@pushary/agent-hooks 1.6.3 → 1.7.0

package/dist/{chunk-DX5FOQSO.js → chunk-D6BULEJW.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-HCVAMXHT.js";
+} from "./chunk-CVALVGA7.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-RJUHSFYE.js → chunk-DANOZVZK.js}

@@ -1,6 +1,6 @@
 import {
   resolvePathBinary
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-DNJUSFBL.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-3BJQYXTL.js → chunk-DNJUSFBL.js}

@@ -1,11 +1,9 @@
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
+  isReleaseVersion,
   withHookHoldBudget
-} from "./chunk-GHOB245Q.js";
-import {
-  isReleaseVersion
-} from "./chunk-HWJW3CPO.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/npm.ts
 import { execFileSync, execSync } from "child_process";
@@ -625,6 +623,7 @@ var bridgeAgentKey = () => join3(pusharyDir(), "bridge-auth", "agent-key.json");
 var autoUpdateState = () => join3(pusharyDir(), "auto-update.json");
 var autoUpdateLock = () => join3(pusharyDir(), "auto-update.lock");
 var autoUpdateLog = () => join3(pusharyDir(), "logs", "auto-update.log");
+var clientReportClaims = () => join3(pusharyDir(), "client-reports");
 var claudeRegistrationReceipt = () => join3(pusharyDir(), "setup", "claude-registration.json");
 var hermesConfigReceipt = () => join3(pusharyDir(), "setup", "hermes-config.json");
 var hookTakeoverReceipt = (agent) => join3(pusharyDir(), "setup", `hook-takeover-${agent}.json`);
@@ -633,6 +632,10 @@ var codexAgentsMd2 = () => join3(codexHome(), "AGENTS.md");
 var geminiSettings = () => join3(homedir2(), ".gemini", "settings.json");
 var geminiMd = () => join3(homedir2(), ".gemini", "GEMINI.md");
 var pusharyConfigFile = () => join3(homedir2(), ".pushary", "config.json");
+var fxConfigDir = () => join3(homedir2(), ".fx");
+var fxMcpProfile = () => join3(fxConfigDir(), "mcp.json");
+var fxSettings = () => join3(fxConfigDir(), "settings.json");
+var fxAgentsMd = () => join3(fxConfigDir(), "AGENTS.md");
 
 export {
   registeredCommands,
@@ -698,6 +701,7 @@ export {
   autoUpdateState,
   autoUpdateLock,
   autoUpdateLog,
+  clientReportClaims,
   claudeRegistrationReceipt,
   hermesConfigReceipt,
   hookTakeoverReceipt,
@@ -705,5 +709,9 @@ export {
   codexAgentsMd2,
   geminiSettings,
   geminiMd,
-  pusharyConfigFile
+  pusharyConfigFile,
+  fxConfigDir,
+  fxMcpProfile,
+  fxSettings,
+  fxAgentsMd
 };

package/dist/{chunk-57YDFAPP.js → chunk-DVQDPI3T.js}

@@ -1,7 +1,7 @@
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-BG6OCZ4N.js";
+} from "./chunk-WUNZAE7I.js";
 import {
   blockedActionFingerprint,
   defersToNativeMode,
@@ -9,11 +9,11 @@ import {
   hasBlockedActionHint,
   recordBlockedActionHint,
   reportMachineDenial
-} from "./chunk-UAV5MNKY.js";
+} from "./chunk-52NVBNJT.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-4KSTLHWY.js";
+} from "./chunk-2C7CCWVX.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -36,7 +36,7 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-JBXUKGZS.js";
+} from "./chunk-IJ6ECPA6.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -48,14 +48,14 @@ import {
   requestGate,
   sendNotification,
   waitForQuestion
-} from "./chunk-LVHGSD5E.js";
+} from "./chunk-EGKXSQCY.js";
 import {
   getMachineId
-} from "./chunk-LM2IOEDK.js";
+} from "./chunk-XNCMT7YY.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-OSJEMXSR.js";
+} from "./chunk-V4AQBAVG.js";
 import {
   AGENT_QUESTION_STRATEGY,
   GATE_BLOCK_REASON_MAX_LENGTH,
@@ -83,7 +83,7 @@ import {
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";

