@pushary/agent-hooks 1.6.4 → 1.7.0

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 1.7.0
+
+- **fx.** `npx @pushary/agent-hooks@latest setup --agents fx`, or ticking fx in the picker, connects Vercel Labs' fx coding agent. Setup adds a `pushary` server to `~/.fx/mcp.json` that runs the new `pushary-mcp` command, a local bridge that signs in with the key setup saved in `~/.pushary`. No key is written to fx's files, and a rotated key is used without running setup again. fx has no hooks other tools can register, so Pushary cannot answer fx's own approval prompts; fx's agent asks through Pushary's tools when it chooses to, guided by a managed block setup writes to `~/.fx/AGENTS.md`.
+- Setup adds `"mcp_pushary_*": "allow"` to the `permission` rules in `~/.fx/settings.json`, after your own rules, so fx runs Pushary's tools without reviewing or prompting for each call, the same as the other agents' auto-allowed Pushary tools. A rule you already set for `mcp_pushary_*` is kept. fx workspaces that set their own permission rules replace the global ones, and setup names how many there are.
+- Setup leaves `~/.fx/mcp.json` and `~/.fx/settings.json` untouched when fx itself would reject or refuse to edit them (comments, a trailing comma, a repeated key, or servers under a key fx ignores) and prints the command that retries only fx. It writes both files as compact JSON, the way fx does, and leaves a file alone rather than grow it past the size fx reads. It skips fx on a machine with no `~/.fx`, and on Windows, which fx does not support. fx is ticked automatically only when fx's own files are there, since other tools use `~/.fx` too.
+- `pushary doctor` checks the fx entry and that its bridge is installed, and warns when Pushary's tools are not auto-allowed. `pushary clean` removes only the Pushary server, the allow rule it added, and the instructions block.
+- `pushary setup --help` lists every agent id setup accepts.
+
 ## 1.6.4
 
 - Requests to Pushary now say which client made them: the CLI version, the platform, a per-process run id, and the machine id this machine already has. They go only to Pushary's own address, never to npm or any other host, and never include file paths, keys or content. Support can then find a problem from your account instead of asking for terminal output.

package/README.md

@@ -4,7 +4,7 @@
 [![npm downloads](https://img.shields.io/npm/dm/@pushary/agent-hooks.svg)](https://www.npmjs.com/package/@pushary/agent-hooks)
 [![license](https://img.shields.io/npm/l/@pushary/agent-hooks.svg)](./LICENSE)
 
-Push notifications, questions, and permission approvals for AI agents. Get a push when your agent finishes work, answer its questions from your phone, and approve risky commands before they run. Works with Claude Code, Codex, Cursor, VS Code, OpenCode, Gemini CLI, and Hermes.
+Push notifications, questions, and permission approvals for AI agents. Get a push when your agent finishes work, answer its questions from your phone, and approve risky commands before they run. Works with Claude Code, Codex, Cursor, VS Code, OpenCode, Gemini CLI, Hermes, and fx.
 
 Your agent froze waiting for a yes. This is how it reaches you.
 
@@ -111,6 +111,7 @@ npx @pushary/agent-hooks@latest doctor
 | Hermes | yes | yes | yes |
 | VS Code | yes | yes | yes |
 | OpenCode | yes | yes | yes |
+| fx | yes | yes | no |
 
 Any other MCP client can use notify and ask by pointing at the Pushary MCP endpoint directly.
