@pushary/agent-hooks 0.99.0 → 1.1.0

package/dist/{chunk-64WARXGV.js → chunk-WTT24AUA.js}

@@ -1,28 +1,7 @@
-import {
-  AGENT_IDENTITIES,
-  TEAMMATE_IDLE_ACTION,
-  compactionAction,
-  deriveReceiptMeta,
-  deriveToolTarget,
-  describeStopFailure,
-  describeToolCall,
-  isToolResultError,
-  notificationAction,
-  notificationTypeOf,
-  parseApplyPatchFiles,
-  parseApplyPatchOps,
-  sessionEndAction,
-  sessionIdentityOf,
-  sessionStartAction,
-  subagentStopSummary,
-  summarizeStop,
-  taskTitleFrom,
-  toolResultErrorText
-} from "./chunk-A76GNRIK.js";
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-OPR2BPD4.js";
+} from "./chunk-INBTKFT6.js";
 import {
   cancelQuestion,
   isPolicyConfig,
@@ -31,18 +10,24 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-562UJ2DA.js";
+} from "./chunk-J7PJALS2.js";
 import {
   withRetry
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-GCD3SQSV.js";
+} from "./chunk-E3WQMDCE.js";
 import {
   getApiKey,
   getBaseUrl
 } from "./chunk-2UMNXADU.js";
 import {
+  ACTION_BODY_MAX,
+  AGENT_LABELS_BY_TYPE,
+  DECISION_LINE_MAX,
+  FILE_TARGET_TOOLS,
+  GATE_MAX_TOOL_INPUTS,
+  HOOK_COMPATIBLE_PROFILES,
   HOOK_SOURCES,
   PENDING_COMMAND_PREFIX,
   REPO_AWARE_AGENTS,
@@ -52,9 +37,11 @@ import {
   modeStateFromResponse,
   normalizeRepoRemote,
   pendingCommandEvents,
+  redactSecrets,
+  redactSecretsDeep,
   resolveAutoResolveOrigin,
   resolvePolicy
-} from "./chunk-OUAE3GKO.js";
+} from "./chunk-VQYARC2K.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -196,6 +183,657 @@ var fetchModeState = async (apiKey, sessionId, reuseWithinMs = 0, signal) => {
 };
 var fetchModeOverride = async (apiKey) => (await fetchModeState(apiKey)).mode;
 
+// ../hook-mapping/src/describe.ts
+import { isAbsolute, relative, resolve } from "path";
+var hookPrefixes = {
+  Bash: (input) => `bash: ${input.command ?? "(no command)"}`,
+  PowerShell: (input) => `powershell: ${input.command ?? "(no command)"}`,
+  Monitor: (input) => `monitor: ${input.command ?? "(no command)"}`,
+  Write: (input) => `write file: ${input.file_path ?? "(unknown path)"}`,
+  Edit: (input) => `edit file: ${input.file_path ?? "(unknown path)"}`,
+  MultiEdit: (input) => `edit file: ${input.file_path ?? "(unknown path)"}`,
+  Read: (input) => `read file: ${input.file_path ?? "(unknown path)"}`,
+  // Without an entry here the fallback stringifies the whole tool input, and for
+  // ExitPlanMode that input IS the plan: the action line became a truncated dump of
+  // the plan markdown. The plan belongs in the body, not the one-line summary.
+  ExitPlanMode: () => "finished planning and wants to start coding",
+  // Mirrored on PostToolUse since the matcher was widened. Without entries the
+  // fallback prints `Task: done` and `WebSearch: done`, which name the tool and
+  // drop the only part a person reads: which subagent, and what it looked for.
+  Task: (input) => `subagent: ${describeTaskCall(input)}`,
+  WebSearch: (input) => `web search: ${firstString(input.query) ?? "(no query)"}`
+};
+var describeTaskCall = (input) => firstString(input.description) ?? firstString(input.subagent_type) ?? "(unnamed)";
+var describeTodoProgress = (todos) => {
+  if (!Array.isArray(todos)) return "updated the plan";
+  const items = todos.filter((t) => !!t && typeof t === "object");
+  const total = items.length;
+  if (total === 0) return "updated the plan";
+  const done = items.filter((t) => t.status === "completed").length;
+  const current = items.find((t) => t.status === "in_progress");
+  const label = current ? [current.activeForm, current.content].find((v) => typeof v === "string" && v.trim().length > 0) : void 0;
+  if (done >= total) return `finished all ${total} tasks`;
+  if (label) return `${label.trim()} (${done}/${total} done)`;
+  return `${done}/${total} tasks done`;
+};
+var eventPrefixes = {
+  Bash: (input) => `ran: ${String(input.command ?? "")}`,
+  PowerShell: (input) => `ran: ${String(input.command ?? "")}`,
+  Monitor: (input) => `ran: ${String(input.command ?? "")}`,
+  Write: (input) => `wrote: ${input.file_path ?? "unknown"}`,
+  Edit: (input) => `edited: ${input.file_path ?? "unknown"}`,
+  MultiEdit: (input) => `edited: ${input.file_path ?? "unknown"}`,
+  Read: (input) => `read: ${input.file_path ?? "unknown"}`,
+  TodoWrite: (input) => describeTodoProgress(input.todos),
+  Task: (input) => `ran subagent: ${describeTaskCall(input)}`,
+  WebSearch: (input) => `searched: ${firstString(input.query) ?? "the web"}`
+};
+var MCP_TOOL_PREFIX = "mcp__";
+var parseMcpToolName = (toolName) => {
+  if (!toolName.startsWith(MCP_TOOL_PREFIX)) return void 0;
+  const rest = toolName.slice(MCP_TOOL_PREFIX.length);
+  const split = rest.indexOf("__");
+  if (split <= 0 || split + 2 >= rest.length) return void 0;
+  return { server: rest.slice(0, split), tool: rest.slice(split + 2) };
+};
