pushary 1.9.143 → 1.9.145

package/dist/{chunk-4JTZZXB3.js → chunk-JKWUF776.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-53KLGXFL.js";
+} from "./chunk-ZBMVOMFG.js";
 import {
   parseFlags
 } from "./chunk-YPY4YCIZ.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-YU2EUD7O.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-R7FSMUHG.js";
+} from "./chunk-6LZ7MXHD.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-7QWH257P.js → chunk-JZT2LPRM.js}

@@ -25,7 +25,7 @@ import {
   reportableSessionId,
   toToolLookup,
   truncateLine
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // ../hook-mapping/src/commit-receipt.ts
 var COMMIT_OUTPUT_MAX_LENGTH = 65536;

package/dist/{chunk-QGJK3NAR.js → chunk-K2SKUBYY.js}

@@ -27,11 +27,11 @@ import {
   toolResultErrorText,
   transcriptTokensIn,
   transcriptUsageRequest
-} from "./chunk-7QWH257P.js";
+} from "./chunk-JZT2LPRM.js";
 import {
   branchFor,
   repoKeyFor
-} from "./chunk-EMODTMHE.js";
+} from "./chunk-6UK4K5RS.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -39,39 +39,39 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-CNURORKI.js";
+} from "./chunk-YU5XE6VC.js";
 import {
   isRetryable,
   withRetry
-} from "./chunk-V53QYJNY.js";
+} from "./chunk-WPBWJMBZ.js";
 import {
   RETRY_ACK,
   readCommandAck,
   refusedReceiptMessage
-} from "./chunk-ZVJIJPQY.js";
+} from "./chunk-BYKRAYGD.js";
 import {
   fetchAsCredential
-} from "./chunk-YCU7Y77H.js";
+} from "./chunk-S7HGPKCL.js";
 import {
   getMachineId
-} from "./chunk-4Z7YVVKQ.js";
+} from "./chunk-KS3PNTRT.js";
 import {
   reportedInstallSource
-} from "./chunk-BHKODM4L.js";
+} from "./chunk-MOC2DN42.js";
 import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS,
   claudeConfigDir
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   compareVersion,
   parseVersion
-} from "./chunk-QFZNPZRO.js";
+} from "./chunk-VTJ4WZOC.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-4EBJ4PTZ.js";
+} from "./chunk-BWREST4F.js";
 import {
   writeFileAtomic,
   writeJsonAtomicDurable
@@ -100,7 +100,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   unansweredRefusalReason
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/pending.ts
 import { join } from "path";

package/dist/{chunk-K7MVCPH5.js → chunk-KFALRZIN.js}

@@ -1,19 +1,19 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-SYZF5SDG.js";
+} from "./chunk-GK5X2ZTN.js";
 import {
   keyPrefix
-} from "./chunk-HIIXYZYV.js";
+} from "./chunk-WOSO4YFQ.js";
 import {
   bridgeAgentKey
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   readJsonSafe
 } from "./chunk-TODDEIYG.js";
 import {
   isRecord,
   isValidApiKey
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-44Z6MQZ2.js → chunk-KGFB2LEB.js}

@@ -536,8 +536,8 @@ var loadedOnce = (load) => {
 };
 
 // src/codex-desktop-proxy.ts
-var loadThePhone = () => import("./api-2YC2KSIM.js");
-var loadTheCardRouting = () => import("./codex-card-routing-I6YOJBTT.js");
+var loadThePhone = () => import("./api-KWJQMO6G.js");
+var loadTheCardRouting = () => import("./codex-card-routing-EVL5L36G.js");
 var theFirstCardLoadsAgain = () => {
 };
 var ASKS_WITHOUT_ROUTING = {};
@@ -1097,7 +1097,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-EGUHSLTG.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-F7WQ7Y3I.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");

package/dist/{chunk-NOTW7GOC.js → chunk-KKPT7ROP.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   readRegularJsonFile,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-4Z7YVVKQ.js → chunk-KS3PNTRT.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   writeFileAtomic
 } from "./chunk-TODDEIYG.js";

package/dist/{chunk-6JLANX5L.js → chunk-L4OGTRVW.js}

@@ -1,17 +1,17 @@
 import {
   pusharyHookExecutable
-} from "./chunk-3VOUWGFF.js";
+} from "./chunk-CUR2DCZN.js";
 import {
   bridgeResolvesToApp,
   cursorUserHooks,
   executableFileName,
   isBridgeLocator,
   liveBridgeProbe
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   atLeast,
   parseVersion
-} from "./chunk-QFZNPZRO.js";
+} from "./chunk-VTJ4WZOC.js";
 import {
   CURSOR_GATE_COVERAGE,
   CURSOR_GATE_SCRIPT,
@@ -21,7 +21,7 @@ import {
   isCursorHookPayload,
   isRecord,
   toolsCoveredByGateEntry
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/cursor-gate-registration.ts
 import { dirname, isAbsolute, join, resolve } from "path";

package/dist/{chunk-QLGLUUOP.js → chunk-LD4R2P6N.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   redactSecretsFromContent
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/cli/json.ts
 var writeStdoutFully = (text) => new Promise((resolve, reject) => {

package/dist/{chunk-4OX4SJGA.js → chunk-LJRPWUST.js}

@@ -1,19 +1,19 @@
 import {
   readExistingMachineId
-} from "./chunk-4Z7YVVKQ.js";
+} from "./chunk-KS3PNTRT.js";
 import {
   NetworkError
 } from "./chunk-YU2EUD7O.js";
 import {
   getBaseUrl
-} from "./chunk-4EBJ4PTZ.js";
+} from "./chunk-BWREST4F.js";
 import {
   getPackageVersion
 } from "./chunk-WIIMW5YO.js";
 import {
   clientContextHeaders,
   redactSecretsFromContent
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-DDJHPMBJ.js → chunk-LMU6NG2G.js}

@@ -4,7 +4,7 @@ import {
 import {
   RETRY_ACK,
   refusedReceiptMessage
-} from "./chunk-ZVJIJPQY.js";
+} from "./chunk-BYKRAYGD.js";
 
 // src/command-receipts.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-C5LIS3XM.js → chunk-LQXUWXQP.js}

@@ -519,6 +519,13 @@ var AGENTS = {
     setupGuide: "[Grok Bot setup](/docs/agents/guides/grok-bot)",
     capabilityNote: "Grok Bot keeps its own approval cards, and Pushary cannot stop a Bot in the middle of a task. A question nobody answers expires after about ten minutes and is never treated as a yes."
   },
+  muse: {
+    ...defaults,
+    label: "Muse",
+    connectVia: "Muse custom connector (remote MCP)",
+    documented: false,
+    capabilityNote: "Muse keeps its own confirmations, and Pushary cannot stop Muse in the middle of a task. Muse decides when to ask through Pushary. A question nobody answers expires after about ten minutes and is never treated as a yes."
+  },
   windsurf: {
     ...defaults,
     label: "Windsurf",

package/dist/{chunk-MOYEHNFP.js → chunk-MKHVLDMN.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -17,7 +17,7 @@ import {
 } from "./chunk-WIIMW5YO.js";
 import {
   isAutoUpdateResult
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-G3G7DWR3.js → chunk-MNU5N3CQ.js}

@@ -1,13 +1,13 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-HLWS6ADK.js";
+} from "./chunk-ZORBUQFG.js";
 import {
   hermesReceiptPaths,
   hermesSetupPredatesThePluginFolder,
   installHermesPlugin,
   refreshHermesPluginFiles,
   shippedHermesPlugin
-} from "./chunk-KP6FVUCC.js";
+} from "./chunk-ZSOCJHL7.js";
 import {
   fxIgnoresInstructionsFile,
   fxInstructionsBody,
@@ -16,7 +16,7 @@ import {
   macAppFxBridge,
   refreshClineKey,
   switchFxHttpEntryToBridge
-} from "./chunk-ZDOTNMGL.js";
+} from "./chunk-YNCVSKUW.js";
 import {
   OPENCODE_HOOK_BINARY,
   agentHookOwner,
@@ -28,16 +28,16 @@ import {
   openCodePluginDir,
   openCodeWired,
   withOpenCodeAskRules
-} from "./chunk-SYZF5SDG.js";
+} from "./chunk-GK5X2ZTN.js";
 import {
   detectClaudeVersion
-} from "./chunk-UIZE4YMU.js";
+} from "./chunk-DZIZ3XFL.js";
 import {
   addCompatibleHooks,
   compatibleConfigFile,
   compatibleInstructionsFile,
   hasCompatibleHooks
-} from "./chunk-5RSM5DRT.js";
+} from "./chunk-R34RWVN2.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
@@ -49,10 +49,10 @@ import {
   geminiWired,
   hasGeminiHooks,
   planHooks
-} from "./chunk-3VOUWGFF.js";
+} from "./chunk-CUR2DCZN.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-HIIXYZYV.js";
+} from "./chunk-WOSO4YFQ.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -99,13 +99,13 @@ import {
   renderAgentInstructions,
   supportedClaudeEvents,
   vscodePluginMcp
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   formatVersion,
   hookCommandsUseBareNames,
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "./chunk-QFZNPZRO.js";
+} from "./chunk-VTJ4WZOC.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -115,7 +115,7 @@ import {
   HOOK_COMPATIBLE_PROFILES,
   isCompatibleAgentType,
   isRecord
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-BHKODM4L.js → chunk-MOC2DN42.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-4EBJ4PTZ.js";
+} from "./chunk-BWREST4F.js";
 import {
   normalizeInstallSource
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-FS47XZCE.js → chunk-NTMKJRQ3.js}

@@ -1,9 +1,9 @@
 import {
   claudeConfigDir
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   claudePermissionRulesFromSettings
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";

package/dist/{chunk-WSKBXADV.js → chunk-OONMKLUF.js}

@@ -1,21 +1,21 @@
 import {
   UNNAMED_ACTION
-} from "./chunk-7QWH257P.js";
+} from "./chunk-JZT2LPRM.js";
 import {
   askUser,
   isAwayPaused,
   isLocalQuestionHandoff,
   unavailableQuestionUnlessRefused,
   waitForQuestion
-} from "./chunk-CNURORKI.js";
+} from "./chunk-YU5XE6VC.js";
 import {
   getMachineId
-} from "./chunk-4Z7YVVKQ.js";
+} from "./chunk-KS3PNTRT.js";
 import {
   hookWaitClamped,
   hookWaitDeadline,
   scopeBreachReasonOf
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/pushed-question.ts
 var scopeQuestionOf = (verdict) => {

package/dist/{chunk-NQF652IG.js → chunk-PXZTCR4M.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   readJsonSafe
 } from "./chunk-TODDEIYG.js";
 import {
   isRecord
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-V7CS72Q5.js → chunk-PY6CM4NK.js}

@@ -1,19 +1,19 @@
 import {
   APPROVAL_RULES_PATH,
   canChangeApprovalSettings
-} from "./chunk-TKFNIDZK.js";
+} from "./chunk-YZA3YBHX.js";
 import {
   callMcpTool
-} from "./chunk-V53QYJNY.js";
+} from "./chunk-WPBWJMBZ.js";
 import {
   absoluteUrl
-} from "./chunk-DZLLKJJT.js";
+} from "./chunk-YRJZF5RG.js";
 import {
   getBaseUrl
-} from "./chunk-4EBJ4PTZ.js";
+} from "./chunk-BWREST4F.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-R7FSMUHG.js";
+} from "./chunk-6LZ7MXHD.js";
 import {
   AGENT_STOP_DEFAULT_SECONDS,
   APPROVAL_MODE_META,
@@ -21,7 +21,7 @@ import {
   classifyConfirmResponse,
   isAnswerSource,
   roundTripAsk
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-G7G2ZPT4.js → chunk-Q6P7G4NY.js}

@@ -1,20 +1,20 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-SYZF5SDG.js";
+} from "./chunk-GK5X2ZTN.js";
 import {
   nativeClaudeInstallPath
 } from "./chunk-CYTPQDQY.js";
 import {
   grokHome
-} from "./chunk-5RSM5DRT.js";
+} from "./chunk-R34RWVN2.js";
 import {
   claudeConfigDir,
   clineDataDirectory,
   codexHomeFrom
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-KRSZFHNS.js → chunk-QKTF7WS6.js}

