@pushary/agent-hooks 1.5.0 → 1.6.0

package/dist/bin/pushary-upgrade.js

@@ -1,27 +1,34 @@
 #!/usr/bin/env node
 import {
+  describeCodexTrustConfirmation
+} from "../chunk-BY2CRWBO.js";
+import {
+  ensureCodexTrustAfterReapply,
   reapplyAllAgents
-} from "../chunk-PNNBMH4E.js";
-import "../chunk-3NBODGQS.js";
+} from "../chunk-OP7HFIWE.js";
+import "../chunk-NDS27FXU.js";
+import "../chunk-XQOT4CCK.js";
 import {
   waitForMachineReadiness
-} from "../chunk-F57RGL7K.js";
-import "../chunk-J4J45VPZ.js";
+} from "../chunk-BW3Y2D24.js";
+import "../chunk-HWG7X3VI.js";
 import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-KEOLNHR3.js";
+} from "../chunk-5MH5P366.js";
 import {
   AUTO_UPDATE_DISABLE_ENV,
   describeAutoUpdateCheck,
   globalInstallPrefix,
+  hasPendingUpgradeFinish,
   isAutoUpdateDisabledByEnv,
   parseAutoUpdateFlag,
+  readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "../chunk-OSSDK5RS.js";
-import "../chunk-NTQSICPJ.js";
+} from "../chunk-RBPJO4KG.js";
+import "../chunk-MOQOJOMD.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
@@ -32,13 +39,13 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-7XT76LWT.js";
-import "../chunk-EADZPVYW.js";
+} from "../chunk-DZ75BJ7V.js";
+import "../chunk-BK5F3FGE.js";
 import {
   needsShell
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-UYDTFCHW.js";
-import "../chunk-UQHUUZ5H.js";
+import "../chunk-VZANUMIF.js";
+import "../chunk-7JSE6JTZ.js";
 import {
   LATEST_TAG,
   autoUpdateLock,
@@ -54,22 +61,22 @@ import {
   npmErrorMessage,
   resolveGlobalBinary,
   vscodePluginDir
-} from "../chunk-DYHXOXUF.js";
+} from "../chunk-F2OPOBRO.js";
 import {
   exitOnHelpFlag
 } from "../chunk-P4BNYJ5Q.js";
 import {
   readControlMode
-} from "../chunk-USQDVBEV.js";
+} from "../chunk-TDKE3V6W.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-HU5LSYL2.js";
+import "../chunk-VMNI33F5.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey
 } from "../chunk-OSJEMXSR.js";
-import "../chunk-T4QY64OR.js";
+import "../chunk-YFD7CRIZ.js";
 import {
   NPX_LATEST_COMMAND
 } from "../chunk-EA3IELHP.js";
@@ -172,12 +179,26 @@ var finishInNewInstall = (request) => {
 };
 var incompleteFinishDetail = (logPath) => `installed, but refreshing the agent configs did not finish cleanly; see ${logPath}`;
 var newMajorDetail = (latest) => `${latest} is a new major version; run ${MANUAL_UPGRADE_COMMAND}`;
+var finishInstalledUpgrade = (context, from, to) => {
+  const pending = { result: "finish_pending", from, to, detail: incompleteFinishDetail(context.logPath) };
+  recordAutoUpdateCheck(context.statePath, pending, new Date(context.now()).toISOString());
+  try {
+    context.finish({ entry: upgradeEntryFor(context.prefix), prefix: context.prefix, logPath: context.logPath });
+    return { result: "updated", from, to };
+  } catch {
+    return pending;
+  }
+};
+var isInstallableRelease = (latest, installed) => latest !== void 0 && isNewerVersion(latest, installed) && isSameMajorVersion(latest, installed);
 var checkAndInstall = async (context) => {
   const installed = packageVersionAt(context.packageRoot);
   if (installed === void 0 || !isReleaseVersion(installed)) {
     return { result: "failed", from: installed, detail: UNREADABLE_INSTALLED_VERSION };
   }
+  const previous = readAutoUpdateState(context.statePath);
+  const pendingFinish = hasPendingUpgradeFinish(previous, installed);
   const latest = await fetchLatestPublishedVersion({ fetchImpl: context.fetchImpl });
+  if (pendingFinish && !isInstallableRelease(latest, installed)) return finishInstalledUpgrade(context, previous.from, installed);
   if (latest === void 0) return { result: "failed", from: installed, detail: UNREACHABLE_REGISTRY };
