@pushary/agent-hooks 1.3.1 → 1.4.0

package/dist/bin/pushary-wait.js

@@ -4,15 +4,15 @@ import {
 } from "../chunk-CVWG2N3Y.js";
 import {
   exitOnFailedResponse
-} from "../chunk-NDSOOJDX.js";
-import "../chunk-TW7KA27C.js";
+} from "../chunk-GS5EI2YL.js";
+import "../chunk-D4TNSUDY.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   exitOnHelpFlag
-} from "../chunk-GOQHN2UH.js";
-import "../chunk-LZQVAEWP.js";
+} from "../chunk-TWWLVOPB.js";
+import "../chunk-FAH3D74E.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -28,7 +28,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-5UWDYOZX.js";
+import "../chunk-7IEB2GV4.js";
 
 // bin/pushary-wait.ts
 exitOnHelpFlag("wait");

package/dist/bin/pushary.js

@@ -3,7 +3,7 @@ import {
   COMMANDS,
   isCommandName,
   renderHelp
-} from "../chunk-LZQVAEWP.js";
+} from "../chunk-FAH3D74E.js";
 import {
   getPackageVersion
 } from "../chunk-DINDL2CF.js";

package/dist/{chunk-QDYJQLXT.js → chunk-2TOTCUJC.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-FGNABUPN.js";
+} from "./chunk-5MSBI6NP.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-7IEB2GV4.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-I2OLM3DM.js → chunk-43Z3RLS5.js}

