pushary 1.9.114 → 1.9.116

package/dist/{chunk-KPCVIH52.js → chunk-H5TODUJ3.js}

@@ -6745,6 +6745,12 @@ var inlineScriptsOf = (invocation, heredocs) => {
   return heredocs.length > 0 ? { kind: "readable", scripts: heredocs } : HIDDEN_INLINE_SCRIPT;
 };
 var programIsHidden = ({ program }) => program?.expands ?? false;
+var PROGRAM_PATH_UNDER_HOME_OR_PWD = /^\$(?:HOME|PWD|\{HOME\}|\{PWD\})(?:\/[A-Za-z0-9._+-]+)+$/;
+var LEADING_QUOTE = /^"/;
+var commandStartsWithProgramUnderHomeOrPwd = (command, invocation, innermost) => {
+  const programText = innermost.program?.text ?? "";
+  return invocation.program?.text === programText && PROGRAM_PATH_UNDER_HOME_OR_PWD.test(programText) && command.trimStart().replace(LEADING_QUOTE, "").startsWith(programText);
+};
 var SUBSTITUTION_AS_A_PROGRAM = new RegExp(String.raw`(?:^|[;&|({\n]|(?:^|[\s;&|({])(?:${WORDS_THAT_OPEN_A_COMMAND})\s)\s*"?(?:\$\(|\`)`);
 var runsASubstitutionAsAProgram = (command) => {
   const visible = shellVisibleText(withHeredocBodiesSetAside(commandForReading(command)).text);
@@ -6755,7 +6761,7 @@ var parsedSpelledSegment = (segment) => {
   return { text: text3, invocation: invocationOf(text3), heredocs: [], feedsASubstitution: false };
 };
 var roughSpelledSegment = ({ invocation, heredocs, feedsASubstitution }) => ({ text: verbatimInvocationText(invocation), invocation, heredocs, feedsASubstitution });
-var segmentHidesWhatItRuns = (segment, innermost, scripts) => programIsHidden(innermost) || scripts.kind === "hidden" || segment.feedsASubstitution && passesAnInlineScript(innermost);
+var segmentHidesWhatItRuns = (segment, innermost, scripts, programIsReadable) => programIsHidden(innermost) && !programIsReadable || scripts.kind === "hidden" || segment.feedsASubstitution && passesAnInlineScript(innermost);
 var commandsNestedIn = (innermost, scripts) => [
   ...scripts.kind === "readable" ? scripts.scripts : [],
   ...commandsRunByFind(innermost).map(verbatimInvocationText)
@@ -7144,12 +7150,13 @@ var spellCommandInto = (accumulator, command, depth, reach) => {
     spellCommandInto(accumulator, nested, depth + 1, reach);
   };
   const segments = spelledSegmentsOf(command);
-  for (const segment of segments) {
+  for (const [index, segment] of segments.entries()) {
     const innermost = innermostInvocation(segment.invocation);
     const scripts = inlineScriptsOf(innermost, segment.heredocs);
+    const programIsReadable = depth === 0 && index === 0 && commandStartsWithProgramUnderHomeOrPwd(command, segment.invocation, innermost);
     addSpelledForm(accumulator, segment.text);
     addSpelledForms(accumulator, spellingsOfAnInvocation(segment.invocation, innermost));
-    accumulator.hidesWhatItRuns ||= segmentHidesWhatItRuns(segment, innermost, scripts);
+    accumulator.hidesWhatItRuns ||= segmentHidesWhatItRuns(segment, innermost, scripts, programIsReadable);
     for (const nested of commandsNestedIn(innermost, scripts)) spellNested(nested);
     const ranOnBehalf = readsCommandRunners(reach) ? runnerReadingOf(innermost) : NO_INLINE_SCRIPT;
     accumulator.hidesWhatItRuns ||= ranOnBehalf.kind === "hidden" || readsCommandRunners(reach) && runnerRunsWhatASubstitutionPrints(segment, innermost);
@@ -8449,6 +8456,7 @@ var PRETOOLUSE_GATED_TOOLS = [
 var PRETOOLUSE_HANDLED_TOOLS = /* @__PURE__ */ new Set([...PRETOOLUSE_GATED_TOOLS, ...ASKED_IN_EVERY_MODE_TOOLS]);
 var isPermissionRequestOwnedByPreToolUse = (toolName, permissionMode, defers = shouldDeferToNativeMode) => PRETOOLUSE_HANDLED_TOOLS.has(toolName) && (isAskedInEveryMode(toolName) || !defers(permissionMode, toolName));
 var CLAUDE_PRETOOLUSE_MATCHER = [...PRETOOLUSE_HANDLED_TOOLS].join("|");
+var CLAUDE_MCP_PRETOOLUSE_MATCHER = "mcp__.*";
 var LINE_BREAK = /[\r\n]/;
 var bypassModeCovers = (toolName, toolInput) => {
   const arg = extractPolicyArg(toolName, toolInput);
@@ -8465,6 +8473,20 @@ var bypassModeApplies = (input) => isBypassPermissionMode(input.permissionMode)
