@pushary/agent-hooks 0.95.4 → 0.95.6

package/dist/{chunk-7VVX6HQG.js → chunk-VZADMT7R.js}

@@ -21,6 +21,168 @@ var COWORK_STANDING_INSTRUCTIONS = `Pushary is connected as a custom connector.
 - Cancel a question when it is no longer needed. Once this turn ends, reopen Cowork for follow-up work; this connector cannot restart it.
 - If Pushary tools are missing or disabled, report that once and continue within my authorization. Do not claim a notification or approval was delivered.`;
 
+// ../contracts/src/agent-manifest.ts
+var defaults = {
+  hasStoredIdentity: true,
+  hookSource: null,
+  policyAgent: null,
+  repoAware: false,
+  disconnectable: false,
+  managedProvider: false,
+  enforcement: "cooperative",
+  connectVia: "Plain MCP",
+  setupCommand: null,
+  setupChoice: null,
+  setupGuide: "",
+  activationGuide: null,
+  enforcementDetail: "Cooperative. The agent chooses when to ask; no native permission interception.",
+  capabilityNote: "",
+  documented: true
+};
+var AGENTS = {
+  claude_code: {
+    ...defaults,
+    label: "Claude Code",
+    activationGuide: "/docs/agents/guides/claude-code#verify-a-real-approval",
+    hookSource: "claude",
+    policyAgent: "claude_code",
+    repoAware: true,
+    disconnectable: true,
+    managedProvider: true,
+    enforcement: "enforced",
+    connectVia: "Native hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Shell, writes and edits, subject to Claude Code permission mode and explicit policy."
+  },
+  claude_chat: {
+    ...defaults,
+    label: "Claude Chat",
+    connectVia: "Custom MCP connector",
+    setupGuide: "[Claude.ai and Claude Desktop setup](/docs/agents/guides/claude-desktop)"
+  },
+  claude_cowork: {
+    ...defaults,
+    label: "Claude Cowork",
+    connectVia: "Custom MCP connector + optional Cowork skill",
+    setupGuide: "[Cowork setup](/docs/agents/guides/claude-desktop#use-it-in-cowork)",
+    enforcementDetail: COWORK_CONNECTOR_LIMIT
+  },
+  codex: {
+    ...defaults,
+    label: "Codex",
+    hookSource: "codex",
+    policyAgent: "codex",
+    repoAware: true,
+    disconnectable: true,
+    managedProvider: true,
+    enforcement: "enforced",
+    connectVia: "Native hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Shell and apply_patch edits through native permission hooks; requires a compatible Codex runtime."
+  },
+  chatgpt: {
+    ...defaults,
+    label: "ChatGPT",
+    connectVia: "Custom MCP connector",
+    setupGuide: "[ChatGPT setup](/docs/agents/guides/chatgpt)"
+  },
+  gemini_cli: {
+    ...defaults,
+    label: "Gemini CLI",
+    hookSource: "gemini",
+    policyAgent: "gemini_cli",
+    repoAware: true,
+    disconnectable: true,
+    managedProvider: true,
+    enforcement: "enforced",
+    connectVia: "Native hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Shell, writes and edits through native BeforeTool hooks."
+  },
+  hermes: {
+    ...defaults,
+    label: "Hermes",
+    policyAgent: "hermes",
+    enforcement: "enforced",
