pushary 1.9.119 → 1.9.120

package/dist/{chunk-YZESBU7F.js → chunk-HHZSB6KL.js}

@@ -1,13 +1,13 @@
 import {
   CLAUDE_CODE_AGENT
-} from "./chunk-G4OVFWU4.js";
+} from "./chunk-XOPOX5QY.js";
 import {
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-COXNQUDP.js";
+} from "./chunk-3GFJ7CXQ.js";
 import {
   compatibleToolLookup
-} from "./chunk-GW3PE52Q.js";
+} from "./chunk-HVGN7TRN.js";
 import {
   CLAUDE_HOOK_EVENTS,
   PUSHARY_MCP_URL,
@@ -19,7 +19,7 @@ import {
   isPusharyHook,
   registerHookEntry,
   removeClaudeMcpServers
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   PHONE_ANSWERED_TOOLS,
@@ -30,7 +30,7 @@ import {
   pusharyMissingReason,
   refusalOutput,
   withHookHoldBudget
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/config-document.ts
 import { parse, stringify } from "smol-toml";
@@ -56,6 +56,150 @@ var serializeConfigDocument = (value, format) => format === "toml" ? stringify(v
 // src/compatible-config.ts
 import { homedir } from "os";
 import { join } from "path";
+
+// ../contracts/src/agent-enforcement.ts
+var TOOL_CALL_BLOCK = {
+  beforeMatchedCalls: "before_matched_calls",
+  whenAgentAsks: "when_agent_asks",
+  cannotBlock: "cannot_block"
+};
+var LOCAL_PROMPT = {
+  agentsOwnPrompt: "agents_own_prompt",
+  variesByEvent: "varies_by_event",
+  refusalInstead: "refusal_instead",
+  noHook: "no_hook"
+};
+var HOOK_FAILURE = {
+  agentsOwnApproval: "agents_own_approval",
+  variesByEvent: "varies_by_event",
+  refusedOnPosix: "refused_on_posix",
+  notVerifiableInThisRepo: "not_verifiable_in_this_repo",
+  noHook: "no_hook"
+};
+var NO_HOOK_NOTHING_GATED = "Everything. There is no hook, so the agent only reaches a person when it chooses to call Pushary.";
+var NO_HOOK = {
+  blocksToolCallBeforeItRuns: TOOL_CALL_BLOCK.cannotBlock,
+  phoneCanAnswerTheBlock: false,
+  localPrompt: LOCAL_PROMPT.noHook,
+  whenHookIsMissing: HOOK_FAILURE.noHook,
+  whenHookCrashes: HOOK_FAILURE.noHook,
+  gatedTools: [],
+  notGated: NO_HOOK_NOTHING_GATED
+};
+var HOOK_DECIDES_BEFORE_THE_CALL = {
+  blocksToolCallBeforeItRuns: TOOL_CALL_BLOCK.beforeMatchedCalls,
+  phoneCanAnswerTheBlock: true
+};
+var FAILS_TO_THE_AGENTS_OWN_APPROVAL = {
+  whenHookIsMissing: HOOK_FAILURE.agentsOwnApproval,
+  whenHookCrashes: HOOK_FAILURE.agentsOwnApproval
+};
+var CLAUDE_SHAPED_GATED_TOOLS = ["Bash", "Write", "Edit", "MultiEdit", "NotebookEdit", "PowerShell", "Monitor", "mcp__.*"];
+var CLAUDE_SHAPED_NOT_GATED = "Any tool outside the matcher, such as reads, searches and web fetches. Those only reach a person if this agent raises its own prompt and it sends PermissionRequest.";
+var COMPATIBLE_HOOK_AGENT = {
+  ...HOOK_DECIDES_BEFORE_THE_CALL,
+  ...FAILS_TO_THE_AGENTS_OWN_APPROVAL,
+  localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+  gatedTools: CLAUDE_SHAPED_GATED_TOOLS,
+  notGated: CLAUDE_SHAPED_NOT_GATED
+};
+var AGENT_ENFORCEMENT = {
+  claude_code: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    ...FAILS_TO_THE_AGENTS_OWN_APPROVAL,
+    localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+    gatedTools: ["Bash", "Write", "Edit", "MultiEdit", "NotebookEdit", "PowerShell", "Monitor", "AskUserQuestion", "ExitPlanMode"],
+    notGated: "Reads, searches, WebFetch, WebSearch, Task, TodoWrite and third-party MCP tools reach a person only through PermissionRequest, when Claude Code would have asked anyway. In plan, auto and dontAsk modes PreToolUse steps aside unless a scope question or a Team route applies. It also steps aside for edits under acceptEdits and for calls that a Claude Code allowlist rule owns. Under bypassPermissions no opinion means the call runs."
+  },
+  codex: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    ...FAILS_TO_THE_AGENTS_OWN_APPROVAL,
+    localPrompt: LOCAL_PROMPT.variesByEvent,
+    gatedTools: ["Bash", "apply_patch", "mcp__.*", "request_user_input", "request_user_input_async"],
+    notGated: "Any other tool, and every hook until Codex trusts it. PreToolUse can only deny; a hand-back there is refused, and only PermissionRequest falls through to the Codex prompt. With the auto_review approvals reviewer, or when a native mode defers the call, the hook passes it ungated unless a scope question applies. Under bypass no opinion means the call runs."
+  },
+  gemini_cli: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    ...FAILS_TO_THE_AGENTS_OWN_APPROVAL,
+    localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+    gatedTools: ["run_shell_command", "write_file", "replace", "mcp_.*"],
+    notGated: "read_file and every other built-in tool outside the BeforeTool matcher. The wire has no ask, so a hand-back is empty output, a Gemini running without prompts then runs the call, and a bridge-launched session, which has no prompt, is refused instead."
+  },
+  cursor: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    localPrompt: LOCAL_PROMPT.variesByEvent,
+    whenHookIsMissing: HOOK_FAILURE.variesByEvent,
+    whenHookCrashes: HOOK_FAILURE.variesByEvent,