 var bypassModeAllows = (input) => bypassModeApplies(input) && (bypassStopsOf(input.config) === "nothing" ? !aChosenRuleGovernsInEitherRepository(input, ruleAsksOrRefuses) : bypassModeCoversEveryInput(input));
 var PERMISSIONS_OFF_ASK_REASON = "Permissions are off in your agent, so Pushary only stops for risky steps like this one. You can change this in Settings on pushary.com.";
 var permissionsOffLineAppliesTo = (agentType) => agentType === CLAUDE_CODE_AGENT_TYPE;
+var askAtTheRouteOfAPushOfTheCurrentBranch = (input, repoKey) => {
+  const routes = approvalRoutesOf(input.config);
+  if (routes === null || input.currentBranch === void 0) return void 0;
+  for (const toolInput of input.toolInputs) {
+    const pushes = pushesOfTheCurrentBranchIn(input, toolInput);
+    const route = pushes.length === 0 ? void 0 : findBestRoute(routes, input.toolName, pushes, repoKey);
+    const ask = route && input.config.policies.find((policy) => policy.tool === route.toolPattern && restricts(policy) && !isAutoDeny(policy) && appliesToThisCall(policy, repoKey, input.sessionId));
+    if (ask) {
+      const mode = input.modeState.mode ?? input.config.modeOverride ?? ask.mode;
+      return { ...ask, mode };
+    }
+  }
+  return void 0;
+};
 var permissionsOffAskReason = (input, verdict) => verdict.kind === "gate" && !verdict.scopeReason && !isAskedInEveryMode(input.toolName) && bypassModeApplies(input) && bypassStopsOf(input.config) === "consequences" && !aChosenRuleGovernsInEitherRepository(input) ? PERMISSIONS_OFF_ASK_REASON : void 0;
 var resolveGate = (input) => {
   const { modeState, config, toolName, toolInputs, cwd, sessionId } = input;
@@ -8485,14 +8507,16 @@ var resolveGate = (input) => {
   const verdict = verdictForPolicy(policy);
   const autoDenies = verdict === "deny";
   const allowedByBypassMode = !autoDenies && verdict !== "allow" && bypassModeAllows(input);
-  const autoApproves = verdict === "allow" || allowedByBypassMode;
+  const askBesideARoutedPush = verdict === "allow" ? askAtTheRouteOfAPushOfTheCurrentBranch(input, repoKey) : void 0;
+  const autoApproves = (verdict === "allow" || allowedByBypassMode) && askBesideARoutedPush === void 0;
+  const askedPolicy = askBesideARoutedPush ?? policy;
   if (autoDenies) return { kind: "deny", policy, reason: `Denied by policy for ${policy.tool}` };
   if (isAskedInEveryMode(toolName)) return { kind: "gate", policy };
   if (isModeStateDegraded(modeState)) {
     if (autoApproves) {
       return survivesDegraded(config, toolName, toolInputs, cwd, repoKey, sessionId) ? { kind: "allow", policy, source: "allowlist" } : { kind: "defer", policy };
     }
-    return { kind: "gate", policy };
+    return { kind: "gate", policy: askedPolicy };
   }
   const scopeVerdict = modeState.scope ? strictestScopeVerdict(modeState.scope, input.scopePaths ?? []) : { outcome: "no_contract" };
   if (autoApproves) {
@@ -8507,7 +8531,7 @@ var resolveGate = (input) => {
   const scopeReason = scopeChangeReason(scopeVerdict);
   return {
     kind: "gate",
-    policy,
+    policy: askedPolicy,
     scopeReason,
     scopePath: scopeReason && "path" in scopeVerdict ? widenablePath(scopeVerdict.path) : void 0
   };
@@ -8621,6 +8645,69 @@ var approvalRoutesOf = (config) => {
   const routes = config.approvalRoutes ?? [];
   return Array.isArray(routes) && routes.every(isApprovalRoutePattern) ? routes : null;
 };
+var GIT_PUSH_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set(["-o", "--push-option", "--repo", "--receive-pack", "--exec"]);
+var GIT_PUSH_FLAGS_THAT_PUSH_NO_BRANCH = /* @__PURE__ */ new Set(["--dry-run", "--tags"]);
+var GIT_PUSH_SHORT_FLAGS_WITH_A_DRY_RUN = /^-[A-Za-z]*n[A-Za-z]*$/;
+var HEAD_REFSPECS = /* @__PURE__ */ new Set(["HEAD", "@"]);
+var MOVES_BEFORE_A_PUSH = /^(?:(?:if|elif|while|until)\s+)?(?:(?:cd|pushd|popd)(?:\s|$)|git\s+(?:checkout|switch)(?:\s|$))/;
+var LONGEST_COMMAND_READ_FOR_A_PUSH = 16 * 1024;
+var pushesNoBranchItself = (word) => GIT_PUSH_FLAGS_THAT_PUSH_NO_BRANCH.has(word) || GIT_PUSH_SHORT_FLAGS_WITH_A_DRY_RUN.test(word);
