pushary 1.9.120 → 1.9.122

package/dist/{chunk-HVGN7TRN.js → chunk-7OSBFMRV.js}

@@ -24,7 +24,7 @@ import {
   reportableSessionId,
   toToolLookup,
   truncateLine
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // ../hook-mapping/src/commit-receipt.ts
 var COMMIT_OUTPUT_MAX_LENGTH = 65536;

package/dist/{chunk-KG7UZSCD.js → chunk-7ZTVBYPE.js}

@@ -6,21 +6,21 @@ import {
   McpToolError,
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-UZL3VQCE.js";
+} from "./chunk-SO44USAF.js";
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-XRRY45XB.js";
+} from "./chunk-2M7ZV6NA.js";
 import {
   fetchAsCredential
-} from "./chunk-47HCNA5U.js";
+} from "./chunk-E5LU5MJ2.js";
 import {
   clientReportClaims
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-EUIDFLPM.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-MZX35RFX.js";
+} from "./chunk-2M7FELUY.js";
 import {
   ASK_AGENT_NAME_MAX,
   CLIENT_REPORT_PATH,
@@ -29,7 +29,7 @@ import {
   TOOL_FAILURE_CODES,
   degradedLine,
   truncateLine
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-5KCUQ3B7.js → chunk-ABYRJP4R.js}

@@ -531,8 +531,8 @@ var loadedOnce = (load) => {
 };
 
 // src/codex-desktop-proxy.ts
-var loadThePhone = () => import("./api-QFUMNTEQ.js");
-var loadTheCardRouting = () => import("./codex-card-routing-IKNAEEMC.js");
+var loadThePhone = () => import("./api-KE4OJ3NK.js");
+var loadTheCardRouting = () => import("./codex-card-routing-JTZ2PC24.js");
 var theFirstCardLoadsAgain = () => {
 };
 var ASKS_WITHOUT_ROUTING = {};
@@ -1085,7 +1085,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-545ISCGQ.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-HUU5TTBZ.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");

package/dist/{chunk-XSSG5JLJ.js → chunk-AH4NLZTT.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-CPBS6LS3.js";
+} from "./chunk-SZV5SLSD.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-33NEYAK2.js → chunk-AVSHVOFB.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-HHZSB6KL.js";
+} from "./chunk-ZAYXOSEP.js";
 import {
   pusharyHookExecutable
-} from "./chunk-3GFJ7CXQ.js";
+} from "./chunk-Q3KKA5IZ.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-EUIDFLPM.js";
 import {
   isRecord
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-ZV7G73KH.js → chunk-B5OX2WCA.js}

@@ -1,9 +1,9 @@
 import {
   pusharyFetch
-} from "./chunk-XRRY45XB.js";
+} from "./chunk-2M7ZV6NA.js";
 import {
   getBaseUrl
-} from "./chunk-MZX35RFX.js";
+} from "./chunk-2M7FELUY.js";
 import {
   NetworkError
 } from "./chunk-YU2EUD7O.js";
@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-BZ6N5DDZ.js → chunk-BHQYJFPY.js}

