@pushary/agent-hooks 0.95.5 → 0.95.6

package/dist/{chunk-6AEM5RCS.js → chunk-OIZVYUED.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-2D7BAOMY.js";
+} from "./chunk-CDBTCEKE.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-OEKFD5BC.js → chunk-R4MBUCPQ.js}

@@ -1,6 +1,6 @@
 import {
   registerTranscript
-} from "./chunk-4RF52LSU.js";
+} from "./chunk-XKIB2FQY.js";
 
 // src/admission.ts
 import { readFileSync } from "fs";

package/dist/{chunk-6VANQN5Q.js → chunk-RPHXG4HI.js}

@@ -1,9 +1,9 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-HQIVR7MM.js";
+} from "./chunk-43TFQOAT.js";
 import {
   codexHomeFrom
-} from "./chunk-OW6AZDY2.js";
+} from "./chunk-FBO5WS3D.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-VTO3TNIB.js → chunk-SLVXQOYU.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-S5CMLR35.js";
+} from "./chunk-6MRPTYYH.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-D62EONG3.js → chunk-SRFA5BOO.js}

@@ -1,6 +1,6 @@
 import {
   shouldDeferToNativeMode
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/native-defer.ts
 var nativeDeferOptions = () => {

package/dist/{chunk-WDKHZRAS.js → chunk-VZADMT7R.js}

@@ -34,6 +34,7 @@ var defaults = {
   setupCommand: null,
   setupChoice: null,
   setupGuide: "",
+  activationGuide: null,
   enforcementDetail: "Cooperative. The agent chooses when to ask; no native permission interception.",
   capabilityNote: "",
   documented: true
@@ -42,6 +43,7 @@ var AGENTS = {
   claude_code: {
     ...defaults,
     label: "Claude Code",
+    activationGuide: "/docs/agents/guides/claude-code#verify-a-real-approval",
     hookSource: "claude",
     policyAgent: "claude_code",
     repoAware: true,
@@ -958,6 +960,23 @@ p:12:small=n:1e-7`
   }
 ];
 var AUTHORIZATION_PERMIT_TTL_SECONDS = 60 * 60;
+var ANSWER_SOURCES = [
+  "dashboard",
+  "mobile_app",
+  "mobile_background",
+  "decide_page",
+  "live_page",
+  "answer_link",
+  "inbox",
+  "slack",
+  "mac_app",
+  // Nobody. A decision opened on a workspace's sandbox site is settled by the
+  // simulator instead of being delivered, and the ledger has to say so: a
+  // sandbox row that looked like a human answer would be indistinguishable
+  // evidence of a person who was never asked.
+  "sandbox"
+];
+var isAnswerSource = (value) => typeof value === "string" && ANSWER_SOURCES.includes(value);
 var classifyDecisionRisk = (toolName, toolTarget) => {
   const parts = [toolName, toolTarget ?? ""];
   const matchesAny = (patterns) => parts.some((part) => patterns.some((re) => re.test(part)));
@@ -1524,6 +1543,23 @@ var elicitationContentFromAnswers = (ask, answers) => {
   return content;
 };
 
