@pushary/agent-hooks 1.9.1 → 1.9.2

package/dist/{chunk-IJXJW2VH.js → chunk-VMGLXL74.js}

@@ -1,15 +1,15 @@
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-NVLXK2I6.js";
+} from "./chunk-ESME4HN2.js";
 import {
   defersToNativeMode,
   reportMachineDenial
-} from "./chunk-GHKNUQYU.js";
+} from "./chunk-N2ATGXI4.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-P7YDVWLL.js";
+} from "./chunk-MZXXLIF6.js";
 import {
   announceSubscriptionRequired,
   denyReasonFrom,
@@ -39,7 +39,7 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-JCER3Q6P.js";
+} from "./chunk-35N53QLA.js";
 import {
   DEFAULT_SESSION
 } from "./chunk-N6IOSZOE.js";
@@ -55,20 +55,20 @@ import {
   requestGate,
   sendNotification,
   waitForQuestion
-} from "./chunk-JHZAZAI3.js";
+} from "./chunk-HZYUDXIH.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-VH6763OR.js";
+} from "./chunk-XOXW4D6P.js";
 import {
   getMachineId
-} from "./chunk-J7JXA2LX.js";
+} from "./chunk-3O4EBTR3.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-L52OIZXV.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-FVOCQSBG.js";
+} from "./chunk-ABIW72ST.js";
 import {
   AGENT_QUESTION_STRATEGY,
   GATE_BLOCK_REASON_MAX_LENGTH,
@@ -96,7 +96,7 @@ import {
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-ZFDGCEKO.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";

package/dist/{chunk-PEGKBNGN.js → chunk-WCHFDVCC.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-RJ7ECJSZ.js";
+} from "./chunk-ZNUNWWCN.js";
 import {
   getMachineId
-} from "./chunk-J7JXA2LX.js";
+} from "./chunk-3O4EBTR3.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-HZ57E6LS.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,14 +20,14 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-L52OIZXV.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
   getPackageVersion,
   globalPackageFolder,
   globalRootFor
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-ZFDGCEKO.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-6L7TNZ43.js → chunk-WM2MEFCA.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-HZ57E6LS.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-VH6763OR.js → chunk-XOXW4D6P.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-DMA3QUOB.js";
+} from "./chunk-Y6DSV2OS.js";
 import {
   installNetworkDefaults
-} from "./chunk-6JTTJIKJ.js";
+} from "./chunk-V3P2VSX7.js";
 import {
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-L52OIZXV.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-SPB3QRE7.js → chunk-XXSAGQAV.js}

@@ -4,18 +4,18 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   isNetworkFailure
-} from "./chunk-6JTTJIKJ.js";
+} from "./chunk-V3P2VSX7.js";
 import {
   clientReportClaims
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-HZ57E6LS.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-L52OIZXV.js";
 import {
   CLIENT_REPORT_PATH,
   degradedLine
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-ZFDGCEKO.js";
 
 // src/client-report-claim.ts
 import { createHash } from "crypto";

package/dist/{chunk-C6PPDKVI.js → chunk-Y4AUVOR7.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-HU2LWGEE.js";
+} from "./chunk-CEHDCHXK.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-FVOCQSBG.js";
+} from "./chunk-ABIW72ST.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-ZFDGCEKO.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-DMA3QUOB.js → chunk-Y6DSV2OS.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-6JTTJIKJ.js";
+} from "./chunk-V3P2VSX7.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-L52OIZXV.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-ZFDGCEKO.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-4XT4JXMG.js → chunk-Y73RBCQD.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-RJ7ECJSZ.js";
+} from "./chunk-ZNUNWWCN.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-XEIV5QOT.js → chunk-ZFDGCEKO.js}

@@ -1822,6 +1822,16 @@ var SETTLED_OUTCOME = {
   deny: "deny"
 };
 var isSettledOutcome = (value) => typeof value === "string" && SETTLED_OUTCOMES.includes(value);
+var APPROVE_RESPONSES = /* @__PURE__ */ new Set(["yes", "approve", "approved"]);
+var DENY_RESPONSES = /* @__PURE__ */ new Set(["no", "deny", "denied", "reject", "rejected"]);
+var DEFER_RESPONSES = /* @__PURE__ */ new Set(["defer"]);
+var classifyConfirmResponse = (response) => {
+  const normalized = (response ?? "").trim().toLowerCase();
+  if (APPROVE_RESPONSES.has(normalized)) return "approve";
+  if (DENY_RESPONSES.has(normalized)) return "deny";
+  if (DEFER_RESPONSES.has(normalized)) return "defer";
+  return null;
+};
 var commandTextThatCanAct = (command) => {
   const visible = shellVisibleText(command);
   return visible === null ? command : segmentsSplitWhereVisible(command, visible, PIPELINE_CHAIN_SEPARATOR).filter((pipeline) => !isSafeReadOnlyCommand(pipeline)).join("\n");
@@ -2607,10 +2617,11 @@ var elicitationContentFromAnswers = (ask, answers) => {
 // ../contracts/src/hook-activation.ts
 var hookWritePath = (toolName, input) => toolName === "Write" && typeof input.file_path === "string" && input.file_path.startsWith("/") && input.file_path.length <= 4096 ? input.file_path : void 0;
 var HOOK_ACTIVATION_RESULTS = ["unverified", "approved_executed", "denied_observed", "unexpected_execution", "tool_failed"];
+var MAX_HOOK_ACTIVATION_EVIDENCE_ROWS = 20;
 var isHookActivationReport = (value) => {
   if (!value || typeof value !== "object") return false;
   const report = value;
-  return typeof report.agentType === "string" && typeof report.machineId === "string" && typeof report.target === "string" && report.target.length > 0 && report.target.length <= 4096 && typeof report.truncated === "boolean" && Array.isArray(report.evidence) && report.evidence.length <= 20 && (!report.truncated || report.evidence.length === 0) && report.evidence.every((item) => {
+  return typeof report.agentType === "string" && typeof report.machineId === "string" && typeof report.target === "string" && report.target.length > 0 && report.target.length <= 4096 && typeof report.truncated === "boolean" && Array.isArray(report.evidence) && report.evidence.length <= MAX_HOOK_ACTIVATION_EVIDENCE_ROWS && (!report.truncated || report.evidence.length === 0) && report.evidence.every((item) => {
     if (!item || typeof item !== "object") return false;
     const row = item;
     return ["correlationId", "sessionId", "toolUseId", "toolName", "createdAt"].every((key) => typeof row[key] === "string" && row[key].length > 0 && row[key].length <= 256) && (row.answerSource === null || isAnswerSource(row.answerSource)) && HOOK_ACTIVATION_RESULTS.includes(row.result) && Number.isFinite(Date.parse(row.createdAt)) && (row.occurredAt === null || typeof row.occurredAt === "string" && Number.isFinite(Date.parse(row.occurredAt))) && (row.observedAt === null || typeof row.observedAt === "string" && Number.isFinite(Date.parse(row.observedAt))) && (row.result === "unverified" || row.occurredAt !== null && row.observedAt !== null && row.producer !== null && isAnswerSource(row.answerSource) && row.answerSource !== "sandbox") && (row.producer === null || row.producer === "hook" || row.producer === "uplink");
@@ -2790,6 +2801,7 @@ export {
   redactSecretsDeep,
   degradedLine,
   hookWritePath,
+  MAX_HOOK_ACTIVATION_EVIDENCE_ROWS,
   isHookActivationReport,
   hookActivationResult,
   PAIR_TTL_SECONDS,
@@ -2832,6 +2844,7 @@ export {
   ASK_AGENT_NAME_MAX,
   truncateLine,
   isAnswerSource,
+  classifyConfirmResponse,
   buildDecisionEpisodeFeatures,
   resolveAutoResolveOrigin,
   resolvePolicy,

package/dist/{chunk-RJ7ECJSZ.js → chunk-ZNUNWWCN.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-6QSDNXGM.js";
+} from "./chunk-UBCTOE5X.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,7 +9,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   configFilePath
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-L52OIZXV.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";
@@ -110,6 +110,7 @@ var isDisabledExport = (line) => {
   return OUR_EXPORT.test(trimmed.slice(1, -LOGOUT_MARK.length).trim());
 };
 var keyPrefix = (key) => key.split(".")[0] ?? key;
+var manualKeyStepFor = (kind, platform) => kind === "no-rc" || platform === "win32" ? "config-only" : "paste-export";
 var rcResult = (kind, over = {}) => ({
   kind,
   path: null,
@@ -298,6 +299,7 @@ export {
   exportLine,
   isDisabledExport,
   keyPrefix,
+  manualKeyStepFor,
   writeKey,
   clearKey,
   readConfigFileKey,

package/dist/{chunk-V4H33GBM.js → chunk-ZSOFZDLY.js}

@@ -1,17 +1,17 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-LJI7U6PM.js";
+} from "./chunk-SFKU5DXZ.js";
 import {
   openCodeConfigDirFrom
-} from "./chunk-CGRPHFOV.js";
+} from "./chunk-AL4NHBZ6.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-RJ7ECJSZ.js";
+} from "./chunk-ZNUNWWCN.js";
 import {
   NpmMissingError,
   codexHomeFrom,
   resolvePathBinary
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-HZ57E6LS.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -19,10 +19,10 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-FVOCQSBG.js";
+} from "./chunk-ABIW72ST.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-ZFDGCEKO.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{global-upgrade-ML2RHV4W.js → global-upgrade-N24WINE7.js}

@@ -5,15 +5,15 @@ import {
   readGlobalUpgradeSubject,
   upgradeInstalledPackage,
   withUpgradeLock
-} from "./chunk-QQJCDRD3.js";
-import "./chunk-QXL27RY6.js";
-import "./chunk-CE4UH4AP.js";
+} from "./chunk-6S727YUV.js";
+import "./chunk-JXLANQLV.js";
+import "./chunk-COVPHB56.js";
 import "./chunk-POFBE6ZY.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-ZMKEKWNR.js";
+import "./chunk-HZ57E6LS.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-FVOCQSBG.js";
-import "./chunk-XEIV5QOT.js";
+import "./chunk-ABIW72ST.js";
+import "./chunk-ZFDGCEKO.js";
 export {
   finishGlobalUpgrade,
   finishUpgradeWithLock,

package/dist/{paths-LG3IEDDM.js → paths-53PCHAOJ.js}

@@ -32,8 +32,8 @@ import {
   pusharyDir,
   vscodePluginDir,
   vscodePluginMcp
-} from "./chunk-ZMKEKWNR.js";
-import "./chunk-XEIV5QOT.js";
+} from "./chunk-HZ57E6LS.js";
+import "./chunk-ZFDGCEKO.js";
 export {
   autoUpdateLock,
   autoUpdateLog,

package/dist/{reapply-7PFOITE4.js → reapply-2SU2ZHEK.js}

@@ -9,18 +9,18 @@ import {
   reapplyGeminiSettings,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-SWGY5WNX.js";
-import "./chunk-KR5JASA4.js";
-import "./chunk-6Q4NM2LW.js";
+} from "./chunk-QDCEEQUS.js";
+import "./chunk-SI327OZF.js";
+import "./chunk-FHLRRCUZ.js";
 import "./chunk-RIVNNBEK.js";
-import "./chunk-5K43TBK4.js";
-import "./chunk-D3RS57MN.js";
+import "./chunk-EUNYNLDU.js";
+import "./chunk-B6BLCHJW.js";
 import "./chunk-XHKBHWLX.js";
 import "./chunk-6ICPEJY5.js";
-import "./chunk-RNDFGHSQ.js";
-import "./chunk-ZMKEKWNR.js";
+import "./chunk-RTKPR4UA.js";
+import "./chunk-HZ57E6LS.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-XEIV5QOT.js";
+import "./chunk-ZFDGCEKO.js";
 export {
   ensureCodexTrustAfterReapply,
   inspectConfiguredManagedProviders,

package/dist/src/index.js

@@ -1,15 +1,15 @@
 import {
   handlePreToolUse
-} from "../chunk-IJXJW2VH.js";
-import "../chunk-NVLXK2I6.js";
-import "../chunk-6Q4NM2LW.js";
-import "../chunk-GHKNUQYU.js";
-import "../chunk-P7YDVWLL.js";
+} from "../chunk-VMGLXL74.js";
+import "../chunk-ESME4HN2.js";
+import "../chunk-FHLRRCUZ.js";
+import "../chunk-N2ATGXI4.js";
+import "../chunk-MZXXLIF6.js";
 import "../chunk-5OP5MQI7.js";
-import "../chunk-D3RS57MN.js";
+import "../chunk-B6BLCHJW.js";
 import {
   fetchAccountPublicKey
-} from "../chunk-PMS3EBD2.js";
+} from "../chunk-UX2YSFKS.js";
 import "../chunk-6ICPEJY5.js";
 import {
   fetchModeOverride,
@@ -19,33 +19,33 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-JCER3Q6P.js";
+} from "../chunk-35N53QLA.js";
 import "../chunk-N6IOSZOE.js";
-import "../chunk-RNDFGHSQ.js";
+import "../chunk-RTKPR4UA.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
-} from "../chunk-JHZAZAI3.js";
-import "../chunk-SPB3QRE7.js";
+} from "../chunk-HZYUDXIH.js";
+import "../chunk-XXSAGQAV.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-VH6763OR.js";
-import "../chunk-DMA3QUOB.js";
-import "../chunk-6JTTJIKJ.js";
-import "../chunk-J7JXA2LX.js";
+import "../chunk-XOXW4D6P.js";
+import "../chunk-Y6DSV2OS.js";
+import "../chunk-V3P2VSX7.js";
+import "../chunk-3O4EBTR3.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-6QSDNXGM.js";
-import "../chunk-ZMKEKWNR.js";
+import "../chunk-UBCTOE5X.js";
+import "../chunk-HZ57E6LS.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-4SB46XLF.js";
-import "../chunk-FVOCQSBG.js";
+} from "../chunk-L52OIZXV.js";
+import "../chunk-ABIW72ST.js";
 import {
   resolvePolicy
-} from "../chunk-XEIV5QOT.js";
+} from "../chunk-ZFDGCEKO.js";
 export {
   askUser,
   cancelQuestion,

package/dist/{upgrade-lock-2A2YUUEU.js → upgrade-lock-F6SM6IEZ.js}

@@ -4,10 +4,10 @@ import {
   installWithUpgradeLock,
   ownsUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-QXL27RY6.js";
-import "./chunk-ZMKEKWNR.js";
+} from "./chunk-JXLANQLV.js";
+import "./chunk-HZ57E6LS.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-XEIV5QOT.js";
+import "./chunk-ZFDGCEKO.js";
 export {
   claimUpgradeLock,
   finishWithUpgradeLock,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "1.9.1",
+  "version": "1.9.2",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",