@pushary/agent-hooks 0.87.2 → 0.87.4

package/dist/{chunk-ZZE6FN7T.js → chunk-K42RXJPG.js}

@@ -1,7 +1,11 @@
+import {
+  PRETOOLUSE_GATED_TOOLS,
+  PRETOOLUSE_PHONE_ANSWERED_TOOLS
+} from "./chunk-ATBKJNWS.js";
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-7YJS2VTG.js";
+} from "./chunk-DMW54VWK.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";
@@ -102,7 +106,54 @@ var missingGeminiHookEvents = (settings) => {
   }).map((definition) => definition.event);
 };
 
+// src/agent-version.ts
+var parseVersion = (raw) => {
+  const match = raw.match(/(\d+)\.(\d+)\.(\d+)/);
+  return match ? [Number(match[1]), Number(match[2]), Number(match[3])] : null;
+};
+var compareVersion = (a, b) => {
+  for (let index = 0; index < 3; index++) {
+    if (a[index] !== b[index]) return a[index] < b[index] ? -1 : 1;
+  }
+  return 0;
+};
+var atLeast = (version, floor) => compareVersion(version, floor) >= 0;
+
+// src/claude-events.ts
+var GATED_TOOLS = [...PRETOOLUSE_GATED_TOOLS, ...PRETOOLUSE_PHONE_ANSWERED_TOOLS].join("|");
+var MIRRORED_TOOLS = [...PRETOOLUSE_GATED_TOOLS, "TodoWrite"].join("|");
+var ESTABLISHED = [1, 0, 0];
+var OBSERVED = [2, 0, 0];
+var CLAUDE_HOOK_EVENTS = [
+  { event: "PreToolUse", binary: "pushary-hook", matcher: GATED_TOOLS, timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: ESTABLISHED },
+  { event: "PostToolUse", binary: "pushary-post-hook", matcher: MIRRORED_TOOLS, timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "Stop", binary: "pushary-stop-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "UserPromptSubmit", binary: "pushary-prompt-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "Notification", binary: "pushary-notification-hook", matcher: "permission_prompt|idle_prompt|agent_needs_input|agent_completed", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "SessionStart", binary: "pushary-session-start-hook", matcher: "startup|resume|clear", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "SessionEnd", binary: "pushary-session-end-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "StopFailure", binary: "pushary-stopfailure-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
+  { event: "PermissionRequest", binary: "pushary-permission-hook", timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: ESTABLISHED },
+  { event: "PermissionDenied", binary: "pushary-permission-denied-hook", timeout: 60, delivery: "telemetry", since: ESTABLISHED },
+  // Observability only. Each carries session shape the island cannot get any other
+  // way, and none of them decides anything.
+  { event: "SubagentStart", binary: "pushary-session-start-hook", timeout: 10, delivery: "telemetry", since: OBSERVED },
+  { event: "SubagentStop", binary: "pushary-stop-hook", timeout: 10, delivery: "telemetry", since: OBSERVED },
+  { event: "PreCompact", binary: "pushary-post-hook", matcher: "manual|auto", timeout: 10, delivery: "telemetry", since: OBSERVED },
+  { event: "PostCompact", binary: "pushary-post-hook", matcher: "manual|auto", timeout: 10, delivery: "telemetry", since: OBSERVED },
+  { event: "TeammateIdle", binary: "pushary-notification-hook", timeout: 10, delivery: "telemetry", since: OBSERVED },
+  // An MCP server asking the person for a value, answered from the phone rather
+  // than the terminal. No matcher: Claude Code matches this event on the MCP
+  // server's name, and we have no business preferring one server over another.
+  { event: "Elicitation", binary: "pushary-elicitation-hook", timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: OBSERVED, cliOnly: true }
+];
+var supportedClaudeEvents = (version) => CLAUDE_HOOK_EVENTS.filter((hook) => version ? atLeast(version, hook.since) : hook.since === ESTABLISHED);
+
 export {
+  parseVersion,
+  compareVersion,
+  CLAUDE_HOOK_EVENTS,
+  supportedClaudeEvents,
   GEMINI_HOOK_BINARY,
   addGeminiMcpServer,
   addGeminiHooks,

package/dist/{chunk-Y3UTTFTZ.js → chunk-KBS53WOE.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-7YJS2VTG.js";
+} from "./chunk-DMW54VWK.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-A4I5JGCW.js → chunk-KFAH6KRE.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   isValidApiKey
-} from "./chunk-7YJS2VTG.js";
+} from "./chunk-DMW54VWK.js";
 
 // src/session.ts
 var IDENTITY_PATH = "/api/v1/server/identity";

package/dist/{chunk-LT2VLPUK.js → chunk-KULUNLRO.js}

@@ -1,6 +1,9 @@
+import {
+  openCodeConfigDirFrom
+} from "./chunk-ZGC3W23N.js";
 import {
   codexHomeFrom
-} from "./chunk-B3V2H6SA.js";
+} from "./chunk-NAPRGHZ3.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";
@@ -223,6 +226,14 @@ var agentProbes = (home = homedir2()) => ({
     // someone running only Insiders still has VS Code.
     configMarkers: vscodeSettingsCandidates(home).map((path) => dirname(path))
   },
+  opencode: {
+    binary: "opencode",
+    paths: [],
+    // Resolved rather than spelled: OpenCode honours OPENCODE_CONFIG_DIR and then
+    // XDG_CONFIG_HOME, and `~/.opencode` — the obvious guess — is a path it has
+    // never used.
+    configMarkers: [openCodeConfigDirFrom(home)]
+  },
   // "Other" is a set of printed instructions for any MCP or HTTP client. There is
   // nothing to detect, and it must never be auto-selected.
   custom: { binary: null, paths: [], configMarkers: [] }
@@ -252,6 +263,7 @@ var instructionBody = (label) => `## Pushary notifications and approvals
 You have Pushary MCP tools that reach the user on their phone. Use them proactively. Do not wait for the user to ask.
 
 - When you need the user to make a decision or answer a clarifying question, call \`ask_user\` instead of guessing or stalling. Use type "confirm" for yes/no, "select" for a fixed set of options, and "input" for free text. \`ask_user\` blocks until the user replies or it times out, so you do not need a separate wait step.
+- Ask once, on one channel. If you also have a built-in way to prompt the user, use that or \`ask_user\` for a given question, never both. \`ask_user\` is the one that reaches the user when they are away from this machine, so prefer it. Raising both strands the user in whichever prompt you are not waiting on.
 - Before any risky or irreversible step (deleting files, force pushing, spending money, sending external messages), call \`ask_user\` with type "confirm" and wait for approval.
 - Before starting a multi-step run that will change several files, call \`propose_scope\` once with the paths you expect to change, anything you promise not to touch, and what done means. The user agrees to the boundary in one tap. A ratified boundary NARROWS what may proceed without asking, it does not pre-approve work inside it, so an action that would normally need approval still needs it. Skip it for a single quick edit, and do not propose a new scope mid-run just to widen one: if you need to go outside the agreed scope, do the work and let the approval that follows widen it.
 - When you are blocked, stuck, or hit an error you cannot resolve on your own, call \`send_notification\` so the user knows, and call \`ask_user\` if you need a decision to continue.
@@ -314,6 +326,9 @@ var hasInstructionBlock = (filePath) => {
   }
 };
 
+// src/hooks-spec.ts
+var CURSOR_GATE_EVENTS = ["beforeShellExecution", "beforeMCPExecution"];
+
 export {
   registerPluginLocation,
   unregisterPluginLocation,
@@ -330,5 +345,6 @@ export {
   renderProjectAgentInstructions,
   writeInstructionBlock,
   removeInstructionBlock,
-  hasInstructionBlock
+  hasInstructionBlock,
+  CURSOR_GATE_EVENTS
 };

