@pushary/agent-hooks 1.9.1 → 1.9.3

package/dist/bin/pushary-transcript-register.js

@@ -1,32 +1,32 @@
 #!/usr/bin/env node
 import {
   registerTranscript
-} from "../chunk-WWDPULS3.js";
+} from "../chunk-AMFNJPJ5.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-65TOHCXT.js";
-import "../chunk-HU2LWGEE.js";
-import "../chunk-LXWUYG7D.js";
-import "../chunk-5K43TBK4.js";
-import "../chunk-PEGKBNGN.js";
-import "../chunk-D3RS57MN.js";
-import "../chunk-COSADFEH.js";
-import "../chunk-FJPC35OW.js";
-import "../chunk-PMS3EBD2.js";
-import "../chunk-7ER66HZH.js";
+import "../chunk-GB2U4QVF.js";
+import "../chunk-MH6SJHUE.js";
+import "../chunk-FANGHYW5.js";
+import "../chunk-VRYOALHQ.js";
+import "../chunk-WL4YO6CO.js";
+import "../chunk-CVVPUVBD.js";
+import "../chunk-2UWD2WZC.js";
+import "../chunk-Q4RF7EEP.js";
+import "../chunk-ZV32QRBR.js";
+import "../chunk-34JHGOYO.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-RNDFGHSQ.js";
+import "../chunk-HBUQ2EQD.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-RJ7ECJSZ.js";
-import "../chunk-J7JXA2LX.js";
+import "../chunk-ZPTSEJMD.js";
+import "../chunk-FSFI2PQL.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-6QSDNXGM.js";
-import "../chunk-ZMKEKWNR.js";
+import "../chunk-U3DBAX7P.js";
+import "../chunk-5IIAUWEJ.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-4SB46XLF.js";
-import "../chunk-FVOCQSBG.js";
-import "../chunk-XEIV5QOT.js";
+import "../chunk-4GTXFYQ7.js";
+import "../chunk-EZFE4PC3.js";
+import "../chunk-JDUWMJDP.js";
 
 // bin/pushary-transcript-register.ts
 var raw = "";

package/dist/bin/pushary-transcripts.js

@@ -6,17 +6,17 @@ import {
 } from "../chunk-SGZJ5LYH.js";
 import {
   transcriptsEnabled
-} from "../chunk-7ER66HZH.js";
+} from "../chunk-34JHGOYO.js";
 import {
   exitOnHelpFlag
-} from "../chunk-JGQ2ANHQ.js";
-import "../chunk-RJ7ECJSZ.js";
+} from "../chunk-DEWCUHOY.js";
+import "../chunk-ZPTSEJMD.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-6QSDNXGM.js";
+import "../chunk-U3DBAX7P.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-4SB46XLF.js";
-import "../chunk-FVOCQSBG.js";
-import "../chunk-XEIV5QOT.js";
+import "../chunk-4GTXFYQ7.js";
+import "../chunk-EZFE4PC3.js";
+import "../chunk-JDUWMJDP.js";
 
 // bin/pushary-transcripts.ts
 exitOnHelpFlag("transcripts");

package/dist/bin/pushary-upgrade.js

@@ -7,28 +7,28 @@ import {
   runAutoUpdate,
   upgradeInstalledPackage,
   withUpgradeLock
-} from "../chunk-QQJCDRD3.js";
+} from "../chunk-OEMF3KJ3.js";
 import {
   installWithUpgradeLock
-} from "../chunk-QXL27RY6.js";
+} from "../chunk-HPXFPXW7.js";
 import {
   describeCodexTrustConfirmation
-} from "../chunk-VQLWYKX7.js";
+} from "../chunk-WEK6US33.js";
 import {
   ensureCodexTrustAfterReapply,
   reapplyAllAgents
-} from "../chunk-SWGY5WNX.js";
-import "../chunk-KR5JASA4.js";
+} from "../chunk-KO7UOTLD.js";
+import "../chunk-QVUOPB32.js";
 import {
   waitForMachineReadiness
-} from "../chunk-AKCJ5SNO.js";
-import "../chunk-6Q4NM2LW.js";
+} from "../chunk-7FVC3RGF.js";
+import "../chunk-ZUZKHTPJ.js";
 import {
   detectProviderLiveCapabilities,
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-IITCMJ4G.js";
+} from "../chunk-AGW7PMMO.js";
 import "../chunk-RIVNNBEK.js";
 import {
   AUTO_UPDATE_DISABLE_ENV,
@@ -38,8 +38,8 @@ import {
   parseAutoUpdateFlag,
   readAutoUpdateState,
   updateAutoUpdateState
-} from "../chunk-CE4UH4AP.js";
-import "../chunk-5K43TBK4.js";
+} from "../chunk-GOWCPJTP.js";
+import "../chunk-VRYOALHQ.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
@@ -50,23 +50,23 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-PEGKBNGN.js";
-import "../chunk-D3RS57MN.js";
+} from "../chunk-WL4YO6CO.js";
+import "../chunk-CVVPUVBD.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-RNDFGHSQ.js";
+import "../chunk-HBUQ2EQD.js";
 import "../chunk-POFBE6ZY.js";
 import {
   exitOnHelpFlag
-} from "../chunk-JGQ2ANHQ.js";
+} from "../chunk-DEWCUHOY.js";
 import {
   readControlMode
-} from "../chunk-RJ7ECJSZ.js";
-import "../chunk-J7JXA2LX.js";
+} from "../chunk-ZPTSEJMD.js";
+import "../chunk-FSFI2PQL.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-6QSDNXGM.js";
+import "../chunk-U3DBAX7P.js";
 import {
   LATEST_TAG,
   autoUpdateState,
@@ -76,19 +76,19 @@ import {
   fetchLatestPublishedVersion,
   geminiSettings,
   vscodePluginDir
-} from "../chunk-ZMKEKWNR.js";
+} from "../chunk-5IIAUWEJ.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "../chunk-4SB46XLF.js";
+} from "../chunk-4GTXFYQ7.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-FVOCQSBG.js";
+} from "../chunk-EZFE4PC3.js";
 import {
   CANONICAL_PACKAGE,
   LEGACY_PACKAGE,
   getPackageVersion
-} from "../chunk-XEIV5QOT.js";
+} from "../chunk-JDUWMJDP.js";
 
 // bin/pushary-upgrade.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-wait.js

@@ -4,33 +4,33 @@ import {
 } from "../chunk-CVWG2N3Y.js";
 import {
   exitOnFailedResponse
-} from "../chunk-LZMH4EGE.js";
+} from "../chunk-KA2GI53J.js";
 import {
   createIo
 } from "../chunk-U4TMAANR.js";
 import {
   exitOnHelpFlag
-} from "../chunk-JGQ2ANHQ.js";
+} from "../chunk-DEWCUHOY.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-DMA3QUOB.js";
-import "../chunk-6JTTJIKJ.js";
-import "../chunk-J7JXA2LX.js";
+import "../chunk-7MO3CNBX.js";
+import "../chunk-WRDMCP4G.js";
+import "../chunk-FSFI2PQL.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-ZMKEKWNR.js";
+import "../chunk-5IIAUWEJ.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-4SB46XLF.js";
-import "../chunk-FVOCQSBG.js";
-import "../chunk-XEIV5QOT.js";
+} from "../chunk-4GTXFYQ7.js";
+import "../chunk-EZFE4PC3.js";
+import "../chunk-JDUWMJDP.js";
 
 // bin/pushary-wait.ts
 exitOnHelpFlag("wait");

package/dist/bin/pushary.js

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
 import {
   installNetworkDefaults
-} from "../chunk-6JTTJIKJ.js";
-import "../chunk-J7JXA2LX.js";
+} from "../chunk-WRDMCP4G.js";
+import "../chunk-FSFI2PQL.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-ZMKEKWNR.js";
+import "../chunk-5IIAUWEJ.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-4SB46XLF.js";
+import "../chunk-4GTXFYQ7.js";
 import {
   COMMANDS,
   isCommandName,
   renderHelp
-} from "../chunk-FVOCQSBG.js";
+} from "../chunk-EZFE4PC3.js";
 import {
   getPackageVersion
-} from "../chunk-XEIV5QOT.js";
+} from "../chunk-JDUWMJDP.js";
 
 // src/cli/runtime.ts
 var supportsRuntime = (version) => {

package/dist/{chunk-COSADFEH.js → chunk-2UWD2WZC.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-7ER66HZH.js → chunk-34JHGOYO.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-RJ7ECJSZ.js";
+} from "./chunk-ZPTSEJMD.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-4SB46XLF.js → chunk-4GTXFYQ7.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-FVOCQSBG.js";
+} from "./chunk-EZFE4PC3.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-P7YDVWLL.js → chunk-552AGATI.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-ZMKEKWNR.js → chunk-5IIAUWEJ.js}

@@ -13,7 +13,7 @@ import {
   isReleaseVersion,
   ownPackageName,
   withHookHoldBudget
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/setup/paths.ts
 import { homedir as homedir2 } from "os";
@@ -365,9 +365,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-ML2RHV4W.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-2A2YUUEU.js");
-    const { autoUpdateLock: autoUpdateLock2 } = await import("./paths-LG3IEDDM.js");
+    const { withUpgradeLock } = await import("./global-upgrade-VEQ4KQEW.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-KFZBAPNU.js");
+    const { autoUpdateLock: autoUpdateLock2 } = await import("./paths-QTOUBV2V.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;
@@ -510,6 +510,7 @@ var CODEX_HOOK_EVENTS = [
   { event: "PreCompact", matcher: "manual|auto", delivery: "telemetry", timeout: 5 },
   { event: "PostCompact", matcher: "manual|auto", delivery: "telemetry", timeout: 5 }
 ];
+var CODEX_REQUIRED_APPROVAL_EVENTS = CODEX_HOOK_EVENTS.filter((event) => event.delivery === "approval").map((event) => event.event);
 var CODEX_EVENT_KEY = {
   PermissionRequest: "permission_request",
   PreToolUse: "pre_tool_use",
@@ -701,11 +702,22 @@ var codexTrustGaps = (config, hooksConfig, hooksJsonPath, command, positions) =>
   for (const definition of CODEX_HOOK_EVENTS) {
     const position = positions[definition.event];
     if (!position) continue;
-    const stored = asRecord2(state?.[codexHookStateKey(hooksJsonPath, definition.event, position)])?.trusted_hash;
+    const hookState = asRecord2(state?.[codexHookStateKey(hooksJsonPath, definition.event, position)]);
+    if (definition.delivery === "approval" && hookState?.enabled === false) {
+      gaps.push({ event: definition.event, kind: "disabled" });
+      continue;
+    }
+    const stored = hookState?.trusted_hash;
     const eventKey = CODEX_EVENT_KEY[definition.event] ?? definition.event;
     const onDisk = asRecord2(
       asRecord2(hooks?.[definition.event]) ?? (Array.isArray(hooks?.[definition.event]) ? hooks[definition.event][position[0]] : void 0)
     );
+    const handlers = onDisk?.hooks;
+    const handler = Array.isArray(handlers) ? asRecord2(handlers[position[1]]) : void 0;
+    if (definition.delivery === "approval" && handler?.async === true) {
+      gaps.push({ event: definition.event, kind: "asynchronous" });
+      continue;
+    }
     const diskHash = onDisk ? codexEntryTrustHash(eventKey, onDisk) : void 0;
     if (stored !== void 0 && diskHash !== void 0 && stored === diskHash) {
       if (diskHash !== codexHookTrustHash(definition, command)) {
@@ -855,6 +867,7 @@ export {
   codexAgentsMd,
   codexSkillDir,
   CODEX_HOOK_EVENTS,
+  CODEX_REQUIRED_APPROVAL_EVENTS,
   addCodexMcpServer,
   readCodexMcpAuth,
   isPusharyCodexCommand,

package/dist/{chunk-AKCJ5SNO.js → chunk-7FVC3RGF.js}

@@ -3,27 +3,27 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-IITCMJ4G.js";
+} from "./chunk-AGW7PMMO.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-PEGKBNGN.js";
+} from "./chunk-WL4YO6CO.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-RJ7ECJSZ.js";
+} from "./chunk-ZPTSEJMD.js";
 import {
   getMachineId
-} from "./chunk-J7JXA2LX.js";
+} from "./chunk-FSFI2PQL.js";
 import {
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 import {
   getPackageVersion
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/machines.ts
 import { hostname } from "os";
@@ -67,7 +67,11 @@ var parseMachine = (value) => {
     online: raw.online === true
   };
 };
-var machineReadiness = (machines, machineId, expectedCapabilities, now = Date.now()) => {
+var serverClockOffsetMs = (response, receivedAt) => {
+  const serverTime = Date.parse(response.headers.get("date") ?? "");
+  return Number.isFinite(serverTime) ? serverTime - receivedAt : 0;
+};
+var machineReadiness = (machines, machineId, expectedCapabilities, now = Date.now(), clockOffsetMs = 0) => {
   const machine = machines.find((item) => item.machineId === machineId);
   if (!machine) return { kind: "not-ready", detail: "this machine has not heartbeated to the server" };
   if (!machine.online) return { kind: "not-ready", detail: "the server reports this machine offline" };
@@ -77,15 +81,15 @@ var machineReadiness = (machines, machineId, expectedCapabilities, now = Date.no
   if (machine.lastControlAt === null || !Number.isFinite(Date.parse(machine.lastControlAt))) {
     return { kind: "not-ready", detail: "the server has not observed this machine polling the control queue" };
   }
-  if (!daemonHasRemoteProof({ kind: "running", lastSuccessfulHeartbeatAt: machine.lastSeenAt, lastSuccessfulControlAt: machine.lastControlAt }, now)) {
+  if (!daemonHasRemoteProof({ kind: "running", lastSuccessfulHeartbeatAt: machine.lastSeenAt, lastSuccessfulControlAt: machine.lastControlAt }, now + clockOffsetMs)) {
     return { kind: "not-ready", detail: "the heartbeat or control-queue proof is stale; wake this machine and retry pushary doctor" };
   }
   const missing = expectedCapabilities.filter((capability) => !machine.capabilities.includes(capability));
-  return missing.length === 0 ? { kind: "ready", machine } : { kind: "not-ready", detail: `the server is missing capabilities: ${missing.join(", ")}` };
+  return missing.length === 0 ? { kind: "ready", machine, clockOffsetMs } : { kind: "not-ready", detail: `the server is missing capabilities: ${missing.join(", ")}` };
 };
 var readMachineReadiness = async (apiKey, expectedCapabilities, deps = {}) => {
   const listed = await listMachines(apiKey, deps);
-  return listed.kind === "ok" ? machineReadiness(listed.machines, deps.machineId ?? getMachineId(), expectedCapabilities, deps.now?.()) : listed.kind === "unsupported" ? { kind: "unsupported", detail: "the server does not report machine readiness yet" } : listed;
+  return listed.kind === "ok" ? machineReadiness(listed.machines, deps.machineId ?? getMachineId(), expectedCapabilities, deps.now?.(), listed.clockOffsetMs) : listed.kind === "unsupported" ? { kind: "unsupported", detail: "the server does not report machine readiness yet" } : listed;
 };
 var waitForMachineReadiness = async (apiKey, expectedCapabilities, deps = {}) => {
   const attempts = deps.attempts ?? 21;
@@ -106,11 +110,12 @@ var listMachines = async (apiKey, deps = {}) => {
       headers: { Authorization: `Bearer ${apiKey}` },
       signal: AbortSignal.timeout(1e4)
     });
+    const clockOffsetMs = serverClockOffsetMs(res, (deps.now ?? Date.now)());
     if (res.status === 404) return { kind: "unsupported" };
     if (!res.ok) return { kind: "failed", detail: `HTTP ${res.status}` };
     const body = await res.json().catch(() => null);
     const list = body && Array.isArray(body.machines) ? body.machines : [];
-    return { kind: "ok", machines: list.map(parseMachine).filter((m) => m !== null) };
+    return { kind: "ok", machines: list.map(parseMachine).filter((m) => m !== null), clockOffsetMs };
   } catch (err) {
     return { kind: "failed", detail: err instanceof Error ? err.message : "network error" };
   }
@@ -136,7 +141,7 @@ var readManagedControlEvidence = (apiKey, providers, serverProof) => {
   const keyCurrent = Boolean(apiKey) && readKeySource().key === apiKey && readDaemonNeedsLogin().kind !== "blocked";
   const policy = resolveControlPolicy({ mode: readControlMode(), providerAvailable, managerAvailable, servicePresent: serviceInstalled || daemon.kind !== "absent" });
   const localProof = daemonHasRemoteProof(daemon, now);
-  const remote = serverProof?.kind === "ready" ? machineReadiness([serverProof.machine], daemon.machineId ?? "", expectedLaunchCapabilities(providers), now) : serverProof;
+  const remote = serverProof?.kind === "ready" ? machineReadiness([serverProof.machine], daemon.machineId ?? "", expectedLaunchCapabilities(providers), now, serverProof.clockOffsetMs) : serverProof;
   return {
     ready: keyCurrent && policy === "enabled" && providerAvailable && managerAvailable && serviceInstalled && localProof && remote?.kind === "ready",
     keyCurrent,

package/dist/{chunk-DMA3QUOB.js → chunk-7MO3CNBX.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-6JTTJIKJ.js";
+} from "./chunk-WRDMCP4G.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-IITCMJ4G.js → chunk-AGW7PMMO.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;

package/dist/{chunk-WWDPULS3.js → chunk-AMFNJPJ5.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-65TOHCXT.js";
+} from "./chunk-GB2U4QVF.js";
 import {
   ensureDaemonRunning
-} from "./chunk-PEGKBNGN.js";
+} from "./chunk-WL4YO6CO.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-FJPC35OW.js";
+} from "./chunk-Q4RF7EEP.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-PMS3EBD2.js";
+} from "./chunk-ZV32QRBR.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-7ER66HZH.js";
+} from "./chunk-34JHGOYO.js";
 import {
   readTranscriptPreference
-} from "./chunk-RJ7ECJSZ.js";
+} from "./chunk-ZPTSEJMD.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-LJI7U6PM.js → chunk-AUS3LY4N.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-VH6763OR.js";
+} from "./chunk-SJC5TXK7.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-FVOCQSBG.js";
+} from "./chunk-EZFE4PC3.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-RS4ZOFSF.js → chunk-BPGATW2F.js}

@@ -14,18 +14,19 @@ import {
 } from "./chunk-U4TMAANR.js";
 import {
   callMcpTool
-} from "./chunk-VH6763OR.js";
+} from "./chunk-SJC5TXK7.js";
 import {
   reportedInstallSource
-} from "./chunk-6QSDNXGM.js";
+} from "./chunk-U3DBAX7P.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-FVOCQSBG.js";
+} from "./chunk-EZFE4PC3.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS,
+  classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {
@@ -206,8 +207,8 @@ var defaultCancel = async (apiKey, correlationId) => {
   });
 };
 var answeredRoundTrip = (answer, correlationId, latencyMs) => {
-  if (answer.value !== "yes" && answer.value !== "no") {
-    return { kind: "error", detail: "the server reported an answer without a valid Yes or No value" };
+  if (answer.value === void 0 || classifyConfirmResponse(answer.value) === null) {
+    return { kind: "error", detail: "the server reported an answer without a valid Yes, No or defer value" };
   }
   return {
     kind: "answered",

package/dist/{chunk-JCER3Q6P.js → chunk-CJFVYYKM.js}

@@ -14,36 +14,36 @@ import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-RNDFGHSQ.js";
+} from "./chunk-HBUQ2EQD.js";
 import {
   cancelQuestion,
   isPolicyConfig,
   sendNotification,
   waitForAnswer
-} from "./chunk-JHZAZAI3.js";
+} from "./chunk-UWMEY4RS.js";
 import {
   clientErrorKindOf,
   reportClientError
-} from "./chunk-SPB3QRE7.js";
+} from "./chunk-PPC4FZKJ.js";
 import {
   withRetry
-} from "./chunk-VH6763OR.js";
+} from "./chunk-SJC5TXK7.js";
 import {
   getMachineId
-} from "./chunk-J7JXA2LX.js";
+} from "./chunk-FSFI2PQL.js";
 import {
   reportedInstallSource
-} from "./chunk-6QSDNXGM.js";
+} from "./chunk-U3DBAX7P.js";
 import {
   canonicalJson
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 import {
   ACTION_BODY_MAX,
   AGENT_LABELS_BY_TYPE,
@@ -70,7 +70,7 @@ import {
   resolvePolicy,
   toToolLookup,
   truncateLine
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -576,6 +576,7 @@ var rawActionBody = (toolName, toolInput) => {
   if (toolName === "Bash" || toolName === "PowerShell" || toolName === "Monitor" || toolName === "run_shell_command" || toolName === "shell" || toolName === "apply_patch") {
     return firstString(toolInput.command);
   }
+  if (toolName === "write_stdin" || toolName === "request_permissions") return JSON.stringify(toolInput, null, 2);
   return firstString(toolInput.url, toolInput.href);
 };
 var deriveActionBody = (toolName, toolInput) => {

package/dist/{chunk-D3RS57MN.js → chunk-CVVPUVBD.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-RNDFGHSQ.js";
+} from "./chunk-HBUQ2EQD.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";