const { modeState, config, toolName, toolInputs, cwd, repoKey } = input;
+  if (modeState.kill) return { kind: "kill", reason: KILL_REASON };
+  const policy = resolvePolicyAcross(config, toolName, modeState.mode, toolInputs, cwd, repoKey);
+  const autoApproves = policy.timeoutSeconds === 0 && policy.timeoutAction === "approve";
+  const autoDenies = policy.timeoutSeconds === 0 && policy.timeoutAction === "deny";
+  if (autoDenies) return { kind: "deny", policy, reason: `Denied by policy for ${policy.tool}` };
+  if (isModeStateDegraded(modeState)) {
+    if (autoApproves) {
+      return survivesDegraded(config, toolName, toolInputs, cwd, repoKey) ? { kind: "allow", policy } : { kind: "defer", policy };
+    }
+    return { kind: "gate", policy };
+  }
+  const scopeVerdict = modeState.scope ? strictestScopeVerdict(modeState.scope, input.scopePaths ?? []) : { outcome: "no_contract" };
+  if (autoApproves) {
+    if (!scopeRequiresHuman(scopeVerdict)) return { kind: "allow", policy };
+  }
+  const scopeReason = scopeChangeReason(scopeVerdict);
+  return {
+    kind: "gate",
+    policy,
+    scopeReason,
+    scopePath: scopeReason && "path" in scopeVerdict ? scopeVerdict.path : void 0
+  };
+};
+
+export {
+  denyReasonFrom,
+  isDeferAnswer,
+  KILL_REASON,
+  resolveGate
+};

package/dist/{chunk-SONXGCZY.js → chunk-C5I2RAMT.js}

@@ -3,8 +3,9 @@ import {
 } from "./chunk-CAJZAFVS.js";
 import {
   denyReasonFrom,
-  isDeferAnswer
-} from "./chunk-YHG74UFF.js";
+  isDeferAnswer,
+  resolveGate
+} from "./chunk-3USMXNVB.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -19,13 +20,12 @@ import {
   readLastPrompt,
   readLastUserPrompt,
   repoKeyFor,
-  resolvePolicy,
   savePendingQuestion,
   scopePathFor,
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-XOUYM27W.js";
+} from "./chunk-H46LSQRT.js";
 import {
   isGatingMoment,
   recordKeylessMoment
@@ -33,11 +33,8 @@ import {
 import {
   buildDecisionEpisodeFeatures,
   effectiveWaitSeconds,
-  evaluateScope,
   hookWaitClamped,
-  hookWaitDeadline,
-  scopeChangeReason,
-  scopeRequiresHuman
+  hookWaitDeadline
 } from "./chunk-DQAN3JQP.js";
 import {
   getMachineId
@@ -383,6 +380,18 @@ var handleKeyless = (input) => {
   }
   return void 0;
 };
+var claudeGateInput = (modeState, config, input) => {
+  const scopePath = modeState.scope ? scopePathFor(input.tool_name, input.tool_input, input.cwd) : void 0;
+  return {
+    modeState,
+    config,
+    toolName: input.tool_name,
+    toolInputs: [input.tool_input ?? {}],
+    scopePaths: scopePath ? [scopePath] : [],
+    cwd: input.cwd,
+    repoKey: repoKeyFor(input.cwd)
+  };
+};
 var handlePreToolUse = async (input) => {
   if (input.tool_name.startsWith("mcp__pushary__")) return void 0;
   let apiKey;
@@ -394,26 +403,26 @@ var handlePreToolUse = async (input) => {
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
     const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code", true);
-    if (modeState.kill) {
-      return deny("Stopped by user, this agent was halted from Pushary");
-    }
+    const verdict = resolveGate(claudeGateInput(modeState, policy, input));
+    if (verdict.kind === "kill") return deny(verdict.reason);
     if (input.tool_name === "AskUserQuestion") {
       return handleAskUserQuestion(apiKey, input);
     }
     if (shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
       return void 0;
     }
-    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input, input.cwd, repoKeyFor(input.cwd));
-    const scopePath = modeState.scope ? scopePathFor(input.tool_name, input.tool_input, input.cwd) : void 0;
-    const scopeVerdict = evaluateScope(modeState.scope, scopePath);
-    const scopeReason = scopeChangeReason(scopeVerdict);
-    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") {
-      if (!scopeRequiresHuman(scopeVerdict)) return allow();
-    }
-    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
-      return deny(`Denied by policy for ${toolPolicy.tool}`);
+    switch (verdict.kind) {
+      case "allow":
+        return allow();
+      case "deny":
+        return deny(verdict.reason);
+      // State we could not establish, with an auto-approve on the table. No
+      // opinion, so Claude Code's own flow runs as if the hook were absent.
+      case "defer":
+        return void 0;
+      default:
+        return dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath);
     }
-    return dispatchModeHandler(apiKey, input, toolPolicy, getMachineId(), modeState.trainingConsent, scopeReason, scopePath);
   } catch {
     return void 0;
   }
@@ -452,13 +461,22 @@ var handlePermissionRequest = async (input) => {
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
     const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code", true);
-    if (modeState.kill) return permReqDeny("Stopped by user \u2014 this agent was halted from Pushary");
-    const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input, input.cwd, repoKeyFor(input.cwd));
-    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return permReqAllow();
-    if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
-      return permReqDeny(`Denied by policy for ${toolPolicy.tool}`);
+    const verdict = resolveGate(claudeGateInput(modeState, policy, input));
+    switch (verdict.kind) {
+      case "kill":
+        return permReqDeny(verdict.reason);
+      case "allow":
+        return permReqAllow();
+      case "deny":
+        return permReqDeny(verdict.reason);
+      // No opinion, so Claude Code's own dialog shows.
+      case "defer":
+        return void 0;
+      default:
+        return toPermissionRequestOutput(
+          await dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath)
+        );
     }
-    return toPermissionRequestOutput(await dispatchModeHandler(apiKey, input, toolPolicy, getMachineId(), modeState.trainingConsent));
   } catch {
     return void 0;
   }

