@pushary/agent-hooks 1.7.1 → 1.7.2

package/dist/{chunk-WM3U2RUK.js → chunk-2B4XCMH6.js}

@@ -1,30 +1,42 @@
+import {
+  DEFAULT_SESSION,
+  isDefaultSession,
+  listPendingQuestions,
+  listPendingQuestionsForToolUse,
+  markPendingCommandDelivered,
+  readPendingCommand,
+  removePendingCommand,
+  removePendingQuestion,
+  removePendingSession,
+  savePendingCommand
+} from "./chunk-N6IOSZOE.js";
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-4C4NRDIC.js";
+} from "./chunk-RLRDPZG4.js";
 import {
   cancelQuestion,
   isPolicyConfig,
   sendNotification,
   waitForAnswer
-} from "./chunk-ZIIYTQHC.js";
+} from "./chunk-2XOHXZRC.js";
 import {
   clientErrorKindOf,
   reportClientError
-} from "./chunk-KSNAAMU5.js";
+} from "./chunk-6QZK4O36.js";
 import {
   withRetry
-} from "./chunk-NQFGVAT6.js";
+} from "./chunk-D4OGEWLH.js";
 import {
   getMachineId
-} from "./chunk-P5CBNSYL.js";
+} from "./chunk-HOIGXMI7.js";
 import {
   reportedInstallSource
-} from "./chunk-UPKP67TA.js";
+} from "./chunk-LI3C2IQY.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-OAL44FM2.js";
+} from "./chunk-SJN64NJX.js";
 import {
   ACTION_BODY_MAX,
   AGENT_LABELS_BY_TYPE,
@@ -48,7 +60,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   toToolLookup
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -865,190 +877,19 @@ var codexReviewerDenialsSince = (reviews, since) => {
   });
 };
 
