@pushary/agent-hooks 0.68.0 → 0.70.0

package/dist/{chunk-XOUYM27W.js → chunk-FZIQSDTQ.js}

@@ -54,6 +54,11 @@ var isWaitForAnswerResponse = (data) => {
 
 // src/policy.ts
 var CACHE_TTL_MS = 60 * 1e3;
+var STALE_CACHE_MAX_MS = 12 * 60 * 60 * 1e3;
+var policyRequestFor = (agentType) => ({
+  agent: agentType,
+  repoAware: agentType === "claude_code"
+});
 var policyCacheFile = (apiKey, agent, repoAware = false) => {
   const parts = [apiKey, agent, repoAware ? "repoAware" : void 0].filter(Boolean);
   const hash = createHash("sha256").update(parts.join(":")).digest("hex").slice(0, 12);
@@ -88,18 +93,19 @@ var getPolicy = async (apiKey, expectedVersion, agent, repoAware = false) => {
       const cached = JSON.parse(stat);
       if (!isPolicyConfig(cached)) throw new Error("Corrupted cache");
       const versionStale = expectedVersion != null && (cached._policyVersion ?? null) !== expectedVersion;
-      const ttlFresh = !cached._cachedAt || Date.now() - cached._cachedAt < CACHE_TTL_MS;
+      const age = cached._cachedAt ? Date.now() - cached._cachedAt : 0;
+      const ttlFresh = !cached._cachedAt || age < CACHE_TTL_MS;
       if (ttlFresh && !versionStale) {
         return cached;
       }
-      staleCache = cached;
+      if (age < STALE_CACHE_MAX_MS) staleCache = cached;
     } catch {
     }
   }
   try {
     const policy = await fetchPolicy(apiKey, agent, repoAware);
     try {
-      writeFileSync(path, JSON.stringify({ ...policy, _cachedAt: Date.now(), _policyVersion: expectedVersion ?? null }), "utf-8");
+      writeFileSync(path, JSON.stringify({ ...policy, _cachedAt: Date.now(), _policyVersion: expectedVersion ?? null }), { encoding: "utf-8", mode: 384 });
     } catch {
     }
     return policy;
@@ -130,6 +136,8 @@ var findBestMatch = (policies, toolName, args, repoKey) => {
   }
   return best;
 };
+var isAutoApprove = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "approve";
+var isAutoDeny = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "deny";
 var autoApprove = (tool) => ({
   tool,
   timeoutSeconds: 0,
@@ -162,7 +170,7 @@ var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey) =>
   if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
     base = autoApprove(base.tool);
   }
-  const wouldAutoApprove = base.timeoutSeconds === 0 && base.timeoutAction === "approve";
+  const wouldAutoApprove = isAutoApprove(base);
   if (!governedBySpecificRule && wouldAutoApprove && toolName === "Bash" && typeof arg === "string" && classifyDecisionRisk(toolName, arg) === "destructive") {
     base = {
       tool: base.tool,
@@ -178,6 +186,57 @@ var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey) =>
   }
   return base;
 };
+var restraintRank = (policy) => {
+  if (isAutoDeny(policy)) return 4;
+  if (isAutoApprove(policy)) return 0;
+  if (policy.mode === "push_only") return 3;
+  return policy.mode === "terminal_only" || policy.mode === "notify_only" ? 1 : 2;
+};
+var strictestPolicy = (a, b) => restraintRank(b) > restraintRank(a) ? b : a;
+var resolvePolicyAcross = (config, toolName, modeOverride, toolInputs, cwd, repoKey) => {
+  if (toolInputs.length === 0) return resolvePolicy(config, toolName, modeOverride, void 0, cwd, repoKey);
+  return toolInputs.map((input) => resolvePolicy(config, toolName, modeOverride, input, cwd, repoKey)).reduce(strictestPolicy);
+};
+var isModeStateDegraded = (state) => state?.degraded === true;
+var MODE_GRACE_MS = 60 * 1e3;
+var modeStateCacheFile = (apiKey) => {
+  const hash = createHash("sha256").update(`mode:${apiKey}`).digest("hex").slice(0, 12);
+  return join(tmpdir(), `pushary-mode-${hash}.json`);
+};
+var readLastGoodMode = (apiKey) => {
+  try {
+    const path = modeStateCacheFile(apiKey);
+    if (!existsSync(path)) return null;
+    const parsed = JSON.parse(readFileSync(path, "utf-8"));
