pushary 1.9.120 → 1.9.121

package/dist/{chunk-RHTAI4XP.js → chunk-7FH6T4EN.js}

@@ -1,13 +1,13 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-YOSATSUD.js";
+} from "./chunk-3HZ374VU.js";
 import {
   hermesReceiptPaths,
   hermesSetupPredatesThePluginFolder,
   installHermesPlugin,
   refreshHermesPluginFiles,
   shippedHermesPlugin
-} from "./chunk-ZWUVJ3DV.js";
+} from "./chunk-F4K2A7DJ.js";
 import {
   fxIgnoresInstructionsFile,
   fxInstructionsBody,
@@ -16,7 +16,7 @@ import {
   macAppFxBridge,
   refreshClineKey,
   switchFxHttpEntryToBridge
-} from "./chunk-5NHWNILG.js";
+} from "./chunk-F5FMUDD7.js";
 import {
   OPENCODE_HOOK_BINARY,
   agentHookOwner,
@@ -28,16 +28,16 @@ import {
   openCodePluginDir,
   openCodeWired,
   withOpenCodeAskRules
-} from "./chunk-INKDRMSK.js";
+} from "./chunk-O7VVRTOR.js";
 import {
   detectClaudeVersion
-} from "./chunk-YQGPBLIT.js";
+} from "./chunk-KRKH26TX.js";
 import {
   addCompatibleHooks,
   compatibleConfigFile,
   compatibleInstructionsFile,
   hasCompatibleHooks
-} from "./chunk-HHZSB6KL.js";
+} from "./chunk-6RME4X3J.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
@@ -49,7 +49,7 @@ import {
   geminiWired,
   hasGeminiHooks,
   planHooks
-} from "./chunk-3GFJ7CXQ.js";
+} from "./chunk-XOYPF2BI.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -95,13 +95,13 @@ import {
   renderAgentInstructions,
   supportedClaudeEvents,
   vscodePluginMcp
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   formatVersion,
   hookCommandsUseBareNames,
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "./chunk-ODXZPMKN.js";
+} from "./chunk-IGMI36FA.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -111,7 +111,7 @@ import {
   HOOK_COMPATIBLE_PROFILES,
   isCompatibleAgentType,
   isRecord
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-HVGN7TRN.js → chunk-7OSBFMRV.js}

@@ -24,7 +24,7 @@ import {
   reportableSessionId,
   toToolLookup,
   truncateLine
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // ../hook-mapping/src/commit-receipt.ts
 var COMMIT_OUTPUT_MAX_LENGTH = 65536;

package/dist/{chunk-XSSG5JLJ.js → chunk-AH4NLZTT.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-CPBS6LS3.js";
+} from "./chunk-SZV5SLSD.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-F24QURGP.js → chunk-AXSAL7DK.js}

@@ -1,21 +1,21 @@
 import {
   UNNAMED_ACTION
-} from "./chunk-HVGN7TRN.js";
+} from "./chunk-7OSBFMRV.js";
 import {
   askUser,
   isAwayPaused,
   isLocalQuestionHandoff,
   unavailableQuestionUnlessRefused,
   waitForQuestion
-} from "./chunk-KG7UZSCD.js";
+} from "./chunk-QK4I4CHR.js";
 import {
   getMachineId
-} from "./chunk-6FR5ZYMS.js";
+} from "./chunk-4LR27PGD.js";
 import {
   hookWaitClamped,
   hookWaitDeadline,
   scopeBreachReasonOf
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/pushed-question.ts
 var scopeQuestionOf = (verdict) => {

package/dist/{chunk-TAHUCUY3.js → chunk-B3KFHR43.js}

@@ -9,13 +9,13 @@ import {
   installedCodexApp,
   readCodexAppRuntime,
   shellQuoted
-} from "./chunk-5KCUQ3B7.js";
+} from "./chunk-HLZWEGW3.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-WFHUECGB.js";
+} from "./chunk-SFMJMQJC.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";