   if (!isNewerVersion(latest, installed)) return { result: "current", from: installed };
   if (!isSameMajorVersion(latest, installed)) {
@@ -187,14 +208,10 @@ var checkAndInstall = async (context) => {
   try {
     installAgentHooksGlobally({ version: latest, prefix: context.prefix, timeoutMs: INSTALL_TIMEOUT_MS }, context.runNpm);
   } catch (error) {
+    if (pendingFinish) return finishInstalledUpgrade(context, previous.from, installed);
     return { result: "failed", from: installed, to: latest, detail: npmErrorMessage(error) };
   }
-  try {
-    context.finish({ entry: upgradeEntryFor(context.prefix), prefix: context.prefix, logPath: context.logPath });
-  } catch {
-    return { result: "updated", from: installed, to: latest, detail: incompleteFinishDetail(context.logPath) };
-  }
-  return { result: "updated", from: installed, to: latest };
+  return finishInstalledUpgrade(context, installed, latest);
 };
 var recordAutoUpdateCheck = (statePath, check, at) => updateAutoUpdateState(statePath, {
   lastCheckAt: at,
@@ -206,6 +223,7 @@ var recordAutoUpdateCheck = (statePath, check, at) => updateAutoUpdateState(stat
   announced: check.result === "updated" ? false : void 0
 });
 var runAutoUpdate = async (run = {}) => {
+  if ((run.platform ?? process.platform) === "linux") return { kind: "linux" };
   const packageRoot = run.packageRoot ?? ownPackageRoot();
   const prefix = packageRoot === void 0 ? null : globalInstallPrefix(packageRoot);
   if (packageRoot === void 0 || prefix === null) return { kind: "not_global_install" };
@@ -216,6 +234,7 @@ var runAutoUpdate = async (run = {}) => {
   try {
     const check = await checkAndInstall({
       packageRoot,
+      statePath: run.statePath ?? autoUpdateState(),
       prefix,
       logPath,
       now,
@@ -284,7 +303,9 @@ var finishUpgrade = async () => {
     apiKey = void 0;
   }
   const inspectedAgents = reapplyAllAgents(apiKey);
+  const codexTrust = await ensureCodexTrustAfterReapply(inspectedAgents);
   const refreshed = inspectedAgents.filter((agent) => agent.result.reapplied);
+  const failedRefreshes = inspectedAgents.filter((agent) => agent.result.failed);
   const configuredControlProviders = inspectedAgents.filter((agent) => agent.result.configured && (agent.id === "claude" || agent.id === "codex" || agent.id === "gemini")).map((agent) => agent.id);
   const controlMode = readControlMode();
   const daemonStatus = readDaemonStatus();
@@ -329,21 +350,31 @@ var finishUpgrade = async () => {
       console.log();
       console.log("No key was readable here, so MCP entries kept the key they already had.");
     }
-  } else {
+  } else if (failedRefreshes.length === 0) {
     console.log("No agent config on this machine needed refreshing.");
   }
+  if (codexTrust) {
+    console.log();
+    console.log(describeCodexTrustConfirmation(codexTrust));
+  }
   console.log();
   if (!daemonReady) {
     console.error(controlPolicy === "disabled" ? "Upgrade installed, but the disabled background service could not be fully removed. Re-run setup with --control off." : controlPolicy === "legacy" ? legacyStopFailure ? `Upgrade installed, but the legacy background service could not be stopped: ${legacyStopFailure}. Run setup with --control off.` : "Upgrade installed and the legacy background service was stopped, but it cannot be safely adopted. Run setup with --control off, or restore its provider and native service manager." : controlPolicy === "enabled" && !apiKey ? "Upgrade installed, but phone-start could not be reconciled because no API key was readable. Re-run setup." : "Upgrade installed, but the background service did not start. Run: pushary daemon install");