+    gatedTools: ["Shell", "MCP:*", "Write", "Delete", "Edit"],
+    notGated: "beforeReadFile is deliberately not registered, so file reads are not gated. preToolUse has no ask, so a file edit nobody can decide is refused where shell and MCP fall back to the Cursor prompt."
+  },
+  vscode: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    ...FAILS_TO_THE_AGENTS_OWN_APPROVAL,
+    localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+    gatedTools: [".*"],
+    notGated: "Pushary's own tools. Every other named tool reaches the policy, and a read-only tool passes when the gate has no verdict."
+  },
+  opencode: {
+    blocksToolCallBeforeItRuns: TOOL_CALL_BLOCK.whenAgentAsks,
+    phoneCanAnswerTheBlock: true,
+    ...FAILS_TO_THE_AGENTS_OWN_APPROVAL,
+    localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+    gatedTools: ["bash", "edit", "webfetch"],
+    notGated: "Anything OpenCode does not raise as permission.asked. A person's own allow rule for bash, edit or webfetch is kept, and then those are not held either."
+  },
+  hermes: {
+    blocksToolCallBeforeItRuns: TOOL_CALL_BLOCK.whenAgentAsks,
+    phoneCanAnswerTheBlock: true,
+    localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+    whenHookIsMissing: HOOK_FAILURE.notVerifiableInThisRepo,
+    whenHookCrashes: HOOK_FAILURE.agentsOwnApproval,
+    gatedTools: [],
+    notGated: "Everything Hermes does not flag as a dangerous command, unless named in PUSHARY_GATE_TOOLS, which is empty by default. That list refuses on an error, while the approval transport hands back to Hermes."
+  },
+  qwen_code: COMPATIBLE_HOOK_AGENT,
+  codebuddy: COMPATIBLE_HOOK_AGENT,
+  qoder: COMPATIBLE_HOOK_AGENT,
+  droid: {
+    ...COMPATIBLE_HOOK_AGENT,
+    notGated: "Any tool outside the matcher, such as reads, searches and web fetches. Droid registers no PermissionRequest, so those never reach a person through Pushary."
+  },
+  devin: {
+    ...COMPATIBLE_HOOK_AGENT,
+    localPrompt: LOCAL_PROMPT.refusalInstead,
+    gatedTools: [...CLAUDE_SHAPED_GATED_TOOLS, "mcp_call_tool", "write_to_process"],
+    notGated: "Any tool outside the matcher, such as reads, searches and web fetches. Devin registers no PermissionRequest, so those never reach a person through Pushary. Its wire turns an ask into a block."
+  },
+  antigravity_cli: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    localPrompt: LOCAL_PROMPT.refusalInstead,
+    whenHookIsMissing: HOOK_FAILURE.refusedOnPosix,
+    whenHookCrashes: HOOK_FAILURE.notVerifiableInThisRepo,
+    gatedTools: ["Bash", "Write", "Edit", "MultiEdit", "NotebookEdit", "PowerShell", "Monitor", "call_mcp_tool", "manage_task"],
+    notGated: "view_file, read_url_content, search_web, list_resources and read_resource. Deleting the hook entry leaves always-proceed on with nothing watching, and the hook-file guard only covers a missing binary, and not on Windows. A caught error is refused, but nothing here shows what agy does when the hook process dies or exits non-zero."
+  },
+  grok: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+    whenHookIsMissing: HOOK_FAILURE.refusedOnPosix,
+    whenHookCrashes: HOOK_FAILURE.agentsOwnApproval,
+    gatedTools: [".*"],
+    notGated: "Nothing at the matcher, but Grok fails open if it kills the hook or cannot start it, the missing-binary guard does not refuse on Windows, and Grok's own permission checks still apply after a phone approval. Its question and plan dialogs stay in Grok."
+  },
+  claude_chat: NO_HOOK,
+  claude_cowork: NO_HOOK,
+  chatgpt: NO_HOOK,
+  fx: NO_HOOK,
+  cline: NO_HOOK,
+  grok_bot: NO_HOOK,
+  windsurf: NO_HOOK,
+  unknown: NO_HOOK,
+  lovable: NO_HOOK,
+  mcp: NO_HOOK,
+  http: NO_HOOK
+};
+
+// src/compatible-config.ts
 var hasCompatibleMcpServer = (profile, contents) => {
   if (!profile.mcp) return false;
   const document = parseConfigDocument(contents, profile.mcp.file.format);
@@ -210,7 +354,8 @@ var commandFor = (profile, definition, resolve) => {
   return withHookHoldBudget(command, holdBudgetOf(definition));
 };
 var writesBareHandler = (profile, definition) => profile.nonToolEntries === "handler" && !TOOL_MATCHED_EVENTS.has(definition.event);
-var guardFor = (profile, definition, path) => isSoleGateEvent(profile, definition) || profile.source === "grok" && definition.delivery === "approval" ? guardBinaryRefusing(path, refusalOutput(profile, pusharyMissingReason(profile))) : guardBinary(path);
+var refusesWhenHookIsMissing = (profile, definition) => definition.delivery === "approval" && AGENT_ENFORCEMENT[profile.agentType].whenHookIsMissing === HOOK_FAILURE.refusedOnPosix;
+var guardFor = (profile, definition, path) => refusesWhenHookIsMissing(profile, definition) ? guardBinaryRefusing(path, refusalOutput(profile, pusharyMissingReason(profile))) : guardBinary(path);
 var entryFor = (profile, definition, resolve) => {
   const handler = { type: "command", command: commandFor(profile, definition, resolve), timeout: definition.timeout };
   if (writesBareHandler(profile, definition)) return handler;

package/dist/{chunk-SNKC2IQZ.js → chunk-HSFTTGOB.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   readJsonSafe
 } from "./chunk-T5I4PKOQ.js";
 import {
   isRecord
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-GW3PE52Q.js → chunk-HVGN7TRN.js}

@@ -24,7 +24,7 @@ import {
   reportableSessionId,
   toToolLookup,
   truncateLine
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // ../hook-mapping/src/commit-receipt.ts
 var COMMIT_OUTPUT_MAX_LENGTH = 65536;

package/dist/{chunk-AGXOTZID.js → chunk-INKDRMSK.js}

@@ -1,13 +1,13 @@
 import {
   compatibleConfigFile
-} from "./chunk-YZESBU7F.js";
+} from "./chunk-HHZSB6KL.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands
-} from "./chunk-COXNQUDP.js";
+} from "./chunk-3GFJ7CXQ.js";
 import {
   AGENT_CHOICES
-} from "./chunk-2UE2NDCX.js";
+} from "./chunk-SUI5JE6T.js";
 import {
   bridgeStub,
   claudeSettings,
@@ -19,7 +19,7 @@ import {
   resolveBridgeStub,
   vscodePluginDir,
   windowsNodeLauncherFor
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   readJsonSafe
 } from "./chunk-T5I4PKOQ.js";
@@ -29,7 +29,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-JJNF6QU4.js → chunk-IYUAMUO6.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-YZ7V2LVG.js";
+} from "./chunk-CPBS6LS3.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-6YLVNFQZ.js → chunk-J4AJVM5F.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-2UE2NDCX.js";
+} from "./chunk-SUI5JE6T.js";
 import {
   parseFlags
 } from "./chunk-YPY4YCIZ.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-YU2EUD7O.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-7VRL6XYM.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-EFFH2FYG.js → chunk-J6ACLE2A.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   npmExitedOnPermissionDenied
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-ODXZPMKN.js";
 import {
   writeJsonAtomic
 } from "./chunk-T5I4PKOQ.js";

package/dist/{chunk-GBVTVTDF.js → chunk-K4RIBZ32.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-G4OVFWU4.js";
+} from "./chunk-XOPOX5QY.js";
 
