@pushary/agent-hooks 0.95.8 → 0.98.0

package/dist/{chunk-NOVA7KZ2.js → chunk-XL3RKJYQ.js}

@@ -1,7 +1,222 @@
 import {
   HOOK_BUDGETS,
-  HOOK_LOCATOR_BINARY
-} from "./chunk-MC5WUOJJ.js";
+  HOOK_LOCATOR_BINARY,
+  withHookHoldBudget
+} from "./chunk-OUAE3GKO.js";
+
+// src/npm.ts
+import { execFileSync, execSync } from "child_process";
+import { existsSync, readFileSync, realpathSync } from "fs";
+import { dirname, isAbsolute, join, relative, resolve } from "path";
+var cleanNpmEnv = () => {
+  const env = {};
+  for (const [key, value] of Object.entries(process.env)) {
+    if (key.toLowerCase().startsWith("npm_config_workspace")) continue;
+    env[key] = value;
+  }
+  return env;
+};
+var npmErrorMessage = (err) => {
+  const e = err;
+  const text = [e?.stderr, e?.stdout].map((part) => part ? part.toString() : "").join("\n");
+  const line = text.split("\n").map((l) => l.replace(/^npm error\s*/i, "").trim()).find((l) => l && !l.startsWith("A complete log") && !/^code\s/i.test(l));
+  return line || e?.message || String(err);
+};
+var execNpm = (args, options = {}) => {
+  return execSync(`npm ${args}`, {
+    timeout: 12e4,
+    stdio: "pipe",
+    ...options,
+    env: { ...cleanNpmEnv(), ...options.env ?? {} }
+  });
+};
+var resolveGlobalBinary = (name) => {
+  try {
+    const prefix = execNpm("prefix -g --no-workspaces", { timeout: 5e3 }).toString().trim();
+    const candidates = process.platform === "win32" ? [join(prefix, `${name}.cmd`), join(prefix, name)] : [join(prefix, "bin", name)];
+    return candidates.find(existsSync);
+  } catch {
+    return void 0;
+  }
+};
+var resolvePathBinary = (name, platform = process.platform) => {
+  try {
+    return execFileSync(platform === "win32" ? "where" : "which", [name], {
+      encoding: "utf8",
+      stdio: "pipe",
+      timeout: 5e3
+    }).split(/\r?\n/, 1)[0]?.trim() || void 0;
+  } catch {
+    return void 0;
+  }
+};
+var resolveBinary = (name) => resolveGlobalBinary(name) ?? resolvePathBinary(name);
+var resolvePackageVersionFromBinary = (binary, packageName) => {
+  try {
+    let dir = dirname(realpathSync(binary));
+    const packagePath = packageName.split("/");
+    for (let depth = 0; depth < 8; depth++) {
+      for (const manifest of [
+        join(dir, "package.json"),
+        join(dir, "node_modules", ...packagePath, "package.json")
+      ]) {
+        try {
+          const value = JSON.parse(readFileSync(manifest, "utf8"));
+          if (value.name === packageName && typeof value.version === "string") return value.version;
+        } catch {
+        }
+      }
+      const parent = dirname(dir);
+      if (parent === dir) break;
+      dir = parent;
+    }
+  } catch {
+  }
+  return void 0;
+};
+var resolveGlobalPackageVersion = (name) => {
+  try {
+    const result = JSON.parse(execNpm("list -g --depth=0 --json --no-workspaces", { timeout: 5e3 }).toString());
+    const value = result.dependencies?.[name]?.version;
+    return typeof value === "string" ? value : void 0;
+  } catch {
+    return void 0;
+  }
+};
+var localImportsPresent = (entry, packageDir, seen = /* @__PURE__ */ new Set()) => {
+  if (seen.has(entry)) return true;
+  seen.add(entry);
+  try {
+    const source = readFileSync(entry, "utf8");
+    for (const match of source.matchAll(/\b(?:import|export)\s+(?:[^"'()]*?\s+from\s+)?["'](\.{1,2}\/[^"']+)["']|\bimport\s*\(\s*["'](\.{1,2}\/[^"']+)["']/g)) {
+      const dependency = resolve(dirname(entry), match[1] ?? match[2]);
+      const localPath = relative(packageDir, dependency);
+      if (localPath.startsWith("..") || isAbsolute(localPath) || !existsSync(dependency)) return false;
+      if (/\.[cm]?js$/.test(dependency) && !localImportsPresent(dependency, packageDir, seen)) return false;
+    }
+    return true;
+  } catch {
+    return false;
+  }
+};
+var packageBinsPresent = (packageDir, prefix, platform = process.platform, requiredFiles = []) => {
+  try {
+    const manifest = JSON.parse(readFileSync(join(packageDir, "package.json"), "utf8"));
+    if (!manifest.bin || typeof manifest.bin !== "object" || Array.isArray(manifest.bin)) return false;
+    const bins = Object.entries(manifest.bin);
+    if (bins.length === 0) return false;
+    if (!requiredFiles.every((path) => existsSync(join(packageDir, path)))) return false;
+    const seen = /* @__PURE__ */ new Set();
+    return bins.every(([name, target]) => {
+      if (typeof target !== "string") return false;
+      const shims = platform === "win32" ? [join(prefix, `${name}.cmd`), join(prefix, name)] : [join(prefix, "bin", name)];
+      const entry = join(packageDir, target);
+      return existsSync(entry) && shims.some(existsSync) && localImportsPresent(entry, packageDir, seen);
+    });
+  } catch {
+    return false;
+  }
+};
+var AGENT_HOOKS_RUNTIME_FILES = [
+  "data/SKILL.md",
+  "data/cursor-plugin/.cursor-plugin/plugin.json",
+  "data/cursor-plugin/hooks/hooks.json",
+  "data/cursor-plugin/mcp.json",
+  "data/cursor-plugin/scripts/pushary-gate.mjs",
+  "data/vscode-plugin/.claude-plugin/plugin.json",
+  "data/vscode-plugin/hooks/hooks.json",
+  "data/vscode-plugin/.mcp.json",
+  "data/vscode-plugin/scripts/pushary-gate.mjs"
+];
+var globalPackageBinsPresent = (name) => {
+  try {
+    const root = execNpm("root -g --no-workspaces", { timeout: 5e3 }).toString().trim();
+    const prefix = execNpm("prefix -g --no-workspaces", { timeout: 5e3 }).toString().trim();
+    return packageBinsPresent(join(root, ...name.split("/")), prefix, process.platform, AGENT_HOOKS_RUNTIME_FILES);
+  } catch {
+    return false;
+  }
+};
+var resolveGlobalBinDir = (probe) => {
+  if (process.platform === "win32") return void 0;
+  const resolved = resolveGlobalBinary(probe);
+  return resolved ? resolved.slice(0, resolved.length - probe.length - 1) : void 0;
+};
+var quoteIfNeeded = (path) => /\s/.test(path) ? `"${path}"` : path;
+var needsGlobalInstall = (requested, installed, binaryPresent) => requested !== installed || !binaryPresent;
+var installState;
+var installGlobally = (options) => {
+  if (installState) {
+    return installState.then((result) => result === "installed" ? "cached" : result);
+  }
+  const started = (async () => {
+    const pinned = process.env.PUSHARY_PIN_GLOBAL_VERSION !== "0";
+    if (pinned && !needsGlobalInstall(
+      options.version,
+      resolveGlobalPackageVersion("@pushary/agent-hooks"),
+      globalPackageBinsPresent("@pushary/agent-hooks")
+    )) {
+      return "skipped";
+    }
+    const spec = pinned && options.version && options.version !== "0.0.0" ? `@pushary/agent-hooks@${options.version}` : "@pushary/agent-hooks@latest";
+    execNpm(`install -g --no-workspaces ${spec}`, { timeout: options.timeoutMs ?? 12e4 });
+    return "installed";
+  })();
+  installState = started;
+  started.catch(() => {
+    if (installState === started) installState = void 0;
+  });
+  return started;
+};
+
+// src/hook-command.ts
+var HOOK_SHELL = "/bin/sh -c";
+var holdBudgetOf = (hook) => hook.holds ? hook.timeout : void 0;
+var LOCATE = 'B=$(command -v "$0") || exit 0; [ -f "$B" ] || exit 0; [ -x "$B" ] || exit 0';
+var NODE_PRESENT = "command -v node >/dev/null 2>&1 || exit 0";
+var CURSOR_NO_OPINION = { permission: "deny", user_message: "Command denied via Pushary.", agent_message: "Pushary hook is unavailable. Repair the integration before retrying." };
+var shellDoubleQuoted = (text) => `"${text.replace(/(["\\$`])/g, "\\$1")}"`;
+var CURSOR_NATIVE_PROMPT = { permission: "ask" };
+var CURSOR_NATIVE_PROMPT_EVENTS = ["beforeShellExecution", "beforeMCPExecution"];
+var hookEventIsOneOf = (events) => events.flatMap((event) => [`*\\"hook_event_name\\":\\"${event}\\"*`, `*\\"hook_event_name\\":\\ \\"${event}\\"*`]).join("|");
+var CURSOR_MISS = `{ E=$(cat); case "$E" in ${hookEventIsOneOf(CURSOR_NATIVE_PROMPT_EVENTS)}) printf %s ${shellDoubleQuoted(JSON.stringify(CURSOR_NATIVE_PROMPT))} ;; *) printf %s ${shellDoubleQuoted(JSON.stringify(CURSOR_NO_OPINION))} ;; esac; exit 0; }`;
+var HOOK_GUARD_SCRIPTS = {
+  native_binary: `${LOCATE}; exec "$B" "$@"`,
+  node_binary: `${LOCATE}; ${NODE_PRESENT}; exec "$B" "$@"`,
+  node_script: `[ -f "$0" ] || exit 0; ${NODE_PRESENT}; exec node "$0" "$@"`,
+  cursor_gate_script: `[ -f "$0" ] || ${CURSOR_MISS}; command -v node >/dev/null 2>&1 || ${CURSOR_MISS}; exec node "$0" "$@"`
+};
+var BINARY_GUARDS = {
+  native: "native_binary",
+  node: "node_binary"
+};
+var guardKindOf = (target) => {
+  switch (target.kind) {
+    case "node":
+      return "node_script";
+    case "cursor_gate":
+      return "cursor_gate_script";
+    case "binary":
+      return BINARY_GUARDS[target.runtime];
+  }
+};
+var targetPath = (target) => target.kind === "binary" ? target.path : target.script;
+var runsThroughNode = (target) => target.kind !== "binary";
+var guardHookCommand = (target, platform = process.platform) => {
+  const path = quoteIfNeeded(targetPath(target));
+  if (platform === "win32") return runsThroughNode(target) ? `node ${path}` : path;
+  return `${HOOK_SHELL} '${HOOK_GUARD_SCRIPTS[guardKindOf(target)]}' ${path}`;
+};
+var guardBinary = (path, platform) => guardHookCommand({ kind: "binary", path, runtime: "node" }, platform);
+var guardCursorGate = (script, platform) => guardHookCommand({ kind: "cursor_gate", script }, platform);
+var guardedArgv = (target, args = [], platform = process.platform) => {
+  const path = targetPath(target);
+  if (platform === "win32") {
+    return runsThroughNode(target) ? ["node", path, ...args] : [path, ...args];
+  }
+  const [shell, ...shellArgs] = HOOK_SHELL.split(/\s+/);
+  return [shell, ...shellArgs, HOOK_GUARD_SCRIPTS[guardKindOf(target)], path, ...args];
+};
 
 // src/removal-scope.ts
 var namesAppLocator = (command) => command.includes(HOOK_LOCATOR_BINARY);
@@ -10,7 +225,24 @@ var isProtectedByScope = (command, scope) => scope?.keepAppWiring === true && na
 // src/codex-config.ts
 import { createHash } from "crypto";
 import { homedir } from "os";
-import { join } from "path";
+import { join as join2 } from "path";
+
+// src/hook-entries.ts
+var registerHookEntry = (existing, isOurs, entry) => {
+  const rewritten = [];
+  let placed = false;
+  for (const item of existing) {
+    if (!isOurs(item)) {
+      rewritten.push(item);
+      continue;
+    }
+    if (placed) continue;
+    rewritten.push(entry);
+    placed = true;
+  }
+  if (!placed) rewritten.push(entry);
+  return rewritten;
+};
 
 // src/canonical-json.ts
 var canonicalJson = (value) => {
@@ -23,17 +255,17 @@ var canonicalJson = (value) => {
 // src/codex-config.ts
 var CODEX_HOOK_BINARY = "pushary-codex-hook";
 var codexHome = () => codexHomeFrom(homedir());
-var codexHomeFrom = (home) => process.env.CODEX_HOME?.trim() || join(home, ".codex");
-var codexConfigToml = () => join(codexHome(), "config.toml");
-var codexHooksJson = () => join(codexHome(), "hooks.json");
-var codexAgentsMd = () => join(codexHome(), "AGENTS.md");
-var codexSkillDir = () => join(codexHome(), "skills", "pushary");
+var codexHomeFrom = (home) => process.env.CODEX_HOME?.trim() || join2(home, ".codex");
+var codexConfigToml = () => join2(codexHome(), "config.toml");
+var codexHooksJson = () => join2(codexHome(), "hooks.json");
+var codexAgentsMd = () => join2(codexHome(), "AGENTS.md");
+var codexSkillDir = () => join2(codexHome(), "skills", "pushary");
 var CODEX_HOOK_EVENTS = [
   { event: "PermissionRequest", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Waiting for your phone" },
   { event: "PreToolUse", matcher: "Bash|apply_patch|mcp__.*", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Checking Pushary policy" },
   { event: "PostToolUse", matcher: "Bash|apply_patch|mcp__.*", delivery: "telemetry", timeout: 10 },
   { event: "UserPromptSubmit", delivery: "telemetry", timeout: 10 },
-  { event: "Stop", delivery: "telemetry", timeout: 10 },
+  { event: "Stop", delivery: "rescue", timeout: HOOK_BUDGETS.codex.budgetSeconds, holds: true },
   // `clear` alongside startup and resume, matching what we already do on Claude
   // Code. Codex names all three in its own SessionStart sources, and without it a
   // session the person started by clearing is one we never see begin.
@@ -110,17 +342,15 @@ var addCodexHooks = (config, command) => {
   const hooks = ensureRecord(config, "hooks");
   for (const definition of CODEX_HOOK_EVENTS) {
     const existing = Array.isArray(hooks[definition.event]) ? hooks[definition.event] : [];
-    const entries = existing.filter((entry) => !isPusharyCodexHook(entry));
-    entries.push({
+    hooks[definition.event] = registerHookEntry(existing, isPusharyCodexHook, {
       ...definition.matcher ? { matcher: definition.matcher } : {},
       hooks: [{
         type: "command",
-        command,
+        command: withHookHoldBudget(command, holdBudgetOf(definition)),
         timeout: definition.timeout,
         ...definition.statusMessage ? { statusMessage: definition.statusMessage } : {}
       }]
     });
-    hooks[definition.event] = entries;
   }
 };
 var removeCodexHooks = (config, scope) => {
@@ -159,7 +389,7 @@ var missingCodexHookEvents = (config) => {
   }).map((definition) => definition.event);
 };
 var codexHookTrustHash = (definition, command) => {
-  const hook = { command, timeout: definition.timeout, type: "command" };
+  const hook = { command: withHookHoldBudget(command, holdBudgetOf(definition)), timeout: definition.timeout, type: "command" };
   if (definition.statusMessage) hook.statusMessage = definition.statusMessage;
   const entry = { hooks: [hook] };
   if (definition.matcher) entry.matcher = definition.matcher;
@@ -206,6 +436,33 @@ var codexHookPositions = (hooksConfig) => {
   return positions;
 };
 var codexHookStateKey = (hooksJsonPath, event, position) => `${hooksJsonPath}:${CODEX_EVENT_KEY[event]}:${position[0]}:${position[1]}`;
+var codexVacatedIndexes = (hooksConfig) => {
+  const hooks = asRecord(hooksConfig?.hooks);
+  const vacated = {};
+  for (const definition of CODEX_HOOK_EVENTS) {
+    const entries = hooks?.[definition.event];
+    if (!Array.isArray(entries)) continue;
+    const ours = entries.flatMap((entry, index) => isPusharyCodexHook(entry) ? [index] : []);
+    if (ours.length > 1) vacated[definition.event] = ours[1];
+  }
+  return vacated;
+};
+var dropVacatedCodexHookTrust = (config, hooksJsonPath, vacated) => {
+  const state = asRecord(asRecord(config.hooks)?.state);
+  if (!state) return false;
+  let changed = false;
+  for (const [event, from] of Object.entries(vacated)) {
+    const prefix = `${hooksJsonPath}:${CODEX_EVENT_KEY[event] ?? codexEventKeyOf(event)}:`;
+    for (const key of Object.keys(state)) {
+      if (!key.startsWith(prefix)) continue;
+      const entryIndex = Number(key.slice(prefix.length).split(":")[0]);
+      if (!Number.isInteger(entryIndex) || entryIndex < from) continue;
+      delete state[key];
+      changed = true;
+    }
+  }
+  return changed;
+};
 var captureCodexHookTrust = (config, hooksJsonPath, positions) => {
   const state = asRecord(asRecord(config.hooks)?.state);
   if (!state) return {};
@@ -308,29 +565,43 @@ var staleTrustKeys = (state, hooksJsonPath, event, currentKey, ourHash) => {
 
 // src/setup/paths.ts
 import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
-var claudeSettings = () => join2(homedir2(), ".claude", "settings.json");
-var claudeJson = () => join2(homedir2(), ".claude.json");
-var claudeSkillDir = () => join2(homedir2(), ".claude", "skills", "pushary");
-var cursorPluginDir = () => join2(homedir2(), ".cursor", "plugins", "local", "pushary");
-var cursorUserHooks = () => join2(homedir2(), ".cursor", "hooks.json");
-var cursorUserMcp = () => join2(homedir2(), ".cursor", "mcp.json");
-var vscodePluginDir = () => join2(homedir2(), ".pushary", "plugins", "vscode");
-var vscodePluginMcp = () => join2(vscodePluginDir(), ".mcp.json");
-var claudeSettingsLocal = () => join2(homedir2(), ".claude", "settings.local.json");
-var pusharyDir = () => join2(homedir2(), ".pushary");
-var claudeMcpReceipt = () => join2(pusharyDir(), "setup", "claude-mcp.json");
-var bridgeAgentKey = () => join2(pusharyDir(), "bridge-auth", "agent-key.json");
-var claudeRegistrationReceipt = () => join2(pusharyDir(), "setup", "claude-registration.json");
-var hermesConfigReceipt = () => join2(pusharyDir(), "setup", "hermes-config.json");
-var hookTakeoverReceipt = (agent) => join2(pusharyDir(), "setup", `hook-takeover-${agent}.json`);
-var codexSkillDir2 = () => join2(codexHome(), "skills", "pushary");
-var codexAgentsMd2 = () => join2(codexHome(), "AGENTS.md");
-var geminiSettings = () => join2(homedir2(), ".gemini", "settings.json");
-var geminiMd = () => join2(homedir2(), ".gemini", "GEMINI.md");
-var pusharyConfigFile = () => join2(homedir2(), ".pushary", "config.json");
+import { join as join3 } from "path";
+var claudeSettings = () => join3(homedir2(), ".claude", "settings.json");
+var claudeJson = () => join3(homedir2(), ".claude.json");
+var claudeSkillDir = () => join3(homedir2(), ".claude", "skills", "pushary");
+var cursorPluginDir = () => join3(homedir2(), ".cursor", "plugins", "local", "pushary");
+var cursorUserHooks = () => join3(homedir2(), ".cursor", "hooks.json");
+var cursorUserMcp = () => join3(homedir2(), ".cursor", "mcp.json");
+var vscodePluginDir = () => join3(homedir2(), ".pushary", "plugins", "vscode");
+var vscodePluginMcp = () => join3(vscodePluginDir(), ".mcp.json");
+var claudeSettingsLocal = () => join3(homedir2(), ".claude", "settings.local.json");
+var pusharyDir = () => join3(homedir2(), ".pushary");
+var claudeMcpReceipt = () => join3(pusharyDir(), "setup", "claude-mcp.json");
+var bridgeAgentKey = () => join3(pusharyDir(), "bridge-auth", "agent-key.json");
+var claudeRegistrationReceipt = () => join3(pusharyDir(), "setup", "claude-registration.json");
+var hermesConfigReceipt = () => join3(pusharyDir(), "setup", "hermes-config.json");
+var hookTakeoverReceipt = (agent) => join3(pusharyDir(), "setup", `hook-takeover-${agent}.json`);
+var codexSkillDir2 = () => join3(codexHome(), "skills", "pushary");
+var codexAgentsMd2 = () => join3(codexHome(), "AGENTS.md");
+var geminiSettings = () => join3(homedir2(), ".gemini", "settings.json");
+var geminiMd = () => join3(homedir2(), ".gemini", "GEMINI.md");
+var pusharyConfigFile = () => join3(homedir2(), ".pushary", "config.json");
 
 export {
+  npmErrorMessage,
+  execNpm,
+  resolveGlobalBinary,
+  resolvePathBinary,
+  resolveBinary,
+  resolvePackageVersionFromBinary,
+  resolveGlobalPackageVersion,
+  resolveGlobalBinDir,
+  installGlobally,
+  holdBudgetOf,
+  guardBinary,
+  guardCursorGate,
+  guardedArgv,
+  registerHookEntry,
   isProtectedByScope,
   canonicalJson,
   CODEX_HOOK_BINARY,
@@ -349,6 +620,8 @@ export {
   missingCodexHookEvents,
   codexTrustSchemeAgrees,
   codexHookPositions,
+  codexVacatedIndexes,
+  dropVacatedCodexHookTrust,
   captureCodexHookTrust,
   restoreCodexHookTrust,
   codexTrustGaps,

package/dist/{chunk-5GKNAQTG.js → chunk-XOOWC62T.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-SKPXQRKN.js → chunk-XPPXOKIG.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-HUGIKB5O.js → chunk-YJDRHQLG.js}

@@ -18,26 +18,26 @@ import {
   summarizeStop,
   taskTitleFrom,
   toolResultErrorText
-} from "./chunk-Z4JVEL7R.js";
+} from "./chunk-A76GNRIK.js";
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-XUTSZYYJ.js";
+} from "./chunk-OPR2BPD4.js";
 import {
   cancelQuestion,
   isPolicyConfig,
   sendNotification,
   waitForAnswer
-} from "./chunk-XS33QBJA.js";
+} from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-E47WV7BJ.js";
+} from "./chunk-WU6LSXJ6.js";
 import {
   withRetry
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VZD2GEKB.js";
 import {
   getApiKey,
   getBaseUrl
@@ -54,7 +54,7 @@ import {
   pendingCommandEvents,
   resolveAutoResolveOrigin,
   resolvePolicy
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/policy.ts
 import { createHash } from "crypto";

package/dist/src/index.js

@@ -1,8 +1,8 @@
 import {
   handlePreToolUse
-} from "../chunk-A22VQ5ZL.js";
-import "../chunk-VDI645ZX.js";
-import "../chunk-5GKNAQTG.js";
+} from "../chunk-6CYB77VD.js";
+import "../chunk-53QCTSWY.js";
+import "../chunk-XOOWC62T.js";
 import "../chunk-YHG74UFF.js";
 import {
   fetchAccountPublicKey
@@ -15,28 +15,28 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-HUGIKB5O.js";
-import "../chunk-Z4JVEL7R.js";
-import "../chunk-XUTSZYYJ.js";
+} from "../chunk-YJDRHQLG.js";
+import "../chunk-A76GNRIK.js";
+import "../chunk-OPR2BPD4.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
-} from "../chunk-XS33QBJA.js";
-import "../chunk-E47WV7BJ.js";
-import "../chunk-NOVA7KZ2.js";
+} from "../chunk-LGXUGYUH.js";
+import "../chunk-WU6LSXJ6.js";
+import "../chunk-XL3RKJYQ.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-L7NOG547.js";
+import "../chunk-VZD2GEKB.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
 import {
   resolvePolicy
-} from "../chunk-MC5WUOJJ.js";
+} from "../chunk-OUAE3GKO.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.95.8",
+  "version": "0.98.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",

package/dist/chunk-3AJIK5AO.js

@@ -1,57 +0,0 @@
-import {
-  quoteIfNeeded
-} from "./chunk-L4ZCFMWW.js";
-
-// src/hook-command.ts
-var HOOK_SHELL = "/bin/sh -c";
-var LOCATE = 'B=$(command -v "$0") || exit 0; [ -f "$B" ] || exit 0; [ -x "$B" ] || exit 0';
-var NODE_PRESENT = "command -v node >/dev/null 2>&1 || exit 0";
-var CURSOR_NO_OPINION = { permission: "deny", user_message: "Command denied via Pushary.", agent_message: "Pushary hook is unavailable. Repair the integration before retrying." };
-var shellDoubleQuoted = (text) => `"${text.replace(/(["\\$`])/g, "\\$1")}"`;
-var CURSOR_NATIVE_PROMPT = { permission: "ask" };
-var CURSOR_NATIVE_PROMPT_EVENTS = ["beforeShellExecution", "beforeMCPExecution"];
-var hookEventIsOneOf = (events) => events.flatMap((event) => [`*\\"hook_event_name\\":\\"${event}\\"*`, `*\\"hook_event_name\\":\\ \\"${event}\\"*`]).join("|");
-var CURSOR_MISS = `{ E=$(cat); case "$E" in ${hookEventIsOneOf(CURSOR_NATIVE_PROMPT_EVENTS)}) printf %s ${shellDoubleQuoted(JSON.stringify(CURSOR_NATIVE_PROMPT))} ;; *) printf %s ${shellDoubleQuoted(JSON.stringify(CURSOR_NO_OPINION))} ;; esac; exit 0; }`;
-var HOOK_GUARD_SCRIPTS = {
-  native_binary: `${LOCATE}; exec "$B" "$@"`,
-  node_binary: `${LOCATE}; ${NODE_PRESENT}; exec "$B" "$@"`,
-  node_script: `[ -f "$0" ] || exit 0; ${NODE_PRESENT}; exec node "$0" "$@"`,
-  cursor_gate_script: `[ -f "$0" ] || ${CURSOR_MISS}; command -v node >/dev/null 2>&1 || ${CURSOR_MISS}; exec node "$0" "$@"`
-};
-var BINARY_GUARDS = {
-  native: "native_binary",
-  node: "node_binary"
-};
-var guardKindOf = (target) => {
-  switch (target.kind) {
-    case "node":
-      return "node_script";
-    case "cursor_gate":
-      return "cursor_gate_script";
-    case "binary":
-      return BINARY_GUARDS[target.runtime];
-  }
-};
-var targetPath = (target) => target.kind === "binary" ? target.path : target.script;
-var runsThroughNode = (target) => target.kind !== "binary";
-var guardHookCommand = (target, platform = process.platform) => {
-  const path = quoteIfNeeded(targetPath(target));
-  if (platform === "win32") return runsThroughNode(target) ? `node ${path}` : path;
-  return `${HOOK_SHELL} '${HOOK_GUARD_SCRIPTS[guardKindOf(target)]}' ${path}`;
-};
-var guardBinary = (path, platform) => guardHookCommand({ kind: "binary", path, runtime: "node" }, platform);
-var guardCursorGate = (script, platform) => guardHookCommand({ kind: "cursor_gate", script }, platform);
-var guardedArgv = (target, args = [], platform = process.platform) => {
-  const path = targetPath(target);
-  if (platform === "win32") {
-    return runsThroughNode(target) ? ["node", path, ...args] : [path, ...args];
-  }
-  const [shell, ...shellArgs] = HOOK_SHELL.split(/\s+/);
-  return [shell, ...shellArgs, HOOK_GUARD_SCRIPTS[guardKindOf(target)], path, ...args];
-};
-
-export {
-  guardBinary,
-  guardCursorGate,
-  guardedArgv
-};