@pushary/agent-hooks 1.9.9 → 1.9.11

package/dist/{chunk-UF6RBP5V.js → chunk-KEV2MOJH.js}

@@ -3,17 +3,17 @@ import {
   addGeminiMcpServer,
   removeGeminiMcpServer,
   supportedClaudeEvents
-} from "./chunk-M3STIAGU.js";
+} from "./chunk-CZYMYM7X.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-KQFTBQ66.js";
+} from "./chunk-A6J5Z2HO.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-Z23ZBYDW.js";
+} from "./chunk-4FWWHCYM.js";
 import {
   HOOK_LOCATOR_BINARY,
   PHONE_ANSWERED_TOOLS,
@@ -21,7 +21,7 @@ import {
   hookCompatibleProfileBySource,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/claude-config.ts
 import { join } from "path";
@@ -197,7 +197,10 @@ import { homedir } from "os";
 import { isAbsolute, join as join2, resolve } from "path";
 var AGENT_FLAG = "--agent";
 var SOURCE_FLAG = "--source";
+var EVENT_FLAG = "--event";
 var agentArgument = (profile) => `${AGENT_FLAG}=${profile.agentType}`;
+var eventArgument = (event) => `${EVENT_FLAG}=${event}`;
+var payloadNamesItsEvent = (profile) => profile.payload === "claude";
 var profileFromArgv = (argv) => {
   const named = namedAgent(argv);
   if (named !== void 0) return hookCompatibleProfile(named);
@@ -212,6 +215,12 @@ var namedAgent = (argv) => {
   const prefix = `${AGENT_FLAG}=`;
   return argv.find((argument) => argument.startsWith(prefix))?.slice(prefix.length);
 };
+var namedEvent = (argv) => {
+  const inline = argv.find((argument) => argument.startsWith(`${EVENT_FLAG}=`));
+  if (inline) return inline.slice(EVENT_FLAG.length + 1);
+  const index = argv.indexOf(EVENT_FLAG);
+  return index === -1 ? void 0 : argv[index + 1];
+};
 var namedSource = (argv) => {
   const inline = argv.find((argument) => argument.startsWith(`${SOURCE_FLAG}=`));
   if (inline) return inline.slice(SOURCE_FLAG.length + 1);
@@ -264,12 +273,17 @@ var pruneEmptyMap = (config, keyPath) => {
   return true;
 };
 var aliasesFor = (profile, canonical) => Object.entries(profile.toolAliases).flatMap(([agentName, target]) => target === canonical ? [agentName] : []);
-var carriesPhoneAnswer = (profile, canonical) => profile.wire === "legacy_decision" && PHONE_ANSWERED_TOOLS.has(canonical);
+var carriesPhoneAnswer = (profile, canonical) => profile.wire !== "permission_decision" && PHONE_ANSWERED_TOOLS.has(canonical);
 var translateMatcher = (profile, matcher) => {
   const spellings = matcher.split("|").filter((canonical) => !carriesPhoneAnswer(profile, canonical)).flatMap((canonical) => [canonical, ...aliasesFor(profile, canonical)]);
   return [.../* @__PURE__ */ new Set([...spellings, ...profile.extraMatchers])].join("|");
 };
 var TOOL_MATCHED_EVENTS = /* @__PURE__ */ new Set(["PreToolUse", "PostToolUse"]);
+var isPusharyHandler = (entry2, scope) => {
+  const record = asRecord2(entry2);
+  return record !== void 0 && !Array.isArray(record.hooks) && isPusharyHook({ hooks: [record] }, scope);
+};
+var isPusharyCompatibleEntry = (entry2, scope) => isPusharyHook(entry2, scope) || isPusharyHandler(entry2, scope);
 var withoutMatcher = ({ matcher, ...hook }) => hook;
 var compatibleHookEvents = (profile) => CLAUDE_HOOK_EVENTS.filter((hook) => profile.events.includes(hook.event)).map((hook) => {
   if (!hook.matcher) return hook;
@@ -306,17 +320,20 @@ var addCompatibleToolPermissions = (config) => {
   addPusharyToolPermissions(config);
   return WRITTEN;
 };
-var entryFor = (profile, definition, resolve2) => ({
-  ...definition.matcher ? { matcher: definition.matcher } : {},
-  hooks: [{
-    type: "command",
-    command: withHookHoldBudget(
-      `${resolve2(definition.binary)} ${agentArgument(profile)}`,
-      holdBudgetOf(definition)
-    ),
-    timeout: definition.timeout
-  }]
-});
+var commandFor = (profile, definition, resolve2) => {
