@pushary/agent-hooks 1.6.3 → 1.6.4

package/dist/bin/pushary-stopfailure-hook.js

@@ -2,41 +2,43 @@
 import {
   activeHookSource,
   activeIdentity
-} from "../chunk-BG6OCZ4N.js";
-import "../chunk-H3FEVIQD.js";
+} from "../chunk-LJEL7IB5.js";
+import "../chunk-ZA5UXRNE.js";
 import {
   readHookInput
-} from "../chunk-JX67DVMY.js";
-import "../chunk-LDS4ERW4.js";
+} from "../chunk-UAP556WK.js";
+import "../chunk-D3K2FPPJ.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-REYWOCQJ.js";
-import "../chunk-HCVAMXHT.js";
-import "../chunk-GQPCPEG2.js";
-import "../chunk-SND3C2AV.js";
-import "../chunk-QKOVVL7I.js";
-import "../chunk-57DDP4TB.js";
-import "../chunk-VDMX5EMU.js";
-import "../chunk-KNIIFNNQ.js";
+import "../chunk-5SWQZ6HY.js";
+import "../chunk-I2YUMZLE.js";
+import "../chunk-I3XJATMR.js";
+import "../chunk-YXPGFRRW.js";
+import "../chunk-OZE2TQX5.js";
+import "../chunk-7CLTSZOL.js";
+import "../chunk-LQI7W4RG.js";
+import "../chunk-XOMH53NB.js";
 import "../chunk-66H2QQAK.js";
-import "../chunk-JBU7XKY2.js";
+import "../chunk-VA2R64I7.js";
 import "../chunk-XHKBHWLX.js";
 import {
   handleStopFailure
-} from "../chunk-JBXUKGZS.js";
-import "../chunk-BEHGVU4W.js";
-import "../chunk-LVHGSD5E.js";
-import "../chunk-LM2IOEDK.js";
-import "../chunk-3BJQYXTL.js";
+} from "../chunk-H6XU22TN.js";
+import "../chunk-YUGGNZSF.js";
+import "../chunk-EREBZHN2.js";
+import "../chunk-VOCZHOXV.js";
+import "../chunk-POFBE6ZY.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-CWIARY6F.js";
-import "../chunk-HETOKNIL.js";
-import "../chunk-SAF6HGAA.js";
+import "../chunk-R4HVHTNA.js";
+import "../chunk-BJENQBMH.js";
+import "../chunk-DESAUCH2.js";
+import "../chunk-DZTKLE7Q.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-NPGOQQCV.js";
+import "../chunk-VHNDE3ZD.js";
+import "../chunk-K32C2RGK.js";
 import "../chunk-T7E75EKA.js";
 import "../chunk-OSJEMXSR.js";
-import "../chunk-GHOB245Q.js";
+import "../chunk-CAS7GFWI.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 

package/dist/bin/pushary-transcript-register.js

@@ -1,30 +1,30 @@
 #!/usr/bin/env node
 import {
   registerTranscript
-} from "../chunk-LDS4ERW4.js";
+} from "../chunk-D3K2FPPJ.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-REYWOCQJ.js";
-import "../chunk-HCVAMXHT.js";
-import "../chunk-GQPCPEG2.js";
-import "../chunk-SND3C2AV.js";
-import "../chunk-QKOVVL7I.js";
-import "../chunk-57DDP4TB.js";
-import "../chunk-VDMX5EMU.js";
-import "../chunk-KNIIFNNQ.js";
+import "../chunk-5SWQZ6HY.js";
+import "../chunk-I2YUMZLE.js";
+import "../chunk-I3XJATMR.js";
+import "../chunk-YXPGFRRW.js";
+import "../chunk-OZE2TQX5.js";
+import "../chunk-7CLTSZOL.js";
+import "../chunk-LQI7W4RG.js";
+import "../chunk-XOMH53NB.js";
 import "../chunk-66H2QQAK.js";
-import "../chunk-JBU7XKY2.js";
+import "../chunk-VA2R64I7.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-BEHGVU4W.js";
-import "../chunk-LM2IOEDK.js";
-import "../chunk-3BJQYXTL.js";
+import "../chunk-YUGGNZSF.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-CWIARY6F.js";
+import "../chunk-R4HVHTNA.js";
+import "../chunk-DZTKLE7Q.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-NPGOQQCV.js";
+import "../chunk-VHNDE3ZD.js";
+import "../chunk-K32C2RGK.js";
 import "../chunk-T7E75EKA.js";
 import "../chunk-OSJEMXSR.js";
-import "../chunk-GHOB245Q.js";
+import "../chunk-CAS7GFWI.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 