package/dist/{chunk-UFRRAAYD.js → chunk-BMME65OT.js}

@@ -12,7 +12,7 @@ import {
   reachVerdict,
   reachesYou,
   verifyDelivery
-} from "./chunk-AIABYHHZ.js";
+} from "./chunk-JY2DOJKN.js";
 import {
   humanIsTty,
   writeHuman
@@ -24,14 +24,14 @@ import {
 } from "./chunk-FO3MDD26.js";
 import {
   reportedInstallSource
-} from "./chunk-B4M2XZNQ.js";
+} from "./chunk-NCHNITQW.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-7VRL6XYM.js";
+} from "./chunk-5S32WI3B.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/onboarding.ts
 import qrcodeTerminal from "qrcode-terminal";

package/dist/{chunk-7YRKM4AB.js → chunk-BPU6P3DS.js}

@@ -3,10 +3,10 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-J6ACLE2A.js";
+} from "./chunk-5CMNZXJV.js";
 import {
   phoneStartIsRequired
-} from "./chunk-W4MZBZU3.js";
+} from "./chunk-S6TMCUU7.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -18,25 +18,25 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-XUAGV5VH.js";
+} from "./chunk-H2OUB5S5.js";
 import {
   autoUpdateLock,
   autoUpdateLog,
   autoUpdateState
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   execNpm,
   fetchLatestPublishedVersion,
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-ODXZPMKN.js";
+} from "./chunk-IGMI36FA.js";
 import {
   EXIT
 } from "./chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-7VRL6XYM.js";
+} from "./chunk-5S32WI3B.js";
 import {
   commandsPackage,
   globalUpgradeEntry,

package/dist/{chunk-IYUAMUO6.js → chunk-BVI2N7QA.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-CPBS6LS3.js";
+} from "./chunk-SZV5SLSD.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-ZR35L635.js → chunk-D2LPVOG5.js}

@@ -1,9 +1,9 @@
 import {
   claudeConfigDir
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   claudePermissionRulesFromSettings
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";

package/dist/{chunk-NVOQBKIL.js → chunk-DLXYQE5G.js}

@@ -1,20 +1,20 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-INKDRMSK.js";
+} from "./chunk-O7VVRTOR.js";
 import {
   nativeClaudeInstallPath
 } from "./chunk-ROVLRXBI.js";
 import {
   grokHome
-} from "./chunk-HHZSB6KL.js";
+} from "./chunk-6RME4X3J.js";
 import {
   claudeConfigDir,
   clineDataDirectory,
   codexHomeFrom
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-47HCNA5U.js → chunk-E5LU5MJ2.js}

@@ -5,7 +5,7 @@ import {
   MCP_CREDENTIAL_REJECTION_BODY,
   isRecord,
   responseRejectsCredential
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/credential-rejection.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-NXWQZBOK.js → chunk-EVWF3A5D.js}

@@ -1,12 +1,12 @@
 import {
   parseSseMessages
-} from "./chunk-UZL3VQCE.js";
+} from "./chunk-SQPAX33Q.js";
 import {
   fetchAsCredential
-} from "./chunk-47HCNA5U.js";
+} from "./chunk-E5LU5MJ2.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-7VRL6XYM.js";
+} from "./chunk-5S32WI3B.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-ZWUVJ3DV.js → chunk-F4K2A7DJ.js}

@@ -5,10 +5,10 @@ import {
   hermesAppWiringRecord,
   hermesConfigReceipt,
   hermesSetupReceipt
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   resolvePathBinary
-} from "./chunk-ODXZPMKN.js";
+} from "./chunk-IGMI36FA.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -19,7 +19,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/hermes/plugin-payload.ts
 import { createHash } from "crypto";

package/dist/{chunk-5NHWNILG.js → chunk-F5FMUDD7.js}

@@ -4,13 +4,13 @@ import {
   configFailureKind,
   retryAgentCommand,
   writeSetupConfigFile
-} from "./chunk-EDNCFLR7.js";
+} from "./chunk-5UT5EFMH.js";
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-NXWQZBOK.js";
+} from "./chunk-EVWF3A5D.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-CPBS6LS3.js";
+} from "./chunk-SZV5SLSD.js";
 import {
   CLINE_SERVER_NAME_TAKEN,
   CLINE_SETTINGS_REFUSALS,
@@ -32,10 +32,10 @@ import {
   withClinePusharyServer,
   withRefreshedClineKey,
   withoutClinePusharyServer
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   resolveGlobalBinary
-} from "./chunk-ODXZPMKN.js";
+} from "./chunk-IGMI36FA.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-2ZT4XV4I.js → chunk-FBJHC7HW.js}