+var pointsGitAtAnotherRepository = (form) => {
+  const [program, ...words] = form.split(" ");
+  if (program !== "git") return false;
+  for (let index = 0; index < words.length && (words[index] ?? "").startsWith("-"); index += 1) {
+    const word = words[index] ?? "";
+    if (word === "-C" || word.startsWith("--git-dir") || word.startsWith("--work-tree")) return true;
+    if (GIT_GLOBAL_OPTIONS_WITH_A_VALUE.has(word)) index += 1;
+  }
+  return false;
+};
+var gitPushWordsOf = (form) => {
+  const [program, subcommand, ...words] = form.split(" ");
+  if (program !== "git" || subcommand !== "push") return null;
+  const flags = [];
+  const operands = [];
+  for (let index = 0; index < words.length; index += 1) {
+    const word = words[index] ?? "";
+    if (pushesNoBranchItself(word)) return null;
+    if (GIT_PUSH_OPTIONS_WITH_A_VALUE.has(word)) index += 1;
+    else if (word.startsWith("-")) flags.push(word);
+    else operands.push(word);
+  }
+  return { flags, operands };
+};
+var pushNamesNoBranch = ({ operands }) => operands.length <= 1 || operands.length === 2 && HEAD_REFSPECS.has(operands[1] ?? "");
+var spellingsOfAPushOfTheBranch = (form, branch) => {
+  const push = gitPushWordsOf(form);
+  if (push === null || !pushNamesNoBranch(push)) return [];
+  const remote = push.operands[0] ?? "origin";
+  return [.../* @__PURE__ */ new Set([`git push ${remote} ${branch}`, ["git push", ...push.flags, remote, branch].join(" ")])];
+};
+var commandReadForAPush = (input, toolInput) => {
+  const command = POSIX_SHELL_TOOLS.has(input.toolName) ? extractPolicyArg(input.toolName, toolInput) : void 0;
+  return command !== void 0 && command.length <= LONGEST_COMMAND_READ_FOR_A_PUSH ? command : void 0;
+};
+var pushesInSegmentsBeforeAMove = (command, branch) => {
+  const pushes = [];
+  for (const segment of spelledSegmentsOf(command)) {
+    const { forms } = commandSpellings(segment.text, SPELLS_COMMAND_RUNNERS_TOO);
+    if (forms.some((form) => MOVES_BEFORE_A_PUSH.test(form))) break;
+    if (!forms.some(pointsGitAtAnotherRepository)) pushes.push(...forms.flatMap((form) => spellingsOfAPushOfTheBranch(form, branch)));
+  }
+  return [...new Set(pushes)];
+};
+var pushesOfTheCurrentBranchIn = (input, toolInput) => {
+  const branch = input.currentBranch;
+  const command = branch !== void 0 && isGitBranch(branch) ? commandReadForAPush(input, toolInput) : void 0;
+  return branch === void 0 || command === void 0 ? [] : pushesInSegmentsBeforeAMove(command, branch);
+};
+var MENTIONS_A_GIT_PUSH = /\bgit\b[\s\S]*\bpush\b/;
+var toolInputMayPushTheCurrentBranch = (toolName, toolInput) => {
+  const command = extractPolicyArg(toolName, toolInput);
+  return command !== void 0 && command.length <= LONGEST_COMMAND_READ_FOR_A_PUSH && MENTIONS_A_GIT_PUSH.test(command);
+};
+var callMayPushTheCurrentBranch = (toolName, toolInputs) => POSIX_SHELL_TOOLS.has(toolName) && toolInputs.some((toolInput) => toolInputMayPushTheCurrentBranch(toolName, toolInput));
+var routeArgumentsOf = (input, toolInput) => [...policyArgForms(input.toolName, toolInput, input.cwd), ...pushesOfTheCurrentBranchIn(input, toolInput)];
 var everyRule = () => true;
 var aChosenRuleGoverns = (input, counts = everyRule) => {
   const chosen = input.config.policies.filter((policy) => !isDefaultRule(policy));
@@ -8630,16 +8717,24 @@ var aChosenRuleGoverns = (input, counts = everyRule) => {
     const args = policyArgForms(input.toolName, toolInput, input.cwd);
     const reading = policyReadingOf(chosen, input.toolName, args, SPELLS_COMMAND_RUNNERS_TOO);
     const governing = governingRuleForReading(chosen, input.toolName, args, reading, input.repoKey, input.sessionId);
-    return governing !== void 0 && counts(governing.policy) || findBestRoute(routes, input.toolName, args, input.repoKey) !== void 0;
+    return governing !== void 0 && counts(governing.policy) || findBestRoute(routes, input.toolName, routeArgumentsOf(input, toolInput), input.repoKey) !== void 0;
   });
 };
 var AUTO_PERMISSION_MODE = "auto";
