@pushary/agent-hooks 1.7.0 → 1.7.2

package/dist/{chunk-WUNZAE7I.js → chunk-T3PRPFDY.js}

@@ -3,28 +3,28 @@ import {
   addPusharyToolPermissions,
   isPusharyHook,
   removeClaudeMcpServers
-} from "./chunk-KYQXUGH7.js";
+} from "./chunk-KAJT6HPI.js";
 import {
   CLAUDE_HOOK_EVENTS,
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-ZQ7IDOKY.js";
+} from "./chunk-A6WQF7FQ.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-IJ6ECPA6.js";
+} from "./chunk-2B4XCMH6.js";
 import {
   guardBinary,
   holdBudgetOf,
   registerHookEntry
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-NYBZJ44G.js";
 import {
   PHONE_ANSWERED_TOOLS,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/compatible-config.ts
 import { homedir } from "os";

package/dist/{chunk-YYINL576.js → chunk-TVJYGZXB.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-JNXVOU6Y.js";
+} from "./chunk-D4OGEWLH.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-B3UXMSMW.js";
+} from "./chunk-65RN6ZCO.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-O2LEPIU6.js → chunk-U3MS6D5X.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-ZQ7IDOKY.js";
+} from "./chunk-A6WQF7FQ.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-5RUIFDTP.js → chunk-U4TMAANR.js}

@@ -1,3 +1,28 @@
+// src/cli/terminal-row.ts
+var visibleLength = (text) => text.replace(/\x1b\[[0-9;]*m/g, "").length;
+var clipToRow = (text, columns) => {
+  const budget = columns - 4;
+  if (budget <= 1 || visibleLength(text) <= budget) return text;
+  let visible = 0;
+  let out = "";
+  for (let i = 0; i < text.length; i += 1) {
+    const escape = /^\x1b\[[0-9;]*m/.exec(text.slice(i));
+    if (escape) {
+      out += escape[0];
+      i += escape[0].length - 1;
+      continue;
+    }
+    if (visible >= budget - 1) break;
+    out += text[i];
+    visible += 1;
+  }
+  return `${out}\u2026`;
+};
+var terminalColumns = (stream = process.stdout) => {
+  const columns = stream.columns;
+  return typeof columns === "number" && columns > 0 ? columns : 80;
+};
+
 // src/cli/io.ts
 var truthyLevel = (value) => {
   if (value === void 0) return void 0;
@@ -5,6 +30,8 @@ var truthyLevel = (value) => {
   const parsed = Number(value);
   return Number.isFinite(parsed) ? parsed : 1;
 };
+var ANSI_RESET = "\x1B[0m";
+var ansiPainter = (enabled) => (open) => (text) => enabled() ? `${open}${text}${ANSI_RESET}` : text;
 var useColor = (context = {}, stream = process.stdout) => {
   const forced = truthyLevel(process.env.FORCE_COLOR);
   if (forced !== void 0) return forced > 0;
@@ -15,6 +42,7 @@ var useColor = (context = {}, stream = process.stdout) => {
   return stream.isTTY === true;
 };
 var SPINNER_FRAMES = ["   ", ".  ", ".. ", "..."];
+var SPINNER_FRAME_WIDTH = SPINNER_FRAMES[0].length + 1;
 var SPINNER_INTERVAL_MS = 200;
 var describeError = (err) => {
   if (err instanceof Error) {
@@ -45,7 +73,7 @@ var createIo = (stream = process.stdout, context = {}) => {
 `);
   };
   const spinner = async (label, fn, options = {}) => {
-    if (!color) {
+    if (stream.isTTY !== true) {
       try {
         await fn();
         line(`  ${check()} ${label}`);
@@ -57,7 +85,7 @@ var createIo = (stream = process.stdout, context = {}) => {
     }
     let frame = 0;
     const timer = setInterval(() => {
-      stream.write(`\r  ${dim(SPINNER_FRAMES[frame++ % SPINNER_FRAMES.length])} ${label}`);
+      stream.write(`\r  ${dim(SPINNER_FRAMES[frame++ % SPINNER_FRAMES.length])} ${clipToRow(label, terminalColumns(stream) - SPINNER_FRAME_WIDTH)}\x1B[K`);
     }, SPINNER_INTERVAL_MS);
     try {
       await fn();
@@ -75,6 +103,9 @@ var createIo = (stream = process.stdout, context = {}) => {
 };
 
 export {
+  clipToRow,
+  terminalColumns,
+  ansiPainter,
   useColor,
   createIo
 };

package/dist/{chunk-KW2RRR7D.js → chunk-UFNBKYWT.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-XNCMT7YY.js";
+} from "./chunk-HOIGXMI7.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-SJN64NJX.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-DVQDPI3T.js → chunk-UUTWHVSV.js}

@@ -1,7 +1,7 @@
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-WUNZAE7I.js";
+} from "./chunk-T3PRPFDY.js";
 import {
   blockedActionFingerprint,
   defersToNativeMode,
@@ -9,17 +9,18 @@ import {
   hasBlockedActionHint,
   recordBlockedActionHint,
   reportMachineDenial
-} from "./chunk-52NVBNJT.js";
+} from "./chunk-IZVAVXHQ.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-2C7CCWVX.js";
+} from "./chunk-F6BMJOSW.js";
 import {
+  announceSubscriptionRequired,
   denyReasonFrom,
-  isDeferAnswer
-} from "./chunk-YHG74UFF.js";
+  isDeferAnswer,
+  oncePerSession
+} from "./chunk-5OP5MQI7.js";
 import {
-  DEFAULT_SESSION,
   UNNAMED_ACTION,
   claimThrottle,
   deriveAction,
@@ -36,9 +37,13 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-IJ6ECPA6.js";
+} from "./chunk-2B4XCMH6.js";
+import {
+  DEFAULT_SESSION
+} from "./chunk-N6IOSZOE.js";
 import {
   DECISION_STOP_REASON,
+  UNVERIFIABLE_APPROVAL_REASON,
   askUser,
   cancelQuestion,
   claimBlockedAction,
@@ -48,14 +53,17 @@ import {
   requestGate,
   sendNotification,
   waitForQuestion
-} from "./chunk-EGKXSQCY.js";
+} from "./chunk-2XOHXZRC.js";
+import {
+  SubscriptionRequiredError
+} from "./chunk-D4OGEWLH.js";
 import {
   getMachineId
-} from "./chunk-XNCMT7YY.js";
+} from "./chunk-HOIGXMI7.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-SJN64NJX.js";
 import {
   AGENT_QUESTION_STRATEGY,
   GATE_BLOCK_REASON_MAX_LENGTH,
@@ -83,7 +91,7 @@ import {
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";
@@ -152,9 +160,7 @@ var reportDecisionEpisode = async (apiKey, input) => {
 };
 
