@pushary/agent-hooks 1.3.1 → 1.4.1

package/dist/bin/pushary-wait.js

@@ -4,15 +4,15 @@ import {
 } from "../chunk-CVWG2N3Y.js";
 import {
   exitOnFailedResponse
-} from "../chunk-NDSOOJDX.js";
-import "../chunk-TW7KA27C.js";
+} from "../chunk-D7ERHWYB.js";
+import "../chunk-QBS6LGEK.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   exitOnHelpFlag
-} from "../chunk-GOQHN2UH.js";
-import "../chunk-LZQVAEWP.js";
+} from "../chunk-TWWLVOPB.js";
+import "../chunk-FAH3D74E.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -28,7 +28,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-5UWDYOZX.js";
+import "../chunk-FVKFDTN6.js";
 
 // bin/pushary-wait.ts
 exitOnHelpFlag("wait");

package/dist/bin/pushary.js

@@ -3,7 +3,7 @@ import {
   COMMANDS,
   isCommandName,
   renderHelp
-} from "../chunk-LZQVAEWP.js";
+} from "../chunk-FAH3D74E.js";
 import {
   getPackageVersion
 } from "../chunk-DINDL2CF.js";

package/dist/{chunk-RERJ2ZDV.js → chunk-2GMI6JH6.js}

@@ -1,18 +1,18 @@
 import {
   detectClaudeVersion
-} from "./chunk-AFKOWCMQ.js";
+} from "./chunk-LUT2EZLG.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-SGZE2JBF.js";
+} from "./chunk-WIOXWUUH.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
   codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-QOCWB4Q6.js";
+} from "./chunk-TF4IOINR.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -24,7 +24,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-KHGIM2BN.js";
+} from "./chunk-ED5TA2FJ.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -44,7 +44,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-SAF6NNXY.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-AFOTOA24.js → chunk-37VLIYLI.js}

@@ -1,6 +1,6 @@
 import {
   resolvePathBinary
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-SAF6NNXY.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";
@@ -233,8 +233,35 @@ var runHermesPythonScript = (python, script, ...args) => {
   }
 };
 
-// src/cli/dry-run.ts
+// src/skills-cli.ts
 import { execSync } from "child_process";
+var PUSHARY_SKILL_SOURCE = "Pushary/pushary-skill";
+var PUSHARY_SKILL_NAME = "pushary";
+var installSkillViaSkillsCli = (agent) => {
+  try {
+    execSync(`npx -y skills@latest add ${PUSHARY_SKILL_SOURCE}@${PUSHARY_SKILL_NAME} -y -g --agent ${agent}`, {
+      stdio: "pipe",
+      timeout: 9e4
+    });
+    return true;
+  } catch {
+    return false;
+  }
+};
+var installAgentSkill = async (request, effects) => {
+  if (request.skillsCliInUse) {
+    const startedAt = effects.now();
+    if (effects.runSkillsCli(request.agent)) {
+      const modifiedAt = effects.skillModifiedAt(request.agentSkillDir);
+      if (modifiedAt !== null && modifiedAt >= startedAt) return "skills-cli";
+    }
+  }
+  await effects.writePackagedSkill(request.agentSkillDir);
+  return "packaged-copy";
+};
+
+// src/cli/dry-run.ts
+import { execFileSync as execFileSync2 } from "child_process";
 import { rmSync as rmSync2, writeFileSync as writeFileSync2 } from "fs";
 var createGuards = (isDryRun, note) => ({
   write: (path, contents) => {
@@ -245,9 +272,9 @@ var createGuards = (isDryRun, note) => ({
     if (isDryRun()) return note("remove ", path);
     rmSync2(path, { recursive: true, force: options.force ?? false });
   },
-  exec: (command, options, describe) => {
+  execFile: (file, args, options, describe) => {
     if (isDryRun()) return note("run    ", describe);
-    execSync(command, options);
+    execFileSync2(file, args, options);
   }
 });
 var describeService = (effects) => {
@@ -271,6 +298,10 @@ export {
   HERMES_CONFIG_SCRIPT,
   resolveHermesPython,
   runHermesPythonScript,
+  PUSHARY_SKILL_SOURCE,
+  PUSHARY_SKILL_NAME,
+  installSkillViaSkillsCli,
+  installAgentSkill,
   createGuards,
   describeSetupSideEffects
 };

package/dist/{chunk-6HH4IH4K.js → chunk-3BPB2HYZ.js}

@@ -4,17 +4,17 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "./chunk-465UENKO.js";
+} from "./chunk-3T52B2OF.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-SAF6NNXY.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "./chunk-5SALHATY.js";
+} from "./chunk-TI3ZWXZG.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-465UENKO.js → chunk-3T52B2OF.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-SAF6NNXY.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-PEV6ULSM.js → chunk-3UA6FPRC.js}