package/dist/bin/pushary-transcripts.js

@@ -6,16 +6,16 @@ import {
 } from "../chunk-SGZJ5LYH.js";
 import {
   transcriptsEnabled
-} from "../chunk-JBU7XKY2.js";
+} from "../chunk-VA2R64I7.js";
 import {
   exitOnHelpFlag
 } from "../chunk-P4BNYJ5Q.js";
-import "../chunk-CWIARY6F.js";
+import "../chunk-R4HVHTNA.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-NPGOQQCV.js";
+import "../chunk-VHNDE3ZD.js";
 import "../chunk-T7E75EKA.js";
 import "../chunk-OSJEMXSR.js";
-import "../chunk-GHOB245Q.js";
+import "../chunk-CAS7GFWI.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 

package/dist/bin/pushary-upgrade.js

@@ -5,18 +5,18 @@ import {
 import {
   ensureCodexTrustAfterReapply,
   reapplyAllAgents
-} from "../chunk-WA7SQX6S.js";
-import "../chunk-WD6W7QDI.js";
-import "../chunk-YOCXPNQ5.js";
+} from "../chunk-YPONELWS.js";
+import "../chunk-PBKEYMAO.js";
+import "../chunk-53DN77WB.js";
 import {
   waitForMachineReadiness
-} from "../chunk-ILGL4L3J.js";
-import "../chunk-H3FEVIQD.js";
+} from "../chunk-JOGA3TL2.js";
+import "../chunk-ZA5UXRNE.js";
 import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-COGHCL6K.js";
+} from "../chunk-GBL4BTG3.js";
 import {
   AUTO_UPDATE_DISABLE_ENV,
   describeAutoUpdateCheck,
@@ -27,8 +27,8 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "../chunk-CTOK3AYA.js";
-import "../chunk-SND3C2AV.js";
+} from "../chunk-P4UYILQK.js";
+import "../chunk-YXPGFRRW.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
@@ -39,13 +39,24 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-QKOVVL7I.js";
-import "../chunk-57DDP4TB.js";
+} from "../chunk-OZE2TQX5.js";
+import "../chunk-7CLTSZOL.js";
 import {
   needsShell
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-BEHGVU4W.js";
-import "../chunk-LM2IOEDK.js";
+import "../chunk-YUGGNZSF.js";
+import "../chunk-POFBE6ZY.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-P4BNYJ5Q.js";
+import {
+  readControlMode
+} from "../chunk-R4HVHTNA.js";
+import "../chunk-DZTKLE7Q.js";
+import {
+  EXIT
+} from "../chunk-KZERVKTD.js";
+import "../chunk-VHNDE3ZD.js";
 import {
   LATEST_TAG,
   autoUpdateLock,
@@ -61,22 +72,12 @@ import {
   npmErrorMessage,
   resolveGlobalBinary,
   vscodePluginDir
-} from "../chunk-3BJQYXTL.js";
-import {
-  exitOnHelpFlag
-} from "../chunk-P4BNYJ5Q.js";
-import {
-  readControlMode
-} from "../chunk-CWIARY6F.js";
-import {
-  EXIT
-} from "../chunk-KZERVKTD.js";
-import "../chunk-NPGOQQCV.js";
+} from "../chunk-K32C2RGK.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey
 } from "../chunk-OSJEMXSR.js";
-import "../chunk-GHOB245Q.js";
+import "../chunk-CAS7GFWI.js";
 import {
   NPX_LATEST_COMMAND
 } from "../chunk-EA3IELHP.js";