+var NETWORK_TARGET_KEYS = ["url", "urls", "href", "host", "hosts", "hostname", "domain", "domains"];
+var ABSOLUTE_HTTP_URL = /^https?:\/\//i;
+var HOSTNAME = /^(?=.{1,253}$)[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+(?::\d{1,5})?$/i;
+var hostOfUrl = (value) => {
+  try {
+    return new URL(value).host || void 0;
+  } catch {
+    return void 0;
+  }
+};
+var hostOf = (value, bareHostnames) => {
+  if (typeof value !== "string") return void 0;
+  const trimmed = value.trim();
+  if (ABSOLUTE_HTTP_URL.test(trimmed)) return hostOfUrl(trimmed);
+  return bareHostnames && HOSTNAME.test(trimmed) ? trimmed : void 0;
+};
+var firstHost = (value, bareHostnames) => Array.isArray(value) ? value.map((entry) => hostOf(entry, bareHostnames)).find((host) => host !== void 0) : hostOf(value, bareHostnames);
+var deriveNetworkTarget = (toolInput) => {
+  for (const key of NETWORK_TARGET_KEYS) {
+    const host = firstHost(toolInput[key], true);
+    if (host) return host;
+  }
+  return Object.values(toolInput).map((value) => firstHost(value, false)).find((host) => host !== void 0);
+};
+var describeUnbuiltCall = (toolName, toolInput, format) => {
+  const mcp = parseMcpToolName(toolName);
+  const host = deriveNetworkTarget(toolInput);
+  if (mcp) {
+    if (format === "event") return `called ${mcp.tool} on ${mcp.server}`;
+    return host ? `call ${mcp.tool} on ${mcp.server} to reach ${host}` : `call ${mcp.tool} on ${mcp.server}`;
+  }
+  if (host) return format === "event" ? `accessed ${host}` : `network access to ${host}`;
+  return void 0;
+};
+var EVENT_ACTION_MAX = 120;
+var HOOK_FALLBACK_MAX = 200;
+var UNNAMED_ACTION = "this request";
+var describeToolCall = (toolName, toolInput, format = "hook") => {
+  if (!toolName) return "";
+  const prefixes = format === "hook" ? hookPrefixes : eventPrefixes;
+  const builder = prefixes[toolName];
+  const unbuilt = builder ? void 0 : describeUnbuiltCall(toolName, toolInput ?? {}, format);
+  const detail = JSON.stringify(toolInput ?? {});
+  const raw = builder ? builder(toolInput) : unbuilt ?? (format === "hook" ? detail === "{}" || detail === void 0 ? toolName : `${toolName}: ${detail}` : `${toolName}: done`);
+  const redacted = redactSecrets(raw);
+  if (format === "event") return redacted.slice(0, EVENT_ACTION_MAX);
+  return builder || unbuilt ? redacted : redacted.slice(0, HOOK_FALLBACK_MAX);
+};
+var TOOL_TARGET_MAX_LENGTH = 80;
+var deriveCommandHead = (command) => {
+  if (typeof command !== "string") return void 0;
+  const head = command.trim().split(/\s+/).slice(0, 2).join(" ");
+  return head ? redactSecrets(head).slice(0, TOOL_TARGET_MAX_LENGTH) : void 0;
+};
+var deriveToolTarget = (toolName, toolInput) => {
+  if (toolName === "Bash" || toolName === "PowerShell" || toolName === "Monitor") {
+    return deriveCommandHead(toolInput.command);
+  }
+  if (FILE_TARGET_TOOLS.has(toolName)) {
+    const filePath = toolInput.file_path;
+    if (typeof filePath !== "string") return void 0;
+    const separator = Math.max(filePath.lastIndexOf("/"), filePath.lastIndexOf("\\"));
+    const base = filePath.slice(separator + 1);
+    const dot = base.lastIndexOf(".");
+    if (dot <= 0) return void 0;
+    return base.slice(dot).slice(0, TOOL_TARGET_MAX_LENGTH);
+  }
+  const mcp = parseMcpToolName(toolName);
+  if (mcp) return mcp.server.slice(0, TOOL_TARGET_MAX_LENGTH);
+  return deriveNetworkTarget(toolInput)?.slice(0, TOOL_TARGET_MAX_LENGTH);
+};
+var SCRIPT_RUNNERS = /* @__PURE__ */ new Set(["npm", "pnpm", "yarn", "bun", "npx", "deno", "rake", "make", "just", "task", "turbo"]);
+var RUN_SUBCOMMANDS = /* @__PURE__ */ new Set(["run", "run-script", "exec", "task"]);
+var deriveReceiptCommandHead = (command) => {
+  if (typeof command !== "string") return void 0;
+  const tokens = command.trim().split(/\s+/);
+  const [first, second] = tokens;
+  const keep = first && second && SCRIPT_RUNNERS.has(first.toLowerCase()) && RUN_SUBCOMMANDS.has(second.toLowerCase()) ? 3 : 2;
+  const head = tokens.slice(0, keep).join(" ");
+  return head ? redactSecrets(head).slice(0, TOOL_TARGET_MAX_LENGTH) : void 0;
+};
+var RECEIPT_TARGET_MAX_LENGTH = 256;
+var parseApplyPatchOps = (command) => {
+  if (typeof command !== "string") return [];
+  const ops = [];
+  for (const line of command.split("\n")) {
+    const file = line.match(/^\*\*\*\s+(Add|Update|Delete) File:\s+(.+?)\s*$/);
+    if (file) {
+      ops.push({ op: file[1].toLowerCase(), path: file[2] });
+      continue;
+    }
+    const move = line.match(/^\*\*\*\s+Move to:\s+(.+?)\s*$/);
+    if (move) ops.push({ op: "move", path: move[1] });
+  }
+  return ops;
+};
+var parseApplyPatchFiles = (command) => [...new Set(parseApplyPatchOps(command).map((entry) => entry.path))];
+var OPENCODE_TOOL_NAMES = {
+  bash: "Bash",
+  // A shell command reaching outside the worktree asks a second time under its
+  // own key. It is still the same command, and still Bash.
