pushary 1.9.109 → 1.9.111

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (127) hide show
  1. package/CHANGELOG.md +10 -0
  2. package/dist/{api-YCDTPFT7.js → api-AESRTYYT.js} +11 -10
  3. package/dist/bin/pushary-audit.js +3 -3
  4. package/dist/bin/pushary-bell-hook.js +27 -26
  5. package/dist/bin/pushary-bell.js +10 -10
  6. package/dist/bin/pushary-claude.js +25 -24
  7. package/dist/bin/pushary-clean.js +34 -33
  8. package/dist/bin/pushary-codex-bridge.js +21 -20
  9. package/dist/bin/pushary-codex-hook.js +32 -31
  10. package/dist/bin/pushary-codex-session.js +8 -8
  11. package/dist/bin/pushary-codex.js +15 -14
  12. package/dist/bin/pushary-connect.js +28 -27
  13. package/dist/bin/pushary-cowork.js +5 -5
  14. package/dist/bin/pushary-daemon.js +41 -40
  15. package/dist/bin/pushary-disconnect.js +27 -26
  16. package/dist/bin/pushary-display-hook.js +17 -16
  17. package/dist/bin/pushary-doctor.js +42 -41
  18. package/dist/bin/pushary-elicitation-hook.js +27 -26
  19. package/dist/bin/pushary-gemini-bridge.js +15 -14
  20. package/dist/bin/pushary-gemini-hook.js +29 -28
  21. package/dist/bin/pushary-hook.js +32 -31
  22. package/dist/bin/pushary-login.js +21 -20
  23. package/dist/bin/pushary-logout.js +26 -25
  24. package/dist/bin/pushary-mcp.js +12 -11
  25. package/dist/bin/pushary-mode.js +15 -15
  26. package/dist/bin/pushary-notification-hook.js +26 -25
  27. package/dist/bin/pushary-opencode-hook.js +28 -27
  28. package/dist/bin/pushary-permission-denied-hook.js +32 -31
  29. package/dist/bin/pushary-permission-hook.js +32 -31
  30. package/dist/bin/pushary-post-hook.js +26 -25
  31. package/dist/bin/pushary-prompt-hook.js +26 -25
  32. package/dist/bin/pushary-session-end-hook.js +26 -25
  33. package/dist/bin/pushary-session-start-hook.js +35 -34
  34. package/dist/bin/pushary-setup.js +46 -45
  35. package/dist/bin/pushary-stats.js +5 -5
  36. package/dist/bin/pushary-status.js +32 -31
  37. package/dist/bin/pushary-stop-hook.js +26 -25
  38. package/dist/bin/pushary-stopfailure-hook.js +26 -25
  39. package/dist/bin/pushary-suggestions.js +15 -15
  40. package/dist/bin/pushary-transcript-register.js +17 -16
  41. package/dist/bin/pushary-transcripts.js +25 -24
  42. package/dist/bin/pushary-upgrade.js +40 -39
  43. package/dist/bin/pushary-wait.js +15 -15
  44. package/dist/bin/pushary.js +7 -7
  45. package/dist/{chunk-BDAT6H7J.js → chunk-262UYDKT.js} +6 -3
  46. package/dist/{chunk-QMUSLBVA.js → chunk-2MOWY5QL.js} +5 -5
  47. package/dist/{chunk-QPNYMNB7.js → chunk-37F75NBN.js} +2 -2
  48. package/dist/{chunk-BFXJUZUH.js → chunk-3AX5BKYN.js} +2 -2
  49. package/dist/{chunk-DYA7VIL6.js → chunk-4AKZALX4.js} +14 -14
  50. package/dist/{chunk-FIFSPMQZ.js → chunk-4M6VUUTX.js} +3 -3
  51. package/dist/{chunk-K6E24TJ6.js → chunk-54DPX27B.js} +1 -1
  52. package/dist/{chunk-BUBLUKJM.js → chunk-56ANL3UO.js} +13 -10
  53. package/dist/{chunk-4BDOUP4B.js → chunk-5EEW4WIS.js} +5 -5
  54. package/dist/{chunk-G6PHMB3F.js → chunk-5RVL2CQK.js} +3 -3
  55. package/dist/{chunk-7VIJBCMF.js → chunk-75UJ7W6H.js} +2 -2
  56. package/dist/{chunk-F3O5VDQL.js → chunk-76ATPJN2.js} +4 -4
  57. package/dist/{chunk-PEWTRW6S.js → chunk-7HDO5W4C.js} +24 -16
  58. package/dist/{chunk-PZ3X6NFM.js → chunk-AW7IJ56H.js} +4 -4
  59. package/dist/{chunk-3X3FNKAE.js → chunk-BH5WEDQ4.js} +1 -1
  60. package/dist/{chunk-U6LVSHBR.js → chunk-BM32JPXJ.js} +7 -7
  61. package/dist/{chunk-XUKBMRT2.js → chunk-CIT4NO5H.js} +4 -4
  62. package/dist/{chunk-KCKLLGMW.js → chunk-DEHWKUKF.js} +4 -4
  63. package/dist/{chunk-SALM3IYQ.js → chunk-DZE26BID.js} +467 -28
  64. package/dist/{chunk-FR25IWL7.js → chunk-EPMIBLCE.js} +9 -6
  65. package/dist/{chunk-EMEF7ALE.js → chunk-FE7HSLTK.js} +5 -5
  66. package/dist/{chunk-UC2NBQS3.js → chunk-FYVRA5GN.js} +1 -1
  67. package/dist/{chunk-GU7AN46G.js → chunk-G2TTGQ5A.js} +10 -10
  68. package/dist/{chunk-7S262556.js → chunk-G42VQNBC.js} +1 -1
  69. package/dist/{chunk-KCDWWT42.js → chunk-GXTW3W45.js} +1 -1
  70. package/dist/{chunk-MYDTSPIZ.js → chunk-KHWNW4AS.js} +1 -1
  71. package/dist/{chunk-S442423U.js → chunk-KICQRZAT.js} +1 -1
  72. package/dist/{chunk-ULTBTBMV.js → chunk-KLCT2YQD.js} +6 -6
  73. package/dist/{chunk-S7LMAMMY.js → chunk-LDE7L7XO.js} +4 -4
  74. package/dist/{chunk-R7D2YAXW.js → chunk-LMECI62A.js} +6 -6
  75. package/dist/{chunk-I4THVOUC.js → chunk-LTVILMEZ.js} +2 -2
  76. package/dist/{chunk-7KBKJ2KH.js → chunk-LUFKWK7N.js} +3 -3
  77. package/dist/{chunk-VZVEZILS.js → chunk-M73Q37LC.js} +2 -2
  78. package/dist/{chunk-WU3TP2TP.js → chunk-N2VH44GL.js} +6 -6
  79. package/dist/{chunk-ANKVTTB3.js → chunk-NHDTSA7V.js} +1 -1
  80. package/dist/{chunk-4SUNBCR6.js → chunk-NUU2JVOG.js} +3 -3
  81. package/dist/{chunk-UK4Z3X75.js → chunk-NVPCETJ3.js} +1 -1
  82. package/dist/{chunk-3YY6CUU7.js → chunk-NZZFIIH6.js} +4 -4
  83. package/dist/{chunk-ZMZG32RS.js → chunk-O2MZQPP4.js} +7 -3