package/dist/bin/pushary-wait.js

@@ -4,8 +4,8 @@ import {
 } from "../chunk-CVWG2N3Y.js";
 import {
   exitOnFailedResponse
-} from "../chunk-3UOC3GRO.js";
-import "../chunk-TZ4KUNZG.js";
+} from "../chunk-LFMOYHPY.js";
+import "../chunk-UGKDBJJX.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -15,18 +15,21 @@ import {
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-SAF6HGAA.js";
+import "../chunk-DESAUCH2.js";
+import "../chunk-DZTKLE7Q.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
+import "../chunk-K32C2RGK.js";
+import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-OSJEMXSR.js";
-import "../chunk-GHOB245Q.js";
+import "../chunk-CAS7GFWI.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 

package/dist/bin/pushary.js

@@ -1,11 +1,16 @@
 #!/usr/bin/env node
 import {
-  installProxyDispatcher
-} from "../chunk-SAF6HGAA.js";
+  installNetworkDefaults
+} from "../chunk-DESAUCH2.js";
+import "../chunk-DZTKLE7Q.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
+import "../chunk-K32C2RGK.js";
+import "../chunk-T7E75EKA.js";
+import "../chunk-OSJEMXSR.js";
+import "../chunk-CAS7GFWI.js";
 import {
   COMMANDS,
   isCommandName,
@@ -47,7 +52,7 @@ if (!supportsRuntime(process.versions.node)) {
   process.stderr.write("Pushary requires Node 20.17+, 22.13+, or 23.5+. Upgrade to a current Node LTS and retry.\n");
   process.exit(EXIT.USAGE);
 }
-installProxyDispatcher();
+installNetworkDefaults();
 var argv = process.argv.slice(2);
 var command = argv[0] ?? "";
 var wants = (...names) => argv.some((arg) => names.includes(arg));

package/dist/{chunk-NMRH3VX4.js → chunk-3LU74H52.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-CAS7GFWI.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-STOMNX4S.js → chunk-3VZX4NSP.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-CAS7GFWI.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-YOCXPNQ5.js → chunk-53DN77WB.js}

@@ -6,7 +6,7 @@ import {
   codexHooksJsonIn,
   isPusharyCodexCommand,
   resolvePathBinary
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-K32C2RGK.js";
 import {
   getPackageVersion
 } from "./chunk-HWJW3CPO.js";

package/dist/{chunk-REYWOCQJ.js → chunk-5SWQZ6HY.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-HCVAMXHT.js";
+} from "./chunk-I2YUMZLE.js";
 import {
   isBridgeLocator
-} from "./chunk-GQPCPEG2.js";
+} from "./chunk-I3XJATMR.js";
 import {
   pusharyHookExecutable
-} from "./chunk-SND3C2AV.js";
+} from "./chunk-YXPGFRRW.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-VDMX5EMU.js";
+} from "./chunk-LQI7W4RG.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-57YDFAPP.js → chunk-5U3FJ6YF.js}

@@ -1,7 +1,7 @@
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-BG6OCZ4N.js";
+} from "./chunk-LJEL7IB5.js";
 import {
   blockedActionFingerprint,
   defersToNativeMode,
@@ -9,11 +9,11 @@ import {
   hasBlockedActionHint,
   recordBlockedActionHint,
   reportMachineDenial
-} from "./chunk-UAV5MNKY.js";
+} from "./chunk-NYMPLNV3.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-4KSTLHWY.js";
+} from "./chunk-5UWV5GHM.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -36,7 +36,7 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-JBXUKGZS.js";
+} from "./chunk-H6XU22TN.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -48,10 +48,10 @@ import {
   requestGate,
   sendNotification,
   waitForQuestion
-} from "./chunk-LVHGSD5E.js";
+} from "./chunk-EREBZHN2.js";
 import {
   getMachineId
-} from "./chunk-LM2IOEDK.js";
+} from "./chunk-DZTKLE7Q.js";
 import {
   getApiKey,
   getBaseUrl
@@ -83,7 +83,7 @@ import {
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-CAS7GFWI.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";

package/dist/{chunk-4KSTLHWY.js → chunk-5UWV5GHM.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-CAS7GFWI.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-DX5FOQSO.js → chunk-6NLWK6ZV.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-HCVAMXHT.js";
+} from "./chunk-I2YUMZLE.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-CAS7GFWI.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-57DDP4TB.js → chunk-7CLTSZOL.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-BEHGVU4W.js";
+} from "./chunk-YUGGNZSF.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-K32C2RGK.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-CAS7GFWI.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-HETOKNIL.js → chunk-BJENQBMH.js}

@@ -1,6 +1,6 @@
 import {
-  installProxyDispatcher
-} from "./chunk-SAF6HGAA.js";
+  installNetworkDefaults
+} from "./chunk-DESAUCH2.js";
 import {
   getBaseUrl
 } from "./chunk-OSJEMXSR.js";
@@ -34,7 +34,7 @@ var withRetry = async (fn, options = {}) => {
 };
 
 // src/mcp-http.ts
-installProxyDispatcher();
+installNetworkDefaults();
 var parseSseJson = (body) => {
   const messages = [];
   for (const event of body.split(/\r?\n\r?\n/)) {

package/dist/{chunk-GHOB245Q.js → chunk-CAS7GFWI.js}

@@ -447,6 +447,34 @@ var compatibleTargetFiles = (profile) => {
   return [...seen.values()];
 };
 
+// ../contracts/src/redaction.ts
+var SECRET_REDACTION_RULES = [
+  { pattern: /\bpk_[A-Za-z0-9_]+\.[A-Za-z0-9_]+/g, replacement: "[redacted]" },
+  { pattern: /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, replacement: "[redacted key]" },
+  { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, replacement: "[redacted]" },
+  { pattern: /\b[spr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bwhsec_[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
+  { pattern: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bgithub_pat_[A-Za-z0-9_]{22,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bglpat-[A-Za-z0-9_-]{20,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bAIza[A-Za-z0-9_-]{35}\b/g, replacement: "[redacted]" },
+  { pattern: /\bAKIA[0-9A-Z]{16}\b/g, replacement: "[redacted]" },
+  { pattern: /\bnpm_[A-Za-z0-9]{36}\b/g, replacement: "[redacted]" },
+  { pattern: /\bxai-[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
+  { pattern: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, replacement: "[redacted]" },
+  { pattern: /\b([a-z][a-z0-9+.-]*:\/\/[^\s:/@]+:)[^\s@/]+@/gi, replacement: "$1[redacted]@" },
+  { pattern: /\bbearer\s+[A-Za-z0-9._~+/=-]+/gi, replacement: "bearer [redacted]" },
+  { pattern: /\bauthorization:\s*\S+/gi, replacement: "authorization: [redacted]" },
+  {
+    pattern: /((?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)\s*[=:]\s*)("[^"]*"|'[^']*'|\S+)/gi,
+    replacement: "$1[redacted]"
+  }
+];
+var HIGH_ENTROPY_RULE = { pattern: /[A-Za-z0-9+/]{40,}={0,2}/g, replacement: "[redacted]" };
+var redactSecrets = (text) => SECRET_REDACTION_RULES.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
+var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
+
 // ../contracts/src/degraded.ts
 var DEGRADED_PREFIX = "[degraded]";
 var degradedPayload = (subsystem, report) => ({
@@ -475,6 +503,33 @@ var SETUP_AGENT_CHOICES = [
 var SETUP_CONNECT_MODES = ["app", "browser", "web", "none"];
 var isSetupConnectMode = (value) => typeof value === "string" && SETUP_CONNECT_MODES.includes(value);
 
