@pushary/agent-hooks 1.9.58 → 1.9.60

package/dist/{chunk-GZL3KEPC.js → chunk-AXJLJJ3M.js}

@@ -1,3 +1,132 @@
+// ../contracts/src/json-record.ts
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+
+// ../contracts/src/agent-questions.ts
+var MAX_AGENT_QUESTIONS = 4;
+var MIN_AGENT_QUESTION_OPTIONS = 2;
+var MAX_AGENT_QUESTION_OPTIONS = 4;
+var AGENT_QUESTION_HEADER_MAX = 40;
+var AGENT_QUESTION_OPTION_MAX = 100;
+var AGENT_QUESTION_DESCRIPTION_MAX = 500;
+var agentQuestionOptionIn = (raw) => {
+  if (!isRecord(raw) || typeof raw.label !== "string" || raw.label.length === 0) return [];
+  return [{
+    label: raw.label,
+    ...typeof raw.description === "string" ? { description: raw.description } : {}
+  }];
+};
+var agentQuestionFieldsIn = (raw) => {
+  if (!isRecord(raw) || typeof raw.question !== "string") return void 0;
+  return {
+    question: raw.question,
+    ...typeof raw.header === "string" ? { header: raw.header } : {},
+    multiSelect: raw.multiSelect === true,
+    ...typeof raw.allowOther === "boolean" ? { allowOther: raw.allowOther } : {},
+    options: Array.isArray(raw.options) ? raw.options.flatMap(agentQuestionOptionIn) : []
+  };
+};
+var parseAgentQuestion = (raw) => {
+  const question = agentQuestionFieldsIn(raw);
+  return question && question.options.length >= MIN_AGENT_QUESTION_OPTIONS ? question : void 0;
+};
+var parseAgentQuestions = (toolInput) => {
+  const questions = toolInput.questions;
+  if (!Array.isArray(questions) || questions.length === 0) return void 0;
+  if (questions.length > MAX_AGENT_QUESTIONS) return void 0;
+  const parsed = [];
+  for (const raw of questions) {
+    const one = parseAgentQuestion(raw);
+    if (!one || parsed.some((question) => question.question === one.question)) return void 0;
+    parsed.push(one);
+  }
+  return parsed;
+};
+var isTypedAnswerQuestion = (question) => question.options.length === 0;
+var typingCanAnswer = (question) => question.multiSelect === false && question.allowOther !== false;
+var optionCountCanBeAnswered = (question, optionCount) => optionCount === 0 ? typingCanAnswer(question) : optionCount >= MIN_AGENT_QUESTION_OPTIONS && optionCount <= MAX_AGENT_QUESTION_OPTIONS;
+var isAgentQuestionSet = (value) => {
+  if (!Array.isArray(value) || value.length === 0 || value.length > 4) return false;
+  const questions = /* @__PURE__ */ new Set();
+  for (const item of value) {
+    if (!isRecord(item)) return false;
+    const question = item;
+    if (typeof question.question !== "string" || question.question.length === 0 || questions.has(question.question) || question.header !== void 0 && typeof question.header !== "string" || typeof question.multiSelect !== "boolean" || question.allowOther !== void 0 && typeof question.allowOther !== "boolean" || !Array.isArray(question.options) || !optionCountCanBeAnswered(question, question.options.length)) return false;
+    const labels = /* @__PURE__ */ new Set();
+    for (const option of question.options) {
+      if (!option || typeof option !== "object" || Array.isArray(option)) return false;
+      const record3 = option;
+      const label = record3.label;
+      if (typeof label !== "string" || label.length === 0 || labels.has(label) || record3.description !== void 0 && typeof record3.description !== "string") return false;
+      labels.add(label);
+    }
+    questions.add(question.question);
+  }
+  return true;
+};
+var parseAgentQuestionAnswers = (questions, value) => {
+  let parsed;
+  try {
+    parsed = JSON.parse(value);
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+  const answers = parsed;
+  if (Object.keys(answers).length !== questions.length) return null;
+  for (const question of questions) {
+    const answer = answers[question.question];
+    if (typeof answer !== "string" || answer.trim().length === 0) return null;
+    const labels = new Set(question.options.map((option) => option.label));
+    if (!question.multiSelect) {
+      if (question.allowOther === false && !labels.has(answer)) return null;
+      continue;
+    }
+    try {
+      const selected = JSON.parse(answer);
+      if (!Array.isArray(selected)) {
+        if (question.allowOther === false) return null;
+        continue;
+      }
+      if (selected.length === 0 || new Set(selected).size !== selected.length || !selected.every((label) => typeof label === "string" && labels.has(label))) return null;
+    } catch {
+      if (question.allowOther === false) return null;
+    }
+  }
+  return answers;
+};
+
+// ../contracts/src/codex-question.ts
+var CODEX_QUESTION_TOOL = "request_user_input";
+var CODEX_ASYNC_QUESTION_TOOL = "request_user_input_async";
+var CODEX_QUESTION_TOOLS = [CODEX_QUESTION_TOOL, CODEX_ASYNC_QUESTION_TOOL];
+var CODEX_QUESTION_TOOL_NAMES = new Set(CODEX_QUESTION_TOOLS);
+var isCodexQuestionTool = (toolName) => typeof toolName === "string" && CODEX_QUESTION_TOOL_NAMES.has(toolName);
+var noOptionsWhenAbsent = (options) => options ?? [];
+var optionsNamedByLabel = (options) => Array.isArray(options) ? options.map((label) => ({ label })) : options;
+var offersOnlyItsOptions = (raw, options) => raw.isOther === false && Array.isArray(options) && options.length > 0;
+var codexQuestionFields = (raw, toolName) => {
+  if (!isRecord(raw) || raw.isSecret === true) return void 0;
+  const options = noOptionsWhenAbsent(raw.options);
+  if (toolName === CODEX_ASYNC_QUESTION_TOOL) {
+    return { question: raw.title, options: optionsNamedByLabel(options), multiSelect: false };
+  }
+  return { ...raw, options, multiSelect: raw.multiSelect ?? false, ...offersOnlyItsOptions(raw, options) ? { allowOther: false } : {} };
+};
+var agentQuestionsOf = (questions) => questions.flatMap((question) => agentQuestionFieldsIn(question) ?? []);
+var parseCodexQuestions = (toolName, toolInput) => {
+  const raw = Array.isArray(toolInput.questions) ? toolInput.questions : [];
+  const questions = raw.map((question) => codexQuestionFields(question, toolName));
+  return isAgentQuestionSet(questions) ? agentQuestionsOf(questions) : void 0;
+};
+var CODEX_QUESTION_ANSWERED_IN_PUSHARY = "The user already answered this question in Pushary, so it was not shown again";
+var CODEX_QUESTION_CONTINUE = "Continue with this answer and do not ask it again";
+var quotedAnswerPair = ([question, answer]) => `${JSON.stringify(question)}: ${JSON.stringify(answer)}`;
+var codexQuestionAnswerReason = (answers) => {
+  const pairs = Object.entries(answers);
+  const answered = pairs.length === 1 ? `Their answer: ${JSON.stringify(pairs[0]?.[1] ?? "")}` : `Their answers: ${pairs.map(quotedAnswerPair).join("; ")}`;
+  return `${CODEX_QUESTION_ANSWERED_IN_PUSHARY}. ${answered}. ${CODEX_QUESTION_CONTINUE}`;
+};
+
 // ../contracts/src/claude-connector.ts
 var CLAUDE_CONNECTOR_URL = "https://pushary.com/api/mcp/mcp";
 var CLAUDE_CONNECTOR_GUIDE = "https://pushary.com/docs/agents/guides/claude-desktop";
@@ -255,6 +384,13 @@ var AGENTS = {
     enforcementDetail: "Shell, edits and MCP calls through native PreToolUse hooks. Grok's own permission checks still apply after a phone approval.",
     capabilityNote: "Grok fails open if it kills a hook or cannot run it. Setup leaves Grok's permission mode unchanged. Native question and plan dialogs stay in Grok; proactive phone questions use Pushary MCP."
   },
+  grok_bot: {
+    ...defaults,
+    label: "Grok Bot",
+    connectVia: "Grok Bot app plugin (remote MCP connector)",
+    setupGuide: "[Grok Bot setup](/docs/agents/guides/grok-bot)",
+    capabilityNote: "Grok Bot keeps its own approval cards, and Pushary cannot stop a Bot in the middle of a task. A question nobody answers expires after about ten minutes and is never treated as a yes."
+  },
   windsurf: {
     ...defaults,
     label: "Windsurf",
@@ -310,9 +446,6 @@ var normalizeAgentId = (value, accepted) => {
   return accepted.find((candidate) => names.includes(candidate)) ?? null;
 };
 
