@pushary/agent-hooks 1.9.35 → 1.9.37

package/dist/chunk-PDRKQSC6.js

@@ -0,0 +1,184 @@
+import {
+  announceSubscriptionRequired,
+  isDeferAnswer
+} from "./chunk-6VUVVVVN.js";
+import {
+  AUTO_DECISION_WINDOW_MS,
+  DEFAULT_SESSION,
+  claimThrottle,
+  deriveToolTarget,
+  permissionDeniedAction,
+  releaseThrottle,
+  reportEvent
+} from "./chunk-W73URGML.js";
+import {
+  askUser,
+  isDecisionStopped,
+  waitForQuestion
+} from "./chunk-HA22GGDG.js";
+import {
+  SubscriptionRequiredError
+} from "./chunk-Z5ORWTY3.js";
+import {
+  getMachineId
+} from "./chunk-VA36Q6BD.js";
+import {
+  machineDecisionFor,
+  parseAgentQuestionAnswers,
+  shouldDeferToNativeMode,
+  wireVerdictFor
+} from "./chunk-235LKHLW.js";
+
+// src/machine-decision-audit.ts
+import { basename } from "path";
+var reportMachineDenial = async (input, verdict, agent) => {
+  const decision = machineDecisionFor(wireVerdictFor(verdict, 0));
+  if (!decision) return;
+  const sessionKey = input.session_id || DEFAULT_SESSION;
+  const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+  const throttleKey = `machinedecision:${agent.type}:${sessionKey}:${input.tool_name}:${decision.origin}:${toolTarget ?? ""}`;
+  const throttle = claimThrottle(throttleKey, AUTO_DECISION_WINDOW_MS);
+  if (throttle === "throttled") return;
+  if (throttle === "unavailable") {
+    console.error("[Pushary] Could not access the audit throttle; reporting this denial without deduplication.");
+  }
+  try {
+    const response = await reportEvent({
+      event: "permission_denied",
+      occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
+      toolUseId: input.tool_use_id,
+      agentType: agent.type,
+      agentName: `${agent.label} - ${basename(input.cwd ?? process.cwd())}`,
+      action: permissionDeniedAction(input.tool_name),
+      sessionId: input.session_id,
+      decisionSource: "policy_auto",
+      decisionOrigin: decision.origin,
+      decisionOutcome: decision.outcome,
+      toolName: input.tool_name,
+      toolTarget
+    }, { maxAttempts: 1, timeoutMs: 800, requireOk: true, skipDrain: true });
+    if (response?.ok !== true) throw new Error("Audit delivery was not acknowledged");
+  } catch {
+    console.error("[Pushary] Could not record the machine denial. The action remains blocked; its audit delivery will be retried on the next matching denial.");
+    if (throttle === "passed") {
+      try {
+        releaseThrottle(throttleKey);
+      } catch {
+        console.error("[Pushary] Could not reset the failed audit throttle.");
+      }
+    }
+  }
+};
+
+// src/native-defer.ts
+var nativeDeferOptions = () => {
+  const respect = process.env.PUSHARY_RESPECT_PERMISSION_MODE;
+  const bypass = process.env.PUSHARY_DEFER_BYPASS;
+  return {
+    respectPermissionMode: !(respect === "0" || respect === "false"),
+    deferBypass: bypass === "1" || bypass === "true"
+  };
+};
+var defersToNativeMode = (permissionMode, toolName) => shouldDeferToNativeMode(permissionMode, toolName, nativeDeferOptions());
+
+// src/agent-question-ask.ts
+var STOPPED = { kind: "stopped" };
+var UNAVAILABLE = { kind: "unavailable" };
+var UNANSWERED = { kind: "unanswered" };
+var answeredWith = (answers) => ({ kind: "answered", answers });
+var failedAskOutcome = (error, sessionId) => outcomeOfFailedAsk(error, sessionId, UNAVAILABLE) ?? UNANSWERED;
+var withLabels = (question) => ({
+  ...question,
+  labels: question.options.map((option) => option.label)
+});
+var withoutLabels = ({ labels: _, ...question }) => question;
+var outcomeOfFailedAsk = (error, sessionId, failure) => {
+  if (!(error instanceof SubscriptionRequiredError)) return failure;
