@pushary/agent-hooks 1.7.3 → 1.8.0

package/dist/{chunk-EADXTSHE.js → chunk-7Z7Q4GGS.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-BGBLLHZ4.js";
+} from "./chunk-ZVSKMPBZ.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-G4GLCLKK.js";
+} from "./chunk-NQTHFF4W.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-MZBRL5H5.js → chunk-A2A2YTMG.js}

@@ -1,16 +1,25 @@
 import {
+  CLI_PACKAGE_NAMES,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
+  OWNERSHIP_PROBE_COMMAND,
+  classifyGlobalFolder,
+  classifyGlobalInstall,
+  cmdShimTarget,
+  decideCommandOwner,
+  globalInstallTarget,
+  globalPackageFolder,
+  globalRootFor,
   isReleaseVersion,
+  ownPackageName,
   withHookHoldBudget
-} from "./chunk-G4GLCLKK.js";
+} from "./chunk-NQTHFF4W.js";
 
 // src/npm.ts
 import { execFileSync, execSync } from "child_process";
-import { existsSync, readFileSync, realpathSync } from "fs";
+import { existsSync, readFileSync, readlinkSync, realpathSync } from "fs";
 import { dirname, isAbsolute, join, relative, resolve } from "path";
-var AGENT_HOOKS_PACKAGE = "@pushary/agent-hooks";
-var LATEST_RELEASE_URL = `https://registry.npmjs.org/${AGENT_HOOKS_PACKAGE}/latest`;
+var latestReleaseUrl = (packageName) => `https://registry.npmjs.org/${packageName}/latest`;
 var REGISTRY_TIMEOUT_MS = 5e3;
 var LATEST_TAG = "latest";
 var cleanNpmEnv = () => {
@@ -36,15 +45,21 @@ var execNpm = (args, options = {}) => {
     env: { ...cleanNpmEnv(), ...options.env ?? {} }
   });
 };
-var resolveGlobalBinary = (name) => {
+var GLOBAL_PREFIX_TIMEOUT_MS = 5e3;
+var readGlobalPrefix = () => {
   try {
-    const prefix = execNpm("prefix -g --no-workspaces", { timeout: 5e3 }).toString().trim();
-    const candidates = process.platform === "win32" ? [join(prefix, `${name}.cmd`), join(prefix, name)] : [join(prefix, "bin", name)];
-    return candidates.find(existsSync);
+    const prefix = execNpm("prefix -g --no-workspaces", { timeout: GLOBAL_PREFIX_TIMEOUT_MS }).toString().trim();
+    return prefix === "" ? void 0 : prefix;
   } catch {
     return void 0;
   }
 };
+var resolveGlobalBinary = (name) => {
+  const prefix = readGlobalPrefix();
+  if (prefix === void 0) return void 0;
+  const candidates = process.platform === "win32" ? [join(prefix, `${name}.cmd`), join(prefix, name)] : [join(prefix, "bin", name)];
+  return candidates.find(existsSync);
+};
 var resolvePathBinary = (name, platform = process.platform) => {
   try {
     return execFileSync(platform === "win32" ? "where" : "which", [name], {
@@ -155,29 +170,79 @@ var AGENT_HOOKS_RUNTIME_FILES = [
   "data/cursor-plugin/hooks/hooks.json",
   "data/cursor-plugin/mcp.json",
   "data/cursor-plugin/scripts/pushary-gate.mjs",
+  "data/cursor-plugin/scripts/redaction.mjs",
   "data/vscode-plugin/.claude-plugin/plugin.json",
   "data/vscode-plugin/hooks/hooks.json",
   "data/vscode-plugin/.mcp.json",
-  "data/vscode-plugin/scripts/pushary-gate.mjs"
+  "data/vscode-plugin/scripts/pushary-gate.mjs",
+  "data/vscode-plugin/scripts/redaction.mjs"
 ];
-var globalPackageBinsPresent = (name) => {
+var globalPackageBinsPresent = (name, prefix, platform) => packageBinsPresent(globalPackageFolder(globalRootFor(prefix, platform), name, platform), prefix, platform, AGENT_HOOKS_RUNTIME_FILES);
+var errorCode = (error) => typeof error === "object" && error !== null && "code" in error ? error.code : void 0;
+var realpathOrUndefined = (path) => {
   try {
-    const root = execNpm("root -g --no-workspaces", { timeout: 5e3 }).toString().trim();
