@pushary/agent-hooks 0.97.0 → 0.99.0

package/dist/{chunk-FU5SQKAY.js → chunk-JXELRCU5.js}

@@ -2,16 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-IBRX7LRE.js";
+} from "./chunk-PD6JY33P.js";
 import {
   CODEX_HOOK_EVENTS,
-  hasCodexHooks
-} from "./chunk-67RNDRKL.js";
+  hasCodexHooks,
+  holdBudgetOf
+} from "./chunk-JBJBVERL.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -73,31 +74,20 @@ var toSeconds = (timeout, unit) => {
 };
 var registeredHooks = (entries, shape, unit) => {
   if (!Array.isArray(entries)) return [];
-  return entries.flatMap((entry, entryIndex) => {
+  return entries.flatMap((entry) => {
     const container = record(entry);
     if (!container) return [];
     const hooks = shape === "nested" ? Array.isArray(container.hooks) ? container.hooks : [] : [container];
-    return hooks.flatMap((hook, hookIndex) => {
+    return hooks.flatMap((hook) => {
       const command = record(hook)?.command;
       if (typeof command !== "string" || command.trim() === "") return [];
-      return [{
-        command,
-        timeoutSeconds: toSeconds(record(hook)?.timeout, unit),
-        order: [entryIndex, hookIndex]
-      }];
+      return [{ command, timeoutSeconds: toSeconds(record(hook)?.timeout, unit) }];
     });
   });
 };
-var runsBefore = (a, b) => a[0] < b[0] || a[0] === b[0] && a[1] < b[1];
 var holdersOnEvent = (event, hooks) => {
-  const ours = hooks.find((hook) => pusharyHookExecutable(hook.command) !== null);
-  if (!ours) return [];
-  return hooks.filter((hook) => pusharyHookExecutable(hook.command) === null).map((hook) => ({
-    event,
-    command: hook.command,
-    timeoutSeconds: hook.timeoutSeconds,
-    position: runsBefore(hook.order, ours.order) ? "before" : "after"
-  }));
+  if (!hooks.some((hook) => pusharyHookExecutable(hook.command) !== null)) return [];
+  return hooks.filter((hook) => pusharyHookExecutable(hook.command) === null).map((hook) => ({ event, command: hook.command, timeoutSeconds: hook.timeoutSeconds }));
 };
 var otherHolders = (hooks, events, shape, unit) => {
   const table = record(hooks);
@@ -112,11 +102,14 @@ var claudeOtherHolders = (settings) => otherHolders(record(settings)?.hooks, CLA
 var codexOtherHolders = (hooks) => otherHolders(record(hooks)?.hooks, CODEX_GATE_EVENTS, "nested", "seconds");
 var geminiOtherHolders = (settings) => otherHolders(record(settings)?.hooks, GEMINI_GATE_EVENTS, "nested", "milliseconds");
 var cursorOtherHolders = (userHooks) => otherHolders(record(userHooks)?.hooks, CURSOR_GATE_EVENTS, "flat", "seconds");
-var holdEvents = (table) => table.filter((hook) => hook.holds).map((hook) => hook.event);
+var holdEvents = (table) => table.flatMap((hook) => {
+  const seconds = holdBudgetOf(hook);
+  return seconds === void 0 ? [] : [{ event: hook.event, seconds }];
+});
 var unprovenHolds = (hooks, events) => {
   const table = record(hooks);
   if (!table) return [];
-  return events.filter((event) => registeredHooks(table[event], "nested", "seconds").some((hook) => pusharyHookExecutable(hook.command) !== null && hookCommandHoldBudget(hook.command) === void 0));
+  return events.filter(({ event, seconds }) => registeredHooks(table[event], "nested", "seconds").some((hook) => pusharyHookExecutable(hook.command) !== null && hookCommandHoldBudget(hook.command) !== seconds)).map(({ event }) => event);
 };
 var claudeUnprovenHolds = (settings) => unprovenHolds(record(settings)?.hooks, holdEvents(CLAUDE_HOOK_EVENTS));
 var codexUnprovenHolds = (hooks) => unprovenHolds(record(hooks)?.hooks, holdEvents(CODEX_HOOK_EVENTS));
@@ -134,7 +127,7 @@ var describeHoldTimeout = (holder) => {
   if (seconds >= 60 && seconds % 60 === 0) return `${seconds / 60}m timeout`;
   return `${seconds}s timeout`;
 };
-var describeOtherHolder = (holder) => `another hook on ${holder.event}: ${holderExecutable(holder.command)} (${describeHoldTimeout(holder)}, runs ${holder.position} ours)`;
+var describeOtherHolder = (holder) => `another hook also registered on ${holder.event}: ${holderExecutable(holder.command)} (${describeHoldTimeout(holder)})`;
 var describeHoldSentence = (agentLabel) => `${agentLabel} waits for every hook on an event, so the terminal cannot move until that one returns, however fast your phone answered.`;
 
