@pushary/agent-hooks 1.4.1 → 1.4.2

package/dist/{chunk-HQLAZWJJ.js → chunk-VIOL2DJS.js}

@@ -3,28 +3,28 @@ import {
   addPusharyToolPermissions,
   isPusharyHook,
   removeClaudeMcpServers
-} from "./chunk-WIOXWUUH.js";
+} from "./chunk-II7PUMPB.js";
 import {
   CLAUDE_HOOK_EVENTS,
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-ED5TA2FJ.js";
+} from "./chunk-LPYCPFBZ.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-LNGYW6G4.js";
+} from "./chunk-G653QPTR.js";
 import {
   guardBinary,
   holdBudgetOf,
   registerHookEntry
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   PHONE_ANSWERED_TOOLS,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/compatible-config.ts
 import { homedir } from "os";

package/dist/{chunk-PHHGHHOW.js → chunk-VOMOZ4D5.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-I6HRQOMT.js → chunk-VW66JEGU.js}

@@ -2,24 +2,24 @@ import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-KI36MAT6.js";
+} from "./chunk-TYEO6T5J.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-3BPB2HYZ.js";
+} from "./chunk-BZ4GDOJX.js";
 import {
   getMachineId
-} from "./chunk-3T52B2OF.js";
+} from "./chunk-NHTAHAIS.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-TI3ZWXZG.js";
+} from "./chunk-FU2DFEAZ.js";
 import {
   getBaseUrl
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-TF4IOINR.js → chunk-WPVHRUDT.js}

@@ -2,17 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-ED5TA2FJ.js";
+} from "./chunk-LPYCPFBZ.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-GOFDGTEI.js → chunk-XDP3UYH5.js}

@@ -1,26 +1,27 @@
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-HQLAZWJJ.js";
+} from "./chunk-VIOL2DJS.js";
 import {
   blockedActionFingerprint,
   defersToNativeMode,
   forgetBlockedActionHint,
   hasBlockedActionHint,
-  recordBlockedActionHint
-} from "./chunk-ALFT7H5B.js";
+  recordBlockedActionHint,
+  reportMachineDenial
+} from "./chunk-SUWRZYQG.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-SWFF5U2N.js";
+} from "./chunk-LEAAERSQ.js";
 import {
   denyReasonFrom,
   isDeferAnswer
 } from "./chunk-YHG74UFF.js";
 import {
-  AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
   UNNAMED_ACTION,
+  claimThrottle,
   deriveAction,
   deriveActionBody,
   deriveBlocker,
@@ -34,9 +35,8 @@ import {
   repoKeyFor,
   reportEvent,
   scopePathFor,
-  settleQuestionsForToolUse,
-  throttlePass
-} from "./chunk-LNGYW6G4.js";
+  settleQuestionsForToolUse
+} from "./chunk-G653QPTR.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -51,7 +51,7 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-3T52B2OF.js";
+} from "./chunk-NHTAHAIS.js";
 import {
   getApiKey,
   getBaseUrl
@@ -75,13 +75,11 @@ import {
   isBlockedActionRequest,
   isPermissionRequestOwnedByPreToolUse,
   isPusharyOwnTool,
-  machineDecisionFor,
   parseAgentQuestionAnswers,
   parseAgentQuestions,
   resolveGate,
-  stoppedOutput,
-  wireVerdictFor
-} from "./chunk-FVKFDTN6.js";
+  stoppedOutput
+} from "./chunk-SOUZBGYJ.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
@@ -118,31 +116,6 @@ var deny = (reason) => claudePreToolUseOutput("deny", reason);
 var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, updatedInput);
 var ask = (reason) => claudePreToolUseOutput("ask", reason);
 var halted = (reason) => stoppedOutput(deny(reason), reason);
-var reportMachineDecision = async (input, verdict) => {
-  const decision = machineDecisionFor(wireVerdictFor(verdict, 0));
-  if (!decision) return;
-  const sessionKey = input.session_id || DEFAULT_SESSION;
-  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
-  const throttleKey = `machinedecision:${sessionKey}:${input.tool_name}:${decision.origin}:${toolTarget ?? ""}`;
-  if (!throttlePass(throttleKey, AUTO_DECISION_WINDOW_MS)) return;
-  await reportEvent(
-    {
-      event: "permission_denied",
-      occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
-      toolUseId: input.tool_use_id,
-      agentType: ACTIVE_AGENT.type,
-      agentName: agentNameIn(basename(input.cwd ?? process.cwd())),
-      action: permissionDeniedAction(input.tool_name),
-      sessionId: input.session_id,
-      decisionSource: "policy_auto",
-      decisionOrigin: decision.origin,
-      decisionOutcome: decision.outcome,
-      toolName: input.tool_name,
-      toolTarget
-    },
-    { maxAttempts: 1, timeoutMs: 800 }
-  ).catch(() => void 0);
-};
 var storedWaitDeadline = (result, requestedDeadline) => {
   const stored = result.waitEndsAt ? Date.parse(result.waitEndsAt) : Number.NaN;
   return Number.isFinite(stored) ? Math.min(stored, requestedDeadline) : requestedDeadline;
@@ -556,11 +529,11 @@ var handlePreToolUse = async (input, canonical) => {
     const gateInput = claudeGateInput(modeState, policy, input, canonical);
     const verdict = resolveGate(gateInput);
     if (verdict.kind === "kill") {
-      await reportMachineDecision(input, verdict);
+      await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return halted(verdict.reason);
     }
     if (verdict.kind === "deny") {
-      await reportMachineDecision(input, verdict);
+      await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return deny(verdict.reason);
     }
     if (canonical === null) return deny(unreadableReason);
@@ -618,11 +591,11 @@ var handlePermissionRequest = async (input, canonical) => {
     const policy = await getPolicy(apiKey, modeState.policyVersion, ACTIVE_AGENT.type, true, input.session_id);
     const verdict = resolveGate(claudeGateInput(modeState, policy, input, canonical));
     if (verdict.kind === "kill") {
-      await reportMachineDecision(input, verdict);
+      await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return permReqHalted(verdict.reason);
     }
     if (verdict.kind === "deny") {
-      await reportMachineDecision(input, verdict);
+      await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return permReqDeny(verdict.reason);
     }
     if (canonical === null) return permReqDeny(unreadableReason);
@@ -662,7 +635,7 @@ var PERMISSION_DENIED_NOTICE_WINDOW_MS = 5 * 60 * 1e3;
 var blockedActionHoldEndsAt = (holdBudgetSeconds) => START_MS + hookHoldWindowMs("claude", holdBudgetSeconds);
 var notifyPermissionDenied = async (apiKey, input) => {
   const sessionKey = input.session_id || DEFAULT_SESSION;
-  if (!throttlePass(`permdenied:${sessionKey}:${input.tool_name}`, PERMISSION_DENIED_NOTICE_WINDOW_MS)) return;
+  if (claimThrottle(`permdenied:${sessionKey}:${input.tool_name}`, PERMISSION_DENIED_NOTICE_WINDOW_MS) !== "passed") return;
   const mode = await fetchModeState(apiKey, input.session_id).catch(() => null);
   if (mode?.kill || mode?.mode === "terminal_only") return;
   const projectName = basename(input.cwd ?? process.cwd());