+    connectVia: "Native Python plugin + approval transport",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Hermes dangerous-command approvals when the Pushary transport is selected; optional PUSHARY_GATE_TOOLS gates named tools.",
+    capabilityNote: "Uses the Python plugin, not a macOS bridge HookSource. CLI disconnect and managed-provider controls are not implemented for Hermes."
+  },
+  cursor: {
+    ...defaults,
+    label: "Cursor",
+    hookSource: "cursor",
+    policyAgent: "cursor",
+    disconnectable: true,
+    enforcement: "enforced",
+    connectVia: "Editor plugin hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "With installed hooks: shell, MCP execution and Write/Delete/Edit tool calls. Plain MCP remains cooperative."
+  },
+  vscode: {
+    ...defaults,
+    label: "VS Code",
+    hookSource: "vscode",
+    policyAgent: "vscode",
+    enforcement: "enforced",
+    connectVia: "Agent plugin hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "PreToolUse approval hooks from the installed agent plugin; the host decides which events it exposes.",
+    capabilityNote: "Has both a bridge HookSource and a per-agent policy profile. CLI disconnect and managed-provider controls are not implemented for VS Code."
+  },
+  opencode: {
+    ...defaults,
+    label: "OpenCode",
+    hookSource: "opencode",
+    policyAgent: "opencode",
+    repoAware: true,
+    disconnectable: true,
+    enforcement: "enforced",
+    connectVia: "Generated plugin + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Shell, writes, edits and web fetches when OpenCode itself asks for permission."
+  },
+  windsurf: {
+    ...defaults,
+    label: "Windsurf",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    setupChoice: "Other"
+  },
+  unknown: {
+    ...defaults,
+    label: "Agent",
+    documented: false
+  },
+  lovable: {
+    ...defaults,
+    label: "Lovable",
+    setupGuide: "[Lovable setup](/docs/agents/guides/lovable)"
+  },
+  mcp: {
+    ...defaults,
+    hasStoredIdentity: false,
+    label: "Any MCP client",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    setupChoice: "Other"
+  },
+  http: {
+    ...defaults,
+    hasStoredIdentity: false,
+    label: "No-code and HTTP",
+    connectVia: "REST with a Bearer token",
+    setupGuide: "[Connect any agent](/docs/agents/connect-any-agent)"
+  }
+};
+var HOOK_SOURCES = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.hookSource === null ? [] : [agent.hookSource]));
+var POLICY_AGENTS = [...Object.values(AGENTS).flatMap((agent) => agent.policyAgent === null ? [] : [agent.policyAgent]), "*"];
+var AGENT_LABELS_BY_TYPE = Object.fromEntries(
+  Object.entries(AGENTS).flatMap(([id, agent]) => agent.hasStoredIdentity ? [[id, agent.label]] : [])
+);
+var DISCONNECTABLE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.disconnectable ? [agent.hookSource] : []));
+var REPO_AWARE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.repoAware ? [agent.policyAgent] : []));
