@pushary/agent-hooks 1.3.0 → 1.4.0

package/dist/bin/pushary-upgrade.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import {
   reapplyAllAgents
-} from "../chunk-UVXNYYHG.js";
-import "../chunk-XBJW4MV5.js";
+} from "../chunk-S3CLZSV3.js";
+import "../chunk-SGZ3IAWF.js";
 import {
   waitForMachineReadiness
-} from "../chunk-KPNGPRYU.js";
-import "../chunk-ZHL62DRA.js";
+} from "../chunk-UIN3RD2U.js";
+import "../chunk-5IBVIMWT.js";
 import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-4V24U44H.js";
-import "../chunk-DVO4SZMJ.js";
+} from "../chunk-GLPWCQ6V.js";
+import "../chunk-O6RN46OS.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
@@ -23,13 +23,13 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-KS4P6F3R.js";
-import "../chunk-OE6U2AXM.js";
+} from "../chunk-RGZY77CD.js";
+import "../chunk-A7XIL2WD.js";
 import {
   needsShell
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-IAEVVUXO.js";
-import "../chunk-K7UIAE7I.js";
+import "../chunk-KZIXHLPQ.js";
+import "../chunk-RQM5SMMR.js";
 import {
   claudeJson,
   codexConfigToml,
@@ -39,24 +39,24 @@ import {
   npmErrorMessage,
   resolveGlobalBinary,
   vscodePluginDir
-} from "../chunk-RHLUJE4H.js";
+} from "../chunk-UCGQEAKZ.js";
 import {
   exitOnHelpFlag
-} from "../chunk-GOQHN2UH.js";
-import "../chunk-LZQVAEWP.js";
+} from "../chunk-TWWLVOPB.js";
+import "../chunk-FAH3D74E.js";
 import {
   isNewerVersion
 } from "../chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "../chunk-XBO42HKH.js";
+} from "../chunk-NYHNLMQO.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-POAFXBNH.js";
-import "../chunk-4LL6LG5X.js";
+import "../chunk-P4JVVJ2D.js";
+import "../chunk-T7E75EKA.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
-import "../chunk-WPJS3OZH.js";
+import "../chunk-7IEB2GV4.js";
 
 // bin/pushary-upgrade.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-wait.js

@@ -4,15 +4,15 @@ import {
 } from "../chunk-CVWG2N3Y.js";
 import {
   exitOnFailedResponse
-} from "../chunk-BL4SQNO6.js";
-import "../chunk-DON24PNT.js";
+} from "../chunk-GS5EI2YL.js";
+import "../chunk-D4TNSUDY.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   exitOnHelpFlag
-} from "../chunk-GOQHN2UH.js";
-import "../chunk-LZQVAEWP.js";
+} from "../chunk-TWWLVOPB.js";
+import "../chunk-FAH3D74E.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -28,7 +28,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-WPJS3OZH.js";
+import "../chunk-7IEB2GV4.js";
 
 // bin/pushary-wait.ts
 exitOnHelpFlag("wait");

package/dist/bin/pushary.js

@@ -3,7 +3,7 @@ import {
   COMMANDS,
   isCommandName,
   renderHelp
-} from "../chunk-LZQVAEWP.js";
+} from "../chunk-FAH3D74E.js";
 import {
   getPackageVersion
 } from "../chunk-DINDL2CF.js";

package/dist/{chunk-3AIFWTVB.js → chunk-2TOTCUJC.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-BYGEZI7B.js";
+} from "./chunk-5MSBI6NP.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-WPJS3OZH.js";
+} from "./chunk-7IEB2GV4.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-X3KIGNIP.js → chunk-43Z3RLS5.js}

