pushary 1.9.119 → 1.9.121

package/dist/{chunk-CBLFIWPI.js → chunk-GZ3D46PV.js}

@@ -3,7 +3,7 @@ import {
   formatVersion,
   quoteIfNeeded,
   shellDoubleQuoted
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-IGMI36FA.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";
@@ -13,12 +13,13 @@ import {
 import {
   CLAUDE_MCP_PRETOOLUSE_MATCHER,
   CLAUDE_PRETOOLUSE_MATCHER,
+  CLAUDE_REFUSALS_ONLY_PRETOOLUSE_MATCHER,
   CODEX_QUESTION_TOOLS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   PRETOOLUSE_GATED_TOOLS,
   withHookHoldBudget
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/setup/paths.ts
 import { createHash as createHash2 } from "crypto";
@@ -741,9 +742,13 @@ var CLAUDE_MCP_ROUTE_HOLD_HOOK = {
   matcher: CLAUDE_MCP_PRETOOLUSE_MATCHER,
   timeout: HOOK_BUDGETS.claude.budgetSeconds,
   delivery: "approval",
-  cliOnly: true,
   since: ESTABLISHED
 };
+var CLAUDE_REFUSALS_ONLY_HOOK = {
+  ...CLAUDE_MCP_ROUTE_HOLD_HOOK,
+  matcher: CLAUDE_REFUSALS_ONLY_PRETOOLUSE_MATCHER
+};
+var CLAUDE_EXTRA_PRETOOLUSE_HOOKS = [CLAUDE_MCP_ROUTE_HOLD_HOOK, CLAUDE_REFUSALS_ONLY_HOOK];
 var supportedClaudeEvents = (version) => CLAUDE_HOOK_EVENTS.filter((hook) => version ? atLeast(version, hook.since) : hook.since === ESTABLISHED);
 var registrationSignatures = (events, version) => Object.fromEntries(
   events.map((hook) => [hook.event, `registered|${version ? formatVersion(version) : "unknown"}`])
@@ -892,9 +897,10 @@ var addPusharyHooks = (settings, binDir, version = null) => {
       delete hooks[known.event];
     }
   }
-  if (supported.has(CLAUDE_MCP_ROUTE_HOLD_HOOK.event)) {
-    const current = Array.isArray(hooks.PreToolUse) ? hooks.PreToolUse : [];
-    hooks.PreToolUse = [...current, entry(CLAUDE_MCP_ROUTE_HOLD_HOOK, resolve2)];
+  for (const extra of CLAUDE_EXTRA_PRETOOLUSE_HOOKS) {
+    if (!supported.has(extra.event)) continue;
+    const current = Array.isArray(hooks[extra.event]) ? hooks[extra.event] : [];
+    hooks[extra.event] = [...current, entry(extra, resolve2)];
   }
 };
 var entry = (definition, resolve2) => ({

package/dist/{chunk-MYNLU6DV.js → chunk-H2OUB5S5.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -17,7 +17,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isAutoUpdateResult
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-TRDHHF3A.js → chunk-HI5YJFKW.js}

@@ -1807,20 +1807,60 @@ var scriptsOfShellsIn = (text3) => {
   const words = shellWordsOf(text3);
   return words === null ? [] : words.flatMap((_, index) => scriptArgumentOfAShellAt(words, index) ?? []);
 };
+var endsTheCommandAsAControlOperator = (text3, index) => {
+  const char = text3.charAt(index);
+  const before = text3.charAt(index - 1);
+  if (char === "|") return before !== ">";
+  return char === "&" && before !== ">" && before !== "<" && text3.charAt(index + 1) !== ">";
+};
+var endOfTheSimpleCommandAt = (text3, from) => {
+  let depth = 0;
+  let quote = null;
+  let inBackticks = false;
+  for (let index = from; index < text3.length; index += 1) {
+    const char = text3.charAt(index);
+    if (quote === "'") {
+      if (char === "'") quote = null;
+    } else if (char === "\\") {
+      index += 1;
+    } else if (quote === '"') {
+      if (char === '"') quote = null;
+    } else if (char === "'" || char === '"') {
+      quote = char;
+    } else if (char === "`") {
+      inBackticks = !inBackticks;
+    } else if (inBackticks) {
+      continue;
+    } else if (char === "(") {
+      depth += 1;
+    } else if (char === ")" && depth > 0) {
+      depth -= 1;
+    } else if (depth === 0 && (char === "\n" || char === ";" || char === ")" || endsTheCommandAsAControlOperator(text3, index))) {
+      return index;
+    }
+  }
+  return text3.length;
+};
 var scriptOfAnEvalEndingAt = (text3, end) => {
-  const words = shellWordsOf(text3.slice(end));
-  return words === null ? [] : [words.map((word) => word.text).join(" ")];
+  const words = shellWordsOf(text3.slice(end, endOfTheSimpleCommandAt(text3, end)));
+  if (words === null) return [];
+  const firstComment = words.findIndex((word) => word.comment);
+  return [(firstComment === -1 ? words : words.slice(0, firstComment)).map((word) => word.text).join(" ")];
 };
-var scriptsOfEvalsIn = (text3) => [...text3.matchAll(AN_EVAL_THAT_RUNS)].slice(0, MOST_SCRIPTS_READ_FROM_ONE_COMMAND).flatMap((match) => scriptOfAnEvalEndingAt(text3, match.index + match[0].length));
+var scriptsOfEvalsIn = (text3) => [...text3.matchAll(AN_EVAL_THAT_RUNS)].slice(0, MOST_SCRIPTS_READ_FROM_ONE_COMMAND + 1).flatMap((match) => scriptOfAnEvalEndingAt(text3, match.index + match[0].length));
 var scriptsDirectlyInside = (text3) => [...scriptsOfEvalsIn(text3), ...scriptsOfShellsIn(text3)];
-var scriptsPassedToAShell = (text3) => {
-  const found = [];
+var READING_OF_SCRIPTS_TOO_MANY_TO_READ = ": | sh";
+var readingsOfScriptsPassedToAShell = (text3) => {
+  const readings = [];
+  let scriptsRead = 0;
   let level = [text3];
-  for (let depth = 0; depth < DEEPEST_NESTED_SCRIPT_READ && level.length > 0 && found.length < MOST_SCRIPTS_READ_FROM_ONE_COMMAND; depth += 1) {
-    level = level.flatMap(scriptsDirectlyInside).slice(0, MOST_SCRIPTS_READ_FROM_ONE_COMMAND - found.length);
-    found.push(...level);
+  for (let depth = 0; depth < DEEPEST_NESTED_SCRIPT_READ && level.length > 0; depth += 1) {
+    level = level.flatMap(scriptsDirectlyInside).filter((script) => COMMENT_OR_ANSI_C_QUOTE.test(script));
+    scriptsRead += level.length;
+    if (scriptsRead > MOST_SCRIPTS_READ_FROM_ONE_COMMAND) return [...readings, READING_OF_SCRIPTS_TOO_MANY_TO_READ];
+    readings.push(...level.flatMap((script) => readingWithoutCommentsOrAnsiEscapes(script) ?? []));
   }
-  return found;
+  return readings;
 };
 var shellCommandSegments = (command) => splitShellSegments(command)?.map((segment) => segment.text) ?? null;
 var shellSegmentsReadingAPipe = (command) => splitShellSegments(command)?.filter((segment) => segment.readsPipe).map((segment) => segment.text) ?? null;
@@ -8533,6 +8573,14 @@ var GATE_ALLOW_SOURCE = {
 };
 var PUSHARY_TOOL_PREFIX = "mcp__pushary__";
 var isPusharyOwnTool = (toolName) => toolName.startsWith(PUSHARY_TOOL_PREFIX);
+var PUSHARY_CONNECTOR_TOOL_PREFIXES = ["mcp__claude_ai_Pushary__", "mcp__plugin_pushary_pushary__"];
+var SERVER_AND_TOOL_SEPARATOR = "__";
+var namesOneToolAfterPrefix = (toolName, prefix) => {
+  if (!toolName.startsWith(prefix)) return false;
+  const tool = toolName.slice(prefix.length);
+  return tool.length > 0 && !tool.includes(SERVER_AND_TOOL_SEPARATOR);
+};
+var isPusharyConnectorTool = (toolName) => PUSHARY_CONNECTOR_TOOL_PREFIXES.some((prefix) => namesOneToolAfterPrefix(toolName, prefix));
 var strictestScopeVerdict = (scope, paths) => {
   if (paths.length === 0) return evaluateScope(scope, void 0);
   let worst = { outcome: "in_scope" };
@@ -8643,6 +8691,17 @@ var PRETOOLUSE_HANDLED_TOOLS = /* @__PURE__ */ new Set([...PRETOOLUSE_GATED_TOOL
 var isPermissionRequestOwnedByPreToolUse = (toolName, permissionMode, defers = shouldDeferToNativeMode) => PRETOOLUSE_HANDLED_TOOLS.has(toolName) && (isAskedInEveryMode(toolName) || !defers(permissionMode, toolName));
 var CLAUDE_PRETOOLUSE_MATCHER = [...PRETOOLUSE_HANDLED_TOOLS].join("|");
 var CLAUDE_MCP_PRETOOLUSE_MATCHER = "mcp__.*";
+var CLAUDE_REFUSALS_ONLY_TOOLS = ["WebFetch", "Task", "Agent"];
+var CLAUDE_REFUSALS_ONLY_PRETOOLUSE_MATCHER = `^(${CLAUDE_REFUSALS_ONLY_TOOLS.join("|")})$`;
+var CLAUDE_SUBAGENT_TOOL_ALIASES = { Task: "Agent", Agent: "Task" };
+var claudeSubagentToolAliasOf = (toolName) => Object.hasOwn(CLAUDE_SUBAGENT_TOOL_ALIASES, toolName) ? CLAUDE_SUBAGENT_TOOL_ALIASES[toolName] : void 0;
+var isClaudeRefusalsOnlyTool = (toolName) => toolName.startsWith(MCP_TOOL_PREFIX) || CLAUDE_REFUSALS_ONLY_TOOLS.includes(toolName);
+var standingDenyOfSubagentAlias = (toolName, verdictFor) => {
+  const alias = claudeSubagentToolAliasOf(toolName);
+  if (alias === void 0) return void 0;
+  const verdict = verdictFor(alias);
+  return verdict.kind === "deny" && verdict.policy.tool !== WILDCARD_TOOL_PATTERN ? verdict : void 0;
+};
 var LINE_BREAK = /[\r\n]/;
 var bypassModeCovers = (toolName, toolInput) => {
   const arg = extractPolicyArg(toolName, toolInput);
@@ -8663,6 +8722,7 @@ var PATTERN_PREFIX_WILDCARD = /(?::\*|\*)?\)$/;
 var CONTINUES_A_COMMAND_WORD = /^[ :]/;
 var ruleNarrowsThePattern = (ruleTool, pattern) => {
   if (ruleTool === pattern) return false;
+  if (pattern === WILDCARD_TOOL_PATTERN) return true;
   if (!pattern.includes("(")) return ruleTool.includes("(");
   const prefix = pattern.replace(PATTERN_PREFIX_WILDCARD, "");
   return ruleTool.startsWith(prefix) && CONTINUES_A_COMMAND_WORD.test(ruleTool.slice(prefix.length));
@@ -8701,7 +8761,7 @@ var extraReadingsOf = (toolInput) => {
   const readings = [
     commentFree,
     ...spelledOut,
-    ...[command, commentFree, ...spelledOut].filter(isAReading).flatMap((text3) => scriptsPassedToAShell(text3)).map(readingWithoutCommentsOrAnsiEscapes)
+    ...[command, commentFree, ...spelledOut].filter(isAReading).flatMap(readingsOfScriptsPassedToAShell)
   ];
   return readings.filter(isAReading).map((reading) => ({ ...toolInput, command: reading }));
 };
@@ -9588,6 +9648,7 @@ export {
   resolvePolicy,
   KILL_REASON,
   isPusharyOwnTool,
+  isPusharyConnectorTool,
   shouldDeferToNativeMode,
   AGENT_QUESTION_TOOL,
   AGENT_QUESTION_STRATEGY,
@@ -9608,6 +9669,9 @@ export {
   isPermissionRequestOwnedByPreToolUse,
   CLAUDE_PRETOOLUSE_MATCHER,
   CLAUDE_MCP_PRETOOLUSE_MATCHER,
+  CLAUDE_REFUSALS_ONLY_PRETOOLUSE_MATCHER,
+  isClaudeRefusalsOnlyTool,
+  standingDenyOfSubagentAlias,
   permissionsOffLineAppliesTo,
   permissionsOffAskReason,
   resolveGate,

package/dist/{chunk-4HDX77ND.js → chunk-HINZZUOB.js}

@@ -1,9 +1,9 @@
 import {
   pusharyFetch
-} from "./chunk-RGXFBS56.js";
+} from "./chunk-UIHY3ANL.js";
 import {
   getBaseUrl
-} from "./chunk-R3RTISDD.js";
+} from "./chunk-2M7FELUY.js";
 import {
   NetworkError
 } from "./chunk-YU2EUD7O.js";
@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-GAOUWLYN.js → chunk-HLZWEGW3.js}

@@ -531,8 +531,8 @@ var loadedOnce = (load) => {
 };
 
 // src/codex-desktop-proxy.ts
-var loadThePhone = () => import("./api-WWB7ZOLK.js");
-var loadTheCardRouting = () => import("./codex-card-routing-XNJB6573.js");
+var loadThePhone = () => import("./api-RI52IA65.js");
+var loadTheCardRouting = () => import("./codex-card-routing-JTZ2PC24.js");
 var theFirstCardLoadsAgain = () => {
 };
 var ASKS_WITHOUT_ROUTING = {};
@@ -1085,7 +1085,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-J6EULXO5.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-MEVTS3QV.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");

package/dist/{chunk-67I7QRQB.js → chunk-IA3E675D.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   renderCommandHelp
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-5S32WI3B.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";

package/dist/{chunk-XNCKBVZX.js → chunk-IEZXEY7L.js}

@@ -1,19 +1,19 @@
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "./chunk-GBVTVTDF.js";
+} from "./chunk-7FDDOT2A.js";
 import {
   askUser,
   isDecisionStopped,
   isQuestionLimitRefusal,
   waitForQuestion
-} from "./chunk-NASQPMXW.js";
+} from "./chunk-QK4I4CHR.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-W6LKC5YD.js";
+} from "./chunk-SQPAX33Q.js";
 import {
   getMachineId
-} from "./chunk-TZYVXTLN.js";
+} from "./chunk-4LR27PGD.js";
 import {
   ASK_CONTEXT_MAX,
   agentQuestionContext,
@@ -23,7 +23,7 @@ import {
   plainAskOf,
   questionsShownAsASet,
   shouldDeferToNativeMode
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/native-defer.ts
 var nativeDeferOptions = () => {

package/dist/{chunk-KOZBVXXC.js → chunk-IGMI36FA.js}

@@ -399,9 +399,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-E65GJQS6.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-YKAZI3BH.js");
-    const { autoUpdateLock } = await import("./paths-G7NZODAY.js");
+    const { withUpgradeLock } = await import("./global-upgrade-KHVTFNAK.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-TJBGZLH6.js");
+    const { autoUpdateLock } = await import("./paths-W5X4C6PA.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;

package/dist/{chunk-V52J2THT.js → chunk-IZ7MIGO7.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-FPG7X2GS.js → chunk-J7WPO2M2.js}

@@ -1,19 +1,19 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-AGXOTZID.js";
+} from "./chunk-O7VVRTOR.js";
 import {
   keyPrefix
-} from "./chunk-YZ7V2LVG.js";
+} from "./chunk-SZV5SLSD.js";
 import {
   bridgeAgentKey
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   readJsonSafe
 } from "./chunk-T5I4PKOQ.js";
 import {
   isRecord,
   isValidApiKey
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-BQ673OOD.js → chunk-JK7GROFO.js}

@@ -1,9 +1,9 @@
 import {
   absoluteUrl
-} from "./chunk-4HDX77ND.js";
+} from "./chunk-HINZZUOB.js";
 import {
   KEY_SCOPE
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/cli/approval-settings-pages.ts
 var API_KEYS_PATH = "/dashboard/agent/settings";

package/dist/{chunk-YCCLWG7G.js → chunk-JY2DOJKN.js}

@@ -1,19 +1,19 @@
 import {
   APPROVAL_RULES_PATH,
   canChangeApprovalSettings
-} from "./chunk-BQ673OOD.js";
+} from "./chunk-JK7GROFO.js";
 import {
   callMcpTool
-} from "./chunk-W6LKC5YD.js";
+} from "./chunk-SQPAX33Q.js";
 import {
   absoluteUrl
-} from "./chunk-4HDX77ND.js";
+} from "./chunk-HINZZUOB.js";
 import {
   getBaseUrl
-} from "./chunk-R3RTISDD.js";
+} from "./chunk-2M7FELUY.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-5S32WI3B.js";
 import {
   AGENT_STOP_DEFAULT_SECONDS,
   APPROVAL_MODE_META,
@@ -21,7 +21,7 @@ import {
   classifyConfirmResponse,
   isAnswerSource,
   roundTripAsk
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-CXIYGD33.js → chunk-KRKH26TX.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-ROVLRXBI.js";
 import {
   parseVersion
-} from "./chunk-KOZBVXXC.js";
+} from "./chunk-IGMI36FA.js";
 import {
   isRecord
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-HYTDNEXV.js → chunk-LIIIC27B.js}

@@ -7,7 +7,7 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-SQRS4IF2.js";
+} from "./chunk-5MITA7MU.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-2UE2NDCX.js → chunk-LS3CQ536.js}

@@ -9,7 +9,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-VFZ2PE6U.js → chunk-N47MAVYX.js}

@@ -4,15 +4,15 @@ import {
   claimThrottle,
   releaseThrottle,
   reportEvent
-} from "./chunk-G4OVFWU4.js";
+} from "./chunk-X4CDZLUK.js";
 import {
   deriveToolTarget,
   permissionDeniedAction
-} from "./chunk-GW3PE52Q.js";
+} from "./chunk-7OSBFMRV.js";
 import {
   machineDecisionFor,
   wireVerdictFor
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-VMM6JCNQ.js → chunk-NCHNITQW.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-R3RTISDD.js";
+} from "./chunk-2M7FELUY.js";
 import {
   normalizeInstallSource
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-PDAOZ2NF.js → chunk-NDOT226I.js}

@@ -7,13 +7,13 @@ import {
 } from "./chunk-G66WIAST.js";
 import {
   ensureDaemonRunning
-} from "./chunk-EISUEJDT.js";
+} from "./chunk-SFMJMQJC.js";
 import {
   hookOwnerOf
-} from "./chunk-COXNQUDP.js";
+} from "./chunk-XOYPF2BI.js";
 import {
   hookMeaning
-} from "./chunk-GW3PE52Q.js";
+} from "./chunk-7OSBFMRV.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
@@ -24,29 +24,29 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-SQRS4IF2.js";
+} from "./chunk-5MITA7MU.js";
 import {
   external_exports
 } from "./chunk-XMSDA5WA.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-TLCJCP5R.js";
+} from "./chunk-AH4NLZTT.js";
 import {
   fetchAsCredential
-} from "./chunk-U32N5JZO.js";
+} from "./chunk-E5LU5MJ2.js";
 import {
   readTranscriptPreference
-} from "./chunk-YZ7V2LVG.js";
+} from "./chunk-SZV5SLSD.js";
 import {
   claudeConfigDir,
   codexHome,
   pusharyDir
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-R3RTISDD.js";
+} from "./chunk-2M7FELUY.js";
 import {
   writeJsonAtomic,
   writeJsonAtomicDurable
@@ -58,7 +58,7 @@ import {
   isHookSource,
   isRecord,
   redactSecretsFromContent
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/transcript-recipient-pin.ts
 import { createHash } from "crypto";

package/dist/{chunk-UHAUC7EO.js → chunk-NLEHRQHL.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-YZ7V2LVG.js";
+} from "./chunk-SZV5SLSD.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PJSFKKZ5.js";
+} from "./chunk-5S32WI3B.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-AGXOTZID.js → chunk-O7VVRTOR.js}

@@ -1,13 +1,13 @@
 import {
   compatibleConfigFile
-} from "./chunk-YZESBU7F.js";
+} from "./chunk-6RME4X3J.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands
-} from "./chunk-COXNQUDP.js";
+} from "./chunk-XOYPF2BI.js";
 import {
   AGENT_CHOICES
-} from "./chunk-2UE2NDCX.js";
+} from "./chunk-LS3CQ536.js";
 import {
   bridgeStub,
   claudeSettings,
@@ -19,7 +19,7 @@ import {
   resolveBridgeStub,
   vscodePluginDir,
   windowsNodeLauncherFor
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   readJsonSafe
 } from "./chunk-T5I4PKOQ.js";
@@ -29,7 +29,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-NASQPMXW.js → chunk-QK4I4CHR.js}

@@ -6,21 +6,21 @@ import {
   McpToolError,
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-W6LKC5YD.js";
+} from "./chunk-SQPAX33Q.js";
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-RGXFBS56.js";
+} from "./chunk-UIHY3ANL.js";
 import {
   fetchAsCredential
-} from "./chunk-U32N5JZO.js";
+} from "./chunk-E5LU5MJ2.js";
 import {
   clientReportClaims
-} from "./chunk-CBLFIWPI.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-R3RTISDD.js";
+} from "./chunk-2M7FELUY.js";
 import {
   ASK_AGENT_NAME_MAX,
   CLIENT_REPORT_PATH,
@@ -29,7 +29,7 @@ import {
   TOOL_FAILURE_CODES,
   degradedLine,
   truncateLine
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";
@@ -327,13 +327,13 @@ var claimBlockedAction = async (apiKey, request, timeoutMs) => {
 };
 
 export {
-  isPolicyConfig,
-  isAskUserResponse,
-  isWaitForAnswerResponse,
   reportClientError,
   exitAfterClientReports,
   clientErrorKindOf,
   writeDegraded,
+  isPolicyConfig,
+  isAskUserResponse,
+  isWaitForAnswerResponse,
   isDecisionStopped,
   isAwayPaused,
   isLocalQuestionHandoff,

package/dist/{chunk-4SZM2HRA.js → chunk-RI5APNBY.js}

@@ -4,7 +4,7 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "./chunk-HYTDNEXV.js";
+} from "./chunk-LIIIC27B.js";
 import {
   CommandReceipts,
   controllerCommandSchema
@@ -14,21 +14,21 @@ import {
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership
-} from "./chunk-SNKC2IQZ.js";
+} from "./chunk-FG67GH5B.js";
 import {
   repositoryScopeFor
-} from "./chunk-SE7P5BBK.js";
+} from "./chunk-2QWQCU7L.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "./chunk-NASQPMXW.js";
+} from "./chunk-QK4I4CHR.js";
 import {
   callMcpTool,
   isRetryable
-} from "./chunk-W6LKC5YD.js";
+} from "./chunk-SQPAX33Q.js";
 import {
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
@@ -52,7 +52,7 @@ import {
   parseCodexQuestions,
   planElicitationAsk,
   readElicitationFields
-} from "./chunk-TRDHHF3A.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/codex-question-owner.ts
 import { createHash } from "crypto";