@pushary/agent-hooks 1.7.3 → 1.8.1

package/dist/{chunk-DUQO4C4I.js → chunk-2SLCHCVN.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-OVC5QXN5.js";
+} from "./chunk-4A3UQERT.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-R6OYCUNK.js";
+} from "./chunk-ON5JW2HP.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-G4GLCLKK.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-YYCTF4Q5.js → chunk-35X5UDML.js}

@@ -1,9 +1,9 @@
 import {
   SETUP_AGENT_CHOICES
-} from "./chunk-G4GLCLKK.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/cli/commands.ts
-var NPX_LATEST_COMMAND = "npx @pushary/agent-hooks@latest";
+var NPX_LATEST_COMMAND = "npx pushary@latest";
 var COMMAND_LIST = [
   {
     name: "cowork",
@@ -181,11 +181,11 @@ var SETUP_OPTIONS = [
 ];
 var AGENT_IDS = SETUP_AGENT_CHOICES.join(", ");
 var USAGE_EXAMPLES = [
-  "npx @pushary/agent-hooks@latest setup",
-  "npx @pushary/agent-hooks@latest setup --agents auto --yes --skip-phone",
-  "npx @pushary/agent-hooks@latest setup --key-stdin --agents claude_code --yes < key.txt",
-  "npx @pushary/agent-hooks@latest doctor",
-  "npx @pushary/agent-hooks@latest mode push_only --for 30m",
+  `${NPX_LATEST_COMMAND} setup`,
+  `${NPX_LATEST_COMMAND} setup --agents auto --yes --skip-phone`,
+  `${NPX_LATEST_COMMAND} setup --key-stdin --agents claude_code --yes < key.txt`,
+  `${NPX_LATEST_COMMAND} doctor`,
+  `${NPX_LATEST_COMMAND} mode push_only --for 30m`,
   "pushary claude                                    # native terminal, reachable from your phone",
   'pushary claude --remote -p "start the refactor"   # start headless, drive from your phone',
   "pushary daemon                                    # keep this machine ready to spawn a session"

package/dist/{chunk-OVC5QXN5.js → chunk-4A3UQERT.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-MZBRL5H5.js";
+} from "./chunk-UPLV5AJF.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/chunk-5DGNEUXK.js

@@ -0,0 +1,73 @@
+import {
+  AUTO_DECISION_WINDOW_MS,
+  claimThrottle,
+  deriveToolTarget,
+  permissionDeniedAction,
+  releaseThrottle,
+  reportEvent
+} from "./chunk-F6NTWZZC.js";
+import {
+  DEFAULT_SESSION
+} from "./chunk-N6IOSZOE.js";
+import {
+  machineDecisionFor,
+  shouldDeferToNativeMode,
+  wireVerdictFor
+} from "./chunk-5YY3IJT4.js";
+
+// src/machine-decision-audit.ts
+import { basename } from "path";
+var reportMachineDenial = async (input, verdict, agent) => {
+  const decision = machineDecisionFor(wireVerdictFor(verdict, 0));
+  if (!decision) return;
+  const sessionKey = input.session_id || DEFAULT_SESSION;
+  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+  const throttleKey = `machinedecision:${agent.type}:${sessionKey}:${input.tool_name}:${decision.origin}:${toolTarget ?? ""}`;
+  const throttle = claimThrottle(throttleKey, AUTO_DECISION_WINDOW_MS);
+  if (throttle === "throttled") return;
+  if (throttle === "unavailable") {
+    console.error("[Pushary] Could not access the audit throttle; reporting this denial without deduplication.");
+  }
+  try {
+    const response = await reportEvent({
+      event: "permission_denied",
+      occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
+      toolUseId: input.tool_use_id,
+      agentType: agent.type,
+      agentName: `${agent.label} - ${basename(input.cwd ?? process.cwd())}`,
+      action: permissionDeniedAction(input.tool_name),
+      sessionId: input.session_id,
+      decisionSource: "policy_auto",
+      decisionOrigin: decision.origin,
+      decisionOutcome: decision.outcome,
+      toolName: input.tool_name,
+      toolTarget
+    }, { maxAttempts: 1, timeoutMs: 800, requireOk: true, skipDrain: true });
+    if (response?.ok !== true) throw new Error("Audit delivery was not acknowledged");
+  } catch {
+    console.error("[Pushary] Could not record the machine denial. The action remains blocked; its audit delivery will be retried on the next matching denial.");
+    if (throttle === "passed") {
+      try {
+        releaseThrottle(throttleKey);
+      } catch {
