@pushary/agent-hooks 1.9.12 → 1.9.13

package/dist/{chunk-7U26QSMF.js → chunk-6NL3LYUM.js}

@@ -2,7 +2,7 @@ import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-JKGTASA2.js";
+} from "./chunk-JRKUJOZL.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -10,26 +10,26 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-DWHCF4RH.js";
+} from "./chunk-JVUK5YFM.js";
 import {
   withRetry
-} from "./chunk-CATIBZQH.js";
+} from "./chunk-LYDO2SS6.js";
 import {
   getMachineId
-} from "./chunk-2NKTEA42.js";
+} from "./chunk-43ORAXAL.js";
 import {
   reportedInstallSource
-} from "./chunk-WKP2KRTU.js";
+} from "./chunk-NPRFA7YM.js";
 import {
   canonicalJson
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-7JM6TCMA.js";
 import {
   ACTION_BODY_MAX,
   AGENT_LABELS_BY_TYPE,
@@ -58,7 +58,7 @@ import {
   resolvePolicy,
   toToolLookup,
   truncateLine
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";

package/dist/{chunk-Z6VYZSVA.js → chunk-6QPQG3Q5.js}

@@ -1,15 +1,15 @@
 import {
   compatibleConfigFile
-} from "./chunk-BOHDM4T7.js";
+} from "./chunk-3VSMTCXV.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-SJ7M37RL.js";
+} from "./chunk-226PID65.js";
 import {
   AGENT_CHOICES
-} from "./chunk-NDZKDJQU.js";
+} from "./chunk-6MGD24SH.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -18,7 +18,7 @@ import {
   guardedArgv,
   pusharyDir,
   vscodePluginDir
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";
@@ -28,7 +28,7 @@ import {
   HOOK_LOCATOR_BINARY,
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-ZC6EVOX6.js → chunk-7JM6TCMA.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-RYBAJXV4.js";
+} from "./chunk-4ATFPZ6X.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-5VUB6VVO.js → chunk-7VWIBIDK.js}

@@ -1,16 +1,16 @@
 import {
   registerTranscript
-} from "./chunk-CXKY5FGY.js";
+} from "./chunk-LHLUKFJV.js";
 import {
   namedEvent
-} from "./chunk-BOHDM4T7.js";
+} from "./chunk-3VSMTCXV.js";
 import {
   writeDegraded
-} from "./chunk-DWHCF4RH.js";
+} from "./chunk-JVUK5YFM.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-JNDELCH5.js → chunk-FWAXBC3P.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-M2P3HQA3.js → chunk-G54VGPRX.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-3VPS7JPH.js";
+} from "./chunk-S2LDTUHS.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-A2DW2RNT.js → chunk-G5K656XW.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   readJsonSafe,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-CKUACXAX.js → chunk-GFAVGG3X.js}

@@ -4,7 +4,7 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-PNBJAYSL.js";
+} from "./chunk-Y25RH4VF.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -14,7 +14,7 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-J5XCHLP4.js";
+} from "./chunk-MPDJJNGA.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
@@ -27,10 +27,10 @@ import {
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-RYBAJXV4.js";
+} from "./chunk-4ATFPZ6X.js";
 import {
   commandsPackage,
   globalUpgradeEntry,
@@ -39,7 +39,7 @@ import {
   isSameMajorVersion,
   ownPackageRoot,
   packageVersionAt
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/global-upgrade.ts
 import { existsSync } from "fs";

package/dist/{chunk-CPUEZAE2.js → chunk-GYR4G4WO.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-7U26QSMF.js";
+} from "./chunk-6NL3LYUM.js";
 
 // src/answer.ts
 var denyReasonFrom = (value, note) => {

package/dist/{chunk-EYLQVCME.js → chunk-HHMMY6TB.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;

package/dist/{chunk-FLPXTN3Q.js → chunk-J2VNQSS6.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-7JM6TCMA.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-JKGTASA2.js → chunk-JRKUJOZL.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-DWHCF4RH.js → chunk-JVUK5YFM.js}