  84. package/dist/{chunk-RXRKX646.js → chunk-O76PTPKP.js} +1 -1
  85. package/dist/{chunk-QNUGTQKZ.js → chunk-OECCPPO6.js} +3 -3
  86. package/dist/{chunk-KK5YNO2M.js → chunk-PCFIYMK4.js} +2 -2
  87. package/dist/{chunk-X5VHTPAD.js → chunk-PTBWLU4G.js} +5 -5
  88. package/dist/chunk-PYAPWXVP.js +81 -0
  89. package/dist/{chunk-6OSRPTDX.js → chunk-Q63L3VBY.js} +4 -4
  90. package/dist/{chunk-MAWFWQLR.js → chunk-QQMT2JIC.js} +3 -3
  91. package/dist/{chunk-SDZBQQEK.js → chunk-QVGE26SZ.js} +4 -4
  92. package/dist/{chunk-HLZIHAUY.js → chunk-R3KDA7JB.js} +3 -3
  93. package/dist/{chunk-YB2S73VZ.js → chunk-RBM2ROSY.js} +1 -1
  94. package/dist/{chunk-T3B2L64E.js → chunk-RFFIAX33.js} +2 -2
  95. package/dist/{chunk-S2NBNU4K.js → chunk-RUORT3DE.js} +5 -5
  96. package/dist/{chunk-J5EAU44S.js → chunk-SDQQ43FT.js} +1 -1
  97. package/dist/{chunk-II6M23WI.js → chunk-SSW4QRGU.js} +6 -6
  98. package/dist/{chunk-FYK7JV2R.js → chunk-TILEGY4M.js} +11 -8
  99. package/dist/{chunk-VKGSGULO.js → chunk-UN2QALQO.js} +5 -5
  100. package/dist/{chunk-TKJJWIR4.js → chunk-VA4OGALQ.js} +2 -2
  101. package/dist/{chunk-V25XPPEY.js → chunk-WO46WX65.js} +2 -2
  102. package/dist/{chunk-M6SP3FZF.js → chunk-X2XXKXC5.js} +3 -3
  103. package/dist/{chunk-JOF3TPDT.js → chunk-X5P3IO37.js} +2 -2
  104. package/dist/{chunk-4472LNSQ.js → chunk-XJ4PMNCR.js} +1 -1
  105. package/dist/{chunk-P7LHBBM5.js → chunk-Y3N7LIFV.js} +3 -3
  106. package/dist/{chunk-GNOSBEUB.js → chunk-YBQF7DCL.js} +1 -1
  107. package/dist/{chunk-3OPHZY7L.js → chunk-YHHWO4IU.js} +1 -1
  108. package/dist/{chunk-MMHBNMHK.js → chunk-YI5I2TF3.js} +3 -3
  109. package/dist/{chunk-F7BLCVHZ.js → chunk-YILMWIZN.js} +2 -2
  110. package/dist/{chunk-SCQRKKGL.js → chunk-YNTB3MIQ.js} +1 -1
  111. package/dist/{chunk-3SFUJREU.js → chunk-YQMARTNQ.js} +2 -2
  112. package/dist/{chunk-TIU3TP36.js → chunk-YXFLZ2LO.js} +2 -2
  113. package/dist/{chunk-H3FRQS4V.js → chunk-ZLLQO4RU.js} +6 -6
  114. package/dist/{codex-app-cards-switch-CQIIZDPU.js → codex-app-cards-switch-SXY732CY.js} +11 -11
  115. package/dist/{codex-card-routing-KIFZHIHM.js → codex-card-routing-K5FNOTBK.js} +2 -2
  116. package/dist/{codex-desktop-launch-YPISWZJX.js → codex-desktop-launch-SMWGCLWW.js} +1 -1
  117. package/dist/{codex-session-launch-ZL5WZXD7.js → codex-session-launch-MDMNYCCG.js} +18 -17
  118. package/dist/{config-3V3AT3AR.js → config-3R7UVC67.js} +3 -3
  119. package/dist/{global-upgrade-DI4JAPW6.js → global-upgrade-2BXXJQHR.js} +9 -9
  120. package/dist/{identity-XP7JUJJR.js → identity-N45XKYBA.js} +4 -4
  121. package/dist/{live-capabilities-TFDE3XNS.js → live-capabilities-YT7CENI2.js} +4 -4
  122. package/dist/{paths-ZC5TUIHB.js → paths-A2TITMY3.js} +3 -3
  123. package/dist/{reapply-T2BYF7XY.js → reapply-O4TGPUVZ.js} +28 -27
  124. package/dist/src/index.js +31 -30
  125. package/dist/{upgrade-lock-IWVHMUXK.js → upgrade-lock-HYD3MFFS.js} +4 -4
  126. package/dist/{usage-Z6WWH3ED.js → usage-PTPB2XF6.js} +3 -3
  127. package/package.json +1 -1
@@ -2,43 +2,43 @@
2
2
  import {
3
3
  waitResponse,
4
4
  waitWindowResponse
5
- } from "../chunk-ANKVTTB3.js";
5
+ } from "../chunk-NHDTSA7V.js";
6
6
  import {
7
7
  exitOnFailedSettingsRequest
8
- } from "../chunk-R7D2YAXW.js";
8
+ } from "../chunk-LMECI62A.js";
9
9
  import {
10
10
  describeWaitLadder
11
11
  } from "../chunk-CVWG2N3Y.js";
12
- import "../chunk-TIU3TP36.js";
12
+ import "../chunk-YXFLZ2LO.js";
13
13
  import {
14
14
  APPROVAL_RULES_PATH,
15
15
  PUSH_WINDOW_COMMAND,
16
16
  PUSH_WINDOW_RESET_COMMAND
17
- } from "../chunk-7VIJBCMF.js";
17
+ } from "../chunk-75UJ7W6H.js";
18
18
  import {
19
19
  createIo
20
20
  } from "../chunk-FO3MDD26.js";
21
21
  import {
22
22
  exitOnHelpFlag
23
- } from "../chunk-YB2S73VZ.js";
23
+ } from "../chunk-RBM2ROSY.js";
24
24
  import {
25
25
  parseFlags
26
26
  } from "../chunk-YPY4YCIZ.js";
27
27
  import {
28
28
  absoluteUrl
29
- } from "../chunk-QNUGTQKZ.js";
29
+ } from "../chunk-OECCPPO6.js";
30
30
  import {
31
31
  pusharyFetch
32
- } from "../chunk-G6PHMB3F.js";
33
- import "../chunk-J5EAU44S.js";
34
- import "../chunk-4SUNBCR6.js";
35
- import "../chunk-I4THVOUC.js";
36
- import "../chunk-KK5YNO2M.js";
37
- import "../chunk-MAWFWQLR.js";
32
+ } from "../chunk-5RVL2CQK.js";
33
+ import "../chunk-SDQQ43FT.js";
34
+ import "../chunk-NUU2JVOG.js";
35
+ import "../chunk-LTVILMEZ.js";
36
+ import "../chunk-PCFIYMK4.js";
37
+ import "../chunk-QQMT2JIC.js";
38
38
  import {
39
39
  getApiKey,
40
40
  getBaseUrl
41
- } from "../chunk-RXRKX646.js";
41
+ } from "../chunk-O76PTPKP.js";
42
42
  import {
43
43
  UsageError,
44
44
  exitCodeFor
@@ -47,9 +47,9 @@ import "../chunk-T5I4PKOQ.js";
47
47
  import {
48
48
  EXIT
49
49
  } from "../chunk-BG4HHB7E.js";
50
- import "../chunk-MYDTSPIZ.js";
50
+ import "../chunk-KHWNW4AS.js";
51
51
  import "../chunk-ZVU6WMMU.js";
52
- import "../chunk-SALM3IYQ.js";
52
+ import "../chunk-DZE26BID.js";
53
53
  import "../chunk-MLKGABMK.js";
54
54
 