-// ../contracts/src/json-record.ts
-var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-
 // ../contracts/src/grok.ts
 var GROK_FIELD_ALIASES = {
   sessionId: "session_id",
@@ -2884,115 +3017,6 @@ var TIMEOUT_ACTION_THAT_REFUSES = "deny";
 var timeoutActionWithoutLocalPrompt = ({ mode, timeoutAction }) => mode !== "push_only" && timeoutAction === "approve" ? TIMEOUT_ACTION_THAT_REFUSES : timeoutAction;
 var TIMEOUT_ACTIONS = ["approve", "deny", "escalate", "wait"];
 var isTimeoutAction = (value) => typeof value === "string" && TIMEOUT_ACTIONS.includes(value);
-var MAX_AGENT_QUESTIONS = 4;
-var MIN_AGENT_QUESTION_OPTIONS = 2;
-var MAX_AGENT_QUESTION_OPTIONS = 4;
-var AGENT_QUESTION_HEADER_MAX = 40;
-var AGENT_QUESTION_OPTION_MAX = 100;
-var AGENT_QUESTION_DESCRIPTION_MAX = 500;
-var agentQuestionOptionIn = (raw) => {
-  if (!isRecord(raw) || typeof raw.label !== "string" || raw.label.length === 0) return [];
-  return [{
-    label: raw.label,
-    ...typeof raw.description === "string" ? { description: raw.description } : {}
-  }];
-};
-var agentQuestionFieldsIn = (raw) => {
-  if (!isRecord(raw) || typeof raw.question !== "string") return void 0;
-  return {
-    question: raw.question,
-    ...typeof raw.header === "string" ? { header: raw.header } : {},
-    multiSelect: raw.multiSelect === true,
-    ...typeof raw.allowOther === "boolean" ? { allowOther: raw.allowOther } : {},
-    options: Array.isArray(raw.options) ? raw.options.flatMap(agentQuestionOptionIn) : []
-  };
-};
-var parseAgentQuestion = (raw) => {
-  const question = agentQuestionFieldsIn(raw);
-  return question && question.options.length >= MIN_AGENT_QUESTION_OPTIONS ? question : void 0;
-};
-var parseAgentQuestions = (toolInput) => {
-  const questions = toolInput.questions;
-  if (!Array.isArray(questions) || questions.length === 0) return void 0;
-  if (questions.length > MAX_AGENT_QUESTIONS) return void 0;
-  const parsed = [];
-  for (const raw of questions) {
-    const one = parseAgentQuestion(raw);
-    if (!one || parsed.some((question) => question.question === one.question)) return void 0;
-    parsed.push(one);
-  }
-  return parsed;
-};
-var isTypedAnswerQuestion = (question) => question.options.length === 0;
-var typingCanAnswer = (question) => question.multiSelect === false && question.allowOther !== false;
-var optionCountCanBeAnswered = (question, optionCount) => optionCount === 0 ? typingCanAnswer(question) : optionCount >= MIN_AGENT_QUESTION_OPTIONS && optionCount <= MAX_AGENT_QUESTION_OPTIONS;
-var isAgentQuestionSet = (value) => {
-  if (!Array.isArray(value) || value.length === 0 || value.length > 4) return false;
-  const questions = /* @__PURE__ */ new Set();
-  for (const item of value) {
-    if (!isRecord(item)) return false;
-    const question = item;
-    if (typeof question.question !== "string" || question.question.length === 0 || questions.has(question.question) || question.header !== void 0 && typeof question.header !== "string" || typeof question.multiSelect !== "boolean" || question.allowOther !== void 0 && typeof question.allowOther !== "boolean" || !Array.isArray(question.options) || !optionCountCanBeAnswered(question, question.options.length)) return false;
-    const labels = /* @__PURE__ */ new Set();
-    for (const option of question.options) {
-      if (!option || typeof option !== "object" || Array.isArray(option)) return false;
-      const record3 = option;
-      const label = record3.label;
-      if (typeof label !== "string" || label.length === 0 || labels.has(label) || record3.description !== void 0 && typeof record3.description !== "string") return false;
-      labels.add(label);
-    }
-    questions.add(question.question);
-  }
-  return true;
-};
-var parseAgentQuestionAnswers = (questions, value) => {
-  let parsed;
-  try {
-    parsed = JSON.parse(value);
-  } catch {
-    return null;
-  }
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
-  const answers = parsed;
-  if (Object.keys(answers).length !== questions.length) return null;
-  for (const question of questions) {
-    const answer = answers[question.question];
-    if (typeof answer !== "string" || answer.trim().length === 0) return null;