@@ -1,33 +1,33 @@
 import {
   claudeSettingsLocationFor,
   readClaudePermissionRules
-} from "./chunk-ZR35L635.js";
+} from "./chunk-PO6ECYXG.js";
 import {
   askAgentQuestions,
   defersToNativeMode,
   outcomeOfFailedAsk,
   storedWaitDeadline
-} from "./chunk-3DD44QTA.js";
+} from "./chunk-X6WYICTL.js";
 import {
   reportMachineDenial
-} from "./chunk-PEMESJZY.js";
+} from "./chunk-2WGP6QE7.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-SSTO42XS.js";
+} from "./chunk-7EYXAM63.js";
 import {
   isAdmitted,
   readAdmissionRules
-} from "./chunk-VKRRUT45.js";
+} from "./chunk-TJ32WT6M.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-K4RIBZ32.js";
+} from "./chunk-OJPHNITI.js";
 import {
   activeHookSource,
   activeIdentity,
   namedSource
-} from "./chunk-HHZSB6KL.js";
+} from "./chunk-ZAYXOSEP.js";
 import {
   DEFAULT_SESSION,
   approvalAwaitingRetry,
@@ -48,7 +48,7 @@ import {
   settleQuestionsForToolUse,
   sweepFilesOlderThan,
   userScope
-} from "./chunk-XOPOX5QY.js";
+} from "./chunk-WLC3AX6F.js";
 import {
   UNNAMED_ACTION,
   deriveAction,
@@ -59,12 +59,12 @@ import {
   patchDeletesFiles,
   permissionDeniedAction,
   scopePathFor
-} from "./chunk-HVGN7TRN.js";
+} from "./chunk-7OSBFMRV.js";
 import {
   branchFor,
   repoKeyFor,
   repositoryScopeFor
-} from "./chunk-363YZ5WJ.js";
+} from "./chunk-2QWQCU7L.js";
 import {
   askUser,
   cancelQuestion,
@@ -81,24 +81,23 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-KG7UZSCD.js";
+} from "./chunk-7ZTVBYPE.js";
 import {
   getMachineId
-} from "./chunk-6FR5ZYMS.js";
+} from "./chunk-RBPPX663.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-MZX35RFX.js";
+} from "./chunk-2M7FELUY.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-7VRL6XYM.js";
+} from "./chunk-5S32WI3B.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
-  CLAUDE_REFUSALS_ONLY_TOOLS,
   DECISION_STOP_REASON,
   GATE_BLOCK_REASON_MAX_LENGTH,
   GATE_WIRE,
@@ -115,7 +114,6 @@ import {
   TERMINAL_AND_PHONE_REASON,
   UNREADABLE_CALL_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
-  WILDCARD_TOOL_PATTERN,
   WITHDRAWN_APPROVAL_REASON,
   agentQuestionStrategy,
   agentRulesAllowEveryInput,
@@ -132,7 +130,6 @@ import {
   claudePromptTakesTheCall,
   claudeStoppedPermissionRequestOutput,
   claudeStoppedPreToolUseOutput,
-  claudeSubagentToolAliasOf,
   denyReasonFrom,
   editGoesToTheAgentsPrompt,
   effectiveWaitSeconds,
@@ -144,6 +141,7 @@ import {
   hookWaitDeadline,
   hookWritePath,
   isBlockedActionRequest,
+  isClaudeRefusalsOnlyTool,
   isCursorHookPayload,
   isPermissionRequestOwnedByPreToolUse,
   isPusharyConnectorTool,
@@ -159,12 +157,13 @@ import {
   questionLimitHandBack,
   refusesWhenUnanswered,
   resolveGate,
+  standingDenyOfSubagentAlias,
   terminalLiveWait,
   terminalStaysLiveForTheCall,
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason,
   unapprovedScopeReason
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/terminal-answer-watch.ts
 import { closeSync, openSync, readSync, statSync } from "fs";
@@ -836,14 +835,8 @@ var rememberHandbackToThePrompt = (input, heldForMcpRoute, result) => {
   if (heldForMcpRoute && result?.hookSpecificOutput?.permissionDecision === "ask") recordMcpHoldHandback(blockedActionFingerprintFor(input));
   return result;
 };
-var isRefusalsOnlyCallInClaudeCode = (input) => isMcpCallInClaudeCode(input) || ACTIVE_SOURCE === "claude" && CLAUDE_REFUSALS_ONLY_TOOLS.includes(input.tool_name);
+var isRefusalsOnlyCallInClaudeCode = (input) => ACTIVE_SOURCE === "claude" && isClaudeRefusalsOnlyTool(input.tool_name);
 var STANDING_REFUSAL_NETWORK_BUDGET_MS = 800;
-var standingDenyOfTheSubagentAlias = (gateInputFor, toolName) => {
-  const alias = claudeSubagentToolAliasOf(toolName);
-  if (alias === void 0) return void 0;
-  const verdict = resolveGate(gateInputFor(alias));
-  return verdict.kind === "deny" && verdict.policy.tool !== WILDCARD_TOOL_PATTERN ? verdict : void 0;
-};
 var standingRefusalOf = async (input) => {
   let apiKey;
   try {
@@ -862,7 +855,7 @@ var standingRefusalOf = async (input) => {
     if (policy === null) return void 0;
     const gateInputFor = (toolName) => claudeGateInput(modeState, policy, { ...input, tool_name: toolName });
     const asCalled = resolveGate(gateInputFor(input.tool_name));
-    const denied = asCalled.kind === "deny" ? asCalled : standingDenyOfTheSubagentAlias(gateInputFor, input.tool_name);
+    const denied = asCalled.kind === "deny" ? asCalled : standingDenyOfSubagentAlias(input.tool_name, (toolName) => resolveGate(gateInputFor(toolName)));
     if (denied === void 0) return void 0;
     await reportMachineDenial(input, denied, ACTIVE_AGENT);
     return deny(denied.reason);

