pushary 1.8.0 → 1.8.1

package/dist/{chunk-NQTHFF4W.js → chunk-5YY3IJT4.js}

@@ -22,7 +22,7 @@ var COWORK_STANDING_INSTRUCTIONS = `Pushary is connected as a custom connector.
 - If Pushary tools are missing or disabled, report that once and continue within my authorization. Do not claim a notification or approval was delivered.`;
 
 // ../contracts/src/agent-manifest.ts
-var AGENT_HOOKS_SETUP_COMMAND = "npx @pushary/agent-hooks@latest setup";
+var PUSHARY_SETUP_COMMAND = "npx pushary@latest setup";
 var defaults = {
   hasStoredIdentity: true,
   hookSource: null,
@@ -54,7 +54,7 @@ var AGENTS = {
     managedProvider: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits, subject to Claude Code permission mode and explicit policy."
   },
   claude_chat: {
@@ -81,7 +81,7 @@ var AGENTS = {
     managedProvider: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell and apply_patch edits through native permission hooks; requires a compatible Codex runtime."
   },
   chatgpt: {
@@ -101,7 +101,7 @@ var AGENTS = {
     managedProvider: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native BeforeTool hooks."
   },
   hermes: {
@@ -110,7 +110,7 @@ var AGENTS = {
     policyAgent: "hermes",
     enforcement: "enforced",
     connectVia: "Native Python plugin + approval transport",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Hermes dangerous-command approvals when the Pushary transport is selected; optional PUSHARY_GATE_TOOLS gates named tools.",
     capabilityNote: "Uses the Python plugin, not a macOS bridge HookSource. CLI disconnect and managed-provider controls are not implemented for Hermes."
   },
@@ -123,7 +123,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Editor plugin hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "With installed hooks: shell, MCP execution and Write/Delete/Edit tool calls. Plain MCP remains cooperative."
   },
   vscode: {
@@ -134,7 +134,7 @@ var AGENTS = {
     policyAgent: "vscode",
     enforcement: "enforced",
     connectVia: "Agent plugin hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "PreToolUse approval hooks from the installed agent plugin; the host decides which events it exposes.",
     capabilityNote: "Has both a bridge HookSource and a per-agent policy profile. CLI disconnect and managed-provider controls are not implemented for VS Code."
   },
@@ -148,14 +148,14 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Generated plugin + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell, writes, edits and web fetches when OpenCode itself asks for permission."
   },
   fx: {
     ...defaults,
     label: "fx",
     connectVia: "Local MCP bridge",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     capabilityNote: "fx has no hooks that other tools can register, so Pushary cannot answer fx's own approval prompts. Setup turns off fx's terminal question tool so fx's agent asks through Pushary. fx's full-access mode ignores that setting; there the agent is only instructed to ask through Pushary."
   },
   qwen_code: {
@@ -168,7 +168,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native PreToolUse hooks, matched on Qwen's own tool names and their Claude-shaped aliases."
   },
   codebuddy: {
@@ -181,7 +181,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native PreToolUse hooks, plus PermissionRequest. CodeBuddy implements the Claude Code hook specification."
   },
   qoder: {
@@ -194,7 +194,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native PreToolUse hooks, plus PermissionRequest, over Qoder's superset of the Claude Code event list.",
     capabilityNote: "Qoder documents no user-level instructions file, so the proactive-ask block is not installed. Hooks and MCP are unaffected. Like every agent in this family, the CLI wires it; the macOS app does not yet."
   },
@@ -208,7 +208,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Execute, Create, Edit and ApplyPatch through native PreToolUse hooks in ~/.factory/hooks.json.",
     capabilityNote: "Droid registers MCP servers through `droid mcp add` rather than a documented remote-server config shape, so setup writes hooks only. Add Pushary's MCP server yourself to let Droid send notifications and ask questions."
   },
@@ -222,14 +222,14 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "exec, write and edit through native PreToolUse hooks, answered in Devin's own approve/block schema.",
     capabilityNote: "Devin CLI answers PreToolUse with `{decision}` rather than a permission decision. Pushary blocks an unanswered approval because this adapter cannot request a native prompt reliably. Question and plan dialogs remain with Devin; this adapter does not render their answers. It also fires no Notification event."
   },
   windsurf: {
     ...defaults,
     label: "Windsurf",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     setupChoice: "Other"
   },
   unknown: {
@@ -246,7 +246,7 @@ var AGENTS = {
     ...defaults,
     hasStoredIdentity: false,
     label: "Any MCP client",
-    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
+    setupCommand: PUSHARY_SETUP_COMMAND,
     setupChoice: "Other"
   },
   http: {
@@ -467,6 +467,7 @@ var credentialAssignmentRule = (key, doubleQuoted, singleQuoted, bare) => ({
   replacement: "$1$2$3$4[redacted]$2$3"
 });
 var DISPLAYED_SECRET_SHAPES = {
+  separator: String.raw`[ \t]`,
   privateKeyBody: String.raw`${PEM_LINE_BREAK}?(?:(?:Proc-Type|DEK-Info): [A-Za-z0-9,-]+${PEM_LINE_BREAK})*(?:[A-Za-z0-9+/=\r\n]|\\[rn])*?`,
   urlPassword: `${SHELL_INERT_URL_PASSWORD_UNIT}+`,
   authorizationValue: `${SHELL_INERT_UNIT}+`,
@@ -478,6 +479,7 @@ var DISPLAYED_SECRET_SHAPES = {
   )
 };
 var CUT_OFF_SECRET_SHAPES = {
+  separator: String.raw`\s`,
   privateKeyBody: String.raw`[\s\S]*?`,
   urlPassword: String.raw`[^\s@/]+`,
   authorizationValue: String.raw`\S+`,
@@ -504,8 +506,8 @@ var secretRedactionRules = (shapes) => [
   { pattern: /\bxai-[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
   { pattern: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, replacement: "[redacted]" },
   { pattern: new RegExp(String.raw`\b([a-z][a-z0-9+.-]*:\/\/[^\s:/@]+:)${shapes.urlPassword}@`, "gi"), replacement: "$1[redacted]@" },
-  { pattern: /\bbearer\s+[A-Za-z0-9._~+/=-]+/gi, replacement: "bearer [redacted]" },
-  { pattern: new RegExp(String.raw`\bauthorization:\s*${shapes.authorizationValue}`, "gi"), replacement: "authorization: [redacted]" },
+  { pattern: new RegExp(String.raw`\bbearer${shapes.separator}+[A-Za-z0-9._~+/=-]+`, "gi"), replacement: "bearer [redacted]" },
+  { pattern: new RegExp(String.raw`\bauthorization:${shapes.separator}*${shapes.authorizationValue}`, "gi"), replacement: "authorization: [redacted]" },
   shapes.credentialAssignment
 ];
 var SECRET_REDACTION_RULES = secretRedactionRules(DISPLAYED_SECRET_SHAPES);
@@ -643,7 +645,7 @@ var parseAgentQuestionAnswers = (questions, value) => {
   return answers;
 };
 var INSTALL_SOURCES = [
-  /** `npx @pushary/agent-hooks@latest ...`, the documented one-liner. */
+  /** `npx pushary@latest ...`, the documented one-liner. */
   "npx",
   /** A global or project npm install, invoked as `pushary`. */
   "npm",

package/dist/{chunk-UI36QSBI.js → chunk-64H5IZZD.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-A2A2YTMG.js";
+} from "./chunk-UPLV5AJF.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -14,7 +14,7 @@ import {
   cliPackagePathSegments,
   globalUpgradeEntry,
   ownPackageRoot
-} from "./chunk-NQTHFF4W.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-JZTHGAPA.js → chunk-6TK4IY3A.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-EYK3GSRH.js";
+} from "./chunk-GBNQXYN4.js";
 import {
   ensureDaemonRunning
-} from "./chunk-WE2J62NC.js";
+} from "./chunk-EIGJYCOE.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-MPWXGONV.js";
+} from "./chunk-URNXU3FO.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-SAXBC4AZ.js";
+} from "./chunk-UMMCHS6P.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-OLQRRFBX.js";
+} from "./chunk-72WOCX22.js";
 import {
   readTranscriptPreference
-} from "./chunk-P7WQEVWA.js";
+} from "./chunk-TJMAXQ5Q.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-A2A2YTMG.js";
+} from "./chunk-UPLV5AJF.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-GPEGOGRJ.js";
+} from "./chunk-ON5JW2HP.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-OLQRRFBX.js → chunk-72WOCX22.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-P7WQEVWA.js";
+} from "./chunk-TJMAXQ5Q.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-JU6W3XAU.js → chunk-7ITOAMCD.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-NQTHFF4W.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-JYG4B33G.js → chunk-7U7ZWUTR.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-GPEGOGRJ.js";
+} from "./chunk-ON5JW2HP.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-SIFVFP6T.js → chunk-ASWRMBOM.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-3EVPNIBE.js";
+} from "./chunk-HTEGMMT3.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-HZVVNGEW.js → chunk-CB23AO4D.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-E4FJTUH4.js";
+} from "./chunk-35X5UDML.js";
 import {
   getPackageVersion
-} from "./chunk-NQTHFF4W.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-D2FX3EPW.js → chunk-CHMOVJ2M.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-NQTHFF4W.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-ZVSKMPBZ.js → chunk-DLEKCAQL.js}