-    const labels = new Set(question.options.map((option) => option.label));
-    if (!question.multiSelect) {
-      if (question.allowOther === false && !labels.has(answer)) return null;
-      continue;
-    }
-    try {
-      const selected = JSON.parse(answer);
-      if (!Array.isArray(selected)) {
-        if (question.allowOther === false) return null;
-        continue;
-      }
-      if (selected.length === 0 || new Set(selected).size !== selected.length || !selected.every((label) => typeof label === "string" && labels.has(label))) return null;
-    } catch {
-      if (question.allowOther === false) return null;
-    }
-  }
-  return answers;
-};
-var noOptionsWhenAbsent = (options) => options ?? [];
-var optionsNamedByLabel = (options) => Array.isArray(options) ? options.map((label) => ({ label })) : options;
-var offersOnlyItsOptions = (raw, options) => raw.isOther === false && Array.isArray(options) && options.length > 0;
-var codexQuestionFields = (raw, toolName) => {
-  if (!isRecord(raw) || raw.isSecret === true) return void 0;
-  const options = noOptionsWhenAbsent(raw.options);
-  if (toolName === CODEX_ASYNC_QUESTION_TOOL) {
-    return { question: raw.title, options: optionsNamedByLabel(options), multiSelect: false };
-  }
-  return { ...raw, options, multiSelect: raw.multiSelect ?? false, ...offersOnlyItsOptions(raw, options) ? { allowOther: false } : {} };
-};
-var agentQuestionsOf = (questions) => questions.flatMap((question) => agentQuestionFieldsIn(question) ?? []);
-var parseCodexQuestions = (toolName, toolInput) => {
-  const raw = Array.isArray(toolInput.questions) ? toolInput.questions : [];
-  const questions = raw.map((question) => codexQuestionFields(question, toolName));
-  return isAgentQuestionSet(questions) ? agentQuestionsOf(questions) : void 0;
-};
 var typedTextAsAnswers = (questions, text2) => {
   const [only, ...others] = questions;
   if (!only || others.length > 0 || !isTypedAnswerQuestion(only)) return null;
@@ -3004,14 +3028,6 @@ var isLoneTypedAnswerQuestion = (questions) => questions.length === 1 && questio
 var questionsShownAsASet = (questions) => isLoneTypedAnswerQuestion(questions) ? void 0 : questions;
 var agentQuestionContext = (header, project) => header ? `${header}: your agent is asking in ${project}` : `Your agent is asking in ${project}`;
 var answersToQuestionsAsAsked = (questions, answer) => questionsShownAsASet(questions) ? parseAgentQuestionAnswers(questions, answer) : typedTextAsAnswers(questions, answer);
-var CODEX_QUESTION_ANSWERED_IN_PUSHARY = "The user already answered this question in Pushary, so it was not shown again";
-var CODEX_QUESTION_CONTINUE = "Continue with this answer and do not ask it again";
-var quotedAnswerPair = ([question, answer]) => `${JSON.stringify(question)}: ${JSON.stringify(answer)}`;
-var codexQuestionAnswerReason = (answers) => {
-  const pairs = Object.entries(answers);
-  const answered = pairs.length === 1 ? `Their answer: ${JSON.stringify(pairs[0]?.[1] ?? "")}` : `Their answers: ${pairs.map(quotedAnswerPair).join("; ")}`;
-  return `${CODEX_QUESTION_ANSWERED_IN_PUSHARY}. ${answered}. ${CODEX_QUESTION_CONTINUE}`;
-};
 var INSTALL_SOURCES = [
   /** `npx pushary@latest ...`, the documented one-liner. */
   "npx",
@@ -5644,11 +5660,6 @@ var AGENT_QUESTION_STRATEGY = {
 };
 var UPDATED_INPUT_QUESTION_SOURCES = /* @__PURE__ */ new Set(["claude", "qoder", "codebuddy", "droid"]);
 var GROK_NATIVE_DIALOG_TOOLS = /* @__PURE__ */ new Set(["ask_user_question", "exit_plan_mode"]);
-var CODEX_QUESTION_TOOL = "request_user_input";
-var CODEX_ASYNC_QUESTION_TOOL = "request_user_input_async";
-var CODEX_QUESTION_TOOLS = [CODEX_QUESTION_TOOL, CODEX_ASYNC_QUESTION_TOOL];
-var CODEX_QUESTION_TOOL_NAMES = new Set(CODEX_QUESTION_TOOLS);
-var isCodexQuestionTool = (toolName) => typeof toolName === "string" && CODEX_QUESTION_TOOL_NAMES.has(toolName);
 var isCodexQuestionCall = (source, event, toolName) => source === "codex" && event === "PreToolUse" && isCodexQuestionTool(toolName);
 var codexQuestionGoesToPushary = (verdict) => verdict.kind === "gate" && !approvalWaitsAtTheAgentsPrompt(verdict.policy.mode);
 function agentQuestionStrategy(source, event, toolName) {
@@ -6179,6 +6190,17 @@ var hookActivationResult = (report) => {
 };
 
 export {
+  isRecord,
+  AGENT_QUESTION_HEADER_MAX,
+  AGENT_QUESTION_OPTION_MAX,
+  AGENT_QUESTION_DESCRIPTION_MAX,
+  parseAgentQuestions,
+  isTypedAnswerQuestion,
+  parseAgentQuestionAnswers,
+  CODEX_QUESTION_TOOLS,
+  isCodexQuestionTool,
+  parseCodexQuestions,
+  codexQuestionAnswerReason,
   CLAUDE_CONNECTOR_URL,
   CLAUDE_CONNECTOR_GUIDE,
   COWORK_CONNECTOR_LIMIT,
@@ -6193,7 +6215,6 @@ export {
   MANAGED_PROVIDERS,
   DISCONNECT_AGENT_IDS,
   normalizeAgentId,
-  isRecord,
   GROK_UNREADABLE_CALL,
   isGrokHookPayload,
   isGrokSessionEndStop,
@@ -6254,18 +6275,10 @@ export {
   approvalModeWithoutLocalPrompt,
   timeoutActionWithoutLocalPrompt,
   isTimeoutAction,
-  AGENT_QUESTION_HEADER_MAX,
-  AGENT_QUESTION_OPTION_MAX,
-  AGENT_QUESTION_DESCRIPTION_MAX,
-  parseAgentQuestions,
-  isTypedAnswerQuestion,
-  parseAgentQuestionAnswers,
-  parseCodexQuestions,
   plainAskOf,
   questionsShownAsASet,
   agentQuestionContext,
   answersToQuestionsAsAsked,
-  codexQuestionAnswerReason,
   normalizeInstallSource,
   HOOK_BUDGETS,
   HOOK_HOLD_BUDGET_ENV,
@@ -6309,8 +6322,6 @@ export {
   shouldDeferToNativeMode,
   AGENT_QUESTION_TOOL,
   AGENT_QUESTION_STRATEGY,
-  CODEX_QUESTION_TOOLS,
-  isCodexQuestionTool,
   codexQuestionGoesToPushary,
   agentQuestionStrategy,
   questionHandedToTheTerminal,