@@ -1,12 +1,12 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-XVE52YFZ.js";
+} from "./chunk-VYUDGQM7.js";
 import {
   codexHomeFrom
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-SAF6NNXY.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-FVKFDTN6.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-QDYJQLXT.js → chunk-43JKGLZZ.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-FGNABUPN.js";
+} from "./chunk-R3AMKNIW.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-FVKFDTN6.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-CKLWJ6EL.js → chunk-4FN6VV56.js}

@@ -1,9 +1,29 @@
 import {
   registerTranscript
-} from "./chunk-P232YODQ.js";
+} from "./chunk-TNS3YLFE.js";
 import {
   degradedLine
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-FVKFDTN6.js";
+
+// src/tool-hook-input.ts
+var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];
+function isInputRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isToolHookInput(value) {
+  if (!isInputRecord(value)) return false;
+  if (typeof value.tool_name !== "string" || value.tool_name.length === 0) return false;
+  if (!isInputRecord(value.tool_input)) return false;
+  for (const field of OPTIONAL_TEXT_FIELDS) {
+    if (value[field] !== void 0 && typeof value[field] !== "string") return false;
+  }
+  return true;
+}
+function parseToolHookInput(value) {
+  if (!isInputRecord(value)) return null;
+  const input = { ...value, tool_input: value.tool_input === void 0 ? {} : value.tool_input };
+  return isToolHookInput(input) ? input : null;
+}
 
 // src/admission.ts
 import { readFileSync } from "fs";
@@ -41,7 +61,7 @@ var matches = (rule, source, event) => {
   return (ruleSource === "*" || ruleSource === source) && (ruleEvent === "*" || ruleEvent === event);
 };
 var isAdmitted = (rules, source, event) => !rules.disabled.some((rule) => matches(rule, source, event));
-var readHookInput = async (source, fallbackEvent = "", stdin = process.stdin) => {
+var readHookInput = async (source, fallbackEvent = "", stdin = process.stdin, parseInput) => {
   if (source === null) {
     process.stderr.write(`${degradedLine("hook", {
       reason: "unknown_agent",
@@ -61,17 +81,23 @@ var readHookInput = async (source, fallbackEvent = "", stdin = process.stdin) =>
     return null;
   }
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
-  const event = eventNameOf(parsed) ?? fallbackEvent;
+  const input = parseInput ? parseInput(parsed) : parsed;
+  if (input === null) return null;
+  const event = eventNameOf(input) ?? fallbackEvent;
   if (!isAdmitted(readAdmissionRules(), source, event)) return null;
-  if (stdin === process.stdin) registerTranscript(source, parsed);
-  return parsed;
+  if (stdin === process.stdin) registerTranscript(source, input);
+  return input;
 };
 var eventNameOf = (input) => {
   if (!("hook_event_name" in input)) return void 0;
   const name = input.hook_event_name;
   return typeof name === "string" && name.length > 0 ? name : void 0;
 };
+function readToolHookInput(source, event, stdin = process.stdin) {
+  return readHookInput(source, event, stdin, parseToolHookInput);
+}
 
 export {
-  readHookInput
+  readHookInput,
+  readToolHookInput
 };

package/dist/{chunk-HCTSTMDD.js → chunk-ALFT7H5B.js}

@@ -1,9 +1,9 @@
 import {
   canonicalGateInputs
-} from "./chunk-WOBHHXW5.js";
+} from "./chunk-LNGYW6G4.js";
 import {
   canonicalJson
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-SAF6NNXY.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";
@@ -11,7 +11,7 @@ import {
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
   blockedActionIdentity,
   shouldDeferToNativeMode
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-FVKFDTN6.js";
 
 // src/native-defer.ts
 var nativeDeferOptions = () => {

package/dist/{chunk-35RPUNYU.js → chunk-BZBUPZC6.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-5SALHATY.js";
+} from "./chunk-TI3ZWXZG.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-CDSL3LLO.js → chunk-CRNAXFQ6.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-FVKFDTN6.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-NDSOOJDX.js → chunk-D7ERHWYB.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-TW7KA27C.js";
+} from "./chunk-QBS6LGEK.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-KHGIM2BN.js → chunk-ED5TA2FJ.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-XP2KRTZD.js";
+} from "./chunk-WEO5JCB4.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-SAF6NNXY.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-FVKFDTN6.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-LZQVAEWP.js → chunk-FAH3D74E.js}

