@pushary/agent-hooks 1.9.71 → 1.9.73

package/dist/{chunk-IYMYGKFB.js → chunk-AC5TVOAH.js}

@@ -3,13 +3,13 @@ import {
   loadPin,
   savePin,
   verifyRecipients
-} from "./chunk-FTOKESSK.js";
+} from "./chunk-FB262EOM.js";
 import {
   ensureDaemonRunning
-} from "./chunk-G3J5JKEJ.js";
+} from "./chunk-WJJVCDEU.js";
 import {
   hookOwnerOf
-} from "./chunk-WOZLV3LN.js";
+} from "./chunk-QAWWTRDD.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
@@ -18,26 +18,26 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-LA3MMHLO.js";
+} from "./chunk-JC7XUZST.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-TATE22GH.js";
+} from "./chunk-S63VIM7E.js";
 import {
   readTranscriptPreference
-} from "./chunk-D536PHXF.js";
+} from "./chunk-NGNBX3YH.js";
 import {
   claudeConfigDir,
   codexHome,
   pusharyDir
-} from "./chunk-SMIU5URV.js";
+} from "./chunk-7S46LCKD.js";
 import {
   writeJsonAtomic
-} from "./chunk-T7FPZN5V.js";
+} from "./chunk-RZVWEDIS.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-X2KK42JA.js";
+} from "./chunk-R5PZPROX.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";
@@ -462,8 +462,7 @@ var withoutTrailingSlash = (url) => url.replace(/\/+$/, "");
 var sameServer = (url, registry) => withoutTrailingSlash(url) === withoutTrailingSlash(registry.baseUrl);
 var fileFor2 = (registry, sessionId) => join3(registry.directory, `${createHash("sha256").update(accountFor(registry) + sessionId).digest("hex")}.json`);
 var permitted = (registry, raw) => raw.account === accountFor(registry) && consent(raw) && !raw.drained && (raw.source !== "claude" || !!raw.expectedSiteId || !macOwnsClaudeHooks(raw.cwd)) && (!raw.expectedSiteId || raw.expectedSiteId === raw.verifiedSiteId && !!raw.expectedBaseUrl && sameServer(raw.expectedBaseUrl, registry));
-var registeredTranscriptEnabled = (apiKey, sessionId) => {
-  const registry = cliRegistry(apiKey);
+var registeredTranscriptEnabled = (apiKey, sessionId, registry = cliRegistry(apiKey)) => {
   try {
     return permitted(registry, read(fileFor2(registry, sessionId)));
   } catch {

