@pushary/agent-hooks 1.9.1 → 1.9.3

package/dist/{chunk-JGQ2ANHQ.js → chunk-DEWCUHOY.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-FVOCQSBG.js";
+} from "./chunk-EZFE4PC3.js";
 import {
   getPackageVersion
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/chunk-EO23EUOK.js

@@ -0,0 +1,14 @@
+// src/cli/json.ts
+var writeStdoutFully = (text) => new Promise((resolve, reject) => {
+  const settle = (error) => {
+    if (!error) process.stdout.off("error", settle);
+    if (error && (!("code" in error) || error.code !== "EPIPE")) reject(error);
+    else resolve();
+  };
+  process.stdout.once("error", settle);
+  process.stdout.write(text, settle);
+});
+
+export {
+  writeStdoutFully
+};

package/dist/{chunk-FVOCQSBG.js → chunk-EZFE4PC3.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_AGENT_CHOICES
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/cli/commands.ts
 var NPX_LATEST_COMMAND = "npx pushary@latest";

package/dist/{chunk-LXWUYG7D.js → chunk-FANGHYW5.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-SKEP3M6M.js → chunk-FLUECSUC.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-FJPC35OW.js";
+} from "./chunk-Q4RF7EEP.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-PMS3EBD2.js";
+} from "./chunk-ZV32QRBR.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-J7JXA2LX.js → chunk-FSFI2PQL.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-UPTEPARD.js → chunk-G2YXIZZS.js}

@@ -1,9 +1,9 @@
 import {
   registerTranscript
-} from "./chunk-WWDPULS3.js";
+} from "./chunk-AMFNJPJ5.js";
 import {
   writeDegraded
-} from "./chunk-SPB3QRE7.js";
+} from "./chunk-PPC4FZKJ.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-65TOHCXT.js → chunk-GB2U4QVF.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-HU2LWGEE.js";
+} from "./chunk-MH6SJHUE.js";
 import {
   isBridgeLocator
-} from "./chunk-LXWUYG7D.js";
+} from "./chunk-FANGHYW5.js";
 import {
   pusharyHookExecutable
-} from "./chunk-5K43TBK4.js";
+} from "./chunk-VRYOALHQ.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-COSADFEH.js";
+} from "./chunk-2UWD2WZC.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-CE4UH4AP.js → chunk-GOWCPJTP.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -14,13 +14,14 @@ import {
   cliPackagePathSegments,
   globalUpgradeEntry,
   ownPackageRoot
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";
 import { dirname } from "path";
 var AUTO_UPDATE_DISABLE_ENV = "PUSHARY_DISABLE_AUTOUPDATE";
 var AUTO_UPDATE_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+var PENDING_FINISH_RETRY_MS = 5 * 60 * 1e3;
 var AUTO_UPDATE_FLAG = "--auto";
 var NON_GLOBAL_INSTALL_SEGMENTS = ["/_npx/", "/.volta/"];
 var AUTO_UPDATE_RESULTS = ["updated", "current", "needs_manual", "failed", "finish_pending"];
@@ -75,11 +76,11 @@ var globalInstallLocation = (packageRoot) => {
   return null;
 };
 var upgradeEntryFor = (location, platform = process.platform) => globalUpgradeEntry(location.prefix, location.packageName, platform);
-var checkedWithinInterval = (lastCheckAt, now) => {
+var checkedWithinInterval = (lastCheckAt, now, interval) => {
   const last = lastCheckAt === void 0 ? Number.NaN : Date.parse(lastCheckAt);
   if (Number.isNaN(last)) return false;
   const elapsed = now - last;
-  return elapsed >= 0 && elapsed < AUTO_UPDATE_INTERVAL_MS;
+  return elapsed >= 0 && elapsed < interval;
 };
 var autoUpdateDecision = (input) => {
   if (input.isSubagentStart) return { kind: "skip", reason: "subagent_start" };
@@ -87,7 +88,8 @@ var autoUpdateDecision = (input) => {
   if (offReason !== null) return { kind: "skip", reason: offReason };
   const location = input.packageRoot === void 0 ? null : globalInstallLocation(input.packageRoot);
   if (location === null) return { kind: "skip", reason: "not_global_install" };
-  if (checkedWithinInterval(input.state.lastCheckAt, input.now)) return { kind: "skip", reason: "checked_recently" };
+  const interval = input.state.lastResult === "finish_pending" ? PENDING_FINISH_RETRY_MS : AUTO_UPDATE_INTERVAL_MS;
+  if (checkedWithinInterval(input.state.lastCheckAt, input.now, interval)) return { kind: "skip", reason: "checked_recently" };
   return { kind: "check", ...location };
 };
 var parseAutoUpdateFlag = (args) => {

package/dist/{chunk-RNDFGHSQ.js → chunk-HBUQ2EQD.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-GHKNUQYU.js → chunk-HIQNUBWO.js}

@@ -5,7 +5,7 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-JCER3Q6P.js";
+} from "./chunk-CJFVYYKM.js";
 import {
   DEFAULT_SESSION
 } from "./chunk-N6IOSZOE.js";
@@ -13,7 +13,7 @@ import {
   machineDecisionFor,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-QXL27RY6.js → chunk-HPXFPXW7.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-CGRPHFOV.js → chunk-IVF3OVR2.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-XEIV5QOT.js → chunk-JDUWMJDP.js}

@@ -518,6 +518,106 @@ var redactSecrets = (text) => applyRedactionRules(SECRET_REDACTION_RULES, text);
 var redactSecretsFromContent = (text) => applyRedactionRules(CUT_OFF_TEXT_REDACTION_RULES, text);
 var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
 
+// ../contracts/src/shell-analysis.ts
+var SHELL_WORD_SEPARATOR = /[ \t\n]/;
+var trimShellWhitespace = (command) => command.replace(/^[ \t\n]+|[ \t\n]+$/g, "");
+var DOUBLE_QUOTE_ESCAPABLE = /* @__PURE__ */ new Set(['"', "\\", "$", "`"]);
+var SEGMENT_SEPARATORS = /* @__PURE__ */ new Set([";", "\n", "&", "|"]);
+var DOUBLED_SEPARATORS = /* @__PURE__ */ new Set(["&", "|"]);
+var UNDECOMPOSABLE = /* @__PURE__ */ new Set(["`", "<", ">"]);
+var LITERAL_IN_DOUBLE_QUOTES = /* @__PURE__ */ new Set([";", "|", "&", "<", ">", "*", "?", "[", "\\"]);
+var scanShell = (command) => {
+  const lexemes = [];
+  let quote = null;
+  for (let index = 0; index < command.length; index += 1) {
+    const char = command.charAt(index);
+    const next = command.charAt(index + 1);
+    if (char === "\\" && next && quote !== "'" && (quote === null || DOUBLE_QUOTE_ESCAPABLE.has(next))) {
+      lexemes.push({ index, text: char + next, quote, kind: "escape" });
+      index += 1;
+    } else if ((char === "'" || char === '"') && (quote === null || quote === char)) {
+      lexemes.push({ index, text: char, quote, kind: "quote" });
+      quote = quote === null ? char : null;
+    } else {
+      lexemes.push({ index, text: char, quote, kind: "text" });
+    }
+  }
+  return quote === null ? lexemes : null;
+};
+var shellCommandSegments = (command) => {
+  const lexemes = scanShell(command);
+  if (lexemes === null) return null;
+  const segments = [];
+  let start = 0;
+  let consumed = -1;
+  for (const lexeme of lexemes) {
+    const { index, text, quote, kind } = lexeme;
+    if (index <= consumed || kind !== "text" || quote === "'") continue;
+    if (text === "`" || text === "$" && command[index + 1] === "(") return null;
+    if (quote !== null) continue;
+    if (UNDECOMPOSABLE.has(text)) return null;
+    if (!SEGMENT_SEPARATORS.has(text)) continue;
+    consumed = index + (DOUBLED_SEPARATORS.has(text) && command[index + 1] === text ? 1 : 0);
+    segments.push(trimShellWhitespace(command.slice(start, index)));
+    start = consumed + 1;
+  }
+  segments.push(trimShellWhitespace(command.slice(start)));
+  const present = segments.filter((segment) => segment.length > 0);
+  return present.length > 0 ? present : null;
+};
+var shellVisibleText = (command) => {
+  const lexemes = scanShell(command);
+  if (lexemes === null) return null;
+  let visible = "";
+  for (const { text, quote, kind } of lexemes) {
+    if (kind === "escape" && quote === '"') return null;
+    const literal = kind === "text" && (quote === "'" || quote === '"' && LITERAL_IN_DOUBLE_QUOTES.has(text));
+    visible += literal ? "_".repeat(text.length) : text;
+  }
+  return visible;
+};
+var shellWordsOf = (command) => {
+  const lexemes = scanShell(command);
+  if (lexemes === null) return null;
+  const words = [];
+  let text = "";
+  let plain = true;
+  let expands = false;
+  let comment = false;
+  let started = false;
+  const finishWord = () => {
+    if (started) words.push({ text, plain, expands, comment });
+    text = "";
+    plain = true;
+    expands = false;
+    comment = false;
+    started = false;
+  };
+  for (const lexeme of lexemes) {
+    if (lexeme.kind === "quote") {
+      plain = false;
+      started = true;
+      continue;
+    }
+    if (lexeme.kind === "escape") {
+      text += lexeme.text.slice(1);
+      plain = false;
+      started = true;
+      continue;
+    }
+    if (lexeme.quote === null && SHELL_WORD_SEPARATOR.test(lexeme.text)) {
+      finishWord();
+      continue;
+    }
+    comment ||= lexeme.quote === null && !started && lexeme.text === "#";
+    expands ||= lexeme.quote !== "'" && lexeme.text === "$";
+    text += lexeme.text;
+    started = true;
+  }
+  finishWord();
+  return words;
+};
+
 // ../contracts/src/degraded.ts
 var DEGRADED_PREFIX = "[degraded]";
 var degradedPayload = (subsystem, report) => ({
@@ -857,57 +957,6 @@ var PATTERN_INTENT = {
   grant: "grant",
   restrict: "restrict"
 };
-var SHELL_ESCAPE = "\\";
-var SHELL_DOUBLE_QUOTE = '"';
-var SHELL_SUBSTITUTION_SIGIL = "$";
-var SHELL_GROUP_OPEN = "(";
-var SHELL_QUOTES = /* @__PURE__ */ new Set(["'", SHELL_DOUBLE_QUOTE]);
-var SHELL_SEGMENT_SEPARATORS = /* @__PURE__ */ new Set([";", "\n", "&", "|"]);
-var SHELL_DOUBLED_SEPARATORS = /* @__PURE__ */ new Set(["&", "|"]);
-var SHELL_UNDECOMPOSABLE = /* @__PURE__ */ new Set(["`", "<", ">"]);
-var shellCommandSegments = (command) => {
-  const segments = [];
-  let current = "";
-  let quote = null;
-  for (let index = 0; index < command.length; index += 1) {
-    const char = command[index];
-    const next = command[index + 1];
-    if (quote !== null) {
-      if (char === SHELL_ESCAPE && quote === SHELL_DOUBLE_QUOTE && next !== void 0) {
-        current += char + next;
-        index += 1;
-        continue;
-      }
-      if (quote === SHELL_DOUBLE_QUOTE && (char === "`" || char === SHELL_SUBSTITUTION_SIGIL && next === SHELL_GROUP_OPEN)) return null;
-      if (char === quote) quote = null;
-      current += char;
-      continue;
-    }
-    if (char === SHELL_ESCAPE && next !== void 0) {
-      current += char + next;
-      index += 1;
-      continue;
-    }
-    if (SHELL_QUOTES.has(char)) {
-      quote = char;
-      current += char;
-      continue;
-    }
-    if (SHELL_UNDECOMPOSABLE.has(char)) return null;
-    if (char === SHELL_SUBSTITUTION_SIGIL && next === SHELL_GROUP_OPEN) return null;
-    if (SHELL_SEGMENT_SEPARATORS.has(char)) {
-      if (next === char && SHELL_DOUBLED_SEPARATORS.has(char)) index += 1;
-      segments.push(current);
-      current = "";
-      continue;
-    }
-    current += char;
-  }
-  if (quote !== null) return null;
-  segments.push(current);
-  const present = segments.map((segment) => segment.trim()).filter((segment) => segment.length > 0);
-  return present.length > 0 ? present : null;
-};
 var everySegmentMatches = (command, matches) => {
   const segments = shellCommandSegments(command);
   return segments !== null && segments.every(matches);
@@ -1147,40 +1196,8 @@ var isTrustedExecutable = (first) => {
   if (first.includes("..")) return false;
   return TRUSTED_EXE_PREFIXES.some((prefix) => first.startsWith(prefix));
 };
-var tokenizeShellCommand = (command) => {
-  const tokens = [];
-  let current = "";
-  let quote = null;
-  let started = false;
-  for (const ch of command) {
-    if (quote) {
-      if (ch === quote) quote = null;
-      else current += ch;
-      started = true;
-      continue;
-    }
-    if (ch === '"' || ch === "'") {
-      quote = ch;
-      started = true;
-      continue;
-    }
-    if (ch === " " || ch === "	") {
-      if (started) {
-        tokens.push(current);
-        current = "";
-        started = false;
-      }
-      continue;
-    }
-    current += ch;
-    started = true;
-  }
-  if (quote) return null;
-  if (started) tokens.push(current);
-  return tokens;
-};
 var isSafeSimpleCommand = (segment) => {
-  const tokens = tokenizeShellCommand(segment.trim());
+  const tokens = shellWordsOf(segment)?.map((word) => word.text);
   if (!tokens || tokens.length === 0) return false;
   const first = tokens[0];
   if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(first) || first.includes("$")) return false;
@@ -1212,32 +1229,8 @@ var DATE_UTC_FLAG = "-u";
 var isFlagToken = (token) => token.startsWith("-");
 var isPrintOnlySed = (args) => args[0] === SED_QUIET_FLAG && SED_PRINT_ONLY_SCRIPT.test(args[1] ?? "") && !args.slice(2).some(isFlagToken);
 var isReadOnlyDate = (args) => args.every((arg) => arg.startsWith(DATE_FORMAT_PREFIX) || arg === DATE_UTC_FLAG);