+    if (!parsed || typeof parsed.at !== "number" || !parsed.state) return null;
+    return parsed;
+  } catch {
+    return null;
+  }
+};
+var writeLastGoodMode = (apiKey, state) => {
+  try {
+    writeFileSync(modeStateCacheFile(apiKey), JSON.stringify({ state, at: Date.now() }), { encoding: "utf-8", mode: 384 });
+  } catch {
+  }
+};
+var unknownMode = () => ({
+  mode: null,
+  kill: false,
+  policyVersion: null,
+  relayUrl: null,
+  trainingConsent: false,
+  scope: null,
+  degraded: true
+});
+var degradedFallback = (apiKey, authoritative = false) => {
+  if (authoritative) return unknownMode();
+  const last = readLastGoodMode(apiKey);
+  if (last && Date.now() - last.at < MODE_GRACE_MS) {
+    return { ...last.state, degraded: false };
+  }
+  return unknownMode();
+};
 var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
 var fetchModeState = async (apiKey, sessionId) => {
   try {
@@ -187,10 +246,12 @@ var fetchModeState = async (apiKey, sessionId) => {
       headers: { "Authorization": `Bearer ${apiKey}` },
       signal: AbortSignal.timeout(3e3)
     });
-    if (!response.ok) return { mode: null, kill: false, policyVersion: null, relayUrl: null, trainingConsent: false, scope: null };
+    if (!response.ok) {
+      return degradedFallback(apiKey, response.status === 401 || response.status === 403);
+    }
     const data = await response.json();
     const mode = data.override?.mode;
-    return {
+    const state = {
       mode: isApprovalMode(mode) ? mode : null,
       kill: data.kill === true,
       policyVersion: toPolicyVersion(data.policyVersion),
@@ -198,10 +259,13 @@ var fetchModeState = async (apiKey, sessionId) => {
       trainingConsent: data.trainingConsent === true,
       // Validated rather than cast: a malformed contract must read as no contract,
       // never as one that silently matches nothing.
-      scope: isScopeContract(data.scope) ? data.scope : null
+      scope: isScopeContract(data.scope) ? data.scope : null,
+      degraded: false
     };
+    writeLastGoodMode(apiKey, state);
+    return state;
   } catch {
-    return { mode: null, kill: false, policyVersion: null, relayUrl: null, trainingConsent: false, scope: null };
+    return degradedFallback(apiKey);
   }
 };
 var fetchModeOverride = async (apiKey) => (await fetchModeState(apiKey)).mode;
@@ -275,7 +339,7 @@ var TOOL_TARGET_MAX_LENGTH = 80;
 var deriveCommandHead = (command) => {
   if (typeof command !== "string") return void 0;
   const head = command.trim().split(/\s+/).slice(0, 2).join(" ");
-  return head ? head.slice(0, TOOL_TARGET_MAX_LENGTH) : void 0;
+  return head ? redactSecrets(head).slice(0, TOOL_TARGET_MAX_LENGTH) : void 0;
 };
 var deriveToolTarget = (toolName, toolInput) => {
   if (toolName === "Bash" || toolName === "PowerShell" || toolName === "Monitor") {
@@ -300,7 +364,7 @@ var deriveReceiptCommandHead = (command) => {
   const [first, second] = tokens;
   const keep = first && second && SCRIPT_RUNNERS.has(first.toLowerCase()) && RUN_SUBCOMMANDS.has(second.toLowerCase()) ? 3 : 2;
   const head = tokens.slice(0, keep).join(" ");
-  return head ? head.slice(0, TOOL_TARGET_MAX_LENGTH) : void 0;
+  return head ? redactSecrets(head).slice(0, TOOL_TARGET_MAX_LENGTH) : void 0;
 };
 var RECEIPT_TARGET_MAX_LENGTH = 256;
 var EXIT_CODE_FAILURE = /^Error: Exit code \d+/;
@@ -335,7 +399,9 @@ var deriveReceiptMeta = (toolName, toolInput, toolResult, cwd) => {
       if (typeof filePath !== "string" || !filePath) return void 0;
       return {
         kind: toolName === "Write" ? "write" : "edit",
-        target: relativizeReceiptPath(filePath, cwd).slice(0, RECEIPT_TARGET_MAX_LENGTH),
+        // A path is an unlikely place for a credential but not an impossible one
+        // (a token in a temp directory name), and this field is persisted.