+// ../contracts/src/observability.ts
+var CLIENT_CONTEXT_HEADERS = {
+  surface: "x-pushary-surface",
+  clientVersion: "x-pushary-client-version",
+  machineId: "x-pushary-machine-id",
+  runId: "x-pushary-run-id",
+  platform: "x-pushary-platform"
+};
+var CLIENT_REPORT_PATH = "/api/agent/client-report";
+var CLIENT_VERSION_PATTERN = /^\d+(?:\.\d+){1,3}(?:[-+][0-9A-Za-z.-]+)?$/;
+var CONTEXT_ID_PATTERN = /^[A-Za-z0-9-]{8,64}$/;
+var PLATFORM_PATTERN = /^[a-z0-9_.-]{1,32}$/;
+var CONTEXT_VALUE_MAX_LENGTH = 64;
+var isClientVersion = (value) => typeof value === "string" && value.length <= CONTEXT_VALUE_MAX_LENGTH && CLIENT_VERSION_PATTERN.test(value);
+var isContextId = (value) => typeof value === "string" && CONTEXT_ID_PATTERN.test(value);
+var isClientPlatform = (value) => typeof value === "string" && PLATFORM_PATTERN.test(value);
+var clientContextHeaders = (source) => {
+  const headers = {
+    [CLIENT_CONTEXT_HEADERS.surface]: source.surface,
+    [CLIENT_CONTEXT_HEADERS.runId]: source.runId
+  };
+  if (isClientVersion(source.clientVersion)) headers[CLIENT_CONTEXT_HEADERS.clientVersion] = source.clientVersion;
+  if (isContextId(source.machineId)) headers[CLIENT_CONTEXT_HEADERS.machineId] = source.machineId;
+  if (isClientPlatform(source.platform)) headers[CLIENT_CONTEXT_HEADERS.platform] = source.platform;
+  return headers;
+};
+
 // ../contracts/src/index.ts
 var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
@@ -1545,31 +1600,6 @@ var computeDeltaSignal = (input) => {
   }
   return { deltaSignal: "match", deltaScore: 0, remoteApprove: !destructive };
 };
-var SECRET_REDACTION_RULES = [
-  { pattern: /\bpk_[A-Za-z0-9_]+\.[A-Za-z0-9_]+/g, replacement: "[redacted]" },
-  { pattern: /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, replacement: "[redacted key]" },
-  { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, replacement: "[redacted]" },
-  { pattern: /\b[spr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bwhsec_[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
-  { pattern: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bgithub_pat_[A-Za-z0-9_]{22,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bglpat-[A-Za-z0-9_-]{20,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bAIza[A-Za-z0-9_-]{35}\b/g, replacement: "[redacted]" },
-  { pattern: /\bAKIA[0-9A-Z]{16}\b/g, replacement: "[redacted]" },
-  { pattern: /\bnpm_[A-Za-z0-9]{36}\b/g, replacement: "[redacted]" },
-  { pattern: /\bxai-[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
-  { pattern: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bbearer\s+[A-Za-z0-9._~+/=-]+/gi, replacement: "bearer [redacted]" },
-  { pattern: /\bauthorization:\s*\S+/gi, replacement: "authorization: [redacted]" },
-  {
-    pattern: /((?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)\s*[=:]\s*)("[^"]*"|'[^']*'|\S+)/gi,
-    replacement: "$1[redacted]"
-  }
-];
-var HIGH_ENTROPY_RULE = { pattern: /[A-Za-z0-9+/]{40,}={0,2}/g, replacement: "[redacted]" };
-var redactSecrets = (text) => SECRET_REDACTION_RULES.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
-var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
 var AUTHORIZATION_CANONICAL_VERSION = "pushary.authz.v1";
 var AUTHORIZATION_CANONICAL_FIXTURE = [
   {
@@ -2489,6 +2519,8 @@ export {
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
   compatibleTargetFiles,
+  redactSecrets,
+  redactSecretsDeep,
   degradedLine,
   hookWritePath,
   isHookActivationReport,
@@ -2497,6 +2529,8 @@ export {
   SETUP_AGENT_CHOICES,
   SETUP_CONNECT_MODES,
   isSetupConnectMode,
+  CLIENT_REPORT_PATH,
+  clientContextHeaders,
   normalizeKeyScope,
   parseAgentQuestion,
   parseAgentQuestions,
@@ -2524,8 +2558,6 @@ export {
   isValidApiKey,
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
-  redactSecrets,
-  redactSecretsDeep,
   isAnswerSource,
   buildDecisionEpisodeFeatures,
   resolveAutoResolveOrigin,

package/dist/{chunk-LDS4ERW4.js → chunk-D3K2FPPJ.js}

@@ -6,16 +6,16 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-REYWOCQJ.js";
+} from "./chunk-5SWQZ6HY.js";
 import {
   ensureDaemonRunning
-} from "./chunk-QKOVVL7I.js";
+} from "./chunk-OZE2TQX5.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-KNIIFNNQ.js";
+} from "./chunk-XOMH53NB.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -23,14 +23,14 @@ import {
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-JBU7XKY2.js";
+} from "./chunk-VA2R64I7.js";
+import {
+  readTranscriptPreference
+} from "./chunk-R4HVHTNA.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-3BJQYXTL.js";
-import {
-  readTranscriptPreference
-} from "./chunk-CWIARY6F.js";
+} from "./chunk-K32C2RGK.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";