pushary 1.9.135 → 1.9.136

package/dist/{chunk-3KPPXZCO.js → chunk-O5T53LZ5.js}

@@ -1,33 +1,38 @@
+import {
+  forgetPhoneApproval,
+  rememberPhoneApproval,
+  takePhoneApproval
+} from "./chunk-UP5QXEUU.js";
 import {
   claudeSettingsLocationFor,
   readClaudePermissionRules
-} from "./chunk-OUMH4UTT.js";
+} from "./chunk-G73ACPR2.js";
 import {
   askAgentQuestions,
   defersToNativeMode,
   outcomeOfFailedAsk,
   storedWaitDeadline
-} from "./chunk-7JXYR4TC.js";
+} from "./chunk-2R4OVJHS.js";
 import {
   reportMachineDenial
-} from "./chunk-7DWERNHQ.js";
+} from "./chunk-HY4ATVCT.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-7KWOR2T2.js";
+} from "./chunk-YQQGIDBC.js";
 import {
   isAdmitted,
   readAdmissionRules
-} from "./chunk-7GEMAKQL.js";
+} from "./chunk-YURIU333.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-64QLX4ZC.js";
+} from "./chunk-H2RE3IPK.js";
 import {
   activeHookSource,
   activeIdentity,
   namedSource
-} from "./chunk-7ASHS5VR.js";
+} from "./chunk-43DT3QWZ.js";
 import {
   DEFAULT_SESSION,
   approvalAwaitingRetry,
@@ -48,7 +53,7 @@ import {
   settleQuestionsForToolUse,
   sweepFilesOlderThan,
   userScope
-} from "./chunk-RGRPDJG3.js";
+} from "./chunk-D7AAAD6W.js";
 import {
   UNNAMED_ACTION,
   deriveAction,
@@ -59,12 +64,12 @@ import {
   patchDeletesFiles,
   permissionDeniedAction,
   scopePathFor
-} from "./chunk-UXPRMNH2.js";
+} from "./chunk-A2YJ2FBR.js";
 import {
   branchFor,
   repoKeyFor,
   repositoryScopeFor
-} from "./chunk-DMK3U7GG.js";
+} from "./chunk-IRIXOH4U.js";
 import {
   askUser,
   cancelQuestion,
@@ -81,20 +86,20 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-XRO6NRBO.js";
+} from "./chunk-L2GADKFL.js";
 import {
   getMachineId
-} from "./chunk-RLNJNRYP.js";
+} from "./chunk-WNT4JHK3.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-FP6ZVMF2.js";
+} from "./chunk-IKBTG3OT.js";
 import {
   writeFileAtomic
 } from "./chunk-TODDEIYG.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BGXXWLS5.js";
+} from "./chunk-MQMVJDII.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -163,7 +168,7 @@ import {
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason,
   unapprovedScopeReason
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/terminal-answer-watch.ts
 import { closeSync, openSync, readSync, statSync } from "fs";
@@ -448,7 +453,9 @@ var ACTIVE_AGENT = activeIdentity(process.argv);
 var ACTIVE_SOURCE = activeHookSource(process.argv);
 var HANDED_DOWN_BY_THE_MAC_BRIDGE = namedSource(process.argv) !== void 0;
 var CLAUDE_SESSION_ATTENDED_ENV = "CLAUDE_CODE_SESSION_ATTENDED";
-var PUSHARY_IS_SOLE_GATE = ACTIVE_SOURCE !== null && hookCompatibleProfileBySource(ACTIVE_SOURCE)?.soleGate != null;
+var ACTIVE_PROFILE = ACTIVE_SOURCE === null ? void 0 : hookCompatibleProfileBySource(ACTIVE_SOURCE);
+var PUSHARY_IS_SOLE_GATE = ACTIVE_PROFILE?.soleGate != null;
+var PHONE_APPROVAL_SOURCE = ACTIVE_PROFILE?.promptFollowsPreToolUseAllow ? ACTIVE_PROFILE.source : null;
 var agentNameIn = (projectName) => `${ACTIVE_AGENT.label} - ${projectName}`;
 var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, updatedInput);
 var undecidedCall = (reason) => PUSHARY_IS_SOLE_GATE ? deny(reason) : void 0;
