@pushary/agent-hooks 1.9.36 → 1.9.37

package/dist/{chunk-2DZBIELP.js → chunk-235LKHLW.js}

@@ -1562,41 +1562,33 @@ var DOTNET_DOWNLOAD = /\.Download(?:String|Data|File)(?:Async|TaskAsync)?\s*\(/i
 var SCRIPTBLOCK_FROM_TEXT = /\[(?:System\.Management\.Automation\.)?ScriptBlock\]::Create\s*\(/i;
 var POWERSHELL_HOSTS = /* @__PURE__ */ new Set(["powershell", "pwsh", "powershell_ise"]);
 var WINDOWS_POWERSHELL_HOST = "powershell";
-var POWERSHELL_HOST_COMMAND_SWITCHES = /* @__PURE__ */ new Set(["-c", "-command", "--command", "/c", "/command"]);
-var POWERSHELL_HOST_SWITCHES_THAT_HIDE_THE_COMMAND = /* @__PURE__ */ new Set([
-  "-f",
-  "-file",
-  "/f",
-  "/file",
-  "-e",
-  "-ec",
-  "-enc",
-  "-encodedcommand",
-  "/encodedcommand"
-]);
-var POWERSHELL_HOST_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set([
-  "-executionpolicy",
-  "-ep",
-  "-ex",
-  "-windowstyle",
-  "-w",
-  "-workingdirectory",
-  "-wd",
-  "-configurationname",
-  "-config",
-  "-inputformat",
-  "-inf",
-  "-if",
-  "-outputformat",
-  "-of",
-  "-o",
-  "-version",
-  "-v",
-  "-settingsfile",
-  "-custompipename",
-  "-psconsolefile"
+var POWERSHELL_HOST_COMMAND_PARAMETER = "command";
+var POWERSHELL_HOST_COMMAND_WITH_ARGS_PARAMETERS = /* @__PURE__ */ new Set(["commandwithargs", "cwa"]);
+var POWERSHELL_HOST_FILE_PARAMETER = "file";
+var POWERSHELL_HOST_ENCODED_PARAMETER = "encodedcommand";
+var POWERSHELL_HOST_ENCODED_ALIAS = "ec";
+var POWERSHELL_HOST_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Map([
+  ["executionpolicy", "ex"],
+  ["ep", "ep"],
+  ["windowstyle", "w"],
+  ["workingdirectory", "wo"],
+  ["wd", "wd"],
+  ["configurationname", "config"],
+  ["configurationfile", "configurationfile"],
+  ["custompipename", "cus"],
+  ["inputformat", "inp"],
+  ["if", "if"],
+  ["outputformat", "o"],
+  ["of", "of"],
+  ["version", "v"],
+  ["settingsfile", "settings"],
+  ["psconsolefile", "ps"],
+  ["token", "to"],
+  ["encodedarguments", "encodeda"],
+  ["ea", "ea"]
 ]);
-var POWERSHELL_HOST_SWITCH = /^[-/]/;
+var POWERSHELL_HOST_SWITCH = /^[-/–—―]/;
+var POWERSHELL_HOST_SWITCH_PREFIX = /^([-–—―])\1?|^\//;
 var POWERSHELL_FILE_RUNNERS = /* @__PURE__ */ new Set(["start-process", "invoke-item", "msiexec"]);
 var WINDOWS_SWITCH = /^[-/–—―]/;
 var CMD_PROGRAM = "cmd";
@@ -1752,23 +1744,33 @@ var runsADownloadedFile = (stages, judge) => {
   });
 };
 var invokedExpressionsOf = (command) => command.cmdlet === INVOKE_EXPRESSION ? positionalTextsOf(command) : [];
-var positionalHostCommandOf = (texts) => {
-  let index = 0;
-  while (index < texts.length && POWERSHELL_HOST_SWITCH.test(texts[index] ?? "")) {
-    index += POWERSHELL_HOST_OPTIONS_WITH_A_VALUE.has((texts[index] ?? "").toLowerCase()) ? 2 : 1;
+var hostOptionTakesValue = (option) => {
+  for (const [name, shortest] of POWERSHELL_HOST_OPTIONS_WITH_A_VALUE) {
+    if (option.length >= shortest.length && name.startsWith(option)) return true;
   }
-  return index < texts.length ? texts.slice(index).join(" ") : void 0;
+  return false;
 };
 var hostedPowerShellScriptOf = (command) => {
-  if (!POWERSHELL_HOSTS.has(command.name)) return void 0;
+  if (!POWERSHELL_HOSTS.has(command.name)) return { kind: "none" };
   const texts = command.args.map((arg) => arg.text);
-  const lowered = texts.map((text) => text.toLowerCase());
-  const commandSwitch = lowered.findIndex((text) => POWERSHELL_HOST_COMMAND_SWITCHES.has(text));
-  if (commandSwitch !== -1) return texts.slice(commandSwitch + 1).join(" ");
-  if (command.name !== WINDOWS_POWERSHELL_HOST || lowered.some((text) => POWERSHELL_HOST_SWITCHES_THAT_HIDE_THE_COMMAND.has(text))) {
-    return void 0;
+  for (let index = 0; index < texts.length; index += 1) {
+    const text = (texts[index] ?? "").trim();
+    if (!text) continue;
+    if (!POWERSHELL_HOST_SWITCH.test(text)) {
+      return command.name === WINDOWS_POWERSHELL_HOST ? { kind: "script", script: texts.slice(index).join(" ") } : { kind: "none" };
+    }
+    const option = text.toLowerCase().replace(POWERSHELL_HOST_SWITCH_PREFIX, "");
+    if (option && (POWERSHELL_HOST_ENCODED_PARAMETER.startsWith(option) || option === POWERSHELL_HOST_ENCODED_ALIAS)) {
+      return { kind: "incomplete", reason: "encoded_command" };
+    }
+    if (option && POWERSHELL_HOST_COMMAND_PARAMETER.startsWith(option)) {
+      return { kind: "script", script: texts.slice(index + 1).join(" ") };
+    }
+    if (POWERSHELL_HOST_COMMAND_WITH_ARGS_PARAMETERS.has(option)) return { kind: "script", script: texts[index + 1] ?? "" };
+    if (option && POWERSHELL_HOST_FILE_PARAMETER.startsWith(option)) return { kind: "none" };
+    if (hostOptionTakesValue(option)) index += 1;
   }
-  return positionalHostCommandOf(texts);
+  return { kind: "none" };
 };
 var cmdScriptOf = (command) => {
   if (command.name !== CMD_PROGRAM) return void 0;
@@ -1818,38 +1820,51 @@ var scriptsInsideTheStage = (stage) => {
   const groups = [...stage.words, ...stage.redirectTargets].flatMap((word) => word.nested);
   const command = powerShellCommandOf(stage);
   if (command === null) return { ...NO_SCRIPTS_INSIDE, powerShell: groups };
+  const hosted = hostedPowerShellScriptOf(command);
+  if (hosted.kind === "incomplete") return hosted;
   const cmd = presentOnly(cmdScriptOf(command));
   return {
-    powerShell: [...groups, ...invokedExpressionsOf(command), ...presentOnly(hostedPowerShellScriptOf(command)), ...cmd.flatMap(cmdPiecesOf)],
+    powerShell: [...groups, ...invokedExpressionsOf(command), ...hosted.kind === "script" ? [hosted.script] : [], ...cmd.flatMap(cmdPiecesOf)],
     cmd,
     posix: presentOnly(wslCommandWordsOf(command))
   };
 };
 var powerShellReadingAt = (command, depth) => {
   const statements = powerShellStatementsOf(command);
-  if (statements === null) return null;
-  const inside = depth >= MAX_NESTED_SCRIPT_DEPTH ? [] : statements.flatMap((statement) => statement.stages).map(scriptsInsideTheStage);
-  const nested = inside.flatMap((scripts) => scripts.powerShell).map((script) => ({ script, reading: powerShellReadingAt(script, depth + 1) }));
-  const readings = nested.flatMap(({ reading }) => reading === null ? [] : [reading]);
+  if (statements === null) return { kind: "incomplete", reason: "syntax" };
+  const inside = [];
+  for (const stage of statements.flatMap((statement) => statement.stages)) {
+    const scripts = scriptsInsideTheStage(stage);
+    if ("kind" in scripts) return scripts;
+    inside.push(scripts);
+  }
+  const nested = inside.flatMap((scripts) => scripts.powerShell);
+  if (nested.length > 0 && depth >= MAX_NESTED_SCRIPT_DEPTH) return { kind: "incomplete", reason: "nesting_limit" };
+  const readings = [];
+  for (const script of nested) {
+    const analysis = powerShellReadingAt(script, depth + 1);
+    if (analysis.kind === "incomplete") return analysis;
+    readings.push(analysis.reading);
+  }
   return {
-    statements: [...statements, ...readings.flatMap((reading) => reading.statements)],
-    cmdScripts: [...inside.flatMap((scripts) => scripts.cmd), ...readings.flatMap((reading) => reading.cmdScripts)],
-    posixCommands: [...inside.flatMap((scripts) => scripts.posix), ...readings.flatMap((reading) => reading.posixCommands)],
-    unreadScripts: [
-      ...nested.flatMap(({ script, reading }) => reading === null ? [script] : []),
-      ...readings.flatMap((reading) => reading.unreadScripts)
-    ]
+    kind: "complete",
+    reading: {
+      statements: [...statements, ...readings.flatMap((reading) => reading.statements)],
+      cmdScripts: [...inside.flatMap((scripts) => scripts.cmd), ...readings.flatMap((reading) => reading.cmdScripts)],
+      posixCommands: [...inside.flatMap((scripts) => scripts.posix), ...readings.flatMap((reading) => reading.posixCommands)]
+    }
   };
 };
 var stagesOfTheReading = (reading) => reading.statements.flatMap((statement) => statement.stages);
-var powerShellReadingIsDestructive = (reading, judge) => stagesOfTheReading(reading).some((stage) => stageIsDestructive(stage, judge)) || reading.cmdScripts.some(cmdScriptRemovesRecursively) || reading.unreadScripts.some((script) => judge.namesADestructiveAction(script));
+var powerShellReadingIsDestructive = (reading, judge) => stagesOfTheReading(reading).some((stage) => stageIsDestructive(stage, judge)) || reading.cmdScripts.some(cmdScriptRemovesRecursively);
 var powerShellCommandIsDestructive = (command, judge) => {
-  const reading = powerShellReadingAt(command, TOP_LEVEL_SCRIPT);
-  return reading === null ? judge.namesADestructiveAction(command) : powerShellReadingIsDestructive(reading, judge);
+  const analysis = powerShellReadingAt(command, TOP_LEVEL_SCRIPT);
+  return analysis.kind === "incomplete" || powerShellReadingIsDestructive(analysis.reading, judge);
 };
 var powerShellCommandHasAVisibleConsequence = (command, judge) => {
-  const reading = powerShellReadingAt(command, TOP_LEVEL_SCRIPT);
-  if (reading === null) return judge.namesADestructiveAction(command);
+  const analysis = powerShellReadingAt(command, TOP_LEVEL_SCRIPT);
+  if (analysis.kind === "incomplete") return true;
+  const { reading } = analysis;
   const stages = stagesOfTheReading(reading);
   return powerShellReadingIsDestructive(reading, judge) || stages.some((stage) => stageHasAVisibleConsequence(stage, judge)) || reading.statements.some(listsRecursivelyIntoARemoval) || runsFetchedPowerShellCode(stages, judge) || runsADownloadedFile(stages, judge) || reading.posixCommands.some((words) => judge.commandShowsAConsequence(words));
 };
@@ -2514,6 +2529,16 @@ var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
 var APPROVAL_MODES = ["push_only", "terminal_only", "push_first", "notify_only"];
 var isApprovalMode = (value) => typeof value === "string" && APPROVAL_MODES.includes(value);
+var approvalWaitsAtTheAgentsPrompt = (mode) => {
+  switch (mode) {
+    case "push_first":
+    case "push_only":
+      return false;
+    case "notify_only":
+    case "terminal_only":
+      return true;
+  }
+};
 var approvalModeWithoutLocalPrompt = (mode) => {
   switch (mode) {
     case "push_first":
@@ -2560,6 +2585,25 @@ var parseAgentQuestions = (toolInput) => {
   }
   return parsed;
 };
+var isAgentQuestionSet = (value) => {
+  if (!Array.isArray(value) || value.length === 0 || value.length > 4) return false;
+  const questions = /* @__PURE__ */ new Set();
+  for (const item of value) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return false;
+    const question = item;
+    if (typeof question.question !== "string" || question.question.length === 0 || questions.has(question.question) || question.header !== void 0 && typeof question.header !== "string" || typeof question.multiSelect !== "boolean" || question.allowOther !== void 0 && typeof question.allowOther !== "boolean" || !Array.isArray(question.options) || question.options.length < 2 || question.options.length > 4) return false;
+    const labels = /* @__PURE__ */ new Set();
+    for (const option of question.options) {
+      if (!option || typeof option !== "object" || Array.isArray(option)) return false;
+      const record = option;
+      const label = record.label;
+      if (typeof label !== "string" || label.length === 0 || labels.has(label) || record.description !== void 0 && typeof record.description !== "string") return false;
+      labels.add(label);
+    }
+    questions.add(question.question);
+  }
+  return true;
+};
 var parseAgentQuestionAnswers = (questions, value) => {
   let parsed;
   try {
@@ -2591,6 +2635,29 @@ var parseAgentQuestionAnswers = (questions, value) => {
   }
   return answers;
 };
+var isQuestionRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var codexAsyncQuestionFields = (raw) => {
+  if (!isQuestionRecord(raw)) return void 0;
+  const labels = Array.isArray(raw.options) ? raw.options : [];
+  return { question: raw.title, options: labels.map((label) => ({ label })) };
+};
+var codexBlockingQuestionFields = (raw) => isQuestionRecord(raw) && raw.isOther === false ? { ...raw, allowOther: false } : raw;
+var asksForASecret = (questions) => questions.some((question) => isQuestionRecord(question) && question.isSecret === true);
+var parseCodexQuestions = (toolName, toolInput) => {
+  const raw = Array.isArray(toolInput.questions) ? toolInput.questions : [];
+  if (asksForASecret(raw)) return void 0;
+  const questions = raw.map(toolName === CODEX_ASYNC_QUESTION_TOOL ? codexAsyncQuestionFields : codexBlockingQuestionFields);
+  const parsed = parseAgentQuestions({ questions });
+  return parsed && isAgentQuestionSet(parsed) ? parsed : void 0;
+};
+var CODEX_QUESTION_ANSWERED_IN_PUSHARY = "The user already answered this question in Pushary, so it was not shown again";
+var CODEX_QUESTION_CONTINUE = "Continue with this answer and do not ask it again";
+var quotedAnswerPair = ([question, answer]) => `${JSON.stringify(question)}: ${JSON.stringify(answer)}`;
+var codexQuestionAnswerReason = (answers) => {
+  const pairs = Object.entries(answers);
+  const answered = pairs.length === 1 ? `Their answer: ${JSON.stringify(pairs[0]?.[1] ?? "")}` : `Their answers: ${pairs.map(quotedAnswerPair).join("; ")}`;
+  return `${CODEX_QUESTION_ANSWERED_IN_PUSHARY}. ${answered}. ${CODEX_QUESTION_CONTINUE}`;
+};
 var INSTALL_SOURCES = [
   /** `npx pushary@latest ...`, the documented one-liner. */
   "npx",
@@ -5224,19 +5291,32 @@ var shouldDeferToNativeMode = (permissionMode, toolName, options = {}) => {
   return false;
 };
 var AGENT_QUESTION_TOOL = "AskUserQuestion";
-var AGENT_QUESTION_STRATEGY = { native: "native_dialog", updatedInput: "updated_input", none: "not_a_question" };
+var AGENT_QUESTION_STRATEGY = {
+  native: "native_dialog",
+  updatedInput: "updated_input",
+  answeredInRefusal: "answered_in_refusal",
+  none: "not_a_question"
+};
 var UPDATED_INPUT_QUESTION_SOURCES = /* @__PURE__ */ new Set(["claude", "qoder", "codebuddy", "droid"]);
 var GROK_NATIVE_DIALOG_TOOLS = /* @__PURE__ */ new Set(["ask_user_question", "exit_plan_mode"]);
+var CODEX_QUESTION_TOOL = "request_user_input";
+var CODEX_ASYNC_QUESTION_TOOL = "request_user_input_async";
+var CODEX_QUESTION_TOOLS = [CODEX_QUESTION_TOOL, CODEX_ASYNC_QUESTION_TOOL];
+var CODEX_QUESTION_TOOL_NAMES = new Set(CODEX_QUESTION_TOOLS);
+var isCodexQuestionTool = (toolName) => typeof toolName === "string" && CODEX_QUESTION_TOOL_NAMES.has(toolName);
+var isCodexQuestionCall = (source, event, toolName) => source === "codex" && event === "PreToolUse" && isCodexQuestionTool(toolName);
+var codexQuestionGoesToPushary = (verdict) => verdict.kind === "gate" && !approvalWaitsAtTheAgentsPrompt(verdict.policy.mode);
 function agentQuestionStrategy(source, event, toolName) {
   if (source === "grok" && GROK_NATIVE_DIALOG_TOOLS.has(toolName)) return AGENT_QUESTION_STRATEGY.native;
+  if (isCodexQuestionCall(source, event, toolName)) return AGENT_QUESTION_STRATEGY.answeredInRefusal;
   if (toolName !== AGENT_QUESTION_TOOL) return AGENT_QUESTION_STRATEGY.none;
   if (source !== null && event === "PreToolUse" && UPDATED_INPUT_QUESTION_SOURCES.has(source)) return AGENT_QUESTION_STRATEGY.updatedInput;
   return AGENT_QUESTION_STRATEGY.native;
 }
-var questionHandedToTheTerminal = (toolName, modeState) => toolName === AGENT_QUESTION_TOOL && modeState.askHandoff === true;
+var questionHandedToTheTerminal = (toolName, modeState) => (toolName === AGENT_QUESTION_TOOL || isCodexQuestionTool(toolName)) && modeState.askHandoff === true;
 var EXIT_PLAN_MODE_TOOL = "ExitPlanMode";
 var ASKED_IN_EVERY_MODE_TOOLS = [AGENT_QUESTION_TOOL, EXIT_PLAN_MODE_TOOL];
-var ASKED_IN_EVERY_MODE = new Set(ASKED_IN_EVERY_MODE_TOOLS);
+var ASKED_IN_EVERY_MODE = /* @__PURE__ */ new Set([...ASKED_IN_EVERY_MODE_TOOLS, ...CODEX_QUESTION_TOOLS]);
 var isAskedInEveryMode = (toolName) => ASKED_IN_EVERY_MODE.has(toolName);
 var NATIVE_BLOCK_EVENTS = /* @__PURE__ */ new Set(["PermissionDenied"]);
 var isNativeBlockEvent = (event) => typeof event === "string" && NATIVE_BLOCK_EVENTS.has(event);
@@ -5351,7 +5431,20 @@ var editsAFileThatNeedsAPerson = ({ toolName, toolInputs }) => toolInputs.some((
   const path = extractPolicyArg(toolName, toolInput);
   return path !== void 0 && fileEditNeedsAPerson(toolName, path);
 });
+var runsADestructiveCommand = ({ toolName, toolInputs }) => SHELL_DIALECT_BY_TOOL.has(toolName) && toolInputs.some((toolInput) => {
+  const command = extractPolicyArg(toolName, toolInput);
+  return command !== void 0 && classifyDecisionRisk(toolName, command) === "destructive";
+});
+var codexCallIsDestructive = (input, call) => call.deletesFiles || runsADestructiveCommand(input);
 var codexCallNeedsAPerson = (input, verdict, call) => onlyCodexPreToolUseCanAsk(verdict, call.permissionMode) || verdict.kind === "gate" && (aChosenRuleGoverns(input) || call.deletesFiles || runsACommandThatNeedsAPerson(input) || editsAFileThatNeedsAPerson(input));
+var CODEX_PRE_TOOL_USE_PASSES = { kind: "pass" };
+var codexPreToolUseDelivery = (input, verdict, call) => {
+  if (verdict.kind !== "gate" || !codexCallNeedsAPerson(input, verdict, call)) return CODEX_PRE_TOOL_USE_PASSES;
+  const noPromptOfItsOwn = codexHasNoPromptOfItsOwn(scopeBreachReasonOf(verdict), call.permissionMode);
+  const mode = noPromptOfItsOwn ? approvalModeWithoutLocalPrompt(verdict.policy.mode) : verdict.policy.mode;
+  if (mode === "push_first" && !codexCallIsDestructive(input, call)) return CODEX_PRE_TOOL_USE_PASSES;
+  return { kind: "ask", policy: { ...verdict.policy, mode }, agentPromptFollows: !noPromptOfItsOwn };
+};
 var MAX_AGENT_PERMISSION_RULES_PER_KIND = 256;
 var MAX_AGENT_PERMISSION_RULE_LENGTH = 512;
 var isAgentPermissionRule = (value) => typeof value === "string" && value.length > 0 && value.length <= MAX_AGENT_PERMISSION_RULE_LENGTH;
@@ -5949,6 +6042,8 @@ export {
   parseAgentQuestion,
   parseAgentQuestions,
   parseAgentQuestionAnswers,
+  parseCodexQuestions,
+  codexQuestionAnswerReason,
   normalizeInstallSource,
   HOOK_BUDGETS,
   HOOK_HOLD_BUDGET_ENV,
@@ -5988,7 +6083,11 @@ export {
   KILL_REASON,
   isPusharyOwnTool,
   shouldDeferToNativeMode,
+  AGENT_QUESTION_TOOL,
   AGENT_QUESTION_STRATEGY,
+  CODEX_QUESTION_TOOLS,
+  isCodexQuestionTool,
+  codexQuestionGoesToPushary,
   agentQuestionStrategy,
   questionHandedToTheTerminal,
   CODEX_RESCUE_TOOL_NAME,
@@ -6009,7 +6108,7 @@ export {
   HAND_BACK_WITHOUT_A_PROMPT,
   codexDeferredPreToolUse,
   scopeBreachReasonOf,
-  codexCallNeedsAPerson,
+  codexPreToolUseDelivery,
   claudePermissionRulesFromSettings,
   claudeConsultsItsAllowlist,
   agentRulesAllowEveryInput,

package/dist/{chunk-RYXSY3RH.js → chunk-2WZJHJAB.js}

@@ -4,7 +4,7 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-55XIK7YS.js";
+} from "./chunk-ISNGKZG4.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -14,7 +14,7 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-HCKBZYBW.js";
+} from "./chunk-PDDJKGIW.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
@@ -27,10 +27,10 @@ import {
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-K5X25GUV.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LL256PHP.js";
+} from "./chunk-WXA3CFZR.js";
 import {
   commandsPackage,
   globalUpgradeEntry,
@@ -39,7 +39,7 @@ import {
   isSameMajorVersion,
   ownPackageRoot,
   packageVersionAt
-} from "./chunk-2DZBIELP.js";
+} from "./chunk-235LKHLW.js";
 
 // src/global-upgrade.ts
 import { existsSync } from "fs";

package/dist/{chunk-GTEF64CJ.js → chunk-3Y73MQPF.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-2DZBIELP.js";
+} from "./chunk-235LKHLW.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-JAA7YJJZ.js → chunk-4OQHT5IJ.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-SHLLDMPM.js";
+} from "./chunk-KHLYOIPY.js";
 import {
   pusharyHookExecutable
-} from "./chunk-4NMDFPK7.js";
+} from "./chunk-Q3TCLMYC.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-K5X25GUV.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   isRecord
-} from "./chunk-2DZBIELP.js";
+} from "./chunk-235LKHLW.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-ULDOQF4Q.js → chunk-6SYU5LVK.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-U2PUHT4W.js";
+} from "./chunk-QUKATQ66.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-K5X25GUV.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-2DZBIELP.js";
+} from "./chunk-235LKHLW.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-DC6KHRVH.js → chunk-6VUVVVVN.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-6LKIK7V2.js";
+} from "./chunk-W73URGML.js";
 
 // src/answer.ts
 var isDeferAnswer = (value) => value === "defer";

package/dist/{chunk-PRKH662J.js → chunk-AZXPJLKC.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LL256PHP.js";
+} from "./chunk-WXA3CFZR.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-CHNSFTD5.js → chunk-B7SE22M7.js}

@@ -8,10 +8,10 @@ import {
   codexHooksJsonIn,
   isPusharyCodexCommand,
   resolvePathBinary
-} from "./chunk-K5X25GUV.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   getPackageVersion
-} from "./chunk-2DZBIELP.js";
+} from "./chunk-235LKHLW.js";
 
 // src/codex-app-server.ts
 import { existsSync, realpathSync } from "fs";

package/dist/{chunk-ML42WKI7.js → chunk-DG5QHKJA.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-EQXMVKKD.js";
+} from "./chunk-Q52PBCN7.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LL256PHP.js";
+} from "./chunk-WXA3CFZR.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-2DZBIELP.js";
+} from "./chunk-235LKHLW.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-GNESC5EF.js → chunk-DYALNCS6.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-CRZ4CP7C.js";
+} from "./chunk-NWSWP3KY.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-PRKH662J.js";
+} from "./chunk-AZXPJLKC.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-2DZBIELP.js";
+} from "./chunk-235LKHLW.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-4E4PZQFE.js → chunk-EK6PRPCY.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-JWURAYXK.js";
+} from "./chunk-VMIDUNOT.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
 import {
   readKeySource
-} from "./chunk-42FTY5II.js";
+} from "./chunk-N5WEEYV6.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-GNESC5EF.js";
+} from "./chunk-DYALNCS6.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-PRKH662J.js";
+} from "./chunk-AZXPJLKC.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-Y5FCB66K.js → chunk-F3J6JFR2.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-42FTY5II.js";
+} from "./chunk-N5WEEYV6.js";
 import {
   getMachineId
-} from "./chunk-EGTVN6YV.js";
+} from "./chunk-VA36Q6BD.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-K5X25GUV.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,7 +20,7 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "./chunk-PRKH662J.js";
+} from "./chunk-AZXPJLKC.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
@@ -28,7 +28,7 @@ import {
   globalPackageFolder,
   globalRootFor,
   isRecord
-} from "./chunk-2DZBIELP.js";
+} from "./chunk-235LKHLW.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-MBBPLF5T.js → chunk-FFRH7KZP.js}

@@ -1,9 +1,9 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-CHNSFTD5.js";
+} from "./chunk-B7SE22M7.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LL256PHP.js";
+} from "./chunk-WXA3CFZR.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-TRNSODJ6.js → chunk-GKTVIN4F.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-PRKH662J.js";
+} from "./chunk-AZXPJLKC.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-YRAPCLOB.js → chunk-GQSJVYKN.js}

@@ -3,27 +3,27 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-26AEFJSK.js";
+} from "./chunk-YNJ372JU.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-Y5FCB66K.js";
+} from "./chunk-F3J6JFR2.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-42FTY5II.js";
+} from "./chunk-N5WEEYV6.js";
 import {
   getMachineId
-} from "./chunk-EGTVN6YV.js";
+} from "./chunk-VA36Q6BD.js";
 import {
   getBaseUrl
-} from "./chunk-PRKH662J.js";
+} from "./chunk-AZXPJLKC.js";
 import {
   getPackageVersion
-} from "./chunk-2DZBIELP.js";
+} from "./chunk-235LKHLW.js";
 
 // src/machines.ts
 import { hostname } from "os";