 // src/hook.ts
-import { basename, join as join2 } from "path";
-import { tmpdir } from "os";
-import { existsSync, writeFileSync } from "fs";
+import { basename } from "path";
 var START_MS = Date.now();
 var ACTIVE_AGENT = activeIdentity(process.argv);
 var ACTIVE_SOURCE = activeHookSource(process.argv);
@@ -164,6 +170,11 @@ var deny = (reason) => claudePreToolUseOutput("deny", reason);
 var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, updatedInput);
 var ask = (reason) => claudePreToolUseOutput("ask", reason);
 var halted = (reason) => stoppedOutput(deny(reason), reason);
+var outcomeOfFailedAsk = (error, sessionId, failure) => {
+  if (!(error instanceof SubscriptionRequiredError)) return failure;
+  announceSubscriptionRequired(error.upgradeUrl, sessionId);
+  return void 0;
+};
 var storedWaitDeadline = (result, requestedDeadline) => {
   const stored = result.waitEndsAt ? Date.parse(result.waitEndsAt) : Number.NaN;
   return Number.isFinite(stored) ? Math.min(stored, requestedDeadline) : requestedDeadline;
@@ -187,8 +198,8 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
       waitEndsAt: timeoutAction !== "approve" && timeoutAction !== "deny" || clampCut ? new Date(requestedDeadline).toISOString() : void 0,
       ...decision
     });
-  } catch {
-    return halted("Pushary could not create a verifiable approval. Retry the action.");
+  } catch (error) {
+    return outcomeOfFailedAsk(error, sessionId, halted(UNVERIFIABLE_APPROVAL_REASON));
   }
   if (isDecisionStopped(result)) return halted(DECISION_STOP_REASON);
   const deadline = storedWaitDeadline(result, requestedDeadline);
@@ -232,8 +243,8 @@ var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds,
       waitEndsAt: new Date(requestedDeadline).toISOString(),
       ...decision
     });
-  } catch {
-    return halted("Pushary could not create a verifiable approval. Retry the action.");
+  } catch (error) {
+    return outcomeOfFailedAsk(error, sessionId, halted(UNVERIFIABLE_APPROVAL_REASON));
   }
   if (isDecisionStopped(result)) return halted(DECISION_STOP_REASON);
   if (!isLocalQuestionHandoff(result) && !result.answered) announceWait(pushFirstSeconds, result.answerUrl, sessionId);
@@ -344,17 +355,6 @@ var announceWait = (waitSeconds, answerUrl, sessionId) => {
   }
 };
 var KEYLESS_NOTICE = "[pushary] Not connected (no API key), so your agent runs untouched. Approval moments are counted locally; see them with: npx @pushary/agent-hooks@latest stats. Connect: https://pushary.com/sign-up?utm_source=cli&utm_medium=keyless-hook";
-var oncePerSession = (kind, sessionId) => {
-  try {
-    const key = (sessionId || DEFAULT_SESSION).replace(/[^a-zA-Z0-9_-]/g, "");
-    const marker = join2(tmpdir(), `pushary-${kind}-${key}`);
-    if (existsSync(marker)) return false;
-    writeFileSync(marker, "1", "utf-8");
-    return true;
-  } catch {
-    return false;
-  }
-};
 var keylessNoticeOnce = (sessionId) => {
   try {
     if (!oncePerSession("keyless", sessionId)) return;
@@ -391,8 +391,8 @@ var askAsOneCard = async (apiKey, input, parsed, projectName, deadline) => {
       toolUseId: input.tool_use_id,
       waitEndsAt: new Date(deadline).toISOString()
     });
-  } catch {
-    return null;
+  } catch (error) {
+    return outcomeOfFailedAsk(error, input.session_id, null);
   }
   if (isDecisionStopped(result)) return null;
   const answer = await waitForQuestion(apiKey, result, storedWaitDeadline(result, deadline));
@@ -424,8 +424,8 @@ var askQuestionByQuestion = async (apiKey, input, parsed, projectName, deadline)
         toolUseId: input.tool_use_id ? `${input.tool_use_id}#q${index}` : void 0,
         waitEndsAt: new Date(deadline).toISOString()
       });
-    } catch {
-      return null;
+    } catch (error) {
+      return outcomeOfFailedAsk(error, input.session_id, null);
     }
     if (isDecisionStopped(result)) return null;
     const answer = await waitForQuestion(apiKey, result, storedWaitDeadline(result, deadline));
@@ -478,8 +478,8 @@ var handleExitPlanMode = async (apiKey, input) => {
       blocker: "Waiting for you to approve the plan",
       waitEndsAt: new Date(deadline).toISOString()
     });
-  } catch {
-    return halted(DECISION_STOP_REASON);
+  } catch (error) {
+    return outcomeOfFailedAsk(error, input.session_id, halted(DECISION_STOP_REASON));
   }
   if (isDecisionStopped(result)) return halted(DECISION_STOP_REASON);
   const answer = await waitForQuestion(apiKey, result, storedWaitDeadline(result, deadline));

package/dist/{chunk-X6KDKOV5.js → chunk-VQDJ6KB3.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-KW2RRR7D.js";
+} from "./chunk-UFNBKYWT.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-SJN64NJX.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-UOAQ6QMP.js → chunk-VSGKQ3HI.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-ROQK7IN3.js";
+} from "./chunk-LI3C2IQY.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,7 +9,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   configFilePath
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-SJN64NJX.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-YROGUPOZ.js → chunk-WWTLAZQA.js}

@@ -156,7 +156,7 @@ var AGENTS = {
     label: "fx",
     connectVia: "Local MCP bridge",
     setupCommand: AGENT_HOOKS_SETUP_COMMAND,
-    capabilityNote: "fx has no hooks that other tools can register, so Pushary cannot answer fx's own approval prompts. fx's agent reaches Pushary through its MCP tools when it chooses to ask."
+    capabilityNote: "fx has no hooks that other tools can register, so Pushary cannot answer fx's own approval prompts. Setup turns off fx's terminal question tool so fx's agent asks through Pushary. fx's full-access mode ignores that setting; there the agent is only instructed to ask through Pushary."
   },
   qwen_code: {
     ...defaults,
@@ -455,7 +455,19 @@ var compatibleTargetFiles = (profile) => {
 };
 
 // ../contracts/src/redaction.ts
-var SECRET_REDACTION_RULES = [
+var CREDENTIAL_KEY = String.raw`(?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)["']?\s*[=:]\s*`;
+var CLOSED_DOUBLE_QUOTE = '"';
+var CLOSED_SINGLE_QUOTE = "'";
+var DOUBLE_QUOTE_OR_CUT_OFF = String.raw`(?:"|\\?$)`;
+var SINGLE_QUOTE_OR_CUT_OFF = "(?:'|$)";
+var credentialAssignmentRule = (doubleQuoteEnd, singleQuoteEnd) => ({
+  pattern: new RegExp(
+    String.raw`(${CREDENTIAL_KEY})(?:(")(?:\\[\s\S]|[^"\\])*${doubleQuoteEnd}|(')[^']*${singleQuoteEnd}|\S+)`,
+    "gi"
+  ),
+  replacement: "$1$2$3[redacted]$2$3"
+});
+var PRECISE_SECRET_RULES = [
   { pattern: /\bpk_[A-Za-z0-9_]+\.[A-Za-z0-9_]+/g, replacement: "[redacted]" },
   { pattern: /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, replacement: "[redacted key]" },
   { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, replacement: "[redacted]" },
@@ -472,14 +484,19 @@ var SECRET_REDACTION_RULES = [
   { pattern: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, replacement: "[redacted]" },
   { pattern: /\b([a-z][a-z0-9+.-]*:\/\/[^\s:/@]+:)[^\s@/]+@/gi, replacement: "$1[redacted]@" },
   { pattern: /\bbearer\s+[A-Za-z0-9._~+/=-]+/gi, replacement: "bearer [redacted]" },
-  { pattern: /\bauthorization:\s*\S+/gi, replacement: "authorization: [redacted]" },
-  {
-    pattern: /((?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)["']?\s*[=:]\s*)(?:(")(?:\\[\s\S]|[^"\\])*(?:"|\\?$)|(')[^']*(?:'|$)|\S+)/gi,
-    replacement: "$1$2$3[redacted]$2$3"
-  }
+  { pattern: /\bauthorization:\s*\S+/gi, replacement: "authorization: [redacted]" }
+];
+var SECRET_REDACTION_RULES = [
+  ...PRECISE_SECRET_RULES,
+  credentialAssignmentRule(CLOSED_DOUBLE_QUOTE, CLOSED_SINGLE_QUOTE)
+];
+var CUT_OFF_TEXT_REDACTION_RULES = [
+  ...PRECISE_SECRET_RULES,
+  credentialAssignmentRule(DOUBLE_QUOTE_OR_CUT_OFF, SINGLE_QUOTE_OR_CUT_OFF)
 ];
 var HIGH_ENTROPY_RULE = { pattern: /[A-Za-z0-9+/]{40,}={0,2}/g, replacement: "[redacted]" };
-var redactSecrets = (text) => SECRET_REDACTION_RULES.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
+var applyRedactionRules = (rules, text) => rules.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
+var redactSecrets = (text) => applyRedactionRules(SECRET_REDACTION_RULES, text);
 var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
 
 // ../contracts/src/degraded.ts

package/dist/{chunk-SQRWHALT.js → chunk-WXIVUIXA.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-BH2SKSSK.js";
+} from "./chunk-R7ZETVNR.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-KXMZMZD3.js";
+} from "./chunk-QSZ37ROP.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-HDRNWNVP.js → chunk-YLCSKVQQ.js}

@@ -8,21 +8,23 @@ import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
+  clipToRow,
+  terminalColumns,
   useColor
-} from "./chunk-5RUIFDTP.js";
+} from "./chunk-U4TMAANR.js";
 import {
   callMcpTool
-} from "./chunk-JNXVOU6Y.js";
+} from "./chunk-D4OGEWLH.js";
 import {
   reportedInstallSource
-} from "./chunk-ROQK7IN3.js";
+} from "./chunk-LI3C2IQY.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-B3UXMSMW.js";
+} from "./chunk-65RN6ZCO.js";
 import {
   PAIR_TTL_SECONDS,
   isAnswerSource
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {
@@ -462,29 +464,6 @@ var writeStatusLine = (text) => {
 ` : `  ${text}
 `);
 };
-var visibleLength = (text) => text.replace(/\x1b\[[0-9;]*m/g, "").length;
-var clipToRow = (text, columns) => {
-  const budget = columns - 4;
-  if (budget <= 1 || visibleLength(text) <= budget) return text;
-  let visible = 0;
-  let out = "";
-  for (let i = 0; i < text.length; i += 1) {
-    const escape = /^\x1b\[[0-9;]*m/.exec(text.slice(i));
-    if (escape) {
-      out += escape[0];
-      i += escape[0].length - 1;
-      continue;
-    }
-    if (visible >= budget - 1) break;
-    out += text[i];
-    visible += 1;
-  }
-  return `${out}\u2026`;
-};
-var terminalColumns = () => {
-  const columns = process.stdout.columns;
-  return typeof columns === "number" && columns > 0 ? columns : 80;
-};
 var startSpinner = (getLabel) => {
   if (!humanIsTty()) {
     writeHuman(`  ${getLabel()}
@@ -787,6 +766,8 @@ var describePairFailure = (reason) => {
       return "Finish setting up in the Pushary app, then run setup again";
     case "authorize_failed":
       return "The app could not authorize this terminal. Re-run setup to try again";
+    case "payment_required":
+      return "Your Pushary workspace has no active subscription. Subscribe in the Pushary app or at pushary.com, then run setup again";
     default:
       return "Pairing failed. Re-run setup to try again";
   }

package/dist/{chunk-JXUAXO74.js → chunk-YNJ2H2FD.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-NYBZJ44G.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-BWYJ6AAF.js → chunk-YU4222G2.js}

@@ -3,14 +3,14 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-NYBZJ44G.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   ownPackageRoot
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-4F46VIEE.js → chunk-YU54LNC6.js}

@@ -2,27 +2,27 @@ import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-JXUAXO74.js";
+} from "./chunk-YNJ2H2FD.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-73T6MSU5.js";
+} from "./chunk-4S7CCOXB.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-UOAQ6QMP.js";
+} from "./chunk-VSGKQ3HI.js";
 import {
   getMachineId
-} from "./chunk-XNCMT7YY.js";
+} from "./chunk-HOIGXMI7.js";
 import {
   getBaseUrl
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-SJN64NJX.js";
 import {
   getPackageVersion
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/machines.ts
 import { hostname } from "os";

package/dist/{chunk-EAQMWJPG.js → chunk-ZMWX5SDA.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-R2XCLT6I.js";
+} from "./chunk-E3PLF7YB.js";
 import {
   ensureDaemonRunning
-} from "./chunk-73T6MSU5.js";
+} from "./chunk-4S7CCOXB.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-BH2SKSSK.js";
+} from "./chunk-R7ZETVNR.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-KXMZMZD3.js";
+} from "./chunk-QSZ37ROP.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-B76WVEDX.js";
+} from "./chunk-Q7CDBJXU.js";
 import {
   readTranscriptPreference
-} from "./chunk-UOAQ6QMP.js";
+} from "./chunk-VSGKQ3HI.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-NYBZJ44G.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-SJN64NJX.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-6ADZQFVW.js → chunk-ZUKZJQGR.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-UOAQ6QMP.js";
+} from "./chunk-VSGKQ3HI.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{reapply-6PH3FMPX.js → reapply-D6RSDYCK.js}

@@ -9,17 +9,17 @@ import {
   reapplyGeminiSettings,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-BBKNJJVX.js";
-import "./chunk-O2LEPIU6.js";
-import "./chunk-7OS4IHGI.js";
-import "./chunk-KYQXUGH7.js";
-import "./chunk-PQ4F64M2.js";
-import "./chunk-ZQ7IDOKY.js";
+} from "./chunk-OJRB5QKN.js";
+import "./chunk-U3MS6D5X.js";
+import "./chunk-5GIBNUBD.js";
+import "./chunk-KAJT6HPI.js";
+import "./chunk-L6IF4JOF.js";
+import "./chunk-A6WQF7FQ.js";
 import "./chunk-XHKBHWLX.js";
-import "./chunk-DZURML2D.js";
-import "./chunk-DNJUSFBL.js";
+import "./chunk-RLRDPZG4.js";
+import "./chunk-NYBZJ44G.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-YROGUPOZ.js";
+import "./chunk-WWTLAZQA.js";
 export {
   ensureCodexTrustAfterReapply,
   inspectConfiguredManagedProviders,

package/dist/src/index.d.ts

@@ -109,6 +109,7 @@ declare const handlePostToolUse: (input: {
     tool_result?: unknown;
     cwd?: string;
     session_id?: string;
+    agent_id?: string;
     transcript_path?: string;
     tool_use_id?: string;
 }, agent?: AgentIdentity) => Promise<string | undefined>;