     process.exitCode = 1;
     return;
   }
+  if (failedRefreshes.length > 0) {
+    console.error(`Upgrade installed, but refreshing agent configuration failed for: ${failedRefreshes.map((agent) => agent.label).join(", ")}. Check the config files and run pushary upgrade again.`);
+    process.exitCode = 1;
+    return;
+  }
   console.log(controlPolicy === "disabled" ? "Done. Your hooks use the new global install; phone-start remains disabled." : controlPolicy === "unsupported" || controlPolicy === "preserve-absent" ? "Done. Your hooks use the new global install; no background service was added." : "Done. Your hooks and background service use the new global install.");
   console.log("Verify with: pushary doctor");
 };
 var AUTO_UPDATE_ON_MESSAGE = "Automatic updates are on. Pushary checks for a new version once a day, when an agent session starts.";
 var AUTO_UPDATE_OFF_MESSAGE = "Automatic updates are off. Turn them back on with: pushary upgrade --auto=on";
 var AUTO_UPDATE_RUN_MESSAGES = {
+  linux: `Automatic updates are paused on Linux to protect running sessions. When your sessions have finished, run: ${NPX_LATEST_COMMAND} upgrade`,
   not_global_install: `This copy of Pushary is not a global npm install, so it does not update itself. Run: ${NPX_LATEST_COMMAND} upgrade`,
   locked: "Another automatic update is already running."
 };
@@ -361,7 +392,26 @@ var runAutomaticUpdate = async () => {
     return;
   }
   console.log(`Automatic update: ${describeAutoUpdateCheck(outcome.state)}`);
-  if (outcome.state.lastResult === "failed") process.exitCode = 1;
+  if (outcome.state.lastResult === "failed" || outcome.state.lastResult === "finish_pending") process.exitCode = 1;
+};
+var FINISH_FAILED_MESSAGE = "Upgrade installed, but refreshing the agent configs did not finish. Fix the problem printed above, then run pushary upgrade again.";
+var finishGlobalUpgrade = () => {
+  const upgradedBinary = resolveGlobalBinary("pushary-upgrade");
+  if (!upgradedBinary) {
+    console.error("Upgrade installed, but the new pushary-upgrade binary could not be found on PATH.");
+    process.exit(1);
+  }
+  try {
+    execFileSync2(upgradedBinary, [FINISH_UPGRADE_FLAG], {
+      stdio: "inherit",
+      shell: needsShell(upgradedBinary)
+    });
+    return true;
+  } catch {
+    console.error(FINISH_FAILED_MESSAGE);
+    process.exitCode = 1;
+    return false;
+  }
 };
 var main = async () => {
   if (process.argv.includes(FINISH_UPGRADE_FLAG)) {
@@ -400,7 +450,13 @@ var main = async () => {
     console.log("Check the result with: pushary doctor");
     return;
   }
+  const pendingFinish = hasPendingUpgradeFinish(readAutoUpdateState(autoUpdateState()), installed);
   const latest = await fetchLatestPublishedVersion();
+  const newerPublished = latest !== void 0 && isNewerVersion(latest, installed);
+  if (pendingFinish && !newerPublished) {
+    if (!finishGlobalUpgrade()) return;
+    updateAutoUpdateState(autoUpdateState(), { lastResult: "updated", detail: void 0, announced: false });
+  }
   if (latest && !isNewerVersion(latest, installed)) {
     console.log(`Already on the latest version (${installed}).`);
     return;
@@ -412,14 +468,6 @@ var main = async () => {
     console.error(`Upgrade failed: ${npmErrorMessage(err)}`);
     process.exit(1);
   }
-  const upgradedBinary = resolveGlobalBinary("pushary-upgrade");
-  if (!upgradedBinary) {
-    console.error("Upgrade installed, but the new pushary-upgrade binary could not be found on PATH.");
-    process.exit(1);
-  }
-  execFileSync2(upgradedBinary, [FINISH_UPGRADE_FLAG], {
-    stdio: "inherit",
-    shell: needsShell(upgradedBinary)
-  });
+  finishGlobalUpgrade();
 };
 main();

