@pushary/agent-hooks 0.84.1 → 0.85.1

package/dist/{chunk-SEAHGHCE.js → chunk-PHXEADSL.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-MQMPG5X4.js";
+} from "./chunk-G3LXA2ZP.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";
@@ -14,12 +14,12 @@ var codexHooksJson = () => join(codexHome(), "hooks.json");
 var codexAgentsMd = () => join(codexHome(), "AGENTS.md");
 var codexSkillDir = () => join(codexHome(), "skills", "pushary");
 var CODEX_HOOK_EVENTS = [
-  { event: "PermissionRequest", matcher: "Bash|apply_patch", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Waiting for your phone" },
-  { event: "PreToolUse", matcher: "Bash|apply_patch", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Checking Pushary policy" },
-  { event: "PostToolUse", matcher: "Bash|apply_patch", timeout: 10 },
-  { event: "UserPromptSubmit", timeout: 10 },
-  { event: "Stop", timeout: 10 },
-  { event: "SessionStart", matcher: "startup|resume", timeout: 10 }
+  { event: "PermissionRequest", matcher: "Bash|apply_patch", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Waiting for your phone" },
+  { event: "PreToolUse", matcher: "Bash|apply_patch", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Checking Pushary policy" },
+  { event: "PostToolUse", matcher: "Bash|apply_patch", delivery: "telemetry", timeout: 10 },
+  { event: "UserPromptSubmit", delivery: "telemetry", timeout: 10 },
+  { event: "Stop", delivery: "telemetry", timeout: 10 },
+  { event: "SessionStart", matcher: "startup|resume", delivery: "telemetry", timeout: 10 }
 ];
 var CODEX_EVENT_KEY = {
   PermissionRequest: "permission_request",
@@ -139,6 +139,38 @@ var untrustedCodexHookEvents = (config, hooksJsonPath, command) => {
     return stored !== codexHookTrustHash(definition, command);
   }).map((definition) => definition.event);
 };
+var removeCodexMcpServer = (config) => {
+  const servers = asRecord(config.mcp_servers);
+  if (!servers?.pushary) return false;
+  delete servers.pushary;
+  if (Object.keys(servers).length === 0) delete config.mcp_servers;
+  return true;
+};
+var removeCodexHookTrust = (config, hooksJsonPath) => {
+  const state = asRecord(asRecord(config.hooks)?.state);
+  if (!state) return false;
+  let changed = false;
+  for (const definition of CODEX_HOOK_EVENTS) {
+    const key = codexHookStateKey(hooksJsonPath, definition.event);
+    if (key in state) {
+      delete state[key];
+      changed = true;
+    }
+  }
+  if (changed && Object.keys(state).length === 0) {
+    const hooks = asRecord(config.hooks);
+    if (hooks) {
+      delete hooks.state;
+      if (Object.keys(hooks).length === 0) delete config.hooks;
+    }
+  }
+  return changed;
+};
+var removeCodexSettings = (config, hooksJsonPath) => {
+  const mcp = removeCodexMcpServer(config);
+  const trust = removeCodexHookTrust(config, hooksJsonPath);
+  return mcp || trust;
+};
 var addCodexHookTrust = (config, hooksJsonPath, command) => {
   const hooks = ensureRecord(config, "hooks");
   const state = ensureRecord(hooks, "state");
@@ -183,6 +215,7 @@ export {
   hasCodexHooks,
   missingCodexHookEvents,
   untrustedCodexHookEvents,
+  removeCodexSettings,
   addCodexHookTrust,
   claudeSettings,
   claudeJson,

package/dist/{chunk-F52SIIDG.js → chunk-QDKJTPAT.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   isValidApiKey
-} from "./chunk-MQMPG5X4.js";
+} from "./chunk-G3LXA2ZP.js";
 
 // src/session.ts
 var IDENTITY_PATH = "/api/v1/server/identity";

package/dist/{chunk-J4KFVOCQ.js → chunk-SQOFGPNX.js}

@@ -1,6 +1,6 @@
 import {
   renderCommandHelp
-} from "./chunk-MGJBC6DD.js";
+} from "./chunk-GOEXZ5QJ.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";

package/dist/{chunk-NJ7JT26G.js → chunk-VGADRFG6.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-MQMPG5X4.js";
+} from "./chunk-G3LXA2ZP.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-HZNOAJGB.js → chunk-VKJUVPTJ.js}

