@pushary/agent-hooks 1.6.3 → 1.7.0

package/dist/chunk-V6QRSU2G.js

@@ -0,0 +1,142 @@
+import {
+  CLIENT_REPORT_DISABLE_ENV,
+  isDisabledByEnv
+} from "./chunk-POFBE6ZY.js";
+import {
+  isNetworkFailure
+} from "./chunk-KW2RRR7D.js";
+import {
+  clientReportClaims
+} from "./chunk-DNJUSFBL.js";
+import {
+  getApiKey,
+  getBaseUrl
+} from "./chunk-V4AQBAVG.js";
+import {
+  CLIENT_REPORT_PATH,
+  degradedLine
+} from "./chunk-YROGUPOZ.js";
+
+// src/client-report-claim.ts
+import { createHash } from "crypto";
+import { closeSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";
+import { join } from "path";
+var CLIENT_REPORT_WINDOW_MS = 6e4;
+var CLAIM_DIRECTORY_MODE = 448;
+var CLAIM_FILE_MODE = 384;
+var CLAIM_KEY_HASH_LENGTH = 16;
+var CLAIM_FILE_PATTERN = /^[0-9a-f]{16}-(\d+)$/;
+var EXCLUSIVE_CREATE = "wx";
+var ALREADY_EXISTS = "EEXIST";
+var WINDOWS_KEPT_BEHIND = 1;
+var reportWindowOf = (now) => Math.floor(now / CLIENT_REPORT_WINDOW_MS);
+var claimFileName = (key, window) => `${createHash("sha256").update(key).digest("hex").slice(0, CLAIM_KEY_HASH_LENGTH)}-${window}`;
+var errorCodeOf = (error) => typeof error === "object" && error !== null && "code" in error && typeof error.code === "string" ? error.code : null;
+var claimWindowOf = (fileName) => {
+  const match = CLAIM_FILE_PATTERN.exec(fileName);
+  return match ? Number(match[1]) : null;
+};
+var isStaleClaim = (fileName, window) => {
+  const claimedWindow = claimWindowOf(fileName);
+  return claimedWindow !== null && claimedWindow < window - WINDOWS_KEPT_BEHIND;
+};
+var removeQuietly = (filePath) => {
+  try {
+    unlinkSync(filePath);
+  } catch {
+    return;
+  }
+};
+var removeStaleClaims = (claimsDir, window) => {
+  try {
+    for (const fileName of readdirSync(claimsDir)) {
+      if (isStaleClaim(fileName, window)) removeQuietly(join(claimsDir, fileName));
+    }
+  } catch {
+    return;
+  }
+};
+var claimReportWindow = (claimsDir, key, now) => {
+  const window = reportWindowOf(now);
+  try {
+    mkdirSync(claimsDir, { recursive: true, mode: CLAIM_DIRECTORY_MODE });
+    closeSync(openSync(join(claimsDir, claimFileName(key, window)), EXCLUSIVE_CREATE, CLAIM_FILE_MODE));
+  } catch (error) {
+    return errorCodeOf(error) === ALREADY_EXISTS ? "already_claimed" : "unavailable";
+  }
+  removeStaleClaims(claimsDir, window);
+  return "claimed";
+};
+
+// src/client-report.ts
+var CLIENT_REPORT_TIMEOUT_MS = 1e3;
+var readApiKey = () => {
+  try {
+    return getApiKey();
+  } catch {
+    return null;
+  }
+};
+var defaultDeps = () => ({
+  disabled: () => isDisabledByEnv(process.env, CLIENT_REPORT_DISABLE_ENV),
+  fetchImpl: fetch,
+  apiKey: readApiKey,
+  baseUrl: getBaseUrl,
+  now: Date.now,
+  claimsDir: clientReportClaims()
+});
+var reportKey = (event) => `${event.kind}:${event.code}`;
+var createClientErrorReporter = (deps) => {
+  const windowClaimedInProcess = /* @__PURE__ */ new Map();
+  const claimInProcess = (key, now) => {
+    if (windowClaimedInProcess.get(key) === reportWindowOf(now)) return false;
+    windowClaimedInProcess.set(key, reportWindowOf(now));
+    return true;
+  };
+  const claimReport = (key, now) => {
+    const claim = claimReportWindow(deps.claimsDir, key, now);
+    return claim === "unavailable" ? claimInProcess(key, now) : claim === "claimed";
+  };
+  return async (event) => {
+    try {
+      if (deps.disabled()) return;
+      const apiKey = deps.apiKey();
+      const now = deps.now();
+      if (!apiKey || !claimReport(reportKey(event), now)) return;
+      await deps.fetchImpl(`${deps.baseUrl()}${CLIENT_REPORT_PATH}`, {
+        method: "POST",
+        headers: { "Authorization": `Bearer ${apiKey}`, "Content-Type": "application/json" },
+        body: JSON.stringify({ ...event, occurredAt: new Date(now).toISOString() }),
+        signal: AbortSignal.timeout(CLIENT_REPORT_TIMEOUT_MS)
+      });
+    } catch {
+      return;
+    }
+  };
+};
+var processReporter = null;
+var inFlightReports = /* @__PURE__ */ new Set();
+var reportClientError = (event) => {
+  processReporter ??= createClientErrorReporter(defaultDeps());
+  const report = processReporter(event);
+  inFlightReports.add(report);
+  void report.finally(() => inFlightReports.delete(report));
+  return report;
+};
+var exitAfterClientReports = async (code) => {
+  await Promise.all(inFlightReports);
+  return process.exit(code);
+};
+var clientErrorKindOf = (error) => isNetworkFailure(error) ? "network" : "unexpected";
+var writeDegraded = (subsystem, report) => {
+  process.stderr.write(`${degradedLine(subsystem, report)}
+`);
+  void reportClientError({ kind: "degraded", code: `${subsystem}:${report.reason}` });
+};
+
+export {
+  reportClientError,
+  exitAfterClientReports,
+  clientErrorKindOf,
+  writeDegraded
+};

