pushary 1.9.119 → 1.9.120

package/dist/{chunk-R67NTMBY.js → chunk-SJPH24TK.js}

@@ -1,28 +1,28 @@
+import {
+  canOpenBrowser,
+  openInBrowser
+} from "./chunk-PUZZELE6.js";
 import {
   generateKeypair,
   openSealedKey,
   publicKeyFingerprint
 } from "./chunk-3EGEA4KH.js";
-import {
-  canOpenBrowser,
-  openInBrowser
-} from "./chunk-PUZZELE6.js";
 import {
   PLAN_CONFIGS,
   PLAN_TYPES
 } from "./chunk-G66WIAST.js";
 import {
   keyPrefix
-} from "./chunk-YZ7V2LVG.js";
+} from "./chunk-CPBS6LS3.js";
 import {
   getBaseUrl
-} from "./chunk-R3RTISDD.js";
+} from "./chunk-MZX35RFX.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-7VRL6XYM.js";
 import {
   isValidApiKey
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-ISVHV2DP.js → chunk-SSTO42XS.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-2UE2NDCX.js → chunk-SUI5JE6T.js}

@@ -9,7 +9,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-3B7S2H4R.js → chunk-T57CIR6H.js}

@@ -2,7 +2,7 @@ import {
   isApprovalMode,
   isRecord,
   isTimeoutAction
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/cli/settings-response.ts
 var isFiniteNumber = (value) => typeof value === "number" && Number.isFinite(value);

package/dist/{chunk-G5FQU2XF.js → chunk-TAHUCUY3.js}

@@ -9,20 +9,20 @@ import {
   installedCodexApp,
   readCodexAppRuntime,
   shellQuoted
-} from "./chunk-GAOUWLYN.js";
-import {
-  CODEX_APP_LAUNCH_AT_LOGIN_VERB,
-  CODEX_APP_LAUNCH_VARIABLE
-} from "./chunk-E46NE7FB.js";
+} from "./chunk-5KCUQ3B7.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-EISUEJDT.js";
+} from "./chunk-WFHUECGB.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";
+import {
+  CODEX_APP_LAUNCH_AT_LOGIN_VERB,
+  CODEX_APP_LAUNCH_VARIABLE
+} from "./chunk-E46NE7FB.js";
 
 // src/codex-app-cards-switch.ts
 import { execFileSync as execFileSync2 } from "child_process";

package/dist/{chunk-7CJ7W2RH.js → chunk-UFRRAAYD.js}

@@ -12,7 +12,7 @@ import {
   reachVerdict,
   reachesYou,
   verifyDelivery
-} from "./chunk-YCCLWG7G.js";
+} from "./chunk-AIABYHHZ.js";
 import {
   humanIsTty,
   writeHuman
@@ -24,14 +24,14 @@ import {
 } from "./chunk-FO3MDD26.js";
 import {
   reportedInstallSource
-} from "./chunk-VMM6JCNQ.js";
+} from "./chunk-B4M2XZNQ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-7VRL6XYM.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/onboarding.ts
 import qrcodeTerminal from "qrcode-terminal";

package/dist/{chunk-W6LKC5YD.js → chunk-UZL3VQCE.js}

@@ -1,20 +1,20 @@
 import {
   keyCheckFromResponse
-} from "./chunk-4HDX77ND.js";
+} from "./chunk-ZV7G73KH.js";
 import {
   installNetworkDefaults
-} from "./chunk-RGXFBS56.js";
+} from "./chunk-XRRY45XB.js";
 import {
   fetchAsCredential
-} from "./chunk-U32N5JZO.js";
+} from "./chunk-47HCNA5U.js";
 import {
   getBaseUrl
-} from "./chunk-R3RTISDD.js";
+} from "./chunk-MZX35RFX.js";
 import {
   isRecord,
   isToolErrorResult,
   toolFailureCodeOfResult
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-2C45MJGK.js → chunk-VKRRUT45.js}

