@pushary/agent-hooks 1.9.2 → 1.9.3

package/dist/{chunk-PN3F7LOB.js → chunk-AMFNJPJ5.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-KP45FGHD.js";
+} from "./chunk-GB2U4QVF.js";
 import {
   ensureDaemonRunning
-} from "./chunk-WCHFDVCC.js";
+} from "./chunk-WL4YO6CO.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-U4DLXAGD.js";
+} from "./chunk-Q4RF7EEP.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-UX2YSFKS.js";
+} from "./chunk-ZV32QRBR.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-CTYCABBH.js";
+} from "./chunk-34JHGOYO.js";
 import {
   readTranscriptPreference
-} from "./chunk-ZNUNWWCN.js";
+} from "./chunk-ZPTSEJMD.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-HZ57E6LS.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-L52OIZXV.js";
+} from "./chunk-4GTXFYQ7.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-SFKU5DXZ.js → chunk-AUS3LY4N.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-XOXW4D6P.js";
+} from "./chunk-SJC5TXK7.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ABIW72ST.js";
+} from "./chunk-EZFE4PC3.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-UBNJYMTG.js → chunk-BPGATW2F.js}

@@ -14,19 +14,19 @@ import {
 } from "./chunk-U4TMAANR.js";
 import {
   callMcpTool
-} from "./chunk-XOXW4D6P.js";
+} from "./chunk-SJC5TXK7.js";
 import {
   reportedInstallSource
-} from "./chunk-UBCTOE5X.js";
+} from "./chunk-U3DBAX7P.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ABIW72ST.js";
+} from "./chunk-EZFE4PC3.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS,
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-ZFDGCEKO.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-35N53QLA.js → chunk-CJFVYYKM.js}

@@ -14,36 +14,36 @@ import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-RTKPR4UA.js";
+} from "./chunk-HBUQ2EQD.js";
 import {
   cancelQuestion,
   isPolicyConfig,
   sendNotification,
   waitForAnswer
-} from "./chunk-HZYUDXIH.js";
+} from "./chunk-UWMEY4RS.js";
 import {
   clientErrorKindOf,
   reportClientError
-} from "./chunk-XXSAGQAV.js";
+} from "./chunk-PPC4FZKJ.js";
 import {
   withRetry
-} from "./chunk-XOXW4D6P.js";
+} from "./chunk-SJC5TXK7.js";
 import {
   getMachineId
-} from "./chunk-3O4EBTR3.js";
+} from "./chunk-FSFI2PQL.js";
 import {
   reportedInstallSource
-} from "./chunk-UBCTOE5X.js";
+} from "./chunk-U3DBAX7P.js";
 import {
   canonicalJson
-} from "./chunk-HZ57E6LS.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-L52OIZXV.js";
+} from "./chunk-4GTXFYQ7.js";
 import {
   ACTION_BODY_MAX,
   AGENT_LABELS_BY_TYPE,
@@ -70,7 +70,7 @@ import {
   resolvePolicy,
   toToolLookup,
   truncateLine
-} from "./chunk-ZFDGCEKO.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/policy.ts
 import { createHash } from "crypto";

package/dist/{chunk-B6BLCHJW.js → chunk-CVVPUVBD.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-RTKPR4UA.js";
+} from "./chunk-HBUQ2EQD.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-HZ57E6LS.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-ZFDGCEKO.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-73BH4SZY.js → chunk-DEWCUHOY.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-ABIW72ST.js";
+} from "./chunk-EZFE4PC3.js";
 import {
   getPackageVersion
-} from "./chunk-ZFDGCEKO.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-ABIW72ST.js → chunk-EZFE4PC3.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_AGENT_CHOICES
-} from "./chunk-ZFDGCEKO.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/cli/commands.ts
 var NPX_LATEST_COMMAND = "npx pushary@latest";

package/dist/{chunk-2XK6D4WL.js → chunk-FANGHYW5.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-ZFDGCEKO.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-BFVE3WPB.js → chunk-FLUECSUC.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-U4DLXAGD.js";
+} from "./chunk-Q4RF7EEP.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-UX2YSFKS.js";
+} from "./chunk-ZV32QRBR.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-3O4EBTR3.js → chunk-FSFI2PQL.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-HZ57E6LS.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-IH5NZMN4.js → chunk-G2YXIZZS.js}

@@ -1,9 +1,9 @@
 import {
   registerTranscript
-} from "./chunk-PN3F7LOB.js";
+} from "./chunk-AMFNJPJ5.js";
 import {
   writeDegraded
-} from "./chunk-XXSAGQAV.js";
+} from "./chunk-PPC4FZKJ.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-KP45FGHD.js → chunk-GB2U4QVF.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-CEHDCHXK.js";
+} from "./chunk-MH6SJHUE.js";
 import {
   isBridgeLocator
-} from "./chunk-2XK6D4WL.js";
+} from "./chunk-FANGHYW5.js";
 import {
   pusharyHookExecutable
-} from "./chunk-EUNYNLDU.js";
+} from "./chunk-VRYOALHQ.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-DKDZXJHZ.js";
+} from "./chunk-2UWD2WZC.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-COVPHB56.js → chunk-GOWCPJTP.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-HZ57E6LS.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -14,7 +14,7 @@ import {
   cliPackagePathSegments,
   globalUpgradeEntry,
   ownPackageRoot
-} from "./chunk-ZFDGCEKO.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-RTKPR4UA.js → chunk-HBUQ2EQD.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-ZFDGCEKO.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-N2ATGXI4.js → chunk-HIQNUBWO.js}

@@ -5,7 +5,7 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-35N53QLA.js";
+} from "./chunk-CJFVYYKM.js";
 import {
   DEFAULT_SESSION
 } from "./chunk-N6IOSZOE.js";
@@ -13,7 +13,7 @@ import {
   machineDecisionFor,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-ZFDGCEKO.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-JXLANQLV.js → chunk-HPXFPXW7.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-HZ57E6LS.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-AL4NHBZ6.js → chunk-IVF3OVR2.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-ZFDGCEKO.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-ZFDGCEKO.js → chunk-JDUWMJDP.js}

@@ -518,6 +518,106 @@ var redactSecrets = (text) => applyRedactionRules(SECRET_REDACTION_RULES, text);
 var redactSecretsFromContent = (text) => applyRedactionRules(CUT_OFF_TEXT_REDACTION_RULES, text);
 var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
 
+// ../contracts/src/shell-analysis.ts
+var SHELL_WORD_SEPARATOR = /[ \t\n]/;
+var trimShellWhitespace = (command) => command.replace(/^[ \t\n]+|[ \t\n]+$/g, "");
+var DOUBLE_QUOTE_ESCAPABLE = /* @__PURE__ */ new Set(['"', "\\", "$", "`"]);
+var SEGMENT_SEPARATORS = /* @__PURE__ */ new Set([";", "\n", "&", "|"]);
+var DOUBLED_SEPARATORS = /* @__PURE__ */ new Set(["&", "|"]);
+var UNDECOMPOSABLE = /* @__PURE__ */ new Set(["`", "<", ">"]);
+var LITERAL_IN_DOUBLE_QUOTES = /* @__PURE__ */ new Set([";", "|", "&", "<", ">", "*", "?", "[", "\\"]);
+var scanShell = (command) => {
+  const lexemes = [];
+  let quote = null;
+  for (let index = 0; index < command.length; index += 1) {
+    const char = command.charAt(index);
+    const next = command.charAt(index + 1);
+    if (char === "\\" && next && quote !== "'" && (quote === null || DOUBLE_QUOTE_ESCAPABLE.has(next))) {
+      lexemes.push({ index, text: char + next, quote, kind: "escape" });
+      index += 1;
+    } else if ((char === "'" || char === '"') && (quote === null || quote === char)) {
+      lexemes.push({ index, text: char, quote, kind: "quote" });
+      quote = quote === null ? char : null;
+    } else {
+      lexemes.push({ index, text: char, quote, kind: "text" });
+    }
+  }
+  return quote === null ? lexemes : null;
+};
+var shellCommandSegments = (command) => {
+  const lexemes = scanShell(command);
+  if (lexemes === null) return null;
+  const segments = [];
+  let start = 0;
+  let consumed = -1;
+  for (const lexeme of lexemes) {
+    const { index, text, quote, kind } = lexeme;
+    if (index <= consumed || kind !== "text" || quote === "'") continue;
+    if (text === "`" || text === "$" && command[index + 1] === "(") return null;
+    if (quote !== null) continue;
+    if (UNDECOMPOSABLE.has(text)) return null;
+    if (!SEGMENT_SEPARATORS.has(text)) continue;
+    consumed = index + (DOUBLED_SEPARATORS.has(text) && command[index + 1] === text ? 1 : 0);
+    segments.push(trimShellWhitespace(command.slice(start, index)));
+    start = consumed + 1;
+  }
+  segments.push(trimShellWhitespace(command.slice(start)));
+  const present = segments.filter((segment) => segment.length > 0);
+  return present.length > 0 ? present : null;
+};
+var shellVisibleText = (command) => {
+  const lexemes = scanShell(command);
+  if (lexemes === null) return null;
+  let visible = "";
+  for (const { text, quote, kind } of lexemes) {
+    if (kind === "escape" && quote === '"') return null;
+    const literal = kind === "text" && (quote === "'" || quote === '"' && LITERAL_IN_DOUBLE_QUOTES.has(text));
+    visible += literal ? "_".repeat(text.length) : text;
+  }
+  return visible;
+};
+var shellWordsOf = (command) => {
+  const lexemes = scanShell(command);
+  if (lexemes === null) return null;
+  const words = [];
+  let text = "";
+  let plain = true;
+  let expands = false;
+  let comment = false;
+  let started = false;
+  const finishWord = () => {
+    if (started) words.push({ text, plain, expands, comment });
+    text = "";
+    plain = true;
+    expands = false;
+    comment = false;
+    started = false;
+  };
+  for (const lexeme of lexemes) {
+    if (lexeme.kind === "quote") {
+      plain = false;
+      started = true;
+      continue;
+    }
+    if (lexeme.kind === "escape") {
+      text += lexeme.text.slice(1);
+      plain = false;
+      started = true;
+      continue;
+    }
+    if (lexeme.quote === null && SHELL_WORD_SEPARATOR.test(lexeme.text)) {
+      finishWord();
+      continue;
+    }
+    comment ||= lexeme.quote === null && !started && lexeme.text === "#";
+    expands ||= lexeme.quote !== "'" && lexeme.text === "$";
+    text += lexeme.text;
+    started = true;
+  }
+  finishWord();
+  return words;
+};
+
 // ../contracts/src/degraded.ts
 var DEGRADED_PREFIX = "[degraded]";
 var degradedPayload = (subsystem, report) => ({
@@ -857,57 +957,6 @@ var PATTERN_INTENT = {
   grant: "grant",
   restrict: "restrict"
 };
-var SHELL_ESCAPE = "\\";
-var SHELL_DOUBLE_QUOTE = '"';
-var SHELL_SUBSTITUTION_SIGIL = "$";
-var SHELL_GROUP_OPEN = "(";
-var SHELL_QUOTES = /* @__PURE__ */ new Set(["'", SHELL_DOUBLE_QUOTE]);
-var SHELL_SEGMENT_SEPARATORS = /* @__PURE__ */ new Set([";", "\n", "&", "|"]);
-var SHELL_DOUBLED_SEPARATORS = /* @__PURE__ */ new Set(["&", "|"]);
-var SHELL_UNDECOMPOSABLE = /* @__PURE__ */ new Set(["`", "<", ">"]);
-var shellCommandSegments = (command) => {
-  const segments = [];
-  let current = "";
-  let quote = null;
-  for (let index = 0; index < command.length; index += 1) {
-    const char = command[index];
-    const next = command[index + 1];
-    if (quote !== null) {
-      if (char === SHELL_ESCAPE && quote === SHELL_DOUBLE_QUOTE && next !== void 0) {
-        current += char + next;
-        index += 1;
-        continue;
-      }
-      if (quote === SHELL_DOUBLE_QUOTE && (char === "`" || char === SHELL_SUBSTITUTION_SIGIL && next === SHELL_GROUP_OPEN)) return null;
-      if (char === quote) quote = null;
-      current += char;
-      continue;
-    }
-    if (char === SHELL_ESCAPE && next !== void 0) {
-      current += char + next;
-      index += 1;
-      continue;
-    }
-    if (SHELL_QUOTES.has(char)) {
-      quote = char;
-      current += char;
-      continue;
-    }
-    if (SHELL_UNDECOMPOSABLE.has(char)) return null;
-    if (char === SHELL_SUBSTITUTION_SIGIL && next === SHELL_GROUP_OPEN) return null;
-    if (SHELL_SEGMENT_SEPARATORS.has(char)) {
-      if (next === char && SHELL_DOUBLED_SEPARATORS.has(char)) index += 1;
-      segments.push(current);
-      current = "";
-      continue;
-    }
-    current += char;
-  }
-  if (quote !== null) return null;
-  segments.push(current);
-  const present = segments.map((segment) => segment.trim()).filter((segment) => segment.length > 0);
-  return present.length > 0 ? present : null;
-};
 var everySegmentMatches = (command, matches) => {
   const segments = shellCommandSegments(command);
   return segments !== null && segments.every(matches);
@@ -1147,40 +1196,8 @@ var isTrustedExecutable = (first) => {
   if (first.includes("..")) return false;
   return TRUSTED_EXE_PREFIXES.some((prefix) => first.startsWith(prefix));
 };
-var tokenizeShellCommand = (command) => {
-  const tokens = [];
-  let current = "";
-  let quote = null;
-  let started = false;
-  for (const ch of command) {
-    if (quote) {
-      if (ch === quote) quote = null;
-      else current += ch;
-      started = true;
-      continue;
-    }
-    if (ch === '"' || ch === "'") {
-      quote = ch;
-      started = true;
-      continue;
-    }
-    if (ch === " " || ch === "	") {
-      if (started) {
-        tokens.push(current);
-        current = "";
-        started = false;
-      }
-      continue;
-    }
-    current += ch;
-    started = true;
-  }
-  if (quote) return null;
-  if (started) tokens.push(current);
-  return tokens;
-};
 var isSafeSimpleCommand = (segment) => {
-  const tokens = tokenizeShellCommand(segment.trim());
+  const tokens = shellWordsOf(segment)?.map((word) => word.text);
   if (!tokens || tokens.length === 0) return false;
   const first = tokens[0];
   if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(first) || first.includes("$")) return false;
@@ -1212,32 +1229,8 @@ var DATE_UTC_FLAG = "-u";
 var isFlagToken = (token) => token.startsWith("-");
 var isPrintOnlySed = (args) => args[0] === SED_QUIET_FLAG && SED_PRINT_ONLY_SCRIPT.test(args[1] ?? "") && !args.slice(2).some(isFlagToken);
 var isReadOnlyDate = (args) => args.every((arg) => arg.startsWith(DATE_FORMAT_PREFIX) || arg === DATE_UTC_FLAG);
-var SINGLE_QUOTE = "'";
-var QUOTED_LITERAL = "_";
-var LITERAL_IN_DOUBLE_QUOTES = /* @__PURE__ */ new Set([";", "|", "&", "<", ">", "*", "?", "[", SHELL_ESCAPE]);
 var READ_ONLY_SEGMENT_SEPARATOR = /&&|\|\||[;|]/g;
 var PIPELINE_CHAIN_SEPARATOR = /&&|\|\||;/g;
-var shellVisibleText = (command) => {
-  let visible = "";
-  let quote = null;
-  for (let index = 0; index < command.length; index += 1) {
-    const char = command[index];
-    if (quote === SINGLE_QUOTE) {
-      quote = char === SINGLE_QUOTE ? null : quote;
-      visible += quote === null ? char : QUOTED_LITERAL;
-      continue;
-    }
-    if (quote === SHELL_DOUBLE_QUOTE) {
-      if (char === SHELL_ESCAPE && DOUBLE_QUOTE_ESCAPABLE.has(command[index + 1] ?? "")) return null;
-      quote = char === SHELL_DOUBLE_QUOTE ? null : quote;
-      visible += quote !== null && LITERAL_IN_DOUBLE_QUOTES.has(char) ? QUOTED_LITERAL : char;
-      continue;
-    }
-    if (SHELL_QUOTES.has(char)) quote = char;
-    visible += char;
-  }
-  return quote === null ? visible : null;
-};
 var EXPANSION_THAT_CAN_BECOME_A_FLAG = /\$|(?:^|\s)[*?[]/;
 var SHELL_QUOTE_CHARACTERS = /['"]/g;
 var INSPECTED_ARGUMENT_COMMANDS = /* @__PURE__ */ new Set(["git", "find", "sed", "date"]);
@@ -1257,7 +1250,7 @@ var segmentsSplitWhereVisible = (command, visible, separators) => {
   return segments;
 };
 var isSafeReadOnlyCommand = (command) => {
-  const trimmed = command.trim();
+  const trimmed = trimShellWhitespace(command);
   if (!trimmed || trimmed.length > 2e3) return false;
   if (/[\n\r]/.test(trimmed)) return false;
   const visible = shellVisibleText(trimmed);
@@ -1267,7 +1260,7 @@ var isSafeReadOnlyCommand = (command) => {
   const visibleWithoutRedirection = blankedSafeRedirections(visible);
   if (/[<>]/.test(visibleWithoutRedirection)) return false;
   if (visibleWithoutRedirection.replace(/&&/g, "  ").includes("&")) return false;
-  return segmentsSplitWhereVisible(blankedSafeRedirections(trimmed), visibleWithoutRedirection, READ_ONLY_SEGMENT_SEPARATOR).every((segment) => segment.trim().length > 0 && isSafeSimpleCommand(segment));
+  return segmentsSplitWhereVisible(blankedSafeRedirections(trimmed), visibleWithoutRedirection, READ_ONLY_SEGMENT_SEPARATOR).every((segment) => trimShellWhitespace(segment).length > 0 && isSafeSimpleCommand(segment));
 };
 var isAutoApprove = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "approve";
 var isAutoDeny = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "deny";
@@ -1481,67 +1474,9 @@ var SHELL_RESERVED_WORDS = /* @__PURE__ */ new Set([
 var HARMLESS_GLOBAL_FLAGS = /* @__PURE__ */ new Set(["--no-pager", "--version", "-v", "-V", "--help", "-h"]);
 var END_OF_OPTIONS = "--";
 var SUBCOMMAND_DEPTH = 3;
-var SHELL_COMMENT_MARK = "#";
 var SHELL_LINE_CONTINUATION = /\\\n/g;
-var SHELL_WORD_BREAK = /\s/;
-var DOUBLE_QUOTE_ESCAPABLE = /* @__PURE__ */ new Set([SHELL_DOUBLE_QUOTE, SHELL_ESCAPE, SHELL_SUBSTITUTION_SIGIL, "`"]);
-var shellWordsOf = (segment) => {
-  const words = [];
-  let text = "";
-  let plain = true;
-  let expands = false;
-  let comment = false;
-  let started = false;
-  let quote = null;
-  const finishWord = () => {
-    if (started) words.push({ text, plain, expands, comment });
-    text = "";
-    plain = true;
-    expands = false;
-    comment = false;
-    started = false;
-  };
-  for (let index = 0; index < segment.length; index += 1) {
-    const char = segment[index];
-    const next = segment[index + 1];
-    if (quote === "'") {
-      if (char === quote) quote = null;
-      else text += char;
-      continue;
-    }
-    if (char === SHELL_ESCAPE && next !== void 0 && (quote === null || DOUBLE_QUOTE_ESCAPABLE.has(next))) {
-      text += next;
-      plain = false;
-      started = true;
-      index += 1;
-      continue;
-    }
-    if (quote === SHELL_DOUBLE_QUOTE) {
-      if (char === quote) quote = null;
-      else text += char;
-      expands ||= char === SHELL_SUBSTITUTION_SIGIL;
-      continue;
-    }
-    if (SHELL_QUOTES.has(char)) {
-      quote = char;
-      plain = false;
-      started = true;
-      continue;
-    }
-    if (SHELL_WORD_BREAK.test(char)) {
-      finishWord();
-      continue;
-    }
-    comment ||= !started && char === SHELL_COMMENT_MARK;
-    expands ||= char === SHELL_SUBSTITUTION_SIGIL;
-    text += char;
-    started = true;
-  }
-  finishWord();
-  return words;
-};
 var invocationOf = (segment) => {
-  const [program, ...args] = shellWordsOf(segment);
+  const [program, ...args] = shellWordsOf(segment) ?? [];
   return { program, args };
 };
 var argsAfterHarmlessGlobalFlags = (args) => {

package/dist/{chunk-ZSOFZDLY.js → chunk-JM2MCYRZ.js}

@@ -1,17 +1,17 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-SFKU5DXZ.js";
+} from "./chunk-AUS3LY4N.js";
 import {
   openCodeConfigDirFrom
-} from "./chunk-AL4NHBZ6.js";
+} from "./chunk-IVF3OVR2.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-ZNUNWWCN.js";
+} from "./chunk-ZPTSEJMD.js";
 import {
   NpmMissingError,
   codexHomeFrom,
   resolvePathBinary
-} from "./chunk-HZ57E6LS.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -19,10 +19,10 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ABIW72ST.js";
+} from "./chunk-EZFE4PC3.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-ZFDGCEKO.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";