@pushary/agent-hooks 0.85.0 → 0.85.2

package/dist/{chunk-WEAQQSHQ.js → chunk-4YMWLMAP.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VT4IVERX.js";
 import {
   pusharyDir
-} from "./chunk-HVZIHTOO.js";
+} from "./chunk-KJW6NKF7.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";

package/dist/{chunk-437T77TY.js → chunk-CWV4CMB6.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-MQMPG5X4.js";
+} from "./chunk-K337LIBD.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-EXMUM226.js → chunk-DPDUB4XF.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-SAF6HGAA.js";
 import {
   reportedInstallSource
-} from "./chunk-437T77TY.js";
+} from "./chunk-CWV4CMB6.js";
 import {
   getApiKey,
   getBaseUrl
@@ -18,19 +18,16 @@ import {
 import {
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
-  classifyDecisionRisk,
-  isApprovalMode,
+  gateOutputFor,
   isAutoApprove,
-  isAutoDeny,
-  isSafeReadOnlyCommand,
-  isScopeContract,
   localRepoKey,
+  modeStateFromResponse,
   normalizeRepoRemote,
-  policyArgForms,
   redactSecrets,
   redactSecretsDeep,
-  selectGoverningRule
-} from "./chunk-MQMPG5X4.js";
+  resolveAutoResolveOrigin,
+  resolvePolicy
+} from "./chunk-K337LIBD.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -120,66 +117,6 @@ var getPolicy = async (apiKey, expectedVersion, agent, repoAware = false, sessio
     throw new Error("Failed to fetch policy and no cached policy available");
   }
 };
-var autoApprove = (tool) => ({
-  tool,
-  timeoutSeconds: 0,
-  timeoutAction: "approve",
-  mode: "terminal_only",
-  pushFirstSeconds: 0
-});
-var resolveAutoResolveOrigin = (config, toolName, toolInput, cwd, repoKey, sessionId) => {
-  const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
-  const arg = args[0];
-  const match = selectGoverningRule(config.policies, toolName, args, repoKey, sessionId);
-  const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
-  if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
-    return "safe_readonly";
-  }
-  return "policy_timeout";
-};
-var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey, sessionId) => {
-  const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
-  const arg = args[0];
-  const match = selectGoverningRule(config.policies, toolName, args, repoKey, sessionId);
-  let base = match?.policy ?? config.policies.find((p) => p.tool === "*") ?? {
-    tool: toolName,
-    timeoutSeconds: config.defaultTimeoutSeconds,
-    timeoutAction: config.defaultTimeoutAction,
-    mode: config.defaultMode ?? "push_first",
-    pushFirstSeconds: config.defaultPushFirstSeconds ?? 20
-  };
-  const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
-  if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
-    base = autoApprove(base.tool);
-  }
-  const wouldAutoApprove = isAutoApprove(base);
-  if (!governedBySpecificRule && wouldAutoApprove && toolName === "Bash" && typeof arg === "string" && classifyDecisionRisk(toolName, arg) === "destructive") {
-    base = {
-      tool: base.tool,
-      timeoutSeconds: config.defaultTimeoutSeconds,
-      timeoutAction: "wait",
-      mode: "push_first",
-      pushFirstSeconds: config.defaultPushFirstSeconds ?? 20
-    };
-  }
-  const effectiveOverride = modeOverride ?? config.modeOverride;
-  if (effectiveOverride) {
-    return { ...base, mode: effectiveOverride };
-  }
-  return base;
-};
-var restraintRank = (policy) => {
-  if (isAutoDeny(policy)) return 4;
-  if (isAutoApprove(policy)) return 0;
-  if (policy.mode === "push_only") return 3;
-  return policy.mode === "terminal_only" || policy.mode === "notify_only" ? 1 : 2;
-};
-var strictestPolicy = (a, b) => restraintRank(b) > restraintRank(a) ? b : a;
-var resolvePolicyAcross = (config, toolName, modeOverride, toolInputs, cwd, repoKey, sessionId) => {
-  if (toolInputs.length === 0) return resolvePolicy(config, toolName, modeOverride, void 0, cwd, repoKey, sessionId);
-  return toolInputs.map((input) => resolvePolicy(config, toolName, modeOverride, input, cwd, repoKey, sessionId)).reduce(strictestPolicy);
-};
-var isModeStateDegraded = (state) => state?.degraded === true;
 var MODE_GRACE_MS = 60 * 1e3;
 var modeStateCacheFile = (apiKey) => {
   const hash = createHash("sha256").update(`mode:${apiKey}`).digest("hex").slice(0, 12);
@@ -220,7 +157,6 @@ var degradedFallback = (apiKey, authoritative = false) => {
   }
   return unknownMode();
 };
-var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
 var MODE_REUSE_MS = CACHE_TTL_MS;
 var readReusableMode = (apiKey, sessionId, maxAgeMs) => {
   const last = readLastGoodMode(apiKey);
@@ -243,19 +179,7 @@ var fetchModeState = async (apiKey, sessionId, reuseWithinMs = 0) => {
     if (!response.ok) {
       return degradedFallback(apiKey, response.status === 401 || response.status === 403);
     }
-    const data = await response.json();
-    const mode = data.override?.mode;
-    const state = {
-      mode: isApprovalMode(mode) ? mode : null,
-      kill: data.kill === true,
-      policyVersion: toPolicyVersion(data.policyVersion),
-      relayUrl: typeof data.relayUrl === "string" && data.relayUrl.length > 0 ? data.relayUrl : null,
-      trainingConsent: data.trainingConsent === true,
-      // Validated rather than cast: a malformed contract must read as no contract,
-      // never as one that silently matches nothing.
-      scope: isScopeContract(data.scope) ? data.scope : null,
-      degraded: false
-    };
+    const state = modeStateFromResponse(await response.json());
     writeLastGoodMode(apiKey, state, sessionId);
     return state;
   } catch {
@@ -265,9 +189,11 @@ var fetchModeState = async (apiKey, sessionId, reuseWithinMs = 0) => {
 var fetchModeOverride = async (apiKey) => (await fetchModeState(apiKey)).mode;
 
 // src/api.ts
+import { randomUUID } from "crypto";
 installProxyDispatcher();
 var askUser = async (apiKey, params, timeoutMs = 15e3) => {
-  const result = await callMcpTool(apiKey, "ask_user", { ...params, wait: false }, { maxRetries: 3, timeoutMs });
+  const identified = params.toolUseId || params.requestId ? params : { ...params, requestId: randomUUID() };
+  const result = await callMcpTool(apiKey, "ask_user", { ...identified, wait: false }, { maxRetries: 3, timeoutMs });
   if (!isAskUserResponse(result)) throw new Error("Invalid ask_user response");
   return result;
 };
@@ -286,7 +212,7 @@ var sendNotification = async (apiKey, params, timeoutMs = 15e3) => {
   await callMcpTool(apiKey, "send_notification", { ...params }, { maxRetries: 3, timeoutMs });
 };
 
-// src/describe.ts
+// ../hook-mapping/src/describe.ts
 import { isAbsolute, relative } from "path";
 var hookPrefixes = {
   Bash: (input) => `bash: ${input.command ?? "(no command)"}`,
@@ -455,6 +381,36 @@ var deriveBlocker = (mode, reason) => {
   return text.slice(0, DECISION_LINE_MAX);
 };
 
+// ../hook-mapping/src/map.ts
+import { basename } from "path";
+var TASK_TITLE_MAX_LENGTH = 120;
+var STOP_SUMMARY_MAX_LENGTH = 200;
+var SESSION_END_ACTIONS = {
+  clear: "Session cleared",
+  logout: "Logged out",
+  resume: "Session suspended",
+  prompt_input_exit: "Session ended",
+  bypass_permissions_disabled: "Session ended",
+  other: "Session ended"
+};
+var countArray = (value) => Array.isArray(value) ? value.length : 0;
+var summarizeFinalMessage = (message) => {
+  if (typeof message !== "string") return "Session ended";
+  const collapsed = message.replace(/\s+/g, " ").trim();
+  if (!collapsed) return "Session ended";
+  return collapsed.slice(0, STOP_SUMMARY_MAX_LENGTH);
+};
+var summarizeStop = (input) => {
+  const running = countArray(input.background_tasks);
+  if (running > 0) return `Paused with ${running} background task${running === 1 ? "" : "s"} still running`;
+  const crons = countArray(input.session_crons);
+  if (crons > 0) return `Idle until a scheduled task wakes it (${crons} pending)`;
+  return summarizeFinalMessage(input.last_assistant_message);
+};
+var sessionStartAction = (source) => source === "resume" ? "Session resumed" : "Session started";
+var sessionEndAction = (reason) => typeof reason === "string" && SESSION_END_ACTIONS[reason] || "Session ended";
+var taskTitleFrom = (prompt) => typeof prompt === "string" ? prompt.replace(/\s+/g, " ").trim().slice(0, TASK_TITLE_MAX_LENGTH) || void 0 : void 0;
+
 // src/pending.ts
 import { join as join2 } from "path";
 import { tmpdir as tmpdir2 } from "os";
@@ -503,7 +459,7 @@ var removePendingSession = (sessionId) => {
 
 // src/repo.ts
 import { existsSync as existsSync3, readFileSync as readFileSync2, statSync as statSync2 } from "fs";
-import { basename, dirname, isAbsolute as isAbsolute2, join as join3, resolve } from "path";
+import { basename as basename2, dirname, isAbsolute as isAbsolute2, join as join3, resolve } from "path";
 var MAX_PARENT_WALK = 64;
 var GIT_FILE_PREFIX = "gitdir:";
 var findGitDir = (startDir) => {
@@ -562,9 +518,9 @@ var deriveRepoKey = (cwd) => {
       const normalized = remote ? normalizeRepoRemote(remote) : void 0;
       if (normalized) return normalized;
       const root = gitDir.endsWith(".git") ? dirname(gitDir) : dir;
-      return localRepoKey(basename(root));
+      return localRepoKey(basename2(root));
     }
-    return localRepoKey(basename(resolve(dir)));
+    return localRepoKey(basename2(resolve(dir)));
   } catch {
     return void 0;
   }
@@ -763,35 +719,13 @@ var codexAllow = () => ({ kind: "allow" });
 var codexDeny = (reason) => ({ kind: "deny", reason });
 var codexPass = () => ({ kind: "pass" });
 var toCodexWire = (event, decision) => {
-  if (event === "PermissionRequest") {
-    if (decision.kind === "allow") {
-      return {
-        hookSpecificOutput: {
-          hookEventName: "PermissionRequest",
-          decision: { behavior: "allow" }
-        }
-      };
-    }
-    if (decision.kind === "deny") {
-      return {
-        hookSpecificOutput: {
-          hookEventName: "PermissionRequest",
-          decision: { behavior: "deny", message: decision.reason }
-        }
-      };
-    }
-    return null;
-  }
-  if (event === "PreToolUse" && decision.kind === "deny") {
-    return {
-      hookSpecificOutput: {
-        hookEventName: "PreToolUse",
-        permissionDecision: "deny",
-        permissionDecisionReason: decision.reason
-      }
-    };
-  }
-  return null;
+  if (decision.kind === "pass") return null;
+  return gateOutputFor(
+    "codex",
+    event,
+    decision.kind,
+    decision.kind === "deny" ? decision.reason : void 0
+  ) ?? null;
 };
 var parseApplyPatchOps = (command) => {
   if (typeof command !== "string") return [];
@@ -869,7 +803,7 @@ var throttlePass = (key, windowMs) => {
 };
 
 // src/events.ts
-import { basename as basename2, join as join6 } from "path";
+import { basename as basename3, join as join6 } from "path";
 import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync4, statSync as statSync5, writeFileSync as writeFileSync5 } from "fs";
 import { tmpdir as tmpdir5 } from "os";
 var INTENT_DIR = join6(tmpdir5(), "pushary-intent");
@@ -1058,7 +992,7 @@ var reportEvent = async (event, options = {}) => {
 var NON_GATED_MIRROR_TOOLS = /* @__PURE__ */ new Set(["TodoWrite"]);
 var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const action = describeToolCall(input.tool_name, input.tool_input, "event");
     const lookup = toPolicyLookup(input.tool_name, input.tool_input);
     const toolResult = input.tool_response ?? input.tool_result;
@@ -1110,13 +1044,12 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
     return void 0;
   }
 };
-var TASK_TITLE_MAX_LENGTH = 120;
 var handleUserPrompt = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const titlesEnabled = process.env.PUSHARY_TASK_TITLES !== "off";
-    const taskTitle = titlesEnabled ? input.prompt?.replace(/\s+/g, " ").trim().slice(0, TASK_TITLE_MAX_LENGTH) || void 0 : void 0;
+    const taskTitle = titlesEnabled ? taskTitleFrom(input.prompt) : void 0;
     if (input.prompt) saveLastPrompt(sessionKey, input.prompt);
     const late = await reconcilePendingQuestions(sessionKey);
     let additionalContext;
@@ -1141,24 +1074,9 @@ var handleUserPrompt = async (input, agent = CLAUDE_CODE_AGENT) => {
     return void 0;
   }
 };
-var STOP_SUMMARY_MAX_LENGTH = 200;
-var summarizeFinalMessage = (message) => {
-  if (typeof message !== "string") return "Session ended";
-  const collapsed = message.replace(/\s+/g, " ").trim();
-  if (!collapsed) return "Session ended";
-  return collapsed.slice(0, STOP_SUMMARY_MAX_LENGTH);
-};
-var countArray = (value) => Array.isArray(value) ? value.length : 0;
-var summarizeStop = (input) => {
-  const running = countArray(input.background_tasks);
-  if (running > 0) return `Paused with ${running} background task${running === 1 ? "" : "s"} still running`;
-  const crons = countArray(input.session_crons);
-  if (crons > 0) return `Idle until a scheduled task wakes it (${crons} pending)`;
-  return summarizeFinalMessage(input.last_assistant_message);
-};
 var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const late = await reconcilePendingQuestions(sessionKey);
     const tasks = [
@@ -1194,8 +1112,8 @@ var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
 };
 var handleSessionStart = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
-    const action = input.source === "resume" ? "Session resumed" : "Session started";
+    const projectName = basename3(input.cwd ?? process.cwd());
+    const action = sessionStartAction(input.source);
     await reportEvent({
       event: "session_start",
       agentType: agent.type,
@@ -1206,18 +1124,10 @@ var handleSessionStart = async (input, agent = CLAUDE_CODE_AGENT) => {
   } catch {
   }
 };
-var SESSION_END_ACTIONS = {
-  clear: "Session cleared",
-  logout: "Logged out",
-  resume: "Session suspended",
-  prompt_input_exit: "Session ended",
-  bypass_permissions_disabled: "Session ended",
-  other: "Session ended"
-};
 var handleSessionEnd = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
-    const action = typeof input.reason === "string" && SESSION_END_ACTIONS[input.reason] || "Session ended";
+    const projectName = basename3(input.cwd ?? process.cwd());
+    const action = sessionEndAction(input.reason);
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const late = await reconcilePendingQuestions(sessionKey);
     if (late.length > 0) {
@@ -1240,7 +1150,7 @@ var NOTIFICATION_PUSH_TYPES = /* @__PURE__ */ new Set(["idle_prompt", "agent_nee
 var NOTIFICATION_THROTTLE_MS = 60 * 1e3;
 var handleNotification = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const notifType = input.notification_type ?? input.type ?? "";
     const sessionKey = input.session_id || DEFAULT_SESSION;
     if (NOTIFICATION_PUSH_TYPES.has(notifType)) {
@@ -1313,7 +1223,7 @@ var handleStopFailure = async (input, agent = CLAUDE_CODE_AGENT) => {
     } catch {
       return;
     }
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const mode = await fetchModeState(apiKey, input.session_id, MODE_REUSE_MS).catch(() => null);
     if (mode?.kill || mode?.mode === "terminal_only") return;
     const reason = describeStopFailure(input.error);
@@ -1332,10 +1242,6 @@ var handleStopFailure = async (input, agent = CLAUDE_CODE_AGENT) => {
 export {
   policyRequestFor,
   getPolicy,
-  resolveAutoResolveOrigin,
-  resolvePolicy,
-  resolvePolicyAcross,
-  isModeStateDegraded,
   fetchModeState,
   fetchModeOverride,
   askUser,

package/dist/{chunk-7PZPJSWI.js → chunk-GM74DUMS.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-K7CSRGKZ.js";
+} from "./chunk-KZIGJLOX.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-DOXSWT4Q.js → chunk-GY3I353G.js}

@@ -1,16 +1,16 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-MQMPG5X4.js";
+} from "./chunk-K337LIBD.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";
 var GEMINI_MCP_URL = "https://pushary.com/api/mcp/mcp";
 var GEMINI_HOOK_EVENTS = [
-  { event: "BeforeTool", matcher: "run_shell_command|write_file|replace", timeoutMs: HOOK_BUDGETS.gemini.budgetSeconds * 1e3 },
-  { event: "AfterTool", matcher: "run_shell_command|write_file|replace", timeoutMs: 1e4 },
-  { event: "BeforeAgent", timeoutMs: 1e4 },
-  { event: "SessionStart", timeoutMs: 1e4 },
-  { event: "SessionEnd", timeoutMs: 1e4 }
+  { event: "BeforeTool", matcher: "run_shell_command|write_file|replace", delivery: "approval", timeoutMs: HOOK_BUDGETS.gemini.budgetSeconds * 1e3 },
+  { event: "AfterTool", matcher: "run_shell_command|write_file|replace", delivery: "telemetry", timeoutMs: 1e4 },
+  { event: "BeforeAgent", delivery: "telemetry", timeoutMs: 1e4 },
+  { event: "SessionStart", delivery: "telemetry", timeoutMs: 1e4 },
+  { event: "SessionEnd", delivery: "telemetry", timeoutMs: 1e4 }
 ];
 var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 var ensureRecord = (target, key) => {

package/dist/chunk-HSGEEBBL.js

@@ -0,0 +1,37 @@
+import {
+  quoteIfNeeded
+} from "./chunk-VT4IVERX.js";
+
+// src/hook-command.ts
+var HOOK_SHELL = "/bin/sh -c";
+var LOCATE = 'B=$(command -v "$0") || exit 0; [ -f "$B" ] || exit 0; [ -x "$B" ] || exit 0';
+var NODE_PRESENT = "command -v node >/dev/null 2>&1 || exit 0";
+var HOOK_GUARD_SCRIPTS = {
+  native_binary: `${LOCATE}; exec "$B"`,
+  node_binary: `${LOCATE}; ${NODE_PRESENT}; exec "$B"`,
+  node_script: `[ -f "$0" ] || exit 0; ${NODE_PRESENT}; exec node "$0"`
+};
+var BINARY_GUARDS = {
+  native: "native_binary",
+  node: "node_binary"
+};
+var guardKindOf = (target) => {
+  switch (target.kind) {
+    case "node":
+      return "node_script";
+    case "binary":
+      return BINARY_GUARDS[target.runtime];
+  }
+};
+var guardHookCommand = (target, platform = process.platform) => {
+  const path = quoteIfNeeded(target.kind === "node" ? target.script : target.path);
+  if (platform === "win32") return target.kind === "node" ? `node ${path}` : path;
+  return `${HOOK_SHELL} '${HOOK_GUARD_SCRIPTS[guardKindOf(target)]}' ${path}`;
+};
+var guardBinary = (path, platform) => guardHookCommand({ kind: "binary", path, runtime: "node" }, platform);
+var guardNodeScript = (script, platform) => guardHookCommand({ kind: "node", script }, platform);
+
+export {
+  guardBinary,
+  guardNodeScript
+};

package/dist/{chunk-ERYKGH4J.js → chunk-JBLRZGTT.js}

@@ -5,7 +5,7 @@ import {
   generateSessionKey,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-GCKAWHFP.js";
+} from "./chunk-T54OT7IY.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-4QPOMJUB.js → chunk-JT5NQQCE.js}

@@ -1,9 +1,9 @@
 import {
   hasGeminiHooks
-} from "./chunk-DOXSWT4Q.js";
+} from "./chunk-GY3I353G.js";
 import {
   hasCodexHooks
-} from "./chunk-HVZIHTOO.js";
+} from "./chunk-KJW6NKF7.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;