@pushary/agent-hooks 0.99.0 → 1.1.0

package/dist/{chunk-V262ATS5.js → chunk-MR2PWE62.js}

@@ -1,9 +1,13 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-HB2KB7QL.js";
+} from "./chunk-S2BNTXP6.js";
 import {
   codexHomeFrom
-} from "./chunk-JBJBVERL.js";
+} from "./chunk-EWQZISYV.js";
+import {
+  HOOK_COMPATIBLE_PROFILES,
+  compatibleConfigDir
+} from "./chunk-VQYARC2K.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";
@@ -234,10 +238,19 @@ var agentProbes = (home = homedir2()) => ({
     // never used.
     configMarkers: [openCodeConfigDirFrom(home)]
   },
+  ...compatibleProbes(home),
   // "Other" is a set of printed instructions for any MCP or HTTP client. There is
   // nothing to detect, and it must never be auto-selected.
   custom: { binary: null, paths: [], configMarkers: [] }
 });
+var compatibleProbes = (home) => HOOK_COMPATIBLE_PROFILES.reduce((probes, profile) => ({
+  ...probes,
+  [profile.agentType]: {
+    binary: profile.binary,
+    paths: [],
+    configMarkers: [join2(home, ...compatibleConfigDir(profile))]
+  }
+}), {});
 var detectAllAgents = (deps = defaultDeps, home) => {
   const probes = agentProbes(home);
   return Object.keys(probes).map((agent) => ({
@@ -265,7 +278,8 @@ You have Pushary MCP tools that reach the user on their phone. Use them proactiv
 - When you need the user to make a decision or answer a clarifying question, call \`ask_user\` instead of guessing or stalling. Use type "confirm" for yes/no, "select" for a fixed set of options, and "input" for free text. Read \`answered\`, \`status\` and the returned handoff instead of assuming the tool blocked. Silence is not consent; choice/text answers do not authorize a separate action.
 - Ask once, on one channel. If you also have a built-in way to prompt the user, use that or \`ask_user\` for a given question, never both. \`ask_user\` is the one that reaches the user when they are away from this machine, so prefer it. Raising both strands the user in whichever prompt you are not waiting on.
 - Honor authorization already granted in this session. Ask before a risky or irreversible action outside that authorization, or when an enforced host policy requires it. Do not ask again for an already authorized step, and never bypass an enforced gate. When a Pushary hook result says the user approved a specific command after a denial, rerunning that exact command is the approved path and not a bypass of that gate.
-- Call \`propose_scope\` only for an unresolved or requested file boundary. A ratified scope narrows what may proceed; it does not bypass other approval rules. Do not add a plan approval merely because work spans several files, and do not propose a new scope mid-run just to widen it. Let the installed gate request any scope expansion before the edit executes.
+- Call \`propose_scope\` only for an unresolved or requested file boundary. A ratified scope narrows what may proceed; it does not bypass other approval rules. Do not add a plan approval merely because work spans several files, and do not propose a new scope mid-run just to widen it. Let the installed gate request any scope expansion before the edit executes. Only file paths are checked, and only on tool calls that carry one, so put a boundary that is not a path (recipients, channels, spend, systems you will not open) in \`promises\` and never in \`allowedPaths\`. Read the \`enforces\` field that comes back: an empty array means nothing in that contract is checked automatically, and you must say so rather than report that a scope is in force. \`hookSeen: false\` means no hook has reported that sessionId, so the gate will never find the contract: fix the session id rather than proceeding as if a scope were in force.
+- Before a task of more than two steps, break it into steps and find the forks. Settle by yourself every fork that a file, a command or a tool call can answer, then ask the rest as one numbered round with your recommended answer against each. A question in the terminal is free; a push is not. When the user is at the terminal, ask the whole round there. When the user is away, send only the fork that stops the run, and decide the rest on your recommendation.
 - When you are blocked, stuck, or hit an error you cannot resolve on your own, call \`send_notification\` so the user knows, and call \`ask_user\` if you need a decision to continue.
 - When meaningful work finishes while the user is away, or they requested an alert, call \`send_notification\` so the user knows it is done. Skip trivial completions and duplicate reports to someone already reading. Always pass \`context\` with a \`type\` of "task_complete", "error" or "info": it is what tells Pushary this is a task update, so the user's own setting for where updates land can route it.
 - Confirm notifications can offer lock-screen actions; arbitrary choices and text open the app. The Mac notch handles personal account questions, not Partner customer enrollment.

