@pushary/agent-hooks 1.5.1 → 1.6.0

package/dist/{chunk-HVBF35GT.js → chunk-5QCZYSYR.js}

@@ -3,7 +3,7 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-TIWURSLS.js";
+} from "./chunk-SFNRAEEW.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords

package/dist/{chunk-PJ27EHCD.js → chunk-644CGYOB.js}

@@ -1,7 +1,7 @@
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-R5KY3PBN.js";
+} from "./chunk-FI3LQCUH.js";
 import {
   blockedActionFingerprint,
   defersToNativeMode,
@@ -9,11 +9,11 @@ import {
   hasBlockedActionHint,
   recordBlockedActionHint,
   reportMachineDenial
-} from "./chunk-MDJJW3LP.js";
+} from "./chunk-BE4P7ERZ.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-43ZDACBO.js";
+} from "./chunk-F4KRNFDE.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -36,7 +36,7 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-D573TLP6.js";
+} from "./chunk-66BIMA62.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -51,7 +51,7 @@ import {
 } from "./chunk-PYCQXCI5.js";
 import {
   getMachineId
-} from "./chunk-WOLPADR6.js";
+} from "./chunk-7JSE6JTZ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -61,9 +61,13 @@ import {
   GATE_BLOCK_REASON_MAX_LENGTH,
   GATE_WIRE,
   agentQuestionStrategy,
+  agentRulesAllowEveryInput,
   buildDecisionEpisodeFeatures,
+  claudeAllowlistOwnsCall,
+  claudeConsultsItsAllowlist,
   claudePermissionDeniedOutput,
   claudePermissionRequestOutput,
+  claudePermissionRulesFromSettings,
   claudePreToolUseOutput,
   claudePromptsBeforeAnEdit,
   editAsksAtTheAgentsPrompt,
@@ -79,7 +83,51 @@ import {
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
+
+// src/claude-permission-rules.ts
+import { readFileSync, statSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+var MANAGED_CLAUDE_SETTINGS_BY_PLATFORM = {
+  darwin: "/Library/Application Support/ClaudeCode/managed-settings.json",
+  linux: "/etc/claude-code/managed-settings.json",
+  win32: "C:\\ProgramData\\ClaudeCode\\managed-settings.json"
+};
+var MAX_CLAUDE_SETTINGS_BYTES = 1048576;
+var claudeSettingsLocationFor = (cwd, environment = process.env, home = homedir(), platform = process.platform) => ({
+  configDir: environment.CLAUDE_CONFIG_DIR || join(home, ".claude"),
+  projectDir: environment.CLAUDE_PROJECT_DIR || cwd || void 0,
+  managedSettingsPath: MANAGED_CLAUDE_SETTINGS_BY_PLATFORM[platform]
+});
+var claudeSettingsSources = (location) => [
+  ...location.managedSettingsPath ? [{ path: location.managedSettingsPath, trust: "grants" }] : [],
+  { path: join(location.configDir, "settings.json"), trust: "grants" },
+  ...location.projectDir ? [
+    { path: join(location.projectDir, ".claude", "settings.json"), trust: "restricts_only" },
+    { path: join(location.projectDir, ".claude", "settings.local.json"), trust: "grants" }
+  ] : []
+];
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var restrictionsOnly = (document) => {
+  if (!isRecord(document) || !isRecord(document.permissions)) return null;
+  const { ask: ask2, deny: deny2 } = document.permissions;
+  return { permissions: { ask: ask2, deny: deny2 } };
+};
+var readSettingsDocument = (path) => {
+  try {
+    const stats = statSync(path);
+    if (!stats.isFile() || stats.size > MAX_CLAUDE_SETTINGS_BYTES) return null;
+    return JSON.parse(readFileSync(path, "utf8"));
+  } catch {
+    return null;
+  }
+};
+var trustedDocument = ({ path, trust }) => {
+  const document = readSettingsDocument(path);
+  return trust === "grants" ? document : restrictionsOnly(document);
+};
+var readClaudePermissionRules = (location) => claudePermissionRulesFromSettings(claudeSettingsSources(location).map(trustedDocument));
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
@@ -104,7 +152,7 @@ var reportDecisionEpisode = async (apiKey, input) => {
 };
 
