@pushary/agent-hooks 1.9.27 → 1.9.29

package/dist/{chunk-PQAA37YV.js → chunk-C2ZIVQ6W.js}

@@ -3,27 +3,27 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-NK2URK5A.js";
+} from "./chunk-M2L4EHYW.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-TYPQUHIS.js";
+} from "./chunk-CJQEJWLU.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-4LIOV4YP.js";
+} from "./chunk-GMVZYB3W.js";
 import {
   getMachineId
-} from "./chunk-U4Q3AKLU.js";
+} from "./chunk-YFEHKEGQ.js";
 import {
   getBaseUrl
-} from "./chunk-XTTMUQ4Z.js";
+} from "./chunk-TXKAPRIA.js";
 import {
   getPackageVersion
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/machines.ts
 import { hostname } from "os";

package/dist/{chunk-YTTPPJZW.js → chunk-CBOHZ6NY.js}

@@ -13,7 +13,7 @@ import {
   isReleaseVersion,
   ownPackageName,
   withHookHoldBudget
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/setup/paths.ts
 import { homedir as homedir2 } from "os";
@@ -395,9 +395,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-FKQPJL5P.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-2SQCRMDL.js");
-    const { autoUpdateLock: autoUpdateLock2 } = await import("./paths-TU47TCRS.js");
+    const { withUpgradeLock } = await import("./global-upgrade-ZPULZXOY.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-IDAAFSH2.js");
+    const { autoUpdateLock: autoUpdateLock2 } = await import("./paths-Y7ZWWCFK.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;

package/dist/{chunk-6CBKIF3S.js → chunk-CCI2UBYR.js}

@@ -1,13 +1,13 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-5SKHXKIF.js";
+} from "./chunk-BP3WMLXJ.js";
 import {
   codexHomeFrom,
   resolvePathBinary
-} from "./chunk-YTTPPJZW.js";
+} from "./chunk-CBOHZ6NY.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-TYPQUHIS.js → chunk-CJQEJWLU.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-4LIOV4YP.js";
+} from "./chunk-GMVZYB3W.js";
 import {
   getMachineId
-} from "./chunk-U4Q3AKLU.js";
+} from "./chunk-YFEHKEGQ.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-YTTPPJZW.js";
+} from "./chunk-CBOHZ6NY.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,7 +20,7 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "./chunk-XTTMUQ4Z.js";
+} from "./chunk-TXKAPRIA.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
@@ -28,7 +28,7 @@ import {
   globalPackageFolder,
   globalRootFor,
   isRecord
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-LUJAURFP.js → chunk-CPZZTS4I.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-XESMYZLU.js → chunk-DQGM57ZW.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-YTTPPJZW.js";
+} from "./chunk-CBOHZ6NY.js";
 import {
   writeJsonAtomic
 } from "./chunk-AQFEP65J.js";

package/dist/{chunk-H2ZHGK4F.js → chunk-DUVHHQEL.js}

@@ -1,9 +1,9 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-GORB726L.js";
+} from "./chunk-4DTKE3AS.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-Z5AAPX3O.js";
+} from "./chunk-QOMUEL44.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-V6HQFOBS.js → chunk-EO2GYHWH.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-MRMIGVUI.js";
+} from "./chunk-WJUYWTNT.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-Z5AAPX3O.js";
+} from "./chunk-QOMUEL44.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-HFGTWPAD.js → chunk-ETLVZHRG.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-4LIOV4YP.js";
+} from "./chunk-GMVZYB3W.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-Z5AAPX3O.js";
+} from "./chunk-QOMUEL44.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-DY6AKR4W.js → chunk-G4X3Z3YS.js}