@@ -1,22 +1,24 @@
 import {
+  activeHookSource,
   activeIdentity
-} from "./chunk-LWT34GSY.js";
+} from "./chunk-HGN6VZTY.js";
 import {
   blockedActionFingerprint,
   defersToNativeMode,
   forgetBlockedActionHint,
   hasBlockedActionHint,
   recordBlockedActionHint
-} from "./chunk-HCTSTMDD.js";
+} from "./chunk-JCWCTBYH.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-OMP3KDDU.js";
+} from "./chunk-5F5QQMCA.js";
 import {
   denyReasonFrom,
   isDeferAnswer
 } from "./chunk-YHG74UFF.js";
 import {
+  AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
   UNNAMED_ACTION,
   deriveAction,
@@ -34,7 +36,7 @@ import {
   scopePathFor,
   settleQuestionsForToolUse,
   throttlePass
-} from "./chunk-WOBHHXW5.js";
+} from "./chunk-IF46POXX.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -49,18 +51,22 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-465UENKO.js";
+} from "./chunk-RQM5SMMR.js";
 import {
   getApiKey,
   getBaseUrl
 } from "./chunk-2UMNXADU.js";
 import {
+  AGENT_QUESTION_STRATEGY,
   GATE_BLOCK_REASON_MAX_LENGTH,
   GATE_WIRE,
+  agentQuestionStrategy,
   buildDecisionEpisodeFeatures,
   claudePermissionDeniedOutput,
   claudePermissionRequestOutput,
   claudePreToolUseOutput,
+  claudePromptsBeforeAnEdit,
+  editAsksAtTheAgentsPrompt,
   effectiveWaitSeconds,
   hookHoldWindowMs,
   hookWaitClamped,
@@ -69,11 +75,13 @@ import {
   isBlockedActionRequest,
   isPermissionRequestOwnedByPreToolUse,
   isPusharyOwnTool,
+  machineDecisionFor,
   parseAgentQuestionAnswers,
   parseAgentQuestions,
   resolveGate,
-  stoppedOutput
-} from "./chunk-5UWDYOZX.js";
+  stoppedOutput,
+  wireVerdictFor
+} from "./chunk-7IEB2GV4.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
@@ -103,12 +111,38 @@ import { tmpdir } from "os";
 import { existsSync, writeFileSync } from "fs";
 var START_MS = Date.now();
 var ACTIVE_AGENT = activeIdentity(process.argv);
+var ACTIVE_SOURCE = activeHookSource(process.argv);
 var agentNameIn = (projectName) => `${ACTIVE_AGENT.label} - ${projectName}`;
 var allow = (reason) => claudePreToolUseOutput("allow", reason);
 var deny = (reason) => claudePreToolUseOutput("deny", reason);
 var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, updatedInput);
 var ask = (reason) => claudePreToolUseOutput("ask", reason);
 var halted = (reason) => stoppedOutput(deny(reason), reason);
+var reportMachineDecision = async (input, verdict) => {
+  const decision = machineDecisionFor(wireVerdictFor(verdict, 0));
+  if (!decision) return;
+  const sessionKey = input.session_id || DEFAULT_SESSION;
+  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+  const throttleKey = `machinedecision:${sessionKey}:${input.tool_name}:${decision.origin}:${toolTarget ?? ""}`;
+  if (!throttlePass(throttleKey, AUTO_DECISION_WINDOW_MS)) return;
+  await reportEvent(
+    {
+      event: "permission_denied",
+      occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
+      toolUseId: input.tool_use_id,
+      agentType: ACTIVE_AGENT.type,
+      agentName: agentNameIn(basename(input.cwd ?? process.cwd())),
+      action: permissionDeniedAction(input.tool_name),
+      sessionId: input.session_id,
+      decisionSource: "policy_auto",
+      decisionOrigin: decision.origin,
+      decisionOutcome: decision.outcome,
+      toolName: input.tool_name,
+      toolTarget
+    },
+    { maxAttempts: 1, timeoutMs: 800 }
+  ).catch(() => void 0);
+};
 var storedWaitDeadline = (result, requestedDeadline) => {
   const stored = result.waitEndsAt ? Date.parse(result.waitEndsAt) : Number.NaN;
