pushary 1.9.129 → 1.9.132

package/dist/bin/pushary-display-hook.js

@@ -1258,7 +1258,7 @@ var init_claude_inbox = __esm({
 });
 
 // ../contracts/src/index.ts
-var SETUP_VERIFICATION_SENDER, DOCTOR_VERIFICATION_SENDER, SETUP_VERIFICATION_SENDER_THROUGH_0_95_5, ROUND_TRIP_SENDER_NAMES, HOOK_BUDGETS, HOOK_LOCATOR_BINARY, HOOK_BATCH_MAX_BYTES, SLASH, POLICY_PATH_KEYS, POLICY_COMMAND_KEYS, POLICY_ARG_KEYS, SAFE_SHELL_COMMANDS, SAFE_GIT_SUBCOMMANDS, GIT_READ_ONLY_BRANCH_ARGUMENTS, RIPGREP_PROGRAM, SORT_PROGRAM, UNIQ_PROGRAM, INSPECTED_ARGUMENT_COMMANDS, READ_ONLY_PROGRAMS, READ_ONLY_GIT_FIRST_ARGUMENTS, ARG_PREFIX_TARGET_TOOLS, INLINE_CODE_INTERPRETERS, SQL_WORDS_THAT_CAN_FOLLOW_A_COLUMN, SQL_WRITE_STATEMENT, SQL_CLIENT_FILE_COMMAND, AGENT_SETTINGS_FILE, HOME_DIRECTORY, FILE_THE_MACHINE_RUNS_LATER, CREDENTIAL_FILE_IN_THE_HOME_FOLDER, WRITES_EVERY_OPERAND, EDITS_IN_PLACE, PERMISSIONS_OFF_WRITES_EVERY_OPERAND, PERMISSIONS_OFF_EDITS_IN_PLACE, FOLDER_THAT_NEEDS_A_PERSON, GIT_SETTING_THAT_RUNS_A_PROGRAM, GIT_DESTINATION_SETTING, GIT_SETTING_THAT_CHANGES_WHERE_GIT_SENDS, GIT_ONE_COMMAND_SETTING_THAT_CHANGES_WHERE_GIT_SENDS, githubReadVerbs, GITHUB_RULESET_READS, GITHUB_CODESPACE_READS, GITHUB_EXTENSION_READS, GITHUB_ATTESTATION_READS, GITHUB_READ_COMMANDS, NO_SHORT_OPTIONS, HTTP_CLIENT_SYNTAX, SSH_OPTION_LETTERS_WITH_A_VALUE, REMOTE_STATUS_COMMAND, wrapperSyntax, ENVIRONMENT_ASSIGNMENTS, WRAPPER_SYNTAX, INTERPRETERS_THAT_TAKE_INLINE_CODE, WORDS_THAT_OPEN_A_COMMAND, SHELL_GROUPING_PREFIX, REDIRECTION_TARGET, INPUT_REDIRECTION, OUTPUT_REDIRECTION, ENVIRONMENT_SETUP_COMMANDS, SETS_UP_THE_ENVIRONMENT, SUBSTITUTION_AS_A_PROGRAM, NO_OPTIONS, runnerSyntax, UV_GLOBAL_OPTIONS_WITH_A_VALUE, UV_RUN_OPTIONS_WITH_A_VALUE, POETRY_OPTIONS_WITH_A_VALUE, OP_OPTIONS_WITH_A_VALUE, DOTENV_OPTIONS_WITH_A_VALUE, DOTENV_OPTIONS_WITH_AN_OPTIONAL_VALUE, SCRIPT_COMMAND_STRING_OPTIONS, SCRIPT_OPTIONS_WITH_A_VALUE, SCRIPT, PNPM_OPTIONS_WITH_A_VALUE, YARN_OPTIONS_WITH_A_VALUE, NPM_OPTIONS_WITH_A_VALUE, HATCH_OPTIONS_WITH_A_VALUE, PDM_OPTIONS_WITH_A_VALUE, DOCKER_OPTIONS_WITH_A_VALUE, KUBECTL_OPTIONS_WITH_A_VALUE, PIXI_OPTIONS_WITH_A_VALUE, CONDA_OPTIONS_WITH_A_VALUE, PIPX_OPTIONS_WITH_A_VALUE, VOLTA_OPTIONS_WITH_A_VALUE, DEVCONTAINER_OPTIONS_WITH_A_VALUE, FLOX_OPTIONS_WITH_A_VALUE, RUNNER_SYNTAX, MISE_OPTIONS_WITH_A_VALUE, endOfOptionsRunner, END_OF_OPTIONS_RUNNERS, COMMAND_STRING_OPERAND, LONGEST_COMBINING_MARK_RUN_ANY_LANGUAGE_WRITES, COMBINING_MARKS, COMBINING_MARK_RUN_LONGER_THAN_ANY_LANGUAGE_WRITES, SQL_NAME, SQL_USER, SQL_ALIAS, SQL_STATEMENT_THAT_LEADS_A_SCRIPT, STATEMENTS_THAT_CHANGE, API_KEY_PREFIX_SHAPE, API_KEY_PREFIX_PATTERN, API_KEY_PATTERN, AUTHORIZATION_CANONICAL_VERSION, AUTHORIZATION_CANONICAL_FIXTURE, AUTHORIZATION_PERMIT_TTL_SECONDS, APPROVE_ANSWER, DENY_ANSWER, APPROVE_RESPONSE_WORDS, DENY_RESPONSE_WORDS, APPROVE_RESPONSES, DENY_RESPONSES, POLICY_CAPABILITIES, CAPABILITY_PATTERNS, DECISION_EPISODE_SCHEMA_VERSION, DECISION_FEATURE_EXTRACTOR, EPISODE_CAPABILITIES, READ_TOOL_NAMES, EDIT_TOOL_NAMES, CODEX_COORDINATION_TOOLS, CODEX_COORDINATION_TOOL_NAMES, AGENT_TASK_CONTROL_TOOLS, AGENT_TASK_CONTROL_TOOL_NAMES, AGENT_QUESTION_TOOL, EXIT_PLAN_MODE_TOOL, ASKED_IN_EVERY_MODE_TOOLS, ASKED_IN_EVERY_MODE, PRETOOLUSE_GATED_TOOLS, PRETOOLUSE_HANDLED_TOOLS, CLAUDE_PRETOOLUSE_MATCHER, CLAUDE_MCP_PRETOOLUSE_MATCHER, CLAUDE_REFUSALS_ONLY_TOOLS, CLAUDE_REFUSALS_ONLY_PRETOOLUSE_MATCHER, LONGEST_COMMAND_READ_FOR_A_PUSH, UNANSWERED_ASKS_BEFORE_PAUSE, SESSION_PAUSED_REASON, UNHEARD_PUSH_WINDOW_DAYS, DAY_MS, UNHEARD_PUSH_WINDOW_MS;
+var SETUP_VERIFICATION_SENDER, DOCTOR_VERIFICATION_SENDER, SETUP_VERIFICATION_SENDER_THROUGH_0_95_5, ROUND_TRIP_SENDER_NAMES, HOOK_BUDGETS, HOOK_LOCATOR_BINARY, HOOK_BATCH_MAX_BYTES, SLASH, POLICY_PATH_KEYS, POLICY_COMMAND_KEYS, POLICY_ARG_KEYS, SAFE_SHELL_COMMANDS, SAFE_GIT_SUBCOMMANDS, GIT_READ_ONLY_BRANCH_ARGUMENTS, RIPGREP_PROGRAM, SORT_PROGRAM, UNIQ_PROGRAM, INSPECTED_ARGUMENT_COMMANDS, READ_ONLY_PROGRAMS, READ_ONLY_GIT_FIRST_ARGUMENTS, ARG_PREFIX_TARGET_TOOLS, INLINE_CODE_INTERPRETERS, SQL_WORDS_THAT_CAN_FOLLOW_A_COLUMN, SQL_WRITE_STATEMENT, SQL_CLIENT_FILE_COMMAND, AGENT_SETTINGS_FILE, HOME_DIRECTORY, FILE_THE_MACHINE_RUNS_LATER, CREDENTIAL_FILE_IN_THE_HOME_FOLDER, WRITES_EVERY_OPERAND, EDITS_IN_PLACE, PERMISSIONS_OFF_WRITES_EVERY_OPERAND, PERMISSIONS_OFF_EDITS_IN_PLACE, FOLDER_THAT_NEEDS_A_PERSON, GIT_SETTING_THAT_RUNS_A_PROGRAM, GIT_DESTINATION_SETTING, GIT_SETTING_THAT_CHANGES_WHERE_GIT_SENDS, GIT_ONE_COMMAND_SETTING_THAT_CHANGES_WHERE_GIT_SENDS, githubReadVerbs, GITHUB_RULESET_READS, GITHUB_CODESPACE_READS, GITHUB_EXTENSION_READS, GITHUB_ATTESTATION_READS, GITHUB_READ_COMMANDS, NO_SHORT_OPTIONS, HTTP_CLIENT_SYNTAX, SSH_OPTION_LETTERS_WITH_A_VALUE, REMOTE_STATUS_COMMAND, wrapperSyntax, ENVIRONMENT_ASSIGNMENTS, WRAPPER_SYNTAX, INTERPRETERS_THAT_TAKE_INLINE_CODE, WORDS_THAT_OPEN_A_COMMAND, SHELL_GROUPING_PREFIX, REDIRECTION_TARGET, INPUT_REDIRECTION, OUTPUT_REDIRECTION, ENVIRONMENT_SETUP_COMMANDS, SETS_UP_THE_ENVIRONMENT, SUBSTITUTION_AS_A_PROGRAM, NO_OPTIONS, runnerSyntax, UV_GLOBAL_OPTIONS_WITH_A_VALUE, UV_RUN_OPTIONS_WITH_A_VALUE, POETRY_OPTIONS_WITH_A_VALUE, OP_OPTIONS_WITH_A_VALUE, DOTENV_OPTIONS_WITH_A_VALUE, DOTENV_OPTIONS_WITH_AN_OPTIONAL_VALUE, SCRIPT_COMMAND_STRING_OPTIONS, SCRIPT_OPTIONS_WITH_A_VALUE, SCRIPT, PNPM_OPTIONS_WITH_A_VALUE, YARN_OPTIONS_WITH_A_VALUE, NPM_OPTIONS_WITH_A_VALUE, HATCH_OPTIONS_WITH_A_VALUE, PDM_OPTIONS_WITH_A_VALUE, DOCKER_OPTIONS_WITH_A_VALUE, KUBECTL_OPTIONS_WITH_A_VALUE, PIXI_OPTIONS_WITH_A_VALUE, CONDA_OPTIONS_WITH_A_VALUE, PIPX_OPTIONS_WITH_A_VALUE, VOLTA_OPTIONS_WITH_A_VALUE, DEVCONTAINER_OPTIONS_WITH_A_VALUE, FLOX_OPTIONS_WITH_A_VALUE, RUNNER_SYNTAX, MISE_OPTIONS_WITH_A_VALUE, endOfOptionsRunner, END_OF_OPTIONS_RUNNERS, COMMAND_STRING_OPERAND, LONGEST_COMBINING_MARK_RUN_ANY_LANGUAGE_WRITES, COMBINING_MARKS, COMBINING_MARK_RUN_LONGER_THAN_ANY_LANGUAGE_WRITES, SQL_NAME, SQL_USER, SQL_ALIAS