@pushary/agent-hooks 1.7.2 → 1.7.3

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.7.3
+
+- **Approval text never hides part of a command.** The value after a credential name is now hidden only up to the first space, quote or piece of shell syntax. 1.7.2 could still hide a command: `eval TOKEN="x; rm -rf ~"` read `eval TOKEN="[redacted]"`, `password= reboot` read `password= [redacted]`, and `rm -rf {password=x,/}` hid the `,/` that also deletes `/`. A private key block is hidden only when it holds nothing but the key. Tokens, keys and quoted values without spaces are hidden as before. A quoted value with spaces now shows what follows its first word, as in `--password='[redacted] pass'`. Logs and error reports still hide the whole value.
+
 ## 1.7.2
 
 - **Approval text shows the whole command again.** A credential name that closes a quoted string, as in `grep -rl "password=" . | xargs rm -f`, made 1.7.1 redact everything after it, so the approval read `grep -rl "password="[redacted]"` and hid the `rm`. The value after a credential name is still redacted, and the rest of the command is shown.

package/data/cursor-plugin/CHANGELOG.md

@@ -2,6 +2,7 @@
 
 ## 0.2.3
 
+- Approval text never hides part of a command. The value after a credential name is hidden only up to the first space, quote or piece of shell syntax, so `echo "password=" && rm -rf ~` and `eval TOKEN="x; rm -rf ~"` both show the `rm`. A private key block is hidden only when it holds nothing but the key.
 - Updates and Terminal hand an approval back to Cursor promptly. The gate no longer waits for a phone answer that Updates never asks for, and it withdraws the phone question before Cursor decides. An answer that arrives in that moment still counts.
 - A file change that goes back to the agent's own permissions is refused with the reason, because Cursor file hooks cannot show a local approval. Choose Every time for file changes you want to approve from your phone.
 - With no phone or other notification channel connected, a file change is refused with a message that says so. Shell commands and MCP calls still open Cursor's own prompt with "No device connected, approve here."

package/data/cursor-plugin/scripts/pushary-gate.mjs

@@ -295,7 +295,7 @@ export const describeNetworkFailure = (error, env = process.env) => {
 const ACTION_BODY_MAX = 4000
 const ACTION_BODY_TRUNCATION_MARKER = '\n… [truncated]'
 const REDACTION_RULES = [
-  [/-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, '[redacted key]'],
+  [/-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----(?:\r?\n|(?:\\r)?\\n)?(?:(?:Proc-Type|DEK-Info): [A-Za-z0-9,-]+(?:\r?\n|(?:\\r)?\\n))*(?:[A-Za-z0-9+/=\r\n]|\\[rn])*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, '[redacted key]'],
   [/\bsk-[A-Za-z0-9_-]{16,}\b/g, '[redacted]'],
   [/\b[spr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g, '[redacted]'],
   [/\bwhsec_[A-Za-z0-9]{16,}\b/g, '[redacted]'],
@@ -309,8 +309,8 @@ const REDACTION_RULES = [
   [/\bxai-[A-Za-z0-9]{16,}\b/g, '[redacted]'],
   [/\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, '[redacted]'],
   [/\bbearer\s+[A-Za-z0-9._~+/=-]+/gi, 'bearer [redacted]'],
-  [/\bauthorization:\s*\S+/gi, 'authorization: [redacted]'],
-  [/((?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)\s*[=:]\s*)(\"[^\"]*\"|'[^']*'|\S+)/gi, '$1[redacted]'],
+  [/\bauthorization:\s*(?:[A-Za-z0-9_\-./+=:@%^!#]|\\[^\s'"])+/gi, 'authorization: [redacted]'],
+  [/((?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)["']?(?:[ \t]*:[ \t]*|[ \t]+=[ \t]*|=))(?:(")(?:[A-Za-z0-9_\-./+=:@%^!#]|\\[^\s'"])*"|(')[A-Za-z0-9_\-./+=:@%^!#\\]*'|(["']?)(?:[A-Za-z0-9_\-./+=:@%^!#]|\\[^\s'"])+)/gi, '$1$2$3$4[redacted]$2$3'],
 ]
 const HIGH_ENTROPY_RULE = [/[A-Za-z0-9+/]{40,}={0,2}/g, '[redacted]']
 export const redactSecrets = (text) => REDACTION_RULES.reduce((acc, [pattern, replacement]) => acc.replace(pattern, replacement), text)

package/data/cursor-plugin/scripts/pushary-gate.test.mjs

@@ -14,7 +14,7 @@
 
 import assert from 'node:assert/strict'
 import { describe, it } from 'node:test'
-import { describeRequest, normalizeRepoRemote } from './pushary-gate.mjs'
+import { describeRequest, normalizeRepoRemote, redactSecrets } from './pushary-gate.mjs'
 
