@pushary/agent-hooks 1.9.25 → 1.9.27

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 1.9.27
+
+- A `Bash(...)` deny or ask rule you write in Pushary now catches the command it names however it is spelled. With a `Bash(git push:*)` deny and a rule that otherwise allows Bash, these used to run and are now refused: `git -C . push`, `git -c x=y push`, `git --no-pager push`, `git --git-dir=.git push`, `GIT_DIR=.git git push`, `FOO=1 git push`, a push behind `env`, `nohup`, `time`, `nice`, `timeout 60`, `exec`, `command`, `builtin`, `xargs`, `sudo` or `arch -arm64`, `"git" push`, `\git push`, `/usr/bin/git push`, `git  push` with two spaces, `(git push)`, `{ git push; }`, `bash -c "git push"`, `sh -c 'git push'`, `eval git push`, a heredoc fed to `bash`, `find . -exec git push \;`, a push inside `if ...; then ...; fi`, and a push chained after a command Pushary could not split before, such as `x=$(git rev-parse HEAD) && git push`, `echo hi > out.txt && git push`, `npm test && git push $(git remote)`, or Claude Code's heredoc commit followed by `&& git push 2>&1 | tail -5`. An ask rule now asks for every one of these. The same holds for any rule, such as `Bash(npm publish:*)` or `Bash(rm:*)`.
+- A command whose program Pushary cannot see, such as `$GIT push`, `"$(which git)" push`, `bash -c "$CMD"`, `eval "$(ssh-agent -s)"` or `cat script | bash`, is now refused when you have a deny rule for a Bash command, and asks when you have an ask rule. Every preset includes ask rules for destructive commands, so under the Autonomous preset such a command now asks instead of running.
+- The read-only floor no longer approves a read that your deny rule names in another spelling. With a `Bash(cat:*)` deny, `"cat" .env`, `/bin/cat .env` and `c''at .env` were approved as reads. With `Bash(cat .env)`, so were `cat ./.env`, `cat '.env'` and `cat  .env`, and with `Bash(git log:*)`, so were `git  log`, `"git" log` and `git "log"`. They are now refused, and an ask rule asks for them.
+- A rule that approves still covers only the command as written. `Bash(git commit:*)` does not start approving `env FOO=1 git commit` or `bash -c "git commit"`. A narrow ask rule that now catches a new spelling never weakens a broader deny: with a `Bash` deny and a `Bash(npm test:*)` ask, `FOO=1 npm test` is still refused.
+- The `ask` and `deny` rules in your Claude Code settings read the same spellings. With `Bash` allowed and `Bash(git push:*)` denied there, Pushary used to step aside for `git -C . push` as a call Claude Code allows. It now handles that call under your Pushary rules.
+- `pushary setup` keeps the whole pairing QR on screen for the whole wait on an 80x24 terminal. After 45 seconds the install hint, and after a minute the browser sign-in command, used to print as new lines under the code. Each one scrolled a top row of the code off the screen, so after a minute it no longer scanned. They now take turns with the minutes left on the waiting line itself. When setup's output is not a terminal, each still prints once on its own line. The install hint now says "scan the QR above" instead of "scan the code above" so it fits on one 80-column line.
+- The background service now tells Pushary whether automatic updates can run on this computer, and if not, why: turned off, CI, Windows, Linux, or not a global install. It also sends the result and the time of the last update check, with no file paths or error text. Your agent overview uses it to show a computer that is stuck on an old version.
+- The bundled Pushary skill now gives the When I'm out window as 20 seconds by default, which is what the built-in rules use. It said 10.
+
+## 1.9.26
+
+- `arch` is no longer approved as a read. On a Mac, `arch -arm64 <command>` runs the command after it, so `arch -arm64 git push --force` was approved without asking, even under a `Bash(git push:*)` deny rule. A command behind `arch` is now judged like the same command without it. Use `uname -m` to read the architecture; it is still approved as a read.
+- Codex in any mode except full access now asks your phone before a command that changes something through GitHub, Stripe, AWS or Twilio, such as `gh pr comment`, `gh api -X DELETE`, `gh api ... -f field=value`, a GraphQL mutation, `stripe refunds create`, `aws lambda invoke`, `aws ses send-email`, an upload with `aws s3 cp` or `aws s3 sync`, or `twilio api:core:messages:create`. Since 1.9.15 these ran without a question whenever Codex did not raise one of its own, which is the case when its sandbox allows network access. Reads such as `gh pr view`, `gh api repos/...`, `stripe charges list`, `aws s3 ls` and `aws ec2 describe-instances` still run without asking.
+- In the same modes Codex now also asks before a patch to a `.env` file, a credentials file or a GitHub Actions workflow. Codex applies an edit inside the project without asking, so these used to change with nothing shown. `.env.example` and other files under `.github` are not affected.
+
 ## 1.9.25
 
