@pushary/agent-hooks 1.9.10 → 1.9.11

package/dist/{chunk-C6QTMWJZ.js → chunk-AIWZRRSK.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-UJZ7AGSC.js";
+} from "./chunk-4FWWHCYM.js";
 import {
   readJsonSafe,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-OL2Z7WI4.js → chunk-BDRXDO25.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-I3W7GJ5R.js";
+} from "./chunk-KBN3UP2R.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-TCXL5FQQ.js";
+} from "./chunk-M54ATCOZ.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-S2DAKKQQ.js → chunk-BMP2BLIR.js}

@@ -1,13 +1,13 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-QAGWWDXQ.js";
+} from "./chunk-KIVFWGG6.js";
 import {
   codexHomeFrom,
   resolvePathBinary
-} from "./chunk-UJZ7AGSC.js";
+} from "./chunk-4FWWHCYM.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-QGRENWJL.js → chunk-BZI7EBTB.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-GTZ4HIHU.js";
+} from "./chunk-Z4AOR6RZ.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-2HFSKYLN.js → chunk-C6QM5SJR.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-TCXL5FQQ.js";
+} from "./chunk-M54ATCOZ.js";
 import {
   getPackageVersion
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-Q3UMWSE4.js → chunk-CBDJ2X5P.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-2M52CFVO.js";
+} from "./chunk-FJCOOFT7.js";
 import {
   normalizeInstallSource
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-DWO4RLYK.js → chunk-CHDAH4HP.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   ensureDaemonRunning
-} from "./chunk-RPQLZLKC.js";
+} from "./chunk-PTGUJZSD.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-APP43AW7.js";
+} from "./chunk-2GG77ADC.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-MISUKJGW.js";
+} from "./chunk-N7HXP4PZ.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-QGRENWJL.js";
+} from "./chunk-BZI7EBTB.js";
 import {
   hookOwnerOf
-} from "./chunk-SIHYBIEN.js";
+} from "./chunk-7RWQZQV2.js";
 import {
   readTranscriptPreference
-} from "./chunk-GTZ4HIHU.js";
+} from "./chunk-Z4AOR6RZ.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-UJZ7AGSC.js";
+} from "./chunk-4FWWHCYM.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-2M52CFVO.js";
+} from "./chunk-FJCOOFT7.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-PR2VDVCP.js → chunk-CZYMYM7X.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-MD4SVNT6.js";
+} from "./chunk-E6YQW43K.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-UJZ7AGSC.js";
+} from "./chunk-4FWWHCYM.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-MD4SVNT6.js → chunk-E6YQW43K.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-UM5WXBKN.js → chunk-EJVYEOKC.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-H4F5O3RE.js";
+} from "./chunk-2NAQRPZQ.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-2M52CFVO.js";
+} from "./chunk-FJCOOFT7.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-5MQYA3YL.js → chunk-ERXY2SIW.js}

@@ -1,22 +1,23 @@
 import {
   defersToNativeMode,
   reportMachineDenial
-} from "./chunk-CJYM4ZHV.js";
+} from "./chunk-ZTSMQYST.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-IIVZZMSO.js";
+} from "./chunk-2AQ4VZSA.js";
 import {
   announceSubscriptionRequired,
   denyReasonFrom,
   isDeferAnswer,
   oncePerSession
-} from "./chunk-5OP5MQI7.js";
+} from "./chunk-V6IW5WMK.js";
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-7HGR5GNY.js";
+} from "./chunk-KEV2MOJH.js";
 import {
+  DEFAULT_SESSION,
   UNNAMED_ACTION,
   approvalAwaitingRetry,
   blockedActionFingerprint,
@@ -39,10 +40,7 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-LDQGURCF.js";
-import {
-  DEFAULT_SESSION
-} from "./chunk-N6IOSZOE.js";
+} from "./chunk-A6J5Z2HO.js";
 import {
   askUser,
   cancelQuestion,
@@ -53,20 +51,20 @@ import {
   requestGate,
   sendNotification,
   waitForQuestion
-} from "./chunk-ZSGJYSF2.js";
+} from "./chunk-GUNZHSTL.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-I3W7GJ5R.js";
+} from "./chunk-KBN3UP2R.js";
 import {
   getMachineId
-} from "./chunk-H4F5O3RE.js";
+} from "./chunk-2NAQRPZQ.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-2M52CFVO.js";
+} from "./chunk-FJCOOFT7.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-TCXL5FQQ.js";
+} from "./chunk-M54ATCOZ.js";
 import {
   AGENT_QUESTION_STRATEGY,
   DECISION_STOP_REASON,
@@ -88,6 +86,7 @@ import {
   claudeStoppedPreToolUseOutput,
   editGoesToTheAgentsPrompt,
   effectiveWaitSeconds,
+  hasNativeApprovalPrompt,
   hookHoldWindowMs,
   hookWaitClamped,
   hookWaitDeadline,
@@ -99,7 +98,7 @@ import {
   parseAgentQuestions,
   questionHandedToTheTerminal,
   resolveGate
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";
@@ -350,10 +349,14 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
   }
   return result;
 };
+var handsUnansweredToTheTerminal = (source) => source === null || hasNativeApprovalPrompt(source, "PreToolUse");
+var phoneWaitHandoff = (source, waitSeconds) => {
+  if (waitSeconds <= 0) return "Waiting for your answer.";
+  return handsUnansweredToTheTerminal(source) ? `Waiting ${waitSeconds}s, then this terminal takes over.` : `Waiting ${waitSeconds}s. If nobody answers, it does not run.`;
+};
 var announceWait = (waitSeconds, answerUrl, sessionId) => {
   try {
-    const handoff = waitSeconds > 0 ? `Waiting ${waitSeconds}s, then this terminal takes over.` : "Waiting for your answer.";
-    process.stderr.write(`[pushary] Sent to your phone. ${handoff}
+    process.stderr.write(`[pushary] Sent to your phone. ${phoneWaitHandoff(ACTIVE_SOURCE, waitSeconds)}
 `);
     if (answerUrl && oncePerSession("answerurl", sessionId)) {
       process.stderr.write(`          Answer here instead: ${answerUrl}

package/dist/{chunk-2M52CFVO.js → chunk-FJCOOFT7.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-TCXL5FQQ.js";
+} from "./chunk-M54ATCOZ.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-Y7JM47CI.js → chunk-GA4J6YFN.js}

@@ -8,10 +8,10 @@ import {
   codexHooksJsonIn,
   isPusharyCodexCommand,
   resolvePathBinary
-} from "./chunk-UJZ7AGSC.js";
+} from "./chunk-4FWWHCYM.js";
 import {
   getPackageVersion
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/codex-app-server.ts
 import { existsSync, realpathSync } from "fs";

package/dist/{chunk-ZSGJYSF2.js → chunk-GUNZHSTL.js}

@@ -1,23 +1,147 @@
+import {
+  CLIENT_REPORT_DISABLE_ENV,
+  isDisabledByEnv
+} from "./chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-I3W7GJ5R.js";
+} from "./chunk-KBN3UP2R.js";
 import {
-  clientErrorKindOf,
-  reportClientError
-} from "./chunk-NQ67AF3V.js";
+  installNetworkDefaults,
+  isNetworkFailure
+} from "./chunk-EJVYEOKC.js";
 import {
-  installNetworkDefaults
-} from "./chunk-UM5WXBKN.js";
+  clientReportClaims
+} from "./chunk-4FWWHCYM.js";
 import {
+  getApiKey,
   getBaseUrl
-} from "./chunk-2M52CFVO.js";
+} from "./chunk-FJCOOFT7.js";
 import {
   ASK_AGENT_NAME_MAX,
   ASK_QUESTION_MAX,
+  CLIENT_REPORT_PATH,
   DECISION_LINE_MAX,
+  degradedLine,
   truncateLine
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
+
+// src/client-report-claim.ts
+import { createHash } from "crypto";
+import { closeSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";
+import { join } from "path";
+var CLIENT_REPORT_WINDOW_MS = 6e4;
+var CLAIM_DIRECTORY_MODE = 448;
+var CLAIM_FILE_MODE = 384;
+var CLAIM_KEY_HASH_LENGTH = 16;
+var CLAIM_FILE_PATTERN = /^[0-9a-f]{16}-(\d+)$/;
+var EXCLUSIVE_CREATE = "wx";
+var ALREADY_EXISTS = "EEXIST";
+var WINDOWS_KEPT_BEHIND = 1;
+var reportWindowOf = (now) => Math.floor(now / CLIENT_REPORT_WINDOW_MS);
+var claimFileName = (key, window) => `${createHash("sha256").update(key).digest("hex").slice(0, CLAIM_KEY_HASH_LENGTH)}-${window}`;
+var errorCodeOf = (error) => typeof error === "object" && error !== null && "code" in error && typeof error.code === "string" ? error.code : null;
+var claimWindowOf = (fileName) => {
+  const match = CLAIM_FILE_PATTERN.exec(fileName);
+  return match ? Number(match[1]) : null;
+};
+var isStaleClaim = (fileName, window) => {
+  const claimedWindow = claimWindowOf(fileName);
+  return claimedWindow !== null && claimedWindow < window - WINDOWS_KEPT_BEHIND;
+};
+var removeQuietly = (filePath) => {
+  try {
+    unlinkSync(filePath);
+  } catch {
+    return;
+  }
+};
+var removeStaleClaims = (claimsDir, window) => {
+  try {
+    for (const fileName of readdirSync(claimsDir)) {
+      if (isStaleClaim(fileName, window)) removeQuietly(join(claimsDir, fileName));
+    }
+  } catch {
+    return;
+  }
+};
+var claimReportWindow = (claimsDir, key, now) => {
+  const window = reportWindowOf(now);
+  try {
+    mkdirSync(claimsDir, { recursive: true, mode: CLAIM_DIRECTORY_MODE });
+    closeSync(openSync(join(claimsDir, claimFileName(key, window)), EXCLUSIVE_CREATE, CLAIM_FILE_MODE));
+  } catch (error) {
+    return errorCodeOf(error) === ALREADY_EXISTS ? "already_claimed" : "unavailable";
+  }
+  removeStaleClaims(claimsDir, window);
+  return "claimed";
+};
+
+// src/client-report.ts
+var CLIENT_REPORT_TIMEOUT_MS = 1e3;
+var readApiKey = () => {
+  try {
+    return getApiKey();
+  } catch {
+    return null;
+  }
+};
+var defaultDeps = () => ({
+  disabled: () => isDisabledByEnv(process.env, CLIENT_REPORT_DISABLE_ENV),
+  fetchImpl: fetch,
+  apiKey: readApiKey,
+  baseUrl: getBaseUrl,
+  now: Date.now,
+  claimsDir: clientReportClaims()
+});
+var reportKey = (event) => `${event.kind}:${event.code}`;
+var createClientErrorReporter = (deps) => {
+  const windowClaimedInProcess = /* @__PURE__ */ new Map();
+  const claimInProcess = (key, now) => {
+    if (windowClaimedInProcess.get(key) === reportWindowOf(now)) return false;
+    windowClaimedInProcess.set(key, reportWindowOf(now));
+    return true;
+  };
+  const claimReport = (key, now) => {
+    const claim = claimReportWindow(deps.claimsDir, key, now);
+    return claim === "unavailable" ? claimInProcess(key, now) : claim === "claimed";
+  };
+  return async (event) => {
+    try {
+      if (deps.disabled()) return;
+      const apiKey = deps.apiKey();
+      const now = deps.now();
+      if (!apiKey || !claimReport(reportKey(event), now)) return;
+      await deps.fetchImpl(`${deps.baseUrl()}${CLIENT_REPORT_PATH}`, {
+        method: "POST",
+        headers: { "Authorization": `Bearer ${apiKey}`, "Content-Type": "application/json" },
+        body: JSON.stringify({ ...event, occurredAt: new Date(now).toISOString() }),
+        signal: AbortSignal.timeout(CLIENT_REPORT_TIMEOUT_MS)
+      });
+    } catch {
+      return;
+    }
+  };
+};
+var processReporter = null;
+var inFlightReports = /* @__PURE__ */ new Set();
+var reportClientError = (event) => {
+  processReporter ??= createClientErrorReporter(defaultDeps());
+  const report = processReporter(event);
+  inFlightReports.add(report);
+  void report.finally(() => inFlightReports.delete(report));
+  return report;
+};
+var exitAfterClientReports = async (code) => {
+  await Promise.all(inFlightReports);
+  return process.exit(code);
+};
+var clientErrorKindOf = (error) => isNetworkFailure(error) ? "network" : "unexpected";
+var writeDegraded = (subsystem, report) => {
+  process.stderr.write(`${degradedLine(subsystem, report)}
+`);
+  void reportClientError({ kind: "degraded", code: `${subsystem}:${report.reason}` });
+};
 
 // src/api.ts
 import { randomUUID } from "crypto";
@@ -169,6 +293,10 @@ var claimBlockedAction = async (apiKey, request, timeoutMs) => {
 };
 
 export {
+  reportClientError,
+  exitAfterClientReports,
+  clientErrorKindOf,
+  writeDegraded,
   isPolicyConfig,
   isAskUserResponse,
   isWaitForAnswerResponse,

package/dist/{chunk-T6ZN4TEF.js → chunk-HX5TI6DP.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-XXLCYKVS.js → chunk-I4I4UH62.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-UM5WXBKN.js";
+} from "./chunk-EJVYEOKC.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-2M52CFVO.js";
+} from "./chunk-FJCOOFT7.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-I3W7GJ5R.js → chunk-KBN3UP2R.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-XXLCYKVS.js";
+} from "./chunk-I4I4UH62.js";
 import {
   installNetworkDefaults
-} from "./chunk-UM5WXBKN.js";
+} from "./chunk-EJVYEOKC.js";
 import {
   getBaseUrl
-} from "./chunk-2M52CFVO.js";
+} from "./chunk-FJCOOFT7.js";
 
 // src/retry.ts
 var isRetryable = (err) => {