 describe('repo identity', () => {
   it('collapses the forms of one remote', () => {
@@ -113,3 +113,25 @@ describe('what the gate was asked about', () => {
     assert.equal(describeRequest({}), null)
   })
 })
+
+describe('approval text redaction', () => {
+  it('shows a command whole when a credential name only sits next to shell syntax', () => {
+    for (const command of [
+      'echo "password=" && rm -rf ~ && echo "x"',
+      'find / -name "token:" -o -delete -o -name "x"',
+      "grep -rl foo'password=' . | xargs rm -f 'important file'",
+      'grep "authorization:";rm important-file',
+      'echo "-----BEGIN PRIVATE KEY-----" && rm -rf ~ && echo "-----END PRIVATE KEY-----"',
+      'password= reboot',
+    ]) {
+      assert.equal(redactSecrets(command), command)
+    }
+  })
+
+  it('stops a hidden value at the first space, quote or piece of shell syntax', () => {
+    assert.equal(redactSecrets('eval TOKEN="x; rm -rf ~"'), 'eval TOKEN="[redacted]; rm -rf ~"')
+    assert.equal(redactSecrets('TOKEN=abc;rm file'), 'TOKEN=[redacted];rm file')
+    assert.equal(redactSecrets('rm -rf {password=x,/}'), 'rm -rf {password=[redacted],/}')
+    assert.equal(redactSecrets('export API_KEY="abc123" && rm -rf build'), 'export API_KEY="[redacted]" && rm -rf build')
+  })
+})

package/data/vscode-plugin/CHANGELOG.md

@@ -2,6 +2,7 @@
 
 ## 0.2.3
 
+- Approval text never hides part of a command. The value after a credential name is hidden only up to the first space, quote or piece of shell syntax, so `echo "password=" && rm -rf ~` and `eval TOKEN="x; rm -rf ~"` both show the `rm`. A private key block is hidden only when it holds nothing but the key.
 - Updates hands an approval back to VS Code promptly. The gate no longer waits for a phone answer that Updates never asks for, and it withdraws the phone question before VS Code asks. An answer that arrives in that moment still counts.
 - With no phone or other notification channel connected, VS Code's prompt says "No device connected, approve here." instead of naming a delivery mode.
 - Approval questions carry the repository and the tool name the gate judged, so routing and repository rules apply to the question as they did to the gate. A file edit is asked about with its full path, so path rules and routing match it. A path longer than 80 characters falls back to the file type instead of making the question fail.

package/data/vscode-plugin/scripts/pushary-gate.mjs

@@ -338,7 +338,7 @@ const ACTION_BODY_TRUNCATION_MARKER = '\n… [truncated]'
 // scrubbed was the action body. The question and the notification body carried
 // the raw command.
 const REDACTION_RULES = [
-  [/-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, '[redacted key]'],
+  [/-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----(?:\r?\n|(?:\\r)?\\n)?(?:(?:Proc-Type|DEK-Info): [A-Za-z0-9,-]+(?:\r?\n|(?:\\r)?\\n))*(?:[A-Za-z0-9+/=\r\n]|\\[rn])*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, '[redacted key]'],
   [/\bsk-[A-Za-z0-9_-]{16,}\b/g, '[redacted]'],
   [/\b[spr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g, '[redacted]'],
   [/\bwhsec_[A-Za-z0-9]{16,}\b/g, '[redacted]'],
@@ -352,8 +352,8 @@ const REDACTION_RULES = [
   [/\bxai-[A-Za-z0-9]{16,}\b/g, '[redacted]'],
   [/\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, '[redacted]'],
   [/\bbearer\s+[A-Za-z0-9._~+/=-]+/gi, 'bearer [redacted]'],
-  [/\bauthorization:\s*\S+/gi, 'authorization: [redacted]'],
-  [/((?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)\s*[=:]\s*)("[^"]*"|'[^']*'|\S+)/gi, '$1[redacted]'],
+  [/\bauthorization:\s*(?:[A-Za-z0-9_\-./+=:@%^!#]|\\[^\s'"])+/gi, 'authorization: [redacted]'],
+  [/((?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)["']?(?:[ \t]*:[ \t]*|[ \t]+=[ \t]*|=))(?:(")(?:[A-Za-z0-9_\-./+=:@%^!#]|\\[^\s'"])*"|(')[A-Za-z0-9_\-./+=:@%^!#\\]*'|(["']?)(?:[A-Za-z0-9_\-./+=:@%^!#]|\\[^\s'"])+)/gi, '$1$2$3$4[redacted]$2$3'],
 ]
 const HIGH_ENTROPY_RULE = [/[A-Za-z0-9+/]{40,}={0,2}/g, '[redacted]']
 const redactSecrets = (text) => REDACTION_RULES.reduce((acc, [pattern, replacement]) => acc.replace(pattern, replacement), text)

