@pushary/agent-hooks 1.4.0 → 1.4.2

package/dist/{chunk-JCWCTBYH.js → chunk-SUWRZYQG.js}

@@ -1,17 +1,67 @@
 import {
-  canonicalGateInputs
-} from "./chunk-IF46POXX.js";
+  AUTO_DECISION_WINDOW_MS,
+  DEFAULT_SESSION,
+  canonicalGateInputs,
+  claimThrottle,
+  deriveToolTarget,
+  permissionDeniedAction,
+  releaseThrottle,
+  reportEvent
+} from "./chunk-G653QPTR.js";
 import {
   canonicalJson
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
   blockedActionIdentity,
-  shouldDeferToNativeMode
-} from "./chunk-7IEB2GV4.js";
+  machineDecisionFor,
+  shouldDeferToNativeMode,
+  wireVerdictFor
+} from "./chunk-SOUZBGYJ.js";
+
+// src/machine-decision-audit.ts
+import { basename } from "path";
+var reportMachineDenial = async (input, verdict, agent) => {
+  const decision = machineDecisionFor(wireVerdictFor(verdict, 0));
+  if (!decision) return;
+  const sessionKey = input.session_id || DEFAULT_SESSION;
+  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+  const throttleKey = `machinedecision:${agent.type}:${sessionKey}:${input.tool_name}:${decision.origin}:${toolTarget ?? ""}`;
+  const throttle = claimThrottle(throttleKey, AUTO_DECISION_WINDOW_MS);
+  if (throttle === "throttled") return;
+  if (throttle === "unavailable") {
+    console.error("[Pushary] Could not access the audit throttle; reporting this denial without deduplication.");
+  }
+  try {
+    const response = await reportEvent({
+      event: "permission_denied",
+      occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
+      toolUseId: input.tool_use_id,
+      agentType: agent.type,
+      agentName: `${agent.label} - ${basename(input.cwd ?? process.cwd())}`,
+      action: permissionDeniedAction(input.tool_name),
+      sessionId: input.session_id,
+      decisionSource: "policy_auto",
+      decisionOrigin: decision.origin,
+      decisionOutcome: decision.outcome,
+      toolName: input.tool_name,
+      toolTarget
+    }, { maxAttempts: 1, timeoutMs: 800, requireOk: true, skipDrain: true });
+    if (response?.ok !== true) throw new Error("Audit delivery was not acknowledged");
+  } catch {
+    console.error("[Pushary] Could not record the machine denial. The action remains blocked; its audit delivery will be retried on the next matching denial.");
+    if (throttle === "passed") {
+      try {
+        releaseThrottle(throttleKey);
+      } catch {
+        console.error("[Pushary] Could not reset the failed audit throttle.");
+      }
+    }
+  }
+};
 
 // src/native-defer.ts
 var nativeDeferOptions = () => {
@@ -190,6 +240,7 @@ var forgetBlockedActionHint = (fingerprint) => {
 };
 
 export {
+  reportMachineDenial,
   defersToNativeMode,
   userScope,
   codexCallKey,