@@ -1,22 +1,22 @@
 import {
   cursorGateOwnsClaudeCall,
   readCursorGateRegistration
-} from "./chunk-EP6I3MQY.js";
+} from "./chunk-L37Q4BR6.js";
 import {
   registerTranscript
-} from "./chunk-PDAOZ2NF.js";
+} from "./chunk-A5YOWKPR.js";
 import {
   namedEvent
-} from "./chunk-YZESBU7F.js";
+} from "./chunk-HHZSB6KL.js";
 import {
   writeDegraded
-} from "./chunk-NASQPMXW.js";
+} from "./chunk-KG7UZSCD.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource,
   isGrokHookPayload,
   isGrokSessionEndStop
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode", "cursor_version"];
@@ -32,9 +32,16 @@ function isToolHookInput(value) {
   }
   return true;
 }
+function withoutNullOptionalText(value) {
+  const present = { ...value };
+  for (const field of OPTIONAL_TEXT_FIELDS) {
+    if (present[field] === null) delete present[field];
+  }
+  return present;
+}
 function parseToolHookInput(value) {
   if (!isInputRecord(value)) return null;
-  const input = { ...value, tool_input: value.tool_input === void 0 ? {} : value.tool_input };
+  const input = { ...withoutNullOptionalText(value), tool_input: value.tool_input === void 0 ? {} : value.tool_input };
   return isToolHookInput(input) ? input : null;
 }
 

package/dist/{chunk-SSBETUYZ.js → chunk-W4MZBZU3.js}

@@ -1,6 +1,6 @@
 import {
   realpath
-} from "./chunk-CXIYGD33.js";
+} from "./chunk-YQGPBLIT.js";
 import {
   findNativeClaudeInstall
 } from "./chunk-ROVLRXBI.js";
@@ -13,10 +13,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-ODXZPMKN.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/live-capabilities.ts
 import { homedir } from "os";

package/dist/{chunk-TRDHHF3A.js → chunk-W744DTUT.js}

@@ -8533,6 +8533,14 @@ var GATE_ALLOW_SOURCE = {
 };
 var PUSHARY_TOOL_PREFIX = "mcp__pushary__";
 var isPusharyOwnTool = (toolName) => toolName.startsWith(PUSHARY_TOOL_PREFIX);
+var PUSHARY_CONNECTOR_TOOL_PREFIXES = ["mcp__claude_ai_Pushary__", "mcp__plugin_pushary_pushary__"];
+var SERVER_AND_TOOL_SEPARATOR = "__";
+var namesOneToolAfterPrefix = (toolName, prefix) => {
+  if (!toolName.startsWith(prefix)) return false;
+  const tool = toolName.slice(prefix.length);
+  return tool.length > 0 && !tool.includes(SERVER_AND_TOOL_SEPARATOR);
+};
+var isPusharyConnectorTool = (toolName) => PUSHARY_CONNECTOR_TOOL_PREFIXES.some((prefix) => namesOneToolAfterPrefix(toolName, prefix));
 var strictestScopeVerdict = (scope, paths) => {
   if (paths.length === 0) return evaluateScope(scope, void 0);
   let worst = { outcome: "in_scope" };
@@ -8643,6 +8651,10 @@ var PRETOOLUSE_HANDLED_TOOLS = /* @__PURE__ */ new Set([...PRETOOLUSE_GATED_TOOL
 var isPermissionRequestOwnedByPreToolUse = (toolName, permissionMode, defers = shouldDeferToNativeMode) => PRETOOLUSE_HANDLED_TOOLS.has(toolName) && (isAskedInEveryMode(toolName) || !defers(permissionMode, toolName));
 var CLAUDE_PRETOOLUSE_MATCHER = [...PRETOOLUSE_HANDLED_TOOLS].join("|");
 var CLAUDE_MCP_PRETOOLUSE_MATCHER = "mcp__.*";
+var CLAUDE_REFUSALS_ONLY_TOOLS = ["WebFetch", "Task", "Agent"];
+var CLAUDE_REFUSALS_ONLY_PRETOOLUSE_MATCHER = `^(${CLAUDE_REFUSALS_ONLY_TOOLS.join("|")})$`;
+var CLAUDE_SUBAGENT_TOOL_ALIASES = { Task: "Agent", Agent: "Task" };
+var claudeSubagentToolAliasOf = (toolName) => Object.hasOwn(CLAUDE_SUBAGENT_TOOL_ALIASES, toolName) ? CLAUDE_SUBAGENT_TOOL_ALIASES[toolName] : void 0;
 var LINE_BREAK = /[\r\n]/;
 var bypassModeCovers = (toolName, toolInput) => {
   const arg = extractPolicyArg(toolName, toolInput);
@@ -9564,6 +9576,7 @@ export {
   isTokenCount,
   reportableSessionId,
   TOOL_NAME_MAX_LENGTH,
+  WILDCARD_TOOL_PATTERN,
   normalizeRepoRemote,
   localRepoKey,
   isSafeReadOnlyCommand,
@@ -9588,6 +9601,7 @@ export {
   resolvePolicy,
   KILL_REASON,
   isPusharyOwnTool,
+  isPusharyConnectorTool,
   shouldDeferToNativeMode,
   AGENT_QUESTION_TOOL,
   AGENT_QUESTION_STRATEGY,
@@ -9608,6 +9622,9 @@ export {
   isPermissionRequestOwnedByPreToolUse,
   CLAUDE_PRETOOLUSE_MATCHER,
   CLAUDE_MCP_PRETOOLUSE_MATCHER,
+  CLAUDE_REFUSALS_ONLY_TOOLS,
+  CLAUDE_REFUSALS_ONLY_PRETOOLUSE_MATCHER,
+  claudeSubagentToolAliasOf,
   permissionsOffLineAppliesTo,
   permissionsOffAskReason,
   resolveGate,