package/dist/{chunk-WGV3VY7O.js → chunk-MZUXTN7X.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-JBJBVERL.js";
+} from "./chunk-EWQZISYV.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-OUAE3GKO.js";
+} from "./chunk-VQYARC2K.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-LBNAGGLV.js → chunk-OYYQHJAO.js}

@@ -5,11 +5,12 @@ import {
   UsageError
 } from "./chunk-7QLSKOSU.js";
 import {
+  COMPATIBLE_AGENT_TYPES,
   isValidApiKey
-} from "./chunk-OUAE3GKO.js";
+} from "./chunk-VQYARC2K.js";
 
 // src/setup/options.ts
-var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", "custom"];
+var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", ...COMPATIBLE_AGENT_TYPES, "custom"];
 var CONNECT_MODES = ["app", "browser", "web", "none"];
 var CONNECT_ALIASES = { auto: "app", pwa: "web" };
 var parseConnectMode = (raw) => {

package/dist/{chunk-4C4XFAGJ.js → chunk-PHJOSAXW.js}

@@ -15,10 +15,10 @@ import {
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-GCD3SQSV.js";
+} from "./chunk-E3WQMDCE.js";
 import {
   isAnswerSource
-} from "./chunk-OUAE3GKO.js";
+} from "./chunk-VQYARC2K.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-SI7GYBQP.js → chunk-PQG6NTPT.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-OUAE3GKO.js";
+} from "./chunk-VQYARC2K.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-3ZAEUPM4.js → chunk-PUDQJ772.js}

@@ -1,6 +1,6 @@
 import {
   resolvePathBinary
-} from "./chunk-JBJBVERL.js";
+} from "./chunk-EWQZISYV.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-NSFNEDCT.js → chunk-PWIMJP4U.js}

@@ -6,16 +6,16 @@ import {
 } from "./chunk-YKLCWWEI.js";
 import {
   hookOwnerOf
-} from "./chunk-RALVI7OF.js";
+} from "./chunk-DZYIAMKR.js";
 import {
   ensureDaemonRunning
-} from "./chunk-CRFLU455.js";
+} from "./chunk-6JUCFMSF.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-XPPXOKIG.js";
+} from "./chunk-BBUZD7MU.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -23,14 +23,14 @@ import {
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-ID5FDKDZ.js";
+} from "./chunk-2MOQUNFL.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-JBJBVERL.js";
+} from "./chunk-EWQZISYV.js";
 import {
   readTranscriptPreference
-} from "./chunk-4PBCNVI3.js";
+} from "./chunk-UP7NZXJU.js";
 import {
   writeJsonAtomic
 } from "./chunk-4LL6LG5X.js";

package/dist/{chunk-JL33EDN7.js → chunk-QACXZYDA.js}

@@ -2,24 +2,24 @@ import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-WGV3VY7O.js";
+} from "./chunk-MZUXTN7X.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-CRFLU455.js";
+} from "./chunk-6JUCFMSF.js";
 import {
   getMachineId
-} from "./chunk-562UJ2DA.js";
+} from "./chunk-J7PJALS2.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-4PBCNVI3.js";
+} from "./chunk-UP7NZXJU.js";
 import {
   getBaseUrl
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-CP34FI4B.js → chunk-RZTH4MIY.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-LBNAGGLV.js";
+} from "./chunk-OYYQHJAO.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-OUAE3GKO.js";
+} from "./chunk-VQYARC2K.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-HB2KB7QL.js → chunk-S2BNTXP6.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-OUAE3GKO.js";
+} from "./chunk-VQYARC2K.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-EXHXR2X5.js → chunk-SA6UB3GD.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-JBJBVERL.js";
+} from "./chunk-EWQZISYV.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-IRLTW6KF.js → chunk-SLEWDZOA.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-OUAE3GKO.js";
+} from "./chunk-VQYARC2K.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/chunk-SM54HHVY.js