package/dist/{chunk-U4FB623J.js → chunk-T5SZ4PML.js}

@@ -15,10 +15,11 @@ import {
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-P4JVVJ2D.js";
+} from "./chunk-UM5J3J4V.js";
 import {
+  PAIR_TTL_SECONDS,
   isAnswerSource
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {
@@ -747,8 +748,13 @@ var printConnectInstructions = async (apiKey) => {
   return phoneFailure("no_device");
 };
 var PAIR_POLL_INTERVAL_MS = 2e3;
-var PAIR_TIMEOUT_MS = 9e5;
+var PAIR_STOP_BEFORE_EXPIRY_MS = 1e4;
+var PAIR_TIMEOUT_MS = PAIR_TTL_SECONDS * 1e3 - PAIR_STOP_BEFORE_EXPIRY_MS;
 var PAIR_HINT_AFTER_MS = 45e3;
+var PAIR_BROWSER_FALLBACK_AFTER_MS = 6e4;
+var BROWSER_CONNECT_COMMAND = "npx @pushary/agent-hooks setup --connect browser";
+var PAIR_BROWSER_FALLBACK_LINE = `Still waiting? Sign in with a browser instead: Ctrl-C, then ${BROWSER_CONNECT_COMMAND}`;
+var SYSTEM_PAIR_CLOCK = { now: () => Date.now(), sleep };
 var startPairing = async (cliPublicKey) => {
   try {
     const res = await fetch(`${apiBase()}/api/mobile/pair/start`, {
@@ -837,7 +843,9 @@ var buildPairLinks = (pairId, publicKeyB64, baseUrl = apiBase(), code = null) =>
   };
 };
 var connectViaAppPairing = async (options = {}) => {
+  const clock = options.clock ?? SYSTEM_PAIR_CLOCK;
   const keypair = generateKeypair();
+  const requestedAt = clock.now();
   const started = await startPairing(keypair.publicKeyB64);
   if (!started) {
     console.log(`  ${yellow("!")} Couldn't start pairing. Check your connection and try again.`);
@@ -854,12 +862,13 @@ var connectViaAppPairing = async (options = {}) => {
   console.log(`  ${dim("Confirm the app shows fingerprint")} ${cyan(publicKeyFingerprint(keypair.publicKeyB64))}`);
   console.log(`  ${dim("Already have the app and it opened a browser? Use")} ${cyan(deepLink)}`);
   console.log();
-  const startedAt = Date.now();
-  const deadline = startedAt + PAIR_TIMEOUT_MS;
+  const startedAt = clock.now();
+  const deadline = requestedAt + PAIR_TIMEOUT_MS;
   let hintShown = false;
+  let browserFallbackShown = false;
   const stop = startSpinner(() => {
-    const left = Math.max(0, Math.ceil((deadline - Date.now()) / 6e4));
-    if (Date.now() - startedAt < PAIR_HINT_AFTER_MS) {
+    const left = Math.max(0, Math.ceil((deadline - clock.now()) / 6e4));
+    if (clock.now() - startedAt < PAIR_HINT_AFTER_MS) {
       return "Waiting for the app to authorize";
     }
     if (!hintShown) {
@@ -880,8 +889,12 @@ var connectViaAppPairing = async (options = {}) => {
   process.once("SIGINT", onInterrupt);
   let consecutiveFailures = 0;
   try {
-    while (Date.now() < deadline) {
+    while (clock.now() < deadline) {
       if (cancelled) return pairFailed("cancelled");
+      if (!browserFallbackShown && clock.now() - startedAt >= PAIR_BROWSER_FALLBACK_AFTER_MS) {
+        browserFallbackShown = true;
+        writeStatusLine(dim(PAIR_BROWSER_FALLBACK_LINE));
+      }
       const claim = await claimPairing(pairId);
       if (claim === null) {
         consecutiveFailures += 1;
@@ -890,7 +903,7 @@ var connectViaAppPairing = async (options = {}) => {
           await cancelPairing(pairId);
           return pairFailed("unreachable");
         }
-        await sleep(PAIR_POLL_INTERVAL_MS);
+        await clock.sleep(PAIR_POLL_INTERVAL_MS);
         continue;
       }
       consecutiveFailures = 0;
@@ -915,7 +928,7 @@ var connectViaAppPairing = async (options = {}) => {
         stop(yellow("!"), describePairFailure(claim.reason));
         return pairFailed("rejected");
       }
-      await sleep(PAIR_POLL_INTERVAL_MS);
+      await clock.sleep(PAIR_POLL_INTERVAL_MS);
     }
     stop(yellow("!"), "Timed out waiting for the app");
     await cancelPairing(pairId);
@@ -940,6 +953,7 @@ export {
   confirmAppConnection,
   connectExistingApp,
   printConnectInstructions,
+  BROWSER_CONNECT_COMMAND,
   pairingEscapeApplies,
   connectViaAppPairing
 };

package/dist/{chunk-UCGQEAKZ.js → chunk-TRLFZKVG.js}

@@ -2,7 +2,7 @@ import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/npm.ts
 import { execFileSync, execSync } from "child_process";

package/dist/{chunk-GLPWCQ6V.js → chunk-TYEO6T5J.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-ESLLVHDY.js → chunk-UJBZIKSY.js}