 - "Always allow Bash in this workspace" and "Always allow Bash in this repository" now still ask about a command with a real consequence. That is running downloaded code (`curl ... | sh`, or a file downloaded and then run), a production deploy or migration (`vercel --prod`, `RAILS_ENV=production bin/rails db:migrate`), a schema push or reset (`prisma db push`, `prisma migrate reset`, `supabase db push`, `drizzle-kit push`), a SQL client that writes or runs a script file (`psql -c "UPDATE ..."`, `psql -f`, `psql < file`, `sqlite3 app.db < schema.sql`), `redis-cli FLUSHALL`, a cluster deploy (`kubectl apply`, `helm upgrade`), publishing (`docker push`, `npm publish`), `gh pr merge`, `gh repo delete`, `aws s3 sync --delete`, restarting, stopping or unloading a service (`systemctl restart`, `launchctl unload`), throwing away uncommitted changes (`git checkout <file>`, `git restore`, `git branch -D`), and writing or deleting a `.env` or secrets file. These used to run without a question. They are recognised behind wrappers such as `sudo`, `env`, `timeout` and `xargs`, behind global flags such as `git -C dir`, inside `if` and `for` blocks, and with output redirected to a log file.

package/data/SKILL.md

@@ -562,7 +562,7 @@ If the user answers in chat before the push response arrives, call `cancel_quest
 
 | Mode | The phone | The call |
 |---|---|---|
-| **When I'm out** (`push_first`, default) | Asked only when the user is away from the terminal and the Mac | Waits for the push-first window. 10 seconds by default. |
+| **When I'm out** (`push_first`, default) | Asked only when the user is away from the terminal and the Mac | Waits for the push-first window. 20 seconds by default. |
 | **Every time** (`push_only`) | Always asked | Waits for the policy timeout. |
 | **Updates** (`notify_only`) | Told, not asked | Returns at once with `answered: false`. Decide in the current client. |
 | **Terminal** (`terminal_only`) | Nothing is sent | Returns at once with `answered: false`. |

package/data/cursor-plugin/skills/pushary/SKILL.md

@@ -555,7 +555,7 @@ If the user answers in chat before the push response arrives, call `cancel_quest
 
 | Mode | The phone | The call |
 |---|---|---|
-| **When I'm out** (`push_first`, default) | Asked only when the user is away from the terminal and the Mac | Waits for the push-first window. 10 seconds by default. |
+| **When I'm out** (`push_first`, default) | Asked only when the user is away from the terminal and the Mac | Waits for the push-first window. 20 seconds by default. |
 | **Every time** (`push_only`) | Always asked | Waits for the policy timeout. |
 | **Updates** (`notify_only`) | Told, not asked | Returns at once with `answered: false`. Decide in the current client. |
 | **Terminal** (`terminal_only`) | Nothing is sent | Returns at once with `answered: false`. |

package/data/vscode-plugin/skills/pushary/SKILL.md

@@ -555,7 +555,7 @@ If the user answers in chat before the push response arrives, call `cancel_quest
 
 | Mode | The phone | The call |
 |---|---|---|
-| **When I'm out** (`push_first`, default) | Asked only when the user is away from the terminal and the Mac | Waits for the push-first window. 10 seconds by default. |
+| **When I'm out** (`push_first`, default) | Asked only when the user is away from the terminal and the Mac | Waits for the push-first window. 20 seconds by default. |
 | **Every time** (`push_only`) | Always asked | Waits for the policy timeout. |
 | **Updates** (`notify_only`) | Told, not asked | Returns at once with `answered: false`. Decide in the current client. |
 | **Terminal** (`terminal_only`) | Nothing is sent | Returns at once with `answered: false`. |