   return Number.isFinite(stored) ? Math.min(stored, requestedDeadline) : requestedDeadline;
@@ -519,11 +553,19 @@ var handlePreToolUse = async (input, canonical) => {
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
     const policy = await getPolicy(apiKey, modeState.policyVersion, ACTIVE_AGENT.type, true, input.session_id);
-    const verdict = resolveGate(claudeGateInput(modeState, policy, input, canonical));
-    if (verdict.kind === "kill") return halted(verdict.reason);
-    if (verdict.kind === "deny") return deny(verdict.reason);
+    const gateInput = claudeGateInput(modeState, policy, input, canonical);
+    const verdict = resolveGate(gateInput);
+    if (verdict.kind === "kill") {
+      await reportMachineDecision(input, verdict);
+      return halted(verdict.reason);
+    }
+    if (verdict.kind === "deny") {
+      await reportMachineDecision(input, verdict);
+      return deny(verdict.reason);
+    }
     if (canonical === null) return deny(unreadableReason);
     if (verdict.kind === "gate" && verdict.scopeReason && (canonical?.toolInputs.length ?? 0) > 1) return deny(batchScopeReason);
+    if (agentQuestionStrategy(ACTIVE_SOURCE, "PreToolUse", input.tool_name) === AGENT_QUESTION_STRATEGY.native) return void 0;
     if (input.tool_name === "AskUserQuestion") {
       return handleAskUserQuestion(apiKey, input, modeState);
     }
@@ -534,6 +576,7 @@ var handlePreToolUse = async (input, canonical) => {
     if (!(verdict.kind === "gate" && verdict.scopeReason) && shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
       return void 0;
     }
+    if (claudePromptsBeforeAnEdit(input.permission_mode) && editAsksAtTheAgentsPrompt(gateInput, verdict)) return handleTerminalOnly();
     switch (verdict.kind) {
       case "allow":
         return allow();
@@ -574,9 +617,16 @@ var handlePermissionRequest = async (input, canonical) => {
     const modeState = await fetchModeState(apiKey, input.session_id);
     const policy = await getPolicy(apiKey, modeState.policyVersion, ACTIVE_AGENT.type, true, input.session_id);
     const verdict = resolveGate(claudeGateInput(modeState, policy, input, canonical));
-    if (verdict.kind === "kill") return permReqHalted(verdict.reason);
-    if (verdict.kind === "deny") return permReqDeny(verdict.reason);
+    if (verdict.kind === "kill") {
+      await reportMachineDecision(input, verdict);
+      return permReqHalted(verdict.reason);
+    }
+    if (verdict.kind === "deny") {
+      await reportMachineDecision(input, verdict);
+      return permReqDeny(verdict.reason);
+    }
     if (canonical === null) return permReqDeny(unreadableReason);
+    if (agentQuestionStrategy(ACTIVE_SOURCE, "PermissionRequest", input.tool_name) === AGENT_QUESTION_STRATEGY.native) return void 0;
     if (verdict.kind === "gate" && verdict.scopeReason && (canonical?.toolInputs.length ?? 0) > 1) return permReqDeny(batchScopeReason);
     if (!(verdict.kind === "gate" && verdict.scopeReason) && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode)) return void 0;
     switch (verdict.kind) {

package/dist/{chunk-OMP3KDDU.js → chunk-5F5QQMCA.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-7IEB2GV4.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-SGZE2JBF.js → chunk-5IBVIMWT.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-KHGIM2BN.js";
+} from "./chunk-A7XIL2WD.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-UCGQEAKZ.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-7IEB2GV4.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-FGNABUPN.js → chunk-5MSBI6NP.js}

@@ -7,7 +7,7 @@ import {
 import {
   COMPATIBLE_AGENT_TYPES,
   isValidApiKey
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-7IEB2GV4.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", ...COMPATIBLE_AGENT_TYPES, "custom"];

package/dist/{chunk-5UWDYOZX.js → chunk-7IEB2GV4.js}

@@ -216,7 +216,7 @@ var AGENTS = {
     connectVia: "Native hooks",
     setupCommand: "npx @pushary/agent-hooks setup",
     enforcementDetail: "exec, write and edit through native PreToolUse hooks, answered in Devin's own approve/block schema.",
-    capabilityNote: "Devin CLI answers PreToolUse with `{decision}` rather than a permission decision. That schema has no third value, so where another agent would be asked, Pushary stays silent and Devin's own prompt decides; and it cannot carry an updated tool input, so Devin's own question and plan dialogs are left alone rather than answered from the phone without the answer reaching it. It also fires no Notification event."
+    capabilityNote: "Devin CLI answers PreToolUse with `{decision}` rather than a permission decision. Pushary blocks an unanswered approval because this adapter cannot request a native prompt reliably. Question and plan dialogs remain with Devin; this adapter does not render their answers. It also fires no Notification event."
   },
   windsurf: {
     ...defaults,
@@ -292,7 +292,8 @@ var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path)
 var renderPreToolUseVerdict = (profile, verdict) => {
   if (profile.wire === "permission_decision") return verdict;
   const { permissionDecision, permissionDecisionReason, updatedInput } = verdict.hookSpecificOutput;
-  if (permissionDecision === "ask" || updatedInput) return void 0;
+  if (permissionDecision === "ask") return { decision: "block", reason: permissionDecisionReason ?? "Pushary requires an explicit approval before this tool can run." };
+  if (updatedInput) return void 0;
   const stop = verdict.continue === false ? { continue: false, ...verdict.stopReason ? { stopReason: verdict.stopReason } : {} } : {};
   return {
     decision: permissionDecision === "allow" ? "approve" : "block",
@@ -333,7 +334,9 @@ var QWEN_CODE = {
     replace: "Edit",
     read_file: "Read",
     WriteFile: "Write",
-    ReadFile: "Read"
+    ReadFile: "Read",
+    ask_user_question: "AskUserQuestion",
+    exit_plan_mode: "ExitPlanMode"
   },
   extraMatchers: ["mcp__.*"],
   pathInputKeys: ["absolute_path"],
@@ -415,12 +418,14 @@ var DEVIN = {
     exec: "Bash",
     write: "Write",
     edit: "Edit",
+    apply_patch: "Edit",
+    notebook_edit: "NotebookEdit",
     read: "Read",
     webfetch: "WebFetch",
     web_search: "WebSearch",
     run_subagent: "Task"
   },
-  extraMatchers: ["mcp__.*"],
+  extraMatchers: ["mcp__.*", "mcp_call_tool", "write_to_process"],
   pathInputKeys: [],
   shellCommandKeys: [],
   shellContextKeys: [],
@@ -602,6 +607,8 @@ var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + ho
 var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
 var OPENCODE_APPROVAL_EVENT = "permission.ask";
 var CURSOR_GATE_EVENTS = ["beforeShellExecution", "beforeMCPExecution", "preToolUse"];
+var SUPPORT_EMAIL = "business@pushary.com";
+var SUPPORT_DISCORD = "https://discord.gg/9v3VvUByrr";
 var HOOK_LOCATOR_BINARY = "pushary-bridge";
 var HOOK_BATCH_MAX_BYTES = 4 * 1024 * 1024;
 var REPO_KEY_MAX_LENGTH = 200;
@@ -1344,6 +1351,10 @@ var ANSWER_SOURCES = [
 ];
 var isAnswerSource = (value) => typeof value === "string" && ANSWER_SOURCES.includes(value);
 var SETTLED_OUTCOMES = ["approve", "deny"];
+var SETTLED_OUTCOME = {
+  approve: "approve",
+  deny: "deny"
+};
 var isSettledOutcome = (value) => typeof value === "string" && SETTLED_OUTCOMES.includes(value);
 var classifyDecisionRisk = (toolName, toolTarget) => {
   const parts = [toolName, toolTarget ?? ""];
@@ -1621,6 +1632,10 @@ var resolvePolicyAcross = (config, toolName, modeOverride, toolInputs, cwd, repo
 };
 var isModeStateDegraded = (state) => state?.degraded === true;
 var KILL_REASON = "Stopped by user, this agent was halted from Pushary";
+var GATE_ALLOW_SOURCE = {
+  allowlist: "allowlist",
+  policy: "policy"
+};
 var PUSHARY_TOOL_PREFIX = "mcp__pushary__";
 var isPusharyOwnTool = (toolName) => toolName.startsWith(PUSHARY_TOOL_PREFIX);
 var strictestScopeVerdict = (scope, paths) => {
@@ -1649,7 +1664,15 @@ var shouldDeferToNativeMode = (permissionMode, toolName, options = {}) => {
   if (permissionMode === "bypassPermissions") return options.deferBypass === true;
   return false;
 };
-var ASKED_IN_EVERY_MODE_TOOLS = ["AskUserQuestion", "ExitPlanMode"];
+var AGENT_QUESTION_TOOL = "AskUserQuestion";
+var AGENT_QUESTION_STRATEGY = { native: "native_dialog", updatedInput: "updated_input", none: "not_a_question" };
+var UPDATED_INPUT_QUESTION_SOURCES = /* @__PURE__ */ new Set(["claude", "qoder", "codebuddy", "droid"]);
+function agentQuestionStrategy(source, event, toolName) {
+  if (toolName !== AGENT_QUESTION_TOOL) return AGENT_QUESTION_STRATEGY.none;
+  if (source !== null && event === "PreToolUse" && UPDATED_INPUT_QUESTION_SOURCES.has(source)) return AGENT_QUESTION_STRATEGY.updatedInput;
+  return AGENT_QUESTION_STRATEGY.native;
+}
+var ASKED_IN_EVERY_MODE_TOOLS = [AGENT_QUESTION_TOOL, "ExitPlanMode"];
 var ASKED_IN_EVERY_MODE = new Set(ASKED_IN_EVERY_MODE_TOOLS);
 var isAskedInEveryMode = (toolName) => ASKED_IN_EVERY_MODE.has(toolName);
 var NATIVE_BLOCK_EVENTS = /* @__PURE__ */ new Set(["PermissionDenied"]);
@@ -1728,6 +1751,8 @@ var resolveGate = (input) => {
     scopePath: scopeReason && "path" in scopeVerdict ? widenablePath(scopeVerdict.path) : void 0
   };
 };
+var editAsksAtTheAgentsPrompt = (input, verdict) => verdict.kind === "gate" && !verdict.scopeReason && (input.modeState.mode ?? input.config.modeOverride ?? null) === null && verdict.policy.origin === "builtin" && verdict.policy.mode === "push_first" && ACCEPT_EDITS_DEFER_TOOLS.has(input.toolName);
+var claudePromptsBeforeAnEdit = (permissionMode) => permissionMode === "default";
 var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
 var modeStateFromResponse = (data) => {
   const mode = data.override?.mode;
@@ -1747,6 +1772,42 @@ var modeStateFromResponse = (data) => {
 var GATE_WIRE = 1;
 var GATE_MAX_TOOL_INPUTS = 32;
 var GATE_BLOCK_REASON_MAX_LENGTH = 200;
+var wireVerdictFor = (verdict, deadlineSeconds) => {
+  switch (verdict.kind) {
+    case "kill":
+      return { kind: "kill", reason: verdict.reason };
+    case "allow":
+      return { kind: "allow", source: verdict.source, policy: verdict.policy };
+    case "deny":
+      return { kind: "deny", reason: verdict.reason, policy: verdict.policy };
+    case "defer":
+      return { kind: "no_opinion", reason: verdict.reason === "own_tool" ? "not_gated" : "degraded" };
+    case "gate":
+      return {
+        kind: "ask",
+        policy: verdict.policy,
+        deadlineSeconds,
+        ...verdict.scopeReason ? { scopeReason: verdict.scopeReason } : {},
+        ...verdict.scopePath ? { scopePath: verdict.scopePath } : {}
+      };
+  }
+};
+var machineDecisionFor = (verdict) => {
+  switch (verdict.kind) {
+    case "kill":
+      return { origin: DECISION_ORIGIN.killSwitch, outcome: SETTLED_OUTCOME.deny };
+    case "allow":
+      return {
+        origin: verdict.source === GATE_ALLOW_SOURCE.allowlist ? DECISION_ORIGIN.safeReadonly : DECISION_ORIGIN.autopilot,
+        outcome: SETTLED_OUTCOME.approve
+      };
+    case "deny":
+      return { origin: DECISION_ORIGIN.autopilot, outcome: SETTLED_OUTCOME.deny };
+    case "ask":
+    case "no_opinion":
+      return null;
+  }
+};
 var claudePermissionDeniedOutput = (decision) => ({
   hookSpecificOutput: {
     hookEventName: "PermissionDenied",
@@ -1807,7 +1868,6 @@ var claudePermissionRequestOutput = (decision, reason, updatedInput) => ({
     decision: decision === "allow" ? { behavior: "allow", ...updatedInput ? { updatedInput } : {} } : { behavior: "deny", ...reason ? { message: reason } : {} }
   }
 });
-var COMPATIBLE_GATE_EVENT = "PreToolUse";
 var gateOutputFor = (source, event, decision, reason) => {
   let output;
   if (source === "claude" || source === "vscode") {
@@ -1847,8 +1907,12 @@ var gateOutputFor = (source, event, decision, reason) => {
     };
   } else {
     const profile = hookCompatibleProfileBySource(source);
-    if (profile && event === COMPATIBLE_GATE_EVENT) {
-      output = renderPreToolUseVerdict(profile, claudePreToolUseOutput(decision, reason));
+    if (profile?.events.includes(event)) {
+      if (event === "PreToolUse") {
+        output = renderPreToolUseVerdict(profile, claudePreToolUseOutput(decision, reason));
+      } else if (event === "PermissionRequest" && decision !== "ask") {
+        output = claudePermissionRequestOutput(decision, reason);
+      }
     }
   }
   return output;
@@ -2037,6 +2101,8 @@ export {
   effectiveWaitSeconds,
   OPENCODE_APPROVAL_EVENT,
   CURSOR_GATE_EVENTS,
+  SUPPORT_EMAIL,
+  SUPPORT_DISCORD,
   HOOK_LOCATOR_BINARY,
   normalizeRepoRemote,
   localRepoKey,
@@ -2055,6 +2121,8 @@ export {
   KILL_REASON,
   isPusharyOwnTool,
   shouldDeferToNativeMode,
+  AGENT_QUESTION_STRATEGY,
+  agentQuestionStrategy,
   CODEX_RESCUE_TOOL_NAME,
   isBlockedActionRequest,
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
@@ -2063,10 +2131,14 @@ export {
   isPermissionRequestOwnedByPreToolUse,
   CLAUDE_PRETOOLUSE_MATCHER,
   resolveGate,
+  editAsksAtTheAgentsPrompt,
+  claudePromptsBeforeAnEdit,
   modeStateFromResponse,
   GATE_WIRE,
   GATE_MAX_TOOL_INPUTS,
   GATE_BLOCK_REASON_MAX_LENGTH,
+  wireVerdictFor,
+  machineDecisionFor,
   claudePermissionDeniedOutput,
   codexStopRescueOutput,
   stoppedOutput,

package/dist/{chunk-EAGMQMRM.js → chunk-7PQZYCEP.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-UCGQEAKZ.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-KHGIM2BN.js → chunk-A7XIL2WD.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-XP2KRTZD.js";
+} from "./chunk-KZIXHLPQ.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-UCGQEAKZ.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-7IEB2GV4.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-YXWM4TNX.js → chunk-BYAXXBNO.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-5SALHATY.js";
+} from "./chunk-NYHNLMQO.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-TW7KA27C.js → chunk-D4TNSUDY.js}

@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-7IEB2GV4.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-P232YODQ.js → chunk-ESLLVHDY.js}

@@ -6,16 +6,16 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-REIZ5GXG.js";
+} from "./chunk-UTYTPDWN.js";
 import {
   ensureDaemonRunning
-} from "./chunk-6HH4IH4K.js";
+} from "./chunk-RGZY77CD.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-CDSL3LLO.js";
+} from "./chunk-S3EUZZJB.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -23,14 +23,14 @@ import {
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-YXWM4TNX.js";
+} from "./chunk-BYAXXBNO.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-UCGQEAKZ.js";
 import {
   readTranscriptPreference
-} from "./chunk-5SALHATY.js";
+} from "./chunk-NYHNLMQO.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-LZQVAEWP.js → chunk-FAH3D74E.js}

@@ -59,7 +59,7 @@ var COMMAND_LIST = [
   },
   { name: "doctor", module: "pushary-doctor", summary: "Verify your Pushary installation is working" },
   { name: "disconnect", module: "pushary-disconnect", summary: "Turn off one agent (claude|codex|gemini|cursor)" },
-  { name: "clean", module: "pushary-clean", summary: "Remove all Pushary configuration (--yes for non-interactive)" },
+  { name: "clean", module: "pushary-clean", summary: "Remove Pushary from this machine (--everything: the Mac app's setup too, --dry-run: preview)" },
   { name: "mode", module: "pushary-mode", summary: "Choose where approval requests appear" },
   { name: "wait", module: "pushary-wait", summary: 'Show or set the "wait for your phone" ladder (pushary wait 45)' },
   { name: "stats", module: "pushary-stats", summary: "Show the approval moments your agents hit while not connected" },
@@ -98,6 +98,7 @@ var COMMAND_OPTIONS = {
   ],
   clean: [
     ["--dry-run", "List everything it would remove and change nothing"],
+    ["--everything", "Also remove what the Mac app set up: quits it, then its keychain items, local state and editor extension"],
     ["--yes", "Remove everything without asking"]
   ],
   transcripts: [

package/dist/{chunk-XOUQUZ43.js → chunk-GIXLZFEY.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-UCGQEAKZ.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-PHXU4NOP.js → chunk-GLPWCQ6V.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-UCGQEAKZ.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-7IEB2GV4.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-NDSOOJDX.js → chunk-GS5EI2YL.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-TW7KA27C.js";
+} from "./chunk-D4TNSUDY.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-R5CU7ED6.js → chunk-H25UB3CG.js}

@@ -3,7 +3,7 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-CDSL3LLO.js";
+} from "./chunk-S3EUZZJB.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords

package/dist/{chunk-LWT34GSY.js → chunk-HGN6VZTY.js}

@@ -3,28 +3,28 @@ import {
   addPusharyToolPermissions,
   isPusharyHook,
   removeClaudeMcpServers
-} from "./chunk-SGZE2JBF.js";
+} from "./chunk-5IBVIMWT.js";
 import {
   CLAUDE_HOOK_EVENTS,
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-KHGIM2BN.js";
+} from "./chunk-A7XIL2WD.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-WOBHHXW5.js";
+} from "./chunk-IF46POXX.js";
 import {
   guardBinary,
   holdBudgetOf,
   registerHookEntry
-} from "./chunk-34NNTYK6.js";
+} from "./chunk-UCGQEAKZ.js";
 import {
   PHONE_ANSWERED_TOOLS,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-5UWDYOZX.js";
+} from "./chunk-7IEB2GV4.js";
 
 // src/compatible-config.ts
 import { homedir } from "os";
@@ -50,14 +50,14 @@ var namedSource = (argv) => {
   const inline = argv.find((argument) => argument.startsWith(`${SOURCE_FLAG}=`));
   if (inline) return inline.slice(SOURCE_FLAG.length + 1);
   const index = argv.indexOf(SOURCE_FLAG);
-  return index === -1 ? void 0 : argv[index + 1];
+  return index === -1 ? void 0 : argv[index + 1] ?? "";
 };
 var activeHookSource = (argv) => {
   const named = namedAgent(argv);
   if (named !== void 0) return hookCompatibleProfile(named)?.source ?? null;
   const source = namedSource(argv);
   if (source === void 0) return "claude";
-  return hookCompatibleProfileBySource(source)?.source ?? "claude";
+  return source === "claude" ? "claude" : hookCompatibleProfileBySource(source)?.source ?? null;
 };
 var PATCH_INPUT_KEYS = ["command", "patch", "input"];
 var patchedFiles = (toolInput) => [...new Set(PATCH_INPUT_KEYS.flatMap((key) => parseApplyPatchFiles(toolInput[key])))];