@@ -1,9 +1,9 @@
 import {
   hasGeminiHooks
-} from "./chunk-DOXSWT4Q.js";
+} from "./chunk-OZKRF7MS.js";
 import {
   hasCodexHooks
-} from "./chunk-SEAHGHCE.js";
+} from "./chunk-PHXEADSL.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-ERYKGH4J.js → chunk-XIR6N66V.js}

@@ -5,7 +5,7 @@ import {
   generateSessionKey,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-GCKAWHFP.js";
+} from "./chunk-JDQY47OW.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-CCH775Y6.js → chunk-XLM6COJA.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VT4IVERX.js";
 import {
   pusharyDir
-} from "./chunk-SEAHGHCE.js";
+} from "./chunk-PHXEADSL.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";

package/dist/{chunk-CCCJ6BPW.js → chunk-Y7BALRVB.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-SAF6HGAA.js";
 import {
   reportedInstallSource
-} from "./chunk-437T77TY.js";
+} from "./chunk-ES3FAX5X.js";
 import {
   getApiKey,
   getBaseUrl
@@ -18,19 +18,15 @@ import {
 import {
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
-  classifyDecisionRisk,
-  isApprovalMode,
   isAutoApprove,
-  isAutoDeny,
-  isSafeReadOnlyCommand,
-  isScopeContract,
   localRepoKey,
+  modeStateFromResponse,
   normalizeRepoRemote,
-  policyArgForms,
   redactSecrets,
   redactSecretsDeep,
-  selectGoverningRule
-} from "./chunk-MQMPG5X4.js";
+  resolveAutoResolveOrigin,
+  resolvePolicy
+} from "./chunk-G3LXA2ZP.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -120,66 +116,6 @@ var getPolicy = async (apiKey, expectedVersion, agent, repoAware = false, sessio
     throw new Error("Failed to fetch policy and no cached policy available");
   }
 };
-var autoApprove = (tool) => ({
-  tool,
-  timeoutSeconds: 0,
-  timeoutAction: "approve",
-  mode: "terminal_only",
-  pushFirstSeconds: 0
-});
-var resolveAutoResolveOrigin = (config, toolName, toolInput, cwd, repoKey, sessionId) => {
-  const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
-  const arg = args[0];
-  const match = selectGoverningRule(config.policies, toolName, args, repoKey, sessionId);
-  const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
-  if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
-    return "safe_readonly";
-  }
-  return "policy_timeout";
-};
-var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey, sessionId) => {
-  const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
-  const arg = args[0];
-  const match = selectGoverningRule(config.policies, toolName, args, repoKey, sessionId);
-  let base = match?.policy ?? config.policies.find((p) => p.tool === "*") ?? {
-    tool: toolName,
-    timeoutSeconds: config.defaultTimeoutSeconds,
-    timeoutAction: config.defaultTimeoutAction,
-    mode: config.defaultMode ?? "push_first",
-    pushFirstSeconds: config.defaultPushFirstSeconds ?? 20
-  };
-  const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
-  if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
-    base = autoApprove(base.tool);
-  }
-  const wouldAutoApprove = isAutoApprove(base);
-  if (!governedBySpecificRule && wouldAutoApprove && toolName === "Bash" && typeof arg === "string" && classifyDecisionRisk(toolName, arg) === "destructive") {
-    base = {
-      tool: base.tool,
-      timeoutSeconds: config.defaultTimeoutSeconds,
-      timeoutAction: "wait",
-      mode: "push_first",
-      pushFirstSeconds: config.defaultPushFirstSeconds ?? 20
-    };
-  }
-  const effectiveOverride = modeOverride ?? config.modeOverride;
-  if (effectiveOverride) {
-    return { ...base, mode: effectiveOverride };
-  }
-  return base;
