@pushary/agent-hooks 0.89.13 → 0.90.1

package/dist/{chunk-WHDSJ6PD.js → chunk-BVBEURWJ.js}

@@ -1,6 +1,6 @@
 import {
   renderCommandHelp
-} from "./chunk-GMJDQDXU.js";
+} from "./chunk-43GMYSS4.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";

package/dist/{chunk-ZWEKONU6.js → chunk-CELX75MW.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-QINYXLA5.js";
+} from "./chunk-VNMKIJZB.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-ZP3SNUP7.js → chunk-CNPAT3HL.js}

@@ -3,7 +3,7 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-4IPSMEGT.js";
+} from "./chunk-7FE2KABY.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -55,9 +55,10 @@ var postLiveSessionUntilAccepted = async (options, path, body) => {
   }
   throw new Error("Live session stopped before it linked");
 };
-var startLiveSessionHeartbeat = (options, body, intervalMs = LIVE_SESSION_HEARTBEAT_MS) => {
+var startLiveSessionHeartbeat = (options, body, intervalMs = LIVE_SESSION_HEARTBEAT_MS, onBeat) => {
   const timer = setInterval(() => {
     if (!options.signal.aborted) {
+      onBeat?.();
       void postLiveSession(options, "/api/agent/event", body).catch(() => {
       });
     }

package/dist/{chunk-YXT55PYF.js → chunk-DYP6SMOR.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-ZO43JTT3.js";
+} from "./chunk-AJYV3VGU.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/chunk-DZDI62LY.js

