@pushary/agent-hooks 1.9.23 → 1.9.25

package/dist/{chunk-7RGEJOQS.js → chunk-KM7AEGKF.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-KJA6IGOZ.js";
+} from "./chunk-A3QQWXIE.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-FIYCICHC.js → chunk-KP4BIZLP.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-LEQRIJ4H.js";
+} from "./chunk-OOKIWOMK.js";
 import {
   getPackageVersion
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-YXHVMZPR.js → chunk-KZLOVLA6.js}

@@ -1,13 +1,13 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-RN5NRRHX.js";
+} from "./chunk-EJJNZYDS.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-AQ3TSQA2.js";
+} from "./chunk-GC5HJE3T.js";
 import {
   NpmMissingError,
   NpmPermissionError
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -15,7 +15,7 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LEQRIJ4H.js";
+} from "./chunk-OOKIWOMK.js";
 
 // src/instruction-file.ts
 import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";

package/dist/{chunk-AXSHPFU3.js → chunk-LDNKGG5G.js}

@@ -1,13 +1,13 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-ZGYO6OQE.js";
+} from "./chunk-FJKV64M7.js";
 import {
   codexHomeFrom,
   resolvePathBinary
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-DKBPNHAI.js → chunk-N3ACK3YA.js}

@@ -14,19 +14,19 @@ import {
 } from "./chunk-FO3MDD26.js";
 import {
   callMcpTool
-} from "./chunk-E2LGKG75.js";
+} from "./chunk-7V6PJFDF.js";
 import {
   reportedInstallSource
-} from "./chunk-6HT2TUZD.js";
+} from "./chunk-EJMXZH5E.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LEQRIJ4H.js";
+} from "./chunk-OOKIWOMK.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS,
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-4GKQDFH6.js → chunk-NFH2H7PD.js}

@@ -5,18 +5,18 @@ import {
 import {
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-E2LGKG75.js";
+} from "./chunk-7V6PJFDF.js";
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-XBETSM5T.js";
+} from "./chunk-ZV3262AA.js";
 import {
   clientReportClaims
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-OQPEHKH2.js";
+} from "./chunk-5Q2QJ2AL.js";
 import {
   ASK_AGENT_NAME_MAX,
   ASK_QUESTION_MAX,
@@ -25,7 +25,7 @@ import {
   GATE_PERMISSION_MODE_MAX_LENGTH,
   degradedLine,
   truncateLine
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/client-report-claim.ts
 import { createHash } from "crypto";

package/dist/{chunk-BY5EKA6W.js → chunk-OFHSTCXK.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-R5C3QCVT.js";
+} from "./chunk-4KZP4YMV.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LEQRIJ4H.js";
+} from "./chunk-OOKIWOMK.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-LEQRIJ4H.js → chunk-OOKIWOMK.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {
@@ -142,7 +142,7 @@ var COMMAND_OPTIONS = {
   ],
   clean: [
     ["--dry-run", "List everything it would remove and change nothing"],
-    ["--everything", "Also revoke the keys the CLI wrote (config.json and its shell profile export) and remove what the Mac app set up: quits it, then its keychain items, local state and editor extension"],
+    ["--everything", "Also revoke the key this CLI created (any other key is only removed) and remove what the Mac app set up: quits it, then its keychain items, local state and editor extension"],
     ["--yes", "Remove everything without asking"]
   ],
   transcripts: [
@@ -165,7 +165,7 @@ var COMMAND_OPTIONS = {
     ["--devices", "Also list the machines registered to this site"]
   ],
   "sign-out": [
-    ["--revoke", "Also kill the key server-side, so it stops working everywhere"],
+    ["--revoke", "Also revoke the key server-side if this CLI created it; any other key is only removed"],
     ["--json", "Emit the result as one object instead of the screen"]
   ],
   doctor: [

package/dist/{chunk-7J2AX5T6.js → chunk-OWOSNGEQ.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;

package/dist/{chunk-SSWK2WYX.js → chunk-PAMW5M53.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-AQ3TSQA2.js";
+} from "./chunk-GC5HJE3T.js";
 import {
   getMachineId
-} from "./chunk-EDN4F6GX.js";
+} from "./chunk-ZLGCNHJG.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,7 +20,7 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "./chunk-OQPEHKH2.js";
+} from "./chunk-5Q2QJ2AL.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
@@ -28,7 +28,7 @@ import {
   globalPackageFolder,
   globalRootFor,
   isRecord
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-JNKHCGHR.js → chunk-PM2WJSUH.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-JCEUDLGW.js → chunk-PPGLIWOR.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   writeJsonAtomic
 } from "./chunk-AQFEP65J.js";

