@pushary/agent-hooks 1.4.1 → 1.5.0

package/dist/{chunk-ALFT7H5B.js → chunk-CQYHOHOK.js}

@@ -1,17 +1,67 @@
 import {
-  canonicalGateInputs
-} from "./chunk-LNGYW6G4.js";
+  AUTO_DECISION_WINDOW_MS,
+  DEFAULT_SESSION,
+  canonicalGateInputs,
+  claimThrottle,
+  deriveToolTarget,
+  permissionDeniedAction,
+  releaseThrottle,
+  reportEvent
+} from "./chunk-FDHMNT24.js";
 import {
   canonicalJson
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-DYHXOXUF.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
   blockedActionIdentity,
-  shouldDeferToNativeMode
-} from "./chunk-FVKFDTN6.js";
+  machineDecisionFor,
+  shouldDeferToNativeMode,
+  wireVerdictFor
+} from "./chunk-T4QY64OR.js";
+
+// src/machine-decision-audit.ts
+import { basename } from "path";
+var reportMachineDenial = async (input, verdict, agent) => {
+  const decision = machineDecisionFor(wireVerdictFor(verdict, 0));
+  if (!decision) return;
+  const sessionKey = input.session_id || DEFAULT_SESSION;
+  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+  const throttleKey = `machinedecision:${agent.type}:${sessionKey}:${input.tool_name}:${decision.origin}:${toolTarget ?? ""}`;
+  const throttle = claimThrottle(throttleKey, AUTO_DECISION_WINDOW_MS);
+  if (throttle === "throttled") return;
+  if (throttle === "unavailable") {
+    console.error("[Pushary] Could not access the audit throttle; reporting this denial without deduplication.");
+  }
+  try {
+    const response = await reportEvent({
+      event: "permission_denied",
+      occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
+      toolUseId: input.tool_use_id,
+      agentType: agent.type,
+      agentName: `${agent.label} - ${basename(input.cwd ?? process.cwd())}`,
+      action: permissionDeniedAction(input.tool_name),
+      sessionId: input.session_id,
+      decisionSource: "policy_auto",
+      decisionOrigin: decision.origin,
+      decisionOutcome: decision.outcome,
+      toolName: input.tool_name,
+      toolTarget
+    }, { maxAttempts: 1, timeoutMs: 800, requireOk: true, skipDrain: true });
+    if (response?.ok !== true) throw new Error("Audit delivery was not acknowledged");
+  } catch {
+    console.error("[Pushary] Could not record the machine denial. The action remains blocked; its audit delivery will be retried on the next matching denial.");
+    if (throttle === "passed") {
+      try {
+        releaseThrottle(throttleKey);
+      } catch {
+        console.error("[Pushary] Could not reset the failed audit throttle.");
+      }
+    }
+  }
+};
 
 // src/native-defer.ts
 var nativeDeferOptions = () => {
@@ -190,6 +240,7 @@ var forgetBlockedActionHint = (fingerprint) => {
 };
 
 export {
+  reportMachineDenial,
   defersToNativeMode,
   userScope,
   codexCallKey,

package/dist/{chunk-3UA6FPRC.js → chunk-DLJN5XEU.js}

@@ -1,12 +1,12 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-VYUDGQM7.js";
+} from "./chunk-TUXFIVOH.js";
 import {
   codexHomeFrom
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-DYHXOXUF.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-BZBUPZC6.js → chunk-DTQNDR7C.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-TI3ZWXZG.js";
+} from "./chunk-USQDVBEV.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-SAF6NNXY.js → chunk-DYHXOXUF.js}

@@ -2,12 +2,19 @@ import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-T4QY64OR.js";
+import {
+  isReleaseVersion
+} from "./chunk-HWJW3CPO.js";
 
