@pushary/agent-hooks 1.7.2 → 1.8.0

package/dist/{chunk-YNJ2H2FD.js → chunk-HQ6G3B5R.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-NYBZJ44G.js";
+} from "./chunk-A2A2YTMG.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-WWTLAZQA.js";
+} from "./chunk-NQTHFF4W.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-6NHXKTQU.js → chunk-HZVVNGEW.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-65RN6ZCO.js";
+} from "./chunk-E4FJTUH4.js";
 import {
   getPackageVersion
-} from "./chunk-WWTLAZQA.js";
+} from "./chunk-NQTHFF4W.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-ZUKZJQGR.js → chunk-IPVKH2ST.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-VSGKQ3HI.js";
+} from "./chunk-P7WQEVWA.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-T3PRPFDY.js → chunk-J5TIV3J6.js}

@@ -3,28 +3,28 @@ import {
   addPusharyToolPermissions,
   isPusharyHook,
   removeClaudeMcpServers
-} from "./chunk-KAJT6HPI.js";
+} from "./chunk-AXPCESYO.js";
 import {
   CLAUDE_HOOK_EVENTS,
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-A6WQF7FQ.js";
+} from "./chunk-3EVPNIBE.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-2B4XCMH6.js";
+} from "./chunk-CULUZTWQ.js";
 import {
   guardBinary,
   holdBudgetOf,
   registerHookEntry
-} from "./chunk-NYBZJ44G.js";
+} from "./chunk-A2A2YTMG.js";
 import {
   PHONE_ANSWERED_TOOLS,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-WWTLAZQA.js";
+} from "./chunk-NQTHFF4W.js";
 
 // src/compatible-config.ts
 import { homedir } from "os";

package/dist/{chunk-F6BMJOSW.js → chunk-JU6W3XAU.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-WWTLAZQA.js";
+} from "./chunk-NQTHFF4W.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-AWZNDM3B.js → chunk-JYG4B33G.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-SJN64NJX.js";
+} from "./chunk-GPEGOGRJ.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-ZMWX5SDA.js → chunk-JZTHGAPA.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-E3PLF7YB.js";
+} from "./chunk-EYK3GSRH.js";
 import {
   ensureDaemonRunning
-} from "./chunk-4S7CCOXB.js";
+} from "./chunk-WE2J62NC.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-R7ZETVNR.js";
+} from "./chunk-MPWXGONV.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-QSZ37ROP.js";
+} from "./chunk-SAXBC4AZ.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-Q7CDBJXU.js";
+} from "./chunk-OLQRRFBX.js";
 import {
   readTranscriptPreference
-} from "./chunk-VSGKQ3HI.js";
+} from "./chunk-P7WQEVWA.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-NYBZJ44G.js";
+} from "./chunk-A2A2YTMG.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-SJN64NJX.js";
+} from "./chunk-GPEGOGRJ.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-3RO2UWJQ.js → chunk-KGDWDSNL.js}

@@ -1,9 +1,9 @@
 import {
   registerTranscript
-} from "./chunk-ZMWX5SDA.js";
+} from "./chunk-JZTHGAPA.js";
 import {
   writeDegraded
-} from "./chunk-6QZK4O36.js";
+} from "./chunk-CVQYGMSR.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-MY3UZO5U.js → chunk-KVQBWI5T.js}

@@ -1,10 +1,10 @@
 import {
   pusharyHookExecutable
-} from "./chunk-L6IF4JOF.js";
+} from "./chunk-6J2JC2RT.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-NYBZJ44G.js";
+} from "./chunk-A2A2YTMG.js";
 