 // src/hook.ts
-import { basename, join } from "path";
+import { basename, join as join2 } from "path";
 import { tmpdir } from "os";
 import { existsSync, writeFileSync } from "fs";
 var START_MS = Date.now();
@@ -259,7 +307,8 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
     // The gate asks at most one question per tool call, so the runtime's id needs
     // no suffix here. Absent on runtimes that do not send one, and the server then
     // creates a fresh decision exactly as before.
-    toolUseId: input.tool_use_id
+    toolUseId: input.tool_use_id,
+    sessionToolAware: true
   };
   const signals = {};
   const runHandler = () => {
@@ -298,7 +347,7 @@ var KEYLESS_NOTICE = "[pushary] Not connected (no API key), so your agent runs u
 var oncePerSession = (kind, sessionId) => {
   try {
     const key = (sessionId || DEFAULT_SESSION).replace(/[^a-zA-Z0-9_-]/g, "");
-    const marker = join(tmpdir(), `pushary-${kind}-${key}`);
+    const marker = join2(tmpdir(), `pushary-${kind}-${key}`);
     if (existsSync(marker)) return false;
     writeFileSync(marker, "1", "utf-8");
     return true;
@@ -457,6 +506,8 @@ var handleKeyless = (input) => {
   }
   return void 0;
 };
+var claudePermissionRulesFor = (input) => ACTIVE_SOURCE === "claude" ? readClaudePermissionRules(claudeSettingsLocationFor(input.cwd)) : null;
+var claudeRulesMayCover = (input, rules) => rules !== null && claudeConsultsItsAllowlist(input.permission_mode) && agentRulesAllowEveryInput(rules, input.tool_name, [input.tool_input ?? {}], input.cwd);
 var claudeGateInput = (modeState, config, input, canonical) => {
   const toolName = canonical?.toolName ?? input.tool_name;
   const toolInputs = canonical?.toolInputs ?? [input.tool_input ?? {}];
@@ -549,6 +600,7 @@ var handlePreToolUse = async (input, canonical) => {
     if (!(verdict.kind === "gate" && verdict.scopeReason) && shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
       return void 0;
     }
+    if (claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudePermissionRulesFor(input))) return void 0;
     if (claudePromptsBeforeAnEdit(input.permission_mode) && editAsksAtTheAgentsPrompt(gateInput, verdict)) return handleTerminalOnly();
     switch (verdict.kind) {
       case "allow":
@@ -578,7 +630,8 @@ var toPermissionRequestOutput = (hookOutput) => {
   return void 0;
 };
 var handlePermissionRequest = async (input, canonical) => {
-  if (canonical === void 0 && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode)) return void 0;
+  const claudeRules = claudePermissionRulesFor(input);
+  if (canonical === void 0 && !claudeRulesMayCover(input, claudeRules) && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode)) return void 0;
   if (isPusharyOwnTool(input.tool_name)) return void 0;
   let apiKey;
   try {
@@ -589,7 +642,8 @@ var handlePermissionRequest = async (input, canonical) => {
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
     const policy = await getPolicy(apiKey, modeState.policyVersion, ACTIVE_AGENT.type, true, input.session_id);
-    const verdict = resolveGate(claudeGateInput(modeState, policy, input, canonical));
+    const gateInput = claudeGateInput(modeState, policy, input, canonical);
+    const verdict = resolveGate(gateInput);
     if (verdict.kind === "kill") {
       await reportMachineDenial(input, verdict, ACTIVE_AGENT);
       return permReqHalted(verdict.reason);
@@ -601,7 +655,7 @@ var handlePermissionRequest = async (input, canonical) => {
     if (canonical === null) return permReqDeny(unreadableReason);
     if (agentQuestionStrategy(ACTIVE_SOURCE, "PermissionRequest", input.tool_name) === AGENT_QUESTION_STRATEGY.native) return void 0;
     if (verdict.kind === "gate" && verdict.scopeReason && (canonical?.toolInputs.length ?? 0) > 1) return permReqDeny(batchScopeReason);
-    if (!(verdict.kind === "gate" && verdict.scopeReason) && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode)) return void 0;
+    if (!(verdict.kind === "gate" && verdict.scopeReason) && !claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudeRules) && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode)) return void 0;
     switch (verdict.kind) {
       case "allow":
         return permReqAllow();