+  announceSubscriptionRequired(error.upgradeUrl, sessionId);
+  return void 0;
+};
+var storedWaitDeadline = (result, requestedDeadline) => {
+  const stored = result.waitEndsAt ? Date.parse(result.waitEndsAt) : Number.NaN;
+  return Number.isFinite(stored) ? Math.min(stored, requestedDeadline) : requestedDeadline;
+};
+var questionContext = (question, index, total, project) => {
+  const subject = question.header ? `${question.header}: your agent is asking in ${project}` : `Your agent is asking in ${project}`;
+  return total > 1 ? `${subject} (${index + 1} of ${total})` : subject;
+};
+var legacyAnswerMap = (question, value) => JSON.stringify({ [question.question]: question.multiSelect ? JSON.stringify([value]) : value });
+var askAsOneCard = async (apiKey, call, only, labelled) => {
+  let result;
+  try {
+    result = await askUser(apiKey, {
+      question: only.question,
+      type: "select",
+      options: [...only.labels],
+      questions: labelled.map(withoutLabels),
+      context: questionContext(only, 0, 1, call.projectName),
+      agentName: call.agentName,
+      sessionId: call.sessionId,
+      machineId: getMachineId(),
+      toolName: call.toolName,
+      toolUseId: call.toolUseId,
+      waitEndsAt: new Date(call.deadline).toISOString()
+    });
+  } catch (error) {
+    return failedAskOutcome(error, call.sessionId);
+  }
+  if (isDecisionStopped(result)) return STOPPED;
+  const answer = await waitForQuestion(apiKey, result, storedWaitDeadline(result, call.deadline));
+  if (isDecisionStopped(answer)) return STOPPED;
+  const values = answer.answered && answer.value ? parseAgentQuestionAnswers(labelled, answer.value) : null;
+  if (!values || isDeferAnswer(answer.value)) {
+    return UNANSWERED;
+  }
+  return answeredWith(values);
+};
+var askQuestionByQuestion = async (apiKey, call, labelled) => {
+  const answers = {};
+  for (const [index, question] of labelled.entries()) {
+    let result;
+    try {
+      result = await askUser(apiKey, {
+        question: question.question,
+        type: "select",
+        options: [...question.labels],
+        questions: [withoutLabels(question)],
+        context: questionContext(question, index, labelled.length, call.projectName),
+        agentName: call.agentName,
+        sessionId: call.sessionId,
+        machineId: getMachineId(),
+        toolName: call.toolName,
+        toolUseId: call.toolUseId ? `${call.toolUseId}#q${index}` : void 0,
+        waitEndsAt: new Date(call.deadline).toISOString()
+      });
+    } catch (error) {
+      return failedAskOutcome(error, call.sessionId);
+    }
+    if (isDecisionStopped(result)) return STOPPED;
+    const answer = await waitForQuestion(apiKey, result, storedWaitDeadline(result, call.deadline));
+    if (isDecisionStopped(answer)) return STOPPED;
+    const legacyValue = answer.answered ? answer.value?.trim() : void 0;
+    const values = legacyValue ? parseAgentQuestionAnswers([question], legacyValue) ?? parseAgentQuestionAnswers([question], legacyAnswerMap(question, legacyValue)) : null;
+    const value = values?.[question.question];
+    if (!value || isDeferAnswer(answer.value)) {
+      return UNANSWERED;
+    }
+    answers[question.question] = value;
+  }
+  return answeredWith(answers);
+};
+var askAgentQuestions = (apiKey, call, questions) => {
+  const labelled = questions.map(withLabels);
+  const [only, ...rest] = labelled;
+  if (!only) return Promise.resolve(UNANSWERED);
+  return rest.length === 0 ? askAsOneCard(apiKey, call, only, labelled) : askQuestionByQuestion(apiKey, call, labelled);
+};
+
+export {
+  reportMachineDenial,
+  defersToNativeMode,
+  outcomeOfFailedAsk,
+  storedWaitDeadline,
+  askAgentQuestions
+};