@@ -9,7 +9,7 @@ import {
   SETUP_CONNECT_MODES,
   isSetupConnectMode,
   isValidApiKey
-} from "./chunk-NQTHFF4W.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-2ABTSGFT.js → chunk-DVW2MYCM.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-2OY3ZZ5N.js";
+} from "./chunk-2SLCHCVN.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-GPEGOGRJ.js";
+} from "./chunk-ON5JW2HP.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-NQTHFF4W.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-TY4JT7W3.js → chunk-DXBS2EL7.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-E4FJTUH4.js";
+} from "./chunk-35X5UDML.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-WE2J62NC.js → chunk-EIGJYCOE.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-P7WQEVWA.js";
+} from "./chunk-TJMAXQ5Q.js";
 import {
   getMachineId
-} from "./chunk-LXQ5FBBD.js";
+} from "./chunk-4A3UQERT.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-A2A2YTMG.js";
+} from "./chunk-UPLV5AJF.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,14 +20,14 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "./chunk-GPEGOGRJ.js";
+} from "./chunk-ON5JW2HP.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
   getPackageVersion,
   globalPackageFolder,
   globalRootFor
-} from "./chunk-NQTHFF4W.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-CULUZTWQ.js → chunk-F6NTWZZC.js}

@@ -14,36 +14,36 @@ import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-EPCXUP3P.js";
+} from "./chunk-VFFHQC7W.js";
 import {
   cancelQuestion,
   isPolicyConfig,
   sendNotification,
   waitForAnswer
-} from "./chunk-NGDD6TXY.js";
+} from "./chunk-MMVCI6DT.js";
 import {
   clientErrorKindOf,
   reportClientError
-} from "./chunk-CVQYGMSR.js";
+} from "./chunk-KB2FTO4O.js";
 import {
   withRetry
-} from "./chunk-M5ICYGHT.js";
+} from "./chunk-I4HKMUZQ.js";
 import {
   getMachineId
-} from "./chunk-LXQ5FBBD.js";
+} from "./chunk-4A3UQERT.js";
 import {
   reportedInstallSource
-} from "./chunk-DB3ONZB4.js";
+} from "./chunk-5Y2DY6X4.js";
 import {
   canonicalJson
-} from "./chunk-A2A2YTMG.js";
+} from "./chunk-UPLV5AJF.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-GPEGOGRJ.js";
+} from "./chunk-ON5JW2HP.js";
 import {
   ACTION_BODY_MAX,
   AGENT_LABELS_BY_TYPE,
@@ -70,7 +70,7 @@ import {
   resolvePolicy,
   toToolLookup,
   truncateLine
-} from "./chunk-NQTHFF4W.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/policy.ts
 import { createHash } from "crypto";

package/dist/{chunk-KGDWDSNL.js → chunk-FLQPM2GQ.js}

@@ -1,9 +1,9 @@
 import {
   registerTranscript
-} from "./chunk-JZTHGAPA.js";
+} from "./chunk-6TK4IY3A.js";
 import {
   writeDegraded
-} from "./chunk-CVQYGMSR.js";
+} from "./chunk-KB2FTO4O.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-EYK3GSRH.js → chunk-GBNQXYN4.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-ZVSKMPBZ.js";
+} from "./chunk-DLEKCAQL.js";
 import {
   isBridgeLocator
-} from "./chunk-C2WCPBF7.js";
+} from "./chunk-MYHG7PX2.js";
 import {
   pusharyHookExecutable
-} from "./chunk-6J2JC2RT.js";
+} from "./chunk-OCVVSRDA.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-OKXS7WDZ.js";
+} from "./chunk-HOEB6AKG.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-VQKRG3AC.js → chunk-GH6KGWMC.js}

