@pushary/agent-hooks 1.7.0 → 1.7.1

package/dist/{chunk-L4H2Q2S4.js → chunk-NAAZCNKI.js}

@@ -1,15 +1,15 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-YYINL576.js";
+} from "./chunk-2FU43B5Q.js";
 import {
   openCodeConfigDirFrom
-} from "./chunk-B3YQANFN.js";
+} from "./chunk-NID4UZDN.js";
 import {
   codexHomeFrom
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-454KMJHF.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-XFNVG3OV.js";
 
 // src/fx-config.ts
 var FX_SERVER_NAME = "pushary";
@@ -17,7 +17,7 @@ var FX_OPERATION_TIMEOUT_MS = 75e3;
 var FX_PROFILE_MAX_BYTES = 1024 * 1024 - 1;
 var FX_SETTINGS_MAX_BYTES = 64 * 1024;
 var FX_PUSHARY_TOOLS_RULE = "mcp_pushary_*";
-var FX_TOOL_DISCOVERY_NOTE = 'In fx, these tools are named mcp_pushary_ask_user, mcp_pushary_send_notification, mcp_pushary_wait_for_answer and mcp_pushary_cancel_question. They are not loaded at the start of a turn: find them with capability_search (query "pushary") or select one with mcp_select_tool. When the user may be away from this terminal, use mcp_pushary_ask_user rather than your built-in question prompt.';
+var FX_TOOL_DISCOVERY_NOTE = 'In fx, these tools are named mcp_pushary_ask_user, mcp_pushary_send_notification, mcp_pushary_wait_for_answer, mcp_pushary_cancel_question and mcp_pushary_propose_scope. fx does not load them at the start of a turn: call mcp_select_tool with the exact name, for example {"name": "mcp_pushary_ask_user"}, then call the tool. For fx this replaces the guidance above to ask the whole round in the terminal while the user is there: ask every question through mcp_pushary_ask_user, even while the user is at this terminal, rather than through ask_user_question. fx cannot show its own question prompt in the Mac notch or on the phone, so a question asked there waits unseen once the user steps away. Ask in your reply instead only when a Pushary handoffAction tells you to ask here, or when mcp_pushary_ask_user is unavailable or fails without one.';
 var ALLOW_ACTION = "allow";
 var PERMISSION_KEY = "permission";
 var WORKSPACES_KEY = "workspaces";
@@ -50,7 +50,9 @@ var FX_PROFILE_REFUSALS = {
 };
 var FX_SETTINGS_REFUSALS = {
   ...FX_JSON_REFUSALS,
-  "permission-not-object": 'has a "permission" value that is not an object'
+  "permission-not-object": 'has a "permission" value that is not an object',
+  "invalid-permission-rule": "has a permission rule fx rejects, so fx ignores the whole file",
+  "invalid-permission-mode": "has a permission_mode fx does not recognise, so fx ignores the whole file"
 };
 var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 var stringTokenEnd = (text, start) => {
@@ -182,6 +184,8 @@ var fxSettingsText = (settings) => fxFileText(settings, FX_SETTINGS_MAX_BYTES);
 var readFxSettings = (text) => {
   const read = readFxJsonObject(text, FX_SETTINGS_MAX_BYTES);
   if (read.kind === "refused") return read;
+  const invalid = fxSettingsRejection(read.value);
+  if (invalid) return { kind: "refused", reason: invalid };
   const permission = read.value[PERMISSION_KEY];
