@pushary/agent-hooks 0.95.4 → 0.95.5

package/dist/{chunk-7VVX6HQG.js → chunk-WDKHZRAS.js}

@@ -21,6 +21,166 @@ var COWORK_STANDING_INSTRUCTIONS = `Pushary is connected as a custom connector.
 - Cancel a question when it is no longer needed. Once this turn ends, reopen Cowork for follow-up work; this connector cannot restart it.
 - If Pushary tools are missing or disabled, report that once and continue within my authorization. Do not claim a notification or approval was delivered.`;
 
+// ../contracts/src/agent-manifest.ts
+var defaults = {
+  hasStoredIdentity: true,
+  hookSource: null,
+  policyAgent: null,
+  repoAware: false,
+  disconnectable: false,
+  managedProvider: false,
+  enforcement: "cooperative",
+  connectVia: "Plain MCP",
+  setupCommand: null,
+  setupChoice: null,
+  setupGuide: "",
+  enforcementDetail: "Cooperative. The agent chooses when to ask; no native permission interception.",
+  capabilityNote: "",
+  documented: true
+};
+var AGENTS = {
+  claude_code: {
+    ...defaults,
+    label: "Claude Code",
+    hookSource: "claude",
+    policyAgent: "claude_code",
+    repoAware: true,
+    disconnectable: true,
+    managedProvider: true,
+    enforcement: "enforced",
+    connectVia: "Native hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Shell, writes and edits, subject to Claude Code permission mode and explicit policy."
+  },
+  claude_chat: {
+    ...defaults,
+    label: "Claude Chat",
+    connectVia: "Custom MCP connector",
+    setupGuide: "[Claude.ai and Claude Desktop setup](/docs/agents/guides/claude-desktop)"
+  },
+  claude_cowork: {
+    ...defaults,
+    label: "Claude Cowork",
+    connectVia: "Custom MCP connector + optional Cowork skill",
+    setupGuide: "[Cowork setup](/docs/agents/guides/claude-desktop#use-it-in-cowork)",
+    enforcementDetail: COWORK_CONNECTOR_LIMIT
+  },
+  codex: {
+    ...defaults,
+    label: "Codex",
+    hookSource: "codex",
+    policyAgent: "codex",
+    repoAware: true,
+    disconnectable: true,
+    managedProvider: true,
+    enforcement: "enforced",
+    connectVia: "Native hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Shell and apply_patch edits through native permission hooks; requires a compatible Codex runtime."
+  },
+  chatgpt: {
+    ...defaults,
+    label: "ChatGPT",
+    connectVia: "Custom MCP connector",
+    setupGuide: "[ChatGPT setup](/docs/agents/guides/chatgpt)"
+  },
+  gemini_cli: {
+    ...defaults,
+    label: "Gemini CLI",
+    hookSource: "gemini",
+    policyAgent: "gemini_cli",
+    repoAware: true,
+    disconnectable: true,
+    managedProvider: true,
+    enforcement: "enforced",
+    connectVia: "Native hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Shell, writes and edits through native BeforeTool hooks."
+  },
+  hermes: {
+    ...defaults,
+    label: "Hermes",
+    policyAgent: "hermes",
+    enforcement: "enforced",
+    connectVia: "Native Python plugin + approval transport",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Hermes dangerous-command approvals when the Pushary transport is selected; optional PUSHARY_GATE_TOOLS gates named tools.",
+    capabilityNote: "Uses the Python plugin, not a macOS bridge HookSource. CLI disconnect and managed-provider controls are not implemented for Hermes."
+  },
+  cursor: {
+    ...defaults,
+    label: "Cursor",
+    hookSource: "cursor",
+    policyAgent: "cursor",
+    disconnectable: true,
+    enforcement: "enforced",
+    connectVia: "Editor plugin hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "With installed hooks: shell, MCP execution and Write/Delete/Edit tool calls. Plain MCP remains cooperative."
+  },
+  vscode: {
+    ...defaults,
+    label: "VS Code",
+    hookSource: "vscode",
+    policyAgent: "vscode",
+    enforcement: "enforced",
+    connectVia: "Agent plugin hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "PreToolUse approval hooks from the installed agent plugin; the host decides which events it exposes.",
+    capabilityNote: "Has both a bridge HookSource and a per-agent policy profile. CLI disconnect and managed-provider controls are not implemented for VS Code."
+  },
+  opencode: {
+    ...defaults,
+    label: "OpenCode",
+    hookSource: "opencode",
+    policyAgent: "opencode",
+    repoAware: true,
+    disconnectable: true,
+    enforcement: "enforced",
+    connectVia: "Generated plugin + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Shell, writes, edits and web fetches when OpenCode itself asks for permission."
+  },
+  windsurf: {
+    ...defaults,
+    label: "Windsurf",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    setupChoice: "Other"
+  },
+  unknown: {
+    ...defaults,
+    label: "Agent",
+    documented: false
+  },
+  lovable: {
+    ...defaults,
+    label: "Lovable",
+    setupGuide: "[Lovable setup](/docs/agents/guides/lovable)"
+  },
+  mcp: {
+    ...defaults,
+    hasStoredIdentity: false,
+    label: "Any MCP client",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    setupChoice: "Other"
+  },
+  http: {
+    ...defaults,
+    hasStoredIdentity: false,
+    label: "No-code and HTTP",
+    connectVia: "REST with a Bearer token",
+    setupGuide: "[Connect any agent](/docs/agents/connect-any-agent)"
+  }
+};
+var HOOK_SOURCES = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.hookSource === null ? [] : [agent.hookSource]));
+var POLICY_AGENTS = [...Object.values(AGENTS).flatMap((agent) => agent.policyAgent === null ? [] : [agent.policyAgent]), "*"];
+var AGENT_LABELS_BY_TYPE = Object.fromEntries(
+  Object.entries(AGENTS).flatMap(([id, agent]) => agent.hasStoredIdentity ? [[id, agent.label]] : [])
+);
+var DISCONNECTABLE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.disconnectable ? [agent.hookSource] : []));
+var REPO_AWARE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.repoAware ? [agent.policyAgent] : []));
+var MANAGED_PROVIDERS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.managedProvider ? [agent.hookSource] : []));
+
 // ../contracts/src/index.ts
 var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
@@ -140,21 +300,6 @@ var hookWaitDeadline = (startMs, policyWaitSeconds, agent, nowMs) => {
 };
 var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + hookMaxWaitSeconds(agent) * 1e3 < nowMs + Math.max(policyWaitSeconds, 0) * 1e3;
 var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
-var HOOK_SOURCES = ["claude", "codex", "gemini", "cursor", "vscode", "opencode"];
-var AGENT_LABELS_BY_TYPE = {
-  claude_code: "Claude Code",
-  claude_chat: "Claude Chat",
-  claude_cowork: "Claude Cowork",
-  codex: "Codex",
-  chatgpt: "ChatGPT",
-  gemini_cli: "Gemini CLI",
-  hermes: "Hermes",
-  cursor: "Cursor",
-  vscode: "VS Code",
-  opencode: "OpenCode",
-  windsurf: "Windsurf",
-  unknown: "Agent"
-};
 var OPENCODE_APPROVAL_EVENT = "permission.ask";
 var CURSOR_GATE_EVENTS = ["beforeShellExecution", "beforeMCPExecution", "preToolUse"];
 var HOOK_LOCATOR_BINARY = "pushary-bridge";
@@ -1111,6 +1256,17 @@ var shouldDeferToNativeMode = (permissionMode, toolName, options = {}) => {
 var ASKED_IN_EVERY_MODE_TOOLS = ["AskUserQuestion", "ExitPlanMode"];
 var ASKED_IN_EVERY_MODE = new Set(ASKED_IN_EVERY_MODE_TOOLS);
 var isAskedInEveryMode = (toolName) => ASKED_IN_EVERY_MODE.has(toolName);
+var PRETOOLUSE_GATED_TOOLS = [
+  "Bash",
+  "Write",
+  "Edit",
+  "MultiEdit",
+  "NotebookEdit",
+  "PowerShell",
+  "Monitor"
+];
+var PRETOOLUSE_HANDLED_TOOLS = /* @__PURE__ */ new Set([...PRETOOLUSE_GATED_TOOLS, ...ASKED_IN_EVERY_MODE_TOOLS]);
+var isPermissionRequestOwnedByPreToolUse = (toolName, permissionMode, defers = shouldDeferToNativeMode) => PRETOOLUSE_HANDLED_TOOLS.has(toolName) && (isAskedInEveryMode(toolName) || !defers(permissionMode, toolName));
 var resolveGate = (input) => {
   const { modeState, config, toolName, toolInputs, cwd, repoKey, sessionId } = input;
   if (isPusharyOwnTool(toolName)) {
@@ -1375,6 +1531,11 @@ export {
   CLAUDE_CONNECTOR_STEPS,
   CLAUDE_CONNECTOR_TEST,
   COWORK_STANDING_INSTRUCTIONS,
+  HOOK_SOURCES,
+  AGENT_LABELS_BY_TYPE,
+  DISCONNECTABLE_AGENTS,
+  REPO_AWARE_AGENTS,
+  MANAGED_PROVIDERS,
   normalizeKeyScope,
   parseAgentQuestion,
   parseAgentQuestions,
@@ -1384,8 +1545,6 @@ export {
   hookWaitDeadline,
   hookWaitClamped,
   effectiveWaitSeconds,
-  HOOK_SOURCES,
-  AGENT_LABELS_BY_TYPE,
   OPENCODE_APPROVAL_EVENT,
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
@@ -1406,6 +1565,8 @@ export {
   isPusharyOwnTool,
   shouldDeferToNativeMode,
   ASKED_IN_EVERY_MODE_TOOLS,
+  PRETOOLUSE_GATED_TOOLS,
+  isPermissionRequestOwnedByPreToolUse,
   resolveGate,
   modeStateFromResponse,
   stoppedOutput,

package/dist/{chunk-HPM47TEO.js → chunk-WRDLHR2F.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-MDDKA4QM.js";
+} from "./chunk-2ZTL3PGN.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-7VVX6HQG.js";
+} from "./chunk-WDKHZRAS.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-ND52YE7L.js → chunk-XLOELLAS.js}

@@ -7,22 +7,22 @@ import {
 } from "./chunk-L4ZCFMWW.js";
 import {
   getMachineId
-} from "./chunk-O7ODXFII.js";
+} from "./chunk-N4VNLISN.js";
 import {
   pusharyDir
-} from "./chunk-W5GH5GTX.js";
+} from "./chunk-OW6AZDY2.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "./chunk-3N4FT4WQ.js";
+} from "./chunk-S5CMLR35.js";
 import {
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic,
   writeJsonAtomicDurable
-} from "./chunk-MNWDOXX6.js";
+} from "./chunk-KAVDAZ7A.js";
 import {
   getApiKey
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-2BE7ZVWP.js → chunk-XS33QBJA.js}

@@ -12,7 +12,7 @@ import { randomUUID } from "crypto";
 var isPolicyConfig = (data) => {
   if (!data || typeof data !== "object") return false;
   const d = data;
-  return Array.isArray(d.policies) && typeof d.defaultTimeoutSeconds === "number" && typeof d.defaultTimeoutAction === "string";
+  return (d.resolvedAgent === void 0 || typeof d.resolvedAgent === "string") && Array.isArray(d.policies) && typeof d.defaultTimeoutSeconds === "number" && typeof d.defaultTimeoutAction === "string";
 };
 var isAskUserResponse = (data) => {
   if (!data || typeof data !== "object") return false;
@@ -45,13 +45,24 @@ var waitForAnswer = async (apiKey, correlationId, timeoutMs = 3e4, signal) => {
   if (!isWaitForAnswerResponse(result)) throw new Error("Invalid wait_for_answer response");
   return result;
 };
+var WAIT_RESPONSE_GRACE_MS = 2e3;
+var MIN_LONG_POLL_MS = 1e3;
+var MAX_LONG_POLL_MS = 3e4;
+var nextLongPollMs = (deadlineMs, nowMs) => {
+  const hold = Math.min(deadlineMs - nowMs - WAIT_RESPONSE_GRACE_MS, MAX_LONG_POLL_MS);
+  return hold >= MIN_LONG_POLL_MS ? hold : null;
+};
 var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
   const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
   while (Date.now() < deadlineMs) {
-    const remaining = Math.min(Math.max(deadlineMs - Date.now(), 1e3), 3e4);
+    const hold = nextLongPollMs(deadlineMs, Date.now());
+    if (hold === null) {
+      await sleep(Math.max(0, deadlineMs - Date.now()));
+      continue;
+    }
     let answer;
     try {
-      answer = await waitForAnswer(apiKey, correlationId, remaining, AbortSignal.timeout(Math.max(1, deadlineMs - Date.now())));
+      answer = await waitForAnswer(apiKey, correlationId, hold, AbortSignal.timeout(Math.max(1, deadlineMs - Date.now())));
     } catch {
       const late = await withdrawQuestion(apiKey, correlationId);
       return late.answered ? late : STOPPED;
@@ -93,6 +104,7 @@ export {
   isLocalQuestionHandoff,
   askUser,
   waitForAnswer,
+  nextLongPollMs,
   cancelQuestion,
   withdrawQuestion,
   waitForQuestion,

package/dist/{chunk-57NOPUBK.js → chunk-Z2UWFEJW.js}

@@ -1,16 +1,16 @@
 import {
   detectClaudeVersion
-} from "./chunk-TR6DBXO3.js";
+} from "./chunk-6AEM5RCS.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-CVZP67ST.js";
+} from "./chunk-HGUZOUB2.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "./chunk-TMOCSYJK.js";
+} from "./chunk-HBHEX3JQ.js";
 import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_BINARY,
@@ -21,10 +21,10 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-TKA2L2BU.js";
+} from "./chunk-2D7BAOMY.js";
 import {
   guardBinary
-} from "./chunk-GGX5QTBG.js";
+} from "./chunk-3AJIK5AO.js";
 import {
   resolveGlobalBinDir,
   resolveGlobalBinary
@@ -40,14 +40,14 @@ import {
   codexHooksJson,
   hasCodexHooks,
   vscodePluginMcp
-} from "./chunk-W5GH5GTX.js";
+} from "./chunk-OW6AZDY2.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "./chunk-MNWDOXX6.js";
+} from "./chunk-KAVDAZ7A.js";
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-7VVX6HQG.js";
+} from "./chunk-WDKHZRAS.js";
 
 // src/reapply.ts
 import { join } from "path";

package/dist/src/index.js

@@ -1,8 +1,8 @@
 import {
   handlePreToolUse
-} from "../chunk-U24ERDPE.js";
-import "../chunk-AGQA72IH.js";
-import "../chunk-EEJ6EQMI.js";
+} from "../chunk-67YNQ3QA.js";
+import "../chunk-D62EONG3.js";
+import "../chunk-UCS65VVR.js";
 import "../chunk-YHG74UFF.js";
 import {
   fetchAccountPublicKey
@@ -15,28 +15,28 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-MQO7J2OJ.js";
+} from "../chunk-HCMM3BOW.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
-} from "../chunk-2BE7ZVWP.js";
-import "../chunk-LVU3Q43J.js";
-import "../chunk-YE37HYN3.js";
-import "../chunk-O7ODXFII.js";
-import "../chunk-W5GH5GTX.js";
+} from "../chunk-XS33QBJA.js";
+import "../chunk-BDI2MXTT.js";
+import "../chunk-IVQMNLSA.js";
+import "../chunk-N4VNLISN.js";
+import "../chunk-OW6AZDY2.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-MNWDOXX6.js";
+import "../chunk-KAVDAZ7A.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
 import {
   resolvePolicy
-} from "../chunk-7VVX6HQG.js";
+} from "../chunk-WDKHZRAS.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.95.4",
+  "version": "0.95.5",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",