package/dist/bin/pushary-wait.js

@@ -4,8 +4,8 @@ import {
 } from "../chunk-CVWG2N3Y.js";
 import {
   exitOnFailedResponse
-} from "../chunk-XWEONSLV.js";
-import "../chunk-43LJSM4F.js";
+} from "../chunk-PCVVCS4A.js";
+import "../chunk-CSW6A2EW.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -26,7 +26,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-OSJEMXSR.js";
-import "../chunk-T4QY64OR.js";
+import "../chunk-YFD7CRIZ.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 

package/dist/{chunk-KEOLNHR3.js → chunk-5MH5P366.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-DYHXOXUF.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-HVBF35GT.js → chunk-5QCZYSYR.js}

@@ -3,7 +3,7 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-TIWURSLS.js";
+} from "./chunk-SFNRAEEW.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords

package/dist/{chunk-IYTQ4B5I.js → chunk-644CGYOB.js}

@@ -1,7 +1,7 @@
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-JF736N4C.js";
+} from "./chunk-FI3LQCUH.js";
 import {
   blockedActionFingerprint,
   defersToNativeMode,
@@ -9,11 +9,11 @@ import {
   hasBlockedActionHint,
   recordBlockedActionHint,
   reportMachineDenial
-} from "./chunk-CQYHOHOK.js";
+} from "./chunk-BE4P7ERZ.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-43ZDACBO.js";
+} from "./chunk-F4KRNFDE.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -36,7 +36,7 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-FDHMNT24.js";
+} from "./chunk-66BIMA62.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -51,7 +51,7 @@ import {
 } from "./chunk-PYCQXCI5.js";
 import {
   getMachineId
-} from "./chunk-UQHUUZ5H.js";
+} from "./chunk-7JSE6JTZ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -61,9 +61,13 @@ import {
   GATE_BLOCK_REASON_MAX_LENGTH,
   GATE_WIRE,
   agentQuestionStrategy,
+  agentRulesAllowEveryInput,
   buildDecisionEpisodeFeatures,
+  claudeAllowlistOwnsCall,
+  claudeConsultsItsAllowlist,
   claudePermissionDeniedOutput,
   claudePermissionRequestOutput,
+  claudePermissionRulesFromSettings,
   claudePreToolUseOutput,
   claudePromptsBeforeAnEdit,
   editAsksAtTheAgentsPrompt,
@@ -79,7 +83,51 @@ import {
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
+
+// src/claude-permission-rules.ts
+import { readFileSync, statSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+var MANAGED_CLAUDE_SETTINGS_BY_PLATFORM = {
+  darwin: "/Library/Application Support/ClaudeCode/managed-settings.json",
+  linux: "/etc/claude-code/managed-settings.json",
+  win32: "C:\\ProgramData\\ClaudeCode\\managed-settings.json"
+};
+var MAX_CLAUDE_SETTINGS_BYTES = 1048576;
+var claudeSettingsLocationFor = (cwd, environment = process.env, home = homedir(), platform = process.platform) => ({
+  configDir: environment.CLAUDE_CONFIG_DIR || join(home, ".claude"),
+  projectDir: environment.CLAUDE_PROJECT_DIR || cwd || void 0,
+  managedSettingsPath: MANAGED_CLAUDE_SETTINGS_BY_PLATFORM[platform]
+});
+var claudeSettingsSources = (location) => [
+  ...location.managedSettingsPath ? [{ path: location.managedSettingsPath, trust: "grants" }] : [],
+  { path: join(location.configDir, "settings.json"), trust: "grants" },
+  ...location.projectDir ? [
+    { path: join(location.projectDir, ".claude", "settings.json"), trust: "restricts_only" },
+    { path: join(location.projectDir, ".claude", "settings.local.json"), trust: "grants" }
+  ] : []
+];
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var restrictionsOnly = (document) => {
+  if (!isRecord(document) || !isRecord(document.permissions)) return null;
+  const { ask: ask2, deny: deny2 } = document.permissions;
+  return { permissions: { ask: ask2, deny: deny2 } };
+};
+var readSettingsDocument = (path) => {
+  try {
+    const stats = statSync(path);
+    if (!stats.isFile() || stats.size > MAX_CLAUDE_SETTINGS_BYTES) return null;
+    return JSON.parse(readFileSync(path, "utf8"));
+  } catch {
+    return null;
+  }
+};
+var trustedDocument = ({ path, trust }) => {
+  const document = readSettingsDocument(path);
+  return trust === "grants" ? document : restrictionsOnly(document);
+};
+var readClaudePermissionRules = (location) => claudePermissionRulesFromSettings(claudeSettingsSources(location).map(trustedDocument));
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
@@ -104,7 +152,7 @@ var reportDecisionEpisode = async (apiKey, input) => {
 };
 
 // src/hook.ts
-import { basename, join } from "path";
+import { basename, join as join2 } from "path";
 import { tmpdir } from "os";
 import { existsSync, writeFileSync } from "fs";
 var START_MS = Date.now();
@@ -259,7 +307,8 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
     // The gate asks at most one question per tool call, so the runtime's id needs
     // no suffix here. Absent on runtimes that do not send one, and the server then
     // creates a fresh decision exactly as before.
-    toolUseId: input.tool_use_id
+    toolUseId: input.tool_use_id,
+    sessionToolAware: true
   };
   const signals = {};
   const runHandler = () => {
@@ -298,7 +347,7 @@ var KEYLESS_NOTICE = "[pushary] Not connected (no API key), so your agent runs u
 var oncePerSession = (kind, sessionId) => {
   try {
     const key = (sessionId || DEFAULT_SESSION).replace(/[^a-zA-Z0-9_-]/g, "");
-    const marker = join(tmpdir(), `pushary-${kind}-${key}`);
+    const marker = join2(tmpdir(), `pushary-${kind}-${key}`);
     if (existsSync(marker)) return false;
     writeFileSync(marker, "1", "utf-8");
     return true;
@@ -457,6 +506,8 @@ var handleKeyless = (input) => {
   }
   return void 0;
 };
+var claudePermissionRulesFor = (input) => ACTIVE_SOURCE === "claude" ? readClaudePermissionRules(claudeSettingsLocationFor(input.cwd)) : null;
+var claudeRulesMayCover = (input, rules) => rules !== null && claudeConsultsItsAllowlist(input.permission_mode) && agentRulesAllowEveryInput(rules, input.tool_name, [input.tool_input ?? {}], input.cwd);
 var claudeGateInput = (modeState, config, input, canonical) => {
   const toolName = canonical?.toolName ?? input.tool_name;
   const toolInputs = canonical?.toolInputs ?? [input.tool_input ?? {}];
@@ -549,6 +600,7 @@ var handlePreToolUse = async (input, canonical) => {
     if (!(verdict.kind === "gate" && verdict.scopeReason) && shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
       return void 0;
     }
+    if (claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudePermissionRulesFor(input))) return void 0;
     if (claudePromptsBeforeAnEdit(input.permission_mode) && editAsksAtTheAgentsPrompt(gateInput, verdict)) return handleTerminalOnly();
     switch (verdict.kind) {
       case "allow":
@@ -578,7 +630,8 @@ var toPermissionRequestOutput = (hookOutput) => {
   return void 0;
 };
 var handlePermissionRequest = async (input, canonical) => {
-  if (canonical === void 0 && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode)) return void 0;
+  const claudeRules = claudePermissionRulesFor(input);
+  if (canonical === void 0 && !claudeRulesMayCover(input, claudeRules) && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode)) return void 0;
   if (isPusharyOwnTool(input.tool_name)) return void 0;
   let apiKey;
   try {
@@ -589,7 +642,8 @@ var handlePermissionRequest = async (input, canonical) => {
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
     const policy = await getPolicy(apiKey, modeState.policyVersion, ACTIVE_AGENT.type, true, input.session_id);
-    const verdict = resolveGate(claudeGateInput(modeState, policy, input, canonical));
+    const gateInput = claudeGateInput(modeState, policy, input, canonical);
+    const verdict = resolveGate(gateInput);
     if (verdict.kind === "kill") {
       await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return permReqHalted(verdict.reason);
@@ -601,7 +655,7 @@ var handlePermissionRequest = async (input, canonical) => {
     if (canonical === null) return permReqDeny(unreadableReason);
     if (agentQuestionStrategy(ACTIVE_SOURCE, "PermissionRequest", input.tool_name) === AGENT_QUESTION_STRATEGY.native) return void 0;
     if (verdict.kind === "gate" && verdict.scopeReason && (canonical?.toolInputs.length ?? 0) > 1) return permReqDeny(batchScopeReason);
-    if (!(verdict.kind === "gate" && verdict.scopeReason) && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode)) return void 0;
+    if (!(verdict.kind === "gate" && verdict.scopeReason) && !claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudeRules) && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode)) return void 0;
     switch (verdict.kind) {
       case "allow":
         return permReqAllow();

