pushary 1.9.119 → 1.9.121

package/dist/{chunk-YZESBU7F.js → chunk-6RME4X3J.js}

@@ -1,13 +1,13 @@
 import {
   CLAUDE_CODE_AGENT
-} from "./chunk-G4OVFWU4.js";
+} from "./chunk-X4CDZLUK.js";
 import {
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-COXNQUDP.js";
+} from "./chunk-XOYPF2BI.js";
 import {
   compatibleToolLookup
-} from "./chunk-GW3PE52Q.js";
+} from "./chunk-7OSBFMRV.js";
 import {
   CLAUDE_HOOK_EVENTS,
   PUSHARY_MCP_URL,
@@ -19,7 +19,7 @@ import {
   isPusharyHook,
   registerHookEntry,
   removeClaudeMcpServers
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   PHONE_ANSWERED_TOOLS,
@@ -30,7 +30,7 @@ import {
   pusharyMissingReason,
   refusalOutput,
   withHookHoldBudget
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/config-document.ts
 import { parse, stringify } from "smol-toml";
@@ -56,6 +56,150 @@ var serializeConfigDocument = (value, format) => format === "toml" ? stringify(v
 // src/compatible-config.ts
 import { homedir } from "os";
 import { join } from "path";
+
+// ../contracts/src/agent-enforcement.ts
+var TOOL_CALL_BLOCK = {
+  beforeMatchedCalls: "before_matched_calls",
+  whenAgentAsks: "when_agent_asks",
+  cannotBlock: "cannot_block"
+};
+var LOCAL_PROMPT = {
+  agentsOwnPrompt: "agents_own_prompt",
+  variesByEvent: "varies_by_event",
+  refusalInstead: "refusal_instead",
+  noHook: "no_hook"
+};
+var HOOK_FAILURE = {
+  agentsOwnApproval: "agents_own_approval",
+  variesByEvent: "varies_by_event",
+  refusedOnPosix: "refused_on_posix",
+  notVerifiableInThisRepo: "not_verifiable_in_this_repo",
+  noHook: "no_hook"
+};
+var NO_HOOK_NOTHING_GATED = "Everything. There is no hook, so the agent only reaches a person when it chooses to call Pushary.";
+var NO_HOOK = {
+  blocksToolCallBeforeItRuns: TOOL_CALL_BLOCK.cannotBlock,
+  phoneCanAnswerTheBlock: false,
+  localPrompt: LOCAL_PROMPT.noHook,
+  whenHookIsMissing: HOOK_FAILURE.noHook,
+  whenHookCrashes: HOOK_FAILURE.noHook,
+  gatedTools: [],
+  notGated: NO_HOOK_NOTHING_GATED
+};
+var HOOK_DECIDES_BEFORE_THE_CALL = {
+  blocksToolCallBeforeItRuns: TOOL_CALL_BLOCK.beforeMatchedCalls,
+  phoneCanAnswerTheBlock: true
+};
+var FAILS_TO_THE_AGENTS_OWN_APPROVAL = {
+  whenHookIsMissing: HOOK_FAILURE.agentsOwnApproval,
+  whenHookCrashes: HOOK_FAILURE.agentsOwnApproval
+};
+var CLAUDE_SHAPED_GATED_TOOLS = ["Bash", "Write", "Edit", "MultiEdit", "NotebookEdit", "PowerShell", "Monitor", "mcp__.*"];
+var CLAUDE_SHAPED_NOT_GATED = "Any tool outside the matcher, such as reads, searches and web fetches. Those only reach a person if this agent raises its own prompt and it sends PermissionRequest.";
+var COMPATIBLE_HOOK_AGENT = {
+  ...HOOK_DECIDES_BEFORE_THE_CALL,
+  ...FAILS_TO_THE_AGENTS_OWN_APPROVAL,
+  localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+  gatedTools: CLAUDE_SHAPED_GATED_TOOLS,
+  notGated: CLAUDE_SHAPED_NOT_GATED
+};
+var AGENT_ENFORCEMENT = {
+  claude_code: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    ...FAILS_TO_THE_AGENTS_OWN_APPROVAL,
+    localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+    gatedTools: ["Bash", "Write", "Edit", "MultiEdit", "NotebookEdit", "PowerShell", "Monitor", "AskUserQuestion", "ExitPlanMode"],
+    notGated: "Reads, searches, WebFetch, WebSearch, Task, TodoWrite and third-party MCP tools reach a person only through PermissionRequest, when Claude Code would have asked anyway. In plan, auto and dontAsk modes PreToolUse steps aside unless a scope question or a Team route applies. It also steps aside for edits under acceptEdits and for calls that a Claude Code allowlist rule owns. Under bypassPermissions no opinion means the call runs."
+  },
+  codex: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    ...FAILS_TO_THE_AGENTS_OWN_APPROVAL,
+    localPrompt: LOCAL_PROMPT.variesByEvent,
+    gatedTools: ["Bash", "apply_patch", "mcp__.*", "request_user_input", "request_user_input_async"],
+    notGated: "Any other tool, and every hook until Codex trusts it. PreToolUse can only deny; a hand-back there is refused, and only PermissionRequest falls through to the Codex prompt. With the auto_review approvals reviewer, or when a native mode defers the call, the hook passes it ungated unless a scope question applies. Under bypass no opinion means the call runs."
+  },
+  gemini_cli: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    ...FAILS_TO_THE_AGENTS_OWN_APPROVAL,
+    localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+    gatedTools: ["run_shell_command", "write_file", "replace", "mcp_.*"],
+    notGated: "read_file and every other built-in tool outside the BeforeTool matcher. The wire has no ask, so a hand-back is empty output, a Gemini running without prompts then runs the call, and a bridge-launched session, which has no prompt, is refused instead."
+  },
+  cursor: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    localPrompt: LOCAL_PROMPT.variesByEvent,
+    whenHookIsMissing: HOOK_FAILURE.variesByEvent,
+    whenHookCrashes: HOOK_FAILURE.variesByEvent,
+    gatedTools: ["Shell", "MCP:*", "Write", "Delete", "Edit"],
+    notGated: "beforeReadFile is deliberately not registered, so file reads are not gated. preToolUse has no ask, so a file edit nobody can decide is refused where shell and MCP fall back to the Cursor prompt."
+  },
+  vscode: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    ...FAILS_TO_THE_AGENTS_OWN_APPROVAL,
+    localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+    gatedTools: [".*"],
+    notGated: "Pushary's own tools. Every other named tool reaches the policy, and a read-only tool passes when the gate has no verdict."
+  },
+  opencode: {
+    blocksToolCallBeforeItRuns: TOOL_CALL_BLOCK.whenAgentAsks,
+    phoneCanAnswerTheBlock: true,
+    ...FAILS_TO_THE_AGENTS_OWN_APPROVAL,
+    localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+    gatedTools: ["bash", "edit", "webfetch"],
+    notGated: "Anything OpenCode does not raise as permission.asked. A person's own allow rule for bash, edit or webfetch is kept, and then those are not held either."
+  },
+  hermes: {
+    blocksToolCallBeforeItRuns: TOOL_CALL_BLOCK.whenAgentAsks,
+    phoneCanAnswerTheBlock: true,
+    localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+    whenHookIsMissing: HOOK_FAILURE.notVerifiableInThisRepo,
+    whenHookCrashes: HOOK_FAILURE.agentsOwnApproval,
+    gatedTools: [],
+    notGated: "Everything Hermes does not flag as a dangerous command, unless named in PUSHARY_GATE_TOOLS, which is empty by default. That list refuses on an error, while the approval transport hands back to Hermes."
+  },
+  qwen_code: COMPATIBLE_HOOK_AGENT,
+  codebuddy: COMPATIBLE_HOOK_AGENT,
+  qoder: COMPATIBLE_HOOK_AGENT,
+  droid: {
+    ...COMPATIBLE_HOOK_AGENT,
+    notGated: "Any tool outside the matcher, such as reads, searches and web fetches. Droid registers no PermissionRequest, so those never reach a person through Pushary."
+  },
+  devin: {
+    ...COMPATIBLE_HOOK_AGENT,
+    localPrompt: LOCAL_PROMPT.refusalInstead,
+    gatedTools: [...CLAUDE_SHAPED_GATED_TOOLS, "mcp_call_tool", "write_to_process"],
+    notGated: "Any tool outside the matcher, such as reads, searches and web fetches. Devin registers no PermissionRequest, so those never reach a person through Pushary. Its wire turns an ask into a block."
+  },
+  antigravity_cli: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    localPrompt: LOCAL_PROMPT.refusalInstead,
+    whenHookIsMissing: HOOK_FAILURE.refusedOnPosix,
+    whenHookCrashes: HOOK_FAILURE.notVerifiableInThisRepo,
+    gatedTools: ["Bash", "Write", "Edit", "MultiEdit", "NotebookEdit", "PowerShell", "Monitor", "call_mcp_tool", "manage_task"],
+    notGated: "view_file, read_url_content, search_web, list_resources and read_resource. Deleting the hook entry leaves always-proceed on with nothing watching, and the hook-file guard only covers a missing binary, and not on Windows. A caught error is refused, but nothing here shows what agy does when the hook process dies or exits non-zero."
+  },
+  grok: {
+    ...HOOK_DECIDES_BEFORE_THE_CALL,
+    localPrompt: LOCAL_PROMPT.agentsOwnPrompt,
+    whenHookIsMissing: HOOK_FAILURE.refusedOnPosix,
+    whenHookCrashes: HOOK_FAILURE.agentsOwnApproval,
+    gatedTools: [".*"],
+    notGated: "Nothing at the matcher, but Grok fails open if it kills the hook or cannot start it, the missing-binary guard does not refuse on Windows, and Grok's own permission checks still apply after a phone approval. Its question and plan dialogs stay in Grok."
+  },
+  claude_chat: NO_HOOK,
+  claude_cowork: NO_HOOK,
+  chatgpt: NO_HOOK,
+  fx: NO_HOOK,
+  cline: NO_HOOK,
+  grok_bot: NO_HOOK,
+  windsurf: NO_HOOK,
+  unknown: NO_HOOK,
+  lovable: NO_HOOK,
+  mcp: NO_HOOK,
+  http: NO_HOOK
+};
+
+// src/compatible-config.ts
 var hasCompatibleMcpServer = (profile, contents) => {
   if (!profile.mcp) return false;
   const document = parseConfigDocument(contents, profile.mcp.file.format);
@@ -210,7 +354,8 @@ var commandFor = (profile, definition, resolve) => {
   return withHookHoldBudget(command, holdBudgetOf(definition));
 };
 var writesBareHandler = (profile, definition) => profile.nonToolEntries === "handler" && !TOOL_MATCHED_EVENTS.has(definition.event);
-var guardFor = (profile, definition, path) => isSoleGateEvent(profile, definition) || profile.source === "grok" && definition.delivery === "approval" ? guardBinaryRefusing(path, refusalOutput(profile, pusharyMissingReason(profile))) : guardBinary(path);
+var refusesWhenHookIsMissing = (profile, definition) => definition.delivery === "approval" && AGENT_ENFORCEMENT[profile.agentType].whenHookIsMissing === HOOK_FAILURE.refusedOnPosix;
+var guardFor = (profile, definition, path) => refusesWhenHookIsMissing(profile, definition) ? guardBinaryRefusing(path, refusalOutput(profile, pusharyMissingReason(profile))) : guardBinary(path);
 var entryFor = (profile, definition, resolve) => {
   const handler = { type: "command", command: commandFor(profile, definition, resolve), timeout: definition.timeout };
   if (writesBareHandler(profile, definition)) return handler;

package/dist/{chunk-ISVHV2DP.js → chunk-7EYXAM63.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-GBVTVTDF.js → chunk-7FDDOT2A.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-G4OVFWU4.js";
+} from "./chunk-X4CDZLUK.js";
 
 // src/answer.ts
 var isDeferAnswer = (value) => value === "defer";

package/dist/{chunk-KVDN4U6W.js → chunk-7FH6T4EN.js}

@@ -1,13 +1,13 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-NVV3YUTX.js";
+} from "./chunk-3HZ374VU.js";
 import {
   hermesReceiptPaths,
   hermesSetupPredatesThePluginFolder,
   installHermesPlugin,
   refreshHermesPluginFiles,
   shippedHermesPlugin
-} from "./chunk-5HKU4VUL.js";
+} from "./chunk-F4K2A7DJ.js";
 import {
   fxIgnoresInstructionsFile,
   fxInstructionsBody,
@@ -16,7 +16,7 @@ import {
   macAppFxBridge,
   refreshClineKey,
   switchFxHttpEntryToBridge
-} from "./chunk-K5WTTEIQ.js";
+} from "./chunk-F5FMUDD7.js";
 import {
   OPENCODE_HOOK_BINARY,
   agentHookOwner,
@@ -28,16 +28,16 @@ import {
   openCodePluginDir,
   openCodeWired,
   withOpenCodeAskRules
-} from "./chunk-AGXOTZID.js";
+} from "./chunk-O7VVRTOR.js";
 import {
   detectClaudeVersion
-} from "./chunk-CXIYGD33.js";
+} from "./chunk-KRKH26TX.js";
 import {
   addCompatibleHooks,
   compatibleConfigFile,
   compatibleInstructionsFile,
   hasCompatibleHooks
-} from "./chunk-YZESBU7F.js";
+} from "./chunk-6RME4X3J.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
@@ -49,7 +49,7 @@ import {
   geminiWired,
   hasGeminiHooks,
   planHooks
-} from "./chunk-COXNQUDP.js";
+} from "./chunk-XOYPF2BI.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -95,13 +95,13 @@ import {
   renderAgentInstructions,
   supportedClaudeEvents,
   vscodePluginMcp
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   formatVersion,
   hookCommandsUseBareNames,
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-IGMI36FA.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -111,7 +111,7 @@ import {
   HOOK_COMPATIBLE_PROFILES,
   isCompatibleAgentType,
   isRecord
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-GW3PE52Q.js → chunk-7OSBFMRV.js}

@@ -24,7 +24,7 @@ import {
   reportableSessionId,
   toToolLookup,
   truncateLine
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // ../hook-mapping/src/commit-receipt.ts
 var COMMIT_OUTPUT_MAX_LENGTH = 65536;

package/dist/{chunk-TLCJCP5R.js → chunk-AH4NLZTT.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-YZ7V2LVG.js";
+} from "./chunk-SZV5SLSD.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-ZLUAXGAA.js → chunk-AXSAL7DK.js}

@@ -1,21 +1,21 @@
 import {
   UNNAMED_ACTION
-} from "./chunk-GW3PE52Q.js";
+} from "./chunk-7OSBFMRV.js";
 import {
   askUser,
   isAwayPaused,
   isLocalQuestionHandoff,
   unavailableQuestionUnlessRefused,
   waitForQuestion
-} from "./chunk-NASQPMXW.js";
+} from "./chunk-QK4I4CHR.js";
 import {
   getMachineId
-} from "./chunk-TZYVXTLN.js";
+} from "./chunk-4LR27PGD.js";
 import {
   hookWaitClamped,
   hookWaitDeadline,
   scopeBreachReasonOf
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/pushed-question.ts
 var scopeQuestionOf = (verdict) => {

package/dist/{chunk-G5FQU2XF.js → chunk-B3KFHR43.js}

@@ -9,20 +9,20 @@ import {
   installedCodexApp,
   readCodexAppRuntime,
   shellQuoted
-} from "./chunk-GAOUWLYN.js";
-import {
-  CODEX_APP_LAUNCH_AT_LOGIN_VERB,
-  CODEX_APP_LAUNCH_VARIABLE
-} from "./chunk-E46NE7FB.js";
+} from "./chunk-HLZWEGW3.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-EISUEJDT.js";
+} from "./chunk-SFMJMQJC.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";
+import {
+  CODEX_APP_LAUNCH_AT_LOGIN_VERB,
+  CODEX_APP_LAUNCH_VARIABLE
+} from "./chunk-E46NE7FB.js";
 
 // src/codex-app-cards-switch.ts
 import { execFileSync as execFileSync2 } from "child_process";

package/dist/{chunk-7CJ7W2RH.js → chunk-BMME65OT.js}

@@ -12,7 +12,7 @@ import {
   reachVerdict,
   reachesYou,
   verifyDelivery
-} from "./chunk-YCCLWG7G.js";
+} from "./chunk-JY2DOJKN.js";
 import {
   humanIsTty,
   writeHuman
@@ -24,14 +24,14 @@ import {
 } from "./chunk-FO3MDD26.js";
 import {
   reportedInstallSource
-} from "./chunk-VMM6JCNQ.js";
+} from "./chunk-NCHNITQW.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-5S32WI3B.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/onboarding.ts
 import qrcodeTerminal from "qrcode-terminal";

package/dist/{chunk-JKS4MN47.js → chunk-BPU6P3DS.js}

@@ -3,10 +3,10 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-EFFH2FYG.js";
+} from "./chunk-5CMNZXJV.js";
 import {
   phoneStartIsRequired
-} from "./chunk-SSBETUYZ.js";
+} from "./chunk-S6TMCUU7.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -18,25 +18,25 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-MYNLU6DV.js";
+} from "./chunk-H2OUB5S5.js";
 import {
   autoUpdateLock,
   autoUpdateLog,
   autoUpdateState
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   execNpm,
   fetchLatestPublishedVersion,
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-IGMI36FA.js";
 import {
   EXIT
 } from "./chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-5S32WI3B.js";
 import {
   commandsPackage,
   globalUpgradeEntry,

package/dist/{chunk-JJNF6QU4.js → chunk-BVI2N7QA.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-YZ7V2LVG.js";
+} from "./chunk-SZV5SLSD.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-DXJUASTS.js → chunk-D2LPVOG5.js}

@@ -1,9 +1,9 @@
 import {
   claudeConfigDir
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   claudePermissionRulesFromSettings
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";

package/dist/{chunk-ZTVBM3EZ.js → chunk-DLXYQE5G.js}

@@ -1,20 +1,20 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-AGXOTZID.js";
+} from "./chunk-O7VVRTOR.js";
 import {
   nativeClaudeInstallPath
 } from "./chunk-ROVLRXBI.js";
 import {
   grokHome
-} from "./chunk-YZESBU7F.js";
+} from "./chunk-6RME4X3J.js";
 import {
   claudeConfigDir,
   clineDataDirectory,
   codexHomeFrom
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-U32N5JZO.js → chunk-E5LU5MJ2.js}

@@ -5,7 +5,7 @@ import {
   MCP_CREDENTIAL_REJECTION_BODY,
   isRecord,
   responseRejectsCredential
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/credential-rejection.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-6KX2H4I5.js → chunk-EVWF3A5D.js}

@@ -1,12 +1,12 @@
 import {
   parseSseMessages
-} from "./chunk-W6LKC5YD.js";
+} from "./chunk-SQPAX33Q.js";
 import {
   fetchAsCredential
-} from "./chunk-U32N5JZO.js";
+} from "./chunk-E5LU5MJ2.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-5S32WI3B.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-5HKU4VUL.js → chunk-F4K2A7DJ.js}

@@ -5,10 +5,10 @@ import {
   hermesAppWiringRecord,
   hermesConfigReceipt,
   hermesSetupReceipt
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   resolvePathBinary
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-IGMI36FA.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -19,7 +19,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/hermes/plugin-payload.ts
 import { createHash } from "crypto";

package/dist/{chunk-K5WTTEIQ.js → chunk-F5FMUDD7.js}

@@ -4,13 +4,13 @@ import {
   configFailureKind,
   retryAgentCommand,
   writeSetupConfigFile
-} from "./chunk-XBH6OKHD.js";
+} from "./chunk-5UT5EFMH.js";
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-6KX2H4I5.js";
+} from "./chunk-EVWF3A5D.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-YZ7V2LVG.js";
+} from "./chunk-SZV5SLSD.js";
 import {
   CLINE_SERVER_NAME_TAKEN,
   CLINE_SETTINGS_REFUSALS,
@@ -32,10 +32,10 @@ import {
   withClinePusharyServer,
   withRefreshedClineKey,
   withoutClinePusharyServer
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   resolveGlobalBinary
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-IGMI36FA.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-PNSIMPC7.js → chunk-FBJHC7HW.js}

@@ -2,10 +2,10 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-UHAUC7EO.js";
+} from "./chunk-NLEHRQHL.js";
 import {
   APPROVAL_RULES_PATH
-} from "./chunk-BQ673OOD.js";
+} from "./chunk-JK7GROFO.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
@@ -14,19 +14,19 @@ import {
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-4HDX77ND.js";
+} from "./chunk-HINZZUOB.js";
 import {
   readKeySource
-} from "./chunk-YZ7V2LVG.js";
+} from "./chunk-SZV5SLSD.js";
 import {
   getBaseUrl
-} from "./chunk-R3RTISDD.js";
+} from "./chunk-2M7FELUY.js";
 import {
   EXIT
 } from "./chunk-BG4HHB7E.js";
 import {
   KEY_SCOPE
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-2C45MJGK.js → chunk-FEJP2I44.js}

@@ -1,22 +1,22 @@
 import {
   cursorGateOwnsClaudeCall,
   readCursorGateRegistration
-} from "./chunk-EP6I3MQY.js";
+} from "./chunk-WJUFRGJS.js";
 import {
   registerTranscript
-} from "./chunk-PDAOZ2NF.js";
+} from "./chunk-NDOT226I.js";
 import {
   namedEvent
-} from "./chunk-YZESBU7F.js";
+} from "./chunk-6RME4X3J.js";
 import {
   writeDegraded
-} from "./chunk-NASQPMXW.js";
+} from "./chunk-QK4I4CHR.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource,
   isGrokHookPayload,
   isGrokSessionEndStop
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode", "cursor_version"];
@@ -32,9 +32,16 @@ function isToolHookInput(value) {
   }
   return true;
 }
+function withoutNullOptionalText(value) {
+  const present = { ...value };
+  for (const field of OPTIONAL_TEXT_FIELDS) {
+    if (present[field] === null) delete present[field];
+  }
+  return present;
+}
 function parseToolHookInput(value) {
   if (!isInputRecord(value)) return null;
-  const input = { ...value, tool_input: value.tool_input === void 0 ? {} : value.tool_input };
+  const input = { ...withoutNullOptionalText(value), tool_input: value.tool_input === void 0 ? {} : value.tool_input };
   return isToolHookInput(input) ? input : null;
 }
 

package/dist/{chunk-SNKC2IQZ.js → chunk-FG67GH5B.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   readJsonSafe
 } from "./chunk-T5I4PKOQ.js";
 import {
   isRecord
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";