-};
-var restraintRank = (policy) => {
-  if (isAutoDeny(policy)) return 4;
-  if (isAutoApprove(policy)) return 0;
-  if (policy.mode === "push_only") return 3;
-  return policy.mode === "terminal_only" || policy.mode === "notify_only" ? 1 : 2;
-};
-var strictestPolicy = (a, b) => restraintRank(b) > restraintRank(a) ? b : a;
-var resolvePolicyAcross = (config, toolName, modeOverride, toolInputs, cwd, repoKey, sessionId) => {
-  if (toolInputs.length === 0) return resolvePolicy(config, toolName, modeOverride, void 0, cwd, repoKey, sessionId);
-  return toolInputs.map((input) => resolvePolicy(config, toolName, modeOverride, input, cwd, repoKey, sessionId)).reduce(strictestPolicy);
-};
-var isModeStateDegraded = (state) => state?.degraded === true;
 var MODE_GRACE_MS = 60 * 1e3;
 var modeStateCacheFile = (apiKey) => {
   const hash = createHash("sha256").update(`mode:${apiKey}`).digest("hex").slice(0, 12);
@@ -196,9 +132,10 @@ var readLastGoodMode = (apiKey) => {
     return null;
   }
 };
-var writeLastGoodMode = (apiKey, state) => {
+var writeLastGoodMode = (apiKey, state, sessionId) => {
   try {
-    writeFileSync(modeStateCacheFile(apiKey), JSON.stringify({ state, at: Date.now() }), { encoding: "utf-8", mode: 384 });
+    const cached = { state, at: Date.now(), ...sessionId ? { sessionId } : {} };
+    writeFileSync(modeStateCacheFile(apiKey), JSON.stringify(cached), { encoding: "utf-8", mode: 384 });
   } catch {
   }
 };
@@ -219,8 +156,18 @@ var degradedFallback = (apiKey, authoritative = false) => {
   }
   return unknownMode();
 };
-var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
-var fetchModeState = async (apiKey, sessionId) => {
+var MODE_REUSE_MS = CACHE_TTL_MS;
+var readReusableMode = (apiKey, sessionId, maxAgeMs) => {
+  const last = readLastGoodMode(apiKey);
+  if (!last || (last.sessionId ?? null) !== (sessionId ?? null)) return null;
+  if (Date.now() - last.at >= maxAgeMs) return null;
+  return { ...last.state, degraded: false };
+};
+var fetchModeState = async (apiKey, sessionId, reuseWithinMs = 0) => {
+  if (reuseWithinMs > 0) {
+    const reusable = readReusableMode(apiKey, sessionId, reuseWithinMs);
+    if (reusable) return reusable;
+  }
   try {
     const baseUrl = getBaseUrl();
     const url = sessionId ? `${baseUrl}/api/mcp/mode?session=${encodeURIComponent(sessionId)}` : `${baseUrl}/api/mcp/mode`;
@@ -231,20 +178,8 @@ var fetchModeState = async (apiKey, sessionId) => {
     if (!response.ok) {
       return degradedFallback(apiKey, response.status === 401 || response.status === 403);
     }
-    const data = await response.json();
-    const mode = data.override?.mode;
-    const state = {
-      mode: isApprovalMode(mode) ? mode : null,
-      kill: data.kill === true,
-      policyVersion: toPolicyVersion(data.policyVersion),
-      relayUrl: typeof data.relayUrl === "string" && data.relayUrl.length > 0 ? data.relayUrl : null,
-      trainingConsent: data.trainingConsent === true,
-      // Validated rather than cast: a malformed contract must read as no contract,
-      // never as one that silently matches nothing.
-      scope: isScopeContract(data.scope) ? data.scope : null,
-      degraded: false
-    };
-    writeLastGoodMode(apiKey, state);
+    const state = modeStateFromResponse(await response.json());
+    writeLastGoodMode(apiKey, state, sessionId);
     return state;
   } catch {
     return degradedFallback(apiKey);
@@ -253,9 +188,11 @@ var fetchModeState = async (apiKey, sessionId) => {
 var fetchModeOverride = async (apiKey) => (await fetchModeState(apiKey)).mode;
 