+  external_directory: "Bash",
+  edit: "Edit",
+  patch: "Edit",
+  apply_patch: "Edit",
+  write: "Write",
+  read: "Read",
+  glob: "Glob",
+  grep: "Grep",
+  webfetch: "WebFetch",
+  websearch: "WebSearch",
+  task: "Task"
+};
+var canonicalGateInputs = (source, toolName, toolInputs, cwd) => {
+  if (source === "codex" && toolName === "apply_patch" || source === "vscode" && ["apply_patch", "applyPatch", "copilot_applyPatch"].includes(toolName)) {
+    const paths = [...new Set(toolInputs.flatMap((input) => parseApplyPatchFiles(input.command ?? input.input ?? input.patch)))];
+    if (paths.length > GATE_MAX_TOOL_INPUTS) return null;
+    return {
+      toolName: "Edit",
+      toolInputs: paths.length === 0 ? toolInputs.map((input) => ({ file_path: input.command })) : paths.map((path) => ({ file_path: cwd && !isAbsolute(path) ? resolve(cwd, path) : path }))
+    };
+  }
+  if (source === "opencode") {
+    const canonical2 = OPENCODE_TOOL_NAMES[toolName] ?? toolName;
+    return {
+      toolName: canonical2,
+      toolInputs: toolInputs.map((input) => {
+        const path = input.file_path;
+        return typeof path === "string" && path.length > 0 && cwd && !isAbsolute(path) ? { ...input, file_path: resolve(cwd, path) } : input;
+      })
+    };
+  }
+  if (source === "vscode" || source === "cursor") {
+    if (source === "vscode" && toolName.startsWith("mcp_pushary_")) return { toolName: `mcp__pushary__${toolName.slice("mcp_pushary_".length)}`, toolInputs };
+    const alias = toolName.replace(/^copilot_/, "").toLowerCase().replace(/[^a-z0-9]/g, "");
+    const shells = [
+      "runterminalcommand",
+      "runinterminal",
+      "runcommand",
+      "terminalcommand",
+      "executecommand",
+      "runinterminalcommand",
+      "bash",
+      "shell",
+      "terminal",
+      "sendtoterminal",
+      "powershell",
+      "localshell"
+    ];
+    const canonical2 = shells.includes(alias) ? "Bash" : ["createfile", "write", "createdirectory", "createnewjupyternotebook"].includes(alias) ? "Write" : ["replacestringinfile", "multireplacestringinfile", "replacestring", "multireplacestring", "inserteditintofile", "insertedit", "edit", "editfile", "editfiles", "editnotebookfile", "editnotebook"].includes(alias) ? "Edit" : [
+      "readfile",
+      "viewimage",
+      "listdir",
+      "listdirectory",
+      "filesearch",
+      "findfiles",
+      "grepsearch",
+      "findtextinfiles",
+      "semanticsearch",
+      "searchcodebase",
+      "searchworkspacesymbols",
+      "geterrors",
+      "getchangedfiles",
+      "readprojectstructure",
+      "getnotebooksummary",
+      "readnotebookcelloutput",
+      "testsearch",
+      "findtestfiles",
+      "testfailure",
+      "getvscodeapi",
+      "getterminaloutput",
+      "gettaskoutput",
+      "terminalselection",
+      "terminallastcommand"
+    ].includes(alias) ? "Read" : toolName;
+    const inputs = toolInputs.flatMap((input) => ["multireplacestringinfile", "multireplacestring"].includes(alias) && Array.isArray(input.replacements) ? input.replacements.filter((item) => !!item && typeof item === "object" && !Array.isArray(item)) : alias === "editfiles" && Array.isArray(input.files) ? input.files.map((file) => typeof file === "string" ? { file_path: file } : file).filter((file) => !!file && typeof file === "object" && !Array.isArray(file)) : [input]);
+    if (inputs.length > GATE_MAX_TOOL_INPUTS) return null;
+    return { toolName: canonical2, toolInputs: inputs.map((input) => {
+      if (canonical2 === "Bash") return { ...input, command: [input.command, input.commandLine, input.command_line, input.cmd, input.script, input.input, input.text].find((value) => typeof value === "string") };
+      const path = input.file_path ?? input.filePath ?? input.path;
+      return typeof path === "string" ? { ...input, file_path: cwd && !isAbsolute(path) ? resolve(cwd, path) : path } : input;
+    }) };
+  }
+  if (source !== "gemini") return { toolName, toolInputs };
+  if (toolName === "run_shell_command") {
+    return { toolName: "Bash", toolInputs: toolInputs.map((input) => ({ command: input.command })) };
+  }
+  const canonical = { write_file: "Write", replace: "Edit", read_file: "Read" }[toolName];
+  if (!canonical) return { toolName, toolInputs };
+  return {
+    toolName: canonical,
+    toolInputs: toolInputs.map((input) => {
+      const path = [input.file_path, input.absolute_path, input.path].find((value) => typeof value === "string" && value.length > 0);
+      return path ? { file_path: cwd && !isAbsolute(path) ? resolve(cwd, path) : path } : {};
+    })
+  };
+};
+var EXIT_CODE_FAILURE = /^Error: Exit code \d+/;
+var isToolResultError = (toolResult) => {
+  try {
+    if (typeof toolResult === "string") return EXIT_CODE_FAILURE.test(toolResult);