, SQL_STATEMENT_THAT_LEADS_A_SCRIPT, STATEMENTS_THAT_CHANGE, API_KEY_PREFIX_SHAPE, API_KEY_PREFIX_PATTERN, API_KEY_PATTERN, AUTHORIZATION_CANONICAL_VERSION, AUTHORIZATION_CANONICAL_FIXTURE, AUTHORIZATION_PERMIT_TTL_SECONDS, APPROVE_ANSWER, DENY_ANSWER, APPROVE_RESPONSE_WORDS, DENY_RESPONSE_WORDS, APPROVE_RESPONSES, DENY_RESPONSES, POLICY_CAPABILITIES, CAPABILITY_PATTERNS, DECISION_EPISODE_SCHEMA_VERSION, DECISION_FEATURE_EXTRACTOR, EPISODE_CAPABILITIES, READ_TOOL_NAMES, EDIT_TOOL_NAMES, CODEX_COORDINATION_TOOLS, CODEX_COORDINATION_TOOL_NAMES, AGENT_TASK_CONTROL_TOOLS, AGENT_TASK_CONTROL_TOOL_NAMES, PUSHARY_TOOL_PREFIX, AGENT_QUESTION_TOOL, EXIT_PLAN_MODE_TOOL, ASKED_IN_EVERY_MODE_TOOLS, ASKED_IN_EVERY_MODE, PRETOOLUSE_GATED_TOOLS, PRETOOLUSE_HANDLED_TOOLS, CLAUDE_PRETOOLUSE_MATCHER, CLAUDE_MCP_PRETOOLUSE_MATCHER, CLAUDE_REFUSALS_ONLY_TOOLS, CLAUDE_REFUSALS_ONLY_PRETOOLUSE_MATCHER, LONGEST_COMMAND_READ_FOR_A_PUSH, UNANSWERED_ASKS_BEFORE_PAUSE, SESSION_PAUSED_REASON, UNHEARD_PUSH_WINDOW_DAYS, DAY_MS, UNHEARD_PUSH_WINDOW_MS;
 var init_src = __esm({
   "../contracts/src/index.ts"() {
     "use strict";
@@ -2133,6 +2133,7 @@ p:12:small=n:1e-7`
     CODEX_COORDINATION_TOOL_NAMES = new Set(CODEX_COORDINATION_TOOLS);
     AGENT_TASK_CONTROL_TOOLS = [TASK_OUTPUT_TOOL, TASK_STOP_TOOL];
     AGENT_TASK_CONTROL_TOOL_NAMES = new Set(AGENT_TASK_CONTROL_TOOLS);
+    PUSHARY_TOOL_PREFIX = "mcp__pushary__";
     AGENT_QUESTION_TOOL = "AskUserQuestion";
     EXIT_PLAN_MODE_TOOL = "ExitPlanMode";
     ASKED_IN_EVERY_MODE_TOOLS = [AGENT_QUESTION_TOOL, EXIT_PLAN_MODE_TOOL];
@@ -2756,7 +2757,7 @@ var init_claude_events = __esm({
 
 // src/claude-config.ts
 import { isDeepStrictEqual } from "util";
-var HOOK_BINARIES;
+var PUSHARY_PERMISSION_RULE, HOOK_BINARIES;
 var init_claude_config = __esm({
   "src/claude-config.ts"() {
     "use strict";
@@ -2766,6 +2767,7 @@ var init_claude_config = __esm({
     init_hook_entries();
     init_claude_events();
     init_claude_tools();
+    PUSHARY_PERMISSION_RULE = `${PUSHARY_TOOL_PREFIX}*`;
     HOOK_BINARIES = /* @__PURE__ */ new Set([
       ...CLAUDE_HOOK_EVENTS.map((hook) => hook.binary),
       HOOK_LOCATOR_BINARY
@@ -6937,6 +6939,7 @@ import { createHash as createHash4 } from "crypto";
 // src/transcript-read-positions.ts
 import { lstatSync as lstatSync2, readFileSync as readFileSync7 } from "fs";
 init_fsx();
+var OWNER_ONLY_FILE_MODE = 384;
 var MAXIMUM_READ_POSITIONS_BYTES = 4 * 1024 * 1024;
 var transcriptReadPositionSchema = external_exports.object({
   identity: external_exports.string().nullable(),
@@ -6944,6 +6947,7 @@ var transcriptReadPositionSchema = external_exports.object({
   startedBeforeEpoch: external_exports.boolean()
 });
 var savedReadPositionsSchema = external_exports.object({ positions: external_exports.record(external_exports.string(), transcriptReadPositionSchema) });
+var ownedOnlyByThisUser = (info) => !process.getuid || info.uid === process.getuid() && (info.mode & 511) === OWNER_ONLY_FILE_MODE;
 
