@pushary/agent-hooks 1.9.10 → 1.9.12

package/dist/{chunk-BVPPYR7B.js → chunk-FSCWOYK6.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-ZGADIZDS.js";
+} from "./chunk-NDZKDJQU.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-TCXL5FQQ.js";
+} from "./chunk-RYBAJXV4.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-5RGA636G.js";
+} from "./chunk-QOBOIFGG.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-2S34OPHS.js → chunk-GP44LTXN.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-UJZ7AGSC.js";
+} from "./chunk-AWD2SLNA.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-2HFSKYLN.js → chunk-GTM7C36Y.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-TCXL5FQQ.js";
+} from "./chunk-RYBAJXV4.js";
 import {
   getPackageVersion
-} from "./chunk-5RGA636G.js";
+} from "./chunk-QOBOIFGG.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-U5FP5JIS.js → chunk-J5XCHLP4.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-UJZ7AGSC.js";
+} from "./chunk-AWD2SLNA.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -14,7 +14,7 @@ import {
   cliPackagePathSegments,
   globalUpgradeEntry,
   ownPackageRoot
-} from "./chunk-5RGA636G.js";
+} from "./chunk-QOBOIFGG.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-MD4SVNT6.js → chunk-JKGTASA2.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-5RGA636G.js";
+} from "./chunk-QOBOIFGG.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-GQYX24UC.js → chunk-JNDELCH5.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-UJZ7AGSC.js";
+} from "./chunk-AWD2SLNA.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-PR2VDVCP.js → chunk-KXCWWHYO.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-MD4SVNT6.js";
+} from "./chunk-JKGTASA2.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-UJZ7AGSC.js";
+} from "./chunk-AWD2SLNA.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-5RGA636G.js";
+} from "./chunk-QOBOIFGG.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-OL2Z7WI4.js → chunk-LBDMCNQY.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-I3W7GJ5R.js";
+} from "./chunk-CATIBZQH.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-TCXL5FQQ.js";
+} from "./chunk-RYBAJXV4.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-QGRENWJL.js → chunk-M2P3HQA3.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-GTZ4HIHU.js";
+} from "./chunk-3VPS7JPH.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-DAOQT4WK.js → chunk-MEHDBT5H.js}

@@ -1,9 +1,9 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-Y7JM47CI.js";
+} from "./chunk-YZWUTWDG.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-TCXL5FQQ.js";
+} from "./chunk-RYBAJXV4.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-ZGADIZDS.js → chunk-NDZKDJQU.js}

@@ -10,7 +10,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-5RGA636G.js";
+} from "./chunk-QOBOIFGG.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-S2DAKKQQ.js → chunk-OBGZUD73.js}

@@ -1,13 +1,13 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-QAGWWDXQ.js";
+} from "./chunk-Z6VYZSVA.js";
 import {
   codexHomeFrom,
   resolvePathBinary
-} from "./chunk-UJZ7AGSC.js";
+} from "./chunk-AWD2SLNA.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-5RGA636G.js";
+} from "./chunk-QOBOIFGG.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-APP43AW7.js → chunk-PKQ435Z2.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-5RGA636G.js";
+} from "./chunk-QOBOIFGG.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-BVSIM4EF.js → chunk-PMUOEEUE.js}

@@ -1,10 +1,10 @@
 import {
   pusharyHookExecutable
-} from "./chunk-SIHYBIEN.js";
+} from "./chunk-SJ7M37RL.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-UJZ7AGSC.js";
+} from "./chunk-AWD2SLNA.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-DL6QHS7V.js → chunk-PNBJAYSL.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-UJZ7AGSC.js";
+} from "./chunk-AWD2SLNA.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-5RGA636G.js → chunk-QOBOIFGG.js}

@@ -227,6 +227,20 @@ var AGENTS = {
     enforcementDetail: "exec, write and edit through native PreToolUse hooks, answered in Devin's own approve/block schema.",
     capabilityNote: "Devin CLI answers PreToolUse with `{decision}` rather than a permission decision. Pushary blocks an unanswered approval because this adapter cannot request a native prompt reliably. Question and plan dialogs remain with Devin; this adapter does not render their answers. It also fires no Notification event."
   },
+  antigravity_cli: {
+    ...defaults,
+    label: "Antigravity CLI",
+    hookSource: "antigravity",
+    bridged: true,
+    policyAgent: "antigravity_cli",
+    repoAware: true,
+    disconnectable: true,
+    enforcement: "enforced",
+    connectVia: "Native hooks + MCP",
+    setupCommand: PUSHARY_SETUP_COMMAND,
+    enforcementDetail: "Shell commands, file writes, edits and MCP calls through native PreToolUse hooks in ~/.gemini/config/hooks.json, answered allow or deny.",
+    capabilityNote: 'Antigravity CLI ignores a hook\'s allow unless it runs in always-proceed mode (`toolPermission: "always-proceed"` or `--dangerously-skip-permissions`), so approving from the phone needs that mode, with Pushary as the only gate. Pushary answers allow or deny and never ask, because ask and force_ask run the call unprompted in that mode. An unanswered approval is blocked with a reason.'
+  },
   windsurf: {
     ...defaults,
     label: "Windsurf",
@@ -283,7 +297,7 @@ var normalizeAgentId = (value, accepted) => {
 };
 
 // ../contracts/src/agent-wiring.ts
-var COMPATIBLE_AGENT_TYPES = ["qwen_code", "codebuddy", "qoder", "droid", "devin"];
+var COMPATIBLE_AGENT_TYPES = ["qwen_code", "codebuddy", "qoder", "droid", "devin", "antigravity_cli"];
 var CANONICAL_PATH_KEYS = ["file_path", "path", "notebook_path"];
 var CANONICAL_COMMAND_KEYS = ["command"];
 var SHELL_TOOLS = /* @__PURE__ */ new Set(["Bash", "PowerShell"]);
@@ -296,6 +310,10 @@ var firstString = (record, keys) => {
   }
   return void 0;
 };
+var withCanonicalInputKeys = (profile, toolInput) => {
+  const renamed = Object.entries(profile.inputKeyAliases).flatMap(([agentKey, canonicalKey]) => toolInput[agentKey] === void 0 || toolInput[canonicalKey] !== void 0 ? [] : [[canonicalKey, toolInput[agentKey]]]);
+  return renamed.length === 0 ? toolInput : { ...toolInput, ...Object.fromEntries(renamed) };
+};
 var canonicalToolName = (profile, toolName) => profile.toolAliases[toolName] ?? toolName;
 var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path) => {
   const tool = canonicalToolName(profile, toolName);
@@ -310,10 +328,25 @@ var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path)
   if (!PATH_TOOLS.has(tool)) return { tool, input: toolInput, unreadable: false };
   const filePath = firstString(toolInput, [...profile.pathInputKeys, ...CANONICAL_PATH_KEYS]);
   if (!filePath) return { tool, input: toolInput, unreadable: true };
-  return { tool, input: { ...toolInput, file_path: resolvePath(filePath) }, unreadable: false };
+  return { tool, input: { ...withCanonicalInputKeys(profile, toolInput), file_path: resolvePath(filePath) }, unreadable: false };
+};
+var NO_AGENT_PROMPT_REASON = "Pushary needs an answer from the phone before this can run, and this agent has no approval prompt of its own here, so nothing ran. Ask the user, then try again.";
+var DENIED_BY_PUSHARY_REASON = "Denied from Pushary.";
+var UNCARRIED_ANSWER_REASON = "The answer from the phone cannot be passed to this agent, so the call did not run. Ask the question in chat instead.";
+var renderAllowDenyDecision = (verdict) => {
+  const { permissionDecision, permissionDecisionReason } = verdict.hookSpecificOutput;
+  if (verdict.continue === false) {
+    return { decision: "deny", reason: verdict.stopReason ?? permissionDecisionReason ?? DENIED_BY_PUSHARY_REASON };
+  }
+  if (permissionDecision === "allow") {
+    return verdict.hookSpecificOutput.updatedInput ? { decision: "deny", reason: UNCARRIED_ANSWER_REASON } : { decision: "allow" };
+  }
+  if (permissionDecision === "ask") return { decision: "deny", reason: NO_AGENT_PROMPT_REASON };
+  return { decision: "deny", reason: permissionDecisionReason ?? DENIED_BY_PUSHARY_REASON };
 };
 var renderPreToolUseVerdict = (profile, verdict) => {
   if (profile.wire === "permission_decision") return verdict;
+  if (profile.wire === "allow_deny_decision") return renderAllowDenyDecision(verdict);
   const { permissionDecision, permissionDecisionReason, updatedInput } = verdict.hookSpecificOutput;
   if (permissionDecision === "ask") return { decision: "block", reason: permissionDecisionReason ?? "Pushary requires an explicit approval before this tool can run." };
   if (updatedInput) return void 0;
@@ -324,6 +357,41 @@ var renderPreToolUseVerdict = (profile, verdict) => {
     ...stop
   };
 };
+var ANTIGRAVITY_MCP_TOOL = "call_mcp_tool";
+var isPayloadRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var nonEmptyString = (value) => typeof value === "string" && value.length > 0 ? value : void 0;
+var mcpToolCall = (args) => {
+  const server = nonEmptyString(args.ServerName);
+  const tool = nonEmptyString(args.ToolName);
+  if (!server || !tool) return void 0;
+  return { tool_name: `mcp__${server}__${tool}`, tool_input: isPayloadRecord(args.Arguments) ? args.Arguments : {} };
+};
+var antigravityToolCall = (toolCall) => {
+  if (!isPayloadRecord(toolCall)) return void 0;
+  const name = nonEmptyString(toolCall.name);
+  if (!name) return void 0;
+  const args = isPayloadRecord(toolCall.args) ? toolCall.args : {};
+  return (name === ANTIGRAVITY_MCP_TOOL ? mcpToolCall(args) : void 0) ?? { tool_name: name, tool_input: args };
+};
+var firstWorkspace = (payload) => Array.isArray(payload.workspacePaths) ? payload.workspacePaths.map(nonEmptyString).find(Boolean) : void 0;
+var fromAntigravity = (event, payload) => {
+  const { toolCall, ...rest } = payload;
+  const call = antigravityToolCall(toolCall);
+  const cwd = firstWorkspace(payload) ?? nonEmptyString(call?.tool_input.Cwd);
+  const sessionId = nonEmptyString(payload.conversationId);
+  const transcriptPath = nonEmptyString(payload.transcriptPath);
+  const error = event === "PostToolUse" ? nonEmptyString(payload.error) : void 0;
+  return {
+    ...rest,
+    ...event ? { hook_event_name: event } : {},
+    ...sessionId ? { session_id: sessionId } : {},
+    ...transcriptPath ? { transcript_path: transcriptPath } : {},
+    ...cwd ? { cwd } : {},
+    ...call ?? {},
+    ...error ? { tool_response: { error } } : {}
+  };
+};
+var claudeShapedHookInput = (dialect, event, payload) => dialect === "antigravity" ? fromAntigravity(event, payload) : payload;
 var CLAUDE_SHAPED_EVENTS = [
   "PreToolUse",
   "PostToolUse",
@@ -361,15 +429,20 @@ var QWEN_CODE = {
     ask_user_question: "AskUserQuestion",
     exit_plan_mode: "ExitPlanMode"
   },
+  inputKeyAliases: {},
   extraMatchers: ["mcp__.*"],
   pathInputKeys: ["absolute_path"],
   shellCommandKeys: [],
   shellContextKeys: ["directory"],
   events: without("TeammateIdle", "Elicitation", "PermissionDenied"),
   wire: "permission_decision",
+  payload: "claude",
+  nonToolEntries: "nested",
   mcp: { shape: "gemini_http", file: [".qwen", "settings.json"], trusted: true },
   instructions: { file: [".qwen", "QWEN.md"], label: "Qwen Code" },
-  permissionRuleFile: null
+  permissionRuleFile: null,
+  configDirIsShared: false,
+  setupNote: null
 };
 var CODEBUDDY = {
   agentType: "codebuddy",
@@ -379,15 +452,20 @@ var CODEBUDDY = {
   configFile: [".codebuddy", "settings.json"],
   hooksKeyPath: ["hooks"],
   toolAliases: {},
+  inputKeyAliases: {},
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
   shellCommandKeys: [],
   shellContextKeys: [],
   events: without("Elicitation", "PermissionDenied"),
   wire: "permission_decision",