package/dist/{chunk-EISUEJDT.js → chunk-WFHUECGB.js}

@@ -4,19 +4,19 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "./chunk-TZYVXTLN.js";
+} from "./chunk-6FR5ZYMS.js";
 import {
   readControlMode
-} from "./chunk-YZ7V2LVG.js";
+} from "./chunk-CPBS6LS3.js";
 import {
   pusharyDir
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   resolveGlobalBinary
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-ODXZPMKN.js";
 import {
   getApiKey
-} from "./chunk-R3RTISDD.js";
+} from "./chunk-MZX35RFX.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -32,7 +32,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-G4OVFWU4.js → chunk-XOPOX5QY.js}

@@ -27,11 +27,11 @@ import {
   toolResultErrorText,
   transcriptTokensIn,
   transcriptUsageRequest
-} from "./chunk-GW3PE52Q.js";
+} from "./chunk-HVGN7TRN.js";
 import {
   branchFor,
   repoKeyFor
-} from "./chunk-SE7P5BBK.js";
+} from "./chunk-363YZ5WJ.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -39,34 +39,35 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-NASQPMXW.js";
+} from "./chunk-KG7UZSCD.js";
 import {
+  isRetryable,
   withRetry
-} from "./chunk-W6LKC5YD.js";
+} from "./chunk-UZL3VQCE.js";
 import {
   fetchAsCredential
-} from "./chunk-U32N5JZO.js";
+} from "./chunk-47HCNA5U.js";
 import {
   getMachineId
-} from "./chunk-TZYVXTLN.js";
+} from "./chunk-6FR5ZYMS.js";
 import {
   reportedInstallSource
-} from "./chunk-VMM6JCNQ.js";
+} from "./chunk-B4M2XZNQ.js";
 import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS,
   canonicalJson,
   claudeConfigDir
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   compareVersion,
   parseVersion
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-ODXZPMKN.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-R3RTISDD.js";
+} from "./chunk-MZX35RFX.js";
 import {
   writeFileAtomic,
   writeJsonAtomicDurable
@@ -95,7 +96,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   unansweredRefusalReason
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/pending.ts
 import { join } from "path";
@@ -376,7 +377,7 @@ var policyCacheFile = (apiKey, agent, repoAware = false) => {
   return join2(tmpdir2(), `pushary-policy-${POLICY_CACHE_FORMAT}-${hash}.json`);
 };
 var POLICY_REQUEST_CAPABILITIES_VALUE = policyRequestCapabilitiesHeaderValue(CLI_POLICY_REQUEST_CAPABILITIES);
-var fetchPolicy = async (apiKey, agent, repoAware = false, sessionId) => {
+var fetchPolicy = async (apiKey, agent, repoAware = false, sessionId, signal) => {
   return withRetry(async () => {
     const baseUrl = getBaseUrl();
     const params = new URLSearchParams();
@@ -389,7 +390,7 @@ var fetchPolicy = async (apiKey, agent, repoAware = false, sessionId) => {
     const url = query ? `${baseUrl}/api/mcp/policy?${query}` : `${baseUrl}/api/mcp/policy`;
     const response = await fetchAsCredential(apiKey, url, {
       headers: { "Authorization": `Bearer ${apiKey}`, [POLICY_REQUEST_CAPABILITIES_HEADER]: POLICY_REQUEST_CAPABILITIES_VALUE },
-      signal: AbortSignal.timeout(1e4)
+      signal: AbortSignal.any([AbortSignal.timeout(1e4), ...signal ? [signal] : []])
     });
     if (!response.ok) {
       throw new Error(`Failed to fetch policy: ${response.status}`);
@@ -397,9 +398,9 @@ var fetchPolicy = async (apiKey, agent, repoAware = false, sessionId) => {
     const raw = await response.json();
     if (!isPolicyConfig(raw)) throw new Error("Invalid policy response");
     return raw;
-  }, { maxAttempts: 2 });
+  }, { maxAttempts: 2, shouldRetry: (error) => signal?.aborted !== true && isRetryable(error) });
 };
-var getPolicy = async (apiKey, expectedVersion, agent, repoAware = false, sessionId) => {
+var getPolicy = async (apiKey, expectedVersion, agent, repoAware = false, sessionId, signal) => {
   const path = policyCacheFile(apiKey, agent, repoAware);
   let staleCache = null;
   if (existsSync2(path)) {
@@ -419,7 +420,7 @@ var getPolicy = async (apiKey, expectedVersion, agent, repoAware = false, sessio
     }
   }
   try {
-    const policy = await fetchPolicy(apiKey, agent, repoAware, sessionId);
+    const policy = await fetchPolicy(apiKey, agent, repoAware, sessionId, signal);
     try {
       writeFileSync2(path, JSON.stringify({ ...policy, _cachedAt: Date.now(), _policyVersion: expectedVersion ?? null, _sessionId: sessionId ?? null }), { encoding: "utf-8", mode: 384 });
     } catch {
@@ -430,6 +431,18 @@ var getPolicy = async (apiKey, expectedVersion, agent, repoAware = false, sessio
     throw new Error("Failed to fetch policy and no cached policy available");
   }
 };
+var readFreshPolicyOfAnySession = (path, expectedVersion) => {
+  try {
+    const cached = JSON.parse(readFileSync2(path, "utf-8"));
+    if (!isRecord(cached) || typeof cached._cachedAt !== "number") return null;
+    if (Date.now() - cached._cachedAt >= CACHE_TTL_MS) return null;
+    if (expectedVersion != null && (cached._policyVersion ?? null) !== expectedVersion) return null;
+    return isPolicyConfig(cached) ? cached : null;
+  } catch {
+    return null;
+  }
+};
+var getPolicyForStandingDenies = async (apiKey, expectedVersion, agent, repoAware, sessionId, signal) => readFreshPolicyOfAnySession(policyCacheFile(apiKey, agent, repoAware), expectedVersion) ?? getPolicy(apiKey, expectedVersion, agent, repoAware, sessionId, signal);
 var readCachedPolicy = (apiKey, agent, repoAware = false) => {
   const path = policyCacheFile(apiKey, agent, repoAware);
   try {
@@ -446,6 +459,7 @@ var modeStateCacheFile = (apiKey) => {
   const hash = createHash2("sha256").update(`mode:${apiKey}`).digest("hex").slice(0, 12);
   return join2(tmpdir2(), `pushary-mode-${hash}.json`);
 };
+var wasFetchedForSession = (cached, sessionId) => (cached.sessionId ?? null) === (sessionId ?? null);
 var readLastGoodMode = (apiKey) => {
   try {
     const path = modeStateCacheFile(apiKey);
@@ -473,25 +487,25 @@ var unknownMode = () => ({
   scope: null,
   degraded: true
 });
-var degradedFallback = (apiKey, authoritative = false) => {
+var degradedFallback = (apiKey, sessionId, authoritative = false) => {
   if (authoritative) return unknownMode();
   const last = readLastGoodMode(apiKey);
-  if (last && Date.now() - last.at < MODE_GRACE_MS) {
-    return { ...last.state, degraded: false };
-  }
-  return unknownMode();
+  if (!last || Date.now() - last.at >= MODE_GRACE_MS) return unknownMode();
+  if (wasFetchedForSession(last, sessionId)) return { ...last.state, degraded: false };
+  return { ...unknownMode(), kill: last.state.kill === true };
 };
 var MODE_REUSE_MS = CACHE_TTL_MS;
 var readReusableMode = (apiKey, sessionId, maxAgeMs) => {
   const last = readLastGoodMode(apiKey);
-  if (!last || (last.sessionId ?? null) !== (sessionId ?? null)) return null;
+  if (!last || !wasFetchedForSession(last, sessionId)) return null;
   if (Date.now() - last.at >= maxAgeMs) return null;
   return { ...last.state, degraded: false };
 };
-var fetchModeState = async (apiKey, sessionId, reuseWithinMs = 0, signal) => {
+var unansweredModeRead = (state) => ({ state, answeredLive: false });
+var readModeState = async (apiKey, sessionId, reuseWithinMs, signal) => {
   if (reuseWithinMs > 0) {
     const reusable = readReusableMode(apiKey, sessionId, reuseWithinMs);
-    if (reusable) return reusable;
+    if (reusable) return unansweredModeRead(reusable);
   }
   try {
     const baseUrl = getBaseUrl();
@@ -502,21 +516,23 @@ var fetchModeState = async (apiKey, sessionId, reuseWithinMs = 0, signal) => {
     });
     if (!response.ok) {
       void reportClientError({ kind: "http_status", code: `mode_http_${response.status}` });
-      return degradedFallback(apiKey, response.status === 401 || response.status === 403);
+      return unansweredModeRead(degradedFallback(apiKey, sessionId, response.status === 401 || response.status === 403));
     }
     const body = await response.json();
     if (!isProvenModeResponse(body)) {
       void reportClientError({ kind: "invalid_response", code: "mode_response_unproven" });
-      return degradedFallback(apiKey);
+      return unansweredModeRead(degradedFallback(apiKey, sessionId));
     }
     const state = modeStateFromResponse(body);
     writeLastGoodMode(apiKey, state, sessionId);
-    return state;
+    return { state, answeredLive: true };
   } catch (error) {
     void reportClientError({ kind: clientErrorKindOf(error), code: "mode_fetch_failed" });
-    return degradedFallback(apiKey);
+    return unansweredModeRead(degradedFallback(apiKey, sessionId));
   }
 };
+var fetchModeState = async (apiKey, sessionId, reuseWithinMs = 0, signal) => (await readModeState(apiKey, sessionId, reuseWithinMs, signal)).state;
+var fetchLiveModeState = (apiKey, sessionId, signal) => readModeState(apiKey, sessionId, 0, signal);
 var fetchModeOverride = async (apiKey) => (await fetchModeState(apiKey)).mode;
 