55
55
  // bin/pushary-wait.ts
@@ -1,11 +1,11 @@
1
1
  #!/usr/bin/env node
2
2
  import {
3
3
  installNetworkDefaults
4
- } from "../chunk-G6PHMB3F.js";
5
- import "../chunk-J5EAU44S.js";
6
- import "../chunk-KK5YNO2M.js";
7
- import "../chunk-MAWFWQLR.js";
8
- import "../chunk-RXRKX646.js";
4
+ } from "../chunk-5RVL2CQK.js";
5
+ import "../chunk-SDQQ43FT.js";
6
+ import "../chunk-PCFIYMK4.js";
7
+ import "../chunk-QQMT2JIC.js";
8
+ import "../chunk-O76PTPKP.js";
9
9
  import "../chunk-YU2EUD7O.js";
10
10
  import "../chunk-T5I4PKOQ.js";
11
11
  import {
@@ -15,11 +15,11 @@ import {
15
15
  LISTED_COMMANDS,
16
16
  renderHelp,
17
17
  resolveCommandName
18
- } from "../chunk-MYDTSPIZ.js";
18
+ } from "../chunk-KHWNW4AS.js";
19
19
  import {
20
20
  getPackageVersion
21
21
  } from "../chunk-ZVU6WMMU.js";
22
- import "../chunk-SALM3IYQ.js";
22
+ import "../chunk-DZE26BID.js";
23
23
  import "../chunk-MLKGABMK.js";
24
24
 
