@pushary/agent-hooks 1.4.1 → 1.4.2

package/dist/{chunk-KEMEBTCJ.js → chunk-4ZDKSDVW.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-R3AMKNIW.js";
+} from "./chunk-DY4ILT6L.js";
 import {
   isBridgeLocator
-} from "./chunk-LYXX5NSB.js";
+} from "./chunk-ZVY25BMK.js";
 import {
   pusharyHookExecutable
-} from "./chunk-TF4IOINR.js";
+} from "./chunk-WPVHRUDT.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-JOVWYVSR.js";
+} from "./chunk-MW6ZPC6R.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-43JKGLZZ.js → chunk-55KW4FLG.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-R3AMKNIW.js";
+} from "./chunk-DY4ILT6L.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-2GMI6JH6.js → chunk-ACYIZ3KH.js}

@@ -1,18 +1,18 @@
 import {
   detectClaudeVersion
-} from "./chunk-LUT2EZLG.js";
+} from "./chunk-PC6DU5C4.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-WIOXWUUH.js";
+} from "./chunk-II7PUMPB.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
   codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-TF4IOINR.js";
+} from "./chunk-WPVHRUDT.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -24,7 +24,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-ED5TA2FJ.js";
+} from "./chunk-LPYCPFBZ.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -44,7 +44,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-3BPB2HYZ.js → chunk-BZ4GDOJX.js}

@@ -4,17 +4,17 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "./chunk-3T52B2OF.js";
+} from "./chunk-NHTAHAIS.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "./chunk-TI3ZWXZG.js";
+} from "./chunk-FU2DFEAZ.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-R3AMKNIW.js → chunk-DY4ILT6L.js}

@@ -7,7 +7,7 @@ import {
 import {
   COMPATIBLE_AGENT_TYPES,
   isValidApiKey
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", ...COMPATIBLE_AGENT_TYPES, "custom"];

package/dist/{chunk-VYUDGQM7.js → chunk-F4UWL4NY.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-TI3ZWXZG.js → chunk-FU2DFEAZ.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-K6I5M2ME.js";
+} from "./chunk-UM5J3J4V.js";
 import {
   backupFile,
   readJsonSafe,

package/dist/{chunk-LNGYW6G4.js → chunk-G653QPTR.js}

@@ -1,7 +1,7 @@
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-WEO5JCB4.js";
+} from "./chunk-YXP3WPAI.js";
 import {
   cancelQuestion,
   isPolicyConfig,
@@ -10,13 +10,13 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-3T52B2OF.js";
+} from "./chunk-NHTAHAIS.js";
 import {
   withRetry
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-K6I5M2ME.js";
+} from "./chunk-UM5J3J4V.js";
 import {
   getApiKey,
   getBaseUrl
@@ -44,7 +44,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   toToolLookup
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -1368,20 +1368,23 @@ var phoneDrivenEnv = (base) => ({
 import { join as join5 } from "path";
 import { tmpdir as tmpdir4 } from "os";
 import { createHash as createHash4 } from "crypto";
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, statSync as statSync4, writeFileSync as writeFileSync4, rmSync as rmSync2 } from "fs";
 var THROTTLE_DIR = join5(tmpdir4(), "pushary-throttle");
 var markerPath = (key) => join5(THROTTLE_DIR, createHash4("sha256").update(key).digest("hex").slice(0, 16));
-var throttlePass = (key, windowMs) => {
+var claimThrottle = (key, windowMs) => {
   try {
     const path = markerPath(key);
-    if (existsSync4(path) && Date.now() - statSync4(path).mtimeMs < windowMs) return false;
+    if (existsSync4(path) && Date.now() - statSync4(path).mtimeMs < windowMs) return "throttled";
     mkdirSync3(THROTTLE_DIR, { recursive: true });
     writeFileSync4(path, "", "utf-8");
-    return true;
+    return "passed";
   } catch {
-    return false;
+    return "unavailable";
   }
 };
+var releaseThrottle = (key) => {
+  rmSync2(markerPath(key), { force: true });
+};
 