 export {

package/dist/{chunk-YRXVC4HL.js → chunk-K4XFCEVI.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-IBRX7LRE.js";
+} from "./chunk-PD6JY33P.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-GGYH6LIE.js → chunk-K6BASBQJ.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-VF7YOT2W.js";
+} from "./chunk-4PBCNVI3.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-H4VNAOCG.js → chunk-LBNAGGLV.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", "custom"];

package/dist/{chunk-DOKFLZWL.js → chunk-LWKPMSBB.js}

@@ -1,17 +1,20 @@
 import {
   detectClaudeVersion
-} from "./chunk-YRXVC4HL.js";
+} from "./chunk-K4XFCEVI.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-6WJKYD3Q.js";
+} from "./chunk-QS55LDX4.js";
 import {
+  claudeUnprovenHolds,
   claudeWired,
+  codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-FU5SQKAY.js";
+} from "./chunk-JXELRCU5.js";
 import {
+  CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
@@ -21,7 +24,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-IBRX7LRE.js";
+} from "./chunk-PD6JY33P.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -31,67 +34,48 @@ import {
   codexConfigToml,
   codexHookPositions,
   codexHooksJson,
+  codexRegistrationHolder,
+  codexVacatedIndexes,
+  dropVacatedCodexHookTrust,
   guardBinary,
   hasCodexHooks,
-  resolveGlobalBinDir,
+  namesOurBinary,
+  registeredCommands,
+  registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-67RNDRKL.js";
+} from "./chunk-JBJBVERL.js";
 import {
   readJsonSafe,
+  writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-VTUN7WSG.js";
-import {
-  HOOK_LOCATOR_BINARY
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-4LL6LG5X.js";
 
 // src/reapply.ts
-import { join } from "path";
+import { dirname, join } from "path";
 import { homedir } from "os";
-import { readFileSync, writeFileSync } from "fs";
+import { readFileSync, statSync } from "fs";
 import { parse as parseTOML, stringify as stringifyTOML } from "smol-toml";
 