+var MANAGED_PROVIDERS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.managedProvider ? [agent.hookSource] : []));
+
 // ../contracts/src/index.ts
 var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
@@ -140,21 +302,6 @@ var hookWaitDeadline = (startMs, policyWaitSeconds, agent, nowMs) => {
 };
 var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + hookMaxWaitSeconds(agent) * 1e3 < nowMs + Math.max(policyWaitSeconds, 0) * 1e3;
 var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
-var HOOK_SOURCES = ["claude", "codex", "gemini", "cursor", "vscode", "opencode"];
-var AGENT_LABELS_BY_TYPE = {
-  claude_code: "Claude Code",
-  claude_chat: "Claude Chat",
-  claude_cowork: "Claude Cowork",
-  codex: "Codex",
-  chatgpt: "ChatGPT",
-  gemini_cli: "Gemini CLI",
-  hermes: "Hermes",
-  cursor: "Cursor",
-  vscode: "VS Code",
-  opencode: "OpenCode",
-  windsurf: "Windsurf",
-  unknown: "Agent"
-};
 var OPENCODE_APPROVAL_EVENT = "permission.ask";
 var CURSOR_GATE_EVENTS = ["beforeShellExecution", "beforeMCPExecution", "preToolUse"];
 var HOOK_LOCATOR_BINARY = "pushary-bridge";
@@ -813,6 +960,23 @@ p:12:small=n:1e-7`
   }
 ];
 var AUTHORIZATION_PERMIT_TTL_SECONDS = 60 * 60;
+var ANSWER_SOURCES = [
+  "dashboard",
+  "mobile_app",
+  "mobile_background",
+  "decide_page",
+  "live_page",
+  "answer_link",
+  "inbox",
+  "slack",
+  "mac_app",
+  // Nobody. A decision opened on a workspace's sandbox site is settled by the
+  // simulator instead of being delivered, and the ledger has to say so: a
+  // sandbox row that looked like a human answer would be indistinguishable
+  // evidence of a person who was never asked.
+  "sandbox"
+];
+var isAnswerSource = (value) => typeof value === "string" && ANSWER_SOURCES.includes(value);
 var classifyDecisionRisk = (toolName, toolTarget) => {
   const parts = [toolName, toolTarget ?? ""];
   const matchesAny = (patterns) => parts.some((part) => patterns.some((re) => re.test(part)));
@@ -1111,6 +1275,17 @@ var shouldDeferToNativeMode = (permissionMode, toolName, options = {}) => {
 var ASKED_IN_EVERY_MODE_TOOLS = ["AskUserQuestion", "ExitPlanMode"];
 var ASKED_IN_EVERY_MODE = new Set(ASKED_IN_EVERY_MODE_TOOLS);
 var isAskedInEveryMode = (toolName) => ASKED_IN_EVERY_MODE.has(toolName);
+var PRETOOLUSE_GATED_TOOLS = [
+  "Bash",
+  "Write",
+  "Edit",
+  "MultiEdit",
+  "NotebookEdit",
+  "PowerShell",
+  "Monitor"
+];
+var PRETOOLUSE_HANDLED_TOOLS = /* @__PURE__ */ new Set([...PRETOOLUSE_GATED_TOOLS, ...ASKED_IN_EVERY_MODE_TOOLS]);
+var isPermissionRequestOwnedByPreToolUse = (toolName, permissionMode, defers = shouldDeferToNativeMode) => PRETOOLUSE_HANDLED_TOOLS.has(toolName) && (isAskedInEveryMode(toolName) || !defers(permissionMode, toolName));
 var resolveGate = (input) => {
   const { modeState, config, toolName, toolInputs, cwd, repoKey, sessionId } = input;
   if (isPusharyOwnTool(toolName)) {
@@ -1368,6 +1543,23 @@ var elicitationContentFromAnswers = (ask, answers) => {
   return content;
 };
 