package/dist/{chunk-PFB7P4F3.js → chunk-PSNF27BC.js}

@@ -3,27 +3,27 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-7J2AX5T6.js";
+} from "./chunk-OWOSNGEQ.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-SSWK2WYX.js";
+} from "./chunk-PAMW5M53.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-AQ3TSQA2.js";
+} from "./chunk-GC5HJE3T.js";
 import {
   getMachineId
-} from "./chunk-EDN4F6GX.js";
+} from "./chunk-ZLGCNHJG.js";
 import {
   getBaseUrl
-} from "./chunk-OQPEHKH2.js";
+} from "./chunk-5Q2QJ2AL.js";
 import {
   getPackageVersion
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/machines.ts
 import { hostname } from "os";

package/dist/{chunk-2AUKCSLQ.js → chunk-Q37XFSPO.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-K2EYK5RL.js";
+} from "./chunk-5WTEKIAS.js";
 import {
   pusharyHookExecutable
-} from "./chunk-A5U62Q6K.js";
+} from "./chunk-ZLY7BHN4.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   isRecord
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-S2R2U5W5.js → chunk-RSENVGBQ.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-SLBO7PHS.js";
+} from "./chunk-WKEP4JAW.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
 import {
   readKeySource
-} from "./chunk-AQ3TSQA2.js";
+} from "./chunk-GC5HJE3T.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-Z4UDB7EC.js";
+} from "./chunk-VEGS4NYF.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-OQPEHKH2.js";
+} from "./chunk-5Q2QJ2AL.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-M7DCI44L.js → chunk-SGGR5MN2.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-GYP6DLA4.js";
+} from "./chunk-AXB4ABUD.js";
 
 // src/answer.ts
 var isDeferAnswer = (value) => value === "defer";

package/dist/{chunk-NSCETODW.js → chunk-TLUSUDRU.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-OQPEHKH2.js";
+} from "./chunk-5Q2QJ2AL.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/chunk-UJB6HHP4.js