+        target: redactSecrets(relativizeReceiptPath(filePath, cwd)).slice(0, RECEIPT_TARGET_MAX_LENGTH),
         ok
       };
     }
@@ -441,9 +507,93 @@ var removePendingSession = (sessionId) => {
   }
 };
 
+// src/repo.ts
+import { existsSync as existsSync3, readFileSync as readFileSync2, statSync as statSync2 } from "fs";
+import { basename, dirname, isAbsolute as isAbsolute2, join as join3, resolve } from "path";
+var MAX_PARENT_WALK = 64;
+var GIT_FILE_PREFIX = "gitdir:";
+var findGitDir = (startDir) => {
+  let current = resolve(startDir);
+  for (let depth = 0; depth < MAX_PARENT_WALK; depth += 1) {
+    const candidate = join3(current, ".git");
+    try {
+      if (existsSync3(candidate)) {
+        if (statSync2(candidate).isDirectory()) return candidate;
+        const pointer = readFileSync2(candidate, "utf-8").trim();
+        if (pointer.startsWith(GIT_FILE_PREFIX)) {
+          const target = pointer.slice(GIT_FILE_PREFIX.length).trim();
+          return isAbsolute2(target) ? target : resolve(current, target);
+        }
+      }
+    } catch {
+    }
+    const parent = dirname(current);
+    if (parent === current) return void 0;
+    current = parent;
+  }
+  return void 0;
+};
+var configPathFor = (gitDir) => {
+  const index = gitDir.replace(/\\/g, "/").indexOf("/worktrees/");
+  return index === -1 ? join3(gitDir, "config") : join3(gitDir.slice(0, index), "config");
+};
+var ORIGIN_SECTION = /^\[remote "origin"\]/;
+var SECTION_HEADER = /^\[/;
+var URL_LINE = /^url\s*=\s*(.+)$/;
+var readOriginRemote = (gitDir) => {
+  try {
+    const configPath = configPathFor(gitDir);
+    if (!existsSync3(configPath)) return void 0;
+    let inOrigin = false;
+    for (const rawLine of readFileSync2(configPath, "utf-8").split("\n")) {
+      const line = rawLine.trim();
+      if (SECTION_HEADER.test(line)) {
+        inOrigin = ORIGIN_SECTION.test(line);
+        continue;
+      }
+      if (!inOrigin) continue;
+      const url = URL_LINE.exec(line);
+      if (url) return url[1]?.trim();
+    }
+  } catch {
+  }
+  return void 0;
+};
+var deriveRepoKey = (cwd) => {
+  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
+  try {
+    const gitDir = findGitDir(dir);
+    if (gitDir) {
+      const remote = readOriginRemote(gitDir);
+      const normalized = remote ? normalizeRepoRemote(remote) : void 0;
+      if (normalized) return normalized;
+      const root = gitDir.endsWith(".git") ? dirname(gitDir) : dir;
+      return localRepoKey(basename(root));
+    }
+    return localRepoKey(basename(resolve(dir)));
+  } catch {
+    return void 0;
+  }
+};
+var repoKeyCache = /* @__PURE__ */ new Map();
+var REPO_KEY_ENV = "PUSHARY_REPO_KEY";
+var repoKeyFor = (cwd) => {
+  const override = process.env[REPO_KEY_ENV];
+  if (typeof override === "string") {
+    const trimmed = override.trim();
+    if (trimmed.toLowerCase() === "off") return void 0;
+    if (trimmed.length > 0) return trimmed.toLowerCase();
+  }
+  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
+  if (repoKeyCache.has(dir)) return repoKeyCache.get(dir);
+  const derived = deriveRepoKey(dir);
+  repoKeyCache.set(dir, derived);
+  return derived;
+};
+
 // src/usage.ts
-import { closeSync, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync2, readSync, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
-import { join as join3 } from "path";
+import { closeSync, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync3, readSync, statSync as statSync3, writeFileSync as writeFileSync3 } from "fs";
+import { join as join4 } from "path";
 import { tmpdir as tmpdir3 } from "os";
 var DEFAULT_PRICES = [
   { match: "opus-4-1", in: 15, out: 75 },
@@ -479,12 +629,12 @@ var estimateCostUsd = (usage, model) => {
   const perTokenOut = price.out / 1e6;
   return usage.inputTokens * perTokenIn + usage.outputTokens * perTokenOut + usage.cacheCreationTokens * perTokenIn * CACHE_WRITE_MULTIPLIER + usage.cacheReadTokens * perTokenIn * CACHE_READ_MULTIPLIER;
 };
-var stateDir = () => process.env.PUSHARY_USAGE_DIR?.trim() || join3(tmpdir3(), "pushary-usage");
-var stateFile = (sessionId) => join3(stateDir(), sessionId.replace(/[^a-zA-Z0-9_-]/g, "_"));
+var stateDir = () => process.env.PUSHARY_USAGE_DIR?.trim() || join4(tmpdir3(), "pushary-usage");
+var stateFile = (sessionId) => join4(stateDir(), sessionId.replace(/[^a-zA-Z0-9_-]/g, "_"));
 var emptyState = () => ({ offset: 0, tokensIn: 0, tokensOut: 0, costUsd: 0, recentIds: [] });
 var readState = (path) => {
   try {
-    const parsed = JSON.parse(readFileSync2(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync3(path, "utf-8"));
     if (typeof parsed.offset === "number" && parsed.offset >= 0 && typeof parsed.tokensIn === "number" && typeof parsed.tokensOut === "number" && typeof parsed.costUsd === "number" && Array.isArray(parsed.recentIds)) {
       return {
         offset: parsed.offset,
@@ -559,7 +709,7 @@ var extractUserText = (content) => {
 };
 var readLastUserPrompt = (transcriptPath) => {
   try {
-    const size = statSync2(transcriptPath).size;
+    const size = statSync3(transcriptPath).size;
     const start = Math.max(0, size - USER_PROMPT_TAIL_BYTES);
     const lines = readRange(transcriptPath, start, size).toString("utf-8").split("\n");
     for (let i = lines.length - 1; i >= 0; i -= 1) {
@@ -582,7 +732,7 @@ var readLastUserPrompt = (transcriptPath) => {
 };
 var readNewUsage = (transcriptPath, sessionId) => {
   try {
-    const size = statSync2(transcriptPath).size;
+    const size = statSync3(transcriptPath).size;
     const path = stateFile(sessionId);
     let state = readState(path);
     if (size < state.offset) state = { ...emptyState(), recentIds: state.recentIds };
@@ -613,7 +763,7 @@ var readNewUsage = (transcriptPath, sessionId) => {
 };
 
 // src/codex-adapter.ts
-import { resolve } from "path";
+import { resolve as resolve2 } from "path";
 var CODEX_AGENT = { type: "codex", label: "Codex" };
 var codexAllow = () => ({ kind: "allow" });
 var codexDeny = (reason) => ({ kind: "deny", reason });
@@ -679,10 +829,25 @@ var toPolicyLookup = (toolName, toolInput, cwd) => {
   const command = toolInput.command;
   const files = parseApplyPatchFiles(command);
   if (files.length === 1) {
-    return { tool: "Edit", input: { file_path: cwd ? resolve(cwd, files[0]) : files[0] } };
+    return { tool: "Edit", input: { file_path: cwd ? resolve2(cwd, files[0]) : files[0] } };
   }
   return { tool: "Edit", input: typeof command === "string" ? { file_path: command } : {} };
 };
+var toPolicyLookups = (toolName, toolInput, cwd) => {
+  if (toolName !== "apply_patch") {
+    const single = toPolicyLookup(toolName, toolInput, cwd);
+    return { tool: single.tool, inputs: [single.input] };
+  }
+  const files = parseApplyPatchFiles(toolInput.command);
+  if (files.length === 0) {
+    const single = toPolicyLookup(toolName, toolInput, cwd);
+    return { tool: single.tool, inputs: [single.input] };
+  }
+  return {
+    tool: "Edit",
+    inputs: files.map((file) => ({ file_path: cwd ? resolve2(cwd, file) : file }))
+  };
+};
 var permissionTimeoutDecision = (timeoutAction) => {
   if (timeoutAction === "approve") return codexAllow();
   if (timeoutAction === "deny") return codexDeny("No response within timeout");
@@ -690,90 +855,6 @@ var permissionTimeoutDecision = (timeoutAction) => {
 };
 var preToolUseTimeoutDecision = (timeoutAction, denyReason = "No response within timeout") => timeoutAction === "deny" ? codexDeny(denyReason) : codexPass();
 
-// src/repo.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3, statSync as statSync3 } from "fs";
-import { basename, dirname, isAbsolute as isAbsolute2, join as join4, resolve as resolve2 } from "path";
-var MAX_PARENT_WALK = 64;
-var GIT_FILE_PREFIX = "gitdir:";
-var findGitDir = (startDir) => {
-  let current = resolve2(startDir);
-  for (let depth = 0; depth < MAX_PARENT_WALK; depth += 1) {
-    const candidate = join4(current, ".git");
-    try {
-      if (existsSync3(candidate)) {
-        if (statSync3(candidate).isDirectory()) return candidate;
-        const pointer = readFileSync3(candidate, "utf-8").trim();
-        if (pointer.startsWith(GIT_FILE_PREFIX)) {
-          const target = pointer.slice(GIT_FILE_PREFIX.length).trim();
-          return isAbsolute2(target) ? target : resolve2(current, target);
-        }
-      }
-    } catch {
-    }
-    const parent = dirname(current);
-    if (parent === current) return void 0;
-    current = parent;
-  }
-  return void 0;
-};
-var configPathFor = (gitDir) => {
-  const index = gitDir.replace(/\\/g, "/").indexOf("/worktrees/");
-  return index === -1 ? join4(gitDir, "config") : join4(gitDir.slice(0, index), "config");
-};
-var ORIGIN_SECTION = /^\[remote "origin"\]/;
-var SECTION_HEADER = /^\[/;
-var URL_LINE = /^url\s*=\s*(.+)$/;
-var readOriginRemote = (gitDir) => {
-  try {
-    const configPath = configPathFor(gitDir);
-    if (!existsSync3(configPath)) return void 0;
-    let inOrigin = false;
-    for (const rawLine of readFileSync3(configPath, "utf-8").split("\n")) {
-      const line = rawLine.trim();
-      if (SECTION_HEADER.test(line)) {
-        inOrigin = ORIGIN_SECTION.test(line);
-        continue;
-      }
-      if (!inOrigin) continue;
-      const url = URL_LINE.exec(line);
-      if (url) return url[1]?.trim();
-    }
-  } catch {
-  }
-  return void 0;
-};
-var deriveRepoKey = (cwd) => {
-  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
-  try {
-    const gitDir = findGitDir(dir);
-    if (gitDir) {
-      const remote = readOriginRemote(gitDir);
-      const normalized = remote ? normalizeRepoRemote(remote) : void 0;
-      if (normalized) return normalized;
-      const root = gitDir.endsWith(".git") ? dirname(gitDir) : dir;
-      return localRepoKey(basename(root));
-    }
-    return localRepoKey(basename(resolve2(dir)));
-  } catch {
-    return void 0;
-  }
-};
-var repoKeyCache = /* @__PURE__ */ new Map();
-var REPO_KEY_ENV = "PUSHARY_REPO_KEY";
-var repoKeyFor = (cwd) => {
-  const override = process.env[REPO_KEY_ENV];
-  if (typeof override === "string") {
-    const trimmed = override.trim();
-    if (trimmed.toLowerCase() === "off") return void 0;
-    if (trimmed.length > 0) return trimmed.toLowerCase();
-  }
-  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
-  if (repoKeyCache.has(dir)) return repoKeyCache.get(dir);
-  const derived = deriveRepoKey(dir);
-  repoKeyCache.set(dir, derived);
-  return derived;
-};
-
 // src/throttle.ts
 import { join as join5 } from "path";
 import { tmpdir as tmpdir4 } from "os";
@@ -870,31 +951,38 @@ var notifyLateAnswers = async (apiKey, late, agentName, sessionId) => {
 };
 var CLAUDE_CODE_AGENT = { type: "claude_code", label: "Claude Code" };
 var POLICY_CACHE_TTL_MS = 5 * 60 * 1e3;
-var readFreshCachedPolicy = (apiKey) => {
-  const path = policyCacheFile(apiKey);
+var readFreshCachedPolicy = (apiKey, agentType) => {
+  const request = policyRequestFor(agentType);
+  const path = policyCacheFile(apiKey, request.agent, request.repoAware);
   if (!existsSync5(path)) return null;
   const cached = JSON.parse(readFileSync4(path, "utf-8"));
   if (!isPolicyConfig(cached)) return null;
   if (!cached._cachedAt || Date.now() - cached._cachedAt >= POLICY_CACHE_TTL_MS) return null;
   return cached;
 };
-var deriveDecisionSource = (toolName, toolInput, liveMode, cwd) => {
+var autoDecisionEnabled = () => {
+  const flag = process.env.PUSHARY_AUTO_DECISION_BEACON;
+  return flag === "1" || flag === "true";
+};
+var deriveDecisionSource = (toolName, toolInput, liveMode, agentType, cwd) => {
   try {
     if (liveMode.kill) return "terminal";
-    const policy = readFreshCachedPolicy(getApiKey());
+    if (!autoDecisionEnabled()) return void 0;
+    const policy = readFreshCachedPolicy(getApiKey(), agentType);
     if (!policy) return void 0;
     const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput, cwd, repoKeyFor(cwd));
-    if (resolved.timeoutSeconds === 0 && resolved.timeoutAction === "approve") return "policy_auto";
+    if (isAutoApprove(resolved)) return "policy_auto";
     if (resolved.mode === "push_only" || resolved.mode === "push_first") return "human";
     return "terminal";
   } catch {
     return void 0;
   }
 };
-var deriveAutoDecisionBeacon = (toolName, toolInput, liveMode, cwd) => {
+var deriveAutoDecisionBeacon = (toolName, toolInput, liveMode, agentType, cwd) => {
   try {
     if (liveMode.kill) return void 0;
-    const policy = readFreshCachedPolicy(getApiKey());
+    if (!autoDecisionEnabled()) return void 0;
+    const policy = readFreshCachedPolicy(getApiKey(), agentType);
     if (!policy) return void 0;
     const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput, cwd, repoKeyFor(cwd));
     if (resolved.timeoutSeconds !== 0 || resolved.timeoutAction !== "approve") return void 0;
@@ -980,8 +1068,8 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
       for (const l of late) removePendingQuestion(sessionKey, l.correlationId);
     }
     const isMirrorOnly = NON_GATED_MIRROR_TOOLS.has(input.tool_name);
-    const decisionSource = isMirrorOnly ? void 0 : deriveDecisionSource(lookup.tool, lookup.input, liveMode, input.cwd);
-    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, input.cwd) : void 0;
+    const decisionSource = isMirrorOnly ? void 0 : deriveDecisionSource(lookup.tool, lookup.input, liveMode, agent.type, input.cwd);
+    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, agent.type, input.cwd) : void 0;
     const toolReport = reportEvent({
       event: isError ? "tool_error" : "tool_complete",
       agentType: agent.type,
@@ -1235,7 +1323,12 @@ var handleStopFailure = async (input, agent = CLAUDE_CODE_AGENT) => {
 
 export {
   getPolicy,
+  isAutoApprove,
+  isAutoDeny,
+  resolveAutoResolveOrigin,
   resolvePolicy,
+  resolvePolicyAcross,
+  isModeStateDegraded,
   fetchModeState,
   fetchModeOverride,
   askUser,
@@ -1260,6 +1353,7 @@ export {
   toCodexWire,
   describeApplyPatch,
   toPolicyLookup,
+  toPolicyLookups,
   permissionTimeoutDecision,
   preToolUseTimeoutDecision,
   readLastPrompt,

package/dist/chunk-GD275GEX.js

@@ -0,0 +1,66 @@
+import {
+  isAutoApprove,
+  isAutoDeny,
+  isModeStateDegraded,
+  resolveAutoResolveOrigin,
+  resolvePolicyAcross
+} from "./chunk-FZIQSDTQ.js";
+import {
+  evaluateScope,
+  scopeChangeReason,
+  scopeRequiresHuman
+} from "./chunk-DQAN3JQP.js";
+
+// src/answer.ts
+var denyReasonFrom = (value, note) => {
+  const trimmed = note?.trim();
+  if (trimmed) return `Denied from your phone: ${trimmed}`;
+  return value && value !== "no" && value !== "yes" ? `Denied from your phone: ${value}` : "Denied via push notification";
+};
+var isDeferAnswer = (value) => value === "defer";
+
+// src/gate.ts
+var KILL_REASON = "Stopped by user, this agent was halted from Pushary";
+var strictestScopeVerdict = (scope, paths) => {
+  if (paths.length === 0) return evaluateScope(scope, void 0);
+  let worst = { outcome: "in_scope" };
+  for (const path of paths) {
+    const verdict = evaluateScope(scope, path);
+    if (verdict.outcome === "off_limits") return verdict;
+    if (verdict.outcome === "out_of_scope") worst = verdict;
+  }
+  return worst;
+};
+var survivesDegraded = (config, toolName, toolInputs, cwd, repoKey) => toolInputs.length === 1 && resolveAutoResolveOrigin(config, toolName, toolInputs[0], cwd, repoKey) === "safe_readonly";
+var resolveGate = (input) => {
+  const { modeState, config, toolName, toolInputs, cwd, repoKey } = input;
+  if (modeState.kill) return { kind: "kill", reason: KILL_REASON };
+  const policy = resolvePolicyAcross(config, toolName, modeState.mode, toolInputs, cwd, repoKey);
+  const autoApproves = isAutoApprove(policy);
+  const autoDenies = isAutoDeny(policy);
+  if (autoDenies) return { kind: "deny", policy, reason: `Denied by policy for ${policy.tool}` };
+  if (isModeStateDegraded(modeState)) {
+    if (autoApproves) {
+      return survivesDegraded(config, toolName, toolInputs, cwd, repoKey) ? { kind: "allow", policy } : { kind: "defer", policy };
+    }
+    return { kind: "gate", policy };
+  }
+  const scopeVerdict = modeState.scope ? strictestScopeVerdict(modeState.scope, input.scopePaths ?? []) : { outcome: "no_contract" };
+  if (autoApproves) {
+    if (!scopeRequiresHuman(scopeVerdict)) return { kind: "allow", policy };
+  }
+  const scopeReason = scopeChangeReason(scopeVerdict);
+  return {
+    kind: "gate",
+    policy,
+    scopeReason,
+    scopePath: scopeReason && "path" in scopeVerdict ? scopeVerdict.path : void 0
+  };
+};
+
+export {
+  denyReasonFrom,
+  isDeferAnswer,
+  KILL_REASON,
+  resolveGate
+};