@pushary/agent-hooks 1.4.2 → 1.5.1

package/dist/{chunk-SOUZBGYJ.js → chunk-T4QY64OR.js}

@@ -22,6 +22,7 @@ var COWORK_STANDING_INSTRUCTIONS = `Pushary is connected as a custom connector.
 - If Pushary tools are missing or disabled, report that once and continue within my authorization. Do not claim a notification or approval was delivered.`;
 
 // ../contracts/src/agent-manifest.ts
+var AGENT_HOOKS_SETUP_COMMAND = "npx @pushary/agent-hooks@latest setup";
 var defaults = {
   hasStoredIdentity: true,
   hookSource: null,
@@ -53,7 +54,7 @@ var AGENTS = {
     managedProvider: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits, subject to Claude Code permission mode and explicit policy."
   },
   claude_chat: {
@@ -80,7 +81,7 @@ var AGENTS = {
     managedProvider: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell and apply_patch edits through native permission hooks; requires a compatible Codex runtime."
   },
   chatgpt: {
@@ -100,7 +101,7 @@ var AGENTS = {
     managedProvider: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native BeforeTool hooks."
   },
   hermes: {
@@ -109,7 +110,7 @@ var AGENTS = {
     policyAgent: "hermes",
     enforcement: "enforced",
     connectVia: "Native Python plugin + approval transport",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Hermes dangerous-command approvals when the Pushary transport is selected; optional PUSHARY_GATE_TOOLS gates named tools.",
     capabilityNote: "Uses the Python plugin, not a macOS bridge HookSource. CLI disconnect and managed-provider controls are not implemented for Hermes."
   },
@@ -122,7 +123,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Editor plugin hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "With installed hooks: shell, MCP execution and Write/Delete/Edit tool calls. Plain MCP remains cooperative."
   },
   vscode: {
@@ -133,7 +134,7 @@ var AGENTS = {
     policyAgent: "vscode",
     enforcement: "enforced",
     connectVia: "Agent plugin hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "PreToolUse approval hooks from the installed agent plugin; the host decides which events it exposes.",
     capabilityNote: "Has both a bridge HookSource and a per-agent policy profile. CLI disconnect and managed-provider controls are not implemented for VS Code."
   },
@@ -147,7 +148,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Generated plugin + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell, writes, edits and web fetches when OpenCode itself asks for permission."
   },
   qwen_code: {
@@ -160,7 +161,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native PreToolUse hooks, matched on Qwen's own tool names and their Claude-shaped aliases."
   },
   codebuddy: {
@@ -173,7 +174,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native PreToolUse hooks, plus PermissionRequest. CodeBuddy implements the Claude Code hook specification."
   },
   qoder: {
@@ -186,7 +187,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native PreToolUse hooks, plus PermissionRequest, over Qoder's superset of the Claude Code event list.",
     capabilityNote: "Qoder documents no user-level instructions file, so the proactive-ask block is not installed. Hooks and MCP are unaffected. Like every agent in this family, the CLI wires it; the macOS app does not yet."
   },
@@ -200,7 +201,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Execute, Create, Edit and ApplyPatch through native PreToolUse hooks in ~/.factory/hooks.json.",
     capabilityNote: "Droid registers MCP servers through `droid mcp add` rather than a documented remote-server config shape, so setup writes hooks only. Add Pushary's MCP server yourself to let Droid send notifications and ask questions."
   },
@@ -214,14 +215,14 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "exec, write and edit through native PreToolUse hooks, answered in Devin's own approve/block schema.",
     capabilityNote: "Devin CLI answers PreToolUse with `{decision}` rather than a permission decision. Pushary blocks an unanswered approval because this adapter cannot request a native prompt reliably. Question and plan dialogs remain with Devin; this adapter does not render their answers. It also fires no Notification event."
   },
   windsurf: {
     ...defaults,
     label: "Windsurf",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     setupChoice: "Other"
   },
   unknown: {
@@ -238,7 +239,7 @@ var AGENTS = {
     ...defaults,
     hasStoredIdentity: false,
     label: "Any MCP client",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     setupChoice: "Other"
   },
   http: {

package/dist/{chunk-DY4ILT6L.js → chunk-TFKBFQCE.js}

@@ -7,7 +7,7 @@ import {
 import {
   COMPATIBLE_AGENT_TYPES,
   isValidApiKey
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", ...COMPATIBLE_AGENT_TYPES, "custom"];

package/dist/{chunk-GZ7E6VOB.js → chunk-TIWURSLS.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-F4UWL4NY.js → chunk-TUXFIVOH.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-UJBZIKSY.js → chunk-TZGCUNOX.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-4ZDKSDVW.js";
+} from "./chunk-WNJSGZY7.js";
 import {
   ensureDaemonRunning
-} from "./chunk-BZ4GDOJX.js";
+} from "./chunk-X7FESZTD.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-GZ7E6VOB.js";
+} from "./chunk-TIWURSLS.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-EQRS3SGM.js";
+} from "./chunk-66H2QQAK.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-4BROEAKH.js";
+} from "./chunk-2QT3GCU4.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-TRLFZKVG.js";
+} from "./chunk-6IU45EHE.js";
 import {
   readTranscriptPreference
-} from "./chunk-FU2DFEAZ.js";
+} from "./chunk-USQDVBEV.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-2UMNXADU.js";
+} from "./chunk-OSJEMXSR.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-FU2DFEAZ.js → chunk-USQDVBEV.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-UM5J3J4V.js";
+} from "./chunk-HU5LSYL2.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,7 +9,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   configFilePath
-} from "./chunk-2UMNXADU.js";
+} from "./chunk-OSJEMXSR.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-YXP3WPAI.js → chunk-UYDTFCHW.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-4ZDKSDVW.js → chunk-WNJSGZY7.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-DY4ILT6L.js";
+} from "./chunk-TFKBFQCE.js";
 import {
   isBridgeLocator
-} from "./chunk-ZVY25BMK.js";
+} from "./chunk-K3QVDAZW.js";
 import {
   pusharyHookExecutable
-} from "./chunk-WPVHRUDT.js";
+} from "./chunk-Z4VGIBJ7.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-MW6ZPC6R.js";
+} from "./chunk-5UQ5ATIE.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-NHTAHAIS.js → chunk-WOLPADR6.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-TRLFZKVG.js";
+} from "./chunk-6IU45EHE.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-BZ4GDOJX.js → chunk-X7FESZTD.js}

@@ -4,17 +4,14 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "./chunk-NHTAHAIS.js";
+} from "./chunk-WOLPADR6.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-TRLFZKVG.js";
-import {
-  getPackageVersion
-} from "./chunk-DINDL2CF.js";
+} from "./chunk-6IU45EHE.js";
 import {
   readControlMode
-} from "./chunk-FU2DFEAZ.js";
+} from "./chunk-USQDVBEV.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -23,7 +20,10 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "./chunk-2UMNXADU.js";
+} from "./chunk-OSJEMXSR.js";
+import {
+  getPackageVersion
+} from "./chunk-HWJW3CPO.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-NOWZUGZW.js → chunk-XWEONSLV.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-NY6XQ6CA.js";
+} from "./chunk-43LJSM4F.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-Y3MM6PYN.js → chunk-YAWXKL2X.js}

@@ -1,6 +1,6 @@
 import {
   resolvePathBinary
-} from "./chunk-TRLFZKVG.js";
+} from "./chunk-6IU45EHE.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-GKIUEIDX.js → chunk-YQMFGWBD.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-2UMNXADU.js";
+} from "./chunk-OSJEMXSR.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-WPVHRUDT.js → chunk-Z4VGIBJ7.js}

@@ -2,17 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-LPYCPFBZ.js";
+} from "./chunk-2AUIEZYS.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-TRLFZKVG.js";
+} from "./chunk-6IU45EHE.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{reapply-J527BCJG.js → reapply-5CZSTJZI.js}

@@ -1,4 +1,5 @@
 import {
+  ensureCodexTrustAfterReapply,
   inspectConfiguredManagedProviders,
   reapplyAllAgents,
   reapplyClaudeForVersion,
@@ -8,16 +9,20 @@ import {
   reapplyGeminiSettings,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-ACYIZ3KH.js";
-import "./chunk-PC6DU5C4.js";
-import "./chunk-II7PUMPB.js";
-import "./chunk-WPVHRUDT.js";
-import "./chunk-LPYCPFBZ.js";
-import "./chunk-YXP3WPAI.js";
-import "./chunk-TRLFZKVG.js";
+} from "./chunk-JKBDGZFL.js";
+import "./chunk-HUAOMX4U.js";
+import "./chunk-6EEANS74.js";
+import "./chunk-4ERLRNOK.js";
+import "./chunk-Z4VGIBJ7.js";
+import "./chunk-2AUIEZYS.js";
+import "./chunk-XHKBHWLX.js";
+import "./chunk-UYDTFCHW.js";
+import "./chunk-6IU45EHE.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-SOUZBGYJ.js";
+import "./chunk-T4QY64OR.js";
+import "./chunk-HWJW3CPO.js";
 export {
+  ensureCodexTrustAfterReapply,
   inspectConfiguredManagedProviders,
   reapplyAllAgents,
   reapplyClaudeForVersion,

package/dist/src/index.js

@@ -1,15 +1,15 @@
 import {
   handlePreToolUse
-} from "../chunk-XDP3UYH5.js";
-import "../chunk-VIOL2DJS.js";
-import "../chunk-II7PUMPB.js";
-import "../chunk-SUWRZYQG.js";
-import "../chunk-LEAAERSQ.js";
+} from "../chunk-PJ27EHCD.js";
+import "../chunk-R5KY3PBN.js";
+import "../chunk-4ERLRNOK.js";
+import "../chunk-MDJJW3LP.js";
+import "../chunk-43ZDACBO.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-LPYCPFBZ.js";
+import "../chunk-2AUIEZYS.js";
 import {
   fetchAccountPublicKey
-} from "../chunk-EQRS3SGM.js";
+} from "../chunk-66H2QQAK.js";
 import {
   fetchModeOverride,
   fetchModeState,
@@ -18,28 +18,30 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-G653QPTR.js";
-import "../chunk-YXP3WPAI.js";
+} from "../chunk-D573TLP6.js";
+import "../chunk-UYDTFCHW.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
-} from "../chunk-LGXUGYUH.js";
-import "../chunk-NHTAHAIS.js";
-import "../chunk-TRLFZKVG.js";
-import "../chunk-EYRGBYZG.js";
+} from "../chunk-PYCQXCI5.js";
+import "../chunk-WOLPADR6.js";
+import "../chunk-6IU45EHE.js";
+import "../chunk-HETOKNIL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-UM5J3J4V.js";
+import "../chunk-HU5LSYL2.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-2UMNXADU.js";
+} from "../chunk-OSJEMXSR.js";
 import {
   resolvePolicy
-} from "../chunk-SOUZBGYJ.js";
+} from "../chunk-T4QY64OR.js";
+import "../chunk-EA3IELHP.js";
+import "../chunk-HWJW3CPO.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "1.4.2",
+  "version": "1.5.1",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",