@@ -14,19 +14,19 @@ import {
 } from "./chunk-FO3MDD26.js";
 import {
   callMcpTool
-} from "./chunk-ZWDXBLEZ.js";
+} from "./chunk-GVIPEBEL.js";
 import {
   reportedInstallSource
-} from "./chunk-UWEDDQHU.js";
+} from "./chunk-S3DP6DCZ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-Z5AAPX3O.js";
+} from "./chunk-QOMUEL44.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS,
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-4LIOV4YP.js → chunk-GMVZYB3W.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-UWEDDQHU.js";
+} from "./chunk-S3DP6DCZ.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,11 +9,11 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   configFilePath
-} from "./chunk-XTTMUQ4Z.js";
+} from "./chunk-TXKAPRIA.js";
 import {
   API_KEY_PREFIX_PATTERN,
   isRecord
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-ZWDXBLEZ.js → chunk-GVIPEBEL.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-MSKJRRHY.js";
+} from "./chunk-TILXDMUR.js";
 import {
   installNetworkDefaults
-} from "./chunk-W4LNR7LP.js";
+} from "./chunk-35CMXPES.js";
 import {
   getBaseUrl
-} from "./chunk-XTTMUQ4Z.js";
+} from "./chunk-TXKAPRIA.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-ZQZRBPTP.js → chunk-H7QTZTIE.js}

