@pushary/agent-hooks 1.3.0 → 1.3.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 1.3.1
+
+- Keep human-review policies effective inside shell chains, and refuse automatic approval of quoted command substitutions.
+- Check kill switches and standing denials before rejecting unreadable tool targets. Check every file in a patch; ask the agent to split a batch that crosses scope.
+- Preserve symlinked agent configuration files during atomic updates.
+- The installed skill recognizes file-edit capabilities across agents, including Codex patches.
+
 ## 1.2.0
 
 Nothing to run. These are the gate's own rules, tightened where they were guessing.

package/data/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pushary
-version: 0.11.0
+version: 0.11.1
 description: Push notifications and human-in-the-loop for AI agents. Use this whenever a running agent needs a human and nobody is at the terminal, such as before an irreversible or destructive action, before spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, when running unattended and you hit a genuine ambiguity, when another skill's workflow says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from their connected devices. Use these tools proactively - do not wait for the user to ask for notifications. Every question and answer is recorded, so an unattended run stays reviewable afterwards. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 3-day card-first trial.
 metadata:
   hermes:
@@ -448,7 +448,7 @@ Propose the boundary of this run and block until the user agrees to it. Call it
 
 The user sees three things: the paths you will change, the paths you promise to leave alone, and your definition of done. The user agrees to all three in one tap.
 
-**Before you call this, look at your own tool list.** If you hold no `Edit`, `Write` or `MultiEdit`, this run changes no files, and a path contract here enforces nothing. Use shape 3 below. This one check decides everything else in this section, and it costs no tool calls.
+**Before you call this, identify the file-editing capabilities you will use.** Native names differ: Codex uses `apply_patch`, VS Code also uses patch and replacement tools, and other agents expose `Edit`, `Write` or `MultiEdit`. These can carry enforceable paths. Use shape 3 only when this run has no file boundary to enforce. Read the returned `enforces` and `hookSeen` fields to confirm what is actually checked; tool names alone do not prove enforcement.
 
 **A boundary makes a question. It never makes an approval.** After the user agrees, a rule that already asked still asks. A scope can only turn an automatic approval into a question.
 
@@ -456,7 +456,7 @@ The user sees three things: the paths you will change, the paths you promise to
 
 The gate reads one thing from the contract: the path of a file you are about to change. It compares that path with `allowedPaths` and `offLimitsPaths`.
 
-- **Enforced.** `Edit`, `Write` and `MultiEdit`, and the same calls under other agent names. A file outside the agreed paths stops being auto-approvable and becomes a new question. Approving it widens the scope by that exact path.
+- **Enforced.** `Edit`, `Write`, `MultiEdit` and supported aliases, including Codex `apply_patch` and VS Code patch/replacement tools. A file outside the agreed paths stops being auto-approvable and becomes a new question. Approving it widens the scope by that exact path.
 - **Not enforced.** Shell commands. `Read`. Web requests. Every MCP tool. These carry no file path, so the gate has no path to judge and reads them as inside the scope. The permission policy still governs them.
 - **`doneWhen` and `promises` are not enforced.** The user reads them. No code checks them.
 

package/data/cursor-plugin/skills/pushary/SKILL.md

@@ -441,7 +441,7 @@ Propose the boundary of this run and block until the user agrees to it. Call it
 
 The user sees three things: the paths you will change, the paths you promise to leave alone, and your definition of done. The user agrees to all three in one tap.
 
-**Before you call this, look at your own tool list.** If you hold no `Edit`, `Write` or `MultiEdit`, this run changes no files, and a path contract here enforces nothing. Use shape 3 below. This one check decides everything else in this section, and it costs no tool calls.
+**Before you call this, identify the file-editing capabilities you will use.** Native names differ: Codex uses `apply_patch`, VS Code also uses patch and replacement tools, and other agents expose `Edit`, `Write` or `MultiEdit`. These can carry enforceable paths. Use shape 3 only when this run has no file boundary to enforce. Read the returned `enforces` and `hookSeen` fields to confirm what is actually checked; tool names alone do not prove enforcement.
 
 **A boundary makes a question. It never makes an approval.** After the user agrees, a rule that already asked still asks. A scope can only turn an automatic approval into a question.
 
@@ -449,7 +449,7 @@ The user sees three things: the paths you will change, the paths you promise to
 
 The gate reads one thing from the contract: the path of a file you are about to change. It compares that path with `allowedPaths` and `offLimitsPaths`.
 