@@ -2,10 +2,10 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-4FLMGGWB.js";
+} from "./chunk-NLEHRQHL.js";
 import {
   APPROVAL_RULES_PATH
-} from "./chunk-KESS6HAK.js";
+} from "./chunk-JK7GROFO.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
@@ -14,19 +14,19 @@ import {
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-ZV7G73KH.js";
+} from "./chunk-HINZZUOB.js";
 import {
   readKeySource
-} from "./chunk-CPBS6LS3.js";
+} from "./chunk-SZV5SLSD.js";
 import {
   getBaseUrl
-} from "./chunk-MZX35RFX.js";
+} from "./chunk-2M7FELUY.js";
 import {
   EXIT
 } from "./chunk-BG4HHB7E.js";
 import {
   KEY_SCOPE
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-VKRRUT45.js → chunk-FEJP2I44.js}

@@ -1,22 +1,22 @@
 import {
   cursorGateOwnsClaudeCall,
   readCursorGateRegistration
-} from "./chunk-L37Q4BR6.js";
+} from "./chunk-WJUFRGJS.js";
 import {
   registerTranscript
-} from "./chunk-A5YOWKPR.js";
+} from "./chunk-NDOT226I.js";
 import {
   namedEvent
-} from "./chunk-HHZSB6KL.js";
+} from "./chunk-6RME4X3J.js";
 import {
   writeDegraded
-} from "./chunk-KG7UZSCD.js";
+} from "./chunk-QK4I4CHR.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource,
   isGrokHookPayload,
   isGrokSessionEndStop
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode", "cursor_version"];

package/dist/{chunk-HSFTTGOB.js → chunk-FG67GH5B.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   readJsonSafe
 } from "./chunk-T5I4PKOQ.js";
 import {
   isRecord
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-ZRTUS6WD.js → chunk-GZ3D46PV.js}

@@ -3,7 +3,7 @@ import {
   formatVersion,
   quoteIfNeeded,
   shellDoubleQuoted
-} from "./chunk-ODXZPMKN.js";
+} from "./chunk-IGMI36FA.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";
@@ -19,7 +19,7 @@ import {
   HOOK_LOCATOR_BINARY,
   PRETOOLUSE_GATED_TOOLS,
   withHookHoldBudget
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/setup/paths.ts
 import { createHash as createHash2 } from "crypto";
@@ -742,7 +742,6 @@ var CLAUDE_MCP_ROUTE_HOLD_HOOK = {
   matcher: CLAUDE_MCP_PRETOOLUSE_MATCHER,
   timeout: HOOK_BUDGETS.claude.budgetSeconds,
   delivery: "approval",
-  cliOnly: true,
   since: ESTABLISHED
 };
 var CLAUDE_REFUSALS_ONLY_HOOK = {

package/dist/{chunk-XUAGV5VH.js → chunk-H2OUB5S5.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-GZ3D46PV.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -17,7 +17,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isAutoUpdateResult
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-W744DTUT.js → chunk-HI5YJFKW.js}

@@ -1807,20 +1807,60 @@ var scriptsOfShellsIn = (text3) => {
   const words = shellWordsOf(text3);
   return words === null ? [] : words.flatMap((_, index) => scriptArgumentOfAShellAt(words, index) ?? []);
 };
+var endsTheCommandAsAControlOperator = (text3, index) => {
+  const char = text3.charAt(index);
+  const before = text3.charAt(index - 1);
+  if (char === "|") return before !== ">";
+  return char === "&" && before !== ">" && before !== "<" && text3.charAt(index + 1) !== ">";
+};
+var endOfTheSimpleCommandAt = (text3, from) => {
+  let depth = 0;
+  let quote = null;
+  let inBackticks = false;
+  for (let index = from; index < text3.length; index += 1) {
+    const char = text3.charAt(index);
+    if (quote === "'") {
+      if (char === "'") quote = null;
+    } else if (char === "\\") {
+      index += 1;
+    } else if (quote === '"') {
+      if (char === '"') quote = null;
+    } else if (char === "'" || char === '"') {
+      quote = char;
+    } else if (char === "`") {
+      inBackticks = !inBackticks;
+    } else if (inBackticks) {
+      continue;
+    } else if (char === "(") {
+      depth += 1;
+    } else if (char === ")" && depth > 0) {
+      depth -= 1;
+    } else if (depth === 0 && (char === "\n" || char === ";" || char === ")" || endsTheCommandAsAControlOperator(text3, index))) {
+      return index;
+    }
+  }
+  return text3.length;
+};
 var scriptOfAnEvalEndingAt = (text3, end) => {
-  const words = shellWordsOf(text3.slice(end));
-  return words === null ? [] : [words.map((word) => word.text).join(" ")];
+  const words = shellWordsOf(text3.slice(end, endOfTheSimpleCommandAt(text3, end)));
+  if (words === null) return [];
+  const firstComment = words.findIndex((word) => word.comment);
+  return [(firstComment === -1 ? words : words.slice(0, firstComment)).map((word) => word.text).join(" ")];
 };
-var scriptsOfEvalsIn = (text3) => [...text3.matchAll(AN_EVAL_THAT_RUNS)].slice(0, MOST_SCRIPTS_READ_FROM_ONE_COMMAND).flatMap((match) => scriptOfAnEvalEndingAt(text3, match.index + match[0].length));
+var scriptsOfEvalsIn = (text3) => [...text3.matchAll(AN_EVAL_THAT_RUNS)].slice(0, MOST_SCRIPTS_READ_FROM_ONE_COMMAND + 1).flatMap((match) => scriptOfAnEvalEndingAt(text3, match.index + match[0].length));
 var scriptsDirectlyInside = (text3) => [...scriptsOfEvalsIn(text3), ...scriptsOfShellsIn(text3)];
-var scriptsPassedToAShell = (text3) => {
-  const found = [];
+var READING_OF_SCRIPTS_TOO_MANY_TO_READ = ": | sh";
+var readingsOfScriptsPassedToAShell = (text3) => {
+  const readings = [];
+  let scriptsRead = 0;
   let level = [text3];
-  for (let depth = 0; depth < DEEPEST_NESTED_SCRIPT_READ && level.length > 0 && found.length < MOST_SCRIPTS_READ_FROM_ONE_COMMAND; depth += 1) {
-    level = level.flatMap(scriptsDirectlyInside).slice(0, MOST_SCRIPTS_READ_FROM_ONE_COMMAND - found.length);
-    found.push(...level);
+  for (let depth = 0; depth < DEEPEST_NESTED_SCRIPT_READ && level.length > 0; depth += 1) {
+    level = level.flatMap(scriptsDirectlyInside).filter((script) => COMMENT_OR_ANSI_C_QUOTE.test(script));
+    scriptsRead += level.length;
+    if (scriptsRead > MOST_SCRIPTS_READ_FROM_ONE_COMMAND) return [...readings, READING_OF_SCRIPTS_TOO_MANY_TO_READ];
+    readings.push(...level.flatMap((script) => readingWithoutCommentsOrAnsiEscapes(script) ?? []));
   }
-  return found;
+  return readings;
 };
 var shellCommandSegments = (command) => splitShellSegments(command)?.map((segment) => segment.text) ?? null;
 var shellSegmentsReadingAPipe = (command) => splitShellSegments(command)?.filter((segment) => segment.readsPipe).map((segment) => segment.text) ?? null;
@@ -8655,6 +8695,13 @@ var CLAUDE_REFUSALS_ONLY_TOOLS = ["WebFetch", "Task", "Agent"];
 var CLAUDE_REFUSALS_ONLY_PRETOOLUSE_MATCHER = `^(${CLAUDE_REFUSALS_ONLY_TOOLS.join("|")})$`;
 var CLAUDE_SUBAGENT_TOOL_ALIASES = { Task: "Agent", Agent: "Task" };
 var claudeSubagentToolAliasOf = (toolName) => Object.hasOwn(CLAUDE_SUBAGENT_TOOL_ALIASES, toolName) ? CLAUDE_SUBAGENT_TOOL_ALIASES[toolName] : void 0;
+var isClaudeRefusalsOnlyTool = (toolName) => toolName.startsWith(MCP_TOOL_PREFIX) || CLAUDE_REFUSALS_ONLY_TOOLS.includes(toolName);
+var standingDenyOfSubagentAlias = (toolName, verdictFor) => {
+  const alias = claudeSubagentToolAliasOf(toolName);
+  if (alias === void 0) return void 0;
+  const verdict = verdictFor(alias);
+  return verdict.kind === "deny" && verdict.policy.tool !== WILDCARD_TOOL_PATTERN ? verdict : void 0;
+};
 var LINE_BREAK = /[\r\n]/;
 var bypassModeCovers = (toolName, toolInput) => {
   const arg = extractPolicyArg(toolName, toolInput);
@@ -8675,6 +8722,7 @@ var PATTERN_PREFIX_WILDCARD = /(?::\*|\*)?\)$/;
 var CONTINUES_A_COMMAND_WORD = /^[ :]/;
 var ruleNarrowsThePattern = (ruleTool, pattern) => {
   if (ruleTool === pattern) return false;
+  if (pattern === WILDCARD_TOOL_PATTERN) return true;
   if (!pattern.includes("(")) return ruleTool.includes("(");
   const prefix = pattern.replace(PATTERN_PREFIX_WILDCARD, "");
   return ruleTool.startsWith(prefix) && CONTINUES_A_COMMAND_WORD.test(ruleTool.slice(prefix.length));
@@ -8713,7 +8761,7 @@ var extraReadingsOf = (toolInput) => {
   const readings = [
     commentFree,
     ...spelledOut,
-    ...[command, commentFree, ...spelledOut].filter(isAReading).flatMap((text3) => scriptsPassedToAShell(text3)).map(readingWithoutCommentsOrAnsiEscapes)
+    ...[command, commentFree, ...spelledOut].filter(isAReading).flatMap(readingsOfScriptsPassedToAShell)
   ];
   return readings.filter(isAReading).map((reading) => ({ ...toolInput, command: reading }));
 };
@@ -9576,7 +9624,6 @@ export {
   isTokenCount,
   reportableSessionId,
   TOOL_NAME_MAX_LENGTH,
-  WILDCARD_TOOL_PATTERN,
   normalizeRepoRemote,
   localRepoKey,
   isSafeReadOnlyCommand,
@@ -9622,9 +9669,9 @@ export {
   isPermissionRequestOwnedByPreToolUse,
   CLAUDE_PRETOOLUSE_MATCHER,
   CLAUDE_MCP_PRETOOLUSE_MATCHER,
-  CLAUDE_REFUSALS_ONLY_TOOLS,
   CLAUDE_REFUSALS_ONLY_PRETOOLUSE_MATCHER,
-  claudeSubagentToolAliasOf,
+  isClaudeRefusalsOnlyTool,
+  standingDenyOfSubagentAlias,
   permissionsOffLineAppliesTo,
   permissionsOffAskReason,
   resolveGate,