 // src/api.ts
+import { randomUUID } from "crypto";
 installProxyDispatcher();
 var askUser = async (apiKey, params, timeoutMs = 15e3) => {
-  const result = await callMcpTool(apiKey, "ask_user", { ...params, wait: false }, { maxRetries: 3, timeoutMs });
+  const identified = params.toolUseId || params.requestId ? params : { ...params, requestId: randomUUID() };
+  const result = await callMcpTool(apiKey, "ask_user", { ...identified, wait: false }, { maxRetries: 3, timeoutMs });
   if (!isAskUserResponse(result)) throw new Error("Invalid ask_user response");
   return result;
 };
@@ -274,7 +211,7 @@ var sendNotification = async (apiKey, params, timeoutMs = 15e3) => {
   await callMcpTool(apiKey, "send_notification", { ...params }, { maxRetries: 3, timeoutMs });
 };
 
-// src/describe.ts
+// ../hook-mapping/src/describe.ts
 import { isAbsolute, relative } from "path";
 var hookPrefixes = {
   Bash: (input) => `bash: ${input.command ?? "(no command)"}`,
@@ -443,6 +380,36 @@ var deriveBlocker = (mode, reason) => {
   return text.slice(0, DECISION_LINE_MAX);
 };
 
+// ../hook-mapping/src/map.ts
+import { basename } from "path";
+var TASK_TITLE_MAX_LENGTH = 120;
+var STOP_SUMMARY_MAX_LENGTH = 200;
+var SESSION_END_ACTIONS = {
+  clear: "Session cleared",
+  logout: "Logged out",
+  resume: "Session suspended",
+  prompt_input_exit: "Session ended",
+  bypass_permissions_disabled: "Session ended",
+  other: "Session ended"
+};
+var countArray = (value) => Array.isArray(value) ? value.length : 0;
+var summarizeFinalMessage = (message) => {
+  if (typeof message !== "string") return "Session ended";
+  const collapsed = message.replace(/\s+/g, " ").trim();
+  if (!collapsed) return "Session ended";
+  return collapsed.slice(0, STOP_SUMMARY_MAX_LENGTH);
+};
+var summarizeStop = (input) => {
+  const running = countArray(input.background_tasks);
+  if (running > 0) return `Paused with ${running} background task${running === 1 ? "" : "s"} still running`;
+  const crons = countArray(input.session_crons);
+  if (crons > 0) return `Idle until a scheduled task wakes it (${crons} pending)`;
+  return summarizeFinalMessage(input.last_assistant_message);
+};
+var sessionStartAction = (source) => source === "resume" ? "Session resumed" : "Session started";
+var sessionEndAction = (reason) => typeof reason === "string" && SESSION_END_ACTIONS[reason] || "Session ended";
+var taskTitleFrom = (prompt) => typeof prompt === "string" ? prompt.replace(/\s+/g, " ").trim().slice(0, TASK_TITLE_MAX_LENGTH) || void 0 : void 0;
+
 // src/pending.ts
 import { join as join2 } from "path";
 import { tmpdir as tmpdir2 } from "os";
@@ -491,7 +458,7 @@ var removePendingSession = (sessionId) => {
 
 // src/repo.ts
 import { existsSync as existsSync3, readFileSync as readFileSync2, statSync as statSync2 } from "fs";
-import { basename, dirname, isAbsolute as isAbsolute2, join as join3, resolve } from "path";
+import { basename as basename2, dirname, isAbsolute as isAbsolute2, join as join3, resolve } from "path";
 var MAX_PARENT_WALK = 64;
 var GIT_FILE_PREFIX = "gitdir:";
 var findGitDir = (startDir) => {
@@ -550,9 +517,9 @@ var deriveRepoKey = (cwd) => {
       const normalized = remote ? normalizeRepoRemote(remote) : void 0;
       if (normalized) return normalized;
       const root = gitDir.endsWith(".git") ? dirname(gitDir) : dir;
-      return localRepoKey(basename(root));
+      return localRepoKey(basename2(root));
     }
-    return localRepoKey(basename(resolve(dir)));
+    return localRepoKey(basename2(resolve(dir)));
   } catch {
     return void 0;
   }
@@ -857,7 +824,7 @@ var throttlePass = (key, windowMs) => {
 };
 