@@ -554,7 +561,7 @@ var emitDecisionEpisode = (apiKey, input, toolPolicy, machineId, toolTarget, dec
     machineId
   });
 };
-var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingConsent = false, scopeReason, scopePath, terminalLive, askReason, matchedRoute) => {
+var dispatchModeDecision = async (apiKey, input, toolPolicy, machineId, trainingConsent = false, scopeReason, scopePath, terminalLive, askReason, matchedRoute) => {
   const description = describeToolCall(input.tool_name, input.tool_input, "hook");
   const projectName = basename(input.cwd ?? process.cwd());
   const sessionId = input.session_id;
@@ -622,8 +629,10 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
   if (trainingConsent && signals.humanDecision) {
     emitDecisionEpisode(apiKey, input, toolPolicy, machineId, toolTarget, decision, result);
   }
-  return result;
+  return { result, humanDecision: signals.humanDecision === true };
 };
+var dispatchModeHandler = async (...args) => (await dispatchModeDecision(...args)).result;
+var isPhoneApproval = (decided) => decided.humanDecision && decided.result?.hookSpecificOutput.permissionDecision === "allow";
 var CURSOR_SCOPE_TIMEOUT_ACTION = "escalate";
 var cursorScopeWaitSeconds = ({ timeoutSeconds, timeoutAction }) => Math.min(effectiveWaitSeconds(timeoutAction, timeoutSeconds, "cursor"), hookMaxWaitSeconds("cursor"));
 var hasItsOwnApprovalPrompt = (source) => source === null || hasNativeApprovalPrompt(source, "PreToolUse");
@@ -865,6 +874,7 @@ var standingRefusalOf = async (input) => {
   }
 };
 var handlePreToolUse = async (input, canonical) => {
+  if (PHONE_APPROVAL_SOURCE) forgetPhoneApproval(PHONE_APPROVAL_SOURCE, input);
   if (isPusharyOwnTool(input.tool_name)) return void 0;
   if (isRefusalsOnlyCallInClaudeCode(input) && !mcpCallWaitsForSomeoneElse(input)) {
     return isPusharyConnectorTool(input.tool_name) ? void 0 : standingRefusalOf(input);
@@ -917,13 +927,12 @@ var handlePreToolUse = async (input, canonical) => {
       // opinion, so Claude Code's own flow runs as if the hook were absent.
       case "defer":
         return undecidedCall(SOLE_GATE_UNDECIDED_REASON);
-      default:
+      default: {
         if (preToolUseHandsOff(input, gateInput, verdict)) return ask(TERMINAL_AND_PHONE_REASON);
-        return rememberHandbackToThePrompt(
-          input,
-          heldForMcpRoute,
-          await dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, void 0, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput))
-        );
+        const decided = await dispatchModeDecision(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, void 0, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput));
+        if (PHONE_APPROVAL_SOURCE && isPhoneApproval(decided)) rememberPhoneApproval(PHONE_APPROVAL_SOURCE, input);
+        return rememberHandbackToThePrompt(input, heldForMcpRoute, decided.result);
+      }
     }
   } catch (error) {
     await reportHookFailure("pre_tool_use_failed", error);
@@ -940,6 +949,7 @@ var toPermissionRequestOutput = (hookOutput) => {
   if (d.permissionDecision === "deny") return permReqDeny(d.permissionDecisionReason);
