@pushary/agent-hooks 1.2.0 → 1.3.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 1.3.1
+
+- Keep human-review policies effective inside shell chains, and refuse automatic approval of quoted command substitutions.
+- Check kill switches and standing denials before rejecting unreadable tool targets. Check every file in a patch; ask the agent to split a batch that crosses scope.
+- Preserve symlinked agent configuration files during atomic updates.
+- The installed skill recognizes file-edit capabilities across agents, including Codex patches.
+
 ## 1.2.0
 
 Nothing to run. These are the gate's own rules, tightened where they were guessing.

package/data/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pushary
-version: 0.10.0
+version: 0.11.1
 description: Push notifications and human-in-the-loop for AI agents. Use this whenever a running agent needs a human and nobody is at the terminal, such as before an irreversible or destructive action, before spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, when running unattended and you hit a genuine ambiguity, when another skill's workflow says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from their connected devices. Use these tools proactively - do not wait for the user to ask for notifications. Every question and answer is recorded, so an unattended run stays reviewable afterwards. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 3-day card-first trial.
 metadata:
   hermes:
@@ -125,7 +125,7 @@ For example, in a repository with two apps and no test runner in the package:
 - **Ask at the boundary, not once for each item.** Ask about deleting files. Do not ask about each file.
 - **The limit of three notifications counts pushes.** Questions you ask in the terminal are free and do not count.
 
-`propose_scope` records the boundary this work produces. Read its section below first. What it can enforce depends on whether this run changes files.
+`propose_scope` records the boundary this work produces. It is a separate decision from notifying: see "When to Propose a Scope" below. What it can enforce depends on whether this run changes files.
 
 ## When to Use
 
@@ -147,17 +147,29 @@ For example, in a repository with two apps and no test runner in the package:
 - You need a name, path, value, or free-text decision
 - The options cannot be enumerated in advance
 
-**Propose a scope when:**
-- This run changes files with `Edit`, `Write` or `MultiEdit`, and the file boundary is not yet agreed
-- Call `propose_scope` once, before the work, not after
-- Skip it for a single quick edit; a scope prompt for one file is just noise
-- Put a boundary that is not a file path in `promises`, never in `allowedPaths`. Read the `enforces` field that comes back, and tell the user what it says
-
 **Do NOT notify when:**
 - The task is trivial or single-step
 - The question can be answered from context without user input
 - You already sent 3 notifications for the current task (unless the user explicitly asked for more)
 
+## When to Propose a Scope
+
+This is a separate decision from notifying. The rules above do not apply to it. A scope is not a notification, and the limit of three does not count it.
+
+**Propose a scope when:**
+- This run changes files with `Edit`, `Write` or `MultiEdit`, and the file boundary is not yet agreed
+- The run touches more than one file, or you cannot name every file before you start
+- Call `propose_scope` once, before the first edit, not after
+
+**Do not propose a scope when:**
+- The run changes one file and you already know which one
+- The user named the exact files in this turn, so the boundary is already agreed
+- The run changes no files and records no promise worth keeping
+
+"Trivial" here means one file. It does not mean one task. A refactor across modules, a rename through several files, a migration, or wiring one option through the code all need a scope. Each edit can be small and the run still needs a boundary.
+
+Put a boundary that is not a file path in `promises`, never in `allowedPaths`. Read the `enforces` field that comes back. Tell the user what it says.
+
 ## Setup
 
 **Look at the machine first. Do not guess the install path.** Run these. Each one is read-only and fast. Run them as separate commands.
@@ -436,7 +448,7 @@ Propose the boundary of this run and block until the user agrees to it. Call it
 
 The user sees three things: the paths you will change, the paths you promise to leave alone, and your definition of done. The user agrees to all three in one tap.
 
-**Before you call this, look at your own tool list.** If you hold no `Edit`, `Write` or `MultiEdit`, this run changes no files, and a path contract here enforces nothing. Use shape 3 below. This one check decides everything else in this section, and it costs no tool calls.
+**Before you call this, identify the file-editing capabilities you will use.** Native names differ: Codex uses `apply_patch`, VS Code also uses patch and replacement tools, and other agents expose `Edit`, `Write` or `MultiEdit`. These can carry enforceable paths. Use shape 3 only when this run has no file boundary to enforce. Read the returned `enforces` and `hookSeen` fields to confirm what is actually checked; tool names alone do not prove enforcement.
 
 **A boundary makes a question. It never makes an approval.** After the user agrees, a rule that already asked still asks. A scope can only turn an automatic approval into a question.
 
@@ -444,7 +456,7 @@ The user sees three things: the paths you will change, the paths you promise to
 
 The gate reads one thing from the contract: the path of a file you are about to change. It compares that path with `allowedPaths` and `offLimitsPaths`.
 
-- **Enforced.** `Edit`, `Write` and `MultiEdit`, and the same calls under other agent names. A file outside the agreed paths stops being auto-approvable and becomes a new question. Approving it widens the scope by that exact path.
+- **Enforced.** `Edit`, `Write`, `MultiEdit` and supported aliases, including Codex `apply_patch` and VS Code patch/replacement tools. A file outside the agreed paths stops being auto-approvable and becomes a new question. Approving it widens the scope by that exact path.
 - **Not enforced.** Shell commands. `Read`. Web requests. Every MCP tool. These carry no file path, so the gate has no path to judge and reads them as inside the scope. The permission policy still governs them.
 - **`doneWhen` and `promises` are not enforced.** The user reads them. No code checks them.
 

package/data/cursor-plugin/skills/pushary/SKILL.md

@@ -118,7 +118,7 @@ For example, in a repository with two apps and no test runner in the package:
 - **Ask at the boundary, not once for each item.** Ask about deleting files. Do not ask about each file.
 - **The limit of three notifications counts pushes.** Questions you ask in the terminal are free and do not count.
 
-`propose_scope` records the boundary this work produces. Read its section below first. What it can enforce depends on whether this run changes files.
+`propose_scope` records the boundary this work produces. It is a separate decision from notifying: see "When to Propose a Scope" below. What it can enforce depends on whether this run changes files.
 
 ## When to Use
 
@@ -140,17 +140,29 @@ For example, in a repository with two apps and no test runner in the package:
 - You need a name, path, value, or free-text decision
 - The options cannot be enumerated in advance
 
-**Propose a scope when:**
-- This run changes files with `Edit`, `Write` or `MultiEdit`, and the file boundary is not yet agreed
-- Call `propose_scope` once, before the work, not after
-- Skip it for a single quick edit; a scope prompt for one file is just noise
-- Put a boundary that is not a file path in `promises`, never in `allowedPaths`. Read the `enforces` field that comes back, and tell the user what it says
-
 **Do NOT notify when:**
 - The task is trivial or single-step
 - The question can be answered from context without user input
 - You already sent 3 notifications for the current task (unless the user explicitly asked for more)
 
+## When to Propose a Scope
+
+This is a separate decision from notifying. The rules above do not apply to it. A scope is not a notification, and the limit of three does not count it.
+
+**Propose a scope when:**
+- This run changes files with `Edit`, `Write` or `MultiEdit`, and the file boundary is not yet agreed
+- The run touches more than one file, or you cannot name every file before you start
+- Call `propose_scope` once, before the first edit, not after
+
+**Do not propose a scope when:**
+- The run changes one file and you already know which one
+- The user named the exact files in this turn, so the boundary is already agreed
+- The run changes no files and records no promise worth keeping
+
+"Trivial" here means one file. It does not mean one task. A refactor across modules, a rename through several files, a migration, or wiring one option through the code all need a scope. Each edit can be small and the run still needs a boundary.
+
+Put a boundary that is not a file path in `promises`, never in `allowedPaths`. Read the `enforces` field that comes back. Tell the user what it says.
+
 ## Setup
 
 **Look at the machine first. Do not guess the install path.** Run these. Each one is read-only and fast. Run them as separate commands.
@@ -429,7 +441,7 @@ Propose the boundary of this run and block until the user agrees to it. Call it
 
 The user sees three things: the paths you will change, the paths you promise to leave alone, and your definition of done. The user agrees to all three in one tap.
 
-**Before you call this, look at your own tool list.** If you hold no `Edit`, `Write` or `MultiEdit`, this run changes no files, and a path contract here enforces nothing. Use shape 3 below. This one check decides everything else in this section, and it costs no tool calls.
+**Before you call this, identify the file-editing capabilities you will use.** Native names differ: Codex uses `apply_patch`, VS Code also uses patch and replacement tools, and other agents expose `Edit`, `Write` or `MultiEdit`. These can carry enforceable paths. Use shape 3 only when this run has no file boundary to enforce. Read the returned `enforces` and `hookSeen` fields to confirm what is actually checked; tool names alone do not prove enforcement.
 
 **A boundary makes a question. It never makes an approval.** After the user agrees, a rule that already asked still asks. A scope can only turn an automatic approval into a question.
 
@@ -437,7 +449,7 @@ The user sees three things: the paths you will change, the paths you promise to
 
 The gate reads one thing from the contract: the path of a file you are about to change. It compares that path with `allowedPaths` and `offLimitsPaths`.
 
-- **Enforced.** `Edit`, `Write` and `MultiEdit`, and the same calls under other agent names. A file outside the agreed paths stops being auto-approvable and becomes a new question. Approving it widens the scope by that exact path.
+- **Enforced.** `Edit`, `Write`, `MultiEdit` and supported aliases, including Codex `apply_patch` and VS Code patch/replacement tools. A file outside the agreed paths stops being auto-approvable and becomes a new question. Approving it widens the scope by that exact path.
 - **Not enforced.** Shell commands. `Read`. Web requests. Every MCP tool. These carry no file path, so the gate has no path to judge and reads them as inside the scope. The permission policy still governs them.
 - **`doneWhen` and `promises` are not enforced.** The user reads them. No code checks them.
 

package/data/vscode-plugin/skills/pushary/SKILL.md

@@ -118,7 +118,7 @@ For example, in a repository with two apps and no test runner in the package:
 - **Ask at the boundary, not once for each item.** Ask about deleting files. Do not ask about each file.
 - **The limit of three notifications counts pushes.** Questions you ask in the terminal are free and do not count.
 
-`propose_scope` records the boundary this work produces. Read its section below first. What it can enforce depends on whether this run changes files.
+`propose_scope` records the boundary this work produces. It is a separate decision from notifying: see "When to Propose a Scope" below. What it can enforce depends on whether this run changes files.
 
 ## When to Use
 
@@ -140,17 +140,29 @@ For example, in a repository with two apps and no test runner in the package:
 - You need a name, path, value, or free-text decision
 - The options cannot be enumerated in advance
 
-**Propose a scope when:**
-- This run changes files with `Edit`, `Write` or `MultiEdit`, and the file boundary is not yet agreed
-- Call `propose_scope` once, before the work, not after
-- Skip it for a single quick edit; a scope prompt for one file is just noise
-- Put a boundary that is not a file path in `promises`, never in `allowedPaths`. Read the `enforces` field that comes back, and tell the user what it says
-
 **Do NOT notify when:**
 - The task is trivial or single-step
 - The question can be answered from context without user input
 - You already sent 3 notifications for the current task (unless the user explicitly asked for more)
 
+## When to Propose a Scope
+
+This is a separate decision from notifying. The rules above do not apply to it. A scope is not a notification, and the limit of three does not count it.
+
+**Propose a scope when:**
+- This run changes files with `Edit`, `Write` or `MultiEdit`, and the file boundary is not yet agreed
+- The run touches more than one file, or you cannot name every file before you start
+- Call `propose_scope` once, before the first edit, not after
+
+**Do not propose a scope when:**
+- The run changes one file and you already know which one
+- The user named the exact files in this turn, so the boundary is already agreed
+- The run changes no files and records no promise worth keeping
+
+"Trivial" here means one file. It does not mean one task. A refactor across modules, a rename through several files, a migration, or wiring one option through the code all need a scope. Each edit can be small and the run still needs a boundary.
+
+Put a boundary that is not a file path in `promises`, never in `allowedPaths`. Read the `enforces` field that comes back. Tell the user what it says.
+
 ## Setup
 
 **Look at the machine first. Do not guess the install path.** Run these. Each one is read-only and fast. Run them as separate commands.
@@ -429,7 +441,7 @@ Propose the boundary of this run and block until the user agrees to it. Call it
 
 The user sees three things: the paths you will change, the paths you promise to leave alone, and your definition of done. The user agrees to all three in one tap.
 
-**Before you call this, look at your own tool list.** If you hold no `Edit`, `Write` or `MultiEdit`, this run changes no files, and a path contract here enforces nothing. Use shape 3 below. This one check decides everything else in this section, and it costs no tool calls.
+**Before you call this, identify the file-editing capabilities you will use.** Native names differ: Codex uses `apply_patch`, VS Code also uses patch and replacement tools, and other agents expose `Edit`, `Write` or `MultiEdit`. These can carry enforceable paths. Use shape 3 only when this run has no file boundary to enforce. Read the returned `enforces` and `hookSeen` fields to confirm what is actually checked; tool names alone do not prove enforcement.
 
 **A boundary makes a question. It never makes an approval.** After the user agrees, a rule that already asked still asks. A scope can only turn an automatic approval into a question.
 
@@ -437,7 +449,7 @@ The user sees three things: the paths you will change, the paths you promise to
 
 The gate reads one thing from the contract: the path of a file you are about to change. It compares that path with `allowedPaths` and `offLimitsPaths`.
 
-- **Enforced.** `Edit`, `Write` and `MultiEdit`, and the same calls under other agent names. A file outside the agreed paths stops being auto-approvable and becomes a new question. Approving it widens the scope by that exact path.
+- **Enforced.** `Edit`, `Write`, `MultiEdit` and supported aliases, including Codex `apply_patch` and VS Code patch/replacement tools. A file outside the agreed paths stops being auto-approvable and becomes a new question. Approving it widens the scope by that exact path.
 - **Not enforced.** Shell commands. `Read`. Web requests. Every MCP tool. These carry no file path, so the gate has no path to judge and reads them as inside the scope. The permission policy still governs them.
 - **`doneWhen` and `promises` are not enforced.** The user reads them. No code checks them.
 

package/dist/bin/pushary-bell-hook.js

@@ -1,35 +1,35 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-7ERWAYVV.js";
+} from "../chunk-35RPUNYU.js";
 import {
   readHookInput
-} from "../chunk-4UT44NRP.js";
-import "../chunk-PCT2MYG5.js";
-import "../chunk-YKLCWWEI.js";
-import "../chunk-W6XVHP4U.js";
-import "../chunk-WC5PYFDK.js";
-import "../chunk-U42ES5U3.js";
-import "../chunk-C3WH44MH.js";
-import "../chunk-CVCSUAXI.js";
-import "../chunk-ERP7FOFQ.js";
-import "../chunk-VDOKRCWM.js";
-import "../chunk-6QCN5XQE.js";
+} from "../chunk-CKLWJ6EL.js";
+import "../chunk-P232YODQ.js";
+import "../chunk-SGZJ5LYH.js";
+import "../chunk-REIZ5GXG.js";
+import "../chunk-FGNABUPN.js";
+import "../chunk-KLZJEMSE.js";
+import "../chunk-QOCWB4Q6.js";
+import "../chunk-6HH4IH4K.js";
+import "../chunk-KHGIM2BN.js";
+import "../chunk-EAGMQMRM.js";
+import "../chunk-CDSL3LLO.js";
 import "../chunk-EQRS3SGM.js";
-import "../chunk-KHTBSSY5.js";
+import "../chunk-YXWM4TNX.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-UWP66NDF.js";
-import "../chunk-KZPUARCU.js";
-import "../chunk-PX53RT6Q.js";
+import "../chunk-XP2KRTZD.js";
+import "../chunk-465UENKO.js";
+import "../chunk-34NNTYK6.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-7TDQ7KDY.js";
+import "../chunk-5SALHATY.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ZFQPSGPO.js";
-import "../chunk-4LL6LG5X.js";
+import "../chunk-5WLH2ENB.js";
+import "../chunk-T7E75EKA.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-7DQVIIHX.js";
+import "../chunk-5UWDYOZX.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,15 +5,15 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-7ERWAYVV.js";
+} from "../chunk-35RPUNYU.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-VDOKRCWM.js";
+} from "../chunk-EAGMQMRM.js";
 import {
   claudeSettings
-} from "../chunk-PX53RT6Q.js";
+} from "../chunk-34NNTYK6.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -25,18 +25,18 @@ import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-7TDQ7KDY.js";
+import "../chunk-5SALHATY.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-ZFQPSGPO.js";
+import "../chunk-5WLH2ENB.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "../chunk-4LL6LG5X.js";
+} from "../chunk-T7E75EKA.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-7DQVIIHX.js";
+import "../chunk-5UWDYOZX.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,7 +8,7 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-KEVJ2WW6.js";
+} from "../chunk-XOUQUZ43.js";
 import {
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
@@ -17,24 +17,24 @@ import {
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-PCT2MYG5.js";
-import "../chunk-YKLCWWEI.js";
-import "../chunk-W6XVHP4U.js";
-import "../chunk-WC5PYFDK.js";
-import "../chunk-U42ES5U3.js";
-import "../chunk-C3WH44MH.js";
+} from "../chunk-P232YODQ.js";
+import "../chunk-SGZJ5LYH.js";
+import "../chunk-REIZ5GXG.js";
+import "../chunk-FGNABUPN.js";
+import "../chunk-KLZJEMSE.js";
+import "../chunk-QOCWB4Q6.js";
 import {
   ensureDaemonRunning
-} from "../chunk-CVCSUAXI.js";
-import "../chunk-ERP7FOFQ.js";
-import "../chunk-VDOKRCWM.js";
+} from "../chunk-6HH4IH4K.js";
+import "../chunk-KHGIM2BN.js";
+import "../chunk-EAGMQMRM.js";
 import {
   encryptRecord
-} from "../chunk-6QCN5XQE.js";
+} from "../chunk-CDSL3LLO.js";
 import "../chunk-EQRS3SGM.js";
 import {
   transcriptsEnabled
-} from "../chunk-KHTBSSY5.js";
+} from "../chunk-YXWM4TNX.js";
 import {
   needsShell,
   spawnClaude
@@ -56,8 +56,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-5AATCXJN.js";
-import "../chunk-UWP66NDF.js";
+} from "../chunk-WOBHHXW5.js";
+import "../chunk-XP2KRTZD.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -70,17 +70,17 @@ import {
 } from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-KZPUARCU.js";
-import "../chunk-PX53RT6Q.js";
+} from "../chunk-465UENKO.js";
+import "../chunk-34NNTYK6.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-7TDQ7KDY.js";
+import "../chunk-5SALHATY.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ZFQPSGPO.js";
-import "../chunk-4LL6LG5X.js";
+import "../chunk-5WLH2ENB.js";
+import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
@@ -89,7 +89,7 @@ import {
   KILL_REASON,
   redactSecrets,
   resolveGate
-} from "../chunk-7DQVIIHX.js";
+} from "../chunk-5UWDYOZX.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -5,14 +5,14 @@ import {
   createGuards,
   resolveHermesPython,
   runHermesPythonScript
-} from "../chunk-JOTV75GX.js";
-import "../chunk-KBITFQST.js";
+} from "../chunk-AFOTOA24.js";
+import "../chunk-P32LPT2L.js";
 import {
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-7GH3D6YG.js";
+} from "../chunk-PEV6ULSM.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -22,7 +22,7 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-LWKVEMVK.js";
+} from "../chunk-XVE52YFZ.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -30,37 +30,37 @@ import {
   compatiblePermissionRuleFile,
   removeCompatibleHooks,
   removeCompatibleMcpServer
-} from "../chunk-YT6H7BB5.js";
+} from "../chunk-LWT34GSY.js";
 import {
   isClaudeMcpSnapshot,
   removeClaudeMcpServers,
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-PX54KULQ.js";
+} from "../chunk-SGZE2JBF.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-W6XVHP4U.js";
-import "../chunk-WC5PYFDK.js";
-import "../chunk-U42ES5U3.js";
+} from "../chunk-REIZ5GXG.js";
+import "../chunk-FGNABUPN.js";
+import "../chunk-KLZJEMSE.js";
 import {
   pusharyHookExecutable
-} from "../chunk-C3WH44MH.js";
+} from "../chunk-QOCWB4Q6.js";
 import {
   disableDaemonService
-} from "../chunk-CVCSUAXI.js";
+} from "../chunk-6HH4IH4K.js";
 import {
   removeGeminiSettings
-} from "../chunk-ERP7FOFQ.js";
-import "../chunk-VDOKRCWM.js";
+} from "../chunk-KHGIM2BN.js";
+import "../chunk-EAGMQMRM.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-5AATCXJN.js";
-import "../chunk-UWP66NDF.js";
+import "../chunk-WOBHHXW5.js";
+import "../chunk-XP2KRTZD.js";
 import "../chunk-LGXUGYUH.js";
-import "../chunk-KZPUARCU.js";
+import "../chunk-465UENKO.js";
 import {
   bridgeAgentKey,
   claudeJson,
@@ -89,7 +89,7 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-PX53RT6Q.js";
+} from "../chunk-34NNTYK6.js";
 import {
   exitOnHelpFlag
 } from "../chunk-GOQHN2UH.js";
@@ -100,22 +100,22 @@ import {
 import "../chunk-DINDL2CF.js";
 import {
   removeClaudeAlias
-} from "../chunk-7TDQ7KDY.js";
+} from "../chunk-5SALHATY.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-ZFQPSGPO.js";
-import "../chunk-4LL6LG5X.js";
+import "../chunk-5WLH2ENB.js";
+import "../chunk-T7E75EKA.js";
 import "../chunk-2UMNXADU.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_COMPATIBLE_PROFILES,
   HOOK_LOCATOR_BINARY,
   isValidApiKey
-} from "../chunk-7DQVIIHX.js";
+} from "../chunk-5UWDYOZX.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, copyFileSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
-import "../chunk-CG4ZUQ5O.js";
+import "../chunk-PHXU4NOP.js";
 import {
   LiveTranscriptRelay,
   liveSessionSleep,
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-OGSRCIOD.js";
+} from "../chunk-R5CU7ED6.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-KEVJ2WW6.js";
-import "../chunk-6QCN5XQE.js";
+} from "../chunk-XOUQUZ43.js";
+import "../chunk-CDSL3LLO.js";
 import "../chunk-EQRS3SGM.js";
 import {
   transcriptsEnabled
-} from "../chunk-KHTBSSY5.js";
+} from "../chunk-YXWM4TNX.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -28,19 +28,19 @@ import {
 } from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-KZPUARCU.js";
+} from "../chunk-465UENKO.js";
 import {
   resolveBinary
-} from "../chunk-PX53RT6Q.js";
-import "../chunk-7TDQ7KDY.js";
+} from "../chunk-34NNTYK6.js";
+import "../chunk-5SALHATY.js";
 import {
   callMcpTool
 } from "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ZFQPSGPO.js";
-import "../chunk-4LL6LG5X.js";
+import "../chunk-5WLH2ENB.js";
+import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
@@ -48,7 +48,7 @@ import {
 import {
   parseAgentQuestion,
   parseAgentQuestionAnswers
-} from "../chunk-7DQVIIHX.js";
+} from "../chunk-5UWDYOZX.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";