package/dist/{chunk-IYUAMUO6.js → chunk-BVI2N7QA.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-CPBS6LS3.js";
+} from "./chunk-SZV5SLSD.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-L37Q4BR6.js → chunk-C2L477NM.js}

@@ -1,17 +1,17 @@
 import {
   pusharyHookExecutable
-} from "./chunk-3GFJ7CXQ.js";
+} from "./chunk-Q3KKA5IZ.js";
 import {
   bridgeResolvesToApp,
   cursorUserHooks,
   executableFileName,
   isBridgeLocator,
   liveBridgeProbe
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-EUIDFLPM.js";
 import {
   atLeast,
   parseVersion
-} from "./chunk-ODXZPMKN.js";
+} from "./chunk-KQKHSJOM.js";
 import {
   CURSOR_GATE_COVERAGE,
   CURSOR_GATE_SCRIPT,
@@ -21,7 +21,7 @@ import {
   isCursorHookPayload,
   isRecord,
   toolsCoveredByGateEntry
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/cursor-gate-registration.ts
 import { dirname, isAbsolute, join, resolve } from "path";

package/dist/{chunk-KESS6HAK.js → chunk-DK6R5IVR.js}

@@ -1,9 +1,9 @@
 import {
   absoluteUrl
-} from "./chunk-ZV7G73KH.js";
+} from "./chunk-B5OX2WCA.js";
 import {
   KEY_SCOPE
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/cli/approval-settings-pages.ts
 var API_KEYS_PATH = "/dashboard/agent/settings";

package/dist/{chunk-EG2E2562.js → chunk-DRYQ7RLF.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-EUIDFLPM.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-TAHUCUY3.js → chunk-E3LX6DEF.js}

@@ -9,13 +9,13 @@ import {
   installedCodexApp,
   readCodexAppRuntime,
   shellQuoted
-} from "./chunk-5KCUQ3B7.js";
+} from "./chunk-ABYRJP4R.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-WFHUECGB.js";
+} from "./chunk-XWFYR52C.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";

package/dist/{chunk-47HCNA5U.js → chunk-E5LU5MJ2.js}

@@ -5,7 +5,7 @@ import {
   MCP_CREDENTIAL_REJECTION_BODY,
   isRecord,
   responseRejectsCredential
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/credential-rejection.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-EU4NV7SS.js → chunk-EBJ5QUVE.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-EUIDFLPM.js";
 import {
   readRegularJsonFile,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-ZRTUS6WD.js → chunk-EUIDFLPM.js}