@@ -6,16 +6,16 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-UTYTPDWN.js";
+} from "./chunk-4ZDKSDVW.js";
 import {
   ensureDaemonRunning
-} from "./chunk-RGZY77CD.js";
+} from "./chunk-BZ4GDOJX.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-S3EUZZJB.js";
+} from "./chunk-GZ7E6VOB.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -23,14 +23,14 @@ import {
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-BYAXXBNO.js";
+} from "./chunk-4BROEAKH.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   readTranscriptPreference
-} from "./chunk-NYHNLMQO.js";
+} from "./chunk-FU2DFEAZ.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-P4JVVJ2D.js → chunk-UM5J3J4V.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-HGN6VZTY.js → chunk-VIOL2DJS.js}

@@ -3,28 +3,28 @@ import {
   addPusharyToolPermissions,
   isPusharyHook,
   removeClaudeMcpServers
-} from "./chunk-5IBVIMWT.js";
+} from "./chunk-II7PUMPB.js";
 import {
   CLAUDE_HOOK_EVENTS,
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-A7XIL2WD.js";
+} from "./chunk-LPYCPFBZ.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-IF46POXX.js";
+} from "./chunk-G653QPTR.js";
 import {
   guardBinary,
   holdBudgetOf,
   registerHookEntry
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   PHONE_ANSWERED_TOOLS,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/compatible-config.ts
 import { homedir } from "os";

package/dist/{chunk-GIXLZFEY.js → chunk-VOMOZ4D5.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-UIN3RD2U.js → chunk-VW66JEGU.js}

@@ -2,24 +2,24 @@ import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-GLPWCQ6V.js";
+} from "./chunk-TYEO6T5J.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-RGZY77CD.js";
+} from "./chunk-BZ4GDOJX.js";
 import {
   getMachineId
-} from "./chunk-RQM5SMMR.js";
+} from "./chunk-NHTAHAIS.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-NYHNLMQO.js";
+} from "./chunk-FU2DFEAZ.js";
 import {
   getBaseUrl
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-O6RN46OS.js → chunk-WPVHRUDT.js}

@@ -2,17 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-A7XIL2WD.js";
+} from "./chunk-LPYCPFBZ.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-43Z3RLS5.js → chunk-XDP3UYH5.js}

