@pushary/agent-hooks 1.1.0 → 1.3.0

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## 1.2.0
+
+Nothing to run. These are the gate's own rules, tightened where they were guessing.
+
+- A shell command Pushary cannot read is no longer judged on the loosest rule that fits. A tool whose command arrives under a key we do not recognise used to fall through to a bare `Bash` rule, which is always the permissive one; a path in the same position already refused to be judged. Both now say they have no opinion and let the agent ask you. An agent that names its command differently can declare the key instead of losing the gate.
+- An `--agent` Pushary does not recognise stops the hook rather than turning it into Claude Code. A typo in a registered command used to fetch Claude's policy and file the session under Claude's name. Every hook now stands aside and says why, because acting as the wrong agent is worse than not acting.
+- `pushary doctor` calls your hooks intact only when all of them are. It used to accept any single surviving hook as proof, so a config wiped down to one entry read as healthy.
+- Setup no longer counts its own folder as proof you have an agent installed. The directory it writes the config into was being read back as evidence the vendor was there, so ticking an agent once made it look installed forever. Only the agent's own binary counts now.
+- The slowest call we make to Stripe carries its own deadline. Every Stripe call was bounded at five seconds, which is right for the checkout path and too tight for an invoice preview.
+
+## 1.1.0
+
+Nothing to run if you are already set up. `pushary setup` writes the new skill;
+so does opening the Mac app, which carries its own copy.
+
+- A scope boundary now works for a run that changes no files. `propose_scope` takes `promises`: boundaries that are not paths, such as who you will not email, what you will not spend, and which systems you will not open. They are shown to the approver as "Promised, not checked", recorded in the ledger, and never enforced, because the gate judges a file path and these have none. Saying so is the point: the tool used to return `ratified: true` for a marketing or support run whose contract matched nothing.
+- The tool now reports what it will actually check. `enforces` lists what the contract *contains* that can be checked, and an empty array means nothing in it is. `hookSeen: false` means no hook has ever reported that session id, so the contract is stored under a key the gate will never read. Both were previously invisible: a contract that enforced nothing looked exactly like one that enforced everything.
+- Four glob rules that matched nothing are repaired when they are proposed. `customers`, `docs/`, `**/.env*` and `**/*.test.ts` each validated clean and matched no file. The last two shipped as our own documented examples, so anyone who copied them to protect a root `.env` protected nothing. The missing pattern is added at proposal time rather than by loosening the matcher, which would have widened every contract already live.
+- The approval card is budgeted from the restrictive half outwards. The allow list is the only part that grows, so cutting one joined string at the end dropped the off-limits line, the definition of done and the promises first: exactly the half a person needs in order to say no. Agent-supplied text is flattened to one line, so a promise can no longer forge a row the server wrote.
+- The editor gates carry the scope path again. The Cursor and VS Code gates contained no reference to it, so approving a breach never widened the contract and every further file in the same area asked again. An over-length value is dropped rather than sent, because `ask_user` caps it and a rejected call fails closed.
+- A scope breach says so on the card. A breach judged by the server reached the person as a plain "Allow Edit foo.ts?", with nothing saying a boundary they personally ratified had been crossed.
+- `pushary doctor` names a tool that can take your hooks away. cc-switch replaces `~/.claude/settings.json` wholesale when you switch provider, so Pushary stops firing with no error and nothing to see. Doctor says so while the hooks are still there, and says the mechanism rather than blaming it once they are gone. It diagnoses only: it never rewrites a config because somebody else's software is installed.
+- The installed skill goes to 0.10.0. It breaks a task into steps before asking anything, settles every fork a file or a command can answer, and asks the rest as one numbered round. A question in the terminal is free and a push is not, so the whole round goes to the terminal when you are there and only the blocking one crosses to your phone. Setup now branches on the machine instead of assuming one path.
+
 ## 1.0.0
 
 Run `pushary setup` and tick the agents you use. Five more are on the list: Qwen Code, CodeBuddy, Qoder, Droid and Devin CLI. Nothing changes for an agent you already had wired.

package/data/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pushary
-version: 0.10.0
+version: 0.11.0
 description: Push notifications and human-in-the-loop for AI agents. Use this whenever a running agent needs a human and nobody is at the terminal, such as before an irreversible or destructive action, before spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, when running unattended and you hit a genuine ambiguity, when another skill's workflow says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from their connected devices. Use these tools proactively - do not wait for the user to ask for notifications. Every question and answer is recorded, so an unattended run stays reviewable afterwards. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 3-day card-first trial.
 metadata:
   hermes:
@@ -125,7 +125,7 @@ For example, in a repository with two apps and no test runner in the package:
 - **Ask at the boundary, not once for each item.** Ask about deleting files. Do not ask about each file.
 - **The limit of three notifications counts pushes.** Questions you ask in the terminal are free and do not count.
 
-`propose_scope` records the boundary this work produces. Read its section below first. What it can enforce depends on whether this run changes files.
+`propose_scope` records the boundary this work produces. It is a separate decision from notifying: see "When to Propose a Scope" below. What it can enforce depends on whether this run changes files.
 
 ## When to Use
 
@@ -147,17 +147,29 @@ For example, in a repository with two apps and no test runner in the package:
 - You need a name, path, value, or free-text decision
 - The options cannot be enumerated in advance
 
-**Propose a scope when:**
-- This run changes files with `Edit`, `Write` or `MultiEdit`, and the file boundary is not yet agreed
-- Call `propose_scope` once, before the work, not after
-- Skip it for a single quick edit; a scope prompt for one file is just noise
-- Put a boundary that is not a file path in `promises`, never in `allowedPaths`. Read the `enforces` field that comes back, and tell the user what it says
-
 **Do NOT notify when:**
 - The task is trivial or single-step
 - The question can be answered from context without user input
 - You already sent 3 notifications for the current task (unless the user explicitly asked for more)
 
+## When to Propose a Scope
+
+This is a separate decision from notifying. The rules above do not apply to it. A scope is not a notification, and the limit of three does not count it.
+
+**Propose a scope when:**
+- This run changes files with `Edit`, `Write` or `MultiEdit`, and the file boundary is not yet agreed
+- The run touches more than one file, or you cannot name every file before you start
+- Call `propose_scope` once, before the first edit, not after
+
+**Do not propose a scope when:**
+- The run changes one file and you already know which one
+- The user named the exact files in this turn, so the boundary is already agreed
+- The run changes no files and records no promise worth keeping
+
+"Trivial" here means one file. It does not mean one task. A refactor across modules, a rename through several files, a migration, or wiring one option through the code all need a scope. Each edit can be small and the run still needs a boundary.
+
+Put a boundary that is not a file path in `promises`, never in `allowedPaths`. Read the `enforces` field that comes back. Tell the user what it says.
+
 ## Setup
 
 **Look at the machine first. Do not guess the install path.** Run these. Each one is read-only and fast. Run them as separate commands.

package/data/cursor-plugin/skills/pushary/SKILL.md

@@ -118,7 +118,7 @@ For example, in a repository with two apps and no test runner in the package:
 - **Ask at the boundary, not once for each item.** Ask about deleting files. Do not ask about each file.
 - **The limit of three notifications counts pushes.** Questions you ask in the terminal are free and do not count.
 
-`propose_scope` records the boundary this work produces. Read its section below first. What it can enforce depends on whether this run changes files.
+`propose_scope` records the boundary this work produces. It is a separate decision from notifying: see "When to Propose a Scope" below. What it can enforce depends on whether this run changes files.
 
 ## When to Use
 
@@ -140,17 +140,29 @@ For example, in a repository with two apps and no test runner in the package:
 - You need a name, path, value, or free-text decision
 - The options cannot be enumerated in advance
 
-**Propose a scope when:**
-- This run changes files with `Edit`, `Write` or `MultiEdit`, and the file boundary is not yet agreed
-- Call `propose_scope` once, before the work, not after
-- Skip it for a single quick edit; a scope prompt for one file is just noise
-- Put a boundary that is not a file path in `promises`, never in `allowedPaths`. Read the `enforces` field that comes back, and tell the user what it says
-
 **Do NOT notify when:**
 - The task is trivial or single-step
 - The question can be answered from context without user input
 - You already sent 3 notifications for the current task (unless the user explicitly asked for more)
 
+## When to Propose a Scope
+
+This is a separate decision from notifying. The rules above do not apply to it. A scope is not a notification, and the limit of three does not count it.
+
+**Propose a scope when:**
+- This run changes files with `Edit`, `Write` or `MultiEdit`, and the file boundary is not yet agreed
+- The run touches more than one file, or you cannot name every file before you start
+- Call `propose_scope` once, before the first edit, not after
+
+**Do not propose a scope when:**
+- The run changes one file and you already know which one
+- The user named the exact files in this turn, so the boundary is already agreed
+- The run changes no files and records no promise worth keeping
+
+"Trivial" here means one file. It does not mean one task. A refactor across modules, a rename through several files, a migration, or wiring one option through the code all need a scope. Each edit can be small and the run still needs a boundary.
+
+Put a boundary that is not a file path in `promises`, never in `allowedPaths`. Read the `enforces` field that comes back. Tell the user what it says.
+
 ## Setup
 
 **Look at the machine first. Do not guess the install path.** Run these. Each one is read-only and fast. Run them as separate commands.

package/data/vscode-plugin/skills/pushary/SKILL.md

@@ -118,7 +118,7 @@ For example, in a repository with two apps and no test runner in the package:
 - **Ask at the boundary, not once for each item.** Ask about deleting files. Do not ask about each file.
 - **The limit of three notifications counts pushes.** Questions you ask in the terminal are free and do not count.
 
-`propose_scope` records the boundary this work produces. Read its section below first. What it can enforce depends on whether this run changes files.
+`propose_scope` records the boundary this work produces. It is a separate decision from notifying: see "When to Propose a Scope" below. What it can enforce depends on whether this run changes files.
 
 ## When to Use
 
@@ -140,17 +140,29 @@ For example, in a repository with two apps and no test runner in the package:
 - You need a name, path, value, or free-text decision
 - The options cannot be enumerated in advance
 
-**Propose a scope when:**
-- This run changes files with `Edit`, `Write` or `MultiEdit`, and the file boundary is not yet agreed
-- Call `propose_scope` once, before the work, not after
-- Skip it for a single quick edit; a scope prompt for one file is just noise
-- Put a boundary that is not a file path in `promises`, never in `allowedPaths`. Read the `enforces` field that comes back, and tell the user what it says
-
 **Do NOT notify when:**
 - The task is trivial or single-step
 - The question can be answered from context without user input
 - You already sent 3 notifications for the current task (unless the user explicitly asked for more)
 
+## When to Propose a Scope
+
+This is a separate decision from notifying. The rules above do not apply to it. A scope is not a notification, and the limit of three does not count it.
+
+**Propose a scope when:**
+- This run changes files with `Edit`, `Write` or `MultiEdit`, and the file boundary is not yet agreed
+- The run touches more than one file, or you cannot name every file before you start
+- Call `propose_scope` once, before the first edit, not after
+
+**Do not propose a scope when:**
+- The run changes one file and you already know which one
+- The user named the exact files in this turn, so the boundary is already agreed
+- The run changes no files and records no promise worth keeping
+
+"Trivial" here means one file. It does not mean one task. A refactor across modules, a rename through several files, a migration, or wiring one option through the code all need a scope. Each edit can be small and the run still needs a boundary.
+
+Put a boundary that is not a file path in `promises`, never in `allowedPaths`. Read the `enforces` field that comes back. Tell the user what it says.
+
 ## Setup
 
 **Look at the machine first. Do not guess the install path.** Run these. Each one is read-only and fast. Run them as separate commands.

package/dist/bin/pushary-bell-hook.js

@@ -1,35 +1,35 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-XIHKSZHL.js";
+} from "../chunk-EJZCV5G4.js";
 import {
   readHookInput
-} from "../chunk-LQ3BHPPZ.js";
-import "../chunk-PWIMJP4U.js";
+} from "../chunk-N43EQPJK.js";
+import "../chunk-EU6JH7KU.js";
 import "../chunk-YKLCWWEI.js";
-import "../chunk-DZYIAMKR.js";
-import "../chunk-OYYQHJAO.js";
-import "../chunk-SLEWDZOA.js";
-import "../chunk-AH5OO2YZ.js";
-import "../chunk-6JUCFMSF.js";
-import "../chunk-YM4G6CFN.js";
-import "../chunk-SA6UB3GD.js";
-import "../chunk-BBUZD7MU.js";
+import "../chunk-XEXOHUJ6.js";
+import "../chunk-BYGEZI7B.js";
+import "../chunk-JYEGOYQC.js";
+import "../chunk-DVO4SZMJ.js";
+import "../chunk-KS4P6F3R.js";
+import "../chunk-OE6U2AXM.js";
+import "../chunk-2PLEJ7SY.js";
+import "../chunk-B3S4SF3D.js";
 import "../chunk-EQRS3SGM.js";
-import "../chunk-2MOQUNFL.js";
+import "../chunk-A2URMNFM.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-INBTKFT6.js";
-import "../chunk-J7PJALS2.js";
-import "../chunk-EWQZISYV.js";
+import "../chunk-IAEVVUXO.js";
+import "../chunk-K7UIAE7I.js";
+import "../chunk-RHLUJE4H.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-UP7NZXJU.js";
+import "../chunk-XBO42HKH.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-E3WQMDCE.js";
+import "../chunk-POAFXBNH.js";
 import "../chunk-4LL6LG5X.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-VQYARC2K.js";
+import "../chunk-WPJS3OZH.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,15 +5,15 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-XIHKSZHL.js";
+} from "../chunk-EJZCV5G4.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-SA6UB3GD.js";
+} from "../chunk-2PLEJ7SY.js";
 import {
   claudeSettings
-} from "../chunk-EWQZISYV.js";
+} from "../chunk-RHLUJE4H.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -25,18 +25,18 @@ import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-UP7NZXJU.js";
+import "../chunk-XBO42HKH.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-E3WQMDCE.js";
+import "../chunk-POAFXBNH.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-4LL6LG5X.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-VQYARC2K.js";
+import "../chunk-WPJS3OZH.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,7 +8,7 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-ISELLVBP.js";
+} from "../chunk-MU275U5A.js";
 import {
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
@@ -17,24 +17,24 @@ import {
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-PWIMJP4U.js";
+} from "../chunk-EU6JH7KU.js";
 import "../chunk-YKLCWWEI.js";
-import "../chunk-DZYIAMKR.js";
-import "../chunk-OYYQHJAO.js";
-import "../chunk-SLEWDZOA.js";
-import "../chunk-AH5OO2YZ.js";
+import "../chunk-XEXOHUJ6.js";
+import "../chunk-BYGEZI7B.js";
+import "../chunk-JYEGOYQC.js";
+import "../chunk-DVO4SZMJ.js";
 import {
   ensureDaemonRunning
-} from "../chunk-6JUCFMSF.js";
-import "../chunk-YM4G6CFN.js";
-import "../chunk-SA6UB3GD.js";
+} from "../chunk-KS4P6F3R.js";
+import "../chunk-OE6U2AXM.js";
+import "../chunk-2PLEJ7SY.js";
 import {
   encryptRecord
-} from "../chunk-BBUZD7MU.js";
+} from "../chunk-B3S4SF3D.js";
 import "../chunk-EQRS3SGM.js";
 import {
   transcriptsEnabled
-} from "../chunk-2MOQUNFL.js";
+} from "../chunk-A2URMNFM.js";
 import {
   needsShell,
   spawnClaude
@@ -56,8 +56,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-WTT24AUA.js";
-import "../chunk-INBTKFT6.js";
+} from "../chunk-WXXDHGTZ.js";
+import "../chunk-IAEVVUXO.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -70,16 +70,16 @@ import {
 } from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-J7PJALS2.js";
-import "../chunk-EWQZISYV.js";
+} from "../chunk-K7UIAE7I.js";
+import "../chunk-RHLUJE4H.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-UP7NZXJU.js";
+import "../chunk-XBO42HKH.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-E3WQMDCE.js";
+import "../chunk-POAFXBNH.js";
 import "../chunk-4LL6LG5X.js";
 import {
   getApiKey,
@@ -89,7 +89,7 @@ import {
   KILL_REASON,
   redactSecrets,
   resolveGate
-} from "../chunk-VQYARC2K.js";
+} from "../chunk-WPJS3OZH.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -5,14 +5,14 @@ import {
   createGuards,
   resolveHermesPython,
   runHermesPythonScript
-} from "../chunk-PUDQJ772.js";
+} from "../chunk-FGVNU7XD.js";
 import "../chunk-KBITFQST.js";
 import {
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-MR2PWE62.js";
+} from "../chunk-K4TAUYUJ.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -22,7 +22,7 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-S2BNTXP6.js";
+} from "../chunk-E7WBNGJS.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -30,37 +30,37 @@ import {
   compatiblePermissionRuleFile,
   removeCompatibleHooks,
   removeCompatibleMcpServer
-} from "../chunk-SM54HHVY.js";
+} from "../chunk-BNDHXPTQ.js";
 import {
   isClaudeMcpSnapshot,
   removeClaudeMcpServers,
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-6T4OINZB.js";
+} from "../chunk-ZHL62DRA.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-DZYIAMKR.js";
-import "../chunk-OYYQHJAO.js";
-import "../chunk-SLEWDZOA.js";
+} from "../chunk-XEXOHUJ6.js";
+import "../chunk-BYGEZI7B.js";
+import "../chunk-JYEGOYQC.js";
 import {
   pusharyHookExecutable
-} from "../chunk-AH5OO2YZ.js";
+} from "../chunk-DVO4SZMJ.js";
 import {
   disableDaemonService
-} from "../chunk-6JUCFMSF.js";
+} from "../chunk-KS4P6F3R.js";
 import {
   removeGeminiSettings
-} from "../chunk-YM4G6CFN.js";
-import "../chunk-SA6UB3GD.js";
+} from "../chunk-OE6U2AXM.js";
+import "../chunk-2PLEJ7SY.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-WTT24AUA.js";
-import "../chunk-INBTKFT6.js";
+import "../chunk-WXXDHGTZ.js";
+import "../chunk-IAEVVUXO.js";
 import "../chunk-LGXUGYUH.js";
-import "../chunk-J7PJALS2.js";
+import "../chunk-K7UIAE7I.js";
 import {
   bridgeAgentKey,
   claudeJson,
@@ -89,7 +89,7 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-EWQZISYV.js";
+} from "../chunk-RHLUJE4H.js";
 import {
   exitOnHelpFlag
 } from "../chunk-GOQHN2UH.js";
@@ -100,14 +100,14 @@ import {
 import "../chunk-DINDL2CF.js";
 import {
   removeClaudeAlias
-} from "../chunk-UP7NZXJU.js";
+} from "../chunk-XBO42HKH.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-E3WQMDCE.js";
+import "../chunk-POAFXBNH.js";
 import "../chunk-4LL6LG5X.js";
 import "../chunk-2UMNXADU.js";
 import {
@@ -115,7 +115,7 @@ import {
   HOOK_COMPATIBLE_PROFILES,
   HOOK_LOCATOR_BINARY,
   isValidApiKey
-} from "../chunk-VQYARC2K.js";
+} from "../chunk-WPJS3OZH.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, copyFileSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
-import "../chunk-MZUXTN7X.js";
+import "../chunk-4V24U44H.js";
 import {
   LiveTranscriptRelay,
   liveSessionSleep,
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-FO4HHPMO.js";
+} from "../chunk-EKQAKSGI.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-ISELLVBP.js";
-import "../chunk-BBUZD7MU.js";
+} from "../chunk-MU275U5A.js";
+import "../chunk-B3S4SF3D.js";
 import "../chunk-EQRS3SGM.js";
 import {
   transcriptsEnabled
-} from "../chunk-2MOQUNFL.js";
+} from "../chunk-A2URMNFM.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -28,18 +28,18 @@ import {
 } from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-J7PJALS2.js";
+} from "../chunk-K7UIAE7I.js";
 import {
   resolveBinary
-} from "../chunk-EWQZISYV.js";
-import "../chunk-UP7NZXJU.js";
+} from "../chunk-RHLUJE4H.js";
+import "../chunk-XBO42HKH.js";
 import {
   callMcpTool
 } from "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-E3WQMDCE.js";
+import "../chunk-POAFXBNH.js";
 import "../chunk-4LL6LG5X.js";
 import {
   getApiKey,
@@ -48,7 +48,7 @@ import {
 import {
   parseAgentQuestion,
   parseAgentQuestionAnswers
-} from "../chunk-VQYARC2K.js";
+} from "../chunk-WPJS3OZH.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-PQG6NTPT.js";
+} from "../chunk-EYMMU5HC.js";
 import {
   blockedActionFingerprint,
   codexCallKey,
@@ -12,30 +12,30 @@ import {
   recordBlockedActionHint,
   recordCodexCallDecision,
   userScope
-} from "../chunk-IH7YUPFN.js";
+} from "../chunk-A5ZWYQFV.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-VACFOGF3.js";
+} from "../chunk-YF4JDCU4.js";
 import {
   readHookInput
-} from "../chunk-LQ3BHPPZ.js";
+} from "../chunk-N43EQPJK.js";
 import {
   denyReasonFrom,
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
-import "../chunk-PWIMJP4U.js";
+import "../chunk-EU6JH7KU.js";
 import "../chunk-YKLCWWEI.js";
-import "../chunk-DZYIAMKR.js";
-import "../chunk-OYYQHJAO.js";
-import "../chunk-SLEWDZOA.js";
-import "../chunk-AH5OO2YZ.js";
-import "../chunk-6JUCFMSF.js";
-import "../chunk-YM4G6CFN.js";
-import "../chunk-SA6UB3GD.js";
-import "../chunk-BBUZD7MU.js";
+import "../chunk-XEXOHUJ6.js";
+import "../chunk-BYGEZI7B.js";
+import "../chunk-JYEGOYQC.js";
+import "../chunk-DVO4SZMJ.js";
+import "../chunk-KS4P6F3R.js";
+import "../chunk-OE6U2AXM.js";
+import "../chunk-2PLEJ7SY.js";
+import "../chunk-B3S4SF3D.js";
 import "../chunk-EQRS3SGM.js";
-import "../chunk-2MOQUNFL.js";
+import "../chunk-A2URMNFM.js";
 import "../chunk-XHKBHWLX.js";
 import {
   CODEX_AGENT,
@@ -72,8 +72,8 @@ import {
   toCodexWire,
   toPolicyLookup,
   toPolicyLookups
-} from "../chunk-WTT24AUA.js";
-import "../chunk-INBTKFT6.js";
+} from "../chunk-WXXDHGTZ.js";
+import "../chunk-IAEVVUXO.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -88,18 +88,18 @@ import {
 } from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-J7PJALS2.js";
+} from "../chunk-K7UIAE7I.js";
 import {
   canonicalJson
-} from "../chunk-EWQZISYV.js";
+} from "../chunk-RHLUJE4H.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-UP7NZXJU.js";
+import "../chunk-XBO42HKH.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-E3WQMDCE.js";
+import "../chunk-POAFXBNH.js";
 import {
   writeFileAtomic
 } from "../chunk-4LL6LG5X.js";
@@ -118,7 +118,7 @@ import {
   hookWaitClamped,
   hookWaitDeadline,
   resolveGate
-} from "../chunk-VQYARC2K.js";
+} from "../chunk-WPJS3OZH.js";
 
 // bin/pushary-codex-hook.ts
 import { basename } from "path";
@@ -734,7 +734,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-STSGYPF2.js");
+    const { repairCodexHolds } = await import("../reapply-FUCAKR6Z.js");
     repairCodexHolds();
   } catch {
     return;