@@ -3,7 +3,7 @@ import {
   formatVersion,
   quoteIfNeeded,
   shellDoubleQuoted
-} from "./chunk-ODXZPMKN.js";
+} from "./chunk-KQKHSJOM.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";
@@ -19,7 +19,7 @@ import {
   HOOK_LOCATOR_BINARY,
   PRETOOLUSE_GATED_TOOLS,
   withHookHoldBudget
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/setup/paths.ts
 import { createHash as createHash2 } from "crypto";
@@ -742,7 +742,6 @@ var CLAUDE_MCP_ROUTE_HOLD_HOOK = {
   matcher: CLAUDE_MCP_PRETOOLUSE_MATCHER,
   timeout: HOOK_BUDGETS.claude.budgetSeconds,
   delivery: "approval",
-  cliOnly: true,
   since: ESTABLISHED
 };
 var CLAUDE_REFUSALS_ONLY_HOOK = {
@@ -886,7 +885,8 @@ var addPusharyHooks = (settings, binDir, version = null) => {
   const supported = new Map(supportedClaudeEvents(version).map((hook) => [hook.event, hook]));
   for (const known of CLAUDE_HOOK_EVENTS) {
     const current = Array.isArray(hooks[known.event]) ? hooks[known.event] : [];
-    const definition = supported.get(known.event);
+    const oursButUnjudged = version === null && current.some((item) => isPusharyHook(item));
+    const definition = supported.get(known.event) ?? (oursButUnjudged ? known : void 0);
     if (definition) {
       hooks[known.event] = registerHookEntry(current, isPusharyHook, entry(definition, resolve2));
       continue;
@@ -1284,6 +1284,7 @@ export {
   guardCursorGate,
   guardedArgv,
   registeredCommands,
+  namesCliBinary,
   namesOurBinary,
   registrationHolderOf,
   windowsNodeLauncherFor,