package/dist/{chunk-LVDC3RUE.js → chunk-BG4Y64FW.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-5SFM6XB4.js";
+} from "./chunk-ERK24P76.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-KSVCCSAO.js → chunk-CDQHQAS7.js}

@@ -2,23 +2,24 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-ATUZX4K7.js";
+} from "./chunk-IF26ZGZ7.js";
 import {
   AGENT_CHOICES
-} from "./chunk-ECJJKDP7.js";
+} from "./chunk-XV6S5PWW.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-QDFLBTUP.js";
+} from "./chunk-4MUFZU2G.js";
 import {
   CODEX_HOOK_EVENTS,
+  HOOK_SHELL,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-MYBCXDIL.js";
+} from "./chunk-6MJWYYAS.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";
@@ -101,9 +102,10 @@ var record = (value) => value && typeof value === "object" && !Array.isArray(val
 var CLAUDE_HOOK_BINARY = /pushary-[a-z-]*hook/;
 var EXACT_HOOK_BINARY = /^pushary-[a-z-]*(hook|gate)$/;
 var pusharyHookExecutable = (command) => {
-  const tokens = command.match(/"[^"]*"|'[^']*'|\S+/g) ?? [];
+  const tokens = command.match(/"(?:\\.|[^"\\])*"|'[^']*'|\S+/g) ?? [];
   for (const raw of tokens.reverse()) {
-    const token = raw[0] === '"' && raw.at(-1) === '"' || raw[0] === "'" && raw.at(-1) === "'" ? raw.slice(1, -1) : raw;
+    const unquoted = raw[0] === '"' && raw.at(-1) === '"' || raw[0] === "'" && raw.at(-1) === "'" ? raw.slice(1, -1) : raw;
+    const token = command.startsWith(`${HOOK_SHELL} `) && raw[0] === '"' ? unquoted.replace(/\\(["\\$`])/g, "$1") : unquoted;
     const name = token.split(/[/\\]/).pop()?.replace(/\.(cmd|exe|mjs)$/i, "") ?? "";
     if (name === HOOK_LOCATOR_BINARY || EXACT_HOOK_BINARY.test(name)) return token;
   }

package/dist/{chunk-TN74MUMB.js → chunk-CEQ2AZH4.js}

@@ -6,38 +6,39 @@ import {
 } from "./chunk-QW3FRUFB.js";
 import {
   ensureDaemonRunning
-} from "./chunk-QP3XPS5U.js";
+} from "./chunk-HC3FHDKB.js";
 import {
   hookOwnerOf
-} from "./chunk-KSVCCSAO.js";
+} from "./chunk-CDQHQAS7.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-JSQOHMNJ.js";
+} from "./chunk-2AELPDMT.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-N3NSWWNU.js";
+} from "./chunk-GAMVAORR.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-C3IWX6KU.js";
+} from "./chunk-7JXJJNQ5.js";
 import {
   readTranscriptPreference
-} from "./chunk-IRZ5FVWG.js";
+} from "./chunk-WN3RACVD.js";
 import {
+  claudeConfigDir,
   codexHome,
   pusharyDir
-} from "./chunk-MYBCXDIL.js";
+} from "./chunk-6MJWYYAS.js";
 import {
   writeJsonAtomic
 } from "./chunk-QENTGE75.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-LVDC3RUE.js";
+} from "./chunk-BG4Y64FW.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";
@@ -92,7 +93,6 @@ var transcriptLinesSeenLive = (lines, epochStartedAtMs, startedBeforeEpoch) => l
 });
 
 // src/transcript-sync.ts
-import { homedir as homedir2 } from "os";
 import { join as join2, resolve } from "path";
 import { closeSync, existsSync as existsSync2, fstatSync, openSync, readFileSync as readFileSync2, readSync, statSync as statSync2 } from "fs";
 
@@ -165,7 +165,7 @@ var sweepStaleSessionKeys = (now = Date.now(), dir = sessionDir()) => {
 // src/transcript-sync.ts
 var claudeTranscriptPath = (cwd, sessionId) => {
   const projectId = resolve(cwd).replace(/[^a-zA-Z0-9-]/g, "-");
-  const configDir = process.env.CLAUDE_CONFIG_DIR || join2(homedir2(), ".claude");
+  const configDir = claudeConfigDir();
   return join2(configDir, "projects", projectId, `${sessionId}.jsonl`);
 };
 var createSyncState = () => ({
@@ -446,7 +446,7 @@ var startTranscriptSync = (opts) => {
 };
 
 // src/transcript-registration.ts
-import { homedir as homedir3 } from "os";
+import { homedir as homedir2 } from "os";
 var defaultRegistryDirectory = () => process.env.PUSHARY_TRANSCRIPT_REGISTRY_DIR || join3(pusharyDir(), "transcript-capture");
 var cliRegistry = (apiKey = getApiKey()) => ({ apiKey, baseUrl: getBaseUrl(), directory: defaultRegistryDirectory() });
 var accountFor = (registry) => createHash("sha256").update(`${registry.baseUrl}\0${registry.apiKey}`).digest("hex");
@@ -466,7 +466,7 @@ var registeredTranscriptEnabled = (apiKey, sessionId) => {
   }
 };
 var macOwnsClaudeHooks = (cwd) => [
-  join3(process.env.CLAUDE_CONFIG_DIR || join3(homedir3(), ".claude"), "settings.json"),
+  join3(claudeConfigDir(), "settings.json"),
   join3(cwd, ".claude", "settings.json"),
   join3(cwd, ".claude", "settings.local.json")
 ].some((path) => {
@@ -478,7 +478,7 @@ var macOwnsClaudeHooks = (cwd) => [
 });
 var TRANSCRIPT_ROOT_NAME = { claude: "projects", codex: "sessions" };
 var transcriptRoots = (source) => {
-  const home = homedir3();
+  const home = homedir2();
   if (source === "codex") return [join3(codexHome(), TRANSCRIPT_ROOT_NAME.codex)];
   const configured = process.env.CLAUDE_CONFIG_DIR;
   return [join3(configured || join3(home, ".claude"), TRANSCRIPT_ROOT_NAME.claude), join3(home, ".claude", TRANSCRIPT_ROOT_NAME.claude)];

package/dist/{chunk-X6F4BQEE.js → chunk-CSOROFJY.js}

@@ -1,9 +1,9 @@
 import {
   APPROVAL_SETTINGS_PATH
-} from "./chunk-VLJ5C6IT.js";
+} from "./chunk-YGE6ML3O.js";
 import {
   readMacAppAgentKey
-} from "./chunk-T2BEIPK2.js";
+} from "./chunk-U7NR4JVD.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -13,13 +13,13 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-IRZ5FVWG.js";
+} from "./chunk-WN3RACVD.js";
 import {
   absoluteUrl
-} from "./chunk-S54YLXWW.js";
+} from "./chunk-METMK3L4.js";
 import {
   isValidApiKey
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";

package/dist/{chunk-CZULJ647.js → chunk-DJ7EZIQA.js}

@@ -1,13 +1,13 @@
 import {
   callMcpTool
-} from "./chunk-ZL3UR6M5.js";
+} from "./chunk-SEILUNWB.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-5SFM6XB4.js";
+} from "./chunk-ERK24P76.js";
 import {
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-IUOUNRLH.js → chunk-ELLJPP6O.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-JSQOHMNJ.js";
+} from "./chunk-2AELPDMT.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-N3NSWWNU.js";
+} from "./chunk-GAMVAORR.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-5SFM6XB4.js → chunk-ERK24P76.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {
@@ -41,7 +41,7 @@ var COMMAND_LIST = [
     module: "pushary-codex-session",
     summary: "Experimental Codex extras that ordinary setup does not turn on",
     detail: [
-      "Use --app-cards on|off|status so the Codex app also asks Pushary before it uses an app on this Mac.",
+      "Use --app-cards on|off|status so the Codex app also asks Pushary before it uses an app on this Mac, or before its browser opens a site, downloads or uploads.",
       "Use --desktop [app path] to do the same for one launch. Quit Codex first; a running app is not attached.",
       "Use --cwd <directory> to start a managed Codex terminal session in a project."
     ],
@@ -146,6 +146,16 @@ var resolveCommandName = (token) => {
 };
 var isInvocationOf = (token, name) => resolveCommandName(token) === name;
 var COMMAND_OPTIONS = {
+  login: [
+    ["--with-token", "Read an API key from stdin"],
+    ["--no-browser", "Print the sign-in link without opening a browser"],
+    ["--json", "Emit the result as one object instead of the screen"],
+    ["--force", "Start a new sign-in instead of reusing the saved key"]
+  ],
+  pair: [
+    ["--app", "Pair with the Pushary app"],
+    ["--browser", "Pair through a browser (default)"]
+  ],
   cowork: [
     ["--open", "Also open the setup guide in your browser"],
     ["--instructions", "Print standing instructions to paste into Cowork"],

package/dist/{chunk-DQ565WFA.js → chunk-EZHY65QA.js}

@@ -1,7 +1,7 @@
 import {
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-ZL3UR6M5.js";
+} from "./chunk-SEILUNWB.js";
 import {
   CLIENT_REPORT_DISABLE_ENV,
   isDisabledByEnv
@@ -9,14 +9,14 @@ import {
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-5DZHKNBU.js";
+} from "./chunk-4MWRR5IT.js";
 import {
   clientReportClaims
-} from "./chunk-MYBCXDIL.js";
+} from "./chunk-6MJWYYAS.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-LVDC3RUE.js";
+} from "./chunk-BG4Y64FW.js";
 import {
   ASK_AGENT_NAME_MAX,
   CLIENT_REPORT_PATH,
@@ -24,7 +24,7 @@ import {
   GATE_PERMISSION_MODE_MAX_LENGTH,
   degradedLine,
   truncateLine
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";
@@ -114,6 +114,7 @@ var claimReportWindow = (claimsDir, key, now) => {
 
 // src/client-report.ts
 var CLIENT_REPORT_TIMEOUT_MS = 1e3;
+var CLIENT_REPORT_MAX_ATTEMPTS = 2;
 var readApiKey = () => {
   try {
     return getApiKey();
@@ -147,12 +148,21 @@ var createClientErrorReporter = (deps) => {
       const apiKey = deps.apiKey();
       const now = deps.now();
       if (!apiKey || !claimReport(reportKey(event), now)) return;
-      await deps.fetchImpl(`${deps.baseUrl()}${CLIENT_REPORT_PATH}`, {
-        method: "POST",
-        headers: { "Authorization": `Bearer ${apiKey}`, "Content-Type": "application/json" },
-        body: JSON.stringify({ ...event, occurredAt: new Date(now).toISOString() }),
-        signal: AbortSignal.timeout(CLIENT_REPORT_TIMEOUT_MS)
-      });
+      const signal = AbortSignal.timeout(CLIENT_REPORT_TIMEOUT_MS);
+      for (let attempt = 0; attempt < CLIENT_REPORT_MAX_ATTEMPTS && !signal.aborted; attempt++) {
+        try {
+          const response = await deps.fetchImpl(`${deps.baseUrl()}${CLIENT_REPORT_PATH}`, {
+            method: "POST",
+            headers: { "Authorization": `Bearer ${apiKey}`, "Content-Type": "application/json" },
+            body: JSON.stringify({ ...event, occurredAt: new Date(now).toISOString() }),
+            signal
+          });
+          await response.body?.cancel();
+          if (response.ok || response.status < 500 && response.status !== 429) return;
+        } catch {
+          if (signal.aborted) return;
+        }
+      }
     } catch {
       return;
     }