@@ -0,0 +1,224 @@
+import {
+  addClaudeMcpServer,
+  addPusharyToolPermissions,
+  isPusharyHook,
+  removeClaudeMcpServers
+} from "./chunk-6T4OINZB.js";
+import {
+  CLAUDE_HOOK_EVENTS,
+  addGeminiMcpServer,
+  removeGeminiMcpServer
+} from "./chunk-YM4G6CFN.js";
+import {
+  CLAUDE_CODE_AGENT,
+  parseApplyPatchFiles
+} from "./chunk-WTT24AUA.js";
+import {
+  guardBinary,
+  holdBudgetOf,
+  registerHookEntry
+} from "./chunk-EWQZISYV.js";
+import {
+  PHONE_ANSWERED_TOOLS,
+  hookCompatibleProfile,
+  toToolLookup,
+  withHookHoldBudget
+} from "./chunk-VQYARC2K.js";
+
+// src/compatible-config.ts
+import { homedir } from "os";
+import { isAbsolute, join, resolve } from "path";
+var AGENT_FLAG = "--agent";
+var agentArgument = (profile) => `${AGENT_FLAG}=${profile.agentType}`;
+var profileFromArgv = (argv) => {
+  const prefix = `${AGENT_FLAG}=`;
+  const named = argv.find((argument) => argument.startsWith(prefix));
+  return named ? hookCompatibleProfile(named.slice(prefix.length)) : void 0;
+};
+var activeIdentity = (argv) => {
+  const profile = profileFromArgv(argv);
+  return profile ? { type: profile.agentType, label: profile.label } : CLAUDE_CODE_AGENT;
+};
+var activeHookSource = (argv) => profileFromArgv(argv)?.source ?? "claude";
+var PATCH_INPUT_KEYS = ["command", "patch", "input"];
+var patchedFiles = (toolInput) => [...new Set(PATCH_INPUT_KEYS.flatMap((key) => parseApplyPatchFiles(toolInput[key])))];
+var lookupFor = (profile, input) => {
+  const absolute = (path) => input.cwd && !isAbsolute(path) ? resolve(input.cwd, path) : path;
+  const toolInput = input.tool_input ?? {};
+  const lookup = toToolLookup(profile, input.tool_name ?? "", toolInput, absolute);
+  if (!lookup.pathless) return lookup;
+  const files = patchedFiles(toolInput);
+  return files.length === 1 ? { ...lookup, input: { ...lookup.input, file_path: absolute(files[0]) }, pathless: false } : lookup;
+};
+var normalizeToolCall = (profile, input) => {
+  if (!profile || !input.tool_name) return input;
+  const lookup = lookupFor(profile, input);
+  return { ...input, tool_name: lookup.tool, tool_input: lookup.input };
+};
+var unreadablePathTool = (profile, input) => {
+  if (!profile || !input.tool_name) return void 0;
+  return lookupFor(profile, input).pathless ? input.tool_name : void 0;
+};
+var underHome = (segments, home = homedir()) => join(home, ...segments);
+var compatibleConfigFile = (profile, home) => underHome(profile.configFile, home);
+var compatibleMcpFile = (profile, home) => profile.mcp ? underHome(profile.mcp.file, home) : null;
+var compatibleInstructionsFile = (profile, home) => profile.instructions ? underHome(profile.instructions.file, home) : null;
+var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+var ensureRecord = (target, key) => {
+  const existing = asRecord(target[key]);
+  if (existing) return existing;
+  const created = {};
+  target[key] = created;
+  return created;
+};
+var descend = (config, keyPath) => keyPath.reduce(ensureRecord, config);
+var findMap = (config, keyPath) => keyPath.reduce((node, key) => node && asRecord(node[key]), config);
+var pruneEmptyMap = (config, keyPath) => {
+  if (keyPath.length === 0) return false;
+  const parent = findMap(config, keyPath.slice(0, -1));
+  const key = keyPath[keyPath.length - 1];
+  const map = asRecord(parent?.[key]);
+  if (!parent || !map || Object.keys(map).length > 0) return false;
+  delete parent[key];
+  return true;
+};
+var aliasesFor = (profile, canonical) => Object.entries(profile.toolAliases).flatMap(([agentName, target]) => target === canonical ? [agentName] : []);
+var carriesPhoneAnswer = (profile, canonical) => profile.wire === "legacy_decision" && PHONE_ANSWERED_TOOLS.has(canonical);
+var translateMatcher = (profile, matcher) => {
+  const spellings = matcher.split("|").filter((canonical) => !carriesPhoneAnswer(profile, canonical)).flatMap((canonical) => [canonical, ...aliasesFor(profile, canonical)]);
+  return [.../* @__PURE__ */ new Set([...spellings, ...profile.extraMatchers])].join("|");
+};
+var TOOL_MATCHED_EVENTS = /* @__PURE__ */ new Set(["PreToolUse", "PostToolUse"]);
+var withoutMatcher = ({ matcher, ...hook }) => hook;
+var compatibleHookEvents = (profile) => CLAUDE_HOOK_EVENTS.filter((hook) => profile.events.includes(hook.event)).map((hook) => {
+  if (!hook.matcher) return hook;
+  if (!TOOL_MATCHED_EVENTS.has(hook.event)) return withoutMatcher(hook);
+  return { ...hook, matcher: translateMatcher(profile, hook.matcher) };
+});
+var WRITTEN = { ok: true };
+var ROOT_KEY = "(root)";
+var dotted = (segments) => segments.join(".") || ROOT_KEY;
+var hooksShapeConflict = (config, profile) => {
+  if (!asRecord(config)) return ROOT_KEY;
+  const walked = [];
+  let node = config;
+  for (const key of profile.hooksKeyPath) {
+    if (node[key] === void 0) return void 0;
+    const nested = asRecord(node[key]);
+    if (!nested) return dotted([...walked, key]);
+    walked.push(key);
+    node = nested;
+  }
+  const clash = CLAUDE_HOOK_EVENTS.find(({ event }) => node[event] !== void 0 && !Array.isArray(node[event]));
+  return clash ? dotted([...walked, clash.event]) : void 0;
+};
+var permissionsShapeConflict = (config) => {
+  if (!asRecord(config)) return ROOT_KEY;
+  if (config.permissions === void 0) return void 0;
+  const permissions = asRecord(config.permissions);
+  if (!permissions) return "permissions";
+  return permissions.allow !== void 0 && !Array.isArray(permissions.allow) ? "permissions.allow" : void 0;
+};
+var addCompatibleToolPermissions = (config) => {
+  const conflictAt = permissionsShapeConflict(config);
+  if (conflictAt) return { ok: false, conflictAt };
+  addPusharyToolPermissions(config);
+  return WRITTEN;
+};
+var entryFor = (profile, definition, resolve2) => ({
+  ...definition.matcher ? { matcher: definition.matcher } : {},
+  hooks: [{
+    type: "command",
+    command: withHookHoldBudget(
+      `${resolve2(definition.binary)} ${agentArgument(profile)}`,
+      holdBudgetOf(definition)
+    ),
+    timeout: definition.timeout
+  }]
+});
+var addCompatibleHooks = (config, profile, binDir) => {
+  const conflictAt = hooksShapeConflict(config, profile);
+  if (conflictAt) return { ok: false, conflictAt };
+  const resolve2 = (name) => guardBinary(binDir ? join(binDir, name) : name);
+  const hooks = descend(config, profile.hooksKeyPath);
+  const supported = new Map(compatibleHookEvents(profile).map((hook) => [hook.event, hook]));
+  for (const known of CLAUDE_HOOK_EVENTS) {
+    const current = Array.isArray(hooks[known.event]) ? hooks[known.event] : [];
+    const definition = supported.get(known.event);
+    if (definition) {
+      hooks[known.event] = registerHookEntry(current, isPusharyHook, entryFor(profile, definition, resolve2));
+      continue;
+    }
+    const others = current.filter((item) => !isPusharyHook(item));
+    if (others.length > 0) hooks[known.event] = others;
+    else delete hooks[known.event];
+  }
+  return WRITTEN;
+};
+var removeCompatibleHooks = (config, profile, scope) => {
+  const hooks = findMap(config, profile.hooksKeyPath);
+  if (!hooks) return false;
+  let changed = false;
+  for (const { event } of CLAUDE_HOOK_EVENTS) {
+    const entries = hooks[event];
+    if (!Array.isArray(entries)) continue;
+    const kept = entries.filter((entry) => !isPusharyHook(entry, scope));
+    if (kept.length === entries.length) continue;
+    if (kept.length === 0) delete hooks[event];
+    else hooks[event] = kept;
+    changed = true;
+  }
+  const pruned = pruneEmptyMap(config, profile.hooksKeyPath);
+  return changed || pruned;
+};
+var hasCompatibleHooks = (config, profile) => {
+  const hooks = findMap(config, profile.hooksKeyPath);
+  if (!hooks) return false;
+  return compatibleHookEvents(profile).some(({ event }) => {
+    const entries = hooks[event];
+    return Array.isArray(entries) && entries.some((entry) => isPusharyHook(entry));
+  });
+};
+var missingCompatibleHookEvents = (config, profile) => {
+  const hooks = findMap(config, profile.hooksKeyPath);
+  return compatibleHookEvents(profile).filter(({ event }) => {
+    const entries = hooks?.[event];
+    return !Array.isArray(entries) || !entries.some((entry) => isPusharyHook(entry));
+  }).map(({ event }) => event);
+};
+var compatiblePermissionRuleFile = (profile, home) => profile.permissionRuleFile ? underHome(profile.permissionRuleFile, home) : null;
+var addCompatibleMcpServer = (config, profile, apiKey) => {
+  if (!profile.mcp) return;
+  if (profile.mcp.shape === "gemini_http") {
+    addGeminiMcpServer(config, apiKey);
+    return;
+  }
+  addClaudeMcpServer(config, apiKey);
+  if (!profile.mcp.trusted) return;
+  const server = asRecord(asRecord(config.mcpServers)?.pushary);
+  if (server) server.trust = true;
+};
+var removeCompatibleMcpServer = (config, profile) => {
+  if (!profile.mcp) return false;
+  return profile.mcp.shape === "gemini_http" ? removeGeminiMcpServer(config) : removeClaudeMcpServers(config);
+};
+
+export {
+  profileFromArgv,
+  activeIdentity,
+  activeHookSource,
+  normalizeToolCall,
+  unreadablePathTool,
+  compatibleConfigFile,
+  compatibleMcpFile,
+  compatibleInstructionsFile,
+  compatibleHookEvents,
+  addCompatibleToolPermissions,
+  addCompatibleHooks,
+  removeCompatibleHooks,
+  hasCompatibleHooks,
+  missingCompatibleHookEvents,
+  compatiblePermissionRuleFile,
+  addCompatibleMcpServer,
+  removeCompatibleMcpServer
+};

package/dist/{chunk-4PBCNVI3.js → chunk-UP7NZXJU.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-GCD3SQSV.js";
+} from "./chunk-E3WQMDCE.js";
 import {
   backupFile,
   readJsonSafe,

package/dist/{chunk-XOOWC62T.js → chunk-VACFOGF3.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-OUAE3GKO.js";
+} from "./chunk-VQYARC2K.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";