@pushary/agent-hooks 1.9.60 → 1.9.62

package/dist/{chunk-QLMOU57V.js → chunk-7EHZXZB2.js}

@@ -4,19 +4,19 @@ import {
   outcomeOfFailedAsk,
   reportMachineDenial,
   storedWaitDeadline
-} from "./chunk-625DZLT5.js";
+} from "./chunk-67Q3Q5IO.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-SVQWHV65.js";
+} from "./chunk-44FNEAXK.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-RPPXQNIA.js";
+} from "./chunk-3IFCXMC6.js";
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-PUHP4IBA.js";
+} from "./chunk-557ZE5EX.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -40,10 +40,10 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-W2IVTHIG.js";
+} from "./chunk-LWR5VKNC.js";
 import {
   repoKeyFor
-} from "./chunk-YPD3MTFU.js";
+} from "./chunk-4K6YZPZ3.js";
 import {
   askUser,
   cancelQuestion,
@@ -52,26 +52,27 @@ import {
   isAwayPaused,
   isDecisionStopped,
   isLocalQuestionHandoff,
+  isQuestionLimitRefusal,
   pollForAnswer,
   reportClientError,
   requestGate,
   sendNotification,
   waitForQuestion,
   waitsForThePhone
-} from "./chunk-EZHY65QA.js";
+} from "./chunk-RSNN2TPE.js";
 import {
   getMachineId
-} from "./chunk-O6IUZGWV.js";
+} from "./chunk-G3ZDCYMU.js";
 import {
   claudeConfigDir
-} from "./chunk-6MJWYYAS.js";
+} from "./chunk-6YSEOXP5.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-BG4Y64FW.js";
+} from "./chunk-DFKEJARZ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ERK24P76.js";
+} from "./chunk-FG5HMJ7C.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -80,6 +81,7 @@ import {
   GATE_WIRE,
   HANDED_BACK_REASON,
   PLAN_DECLINED_REASON,
+  QUESTION_LIMIT_PROMPT_REASON,
   SCOPE_BATCH_REASON,
   SOLE_GATE_SIGNED_OUT_REASON,
   SOLE_GATE_SUBSCRIPTION_REASON,
@@ -109,14 +111,17 @@ import {
   hookWaitDeadline,
   hookWritePath,
   isBlockedActionRequest,
+  isCursorHookPayload,
   isPermissionRequestOwnedByPreToolUse,
   isPusharyOwnTool,
   parseAgentQuestions,
   questionHandedToTheTerminal,
+  questionLimitHandBack,
+  refusesWhenUnanswered,
   resolveGate,
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";
@@ -197,8 +202,12 @@ var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, u
 var ask = (reason) => claudePreToolUseOutput("ask", reason);
 var halted = (reason) => claudeStoppedPreToolUseOutput(reason);
 var undecidedCall = (reason) => PUSHARY_IS_SOLE_GATE ? deny(reason) : void 0;
-var outcomeOfFailedPermissionAsk = (error, sessionId) => outcomeOfFailedAsk(error, sessionId, halted(UNVERIFIABLE_APPROVAL_REASON)) ?? undecidedCall(SOLE_GATE_SUBSCRIPTION_REASON);
-var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget, decision, signals) => {
+var questionLimitOutput = (handBack) => handBack.kind === "refuse" ? deny(handBack.reason) : ask(QUESTION_LIMIT_PROMPT_REASON);
+var outcomeOfFailedPermissionAsk = (error, sessionId, questionLimitFacts) => {
+  if (isQuestionLimitRefusal(error)) return questionLimitOutput(questionLimitHandBack(questionLimitFacts));
+  return outcomeOfFailedAsk(error, sessionId, halted(UNVERIFIABLE_APPROVAL_REASON)) ?? undecidedCall(SOLE_GATE_SUBSCRIPTION_REASON);
+};
+var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget, decision, signals, agentPromptFollows) => {
   const effectiveWait = effectiveWaitSeconds(timeoutAction, timeoutSeconds, "claude");
   const now = Date.now();
   const requestedDeadline = hookWaitDeadline(START_MS, effectiveWait, "claude", now);
@@ -218,7 +227,10 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
       ...decision
     });
   } catch (error) {
-    return outcomeOfFailedPermissionAsk(error, sessionId);
+    return outcomeOfFailedPermissionAsk(error, sessionId, {
+      refusesUnanswered: refusesWhenUnanswered({ mode: "push_only", timeoutAction }),
+      agentPromptFollows
+    });
   }
   if (isDecisionStopped(result)) return halted(DECISION_STOP_REASON);
   const deadline = storedWaitDeadline(result, requestedDeadline);
@@ -246,7 +258,7 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
 var handleTerminalOnly = () => {
   return ask();
 };
-var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds, sessionId, machineId, toolName, toolTarget, decision, signals) => {
+var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds, sessionId, machineId, toolName, toolTarget, decision, signals, agentPromptFollows) => {
   const requestedDeadline = hookWaitDeadline(START_MS, pushFirstSeconds, "claude", Date.now());
   let result;
   try {
@@ -263,7 +275,7 @@ var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds,
       ...decision
     });
   } catch (error) {
-    return outcomeOfFailedPermissionAsk(error, sessionId);
+    return outcomeOfFailedPermissionAsk(error, sessionId, { refusesUnanswered: false, agentPromptFollows });
   }
   if (isDecisionStopped(result)) return halted(DECISION_STOP_REASON);
   if (waitsForThePhone(result)) announceWait(pushFirstSeconds, result.answerUrl, sessionId);
@@ -324,6 +336,7 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
   const sessionId = input.session_id;
   const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
   const ownPrompt = hasItsOwnApprovalPrompt(ACTIVE_SOURCE);
+  const agentPromptFollows = ownPrompt && !isCursorHookPayload(input);
   const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
   const decision = {
     toolPath: hookWritePath(input.tool_name, input.tool_input),
@@ -347,15 +360,15 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
   const runHandler = () => {
     switch (ownPrompt ? toolPolicy.mode : approvalModeWithoutLocalPrompt(toolPolicy.mode)) {
       case "push_only":
-        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, ownPrompt ? toolPolicy.timeoutAction : timeoutActionWithoutLocalPrompt(toolPolicy), sessionId, machineId, input.tool_name, toolTarget, decision, signals);
+        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, ownPrompt ? toolPolicy.timeoutAction : timeoutActionWithoutLocalPrompt(toolPolicy), sessionId, machineId, input.tool_name, toolTarget, decision, signals, agentPromptFollows);
       case "terminal_only":
         return Promise.resolve(handleTerminalOnly());
       case "push_first":
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision, signals);
+        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision, signals, agentPromptFollows);
       case "notify_only":
         return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
       default:
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision, signals);
+        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision, signals, agentPromptFollows);
     }
   };
   const result = await runHandler();

package/dist/{chunk-2AELPDMT.js → chunk-7ETELRQX.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-7BHI3PZN.js → chunk-7GU4PXE5.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   redactSecretsFromContent
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/cli/json.ts
 var writeStdoutFully = (text) => new Promise((resolve, reject) => {

package/dist/{chunk-CDQHQAS7.js → chunk-7NJ4TDUH.js}

@@ -2,24 +2,24 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-IF26ZGZ7.js";
+} from "./chunk-LCNN7UOE.js";
 import {
   AGENT_CHOICES
-} from "./chunk-XV6S5PWW.js";
+} from "./chunk-MURJ4WAL.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-4MUFZU2G.js";
+} from "./chunk-F35YILEN.js";
 import {
   CODEX_HOOK_EVENTS,
   HOOK_SHELL,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-6MJWYYAS.js";
+} from "./chunk-6YSEOXP5.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-X3YKQJCZ.js → chunk-7NXB7OVX.js}

@@ -2,7 +2,7 @@ import {
   isApprovalMode,
   isRecord,
   isTimeoutAction
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/cli/settings-response.ts
 var isFiniteNumber = (value) => typeof value === "number" && Number.isFinite(value);

package/dist/{chunk-XEJOPVCG.js → chunk-A4CZPUQ6.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-YGE6ML3O.js → chunk-AFV3FQNG.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-ADR3KHOC.js";
+} from "./chunk-NAZRRXZM.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
 import {
   readKeySource
-} from "./chunk-WN3RACVD.js";
+} from "./chunk-W3CBFLIX.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-METMK3L4.js";
+} from "./chunk-Q4WTIKM6.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-BG4Y64FW.js";
+} from "./chunk-DFKEJARZ.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-V57XLKZL.js → chunk-BIUSODLS.js}

