@pushary/agent-hooks 0.95.8 → 0.97.0

package/dist/{chunk-Z4JVEL7R.js → chunk-VCKQ45QA.js}

@@ -3,9 +3,10 @@ import {
   AGENT_LABELS_BY_TYPE,
   DECISION_LINE_MAX,
   FILE_TARGET_TOOLS,
+  GATE_MAX_TOOL_INPUTS,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-HUZW6SEO.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";
@@ -173,6 +174,90 @@ var OPENCODE_TOOL_NAMES = {
   websearch: "WebSearch",
   task: "Task"
 };
+var canonicalGateInputs = (source, toolName, toolInputs, cwd) => {
+  if (source === "codex" && toolName === "apply_patch" || source === "vscode" && ["apply_patch", "applyPatch", "copilot_applyPatch"].includes(toolName)) {
+    const paths = [...new Set(toolInputs.flatMap((input) => parseApplyPatchFiles(input.command ?? input.input ?? input.patch)))];
+    if (paths.length > GATE_MAX_TOOL_INPUTS) return null;
+    return {
+      toolName: "Edit",
+      toolInputs: paths.length === 0 ? toolInputs.map((input) => ({ file_path: input.command })) : paths.map((path) => ({ file_path: cwd && !isAbsolute(path) ? resolve(cwd, path) : path }))
+    };
+  }
+  if (source === "opencode") {
+    const canonical2 = OPENCODE_TOOL_NAMES[toolName] ?? toolName;
+    return {
+      toolName: canonical2,
+      toolInputs: toolInputs.map((input) => {
+        const path = input.file_path;
+        return typeof path === "string" && path.length > 0 && cwd && !isAbsolute(path) ? { ...input, file_path: resolve(cwd, path) } : input;
+      })
+    };
+  }
+  if (source === "vscode" || source === "cursor") {
+    if (source === "vscode" && toolName.startsWith("mcp_pushary_")) return { toolName: `mcp__pushary__${toolName.slice("mcp_pushary_".length)}`, toolInputs };
+    const alias = toolName.replace(/^copilot_/, "").toLowerCase().replace(/[^a-z0-9]/g, "");
+    const shells = [
+      "runterminalcommand",
+      "runinterminal",
+      "runcommand",
+      "terminalcommand",
+      "executecommand",
+      "runinterminalcommand",
+      "bash",
+      "shell",
+      "terminal",
+      "sendtoterminal",
+      "powershell",
+      "localshell"
+    ];
+    const canonical2 = shells.includes(alias) ? "Bash" : ["createfile", "write", "createdirectory", "createnewjupyternotebook"].includes(alias) ? "Write" : ["replacestringinfile", "multireplacestringinfile", "replacestring", "multireplacestring", "inserteditintofile", "insertedit", "edit", "editfile", "editfiles", "editnotebookfile", "editnotebook"].includes(alias) ? "Edit" : [
+      "readfile",
+      "viewimage",
+      "listdir",
+      "listdirectory",
+      "filesearch",
+      "findfiles",
+      "grepsearch",
+      "findtextinfiles",
+      "semanticsearch",
+      "searchcodebase",
+      "searchworkspacesymbols",
+      "geterrors",
+      "getchangedfiles",
+      "readprojectstructure",
+      "getnotebooksummary",
+      "readnotebookcelloutput",
+      "testsearch",
+      "findtestfiles",
+      "testfailure",
+      "getvscodeapi",
+      "getterminaloutput",
+      "gettaskoutput",
+      "terminalselection",
+      "terminallastcommand"
+    ].includes(alias) ? "Read" : toolName;
+    const inputs = toolInputs.flatMap((input) => ["multireplacestringinfile", "multireplacestring"].includes(alias) && Array.isArray(input.replacements) ? input.replacements.filter((item) => !!item && typeof item === "object" && !Array.isArray(item)) : alias === "editfiles" && Array.isArray(input.files) ? input.files.map((file) => typeof file === "string" ? { file_path: file } : file).filter((file) => !!file && typeof file === "object" && !Array.isArray(file)) : [input]);
+    if (inputs.length > GATE_MAX_TOOL_INPUTS) return null;
+    return { toolName: canonical2, toolInputs: inputs.map((input) => {
+      if (canonical2 === "Bash") return { ...input, command: [input.command, input.commandLine, input.command_line, input.cmd, input.script, input.input, input.text].find((value) => typeof value === "string") };
+      const path = input.file_path ?? input.filePath ?? input.path;
+      return typeof path === "string" ? { ...input, file_path: cwd && !isAbsolute(path) ? resolve(cwd, path) : path } : input;
+    }) };
+  }
+  if (source !== "gemini") return { toolName, toolInputs };
+  if (toolName === "run_shell_command") {
+    return { toolName: "Bash", toolInputs: toolInputs.map((input) => ({ command: input.command })) };
+  }
+  const canonical = { write_file: "Write", replace: "Edit", read_file: "Read" }[toolName];
+  if (!canonical) return { toolName, toolInputs };
+  return {
+    toolName: canonical,
+    toolInputs: toolInputs.map((input) => {
+      const path = [input.file_path, input.absolute_path, input.path].find((value) => typeof value === "string" && value.length > 0);
+      return path ? { file_path: cwd && !isAbsolute(path) ? resolve(cwd, path) : path } : {};
+    })
+  };
+};
 var EXIT_CODE_FAILURE = /^Error: Exit code \d+/;
 var isToolResultError = (toolResult) => {
   try {
@@ -388,6 +473,105 @@ var sessionIdentityOf = (payload) => {
   return { sessionId: agentId, parentSessionId: sessionId };
 };
 