package/dist/{chunk-D573TLP6.js → chunk-66BIMA62.js}

@@ -1,7 +1,7 @@
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-UYDTFCHW.js";
+} from "./chunk-VZANUMIF.js";
 import {
   cancelQuestion,
   isPolicyConfig,
@@ -10,13 +10,13 @@ import {
 } from "./chunk-PYCQXCI5.js";
 import {
   getMachineId
-} from "./chunk-WOLPADR6.js";
+} from "./chunk-7JSE6JTZ.js";
 import {
   withRetry
 } from "./chunk-HETOKNIL.js";
 import {
   reportedInstallSource
-} from "./chunk-HU5LSYL2.js";
+} from "./chunk-VMNI33F5.js";
 import {
   getApiKey,
   getBaseUrl
@@ -44,7 +44,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   toToolLookup
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -58,7 +58,7 @@ var policyRequestFor = (agentType) => ({
   repoAware: REPO_AWARE_AGENTS.includes(agentType)
 });
 var policyCacheFile = (apiKey, agent, repoAware = false) => {
-  const parts = [apiKey, agent, repoAware ? "repoAware" : void 0].filter(Boolean);
+  const parts = [apiKey, agent, repoAware ? "repoAware" : void 0, "sessionToolAware"].filter(Boolean);
   const hash = createHash("sha256").update(parts.join(":")).digest("hex").slice(0, 12);
   return join(tmpdir(), `pushary-policy-${hash}.json`);
 };
@@ -69,6 +69,7 @@ var fetchPolicy = async (apiKey, agent, repoAware = false, sessionId) => {
     if (agent) params.set("agent", agent);
     if (repoAware) params.set("repoAware", "1");
     params.set("scopeAware", "1");
+    params.set("sessionToolAware", "1");
     if (sessionId) params.set("sessionId", sessionId);
     const query = params.toString();
     const url = query ? `${baseUrl}/api/mcp/policy?${query}` : `${baseUrl}/api/mcp/policy`;

package/dist/{chunk-WOLPADR6.js → chunk-7JSE6JTZ.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-6IU45EHE.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-TZGCUNOX.js → chunk-A2GS2ENL.js}

@@ -6,16 +6,16 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-WNJSGZY7.js";
+} from "./chunk-KZBGITM4.js";
 import {
   ensureDaemonRunning
-} from "./chunk-X7FESZTD.js";
+} from "./chunk-DZ75BJ7V.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-TIWURSLS.js";
+} from "./chunk-SFNRAEEW.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -23,14 +23,14 @@ import {
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-2QT3GCU4.js";
+} from "./chunk-GP6SFVEN.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-6IU45EHE.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   readTranscriptPreference
-} from "./chunk-USQDVBEV.js";
+} from "./chunk-TDKE3V6W.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-TFKBFQCE.js → chunk-A5URWZTP.js}

@@ -7,7 +7,7 @@ import {
 import {
   COMPATIBLE_AGENT_TYPES,
   isValidApiKey
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", ...COMPATIBLE_AGENT_TYPES, "custom"];

package/dist/{chunk-M2LMXPJZ.js → chunk-ALG3IBLB.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-6IU45EHE.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-TUXFIVOH.js → chunk-B6TYEKJR.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-MDJJW3LP.js → chunk-BE4P7ERZ.js}

@@ -7,10 +7,10 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-D573TLP6.js";
+} from "./chunk-66BIMA62.js";
 import {
   canonicalJson
-} from "./chunk-6IU45EHE.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";
@@ -20,7 +20,7 @@ import {
   machineDecisionFor,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-2AUIEZYS.js → chunk-BK5F3FGE.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-UYDTFCHW.js";
+} from "./chunk-VZANUMIF.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-6IU45EHE.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-IV3RHICU.js → chunk-BW3Y2D24.js}