-- **Enforced.** `Edit`, `Write` and `MultiEdit`, and the same calls under other agent names. A file outside the agreed paths stops being auto-approvable and becomes a new question. Approving it widens the scope by that exact path.
+- **Enforced.** `Edit`, `Write`, `MultiEdit` and supported aliases, including Codex `apply_patch` and VS Code patch/replacement tools. A file outside the agreed paths stops being auto-approvable and becomes a new question. Approving it widens the scope by that exact path.
 - **Not enforced.** Shell commands. `Read`. Web requests. Every MCP tool. These carry no file path, so the gate has no path to judge and reads them as inside the scope. The permission policy still governs them.
 - **`doneWhen` and `promises` are not enforced.** The user reads them. No code checks them.
 

package/data/vscode-plugin/skills/pushary/SKILL.md

@@ -441,7 +441,7 @@ Propose the boundary of this run and block until the user agrees to it. Call it
 
 The user sees three things: the paths you will change, the paths you promise to leave alone, and your definition of done. The user agrees to all three in one tap.
 
-**Before you call this, look at your own tool list.** If you hold no `Edit`, `Write` or `MultiEdit`, this run changes no files, and a path contract here enforces nothing. Use shape 3 below. This one check decides everything else in this section, and it costs no tool calls.
+**Before you call this, identify the file-editing capabilities you will use.** Native names differ: Codex uses `apply_patch`, VS Code also uses patch and replacement tools, and other agents expose `Edit`, `Write` or `MultiEdit`. These can carry enforceable paths. Use shape 3 only when this run has no file boundary to enforce. Read the returned `enforces` and `hookSeen` fields to confirm what is actually checked; tool names alone do not prove enforcement.
 
 **A boundary makes a question. It never makes an approval.** After the user agrees, a rule that already asked still asks. A scope can only turn an automatic approval into a question.
 
@@ -449,7 +449,7 @@ The user sees three things: the paths you will change, the paths you promise to
 
 The gate reads one thing from the contract: the path of a file you are about to change. It compares that path with `allowedPaths` and `offLimitsPaths`.
 
-- **Enforced.** `Edit`, `Write` and `MultiEdit`, and the same calls under other agent names. A file outside the agreed paths stops being auto-approvable and becomes a new question. Approving it widens the scope by that exact path.
+- **Enforced.** `Edit`, `Write`, `MultiEdit` and supported aliases, including Codex `apply_patch` and VS Code patch/replacement tools. A file outside the agreed paths stops being auto-approvable and becomes a new question. Approving it widens the scope by that exact path.
 - **Not enforced.** Shell commands. `Read`. Web requests. Every MCP tool. These carry no file path, so the gate has no path to judge and reads them as inside the scope. The permission policy still governs them.
 - **`doneWhen` and `promises` are not enforced.** The user reads them. No code checks them.
 

package/dist/bin/pushary-bell-hook.js

@@ -1,35 +1,35 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-EJZCV5G4.js";
+} from "../chunk-35RPUNYU.js";
 import {
   readHookInput
-} from "../chunk-N43EQPJK.js";
-import "../chunk-EU6JH7KU.js";
-import "../chunk-YKLCWWEI.js";
-import "../chunk-XEXOHUJ6.js";
-import "../chunk-BYGEZI7B.js";
-import "../chunk-JYEGOYQC.js";
-import "../chunk-DVO4SZMJ.js";
-import "../chunk-KS4P6F3R.js";
-import "../chunk-OE6U2AXM.js";
-import "../chunk-2PLEJ7SY.js";
-import "../chunk-B3S4SF3D.js";
+} from "../chunk-CKLWJ6EL.js";
+import "../chunk-P232YODQ.js";
+import "../chunk-SGZJ5LYH.js";
+import "../chunk-REIZ5GXG.js";
+import "../chunk-FGNABUPN.js";
+import "../chunk-KLZJEMSE.js";
+import "../chunk-QOCWB4Q6.js";
+import "../chunk-6HH4IH4K.js";
+import "../chunk-KHGIM2BN.js";
+import "../chunk-EAGMQMRM.js";
+import "../chunk-CDSL3LLO.js";
 import "../chunk-EQRS3SGM.js";
-import "../chunk-A2URMNFM.js";
+import "../chunk-YXWM4TNX.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-IAEVVUXO.js";
-import "../chunk-K7UIAE7I.js";
-import "../chunk-RHLUJE4H.js";
+import "../chunk-XP2KRTZD.js";
+import "../chunk-465UENKO.js";
+import "../chunk-34NNTYK6.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-XBO42HKH.js";
+import "../chunk-5SALHATY.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-POAFXBNH.js";
-import "../chunk-4LL6LG5X.js";
+import "../chunk-5WLH2ENB.js";
+import "../chunk-T7E75EKA.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-WPJS3OZH.js";
+import "../chunk-5UWDYOZX.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,15 +5,15 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-EJZCV5G4.js";
+} from "../chunk-35RPUNYU.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-2PLEJ7SY.js";
+} from "../chunk-EAGMQMRM.js";
 import {
   claudeSettings
-} from "../chunk-RHLUJE4H.js";
+} from "../chunk-34NNTYK6.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -25,18 +25,18 @@ import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-XBO42HKH.js";
+import "../chunk-5SALHATY.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-POAFXBNH.js";
+import "../chunk-5WLH2ENB.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "../chunk-4LL6LG5X.js";
+} from "../chunk-T7E75EKA.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-WPJS3OZH.js";
+import "../chunk-5UWDYOZX.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,7 +8,7 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-MU275U5A.js";
+} from "../chunk-XOUQUZ43.js";
 import {
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
@@ -17,24 +17,24 @@ import {
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-EU6JH7KU.js";
-import "../chunk-YKLCWWEI.js";
-import "../chunk-XEXOHUJ6.js";
-import "../chunk-BYGEZI7B.js";
-import "../chunk-JYEGOYQC.js";
-import "../chunk-DVO4SZMJ.js";
+} from "../chunk-P232YODQ.js";
+import "../chunk-SGZJ5LYH.js";
+import "../chunk-REIZ5GXG.js";
+import "../chunk-FGNABUPN.js";
+import "../chunk-KLZJEMSE.js";
+import "../chunk-QOCWB4Q6.js";
 import {
   ensureDaemonRunning
-} from "../chunk-KS4P6F3R.js";
-import "../chunk-OE6U2AXM.js";
-import "../chunk-2PLEJ7SY.js";
+} from "../chunk-6HH4IH4K.js";
+import "../chunk-KHGIM2BN.js";
+import "../chunk-EAGMQMRM.js";
 import {
   encryptRecord
-} from "../chunk-B3S4SF3D.js";
+} from "../chunk-CDSL3LLO.js";
 import "../chunk-EQRS3SGM.js";
 import {
   transcriptsEnabled
-} from "../chunk-A2URMNFM.js";
+} from "../chunk-YXWM4TNX.js";
 import {
   needsShell,
   spawnClaude
@@ -56,8 +56,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-WXXDHGTZ.js";
-import "../chunk-IAEVVUXO.js";
+} from "../chunk-WOBHHXW5.js";
+import "../chunk-XP2KRTZD.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -70,17 +70,17 @@ import {
 } from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-K7UIAE7I.js";
-import "../chunk-RHLUJE4H.js";
+} from "../chunk-465UENKO.js";
+import "../chunk-34NNTYK6.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-XBO42HKH.js";
+import "../chunk-5SALHATY.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-POAFXBNH.js";
-import "../chunk-4LL6LG5X.js";
+import "../chunk-5WLH2ENB.js";
+import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
@@ -89,7 +89,7 @@ import {
   KILL_REASON,
   redactSecrets,
   resolveGate
-} from "../chunk-WPJS3OZH.js";
+} from "../chunk-5UWDYOZX.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -5,14 +5,14 @@ import {
   createGuards,
   resolveHermesPython,
   runHermesPythonScript
-} from "../chunk-FGVNU7XD.js";
-import "../chunk-KBITFQST.js";
+} from "../chunk-AFOTOA24.js";
+import "../chunk-P32LPT2L.js";
 import {
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-K4TAUYUJ.js";
+} from "../chunk-PEV6ULSM.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -22,7 +22,7 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-E7WBNGJS.js";
+} from "../chunk-XVE52YFZ.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -30,37 +30,37 @@ import {
   compatiblePermissionRuleFile,
   removeCompatibleHooks,
   removeCompatibleMcpServer
-} from "../chunk-BNDHXPTQ.js";
+} from "../chunk-LWT34GSY.js";
 import {
   isClaudeMcpSnapshot,
   removeClaudeMcpServers,
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-ZHL62DRA.js";
+} from "../chunk-SGZE2JBF.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-XEXOHUJ6.js";
-import "../chunk-BYGEZI7B.js";
-import "../chunk-JYEGOYQC.js";
+} from "../chunk-REIZ5GXG.js";
+import "../chunk-FGNABUPN.js";
+import "../chunk-KLZJEMSE.js";
 import {
   pusharyHookExecutable
-} from "../chunk-DVO4SZMJ.js";
+} from "../chunk-QOCWB4Q6.js";
 import {
   disableDaemonService
-} from "../chunk-KS4P6F3R.js";
+} from "../chunk-6HH4IH4K.js";
 import {
   removeGeminiSettings
-} from "../chunk-OE6U2AXM.js";
-import "../chunk-2PLEJ7SY.js";
+} from "../chunk-KHGIM2BN.js";
+import "../chunk-EAGMQMRM.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-WXXDHGTZ.js";
-import "../chunk-IAEVVUXO.js";
+import "../chunk-WOBHHXW5.js";
+import "../chunk-XP2KRTZD.js";
 import "../chunk-LGXUGYUH.js";
-import "../chunk-K7UIAE7I.js";
+import "../chunk-465UENKO.js";
 import {
   bridgeAgentKey,
   claudeJson,
@@ -89,7 +89,7 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-RHLUJE4H.js";
+} from "../chunk-34NNTYK6.js";
 import {
   exitOnHelpFlag
 } from "../chunk-GOQHN2UH.js";
@@ -100,22 +100,22 @@ import {
 import "../chunk-DINDL2CF.js";
 import {
   removeClaudeAlias
-} from "../chunk-XBO42HKH.js";
+} from "../chunk-5SALHATY.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-POAFXBNH.js";
-import "../chunk-4LL6LG5X.js";
+import "../chunk-5WLH2ENB.js";
+import "../chunk-T7E75EKA.js";
 import "../chunk-2UMNXADU.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_COMPATIBLE_PROFILES,
   HOOK_LOCATOR_BINARY,
   isValidApiKey
-} from "../chunk-WPJS3OZH.js";
+} from "../chunk-5UWDYOZX.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, copyFileSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
-import "../chunk-4V24U44H.js";
+import "../chunk-PHXU4NOP.js";
 import {
   LiveTranscriptRelay,
   liveSessionSleep,
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-EKQAKSGI.js";
+} from "../chunk-R5CU7ED6.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-MU275U5A.js";
-import "../chunk-B3S4SF3D.js";
+} from "../chunk-XOUQUZ43.js";
+import "../chunk-CDSL3LLO.js";
 import "../chunk-EQRS3SGM.js";
 import {
   transcriptsEnabled
-} from "../chunk-A2URMNFM.js";
+} from "../chunk-YXWM4TNX.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -28,19 +28,19 @@ import {
 } from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-K7UIAE7I.js";
+} from "../chunk-465UENKO.js";
 import {
   resolveBinary
-} from "../chunk-RHLUJE4H.js";
-import "../chunk-XBO42HKH.js";
+} from "../chunk-34NNTYK6.js";
+import "../chunk-5SALHATY.js";
 import {
   callMcpTool
 } from "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-POAFXBNH.js";
-import "../chunk-4LL6LG5X.js";
+import "../chunk-5WLH2ENB.js";
+import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
@@ -48,7 +48,7 @@ import {
 import {
   parseAgentQuestion,
   parseAgentQuestionAnswers
-} from "../chunk-WPJS3OZH.js";
+} from "../chunk-5UWDYOZX.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-EYMMU5HC.js";
+} from "../chunk-JZA2JOGO.js";
 import {
   blockedActionFingerprint,
   codexCallKey,
@@ -12,30 +12,30 @@ import {
   recordBlockedActionHint,
   recordCodexCallDecision,
   userScope
-} from "../chunk-A5ZWYQFV.js";
+} from "../chunk-HCTSTMDD.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-YF4JDCU4.js";
+} from "../chunk-OMP3KDDU.js";
 import {
   readHookInput
-} from "../chunk-N43EQPJK.js";
+} from "../chunk-CKLWJ6EL.js";
 import {
   denyReasonFrom,
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
-import "../chunk-EU6JH7KU.js";
-import "../chunk-YKLCWWEI.js";
-import "../chunk-XEXOHUJ6.js";
-import "../chunk-BYGEZI7B.js";
-import "../chunk-JYEGOYQC.js";
-import "../chunk-DVO4SZMJ.js";
-import "../chunk-KS4P6F3R.js";
-import "../chunk-OE6U2AXM.js";
-import "../chunk-2PLEJ7SY.js";
-import "../chunk-B3S4SF3D.js";
+import "../chunk-P232YODQ.js";
+import "../chunk-SGZJ5LYH.js";
+import "../chunk-REIZ5GXG.js";
+import "../chunk-FGNABUPN.js";
+import "../chunk-KLZJEMSE.js";
+import "../chunk-QOCWB4Q6.js";
+import "../chunk-6HH4IH4K.js";
+import "../chunk-KHGIM2BN.js";
+import "../chunk-EAGMQMRM.js";
+import "../chunk-CDSL3LLO.js";
 import "../chunk-EQRS3SGM.js";
-import "../chunk-A2URMNFM.js";
+import "../chunk-YXWM4TNX.js";
 import "../chunk-XHKBHWLX.js";
 import {
   CODEX_AGENT,
@@ -72,8 +72,8 @@ import {
   toCodexWire,
   toPolicyLookup,
   toPolicyLookups
-} from "../chunk-WXXDHGTZ.js";
-import "../chunk-IAEVVUXO.js";
+} from "../chunk-WOBHHXW5.js";
+import "../chunk-XP2KRTZD.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -88,21 +88,21 @@ import {
 } from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-K7UIAE7I.js";
+} from "../chunk-465UENKO.js";
 import {
   canonicalJson
-} from "../chunk-RHLUJE4H.js";
+} from "../chunk-34NNTYK6.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-XBO42HKH.js";
+import "../chunk-5SALHATY.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-POAFXBNH.js";
+import "../chunk-5WLH2ENB.js";
 import {
   writeFileAtomic
-} from "../chunk-4LL6LG5X.js";
+} from "../chunk-T7E75EKA.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
@@ -118,7 +118,7 @@ import {
   hookWaitClamped,
   hookWaitDeadline,
   resolveGate
-} from "../chunk-WPJS3OZH.js";
+} from "../chunk-5UWDYOZX.js";
 
