pushary 1.9.20 → 1.9.22

package/dist/{chunk-XJGGGDHX.js → chunk-U2IEM5FF.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-YJWEQZJC.js";
+} from "./chunk-E7EOUEGQ.js";
 import {
   writeFileAtomic
-} from "./chunk-FT7UNIS3.js";
+} from "./chunk-AQFEP65J.js";
 
 // src/identity.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-XVNZHIVF.js → chunk-U4OWRGYI.js}

@@ -1,15 +1,15 @@
 import {
   compatibleConfigFile
-} from "./chunk-DF2FSJ7B.js";
+} from "./chunk-6TSEEKPL.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-Q4EQHBA7.js";
+} from "./chunk-TSFNX5J2.js";
 import {
   AGENT_CHOICES
-} from "./chunk-YONHM5BQ.js";
+} from "./chunk-U26CAOZC.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -18,17 +18,18 @@ import {
   guardedArgv,
   pusharyDir,
   vscodePluginDir
-} from "./chunk-YJWEQZJC.js";
+} from "./chunk-E7EOUEGQ.js";
 import {
   readJsonSafe
-} from "./chunk-FT7UNIS3.js";
+} from "./chunk-AQFEP65J.js";
 import {
   HOOK_BUDGETS,
   HOOK_COMPATIBLE_PROFILES,
   HOOK_LOCATOR_BINARY,
   OPENCODE_APPROVAL_EVENT,
-  hookCompatibleProfile
-} from "./chunk-6HMCOGKJ.js";
+  hookCompatibleProfile,
+  isRecord
+} from "./chunk-GFXZDU4V.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";
@@ -436,7 +437,7 @@ var agentHookOwner = (agent, appAvailable) => {
   const file = agentHookFile(agent);
   if (!file) return "none";
   const document = readJsonSafe(file);
-  return hookOwnerOf(document.kind === "ok" ? document.value : null, appAvailable, agentHooksKeyPath(agent));
+  return hookOwnerOf(document.kind === "ok" && isRecord(document.value) ? document.value : null, appAvailable, agentHooksKeyPath(agent));
 };
 var cliOwnsAnyAgentHooks = (appAvailable) => AGENT_CHOICES.some((agent) => agentHookOwner(agent, appAvailable) === "cli");
 var macAppBridgeAvailable = () => resolveBridgeStub(join2(pusharyDir(), "bin", HOOK_LOCATOR_BINARY), liveBridgeProbe()).kind === "bundle";

package/dist/{chunk-DQTBQHB5.js → chunk-UFGU7AK3.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-YJWEQZJC.js";
+} from "./chunk-E7EOUEGQ.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-6HMCOGKJ.js";
+} from "./chunk-GFXZDU4V.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;

package/dist/{chunk-6WEC3KZP.js → chunk-VTR4VRL2.js}

@@ -1,6 +1,6 @@
 import {
   writeJsonAtomicDurable
-} from "./chunk-FT7UNIS3.js";
+} from "./chunk-AQFEP65J.js";
 
 // src/transcript-recipient-pin.ts
 import { existsSync, mkdirSync, readFileSync, rmSync } from "fs";

package/dist/{chunk-RZCTGLUJ.js → chunk-WAKQYJ6T.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-XJGGGDHX.js";
+} from "./chunk-U2IEM5FF.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-XQ4HTTBB.js";
+} from "./chunk-75MJRC5I.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-6HMCOGKJ.js";
+} from "./chunk-GFXZDU4V.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-2V2CCTGQ.js → chunk-WE2RVY7V.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-4ABHSCFJ.js";
+} from "./chunk-6IOLTFNP.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-N5K5H2AQ.js → chunk-XDTYGS6R.js}

@@ -1,21 +1,21 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-UVEIBBTR.js";
+} from "./chunk-BDGKWUK2.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-4ABHSCFJ.js";
+} from "./chunk-6IOLTFNP.js";
 import {
   NpmMissingError,
   NpmPermissionError
-} from "./chunk-YJWEQZJC.js";
+} from "./chunk-E7EOUEGQ.js";
 import {
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-FT7UNIS3.js";
+} from "./chunk-AQFEP65J.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LHGB64O2.js";
+} from "./chunk-TZWZVAMN.js";
 