+    if (!toolResult || typeof toolResult !== "object") return false;
+    return "error" in toolResult || "is_error" in toolResult;
+  } catch {
+    return false;
+  }
+};
+var toolResultErrorText = (toolResult) => {
+  try {
+    const raw = typeof toolResult === "string" ? toolResult : toolResult && typeof toolResult === "object" ? String(
+      toolResult.error ?? toolResult.stderr ?? ""
+    ) : "";
+    return redactSecrets(raw);
+  } catch {
+    return "";
+  }
+};
+var relativizeReceiptPath = (filePath, cwd) => {
+  if (!cwd || !isAbsolute(filePath)) return filePath;
+  return relative(cwd, filePath);
+};
+var deriveReceiptMeta = (toolName, toolInput, toolResult, cwd) => {
+  try {
+    const ok = !isToolResultError(toolResult);
+    if (toolName === "apply_patch") {
+      const files = parseApplyPatchFiles(toolInput.command);
+      const target = files.length === 1 ? files[0] : toolInput.command;
+      if (typeof target !== "string" || !target) return void 0;
+      return { kind: "edit", target: redactSecrets(target).slice(0, RECEIPT_TARGET_MAX_LENGTH), ok };
+    }
+    const canonicalTool = {
+      run_shell_command: "Bash",
+      write_file: "Write",
+      replace: "Edit"
+    }[toolName] ?? toolName;
+    const canonicalInput = canonicalTool === toolName ? toolInput : {
+      ...toolInput,
+      file_path: toolInput.file_path ?? toolInput.absolute_path ?? toolInput.path
+    };
+    if (FILE_TARGET_TOOLS.has(canonicalTool)) {
+      const filePath = canonicalInput.file_path;
+      if (typeof filePath !== "string" || !filePath) return void 0;
+      return {
+        kind: canonicalTool === "Write" ? "write" : "edit",
+        // A path is an unlikely place for a credential but not an impossible one
+        // (a token in a temp directory name), and this field is persisted.
+        target: redactSecrets(relativizeReceiptPath(filePath, cwd)).slice(0, RECEIPT_TARGET_MAX_LENGTH),
+        ok
+      };
+    }
+    if (canonicalTool === "Bash" || canonicalTool === "PowerShell" || canonicalTool === "Monitor") {
+      const head = deriveReceiptCommandHead(canonicalInput.command);
+      if (!head) return void 0;
+      return {
+        kind: head === "git commit" ? "commit" : "bash",
+        target: head,
+        ok
+      };
+    }
+    return void 0;
+  } catch {
+    return void 0;
+  }
+};
+var scopePathFor = (toolName, toolInput, cwd) => {
+  const meta = deriveReceiptMeta(toolName, toolInput, void 0, cwd);
+  if (!meta) return void 0;
+  return meta.kind === "edit" || meta.kind === "write" ? meta.target : void 0;
+};
+var firstString = (...values) => values.find((v) => typeof v === "string" && v.length > 0);
+var ACTION_BODY_TRUNCATION_MARKER = "\n\u2026 [truncated]";
+var capActionBody = (text) => text.length <= ACTION_BODY_MAX ? text : `${text.slice(0, ACTION_BODY_MAX - ACTION_BODY_TRUNCATION_MARKER.length)}${ACTION_BODY_TRUNCATION_MARKER}`;
+var rawActionBody = (toolName, toolInput) => {
+  if (toolName === "Edit" || toolName === "replace") {
+    const before = firstString(toolInput.old_string);
+    const after = firstString(toolInput.new_string);
+    if (before === void 0 && after === void 0) return firstString(toolInput.diff);
+    return `- ${before ?? ""}
++ ${after ?? ""}`;
+  }
+  if (toolName === "Write" || toolName === "write_file") {
+    return firstString(toolInput.content) ?? firstString(toolInput.diff);
+  }
+  if (toolName === "ExitPlanMode") return firstString(toolInput.plan);
+  if (toolName === "Bash" || toolName === "PowerShell" || toolName === "Monitor" || toolName === "run_shell_command" || toolName === "shell" || toolName === "apply_patch") {
+    return firstString(toolInput.command);
+  }
+  return firstString(toolInput.url, toolInput.href);
+};
+var deriveActionBody = (toolName, toolInput) => {
+  try {
+    const raw = rawActionBody(toolName, toolInput);
+    if (!raw) return void 0;
+    return capActionBody(redactSecretsDeep(raw));
+  } catch {
+    return void 0;
+  }
+};
+var deriveAction = (toolName, toolInput) => describeToolCall(toolName, toolInput, "hook").slice(0, DECISION_LINE_MAX);
+var BLOCKER_BY_MODE = {
+  push_only: "Approval required before this runs",
+  push_first: "Paused for your approval before continuing",
+  escalate: "Escalated to you after the approval timeout"
+};
+var deriveBlocker = (mode, reason) => {
+  const text = reason?.replace(/\s+/g, " ").trim() || BLOCKER_BY_MODE[mode] || "Waiting for your approval";
+  return text.slice(0, DECISION_LINE_MAX);
+};
+
+// ../hook-mapping/src/map.ts
+import { basename } from "path";
+var AGENT_IDENTITIES = {
+  claude: { type: "claude_code", label: AGENT_LABELS_BY_TYPE.claude_code },
+  codex: { type: "codex", label: AGENT_LABELS_BY_TYPE.codex },
+  gemini: { type: "gemini_cli", label: AGENT_LABELS_BY_TYPE.gemini_cli },
+  cursor: { type: "cursor", label: AGENT_LABELS_BY_TYPE.cursor },