   if (permission !== void 0 && !asRecord(permission)) return { kind: "refused", reason: "permission-not-object" };
   return { kind: "settings", settings: read.value };
@@ -196,15 +200,15 @@ var withPusharyToolsAllowed = (settings) => {
     change: "added"
   };
 };
+var withoutPermissionRule = (settings, permission, rule) => {
+  const remaining = Object.fromEntries(Object.entries(permission).filter(([name]) => name !== rule));
+  const withoutPermission = Object.fromEntries(Object.entries(settings).filter(([key]) => key !== PERMISSION_KEY));
+  return Object.keys(remaining).length === 0 ? withoutPermission : { ...settings, [PERMISSION_KEY]: remaining };
+};
 var withoutPusharyToolsAllowed = (settings) => {
   const permission = asRecord(settings[PERMISSION_KEY]);
-  if (permission?.[FX_PUSHARY_TOOLS_RULE] !== ALLOW_ACTION) return { settings, removed: false };
-  const remaining = Object.fromEntries(Object.entries(permission).filter(([rule]) => rule !== FX_PUSHARY_TOOLS_RULE));
-  const withoutPermission = Object.fromEntries(Object.entries(settings).filter(([key]) => key !== PERMISSION_KEY));
-  return {
-    settings: Object.keys(remaining).length === 0 ? withoutPermission : { ...settings, [PERMISSION_KEY]: remaining },
-    removed: true
-  };
+  if (!permission || permission[FX_PUSHARY_TOOLS_RULE] !== ALLOW_ACTION) return { settings, removed: false };
+  return { settings: withoutPermissionRule(settings, permission, FX_PUSHARY_TOOLS_RULE), removed: true };
 };
 var pusharyToolsAllowed = (settings) => asRecord(settings[PERMISSION_KEY])?.[FX_PUSHARY_TOOLS_RULE] === ALLOW_ACTION;
 var overridesPusharyRule = (workspace) => {
@@ -212,6 +216,135 @@ var overridesPusharyRule = (workspace) => {
   return permission !== void 0 && !(FX_PUSHARY_TOOLS_RULE in permission);
 };
 var workspacesOverridingPusharyRule = (settings) => Object.entries(asRecord(settings[WORKSPACES_KEY]) ?? {}).filter(([, workspace]) => overridesPusharyRule(workspace)).map(([path]) => path);
+var FX_QUESTION_TOOL = "ask_user_question";
+var DENY_ACTION = "deny";
+var GLOBAL_TARGET_PATTERN = "*";
+var PERMISSION_MODE_KEY = "permission_mode";
+var FX_PERMISSION_MODE_ENV = "FX_PERMISSION_MODE";
+var FX_DEFAULT_PERMISSION_MODE = "auto";
+var FX_PERMISSION_MODE_SPELLINGS = {
+  ask: "ask",
+  auto: "auto",
+  "full-access": "full-access",
+  "full access": "full-access",
+  yolo: "full-access"
+};
+var FX_RULE_WHITESPACE = /^[ \t\r\n]+|[ \t\r\n]+$/g;
+var FX_QUESTION_RULE_RECEIPT = { rule: FX_QUESTION_TOOL, action: DENY_ACTION };
+var isFxQuestionRuleReceipt = (value) => {
+  const receipt = asRecord(value);
+  return receipt?.rule === FX_QUESTION_TOOL && receipt.action === DENY_ACTION;
+};
+var isFxRuleAction = (value) => value === "allow" || value === "ask" || value === DENY_ACTION;
+var fxRuleAction = (value) => {
+  if (typeof value !== "string") return null;
+  const action = value.toLowerCase();
+  return isFxRuleAction(action) ? action : null;
+};
+var parseFxPermissionMode = (value) => typeof value === "string" ? FX_PERMISSION_MODE_SPELLINGS[value.toLowerCase()] ?? null : null;
+var trimFxRuleText = (text) => text.replace(FX_RULE_WHITESPACE, "");
+var isValidPatternMap = (value) => {
+  const patterns = asRecord(value);
+  return patterns !== void 0 && Object.values(patterns).every((action) => fxRuleAction(action) !== null);
+};
+var isValidPermissionValue = (value) => {
+  if (fxRuleAction(value) !== null) return true;
+  const permission = asRecord(value);
+  return permission !== void 0 && Object.entries(permission).every(([name, rule]) => trimFxRuleText(name).length > 0 && (fxRuleAction(rule) !== null || isValidPatternMap(rule)));
+};
+var permissionScopeRejection = (scope) => {
+  if (scope[PERMISSION_KEY] !== void 0 && !isValidPermissionValue(scope[PERMISSION_KEY])) return "invalid-permission-rule";
+  if (scope[PERMISSION_MODE_KEY] !== void 0 && parseFxPermissionMode(scope[PERMISSION_MODE_KEY]) === null) return "invalid-permission-mode";
+  return null;
+};
+var workspaceScopes = (settings) => Object.values(asRecord(settings[WORKSPACES_KEY]) ?? {}).flatMap((workspace) => {
+  const scope = asRecord(workspace);
+  return scope ? [scope] : [];
+});
+var fxSettingsRejection = (settings) => [settings, ...workspaceScopes(settings)].map(permissionScopeRejection).find((rejection) => rejection !== null) ?? null;
+var rulesOfPermissionEntry = ([name, value]) => {
+  const permission = trimFxRuleText(name);
+  const action = fxRuleAction(value);
+  if (action) return [{ permission, pattern: GLOBAL_TARGET_PATTERN, action }];
+  return Object.entries(asRecord(value) ?? {}).flatMap(([pattern, target]) => {
+    const targetAction = fxRuleAction(target);
+    return targetAction ? [{ permission, pattern: trimFxRuleText(pattern), action: targetAction }] : [];
+  });
+};
+var fxPermissionRules = (permission) => {
+  const everything = fxRuleAction(permission);
+  if (everything) return [{ permission: GLOBAL_TARGET_PATTERN, pattern: GLOBAL_TARGET_PATTERN, action: everything }];
+  return Object.entries(asRecord(permission) ?? {}).flatMap(rulesOfPermissionEntry);
+};
+var fxWildcardMatch = (pattern, candidate) => {
+  let patternIndex = 0;
+  let candidateIndex = 0;
+  let starIndex = null;
+  let starCandidateIndex = 0;
+  while (candidateIndex < candidate.length) {
+    if (patternIndex < pattern.length && (pattern[patternIndex] === "?" || pattern[patternIndex] === candidate[candidateIndex])) {
+      patternIndex += 1;
+      candidateIndex += 1;
+    } else if (patternIndex < pattern.length && pattern[patternIndex] === "*") {
+      starIndex = patternIndex;
+      patternIndex += 1;
+      starCandidateIndex = candidateIndex;
+    } else if (starIndex === null) {
+      return false;
+    } else {
+      starCandidateIndex += 1;
+      candidateIndex = starCandidateIndex;
+      patternIndex = starIndex + 1;
+    }
+  }
+  while (pattern[patternIndex] === "*") patternIndex += 1;
+  return patternIndex === pattern.length;
+};
+var DIRECTORY_TREE_SUFFIX = "/**";
+var directoryTreeMatches = (pattern, candidate) => {
+  if (!pattern.endsWith(DIRECTORY_TREE_SUFFIX)) return false;
+  const directory = pattern.slice(0, -DIRECTORY_TREE_SUFFIX.length);
+  return candidate === directory || candidate.startsWith(directory) && candidate[directory.length] === "/";
+};
+var targetMatches = (pattern, candidate) => directoryTreeMatches(pattern, candidate) || fxWildcardMatch(pattern, candidate);
+var isGlobalTargetPattern = (pattern) => /^\*+$/.test(pattern);
+var decisionForTarget = (rules, target) => rules.filter((rule) => targetMatches(rule.pattern, target)).at(-1)?.action ?? null;
+var reopensTool = (rules, rule) => rule.action !== DENY_ACTION && decisionForTarget(rules, rule.pattern) !== DENY_ACTION && decisionForTarget(rules, rule.pattern) !== null;
+var fxRulesHideTool = (rules, toolName) => {
+  const matching = rules.filter((rule) => fxWildcardMatch(rule.permission, toolName));
+  const lastGlobalRule = matching.filter((rule) => isGlobalTargetPattern(rule.pattern)).at(-1);
+  if (lastGlobalRule?.action !== DENY_ACTION) return false;
+  return !matching.slice(matching.lastIndexOf(lastGlobalRule) + 1).some((rule) => reopensTool(matching, rule));
+};
+var effectivePermissionMode = (scope, environment) => parseFxPermissionMode(environment[FX_PERMISSION_MODE_ENV]) ?? parseFxPermissionMode(scope[PERMISSION_MODE_KEY]) ?? FX_DEFAULT_PERMISSION_MODE;
+var fxRunsWithoutRules = (settings, environment) => effectivePermissionMode(settings, environment) === "full-access";
+var fxQuestionToolHidden = (permission) => fxRulesHideTool(fxPermissionRules(permission), FX_QUESTION_TOOL);
+var fxQuestionRouting = (settings, environment) => {
+  if (fxRunsWithoutRules(settings, environment)) return "full-access";
+  return fxQuestionToolHidden(settings[PERMISSION_KEY]) ? "routed" : "overridden";
+};
+var withQuestionsRoutedToPushary = (settings) => {
+  const permission = asRecord(settings[PERMISSION_KEY]) ?? {};
+  const existing = permission[FX_QUESTION_TOOL];
+  if (existing === void 0) {
+    return { settings: { ...settings, [PERMISSION_KEY]: { ...permission, [FX_QUESTION_TOOL]: DENY_ACTION } }, change: "added" };
+  }
+  return { settings, change: fxRuleAction(existing) === DENY_ACTION ? "present" : "user-rule-kept" };
+};
+var withoutQuestionsRoutedToPushary = (settings, receipt) => {
+  const permission = asRecord(settings[PERMISSION_KEY]);
+  if (!permission || permission[FX_QUESTION_TOOL] === void 0) return { settings, outcome: "absent" };
+  if (!receipt) return { settings, outcome: "not-ours" };
+  if (fxRuleAction(permission[FX_QUESTION_TOOL]) !== DENY_ACTION) return { settings, outcome: "changed-after-setup" };
+  return { settings: withoutPermissionRule(settings, permission, FX_QUESTION_TOOL), outcome: "removed" };
+};
+var workspaceShowsQuestionTool = (workspace) => {
+  const scope = asRecord(workspace);
+  if (!scope) return false;
+  if (parseFxPermissionMode(scope[PERMISSION_MODE_KEY]) === "full-access") return true;
+  return scope[PERMISSION_KEY] !== void 0 && !fxQuestionToolHidden(scope[PERMISSION_KEY]);
+};
+var workspacesShowingQuestionTool = (settings) => Object.entries(asRecord(settings[WORKSPACES_KEY]) ?? {}).filter(([, workspace]) => workspaceShowsQuestionTool(workspace)).map(([path]) => path);
 
 // src/fx-files.ts
 import { existsSync, lstatSync, readFileSync, realpathSync } from "fs";
@@ -596,6 +729,13 @@ export {
   withoutPusharyToolsAllowed,
   pusharyToolsAllowed,
   workspacesOverridingPusharyRule,
+  FX_QUESTION_TOOL,
+  FX_QUESTION_RULE_RECEIPT,
+  isFxQuestionRuleReceipt,
+  fxQuestionRouting,
+  withQuestionsRoutedToPushary,
+  withoutQuestionsRoutedToPushary,
+  workspacesShowingQuestionTool,
   readFxFile,
   fxIgnoresInstructionsFile,
   registerPluginLocation,

package/dist/{chunk-B3YQANFN.js → chunk-NID4UZDN.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-XFNVG3OV.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-JNXVOU6Y.js → chunk-NQFGVAT6.js}

@@ -1,9 +1,9 @@
 import {
   installNetworkDefaults
-} from "./chunk-KW2RRR7D.js";
+} from "./chunk-JTQDP4ZL.js";
 import {
   getBaseUrl
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-OAL44FM2.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-BH2SKSSK.js → chunk-O5JD7UI5.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-XFNVG3OV.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-5RUIFDTP.js → chunk-O5PRIYFZ.js}

@@ -1,3 +1,28 @@
+// src/cli/terminal-row.ts
+var visibleLength = (text) => text.replace(/\x1b\[[0-9;]*m/g, "").length;
+var clipToRow = (text, columns) => {
+  const budget = columns - 4;
+  if (budget <= 1 || visibleLength(text) <= budget) return text;
+  let visible = 0;
+  let out = "";
+  for (let i = 0; i < text.length; i += 1) {
+    const escape = /^\x1b\[[0-9;]*m/.exec(text.slice(i));
+    if (escape) {
+      out += escape[0];
+      i += escape[0].length - 1;
+      continue;
+    }
+    if (visible >= budget - 1) break;
+    out += text[i];
+    visible += 1;
+  }
+  return `${out}\u2026`;
+};
+var terminalColumns = (stream = process.stdout) => {
+  const columns = stream.columns;
+  return typeof columns === "number" && columns > 0 ? columns : 80;
+};
+
 // src/cli/io.ts
 var truthyLevel = (value) => {
   if (value === void 0) return void 0;
@@ -15,6 +40,7 @@ var useColor = (context = {}, stream = process.stdout) => {
   return stream.isTTY === true;
 };
 var SPINNER_FRAMES = ["   ", ".  ", ".. ", "..."];
+var SPINNER_FRAME_WIDTH = SPINNER_FRAMES[0].length + 1;
 var SPINNER_INTERVAL_MS = 200;
 var describeError = (err) => {
   if (err instanceof Error) {
@@ -45,7 +71,7 @@ var createIo = (stream = process.stdout, context = {}) => {
 `);
   };
   const spinner = async (label, fn, options = {}) => {
-    if (!color) {
+    if (stream.isTTY !== true) {
       try {
         await fn();
         line(`  ${check()} ${label}`);
@@ -57,7 +83,7 @@ var createIo = (stream = process.stdout, context = {}) => {
     }
     let frame = 0;
     const timer = setInterval(() => {
-      stream.write(`\r  ${dim(SPINNER_FRAMES[frame++ % SPINNER_FRAMES.length])} ${label}`);
+      stream.write(`\r  ${dim(SPINNER_FRAMES[frame++ % SPINNER_FRAMES.length])} ${clipToRow(label, terminalColumns(stream) - SPINNER_FRAME_WIDTH)}\x1B[K`);
     }, SPINNER_INTERVAL_MS);
     try {
       await fn();
@@ -75,6 +101,8 @@ var createIo = (stream = process.stdout, context = {}) => {
 };
 
 export {
+  clipToRow,
+  terminalColumns,
   useColor,
   createIo
 };

package/dist/{chunk-V4AQBAVG.js → chunk-OAL44FM2.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-B3UXMSMW.js";
+} from "./chunk-EIZW73P5.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-KXMZMZD3.js → chunk-OTZHT34O.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-OAL44FM2.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-XNCMT7YY.js → chunk-P5CBNSYL.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-454KMJHF.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-JXUAXO74.js → chunk-Q7QRR6YL.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-454KMJHF.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-XFNVG3OV.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-BBKNJJVX.js → chunk-QPR33SHS.js}

@@ -1,21 +1,21 @@
 import {
   detectClaudeVersion
-} from "./chunk-O2LEPIU6.js";
+} from "./chunk-Y6GKOZBT.js";
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-7OS4IHGI.js";
+} from "./chunk-6SJQ442W.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-KYQXUGH7.js";
+} from "./chunk-WSC53O7I.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
   codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-PQ4F64M2.js";
+} from "./chunk-XDASEYRS.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -27,7 +27,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-ZQ7IDOKY.js";
+} from "./chunk-WZWXBTRF.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -47,7 +47,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-454KMJHF.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-LEZFOTMI.js → chunk-SNWNA3MQ.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-454KMJHF.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-R2XCLT6I.js → chunk-SVEMF2VO.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-CVALVGA7.js";
+} from "./chunk-XMN37YJH.js";
 import {
   isBridgeLocator
-} from "./chunk-5HLTWFJ6.js";
+} from "./chunk-MWVCDP64.js";
 import {
   pusharyHookExecutable
-} from "./chunk-PQ4F64M2.js";
+} from "./chunk-XDASEYRS.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-VKVIAZQO.js";
+} from "./chunk-XPMOCJHN.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-ROQK7IN3.js → chunk-UPKP67TA.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-OAL44FM2.js";
 import {
   normalizeInstallSource
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-XFNVG3OV.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-SQRWHALT.js → chunk-VCMFKZON.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-BH2SKSSK.js";
+} from "./chunk-O5JD7UI5.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-KXMZMZD3.js";
+} from "./chunk-OTZHT34O.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-IJ6ECPA6.js → chunk-WM3U2RUK.js}

@@ -1,30 +1,30 @@
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-DZURML2D.js";
+} from "./chunk-4C4NRDIC.js";
 import {
   cancelQuestion,
   isPolicyConfig,
   sendNotification,
   waitForAnswer
-} from "./chunk-EGKXSQCY.js";
+} from "./chunk-ZIIYTQHC.js";
 import {
   clientErrorKindOf,
   reportClientError
-} from "./chunk-V6QRSU2G.js";
+} from "./chunk-KSNAAMU5.js";
 import {
   withRetry
-} from "./chunk-JNXVOU6Y.js";
+} from "./chunk-NQFGVAT6.js";
 import {
   getMachineId
-} from "./chunk-XNCMT7YY.js";
+} from "./chunk-P5CBNSYL.js";
 import {
   reportedInstallSource
-} from "./chunk-ROQK7IN3.js";
+} from "./chunk-UPKP67TA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-OAL44FM2.js";
 import {
   ACTION_BODY_MAX,
   AGENT_LABELS_BY_TYPE,
@@ -48,7 +48,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   toToolLookup
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-XFNVG3OV.js";
 
 // src/policy.ts
 import { createHash } from "crypto";

package/dist/{chunk-KYQXUGH7.js → chunk-WSC53O7I.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-ZQ7IDOKY.js";
+} from "./chunk-WZWXBTRF.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-454KMJHF.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-XFNVG3OV.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-ZQ7IDOKY.js → chunk-WZWXBTRF.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-DZURML2D.js";
+} from "./chunk-4C4NRDIC.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-454KMJHF.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-XFNVG3OV.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-PQ4F64M2.js → chunk-XDASEYRS.js}

@@ -2,17 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-ZQ7IDOKY.js";
+} from "./chunk-WZWXBTRF.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-454KMJHF.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-XFNVG3OV.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-YROGUPOZ.js → chunk-XFNVG3OV.js}

@@ -156,7 +156,7 @@ var AGENTS = {
     label: "fx",
     connectVia: "Local MCP bridge",
     setupCommand: AGENT_HOOKS_SETUP_COMMAND,
-    capabilityNote: "fx has no hooks that other tools can register, so Pushary cannot answer fx's own approval prompts. fx's agent reaches Pushary through its MCP tools when it chooses to ask."
+    capabilityNote: "fx has no hooks that other tools can register, so Pushary cannot answer fx's own approval prompts. Setup turns off fx's terminal question tool so fx's agent asks through Pushary. fx's full-access mode ignores that setting; there the agent is only instructed to ask through Pushary."
   },
   qwen_code: {
     ...defaults,

package/dist/{chunk-CVALVGA7.js → chunk-XMN37YJH.js}

@@ -9,7 +9,7 @@ import {
   SETUP_CONNECT_MODES,
   isSetupConnectMode,
   isValidApiKey
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-XFNVG3OV.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-VKVIAZQO.js → chunk-XPMOCJHN.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-454KMJHF.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-B76WVEDX.js → chunk-XPTCPU6V.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-UOAQ6QMP.js";
+} from "./chunk-YZKS3ME3.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-O2LEPIU6.js → chunk-Y6GKOZBT.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-ZQ7IDOKY.js";
+} from "./chunk-WZWXBTRF.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-4F46VIEE.js → chunk-YQN7S57T.js}

@@ -2,27 +2,27 @@ import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-JXUAXO74.js";
+} from "./chunk-Q7QRR6YL.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-73T6MSU5.js";
+} from "./chunk-AAGLDXH4.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-UOAQ6QMP.js";
+} from "./chunk-YZKS3ME3.js";
 import {
   getMachineId
-} from "./chunk-XNCMT7YY.js";
+} from "./chunk-P5CBNSYL.js";
 import {
   getBaseUrl
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-OAL44FM2.js";
 import {
   getPackageVersion
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-XFNVG3OV.js";
 
 // src/machines.ts
 import { hostname } from "os";