 // src/instruction-file.ts
 import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";

package/dist/{chunk-VOIN2NZW.js → chunk-YGR5PBOF.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-CRW4P7JU.js";
+} from "./chunk-BDV4WDIA.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-YJWEQZJC.js";
+} from "./chunk-E7EOUEGQ.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-6HMCOGKJ.js";
+} from "./chunk-GFXZDU4V.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-Z4YQ7ZMO.js → chunk-YI543EKI.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-YONHM5BQ.js";
+} from "./chunk-U26CAOZC.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LHGB64O2.js";
+} from "./chunk-TZWZVAMN.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-6HMCOGKJ.js";
+} from "./chunk-GFXZDU4V.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-2YAHQ763.js → chunk-YODL2CJV.js}

@@ -1,12 +1,13 @@
 import {
   findExportedKeyLine,
+  isAdoptedMacAppKey,
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-4ABHSCFJ.js";
+} from "./chunk-6IOLTFNP.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LHGB64O2.js";
+} from "./chunk-TZWZVAMN.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {
@@ -18,15 +19,14 @@ var VERDICT_BY_CHECK = {
 };
 var activeKeyVerdictOf = (check) => check === null ? "unchecked" : VERDICT_BY_CHECK[check.kind];
 var NOT_SIGNED_OUT = { kind: "none" };
-var isMacAppKey = (key, macAppKeyPrefix) => keyPrefix(key) === macAppKeyPrefix;
 var diagnoseSignedOutKey = (evidence) => {
   const adopted = evidence.macAppKeyPrefix;
   if (evidence.configKey !== null || adopted === null) return NOT_SIGNED_OUT;
   if (evidence.activeKey !== null) {
-    if (!isMacAppKey(evidence.activeKey, adopted) || evidence.activeKeyVerdict === "accepted") return NOT_SIGNED_OUT;
+    if (!isAdoptedMacAppKey(evidence.activeKey, adopted) || evidence.activeKeyVerdict === "accepted") return NOT_SIGNED_OUT;
   }
   const exported = evidence.exportedKey;
-  return { kind: "signed_out_on_mac", deadExport: exported && isMacAppKey(exported.key, adopted) ? exported : null };
+  return { kind: "signed_out_on_mac", deadExport: exported && isAdoptedMacAppKey(exported.key, adopted) ? exported : null };
 };
 var SIGNED_OUT_ON_MAC_MESSAGE = "This computer used the key the Pushary Mac app signed in with, and it was signed out on this Mac, so it no longer works here.";
 var describeSignedOutKey = (diagnosis) => [

package/dist/{chunk-OZOD37XK.js → chunk-YPZ4AE2R.js}

@@ -1,18 +1,18 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-XVNZHIVF.js";
+} from "./chunk-U4OWRGYI.js";
 import {
   keyPrefix
-} from "./chunk-4ABHSCFJ.js";
+} from "./chunk-6IOLTFNP.js";
 import {
   bridgeAgentKey
-} from "./chunk-YJWEQZJC.js";
+} from "./chunk-E7EOUEGQ.js";
 import {
   readJsonSafe
-} from "./chunk-FT7UNIS3.js";
+} from "./chunk-AQFEP65J.js";
 import {
   isValidApiKey
-} from "./chunk-6HMCOGKJ.js";
+} from "./chunk-GFXZDU4V.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-BIQF3C4H.js → chunk-YR3DHPYI.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-XQ4HTTBB.js";
+} from "./chunk-75MJRC5I.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-EP6FWWBY.js → chunk-Z7KB4R6U.js}

@@ -1,6 +1,6 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-XDKZZSU6.js";
+} from "./chunk-KCXG2INQ.js";
 import {
   detectClaudeVersion
 } from "./chunk-RIVNNBEK.js";
@@ -12,12 +12,12 @@ import {
   openCodeHookArgv,
   openCodePluginDir,
   openCodeWired
-} from "./chunk-XVNZHIVF.js";
+} from "./chunk-U4OWRGYI.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-DF2FSJ7B.js";
+} from "./chunk-6TSEEKPL.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
@@ -25,7 +25,7 @@ import {
   codexWired,
   geminiWired,
   planHooks
-} from "./chunk-Q4EQHBA7.js";
+} from "./chunk-TSFNX5J2.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -36,7 +36,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-VOIN2NZW.js";
+} from "./chunk-YGR5PBOF.js";
 import {
   formatVersion
 } from "./chunk-6ICPEJY5.js";
@@ -59,12 +59,15 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-YJWEQZJC.js";
+} from "./chunk-E7EOUEGQ.js";
 import {
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-FT7UNIS3.js";
+} from "./chunk-AQFEP65J.js";
+import {
+  isRecord
+} from "./chunk-GFXZDU4V.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";
@@ -111,7 +114,7 @@ var CLAUDE_SETTINGS = join(homedir(), ".claude", "settings.json");
 var CLAUDE_JSON = join(homedir(), ".claude.json");
 var readJson = (filePath) => {
   const result = readJsonSafe(filePath);
-  if (result.kind === "ok") return result.value;
+  if (result.kind === "ok") return isRecord(result.value) ? result.value : null;
   if (result.kind === "missing") return {};
   return null;
 };

package/dist/{chunk-R7SSVBHX.js → chunk-ZUOIDI6M.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-2YAHQ763.js";
+} from "./chunk-YODL2CJV.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
 import {
   readKeySource
-} from "./chunk-4ABHSCFJ.js";
+} from "./chunk-6IOLTFNP.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-NESTNKCA.js";
+} from "./chunk-NB2PY5JX.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-XQ4HTTBB.js";
+} from "./chunk-75MJRC5I.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{global-upgrade-EELV2YEK.js → global-upgrade-F3QY6OHE.js}

@@ -5,15 +5,15 @@ import {
   readGlobalUpgradeSubject,
   upgradeInstalledPackage,
   withUpgradeLock
-} from "./chunk-6W6UY4AJ.js";
-import "./chunk-P77EIWBJ.js";
-import "./chunk-LB4HVID5.js";
+} from "./chunk-JQVGCDHW.js";
+import "./chunk-4PERN2SO.js";
+import "./chunk-GWKT2ZZS.js";
 import "./chunk-POFBE6ZY.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-YJWEQZJC.js";
-import "./chunk-FT7UNIS3.js";
-import "./chunk-LHGB64O2.js";
-import "./chunk-6HMCOGKJ.js";
+import "./chunk-E7EOUEGQ.js";
+import "./chunk-AQFEP65J.js";
+import "./chunk-TZWZVAMN.js";
+import "./chunk-GFXZDU4V.js";
 export {
   finishGlobalUpgrade,
   finishUpgradeWithLock,

package/dist/{paths-MDOKPY7A.js → paths-CBEAZNJR.js}

@@ -32,8 +32,8 @@ import {
   pusharyDir,
   vscodePluginDir,
   vscodePluginMcp
-} from "./chunk-YJWEQZJC.js";
-import "./chunk-6HMCOGKJ.js";
+} from "./chunk-E7EOUEGQ.js";
+import "./chunk-GFXZDU4V.js";
 export {
   autoUpdateLock,
   autoUpdateLog,

package/dist/{reapply-22C75UEY.js → reapply-4HP6N7LY.js}

@@ -10,34 +10,34 @@ import {
   reapplyOpenCodePlugin,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-EP6FWWBY.js";
-import "./chunk-XDKZZSU6.js";
+} from "./chunk-Z7KB4R6U.js";
+import "./chunk-KCXG2INQ.js";
 import "./chunk-RIVNNBEK.js";
 import "./chunk-XHKBHWLX.js";
-import "./chunk-XVNZHIVF.js";
-import "./chunk-DF2FSJ7B.js";
-import "./chunk-Q4EQHBA7.js";
-import "./chunk-VOIN2NZW.js";
-import "./chunk-YONHM5BQ.js";
-import "./chunk-MMIN6VNU.js";
+import "./chunk-U4OWRGYI.js";
+import "./chunk-6TSEEKPL.js";
+import "./chunk-TSFNX5J2.js";
+import "./chunk-YGR5PBOF.js";
+import "./chunk-U26CAOZC.js";
+import "./chunk-OZVZGWER.js";
 import "./chunk-GMXKITVA.js";
 import "./chunk-6ICPEJY5.js";
-import "./chunk-CW4CF7NU.js";
-import "./chunk-CRW4P7JU.js";
-import "./chunk-K5PUP76V.js";
+import "./chunk-CW3QUV6B.js";
+import "./chunk-BDV4WDIA.js";
+import "./chunk-AGIO7SF5.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-HILWD7WM.js";
-import "./chunk-NESTNKCA.js";
-import "./chunk-RZCTGLUJ.js";
-import "./chunk-XJGGGDHX.js";
+import "./chunk-6SFTI7LM.js";
+import "./chunk-NB2PY5JX.js";
+import "./chunk-WAKQYJ6T.js";
+import "./chunk-U2IEM5FF.js";
 import "./chunk-7QLSKOSU.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-MID7BURF.js";
-import "./chunk-YJWEQZJC.js";
-import "./chunk-FT7UNIS3.js";
-import "./chunk-XQ4HTTBB.js";
-import "./chunk-LHGB64O2.js";
-import "./chunk-6HMCOGKJ.js";
+import "./chunk-5TLRS3AK.js";
+import "./chunk-E7EOUEGQ.js";
+import "./chunk-AQFEP65J.js";
+import "./chunk-75MJRC5I.js";
+import "./chunk-TZWZVAMN.js";
+import "./chunk-GFXZDU4V.js";
 export {
   ensureCodexTrustAfterReapply,
   inspectConfiguredManagedProviders,

package/dist/src/index.d.ts

@@ -159,6 +159,7 @@ interface AskUserParams {
     waitEndsAt?: string;
     requestId?: string;
     sessionToolAware?: true;
+    permissionMode?: unknown;
     localSurfaceAvailable?: false;
 }
 interface AskUserResponse {

package/dist/src/index.js

@@ -1,14 +1,14 @@
 import {
   handlePreToolUse
-} from "../chunk-DNSYWI7D.js";
-import "../chunk-DBEJIFJD.js";
-import "../chunk-736I6CBY.js";
-import "../chunk-6I4D3XZ3.js";
+} from "../chunk-TH3HKKGW.js";
+import "../chunk-AR4NXO4Q.js";
+import "../chunk-T57BCGHQ.js";
+import "../chunk-P345G4DK.js";
 import {
   fetchAccountPublicKey
-} from "../chunk-ATDOYZXC.js";
-import "../chunk-DF2FSJ7B.js";
-import "../chunk-VOIN2NZW.js";
+} from "../chunk-GNQZY4GL.js";
+import "../chunk-6TSEEKPL.js";
+import "../chunk-YGR5PBOF.js";
 import "../chunk-6ICPEJY5.js";
 import {
   fetchModeOverride,
@@ -18,31 +18,31 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-CW4CF7NU.js";
-import "../chunk-CRW4P7JU.js";
+} from "../chunk-CW3QUV6B.js";
+import "../chunk-BDV4WDIA.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
-} from "../chunk-K5PUP76V.js";
+} from "../chunk-AGIO7SF5.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-HILWD7WM.js";
-import "../chunk-NESTNKCA.js";
-import "../chunk-RZCTGLUJ.js";
-import "../chunk-XJGGGDHX.js";
+import "../chunk-6SFTI7LM.js";
+import "../chunk-NB2PY5JX.js";
+import "../chunk-WAKQYJ6T.js";
+import "../chunk-U2IEM5FF.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-MID7BURF.js";
-import "../chunk-YJWEQZJC.js";
-import "../chunk-FT7UNIS3.js";
+import "../chunk-5TLRS3AK.js";
+import "../chunk-E7EOUEGQ.js";
+import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-XQ4HTTBB.js";
-import "../chunk-LHGB64O2.js";
+} from "../chunk-75MJRC5I.js";
+import "../chunk-TZWZVAMN.js";
 import {
   resolvePolicy
-} from "../chunk-6HMCOGKJ.js";
+} from "../chunk-GFXZDU4V.js";
 export {
   askUser,
   cancelQuestion,

package/dist/{upgrade-lock-VPL5AYPQ.js → upgrade-lock-N3G5V2QS.js}

@@ -5,10 +5,10 @@ import {
   installWithUpgradeLock,
   ownsUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-P77EIWBJ.js";
-import "./chunk-YJWEQZJC.js";
-import "./chunk-FT7UNIS3.js";
-import "./chunk-6HMCOGKJ.js";
+} from "./chunk-4PERN2SO.js";
+import "./chunk-E7EOUEGQ.js";
+import "./chunk-AQFEP65J.js";
+import "./chunk-GFXZDU4V.js";
 export {
   claimUpgradeLock,
   finishWithUpgradeLock,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pushary",
-  "version": "1.9.20",
+  "version": "1.9.22",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",