package/dist/{chunk-ZV7G73KH.js → chunk-HINZZUOB.js}

@@ -1,9 +1,9 @@
 import {
   pusharyFetch
-} from "./chunk-XRRY45XB.js";
+} from "./chunk-UIHY3ANL.js";
 import {
   getBaseUrl
-} from "./chunk-MZX35RFX.js";
+} from "./chunk-2M7FELUY.js";
 import {
   NetworkError
 } from "./chunk-YU2EUD7O.js";
@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-5KCUQ3B7.js → chunk-HLZWEGW3.js}

@@ -531,8 +531,8 @@ var loadedOnce = (load) => {
 };
 
 // src/codex-desktop-proxy.ts
-var loadThePhone = () => import("./api-QFUMNTEQ.js");
-var loadTheCardRouting = () => import("./codex-card-routing-IKNAEEMC.js");
+var loadThePhone = () => import("./api-RI52IA65.js");
+var loadTheCardRouting = () => import("./codex-card-routing-JTZ2PC24.js");
 var theFirstCardLoadsAgain = () => {
 };
 var ASKS_WITHOUT_ROUTING = {};
@@ -1085,7 +1085,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-545ISCGQ.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-MEVTS3QV.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");

package/dist/{chunk-YZORQXN7.js → chunk-IA3E675D.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   renderCommandHelp
-} from "./chunk-7VRL6XYM.js";
+} from "./chunk-5S32WI3B.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";