-// src/pending.ts
-import { join as join2 } from "path";
-import { homedir, tmpdir as tmpdir2 } from "os";
-import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync2, mkdirSync, writeFileSync as writeFileSync2, readFileSync as readFileSync2, readdirSync, renameSync, unlinkSync, rmSync, statSync } from "fs";
-var PENDING_DIR = join2(tmpdir2(), "pushary-pending");
-var commandRoot = () => process.env.PUSHARY_COMMAND_DIR?.trim() || join2(homedir(), ".pushary", "run", "commands");
-var DEFAULT_SESSION = "_no_session";
-var GRACE_MS = 10 * 60 * 1e3;
-var sanitize = (sessionId) => sessionId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || DEFAULT_SESSION;
-var dirFor = (sessionId) => join2(PENDING_DIR, sanitize(sessionId));
-var commandDirFor = (sessionId, namespace = "") => join2(
-  commandRoot(),
-  createHash2("sha256").update(namespace).digest("hex").slice(0, 16),
-  sanitize(sessionId)
-);
-var legacyCommandFile = (sessionId, namespace = "") => join2(commandDirFor(sessionId, namespace), "command.json");
-var commandFile = (sessionId, id, namespace = "") => join2(commandDirFor(sessionId, namespace), `${createHash2("sha256").update(id).digest("hex")}.json`);
-var readCommandFile = (file) => {
-  try {
-    const value = JSON.parse(readFileSync2(file, "utf-8"));
-    if (typeof value.id !== "string" || typeof value.text !== "string" || typeof value.expiresAtMs !== "number") return null;
-    if (value.expiresAtMs <= Date.now()) {
-      unlinkSync(file);
-      return null;
-    }
-    return {
-      ...value,
-      delivered: value.delivered === true,
-      ...value.failed === true ? { failed: true } : {}
-    };
-  } catch {
-    return null;
-  }
-};
-var readPendingCommandById = (sessionId, id, namespace = "") => {
-  const current = readCommandFile(commandFile(sessionId, id, namespace));
-  if (current?.id === id) return current;
-  const legacy = readCommandFile(legacyCommandFile(sessionId, namespace));
-  return legacy?.id === id ? legacy : null;
-};
-var pruneExpiredCommands = (dir) => {
-  let files;
-  try {
-    files = readdirSync(dir).filter((file) => file.endsWith(".json"));
-  } catch {
-    return [];
-  }
-  return files.flatMap((file) => {
-    const command = readCommandFile(join2(dir, file));
-    return command ? [command] : [];
-  });
-};
-var pruneExpiredCommandStore = () => {
-  let namespaces;
-  try {
-    namespaces = readdirSync(commandRoot(), { withFileTypes: true });
-  } catch {
-    return;
-  }
-  for (const namespace of namespaces.filter((entry) => entry.isDirectory())) {
-    const namespaceDir = join2(commandRoot(), namespace.name);
-    let sessions;
-    try {
-      sessions = readdirSync(namespaceDir, { withFileTypes: true });
-    } catch {
-      continue;
-    }
-    for (const session of sessions.filter((entry) => entry.isDirectory())) {
-      pruneExpiredCommands(join2(namespaceDir, session.name));
-    }
-  }
-};
-var readPendingCommand = (sessionId, namespace = "") => {
-  const commands = pruneExpiredCommands(commandDirFor(sessionId, namespace));
-  return commands.find((command) => !command.delivered && !command.failed) ?? commands[0] ?? null;
-};
-var savePendingCommand = (sessionId, command, namespace = "") => {
-  const dir = commandDirFor(sessionId, namespace);
-  try {
-    mkdirSync(dir, { recursive: true, mode: 448 });
-    pruneExpiredCommandStore();
-    if (readPendingCommandById(sessionId, command.id, namespace)) return false;
-    writeFileSync2(commandFile(sessionId, command.id, namespace), JSON.stringify(command), { encoding: "utf-8", mode: 384, flag: "wx" });
-    return true;
-  } catch {
-    return false;
-  }
-};
-var updatePendingCommand = (sessionId, id, update, namespace = "") => {
-  const command = readPendingCommandById(sessionId, id, namespace);
-  if (!command) return false;
-  const currentFile = commandFile(sessionId, id, namespace);
-  const file = existsSync2(currentFile) ? currentFile : legacyCommandFile(sessionId, namespace);
-  const temporary = `${file}.${process.pid}.tmp`;
-  try {
-    writeFileSync2(temporary, JSON.stringify({ ...command, ...update, text: "" }), { encoding: "utf-8", mode: 384 });
-    renameSync(temporary, file);
-    return true;
-  } catch {
-    try {
-      unlinkSync(temporary);
-    } catch {
-    }
-    return false;
-  }
-};
-var markPendingCommandDelivered = (sessionId, id, namespace = "") => updatePendingCommand(sessionId, id, { delivered: true, failed: void 0 }, namespace);
-var markPendingCommandFailed = (sessionId, id, namespace = "") => updatePendingCommand(sessionId, id, { delivered: false, failed: true }, namespace);
-var removePendingCommand = (sessionId, id, namespace = "") => {
-  if (!readPendingCommandById(sessionId, id, namespace)) return;
-  try {
-    unlinkSync(commandFile(sessionId, id, namespace));
-  } catch {
-  }
-  try {
-    if (readCommandFile(legacyCommandFile(sessionId, namespace))?.id === id) {
-      unlinkSync(legacyCommandFile(sessionId, namespace));
-    }
-  } catch {
-  }
-};
-var isDefaultSession = (sessionId) => sanitize(sessionId) === DEFAULT_SESSION;
-var listPendingQuestionsForToolUse = (sessionId, toolUseId) => {
-  if (!toolUseId) return [];
-  const dir = dirFor(sessionId);
-  let files;
-  try {
-    files = readdirSync(dir);
-  } catch {
-    return [];
-  }
-  return files.filter((name) => {
-    try {
-      return readFileSync2(join2(dir, name), "utf-8") === toolUseId;
-    } catch {
-      return false;
-    }
-  });
-};
-var listPendingQuestions = (sessionId) => {
-  const dir = dirFor(sessionId);
-  let files;
-  try {
-    files = readdirSync(dir);
-  } catch {
-    return [];
-  }
-  if (!isDefaultSession(sessionId)) return files;
-  const cutoff = Date.now() - GRACE_MS;
-  return files.filter((name) => {
-    try {
-      return statSync(join2(dir, name)).mtimeMs < cutoff;
-    } catch {
-      return false;
-    }
-  });
-};
-var removePendingQuestion = (sessionId, correlationId) => {
-  try {
-    unlinkSync(join2(dirFor(sessionId), correlationId));
-  } catch {
-  }
-};
-var removePendingSession = (sessionId) => {
-  try {
-    rmSync(dirFor(sessionId), { recursive: true, force: true });
-  } catch {
-  }
-};
-
 // src/repo.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3, statSync as statSync2 } from "fs";
-import { basename as basename2, dirname, isAbsolute as isAbsolute2, join as join3, resolve as resolve2 } from "path";
+import { existsSync as existsSync2, readFileSync as readFileSync2, statSync } from "fs";
+import { basename as basename2, dirname, isAbsolute as isAbsolute2, join as join2, resolve as resolve2 } from "path";
 var MAX_PARENT_WALK = 64;
 var GIT_FILE_PREFIX = "gitdir:";
 var findGitDir = (startDir) => {
   let current = resolve2(startDir);
   for (let depth = 0; depth < MAX_PARENT_WALK; depth += 1) {
-    const candidate = join3(current, ".git");
+    const candidate = join2(current, ".git");
     try {
-      if (existsSync3(candidate)) {
-        if (statSync2(candidate).isDirectory()) return candidate;
-        const pointer = readFileSync3(candidate, "utf-8").trim();
+      if (existsSync2(candidate)) {
+        if (statSync(candidate).isDirectory()) return candidate;
+        const pointer = readFileSync2(candidate, "utf-8").trim();
         if (pointer.startsWith(GIT_FILE_PREFIX)) {
           const target = pointer.slice(GIT_FILE_PREFIX.length).trim();
           return isAbsolute2(target) ? target : resolve2(current, target);
@@ -1064,7 +905,7 @@ var findGitDir = (startDir) => {
 };
 var configPathFor = (gitDir) => {
   const index = gitDir.replace(/\\/g, "/").indexOf("/worktrees/");
-  return index === -1 ? join3(gitDir, "config") : join3(gitDir.slice(0, index), "config");
+  return index === -1 ? join2(gitDir, "config") : join2(gitDir.slice(0, index), "config");
 };
 var ORIGIN_SECTION = /^\[remote "origin"\]/;
 var SECTION_HEADER = /^\[/;
@@ -1072,9 +913,9 @@ var URL_LINE = /^url\s*=\s*(.+)$/;
 var readOriginRemote = (gitDir) => {
   try {
     const configPath = configPathFor(gitDir);
-    if (!existsSync3(configPath)) return void 0;
+    if (!existsSync2(configPath)) return void 0;
     let inOrigin = false;
-    for (const rawLine of readFileSync3(configPath, "utf-8").split("\n")) {
+    for (const rawLine of readFileSync2(configPath, "utf-8").split("\n")) {
       const line = rawLine.trim();
       if (SECTION_HEADER.test(line)) {
         inOrigin = ORIGIN_SECTION.test(line);
@@ -1121,10 +962,10 @@ var repoKeyFor = (cwd) => {
 };
 
