@pushary/agent-hooks 1.0.0 → 1.2.0

package/dist/{chunk-TTBRBWAK.js → chunk-7DQVIIHX.js}

@@ -256,7 +256,8 @@ var BRIDGE_HOOK_SOURCES = Object.freeze(Object.values(AGENTS).flatMap((agent) =>
 
 // ../contracts/src/agent-wiring.ts
 var COMPATIBLE_AGENT_TYPES = ["qwen_code", "codebuddy", "qoder", "droid", "devin"];
-var CANONICAL_PATH_KEYS = ["file_path", "path"];
+var CANONICAL_PATH_KEYS = ["file_path", "path", "notebook_path"];
+var CANONICAL_COMMAND_KEYS = ["command"];
 var SHELL_TOOLS = /* @__PURE__ */ new Set(["Bash", "PowerShell"]);
 var PATH_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit", "NotebookEdit", "Read"]);
 var PHONE_ANSWERED_TOOLS = /* @__PURE__ */ new Set(["AskUserQuestion", "ExitPlanMode"]);
@@ -271,17 +272,17 @@ var canonicalToolName = (profile, toolName) => profile.toolAliases[toolName] ??
 var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path) => {
   const tool = canonicalToolName(profile, toolName);
   if (SHELL_TOOLS.has(tool)) {
-    const command = firstString(toolInput, ["command"]);
-    if (!command) return { tool, input: toolInput, pathless: false };
+    const command = firstString(toolInput, [...profile.shellCommandKeys, ...CANONICAL_COMMAND_KEYS]);
+    if (!command) return { tool, input: toolInput, unreadable: true };
     const context = Object.fromEntries(
       profile.shellContextKeys.flatMap((key) => toolInput[key] === void 0 ? [] : [[key, toolInput[key]]])
     );
-    return { tool, input: { command, ...context }, pathless: false };
+    return { tool, input: { command, ...context }, unreadable: false };
   }
-  if (!PATH_TOOLS.has(tool)) return { tool, input: toolInput, pathless: false };
+  if (!PATH_TOOLS.has(tool)) return { tool, input: toolInput, unreadable: false };
   const filePath = firstString(toolInput, [...profile.pathInputKeys, ...CANONICAL_PATH_KEYS]);
-  if (!filePath) return { tool, input: toolInput, pathless: true };
-  return { tool, input: { ...toolInput, file_path: resolvePath(filePath) }, pathless: false };
+  if (!filePath) return { tool, input: toolInput, unreadable: true };
+  return { tool, input: { ...toolInput, file_path: resolvePath(filePath) }, unreadable: false };
 };
 var renderPreToolUseVerdict = (profile, verdict) => {
   if (profile.wire === "permission_decision") return verdict;
@@ -331,6 +332,7 @@ var QWEN_CODE = {
   },
   extraMatchers: ["mcp__.*"],
   pathInputKeys: ["absolute_path"],
+  shellCommandKeys: [],
   shellContextKeys: ["directory"],
   events: without("TeammateIdle", "Elicitation", "PermissionDenied"),
   wire: "permission_decision",
@@ -348,6 +350,7 @@ var CODEBUDDY = {
   toolAliases: {},
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
+  shellCommandKeys: [],
   shellContextKeys: [],
   events: without("Elicitation", "PermissionDenied"),
   wire: "permission_decision",
@@ -365,6 +368,7 @@ var QODER = {
   toolAliases: {},
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
+  shellCommandKeys: [],
   shellContextKeys: [],
   events: without("Elicitation", "PermissionDenied"),
   wire: "permission_decision",
@@ -387,6 +391,7 @@ var DROID = {
   },
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
+  shellCommandKeys: [],
   shellContextKeys: [],
   events: ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Notification", "Stop", "SubagentStop", "PreCompact", "SessionStart", "SessionEnd"],
   wire: "permission_decision",
@@ -412,6 +417,7 @@ var DEVIN = {
   },
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
+  shellCommandKeys: [],
   shellContextKeys: [],
   events: ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop", "SessionStart", "SessionEnd"],
   wire: "legacy_decision",
@@ -422,7 +428,6 @@ var DEVIN = {
 var HOOK_COMPATIBLE_PROFILES = Object.freeze([QWEN_CODE, CODEBUDDY, QODER, DROID, DEVIN]);
 var hookCompatibleProfile = (agentType) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.agentType === agentType);
 var hookCompatibleProfileBySource = (source) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.source === source);
-var compatibleConfigDir = (profile) => profile.configFile.slice(0, -1);
 var compatibleTargetFiles = (profile) => {