 // src/answer.ts
 var isDeferAnswer = (value) => value === "defer";

package/dist/{chunk-BQ673OOD.js → chunk-KESS6HAK.js}

@@ -1,9 +1,9 @@
 import {
   absoluteUrl
-} from "./chunk-4HDX77ND.js";
+} from "./chunk-ZV7G73KH.js";
 import {
   KEY_SCOPE
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/cli/approval-settings-pages.ts
 var API_KEYS_PATH = "/dashboard/agent/settings";

package/dist/{chunk-NASQPMXW.js → chunk-KG7UZSCD.js}

@@ -6,21 +6,21 @@ import {
   McpToolError,
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-W6LKC5YD.js";
+} from "./chunk-UZL3VQCE.js";
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-RGXFBS56.js";
+} from "./chunk-XRRY45XB.js";
 import {
   fetchAsCredential
-} from "./chunk-U32N5JZO.js";
+} from "./chunk-47HCNA5U.js";
 import {
   clientReportClaims
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-R3RTISDD.js";
+} from "./chunk-MZX35RFX.js";
 import {
   ASK_AGENT_NAME_MAX,
   CLIENT_REPORT_PATH,
@@ -29,7 +29,7 @@ import {
   TOOL_FAILURE_CODES,
   degradedLine,
   truncateLine
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";
@@ -327,13 +327,13 @@ var claimBlockedAction = async (apiKey, request, timeoutMs) => {
 };
 
 export {
-  isPolicyConfig,
-  isAskUserResponse,
-  isWaitForAnswerResponse,
   reportClientError,
   exitAfterClientReports,
   clientErrorKindOf,
   writeDegraded,
+  isPolicyConfig,
+  isAskUserResponse,
+  isWaitForAnswerResponse,
   isDecisionStopped,
   isAwayPaused,
   isLocalQuestionHandoff,

package/dist/{chunk-EP6I3MQY.js → chunk-L37Q4BR6.js}

@@ -1,17 +1,17 @@
 import {
   pusharyHookExecutable
-} from "./chunk-COXNQUDP.js";
+} from "./chunk-3GFJ7CXQ.js";
 import {
   bridgeResolvesToApp,
   cursorUserHooks,
   executableFileName,
   isBridgeLocator,
   liveBridgeProbe
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   atLeast,
   parseVersion
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-ODXZPMKN.js";
 import {
   CURSOR_GATE_COVERAGE,
   CURSOR_GATE_SCRIPT,
@@ -21,7 +21,7 @@ import {
   isCursorHookPayload,
   isRecord,
   toolsCoveredByGateEntry
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/cursor-gate-registration.ts
 import { dirname, isAbsolute, join, resolve } from "path";

package/dist/{chunk-R3RTISDD.js → chunk-MZX35RFX.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-7VRL6XYM.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-5T5T4YXM.js → chunk-NBKH6SKN.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   redactSecretsFromContent
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/cli/json.ts
 var writeStdoutFully = (text) => new Promise((resolve, reject) => {

package/dist/{chunk-ZTVBM3EZ.js → chunk-NVOQBKIL.js}

@@ -1,20 +1,20 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-AGXOTZID.js";
+} from "./chunk-INKDRMSK.js";
 import {
   nativeClaudeInstallPath
 } from "./chunk-ROVLRXBI.js";
 import {
   grokHome
-} from "./chunk-YZESBU7F.js";
+} from "./chunk-HHZSB6KL.js";
 import {
   claudeConfigDir,
   clineDataDirectory,
   codexHomeFrom
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-6KX2H4I5.js → chunk-NXWQZBOK.js}

@@ -1,12 +1,12 @@
 import {
   parseSseMessages
-} from "./chunk-W6LKC5YD.js";
+} from "./chunk-UZL3VQCE.js";
 import {
   fetchAsCredential
-} from "./chunk-U32N5JZO.js";
+} from "./chunk-47HCNA5U.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-7VRL6XYM.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-KOZBVXXC.js → chunk-ODXZPMKN.js}

