@pushary/agent-hooks 0.89.9 → 0.89.10

package/dist/{chunk-543KNJKC.js → chunk-3SQYKLBW.js}

@@ -4,13 +4,13 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   resolveGlobalBinary
-} from "./chunk-PZA7G4CN.js";
+} from "./chunk-X4ZUUFKV.js";
 import {
   getMachineId
-} from "./chunk-DKDDLF5P.js";
+} from "./chunk-DKWM5T3P.js";
 import {
   pusharyDir
-} from "./chunk-GMI5QZLG.js";
+} from "./chunk-QA72MKIT.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";

package/dist/{chunk-ATBKJNWS.js → chunk-6EKQZA6R.js}

@@ -1,3 +1,7 @@
+import {
+  ASKED_IN_EVERY_MODE_TOOLS
+} from "./chunk-X6RXX2NF.js";
+
 // src/claude-tools.ts
 var PRETOOLUSE_GATED_TOOLS = [
   "Bash",
@@ -8,7 +12,7 @@ var PRETOOLUSE_GATED_TOOLS = [
   "PowerShell",
   "Monitor"
 ];
-var PRETOOLUSE_PHONE_ANSWERED_TOOLS = ["AskUserQuestion", "ExitPlanMode"];
+var PRETOOLUSE_PHONE_ANSWERED_TOOLS = ASKED_IN_EVERY_MODE_TOOLS;
 var POSTTOOLUSE_MIRRORED_TOOLS = [...PRETOOLUSE_GATED_TOOLS, "TodoWrite"];
 var PRETOOLUSE_HANDLED_TOOLS = /* @__PURE__ */ new Set([...PRETOOLUSE_GATED_TOOLS, ...PRETOOLUSE_PHONE_ANSWERED_TOOLS]);
 

package/dist/{chunk-NKHEHEUM.js → chunk-6XUABEX2.js}

@@ -2,7 +2,7 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-PZA7G4CN.js";
+} from "./chunk-X4ZUUFKV.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-I5L6SK5V.js → chunk-BLODMQKJ.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   isValidApiKey
-} from "./chunk-L4C2JXJS.js";
+} from "./chunk-X6RXX2NF.js";
 
 // src/session.ts
 var IDENTITY_PATH = "/api/v1/server/identity";

package/dist/{chunk-DKDDLF5P.js → chunk-DKWM5T3P.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-GMI5QZLG.js";
+} from "./chunk-QA72MKIT.js";
 import {
   writeFileAtomic
 } from "./chunk-XX2V4QS5.js";

package/dist/{chunk-BAE45YLP.js → chunk-FZ73G2RO.js}

@@ -1,12 +1,12 @@
 import {
   hasGeminiHooks
-} from "./chunk-VA7VUNRD.js";
+} from "./chunk-Q223OM5J.js";
 import {
   hasCodexHooks
-} from "./chunk-GMI5QZLG.js";
+} from "./chunk-QA72MKIT.js";
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-L4C2JXJS.js";
+} from "./chunk-X6RXX2NF.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-EJT2ER6G.js → chunk-GSSFSVAQ.js}