@@ -1,22 +1,24 @@
 import {
+  activeHookSource,
   activeIdentity
-} from "./chunk-BNDHXPTQ.js";
+} from "./chunk-HGN6VZTY.js";
 import {
   blockedActionFingerprint,
   defersToNativeMode,
   forgetBlockedActionHint,
   hasBlockedActionHint,
   recordBlockedActionHint
-} from "./chunk-A5ZWYQFV.js";
+} from "./chunk-JCWCTBYH.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-YF4JDCU4.js";
+} from "./chunk-5F5QQMCA.js";
 import {
   denyReasonFrom,
   isDeferAnswer
 } from "./chunk-YHG74UFF.js";
 import {
+  AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
   UNNAMED_ACTION,
   deriveAction,
@@ -34,7 +36,7 @@ import {
   scopePathFor,
   settleQuestionsForToolUse,
   throttlePass
-} from "./chunk-WXXDHGTZ.js";
+} from "./chunk-IF46POXX.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -49,18 +51,22 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-K7UIAE7I.js";
+} from "./chunk-RQM5SMMR.js";
 import {
   getApiKey,
   getBaseUrl
 } from "./chunk-2UMNXADU.js";
 import {
+  AGENT_QUESTION_STRATEGY,
   GATE_BLOCK_REASON_MAX_LENGTH,
   GATE_WIRE,
+  agentQuestionStrategy,
   buildDecisionEpisodeFeatures,
   claudePermissionDeniedOutput,
   claudePermissionRequestOutput,
   claudePreToolUseOutput,
+  claudePromptsBeforeAnEdit,
+  editAsksAtTheAgentsPrompt,
   effectiveWaitSeconds,
   hookHoldWindowMs,
   hookWaitClamped,
@@ -69,11 +75,13 @@ import {
   isBlockedActionRequest,
   isPermissionRequestOwnedByPreToolUse,
   isPusharyOwnTool,
+  machineDecisionFor,
   parseAgentQuestionAnswers,
   parseAgentQuestions,
   resolveGate,
-  stoppedOutput
-} from "./chunk-WPJS3OZH.js";
+  stoppedOutput,
+  wireVerdictFor
+} from "./chunk-7IEB2GV4.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
@@ -103,12 +111,38 @@ import { tmpdir } from "os";
 import { existsSync, writeFileSync } from "fs";
 var START_MS = Date.now();
 var ACTIVE_AGENT = activeIdentity(process.argv);
+var ACTIVE_SOURCE = activeHookSource(process.argv);
 var agentNameIn = (projectName) => `${ACTIVE_AGENT.label} - ${projectName}`;
 var allow = (reason) => claudePreToolUseOutput("allow", reason);
 var deny = (reason) => claudePreToolUseOutput("deny", reason);
 var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, updatedInput);
 var ask = (reason) => claudePreToolUseOutput("ask", reason);
 var halted = (reason) => stoppedOutput(deny(reason), reason);
+var reportMachineDecision = async (input, verdict) => {
+  const decision = machineDecisionFor(wireVerdictFor(verdict, 0));
+  if (!decision) return;
+  const sessionKey = input.session_id || DEFAULT_SESSION;
+  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+  const throttleKey = `machinedecision:${sessionKey}:${input.tool_name}:${decision.origin}:${toolTarget ?? ""}`;
+  if (!throttlePass(throttleKey, AUTO_DECISION_WINDOW_MS)) return;
+  await reportEvent(
+    {
+      event: "permission_denied",
+      occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
+      toolUseId: input.tool_use_id,
+      agentType: ACTIVE_AGENT.type,
+      agentName: agentNameIn(basename(input.cwd ?? process.cwd())),
+      action: permissionDeniedAction(input.tool_name),
+      sessionId: input.session_id,
+      decisionSource: "policy_auto",
+      decisionOrigin: decision.origin,
+      decisionOutcome: decision.outcome,
+      toolName: input.tool_name,
+      toolTarget
+    },
+    { maxAttempts: 1, timeoutMs: 800 }
+  ).catch(() => void 0);
+};
 var storedWaitDeadline = (result, requestedDeadline) => {
   const stored = result.waitEndsAt ? Date.parse(result.waitEndsAt) : Number.NaN;
   return Number.isFinite(stored) ? Math.min(stored, requestedDeadline) : requestedDeadline;
@@ -450,19 +484,25 @@ var handleKeyless = (input) => {
   }
   return void 0;
 };
-var claudeGateInput = (modeState, config, input) => {
-  const scopePath = modeState.scope ? scopePathFor(input.tool_name, input.tool_input, input.cwd) : void 0;
+var claudeGateInput = (modeState, config, input, canonical) => {
+  const toolName = canonical?.toolName ?? input.tool_name;
+  const toolInputs = canonical?.toolInputs ?? [input.tool_input ?? {}];
   return {
     modeState,
     config,
-    toolName: input.tool_name,
-    toolInputs: [input.tool_input ?? {}],
-    scopePaths: scopePath ? [scopePath] : [],
+    toolName,
+    toolInputs,
+    scopePaths: modeState.scope ? toolInputs.flatMap((args) => {
+      const path = scopePathFor(toolName, args, input.cwd);
+      return path ? [path] : [];
+    }) : [],
     cwd: input.cwd,
     repoKey: repoKeyFor(input.cwd),
     sessionId: input.session_id
   };
 };