 // src/reregister.ts
 var asRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
-var commandsUnder = (settings) => {
-  const hooks = asRecord(settings?.hooks);
-  if (!hooks) return [];
-  const found = [];
-  for (const [event, value] of Object.entries(hooks)) {
-    if (!Array.isArray(value)) continue;
-    for (const item of value) {
-      const inner = asRecord(item)?.hooks;
-      if (!Array.isArray(inner)) continue;
-      for (const hook of inner) {
-        const command = asRecord(hook)?.command;
-        if (typeof command === "string") found.push({ event, command });
-      }
-    }
-  }
-  return found;
-};
-var segments = (command) => command.split(/[\s/\\"']+/).map((segment) => segment.replace(/\.(cmd|exe)$/i, ""));
-var CLI_BINARIES = new Set(CLAUDE_HOOK_EVENTS.map((hook) => hook.binary));
-var namesLocator = (command) => segments(command).includes(HOOK_LOCATOR_BINARY);
-var namesCliBinary = (command) => segments(command).some((segment) => CLI_BINARIES.has(segment));
-var registrationHolder = (settings) => {
-  const commands = commandsUnder(settings);
-  if (commands.some(({ command }) => namesLocator(command))) return "app";
-  return commands.some(({ command }) => namesCliBinary(command)) ? "cli" : "none";
-};
+var CLAUDE_CLI_BINARIES = new Set(CLAUDE_HOOK_EVENTS.map((hook) => hook.binary));
+var registrationHolder = (settings) => registrationHolderOf(settings, CLAUDE_CLI_BINARIES);
 var registeredPusharyEvents = (settings) => new Set(
-  commandsUnder(settings).filter(({ command }) => namesLocator(command) || namesCliBinary(command)).map(({ event }) => event)
+  registeredCommands(settings).filter(({ command }) => namesOurBinary(command, CLAUDE_CLI_BINARIES)).map(({ event }) => event)
 );
 var reregisterVerdict = ({ settings, stored, version }) => {
   const holder = registrationHolder(settings);
   if (holder === "none") return { kind: "not_wired" };
   if (holder === "app") return { kind: "app_owned" };
-  if (!needsReregistration(stored, version)) return { kind: "current" };
+  const unproven = claudeUnprovenHolds(settings);
+  if (unproven.length === 0 && !needsReregistration(stored, version)) return { kind: "current" };
   const supported = new Set(supportedClaudeEvents(version).map((hook) => hook.event));
   const present = registeredPusharyEvents(settings);
   const missing = [...supported].filter((event) => !present.has(event));
   const extra = [...present].filter((event) => !supported.has(event));
-  return missing.length > 0 || extra.length > 0 ? { kind: "stale", version, missing, extra } : { kind: "record_only", version };
+  const repairable = unproven.filter((event) => supported.has(event));
+  return missing.length > 0 || extra.length > 0 || repairable.length > 0 ? { kind: "stale", version, missing, extra, unproven: repairable } : { kind: "record_only", version };
 };
 var receiptFor = (version, now = /* @__PURE__ */ new Date()) => ({
   signatures: registrationSignatures(supportedClaudeEvents(version), version),
@@ -117,8 +101,17 @@ var readJson = (filePath) => {
   return null;
 };
 var writeJson = (filePath, data) => writeJsonAtomic(filePath, data);
-var hasPusharyClaudeHooks = (settings) => JSON.stringify(settings.hooks ?? {}).includes("pushary-hook");
+var hasPusharyClaudeHooks = (settings) => JSON.stringify(settings.hooks ?? {}).includes(CLAUDE_HOOK_BINARY);
 var hasPusharyMcp = (claudeJson) => !!claudeJson.mcpServers?.pushary;
+var PRIVATE_TO_OWNER = 384;
+var modeToPreserve = (filePath) => {
+  try {
+    return statSync(filePath).mode & 511;
+  } catch {
+    return PRIVATE_TO_OWNER;
+  }
+};
+var wouldWriteBareNames = (resolve, probe) => resolve(probe) === void 0;
 var reapplyClaudeSettings = (apiKey, paths = {}) => {
   const settingsPath = paths.settingsPath ?? CLAUDE_SETTINGS;
   const claudeJsonPath = paths.claudeJsonPath ?? CLAUDE_JSON;
@@ -134,7 +127,8 @@ var reapplyClaudeSettings = (apiKey, paths = {}) => {
     if (!settingsWritable) throw new Error("settings.json could not be parsed");
     const s = settings;
     addPusharyToolPermissions(s);
-    addPusharyHooks(s, resolveGlobalBinDir("pushary-hook"), (paths.detectVersion ?? detectClaudeVersion)());
+    const binary = (paths.resolveBinary ?? resolveGlobalBinary)(CLAUDE_HOOK_BINARY);
+    addPusharyHooks(s, binary ? dirname(binary) : void 0, (paths.detectVersion ?? detectClaudeVersion)());
     writeJson(settingsPath, s);
     hooks = true;
   } catch {
@@ -166,6 +160,10 @@ var reapplyClaudeForVersion = (apiKey, paths = {}) => {
     if (verdict.kind === "not_wired" || verdict.kind === "app_owned" || verdict.kind === "current") {
       return { verdict: verdict.kind, rewrote: false, missing: [] };
     }
+    const resolveBinary = paths.resolveBinary ?? resolveGlobalBinary;
+    if (verdict.kind === "stale" && wouldWriteBareNames(resolveBinary, CLAUDE_HOOK_BINARY)) {
+      return { verdict: "stale", rewrote: false, missing: verdict.missing };
+    }
     const rewrote = verdict.kind === "stale" ? reapplyClaudeSettings(apiKey, { ...paths, settingsPath }).hooks : false;
     if (verdict.kind === "stale" && !rewrote) return { verdict: "stale", rewrote: false, missing: verdict.missing };
     writeJsonAtomic(receiptPath, receiptFor(version));
@@ -211,9 +209,10 @@ var reapplyCodexSettings = (apiKey, paths = {}) => {
   const hooksConfig = readJson(hooksPath);
   const configured = config != null && !!config.mcp_servers?.pushary || hooksConfig != null && hasCodexHooks(hooksConfig);
   if (!configured) return { configured: false, reapplied: false, hooks: false, mcp: false };
-  const command = guardBinary(resolveGlobalBinary(CODEX_HOOK_BINARY) ?? CODEX_HOOK_BINARY);
+  const command = guardBinary((paths.resolveBinary ?? resolveGlobalBinary)(CODEX_HOOK_BINARY) ?? CODEX_HOOK_BINARY);
   let hooks = false;
   let mcp = false;
+  const vacated = codexVacatedIndexes(hooksConfig ?? void 0);
   if (hooksConfig != null) {
     try {
       addCodexHooks(hooksConfig, command);
@@ -224,17 +223,35 @@ var reapplyCodexSettings = (apiKey, paths = {}) => {
   }
   if (config != null) {
     try {
-      if (hooks) addCodexHookTrust(config, hooksPath, command, codexHookPositions(hooksConfig ?? void 0));
+      if (hooks) {
+        dropVacatedCodexHookTrust(config, hooksPath, vacated);
+        addCodexHookTrust(config, hooksPath, command, codexHookPositions(hooksConfig ?? void 0));
+      }
       if (apiKey) {
         addCodexMcpServer(config, apiKey);
         mcp = true;
       }
-      if (hooks || apiKey) writeFileSync(configPath, stringifyTOML(config), "utf-8");
+      if (hooks || apiKey) {
+        writeFileAtomic(configPath, stringifyTOML(config), modeToPreserve(configPath), "utf-8");
+      }
     } catch {
     }
   }
   return { configured: true, reapplied: hooks || mcp, hooks, mcp };
 };
+var repairCodexHolds = (paths = {}) => {
+  const idle = { configured: false, reapplied: false, hooks: false, mcp: false };
+  try {
+    const hooksPath = paths.hooksPath ?? codexHooksJson();
+    const hooksConfig = readJson(hooksPath);
+    if (!hooksConfig || codexRegistrationHolder(hooksConfig) !== "cli") return idle;
+    if (codexUnprovenHolds(hooksConfig).length === 0) return idle;
+    if (wouldWriteBareNames(paths.resolveBinary ?? resolveGlobalBinary, CODEX_HOOK_BINARY)) return idle;
+    return reapplyCodexSettings(void 0, paths);
+  } catch {
+    return idle;
+  }
+};
 var reapplyGeminiSettings = (apiKey, paths = {}) => {
   const settingsPath = paths.settingsPath ?? join(homedir(), ".gemini", "settings.json");
   const settings = readJson(settingsPath);
@@ -294,7 +311,13 @@ var reapplyAllAgents = (apiKey) => {
 };
 
 export {
+  reapplyClaudeSettings,
   reapplyClaudeForVersion,
   inspectConfiguredManagedProviders,
+  reapplyCodexSettings,
+  repairCodexHolds,
+  reapplyGeminiSettings,
+  reapplyCursorPlugin,
+  reapplyVsCodePlugin,
   reapplyAllAgents
 };

package/dist/{chunk-6VXZKOBB.js → chunk-NSFNEDCT.js}

@@ -3,19 +3,19 @@ import {
   loadPin,
   savePin,
   verifyRecipients
-} from "./chunk-A4AIISZZ.js";
+} from "./chunk-YKLCWWEI.js";
 import {
   hookOwnerOf
-} from "./chunk-4AXWBCCO.js";
+} from "./chunk-RALVI7OF.js";
 import {
   ensureDaemonRunning
-} from "./chunk-LYWTLNMG.js";
+} from "./chunk-CRFLU455.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-CDSA3NTB.js";
+} from "./chunk-XPPXOKIG.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -23,17 +23,17 @@ import {
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-C2FYSFTQ.js";
+} from "./chunk-ID5FDKDZ.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-67RNDRKL.js";
+} from "./chunk-JBJBVERL.js";
 import {
   readTranscriptPreference
-} from "./chunk-VF7YOT2W.js";
+} from "./chunk-4PBCNVI3.js";
 import {
   writeJsonAtomic
-} from "./chunk-VTUN7WSG.js";
+} from "./chunk-4LL6LG5X.js";
 import {
   getApiKey,
   getBaseUrl

package/dist/{chunk-5ODZEFP3.js → chunk-O3LZQEQP.js}

@@ -1,6 +1,6 @@
 import {
   registerTranscript
-} from "./chunk-6VXZKOBB.js";
+} from "./chunk-NSFNEDCT.js";
 
 // src/admission.ts
 import { readFileSync } from "fs";

package/dist/{chunk-QFAZ6QCT.js → chunk-OPR2BPD4.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-HUZW6SEO.js → chunk-OUAE3GKO.js}

@@ -1397,8 +1397,8 @@ var claudePermissionDeniedOutput = (decision) => ({
   }
 });
 var CODEX_RESCUE_COMMAND_MAX_LENGTH = 2e3;
-var CODEX_RESCUE_APPROVED = "The user approved this command from Pushary after the auto-reviewer denied it.";
-var codexRescueRetryInstruction = (command) => command.length <= CODEX_RESCUE_COMMAND_MAX_LENGTH ? `Run it again exactly as before, unchanged: ${command}` : `Run it again exactly as before, unchanged. It is too long to repeat in full here and begins: ${command.slice(0, CODEX_RESCUE_COMMAND_MAX_LENGTH)}`;
+var CODEX_RESCUE_APPROVED = "I approved this command in Pushary after the auto-reviewer denied it. If it is denied again, stop and tell me.";
+var codexRescueRetryInstruction = (command) => command.length <= CODEX_RESCUE_COMMAND_MAX_LENGTH ? `Run it again now, exactly as before: ${command}` : `Run it again now, exactly as before. It is too long to repeat in full here and begins: ${command.slice(0, CODEX_RESCUE_COMMAND_MAX_LENGTH)}`;
 var codexStopRescueOutput = (decision, command) => decision === "allow" ? { decision: "block", reason: `${CODEX_RESCUE_APPROVED} ${codexRescueRetryInstruction(command)}` } : { continue: true };
 var stoppedOutput = (output, stopReason) => ({ ...output, continue: false, stopReason });
 var claudePreToolUseOutput = (decision, reason, updatedInput) => ({

package/dist/{chunk-IBRX7LRE.js → chunk-PD6JY33P.js}

@@ -1,15 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-QFAZ6QCT.js";
+} from "./chunk-OPR2BPD4.js";
 import {
-  isProtectedByScope
-} from "./chunk-67RNDRKL.js";
+  isProtectedByScope,
+  registerHookEntry
+} from "./chunk-JBJBVERL.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";
@@ -51,8 +52,7 @@ var addGeminiHooks = (settings, command) => {
   const hooks = ensureRecord(settings, "hooks");
   for (const definition of GEMINI_HOOK_EVENTS) {
     const existing = Array.isArray(hooks[definition.event]) ? hooks[definition.event] : [];
-    const entries = existing.filter((entry) => !isPusharyGeminiHook(entry));
-    entries.push({
+    hooks[definition.event] = registerHookEntry(existing, isPusharyGeminiHook, {
       ...definition.matcher ? { matcher: definition.matcher } : {},
       hooks: [{
         name: "pushary",
@@ -61,7 +61,6 @@ var addGeminiHooks = (settings, command) => {
         timeout: definition.timeoutMs
       }]
     });
-    hooks[definition.event] = entries;
   }
 };
 var removeGeminiHooks = (settings, scope) => {
@@ -130,8 +129,9 @@ var formatVersion = (version) => version.join(".");
 var MIRRORED_TOOLS = POSTTOOLUSE_MIRRORED_TOOLS.join("|");
 var ESTABLISHED = [1, 0, 0];
 var OBSERVED = [2, 0, 0];
+var CLAUDE_HOOK_BINARY = "pushary-hook";
 var CLAUDE_HOOK_EVENTS = [
-  { event: "PreToolUse", binary: "pushary-hook", matcher: CLAUDE_PRETOOLUSE_MATCHER, timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: ESTABLISHED },
+  { event: "PreToolUse", binary: CLAUDE_HOOK_BINARY, matcher: CLAUDE_PRETOOLUSE_MATCHER, timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: ESTABLISHED },
   { event: "PostToolUse", binary: "pushary-post-hook", matcher: MIRRORED_TOOLS, timeout: 10, delivery: "telemetry", since: ESTABLISHED },
   { event: "Stop", binary: "pushary-stop-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
   { event: "UserPromptSubmit", binary: "pushary-prompt-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
@@ -176,6 +176,7 @@ export {
   parseVersion,
   compareVersion,
   formatVersion,
+  CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents,
   registrationSignatures,

package/dist/{chunk-6WJKYD3Q.js → chunk-QS55LDX4.js}

@@ -1,16 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-IBRX7LRE.js";
+} from "./chunk-PD6JY33P.js";
 import {
   guardBinary,
   holdBudgetOf,
-  isProtectedByScope
-} from "./chunk-67RNDRKL.js";
+  isProtectedByScope,
+  registerHookEntry
+} from "./chunk-JBJBVERL.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/claude-config.ts
 import { join } from "path";
@@ -126,12 +127,14 @@ var addPusharyHooks = (settings, binDir, version = null) => {
   const hooks = ensureRecord(settings, "hooks");
   const supported = new Map(supportedClaudeEvents(version).map((hook) => [hook.event, hook]));
   for (const known of CLAUDE_HOOK_EVENTS) {
-    const current = hooks[known.event];
-    const others = (Array.isArray(current) ? current : []).filter((item) => !isPusharyHook(item));
+    const current = Array.isArray(hooks[known.event]) ? hooks[known.event] : [];
     const definition = supported.get(known.event);
     if (definition) {
-      hooks[known.event] = [...others, entry(definition, resolve)];
-    } else if (others.length > 0) {
+      hooks[known.event] = registerHookEntry(current, isPusharyHook, entry(definition, resolve));
+      continue;
+    }
+    const others = current.filter((item) => !isPusharyHook(item));
+    if (others.length > 0) {
       hooks[known.event] = others;
     } else {
       delete hooks[known.event];

package/dist/{chunk-4AXWBCCO.js → chunk-RALVI7OF.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-H4VNAOCG.js";
+} from "./chunk-LBNAGGLV.js";
 import {
   isBridgeLocator
-} from "./chunk-BYH75I7Y.js";
+} from "./chunk-IRLTW6KF.js";
 import {
   pusharyHookExecutable
-} from "./chunk-FU5SQKAY.js";
+} from "./chunk-JXELRCU5.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-WIKEADOS.js";
+} from "./chunk-EXHXR2X5.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-OYTOLQ3N.js → chunk-SI7GYBQP.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-YX3U2CLP.js → chunk-T3JZZUAR.js}

@@ -4,11 +4,11 @@ import {
   forgetBlockedActionHint,
   hasBlockedActionHint,
   recordBlockedActionHint
-} from "./chunk-XDMHLQMH.js";
+} from "./chunk-6KLCP7VF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-VOC55PQV.js";
+} from "./chunk-XOOWC62T.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -24,7 +24,7 @@ import {
   reportEvent,
   settleQuestionsForToolUse,
   throttlePass
-} from "./chunk-DGUMR5LZ.js";
+} from "./chunk-64WARXGV.js";
 import {
   UNNAMED_ACTION,
   deriveAction,
@@ -34,7 +34,7 @@ import {
   describeToolCall,
   permissionDeniedAction,
   scopePathFor
-} from "./chunk-VCKQ45QA.js";
+} from "./chunk-A76GNRIK.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -49,7 +49,7 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-IZKCA35M.js";
+} from "./chunk-562UJ2DA.js";
 import {
   getApiKey,
   getBaseUrl
@@ -73,7 +73,7 @@ import {
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";

package/dist/{chunk-K7MLXXPY.js → chunk-V262ATS5.js}

@@ -1,9 +1,9 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-EHQC3GWL.js";
+} from "./chunk-HB2KB7QL.js";
 import {
   codexHomeFrom
-} from "./chunk-67RNDRKL.js";
+} from "./chunk-JBJBVERL.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";
@@ -264,7 +264,7 @@ You have Pushary MCP tools that reach the user on their phone. Use them proactiv
 
 - When you need the user to make a decision or answer a clarifying question, call \`ask_user\` instead of guessing or stalling. Use type "confirm" for yes/no, "select" for a fixed set of options, and "input" for free text. Read \`answered\`, \`status\` and the returned handoff instead of assuming the tool blocked. Silence is not consent; choice/text answers do not authorize a separate action.
 - Ask once, on one channel. If you also have a built-in way to prompt the user, use that or \`ask_user\` for a given question, never both. \`ask_user\` is the one that reaches the user when they are away from this machine, so prefer it. Raising both strands the user in whichever prompt you are not waiting on.
-- Honor authorization already granted in this session. Ask before a risky or irreversible action outside that authorization, or when an enforced host policy requires it. Do not ask again for an already authorized step, and never bypass an enforced gate.
+- Honor authorization already granted in this session. Ask before a risky or irreversible action outside that authorization, or when an enforced host policy requires it. Do not ask again for an already authorized step, and never bypass an enforced gate. When a Pushary hook result says the user approved a specific command after a denial, rerunning that exact command is the approved path and not a bypass of that gate.
 - Call \`propose_scope\` only for an unresolved or requested file boundary. A ratified scope narrows what may proceed; it does not bypass other approval rules. Do not add a plan approval merely because work spans several files, and do not propose a new scope mid-run just to widen it. Let the installed gate request any scope expansion before the edit executes.
 - When you are blocked, stuck, or hit an error you cannot resolve on your own, call \`send_notification\` so the user knows, and call \`ask_user\` if you need a decision to continue.
 - When meaningful work finishes while the user is away, or they requested an alert, call \`send_notification\` so the user knows it is done. Skip trivial completions and duplicate reports to someone already reading. Always pass \`context\` with a \`type\` of "task_complete", "error" or "info": it is what tells Pushary this is a task update, so the user's own setting for where updates land can route it.

package/dist/{chunk-DNLFSRCF.js → chunk-WGV3VY7O.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-67RNDRKL.js";
+} from "./chunk-JBJBVERL.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-VOC55PQV.js → chunk-XOOWC62T.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-CDSA3NTB.js → chunk-XPPXOKIG.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-A4AIISZZ.js → chunk-YKLCWWEI.js}

@@ -1,6 +1,6 @@
 import {
   writeJsonAtomicDurable
-} from "./chunk-VTUN7WSG.js";
+} from "./chunk-4LL6LG5X.js";
 
 // src/transcript-recipient-pin.ts
 import { existsSync, mkdirSync, readFileSync, rmSync } from "fs";