 // src/npm.ts
 import { execFileSync, execSync } from "child_process";
 import { existsSync, readFileSync, realpathSync } from "fs";
 import { dirname, isAbsolute, join, relative, resolve } from "path";
+var AGENT_HOOKS_PACKAGE = "@pushary/agent-hooks";
+var LATEST_RELEASE_URL = `https://registry.npmjs.org/${AGENT_HOOKS_PACKAGE}/latest`;
+var REGISTRY_TIMEOUT_MS = 5e3;
+var LATEST_TAG = "latest";
 var cleanNpmEnv = () => {
   const env = {};
   for (const [key, value] of Object.entries(process.env)) {
@@ -16,10 +23,11 @@ var cleanNpmEnv = () => {
   }
   return env;
 };
+var NPM_ERROR_METADATA = /^(code|syscall|path|dest|errno)\s/i;
 var npmErrorMessage = (err) => {
   const e = err;
   const text = [e?.stderr, e?.stdout].map((part) => part ? part.toString() : "").join("\n");
-  const line = text.split("\n").map((l) => l.replace(/^npm error\s*/i, "").trim()).find((l) => l && !l.startsWith("A complete log") && !/^code\s/i.test(l));
+  const line = text.split("\n").map((l) => l.replace(/^npm error\s*/i, "").trim()).find((l) => l && !l.startsWith("A complete log") && !NPM_ERROR_METADATA.test(l));
   return line || e?.message || String(err);
 };
 var execNpm = (args, options = {}) => {
@@ -143,6 +151,26 @@ var resolveGlobalBinDir = (probe) => {
   return resolved ? resolved.slice(0, resolved.length - probe.length - 1) : void 0;
 };
 var quoteIfNeeded = (path) => /\s/.test(path) ? `"${path}"` : path;
+var fetchLatestPublishedVersion = async (request = {}) => {
+  try {
+    const response = await (request.fetchImpl ?? fetch)(LATEST_RELEASE_URL, {
+      signal: AbortSignal.timeout(request.timeoutMs ?? REGISTRY_TIMEOUT_MS)
+    });
+    if (!response.ok) return void 0;
+    const body = await response.json();
+    const version = body && typeof body === "object" && "version" in body ? body.version : void 0;
+    return typeof version === "string" && isReleaseVersion(version) ? version : void 0;
+  } catch {
+    return void 0;
+  }
+};
+var POSIX_SHELL_WORD = /^[\w@%+=:,./-]+$/;
+var quoteForPosixShell = (value) => POSIX_SHELL_WORD.test(value) ? value : `'${value.replaceAll("'", `'\\''`)}'`;
+var installAgentHooksGlobally = (request, runNpm = execNpm) => {
+  const prefixFlag = request.prefix === void 0 ? "" : ` --prefix ${quoteForPosixShell(request.prefix)}`;
+  const spec = quoteForPosixShell(`${AGENT_HOOKS_PACKAGE}@${request.version}`);
+  runNpm(`install -g --no-workspaces${prefixFlag} ${spec}`, { timeout: request.timeoutMs });
+};
 var needsGlobalInstall = (requested, installed, binaryPresent) => requested !== installed || !binaryPresent;
 var installState;
 var installGlobally = (options) => {
@@ -153,13 +181,13 @@ var installGlobally = (options) => {
     const pinned = process.env.PUSHARY_PIN_GLOBAL_VERSION !== "0";
     if (pinned && !needsGlobalInstall(
       options.version,
-      resolveGlobalPackageVersion("@pushary/agent-hooks"),
-      globalPackageBinsPresent("@pushary/agent-hooks")
+      resolveGlobalPackageVersion(AGENT_HOOKS_PACKAGE),
+      globalPackageBinsPresent(AGENT_HOOKS_PACKAGE)
     )) {
       return "skipped";
     }
-    const spec = pinned && options.version && options.version !== "0.0.0" ? `@pushary/agent-hooks@${options.version}` : "@pushary/agent-hooks@latest";
-    execNpm(`install -g --no-workspaces ${spec}`, { timeout: options.timeoutMs ?? 12e4 });
+    const version = pinned && options.version && options.version !== "0.0.0" ? options.version : LATEST_TAG;
+    installAgentHooksGlobally({ version, timeoutMs: options.timeoutMs ?? 12e4 });
     return "installed";
   })();
   installState = started;
@@ -609,6 +637,9 @@ var claudeSettingsLocal = () => join3(homedir2(), ".claude", "settings.local.jso
 var pusharyDir = () => join3(homedir2(), ".pushary");
 var claudeMcpReceipt = () => join3(pusharyDir(), "setup", "claude-mcp.json");
 var bridgeAgentKey = () => join3(pusharyDir(), "bridge-auth", "agent-key.json");
+var autoUpdateState = () => join3(pusharyDir(), "auto-update.json");
+var autoUpdateLock = () => join3(pusharyDir(), "auto-update.lock");
+var autoUpdateLog = () => join3(pusharyDir(), "logs", "auto-update.log");
 var claudeRegistrationReceipt = () => join3(pusharyDir(), "setup", "claude-registration.json");
 var hermesConfigReceipt = () => join3(pusharyDir(), "setup", "hermes-config.json");
 var hookTakeoverReceipt = (agent) => join3(pusharyDir(), "setup", `hook-takeover-${agent}.json`);
@@ -622,6 +653,7 @@ export {
   registeredCommands,
   namesOurBinary,
   registrationHolderOf,
+  LATEST_TAG,
   npmErrorMessage,
   execNpm,
   resolveGlobalBinary,
@@ -630,6 +662,8 @@ export {
   resolvePackageVersionFromBinary,
   resolveGlobalPackageVersion,
   resolveGlobalBinDir,
+  fetchLatestPublishedVersion,
+  installAgentHooksGlobally,
   installGlobally,
   holdBudgetOf,
   guardBinary,
@@ -675,6 +709,9 @@ export {
   pusharyDir,
   claudeMcpReceipt,
   bridgeAgentKey,
+  autoUpdateState,
+  autoUpdateLock,
+  autoUpdateLog,
   claudeRegistrationReceipt,
   hermesConfigReceipt,
   hookTakeoverReceipt,

