pushary 1.9.135 → 1.9.136

package/dist/{chunk-5GQLZ46V.js → chunk-3HXOR6E5.js}

@@ -4,37 +4,37 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "./chunk-35RCY4LB.js";
+} from "./chunk-WM7OY63L.js";
 import {
   CommandReceipts,
   controllerCommandSchema
-} from "./chunk-6QZGKKQS.js";
+} from "./chunk-R7CQF2P3.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership
-} from "./chunk-4YBDKFU2.js";
+} from "./chunk-2MVKT7KH.js";
 import {
   spawnClaude
 } from "./chunk-H6CL3T2S.js";
 import {
   repositoryScopeFor
-} from "./chunk-DMK3U7GG.js";
+} from "./chunk-IRIXOH4U.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "./chunk-XRO6NRBO.js";
+} from "./chunk-L2GADKFL.js";
 import {
   readCommandAck
-} from "./chunk-XB75IJ3G.js";
+} from "./chunk-Y47BMZUR.js";
 import {
   callMcpTool,
   isRetryable
-} from "./chunk-ZNST34QH.js";
+} from "./chunk-WXUEOHYY.js";
 import {
   AGENT_QUESTION_DESCRIPTION_MAX,
   AGENT_QUESTION_HEADER_MAX,
@@ -55,7 +55,7 @@ import {
   parseCodexQuestions,
   planElicitationAsk,
   readElicitationFields
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/codex-question-owner.ts
 import { createHash } from "crypto";

package/dist/{chunk-VND6LN6X.js → chunk-3QBI5C6P.js}

@@ -1,9 +1,9 @@
 import {
   absoluteUrl
-} from "./chunk-SFN72Q7W.js";
+} from "./chunk-Q2VV77IY.js";
 import {
   KEY_SCOPE
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/cli/approval-settings-pages.ts
 var API_KEYS_PATH = "/dashboard/agent/settings";

package/dist/{chunk-7ASHS5VR.js → chunk-43DT3QWZ.js}

@@ -1,13 +1,13 @@
 import {
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-ORZ7H3AQ.js";
+} from "./chunk-TLK5YLIE.js";
 import {
   CLAUDE_CODE_AGENT
-} from "./chunk-RGRPDJG3.js";
+} from "./chunk-D7AAAD6W.js";
 import {
   compatibleToolLookup
-} from "./chunk-UXPRMNH2.js";
+} from "./chunk-A2YJ2FBR.js";
 import {
   CLAUDE_HOOK_EVENTS,
   PUSHARY_MCP_URL,
@@ -19,7 +19,7 @@ import {
   isPusharyHook,
   registerHookEntry,
   removeClaudeMcpServers
-} from "./chunk-ZJKWDM3S.js";
+} from "./chunk-R7KC57PC.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   PHONE_ANSWERED_TOOLS,
@@ -30,7 +30,7 @@ import {
   pusharyMissingReason,
   refusalOutput,
   withHookHoldBudget
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/config-document.ts
 import { parse, stringify } from "smol-toml";
@@ -251,6 +251,18 @@ function normalizeToolCall(profile, input) {
   const lookup = compatibleToolLookup(profile, input.tool_name, input.tool_input ?? {}, input.cwd);
   return { ...input, tool_name: lookup.tool, tool_input: lookup.input };
 }
+var SHELL_ESCAPED_PATH_KEYS = ["file_path", "path", "filePath", "notebook_path"];
+var ESCAPED_SHELL_SPECIAL = /\\([ \t()[\]{};|*?$`'"#&<>!~,])/g;
+var pathAsPreToolUseSeesIt = (path, platform) => platform === "win32" ? path.trim() : path.trim().replace(ESCAPED_SHELL_SPECIAL, "$1");
+var permissionRequestAsPreToolUseSeesIt = (profile, input, platform) => {
+  if (profile?.permissionRequestPaths !== "shell_escaped" || !input.tool_input) return input;
+  const toolInput = { ...input.tool_input };
+  for (const key of SHELL_ESCAPED_PATH_KEYS) {
+    const value = toolInput[key];
+    if (typeof value === "string") toolInput[key] = pathAsPreToolUseSeesIt(value, platform);
+  }
+  return { ...input, tool_input: toolInput };
+};
 var grokHome = (home = homedir(), environment = process.env) => environment.GROK_HOME?.trim() || join(home, ".grok");
 var compatibleFilePath = (file, home = homedir()) => join(file.root === "grok_home" ? grokHome(home) : home, ...file.path);
 var compatibleDocuments = (profile, home) => {
@@ -463,6 +475,7 @@ export {
   namedSource,
   activeHookSource,
   normalizeToolCall,
+  permissionRequestAsPreToolUseSeesIt,
   grokHome,
   compatibleFilePath,
   compatibleDocuments,

package/dist/{chunk-AEOITMCS.js → chunk-4T72AHIA.js}

@@ -12,7 +12,7 @@ import {
   reachVerdict,
   reachesYou,
   verifyDelivery
-} from "./chunk-X3NYMHLG.js";
+} from "./chunk-V7ZY7P2X.js";
 import {
   humanIsTty,
   writeHuman
@@ -24,14 +24,14 @@ import {
 } from "./chunk-FO3MDD26.js";
 import {
   reportedInstallSource
-} from "./chunk-IABPEGAA.js";
+} from "./chunk-LNF36PTF.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BGXXWLS5.js";
+} from "./chunk-MQMVJDII.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/onboarding.ts
 import qrcodeTerminal from "qrcode-terminal";

package/dist/{chunk-V7KBG7XH.js → chunk-54TZGPZP.js}

@@ -2,16 +2,16 @@ import {
   NpmInstallError,
   NpmMissingError,
   NpmPermissionError
-} from "./chunk-ACI4PZ5N.js";
+} from "./chunk-GS5FH3C2.js";
 import {
   writeFileAtomic
 } from "./chunk-TODDEIYG.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BGXXWLS5.js";
+} from "./chunk-MQMVJDII.js";
 import {
   readSetupAgentFailures
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/setup/config-write.ts
 var AgentConfigWriteError = class extends Error {

package/dist/{chunk-WVOMK2HW.js → chunk-5XDFQ6E3.js}

@@ -9,7 +9,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-JDAX2HVS.js → chunk-62GD26OE.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-ZJKWDM3S.js";
+} from "./chunk-R7KC57PC.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   npmExitedOnPermissionDenied
-} from "./chunk-ACI4PZ5N.js";
+} from "./chunk-GS5FH3C2.js";
 import {
   writeJsonAtomic
 } from "./chunk-TODDEIYG.js";

package/dist/{chunk-VCMJLNEP.js → chunk-6SWFS4GU.js}

@@ -7,10 +7,10 @@ import {
   codexHome,
   codexHooksJsonIn,
   isPusharyCodexCommand
-} from "./chunk-ZJKWDM3S.js";
+} from "./chunk-R7KC57PC.js";
 import {
   resolvePathBinary
-} from "./chunk-ACI4PZ5N.js";
+} from "./chunk-GS5FH3C2.js";
 import {
   getPackageVersion
 } from "./chunk-WIIMW5YO.js";

package/dist/{chunk-UXPRMNH2.js → chunk-A2YJ2FBR.js}

@@ -17,6 +17,7 @@ import {
   hookCompatibleProfileBySource,
   isClaudeWakePrompt,
   isTokenCount,
+  namesAFilePath,
   parseCommitId,
   parseMcpToolName,
   redactSecrets,
@@ -24,7 +25,7 @@ import {
   reportableSessionId,
   toToolLookup,
   truncateLine
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // ../hook-mapping/src/commit-receipt.ts
 var COMMIT_OUTPUT_MAX_LENGTH = 65536;
@@ -225,7 +226,7 @@ var patchedFilesIn = (input) => [...new Set(PATCH_ARG_KEYS.flatMap((key) => pars
 var lookupsForInput = (profile, toolName, input, absolute) => {
   const gateInput = profile.source === "grok" && toolName === "apply_patch" ? { patch: input.patch, diff: input.patch } : input;
   const lookup = toToolLookup(profile, toolName, gateInput, absolute);
-  if (!lookup.unreadable) return [lookup];
+  if (!lookup.unreadable || namesAFilePath(profile, gateInput)) return [lookup];
   const files = patchedFilesIn(gateInput);
   if (files.length === 0) return [lookup];
   return files.slice(0, GATE_MAX_TOOL_INPUTS + 1).map((file) => toToolLookup(profile, toolName, { ...gateInput, file_path: absolute(file) }, absolute));

package/dist/{chunk-QUMPSMZN.js → chunk-A4YOXS24.js}

@@ -1,12 +1,12 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-VCMJLNEP.js";
+} from "./chunk-6SWFS4GU.js";
 import {
   retryAgentCommand
-} from "./chunk-V7KBG7XH.js";
+} from "./chunk-54TZGPZP.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BGXXWLS5.js";
+} from "./chunk-MQMVJDII.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-MGTMXF3T.js → chunk-A7R43KOX.js}

@@ -5,10 +5,10 @@ import {
   hermesAppWiringRecord,
   hermesConfigReceipt,
   hermesSetupReceipt
-} from "./chunk-ZJKWDM3S.js";
+} from "./chunk-R7KC57PC.js";
 import {
   resolvePathBinary
-} from "./chunk-ACI4PZ5N.js";
+} from "./chunk-GS5FH3C2.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -19,7 +19,7 @@ import {
 } from "./chunk-WIIMW5YO.js";
 import {
   isRecord
-} from "./chunk-H4226UC7.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/hermes/plugin-payload.ts
 import { createHash } from "crypto";