package/dist/{chunk-37VLIYLI.js → chunk-Y3MM6PYN.js}

@@ -1,6 +1,6 @@
 import {
   resolvePathBinary
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-WEO5JCB4.js → chunk-YXP3WPAI.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-LYXX5NSB.js → chunk-ZVY25BMK.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{reapply-BAWDJTG7.js → reapply-J527BCJG.js}

@@ -8,15 +8,15 @@ import {
   reapplyGeminiSettings,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-2GMI6JH6.js";
-import "./chunk-LUT2EZLG.js";
-import "./chunk-WIOXWUUH.js";
-import "./chunk-TF4IOINR.js";
-import "./chunk-ED5TA2FJ.js";
-import "./chunk-WEO5JCB4.js";
-import "./chunk-SAF6NNXY.js";
+} from "./chunk-ACYIZ3KH.js";
+import "./chunk-PC6DU5C4.js";
+import "./chunk-II7PUMPB.js";
+import "./chunk-WPVHRUDT.js";
+import "./chunk-LPYCPFBZ.js";
+import "./chunk-YXP3WPAI.js";
+import "./chunk-TRLFZKVG.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-FVKFDTN6.js";
+import "./chunk-SOUZBGYJ.js";
 export {
   inspectConfiguredManagedProviders,
   reapplyAllAgents,

package/dist/src/index.js

@@ -1,12 +1,12 @@
 import {
   handlePreToolUse
-} from "../chunk-GOFDGTEI.js";
-import "../chunk-HQLAZWJJ.js";
-import "../chunk-WIOXWUUH.js";
-import "../chunk-ALFT7H5B.js";
-import "../chunk-SWFF5U2N.js";
+} from "../chunk-XDP3UYH5.js";
+import "../chunk-VIOL2DJS.js";
+import "../chunk-II7PUMPB.js";
+import "../chunk-SUWRZYQG.js";
+import "../chunk-LEAAERSQ.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-ED5TA2FJ.js";
+import "../chunk-LPYCPFBZ.js";
 import {
   fetchAccountPublicKey
 } from "../chunk-EQRS3SGM.js";
@@ -18,20 +18,20 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-LNGYW6G4.js";
-import "../chunk-WEO5JCB4.js";
+} from "../chunk-G653QPTR.js";
+import "../chunk-YXP3WPAI.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
 } from "../chunk-LGXUGYUH.js";
-import "../chunk-3T52B2OF.js";
-import "../chunk-SAF6NNXY.js";
+import "../chunk-NHTAHAIS.js";
+import "../chunk-TRLFZKVG.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-K6I5M2ME.js";
+import "../chunk-UM5J3J4V.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
@@ -39,7 +39,7 @@ import {
 } from "../chunk-2UMNXADU.js";
 import {
   resolvePolicy
-} from "../chunk-FVKFDTN6.js";
+} from "../chunk-SOUZBGYJ.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",