@@ -298,6 +298,7 @@ var normalizeAgentId = (value, accepted) => {
 
 // ../contracts/src/agent-wiring.ts
 var COMPATIBLE_AGENT_TYPES = ["qwen_code", "codebuddy", "qoder", "droid", "devin", "antigravity_cli"];
+var isCompatibleAgentType = (value) => typeof value === "string" && COMPATIBLE_AGENT_TYPES.includes(value);
 var CANONICAL_PATH_KEYS = ["file_path", "path", "notebook_path"];
 var CANONICAL_COMMAND_KEYS = ["command"];
 var SHELL_TOOLS = /* @__PURE__ */ new Set(["Bash", "PowerShell"]);
@@ -315,7 +316,34 @@ var withCanonicalInputKeys = (profile, toolInput) => {
   return renamed.length === 0 ? toolInput : { ...toolInput, ...Object.fromEntries(renamed) };
 };
 var canonicalToolName = (profile, toolName) => profile.toolAliases[toolName] ?? toolName;
+var TASK_OUTPUT_TOOL = "BashOutput";
+var TASK_STOP_TOOL = "KillShell";
+var BLANK_TASK_INPUT_TOOL = "TaskInput";
+var SHELL_TOOL = "Bash";
+var typesText = (value) => typeof value === "string" && value.trim().length > 0;
+var taskIdOf = (control, toolInput) => typeof toolInput[control.taskKey] === "string" ? { task_id: toolInput[control.taskKey] } : {};
+var typedIntoTask = (control, toolInput) => {
+  const text = toolInput[control.inputKey];
+  if (typesText(text)) return { tool: SHELL_TOOL, input: { command: text }, unreadable: false };
+  return {
+    tool: BLANK_TASK_INPUT_TOOL,
+    input: { ...taskIdOf(control, toolInput), input: typeof text === "string" ? text : "" },
+    unreadable: false
+  };
+};
+var taskControlLookup = (control, toolInput) => {
+  const action = toolInput[control.actionKey];
+  if (action === control.typingAction) return typedIntoTask(control, toolInput);
+  if (action === control.stopAction) return { tool: TASK_STOP_TOOL, input: taskIdOf(control, toolInput), unreadable: false };
+  if (typeof action === "string" && control.outputActions.includes(action)) {
+    return { tool: TASK_OUTPUT_TOOL, input: taskIdOf(control, toolInput), unreadable: false };
+  }
+  return { tool: control.name, input: toolInput, unreadable: false };
+};
+var controlsTasks = (profile, toolName) => profile.taskControl?.name === toolName ? profile.taskControl : void 0;
 var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path) => {
+  const taskControl = controlsTasks(profile, toolName);
+  if (taskControl) return taskControlLookup(taskControl, toolInput);
   const tool = canonicalToolName(profile, toolName);
   if (SHELL_TOOLS.has(tool)) {
     const command = firstString(toolInput, [...profile.shellCommandKeys, ...CANONICAL_COMMAND_KEYS]);
@@ -453,7 +481,8 @@ var QWEN_CODE = {
   instructions: { file: [".qwen", "QWEN.md"], label: "Qwen Code" },
   permissionRuleFile: null,
   configDirIsShared: false,
-  soleGate: null
+  soleGate: null,
+  taskControl: null
 };
 var CODEBUDDY = {
   agentType: "codebuddy",
@@ -476,7 +505,8 @@ var CODEBUDDY = {
   instructions: { file: [".codebuddy", "CODEBUDDY.md"], label: "CodeBuddy" },
   permissionRuleFile: [".codebuddy", "settings.json"],
   configDirIsShared: false,
-  soleGate: null
+  soleGate: null,
+  taskControl: null
 };
 var QODER = {
   agentType: "qoder",
@@ -499,7 +529,8 @@ var QODER = {
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: false,
-  soleGate: null
+  soleGate: null,
+  taskControl: null
 };
 var DROID = {
   agentType: "droid",
@@ -527,7 +558,8 @@ var DROID = {
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: false,
-  soleGate: null
+  soleGate: null,
+  taskControl: null
 };
 var DEVIN = {
   agentType: "devin",
@@ -560,7 +592,17 @@ var DEVIN = {
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: false,
-  soleGate: null
+  soleGate: null,
+  taskControl: null
+};
+var ANTIGRAVITY_TASK_CONTROL = {
+  name: "manage_task",
+  actionKey: "Action",
+  taskKey: "TaskId",
+  inputKey: "Input",
+  typingAction: "send_input",
+  outputActions: ["list", "status"],
+  stopAction: "kill"
 };
 var ANTIGRAVITY_CLI = {
   agentType: "antigravity_cli",
@@ -599,8 +641,10 @@ var ANTIGRAVITY_CLI = {
     file: [".gemini", "antigravity-cli", "settings.json"],
     key: "toolPermission",
     value: "always-proceed",
-    receipt: [".pushary", "setup", "antigravity-tool-permission.json"]
-  }
+    receipt: [".pushary", "setup", "antigravity-tool-permission.json"],
+    coveredTools: [ANTIGRAVITY_TASK_CONTROL.name]
+  },
+  taskControl: ANTIGRAVITY_TASK_CONTROL
 };
 var HOOK_COMPATIBLE_PROFILES = Object.freeze([QWEN_CODE, CODEBUDDY, QODER, DROID, DEVIN, ANTIGRAVITY_CLI]);
 var hookCompatibleProfile = (agentType) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.agentType === agentType);
@@ -3452,7 +3496,10 @@ var isCodexCoordinationTool = (toolName) => CODEX_COORDINATION_TOOL_NAMES.has(to
 var isNamedByARule = (rank) => rank !== void 0 && rank !== "wildcard";
 var isSpecificArgumentRank = (rank) => rank === "exact" || rank === "prefix";
 var shellReadOnlyFloorApplies = (toolName, arg, rank) => !isSpecificArgumentRank(rank) && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg);
-var coordinationFloorApplies = (toolName, rank) => isCodexCoordinationTool(toolName) && !isNamedByARule(rank);
+var AGENT_TASK_CONTROL_TOOLS = [TASK_OUTPUT_TOOL, TASK_STOP_TOOL];
+var AGENT_TASK_CONTROL_TOOL_NAMES = new Set(AGENT_TASK_CONTROL_TOOLS);
+var readsOrStopsItsOwnWork = (toolName) => isCodexCoordinationTool(toolName) || AGENT_TASK_CONTROL_TOOL_NAMES.has(toolName);
+var coordinationFloorApplies = (toolName, rank) => readsOrStopsItsOwnWork(toolName) && !isNamedByARule(rank);
 var POSIX_SHELL_TOOLS = /* @__PURE__ */ new Set(["Bash", "Monitor"]);
 var argumentsAsWritten = (args) => ({ forms: args, hidesWhatItRuns: false });
 var namesAnArgumentOf = (pattern, toolName) => pattern.startsWith(`${toolName}(`);
@@ -3688,6 +3735,7 @@ var agentPromptsBeforeAnEdit = ({ source, event, permissionMode }) => {
 };
 var editGoesToTheAgentsPrompt = (call, input, verdict) => agentPromptsBeforeAnEdit(call) && editAsksAtTheAgentsPrompt(input, verdict);
 var SCOPE_BATCH_REASON = "This patch exceeds the agreed scope. Split it into single-file edits so each additional path can be approved.";
+var UNREADABLE_CALL_REASON = "Pushary could not read every target of this call. Use a supported command or a single-file edit.";
 var unapprovedScopeReason = (scopeReason) => `${scopeReason}. Nobody approved this path, so the change was refused.`;
 var NO_RESPONSE_REASON = "No response within timeout";
 var codexRaisesItsOwnPrompts = (permissionMode) => permissionMode !== "bypassPermissions";
@@ -3700,8 +3748,11 @@ var codexUnansweredPreToolUse = (ask) => {
   if (timeoutActionApplies(ask) && ask.timeoutAction === "deny") return CODEX_ASK_UNANSWERED;
   return codexRaisesItsOwnPrompts(ask.permissionMode) ? CODEX_ASK_PASSES : CODEX_ASK_UNANSWERED;
 };
-var CODEX_DEFER_WITHOUT_A_PROMPT = { kind: "deny", reason: NO_AGENT_PROMPT_REASON };
-var codexDeferredPreToolUse = (agentPromptFollows) => agentPromptFollows ? CODEX_ASK_PASSES : CODEX_DEFER_WITHOUT_A_PROMPT;
+var HANDED_BACK_REASON = "Handling on your machine";
+var HAND_BACK_WITHOUT_A_PROMPT = { kind: "refuse", reason: NO_AGENT_PROMPT_REASON };
+var CODEX_HAND_BACK_REASON = "You chose to handle this on your machine, so it did not run. Ask Codex to run it again while you are at your computer, or run it yourself.";
+var CODEX_PRE_TOOL_USE_HAND_BACK = { kind: "refuse", reason: CODEX_HAND_BACK_REASON };
+var codexDeferredPreToolUse = () => ({ kind: "deny", reason: CODEX_PRE_TOOL_USE_HAND_BACK.reason });
 var isScopeReason = (scopeReason) => typeof scopeReason === "string" && scopeReason.length > 0;
 var scopeBreachReasonOf = (verdict) => verdict.kind === "gate" && isScopeReason(verdict.scopeReason) ? verdict.scopeReason : void 0;
 var onlyCodexPreToolUseCanAsk = (verdict, permissionMode) => verdict.kind === "gate" && (scopeBreachReasonOf(verdict) !== void 0 || !codexRaisesItsOwnPrompts(permissionMode));
@@ -4256,8 +4307,12 @@ export {
   MANAGED_PROVIDERS,
   DISCONNECT_AGENT_IDS,
   normalizeAgentId,
+  isCompatibleAgentType,
   PHONE_ANSWERED_TOOLS,
   canonicalToolName,
+  TASK_OUTPUT_TOOL,
+  TASK_STOP_TOOL,
+  BLANK_TASK_INPUT_TOOL,
   toToolLookup,
   SOLE_GATE_UNDECIDED_REASON,
   SOLE_GATE_SUBSCRIPTION_REASON,
@@ -4354,10 +4409,13 @@ export {
   resolveGate,
   editGoesToTheAgentsPrompt,
   SCOPE_BATCH_REASON,
+  UNREADABLE_CALL_REASON,
   unapprovedScopeReason,
   NO_RESPONSE_REASON,
   codexHasNoPromptOfItsOwn,
   codexUnansweredPreToolUse,
+  HANDED_BACK_REASON,
+  HAND_BACK_WITHOUT_A_PROMPT,
   codexDeferredPreToolUse,
   scopeBreachReasonOf,
   codexCallNeedsAPerson,