-    const prefix = execNpm("prefix -g --no-workspaces", { timeout: 5e3 }).toString().trim();
-    return packageBinsPresent(join(root, ...name.split("/")), prefix, process.platform, AGENT_HOOKS_RUNTIME_FILES);
+    return realpathSync(path);
   } catch {
-    return false;
+    return void 0;
+  }
+};
+var definedPaths = (paths) => paths.filter((path) => path !== void 0);
+var readPosixCommandLink = (prefix) => {
+  const command = join(prefix, "bin", OWNERSHIP_PROBE_COMMAND);
+  try {
+    const target = resolve(dirname(command), readlinkSync(command));
+    return { kind: "resolved", targets: definedPaths([target, realpathOrUndefined(command)]) };
+  } catch (error) {
+    if (errorCode(error) === "ENOENT") return { kind: "absent" };
+    const real = realpathOrUndefined(command);
+    return real === void 0 ? { kind: "unreadable" } : { kind: "resolved", targets: [real] };
+  }
+};
+var readWindowsCommandLink = (prefix) => {
+  const shim = join(prefix, `${OWNERSHIP_PROBE_COMMAND}.cmd`);
+  try {
+    const target = cmdShimTarget(prefix, readFileSync(shim, "utf8"));
+    return target === void 0 ? { kind: "unreadable" } : { kind: "resolved", targets: [target] };
+  } catch (error) {
+    return errorCode(error) === "ENOENT" ? { kind: "absent" } : { kind: "unreadable" };
   }
 };
+var readCommandLink = (prefix, platform) => platform === "win32" ? readWindowsCommandLink(prefix) : readPosixCommandLink(prefix);
+var readFolderManifest = (folder) => {
+  try {
+    return { kind: "read", manifest: JSON.parse(readFileSync(join(folder, "package.json"), "utf8")) };
+  } catch {
+    return { kind: "unreadable" };
+  }
+};
+var readGlobalFolder = (root, name, platform = process.platform) => classifyGlobalFolder(name, readFolderManifest(globalPackageFolder(root, name, platform)));
+var installedIfOurs = (folder) => folder.kind === "ours" ? [folder.installed] : [];
+var readInstalledCliPackages = (root, platform = process.platform) => CLI_PACKAGE_NAMES.flatMap((name) => installedIfOurs(readGlobalFolder(root, name, platform)));
+var globalRootsFor = (prefix, platform) => {
+  const root = globalRootFor(prefix, platform);
+  return definedPaths([root, realpathOrUndefined(root)]);
+};
+var readCommandOwner = (prefix, platform = process.platform) => decideCommandOwner({
+  platform,
+  globalRoots: globalRootsFor(prefix, platform),
+  link: readCommandLink(prefix, platform),
+  installed: readInstalledCliPackages(globalRootFor(prefix, platform), platform).map((installed) => installed.name)
+});
+var NPM_UNAVAILABLE_OWNER = { kind: "unknown", reason: "npm_unavailable" };
+var readGlobalCliInstallAt = (prefix, platform = process.platform) => classifyGlobalInstall(readInstalledCliPackages(globalRootFor(prefix, platform), platform), readCommandOwner(prefix, platform));
+var readGlobalCliInstall = (platform = process.platform) => {
+  const prefix = readGlobalPrefix();
+  return prefix === void 0 ? { kind: "unavailable" } : readGlobalCliInstallAt(prefix, platform);
+};
 var resolveGlobalBinDir = (probe) => {
   if (process.platform === "win32") return void 0;
   const resolved = resolveGlobalBinary(probe);
   return resolved ? resolved.slice(0, resolved.length - probe.length - 1) : void 0;
 };
 var quoteIfNeeded = (path) => /\s/.test(path) ? `"${path}"` : path;
-var fetchLatestPublishedVersion = async (request = {}) => {
+var fetchLatestPublishedVersion = async (request) => {
   try {
-    const response = await (request.fetchImpl ?? fetch)(LATEST_RELEASE_URL, {
+    const response = await (request.fetchImpl ?? fetch)(latestReleaseUrl(request.packageName), {
       signal: AbortSignal.timeout(request.timeoutMs ?? REGISTRY_TIMEOUT_MS)
     });
     if (!response.ok) return void 0;
@@ -190,29 +255,42 @@ var fetchLatestPublishedVersion = async (request = {}) => {
 };
 var POSIX_SHELL_WORD = /^[\w@%+=:,./-]+$/;
 var quoteForPosixShell = (value) => POSIX_SHELL_WORD.test(value) ? value : `'${value.replaceAll("'", `'\\''`)}'`;
-var installAgentHooksGlobally = (request, runNpm = execNpm) => {
+var installPackageGlobally = (request, runNpm = execNpm) => {
   const prefixFlag = request.prefix === void 0 ? "" : ` --prefix ${quoteForPosixShell(request.prefix)}`;
-  const spec = quoteForPosixShell(`${AGENT_HOOKS_PACKAGE}@${request.version}`);
+  const spec = quoteForPosixShell(`${request.packageName}@${request.version}`);
   runNpm(`install -g --no-workspaces${prefixFlag} ${spec}`, { timeout: request.timeoutMs });
 };
 var needsGlobalInstall = (requested, installed, binaryPresent) => requested !== installed || !binaryPresent;
+var planGlobalInstall = (platform) => {
+  const prefix = readGlobalPrefix();
+  const owner = prefix === void 0 ? NPM_UNAVAILABLE_OWNER : readCommandOwner(prefix, platform);
+  return { prefix, packageName: globalInstallTarget(owner, ownPackageName()) };
+};
+var plannedGlobalPackage = () => planGlobalInstall(process.platform).packageName;
+var installedVersionOf = (prefix, name, platform) => {
+  const folder = readGlobalFolder(globalRootFor(prefix, platform), name, platform);
+  return folder.kind === "ours" ? folder.installed.version : void 0;
+};
+var asCachedResult = (result) => result === "installed" ? "cached" : result;
 var installState;
 var installGlobally = (options) => {
   if (installState) {
-    return installState.then((result) => result === "installed" ? "cached" : result);
+    return installState.then(asCachedResult);
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
+    const platform = process.platform;
+    const { prefix, packageName } = planGlobalInstall(platform);
     const pinned = process.env.PUSHARY_PIN_GLOBAL_VERSION !== "0";
-    if (pinned && !needsGlobalInstall(
+    if (pinned && prefix !== void 0 && !needsGlobalInstall(
       options.version,
-      resolveGlobalPackageVersion(AGENT_HOOKS_PACKAGE),
-      globalPackageBinsPresent(AGENT_HOOKS_PACKAGE)
+      installedVersionOf(prefix, packageName, platform),
+      globalPackageBinsPresent(packageName, prefix, platform)
     )) {
       return "skipped";
     }
     const version = pinned && options.version && options.version !== "0.0.0" ? options.version : LATEST_TAG;
-    installAgentHooksGlobally({ version, timeoutMs: options.timeoutMs ?? 12e4 });
+    installPackageGlobally({ packageName, version, timeoutMs: options.timeoutMs ?? 12e4 });
     return "installed";
   })();
   installState = started;
@@ -670,10 +748,11 @@ export {
   registeredCommands,
   namesOurBinary,
   registrationHolderOf,
-  AGENT_HOOKS_PACKAGE,
   LATEST_TAG,
+  cleanNpmEnv,
   npmErrorMessage,
   execNpm,
+  readGlobalPrefix,
   resolveGlobalBinary,
   resolvePathBinary,
   npmIsOnPath,
@@ -682,9 +761,13 @@ export {
   resolveBinary,
   resolvePackageVersionFromBinary,
   resolveGlobalPackageVersion,
+  readGlobalFolder,
+  readGlobalCliInstallAt,
+  readGlobalCliInstall,
   resolveGlobalBinDir,
   fetchLatestPublishedVersion,
-  installAgentHooksGlobally,
+  installPackageGlobally,
+  plannedGlobalPackage,
   installGlobally,
   holdBudgetOf,
   guardBinary,

package/dist/{chunk-KEL5MXRL.js → chunk-AHV4LNB5.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-G4GLCLKK.js";
+} from "./chunk-NQTHFF4W.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-G3OMOTJ4.js → chunk-AXPCESYO.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-MIXWMA73.js";
+} from "./chunk-3EVPNIBE.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-MZBRL5H5.js";
+} from "./chunk-A2A2YTMG.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-G4GLCLKK.js";
+} from "./chunk-NQTHFF4W.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-3EUBQARL.js → chunk-C2WCPBF7.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-G4GLCLKK.js";
+} from "./chunk-NQTHFF4W.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/chunk-CJVVKOSR.js

@@ -0,0 +1,73 @@
+import {
+  AUTO_DECISION_WINDOW_MS,
+  claimThrottle,
+  deriveToolTarget,
+  permissionDeniedAction,
+  releaseThrottle,
+  reportEvent
+} from "./chunk-CULUZTWQ.js";
+import {
+  DEFAULT_SESSION
+} from "./chunk-N6IOSZOE.js";
+import {
+  machineDecisionFor,
+  shouldDeferToNativeMode,
+  wireVerdictFor
+} from "./chunk-NQTHFF4W.js";
+
+// src/machine-decision-audit.ts
+import { basename } from "path";
+var reportMachineDenial = async (input, verdict, agent) => {
+  const decision = machineDecisionFor(wireVerdictFor(verdict, 0));
+  if (!decision) return;
+  const sessionKey = input.session_id || DEFAULT_SESSION;
+  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+  const throttleKey = `machinedecision:${agent.type}:${sessionKey}:${input.tool_name}:${decision.origin}:${toolTarget ?? ""}`;
+  const throttle = claimThrottle(throttleKey, AUTO_DECISION_WINDOW_MS);
+  if (throttle === "throttled") return;
+  if (throttle === "unavailable") {
+    console.error("[Pushary] Could not access the audit throttle; reporting this denial without deduplication.");
+  }
+  try {
+    const response = await reportEvent({
+      event: "permission_denied",
+      occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
+      toolUseId: input.tool_use_id,
+      agentType: agent.type,
+      agentName: `${agent.label} - ${basename(input.cwd ?? process.cwd())}`,
+      action: permissionDeniedAction(input.tool_name),
+      sessionId: input.session_id,
+      decisionSource: "policy_auto",
+      decisionOrigin: decision.origin,
+      decisionOutcome: decision.outcome,
+      toolName: input.tool_name,
+      toolTarget
+    }, { maxAttempts: 1, timeoutMs: 800, requireOk: true, skipDrain: true });
+    if (response?.ok !== true) throw new Error("Audit delivery was not acknowledged");
+  } catch {
+    console.error("[Pushary] Could not record the machine denial. The action remains blocked; its audit delivery will be retried on the next matching denial.");
+    if (throttle === "passed") {
+      try {
+        releaseThrottle(throttleKey);
+      } catch {
+        console.error("[Pushary] Could not reset the failed audit throttle.");
+      }
+    }
+  }
+};
+
+// src/native-defer.ts
+var nativeDeferOptions = () => {
+  const respect = process.env.PUSHARY_RESPECT_PERMISSION_MODE;
+  const bypass = process.env.PUSHARY_DEFER_BYPASS;
+  return {
+    respectPermissionMode: !(respect === "0" || respect === "false"),
+    deferBypass: bypass === "1" || bypass === "true"
+  };
+};
+var defersToNativeMode = (permissionMode, toolName) => shouldDeferToNativeMode(permissionMode, toolName, nativeDeferOptions());
+
+export {
+  reportMachineDenial,
+  defersToNativeMode
+};