 // src/transcript-recipient-pin.ts
 init_fsx();
@@ -7052,7 +7056,7 @@ var readState = (sessionId, runtime) => {
   try {
     const path = fileFor(sessionId, runtime.directory);
     const info = lstatSync3(path);
-    if (!info.isFile() || info.nlink !== 1 || info.size > MAX_TAIL || (info.mode & 511) !== 384) return null;
+    if (!info.isFile() || info.nlink !== 1 || info.size > MAX_TAIL || !ownedOnlyByThisUser(info)) return null;
     const envelope = external_exports.object({ content: external_exports.string() }).parse(JSON.parse(readFileSync8(path, "utf8")));
     const plain = decryptRecord(envelope.content, runtime.sessionKey);
     if (!plain) return null;
@@ -7118,7 +7122,7 @@ var captureDisplayDraft = (input, runtime) => {
   };
   const target = fileFor(event.session_id, runtime.directory);
   const existing = lstatSync3(target, { throwIfNoEntry: false });
-  if (existing && (!existing.isFile() || existing.nlink !== 1 || (existing.mode & 511) !== 384)) return false;
+  if (existing && (!existing.isFile() || existing.nlink !== 1 || !ownedOnlyByThisUser(existing))) return false;
   writeJsonAtomicWithoutFsync(target, { content: encryptRecord(JSON.stringify(state), runtime.sessionKey) }, 384);
   return true;
 };
@@ -7546,6 +7550,7 @@ var GEMINI_HOOK_EVENTS = [
 
 // src/diagnostics/wiring.ts
 init_claude_events();
+init_claude_config();
 init_src();
 init_hook_command();
 var EXACT_HOOK_BINARY = /^pushary-[a-z-]*(hook|gate)$/;

package/dist/bin/pushary-doctor.js

@@ -4,7 +4,7 @@ import {
   readServiceExecPath,
   readSetupFailure,
   versionManagerOf
-} from "../chunk-OH67UPRF.js";
+} from "../chunk-QBJVECFY.js";
 import {
   describeWaitLadder
 } from "../chunk-CVWG2N3Y.js";
@@ -14,14 +14,14 @@ import {
   describeHermesProblems,
   describeHermesState,
   hermesRepairStep
-} from "../chunk-QZJ4NGSQ.js";
+} from "../chunk-RVGYXUOC.js";
 import {
   writeJsonError,
   writeStdoutFully
-} from "../chunk-Q7YNYPRY.js";
+} from "../chunk-VRUEKURE.js";
 import {
   fetchChannels
-} from "../chunk-JK3IYOOR.js";
+} from "../chunk-LBMCQWRX.js";
 import "../chunk-3EGEA4KH.js";
 import {
   describeAnswerTestPrompt,
@@ -31,21 +31,21 @@ import {
   reachVerdict,
   roundTripEvidence,
   verifyRoundTrip
-} from "../chunk-VSNVDY55.js";
+} from "../chunk-L5RSLIBQ.js";
 import {
   readMachineReadiness,
   readManagedControlEvidence
-} from "../chunk-S6G4C5LS.js";
+} from "../chunk-NJH6EGZN.js";
 import {
   assessCodexHookTrust,
   readCodexTrustForPusharyHooks
-} from "../chunk-EFTS75PF.js";
+} from "../chunk-RLQDVWZ4.js";
 import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   activeKeyVerdictOf,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "../chunk-E4LKBXGP.js";
+} from "../chunk-2YS7YEUW.js";
 import {
   agentProbes,
   detectAgent,
@@ -54,16 +54,16 @@ import {
   isPluginRegistered,
   shortenHome,
   vscodeSettingsTargets
-} from "../chunk-QFS7JNUD.js";