25
25
  // src/cli/runtime.ts
@@ -1,14 +1,17 @@
1
1
  import {
2
2
  external_exports
3
3
  } from "./chunk-XMSDA5WA.js";
4
+ import {
5
+ fetchAsCredential
6
+ } from "./chunk-PYAPWXVP.js";
4
7
  import {
5
8
  getBaseUrl
6
- } from "./chunk-RXRKX646.js";
9
+ } from "./chunk-O76PTPKP.js";
7
10
  import {
8
11
  compressTranscriptRecord,
9
12
  redactSecretsFromContent,
10
13
  transcriptRecordPlaintext
11
- } from "./chunk-SALM3IYQ.js";
14
+ } from "./chunk-DZE26BID.js";
12
15
 
13
16
  // src/transcript-api.ts
14
17
  var providerRecipientSchema = external_exports.object({
@@ -32,7 +35,7 @@ var retentionDaysOf = (sessionHistory) => {
32
35
  var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl(), unavailable) => {
33
36
  unavailable?.("capture_failed");
34
37
  try {
35
- const res = await fetch(`${baseUrl}/api/agent/encryption-account`, {
38
+ const res = await fetchAsCredential(apiKey, `${baseUrl}/api/agent/encryption-account`, {
36
39
  headers: { Authorization: `Bearer ${apiKey}` },
37
40
  signal: AbortSignal.timeout(5e3)
38
41
  });
@@ -1,22 +1,22 @@
1
1
  import {
2
2
  cursorGateOwnsClaudeCall,
3
3
  readCursorGateRegistration
4
- } from "./chunk-SDZBQQEK.js";
4
+ } from "./chunk-QVGE26SZ.js";
5
5
  import {
6
6
  registerTranscript
7
- } from "./chunk-BUBLUKJM.js";
7
+ } from "./chunk-56ANL3UO.js";
8
8
  import {
9
9
  namedEvent
10
- } from "./chunk-S2NBNU4K.js";
10
+ } from "./chunk-RUORT3DE.js";
11
11
  import {
12
12
  writeDegraded
13
- } from "./chunk-FYK7JV2R.js";
13
+ } from "./chunk-TILEGY4M.js";
14
14
  import {
15
15
  claudeShapedHookInput,
16
16
  hookCompatibleProfileBySource,
17
17
  isGrokHookPayload,
18
18
  isGrokSessionEndStop
19
- } from "./chunk-SALM3IYQ.js";
19
+ } from "./chunk-DZE26BID.js";
20
20
 
21
21
  // src/tool-hook-input.ts
22
22
  var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode", "cursor_version"];
@@ -1,12 +1,12 @@
1
1
  import {
2
2
  pusharyDir
3
- } from "./chunk-KK5YNO2M.js";
3
+ } from "./chunk-PCFIYMK4.js";
4
4
  import {
5
5
  readJsonSafe
6
6
  } from "./chunk-T5I4PKOQ.js";
7
7
  import {
8
8
  isRecord
9
- } from "./chunk-SALM3IYQ.js";
9
+ } from "./chunk-DZE26BID.js";
10
10
 
