@pushary/agent-hooks 1.9.12 → 1.9.13

package/dist/{chunk-VDPU4YQN.js → chunk-TCVFNLMM.js}

@@ -1,21 +1,21 @@
 import {
   defersToNativeMode,
   reportMachineDenial
-} from "./chunk-E2FGVADR.js";
+} from "./chunk-WIRM7ZLI.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-RBBMGCSZ.js";
+} from "./chunk-LBNIISXH.js";
 import {
   announceSubscriptionRequired,
   denyReasonFrom,
   isDeferAnswer,
   oncePerSession
-} from "./chunk-CPUEZAE2.js";
+} from "./chunk-GYR4G4WO.js";
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-BOHDM4T7.js";
+} from "./chunk-3VSMTCXV.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -40,7 +40,7 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-7U26QSMF.js";
+} from "./chunk-6NL3LYUM.js";
 import {
   askUser,
   cancelQuestion,
@@ -51,26 +51,28 @@ import {
   requestGate,
   sendNotification,
   waitForQuestion
-} from "./chunk-DWHCF4RH.js";
+} from "./chunk-JVUK5YFM.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-CATIBZQH.js";
+} from "./chunk-LYDO2SS6.js";
 import {
   getMachineId
-} from "./chunk-2NKTEA42.js";
+} from "./chunk-43ORAXAL.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-7JM6TCMA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-RYBAJXV4.js";
+} from "./chunk-4ATFPZ6X.js";
 import {
   AGENT_QUESTION_STRATEGY,
   DECISION_STOP_REASON,
   GATE_BLOCK_REASON_MAX_LENGTH,
   GATE_WIRE,
   PLAN_DECLINED_REASON,
+  SOLE_GATE_SIGNED_OUT_REASON,
+  SOLE_GATE_UNDECIDED_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
   WITHDRAWN_APPROVAL_REASON,
   agentQuestionStrategy,
@@ -87,6 +89,7 @@ import {
   editGoesToTheAgentsPrompt,
   effectiveWaitSeconds,
   hasNativeApprovalPrompt,
+  hookCompatibleProfileBySource,
   hookHoldWindowMs,
   hookWaitClamped,
   hookWaitDeadline,
@@ -98,7 +101,7 @@ import {
   parseAgentQuestions,
   questionHandedToTheTerminal,
   resolveGate
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";
@@ -171,12 +174,14 @@ import { basename } from "path";
 var START_MS = Date.now();
 var ACTIVE_AGENT = activeIdentity(process.argv);
 var ACTIVE_SOURCE = activeHookSource(process.argv);
+var PUSHARY_IS_SOLE_GATE = ACTIVE_SOURCE !== null && hookCompatibleProfileBySource(ACTIVE_SOURCE)?.soleGate != null;
 var agentNameIn = (projectName) => `${ACTIVE_AGENT.label} - ${projectName}`;
 var allow = (reason) => claudePreToolUseOutput("allow", reason);
 var deny = (reason) => claudePreToolUseOutput("deny", reason);
 var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, updatedInput);
 var ask = (reason) => claudePreToolUseOutput("ask", reason);
 var halted = (reason) => claudeStoppedPreToolUseOutput(reason);
+var undecidedCall = (reason) => PUSHARY_IS_SOLE_GATE ? deny(reason) : void 0;
 var outcomeOfFailedAsk = (error, sessionId, failure) => {
   if (!(error instanceof SubscriptionRequiredError)) return failure;
   announceSubscriptionRequired(error.upgradeUrl, sessionId);
@@ -591,7 +596,8 @@ var handlePreToolUse = async (input, canonical) => {
   try {
     apiKey = getApiKey();
   } catch {
-    return handleKeyless(input);
+    handleKeyless(input);
+    return undecidedCall(SOLE_GATE_SIGNED_OUT_REASON);
   }
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
@@ -631,12 +637,12 @@ var handlePreToolUse = async (input, canonical) => {
       // State we could not establish, with an auto-approve on the table. No
       // opinion, so Claude Code's own flow runs as if the hook were absent.
       case "defer":
-        return void 0;
+        return undecidedCall(SOLE_GATE_UNDECIDED_REASON);
       default:
         return dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath);
     }
   } catch {
-    return void 0;
+    return undecidedCall(SOLE_GATE_UNDECIDED_REASON);
   }
 };
 var permReqAllow = (updatedInput) => claudePermissionRequestOutput("allow", void 0, updatedInput);

package/dist/{chunk-GP44LTXN.js → chunk-TDSLVFG6.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-QOBOIFGG.js → chunk-TVDI7SX2.js}