   return void 0;
 };
+var answerOfTheReplay = (replayed) => replayed.humanDecision ? toPermissionRequestOutput(replayed.result) : void 0;
 var handlePermissionRequest = async (input, canonical, holdBudgetSeconds) => {
   const claudeRules = claudePermissionRulesFor(input);
   if (canonical === void 0 && !claudeRulesMayCover(input, claudeRules) && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode) && !terminalStaysLiveForTheCall(terminalLiveFactsOf(input))) return void 0;
@@ -967,12 +977,14 @@ var handlePermissionRequest = async (input, canonical, holdBudgetSeconds) => {
     if (isMcpCallInClaudeCode(input) && claimMcpHoldHandback(blockedActionFingerprintFor(input))) return void 0;
     if (agentQuestionStrategy(ACTIVE_SOURCE, "PermissionRequest", input.tool_name) === AGENT_QUESTION_STRATEGY.native) return void 0;
     if (verdict.kind === "gate" && verdict.scopeReason && (canonical?.toolInputs.length ?? 0) > 1) return permReqDeny(SCOPE_BATCH_REASON);
+    const approvedCall = PHONE_APPROVAL_SOURCE ? takePhoneApproval(PHONE_APPROVAL_SOURCE, input) : void 0;
+    const preToolUseAllowLeftThePrompt = PHONE_APPROVAL_SOURCE !== null && (verdict.kind === "allow" || approvedCall !== void 0);
     const handedOff = preToolUseHandsOff(input, gateInput, verdict);
     const terminalLive = terminalStaysLiveForTheCall(terminalLiveFactsOf(input));
     const scopeQuestion = verdict.kind === "gate" && Boolean(verdict.scopeReason);
     const preToolUseRanForTheCall = PRETOOLUSE_HANDLED_TOOLS.has(input.tool_name) && isAdmitted(readAdmissionRules(), "claude", "PreToolUse");
     const preToolUseAskedTheScopeQuestion = scopeQuestion && terminalLive && preToolUseRanForTheCall;
-    const preToolUseOwnsTheCall = !scopeQuestion && !claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudeRules) && (isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode) || preToolUseRanForTheCall && approvalRouteOutranksAutoMode(gateInput, verdict, input.permission_mode));
+    const preToolUseOwnsTheCall = !scopeQuestion && !preToolUseAllowLeftThePrompt && !claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudeRules) && (isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode) || preToolUseRanForTheCall && approvalRouteOutranksAutoMode(gateInput, verdict, input.permission_mode));
     if (!handedOff && (preToolUseAskedTheScopeQuestion || preToolUseOwnsTheCall)) return void 0;
     const terminalLiveDispatch = handedOff ? { holdBudgetSeconds } : void 0;
     switch (verdict.kind) {
@@ -982,6 +994,11 @@ var handlePermissionRequest = async (input, canonical, holdBudgetSeconds) => {
       case "defer":
         return void 0;
       default:
+        if (approvedCall) {
+          return answerOfTheReplay(
+            await dispatchModeDecision(apiKey, approvedCall, verdict.policy, getMachineId(), false, verdict.scopeReason, verdict.scopePath, terminalLiveDispatch, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput))
+          );
+        }
         return toPermissionRequestOutput(
           await dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, terminalLiveDispatch, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput))
         );