@@ -2,21 +2,21 @@ import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-5ZZG76S2.js";
+} from "./chunk-5MH5P366.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-X7FESZTD.js";
+} from "./chunk-DZ75BJ7V.js";
 import {
   getMachineId
-} from "./chunk-WOLPADR6.js";
+} from "./chunk-7JSE6JTZ.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-USQDVBEV.js";
+} from "./chunk-TDKE3V6W.js";
 import {
   getBaseUrl
 } from "./chunk-OSJEMXSR.js";

package/dist/{chunk-43LJSM4F.js → chunk-CSW6A2EW.js}

@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-X7FESZTD.js → chunk-DZ75BJ7V.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "./chunk-WOLPADR6.js";
+} from "./chunk-7JSE6JTZ.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-6IU45EHE.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   readControlMode
-} from "./chunk-USQDVBEV.js";
+} from "./chunk-TDKE3V6W.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-DTQNDR7C.js → chunk-E7MJBWSR.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-USQDVBEV.js";
+} from "./chunk-TDKE3V6W.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-6IU45EHE.js → chunk-F2OPOBRO.js}

@@ -2,7 +2,7 @@ import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 import {
   isReleaseVersion
 } from "./chunk-HWJW3CPO.js";

package/dist/{chunk-43ZDACBO.js → chunk-F4KRNFDE.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-6QFEQIPM.js → chunk-FDF72XHK.js}

@@ -1,9 +1,9 @@
 import {
   registerTranscript
-} from "./chunk-TZGCUNOX.js";
+} from "./chunk-A2GS2ENL.js";
 import {
   degradedLine
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-R5KY3PBN.js → chunk-FI3LQCUH.js}

@@ -3,28 +3,28 @@ import {
   addPusharyToolPermissions,
   isPusharyHook,
   removeClaudeMcpServers
-} from "./chunk-4ERLRNOK.js";
+} from "./chunk-HWG7X3VI.js";
 import {
   CLAUDE_HOOK_EVENTS,
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-2AUIEZYS.js";
+} from "./chunk-BK5F3FGE.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-D573TLP6.js";
+} from "./chunk-66BIMA62.js";
 import {
   guardBinary,
   holdBudgetOf,
   registerHookEntry
-} from "./chunk-6IU45EHE.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   PHONE_ANSWERED_TOOLS,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/compatible-config.ts
 import { homedir } from "os";

package/dist/{chunk-KHXVTWYS.js → chunk-G5LENVCZ.js}

@@ -1,12 +1,12 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-TUXFIVOH.js";
+} from "./chunk-B6TYEKJR.js";
 import {
   codexHomeFrom
-} from "./chunk-6IU45EHE.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-K3QVDAZW.js → chunk-GDXSCXQC.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-5HYNICS7.js → chunk-GOXINLDU.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-2QT3GCU4.js → chunk-GP6SFVEN.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-USQDVBEV.js";
+} from "./chunk-TDKE3V6W.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-4ERLRNOK.js → chunk-HWG7X3VI.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-2AUIEZYS.js";
+} from "./chunk-BK5F3FGE.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-6IU45EHE.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-WNJSGZY7.js → chunk-KZBGITM4.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-TFKBFQCE.js";
+} from "./chunk-A5URWZTP.js";
 import {
   isBridgeLocator
-} from "./chunk-K3QVDAZW.js";
+} from "./chunk-GDXSCXQC.js";
 import {
   pusharyHookExecutable
-} from "./chunk-Z4VGIBJ7.js";
+} from "./chunk-MOQOJOMD.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-5UQ5ATIE.js";
+} from "./chunk-OR3A3RLH.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-Z4VGIBJ7.js → chunk-MOQOJOMD.js}

@@ -2,17 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-2AUIEZYS.js";
+} from "./chunk-BK5F3FGE.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-6IU45EHE.js";
+} from "./chunk-F2OPOBRO.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-T4QY64OR.js";
+} from "./chunk-YFD7CRIZ.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-HUAOMX4U.js → chunk-NDS27FXU.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-2AUIEZYS.js";
+} from "./chunk-BK5F3FGE.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-YAWXKL2X.js → chunk-NYD7W7AT.js}

@@ -1,6 +1,6 @@
 import {
   resolvePathBinary
-} from "./chunk-6IU45EHE.js";
+} from "./chunk-F2OPOBRO.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";