@pushary/agent-hooks 0.87.3 → 0.88.0

package/dist/{chunk-OMA2OZRE.js → chunk-UTQCV46U.js}

@@ -5,7 +5,7 @@ import {
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-VIHRP25S.js";
+} from "./chunk-4VYELDAH.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -17,7 +17,7 @@ import {
   readLastUserPrompt,
   repoKeyFor,
   throttlePass
-} from "./chunk-VOE4SYPR.js";
+} from "./chunk-MNXG6IIM.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -33,7 +33,7 @@ import {
   deriveToolTarget,
   describeToolCall,
   scopePathFor
-} from "./chunk-7J67NYK4.js";
+} from "./chunk-F5W3AY6L.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";
@@ -49,8 +49,10 @@ import {
   hookWaitClamped,
   hookWaitDeadline,
   parseAgentQuestionAnswers,
-  resolveGate
-} from "./chunk-DMW54VWK.js";
+  parseAgentQuestions,
+  resolveGate,
+  shouldDeferToNativeMode
+} from "./chunk-3JL64GVE.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
@@ -107,10 +109,10 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
         return void 0;
     }
   }
-  if (result.suppressed) {
+  if (result.suppressed || result.status === "terminal") {
     await cancelQuestion(apiKey, result.correlationId).catch(() => {
     });
-    return ask("You are at the keyboard, approve here.");
+    return ask(result.suppressed ? "You are at the keyboard, approve here." : "Delivery mode is Terminal, approve here.");
   }
   if (result.noDevices) {
     switch (timeoutAction) {
@@ -300,58 +302,21 @@ var keylessNoticeOnce = (sessionId) => {
   } catch {
   }
 };
-var FULL_DEFER_MODES = /* @__PURE__ */ new Set(["plan", "auto", "dontAsk"]);
-var ACCEPT_EDITS_DEFER_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit", "NotebookEdit"]);
-var nativeModeGatingDisabled = () => {
-  const flag = process.env.PUSHARY_RESPECT_PERMISSION_MODE;
-  return flag === "0" || flag === "false";
-};
-var shouldDeferToNativeMode = (permissionMode, toolName) => {
-  if (nativeModeGatingDisabled()) return false;
-  if (typeof permissionMode !== "string") return false;
-  if (FULL_DEFER_MODES.has(permissionMode)) return true;
-  if (permissionMode === "acceptEdits" && ACCEPT_EDITS_DEFER_TOOLS.has(toolName)) return true;
-  if (permissionMode === "bypassPermissions") {
-    const flag = process.env.PUSHARY_DEFER_BYPASS;
-    return flag === "1" || flag === "true";
-  }
-  return false;
-};
-var MAX_PHONE_QUESTIONS = 4;
-var parseQuestion = (raw) => {
-  const q = raw;
-  if (!q || typeof q.question !== "string") return void 0;
-  const options = Array.isArray(q.options) ? q.options.flatMap((option) => {
-    if (!option || typeof option !== "object") return [];
-    const value = option;
-    if (typeof value.label !== "string" || value.label.length === 0) return [];
-    return [{
-      label: value.label,
-      ...typeof value.description === "string" ? { description: value.description } : {}
-    }];
-  }) : [];
-  const labels = options.map((option) => option.label);
-  if (labels.length < 2) return void 0;
+var nativeDeferOptions = () => {
+  const respect = process.env.PUSHARY_RESPECT_PERMISSION_MODE;
+  const bypass = process.env.PUSHARY_DEFER_BYPASS;
   return {
-    question: q.question,
-    header: typeof q.header === "string" ? q.header : void 0,
-    multiSelect: q.multiSelect === true,
-    options,
-    labels
+    respectPermissionMode: !(respect === "0" || respect === "false"),
+    deferBypass: bypass === "1" || bypass === "true"
   };
 };
-var parseQuestions = (toolInput) => {
-  const questions = toolInput.questions;
-  if (!Array.isArray(questions) || questions.length === 0) return void 0;
-  if (questions.length > MAX_PHONE_QUESTIONS) return void 0;
-  const parsed = [];
-  for (const raw of questions) {
-    const one = parseQuestion(raw);
-    if (!one || parsed.some((question) => question.question === one.question)) return void 0;
-    parsed.push(one);
-  }
-  return parsed;
-};
+var shouldDeferToNativeMode2 = (permissionMode, toolName) => shouldDeferToNativeMode(permissionMode, toolName, nativeDeferOptions());
+var handedToTerminal = (result) => result.suppressed === true || result.noDevices === true || result.status === "terminal";
+var withLabels = (question) => ({
+  ...question,
+  labels: question.options.map((option) => option.label)
+});
+var parseQuestions = (toolInput) => parseAgentQuestions(toolInput)?.map(withLabels);
 var questionContext = (question, index, total, project) => {
   const subject = question.header ? `${question.header}: your agent is asking in ${project}` : `Your agent is asking in ${project}`;
   return total > 1 ? `${subject} (${index + 1} of ${total})` : subject;
@@ -376,7 +341,7 @@ var askAsOneCard = async (apiKey, input, parsed, projectName, deadline) => {
   } catch {
     return void 0;
   }
-  if (result.suppressed || result.noDevices) {
+  if (handedToTerminal(result)) {
     await cancelQuestion(apiKey, result.correlationId).catch(() => {
     });
     return void 0;
@@ -411,7 +376,7 @@ var askQuestionByQuestion = async (apiKey, input, parsed, projectName, deadline)
     } catch {
       return void 0;
     }
-    if (result.suppressed || result.noDevices) {
+    if (handedToTerminal(result)) {
       await cancelQuestion(apiKey, result.correlationId).catch(() => {
       });
       return void 0;
@@ -461,7 +426,7 @@ var handleExitPlanMode = async (apiKey, input) => {
   } catch {
     return void 0;
   }
-  if (result.suppressed || result.noDevices) {
+  if (handedToTerminal(result)) {
     await cancelQuestion(apiKey, result.correlationId).catch(() => {
     });
     return void 0;
@@ -524,7 +489,7 @@ var handlePreToolUse = async (input) => {
     if (input.tool_name === "ExitPlanMode") {
       return handleExitPlanMode(apiKey, input);
     }
-    if (shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
+    if (shouldDeferToNativeMode2(input.permission_mode, input.tool_name)) {
       return void 0;
     }
     switch (verdict.kind) {
@@ -555,7 +520,7 @@ var toPermissionRequestOutput = (hookOutput) => {
 };
 var handlePermissionRequest = async (input) => {
   if (PRETOOLUSE_HANDLED_TOOLS.has(input.tool_name)) {
-    const reclaimDeferredExec = !PRETOOLUSE_PHONE_ANSWERED_TOOLS.includes(input.tool_name) && shouldDeferToNativeMode(input.permission_mode, input.tool_name);
+    const reclaimDeferredExec = !PRETOOLUSE_PHONE_ANSWERED_TOOLS.includes(input.tool_name) && shouldDeferToNativeMode2(input.permission_mode, input.tool_name);
     if (!reclaimDeferredExec) return void 0;
   }
   if (input.tool_name.startsWith("mcp__pushary__")) return void 0;
@@ -636,7 +601,7 @@ var handlePermissionDenied = async (input) => {
     } catch {
       return void 0;
     }
-    if (result.suppressed || result.noDevices) {
+    if (handedToTerminal(result)) {
       await cancelQuestion(apiKey, result.correlationId).catch(() => {
       });
       return void 0;

package/dist/{chunk-VL5ZNK6V.js → chunk-VHHVGVFQ.js}

@@ -4,7 +4,7 @@ import {
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-DMW54VWK.js";
+} from "./chunk-3JL64GVE.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";
@@ -228,10 +228,20 @@ var addCodexHookTrust = (config, hooksJsonPath, command, positions) => {
     const position = positions[definition.event];
     if (!position) continue;
     const key = codexHookStateKey(hooksJsonPath, definition.event, position);
+    const ours = codexHookTrustHash(definition, command);
     const existing = asRecord(state[key]) ?? {};
-    state[key] = { ...existing, trusted_hash: codexHookTrustHash(definition, command) };
+    state[key] = { ...existing, trusted_hash: ours };
+    for (const stale of staleTrustKeys(state, hooksJsonPath, definition.event, key, ours)) {
+      delete state[stale];
+    }
   }
 };
+var staleTrustKeys = (state, hooksJsonPath, event, currentKey, ourHash) => {
+  const prefix = `${hooksJsonPath}:${CODEX_EVENT_KEY[event]}:`;
+  return Object.keys(state).filter(
+    (key) => key !== currentKey && key.startsWith(prefix) && asRecord(state[key])?.trusted_hash === ourHash
+  );
+};
 
 // src/setup/paths.ts
 import { homedir as homedir2 } from "os";

package/dist/{chunk-KBS53WOE.js → chunk-VSCSZ2LI.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-DMW54VWK.js";
+} from "./chunk-3JL64GVE.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-YYTLTEGU.js → chunk-WXCHB6BO.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-YX6ZKCC5.js";
+} from "./chunk-67TNJVJW.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-TV3UFGT7.js → chunk-XFHMGVMX.js}

@@ -5,7 +5,7 @@ import {
   generateSessionKey,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-QLMX5LLV.js";
+} from "./chunk-LEYXXXRN.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/src/index.js

@@ -1,8 +1,8 @@
 import {
   handlePreToolUse
-} from "../chunk-OMA2OZRE.js";
+} from "../chunk-UTQCV46U.js";
 import "../chunk-ATBKJNWS.js";
-import "../chunk-VIHRP25S.js";
+import "../chunk-4VYELDAH.js";
 import "../chunk-YHG74UFF.js";
 import {
   fetchModeOverride,
@@ -12,17 +12,17 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-VOE4SYPR.js";
+} from "../chunk-MNXG6IIM.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
 } from "../chunk-J3YDT4HM.js";
-import "../chunk-7J67NYK4.js";
+import "../chunk-F5W3AY6L.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-KBS53WOE.js";
+import "../chunk-VSCSZ2LI.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import {
@@ -31,7 +31,7 @@ import {
 } from "../chunk-2UMNXADU.js";
 import {
   resolvePolicy
-} from "../chunk-DMW54VWK.js";
+} from "../chunk-3JL64GVE.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.87.3",
+  "version": "0.88.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",