package/dist/{chunk-W744DTUT.js → chunk-HI5YJFKW.js}

@@ -1807,20 +1807,60 @@ var scriptsOfShellsIn = (text3) => {
   const words = shellWordsOf(text3);
   return words === null ? [] : words.flatMap((_, index) => scriptArgumentOfAShellAt(words, index) ?? []);
 };
+var endsTheCommandAsAControlOperator = (text3, index) => {
+  const char = text3.charAt(index);
+  const before = text3.charAt(index - 1);
+  if (char === "|") return before !== ">";
+  return char === "&" && before !== ">" && before !== "<" && text3.charAt(index + 1) !== ">";
+};
+var endOfTheSimpleCommandAt = (text3, from) => {
+  let depth = 0;
+  let quote = null;
+  let inBackticks = false;
+  for (let index = from; index < text3.length; index += 1) {
+    const char = text3.charAt(index);
+    if (quote === "'") {
+      if (char === "'") quote = null;
+    } else if (char === "\\") {
+      index += 1;
+    } else if (quote === '"') {
+      if (char === '"') quote = null;
+    } else if (char === "'" || char === '"') {
+      quote = char;
+    } else if (char === "`") {
+      inBackticks = !inBackticks;
+    } else if (inBackticks) {
+      continue;
+    } else if (char === "(") {
+      depth += 1;
+    } else if (char === ")" && depth > 0) {
+      depth -= 1;
+    } else if (depth === 0 && (char === "\n" || char === ";" || char === ")" || endsTheCommandAsAControlOperator(text3, index))) {
+      return index;
+    }
+  }
+  return text3.length;
+};
 var scriptOfAnEvalEndingAt = (text3, end) => {
-  const words = shellWordsOf(text3.slice(end));
-  return words === null ? [] : [words.map((word) => word.text).join(" ")];
+  const words = shellWordsOf(text3.slice(end, endOfTheSimpleCommandAt(text3, end)));
+  if (words === null) return [];
+  const firstComment = words.findIndex((word) => word.comment);
+  return [(firstComment === -1 ? words : words.slice(0, firstComment)).map((word) => word.text).join(" ")];
 };
-var scriptsOfEvalsIn = (text3) => [...text3.matchAll(AN_EVAL_THAT_RUNS)].slice(0, MOST_SCRIPTS_READ_FROM_ONE_COMMAND).flatMap((match) => scriptOfAnEvalEndingAt(text3, match.index + match[0].length));
+var scriptsOfEvalsIn = (text3) => [...text3.matchAll(AN_EVAL_THAT_RUNS)].slice(0, MOST_SCRIPTS_READ_FROM_ONE_COMMAND + 1).flatMap((match) => scriptOfAnEvalEndingAt(text3, match.index + match[0].length));
 var scriptsDirectlyInside = (text3) => [...scriptsOfEvalsIn(text3), ...scriptsOfShellsIn(text3)];
-var scriptsPassedToAShell = (text3) => {
-  const found = [];
+var READING_OF_SCRIPTS_TOO_MANY_TO_READ = ": | sh";
+var readingsOfScriptsPassedToAShell = (text3) => {
+  const readings = [];
+  let scriptsRead = 0;
   let level = [text3];
-  for (let depth = 0; depth < DEEPEST_NESTED_SCRIPT_READ && level.length > 0 && found.length < MOST_SCRIPTS_READ_FROM_ONE_COMMAND; depth += 1) {
-    level = level.flatMap(scriptsDirectlyInside).slice(0, MOST_SCRIPTS_READ_FROM_ONE_COMMAND - found.length);
-    found.push(...level);
+  for (let depth = 0; depth < DEEPEST_NESTED_SCRIPT_READ && level.length > 0; depth += 1) {
+    level = level.flatMap(scriptsDirectlyInside).filter((script) => COMMENT_OR_ANSI_C_QUOTE.test(script));
+    scriptsRead += level.length;
+    if (scriptsRead > MOST_SCRIPTS_READ_FROM_ONE_COMMAND) return [...readings, READING_OF_SCRIPTS_TOO_MANY_TO_READ];
+    readings.push(...level.flatMap((script) => readingWithoutCommentsOrAnsiEscapes(script) ?? []));
   }
-  return found;
+  return readings;
 };
 var shellCommandSegments = (command) => splitShellSegments(command)?.map((segment) => segment.text) ?? null;
 var shellSegmentsReadingAPipe = (command) => splitShellSegments(command)?.filter((segment) => segment.readsPipe).map((segment) => segment.text) ?? null;
@@ -8655,6 +8695,13 @@ var CLAUDE_REFUSALS_ONLY_TOOLS = ["WebFetch", "Task", "Agent"];
 var CLAUDE_REFUSALS_ONLY_PRETOOLUSE_MATCHER = `^(${CLAUDE_REFUSALS_ONLY_TOOLS.join("|")})$`;
 var CLAUDE_SUBAGENT_TOOL_ALIASES = { Task: "Agent", Agent: "Task" };
 var claudeSubagentToolAliasOf = (toolName) => Object.hasOwn(CLAUDE_SUBAGENT_TOOL_ALIASES, toolName) ? CLAUDE_SUBAGENT_TOOL_ALIASES[toolName] : void 0;
+var isClaudeRefusalsOnlyTool = (toolName) => toolName.startsWith(MCP_TOOL_PREFIX) || CLAUDE_REFUSALS_ONLY_TOOLS.includes(toolName);
+var standingDenyOfSubagentAlias = (toolName, verdictFor) => {
+  const alias = claudeSubagentToolAliasOf(toolName);
+  if (alias === void 0) return void 0;
+  const verdict = verdictFor(alias);
+  return verdict.kind === "deny" && verdict.policy.tool !== WILDCARD_TOOL_PATTERN ? verdict : void 0;
+};
 var LINE_BREAK = /[\r\n]/;
 var bypassModeCovers = (toolName, toolInput) => {
   const arg = extractPolicyArg(toolName, toolInput);
@@ -8675,6 +8722,7 @@ var PATTERN_PREFIX_WILDCARD = /(?::\*|\*)?\)$/;
 var CONTINUES_A_COMMAND_WORD = /^[ :]/;
 var ruleNarrowsThePattern = (ruleTool, pattern) => {
   if (ruleTool === pattern) return false;
+  if (pattern === WILDCARD_TOOL_PATTERN) return true;
   if (!pattern.includes("(")) return ruleTool.includes("(");
   const prefix = pattern.replace(PATTERN_PREFIX_WILDCARD, "");
   return ruleTool.startsWith(prefix) && CONTINUES_A_COMMAND_WORD.test(ruleTool.slice(prefix.length));
@@ -8713,7 +8761,7 @@ var extraReadingsOf = (toolInput) => {
   const readings = [
     commentFree,
     ...spelledOut,
-    ...[command, commentFree, ...spelledOut].filter(isAReading).flatMap((text3) => scriptsPassedToAShell(text3)).map(readingWithoutCommentsOrAnsiEscapes)
+    ...[command, commentFree, ...spelledOut].filter(isAReading).flatMap(readingsOfScriptsPassedToAShell)
   ];
   return readings.filter(isAReading).map((reading) => ({ ...toolInput, command: reading }));
 };
@@ -9576,7 +9624,6 @@ export {
   isTokenCount,
   reportableSessionId,
   TOOL_NAME_MAX_LENGTH,
-  WILDCARD_TOOL_PATTERN,
   normalizeRepoRemote,
   localRepoKey,
   isSafeReadOnlyCommand,
@@ -9622,9 +9669,9 @@ export {
   isPermissionRequestOwnedByPreToolUse,
   CLAUDE_PRETOOLUSE_MATCHER,
   CLAUDE_MCP_PRETOOLUSE_MATCHER,
-  CLAUDE_REFUSALS_ONLY_TOOLS,
   CLAUDE_REFUSALS_ONLY_PRETOOLUSE_MATCHER,
-  claudeSubagentToolAliasOf,
+  isClaudeRefusalsOnlyTool,
+  standingDenyOfSubagentAlias,
   permissionsOffLineAppliesTo,
   permissionsOffAskReason,
   resolveGate,