@@ -1,9 +1,9 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-56JCQQLS.js";
+} from "./chunk-EVZDYG7L.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ERK24P76.js";
+} from "./chunk-FG5HMJ7C.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-2QREHU4O.js → chunk-CFIQ3252.js}

@@ -366,9 +366,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-ETDP32LO.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-T6ILR644.js");
-    const { autoUpdateLock } = await import("./paths-IIOQZESZ.js");
+    const { withUpgradeLock } = await import("./global-upgrade-5F4CSXED.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-IAZC5644.js");
+    const { autoUpdateLock } = await import("./paths-HEMK2ALW.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;

package/dist/{chunk-BG4Y64FW.js → chunk-DFKEJARZ.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ERK24P76.js";
+} from "./chunk-FG5HMJ7C.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-S54C6TQC.js → chunk-EA6574W2.js}

@@ -1,22 +1,22 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-QGSHV3WO.js";
+} from "./chunk-6HIYOY6I.js";
 import {
   nativeClaudeInstallPath
 } from "./chunk-VUFHYMSP.js";
 import {
   grokHome
-} from "./chunk-PUHP4IBA.js";
+} from "./chunk-557ZE5EX.js";
 import {
   claudeConfigDir,
   codexHomeFrom
-} from "./chunk-6MJWYYAS.js";
+} from "./chunk-6YSEOXP5.js";
 import {
   resolvePathBinary
-} from "./chunk-2QREHU4O.js";
+} from "./chunk-CFIQ3252.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-FDWMG6NY.js → chunk-EO6CL4PD.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-SEILUNWB.js";
+} from "./chunk-ESXGCZDA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ERK24P76.js";
+} from "./chunk-FG5HMJ7C.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-SEILUNWB.js → chunk-ESXGCZDA.js}

@@ -1,12 +1,17 @@
 import {
   keyCheckFromResponse
-} from "./chunk-METMK3L4.js";
+} from "./chunk-Q4WTIKM6.js";
 import {
   installNetworkDefaults
-} from "./chunk-4MWRR5IT.js";
+} from "./chunk-HSRNWCXJ.js";
 import {
   getBaseUrl
-} from "./chunk-BG4Y64FW.js";
+} from "./chunk-DFKEJARZ.js";
+import {
+  isRecord,
+  isToolErrorResult,
+  toolFailureCodeOfResult
+} from "./chunk-FXECTHAG.js";
 
 // src/retry.ts
 var isRetryable = (err) => {
@@ -49,6 +54,21 @@ var SubscriptionRequiredError = class extends Error {
     this.upgradeUrl = upgradeUrl;
   }
 };
+var McpToolError = class extends Error {
+  tool;
+  failure;
+  constructor(tool, failure, message) {
+    super(message);
+    this.name = "McpToolError";
+    this.tool = tool;
+    this.failure = failure;
+  }
+};
+var firstTextOf = (content) => {
+  const first = Array.isArray(content) ? content[0] : void 0;
+  return isRecord(first) && typeof first.text === "string" && first.text.length > 0 ? first.text : null;
+};
+var toolErrorOf = (toolName, result) => new McpToolError(toolName, toolFailureCodeOfResult(result), firstTextOf(result.content) ?? `Pushary ${toolName} failed`);
 var parseSseMessages = (body) => {
   const messages = [];
   for (const event of body.split(/\r?\n\r?\n/)) {
@@ -124,6 +144,8 @@ var callMcpTool = async (apiKey, toolName, params, options = {}) => {
     method: "tools/call",
     params: { name: toolName, arguments: params }
   }, options);
+  const result = data.result;
+  if (isToolErrorResult(result)) throw toolErrorOf(toolName, result);
   const text = data.result?.content?.[0]?.text;
   if (!text) throw new Error("Empty response from Pushary");
   return JSON.parse(text);
@@ -133,6 +155,7 @@ export {
   isRetryable,
   withRetry,
   SubscriptionRequiredError,
+  McpToolError,
   parseSseMessages,
   sendMcpRequest,
   callMcpTool

package/dist/{chunk-CEQ2AZH4.js → chunk-EUNSJKJJ.js}

@@ -6,39 +6,39 @@ import {
 } from "./chunk-QW3FRUFB.js";
 import {
   ensureDaemonRunning
-} from "./chunk-HC3FHDKB.js";
+} from "./chunk-5R23J52J.js";
 import {
   hookOwnerOf
-} from "./chunk-CDQHQAS7.js";
+} from "./chunk-7NJ4TDUH.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-2AELPDMT.js";
+} from "./chunk-7ETELRQX.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-GAMVAORR.js";
+} from "./chunk-UUAVYIWJ.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-7JXJJNQ5.js";
+} from "./chunk-ZEDGKCCM.js";
 import {
   readTranscriptPreference
-} from "./chunk-WN3RACVD.js";
+} from "./chunk-W3CBFLIX.js";
 import {
   claudeConfigDir,
   codexHome,
   pusharyDir
-} from "./chunk-6MJWYYAS.js";
+} from "./chunk-6YSEOXP5.js";
 import {
   writeJsonAtomic
 } from "./chunk-QENTGE75.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-BG4Y64FW.js";
+} from "./chunk-DFKEJARZ.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-56JCQQLS.js → chunk-EVZDYG7L.js}

@@ -7,10 +7,10 @@ import {
   codexHome,
   codexHooksJsonIn,
   isPusharyCodexCommand
-} from "./chunk-6MJWYYAS.js";
+} from "./chunk-6YSEOXP5.js";
 import {
   resolvePathBinary
-} from "./chunk-2QREHU4O.js";
+} from "./chunk-CFIQ3252.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";

package/dist/{chunk-4MUFZU2G.js → chunk-F35YILEN.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-6MJWYYAS.js";
+} from "./chunk-6YSEOXP5.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-ERK24P76.js → chunk-FG5HMJ7C.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {

package/dist/{chunk-NKLNU577.js → chunk-FX7KDF47.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-XV6S5PWW.js";
+} from "./chunk-MURJ4WAL.js";
 import {
   parseFlags
 } from "./chunk-NMUI3ZWG.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-PPY5N2E6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ERK24P76.js";
+} from "./chunk-FG5HMJ7C.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-AXJLJJ3M.js → chunk-FXECTHAG.js}

@@ -976,6 +976,40 @@ var redactSecrets = (text2) => applyRedactionRules(SECRET_REDACTION_RULES, text2
 var redactSecretsFromContent = (text2) => applyRedactionRules(CUT_OFF_TEXT_REDACTION_RULES, text2);
 var redactSecretsDeep = (text2) => redactSecrets(text2).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
 
+// ../contracts/src/cursor.ts
+var CURSOR_GATE_EVENTS = ["beforeShellExecution", "beforeMCPExecution", "preToolUse"];
+var CURSOR_GATE_SCRIPT = "pushary-gate.mjs";
+var CURSOR_SHELL_TOOL = "Shell";
+var CURSOR_MCP_TOOL_PREFIX = "MCP:";
+var CURSOR_FILE_GATE_TOOLS = ["Write", "Delete", "Edit"];
+var CURSOR_GATE_COVERAGE = [
+  { event: "beforeShellExecution", covers: { kind: "named", tools: [CURSOR_SHELL_TOOL] }, matcherNamesTools: false },
+  { event: "beforeMCPExecution", covers: { kind: "prefix", prefix: CURSOR_MCP_TOOL_PREFIX }, matcherNamesTools: false },
+  { event: "preToolUse", covers: { kind: "named", tools: CURSOR_FILE_GATE_TOOLS }, matcherNamesTools: true }
+];
+var isCursorHookPayload = (value) => isRecord(value) && typeof value.cursor_version === "string" && value.cursor_version.length > 0;
+var NO_CURSOR_GATE = [];
+var PLAIN_TOOL_NAME = /^[\w:]+$/;
+var matcherMatchesEveryCall = (matcher) => matcher === void 0 || matcher === "" || matcher === "*";
+var isPlainToolName = (name) => PLAIN_TOOL_NAME.test(name);
+var toolNamesInMatcher = (matcher) => {
+  if (typeof matcher !== "string") return [];
+  const names = matcher.split("|");
+  return names.every(isPlainToolName) ? names : [];
+};
+var narrowedByMatcher = (covers, matcher) => {
+  if (covers.kind !== "named") return null;
+  const named = toolNamesInMatcher(matcher);
+  const tools = covers.tools.filter((tool) => named.includes(tool));
+  return tools.length > 0 ? { kind: "named", tools } : null;
+};
+var toolsCoveredByGateEntry = (coverage, matcher) => {
+  if (matcherMatchesEveryCall(matcher)) return coverage.covers;
+  return coverage.matcherNamesTools ? narrowedByMatcher(coverage.covers, matcher) : null;
+};
+var toolMatches = (match, toolName) => match.kind === "named" ? match.tools.includes(toolName) : toolName.startsWith(match.prefix);
+var cursorGateOwnsToolCall = (registration, toolName) => typeof toolName === "string" && registration.some((match) => toolMatches(match, toolName));
+
 // ../contracts/src/shell-analysis.ts
 var SHELL_WORD_SEPARATOR = /[ \t\n]/;
 var ARITHMETIC_EVALUATING_EXPANSION = /\$[#+=~^]*(?:[A-Za-z_][A-Za-z0-9_]*|[0-9]+|[-?$!@*#])?\[/;
@@ -2612,6 +2646,23 @@ var AUTH_REJECTION_REASONS = [
   "site_not_found",
   ...AGENT_SITE_REJECTION_REASONS
 ];
+var TOOL_FAILURE_META_KEY = "pushary/failure";
+var TOOL_FAILURE_CODES = {
+  questionLimit: "question_limit",
+  invalidRequest: "invalid_request"
+};
+var TOOL_FAILURE_CODE_VALUES = Object.values(TOOL_FAILURE_CODES);
+var isToolFailureCode = (value) => typeof value === "string" && TOOL_FAILURE_CODE_VALUES.includes(value);
+var isToolErrorResult = (result) => isRecord(result) && result.isError === true;
+var toolFailureMetaOf = (result) => {
+  const meta = result._meta;
+  return isRecord(meta) && Object.hasOwn(meta, TOOL_FAILURE_META_KEY) ? meta[TOOL_FAILURE_META_KEY] : void 0;
+};
+var toolFailureCodeOfResult = (result) => {
+  if (!isToolErrorResult(result)) return null;
+  const code = toolFailureMetaOf(result);
+  return isToolFailureCode(code) ? code : null;
+};
 
 // ../contracts/src/setup-wire.ts
 var PAIR_TTL_SECONDS = 900;
@@ -3112,10 +3163,10 @@ var hookWaitDeadline = (startMs, policyWaitSeconds, agent, nowMs) => {
 var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + hookMaxWaitSeconds(agent) * 1e3 < nowMs + Math.max(policyWaitSeconds, 0) * 1e3;
 var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
 var OPENCODE_APPROVAL_EVENT = "permission.ask";
-var CURSOR_GATE_EVENTS = ["beforeShellExecution", "beforeMCPExecution", "preToolUse"];
 var hasNativeApprovalPrompt = (source, event) => !(source === "cursor" && event === "preToolUse") && !(source === "antigravity" && event === "PreToolUse");
 var SUPPORT_EMAIL = "business@pushary.com";
 var SUPPORT_DISCORD = "https://discord.gg/9v3VvUByrr";
+var HOOK_VERSION_PATTERN = /^\d+\.\d+\.\d+$/;
 var HOOK_LOCATOR_BINARY = "pushary-bridge";
 var isTokenCount = (value) => typeof value === "number" && Number.isInteger(value) && value >= 0;
 var reportableSessionId = (value) => typeof value === "string" && value.length > 0 && value.length <= SESSION_ID_MAX_LENGTH ? value : null;
@@ -5769,9 +5820,16 @@ var codexAskUnanswered = (ask) => ({ kind: "deny", reason: unansweredRefusalReas
 var ruleApprovesAfterItsFullWindow = (ask) => ask.mode === "push_only" && ask.fullWindowServed && ask.timeoutAction === "approve";
 var codexUnansweredPreToolUse = (ask) => ruleApprovesAfterItsFullWindow(ask) ? CODEX_ASK_PASSES : codexAskUnanswered(ask);
 var HANDED_BACK_REASON = "Handling on your machine";
+var HAND_BACK_TO_THE_AGENTS_PROMPT = { kind: "agent_prompt" };
 var HAND_BACK_WITHOUT_A_PROMPT = { kind: "refuse", reason: NO_AGENT_PROMPT_REASON };
 var CODEX_HAND_BACK_REASON = "You chose to handle this on your machine, so it did not run. Ask Codex to run it again while you are at your computer, or run it yourself.";
 var CODEX_PRE_TOOL_USE_HAND_BACK = { kind: "refuse", reason: CODEX_HAND_BACK_REASON };
+var QUESTION_LIMIT_REASON = "Pushary already has as many open questions in this session as it allows, so nobody was asked about this and it did not run. Wait until the person answers or cancels one before trying it again.";
+var QUESTION_LIMIT_PROMPT_REASON = "Pushary has too many open questions in this session, so this was not sent to the phone. Approve it here.";
+var QUESTION_LIMIT_REFUSAL = { kind: "refuse", reason: QUESTION_LIMIT_REASON };
+var questionLimitRefuses = ({ refusesUnanswered, agentPromptFollows }) => refusesUnanswered || !agentPromptFollows;
+var questionLimitHandBack = (facts) => questionLimitRefuses(facts) ? QUESTION_LIMIT_REFUSAL : HAND_BACK_TO_THE_AGENTS_PROMPT;
+var refusesWhenUnanswered = ({ mode, timeoutAction }) => mode === "push_only" && timeoutAction === "deny";
 var codexDeferredPreToolUse = () => ({ kind: "deny", reason: CODEX_PRE_TOOL_USE_HAND_BACK.reason });
 var isScopeReason = (scopeReason) => typeof scopeReason === "string" && scopeReason.length > 0;
 var scopeBreachReasonOf = (verdict) => verdict.kind === "gate" && isScopeReason(verdict.scopeReason) ? verdict.scopeReason : void 0;
@@ -6239,6 +6297,13 @@ export {
   redactSecrets,
   redactSecretsFromContent,
   redactSecretsDeep,
+  CURSOR_GATE_EVENTS,
+  CURSOR_GATE_SCRIPT,
+  CURSOR_GATE_COVERAGE,
+  isCursorHookPayload,
+  NO_CURSOR_GATE,
+  toolsCoveredByGateEntry,
+  cursorGateOwnsToolCall,
   degradedLine,
   hookWritePath,
   MAX_HOOK_ACTIVATION_EVIDENCE_ROWS,
@@ -6246,6 +6311,9 @@ export {
   hookActivationResult,
   CLIENT_REPORT_PATH,
   clientContextHeaders,
+  TOOL_FAILURE_CODES,
+  isToolErrorResult,
+  toolFailureCodeOfResult,
   PAIR_TTL_SECONDS,
   computerOsOfPlatform,
   SETUP_AGENT_CHOICES,
@@ -6290,10 +6358,10 @@ export {
   hookWaitClamped,
   effectiveWaitSeconds,
   OPENCODE_APPROVAL_EVENT,
-  CURSOR_GATE_EVENTS,
   hasNativeApprovalPrompt,
   SUPPORT_EMAIL,
   SUPPORT_DISCORD,
+  HOOK_VERSION_PATTERN,
   HOOK_LOCATOR_BINARY,
   isTokenCount,
   reportableSessionId,
@@ -6342,6 +6410,9 @@ export {
   codexUnansweredPreToolUse,
   HANDED_BACK_REASON,
   HAND_BACK_WITHOUT_A_PROMPT,
+  QUESTION_LIMIT_PROMPT_REASON,
+  questionLimitHandBack,
+  refusesWhenUnanswered,
   codexDeferredPreToolUse,
   scopeBreachReasonOf,
   codexPreToolUseDelivery,