@pushary/agent-hooks 1.1.0 → 1.3.0

package/dist/{chunk-VQYARC2K.js → chunk-WPJS3OZH.js}

@@ -256,7 +256,8 @@ var BRIDGE_HOOK_SOURCES = Object.freeze(Object.values(AGENTS).flatMap((agent) =>
 
 // ../contracts/src/agent-wiring.ts
 var COMPATIBLE_AGENT_TYPES = ["qwen_code", "codebuddy", "qoder", "droid", "devin"];
-var CANONICAL_PATH_KEYS = ["file_path", "path"];
+var CANONICAL_PATH_KEYS = ["file_path", "path", "notebook_path"];
+var CANONICAL_COMMAND_KEYS = ["command"];
 var SHELL_TOOLS = /* @__PURE__ */ new Set(["Bash", "PowerShell"]);
 var PATH_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit", "NotebookEdit", "Read"]);
 var PHONE_ANSWERED_TOOLS = /* @__PURE__ */ new Set(["AskUserQuestion", "ExitPlanMode"]);
@@ -271,17 +272,17 @@ var canonicalToolName = (profile, toolName) => profile.toolAliases[toolName] ??
 var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path) => {
   const tool = canonicalToolName(profile, toolName);
   if (SHELL_TOOLS.has(tool)) {
-    const command = firstString(toolInput, ["command"]);
-    if (!command) return { tool, input: toolInput, pathless: false };
+    const command = firstString(toolInput, [...profile.shellCommandKeys, ...CANONICAL_COMMAND_KEYS]);
+    if (!command) return { tool, input: toolInput, unreadable: true };
     const context = Object.fromEntries(
       profile.shellContextKeys.flatMap((key) => toolInput[key] === void 0 ? [] : [[key, toolInput[key]]])
     );
-    return { tool, input: { command, ...context }, pathless: false };
+    return { tool, input: { command, ...context }, unreadable: false };
   }
-  if (!PATH_TOOLS.has(tool)) return { tool, input: toolInput, pathless: false };
+  if (!PATH_TOOLS.has(tool)) return { tool, input: toolInput, unreadable: false };
   const filePath = firstString(toolInput, [...profile.pathInputKeys, ...CANONICAL_PATH_KEYS]);
-  if (!filePath) return { tool, input: toolInput, pathless: true };
-  return { tool, input: { ...toolInput, file_path: resolvePath(filePath) }, pathless: false };
+  if (!filePath) return { tool, input: toolInput, unreadable: true };
+  return { tool, input: { ...toolInput, file_path: resolvePath(filePath) }, unreadable: false };
 };
 var renderPreToolUseVerdict = (profile, verdict) => {
   if (profile.wire === "permission_decision") return verdict;
@@ -331,6 +332,7 @@ var QWEN_CODE = {
   },
   extraMatchers: ["mcp__.*"],
   pathInputKeys: ["absolute_path"],
+  shellCommandKeys: [],
   shellContextKeys: ["directory"],
   events: without("TeammateIdle", "Elicitation", "PermissionDenied"),
   wire: "permission_decision",
@@ -348,6 +350,7 @@ var CODEBUDDY = {
   toolAliases: {},
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
+  shellCommandKeys: [],
   shellContextKeys: [],
   events: without("Elicitation", "PermissionDenied"),
   wire: "permission_decision",
@@ -365,6 +368,7 @@ var QODER = {
   toolAliases: {},
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
+  shellCommandKeys: [],
   shellContextKeys: [],
   events: without("Elicitation", "PermissionDenied"),
   wire: "permission_decision",
@@ -387,6 +391,7 @@ var DROID = {
   },
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
+  shellCommandKeys: [],
   shellContextKeys: [],
   events: ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Notification", "Stop", "SubagentStop", "PreCompact", "SessionStart", "SessionEnd"],
   wire: "permission_decision",
@@ -412,6 +417,7 @@ var DEVIN = {
   },
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
+  shellCommandKeys: [],
   shellContextKeys: [],