+// ../contracts/src/hook-activation.ts
+var hookWritePath = (toolName, input) => toolName === "Write" && typeof input.file_path === "string" && input.file_path.startsWith("/") && input.file_path.length <= 4096 ? input.file_path : void 0;
+var HOOK_ACTIVATION_RESULTS = ["unverified", "approved_executed", "denied_observed", "unexpected_execution", "tool_failed"];
+var isHookActivationReport = (value) => {
+  if (!value || typeof value !== "object") return false;
+  const report = value;
+  return typeof report.agentType === "string" && typeof report.machineId === "string" && typeof report.target === "string" && report.target.length > 0 && report.target.length <= 4096 && typeof report.truncated === "boolean" && Array.isArray(report.evidence) && report.evidence.length <= 20 && (!report.truncated || report.evidence.length === 0) && report.evidence.every((item) => {
+    if (!item || typeof item !== "object") return false;
+    const row = item;
+    return ["correlationId", "sessionId", "toolUseId", "toolName", "createdAt"].every((key) => typeof row[key] === "string" && row[key].length > 0 && row[key].length <= 256) && (row.answerSource === null || isAnswerSource(row.answerSource)) && HOOK_ACTIVATION_RESULTS.includes(row.result) && Number.isFinite(Date.parse(row.createdAt)) && (row.occurredAt === null || typeof row.occurredAt === "string" && Number.isFinite(Date.parse(row.occurredAt))) && (row.observedAt === null || typeof row.observedAt === "string" && Number.isFinite(Date.parse(row.observedAt))) && (row.result === "unverified" || row.occurredAt !== null && row.observedAt !== null && row.producer !== null && isAnswerSource(row.answerSource) && row.answerSource !== "sandbox") && (row.producer === null || row.producer === "hook" || row.producer === "uplink");
+  });
+};
+var hookActivationResult = (report) => {
+  if (report?.evidence.some((row) => row.result === "unexpected_execution")) return "unexpected_execution";
+  return report && !report.truncated && report.evidence.length === 1 ? report.evidence[0].result : "unverified";
+};
+
 export {
   CLAUDE_CONNECTOR_URL,
   CLAUDE_CONNECTOR_GUIDE,
@@ -1375,6 +1567,15 @@ export {
   CLAUDE_CONNECTOR_STEPS,
   CLAUDE_CONNECTOR_TEST,
   COWORK_STANDING_INSTRUCTIONS,
+  AGENTS,
+  HOOK_SOURCES,
+  AGENT_LABELS_BY_TYPE,
+  DISCONNECTABLE_AGENTS,
+  REPO_AWARE_AGENTS,
+  MANAGED_PROVIDERS,
+  hookWritePath,
+  isHookActivationReport,
+  hookActivationResult,
   normalizeKeyScope,
   parseAgentQuestion,
   parseAgentQuestions,
@@ -1384,8 +1585,6 @@ export {
   hookWaitDeadline,
   hookWaitClamped,
   effectiveWaitSeconds,
-  HOOK_SOURCES,
-  AGENT_LABELS_BY_TYPE,
   OPENCODE_APPROVAL_EVENT,
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
@@ -1399,6 +1598,7 @@ export {
   DECISION_LINE_MAX,
   redactSecrets,
   redactSecretsDeep,
+  isAnswerSource,
   buildDecisionEpisodeFeatures,
   resolveAutoResolveOrigin,
   resolvePolicy,
@@ -1406,6 +1606,8 @@ export {
   isPusharyOwnTool,
   shouldDeferToNativeMode,
   ASKED_IN_EVERY_MODE_TOOLS,
+  PRETOOLUSE_GATED_TOOLS,
+  isPermissionRequestOwnedByPreToolUse,
   resolveGate,
   modeStateFromResponse,
   stoppedOutput,

package/dist/{chunk-J6NAWJTQ.js → chunk-WRK6RAA5.js}

@@ -1,9 +1,25 @@
+import {
+  detectProviderLiveCapabilities,
+  hasSpawnProvider,
+  resolveControlPolicy
+} from "./chunk-HKQ6CD32.js";
+import {
+  daemonHasRemoteProof,
+  daemonServiceManagerAvailable,
+  hasDaemonServiceDefinition,
+  readDaemonNeedsLogin,
+  readDaemonStatus
+} from "./chunk-7N3D4GN7.js";
 import {
   getMachineId
-} from "./chunk-O7ODXFII.js";
+} from "./chunk-C7BFOC35.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
+import {
+  readControlMode,
+  readKeySource
+} from "./chunk-6MRPTYYH.js";
 import {
   getBaseUrl
 } from "./chunk-2UMNXADU.js";
@@ -50,7 +66,7 @@ var parseMachine = (value) => {
     online: raw.online === true
   };
 };
-var machineReadiness = (machines, machineId, expectedCapabilities) => {
+var machineReadiness = (machines, machineId, expectedCapabilities, now = Date.now()) => {
   const machine = machines.find((item) => item.machineId === machineId);
   if (!machine) return { kind: "not-ready", detail: "this machine has not heartbeated to the server" };
   if (!machine.online) return { kind: "not-ready", detail: "the server reports this machine offline" };
@@ -60,12 +76,15 @@ var machineReadiness = (machines, machineId, expectedCapabilities) => {
   if (machine.lastControlAt === null || !Number.isFinite(Date.parse(machine.lastControlAt))) {
     return { kind: "not-ready", detail: "the server has not observed this machine polling the control queue" };
   }
+  if (!daemonHasRemoteProof({ kind: "running", lastSuccessfulHeartbeatAt: machine.lastSeenAt, lastSuccessfulControlAt: machine.lastControlAt }, now)) {
+    return { kind: "not-ready", detail: "the heartbeat or control-queue proof is stale; wake this machine and retry pushary doctor" };
+  }
   const missing = expectedCapabilities.filter((capability) => !machine.capabilities.includes(capability));
   return missing.length === 0 ? { kind: "ready", machine } : { kind: "not-ready", detail: `the server is missing capabilities: ${missing.join(", ")}` };
 };
 var readMachineReadiness = async (apiKey, expectedCapabilities, deps = {}) => {
   const listed = await listMachines(apiKey, deps);
-  return listed.kind === "ok" ? machineReadiness(listed.machines, deps.machineId ?? getMachineId(), expectedCapabilities) : listed.kind === "unsupported" ? { kind: "unsupported", detail: "the server does not report machine readiness yet" } : listed;
+  return listed.kind === "ok" ? machineReadiness(listed.machines, deps.machineId ?? getMachineId(), expectedCapabilities, deps.now?.()) : listed.kind === "unsupported" ? { kind: "unsupported", detail: "the server does not report machine readiness yet" } : listed;
 };
 var waitForMachineReadiness = async (apiKey, expectedCapabilities, deps = {}) => {
   const attempts = deps.attempts ?? 21;
@@ -106,6 +125,29 @@ var describeLastSeen = (iso, now = Date.now()) => {
   if (hours < 48) return `${hours}h ago`;
   return `${Math.round(hours / 24)}d ago`;
 };
+var readManagedControlEvidence = (apiKey, providers, serverProof) => {
+  const now = Date.now();
+  const daemon = readDaemonStatus();
+  const capabilities = detectProviderLiveCapabilities(providers);
+  const providerAvailable = hasSpawnProvider(capabilities);
+  const managerAvailable = daemonServiceManagerAvailable();
+  const serviceInstalled = hasDaemonServiceDefinition();
+  const keyCurrent = Boolean(apiKey) && readKeySource().key === apiKey && readDaemonNeedsLogin().kind !== "blocked";
+  const policy = resolveControlPolicy({ mode: readControlMode(), providerAvailable, managerAvailable, servicePresent: serviceInstalled || daemon.kind !== "absent" });
+  const localProof = daemonHasRemoteProof(daemon, now);
+  const remote = serverProof?.kind === "ready" ? machineReadiness([serverProof.machine], daemon.machineId ?? "", ["spawn", ...capabilities], now) : serverProof;
+  return {
+    ready: keyCurrent && policy === "enabled" && providerAvailable && managerAvailable && serviceInstalled && localProof && remote?.kind === "ready",
+    keyCurrent,
+    providerAvailable,
+    managerAvailable,
+    serviceInstalled,
+    policy,
+    localProof,
+    serverProof: remote?.kind ?? "unchecked",
+    checkedAt: new Date(now).toISOString()
+  };
+};
 
 export {
   HEARTBEAT_INTERVAL_MS,
@@ -113,5 +155,6 @@ export {
   readMachineReadiness,
   waitForMachineReadiness,
   listMachines,
-  describeLastSeen
+  describeLastSeen,
+  readManagedControlEvidence
 };

package/dist/{chunk-ZKDQ3QRP.js → chunk-WZ63WTAZ.js}

@@ -1,6 +1,6 @@
 import {
   writeJsonAtomicDurable
-} from "./chunk-MNWDOXX6.js";
+} from "./chunk-KAWLZTRJ.js";
 
 // src/transcript-recipient-pin.ts
 import { existsSync, mkdirSync, readFileSync, rmSync } from "fs";

package/dist/{chunk-57NOPUBK.js → chunk-XJ6CXTSB.js}

@@ -1,16 +1,16 @@
 import {
   detectClaudeVersion
-} from "./chunk-TR6DBXO3.js";
+} from "./chunk-OIZVYUED.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-CVZP67ST.js";
+} from "./chunk-HHODMHTH.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "./chunk-TMOCSYJK.js";
+} from "./chunk-A2M6FGUF.js";
 import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_BINARY,
@@ -21,10 +21,10 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-TKA2L2BU.js";
+} from "./chunk-CDBTCEKE.js";
 import {
   guardBinary
-} from "./chunk-GGX5QTBG.js";
+} from "./chunk-3AJIK5AO.js";
 import {
   resolveGlobalBinDir,
   resolveGlobalBinary
@@ -40,14 +40,14 @@ import {
   codexHooksJson,
   hasCodexHooks,
   vscodePluginMcp
-} from "./chunk-W5GH5GTX.js";
+} from "./chunk-FBO5WS3D.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "./chunk-MNWDOXX6.js";
+} from "./chunk-KAWLZTRJ.js";
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-7VVX6HQG.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/reapply.ts
 import { join } from "path";

package/dist/{chunk-4NJURLRP.js → chunk-XKIB2FQY.js}

@@ -3,19 +3,19 @@ import {
   loadPin,
   savePin,
   verifyRecipients
-} from "./chunk-ZKDQ3QRP.js";
+} from "./chunk-WZ63WTAZ.js";
 import {
   hookOwnerOf
-} from "./chunk-MZOTKCNZ.js";
+} from "./chunk-BS5XR4J7.js";
 import {
   ensureDaemonRunning
-} from "./chunk-ND52YE7L.js";
+} from "./chunk-7N3D4GN7.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-JDNW6FTV.js";
+} from "./chunk-DH4INZW3.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -23,17 +23,17 @@ import {
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-TGORRMOU.js";
+} from "./chunk-JZSWA3VT.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-W5GH5GTX.js";
+} from "./chunk-FBO5WS3D.js";
 import {
   readTranscriptPreference
-} from "./chunk-3N4FT4WQ.js";
+} from "./chunk-6MRPTYYH.js";
 import {
   writeJsonAtomic
-} from "./chunk-MNWDOXX6.js";
+} from "./chunk-KAWLZTRJ.js";
 import {
   getApiKey,
   getBaseUrl

package/dist/{chunk-2BE7ZVWP.js → chunk-XS33QBJA.js}

@@ -12,7 +12,7 @@ import { randomUUID } from "crypto";
 var isPolicyConfig = (data) => {
   if (!data || typeof data !== "object") return false;
   const d = data;
-  return Array.isArray(d.policies) && typeof d.defaultTimeoutSeconds === "number" && typeof d.defaultTimeoutAction === "string";
+  return (d.resolvedAgent === void 0 || typeof d.resolvedAgent === "string") && Array.isArray(d.policies) && typeof d.defaultTimeoutSeconds === "number" && typeof d.defaultTimeoutAction === "string";
 };
 var isAskUserResponse = (data) => {
   if (!data || typeof data !== "object") return false;
@@ -45,13 +45,24 @@ var waitForAnswer = async (apiKey, correlationId, timeoutMs = 3e4, signal) => {
   if (!isWaitForAnswerResponse(result)) throw new Error("Invalid wait_for_answer response");
   return result;
 };
+var WAIT_RESPONSE_GRACE_MS = 2e3;
+var MIN_LONG_POLL_MS = 1e3;
+var MAX_LONG_POLL_MS = 3e4;
+var nextLongPollMs = (deadlineMs, nowMs) => {
+  const hold = Math.min(deadlineMs - nowMs - WAIT_RESPONSE_GRACE_MS, MAX_LONG_POLL_MS);
+  return hold >= MIN_LONG_POLL_MS ? hold : null;
+};
 var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
   const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
   while (Date.now() < deadlineMs) {
-    const remaining = Math.min(Math.max(deadlineMs - Date.now(), 1e3), 3e4);
+    const hold = nextLongPollMs(deadlineMs, Date.now());
+    if (hold === null) {
+      await sleep(Math.max(0, deadlineMs - Date.now()));
+      continue;
+    }
     let answer;
     try {
-      answer = await waitForAnswer(apiKey, correlationId, remaining, AbortSignal.timeout(Math.max(1, deadlineMs - Date.now())));
+      answer = await waitForAnswer(apiKey, correlationId, hold, AbortSignal.timeout(Math.max(1, deadlineMs - Date.now())));
     } catch {
       const late = await withdrawQuestion(apiKey, correlationId);
       return late.answered ? late : STOPPED;
@@ -93,6 +104,7 @@ export {
   isLocalQuestionHandoff,
   askUser,
   waitForAnswer,
+  nextLongPollMs,
   cancelQuestion,
   withdrawQuestion,
   waitForQuestion,

package/dist/{chunk-MQO7J2OJ.js → chunk-ZJ6QXXBC.js}

@@ -3,7 +3,7 @@ import {
   isPolicyConfig,
   sendNotification,
   waitForAnswer
-} from "./chunk-2BE7ZVWP.js";
+} from "./chunk-XS33QBJA.js";
 import {
   AGENT_IDENTITIES,
   TEAMMATE_IDLE_ACTION,
@@ -24,20 +24,20 @@ import {
   summarizeStop,
   taskTitleFrom,
   toolResultErrorText
-} from "./chunk-LVU3Q43J.js";
+} from "./chunk-HBBQO77U.js";
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-YE37HYN3.js";
+} from "./chunk-32WWVRXN.js";
 import {
   getMachineId
-} from "./chunk-O7ODXFII.js";
+} from "./chunk-C7BFOC35.js";
 import {
   withRetry
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-MNWDOXX6.js";
+} from "./chunk-KAWLZTRJ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -45,6 +45,7 @@ import {
 import {
   HOOK_SOURCES,
   PENDING_COMMAND_PREFIX,
+  REPO_AWARE_AGENTS,
   gateOutputFor,
   isAutoApprove,
   localRepoKey,
@@ -53,7 +54,7 @@ import {
   pendingCommandEvents,
   resolveAutoResolveOrigin,
   resolvePolicy
-} from "./chunk-7VVX6HQG.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -62,7 +63,6 @@ import { join } from "path";
 import { tmpdir } from "os";
 var CACHE_TTL_MS = 60 * 1e3;
 var STALE_CACHE_MAX_MS = 12 * 60 * 60 * 1e3;
-var REPO_AWARE_AGENTS = ["claude_code", "codex", "gemini_cli", "opencode"];
 var policyRequestFor = (agentType) => ({
   agent: agentType,
   repoAware: REPO_AWARE_AGENTS.includes(agentType)
@@ -1004,6 +1004,7 @@ var settleQuestionsForToolUse = async (sessionId, toolUseId) => {
   for (const answer of late) removePendingQuestion(sessionId, answer.correlationId);
 };
 var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
+  const occurredAt = (/* @__PURE__ */ new Date()).toISOString();
   const deadline = Date.now() + HOOK_BUDGET_MS;
   const signal = AbortSignal.timeout(HOOK_BUDGET_MS);
   try {
@@ -1028,6 +1029,8 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
     const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, agent.type, input.cwd, input.session_id) : void 0;
     const toolReport = reportEvent({
       event: isError ? "tool_error" : "tool_complete",
+      occurredAt,
+      toolUseId: input.tool_use_id,
       agentType: agent.type,
       agentName: `${agent.label} - ${projectName}`,
       action,

package/dist/{chunk-XIVPHGV4.js → chunk-ZQREURP6.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-KT2CGUOE.js";
+} from "./chunk-6II5RBAS.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/src/index.d.ts

@@ -34,6 +34,8 @@ interface AgentIdentity {
     readonly label: string;
 }
 interface AgentEvent {
+    occurredAt?: string;
+    toolUseId?: string;
     event: string;
     agentType: string;
     agentName?: string;
@@ -147,6 +149,7 @@ interface AskUserParams {
     machineId?: string;
     toolName?: string;
     toolTarget?: string;
+    toolPath?: string;
     repoKey?: string;
     intent?: string;
     action?: string;