+} from "../chunk-MF5ZQX7C.js";
 import {
   CONNECTED_THROUGH_MAC_APP,
   keyWrittenByMacApp,
   readMacAppConnectionWhenKeyless
-} from "../chunk-6F6WN6C2.js";
+} from "../chunk-FTH4TSJ2.js";
 import {
   keyScopeOf,
   pushWindowChangeStep
-} from "../chunk-OUTWFS6J.js";
+} from "../chunk-GKZMBU6T.js";
 import {
   findHermesLauncher,
   hasUpdateFrom,
@@ -75,7 +75,7 @@ import {
   routesHermesQuestions,
   runsAnOlderPlugin,
   shippedHermesPlugin
-} from "../chunk-C74UXIKG.js";
+} from "../chunk-7MIT5C7B.js";
 import "../chunk-QCGNGEGE.js";
 import {
   FX_PROFILE_REFUSALS,
@@ -86,11 +86,11 @@ import {
   inspectClineInstallation,
   inspectFxInstallation,
   inspectFxPusharyHttpWiring
-} from "../chunk-WPER6NNY.js";
+} from "../chunk-IZJDVOJV.js";
 import {
   retryAgentCommand
-} from "../chunk-KWFZUAET.js";
-import "../chunk-UDH2BDU2.js";
+} from "../chunk-3TKTZOKG.js";
+import "../chunk-PFHRW3LR.js";
 import {
   OPENCODE_PLUGIN_PLACEHOLDER,
   cliOwnsAnyAgentHooks,
@@ -100,25 +100,25 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   openCodeWired
-} from "../chunk-TFHTZ6GE.js";
+} from "../chunk-NSBWFX7H.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-G4JW4QPR.js";
+} from "../chunk-4EQOCSJW.js";
 import {
   describeMissingControlPrerequisite,
   detectProviderLiveCapabilities,
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-IAAP4OCC.js";
-import "../chunk-AN6I3TX7.js";
+} from "../chunk-X23GSBOH.js";
+import "../chunk-UJZ5YHSR.js";
 import "../chunk-CYTPQDQY.js";
 import {
   readLedgerSummary
-} from "../chunk-TSZDE5NK.js";
+} from "../chunk-2U4MCUVZ.js";
 import {
   AUTO_UPDATE_DISABLE_ENV,
   autoUpdateOffReason,
@@ -126,7 +126,7 @@ import {
   describeAutoUpdateCheck,
   readAutoUpdateState,
   takeAutoUpdateAnnouncement
-} from "../chunk-CCZML6KO.js";
+} from "../chunk-UZUDMZES.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -134,7 +134,7 @@ import {
   hasCompatibleHooks,
   hasCompatibleMcpServer,
   missingCompatibleHookEvents
-} from "../chunk-7H2RWOO2.js";
+} from "../chunk-RZBV5KTF.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
@@ -143,7 +143,7 @@ import {
   readDaemonNeedsLogin,
   readDaemonStatus,
   readInstalledDaemonService
-} from "../chunk-FN3AKOE6.js";
+} from "../chunk-KBOANW7J.js";
 import {
   GEMINI_HOOK_BINARY,
   claudeOtherHolders,
@@ -163,37 +163,37 @@ import {
   holdsLong,
   missingGeminiHookEvents,
   pusharyHookExecutable
-} from "../chunk-VOFCKEIR.js";
-import "../chunk-XXCJY3KQ.js";
-import "../chunk-UZCD6OFJ.js";
-import "../chunk-O3HKUUXP.js";
-import "../chunk-RS4BEWEZ.js";
+} from "../chunk-237FYIVC.js";
+import "../chunk-MRHGK3Q3.js";
+import "../chunk-JYCAAQUW.js";
+import "../chunk-XHC3UNOK.js";
+import "../chunk-MJVDFNP2.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";
 import "../chunk-H6CL3T2S.js";
-import "../chunk-R4JOCIQM.js";
-import "../chunk-PKZJZWYN.js";
+import "../chunk-RGVQOOGD.js";
+import "../chunk-J4UNR655.js";