package/dist/{chunk-5NQ3SMVP.js → chunk-AJWGZJFS.js}

@@ -1,6 +1,6 @@
 import {
   repoKeyFor
-} from "./chunk-NPO3ZTR4.js";
+} from "./chunk-QMPM3CAN.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -8,29 +8,32 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-YG3NFC5N.js";
+} from "./chunk-CMYFV3VC.js";
 import {
   withRetry
-} from "./chunk-GIE7PLZD.js";
+} from "./chunk-7M4AA7QF.js";
 import {
   getMachineId
-} from "./chunk-LWAYXE7G.js";
+} from "./chunk-UUCRWEEU.js";
 import {
   reportedInstallSource
-} from "./chunk-AERRQEWZ.js";
+} from "./chunk-7FROPPIH.js";
 import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS,
-  canonicalJson
-} from "./chunk-SMIU5URV.js";
+  canonicalJson,
+  claudeConfigDir
+} from "./chunk-7S46LCKD.js";
 import {
+  compareVersion,
+  parseVersion,
   writeFileAtomic
-} from "./chunk-T7FPZN5V.js";
+} from "./chunk-RZVWEDIS.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-X2KK42JA.js";
+} from "./chunk-R5PZPROX.js";
 import {
   ACTION_BODY_MAX,
   AGENTS,
@@ -43,19 +46,23 @@ import {
   GATE_MAX_TOOL_INPUTS,
   HOOK_COMPATIBLE_PROFILES,
   HOOK_SOURCES,
-  PENDING_COMMAND_PREFIX,
   REPO_AWARE_AGENTS,
   TASK_OUTPUT_TOOL,
   TASK_STOP_TOOL,
   blockedActionIdentity,
+  canCarryPendingCommand,
   canonicalToolName,
+  claudeTurnEndOutput,
+  conversationText,
   gateOutputFor,
   hookCompatibleProfileBySource,
   isAutoApprove,
+  isRecord,
   isTokenCount,
   modeStateFromResponse,
   parseMcpToolName,
   pendingCommandEvents,
+  pendingCommandInstruction,
   questionLimitHandBack,
   redactSecrets,
   redactSecretsDeep,
@@ -65,7 +72,7 @@ import {
   toToolLookup,
   truncateLine,
   unansweredRefusalReason
-} from "./chunk-JGEPODEP.js";
+} from "./chunk-AVHL2ZTS.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";
@@ -590,7 +597,7 @@ var SESSION_END_ACTIONS = {
 var countArray = (value) => Array.isArray(value) ? value.length : 0;
 var summarizeFinalMessage = (message) => {
   if (typeof message !== "string") return "Session ended";
-  const collapsed = message.replace(/\s+/g, " ").trim();
+  const collapsed = conversationText(message).replace(/\s+/g, " ").trim();
   if (!collapsed) return "Session ended";
   return collapsed.slice(0, STOP_SUMMARY_MAX_LENGTH);
 };
@@ -621,7 +628,7 @@ var compactionAction = (hookEvent, trigger) => {
 };
 var sessionStartAction = (source) => source === "resume" ? "Session resumed" : "Session started";
 var sessionEndAction = (reason) => typeof reason === "string" && SESSION_END_ACTIONS[reason] || "Session ended";
-var taskTitleFrom = (prompt) => typeof prompt === "string" ? prompt.replace(/\s+/g, " ").trim().slice(0, TASK_TITLE_MAX_LENGTH) || void 0 : void 0;
+var taskTitleFrom = (prompt) => typeof prompt === "string" ? conversationText(prompt).replace(/\s+/g, " ").trim().slice(0, TASK_TITLE_MAX_LENGTH) || void 0 : void 0;
 var asString = (value) => typeof value === "string" && value.length > 0 ? value : void 0;
 var NOTIFICATION_ACTION_MAX_LENGTH = 200;
 var STOP_FAILURE_REASON_MAX_LENGTH = 300;
@@ -1581,14 +1588,78 @@ var forgetBlockedActionHint = (fingerprint) => {
   }
 };
 