@@ -399,9 +399,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-E65GJQS6.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-YKAZI3BH.js");
-    const { autoUpdateLock } = await import("./paths-G7NZODAY.js");
+    const { withUpgradeLock } = await import("./global-upgrade-GUHXKJPO.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-EEPLQBLA.js");
+    const { autoUpdateLock } = await import("./paths-5XZPI4LD.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;

package/dist/{chunk-VFZ2PE6U.js → chunk-PEMESJZY.js}

@@ -4,15 +4,15 @@ import {
   claimThrottle,
   releaseThrottle,
   reportEvent
-} from "./chunk-G4OVFWU4.js";
+} from "./chunk-XOPOX5QY.js";
 import {
   deriveToolTarget,
   permissionDeniedAction
-} from "./chunk-GW3PE52Q.js";
+} from "./chunk-HVGN7TRN.js";
 import {
   machineDecisionFor,
   wireVerdictFor
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-FPG7X2GS.js → chunk-PTONPJWL.js}

@@ -1,19 +1,19 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-AGXOTZID.js";
+} from "./chunk-INKDRMSK.js";
 import {
   keyPrefix
-} from "./chunk-YZ7V2LVG.js";
+} from "./chunk-CPBS6LS3.js";
 import {
   bridgeAgentKey
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   readJsonSafe
 } from "./chunk-T5I4PKOQ.js";
 import {
   isRecord,
   isValidApiKey
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-KVDN4U6W.js → chunk-RHTAI4XP.js}

@@ -1,13 +1,13 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-NVV3YUTX.js";
+} from "./chunk-YOSATSUD.js";
 import {
   hermesReceiptPaths,
   hermesSetupPredatesThePluginFolder,
   installHermesPlugin,
   refreshHermesPluginFiles,
   shippedHermesPlugin
-} from "./chunk-5HKU4VUL.js";
+} from "./chunk-ZWUVJ3DV.js";
 import {
   fxIgnoresInstructionsFile,
   fxInstructionsBody,
@@ -16,7 +16,7 @@ import {
   macAppFxBridge,
   refreshClineKey,
   switchFxHttpEntryToBridge
-} from "./chunk-K5WTTEIQ.js";
+} from "./chunk-5NHWNILG.js";
 import {
   OPENCODE_HOOK_BINARY,
   agentHookOwner,
@@ -28,16 +28,16 @@ import {
   openCodePluginDir,
   openCodeWired,
   withOpenCodeAskRules
-} from "./chunk-AGXOTZID.js";
+} from "./chunk-INKDRMSK.js";
 import {
   detectClaudeVersion
-} from "./chunk-CXIYGD33.js";
+} from "./chunk-YQGPBLIT.js";
 import {
   addCompatibleHooks,
   compatibleConfigFile,
   compatibleInstructionsFile,
   hasCompatibleHooks
-} from "./chunk-YZESBU7F.js";
+} from "./chunk-HHZSB6KL.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
@@ -49,7 +49,7 @@ import {
   geminiWired,
   hasGeminiHooks,
   planHooks
-} from "./chunk-COXNQUDP.js";
+} from "./chunk-3GFJ7CXQ.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -95,13 +95,13 @@ import {
   renderAgentInstructions,
   supportedClaudeEvents,
   vscodePluginMcp
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   formatVersion,
   hookCommandsUseBareNames,
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-ODXZPMKN.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -111,7 +111,7 @@ import {
   HOOK_COMPATIBLE_PROFILES,
   isCompatibleAgentType,
   isRecord
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-W744DTUT.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-L3MCQSES.js → chunk-RM7MNCCA.js}

@@ -3,24 +3,24 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-SSBETUYZ.js";
+} from "./chunk-W4MZBZU3.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-EISUEJDT.js";
+} from "./chunk-WFHUECGB.js";
 import {
   getMachineId
-} from "./chunk-TZYVXTLN.js";
+} from "./chunk-6FR5ZYMS.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-YZ7V2LVG.js";
+} from "./chunk-CPBS6LS3.js";
 import {
   getBaseUrl
-} from "./chunk-R3RTISDD.js";
+} from "./chunk-MZX35RFX.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";

package/dist/{chunk-3IESC326.js → chunk-RWS4DRFK.js}

@@ -1,12 +1,12 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-NVV3YUTX.js";
+} from "./chunk-YOSATSUD.js";
 import {
   retryAgentCommand
-} from "./chunk-XBH6OKHD.js";
+} from "./chunk-EDNCFLR7.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-7VRL6XYM.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {