@pushary/agent-hooks 0.85.0 → 0.85.1

package/dist/{chunk-K7CSRGKZ.js → chunk-CIVG746V.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-6MTNS63X.js";
 import {
   resolveInstallSourceFor
-} from "./chunk-437T77TY.js";
+} from "./chunk-ES3FAX5X.js";
 import {
   configFilePath
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-FBGBJXVC.js → chunk-DNSIVHIA.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-F52SIIDG.js";
+} from "./chunk-QDKJTPAT.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-437T77TY.js → chunk-ES3FAX5X.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-MQMPG5X4.js";
+} from "./chunk-G3LXA2ZP.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-AXRATIS6.js → chunk-EZPRY2ZY.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-64PXDATC.js";
+} from "./chunk-GM54KC62.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-MQMPG5X4.js → chunk-G3LXA2ZP.js}

@@ -65,6 +65,7 @@ var hookWaitDeadline = (startMs, policyWaitSeconds, agent, nowMs) => {
 };
 var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + hookMaxWaitSeconds(agent) * 1e3 < nowMs + Math.max(policyWaitSeconds, 0) * 1e3;
 var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
+var HOOK_BATCH_MAX_BYTES = 4 * 1024 * 1024;
 var REPO_KEY_MAX_LENGTH = 200;
 var isRepoKeyMatch = (ruleRepoKey, currentRepoKey) => {
   if (!ruleRepoKey) return true;
@@ -635,6 +636,88 @@ var SECRET_REDACTION_RULES = [
 var HIGH_ENTROPY_RULE = { pattern: /[A-Za-z0-9+/]{40,}={0,2}/g, replacement: "[redacted]" };
 var redactSecrets = (text) => SECRET_REDACTION_RULES.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
 var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
+var AUTHORIZATION_CANONICAL_VERSION = "pushary.authz.v1";
+var AUTHORIZATION_CANONICAL_FIXTURE = [
+  {
+    subject: { toolName: "refund.create" },
+    canonical: `${AUTHORIZATION_CANONICAL_VERSION}
+action:13:refund.create
+target:0:
+actor:0:
+environment:0:
+externalId:0:`
+  },
+  {
+    subject: {
+      toolName: "refund.create",
+      toolTarget: "ord_991",
+      actor: "user:u_44",
+      environment: "production",
+      externalId: "cust_7",
+      parameters: { currency: "EUR", amount: 4800, expedited: true, rate: 1.5 }
+    },
+    canonical: `${AUTHORIZATION_CANONICAL_VERSION}
+action:13:refund.create
+target:7:ord_991
+actor:9:user:u_44
+environment:10:production
+externalId:6:cust_7
+p:13:amount=n:4800
+p:14:currency=s:EUR
+p:16:expedited=b:true
+p:10:rate=n:1.5`
+  },
+  {
+    // Parameter order is not part of the subject. The same facts written in a
+    // different order are the same authorization.
+    subject: { toolName: "refund.create", parameters: { b: 2, a: 1 } },
+    canonical: `${AUTHORIZATION_CANONICAL_VERSION}
+action:13:refund.create
+target:0:
+actor:0:
+environment:0:
+externalId:0:
+p:5:a=n:1
+p:5:b=n:2`
+  },
+  {
+    // An integral float is the same number as the integer.
+    subject: { toolName: "a", parameters: { n: 49 } },
+    canonical: `${AUTHORIZATION_CANONICAL_VERSION}
+action:1:a
+target:0:
+actor:0:
+environment:0:
+externalId:0:
+p:6:n=n:49`
+  },
+  {
+    // Delimiters inside a value cannot forge another subject.
+    subject: { toolName: "a", parameters: { "x\ny": "1" } },
+    canonical: `${AUTHORIZATION_CANONICAL_VERSION}
+action:1:a
+target:0:
+actor:0:
+environment:0:
+externalId:0:
+p:7:x
+y=s:1`
+  },
+  {
+    // Every finite number, including the ones another language would render
+    // differently. One runtime computes both sides of the comparison.
+    subject: { toolName: "a", parameters: { small: 1e-7, big: 1e21 } },
+    canonical: `${AUTHORIZATION_CANONICAL_VERSION}
+action:1:a
+target:0:
+actor:0:
+environment:0:
+externalId:0:
+p:11:big=n:1e+21
+p:12:small=n:1e-7`
+  }
+];
+var AUTHORIZATION_PERMIT_TTL_SECONDS = 60 * 60;
 var classifyDecisionRisk = (toolName, toolTarget) => {
   const parts = [toolName, toolTarget ?? ""];
   const matchesAny = (patterns) => parts.some((part) => patterns.some((re) => re.test(part)));
@@ -833,9 +916,127 @@ var isScopeContract = (value) => {
   const strings = (v) => Array.isArray(v) && v.every((x) => typeof x === "string");
   return strings(c.allowedPaths) && strings(c.offLimitsPaths) && typeof c.doneWhen === "string";
 };
+var autoApprove = (tool) => ({
+  tool,
+  timeoutSeconds: 0,
+  timeoutAction: "approve",
+  mode: "terminal_only",
+  pushFirstSeconds: 0
+});
+var resolveAutoResolveOrigin = (config, toolName, toolInput, cwd, repoKey, sessionId) => {
+  const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
+  const arg = args[0];
+  const match = selectGoverningRule(config.policies, toolName, args, repoKey, sessionId);
+  const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
+  if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
+    return "safe_readonly";
+  }
+  return "policy_timeout";
+};
+var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey, sessionId) => {
+  const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
+  const arg = args[0];
+  const match = selectGoverningRule(config.policies, toolName, args, repoKey, sessionId);
+  let base = match?.policy ?? config.policies.find((p) => p.tool === "*") ?? {
+    tool: toolName,
+    timeoutSeconds: config.defaultTimeoutSeconds,
+    timeoutAction: config.defaultTimeoutAction,
+    mode: config.defaultMode ?? "push_first",
+    pushFirstSeconds: config.defaultPushFirstSeconds ?? 20
+  };
+  const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
+  if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
+    base = autoApprove(base.tool);
+  }
+  const wouldAutoApprove = isAutoApprove(base);
+  if (!governedBySpecificRule && wouldAutoApprove && toolName === "Bash" && typeof arg === "string" && classifyDecisionRisk(toolName, arg) === "destructive") {
+    base = {
+      tool: base.tool,
+      timeoutSeconds: config.defaultTimeoutSeconds,
+      timeoutAction: "wait",
+      mode: "push_first",
+      pushFirstSeconds: config.defaultPushFirstSeconds ?? 20
+    };
+  }
+  const effectiveOverride = modeOverride ?? config.modeOverride;
+  if (effectiveOverride) {
+    return { ...base, mode: effectiveOverride };
+  }
+  return base;
+};
+var restraintRank = (policy) => {
+  if (isAutoDeny(policy)) return 4;
+  if (isAutoApprove(policy)) return 0;
+  if (policy.mode === "push_only") return 3;
+  return policy.mode === "terminal_only" || policy.mode === "notify_only" ? 1 : 2;
+};
+var strictestPolicy = (a, b) => restraintRank(b) > restraintRank(a) ? b : a;
+var resolvePolicyAcross = (config, toolName, modeOverride, toolInputs, cwd, repoKey, sessionId) => {
+  if (toolInputs.length === 0) return resolvePolicy(config, toolName, modeOverride, void 0, cwd, repoKey, sessionId);
+  return toolInputs.map((input) => resolvePolicy(config, toolName, modeOverride, input, cwd, repoKey, sessionId)).reduce(strictestPolicy);
+};
+var isModeStateDegraded = (state) => state?.degraded === true;
+var KILL_REASON = "Stopped by user, this agent was halted from Pushary";
+var strictestScopeVerdict = (scope, paths) => {
+  if (paths.length === 0) return evaluateScope(scope, void 0);
+  let worst = { outcome: "in_scope" };
+  for (const path of paths) {
+    const verdict = evaluateScope(scope, path);
+    if (verdict.outcome === "off_limits") return verdict;
+    if (verdict.outcome === "out_of_scope") worst = verdict;
+  }
+  return worst;
+};
+var survivesDegraded = (config, toolName, toolInputs, cwd, repoKey, sessionId) => toolInputs.length === 1 && resolveAutoResolveOrigin(config, toolName, toolInputs[0], cwd, repoKey, sessionId) === "safe_readonly";
+var resolveGate = (input) => {
+  const { modeState, config, toolName, toolInputs, cwd, repoKey, sessionId } = input;
+  if (modeState.kill) return { kind: "kill", reason: KILL_REASON };
+  const policy = resolvePolicyAcross(config, toolName, modeState.mode, toolInputs, cwd, repoKey, sessionId);
+  const verdict = verdictForPolicy(policy);
+  const autoApproves = verdict === "allow";
+  const autoDenies = verdict === "deny";
+  if (autoDenies) return { kind: "deny", policy, reason: `Denied by policy for ${policy.tool}` };
+  if (isModeStateDegraded(modeState)) {
+    if (autoApproves) {
+      return survivesDegraded(config, toolName, toolInputs, cwd, repoKey, sessionId) ? { kind: "allow", policy, source: "allowlist" } : { kind: "defer", policy };
+    }
+    return { kind: "gate", policy };
+  }
+  const scopeVerdict = modeState.scope ? strictestScopeVerdict(modeState.scope, input.scopePaths ?? []) : { outcome: "no_contract" };
+  if (autoApproves) {
+    if (!scopeRequiresHuman(scopeVerdict)) {
+      return {
+        kind: "allow",
+        policy,
+        source: toolInputs.length === 1 && resolveAutoResolveOrigin(config, toolName, toolInputs[0], cwd, repoKey, sessionId) === "safe_readonly" ? "allowlist" : "policy"
+      };
+    }
+  }
+  const scopeReason = scopeChangeReason(scopeVerdict);
+  return {
+    kind: "gate",
+    policy,
+    scopeReason,
+    scopePath: scopeReason && "path" in scopeVerdict ? scopeVerdict.path : void 0
+  };
+};
+var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
+var modeStateFromResponse = (data) => {
+  const mode = data.override?.mode;
+  return {
+    mode: isApprovalMode(mode) ? mode : null,
+    kill: data.kill === true,
+    policyVersion: toPolicyVersion(data.policyVersion),
+    relayUrl: typeof data.relayUrl === "string" && data.relayUrl.length > 0 ? data.relayUrl : null,
+    trainingConsent: data.trainingConsent === true,
+    // Validated rather than cast: a malformed contract must read as no contract,
+    // never as one that silently matches nothing.
+    scope: isScopeContract(data.scope) ? data.scope : null,
+    degraded: false
+  };
+};
 
 export {
-  isApprovalMode,
   parseAgentQuestionAnswers,
   normalizeInstallSource,
   HOOK_BUDGETS,
@@ -844,21 +1045,17 @@ export {
   effectiveWaitSeconds,
   normalizeRepoRemote,
   localRepoKey,
-  policyArgForms,
   isSafeReadOnlyCommand,
   isAutoApprove,
-  isAutoDeny,
-  verdictForPolicy,
-  selectGoverningRule,
   isValidApiKey,
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
   redactSecrets,
   redactSecretsDeep,
-  classifyDecisionRisk,
   buildDecisionEpisodeFeatures,
-  evaluateScope,
-  scopeRequiresHuman,
-  scopeChangeReason,
-  isScopeContract
+  resolveAutoResolveOrigin,
+  resolvePolicy,
+  KILL_REASON,
+  resolveGate,
+  modeStateFromResponse
 };

package/dist/{chunk-64PXDATC.js → chunk-GM54KC62.js}

@@ -1,9 +1,9 @@
 import {
   guardBinary
-} from "./chunk-PWTKKQQI.js";
+} from "./chunk-HSGEEBBL.js";
 import {
   HOOK_BUDGETS
-} from "./chunk-MQMPG5X4.js";
+} from "./chunk-G3LXA2ZP.js";
 
 // src/claude-config.ts
 import { join } from "path";
@@ -40,23 +40,23 @@ var MIRRORED_TOOLS = [...PRETOOLUSE_GATED_TOOLS, "TodoWrite"].join("|");
 var ESTABLISHED = [1, 0, 0];
 var OBSERVED = [2, 0, 0];
 var CLAUDE_HOOK_EVENTS = [
-  { event: "PreToolUse", binary: "pushary-hook", matcher: GATED_TOOLS, timeout: HOOK_BUDGETS.claude.budgetSeconds, since: ESTABLISHED },
-  { event: "PostToolUse", binary: "pushary-post-hook", matcher: MIRRORED_TOOLS, timeout: 10, since: ESTABLISHED },
-  { event: "Stop", binary: "pushary-stop-hook", timeout: 10, since: ESTABLISHED },
-  { event: "UserPromptSubmit", binary: "pushary-prompt-hook", timeout: 10, since: ESTABLISHED },
-  { event: "Notification", binary: "pushary-notification-hook", matcher: "permission_prompt|idle_prompt|agent_needs_input|agent_completed", timeout: 10, since: ESTABLISHED },
-  { event: "SessionStart", binary: "pushary-session-start-hook", matcher: "startup|resume|clear", timeout: 10, since: ESTABLISHED },
-  { event: "SessionEnd", binary: "pushary-session-end-hook", timeout: 10, since: ESTABLISHED },
-  { event: "StopFailure", binary: "pushary-stopfailure-hook", timeout: 10, since: ESTABLISHED },
-  { event: "PermissionRequest", binary: "pushary-permission-hook", timeout: HOOK_BUDGETS.claude.budgetSeconds, since: ESTABLISHED },
-  { event: "PermissionDenied", binary: "pushary-permission-denied-hook", timeout: 60, since: ESTABLISHED },
+  { event: "PreToolUse", binary: "pushary-hook", matcher: GATED_TOOLS, timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: ESTABLISHED },
+  { event: "PostToolUse", binary: "pushary-post-hook", matcher: MIRRORED_TOOLS, timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "Stop", binary: "pushary-stop-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "UserPromptSubmit", binary: "pushary-prompt-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "Notification", binary: "pushary-notification-hook", matcher: "permission_prompt|idle_prompt|agent_needs_input|agent_completed", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "SessionStart", binary: "pushary-session-start-hook", matcher: "startup|resume|clear", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "SessionEnd", binary: "pushary-session-end-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "StopFailure", binary: "pushary-stopfailure-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "PermissionRequest", binary: "pushary-permission-hook", timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: ESTABLISHED },
+  { event: "PermissionDenied", binary: "pushary-permission-denied-hook", timeout: 60, delivery: "telemetry", since: ESTABLISHED },
   // Observability only. Each carries session shape the island cannot get any other
   // way, and none of them decides anything.
-  { event: "SubagentStart", binary: "pushary-session-start-hook", timeout: 10, since: OBSERVED },
-  { event: "SubagentStop", binary: "pushary-stop-hook", timeout: 10, since: OBSERVED },
-  { event: "PreCompact", binary: "pushary-post-hook", matcher: "manual|auto", timeout: 10, since: OBSERVED },
-  { event: "PostCompact", binary: "pushary-post-hook", matcher: "manual|auto", timeout: 10, since: OBSERVED },
-  { event: "TeammateIdle", binary: "pushary-notification-hook", timeout: 10, since: OBSERVED }
+  { event: "SubagentStart", binary: "pushary-session-start-hook", timeout: 10, delivery: "telemetry", since: OBSERVED },
+  { event: "SubagentStop", binary: "pushary-stop-hook", timeout: 10, delivery: "telemetry", since: OBSERVED },
+  { event: "PreCompact", binary: "pushary-post-hook", matcher: "manual|auto", timeout: 10, delivery: "telemetry", since: OBSERVED },
+  { event: "PostCompact", binary: "pushary-post-hook", matcher: "manual|auto", timeout: 10, delivery: "telemetry", since: OBSERVED },
+  { event: "TeammateIdle", binary: "pushary-notification-hook", timeout: 10, delivery: "telemetry", since: OBSERVED }
 ];
 var supportedClaudeEvents = (version) => CLAUDE_HOOK_EVENTS.filter((hook) => version ? atLeast(version, hook.since) : hook.since === ESTABLISHED);
 

package/dist/chunk-HSGEEBBL.js

@@ -0,0 +1,37 @@
+import {
+  quoteIfNeeded
+} from "./chunk-VT4IVERX.js";
+
+// src/hook-command.ts
+var HOOK_SHELL = "/bin/sh -c";
+var LOCATE = 'B=$(command -v "$0") || exit 0; [ -f "$B" ] || exit 0; [ -x "$B" ] || exit 0';
+var NODE_PRESENT = "command -v node >/dev/null 2>&1 || exit 0";
+var HOOK_GUARD_SCRIPTS = {
+  native_binary: `${LOCATE}; exec "$B"`,
+  node_binary: `${LOCATE}; ${NODE_PRESENT}; exec "$B"`,
+  node_script: `[ -f "$0" ] || exit 0; ${NODE_PRESENT}; exec node "$0"`
+};
+var BINARY_GUARDS = {
+  native: "native_binary",
+  node: "node_binary"
+};
+var guardKindOf = (target) => {
+  switch (target.kind) {
+    case "node":
+      return "node_script";
+    case "binary":
+      return BINARY_GUARDS[target.runtime];
+  }
+};
+var guardHookCommand = (target, platform = process.platform) => {
+  const path = quoteIfNeeded(target.kind === "node" ? target.script : target.path);
+  if (platform === "win32") return target.kind === "node" ? `node ${path}` : path;
+  return `${HOOK_SHELL} '${HOOK_GUARD_SCRIPTS[guardKindOf(target)]}' ${path}`;
+};
+var guardBinary = (path, platform) => guardHookCommand({ kind: "binary", path, runtime: "node" }, platform);
+var guardNodeScript = (script, platform) => guardHookCommand({ kind: "node", script }, platform);
+
+export {
+  guardBinary,
+  guardNodeScript
+};

package/dist/{chunk-ADISVXZL.js → chunk-IGV4KL7B.js}

@@ -1,6 +1,6 @@
 import {
   codexHomeFrom
-} from "./chunk-HVZIHTOO.js";
+} from "./chunk-PHXEADSL.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-GCKAWHFP.js → chunk-JDQY47OW.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   redactSecrets
-} from "./chunk-MQMPG5X4.js";
+} from "./chunk-G3LXA2ZP.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-7PZPJSWI.js → chunk-KTKIZEFT.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-K7CSRGKZ.js";
+} from "./chunk-CIVG746V.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-GFM3STWO.js → chunk-LB6RSCLL.js}

@@ -1,15 +1,14 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS
-} from "./chunk-64PXDATC.js";
+} from "./chunk-GM54KC62.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-NJ7JT26G.js";
+} from "./chunk-VGADRFG6.js";
 import {
   denyReasonFrom,
-  isDeferAnswer,
-  resolveGate
-} from "./chunk-GXIFADGD.js";
+  isDeferAnswer
+} from "./chunk-YHG74UFF.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -29,7 +28,7 @@ import {
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-EXMUM226.js";
+} from "./chunk-Y7BALRVB.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";
@@ -42,8 +41,9 @@ import {
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline,
-  parseAgentQuestionAnswers
-} from "./chunk-MQMPG5X4.js";
+  parseAgentQuestionAnswers,
+  resolveGate
+} from "./chunk-G3LXA2ZP.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
@@ -513,14 +513,16 @@ var handlePreToolUse = async (input) => {
     if (input.tool_name === "AskUserQuestion") {
       return handleAskUserQuestion(apiKey, input);
     }
+    if (verdict.kind === "deny") return deny(verdict.reason);
     if (shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
       return void 0;
     }
     switch (verdict.kind) {
       case "allow":
         return allow();
-      case "deny":
-        return deny(verdict.reason);
+      // No `deny` case: it is handled above the defer, and the compiler enforces
+      // that it stays there. Restoring one here would type-error as unreachable.
+      //
       // State we could not establish, with an auto-approve on the table. No
       // opinion, so Claude Code's own flow runs as if the hook were absent.
       case "defer":