-var SINGLE_QUOTE = "'";
-var QUOTED_LITERAL = "_";
-var LITERAL_IN_DOUBLE_QUOTES = /* @__PURE__ */ new Set([";", "|", "&", "<", ">", "*", "?", "[", SHELL_ESCAPE]);
 var READ_ONLY_SEGMENT_SEPARATOR = /&&|\|\||[;|]/g;
 var PIPELINE_CHAIN_SEPARATOR = /&&|\|\||;/g;
-var shellVisibleText = (command) => {
-  let visible = "";
-  let quote = null;
-  for (let index = 0; index < command.length; index += 1) {
-    const char = command[index];
-    if (quote === SINGLE_QUOTE) {
-      quote = char === SINGLE_QUOTE ? null : quote;
-      visible += quote === null ? char : QUOTED_LITERAL;
-      continue;
-    }
-    if (quote === SHELL_DOUBLE_QUOTE) {
-      if (char === SHELL_ESCAPE && DOUBLE_QUOTE_ESCAPABLE.has(command[index + 1] ?? "")) return null;
-      quote = char === SHELL_DOUBLE_QUOTE ? null : quote;
-      visible += quote !== null && LITERAL_IN_DOUBLE_QUOTES.has(char) ? QUOTED_LITERAL : char;
-      continue;
-    }
-    if (SHELL_QUOTES.has(char)) quote = char;
-    visible += char;
-  }
-  return quote === null ? visible : null;
-};
 var EXPANSION_THAT_CAN_BECOME_A_FLAG = /\$|(?:^|\s)[*?[]/;
 var SHELL_QUOTE_CHARACTERS = /['"]/g;
 var INSPECTED_ARGUMENT_COMMANDS = /* @__PURE__ */ new Set(["git", "find", "sed", "date"]);
@@ -1257,7 +1250,7 @@ var segmentsSplitWhereVisible = (command, visible, separators) => {
   return segments;
 };
 var isSafeReadOnlyCommand = (command) => {
-  const trimmed = command.trim();
+  const trimmed = trimShellWhitespace(command);
   if (!trimmed || trimmed.length > 2e3) return false;
   if (/[\n\r]/.test(trimmed)) return false;
   const visible = shellVisibleText(trimmed);
@@ -1267,7 +1260,7 @@ var isSafeReadOnlyCommand = (command) => {
   const visibleWithoutRedirection = blankedSafeRedirections(visible);
   if (/[<>]/.test(visibleWithoutRedirection)) return false;
   if (visibleWithoutRedirection.replace(/&&/g, "  ").includes("&")) return false;
-  return segmentsSplitWhereVisible(blankedSafeRedirections(trimmed), visibleWithoutRedirection, READ_ONLY_SEGMENT_SEPARATOR).every((segment) => segment.trim().length > 0 && isSafeSimpleCommand(segment));
+  return segmentsSplitWhereVisible(blankedSafeRedirections(trimmed), visibleWithoutRedirection, READ_ONLY_SEGMENT_SEPARATOR).every((segment) => trimShellWhitespace(segment).length > 0 && isSafeSimpleCommand(segment));
 };
 var isAutoApprove = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "approve";
 var isAutoDeny = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "deny";
@@ -1481,67 +1474,9 @@ var SHELL_RESERVED_WORDS = /* @__PURE__ */ new Set([
 var HARMLESS_GLOBAL_FLAGS = /* @__PURE__ */ new Set(["--no-pager", "--version", "-v", "-V", "--help", "-h"]);
 var END_OF_OPTIONS = "--";
 var SUBCOMMAND_DEPTH = 3;
-var SHELL_COMMENT_MARK = "#";
 var SHELL_LINE_CONTINUATION = /\\\n/g;
-var SHELL_WORD_BREAK = /\s/;
-var DOUBLE_QUOTE_ESCAPABLE = /* @__PURE__ */ new Set([SHELL_DOUBLE_QUOTE, SHELL_ESCAPE, SHELL_SUBSTITUTION_SIGIL, "`"]);
-var shellWordsOf = (segment) => {
-  const words = [];
-  let text = "";
-  let plain = true;
-  let expands = false;
-  let comment = false;
-  let started = false;
-  let quote = null;
-  const finishWord = () => {
-    if (started) words.push({ text, plain, expands, comment });
-    text = "";
-    plain = true;
-    expands = false;
-    comment = false;
-    started = false;
-  };
-  for (let index = 0; index < segment.length; index += 1) {
-    const char = segment[index];
-    const next = segment[index + 1];
-    if (quote === "'") {
-      if (char === quote) quote = null;
-      else text += char;
-      continue;
-    }
-    if (char === SHELL_ESCAPE && next !== void 0 && (quote === null || DOUBLE_QUOTE_ESCAPABLE.has(next))) {
-      text += next;
-      plain = false;
-      started = true;
-      index += 1;
-      continue;
-    }
-    if (quote === SHELL_DOUBLE_QUOTE) {
-      if (char === quote) quote = null;
-      else text += char;
-      expands ||= char === SHELL_SUBSTITUTION_SIGIL;
-      continue;
-    }
-    if (SHELL_QUOTES.has(char)) {
-      quote = char;
-      plain = false;
-      started = true;
-      continue;
-    }
-    if (SHELL_WORD_BREAK.test(char)) {
-      finishWord();
-      continue;
-    }
-    comment ||= !started && char === SHELL_COMMENT_MARK;
-    expands ||= char === SHELL_SUBSTITUTION_SIGIL;
-    text += char;
-    started = true;
-  }
-  finishWord();
-  return words;
-};
 var invocationOf = (segment) => {
-  const [program, ...args] = shellWordsOf(segment);
+  const [program, ...args] = shellWordsOf(segment) ?? [];
   return { program, args };
 };
 var argsAfterHarmlessGlobalFlags = (args) => {
@@ -1822,6 +1757,16 @@ var SETTLED_OUTCOME = {
   deny: "deny"
 };
 var isSettledOutcome = (value) => typeof value === "string" && SETTLED_OUTCOMES.includes(value);
+var APPROVE_RESPONSES = /* @__PURE__ */ new Set(["yes", "approve", "approved"]);
+var DENY_RESPONSES = /* @__PURE__ */ new Set(["no", "deny", "denied", "reject", "rejected"]);
+var DEFER_RESPONSES = /* @__PURE__ */ new Set(["defer"]);
+var classifyConfirmResponse = (response) => {
+  const normalized = (response ?? "").trim().toLowerCase();
+  if (APPROVE_RESPONSES.has(normalized)) return "approve";
+  if (DENY_RESPONSES.has(normalized)) return "deny";
+  if (DEFER_RESPONSES.has(normalized)) return "defer";
+  return null;
+};
 var commandTextThatCanAct = (command) => {
   const visible = shellVisibleText(command);
   return visible === null ? command : segmentsSplitWhereVisible(command, visible, PIPELINE_CHAIN_SEPARATOR).filter((pipeline) => !isSafeReadOnlyCommand(pipeline)).join("\n");
@@ -2607,10 +2552,11 @@ var elicitationContentFromAnswers = (ask, answers) => {
 // ../contracts/src/hook-activation.ts
 var hookWritePath = (toolName, input) => toolName === "Write" && typeof input.file_path === "string" && input.file_path.startsWith("/") && input.file_path.length <= 4096 ? input.file_path : void 0;
 var HOOK_ACTIVATION_RESULTS = ["unverified", "approved_executed", "denied_observed", "unexpected_execution", "tool_failed"];
+var MAX_HOOK_ACTIVATION_EVIDENCE_ROWS = 20;
 var isHookActivationReport = (value) => {
   if (!value || typeof value !== "object") return false;
   const report = value;
-  return typeof report.agentType === "string" && typeof report.machineId === "string" && typeof report.target === "string" && report.target.length > 0 && report.target.length <= 4096 && typeof report.truncated === "boolean" && Array.isArray(report.evidence) && report.evidence.length <= 20 && (!report.truncated || report.evidence.length === 0) && report.evidence.every((item) => {
+  return typeof report.agentType === "string" && typeof report.machineId === "string" && typeof report.target === "string" && report.target.length > 0 && report.target.length <= 4096 && typeof report.truncated === "boolean" && Array.isArray(report.evidence) && report.evidence.length <= MAX_HOOK_ACTIVATION_EVIDENCE_ROWS && (!report.truncated || report.evidence.length === 0) && report.evidence.every((item) => {
     if (!item || typeof item !== "object") return false;
     const row = item;
     return ["correlationId", "sessionId", "toolUseId", "toolName", "createdAt"].every((key) => typeof row[key] === "string" && row[key].length > 0 && row[key].length <= 256) && (row.answerSource === null || isAnswerSource(row.answerSource)) && HOOK_ACTIVATION_RESULTS.includes(row.result) && Number.isFinite(Date.parse(row.createdAt)) && (row.occurredAt === null || typeof row.occurredAt === "string" && Number.isFinite(Date.parse(row.occurredAt))) && (row.observedAt === null || typeof row.observedAt === "string" && Number.isFinite(Date.parse(row.observedAt))) && (row.result === "unverified" || row.occurredAt !== null && row.observedAt !== null && row.producer !== null && isAnswerSource(row.answerSource) && row.answerSource !== "sandbox") && (row.producer === null || row.producer === "hook" || row.producer === "uplink");
@@ -2790,6 +2736,7 @@ export {
   redactSecretsDeep,
   degradedLine,
   hookWritePath,
+  MAX_HOOK_ACTIVATION_EVIDENCE_ROWS,
   isHookActivationReport,
   hookActivationResult,
   PAIR_TTL_SECONDS,
@@ -2832,6 +2779,7 @@ export {
   ASK_AGENT_NAME_MAX,
   truncateLine,
   isAnswerSource,
+  classifyConfirmResponse,
   buildDecisionEpisodeFeatures,
   resolveAutoResolveOrigin,
   resolvePolicy,

package/dist/{chunk-V4H33GBM.js → chunk-JM2MCYRZ.js}

@@ -1,17 +1,17 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-LJI7U6PM.js";
+} from "./chunk-AUS3LY4N.js";
 import {
   openCodeConfigDirFrom
-} from "./chunk-CGRPHFOV.js";
+} from "./chunk-IVF3OVR2.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-RJ7ECJSZ.js";
+} from "./chunk-ZPTSEJMD.js";
 import {
   NpmMissingError,
   codexHomeFrom,
   resolvePathBinary
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -19,10 +19,10 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-FVOCQSBG.js";
+} from "./chunk-EZFE4PC3.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-LZMH4EGE.js → chunk-KA2GI53J.js}

@@ -4,7 +4,7 @@ import {
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-DMA3QUOB.js";
+} from "./chunk-7MO3CNBX.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";

package/dist/{chunk-SWGY5WNX.js → chunk-KO7UOTLD.js}

@@ -1,11 +1,11 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-KR5JASA4.js";
+} from "./chunk-QVUOPB32.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-6Q4NM2LW.js";
+} from "./chunk-ZUZKHTPJ.js";
 import {
   detectClaudeVersion
 } from "./chunk-RIVNNBEK.js";
@@ -15,7 +15,7 @@ import {
   codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-5K43TBK4.js";
+} from "./chunk-VRYOALHQ.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -26,7 +26,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-D3RS57MN.js";
+} from "./chunk-CVVPUVBD.js";
 import {
   formatVersion
 } from "./chunk-6ICPEJY5.js";
@@ -49,7 +49,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-HU2LWGEE.js → chunk-MH6SJHUE.js}

@@ -9,7 +9,7 @@ import {
   SETUP_CONNECT_MODES,
   isSetupConnectMode,
   isValidApiKey
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;