@pushary/agent-hooks 1.9.13 → 1.9.14

package/dist/{chunk-MPDJJNGA.js → chunk-2Z56BRTF.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-WP57USIT.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -14,7 +14,7 @@ import {
   cliPackagePathSegments,
   globalUpgradeEntry,
   ownPackageRoot
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-OOZ5RSEF.js → chunk-34PUBGLS.js}

@@ -1,9 +1,9 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-RJAPOB34.js";
+} from "./chunk-YSVCBUT3.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-4ATFPZ6X.js";
+} from "./chunk-FKQMH2DW.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-6CM3B4PJ.js → chunk-3KHQWC4F.js}

@@ -1,6 +1,6 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-RJAPOB34.js";
+} from "./chunk-YSVCBUT3.js";
 import {
   detectClaudeVersion
 } from "./chunk-RIVNNBEK.js";
@@ -12,12 +12,12 @@ import {
   openCodeHookArgv,
   openCodePluginDir,
   openCodeWired
-} from "./chunk-6QPQG3Q5.js";
+} from "./chunk-5RONPCMH.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-3VSMTCXV.js";
+} from "./chunk-POJUUEGO.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
@@ -25,7 +25,7 @@ import {
   codexWired,
   geminiWired,
   planHooks
-} from "./chunk-226PID65.js";
+} from "./chunk-SEQSZYLW.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -36,7 +36,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-4EAILOOQ.js";
+} from "./chunk-RV4U3LYL.js";
 import {
   formatVersion
 } from "./chunk-6ICPEJY5.js";
@@ -59,7 +59,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-WP57USIT.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-U6QEHPEF.js → chunk-3U4R475X.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-LUYAXSUS.js";
+} from "./chunk-EB6LH3U6.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-7JM6TCMA.js";
+} from "./chunk-AJRT3JGE.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-LBNIISXH.js → chunk-3XAUHY35.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-WIRM7ZLI.js → chunk-42WYKVHL.js}

@@ -6,12 +6,12 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-6NL3LYUM.js";
+} from "./chunk-WYPQKDKX.js";
 import {
   machineDecisionFor,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-QIPDIZC5.js → chunk-4BXVGCPE.js}

@@ -1,12 +1,12 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-WL4PVINO.js";
+} from "./chunk-2QASSTM5.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-S2LDTUHS.js";
+} from "./chunk-NMDGIMDV.js";
 import {
   NpmMissingError
-} from "./chunk-WP57USIT.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -14,7 +14,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-4ATFPZ6X.js";
+} from "./chunk-FKQMH2DW.js";
 
 // src/instruction-file.ts
 import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";

package/dist/{chunk-6QPQG3Q5.js → chunk-5RONPCMH.js}

@@ -1,15 +1,15 @@
 import {
   compatibleConfigFile
-} from "./chunk-3VSMTCXV.js";
+} from "./chunk-POJUUEGO.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-226PID65.js";
+} from "./chunk-SEQSZYLW.js";
 import {
   AGENT_CHOICES
-} from "./chunk-6MGD24SH.js";
+} from "./chunk-K2IUMMZJ.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -18,7 +18,7 @@ import {
   guardedArgv,
   pusharyDir,
   vscodePluginDir
-} from "./chunk-WP57USIT.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";
@@ -28,7 +28,7 @@ import {
   HOOK_LOCATOR_BINARY,
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-TDSLVFG6.js → chunk-5UYAJVAQ.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-WP57USIT.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-LHLUKFJV.js → chunk-5VP72OOI.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   ensureDaemonRunning
-} from "./chunk-43IDNI4X.js";
+} from "./chunk-7SIZISYH.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-RI5E5JQS.js";
+} from "./chunk-DVTXGXXL.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-3EOXZYUE.js";
+} from "./chunk-CT4BJEU7.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-G54VGPRX.js";
+} from "./chunk-7MGNY7S3.js";
 import {
   hookOwnerOf
-} from "./chunk-226PID65.js";
+} from "./chunk-SEQSZYLW.js";
 import {
   readTranscriptPreference
-} from "./chunk-S2LDTUHS.js";
+} from "./chunk-NMDGIMDV.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-WP57USIT.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-7JM6TCMA.js";
+} from "./chunk-AJRT3JGE.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-G54VGPRX.js → chunk-7MGNY7S3.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-S2LDTUHS.js";
+} from "./chunk-NMDGIMDV.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-43IDNI4X.js → chunk-7SIZISYH.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-S2LDTUHS.js";
+} from "./chunk-NMDGIMDV.js";
 import {
   getMachineId
-} from "./chunk-43ORAXAL.js";
+} from "./chunk-ZVFKNSRX.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-WP57USIT.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,14 +20,14 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "./chunk-7JM6TCMA.js";
+} from "./chunk-AJRT3JGE.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
   getPackageVersion,
   globalPackageFolder,
   globalRootFor
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-7JM6TCMA.js → chunk-AJRT3JGE.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-4ATFPZ6X.js";
+} from "./chunk-FKQMH2DW.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-RYKU62ZI.js → chunk-APG7IAUK.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-GYR4G4WO.js → chunk-ARM4DMIL.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-6NL3LYUM.js";
+} from "./chunk-WYPQKDKX.js";
 