package/dist/{chunk-XOUYM27W.js → chunk-H46LSQRT.js}

@@ -54,6 +54,7 @@ var isWaitForAnswerResponse = (data) => {
 
 // src/policy.ts
 var CACHE_TTL_MS = 60 * 1e3;
+var STALE_CACHE_MAX_MS = 12 * 60 * 60 * 1e3;
 var policyCacheFile = (apiKey, agent, repoAware = false) => {
   const parts = [apiKey, agent, repoAware ? "repoAware" : void 0].filter(Boolean);
   const hash = createHash("sha256").update(parts.join(":")).digest("hex").slice(0, 12);
@@ -88,18 +89,19 @@ var getPolicy = async (apiKey, expectedVersion, agent, repoAware = false) => {
       const cached = JSON.parse(stat);
       if (!isPolicyConfig(cached)) throw new Error("Corrupted cache");
       const versionStale = expectedVersion != null && (cached._policyVersion ?? null) !== expectedVersion;
-      const ttlFresh = !cached._cachedAt || Date.now() - cached._cachedAt < CACHE_TTL_MS;
+      const age = cached._cachedAt ? Date.now() - cached._cachedAt : 0;
+      const ttlFresh = !cached._cachedAt || age < CACHE_TTL_MS;
       if (ttlFresh && !versionStale) {
         return cached;
       }
-      staleCache = cached;
+      if (age < STALE_CACHE_MAX_MS) staleCache = cached;
     } catch {
     }
   }
   try {
     const policy = await fetchPolicy(apiKey, agent, repoAware);
     try {
-      writeFileSync(path, JSON.stringify({ ...policy, _cachedAt: Date.now(), _policyVersion: expectedVersion ?? null }), "utf-8");
+      writeFileSync(path, JSON.stringify({ ...policy, _cachedAt: Date.now(), _policyVersion: expectedVersion ?? null }), { encoding: "utf-8", mode: 384 });
     } catch {
     }
     return policy;
@@ -178,6 +180,57 @@ var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey) =>
   }
   return base;
 };
+var restraintRank = (policy) => {
+  if (policy.timeoutSeconds === 0 && policy.timeoutAction === "deny") return 4;
+  if (policy.timeoutSeconds === 0 && policy.timeoutAction === "approve") return 0;
+  if (policy.mode === "push_only") return 3;
+  return policy.mode === "terminal_only" || policy.mode === "notify_only" ? 1 : 2;
+};
+var strictestPolicy = (a, b) => restraintRank(b) > restraintRank(a) ? b : a;
+var resolvePolicyAcross = (config, toolName, modeOverride, toolInputs, cwd, repoKey) => {
+  if (toolInputs.length === 0) return resolvePolicy(config, toolName, modeOverride, void 0, cwd, repoKey);
+  return toolInputs.map((input) => resolvePolicy(config, toolName, modeOverride, input, cwd, repoKey)).reduce(strictestPolicy);
+};
+var isModeStateDegraded = (state) => state?.degraded === true;
+var MODE_GRACE_MS = 60 * 1e3;
+var modeStateCacheFile = (apiKey) => {
+  const hash = createHash("sha256").update(`mode:${apiKey}`).digest("hex").slice(0, 12);
+  return join(tmpdir(), `pushary-mode-${hash}.json`);
+};
+var readLastGoodMode = (apiKey) => {
+  try {
+    const path = modeStateCacheFile(apiKey);
+    if (!existsSync(path)) return null;
+    const parsed = JSON.parse(readFileSync(path, "utf-8"));
+    if (!parsed || typeof parsed.at !== "number" || !parsed.state) return null;
+    return parsed;
+  } catch {
+    return null;
+  }
+};
+var writeLastGoodMode = (apiKey, state) => {
+  try {
+    writeFileSync(modeStateCacheFile(apiKey), JSON.stringify({ state, at: Date.now() }), { encoding: "utf-8", mode: 384 });
+  } catch {
+  }
+};
+var unknownMode = () => ({
+  mode: null,
+  kill: false,
+  policyVersion: null,
+  relayUrl: null,
+  trainingConsent: false,
+  scope: null,
+  degraded: true
+});
+var degradedFallback = (apiKey, authoritative = false) => {