 // src/events.ts
 import { basename as basename3, join as join6 } from "path";
@@ -1688,7 +1691,7 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
     }
     const isMirrorOnly = NON_GATED_MIRROR_TOOLS.has(input.tool_name);
     const decisionSource = isMirrorOnly ? void 0 : deriveDecisionSource(lookup.tool, lookup.input, liveMode, agent.type, input.cwd, input.session_id);
-    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, agent.type, input.cwd, input.session_id) : void 0;
+    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && claimThrottle(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) === "passed" ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, agent.type, input.cwd, input.session_id) : void 0;
     const toolReport = reportEvent({
       event: isError ? "tool_error" : "tool_complete",
       occurredAt,
@@ -1704,7 +1707,7 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
       usage: deriveUsage(input.transcript_path, input.session_id)
     }, { maxAttempts: 1, budgetMs: Math.min(DRAINING_REPORT_BUDGET_MS, Math.max(0, deadline - Date.now())), signal });
     const extraReports = [];
-    if (throttlePass(`hookactive:${sessionKey}`, HOOK_ACTIVE_WINDOW_MS)) {
+    if (claimThrottle(`hookactive:${sessionKey}`, HOOK_ACTIVE_WINDOW_MS) === "passed") {
       extraReports.push(
         reportEvent(
           {
@@ -1898,7 +1901,7 @@ var handleNotification = async (input, agent = CLAUDE_CODE_AGENT) => {
     }, { maxAttempts: 1, timeoutMs: 2500, signal }).catch(() => {
     });
     if (!teammateIdle && NOTIFICATION_PUSH_TYPES.has(notifType)) {
-      if (!throttlePass(`notify:${sessionKey}:${notifType}`, NOTIFICATION_THROTTLE_MS)) return;
+      if (claimThrottle(`notify:${sessionKey}:${notifType}`, NOTIFICATION_THROTTLE_MS) !== "passed") return;
       let apiKey;
       try {
         apiKey = getApiKey();
@@ -1990,7 +1993,8 @@ export {
   markPendingCommandFailed,
   removePendingCommand,
   repoKeyFor,
-  throttlePass,
+  claimThrottle,
+  releaseThrottle,
   readLastUserPrompt,
   CODEX_AGENT,
   codexAllow,

package/dist/{chunk-CRNAXFQ6.js → chunk-GZ7E6VOB.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-WIOXWUUH.js → chunk-II7PUMPB.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-ED5TA2FJ.js";
+} from "./chunk-LPYCPFBZ.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-4FN6VV56.js → chunk-JVTOML54.js}

@@ -1,9 +1,9 @@
 import {
   registerTranscript
-} from "./chunk-TNS3YLFE.js";
+} from "./chunk-UJBZIKSY.js";
 import {
   degradedLine
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-SWFF5U2N.js → chunk-LEAAERSQ.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-ED5TA2FJ.js → chunk-LPYCPFBZ.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-WEO5JCB4.js";
+} from "./chunk-YXP3WPAI.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-HK3IXIQJ.js → chunk-M5CTUFF3.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-3UA6FPRC.js → chunk-MUVTZNJW.js}

@@ -1,12 +1,12 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-VYUDGQM7.js";
+} from "./chunk-F4UWL4NY.js";
 import {
   codexHomeFrom
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-JOVWYVSR.js → chunk-MW6ZPC6R.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-3T52B2OF.js → chunk-NHTAHAIS.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-D7ERHWYB.js → chunk-NOWZUGZW.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-QBS6LGEK.js";
+} from "./chunk-NY6XQ6CA.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-QBS6LGEK.js → chunk-NY6XQ6CA.js}

@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-LUT2EZLG.js → chunk-PC6DU5C4.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-ED5TA2FJ.js";
+} from "./chunk-LPYCPFBZ.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-FVKFDTN6.js → chunk-SOUZBGYJ.js}

@@ -458,6 +458,9 @@ var degradedPayload = (subsystem, report) => ({
 });
 var degradedLine = (subsystem, report) => `${DEGRADED_PREFIX} ${JSON.stringify(degradedPayload(subsystem, report))}`;
 
+// ../contracts/src/setup-wire.ts
+var PAIR_TTL_SECONDS = 900;
+
 // ../contracts/src/index.ts
 var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
@@ -2086,6 +2089,7 @@ export {
   hookWritePath,
   isHookActivationReport,
   hookActivationResult,
+  PAIR_TTL_SECONDS,
   normalizeKeyScope,
   parseAgentQuestion,
   parseAgentQuestions,

package/dist/{chunk-ALFT7H5B.js → chunk-SUWRZYQG.js}

@@ -1,17 +1,67 @@
 import {
-  canonicalGateInputs
-} from "./chunk-LNGYW6G4.js";
+  AUTO_DECISION_WINDOW_MS,
+  DEFAULT_SESSION,
+  canonicalGateInputs,
+  claimThrottle,
+  deriveToolTarget,
+  permissionDeniedAction,
+  releaseThrottle,
+  reportEvent
+} from "./chunk-G653QPTR.js";
 import {
   canonicalJson
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
   blockedActionIdentity,
-  shouldDeferToNativeMode
-} from "./chunk-FVKFDTN6.js";
+  machineDecisionFor,
+  shouldDeferToNativeMode,
+  wireVerdictFor
+} from "./chunk-SOUZBGYJ.js";
+
+// src/machine-decision-audit.ts
+import { basename } from "path";
+var reportMachineDenial = async (input, verdict, agent) => {
+  const decision = machineDecisionFor(wireVerdictFor(verdict, 0));
+  if (!decision) return;
+  const sessionKey = input.session_id || DEFAULT_SESSION;
+  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+  const throttleKey = `machinedecision:${agent.type}:${sessionKey}:${input.tool_name}:${decision.origin}:${toolTarget ?? ""}`;
+  const throttle = claimThrottle(throttleKey, AUTO_DECISION_WINDOW_MS);
+  if (throttle === "throttled") return;
+  if (throttle === "unavailable") {
+    console.error("[Pushary] Could not access the audit throttle; reporting this denial without deduplication.");
+  }
+  try {
+    const response = await reportEvent({
+      event: "permission_denied",
+      occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
+      toolUseId: input.tool_use_id,
+      agentType: agent.type,
+      agentName: `${agent.label} - ${basename(input.cwd ?? process.cwd())}`,
+      action: permissionDeniedAction(input.tool_name),
+      sessionId: input.session_id,
+      decisionSource: "policy_auto",
+      decisionOrigin: decision.origin,
+      decisionOutcome: decision.outcome,
+      toolName: input.tool_name,
+      toolTarget
+    }, { maxAttempts: 1, timeoutMs: 800, requireOk: true, skipDrain: true });
+    if (response?.ok !== true) throw new Error("Audit delivery was not acknowledged");
+  } catch {
+    console.error("[Pushary] Could not record the machine denial. The action remains blocked; its audit delivery will be retried on the next matching denial.");
+    if (throttle === "passed") {
+      try {
+        releaseThrottle(throttleKey);
+      } catch {
+        console.error("[Pushary] Could not reset the failed audit throttle.");
+      }
+    }
+  }
+};
 
 // src/native-defer.ts
 var nativeDeferOptions = () => {
@@ -190,6 +240,7 @@ var forgetBlockedActionHint = (fingerprint) => {
 };
 
 export {
+  reportMachineDenial,
   defersToNativeMode,
   userScope,
   codexCallKey,

package/dist/{chunk-S3EP4B35.js → chunk-T5SZ4PML.js}

@@ -15,10 +15,11 @@ import {
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-K6I5M2ME.js";
+} from "./chunk-UM5J3J4V.js";
 import {
+  PAIR_TTL_SECONDS,
   isAnswerSource
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {
@@ -747,8 +748,13 @@ var printConnectInstructions = async (apiKey) => {
   return phoneFailure("no_device");
 };
 var PAIR_POLL_INTERVAL_MS = 2e3;
-var PAIR_TIMEOUT_MS = 9e5;
+var PAIR_STOP_BEFORE_EXPIRY_MS = 1e4;
+var PAIR_TIMEOUT_MS = PAIR_TTL_SECONDS * 1e3 - PAIR_STOP_BEFORE_EXPIRY_MS;
 var PAIR_HINT_AFTER_MS = 45e3;
+var PAIR_BROWSER_FALLBACK_AFTER_MS = 6e4;
+var BROWSER_CONNECT_COMMAND = "npx @pushary/agent-hooks setup --connect browser";
+var PAIR_BROWSER_FALLBACK_LINE = `Still waiting? Sign in with a browser instead: Ctrl-C, then ${BROWSER_CONNECT_COMMAND}`;
+var SYSTEM_PAIR_CLOCK = { now: () => Date.now(), sleep };
 var startPairing = async (cliPublicKey) => {
   try {
     const res = await fetch(`${apiBase()}/api/mobile/pair/start`, {
@@ -837,7 +843,9 @@ var buildPairLinks = (pairId, publicKeyB64, baseUrl = apiBase(), code = null) =>
   };
 };
 var connectViaAppPairing = async (options = {}) => {
+  const clock = options.clock ?? SYSTEM_PAIR_CLOCK;
   const keypair = generateKeypair();
+  const requestedAt = clock.now();
   const started = await startPairing(keypair.publicKeyB64);
   if (!started) {
     console.log(`  ${yellow("!")} Couldn't start pairing. Check your connection and try again.`);
@@ -854,12 +862,13 @@ var connectViaAppPairing = async (options = {}) => {
   console.log(`  ${dim("Confirm the app shows fingerprint")} ${cyan(publicKeyFingerprint(keypair.publicKeyB64))}`);
   console.log(`  ${dim("Already have the app and it opened a browser? Use")} ${cyan(deepLink)}`);
   console.log();
-  const startedAt = Date.now();
-  const deadline = startedAt + PAIR_TIMEOUT_MS;
+  const startedAt = clock.now();
+  const deadline = requestedAt + PAIR_TIMEOUT_MS;
   let hintShown = false;
+  let browserFallbackShown = false;
   const stop = startSpinner(() => {
-    const left = Math.max(0, Math.ceil((deadline - Date.now()) / 6e4));
-    if (Date.now() - startedAt < PAIR_HINT_AFTER_MS) {
+    const left = Math.max(0, Math.ceil((deadline - clock.now()) / 6e4));
+    if (clock.now() - startedAt < PAIR_HINT_AFTER_MS) {
       return "Waiting for the app to authorize";
     }
     if (!hintShown) {
@@ -880,8 +889,12 @@ var connectViaAppPairing = async (options = {}) => {
   process.once("SIGINT", onInterrupt);
   let consecutiveFailures = 0;
   try {
-    while (Date.now() < deadline) {
+    while (clock.now() < deadline) {
       if (cancelled) return pairFailed("cancelled");
+      if (!browserFallbackShown && clock.now() - startedAt >= PAIR_BROWSER_FALLBACK_AFTER_MS) {
+        browserFallbackShown = true;
+        writeStatusLine(dim(PAIR_BROWSER_FALLBACK_LINE));
+      }
       const claim = await claimPairing(pairId);
       if (claim === null) {
         consecutiveFailures += 1;
@@ -890,7 +903,7 @@ var connectViaAppPairing = async (options = {}) => {
           await cancelPairing(pairId);
           return pairFailed("unreachable");
         }
-        await sleep(PAIR_POLL_INTERVAL_MS);
+        await clock.sleep(PAIR_POLL_INTERVAL_MS);
         continue;
       }
       consecutiveFailures = 0;
@@ -915,7 +928,7 @@ var connectViaAppPairing = async (options = {}) => {
         stop(yellow("!"), describePairFailure(claim.reason));
         return pairFailed("rejected");
       }
-      await sleep(PAIR_POLL_INTERVAL_MS);
+      await clock.sleep(PAIR_POLL_INTERVAL_MS);
     }
     stop(yellow("!"), "Timed out waiting for the app");
     await cancelPairing(pairId);
@@ -940,6 +953,7 @@ export {
   confirmAppConnection,
   connectExistingApp,
   printConnectInstructions,
+  BROWSER_CONNECT_COMMAND,
   pairingEscapeApplies,
   connectViaAppPairing
 };

package/dist/{chunk-SAF6NNXY.js → chunk-TRLFZKVG.js}

@@ -2,7 +2,7 @@ import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/npm.ts
 import { execFileSync, execSync } from "child_process";

package/dist/{chunk-KI36MAT6.js → chunk-TYEO6T5J.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-TNS3YLFE.js → chunk-UJBZIKSY.js}

@@ -6,16 +6,16 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-KEMEBTCJ.js";
+} from "./chunk-4ZDKSDVW.js";
 import {
   ensureDaemonRunning
-} from "./chunk-3BPB2HYZ.js";
+} from "./chunk-BZ4GDOJX.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-CRNAXFQ6.js";
+} from "./chunk-GZ7E6VOB.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -23,14 +23,14 @@ import {
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-MN3XOVRK.js";
+} from "./chunk-4BROEAKH.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-SAF6NNXY.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   readTranscriptPreference
-} from "./chunk-TI3ZWXZG.js";
+} from "./chunk-FU2DFEAZ.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-K6I5M2ME.js → chunk-UM5J3J4V.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-FVKFDTN6.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";