-var routeDeliveredFor = (input, routes, toolInput) => findBestRoute(routes, input.toolName, policyArgForms(input.toolName, toolInput, input.cwd), input.sharedRepoKey ?? input.repoKey);
+var routeDeliveredFor = (input, routes, toolInput) => findBestRoute(routes, input.toolName, routeArgumentsOf(input, toolInput), input.sharedRepoKey ?? input.repoKey);
 var callWaitsForSomeoneElse = (input) => {
   const routes = approvalRoutesOf(input.config);
   if (routes === null) return false;
   return input.toolInputs.some((toolInput) => routeDeliveredFor(input, routes, toolInput)?.answeredBySomeoneElse === true);
 };
+var namedRouteWaitsForSomeoneElse = (input) => {
+  const routes = approvalRoutesOf(input.config);
+  if (routes === null) return false;
+  return input.toolInputs.some((toolInput) => {
+    const route = routeDeliveredFor(input, routes, toolInput);
+    return route?.answeredBySomeoneElse === true && patternToolName(route.toolPattern) === input.toolName;
+  });
+};
 var matchedRouteOf = (input) => {
   const routes = approvalRoutesOf(input.config);
   if (routes === null) return void 0;
@@ -8648,7 +8743,10 @@ var matchedRouteOf = (input) => {
   if (route === void 0) return void 0;
   return route.repoKey ? { toolPattern: route.toolPattern, repoKey: route.repoKey } : { toolPattern: route.toolPattern };
 };
-var approvalRouteOutranksAutoMode = (input, verdict, permissionMode) => permissionMode === AUTO_PERMISSION_MODE && PRETOOLUSE_HANDLED_TOOLS.has(input.toolName) && verdict.kind === "gate" && !approvalWaitsAtTheAgentsPrompt(verdict.policy.mode) && !approvesWhenUnanswered(verdict.policy) && callWaitsForSomeoneElse(input);
+var verdictCanHoldTheCall = (verdict) => verdict.kind === "gate" && !approvalWaitsAtTheAgentsPrompt(verdict.policy.mode) && !approvesWhenUnanswered(verdict.policy);
+var approvalRouteOutranksAutoMode = (input, verdict, permissionMode) => permissionMode === AUTO_PERMISSION_MODE && PRETOOLUSE_HANDLED_TOOLS.has(input.toolName) && verdictCanHoldTheCall(verdict) && callWaitsForSomeoneElse(input);
+var mcpCallCouldBeHeldForSomeoneElse = (toolName, permissionMode) => permissionMode === AUTO_PERMISSION_MODE && parseMcpToolName(toolName) !== void 0 && !isPusharyOwnTool(toolName);
+var approvalRouteHoldsMcpCall = (input, verdict, permissionMode) => mcpCallCouldBeHeldForSomeoneElse(input.toolName, permissionMode) && verdictCanHoldTheCall(verdict) && namedRouteWaitsForSomeoneElse(input);
 var claudeAllowlistOwnsCall = (input, verdict, permissionMode, rules) => rules !== null && verdict.kind === "gate" && !verdict.scopeReason && !aChosenRuleGoverns(input) && !isAskedInEveryMode(input.toolName) && claudeConsultsItsAllowlist(permissionMode) && agentRulesAllowEveryInput(rules, input.toolName, input.toolInputs, input.cwd);
 var claudePromptTakesTheCall = (facts, input, verdict) => verdict.kind === "gate" && !verdict.scopeReason && terminalStaysLiveForTheCall(facts) && noModeOverrideIsActive(input) && !aChosenRuleGoverns(input) && !editGoesToTheAgentsPrompt({ source: facts.source, event: "PreToolUse", permissionMode: facts.permissionMode }, input, verdict);
 var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
@@ -9172,6 +9270,7 @@ export {
   isSafeReadOnlyCommand,
   isAutoApprove,
   FILE_TARGET_TOOLS,
+  MCP_TOOL_PREFIX,
   parseMcpToolName,
   API_KEY_PREFIX_PATTERN,
   isValidApiKey,
@@ -9209,6 +9308,7 @@ export {
   PRETOOLUSE_HANDLED_TOOLS,
   isPermissionRequestOwnedByPreToolUse,
   CLAUDE_PRETOOLUSE_MATCHER,
+  CLAUDE_MCP_PRETOOLUSE_MATCHER,
   permissionsOffLineAppliesTo,
   permissionsOffAskReason,
   resolveGate,
@@ -9229,8 +9329,12 @@ export {
   claudePermissionRulesFromSettings,
   claudeConsultsItsAllowlist,
   agentRulesAllowEveryInput,
+  callMayPushTheCurrentBranch,
+  namedRouteWaitsForSomeoneElse,
   matchedRouteOf,
   approvalRouteOutranksAutoMode,
+  mcpCallCouldBeHeldForSomeoneElse,
+  approvalRouteHoldsMcpCall,
   claudeAllowlistOwnsCall,
   claudePromptTakesTheCall,
   modeStateFromResponse,

package/dist/{chunk-P4PLDBZK.js → chunk-I5XLH7L3.js}

@@ -1,12 +1,12 @@
 import {
   readMacAppAgentKey
-} from "./chunk-E3A77P52.js";
+} from "./chunk-4Q5J3HRJ.js";
 import {
   API_KEYS_PATH
-} from "./chunk-NG2EWF32.js";
+} from "./chunk-7ELMLTD7.js";
 import {
   absoluteUrl
-} from "./chunk-HJ566HEV.js";
+} from "./chunk-Z3WNBZG6.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -16,10 +16,10 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-22OATDEL.js";
+} from "./chunk-S5B3LKOP.js";
 import {
   isValidApiKey
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";

package/dist/{chunk-3LJWADU2.js → chunk-IC7LNHAX.js}

@@ -4,7 +4,7 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "./chunk-4EFZANH3.js";
+} from "./chunk-R7BP6ZEW.js";
 import {
   CommandReceipts,
   controllerCommandSchema
@@ -14,21 +14,21 @@ import {
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership
-} from "./chunk-TAGLGMA6.js";
+} from "./chunk-PPW3K5DR.js";
 import {
   repositoryScopeFor
-} from "./chunk-4I6FWGZ5.js";
+} from "./chunk-SDMGCRO3.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "./chunk-44O6GG4I.js";
+} from "./chunk-PBM565KU.js";
 import {
   callMcpTool,
   isRetryable
-} from "./chunk-WUREJCUJ.js";
+} from "./chunk-3CYXPFGA.js";
 import {
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
@@ -52,7 +52,7 @@ import {
   parseCodexQuestions,
   planElicitationAsk,
   readElicitationFields
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/codex-question-owner.ts
 import { createHash } from "crypto";