package/dist/{chunk-FDHMNT24.js → chunk-66BIMA62.js}

@@ -1,7 +1,7 @@
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-UYDTFCHW.js";
+} from "./chunk-VZANUMIF.js";
 import {
   cancelQuestion,
   isPolicyConfig,
@@ -10,13 +10,13 @@ import {
 } from "./chunk-PYCQXCI5.js";
 import {
   getMachineId
-} from "./chunk-UQHUUZ5H.js";
+} from "./chunk-7JSE6JTZ.js";
 import {
   withRetry
 } from "./chunk-HETOKNIL.js";
 import {
   reportedInstallSource
-} from "./chunk-HU5LSYL2.js";
+} from "./chunk-VMNI33F5.js";
 import {
   getApiKey,
   getBaseUrl
@@ -44,7 +44,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   toToolLookup
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -58,7 +58,7 @@ var policyRequestFor = (agentType) => ({
   repoAware: REPO_AWARE_AGENTS.includes(agentType)
 });
 var policyCacheFile = (apiKey, agent, repoAware = false) => {
-  const parts = [apiKey, agent, repoAware ? "repoAware" : void 0].filter(Boolean);
+  const parts = [apiKey, agent, repoAware ? "repoAware" : void 0, "sessionToolAware"].filter(Boolean);
   const hash = createHash("sha256").update(parts.join(":")).digest("hex").slice(0, 12);
   return join(tmpdir(), `pushary-policy-${hash}.json`);
 };
@@ -69,6 +69,7 @@ var fetchPolicy = async (apiKey, agent, repoAware = false, sessionId) => {
     if (agent) params.set("agent", agent);
     if (repoAware) params.set("repoAware", "1");
     params.set("scopeAware", "1");
+    params.set("sessionToolAware", "1");
     if (sessionId) params.set("sessionId", sessionId);
     const query = params.toString();
     const url = query ? `${baseUrl}/api/mcp/policy?${query}` : `${baseUrl}/api/mcp/policy`;

package/dist/{chunk-UQHUUZ5H.js → chunk-7JSE6JTZ.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-DYHXOXUF.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-NFKVRMTM.js → chunk-A2GS2ENL.js}

@@ -6,16 +6,16 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-PCGZXWGQ.js";
+} from "./chunk-KZBGITM4.js";
 import {
   ensureDaemonRunning
-} from "./chunk-7XT76LWT.js";
+} from "./chunk-DZ75BJ7V.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-TIWURSLS.js";
+} from "./chunk-SFNRAEEW.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -23,14 +23,14 @@ import {
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-2QT3GCU4.js";
+} from "./chunk-GP6SFVEN.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-DYHXOXUF.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   readTranscriptPreference
-} from "./chunk-USQDVBEV.js";
+} from "./chunk-TDKE3V6W.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-TFKBFQCE.js → chunk-A5URWZTP.js}

@@ -7,7 +7,7 @@ import {
 import {
   COMPATIBLE_AGENT_TYPES,
   isValidApiKey
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", ...COMPATIBLE_AGENT_TYPES, "custom"];

package/dist/{chunk-MYP4UUFH.js → chunk-ALG3IBLB.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-DYHXOXUF.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-TUXFIVOH.js → chunk-B6TYEKJR.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-CQYHOHOK.js → chunk-BE4P7ERZ.js}

@@ -7,10 +7,10 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-FDHMNT24.js";
+} from "./chunk-66BIMA62.js";
 import {
   canonicalJson
-} from "./chunk-DYHXOXUF.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";
@@ -20,7 +20,7 @@ import {
   machineDecisionFor,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-EADZPVYW.js → chunk-BK5F3FGE.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-UYDTFCHW.js";
+} from "./chunk-VZANUMIF.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-DYHXOXUF.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-F57RGL7K.js → chunk-BW3Y2D24.js}

@@ -2,21 +2,21 @@ import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-KEOLNHR3.js";
+} from "./chunk-5MH5P366.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-7XT76LWT.js";
+} from "./chunk-DZ75BJ7V.js";
 import {
   getMachineId
-} from "./chunk-UQHUUZ5H.js";
+} from "./chunk-7JSE6JTZ.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-USQDVBEV.js";
+} from "./chunk-TDKE3V6W.js";
 import {
   getBaseUrl
 } from "./chunk-OSJEMXSR.js";