@@ -59,7 +59,7 @@ var COMMAND_LIST = [
   },
   { name: "doctor", module: "pushary-doctor", summary: "Verify your Pushary installation is working" },
   { name: "disconnect", module: "pushary-disconnect", summary: "Turn off one agent (claude|codex|gemini|cursor)" },
-  { name: "clean", module: "pushary-clean", summary: "Remove all Pushary configuration (--yes for non-interactive)" },
+  { name: "clean", module: "pushary-clean", summary: "Remove Pushary from this machine (--everything: the Mac app's setup too, --dry-run: preview)" },
   { name: "mode", module: "pushary-mode", summary: "Choose where approval requests appear" },
   { name: "wait", module: "pushary-wait", summary: 'Show or set the "wait for your phone" ladder (pushary wait 45)' },
   { name: "stats", module: "pushary-stats", summary: "Show the approval moments your agents hit while not connected" },
@@ -98,6 +98,7 @@ var COMMAND_OPTIONS = {
   ],
   clean: [
     ["--dry-run", "List everything it would remove and change nothing"],
+    ["--everything", "Also remove what the Mac app set up: quits it, then its keychain items, local state and editor extension"],
     ["--yes", "Remove everything without asking"]
   ],
   transcripts: [

package/dist/{chunk-5UWDYOZX.js → chunk-FVKFDTN6.js}

@@ -216,7 +216,7 @@ var AGENTS = {
     connectVia: "Native hooks",
     setupCommand: "npx @pushary/agent-hooks setup",
     enforcementDetail: "exec, write and edit through native PreToolUse hooks, answered in Devin's own approve/block schema.",
-    capabilityNote: "Devin CLI answers PreToolUse with `{decision}` rather than a permission decision. That schema has no third value, so where another agent would be asked, Pushary stays silent and Devin's own prompt decides; and it cannot carry an updated tool input, so Devin's own question and plan dialogs are left alone rather than answered from the phone without the answer reaching it. It also fires no Notification event."
+    capabilityNote: "Devin CLI answers PreToolUse with `{decision}` rather than a permission decision. Pushary blocks an unanswered approval because this adapter cannot request a native prompt reliably. Question and plan dialogs remain with Devin; this adapter does not render their answers. It also fires no Notification event."
   },
   windsurf: {
     ...defaults,
@@ -292,7 +292,8 @@ var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path)
 var renderPreToolUseVerdict = (profile, verdict) => {
   if (profile.wire === "permission_decision") return verdict;
   const { permissionDecision, permissionDecisionReason, updatedInput } = verdict.hookSpecificOutput;
-  if (permissionDecision === "ask" || updatedInput) return void 0;
+  if (permissionDecision === "ask") return { decision: "block", reason: permissionDecisionReason ?? "Pushary requires an explicit approval before this tool can run." };
+  if (updatedInput) return void 0;
   const stop = verdict.continue === false ? { continue: false, ...verdict.stopReason ? { stopReason: verdict.stopReason } : {} } : {};
   return {
     decision: permissionDecision === "allow" ? "approve" : "block",
@@ -333,7 +334,9 @@ var QWEN_CODE = {
     replace: "Edit",
     read_file: "Read",
     WriteFile: "Write",
-    ReadFile: "Read"
+    ReadFile: "Read",
+    ask_user_question: "AskUserQuestion",
+    exit_plan_mode: "ExitPlanMode"
   },
   extraMatchers: ["mcp__.*"],
   pathInputKeys: ["absolute_path"],
@@ -415,12 +418,14 @@ var DEVIN = {
     exec: "Bash",
     write: "Write",
     edit: "Edit",
+    apply_patch: "Edit",
+    notebook_edit: "NotebookEdit",
     read: "Read",
     webfetch: "WebFetch",
     web_search: "WebSearch",
     run_subagent: "Task"
   },
-  extraMatchers: ["mcp__.*"],