 // src/usage.ts
-import { closeSync, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync4, readSync, statSync as statSync3, writeFileSync as writeFileSync3 } from "fs";
-import { createHash as createHash3 } from "crypto";
-import { join as join4 } from "path";
-import { tmpdir as tmpdir3 } from "os";
+import { closeSync, mkdirSync, openSync, readFileSync as readFileSync3, readSync, statSync as statSync2, writeFileSync as writeFileSync2 } from "fs";
+import { createHash as createHash2 } from "crypto";
+import { join as join3 } from "path";
+import { tmpdir as tmpdir2 } from "os";
 var DEFAULT_PRICES = [
   { match: "opus-4-1", in: 15, out: 75 },
   { match: "opus-4-0", in: 15, out: 75 },
@@ -1159,12 +1000,12 @@ var estimateCostUsd = (usage, model) => {
   const perTokenOut = price.out / 1e6;
   return usage.inputTokens * perTokenIn + usage.outputTokens * perTokenOut + usage.cacheCreationTokens * perTokenIn * CACHE_WRITE_MULTIPLIER + usage.cacheReadTokens * perTokenIn * CACHE_READ_MULTIPLIER;
 };
-var stateDir = () => process.env.PUSHARY_USAGE_DIR?.trim() || join4(tmpdir3(), "pushary-usage");
-var stateFile = (sessionId) => join4(stateDir(), sessionId.replace(/[^a-zA-Z0-9_-]/g, "_"));
+var stateDir = () => process.env.PUSHARY_USAGE_DIR?.trim() || join3(tmpdir2(), "pushary-usage");
+var stateFile = (sessionId) => join3(stateDir(), sessionId.replace(/[^a-zA-Z0-9_-]/g, "_"));
 var emptyState = () => ({ offset: 0, tokensIn: 0, tokensOut: 0, costUsd: 0, recentIds: [] });
 var readState = (path) => {
   try {
-    const parsed = JSON.parse(readFileSync4(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync3(path, "utf-8"));
     if (typeof parsed.offset === "number" && parsed.offset >= 0 && typeof parsed.tokensIn === "number" && typeof parsed.tokensOut === "number" && typeof parsed.costUsd === "number" && Array.isArray(parsed.recentIds)) {
       return {
         offset: parsed.offset,
@@ -1239,7 +1080,7 @@ var extractUserText = (content) => {
 };
 var readLastUserPrompt = (transcriptPath) => {
   try {
-    const size = statSync3(transcriptPath).size;
+    const size = statSync2(transcriptPath).size;
     const start = Math.max(0, size - USER_PROMPT_TAIL_BYTES);
     const lines = readRange(transcriptPath, start, size).toString("utf-8").split("\n");
     for (let i = lines.length - 1; i >= 0; i -= 1) {
@@ -1262,7 +1103,7 @@ var readLastUserPrompt = (transcriptPath) => {
 };
 var readNewUsage = (transcriptPath, sessionId) => {
   try {
-    const file = statSync3(transcriptPath);
+    const file = statSync2(transcriptPath);
     const size = file.size;
     const path = stateFile(sessionId);
     let state = readState(path);
@@ -1280,14 +1121,14 @@ var readNewUsage = (transcriptPath, sessionId) => {
         state.offset += lastNewline + 1;
       }
     }
-    mkdirSync2(stateDir(), { recursive: true });
-    writeFileSync3(path, JSON.stringify(state), "utf-8");
+    mkdirSync(stateDir(), { recursive: true });
+    writeFileSync2(path, JSON.stringify(state), "utf-8");
     if (state.tokensIn === 0 && state.tokensOut === 0) return null;
     return {
       // Identical cursor-range reports share an identity across transport retries.
       // Native message identity distinguishes an in-place rotation of the range.
       // This does not serialize readers of different, potentially overlapping ranges.
-      eventId: createHash3("sha256").update(JSON.stringify([
+      eventId: createHash2("sha256").update(JSON.stringify([
         sessionId,
         file.dev,
         file.ino,
@@ -1372,57 +1213,58 @@ var phoneDrivenEnv = (base) => ({
 });
 