package/dist/{chunk-FAH3D74E.js → chunk-EA3IELHP.js}

@@ -1,4 +1,5 @@
 // src/cli/commands.ts
+var NPX_LATEST_COMMAND = "npx @pushary/agent-hooks@latest";
 var COMMAND_LIST = [
   {
     name: "cowork",
@@ -132,6 +133,10 @@ var COMMAND_OPTIONS = {
     ["--bundle", "Write a redacted diagnostics file you can attach to a support thread"]
   ],
   suggestions: [["accept <id>", "Turn a mined suggestion into an always-allow rule"]],
+  upgrade: [
+    ["--auto=off", "Stop Pushary updating itself in the background"],
+    ["--auto=on", "Update in the background again: once a day at session start, within the same major version"]
+  ],
   bell: [
     ["(no flags)", "Turn the bell on for Claude Code"],
     ["--test", "Ring once, now, so you can hear what it does"],
@@ -232,6 +237,7 @@ var renderCommandHelp = (name, version) => {
 };
 
 export {
+  NPX_LATEST_COMMAND,
   COMMANDS,
   isCommandName,
   renderHelp,

package/dist/{chunk-ED5TA2FJ.js → chunk-EADZPVYW.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-WEO5JCB4.js";
+} from "./chunk-UYDTFCHW.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-DYHXOXUF.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-I6HRQOMT.js → chunk-F57RGL7K.js}

@@ -2,27 +2,27 @@ import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-KI36MAT6.js";
+} from "./chunk-KEOLNHR3.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-3BPB2HYZ.js";
+} from "./chunk-7XT76LWT.js";
 import {
   getMachineId
-} from "./chunk-3T52B2OF.js";
-import {
-  getPackageVersion
-} from "./chunk-DINDL2CF.js";
+} from "./chunk-UQHUUZ5H.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-TI3ZWXZG.js";
+} from "./chunk-USQDVBEV.js";
 import {
   getBaseUrl
-} from "./chunk-2UMNXADU.js";
+} from "./chunk-OSJEMXSR.js";
+import {
+  getPackageVersion
+} from "./chunk-HWJW3CPO.js";
 
 // src/machines.ts
 import { hostname } from "os";