+// src/claude-session-record.ts
+import { readFileSync as readFileSync6, readdirSync as readdirSync4, statSync as statSync6 } from "fs";
+import { join as join7 } from "path";
+var UNREADABLE = { kind: "unreadable" };
+var OTHER_SESSION = { kind: "other_session" };
+var PROCESS_ID = /^[1-9]\d*$/;
+var SESSION_FILE_SUFFIX = ".json";
+var SESSION_FILE_MAX_BYTES = 64 * 1024;
+var isRunning = (pid) => {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    return error instanceof Error && "code" in error && error.code === "EPERM";
+  }
+};
+var isSmallRegularFile = (path) => {
+  try {
+    const stats = statSync6(path);
+    return stats.isFile() && stats.size <= SESSION_FILE_MAX_BYTES;
+  } catch {
+    return false;
+  }
+};
+var readSessionFile = (path, sessionId) => {
+  if (!isSmallRegularFile(path)) return UNREADABLE;
+  try {
+    const parsed = JSON.parse(readFileSync6(path, "utf-8"));
+    if (!isRecord(parsed) || typeof parsed.sessionId !== "string") return UNREADABLE;
+    if (parsed.sessionId !== sessionId) return OTHER_SESSION;
+    return { kind: "this_session", version: typeof parsed.version === "string" ? parsed.version : null };
+  } catch {
+    return UNREADABLE;
+  }
+};
+var runningSessionFiles = (sessions) => {
+  try {
+    return readdirSync4(sessions).filter((name) => name.endsWith(SESSION_FILE_SUFFIX)).map((name) => name.slice(0, -SESSION_FILE_SUFFIX.length)).filter((pid) => PROCESS_ID.test(pid) && isRunning(Number(pid))).map((pid) => join7(sessions, `${pid}${SESSION_FILE_SUFFIX}`));
+  } catch {
+    return [];
+  }
+};
+var parsedSessionVersion = (version) => {
+  const release = version === null ? null : parseVersion(version);
+  return version === null || release === null ? null : { version, release };
+};
+var isParsed = (entry) => entry !== null;
+var lowerVersion = (lowest, entry) => compareVersion(entry.release, lowest.release) < 0 ? entry : lowest;
+var oldestVersionAcross = (readings) => {
+  if (readings.some((reading) => reading.kind === "unreadable")) return null;
+  const parsed = readings.flatMap((reading) => reading.kind === "this_session" ? [reading.version] : []).map(parsedSessionVersion);
+  if (parsed.length === 0 || !parsed.every(isParsed)) return null;
+  return parsed.filter(isParsed).reduce(lowerVersion).version;
+};
+var claudeSessionVersion = (sessionId, environment = process.env) => {
+  if (!sessionId) return null;
+  try {
+    const sessions = join7(claudeConfigDir(void 0, environment), "sessions");
+    return oldestVersionAcross(runningSessionFiles(sessions).map((path) => readSessionFile(path, sessionId)));
+  } catch {
+    return null;
+  }
+};
+
 // src/background-work.ts
 import { createHash as createHash7 } from "crypto";
-import { mkdirSync as mkdirSync6, rmSync as rmSync5, statSync as statSync6, writeFileSync as writeFileSync6 } from "fs";
+import { mkdirSync as mkdirSync6, rmSync as rmSync5, statSync as statSync7, writeFileSync as writeFileSync6 } from "fs";
 import { tmpdir as tmpdir7 } from "os";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 var BACKGROUND_WORK_TTL_MS = 60 * 60 * 1e3;
-var backgroundWorkDir = () => join7(tmpdir7(), "pushary-background-work");
-var markerFor = (sessionKey) => join7(backgroundWorkDir(), createHash7("sha256").update(sessionKey).digest("hex"));
+var backgroundWorkDir = () => join8(tmpdir7(), "pushary-background-work");
+var markerFor = (sessionKey) => join8(backgroundWorkDir(), createHash7("sha256").update(sessionKey).digest("hex"));
 var hasRunningBackgroundTasks = (backgroundTasks) => Array.isArray(backgroundTasks) && backgroundTasks.length > 0;
 var noteBackgroundWork = (sessionKey, running) => {
   try {
@@ -1604,21 +1675,21 @@ var noteBackgroundWork = (sessionKey, running) => {
 };
 var isWaitingOnBackgroundWork = (sessionKey, nowMs = Date.now()) => {
   try {
-    return nowMs - statSync6(markerFor(sessionKey)).mtimeMs < BACKGROUND_WORK_TTL_MS;
+    return nowMs - statSync7(markerFor(sessionKey)).mtimeMs < BACKGROUND_WORK_TTL_MS;
   } catch {
     return false;
   }
 };
 
 // src/events.ts
-import { basename as basename2, join as join8 } from "path";
-import { existsSync as existsSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync6, statSync as statSync7, writeFileSync as writeFileSync7 } from "fs";
+import { basename as basename2, join as join9 } from "path";
+import { existsSync as existsSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync7, statSync as statSync8, writeFileSync as writeFileSync7 } from "fs";
 import { tmpdir as tmpdir8 } from "os";
-var INTENT_DIR = join8(tmpdir8(), "pushary-intent");
+var INTENT_DIR = join9(tmpdir8(), "pushary-intent");
 var INTENT_MAX_BYTES = 2048;
 var INTENT_GRACE_MS = 10 * 60 * 1e3;
 var sanitizeSession = (sessionId) => sessionId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || DEFAULT_SESSION;
-var intentFile = (sessionId) => join8(INTENT_DIR, sanitizeSession(sessionId));
+var intentFile = (sessionId) => join9(INTENT_DIR, sanitizeSession(sessionId));
 var saveLastPrompt = (sessionId, prompt) => {
   try {
     const trimmed = prompt.replace(/\s+/g, " ").trim().slice(0, INTENT_MAX_BYTES);
@@ -1631,8 +1702,8 @@ var saveLastPrompt = (sessionId, prompt) => {
 var readLastPrompt = (sessionId) => {
   try {
     const path = intentFile(sessionId);
-    if (isDefaultSession(sessionId) && statSync7(path).mtimeMs < Date.now() - INTENT_GRACE_MS) return void 0;
-    const value = readFileSync6(path, "utf-8").trim();
+    if (isDefaultSession(sessionId) && statSync8(path).mtimeMs < Date.now() - INTENT_GRACE_MS) return void 0;
+    const value = readFileSync7(path, "utf-8").trim();
     return value.length > 0 ? value : void 0;
   } catch {
     return void 0;
@@ -1697,7 +1768,7 @@ var readFreshCachedPolicy = (apiKey, agentType, sessionId) => {
   const request = policyRequestFor(agentType);
   const path = policyCacheFile(apiKey, request.agent, request.repoAware);
   if (!existsSync6(path)) return null;
-  const cached = JSON.parse(readFileSync6(path, "utf-8"));
+  const cached = JSON.parse(readFileSync7(path, "utf-8"));
   if (!isPolicyConfig(cached)) return null;
   if ((cached._sessionId ?? null) !== (sessionId ?? null)) return null;
   if (!cached._cachedAt || Date.now() - cached._cachedAt >= POLICY_CACHE_TTL_MS) return null;
@@ -1740,8 +1811,9 @@ var deriveAutoDecisionBeacon = (toolName, toolInput, liveMode, agentType, cwd, s
 };
 var AUTO_DECISION_WINDOW_MS = 15 * 60 * 1e3;
 var HOOK_ACTIVE_WINDOW_MS = 30 * 60 * 1e3;
+var hookSourceOfAgentType = (agentType) => HOOK_SOURCES.find((candidate) => AGENT_IDENTITIES[candidate].type === agentType);
 var deriveUsage = (payload, agent, event) => {
-  const source = HOOK_SOURCES.find((candidate) => AGENT_IDENTITIES[candidate].type === agent.type);
+  const source = hookSourceOfAgentType(agent.type);
   const request = source ? transcriptUsageRequest({ source, event, payload, costTracking: process.env[COST_TRACKING_ENV] }) : null;
   if (!request) return void 0;
   try {
@@ -1750,16 +1822,19 @@ var deriveUsage = (payload, agent, event) => {
     return void 0;
   }
 };
-var mergeAdditionalContext = (existing, reported) => {
+var pendingInstructionOf = (reported) => {
   const pendingCommand = reported.status === "fulfilled" ? reported.value?.pendingCommand : void 0;
-  if (typeof pendingCommand !== "string" || pendingCommand.trim().length === 0) return existing;
-  const injected = `${PENDING_COMMAND_PREFIX} ${pendingCommand.trim()}`;
+  return typeof pendingCommand === "string" ? pendingCommandInstruction(pendingCommand) : void 0;
+};
+var mergeAdditionalContext = (existing, reported) => {
+  const injected = pendingInstructionOf(reported);
+  if (injected === void 0) return existing;
   return existing ? `${existing}
 
 ${injected}` : injected;
 };
 var consumesActivityContext = (agentType) => {
-  const source = HOOK_SOURCES.find((candidate) => AGENT_IDENTITIES[candidate].type === agentType);
+  const source = hookSourceOfAgentType(agentType);
   if (!source) return false;
   return pendingCommandEvents(source).some((event) => event !== "Stop");
 };
@@ -1997,7 +2072,10 @@ var handleUserPrompt = async (input, agent = CLAUDE_CODE_AGENT) => {
   }
 };
 var UNUSED_APPROVAL_INSTRUCTION = "The person allowed, from Pushary, the call auto mode blocked. Send that call again now, exactly as it was with nothing changed, to use their approval. It covers only that exact call.";
-var phoneInstructionOf = (pendingCommand) => typeof pendingCommand === "string" && pendingCommand.trim().length > 0 ? `The user sent a new instruction from their phone via Pushary: ${pendingCommand.trim()}` : null;
+var carriesInstructionAtTurnEnd = (agentType) => {
+  const source = hookSourceOfAgentType(agentType);
+  return source !== void 0 && canCarryPendingCommand(source, "Stop");
+};
 var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
   const deadline = Date.now() + HOOK_BUDGET_MS;
   const signal = AbortSignal.timeout(HOOK_BUDGET_MS);
@@ -2006,6 +2084,7 @@ var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
     const sessionKey = input.session_id || DEFAULT_SESSION;
     noteBackgroundWork(sessionKey, hasRunningBackgroundTasks(input.background_tasks));
     const late = await reconcilePendingQuestions(sessionKey, void 0, signal);
+    const carriesInstruction = carriesInstructionAtTurnEnd(agent.type);
     const tasks = [
       reportEvent({
         event: "session_end",
@@ -2014,7 +2093,12 @@ var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
         action: summarizeStop(input),
         ...sessionIdentityOf(input),
         usage: deriveUsage(input, agent, "Stop")
-      }, { maxAttempts: 1, budgetMs: Math.min(DRAINING_REPORT_BUDGET_MS, Math.max(0, deadline - Date.now())), signal })
+      }, {
+        maxAttempts: 1,
+        budgetMs: Math.min(DRAINING_REPORT_BUDGET_MS, Math.max(0, deadline - Date.now())),
+        signal,
+        skipDrain: !carriesInstruction
+      })
     ];
     if (late.length > 0) {
       tasks.push(notifyLateAnswers(getApiKey(), late, `${agent.label} - ${projectName}`, input.session_id, signal));
@@ -2022,10 +2106,13 @@ var handleStop = async (input, agent = CLAUDE_CODE_AGENT) => {
     }
     if (!isDefaultSession(sessionKey) && listPendingQuestions(sessionKey).length === 0) removePendingSession(sessionKey);
     const [reported] = await Promise.allSettled(tasks);
-    const pendingCommand = reported.status === "fulfilled" ? reported.value?.pendingCommand : void 0;
     const unusedApproval = !input.stop_hook_active && approvalAwaitingRetry(input.session_id) !== null;
-    const instructions = [unusedApproval ? UNUSED_APPROVAL_INSTRUCTION : null, phoneInstructionOf(pendingCommand)].filter((instruction) => instruction !== null);
-    return instructions.length > 0 ? { decision: "block", reason: instructions.join("\n\n") } : void 0;
+    const instruction = carriesInstruction ? pendingInstructionOf(reported) : void 0;
+    return claudeTurnEndOutput({
+      instruction,
+      continueReason: unusedApproval ? UNUSED_APPROVAL_INSTRUCTION : void 0,
+      claudeVersion: instruction === void 0 ? null : claudeSessionVersion(input.session_id)
+    });
   } catch {
     return void 0;
   }

package/dist/{chunk-JGEPODEP.js → chunk-AVHL2ZTS.js}

@@ -1025,6 +1025,40 @@ var toolsCoveredByGateEntry = (coverage, matcher) => {
 var toolMatches = (match, toolName) => match.kind === "named" ? match.tools.includes(toolName) : toolName.startsWith(match.prefix);
 var cursorGateOwnsToolCall = (registration, toolName) => typeof toolName === "string" && registration.some((match) => toolMatches(match, toolName));
 
+// ../contracts/src/conversation-text.ts
+var INTERNAL_ENVELOPE = /(^|\n) {0,3}(?:<(total_tokens|task-notification)>[\s\S]*?(?:<\/\2>|$)[\t ]*)+/g;
+var INCOMPLETE_ENVELOPE = /(^|\n) {0,3}<(?:total_tokens|task-notification)$/g;
+var SUGGESTION_REQUEST = /^This is an app-generated request for a suggested next user(?: message| prompt)/;
+var visibleProse = (text2) => text2.replace(INTERNAL_ENVELOPE, "$1").replace(INCOMPLETE_ENVELOPE, "$1");
+function conversationText(text2) {
+  if (SUGGESTION_REQUEST.test(text2.trimStart())) return "";
+  const output = [];
+  let prose = [];
+  let fence = null;
+  for (const line of text2.split("\n")) {
+    const marker = /^ {0,3}(`{3,}|~{3,})/.exec(line)?.[1];
+    if (fence) {
+      output.push(line);
+      if (marker?.[0] === fence.marker && marker.length >= fence.length) fence = null;
+    } else if (marker) {
+      output.push(visibleProse(prose.join("\n")), line);
+      prose = [];
+      fence = { marker: marker.charAt(0), length: marker.length };
+    } else {
+      prose.push(line);
+    }
+  }
+  output.push(visibleProse(prose.join("\n")));
+  return output.join("\n").trim();
+}
+function extractMessageText(content) {
+  if (typeof content === "string") return content;
+  if (!Array.isArray(content)) return "";
+  return content.flatMap(
+    (block) => block !== null && typeof block === "object" && "type" in block && block.type === "text" && "text" in block && typeof block.text === "string" ? [block.text] : []
+  ).join("\n");
+}
+
 // ../contracts/src/shell-analysis.ts
 var SHELL_WORD_SEPARATOR = /[ \t\n]/;
 var ARITHMETIC_EVALUATING_EXPANSION = /\$[#+=~^]*(?:[A-Za-z_][A-Za-z0-9_]*|[0-9]+|[-?$!@*#])?\[/;
@@ -2069,6 +2103,51 @@ var powerShellCommandHasAVisibleConsequence = (command, judge) => {
   return powerShellReadingIsDestructive(reading, judge) || stages.some((stage) => stageHasAVisibleConsequence(stage, judge)) || reading.statements.some(listsRecursivelyIntoARemoval) || runsFetchedPowerShellCode(stages, judge) || runsADownloadedFile(stages, judge) || reading.posixCommands.some((words) => judge.commandShowsAConsequence(words));
 };
 
+// ../contracts/src/release-version.ts
+var RELEASE_VERSION_PATTERN = /^(0|[1-9]\d{0,8})\.(0|[1-9]\d{0,8})\.(0|[1-9]\d{0,8})$/;
+var parseReleaseVersion = (version) => {
+  const match = RELEASE_VERSION_PATTERN.exec(version);
+  return match ? [Number(match[1]), Number(match[2]), Number(match[3])] : null;
+};
+var compareReleaseVersions = (left, right) => {
+  for (let index = 0; index < left.length; index++) {
+    if (left[index] !== right[index]) return left[index] < right[index] ? -1 : 1;
+  }
+  return 0;
+};
+var isReleaseBelow = (version, floor) => compareReleaseVersions(version, floor) < 0;
+var formatReleaseVersion = (version) => version.join(".");
+
+// ../contracts/src/claude-turn-end.ts
+var STOP_CONTEXT_RELEASE = [2, 1, 163];
+var readsStopContext = (claudeVersion) => {
+  const release = claudeVersion === null ? null : parseReleaseVersion(claudeVersion);
+  return release !== null && !isReleaseBelow(release, STOP_CONTEXT_RELEASE);
+};
+var stopContext = (additionalContext) => ({
+  hookEventName: "Stop",
+  additionalContext
+});
+var instructionAtTurnEnd = (instruction, claudeVersion) => readsStopContext(claudeVersion) ? { hookSpecificOutput: stopContext(instruction) } : { decision: "block", reason: instruction };
+var claudeTurnEndOutput = ({
+  instruction,
+  continueReason,
+  claudeVersion
+}) => {
+  if (instruction === void 0) return continueReason === void 0 ? void 0 : { decision: "block", reason: continueReason };
+  if (continueReason === void 0) return instructionAtTurnEnd(instruction, claudeVersion);
+  return readsStopContext(claudeVersion) ? { decision: "block", reason: continueReason, hookSpecificOutput: stopContext(instruction) } : { decision: "block", reason: `${continueReason}
+
+${instruction}` };
+};
+
+// ../contracts/src/pending-command.ts
+var PENDING_COMMAND_PREFIX = "The user sent a new instruction from their phone via Pushary:";
+var pendingCommandInstruction = (command) => {
+  const instruction = command.trim();
+  return instruction.length === 0 ? void 0 : `${PENDING_COMMAND_PREFIX} ${instruction}`;
+};
+
 // ../contracts/src/command-analysis/sql-text.ts
 var UNCERTAIN_SQL = { kind: "uncertain" };
 var STRING_PLACEHOLDER = "''";
@@ -2866,7 +2945,6 @@ var withoutDeclinedAgent = (agents, agent) => agents.filter((candidate) => candi
 // ../contracts/src/cli-version-standing.ts
 var FIRST_AUTO_UPDATING_RELEASE = [1, 5, 0];
 var MIN_SAFE_RELEASE = [1, 9, 26];
-var formatReleaseVersion = (version) => version.join(".");
 var FIRST_AUTO_UPDATING_CLI_VERSION = formatReleaseVersion(FIRST_AUTO_UPDATING_RELEASE);
 var MIN_SAFE_CLI_VERSION = formatReleaseVersion(MIN_SAFE_RELEASE);
 
@@ -6516,7 +6594,6 @@ var claudePreToolUseOutput = (decision, reason, updatedInput) => ({
     ...updatedInput ? { updatedInput } : {}
   }
 });
-var PENDING_COMMAND_PREFIX = "The user sent a new instruction from their phone via Pushary:";
 var pendingCommandEvents = (source) => {
   switch (source) {
     case "claude":
@@ -6554,6 +6631,7 @@ var compatiblePendingCommandEvents = (source) => {
   if (!profile || profile.wire !== "permission_decision") return [];
   return COMPATIBLE_PENDING_COMMAND_EVENTS.filter((event) => profile.events.includes(event));
 };
+var canCarryPendingCommand = (source, event) => pendingCommandEvents(source).includes(event);
 var claudePermissionRequestOutput = (decision, reason, updatedInput) => ({
   hookSpecificOutput: {
     hookEventName: "PermissionRequest",
@@ -6771,6 +6849,8 @@ var hookActivationResult = (report) => {
 };
 
 export {
+  conversationText,
+  extractMessageText,
   isRecord,
   AGENT_QUESTION_HEADER_MAX,
   AGENT_QUESTION_OPTION_MAX,
@@ -6827,6 +6907,8 @@ export {
   NO_CURSOR_GATE,
   toolsCoveredByGateEntry,
   cursorGateOwnsToolCall,
+  claudeTurnEndOutput,
+  pendingCommandInstruction,
   degradedLine,
   KEY_SCOPE,
   normalizeKeyScope,
@@ -6961,8 +7043,8 @@ export {
   claudePermissionDeniedOutput,
   codexStopRescueOutput,
   claudePreToolUseOutput,
-  PENDING_COMMAND_PREFIX,
   pendingCommandEvents,
+  canCarryPendingCommand,
   claudePermissionRequestOutput,
   gateOutputFor,
   renderElicitationOutput,

package/dist/{chunk-3CN2EFKK.js → chunk-AXZ67XVN.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-5NQ3SMVP.js";
+} from "./chunk-AJWGZJFS.js";
 
 // src/answer.ts
 var isDeferAnswer = (value) => value === "defer";

package/dist/{chunk-MZ6GL46A.js → chunk-BLX6KRK5.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-SMIU5URV.js";
+} from "./chunk-7S46LCKD.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-ZBPBX656.js → chunk-CGWUVEOB.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-EVJRITSI.js";
+} from "./chunk-2HFC4W6J.js";
 import {
   parseFlags
 } from "./chunk-NMUI3ZWG.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-PPY5N2E6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-AZ56FPRG.js";
+} from "./chunk-PPKIL4EL.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-JGEPODEP.js";
+} from "./chunk-AVHL2ZTS.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-YG3NFC5N.js → chunk-CMYFV3VC.js}

@@ -6,18 +6,18 @@ import {
   McpToolError,
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-GIE7PLZD.js";
+} from "./chunk-7M4AA7QF.js";
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-XSUWXBHF.js";
+} from "./chunk-O4EAMVSC.js";
 import {
   clientReportClaims
-} from "./chunk-SMIU5URV.js";
+} from "./chunk-7S46LCKD.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-X2KK42JA.js";
+} from "./chunk-R5PZPROX.js";
 import {
   ASK_AGENT_NAME_MAX,
   CLIENT_REPORT_PATH,
@@ -26,7 +26,7 @@ import {
   TOOL_FAILURE_CODES,
   degradedLine,
   truncateLine
-} from "./chunk-JGEPODEP.js";
+} from "./chunk-AVHL2ZTS.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-C3YAMEO2.js → chunk-DT6VCMXS.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-SMIU5URV.js";
+} from "./chunk-7S46LCKD.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   writeJsonAtomic
-} from "./chunk-T7FPZN5V.js";
+} from "./chunk-RZVWEDIS.js";
 
 // src/upgrade-lock.ts
 import { fork } from "child_process";

package/dist/{chunk-7OYWCOVC.js → chunk-EITOMPFB.js}

@@ -1,9 +1,9 @@
 import {
   realpath
-} from "./chunk-LKAO35SY.js";
+} from "./chunk-JYOR57ZW.js";
 import {
   findNativeClaudeInstall
-} from "./chunk-BJRLJJS2.js";
+} from "./chunk-TFDMJHAB.js";
 import {
   readGlobalPrefixAsync,
   resolveGlobalBinary,
@@ -13,10 +13,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-T7FPZN5V.js";
+} from "./chunk-RZVWEDIS.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-JGEPODEP.js";
+} from "./chunk-AVHL2ZTS.js";
 
 // src/live-capabilities.ts
 import { homedir } from "os";

package/dist/{chunk-QWCOMSDH.js → chunk-EUEGCEA7.js}

@@ -3,13 +3,13 @@ import {
   NpmMissingError,
   NpmPermissionError,
   writeFileAtomic
-} from "./chunk-T7FPZN5V.js";
+} from "./chunk-RZVWEDIS.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-AZ56FPRG.js";
+} from "./chunk-PPKIL4EL.js";
 import {
   readSetupAgentFailures
-} from "./chunk-JGEPODEP.js";
+} from "./chunk-AVHL2ZTS.js";
 
 // src/setup/config-write.ts
 var AgentConfigWriteError = class extends Error {

package/dist/{chunk-5WHSFMV2.js → chunk-EUHTC7K5.js}

@@ -2,7 +2,7 @@ import {
   isApprovalMode,
   isRecord,
   isTimeoutAction
-} from "./chunk-JGEPODEP.js";
+} from "./chunk-AVHL2ZTS.js";
 
 // src/cli/settings-response.ts
 var isFiniteNumber = (value) => typeof value === "number" && Number.isFinite(value);