package/dist/{chunk-B3V2H6SA.js → chunk-NAPRGHZ3.js}

@@ -1,7 +1,10 @@
+import {
+  canonicalJson
+} from "./chunk-GIRT7677.js";
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-7YJS2VTG.js";
+} from "./chunk-DMW54VWK.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";
@@ -20,7 +23,11 @@ var CODEX_HOOK_EVENTS = [
   { event: "PostToolUse", matcher: "Bash|apply_patch", delivery: "telemetry", timeout: 10 },
   { event: "UserPromptSubmit", delivery: "telemetry", timeout: 10 },
   { event: "Stop", delivery: "telemetry", timeout: 10 },
-  { event: "SessionStart", matcher: "startup|resume", delivery: "telemetry", timeout: 10 }
+  { event: "SessionStart", matcher: "startup|resume", delivery: "telemetry", timeout: 10 },
+  // Codex caps SessionEnd at 3s and defaults it to 1s, unlike every other event
+  // here. It also runs synchronously whatever `async` says, so the handler must
+  // fit the window rather than assume the 10s Claude Code allows.
+  { event: "SessionEnd", delivery: "telemetry", timeout: 3 }
 ];
 var CODEX_EVENT_KEY = {
   PermissionRequest: "permission_request",
@@ -28,8 +35,10 @@ var CODEX_EVENT_KEY = {
   PostToolUse: "post_tool_use",
   UserPromptSubmit: "user_prompt_submit",
   Stop: "stop",
-  SessionStart: "session_start"
+  SessionStart: "session_start",
+  SessionEnd: "session_end"
 };
+var codexEventKeyOf = (event) => event.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toLowerCase();
 var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 var ensureRecord = (target, key) => {
   const existing = asRecord(target[key]);
@@ -121,19 +130,39 @@ var missingCodexHookEvents = (config) => {
     return !Array.isArray(entries) || !entries.some(isPusharyCodexHook);
   }).map((definition) => definition.event);
 };
-var canonicalJson = (value) => {
-  if (value === null || typeof value !== "object") return JSON.stringify(value);
-  if (Array.isArray(value)) return "[" + value.map(canonicalJson).join(",") + "]";
-  const obj = value;
-  return "{" + Object.keys(obj).sort().map((key) => JSON.stringify(key) + ":" + canonicalJson(obj[key])).join(",") + "}";
-};
 var codexHookTrustHash = (definition, command) => {
-  const hook = { async: false, command, timeout: definition.timeout, type: "command" };
+  const hook = { command, timeout: definition.timeout, type: "command" };
   if (definition.statusMessage) hook.statusMessage = definition.statusMessage;
-  const identity = { event_name: CODEX_EVENT_KEY[definition.event], hooks: [hook] };
-  if (definition.matcher) identity.matcher = definition.matcher;
+  const entry = { hooks: [hook] };
+  if (definition.matcher) entry.matcher = definition.matcher;
+  return codexEntryTrustHash(CODEX_EVENT_KEY[definition.event], entry);
+};
+var codexEntryTrustHash = (eventKey, entry) => {
+  const hooks = Array.isArray(entry.hooks) ? entry.hooks : [];
+  const identity = {
+    event_name: eventKey,
+    hooks: hooks.map((hook) => ({ async: false, ...asRecord(hook) }))
+  };
+  if (typeof entry.matcher === "string") identity.matcher = entry.matcher;
   return "sha256:" + createHash("sha256").update(canonicalJson(identity), "utf8").digest("hex");
 };
+var codexTrustSchemeAgrees = (hooksConfig, config, hooksJsonPath) => {
+  const hooks = asRecord(hooksConfig?.hooks);
+  const state = asRecord(asRecord(config.hooks)?.state);
+  if (!hooks || !state) return false;
+  for (const [event, entries] of Object.entries(hooks)) {
+    if (!Array.isArray(entries)) continue;
+    const eventKey = CODEX_EVENT_KEY[event] ?? codexEventKeyOf(event);
+    for (const [index, entry] of entries.entries()) {
+      const record = asRecord(entry);
+      if (!record) continue;
+      const stored = asRecord(state[`${hooksJsonPath}:${eventKey}:${index}:0`])?.trusted_hash;
+      if (typeof stored !== "string") continue;
+      if (stored === codexEntryTrustHash(eventKey, record)) return true;
+    }
+  }
+  return false;
+};
 var codexHookPositions = (hooksConfig) => {
   const hooks = asRecord(hooksConfig?.hooks);
   const positions = {};
@@ -199,10 +228,20 @@ var addCodexHookTrust = (config, hooksJsonPath, command, positions) => {
     const position = positions[definition.event];
     if (!position) continue;
     const key = codexHookStateKey(hooksJsonPath, definition.event, position);
+    const ours = codexHookTrustHash(definition, command);
     const existing = asRecord(state[key]) ?? {};
-    state[key] = { ...existing, trusted_hash: codexHookTrustHash(definition, command) };
+    state[key] = { ...existing, trusted_hash: ours };
+    for (const stale of staleTrustKeys(state, hooksJsonPath, definition.event, key, ours)) {
+      delete state[stale];
+    }
   }
 };
+var staleTrustKeys = (state, hooksJsonPath, event, currentKey, ourHash) => {
+  const prefix = `${hooksJsonPath}:${CODEX_EVENT_KEY[event]}:`;
+  return Object.keys(state).filter(
+    (key) => key !== currentKey && key.startsWith(prefix) && asRecord(state[key])?.trusted_hash === ourHash
+  );
+};
 
 // src/setup/paths.ts
 import { homedir as homedir2 } from "os";
@@ -237,8 +276,10 @@ export {
   removeCodexHooks,
   hasCodexHooks,
   missingCodexHookEvents,
+  codexTrustSchemeAgrees,
   codexHookPositions,
   untrustedCodexHookEvents,
+  removeCodexHookTrust,
   removeCodexSettings,
   addCodexHookTrust,
   claudeSettings,

package/dist/{chunk-HJ44HIUW.js → chunk-OMA2OZRE.js}

@@ -5,25 +5,19 @@ import {
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-7MBDFNUC.js";
+} from "./chunk-VIHRP25S.js";
 import {
   denyReasonFrom,
   isDeferAnswer
 } from "./chunk-YHG74UFF.js";
 import {
-  deriveAction,
-  deriveActionBody,
-  deriveBlocker,
-  deriveToolTarget,
-  describeToolCall,
   fetchModeState,
   getPolicy,
   readLastPrompt,
   readLastUserPrompt,
   repoKeyFor,
-  scopePathFor,
   throttlePass
-} from "./chunk-V2XPF77V.js";
+} from "./chunk-VOE4SYPR.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -32,6 +26,14 @@ import {
   savePendingQuestion,
   sendNotification
 } from "./chunk-J3YDT4HM.js";
+import {
+  deriveAction,
+  deriveActionBody,
+  deriveBlocker,
+  deriveToolTarget,
+  describeToolCall,
+  scopePathFor
+} from "./chunk-7J67NYK4.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";
@@ -48,7 +50,7 @@ import {
   hookWaitDeadline,
   parseAgentQuestionAnswers,
   resolveGate
-} from "./chunk-7YJS2VTG.js";
+} from "./chunk-DMW54VWK.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";

package/dist/{chunk-ECEUMWBH.js → chunk-QLMX5LLV.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   redactSecrets
-} from "./chunk-7YJS2VTG.js";
+} from "./chunk-DMW54VWK.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-XW5CHAQX.js → chunk-QXZ2CKRK.js}

@@ -1,9 +1,9 @@
 import {
   hasGeminiHooks
-} from "./chunk-ZZE6FN7T.js";
+} from "./chunk-K42RXJPG.js";
 import {
   hasCodexHooks
-} from "./chunk-B3V2H6SA.js";
+} from "./chunk-NAPRGHZ3.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-JAICP7BA.js → chunk-TD3M232T.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-A4I5JGCW.js";
+} from "./chunk-KFAH6KRE.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-WLLBFDVY.js → chunk-TV3UFGT7.js}

@@ -5,7 +5,7 @@ import {
   generateSessionKey,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-ECEUMWBH.js";
+} from "./chunk-QLMX5LLV.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-7MBDFNUC.js → chunk-VIHRP25S.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-7YJS2VTG.js";
+} from "./chunk-DMW54VWK.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";