11
11
  // src/process-ownership.ts
12
12
  import { createHash, randomUUID } from "crypto";
@@ -7,10 +7,10 @@ import {
7
7
  codexHome,
8
8
  codexHooksJsonIn,
9
9
  isPusharyCodexCommand
10
- } from "./chunk-KK5YNO2M.js";
10
+ } from "./chunk-PCFIYMK4.js";
11
11
  import {
12
12
  resolvePathBinary
13
- } from "./chunk-MAWFWQLR.js";
13
+ } from "./chunk-QQMT2JIC.js";
14
14
  import {
15
15
  getPackageVersion
16
16
  } from "./chunk-ZVU6WMMU.js";
@@ -1,31 +1,31 @@
1
1
  import {
2
2
  claudeSettingsLocationFor,
3
3
  readClaudePermissionRules
4
- } from "./chunk-VZVEZILS.js";
4
+ } from "./chunk-M73Q37LC.js";
5
5
  import {
6
6
  askAgentQuestions,
7
7
  defersToNativeMode,
8
8
  outcomeOfFailedAsk,
9
9
  reportMachineDenial,
10
10
  storedWaitDeadline
11
- } from "./chunk-U6LVSHBR.js";
11
+ } from "./chunk-BM32JPXJ.js";
12
12
  import {
13
13
  isGatingMoment,
14
14
  recordKeylessMoment
15
- } from "./chunk-4472LNSQ.js";
15
+ } from "./chunk-XJ4PMNCR.js";
16
16
  import {
17
17
  isAdmitted,
18
18
  readAdmissionRules
19
- } from "./chunk-QMUSLBVA.js";
19
+ } from "./chunk-2MOWY5QL.js";
20
20
  import {
21
21
  isDeferAnswer,
22
22
  oncePerSession
23
- } from "./chunk-3X3FNKAE.js";
23
+ } from "./chunk-BH5WEDQ4.js";
24
24
  import {
25
25
  activeHookSource,
26
26
  activeIdentity,
27
27
  namedSource
28
- } from "./chunk-S2NBNU4K.js";
28
+ } from "./chunk-RUORT3DE.js";
29
29
  import {
30
30
  DEFAULT_SESSION,
31
31
  approvalAwaitingRetry,
@@ -41,7 +41,7 @@ import {
41
41
  recordBlockedActionHint,
42
42
  reportEvent,
43
43
  settleQuestionsForToolUse
44
- } from "./chunk-PEWTRW6S.js";
44
+ } from "./chunk-7HDO5W4C.js";
45
45
  import {
46
46
  UNNAMED_ACTION,
47
47
  deriveAction,
@@ -52,11 +52,11 @@ import {
52
52
  patchDeletesFiles,
53
53
  permissionDeniedAction,
54
54
  scopePathFor
55
- } from "./chunk-UC2NBQS3.js";
55
+ } from "./chunk-FYVRA5GN.js";
56
56
  import {
57
57
  repoKeyFor,
58
58
  repositoryScopeFor
59
- } from "./chunk-UK4Z3X75.js";
59
+ } from "./chunk-NVPCETJ3.js";
60
60
  import {
61
61
  askUser,
62
62
  cancelQuestion,
@@ -73,17 +73,17 @@ import {
73
73
  waitForQuestion,
74
74
  waitsForThePhone,
75
75
  withdrawQuestion
76
- } from "./chunk-FYK7JV2R.js";
76
+ } from "./chunk-TILEGY4M.js";
77
77
  import {
78
78
  getMachineId
79
- } from "./chunk-J5EAU44S.js";
79
+ } from "./chunk-SDQQ43FT.js";
80
80
  import {
81
81
  getApiKey,
82
82
  getBaseUrl
83
- } from "./chunk-RXRKX646.js";
83
+ } from "./chunk-O76PTPKP.js";
84
84
  import {
85
85
  NPX_LATEST_COMMAND
86
- } from "./chunk-MYDTSPIZ.js";
86
+ } from "./chunk-KHWNW4AS.js";
87
87
  import {
88
88
  AGENT_QUESTION_STRATEGY,
89
89
  AGENT_QUESTION_TOOL,
@@ -139,7 +139,7 @@ import {
139
139
  terminalStaysLiveForTheCall,
140
140
  timeoutActionWithoutLocalPrompt,
141
141
  unansweredRefusalReason
142
- } from "./chunk-SALM3IYQ.js";
142
+ } from "./chunk-DZE26BID.js";
143
143
 
144
144
  // src/terminal-answer-watch.ts
145
145
  import { closeSync, openSync, readSync, statSync } from "fs";
@@ -5,10 +5,10 @@ import {
5
5
  hermesAppWiringRecord,
6
6
  hermesConfigReceipt,
7
7
  hermesSetupReceipt
8
- } from "./chunk-KK5YNO2M.js";
8
+ } from "./chunk-PCFIYMK4.js";
9
9
  import {
10
10
  resolvePathBinary
11
- } from "./chunk-MAWFWQLR.js";
11
+ } from "./chunk-QQMT2JIC.js";
12
12
  import {
13
13
  readJsonSafe,
14
14
  writeJsonAtomic
@@ -19,7 +19,7 @@ import {
19
19
  } from "./chunk-ZVU6WMMU.js";
20
20
  import {
21
21
  isRecord
22
- } from "./chunk-SALM3IYQ.js";
22
+ } from "./chunk-DZE26BID.js";
23
23
 
24
24
  // src/hermes/plugin-payload.ts
25
25
  import { createHash } from "crypto";
@@ -9,7 +9,7 @@ import {
9
9
  isSetupConnectMode,
10
10
  isValidApiKey,
11
11
  normalizeAgentId
12
- } from "./chunk-SALM3IYQ.js";
12
+ } from "./chunk-DZE26BID.js";
13
13
 
14
14
  // src/setup/options.ts
15
15
  var AGENT_CHOICES = SETUP_AGENT_CHOICES;
@@ -7,13 +7,13 @@ import {
7
7
  } from "./chunk-G66WIAST.js";
8
8
  import {
9
9
  ensureDaemonRunning
10
- } from "./chunk-II6M23WI.js";
10
+ } from "./chunk-SSW4QRGU.js";
11
11
  import {
12
12
  hookOwnerOf
13
- } from "./chunk-3YY6CUU7.js";
13
+ } from "./chunk-NZZFIIH6.js";
14
14
  import {
15
15
  hookMeaning
16
- } from "./chunk-UC2NBQS3.js";
16
+ } from "./chunk-FYVRA5GN.js";
17
17
  import {
18
18
  buildTranscriptRecords,
19
19
  decodePublicKey,
@@ -24,26 +24,29 @@ import {
24
24
  recordSealerFor,
25
25
  uploadTranscriptRecords,
26
26
  wrapSessionKey
27
- } from "./chunk-BDAT6H7J.js";
27
+ } from "./chunk-262UYDKT.js";
28
28
  import {
29
29
  external_exports
30
30
  } from "./chunk-XMSDA5WA.js";
31
31
  import {
32
32
  transcriptEnvironmentPreference,
33
33
  transcriptsEnabled
34
- } from "./chunk-7S262556.js";
34
+ } from "./chunk-G42VQNBC.js";
35
+ import {
36
+ fetchAsCredential
37
+ } from "./chunk-PYAPWXVP.js";
35
38
  import {
36
39
  readTranscriptPreference
37
- } from "./chunk-4SUNBCR6.js";
40
+ } from "./chunk-NUU2JVOG.js";
38
41
  import {
39
42
  claudeConfigDir,
40
43
  codexHome,
41
44
  pusharyDir
42
- } from "./chunk-KK5YNO2M.js";
45
+ } from "./chunk-PCFIYMK4.js";
43
46
  import {
44
47
  getApiKey,
45
48
  getBaseUrl
46
- } from "./chunk-RXRKX646.js";
49
+ } from "./chunk-O76PTPKP.js";
47
50
  import {
48
51
  writeJsonAtomic,
49
52
  writeJsonAtomicDurable
@@ -55,7 +58,7 @@ import {
55
58
  isHookSource,
56
59
  isRecord,
57
60
  redactSecretsFromContent
58
- } from "./chunk-SALM3IYQ.js";
61
+ } from "./chunk-DZE26BID.js";
59
62
 
60
63
  // src/transcript-recipient-pin.ts
61
64
  import { createHash } from "crypto";
@@ -1493,7 +1496,7 @@ var startRegisteredTranscripts = (apiKey, machineId, options = {}) => {
1493
1496
  if (raw.expectedSiteId && !verifiedSiteId && Date.now() >= nextVerification && raw.expectedBaseUrl && sameServer(raw.expectedBaseUrl, registry)) {
1494
1497
  nextVerification = Date.now() + 3e4;
1495
1498
  try {
1496
- const response = await fetch(`${registry.baseUrl}/api/agent/encryption-account`, {
1499
+ const response = await fetchAsCredential(apiKey, `${registry.baseUrl}/api/agent/encryption-account`, {
1497
1500
  headers: { Authorization: `Bearer ${apiKey}` },
1498
1501
  signal: AbortSignal.timeout(5e3)
1499
1502
  });
@@ -4,13 +4,13 @@ import {
4
4
  configFailureKind,
5
5
  retryAgentCommand,
6
6
  writeSetupConfigFile
7
- } from "./chunk-P7LHBBM5.js";
7
+ } from "./chunk-Y3N7LIFV.js";
8
8
  import {
9
9
  MCP_BRIDGE_BINARY
10
- } from "./chunk-ZMZG32RS.js";
10
+ } from "./chunk-O2MZQPP4.js";
11
11
  import {
12
12
  KEY_FILE_MODE
13
- } from "./chunk-4SUNBCR6.js";
13
+ } from "./chunk-NUU2JVOG.js";
14
14
  import {
15
15
  CLINE_SERVER_NAME_TAKEN,
16
16
  CLINE_SETTINGS_REFUSALS,
@@ -32,10 +32,10 @@ import {
32
32
  withClinePusharyServer,
33
33
  withRefreshedClineKey,
34
34
  withoutClinePusharyServer
35
- } from "./chunk-KK5YNO2M.js";
35
+ } from "./chunk-PCFIYMK4.js";
36
36
  import {
37
37
  resolveGlobalBinary
38
- } from "./chunk-MAWFWQLR.js";
38
+ } from "./chunk-QQMT2JIC.js";
39
39
  import {
40
40
  readJsonSafe,
41
41
  writeFileAtomic,
@@ -1,9 +1,9 @@
1
1
  import {
2
2
  readExistingMachineId
3
- } from "./chunk-J5EAU44S.js";
3
+ } from "./chunk-SDQQ43FT.js";
4
4
  import {
5
5
  getBaseUrl
6
- } from "./chunk-RXRKX646.js";
6
+ } from "./chunk-O76PTPKP.js";
7
7
  import {
8
8
  NetworkError
9
9
  } from "./chunk-YU2EUD7O.js";
@@ -13,7 +13,7 @@ import {
13
13
  import {
14
14
  clientContextHeaders,
15
15
  redactSecretsFromContent
16
- } from "./chunk-SALM3IYQ.js";
16
+ } from "./chunk-DZE26BID.js";
17
17
 
