@pushary/agent-hooks 0.97.0 → 0.98.0

package/dist/{chunk-67RNDRKL.js → chunk-XL3RKJYQ.js}

@@ -2,7 +2,7 @@ import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/npm.ts
 import { execFileSync, execSync } from "child_process";
@@ -227,6 +227,23 @@ import { createHash } from "crypto";
 import { homedir } from "os";
 import { join as join2 } from "path";
 
+// src/hook-entries.ts
+var registerHookEntry = (existing, isOurs, entry) => {
+  const rewritten = [];
+  let placed = false;
+  for (const item of existing) {
+    if (!isOurs(item)) {
+      rewritten.push(item);
+      continue;
+    }
+    if (placed) continue;
+    rewritten.push(entry);
+    placed = true;
+  }
+  if (!placed) rewritten.push(entry);
+  return rewritten;
+};
+
 // src/canonical-json.ts
 var canonicalJson = (value) => {
   if (value === null || typeof value !== "object") return JSON.stringify(value);
@@ -325,8 +342,7 @@ var addCodexHooks = (config, command) => {
   const hooks = ensureRecord(config, "hooks");
   for (const definition of CODEX_HOOK_EVENTS) {
     const existing = Array.isArray(hooks[definition.event]) ? hooks[definition.event] : [];
-    const entries = existing.filter((entry) => !isPusharyCodexHook(entry));
-    entries.push({
+    hooks[definition.event] = registerHookEntry(existing, isPusharyCodexHook, {
       ...definition.matcher ? { matcher: definition.matcher } : {},
       hooks: [{
         type: "command",
@@ -335,7 +351,6 @@ var addCodexHooks = (config, command) => {
         ...definition.statusMessage ? { statusMessage: definition.statusMessage } : {}
       }]
     });
-    hooks[definition.event] = entries;
   }
 };
 var removeCodexHooks = (config, scope) => {
@@ -421,6 +436,33 @@ var codexHookPositions = (hooksConfig) => {
   return positions;
 };
 var codexHookStateKey = (hooksJsonPath, event, position) => `${hooksJsonPath}:${CODEX_EVENT_KEY[event]}:${position[0]}:${position[1]}`;
+var codexVacatedIndexes = (hooksConfig) => {
+  const hooks = asRecord(hooksConfig?.hooks);
+  const vacated = {};
+  for (const definition of CODEX_HOOK_EVENTS) {
+    const entries = hooks?.[definition.event];
+    if (!Array.isArray(entries)) continue;
+    const ours = entries.flatMap((entry, index) => isPusharyCodexHook(entry) ? [index] : []);
+    if (ours.length > 1) vacated[definition.event] = ours[1];
+  }
+  return vacated;
+};
+var dropVacatedCodexHookTrust = (config, hooksJsonPath, vacated) => {
+  const state = asRecord(asRecord(config.hooks)?.state);
+  if (!state) return false;
+  let changed = false;
+  for (const [event, from] of Object.entries(vacated)) {
+    const prefix = `${hooksJsonPath}:${CODEX_EVENT_KEY[event] ?? codexEventKeyOf(event)}:`;
+    for (const key of Object.keys(state)) {
+      if (!key.startsWith(prefix)) continue;
+      const entryIndex = Number(key.slice(prefix.length).split(":")[0]);
+      if (!Number.isInteger(entryIndex) || entryIndex < from) continue;
+      delete state[key];
+      changed = true;
+    }
+  }
+  return changed;
+};
 var captureCodexHookTrust = (config, hooksJsonPath, positions) => {
   const state = asRecord(asRecord(config.hooks)?.state);
   if (!state) return {};
@@ -559,6 +601,7 @@ export {
   guardBinary,
   guardCursorGate,
   guardedArgv,
+  registerHookEntry,
   isProtectedByScope,
   canonicalJson,
   CODEX_HOOK_BINARY,
@@ -577,6 +620,8 @@ export {
   missingCodexHookEvents,
   codexTrustSchemeAgrees,
   codexHookPositions,
+  codexVacatedIndexes,
+  dropVacatedCodexHookTrust,
   captureCodexHookTrust,
   restoreCodexHookTrust,
   codexTrustGaps,

package/dist/{chunk-VOC55PQV.js → chunk-XOOWC62T.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-CDSA3NTB.js → chunk-XPPXOKIG.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-DGUMR5LZ.js → chunk-YJDRHQLG.js}

@@ -18,11 +18,11 @@ import {
   summarizeStop,
   taskTitleFrom,
   toolResultErrorText
-} from "./chunk-VCKQ45QA.js";
+} from "./chunk-A76GNRIK.js";
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-QFAZ6QCT.js";
+} from "./chunk-OPR2BPD4.js";
 import {
   cancelQuestion,
   isPolicyConfig,
@@ -31,13 +31,13 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-IZKCA35M.js";
+} from "./chunk-WU6LSXJ6.js";
 import {
   withRetry
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-VTUN7WSG.js";
+} from "./chunk-VZD2GEKB.js";
 import {
   getApiKey,
   getBaseUrl
@@ -54,7 +54,7 @@ import {
   pendingCommandEvents,
   resolveAutoResolveOrigin,
   resolvePolicy
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/policy.ts
 import { createHash } from "crypto";

package/dist/src/index.js

@@ -1,8 +1,8 @@
 import {
   handlePreToolUse
-} from "../chunk-YX3U2CLP.js";
-import "../chunk-XDMHLQMH.js";
-import "../chunk-VOC55PQV.js";
+} from "../chunk-6CYB77VD.js";
+import "../chunk-53QCTSWY.js";
+import "../chunk-XOOWC62T.js";
 import "../chunk-YHG74UFF.js";
 import {
   fetchAccountPublicKey
@@ -15,28 +15,28 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-DGUMR5LZ.js";
-import "../chunk-VCKQ45QA.js";
-import "../chunk-QFAZ6QCT.js";
+} from "../chunk-YJDRHQLG.js";
+import "../chunk-A76GNRIK.js";
+import "../chunk-OPR2BPD4.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
 } from "../chunk-LGXUGYUH.js";
-import "../chunk-IZKCA35M.js";
-import "../chunk-67RNDRKL.js";
+import "../chunk-WU6LSXJ6.js";
+import "../chunk-XL3RKJYQ.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-VTUN7WSG.js";
+import "../chunk-VZD2GEKB.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
 import {
   resolvePolicy
-} from "../chunk-HUZW6SEO.js";
+} from "../chunk-OUAE3GKO.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.97.0",
+  "version": "0.98.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",