+        console.error("[Pushary] Could not reset the failed audit throttle.");
+      }
+    }
+  }
+};
+
+// src/native-defer.ts
+var nativeDeferOptions = () => {
+  const respect = process.env.PUSHARY_RESPECT_PERMISSION_MODE;
+  const bypass = process.env.PUSHARY_DEFER_BYPASS;
+  return {
+    respectPermissionMode: !(respect === "0" || respect === "false"),
+    deferBypass: bypass === "1" || bypass === "true"
+  };
+};
+var defersToNativeMode = (permissionMode, toolName) => shouldDeferToNativeMode(permissionMode, toolName, nativeDeferOptions());
+
+export {
+  reportMachineDenial,
+  defersToNativeMode
+};

package/dist/{chunk-62CVUUNU.js → chunk-5Y2DY6X4.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-R6OYCUNK.js";
+} from "./chunk-ON5JW2HP.js";
 import {
   normalizeInstallSource
-} from "./chunk-G4GLCLKK.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-G4GLCLKK.js → chunk-5YY3IJT4.js}

@@ -22,7 +22,7 @@ var COWORK_STANDING_INSTRUCTIONS = `Pushary is connected as a custom connector.
 - If Pushary tools are missing or disabled, report that once and continue within my authorization. Do not claim a notification or approval was delivered.`;
 
 // ../contracts/src/agent-manifest.ts
-var AGENT_HOOKS_SETUP_COMMAND = "npx @pushary/agent-hooks@latest setup";
+var PUSHARY_SETUP_COMMAND = "npx pushary@latest setup";
 var defaults = {
   hasStoredIdentity: true,
   hookSource: null,
@@ -54,7 +54,7 @@ var AGENTS = {
     managedProvider: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits, subject to Claude Code permission mode and explicit policy."
   },
   claude_chat: {
@@ -81,7 +81,7 @@ var AGENTS = {
     managedProvider: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell and apply_patch edits through native permission hooks; requires a compatible Codex runtime."
   },
   chatgpt: {
@@ -101,7 +101,7 @@ var AGENTS = {
     managedProvider: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native BeforeTool hooks."
   },
   hermes: {
@@ -110,7 +110,7 @@ var AGENTS = {
     policyAgent: "hermes",
     enforcement: "enforced",
     connectVia: "Native Python plugin + approval transport",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Hermes dangerous-command approvals when the Pushary transport is selected; optional PUSHARY_GATE_TOOLS gates named tools.",
     capabilityNote: "Uses the Python plugin, not a macOS bridge HookSource. CLI disconnect and managed-provider controls are not implemented for Hermes."
   },
@@ -123,7 +123,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Editor plugin hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "With installed hooks: shell, MCP execution and Write/Delete/Edit tool calls. Plain MCP remains cooperative."
   },
   vscode: {
@@ -134,7 +134,7 @@ var AGENTS = {
     policyAgent: "vscode",
     enforcement: "enforced",
     connectVia: "Agent plugin hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "PreToolUse approval hooks from the installed agent plugin; the host decides which events it exposes.",
     capabilityNote: "Has both a bridge HookSource and a per-agent policy profile. CLI disconnect and managed-provider controls are not implemented for VS Code."
   },
@@ -148,14 +148,14 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Generated plugin + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell, writes, edits and web fetches when OpenCode itself asks for permission."
   },
   fx: {
     ...defaults,
     label: "fx",
     connectVia: "Local MCP bridge",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     capabilityNote: "fx has no hooks that other tools can register, so Pushary cannot answer fx's own approval prompts. Setup turns off fx's terminal question tool so fx's agent asks through Pushary. fx's full-access mode ignores that setting; there the agent is only instructed to ask through Pushary."
   },
   qwen_code: {
@@ -168,7 +168,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native PreToolUse hooks, matched on Qwen's own tool names and their Claude-shaped aliases."
   },
   codebuddy: {
@@ -181,7 +181,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native PreToolUse hooks, plus PermissionRequest. CodeBuddy implements the Claude Code hook specification."
   },
   qoder: {
@@ -194,7 +194,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native PreToolUse hooks, plus PermissionRequest, over Qoder's superset of the Claude Code event list.",
     capabilityNote: "Qoder documents no user-level instructions file, so the proactive-ask block is not installed. Hooks and MCP are unaffected. Like every agent in this family, the CLI wires it; the macOS app does not yet."
   },
@@ -208,7 +208,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Execute, Create, Edit and ApplyPatch through native PreToolUse hooks in ~/.factory/hooks.json.",
     capabilityNote: "Droid registers MCP servers through `droid mcp add` rather than a documented remote-server config shape, so setup writes hooks only. Add Pushary's MCP server yourself to let Droid send notifications and ask questions."
   },
@@ -222,14 +222,14 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "exec, write and edit through native PreToolUse hooks, answered in Devin's own approve/block schema.",
     capabilityNote: "Devin CLI answers PreToolUse with `{decision}` rather than a permission decision. Pushary blocks an unanswered approval because this adapter cannot request a native prompt reliably. Question and plan dialogs remain with Devin; this adapter does not render their answers. It also fires no Notification event."
   },
   windsurf: {
     ...defaults,
     label: "Windsurf",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     setupChoice: "Other"
   },
   unknown: {
@@ -246,7 +246,7 @@ var AGENTS = {
     ...defaults,
     hasStoredIdentity: false,
     label: "Any MCP client",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     setupChoice: "Other"
   },
   http: {
@@ -455,7 +455,7 @@ var compatibleTargetFiles = (profile) => {
 };
 
 // ../contracts/src/redaction.ts
-var CREDENTIAL_NAME = String.raw`(?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)["']?`;
+var CREDENTIAL_NAME = String.raw`(?:authorization|secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)["']?`;
 var CREDENTIAL_KEY = String.raw`${CREDENTIAL_NAME}\s*[=:]\s*`;
 var DISPLAYED_CREDENTIAL_KEY = String.raw`${CREDENTIAL_NAME}(?:[ \t]*:[ \t]*|[ \t]+=[ \t]*|=)`;
 var SHELL_INERT_UNIT = String.raw`(?:[A-Za-z0-9_\-./+=:@%^!#]|\\[^\s'"])`;
@@ -467,6 +467,7 @@ var credentialAssignmentRule = (key, doubleQuoted, singleQuoted, bare) => ({
   replacement: "$1$2$3$4[redacted]$2$3"
 });
 var DISPLAYED_SECRET_SHAPES = {
+  separator: String.raw`[ \t]`,
   privateKeyBody: String.raw`${PEM_LINE_BREAK}?(?:(?:Proc-Type|DEK-Info): [A-Za-z0-9,-]+${PEM_LINE_BREAK})*(?:[A-Za-z0-9+/=\r\n]|\\[rn])*?`,
   urlPassword: `${SHELL_INERT_URL_PASSWORD_UNIT}+`,
   authorizationValue: `${SHELL_INERT_UNIT}+`,
@@ -478,6 +479,7 @@ var DISPLAYED_SECRET_SHAPES = {
   )
 };
 var CUT_OFF_SECRET_SHAPES = {
+  separator: String.raw`\s`,
   privateKeyBody: String.raw`[\s\S]*?`,
   urlPassword: String.raw`[^\s@/]+`,
   authorizationValue: String.raw`\S+`,
@@ -504,8 +506,8 @@ var secretRedactionRules = (shapes) => [
   { pattern: /\bxai-[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
   { pattern: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, replacement: "[redacted]" },
   { pattern: new RegExp(String.raw`\b([a-z][a-z0-9+.-]*:\/\/[^\s:/@]+:)${shapes.urlPassword}@`, "gi"), replacement: "$1[redacted]@" },
-  { pattern: /\bbearer\s+[A-Za-z0-9._~+/=-]+/gi, replacement: "bearer [redacted]" },
-  { pattern: new RegExp(String.raw`\bauthorization:\s*${shapes.authorizationValue}`, "gi"), replacement: "authorization: [redacted]" },
+  { pattern: new RegExp(String.raw`\bbearer${shapes.separator}+[A-Za-z0-9._~+/=-]+`, "gi"), replacement: "bearer [redacted]" },
+  { pattern: new RegExp(String.raw`\bauthorization:${shapes.separator}*${shapes.authorizationValue}`, "gi"), replacement: "authorization: [redacted]" },
   shapes.credentialAssignment
 ];
 var SECRET_REDACTION_RULES = secretRedactionRules(DISPLAYED_SECRET_SHAPES);
@@ -643,7 +645,7 @@ var parseAgentQuestionAnswers = (questions, value) => {
   return answers;
 };
 var INSTALL_SOURCES = [
-  /** `npx @pushary/agent-hooks@latest ...`, the documented one-liner. */
+  /** `npx pushary@latest ...`, the documented one-liner. */
   "npx",
   /** A global or project npm install, invoked as `pushary`. */
   "npm",
@@ -659,9 +661,13 @@ var INSTALL_SOURCES = [
   "framework_adapter",
   /** The browser onboarding wizard. */
   "dashboard",
-  /** Reported nothing, or reported something we do not recognise. */
   /** The macOS app pairing a phone from its own onboarding. */
   "mac_app",
+  /** The phone app's own sign-up, which provisions the agent site before any web step. */
+  "mobile_app",
+  /** The CLI's device-code sign-in page (`/cli/authorize`), which provisions a site before any web step. */
+  "cli_login",
+  /** Reported nothing, or reported something we do not recognise. */
   "unknown"
 ];
 var isInstallSource = (value) => typeof value === "string" && INSTALL_SOURCES.includes(value);
@@ -1535,6 +1541,16 @@ var API_KEY_PATTERN = /^pk_[a-f0-9]+\.[a-f0-9]+$/;
 var isValidApiKey = (value) => API_KEY_PATTERN.test(value);
 var ACTION_BODY_MAX = 4e3;
 var DECISION_LINE_MAX = 500;
+var ASK_QUESTION_MAX = 500;
+var ASK_AGENT_NAME_MAX = 100;
+var TRUNCATION_MARK = "\u2026";
+var isHighSurrogate = (code) => code >= 55296 && code <= 56319;
+var truncateLine = (text, max, mark = TRUNCATION_MARK) => {
+  if (text.length <= max) return text;
+  const end = max - mark.length;
+  const keep = isHighSurrogate(text.charCodeAt(end - 1)) ? end - 1 : end;
+  return `${text.slice(0, keep)}${mark}`;
+};
 var APPROVAL_FATIGUE_FLAG_PATTERNS = [
   /\brm\s+-[a-z]*r/i,
   /\brmdir\b/i,
@@ -2539,40 +2555,126 @@ var hookActivationResult = (report) => {
   return report && !report.truncated && report.evidence.length === 1 ? report.evidence[0].result : "unverified";
 };
 
+// src/cli-package-name.ts
+var CANONICAL_PACKAGE = "pushary";
+var LEGACY_PACKAGE = "@pushary/agent-hooks";
+var CLI_PACKAGE_NAMES = [CANONICAL_PACKAGE, LEGACY_PACKAGE];
+var isCliPackageName = (value) => typeof value === "string" && CLI_PACKAGE_NAMES.some((name) => name === value);
+var cliPackagePathSegments = (name) => name.split("/");
+
+// src/global-package.ts
+import { posix, win32 } from "path";
+var OWNERSHIP_PROBE_COMMAND = "pushary-hook";
+var pathApiFor = (platform) => platform === "win32" ? win32 : posix;
+var POSIX_GLOBAL_ROOT_SEGMENTS = ["lib", "node_modules"];
+var UPGRADE_ENTRY_SEGMENTS = ["dist", "bin", "pushary-upgrade.js"];
+var globalRootFor = (prefix, platform) => platform === "win32" ? win32.join(prefix, "node_modules") : posix.join(prefix, ...POSIX_GLOBAL_ROOT_SEGMENTS);
+var globalPackageFolder = (root, name, platform) => pathApiFor(platform).join(root, ...cliPackagePathSegments(name));
