@pushary/agent-hooks 1.6.3 → 1.6.4

package/dist/chunk-VOCZHOXV.js

@@ -0,0 +1,142 @@
+import {
+  CLIENT_REPORT_DISABLE_ENV,
+  isDisabledByEnv
+} from "./chunk-POFBE6ZY.js";
+import {
+  isNetworkFailure
+} from "./chunk-DESAUCH2.js";
+import {
+  clientReportClaims
+} from "./chunk-K32C2RGK.js";
+import {
+  getApiKey,
+  getBaseUrl
+} from "./chunk-OSJEMXSR.js";
+import {
+  CLIENT_REPORT_PATH,
+  degradedLine
+} from "./chunk-CAS7GFWI.js";
+
+// src/client-report-claim.ts
+import { createHash } from "crypto";
+import { closeSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";
+import { join } from "path";
+var CLIENT_REPORT_WINDOW_MS = 6e4;
+var CLAIM_DIRECTORY_MODE = 448;
+var CLAIM_FILE_MODE = 384;
+var CLAIM_KEY_HASH_LENGTH = 16;
+var CLAIM_FILE_PATTERN = /^[0-9a-f]{16}-(\d+)$/;
+var EXCLUSIVE_CREATE = "wx";
+var ALREADY_EXISTS = "EEXIST";
+var WINDOWS_KEPT_BEHIND = 1;
+var reportWindowOf = (now) => Math.floor(now / CLIENT_REPORT_WINDOW_MS);
+var claimFileName = (key, window) => `${createHash("sha256").update(key).digest("hex").slice(0, CLAIM_KEY_HASH_LENGTH)}-${window}`;
+var errorCodeOf = (error) => typeof error === "object" && error !== null && "code" in error && typeof error.code === "string" ? error.code : null;
+var claimWindowOf = (fileName) => {
+  const match = CLAIM_FILE_PATTERN.exec(fileName);
+  return match ? Number(match[1]) : null;
+};
+var isStaleClaim = (fileName, window) => {
+  const claimedWindow = claimWindowOf(fileName);
+  return claimedWindow !== null && claimedWindow < window - WINDOWS_KEPT_BEHIND;
+};
+var removeQuietly = (filePath) => {
+  try {
+    unlinkSync(filePath);
+  } catch {
+    return;
+  }
+};
+var removeStaleClaims = (claimsDir, window) => {
+  try {
+    for (const fileName of readdirSync(claimsDir)) {
+      if (isStaleClaim(fileName, window)) removeQuietly(join(claimsDir, fileName));
+    }
+  } catch {
+    return;
+  }
+};
+var claimReportWindow = (claimsDir, key, now) => {
+  const window = reportWindowOf(now);
+  try {
+    mkdirSync(claimsDir, { recursive: true, mode: CLAIM_DIRECTORY_MODE });
+    closeSync(openSync(join(claimsDir, claimFileName(key, window)), EXCLUSIVE_CREATE, CLAIM_FILE_MODE));
+  } catch (error) {
+    return errorCodeOf(error) === ALREADY_EXISTS ? "already_claimed" : "unavailable";
+  }
+  removeStaleClaims(claimsDir, window);
+  return "claimed";
+};
+
+// src/client-report.ts
+var CLIENT_REPORT_TIMEOUT_MS = 1e3;
+var readApiKey = () => {
+  try {
+    return getApiKey();
+  } catch {
+    return null;
+  }
+};
+var defaultDeps = () => ({
+  disabled: () => isDisabledByEnv(process.env, CLIENT_REPORT_DISABLE_ENV),
+  fetchImpl: fetch,
+  apiKey: readApiKey,
+  baseUrl: getBaseUrl,
+  now: Date.now,
+  claimsDir: clientReportClaims()
+});
+var reportKey = (event) => `${event.kind}:${event.code}`;
+var createClientErrorReporter = (deps) => {
+  const windowClaimedInProcess = /* @__PURE__ */ new Map();
+  const claimInProcess = (key, now) => {
+    if (windowClaimedInProcess.get(key) === reportWindowOf(now)) return false;
+    windowClaimedInProcess.set(key, reportWindowOf(now));
+    return true;
+  };
+  const claimReport = (key, now) => {
+    const claim = claimReportWindow(deps.claimsDir, key, now);
+    return claim === "unavailable" ? claimInProcess(key, now) : claim === "claimed";
+  };
+  return async (event) => {
+    try {
+      if (deps.disabled()) return;
+      const apiKey = deps.apiKey();
+      const now = deps.now();
+      if (!apiKey || !claimReport(reportKey(event), now)) return;
+      await deps.fetchImpl(`${deps.baseUrl()}${CLIENT_REPORT_PATH}`, {
+        method: "POST",
+        headers: { "Authorization": `Bearer ${apiKey}`, "Content-Type": "application/json" },
+        body: JSON.stringify({ ...event, occurredAt: new Date(now).toISOString() }),
+        signal: AbortSignal.timeout(CLIENT_REPORT_TIMEOUT_MS)
+      });
+    } catch {
+      return;
+    }
+  };
+};
+var processReporter = null;
+var inFlightReports = /* @__PURE__ */ new Set();
+var reportClientError = (event) => {
+  processReporter ??= createClientErrorReporter(defaultDeps());
+  const report = processReporter(event);
+  inFlightReports.add(report);
+  void report.finally(() => inFlightReports.delete(report));
+  return report;
+};
+var exitAfterClientReports = async (code) => {
+  await Promise.all(inFlightReports);
+  return process.exit(code);
+};
+var clientErrorKindOf = (error) => isNetworkFailure(error) ? "network" : "unexpected";
+var writeDegraded = (subsystem, report) => {
+  process.stderr.write(`${degradedLine(subsystem, report)}
+`);
+  void reportClientError({ kind: "degraded", code: `${subsystem}:${report.reason}` });
+};
+
+export {
+  reportClientError,
+  exitAfterClientReports,
+  clientErrorKindOf,
+  writeDegraded
+};

package/dist/{chunk-HHYVBHHC.js → chunk-XJG2FUWS.js}

@@ -12,14 +12,14 @@ import {
 } from "./chunk-5RUIFDTP.js";
 import {
   callMcpTool
-} from "./chunk-HETOKNIL.js";
+} from "./chunk-BJENQBMH.js";
 import {
   reportedInstallSource
-} from "./chunk-NPGOQQCV.js";
+} from "./chunk-VHNDE3ZD.js";
 import {
   PAIR_TTL_SECONDS,
   isAnswerSource
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-CAS7GFWI.js";
 import {
   NPX_LATEST_COMMAND
 } from "./chunk-EA3IELHP.js";

package/dist/{chunk-KNIIFNNQ.js → chunk-XOMH53NB.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-CAS7GFWI.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-WA7SQX6S.js → chunk-YPONELWS.js}

@@ -1,21 +1,21 @@
 import {
   detectClaudeVersion
-} from "./chunk-WD6W7QDI.js";
+} from "./chunk-PBKEYMAO.js";
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-YOCXPNQ5.js";
+} from "./chunk-53DN77WB.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-H3FEVIQD.js";
+} from "./chunk-ZA5UXRNE.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
   codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-SND3C2AV.js";
+} from "./chunk-YXPGFRRW.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -27,7 +27,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-57DDP4TB.js";
+} from "./chunk-7CLTSZOL.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -47,7 +47,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-K32C2RGK.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-BEHGVU4W.js → chunk-YUGGNZSF.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-CAS7GFWI.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-SND3C2AV.js → chunk-YXPGFRRW.js}

@@ -2,17 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-57DDP4TB.js";
+} from "./chunk-7CLTSZOL.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-K32C2RGK.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-CAS7GFWI.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-H3FEVIQD.js → chunk-ZA5UXRNE.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-57DDP4TB.js";
+} from "./chunk-7CLTSZOL.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-K32C2RGK.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-CAS7GFWI.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{reapply-IB7YE7BU.js → reapply-4DAJKNVP.js}

@@ -9,17 +9,17 @@ import {
   reapplyGeminiSettings,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-WA7SQX6S.js";
-import "./chunk-WD6W7QDI.js";
-import "./chunk-YOCXPNQ5.js";
-import "./chunk-H3FEVIQD.js";
-import "./chunk-SND3C2AV.js";
-import "./chunk-57DDP4TB.js";
+} from "./chunk-YPONELWS.js";
+import "./chunk-PBKEYMAO.js";
+import "./chunk-53DN77WB.js";
+import "./chunk-ZA5UXRNE.js";
+import "./chunk-YXPGFRRW.js";
+import "./chunk-7CLTSZOL.js";
 import "./chunk-XHKBHWLX.js";
-import "./chunk-BEHGVU4W.js";
-import "./chunk-3BJQYXTL.js";
+import "./chunk-YUGGNZSF.js";
+import "./chunk-K32C2RGK.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-GHOB245Q.js";
+import "./chunk-CAS7GFWI.js";
 import "./chunk-HWJW3CPO.js";
 export {
   ensureCodexTrustAfterReapply,

package/dist/src/index.js

@@ -1,12 +1,12 @@
 import {
   handlePreToolUse
-} from "../chunk-57YDFAPP.js";
-import "../chunk-BG6OCZ4N.js";
-import "../chunk-H3FEVIQD.js";
-import "../chunk-UAV5MNKY.js";
-import "../chunk-4KSTLHWY.js";
+} from "../chunk-5U3FJ6YF.js";
+import "../chunk-LJEL7IB5.js";
+import "../chunk-ZA5UXRNE.js";
+import "../chunk-NYMPLNV3.js";
+import "../chunk-5UWV5GHM.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-57DDP4TB.js";
+import "../chunk-7CLTSZOL.js";
 import {
   fetchAccountPublicKey
 } from "../chunk-66H2QQAK.js";
@@ -18,20 +18,22 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-JBXUKGZS.js";
-import "../chunk-BEHGVU4W.js";
+} from "../chunk-H6XU22TN.js";
+import "../chunk-YUGGNZSF.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
-} from "../chunk-LVHGSD5E.js";
-import "../chunk-LM2IOEDK.js";
-import "../chunk-3BJQYXTL.js";
-import "../chunk-HETOKNIL.js";
-import "../chunk-SAF6HGAA.js";
+} from "../chunk-EREBZHN2.js";
+import "../chunk-VOCZHOXV.js";
+import "../chunk-POFBE6ZY.js";
+import "../chunk-BJENQBMH.js";
+import "../chunk-DESAUCH2.js";
+import "../chunk-DZTKLE7Q.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-NPGOQQCV.js";
+import "../chunk-VHNDE3ZD.js";
+import "../chunk-K32C2RGK.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
@@ -39,7 +41,7 @@ import {
 } from "../chunk-OSJEMXSR.js";
 import {
   resolvePolicy
-} from "../chunk-GHOB245Q.js";
+} from "../chunk-CAS7GFWI.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "1.6.3",
+  "version": "1.6.4",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",

package/dist/chunk-SAF6HGAA.js

@@ -1,57 +0,0 @@
-import {
-  NetworkError
-} from "./chunk-7QLSKOSU.js";
-
-// src/cli/net.ts
-import { createRequire } from "module";
-var requireCjs = createRequire(import.meta.url);
-var PROXY_VARS = ["HTTPS_PROXY", "https_proxy", "HTTP_PROXY", "http_proxy"];
-var proxyFromEnv = () => {
-  for (const name of PROXY_VARS) {
-    const value = process.env[name]?.trim();
-    if (value) return value;
-  }
-  return void 0;
-};
-var installed = false;
-var installProxyDispatcher = () => {
-  if (installed) return;
-  installed = true;
-  if (!proxyFromEnv()) return;
-  try {
-    const { EnvHttpProxyAgent, setGlobalDispatcher } = requireCjs("undici");
-    setGlobalDispatcher(new EnvHttpProxyAgent());
-  } catch {
-  }
-};
-var isNetworkFailure = (err) => {
-  if (!(err instanceof Error)) return false;
-  const code = err.code;
-  if (code && ["ENOTFOUND", "ECONNREFUSED", "ECONNRESET", "ETIMEDOUT", "EAI_AGAIN", "EPROTO", "CERT_HAS_EXPIRED", "UNABLE_TO_VERIFY_LEAF_SIGNATURE"].includes(code)) {
-    return true;
-  }
-  return err.name === "AbortError" || err.name === "TimeoutError" || /fetch failed/i.test(err.message);
-};
-var DEFAULT_TIMEOUT_MS = 15e3;
-var pusharyFetch = async (url, init = {}) => {
-  installProxyDispatcher();
-  const { timeoutMs = DEFAULT_TIMEOUT_MS, signal, ...rest } = init;
-  try {
-    return await fetch(url, {
-      ...rest,
-      signal: signal ?? AbortSignal.timeout(timeoutMs)
-    });
-  } catch (err) {
-    if (isNetworkFailure(err)) {
-      const proxy = proxyFromEnv();
-      const via = proxy ? ` (via proxy ${proxy})` : "";
-      throw new NetworkError(`Could not reach ${new URL(url).host}${via}: ${err instanceof Error ? err.message : String(err)}`);
-    }
-    throw err;
-  }
-};
-
-export {
-  installProxyDispatcher,
-  pusharyFetch
-};