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-UK7OY3EJ.js";
+} from "../chunk-UQTQVH5X.js";
 import {
   readHookInput
-} from "../chunk-2J2WFX7X.js";
-import "../chunk-7UZD2F4Y.js";
+} from "../chunk-5ZR7XFTB.js";
+import "../chunk-QMMOVPUP.js";
 import "../chunk-VTR4VRL2.js";
-import "../chunk-PAMW5M53.js";
-import "../chunk-FCXYDR62.js";
-import "../chunk-FLC4TVXH.js";
-import "../chunk-YD3DIFIU.js";
+import "../chunk-TYPQUHIS.js";
+import "../chunk-LY3KHTHS.js";
+import "../chunk-5LLH2TBR.js";
+import "../chunk-VWTCGKMU.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-5WTEKIAS.js";
-import "../chunk-ZLY7BHN4.js";
-import "../chunk-KM7AEGKF.js";
-import "../chunk-4KZP4YMV.js";
-import "../chunk-ZNT4ZZXJ.js";
+import "../chunk-TQE5VIDJ.js";
+import "../chunk-TWCWRHNK.js";
+import "../chunk-KN5ULH4O.js";
+import "../chunk-MRMIGVUI.js";
+import "../chunk-MTODICDT.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-GC5HJE3T.js";
-import "../chunk-AXB4ABUD.js";
-import "../chunk-A3QQWXIE.js";
-import "../chunk-NFH2H7PD.js";
+import "../chunk-4LIOV4YP.js";
+import "../chunk-VGVMBY4V.js";
+import "../chunk-CSXWXXFJ.js";
+import "../chunk-AT4URLSU.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-7V6PJFDF.js";
-import "../chunk-VEGS4NYF.js";
-import "../chunk-ZV3262AA.js";
-import "../chunk-ZLGCNHJG.js";
+import "../chunk-ZWDXBLEZ.js";
+import "../chunk-MSKJRRHY.js";
+import "../chunk-W4LNR7LP.js";
+import "../chunk-U4Q3AKLU.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-EJMXZH5E.js";
-import "../chunk-2VQZC6DW.js";
+import "../chunk-UWEDDQHU.js";
+import "../chunk-YTTPPJZW.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-5Q2QJ2AL.js";
-import "../chunk-OOKIWOMK.js";
-import "../chunk-KGSN2SOL.js";
+import "../chunk-XTTMUQ4Z.js";
+import "../chunk-Z5AAPX3O.js";
+import "../chunk-ZQZRBPTP.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,39 +5,39 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-UK7OY3EJ.js";
+} from "../chunk-UQTQVH5X.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-KP4BIZLP.js";
+} from "../chunk-JXOCD4MG.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-ZNT4ZZXJ.js";
+} from "../chunk-MTODICDT.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-GC5HJE3T.js";
+import "../chunk-4LIOV4YP.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-EJMXZH5E.js";
+import "../chunk-UWEDDQHU.js";
 import {
   claudeSettings
-} from "../chunk-2VQZC6DW.js";
+} from "../chunk-YTTPPJZW.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-AQFEP65J.js";
-import "../chunk-5Q2QJ2AL.js";
-import "../chunk-OOKIWOMK.js";
+import "../chunk-XTTMUQ4Z.js";
+import "../chunk-Z5AAPX3O.js";
 import {
   isRecord
-} from "../chunk-KGSN2SOL.js";
+} from "../chunk-ZQZRBPTP.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,39 +8,39 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-HEJMZVJI.js";
+} from "../chunk-M463H5LN.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-SGGR5MN2.js";
+} from "../chunk-LOVDPKUU.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-7UZD2F4Y.js";
+} from "../chunk-QMMOVPUP.js";
 import "../chunk-VTR4VRL2.js";
 import {
   ensureDaemonRunning
-} from "../chunk-PAMW5M53.js";
+} from "../chunk-TYPQUHIS.js";
 import {
   encryptRecord
-} from "../chunk-FCXYDR62.js";
-import "../chunk-FLC4TVXH.js";
+} from "../chunk-LY3KHTHS.js";
+import "../chunk-5LLH2TBR.js";
 import {
   transcriptsEnabled
-} from "../chunk-YD3DIFIU.js";
+} from "../chunk-VWTCGKMU.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-ZLY7BHN4.js";
-import "../chunk-KM7AEGKF.js";
-import "../chunk-4KZP4YMV.js";
-import "../chunk-ZNT4ZZXJ.js";
+import "../chunk-TWCWRHNK.js";
+import "../chunk-KN5ULH4O.js";
+import "../chunk-MRMIGVUI.js";
+import "../chunk-MTODICDT.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-GC5HJE3T.js";
+import "../chunk-4LIOV4YP.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -58,8 +58,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-AXB4ABUD.js";
-import "../chunk-A3QQWXIE.js";
+} from "../chunk-VGVMBY4V.js";
+import "../chunk-CSXWXXFJ.js";
 import {
   askUser,
   cancelQuestion,
@@ -69,28 +69,28 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-NFH2H7PD.js";
+} from "../chunk-AT4URLSU.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-7V6PJFDF.js";
-import "../chunk-VEGS4NYF.js";
-import "../chunk-ZV3262AA.js";
+} from "../chunk-ZWDXBLEZ.js";
+import "../chunk-MSKJRRHY.js";
+import "../chunk-W4LNR7LP.js";
 import {
   getMachineId
-} from "../chunk-ZLGCNHJG.js";
+} from "../chunk-U4Q3AKLU.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-EJMXZH5E.js";
-import "../chunk-2VQZC6DW.js";
+import "../chunk-UWEDDQHU.js";
+import "../chunk-YTTPPJZW.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-5Q2QJ2AL.js";
+} from "../chunk-XTTMUQ4Z.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-OOKIWOMK.js";
+} from "../chunk-Z5AAPX3O.js";
 import {
   DECISION_STOP_REASON,
   KILL_REASON,
@@ -98,7 +98,7 @@ import {
   redactSecretsFromContent,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-KGSN2SOL.js";
+} from "../chunk-ZQZRBPTP.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -9,12 +9,12 @@ import {
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-UJB6HHP4.js";
+} from "../chunk-RZNJGCPR.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-Q37XFSPO.js";
+} from "../chunk-OXOT3CGW.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -23,25 +23,25 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-LDNKGG5G.js";
+} from "../chunk-6CBKIF3S.js";
 import {
   planFxRemoval,
   removeInstructionBlock
-} from "../chunk-KZLOVLA6.js";
-import "../chunk-EJJNZYDS.js";
+} from "../chunk-BZYYTJ65.js";
+import "../chunk-JK42X2VL.js";
 import {
   disableDaemonService
-} from "../chunk-PAMW5M53.js";
+} from "../chunk-TYPQUHIS.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-RSENVGBQ.js";
+import "../chunk-O2SMA3JN.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-WEKXYS2F.js";
-import "../chunk-WKEP4JAW.js";
+} from "../chunk-IOTR2VQN.js";
+import "../chunk-HFGTWPAD.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -53,14 +53,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-FJKV64M7.js";
+} from "../chunk-5SKHXKIF.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-KP4BIZLP.js";
+} from "../chunk-JXOCD4MG.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -73,7 +73,7 @@ import {
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-5WTEKIAS.js";
+} from "../chunk-TQE5VIDJ.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -81,12 +81,12 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-ZLY7BHN4.js";
+} from "../chunk-TWCWRHNK.js";
 import {
   removeGeminiSettings
-} from "../chunk-KM7AEGKF.js";
-import "../chunk-4KZP4YMV.js";
-import "../chunk-ZNT4ZZXJ.js";
+} from "../chunk-KN5ULH4O.js";
+import "../chunk-MRMIGVUI.js";
+import "../chunk-MTODICDT.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -96,20 +96,20 @@ import {
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-GC5HJE3T.js";
-import "../chunk-AXB4ABUD.js";
-import "../chunk-A3QQWXIE.js";
-import "../chunk-NFH2H7PD.js";
+} from "../chunk-4LIOV4YP.js";
+import "../chunk-VGVMBY4V.js";
+import "../chunk-CSXWXXFJ.js";
+import "../chunk-AT4URLSU.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-7V6PJFDF.js";
-import "../chunk-VEGS4NYF.js";
-import "../chunk-ZV3262AA.js";
-import "../chunk-ZLGCNHJG.js";
+import "../chunk-ZWDXBLEZ.js";
+import "../chunk-MSKJRRHY.js";
+import "../chunk-W4LNR7LP.js";
+import "../chunk-U4Q3AKLU.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-EJMXZH5E.js";
+import "../chunk-UWEDDQHU.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -146,14 +146,14 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-2VQZC6DW.js";
+} from "../chunk-YTTPPJZW.js";
 import "../chunk-AQFEP65J.js";
 import {
   getBaseUrl
-} from "../chunk-5Q2QJ2AL.js";
+} from "../chunk-XTTMUQ4Z.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-OOKIWOMK.js";
+} from "../chunk-Z5AAPX3O.js";
 import {
   CLI_PACKAGE_NAMES,
   HOOK_COMPATIBLE_PROFILES,
@@ -165,7 +165,7 @@ import {
   globalRootFor,
   isValidApiKey,
   redactSecrets
-} from "../chunk-KGSN2SOL.js";
+} from "../chunk-ZQZRBPTP.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -5,10 +5,10 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-5ETE7F45.js";
+} from "../chunk-W4DFSUZG.js";
 import {
   resolveProviderBinary
-} from "../chunk-OWOSNGEQ.js";
+} from "../chunk-NK2URK5A.js";
 import "../chunk-RIVNNBEK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
@@ -16,50 +16,50 @@ import {
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-HEJMZVJI.js";
-import "../chunk-FCXYDR62.js";
-import "../chunk-FLC4TVXH.js";
+} from "../chunk-M463H5LN.js";
+import "../chunk-LY3KHTHS.js";
+import "../chunk-5LLH2TBR.js";
 import {
   transcriptsEnabled
-} from "../chunk-YD3DIFIU.js";
+} from "../chunk-VWTCGKMU.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-GC5HJE3T.js";
+import "../chunk-4LIOV4YP.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "../chunk-NFH2H7PD.js";
+} from "../chunk-AT4URLSU.js";
 import "../chunk-POFBE6ZY.js";
 import {
   callMcpTool
-} from "../chunk-7V6PJFDF.js";
-import "../chunk-VEGS4NYF.js";
-import "../chunk-ZV3262AA.js";
+} from "../chunk-ZWDXBLEZ.js";
+import "../chunk-MSKJRRHY.js";
+import "../chunk-W4LNR7LP.js";
 import {
   getMachineId
-} from "../chunk-ZLGCNHJG.js";
+} from "../chunk-U4Q3AKLU.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-EJMXZH5E.js";
-import "../chunk-2VQZC6DW.js";
+import "../chunk-UWEDDQHU.js";
+import "../chunk-YTTPPJZW.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-5Q2QJ2AL.js";
-import "../chunk-OOKIWOMK.js";
+} from "../chunk-XTTMUQ4Z.js";
+import "../chunk-Z5AAPX3O.js";
 import {
   elicitationContent,
   parseAgentQuestion,
   parseAgentQuestionAnswers,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-KGSN2SOL.js";
+} from "../chunk-ZQZRBPTP.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -1,40 +1,40 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-PM2WJSUH.js";
+} from "../chunk-4LO6OQZ4.js";
 import {
   defersToNativeMode,
   reportMachineDenial
-} from "../chunk-BHRMHDOO.js";
-import {
-  triggerAutoUpdate
-} from "../chunk-VFF7ZBIS.js";
+} from "../chunk-E4NITECV.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-2CUE3XXS.js";
+} from "../chunk-LUJAURFP.js";
+import {
+  triggerAutoUpdate
+} from "../chunk-WGTD4NZV.js";
 import {
   readHookInput
-} from "../chunk-2J2WFX7X.js";
+} from "../chunk-5ZR7XFTB.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-SGGR5MN2.js";
-import "../chunk-7UZD2F4Y.js";
+} from "../chunk-LOVDPKUU.js";
+import "../chunk-QMMOVPUP.js";
 import "../chunk-VTR4VRL2.js";
-import "../chunk-PAMW5M53.js";
-import "../chunk-FCXYDR62.js";
-import "../chunk-FLC4TVXH.js";
-import "../chunk-YD3DIFIU.js";
+import "../chunk-TYPQUHIS.js";
+import "../chunk-LY3KHTHS.js";
+import "../chunk-5LLH2TBR.js";
+import "../chunk-VWTCGKMU.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-5WTEKIAS.js";
-import "../chunk-ZLY7BHN4.js";
-import "../chunk-KM7AEGKF.js";
-import "../chunk-4KZP4YMV.js";
-import "../chunk-ZNT4ZZXJ.js";
+import "../chunk-TQE5VIDJ.js";
+import "../chunk-TWCWRHNK.js";
+import "../chunk-KN5ULH4O.js";
+import "../chunk-MRMIGVUI.js";
+import "../chunk-MTODICDT.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-GC5HJE3T.js";
+import "../chunk-4LIOV4YP.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -78,8 +78,8 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   userScope
-} from "../chunk-AXB4ABUD.js";
-import "../chunk-A3QQWXIE.js";
+} from "../chunk-VGVMBY4V.js";
+import "../chunk-CSXWXXFJ.js";
 import {
   askUser,
   cancelQuestion,
@@ -92,31 +92,31 @@ import {
   sendNotification,
   unavailableQuestionUnlessSubscriptionRequired,
   waitForQuestion
-} from "../chunk-NFH2H7PD.js";
+} from "../chunk-AT4URLSU.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-7V6PJFDF.js";
-import "../chunk-VEGS4NYF.js";
-import "../chunk-ZV3262AA.js";
+} from "../chunk-ZWDXBLEZ.js";
+import "../chunk-MSKJRRHY.js";
+import "../chunk-W4LNR7LP.js";
 import {
   getMachineId
-} from "../chunk-ZLGCNHJG.js";
+} from "../chunk-U4Q3AKLU.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-EJMXZH5E.js";
+import "../chunk-UWEDDQHU.js";
 import {
   canonicalJson
-} from "../chunk-2VQZC6DW.js";
+} from "../chunk-YTTPPJZW.js";
 import {
   writeFileAtomic
 } from "../chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "../chunk-5Q2QJ2AL.js";
-import "../chunk-OOKIWOMK.js";
+} from "../chunk-XTTMUQ4Z.js";
+import "../chunk-Z5AAPX3O.js";
 import {
   CODEX_RESCUE_TOOL_NAME,
   DECISION_STOP_REASON,
@@ -140,7 +140,7 @@ import {
   resolveGate,
   scopeBreachReasonOf,
   unapprovedScopeReason
-} from "../chunk-KGSN2SOL.js";
+} from "../chunk-ZQZRBPTP.js";
 
 // bin/pushary-codex-hook.ts
 import { basename } from "path";
@@ -769,7 +769,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-LFEQ5GF6.js");
+    const { repairCodexHolds } = await import("../reapply-CTJZBUJY.js");
     repairCodexHolds();
   } catch {
     return;