@pushary/agent-hooks 1.3.0 → 1.3.1

package/dist/{chunk-EKQAKSGI.js → chunk-R5CU7ED6.js}

@@ -3,7 +3,7 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-B3S4SF3D.js";
+} from "./chunk-CDSL3LLO.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords

package/dist/{chunk-XEXOHUJ6.js → chunk-REIZ5GXG.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-BYGEZI7B.js";
+} from "./chunk-FGNABUPN.js";
 import {
   isBridgeLocator
-} from "./chunk-JYEGOYQC.js";
+} from "./chunk-KLZJEMSE.js";
 import {
   pusharyHookExecutable
-} from "./chunk-DVO4SZMJ.js";
+} from "./chunk-QOCWB4Q6.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-2PLEJ7SY.js";
+} from "./chunk-EAGMQMRM.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-UVXNYYHG.js → chunk-RERJ2ZDV.js}

@@ -1,18 +1,18 @@
 import {
   detectClaudeVersion
-} from "./chunk-XBJW4MV5.js";
+} from "./chunk-AFKOWCMQ.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-ZHL62DRA.js";
+} from "./chunk-SGZE2JBF.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
   codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-DVO4SZMJ.js";
+} from "./chunk-QOCWB4Q6.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -24,7 +24,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-OE6U2AXM.js";
+} from "./chunk-KHGIM2BN.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -44,12 +44,12 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-RHLUJE4H.js";
+} from "./chunk-34NNTYK6.js";
 import {
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-4LL6LG5X.js";
+} from "./chunk-T7E75EKA.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-ZHL62DRA.js → chunk-SGZE2JBF.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-OE6U2AXM.js";
+} from "./chunk-KHGIM2BN.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-RHLUJE4H.js";
+} from "./chunk-34NNTYK6.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-WPJS3OZH.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-YKLCWWEI.js → chunk-SGZJ5LYH.js}

@@ -1,6 +1,6 @@
 import {
   writeJsonAtomicDurable
-} from "./chunk-4LL6LG5X.js";
+} from "./chunk-T7E75EKA.js";
 
 // src/transcript-recipient-pin.ts
 import { existsSync, mkdirSync, readFileSync, rmSync } from "fs";

package/dist/{chunk-4LL6LG5X.js → chunk-T7E75EKA.js}

@@ -1,5 +1,5 @@
 // src/cli/fsx.ts
-import { copyFileSync, existsSync, fsyncSync, mkdirSync, openSync, closeSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";
+import { copyFileSync, lstatSync, realpathSync, existsSync, fsyncSync, mkdirSync, openSync, closeSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";
 import { dirname, join } from "path";
 var readJsonSafe = (filePath) => {
   let raw;
@@ -24,7 +24,8 @@ var backupFile = (filePath) => {
   return target;
 };
 var writeFileAtomic = (filePath, contents, mode, encoding = "utf-8") => {
-  const dir = dirname(filePath);
+  const target = lstatSync(filePath, { throwIfNoEntry: false })?.isSymbolicLink() ? realpathSync(filePath) : filePath;
+  const dir = dirname(target);
   if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
   const temp = join(dir, `.${process.pid}-${stamp()}.pushary-tmp`);
   try {
@@ -35,7 +36,7 @@ var writeFileAtomic = (filePath, contents, mode, encoding = "utf-8") => {
     } finally {
       closeSync(handle);
     }
-    renameSync(temp, filePath);
+    renameSync(temp, target);
   } catch (err) {
     try {
       if (existsSync(temp)) unlinkSync(temp);

package/dist/{chunk-RVDHN2TJ.js → chunk-TGG4FWWB.js}

@@ -15,10 +15,10 @@ import {
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-POAFXBNH.js";
+} from "./chunk-5WLH2ENB.js";
 import {
   isAnswerSource
-} from "./chunk-WPJS3OZH.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-DON24PNT.js → chunk-TW7KA27C.js}

@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-WPJS3OZH.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-WXXDHGTZ.js → chunk-WOBHHXW5.js}

@@ -1,7 +1,7 @@
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-IAEVVUXO.js";
+} from "./chunk-XP2KRTZD.js";
 import {
   cancelQuestion,
   isPolicyConfig,
@@ -10,13 +10,13 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-K7UIAE7I.js";
+} from "./chunk-465UENKO.js";
 import {
   withRetry
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-POAFXBNH.js";
+} from "./chunk-5WLH2ENB.js";
 import {
   getApiKey,
   getBaseUrl
@@ -44,7 +44,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   toToolLookup
-} from "./chunk-WPJS3OZH.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/policy.ts
 import { createHash } from "crypto";

package/dist/{chunk-MU275U5A.js → chunk-XOUQUZ43.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-RHLUJE4H.js";
+} from "./chunk-34NNTYK6.js";
 import {
   readJsonSafe
-} from "./chunk-4LL6LG5X.js";
+} from "./chunk-T7E75EKA.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-IAEVVUXO.js → chunk-XP2KRTZD.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-WPJS3OZH.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-E7WBNGJS.js → chunk-XVE52YFZ.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-WPJS3OZH.js";
+} from "./chunk-5UWDYOZX.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-A2URMNFM.js → chunk-YXWM4TNX.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-XBO42HKH.js";
+} from "./chunk-5SALHATY.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{reapply-FUCAKR6Z.js → reapply-ADFRVH5N.js}

@@ -8,15 +8,15 @@ import {
   reapplyGeminiSettings,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-UVXNYYHG.js";
-import "./chunk-XBJW4MV5.js";
-import "./chunk-ZHL62DRA.js";
-import "./chunk-DVO4SZMJ.js";
-import "./chunk-OE6U2AXM.js";
-import "./chunk-IAEVVUXO.js";
-import "./chunk-RHLUJE4H.js";
-import "./chunk-4LL6LG5X.js";
-import "./chunk-WPJS3OZH.js";
+} from "./chunk-RERJ2ZDV.js";
+import "./chunk-AFKOWCMQ.js";
+import "./chunk-SGZE2JBF.js";
+import "./chunk-QOCWB4Q6.js";
+import "./chunk-KHGIM2BN.js";
+import "./chunk-XP2KRTZD.js";
+import "./chunk-34NNTYK6.js";
+import "./chunk-T7E75EKA.js";
+import "./chunk-5UWDYOZX.js";
 export {
   inspectConfiguredManagedProviders,
   reapplyAllAgents,

package/dist/src/index.d.ts

@@ -1,6 +1,6 @@
+import { CanonicalGateInputs, ReceiptMeta } from '@pushary/hook-mapping';
 import { ClaudePreToolUseOutput, PolicyConfig, ApprovalMode, ModeState, AutoResolveOrigin, AgentQuestion } from '@pushary/contracts';
 export { ApprovalMode, ModeState, PolicyConfig, ToolPolicy, resolvePolicy } from '@pushary/contracts';
-import { ReceiptMeta } from '@pushary/hook-mapping';
 
 interface ToolInput {
     tool_name: string;
@@ -12,7 +12,7 @@ interface ToolInput {
     permission_mode?: string;
 }
 type HookOutput = ClaudePreToolUseOutput;
-declare const handlePreToolUse: (input: ToolInput) => Promise<HookOutput | undefined>;
+declare const handlePreToolUse: (input: ToolInput, canonical?: CanonicalGateInputs | null) => Promise<HookOutput | undefined>;
 
 declare const getPolicy: (apiKey: string, expectedVersion?: string | null, agent?: string, repoAware?: boolean, sessionId?: string) => Promise<PolicyConfig>;
 

package/dist/src/index.js

@@ -1,12 +1,12 @@
 import {
   handlePreToolUse
-} from "../chunk-X3KIGNIP.js";
-import "../chunk-BNDHXPTQ.js";
-import "../chunk-ZHL62DRA.js";
-import "../chunk-A5ZWYQFV.js";
-import "../chunk-YF4JDCU4.js";
+} from "../chunk-I2OLM3DM.js";
+import "../chunk-LWT34GSY.js";
+import "../chunk-SGZE2JBF.js";
+import "../chunk-HCTSTMDD.js";
+import "../chunk-OMP3KDDU.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-OE6U2AXM.js";
+import "../chunk-KHGIM2BN.js";
 import {
   fetchAccountPublicKey
 } from "../chunk-EQRS3SGM.js";
@@ -18,28 +18,28 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-WXXDHGTZ.js";
-import "../chunk-IAEVVUXO.js";
+} from "../chunk-WOBHHXW5.js";
+import "../chunk-XP2KRTZD.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
 } from "../chunk-LGXUGYUH.js";
-import "../chunk-K7UIAE7I.js";
-import "../chunk-RHLUJE4H.js";
+import "../chunk-465UENKO.js";
+import "../chunk-34NNTYK6.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-POAFXBNH.js";
-import "../chunk-4LL6LG5X.js";
+import "../chunk-5WLH2ENB.js";
+import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
 import {
   resolvePolicy
-} from "../chunk-WPJS3OZH.js";
+} from "../chunk-5UWDYOZX.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",