+  payload: "claude",
+  nonToolEntries: "nested",
   mcp: { shape: "claude_http", file: [".codebuddy", ".mcp.json"], trusted: false },
   instructions: { file: [".codebuddy", "CODEBUDDY.md"], label: "CodeBuddy" },
-  permissionRuleFile: [".codebuddy", "settings.json"]
+  permissionRuleFile: [".codebuddy", "settings.json"],
+  configDirIsShared: false,
+  setupNote: null
 };
 var QODER = {
   agentType: "qoder",
@@ -397,15 +475,20 @@ var QODER = {
   configFile: [".qoder", "settings.json"],
   hooksKeyPath: ["hooks"],
   toolAliases: {},
+  inputKeyAliases: {},
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
   shellCommandKeys: [],
   shellContextKeys: [],
   events: without("Elicitation", "PermissionDenied"),
   wire: "permission_decision",
+  payload: "claude",
+  nonToolEntries: "nested",
   mcp: { shape: "claude_http", file: [".qoder", "settings.json"], trusted: true },
   instructions: null,
-  permissionRuleFile: null
+  permissionRuleFile: null,
+  configDirIsShared: false,
+  setupNote: null
 };
 var DROID = {
   agentType: "droid",
@@ -420,15 +503,20 @@ var DROID = {
     ApplyPatch: "Edit",
     FetchUrl: "WebFetch"
   },
+  inputKeyAliases: {},
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
   shellCommandKeys: [],
   shellContextKeys: [],
   events: ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Notification", "Stop", "SubagentStop", "PreCompact", "SessionStart", "SessionEnd"],
   wire: "permission_decision",
+  payload: "claude",
+  nonToolEntries: "nested",
   mcp: null,
   instructions: null,
-  permissionRuleFile: null
+  permissionRuleFile: null,
+  configDirIsShared: false,
+  setupNote: null
 };
 var DEVIN = {
   agentType: "devin",
@@ -448,17 +536,57 @@ var DEVIN = {
     web_search: "WebSearch",
     run_subagent: "Task"
   },
+  inputKeyAliases: {},
   extraMatchers: ["mcp__.*", "mcp_call_tool", "write_to_process"],
   pathInputKeys: [],
   shellCommandKeys: [],
   shellContextKeys: [],
   events: ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop", "SessionStart", "SessionEnd"],
   wire: "legacy_decision",
+  payload: "claude",
+  nonToolEntries: "nested",
   mcp: null,
   instructions: null,
-  permissionRuleFile: null
+  permissionRuleFile: null,
+  configDirIsShared: false,
+  setupNote: null
+};
+var ANTIGRAVITY_CLI = {
+  agentType: "antigravity_cli",
+  source: "antigravity",
+  label: "Antigravity CLI",
+  binary: "agy",
+  configFile: [".gemini", "config", "hooks.json"],
+  hooksKeyPath: ["pushary"],
+  toolAliases: {
+    run_command: "Bash",
+    write_to_file: "Write",
+    replace_file_content: "Edit",
+    multi_replace_file_content: "Edit",
+    view_file: "Read",
+    read_url_content: "WebFetch",
+    search_web: "WebSearch"
+  },
+  inputKeyAliases: {
+    CodeContent: "content",
+    TargetContent: "old_string",
+    ReplacementContent: "new_string"
+  },
+  extraMatchers: [ANTIGRAVITY_MCP_TOOL],
+  pathInputKeys: ["TargetFile", "AbsolutePath"],
+  shellCommandKeys: ["CommandLine"],
+  shellContextKeys: ["Cwd"],
+  events: ["PreToolUse", "PostToolUse", "Stop"],
+  wire: "allow_deny_decision",
+  payload: "antigravity",
+  nonToolEntries: "handler",
+  mcp: { shape: "antigravity_http", file: [".gemini", "config", "mcp_config.json"], trusted: false },
+  instructions: null,
+  permissionRuleFile: null,
+  configDirIsShared: true,
+  setupNote: 'Approvals from your phone take effect only when Antigravity CLI runs in always-proceed mode: start it with --dangerously-skip-permissions, or set "toolPermission": "always-proceed" in ~/.gemini/antigravity-cli/settings.json. Pushary is then the only gate, and an unanswered approval is blocked.'