@@ -1,21 +1,21 @@
 import {
   detectClaudeVersion
-} from "./chunk-SIFVFP6T.js";
+} from "./chunk-ASWRMBOM.js";
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-RHR6NARM.js";
+} from "./chunk-W2LJ4O3A.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-AXPCESYO.js";
+} from "./chunk-JRQRNNGA.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
   codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-6J2JC2RT.js";
+} from "./chunk-OCVVSRDA.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -27,7 +27,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-3EVPNIBE.js";
+} from "./chunk-HTEGMMT3.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -47,7 +47,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-A2A2YTMG.js";
+} from "./chunk-UPLV5AJF.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-KVQBWI5T.js → chunk-HBWC3JVZ.js}

@@ -1,10 +1,10 @@
 import {
   pusharyHookExecutable
-} from "./chunk-6J2JC2RT.js";
+} from "./chunk-OCVVSRDA.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-A2A2YTMG.js";
+} from "./chunk-UPLV5AJF.js";
 
 // src/skills-cli.ts
 import { execSync } from "child_process";

package/dist/{chunk-IPVKH2ST.js → chunk-HMNR7B2F.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-P7WQEVWA.js";
+} from "./chunk-TJMAXQ5Q.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-OKXS7WDZ.js → chunk-HOEB6AKG.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-A2A2YTMG.js";
+} from "./chunk-UPLV5AJF.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-Q7E4I6UA.js → chunk-HQRCVEI2.js}

@@ -1,15 +1,15 @@
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-J5TIV3J6.js";
+} from "./chunk-QB6QYZ6B.js";
 import {
   defersToNativeMode,
   reportMachineDenial
-} from "./chunk-CJVVKOSR.js";
+} from "./chunk-5DGNEUXK.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-JU6W3XAU.js";
+} from "./chunk-7ITOAMCD.js";
 import {
   announceSubscriptionRequired,
   denyReasonFrom,
@@ -39,7 +39,7 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-CULUZTWQ.js";
+} from "./chunk-F6NTWZZC.js";
 import {
   DEFAULT_SESSION
 } from "./chunk-N6IOSZOE.js";
@@ -55,17 +55,20 @@ import {
   requestGate,
   sendNotification,
   waitForQuestion
-} from "./chunk-NGDD6TXY.js";
+} from "./chunk-MMVCI6DT.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-M5ICYGHT.js";
+} from "./chunk-I4HKMUZQ.js";
 import {
   getMachineId
-} from "./chunk-LXQ5FBBD.js";
+} from "./chunk-4A3UQERT.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-GPEGOGRJ.js";
+} from "./chunk-ON5JW2HP.js";
+import {
+  NPX_LATEST_COMMAND
+} from "./chunk-35X5UDML.js";
 import {
   AGENT_QUESTION_STRATEGY,
   GATE_BLOCK_REASON_MAX_LENGTH,
@@ -93,7 +96,7 @@ import {
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-NQTHFF4W.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";
@@ -356,7 +359,7 @@ var announceWait = (waitSeconds, answerUrl, sessionId) => {
   } catch {
   }
 };
-var KEYLESS_NOTICE = "[pushary] Not connected (no API key), so your agent runs untouched. Approval moments are counted locally; see them with: npx @pushary/agent-hooks@latest stats. Connect: https://pushary.com/sign-up?utm_source=cli&utm_medium=keyless-hook";
+var KEYLESS_NOTICE = `[pushary] Not connected (no API key), so your agent runs untouched. Approval moments are counted locally; see them with: ${NPX_LATEST_COMMAND} stats. Connect: https://pushary.com/sign-up?utm_source=cli&utm_medium=keyless-hook`;
 var keylessNoticeOnce = (sessionId) => {
   try {
     if (!oncePerSession("keyless", sessionId)) return;

package/dist/{chunk-3EVPNIBE.js → chunk-HTEGMMT3.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-EPCXUP3P.js";
+} from "./chunk-VFFHQC7W.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-A2A2YTMG.js";
+} from "./chunk-UPLV5AJF.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-NQTHFF4W.js";
+} from "./chunk-5YY3IJT4.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-R7437YI3.js → chunk-HVDMGDYV.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-MPWXGONV.js";
+} from "./chunk-URNXU3FO.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-SAXBC4AZ.js";
+} from "./chunk-UMMCHS6P.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-M5ICYGHT.js → chunk-I4HKMUZQ.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-2ABTSGFT.js";
+} from "./chunk-DVW2MYCM.js";
 import {
   installNetworkDefaults
-} from "./chunk-2OY3ZZ5N.js";
+} from "./chunk-2SLCHCVN.js";
 import {
   getBaseUrl
-} from "./chunk-GPEGOGRJ.js";
+} from "./chunk-ON5JW2HP.js";
 
 // src/retry.ts
 var isRetryable = (err) => {