@pushary/agent-hooks 1.9.16 → 1.9.18

package/dist/bin/pushary-codex-hook.js

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-ZH74RRGM.js";
+} from "../chunk-EYQBTAC6.js";
 import {
   defersToNativeMode,
   reportMachineDenial
-} from "../chunk-7BNU5AVD.js";
+} from "../chunk-XCOFZVQ3.js";
 import {
   triggerAutoUpdate
-} from "../chunk-JNZU2F5B.js";
+} from "../chunk-X5WZOZJY.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-WWTB4DAE.js";
+} from "../chunk-5SR5F4LH.js";
 import {
   readHookInput
-} from "../chunk-L52HDK35.js";
+} from "../chunk-JRAQENMR.js";
 import {
   announceSubscriptionRequired,
   denyReasonFrom,
   isDeferAnswer
-} from "../chunk-MN2QJA7K.js";
-import "../chunk-NM6IHHRO.js";
-import "../chunk-SGZJ5LYH.js";
-import "../chunk-PZ33VQ54.js";
-import "../chunk-QIOWXUFH.js";
-import "../chunk-OEMDXBV6.js";
-import "../chunk-JF2XRQR2.js";
+} from "../chunk-RN2HEOY2.js";
+import "../chunk-EXHTATWA.js";
+import "../chunk-6WEC3KZP.js";
+import "../chunk-JCVGBUCZ.js";
+import "../chunk-K4UPPZK4.js";
+import "../chunk-U4X3GQR2.js";
+import "../chunk-W3IBC4FG.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-PVOOKOKX.js";
-import "../chunk-ZOMVMLMU.js";
-import "../chunk-EDEIIKCV.js";
-import "../chunk-YKYFFCB5.js";
-import "../chunk-QJYBHKHO.js";
+import "../chunk-JN2PBSLX.js";
+import "../chunk-TGEOVHWA.js";
+import "../chunk-IHBVOC2Q.js";
+import "../chunk-JSD26D6B.js";
+import "../chunk-IB3WIIFC.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-DUDI3Z7F.js";
+import "../chunk-OD6ZMBFA.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -66,7 +66,6 @@ import {
   patchDeletesFiles,
   permissionTimeoutDecision,
   policyRequestFor,
-  preToolUseTimeoutDecision,
   readCodexTurnContext,
   readLastPrompt,
   recordBlockedActionHint,
@@ -80,8 +79,8 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   userScope
-} from "../chunk-IHPSFUL2.js";
-import "../chunk-52JA2WTH.js";
+} from "../chunk-LM2IY7OH.js";
+import "../chunk-M3OVAMTR.js";
 import {
   askUser,
   cancelQuestion,
@@ -94,31 +93,31 @@ import {
   sendNotification,
   unavailableQuestionUnlessSubscriptionRequired,
   waitForQuestion
-} from "../chunk-7EBZRHIH.js";
+} from "../chunk-3E6SMCCH.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-S2LU6HIZ.js";
-import "../chunk-BARUIIUR.js";
-import "../chunk-3DZG5EXY.js";
+} from "../chunk-6JTEGLQY.js";
+import "../chunk-ZS3JF5WZ.js";
+import "../chunk-6A6BXMNK.js";
 import {
   getMachineId
-} from "../chunk-XIJMMY6M.js";
+} from "../chunk-BK2CBKUC.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-VKYDON4A.js";
+import "../chunk-PZ2CZIP4.js";
 import {
   canonicalJson
-} from "../chunk-5ETPCIG4.js";
+} from "../chunk-HCCYXFX3.js";
 import {
   writeFileAtomic
-} from "../chunk-T7E75EKA.js";
+} from "../chunk-FT7UNIS3.js";
 import {
   getApiKey
-} from "../chunk-PJNZJPPX.js";
-import "../chunk-OIAZ2QAC.js";
+} from "../chunk-PKMZSKF5.js";
+import "../chunk-SFUVP6RK.js";
 import {
   CODEX_RESCUE_TOOL_NAME,
   DECISION_STOP_REASON,
@@ -129,17 +128,18 @@ import {
   UNVERIFIABLE_APPROVAL_REASON,
   approvalModeWithoutLocalPrompt,
   codexCallNeedsAPerson,
+  codexRaisesItsOwnPrompts,
   codexStopRescueOutput,
+  codexUnansweredPreToolUse,
   editGoesToTheAgentsPrompt,
   effectiveWaitSeconds,
   hookHoldWindowMs,
   hookWaitClamped,
   hookWaitDeadline,
-  onlyCodexPreToolUseCanAsk,
   resolveGate,
   scopeBreachReasonOf,
   unapprovedScopeReason
-} from "../chunk-AYV2NRYJ.js";
+} from "../chunk-VERKRKUN.js";
 
 // bin/pushary-codex-hook.ts
 import { basename } from "path";
@@ -580,7 +580,7 @@ var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode, scope) => {
     actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {}),
     repoKey: repoKeyFor(input.cwd),
     scopePath: scope?.path,
-    ...scope ? { localSurfaceAvailable: false } : {},
+    ...codexHasNoPromptOfItsOwn(scope, input.permission_mode) ? { localSurfaceAvailable: false } : {},
     sessionToolAware: true,
     // Codex has always sent this; it is what claimNotify and markApproved already
     // key on locally. Passing it through lets the server collapse a retried create
@@ -687,27 +687,16 @@ var scopeQuestionOf = (verdict) => {
   const reason = scopeBreachReasonOf(verdict);
   return reason !== void 0 && verdict.kind === "gate" ? { reason, path: verdict.scopePath } : void 0;
 };
-var codexDeliveryMode = (policyMode, scope) => scope ? approvalModeWithoutLocalPrompt(policyMode) : policyMode;
+var codexHasNoPromptOfItsOwn = (scope, permissionMode) => scope !== void 0 || !codexRaisesItsOwnPrompts(permissionMode);
+var codexDeliveryMode = (policyMode, noPromptOfItsOwn) => noPromptOfItsOwn ? approvalModeWithoutLocalPrompt(policyMode) : policyMode;
 var unansweredOutcome = (scope, fallback) => scope ? codexDeny(unapprovedScopeReason(scope.reason)) : fallback;
-var decidePushFirstBeforeTheTool = async (apiKey, input, lookup, pushFirstSeconds, callKey) => {
-  let pushed;
-  try {
-    pushed = await pushQuestion(apiKey, input, lookup, pushFirstSeconds, "push_first");
-  } catch (error) {
-    return recordPreToolUse(callKey, passAfterFailure(error, input));
-  }
-  const { answer, localHandoff } = pushed;
-  if (isDecisionStopped(answer)) return codexDeny(DECISION_STOP_REASON);
-  if (localHandoff) {
-    return recordPreToolUse(callKey, codexPass());
-  }
-  if (answer.answered) {
-    if (isDeferAnswer(answer.value)) return recordPreToolUse(callKey, codexPass());
-    if (answer.value === "yes") return recordApproval(callKey, input);
-    return recordPreToolUse(callKey, codexDeny(denyReasonFrom(answer.value, answer.note)));
-  }
-  return recordPreToolUse(callKey, codexPass());
-};
+var codexDecisionOf = (ending) => ending.kind === "deny" ? codexDeny(ending.reason) : codexPass();
+var unansweredPreToolUse = (toolPolicy, input, fullWindowServed) => codexDecisionOf(codexUnansweredPreToolUse({
+  mode: toolPolicy.mode,
+  timeoutAction: toolPolicy.timeoutAction,
+  permissionMode: input.permission_mode,
+  fullWindowServed
+}));
 var decidePreToolUse = async (input) => {
   if (isPusharyOwnTool(input.tool_name)) return codexPass();
   let apiKey;
@@ -747,7 +736,7 @@ var decidePreToolUse = async (input) => {
     const toolPolicy = verdict.policy;
     const callKey = callKeyFor(input);
     if (scope && gateInput.toolInputs.length > 1) return recordPreToolUse(callKey, codexDeny(SCOPE_BATCH_REASON));
-    const deliveryMode = codexDeliveryMode(toolPolicy.mode, scope);
+    const deliveryMode = codexDeliveryMode(toolPolicy.mode, codexHasNoPromptOfItsOwn(scope, input.permission_mode));
     if (deliveryMode === "push_only") {
       let pushed;
       try {
@@ -758,24 +747,19 @@ var decidePreToolUse = async (input) => {
       }
       const { answer, localHandoff, clampCut } = pushed;
       if (isDecisionStopped(answer)) return codexDeny(DECISION_STOP_REASON);
-      if (localHandoff) return recordPreToolUse(callKey, unansweredOutcome(scope, codexPass()));
+      if (localHandoff) return recordPreToolUse(callKey, unansweredOutcome(scope, unansweredPreToolUse(toolPolicy, input, false)));
       if (answer.answered) {
         if (isDeferAnswer(answer.value)) return recordPreToolUse(callKey, unansweredOutcome(scope, codexPass()));
         if (answer.value === "yes") return recordApproval(callKey, input);
         return recordPreToolUse(callKey, codexDeny(denyReasonFrom(answer.value, answer.note)));
       }
-      if (clampCut) return recordPreToolUse(callKey, unansweredOutcome(scope, codexPass()));
-      return recordPreToolUse(callKey, unansweredOutcome(scope, preToolUseTimeoutDecision(toolPolicy.timeoutAction)));
+      return recordPreToolUse(callKey, unansweredOutcome(scope, unansweredPreToolUse(toolPolicy, input, !clampCut)));
     }
     if (deliveryMode === "notify_only") {
       if (scope) return recordPreToolUse(callKey, unansweredOutcome(scope, codexPass()));
       await notifyApprovalNeeded(apiKey, input, lookup);
       return recordPreToolUse(callKey, codexPass());
     }
-    if (deliveryMode === "push_first") {
-      if (!onlyCodexPreToolUseCanAsk(verdict, input.permission_mode)) return codexPass();
-      return decidePushFirstBeforeTheTool(apiKey, input, lookup, toolPolicy.pushFirstSeconds, callKey);
-    }
     return scope ? recordPreToolUse(callKey, unansweredOutcome(scope, codexPass())) : codexPass();
   } catch {
     return codexPass();
@@ -783,7 +767,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-Y5PSM7U7.js");
+    const { repairCodexHolds } = await import("../reapply-Q3VLHRQS.js");
     repairCodexHolds();
   } catch {
     return;

package/dist/bin/pushary-codex.js

@@ -1,32 +1,32 @@
 #!/usr/bin/env node
 import {
   reportEvent
-} from "../chunk-IHPSFUL2.js";
-import "../chunk-52JA2WTH.js";
+} from "../chunk-LM2IY7OH.js";
+import "../chunk-M3OVAMTR.js";
 import {
   askUser,
   isDecisionStopped,
   waitForAnswer
-} from "../chunk-7EBZRHIH.js";
+} from "../chunk-3E6SMCCH.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-S2LU6HIZ.js";
-import "../chunk-BARUIIUR.js";
-import "../chunk-3DZG5EXY.js";
+import "../chunk-6JTEGLQY.js";
+import "../chunk-ZS3JF5WZ.js";
+import "../chunk-6A6BXMNK.js";
 import {
   getMachineId
-} from "../chunk-XIJMMY6M.js";
+} from "../chunk-BK2CBKUC.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-VKYDON4A.js";
-import "../chunk-5ETPCIG4.js";
-import "../chunk-T7E75EKA.js";
+import "../chunk-PZ2CZIP4.js";
+import "../chunk-HCCYXFX3.js";
+import "../chunk-FT7UNIS3.js";
 import {
   getApiKey
-} from "../chunk-PJNZJPPX.js";
+} from "../chunk-PKMZSKF5.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-OIAZ2QAC.js";
-import "../chunk-AYV2NRYJ.js";
+} from "../chunk-SFUVP6RK.js";
+import "../chunk-VERKRKUN.js";
 
 // bin/pushary-codex.ts
 import { basename } from "path";

package/dist/bin/pushary-connect.js

@@ -3,61 +3,61 @@ import {
   connectDevice,
   connectExistingApp,
   printConnectInstructions
-} from "../chunk-4MOOSU5Y.js";
+} from "../chunk-7UTH3KQV.js";
 import "../chunk-3EGEA4KH.js";
 import "../chunk-QCGNGEGE.js";
 import {
   printKeyCheck
-} from "../chunk-J36EWRVL.js";
+} from "../chunk-O43I5GBC.js";
 import {
   CONNECTED_THROUGH_MAC_APP,
   PAIR_FROM_MAC_APP,
   readMacAppConnection
-} from "../chunk-EDXJEQCK.js";
-import "../chunk-PYPZ3MYC.js";
-import "../chunk-HBDZYQZX.js";
+} from "../chunk-ERAUU54Q.js";
+import "../chunk-LDLMAGTK.js";
+import "../chunk-5MCHXYBH.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-4PQGFWPO.js";
-import "../chunk-PVOOKOKX.js";
-import "../chunk-ZOMVMLMU.js";
-import "../chunk-EDEIIKCV.js";
-import "../chunk-YKYFFCB5.js";
-import "../chunk-QJYBHKHO.js";
+} from "../chunk-JCQURRHV.js";
+import "../chunk-JN2PBSLX.js";
+import "../chunk-TGEOVHWA.js";
+import "../chunk-IHBVOC2Q.js";
+import "../chunk-JSD26D6B.js";
+import "../chunk-IB3WIIFC.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
 import {
   readKeySource
-} from "../chunk-DUDI3Z7F.js";
-import "../chunk-IHPSFUL2.js";
-import "../chunk-52JA2WTH.js";
-import "../chunk-7EBZRHIH.js";
+} from "../chunk-OD6ZMBFA.js";
+import "../chunk-LM2IY7OH.js";
+import "../chunk-M3OVAMTR.js";
+import "../chunk-3E6SMCCH.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-S2LU6HIZ.js";
+import "../chunk-6JTEGLQY.js";
 import {
   checkApiKey
-} from "../chunk-BARUIIUR.js";
-import "../chunk-3DZG5EXY.js";
-import "../chunk-XIJMMY6M.js";
+} from "../chunk-ZS3JF5WZ.js";
+import "../chunk-6A6BXMNK.js";
+import "../chunk-BK2CBKUC.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-VKYDON4A.js";
-import "../chunk-5ETPCIG4.js";
-import "../chunk-T7E75EKA.js";
-import "../chunk-PJNZJPPX.js";
+import "../chunk-PZ2CZIP4.js";
+import "../chunk-HCCYXFX3.js";
+import "../chunk-FT7UNIS3.js";
+import "../chunk-PKMZSKF5.js";
 import {
   isInvocationOf
-} from "../chunk-OIAZ2QAC.js";
-import "../chunk-AYV2NRYJ.js";
+} from "../chunk-SFUVP6RK.js";
+import "../chunk-VERKRKUN.js";
 
 // bin/pushary-connect.ts
 exitOnHelpFlag("pair");

package/dist/bin/pushary-cowork.js

@@ -2,15 +2,15 @@
 import {
   coworkOutput,
   parseCoworkOptions
-} from "../chunk-R2FHKTD3.js";
+} from "../chunk-B3RNX2E7.js";
 import {
   canOpenBrowser,
   openInBrowser
 } from "../chunk-PUZZELE6.js";
 import {
   exitOnHelpFlag
-} from "../chunk-4PQGFWPO.js";
-import "../chunk-YKYFFCB5.js";
+} from "../chunk-JCQURRHV.js";
+import "../chunk-JSD26D6B.js";
 import "../chunk-GMXKITVA.js";
 import {
   UsageError
@@ -18,10 +18,10 @@ import {
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-OIAZ2QAC.js";
+import "../chunk-SFUVP6RK.js";
 import {
   CLAUDE_CONNECTOR_GUIDE
-} from "../chunk-AYV2NRYJ.js";
+} from "../chunk-VERKRKUN.js";
 
 // bin/pushary-cowork.ts
 exitOnHelpFlag("cowork");

package/dist/bin/pushary-daemon.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   inspectConfiguredManagedProviders
-} from "../chunk-7DE5BZMB.js";
-import "../chunk-ISJ5ROXM.js";
+} from "../chunk-P34IFAIC.js";
+import "../chunk-BZH6SJAR.js";
 import {
   HEARTBEAT_INTERVAL_MS,
   sendHeartbeat
-} from "../chunk-65OI53N7.js";
+} from "../chunk-2YXGQINX.js";
 import {
   codexBinaryIsBroken,
   detectProviderLiveCapabilities,
@@ -15,7 +15,7 @@ import {
   launchableProviders,
   resolveControlPolicy,
   trackProviderInventory
-} from "../chunk-W2AUU35K.js";
+} from "../chunk-KLMAOQR4.js";
 import "../chunk-RIVNNBEK.js";
 import {
   SESSION_REAP_SILENCE_MS,
@@ -24,11 +24,11 @@ import {
   listProcessProofs,
   ownsLiveProcess,
   silentSpawnedProofs
-} from "../chunk-JQC7ZFHM.js";
+} from "../chunk-AFFFTDUS.js";
 import {
   startRegisteredTranscripts
-} from "../chunk-NM6IHHRO.js";
-import "../chunk-SGZJ5LYH.js";
+} from "../chunk-EXHTATWA.js";
+import "../chunk-6WEC3KZP.js";
 import {
   DAEMON_LEASE_RENEW_INTERVAL_MS,
   acquireDaemonLease,
@@ -45,10 +45,10 @@ import {
   requestDaemonHandoff,
   stopDaemonRunning,
   writeDaemonNeedsLogin
-} from "../chunk-PZ33VQ54.js";
-import "../chunk-QIOWXUFH.js";
-import "../chunk-OEMDXBV6.js";
-import "../chunk-JF2XRQR2.js";
+} from "../chunk-JCVGBUCZ.js";
+import "../chunk-K4UPPZK4.js";
+import "../chunk-U4X3GQR2.js";
+import "../chunk-W3IBC4FG.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -57,46 +57,46 @@ import {
 } from "../chunk-QCGNGEGE.js";
 import {
   readSignedOutDiagnosis
-} from "../chunk-PYPZ3MYC.js";
-import "../chunk-HBDZYQZX.js";
+} from "../chunk-LDLMAGTK.js";
+import "../chunk-5MCHXYBH.js";
 import {
   exitOnHelpFlag
-} from "../chunk-4PQGFWPO.js";
-import "../chunk-PVOOKOKX.js";
-import "../chunk-ZOMVMLMU.js";
-import "../chunk-EDEIIKCV.js";
-import "../chunk-YKYFFCB5.js";
-import "../chunk-QJYBHKHO.js";
+} from "../chunk-JCQURRHV.js";
+import "../chunk-JN2PBSLX.js";
+import "../chunk-TGEOVHWA.js";
+import "../chunk-IHBVOC2Q.js";
+import "../chunk-JSD26D6B.js";
+import "../chunk-IB3WIIFC.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
 import {
   readControlMode
-} from "../chunk-DUDI3Z7F.js";
-import "../chunk-IHPSFUL2.js";
-import "../chunk-52JA2WTH.js";
-import "../chunk-7EBZRHIH.js";
+} from "../chunk-OD6ZMBFA.js";
+import "../chunk-LM2IY7OH.js";
+import "../chunk-M3OVAMTR.js";
+import "../chunk-3E6SMCCH.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-S2LU6HIZ.js";
-import "../chunk-BARUIIUR.js";
-import "../chunk-3DZG5EXY.js";
+import "../chunk-6JTEGLQY.js";
+import "../chunk-ZS3JF5WZ.js";
+import "../chunk-6A6BXMNK.js";
 import {
   getMachineId
-} from "../chunk-XIJMMY6M.js";
+} from "../chunk-BK2CBKUC.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-VKYDON4A.js";
+import "../chunk-PZ2CZIP4.js";
 import {
   resolveBinary
-} from "../chunk-5ETPCIG4.js";
-import "../chunk-T7E75EKA.js";
+} from "../chunk-HCCYXFX3.js";
+import "../chunk-FT7UNIS3.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-PJNZJPPX.js";
-import "../chunk-OIAZ2QAC.js";
-import "../chunk-AYV2NRYJ.js";
+} from "../chunk-PKMZSKF5.js";
+import "../chunk-SFUVP6RK.js";
+import "../chunk-VERKRKUN.js";
 
 // src/spawn-daemon.ts
 import { execFileSync, spawn } from "child_process";