+  vscode: { type: "vscode", label: AGENT_LABELS_BY_TYPE.vscode },
+  opencode: { type: "opencode", label: AGENT_LABELS_BY_TYPE.opencode },
+  qwen: { type: "qwen_code", label: AGENT_LABELS_BY_TYPE.qwen_code },
+  codebuddy: { type: "codebuddy", label: AGENT_LABELS_BY_TYPE.codebuddy },
+  qoder: { type: "qoder", label: AGENT_LABELS_BY_TYPE.qoder },
+  droid: { type: "droid", label: AGENT_LABELS_BY_TYPE.droid },
+  devin: { type: "devin", label: AGENT_LABELS_BY_TYPE.devin }
+};
+var TEAMMATE_IDLE_ACTION = "A teammate went idle";
+var CLAUDE_MEANINGS = {
+  PostToolUse: { kind: "tool", event: "tool_complete" },
+  UserPromptSubmit: { kind: "prompt", event: "user_prompt" },
+  Stop: { kind: "stop", event: "session_end" },
+  SubagentStop: { kind: "subagent_stop", event: "session_end" },
+  PreCompact: { kind: "compaction", event: "compaction" },
+  PostCompact: { kind: "compaction", event: "compaction" },
+  SessionStart: { kind: "session_start", event: "session_start" },
+  SessionEnd: { kind: "session_closed", event: "session_closed" },
+  SubagentStart: { kind: "session_start", event: "session_start", action: "Subagent started" },
+  Notification: { kind: "notification", event: "notification" },
+  TeammateIdle: { kind: "teammate_idle", event: "teammate_idle", action: TEAMMATE_IDLE_ACTION },
+  StopFailure: { kind: "stop_failure", event: "turn_error" },
+  PermissionDenied: { kind: "permission_denied", event: "permission_denied" }
+};
+var compatibleMeanings = (agentType) => {
+  const events = HOOK_COMPATIBLE_PROFILES.find((profile) => profile.agentType === agentType)?.events ?? [];
+  return Object.fromEntries(events.flatMap((event) => {
+    const meaning = CLAUDE_MEANINGS[event];
+    return meaning ? [[event, meaning]] : [];
+  }));
+};
+var MEANING_BY_HOOK = {
+  claude: CLAUDE_MEANINGS,
+  qwen: compatibleMeanings("qwen_code"),
+  codebuddy: compatibleMeanings("codebuddy"),
+  qoder: compatibleMeanings("qoder"),
+  droid: compatibleMeanings("droid"),
+  devin: compatibleMeanings("devin"),
+  codex: {
+    PostToolUse: { kind: "tool", event: "tool_complete" },
+    UserPromptSubmit: { kind: "prompt", event: "user_prompt" },
+    Stop: { kind: "stop", event: "session_end" },
+    SessionStart: { kind: "session_start", event: "session_begin", action: "Session started" },
+    SessionEnd: { kind: "session_closed", event: "session_closed" },
+    // Codex names all four in its own HookEventName enum, and the CLI registers
+    // them. A row missing here is the same defect as the dropped Codex
+    // SessionEnd: the CLI reports the event, the Mac app forwards the identical
+    // envelope, and only the app's copy vanishes.
+    SubagentStart: { kind: "session_start", event: "session_begin", action: "Subagent started" },
+    SubagentStop: { kind: "subagent_stop", event: "session_end" },
+    PreCompact: { kind: "compaction", event: "compaction" },
+    PostCompact: { kind: "compaction", event: "compaction" }
+  },
+  gemini: {
+    AfterTool: { kind: "tool", event: "tool_complete" },
+    BeforeAgent: { kind: "prompt", event: "user_prompt" },
+    AfterAgent: { kind: "stop", event: "session_end" },
+    SessionStart: { kind: "session_start", event: "session_begin", action: "Session started" },
+    SessionEnd: { kind: "session_closed", event: "session_closed" }
+  },
+  cursor: {
+    afterShellExecution: { kind: "tool", event: "tool_complete" },
+    afterFileEdit: { kind: "tool", event: "tool_complete" },
+    postToolUse: { kind: "tool", event: "tool_complete" },
+    stop: { kind: "stop", event: "session_end" },
+    sessionStart: { kind: "session_start", event: "session_begin" },
+    sessionEnd: { kind: "session_closed", event: "session_closed" },
+    beforeSubmitPrompt: { kind: "prompt", event: "user_prompt" },
+    preCompact: { kind: "compaction", event: "compaction" },
+    subagentStart: { kind: "session_start", event: "session_begin", action: "Subagent started" },
+    subagentStop: { kind: "subagent_stop", event: "session_end" }
+  },
+  vscode: {
+    PostToolUse: { kind: "tool", event: "tool_complete" },
+    Stop: { kind: "stop", event: "session_end" },
+    SessionStart: { kind: "session_start", event: "session_begin" },
+    UserPromptSubmit: { kind: "prompt", event: "user_prompt" },
+    PreCompact: { kind: "compaction", event: "compaction" },
+    SubagentStart: { kind: "session_start", event: "session_begin", action: "Subagent started" },
+    SubagentStop: { kind: "subagent_stop", event: "session_end" }
+  },
+  // OpenCode's own names, because the plugin sends the hook it was called from
+  // rather than translating. `session.idle` is the turn boundary — its Stop, not
+  // its SessionEnd — and there is no session-start entry on purpose: OpenCode
+  // publishes `session.created` for every subagent fork too.