@@ -1,11 +1,14 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS,
   PRETOOLUSE_PHONE_ANSWERED_TOOLS
-} from "./chunk-ATBKJNWS.js";
+} from "./chunk-6EKQZA6R.js";
+import {
+  defersToNativeMode
+} from "./chunk-NCVIWGVA.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-VZKXBFUA.js";
+} from "./chunk-3HFK3UXM.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -17,7 +20,7 @@ import {
   readLastUserPrompt,
   repoKeyFor,
   throttlePass
-} from "./chunk-4XZCDSNG.js";
+} from "./chunk-GTZLL7F4.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -25,7 +28,7 @@ import {
   pollForAnswer,
   savePendingQuestion,
   sendNotification
-} from "./chunk-GKAKAOKC.js";
+} from "./chunk-UXHMWF4H.js";
 import {
   deriveAction,
   deriveActionBody,
@@ -33,10 +36,10 @@ import {
   deriveToolTarget,
   describeToolCall,
   scopePathFor
-} from "./chunk-KOPUTJQC.js";
+} from "./chunk-TG3T3M4K.js";
 import {
   getMachineId
-} from "./chunk-DKDDLF5P.js";
+} from "./chunk-DKWM5T3P.js";
 import {
   getApiKey,
   getBaseUrl
@@ -50,9 +53,8 @@ import {
   hookWaitDeadline,
   parseAgentQuestionAnswers,
   parseAgentQuestions,
-  resolveGate,
-  shouldDeferToNativeMode
-} from "./chunk-L4C2JXJS.js";
+  resolveGate
+} from "./chunk-X6RXX2NF.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
@@ -302,15 +304,7 @@ var keylessNoticeOnce = (sessionId) => {
   } catch {
   }
 };
-var nativeDeferOptions = () => {
-  const respect = process.env.PUSHARY_RESPECT_PERMISSION_MODE;
-  const bypass = process.env.PUSHARY_DEFER_BYPASS;
-  return {
-    respectPermissionMode: !(respect === "0" || respect === "false"),
-    deferBypass: bypass === "1" || bypass === "true"
-  };
-};
-var shouldDeferToNativeMode2 = (permissionMode, toolName) => shouldDeferToNativeMode(permissionMode, toolName, nativeDeferOptions());
+var shouldDeferToNativeMode = defersToNativeMode;
 var handedToTerminal = (result) => result.suppressed === true || result.noDevices === true || result.status === "terminal";
 var withLabels = (question) => ({
   ...question,
@@ -487,14 +481,14 @@ var handlePreToolUse = async (input) => {
     const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code", true, input.session_id);
     const verdict = resolveGate(claudeGateInput(modeState, policy, input));
     if (verdict.kind === "kill") return deny(verdict.reason);
+    if (verdict.kind === "deny") return deny(verdict.reason);
     if (input.tool_name === "AskUserQuestion") {
       return handleAskUserQuestion(apiKey, input);
     }
-    if (verdict.kind === "deny") return deny(verdict.reason);
     if (input.tool_name === "ExitPlanMode") {
       return handleExitPlanMode(apiKey, input);
     }
-    if (shouldDeferToNativeMode2(input.permission_mode, input.tool_name)) {
+    if (shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
       return void 0;
     }
     switch (verdict.kind) {
@@ -525,7 +519,7 @@ var toPermissionRequestOutput = (hookOutput) => {
 };
 var handlePermissionRequest = async (input) => {
   if (PRETOOLUSE_HANDLED_TOOLS.has(input.tool_name)) {
-    const reclaimDeferredExec = !PRETOOLUSE_PHONE_ANSWERED_TOOLS.includes(input.tool_name) && shouldDeferToNativeMode2(input.permission_mode, input.tool_name);
+    const reclaimDeferredExec = !PRETOOLUSE_PHONE_ANSWERED_TOOLS.includes(input.tool_name) && shouldDeferToNativeMode(input.permission_mode, input.tool_name);
     if (!reclaimDeferredExec) return void 0;
   }
   if (input.tool_name.startsWith("mcp__pushary__")) return void 0;

package/dist/{chunk-4XZCDSNG.js → chunk-GTZLL7F4.js}

@@ -12,7 +12,7 @@ import {
   savePendingCommand,
   sendNotification,
   waitForAnswer
-} from "./chunk-GKAKAOKC.js";
+} from "./chunk-UXHMWF4H.js";
 import {
   AGENT_IDENTITIES,
   deriveReceiptMeta,
@@ -26,16 +26,16 @@ import {
   summarizeStop,
   taskTitleFrom,
   toolResultErrorText
-} from "./chunk-KOPUTJQC.js";
+} from "./chunk-TG3T3M4K.js";
 import {
   getMachineId
-} from "./chunk-DKDDLF5P.js";
+} from "./chunk-DKWM5T3P.js";
 import {
   withRetry
 } from "./chunk-BSZYIAZL.js";
 import {
   reportedInstallSource
-} from "./chunk-OFRNZWC4.js";
+} from "./chunk-IUWRVTQK.js";
 import {
   getApiKey,
   getBaseUrl
@@ -51,7 +51,7 @@ import {
   pendingCommandEvents,
   resolveAutoResolveOrigin,
   resolvePolicy
-} from "./chunk-L4C2JXJS.js";
+} from "./chunk-X6RXX2NF.js";
 
 // src/policy.ts
 import { createHash } from "crypto";

package/dist/{chunk-PMHTCDEO.js → chunk-IUN6VOKV.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   redactSecrets
-} from "./chunk-L4C2JXJS.js";
+} from "./chunk-X6RXX2NF.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-OFRNZWC4.js → chunk-IUWRVTQK.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-L4C2JXJS.js";
+} from "./chunk-X6RXX2NF.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-J2JZJZKB.js → chunk-KVE5RCQL.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-VA7VUNRD.js";
+} from "./chunk-Q223OM5J.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-A4O5ROZK.js → chunk-MZGWKIUZ.js}

@@ -1,9 +1,9 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-O5B7EK5U.js";
+} from "./chunk-34GN3IPX.js";
 import {
   codexHomeFrom
-} from "./chunk-GMI5QZLG.js";
+} from "./chunk-QA72MKIT.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/chunk-NCVIWGVA.js

@@ -0,0 +1,18 @@
+import {
+  shouldDeferToNativeMode
+} from "./chunk-X6RXX2NF.js";
+
+// src/native-defer.ts
+var nativeDeferOptions = () => {
+  const respect = process.env.PUSHARY_RESPECT_PERMISSION_MODE;
+  const bypass = process.env.PUSHARY_DEFER_BYPASS;
+  return {
+    respectPermissionMode: !(respect === "0" || respect === "false"),
+    deferBypass: bypass === "1" || bypass === "true"
+  };
+};
+var defersToNativeMode = (permissionMode, toolName) => shouldDeferToNativeMode(permissionMode, toolName, nativeDeferOptions());
+
+export {
+  defersToNativeMode
+};

package/dist/{chunk-C623LWJR.js → chunk-OLAGKKSR.js}

@@ -5,7 +5,7 @@ import {
   generateSessionKey,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-PMHTCDEO.js";
+} from "./chunk-IUN6VOKV.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-EA3E74P2.js → chunk-PZRWFWSR.js}

@@ -1,11 +1,11 @@
 import {
   detectClaudeVersion
-} from "./chunk-J2JZJZKB.js";
+} from "./chunk-KVE5RCQL.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "./chunk-BAE45YLP.js";
+} from "./chunk-FZ73G2RO.js";
 import {
   GEMINI_HOOK_BINARY,
   addClaudeMcpServer,
@@ -14,14 +14,14 @@ import {
   addPusharyHooks,
   addPusharyToolPermissions,
   hasGeminiHooks
-} from "./chunk-VA7VUNRD.js";
+} from "./chunk-Q223OM5J.js";
 import {
   guardBinary
-} from "./chunk-AIGDBRIJ.js";
+} from "./chunk-SYUIXXQW.js";
 import {
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "./chunk-PZA7G4CN.js";
+} from "./chunk-X4ZUUFKV.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -32,7 +32,7 @@ import {
   codexHooksJson,
   hasCodexHooks,
   vscodePluginMcp
-} from "./chunk-GMI5QZLG.js";
+} from "./chunk-QA72MKIT.js";
 import {
   readJsonSafe
 } from "./chunk-XX2V4QS5.js";

package/dist/{chunk-VA7VUNRD.js → chunk-Q223OM5J.js}

@@ -1,17 +1,17 @@
 import {
   PRETOOLUSE_GATED_TOOLS,
   PRETOOLUSE_PHONE_ANSWERED_TOOLS
-} from "./chunk-ATBKJNWS.js";
+} from "./chunk-6EKQZA6R.js";
 import {
   guardBinary
-} from "./chunk-AIGDBRIJ.js";
+} from "./chunk-SYUIXXQW.js";
 import {
   isProtectedByScope
-} from "./chunk-GMI5QZLG.js";
+} from "./chunk-QA72MKIT.js";
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-L4C2JXJS.js";
+} from "./chunk-X6RXX2NF.js";
 
 // src/claude-config.ts
 import { join } from "path";
@@ -60,6 +60,7 @@ var CLAUDE_HOOK_EVENTS = [
 var supportedClaudeEvents = (version) => CLAUDE_HOOK_EVENTS.filter((hook) => version ? atLeast(version, hook.since) : hook.since === ESTABLISHED);
 
 // src/claude-config.ts
+import { isDeepStrictEqual } from "util";
 var PUSHARY_MCP_URL = "https://pushary.com/api/mcp/mcp";
 var PUSHARY_PERMISSION_RULE = "mcp__pushary__*";
 var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
@@ -85,14 +86,59 @@ var isPusharyHook = (entry2, scope) => {
     return namesPusharyBinary(command);
   });
 };
+var pusharyMcpServer = (apiKey) => ({
+  type: "http",
+  url: PUSHARY_MCP_URL,
+  headers: { Authorization: `Bearer ${apiKey}` }
+});
 var addClaudeMcpServer = (config, apiKey) => {
   const mcpServers = ensureRecord(config, "mcpServers");
-  mcpServers.pushary = {
-    type: "http",
-    url: PUSHARY_MCP_URL,
-    headers: { Authorization: `Bearer ${apiKey}` }
+  mcpServers.pushary = pusharyMcpServer(apiKey);
+};
+var isClaudeMcpSnapshot = (value) => {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const snapshot = value;
+  return typeof snapshot.hadMcpServers === "boolean" && typeof snapshot.mcpServersWasRecord === "boolean" && (!snapshot.hadMcpServers || snapshot.mcpServersWasRecord || Object.hasOwn(snapshot, "mcpServers")) && typeof snapshot.hadPushary === "boolean" && (!snapshot.hadPushary || Object.hasOwn(snapshot, "pushary")) && (!Object.hasOwn(snapshot, "installedPushary") || asRecord(snapshot.installedPushary)?.type === "http" && asRecord(snapshot.installedPushary)?.url === PUSHARY_MCP_URL);
+};
+var captureClaudeMcpServer = (config, apiKey) => {
+  const mcpServers = asRecord(config.mcpServers);
+  const hadMcpServers = Object.hasOwn(config, "mcpServers");
+  return {
+    hadMcpServers,
+    mcpServersWasRecord: Boolean(mcpServers),
+    ...hadMcpServers && !mcpServers ? { mcpServers: structuredClone(config.mcpServers) } : {},
+    hadPushary: Boolean(mcpServers && Object.hasOwn(mcpServers, "pushary")),
+    ...mcpServers && Object.hasOwn(mcpServers, "pushary") ? { pushary: structuredClone(mcpServers.pushary) } : {},
+    ...apiKey ? { installedPushary: pusharyMcpServer(apiKey) } : {}
   };
 };
+var updateClaudeMcpSnapshot = (snapshot, apiKey) => ({
+  ...snapshot,
+  installedPushary: pusharyMcpServer(apiKey)
+});
+var restoreClaudeMcpServer = (config, snapshot) => {
+  const mcpServers = asRecord(config.mcpServers);
+  const current = asRecord(mcpServers?.pushary);
+  if (Object.hasOwn(snapshot, "installedPushary")) {
+    if (!isDeepStrictEqual(mcpServers?.pushary, snapshot.installedPushary)) return false;
+  } else if (current?.type !== "http" || current.url !== PUSHARY_MCP_URL) {
+    return false;
+  }
+  if (!snapshot.mcpServersWasRecord) {
+    if (Object.keys(mcpServers).length === 1) {
+      if (snapshot.hadMcpServers) config.mcpServers = structuredClone(snapshot.mcpServers);
+      else delete config.mcpServers;
+    } else {
+      delete mcpServers.pushary;
+    }
+  } else if (snapshot.hadPushary) {
+    mcpServers.pushary = structuredClone(snapshot.pushary);
+  } else {
+    delete mcpServers.pushary;
+    if (!snapshot.hadMcpServers && Object.keys(mcpServers).length === 0) delete config.mcpServers;
+  }
+  return true;
+};
 var removeClaudeMcpServers = (config) => {
   let changed = false;
   const removeFrom = (target) => {
@@ -285,6 +331,10 @@ export {
   parseVersion,
   compareVersion,
   addClaudeMcpServer,
+  isClaudeMcpSnapshot,
+  captureClaudeMcpServer,
+  updateClaudeMcpSnapshot,
+  restoreClaudeMcpServer,
   removeClaudeMcpServers,
   addPusharyToolPermissions,
   addPusharyHooks,

package/dist/{chunk-GMI5QZLG.js → chunk-QA72MKIT.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-L4C2JXJS.js";
+} from "./chunk-X6RXX2NF.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";
@@ -268,6 +268,8 @@ var vscodePluginDir = () => join2(homedir2(), ".pushary", "plugins", "vscode");
 var vscodePluginMcp = () => join2(vscodePluginDir(), ".mcp.json");
 var claudeSettingsLocal = () => join2(homedir2(), ".claude", "settings.local.json");
 var pusharyDir = () => join2(homedir2(), ".pushary");
+var claudeMcpReceipt = () => join2(pusharyDir(), "setup", "claude-mcp.json");
+var hermesConfigReceipt = () => join2(pusharyDir(), "setup", "hermes-config.json");
 var codexSkillDir2 = () => join2(codexHome(), "skills", "pushary");
 var codexAgentsMd2 = () => join2(codexHome(), "AGENTS.md");
 var geminiSettings = () => join2(homedir2(), ".gemini", "settings.json");
@@ -306,6 +308,8 @@ export {
   vscodePluginMcp,
   claudeSettingsLocal,
   pusharyDir,
+  claudeMcpReceipt,
+  hermesConfigReceipt,
   codexSkillDir2,
   codexAgentsMd2,
   geminiSettings,

package/dist/{chunk-AIGDBRIJ.js → chunk-SYUIXXQW.js}

@@ -1,6 +1,6 @@
 import {
   quoteIfNeeded
-} from "./chunk-PZA7G4CN.js";
+} from "./chunk-X4ZUUFKV.js";
 
 // src/hook-command.ts
 var HOOK_SHELL = "/bin/sh -c";

package/dist/{chunk-TF247BET.js → chunk-TEZ2FZD6.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-GMI5QZLG.js";
+} from "./chunk-QA72MKIT.js";
 import {
   readJsonSafe
 } from "./chunk-XX2V4QS5.js";

package/dist/{chunk-KOPUTJQC.js → chunk-TG3T3M4K.js}

@@ -5,7 +5,7 @@ import {
   FILE_TARGET_TOOLS,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-L4C2JXJS.js";
+} from "./chunk-X6RXX2NF.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";

package/dist/{chunk-FX5QSMPY.js → chunk-TRVIRETT.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-V6N4Q223.js";
+} from "./chunk-3CUDMTL4.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-U5TQCQ25.js → chunk-TY5HVMXT.js}

@@ -1,6 +1,6 @@
 import {
   getMachineId
-} from "./chunk-DKDDLF5P.js";
+} from "./chunk-DKWM5T3P.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";