package/dist/{chunk-LNGYW6G4.js → chunk-FDHMNT24.js}

@@ -1,26 +1,26 @@
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-WEO5JCB4.js";
+} from "./chunk-UYDTFCHW.js";
 import {
   cancelQuestion,
   isPolicyConfig,
   sendNotification,
   waitForAnswer
-} from "./chunk-LGXUGYUH.js";
+} from "./chunk-PYCQXCI5.js";
 import {
   getMachineId
-} from "./chunk-3T52B2OF.js";
+} from "./chunk-UQHUUZ5H.js";
 import {
   withRetry
-} from "./chunk-EYRGBYZG.js";
+} from "./chunk-HETOKNIL.js";
 import {
   reportedInstallSource
-} from "./chunk-K6I5M2ME.js";
+} from "./chunk-HU5LSYL2.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-2UMNXADU.js";
+} from "./chunk-OSJEMXSR.js";
 import {
   ACTION_BODY_MAX,
   AGENT_LABELS_BY_TYPE,
@@ -44,7 +44,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   toToolLookup
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -1368,20 +1368,23 @@ var phoneDrivenEnv = (base) => ({
 import { join as join5 } from "path";
 import { tmpdir as tmpdir4 } from "os";
 import { createHash as createHash4 } from "crypto";
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, statSync as statSync4, writeFileSync as writeFileSync4, rmSync as rmSync2 } from "fs";
 var THROTTLE_DIR = join5(tmpdir4(), "pushary-throttle");
 var markerPath = (key) => join5(THROTTLE_DIR, createHash4("sha256").update(key).digest("hex").slice(0, 16));
-var throttlePass = (key, windowMs) => {
+var claimThrottle = (key, windowMs) => {
   try {
     const path = markerPath(key);
-    if (existsSync4(path) && Date.now() - statSync4(path).mtimeMs < windowMs) return false;
+    if (existsSync4(path) && Date.now() - statSync4(path).mtimeMs < windowMs) return "throttled";
     mkdirSync3(THROTTLE_DIR, { recursive: true });
     writeFileSync4(path, "", "utf-8");
-    return true;
+    return "passed";
   } catch {
-    return false;
+    return "unavailable";
   }
 };
+var releaseThrottle = (key) => {
+  rmSync2(markerPath(key), { force: true });
+};
 
 // src/events.ts
 import { basename as basename3, join as join6 } from "path";
@@ -1688,7 +1691,7 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
     }
     const isMirrorOnly = NON_GATED_MIRROR_TOOLS.has(input.tool_name);
     const decisionSource = isMirrorOnly ? void 0 : deriveDecisionSource(lookup.tool, lookup.input, liveMode, agent.type, input.cwd, input.session_id);
-    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, agent.type, input.cwd, input.session_id) : void 0;
+    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && claimThrottle(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) === "passed" ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, agent.type, input.cwd, input.session_id) : void 0;
     const toolReport = reportEvent({
       event: isError ? "tool_error" : "tool_complete",
       occurredAt,
@@ -1704,7 +1707,7 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
       usage: deriveUsage(input.transcript_path, input.session_id)
     }, { maxAttempts: 1, budgetMs: Math.min(DRAINING_REPORT_BUDGET_MS, Math.max(0, deadline - Date.now())), signal });
     const extraReports = [];
-    if (throttlePass(`hookactive:${sessionKey}`, HOOK_ACTIVE_WINDOW_MS)) {
+    if (claimThrottle(`hookactive:${sessionKey}`, HOOK_ACTIVE_WINDOW_MS) === "passed") {
       extraReports.push(
         reportEvent(
           {
@@ -1898,7 +1901,7 @@ var handleNotification = async (input, agent = CLAUDE_CODE_AGENT) => {
     }, { maxAttempts: 1, timeoutMs: 2500, signal }).catch(() => {
     });
     if (!teammateIdle && NOTIFICATION_PUSH_TYPES.has(notifType)) {
-      if (!throttlePass(`notify:${sessionKey}:${notifType}`, NOTIFICATION_THROTTLE_MS)) return;
+      if (claimThrottle(`notify:${sessionKey}:${notifType}`, NOTIFICATION_THROTTLE_MS) !== "passed") return;
       let apiKey;
       try {
         apiKey = getApiKey();
@@ -1990,7 +1993,8 @@ export {
   markPendingCommandFailed,
   removePendingCommand,
   repoKeyFor,
-  throttlePass,
+  claimThrottle,
+  releaseThrottle,
   readLastUserPrompt,
   CODEX_AGENT,
   codexAllow,

package/dist/{chunk-37VLIYLI.js → chunk-H5LHTC5X.js}

@@ -1,6 +1,6 @@
 import {
   resolvePathBinary
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-DYHXOXUF.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-EYRGBYZG.js → chunk-HETOKNIL.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-SAF6HGAA.js";
 import {
   getBaseUrl
-} from "./chunk-2UMNXADU.js";
+} from "./chunk-OSJEMXSR.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-K6I5M2ME.js → chunk-HU5LSYL2.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-2UMNXADU.js";
+} from "./chunk-OSJEMXSR.js";
 import {
   normalizeInstallSource
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-SKXLIVFM.js → chunk-HVBF35GT.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-CRNAXFQ6.js";
+} from "./chunk-TIWURSLS.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-EQRS3SGM.js";
+} from "./chunk-66H2QQAK.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-DINDL2CF.js → chunk-HWJW3CPO.js}

@@ -3,6 +3,7 @@ import { readFileSync } from "fs";
 import { dirname, join, parse } from "path";
 import { fileURLToPath } from "url";
 var PACKAGE_NAME = "@pushary/agent-hooks";
+var UNKNOWN_VERSION = "0.0.0";
 var findOwnPackageJson = (start) => {
   const { root } = parse(start);
   let dir = start;
@@ -20,13 +21,24 @@ var findOwnPackageJson = (start) => {
   }
 };
 var getPackageVersion = () => {
+  const root = ownPackageRoot();
+  return (root === void 0 ? void 0 : packageVersionAt(root)) ?? UNKNOWN_VERSION;
+};
+var ownPackageRoot = () => {
   try {
     const found = findOwnPackageJson(dirname(fileURLToPath(import.meta.url)));
-    if (!found) return "0.0.0";
-    const pkg = JSON.parse(readFileSync(found, "utf-8"));
-    return pkg.version ?? "0.0.0";
+    return found ? dirname(found) : void 0;
+  } catch {
+    return void 0;
+  }
+};
+var packageVersionAt = (packageRoot) => {
+  try {
+    const manifest = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf-8"));
+    const version = manifest && typeof manifest === "object" && "version" in manifest ? manifest.version : void 0;
+    return typeof version === "string" ? version : void 0;
   } catch {
-    return "0.0.0";
+    return void 0;
   }
 };
 var isNewerVersion = (candidate, current) => {
@@ -38,8 +50,16 @@ var isNewerVersion = (candidate, current) => {
   }
   return false;
 };
+var RELEASE_VERSION = /^\d+\.\d+\.\d+$/;
+var isReleaseVersion = (value) => RELEASE_VERSION.test(value);
+var majorOf = (version) => parseInt(version.split(".")[0] ?? "", 10) || 0;
+var isSameMajorVersion = (candidate, current) => majorOf(candidate) === majorOf(current);
 
 export {
   getPackageVersion,
-  isNewerVersion
+  ownPackageRoot,
+  packageVersionAt,
+  isNewerVersion,
+  isReleaseVersion,
+  isSameMajorVersion
 };