@@ -5,18 +5,18 @@ import {
 import {
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-CATIBZQH.js";
+} from "./chunk-LYDO2SS6.js";
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-WBSL4FBX.js";
+} from "./chunk-LUYAXSUS.js";
 import {
   clientReportClaims
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-7JM6TCMA.js";
 import {
   ASK_AGENT_NAME_MAX,
   ASK_QUESTION_MAX,
@@ -24,7 +24,7 @@ import {
   DECISION_LINE_MAX,
   degradedLine,
   truncateLine
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/client-report-claim.ts
 import { createHash } from "crypto";

package/dist/{chunk-RBBMGCSZ.js → chunk-LBNIISXH.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-CXKY5FGY.js → chunk-LHLUKFJV.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   ensureDaemonRunning
-} from "./chunk-2QJ6K2SR.js";
+} from "./chunk-43IDNI4X.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-PKQ435Z2.js";
+} from "./chunk-RI5E5JQS.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-ZHF4JDVE.js";
+} from "./chunk-3EOXZYUE.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-M2P3HQA3.js";
+} from "./chunk-G54VGPRX.js";
 import {
   hookOwnerOf
-} from "./chunk-SJ7M37RL.js";
+} from "./chunk-226PID65.js";
 import {
   readTranscriptPreference
-} from "./chunk-3VPS7JPH.js";
+} from "./chunk-S2LDTUHS.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-7JM6TCMA.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-WBSL4FBX.js → chunk-LUYAXSUS.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-2NKTEA42.js";
+} from "./chunk-43ORAXAL.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-7JM6TCMA.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-CATIBZQH.js → chunk-LYDO2SS6.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-CMZ4CW5J.js";
+} from "./chunk-U6QEHPEF.js";
 import {
   installNetworkDefaults
-} from "./chunk-WBSL4FBX.js";
+} from "./chunk-LUYAXSUS.js";
 import {
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-7JM6TCMA.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-J5XCHLP4.js → chunk-MPDJJNGA.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -14,7 +14,7 @@ import {
   cliPackagePathSegments,
   globalUpgradeEntry,
   ownPackageRoot
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-GTM7C36Y.js → chunk-MWP65CZ3.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-RYBAJXV4.js";
+} from "./chunk-4ATFPZ6X.js";
 import {
   getPackageVersion
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-OBGZUD73.js → chunk-N6XFGVNW.js}

@@ -1,13 +1,13 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-Z6VYZSVA.js";
+} from "./chunk-6QPQG3Q5.js";
 import {
   codexHomeFrom,
   resolvePathBinary
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-WKP2KRTU.js → chunk-NPRFA7YM.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-7JM6TCMA.js";
 import {
   normalizeInstallSource
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/chunk-OOKRWBCG.js

@@ -0,0 +1,111 @@
+import {
+  compatibleConfigFile,
+  hasCompatibleHooks
+} from "./chunk-3VSMTCXV.js";
+import {
+  pusharyHookExecutable
+} from "./chunk-226PID65.js";
+import {
+  isProtectedByScope,
+  registerHookEntry
+} from "./chunk-WP57USIT.js";
+
+// src/cursor-config.ts
+var hookCommandOf = (entry) => {
+  const command = entry && typeof entry === "object" && !Array.isArray(entry) ? entry.command : void 0;
+  return typeof command === "string" ? command : "";
+};
+var isPusharyCursorEntry = (entry) => pusharyHookExecutable(hookCommandOf(entry)) !== null;
+var registerCursorGate = (existing, entry) => registerHookEntry(existing, isPusharyCursorEntry, entry);
+var withoutPusharyCursorHooks = (hooks, scope) => {
+  let removed = 0;
+  const kept = {};
+  for (const [event, entries] of Object.entries(hooks)) {
+    if (!Array.isArray(entries)) {
+      kept[event] = entries;
+      continue;
+    }
+    const others = entries.filter((entry) => !isPusharyCursorEntry(entry) || isProtectedByScope(hookCommandOf(entry), scope));
+    removed += entries.length - others.length;
+    if (others.length > 0 || entries.length === 0) kept[event] = others;
+  }
+  return { hooks: kept, removed };
+};
+var CURSOR_PLUGIN_NAME = "pushary";
+var CURSOR_PLUGIN_STAGING_PREFIX = ".pushary-staging-";
+var CURSOR_PLUGIN_BACKUP_INFIX = ".pushary-backup-";
+var isCursorPluginLeftover = (name) => name.startsWith(`${CURSOR_PLUGIN_NAME}${CURSOR_PLUGIN_BACKUP_INFIX}`) || name.startsWith(CURSOR_PLUGIN_STAGING_PREFIX);
+var isPusharyCursorPluginManifest = (contents) => {
+  try {
+    const manifest = JSON.parse(contents);
+    return typeof manifest === "object" && manifest !== null && !Array.isArray(manifest) && manifest.name === CURSOR_PLUGIN_NAME;
+  } catch {
+    return false;
+  }
+};
+
+// src/sole-gate.ts
+import { homedir } from "os";
+import { join } from "path";
+var soleGateFile = (gate, home = homedir()) => join(home, ...gate.file);
+var soleGateReceiptFile = (gate, home = homedir()) => join(home, ...gate.receipt);
+var soleGateReceipt = (gate) => ({ key: gate.key, value: gate.value });
+var isJsonRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isSoleGateReceipt = (value, gate) => isJsonRecord(value) && value.key === gate.key && value.value === gate.value;
+var parseJsonRecord = (raw) => {
+  if (raw === null) return { kind: "missing" };
+  try {
+    const value = JSON.parse(raw);
+    return isJsonRecord(value) ? { kind: "record", value } : { kind: "unreadable" };
+  } catch {
+    return { kind: "unreadable" };
+  }
+};
+var claimSoleGate = (settings, gate) => {
+  const current = settings[gate.key];
+  if (current === void 0) {
+    settings[gate.key] = gate.value;
+    return { kind: "claimed" };
+  }
+  return current === gate.value ? { kind: "already_sole_gate" } : { kind: "agent_prompt_chosen", current: String(current) };
+};
+var releaseSoleGateSetting = (settings, gate) => {
+  if (settings[gate.key] !== gate.value) return false;
+  delete settings[gate.key];
+  return true;
+};
+var stillGatedByPushary = (profile, files, home) => {
+  const hooks = parseJsonRecord(files.read(compatibleConfigFile(profile, home)));
+  if (hooks.kind === "missing") return false;
+  return hooks.kind === "unreadable" || hasCompatibleHooks(hooks.value, profile);
+};
+var releaseSoleGate = (profile, files, home) => {
+  const gate = profile.soleGate;
+  if (!gate) return null;
+  if (stillGatedByPushary(profile, files, home)) return { kind: "still_gated" };
+  const receiptPath = soleGateReceiptFile(gate, home);
+  const receipt = parseJsonRecord(files.read(receiptPath));
+  if (receipt.kind !== "record" || !isSoleGateReceipt(receipt.value, gate)) return { kind: "not_set_by_pushary" };
+  const path = soleGateFile(gate, home);
+  const settings = parseJsonRecord(files.read(path));
+  if (settings.kind === "unreadable") return { kind: "unreadable", path };
+  const restored = settings.kind === "record" && releaseSoleGateSetting(settings.value, gate);
+  if (restored) files.write(path, `${JSON.stringify(settings.value, null, 2)}
+`);
+  files.remove(receiptPath);
+  return restored ? { kind: "restored", path } : { kind: "changed_since", path };
+};
+
+export {
+  registerCursorGate,
+  withoutPusharyCursorHooks,
+  CURSOR_PLUGIN_STAGING_PREFIX,
+  CURSOR_PLUGIN_BACKUP_INFIX,
+  isCursorPluginLeftover,
+  isPusharyCursorPluginManifest,
+  soleGateFile,
+  soleGateReceiptFile,
+  soleGateReceipt,
+  claimSoleGate,
+  releaseSoleGate
+};

package/dist/{chunk-MEHDBT5H.js → chunk-OOZ5RSEF.js}

@@ -1,9 +1,9 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-YZWUTWDG.js";
+} from "./chunk-RJAPOB34.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-RYBAJXV4.js";
+} from "./chunk-4ATFPZ6X.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-BNQKHPEC.js → chunk-QIPDIZC5.js}

@@ -1,12 +1,12 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-LBDMCNQY.js";
+} from "./chunk-WL4PVINO.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-3VPS7JPH.js";
+} from "./chunk-S2LDTUHS.js";
 import {
   NpmMissingError
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -14,7 +14,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-RYBAJXV4.js";
+} from "./chunk-4ATFPZ6X.js";
 
 // src/instruction-file.ts
 import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";

package/dist/{chunk-PKQ435Z2.js → chunk-RI5E5JQS.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-YZWUTWDG.js → chunk-RJAPOB34.js}

@@ -8,10 +8,10 @@ import {
   codexHooksJsonIn,
   isPusharyCodexCommand,
   resolvePathBinary
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   getPackageVersion
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/codex-app-server.ts
 import { existsSync, realpathSync } from "fs";

package/dist/{chunk-UEQWLVJB.js → chunk-RYKU62ZI.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-3VPS7JPH.js → chunk-S2LDTUHS.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-WKP2KRTU.js";
+} from "./chunk-NPRFA7YM.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,7 +9,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   configFilePath
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-7JM6TCMA.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";