package/dist/{chunk-J6ACLE2A.js → chunk-I2D23TBS.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-EUIDFLPM.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   npmExitedOnPermissionDenied
-} from "./chunk-ODXZPMKN.js";
+} from "./chunk-KQKHSJOM.js";
 import {
   writeJsonAtomic
 } from "./chunk-T5I4PKOQ.js";

package/dist/{chunk-YZORQXN7.js → chunk-IA3E675D.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   renderCommandHelp
-} from "./chunk-7VRL6XYM.js";
+} from "./chunk-5S32WI3B.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";

package/dist/{chunk-HSFTTGOB.js → chunk-JLUMELYR.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-ZRTUS6WD.js";
+} from "./chunk-EUIDFLPM.js";
 import {
   readJsonSafe
 } from "./chunk-T5I4PKOQ.js";
 import {
   isRecord
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-ODXZPMKN.js → chunk-KQKHSJOM.js}

@@ -399,9 +399,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-GUHXKJPO.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-EEPLQBLA.js");
-    const { autoUpdateLock } = await import("./paths-5XZPI4LD.js");
+    const { withUpgradeLock } = await import("./global-upgrade-SIAPPAFR.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-YT4O5QW6.js");
+    const { autoUpdateLock } = await import("./paths-346XNBFK.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;

package/dist/{chunk-BYP2R2PF.js → chunk-LIIIC27B.js}

@@ -7,7 +7,7 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-4DSJF5JD.js";
+} from "./chunk-5MITA7MU.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-YQUJQGJU.js → chunk-LRS26PXE.js}

@@ -1,19 +1,19 @@
 import {
   notificationAnswerStep
-} from "./chunk-AIABYHHZ.js";
+} from "./chunk-2FOCCDVV.js";
 import {
   canChangeApprovalSettings
-} from "./chunk-KESS6HAK.js";
+} from "./chunk-DK6R5IVR.js";
 import {
   matchMacAccountStep,
   retryAgentCommand
-} from "./chunk-EDNCFLR7.js";
+} from "./chunk-MKUFVNZL.js";
 import {
   EXIT
 } from "./chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-7VRL6XYM.js";
+} from "./chunk-5S32WI3B.js";
 
 // src/setup/closing.ts
 var ACTIVITY_URL = "pushary.com/dashboard/agent/activity";

package/dist/{chunk-SUI5JE6T.js → chunk-LS3CQ536.js}

@@ -9,7 +9,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-W744DTUT.js";
+} from "./chunk-HI5YJFKW.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;