 
@@ -184,7 +185,7 @@ failing closed would let one malformed download silence every hook on the machin
 
 ```
 cowork       Set up Claude Desktop and Cowork with the Pushary connector
-setup        Configure Claude Code, Codex, Gemini CLI, Hermes, Cursor, VS Code, or OpenCode with Pushary
+setup        Configure Claude Code, Codex, Gemini CLI, Hermes, Cursor, VS Code, OpenCode, or fx with Pushary
 claude       Run Claude Code through Pushary, reachable from your phone even when idle
 daemon       Keep this machine reachable so your phone can START a new session
 status       One screen: which key is in force, whether the server accepts it, what can receive an approval

package/dist/bin/pushary-bell-hook.js

@@ -1,39 +1,38 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-HUB4Q35G.js";
+} from "../chunk-6ADZQFVW.js";
 import {
   readHookInput
-} from "../chunk-UAP556WK.js";
-import "../chunk-D3K2FPPJ.js";
+} from "../chunk-UC65FJJT.js";
+import "../chunk-EAQMWJPG.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-5SWQZ6HY.js";
-import "../chunk-I2YUMZLE.js";
-import "../chunk-I3XJATMR.js";
-import "../chunk-YXPGFRRW.js";
-import "../chunk-OZE2TQX5.js";
-import "../chunk-7CLTSZOL.js";
-import "../chunk-LQI7W4RG.js";
-import "../chunk-XOMH53NB.js";
-import "../chunk-66H2QQAK.js";
-import "../chunk-VA2R64I7.js";
+import "../chunk-R2XCLT6I.js";
+import "../chunk-CVALVGA7.js";
+import "../chunk-5HLTWFJ6.js";
+import "../chunk-PQ4F64M2.js";
+import "../chunk-73T6MSU5.js";
+import "../chunk-ZQ7IDOKY.js";
+import "../chunk-VKVIAZQO.js";
+import "../chunk-BH2SKSSK.js";
+import "../chunk-KXMZMZD3.js";
+import "../chunk-B76WVEDX.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-YUGGNZSF.js";
-import "../chunk-VOCZHOXV.js";
+import "../chunk-DZURML2D.js";
+import "../chunk-V6QRSU2G.js";
 import "../chunk-POFBE6ZY.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-R4HVHTNA.js";
-import "../chunk-DESAUCH2.js";
-import "../chunk-DZTKLE7Q.js";
+import "../chunk-UOAQ6QMP.js";
+import "../chunk-KW2RRR7D.js";
+import "../chunk-XNCMT7YY.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-VHNDE3ZD.js";
-import "../chunk-K32C2RGK.js";
+import "../chunk-ROQK7IN3.js";
+import "../chunk-DNJUSFBL.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-OSJEMXSR.js";
-import "../chunk-CAS7GFWI.js";
-import "../chunk-EA3IELHP.js";
-import "../chunk-HWJW3CPO.js";
+import "../chunk-V4AQBAVG.js";
+import "../chunk-B3UXMSMW.js";
+import "../chunk-YROGUPOZ.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,38 +5,37 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-HUB4Q35G.js";
+} from "../chunk-6ADZQFVW.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-LQI7W4RG.js";
+} from "../chunk-VKVIAZQO.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   exitOnHelpFlag
-} from "../chunk-P4BNYJ5Q.js";
+} from "../chunk-2PS6QWDW.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-R4HVHTNA.js";
+import "../chunk-UOAQ6QMP.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-VHNDE3ZD.js";
+import "../chunk-ROQK7IN3.js";
 import {
   claudeSettings
-} from "../chunk-K32C2RGK.js";
+} from "../chunk-DNJUSFBL.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-T7E75EKA.js";
-import "../chunk-OSJEMXSR.js";
-import "../chunk-CAS7GFWI.js";
-import "../chunk-EA3IELHP.js";
-import "../chunk-HWJW3CPO.js";
+import "../chunk-V4AQBAVG.js";
+import "../chunk-B3UXMSMW.js";
+import "../chunk-YROGUPOZ.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,7 +8,7 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-LDRGVXLR.js";
+} from "../chunk-LEZFOTMI.js";
 import {
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
@@ -17,24 +17,24 @@ import {
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-D3K2FPPJ.js";
+} from "../chunk-EAQMWJPG.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-5SWQZ6HY.js";
-import "../chunk-I2YUMZLE.js";
-import "../chunk-I3XJATMR.js";
-import "../chunk-YXPGFRRW.js";
+import "../chunk-R2XCLT6I.js";
+import "../chunk-CVALVGA7.js";
+import "../chunk-5HLTWFJ6.js";
+import "../chunk-PQ4F64M2.js";
 import {
   ensureDaemonRunning
-} from "../chunk-OZE2TQX5.js";
-import "../chunk-7CLTSZOL.js";
-import "../chunk-LQI7W4RG.js";
+} from "../chunk-73T6MSU5.js";
+import "../chunk-ZQ7IDOKY.js";
+import "../chunk-VKVIAZQO.js";
 import {
   encryptRecord
-} from "../chunk-XOMH53NB.js";
-import "../chunk-66H2QQAK.js";
+} from "../chunk-BH2SKSSK.js";
+import "../chunk-KXMZMZD3.js";
 import {
   transcriptsEnabled
-} from "../chunk-VA2R64I7.js";
+} from "../chunk-B76WVEDX.js";
 import {
   needsShell,
   spawnClaude
@@ -56,8 +56,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-H6XU22TN.js";
-import "../chunk-YUGGNZSF.js";
+} from "../chunk-IJ6ECPA6.js";
+import "../chunk-DZURML2D.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -67,34 +67,33 @@ import {
   nextLongPollMs,
   waitForAnswer,
   withdrawQuestion
-} from "../chunk-EREBZHN2.js";
-import "../chunk-VOCZHOXV.js";
+} from "../chunk-EGKXSQCY.js";
+import "../chunk-V6QRSU2G.js";
 import "../chunk-POFBE6ZY.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-R4HVHTNA.js";
-import "../chunk-BJENQBMH.js";
-import "../chunk-DESAUCH2.js";
+import "../chunk-UOAQ6QMP.js";
+import "../chunk-JNXVOU6Y.js";
+import "../chunk-KW2RRR7D.js";
 import {
   getMachineId
-} from "../chunk-DZTKLE7Q.js";
+} from "../chunk-XNCMT7YY.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-VHNDE3ZD.js";
-import "../chunk-K32C2RGK.js";
+import "../chunk-ROQK7IN3.js";
+import "../chunk-DNJUSFBL.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-OSJEMXSR.js";
+} from "../chunk-V4AQBAVG.js";
+import {
+  NPX_LATEST_COMMAND
+} from "../chunk-B3UXMSMW.js";
 import {
   KILL_REASON,
   redactSecrets,
   resolveGate
-} from "../chunk-CAS7GFWI.js";
-import {
-  NPX_LATEST_COMMAND
-} from "../chunk-EA3IELHP.js";
-import "../chunk-HWJW3CPO.js";
+} from "../chunk-YROGUPOZ.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -7,14 +7,24 @@ import {
   createGuards,
   resolveHermesPython,
   runHermesPythonScript
-} from "../chunk-N62KAMMY.js";
+} from "../chunk-DANOZVZK.js";
 import "../chunk-P32LPT2L.js";
 import {
+  FX_PROFILE_REFUSALS,
+  FX_SETTINGS_REFUSALS,
+  fxProfileText,
+  fxSettingsText,
+  readFxFile,
+  readFxProfile,
+  readFxSettings,
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
-  vscodeSettingsTargets
-} from "../chunk-NFH73H5B.js";
+  vscodeSettingsTargets,
+  withoutFxPusharyServer,
+  withoutPusharyToolsAllowed
+} from "../chunk-L4H2Q2S4.js";
+import "../chunk-YYINL576.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -24,7 +34,7 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-3VZX4NSP.js";
+} from "../chunk-B3YQANFN.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -32,44 +42,44 @@ import {
   compatiblePermissionRuleFile,
   removeCompatibleHooks,
   removeCompatibleMcpServer
-} from "../chunk-LJEL7IB5.js";
+} from "../chunk-WUNZAE7I.js";
 import {
   isClaudeMcpSnapshot,
   removeClaudeMcpServers,
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-ZA5UXRNE.js";
+} from "../chunk-KYQXUGH7.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-5SWQZ6HY.js";
-import "../chunk-I2YUMZLE.js";
+} from "../chunk-R2XCLT6I.js";
+import "../chunk-CVALVGA7.js";
 import {
   liveBridgeProbe,
   resolveBridgeStub
-} from "../chunk-I3XJATMR.js";
+} from "../chunk-5HLTWFJ6.js";
 import {
   pusharyHookExecutable
-} from "../chunk-YXPGFRRW.js";
+} from "../chunk-PQ4F64M2.js";
 import {
   disableDaemonService
-} from "../chunk-OZE2TQX5.js";
+} from "../chunk-73T6MSU5.js";
 import {
   removeGeminiSettings
-} from "../chunk-7CLTSZOL.js";
-import "../chunk-LQI7W4RG.js";
+} from "../chunk-ZQ7IDOKY.js";
+import "../chunk-VKVIAZQO.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-H6XU22TN.js";
-import "../chunk-YUGGNZSF.js";
-import "../chunk-EREBZHN2.js";
-import "../chunk-VOCZHOXV.js";
+import "../chunk-IJ6ECPA6.js";
+import "../chunk-DZURML2D.js";
+import "../chunk-EGKXSQCY.js";
+import "../chunk-V6QRSU2G.js";
 import "../chunk-POFBE6ZY.js";
 import {
   exitOnHelpFlag
-} from "../chunk-P4BNYJ5Q.js";
+} from "../chunk-2PS6QWDW.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -77,15 +87,15 @@ import {
   CANDIDATE_RCS,
   isDisabledExport,
   removeClaudeAlias
-} from "../chunk-R4HVHTNA.js";
-import "../chunk-BJENQBMH.js";
-import "../chunk-DESAUCH2.js";
-import "../chunk-DZTKLE7Q.js";
+} from "../chunk-UOAQ6QMP.js";
+import "../chunk-JNXVOU6Y.js";
+import "../chunk-KW2RRR7D.js";
+import "../chunk-XNCMT7YY.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-VHNDE3ZD.js";
+import "../chunk-ROQK7IN3.js";
 import {
   bridgeAgentKey,
   claudeJson,
@@ -102,6 +112,9 @@ import {
   cursorUserHooks,
   cursorUserMcp,
   execNpm,
+  fxAgentsMd,
+  fxMcpProfile,
+  fxSettings,
   geminiMd,
   geminiSettings,
   hermesConfigReceipt,
@@ -114,9 +127,10 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-K32C2RGK.js";
+} from "../chunk-DNJUSFBL.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-OSJEMXSR.js";
+import "../chunk-V4AQBAVG.js";
+import "../chunk-B3UXMSMW.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_COMPATIBLE_PROFILES,
@@ -125,9 +139,7 @@ import {
   SUPPORT_EMAIL,
   isValidApiKey,
   redactSecrets
-} from "../chunk-CAS7GFWI.js";
-import "../chunk-EA3IELHP.js";
-import "../chunk-HWJW3CPO.js";
+} from "../chunk-YROGUPOZ.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync3 } from "fs";
@@ -528,6 +540,48 @@ var guardedAliasRemoval = () => {
 var writeJson = (path, data) => {
   guardedWrite(path, JSON.stringify(data, null, 2) + "\n");
 };
+var writeFxText = (path, rendered, label) => {
+  if (rendered.kind === "refused") {
+    console.log(`  ${skip} ${label} ${dim(`(${path} would grow past the size fx reads; left untouched)`)}`);
+    return;
+  }
+  guardedWrite(path, rendered.text);
+  console.log(`  ${check} ${label} ${dim(did("removed"))}`);
+};
+var removeFxMcpServer = () => {
+  const path = fxMcpProfile();
+  const read = readFxFile(path, readFxProfile);
+  if (read.kind === "missing") {
+    console.log(`  ${skip} fx MCP ${dim("(not found)")}`);
+  } else if (read.kind === "unreadable") {
+    console.log(`  ${skip} fx MCP ${dim(`(${path} could not be read; left untouched)`)}`);
+  } else if (read.kind === "refused") {
+    console.log(`  ${skip} fx MCP ${dim(`(${path} ${FX_PROFILE_REFUSALS[read.reason]}; left untouched)`)}`);
+  } else {
+    const { profile, removed } = withoutFxPusharyServer(read.profile);
+    if (removed) {
+      writeFxText(path, fxProfileText(profile), "fx MCP");
+    } else {
+      console.log(`  ${skip} fx MCP ${dim("(no pushary entry)")}`);
+    }
+  }
+};
+var removeFxToolsRule = () => {
+  const path = fxSettings();
+  const read = readFxFile(path, readFxSettings);
+  if (read.kind === "refused") {
+    console.log(`  ${skip} fx settings ${dim(`(${path} ${FX_SETTINGS_REFUSALS[read.reason]}; left untouched)`)}`);
+    return;
+  }
+  if (read.kind !== "settings") return;
+  const { settings, removed } = withoutPusharyToolsAllowed(read.settings);
+  if (removed) writeFxText(path, fxSettingsText(settings), "fx auto-allowed Pushary tools");
+};
+var removeFxInstructions = () => {
+  if (guardedInstructionBlockRemoval(fxAgentsMd())) {
+    console.log(`  ${check} fx instructions ${dim(did("removed"))}`);
+  }
+};
 var removeCursorUserHook = (scope) => {
   if (!existsSync6(CURSOR_USER_HOOKS)) return "absent";
   let parsed2;
@@ -1000,6 +1054,9 @@ var main = async () => {
   } else {
     console.log(`  ${skip} OpenCode MCP ${dim("(not found)")}`);
   }
+  removeFxMcpServer();
+  removeFxToolsRule();
+  removeFxInstructions();
   const hermesPython = resolveHermesPython();
   if (hermesPython) {
     const configUpdated = dryRun ? (wouldNote("run    ", "hermes plugin config restore"), true) : runHermesPythonScript(hermesPython, HERMES_CONFIG_SCRIPT, "clean", HERMES_CONFIG_RECEIPT);

package/dist/bin/pushary-codex-bridge.js

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
-import "../chunk-GBL4BTG3.js";
+import "../chunk-JXUAXO74.js";
 import {
   LiveTranscriptRelay,
   liveSessionSleep,
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-PJF7L7AA.js";
+} from "../chunk-SQRWHALT.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-LDRGVXLR.js";
-import "../chunk-XOMH53NB.js";
-import "../chunk-66H2QQAK.js";
+} from "../chunk-LEZFOTMI.js";
+import "../chunk-BH2SKSSK.js";
+import "../chunk-KXMZMZD3.js";
 import {
   transcriptsEnabled
-} from "../chunk-VA2R64I7.js";
+} from "../chunk-B76WVEDX.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -27,39 +27,38 @@ import {
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion
-} from "../chunk-EREBZHN2.js";
+} from "../chunk-EGKXSQCY.js";
 import {
   writeDegraded
-} from "../chunk-VOCZHOXV.js";
+} from "../chunk-V6QRSU2G.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-R4HVHTNA.js";
+import "../chunk-UOAQ6QMP.js";
 import {
   callMcpTool
-} from "../chunk-BJENQBMH.js";
-import "../chunk-DESAUCH2.js";
+} from "../chunk-JNXVOU6Y.js";
+import "../chunk-KW2RRR7D.js";
 import {
   getMachineId
-} from "../chunk-DZTKLE7Q.js";
+} from "../chunk-XNCMT7YY.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-VHNDE3ZD.js";
+import "../chunk-ROQK7IN3.js";
 import {
   resolveBinary
-} from "../chunk-K32C2RGK.js";
+} from "../chunk-DNJUSFBL.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-OSJEMXSR.js";
+} from "../chunk-V4AQBAVG.js";
+import "../chunk-B3UXMSMW.js";
 import {
   elicitationContent,
   parseAgentQuestion,