package/dist/{chunk-DOXSWT4Q.js → chunk-OZKRF7MS.js}

@@ -1,16 +1,16 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-MQMPG5X4.js";
+} from "./chunk-G3LXA2ZP.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";
 var GEMINI_MCP_URL = "https://pushary.com/api/mcp/mcp";
 var GEMINI_HOOK_EVENTS = [
-  { event: "BeforeTool", matcher: "run_shell_command|write_file|replace", timeoutMs: HOOK_BUDGETS.gemini.budgetSeconds * 1e3 },
-  { event: "AfterTool", matcher: "run_shell_command|write_file|replace", timeoutMs: 1e4 },
-  { event: "BeforeAgent", timeoutMs: 1e4 },
-  { event: "SessionStart", timeoutMs: 1e4 },
-  { event: "SessionEnd", timeoutMs: 1e4 }
+  { event: "BeforeTool", matcher: "run_shell_command|write_file|replace", delivery: "approval", timeoutMs: HOOK_BUDGETS.gemini.budgetSeconds * 1e3 },
+  { event: "AfterTool", matcher: "run_shell_command|write_file|replace", delivery: "telemetry", timeoutMs: 1e4 },
+  { event: "BeforeAgent", delivery: "telemetry", timeoutMs: 1e4 },
+  { event: "SessionStart", delivery: "telemetry", timeoutMs: 1e4 },
+  { event: "SessionEnd", delivery: "telemetry", timeoutMs: 1e4 }
 ];
 var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 var ensureRecord = (target, key) => {

package/dist/{chunk-HVZIHTOO.js → chunk-PHXEADSL.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-MQMPG5X4.js";
+} from "./chunk-G3LXA2ZP.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";
@@ -14,12 +14,12 @@ var codexHooksJson = () => join(codexHome(), "hooks.json");
 var codexAgentsMd = () => join(codexHome(), "AGENTS.md");
 var codexSkillDir = () => join(codexHome(), "skills", "pushary");
 var CODEX_HOOK_EVENTS = [
-  { event: "PermissionRequest", matcher: "Bash|apply_patch", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Waiting for your phone" },
-  { event: "PreToolUse", matcher: "Bash|apply_patch", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Checking Pushary policy" },
-  { event: "PostToolUse", matcher: "Bash|apply_patch", timeout: 10 },
-  { event: "UserPromptSubmit", timeout: 10 },
-  { event: "Stop", timeout: 10 },
-  { event: "SessionStart", matcher: "startup|resume", timeout: 10 }
+  { event: "PermissionRequest", matcher: "Bash|apply_patch", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Waiting for your phone" },
+  { event: "PreToolUse", matcher: "Bash|apply_patch", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Checking Pushary policy" },
+  { event: "PostToolUse", matcher: "Bash|apply_patch", delivery: "telemetry", timeout: 10 },
+  { event: "UserPromptSubmit", delivery: "telemetry", timeout: 10 },
+  { event: "Stop", delivery: "telemetry", timeout: 10 },
+  { event: "SessionStart", matcher: "startup|resume", delivery: "telemetry", timeout: 10 }
 ];
 var CODEX_EVENT_KEY = {
   PermissionRequest: "permission_request",

package/dist/{chunk-F52SIIDG.js → chunk-QDKJTPAT.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   isValidApiKey
-} from "./chunk-MQMPG5X4.js";
+} from "./chunk-G3LXA2ZP.js";
 
 // src/session.ts
 var IDENTITY_PATH = "/api/v1/server/identity";

package/dist/{chunk-NJ7JT26G.js → chunk-VGADRFG6.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-MQMPG5X4.js";
+} from "./chunk-G3LXA2ZP.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-4QPOMJUB.js → chunk-VKJUVPTJ.js}

@@ -1,9 +1,9 @@
 import {
   hasGeminiHooks
-} from "./chunk-DOXSWT4Q.js";
+} from "./chunk-OZKRF7MS.js";
 import {
   hasCodexHooks
-} from "./chunk-HVZIHTOO.js";
+} from "./chunk-PHXEADSL.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-ERYKGH4J.js → chunk-XIR6N66V.js}

@@ -5,7 +5,7 @@ import {
   generateSessionKey,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-GCKAWHFP.js";
+} from "./chunk-JDQY47OW.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-WEAQQSHQ.js → chunk-XLM6COJA.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VT4IVERX.js";
 import {
   pusharyDir
-} from "./chunk-HVZIHTOO.js";
+} from "./chunk-PHXEADSL.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";