@pushary/agent-hooks 1.7.2 → 1.8.0

package/dist/chunk-IZVAVXHQ.js

@@ -1,255 +0,0 @@
-import {
-  AUTO_DECISION_WINDOW_MS,
-  canonicalGateInputs,
-  claimThrottle,
-  deriveToolTarget,
-  permissionDeniedAction,
-  releaseThrottle,
-  reportEvent
-} from "./chunk-2B4XCMH6.js";
-import {
-  DEFAULT_SESSION
-} from "./chunk-N6IOSZOE.js";
-import {
-  canonicalJson
-} from "./chunk-NYBZJ44G.js";
-import {
-  writeFileAtomic
-} from "./chunk-T7E75EKA.js";
-import {
-  BLOCKED_ACTION_GRANT_TTL_SECONDS,
-  blockedActionIdentity,
-  machineDecisionFor,
-  shouldDeferToNativeMode,
-  wireVerdictFor
-} from "./chunk-WWTLAZQA.js";
-
-// src/machine-decision-audit.ts
-import { basename } from "path";
-var reportMachineDenial = async (input, verdict, agent) => {
-  const decision = machineDecisionFor(wireVerdictFor(verdict, 0));
-  if (!decision) return;
-  const sessionKey = input.session_id || DEFAULT_SESSION;
-  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
-  const throttleKey = `machinedecision:${agent.type}:${sessionKey}:${input.tool_name}:${decision.origin}:${toolTarget ?? ""}`;
-  const throttle = claimThrottle(throttleKey, AUTO_DECISION_WINDOW_MS);
-  if (throttle === "throttled") return;
-  if (throttle === "unavailable") {
-    console.error("[Pushary] Could not access the audit throttle; reporting this denial without deduplication.");
-  }
-  try {
-    const response = await reportEvent({
-      event: "permission_denied",
-      occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
-      toolUseId: input.tool_use_id,
-      agentType: agent.type,
-      agentName: `${agent.label} - ${basename(input.cwd ?? process.cwd())}`,
-      action: permissionDeniedAction(input.tool_name),
-      sessionId: input.session_id,
-      decisionSource: "policy_auto",
-      decisionOrigin: decision.origin,
-      decisionOutcome: decision.outcome,
-      toolName: input.tool_name,
-      toolTarget
-    }, { maxAttempts: 1, timeoutMs: 800, requireOk: true, skipDrain: true });
-    if (response?.ok !== true) throw new Error("Audit delivery was not acknowledged");
-  } catch {
-    console.error("[Pushary] Could not record the machine denial. The action remains blocked; its audit delivery will be retried on the next matching denial.");
-    if (throttle === "passed") {
-      try {
-        releaseThrottle(throttleKey);
-      } catch {
-        console.error("[Pushary] Could not reset the failed audit throttle.");
-      }
-    }
-  }
-};
-
-// src/native-defer.ts
-var nativeDeferOptions = () => {
-  const respect = process.env.PUSHARY_RESPECT_PERMISSION_MODE;
-  const bypass = process.env.PUSHARY_DEFER_BYPASS;
-  return {
-    respectPermissionMode: !(respect === "0" || respect === "false"),
-    deferBypass: bypass === "1" || bypass === "true"
-  };
-};
-var defersToNativeMode = (permissionMode, toolName) => shouldDeferToNativeMode(permissionMode, toolName, nativeDeferOptions());
-
-// src/codex-call-decision.ts
-import { createHash } from "crypto";
-import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "fs";
-import { tmpdir, userInfo } from "os";
-import { join } from "path";
-var CODEX_DECISION_TTL_MS = 60 * 1e3;
-var userScope = () => {
-  try {
-    const info = userInfo();
-    const id = typeof info.uid === "number" && info.uid >= 0 ? String(info.uid) : info.username;
-    return id.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || "default";
-  } catch {
-    return "default";
-  }
-};
-var decisionDir = () => join(tmpdir(), `pushary-codex-decisions-${userScope()}`);
-var decisionFile = (key) => join(decisionDir(), key);
-var PRESENTATION_ONLY_INPUT_KEYS = ["description"];
-var identifyingToolInput = (toolInput) => {
-  if (!toolInput) return {};
-  const identifying = {};
-  for (const [key, value] of Object.entries(toolInput)) {
-    if (PRESENTATION_ONLY_INPUT_KEYS.includes(key)) continue;
-    identifying[key] = value;
-  }
-  return identifying;
-};
-var codexCallKey = (identity) => {
-  if (!identity.sessionId || !identity.turnId || !identity.toolName) return null;
-  const material = canonicalJson([
-    identity.sessionId,
-    identity.turnId,
-    identity.toolName,
-    identifyingToolInput(identity.toolInput)
-  ]);
-  return createHash("sha256").update(material, "utf-8").digest("hex").slice(0, 32);
-};
-var parseDecision = (raw) => {
-  try {
-    const parsed = JSON.parse(raw);
-    if (parsed.kind === "approved") {
-      return typeof parsed.toolUseId === "string" && parsed.toolUseId ? { kind: "approved", toolUseId: parsed.toolUseId } : null;
-    }
-    if (parsed.kind === "handled") return { kind: "handled" };
-    if (parsed.kind === "denied") {
-      return { kind: "denied", reason: typeof parsed.reason === "string" ? parsed.reason : "" };
-    }
-    return null;
-  } catch {
-    return null;
-  }
-};
-var sweepExpired = (dir, nowMs) => {
-  try {
-    for (const name of readdirSync(dir)) {
-      const path = join(dir, name);
-      try {
-        if (nowMs - statSync(path).mtimeMs >= CODEX_DECISION_TTL_MS) rmSync(path, { force: true });
-      } catch {
-        continue;
-      }
-    }
-  } catch {
-    return;
-  }
-};
-var recordCodexCallDecision = (key, decision) => {
-  if (!key) return;
-  try {
-    const dir = decisionDir();
-    if (!existsSync(dir)) mkdirSync(dir, { recursive: true, mode: 448 });
-    else sweepExpired(dir, Date.now());
-    writeFileSync(decisionFile(key), JSON.stringify(decision), { encoding: "utf-8", mode: 384 });
-  } catch {
-    return;
-  }
-};
-var consumeCodexCallDecision = (key) => {
-  if (!key) return null;
-  const path = decisionFile(key);
-  try {
-    const fresh = Date.now() - statSync(path).mtimeMs < CODEX_DECISION_TTL_MS;
-    const raw = readFileSync(path, "utf-8");
-    rmSync(path, { force: true });
-    return fresh ? parseDecision(raw) : null;
-  } catch {
-    return null;
-  }
-};
-
-// src/blocked-action-hint.ts
-import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, readdirSync as readdirSync2, rmSync as rmSync2, statSync as statSync2 } from "fs";
-import { tmpdir as tmpdir2 } from "os";
-import { join as join2 } from "path";
-var BLOCKED_ACTION_HINT_TTL_MS = BLOCKED_ACTION_GRANT_TTL_SECONDS * 1e3;
-var FINGERPRINT = /^[0-9a-f]{64}$/;
-var isFingerprint = (value) => typeof value === "string" && FINGERPRINT.test(value);
-var blockedActionSubject = (source, sessionId, toolName, toolInput, cwd) => {
-  if (source !== "claude") return { source, sessionId, toolName, toolInput };
-  return cwd ? { source, sessionId, cwd, toolName, toolInput } : null;
-};
-var blockedActionFingerprint = ({ source = "claude", sessionId, toolName, toolInput, cwd }) => {
-  if (!sessionId || !toolInput) return null;
-  const canonical = canonicalGateInputs(source, toolName, [toolInput], cwd);
-  if (!canonical || canonical.toolInputs.length !== 1) return null;
-  const [canonicalInput] = canonical.toolInputs;
-  if (!canonicalInput) return null;
-  const subject = blockedActionSubject(source, sessionId, canonical.toolName, canonicalInput, cwd);
-  return subject ? createHash2("sha256").update(blockedActionIdentity(subject), "utf8").digest("hex") : null;
-};
-var hintDir = () => join2(tmpdir2(), `pushary-blocked-action-hints-${userScope()}`);
-var hintFile = (fingerprint) => join2(hintDir(), fingerprint);
-var isExpired = (mtimeMs, nowMs) => nowMs - mtimeMs >= BLOCKED_ACTION_HINT_TTL_MS;
-var sweepExpired2 = (dir, nowMs) => {
-  try {
-    for (const name of readdirSync2(dir)) {
-      const path = join2(dir, name);
-      try {
-        if (isExpired(statSync2(path).mtimeMs, nowMs)) rmSync2(path, { force: true });
-      } catch {
-        continue;
-      }
-    }
-  } catch {
-    return;
-  }
-};
-var recordBlockedActionHint = (fingerprint) => {
-  if (!isFingerprint(fingerprint)) return false;
-  try {
-    const dir = hintDir();
-    if (!existsSync2(dir)) mkdirSync2(dir, { recursive: true, mode: 448 });
-    else sweepExpired2(dir, Date.now());
-    writeFileAtomic(hintFile(fingerprint), JSON.stringify({ fingerprint }), 384);
-    return true;
-  } catch {
-    return false;
-  }
-};
-var hasBlockedActionHint = (fingerprint) => {
-  if (!isFingerprint(fingerprint)) return false;
-  const path = hintFile(fingerprint);
-  try {
-    const stat = statSync2(path);
-    if (!stat.isFile()) return false;
-    if (isExpired(stat.mtimeMs, Date.now())) {
-      rmSync2(path, { force: true });
-      return false;
-    }
-    const parsed = JSON.parse(readFileSync2(path, "utf-8"));
-    return parsed?.fingerprint === fingerprint;
-  } catch {
-    return false;
-  }
-};
-var forgetBlockedActionHint = (fingerprint) => {
-  if (!isFingerprint(fingerprint)) return;
-  try {
-    rmSync2(hintFile(fingerprint), { force: true });
-  } catch {
-    return;
-  }
-};
-
-export {
-  reportMachineDenial,
-  defersToNativeMode,
-  userScope,
-  codexCallKey,
-  recordCodexCallDecision,
-  consumeCodexCallDecision,
-  blockedActionFingerprint,
-  recordBlockedActionHint,
-  hasBlockedActionHint,
-  forgetBlockedActionHint
-};