 import "../chunk-POFBE6ZY.js";
 import {
   callMcpTool,
   sendMcpRequest
-} from "../chunk-3SREEE2O.js";
-import "../chunk-44ZTLOVE.js";
+} from "../chunk-2KN53MPE.js";
+import "../chunk-42PVKPHM.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-OOCIVAMY.js";
-import "../chunk-VTT7U6TJ.js";
+} from "../chunk-LR3PIGRS.js";
+import "../chunk-V2T5ZDMP.js";
 import {
   getMachineId
-} from "../chunk-BNJ4H57M.js";
+} from "../chunk-DS7XMYUB.js";
 import {
   keyPrefix,
   readControlMode,
   readKeySource
-} from "../chunk-6X2O5QI7.js";
-import "../chunk-ODZBKNIA.js";
+} from "../chunk-CVBSETPW.js";
+import "../chunk-BKH4LQJC.js";
 import {
   CLINE_AUTO_APPROVE_STEP,
   CLINE_LABEL,
@@ -231,15 +231,15 @@ import {
   readCodexMcpAuth,
   resolveBridgeStub,
   vscodePluginDir
-} from "../chunk-WLRSM634.js";
+} from "../chunk-W4FJR57E.js";
 import {
   fetchLatestPublishedVersion,
   readGlobalCliInstall,
   resolvePathBinary
-} from "../chunk-SISRFK3I.js";
+} from "../chunk-A44MRVWG.js";
 import {
   getBaseUrl
-} from "../chunk-CFZRNQIQ.js";
+} from "../chunk-T6HX6OTY.js";
 import {
   UsageError
 } from "../chunk-YU2EUD7O.js";
@@ -251,7 +251,7 @@ import {
 } from "../chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-V4OLQBSN.js";
+} from "../chunk-SZYKS433.js";
 import {
   commandsPackage,
   getPackageVersion,
@@ -272,7 +272,7 @@ import {
   hookCompatibleProfile,
   isHookActivationReport,
   redactSecretsFromContent
-} from "../chunk-JP3S4FPO.js";
+} from "../chunk-M65LPNIO.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-doctor.ts

package/dist/bin/pushary-elicitation-hook.js

@@ -1,55 +1,55 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-NQSQC5OC.js";
-import "../chunk-HN63QQWB.js";
+} from "../chunk-BTDEBPPR.js";
+import "../chunk-EPPH5RMJ.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-3EXJMRSC.js";
-import "../chunk-IGCXQDYL.js";
-import "../chunk-GVSIVBVT.js";
+} from "../chunk-EA5EASYT.js";
+import "../chunk-U5AZKJ5O.js";
+import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-7H2RWOO2.js";
-import "../chunk-FN3AKOE6.js";
-import "../chunk-VOFCKEIR.js";
-import "../chunk-XXCJY3KQ.js";
-import "../chunk-UZCD6OFJ.js";
-import "../chunk-O3HKUUXP.js";
-import "../chunk-RS4BEWEZ.js";
+import "../chunk-RZBV5KTF.js";
+import "../chunk-KBOANW7J.js";
+import "../chunk-237FYIVC.js";
+import "../chunk-MRHGK3Q3.js";
+import "../chunk-JYCAAQUW.js";
+import "../chunk-XHC3UNOK.js";
+import "../chunk-MJVDFNP2.js";
 import "../chunk-YPY4YCIZ.js";
-import "../chunk-R5ZFWL4F.js";
+import "../chunk-KWICQAP7.js";
 import "../chunk-XMSDA5WA.js";
-import "../chunk-JWDGPKKL.js";
+import "../chunk-25UU4Q4V.js";
 import "../chunk-H6CL3T2S.js";
-import "../chunk-R4JOCIQM.js";
+import "../chunk-RGVQOOGD.js";
 import {
   askUser,
   isDecisionStopped,
   isQuestionLimitRefusal,
   waitForQuestion
-} from "../chunk-PKZJZWYN.js";
+} from "../chunk-J4UNR655.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-3SREEE2O.js";
-import "../chunk-44ZTLOVE.js";
-import "../chunk-OOCIVAMY.js";
-import "../chunk-VTT7U6TJ.js";
+} from "../chunk-2KN53MPE.js";
+import "../chunk-42PVKPHM.js";
+import "../chunk-LR3PIGRS.js";
+import "../chunk-V2T5ZDMP.js";
 import {
   getMachineId
-} from "../chunk-BNJ4H57M.js";
-import "../chunk-6X2O5QI7.js";
-import "../chunk-ODZBKNIA.js";
-import "../chunk-WLRSM634.js";
-import "../chunk-SISRFK3I.js";
+} from "../chunk-DS7XMYUB.js";
+import "../chunk-CVBSETPW.js";
+import "../chunk-BKH4LQJC.js";
+import "../chunk-W4FJR57E.js";
+import "../chunk-A44MRVWG.js";
 import {
   getApiKey
-} from "../chunk-CFZRNQIQ.js";
+} from "../chunk-T6HX6OTY.js";
 import "../chunk-YU2EUD7O.js";
 import "../chunk-TODDEIYG.js";
 import "../chunk-BG4HHB7E.js";
-import "../chunk-V4OLQBSN.js";
+import "../chunk-SZYKS433.js";
 import "../chunk-WIIMW5YO.js";
 import {
   ELICITATION_ANSWERABLE_MODE,
@@ -61,7 +61,7 @@ import {
   planElicitationAsk,
   readElicitationFields,
   renderElicitationOutput
-} from "../chunk-JP3S4FPO.js";
+} from "../chunk-M65LPNIO.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-elicitation-hook.ts

package/dist/bin/pushary-gemini-bridge.js

@@ -5,11 +5,11 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-NXUZBYBA.js";
+} from "../chunk-XMZVQF2J.js";
 import {
   resolveProviderBinary
-} from "../chunk-IAAP4OCC.js";
-import "../chunk-AN6I3TX7.js";
+} from "../chunk-X23GSBOH.js";
+import "../chunk-UJZ5YHSR.js";
 import {
   CommandReceipts,
   controllerCommandSchema
@@ -20,32 +20,32 @@ import {
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-PBK24IVU.js";
+} from "../chunk-ZXJTTV7I.js";
 import "../chunk-CYTPQDQY.js";
-import "../chunk-R5ZFWL4F.js";
+import "../chunk-KWICQAP7.js";
 import "../chunk-XMSDA5WA.js";
 import {
   transcriptsEnabled
-} from "../chunk-JWDGPKKL.js";
+} from "../chunk-25UU4Q4V.js";
 import {
   spawnClaude
 } from "../chunk-H6CL3T2S.js";
-import "../chunk-44ZTLOVE.js";
+import "../chunk-42PVKPHM.js";
 import {
   getMachineId
-} from "../chunk-BNJ4H57M.js";
-import "../chunk-6X2O5QI7.js";
-import "../chunk-ODZBKNIA.js";
-import "../chunk-WLRSM634.js";
-import "../chunk-SISRFK3I.js";
+} from "../chunk-DS7XMYUB.js";
+import "../chunk-CVBSETPW.js";
+import "../chunk-BKH4LQJC.js";
+import "../chunk-W4FJR57E.js";
+import "../chunk-A44MRVWG.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-CFZRNQIQ.js";
+} from "../chunk-T6HX6OTY.js";
 import "../chunk-TODDEIYG.js";
-import "../chunk-V4OLQBSN.js";
+import "../chunk-SZYKS433.js";
 import "../chunk-WIIMW5YO.js";
-import "../chunk-JP3S4FPO.js";
+import "../chunk-M65LPNIO.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-gemini-bridge.ts

package/dist/bin/pushary-gemini-hook.js

@@ -3,31 +3,31 @@ import {
   parseGeminiHookInput,
   pushQuestionAndWait,
   scopeQuestionOf
-} from "../chunk-FUDV2SJ6.js";
+} from "../chunk-C4UH6YPD.js";
 import {
   reportMachineDenial
-} from "../chunk-Y57QT5SH.js";
