pushary 1.9.103 → 1.9.105

package/dist/{chunk-Z2TX7DVU.js → chunk-KHZCJP7P.js}

@@ -27,11 +27,11 @@ import {
   toolResultErrorText,
   transcriptTokensIn,
   transcriptUsageRequest
-} from "./chunk-MP3SEXXJ.js";
+} from "./chunk-76JOLPST.js";
 import {
   branchFor,
   repoKeyFor
-} from "./chunk-4QO267OY.js";
+} from "./chunk-LMDXQIYT.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -39,33 +39,35 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-ZCYLCD6L.js";
+} from "./chunk-IAASPG5B.js";
 import {
   withRetry
-} from "./chunk-V5DV7XZN.js";
+} from "./chunk-PFZCLG55.js";
 import {
   getMachineId
-} from "./chunk-6N5DQG5F.js";
+} from "./chunk-I3IUS4SR.js";
 import {
   reportedInstallSource
-} from "./chunk-AFGMZZEB.js";
+} from "./chunk-Z5FV7LTD.js";
 import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS,
   canonicalJson,
   claudeConfigDir
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-JCSJEMTA.js";
 import {
   compareVersion,
-  parseVersion,
-  writeFileAtomic,
-  writeJsonAtomicDurable
-} from "./chunk-BQHZRH6S.js";
+  parseVersion
+} from "./chunk-ZCBTCW3T.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-KOUB4ZLX.js";
+} from "./chunk-GKCDMAUM.js";
+import {
+  writeFileAtomic,
+  writeJsonAtomicDurable
+} from "./chunk-T5I4PKOQ.js";
 import {
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
   COMMAND_RECOVERY,
@@ -86,7 +88,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   unansweredRefusalReason
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-O5TB2LMQ.js";
 
 // src/pending.ts
 import { join } from "path";

package/dist/{chunk-5PW25NHB.js → chunk-LK3WA6MK.js}

@@ -1,15 +1,15 @@
 import {
   SETUP_FLAGS
-} from "./chunk-WVAJSBI2.js";
+} from "./chunk-DH22FQAS.js";
 import {
   parseFlags
-} from "./chunk-NMUI3ZWG.js";
+} from "./chunk-YPY4YCIZ.js";
 import {
   UsageError
-} from "./chunk-PPY5N2E6.js";
+} from "./chunk-YU2EUD7O.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PWGD5EP6.js";
+} from "./chunk-YDQ6OJMF.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-O5TB2LMQ.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-KLJ2CTT7.js → chunk-LL7SW4RL.js}

@@ -1,19 +1,19 @@
 import {
   readExistingMachineId
-} from "./chunk-6N5DQG5F.js";
+} from "./chunk-I3IUS4SR.js";
 import {
   getBaseUrl
-} from "./chunk-KOUB4ZLX.js";
+} from "./chunk-GKCDMAUM.js";
 import {
   NetworkError
-} from "./chunk-PPY5N2E6.js";
+} from "./chunk-YU2EUD7O.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";
 import {
   clientContextHeaders,
   redactSecretsFromContent
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-O5TB2LMQ.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-4QO267OY.js → chunk-LMDXQIYT.js}

@@ -2,7 +2,7 @@ import {
   localRepoKey,
   normalizeRepoRemote,
   parseGitBranch
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-O5TB2LMQ.js";
 
 // src/repo.ts
 import { existsSync, readFileSync, statSync } from "fs";

package/dist/{chunk-VD6CAELE.js → chunk-MFJHLVIZ.js}

@@ -1,101 +1,27 @@
 import {
   AGENT_CHOICES
-} from "./chunk-WVAJSBI2.js";
+} from "./chunk-DH22FQAS.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-VJOMBYY5.js";
+} from "./chunk-GUIS6ASL.js";
 import {
   CLAUDE_HOOK_EVENTS,
   CODEX_HOOK_EVENTS,
-  HOOK_SHELL,
   hasCodexHooks,
   holdBudgetOf,
   hookBinaryNameOf,
+  hookCommandTokens,
+  hookExecutableName,
+  isBridgeLocator,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-JCSJEMTA.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-4FAJQPFY.js";
-
-// src/diagnostics/bridge.ts
-import { execFileSync } from "child_process";
-import { existsSync, readFileSync } from "fs";
-import { homedir } from "os";
-import { dirname, join } from "path";
-var BRIDGE_BUNDLE_IDENTIFIER = "com.pushary.app";
-var BRIDGE_HELPER_SUFFIX = "/Contents/Helpers/pushary-bridge";
-var BRIDGE_BUNDLE_ROOTS = ["/Applications/Pushary.app", "$HOME/Applications/Pushary.app"];
-var expandHome = (path, home) => path.replaceAll("$HOME", home);
-var parseBridgeStub = (contents, stubPath) => {
-  const helperSuffix = contents.match(/^H=(\S+)$/m)?.[1] ?? BRIDGE_HELPER_SUFFIX;
-  const cachePath = contents.match(/^C="([^"\n]+)"$/m)?.[1] ?? join(dirname(stubPath), ".bridge-cache");
-  const rootsLine = contents.match(/^for P in ((?:"[^"\n]*"\s*)+); do$/m)?.[1];
-  const bundleRoots = rootsLine ? [...rootsLine.matchAll(/"([^"]*)"/g)].map((match) => match[1]) : BRIDGE_BUNDLE_ROOTS;
-  const bundleIdentifier = contents.match(/kMDItemCFBundleIdentifier == "([^"]+)"/)?.[1] ?? BRIDGE_BUNDLE_IDENTIFIER;
-  return { helperSuffix, cachePath, bundleRoots, bundleIdentifier };
-};
-var resolveBridgeStub = (stubPath, probe) => {
-  const contents = probe.readFile(stubPath);
-  if (contents === null) return { kind: "no-stub", stub: stubPath };
-  const shape = parseBridgeStub(contents, stubPath);
-  const helperIn = (bundle) => `${bundle}${shape.helperSuffix}`;
-  const looked = [];
-  for (const root of shape.bundleRoots.map((root2) => expandHome(root2, probe.home))) {
-    looked.push(root);
-    if (probe.exists(helperIn(root))) return { kind: "bundle", helper: helperIn(root), via: "root" };
-  }
-  const cached = shape.cachePath ? probe.readFile(shape.cachePath)?.split("\n")[0]?.trim() : void 0;
-  if (cached) {
-    looked.push(cached);
-    if (probe.exists(helperIn(cached))) return { kind: "bundle", helper: helperIn(cached), via: "cache" };
-  }
-  for (const found of probe.mdfind(shape.bundleIdentifier)) {
-    looked.push(found);
-    if (probe.exists(helperIn(found))) return { kind: "bundle", helper: helperIn(found), via: "spotlight" };
-  }
-  return { kind: "missing", stub: stubPath, looked };
-};
-var BRIDGE_GONE_MESSAGE = "the Mac app is gone but its hooks remain; run pushary setup or reinstall the app";
-var describeBridgeResolution = (resolution) => {
-  switch (resolution.kind) {
-    case "bundle":
-      return `${resolution.helper} (${resolution.via === "root" ? "installed" : resolution.via === "cache" ? "cached path" : "found by Spotlight"})`;
-    case "missing":
-      return BRIDGE_GONE_MESSAGE;
-    case "no-stub":
-      return `${resolution.stub} is not there; ${BRIDGE_GONE_MESSAGE}`;
-  }
-};
-var isBridgeLocator = (executable) => executable !== null && executable.split(/[/\\]/).pop() === HOOK_LOCATOR_BINARY;
-var spotlight = (bundleIdentifier) => {
-  if (process.platform !== "darwin") return [];
-  try {
-    return execFileSync("/usr/bin/mdfind", [`kMDItemCFBundleIdentifier == "${bundleIdentifier}"`], {
-      encoding: "utf-8",
-      timeout: 5e3,
-      stdio: ["ignore", "pipe", "ignore"]
-    }).split("\n").map((line) => line.trim()).filter((line) => line !== "");
-  } catch {
-    return [];
-  }
-};
-var readOrNull = (path) => {
-  try {
-    return readFileSync(path, "utf-8");
-  } catch {
-    return null;
-  }
-};
-var liveBridgeProbe = () => ({
-  exists: existsSync,
-  readFile: readOrNull,
-  mdfind: spotlight,
-  home: homedir()
-});
+} from "./chunk-O5TB2LMQ.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";
@@ -200,16 +126,8 @@ var missingGeminiHookEvents = (settings) => {
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
 var CLAUDE_HOOK_BINARY = /pushary-[a-z-]*hook/;
 var EXACT_HOOK_BINARY = /^pushary-[a-z-]*(hook|gate)$/;
-var pusharyHookExecutable = (command) => {
-  const tokens = command.match(/"(?:\\.|[^"\\])*"|'[^']*'|\S+/g) ?? [];
-  for (const raw of tokens.reverse()) {
-    const unquoted = raw[0] === '"' && raw.at(-1) === '"' || raw[0] === "'" && raw.at(-1) === "'" ? raw.slice(1, -1) : raw;
-    const token = command.startsWith(`${HOOK_SHELL} `) && raw[0] === '"' ? unquoted.replace(/\\(["\\$`])/g, "$1") : unquoted;
-    const name = hookBinaryNameOf(token.split(/[/\\]/).pop() ?? "");
-    if (name === HOOK_LOCATOR_BINARY || EXACT_HOOK_BINARY.test(name)) return token;
-  }
-  return null;
-};
+var isPusharyHookName = (name) => name === HOOK_LOCATOR_BINARY || EXACT_HOOK_BINARY.test(name);
+var pusharyHookExecutable = (command) => [...hookCommandTokens(command)].reverse().find((token) => isPusharyHookName(hookExecutableName(token))) ?? null;
 var claudeWired = ({ claudeJson, settings, skillExists }) => {
   if (record(record(claudeJson)?.mcpServers)?.pushary) return true;
   const s = record(settings);
@@ -421,10 +339,6 @@ var describeHookOwnership = (entries, names) => {
 };
 
 export {
-  resolveBridgeStub,
-  describeBridgeResolution,
-  isBridgeLocator,
-  liveBridgeProbe,
   GEMINI_HOOK_BINARY,
   GEMINI_HOOK_EVENTS,
   addGeminiMcpServer,
@@ -450,6 +364,8 @@ export {
   describeHoldSentence,
   captureMcpServer,
   restoreMcpServer,
+  DEFAULT_HOOKS_KEY_PATH,
+  hooksAt,
   captureHookTakeover,
   isHookTakeoverReceipt,
   restoreHookTakeover,

package/dist/{chunk-E7WJQBK3.js → chunk-MLLL2ET6.js}

@@ -1,27 +1,31 @@
+import {
+  claudeSettingsLocationFor,
+  readClaudePermissionRules
+} from "./chunk-WUIWHGKF.js";
 import {
   askAgentQuestions,
   defersToNativeMode,
   outcomeOfFailedAsk,
   reportMachineDenial,
   storedWaitDeadline
-} from "./chunk-X3HBR57D.js";
+} from "./chunk-J2HIFUAT.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-4TVLPGJV.js";
+} from "./chunk-FUTFQSRA.js";
 import {
   isAdmitted,
   readAdmissionRules
-} from "./chunk-SA4PCB6N.js";
+} from "./chunk-RKQVMFHN.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-CQ7QE4W2.js";
+} from "./chunk-UUJQK7DJ.js";
 import {
   activeHookSource,
   activeIdentity,
   namedSource
-} from "./chunk-UOE26LPT.js";
+} from "./chunk-JLJJRBTD.js";
 import {
   DEFAULT_SESSION,
   approvalAwaitingRetry,
@@ -37,7 +41,7 @@ import {
   recordBlockedActionHint,
   reportEvent,
   settleQuestionsForToolUse
-} from "./chunk-Z2TX7DVU.js";
+} from "./chunk-KHZCJP7P.js";
 import {
   UNNAMED_ACTION,
   deriveAction,
@@ -48,11 +52,11 @@ import {
   patchDeletesFiles,
   permissionDeniedAction,
   scopePathFor
-} from "./chunk-MP3SEXXJ.js";
+} from "./chunk-76JOLPST.js";
 import {
   repoKeyFor,
   repositoryScopeFor
-} from "./chunk-4QO267OY.js";
+} from "./chunk-LMDXQIYT.js";
 import {
   askUser,
   cancelQuestion,
@@ -69,20 +73,17 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-ZCYLCD6L.js";
+} from "./chunk-IAASPG5B.js";
 import {
   getMachineId
-} from "./chunk-6N5DQG5F.js";
-import {
-  claudeConfigDir
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-I3IUS4SR.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-KOUB4ZLX.js";
+} from "./chunk-GKCDMAUM.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PWGD5EP6.js";
+} from "./chunk-YDQ6OJMF.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -109,7 +110,6 @@ import {
   claudeConsultsItsAllowlist,
   claudePermissionDeniedOutput,
   claudePermissionRequestOutput,
-  claudePermissionRulesFromSettings,
   claudePreToolUseOutput,
   claudePromptTakesTheCall,
   claudeStoppedPermissionRequestOutput,
@@ -139,7 +139,7 @@ import {
   terminalStaysLiveForTheCall,
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-O5TB2LMQ.js";
 
 // src/terminal-answer-watch.ts
 import { closeSync, openSync, readSync, statSync } from "fs";
@@ -234,50 +234,6 @@ var watchForTerminalAnswer = (transcriptPath, call, startedAtMs, signal, pollMs
   tick();
 });
 
-// src/claude-permission-rules.ts
-import { readFileSync, statSync as statSync2 } from "fs";
-import { homedir } from "os";
-import { join } from "path";
-var MANAGED_CLAUDE_SETTINGS_BY_PLATFORM = {
-  darwin: "/Library/Application Support/ClaudeCode/managed-settings.json",
-  linux: "/etc/claude-code/managed-settings.json",
-  win32: "C:\\ProgramData\\ClaudeCode\\managed-settings.json"
-};
-var MAX_CLAUDE_SETTINGS_BYTES = 1048576;
-var claudeSettingsLocationFor = (cwd, environment = process.env, home = homedir(), platform = process.platform) => ({
-  configDir: claudeConfigDir(home, environment),
-  projectDir: environment.CLAUDE_PROJECT_DIR || cwd || void 0,
-  managedSettingsPath: MANAGED_CLAUDE_SETTINGS_BY_PLATFORM[platform]
-});
-var claudeSettingsSources = (location) => [
-  ...location.managedSettingsPath ? [{ path: location.managedSettingsPath, trust: "grants" }] : [],
-  { path: join(location.configDir, "settings.json"), trust: "grants" },
-  ...location.projectDir ? [
-    { path: join(location.projectDir, ".claude", "settings.json"), trust: "restricts_only" },
-    { path: join(location.projectDir, ".claude", "settings.local.json"), trust: "grants" }
-  ] : []
-];
-var isRecord2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-var restrictionsOnly = (document) => {
-  if (!isRecord2(document) || !isRecord2(document.permissions)) return null;
-  const { ask: ask2, deny: deny2 } = document.permissions;
-  return { permissions: { ask: ask2, deny: deny2 } };
-};
-var readSettingsDocument = (path) => {
-  try {
-    const stats = statSync2(path);
-    if (!stats.isFile() || stats.size > MAX_CLAUDE_SETTINGS_BYTES) return null;
-    return JSON.parse(readFileSync(path, "utf8"));
-  } catch {
-    return null;
-  }
-};
-var trustedDocument = ({ path, trust }) => {
-  const document = readSettingsDocument(path);
-  return trust === "grants" ? document : restrictionsOnly(document);
-};
-var readClaudePermissionRules = (location) => claudePermissionRulesFromSettings(claudeSettingsSources(location).map(trustedDocument));
-
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
 var EMIT_TIMEOUT_MS = 3e3;

package/dist/{chunk-COBOR3ST.js → chunk-NM44KCO6.js}

@@ -5,19 +5,21 @@ import {
   hermesAppWiringRecord,
   hermesConfigReceipt,
   hermesSetupReceipt
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-JCSJEMTA.js";
+import {
+  resolvePathBinary
+} from "./chunk-ZCBTCW3T.js";
 import {
   readJsonSafe,
-  resolvePathBinary,
   writeJsonAtomic
-} from "./chunk-BQHZRH6S.js";
+} from "./chunk-T5I4PKOQ.js";
 import {
   isNewerVersion,
   isReleaseVersion
 } from "./chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-O5TB2LMQ.js";
 
 // src/hermes/plugin-payload.ts
 import { createHash } from "crypto";