@@ -239,7 +239,7 @@ var AGENTS = {
     connectVia: "Native hooks + MCP",
     setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell commands, file writes, edits and MCP calls through native PreToolUse hooks in ~/.gemini/config/hooks.json, answered allow or deny.",
-    capabilityNote: 'Antigravity CLI ignores a hook\'s allow unless it runs in always-proceed mode (`toolPermission: "always-proceed"` or `--dangerously-skip-permissions`), so approving from the phone needs that mode, with Pushary as the only gate. Pushary answers allow or deny and never ask, because ask and force_ask run the call unprompted in that mode. An unanswered approval is blocked with a reason.'
+    capabilityNote: 'Antigravity CLI ignores a hook\'s allow unless it runs in always-proceed mode, so connecting it sets `toolPermission: "always-proceed"` when you never chose a mode, and disconnecting puts it back. Pushary is then the only gate: it answers allow or deny and never ask, and a call it cannot decide, one nobody answers, or one made after Pushary was removed is blocked with a reason.'
   },
   windsurf: {
     ...defaults,
@@ -332,6 +332,8 @@ var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path)
 };
 var NO_AGENT_PROMPT_REASON = "Pushary needs an answer from the phone before this can run, and this agent has no approval prompt of its own here, so nothing ran. Ask the user, then try again.";
 var DENIED_BY_PUSHARY_REASON = "Denied from Pushary.";
+var SOLE_GATE_UNDECIDED_REASON = "Pushary could not decide on this call, so it did not run. Pushary is the only approval for this agent. Check that Pushary is signed in and online, then try again.";
+var SOLE_GATE_SIGNED_OUT_REASON = "Pushary is not signed in on this computer, so nothing can approve this call and it did not run. Sign in to Pushary, or disconnect this agent from Pushary.";
 var UNCARRIED_ANSWER_REASON = "The answer from the phone cannot be passed to this agent, so the call did not run. Ask the question in chat instead.";
 var renderAllowDenyDecision = (verdict) => {
   const { permissionDecision, permissionDecisionReason } = verdict.hookSpecificOutput;
@@ -357,6 +359,14 @@ var renderPreToolUseVerdict = (profile, verdict) => {
     ...stop
   };
 };
+var homePath = (segments) => `~/${segments.join("/")}`;
+var pusharyMissingReason = (profile) => {
+  const settingBack = profile.soleGate ? ` and remove ${profile.soleGate.key} from ${homePath(profile.soleGate.file)}` : "";
+  return `Pushary is not installed on this computer any more, so nothing can approve this call and it did not run. Reinstall Pushary, or remove the pushary hook from ${homePath(profile.configFile)}${settingBack}.`;
+};
+var refusalOutput = (profile, reason) => JSON.stringify(renderPreToolUseVerdict(profile, {
+  hookSpecificOutput: { permissionDecision: "deny", permissionDecisionReason: reason }
+}));
 var ANTIGRAVITY_MCP_TOOL = "call_mcp_tool";
 var isPayloadRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var nonEmptyString = (value) => typeof value === "string" && value.length > 0 ? value : void 0;
@@ -442,7 +452,7 @@ var QWEN_CODE = {
   instructions: { file: [".qwen", "QWEN.md"], label: "Qwen Code" },
   permissionRuleFile: null,
   configDirIsShared: false,
-  setupNote: null
+  soleGate: null
 };
 var CODEBUDDY = {
   agentType: "codebuddy",
@@ -465,7 +475,7 @@ var CODEBUDDY = {
   instructions: { file: [".codebuddy", "CODEBUDDY.md"], label: "CodeBuddy" },
   permissionRuleFile: [".codebuddy", "settings.json"],
   configDirIsShared: false,
-  setupNote: null
+  soleGate: null
 };
 var QODER = {
   agentType: "qoder",
@@ -488,7 +498,7 @@ var QODER = {
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: false,
-  setupNote: null
+  soleGate: null
 };
 var DROID = {
   agentType: "droid",
@@ -516,7 +526,7 @@ var DROID = {
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: false,
-  setupNote: null
+  soleGate: null
 };
 var DEVIN = {
   agentType: "devin",
@@ -549,7 +559,7 @@ var DEVIN = {
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: false,
-  setupNote: null
+  soleGate: null
 };
 var ANTIGRAVITY_CLI = {
   agentType: "antigravity_cli",
@@ -584,7 +594,12 @@ var ANTIGRAVITY_CLI = {
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: true,
-  setupNote: 'Approvals from your phone take effect only when Antigravity CLI runs in always-proceed mode: start it with --dangerously-skip-permissions, or set "toolPermission": "always-proceed" in ~/.gemini/antigravity-cli/settings.json. Pushary is then the only gate, and an unanswered approval is blocked.'
+  soleGate: {
+    file: [".gemini", "antigravity-cli", "settings.json"],
+    key: "toolPermission",
+    value: "always-proceed",
+    receipt: [".pushary", "setup", "antigravity-tool-permission.json"]
+  }
 };
 var HOOK_COMPATIBLE_PROFILES = Object.freeze([QWEN_CODE, CODEBUDDY, QODER, DROID, DEVIN, ANTIGRAVITY_CLI]);
 var hookCompatibleProfile = (agentType) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.agentType === agentType);
@@ -3019,7 +3034,11 @@ export {
   PHONE_ANSWERED_TOOLS,
   canonicalToolName,
   toToolLookup,
+  SOLE_GATE_UNDECIDED_REASON,
+  SOLE_GATE_SIGNED_OUT_REASON,
   renderPreToolUseVerdict,
+  pusharyMissingReason,
+  refusalOutput,
   claudeShapedHookInput,
   HOOK_COMPATIBLE_PROFILES,
   hookCompatibleProfile,

package/dist/{chunk-DYQ5QIDN.js → chunk-U5SXTKZV.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-PKQ435Z2.js";
+} from "./chunk-RI5E5JQS.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-ZHF4JDVE.js";
+} from "./chunk-3EOXZYUE.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-CMZ4CW5J.js → chunk-U6QEHPEF.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-WBSL4FBX.js";
+} from "./chunk-LUYAXSUS.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-7JM6TCMA.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-SQJUXVLW.js → chunk-UUBEEKT6.js}

@@ -3,10 +3,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-3VPS7JPH.js";
+} from "./chunk-S2LDTUHS.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-RYBAJXV4.js";
+} from "./chunk-4ATFPZ6X.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-TSGQYARU.js → chunk-VUHT6NYV.js}

@@ -14,19 +14,19 @@ import {
 } from "./chunk-U4TMAANR.js";
 import {
   callMcpTool
-} from "./chunk-CATIBZQH.js";
+} from "./chunk-LYDO2SS6.js";
 import {
   reportedInstallSource
-} from "./chunk-WKP2KRTU.js";
+} from "./chunk-NPRFA7YM.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-RYBAJXV4.js";
+} from "./chunk-4ATFPZ6X.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS,
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-E2FGVADR.js → chunk-WIRM7ZLI.js}

@@ -6,12 +6,12 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-7U26QSMF.js";
+} from "./chunk-6NL3LYUM.js";
 import {
   machineDecisionFor,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-LBDMCNQY.js → chunk-WL4PVINO.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-CATIBZQH.js";
+} from "./chunk-LYDO2SS6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-RYBAJXV4.js";
+} from "./chunk-4ATFPZ6X.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-AWD2SLNA.js → chunk-WP57USIT.js}

@@ -13,7 +13,7 @@ import {
   isReleaseVersion,
   ownPackageName,
   withHookHoldBudget
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/setup/paths.ts
 import { homedir as homedir2 } from "os";
@@ -365,9 +365,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-OCZWEF3A.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-XLE5GVWS.js");
-    const { autoUpdateLock: autoUpdateLock2 } = await import("./paths-SOGZJICO.js");
+    const { withUpgradeLock } = await import("./global-upgrade-NIFOQFV4.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-Z3LYROGK.js");
+    const { autoUpdateLock: autoUpdateLock2 } = await import("./paths-QPBLO5Q2.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;
@@ -438,6 +438,14 @@ var guardHookCommand = (target, platform = process.platform) => {
   return `${HOOK_SHELL} '${HOOK_GUARD_SCRIPTS[guardKindOf(target)]}' ${path}`;
 };
 var guardBinary = (path, platform) => guardHookCommand({ kind: "binary", path, runtime: "node" }, platform);
+var SILENT_MISS = "exit 0";
+var REFUSE = "R";
+var definesRefusal = (refusal) => `${REFUSE}() { printf %s ${shellDoubleQuoted(refusal)}; exit 0; }`;
+var guardBinaryRefusing = (path, refusal, platform = process.platform) => {
+  if (platform === "win32") return guardBinary(path, platform);
+  const script = `${definesRefusal(refusal)}; ${HOOK_GUARD_SCRIPTS.node_binary.replaceAll(SILENT_MISS, REFUSE)}`;
+  return `${HOOK_SHELL} '${script}' ${quoteIfNeeded(path)}`;
+};
 var guardNodeScript = (script, platform) => guardHookCommand({ kind: "node", script }, platform);
 var guardCursorGate = (script, platform) => guardHookCommand({ kind: "cursor_gate", script }, platform);
 var guardedArgv = (target, args = [], platform = process.platform) => {
@@ -854,6 +862,7 @@ export {
   installGlobally,
   holdBudgetOf,
   guardBinary,
+  guardBinaryRefusing,
   guardNodeScript,
   guardCursorGate,
   guardedArgv,

package/dist/{chunk-PNBJAYSL.js → chunk-Y25RH4VF.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-TZCHW6KR.js → chunk-YI37QERZ.js}

@@ -1,18 +1,18 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-Z6VYZSVA.js";
+} from "./chunk-6QPQG3Q5.js";
 import {
   keyPrefix
-} from "./chunk-3VPS7JPH.js";
+} from "./chunk-S2LDTUHS.js";
 import {
   bridgeAgentKey
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-WP57USIT.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";
 import {
   isValidApiKey
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-TVDI7SX2.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-4DWQNP52.js → chunk-ZAH3CCEV.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-SQJUXVLW.js";
+} from "./chunk-UUBEEKT6.js";
 import {
   createIo
 } from "./chunk-U4TMAANR.js";
 import {
   readKeySource
-} from "./chunk-3VPS7JPH.js";
+} from "./chunk-S2LDTUHS.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-CMZ4CW5J.js";
+} from "./chunk-U6QEHPEF.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-7JM6TCMA.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{global-upgrade-OCZWEF3A.js → global-upgrade-NIFOQFV4.js}

@@ -5,15 +5,15 @@ import {
   readGlobalUpgradeSubject,
   upgradeInstalledPackage,
   withUpgradeLock
-} from "./chunk-CKUACXAX.js";
-import "./chunk-PNBJAYSL.js";
-import "./chunk-J5XCHLP4.js";
+} from "./chunk-GFAVGG3X.js";
+import "./chunk-Y25RH4VF.js";
+import "./chunk-MPDJJNGA.js";
 import "./chunk-POFBE6ZY.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-AWD2SLNA.js";
+import "./chunk-WP57USIT.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-RYBAJXV4.js";
-import "./chunk-QOBOIFGG.js";
+import "./chunk-4ATFPZ6X.js";
+import "./chunk-TVDI7SX2.js";
 export {
   finishGlobalUpgrade,
   finishUpgradeWithLock,

package/dist/{paths-SOGZJICO.js → paths-QPBLO5Q2.js}

@@ -32,8 +32,8 @@ import {
   pusharyDir,
   vscodePluginDir,
   vscodePluginMcp
-} from "./chunk-AWD2SLNA.js";
-import "./chunk-QOBOIFGG.js";
+} from "./chunk-WP57USIT.js";
+import "./chunk-TVDI7SX2.js";
 export {
   autoUpdateLock,
   autoUpdateLog,

package/dist/{reapply-DFG5IE6N.js → reapply-TVMBJWJB.js}

@@ -10,34 +10,34 @@ import {
   reapplyOpenCodePlugin,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-BX2R7SIY.js";
-import "./chunk-YZWUTWDG.js";
+} from "./chunk-6CM3B4PJ.js";
+import "./chunk-RJAPOB34.js";
 import "./chunk-RIVNNBEK.js";
 import "./chunk-XHKBHWLX.js";
-import "./chunk-Z6VYZSVA.js";
-import "./chunk-BOHDM4T7.js";
-import "./chunk-SJ7M37RL.js";
-import "./chunk-KXCWWHYO.js";
-import "./chunk-NDZKDJQU.js";
-import "./chunk-JNDELCH5.js";
+import "./chunk-6QPQG3Q5.js";
+import "./chunk-3VSMTCXV.js";
+import "./chunk-226PID65.js";
+import "./chunk-4EAILOOQ.js";
+import "./chunk-6MGD24SH.js";
+import "./chunk-FWAXBC3P.js";
 import "./chunk-GMXKITVA.js";
 import "./chunk-6ICPEJY5.js";
-import "./chunk-7U26QSMF.js";
-import "./chunk-JKGTASA2.js";
-import "./chunk-DWHCF4RH.js";
+import "./chunk-6NL3LYUM.js";
+import "./chunk-JRKUJOZL.js";
+import "./chunk-JVUK5YFM.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-CATIBZQH.js";
-import "./chunk-CMZ4CW5J.js";
-import "./chunk-WBSL4FBX.js";
-import "./chunk-2NKTEA42.js";
+import "./chunk-LYDO2SS6.js";
+import "./chunk-U6QEHPEF.js";
+import "./chunk-LUYAXSUS.js";
+import "./chunk-43ORAXAL.js";
 import "./chunk-7QLSKOSU.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-WKP2KRTU.js";
-import "./chunk-AWD2SLNA.js";
+import "./chunk-NPRFA7YM.js";
+import "./chunk-WP57USIT.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-ZC6EVOX6.js";
-import "./chunk-RYBAJXV4.js";
-import "./chunk-QOBOIFGG.js";
+import "./chunk-7JM6TCMA.js";
+import "./chunk-4ATFPZ6X.js";
+import "./chunk-TVDI7SX2.js";
 export {
   ensureCodexTrustAfterReapply,
   inspectConfiguredManagedProviders,

package/dist/src/index.d.ts

@@ -159,6 +159,7 @@ interface AskUserParams {
     waitEndsAt?: string;
     requestId?: string;
     sessionToolAware?: true;
+    localSurfaceAvailable?: false;
 }
 interface AskUserResponse {
     correlationId: string;

package/dist/src/index.js

@@ -1,14 +1,14 @@
 import {
   handlePreToolUse
-} from "../chunk-VDPU4YQN.js";
-import "../chunk-E2FGVADR.js";
-import "../chunk-RBBMGCSZ.js";
-import "../chunk-CPUEZAE2.js";
+} from "../chunk-TCVFNLMM.js";
+import "../chunk-WIRM7ZLI.js";
+import "../chunk-LBNIISXH.js";
+import "../chunk-GYR4G4WO.js";
 import {
   fetchAccountPublicKey
-} from "../chunk-ZHF4JDVE.js";
-import "../chunk-BOHDM4T7.js";
-import "../chunk-KXCWWHYO.js";
+} from "../chunk-3EOXZYUE.js";
+import "../chunk-3VSMTCXV.js";
+import "../chunk-4EAILOOQ.js";
 import "../chunk-6ICPEJY5.js";
 import {
   fetchModeOverride,
@@ -18,31 +18,31 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-7U26QSMF.js";
-import "../chunk-JKGTASA2.js";
+} from "../chunk-6NL3LYUM.js";
+import "../chunk-JRKUJOZL.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
-} from "../chunk-DWHCF4RH.js";
+} from "../chunk-JVUK5YFM.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-CATIBZQH.js";
-import "../chunk-CMZ4CW5J.js";
-import "../chunk-WBSL4FBX.js";
-import "../chunk-2NKTEA42.js";
+import "../chunk-LYDO2SS6.js";
+import "../chunk-U6QEHPEF.js";
+import "../chunk-LUYAXSUS.js";
+import "../chunk-43ORAXAL.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-WKP2KRTU.js";
-import "../chunk-AWD2SLNA.js";
+import "../chunk-NPRFA7YM.js";
+import "../chunk-WP57USIT.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-ZC6EVOX6.js";
-import "../chunk-RYBAJXV4.js";
+} from "../chunk-7JM6TCMA.js";
+import "../chunk-4ATFPZ6X.js";
 import {
   resolvePolicy
-} from "../chunk-QOBOIFGG.js";
+} from "../chunk-TVDI7SX2.js";
 export {
   askUser,
   cancelQuestion,

package/dist/{upgrade-lock-XLE5GVWS.js → upgrade-lock-Z3LYROGK.js}

@@ -5,10 +5,10 @@ import {
   installWithUpgradeLock,
   ownsUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-PNBJAYSL.js";
-import "./chunk-AWD2SLNA.js";
+} from "./chunk-Y25RH4VF.js";
+import "./chunk-WP57USIT.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-QOBOIFGG.js";
+import "./chunk-TVDI7SX2.js";
 export {
   claimUpgradeLock,
   finishWithUpgradeLock,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "1.9.12",
+  "version": "1.9.13",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",