18
18
  // src/cli/net.ts
19
19
  import { createRequire } from "module";
@@ -1,9 +1,9 @@
1
1
  import {
2
2
  absoluteUrl
3
- } from "./chunk-QNUGTQKZ.js";
3
+ } from "./chunk-OECCPPO6.js";
4
4
  import {
5
5
  KEY_SCOPE
6
- } from "./chunk-SALM3IYQ.js";
6
+ } from "./chunk-DZE26BID.js";
7
7
 
8
8
  // src/cli/approval-settings-pages.ts
9
9
  var API_KEYS_PATH = "/dashboard/agent/settings";
@@ -1,19 +1,19 @@
1
1
  import {
2
2
  macAppBridgeAvailable
3
- } from "./chunk-VKGSGULO.js";
3
+ } from "./chunk-UN2QALQO.js";
4
4
  import {
5
5
  keyPrefix
6
- } from "./chunk-4SUNBCR6.js";
6
+ } from "./chunk-NUU2JVOG.js";
7
7
  import {
8
8
  bridgeAgentKey
9
- } from "./chunk-KK5YNO2M.js";
9
+ } from "./chunk-PCFIYMK4.js";
10
10
  import {
11
11
  readJsonSafe
12
12
  } from "./chunk-T5I4PKOQ.js";
13
13
  import {
14
14
  isRecord,
15
15
  isValidApiKey
16
- } from "./chunk-SALM3IYQ.js";
16
+ } from "./chunk-DZE26BID.js";
17
17
 
18
18
  // src/shared-mcp-key.ts
19
19
  var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
@@ -27,11 +27,11 @@ import {
27
27
  toolResultErrorText,
28
28
  transcriptTokensIn,
29
29
  transcriptUsageRequest
30
- } from "./chunk-UC2NBQS3.js";
30
+ } from "./chunk-FYVRA5GN.js";
31
31
  import {
32
32
  branchFor,
33
33
  repoKeyFor
34
- } from "./chunk-UK4Z3X75.js";
34
+ } from "./chunk-NVPCETJ3.js";
35
35
  import {
36
36
  cancelQuestion,
37
37
  clientErrorKindOf,
@@ -39,39 +39,44 @@ import {
39
39
  reportClientError,
40
40
  sendNotification,
41
41
  waitForAnswer
42
- } from "./chunk-FYK7JV2R.js";
42
+ } from "./chunk-TILEGY4M.js";
43
43
  import {
44
44
  withRetry
45
- } from "./chunk-FR25IWL7.js";
45
+ } from "./chunk-EPMIBLCE.js";
46
+ import {
47
+ fetchAsCredential
48
+ } from "./chunk-PYAPWXVP.js";
46
49
  import {
47
50
  getMachineId
48
- } from "./chunk-J5EAU44S.js";
51
+ } from "./chunk-SDQQ43FT.js";
49
52
  import {
50
53
  reportedInstallSource
51
- } from "./chunk-I4THVOUC.js";
54
+ } from "./chunk-LTVILMEZ.js";
52
55
  import {
53
56
  IDLE_PROMPT_NOTIFICATION,
54
57
  NOTIFICATION_PUSH_TYPES,
55
58
  POSTTOOLUSE_MIRROR_ONLY_TOOLS,
56
59
  canonicalJson,
57
60
  claudeConfigDir
58
- } from "./chunk-KK5YNO2M.js";
61
+ } from "./chunk-PCFIYMK4.js";
59
62
  import {
60
63
  compareVersion,
61
64
  parseVersion
62
- } from "./chunk-MAWFWQLR.js";
65
+ } from "./chunk-QQMT2JIC.js";
63
66
  import {
64
67
  getApiKey,
65
68
  getBaseUrl
66
- } from "./chunk-RXRKX646.js";
69
+ } from "./chunk-O76PTPKP.js";
67
70
  import {
68
71
  writeFileAtomic,
69
72
  writeJsonAtomicDurable
70
73
  } from "./chunk-T5I4PKOQ.js";
71
74
  import {
72
75
  BLOCKED_ACTION_GRANT_TTL_SECONDS,
76
+ CLI_POLICY_REQUEST_CAPABILITIES,
73
77
  COMMAND_RECOVERY,
74
78
  HOOK_SOURCES,
79
+ POLICY_REQUEST_CAPABILITIES_HEADER,
75
80
  REPO_AWARE_AGENTS,
76
81
  blockedActionIdentity,
77
82
  canCarryPendingCommand,
@@ -84,11 +89,12 @@ import {
84
89
  nativeRecord,
85
90
  pendingCommandEvents,
86
91
  pendingCommandInstruction,
92
+ policyRequestCapabilitiesHeaderValue,
87
93
  questionLimitHandBack,
88
94
  resolveAutoResolveOrigin,
89
95
  resolvePolicy,
90
96
  unansweredRefusalReason
91
- } from "./chunk-SALM3IYQ.js";
97
+ } from "./chunk-DZE26BID.js";
92
98
 
93
99
  // src/pending.ts
94
100
  import { join } from "path";
@@ -362,11 +368,13 @@ var policyRequestFor = (agentType) => ({
362
368
  agent: agentType,
363
369
  repoAware: REPO_AWARE_AGENTS.includes(agentType)
364
370
  });
371
+ var POLICY_CACHE_FORMAT = "v2";
365
372
  var policyCacheFile = (apiKey, agent, repoAware = false) => {
366
373
  const parts = [apiKey, agent, repoAware ? "repoAware" : void 0, "sessionToolAware"].filter(Boolean);
367
374
  const hash = createHash2("sha256").update(parts.join(":")).digest("hex").slice(0, 12);
368
- return join2(tmpdir2(), `pushary-policy-${hash}.json`);
375
+ return join2(tmpdir2(), `pushary-policy-${POLICY_CACHE_FORMAT}-${hash}.json`);
369
376
  };
377
+ var POLICY_REQUEST_CAPABILITIES_VALUE = policyRequestCapabilitiesHeaderValue(CLI_POLICY_REQUEST_CAPABILITIES);
370
378
  var fetchPolicy = async (apiKey, agent, repoAware = false, sessionId) => {
371
379
  return withRetry(async () => {
372
380
  const baseUrl = getBaseUrl();
@@ -378,8 +386,8 @@ var fetchPolicy = async (apiKey, agent, repoAware = false, sessionId) => {
378
386
  if (sessionId) params.set("sessionId", sessionId);
379
387
  const query = params.toString();
380
388
  const url = query ? `${baseUrl}/api/mcp/policy?${query}` : `${baseUrl}/api/mcp/policy`;
381
- const response = await fetch(url, {
382
- headers: { "Authorization": `Bearer ${apiKey}` },
389
+ const response = await fetchAsCredential(apiKey, url, {
390
+ headers: { "Authorization": `Bearer ${apiKey}`, [POLICY_REQUEST_CAPABILITIES_HEADER]: POLICY_REQUEST_CAPABILITIES_VALUE },
383
391
  signal: AbortSignal.timeout(1e4)
384
392
  });
385
393
  if (!response.ok) {
@@ -476,7 +484,7 @@ var fetchModeState = async (apiKey, sessionId, reuseWithinMs = 0, signal) => {
476
484
  try {
477
485
  const baseUrl = getBaseUrl();
478
486
  const url = sessionId ? `${baseUrl}/api/mcp/mode?session=${encodeURIComponent(sessionId)}` : `${baseUrl}/api/mcp/mode`;
479
- const response = await fetch(url, {
487
+ const response = await fetchAsCredential(apiKey, url, {
480
488
  headers: { "Authorization": `Bearer ${apiKey}` },
481
489
  signal: AbortSignal.any([AbortSignal.timeout(3e3), ...signal ? [signal] : []])
482
490
  });
@@ -1177,7 +1185,7 @@ var acknowledgePendingCommand = async (apiKey, baseUrl, commandId, sessionId, ma
1177
1185
  try {
1178
1186
  signal?.throwIfAborted();
1179
1187
  if (timeoutMs <= 0) return false;
1180
- const response = await fetch(`${baseUrl}/api/agent/command/ack`, {
1188
+ const response = await fetchAsCredential(apiKey, `${baseUrl}/api/agent/command/ack`, {
1181
1189
  method: "POST",
1182
1190
  headers: {
1183
1191
  "Content-Type": "application/json",
@@ -1214,7 +1222,7 @@ var reportEvent = async (event, options = {}) => {
1214
1222
  const timeoutMs = postTimeoutMs(options.timeoutMs ?? 1e4);
1215
1223
  if (timeoutMs <= 0) return null;
1216
1224
  const storedCommand = clientCanDrain ? readPendingCommand(sessionKey, receiptNamespace) : null;
1217
- const res = await fetch(`${baseUrl}/api/agent/event`, {
1225
+ const res = await fetchAsCredential(apiKey, `${baseUrl}/api/agent/event`, {
1218
1226
  method: "POST",
1219
1227
  headers: {
1220
1228
  "Content-Type": "application/json",
@@ -1,20 +1,20 @@
1
1
  import {
2
2
  openCodeConfigDirFrom
3
- } from "./chunk-VKGSGULO.js";
3
+ } from "./chunk-UN2QALQO.js";
4
4
  import {
5
5
  nativeClaudeInstallPath
6
6
  } from "./chunk-ROVLRXBI.js";
7
7
  import {
8
8
  grokHome
9
- } from "./chunk-S2NBNU4K.js";
9
+ } from "./chunk-RUORT3DE.js";
10
10
  import {
11
11
  claudeConfigDir,
12
12
  clineDataDirectory,
13
13
  codexHomeFrom
14
- } from "./chunk-KK5YNO2M.js";
14
+ } from "./chunk-PCFIYMK4.js";
15
15
  import {
16
16
  HOOK_COMPATIBLE_PROFILES
17
- } from "./chunk-SALM3IYQ.js";
17
+ } from "./chunk-DZE26BID.js";
18
18
 
19
19
  // src/vscode-config.ts
20
20
  import { homedir } from "os";
@@ -1,6 +1,6 @@
1
1
  import {
2
2
  DEFAULT_SESSION
3
- } from "./chunk-PEWTRW6S.js";
3
+ } from "./chunk-7HDO5W4C.js";
4
4
 
5
5
  // src/answer.ts
6
6
  var isDeferAnswer = (value) => value === "defer";