package/dist/{chunk-6UARD3WA.js → chunk-PHA6AFOR.js}

@@ -1,9 +1,9 @@
 import {
   readExistingMachineId
-} from "./chunk-RLNJNRYP.js";
+} from "./chunk-WNT4JHK3.js";
 import {
   getBaseUrl
-} from "./chunk-FP6ZVMF2.js";
+} from "./chunk-IKBTG3OT.js";
 import {
   NetworkError
 } from "./chunk-YU2EUD7O.js";
@@ -13,7 +13,7 @@ import {
 import {
   clientContextHeaders,
   redactSecretsFromContent
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-LTY5DSWT.js → chunk-PNVTPEO5.js}

@@ -1,9 +1,9 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-IABPEGAA.js";
+} from "./chunk-LNF36PTF.js";
 import {
   configFilePath
-} from "./chunk-FP6ZVMF2.js";
+} from "./chunk-IKBTG3OT.js";
 import {
   backupFile,
   readJsonSafe,
@@ -14,7 +14,7 @@ import {
   API_KEY_PREFIX_PATTERN,
   isRecord,
   isValidApiKey
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-G3YIGTFS.js → chunk-POV2TBFA.js}

@@ -1,13 +1,13 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-VCMJLNEP.js";
+} from "./chunk-6SWFS4GU.js";
 import {
   hermesReceiptPaths,
   hermesSetupPredatesThePluginFolder,
   installHermesPlugin,
   refreshHermesPluginFiles,
   shippedHermesPlugin
-} from "./chunk-MGTMXF3T.js";
+} from "./chunk-A7R43KOX.js";
 import {
   fxIgnoresInstructionsFile,
   fxInstructionsBody,
@@ -16,7 +16,7 @@ import {
   macAppFxBridge,
   refreshClineKey,
   switchFxHttpEntryToBridge
-} from "./chunk-WPPTHRBO.js";
+} from "./chunk-2XDVEBHI.js";
 import {
   OPENCODE_HOOK_BINARY,
   agentHookOwner,
@@ -28,16 +28,16 @@ import {
   openCodePluginDir,
   openCodeWired,
   withOpenCodeAskRules
-} from "./chunk-CGROOSWT.js";
+} from "./chunk-VBWJ756P.js";
 import {
   detectClaudeVersion
-} from "./chunk-SULQKUPJ.js";
+} from "./chunk-EJHD44ZN.js";
 import {
   addCompatibleHooks,
   compatibleConfigFile,
   compatibleInstructionsFile,
   hasCompatibleHooks
-} from "./chunk-7ASHS5VR.js";
+} from "./chunk-43DT3QWZ.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
@@ -49,10 +49,10 @@ import {
   geminiWired,
   hasGeminiHooks,
   planHooks
-} from "./chunk-ORZ7H3AQ.js";
+} from "./chunk-TLK5YLIE.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-LTY5DSWT.js";
+} from "./chunk-PNVTPEO5.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -99,13 +99,13 @@ import {
   renderAgentInstructions,
   supportedClaudeEvents,
   vscodePluginMcp
-} from "./chunk-ZJKWDM3S.js";
+} from "./chunk-R7KC57PC.js";
 import {
   formatVersion,
   hookCommandsUseBareNames,
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "./chunk-ACI4PZ5N.js";
+} from "./chunk-GS5FH3C2.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -115,7 +115,7 @@ import {
   HOOK_COMPATIBLE_PROFILES,
   isCompatibleAgentType,
   isRecord
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-SFN72Q7W.js → chunk-Q2VV77IY.js}

@@ -1,9 +1,9 @@
 import {
   pusharyFetch
-} from "./chunk-6UARD3WA.js";
+} from "./chunk-PHA6AFOR.js";
 import {
   getBaseUrl
-} from "./chunk-FP6ZVMF2.js";
+} from "./chunk-IKBTG3OT.js";
 import {
   NetworkError
 } from "./chunk-YU2EUD7O.js";
@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-GRCX2FGD.js → chunk-QXATIKHQ.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-6QZGKKQS.js → chunk-R7CQF2P3.js}

@@ -4,7 +4,7 @@ import {
 import {
   RETRY_ACK,
   refusedReceiptMessage
-} from "./chunk-XB75IJ3G.js";
+} from "./chunk-Y47BMZUR.js";
 
 // src/command-receipts.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-ZJKWDM3S.js → chunk-R7KC57PC.js}

@@ -3,7 +3,7 @@ import {
   formatVersion,
   quoteIfNeeded,
   shellDoubleQuoted
-} from "./chunk-ACI4PZ5N.js";
+} from "./chunk-GS5FH3C2.js";
 import {
   writeFileAtomic
 } from "./chunk-TODDEIYG.js";
@@ -20,7 +20,7 @@ import {
   PRETOOLUSE_GATED_TOOLS,
   PUSHARY_TOOL_PREFIX,
   withHookHoldBudget
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/setup/paths.ts
 import { createHash as createHash2 } from "crypto";

package/dist/{chunk-UCGWTMQD.js → chunk-RPFSVNH6.js}

@@ -531,8 +531,8 @@ var loadedOnce = (load) => {
 };
 