   parseAgentQuestionAnswers,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-CAS7GFWI.js";
-import "../chunk-EA3IELHP.js";
-import "../chunk-HWJW3CPO.js";
+} from "../chunk-YROGUPOZ.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-3LU74H52.js";
+} from "../chunk-J2355HR7.js";
 import {
   blockedActionFingerprint,
   codexCallKey,
@@ -13,33 +13,33 @@ import {
   recordCodexCallDecision,
   reportMachineDenial,
   userScope
-} from "../chunk-NYMPLNV3.js";
+} from "../chunk-52NVBNJT.js";
 import {
   triggerAutoUpdate
-} from "../chunk-P4UYILQK.js";
+} from "../chunk-BWYJ6AAF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-5UWV5GHM.js";
+} from "../chunk-2C7CCWVX.js";
 import {
   readHookInput
-} from "../chunk-UAP556WK.js";
+} from "../chunk-UC65FJJT.js";
 import {
   denyReasonFrom,
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
-import "../chunk-D3K2FPPJ.js";
+import "../chunk-EAQMWJPG.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-5SWQZ6HY.js";
-import "../chunk-I2YUMZLE.js";
-import "../chunk-I3XJATMR.js";
-import "../chunk-YXPGFRRW.js";
-import "../chunk-OZE2TQX5.js";
-import "../chunk-7CLTSZOL.js";
-import "../chunk-LQI7W4RG.js";
-import "../chunk-XOMH53NB.js";
-import "../chunk-66H2QQAK.js";
-import "../chunk-VA2R64I7.js";
+import "../chunk-R2XCLT6I.js";
+import "../chunk-CVALVGA7.js";
+import "../chunk-5HLTWFJ6.js";
+import "../chunk-PQ4F64M2.js";
+import "../chunk-73T6MSU5.js";
+import "../chunk-ZQ7IDOKY.js";
+import "../chunk-VKVIAZQO.js";
+import "../chunk-BH2SKSSK.js";
+import "../chunk-KXMZMZD3.js";
+import "../chunk-B76WVEDX.js";
 import "../chunk-XHKBHWLX.js";
 import {
   CODEX_AGENT,
@@ -76,8 +76,8 @@ import {
   toCodexWire,
   toPolicyLookup,
   toPolicyLookups
-} from "../chunk-H6XU22TN.js";
-import "../chunk-YUGGNZSF.js";
+} from "../chunk-IJ6ECPA6.js";
+import "../chunk-DZURML2D.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -89,32 +89,33 @@ import {
   requestGate,
   sendNotification,
   waitForQuestion
-} from "../chunk-EREBZHN2.js";
+} from "../chunk-EGKXSQCY.js";
 import {
   exitAfterClientReports
-} from "../chunk-VOCZHOXV.js";
+} from "../chunk-V6QRSU2G.js";
 import "../chunk-POFBE6ZY.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-R4HVHTNA.js";
-import "../chunk-BJENQBMH.js";
-import "../chunk-DESAUCH2.js";
+import "../chunk-UOAQ6QMP.js";
+import "../chunk-JNXVOU6Y.js";
+import "../chunk-KW2RRR7D.js";
 import {
   getMachineId
-} from "../chunk-DZTKLE7Q.js";
+} from "../chunk-XNCMT7YY.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-VHNDE3ZD.js";
+import "../chunk-ROQK7IN3.js";
 import {
   canonicalJson
-} from "../chunk-K32C2RGK.js";
+} from "../chunk-DNJUSFBL.js";
 import {
   writeFileAtomic
 } from "../chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "../chunk-OSJEMXSR.js";
+} from "../chunk-V4AQBAVG.js";
+import "../chunk-B3UXMSMW.js";
 import {
   CODEX_RESCUE_TOOL_NAME,
   DECISION_LINE_MAX,
@@ -128,9 +129,7 @@ import {
   hookWaitClamped,
   hookWaitDeadline,
   resolveGate
-} from "../chunk-CAS7GFWI.js";
-import "../chunk-EA3IELHP.js";
-import "../chunk-HWJW3CPO.js";
+} from "../chunk-YROGUPOZ.js";
 
 // bin/pushary-codex-hook.ts
 import { basename } from "path";
@@ -751,7 +750,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-4DAJKNVP.js");
+    const { repairCodexHolds } = await import("../reapply-6PH3FMPX.js");
     repairCodexHolds();
   } catch {
     return;