package/dist/{chunk-BEHGVU4W.js → chunk-DZURML2D.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-LDS4ERW4.js → chunk-EAQMWJPG.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-REYWOCQJ.js";
+} from "./chunk-R2XCLT6I.js";
 import {
   ensureDaemonRunning
-} from "./chunk-QKOVVL7I.js";
+} from "./chunk-73T6MSU5.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-KNIIFNNQ.js";
+} from "./chunk-BH2SKSSK.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-66H2QQAK.js";
+} from "./chunk-KXMZMZD3.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-JBU7XKY2.js";
+} from "./chunk-B76WVEDX.js";
+import {
+  readTranscriptPreference
+} from "./chunk-UOAQ6QMP.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-3BJQYXTL.js";
-import {
-  readTranscriptPreference
-} from "./chunk-CWIARY6F.js";
+} from "./chunk-DNJUSFBL.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-OSJEMXSR.js";
+} from "./chunk-V4AQBAVG.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-LVHGSD5E.js → chunk-EGKXSQCY.js}

@@ -1,12 +1,16 @@
+import {
+  clientErrorKindOf,
+  reportClientError
+} from "./chunk-V6QRSU2G.js";
 import {
   callMcpTool
-} from "./chunk-HETOKNIL.js";
+} from "./chunk-JNXVOU6Y.js";
 import {
-  installProxyDispatcher
-} from "./chunk-SAF6HGAA.js";
+  installNetworkDefaults
+} from "./chunk-KW2RRR7D.js";
 import {
   getBaseUrl
-} from "./chunk-OSJEMXSR.js";
+} from "./chunk-V4AQBAVG.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";
@@ -44,7 +48,7 @@ var isBlockedActionClaim = (data) => {
 };
 
 // src/api.ts
-installProxyDispatcher();
+installNetworkDefaults();
 var DECISION_STOP_REASON = "Approval was cancelled or became unavailable. Retry only after resolving it.";
 var isDecisionStopped = (result) => result.handoffAction === "stop" || ["cancelled", "unavailable", "stopped", "missing"].includes(result.status ?? "");
 var isLocalQuestionHandoff = (result) => result.suppressed === true || result.noDevices === true || result.status === "terminal" || result.status === "notified";
@@ -130,7 +134,8 @@ var requestGate = async (apiKey, request, timeoutMs = 15e3) => {
   try {
     const reply = await postAgentRequest(apiKey, GATE_PATH, request, timeoutMs);
     return isGateReply(reply) ? reply : null;
-  } catch {
+  } catch (error) {
+    void reportClientError({ kind: clientErrorKindOf(error), code: "gate_request_failed" });
     return null;
   }
 };
@@ -138,7 +143,8 @@ var claimBlockedAction = async (apiKey, request, timeoutMs) => {
   try {
     const reply = await postAgentRequest(apiKey, BLOCKED_ACTION_CLAIM_PATH, request, timeoutMs);
     return isBlockedActionClaim(reply) ? reply.granted : null;
-  } catch {
+  } catch (error) {
+    void reportClientError({ kind: clientErrorKindOf(error), code: "blocked_action_claim_failed" });
     return null;
   }
 };

package/dist/{chunk-HHYVBHHC.js → chunk-HDRNWNVP.js}

@@ -12,17 +12,17 @@ import {
 } from "./chunk-5RUIFDTP.js";
 import {
   callMcpTool
-} from "./chunk-HETOKNIL.js";
+} from "./chunk-JNXVOU6Y.js";
 import {
   reportedInstallSource
-} from "./chunk-NPGOQQCV.js";
+} from "./chunk-ROQK7IN3.js";
+import {
+  NPX_LATEST_COMMAND
+} from "./chunk-B3UXMSMW.js";
 import {
   PAIR_TTL_SECONDS,
   isAnswerSource
-} from "./chunk-GHOB245Q.js";
-import {
-  NPX_LATEST_COMMAND
-} from "./chunk-EA3IELHP.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-JBXUKGZS.js → chunk-IJ6ECPA6.js}

@@ -1,26 +1,30 @@
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-BEHGVU4W.js";
+} from "./chunk-DZURML2D.js";
 import {
   cancelQuestion,
   isPolicyConfig,
   sendNotification,
   waitForAnswer
-} from "./chunk-LVHGSD5E.js";
+} from "./chunk-EGKXSQCY.js";
 import {
-  getMachineId
-} from "./chunk-LM2IOEDK.js";
+  clientErrorKindOf,
+  reportClientError
+} from "./chunk-V6QRSU2G.js";
 import {
   withRetry
-} from "./chunk-HETOKNIL.js";
+} from "./chunk-JNXVOU6Y.js";
+import {
+  getMachineId
+} from "./chunk-XNCMT7YY.js";
 import {
   reportedInstallSource
-} from "./chunk-NPGOQQCV.js";
+} from "./chunk-ROQK7IN3.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-OSJEMXSR.js";
+} from "./chunk-V4AQBAVG.js";
 import {
   ACTION_BODY_MAX,
   AGENT_LABELS_BY_TYPE,
@@ -44,7 +48,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   toToolLookup
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -176,12 +180,14 @@ var fetchModeState = async (apiKey, sessionId, reuseWithinMs = 0, signal) => {
       signal: AbortSignal.any([AbortSignal.timeout(3e3), ...signal ? [signal] : []])
     });
     if (!response.ok) {
+      void reportClientError({ kind: "http_status", code: `mode_http_${response.status}` });
       return degradedFallback(apiKey, response.status === 401 || response.status === 403);
     }
     const state = modeStateFromResponse(await response.json());
     writeLastGoodMode(apiKey, state, sessionId);
     return state;
-  } catch {
+  } catch (error) {
+    void reportClientError({ kind: clientErrorKindOf(error), code: "mode_fetch_failed" });
     return degradedFallback(apiKey);
   }
 };

package/dist/{chunk-NMRH3VX4.js → chunk-J2355HR7.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-HETOKNIL.js → chunk-JNXVOU6Y.js}

@@ -1,9 +1,9 @@
 import {
-  installProxyDispatcher
-} from "./chunk-SAF6HGAA.js";
+  installNetworkDefaults
+} from "./chunk-KW2RRR7D.js";
 import {
   getBaseUrl
-} from "./chunk-OSJEMXSR.js";
+} from "./chunk-V4AQBAVG.js";
 
 // src/retry.ts
 var isRetryable = (err) => {
@@ -34,8 +34,8 @@ var withRetry = async (fn, options = {}) => {
 };
 
 // src/mcp-http.ts
-installProxyDispatcher();
-var parseSseJson = (body) => {
+installNetworkDefaults();
+var parseSseMessages = (body) => {
   const messages = [];
   for (const event of body.split(/\r?\n\r?\n/)) {
     const data = event.split(/\r?\n/).filter((line) => line.startsWith("data:")).map((line) => line.slice(5).trimStart()).join("\n").trim();
@@ -45,7 +45,10 @@ var parseSseJson = (body) => {
     } catch {
     }
   }
-  const message = messages.at(-1);
+  return messages;
+};
+var parseSseJson = (body) => {
+  const message = parseSseMessages(body).at(-1);
   if (!message) throw new Error("Empty response from Pushary");
   return message;
 };
@@ -112,6 +115,7 @@ var callMcpTool = async (apiKey, toolName, params, options = {}) => {
 
 export {
   withRetry,
+  parseSseMessages,
   sendMcpRequest,
   callMcpTool
 };

package/dist/{chunk-COGHCL6K.js → chunk-JXUAXO74.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-DNJUSFBL.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/chunk-KW2RRR7D.js

@@ -0,0 +1,124 @@
+import {
+  readExistingMachineId
+} from "./chunk-XNCMT7YY.js";
+import {
+  NetworkError
+} from "./chunk-7QLSKOSU.js";
+import {
+  getBaseUrl
+} from "./chunk-V4AQBAVG.js";
+import {
+  clientContextHeaders,
+  getPackageVersion
+} from "./chunk-YROGUPOZ.js";
+
+// src/cli/net.ts
+import { createRequire } from "module";
+
+// src/cli/client-context.ts
+import { randomUUID } from "crypto";
+var CLI_RUN_ID = randomUUID();
+var cliPlatform = () => `${process.platform}-${process.arch}`;
+var memoizedContext = null;
+var safeMachineId = () => {
+  try {
+    return readExistingMachineId();
+  } catch {
+    return null;
+  }
+};
+var readCliClientContext = () => ({
+  surface: "cli",
+  clientVersion: getPackageVersion(),
+  machineId: safeMachineId(),
+  runId: CLI_RUN_ID,
+  platform: cliPlatform()
+});
+var cliClientContext = () => {
+  if (memoizedContext) return memoizedContext;
+  const context = readCliClientContext();
+  if (context.machineId !== null) memoizedContext = context;
+  return context;
+};
+var originOf = (url) => {
+  try {
+    return new URL(url).origin;
+  } catch {
+    return null;
+  }
+};
+var requestUrlOf = (input) => typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+var isPusharyRequest = (input, baseUrl) => {
+  const target = originOf(requestUrlOf(input));
+  return target !== null && target === originOf(baseUrl);
+};
+var mergeClientContextHeaders = (input, init, context) => {
+  const headers = new Headers(input instanceof Request ? input.headers : void 0);
+  new Headers(init?.headers).forEach((value, name) => headers.set(name, value));
+  for (const [name, value] of Object.entries(clientContextHeaders(context))) {
+    if (!headers.has(name)) headers.set(name, value);
+  }
+  return headers;
+};
+var withClientContext = (fetchImpl, options) => (input, init) => isPusharyRequest(input, options.baseUrl()) ? fetchImpl(input, { ...init, headers: mergeClientContextHeaders(input, init, options.context()) }) : fetchImpl(input, init);
+var installed = false;
+var installClientContextHeaders = () => {
+  if (installed) return;
+  installed = true;
+  globalThis.fetch = withClientContext(globalThis.fetch.bind(globalThis), { baseUrl: getBaseUrl, context: cliClientContext });
+};
+
+// src/cli/net.ts
+var requireCjs = createRequire(import.meta.url);
+var PROXY_VARS = ["HTTPS_PROXY", "https_proxy", "HTTP_PROXY", "http_proxy"];
+var proxyFromEnv = () => {
+  for (const name of PROXY_VARS) {
+    const value = process.env[name]?.trim();
+    if (value) return value;
+  }
+  return void 0;
+};
+var installed2 = false;
+var installNetworkDefaults = () => {
+  if (installed2) return;
+  installed2 = true;
+  installClientContextHeaders();
+  if (!proxyFromEnv()) return;
+  try {
+    const { EnvHttpProxyAgent, setGlobalDispatcher } = requireCjs("undici");
+    setGlobalDispatcher(new EnvHttpProxyAgent());
+  } catch {
+  }
+};
+var isNetworkFailure = (err) => {
+  if (!(err instanceof Error)) return false;
+  const code = err.code;
+  if (code && ["ENOTFOUND", "ECONNREFUSED", "ECONNRESET", "ETIMEDOUT", "EAI_AGAIN", "EPROTO", "CERT_HAS_EXPIRED", "UNABLE_TO_VERIFY_LEAF_SIGNATURE"].includes(code)) {
+    return true;
+  }
+  return err.name === "AbortError" || err.name === "TimeoutError" || /fetch failed/i.test(err.message);
+};
+var DEFAULT_TIMEOUT_MS = 15e3;
+var pusharyFetch = async (url, init = {}) => {
+  installNetworkDefaults();
+  const { timeoutMs = DEFAULT_TIMEOUT_MS, signal, ...rest } = init;
+  try {
+    return await fetch(url, {
+      ...rest,
+      signal: signal ?? AbortSignal.timeout(timeoutMs)
+    });
+  } catch (err) {
+    if (isNetworkFailure(err)) {
+      const proxy = proxyFromEnv();
+      const via = proxy ? ` (via proxy ${proxy})` : "";
+      throw new NetworkError(`Could not reach ${new URL(url).host}${via}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    throw err;
+  }
+};
+
+export {
+  installNetworkDefaults,
+  isNetworkFailure,
+  pusharyFetch
+};

package/dist/{chunk-66H2QQAK.js → chunk-KXMZMZD3.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-OSJEMXSR.js";
+} from "./chunk-V4AQBAVG.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-H3FEVIQD.js → chunk-KYQXUGH7.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-57DDP4TB.js";
+} from "./chunk-ZQ7IDOKY.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-DNJUSFBL.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/claude-config.ts
 import { join } from "path";