 // src/throttle.ts
-import { join as join5 } from "path";
-import { tmpdir as tmpdir4 } from "os";
-import { createHash as createHash4 } from "crypto";
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, statSync as statSync4, writeFileSync as writeFileSync4, rmSync as rmSync2 } from "fs";
-var THROTTLE_DIR = join5(tmpdir4(), "pushary-throttle");
-var markerPath = (key) => join5(THROTTLE_DIR, createHash4("sha256").update(key).digest("hex").slice(0, 16));
+import { join as join4 } from "path";
+import { tmpdir as tmpdir3 } from "os";
+import { createHash as createHash3 } from "crypto";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, statSync as statSync3, writeFileSync as writeFileSync3, rmSync } from "fs";
+var THROTTLE_DIR = join4(tmpdir3(), "pushary-throttle");
+var markerPath = (key) => join4(THROTTLE_DIR, createHash3("sha256").update(key).digest("hex").slice(0, 16));
 var claimThrottle = (key, windowMs) => {
   try {
     const path = markerPath(key);
-    if (existsSync4(path) && Date.now() - statSync4(path).mtimeMs < windowMs) return "throttled";
-    mkdirSync3(THROTTLE_DIR, { recursive: true });
-    writeFileSync4(path, "", "utf-8");
+    if (existsSync3(path) && Date.now() - statSync3(path).mtimeMs < windowMs) return "throttled";
+    mkdirSync2(THROTTLE_DIR, { recursive: true });
+    writeFileSync3(path, "", "utf-8");
     return "passed";
   } catch {
     return "unavailable";
   }
 };
 var releaseThrottle = (key) => {
-  rmSync2(markerPath(key), { force: true });
+  rmSync(markerPath(key), { force: true });
 };
 
