@pushary/agent-hooks 0.95.2 → 0.95.5

package/dist/{chunk-DNVDKHQD.js → chunk-HCMM3BOW.js}

@@ -1,19 +1,9 @@
 import {
-  DEFAULT_SESSION,
   cancelQuestion,
-  isDefaultSession,
   isPolicyConfig,
-  listPendingQuestions,
-  listPendingQuestionsForToolUse,
-  markPendingCommandDelivered,
-  readPendingCommand,
-  removePendingCommand,
-  removePendingQuestion,
-  removePendingSession,
-  savePendingCommand,
   sendNotification,
   waitForAnswer
-} from "./chunk-RER3FRTD.js";
+} from "./chunk-XS33QBJA.js";
 import {
   AGENT_IDENTITIES,
   TEAMMATE_IDLE_ACTION,
@@ -34,20 +24,20 @@ import {
   summarizeStop,
   taskTitleFrom,
   toolResultErrorText
-} from "./chunk-CKOLDI47.js";
+} from "./chunk-BDI2MXTT.js";
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-V27AHID3.js";
+} from "./chunk-IVQMNLSA.js";
 import {
   getMachineId
-} from "./chunk-IAEXPTXA.js";
+} from "./chunk-N4VNLISN.js";
 import {
   withRetry
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-X7YWD6IS.js";
+} from "./chunk-KAVDAZ7A.js";
 import {
   getApiKey,
   getBaseUrl
@@ -55,6 +45,7 @@ import {
 import {
   HOOK_SOURCES,
   PENDING_COMMAND_PREFIX,
+  REPO_AWARE_AGENTS,
   gateOutputFor,
   isAutoApprove,
   localRepoKey,
@@ -63,7 +54,7 @@ import {
   pendingCommandEvents,
   resolveAutoResolveOrigin,
   resolvePolicy
-} from "./chunk-6FAHPGCZ.js";
+} from "./chunk-WDKHZRAS.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -72,7 +63,6 @@ import { join } from "path";
 import { tmpdir } from "os";
 var CACHE_TTL_MS = 60 * 1e3;
 var STALE_CACHE_MAX_MS = 12 * 60 * 60 * 1e3;
-var REPO_AWARE_AGENTS = ["claude_code", "codex", "gemini_cli", "opencode"];
 var policyRequestFor = (agentType) => ({
   agent: agentType,
   repoAware: REPO_AWARE_AGENTS.includes(agentType)
@@ -206,19 +196,190 @@ var fetchModeState = async (apiKey, sessionId, reuseWithinMs = 0, signal) => {
 };
 var fetchModeOverride = async (apiKey) => (await fetchModeState(apiKey)).mode;
 
+// src/pending.ts
+import { join as join2 } from "path";
+import { homedir, tmpdir as tmpdir2 } from "os";
+import { createHash as createHash2 } from "crypto";
+import { existsSync as existsSync2, mkdirSync, writeFileSync as writeFileSync2, readFileSync as readFileSync2, readdirSync, renameSync, unlinkSync, rmSync, statSync } from "fs";
+var PENDING_DIR = join2(tmpdir2(), "pushary-pending");
+var commandRoot = () => process.env.PUSHARY_COMMAND_DIR?.trim() || join2(homedir(), ".pushary", "run", "commands");
+var DEFAULT_SESSION = "_no_session";
+var GRACE_MS = 10 * 60 * 1e3;
+var sanitize = (sessionId) => sessionId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || DEFAULT_SESSION;
+var dirFor = (sessionId) => join2(PENDING_DIR, sanitize(sessionId));
+var commandDirFor = (sessionId, namespace = "") => join2(
+  commandRoot(),
+  createHash2("sha256").update(namespace).digest("hex").slice(0, 16),
+  sanitize(sessionId)
+);
+var legacyCommandFile = (sessionId, namespace = "") => join2(commandDirFor(sessionId, namespace), "command.json");
+var commandFile = (sessionId, id, namespace = "") => join2(commandDirFor(sessionId, namespace), `${createHash2("sha256").update(id).digest("hex")}.json`);
+var readCommandFile = (file) => {
+  try {
+    const value = JSON.parse(readFileSync2(file, "utf-8"));
+    if (typeof value.id !== "string" || typeof value.text !== "string" || typeof value.expiresAtMs !== "number") return null;
+    if (value.expiresAtMs <= Date.now()) {
+      unlinkSync(file);
+      return null;
+    }
+    return {
+      ...value,
+      delivered: value.delivered === true,
+      ...value.failed === true ? { failed: true } : {}
+    };
+  } catch {
+    return null;
+  }
+};
+var readPendingCommandById = (sessionId, id, namespace = "") => {
+  const current = readCommandFile(commandFile(sessionId, id, namespace));
+  if (current?.id === id) return current;
+  const legacy = readCommandFile(legacyCommandFile(sessionId, namespace));
+  return legacy?.id === id ? legacy : null;
+};
+var pruneExpiredCommands = (dir) => {
+  let files;
+  try {
+    files = readdirSync(dir).filter((file) => file.endsWith(".json"));
+  } catch {
+    return [];
+  }
+  return files.flatMap((file) => {
+    const command = readCommandFile(join2(dir, file));
+    return command ? [command] : [];
+  });
+};
+var pruneExpiredCommandStore = () => {
+  let namespaces;
+  try {
+    namespaces = readdirSync(commandRoot(), { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const namespace of namespaces.filter((entry) => entry.isDirectory())) {
+    const namespaceDir = join2(commandRoot(), namespace.name);
+    let sessions;
+    try {
+      sessions = readdirSync(namespaceDir, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const session of sessions.filter((entry) => entry.isDirectory())) {
+      pruneExpiredCommands(join2(namespaceDir, session.name));
+    }
+  }
+};
+var readPendingCommand = (sessionId, namespace = "") => {
+  const commands = pruneExpiredCommands(commandDirFor(sessionId, namespace));
+  return commands.find((command) => !command.delivered && !command.failed) ?? commands[0] ?? null;
+};
+var savePendingCommand = (sessionId, command, namespace = "") => {
+  const dir = commandDirFor(sessionId, namespace);
+  try {
+    mkdirSync(dir, { recursive: true, mode: 448 });
+    pruneExpiredCommandStore();
+    if (readPendingCommandById(sessionId, command.id, namespace)) return false;
+    writeFileSync2(commandFile(sessionId, command.id, namespace), JSON.stringify(command), { encoding: "utf-8", mode: 384, flag: "wx" });
+    return true;
+  } catch {
+    return false;
+  }
+};
+var updatePendingCommand = (sessionId, id, update, namespace = "") => {
+  const command = readPendingCommandById(sessionId, id, namespace);
+  if (!command) return false;
+  const currentFile = commandFile(sessionId, id, namespace);
+  const file = existsSync2(currentFile) ? currentFile : legacyCommandFile(sessionId, namespace);
+  const temporary = `${file}.${process.pid}.tmp`;
+  try {
+    writeFileSync2(temporary, JSON.stringify({ ...command, ...update, text: "" }), { encoding: "utf-8", mode: 384 });
+    renameSync(temporary, file);
+    return true;
+  } catch {
+    try {
+      unlinkSync(temporary);
+    } catch {
+    }
+    return false;
+  }
+};
+var markPendingCommandDelivered = (sessionId, id, namespace = "") => updatePendingCommand(sessionId, id, { delivered: true, failed: void 0 }, namespace);
+var markPendingCommandFailed = (sessionId, id, namespace = "") => updatePendingCommand(sessionId, id, { delivered: false, failed: true }, namespace);
+var removePendingCommand = (sessionId, id, namespace = "") => {
+  if (!readPendingCommandById(sessionId, id, namespace)) return;
+  try {
+    unlinkSync(commandFile(sessionId, id, namespace));
+  } catch {
+  }
+  try {
+    if (readCommandFile(legacyCommandFile(sessionId, namespace))?.id === id) {
+      unlinkSync(legacyCommandFile(sessionId, namespace));
+    }
+  } catch {
+  }
+};
+var isDefaultSession = (sessionId) => sanitize(sessionId) === DEFAULT_SESSION;
+var listPendingQuestionsForToolUse = (sessionId, toolUseId) => {
+  if (!toolUseId) return [];
+  const dir = dirFor(sessionId);
+  let files;
+  try {
+    files = readdirSync(dir);
+  } catch {
+    return [];
+  }
+  return files.filter((name) => {
+    try {
+      return readFileSync2(join2(dir, name), "utf-8") === toolUseId;
+    } catch {
+      return false;
+    }
+  });
+};
+var listPendingQuestions = (sessionId) => {
+  const dir = dirFor(sessionId);
+  let files;
+  try {
+    files = readdirSync(dir);
+  } catch {
+    return [];
+  }
+  if (!isDefaultSession(sessionId)) return files;
+  const cutoff = Date.now() - GRACE_MS;
+  return files.filter((name) => {
+    try {
+      return statSync(join2(dir, name)).mtimeMs < cutoff;
+    } catch {
+      return false;
+    }
+  });
+};
+var removePendingQuestion = (sessionId, correlationId) => {
+  try {
+    unlinkSync(join2(dirFor(sessionId), correlationId));
+  } catch {
+  }
+};
+var removePendingSession = (sessionId) => {
+  try {
+    rmSync(dirFor(sessionId), { recursive: true, force: true });
+  } catch {
+  }
+};
+
 // src/repo.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2, statSync } from "fs";
-import { basename, dirname, isAbsolute, join as join2, resolve } from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync3, statSync as statSync2 } from "fs";
+import { basename, dirname, isAbsolute, join as join3, resolve } from "path";
 var MAX_PARENT_WALK = 64;
 var GIT_FILE_PREFIX = "gitdir:";
 var findGitDir = (startDir) => {
   let current = resolve(startDir);
   for (let depth = 0; depth < MAX_PARENT_WALK; depth += 1) {
-    const candidate = join2(current, ".git");
+    const candidate = join3(current, ".git");
     try {
-      if (existsSync2(candidate)) {
-        if (statSync(candidate).isDirectory()) return candidate;
-        const pointer = readFileSync2(candidate, "utf-8").trim();
+      if (existsSync3(candidate)) {
+        if (statSync2(candidate).isDirectory()) return candidate;
+        const pointer = readFileSync3(candidate, "utf-8").trim();
         if (pointer.startsWith(GIT_FILE_PREFIX)) {
           const target = pointer.slice(GIT_FILE_PREFIX.length).trim();
           return isAbsolute(target) ? target : resolve(current, target);
@@ -234,7 +395,7 @@ var findGitDir = (startDir) => {
 };
 var configPathFor = (gitDir) => {
   const index = gitDir.replace(/\\/g, "/").indexOf("/worktrees/");
-  return index === -1 ? join2(gitDir, "config") : join2(gitDir.slice(0, index), "config");
+  return index === -1 ? join3(gitDir, "config") : join3(gitDir.slice(0, index), "config");
 };
 var ORIGIN_SECTION = /^\[remote "origin"\]/;
 var SECTION_HEADER = /^\[/;
@@ -242,9 +403,9 @@ var URL_LINE = /^url\s*=\s*(.+)$/;
 var readOriginRemote = (gitDir) => {
   try {
     const configPath = configPathFor(gitDir);
-    if (!existsSync2(configPath)) return void 0;
+    if (!existsSync3(configPath)) return void 0;
     let inOrigin = false;
-    for (const rawLine of readFileSync2(configPath, "utf-8").split("\n")) {
+    for (const rawLine of readFileSync3(configPath, "utf-8").split("\n")) {
       const line = rawLine.trim();
       if (SECTION_HEADER.test(line)) {
         inOrigin = ORIGIN_SECTION.test(line);
@@ -291,10 +452,10 @@ var repoKeyFor = (cwd) => {
 };
 
 // src/usage.ts
-import { closeSync, mkdirSync, openSync, readFileSync as readFileSync3, readSync, statSync as statSync2, writeFileSync as writeFileSync2 } from "fs";
-import { createHash as createHash2 } from "crypto";
-import { join as join3 } from "path";
-import { tmpdir as tmpdir2 } from "os";
+import { closeSync, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync4, readSync, statSync as statSync3, writeFileSync as writeFileSync3 } from "fs";
+import { createHash as createHash3 } from "crypto";
+import { join as join4 } from "path";
+import { tmpdir as tmpdir3 } from "os";
 var DEFAULT_PRICES = [
   { match: "opus-4-1", in: 15, out: 75 },
   { match: "opus-4-0", in: 15, out: 75 },
@@ -329,12 +490,12 @@ var estimateCostUsd = (usage, model) => {
   const perTokenOut = price.out / 1e6;
   return usage.inputTokens * perTokenIn + usage.outputTokens * perTokenOut + usage.cacheCreationTokens * perTokenIn * CACHE_WRITE_MULTIPLIER + usage.cacheReadTokens * perTokenIn * CACHE_READ_MULTIPLIER;
 };
-var stateDir = () => process.env.PUSHARY_USAGE_DIR?.trim() || join3(tmpdir2(), "pushary-usage");
-var stateFile = (sessionId) => join3(stateDir(), sessionId.replace(/[^a-zA-Z0-9_-]/g, "_"));
+var stateDir = () => process.env.PUSHARY_USAGE_DIR?.trim() || join4(tmpdir3(), "pushary-usage");
+var stateFile = (sessionId) => join4(stateDir(), sessionId.replace(/[^a-zA-Z0-9_-]/g, "_"));
 var emptyState = () => ({ offset: 0, tokensIn: 0, tokensOut: 0, costUsd: 0, recentIds: [] });
 var readState = (path) => {
   try {
-    const parsed = JSON.parse(readFileSync3(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync4(path, "utf-8"));
     if (typeof parsed.offset === "number" && parsed.offset >= 0 && typeof parsed.tokensIn === "number" && typeof parsed.tokensOut === "number" && typeof parsed.costUsd === "number" && Array.isArray(parsed.recentIds)) {
       return {
         offset: parsed.offset,
@@ -409,7 +570,7 @@ var extractUserText = (content) => {
 };
 var readLastUserPrompt = (transcriptPath) => {
   try {
-    const size = statSync2(transcriptPath).size;
+    const size = statSync3(transcriptPath).size;
     const start = Math.max(0, size - USER_PROMPT_TAIL_BYTES);
     const lines = readRange(transcriptPath, start, size).toString("utf-8").split("\n");
     for (let i = lines.length - 1; i >= 0; i -= 1) {
@@ -432,7 +593,7 @@ var readLastUserPrompt = (transcriptPath) => {
 };
 var readNewUsage = (transcriptPath, sessionId) => {
   try {
-    const file = statSync2(transcriptPath);
+    const file = statSync3(transcriptPath);
     const size = file.size;
     const path = stateFile(sessionId);
     let state = readState(path);
@@ -450,14 +611,14 @@ var readNewUsage = (transcriptPath, sessionId) => {
         state.offset += lastNewline + 1;
       }
     }
-    mkdirSync(stateDir(), { recursive: true });
-    writeFileSync2(path, JSON.stringify(state), "utf-8");
+    mkdirSync2(stateDir(), { recursive: true });
+    writeFileSync3(path, JSON.stringify(state), "utf-8");
     if (state.tokensIn === 0 && state.tokensOut === 0) return null;
     return {
       // Identical cursor-range reports share an identity across transport retries.
       // Native message identity distinguishes an in-place rotation of the range.
       // This does not serialize readers of different, potentially overlapping ranges.
-      eventId: createHash2("sha256").update(JSON.stringify([
+      eventId: createHash3("sha256").update(JSON.stringify([
         sessionId,
         file.dev,
         file.ino,
@@ -542,18 +703,18 @@ var phoneDrivenEnv = (base) => ({
 });
 
 // src/throttle.ts
-import { join as join4 } from "path";
-import { tmpdir as tmpdir3 } from "os";
-import { createHash as createHash3 } from "crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, statSync as statSync3, writeFileSync as writeFileSync3 } from "fs";
-var THROTTLE_DIR = join4(tmpdir3(), "pushary-throttle");
-var markerPath = (key) => join4(THROTTLE_DIR, createHash3("sha256").update(key).digest("hex").slice(0, 16));
+import { join as join5 } from "path";
+import { tmpdir as tmpdir4 } from "os";
+import { createHash as createHash4 } from "crypto";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "fs";
+var THROTTLE_DIR = join5(tmpdir4(), "pushary-throttle");
+var markerPath = (key) => join5(THROTTLE_DIR, createHash4("sha256").update(key).digest("hex").slice(0, 16));
 var throttlePass = (key, windowMs) => {
   try {
     const path = markerPath(key);
-    if (existsSync3(path) && Date.now() - statSync3(path).mtimeMs < windowMs) return false;
-    mkdirSync2(THROTTLE_DIR, { recursive: true });
-    writeFileSync3(path, "", "utf-8");
+    if (existsSync4(path) && Date.now() - statSync4(path).mtimeMs < windowMs) return false;
+    mkdirSync3(THROTTLE_DIR, { recursive: true });
+    writeFileSync4(path, "", "utf-8");
     return true;
   } catch {
     return false;
@@ -561,28 +722,28 @@ var throttlePass = (key, windowMs) => {
 };
 
 // src/events.ts
-import { basename as basename2, join as join5 } from "path";
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync4, statSync as statSync4, writeFileSync as writeFileSync4 } from "fs";
-import { tmpdir as tmpdir4 } from "os";
-var INTENT_DIR = join5(tmpdir4(), "pushary-intent");
+import { basename as basename2, join as join6 } from "path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync5, statSync as statSync5, writeFileSync as writeFileSync5 } from "fs";
+import { tmpdir as tmpdir5 } from "os";
+var INTENT_DIR = join6(tmpdir5(), "pushary-intent");
 var INTENT_MAX_BYTES = 2048;
 var INTENT_GRACE_MS = 10 * 60 * 1e3;
 var sanitizeSession = (sessionId) => sessionId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || DEFAULT_SESSION;
-var intentFile = (sessionId) => join5(INTENT_DIR, sanitizeSession(sessionId));
+var intentFile = (sessionId) => join6(INTENT_DIR, sanitizeSession(sessionId));
 var saveLastPrompt = (sessionId, prompt) => {
   try {
     const trimmed = prompt.replace(/\s+/g, " ").trim().slice(0, INTENT_MAX_BYTES);
     if (!trimmed) return;
-    mkdirSync3(INTENT_DIR, { recursive: true });
-    writeFileSync4(intentFile(sessionId), trimmed, "utf-8");
+    mkdirSync4(INTENT_DIR, { recursive: true });
+    writeFileSync5(intentFile(sessionId), trimmed, "utf-8");
   } catch {
   }
 };
 var readLastPrompt = (sessionId) => {
   try {
     const path = intentFile(sessionId);
-    if (isDefaultSession(sessionId) && statSync4(path).mtimeMs < Date.now() - INTENT_GRACE_MS) return void 0;
-    const value = readFileSync4(path, "utf-8").trim();
+    if (isDefaultSession(sessionId) && statSync5(path).mtimeMs < Date.now() - INTENT_GRACE_MS) return void 0;
+    const value = readFileSync5(path, "utf-8").trim();
     return value.length > 0 ? value : void 0;
   } catch {
     return void 0;
@@ -645,8 +806,8 @@ var POLICY_CACHE_TTL_MS = 5 * 60 * 1e3;
 var readFreshCachedPolicy = (apiKey, agentType, sessionId) => {
   const request = policyRequestFor(agentType);
   const path = policyCacheFile(apiKey, request.agent, request.repoAware);
-  if (!existsSync4(path)) return null;
-  const cached = JSON.parse(readFileSync4(path, "utf-8"));
+  if (!existsSync5(path)) return null;
+  const cached = JSON.parse(readFileSync5(path, "utf-8"));
   if (!isPolicyConfig(cached)) return null;
   if ((cached._sessionId ?? null) !== (sessionId ?? null)) return null;
   if (!cached._cachedAt || Date.now() - cached._cachedAt >= POLICY_CACHE_TTL_MS) return null;
@@ -1139,6 +1300,13 @@ export {
   fetchModeState,
   fetchModeOverride,
   phoneDrivenEnv,
+  DEFAULT_SESSION,
+  readPendingCommandById,
+  readPendingCommand,
+  savePendingCommand,
+  markPendingCommandDelivered,
+  markPendingCommandFailed,
+  removePendingCommand,
   repoKeyFor,
   throttlePass,
   readLastUserPrompt,

package/dist/{chunk-76XICHYT.js → chunk-HGUZOUB2.js}

@@ -1,16 +1,16 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-7LUFYRH4.js";
+} from "./chunk-2D7BAOMY.js";
 import {
   guardBinary
-} from "./chunk-EZIEXHYM.js";
+} from "./chunk-3AJIK5AO.js";
 import {
   isProtectedByScope
-} from "./chunk-WB2C7VPF.js";
+} from "./chunk-OW6AZDY2.js";
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-6FAHPGCZ.js";
+} from "./chunk-WDKHZRAS.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-E3NF5CL2.js → chunk-HQIVR7MM.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-6FAHPGCZ.js";
+} from "./chunk-WDKHZRAS.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";
@@ -174,15 +174,18 @@ export const PusharyPlugin = async ({ client, directory, worktree }) => {
       : null
     const current = client && client.permission && typeof client.permission.reply === "function"
       ? () => client.permission.reply({
+          // Current v2 uses flat parameters; older generated clients read path/body.
+          requestID: asked.id, reply: allow ? "once" : "reject",
           path: { requestID: asked.id },
           body: { reply: allow ? "once" : "reject" },
-        })
+        }, { throwOnError: true })
       : null
 
     for (const attempt of [legacy, current]) {
       if (!attempt) continue
       try {
-        await attempt()
+        const result = await attempt()
+        if (result && result.error) continue
         return
       } catch {
         // The person answered first, or this client does not serve that route.

package/dist/{chunk-JDFB3YKG.js → chunk-I6GZX3FT.js}

@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-6FAHPGCZ.js";
+} from "./chunk-WDKHZRAS.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;
@@ -148,7 +148,7 @@ var describeKeyCheck = (check, baseUrl = getBaseUrl()) => {
       return {
         message: "Your Pushary plan is not active, so approvals will not deliver yet.",
         next: [
-          "Your agents are configured and your key itself is fine.",
+          "Your key is valid; activating the plan does not require replacing it.",
           `Activate the plan: ${check.upgradeUrl}`,
           "Then run: pushary doctor"
         ],
@@ -158,7 +158,7 @@ var describeKeyCheck = (check, baseUrl = getBaseUrl()) => {
     case "unreachable":
       return {
         message: `Could not reach pushary.com to verify the key (${check.detail}).`,
-        next: ["Continuing anyway. Run `pushary doctor` once you are online."],
+        next: ["Account readiness is unverified. Re-run `pushary setup` once you are online."],
         exitCode: EXIT.UNREACHABLE,
         fatal: false
       };

package/dist/{chunk-3OXHYPZG.js → chunk-IM2A5H33.js}

@@ -3,6 +3,9 @@ import {
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
 } from "./chunk-L4ZCFMWW.js";
+import {
+  MANAGED_PROVIDERS
+} from "./chunk-WDKHZRAS.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";
@@ -39,7 +42,7 @@ var resolveControlPolicy = (input) => {
   if (input.providerAvailable && input.managerAvailable) return "enabled";
   return input.servicePresent ? "legacy" : "unsupported";
 };
-var detectProviderLiveCapabilities = (providers = ["claude", "codex", "gemini"]) => {
+var detectProviderLiveCapabilities = (providers = MANAGED_PROVIDERS) => {
   const enabled = new Set(providers);
   const geminiBin = enabled.has("gemini") ? resolveBinary("gemini") : void 0;
   return providerLiveCapabilities({

package/dist/{chunk-V27AHID3.js → chunk-IVQMNLSA.js}

@@ -1,21 +1,12 @@
 import {
-  ASKED_IN_EVERY_MODE_TOOLS
-} from "./chunk-6FAHPGCZ.js";
+  ASKED_IN_EVERY_MODE_TOOLS,
+  PRETOOLUSE_GATED_TOOLS
+} from "./chunk-WDKHZRAS.js";
 
 // src/claude-tools.ts
-var PRETOOLUSE_GATED_TOOLS = [
-  "Bash",
-  "Write",
-  "Edit",
-  "MultiEdit",
-  "NotebookEdit",
-  "PowerShell",
-  "Monitor"
-];
 var PRETOOLUSE_PHONE_ANSWERED_TOOLS = ASKED_IN_EVERY_MODE_TOOLS;
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];
 var POSTTOOLUSE_MIRRORED_TOOLS = [...PRETOOLUSE_GATED_TOOLS, ...POSTTOOLUSE_MIRROR_ONLY_TOOLS];
-var PRETOOLUSE_HANDLED_TOOLS = /* @__PURE__ */ new Set([...PRETOOLUSE_GATED_TOOLS, ...PRETOOLUSE_PHONE_ANSWERED_TOOLS]);
 
 // src/claude-notifications.ts
 var NOTIFICATION_MATCHED_TYPES = [
@@ -43,11 +34,9 @@ var NOTIFICATION_PUSH_TYPES = /* @__PURE__ */ new Set([
 ]);
 
 export {
-  PRETOOLUSE_GATED_TOOLS,
   PRETOOLUSE_PHONE_ANSWERED_TOOLS,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS,
   POSTTOOLUSE_MIRRORED_TOOLS,
-  PRETOOLUSE_HANDLED_TOOLS,
   NOTIFICATION_MATCHED_TYPES,
   NOTIFICATION_PUSH_TYPES
 };

package/dist/{chunk-4LL6LG5X.js → chunk-KAVDAZ7A.js}

@@ -1,3 +1,10 @@
+import {
+  configFilePath
+} from "./chunk-2UMNXADU.js";
+import {
+  normalizeInstallSource
+} from "./chunk-WDKHZRAS.js";
+
 // src/cli/fsx.ts
 import { copyFileSync, existsSync, fsyncSync, mkdirSync, openSync, closeSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";
 import { dirname, join } from "path";
@@ -57,10 +64,45 @@ var writeJsonAtomicDurable = (filePath, data, mode) => {
   }
 };
 
+// src/install-source.ts
+import { readFileSync as readFileSync2 } from "fs";
+var ENV_OVERRIDE = "PUSHARY_INSTALL_SOURCE";
+var PLUGIN_ROOT = "CLAUDE_PLUGIN_ROOT";
+var EDITOR_PLUGIN_MARKERS = ["cursor-plugin", "vscode-plugin"];
+var detectInstallSource = (env = process.env, argv = process.argv) => {
+  const declared = env[ENV_OVERRIDE]?.trim();
+  if (declared) return normalizeInstallSource(declared);
+  const pluginRoot = env[PLUGIN_ROOT]?.trim();
+  if (pluginRoot) {
+    return EDITOR_PLUGIN_MARKERS.some((marker) => pluginRoot.includes(marker)) ? "editor_plugin" : "claude_plugin";
+  }
+  const entry = argv[1] ?? "";
+  if (entry.includes("_npx")) return "npx";
+  if (entry) return "npm";
+  return "unknown";
+};
+var storedInstallSource = () => {
+  try {
+    const parsed = JSON.parse(readFileSync2(configFilePath(), "utf-8"));
+    const stored = parsed.installSource;
+    return typeof stored === "string" && stored ? normalizeInstallSource(stored) : void 0;
+  } catch {
+    return void 0;
+  }
+};
+var resolveInstallSourceFor = (config) => {
+  const stored = config.installSource;
+  if (typeof stored === "string" && stored) return normalizeInstallSource(stored);
+  return detectInstallSource();
+};
+var reportedInstallSource = () => storedInstallSource() ?? detectInstallSource();
+
 export {
   readJsonSafe,
   backupFile,
   writeFileAtomic,
   writeJsonAtomic,
-  writeJsonAtomicDurable
+  writeJsonAtomicDurable,
+  resolveInstallSourceFor,
+  reportedInstallSource
 };

package/dist/chunk-KBITFQST.js

@@ -0,0 +1,6 @@
+// src/hooks-spec.ts
+var CURSOR_GATE_SCRIPT = "pushary-gate.mjs";
+
+export {
+  CURSOR_GATE_SCRIPT
+};

package/dist/{chunk-AMZJ3CKW.js → chunk-KI4PA7MQ.js}

@@ -15,7 +15,7 @@ import {
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-X7YWD6IS.js";
+} from "./chunk-KAVDAZ7A.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-IAEXPTXA.js → chunk-N4VNLISN.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-WB2C7VPF.js";
+} from "./chunk-OW6AZDY2.js";
 import {
   writeFileAtomic
-} from "./chunk-4LL6LG5X.js";
+} from "./chunk-KAVDAZ7A.js";
 
 // src/identity.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-VX3BWMC5.js → chunk-OEKFD5BC.js}

@@ -1,6 +1,6 @@
 import {
   registerTranscript
-} from "./chunk-UW4LWAWY.js";
+} from "./chunk-4RF52LSU.js";
 
 // src/admission.ts
 import { readFileSync } from "fs";