 // bin/pushary-codex-hook.ts
 import { basename } from "path";
@@ -734,7 +734,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-FUCAKR6Z.js");
+    const { repairCodexHolds } = await import("../reapply-ADFRVH5N.js");
     repairCodexHolds();
   } catch {
     return;

package/dist/bin/pushary-codex.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   reportEvent
-} from "../chunk-WXXDHGTZ.js";
-import "../chunk-IAEVVUXO.js";
+} from "../chunk-WOBHHXW5.js";
+import "../chunk-XP2KRTZD.js";
 import {
   askUser,
   isDecisionStopped,
@@ -10,18 +10,18 @@ import {
 } from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-K7UIAE7I.js";
-import "../chunk-RHLUJE4H.js";
+} from "../chunk-465UENKO.js";
+import "../chunk-34NNTYK6.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-POAFXBNH.js";
-import "../chunk-4LL6LG5X.js";
+import "../chunk-5WLH2ENB.js";
+import "../chunk-T7E75EKA.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
-import "../chunk-WPJS3OZH.js";
+import "../chunk-5UWDYOZX.js";
 
 // bin/pushary-codex.ts
 import { basename } from "path";

package/dist/bin/pushary-connect.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   printKeyCheck
-} from "../chunk-BL4SQNO6.js";
+} from "../chunk-NDSOOJDX.js";
 import {
   connectDevice,
   connectExistingApp,
   printConnectInstructions
-} from "../chunk-RVDHN2TJ.js";
+} from "../chunk-TGG4FWWB.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey
-} from "../chunk-DON24PNT.js";
+} from "../chunk-TW7KA27C.js";
 import "../chunk-QCGNGEGE.js";
 import {
   createIo
@@ -25,7 +25,7 @@ import {
 import "../chunk-DINDL2CF.js";
 import {
   readKeySource
-} from "../chunk-XBO42HKH.js";
+} from "../chunk-5SALHATY.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import {
@@ -34,10 +34,10 @@ import {
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-POAFXBNH.js";
-import "../chunk-4LL6LG5X.js";
+import "../chunk-5WLH2ENB.js";
+import "../chunk-T7E75EKA.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-WPJS3OZH.js";
+import "../chunk-5UWDYOZX.js";
 
 // bin/pushary-connect.ts
 exitOnHelpFlag("connect");

package/dist/bin/pushary-cowork.js

@@ -2,12 +2,12 @@
 import {
   coworkOutput,
   parseCoworkOptions
-} from "../chunk-3AIFWTVB.js";
+} from "../chunk-QDYJQLXT.js";
 import {
   canOpenBrowser,
   openInBrowser
 } from "../chunk-PUZZELE6.js";
-import "../chunk-BYGEZI7B.js";
+import "../chunk-FGNABUPN.js";
 import {
   exitOnHelpFlag
 } from "../chunk-GOQHN2UH.js";
@@ -22,7 +22,7 @@ import {
 } from "../chunk-KZERVKTD.js";
 import {
   CLAUDE_CONNECTOR_GUIDE
-} from "../chunk-WPJS3OZH.js";
+} from "../chunk-5UWDYOZX.js";
 
 // bin/pushary-cowork.ts
 exitOnHelpFlag("cowork");