package/dist/{chunk-GOFDGTEI.js → chunk-IYTQ4B5I.js}

@@ -1,26 +1,27 @@
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-HQLAZWJJ.js";
+} from "./chunk-JF736N4C.js";
 import {
   blockedActionFingerprint,
   defersToNativeMode,
   forgetBlockedActionHint,
   hasBlockedActionHint,
-  recordBlockedActionHint
-} from "./chunk-ALFT7H5B.js";
+  recordBlockedActionHint,
+  reportMachineDenial
+} from "./chunk-CQYHOHOK.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-SWFF5U2N.js";
+} from "./chunk-43ZDACBO.js";
 import {
   denyReasonFrom,
   isDeferAnswer
 } from "./chunk-YHG74UFF.js";
 import {
-  AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
   UNNAMED_ACTION,
+  claimThrottle,
   deriveAction,
   deriveActionBody,
   deriveBlocker,
@@ -34,9 +35,8 @@ import {
   repoKeyFor,
   reportEvent,
   scopePathFor,
-  settleQuestionsForToolUse,
-  throttlePass
-} from "./chunk-LNGYW6G4.js";
+  settleQuestionsForToolUse
+} from "./chunk-FDHMNT24.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -48,14 +48,14 @@ import {
   requestGate,
   sendNotification,
   waitForQuestion
-} from "./chunk-LGXUGYUH.js";
+} from "./chunk-PYCQXCI5.js";
 import {
   getMachineId
-} from "./chunk-3T52B2OF.js";
+} from "./chunk-UQHUUZ5H.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-2UMNXADU.js";
+} from "./chunk-OSJEMXSR.js";
 import {
   AGENT_QUESTION_STRATEGY,
   GATE_BLOCK_REASON_MAX_LENGTH,
@@ -75,13 +75,11 @@ import {
   isBlockedActionRequest,
   isPermissionRequestOwnedByPreToolUse,
   isPusharyOwnTool,
-  machineDecisionFor,
   parseAgentQuestionAnswers,
   parseAgentQuestions,
   resolveGate,
-  stoppedOutput,
-  wireVerdictFor
-} from "./chunk-FVKFDTN6.js";
+  stoppedOutput
+} from "./chunk-T4QY64OR.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
@@ -118,31 +116,6 @@ var deny = (reason) => claudePreToolUseOutput("deny", reason);
 var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, updatedInput);
 var ask = (reason) => claudePreToolUseOutput("ask", reason);
 var halted = (reason) => stoppedOutput(deny(reason), reason);
-var reportMachineDecision = async (input, verdict) => {
-  const decision = machineDecisionFor(wireVerdictFor(verdict, 0));
-  if (!decision) return;
-  const sessionKey = input.session_id || DEFAULT_SESSION;
-  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
-  const throttleKey = `machinedecision:${sessionKey}:${input.tool_name}:${decision.origin}:${toolTarget ?? ""}`;
-  if (!throttlePass(throttleKey, AUTO_DECISION_WINDOW_MS)) return;
-  await reportEvent(
-    {
-      event: "permission_denied",
-      occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
-      toolUseId: input.tool_use_id,
-      agentType: ACTIVE_AGENT.type,
-      agentName: agentNameIn(basename(input.cwd ?? process.cwd())),
-      action: permissionDeniedAction(input.tool_name),
-      sessionId: input.session_id,
-      decisionSource: "policy_auto",
-      decisionOrigin: decision.origin,
-      decisionOutcome: decision.outcome,
-      toolName: input.tool_name,
-      toolTarget
-    },
-    { maxAttempts: 1, timeoutMs: 800 }
-  ).catch(() => void 0);
-};
 var storedWaitDeadline = (result, requestedDeadline) => {
   const stored = result.waitEndsAt ? Date.parse(result.waitEndsAt) : Number.NaN;
   return Number.isFinite(stored) ? Math.min(stored, requestedDeadline) : requestedDeadline;
@@ -556,11 +529,11 @@ var handlePreToolUse = async (input, canonical) => {
     const gateInput = claudeGateInput(modeState, policy, input, canonical);
     const verdict = resolveGate(gateInput);
     if (verdict.kind === "kill") {
-      await reportMachineDecision(input, verdict);
+      await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return halted(verdict.reason);
     }
     if (verdict.kind === "deny") {
-      await reportMachineDecision(input, verdict);
+      await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return deny(verdict.reason);
     }
     if (canonical === null) return deny(unreadableReason);
@@ -618,11 +591,11 @@ var handlePermissionRequest = async (input, canonical) => {
     const policy = await getPolicy(apiKey, modeState.policyVersion, ACTIVE_AGENT.type, true, input.session_id);
     const verdict = resolveGate(claudeGateInput(modeState, policy, input, canonical));
     if (verdict.kind === "kill") {
-      await reportMachineDecision(input, verdict);
+      await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return permReqHalted(verdict.reason);
     }
     if (verdict.kind === "deny") {
-      await reportMachineDecision(input, verdict);
+      await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return permReqDeny(verdict.reason);
     }
     if (canonical === null) return permReqDeny(unreadableReason);
@@ -662,7 +635,7 @@ var PERMISSION_DENIED_NOTICE_WINDOW_MS = 5 * 60 * 1e3;
 var blockedActionHoldEndsAt = (holdBudgetSeconds) => START_MS + hookHoldWindowMs("claude", holdBudgetSeconds);
 var notifyPermissionDenied = async (apiKey, input) => {
   const sessionKey = input.session_id || DEFAULT_SESSION;
-  if (!throttlePass(`permdenied:${sessionKey}:${input.tool_name}`, PERMISSION_DENIED_NOTICE_WINDOW_MS)) return;
+  if (claimThrottle(`permdenied:${sessionKey}:${input.tool_name}`, PERMISSION_DENIED_NOTICE_WINDOW_MS) !== "passed") return;
   const mode = await fetchModeState(apiKey, input.session_id).catch(() => null);
   if (mode?.kill || mode?.mode === "terminal_only") return;
   const projectName = basename(input.cwd ?? process.cwd());