+// ../contracts/src/hook-activation.ts
+var hookWritePath = (toolName, input) => toolName === "Write" && typeof input.file_path === "string" && input.file_path.startsWith("/") && input.file_path.length <= 4096 ? input.file_path : void 0;
+var HOOK_ACTIVATION_RESULTS = ["unverified", "approved_executed", "denied_observed", "unexpected_execution", "tool_failed"];
+var isHookActivationReport = (value) => {
+  if (!value || typeof value !== "object") return false;
+  const report = value;
+  return typeof report.agentType === "string" && typeof report.machineId === "string" && typeof report.target === "string" && report.target.length > 0 && report.target.length <= 4096 && typeof report.truncated === "boolean" && Array.isArray(report.evidence) && report.evidence.length <= 20 && (!report.truncated || report.evidence.length === 0) && report.evidence.every((item) => {
+    if (!item || typeof item !== "object") return false;
+    const row = item;
+    return ["correlationId", "sessionId", "toolUseId", "toolName", "createdAt"].every((key) => typeof row[key] === "string" && row[key].length > 0 && row[key].length <= 256) && (row.answerSource === null || isAnswerSource(row.answerSource)) && HOOK_ACTIVATION_RESULTS.includes(row.result) && Number.isFinite(Date.parse(row.createdAt)) && (row.occurredAt === null || typeof row.occurredAt === "string" && Number.isFinite(Date.parse(row.occurredAt))) && (row.observedAt === null || typeof row.observedAt === "string" && Number.isFinite(Date.parse(row.observedAt))) && (row.result === "unverified" || row.occurredAt !== null && row.observedAt !== null && row.producer !== null && isAnswerSource(row.answerSource) && row.answerSource !== "sandbox") && (row.producer === null || row.producer === "hook" || row.producer === "uplink");
+  });
+};
+var hookActivationResult = (report) => {
+  if (report?.evidence.some((row) => row.result === "unexpected_execution")) return "unexpected_execution";
+  return report && !report.truncated && report.evidence.length === 1 ? report.evidence[0].result : "unverified";
+};
+
 export {
   CLAUDE_CONNECTOR_URL,
   CLAUDE_CONNECTOR_GUIDE,
@@ -1531,11 +1567,15 @@ export {
   CLAUDE_CONNECTOR_STEPS,
   CLAUDE_CONNECTOR_TEST,
   COWORK_STANDING_INSTRUCTIONS,
+  AGENTS,
   HOOK_SOURCES,
   AGENT_LABELS_BY_TYPE,
   DISCONNECTABLE_AGENTS,
   REPO_AWARE_AGENTS,
   MANAGED_PROVIDERS,
+  hookWritePath,
+  isHookActivationReport,
+  hookActivationResult,
   normalizeKeyScope,
   parseAgentQuestion,
   parseAgentQuestions,
@@ -1558,6 +1598,7 @@ export {
   DECISION_LINE_MAX,
   redactSecrets,
   redactSecretsDeep,
+  isAnswerSource,
   buildDecisionEpisodeFeatures,
   resolveAutoResolveOrigin,
   resolvePolicy,

package/dist/{chunk-32RMQO5Z.js → chunk-WRK6RAA5.js}

@@ -1,9 +1,25 @@
+import {
+  detectProviderLiveCapabilities,
+  hasSpawnProvider,
+  resolveControlPolicy
+} from "./chunk-HKQ6CD32.js";
+import {
+  daemonHasRemoteProof,
+  daemonServiceManagerAvailable,
+  hasDaemonServiceDefinition,
+  readDaemonNeedsLogin,
+  readDaemonStatus
+} from "./chunk-7N3D4GN7.js";
 import {
   getMachineId
-} from "./chunk-N4VNLISN.js";
+} from "./chunk-C7BFOC35.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
+import {
+  readControlMode,
+  readKeySource
+} from "./chunk-6MRPTYYH.js";
 import {
   getBaseUrl
 } from "./chunk-2UMNXADU.js";
@@ -50,7 +66,7 @@ var parseMachine = (value) => {
     online: raw.online === true
   };
 };
-var machineReadiness = (machines, machineId, expectedCapabilities) => {
+var machineReadiness = (machines, machineId, expectedCapabilities, now = Date.now()) => {
   const machine = machines.find((item) => item.machineId === machineId);
   if (!machine) return { kind: "not-ready", detail: "this machine has not heartbeated to the server" };
   if (!machine.online) return { kind: "not-ready", detail: "the server reports this machine offline" };
@@ -60,12 +76,15 @@ var machineReadiness = (machines, machineId, expectedCapabilities) => {
   if (machine.lastControlAt === null || !Number.isFinite(Date.parse(machine.lastControlAt))) {
     return { kind: "not-ready", detail: "the server has not observed this machine polling the control queue" };
   }
+  if (!daemonHasRemoteProof({ kind: "running", lastSuccessfulHeartbeatAt: machine.lastSeenAt, lastSuccessfulControlAt: machine.lastControlAt }, now)) {
+    return { kind: "not-ready", detail: "the heartbeat or control-queue proof is stale; wake this machine and retry pushary doctor" };
+  }
   const missing = expectedCapabilities.filter((capability) => !machine.capabilities.includes(capability));
   return missing.length === 0 ? { kind: "ready", machine } : { kind: "not-ready", detail: `the server is missing capabilities: ${missing.join(", ")}` };
 };
 var readMachineReadiness = async (apiKey, expectedCapabilities, deps = {}) => {
   const listed = await listMachines(apiKey, deps);
-  return listed.kind === "ok" ? machineReadiness(listed.machines, deps.machineId ?? getMachineId(), expectedCapabilities) : listed.kind === "unsupported" ? { kind: "unsupported", detail: "the server does not report machine readiness yet" } : listed;
+  return listed.kind === "ok" ? machineReadiness(listed.machines, deps.machineId ?? getMachineId(), expectedCapabilities, deps.now?.()) : listed.kind === "unsupported" ? { kind: "unsupported", detail: "the server does not report machine readiness yet" } : listed;
 };
 var waitForMachineReadiness = async (apiKey, expectedCapabilities, deps = {}) => {
   const attempts = deps.attempts ?? 21;
@@ -106,6 +125,29 @@ var describeLastSeen = (iso, now = Date.now()) => {
   if (hours < 48) return `${hours}h ago`;
   return `${Math.round(hours / 24)}d ago`;
 };
+var readManagedControlEvidence = (apiKey, providers, serverProof) => {
+  const now = Date.now();
+  const daemon = readDaemonStatus();
+  const capabilities = detectProviderLiveCapabilities(providers);
+  const providerAvailable = hasSpawnProvider(capabilities);
+  const managerAvailable = daemonServiceManagerAvailable();
+  const serviceInstalled = hasDaemonServiceDefinition();
+  const keyCurrent = Boolean(apiKey) && readKeySource().key === apiKey && readDaemonNeedsLogin().kind !== "blocked";
+  const policy = resolveControlPolicy({ mode: readControlMode(), providerAvailable, managerAvailable, servicePresent: serviceInstalled || daemon.kind !== "absent" });
+  const localProof = daemonHasRemoteProof(daemon, now);
+  const remote = serverProof?.kind === "ready" ? machineReadiness([serverProof.machine], daemon.machineId ?? "", ["spawn", ...capabilities], now) : serverProof;
+  return {
+    ready: keyCurrent && policy === "enabled" && providerAvailable && managerAvailable && serviceInstalled && localProof && remote?.kind === "ready",
+    keyCurrent,
+    providerAvailable,
+    managerAvailable,
+    serviceInstalled,
+    policy,
+    localProof,
+    serverProof: remote?.kind ?? "unchecked",
+    checkedAt: new Date(now).toISOString()
+  };
+};
 
 export {
   HEARTBEAT_INTERVAL_MS,
@@ -113,5 +155,6 @@ export {
   readMachineReadiness,
   waitForMachineReadiness,
   listMachines,
-  describeLastSeen
+  describeLastSeen,
+  readManagedControlEvidence
 };

package/dist/{chunk-BMANRGJQ.js → chunk-WZ63WTAZ.js}

@@ -1,6 +1,6 @@
 import {
   writeJsonAtomicDurable
-} from "./chunk-KAVDAZ7A.js";
+} from "./chunk-KAWLZTRJ.js";
 
 // src/transcript-recipient-pin.ts
 import { existsSync, mkdirSync, readFileSync, rmSync } from "fs";

package/dist/{chunk-Z2UWFEJW.js → chunk-XJ6CXTSB.js}

@@ -1,16 +1,16 @@
 import {
   detectClaudeVersion
-} from "./chunk-6AEM5RCS.js";
+} from "./chunk-OIZVYUED.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-HGUZOUB2.js";
+} from "./chunk-HHODMHTH.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "./chunk-HBHEX3JQ.js";
+} from "./chunk-A2M6FGUF.js";
 import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_BINARY,
@@ -21,7 +21,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-2D7BAOMY.js";
+} from "./chunk-CDBTCEKE.js";
 import {
   guardBinary
 } from "./chunk-3AJIK5AO.js";
@@ -40,14 +40,14 @@ import {
   codexHooksJson,
   hasCodexHooks,
   vscodePluginMcp
-} from "./chunk-OW6AZDY2.js";
+} from "./chunk-FBO5WS3D.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "./chunk-KAVDAZ7A.js";
+} from "./chunk-KAWLZTRJ.js";
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/reapply.ts
 import { join } from "path";