+// ../hook-mapping/src/codex-rollout.ts
+var CODEX_TURN_CONTEXT_TYPE = "turn_context";
+var CODEX_AUTO_REVIEWER = "auto_review";
+var CODEX_GUARDIAN_THREAD_SOURCE = "guardian_review";
+var CODEX_PLANNED_ACTION_MARKER = "Planned action JSON:\n";
+var CODEX_APPROVAL_REQUEST_END = ">>> APPROVAL REQUEST END";
+var CODEX_SHELL_TOOL = "exec_command";
+var CODEX_SHELL_COMMAND_FLAGS = ["-lc", "-c"];
+var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+var parseRecord = (text) => {
+  try {
+    return asRecord(JSON.parse(text));
+  } catch {
+    return null;
+  }
+};
+var nonEmptyString = (value) => typeof value === "string" && value.length > 0 ? value : void 0;
+var isTimestamp = (value) => typeof value === "string" && Number.isFinite(Date.parse(value));
+var readCodexTurnContext = (line) => {
+  const entry = parseRecord(line);
+  if (entry?.type !== CODEX_TURN_CONTEXT_TYPE) return null;
+  const payload = asRecord(entry.payload);
+  const turnId = nonEmptyString(payload?.turn_id);
+  if (!payload || !turnId) return null;
+  return {
+    turnId,
+    approvalsReviewer: payload.approvals_reviewer === CODEX_AUTO_REVIEWER ? "auto_review" : "user",
+    ...isTimestamp(entry.timestamp) ? { startedAt: entry.timestamp } : {}
+  };
+};
+var isCodexGuardianRolloutHead = (line, sessionId) => {
+  if (!sessionId) return false;
+  const entry = parseRecord(line);
+  const payload = asRecord(entry?.payload);
+  return entry?.type === "session_meta" && payload?.parent_thread_id === sessionId && payload.thread_source === CODEX_GUARDIAN_THREAD_SOURCE;
+};
+var readCodexPlannedAction = (message) => {
+  const marker = message.lastIndexOf(CODEX_PLANNED_ACTION_MARKER);
+  if (marker < 0) return null;
+  const body = message.slice(marker + CODEX_PLANNED_ACTION_MARKER.length);
+  const end = body.lastIndexOf(CODEX_APPROVAL_REQUEST_END);
+  if (end < 0 || body.slice(end + CODEX_APPROVAL_REQUEST_END.length).trim().length > 0) return null;
+  return parseRecord(body.slice(0, end).trim());
+};
+var readCodexReviewVerdict = (message) => {
+  const verdict = parseRecord(message.trim());
+  if (verdict?.outcome !== "allow" && verdict?.outcome !== "deny") return null;
+  const rationale = typeof verdict.rationale === "string" ? verdict.rationale.trim() : "";
+  return { outcome: verdict.outcome, ...rationale ? { rationale } : {} };
+};
+var scanCodexGuardianReviews = (lines) => {
+  const reviews = [];
+  let pending = null;
+  for (const line of lines) {
+    const entry = parseRecord(line.text);
+    const payload = asRecord(entry?.payload);
+    if (entry?.type !== "event_msg" || typeof payload?.message !== "string") continue;
+    if (payload.type === "user_message") {
+      const plannedAction = readCodexPlannedAction(payload.message);
+      pending = plannedAction ? { offset: line.offset, plannedAction, ...isTimestamp(entry.timestamp) ? { requestedAt: entry.timestamp } : {} } : null;
+      continue;
+    }
+    if (payload.type !== "agent_message" || !pending) continue;
+    const verdict = readCodexReviewVerdict(payload.message);
+    if (!verdict) continue;
+    reviews.push({ ...pending, verdict });
+    pending = null;
+  }
+  return { reviews, ...pending ? { pendingOffset: pending.offset } : {} };
+};
+var codexPlannedShellCommand = (plannedAction) => {
+  if (plannedAction?.tool !== CODEX_SHELL_TOOL) return null;
+  const argv = plannedAction.command;
+  if (!Array.isArray(argv) || argv.length !== 3) return null;
+  const [shell, flag, command] = argv;
+  if (typeof shell !== "string" || shell.trim().length === 0) return null;
+  if (typeof flag !== "string" || !CODEX_SHELL_COMMAND_FLAGS.includes(flag)) return null;
+  if (typeof command !== "string" || command.trim().length === 0) return null;
+  const cwd = nonEmptyString(plannedAction.cwd);
+  return { command, ...cwd ? { cwd } : {} };
+};
+var codexReviewerDenialsSince = (reviews, since) => {
+  const sinceMs = Date.parse(since);
+  if (!Number.isFinite(sinceMs)) return [];
+  return reviews.flatMap((review) => {
+    if (review.verdict.outcome !== "deny" || !review.requestedAt) return [];
+    if (Date.parse(review.requestedAt) < sinceMs) return [];
+    const shell = codexPlannedShellCommand(review.plannedAction);
+    if (!shell) return [];
+    return [{
+      ...shell,
+      offset: review.offset,
+      requestedAt: review.requestedAt,
+      plannedAction: review.plannedAction,
+      ...review.verdict.rationale ? { rationale: review.verdict.rationale } : {}
+    }];
+  });
+};
+
 export {
   HOOK_FALLBACK_MAX,
   UNNAMED_ACTION,
@@ -396,6 +580,7 @@ export {
   parseApplyPatchOps,
   parseApplyPatchFiles,
   OPENCODE_TOOL_NAMES,
+  canonicalGateInputs,
   isToolResultError,
   toolResultErrorText,
   deriveReceiptMeta,
@@ -415,5 +600,9 @@ export {
   notificationAction,
   describeStopFailure,
   permissionDeniedAction,
-  sessionIdentityOf
+  sessionIdentityOf,
+  readCodexTurnContext,
+  isCodexGuardianRolloutHead,
+  scanCodexGuardianReviews,
+  codexReviewerDenialsSince
 };

package/dist/{chunk-SDNTRS76.js → chunk-VDTC5DEM.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-BQL7UDIB.js";
+} from "./chunk-SW37HB27.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-VMQU7YEJ.js → chunk-VF7YOT2W.js}

@@ -4,7 +4,7 @@ import {
   resolveInstallSourceFor,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VTUN7WSG.js";
 import {
   configFilePath
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-5GKNAQTG.js → chunk-VOC55PQV.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-HUZW6SEO.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-L7NOG547.js → chunk-VTUN7WSG.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-HUZW6SEO.js";
 
 // src/cli/fsx.ts
 import { copyFileSync, existsSync, fsyncSync, mkdirSync, openSync, closeSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";

package/dist/{chunk-GOPIMNVC.js → chunk-WIKEADOS.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-3AJIK5AO.js";
+} from "./chunk-67RNDRKL.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/chunk-XDMHLQMH.js

@@ -0,0 +1,202 @@
+import {
+  canonicalGateInputs
+} from "./chunk-VCKQ45QA.js";
+import {
+  canonicalJson
+} from "./chunk-67RNDRKL.js";
+import {
+  writeFileAtomic
+} from "./chunk-VTUN7WSG.js";
+import {
+  BLOCKED_ACTION_GRANT_TTL_SECONDS,
+  blockedActionIdentity,
+  shouldDeferToNativeMode
+} from "./chunk-HUZW6SEO.js";
+
+// src/native-defer.ts
+var nativeDeferOptions = () => {
+  const respect = process.env.PUSHARY_RESPECT_PERMISSION_MODE;
+  const bypass = process.env.PUSHARY_DEFER_BYPASS;
+  return {
+    respectPermissionMode: !(respect === "0" || respect === "false"),
+    deferBypass: bypass === "1" || bypass === "true"
+  };
+};
+var defersToNativeMode = (permissionMode, toolName) => shouldDeferToNativeMode(permissionMode, toolName, nativeDeferOptions());
+
+// src/codex-call-decision.ts
+import { createHash } from "crypto";
+import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "fs";
+import { tmpdir, userInfo } from "os";
+import { join } from "path";
+var CODEX_DECISION_TTL_MS = 60 * 1e3;
+var userScope = () => {
+  try {
+    const info = userInfo();
+    const id = typeof info.uid === "number" && info.uid >= 0 ? String(info.uid) : info.username;
+    return id.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || "default";
+  } catch {
+    return "default";
+  }
+};
+var decisionDir = () => join(tmpdir(), `pushary-codex-decisions-${userScope()}`);
+var decisionFile = (key) => join(decisionDir(), key);
+var PRESENTATION_ONLY_INPUT_KEYS = ["description"];
+var identifyingToolInput = (toolInput) => {
+  if (!toolInput) return {};
+  const identifying = {};
+  for (const [key, value] of Object.entries(toolInput)) {
+    if (PRESENTATION_ONLY_INPUT_KEYS.includes(key)) continue;
+    identifying[key] = value;
+  }
+  return identifying;
+};
+var codexCallKey = (identity) => {
+  if (!identity.sessionId || !identity.turnId || !identity.toolName) return null;
+  const material = canonicalJson([
+    identity.sessionId,
+    identity.turnId,
+    identity.toolName,
+    identifyingToolInput(identity.toolInput)
+  ]);
+  return createHash("sha256").update(material, "utf-8").digest("hex").slice(0, 32);
+};
+var parseDecision = (raw) => {
+  try {
+    const parsed = JSON.parse(raw);
+    if (parsed.kind === "approved") {
+      return typeof parsed.toolUseId === "string" && parsed.toolUseId ? { kind: "approved", toolUseId: parsed.toolUseId } : null;
+    }
+    if (parsed.kind === "handled") return { kind: "handled" };
+    if (parsed.kind === "denied") {
+      return { kind: "denied", reason: typeof parsed.reason === "string" ? parsed.reason : "" };
+    }
+    return null;
+  } catch {
+    return null;
+  }
+};
+var sweepExpired = (dir, nowMs) => {
+  try {
+    for (const name of readdirSync(dir)) {
+      const path = join(dir, name);
+      try {
+        if (nowMs - statSync(path).mtimeMs >= CODEX_DECISION_TTL_MS) rmSync(path, { force: true });
+      } catch {
+        continue;
+      }
+    }
+  } catch {
+    return;
+  }
+};
+var recordCodexCallDecision = (key, decision) => {
+  if (!key) return;
+  try {
+    const dir = decisionDir();
+    if (!existsSync(dir)) mkdirSync(dir, { recursive: true, mode: 448 });
+    else sweepExpired(dir, Date.now());
+    writeFileSync(decisionFile(key), JSON.stringify(decision), { encoding: "utf-8", mode: 384 });
+  } catch {
+    return;
+  }
+};
+var consumeCodexCallDecision = (key) => {
+  if (!key) return null;
+  const path = decisionFile(key);
+  try {
+    const fresh = Date.now() - statSync(path).mtimeMs < CODEX_DECISION_TTL_MS;
+    const raw = readFileSync(path, "utf-8");
+    rmSync(path, { force: true });
+    return fresh ? parseDecision(raw) : null;
+  } catch {
+    return null;
+  }
+};
+
+// src/blocked-action-hint.ts
+import { createHash as createHash2 } from "crypto";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, readdirSync as readdirSync2, rmSync as rmSync2, statSync as statSync2 } from "fs";
+import { tmpdir as tmpdir2 } from "os";
+import { join as join2 } from "path";
+var BLOCKED_ACTION_HINT_TTL_MS = BLOCKED_ACTION_GRANT_TTL_SECONDS * 1e3;
+var FINGERPRINT = /^[0-9a-f]{64}$/;
+var isFingerprint = (value) => typeof value === "string" && FINGERPRINT.test(value);
+var blockedActionSubject = (source, sessionId, toolName, toolInput, cwd) => {
+  if (source !== "claude") return { source, sessionId, toolName, toolInput };
+  return cwd ? { source, sessionId, cwd, toolName, toolInput } : null;
+};
+var blockedActionFingerprint = ({ source = "claude", sessionId, toolName, toolInput, cwd }) => {
+  if (!sessionId || !toolInput) return null;
+  const canonical = canonicalGateInputs(source, toolName, [toolInput], cwd);
+  if (!canonical || canonical.toolInputs.length !== 1) return null;
+  const [canonicalInput] = canonical.toolInputs;
+  if (!canonicalInput) return null;
+  const subject = blockedActionSubject(source, sessionId, canonical.toolName, canonicalInput, cwd);
+  return subject ? createHash2("sha256").update(blockedActionIdentity(subject), "utf8").digest("hex") : null;
+};
+var hintDir = () => join2(tmpdir2(), `pushary-blocked-action-hints-${userScope()}`);
+var hintFile = (fingerprint) => join2(hintDir(), fingerprint);
+var isExpired = (mtimeMs, nowMs) => nowMs - mtimeMs >= BLOCKED_ACTION_HINT_TTL_MS;
+var sweepExpired2 = (dir, nowMs) => {
+  try {
+    for (const name of readdirSync2(dir)) {
+      const path = join2(dir, name);
+      try {
+        if (isExpired(statSync2(path).mtimeMs, nowMs)) rmSync2(path, { force: true });
+      } catch {
+        continue;
+      }
+    }
+  } catch {
+    return;
+  }
+};
+var recordBlockedActionHint = (fingerprint) => {
+  if (!isFingerprint(fingerprint)) return false;
+  try {
+    const dir = hintDir();
+    if (!existsSync2(dir)) mkdirSync2(dir, { recursive: true, mode: 448 });
+    else sweepExpired2(dir, Date.now());
+    writeFileAtomic(hintFile(fingerprint), JSON.stringify({ fingerprint }), 384);
+    return true;
+  } catch {
+    return false;
+  }
+};
+var hasBlockedActionHint = (fingerprint) => {
+  if (!isFingerprint(fingerprint)) return false;
+  const path = hintFile(fingerprint);
+  try {
+    const stat = statSync2(path);
+    if (!stat.isFile()) return false;
+    if (isExpired(stat.mtimeMs, Date.now())) {
+      rmSync2(path, { force: true });
+      return false;
+    }
+    const parsed = JSON.parse(readFileSync2(path, "utf-8"));
+    return parsed?.fingerprint === fingerprint;
+  } catch {
+    return false;
+  }
+};
+var forgetBlockedActionHint = (fingerprint) => {
+  if (!isFingerprint(fingerprint)) return;
+  try {
+    rmSync2(hintFile(fingerprint), { force: true });
+  } catch {
+    return;
+  }
+};
+
+export {
+  defersToNativeMode,
+  userScope,
+  codexCallKey,
+  recordCodexCallDecision,
+  consumeCodexCallDecision,
+  blockedActionFingerprint,
+  recordBlockedActionHint,
+  hasBlockedActionHint,
+  forgetBlockedActionHint
+};

package/dist/{chunk-4DUEIUUO.js → chunk-YRXVC4HL.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-QV266EGS.js";
+} from "./chunk-IBRX7LRE.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";