 };
-var HOOK_COMPATIBLE_PROFILES = Object.freeze([QWEN_CODE, CODEBUDDY, QODER, DROID, DEVIN]);
+var HOOK_COMPATIBLE_PROFILES = Object.freeze([QWEN_CODE, CODEBUDDY, QODER, DROID, DEVIN, ANTIGRAVITY_CLI]);
 var hookCompatibleProfile = (agentType) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.agentType === agentType);
 var hookCompatibleProfileBySource = (source) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.source === source);
 var compatibleTargetFiles = (profile) => {
@@ -736,7 +864,7 @@ var AUTH_REJECTION_REASONS = [
 // ../contracts/src/declined-agents.ts
 var DECLINED_AGENTS_FILE = "declined-agents.json";
 var DECLINED_AGENTS_VERSION = 1;
-var isDeclinableAgent = (value) => typeof value === "string" && HOOK_SOURCES.includes(value);
+var isDeclinableAgent = (value) => typeof value === "string" && DISCONNECT_AGENT_IDS.includes(value);
 var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var canonicalAgents = (agents) => [...new Set(agents)].sort();
 var parseDeclinedAgents = (value) => {
@@ -871,7 +999,8 @@ var HOOK_BUDGETS = {
   codebuddy: { budgetSeconds: 600, guardSeconds: 10 },
   qoder: { budgetSeconds: 600, guardSeconds: 10 },
   droid: { budgetSeconds: 600, guardSeconds: 10 },
-  devin: { budgetSeconds: 600, guardSeconds: 10 }
+  devin: { budgetSeconds: 600, guardSeconds: 10 },
+  antigravity: { budgetSeconds: 600, guardSeconds: 10 }
 };
 var hookMaxWaitSeconds = (agent) => Math.max(HOOK_BUDGETS[agent].budgetSeconds - HOOK_BUDGETS[agent].guardSeconds, 1);
 var HOOK_HOLD_BUDGET_FLAG = "--hold-budget";
@@ -905,12 +1034,16 @@ var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + ho
 var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
 var OPENCODE_APPROVAL_EVENT = "permission.ask";
 var CURSOR_GATE_EVENTS = ["beforeShellExecution", "beforeMCPExecution", "preToolUse"];
+var hasNativeApprovalPrompt = (source, event) => !(source === "cursor" && event === "preToolUse") && !(source === "antigravity" && event === "PreToolUse");
 var SUPPORT_EMAIL = "business@pushary.com";
 var SUPPORT_DISCORD = "https://discord.gg/9v3VvUByrr";
 var HOOK_LOCATOR_BINARY = "pushary-bridge";
 var isRecord2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isTokenCount = (value) => typeof value === "number" && Number.isInteger(value) && value >= 0;
+var reportableSessionId = (value) => typeof value === "string" && value.length > 0 && value.length <= SESSION_ID_MAX_LENGTH ? value : null;
 var HOOK_BATCH_MAX_BYTES = 4 * 1024 * 1024;
 var REPO_KEY_MAX_LENGTH = 200;
+var SESSION_ID_MAX_LENGTH = 200;
 var WILDCARD_TOOL_PATTERN = "*";
 var isRepoKeyMatch = (ruleRepoKey, currentRepoKey) => {
   if (!ruleRepoKey) return true;
@@ -1142,7 +1275,9 @@ var SAFE_SHELL_COMMANDS = /* @__PURE__ */ new Set([
   "du",
   "df",
   "ps",
-  "true"
+  "true",
+  "sleep",
+  "pgrep"
 ]);
 var SAFE_GIT_SUBCOMMANDS = /* @__PURE__ */ new Set([
   "status",
@@ -1164,6 +1299,8 @@ var SAFE_GIT_SUBCOMMANDS = /* @__PURE__ */ new Set([
   "count-objects"
 ]);
 var GIT_WRITE_FLAGS = (token) => token === "--output" || token.startsWith("--output=");
+var GIT_READ_ONLY_BRANCH_ARGUMENTS = ["branch", "--show-current"];
+var isReadOnlyGitBranch = (args) => args.length === GIT_READ_ONLY_BRANCH_ARGUMENTS.length && args.every((arg, index) => arg === GIT_READ_ONLY_BRANCH_ARGUMENTS[index]);
 var DANGEROUS_FIND_ACTIONS = /* @__PURE__ */ new Set([
   "-exec",
   "-execdir",
@@ -1270,6 +1407,7 @@ var isSafeSimpleCommand = (segment) => {
   if (exe === "git") {
     const sub = tokens[1];
     if (!sub || sub.startsWith("-")) return false;
+    if (isReadOnlyGitBranch(tokens.slice(1))) return true;
     if (!SAFE_GIT_SUBCOMMANDS.has(sub)) return false;
     return !tokens.some(GIT_WRITE_FLAGS);
   }
@@ -1284,8 +1422,61 @@ var isSafeSimpleCommand = (segment) => {
   if (exe === "sed") return isPrintOnlySed(tokens.slice(1));
   if (exe === "date") return isReadOnlyDate(tokens.slice(1));
   if (exe === "printf") return isOutputOnlyPrintf(tokens.slice(1));
+  if (exe === RIPGREP_PROGRAM) return carriesNoRefusedOption(tokens.slice(1), RIPGREP_OPTIONS_THAT_RUN_A_PROGRAM);
+  if (exe === SORT_PROGRAM) return carriesNoRefusedOption(tokens.slice(1), SORT_OPTIONS_THAT_WRITE_OR_RUN);
+  if (exe === UNIQ_PROGRAM) return uniqFileOperandCount(tokens.slice(1)) <= UNIQ_MAX_FILE_OPERANDS;
   return SAFE_SHELL_COMMANDS.has(exe);
 };
+var RIPGREP_PROGRAM = "rg";
+var RIPGREP_OPTIONS_THAT_RUN_A_PROGRAM = {
+  long: ["--pre", "--pre-glob", "--hostname-bin", "--search-zip"],
+  short: ["-z"]
+};
+var SORT_PROGRAM = "sort";
+var SORT_OPTIONS_THAT_WRITE_OR_RUN = {
+  long: ["--output", "--compress-program", "--temporary-directory"],
+  short: ["-o", "-T"]
+};
+var UNIQ_PROGRAM = "uniq";
+var UNIQ_MAX_FILE_OPERANDS = 1;
+var UNIQ_OPTIONS_WITH_A_SEPARATE_VALUE = [
+  "-f",
+  "-s",
+  "-w",
+  "--skip-fields",
+  "--skip-chars",
+  "--check-chars"
+];
+var uniqFileOperandCount = (args) => {
+  let operands = 0;
+  let optionsEnded = false;
+  for (let index = 0; index < args.length; index += 1) {
+    const arg = args[index] ?? "";
+    if (optionsEnded || !isFlagToken(arg) || arg === STDIN_OPERAND) {
+      operands += 1;
+      optionsEnded = true;
+    } else if (arg === END_OF_OPTIONS) {
+      optionsEnded = true;
+    } else if (UNIQ_OPTIONS_WITH_A_SEPARATE_VALUE.includes(arg)) {
+      index += 1;
+    }
+  }
+  return operands;
+};
+var STDIN_OPERAND = "-";
+var LONG_OPTION_PREFIX = "--";
+var OPTION_VALUE_SEPARATOR = "=";
+var longOptionName = (token) => token.split(OPTION_VALUE_SEPARATOR, 1)[0] ?? token;
+var abbreviatesALongOption = (token, longOptions) => {
+  const name = longOptionName(token);
+  return longOptions.some((option) => option.startsWith(name));
+};
+var clustersAShortOption = (token, shortOptions) => shortOptions.some((option) => token.slice(1).includes(option.slice(1)));
+var isRefusedOption = (token, options) => {
+  if (token === END_OF_OPTIONS || !isFlagToken(token)) return false;
+  return token.startsWith(LONG_OPTION_PREFIX) ? abbreviatesALongOption(token, options.long) : clustersAShortOption(token, options.short);
+};
+var carriesNoRefusedOption = (args, options) => !args.some((arg) => isRefusedOption(arg, options));
 var SED_PRINT_ONLY_SCRIPT = /^(?:\d+|\$)(?:,(?:\d+|\$))?p$/;
 var SED_QUIET_FLAG = "-n";
 var DATE_FORMAT_PREFIX = "+";
@@ -1298,7 +1489,16 @@ var READ_ONLY_SEGMENT_SEPARATOR = /&&|\|\||[;|]/g;
 var PIPELINE_CHAIN_SEPARATOR = /&&|\|\||;/g;
 var EXPANSION_THAT_CAN_BECOME_A_FLAG = /\$|(?:^|\s)[*?[]/;
 var SHELL_QUOTE_CHARACTERS = /['"]/g;
-var INSPECTED_ARGUMENT_COMMANDS = /* @__PURE__ */ new Set(["git", "find", "sed", "date", "printf"]);
+var INSPECTED_ARGUMENT_COMMANDS = /* @__PURE__ */ new Set([
+  "git",
+  "find",
+  "sed",
+  "date",
+  "printf",
+  RIPGREP_PROGRAM,
+  SORT_PROGRAM,
+  UNIQ_PROGRAM
+]);