package/dist/{chunk-DSXBMC2N.js → chunk-JQS5YQQZ.js}

@@ -3,24 +3,24 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-T2N7MEO3.js";
+} from "./chunk-FHRXFUGD.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-3ZU77DJH.js";
+} from "./chunk-LQQWATPA.js";
 import {
   getMachineId
-} from "./chunk-F5TQ6TCH.js";
+} from "./chunk-TNQ5JFCV.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-22OATDEL.js";
+} from "./chunk-S5B3LKOP.js";
 import {
   getBaseUrl
-} from "./chunk-GSJUGW3A.js";
+} from "./chunk-NGWG2CHI.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";

package/dist/{chunk-NPG4WCIM.js → chunk-JSTA2JTL.js}

@@ -5,7 +5,7 @@ import {
   MCP_CREDENTIAL_REJECTION_BODY,
   isRecord,
   responseRejectsCredential
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/credential-rejection.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-24M7PB2Y.js → chunk-KK7JA5JP.js}

@@ -1,22 +1,22 @@
 import {
   cursorGateOwnsClaudeCall,
   readCursorGateRegistration
-} from "./chunk-IWUYKDDW.js";
+} from "./chunk-DGZGCKDA.js";
 import {
   registerTranscript
-} from "./chunk-OR5SWH44.js";
+} from "./chunk-ZETS7HPG.js";
 import {
   namedEvent
-} from "./chunk-OJGHJIFQ.js";
+} from "./chunk-5LWC7PSM.js";
 import {
   writeDegraded
-} from "./chunk-44O6GG4I.js";
+} from "./chunk-PBM565KU.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource,
   isGrokHookPayload,
   isGrokSessionEndStop
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode", "cursor_version"];

package/dist/{chunk-53ROMSOB.js → chunk-KVZAFFEE.js}

@@ -1,12 +1,12 @@
 import {
   parseSseMessages
-} from "./chunk-WUREJCUJ.js";
+} from "./chunk-3CYXPFGA.js";
 import {
   fetchAsCredential
-} from "./chunk-NPG4WCIM.js";
+} from "./chunk-JSTA2JTL.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-JCHF4VR3.js";
+} from "./chunk-TWRDOVN4.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-BWSXWX6T.js → chunk-LC2A3GBN.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-RLBTKTOK.js";
+} from "./chunk-ZUVDQOU6.js";
 import {
   readRegularJsonFile,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-3ZU77DJH.js → chunk-LQQWATPA.js}

@@ -4,19 +4,19 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "./chunk-F5TQ6TCH.js";
+} from "./chunk-TNQ5JFCV.js";
 import {
   readControlMode
-} from "./chunk-22OATDEL.js";
+} from "./chunk-S5B3LKOP.js";
 import {
   pusharyDir
-} from "./chunk-RLBTKTOK.js";
+} from "./chunk-ZUVDQOU6.js";
 import {
   resolveGlobalBinary
-} from "./chunk-RIBCPWOB.js";
+} from "./chunk-FU33PDFG.js";
 import {
   getApiKey
-} from "./chunk-GSJUGW3A.js";
+} from "./chunk-NGWG2CHI.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -32,7 +32,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-GSJUGW3A.js → chunk-NGWG2CHI.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-JCHF4VR3.js";
+} from "./chunk-TWRDOVN4.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-233KC6DP.js → chunk-NXEOD5JC.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-RLBTKTOK.js";
+} from "./chunk-ZUVDQOU6.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-5SUTYXCT.js → chunk-OEXJ7AJO.js}

@@ -9,7 +9,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-44O6GG4I.js → chunk-PBM565KU.js}

@@ -6,21 +6,21 @@ import {
   McpToolError,
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-WUREJCUJ.js";
+} from "./chunk-3CYXPFGA.js";
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-XQFHB2EK.js";
+} from "./chunk-PH4LJXTG.js";
 import {
   fetchAsCredential
-} from "./chunk-NPG4WCIM.js";
+} from "./chunk-JSTA2JTL.js";
 import {
   clientReportClaims
-} from "./chunk-RLBTKTOK.js";
+} from "./chunk-ZUVDQOU6.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-GSJUGW3A.js";
+} from "./chunk-NGWG2CHI.js";
 import {
   ASK_AGENT_NAME_MAX,
   CLIENT_REPORT_PATH,
@@ -29,7 +29,7 @@ import {
   TOOL_FAILURE_CODES,
   degradedLine,
   truncateLine
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-B5NKPU2E.js → chunk-PCRLVQW3.js}

@@ -4,13 +4,13 @@ import {
   configFailureKind,
   retryAgentCommand,
   writeSetupConfigFile
-} from "./chunk-MPG4HYQ6.js";
+} from "./chunk-4X6GTMU4.js";
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-53ROMSOB.js";
+} from "./chunk-KVZAFFEE.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-22OATDEL.js";
+} from "./chunk-S5B3LKOP.js";
 import {
   CLINE_SERVER_NAME_TAKEN,
   CLINE_SETTINGS_REFUSALS,
@@ -32,10 +32,10 @@ import {
   withClinePusharyServer,
   withRefreshedClineKey,
   withoutClinePusharyServer
-} from "./chunk-RLBTKTOK.js";
+} from "./chunk-ZUVDQOU6.js";
 import {
   resolveGlobalBinary
-} from "./chunk-RIBCPWOB.js";
+} from "./chunk-FU33PDFG.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-XQFHB2EK.js → chunk-PH4LJXTG.js}

@@ -1,9 +1,9 @@
 import {
   readExistingMachineId
-} from "./chunk-F5TQ6TCH.js";
+} from "./chunk-TNQ5JFCV.js";
 import {
   getBaseUrl
-} from "./chunk-GSJUGW3A.js";
+} from "./chunk-NGWG2CHI.js";
 import {
   NetworkError
 } from "./chunk-YU2EUD7O.js";
@@ -13,7 +13,7 @@ import {
 import {
   clientContextHeaders,
   redactSecretsFromContent
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-DLCECUKY.js → chunk-PPEN3N44.js}

@@ -1,30 +1,30 @@
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "./chunk-XL6DDWWT.js";
+} from "./chunk-CJL7IMWO.js";
 import {
   AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
   claimThrottle,
   releaseThrottle,
   reportEvent
-} from "./chunk-I7HSE5LD.js";
+} from "./chunk-XUHDUD34.js";
 import {
   deriveToolTarget,
   permissionDeniedAction
-} from "./chunk-FQSFN5ZE.js";
+} from "./chunk-27CV6IXW.js";
 import {
   askUser,
   isDecisionStopped,
   isQuestionLimitRefusal,
   waitForQuestion
-} from "./chunk-44O6GG4I.js";
+} from "./chunk-PBM565KU.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-WUREJCUJ.js";
+} from "./chunk-3CYXPFGA.js";
 import {
   getMachineId
-} from "./chunk-F5TQ6TCH.js";
+} from "./chunk-TNQ5JFCV.js";
 import {
   ASK_CONTEXT_MAX,
   agentQuestionContext,
@@ -36,7 +36,7 @@ import {
   questionsShownAsASet,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-TAGLGMA6.js → chunk-PPW3K5DR.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-RLBTKTOK.js";
+} from "./chunk-ZUVDQOU6.js";
 import {
   readJsonSafe
 } from "./chunk-T5I4PKOQ.js";
 import {
   isRecord
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-BYL7RNOM.js → chunk-PPYNBRU6.js}

@@ -531,8 +531,8 @@ var loadedOnce = (load) => {
 };
 
 // src/codex-desktop-proxy.ts
-var loadThePhone = () => import("./api-PCAXOVGM.js");
-var loadTheCardRouting = () => import("./codex-card-routing-IOVURY45.js");
+var loadThePhone = () => import("./api-X624HAAU.js");
+var loadTheCardRouting = () => import("./codex-card-routing-SWDFV5IG.js");
 var theFirstCardLoadsAgain = () => {
 };
 var ASKS_WITHOUT_ROUTING = {};
@@ -1085,7 +1085,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-UI2LQQ6C.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-7XA2J7MU.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");

package/dist/{chunk-5J2OGCUA.js → chunk-Q3GYEEOM.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-22OATDEL.js";
+} from "./chunk-S5B3LKOP.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {