@pushary/agent-hooks 1.9.5 → 1.9.6

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 1.9.6
+
+- Read-only shell approval no longer covers commands that make the shell evaluate quoted text again: arithmetic expansion (`$[ ]`), subscripted parameters (`$name[ ]`, including zsh flag prefixes) and `printf -v`. These ran a quoted command substitution in bash or zsh while being approved without asking. They now go to your normal approval.
+- An escaped `;`, `&` or `|` no longer splits a command when rating its risk, so destructive words passed as arguments to `sh -c` keep the command destructive and above a standing Bash auto-approve.
+
 ## 1.9.5
 
 - Setup allows up to 30 seconds each for daemon startup and heartbeat/control proof, allowing cold Windows agent discovery to finish before reporting a failure. Healthy services return immediately.

package/data/cowork/SKILL.md

@@ -1,12 +1,12 @@
 ---
 name: pushary-cowork
-version: 0.4.3
-description: Phone notifications and human-in-the-loop for Claude Cowork through the Pushary connector. Use inside a Cowork session whenever you need a human and nobody is watching the session, such as before an irreversible or destructive action, before spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, when running unattended and you hit a genuine ambiguity, when another skill's workflow says to confirm with the user, and when a task finishes or fails with nobody watching. Also use it when the user says things like ping me on my phone when this is done, ask me before doing anything risky, keep me in the loop while I am away, or notify me if you get stuck. Sends completion alerts, asks questions (yes/no, multiple choice, or free text) via push, and gets answers from connected devices. This Pushary connector is cooperative; it does not install native Cowork permission hooks. Pushary is a hosted service, $9.99/mo after a 3-day card-first trial.
+version: 0.5.0
+description: Use Pushary in Claude Chat, Cowork, or Claude Code when the user asks for phone updates, a missing decision blocks work, an action needs approval outside existing authorization, or meaningful unattended work finishes or fails. Send task updates and confirm, choice, or text questions to the user's connected devices, then read the returned answer and handoff. Requires the Pushary connector and a paid Pushary account. This skill does not install native permission hooks.
 metadata:
   tags: notifications, push, mcp, human-in-the-loop, cowork, claude, alerts, approvals
 ---
 
-# Pushary for Claude Cowork
+# Pushary for Claude
 
 Pushary is connected as a custom connector. It reaches the user on their phone, where confirm notifications can offer lock-screen actions; choices and text open the app. Use it proactively. Do not wait for the user to ask.
 
@@ -26,7 +26,7 @@ Every question costs the user their attention wherever they are. Before a run of
 
 ## Hand back with a way to reply
 
-The connector is the only channel between this session and the user's phone, and it carries only what you ask it to. A plain completion notice is one way traffic: once your turn ends nothing here is listening, so anything the user types back on their phone has nowhere to land. Pushary also cannot start a new Cowork task on its own, so a reply that says "now do X" reaches nobody unless you asked for it before you stopped.
+The connector carries only the updates and questions you send. Once your turn ends, this connector is no longer listening for answers. It cannot start a new Chat, Cowork, or Claude Code task, so a reply that says "now do X" reaches nobody unless you asked for it before you stopped.
 
 When a specific unresolved decision is needed before you can finish, keep the channel open:
 
@@ -34,7 +34,7 @@ When a specific unresolved decision is needed before you can finish, keep the ch
 2. Poll the returned `linkedCorrelationId` once with `wait_for_answer`, then follow its handoff.
 3. Act on the answer in this same session, then hand back the same way again if more work follows.
 
-Do not create a question just to keep the turn alive or ask for optional feedback after every result. Once this turn ends, tell the user to reopen Cowork for follow-up work.
+Do not create a question just to keep the turn alive or ask for optional feedback after every result. Once this turn ends, the user must send follow-up work in Claude.
 
 ## How to wait for answers
 
@@ -55,22 +55,23 @@ Delivery is controlled by the user's policy: `push_first` uses presence, `push_o
 | Slack | Answer through buttons, menus or text modals when the integration and intended recipient are configured. |
 | Browser | Open the decision page as a fallback; browser notification delivery requires permission. |
 
-Personal setup connects the operator's devices. For a Mac, install from https://pushary.com/download, sign in to the same personal account and connect your agents in the app. Run `npx pushary@latest cowork` for connector setup, then ask one harmless test question inside Cowork, answer it from Pushary, and verify Cowork receives the answer. CLI doctor checks do not verify a hosted connector. Test phone fallback while away from the Mac; do not infer delivery from a successful API call alone.
+Personal setup connects the operator's devices. The operator installs the Pushary phone or Mac app from https://pushary.com/download and signs in with the same account as the connector. In Chat or Cowork, connect Pushary from the plugin's Connectors tab or add `https://pushary.com/api/mcp/mcp` under Customize > Connectors. In Claude Code, check the connector with `/mcp` and follow its OAuth sign-in prompt. No CLI installer or API key is needed. Ask one harmless test question in the app being tested, answer it from Pushary, and verify Claude receives the answer. CLI doctor checks do not verify a hosted connector. Test phone fallback while away from the Mac; do not infer delivery from a successful API call alone.
 
 Partner customers use scoped enrollment links issued by their application. Do not enroll them into the operator's account or send their decisions through personal tools. The Mac notch currently uses the personal account/session API; do not promise a Partner customer inbox on Mac. See https://pushary.com/docs/agents/embed for Partner setup.
 
 ## Conventions
 
-- Reuse one opaque `sessionId` per Cowork task. Do not reuse it across parallel tasks or put credentials in it.
-- Pass `agentName` as `Claude Cowork - <task name>` on every call, so the user knows which session is asking and their dashboard groups the session correctly.
+- Reuse one opaque `sessionId` per conversation or task. Do not reuse it across parallel tasks or put credentials in it.
+- Pass `agentName` as `Claude Chat - <task name>`, `Claude Cowork - <task name>`, or `Claude Code - <task name>` to match the current app. Use it on every call so the user knows which session is asking.
 - Keep questions short and decision-shaped. One sentence of context, then the ask. The user is reading a lock screen, not a report.
+- Send only the context needed for the decision or task update. Leave passwords, API keys, file contents, and private conversation history out of Pushary tool arguments.
 - Do not ask through Pushary for things you can safely decide yourself. Reserve it for real decisions, risky steps, completions, and errors, so a ping always means something.
 
 ## Setup and capability boundary
 
-Install the Pushary Cowork plugin to supply this skill and its remote MCP connector, or add `https://pushary.com/api/mcp/mcp` under Customize > Connectors. Sign in with the same Pushary account used by your phone and Mac. Enable the connector in the task and approve its tool access when Claude asks. For proactive behavior, use this skill or standing instructions under Settings > Cowork; do not rely on a repository memory file.
+Install Pushary for Claude to supply this skill and its remote MCP connector, or connect the public URL above. Sign in with the same Pushary account used by your phone and Mac. Enable the connector in the conversation and approve its tool access when Claude asks. Use this skill for proactive behavior. Cowork also supports standing instructions under Settings > Cowork; Chat and Cowork do not rely on a repository memory file.
 
-Anthropic documents plugin hooks in supported Cowork versions. This plugin currently uses the cooperative connector and does not install or verify native permission hooks. Local and cloud Cowork tasks may have different capabilities; do not infer them from the product name. Native Claude permission prompts still need Claude’s own approval surface.
+This plugin uses the cooperative connector and installs no native permission hooks. Chat ignores hooks. Cowork and Claude Code can load hooks from other integrations, but that does not mean this bundle can enforce approvals. Native Claude permission prompts still need Claude's own approval surface unless a separately installed integration handles them.
 
 ## If the connector is missing
 

package/dist/bin/pushary-bell-hook.js

@@ -1,39 +1,39 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-NUYECJ57.js";
+} from "../chunk-LBLCFD5K.js";
 import {
   readHookInput
-} from "../chunk-2PFD44YK.js";
-import "../chunk-V3ASMZLF.js";
+} from "../chunk-HWQNQVY6.js";
+import "../chunk-VRT3EEZN.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-3Z7NUGXO.js";
-import "../chunk-ZW7KE2GP.js";
-import "../chunk-5T65DZBH.js";
-import "../chunk-RKEVFUBN.js";
-import "../chunk-KTIY7ZIA.js";
-import "../chunk-NI2BRIHL.js";
-import "../chunk-23R4BMUP.js";
-import "../chunk-IX5EFNCI.js";
-import "../chunk-7AV2KBZC.js";
-import "../chunk-XXBOA4ZL.js";
+import "../chunk-NVGDMTX3.js";
+import "../chunk-SPXBXN23.js";
+import "../chunk-SJN22ADZ.js";
+import "../chunk-D7SOOVHX.js";
+import "../chunk-ZC3TF4LR.js";
+import "../chunk-UKNKYTTY.js";
+import "../chunk-Q23MMVTD.js";
+import "../chunk-5AXCOTIT.js";
+import "../chunk-7JTVYR5B.js";
+import "../chunk-KK54WQ74.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-KSJCYP4I.js";
-import "../chunk-CPMVKL6H.js";
+import "../chunk-DJ4BB264.js";
+import "../chunk-DA4FTGTK.js";
 import "../chunk-POFBE6ZY.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-5DU7LJ7L.js";
-import "../chunk-ELQAQZNO.js";
-import "../chunk-K2J6OGGN.js";
+import "../chunk-5BHROGRB.js";
+import "../chunk-W4Q7NFXU.js";
+import "../chunk-3BUAEQCY.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-FQKFONAS.js";
-import "../chunk-ZBF5WAP7.js";
+import "../chunk-75CA37FZ.js";
+import "../chunk-HJXZJF6O.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-2DSUVY6R.js";
-import "../chunk-HOTK2D2S.js";
-import "../chunk-SBR2UKUO.js";
+import "../chunk-2QRE6QH2.js";
+import "../chunk-L6USMDTW.js";
+import "../chunk-Q4E56K4X.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,37 +5,37 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-NUYECJ57.js";
+} from "../chunk-LBLCFD5K.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-23R4BMUP.js";
+} from "../chunk-Q23MMVTD.js";
 import {
   createIo
 } from "../chunk-U4TMAANR.js";
 import {
   exitOnHelpFlag
-} from "../chunk-6WKOOF2H.js";
+} from "../chunk-FBD3QGVJ.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-5DU7LJ7L.js";
+import "../chunk-5BHROGRB.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-FQKFONAS.js";
+import "../chunk-75CA37FZ.js";
 import {
   claudeSettings
-} from "../chunk-ZBF5WAP7.js";
+} from "../chunk-HJXZJF6O.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-T7E75EKA.js";
-import "../chunk-2DSUVY6R.js";
-import "../chunk-HOTK2D2S.js";
-import "../chunk-SBR2UKUO.js";
+import "../chunk-2QRE6QH2.js";
+import "../chunk-L6USMDTW.js";
+import "../chunk-Q4E56K4X.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,7 +8,7 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-XEZWDDR5.js";
+} from "../chunk-RDK7FX5F.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
@@ -18,24 +18,24 @@ import {
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-V3ASMZLF.js";
+} from "../chunk-VRT3EEZN.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-3Z7NUGXO.js";
-import "../chunk-ZW7KE2GP.js";
-import "../chunk-5T65DZBH.js";
-import "../chunk-RKEVFUBN.js";
+import "../chunk-NVGDMTX3.js";
+import "../chunk-SPXBXN23.js";
+import "../chunk-SJN22ADZ.js";
+import "../chunk-D7SOOVHX.js";
 import {
   ensureDaemonRunning
-} from "../chunk-KTIY7ZIA.js";
-import "../chunk-NI2BRIHL.js";
-import "../chunk-23R4BMUP.js";
+} from "../chunk-ZC3TF4LR.js";
+import "../chunk-UKNKYTTY.js";
+import "../chunk-Q23MMVTD.js";
 import {
   encryptRecord
-} from "../chunk-IX5EFNCI.js";
-import "../chunk-7AV2KBZC.js";
+} from "../chunk-5AXCOTIT.js";
+import "../chunk-7JTVYR5B.js";
 import {
   transcriptsEnabled
-} from "../chunk-XXBOA4ZL.js";
+} from "../chunk-KK54WQ74.js";
 import {
   needsShell,
   spawnClaude
@@ -51,7 +51,7 @@ import {
   repoKeyFor,
   reportEvent,
   scopePathFor
-} from "../chunk-JSVBVV2Q.js";
+} from "../chunk-CCDVL63C.js";
 import {
   DEFAULT_SESSION,
   markPendingCommandDelivered,
@@ -61,7 +61,7 @@ import {
   removePendingCommand,
   savePendingCommand
 } from "../chunk-N6IOSZOE.js";
-import "../chunk-KSJCYP4I.js";
+import "../chunk-DJ4BB264.js";
 import {
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
@@ -72,36 +72,36 @@ import {
   nextLongPollMs,
   waitForAnswer,
   withdrawQuestion
-} from "../chunk-UM7DXK6V.js";
-import "../chunk-CPMVKL6H.js";
+} from "../chunk-WN6WYUCV.js";
+import "../chunk-DA4FTGTK.js";
 import "../chunk-POFBE6ZY.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-5DU7LJ7L.js";
+import "../chunk-5BHROGRB.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-CV2IAVD5.js";
-import "../chunk-L5XJZKF2.js";
-import "../chunk-ELQAQZNO.js";
+} from "../chunk-ZPW4MJOV.js";
+import "../chunk-4QKM44N6.js";
+import "../chunk-W4Q7NFXU.js";
 import {
   getMachineId
-} from "../chunk-K2J6OGGN.js";
+} from "../chunk-3BUAEQCY.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-FQKFONAS.js";
-import "../chunk-ZBF5WAP7.js";
+import "../chunk-75CA37FZ.js";
+import "../chunk-HJXZJF6O.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-2DSUVY6R.js";
+} from "../chunk-2QRE6QH2.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-HOTK2D2S.js";
+} from "../chunk-L6USMDTW.js";
 import {
   KILL_REASON,
   redactSecretsFromContent,
   resolveGate
-} from "../chunk-SBR2UKUO.js";
+} from "../chunk-Q4E56K4X.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -4,7 +4,7 @@ import {
   PUSHARY_SKILL_SOURCE,
   createGuards,
   withoutPusharyCursorHooks
-} from "../chunk-2JOP4D2G.js";
+} from "../chunk-6GERGJHF.js";
 import {
   HERMES_PIP_PACKAGE,
   planFxRemoval,
@@ -15,8 +15,8 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-TNCINDSF.js";
-import "../chunk-2KH5NTKR.js";
+} from "../chunk-5PMTC2CB.js";
+import "../chunk-WUKUXICK.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -28,7 +28,7 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-GRFV6GPY.js";
+} from "../chunk-RIC6OOJX.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -36,40 +36,40 @@ import {
   compatiblePermissionRuleFile,
   removeCompatibleHooks,
   removeCompatibleMcpServer
-} from "../chunk-NH63BTRO.js";
+} from "../chunk-TE5M6GGK.js";
 import {
   isClaudeMcpSnapshot,
   removeClaudeMcpServers,
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-V3TD72QA.js";
+} from "../chunk-IR5FRUPQ.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-3Z7NUGXO.js";
-import "../chunk-ZW7KE2GP.js";
+} from "../chunk-NVGDMTX3.js";
+import "../chunk-SPXBXN23.js";
 import {
   liveBridgeProbe,
   resolveBridgeStub
-} from "../chunk-5T65DZBH.js";
-import "../chunk-RKEVFUBN.js";
+} from "../chunk-SJN22ADZ.js";
+import "../chunk-D7SOOVHX.js";
 import {
   disableDaemonService
-} from "../chunk-KTIY7ZIA.js";
+} from "../chunk-ZC3TF4LR.js";
 import {
   removeGeminiSettings
-} from "../chunk-NI2BRIHL.js";
-import "../chunk-23R4BMUP.js";
+} from "../chunk-UKNKYTTY.js";
+import "../chunk-Q23MMVTD.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-JSVBVV2Q.js";
+import "../chunk-CCDVL63C.js";
 import "../chunk-N6IOSZOE.js";
-import "../chunk-KSJCYP4I.js";
-import "../chunk-UM7DXK6V.js";
-import "../chunk-CPMVKL6H.js";
+import "../chunk-DJ4BB264.js";
+import "../chunk-WN6WYUCV.js";
+import "../chunk-DA4FTGTK.js";
 import "../chunk-POFBE6ZY.js";
 import {
   ansiPainter,
@@ -77,7 +77,7 @@ import {
 } from "../chunk-U4TMAANR.js";
 import {
   exitOnHelpFlag
-} from "../chunk-6WKOOF2H.js";
+} from "../chunk-FBD3QGVJ.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -85,16 +85,16 @@ import {
   CANDIDATE_RCS,
   isDisabledExport,
   removeClaudeAlias
-} from "../chunk-5DU7LJ7L.js";
-import "../chunk-CV2IAVD5.js";
-import "../chunk-L5XJZKF2.js";
-import "../chunk-ELQAQZNO.js";
-import "../chunk-K2J6OGGN.js";
+} from "../chunk-5BHROGRB.js";
+import "../chunk-ZPW4MJOV.js";
+import "../chunk-4QKM44N6.js";
+import "../chunk-W4Q7NFXU.js";
+import "../chunk-3BUAEQCY.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-FQKFONAS.js";
+import "../chunk-75CA37FZ.js";
 import {
   bridgeAgentKey,
   claudeJson,
@@ -132,12 +132,12 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-ZBF5WAP7.js";
+} from "../chunk-HJXZJF6O.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-2DSUVY6R.js";
+import "../chunk-2QRE6QH2.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-HOTK2D2S.js";
+} from "../chunk-L6USMDTW.js";
 import {
   CLI_PACKAGE_NAMES,
   HOOK_COMPATIBLE_PROFILES,
@@ -149,7 +149,7 @@ import {
   globalRootFor,
   isValidApiKey,
   redactSecrets
-} from "../chunk-SBR2UKUO.js";
+} from "../chunk-Q4E56K4X.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -5,10 +5,10 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-4LVFBQJ3.js";
+} from "../chunk-F56SB65Y.js";
 import {
   resolveProviderBinary
-} from "../chunk-6OUATBSK.js";
+} from "../chunk-MKJ3RTUS.js";
 import "../chunk-RIVNNBEK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
@@ -16,12 +16,12 @@ import {
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-XEZWDDR5.js";
-import "../chunk-IX5EFNCI.js";
-import "../chunk-7AV2KBZC.js";
+} from "../chunk-RDK7FX5F.js";
+import "../chunk-5AXCOTIT.js";
+import "../chunk-7JTVYR5B.js";
 import {
   transcriptsEnabled
-} from "../chunk-XXBOA4ZL.js";
+} from "../chunk-KK54WQ74.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -31,37 +31,37 @@ import {
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion
-} from "../chunk-UM7DXK6V.js";
+} from "../chunk-WN6WYUCV.js";
 import {
   writeDegraded
-} from "../chunk-CPMVKL6H.js";
+} from "../chunk-DA4FTGTK.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-5DU7LJ7L.js";
+import "../chunk-5BHROGRB.js";
 import {
   callMcpTool
-} from "../chunk-CV2IAVD5.js";
-import "../chunk-L5XJZKF2.js";
-import "../chunk-ELQAQZNO.js";
+} from "../chunk-ZPW4MJOV.js";
+import "../chunk-4QKM44N6.js";
+import "../chunk-W4Q7NFXU.js";
 import {
   getMachineId
-} from "../chunk-K2J6OGGN.js";
+} from "../chunk-3BUAEQCY.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-FQKFONAS.js";
-import "../chunk-ZBF5WAP7.js";
+import "../chunk-75CA37FZ.js";
+import "../chunk-HJXZJF6O.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-2DSUVY6R.js";
-import "../chunk-HOTK2D2S.js";
+} from "../chunk-2QRE6QH2.js";
+import "../chunk-L6USMDTW.js";
 import {
   elicitationContent,
   parseAgentQuestion,
   parseAgentQuestionAnswers,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-SBR2UKUO.js";
+} from "../chunk-Q4E56K4X.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -1,38 +1,38 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-QEY4SCXT.js";
+} from "../chunk-EVFY3VE6.js";
 import {
   defersToNativeMode,
   reportMachineDenial
-} from "../chunk-VZGCXECP.js";
+} from "../chunk-BVCHY4OY.js";
 import {
   triggerAutoUpdate
-} from "../chunk-Q6KNNFGG.js";
+} from "../chunk-SNJ3BOCP.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-M7MMZURA.js";
+} from "../chunk-GQHZIBAZ.js";
 import {
   readHookInput
-} from "../chunk-2PFD44YK.js";
+} from "../chunk-HWQNQVY6.js";
 import {
   announceSubscriptionRequired,
   denyReasonFrom,
   isDeferAnswer
 } from "../chunk-5OP5MQI7.js";
-import "../chunk-V3ASMZLF.js";
+import "../chunk-VRT3EEZN.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-3Z7NUGXO.js";
-import "../chunk-ZW7KE2GP.js";
-import "../chunk-5T65DZBH.js";
-import "../chunk-RKEVFUBN.js";
-import "../chunk-KTIY7ZIA.js";
-import "../chunk-NI2BRIHL.js";
-import "../chunk-23R4BMUP.js";
-import "../chunk-IX5EFNCI.js";
-import "../chunk-7AV2KBZC.js";
-import "../chunk-XXBOA4ZL.js";
+import "../chunk-NVGDMTX3.js";
+import "../chunk-SPXBXN23.js";
+import "../chunk-SJN22ADZ.js";
+import "../chunk-D7SOOVHX.js";
+import "../chunk-ZC3TF4LR.js";
+import "../chunk-UKNKYTTY.js";
+import "../chunk-Q23MMVTD.js";
+import "../chunk-5AXCOTIT.js";
+import "../chunk-7JTVYR5B.js";
+import "../chunk-KK54WQ74.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
 import {
@@ -77,11 +77,11 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   userScope
-} from "../chunk-JSVBVV2Q.js";
+} from "../chunk-CCDVL63C.js";
 import {
   DEFAULT_SESSION
 } from "../chunk-N6IOSZOE.js";
-import "../chunk-KSJCYP4I.js";
+import "../chunk-DJ4BB264.js";
 import {
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
@@ -95,36 +95,36 @@ import {
   sendNotification,
   unavailableQuestionUnlessSubscriptionRequired,
   waitForQuestion
-} from "../chunk-UM7DXK6V.js";
+} from "../chunk-WN6WYUCV.js";
 import {
   exitAfterClientReports
-} from "../chunk-CPMVKL6H.js";
+} from "../chunk-DA4FTGTK.js";
 import "../chunk-POFBE6ZY.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-5DU7LJ7L.js";
+import "../chunk-5BHROGRB.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-CV2IAVD5.js";
-import "../chunk-L5XJZKF2.js";
-import "../chunk-ELQAQZNO.js";
+} from "../chunk-ZPW4MJOV.js";
+import "../chunk-4QKM44N6.js";
+import "../chunk-W4Q7NFXU.js";
 import {
   getMachineId
-} from "../chunk-K2J6OGGN.js";
+} from "../chunk-3BUAEQCY.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-FQKFONAS.js";
+import "../chunk-75CA37FZ.js";
 import {
   canonicalJson
-} from "../chunk-ZBF5WAP7.js";
+} from "../chunk-HJXZJF6O.js";
 import {
   writeFileAtomic
 } from "../chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "../chunk-2DSUVY6R.js";
-import "../chunk-HOTK2D2S.js";
+} from "../chunk-2QRE6QH2.js";
+import "../chunk-L6USMDTW.js";
 import {
   CODEX_RESCUE_TOOL_NAME,
   GATE_BLOCK_REASON_MAX_LENGTH,
@@ -137,7 +137,7 @@ import {
   hookWaitClamped,
   hookWaitDeadline,
   resolveGate
-} from "../chunk-SBR2UKUO.js";
+} from "../chunk-Q4E56K4X.js";
 
 // bin/pushary-codex-hook.ts
 import { basename } from "path";
@@ -764,7 +764,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-U6BMGCAB.js");
+    const { repairCodexHolds } = await import("../reapply-NOB2Q6C4.js");
     repairCodexHolds();
   } catch {
     return;