package/dist/bin/pushary-bell-hook.js

@@ -1,38 +1,38 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-ZUKZJQGR.js";
+} from "../chunk-IWJKSIB4.js";
 import {
   readHookInput
-} from "../chunk-3RO2UWJQ.js";
-import "../chunk-ZMWX5SDA.js";
+} from "../chunk-7RUJKCR4.js";
+import "../chunk-OTNOANMX.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-E3PLF7YB.js";
-import "../chunk-I7B2DNVU.js";
-import "../chunk-JMSB6CJT.js";
-import "../chunk-L6IF4JOF.js";
-import "../chunk-4S7CCOXB.js";
-import "../chunk-A6WQF7FQ.js";
-import "../chunk-KLXYMPTM.js";
-import "../chunk-R7ZETVNR.js";
-import "../chunk-QSZ37ROP.js";
-import "../chunk-Q7CDBJXU.js";
+import "../chunk-TCVMK6GI.js";
+import "../chunk-BGBLLHZ4.js";
+import "../chunk-3EUBQARL.js";
+import "../chunk-WTJM7PSL.js";
+import "../chunk-ZKJ34T2F.js";
+import "../chunk-MIXWMA73.js";
+import "../chunk-NOI3XTCY.js";
+import "../chunk-P2VIBGXA.js";
+import "../chunk-WPX67AKT.js";
+import "../chunk-LPNJLKBQ.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-RLRDPZG4.js";
-import "../chunk-6QZK4O36.js";
+import "../chunk-EUGNVLMG.js";
+import "../chunk-N5MZH5A6.js";
 import "../chunk-POFBE6ZY.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-VSGKQ3HI.js";
-import "../chunk-UFNBKYWT.js";
-import "../chunk-HOIGXMI7.js";
+import "../chunk-D6OODZCM.js";
+import "../chunk-DUQO4C4I.js";
+import "../chunk-OVC5QXN5.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-LI3C2IQY.js";
-import "../chunk-NYBZJ44G.js";
+import "../chunk-62CVUUNU.js";
+import "../chunk-MZBRL5H5.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-SJN64NJX.js";
-import "../chunk-65RN6ZCO.js";
-import "../chunk-WWTLAZQA.js";
+import "../chunk-R6OYCUNK.js";
+import "../chunk-YYCTF4Q5.js";
+import "../chunk-G4GLCLKK.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,37 +5,37 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-ZUKZJQGR.js";
+} from "../chunk-IWJKSIB4.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-KLXYMPTM.js";
+} from "../chunk-NOI3XTCY.js";
 import {
   createIo
 } from "../chunk-U4TMAANR.js";
 import {
   exitOnHelpFlag
-} from "../chunk-6NHXKTQU.js";
+} from "../chunk-5S2VBSJI.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-VSGKQ3HI.js";
+import "../chunk-D6OODZCM.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-LI3C2IQY.js";
+import "../chunk-62CVUUNU.js";
 import {
   claudeSettings
-} from "../chunk-NYBZJ44G.js";
+} from "../chunk-MZBRL5H5.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-T7E75EKA.js";
-import "../chunk-SJN64NJX.js";
-import "../chunk-65RN6ZCO.js";
-import "../chunk-WWTLAZQA.js";
+import "../chunk-R6OYCUNK.js";
+import "../chunk-YYCTF4Q5.js";
+import "../chunk-G4GLCLKK.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,7 +8,7 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-PWNQGITG.js";
+} from "../chunk-LHC45YUC.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
@@ -18,24 +18,24 @@ import {
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-ZMWX5SDA.js";
+} from "../chunk-OTNOANMX.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-E3PLF7YB.js";
-import "../chunk-I7B2DNVU.js";
-import "../chunk-JMSB6CJT.js";
-import "../chunk-L6IF4JOF.js";
+import "../chunk-TCVMK6GI.js";
+import "../chunk-BGBLLHZ4.js";
+import "../chunk-3EUBQARL.js";
+import "../chunk-WTJM7PSL.js";
 import {
   ensureDaemonRunning
-} from "../chunk-4S7CCOXB.js";
-import "../chunk-A6WQF7FQ.js";
-import "../chunk-KLXYMPTM.js";
+} from "../chunk-ZKJ34T2F.js";
+import "../chunk-MIXWMA73.js";
+import "../chunk-NOI3XTCY.js";
 import {
   encryptRecord
-} from "../chunk-R7ZETVNR.js";
-import "../chunk-QSZ37ROP.js";
+} from "../chunk-P2VIBGXA.js";
+import "../chunk-WPX67AKT.js";
 import {
   transcriptsEnabled
-} from "../chunk-Q7CDBJXU.js";
+} from "../chunk-LPNJLKBQ.js";
 import {
   needsShell,
   spawnClaude
@@ -50,7 +50,7 @@ import {
   repoKeyFor,
   reportEvent,
   scopePathFor
-} from "../chunk-2B4XCMH6.js";
+} from "../chunk-U6RVDUJ5.js";
 import {
   DEFAULT_SESSION,
   markPendingCommandDelivered,
@@ -60,7 +60,7 @@ import {
   removePendingCommand,
   savePendingCommand
 } from "../chunk-N6IOSZOE.js";
-import "../chunk-RLRDPZG4.js";
+import "../chunk-EUGNVLMG.js";
 import {
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
@@ -71,36 +71,36 @@ import {
   nextLongPollMs,
   waitForAnswer,
   withdrawQuestion
-} from "../chunk-2XOHXZRC.js";
-import "../chunk-6QZK4O36.js";
+} from "../chunk-YC27PROF.js";
+import "../chunk-N5MZH5A6.js";
 import "../chunk-POFBE6ZY.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-VSGKQ3HI.js";
+import "../chunk-D6OODZCM.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-D4OGEWLH.js";
-import "../chunk-VQDJ6KB3.js";
-import "../chunk-UFNBKYWT.js";
+} from "../chunk-VE7TXLR4.js";
+import "../chunk-EEEJ2JIL.js";
+import "../chunk-DUQO4C4I.js";
 import {
   getMachineId
-} from "../chunk-HOIGXMI7.js";
+} from "../chunk-OVC5QXN5.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-LI3C2IQY.js";
-import "../chunk-NYBZJ44G.js";
+import "../chunk-62CVUUNU.js";
+import "../chunk-MZBRL5H5.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-SJN64NJX.js";
+} from "../chunk-R6OYCUNK.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-65RN6ZCO.js";
+} from "../chunk-YYCTF4Q5.js";
 import {
   KILL_REASON,
-  redactSecrets,
+  redactSecretsFromContent,
   resolveGate
-} from "../chunk-WWTLAZQA.js";
+} from "../chunk-G4GLCLKK.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {
@@ -161,7 +161,7 @@ var redactDraft = (text, complete = false) => {
     const close = text.indexOf(match[1], match.index + match[0].length);
     if (close < 0 || close >= end) end = Math.min(end, match.index);
   }
-  return redactSecrets(text.slice(0, end));
+  return redactSecretsFromContent(text.slice(0, end));
 };
 var DraftText = class {
   messageId = "";

package/dist/bin/pushary-clean.js

@@ -4,7 +4,7 @@ import {
   PUSHARY_SKILL_SOURCE,
   createGuards,
   withoutPusharyCursorHooks
-} from "../chunk-MY3UZO5U.js";
+} from "../chunk-6JQFIHZC.js";
 import {
   FX_PROFILE_REFUSALS,
   FX_QUESTION_TOOL,
@@ -26,8 +26,8 @@ import {
   withoutFxPusharyServer,
   withoutPusharyToolsAllowed,
   withoutQuestionsRoutedToPushary
-} from "../chunk-SKMWPXGV.js";
-import "../chunk-TVJYGZXB.js";
+} from "../chunk-O3JDWNLU.js";
+import "../chunk-7OA34PNW.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -39,7 +39,7 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-SKEW3TQX.js";
+} from "../chunk-KEL5MXRL.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -47,39 +47,39 @@ import {
   compatiblePermissionRuleFile,
   removeCompatibleHooks,
   removeCompatibleMcpServer
-} from "../chunk-T3PRPFDY.js";
+} from "../chunk-UOQRM7JQ.js";
 import {
   isClaudeMcpSnapshot,
   removeClaudeMcpServers,
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-KAJT6HPI.js";
+} from "../chunk-G3OMOTJ4.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-E3PLF7YB.js";
-import "../chunk-I7B2DNVU.js";
+} from "../chunk-TCVMK6GI.js";
+import "../chunk-BGBLLHZ4.js";
 import {
   liveBridgeProbe,
   resolveBridgeStub
-} from "../chunk-JMSB6CJT.js";
-import "../chunk-L6IF4JOF.js";
+} from "../chunk-3EUBQARL.js";
+import "../chunk-WTJM7PSL.js";
 import {
   disableDaemonService
-} from "../chunk-4S7CCOXB.js";
+} from "../chunk-ZKJ34T2F.js";
 import {
   removeGeminiSettings
-} from "../chunk-A6WQF7FQ.js";
-import "../chunk-KLXYMPTM.js";
+} from "../chunk-MIXWMA73.js";
+import "../chunk-NOI3XTCY.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-2B4XCMH6.js";
+import "../chunk-U6RVDUJ5.js";
 import "../chunk-N6IOSZOE.js";
-import "../chunk-RLRDPZG4.js";
-import "../chunk-2XOHXZRC.js";
-import "../chunk-6QZK4O36.js";
+import "../chunk-EUGNVLMG.js";
+import "../chunk-YC27PROF.js";
+import "../chunk-N5MZH5A6.js";
 import "../chunk-POFBE6ZY.js";
 import {
   ansiPainter,
@@ -87,7 +87,7 @@ import {
 } from "../chunk-U4TMAANR.js";
 import {
   exitOnHelpFlag
-} from "../chunk-6NHXKTQU.js";
+} from "../chunk-5S2VBSJI.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -95,16 +95,16 @@ import {
   CANDIDATE_RCS,
   isDisabledExport,
   removeClaudeAlias
-} from "../chunk-VSGKQ3HI.js";
-import "../chunk-D4OGEWLH.js";
-import "../chunk-VQDJ6KB3.js";
-import "../chunk-UFNBKYWT.js";
-import "../chunk-HOIGXMI7.js";
+} from "../chunk-D6OODZCM.js";
+import "../chunk-VE7TXLR4.js";
+import "../chunk-EEEJ2JIL.js";
+import "../chunk-DUQO4C4I.js";
+import "../chunk-OVC5QXN5.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-LI3C2IQY.js";
+import "../chunk-62CVUUNU.js";
 import {
   AGENT_HOOKS_PACKAGE,
   bridgeAgentKey,
@@ -141,10 +141,10 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-NYBZJ44G.js";
+} from "../chunk-MZBRL5H5.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-SJN64NJX.js";
-import "../chunk-65RN6ZCO.js";
+import "../chunk-R6OYCUNK.js";
+import "../chunk-YYCTF4Q5.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   HOOK_LOCATOR_BINARY,
@@ -152,7 +152,7 @@ import {
   SUPPORT_EMAIL,
   isValidApiKey,
   redactSecrets
-} from "../chunk-WWTLAZQA.js";
+} from "../chunk-G4GLCLKK.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
-import "../chunk-YNJ2H2FD.js";
+import "../chunk-Y4ZH64UK.js";
 import {
   LiveTranscriptRelay,
   liveSessionSleep,
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-WXIVUIXA.js";
+} from "../chunk-BIH2Y2HP.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-PWNQGITG.js";
-import "../chunk-R7ZETVNR.js";
-import "../chunk-QSZ37ROP.js";
+} from "../chunk-LHC45YUC.js";
+import "../chunk-P2VIBGXA.js";
+import "../chunk-WPX67AKT.js";
 import {
   transcriptsEnabled
-} from "../chunk-Q7CDBJXU.js";
+} from "../chunk-LPNJLKBQ.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -27,39 +27,39 @@ import {
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion
-} from "../chunk-2XOHXZRC.js";
+} from "../chunk-YC27PROF.js";
 import {
   writeDegraded
-} from "../chunk-6QZK4O36.js";
+} from "../chunk-N5MZH5A6.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-VSGKQ3HI.js";
+import "../chunk-D6OODZCM.js";
 import {
   callMcpTool
-} from "../chunk-D4OGEWLH.js";
-import "../chunk-VQDJ6KB3.js";
-import "../chunk-UFNBKYWT.js";
+} from "../chunk-VE7TXLR4.js";
+import "../chunk-EEEJ2JIL.js";
+import "../chunk-DUQO4C4I.js";
 import {
   getMachineId
-} from "../chunk-HOIGXMI7.js";
+} from "../chunk-OVC5QXN5.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-LI3C2IQY.js";
+import "../chunk-62CVUUNU.js";
 import {
   resolveBinary
-} from "../chunk-NYBZJ44G.js";
+} from "../chunk-MZBRL5H5.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-SJN64NJX.js";
-import "../chunk-65RN6ZCO.js";
+} from "../chunk-R6OYCUNK.js";
+import "../chunk-YYCTF4Q5.js";
 import {
   elicitationContent,
   parseAgentQuestion,
   parseAgentQuestionAnswers,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-WWTLAZQA.js";
+} from "../chunk-G4GLCLKK.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";