 // src/events.ts
-import { basename as basename3, join as join6 } from "path";
-import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync5, statSync as statSync5, writeFileSync as writeFileSync5 } from "fs";
-import { tmpdir as tmpdir5 } from "os";
-var INTENT_DIR = join6(tmpdir5(), "pushary-intent");
+import { basename as basename3, join as join5 } from "path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync4, statSync as statSync4, writeFileSync as writeFileSync4 } from "fs";
+import { tmpdir as tmpdir4 } from "os";
+var INTENT_DIR = join5(tmpdir4(), "pushary-intent");
 var INTENT_MAX_BYTES = 2048;
 var INTENT_GRACE_MS = 10 * 60 * 1e3;
 var sanitizeSession = (sessionId) => sessionId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || DEFAULT_SESSION;
-var intentFile = (sessionId) => join6(INTENT_DIR, sanitizeSession(sessionId));
+var intentFile = (sessionId) => join5(INTENT_DIR, sanitizeSession(sessionId));
 var saveLastPrompt = (sessionId, prompt) => {
   try {
     const trimmed = prompt.replace(/\s+/g, " ").trim().slice(0, INTENT_MAX_BYTES);
     if (!trimmed) return;
-    mkdirSync4(INTENT_DIR, { recursive: true });
-    writeFileSync5(intentFile(sessionId), trimmed, "utf-8");
+    mkdirSync3(INTENT_DIR, { recursive: true });
+    writeFileSync4(intentFile(sessionId), trimmed, "utf-8");
   } catch {
   }
 };
 var readLastPrompt = (sessionId) => {
   try {
     const path = intentFile(sessionId);
-    if (isDefaultSession(sessionId) && statSync5(path).mtimeMs < Date.now() - INTENT_GRACE_MS) return void 0;
-    const value = readFileSync5(path, "utf-8").trim();
+    if (isDefaultSession(sessionId) && statSync4(path).mtimeMs < Date.now() - INTENT_GRACE_MS) return void 0;
+    const value = readFileSync4(path, "utf-8").trim();
     return value.length > 0 ? value : void 0;
   } catch {
     return void 0;
   }
 };
-var pendingQuestionsToSettle = (sessionId, toolUseId) => {
+var pendingQuestionsToSettle = (sessionId, toolUseId, insideSubagent = false) => {
   const settledElsewhere = toolUseId ? listPendingQuestionsForToolUse(sessionId, toolUseId) : [];
+  if (insideSubagent) return settledElsewhere;
   return [.../* @__PURE__ */ new Set([...settledElsewhere, ...listPendingQuestions(sessionId)])];
 };
 var reconcileQuestions = async (sessionId, files, signal) => {
@@ -1478,8 +1320,8 @@ var POLICY_CACHE_TTL_MS = 5 * 60 * 1e3;
 var readFreshCachedPolicy = (apiKey, agentType, sessionId) => {
   const request = policyRequestFor(agentType);
   const path = policyCacheFile(apiKey, request.agent, request.repoAware);
-  if (!existsSync5(path)) return null;
-  const cached = JSON.parse(readFileSync5(path, "utf-8"));
+  if (!existsSync4(path)) return null;
+  const cached = JSON.parse(readFileSync4(path, "utf-8"));
   if (!isPolicyConfig(cached)) return null;
   if ((cached._sessionId ?? null) !== (sessionId ?? null)) return null;
   if (!cached._cachedAt || Date.now() - cached._cachedAt >= POLICY_CACHE_TTL_MS) return null;
@@ -1575,7 +1417,7 @@ var reportEvent = async (event, options = {}) => {
   const machineId = event.machineId ?? getMachineId();
   const sessionKey = event.sessionId || DEFAULT_SESSION;
   const receiptNamespace = `${apiKey}:${machineId}:${event.agentType}`;
-  const clientCanDrain = consumesActivityContext(event.agentType) && options.timeoutMs === void 0;
+  const clientCanDrain = consumesActivityContext(event.agentType) && options.timeoutMs === void 0 && options.skipDrain !== true;
   const deadlineMs = options.budgetMs === void 0 ? void 0 : Date.now() + options.budgetMs;
   const ackReserveMs = deadlineMs === void 0 ? 0 : Math.min(ACK_RESERVE_MS, Math.floor((options.budgetMs ?? 0) * 0.4));
   const postTimeoutMs = (fallback) => deadlineMs === void 0 ? fallback : Math.max(0, Math.min(fallback, deadlineMs - ackReserveMs - Date.now()));
@@ -1675,6 +1517,7 @@ var settleQuestionsForToolUse = async (sessionId, toolUseId) => {
   const late = await reconcileQuestions(sessionId, listPendingQuestionsForToolUse(sessionId, toolUseId));
   for (const answer of late) removePendingQuestion(sessionId, answer.correlationId);
 };
+var ranInsideSubagent = (input) => sessionIdentityOf(input).parentSessionId !== void 0;
 var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
   const occurredAt = (/* @__PURE__ */ new Date()).toISOString();
   const deadline = Date.now() + HOOK_BUDGET_MS;
@@ -1687,9 +1530,11 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
     const isError = isToolResultError(toolResult);
     const receiptsEnabled = process.env.PUSHARY_RECEIPTS !== "off";
     const sessionKey = input.session_id || DEFAULT_SESSION;
+    const insideSubagent = ranInsideSubagent(input);
+    const questionsToSettle = pendingQuestionsToSettle(sessionKey, input.tool_use_id, insideSubagent);
     const [liveMode, late] = await Promise.all([
       fetchModeState(getApiKey(), input.session_id, MODE_REUSE_MS, signal),
-      reconcilePendingQuestions(sessionKey, input.tool_use_id, signal)
+      reconcileQuestions(sessionKey, questionsToSettle, signal)
     ]);
     let additionalContext;
     if (late.length > 0 && agent.type === CLAUDE_CODE_AGENT.type) {
@@ -1712,7 +1557,12 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
       ...beacon ? { decisionOrigin: beacon.decisionOrigin, toolName: beacon.toolName, toolTarget: beacon.toolTarget } : {},
       meta: receiptsEnabled ? deriveReceiptMeta(lookup.tool, lookup.input, toolResult, input.cwd ?? process.cwd()) : void 0,
       usage: deriveUsage(input.transcript_path, input.session_id)
-    }, { maxAttempts: 1, budgetMs: Math.min(DRAINING_REPORT_BUDGET_MS, Math.max(0, deadline - Date.now())), signal });
+    }, {
+      maxAttempts: 1,
+      budgetMs: Math.min(DRAINING_REPORT_BUDGET_MS, Math.max(0, deadline - Date.now())),
+      signal,
+      skipDrain: insideSubagent
+    });
     const extraReports = [];
     if (claimThrottle(`hookactive:${sessionKey}`, HOOK_ACTIVE_WINDOW_MS) === "passed") {
       extraReports.push(
@@ -1992,13 +1842,6 @@ export {
   isCodexGuardianRolloutHead,
   scanCodexGuardianReviews,
   codexReviewerDenialsSince,
-  DEFAULT_SESSION,
-  readPendingCommandById,
-  readPendingCommand,
-  savePendingCommand,
-  markPendingCommandDelivered,
-  markPendingCommandFailed,
-  removePendingCommand,
   repoKeyFor,
   claimThrottle,
   releaseThrottle,

package/dist/{chunk-ZIIYTQHC.js → chunk-2XOHXZRC.js}

@@ -1,16 +1,17 @@
 import {
   clientErrorKindOf,
   reportClientError
-} from "./chunk-KSNAAMU5.js";
+} from "./chunk-6QZK4O36.js";
 import {
+  SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-NQFGVAT6.js";
+} from "./chunk-D4OGEWLH.js";
 import {
   installNetworkDefaults
-} from "./chunk-JTQDP4ZL.js";
+} from "./chunk-UFNBKYWT.js";
 import {
   getBaseUrl
-} from "./chunk-OAL44FM2.js";
+} from "./chunk-SJN64NJX.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";
@@ -53,6 +54,11 @@ var DECISION_STOP_REASON = "Approval was cancelled or became unavailable. Retry
 var isDecisionStopped = (result) => result.handoffAction === "stop" || ["cancelled", "unavailable", "stopped", "missing"].includes(result.status ?? "");
 var isLocalQuestionHandoff = (result) => result.suppressed === true || result.noDevices === true || result.status === "terminal" || result.status === "notified";
 var STOPPED = { answered: false, handoffAction: "stop" };
+var UNVERIFIABLE_APPROVAL_REASON = "Pushary could not create a verifiable approval. Retry the action.";
+var unavailableQuestionUnlessSubscriptionRequired = (error) => {
+  if (error instanceof SubscriptionRequiredError) throw error;
+  return { correlationId: "", status: "unavailable" };
+};
 var askUser = async (apiKey, params, timeoutMs = 15e3) => {
   const identified = params.toolUseId || params.requestId ? params : { ...params, requestId: randomUUID() };
   const result = await callMcpTool(apiKey, "ask_user", { ...identified, wait: false }, { maxRetries: 3, timeoutMs });
@@ -156,6 +162,8 @@ export {
   DECISION_STOP_REASON,
   isDecisionStopped,
   isLocalQuestionHandoff,
+  UNVERIFIABLE_APPROVAL_REASON,
+  unavailableQuestionUnlessSubscriptionRequired,
   askUser,
   waitForAnswer,
   nextLongPollMs,