+} from "../chunk-HW63OEVM.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-TSZDE5NK.js";
+} from "../chunk-2U4MCUVZ.js";
 import {
   triggerAutoUpdate
-} from "../chunk-CCZML6KO.js";
+} from "../chunk-UZUDMZES.js";
 import {
   readHookInput
-} from "../chunk-NQSQC5OC.js";
-import "../chunk-HN63QQWB.js";
+} from "../chunk-BTDEBPPR.js";
+import "../chunk-EPPH5RMJ.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-3EXJMRSC.js";
-import "../chunk-IGCXQDYL.js";
-import "../chunk-GVSIVBVT.js";
+} from "../chunk-EA5EASYT.js";
+import "../chunk-U5AZKJ5O.js";
+import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-7H2RWOO2.js";
-import "../chunk-FN3AKOE6.js";
-import "../chunk-VOFCKEIR.js";
+import "../chunk-RZBV5KTF.js";
+import "../chunk-KBOANW7J.js";
+import "../chunk-237FYIVC.js";
 import {
   DEFAULT_SESSION,
   fetchModeState,
@@ -40,53 +40,53 @@ import {
   readLastPrompt,
   readLastUserPrompt,
   reportEvent
-} from "../chunk-XXCJY3KQ.js";
+} from "../chunk-MRHGK3Q3.js";
 import {
   deriveActionBody,
   deriveBlocker,
   deriveToolTarget,
   describeToolCall,
   scopePathFor
-} from "../chunk-UZCD6OFJ.js";
-import "../chunk-O3HKUUXP.js";
-import "../chunk-RS4BEWEZ.js";
+} from "../chunk-JYCAAQUW.js";
+import "../chunk-XHC3UNOK.js";
+import "../chunk-MJVDFNP2.js";
 import "../chunk-YPY4YCIZ.js";
-import "../chunk-R5ZFWL4F.js";
+import "../chunk-KWICQAP7.js";
 import "../chunk-XMSDA5WA.js";
-import "../chunk-JWDGPKKL.js";
+import "../chunk-25UU4Q4V.js";
 import "../chunk-H6CL3T2S.js";
 import {
   repoKeyFor
-} from "../chunk-R4JOCIQM.js";
+} from "../chunk-RGVQOOGD.js";
 import {
   exitAfterClientReports,
   isDecisionStopped,
   isQuestionLimitRefusal,
   sendNotification
-} from "../chunk-PKZJZWYN.js";
+} from "../chunk-J4UNR655.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-3SREEE2O.js";
-import "../chunk-44ZTLOVE.js";
-import "../chunk-OOCIVAMY.js";
-import "../chunk-VTT7U6TJ.js";
+} from "../chunk-2KN53MPE.js";
+import "../chunk-42PVKPHM.js";
+import "../chunk-LR3PIGRS.js";
+import "../chunk-V2T5ZDMP.js";
 import {
   getMachineId
-} from "../chunk-BNJ4H57M.js";
-import "../chunk-6X2O5QI7.js";
-import "../chunk-ODZBKNIA.js";
-import "../chunk-WLRSM634.js";
-import "../chunk-SISRFK3I.js";
+} from "../chunk-DS7XMYUB.js";
+import "../chunk-CVBSETPW.js";
+import "../chunk-BKH4LQJC.js";
+import "../chunk-W4FJR57E.js";
+import "../chunk-A44MRVWG.js";
 import {
   getApiKey
-} from "../chunk-CFZRNQIQ.js";
+} from "../chunk-T6HX6OTY.js";
 import "../chunk-YU2EUD7O.js";
 import "../chunk-TODDEIYG.js";
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
-import "../chunk-V4OLQBSN.js";
+import "../chunk-SZYKS433.js";
 import "../chunk-WIIMW5YO.js";
 import {
   DECISION_STOP_REASON,
@@ -100,7 +100,7 @@ import {
   refusesWhenUnanswered,
   resolveGate,
   unapprovedScopeReason
-} from "../chunk-JP3S4FPO.js";
+} from "../chunk-M65LPNIO.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-gemini-hook.ts