+  if (authoritative) return unknownMode();
+  const last = readLastGoodMode(apiKey);
+  if (last && Date.now() - last.at < MODE_GRACE_MS) {
+    return { ...last.state, degraded: false };
+  }
+  return unknownMode();
+};
 var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
 var fetchModeState = async (apiKey, sessionId) => {
   try {
@@ -187,10 +240,12 @@ var fetchModeState = async (apiKey, sessionId) => {
       headers: { "Authorization": `Bearer ${apiKey}` },
       signal: AbortSignal.timeout(3e3)
     });
-    if (!response.ok) return { mode: null, kill: false, policyVersion: null, relayUrl: null, trainingConsent: false, scope: null };
+    if (!response.ok) {
+      return degradedFallback(apiKey, response.status === 401 || response.status === 403);
+    }
     const data = await response.json();
     const mode = data.override?.mode;
-    return {
+    const state = {
       mode: isApprovalMode(mode) ? mode : null,
       kill: data.kill === true,
       policyVersion: toPolicyVersion(data.policyVersion),
@@ -198,10 +253,13 @@ var fetchModeState = async (apiKey, sessionId) => {
       trainingConsent: data.trainingConsent === true,
       // Validated rather than cast: a malformed contract must read as no contract,
       // never as one that silently matches nothing.
-      scope: isScopeContract(data.scope) ? data.scope : null
+      scope: isScopeContract(data.scope) ? data.scope : null,
+      degraded: false
     };
+    writeLastGoodMode(apiKey, state);
+    return state;
   } catch {
-    return { mode: null, kill: false, policyVersion: null, relayUrl: null, trainingConsent: false, scope: null };
+    return degradedFallback(apiKey);
   }
 };
 var fetchModeOverride = async (apiKey) => (await fetchModeState(apiKey)).mode;
@@ -275,7 +333,7 @@ var TOOL_TARGET_MAX_LENGTH = 80;
 var deriveCommandHead = (command) => {
   if (typeof command !== "string") return void 0;
   const head = command.trim().split(/\s+/).slice(0, 2).join(" ");
-  return head ? head.slice(0, TOOL_TARGET_MAX_LENGTH) : void 0;
+  return head ? redactSecrets(head).slice(0, TOOL_TARGET_MAX_LENGTH) : void 0;
 };
 var deriveToolTarget = (toolName, toolInput) => {
   if (toolName === "Bash" || toolName === "PowerShell" || toolName === "Monitor") {
@@ -300,7 +358,7 @@ var deriveReceiptCommandHead = (command) => {
   const [first, second] = tokens;
   const keep = first && second && SCRIPT_RUNNERS.has(first.toLowerCase()) && RUN_SUBCOMMANDS.has(second.toLowerCase()) ? 3 : 2;
   const head = tokens.slice(0, keep).join(" ");
-  return head ? head.slice(0, TOOL_TARGET_MAX_LENGTH) : void 0;
+  return head ? redactSecrets(head).slice(0, TOOL_TARGET_MAX_LENGTH) : void 0;
 };
 var RECEIPT_TARGET_MAX_LENGTH = 256;
 var EXIT_CODE_FAILURE = /^Error: Exit code \d+/;
@@ -335,7 +393,9 @@ var deriveReceiptMeta = (toolName, toolInput, toolResult, cwd) => {
       if (typeof filePath !== "string" || !filePath) return void 0;
       return {
         kind: toolName === "Write" ? "write" : "edit",
-        target: relativizeReceiptPath(filePath, cwd).slice(0, RECEIPT_TARGET_MAX_LENGTH),
+        // A path is an unlikely place for a credential but not an impossible one
+        // (a token in a temp directory name), and this field is persisted.
+        target: redactSecrets(relativizeReceiptPath(filePath, cwd)).slice(0, RECEIPT_TARGET_MAX_LENGTH),
         ok
       };
     }
@@ -441,9 +501,93 @@ var removePendingSession = (sessionId) => {
   }
 };
 