 // src/events.ts
-import { basename as basename2, join as join6 } from "path";
+import { basename as basename3, join as join6 } from "path";
 import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync4, statSync as statSync5, writeFileSync as writeFileSync5 } from "fs";
 import { tmpdir as tmpdir5 } from "os";
 var INTENT_DIR = join6(tmpdir5(), "pushary-intent");
@@ -1046,14 +1013,14 @@ var reportEvent = async (event, options = {}) => {
 var NON_GATED_MIRROR_TOOLS = /* @__PURE__ */ new Set(["TodoWrite"]);
 var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const action = describeToolCall(input.tool_name, input.tool_input, "event");
     const lookup = toPolicyLookup(input.tool_name, input.tool_input);
     const toolResult = input.tool_response ?? input.tool_result;
     const isError = isToolResultError(toolResult);
     const receiptsEnabled = process.env.PUSHARY_RECEIPTS !== "off";
     const sessionKey = input.session_id || DEFAULT_SESSION;
-    const liveMode = await fetchModeState(getApiKey(), input.session_id);
+    const liveMode = await fetchModeState(getApiKey(), input.session_id, MODE_REUSE_MS);
     const late = await reconcilePendingQuestions(sessionKey);
     let additionalContext;
     if (late.length > 0 && agent.type === CLAUDE_CODE_AGENT.type) {
@@ -1098,13 +1065,12 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
     return void 0;
   }
 };
-var TASK_TITLE_MAX_LENGTH = 120;
 var handleUserPrompt = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const titlesEnabled = process.env.PUSHARY_TASK_TITLES !== "off";
-    const taskTitle = titlesEnabled ? input.prompt?.replace(/\s+/g, " ").trim().slice(0, TASK_TITLE_MAX_LENGTH) || void 0 : void 0;
+    const taskTitle = titlesEnabled ? taskTitleFrom(input.prompt) : void 0;
     if (input.prompt) saveLastPrompt(sessionKey, input.prompt);
     const late = await reconcilePendingQuestions(sessionKey);
     let additionalContext;
@@ -1129,24 +1095,9 @@ var handleUserPrompt = async (input, agent = CLAUDE_CODE_AGENT) => {
     return void 0;
   }
 };
-var STOP_SUMMARY_MAX_LENGTH = 200;
-var summarizeFinalMessage = (message) => {
-  if (typeof message !== "string") return "Session ended";
-  const collapsed = message.replace(/\s+/g, " ").trim();
-  if (!collapsed) return "Session ended";
-  return collapsed.slice(0, STOP_SUMMARY_MAX_LENGTH);
-};
-var countArray = (value) => Array.isArray(value) ? value.length : 0;
-var summarizeStop = (input) => {
-  const running = countArray(input.background_tasks);
-  if (running > 0) return `Paused with ${running} background task${running === 1 ? "" : "s"} still running`;
-  const crons = countArray(input.session_crons);
-  if (crons > 0) return `Idle until a scheduled task wakes it (${crons} pending)`;
-  return summarizeFinalMessage(input.last_assistant_message);
-};
 var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const late = await reconcilePendingQuestions(sessionKey);
     const tasks = [
@@ -1182,8 +1133,8 @@ var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
 };
 var handleSessionStart = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
-    const action = input.source === "resume" ? "Session resumed" : "Session started";
+    const projectName = basename3(input.cwd ?? process.cwd());
+    const action = sessionStartAction(input.source);
     await reportEvent({
       event: "session_start",
       agentType: agent.type,
@@ -1194,18 +1145,10 @@ var handleSessionStart = async (input, agent = CLAUDE_CODE_AGENT) => {
   } catch {
   }
 };
-var SESSION_END_ACTIONS = {
-  clear: "Session cleared",
-  logout: "Logged out",
-  resume: "Session suspended",
-  prompt_input_exit: "Session ended",
-  bypass_permissions_disabled: "Session ended",
-  other: "Session ended"
-};
 var handleSessionEnd = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
-    const action = typeof input.reason === "string" && SESSION_END_ACTIONS[input.reason] || "Session ended";
+    const projectName = basename3(input.cwd ?? process.cwd());
+    const action = sessionEndAction(input.reason);
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const late = await reconcilePendingQuestions(sessionKey);
     if (late.length > 0) {
@@ -1228,7 +1171,7 @@ var NOTIFICATION_PUSH_TYPES = /* @__PURE__ */ new Set(["idle_prompt", "agent_nee
 var NOTIFICATION_THROTTLE_MS = 60 * 1e3;
 var handleNotification = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const notifType = input.notification_type ?? input.type ?? "";
     const sessionKey = input.session_id || DEFAULT_SESSION;
     if (NOTIFICATION_PUSH_TYPES.has(notifType)) {
@@ -1239,7 +1182,7 @@ var handleNotification = async (input, agent = CLAUDE_CODE_AGENT) => {
       } catch {
         return;
       }
-      const mode = await fetchModeState(apiKey, input.session_id).catch(() => null);
+      const mode = await fetchModeState(apiKey, input.session_id, MODE_REUSE_MS).catch(() => null);
       if (mode?.kill || mode?.mode === "terminal_only") return;
       await sendNotification(apiKey, {
         title: `${agent.label} is waiting`,
@@ -1301,8 +1244,8 @@ var handleStopFailure = async (input, agent = CLAUDE_CODE_AGENT) => {
     } catch {
       return;
     }
-    const projectName = basename2(input.cwd ?? process.cwd());
-    const mode = await fetchModeState(apiKey, input.session_id).catch(() => null);
+    const projectName = basename3(input.cwd ?? process.cwd());
+    const mode = await fetchModeState(apiKey, input.session_id, MODE_REUSE_MS).catch(() => null);
     if (mode?.kill || mode?.mode === "terminal_only") return;
     const reason = describeStopFailure(input.error);
     await sendNotification(apiKey, {
@@ -1320,10 +1263,6 @@ var handleStopFailure = async (input, agent = CLAUDE_CODE_AGENT) => {
 export {
   policyRequestFor,
   getPolicy,
-  resolveAutoResolveOrigin,
-  resolvePolicy,
-  resolvePolicyAcross,
-  isModeStateDegraded,
   fetchModeState,
   fetchModeOverride,
   askUser,

