pushary 1.9.143 → 1.9.145

package/dist/{chunk-EGUT2MWV.js → chunk-52UXNCZG.js}

@@ -1,12 +1,12 @@
 import {
   parseSseMessages
-} from "./chunk-V53QYJNY.js";
+} from "./chunk-WPBWJMBZ.js";
 import {
   fetchAsCredential
-} from "./chunk-YCU7Y77H.js";
+} from "./chunk-S7HGPKCL.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-R7FSMUHG.js";
+} from "./chunk-6LZ7MXHD.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-NZHRH4RR.js → chunk-5TWW7ZUL.js}

@@ -1,22 +1,22 @@
 import {
   cursorGateOwnsClaudeCall,
   readCursorGateRegistration
-} from "./chunk-6JLANX5L.js";
+} from "./chunk-L4OGTRVW.js";
 import {
   registerTranscript
-} from "./chunk-LTPKSJWY.js";
+} from "./chunk-S3A4PCRR.js";
 import {
   namedEvent
-} from "./chunk-5RSM5DRT.js";
+} from "./chunk-R34RWVN2.js";
 import {
   writeDegraded
-} from "./chunk-CNURORKI.js";
+} from "./chunk-YU5XE6VC.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource,
   isGrokHookPayload,
   isGrokSessionEndStop
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode", "cursor_version"];

package/dist/{chunk-DU4KCXC2.js → chunk-63WX5KZN.js}

@@ -4,15 +4,15 @@ import {
   claimThrottle,
   releaseThrottle,
   reportEvent
-} from "./chunk-QGJK3NAR.js";
+} from "./chunk-K2SKUBYY.js";
 import {
   deriveToolTarget,
   permissionDeniedAction
-} from "./chunk-7QWH257P.js";
+} from "./chunk-JZT2LPRM.js";
 import {
   machineDecisionFor,
   wireVerdictFor
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-DOXH5BV4.js → chunk-6IWOMXUF.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-5RSM5DRT.js";
+} from "./chunk-R34RWVN2.js";
 import {
   pusharyHookExecutable
-} from "./chunk-3VOUWGFF.js";
+} from "./chunk-CUR2DCZN.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   isRecord
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-R7FSMUHG.js → chunk-6LZ7MXHD.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {
@@ -241,6 +241,7 @@ var SETUP_OPTIONS = [
   ["--transcripts on|off", "Enable or disable encrypted transcript sync on this machine"],
   ["--skip-phone", "Skip pairing a phone"],
   ["--take-over-hooks", "Replace hooks the Pushary Mac app owns with the CLI's. Without it the app's wiring is kept"],
+  ["--hermes-gate-terminal", "Add Hermes's terminal tool to PUSHARY_GATE_TOOLS when Hermes skips its own approvals on a container backend"],
   ["--verify roundtrip", "Send a real question and wait for you to answer it (default when a human is present)"],
   ["--verify push", "Only prove a notification was delivered. Automatic when nobody is at the terminal"],
   ["--verify none", "Skip the final check entirely"],

package/dist/{chunk-EMODTMHE.js → chunk-6UK4K5RS.js}

@@ -2,7 +2,7 @@ import {
   localRepoKey,
   normalizeRepoRemote,
   parseGitBranch
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/repo.ts
 import { existsSync, readFileSync, statSync } from "fs";

package/dist/{chunk-IG7NGXBS.js → chunk-72LP4RPC.js}

@@ -3,7 +3,7 @@ import {
   formatVersion,
   quoteIfNeeded,
   shellDoubleQuoted
-} from "./chunk-QFZNPZRO.js";
+} from "./chunk-VTJ4WZOC.js";
 import {
   writeFileAtomic
 } from "./chunk-TODDEIYG.js";
@@ -20,7 +20,7 @@ import {
   PRETOOLUSE_GATED_TOOLS,
   PUSHARY_TOOL_PREFIX,
   withHookHoldBudget
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/setup/paths.ts
 import { createHash as createHash2 } from "crypto";
@@ -953,6 +953,7 @@ You have Pushary MCP tools that reach the user on their phone. Use them proactiv
 - Call \`propose_scope\` only for an unresolved or requested file boundary. A ratified scope narrows what may proceed; it does not bypass other approval rules. Do not add a plan approval merely because work spans several files, and do not propose a new scope mid-run just to widen it. Let the installed gate request any scope expansion before the edit executes. Only file paths are checked, and only on tool calls that carry one, so put a boundary that is not a path (recipients, channels, spend, systems you will not open) in \`promises\` and never in \`allowedPaths\`. Read the \`enforces\` field that comes back: an empty array means nothing in that contract is checked automatically, and you must say so rather than report that a scope is in force. \`hookSeen: false\` means no hook has reported that sessionId, so the gate will never find the contract: fix the session id rather than proceeding as if a scope were in force.
 - Before a task of more than two steps, break it into steps and find the forks. Settle by yourself every fork that a file, a command or a tool call can answer, then ask the rest as one numbered round with your recommended answer against each. A question in the terminal is free; a push is not. When the user is at the terminal, ask the whole round there. When the user is away, send only the fork that stops the run. Decide another fork on your recommendation only if it is reversible, spends nothing and stays inside the task, and list it in your final message; ask the rest once the first answer is back.
 - When you are blocked, stuck, or hit an error you cannot resolve on your own, call \`send_notification\` so the user knows, and call \`ask_user\` if you need a decision to continue.
+- When the user asks you to call, phone or ring them if you get stuck or blocked, ask with \`ask_user\`; there is no separate call tool. Pushary may phone them only when the \`ask_user\` reply includes \`phoneCall\`, and then records the spoken answer as the answer; without \`phoneCall\` no call is planned, so do not promise one. While the reply is pending and has no \`handoffAction\`, keep waiting with \`wait_for_answer\` and the same correlationId; when it has one, follow it.
 - When meaningful work finishes while the user is away, or they requested an alert, call \`send_notification\` so the user knows it is done. Skip trivial completions and duplicate reports to someone already reading. Always pass \`context\` with a \`type\` of "task_complete", "error" or "info": it is what tells Pushary this is a task update, so the user's own setting for where updates land can route it.
 - Confirm notifications can offer lock-screen actions; arbitrary choices and text open the app. The Mac notch answers questions too.
 - Use \`cancel_question\` to retract a pending question once it is no longer needed.

package/dist/{chunk-MMS7R3VO.js → chunk-7LTP2GHO.js}

@@ -1,10 +1,10 @@
 import {
   callDecisionStore,
   identifyingToolInput
-} from "./chunk-QGJK3NAR.js";
+} from "./chunk-K2SKUBYY.js";
 import {
   canonicalJson
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 
 // src/phone-approval.ts
 import { createHash } from "crypto";

package/dist/{chunk-QESEICW4.js → chunk-A2H256WR.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   renderCommandHelp
-} from "./chunk-R7FSMUHG.js";
+} from "./chunk-6LZ7MXHD.js";
 import {
   getPackageVersion
 } from "./chunk-WIIMW5YO.js";

package/dist/{chunk-4YH326C5.js → chunk-B4JQIH5M.js}

@@ -2,10 +2,10 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-ZKKZEVNI.js";
+} from "./chunk-G3VSMI7K.js";
 import {
   APPROVAL_RULES_PATH
-} from "./chunk-TKFNIDZK.js";
+} from "./chunk-YZA3YBHX.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
@@ -14,19 +14,19 @@ import {
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-DZLLKJJT.js";
+} from "./chunk-YRJZF5RG.js";
 import {
   readKeySource
-} from "./chunk-HIIXYZYV.js";
+} from "./chunk-WOSO4YFQ.js";
 import {
   getBaseUrl
-} from "./chunk-4EBJ4PTZ.js";
+} from "./chunk-BWREST4F.js";
 import {
   EXIT
 } from "./chunk-BG4HHB7E.js";
 import {
   KEY_SCOPE
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-4EBJ4PTZ.js → chunk-BWREST4F.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-R7FSMUHG.js";
+} from "./chunk-6LZ7MXHD.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-ZVJIJPQY.js → chunk-BYKRAYGD.js}

@@ -1,6 +1,6 @@
 import {
   isFinalCommandAckRefusal
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/command-ack-outcome.ts
 var SETTLED_ACK = { outcome: "settled" };

package/dist/{chunk-3VOUWGFF.js → chunk-CUR2DCZN.js}

@@ -1,9 +1,9 @@
 import {
   AGENT_CHOICES
-} from "./chunk-53KLGXFL.js";
+} from "./chunk-ZBMVOMFG.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-MH5BRZOQ.js";
+} from "./chunk-SQL5YXUH.js";
 import {
   CLAUDE_HOOK_EVENTS,
   CODEX_HOOK_EVENTS,
@@ -16,13 +16,13 @@ import {
   isBridgeLocator,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/chunk-D3UFDCTQ.js

@@ -0,0 +1,87 @@
+import {
+  HERMES_APPROVAL_TRANSPORT_KEY,
+  HERMES_COMMAND_ALLOWLIST_KEY,
+  HERMES_DOCKER_MOUNT_CWD_KEY,
+  HERMES_DOCKER_VOLUMES_KEY,
+  HERMES_GATE_TOOLS_KEY,
+  HERMES_TERMINAL_ENV_KEY,
+  HERMES_TERMINAL_SECTION,
+  gateToolsWithShell,
+  gatesHermesShell,
+  hermesAlwaysAllowsShell,
+  hermesApprovalCoverage,
+  hermesGateToolsFrom,
+  hermesShellGateState,
+  readHermesSetting,
+  readSetupReceipt,
+  receiptWithSnapshot,
+  settingSnapshot,
+  writeHermesSetting,
+  writeSetupReceipt
+} from "./chunk-ZSOCJHL7.js";
+import {
+  configFilePath
+} from "./chunk-BWREST4F.js";
+import {
+  readJsonSafe,
+  writeJsonAtomic
+} from "./chunk-TODDEIYG.js";
+import {
+  readSetupOutcomeProperties
+} from "./chunk-LQXUWXQP.js";
+
+// src/hermes/shell-gate.ts
+var readHermesShellGate = async (launcher) => {
+  const [terminal, terminalEnv, dockerVolumes, dockerMountCwd, gateReading, allowlist, transport] = await Promise.all([
+    readHermesSetting(launcher, HERMES_TERMINAL_SECTION),
+    readHermesSetting(launcher, HERMES_TERMINAL_ENV_KEY),
+    readHermesSetting(launcher, HERMES_DOCKER_VOLUMES_KEY),
+    readHermesSetting(launcher, HERMES_DOCKER_MOUNT_CWD_KEY),
+    readHermesSetting(launcher, HERMES_GATE_TOOLS_KEY),
+    readHermesSetting(launcher, HERMES_COMMAND_ALLOWLIST_KEY),
+    readHermesSetting(launcher, HERMES_APPROVAL_TRANSPORT_KEY)
+  ]);
+  return hermesShellGateState({
+    coverage: hermesApprovalCoverage({ terminal, terminalEnv, dockerVolumes, dockerMountCwd }),
+    gate: hermesGateToolsFrom(gateReading),
+    alwaysAllowed: hermesAlwaysAllowsShell({ allowlist, transport })
+  });
+};
+var RECEIPT_FAILURES = {
+  missing: "receipt_missing",
+  invalid: "receipt_invalid"
+};
+var gateHermesShell = async (request) => {
+  const stored = readSetupReceipt(request.receipts);
+  if (stored.kind !== "ok") return { kind: "failed", reason: RECEIPT_FAILURES[stored.kind] };
+  const reading = await readHermesSetting(request.launcher, HERMES_GATE_TOOLS_KEY);
+  const gate = hermesGateToolsFrom(reading);
+  if (gatesHermesShell(gate)) return { kind: "already_gated" };
+  const value = gateToolsWithShell(gate);
+  if (reading === null || value === null) return { kind: "failed", reason: "setting_unreadable" };
+  writeSetupReceipt(request.receipts, receiptWithSnapshot(stored.receipt, settingSnapshot(HERMES_GATE_TOOLS_KEY, reading)));
+  return await writeHermesSetting(request.launcher, HERMES_GATE_TOOLS_KEY, value) ? { kind: "gated", value } : { kind: "failed", reason: "setting_refused" };
+};
+
+// src/setup/failure-record.ts
+import { dirname, join } from "path";
+var failurePath = () => join(dirname(configFilePath()), "last-setup-failure.json");
+var saveSetupFailure = (body, path = failurePath()) => {
+  const properties = readSetupOutcomeProperties(body);
+  if (properties.exitCode === null || properties.exitCode === 0) return;
+  writeJsonAtomic(path, { ...properties, recordedAt: (/* @__PURE__ */ new Date()).toISOString() }, 384);
+};
+var readSetupFailure = (path = failurePath()) => {
+  const result = readJsonSafe(path);
+  if (result.kind !== "ok" || typeof result.value !== "object" || result.value === null || Array.isArray(result.value)) return null;
+  const body = result.value;
+  if (!("recordedAt" in body) || typeof body.recordedAt !== "string" || body.recordedAt.length > 30 || !Number.isFinite(Date.parse(body.recordedAt))) return null;
+  return { ...readSetupOutcomeProperties({ ...body }), recordedAt: body.recordedAt };
+};
+
+export {
+  readHermesShellGate,
+  gateHermesShell,
+  saveSetupFailure,
+  readSetupFailure
+};

package/dist/{chunk-UIZE4YMU.js → chunk-DZIZ3XFL.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-CYTPQDQY.js";
 import {
   parseVersion
-} from "./chunk-QFZNPZRO.js";
+} from "./chunk-VTJ4WZOC.js";
 import {
   isRecord
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-QQHUUPPW.js → chunk-EPWOARGR.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   npmExitedOnPermissionDenied
-} from "./chunk-QFZNPZRO.js";
+} from "./chunk-VTJ4WZOC.js";
 import {
   writeJsonAtomic
 } from "./chunk-TODDEIYG.js";

package/dist/{chunk-LWQLM3AO.js → chunk-FCSPMSDC.js}

@@ -12,7 +12,7 @@ import {
   reachVerdict,
   reachesYou,
   verifyDelivery
-} from "./chunk-V7CS72Q5.js";
+} from "./chunk-PY6CM4NK.js";
 import {
   humanIsTty,
   writeHuman
@@ -24,14 +24,14 @@ import {
 } from "./chunk-FO3MDD26.js";
 import {
   reportedInstallSource
-} from "./chunk-BHKODM4L.js";
+} from "./chunk-MOC2DN42.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-R7FSMUHG.js";
+} from "./chunk-6LZ7MXHD.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/onboarding.ts
 import qrcodeTerminal from "qrcode-terminal";

package/dist/{chunk-X2MC2CF3.js → chunk-FNAH3YJC.js}

@@ -2,37 +2,37 @@ import {
   forgetPhoneApproval,
   rememberPhoneApproval,
   takePhoneApproval
-} from "./chunk-MMS7R3VO.js";
+} from "./chunk-7LTP2GHO.js";
 import {
   claudeSettingsLocationFor,
   readClaudePermissionRules
-} from "./chunk-FS47XZCE.js";
+} from "./chunk-NTMKJRQ3.js";
 import {
   askAgentQuestions,
   defersToNativeMode,
   outcomeOfFailedAsk,
   storedWaitDeadline
-} from "./chunk-MQF6MQMR.js";
+} from "./chunk-TRV3ETGY.js";
 import {
   reportMachineDenial
-} from "./chunk-DU4KCXC2.js";
+} from "./chunk-63WX5KZN.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-5TZYAMGW.js";
+} from "./chunk-33BYPZ52.js";
 import {
   isAdmitted,
   readAdmissionRules
-} from "./chunk-NZHRH4RR.js";
+} from "./chunk-5TWW7ZUL.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-42DRRA6N.js";
+} from "./chunk-USFZJAB4.js";
 import {
   activeHookSource,
   activeIdentity,
   namedSource
-} from "./chunk-5RSM5DRT.js";
+} from "./chunk-R34RWVN2.js";
 import {
   DEFAULT_SESSION,
   approvalAwaitingRetry,
@@ -53,7 +53,7 @@ import {
   settleQuestionsForToolUse,
   sweepFilesOlderThan,
   userScope
-} from "./chunk-QGJK3NAR.js";
+} from "./chunk-K2SKUBYY.js";
 import {
   UNNAMED_ACTION,
   deriveAction,
@@ -64,12 +64,12 @@ import {
   patchDeletesFiles,
   permissionDeniedAction,
   scopePathFor
-} from "./chunk-7QWH257P.js";
+} from "./chunk-JZT2LPRM.js";
 import {
   branchFor,
   repoKeyFor,
   repositoryScopeFor
-} from "./chunk-EMODTMHE.js";
+} from "./chunk-6UK4K5RS.js";
 import {
   askUser,
   cancelQuestion,
@@ -86,20 +86,20 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-CNURORKI.js";
+} from "./chunk-YU5XE6VC.js";
 import {
   getMachineId
-} from "./chunk-4Z7YVVKQ.js";
+} from "./chunk-KS3PNTRT.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-4EBJ4PTZ.js";
+} from "./chunk-BWREST4F.js";
 import {
   writeFileAtomic
 } from "./chunk-TODDEIYG.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-R7FSMUHG.js";
+} from "./chunk-6LZ7MXHD.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -168,7 +168,7 @@ import {
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason,
   unapprovedScopeReason
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/terminal-answer-watch.ts
 import { closeSync, openSync, readSync, statSync } from "fs";

package/dist/{chunk-ZKKZEVNI.js → chunk-G3VSMI7K.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-HIIXYZYV.js";
+} from "./chunk-WOSO4YFQ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-R7FSMUHG.js";
+} from "./chunk-6LZ7MXHD.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-SYZF5SDG.js → chunk-GK5X2ZTN.js}

@@ -1,13 +1,13 @@
 import {
   compatibleConfigFile
-} from "./chunk-5RSM5DRT.js";
+} from "./chunk-R34RWVN2.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands
-} from "./chunk-3VOUWGFF.js";
+} from "./chunk-CUR2DCZN.js";
 import {
   AGENT_CHOICES
-} from "./chunk-53KLGXFL.js";
+} from "./chunk-ZBMVOMFG.js";
 import {
   bridgeStub,
   claudeSettings,
@@ -19,7 +19,7 @@ import {
   resolveBridgeStub,
   vscodePluginDir,
   windowsNodeLauncherFor
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   readJsonSafe
 } from "./chunk-TODDEIYG.js";
@@ -29,7 +29,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-UJETZZG5.js → chunk-GURIOZE7.js}

@@ -1,31 +1,31 @@
 import {
   MANAGED_CLAUDE_SETTINGS_BY_PLATFORM
-} from "./chunk-FS47XZCE.js";
+} from "./chunk-NTMKJRQ3.js";
 import {
   declinedAgentsFile,
   readDeclinedAgents
-} from "./chunk-NOTW7GOC.js";
+} from "./chunk-KKPT7ROP.js";
 import {
   OPENCODE_HOOK_BINARY,
   openCodeConfigDir,
   openCodePluginArgv,
   openCodePluginFile
-} from "./chunk-SYZF5SDG.js";
+} from "./chunk-GK5X2ZTN.js";
 import {
   liveCursorGateCoverage
-} from "./chunk-6JLANX5L.js";
+} from "./chunk-L4OGTRVW.js";
 import {
   compatibleConfigFile,
   compatibleHookEvents,
   grokHome,
   parseConfigDocument
-} from "./chunk-5RSM5DRT.js";
+} from "./chunk-R34RWVN2.js";
 import {
   DEFAULT_HOOKS_KEY_PATH,
   GEMINI_HOOK_BINARY,
   GEMINI_HOOK_EVENTS,
   hooksAt
-} from "./chunk-3VOUWGFF.js";
+} from "./chunk-CUR2DCZN.js";
 import {
   CODEX_EARLIER_APPROVAL_MATCHERS,
   CODEX_HOOK_BINARY,
@@ -53,7 +53,7 @@ import {
   parseHookArgv,
   parseHookCommand,
   supportedClaudeEvents
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   readRegularJsonFile,
   readRegularTextFile
@@ -67,7 +67,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   isRecord,
   matcherMatchesEveryCall
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/hook-wiring.ts
 import { createHash } from "crypto";

package/dist/{chunk-7VMVMC4H.js → chunk-HOQH5CLZ.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-HIIXYZYV.js";
+} from "./chunk-WOSO4YFQ.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-LS6BU5RM.js → chunk-IDLOJIIS.js}

@@ -2,7 +2,7 @@ import {
   isApprovalMode,
   isRecord,
   isTimeoutAction
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/cli/settings-response.ts
 var isFiniteNumber = (value) => typeof value === "number" && Number.isFinite(value);

package/dist/{chunk-P5QXH5QI.js → chunk-IIN26HL7.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-HIIXYZYV.js";
+} from "./chunk-WOSO4YFQ.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-22CXL7YI.js → chunk-IRPIMQ7U.js}

@@ -3,15 +3,15 @@ import {
 } from "./chunk-XMSDA5WA.js";
 import {
   fetchAsCredential
-} from "./chunk-YCU7Y77H.js";
+} from "./chunk-S7HGPKCL.js";
 import {
   getBaseUrl
-} from "./chunk-4EBJ4PTZ.js";
+} from "./chunk-BWREST4F.js";
 import {
   compressTranscriptRecord,
   redactSecretsFromContent,
   transcriptRecordPlaintext
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/transcript-api.ts
 var providerRecipientSchema = external_exports.object({