package/dist/{chunk-RZNJGCPR.js → chunk-IM73P6JT.js}

@@ -1,9 +1,9 @@
 import {
   APPROVAL_SETTINGS_PATH
-} from "./chunk-O2SMA3JN.js";
+} from "./chunk-7MYGOFVX.js";
 import {
   readMacAppAgentKey
-} from "./chunk-IOTR2VQN.js";
+} from "./chunk-BKOWTW5P.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -13,13 +13,13 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-4LIOV4YP.js";
+} from "./chunk-GMVZYB3W.js";
 import {
   absoluteUrl
-} from "./chunk-MSKJRRHY.js";
+} from "./chunk-TILXDMUR.js";
 import {
   isValidApiKey
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";

package/dist/{chunk-2NQHGDK5.js → chunk-IWPEAA2J.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-XTTMUQ4Z.js";
+} from "./chunk-TXKAPRIA.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-YZ7D3P3M.js → chunk-JGDBHB6L.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-YTTPPJZW.js";
+} from "./chunk-CBOHZ6NY.js";
 import {
   readJsonSafe,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-CSXWXXFJ.js → chunk-KMTSU366.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-4LO6OQZ4.js → chunk-L7PGUSAU.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-5LLH2TBR.js → chunk-LRLF6PZ2.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-XTTMUQ4Z.js";
+} from "./chunk-TXKAPRIA.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-5ZR7XFTB.js → chunk-LSB66XQC.js}

@@ -1,16 +1,16 @@
 import {
   registerTranscript
-} from "./chunk-QMMOVPUP.js";
+} from "./chunk-2FOAQ64R.js";
 import {
   namedEvent
-} from "./chunk-TQE5VIDJ.js";
+} from "./chunk-BJMVQ6D5.js";
 import {
   writeDegraded
-} from "./chunk-AT4URLSU.js";
+} from "./chunk-Y3OZ3CT6.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];
@@ -68,33 +68,37 @@ var matches = (rule, source, event) => {
   return (ruleSource === "*" || ruleSource === source) && (ruleEvent === "*" || ruleEvent === event);
 };
 var isAdmitted = (rules, source, event) => !rules.disabled.some((rule) => matches(rule, source, event));
-var readHookInput = async (source, fallbackEvent = "", stdin = process.stdin, parseInput) => {
+var UNREADABLE = { kind: "unreadable" };
+var UNKNOWN_AGENT = { kind: "unknown_agent" };
+var readHookInputOutcome = async (source, fallbackEvent = "", stdin = process.stdin, parseInput) => {
   if (source === null) {
     writeDegraded("hook", {
       reason: "unknown_agent",
       fallback: "stood aside, so nothing is gated or reported for this call",
       event: fallbackEvent
     });
-    return null;
+    return UNKNOWN_AGENT;
   }
   let raw = "";
   for await (const chunk of stdin) raw += chunk;
-  if (!raw.trim()) return null;
+  if (!raw.trim()) return UNREADABLE;
   let parsed;
   try {
     parsed = JSON.parse(raw);
   } catch {
-    return null;
+    return UNREADABLE;
   }
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return UNREADABLE;
   const shaped = inClaudeShape(source, namedEvent(process.argv) ?? fallbackEvent, parsed);
   const input = parseInput ? parseInput(shaped) : shaped;
-  if (input === null) return null;
+  if (input === null) return UNREADABLE;
   const event = eventNameOf(input) ?? fallbackEvent;
-  if (!isAdmitted(readAdmissionRules(), source, event)) return null;
+  if (!isAdmitted(readAdmissionRules(), source, event)) return { kind: "not_admitted", input };
   if (stdin === process.stdin) registerTranscript(source, input);
-  return input;
+  return { kind: "admitted", input };
 };
+var admittedInput = (read) => read.kind === "admitted" ? read.input : null;
+var readHookInput = async (source, fallbackEvent = "", stdin = process.stdin, parseInput) => admittedInput(await readHookInputOutcome(source, fallbackEvent, stdin, parseInput));
 var inClaudeShape = (source, event, parsed) => {
   const profile = hookCompatibleProfileBySource(source);
   return profile ? claudeShapedHookInput(profile.payload, event, parsed) : parsed;
@@ -107,8 +111,12 @@ var eventNameOf = (input) => {
 function readToolHookInput(source, event, stdin = process.stdin) {
   return readHookInput(source, event, stdin, parseToolHookInput);
 }
+function readToolHookCall(source, event, stdin = process.stdin) {
+  return readHookInputOutcome(source, event, stdin, parseToolHookInput);
+}
 
 export {
   readHookInput,
-  readToolHookInput
+  readToolHookInput,
+  readToolHookCall
 };

package/dist/{chunk-NK2URK5A.js → chunk-M2L4EHYW.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-YTTPPJZW.js";
+} from "./chunk-CBOHZ6NY.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-ZQZRBPTP.js";
+} from "./chunk-H7QTZTIE.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;

package/dist/{chunk-JK42X2VL.js → chunk-NRV5PIPA.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-ZWDXBLEZ.js";
+} from "./chunk-GVIPEBEL.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-Z5AAPX3O.js";
+} from "./chunk-QOMUEL44.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";