pushary 1.9.102 → 1.9.104

package/dist/{chunk-SXAZPWL7.js → chunk-ORIVT4BL.js}

@@ -4,13 +4,13 @@ import {
   configFailureKind,
   retryAgentCommand,
   writeSetupConfigFile
-} from "./chunk-JECH4NJL.js";
+} from "./chunk-4QI6SBNR.js";
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-AZSOH2SF.js";
+} from "./chunk-GV2MF4NY.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-HYAQIKYB.js";
+} from "./chunk-NKA2PEQQ.js";
 import {
   CLINE_SERVER_NAME_TAKEN,
   CLINE_SETTINGS_REFUSALS,
@@ -32,13 +32,15 @@ import {
   withClinePusharyServer,
   withRefreshedClineKey,
   withoutClinePusharyServer
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-AYWX6M7J.js";
+import {
+  resolveGlobalBinary
+} from "./chunk-VAZCGOLS.js";
 import {
   readJsonSafe,
-  resolveGlobalBinary,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-BQHZRH6S.js";
+} from "./chunk-QENTGE75.js";
 
 // src/fx-config.ts
 var FX_SERVER_NAME = "pushary";

package/dist/{chunk-V5DV7XZN.js → chunk-PK6LBL3Z.js}

@@ -1,17 +1,17 @@
 import {
   keyCheckFromResponse
-} from "./chunk-7BIVBOD5.js";
+} from "./chunk-NGY2WS3X.js";
 import {
   installNetworkDefaults
-} from "./chunk-KLJ2CTT7.js";
+} from "./chunk-ID4BZRBW.js";
 import {
   getBaseUrl
-} from "./chunk-KOUB4ZLX.js";
+} from "./chunk-3A7REECH.js";
 import {
   isRecord,
   isToolErrorResult,
   toolFailureCodeOfResult
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-5YVBVJOH.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-6N5DQG5F.js → chunk-PYUN7HNY.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-AYWX6M7J.js";
 import {
   writeFileAtomic
-} from "./chunk-BQHZRH6S.js";
+} from "./chunk-QENTGE75.js";
 
 // src/identity.ts
 import { randomUUID } from "crypto";

package/dist/chunk-QENTGE75.js

@@ -0,0 +1,86 @@
+// src/cli/fsx.ts
+import { copyFileSync, lstatSync, realpathSync, existsSync, fchmodSync, fsyncSync, mkdirSync, openSync, closeSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "fs";
+import { dirname, join } from "path";
+var readJsonSafe = (filePath) => {
+  let raw;
+  try {
+    raw = readFileSync(filePath, "utf-8");
+  } catch (err) {
+    const error = err;
+    if (error.code === "ENOENT") return { kind: "missing" };
+    return { kind: "unreadable", error };
+  }
+  if (raw.trim() === "") return { kind: "ok", value: {} };
+  try {
+    const value = JSON.parse(raw);
+    return { kind: "ok", value };
+  } catch (err) {
+    return { kind: "unparseable", error: err, raw };
+  }
+};
+var isFile = (path) => {
+  try {
+    return statSync(path).isFile();
+  } catch {
+    return false;
+  }
+};
+var readFileOrMissing = (path) => {
+  try {
+    return readFileSync(path, "utf-8");
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") return null;
+    throw error;
+  }
+};
+var stamp = () => (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+var backupFile = (filePath) => {
+  const target = `${filePath}.pushary-backup-${stamp()}`;
+  copyFileSync(filePath, target);
+  return target;
+};
+var writeFileAtomic = (filePath, contents, mode, encoding = "utf-8") => {
+  const target = lstatSync(filePath, { throwIfNoEntry: false })?.isSymbolicLink() ? realpathSync(filePath) : filePath;
+  const dir = dirname(target);
+  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+  const temp = join(dir, `.${process.pid}-${stamp()}.pushary-tmp`);
+  try {
+    writeFileSync(temp, contents, mode === void 0 ? encoding : { encoding, mode });
+    const handle = openSync(temp, "r+");
+    try {
+      if (mode !== void 0) fchmodSync(handle, mode);
+      fsyncSync(handle);
+    } finally {
+      closeSync(handle);
+    }
+    renameSync(temp, target);
+  } catch (err) {
+    try {
+      if (existsSync(temp)) unlinkSync(temp);
+    } catch {
+    }
+    throw err;
+  }
+};
+var writeJsonAtomic = (filePath, data, mode) => writeFileAtomic(filePath, `${JSON.stringify(data, null, 2)}
+`, mode);
+var writeJsonAtomicDurable = (filePath, data, mode) => {
+  writeJsonAtomic(filePath, data, mode);
+  if (process.platform === "win32") return;
+  const directory = openSync(dirname(filePath), "r");
+  try {
+    fsyncSync(directory);
+  } finally {
+    closeSync(directory);
+  }
+};
+
+export {
+  readJsonSafe,
+  isFile,
+  readFileOrMissing,
+  backupFile,
+  writeFileAtomic,
+  writeJsonAtomic,
+  writeJsonAtomicDurable
+};

package/dist/{chunk-PM34Z5WX.js → chunk-RDUY7MKN.js}

@@ -1,15 +1,15 @@
 import {
   compatibleConfigFile
-} from "./chunk-UOE26LPT.js";
+} from "./chunk-5BX57BGT.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-VD6CAELE.js";
+} from "./chunk-RYUIXLZ5.js";
 import {
   AGENT_CHOICES
-} from "./chunk-WVAJSBI2.js";
+} from "./chunk-ZBT3U2VB.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -19,10 +19,10 @@ import {
   pusharyDir,
   vscodePluginDir,
   windowsNodeLauncherFor
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-AYWX6M7J.js";
 import {
   readJsonSafe
-} from "./chunk-BQHZRH6S.js";
+} from "./chunk-QENTGE75.js";
 import {
   HOOK_BUDGETS,
   HOOK_COMPATIBLE_PROFILES,
@@ -30,7 +30,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-5YVBVJOH.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-X3HBR57D.js → chunk-RUN772MN.js}

@@ -1,30 +1,30 @@
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "./chunk-CQ7QE4W2.js";
+} from "./chunk-CFTPHNBY.js";
 import {
   AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
   claimThrottle,
   releaseThrottle,
   reportEvent
-} from "./chunk-Z2TX7DVU.js";
+} from "./chunk-UUYLBSAU.js";
 import {
   deriveToolTarget,
   permissionDeniedAction
-} from "./chunk-MP3SEXXJ.js";
+} from "./chunk-OFRQNTJD.js";
 import {
   askUser,
   isDecisionStopped,
   isQuestionLimitRefusal,
   waitForQuestion
-} from "./chunk-ZCYLCD6L.js";
+} from "./chunk-CC4LGKEZ.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-V5DV7XZN.js";
+} from "./chunk-PK6LBL3Z.js";
 import {
   getMachineId
-} from "./chunk-6N5DQG5F.js";
+} from "./chunk-PYUN7HNY.js";
 import {
   ASK_CONTEXT_MAX,
   agentQuestionContext,
@@ -36,7 +36,7 @@ import {
   questionsShownAsASet,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-5YVBVJOH.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-VD6CAELE.js → chunk-RYUIXLZ5.js}

@@ -1,9 +1,9 @@
 import {
   AGENT_CHOICES
-} from "./chunk-WVAJSBI2.js";
+} from "./chunk-ZBT3U2VB.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-VJOMBYY5.js";
+} from "./chunk-U5DBYW63.js";
 import {
   CLAUDE_HOOK_EVENTS,
   CODEX_HOOK_EVENTS,
@@ -13,13 +13,13 @@ import {
   hookBinaryNameOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-AYWX6M7J.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-5YVBVJOH.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-2PR5EP7N.js → chunk-SJCHJQKT.js}

@@ -13,16 +13,16 @@ import {
 } from "./chunk-G66WIAST.js";
 import {
   keyPrefix
-} from "./chunk-HYAQIKYB.js";
+} from "./chunk-NKA2PEQQ.js";
 import {
   getBaseUrl
-} from "./chunk-KOUB4ZLX.js";
+} from "./chunk-3A7REECH.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PWGD5EP6.js";
+} from "./chunk-YDT6TVGN.js";
 import {
   isValidApiKey
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-5YVBVJOH.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-EOD3DBIN.js → chunk-SJJCCFD5.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-AYWX6M7J.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "./chunk-BQHZRH6S.js";
+} from "./chunk-QENTGE75.js";
 import {
   CLI_PACKAGE_NAMES,
   POSIX_GLOBAL_ROOT_SEGMENTS,
@@ -17,7 +17,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isAutoUpdateResult
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-5YVBVJOH.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-3K7PB5LI.js → chunk-SPM4VNED.js}

@@ -1,12 +1,12 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-RVSRPDRF.js";
+} from "./chunk-AE2BQ3XM.js";
 import {
   retryAgentCommand
-} from "./chunk-JECH4NJL.js";
+} from "./chunk-4QI6SBNR.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PWGD5EP6.js";
+} from "./chunk-YDT6TVGN.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-3Q2X3T3U.js → chunk-SVZPRTCK.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-HYAQIKYB.js";
+} from "./chunk-NKA2PEQQ.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-UQWEH7CK.js → chunk-TMJK3CLD.js}

@@ -9,20 +9,20 @@ import {
   installedCodexApp,
   readCodexAppRuntime,
   shellQuoted
-} from "./chunk-Y3SZVZF6.js";
+} from "./chunk-N4RIGNDX.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-NZQEABRO.js";
+} from "./chunk-OPV6724W.js";
+import {
+  writeFileAtomic
+} from "./chunk-QENTGE75.js";
 import {
   CODEX_APP_LAUNCH_AT_LOGIN_VERB,
   CODEX_APP_LAUNCH_VARIABLE
 } from "./chunk-E46NE7FB.js";
-import {
-  writeFileAtomic
-} from "./chunk-BQHZRH6S.js";
 
 // src/codex-app-cards-switch.ts
 import { execFileSync as execFileSync2 } from "child_process";

package/dist/{chunk-AHIAB7JQ.js → chunk-TYH7SNKD.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-5YVBVJOH.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-PPWEBIKL.js → chunk-TYM6IH5F.js}

@@ -5,19 +5,21 @@ import {
   hermesAppWiringRecord,
   hermesConfigReceipt,
   hermesSetupReceipt
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-AYWX6M7J.js";
+import {
+  resolvePathBinary
+} from "./chunk-VAZCGOLS.js";
 import {
   readJsonSafe,
-  resolvePathBinary,
   writeJsonAtomic
-} from "./chunk-BQHZRH6S.js";
+} from "./chunk-QENTGE75.js";
 import {
   isNewerVersion,
   isReleaseVersion
 } from "./chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-5YVBVJOH.js";
 
 // src/hermes/plugin-payload.ts
 import { createHash } from "crypto";
@@ -1311,7 +1313,7 @@ def _await_decision(request, created, correlation_id: str, offered, uses_select:
     return _decided(request, correlation_id, "deny", None)
 ` },
   { path: "cancellation.py", contents: 'from __future__ import annotations\n\nfrom typing import Literal, Mapping, Tuple\n\nCancellation = Literal[\n    "withdrawn_by_this_call",\n    "cancelled_unproven",\n    "already_cancelled",\n    "not_pending",\n    "unreachable",\n]\n\nWITHDRAWN_BY_THIS_CALL: Cancellation = "withdrawn_by_this_call"\nCANCELLED_UNPROVEN: Cancellation = "cancelled_unproven"\nALREADY_CANCELLED: Cancellation = "already_cancelled"\nNOT_PENDING: Cancellation = "not_pending"\nUNREACHABLE: Cancellation = "unreachable"\nCANCELLATIONS: Tuple[Cancellation, ...] = (\n    WITHDRAWN_BY_THIS_CALL,\n    CANCELLED_UNPROVEN,\n    ALREADY_CANCELLED,\n    NOT_PENDING,\n    UNREACHABLE,\n)\n\nUNAVAILABLE_STATUS = "unavailable"\nSTOP_HANDOFF = "stop"\n\n\ndef classify_cancellation(response: object) -> Cancellation:\n    if not isinstance(response, Mapping):\n        return UNREACHABLE\n    fields: Mapping[object, object] = response\n    cancelled = fields.get("cancelled")\n    by_this_call = fields.get("cancelledByThisCall")\n    if (\n        not isinstance(cancelled, bool)\n        or fields.get("status") == UNAVAILABLE_STATUS\n        or fields.get("handoffAction") == STOP_HANDOFF\n        or (by_this_call is not None and not isinstance(by_this_call, bool))\n        or (by_this_call is True and not cancelled)\n    ):\n        return UNREACHABLE\n    if not cancelled:\n        return NOT_PENDING\n    if by_this_call is None:\n        return CANCELLED_UNPROVEN\n    return WITHDRAWN_BY_THIS_CALL if by_this_call else ALREADY_CANCELLED\n' },
-  { path: "dashboard/manifest.json", contents: '{\n  "name": "pushary",\n  "label": "Pushary",\n  "description": "Approvals Pushary is carrying to your phone, answerable from Hermes Desktop",\n  "version": "1.0.0",\n  "tab": { "hidden": true },\n  "entry": "web.js",\n  "api": "plugin_api.py"\n}\n' },
+  { path: "dashboard/manifest.json", contents: '{\n  "name": "pushary",\n  "label": "Pushary",\n  "description": "Approvals Pushary is carrying to your phone, answerable from Hermes Desktop",\n  "version": "1.0.1",\n  "tab": { "hidden": true },\n  "entry": "web.js",\n  "api": "plugin_api.py"\n}\n' },
   { path: "dashboard/plugin_api.py", contents: `import importlib
 import sys
 import time
@@ -1590,6 +1592,11 @@ SNAPSHOT_PRUNE_INTERVAL_SECONDS = 60 * 60
 SOURCE_UNAVAILABLE = "source_unavailable"
 HISTORY_NOT_ALLOWED_WARNING = ("[pushary] Hermes session history is not saved on this computer; it needs "
                                "\`npx pushary@latest setup\` with the key Hermes uses, or Session history turned on in the Pushary Mac app")
+HELPER_ENVIRONMENT_NAMES = frozenset({
+    "HOME", "PATH", "TMPDIR", "LANG", "LC_ALL", "LC_CTYPE",
+    "SYSTEMROOT", "PATHEXT", "COMSPEC", "USERPROFILE", "APPDATA", "LOCALAPPDATA", "TEMP", "TMP",
+    "PUSHARY_BASE_URL", "PUSHARY_API_URL", "PUSHARY_CONFIG_FILE", "PUSHARY_TRANSCRIPTS", "PUSHARY_TRANSCRIPT_REGISTRY_DIR",
+})
 
 
 class _Authorization(NamedTuple):
@@ -1717,6 +1724,14 @@ def write_snapshot(path: Path, session_id: str, messages: list[dict[str, object]
         Path(temporary).unlink(missing_ok=True)
 
 
+def _helper_environment() -> dict[str, str]:
+    return {name: value for name, value in os.environ.items() if name in HELPER_ENVIRONMENT_NAMES}
+
+
+def _registration_environment(key: str) -> dict[str, str]:
+    return {**_helper_environment(), "PUSHARY_API_KEY": key, "PUSHARY_BASE_URL": api.BASE_URL}
+
+
 def _registration_command(key: str) -> list[str] | None:
     root = Path.home() / ".pushary"
     try:
@@ -1731,7 +1746,7 @@ def _registration_command(key: str) -> list[str] | None:
             command = [helper, "hermes"]
         result = subprocess.run([helper, "authorize-export"],
                                 input=json.dumps({"apiKey": key, "baseUrl": api.BASE_URL}), text=True,
-                                stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, timeout=5, check=False)
+                                env=_helper_environment(), stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, timeout=5, check=False)
         if result.returncode != 0:
             return None
         authorization = json.loads(result.stdout)
@@ -1885,8 +1900,7 @@ def _export_loop(database_path: Path, session_id: str, key: str, command: list[s
             if ending or time.monotonic() >= next_registration:
                 payload = {"session_id": session_id, "cwd": str(database_path.parent), "transcript_path": str(path),
                            "hook_event_name": "SessionEnd" if ending else "SessionStart"}
-                environment = {**os.environ, "PUSHARY_API_KEY": key, "PUSHARY_BASE_URL": api.BASE_URL}
-                result = subprocess.run(command, input=json.dumps(payload), text=True, env=environment,
+                result = subprocess.run(command, input=json.dumps(payload), text=True, env=_registration_environment(key),
                                         stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL, timeout=5, check=False)
                 if result.returncode != 0:
                     logger.warning("[pushary] Hermes history reader could not register")
@@ -2084,7 +2098,7 @@ def record_plugin_load(approval_transport_registered, home=None, pid=None, now=N
         logger.debug("[pushary] could not record the plugin load: %s", exc)
         return None
 ` },
-  { path: "plugin.yaml", contents: 'name: pushary\nversion: 1.0.0\ndescription: Push notifications and human-in-the-loop for Hermes Agent via Pushary\nauthor: RalphNex OU\nrequires_env:\n  - name: PUSHARY_API_KEY\n    description: Your Pushary API key\n    url: https://pushary.com/sign-up?from=hermes\n    secret: true\nconfig_schema:\n  api_key:\n    type: secret\n    env: PUSHARY_API_KEY\n    label: Pushary API key\n    description: "Get one at pushary.com/sign-up?from=hermes"\n    required: true\nprovides_tools:\n  - pushary_remind\n  - pushary_notify\n  - pushary_ask\n  - pushary_wait\n  - pushary_cancel\n  - pushary_propose_scope\n  - pushary_enroll\n  - pushary_ask_end_user\nprovides_hooks:\n  - pre_llm_call\n  - pre_tool_call\n  - post_tool_call\n  - on_session_start\n  - on_session_end\n  - on_session_finalize\n  - post_approval_response\nprovides_approval_transports:\n  - pushary\n' },
+  { path: "plugin.yaml", contents: 'name: pushary\nversion: 1.0.1\ndescription: Push notifications and human-in-the-loop for Hermes Agent via Pushary\nauthor: RalphNex OU\nrequires_env:\n  - name: PUSHARY_API_KEY\n    description: Your Pushary API key\n    url: https://pushary.com/sign-up?from=hermes\n    secret: true\nconfig_schema:\n  api_key:\n    type: secret\n    env: PUSHARY_API_KEY\n    label: Pushary API key\n    description: "Get one at pushary.com/sign-up?from=hermes"\n    required: true\nprovides_tools:\n  - pushary_remind\n  - pushary_notify\n  - pushary_ask\n  - pushary_wait\n  - pushary_cancel\n  - pushary_propose_scope\n  - pushary_enroll\n  - pushary_ask_end_user\nprovides_hooks:\n  - pre_llm_call\n  - pre_tool_call\n  - post_tool_call\n  - on_session_start\n  - on_session_end\n  - on_session_finalize\n  - post_approval_response\nprovides_approval_transports:\n  - pushary\n' },
   { path: "schemas.py", contents: `PUSHARY_REMIND = {
     "name": "pushary_remind",
     "description": "Schedule a one-time personal reminder on Pushary, even after Hermes exits. Use body plus in_minutes or at (ISO timestamp with explicit UTC offset, within 30 days). Never guess the user's timezone. Confirm the returned time. No arguments lists pending reminders; cancel_reminder_id cancels a scheduled one. Use Hermes cron for agent work; use this for reminding the operator.",

package/dist/{chunk-VJOMBYY5.js → chunk-U5DBYW63.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-AYWX6M7J.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-TLERJKSE.js → chunk-UL52HYKN.js}

@@ -2,7 +2,7 @@ import {
   isApprovalMode,
   isRecord,
   isTimeoutAction
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-5YVBVJOH.js";
 
 // src/cli/settings-response.ts
 var isFiniteNumber = (value) => typeof value === "number" && Number.isFinite(value);

package/dist/{chunk-Z2TX7DVU.js → chunk-UUYLBSAU.js}

@@ -27,11 +27,11 @@ import {
   toolResultErrorText,
   transcriptTokensIn,
   transcriptUsageRequest
-} from "./chunk-MP3SEXXJ.js";
+} from "./chunk-OFRQNTJD.js";
 import {
   branchFor,
   repoKeyFor
-} from "./chunk-4QO267OY.js";
+} from "./chunk-GV5TEADP.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -39,33 +39,35 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-ZCYLCD6L.js";
+} from "./chunk-CC4LGKEZ.js";
 import {
   withRetry
-} from "./chunk-V5DV7XZN.js";
+} from "./chunk-PK6LBL3Z.js";
 import {
   getMachineId
-} from "./chunk-6N5DQG5F.js";
+} from "./chunk-PYUN7HNY.js";
 import {
   reportedInstallSource
-} from "./chunk-AFGMZZEB.js";
+} from "./chunk-FH6PHTUD.js";
 import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS,
   canonicalJson,
   claudeConfigDir
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-AYWX6M7J.js";
 import {
   compareVersion,
-  parseVersion,
-  writeFileAtomic,
-  writeJsonAtomicDurable
-} from "./chunk-BQHZRH6S.js";
+  parseVersion
+} from "./chunk-VAZCGOLS.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-KOUB4ZLX.js";
+} from "./chunk-3A7REECH.js";
+import {
+  writeFileAtomic,
+  writeJsonAtomicDurable
+} from "./chunk-QENTGE75.js";
 import {
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
   COMMAND_RECOVERY,
@@ -86,7 +88,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   unansweredRefusalReason
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-5YVBVJOH.js";
 
 // src/pending.ts
 import { join } from "path";

package/dist/{chunk-7OZOFTTB.js → chunk-UYJLXAP4.js}

@@ -3,24 +3,24 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-J6SSLXSU.js";
+} from "./chunk-4OLWSYX5.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-NZQEABRO.js";
+} from "./chunk-OPV6724W.js";
+import {
+  getMachineId
+} from "./chunk-PYUN7HNY.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-HYAQIKYB.js";
-import {
-  getMachineId
-} from "./chunk-6N5DQG5F.js";
+} from "./chunk-NKA2PEQQ.js";
 import {
   getBaseUrl
-} from "./chunk-KOUB4ZLX.js";
+} from "./chunk-3A7REECH.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";