 // src/skills-cli.ts
 import { execSync } from "child_process";
@@ -79,7 +79,7 @@ var describeService = (effects) => {
   return `write    ${where} and register it with the OS${condition}`;
 };
 var describeSetupSideEffects = (effects) => [
-  `run      npm install -g @pushary/agent-hooks@${effects.version} (the hooks run from the global copy; up to two minutes)`,
+  `run      npm install -g ${effects.globalPackage}@${effects.version} (the hooks run from the global copy; up to two minutes)`,
   `write    ${effects.configFile} (the API key, mode 600)`,
   effects.rcPath ? `edit     ${effects.rcPath} (export PUSHARY_API_KEY)` : "print    the export line for your shell, since no rc file was found",
   describeService(effects),

package/dist/{chunk-HOIGXMI7.js → chunk-LXQ5FBBD.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-NYBZJ44G.js";
+} from "./chunk-A2A2YTMG.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-D4OGEWLH.js → chunk-M5ICYGHT.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-VQDJ6KB3.js";
+} from "./chunk-2ABTSGFT.js";
 import {
   installNetworkDefaults
-} from "./chunk-UFNBKYWT.js";
+} from "./chunk-2OY3ZZ5N.js";
 import {
   getBaseUrl
-} from "./chunk-SJN64NJX.js";
+} from "./chunk-GPEGOGRJ.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-YLCSKVQQ.js → chunk-M5JDZ45W.js}

@@ -14,17 +14,17 @@ import {
 } from "./chunk-U4TMAANR.js";
 import {
   callMcpTool
-} from "./chunk-D4OGEWLH.js";
+} from "./chunk-M5ICYGHT.js";
 import {
   reportedInstallSource
-} from "./chunk-LI3C2IQY.js";
+} from "./chunk-DB3ONZB4.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-65RN6ZCO.js";
+} from "./chunk-E4FJTUH4.js";
 import {
   PAIR_TTL_SECONDS,
   isAnswerSource
-} from "./chunk-WWTLAZQA.js";
+} from "./chunk-NQTHFF4W.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-SKMWPXGV.js → chunk-MDEPU45E.js}

@@ -1,16 +1,28 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-TVJYGZXB.js";
+} from "./chunk-SLFABHW3.js";
 import {
   openCodeConfigDirFrom
-} from "./chunk-SKEW3TQX.js";
+} from "./chunk-AHV4LNB5.js";
 import {
+  KEY_FILE_MODE
+} from "./chunk-P7WQEVWA.js";
+import {
+  NpmMissingError,
   codexHomeFrom,
   resolvePathBinary
-} from "./chunk-NYBZJ44G.js";
+} from "./chunk-A2A2YTMG.js";
+import {
+  readJsonSafe,
+  writeFileAtomic,
+  writeJsonAtomic
+} from "./chunk-T7E75EKA.js";
+import {
+  NPX_LATEST_COMMAND
+} from "./chunk-E4FJTUH4.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-WWTLAZQA.js";
+} from "./chunk-NQTHFF4W.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";
@@ -680,6 +692,154 @@ var fxIgnoresInstructionsFile = (path, fxDir) => {
   }
 };
 
+// src/setup/agent-failure.ts
+var AgentConfigError = class extends Error {
+  kind;
+  filePath;
+  constructor(kind, filePath, message) {
+    super(message);
+    this.name = "AgentConfigError";
+    this.kind = kind;
+    this.filePath = filePath;
+  }
+};
+var configFailureKind = (readFailure) => readFailure === "unparseable" ? "config-unparseable" : "config-unreadable";
+var AGENT_FAILURE_DETAILS = {
+  "not-wired": "reported success but its config is not there.",
+  "app-account-mismatch": "Mac app hooks kept, but their Pushary account could not be matched to this setup."
+};
+var describedAgentFailure = (agent, kind) => ({
+  agent,
+  kind,
+  detail: AGENT_FAILURE_DETAILS[kind],
+  remedy: "retry-agent"
+});
+var agentFailureFromError = (agent, error, describeError) => ({
+  agent,
+  kind: error instanceof AgentConfigError ? error.kind : "installer-error",
+  detail: describeError(error),
+  remedy: error instanceof NpmMissingError ? "install-node" : "retry-agent"
+});
+var retryAgentCommand = (agent) => `${NPX_LATEST_COMMAND} setup --agents ${agent}`;
+var REMAINING_AGENTS_CONTINUE = "Other agents will continue. Re-run setup to retry.";
+var afterAgentFailureNote = (agentsStillToSetUp) => agentsStillToSetUp > 0 ? REMAINING_AGENTS_CONTINUE : null;
+var failedAgentsContext = (configuredAgentNames) => configuredAgentNames.length > 0 ? `(configured: ${configuredAgentNames.join(", ")})` : null;
+var agentFailureWire = (failures) => failures.map(({ agent, kind }) => ({ agent, kind }));
+
+// src/fx-lifecycle.ts
+import { existsSync as existsSync3 } from "fs";
+var fxRetryHint = () => `Fix it, then run ${retryAgentCommand("fx")}.`;
+var readFxProfileForSetup = (filePath) => {
+  const read = readFxFile(filePath, readFxProfile);
+  if (read.kind === "profile") return read.profile;
+  if (read.kind === "missing") return {};
+  if (read.kind === "unreadable") {
+    throw new AgentConfigError(configFailureKind("unreadable"), filePath, `${filePath} could not be read, so it was left untouched. ${fxRetryHint()}`);
+  }
+  throw new AgentConfigError(
+    configFailureKind("unparseable"),
+    filePath,
+    `${filePath} ${FX_PROFILE_REFUSALS[read.reason]}, so it was left untouched. ${fxRetryHint()}`
+  );
+};
+var writeFxProfile = (filePath, profile) => {
+  const rendered = fxProfileText(profile);
+  if (rendered.kind === "refused") {
+    throw new Error(`${filePath} would grow past the size fx reads, so it was left untouched. ${fxRetryHint()}`);
+  }
+  writeFileAtomic(filePath, rendered.text, KEY_FILE_MODE);
+};
+var fxSettingsReadRefusal = (filePath, read) => {
+  if (read.kind === "unreadable") return `${filePath} could not be read`;
+  if (read.kind === "refused") return `${filePath} ${FX_SETTINGS_REFUSALS[read.reason]}`;
+  return null;
+};
+var recordFxQuestionRule = (receiptPath) => {
+  try {
+    if (!existsSync3(receiptPath)) writeJsonAtomic(receiptPath, FX_QUESTION_RULE_RECEIPT, 384);
+    return true;
+  } catch {
+    return false;
+  }
+};
+var configureFxSettings = (filePath, receiptPath, environment) => {
+  const read = readFxFile(filePath, readFxSettings);
+  const refusal = fxSettingsReadRefusal(filePath, read);
+  if (refusal) return { kind: "refused", detail: refusal };
+  const allowed = withPusharyToolsAllowed(read.kind === "settings" ? read.settings : {});
+  const routed = withQuestionsRoutedToPushary(allowed.settings);
+  const written = {
+    kind: "written",
+    toolsChange: allowed.change,
+    questionChange: routed.change,
+    questionRouting: fxQuestionRouting(routed.settings, environment),
+    workspacesWithOwnRules: [.../* @__PURE__ */ new Set([...workspacesOverridingPusharyRule(routed.settings), ...workspacesShowingQuestionTool(routed.settings)])],
+    ruleRecorded: true
+  };
+  if (allowed.change !== "added" && routed.change !== "added") return written;
+  const rendered = fxSettingsText(routed.settings);
+  if (rendered.kind === "refused") return { kind: "refused", detail: `${filePath} would grow past the 64 KiB fx reads` };
+  try {
+    writeFileAtomic(filePath, rendered.text, KEY_FILE_MODE);
+  } catch (err) {
+    return { kind: "refused", detail: `${filePath} could not be written (${err instanceof Error ? err.message : String(err)})` };
+  }
+  return { ...written, ruleRecorded: routed.change !== "added" || recordFxQuestionRule(receiptPath) };
+};
+var inspectFxInstallation = (profilePath, settingsPath, environment) => {
+  const profile = readFxFile(profilePath, readFxProfile);
+  const entry = profile.kind === "profile" ? fxPusharyEntryOf(profile.profile) : void 0;
+  const settingsRead = readFxFile(settingsPath, readFxSettings);
+  const settings = settingsRead.kind === "settings" ? settingsRead.settings : {};
+  const settingsProblem = settingsRead.kind === "missing" ? `${settingsPath} is missing, so fx runs with no Pushary rules; re-run ${retryAgentCommand("fx")}` : fxSettingsReadRefusal(settingsPath, settingsRead);
+  return {
+    profile,
+    configured: isFxPusharyEntry(entry),
+    bridge: fxBridgeTargetOf(entry),
+    settingsProblem,
+    toolsAllowed: pusharyToolsAllowed(settings),
+    questionRouting: fxQuestionRouting(settings, environment),
+    workspacesShowingQuestions: workspacesShowingQuestionTool(settings)
+  };
+};
+var removalWrite = (path, rendered, label) => rendered.kind === "refused" ? { kind: "kept", label, detail: `${path} would grow past the size fx reads; left untouched` } : { kind: "write", path, text: rendered.text, label };
+var FX_QUESTION_RULE_KEPT = {
+  "not-ours": "no setup record says Pushary added it, so it may be yours; left as it is",
+  "changed-after-setup": "changed after setup; left as it is"
+};
+var planFxRemoval = (profilePath, settingsPath, receiptPath) => {
+  const actions = [];
+  const profile = readFxFile(profilePath, readFxProfile);
+  if (profile.kind === "profile") {
+    const result = withoutFxPusharyServer(profile.profile);
+    actions.push(result.removed ? removalWrite(profilePath, fxProfileText(result.profile), "fx MCP") : { kind: "kept", label: "fx MCP", detail: "no pushary entry" });
+  } else {
+    let detail = "not found";
+    if (profile.kind === "unreadable") detail = `${profilePath} could not be read; left untouched`;
+    if (profile.kind === "refused") detail = `${profilePath} ${FX_PROFILE_REFUSALS[profile.reason]}; left untouched`;
+    actions.push({ kind: "kept", label: "fx MCP", detail });
+  }
+  const read = readFxFile(settingsPath, readFxSettings);
+  const problem = fxSettingsReadRefusal(settingsPath, read);
+  if (problem) return [...actions, { kind: "kept", label: "fx settings", detail: `${problem}; left untouched` }];
+  if (read.kind === "settings") {
+    const rawReceipt = readJsonSafe(receiptPath);
+    const receipt = rawReceipt.kind === "ok" && isFxQuestionRuleReceipt(rawReceipt.value) ? rawReceipt.value : null;
+    const tools = withoutPusharyToolsAllowed(read.settings);
+    const question = withoutQuestionsRoutedToPushary(tools.settings, receipt);
+    if (tools.removed || question.outcome === "removed") {
+      const write = removalWrite(settingsPath, fxSettingsText(question.settings), "fx permission rules");
+      actions.push(write);
+      if (write.kind === "kept") return actions;
+    }
+    if (question.outcome === "not-ours" || question.outcome === "changed-after-setup") {
+      actions.push({ kind: "kept", label: "fx question rule", detail: FX_QUESTION_RULE_KEPT[question.outcome] });
+    }
+  }
+  if (existsSync3(receiptPath)) actions.push({ kind: "remove-receipt", path: receiptPath });
+  return actions;
+};
+
 // src/vscode-config.ts
 import { homedir as homedir2 } from "os";
 import { join as join2 } from "path";
@@ -828,7 +988,7 @@ var vscodeSettingsTargets = (exists, home, platform) => {
 
 // src/setup/detect.ts
 import { execSync } from "child_process";
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 import { homedir as homedir3 } from "os";
 import { dirname, join as join3 } from "path";
 var whichCommand = () => process.platform === "win32" ? "where" : "which";
@@ -840,7 +1000,7 @@ var binaryOnPath = (binary) => {
     return false;
   }
 };
-var defaultDeps = { onPath: binaryOnPath, exists: existsSync3 };
+var defaultDeps = { onPath: binaryOnPath, exists: existsSync4 };
 var detectAgent = (probe, deps = defaultDeps) => {
   const checked = [];
   if (probe.binary) {
@@ -943,7 +1103,7 @@ var describeDetection = (result, home) => {
 };
 
 // src/instruction-file.ts
-import { existsSync as existsSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync2, mkdirSync, rmSync as rmSync2 } from "fs";
+import { existsSync as existsSync5, readFileSync as readFileSync3, writeFileSync as writeFileSync2, mkdirSync, rmSync as rmSync2 } from "fs";
 import { dirname as dirname2 } from "path";
 var PUSHARY_BEGIN = "<!-- BEGIN PUSHARY (managed by @pushary/agent-hooks; do not edit this block) -->";
 var PUSHARY_END = "<!-- END PUSHARY -->";
@@ -963,6 +1123,7 @@ You have Pushary MCP tools that reach the user on their phone. Use them proactiv
 - Respect the user's Pushary delivery mode: it decides where an approval is surfaced (phone, terminal, or awareness only), not whether it is required. In Terminal mode do not expect a phone answer; the approval waits in the terminal. If the Pushary hook already gated an action, a single approval is enough, do not ask again.
 
 Pass \`agentName\` as "${label} - <project folder name>" so the user knows which session is asking. If a question times out, follow \`handoffAction\` when present, otherwise \`nextAction\`: poll once, then cancel a live phone question before asking in the current client. If cancellation returns \`handoffAction: "stop"\`, stop. Otherwise, if cancellation returns false, poll once for 1 second and honor the answer that won the race.`;
+var SHARED_AGENTS_MD_LABEL = "<your agent's name, such as Codex or Hermes>";
 var renderAgentInstructions = (label) => instructionBody(label);
 var KEYLESS_FALLBACK_LINE = "This repo uses Pushary phone approvals. Your teammates get agent questions on their lock screens; you do not have a key yet, so questions will fall back to the terminal. Get your own key (3-day trial): https://pushary.com/sign-up?utm_source=agents-md&utm_medium=teammate";
 var renderProjectAgentInstructions = (label) => `${instructionBody(label)}
@@ -973,7 +1134,7 @@ ${body}
 ${PUSHARY_END}`;
 var writeInstructionBlock = (filePath, body) => {
   const dir = dirname2(filePath);
-  if (!existsSync4(dir)) mkdirSync(dir, { recursive: true });
+  if (!existsSync5(dir)) mkdirSync(dir, { recursive: true });
   let existing = "";
   try {
     existing = readFileSync3(filePath, "utf-8");
@@ -1028,30 +1189,23 @@ export {
   FX_PUSHARY_TOOLS_RULE,
   FX_TOOL_DISCOVERY_NOTE,
   FX_PROFILE_REFUSALS,
-  FX_SETTINGS_REFUSALS,
-  readFxProfile,
   fxPusharyEntry,
   withFxPusharyServer,
-  withoutFxPusharyServer,
-  isFxPusharyEntry,
-  fxPusharyEntryOf,
-  fxBridgeTargetOf,
-  fxProfileText,
-  fxSettingsText,
-  readFxSettings,
-  withPusharyToolsAllowed,
-  withoutPusharyToolsAllowed,
-  pusharyToolsAllowed,
-  workspacesOverridingPusharyRule,
   FX_QUESTION_TOOL,
-  FX_QUESTION_RULE_RECEIPT,
-  isFxQuestionRuleReceipt,
-  fxQuestionRouting,
-  withQuestionsRoutedToPushary,
-  withoutQuestionsRoutedToPushary,
-  workspacesShowingQuestionTool,
-  readFxFile,
   fxIgnoresInstructionsFile,
+  AgentConfigError,
+  configFailureKind,
+  describedAgentFailure,
+  agentFailureFromError,
+  retryAgentCommand,
+  afterAgentFailureNote,
+  failedAgentsContext,
+  agentFailureWire,
+  readFxProfileForSetup,
+  writeFxProfile,
+  configureFxSettings,
+  inspectFxInstallation,
+  planFxRemoval,
   registerPluginLocation,
   unregisterPluginLocation,
   isPluginRegistered,
@@ -1063,6 +1217,7 @@ export {
   isDetected,
   shortenHome,
   describeDetection,
+  SHARED_AGENTS_MD_LABEL,
   renderAgentInstructions,
   renderProjectAgentInstructions,
   writeInstructionBlock,

package/dist/{chunk-R7ZETVNR.js → chunk-MPWXGONV.js}

@@ -1,6 +1,6 @@
 import {
-  redactSecrets
-} from "./chunk-WWTLAZQA.js";
+  redactSecretsFromContent
+} from "./chunk-NQTHFF4W.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";
@@ -111,7 +111,7 @@ var INTERNAL_TYPES = /* @__PURE__ */ new Set([
   "artifact-comment-monitor"
 ]);
 var redactDeep = (value) => {
-  if (typeof value === "string") return redactSecrets(value);
+  if (typeof value === "string") return redactSecretsFromContent(value);
   if (Array.isArray(value)) return value.map(redactDeep);
   if (value && typeof value === "object") {
     const out = {};

package/dist/{chunk-2XOHXZRC.js → chunk-NGDD6TXY.js}

@@ -1,17 +1,23 @@
 import {
   clientErrorKindOf,
   reportClientError
-} from "./chunk-6QZK4O36.js";
+} from "./chunk-CVQYGMSR.js";
 import {
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-D4OGEWLH.js";
+} from "./chunk-M5ICYGHT.js";
 import {
   installNetworkDefaults
-} from "./chunk-UFNBKYWT.js";
+} from "./chunk-2OY3ZZ5N.js";
 import {
   getBaseUrl
-} from "./chunk-SJN64NJX.js";
+} from "./chunk-GPEGOGRJ.js";
+import {
+  ASK_AGENT_NAME_MAX,
+  ASK_QUESTION_MAX,
+  DECISION_LINE_MAX,
+  truncateLine
+} from "./chunk-NQTHFF4W.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";
@@ -59,9 +65,18 @@ var unavailableQuestionUnlessSubscriptionRequired = (error) => {
   if (error instanceof SubscriptionRequiredError) throw error;
   return { correlationId: "", status: "unavailable" };
 };
+var truncateOptional = (text, max) => text === void 0 ? void 0 : truncateLine(text, max);
+var withinAskUserLimits = (params) => ({
+  ...params,
+  question: truncateLine(params.question, ASK_QUESTION_MAX),
+  agentName: truncateOptional(params.agentName, ASK_AGENT_NAME_MAX),
+  intent: truncateOptional(params.intent, DECISION_LINE_MAX),
+  action: truncateOptional(params.action, DECISION_LINE_MAX),
+  blocker: truncateOptional(params.blocker, DECISION_LINE_MAX)
+});
 var askUser = async (apiKey, params, timeoutMs = 15e3) => {
   const identified = params.toolUseId || params.requestId ? params : { ...params, requestId: randomUUID() };
-  const result = await callMcpTool(apiKey, "ask_user", { ...identified, wait: false }, { maxRetries: 3, timeoutMs });
+  const result = await callMcpTool(apiKey, "ask_user", { ...withinAskUserLimits(identified), wait: false }, { maxRetries: 3, timeoutMs });
   if (!isAskUserResponse(result)) throw new Error("Invalid ask_user response");
   return result;
 };