+var unreadableReason = "Pushary could not read every target of this call. Use a supported command or a single-file edit.";
+var batchScopeReason = "This patch exceeds the agreed scope. Split it into single-file edits so each additional path can be approved.";
 var BLOCKED_ACTION_GATE_TIMEOUT_MS = 15e3;
 var BLOCKED_ACTION_CLAIM_TIMEOUT_MS = 4e3;
 var BLOCKED_ACTION_ALLOW_REASON = "Approved from Pushary after auto mode blocked it";
@@ -502,7 +542,7 @@ var claimedBlockedActionRetry = async (apiKey, input) => {
     return false;
   }
 };
-var handlePreToolUse = async (input) => {
+var handlePreToolUse = async (input, canonical) => {
   if (isPusharyOwnTool(input.tool_name)) return void 0;
   let apiKey;
   try {
@@ -513,9 +553,19 @@ var handlePreToolUse = async (input) => {
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
     const policy = await getPolicy(apiKey, modeState.policyVersion, ACTIVE_AGENT.type, true, input.session_id);
-    const verdict = resolveGate(claudeGateInput(modeState, policy, input));
-    if (verdict.kind === "kill") return halted(verdict.reason);
-    if (verdict.kind === "deny") return deny(verdict.reason);
+    const gateInput = claudeGateInput(modeState, policy, input, canonical);
+    const verdict = resolveGate(gateInput);
+    if (verdict.kind === "kill") {
+      await reportMachineDecision(input, verdict);
+      return halted(verdict.reason);
+    }
+    if (verdict.kind === "deny") {
+      await reportMachineDecision(input, verdict);
+      return deny(verdict.reason);
+    }
+    if (canonical === null) return deny(unreadableReason);
+    if (verdict.kind === "gate" && verdict.scopeReason && (canonical?.toolInputs.length ?? 0) > 1) return deny(batchScopeReason);
+    if (agentQuestionStrategy(ACTIVE_SOURCE, "PreToolUse", input.tool_name) === AGENT_QUESTION_STRATEGY.native) return void 0;
     if (input.tool_name === "AskUserQuestion") {
       return handleAskUserQuestion(apiKey, input, modeState);
     }
@@ -523,9 +573,10 @@ var handlePreToolUse = async (input) => {
       return handleExitPlanMode(apiKey, input);
     }
     if (await claimedBlockedActionRetry(apiKey, input)) return allow(BLOCKED_ACTION_ALLOW_REASON);
-    if (shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
+    if (!(verdict.kind === "gate" && verdict.scopeReason) && shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
       return void 0;
     }
+    if (claudePromptsBeforeAnEdit(input.permission_mode) && editAsksAtTheAgentsPrompt(gateInput, verdict)) return handleTerminalOnly();
     switch (verdict.kind) {
       case "allow":
         return allow();
@@ -553,8 +604,8 @@ var toPermissionRequestOutput = (hookOutput) => {
   if (d.permissionDecision === "deny") return permReqDeny(d.permissionDecisionReason);
   return void 0;
 };
-var handlePermissionRequest = async (input) => {
-  if (isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode)) return void 0;
+var handlePermissionRequest = async (input, canonical) => {
+  if (canonical === void 0 && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode)) return void 0;
   if (isPusharyOwnTool(input.tool_name)) return void 0;
   let apiKey;
   try {
@@ -565,14 +616,22 @@ var handlePermissionRequest = async (input) => {
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
     const policy = await getPolicy(apiKey, modeState.policyVersion, ACTIVE_AGENT.type, true, input.session_id);
-    const verdict = resolveGate(claudeGateInput(modeState, policy, input));
+    const verdict = resolveGate(claudeGateInput(modeState, policy, input, canonical));
+    if (verdict.kind === "kill") {
+      await reportMachineDecision(input, verdict);
+      return permReqHalted(verdict.reason);
+    }
+    if (verdict.kind === "deny") {
+      await reportMachineDecision(input, verdict);
+      return permReqDeny(verdict.reason);
+    }
+    if (canonical === null) return permReqDeny(unreadableReason);
+    if (agentQuestionStrategy(ACTIVE_SOURCE, "PermissionRequest", input.tool_name) === AGENT_QUESTION_STRATEGY.native) return void 0;
+    if (verdict.kind === "gate" && verdict.scopeReason && (canonical?.toolInputs.length ?? 0) > 1) return permReqDeny(batchScopeReason);
+    if (!(verdict.kind === "gate" && verdict.scopeReason) && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode)) return void 0;
     switch (verdict.kind) {
-      case "kill":
-        return permReqHalted(verdict.reason);
       case "allow":
         return permReqAllow();
-      case "deny":
-        return permReqDeny(verdict.reason);
       // No opinion, so Claude Code's own dialog shows.
       case "defer":
         return void 0;

package/dist/{chunk-YF4JDCU4.js → chunk-5F5QQMCA.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-WPJS3OZH.js";
+} from "./chunk-7IEB2GV4.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-ZHL62DRA.js → chunk-5IBVIMWT.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-OE6U2AXM.js";
+} from "./chunk-A7XIL2WD.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-RHLUJE4H.js";
+} from "./chunk-UCGQEAKZ.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-WPJS3OZH.js";
+} from "./chunk-7IEB2GV4.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-BYGEZI7B.js → chunk-5MSBI6NP.js}

@@ -7,7 +7,7 @@ import {
 import {
   COMPATIBLE_AGENT_TYPES,
   isValidApiKey
-} from "./chunk-WPJS3OZH.js";
+} from "./chunk-7IEB2GV4.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", ...COMPATIBLE_AGENT_TYPES, "custom"];

package/dist/{chunk-WPJS3OZH.js → chunk-7IEB2GV4.js}

@@ -154,6 +154,7 @@ var AGENTS = {
     ...defaults,
     label: "Qwen Code",
     hookSource: "qwen",
+    bridged: true,
     policyAgent: "qwen_code",
     repoAware: true,
     disconnectable: true,
@@ -166,6 +167,7 @@ var AGENTS = {
     ...defaults,
     label: "CodeBuddy",
     hookSource: "codebuddy",
+    bridged: true,
     policyAgent: "codebuddy",
     repoAware: true,
     disconnectable: true,
@@ -178,6 +180,7 @@ var AGENTS = {
     ...defaults,
     label: "Qoder",
     hookSource: "qoder",
+    bridged: true,
     policyAgent: "qoder",
     repoAware: true,
     disconnectable: true,
@@ -191,6 +194,7 @@ var AGENTS = {
     ...defaults,
     label: "Droid",
     hookSource: "droid",
+    bridged: true,
     policyAgent: "droid",
     repoAware: true,
     disconnectable: true,
@@ -204,6 +208,7 @@ var AGENTS = {
     ...defaults,
     label: "Devin CLI",
     hookSource: "devin",
+    bridged: true,
     policyAgent: "devin",
     repoAware: true,
     disconnectable: true,
@@ -211,7 +216,7 @@ var AGENTS = {
     connectVia: "Native hooks",
     setupCommand: "npx @pushary/agent-hooks setup",
     enforcementDetail: "exec, write and edit through native PreToolUse hooks, answered in Devin's own approve/block schema.",
-    capabilityNote: "Devin CLI answers PreToolUse with `{decision}` rather than a permission decision. That schema has no third value, so where another agent would be asked, Pushary stays silent and Devin's own prompt decides; and it cannot carry an updated tool input, so Devin's own question and plan dialogs are left alone rather than answered from the phone without the answer reaching it. It also fires no Notification event."
+    capabilityNote: "Devin CLI answers PreToolUse with `{decision}` rather than a permission decision. Pushary blocks an unanswered approval because this adapter cannot request a native prompt reliably. Question and plan dialogs remain with Devin; this adapter does not render their answers. It also fires no Notification event."
   },
   windsurf: {
     ...defaults,
@@ -287,7 +292,8 @@ var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path)
 var renderPreToolUseVerdict = (profile, verdict) => {
   if (profile.wire === "permission_decision") return verdict;
   const { permissionDecision, permissionDecisionReason, updatedInput } = verdict.hookSpecificOutput;
-  if (permissionDecision === "ask" || updatedInput) return void 0;
+  if (permissionDecision === "ask") return { decision: "block", reason: permissionDecisionReason ?? "Pushary requires an explicit approval before this tool can run." };
+  if (updatedInput) return void 0;
   const stop = verdict.continue === false ? { continue: false, ...verdict.stopReason ? { stopReason: verdict.stopReason } : {} } : {};
   return {
     decision: permissionDecision === "allow" ? "approve" : "block",
@@ -328,7 +334,9 @@ var QWEN_CODE = {
     replace: "Edit",
     read_file: "Read",
     WriteFile: "Write",
-    ReadFile: "Read"
+    ReadFile: "Read",
+    ask_user_question: "AskUserQuestion",
+    exit_plan_mode: "ExitPlanMode"
   },
   extraMatchers: ["mcp__.*"],
   pathInputKeys: ["absolute_path"],
@@ -410,12 +418,14 @@ var DEVIN = {
     exec: "Bash",
     write: "Write",
     edit: "Edit",
+    apply_patch: "Edit",
+    notebook_edit: "NotebookEdit",
     read: "Read",
     webfetch: "WebFetch",
     web_search: "WebSearch",
     run_subagent: "Task"
   },
-  extraMatchers: ["mcp__.*"],
+  extraMatchers: ["mcp__.*", "mcp_call_tool", "write_to_process"],
   pathInputKeys: [],
   shellCommandKeys: [],
   shellContextKeys: [],
@@ -436,6 +446,18 @@ var compatibleTargetFiles = (profile) => {
   return [...seen.values()];
 };
 
+// ../contracts/src/degraded.ts
+var DEGRADED_PREFIX = "[degraded]";
+var degradedPayload = (subsystem, report) => ({
+  subsystem,
+  reason: report.reason,
+  fallback: report.fallback,
+  ...report.siteId ? { siteId: report.siteId } : {},
+  ...report.sessionId ? { sessionId: report.sessionId } : {},
+  ...report.event ? { event: report.event } : {}
+});
+var degradedLine = (subsystem, report) => `${DEGRADED_PREFIX} ${JSON.stringify(degradedPayload(subsystem, report))}`;
+
 // ../contracts/src/index.ts
 var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
@@ -585,6 +607,8 @@ var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + ho
 var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
 var OPENCODE_APPROVAL_EVENT = "permission.ask";
 var CURSOR_GATE_EVENTS = ["beforeShellExecution", "beforeMCPExecution", "preToolUse"];
+var SUPPORT_EMAIL = "business@pushary.com";
+var SUPPORT_DISCORD = "https://discord.gg/9v3VvUByrr";
 var HOOK_LOCATOR_BINARY = "pushary-bridge";
 var HOOK_BATCH_MAX_BYTES = 4 * 1024 * 1024;
 var REPO_KEY_MAX_LENGTH = 200;
@@ -718,6 +742,7 @@ var shellCommandSegments = (command) => {
         index += 1;
         continue;
       }
+      if (quote === SHELL_DOUBLE_QUOTE && (char === "`" || char === SHELL_SUBSTITUTION_SIGIL && next === SHELL_GROUP_OPEN)) return null;
       if (char === quote) quote = null;
       current += char;
       continue;
@@ -1066,7 +1091,7 @@ var verdictForPolicy = (policy) => {
   if (isAutoApprove(policy)) return "allow";
   return "requires_human";
 };
-var policyIntent = (policy) => policy.timeoutAction === "deny" ? PATTERN_INTENT.restrict : PATTERN_INTENT.grant;
+var policyIntent = (policy) => isAutoApprove(policy) ? PATTERN_INTENT.grant : PATTERN_INTENT.restrict;
 var selectGoverningRule = (policies, toolName, args, repoKey, sessionId) => {
   let best;
   let bestWeight = 0;
@@ -1326,6 +1351,10 @@ var ANSWER_SOURCES = [
 ];
 var isAnswerSource = (value) => typeof value === "string" && ANSWER_SOURCES.includes(value);
 var SETTLED_OUTCOMES = ["approve", "deny"];
+var SETTLED_OUTCOME = {
+  approve: "approve",
+  deny: "deny"
+};
 var isSettledOutcome = (value) => typeof value === "string" && SETTLED_OUTCOMES.includes(value);
 var classifyDecisionRisk = (toolName, toolTarget) => {
   const parts = [toolName, toolTarget ?? ""];
@@ -1603,6 +1632,10 @@ var resolvePolicyAcross = (config, toolName, modeOverride, toolInputs, cwd, repo
 };
 var isModeStateDegraded = (state) => state?.degraded === true;
 var KILL_REASON = "Stopped by user, this agent was halted from Pushary";
+var GATE_ALLOW_SOURCE = {
+  allowlist: "allowlist",
+  policy: "policy"
+};
 var PUSHARY_TOOL_PREFIX = "mcp__pushary__";
 var isPusharyOwnTool = (toolName) => toolName.startsWith(PUSHARY_TOOL_PREFIX);
 var strictestScopeVerdict = (scope, paths) => {
@@ -1631,7 +1664,15 @@ var shouldDeferToNativeMode = (permissionMode, toolName, options = {}) => {
   if (permissionMode === "bypassPermissions") return options.deferBypass === true;
   return false;
 };
-var ASKED_IN_EVERY_MODE_TOOLS = ["AskUserQuestion", "ExitPlanMode"];
+var AGENT_QUESTION_TOOL = "AskUserQuestion";
+var AGENT_QUESTION_STRATEGY = { native: "native_dialog", updatedInput: "updated_input", none: "not_a_question" };
+var UPDATED_INPUT_QUESTION_SOURCES = /* @__PURE__ */ new Set(["claude", "qoder", "codebuddy", "droid"]);
+function agentQuestionStrategy(source, event, toolName) {
+  if (toolName !== AGENT_QUESTION_TOOL) return AGENT_QUESTION_STRATEGY.none;
+  if (source !== null && event === "PreToolUse" && UPDATED_INPUT_QUESTION_SOURCES.has(source)) return AGENT_QUESTION_STRATEGY.updatedInput;
+  return AGENT_QUESTION_STRATEGY.native;
+}
+var ASKED_IN_EVERY_MODE_TOOLS = [AGENT_QUESTION_TOOL, "ExitPlanMode"];
 var ASKED_IN_EVERY_MODE = new Set(ASKED_IN_EVERY_MODE_TOOLS);
 var isAskedInEveryMode = (toolName) => ASKED_IN_EVERY_MODE.has(toolName);
 var NATIVE_BLOCK_EVENTS = /* @__PURE__ */ new Set(["PermissionDenied"]);
@@ -1710,6 +1751,8 @@ var resolveGate = (input) => {
     scopePath: scopeReason && "path" in scopeVerdict ? widenablePath(scopeVerdict.path) : void 0
   };
 };
+var editAsksAtTheAgentsPrompt = (input, verdict) => verdict.kind === "gate" && !verdict.scopeReason && (input.modeState.mode ?? input.config.modeOverride ?? null) === null && verdict.policy.origin === "builtin" && verdict.policy.mode === "push_first" && ACCEPT_EDITS_DEFER_TOOLS.has(input.toolName);
+var claudePromptsBeforeAnEdit = (permissionMode) => permissionMode === "default";
 var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
 var modeStateFromResponse = (data) => {
   const mode = data.override?.mode;
@@ -1729,6 +1772,42 @@ var modeStateFromResponse = (data) => {
 var GATE_WIRE = 1;
 var GATE_MAX_TOOL_INPUTS = 32;
 var GATE_BLOCK_REASON_MAX_LENGTH = 200;
+var wireVerdictFor = (verdict, deadlineSeconds) => {
+  switch (verdict.kind) {
+    case "kill":
+      return { kind: "kill", reason: verdict.reason };
+    case "allow":
+      return { kind: "allow", source: verdict.source, policy: verdict.policy };
+    case "deny":
+      return { kind: "deny", reason: verdict.reason, policy: verdict.policy };
+    case "defer":
+      return { kind: "no_opinion", reason: verdict.reason === "own_tool" ? "not_gated" : "degraded" };
+    case "gate":
+      return {
+        kind: "ask",
+        policy: verdict.policy,
+        deadlineSeconds,
+        ...verdict.scopeReason ? { scopeReason: verdict.scopeReason } : {},
+        ...verdict.scopePath ? { scopePath: verdict.scopePath } : {}
+      };
+  }
+};
+var machineDecisionFor = (verdict) => {
+  switch (verdict.kind) {
+    case "kill":
+      return { origin: DECISION_ORIGIN.killSwitch, outcome: SETTLED_OUTCOME.deny };
+    case "allow":
+      return {
+        origin: verdict.source === GATE_ALLOW_SOURCE.allowlist ? DECISION_ORIGIN.safeReadonly : DECISION_ORIGIN.autopilot,
+        outcome: SETTLED_OUTCOME.approve
+      };
+    case "deny":
+      return { origin: DECISION_ORIGIN.autopilot, outcome: SETTLED_OUTCOME.deny };
+    case "ask":
+    case "no_opinion":
+      return null;
+  }
+};
 var claudePermissionDeniedOutput = (decision) => ({
   hookSpecificOutput: {
     hookEventName: "PermissionDenied",
@@ -1789,7 +1868,6 @@ var claudePermissionRequestOutput = (decision, reason, updatedInput) => ({
     decision: decision === "allow" ? { behavior: "allow", ...updatedInput ? { updatedInput } : {} } : { behavior: "deny", ...reason ? { message: reason } : {} }
   }
 });
-var COMPATIBLE_GATE_EVENT = "PreToolUse";
 var gateOutputFor = (source, event, decision, reason) => {
   let output;
   if (source === "claude" || source === "vscode") {
@@ -1829,8 +1907,12 @@ var gateOutputFor = (source, event, decision, reason) => {
     };
   } else {
     const profile = hookCompatibleProfileBySource(source);
-    if (profile && event === COMPATIBLE_GATE_EVENT) {
-      output = renderPreToolUseVerdict(profile, claudePreToolUseOutput(decision, reason));
+    if (profile?.events.includes(event)) {
+      if (event === "PreToolUse") {
+        output = renderPreToolUseVerdict(profile, claudePreToolUseOutput(decision, reason));
+      } else if (event === "PermissionRequest" && decision !== "ask") {
+        output = claudePermissionRequestOutput(decision, reason);
+      }
     }
   }
   return output;
@@ -1999,6 +2081,7 @@ export {
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
   compatibleTargetFiles,
+  degradedLine,
   hookWritePath,
   isHookActivationReport,
   hookActivationResult,
@@ -2018,6 +2101,8 @@ export {
   effectiveWaitSeconds,
   OPENCODE_APPROVAL_EVENT,
   CURSOR_GATE_EVENTS,
+  SUPPORT_EMAIL,
+  SUPPORT_DISCORD,
   HOOK_LOCATOR_BINARY,
   normalizeRepoRemote,
   localRepoKey,
@@ -2036,6 +2121,8 @@ export {
   KILL_REASON,
   isPusharyOwnTool,
   shouldDeferToNativeMode,
+  AGENT_QUESTION_STRATEGY,
+  agentQuestionStrategy,
   CODEX_RESCUE_TOOL_NAME,
   isBlockedActionRequest,
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
@@ -2044,10 +2131,14 @@ export {
   isPermissionRequestOwnedByPreToolUse,
   CLAUDE_PRETOOLUSE_MATCHER,
   resolveGate,
+  editAsksAtTheAgentsPrompt,
+  claudePromptsBeforeAnEdit,
   modeStateFromResponse,
   GATE_WIRE,
   GATE_MAX_TOOL_INPUTS,
   GATE_BLOCK_REASON_MAX_LENGTH,
+  wireVerdictFor,
+  machineDecisionFor,
   claudePermissionDeniedOutput,
   codexStopRescueOutput,
   stoppedOutput,