 var argumentsMayExpand = (segment) => {
   const visible = shellVisibleText(segment);
   return visible === null || EXPANSION_THAT_CAN_BECOME_A_FLAG.test(visible.replace(SHELL_QUOTE_CHARACTERS, ""));
@@ -2075,12 +2275,21 @@ var autoApprove = (tool) => ({
   mode: "terminal_only",
   pushFirstSeconds: 0
 });
+var CODEX_COORDINATION_TOOLS = [
+  "mcp__codex_app__wait_threads",
+  "mcp__codex_app__send_message_to_thread"
+];
+var CODEX_COORDINATION_TOOL_NAMES = new Set(CODEX_COORDINATION_TOOLS);
+var isCodexCoordinationTool = (toolName) => CODEX_COORDINATION_TOOL_NAMES.has(toolName);
+var isNamedByARule = (rank) => rank !== void 0 && rank !== "wildcard";
+var isSpecificArgumentRank = (rank) => rank === "exact" || rank === "prefix";
+var shellReadOnlyFloorApplies = (toolName, arg, rank) => !isSpecificArgumentRank(rank) && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg);
+var coordinationFloorApplies = (toolName, rank) => isCodexCoordinationTool(toolName) && !isNamedByARule(rank);
 var resolveAutoResolveOrigin = (config, toolName, toolInput, cwd, repoKey, sessionId) => {
   const args = toolInput ? policyArgForms(toolName, toolInput, cwd) : [];
   const arg = args[0];
-  const match = selectGoverningRule(config.policies, toolName, args, repoKey, sessionId);
-  const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
-  if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
+  const rank = selectGoverningRule(config.policies, toolName, args, repoKey, sessionId)?.rank;
+  if (shellReadOnlyFloorApplies(toolName, arg, rank) || coordinationFloorApplies(toolName, rank)) {
     return DECISION_ORIGIN.safeReadonly;
   }
   return DECISION_ORIGIN.autopilot;
@@ -2107,10 +2316,10 @@ var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey, se
     mode: config.defaultMode ?? "push_first",
     pushFirstSeconds: config.defaultPushFirstSeconds ?? 20
   };
-  const governedBySpecificRule = match?.rank === "exact" || match?.rank === "prefix";
+  const governedBySpecificRule = isSpecificArgumentRank(match?.rank);
   const governedBySessionToolGrant = match?.rank === "tool" && isSessionToolGrant(match.policy);
   const governingMode = base.mode;
-  const approvedByReadOnlyFloor = !governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg);
+  const approvedByReadOnlyFloor = !isAutoDeny(base) && (shellReadOnlyFloorApplies(toolName, arg, match?.rank) || coordinationFloorApplies(toolName, match?.rank));
   if (governedBySessionToolGrant && !approvedByReadOnlyFloor && typeof arg === "string" && commandNeedsAPerson(toolName, arg)) {
     return resolvePolicy(withoutSessionToolGrants(config), toolName, modeOverride, toolInput, cwd, repoKey, sessionId);
   }
@@ -2430,6 +2639,7 @@ var pendingCommandEvents = (source) => {
     case "qoder":
     case "droid":
     case "devin":
+    case "antigravity":
       return compatiblePendingCommandEvents(source);
   }
 };
@@ -2810,6 +3020,7 @@ export {
   canonicalToolName,
   toToolLookup,
   renderPreToolUseVerdict,
+  claudeShapedHookInput,
   HOOK_COMPATIBLE_PROFILES,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
@@ -2853,9 +3064,12 @@ export {
   effectiveWaitSeconds,
   OPENCODE_APPROVAL_EVENT,
   CURSOR_GATE_EVENTS,
+  hasNativeApprovalPrompt,
   SUPPORT_EMAIL,
   SUPPORT_DISCORD,
   HOOK_LOCATOR_BINARY,
+  isTokenCount,
+  reportableSessionId,
   normalizeRepoRemote,
   localRepoKey,
   isSafeReadOnlyCommand,