@@ -1,26 +1,27 @@
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-HGN6VZTY.js";
+} from "./chunk-VIOL2DJS.js";
 import {
   blockedActionFingerprint,
   defersToNativeMode,
   forgetBlockedActionHint,
   hasBlockedActionHint,
-  recordBlockedActionHint
-} from "./chunk-JCWCTBYH.js";
+  recordBlockedActionHint,
+  reportMachineDenial
+} from "./chunk-SUWRZYQG.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-5F5QQMCA.js";
+} from "./chunk-LEAAERSQ.js";
 import {
   denyReasonFrom,
   isDeferAnswer
 } from "./chunk-YHG74UFF.js";
 import {
-  AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
   UNNAMED_ACTION,
+  claimThrottle,
   deriveAction,
   deriveActionBody,
   deriveBlocker,
@@ -34,9 +35,8 @@ import {
   repoKeyFor,
   reportEvent,
   scopePathFor,
-  settleQuestionsForToolUse,
-  throttlePass
-} from "./chunk-IF46POXX.js";
+  settleQuestionsForToolUse
+} from "./chunk-G653QPTR.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -51,7 +51,7 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-RQM5SMMR.js";
+} from "./chunk-NHTAHAIS.js";
 import {
   getApiKey,
   getBaseUrl
@@ -75,13 +75,11 @@ import {
   isBlockedActionRequest,
   isPermissionRequestOwnedByPreToolUse,
   isPusharyOwnTool,
-  machineDecisionFor,
   parseAgentQuestionAnswers,
   parseAgentQuestions,
   resolveGate,
-  stoppedOutput,
-  wireVerdictFor
-} from "./chunk-7IEB2GV4.js";
+  stoppedOutput
+} from "./chunk-SOUZBGYJ.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
@@ -118,31 +116,6 @@ var deny = (reason) => claudePreToolUseOutput("deny", reason);
 var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, updatedInput);
 var ask = (reason) => claudePreToolUseOutput("ask", reason);
 var halted = (reason) => stoppedOutput(deny(reason), reason);
-var reportMachineDecision = async (input, verdict) => {
-  const decision = machineDecisionFor(wireVerdictFor(verdict, 0));
-  if (!decision) return;
-  const sessionKey = input.session_id || DEFAULT_SESSION;
-  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
-  const throttleKey = `machinedecision:${sessionKey}:${input.tool_name}:${decision.origin}:${toolTarget ?? ""}`;
-  if (!throttlePass(throttleKey, AUTO_DECISION_WINDOW_MS)) return;
-  await reportEvent(
-    {
-      event: "permission_denied",
-      occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
-      toolUseId: input.tool_use_id,
-      agentType: ACTIVE_AGENT.type,
-      agentName: agentNameIn(basename(input.cwd ?? process.cwd())),
-      action: permissionDeniedAction(input.tool_name),
-      sessionId: input.session_id,
-      decisionSource: "policy_auto",
-      decisionOrigin: decision.origin,
-      decisionOutcome: decision.outcome,
-      toolName: input.tool_name,
-      toolTarget
-    },
-    { maxAttempts: 1, timeoutMs: 800 }
-  ).catch(() => void 0);
-};
 var storedWaitDeadline = (result, requestedDeadline) => {
   const stored = result.waitEndsAt ? Date.parse(result.waitEndsAt) : Number.NaN;
   return Number.isFinite(stored) ? Math.min(stored, requestedDeadline) : requestedDeadline;
@@ -556,11 +529,11 @@ var handlePreToolUse = async (input, canonical) => {
     const gateInput = claudeGateInput(modeState, policy, input, canonical);
     const verdict = resolveGate(gateInput);
     if (verdict.kind === "kill") {
-      await reportMachineDecision(input, verdict);
+      await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return halted(verdict.reason);
     }
     if (verdict.kind === "deny") {
-      await reportMachineDecision(input, verdict);
+      await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return deny(verdict.reason);
     }
     if (canonical === null) return deny(unreadableReason);
@@ -618,11 +591,11 @@ var handlePermissionRequest = async (input, canonical) => {
     const policy = await getPolicy(apiKey, modeState.policyVersion, ACTIVE_AGENT.type, true, input.session_id);
     const verdict = resolveGate(claudeGateInput(modeState, policy, input, canonical));
     if (verdict.kind === "kill") {
-      await reportMachineDecision(input, verdict);
+      await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return permReqHalted(verdict.reason);
     }
     if (verdict.kind === "deny") {
-      await reportMachineDecision(input, verdict);
+      await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return permReqDeny(verdict.reason);
     }
     if (canonical === null) return permReqDeny(unreadableReason);
@@ -662,7 +635,7 @@ var PERMISSION_DENIED_NOTICE_WINDOW_MS = 5 * 60 * 1e3;
 var blockedActionHoldEndsAt = (holdBudgetSeconds) => START_MS + hookHoldWindowMs("claude", holdBudgetSeconds);
 var notifyPermissionDenied = async (apiKey, input) => {
   const sessionKey = input.session_id || DEFAULT_SESSION;
-  if (!throttlePass(`permdenied:${sessionKey}:${input.tool_name}`, PERMISSION_DENIED_NOTICE_WINDOW_MS)) return;
+  if (claimThrottle(`permdenied:${sessionKey}:${input.tool_name}`, PERMISSION_DENIED_NOTICE_WINDOW_MS) !== "passed") return;
   const mode = await fetchModeState(apiKey, input.session_id).catch(() => null);
   if (mode?.kill || mode?.mode === "terminal_only") return;
   const projectName = basename(input.cwd ?? process.cwd());

package/dist/{chunk-NBCTKC4Z.js → chunk-Y3MM6PYN.js}

@@ -1,6 +1,6 @@
 import {
   resolvePathBinary
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";
@@ -261,7 +261,7 @@ var installAgentSkill = async (request, effects) => {
 };
 