package/dist/{chunk-4RF52LSU.js → chunk-XKIB2FQY.js}

@@ -3,19 +3,19 @@ import {
   loadPin,
   savePin,
   verifyRecipients
-} from "./chunk-BMANRGJQ.js";
+} from "./chunk-WZ63WTAZ.js";
 import {
   hookOwnerOf
-} from "./chunk-VOSGZ6PH.js";
+} from "./chunk-BS5XR4J7.js";
 import {
   ensureDaemonRunning
-} from "./chunk-XLOELLAS.js";
+} from "./chunk-7N3D4GN7.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-4PX4QK2Z.js";
+} from "./chunk-DH4INZW3.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -23,17 +23,17 @@ import {
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-OI3DJA7N.js";
+} from "./chunk-JZSWA3VT.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-OW6AZDY2.js";
+} from "./chunk-FBO5WS3D.js";
 import {
   readTranscriptPreference
-} from "./chunk-S5CMLR35.js";
+} from "./chunk-6MRPTYYH.js";
 import {
   writeJsonAtomic
-} from "./chunk-KAVDAZ7A.js";
+} from "./chunk-KAWLZTRJ.js";
 import {
   getApiKey,
   getBaseUrl

package/dist/{chunk-HCMM3BOW.js → chunk-ZJ6QXXBC.js}

@@ -24,20 +24,20 @@ import {
   summarizeStop,
   taskTitleFrom,
   toolResultErrorText
-} from "./chunk-BDI2MXTT.js";
+} from "./chunk-HBBQO77U.js";
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-IVQMNLSA.js";
+} from "./chunk-32WWVRXN.js";
 import {
   getMachineId
-} from "./chunk-N4VNLISN.js";
+} from "./chunk-C7BFOC35.js";
 import {
   withRetry
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-KAVDAZ7A.js";
+} from "./chunk-KAWLZTRJ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -54,7 +54,7 @@ import {
   pendingCommandEvents,
   resolveAutoResolveOrigin,
   resolvePolicy
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -1004,6 +1004,7 @@ var settleQuestionsForToolUse = async (sessionId, toolUseId) => {
   for (const answer of late) removePendingQuestion(sessionId, answer.correlationId);
 };
 var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
+  const occurredAt = (/* @__PURE__ */ new Date()).toISOString();
   const deadline = Date.now() + HOOK_BUDGET_MS;
   const signal = AbortSignal.timeout(HOOK_BUDGET_MS);
   try {
@@ -1028,6 +1029,8 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
     const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, agent.type, input.cwd, input.session_id) : void 0;
     const toolReport = reportEvent({
       event: isError ? "tool_error" : "tool_complete",
+      occurredAt,
+      toolUseId: input.tool_use_id,
       agentType: agent.type,
       agentName: `${agent.label} - ${projectName}`,
       action,

package/dist/{chunk-RLXVW4AM.js → chunk-ZQREURP6.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-I6GZX3FT.js";
+} from "./chunk-6II5RBAS.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/src/index.d.ts

@@ -34,6 +34,8 @@ interface AgentIdentity {
     readonly label: string;
 }
 interface AgentEvent {
+    occurredAt?: string;
+    toolUseId?: string;
     event: string;
     agentType: string;
     agentName?: string;
@@ -147,6 +149,7 @@ interface AskUserParams {
     machineId?: string;
     toolName?: string;
     toolTarget?: string;
+    toolPath?: string;
     repoKey?: string;
     intent?: string;
     action?: string;

package/dist/src/index.js

@@ -1,8 +1,8 @@
 import {
   handlePreToolUse
-} from "../chunk-67YNQ3QA.js";
-import "../chunk-D62EONG3.js";
-import "../chunk-UCS65VVR.js";
+} from "../chunk-FHIVWF4B.js";
+import "../chunk-SRFA5BOO.js";
+import "../chunk-32WFHA77.js";
 import "../chunk-YHG74UFF.js";
 import {
   fetchAccountPublicKey
@@ -15,28 +15,28 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-HCMM3BOW.js";
+} from "../chunk-ZJ6QXXBC.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
 } from "../chunk-XS33QBJA.js";
-import "../chunk-BDI2MXTT.js";
-import "../chunk-IVQMNLSA.js";
-import "../chunk-N4VNLISN.js";
-import "../chunk-OW6AZDY2.js";
+import "../chunk-HBBQO77U.js";
+import "../chunk-32WWVRXN.js";
+import "../chunk-C7BFOC35.js";
+import "../chunk-FBO5WS3D.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-KAVDAZ7A.js";
+import "../chunk-KAWLZTRJ.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
 import {
   resolvePolicy
-} from "../chunk-WDKHZRAS.js";
+} from "../chunk-VZADMT7R.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.95.5",
+  "version": "0.95.6",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",