 // src/usage.ts
@@ -1677,8 +1693,10 @@ export {
   releaseThrottle,
   policyRequestFor,
   getPolicy,
+  getPolicyForStandingDenies,
   readCachedPolicy,
   fetchModeState,
+  fetchLiveModeState,
   fetchModeOverride,
   readLastUserPrompt,
   CODEX_AGENT,

package/dist/{chunk-RGXFBS56.js → chunk-XRRY45XB.js}

@@ -1,9 +1,9 @@
 import {
   readExistingMachineId
-} from "./chunk-TZYVXTLN.js";
+} from "./chunk-6FR5ZYMS.js";
 import {
   getBaseUrl
-} from "./chunk-R3RTISDD.js";
+} from "./chunk-MZX35RFX.js";
 import {
   NetworkError
 } from "./chunk-YU2EUD7O.js";
@@ -13,7 +13,7 @@ import {
 import {
   clientContextHeaders,
   redactSecretsFromContent
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-TLCJCP5R.js → chunk-XSSG5JLJ.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-YZ7V2LVG.js";
+} from "./chunk-CPBS6LS3.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-MYNLU6DV.js → chunk-XUAGV5VH.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -17,7 +17,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isAutoUpdateResult
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-NVV3YUTX.js → chunk-YOSATSUD.js}

@@ -7,10 +7,10 @@ import {
   codexHome,
   codexHooksJsonIn,
   isPusharyCodexCommand
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   resolvePathBinary
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-ODXZPMKN.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";

package/dist/{chunk-CXIYGD33.js → chunk-YQGPBLIT.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-ROVLRXBI.js";
 import {
   parseVersion
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-ODXZPMKN.js";
 import {
   isRecord
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-4D23TNCL.js → chunk-YQUJQGJU.js}

@@ -1,19 +1,19 @@
 import {
   notificationAnswerStep
-} from "./chunk-YCCLWG7G.js";
+} from "./chunk-AIABYHHZ.js";
 import {
   canChangeApprovalSettings
-} from "./chunk-BQ673OOD.js";
+} from "./chunk-KESS6HAK.js";
 import {
   matchMacAccountStep,
   retryAgentCommand
-} from "./chunk-XBH6OKHD.js";
+} from "./chunk-EDNCFLR7.js";
 import {
   EXIT
 } from "./chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-7VRL6XYM.js";
 
 // src/setup/closing.ts
 var ACTIVITY_URL = "pushary.com/dashboard/agent/activity";

package/dist/{chunk-67I7QRQB.js → chunk-YZORQXN7.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   renderCommandHelp
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-7VRL6XYM.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";

package/dist/{chunk-B7BOENW7.js → chunk-ZMKZ5WHS.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-DXJUASTS.js → chunk-ZR35L635.js}

@@ -1,9 +1,9 @@
 import {
   claudeConfigDir
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   claudePermissionRulesFromSettings
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";