   events: ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop", "SessionStart", "SessionEnd"],
   wire: "legacy_decision",
@@ -422,7 +428,6 @@ var DEVIN = {
 var HOOK_COMPATIBLE_PROFILES = Object.freeze([QWEN_CODE, CODEBUDDY, QODER, DROID, DEVIN]);
 var hookCompatibleProfile = (agentType) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.agentType === agentType);
 var hookCompatibleProfileBySource = (source) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.source === source);
-var compatibleConfigDir = (profile) => profile.configFile.slice(0, -1);
 var compatibleTargetFiles = (profile) => {
   const seen = /* @__PURE__ */ new Map();
   for (const file of [profile.configFile, profile.mcp?.file, profile.permissionRuleFile, profile.instructions?.file]) {
@@ -688,7 +693,71 @@ var compiledGlob = (glob) => {
   globCache.set(glob, compiled);
   return compiled;
 };
-var matchToolPattern = (pattern, toolName, arg) => {
+var PATTERN_INTENT = {
+  grant: "grant",
+  restrict: "restrict"
+};
+var SHELL_ESCAPE = "\\";
+var SHELL_DOUBLE_QUOTE = '"';
+var SHELL_SUBSTITUTION_SIGIL = "$";
+var SHELL_GROUP_OPEN = "(";
+var SHELL_QUOTES = /* @__PURE__ */ new Set(["'", SHELL_DOUBLE_QUOTE]);
+var SHELL_SEGMENT_SEPARATORS = /* @__PURE__ */ new Set([";", "\n", "&", "|"]);
+var SHELL_DOUBLED_SEPARATORS = /* @__PURE__ */ new Set(["&", "|"]);
+var SHELL_UNDECOMPOSABLE = /* @__PURE__ */ new Set(["`", "<", ">"]);
+var shellCommandSegments = (command) => {
+  const segments = [];
+  let current = "";
+  let quote = null;
+  for (let index = 0; index < command.length; index += 1) {
+    const char = command[index];
+    const next = command[index + 1];
+    if (quote !== null) {
+      if (char === SHELL_ESCAPE && quote === SHELL_DOUBLE_QUOTE && next !== void 0) {
+        current += char + next;
+        index += 1;
+        continue;
+      }
+      if (char === quote) quote = null;
+      current += char;
+      continue;
+    }
+    if (char === SHELL_ESCAPE && next !== void 0) {
+      current += char + next;
+      index += 1;
+      continue;
+    }
+    if (SHELL_QUOTES.has(char)) {
+      quote = char;
+      current += char;
+      continue;
+    }
+    if (SHELL_UNDECOMPOSABLE.has(char)) return null;
+    if (char === SHELL_SUBSTITUTION_SIGIL && next === SHELL_GROUP_OPEN) return null;
+    if (SHELL_SEGMENT_SEPARATORS.has(char)) {
+      if (next === char && SHELL_DOUBLED_SEPARATORS.has(char)) index += 1;
+      segments.push(current);
+      current = "";
+      continue;
+    }
+    current += char;
+  }
+  if (quote !== null) return null;
+  segments.push(current);
+  const present = segments.map((segment) => segment.trim()).filter((segment) => segment.length > 0);
+  return present.length > 0 ? present : null;
+};
+var everySegmentMatches = (command, matches) => {
+  const segments = shellCommandSegments(command);
+  return segments !== null && segments.every(matches);
+};
+var anySegmentMatches = (command, matches) => (shellCommandSegments(command) ?? [command]).some(matches);
+var shellSegmentsMatch = (command, intent, matches) => intent === PATTERN_INTENT.restrict ? anySegmentMatches(command, matches) : everySegmentMatches(command, matches);
+var rankWholeOrSegments = (toolName, arg, intent, matches) => {
+  const matched = toolName in POLICY_COMMAND_KEYS ? shellSegmentsMatch(arg, intent, matches) : matches(arg);
+  return matched ? "prefix" : "none";
+};
+var matchToolPattern = (pattern, toolName, arg, intent = PATTERN_INTENT.grant) => {
   const open = pattern.indexOf("(");
   if (open === -1 || !pattern.endsWith(")")) {
     return pattern === toolName ? "tool" : "none";
@@ -696,12 +765,14 @@ var matchToolPattern = (pattern, toolName, arg) => {
   if (pattern.slice(0, open) !== toolName || arg === void 0) return "none";
   const inner = pattern.slice(open + 1, -1);
   if (inner.endsWith(":*")) {
-    return arg.startsWith(inner.slice(0, -2)) ? "prefix" : "none";
+    const prefix = inner.slice(0, -2);
+    return rankWholeOrSegments(toolName, arg, intent, (segment) => segment.startsWith(prefix));
   }
   if (inner.includes("*")) {
     if (arg.length > GLOB_MAX_ARG_LENGTH) return "none";
     const compiled = compiledGlob(inner);
-    return compiled && matchGlobTokens(compiled, arg) ? "prefix" : "none";
+    if (!compiled) return "none";
+    return rankWholeOrSegments(toolName, arg, intent, (segment) => matchGlobTokens(compiled, segment));
   }
   return arg === inner ? "exact" : "none";
 };
@@ -748,11 +819,11 @@ var policyArgForms = (toolName, toolInput, cwd) => {
   }
   return forms;
 };
-var matchToolPatternAny = (pattern, toolName, args) => {
+var matchToolPatternAny = (pattern, toolName, args, intent = PATTERN_INTENT.grant) => {
   if (args.length === 0) return matchToolPattern(pattern, toolName);
   let best = "none";
   for (const arg of args) {
-    const rank = matchToolPattern(pattern, toolName, arg);
+    const rank = matchToolPattern(pattern, toolName, arg, intent);
     if (matchRankWeight(rank) > matchRankWeight(best)) best = rank;
   }
   return best;
@@ -995,6 +1066,7 @@ var verdictForPolicy = (policy) => {
   if (isAutoApprove(policy)) return "allow";
   return "requires_human";
 };
+var policyIntent = (policy) => policy.timeoutAction === "deny" ? PATTERN_INTENT.restrict : PATTERN_INTENT.grant;
 var selectGoverningRule = (policies, toolName, args, repoKey, sessionId) => {
   let best;
   let bestWeight = 0;
@@ -1003,7 +1075,7 @@ var selectGoverningRule = (policies, toolName, args, repoKey, sessionId) => {
   for (const candidate of policies) {
     if (!isRepoKeyMatch(candidate.repoKey, repoKey)) continue;
     if (candidate.sessionId && candidate.sessionId !== sessionId) continue;
-    const rank = matchToolPatternAny(candidate.tool, toolName, args);
+    const rank = matchToolPatternAny(candidate.tool, toolName, args, policyIntent(candidate));
     if (rank === "none") continue;
     const weight = matchRankWeight(rank);
     const scoped = candidate.sessionId ? 2 : candidate.repoKey ? 1 : 0;
@@ -1253,6 +1325,8 @@ var ANSWER_SOURCES = [
   "sandbox"
 ];
 var isAnswerSource = (value) => typeof value === "string" && ANSWER_SOURCES.includes(value);
+var SETTLED_OUTCOMES = ["approve", "deny"];
+var isSettledOutcome = (value) => typeof value === "string" && SETTLED_OUTCOMES.includes(value);
 var classifyDecisionRisk = (toolName, toolTarget) => {
   const parts = [toolName, toolTarget ?? ""];
   const matchesAny = (patterns) => parts.some((part) => patterns.some((re) => re.test(part)));
@@ -1300,6 +1374,13 @@ var CAPABILITY_PATTERNS = {
 };
 var DECISION_EPISODE_SCHEMA_VERSION = 1;
 var DECISION_FEATURE_EXTRACTOR = `pushary-hooks/schema-${DECISION_EPISODE_SCHEMA_VERSION}`;
+var DECISION_ORIGIN = {
+  human: "human",
+  autopilot: "autopilot",
+  safeReadonly: "safe_readonly",
+  policyTimeout: "policy_timeout",
+  killSwitch: "kill_switch"
+};
 var EPISODE_CAPABILITIES = [...POLICY_CAPABILITIES, "other"];
 var NETWORK_COMMAND_PATTERNS = [
   /\bcurl\b/i,
@@ -1373,9 +1454,8 @@ var deriveBlastRadius = (capability, riskClass, targetClass) => {
   return "low";
 };
 var deriveLabelTier = (origin, decision) => {
-  if (origin === "autopilot") return "none";
-  if (origin === "human" && (decision === "approve" || decision === "deny")) return "bronze";
-  return "bronze";
+  if (origin !== DECISION_ORIGIN.human) return "none";
+  return isSettledOutcome(decision) ? "bronze" : "none";
 };
 var buildDecisionEpisodeFeatures = (input) => {
   const isCommand = isCommandTool(input.toolName);
@@ -1423,6 +1503,7 @@ var matchesGlobPath = (glob, path) => {
   const compiled = compiledGlob(glob);
   return compiled ? matchGlobTokens(compiled, path) : false;
 };
+var SCOPE_PATH_MAX_LENGTH = 200;
 var evaluateScope = (contract, path) => {
   if (!contract) return { outcome: "no_contract" };
   if (typeof path !== "string" || path.length === 0) return { outcome: "in_scope" };
@@ -1436,6 +1517,7 @@ var evaluateScope = (contract, path) => {
   return { outcome: "out_of_scope", path };
 };
 var scopeRequiresHuman = (verdict) => verdict.outcome === "out_of_scope" || verdict.outcome === "off_limits";
+var widenablePath = (path) => path.length > 0 && path.length <= SCOPE_PATH_MAX_LENGTH ? path : void 0;
 var scopeChangeReason = (verdict) => {
   if (verdict.outcome === "out_of_scope") {
     return `Outside the scope you approved: ${verdict.path}`;
@@ -1465,9 +1547,9 @@ var resolveAutoResolveOrigin = (config, toolName, toolInput, cwd, repoKey, sessi
   const match = selectGoverningRule(config.policies, toolName, args, repoKey, sessionId);
   const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
   if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
-    return "safe_readonly";
+    return DECISION_ORIGIN.safeReadonly;
   }
-  return "policy_timeout";
+  return DECISION_ORIGIN.autopilot;
 };
 var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey, sessionId) => {
   const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
@@ -1625,7 +1707,7 @@ var resolveGate = (input) => {
     kind: "gate",
     policy,
     scopeReason,
-    scopePath: scopeReason && "path" in scopeVerdict ? scopeVerdict.path : void 0
+    scopePath: scopeReason && "path" in scopeVerdict ? widenablePath(scopeVerdict.path) : void 0
   };
 };
 var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
@@ -1707,6 +1789,7 @@ var claudePermissionRequestOutput = (decision, reason, updatedInput) => ({
     decision: decision === "allow" ? { behavior: "allow", ...updatedInput ? { updatedInput } : {} } : { behavior: "deny", ...reason ? { message: reason } : {} }
   }
 });
+var COMPATIBLE_GATE_EVENT = "PreToolUse";
 var gateOutputFor = (source, event, decision, reason) => {
   let output;
   if (source === "claude" || source === "vscode") {
@@ -1744,6 +1827,11 @@ var gateOutputFor = (source, event, decision, reason) => {
       user_message: "Command denied via Pushary.",
       agent_message: reason ?? "Denied from Pushary"
     };
+  } else {
+    const profile = hookCompatibleProfileBySource(source);
+    if (profile && event === COMPATIBLE_GATE_EVENT) {
+      output = renderPreToolUseVerdict(profile, claudePreToolUseOutput(decision, reason));
+    }
   }
   return output;
 };
@@ -1904,12 +1992,12 @@ export {
   MANAGED_PROVIDERS,
   COMPATIBLE_AGENT_TYPES,
   PHONE_ANSWERED_TOOLS,
+  canonicalToolName,
   toToolLookup,
   renderPreToolUseVerdict,
   HOOK_COMPATIBLE_PROFILES,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
-  compatibleConfigDir,
   compatibleTargetFiles,
   hookWritePath,
   isHookActivationReport,

package/dist/{chunk-WTT24AUA.js → chunk-WXXDHGTZ.js}

@@ -1,7 +1,7 @@
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-INBTKFT6.js";
+} from "./chunk-IAEVVUXO.js";
 import {
   cancelQuestion,
   isPolicyConfig,
@@ -10,13 +10,13 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-J7PJALS2.js";
+} from "./chunk-K7UIAE7I.js";
 import {
   withRetry
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-E3WQMDCE.js";
+} from "./chunk-POAFXBNH.js";
 import {
   getApiKey,
   getBaseUrl
@@ -31,7 +31,9 @@ import {
   HOOK_SOURCES,
   PENDING_COMMAND_PREFIX,
   REPO_AWARE_AGENTS,
+  canonicalToolName,
   gateOutputFor,
+  hookCompatibleProfileBySource,
   isAutoApprove,
   localRepoKey,
   modeStateFromResponse,
@@ -40,8 +42,9 @@ import {
   redactSecrets,
   redactSecretsDeep,
   resolveAutoResolveOrigin,
-  resolvePolicy
-} from "./chunk-VQYARC2K.js";
+  resolvePolicy,
+  toToolLookup
+} from "./chunk-WPJS3OZH.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -349,6 +352,25 @@ var OPENCODE_TOOL_NAMES = {
   websearch: "WebSearch",
   task: "Task"
 };
+var PATCH_ARG_KEYS = ["command", "patch", "input"];
+var patchedFilesIn = (input) => [...new Set(PATCH_ARG_KEYS.flatMap((key) => parseApplyPatchFiles(input[key])))];
+var lookupsForInput = (profile, toolName, input, absolute) => {
+  const lookup = toToolLookup(profile, toolName, input, absolute);
+  if (!lookup.unreadable) return [lookup];
+  const files = patchedFilesIn(input);
+  if (files.length === 0) return [lookup];
+  return files.slice(0, GATE_MAX_TOOL_INPUTS + 1).map((file) => toToolLookup(profile, toolName, { ...input, file_path: absolute(file) }, absolute));
+};
+var compatibleGateInputs = (profile, toolName, toolInputs, cwd) => {
+  const absolute = (path) => cwd && !isAbsolute(path) ? resolve(cwd, path) : path;
+  const lookups = toolInputs.flatMap((input) => lookupsForInput(profile, toolName, input, absolute));
+  if (lookups.length > GATE_MAX_TOOL_INPUTS) return null;
+  if (lookups.some((lookup) => lookup.unreadable)) return null;
+  return {
+    toolName: lookups[0]?.tool ?? canonicalToolName(profile, toolName),
+    toolInputs: lookups.map((lookup) => lookup.input)
+  };
+};
 var canonicalGateInputs = (source, toolName, toolInputs, cwd) => {
   if (source === "codex" && toolName === "apply_patch" || source === "vscode" && ["apply_patch", "applyPatch", "copilot_applyPatch"].includes(toolName)) {
     const paths = [...new Set(toolInputs.flatMap((input) => parseApplyPatchFiles(input.command ?? input.input ?? input.patch)))];
@@ -419,6 +441,8 @@ var canonicalGateInputs = (source, toolName, toolInputs, cwd) => {
       return typeof path === "string" ? { ...input, file_path: cwd && !isAbsolute(path) ? resolve(cwd, path) : path } : input;
     }) };
   }
+  const profile = hookCompatibleProfileBySource(source);
+  if (profile) return compatibleGateInputs(profile, toolName, toolInputs, cwd);
   if (source !== "gemini") return { toolName, toolInputs };
   if (toolName === "run_shell_command") {
     return { toolName: "Bash", toolInputs: toolInputs.map((input) => ({ command: input.command })) };

package/dist/{chunk-DKTFZCLQ.js → chunk-X3KIGNIP.js}

@@ -1,17 +1,17 @@
 import {
   activeIdentity
-} from "./chunk-SM54HHVY.js";
+} from "./chunk-BNDHXPTQ.js";
 import {
   blockedActionFingerprint,
   defersToNativeMode,
   forgetBlockedActionHint,
   hasBlockedActionHint,
   recordBlockedActionHint
-} from "./chunk-IH7YUPFN.js";
+} from "./chunk-A5ZWYQFV.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-VACFOGF3.js";
+} from "./chunk-YF4JDCU4.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -34,7 +34,7 @@ import {
   scopePathFor,
   settleQuestionsForToolUse,
   throttlePass
-} from "./chunk-WTT24AUA.js";
+} from "./chunk-WXXDHGTZ.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -49,7 +49,7 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-J7PJALS2.js";
+} from "./chunk-K7UIAE7I.js";
 import {
   getApiKey,
   getBaseUrl
@@ -73,7 +73,7 @@ import {
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-VQYARC2K.js";
+} from "./chunk-WPJS3OZH.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";

package/dist/{chunk-IPDBFJ2M.js → chunk-XBJW4MV5.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-YM4G6CFN.js";
+} from "./chunk-OE6U2AXM.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-UP7NZXJU.js → chunk-XBO42HKH.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-E3WQMDCE.js";
+} from "./chunk-POAFXBNH.js";
 import {
   backupFile,
   readJsonSafe,

package/dist/{chunk-DZYIAMKR.js → chunk-XEXOHUJ6.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-OYYQHJAO.js";
+} from "./chunk-BYGEZI7B.js";
 import {
   isBridgeLocator
-} from "./chunk-SLEWDZOA.js";
+} from "./chunk-JYEGOYQC.js";
 import {
   pusharyHookExecutable
-} from "./chunk-AH5OO2YZ.js";
+} from "./chunk-DVO4SZMJ.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-SA6UB3GD.js";
+} from "./chunk-2PLEJ7SY.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-VACFOGF3.js → chunk-YF4JDCU4.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-VQYARC2K.js";
+} from "./chunk-WPJS3OZH.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-6T4OINZB.js → chunk-ZHL62DRA.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-YM4G6CFN.js";
+} from "./chunk-OE6U2AXM.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-EWQZISYV.js";
+} from "./chunk-RHLUJE4H.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-VQYARC2K.js";
+} from "./chunk-WPJS3OZH.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{reapply-STSGYPF2.js → reapply-FUCAKR6Z.js}

@@ -8,15 +8,15 @@ import {
   reapplyGeminiSettings,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-EZ3GX3NS.js";
-import "./chunk-IPDBFJ2M.js";
-import "./chunk-6T4OINZB.js";
-import "./chunk-AH5OO2YZ.js";
-import "./chunk-YM4G6CFN.js";
-import "./chunk-INBTKFT6.js";
-import "./chunk-EWQZISYV.js";
+} from "./chunk-UVXNYYHG.js";
+import "./chunk-XBJW4MV5.js";
+import "./chunk-ZHL62DRA.js";
+import "./chunk-DVO4SZMJ.js";
+import "./chunk-OE6U2AXM.js";
+import "./chunk-IAEVVUXO.js";
+import "./chunk-RHLUJE4H.js";
 import "./chunk-4LL6LG5X.js";
-import "./chunk-VQYARC2K.js";
+import "./chunk-WPJS3OZH.js";
 export {
   inspectConfiguredManagedProviders,
   reapplyAllAgents,

package/dist/src/index.js

@@ -1,12 +1,12 @@
 import {
   handlePreToolUse
-} from "../chunk-DKTFZCLQ.js";
-import "../chunk-SM54HHVY.js";
-import "../chunk-6T4OINZB.js";
-import "../chunk-IH7YUPFN.js";
-import "../chunk-VACFOGF3.js";
+} from "../chunk-X3KIGNIP.js";
+import "../chunk-BNDHXPTQ.js";
+import "../chunk-ZHL62DRA.js";
+import "../chunk-A5ZWYQFV.js";
+import "../chunk-YF4JDCU4.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-YM4G6CFN.js";
+import "../chunk-OE6U2AXM.js";
 import {
   fetchAccountPublicKey
 } from "../chunk-EQRS3SGM.js";
@@ -18,20 +18,20 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-WTT24AUA.js";
-import "../chunk-INBTKFT6.js";
+} from "../chunk-WXXDHGTZ.js";
+import "../chunk-IAEVVUXO.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
 } from "../chunk-LGXUGYUH.js";
-import "../chunk-J7PJALS2.js";
-import "../chunk-EWQZISYV.js";
+import "../chunk-K7UIAE7I.js";
+import "../chunk-RHLUJE4H.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-E3WQMDCE.js";
+import "../chunk-POAFXBNH.js";
 import "../chunk-4LL6LG5X.js";
 import {
   getApiKey,
@@ -39,7 +39,7 @@ import {
 } from "../chunk-2UMNXADU.js";
 import {
   resolvePolicy
-} from "../chunk-VQYARC2K.js";
+} from "../chunk-WPJS3OZH.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "1.1.0",
+  "version": "1.3.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",