+  const named = `${resolve2(definition.binary)} ${agentArgument(profile)}`;
+  const command = payloadNamesItsEvent(profile) ? named : `${named} ${eventArgument(definition.event)}`;
+  return withHookHoldBudget(command, holdBudgetOf(definition));
+};
+var writesBareHandler = (profile, definition) => profile.nonToolEntries === "handler" && !TOOL_MATCHED_EVENTS.has(definition.event);
+var entryFor = (profile, definition, resolve2) => {
+  const handler = { type: "command", command: commandFor(profile, definition, resolve2), timeout: definition.timeout };
+  if (writesBareHandler(profile, definition)) return handler;
+  return {
+    ...definition.matcher ? { matcher: definition.matcher } : {},
+    hooks: [handler]
+  };
+};
 var addCompatibleHooks = (config, profile, binDir) => {
   const conflictAt = hooksShapeConflict(config, profile);
   if (conflictAt) return { ok: false, conflictAt };
@@ -327,10 +344,10 @@ var addCompatibleHooks = (config, profile, binDir) => {
     const current = Array.isArray(hooks[known.event]) ? hooks[known.event] : [];
     const definition = supported.get(known.event);
     if (definition) {
-      hooks[known.event] = registerHookEntry(current, isPusharyHook, entryFor(profile, definition, resolve2));
+      hooks[known.event] = registerHookEntry(current, isPusharyCompatibleEntry, entryFor(profile, definition, resolve2));
       continue;
     }
-    const others = current.filter((item) => !isPusharyHook(item));
+    const others = current.filter((item) => !isPusharyCompatibleEntry(item));
     if (others.length > 0) hooks[known.event] = others;
     else delete hooks[known.event];
   }
@@ -343,7 +360,7 @@ var removeCompatibleHooks = (config, profile, scope) => {
   for (const { event } of CLAUDE_HOOK_EVENTS) {
     const entries = hooks[event];
     if (!Array.isArray(entries)) continue;
-    const kept = entries.filter((entry2) => !isPusharyHook(entry2, scope));
+    const kept = entries.filter((entry2) => !isPusharyCompatibleEntry(entry2, scope));
     if (kept.length === entries.length) continue;
     if (kept.length === 0) delete hooks[event];
     else hooks[event] = kept;
@@ -357,14 +374,14 @@ var hasCompatibleHooks = (config, profile) => {
   if (!hooks) return false;
   return compatibleHookEvents(profile).some(({ event }) => {
     const entries = hooks[event];
-    return Array.isArray(entries) && entries.some((entry2) => isPusharyHook(entry2));
+    return Array.isArray(entries) && entries.some((entry2) => isPusharyCompatibleEntry(entry2));
   });
 };
 var missingCompatibleHookEvents = (config, profile) => {
   const hooks = findMap(config, profile.hooksKeyPath);
   return compatibleHookEvents(profile).filter(({ event }) => {
     const entries = hooks?.[event];
-    return !Array.isArray(entries) || !entries.some((entry2) => isPusharyHook(entry2));
+    return !Array.isArray(entries) || !entries.some((entry2) => isPusharyCompatibleEntry(entry2));
   }).map(({ event }) => event);
 };
 var compatiblePermissionRuleFile = (profile, home) => profile.permissionRuleFile ? underHome(profile.permissionRuleFile, home) : null;
@@ -374,6 +391,13 @@ var addCompatibleMcpServer = (config, profile, apiKey) => {
     addGeminiMcpServer(config, apiKey);
     return;
   }
+  if (profile.mcp.shape === "antigravity_http") {
+    ensureRecord2(config, "mcpServers").pushary = {
+      serverUrl: PUSHARY_MCP_URL,
+      headers: { Authorization: `Bearer ${apiKey}` }
+    };
+    return;
+  }
   addClaudeMcpServer(config, apiKey);
   if (!profile.mcp.trusted) return;
   const server = asRecord2(asRecord2(config.mcpServers)?.pushary);
@@ -397,6 +421,7 @@ export {
   removePusharySettings,
   profileFromArgv,
   activeIdentity,
+  namedEvent,
   activeHookSource,
   normalizeToolCall,
   compatibleConfigFile,

package/dist/{chunk-BZLHTMT6.js → chunk-KIVFWGG6.js}

@@ -1,12 +1,15 @@
 import {
   compatibleConfigFile
-} from "./chunk-UF6RBP5V.js";
+} from "./chunk-KEV2MOJH.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-BYLKCZ2G.js";
+} from "./chunk-7RWQZQV2.js";
+import {
+  AGENT_CHOICES
+} from "./chunk-4HR2ICME.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -15,7 +18,7 @@ import {
   guardedArgv,
   pusharyDir,
   vscodePluginDir
-} from "./chunk-Z23ZBYDW.js";
+} from "./chunk-4FWWHCYM.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";
@@ -25,7 +28,7 @@ import {
   HOOK_LOCATOR_BINARY,
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";
@@ -416,6 +419,7 @@ var HOOK_FILES = {
   ...COMPATIBLE_HOOK_FILES
 };
 var agentHookFile = (agent) => HOOK_FILES[agent]?.() ?? null;
+var agentHooksKeyPath = (agent) => hookCompatibleProfile(agent)?.hooksKeyPath;
 var readTextOrNull = (path) => {
   try {
     return readFileSync2(path, "utf-8");
@@ -432,13 +436,9 @@ var agentHookOwner = (agent, appAvailable) => {
   const file = agentHookFile(agent);
   if (!file) return "none";
   const document = readJsonSafe(file);
-  const profile = hookCompatibleProfile(agent);
-  return hookOwnerOf(
-    document.kind === "ok" ? document.value : null,
-    appAvailable,
-    profile ? profile.hooksKeyPath : void 0
-  );
+  return hookOwnerOf(document.kind === "ok" ? document.value : null, appAvailable, agentHooksKeyPath(agent));
 };
+var cliOwnsAnyAgentHooks = (appAvailable) => AGENT_CHOICES.some((agent) => agentHookOwner(agent, appAvailable) === "cli");
 var macAppBridgeAvailable = () => resolveBridgeStub(join2(pusharyDir(), "bin", HOOK_LOCATOR_BINARY), liveBridgeProbe()).kind === "bundle";
 
 export {
@@ -460,6 +460,8 @@ export {
   addOpenCodeMcpServer,
   removeOpenCodeMcpServer,
   agentHookFile,
+  agentHooksKeyPath,
   agentHookOwner,
+  cliOwnsAnyAgentHooks,
   macAppBridgeAvailable
 };

package/dist/{chunk-HBWYMRR5.js → chunk-LBAMPNDM.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-Q6C6ILUS.js";
+} from "./chunk-OKSU74QH.js";
 import {
   createIo
 } from "./chunk-U4TMAANR.js";
 import {
   readKeySource
-} from "./chunk-REU2VQPH.js";
+} from "./chunk-Z4AOR6RZ.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-QRXPWW3M.js";
+} from "./chunk-I4I4UH62.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-IRHABAQT.js";
+} from "./chunk-FJCOOFT7.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();
@@ -90,5 +90,6 @@ var exitOnFailedSettingsRequest = async (response, settings) => {
 
 export {
   printKeyCheck,
+  APPROVAL_SETTINGS_PATH,
   exitOnFailedSettingsRequest
 };

package/dist/{chunk-LENBKYRB.js → chunk-LUHNNZSH.js}

@@ -1,10 +1,10 @@
 import {
   pusharyHookExecutable
-} from "./chunk-BYLKCZ2G.js";
+} from "./chunk-7RWQZQV2.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-Z23ZBYDW.js";
+} from "./chunk-4FWWHCYM.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-R5RIVOPL.js → chunk-LX6EWNRK.js}

@@ -1,9 +1,16 @@
 import {
   registerTranscript
-} from "./chunk-COQ64C4F.js";
+} from "./chunk-CHDAH4HP.js";
+import {
+  namedEvent
+} from "./chunk-KEV2MOJH.js";
 import {
   writeDegraded
-} from "./chunk-UPIZSCYD.js";
+} from "./chunk-GUNZHSTL.js";
+import {
+  claudeShapedHookInput,
+  hookCompatibleProfileBySource
+} from "./chunk-VOP5U2VX.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];
@@ -80,13 +87,18 @@ var readHookInput = async (source, fallbackEvent = "", stdin = process.stdin, pa
     return null;
   }
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
-  const input = parseInput ? parseInput(parsed) : parsed;
+  const shaped = inClaudeShape(source, namedEvent(process.argv) ?? fallbackEvent, parsed);
+  const input = parseInput ? parseInput(shaped) : shaped;
   if (input === null) return null;
   const event = eventNameOf(input) ?? fallbackEvent;
   if (!isAdmitted(readAdmissionRules(), source, event)) return null;
   if (stdin === process.stdin) registerTranscript(source, input);
   return input;
 };
+var inClaudeShape = (source, event, parsed) => {
+  const profile = hookCompatibleProfileBySource(source);
+  return profile ? claudeShapedHookInput(profile.payload, event, parsed) : parsed;
+};
 var eventNameOf = (input) => {
   if (!("hook_event_name" in input)) return void 0;
   const name = input.hook_event_name;

package/dist/{chunk-5DCDQ5VW.js → chunk-M54ATCOZ.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {
@@ -141,7 +141,7 @@ var COMMAND_OPTIONS = {
   ],
   clean: [
     ["--dry-run", "List everything it would remove and change nothing"],
-    ["--everything", "Also remove what the Mac app set up: quits it, then its keychain items, local state and editor extension"],
+    ["--everything", "Also revoke the keys the CLI wrote (config.json and its shell profile export) and remove what the Mac app set up: quits it, then its keychain items, local state and editor extension"],
     ["--yes", "Remove everything without asking"]
   ],
   transcripts: [

package/dist/{chunk-6W5M3MSE.js → chunk-MHHXR7DT.js}

@@ -1,12 +1,12 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-H5T27W7M.js";
+} from "./chunk-BDRXDO25.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-REU2VQPH.js";
+} from "./chunk-Z4AOR6RZ.js";
 import {
   NpmMissingError
-} from "./chunk-Z23ZBYDW.js";
+} from "./chunk-4FWWHCYM.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -14,7 +14,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-5DCDQ5VW.js";
+} from "./chunk-M54ATCOZ.js";
 
 // src/instruction-file.ts
 import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";

package/dist/{chunk-NUVGDBZC.js → chunk-MITMDERZ.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-Z23ZBYDW.js";
+} from "./chunk-4FWWHCYM.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-QTIUJZRX.js → chunk-MJLTABWF.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-ZGADIZDS.js";
+} from "./chunk-4HR2ICME.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-5DCDQ5VW.js";
+} from "./chunk-M54ATCOZ.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-QIOIO7VN.js → chunk-MX3LPP3K.js}

@@ -3,27 +3,27 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-F7R3SZ4Q.js";
+} from "./chunk-N6GEI3PK.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-SZ4Q6ZVS.js";
+} from "./chunk-PTGUJZSD.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-REU2VQPH.js";
+} from "./chunk-Z4AOR6RZ.js";
 import {
   getMachineId
-} from "./chunk-KOWFRUIT.js";
+} from "./chunk-2NAQRPZQ.js";
 import {
   getBaseUrl
-} from "./chunk-IRHABAQT.js";
+} from "./chunk-FJCOOFT7.js";
 import {
   getPackageVersion
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/machines.ts
 import { hostname } from "os";

package/dist/{chunk-F7R3SZ4Q.js → chunk-N6GEI3PK.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-Z23ZBYDW.js";
+} from "./chunk-4FWWHCYM.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;

package/dist/{chunk-462EQA6K.js → chunk-N7HXP4PZ.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-IRHABAQT.js";
+} from "./chunk-FJCOOFT7.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-Q6C6ILUS.js → chunk-OKSU74QH.js}

@@ -3,10 +3,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-REU2VQPH.js";
+} from "./chunk-Z4AOR6RZ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-5DCDQ5VW.js";
+} from "./chunk-M54ATCOZ.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-AZOKPWVI.js → chunk-P2EJN7UB.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-Z23ZBYDW.js";
+} from "./chunk-4FWWHCYM.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-OAYWO5NP.js → chunk-P7N7FJ7W.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-IRHABAQT.js";
+} from "./chunk-FJCOOFT7.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-DP3WX7FW.js → chunk-PRJNUNCV.js}

@@ -1,9 +1,9 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-NGKUXZID.js";
+} from "./chunk-GA4J6YFN.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-5DCDQ5VW.js";
+} from "./chunk-M54ATCOZ.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-SZ4Q6ZVS.js → chunk-PTGUJZSD.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-REU2VQPH.js";
+} from "./chunk-Z4AOR6RZ.js";
 import {
   getMachineId
-} from "./chunk-KOWFRUIT.js";
+} from "./chunk-2NAQRPZQ.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-Z23ZBYDW.js";
+} from "./chunk-4FWWHCYM.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,14 +20,14 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "./chunk-IRHABAQT.js";
+} from "./chunk-FJCOOFT7.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
   getPackageVersion,
   globalPackageFolder,
   globalRootFor
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/chunk-SB2GN6OP.js

@@ -0,0 +1,71 @@
+// src/key-revocation.ts
+var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";
+var DEVICE_KEY_PATH = "/api/agent/device-key";
+var FULL_ACCESS_ONLY_STATUS = 403;
+var REVOKE_TIMEOUT_MS = 1e4;
+var readRevokedCount = async (response) => {
+  try {
+    const body = await response.json();
+    const revoked = typeof body === "object" && body !== null && "revoked" in body ? body.revoked : void 0;
+    return typeof revoked === "number" && Number.isInteger(revoked) && revoked >= 0 ? revoked : null;
+  } catch {
+    return null;
+  }
+};
+var revokeAgentKey = async (apiKey, baseUrl, fetchImpl) => {
+  const response = await fetchImpl(`${baseUrl}${DEVICE_KEY_PATH}`, {
+    method: "DELETE",
+    headers: { Authorization: `Bearer ${apiKey}` },
+    signal: AbortSignal.timeout(REVOKE_TIMEOUT_MS)
+  });
+  if (!response.ok) return { kind: "refused", status: response.status };
+  const revoked = await readRevokedCount(response);
+  if (revoked === null) return { kind: "refused", status: response.status };
+  return revoked > 0 ? { kind: "revoked" } : { kind: "not_accepted" };
+};
+var revokeOwnKey = async (apiKey, baseUrl, fetchImpl = fetch) => {
+  try {
+    const response = await fetchImpl(`${baseUrl}${SELF_REVOKE_PATH}`, {
+      method: "POST",
+      headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
+      signal: AbortSignal.timeout(REVOKE_TIMEOUT_MS)
+    });
+    if (response.status === 401) return { kind: "not_accepted" };
+    if (response.status === FULL_ACCESS_ONLY_STATUS) return await revokeAgentKey(apiKey, baseUrl, fetchImpl);
+    if (!response.ok) return { kind: "refused", status: response.status };
+    return { kind: "revoked" };
+  } catch (err) {
+    return { kind: "unreachable", detail: err instanceof Error ? err.message : "network error" };
+  }
+};
+var REVOKE_DETAIL = {
+  revoked: "Revoked the key on pushary.com.",
+  not_accepted: "pushary.com had already stopped accepting the key.",
+  refused: "pushary.com refused to revoke the key",
+  unreachable: "Could not reach pushary.com to revoke the key"
+};
+var describeRevokeAttempt = (attempt) => {
+  if (attempt.kind === "refused") return `${REVOKE_DETAIL.refused} (HTTP ${attempt.status}).`;
+  if (attempt.kind === "unreachable") return `${REVOKE_DETAIL.unreachable}: ${attempt.detail}`;
+  return REVOKE_DETAIL[attempt.kind];
+};
+var keyNoLongerAccepted = (attempt) => attempt.kind === "revoked" || attempt.kind === "not_accepted";
+var keyValidityOf = (check) => {
+  switch (check.kind) {
+    case "ok":
+    case "locked":
+      return "valid";
+    case "rejected":
+    case "malformed":
+      return "invalid";
+    case "unreachable":
+      return "unknown";
+  }
+};
+
+export {
+  revokeOwnKey,
+  describeRevokeAttempt,
+  keyNoLongerAccepted,
+  keyValidityOf
+};

package/dist/{chunk-DCCSULXK.js → chunk-STUJXZC2.js}

@@ -14,19 +14,19 @@ import {
 } from "./chunk-U4TMAANR.js";
 import {
   callMcpTool
-} from "./chunk-6AYSKVLL.js";
+} from "./chunk-KBN3UP2R.js";
 import {
   reportedInstallSource
-} from "./chunk-BNSKVIAW.js";
+} from "./chunk-CBDJ2X5P.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-5DCDQ5VW.js";
+} from "./chunk-M54ATCOZ.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS,
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-5RGA636G.js";
+} from "./chunk-VOP5U2VX.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-MLGIVVSG.js → chunk-TVVUJTUW.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-Z23ZBYDW.js";
+} from "./chunk-4FWWHCYM.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-5OP5MQI7.js → chunk-V6IW5WMK.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-N6IOSZOE.js";
+} from "./chunk-A6J5Z2HO.js";
 
 // src/answer.ts
 var denyReasonFrom = (value, note) => {