@pushary/agent-hooks 0.83.0 → 0.83.2

package/dist/bin/pushary-bell-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-UAWTJMXA.js";
-import "../chunk-RZP3Z2WR.js";
+} from "../chunk-7WWZPII5.js";
+import "../chunk-WDRRULBH.js";
 import "../chunk-6MTNS63X.js";
 import "../chunk-BC3VCZ3E.js";
-import "../chunk-BT7NTTIW.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-SAA3VBDK.js";
+import "../chunk-YWRJGYUH.js";
 import "../chunk-2UMNXADU.js";
 
 // bin/pushary-bell-hook.ts

package/dist/bin/pushary-bell.js

@@ -5,14 +5,14 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-UAWTJMXA.js";
+} from "../chunk-7WWZPII5.js";
 import {
   claudeSettings
-} from "../chunk-O55DONTG.js";
+} from "../chunk-EHLTWCDZ.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
-import "../chunk-RZP3Z2WR.js";
+import "../chunk-WDRRULBH.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -21,9 +21,9 @@ import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-BC3VCZ3E.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/bin/pushary-claude.js

@@ -3,7 +3,7 @@ import {
   KILL_REASON,
   isDeferAnswer,
   resolveGate
-} from "../chunk-FFT7L2VE.js";
+} from "../chunk-4QQOKEOS.js";
 import {
   askUser,
   cancelQuestion,
@@ -15,14 +15,14 @@ import {
   reportEvent,
   scopePathFor,
   waitForAnswer
-} from "../chunk-C4SQY777.js";
+} from "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
 import {
   redactSecrets
-} from "../chunk-QA5HP7CR.js";
+} from "../chunk-YWRJGYUH.js";
 import {
   needsShell,
   spawnClaude

package/dist/bin/pushary-clean.js

@@ -4,14 +4,14 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-HKKERYZP.js";
+} from "../chunk-UVAC2KHH.js";
 import {
   removeGeminiSettings
-} from "../chunk-DMKSHZKF.js";
+} from "../chunk-TXF4QZSQ.js";
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-U752S5RE.js";
+} from "../chunk-NDC3TBHI.js";
 import {
   claudeJson,
   claudeSettings,
@@ -29,7 +29,7 @@ import {
   pusharyDir,
   removeCodexHooks,
   vscodePluginDir
-} from "../chunk-O55DONTG.js";
+} from "../chunk-EHLTWCDZ.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -37,7 +37,7 @@ import {
   removeClaudeAlias
 } from "../chunk-BC3VCZ3E.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import {
   execNpm
 } from "../chunk-MUEW424A.js";

package/dist/bin/pushary-codex-hook.js

@@ -2,13 +2,13 @@
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-2R63XKLG.js";
+} from "../chunk-3AGM3TDM.js";
 import {
   KILL_REASON,
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-FFT7L2VE.js";
+} from "../chunk-4QQOKEOS.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -39,17 +39,17 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   waitForAnswer
-} from "../chunk-C4SQY777.js";
+} from "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-QA5HP7CR.js";
+} from "../chunk-YWRJGYUH.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-codex.js

@@ -3,12 +3,12 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-C4SQY777.js";
+} from "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-connect.js

@@ -3,20 +3,20 @@ import {
   confirmAppConnection,
   connectDevice,
   printConnectInstructions
-} from "../chunk-R3AEWBAZ.js";
+} from "../chunk-U27BZWFT.js";
 import "../chunk-3EGEA4KH.js";
 import {
   printKeyCheck
-} from "../chunk-3JDIGKPV.js";
+} from "../chunk-26D2YMDU.js";
 import {
   checkApiKey
-} from "../chunk-CXGJTN74.js";
+} from "../chunk-QR6MVVQ7.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   readKeySource
-} from "../chunk-RZP3Z2WR.js";
+} from "../chunk-WDRRULBH.js";
 import "../chunk-6MTNS63X.js";
 import {
   parseFlags
@@ -24,11 +24,11 @@ import {
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/bin/pushary-doctor.js

@@ -6,7 +6,7 @@ import {
   claudeWired,
   codexWired,
   geminiWired
-} from "../chunk-V6MCBCUC.js";
+} from "../chunk-QF7WTF2C.js";
 import {
   agentProbes,
   detectAgent,
@@ -15,12 +15,12 @@ import {
   isDetected,
   isPluginRegistered,
   vscodeSettingsTargets
-} from "../chunk-HKKERYZP.js";
+} from "../chunk-UVAC2KHH.js";
 import {
   GEMINI_HOOK_BINARY,
   hasGeminiHooks,
   missingGeminiHookEvents
-} from "../chunk-DMKSHZKF.js";
+} from "../chunk-TXF4QZSQ.js";
 import {
   claudeJson,
   claudeSettings,
@@ -39,29 +39,29 @@ import {
   readCodexMcpAuth,
   untrustedCodexHookEvents,
   vscodePluginDir
-} from "../chunk-O55DONTG.js";
+} from "../chunk-EHLTWCDZ.js";
 import {
   readLedgerSummary
-} from "../chunk-2R63XKLG.js";
+} from "../chunk-3AGM3TDM.js";
 import {
   describeReach,
   describeRoundTrip,
   fetchChannels,
   reachVerdict,
   verifyRoundTrip
-} from "../chunk-R3AEWBAZ.js";
+} from "../chunk-U27BZWFT.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-CXGJTN74.js";
+} from "../chunk-QR6MVVQ7.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   keyPrefix,
   readKeySource
-} from "../chunk-RZP3Z2WR.js";
+} from "../chunk-WDRRULBH.js";
 import "../chunk-6MTNS63X.js";
 import {
   parseFlags
@@ -72,11 +72,11 @@ import {
   sendMcpRequest
 } from "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import {
   execNpm
 } from "../chunk-MUEW424A.js";

package/dist/bin/pushary-gemini-hook.js

@@ -2,13 +2,13 @@
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-2R63XKLG.js";
+} from "../chunk-3AGM3TDM.js";
 import {
   KILL_REASON,
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-FFT7L2VE.js";
+} from "../chunk-4QQOKEOS.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -30,17 +30,17 @@ import {
   scopePathFor,
   sendNotification,
   waitForAnswer
-} from "../chunk-C4SQY777.js";
+} from "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-QA5HP7CR.js";
+} from "../chunk-YWRJGYUH.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-hook.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-E7YX7CTM.js";
-import "../chunk-U752S5RE.js";
-import "../chunk-2R63XKLG.js";
-import "../chunk-FFT7L2VE.js";
-import "../chunk-C4SQY777.js";
+} from "../chunk-DHAZ6SOT.js";
+import "../chunk-NDC3TBHI.js";
+import "../chunk-3AGM3TDM.js";
+import "../chunk-4QQOKEOS.js";
+import "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import "../chunk-RN3NOEJF.js";
 import {
   exitOnHelpFlag

package/dist/bin/pushary-login.js

@@ -6,27 +6,27 @@ import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-CXGJTN74.js";
+} from "../chunk-QR6MVVQ7.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   readKeySource,
   writeKey
-} from "../chunk-RZP3Z2WR.js";
+} from "../chunk-WDRRULBH.js";
 import "../chunk-6MTNS63X.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "../chunk-QA5HP7CR.js";
+} from "../chunk-YWRJGYUH.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/bin/pushary-logout.js

@@ -4,24 +4,24 @@ import {
   codexConfigToml,
   cursorUserMcp,
   geminiSettings
-} from "../chunk-O55DONTG.js";
+} from "../chunk-EHLTWCDZ.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   clearKey,
   readKeySource
-} from "../chunk-RZP3Z2WR.js";
+} from "../chunk-WDRRULBH.js";
 import "../chunk-6MTNS63X.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-BC3VCZ3E.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/bin/pushary-mode.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   exitOnFailedResponse
-} from "../chunk-3JDIGKPV.js";
-import "../chunk-CXGJTN74.js";
+} from "../chunk-26D2YMDU.js";
+import "../chunk-QR6MVVQ7.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -13,7 +13,7 @@ import "../chunk-SAF6HGAA.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/bin/pushary-notification-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-C4SQY777.js";
+} from "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-E7YX7CTM.js";
-import "../chunk-U752S5RE.js";
-import "../chunk-2R63XKLG.js";
-import "../chunk-FFT7L2VE.js";
-import "../chunk-C4SQY777.js";
+} from "../chunk-DHAZ6SOT.js";
+import "../chunk-NDC3TBHI.js";
+import "../chunk-3AGM3TDM.js";
+import "../chunk-4QQOKEOS.js";
+import "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-permission-hook.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-E7YX7CTM.js";
-import "../chunk-U752S5RE.js";
-import "../chunk-2R63XKLG.js";
-import "../chunk-FFT7L2VE.js";
-import "../chunk-C4SQY777.js";
+} from "../chunk-DHAZ6SOT.js";
+import "../chunk-NDC3TBHI.js";
+import "../chunk-3AGM3TDM.js";
+import "../chunk-4QQOKEOS.js";
+import "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-post-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-C4SQY777.js";
+} from "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-prompt-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-C4SQY777.js";
+} from "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-session-end-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-C4SQY777.js";
+} from "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-session-start-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-C4SQY777.js";
+} from "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-setup.js

@@ -3,7 +3,7 @@ import {
   claudeWired,
   codexWired,
   geminiWired
-} from "../chunk-V6MCBCUC.js";
+} from "../chunk-QF7WTF2C.js";
 import {
   runBrowserLogin
 } from "../chunk-Z3Z4VK5F.js";
@@ -18,17 +18,17 @@ import {
   shortenHome,
   vscodeSettingsTargets,
   writeInstructionBlock
-} from "../chunk-HKKERYZP.js";
+} from "../chunk-UVAC2KHH.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
   addGeminiMcpServer
-} from "../chunk-DMKSHZKF.js";
+} from "../chunk-TXF4QZSQ.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-U752S5RE.js";
+} from "../chunk-NDC3TBHI.js";
 import {
   addCodexHookTrust,
   addCodexHooks,
@@ -46,10 +46,10 @@ import {
   geminiSettings,
   pusharyConfigFile,
   vscodePluginDir
-} from "../chunk-O55DONTG.js";
+} from "../chunk-EHLTWCDZ.js";
 import {
   reportEvent
-} from "../chunk-C4SQY777.js";
+} from "../chunk-7PO2VEA4.js";
 import {
   confirmAppConnection,
   connectDevice,
@@ -58,12 +58,12 @@ import {
   printConnectInstructions,
   setHumanStream,
   verifyRoundTrip
-} from "../chunk-R3AEWBAZ.js";
+} from "../chunk-U27BZWFT.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-CXGJTN74.js";
+} from "../chunk-QR6MVVQ7.js";
 import {
   useColor
 } from "../chunk-5RUIFDTP.js";
@@ -74,7 +74,7 @@ import {
   readConfigFileKey,
   readKeySource,
   writeKey
-} from "../chunk-RZP3Z2WR.js";
+} from "../chunk-WDRRULBH.js";
 import {
   backupFile,
   readJsonSafe,
@@ -90,13 +90,13 @@ import {
 } from "../chunk-BC3VCZ3E.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "../chunk-QA5HP7CR.js";
+} from "../chunk-YWRJGYUH.js";
 import {
   installGlobally,
   npmErrorMessage,

package/dist/bin/pushary-stats.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   readLedgerSummary
-} from "../chunk-2R63XKLG.js";
-import "../chunk-QA5HP7CR.js";
+} from "../chunk-3AGM3TDM.js";
+import "../chunk-YWRJGYUH.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/bin/pushary-status.js

@@ -3,18 +3,18 @@ import {
   describeReach,
   fetchChannels,
   reachVerdict
-} from "../chunk-R3AEWBAZ.js";
+} from "../chunk-U27BZWFT.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-CXGJTN74.js";
+} from "../chunk-QR6MVVQ7.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   readKeySource
-} from "../chunk-RZP3Z2WR.js";
+} from "../chunk-WDRRULBH.js";
 import "../chunk-6MTNS63X.js";
 import {
   rejectUnknownFlags
@@ -22,11 +22,11 @@ import {
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import {
   describeLastSeen,
   listMachines

package/dist/bin/pushary-stop-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-C4SQY777.js";
+} from "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-C4SQY777.js";
+} from "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-upgrade.js

@@ -4,12 +4,12 @@ import {
   addGeminiHooks,
   addGeminiMcpServer,
   hasGeminiHooks
-} from "../chunk-DMKSHZKF.js";
+} from "../chunk-TXF4QZSQ.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-U752S5RE.js";
+} from "../chunk-NDC3TBHI.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -23,11 +23,11 @@ import {
   hasCodexHooks,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-O55DONTG.js";
+} from "../chunk-EHLTWCDZ.js";
 import {
   readJsonSafe
 } from "../chunk-6MTNS63X.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import {
   execNpm,
   npmErrorMessage,

package/dist/bin/pushary-wait.js

@@ -4,8 +4,8 @@ import {
 } from "../chunk-IIENZE2J.js";
 import {
   exitOnFailedResponse
-} from "../chunk-3JDIGKPV.js";
-import "../chunk-CXGJTN74.js";
+} from "../chunk-26D2YMDU.js";
+import "../chunk-QR6MVVQ7.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -16,7 +16,7 @@ import "../chunk-SAF6HGAA.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/{chunk-3JDIGKPV.js → chunk-26D2YMDU.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-CXGJTN74.js";
+} from "./chunk-QR6MVVQ7.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-2R63XKLG.js → chunk-3AGM3TDM.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-QA5HP7CR.js";
+} from "./chunk-YWRJGYUH.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-FFT7L2VE.js → chunk-4QQOKEOS.js}

@@ -1,15 +1,14 @@
 import {
-  isAutoApprove,
-  isAutoDeny,
   isModeStateDegraded,
   resolveAutoResolveOrigin,
   resolvePolicyAcross
-} from "./chunk-C4SQY777.js";
+} from "./chunk-7PO2VEA4.js";
 import {
   evaluateScope,
   scopeChangeReason,
-  scopeRequiresHuman
-} from "./chunk-QA5HP7CR.js";
+  scopeRequiresHuman,
+  verdictForPolicy
+} from "./chunk-YWRJGYUH.js";
 
 // src/answer.ts
 var denyReasonFrom = (value, note) => {
@@ -36,8 +35,9 @@ var resolveGate = (input) => {
   const { modeState, config, toolName, toolInputs, cwd, repoKey } = input;
   if (modeState.kill) return { kind: "kill", reason: KILL_REASON };
   const policy = resolvePolicyAcross(config, toolName, modeState.mode, toolInputs, cwd, repoKey);
-  const autoApproves = isAutoApprove(policy);
-  const autoDenies = isAutoDeny(policy);
+  const verdict = verdictForPolicy(policy);
+  const autoApproves = verdict === "allow";
+  const autoDenies = verdict === "deny";
   if (autoDenies) return { kind: "deny", policy, reason: `Denied by policy for ${policy.tool}` };
   if (isModeStateDegraded(modeState)) {
     if (autoApproves) {

package/dist/{chunk-C4SQY777.js → chunk-7PO2VEA4.js}

@@ -7,23 +7,23 @@ import {
 } from "./chunk-SAF6HGAA.js";
 import {
   reportedInstallSource
-} from "./chunk-BT7NTTIW.js";
+} from "./chunk-SAA3VBDK.js";
 import {
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
   classifyDecisionRisk,
   isApprovalMode,
-  isRepoKeyMatch,
+  isAutoApprove,
+  isAutoDeny,
   isSafeReadOnlyCommand,
   isScopeContract,
   localRepoKey,
-  matchRankWeight,
-  matchToolPatternAny,
   normalizeRepoRemote,
   policyArgForms,
   redactSecrets,
-  redactSecretsDeep
-} from "./chunk-QA5HP7CR.js";
+  redactSecretsDeep,
+  selectGoverningRule
+} from "./chunk-YWRJGYUH.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";
@@ -117,30 +117,6 @@ var getPolicy = async (apiKey, expectedVersion, agent, repoAware = false) => {
     throw new Error("Failed to fetch policy and no cached policy available");
   }
 };
-var findBestMatch = (policies, toolName, args, repoKey) => {
-  let best;
-  let bestWeight = 0;
-  let bestScoped = -1;
-  let bestLength = -1;
-  for (const candidate of policies) {
-    if (!isRepoKeyMatch(candidate.repoKey, repoKey)) continue;
-    const rank = matchToolPatternAny(candidate.tool, toolName, args);
-    if (rank === "none") continue;
-    const weight = matchRankWeight(rank);
-    const scoped = candidate.repoKey ? 1 : 0;
-    const length = rank === "prefix" ? candidate.tool.length : -1;
-    const better = weight > bestWeight || weight === bestWeight && scoped > bestScoped || weight === bestWeight && scoped === bestScoped && length > bestLength;
-    if (better) {
-      best = { policy: candidate, rank };
-      bestWeight = weight;
-      bestScoped = scoped;
-      bestLength = length;
-    }
-  }
-  return best;
-};
-var isAutoApprove = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "approve";
-var isAutoDeny = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "deny";
 var autoApprove = (tool) => ({
   tool,
   timeoutSeconds: 0,
@@ -151,7 +127,7 @@ var autoApprove = (tool) => ({
 var resolveAutoResolveOrigin = (config, toolName, toolInput, cwd, repoKey) => {
   const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
   const arg = args[0];
-  const match = findBestMatch(config.policies, toolName, args, repoKey);
+  const match = selectGoverningRule(config.policies, toolName, args, repoKey);
   const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
   if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
     return "safe_readonly";
@@ -161,7 +137,7 @@ var resolveAutoResolveOrigin = (config, toolName, toolInput, cwd, repoKey) => {
 var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey) => {
   const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
   const arg = args[0];
-  const match = findBestMatch(config.policies, toolName, args, repoKey);
+  const match = selectGoverningRule(config.policies, toolName, args, repoKey);
   let base = match?.policy ?? config.policies.find((p) => p.tool === "*") ?? {
     tool: toolName,
     timeoutSeconds: config.defaultTimeoutSeconds,
@@ -1338,8 +1314,6 @@ var handleStopFailure = async (input, agent = CLAUDE_CODE_AGENT) => {
 
 export {
   getPolicy,
-  isAutoApprove,
-  isAutoDeny,
   resolveAutoResolveOrigin,
   resolvePolicy,
   resolvePolicyAcross,

package/dist/{chunk-UAWTJMXA.js → chunk-7WWZPII5.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-RZP3Z2WR.js";
+} from "./chunk-WDRRULBH.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-E7YX7CTM.js → chunk-DHAZ6SOT.js}

@@ -1,15 +1,15 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS
-} from "./chunk-U752S5RE.js";
+} from "./chunk-NDC3TBHI.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-2R63XKLG.js";
+} from "./chunk-3AGM3TDM.js";
 import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "./chunk-FFT7L2VE.js";
+} from "./chunk-4QQOKEOS.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -29,13 +29,13 @@ import {
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-C4SQY777.js";
+} from "./chunk-7PO2VEA4.js";
 import {
   buildDecisionEpisodeFeatures,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "./chunk-QA5HP7CR.js";
+} from "./chunk-YWRJGYUH.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";

package/dist/{chunk-O55DONTG.js → chunk-EHLTWCDZ.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-QA5HP7CR.js";
+} from "./chunk-YWRJGYUH.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";

package/dist/{chunk-U752S5RE.js → chunk-NDC3TBHI.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-QA5HP7CR.js";
+} from "./chunk-YWRJGYUH.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-V6MCBCUC.js → chunk-QF7WTF2C.js}

@@ -1,9 +1,9 @@
 import {
   hasGeminiHooks
-} from "./chunk-DMKSHZKF.js";
+} from "./chunk-TXF4QZSQ.js";
 import {
   hasCodexHooks
-} from "./chunk-O55DONTG.js";
+} from "./chunk-EHLTWCDZ.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-CXGJTN74.js → chunk-QR6MVVQ7.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "./chunk-QA5HP7CR.js";
+} from "./chunk-YWRJGYUH.js";
 import {
   getBaseUrl
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-BT7NTTIW.js → chunk-SAA3VBDK.js}

@@ -1,6 +1,6 @@
 import {
   normalizeInstallSource
-} from "./chunk-QA5HP7CR.js";
+} from "./chunk-YWRJGYUH.js";
 import {
   configFilePath
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-DMKSHZKF.js → chunk-TXF4QZSQ.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-QA5HP7CR.js";
+} from "./chunk-YWRJGYUH.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-R3AEWBAZ.js → chunk-U27BZWFT.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-BSZYIAZL.js";
 import {
   reportedInstallSource
-} from "./chunk-BT7NTTIW.js";
+} from "./chunk-SAA3VBDK.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {
@@ -691,10 +691,15 @@ var buildPairLinks = (pairId, publicKeyB64, baseUrl = apiBase(), code = null) =>
   const id = encodeURIComponent(pairId);
   const pk = encodeURIComponent(publicKeyB64);
   const origin = baseUrl.replace(/\/+$/, "");
+  const longLink = `${origin}/pair?id=${id}&pk=${pk}`;
   return {
-    // 33 characters against 114, so 16 rows of QR against 22. Without a code this
-    // is the exact URL every published CLI already encodes.
-    universalLink: code ? `${origin}/pair/${encodeURIComponent(code)}` : `${origin}/pair?id=${id}&pk=${pk}`,
+    // Never shortened. Both scanners have to read this one: the phone camera,
+    // which opens it, and the app's own scanner, which parses id and pk straight
+    // off it and cannot resolve a code. 22 rows of QR instead of 16 is the price
+    // of the in-app scan button working at all.
+    qrLink: longLink,
+    // 33 characters against 114, for the person reading it off the screen.
+    universalLink: code ? `${origin}/pair/${encodeURIComponent(code)}` : longLink,
     // Never shortened: the scheme reaches an installed app with no server round
     // trip, which is the path that has to survive the short code failing.
     deepLink: `pushary://pair?pk=${pk}&id=${id}`
@@ -708,11 +713,11 @@ var connectViaAppPairing = async (options = {}) => {
     return null;
   }
   const { pairId, code } = started;
-  const { universalLink, deepLink } = buildPairLinks(pairId, keypair.publicKeyB64, apiBase(), code);
+  const { qrLink, universalLink, deepLink } = buildPairLinks(pairId, keypair.publicKeyB64, apiBase(), code);
   console.log();
   console.log(`  ${bold("Connect your Pushary app")}`);
   console.log(`  ${dim("Scan this with your phone camera:")}`);
-  await printQr(universalLink);
+  await printQr(qrLink);
   console.log(`  ${dim("No camera handy? Open this on the phone instead:")}`);
   console.log(`  ${cyan(universalLink)}`);
   console.log(`  ${dim("Confirm the app shows fingerprint")} ${cyan(publicKeyFingerprint(keypair.publicKeyB64))}`);

package/dist/{chunk-HKKERYZP.js → chunk-UVAC2KHH.js}

@@ -1,6 +1,6 @@
 import {
   codexHomeFrom
-} from "./chunk-O55DONTG.js";
+} from "./chunk-EHLTWCDZ.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-RZP3Z2WR.js → chunk-WDRRULBH.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-BC3VCZ3E.js";
 import {
   resolveInstallSourceFor
-} from "./chunk-BT7NTTIW.js";
+} from "./chunk-SAA3VBDK.js";
 import {
   configFilePath
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-QA5HP7CR.js → chunk-YWRJGYUH.js}

@@ -447,6 +447,35 @@ var isSafeReadOnlyCommand = (command) => {
   }
   return true;
 };
+var isAutoApprove = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "approve";
+var isAutoDeny = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "deny";
+var verdictForPolicy = (policy) => {
+  if (isAutoDeny(policy)) return "deny";
+  if (isAutoApprove(policy)) return "allow";
+  return "requires_human";
+};
+var selectGoverningRule = (policies, toolName, args, repoKey) => {
+  let best;
+  let bestWeight = 0;
+  let bestScoped = -1;
+  let bestLength = -1;
+  for (const candidate of policies) {
+    if (!isRepoKeyMatch(candidate.repoKey, repoKey)) continue;
+    const rank = matchToolPatternAny(candidate.tool, toolName, args);
+    if (rank === "none") continue;
+    const weight = matchRankWeight(rank);
+    const scoped = candidate.repoKey ? 1 : 0;
+    const length = rank === "prefix" ? candidate.tool.length : -1;
+    const better = weight > bestWeight || weight === bestWeight && scoped > bestScoped || weight === bestWeight && scoped === bestScoped && length > bestLength;
+    if (better) {
+      best = { policy: candidate, rank };
+      bestWeight = weight;
+      bestScoped = scoped;
+      bestLength = length;
+    }
+  }
+  return best;
+};
 var API_KEY_PATTERN = /^pk_[a-f0-9]+\.[a-f0-9]+$/;
 var isValidApiKey = (value) => API_KEY_PATTERN.test(value);
 var ACTION_BODY_MAX = 4e3;
@@ -787,13 +816,14 @@ export {
   hookWaitDeadline,
   hookWaitClamped,
   effectiveWaitSeconds,
-  isRepoKeyMatch,
   normalizeRepoRemote,
   localRepoKey,
-  matchRankWeight,
   policyArgForms,
-  matchToolPatternAny,
   isSafeReadOnlyCommand,
+  isAutoApprove,
+  isAutoDeny,
+  verdictForPolicy,
+  selectGoverningRule,
   isValidApiKey,
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,

package/dist/src/index.js

@@ -1,9 +1,9 @@
 import {
   handlePreToolUse
-} from "../chunk-E7YX7CTM.js";
-import "../chunk-U752S5RE.js";
-import "../chunk-2R63XKLG.js";
-import "../chunk-FFT7L2VE.js";
+} from "../chunk-DHAZ6SOT.js";
+import "../chunk-NDC3TBHI.js";
+import "../chunk-3AGM3TDM.js";
+import "../chunk-4QQOKEOS.js";
 import {
   askUser,
   cancelQuestion,
@@ -16,12 +16,12 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-C4SQY777.js";
+} from "../chunk-7PO2VEA4.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
+import "../chunk-SAA3VBDK.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-YWRJGYUH.js";
 import "../chunk-RN3NOEJF.js";
 import {
   getApiKey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.83.0",
+  "version": "0.83.2",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",