+// src/repo.ts
+import { existsSync as existsSync3, readFileSync as readFileSync2, statSync as statSync2 } from "fs";
+import { basename, dirname, isAbsolute as isAbsolute2, join as join3, resolve } from "path";
+var MAX_PARENT_WALK = 64;
+var GIT_FILE_PREFIX = "gitdir:";
+var findGitDir = (startDir) => {
+  let current = resolve(startDir);
+  for (let depth = 0; depth < MAX_PARENT_WALK; depth += 1) {
+    const candidate = join3(current, ".git");
+    try {
+      if (existsSync3(candidate)) {
+        if (statSync2(candidate).isDirectory()) return candidate;
+        const pointer = readFileSync2(candidate, "utf-8").trim();
+        if (pointer.startsWith(GIT_FILE_PREFIX)) {
+          const target = pointer.slice(GIT_FILE_PREFIX.length).trim();
+          return isAbsolute2(target) ? target : resolve(current, target);
+        }
+      }
+    } catch {
+    }
+    const parent = dirname(current);
+    if (parent === current) return void 0;
+    current = parent;
+  }
+  return void 0;
+};
+var configPathFor = (gitDir) => {
+  const index = gitDir.replace(/\\/g, "/").indexOf("/worktrees/");
+  return index === -1 ? join3(gitDir, "config") : join3(gitDir.slice(0, index), "config");
+};
+var ORIGIN_SECTION = /^\[remote "origin"\]/;
+var SECTION_HEADER = /^\[/;
+var URL_LINE = /^url\s*=\s*(.+)$/;
+var readOriginRemote = (gitDir) => {
+  try {
+    const configPath = configPathFor(gitDir);
+    if (!existsSync3(configPath)) return void 0;
+    let inOrigin = false;
+    for (const rawLine of readFileSync2(configPath, "utf-8").split("\n")) {
+      const line = rawLine.trim();
+      if (SECTION_HEADER.test(line)) {
+        inOrigin = ORIGIN_SECTION.test(line);
+        continue;
+      }
+      if (!inOrigin) continue;
+      const url = URL_LINE.exec(line);
+      if (url) return url[1]?.trim();
+    }
+  } catch {
+  }
+  return void 0;
+};
+var deriveRepoKey = (cwd) => {
+  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
+  try {
+    const gitDir = findGitDir(dir);
+    if (gitDir) {
+      const remote = readOriginRemote(gitDir);
+      const normalized = remote ? normalizeRepoRemote(remote) : void 0;
+      if (normalized) return normalized;
+      const root = gitDir.endsWith(".git") ? dirname(gitDir) : dir;
+      return localRepoKey(basename(root));
+    }
+    return localRepoKey(basename(resolve(dir)));
+  } catch {
+    return void 0;
+  }
+};
+var repoKeyCache = /* @__PURE__ */ new Map();
+var REPO_KEY_ENV = "PUSHARY_REPO_KEY";
+var repoKeyFor = (cwd) => {
+  const override = process.env[REPO_KEY_ENV];
+  if (typeof override === "string") {
+    const trimmed = override.trim();
+    if (trimmed.toLowerCase() === "off") return void 0;
+    if (trimmed.length > 0) return trimmed.toLowerCase();
+  }
+  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
+  if (repoKeyCache.has(dir)) return repoKeyCache.get(dir);
+  const derived = deriveRepoKey(dir);
+  repoKeyCache.set(dir, derived);
+  return derived;
+};
+
 // src/usage.ts
-import { closeSync, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync2, readSync, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
-import { join as join3 } from "path";
+import { closeSync, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync3, readSync, statSync as statSync3, writeFileSync as writeFileSync3 } from "fs";
+import { join as join4 } from "path";
 import { tmpdir as tmpdir3 } from "os";
 var DEFAULT_PRICES = [
   { match: "opus-4-1", in: 15, out: 75 },
@@ -479,12 +623,12 @@ var estimateCostUsd = (usage, model) => {
   const perTokenOut = price.out / 1e6;
   return usage.inputTokens * perTokenIn + usage.outputTokens * perTokenOut + usage.cacheCreationTokens * perTokenIn * CACHE_WRITE_MULTIPLIER + usage.cacheReadTokens * perTokenIn * CACHE_READ_MULTIPLIER;
 };
-var stateDir = () => process.env.PUSHARY_USAGE_DIR?.trim() || join3(tmpdir3(), "pushary-usage");
-var stateFile = (sessionId) => join3(stateDir(), sessionId.replace(/[^a-zA-Z0-9_-]/g, "_"));
+var stateDir = () => process.env.PUSHARY_USAGE_DIR?.trim() || join4(tmpdir3(), "pushary-usage");
+var stateFile = (sessionId) => join4(stateDir(), sessionId.replace(/[^a-zA-Z0-9_-]/g, "_"));
 var emptyState = () => ({ offset: 0, tokensIn: 0, tokensOut: 0, costUsd: 0, recentIds: [] });
 var readState = (path) => {
   try {
-    const parsed = JSON.parse(readFileSync2(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync3(path, "utf-8"));
     if (typeof parsed.offset === "number" && parsed.offset >= 0 && typeof parsed.tokensIn === "number" && typeof parsed.tokensOut === "number" && typeof parsed.costUsd === "number" && Array.isArray(parsed.recentIds)) {
       return {
         offset: parsed.offset,
@@ -559,7 +703,7 @@ var extractUserText = (content) => {
 };
 var readLastUserPrompt = (transcriptPath) => {
   try {
-    const size = statSync2(transcriptPath).size;
+    const size = statSync3(transcriptPath).size;
     const start = Math.max(0, size - USER_PROMPT_TAIL_BYTES);
     const lines = readRange(transcriptPath, start, size).toString("utf-8").split("\n");
     for (let i = lines.length - 1; i >= 0; i -= 1) {
@@ -582,7 +726,7 @@ var readLastUserPrompt = (transcriptPath) => {
 };
 var readNewUsage = (transcriptPath, sessionId) => {
   try {
-    const size = statSync2(transcriptPath).size;
+    const size = statSync3(transcriptPath).size;
     const path = stateFile(sessionId);
     let state = readState(path);
     if (size < state.offset) state = { ...emptyState(), recentIds: state.recentIds };
@@ -613,7 +757,7 @@ var readNewUsage = (transcriptPath, sessionId) => {
 };
 
