@pushary/agent-hooks 1.9.31 → 1.9.34

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 1.9.34
+
+- Live questions keep waiting when a tool poll ends; agent instructions no longer cancel them after one retry.
+- Questions preserve every point up to 8,000 characters instead of being silently cut to 500. Notification previews stay short.
+
+## 1.9.33
+
+- Session history keeps saving a conversation when the history process is stopped during that conversation's first upload. It used to make a new encryption key on restart, which the server refused, and the rest of that conversation was never saved.
+- When the server cannot take history uploads, retries wait up to 12 seconds instead of repeating every 3 seconds, and go back to every 3 seconds as soon as one is accepted.
+- A finished session with nothing to save, or one another Pushary process is already saving, stops being watched. Before, it held one of the 32 history slots for up to two days.
+
+## 1.9.32
+
+- A paused session keeps asking about destructive PowerShell and Monitor commands, just as it does for Bash.
+- SQLite bracket identifiers cannot hide a later write behind a comment marker. MySQL and MariaDB bracket syntax asks when the server's SQL mode is unknown; PostgreSQL and GoogleSQL array reads keep running.
+- SQL writes next to quoted identifiers, such as `UPDATE[users]SET[x]=2`, ask even without spaces between the tokens.
+- Commands beyond the remote API inspection limit ask for approval.
+
 ## 1.9.31
 
 - SQL sent through `psql`, `mysql` and `mariadb` is now read the way the database reads it. These used to run under an approve rule and now ask: a write after a dollar quote with a non-ASCII tag, such as `psql -c 'SELECT $é$ -- $é$; UPDATE users SET x=1'`; a write after a carriage return that ends a `--` comment; and a write inside a MySQL `/*! ... */` or MariaDB `/*M! ... */` comment, which those clients run.

package/data/SKILL.md

@@ -410,8 +410,8 @@ decision belongs in the current client (`status: "notified"`), or you passed
 otherwise `nextAction`.
 
 For backward compatibility, `nextAction` keeps its original two values. A live timeout from `ask_user` says
-`wait_for_answer`; poll once with `timeoutMs: 55000`. An unanswered poll says
-`handoffAction: cancel_then_ask_in_current_client`: cancel the phone question before asking in
+`wait_for_answer`; keep polling the same correlationId with `timeoutMs: 55000` while pending. The question stays open until answered, explicitly cancelled or expired. Only an explicit
+`handoffAction: cancel_then_ask_in_current_client` asks you to cancel the phone question before asking in
 the current chat or client. If cancellation returns `handoffAction: "stop"`, stop.
 Otherwise, if cancellation returns false, poll once for 1 second
 and honor any answer that won the race. A cancelled question says `handoffAction:
@@ -462,8 +462,7 @@ rule, so an approval you label once is an approval they never see again.
 
 Poll for the user's response to a question sent via `ask_user` with `wait: false`, or to one that timed out. Not needed when using the default blocking mode.
 
-A single call waits at most 55 seconds. Use it once after a live `ask_user`
-timeout. If it returns `answered: false`, follow `handoffAction` when present,
+A single call waits at most 55 seconds. Keep waiting with the same correlationId while pending; the poll timeout is not the question deadline. If it returns `answered: false`, follow `handoffAction` when present,
 otherwise `nextAction`: ask in the current chat or client only after cancelling a still-pending phone question. If the
 cancellation loses a race, poll once for 1 second and honor the phone answer
 instead. Only `status: "pending"` means the question is still live; cancelled,
@@ -535,8 +534,8 @@ The result tells you whether you got it right. **`hookSeen: false` means no agen
 
 `ratified` and `answered` are separate on purpose. Answered but not ratified means the user declined: ask which boundary they want, and do **not** proceed as if they had agreed. Not answered means no scope is in force.
 
-An unanswered proposal returns its `correlationId`. Poll it once; a late phone
-yes ratifies the exact stored proposal. If that poll is still pending, cancel it
+An unanswered proposal returns its `correlationId`. Keep waiting while pending; a phone
+yes ratifies the exact stored proposal. Only an explicit handoff asks you to cancel it
 before asking in the current chat whether to continue without an enforced scope.
 If cancellation returns `handoffAction: "stop"`, stop. Otherwise, if cancellation
 returns false, poll once for 1 second and honor the phone answer
@@ -567,7 +566,7 @@ attention rather than getting you answered sooner.
 
 Honor authorization already granted in this session. Ask only for a missing decision or an action outside that authorization, or when an enforced host policy requires it. A multi-step task alone does not require plan approval. Never ask again merely because the next authorized step deletes, deploys or publishes something. These skills guide the agent; supported hooks and runtime approval gates enforce policy. Do not bypass an enforced gate.
 
-Read `answered`, `status` and `handoffAction` (falling back to `nextAction`) on every response. Only `pending` is live; expired, cancelled, missing and unavailable are not new timeouts. Follow the returned handoff rather than inventing a retry loop. Before moving a live question to the current chat, cancel it. If cancellation says `stop`, stop; if it loses a race, poll once for one second and honor the winning answer. Silence is never consent. A select or input value containing “yes” is answer data, not approval of a separate action.
+Read `answered`, `status` and `handoffAction` (falling back to `nextAction`) on every response. Only `pending` is live; expired, cancelled, missing and unavailable are not new timeouts. Keep waiting with the same correlationId while pending. A poll ending does not expire the question; never cancel just because a poll returned without an answer. Before moving a live question to the current chat, cancel it. If cancellation says `stop`, stop; if it loses a race, poll once for one second and honor the winning answer. Silence is never consent. A select or input value containing “yes” is answer data, not approval of a separate action.
 
 Delivery is controlled by the user's policy: `push_first` uses presence, `push_only` requests push every time, `notify_only` leaves the decision in the current client, and `terminal_only` avoids push. Do not override the mode or duplicate a question on every surface. The runtime owns delivery, expiry and settlement; do not claim that a reply can restart an ended agent turn.
 

package/data/cowork/SKILL.md

@@ -38,11 +38,11 @@ Do not create a question just to keep the turn alive or ask for optional feedbac
 
 ## How to wait for answers
 
-Read `answered`, `status` and `handoffAction` (falling back to `nextAction`) on every response. Only `pending` is live; expired, cancelled, missing and unavailable are not new timeouts. Follow the returned handoff rather than inventing a retry loop. Before moving a live question to the current chat, cancel it. If cancellation says `stop`, stop; if it loses a race, poll once for one second and honor the winning answer. Silence is never consent. A select or input value containing “yes” is answer data, not approval of a separate action.
+Read `answered`, `status` and `handoffAction` (falling back to `nextAction`) on every response. Only `pending` is live; expired, cancelled, missing and unavailable are not new timeouts. Keep waiting with the same correlationId while pending. A poll ending does not expire the question; never cancel just because a poll returned without an answer. Before moving a live question to the current chat, cancel it. If cancellation says `stop`, stop; if it loses a race, poll once for one second and honor the winning answer. Silence is never consent. A select or input value containing “yes” is answer data, not approval of a separate action.
 
 Delivery is controlled by the user's policy: `push_first` uses presence, `push_only` requests push every time, `notify_only` leaves the decision in the current client, and `terminal_only` avoids push. Do not override the mode or duplicate a question on every surface. The runtime owns delivery, expiry and settlement; do not claim that a reply can restart an ended agent turn.
 
-- If `ask_user` times out, call `wait_for_answer` once with the same question id. If it is still pending, cancel it before asking in the current client. If cancellation returns `handoffAction: "stop"`, stop. Otherwise, if cancellation returns false, poll once for 1 second and honor the answer that won the race.
+- If a poll ends while pending, keep waiting with the same question id. Cancel only when explicitly handing off or the answer is no longer needed. If cancellation returns `handoffAction: "stop"`, stop. Otherwise, if cancellation returns false, poll once for 1 second and honor the answer that won the race.
 - On long tasks where the user might be away, prefer `send_notification` with `context.askQuestion` over a blocking `ask_user`. The user can answer from the notification page while the question remains live. Poll the returned `linkedCorrelationId` once when you need the result, then follow the returned handoff; do not promise an overnight wait or a reply after the turn ends.
 - Use `cancel_question` to retract a question that is no longer needed.
 

package/data/cursor-plugin/rules/pushary.mdc

@@ -16,7 +16,7 @@ When Pushary is connected, it is your channel for reaching the user. Any time yo
 - A name, a path, a value, or other free text. Use type "input".
 - Approval of a plan or an approach before you start. Use type "select" with the options the user is choosing between, or "confirm" to approve a single plan.
 
-`ask_user` blocks and returns `{ answered, value, nextAction, handoffAction }`. Always set `context` to one line on what you are doing, and set `agentName` to "Cursor - {project}". If `answered` is false, follow `handoffAction` when present, otherwise `nextAction`: poll once when instructed, then cancel a live phone question before asking in the current chat. Never assume approval.
+`ask_user` blocks and returns `{ answered, value, nextAction, handoffAction }`. Always set `context` to one line on what you are doing, and set `agentName` to "Cursor - {project}". If `answered` is false, follow `handoffAction` when present, otherwise `nextAction`: keep waiting with the same correlationId while pending. Cancel only for an explicit handoff or when the answer is no longer needed. Never assume approval.
 
 If the user answers in the chat before the push comes back, call `cancel_question` with the correlationId before acting. If cancellation returns `handoffAction: "stop"`, stop. Otherwise, if cancellation returns false, poll once for 1 second and honor any phone answer that won the race.
 

package/data/cursor-plugin/skills/pushary/SKILL.md

@@ -403,8 +403,8 @@ decision belongs in the current client (`status: "notified"`), or you passed
 otherwise `nextAction`.
 
 For backward compatibility, `nextAction` keeps its original two values. A live timeout from `ask_user` says
-`wait_for_answer`; poll once with `timeoutMs: 55000`. An unanswered poll says
-`handoffAction: cancel_then_ask_in_current_client`: cancel the phone question before asking in
+`wait_for_answer`; keep polling the same correlationId with `timeoutMs: 55000` while pending. The question stays open until answered, explicitly cancelled or expired. Only an explicit
+`handoffAction: cancel_then_ask_in_current_client` asks you to cancel the phone question before asking in
 the current chat or client. If cancellation returns `handoffAction: "stop"`, stop.
 Otherwise, if cancellation returns false, poll once for 1 second
 and honor any answer that won the race. A cancelled question says `handoffAction:
@@ -455,8 +455,7 @@ rule, so an approval you label once is an approval they never see again.
 
 Poll for the user's response to a question sent via `ask_user` with `wait: false`, or to one that timed out. Not needed when using the default blocking mode.
 
-A single call waits at most 55 seconds. Use it once after a live `ask_user`
-timeout. If it returns `answered: false`, follow `handoffAction` when present,
+A single call waits at most 55 seconds. Keep waiting with the same correlationId while pending; the poll timeout is not the question deadline. If it returns `answered: false`, follow `handoffAction` when present,
 otherwise `nextAction`: ask in the current chat or client only after cancelling a still-pending phone question. If the
 cancellation loses a race, poll once for 1 second and honor the phone answer
 instead. Only `status: "pending"` means the question is still live; cancelled,
@@ -528,8 +527,8 @@ The result tells you whether you got it right. **`hookSeen: false` means no agen
 
 `ratified` and `answered` are separate on purpose. Answered but not ratified means the user declined: ask which boundary they want, and do **not** proceed as if they had agreed. Not answered means no scope is in force.
 
-An unanswered proposal returns its `correlationId`. Poll it once; a late phone
-yes ratifies the exact stored proposal. If that poll is still pending, cancel it
+An unanswered proposal returns its `correlationId`. Keep waiting while pending; a phone
+yes ratifies the exact stored proposal. Only an explicit handoff asks you to cancel it
 before asking in the current chat whether to continue without an enforced scope.
 If cancellation returns `handoffAction: "stop"`, stop. Otherwise, if cancellation
 returns false, poll once for 1 second and honor the phone answer
@@ -560,7 +559,7 @@ attention rather than getting you answered sooner.
 
 Honor authorization already granted in this session. Ask only for a missing decision or an action outside that authorization, or when an enforced host policy requires it. A multi-step task alone does not require plan approval. Never ask again merely because the next authorized step deletes, deploys or publishes something. These skills guide the agent; supported hooks and runtime approval gates enforce policy. Do not bypass an enforced gate.
 
-Read `answered`, `status` and `handoffAction` (falling back to `nextAction`) on every response. Only `pending` is live; expired, cancelled, missing and unavailable are not new timeouts. Follow the returned handoff rather than inventing a retry loop. Before moving a live question to the current chat, cancel it. If cancellation says `stop`, stop; if it loses a race, poll once for one second and honor the winning answer. Silence is never consent. A select or input value containing “yes” is answer data, not approval of a separate action.
+Read `answered`, `status` and `handoffAction` (falling back to `nextAction`) on every response. Only `pending` is live; expired, cancelled, missing and unavailable are not new timeouts. Keep waiting with the same correlationId while pending. A poll ending does not expire the question; never cancel just because a poll returned without an answer. Before moving a live question to the current chat, cancel it. If cancellation says `stop`, stop; if it loses a race, poll once for one second and honor the winning answer. Silence is never consent. A select or input value containing “yes” is answer data, not approval of a separate action.
 
 Delivery is controlled by the user's policy: `push_first` uses presence, `push_only` requests push every time, `notify_only` leaves the decision in the current client, and `terminal_only` avoids push. Do not override the mode or duplicate a question on every surface. The runtime owns delivery, expiry and settlement; do not claim that a reply can restart an ended agent turn.
 

package/data/vscode-plugin/skills/pushary/SKILL.md

@@ -403,8 +403,8 @@ decision belongs in the current client (`status: "notified"`), or you passed
 otherwise `nextAction`.
 
 For backward compatibility, `nextAction` keeps its original two values. A live timeout from `ask_user` says
-`wait_for_answer`; poll once with `timeoutMs: 55000`. An unanswered poll says
-`handoffAction: cancel_then_ask_in_current_client`: cancel the phone question before asking in
+`wait_for_answer`; keep polling the same correlationId with `timeoutMs: 55000` while pending. The question stays open until answered, explicitly cancelled or expired. Only an explicit
+`handoffAction: cancel_then_ask_in_current_client` asks you to cancel the phone question before asking in
 the current chat or client. If cancellation returns `handoffAction: "stop"`, stop.
 Otherwise, if cancellation returns false, poll once for 1 second
 and honor any answer that won the race. A cancelled question says `handoffAction:
@@ -455,8 +455,7 @@ rule, so an approval you label once is an approval they never see again.
 
 Poll for the user's response to a question sent via `ask_user` with `wait: false`, or to one that timed out. Not needed when using the default blocking mode.
 
-A single call waits at most 55 seconds. Use it once after a live `ask_user`
-timeout. If it returns `answered: false`, follow `handoffAction` when present,
+A single call waits at most 55 seconds. Keep waiting with the same correlationId while pending; the poll timeout is not the question deadline. If it returns `answered: false`, follow `handoffAction` when present,
 otherwise `nextAction`: ask in the current chat or client only after cancelling a still-pending phone question. If the
 cancellation loses a race, poll once for 1 second and honor the phone answer
 instead. Only `status: "pending"` means the question is still live; cancelled,
@@ -528,8 +527,8 @@ The result tells you whether you got it right. **`hookSeen: false` means no agen
 
 `ratified` and `answered` are separate on purpose. Answered but not ratified means the user declined: ask which boundary they want, and do **not** proceed as if they had agreed. Not answered means no scope is in force.
 
-An unanswered proposal returns its `correlationId`. Poll it once; a late phone
-yes ratifies the exact stored proposal. If that poll is still pending, cancel it
+An unanswered proposal returns its `correlationId`. Keep waiting while pending; a phone
+yes ratifies the exact stored proposal. Only an explicit handoff asks you to cancel it
 before asking in the current chat whether to continue without an enforced scope.
 If cancellation returns `handoffAction: "stop"`, stop. Otherwise, if cancellation
 returns false, poll once for 1 second and honor the phone answer
@@ -560,7 +559,7 @@ attention rather than getting you answered sooner.
 
 Honor authorization already granted in this session. Ask only for a missing decision or an action outside that authorization, or when an enforced host policy requires it. A multi-step task alone does not require plan approval. Never ask again merely because the next authorized step deletes, deploys or publishes something. These skills guide the agent; supported hooks and runtime approval gates enforce policy. Do not bypass an enforced gate.
 
-Read `answered`, `status` and `handoffAction` (falling back to `nextAction`) on every response. Only `pending` is live; expired, cancelled, missing and unavailable are not new timeouts. Follow the returned handoff rather than inventing a retry loop. Before moving a live question to the current chat, cancel it. If cancellation says `stop`, stop; if it loses a race, poll once for one second and honor the winning answer. Silence is never consent. A select or input value containing “yes” is answer data, not approval of a separate action.
+Read `answered`, `status` and `handoffAction` (falling back to `nextAction`) on every response. Only `pending` is live; expired, cancelled, missing and unavailable are not new timeouts. Keep waiting with the same correlationId while pending. A poll ending does not expire the question; never cancel just because a poll returned without an answer. Before moving a live question to the current chat, cancel it. If cancellation says `stop`, stop; if it loses a race, poll once for one second and honor the winning answer. Silence is never consent. A select or input value containing “yes” is answer data, not approval of a separate action.
 
 Delivery is controlled by the user's policy: `push_first` uses presence, `push_only` requests push every time, `notify_only` leaves the decision in the current client, and `terminal_only` avoids push. Do not override the mode or duplicate a question on every surface. The runtime owns delivery, expiry and settlement; do not claim that a reply can restart an ended agent turn.
 

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-75UCMLT5.js";
+} from "../chunk-WPSI4246.js";
 import {
   readHookInput
-} from "../chunk-ALSIMOFS.js";
-import "../chunk-GSBOLJZ4.js";
+} from "../chunk-B5RLJ6QD.js";
+import "../chunk-CPYOJRDN.js";
 import "../chunk-DWQYCOPI.js";
-import "../chunk-VFNYTVTJ.js";
-import "../chunk-7447DYNW.js";
-import "../chunk-EPVY3JU3.js";
-import "../chunk-MRR4NQ3H.js";
+import "../chunk-FPYBX36E.js";
+import "../chunk-CK3W7Q5S.js";
+import "../chunk-4PIAOJAW.js";
+import "../chunk-SMSX4TCC.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-SAHD5DYW.js";
-import "../chunk-FXJ5SEQT.js";
-import "../chunk-OS6AE2MR.js";
-import "../chunk-35RJKPIC.js";
-import "../chunk-IDGESFKZ.js";
+import "../chunk-7S7H7V5V.js";
+import "../chunk-6OGDGQTT.js";
+import "../chunk-QJ3ENGBT.js";
+import "../chunk-57FFQR46.js";
+import "../chunk-36ZCFJUI.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-IKJJB4QG.js";
-import "../chunk-X427XA76.js";
-import "../chunk-4JOWKPUF.js";
-import "../chunk-464FX6W5.js";
+import "../chunk-DCBSD22V.js";
+import "../chunk-SMRMWDFE.js";
+import "../chunk-DQKEGNTI.js";
+import "../chunk-OZMGO4WF.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-FEICGRNI.js";
-import "../chunk-SYUHM6V3.js";
-import "../chunk-4WGKAGIU.js";
-import "../chunk-NTWTU6FA.js";
+import "../chunk-H52HBSOD.js";
+import "../chunk-7IVV4LLF.js";
+import "../chunk-22YSHBTI.js";
+import "../chunk-ULJFIF5N.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-KBRKQMCI.js";
-import "../chunk-SRRJLA24.js";
+import "../chunk-NMQLY4PE.js";
+import "../chunk-UPRNSD2T.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-5EX2SD5N.js";
-import "../chunk-2ROXUEZV.js";
-import "../chunk-TDLEFGAM.js";
+import "../chunk-3LS3GFJW.js";
+import "../chunk-45OXG3VR.js";
+import "../chunk-7FQL5NWJ.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,39 +5,39 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-75UCMLT5.js";
+} from "../chunk-WPSI4246.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-CJCVPCOB.js";
+} from "../chunk-A5FFSXZE.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-IDGESFKZ.js";
+} from "../chunk-36ZCFJUI.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-IKJJB4QG.js";
+import "../chunk-DCBSD22V.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-KBRKQMCI.js";
+import "../chunk-NMQLY4PE.js";
 import {
   claudeSettings
-} from "../chunk-SRRJLA24.js";
+} from "../chunk-UPRNSD2T.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-AQFEP65J.js";
-import "../chunk-5EX2SD5N.js";
-import "../chunk-2ROXUEZV.js";
+import "../chunk-3LS3GFJW.js";
+import "../chunk-45OXG3VR.js";
 import {
   isRecord
-} from "../chunk-TDLEFGAM.js";
+} from "../chunk-7FQL5NWJ.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,39 +8,39 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-D3TVRNZC.js";
+} from "../chunk-E2OZZZKP.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-MG523AVN.js";
+} from "../chunk-NKAMF2YJ.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-GSBOLJZ4.js";
+} from "../chunk-CPYOJRDN.js";
 import "../chunk-DWQYCOPI.js";
 import {
   ensureDaemonRunning
-} from "../chunk-VFNYTVTJ.js";
+} from "../chunk-FPYBX36E.js";
 import {
   encryptRecord
-} from "../chunk-7447DYNW.js";
-import "../chunk-EPVY3JU3.js";
+} from "../chunk-CK3W7Q5S.js";
+import "../chunk-4PIAOJAW.js";
 import {
   transcriptsEnabled
-} from "../chunk-MRR4NQ3H.js";
+} from "../chunk-SMSX4TCC.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-FXJ5SEQT.js";
-import "../chunk-OS6AE2MR.js";
-import "../chunk-35RJKPIC.js";
-import "../chunk-IDGESFKZ.js";
+import "../chunk-6OGDGQTT.js";
+import "../chunk-QJ3ENGBT.js";
+import "../chunk-57FFQR46.js";
+import "../chunk-36ZCFJUI.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-IKJJB4QG.js";
+import "../chunk-DCBSD22V.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -58,8 +58,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-X427XA76.js";
-import "../chunk-4JOWKPUF.js";
+} from "../chunk-SMRMWDFE.js";
+import "../chunk-DQKEGNTI.js";
 import {
   askUser,
   cancelQuestion,
@@ -70,28 +70,28 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-464FX6W5.js";
+} from "../chunk-OZMGO4WF.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-FEICGRNI.js";
-import "../chunk-SYUHM6V3.js";
-import "../chunk-4WGKAGIU.js";
+} from "../chunk-H52HBSOD.js";
+import "../chunk-7IVV4LLF.js";
+import "../chunk-22YSHBTI.js";
 import {
   getMachineId
-} from "../chunk-NTWTU6FA.js";
+} from "../chunk-ULJFIF5N.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-KBRKQMCI.js";
-import "../chunk-SRRJLA24.js";
+import "../chunk-NMQLY4PE.js";
+import "../chunk-UPRNSD2T.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-5EX2SD5N.js";
+} from "../chunk-3LS3GFJW.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-2ROXUEZV.js";
+} from "../chunk-45OXG3VR.js";
 import {
   DECISION_STOP_REASON,
   HAND_BACK_WITHOUT_A_PROMPT,
@@ -101,7 +101,7 @@ import {
   redactSecretsFromContent,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-TDLEFGAM.js";
+} from "../chunk-7FQL5NWJ.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -9,12 +9,12 @@ import {
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-SQIZGUAN.js";
+} from "../chunk-U7CN5HG2.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-QCOE42GO.js";
+} from "../chunk-GC3SUMYD.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -23,25 +23,25 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-7S4Z36H7.js";
+} from "../chunk-IRU7DKJW.js";
 import {
   planFxRemoval,
   removeInstructionBlock
-} from "../chunk-X5HK4XUN.js";
-import "../chunk-5FNE6ZVV.js";
+} from "../chunk-EJWSE7S7.js";
+import "../chunk-UDECNZYI.js";
 import {
   disableDaemonService
-} from "../chunk-VFNYTVTJ.js";
+} from "../chunk-FPYBX36E.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-77J4RVB2.js";
+import "../chunk-PEEJP4HN.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-QGCEQGH6.js";
-import "../chunk-N4LLBUU2.js";
+} from "../chunk-EGTRIM74.js";
+import "../chunk-FDNMQEU6.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -53,14 +53,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-OULHOX5C.js";
+} from "../chunk-WFPXKCN4.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-CJCVPCOB.js";
+} from "../chunk-A5FFSXZE.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -73,7 +73,7 @@ import {
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-SAHD5DYW.js";
+} from "../chunk-7S7H7V5V.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -81,12 +81,12 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-FXJ5SEQT.js";
+} from "../chunk-6OGDGQTT.js";
 import {
   removeGeminiSettings
-} from "../chunk-OS6AE2MR.js";
-import "../chunk-35RJKPIC.js";
-import "../chunk-IDGESFKZ.js";
+} from "../chunk-QJ3ENGBT.js";
+import "../chunk-57FFQR46.js";
+import "../chunk-36ZCFJUI.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -96,20 +96,20 @@ import {
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-IKJJB4QG.js";
-import "../chunk-X427XA76.js";
-import "../chunk-4JOWKPUF.js";
-import "../chunk-464FX6W5.js";
+} from "../chunk-DCBSD22V.js";
+import "../chunk-SMRMWDFE.js";
+import "../chunk-DQKEGNTI.js";
+import "../chunk-OZMGO4WF.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-FEICGRNI.js";
-import "../chunk-SYUHM6V3.js";
-import "../chunk-4WGKAGIU.js";
-import "../chunk-NTWTU6FA.js";
+import "../chunk-H52HBSOD.js";
+import "../chunk-7IVV4LLF.js";
+import "../chunk-22YSHBTI.js";
+import "../chunk-ULJFIF5N.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-KBRKQMCI.js";
+import "../chunk-NMQLY4PE.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -146,14 +146,14 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-SRRJLA24.js";
+} from "../chunk-UPRNSD2T.js";
 import "../chunk-AQFEP65J.js";
 import {
   getBaseUrl
-} from "../chunk-5EX2SD5N.js";
+} from "../chunk-3LS3GFJW.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-2ROXUEZV.js";
+} from "../chunk-45OXG3VR.js";
 import {
   CLI_PACKAGE_NAMES,
   HOOK_COMPATIBLE_PROFILES,
@@ -165,7 +165,7 @@ import {
   globalRootFor,
   isValidApiKey,
   redactSecrets
-} from "../chunk-TDLEFGAM.js";
+} from "../chunk-7FQL5NWJ.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -5,10 +5,10 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-H2PQXK26.js";
+} from "../chunk-HQKYWUBF.js";
 import {
   resolveProviderBinary
-} from "../chunk-AXANUGOV.js";
+} from "../chunk-4TFD3WAA.js";
 import "../chunk-RIVNNBEK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
@@ -16,50 +16,50 @@ import {
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-D3TVRNZC.js";
-import "../chunk-7447DYNW.js";
-import "../chunk-EPVY3JU3.js";
+} from "../chunk-E2OZZZKP.js";
+import "../chunk-CK3W7Q5S.js";
+import "../chunk-4PIAOJAW.js";
 import {
   transcriptsEnabled
-} from "../chunk-MRR4NQ3H.js";
+} from "../chunk-SMSX4TCC.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-IKJJB4QG.js";
+import "../chunk-DCBSD22V.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "../chunk-464FX6W5.js";
+} from "../chunk-OZMGO4WF.js";
 import "../chunk-POFBE6ZY.js";
 import {
   callMcpTool
-} from "../chunk-FEICGRNI.js";
-import "../chunk-SYUHM6V3.js";
-import "../chunk-4WGKAGIU.js";
+} from "../chunk-H52HBSOD.js";
+import "../chunk-7IVV4LLF.js";
+import "../chunk-22YSHBTI.js";
 import {
   getMachineId
-} from "../chunk-NTWTU6FA.js";
+} from "../chunk-ULJFIF5N.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-KBRKQMCI.js";
-import "../chunk-SRRJLA24.js";
+import "../chunk-NMQLY4PE.js";
+import "../chunk-UPRNSD2T.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-5EX2SD5N.js";
-import "../chunk-2ROXUEZV.js";
+} from "../chunk-3LS3GFJW.js";
+import "../chunk-45OXG3VR.js";
 import {
   elicitationContent,
   parseAgentQuestion,
   parseAgentQuestionAnswers,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-TDLEFGAM.js";
+} from "../chunk-7FQL5NWJ.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";