 // src/answer.ts
 var denyReasonFrom = (value, note) => {

package/dist/{chunk-LYDO2SS6.js → chunk-CIZQARGJ.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-U6QEHPEF.js";
+} from "./chunk-3U4R475X.js";
 import {
   installNetworkDefaults
-} from "./chunk-LUYAXSUS.js";
+} from "./chunk-EB6LH3U6.js";
 import {
   getBaseUrl
-} from "./chunk-7JM6TCMA.js";
+} from "./chunk-AJRT3JGE.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-3EOXZYUE.js → chunk-CT4BJEU7.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-7JM6TCMA.js";
+} from "./chunk-AJRT3JGE.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-RI5E5JQS.js → chunk-DVTXGXXL.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-LUYAXSUS.js → chunk-EB6LH3U6.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-43ORAXAL.js";
+} from "./chunk-ZVFKNSRX.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-7JM6TCMA.js";
+} from "./chunk-AJRT3JGE.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-HHMMY6TB.js → chunk-ECU2Y7D2.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-WP57USIT.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;

package/dist/{chunk-4ATFPZ6X.js → chunk-FKQMH2DW.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {

package/dist/{chunk-YI37QERZ.js → chunk-H7MTFFNI.js}

@@ -1,18 +1,18 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-6QPQG3Q5.js";
+} from "./chunk-5RONPCMH.js";
 import {
   keyPrefix
-} from "./chunk-S2LDTUHS.js";
+} from "./chunk-NMDGIMDV.js";
 import {
   bridgeAgentKey
-} from "./chunk-WP57USIT.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";
 import {
   isValidApiKey
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-UUBEEKT6.js → chunk-J5RQW52I.js}

@@ -3,10 +3,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-S2LDTUHS.js";
+} from "./chunk-NMDGIMDV.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-4ATFPZ6X.js";
+} from "./chunk-FKQMH2DW.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-ZAH3CCEV.js → chunk-JHDHC2M7.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-UUBEEKT6.js";
+} from "./chunk-J5RQW52I.js";
 import {
   createIo
 } from "./chunk-U4TMAANR.js";
 import {
   readKeySource
-} from "./chunk-S2LDTUHS.js";
+} from "./chunk-NMDGIMDV.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-U6QEHPEF.js";
+} from "./chunk-3U4R475X.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-7JM6TCMA.js";
+} from "./chunk-AJRT3JGE.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-6MGD24SH.js → chunk-K2IUMMZJ.js}

@@ -10,7 +10,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-Y25RH4VF.js → chunk-LETLRKSY.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-WP57USIT.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-7VWIBIDK.js → chunk-LRZMGU7T.js}

@@ -1,16 +1,16 @@
 import {
   registerTranscript
-} from "./chunk-LHLUKFJV.js";
+} from "./chunk-5VP72OOI.js";
 import {
   namedEvent
-} from "./chunk-3VSMTCXV.js";
+} from "./chunk-POJUUEGO.js";
 import {
   writeDegraded
-} from "./chunk-JVUK5YFM.js";
+} from "./chunk-PWO6T7JG.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-GFAVGG3X.js → chunk-MSEUUAJ7.js}

@@ -4,7 +4,7 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-Y25RH4VF.js";
+} from "./chunk-LETLRKSY.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -14,7 +14,7 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-MPDJJNGA.js";
+} from "./chunk-2Z56BRTF.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
@@ -27,10 +27,10 @@ import {
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-WP57USIT.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-4ATFPZ6X.js";
+} from "./chunk-FKQMH2DW.js";
 import {
   commandsPackage,
   globalUpgradeEntry,
@@ -39,7 +39,7 @@ import {
   isSameMajorVersion,
   ownPackageRoot,
   packageVersionAt
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/global-upgrade.ts
 import { existsSync } from "fs";

package/dist/{chunk-TVDI7SX2.js → chunk-NAROM5IR.js}

@@ -900,6 +900,16 @@ var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
 var APPROVAL_MODES = ["push_only", "terminal_only", "push_first", "notify_only"];
 var isApprovalMode = (value) => typeof value === "string" && APPROVAL_MODES.includes(value);
+var approvalModeWithoutLocalPrompt = (mode) => {
+  switch (mode) {
+    case "push_first":
+      return "push_only";
+    case "push_only":
+    case "notify_only":
+    case "terminal_only":
+      return mode;
+  }
+};
 var MAX_AGENT_QUESTIONS = 4;
 var parseAgentQuestion = (raw) => {
   const q = raw;
@@ -3068,6 +3078,7 @@ export {
   withoutDeclinedAgent,
   normalizeKeyScope,
   isApprovalMode,
+  approvalModeWithoutLocalPrompt,
   parseAgentQuestion,
   parseAgentQuestions,
   parseAgentQuestionAnswers,

package/dist/{chunk-S2LDTUHS.js → chunk-NMDGIMDV.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-NPRFA7YM.js";
+} from "./chunk-ZSL7B7NF.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,7 +9,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   configFilePath
-} from "./chunk-7JM6TCMA.js";
+} from "./chunk-AJRT3JGE.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-MWP65CZ3.js → chunk-NNCK2PUR.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-4ATFPZ6X.js";
+} from "./chunk-FKQMH2DW.js";
 import {
   getPackageVersion
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-FWAXBC3P.js → chunk-NXJNYAP7.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-WP57USIT.js";
+} from "./chunk-2WWHZTI5.js";
 
 // src/bell/install.ts
 import { join } from "path";