@@ -1,12 +1,18 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-HLWS6ADK.js";
+} from "./chunk-ZORBUQFG.js";
+import {
+  HERMES_ALWAYS_ALLOWED_SHELL_RULE,
+  HERMES_COMMAND_ALLOWLIST_KEY,
+  HERMES_GATE_TOOLS_KEY,
+  HERMES_SHELL_TOOL
+} from "./chunk-ZSOCJHL7.js";
 import {
   retryAgentCommand
-} from "./chunk-XWYCFODT.js";
+} from "./chunk-2ELNRGNX.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-R7FSMUHG.js";
+} from "./chunk-6LZ7MXHD.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {
@@ -78,6 +84,8 @@ var describeCodexTrustConfirmation = (confirmation) => {
 // src/hermes/messages.ts
 var HERMES_RESTART_COMMAND = "hermes gateway restart";
 var HERMES_MAC_APP_REPAIR = "open Pushary on this Mac and connect Hermes again";
+var HERMES_GATE_SHELL_FLAG = "--hermes-gate-terminal";
+var hermesGateShellCommand = () => `${retryAgentCommand("hermes")} ${HERMES_GATE_SHELL_FLAG}`;
 var describeHermesInstallFailure = (reason, pluginDirectory, receiptPath) => {
   switch (reason) {
     case "home_unknown":
@@ -118,6 +126,58 @@ var describeHermesState = (state) => {
       return state.runningVersion === state.version ? "Hermes loaded Pushary" : `Hermes runs Pushary ${state.runningVersion ?? "from an older copy"}; restart it to load ${state.version ?? "the new copy"}`;
   }
 };
+var ONLY_LISTED_TOOLS = `Pushary only gates the tools listed in ${HERMES_GATE_TOOLS_KEY}, and ${HERMES_SHELL_TOOL} is not one of them`;
+var SKIP_DOUBTS = {
+  plugin_backend: "A terminal backend from a plugin may tell Hermes to skip its own approvals.",
+  docker_start_folder: "Hermes checks dangerous commands on docker only when it mounts a host folder. docker_mount_cwd_to_workspace mounts the folder Hermes starts in, but not /root or /workspace, so a gateway started there skips the check."
+};
+var shellGateFix = () => `run ${hermesGateShellCommand()}, then ${HERMES_RESTART_COMMAND}`;
+var whyTheShellNeedsAGate = (backend, skip) => skip.kind === "skips" ? `Hermes skips its own dangerous-command approvals on the ${backend} backend, because it treats the container as the boundary.` : SKIP_DOUBTS[skip.doubt];
+var ungatedLabel = (backend, skip) => skip.kind === "skips" ? `Hermes: no dangerous-command approvals reach your phone on the ${backend} backend` : `Hermes: dangerous-command approvals may not reach your phone on the ${backend} backend`;
+var gatedDetail = (backend, skip) => {
+  const why = skip.kind === "skips" ? `Hermes skips its own approvals on the ${backend} backend` : `the ${backend} backend may skip Hermes's own approvals`;
+  return `${why}, and ${HERMES_GATE_TOOLS_KEY} includes ${HERMES_SHELL_TOOL}`;
+};
+var describeHermesShellGate = (state) => {
+  switch (state.kind) {
+    case "hermes_asks":
+      return { tone: "pass", label: "Hermes: checks dangerous commands before running them", detail: `terminal backend ${state.backend}` };
+    case "pushary_gates":
+      return { tone: "pass", label: `Hermes: Pushary gates every ${HERMES_SHELL_TOOL} command`, detail: gatedDetail(state.backend, state.skip) };
+    case "always_allowed":
+      return {
+        tone: "warn",
+        label: `Hermes: ${HERMES_SHELL_TOOL} commands run without asking`,
+        detail: `${HERMES_COMMAND_ALLOWLIST_KEY} holds ${HERMES_ALWAYS_ALLOWED_SHELL_RULE}, which "Always allow" adds, so Hermes lets every ${HERMES_SHELL_TOOL} command through before Pushary is asked`,
+        fix: `remove ${HERMES_ALWAYS_ALLOWED_SHELL_RULE} from ${HERMES_COMMAND_ALLOWLIST_KEY} in your Hermes config.yaml, then ${HERMES_RESTART_COMMAND}`
+      };
+    case "ungated":
+      return {
+        tone: "warn",
+        label: ungatedLabel(state.backend, state.skip),
+        detail: `${whyTheShellNeedsAGate(state.backend, state.skip)} ${ONLY_LISTED_TOOLS}`,
+        fix: shellGateFix()
+      };
+    case "unreadable":
+      return {
+        tone: "note",
+        label: "Hermes: terminal settings unknown",
+        detail: "Hermes did not report its terminal backend or docker mounts through hermes config get in a form Pushary can read, so it cannot say whether Hermes checks dangerous commands"
+      };
+  }
+};
+var describeHermesShellGateFailure = (reason, receiptPath) => {
+  switch (reason) {
+    case "receipt_missing":
+      return `${receiptPath} is missing, so setup cannot record what ${HERMES_GATE_TOOLS_KEY} held before. Run setup again.`;
+    case "receipt_invalid":
+      return `${receiptPath} is unreadable, so setup cannot record what ${HERMES_GATE_TOOLS_KEY} held before. Move it aside, then run setup again.`;
+    case "setting_unreadable":
+      return `${HERMES_GATE_TOOLS_KEY} holds a value setup cannot read as a list of tools, so it was left as it is. Add ${HERMES_SHELL_TOOL} to it yourself with hermes config set ${HERMES_GATE_TOOLS_KEY}.`;
+    case "setting_refused":
+      return `Hermes refused to change ${HERMES_GATE_TOOLS_KEY}. Add ${HERMES_SHELL_TOOL} to it yourself with hermes config set ${HERMES_GATE_TOOLS_KEY}.`;
+  }
+};
 
 export {
   codexTrustOutcome,
@@ -128,8 +188,11 @@ export {
   needsCodexTrustStep,
   describeCodexTrustConfirmation,
   HERMES_RESTART_COMMAND,
+  hermesGateShellCommand,
   describeHermesInstallFailure,
   describeHermesProblems,
   hermesRepairStep,
-  describeHermesState
+  describeHermesState,
+  describeHermesShellGate,
+  describeHermesShellGateFailure
 };

package/dist/{chunk-5RSM5DRT.js → chunk-R34RWVN2.js}

@@ -1,13 +1,13 @@
 import {
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-3VOUWGFF.js";
+} from "./chunk-CUR2DCZN.js";
 import {
   CLAUDE_CODE_AGENT
-} from "./chunk-QGJK3NAR.js";
+} from "./chunk-K2SKUBYY.js";
 import {
   compatibleToolLookup
-} from "./chunk-7QWH257P.js";
+} from "./chunk-JZT2LPRM.js";
 import {
   CLAUDE_HOOK_EVENTS,
   PUSHARY_MCP_URL,
@@ -19,7 +19,7 @@ import {
   isPusharyHook,
   registerHookEntry,
   removeClaudeMcpServers
-} from "./chunk-IG7NGXBS.js";
+} from "./chunk-72LP4RPC.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   PHONE_ANSWERED_TOOLS,
@@ -30,7 +30,7 @@ import {
   pusharyMissingReason,
   refusalOutput,
   withHookHoldBudget
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 
 // src/config-document.ts
 import { parse, stringify } from "smol-toml";
@@ -192,6 +192,7 @@ var AGENT_ENFORCEMENT = {
   fx: NO_HOOK,
   cline: NO_HOOK,
   grok_bot: NO_HOOK,
+  muse: NO_HOOK,
   windsurf: NO_HOOK,
   unknown: NO_HOOK,
   lovable: NO_HOOK,

package/dist/{chunk-FYB6HBHQ.js → chunk-RO6EVL5C.js}

@@ -9,13 +9,13 @@ import {
   installedCodexApp,
   readCodexAppRuntime,
   shellQuoted
-} from "./chunk-44Z6MQZ2.js";
+} from "./chunk-KGFB2LEB.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-ZF4CPOO7.js";
+} from "./chunk-WH4ODOCE.js";
 import {
   writeFileAtomic
 } from "./chunk-TODDEIYG.js";