package/dist/chunk-YHG74UFF.js

@@ -0,0 +1,12 @@
+// src/answer.ts
+var denyReasonFrom = (value, note) => {
+  const trimmed = note?.trim();
+  if (trimmed) return `Denied from your phone: ${trimmed}`;
+  return value && value !== "no" && value !== "yes" ? `Denied from your phone: ${value}` : "Denied via push notification";
+};
+var isDeferAnswer = (value) => value === "defer";
+
+export {
+  denyReasonFrom,
+  isDeferAnswer
+};

package/dist/src/index.d.ts

@@ -1,5 +1,6 @@
-import { PolicyConfig, ApprovalMode, ToolPolicy, ScopeContract, AgentQuestion } from '@pushary/contracts';
-export { ApprovalMode, PolicyConfig, ToolPolicy } from '@pushary/contracts';
+import { ReceiptMeta } from '@pushary/hook-mapping';
+import { PolicyConfig, ApprovalMode, ModeState, AutoResolveOrigin, AgentQuestion } from '@pushary/contracts';
+export { ApprovalMode, ModeState, PolicyConfig, ToolPolicy, resolvePolicy } from '@pushary/contracts';
 
 interface ToolInput {
     tool_name: string;
@@ -20,26 +21,9 @@ interface HookOutput {
 }
 declare const handlePreToolUse: (input: ToolInput) => Promise<HookOutput | undefined>;
 
-type ReceiptKind = 'edit' | 'write' | 'bash' | 'commit';
-interface ReceiptMeta {
-    kind: ReceiptKind;
-    target: string;
-    ok: boolean;
-}
-
 declare const getPolicy: (apiKey: string, expectedVersion?: string | null, agent?: string, repoAware?: boolean, sessionId?: string) => Promise<PolicyConfig>;
-type AutoResolveOrigin = 'safe_readonly' | 'policy_timeout';
-declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>, cwd?: string, repoKey?: string, sessionId?: string) => ToolPolicy;
-interface ModeState {
-    readonly mode: ApprovalMode | null;
-    readonly kill: boolean;
-    readonly policyVersion: string | null;
-    readonly relayUrl: string | null;
-    readonly trainingConsent?: boolean;
-    readonly scope?: ScopeContract | null;
-    readonly degraded?: boolean;
-}
-declare const fetchModeState: (apiKey: string, sessionId?: string) => Promise<ModeState>;
+
+declare const fetchModeState: (apiKey: string, sessionId?: string, reuseWithinMs?: number) => Promise<ModeState>;
 declare const fetchModeOverride: (apiKey: string) => Promise<ApprovalMode | null>;
 
 interface UsageReport {
@@ -142,6 +126,7 @@ interface AskUserParams {
     actionBody?: string;
     scopePath?: string;
     toolUseId?: string;
+    requestId?: string;
 }
 interface AskUserResponse {
     correlationId: string;
@@ -166,4 +151,4 @@ declare const cancelQuestion: (apiKey: string, correlationId: string) => Promise
 declare const getApiKey: () => string;
 declare const getBaseUrl: () => string;
 
-export { type ModeState, askUser, cancelQuestion, fetchModeOverride, fetchModeState, getApiKey, getBaseUrl, getPolicy, handleNotification, handlePostToolUse, handlePreToolUse, handleStop, reportEvent, resolvePolicy, waitForAnswer };
+export { askUser, cancelQuestion, fetchModeOverride, fetchModeState, getApiKey, getBaseUrl, getPolicy, handleNotification, handlePostToolUse, handlePreToolUse, handleStop, reportEvent, waitForAnswer };

package/dist/src/index.js

@@ -1,9 +1,11 @@
 import {
   handlePreToolUse
-} from "../chunk-YR5TSPXB.js";
-import "../chunk-UKSQWTBH.js";
-import "../chunk-NJ7JT26G.js";
-import "../chunk-BLDDXHHA.js";
+} from "../chunk-LB6RSCLL.js";
+import "../chunk-GM54KC62.js";
+import "../chunk-HSGEEBBL.js";
+import "../chunk-VT4IVERX.js";
+import "../chunk-VGADRFG6.js";
+import "../chunk-YHG74UFF.js";
 import {
   askUser,
   cancelQuestion,
@@ -14,20 +16,21 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent,
-  resolvePolicy,
   waitForAnswer
-} from "../chunk-CCCJ6BPW.js";
+} from "../chunk-Y7BALRVB.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-437T77TY.js";
+import "../chunk-ES3FAX5X.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-MQMPG5X4.js";
+import {
+  resolvePolicy
+} from "../chunk-G3LXA2ZP.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.84.1",
+  "version": "0.85.1",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",
@@ -68,7 +68,8 @@
     "pushary-suggestions": "./dist/bin/pushary-suggestions.js",
     "pushary-upgrade": "./dist/bin/pushary-upgrade.js",
     "pushary-bell": "./dist/bin/pushary-bell.js",
-    "pushary-bell-hook": "./dist/bin/pushary-bell-hook.js"
+    "pushary-bell-hook": "./dist/bin/pushary-bell-hook.js",
+    "pushary-disconnect": "./dist/bin/pushary-disconnect.js"
   },
   "files": [
     "dist",
@@ -79,7 +80,8 @@
     "build": "node scripts/bundle-plugin.mjs && tsup",
     "dev": "tsup --watch",
     "test": "node ../../scripts/ci/run-tests.mjs src bin",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "gen:hooks-spec": "bun scripts/generate-hooks-spec.ts"
   },
   "dependencies": {
     "@inquirer/prompts": "^8.4.2",
@@ -90,6 +92,7 @@
   },
   "devDependencies": {
     "@pushary/contracts": "workspace:*",
+    "@pushary/hook-mapping": "workspace:*",
     "tsup": "^8.0.0",
     "typescript": "^5.0.0"
   }