package/dist/{chunk-VDMX5EMU.js → chunk-VKVIAZQO.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-DNJUSFBL.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-BG6OCZ4N.js → chunk-WUNZAE7I.js}

@@ -3,28 +3,28 @@ import {
   addPusharyToolPermissions,
   isPusharyHook,
   removeClaudeMcpServers
-} from "./chunk-H3FEVIQD.js";
+} from "./chunk-KYQXUGH7.js";
 import {
   CLAUDE_HOOK_EVENTS,
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-57DDP4TB.js";
+} from "./chunk-ZQ7IDOKY.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-JBXUKGZS.js";
+} from "./chunk-IJ6ECPA6.js";
 import {
   guardBinary,
   holdBudgetOf,
   registerHookEntry
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-DNJUSFBL.js";
 import {
   PHONE_ANSWERED_TOOLS,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/compatible-config.ts
 import { homedir } from "os";

package/dist/{chunk-TZ4KUNZG.js → chunk-X6KDKOV5.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-SAF6HGAA.js";
+} from "./chunk-KW2RRR7D.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-OSJEMXSR.js";
+} from "./chunk-V4AQBAVG.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-LM2IOEDK.js → chunk-XNCMT7YY.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-DNJUSFBL.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";
@@ -18,6 +18,7 @@ var readMachineId = (filePath) => {
     return null;
   }
 };
+var readExistingMachineId = (options = {}) => readMachineId(options.filePath ?? join(pusharyDir(), "machine-id"));
 var getOrCreateMachineId = (options = {}) => {
   const filePath = options.filePath ?? join(pusharyDir(), "machine-id");
   const existing = readMachineId(filePath);
@@ -41,5 +42,6 @@ var getOrCreateMachineId = (options = {}) => {
 var getMachineId = (options = {}) => getOrCreateMachineId(options);
 
 export {
+  readExistingMachineId,
   getMachineId
 };

package/dist/{chunk-GHOB245Q.js → chunk-YROGUPOZ.js}

@@ -151,6 +151,13 @@ var AGENTS = {
     setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell, writes, edits and web fetches when OpenCode itself asks for permission."
   },
+  fx: {
+    ...defaults,
+    label: "fx",
+    connectVia: "Local MCP bridge",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    capabilityNote: "fx has no hooks that other tools can register, so Pushary cannot answer fx's own approval prompts. fx's agent reaches Pushary through its MCP tools when it chooses to ask."
+  },
   qwen_code: {
     ...defaults,
     label: "Qwen Code",
@@ -447,6 +454,34 @@ var compatibleTargetFiles = (profile) => {
   return [...seen.values()];
 };
 