 // src/codex-desktop-proxy.ts
-var loadThePhone = () => import("./api-WEDLFKUE.js");
-var loadTheCardRouting = () => import("./codex-card-routing-ZMMS4RIR.js");
+var loadThePhone = () => import("./api-5H25QRNM.js");
+var loadTheCardRouting = () => import("./codex-card-routing-LQJEJNTS.js");
 var theFirstCardLoadsAgain = () => {
 };
 var ASKS_WITHOUT_ROUTING = {};
@@ -1085,7 +1085,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-C6DXLVAM.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-Z7TMF2OR.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");

package/dist/{chunk-VXYGYCNR.js → chunk-RRUP72V6.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   redactSecretsFromContent
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/cli/json.ts
 var writeStdoutFully = (text) => new Promise((resolve, reject) => {

package/dist/{chunk-ORZ7H3AQ.js → chunk-TLK5YLIE.js}

@@ -1,9 +1,9 @@
 import {
   AGENT_CHOICES
-} from "./chunk-WVOMK2HW.js";
+} from "./chunk-5XDFQ6E3.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-IOUCIJ56.js";
+} from "./chunk-LAWI6NQK.js";
 import {
   CLAUDE_HOOK_EVENTS,
   CODEX_HOOK_EVENTS,
@@ -16,13 +16,13 @@ import {
   isBridgeLocator,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-ZJKWDM3S.js";
+} from "./chunk-R7KC57PC.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-NBMK6T6R.js → chunk-U3OLXV5Z.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-LTY5DSWT.js";
+} from "./chunk-PNVTPEO5.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BGXXWLS5.js";
+} from "./chunk-MQMVJDII.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/chunk-UP5QXEUU.js

@@ -0,0 +1,31 @@
+import {
+  callDecisionStore,
+  identifyingToolInput
+} from "./chunk-D7AAAD6W.js";
+import {
+  canonicalJson
+} from "./chunk-R7KC57PC.js";
+
+// src/phone-approval.ts
+import { createHash } from "crypto";
+var PHONE_APPROVAL_TTL_MS = 60 * 60 * 1e3;
+var promptedCallKey = (source, call) => {
+  if (!call.session_id || !call.tool_name) return null;
+  const material = canonicalJson([source, call.session_id, call.cwd ?? "", call.tool_name, identifyingToolInput(call.tool_input)]);
+  return createHash("sha256").update(material, "utf-8").digest("hex").slice(0, 32);
+};
+var phoneApprovals = callDecisionStore("phone-approval", PHONE_APPROVAL_TTL_MS);
+var forgetPhoneApproval = (source, call) => phoneApprovals.forget(promptedCallKey(source, call));
+var rememberPhoneApproval = (source, call) => {
+  if (call.tool_use_id) phoneApprovals.record(promptedCallKey(source, call), { kind: "approved", toolUseId: call.tool_use_id });
+};
+var takePhoneApproval = (source, call) => {
+  const recorded = phoneApprovals.consume(promptedCallKey(source, call));
+  return recorded?.kind === "approved" ? { ...call, tool_use_id: recorded.toolUseId } : void 0;
+};
+
+export {
+  forgetPhoneApproval,
+  rememberPhoneApproval,
+  takePhoneApproval
+};

package/dist/{chunk-X3NYMHLG.js → chunk-V7ZY7P2X.js}

@@ -1,19 +1,19 @@
 import {
   APPROVAL_RULES_PATH,
   canChangeApprovalSettings
-} from "./chunk-VND6LN6X.js";
+} from "./chunk-3QBI5C6P.js";
 import {
   callMcpTool
-} from "./chunk-ZNST34QH.js";
+} from "./chunk-WXUEOHYY.js";
 import {
   absoluteUrl
-} from "./chunk-SFN72Q7W.js";
+} from "./chunk-Q2VV77IY.js";
 import {
   getBaseUrl
-} from "./chunk-FP6ZVMF2.js";
+} from "./chunk-IKBTG3OT.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BGXXWLS5.js";
+} from "./chunk-MQMVJDII.js";
 import {
   AGENT_STOP_DEFAULT_SECONDS,
   APPROVAL_MODE_META,
@@ -21,7 +21,7 @@ import {
   classifyConfirmResponse,
   isAnswerSource,
   roundTripAsk
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-CGROOSWT.js → chunk-VBWJ756P.js}