@@ -0,0 +1,145 @@
+import {
+  CLAUDE_HOOK_EVENTS,
+  GEMINI_HOOK_EVENTS,
+  hasGeminiHooks
+} from "./chunk-GL3FFM7A.js";
+import {
+  CODEX_HOOK_EVENTS,
+  hasCodexHooks
+} from "./chunk-KUZWXPUS.js";
+import {
+  CURSOR_GATE_EVENTS,
+  HOOK_LOCATOR_BINARY
+} from "./chunk-VNMKIJZB.js";
+
+// src/diagnostics/wiring.ts
+var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+var CLAUDE_HOOK_BINARY = /pushary-[a-z-]*hook/;
+var EXACT_HOOK_BINARY = /^pushary-[a-z-]*(hook|gate)$/;
+var pusharyHookExecutable = (command) => {
+  const tokens = command.match(/"[^"]*"|'[^']*'|\S+/g) ?? [];
+  for (const raw of tokens.reverse()) {
+    const token = raw[0] === '"' && raw.at(-1) === '"' || raw[0] === "'" && raw.at(-1) === "'" ? raw.slice(1, -1) : raw;
+    const name = token.split(/[/\\]/).pop()?.replace(/\.(cmd|exe|mjs)$/i, "") ?? "";
+    if (name === HOOK_LOCATOR_BINARY || EXACT_HOOK_BINARY.test(name)) return token;
+  }
+  return null;
+};
+var claudeWired = ({ claudeJson, settings, skillExists }) => {
+  if (record(record(claudeJson)?.mcpServers)?.pushary) return true;
+  const s = record(settings);
+  if (s) {
+    const hooks = JSON.stringify(s.hooks ?? {});
+    if (CLAUDE_HOOK_BINARY.test(hooks) || hooks.includes(HOOK_LOCATOR_BINARY)) return true;
+    const allow = record(s.permissions)?.allow;
+    if (Array.isArray(allow) && allow.some((rule) => String(rule).includes("mcp__pushary__"))) return true;
+  }
+  return skillExists;
+};
+var codexWired = ({ config, hooks, skillExists }) => {
+  if (record(record(config)?.mcp_servers)?.pushary) return true;
+  const h = record(hooks);
+  if (h && hasCodexHooks(h)) return true;
+  return skillExists;
+};
+var geminiWired = ({ settings }) => {
+  const s = record(settings);
+  if (!s) return false;
+  if (record(s.mcpServers)?.pushary) return true;
+  return hasGeminiHooks(s);
+};
+var cursorWired = ({ userHooks, mcp, pluginDirExists }) => {
+  if (pluginDirExists) return true;
+  if (record(record(mcp)?.mcpServers)?.pushary) return true;
+  const hooks = record(record(userHooks)?.hooks);
+  if (!hooks) return false;
+  return Object.values(hooks).some((entries) => Array.isArray(entries) && entries.some((entry) => pusharyHookExecutable(String(record(entry)?.command ?? "")) !== null));
+};
+var cursorMcpAuthorization = (pluginMcp, userMcp) => {
+  const pluginServers = record(record(pluginMcp)?.mcpServers);
+  const usePlugin = pluginServers !== null && Object.hasOwn(pluginServers, "pushary");
+  const servers = usePlugin ? pluginServers : record(record(userMcp)?.mcpServers);
+  const headers = record(record(servers?.pushary)?.headers);
+  return {
+    authorization: typeof headers?.Authorization === "string" ? headers.Authorization : null,
+    source: usePlugin ? "plugin mcp.json" : "~/.cursor/mcp.json"
+  };
+};
+var LONG_HOLD_SECONDS = 600;
+var toSeconds = (timeout, unit) => {
+  if (typeof timeout !== "number" || !Number.isFinite(timeout)) return null;
+  return unit === "milliseconds" ? timeout / 1e3 : timeout;
+};
+var registeredHooks = (entries, shape, unit) => {
+  if (!Array.isArray(entries)) return [];
+  return entries.flatMap((entry, entryIndex) => {
+    const container = record(entry);
+    if (!container) return [];
+    const hooks = shape === "nested" ? Array.isArray(container.hooks) ? container.hooks : [] : [container];
+    return hooks.flatMap((hook, hookIndex) => {
+      const command = record(hook)?.command;
+      if (typeof command !== "string" || command.trim() === "") return [];
+      return [{
+        command,
+        timeoutSeconds: toSeconds(record(hook)?.timeout, unit),
+        order: [entryIndex, hookIndex]
+      }];
+    });
+  });
+};
+var runsBefore = (a, b) => a[0] < b[0] || a[0] === b[0] && a[1] < b[1];
+var holdersOnEvent = (event, hooks) => {
+  const ours = hooks.find((hook) => pusharyHookExecutable(hook.command) !== null);
+  if (!ours) return [];
+  return hooks.filter((hook) => pusharyHookExecutable(hook.command) === null).map((hook) => ({
+    event,
+    command: hook.command,
+    timeoutSeconds: hook.timeoutSeconds,
+    position: runsBefore(hook.order, ours.order) ? "before" : "after"
+  }));
+};
+var otherHolders = (hooks, events, shape, unit) => {
+  const table = record(hooks);
+  if (!table) return [];
+  return events.flatMap((event) => holdersOnEvent(event, registeredHooks(table[event], shape, unit)));
+};
+var approvalEvents = (table) => table.filter((hook) => hook.delivery === "approval").map((hook) => hook.event);
+var CLAUDE_GATE_EVENTS = approvalEvents(CLAUDE_HOOK_EVENTS);
+var CODEX_GATE_EVENTS = approvalEvents(CODEX_HOOK_EVENTS);
+var GEMINI_GATE_EVENTS = approvalEvents(GEMINI_HOOK_EVENTS);
+var claudeOtherHolders = (settings) => otherHolders(record(settings)?.hooks, CLAUDE_GATE_EVENTS, "nested", "seconds");
+var codexOtherHolders = (hooks) => otherHolders(record(hooks)?.hooks, CODEX_GATE_EVENTS, "nested", "seconds");
+var geminiOtherHolders = (settings) => otherHolders(record(settings)?.hooks, GEMINI_GATE_EVENTS, "nested", "milliseconds");
+var cursorOtherHolders = (userHooks) => otherHolders(record(userHooks)?.hooks, CURSOR_GATE_EVENTS, "flat", "seconds");
+var holdsLong = (holder) => holder.timeoutSeconds !== null && holder.timeoutSeconds > LONG_HOLD_SECONDS;
+var SHELLS = /* @__PURE__ */ new Set(["/bin/sh", "/bin/bash", "/bin/zsh", "/usr/bin/env"]);
+var holderExecutable = (command) => {
+  const pathLike = command.match(/[^\s"']*[/\\][^\s"']*/g) ?? [];
+  const target = pathLike.find((token) => !SHELLS.has(token));
+  return target ?? command.trim().split(/\s+/)[0] ?? command;
+};
+var describeHoldTimeout = (holder) => {
+  const seconds = holder.timeoutSeconds;
+  if (seconds === null) return "no timeout set, so the agent default applies";
+  if (seconds >= 3600 && seconds % 3600 === 0) return `${seconds / 3600}h timeout`;
+  if (seconds >= 60 && seconds % 60 === 0) return `${seconds / 60}m timeout`;
+  return `${seconds}s timeout`;
+};
+var describeOtherHolder = (holder) => `another hook on ${holder.event}: ${holderExecutable(holder.command)} (${describeHoldTimeout(holder)}, runs ${holder.position} ours)`;
+var describeHoldSentence = (agentLabel) => `${agentLabel} waits for every hook on an event, so the terminal cannot move until that one returns, however fast your phone answered.`;
+
+export {
+  pusharyHookExecutable,
+  claudeWired,
+  codexWired,
+  geminiWired,
+  cursorWired,
+  cursorMcpAuthorization,
+  claudeOtherHolders,
+  codexOtherHolders,
+  geminiOtherHolders,
+  cursorOtherHolders,
+  holdsLong,
+  describeOtherHolder,
+  describeHoldSentence
+};

package/dist/{chunk-VF3RTVWY.js → chunk-EZIEXHYM.js}

@@ -6,10 +6,14 @@ import {
 var HOOK_SHELL = "/bin/sh -c";
 var LOCATE = 'B=$(command -v "$0") || exit 0; [ -f "$B" ] || exit 0; [ -x "$B" ] || exit 0';
 var NODE_PRESENT = "command -v node >/dev/null 2>&1 || exit 0";
+var CURSOR_NO_OPINION = { permission: "ask" };
+var shellDoubleQuoted = (text) => `"${text.replace(/(["\\$`])/g, "\\$1")}"`;
+var CURSOR_MISS = `{ printf %s ${shellDoubleQuoted(JSON.stringify(CURSOR_NO_OPINION))}; exit 0; }`;
 var HOOK_GUARD_SCRIPTS = {
   native_binary: `${LOCATE}; exec "$B" "$@"`,
   node_binary: `${LOCATE}; ${NODE_PRESENT}; exec "$B" "$@"`,
-  node_script: `[ -f "$0" ] || exit 0; ${NODE_PRESENT}; exec node "$0" "$@"`
+  node_script: `[ -f "$0" ] || exit 0; ${NODE_PRESENT}; exec node "$0" "$@"`,
+  cursor_gate_script: `[ -f "$0" ] || ${CURSOR_MISS}; command -v node >/dev/null 2>&1 || ${CURSOR_MISS}; exec node "$0" "$@"`
 };
 var BINARY_GUARDS = {
   native: "native_binary",
@@ -19,21 +23,25 @@ var guardKindOf = (target) => {
   switch (target.kind) {
     case "node":
       return "node_script";
+    case "cursor_gate":
+      return "cursor_gate_script";
     case "binary":
       return BINARY_GUARDS[target.runtime];
   }
 };
+var targetPath = (target) => target.kind === "binary" ? target.path : target.script;
+var runsThroughNode = (target) => target.kind !== "binary";
 var guardHookCommand = (target, platform = process.platform) => {
-  const path = quoteIfNeeded(target.kind === "node" ? target.script : target.path);
-  if (platform === "win32") return target.kind === "node" ? `node ${path}` : path;
+  const path = quoteIfNeeded(targetPath(target));
+  if (platform === "win32") return runsThroughNode(target) ? `node ${path}` : path;
   return `${HOOK_SHELL} '${HOOK_GUARD_SCRIPTS[guardKindOf(target)]}' ${path}`;
 };
 var guardBinary = (path, platform) => guardHookCommand({ kind: "binary", path, runtime: "node" }, platform);
-var guardNodeScript = (script, platform) => guardHookCommand({ kind: "node", script }, platform);
+var guardCursorGate = (script, platform) => guardHookCommand({ kind: "cursor_gate", script }, platform);
 var guardedArgv = (target, args = [], platform = process.platform) => {
-  const path = target.kind === "node" ? target.script : target.path;
+  const path = targetPath(target);
   if (platform === "win32") {
-    return target.kind === "node" ? ["node", path, ...args] : [path, ...args];
+    return runsThroughNode(target) ? ["node", path, ...args] : [path, ...args];
   }
   const [shell, ...shellArgs] = HOOK_SHELL.split(/\s+/);
   return [shell, ...shellArgs, HOOK_GUARD_SCRIPTS[guardKindOf(target)], path, ...args];
@@ -41,6 +49,6 @@ var guardedArgv = (target, args = [], platform = process.platform) => {
 
 export {
   guardBinary,
-  guardNodeScript,
+  guardCursorGate,
   guardedArgv
 };

package/dist/{chunk-7JZCADBR.js → chunk-F2ICEWZL.js}

@@ -7,10 +7,10 @@ import {
 } from "./chunk-L4ZCFMWW.js";
 import {
   getMachineId
-} from "./chunk-JTBDBKHU.js";
+} from "./chunk-54ELC7D7.js";
 import {
   pusharyDir
-} from "./chunk-3YGGEDJK.js";
+} from "./chunk-KUZWXPUS.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
@@ -383,18 +383,32 @@ var manageDaemonService = (action, options = {}) => {
   }
   return applyDaemonService(action, definition, { run: options.run });
 };
+var nominalDaemonService = (options) => buildDaemonService({
+  platform: options.platform ?? process.platform,
+  homeDir: options.homeDir ?? homedir(),
+  stateDir: options.stateDir ?? pusharyDir(),
+  execPath: options.execPath ?? process.execPath,
+  daemonEntry: options.daemonEntry ?? process.execPath,
+  pathEnv: options.pathEnv ?? process.env.PATH ?? "",
+  uid: options.uid ?? process.getuid?.()
+});
 var hasDaemonServiceDefinition = (options = {}) => {
-  const definition = buildDaemonService({
-    platform: options.platform ?? process.platform,
-    homeDir: options.homeDir ?? homedir(),
-    stateDir: options.stateDir ?? pusharyDir(),
-    execPath: options.execPath ?? process.execPath,
-    daemonEntry: options.daemonEntry ?? process.execPath,
-    pathEnv: options.pathEnv ?? process.env.PATH ?? "",
-    uid: options.uid ?? process.getuid?.()
-  });
+  const definition = nominalDaemonService(options);
   return definition !== null && existsSync(definition.definitionPath);
 };
+var daemonServiceDefinitionPath = (options = {}) => nominalDaemonService(options)?.definitionPath ?? null;
+var readInstalledDaemonService = (options = {}) => {
+  const definition = nominalDaemonService(options);
+  if (!definition) return null;
+  try {
+    return {
+      path: definition.definitionPath,
+      contents: readFileSync(definition.definitionPath, definition.encoding ?? "utf-8")
+    };
+  } catch {
+    return null;
+  }
+};
 var spawnDetachedDaemon = (plan, options = {}) => {
   const spawnImpl = options.spawnImpl ?? spawnClaude;
   const child = spawnImpl(plan.command, plan.args, {
@@ -418,13 +432,19 @@ var processIsAlive = (pid) => {
 };
 var isString = (value) => typeof value === "string" && value.length > 0;
 var isTimestamp = (value) => isString(value) && Number.isFinite(Date.parse(value));
+var daemonConfigurationId = (apiKey) => createHash("sha256").update(apiKey).digest("hex").slice(0, 16);
 var currentConfigurationId = () => {
   try {
-    return createHash("sha256").update(getApiKey()).digest("hex").slice(0, 16);
+    return daemonConfigurationId(getApiKey());
   } catch {
     return null;
   }
 };
+var parseDaemonLastError = (value) => {
+  if (typeof value !== "object" || value === null) return null;
+  const error = value;
+  return isString(error.message) && isTimestamp(error.at) ? { message: error.message, at: error.at } : null;
+};
 var parseDaemonState = (value) => {
   if (typeof value !== "object" || value === null) return null;
   const state = value;
@@ -438,7 +458,8 @@ var parseDaemonState = (value) => {
     startedAt: state.startedAt,
     updatedAt: state.updatedAt,
     lastSuccessfulHeartbeatAt: state.lastSuccessfulHeartbeatAt,
-    lastSuccessfulControlAt: state.lastSuccessfulControlAt ?? null
+    lastSuccessfulControlAt: state.lastSuccessfulControlAt ?? null,
+    lastError: parseDaemonLastError(state.lastError)
   };
 };
 var parseLockOwner = (value) => {
@@ -461,16 +482,17 @@ var readDaemonStatus = (options = {}) => {
       startedAt: null,
       updatedAt: null,
       lastSuccessfulHeartbeatAt: null,
-      lastSuccessfulControlAt: null
+      lastSuccessfulControlAt: null,
+      lastError: null
     };
   }
   const value = state.kind === "ok" ? parseDaemonState(state.value) : null;
   if (value) {
     const alive = (options.isProcessAlive ?? processIsAlive)(value.pid);
     const fresh = (options.now ?? Date.now)() - Date.parse(value.updatedAt) <= LOCAL_LEASE_TIMEOUT_MS;
-    const expectedConfigurationId = options.configurationId === void 0 ? currentConfigurationId() : options.configurationId;
+    const expectedConfigurationId2 = options.configurationId === void 0 ? currentConfigurationId() : options.configurationId;
     return {
-      kind: !alive || !fresh ? "unresponsive" : value.version !== installedVersion ? "version-mismatch" : expectedConfigurationId !== null && value.configurationId !== null && value.configurationId !== expectedConfigurationId ? "configuration-mismatch" : "running",
+      kind: !alive || !fresh ? "unresponsive" : value.version !== installedVersion ? "version-mismatch" : expectedConfigurationId2 !== null && value.configurationId !== null && value.configurationId !== expectedConfigurationId2 ? "configuration-mismatch" : "running",
       installedVersion,
       machineId: value.machineId,
       pid: value.pid,
@@ -479,7 +501,8 @@ var readDaemonStatus = (options = {}) => {
       startedAt: value.startedAt,
       updatedAt: value.updatedAt,
       lastSuccessfulHeartbeatAt: value.lastSuccessfulHeartbeatAt,
-      lastSuccessfulControlAt: value.lastSuccessfulControlAt
+      lastSuccessfulControlAt: value.lastSuccessfulControlAt,
+      lastError: value.lastError
     };
   }
   return {
@@ -492,7 +515,8 @@ var readDaemonStatus = (options = {}) => {
     startedAt: null,
     updatedAt: null,
     lastSuccessfulHeartbeatAt: null,
-    lastSuccessfulControlAt: null
+    lastSuccessfulControlAt: null,
+    lastError: null
   };
 };
 var safeUnlink = (path) => {
@@ -561,7 +585,8 @@ var acquireDaemonLease = (options = {}) => {
     startedAt,
     updatedAt: startedAt,
     lastSuccessfulHeartbeatAt: null,
-    lastSuccessfulControlAt: null
+    lastSuccessfulControlAt: null,
+    lastError: null
   };
   try {
     writeJsonAtomic(statePath(dir), state, 384);
@@ -605,6 +630,14 @@ var acquireDaemonLease = (options = {}) => {
           lastSuccessfulControlAt: timestamp
         });
       },
+      recordError: (message, at = now()) => {
+        const timestamp = new Date(at).toISOString();
+        updateState({
+          ...currentState,
+          updatedAt: timestamp,
+          lastError: { message: message.slice(0, 240), at: timestamp }
+        });
+      },
       shouldYield: () => {
         if (!isOwner()) return true;
         const target = readJsonSafe(targetPath(dir));
@@ -670,6 +703,44 @@ var stopDaemonRunning = async (options = {}) => {
   safeUnlink(lockPath(dir));
   return { kind: "stopped" };
 };
+var needsLoginPath = (dir) => join(dir, "daemon-needs-login.json");
+var isLoginReason = (value) => value === "key_rejected" || value === "plan_inactive";
+var parseDaemonNeedsLogin = (value) => {
+  if (typeof value !== "object" || value === null) return null;
+  const record = value;
+  if (!isLoginReason(record.reason) || !isTimestamp(record.at)) return null;
+  if (!(record.configurationId === null || isString(record.configurationId))) return null;
+  return { reason: record.reason, at: record.at, configurationId: record.configurationId };
+};
+var expectedConfigurationId = (options) => options.configurationId === void 0 ? currentConfigurationId() : options.configurationId;
+var writeDaemonNeedsLogin = (reason, options = {}) => {
+  const record = {
+    reason,
+    at: new Date((options.now ?? Date.now)()).toISOString(),
+    configurationId: expectedConfigurationId(options)
+  };
+  writeJsonAtomic(needsLoginPath(options.dir ?? pusharyDir()), record, 384);
+  return record;
+};
+var readDaemonNeedsLogin = (options = {}) => {
+  const stored = readJsonSafe(needsLoginPath(options.dir ?? pusharyDir()));
+  const record = stored.kind === "ok" ? parseDaemonNeedsLogin(stored.value) : null;
+  if (!record) return { kind: "none" };
+  return record.configurationId === expectedConfigurationId(options) ? { kind: "blocked", record } : { kind: "stale", record };
+};
+var clearDaemonNeedsLogin = (options = {}) => {
+  const path = needsLoginPath(options.dir ?? pusharyDir());
+  if (!existsSync(path)) return false;
+  safeUnlink(path);
+  return true;
+};
+var describeDaemonLoginBlock = (record) => record.reason === "key_rejected" ? `this machine's key was rejected at ${record.at}; run \`pushary login\` to sign in again` : `this workspace had no active plan at ${record.at}; pick one at pushary.com/dashboard/settings?tab=billing, then run \`pushary login\``;
+var recoverDaemonAfterLogin = (options = {}) => {
+  const cleared = clearDaemonNeedsLogin(options);
+  if (!cleared || !hasDaemonServiceDefinition(options)) return { cleared, restarted: false, detail: null };
+  const started = manageDaemonService("start", options);
+  return started.kind === "ok" ? { cleared, restarted: true, detail: null } : { cleared, restarted: false, detail: started.detail };
+};
 var deactivateDaemonService = async (action, options) => {
   const platform = options.platform ?? process.platform;
   const supported = ["darwin", "linux", "win32"].includes(platform);
@@ -966,6 +1037,10 @@ var ensureDaemonRunning = async (options = {}) => {
     return { kind: "not-configured", status: initial, detail: "Pushary is not configured on this machine" };
   }
   if (initial.kind === "running") return { kind: "running", status: initial };
+  const loginBlock = readDaemonNeedsLogin(options);
+  if (loginBlock.kind === "blocked") {
+    return { kind: "unavailable", status: initial, detail: describeDaemonLoginBlock(loginBlock.record) };
+  }
   let handoffStatus;
   try {
     handoffStatus = await requestDaemonHandoff(initial, options);
@@ -1020,10 +1095,17 @@ export {
   parseDaemonAction,
   manageDaemonService,
   hasDaemonServiceDefinition,
+  daemonServiceDefinitionPath,
+  readInstalledDaemonService,
   readDaemonStatus,
   acquireDaemonLease,
   requestDaemonHandoff,
   stopDaemonRunning,
+  writeDaemonNeedsLogin,
+  readDaemonNeedsLogin,
+  clearDaemonNeedsLogin,
+  describeDaemonLoginBlock,
+  recoverDaemonAfterLogin,
   stopDaemonService,
   disableDaemonService,
   replaceDaemonService,

package/dist/{chunk-JHJHCMAF.js → chunk-F7OURW3C.js}

@@ -72,13 +72,13 @@ import { homedir, tmpdir } from "os";
 import { createHash } from "crypto";
 import { existsSync, mkdirSync, writeFileSync, readFileSync, readdirSync, renameSync, unlinkSync, rmSync, statSync } from "fs";
 var PENDING_DIR = join(tmpdir(), "pushary-pending");
-var COMMAND_DIR = join(homedir(), ".pushary", "run", "commands");
+var commandRoot = () => process.env.PUSHARY_COMMAND_DIR?.trim() || join(homedir(), ".pushary", "run", "commands");
 var DEFAULT_SESSION = "_no_session";
 var GRACE_MS = 10 * 60 * 1e3;
 var sanitize = (sessionId) => sessionId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || DEFAULT_SESSION;
 var dirFor = (sessionId) => join(PENDING_DIR, sanitize(sessionId));
 var commandDirFor = (sessionId, namespace = "") => join(
-  COMMAND_DIR,
+  commandRoot(),
   createHash("sha256").update(namespace).digest("hex").slice(0, 16),
   sanitize(sessionId)
 );
@@ -122,12 +122,12 @@ var pruneExpiredCommands = (dir) => {
 var pruneExpiredCommandStore = () => {
   let namespaces;
   try {
-    namespaces = readdirSync(COMMAND_DIR, { withFileTypes: true });
+    namespaces = readdirSync(commandRoot(), { withFileTypes: true });
   } catch {
     return;
   }
   for (const namespace of namespaces.filter((entry) => entry.isDirectory())) {
-    const namespaceDir = join(COMMAND_DIR, namespace.name);
+    const namespaceDir = join(commandRoot(), namespace.name);
     let sessions;
     try {
       sessions = readdirSync(namespaceDir, { withFileTypes: true });
@@ -189,10 +189,27 @@ var removePendingCommand = (sessionId, id, namespace = "") => {
   }
 };
 var isDefaultSession = (sessionId) => sanitize(sessionId) === DEFAULT_SESSION;
-var savePendingQuestion = (sessionId, correlationId) => {
+var savePendingQuestion = (sessionId, correlationId, toolUseId) => {
   const dir = dirFor(sessionId);
   if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
-  writeFileSync(join(dir, correlationId), "", "utf-8");
+  writeFileSync(join(dir, correlationId), toolUseId ?? "", "utf-8");
+};
+var listPendingQuestionsForToolUse = (sessionId, toolUseId) => {
+  if (!toolUseId) return [];
+  const dir = dirFor(sessionId);
+  let files;
+  try {
+    files = readdirSync(dir);
+  } catch {
+    return [];
+  }
+  return files.filter((name) => {
+    try {
+      return readFileSync(join(dir, name), "utf-8") === toolUseId;
+    } catch {
+      return false;
+    }
+  });
 };
 var listPendingQuestions = (sessionId) => {
   const dir = dirFor(sessionId);
@@ -241,6 +258,7 @@ export {
   removePendingCommand,
   isDefaultSession,
   savePendingQuestion,
+  listPendingQuestionsForToolUse,
   listPendingQuestions,
   removePendingQuestion,
   removePendingSession

package/dist/{chunk-VASZ6TWW.js → chunk-FQL5E6NG.js}

@@ -1,9 +1,9 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-ZWEKONU6.js";
+} from "./chunk-CELX75MW.js";
 import {
   codexHomeFrom
-} from "./chunk-3YGGEDJK.js";
+} from "./chunk-KUZWXPUS.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-JVLB5CAJ.js → chunk-GL3FFM7A.js}

@@ -1,17 +1,17 @@
 import {
   PRETOOLUSE_GATED_TOOLS,
   PRETOOLUSE_PHONE_ANSWERED_TOOLS
-} from "./chunk-B2HND22S.js";
+} from "./chunk-2LAHXHBR.js";
 import {
   guardBinary
-} from "./chunk-VF3RTVWY.js";
+} from "./chunk-EZIEXHYM.js";
 import {
   isProtectedByScope
-} from "./chunk-3YGGEDJK.js";
+} from "./chunk-KUZWXPUS.js";
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-QINYXLA5.js";
+} from "./chunk-VNMKIJZB.js";
 
 // src/claude-config.ts
 import { join } from "path";
@@ -234,6 +234,7 @@ var GEMINI_HOOK_EVENTS = [
   { event: "BeforeTool", matcher: "run_shell_command|write_file|replace", delivery: "approval", timeoutMs: HOOK_BUDGETS.gemini.budgetSeconds * 1e3 },
   { event: "AfterTool", matcher: "run_shell_command|write_file|replace", delivery: "telemetry", timeoutMs: 1e4 },
   { event: "BeforeAgent", delivery: "telemetry", timeoutMs: 1e4 },
+  { event: "AfterAgent", delivery: "telemetry", timeoutMs: 1e4 },
   { event: "SessionStart", delivery: "telemetry", timeoutMs: 1e4 },
   { event: "SessionEnd", delivery: "telemetry", timeoutMs: 1e4 }
 ];
@@ -330,6 +331,7 @@ var missingGeminiHookEvents = (settings) => {
 export {
   parseVersion,
   compareVersion,
+  CLAUDE_HOOK_EVENTS,
   addClaudeMcpServer,
   isClaudeMcpSnapshot,
   captureClaudeMcpServer,
@@ -340,6 +342,7 @@ export {
   addPusharyHooks,
   removePusharySettings,
   GEMINI_HOOK_BINARY,
+  GEMINI_HOOK_EVENTS,
   addGeminiMcpServer,
   addGeminiHooks,
   removeGeminiSettings,

package/dist/{chunk-5YEF55AX.js → chunk-H2QZRQR2.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-JVLB5CAJ.js";
+} from "./chunk-GL3FFM7A.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-S4BLNILH.js → chunk-I463AEG3.js}

@@ -1,6 +1,6 @@
 import {
   shouldDeferToNativeMode
-} from "./chunk-QINYXLA5.js";
+} from "./chunk-VNMKIJZB.js";
 
 // src/native-defer.ts
 var nativeDeferOptions = () => {

package/dist/{chunk-ANMHIZZY.js → chunk-JW4KO5AF.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-QINYXLA5.js";
+} from "./chunk-VNMKIJZB.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-3YGGEDJK.js → chunk-KUZWXPUS.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-QINYXLA5.js";
+} from "./chunk-VNMKIJZB.js";
 
 // src/removal-scope.ts
 var namesAppLocator = (command) => command.includes(HOOK_LOCATOR_BINARY);
@@ -29,7 +29,7 @@ var codexHooksJson = () => join(codexHome(), "hooks.json");
 var codexAgentsMd = () => join(codexHome(), "AGENTS.md");
 var codexSkillDir = () => join(codexHome(), "skills", "pushary");
 var CODEX_HOOK_EVENTS = [
-  { event: "PermissionRequest", matcher: "Bash|apply_patch", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Waiting for your phone" },
+  { event: "PermissionRequest", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Waiting for your phone" },
   { event: "PreToolUse", matcher: "Bash|apply_patch", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Checking Pushary policy" },
   { event: "PostToolUse", matcher: "Bash|apply_patch", delivery: "telemetry", timeout: 10 },
   { event: "UserPromptSubmit", delivery: "telemetry", timeout: 10 },
@@ -286,6 +286,7 @@ export {
   codexHooksJson,
   codexAgentsMd,
   codexSkillDir,
+  CODEX_HOOK_EVENTS,
   addCodexMcpServer,
   readCodexMcpAuth,
   addCodexHooks,