+// ../contracts/src/redaction.ts
+var SECRET_REDACTION_RULES = [
+  { pattern: /\bpk_[A-Za-z0-9_]+\.[A-Za-z0-9_]+/g, replacement: "[redacted]" },
+  { pattern: /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, replacement: "[redacted key]" },
+  { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, replacement: "[redacted]" },
+  { pattern: /\b[spr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bwhsec_[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
+  { pattern: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bgithub_pat_[A-Za-z0-9_]{22,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bglpat-[A-Za-z0-9_-]{20,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g, replacement: "[redacted]" },
+  { pattern: /\bAIza[A-Za-z0-9_-]{35}\b/g, replacement: "[redacted]" },
+  { pattern: /\bAKIA[0-9A-Z]{16}\b/g, replacement: "[redacted]" },
+  { pattern: /\bnpm_[A-Za-z0-9]{36}\b/g, replacement: "[redacted]" },
+  { pattern: /\bxai-[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
+  { pattern: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, replacement: "[redacted]" },
+  { pattern: /\b([a-z][a-z0-9+.-]*:\/\/[^\s:/@]+:)[^\s@/]+@/gi, replacement: "$1[redacted]@" },
+  { pattern: /\bbearer\s+[A-Za-z0-9._~+/=-]+/gi, replacement: "bearer [redacted]" },
+  { pattern: /\bauthorization:\s*\S+/gi, replacement: "authorization: [redacted]" },
+  {
+    pattern: /((?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)["']?\s*[=:]\s*)(?:(")(?:\\[\s\S]|[^"\\])*(?:"|\\?$)|(')[^']*(?:'|$)|\S+)/gi,
+    replacement: "$1$2$3[redacted]$2$3"
+  }
+];
+var HIGH_ENTROPY_RULE = { pattern: /[A-Za-z0-9+/]{40,}={0,2}/g, replacement: "[redacted]" };
+var redactSecrets = (text) => SECRET_REDACTION_RULES.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
+var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
+
 // ../contracts/src/degraded.ts
 var DEGRADED_PREFIX = "[degraded]";
 var degradedPayload = (subsystem, report) => ({
@@ -469,12 +504,40 @@ var SETUP_AGENT_CHOICES = [
   "cursor",
   "vscode",
   "opencode",
+  "fx",
   ...COMPATIBLE_AGENT_TYPES,
   "custom"
 ];
 var SETUP_CONNECT_MODES = ["app", "browser", "web", "none"];
 var isSetupConnectMode = (value) => typeof value === "string" && SETUP_CONNECT_MODES.includes(value);
 
+// ../contracts/src/observability.ts
+var CLIENT_CONTEXT_HEADERS = {
+  surface: "x-pushary-surface",
+  clientVersion: "x-pushary-client-version",
+  machineId: "x-pushary-machine-id",
+  runId: "x-pushary-run-id",
+  platform: "x-pushary-platform"
+};
+var CLIENT_REPORT_PATH = "/api/agent/client-report";
+var CLIENT_VERSION_PATTERN = /^\d+(?:\.\d+){1,3}(?:[-+][0-9A-Za-z.-]+)?$/;
+var CONTEXT_ID_PATTERN = /^[A-Za-z0-9-]{8,64}$/;
+var PLATFORM_PATTERN = /^[a-z0-9_.-]{1,32}$/;
+var CONTEXT_VALUE_MAX_LENGTH = 64;
+var isClientVersion = (value) => typeof value === "string" && value.length <= CONTEXT_VALUE_MAX_LENGTH && CLIENT_VERSION_PATTERN.test(value);
+var isContextId = (value) => typeof value === "string" && CONTEXT_ID_PATTERN.test(value);
+var isClientPlatform = (value) => typeof value === "string" && PLATFORM_PATTERN.test(value);
+var clientContextHeaders = (source) => {
+  const headers = {
+    [CLIENT_CONTEXT_HEADERS.surface]: source.surface,
+    [CLIENT_CONTEXT_HEADERS.runId]: source.runId
+  };
+  if (isClientVersion(source.clientVersion)) headers[CLIENT_CONTEXT_HEADERS.clientVersion] = source.clientVersion;
+  if (isContextId(source.machineId)) headers[CLIENT_CONTEXT_HEADERS.machineId] = source.machineId;
+  if (isClientPlatform(source.platform)) headers[CLIENT_CONTEXT_HEADERS.platform] = source.platform;
+  return headers;
+};
+
 // ../contracts/src/index.ts
 var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
@@ -1269,8 +1332,7 @@ var DESTRUCTIVE_SUBCOMMANDS = /* @__PURE__ */ new Set([
 var DATA_LOSS_COMMAND_PATTERNS = [
   "Bash(git branch -D:*)",
   "Bash(git branch --delete:*)",
-  "Bash(git checkout --:*)",
-  "Bash(git checkout .:*)",
+  "Bash(git checkout:*)",
   "Bash(git restore:*)",
   "Bash(git stash drop:*)",
   "Bash(git stash clear:*)",
@@ -1545,31 +1607,6 @@ var computeDeltaSignal = (input) => {
   }
   return { deltaSignal: "match", deltaScore: 0, remoteApprove: !destructive };
 };
-var SECRET_REDACTION_RULES = [
-  { pattern: /\bpk_[A-Za-z0-9_]+\.[A-Za-z0-9_]+/g, replacement: "[redacted]" },
-  { pattern: /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, replacement: "[redacted key]" },
-  { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, replacement: "[redacted]" },
-  { pattern: /\b[spr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bwhsec_[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
-  { pattern: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bgithub_pat_[A-Za-z0-9_]{22,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bglpat-[A-Za-z0-9_-]{20,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bAIza[A-Za-z0-9_-]{35}\b/g, replacement: "[redacted]" },
-  { pattern: /\bAKIA[0-9A-Z]{16}\b/g, replacement: "[redacted]" },
-  { pattern: /\bnpm_[A-Za-z0-9]{36}\b/g, replacement: "[redacted]" },
-  { pattern: /\bxai-[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
-  { pattern: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, replacement: "[redacted]" },
-  { pattern: /\bbearer\s+[A-Za-z0-9._~+/=-]+/gi, replacement: "bearer [redacted]" },
-  { pattern: /\bauthorization:\s*\S+/gi, replacement: "authorization: [redacted]" },
-  {
-    pattern: /((?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)\s*[=:]\s*)("[^"]*"|'[^']*'|\S+)/gi,
-    replacement: "$1[redacted]"
-  }
-];
-var HIGH_ENTROPY_RULE = { pattern: /[A-Za-z0-9+/]{40,}={0,2}/g, replacement: "[redacted]" };
-var redactSecrets = (text) => SECRET_REDACTION_RULES.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
-var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
 var AUTHORIZATION_CANONICAL_VERSION = "pushary.authz.v1";
 var AUTHORIZATION_CANONICAL_FIXTURE = [
   {
@@ -2468,6 +2505,63 @@ var hookActivationResult = (report) => {
   return report && !report.truncated && report.evidence.length === 1 ? report.evidence[0].result : "unverified";
 };
 
+// src/cli/version.ts
+import { readFileSync } from "fs";
+import { dirname, join, parse } from "path";
+import { fileURLToPath } from "url";
+var PACKAGE_NAME = "@pushary/agent-hooks";
+var UNKNOWN_VERSION = "0.0.0";
+var findOwnPackageJson = (start) => {
+  const { root } = parse(start);
+  let dir = start;
+  while (true) {
+    const candidate = join(dir, "package.json");
+    try {
+      const pkg = JSON.parse(readFileSync(candidate, "utf-8"));
+      if (pkg.name === PACKAGE_NAME) return candidate;
+    } catch {
+    }
+    if (dir === root) return void 0;
+    const parent = dirname(dir);
+    if (parent === dir) return void 0;
+    dir = parent;
+  }
+};
+var getPackageVersion = () => {
+  const root = ownPackageRoot();
+  return (root === void 0 ? void 0 : packageVersionAt(root)) ?? UNKNOWN_VERSION;
+};
+var ownPackageRoot = () => {
+  try {
+    const found = findOwnPackageJson(dirname(fileURLToPath(import.meta.url)));
+    return found ? dirname(found) : void 0;
+  } catch {
+    return void 0;
+  }
+};
+var packageVersionAt = (packageRoot) => {
+  try {
+    const manifest = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf-8"));
+    const version = manifest && typeof manifest === "object" && "version" in manifest ? manifest.version : void 0;
+    return typeof version === "string" ? version : void 0;
+  } catch {
+    return void 0;
+  }
+};
+var isNewerVersion = (candidate, current) => {
+  const a = candidate.split(".").map((part) => parseInt(part, 10) || 0);
+  const b = current.split(".").map((part) => parseInt(part, 10) || 0);
+  for (let i = 0; i < 3; i++) {
+    if ((a[i] ?? 0) > (b[i] ?? 0)) return true;
+    if ((a[i] ?? 0) < (b[i] ?? 0)) return false;
+  }
+  return false;
+};
+var RELEASE_VERSION = /^\d+\.\d+\.\d+$/;
+var isReleaseVersion = (value) => RELEASE_VERSION.test(value);
+var majorOf = (version) => parseInt(version.split(".")[0] ?? "", 10) || 0;
+var isSameMajorVersion = (candidate, current) => majorOf(candidate) === majorOf(current);
+
 export {
   CLAUDE_CONNECTOR_URL,
   CLAUDE_CONNECTOR_GUIDE,
@@ -2489,6 +2583,8 @@ export {
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
   compatibleTargetFiles,
+  redactSecrets,
+  redactSecretsDeep,
   degradedLine,
   hookWritePath,
   isHookActivationReport,
@@ -2497,6 +2593,8 @@ export {
   SETUP_AGENT_CHOICES,
   SETUP_CONNECT_MODES,
   isSetupConnectMode,
+  CLIENT_REPORT_PATH,
+  clientContextHeaders,
   normalizeKeyScope,
   parseAgentQuestion,
   parseAgentQuestions,
@@ -2524,8 +2622,6 @@ export {
   isValidApiKey,
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
-  redactSecrets,
-  redactSecretsDeep,
   isAnswerSource,
   buildDecisionEpisodeFeatures,
   resolveAutoResolveOrigin,
@@ -2568,5 +2664,11 @@ export {
   readElicitationFields,
   planElicitationAsk,
   elicitationContent,
-  elicitationContentFromAnswers
+  elicitationContentFromAnswers,
+  getPackageVersion,
+  ownPackageRoot,
+  packageVersionAt,
+  isNewerVersion,
+  isReleaseVersion,
+  isSameMajorVersion
 };

package/dist/chunk-YYINL576.js

@@ -0,0 +1,120 @@
+import {
+  parseSseMessages
+} from "./chunk-JNXVOU6Y.js";
+import {
+  NPX_LATEST_COMMAND
+} from "./chunk-B3UXMSMW.js";
+
+// src/mcp-stdio-bridge.ts
+var MCP_BRIDGE_BINARY = "pushary-mcp";
+var MCP_BRIDGE_PATH = "/api/mcp/mcp";
+var MCP_BRIDGE_REQUEST_TIMEOUT_MS = 9e4;
+var JSON_RPC_PARSE_ERROR = -32700;
+var MCP_BRIDGE_ERROR = -32e3;
+var MCP_SESSION_HEADER = "mcp-session-id";
+var MCP_PROTOCOL_HEADER = "mcp-protocol-version";
+var INITIALIZE_METHOD = "initialize";
+var MISSING_KEY_MESSAGE = `Pushary has no API key for this machine. Run \`${NPX_LATEST_COMMAND} setup\`.`;
+var REJECTED_KEY_MESSAGE = `Pushary rejected this machine's API key. Run \`${NPX_LATEST_COMMAND} setup\` to sign in again.`;
+var PARSE_ERROR_MESSAGE = "Parse error";
+var NO_RESPONSE_MESSAGE = "Pushary sent no response.";
+var unreachableMessage = (err) => `Pushary is unreachable: ${err instanceof Error ? err.message : String(err)}`;
+var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+var isJsonRpcId = (value) => typeof value === "string" || typeof value === "number";
+var messagesOf = (payload) => Array.isArray(payload) ? payload : [payload];
+var requestOf = (message) => {
+  const record = asRecord(message);
+  return record && typeof record.method === "string" && isJsonRpcId(record.id) ? [{ id: record.id, method: record.method }] : [];
+};
+var requestsIn = (payload) => messagesOf(payload).flatMap(requestOf);
+var isJsonRpcMessage = (message) => asRecord(message)?.jsonrpc === "2.0";
+var responseIdOf = (message) => {
+  const record = asRecord(message);
+  return record && !("method" in record) && isJsonRpcId(record.id) ? record.id : void 0;
+};
+var bridgeError = (id, message, code = MCP_BRIDGE_ERROR) => ({
+  jsonrpc: "2.0",
+  id,
+  error: { code, message }
+});
+var parseBridgeLine = (line) => {
+  try {
+    return { ok: true, payload: JSON.parse(line) };
+  } catch {
+    return { ok: false };
+  }
+};
+var parseMcpMessages = (body, contentType) => {
+  if (!body.trim()) return [];
+  if (contentType?.includes("text/event-stream")) return parseSseMessages(body);
+  const parsed = parseBridgeLine(body);
+  return parsed.ok ? messagesOf(parsed.payload) : [];
+};
+var httpFailureMessage = (status, hasKey, body) => {
+  if (status === 401) return hasKey ? REJECTED_KEY_MESSAGE : MISSING_KEY_MESSAGE;
+  const detail = body.trim().slice(0, 300);
+  return detail ? `Pushary returned ${status}: ${detail}` : `Pushary returned ${status}.`;
+};
+var negotiatedProtocolOf = (messages, initializeIds) => {
+  for (const message of messages) {
+    const id = responseIdOf(message);
+    const version = asRecord(asRecord(message)?.result)?.protocolVersion;
+    if (id !== void 0 && initializeIds.has(id) && typeof version === "string") return version;
+  }
+  return void 0;
+};
+var createMcpStdioBridge = (deps) => {
+  let sessionId = null;
+  let protocolVersion = null;
+  const headersFor = (apiKey) => ({
+    "Content-Type": "application/json",
+    "Accept": "application/json, text/event-stream",
+    ...apiKey ? { Authorization: `Bearer ${apiKey}` } : {},
+    ...sessionId ? { [MCP_SESSION_HEADER]: sessionId } : {},
+    ...protocolVersion ? { [MCP_PROTOCOL_HEADER]: protocolVersion } : {}
+  });
+  const failRequests = (requests, message, answered = /* @__PURE__ */ new Set()) => {
+    for (const request of requests) {
+      if (!answered.has(request.id)) deps.emit(bridgeError(request.id, message));
+    }
+  };
+  const post = async (line, apiKey) => deps.fetchImpl(deps.endpoint, {
+    method: "POST",
+    headers: headersFor(apiKey),
+    body: line,
+    signal: AbortSignal.timeout(deps.timeoutMs ?? MCP_BRIDGE_REQUEST_TIMEOUT_MS)
+  });
+  const forward = async (line) => {
+    const parsed = parseBridgeLine(line);
+    if (!parsed.ok) {
+      deps.emit(bridgeError(null, PARSE_ERROR_MESSAGE, JSON_RPC_PARSE_ERROR));
+      return;
+    }
+    const requests = requestsIn(parsed.payload);
+    const apiKey = deps.apiKey();
+    let response;
+    let body;
+    try {
+      response = await post(line, apiKey);
+      body = await response.text();
+    } catch (err) {
+      failRequests(requests, unreachableMessage(err));
+      return;
+    }
+    sessionId = response.headers.get(MCP_SESSION_HEADER) ?? sessionId;
+    const messages = parseMcpMessages(body, response.headers.get("content-type")).filter(isJsonRpcMessage);
+    const initializeIds = new Set(requests.filter((request) => request.method === INITIALIZE_METHOD).map((request) => request.id));
+    protocolVersion = negotiatedProtocolOf(messages, initializeIds) ?? protocolVersion;
+    for (const message of messages) deps.emit(message);
+    const answered = new Set(messages.map(responseIdOf).filter(isJsonRpcId));
+    const failure = response.ok ? NO_RESPONSE_MESSAGE : httpFailureMessage(response.status, apiKey !== null, body);
+    failRequests(requests, failure, answered);
+  };
+  return { forward };
+};
+
+export {
+  MCP_BRIDGE_BINARY,
+  MCP_BRIDGE_PATH,
+  createMcpStdioBridge
+};

package/dist/{chunk-57DDP4TB.js → chunk-ZQ7IDOKY.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-BEHGVU4W.js";
+} from "./chunk-DZURML2D.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-DNJUSFBL.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{reapply-IB7YE7BU.js → reapply-6PH3FMPX.js}

@@ -9,18 +9,17 @@ import {
   reapplyGeminiSettings,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-WA7SQX6S.js";
-import "./chunk-WD6W7QDI.js";
-import "./chunk-YOCXPNQ5.js";
-import "./chunk-H3FEVIQD.js";
-import "./chunk-SND3C2AV.js";
-import "./chunk-57DDP4TB.js";
+} from "./chunk-BBKNJJVX.js";
+import "./chunk-O2LEPIU6.js";
+import "./chunk-7OS4IHGI.js";
+import "./chunk-KYQXUGH7.js";
+import "./chunk-PQ4F64M2.js";
+import "./chunk-ZQ7IDOKY.js";
 import "./chunk-XHKBHWLX.js";
-import "./chunk-BEHGVU4W.js";
-import "./chunk-3BJQYXTL.js";
+import "./chunk-DZURML2D.js";
+import "./chunk-DNJUSFBL.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-GHOB245Q.js";
-import "./chunk-HWJW3CPO.js";
+import "./chunk-YROGUPOZ.js";
 export {
   ensureCodexTrustAfterReapply,
   inspectConfiguredManagedProviders,