@pushary/agent-hooks 1.2.0 → 1.3.1

package/dist/{chunk-ERP7FOFQ.js → chunk-KHGIM2BN.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-UWP66NDF.js";
+} from "./chunk-XP2KRTZD.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-PX53RT6Q.js";
+} from "./chunk-34NNTYK6.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-U42ES5U3.js → chunk-KLZJEMSE.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-YT6H7BB5.js → chunk-LWT34GSY.js}

@@ -3,36 +3,40 @@ import {
   addPusharyToolPermissions,
   isPusharyHook,
   removeClaudeMcpServers
-} from "./chunk-PX54KULQ.js";
+} from "./chunk-SGZE2JBF.js";
 import {
   CLAUDE_HOOK_EVENTS,
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-ERP7FOFQ.js";
+} from "./chunk-KHGIM2BN.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-5AATCXJN.js";
+} from "./chunk-WOBHHXW5.js";
 import {
   guardBinary,
   holdBudgetOf,
   registerHookEntry
-} from "./chunk-PX53RT6Q.js";
+} from "./chunk-34NNTYK6.js";
 import {
   PHONE_ANSWERED_TOOLS,
   hookCompatibleProfile,
+  hookCompatibleProfileBySource,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/compatible-config.ts
 import { homedir } from "os";
 import { isAbsolute, join, resolve } from "path";
 var AGENT_FLAG = "--agent";
+var SOURCE_FLAG = "--source";
 var agentArgument = (profile) => `${AGENT_FLAG}=${profile.agentType}`;
 var profileFromArgv = (argv) => {
   const named = namedAgent(argv);
-  return named ? hookCompatibleProfile(named) : void 0;
+  if (named !== void 0) return hookCompatibleProfile(named);
+  const source = namedSource(argv);
+  return source === void 0 ? void 0 : hookCompatibleProfileBySource(source);
 };
 var activeIdentity = (argv) => {
   const profile = profileFromArgv(argv);
@@ -42,10 +46,18 @@ var namedAgent = (argv) => {
   const prefix = `${AGENT_FLAG}=`;
   return argv.find((argument) => argument.startsWith(prefix))?.slice(prefix.length);
 };
+var namedSource = (argv) => {
+  const inline = argv.find((argument) => argument.startsWith(`${SOURCE_FLAG}=`));
+  if (inline) return inline.slice(SOURCE_FLAG.length + 1);
+  const index = argv.indexOf(SOURCE_FLAG);
+  return index === -1 ? void 0 : argv[index + 1];
+};
 var activeHookSource = (argv) => {
   const named = namedAgent(argv);
-  if (named === void 0) return "claude";
-  return hookCompatibleProfile(named)?.source ?? null;
+  if (named !== void 0) return hookCompatibleProfile(named)?.source ?? null;
+  const source = namedSource(argv);
+  if (source === void 0) return "claude";
+  return hookCompatibleProfileBySource(source)?.source ?? "claude";
 };
 var PATCH_INPUT_KEYS = ["command", "patch", "input"];
 var patchedFiles = (toolInput) => [...new Set(PATCH_INPUT_KEYS.flatMap((key) => parseApplyPatchFiles(toolInput[key])))];
@@ -62,10 +74,6 @@ var normalizeToolCall = (profile, input) => {
   const lookup = lookupFor(profile, input);
   return { ...input, tool_name: lookup.tool, tool_input: lookup.input };
 };
-var unreadableTool = (profile, input) => {
-  if (!profile || !input.tool_name) return void 0;
-  return lookupFor(profile, input).unreadable ? input.tool_name : void 0;
-};
 var underHome = (segments, home = homedir()) => join(home, ...segments);
 var compatibleConfigFile = (profile, home) => underHome(profile.configFile, home);
 var compatibleMcpFile = (profile, home) => profile.mcp ? underHome(profile.mcp.file, home) : null;
@@ -215,7 +223,6 @@ export {
   activeIdentity,
   activeHookSource,
   normalizeToolCall,
-  unreadableTool,
   compatibleConfigFile,
   compatibleMcpFile,
   compatibleInstructionsFile,

package/dist/{chunk-VE2ZWUML.js → chunk-NDSOOJDX.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-RN6ZWIAC.js";
+} from "./chunk-TW7KA27C.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-2DT7STR5.js → chunk-OMP3KDDU.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-PCT2MYG5.js → chunk-P232YODQ.js}

@@ -3,19 +3,19 @@ import {
   loadPin,
   savePin,
   verifyRecipients
-} from "./chunk-YKLCWWEI.js";
+} from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-W6XVHP4U.js";
+} from "./chunk-REIZ5GXG.js";
 import {
   ensureDaemonRunning
-} from "./chunk-CVCSUAXI.js";
+} from "./chunk-6HH4IH4K.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-6QCN5XQE.js";
+} from "./chunk-CDSL3LLO.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -23,17 +23,17 @@ import {
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-KHTBSSY5.js";
+} from "./chunk-YXWM4TNX.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-PX53RT6Q.js";
+} from "./chunk-34NNTYK6.js";
 import {
   readTranscriptPreference
-} from "./chunk-7TDQ7KDY.js";
+} from "./chunk-5SALHATY.js";
 import {
   writeJsonAtomic
-} from "./chunk-4LL6LG5X.js";
+} from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl

package/dist/{chunk-7GH3D6YG.js → chunk-PEV6ULSM.js}

@@ -1,12 +1,12 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-LWKVEMVK.js";
+} from "./chunk-XVE52YFZ.js";
 import {
   codexHomeFrom
-} from "./chunk-PX53RT6Q.js";
+} from "./chunk-34NNTYK6.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-CG4ZUQ5O.js → chunk-PHXU4NOP.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-PX53RT6Q.js";
+} from "./chunk-34NNTYK6.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-LAXU5U75.js → chunk-QDYJQLXT.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-WC5PYFDK.js";
+} from "./chunk-FGNABUPN.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-C3WH44MH.js → chunk-QOCWB4Q6.js}

@@ -2,17 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-ERP7FOFQ.js";
+} from "./chunk-KHGIM2BN.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-PX53RT6Q.js";
+} from "./chunk-34NNTYK6.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-OGSRCIOD.js → chunk-R5CU7ED6.js}

@@ -3,7 +3,7 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-6QCN5XQE.js";
+} from "./chunk-CDSL3LLO.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords

package/dist/{chunk-W6XVHP4U.js → chunk-REIZ5GXG.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-WC5PYFDK.js";
+} from "./chunk-FGNABUPN.js";
 import {
   isBridgeLocator
-} from "./chunk-U42ES5U3.js";
+} from "./chunk-KLZJEMSE.js";
 import {
   pusharyHookExecutable
-} from "./chunk-C3WH44MH.js";
+} from "./chunk-QOCWB4Q6.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-VDOKRCWM.js";
+} from "./chunk-EAGMQMRM.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-DRAATYTY.js → chunk-RERJ2ZDV.js}

@@ -1,18 +1,18 @@
 import {
   detectClaudeVersion
-} from "./chunk-JQJB7BZE.js";
+} from "./chunk-AFKOWCMQ.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-PX54KULQ.js";
+} from "./chunk-SGZE2JBF.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
   codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-C3WH44MH.js";
+} from "./chunk-QOCWB4Q6.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -24,7 +24,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-ERP7FOFQ.js";
+} from "./chunk-KHGIM2BN.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -44,12 +44,12 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-PX53RT6Q.js";
+} from "./chunk-34NNTYK6.js";
 import {
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-4LL6LG5X.js";
+} from "./chunk-T7E75EKA.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-PX54KULQ.js → chunk-SGZE2JBF.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-ERP7FOFQ.js";
+} from "./chunk-KHGIM2BN.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-PX53RT6Q.js";
+} from "./chunk-34NNTYK6.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-YKLCWWEI.js → chunk-SGZJ5LYH.js}

@@ -1,6 +1,6 @@
 import {
   writeJsonAtomicDurable
-} from "./chunk-4LL6LG5X.js";
+} from "./chunk-T7E75EKA.js";
 
 // src/transcript-recipient-pin.ts
 import { existsSync, mkdirSync, readFileSync, rmSync } from "fs";

package/dist/{chunk-4LL6LG5X.js → chunk-T7E75EKA.js}

@@ -1,5 +1,5 @@
 // src/cli/fsx.ts
-import { copyFileSync, existsSync, fsyncSync, mkdirSync, openSync, closeSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";
+import { copyFileSync, lstatSync, realpathSync, existsSync, fsyncSync, mkdirSync, openSync, closeSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";
 import { dirname, join } from "path";
 var readJsonSafe = (filePath) => {
   let raw;
@@ -24,7 +24,8 @@ var backupFile = (filePath) => {
   return target;
 };
 var writeFileAtomic = (filePath, contents, mode, encoding = "utf-8") => {
-  const dir = dirname(filePath);
+  const target = lstatSync(filePath, { throwIfNoEntry: false })?.isSymbolicLink() ? realpathSync(filePath) : filePath;
+  const dir = dirname(target);
   if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
   const temp = join(dir, `.${process.pid}-${stamp()}.pushary-tmp`);
   try {
@@ -35,7 +36,7 @@ var writeFileAtomic = (filePath, contents, mode, encoding = "utf-8") => {
     } finally {
       closeSync(handle);
     }
-    renameSync(temp, filePath);
+    renameSync(temp, target);
   } catch (err) {
     try {
       if (existsSync(temp)) unlinkSync(temp);

package/dist/{chunk-VIQ7CCWW.js → chunk-TGG4FWWB.js}

@@ -15,10 +15,10 @@ import {
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-ZFQPSGPO.js";
+} from "./chunk-5WLH2ENB.js";
 import {
   isAnswerSource
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-RN6ZWIAC.js → chunk-TW7KA27C.js}

@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-5AATCXJN.js → chunk-WOBHHXW5.js}

@@ -1,7 +1,7 @@
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-UWP66NDF.js";
+} from "./chunk-XP2KRTZD.js";
 import {
   cancelQuestion,
   isPolicyConfig,
@@ -10,13 +10,13 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-KZPUARCU.js";
+} from "./chunk-465UENKO.js";
 import {
   withRetry
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-ZFQPSGPO.js";
+} from "./chunk-5WLH2ENB.js";
 import {
   getApiKey,
   getBaseUrl
@@ -44,7 +44,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   toToolLookup
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/policy.ts
 import { createHash } from "crypto";

package/dist/{chunk-KEVJ2WW6.js → chunk-XOUQUZ43.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-PX53RT6Q.js";
+} from "./chunk-34NNTYK6.js";
 import {
   readJsonSafe
-} from "./chunk-4LL6LG5X.js";
+} from "./chunk-T7E75EKA.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-UWP66NDF.js → chunk-XP2KRTZD.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-LWKVEMVK.js → chunk-XVE52YFZ.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-7DQVIIHX.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-KHTBSSY5.js → chunk-YXWM4TNX.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-7TDQ7KDY.js";
+} from "./chunk-5SALHATY.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{reapply-47AMVIXN.js → reapply-ADFRVH5N.js}

@@ -8,15 +8,15 @@ import {
   reapplyGeminiSettings,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-DRAATYTY.js";
-import "./chunk-JQJB7BZE.js";
-import "./chunk-PX54KULQ.js";
-import "./chunk-C3WH44MH.js";
-import "./chunk-ERP7FOFQ.js";
-import "./chunk-UWP66NDF.js";
-import "./chunk-PX53RT6Q.js";
-import "./chunk-4LL6LG5X.js";
-import "./chunk-7DQVIIHX.js";
+} from "./chunk-RERJ2ZDV.js";
+import "./chunk-AFKOWCMQ.js";
+import "./chunk-SGZE2JBF.js";
+import "./chunk-QOCWB4Q6.js";
+import "./chunk-KHGIM2BN.js";
+import "./chunk-XP2KRTZD.js";
+import "./chunk-34NNTYK6.js";
+import "./chunk-T7E75EKA.js";
+import "./chunk-5UWDYOZX.js";
 export {
   inspectConfiguredManagedProviders,
   reapplyAllAgents,

package/dist/src/index.d.ts

@@ -1,6 +1,6 @@
+import { CanonicalGateInputs, ReceiptMeta } from '@pushary/hook-mapping';
 import { ClaudePreToolUseOutput, PolicyConfig, ApprovalMode, ModeState, AutoResolveOrigin, AgentQuestion } from '@pushary/contracts';
 export { ApprovalMode, ModeState, PolicyConfig, ToolPolicy, resolvePolicy } from '@pushary/contracts';
-import { ReceiptMeta } from '@pushary/hook-mapping';
 
 interface ToolInput {
     tool_name: string;
@@ -12,7 +12,7 @@ interface ToolInput {
     permission_mode?: string;
 }
 type HookOutput = ClaudePreToolUseOutput;
-declare const handlePreToolUse: (input: ToolInput) => Promise<HookOutput | undefined>;
+declare const handlePreToolUse: (input: ToolInput, canonical?: CanonicalGateInputs | null) => Promise<HookOutput | undefined>;
 
 declare const getPolicy: (apiKey: string, expectedVersion?: string | null, agent?: string, repoAware?: boolean, sessionId?: string) => Promise<PolicyConfig>;
 

package/dist/src/index.js

@@ -1,12 +1,12 @@
 import {
   handlePreToolUse
-} from "../chunk-KODKICKJ.js";
-import "../chunk-YT6H7BB5.js";
-import "../chunk-PX54KULQ.js";
-import "../chunk-BXLFUTSD.js";
-import "../chunk-2DT7STR5.js";
+} from "../chunk-I2OLM3DM.js";
+import "../chunk-LWT34GSY.js";
+import "../chunk-SGZE2JBF.js";
+import "../chunk-HCTSTMDD.js";
+import "../chunk-OMP3KDDU.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-ERP7FOFQ.js";
+import "../chunk-KHGIM2BN.js";
 import {
   fetchAccountPublicKey
 } from "../chunk-EQRS3SGM.js";
@@ -18,28 +18,28 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-5AATCXJN.js";
-import "../chunk-UWP66NDF.js";
+} from "../chunk-WOBHHXW5.js";
+import "../chunk-XP2KRTZD.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
 } from "../chunk-LGXUGYUH.js";
-import "../chunk-KZPUARCU.js";
-import "../chunk-PX53RT6Q.js";
+import "../chunk-465UENKO.js";
+import "../chunk-34NNTYK6.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ZFQPSGPO.js";
-import "../chunk-4LL6LG5X.js";
+import "../chunk-5WLH2ENB.js";
+import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
 import {
   resolvePolicy
-} from "../chunk-7DQVIIHX.js";
+} from "../chunk-5UWDYOZX.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "1.2.0",
+  "version": "1.3.1",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",