+var globalUpgradeEntry = (prefix, name, platform) => pathApiFor(platform).join(globalPackageFolder(globalRootFor(prefix, platform), name, platform), ...UPGRADE_ENTRY_SEGMENTS);
+var isInsideFolder = (target, folder, platform) => {
+  const pathApi = pathApiFor(platform);
+  const relativePath = pathApi.relative(folder, target);
+  return relativePath !== "" && !relativePath.startsWith("..") && !pathApi.isAbsolute(relativePath);
+};
+var linkPointsInto = (evidence, targets, name) => evidence.globalRoots.some((root) => {
+  const folder = globalPackageFolder(root, name, evidence.platform);
+  return targets.some((target) => isInsideFolder(target, folder, evidence.platform));
+});
+var ownerFromInstalled = (installed, whenNone) => {
+  const [only, ...others] = installed;
+  if (only === void 0) return whenNone;
+  if (others.length > 0) return { kind: "unknown", reason: "both_installed" };
+  return { kind: "owned", name: only };
+};
+var decideCommandOwner = (evidence) => {
+  const { link } = evidence;
+  if (link.kind === "resolved") {
+    const name = CLI_PACKAGE_NAMES.find((candidate) => linkPointsInto(evidence, link.targets, candidate));
+    return name === void 0 ? { kind: "unknown", reason: "foreign_command" } : { kind: "owned", name };
+  }
+  const whenNone = link.kind === "absent" ? { kind: "none" } : { kind: "unknown", reason: "unreadable_command" };
+  return ownerFromInstalled(evidence.installed, whenNone);
+};
+var CMD_SHIM_TARGET = /"%(?:~dp0|dp0%)\\([^"]+?)"\s+%[*]/;
+var cmdShimTarget = (shimDir, contents) => {
+  const relativeTarget = CMD_SHIM_TARGET.exec(contents)?.[1];
+  return relativeTarget === void 0 ? void 0 : win32.resolve(shimDir, relativeTarget);
+};
+var launchedPackage = (ownName) => ownName ?? LEGACY_PACKAGE;
+var globalInstallTarget = (owner, ownName) => {
+  switch (owner.kind) {
+    case "owned":
+      return owner.name;
+    case "none":
+      return launchedPackage(ownName);
+    case "unknown":
+      return LEGACY_PACKAGE;
+  }
+};
+var isRecord2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var declaresOwnershipProbe = (bin) => isRecord2(bin) && typeof bin[OWNERSHIP_PROBE_COMMAND] === "string";
+var cliManifestName = (manifest) => {
+  if (!isRecord2(manifest) || !isCliPackageName(manifest.name) || !declaresOwnershipProbe(manifest.bin)) return void 0;
+  return manifest.name;
+};
+var classifyGlobalFolder = (name, read) => {
+  if (read.kind === "unreadable") return { kind: "unseen" };
+  const { manifest } = read;
+  if (!isRecord2(manifest) || cliManifestName(manifest) !== name) return { kind: "foreign" };
+  return { kind: "ours", installed: { name, version: typeof manifest.version === "string" ? manifest.version : void 0 } };
+};
+var classifyGlobalInstall = (installed, owner) => {
+  const [only, ...others] = installed;
+  if (only === void 0) return { kind: "absent" };
+  if (others.length === 0) return { kind: "single", installed: only };
+  return { kind: "both", installed, owner };
+};
+var isUninstallable = (evidence) => evidence.listing !== "absent" && evidence.folder !== "foreign";
+var globalPackagesToUninstall = (evidence) => evidence.filter(isUninstallable).map((entry) => entry.name);
+var commandsPackage = (install) => {
+  if (install.kind === "single") return install.installed;
+  if (install.kind !== "both" || install.owner.kind !== "owned") return void 0;
+  const ownerName = install.owner.name;
+  return install.installed.find((installed) => installed.name === ownerName);
+};
+
 // src/cli/version.ts
 import { readFileSync } from "fs";
 import { dirname, join, parse } from "path";