+  extraMatchers: ["mcp__.*", "mcp_call_tool", "write_to_process"],
   pathInputKeys: [],
   shellCommandKeys: [],
   shellContextKeys: [],
@@ -602,6 +607,8 @@ var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + ho
 var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
 var OPENCODE_APPROVAL_EVENT = "permission.ask";
 var CURSOR_GATE_EVENTS = ["beforeShellExecution", "beforeMCPExecution", "preToolUse"];
+var SUPPORT_EMAIL = "business@pushary.com";
+var SUPPORT_DISCORD = "https://discord.gg/9v3VvUByrr";
 var HOOK_LOCATOR_BINARY = "pushary-bridge";
 var HOOK_BATCH_MAX_BYTES = 4 * 1024 * 1024;
 var REPO_KEY_MAX_LENGTH = 200;
@@ -1221,6 +1228,7 @@ var computeDeltaSignal = (input) => {
   return { deltaSignal: "match", deltaScore: 0, remoteApprove: !destructive };
 };
 var SECRET_REDACTION_RULES = [
+  { pattern: /\bpk_[A-Za-z0-9_]+\.[A-Za-z0-9_]+/g, replacement: "[redacted]" },
   { pattern: /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, replacement: "[redacted key]" },
   { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, replacement: "[redacted]" },
   { pattern: /\b[spr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g, replacement: "[redacted]" },
@@ -1344,6 +1352,10 @@ var ANSWER_SOURCES = [
 ];
 var isAnswerSource = (value) => typeof value === "string" && ANSWER_SOURCES.includes(value);
 var SETTLED_OUTCOMES = ["approve", "deny"];
+var SETTLED_OUTCOME = {
+  approve: "approve",
+  deny: "deny"
+};
 var isSettledOutcome = (value) => typeof value === "string" && SETTLED_OUTCOMES.includes(value);
 var classifyDecisionRisk = (toolName, toolTarget) => {
   const parts = [toolName, toolTarget ?? ""];
@@ -1621,6 +1633,10 @@ var resolvePolicyAcross = (config, toolName, modeOverride, toolInputs, cwd, repo
 };
 var isModeStateDegraded = (state) => state?.degraded === true;
 var KILL_REASON = "Stopped by user, this agent was halted from Pushary";
+var GATE_ALLOW_SOURCE = {
+  allowlist: "allowlist",
+  policy: "policy"
+};
 var PUSHARY_TOOL_PREFIX = "mcp__pushary__";
 var isPusharyOwnTool = (toolName) => toolName.startsWith(PUSHARY_TOOL_PREFIX);
 var strictestScopeVerdict = (scope, paths) => {
@@ -1649,7 +1665,15 @@ var shouldDeferToNativeMode = (permissionMode, toolName, options = {}) => {
   if (permissionMode === "bypassPermissions") return options.deferBypass === true;
   return false;
 };
-var ASKED_IN_EVERY_MODE_TOOLS = ["AskUserQuestion", "ExitPlanMode"];
+var AGENT_QUESTION_TOOL = "AskUserQuestion";
+var AGENT_QUESTION_STRATEGY = { native: "native_dialog", updatedInput: "updated_input", none: "not_a_question" };
+var UPDATED_INPUT_QUESTION_SOURCES = /* @__PURE__ */ new Set(["claude", "qoder", "codebuddy", "droid"]);
+function agentQuestionStrategy(source, event, toolName) {
+  if (toolName !== AGENT_QUESTION_TOOL) return AGENT_QUESTION_STRATEGY.none;
+  if (source !== null && event === "PreToolUse" && UPDATED_INPUT_QUESTION_SOURCES.has(source)) return AGENT_QUESTION_STRATEGY.updatedInput;
+  return AGENT_QUESTION_STRATEGY.native;
+}
+var ASKED_IN_EVERY_MODE_TOOLS = [AGENT_QUESTION_TOOL, "ExitPlanMode"];
 var ASKED_IN_EVERY_MODE = new Set(ASKED_IN_EVERY_MODE_TOOLS);
 var isAskedInEveryMode = (toolName) => ASKED_IN_EVERY_MODE.has(toolName);
 var NATIVE_BLOCK_EVENTS = /* @__PURE__ */ new Set(["PermissionDenied"]);
@@ -1728,6 +1752,8 @@ var resolveGate = (input) => {
     scopePath: scopeReason && "path" in scopeVerdict ? widenablePath(scopeVerdict.path) : void 0
   };
 };
+var editAsksAtTheAgentsPrompt = (input, verdict) => verdict.kind === "gate" && !verdict.scopeReason && (input.modeState.mode ?? input.config.modeOverride ?? null) === null && verdict.policy.origin === "builtin" && verdict.policy.mode === "push_first" && ACCEPT_EDITS_DEFER_TOOLS.has(input.toolName);
+var claudePromptsBeforeAnEdit = (permissionMode) => permissionMode === "default";
 var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
 var modeStateFromResponse = (data) => {
   const mode = data.override?.mode;
@@ -1747,6 +1773,42 @@ var modeStateFromResponse = (data) => {
 var GATE_WIRE = 1;
 var GATE_MAX_TOOL_INPUTS = 32;
 var GATE_BLOCK_REASON_MAX_LENGTH = 200;
+var wireVerdictFor = (verdict, deadlineSeconds) => {
+  switch (verdict.kind) {
+    case "kill":
+      return { kind: "kill", reason: verdict.reason };
+    case "allow":
+      return { kind: "allow", source: verdict.source, policy: verdict.policy };
+    case "deny":
+      return { kind: "deny", reason: verdict.reason, policy: verdict.policy };
+    case "defer":
+      return { kind: "no_opinion", reason: verdict.reason === "own_tool" ? "not_gated" : "degraded" };
+    case "gate":
+      return {
+        kind: "ask",
+        policy: verdict.policy,
+        deadlineSeconds,
+        ...verdict.scopeReason ? { scopeReason: verdict.scopeReason } : {},
+        ...verdict.scopePath ? { scopePath: verdict.scopePath } : {}
+      };
+  }
+};
+var machineDecisionFor = (verdict) => {
+  switch (verdict.kind) {
+    case "kill":
+      return { origin: DECISION_ORIGIN.killSwitch, outcome: SETTLED_OUTCOME.deny };
+    case "allow":
+      return {
+        origin: verdict.source === GATE_ALLOW_SOURCE.allowlist ? DECISION_ORIGIN.safeReadonly : DECISION_ORIGIN.autopilot,
+        outcome: SETTLED_OUTCOME.approve
+      };
+    case "deny":
+      return { origin: DECISION_ORIGIN.autopilot, outcome: SETTLED_OUTCOME.deny };
+    case "ask":
+    case "no_opinion":
+      return null;
+  }
+};
 var claudePermissionDeniedOutput = (decision) => ({
   hookSpecificOutput: {
     hookEventName: "PermissionDenied",
@@ -1807,7 +1869,6 @@ var claudePermissionRequestOutput = (decision, reason, updatedInput) => ({
     decision: decision === "allow" ? { behavior: "allow", ...updatedInput ? { updatedInput } : {} } : { behavior: "deny", ...reason ? { message: reason } : {} }
   }
 });
-var COMPATIBLE_GATE_EVENT = "PreToolUse";
 var gateOutputFor = (source, event, decision, reason) => {
   let output;
   if (source === "claude" || source === "vscode") {
@@ -1847,8 +1908,12 @@ var gateOutputFor = (source, event, decision, reason) => {
     };
   } else {
     const profile = hookCompatibleProfileBySource(source);
-    if (profile && event === COMPATIBLE_GATE_EVENT) {
-      output = renderPreToolUseVerdict(profile, claudePreToolUseOutput(decision, reason));
+    if (profile?.events.includes(event)) {
+      if (event === "PreToolUse") {
+        output = renderPreToolUseVerdict(profile, claudePreToolUseOutput(decision, reason));
+      } else if (event === "PermissionRequest" && decision !== "ask") {
+        output = claudePermissionRequestOutput(decision, reason);
+      }
     }
   }
   return output;
@@ -2037,6 +2102,8 @@ export {
   effectiveWaitSeconds,
   OPENCODE_APPROVAL_EVENT,
   CURSOR_GATE_EVENTS,
+  SUPPORT_EMAIL,
+  SUPPORT_DISCORD,
   HOOK_LOCATOR_BINARY,
   normalizeRepoRemote,
   localRepoKey,
@@ -2055,6 +2122,8 @@ export {
   KILL_REASON,
   isPusharyOwnTool,
   shouldDeferToNativeMode,
+  AGENT_QUESTION_STRATEGY,
+  agentQuestionStrategy,
   CODEX_RESCUE_TOOL_NAME,
   isBlockedActionRequest,
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
@@ -2063,10 +2132,14 @@ export {
   isPermissionRequestOwnedByPreToolUse,
   CLAUDE_PRETOOLUSE_MATCHER,
   resolveGate,
+  editAsksAtTheAgentsPrompt,
+  claudePromptsBeforeAnEdit,
   modeStateFromResponse,
   GATE_WIRE,
   GATE_MAX_TOOL_INPUTS,
   GATE_BLOCK_REASON_MAX_LENGTH,
+  wireVerdictFor,
+  machineDecisionFor,
   claudePermissionDeniedOutput,
   codexStopRescueOutput,
   stoppedOutput,