package/dist/{chunk-4PIAOJAW.js → chunk-PYWLW7PC.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-3LS3GFJW.js";
+} from "./chunk-AZXPJLKC.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-6OGDGQTT.js → chunk-Q3TCLMYC.js}

@@ -2,23 +2,23 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-QJ3ENGBT.js";
+} from "./chunk-6SYU5LVK.js";
 import {
   AGENT_CHOICES
-} from "./chunk-57FFQR46.js";
+} from "./chunk-Q52PBCN7.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-36ZCFJUI.js";
+} from "./chunk-SNI4FGOV.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-57FFQR46.js → chunk-Q52PBCN7.js}

@@ -10,7 +10,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-DQKEGNTI.js → chunk-QUKATQ66.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-UPRNSD2T.js → chunk-RFIHLLRH.js}

@@ -1,5 +1,6 @@
 import {
   CLI_PACKAGE_NAMES,
+  CODEX_QUESTION_TOOLS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   OWNERSHIP_PROBE_COMMAND,
@@ -13,7 +14,7 @@ import {
   isReleaseVersion,
   ownPackageName,
   withHookHoldBudget
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/setup/paths.ts
 import { homedir as homedir2 } from "os";
@@ -395,9 +396,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-IZCB4WIE.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-J5PIKSYV.js");
-    const { autoUpdateLock: autoUpdateLock2 } = await import("./paths-4WAA57P5.js");
+    const { withUpgradeLock } = await import("./global-upgrade-R57HCUTC.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-3I7AF7E3.js");
+    const { autoUpdateLock: autoUpdateLock2 } = await import("./paths-G2AYNZCD.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;
@@ -525,10 +526,12 @@ var codexHooksJsonIn = (home) => join2(home, "hooks.json");
 var codexHooksJson = () => codexHooksJsonIn(codexHome());
 var codexAgentsMd = () => join2(codexHome(), "AGENTS.md");
 var codexSkillDir = () => join2(codexHome(), "skills", "pushary");
+var CODEX_TOOL_CALL_MATCHER = "Bash|apply_patch|mcp__.*";
+var CODEX_PRE_TOOL_USE_MATCHER = [CODEX_TOOL_CALL_MATCHER, ...CODEX_QUESTION_TOOLS].join("|");
 var CODEX_HOOK_EVENTS = [
   { event: "PermissionRequest", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Waiting for your phone" },
-  { event: "PreToolUse", matcher: "Bash|apply_patch|mcp__.*", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Checking Pushary policy" },
-  { event: "PostToolUse", matcher: "Bash|apply_patch|mcp__.*", delivery: "telemetry", timeout: 10 },
+  { event: "PreToolUse", matcher: CODEX_PRE_TOOL_USE_MATCHER, delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Checking Pushary policy" },
+  { event: "PostToolUse", matcher: CODEX_TOOL_CALL_MATCHER, delivery: "telemetry", timeout: 10 },
   { event: "UserPromptSubmit", delivery: "telemetry", timeout: 10 },
   { event: "Stop", delivery: "rescue", timeout: HOOK_BUDGETS.codex.budgetSeconds, holds: true },
   // `clear` alongside startup and resume, matching what we already do on Claude

package/dist/{chunk-36ZCFJUI.js → chunk-SNI4FGOV.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-RFIHLLRH.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-43H2FUNN.js → chunk-SNUNAIKK.js}

@@ -14,19 +14,19 @@ import {
 } from "./chunk-FO3MDD26.js";
 import {
   callMcpTool
-} from "./chunk-H52HBSOD.js";
+} from "./chunk-Z5ORWTY3.js";
 import {
   reportedInstallSource
-} from "./chunk-NMQLY4PE.js";
+} from "./chunk-GUHM2UQO.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-45OXG3VR.js";
+} from "./chunk-WXA3CFZR.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS,
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-WMB3OCI4.js → chunk-T2NKNQPM.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   readJsonSafe,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-WPSI4246.js → chunk-UEIL72RN.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-DCBSD22V.js";
+} from "./chunk-N5WEEYV6.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-UDECNZYI.js → chunk-UK3WY3LE.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-H52HBSOD.js";
+} from "./chunk-Z5ORWTY3.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-45OXG3VR.js";
+} from "./chunk-WXA3CFZR.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-E2OZZZKP.js → chunk-UKCGR5T2.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   readJsonSafe
 } from "./chunk-AQFEP65J.js";
 import {
   isRecord
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-CPYOJRDN.js → chunk-V7Q7DQXL.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-DWQYCOPI.js";
 import {
   ensureDaemonRunning
-} from "./chunk-FPYBX36E.js";
+} from "./chunk-F3J6JFR2.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-CK3W7Q5S.js";
+} from "./chunk-MAGB6VW6.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-4PIAOJAW.js";
+} from "./chunk-PYWLW7PC.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-SMSX4TCC.js";
+} from "./chunk-HQR6DYVG.js";
 import {
   hookOwnerOf
-} from "./chunk-6OGDGQTT.js";
+} from "./chunk-Q3TCLMYC.js";
 import {
   readTranscriptPreference
-} from "./chunk-DCBSD22V.js";
+} from "./chunk-N5WEEYV6.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   writeJsonAtomic
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-3LS3GFJW.js";
+} from "./chunk-AZXPJLKC.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-ULJFIF5N.js → chunk-VA36Q6BD.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   writeFileAtomic
 } from "./chunk-AQFEP65J.js";

package/dist/{chunk-FDNMQEU6.js → chunk-VMIDUNOT.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-DCBSD22V.js";
+} from "./chunk-N5WEEYV6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-45OXG3VR.js";
+} from "./chunk-WXA3CFZR.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-SMRMWDFE.js → chunk-W73URGML.js}

@@ -2,7 +2,7 @@ import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-DQKEGNTI.js";
+} from "./chunk-QUKATQ66.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -10,28 +10,29 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-OZMGO4WF.js";
+} from "./chunk-HA22GGDG.js";
 import {
   withRetry
-} from "./chunk-H52HBSOD.js";
+} from "./chunk-Z5ORWTY3.js";
 import {
   getMachineId
-} from "./chunk-ULJFIF5N.js";
+} from "./chunk-VA36Q6BD.js";
 import {
   reportedInstallSource
-} from "./chunk-NMQLY4PE.js";
+} from "./chunk-GUHM2UQO.js";
 import {
   canonicalJson
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   writeFileAtomic
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-3LS3GFJW.js";
+} from "./chunk-AZXPJLKC.js";
 import {
   ACTION_BODY_MAX,
+  AGENTS,
   AGENT_LABELS_BY_TYPE,
   BLANK_TASK_INPUT_TOOL,
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
@@ -63,7 +64,7 @@ import {
   toToolLookup,
   truncateLine,
   unansweredRefusalReason
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";
@@ -72,8 +73,8 @@ var hookPrefixes = {
   PowerShell: (input) => `powershell: ${input.command ?? "(no command)"}`,
   Monitor: (input) => `monitor: ${input.command ?? "(no command)"}`,
   Write: (input) => `write file: ${input.file_path ?? "(unknown path)"}`,
-  Edit: (input) => `edit file: ${input.file_path ?? "(unknown path)"}`,
-  MultiEdit: (input) => `edit file: ${input.file_path ?? "(unknown path)"}`,
+  Edit: (input) => `edit file: ${editTarget(input) ?? "(unknown path)"}`,
+  MultiEdit: (input) => `edit file: ${editTarget(input) ?? "(unknown path)"}`,
   Read: (input) => `read file: ${input.file_path ?? "(unknown path)"}`,
   // Without an entry here the fallback stringifies the whole tool input, and for
   // ExitPlanMode that input IS the plan: the action line became a truncated dump of
@@ -104,13 +105,18 @@ var describeTodoProgress = (todos) => {
   if (label) return `${label.trim()} (${done}/${total} done)`;
   return `${done}/${total} tasks done`;
 };
+var editTarget = (input) => {
+  if (typeof input.file_path === "string") return input.file_path;
+  if (!Array.isArray(input.file_paths) || !input.file_paths.every((path) => typeof path === "string")) return void 0;
+  return input.file_paths.join(", ");
+};
 var eventPrefixes = {
   Bash: (input) => `ran: ${String(input.command ?? "")}`,
   PowerShell: (input) => `ran: ${String(input.command ?? "")}`,
   Monitor: (input) => `ran: ${String(input.command ?? "")}`,
   Write: (input) => `wrote: ${input.file_path ?? "unknown"}`,
-  Edit: (input) => `edited: ${input.file_path ?? "unknown"}`,
-  MultiEdit: (input) => `edited: ${input.file_path ?? "unknown"}`,
+  Edit: (input) => `edited: ${editTarget(input) ?? "unknown"}`,
+  MultiEdit: (input) => `edited: ${editTarget(input) ?? "unknown"}`,
   Read: (input) => `read: ${input.file_path ?? "unknown"}`,
   TodoWrite: (input) => describeTodoProgress(input.todos),
   Task: (input) => `ran subagent: ${describeTaskCall(input)}`,
@@ -233,11 +239,25 @@ var OPENCODE_TOOL_NAMES = {
 var PATCH_ARG_KEYS = ["command", "patch", "input"];
 var patchedFilesIn = (input) => [...new Set(PATCH_ARG_KEYS.flatMap((key) => parseApplyPatchFiles(input[key])))];
 var lookupsForInput = (profile, toolName, input, absolute) => {
-  const lookup = toToolLookup(profile, toolName, input, absolute);
+  const gateInput = profile.source === "grok" && toolName === "apply_patch" ? { patch: input.patch, diff: input.patch } : input;
+  const lookup = toToolLookup(profile, toolName, gateInput, absolute);
   if (!lookup.unreadable) return [lookup];
-  const files = patchedFilesIn(input);
+  const files = patchedFilesIn(gateInput);
   if (files.length === 0) return [lookup];
-  return files.slice(0, GATE_MAX_TOOL_INPUTS + 1).map((file) => toToolLookup(profile, toolName, { ...input, file_path: absolute(file) }, absolute));
+  return files.slice(0, GATE_MAX_TOOL_INPUTS + 1).map((file) => toToolLookup(profile, toolName, { ...gateInput, file_path: absolute(file) }, absolute));
+};
+var compatibleToolLookup = (profile, toolName, input, cwd) => {
+  const absolute = (path) => cwd && !isAbsolute(path) ? resolve(cwd, path) : path;
+  const lookups = lookupsForInput(profile, toolName, input, absolute);
+  const first = lookups[0];
+  if (!first) return { tool: canonicalToolName(profile, toolName), input, unreadable: true };
+  if (lookups.length === 1) return first;
+  const { file_path, ...content } = first.input;
+  return {
+    tool: first.tool,
+    input: { ...content, file_paths: lookups.map((lookup) => lookup.input.file_path) },
+    unreadable: lookups.length > GATE_MAX_TOOL_INPUTS || lookups.some((lookup) => lookup.unreadable)
+  };
 };
 var compatibleGateInputs = (profile, toolName, toolInputs, cwd) => {
   const absolute = (path) => cwd && !isAbsolute(path) ? resolve(cwd, path) : path;
@@ -377,6 +397,10 @@ var deriveReceiptMeta = (toolName, toolInput, toolResult, cwd) => {
       ...toolInput,
       file_path: toolInput.file_path ?? toolInput.absolute_path ?? toolInput.path
     };
+    if (canonicalTool === "Edit" && Array.isArray(canonicalInput.file_paths)) {
+      const patch = firstString(canonicalInput.diff, canonicalInput.command, canonicalInput.patch, canonicalInput.input);
+      if (patch) return { kind: "edit", target: redactSecrets(patch).slice(0, RECEIPT_TARGET_MAX_LENGTH), ok };
+    }
     if (FILE_TARGET_TOOLS.has(canonicalTool)) {
       const filePath = canonicalInput.file_path;
       if (typeof filePath !== "string" || !filePath) return void 0;
@@ -462,7 +486,8 @@ var AGENT_IDENTITIES = {
   qoder: { type: "qoder", label: AGENT_LABELS_BY_TYPE.qoder },
   droid: { type: "droid", label: AGENT_LABELS_BY_TYPE.droid },
   devin: { type: "devin", label: AGENT_LABELS_BY_TYPE.devin },
-  antigravity: { type: "antigravity_cli", label: AGENT_LABELS_BY_TYPE.antigravity_cli }
+  antigravity: { type: "antigravity_cli", label: AGENT_LABELS_BY_TYPE.antigravity_cli },
+  grok: { type: "grok", label: AGENTS.grok.label }
 };
 var TEAMMATE_IDLE_ACTION = "A teammate went idle";
 var CLAUDE_MEANINGS = {
@@ -495,6 +520,7 @@ var MEANING_BY_HOOK = {
   droid: compatibleMeanings("droid"),
   devin: compatibleMeanings("devin"),
   antigravity: compatibleMeanings("antigravity_cli"),
+  grok: { ...compatibleMeanings("grok"), PostToolUseFailure: { kind: "tool", event: "tool_complete" }, StopCancelled: { kind: "stop_failure", event: "turn_error" } },
   codex: {
     PostToolUse: { kind: "tool", event: "tool_complete" },
     UserPromptSubmit: { kind: "prompt", event: "user_prompt" },
@@ -2254,9 +2280,9 @@ export {
   UNNAMED_ACTION,
   describeToolCall,
   deriveToolTarget,
-  parseApplyPatchFiles,
   patchDeletesFiles,
   OPENCODE_TOOL_NAMES,
+  compatibleToolLookup,
   canonicalGateInputs,
   scopePathFor,
   deriveActionBody,

package/dist/{chunk-45OXG3VR.js → chunk-WXA3CFZR.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {

package/dist/{chunk-4TFD3WAA.js → chunk-YNJ372JU.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;

package/dist/{chunk-H52HBSOD.js → chunk-Z5ORWTY3.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-7IVV4LLF.js";
+} from "./chunk-DYALNCS6.js";
 import {
   installNetworkDefaults
-} from "./chunk-22YSHBTI.js";
+} from "./chunk-NWSWP3KY.js";
 import {
   getBaseUrl
-} from "./chunk-3LS3GFJW.js";
+} from "./chunk-AZXPJLKC.js";
 
 // src/retry.ts
 var isRetryable = (err) => {