 import { fileURLToPath } from "url";
-var PACKAGE_NAME = "@pushary/agent-hooks";
 var UNKNOWN_VERSION = "0.0.0";
-var findOwnPackageJson = (start) => {
+var cliManifestNameAt = (manifestPath) => {
+  try {
+    return cliManifestName(JSON.parse(readFileSync(manifestPath, "utf-8")));
+  } catch {
+    return void 0;
+  }
+};
+var findOwnPackage = (start) => {
   const { root } = parse(start);
   let dir = start;
   while (true) {
-    const candidate = join(dir, "package.json");
-    try {
-      const pkg = JSON.parse(readFileSync(candidate, "utf-8"));
-      if (pkg.name === PACKAGE_NAME) return candidate;
-    } catch {
-    }
+    const name = cliManifestNameAt(join(dir, "package.json"));
+    if (name !== void 0) return { root: dir, name };
     if (dir === root) return void 0;
     const parent = dirname(dir);
     if (parent === dir) return void 0;
     dir = parent;
   }
 };
-var getPackageVersion = () => {
-  const root = ownPackageRoot();
-  return (root === void 0 ? void 0 : packageVersionAt(root)) ?? UNKNOWN_VERSION;
-};
-var ownPackageRoot = () => {
+var runningPackage = () => {
   try {
-    const found = findOwnPackageJson(dirname(fileURLToPath(import.meta.url)));
-    return found ? dirname(found) : void 0;
+    return findOwnPackage(dirname(fileURLToPath(import.meta.url)));
   } catch {
     return void 0;
   }
 };
+var getPackageVersion = () => {
+  const root = ownPackageRoot();
+  return (root === void 0 ? void 0 : packageVersionAt(root)) ?? UNKNOWN_VERSION;
+};
+var ownPackageRoot = () => runningPackage()?.root;
+var ownPackageName = () => runningPackage()?.name;
 var packageVersionAt = (packageRoot) => {
   try {
     const manifest = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf-8"));
@@ -2657,6 +2759,9 @@ export {
   isValidApiKey,
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
+  ASK_QUESTION_MAX,
+  ASK_AGENT_NAME_MAX,
+  truncateLine,
   isAnswerSource,
   buildDecisionEpisodeFeatures,
   resolveAutoResolveOrigin,
@@ -2700,8 +2805,26 @@ export {
   planElicitationAsk,
   elicitationContent,
   elicitationContentFromAnswers,
+  CANONICAL_PACKAGE,
+  LEGACY_PACKAGE,
+  CLI_PACKAGE_NAMES,
+  cliPackagePathSegments,
+  OWNERSHIP_PROBE_COMMAND,
+  POSIX_GLOBAL_ROOT_SEGMENTS,
+  globalRootFor,
+  globalPackageFolder,
+  globalUpgradeEntry,
+  decideCommandOwner,
+  cmdShimTarget,
+  launchedPackage,
+  globalInstallTarget,
+  classifyGlobalFolder,
+  classifyGlobalInstall,
+  globalPackagesToUninstall,
+  commandsPackage,
   getPackageVersion,
   ownPackageRoot,
+  ownPackageName,
   packageVersionAt,
   isNewerVersion,
   isReleaseVersion,

package/dist/{chunk-KJXUIPS4.js → chunk-64H5IZZD.js}

@@ -3,23 +3,25 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-MZBRL5H5.js";
+} from "./chunk-UPLV5AJF.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
+  CLI_PACKAGE_NAMES,
+  POSIX_GLOBAL_ROOT_SEGMENTS,
+  cliPackagePathSegments,
+  globalUpgradeEntry,
   ownPackageRoot
-} from "./chunk-G4GLCLKK.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";
-import { dirname, join } from "path";
+import { dirname } from "path";
 var AUTO_UPDATE_DISABLE_ENV = "PUSHARY_DISABLE_AUTOUPDATE";
 var AUTO_UPDATE_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 var AUTO_UPDATE_FLAG = "--auto";
-var GLOBAL_PACKAGE_SUBPATH = "/lib/node_modules/@pushary/agent-hooks";
-var UPGRADE_ENTRY_SUBPATH = ["dist", "bin", "pushary-upgrade.js"];
 var NON_GLOBAL_INSTALL_SEGMENTS = ["/_npx/", "/.volta/"];
 var AUTO_UPDATE_RESULTS = ["updated", "current", "needs_manual", "failed", "finish_pending"];
 var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
@@ -55,14 +57,24 @@ var autoUpdateOffReason = (input) => {
   if (input.platform === "linux") return "linux";
   return null;
 };
-var globalInstallPrefix = (packageRoot) => {
-  const root = packageRoot.replace(/\/+$/, "");
-  if (!root.endsWith(GLOBAL_PACKAGE_SUBPATH)) return null;
-  if (NON_GLOBAL_INSTALL_SEGMENTS.some((segment) => root.includes(segment))) return null;
-  const prefix = root.slice(0, -GLOBAL_PACKAGE_SUBPATH.length);
+var globalPackageSubpath = (name) => `/${[...POSIX_GLOBAL_ROOT_SEGMENTS, ...cliPackagePathSegments(name)].join("/")}`;
+var prefixOfGlobalPackage = (root, name) => {
+  const subpath = globalPackageSubpath(name);
+  if (!root.endsWith(subpath)) return null;
+  const prefix = root.slice(0, -subpath.length);
   return prefix.startsWith("/") ? prefix : null;
 };
-var upgradeEntryFor = (prefix) => join(prefix, GLOBAL_PACKAGE_SUBPATH, ...UPGRADE_ENTRY_SUBPATH);
+var isNonGlobalInstall = (root) => NON_GLOBAL_INSTALL_SEGMENTS.some((segment) => root.includes(segment));
+var globalInstallLocation = (packageRoot) => {
+  const root = packageRoot.replace(/\/+$/, "");
+  if (isNonGlobalInstall(root)) return null;
+  for (const packageName of CLI_PACKAGE_NAMES) {
+    const prefix = prefixOfGlobalPackage(root, packageName);
+    if (prefix !== null) return { prefix, packageName };
+  }
+  return null;
+};
+var upgradeEntryFor = (location, platform = process.platform) => globalUpgradeEntry(location.prefix, location.packageName, platform);
 var checkedWithinInterval = (lastCheckAt, now) => {
   const last = lastCheckAt === void 0 ? Number.NaN : Date.parse(lastCheckAt);
   if (Number.isNaN(last)) return false;
@@ -73,10 +85,10 @@ var autoUpdateDecision = (input) => {
   if (input.isSubagentStart) return { kind: "skip", reason: "subagent_start" };
   const offReason = autoUpdateOffReason(input);
   if (offReason !== null) return { kind: "skip", reason: offReason };
-  const prefix = input.packageRoot === void 0 ? null : globalInstallPrefix(input.packageRoot);
-  if (prefix === null) return { kind: "skip", reason: "not_global_install" };
+  const location = input.packageRoot === void 0 ? null : globalInstallLocation(input.packageRoot);
+  if (location === null) return { kind: "skip", reason: "not_global_install" };
   if (checkedWithinInterval(input.state.lastCheckAt, input.now)) return { kind: "skip", reason: "checked_recently" };
-  return { kind: "check", prefix };
+  return { kind: "check", ...location };
 };
 var parseAutoUpdateFlag = (args) => {
   const token = args.find((arg) => arg === AUTO_UPDATE_FLAG || arg.startsWith(`${AUTO_UPDATE_FLAG}=`));
@@ -141,7 +153,7 @@ var triggerAutoUpdate = (trigger) => {
     if (decision.kind === "skip") return decision;
     updateAutoUpdateState(statePath, { lastCheckAt: new Date(now).toISOString() });
     const spawnUpgrade = trigger.spawn ?? spawnDetached;
-    spawnUpgrade(trigger.execPath ?? process.execPath, [upgradeEntryFor(decision.prefix), AUTO_UPDATE_FLAG], dirname(statePath));
+    spawnUpgrade(trigger.execPath ?? process.execPath, [upgradeEntryFor(decision), AUTO_UPDATE_FLAG], dirname(statePath));
     return decision;
   } catch {
     return null;
@@ -152,7 +164,7 @@ export {
   AUTO_UPDATE_DISABLE_ENV,
   isAutoUpdateDisabledByEnv,
   autoUpdateOffReason,
-  globalInstallPrefix,
+  globalInstallLocation,
   upgradeEntryFor,
   parseAutoUpdateFlag,
   describeAutoUpdateCheck,