+  opencode: {
+    "tool.execute.after": { kind: "tool", event: "tool_complete" },
+    "chat.message": { kind: "prompt", event: "user_prompt" },
+    "session.idle": { kind: "stop", event: "session_end" }
+  }
+};
+var TASK_TITLE_MAX_LENGTH = 120;
+var STOP_SUMMARY_MAX_LENGTH = 200;
+var SESSION_END_ACTIONS = {
+  clear: "Session cleared",
+  logout: "Logged out",
+  resume: "Session suspended",
+  prompt_input_exit: "Session ended",
+  bypass_permissions_disabled: "Session ended",
+  other: "Session ended"
+};
+var countArray = (value) => Array.isArray(value) ? value.length : 0;
+var summarizeFinalMessage = (message) => {
+  if (typeof message !== "string") return "Session ended";
+  const collapsed = message.replace(/\s+/g, " ").trim();
+  if (!collapsed) return "Session ended";
+  return collapsed.slice(0, STOP_SUMMARY_MAX_LENGTH);
+};
+var summarizeStop = (input) => {
+  const running = countArray(input.background_tasks);
+  if (running > 0) return `Paused with ${running} background task${running === 1 ? "" : "s"} still running`;
+  const crons = countArray(input.session_crons);
+  if (crons > 0) return `Idle until a scheduled task wakes it (${crons} pending)`;
+  return summarizeFinalMessage(input.last_assistant_message ?? input.prompt_response);
+};
+var subagentStopAction = (agentType) => {
+  const name = typeof agentType === "string" ? agentType.replace(/\s+/g, " ").trim() : "";
+  return name ? `${name} subagent finished` : "Subagent finished";
+};
+var subagentStopSummary = (input) => {
+  const message = input.last_assistant_message ?? input.prompt_response;
+  if (typeof message === "string" && message.trim()) return summarizeStop(input);
+  return subagentStopAction(input.agent_type);
+};
+var COMPACTION_TRIGGERS = {
+  manual: "on request",
+  auto: "automatically"
+};
+var compactionAction = (hookEvent, trigger) => {
+  const how = typeof trigger === "string" ? COMPACTION_TRIGGERS[trigger] : void 0;
+  const base = hookEvent === "PostCompact" ? "Compacted context" : "Compacting context";
+  return how ? `${base} ${how}` : base;
+};
+var sessionStartAction = (source) => source === "resume" ? "Session resumed" : "Session started";
+var sessionEndAction = (reason) => typeof reason === "string" && SESSION_END_ACTIONS[reason] || "Session ended";
+var taskTitleFrom = (prompt) => typeof prompt === "string" ? prompt.replace(/\s+/g, " ").trim().slice(0, TASK_TITLE_MAX_LENGTH) || void 0 : void 0;
+var asString = (value) => typeof value === "string" && value.length > 0 ? value : void 0;
+var NOTIFICATION_ACTION_MAX_LENGTH = 200;
+var STOP_FAILURE_REASON_MAX_LENGTH = 300;
+var notificationTypeOf = (payload) => asString(payload.notification_type) ?? asString(payload.type);
+var notificationAction = (payload) => {
+  const text = asString(payload.message) ?? asString(payload.title);
+  const collapsed = redactSecrets(text ?? "").replace(/\s+/g, " ").trim();
+  return collapsed ? collapsed.slice(0, NOTIFICATION_ACTION_MAX_LENGTH) : "Notification";
+};
+var STOP_FAILURE_REASONS = {
+  rate_limit: "Rate limited by the API",
+  overloaded: "The API is overloaded right now",
+  authentication_failed: "Authentication failed",
+  billing_error: "A billing error stopped the turn"
+};
+var STOP_FAILURE_FALLBACK = "The turn ended on an API error (rate limit, billing, or auth).";
+var describeStopFailure = (error) => {
+  const fromString = (value) => {
+    const trimmed = value.trim();
+    if (!trimmed) return void 0;
+    return STOP_FAILURE_REASONS[trimmed] ?? redactSecrets(trimmed).slice(0, STOP_FAILURE_REASON_MAX_LENGTH);
+  };
+  if (typeof error === "string") {
+    const described = fromString(error);
+    if (described) return described;
+  } else if (error && typeof error === "object") {
+    for (const key of ["type", "message", "error", "code"]) {
+      const value = error[key];
+      if (typeof value === "string") {
+        const described = fromString(value);
+        if (described) return described;
+      }
+    }
+  }
+  return STOP_FAILURE_FALLBACK;
+};
+var permissionDeniedAction = (toolName) => {
+  const tool = asString(toolName);
+  return tool ? `Auto-mode blocked ${tool}` : "Auto-mode blocked a tool call";
+};
+var sessionIdentityOf = (payload) => {
+  const sessionId = asString(payload.session_id ?? payload.sessionId ?? payload.conversation_id);
+  const agentId = asString(payload.agent_id);
+  if (!agentId) return { sessionId };
+  return { sessionId: agentId, parentSessionId: sessionId };
+};
+
+// ../hook-mapping/src/codex-rollout.ts
+var CODEX_TURN_CONTEXT_TYPE = "turn_context";
+var CODEX_AUTO_REVIEWER = "auto_review";
+var CODEX_GUARDIAN_THREAD_SOURCE = "guardian_review";
+var CODEX_PLANNED_ACTION_MARKER = "Planned action JSON:\n";
+var CODEX_APPROVAL_REQUEST_END = ">>> APPROVAL REQUEST END";
+var CODEX_SHELL_TOOL = "exec_command";
+var CODEX_SHELL_COMMAND_FLAGS = ["-lc", "-c"];
+var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+var parseRecord = (text) => {
+  try {
+    return asRecord(JSON.parse(text));
+  } catch {
+    return null;
+  }
+};
+var nonEmptyString = (value) => typeof value === "string" && value.length > 0 ? value : void 0;
+var isTimestamp = (value) => typeof value === "string" && Number.isFinite(Date.parse(value));
+var readCodexTurnContext = (line) => {
+  const entry = parseRecord(line);
+  if (entry?.type !== CODEX_TURN_CONTEXT_TYPE) return null;
+  const payload = asRecord(entry.payload);
+  const turnId = nonEmptyString(payload?.turn_id);
+  if (!payload || !turnId) return null;
+  return {
+    turnId,
+    approvalsReviewer: payload.approvals_reviewer === CODEX_AUTO_REVIEWER ? "auto_review" : "user",
+    ...isTimestamp(entry.timestamp) ? { startedAt: entry.timestamp } : {}
+  };
+};
+var isCodexGuardianRolloutHead = (line, sessionId) => {
+  if (!sessionId) return false;
+  const entry = parseRecord(line);
+  const payload = asRecord(entry?.payload);
+  return entry?.type === "session_meta" && payload?.parent_thread_id === sessionId && payload.thread_source === CODEX_GUARDIAN_THREAD_SOURCE;
+};
+var readCodexPlannedAction = (message) => {
+  const marker = message.lastIndexOf(CODEX_PLANNED_ACTION_MARKER);
+  if (marker < 0) return null;
+  const body = message.slice(marker + CODEX_PLANNED_ACTION_MARKER.length);
+  const end = body.lastIndexOf(CODEX_APPROVAL_REQUEST_END);
+  if (end < 0 || body.slice(end + CODEX_APPROVAL_REQUEST_END.length).trim().length > 0) return null;
+  return parseRecord(body.slice(0, end).trim());
+};
+var readCodexReviewVerdict = (message) => {
+  const verdict = parseRecord(message.trim());
+  if (verdict?.outcome !== "allow" && verdict?.outcome !== "deny") return null;
+  const rationale = typeof verdict.rationale === "string" ? verdict.rationale.trim() : "";
+  return { outcome: verdict.outcome, ...rationale ? { rationale } : {} };
+};
+var scanCodexGuardianReviews = (lines) => {
+  const reviews = [];
+  let pending = null;
+  for (const line of lines) {
+    const entry = parseRecord(line.text);
+    const payload = asRecord(entry?.payload);
+    if (entry?.type !== "event_msg" || typeof payload?.message !== "string") continue;
+    if (payload.type === "user_message") {
+      const plannedAction = readCodexPlannedAction(payload.message);
+      pending = plannedAction ? { offset: line.offset, plannedAction, ...isTimestamp(entry.timestamp) ? { requestedAt: entry.timestamp } : {} } : null;
+      continue;
+    }
+    if (payload.type !== "agent_message" || !pending) continue;
+    const verdict = readCodexReviewVerdict(payload.message);
+    if (!verdict) continue;
+    reviews.push({ ...pending, verdict });
+    pending = null;
+  }
+  return { reviews, ...pending ? { pendingOffset: pending.offset } : {} };
+};
+var codexPlannedShellCommand = (plannedAction) => {
+  if (plannedAction?.tool !== CODEX_SHELL_TOOL) return null;
+  const argv = plannedAction.command;
+  if (!Array.isArray(argv) || argv.length !== 3) return null;
+  const [shell, flag, command] = argv;
+  if (typeof shell !== "string" || shell.trim().length === 0) return null;
+  if (typeof flag !== "string" || !CODEX_SHELL_COMMAND_FLAGS.includes(flag)) return null;
+  if (typeof command !== "string" || command.trim().length === 0) return null;
+  const cwd = nonEmptyString(plannedAction.cwd);
+  return { command, ...cwd ? { cwd } : {} };
+};
+var codexReviewerDenialsSince = (reviews, since) => {
+  const sinceMs = Date.parse(since);
+  if (!Number.isFinite(sinceMs)) return [];
+  return reviews.flatMap((review) => {
+    if (review.verdict.outcome !== "deny" || !review.requestedAt) return [];
+    if (Date.parse(review.requestedAt) < sinceMs) return [];
+    const shell = codexPlannedShellCommand(review.plannedAction);
+    if (!shell) return [];
+    return [{
+      ...shell,
+      offset: review.offset,
+      requestedAt: review.requestedAt,
+      plannedAction: review.plannedAction,
+      ...review.verdict.rationale ? { rationale: review.verdict.rationale } : {}
+    }];
+  });
+};
+
 // src/pending.ts
 import { join as join2 } from "path";
 import { homedir, tmpdir as tmpdir2 } from "os";
@@ -369,11 +1007,11 @@ var removePendingSession = (sessionId) => {
 
 // src/repo.ts
 import { existsSync as existsSync3, readFileSync as readFileSync3, statSync as statSync2 } from "fs";
-import { basename, dirname, isAbsolute, join as join3, resolve } from "path";
+import { basename as basename2, dirname, isAbsolute as isAbsolute2, join as join3, resolve as resolve2 } from "path";
 var MAX_PARENT_WALK = 64;
 var GIT_FILE_PREFIX = "gitdir:";
 var findGitDir = (startDir) => {
-  let current = resolve(startDir);
+  let current = resolve2(startDir);
   for (let depth = 0; depth < MAX_PARENT_WALK; depth += 1) {
     const candidate = join3(current, ".git");
     try {
@@ -382,7 +1020,7 @@ var findGitDir = (startDir) => {
         const pointer = readFileSync3(candidate, "utf-8").trim();
         if (pointer.startsWith(GIT_FILE_PREFIX)) {
           const target = pointer.slice(GIT_FILE_PREFIX.length).trim();
-          return isAbsolute(target) ? target : resolve(current, target);
+          return isAbsolute2(target) ? target : resolve2(current, target);
         }
       }
     } catch {
@@ -428,9 +1066,9 @@ var deriveRepoKey = (cwd) => {
       const normalized = remote ? normalizeRepoRemote(remote) : void 0;
       if (normalized) return normalized;
       const root = gitDir.endsWith(".git") ? dirname(gitDir) : dir;
-      return localRepoKey(basename(root));
+      return localRepoKey(basename2(root));
     }
-    return localRepoKey(basename(resolve(dir)));
+    return localRepoKey(basename2(resolve2(dir)));
   } catch {
     return void 0;
   }
@@ -638,7 +1276,7 @@ var readNewUsage = (transcriptPath, sessionId) => {
 };
 
 // src/codex-adapter.ts
-import { resolve as resolve2 } from "path";
+import { resolve as resolve3 } from "path";
 var CODEX_AGENT = { type: "codex", label: "Codex" };
 var codexAllow = () => ({ kind: "allow" });
 var codexDeny = (reason) => ({ kind: "deny", reason });
@@ -667,7 +1305,7 @@ var toPolicyLookup = (toolName, toolInput, cwd) => {
   const command = toolInput.command;
   const files = parseApplyPatchFiles(command);
   if (files.length === 1) {
-    return { tool: "Edit", input: { file_path: cwd ? resolve2(cwd, files[0]) : files[0] } };
+    return { tool: "Edit", input: { file_path: cwd ? resolve3(cwd, files[0]) : files[0] } };
   }
   return { tool: "Edit", input: typeof command === "string" ? { file_path: command } : {} };
 };
@@ -683,7 +1321,7 @@ var toPolicyLookups = (toolName, toolInput, cwd) => {
   }
   return {
     tool: "Edit",
-    inputs: files.map((file) => ({ file_path: cwd ? resolve2(cwd, file) : file }))
+    inputs: files.map((file) => ({ file_path: cwd ? resolve3(cwd, file) : file }))
   };
 };
 var permissionTimeoutDecision = (timeoutAction) => {
@@ -722,7 +1360,7 @@ var throttlePass = (key, windowMs) => {
 };
 
 // src/events.ts
-import { basename as basename2, join as join6 } from "path";
+import { basename as basename3, join as join6 } from "path";
 import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync5, statSync as statSync5, writeFileSync as writeFileSync5 } from "fs";
 import { tmpdir as tmpdir5 } from "os";
 var INTENT_DIR = join6(tmpdir5(), "pushary-intent");
@@ -1008,7 +1646,7 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
   const deadline = Date.now() + HOOK_BUDGET_MS;
   const signal = AbortSignal.timeout(HOOK_BUDGET_MS);
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const action = describeToolCall(input.tool_name, input.tool_input, "event");
     const lookup = toPolicyLookup(input.tool_name, input.tool_input);
     const toolResult = input.tool_response ?? input.tool_result;
@@ -1068,7 +1706,7 @@ var handleUserPrompt = async (input, agent = CLAUDE_CODE_AGENT) => {
   const deadline = Date.now() + HOOK_BUDGET_MS;
   const signal = AbortSignal.timeout(HOOK_BUDGET_MS);
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const titlesEnabled = process.env.PUSHARY_TASK_TITLES !== "off";
     const taskTitle = titlesEnabled ? taskTitleFrom(input.prompt) : void 0;
@@ -1100,7 +1738,7 @@ var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
   const deadline = Date.now() + HOOK_BUDGET_MS;
   const signal = AbortSignal.timeout(HOOK_BUDGET_MS);
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const late = await reconcilePendingQuestions(sessionKey, void 0, signal);
     const tasks = [
@@ -1135,7 +1773,7 @@ var isSubagentStop = (input) => input.hook_event_name === "SubagentStop" || type
 var SUBAGENT_STOP_REPORT_TIMEOUT_MS = 4e3;
 var handleSubagentStop = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     await reportEvent({
       event: "session_end",
       agentType: agent.type,
@@ -1153,7 +1791,7 @@ var isCompactionEvent = (hookEventName) => hookEventName === "PreCompact" || hoo
 var COMPACTION_REPORT_TIMEOUT_MS = 4e3;
 var handleCompaction = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     await reportEvent({
       event: "compaction",
       agentType: agent.type,
@@ -1166,7 +1804,7 @@ var handleCompaction = async (input, agent = CLAUDE_CODE_AGENT) => {
 };
 var handleSessionStart = async (input, agent = CLAUDE_CODE_AGENT) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const action = input.agent_id ? "Subagent started" : sessionStartAction(input.source);
     await reportEvent({
       event: "session_start",
@@ -1180,7 +1818,7 @@ var handleSessionStart = async (input, agent = CLAUDE_CODE_AGENT) => {
 };
 var handleSessionEnd = async (input, agent = CLAUDE_CODE_AGENT, options = {}) => {
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const action = sessionEndAction(input.reason);
     const sessionKey = input.session_id || DEFAULT_SESSION;
     if (options.reconcile ?? true) {
@@ -1207,7 +1845,7 @@ var NOTIFICATION_THROTTLE_MS = 60 * 1e3;
 var handleNotification = async (input, agent = CLAUDE_CODE_AGENT) => {
   const signal = AbortSignal.timeout(HOOK_BUDGET_MS);
   try {
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const notifType = notificationTypeOf(input) ?? "";
     const sessionKey = input.session_id || DEFAULT_SESSION;
     const teammateIdle = input.hook_event_name === "TeammateIdle";
@@ -1268,7 +1906,7 @@ var handleStopFailure = async (input, agent = CLAUDE_CODE_AGENT) => {
     } catch {
       return;
     }
-    const projectName = basename2(input.cwd ?? process.cwd());
+    const projectName = basename3(input.cwd ?? process.cwd());
     const reason = describeStopFailure(input.error);
     await reportEvent({
       event: "turn_error",
@@ -1303,6 +1941,23 @@ export {
   fetchModeState,
   fetchModeOverride,
   phoneDrivenEnv,
+  HOOK_FALLBACK_MAX,
+  UNNAMED_ACTION,
+  describeToolCall,
+  deriveToolTarget,
+  parseApplyPatchFiles,
+  OPENCODE_TOOL_NAMES,
+  canonicalGateInputs,
+  scopePathFor,
+  deriveActionBody,
+  deriveAction,
+  deriveBlocker,
+  permissionDeniedAction,
+  sessionIdentityOf,
+  readCodexTurnContext,
+  isCodexGuardianRolloutHead,
+  scanCodexGuardianReviews,
+  codexReviewerDenialsSince,
   DEFAULT_SESSION,
   readPendingCommandById,
   readPendingCommand,