@@ -0,0 +1,166 @@
+import {
+  APPROVAL_SETTINGS_PATH
+} from "./chunk-RSENVGBQ.js";
+import {
+  readMacAppAgentKey
+} from "./chunk-WEKXYS2F.js";
+import {
+  findExportedKeyLines,
+  isAdoptedMacAppKey,
+  isCliCreatedKey,
+  keyPrefix,
+  readCliCreatedKeyPrefix,
+  readConfigFileKey,
+  readKeySource,
+  readMacAppKeyPrefix
+} from "./chunk-GC5HJE3T.js";
+import {
+  absoluteUrl
+} from "./chunk-VEGS4NYF.js";
+import {
+  isValidApiKey
+} from "./chunk-KGSN2SOL.js";
+
+// src/key-revocation.ts
+var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";
+var DEVICE_KEY_PATH = "/api/agent/device-key";
+var FULL_ACCESS_ONLY_STATUS = 403;
+var REVOKE_TIMEOUT_MS = 1e4;
+var readRevokedCount = async (response) => {
+  try {
+    const body = await response.json();
+    const revoked = typeof body === "object" && body !== null && "revoked" in body ? body.revoked : void 0;
+    return typeof revoked === "number" && Number.isInteger(revoked) && revoked >= 0 ? revoked : null;
+  } catch {
+    return null;
+  }
+};
+var revokeAgentKey = async (apiKey, baseUrl, fetchImpl) => {
+  const response = await fetchImpl(`${baseUrl}${DEVICE_KEY_PATH}`, {
+    method: "DELETE",
+    headers: { Authorization: `Bearer ${apiKey}` },
+    signal: AbortSignal.timeout(REVOKE_TIMEOUT_MS)
+  });
+  if (!response.ok) return { kind: "refused", status: response.status };
+  const revoked = await readRevokedCount(response);
+  if (revoked === null) return { kind: "unconfirmed", status: response.status };
+  return revoked > 0 ? { kind: "revoked" } : { kind: "not_accepted" };
+};
+var revokeOwnKey = async (apiKey, baseUrl, fetchImpl = fetch) => {
+  try {
+    const response = await fetchImpl(`${baseUrl}${SELF_REVOKE_PATH}`, {
+      method: "POST",
+      headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
+      signal: AbortSignal.timeout(REVOKE_TIMEOUT_MS)
+    });
+    if (response.status === 401) return { kind: "not_accepted" };
+    if (response.status === FULL_ACCESS_ONLY_STATUS) return await revokeAgentKey(apiKey, baseUrl, fetchImpl);
+    if (!response.ok) return { kind: "refused", status: response.status };
+    return { kind: "revoked" };
+  } catch (err) {
+    return { kind: "unreachable", detail: err instanceof Error ? err.message : "network error" };
+  }
+};
+var REVOKE_DETAIL = {
+  revoked: "Revoked the key on pushary.com.",
+  not_accepted: "pushary.com had already stopped accepting the key.",
+  refused: "pushary.com refused to revoke the key",
+  unconfirmed: "pushary.com did not confirm the key was revoked",
+  unreachable: "Could not reach pushary.com to revoke the key"
+};
+var describeRevokeAttempt = (attempt) => {
+  if (attempt.kind === "refused" || attempt.kind === "unconfirmed") return `${REVOKE_DETAIL[attempt.kind]} (HTTP ${attempt.status}).`;
+  if (attempt.kind === "unreachable") return `${REVOKE_DETAIL.unreachable}: ${attempt.detail}`;
+  return REVOKE_DETAIL[attempt.kind];
+};
+var keyNoLongerAccepted = (attempt) => attempt.kind === "revoked" || attempt.kind === "not_accepted";
+var keyValidityOf = (check) => {
+  switch (check.kind) {
+    case "ok":
+    case "locked":
+      return "valid";
+    case "rejected":
+    case "malformed":
+      return "invalid";
+    case "unreachable":
+      return "unknown";
+  }
+};
+
+// src/cli/held-key-revocation.ts
+var readCliHeldKeys = (profiles) => {
+  const source = readKeySource();
+  return {
+    configKey: readConfigFileKey(),
+    profileKeys: findExportedKeyLines(profiles).map((line) => line.key),
+    envKey: source.kind === "env" ? source.key : null,
+    macAppKey: readMacAppAgentKey(),
+    macAppKeyPrefix: readMacAppKeyPrefix(),
+    cliCreatedKeyPrefix: readCliCreatedKeyPrefix()
+  };
+};
+var isMacAppCurrentOrAdoptedKey = (key, keys) => key === keys.macAppKey || isAdoptedMacAppKey(key, keys.macAppKeyPrefix);
+var revocationOfStoredKey = (key, keys) => {
+  if (isMacAppCurrentOrAdoptedKey(key, keys)) return { kind: "mac_app_key", keyPrefix: keyPrefix(key) };
+  if (!isCliCreatedKey(key, keys.cliCreatedKeyPrefix)) return { kind: "no_creation_record", keyPrefix: keyPrefix(key) };
+  return { kind: "revoke", key };
+};
+var validKeys = (keys) => [...new Set(keys)].filter((key) => key !== null && isValidApiKey(key));
+var environmentOnlyKey = (keys, stored) => validKeys([keys.envKey]).filter((key) => !stored.includes(key)).map((key) => ({ kind: "environment_only", keyPrefix: keyPrefix(key) }));
+var planCliKeyRevocations = (keys) => {
+  const stored = validKeys([keys.configKey, ...keys.profileKeys]);
+  return [...stored.map((key) => revocationOfStoredKey(key, keys)), ...environmentOnlyKey(keys, stored)];
+};
+var keysToRevoke = (revocations) => revocations.flatMap((revocation) => revocation.kind === "revoke" ? [revocation.key] : []);
+var sparedKeys = (revocations) => revocations.flatMap((revocation) => revocation.kind === "revoke" ? [] : [revocation]);
+var runRevocation = async (revocation, run) => {
+  if (revocation.kind !== "revoke") return revocation;
+  if (run.dryRun) return { kind: "would_revoke", keyPrefix: keyPrefix(revocation.key) };
+  return { kind: "attempted", keyPrefix: keyPrefix(revocation.key), attempt: await revokeOwnKey(revocation.key, run.baseUrl) };
+};
+var revokeCliKeys = async (revocations, run) => {
+  const outcomes = [];
+  for (const revocation of revocations) outcomes.push(await runRevocation(revocation, run));
+  return outcomes;
+};
+var SPARED_KEY_WHY = {
+  mac_app_key: "It is the Pushary Mac app's key, and the app may still be using it.",
+  no_creation_record: "This CLI has no record of creating it, so it may be in use by the Mac app or on another machine."
+};
+var localRemovalOf = (dryRun) => dryRun ? "would be removed here" : "removed here";
+var settingsUrlOf = (baseUrl) => absoluteUrl(baseUrl, APPROVAL_SETTINGS_PATH);
+var revokeYourselfHint = (reason, baseUrl) => reason === "no_creation_record" ? `Revoke it at ${settingsUrlOf(baseUrl)} if nothing else uses it.` : null;
+var describeCliKeyRevocation = (outcome, run) => {
+  const label = `API key ${outcome.keyPrefix}`;
+  switch (outcome.kind) {
+    case "would_revoke":
+      return { tone: "skipped", line: `${label} (would revoke it on pushary.com)`, next: null };
+    case "mac_app_key":
+    case "no_creation_record":
+      return {
+        tone: "skipped",
+        line: `${label}: ${localRemovalOf(run.dryRun)}, not revoked. ${SPARED_KEY_WHY[outcome.kind]}`,
+        next: revokeYourselfHint(outcome.kind, run.baseUrl)
+      };
+    case "environment_only":
+      return { tone: "skipped", line: `${label} in PUSHARY_API_KEY (left alone: Pushary did not write it)`, next: null };
+    case "attempted":
+      return keyNoLongerAccepted(outcome.attempt) ? { tone: "done", line: `${label}: ${describeRevokeAttempt(outcome.attempt)}`, next: null } : {
+        tone: "warning",
+        line: `${label}: ${describeRevokeAttempt(outcome.attempt)}`,
+        next: `It may still be valid. Revoke it at ${settingsUrlOf(run.baseUrl)}`
+      };
+  }
+};
+
+export {
+  revokeOwnKey,
+  keyNoLongerAccepted,
+  keyValidityOf,
+  readCliHeldKeys,
+  planCliKeyRevocations,
+  keysToRevoke,
+  sparedKeys,
+  revokeCliKeys,
+  describeCliKeyRevocation
+};

package/dist/{chunk-YZPFJCFE.js → chunk-UK7OY3EJ.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-AQ3TSQA2.js";
+} from "./chunk-GC5HJE3T.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-ISAKLEKE.js → chunk-UUOC7A7M.js}

@@ -1,6 +1,6 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-RHIKMNWJ.js";
+} from "./chunk-VN5Q4KOD.js";
 import {
   detectClaudeVersion
 } from "./chunk-RIVNNBEK.js";
@@ -12,12 +12,12 @@ import {
   openCodeHookArgv,
   openCodePluginDir,
   openCodeWired
-} from "./chunk-ZGYO6OQE.js";
+} from "./chunk-FJKV64M7.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-K2EYK5RL.js";
+} from "./chunk-5WTEKIAS.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
@@ -25,7 +25,7 @@ import {
   codexWired,
   geminiWired,
   planHooks
-} from "./chunk-A5U62Q6K.js";
+} from "./chunk-ZLY7BHN4.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -36,7 +36,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-7RGEJOQS.js";
+} from "./chunk-KM7AEGKF.js";
 import {
   formatVersion
 } from "./chunk-6ICPEJY5.js";
@@ -59,7 +59,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -67,7 +67,7 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   isRecord
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-Z4UDB7EC.js → chunk-VEGS4NYF.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-XBETSM5T.js";
+} from "./chunk-ZV3262AA.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-OQPEHKH2.js";
+} from "./chunk-5Q2QJ2AL.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-USUI4P63.js → chunk-VFF7ZBIS.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -14,7 +14,7 @@ import {
   cliPackagePathSegments,
   globalUpgradeEntry,
   ownPackageRoot
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-RHIKMNWJ.js → chunk-VN5Q4KOD.js}

@@ -8,10 +8,10 @@ import {
   codexHooksJsonIn,
   isPusharyCodexCommand,
   resolvePathBinary
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   getPackageVersion
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/codex-app-server.ts
 import { existsSync, realpathSync } from "fs";