 // src/cli/dry-run.ts
-import { execSync as execSync2 } from "child_process";
+import { execFileSync as execFileSync2 } from "child_process";
 import { rmSync as rmSync2, writeFileSync as writeFileSync2 } from "fs";
 var createGuards = (isDryRun, note) => ({
   write: (path, contents) => {
@@ -272,9 +272,9 @@ var createGuards = (isDryRun, note) => ({
     if (isDryRun()) return note("remove ", path);
     rmSync2(path, { recursive: true, force: options.force ?? false });
   },
-  exec: (command, options, describe) => {
+  execFile: (file, args, options, describe) => {
     if (isDryRun()) return note("run    ", describe);
-    execSync2(command, options);
+    execFileSync2(file, args, options);
   }
 });
 var describeService = (effects) => {

package/dist/{chunk-KZIXHLPQ.js → chunk-YXP3WPAI.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-YYRZPEMA.js → chunk-ZVY25BMK.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{reapply-B3S2LRMT.js → reapply-J527BCJG.js}

@@ -8,15 +8,15 @@ import {
   reapplyGeminiSettings,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-S3CLZSV3.js";
-import "./chunk-SGZ3IAWF.js";
-import "./chunk-5IBVIMWT.js";
-import "./chunk-O6RN46OS.js";
-import "./chunk-A7XIL2WD.js";
-import "./chunk-KZIXHLPQ.js";
-import "./chunk-UCGQEAKZ.js";
+} from "./chunk-ACYIZ3KH.js";
+import "./chunk-PC6DU5C4.js";
+import "./chunk-II7PUMPB.js";
+import "./chunk-WPVHRUDT.js";
+import "./chunk-LPYCPFBZ.js";
+import "./chunk-YXP3WPAI.js";
+import "./chunk-TRLFZKVG.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-7IEB2GV4.js";
+import "./chunk-SOUZBGYJ.js";
 export {
   inspectConfiguredManagedProviders,
   reapplyAllAgents,

package/dist/src/index.js

@@ -1,12 +1,12 @@
 import {
   handlePreToolUse
-} from "../chunk-43Z3RLS5.js";
-import "../chunk-HGN6VZTY.js";
-import "../chunk-5IBVIMWT.js";
-import "../chunk-JCWCTBYH.js";
-import "../chunk-5F5QQMCA.js";
+} from "../chunk-XDP3UYH5.js";
+import "../chunk-VIOL2DJS.js";
+import "../chunk-II7PUMPB.js";
+import "../chunk-SUWRZYQG.js";
+import "../chunk-LEAAERSQ.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-A7XIL2WD.js";
+import "../chunk-LPYCPFBZ.js";
 import {
   fetchAccountPublicKey
 } from "../chunk-EQRS3SGM.js";
@@ -18,20 +18,20 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-IF46POXX.js";
-import "../chunk-KZIXHLPQ.js";
+} from "../chunk-G653QPTR.js";
+import "../chunk-YXP3WPAI.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
 } from "../chunk-LGXUGYUH.js";
-import "../chunk-RQM5SMMR.js";
-import "../chunk-UCGQEAKZ.js";
+import "../chunk-NHTAHAIS.js";
+import "../chunk-TRLFZKVG.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-P4JVVJ2D.js";
+import "../chunk-UM5J3J4V.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
@@ -39,7 +39,7 @@ import {
 } from "../chunk-2UMNXADU.js";
 import {
   resolvePolicy
-} from "../chunk-7IEB2GV4.js";
+} from "../chunk-SOUZBGYJ.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",