@@ -1,13 +1,13 @@
 import {
   compatibleConfigFile
-} from "./chunk-7ASHS5VR.js";
+} from "./chunk-43DT3QWZ.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands
-} from "./chunk-ORZ7H3AQ.js";
+} from "./chunk-TLK5YLIE.js";
 import {
   AGENT_CHOICES
-} from "./chunk-WVOMK2HW.js";
+} from "./chunk-5XDFQ6E3.js";
 import {
   bridgeStub,
   claudeSettings,
@@ -19,7 +19,7 @@ import {
   resolveBridgeStub,
   vscodePluginDir,
   windowsNodeLauncherFor
-} from "./chunk-ZJKWDM3S.js";
+} from "./chunk-R7KC57PC.js";
 import {
   readJsonSafe
 } from "./chunk-TODDEIYG.js";
@@ -29,7 +29,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-OEIU6BNH.js → chunk-VO77WHK4.js}

@@ -3,10 +3,10 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-JDAX2HVS.js";
+} from "./chunk-62GD26OE.js";
 import {
   phoneStartIsRequired
-} from "./chunk-6RSAOA2P.js";
+} from "./chunk-DBIPNY7J.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -18,25 +18,25 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-UDSJKRRI.js";
+} from "./chunk-ICCM3DLT.js";
 import {
   autoUpdateLock,
   autoUpdateLog,
   autoUpdateState
-} from "./chunk-ZJKWDM3S.js";
+} from "./chunk-R7KC57PC.js";
 import {
   execNpm,
   fetchLatestPublishedVersion,
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-ACI4PZ5N.js";
+} from "./chunk-GS5FH3C2.js";
 import {
   EXIT
 } from "./chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BGXXWLS5.js";
+} from "./chunk-MQMVJDII.js";
 import {
   commandsPackage,
   globalUpgradeEntry,

package/dist/{chunk-NWNUS2ET.js → chunk-VV7WRIQT.js}

@@ -1,21 +1,21 @@
 import {
   UNNAMED_ACTION
-} from "./chunk-UXPRMNH2.js";
+} from "./chunk-A2YJ2FBR.js";
 import {
   askUser,
   isAwayPaused,
   isLocalQuestionHandoff,
   unavailableQuestionUnlessRefused,
   waitForQuestion
-} from "./chunk-XRO6NRBO.js";
+} from "./chunk-L2GADKFL.js";
 import {
   getMachineId
-} from "./chunk-RLNJNRYP.js";
+} from "./chunk-WNT4JHK3.js";
 import {
   hookWaitClamped,
   hookWaitDeadline,
   scopeBreachReasonOf
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/pushed-question.ts
 var scopeQuestionOf = (verdict) => {

package/dist/{chunk-2K7MZRPH.js → chunk-VVN3RPV6.js}

@@ -5,7 +5,7 @@ import {
   MCP_CREDENTIAL_REJECTION_BODY,
   isRecord,
   responseRejectsCredential
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/credential-rejection.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-35RCY4LB.js → chunk-WM7OY63L.js}

@@ -7,7 +7,7 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-4PPSXQQ6.js";
+} from "./chunk-YOV3LHOL.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-RLNJNRYP.js → chunk-WNT4JHK3.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-ZJKWDM3S.js";
+} from "./chunk-R7KC57PC.js";
 import {
   writeFileAtomic
 } from "./chunk-TODDEIYG.js";