   const seen = /* @__PURE__ */ new Map();
   for (const file of [profile.configFile, profile.mcp?.file, profile.permissionRuleFile, profile.instructions?.file]) {
@@ -688,7 +693,71 @@ var compiledGlob = (glob) => {
   globCache.set(glob, compiled);
   return compiled;
 };
-var matchToolPattern = (pattern, toolName, arg) => {
+var PATTERN_INTENT = {
+  grant: "grant",
+  restrict: "restrict"
+};
+var SHELL_ESCAPE = "\\";
+var SHELL_DOUBLE_QUOTE = '"';
+var SHELL_SUBSTITUTION_SIGIL = "$";
+var SHELL_GROUP_OPEN = "(";
+var SHELL_QUOTES = /* @__PURE__ */ new Set(["'", SHELL_DOUBLE_QUOTE]);
+var SHELL_SEGMENT_SEPARATORS = /* @__PURE__ */ new Set([";", "\n", "&", "|"]);
+var SHELL_DOUBLED_SEPARATORS = /* @__PURE__ */ new Set(["&", "|"]);
+var SHELL_UNDECOMPOSABLE = /* @__PURE__ */ new Set(["`", "<", ">"]);
+var shellCommandSegments = (command) => {
+  const segments = [];
+  let current = "";
+  let quote = null;
+  for (let index = 0; index < command.length; index += 1) {
+    const char = command[index];
+    const next = command[index + 1];
+    if (quote !== null) {
+      if (char === SHELL_ESCAPE && quote === SHELL_DOUBLE_QUOTE && next !== void 0) {
+        current += char + next;
+        index += 1;
+        continue;
+      }
+      if (char === quote) quote = null;
+      current += char;
+      continue;
+    }
+    if (char === SHELL_ESCAPE && next !== void 0) {
+      current += char + next;
+      index += 1;
+      continue;
+    }
+    if (SHELL_QUOTES.has(char)) {
+      quote = char;
+      current += char;
+      continue;
+    }
+    if (SHELL_UNDECOMPOSABLE.has(char)) return null;
+    if (char === SHELL_SUBSTITUTION_SIGIL && next === SHELL_GROUP_OPEN) return null;
+    if (SHELL_SEGMENT_SEPARATORS.has(char)) {
+      if (next === char && SHELL_DOUBLED_SEPARATORS.has(char)) index += 1;
+      segments.push(current);
+      current = "";
+      continue;
+    }
+    current += char;
+  }
+  if (quote !== null) return null;
+  segments.push(current);
+  const present = segments.map((segment) => segment.trim()).filter((segment) => segment.length > 0);
+  return present.length > 0 ? present : null;
+};
+var everySegmentMatches = (command, matches) => {
+  const segments = shellCommandSegments(command);
+  return segments !== null && segments.every(matches);
+};
+var anySegmentMatches = (command, matches) => (shellCommandSegments(command) ?? [command]).some(matches);
+var shellSegmentsMatch = (command, intent, matches) => intent === PATTERN_INTENT.restrict ? anySegmentMatches(command, matches) : everySegmentMatches(command, matches);
+var rankWholeOrSegments = (toolName, arg, intent, matches) => {
+  const matched = toolName in POLICY_COMMAND_KEYS ? shellSegmentsMatch(arg, intent, matches) : matches(arg);
+  return matched ? "prefix" : "none";
+};
+var matchToolPattern = (pattern, toolName, arg, intent = PATTERN_INTENT.grant) => {
   const open = pattern.indexOf("(");
   if (open === -1 || !pattern.endsWith(")")) {
     return pattern === toolName ? "tool" : "none";
@@ -696,12 +765,14 @@ var matchToolPattern = (pattern, toolName, arg) => {
   if (pattern.slice(0, open) !== toolName || arg === void 0) return "none";
   const inner = pattern.slice(open + 1, -1);
   if (inner.endsWith(":*")) {
-    return arg.startsWith(inner.slice(0, -2)) ? "prefix" : "none";
+    const prefix = inner.slice(0, -2);
+    return rankWholeOrSegments(toolName, arg, intent, (segment) => segment.startsWith(prefix));
   }
   if (inner.includes("*")) {
     if (arg.length > GLOB_MAX_ARG_LENGTH) return "none";
     const compiled = compiledGlob(inner);
-    return compiled && matchGlobTokens(compiled, arg) ? "prefix" : "none";
+    if (!compiled) return "none";
+    return rankWholeOrSegments(toolName, arg, intent, (segment) => matchGlobTokens(compiled, segment));
   }
   return arg === inner ? "exact" : "none";
 };
@@ -748,11 +819,11 @@ var policyArgForms = (toolName, toolInput, cwd) => {
   }
   return forms;
 };
-var matchToolPatternAny = (pattern, toolName, args) => {
+var matchToolPatternAny = (pattern, toolName, args, intent = PATTERN_INTENT.grant) => {
   if (args.length === 0) return matchToolPattern(pattern, toolName);
   let best = "none";
   for (const arg of args) {
-    const rank = matchToolPattern(pattern, toolName, arg);
+    const rank = matchToolPattern(pattern, toolName, arg, intent);
     if (matchRankWeight(rank) > matchRankWeight(best)) best = rank;
   }
   return best;
@@ -995,6 +1066,7 @@ var verdictForPolicy = (policy) => {
   if (isAutoApprove(policy)) return "allow";
   return "requires_human";
 };
+var policyIntent = (policy) => policy.timeoutAction === "deny" ? PATTERN_INTENT.restrict : PATTERN_INTENT.grant;
 var selectGoverningRule = (policies, toolName, args, repoKey, sessionId) => {
   let best;
   let bestWeight = 0;
@@ -1003,7 +1075,7 @@ var selectGoverningRule = (policies, toolName, args, repoKey, sessionId) => {
   for (const candidate of policies) {
     if (!isRepoKeyMatch(candidate.repoKey, repoKey)) continue;
     if (candidate.sessionId && candidate.sessionId !== sessionId) continue;
-    const rank = matchToolPatternAny(candidate.tool, toolName, args);
+    const rank = matchToolPatternAny(candidate.tool, toolName, args, policyIntent(candidate));
     if (rank === "none") continue;
     const weight = matchRankWeight(rank);
     const scoped = candidate.sessionId ? 2 : candidate.repoKey ? 1 : 0;
@@ -1423,6 +1495,7 @@ var matchesGlobPath = (glob, path) => {
   const compiled = compiledGlob(glob);
   return compiled ? matchGlobTokens(compiled, path) : false;
 };
+var SCOPE_PATH_MAX_LENGTH = 200;
 var evaluateScope = (contract, path) => {
   if (!contract) return { outcome: "no_contract" };
   if (typeof path !== "string" || path.length === 0) return { outcome: "in_scope" };
@@ -1436,6 +1509,7 @@ var evaluateScope = (contract, path) => {
   return { outcome: "out_of_scope", path };
 };
 var scopeRequiresHuman = (verdict) => verdict.outcome === "out_of_scope" || verdict.outcome === "off_limits";
+var widenablePath = (path) => path.length > 0 && path.length <= SCOPE_PATH_MAX_LENGTH ? path : void 0;
 var scopeChangeReason = (verdict) => {
   if (verdict.outcome === "out_of_scope") {
     return `Outside the scope you approved: ${verdict.path}`;
@@ -1449,6 +1523,7 @@ var isScopeContract = (value) => {
   if (!value || typeof value !== "object") return false;
   const c = value;
   const strings = (v) => Array.isArray(v) && v.every((x) => typeof x === "string");
+  if (c.promises !== void 0 && !strings(c.promises)) return false;
   return strings(c.allowedPaths) && strings(c.offLimitsPaths) && typeof c.doneWhen === "string";
 };
 var autoApprove = (tool) => ({
@@ -1624,7 +1699,7 @@ var resolveGate = (input) => {
     kind: "gate",
     policy,
     scopeReason,
-    scopePath: scopeReason && "path" in scopeVerdict ? scopeVerdict.path : void 0
+    scopePath: scopeReason && "path" in scopeVerdict ? widenablePath(scopeVerdict.path) : void 0
   };
 };
 var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
@@ -1706,6 +1781,7 @@ var claudePermissionRequestOutput = (decision, reason, updatedInput) => ({
     decision: decision === "allow" ? { behavior: "allow", ...updatedInput ? { updatedInput } : {} } : { behavior: "deny", ...reason ? { message: reason } : {} }
   }
 });
+var COMPATIBLE_GATE_EVENT = "PreToolUse";
 var gateOutputFor = (source, event, decision, reason) => {
   let output;
   if (source === "claude" || source === "vscode") {
@@ -1743,6 +1819,11 @@ var gateOutputFor = (source, event, decision, reason) => {
       user_message: "Command denied via Pushary.",
       agent_message: reason ?? "Denied from Pushary"
     };
+  } else {
+    const profile = hookCompatibleProfileBySource(source);
+    if (profile && event === COMPATIBLE_GATE_EVENT) {
+      output = renderPreToolUseVerdict(profile, claudePreToolUseOutput(decision, reason));
+    }
   }
   return output;
 };
@@ -1903,12 +1984,12 @@ export {
   MANAGED_PROVIDERS,
   COMPATIBLE_AGENT_TYPES,
   PHONE_ANSWERED_TOOLS,
+  canonicalToolName,
   toToolLookup,
   renderPreToolUseVerdict,
   HOOK_COMPATIBLE_PROFILES,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
-  compatibleConfigDir,
   compatibleTargetFiles,
   hookWritePath,
   isHookActivationReport,

package/dist/{chunk-S2W4ZSHE.js → chunk-7ERWAYVV.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-DOYARIYB.js";
+} from "./chunk-7TDQ7KDY.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-447SBIC7.js → chunk-7GH3D6YG.js}

@@ -1,13 +1,12 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-XNXIMIFY.js";
+} from "./chunk-LWKVEMVK.js";
 import {
   codexHomeFrom
-} from "./chunk-LTPQKBJH.js";
+} from "./chunk-PX53RT6Q.js";
 import {
-  HOOK_COMPATIBLE_PROFILES,
-  compatibleConfigDir
-} from "./chunk-TTBRBWAK.js";
+  HOOK_COMPATIBLE_PROFILES
+} from "./chunk-7DQVIIHX.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";
@@ -238,17 +237,17 @@ var agentProbes = (home = homedir2()) => ({
     // never used.
     configMarkers: [openCodeConfigDirFrom(home)]
   },
-  ...compatibleProbes(home),
+  ...compatibleProbes(),
   // "Other" is a set of printed instructions for any MCP or HTTP client. There is
   // nothing to detect, and it must never be auto-selected.
   custom: { binary: null, paths: [], configMarkers: [] }
 });
-var compatibleProbes = (home) => HOOK_COMPATIBLE_PROFILES.reduce((probes, profile) => ({
+var compatibleProbes = () => HOOK_COMPATIBLE_PROFILES.reduce((probes, profile) => ({
   ...probes,
   [profile.agentType]: {
     binary: profile.binary,
     paths: [],
-    configMarkers: [join2(home, ...compatibleConfigDir(profile))]
+    configMarkers: []
   }
 }), {});
 var detectAllAgents = (deps = defaultDeps, home) => {
@@ -278,7 +277,8 @@ You have Pushary MCP tools that reach the user on their phone. Use them proactiv
 - When you need the user to make a decision or answer a clarifying question, call \`ask_user\` instead of guessing or stalling. Use type "confirm" for yes/no, "select" for a fixed set of options, and "input" for free text. Read \`answered\`, \`status\` and the returned handoff instead of assuming the tool blocked. Silence is not consent; choice/text answers do not authorize a separate action.
 - Ask once, on one channel. If you also have a built-in way to prompt the user, use that or \`ask_user\` for a given question, never both. \`ask_user\` is the one that reaches the user when they are away from this machine, so prefer it. Raising both strands the user in whichever prompt you are not waiting on.
 - Honor authorization already granted in this session. Ask before a risky or irreversible action outside that authorization, or when an enforced host policy requires it. Do not ask again for an already authorized step, and never bypass an enforced gate. When a Pushary hook result says the user approved a specific command after a denial, rerunning that exact command is the approved path and not a bypass of that gate.
-- Call \`propose_scope\` only for an unresolved or requested file boundary. A ratified scope narrows what may proceed; it does not bypass other approval rules. Do not add a plan approval merely because work spans several files, and do not propose a new scope mid-run just to widen it. Let the installed gate request any scope expansion before the edit executes.
+- Call \`propose_scope\` only for an unresolved or requested file boundary. A ratified scope narrows what may proceed; it does not bypass other approval rules. Do not add a plan approval merely because work spans several files, and do not propose a new scope mid-run just to widen it. Let the installed gate request any scope expansion before the edit executes. Only file paths are checked, and only on tool calls that carry one, so put a boundary that is not a path (recipients, channels, spend, systems you will not open) in \`promises\` and never in \`allowedPaths\`. Read the \`enforces\` field that comes back: an empty array means nothing in that contract is checked automatically, and you must say so rather than report that a scope is in force. \`hookSeen: false\` means no hook has reported that sessionId, so the gate will never find the contract: fix the session id rather than proceeding as if a scope were in force.
+- Before a task of more than two steps, break it into steps and find the forks. Settle by yourself every fork that a file, a command or a tool call can answer, then ask the rest as one numbered round with your recommended answer against each. A question in the terminal is free; a push is not. When the user is at the terminal, ask the whole round there. When the user is away, send only the fork that stops the run, and decide the rest on your recommendation.
 - When you are blocked, stuck, or hit an error you cannot resolve on your own, call \`send_notification\` so the user knows, and call \`ask_user\` if you need a decision to continue.
 - When meaningful work finishes while the user is away, or they requested an alert, call \`send_notification\` so the user knows it is done. Skip trivial completions and duplicate reports to someone already reading. Always pass \`context\` with a \`type\` of "task_complete", "error" or "info": it is what tells Pushary this is a task update, so the user's own setting for where updates land can route it.
 - Confirm notifications can offer lock-screen actions; arbitrary choices and text open the app. The Mac notch handles personal account questions, not Partner customer enrollment.

package/dist/{chunk-DOYARIYB.js → chunk-7TDQ7KDY.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-A3D43VXO.js";
+} from "./chunk-ZFQPSGPO.js";
 import {
   backupFile,
   readJsonSafe,

package/dist/{chunk-3C4ERARU.js → chunk-BXLFUTSD.js}

@@ -1,9 +1,9 @@
 import {
   canonicalGateInputs
-} from "./chunk-MDV7ZRAT.js";
+} from "./chunk-5AATCXJN.js";
 import {
   canonicalJson
-} from "./chunk-LTPQKBJH.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   writeFileAtomic
 } from "./chunk-4LL6LG5X.js";
@@ -11,7 +11,7 @@ import {
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
   blockedActionIdentity,
   shouldDeferToNativeMode
-} from "./chunk-TTBRBWAK.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/native-defer.ts
 var nativeDeferOptions = () => {

package/dist/{chunk-XK34HTMW.js → chunk-C3WH44MH.js}

@@ -2,17 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-2PS3DTHQ.js";
+} from "./chunk-ERP7FOFQ.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-LTPQKBJH.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-TTBRBWAK.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-IYA3NCZG.js → chunk-CG4ZUQ5O.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-LTPQKBJH.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-TTBRBWAK.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-MSOFZYI3.js → chunk-CVCSUAXI.js}

@@ -4,17 +4,17 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "./chunk-7WMFPYR5.js";
+} from "./chunk-KZPUARCU.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-LTPQKBJH.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "./chunk-DOYARIYB.js";
+} from "./chunk-7TDQ7KDY.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-R744XA2M.js → chunk-DRAATYTY.js}

@@ -1,18 +1,18 @@
 import {
   detectClaudeVersion
-} from "./chunk-Y55JNI2I.js";
+} from "./chunk-JQJB7BZE.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-MGI6MLFU.js";
+} from "./chunk-PX54KULQ.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
   codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-XK34HTMW.js";
+} from "./chunk-C3WH44MH.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -24,7 +24,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-2PS3DTHQ.js";
+} from "./chunk-ERP7FOFQ.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -44,7 +44,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-LTPQKBJH.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-2PS3DTHQ.js → chunk-ERP7FOFQ.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-EMCNSBF3.js";
+} from "./chunk-UWP66NDF.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-LTPQKBJH.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-TTBRBWAK.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-RFNMSC6N.js → chunk-JOTV75GX.js}

@@ -1,6 +1,6 @@
 import {
   resolvePathBinary
-} from "./chunk-LTPQKBJH.js";
+} from "./chunk-PX53RT6Q.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-Y55JNI2I.js → chunk-JQJB7BZE.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-2PS3DTHQ.js";
+} from "./chunk-ERP7FOFQ.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-DMJTWULU.js → chunk-KEVJ2WW6.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-LTPQKBJH.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   readJsonSafe
 } from "./chunk-4LL6LG5X.js";

package/dist/{chunk-IBU7UU3R.js → chunk-KHTBSSY5.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-DOYARIYB.js";
+} from "./chunk-7TDQ7KDY.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-I3TWY7GH.js → chunk-KODKICKJ.js}

@@ -1,17 +1,17 @@
 import {
   activeIdentity
-} from "./chunk-HS2KEAFD.js";
+} from "./chunk-YT6H7BB5.js";
 import {
   blockedActionFingerprint,
   defersToNativeMode,
   forgetBlockedActionHint,
   hasBlockedActionHint,
   recordBlockedActionHint
-} from "./chunk-3C4ERARU.js";
+} from "./chunk-BXLFUTSD.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-DUOG74E7.js";
+} from "./chunk-2DT7STR5.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -34,7 +34,7 @@ import {
   scopePathFor,
   settleQuestionsForToolUse,
   throttlePass
-} from "./chunk-MDV7ZRAT.js";
+} from "./chunk-5AATCXJN.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -49,7 +49,7 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-7WMFPYR5.js";
+} from "./chunk-KZPUARCU.js";
 import {
   getApiKey,
   getBaseUrl
@@ -73,7 +73,7 @@ import {
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-TTBRBWAK.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";

package/dist/{chunk-7WMFPYR5.js → chunk-KZPUARCU.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-LTPQKBJH.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   writeFileAtomic
 } from "./chunk-4LL6LG5X.js";

package/dist/{chunk-D2N2EJH2.js → chunk-LAXU5U75.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-3UUAK2AK.js";
+} from "./chunk-WC5PYFDK.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-TTBRBWAK.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-XKDKUFMP.js → chunk-LGO7U23Z.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-TTBRBWAK.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-XNXIMIFY.js → chunk-LWKVEMVK.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-TTBRBWAK.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-GTR72MIU.js → chunk-OGSRCIOD.js}

@@ -3,7 +3,7 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-7ZDFVWRR.js";
+} from "./chunk-6QCN5XQE.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords

package/dist/{chunk-HGEI7SVM.js → chunk-PCT2MYG5.js}

@@ -6,16 +6,16 @@ import {
 } from "./chunk-YKLCWWEI.js";
 import {
   hookOwnerOf
-} from "./chunk-2SL5X7UB.js";
+} from "./chunk-W6XVHP4U.js";
 import {
   ensureDaemonRunning
-} from "./chunk-MSOFZYI3.js";
+} from "./chunk-CVCSUAXI.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-7ZDFVWRR.js";
+} from "./chunk-6QCN5XQE.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -23,14 +23,14 @@ import {
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-IBU7UU3R.js";
+} from "./chunk-KHTBSSY5.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-LTPQKBJH.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   readTranscriptPreference
-} from "./chunk-DOYARIYB.js";
+} from "./chunk-7TDQ7KDY.js";
 import {
   writeJsonAtomic
 } from "./chunk-4LL6LG5X.js";

package/dist/{chunk-LTPQKBJH.js → chunk-PX53RT6Q.js}

@@ -2,7 +2,7 @@ import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-TTBRBWAK.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/npm.ts
 import { execFileSync, execSync } from "child_process";