 // src/codex-adapter.ts
-import { resolve } from "path";
+import { resolve as resolve2 } from "path";
 var CODEX_AGENT = { type: "codex", label: "Codex" };
 var codexAllow = () => ({ kind: "allow" });
 var codexDeny = (reason) => ({ kind: "deny", reason });
@@ -679,10 +823,25 @@ var toPolicyLookup = (toolName, toolInput, cwd) => {
   const command = toolInput.command;
   const files = parseApplyPatchFiles(command);
   if (files.length === 1) {
-    return { tool: "Edit", input: { file_path: cwd ? resolve(cwd, files[0]) : files[0] } };
+    return { tool: "Edit", input: { file_path: cwd ? resolve2(cwd, files[0]) : files[0] } };
   }
   return { tool: "Edit", input: typeof command === "string" ? { file_path: command } : {} };
 };
+var toPolicyLookups = (toolName, toolInput, cwd) => {
+  if (toolName !== "apply_patch") {
+    const single = toPolicyLookup(toolName, toolInput, cwd);
+    return { tool: single.tool, inputs: [single.input] };
+  }
+  const files = parseApplyPatchFiles(toolInput.command);
+  if (files.length === 0) {
+    const single = toPolicyLookup(toolName, toolInput, cwd);
+    return { tool: single.tool, inputs: [single.input] };
+  }
+  return {
+    tool: "Edit",
+    inputs: files.map((file) => ({ file_path: cwd ? resolve2(cwd, file) : file }))
+  };
+};
 var permissionTimeoutDecision = (timeoutAction) => {
   if (timeoutAction === "approve") return codexAllow();
   if (timeoutAction === "deny") return codexDeny("No response within timeout");
@@ -690,90 +849,6 @@ var permissionTimeoutDecision = (timeoutAction) => {
 };
 var preToolUseTimeoutDecision = (timeoutAction, denyReason = "No response within timeout") => timeoutAction === "deny" ? codexDeny(denyReason) : codexPass();
 
-// src/repo.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3, statSync as statSync3 } from "fs";
-import { basename, dirname, isAbsolute as isAbsolute2, join as join4, resolve as resolve2 } from "path";
-var MAX_PARENT_WALK = 64;
-var GIT_FILE_PREFIX = "gitdir:";
-var findGitDir = (startDir) => {
-  let current = resolve2(startDir);
-  for (let depth = 0; depth < MAX_PARENT_WALK; depth += 1) {
-    const candidate = join4(current, ".git");
-    try {
-      if (existsSync3(candidate)) {
-        if (statSync3(candidate).isDirectory()) return candidate;
-        const pointer = readFileSync3(candidate, "utf-8").trim();
-        if (pointer.startsWith(GIT_FILE_PREFIX)) {
-          const target = pointer.slice(GIT_FILE_PREFIX.length).trim();
-          return isAbsolute2(target) ? target : resolve2(current, target);
-        }
-      }
-    } catch {
-    }
-    const parent = dirname(current);
-    if (parent === current) return void 0;
-    current = parent;
-  }
-  return void 0;
-};
-var configPathFor = (gitDir) => {
-  const index = gitDir.replace(/\\/g, "/").indexOf("/worktrees/");
-  return index === -1 ? join4(gitDir, "config") : join4(gitDir.slice(0, index), "config");
-};
-var ORIGIN_SECTION = /^\[remote "origin"\]/;
-var SECTION_HEADER = /^\[/;
-var URL_LINE = /^url\s*=\s*(.+)$/;
-var readOriginRemote = (gitDir) => {
-  try {
-    const configPath = configPathFor(gitDir);
-    if (!existsSync3(configPath)) return void 0;
-    let inOrigin = false;
-    for (const rawLine of readFileSync3(configPath, "utf-8").split("\n")) {
-      const line = rawLine.trim();
-      if (SECTION_HEADER.test(line)) {
-        inOrigin = ORIGIN_SECTION.test(line);
-        continue;
-      }
-      if (!inOrigin) continue;
-      const url = URL_LINE.exec(line);
-      if (url) return url[1]?.trim();
-    }
-  } catch {
-  }
-  return void 0;
-};
-var deriveRepoKey = (cwd) => {
-  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
-  try {
-    const gitDir = findGitDir(dir);
-    if (gitDir) {
-      const remote = readOriginRemote(gitDir);
-      const normalized = remote ? normalizeRepoRemote(remote) : void 0;
-      if (normalized) return normalized;
-      const root = gitDir.endsWith(".git") ? dirname(gitDir) : dir;
-      return localRepoKey(basename(root));
-    }
-    return localRepoKey(basename(resolve2(dir)));
-  } catch {
-    return void 0;
-  }
-};
-var repoKeyCache = /* @__PURE__ */ new Map();
-var REPO_KEY_ENV = "PUSHARY_REPO_KEY";
-var repoKeyFor = (cwd) => {
-  const override = process.env[REPO_KEY_ENV];
-  if (typeof override === "string") {
-    const trimmed = override.trim();
-    if (trimmed.toLowerCase() === "off") return void 0;
-    if (trimmed.length > 0) return trimmed.toLowerCase();
-  }
-  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
-  if (repoKeyCache.has(dir)) return repoKeyCache.get(dir);
-  const derived = deriveRepoKey(dir);
-  repoKeyCache.set(dir, derived);
-  return derived;
-};
-
 // src/throttle.ts
 import { join as join5 } from "path";
 import { tmpdir as tmpdir4 } from "os";
@@ -1235,7 +1310,10 @@ var handleStopFailure = async (input, agent = CLAUDE_CODE_AGENT) => {
 
 export {
   getPolicy,
+  resolveAutoResolveOrigin,
   resolvePolicy,
+  resolvePolicyAcross,
+  isModeStateDegraded,
   fetchModeState,
   fetchModeOverride,
   askUser,
@@ -1260,6 +1338,7 @@ export {
   toCodexWire,
   describeApplyPatch,
   toPolicyLookup,
+  toPolicyLookups,
   permissionTimeoutDecision,
   preToolUseTimeoutDecision,
   readLastPrompt,

package/dist/{chunk-KB4ODLGB.js → chunk-I4BYZIX4.js}

@@ -320,6 +320,8 @@ export {
   isPluginRegistered,
   pluginLocationSnippet,
   vscodeSettingsTargets,
+  detectAgent,
+  agentProbes,
   detectAllAgents,
   isDetected,
   shortenHome,

package/dist/{chunk-YMFZUXL5.js → chunk-P7VBAYQO.js}

@@ -533,6 +533,7 @@ var cancelPairing = async (pairId) => {
   } catch {
   }
 };
+var PAIR_MAX_CONSECUTIVE_FAILURES = 8;
 var claimPairing = async (pairId) => {
   try {
     const res = await fetch(`${apiBase()}/api/mobile/pair/claim?id=${encodeURIComponent(pairId)}`, {
@@ -544,6 +545,17 @@ var claimPairing = async (pairId) => {
     return null;
   }
 };
+var ackPairing = async (pairId) => {
+  try {
+    await fetch(`${apiBase()}/api/mobile/pair/ack`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ pairId }),
+      signal: AbortSignal.timeout(5e3)
+    });
+  } catch {
+  }
+};
 var buildPairLinks = (pairId, publicKeyB64, baseUrl = apiBase()) => {
   const id = encodeURIComponent(pairId);
   const pk = encodeURIComponent(publicKeyB64);
@@ -593,10 +605,22 @@ var connectViaAppPairing = async (options = {}) => {
     void Promise.allSettled([Promise.resolve(flushed), cancelPairing(pairId)]).finally(() => process.exit(EXIT_ABORTED));
   };
   process.once("SIGINT", onInterrupt);
+  let consecutiveFailures = 0;
   try {
     while (Date.now() < deadline) {
       if (cancelled) return null;
       const claim = await claimPairing(pairId);
+      if (claim === null) {
+        consecutiveFailures += 1;
+        if (consecutiveFailures >= PAIR_MAX_CONSECUTIVE_FAILURES) {
+          stop(yellow("!"), "Can't reach pushary.com to finish pairing. Check your connection, then re-run setup.");
+          await cancelPairing(pairId);
+          return null;
+        }
+        await sleep(PAIR_POLL_INTERVAL_MS);
+        continue;
+      }
+      consecutiveFailures = 0;
       if (claim?.status === "authorized") {
         let apiKey;
         try {
@@ -606,6 +630,7 @@ var connectViaAppPairing = async (options = {}) => {
           await cancelPairing(pairId);
           return null;
         }
+        await ackPairing(pairId);
         stop(check, "App connected");
         return { apiKey, handle: claim.siteSlug };
       }