package/dist/{chunk-3QE3BHBW.js → chunk-3NSRL5E7.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-XMN37YJH.js";
+} from "./chunk-I7B2DNVU.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-7GI6QC3M.js → chunk-3RO2UWJQ.js}

@@ -1,9 +1,9 @@
 import {
   registerTranscript
-} from "./chunk-7GYGVQBU.js";
+} from "./chunk-ZMWX5SDA.js";
 import {
   writeDegraded
-} from "./chunk-KSNAAMU5.js";
+} from "./chunk-6QZK4O36.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-AAGLDXH4.js → chunk-4S7CCOXB.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-YZKS3ME3.js";
+} from "./chunk-VSGKQ3HI.js";
 import {
   getMachineId
-} from "./chunk-P5CBNSYL.js";
+} from "./chunk-HOIGXMI7.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-454KMJHF.js";
+} from "./chunk-NYBZJ44G.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,10 +20,10 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "./chunk-OAL44FM2.js";
+} from "./chunk-SJN64NJX.js";
 import {
   getPackageVersion
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-6SJQ442W.js → chunk-5GIBNUBD.js}

@@ -6,10 +6,10 @@ import {
   codexHooksJsonIn,
   isPusharyCodexCommand,
   resolvePathBinary
-} from "./chunk-454KMJHF.js";
+} from "./chunk-NYBZJ44G.js";
 import {
   getPackageVersion
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/codex-app-server.ts
 import { existsSync, realpathSync } from "fs";

package/dist/chunk-5OP5MQI7.js

@@ -0,0 +1,45 @@
+import {
+  DEFAULT_SESSION
+} from "./chunk-N6IOSZOE.js";
+
+// src/answer.ts
+var denyReasonFrom = (value, note) => {
+  const trimmed = note?.trim();
+  if (trimmed) return `Denied from your phone: ${trimmed}`;
+  return value && value !== "no" && value !== "yes" ? `Denied from your phone: ${value}` : "Denied via push notification";
+};
+var isDeferAnswer = (value) => value === "defer";
+
+// src/session-notice.ts
+import { existsSync, writeFileSync } from "fs";
+import { tmpdir } from "os";
+import { join } from "path";
+var SUBSCRIPTION_REQUIRED_NOTICE_KIND = "subscription-required";
+var oncePerSession = (kind, sessionId) => {
+  try {
+    const key = (sessionId || DEFAULT_SESSION).replace(/[^a-zA-Z0-9_-]/g, "");
+    const marker = join(tmpdir(), `pushary-${kind}-${key}`);
+    if (existsSync(marker)) return false;
+    writeFileSync(marker, "1", "utf-8");
+    return true;
+  } catch {
+    return false;
+  }
+};
+var subscriptionRequiredNotice = (upgradeUrl) => `[pushary] Your Pushary workspace has no active subscription, so approvals stay with your agent. Subscribe: ${upgradeUrl}`;
+var announceSubscriptionRequired = (upgradeUrl, sessionId) => {
+  try {
+    if (!oncePerSession(SUBSCRIPTION_REQUIRED_NOTICE_KIND, sessionId)) return;
+    process.stderr.write(`${subscriptionRequiredNotice(upgradeUrl)}
+`);
+  } catch {
+    return;
+  }
+};
+
+export {
+  denyReasonFrom,
+  isDeferAnswer,
+  oncePerSession,
+  announceSubscriptionRequired
+};

package/dist/{chunk-EIZW73P5.js → chunk-65RN6ZCO.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_AGENT_CHOICES
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/cli/commands.ts
 var NPX_LATEST_COMMAND = "npx @pushary/agent-hooks@latest";

package/dist/{chunk-6PV2JQ64.js → chunk-6NHXKTQU.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-EIZW73P5.js";
+} from "./chunk-65RN6ZCO.js";
 import {
   getPackageVersion
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {