@pushary/agent-hooks 0.87.2 → 0.87.3

package/dist/bin/pushary-opencode-hook.js

@@ -0,0 +1,329 @@
+#!/usr/bin/env node
+import {
+  isGatingMoment,
+  recordKeylessMoment
+} from "../chunk-VIHRP25S.js";
+import {
+  readHookInput
+} from "../chunk-6CUUA7HO.js";
+import {
+  denyReasonFrom,
+  isDeferAnswer
+} from "../chunk-YHG74UFF.js";
+import {
+  fetchModeState,
+  getPolicy,
+  handlePostToolUse,
+  handleStop,
+  handleUserPrompt,
+  policyRequestFor,
+  readLastPrompt,
+  repoKeyFor
+} from "../chunk-VOE4SYPR.js";
+import {
+  DEFAULT_SESSION,
+  askUser,
+  cancelQuestion,
+  savePendingQuestion,
+  sendNotification,
+  waitForAnswer
+} from "../chunk-J3YDT4HM.js";
+import {
+  OPENCODE_TOOL_NAMES,
+  deriveActionBody,
+  deriveBlocker,
+  deriveToolTarget,
+  describeToolCall,
+  scopePathFor
+} from "../chunk-7J67NYK4.js";
+import {
+  getMachineId
+} from "../chunk-RN3NOEJF.js";
+import "../chunk-BSZYIAZL.js";
+import "../chunk-SAF6HGAA.js";
+import "../chunk-KBS53WOE.js";
+import "../chunk-7QLSKOSU.js";
+import "../chunk-KZERVKTD.js";
+import {
+  getApiKey
+} from "../chunk-2UMNXADU.js";
+import {
+  DECISION_LINE_MAX,
+  KILL_REASON,
+  OPENCODE_APPROVAL_EVENT,
+  effectiveWaitSeconds,
+  gateOutputFor,
+  hookWaitClamped,
+  hookWaitDeadline,
+  resolveGate
+} from "../chunk-DMW54VWK.js";
+
+// bin/pushary-opencode-hook.ts
+import { basename } from "path";
+
+// src/opencode-adapter.ts
+var OPENCODE_AGENT = { type: "opencode", label: "OpenCode" };
+var toOpenCodePolicyLookup = (toolName, toolInput) => ({
+  tool: OPENCODE_TOOL_NAMES[toolName] ?? toolName,
+  input: toolInput
+});
+var openCodeAllow = () => ({ kind: "allow" });
+var openCodeDeny = (reason) => ({ kind: "deny", reason });
+var openCodePass = () => ({ kind: "pass" });
+var openCodeTimeoutDecision = (timeoutAction, denyReason = "No response within timeout") => {
+  if (timeoutAction === "approve") return openCodeAllow();
+  if (timeoutAction === "deny") return openCodeDeny(denyReason);
+  return openCodePass();
+};
+var toOpenCodeWire = (decision) => {
+  if (decision.kind === "pass") return null;
+  const output = gateOutputFor(
+    "opencode",
+    OPENCODE_APPROVAL_EVENT,
+    decision.kind,
+    decision.kind === "deny" ? decision.reason : void 0
+  );
+  return output ?? null;
+};
+
+// bin/pushary-opencode-hook.ts
+var START_MS = Date.now();
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var outstanding;
+var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
+  while (Date.now() < deadlineMs) {
+    const remaining = Math.min(Math.max(deadlineMs - Date.now(), 1e3), 3e4);
+    let answer;
+    try {
+      answer = await waitForAnswer(apiKey, correlationId, remaining);
+    } catch {
+      if (Date.now() + pollInterval >= deadlineMs) break;
+      await sleep(pollInterval);
+      continue;
+    }
+    if (answer.answered) return answer;
+    if (Date.now() + pollInterval >= deadlineMs) break;
+    await sleep(pollInterval);
+  }
+  return { answered: false };
+};
+var agentNameFor = (input) => `${OPENCODE_AGENT.label} - ${basename(input.cwd ?? process.cwd())}`;
+var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode, pollInterval = 2e3) => {
+  const projectName = basename(input.cwd ?? process.cwd());
+  const description = describeToolCall(lookup.tool, lookup.input, "hook");
+  const result = await askUser(apiKey, {
+    question: `Allow ${description}?`,
+    type: "confirm",
+    context: `Agent wants to run this in ${projectName}`,
+    agentName: agentNameFor(input),
+    sessionId: input.session_id,
+    machineId: getMachineId(),
+    toolName: lookup.tool,
+    toolTarget: deriveToolTarget(lookup.tool, lookup.input),
+    intent: readLastPrompt(input.session_id || DEFAULT_SESSION),
+    action: description.slice(0, DECISION_LINE_MAX),
+    blocker: deriveBlocker(mode),
+    actionBody: deriveActionBody(lookup.tool, lookup.input),
+    repoKey: repoKeyFor(input.cwd)
+  });
+  if (result.suppressed || result.noDevices) {
+    return {
+      answer: { answered: false },
+      correlationId: result.correlationId,
+      suppressed: !!result.suppressed,
+      noDevices: !!result.noDevices,
+      clampCut: false
+    };
+  }
+  outstanding = { apiKey, correlationId: result.correlationId };
+  const now = Date.now();
+  const deadline = hookWaitDeadline(START_MS, waitSeconds, "opencode", now);
+  const clampCut = hookWaitClamped(START_MS, waitSeconds, "opencode", now);
+  const answer = await pollForAnswer(apiKey, result.correlationId, deadline, pollInterval);
+  outstanding = void 0;
+  return { answer, correlationId: result.correlationId, suppressed: false, noDevices: false, clampCut };
+};
+var notifyApprovalNeeded = async (apiKey, input, lookup) => {
+  try {
+    await sendNotification(apiKey, {
+      title: "Agent needs approval",
+      body: describeToolCall(lookup.tool, lookup.input, "hook"),
+      agentName: agentNameFor(input),
+      sessionId: input.session_id,
+      machineId: getMachineId()
+    });
+  } catch {
+  }
+};
+var handlePushOnly = async (apiKey, input, lookup, timeoutSeconds, timeoutAction) => {
+  let pushed;
+  try {
+    pushed = await pushQuestion(
+      apiKey,
+      input,
+      lookup,
+      effectiveWaitSeconds(timeoutAction, timeoutSeconds, "opencode"),
+      "push_only"
+    );
+  } catch {
+    return openCodeTimeoutDecision(timeoutAction, "Push notification failed, denying per policy");
+  }
+  const { answer, correlationId, suppressed, clampCut } = pushed;
+  if (suppressed) {
+    await cancelQuestion(apiKey, correlationId).catch(() => {
+    });
+    return openCodePass();
+  }
+  if (answer.answered) {
+    if (isDeferAnswer(answer.value)) return openCodePass();
+    return answer.value === "yes" ? openCodeAllow() : openCodeDeny(denyReasonFrom(answer.value, answer.note));
+  }
+  savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);
+  if (clampCut) return openCodePass();
+  return openCodeTimeoutDecision(timeoutAction);
+};
+var handlePushFirst = async (apiKey, input, lookup, pushFirstSeconds) => {
+  let pushed;
+  try {
+    pushed = await pushQuestion(apiKey, input, lookup, pushFirstSeconds, "push_first", 1500);
+  } catch {
+    return openCodePass();
+  }
+  const { answer, correlationId, suppressed, noDevices } = pushed;
+  if (suppressed) {
+    await cancelQuestion(apiKey, correlationId).catch(() => {
+    });
+    return openCodePass();
+  }
+  if (noDevices) return openCodePass();
+  if (answer.answered) {
+    if (isDeferAnswer(answer.value)) return openCodePass();
+    return answer.value === "yes" ? openCodeAllow() : openCodeDeny(denyReasonFrom(answer.value, answer.note));
+  }
+  savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);
+  return openCodePass();
+};
+var decidePermission = async (input) => {
+  let apiKey;
+  try {
+    apiKey = getApiKey();
+  } catch {
+    try {
+      const lookup = toOpenCodePolicyLookup(input.tool_name ?? "", input.tool_input ?? {});
+      if (isGatingMoment(lookup.tool, lookup.input)) {
+        recordKeylessMoment({
+          ts: Date.now(),
+          tool: lookup.tool,
+          project: basename(input.cwd ?? process.cwd()),
+          sessionId: input.session_id
+        });
+      }
+    } catch {
+    }
+    return openCodePass();
+  }
+  try {
+    const modeState = await fetchModeState(apiKey, input.session_id);
+    const policyRequest = policyRequestFor(OPENCODE_AGENT.type);
+    const lookup = toOpenCodePolicyLookup(input.tool_name ?? "", input.tool_input ?? {});
+    const config = await getPolicy(
+      apiKey,
+      modeState.policyVersion,
+      policyRequest.agent,
+      policyRequest.repoAware,
+      input.session_id
+    );
+    const scopePath = modeState.scope ? scopePathFor(lookup.tool, lookup.input, input.cwd) : void 0;
+    const verdict = resolveGate({
+      modeState,
+      config,
+      toolName: lookup.tool,
+      toolInputs: [lookup.input],
+      scopePaths: scopePath ? [scopePath] : [],
+      cwd: input.cwd,
+      repoKey: repoKeyFor(input.cwd),
+      sessionId: input.session_id
+    });
+    if (verdict.kind === "kill") return openCodeDeny(KILL_REASON);
+    if (verdict.kind === "allow") return openCodeAllow();
+    if (verdict.kind === "deny") return openCodeDeny(verdict.reason);
+    if (verdict.kind === "defer") return openCodePass();
+    const toolPolicy = verdict.policy;
+    switch (toolPolicy.mode) {
+      case "push_only":
+        return handlePushOnly(apiKey, input, lookup, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction);
+      case "terminal_only":
+        return openCodePass();
+      case "push_first":
+        return handlePushFirst(apiKey, input, lookup, toolPolicy.pushFirstSeconds);
+      case "notify_only":
+        await notifyApprovalNeeded(apiKey, input, lookup);
+        return openCodePass();
+      default:
+        return handlePushFirst(apiKey, input, lookup, toolPolicy.pushFirstSeconds);
+    }
+  } catch {
+    return openCodePass();
+  }
+};
+var withdrawn = false;
+var emit = (wire) => {
+  if (!wire || withdrawn) return;
+  try {
+    process.stdout.write(JSON.stringify(wire));
+  } catch {
+  }
+};
+var withdrawAndExit = () => {
+  withdrawn = true;
+  const pending = outstanding;
+  outstanding = void 0;
+  if (!pending) {
+    process.exit(0);
+  }
+  cancelQuestion(pending.apiKey, pending.correlationId).catch(() => {
+  }).finally(() => process.exit(0));
+  setTimeout(() => process.exit(0), 3e3).unref();
+};
+var main = async () => {
+  process.on("SIGTERM", withdrawAndExit);
+  const input = await readHookInput("opencode");
+  if (!input) {
+    process.exit(0);
+  }
+  try {
+    switch (input.hook_event_name) {
+      case OPENCODE_APPROVAL_EVENT:
+        emit(toOpenCodeWire(await decidePermission(input)));
+        break;
+      case "tool.execute.after": {
+        const lookup = toOpenCodePolicyLookup(input.tool_name ?? "", input.tool_input ?? {});
+        await handlePostToolUse({
+          tool_name: lookup.tool,
+          tool_input: lookup.input,
+          tool_result: input.tool_result,
+          cwd: input.cwd,
+          session_id: input.session_id
+        }, OPENCODE_AGENT);
+        break;
+      }
+      case "chat.message":
+        await handleUserPrompt({
+          prompt: input.prompt,
+          cwd: input.cwd,
+          session_id: input.session_id
+        }, OPENCODE_AGENT);
+        break;
+      case "session.idle":
+        await handleStop({
+          cwd: input.cwd,
+          session_id: input.session_id
+        }, OPENCODE_AGENT);
+        break;
+      default:
+        break;
+    }
+  } catch {
+  }
+};
+main();

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,23 +1,24 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-HJ44HIUW.js";
+} from "../chunk-OMA2OZRE.js";
 import "../chunk-ATBKJNWS.js";
-import "../chunk-7MBDFNUC.js";
+import "../chunk-VIHRP25S.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-V2XPF77V.js";
+import "../chunk-VOE4SYPR.js";
 import "../chunk-J3YDT4HM.js";
+import "../chunk-7J67NYK4.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-Y3UTTFTZ.js";
+import "../chunk-KBS53WOE.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-7YJS2VTG.js";
+import "../chunk-DMW54VWK.js";
 
 // bin/pushary-permission-denied-hook.ts
 var main = async () => {

package/dist/bin/pushary-permission-hook.js

@@ -1,23 +1,24 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-HJ44HIUW.js";
+} from "../chunk-OMA2OZRE.js";
 import "../chunk-ATBKJNWS.js";
-import "../chunk-7MBDFNUC.js";
+import "../chunk-VIHRP25S.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-V2XPF77V.js";
+import "../chunk-VOE4SYPR.js";
 import "../chunk-J3YDT4HM.js";
+import "../chunk-7J67NYK4.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-Y3UTTFTZ.js";
+import "../chunk-KBS53WOE.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-7YJS2VTG.js";
+import "../chunk-DMW54VWK.js";
 
 // bin/pushary-permission-hook.ts
 var main = async () => {

package/dist/bin/pushary-post-hook.js

@@ -4,16 +4,17 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handlePostToolUse
-} from "../chunk-V2XPF77V.js";
+} from "../chunk-VOE4SYPR.js";
 import "../chunk-J3YDT4HM.js";
+import "../chunk-7J67NYK4.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-Y3UTTFTZ.js";
+import "../chunk-KBS53WOE.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-7YJS2VTG.js";
+import "../chunk-DMW54VWK.js";
 
 // bin/pushary-post-hook.ts
 var main = async () => {

package/dist/bin/pushary-prompt-hook.js

@@ -4,16 +4,17 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleUserPrompt
-} from "../chunk-V2XPF77V.js";
+} from "../chunk-VOE4SYPR.js";
 import "../chunk-J3YDT4HM.js";
+import "../chunk-7J67NYK4.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-Y3UTTFTZ.js";
+import "../chunk-KBS53WOE.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-7YJS2VTG.js";
+import "../chunk-DMW54VWK.js";
 
 // bin/pushary-prompt-hook.ts
 var main = async () => {

package/dist/bin/pushary-session-end-hook.js

@@ -4,16 +4,17 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleSessionEnd
-} from "../chunk-V2XPF77V.js";
+} from "../chunk-VOE4SYPR.js";
 import "../chunk-J3YDT4HM.js";
+import "../chunk-7J67NYK4.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-Y3UTTFTZ.js";
+import "../chunk-KBS53WOE.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-7YJS2VTG.js";
+import "../chunk-DMW54VWK.js";
 
 // bin/pushary-session-end-hook.ts
 var main = async () => {

package/dist/bin/pushary-session-start-hook.js

@@ -4,16 +4,17 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleSessionStart
-} from "../chunk-V2XPF77V.js";
+} from "../chunk-VOE4SYPR.js";
 import "../chunk-J3YDT4HM.js";
+import "../chunk-7J67NYK4.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-Y3UTTFTZ.js";
+import "../chunk-KBS53WOE.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-7YJS2VTG.js";
+import "../chunk-DMW54VWK.js";
 
 // bin/pushary-session-start-hook.ts
 var main = async () => {