pushary 1.9.21 → 1.9.23

package/dist/bin/pushary-upgrade.js

@@ -9,27 +9,27 @@ import {
   upgradeFinishOutcome,
   upgradeInstalledPackage,
   withUpgradeLock
-} from "../chunk-2V55RBUR.js";
+} from "../chunk-I46QTKYI.js";
 import {
   installWithUpgradeLock
-} from "../chunk-VRXX2AY2.js";
+} from "../chunk-JCEUDLGW.js";
 import {
   ensureCodexTrustAfterReapply,
   reapplyAllAgents
-} from "../chunk-FUXCWF4Y.js";
+} from "../chunk-ISAKLEKE.js";
 import {
   describeCodexTrustConfirmation
-} from "../chunk-RVP6COOQ.js";
-import "../chunk-Y6PZ3B5U.js";
+} from "../chunk-HXZG5WHU.js";
+import "../chunk-RHIKMNWJ.js";
 import {
   waitForMachineReadiness
-} from "../chunk-IIQ77WUJ.js";
+} from "../chunk-PFB7P4F3.js";
 import {
   detectProviderLiveCapabilities,
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-Z5EYCMJH.js";
+} from "../chunk-7J2AX5T6.js";
 import "../chunk-RIVNNBEK.js";
 import {
   AUTO_UPDATE_DISABLE_ENV,
@@ -40,7 +40,7 @@ import {
   parseAutoUpdateFlag,
   readAutoUpdateState,
   updateAutoUpdateState
-} from "../chunk-5PW6GMQO.js";
+} from "../chunk-USUI4P63.js";
 import {
   DAEMON_COLD_START_TIMEOUT_MS,
   daemonHasRemoteProof,
@@ -52,39 +52,39 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-L5NPRGVE.js";
+} from "../chunk-SSWK2WYX.js";
 import "../chunk-XHKBHWLX.js";
 import {
   readMacAppAgentKey
-} from "../chunk-4RJQPI36.js";
-import "../chunk-BERMVODT.js";
+} from "../chunk-6GHZAS7S.js";
+import "../chunk-ZGYO6OQE.js";
 import {
   exitOnHelpFlag
-} from "../chunk-BV5JPACQ.js";
-import "../chunk-BDL6GJOQ.js";
-import "../chunk-PYWZYM74.js";
-import "../chunk-YLLGKY7K.js";
-import "../chunk-247PAUW6.js";
-import "../chunk-AXBFNQG6.js";
+} from "../chunk-FIYCICHC.js";
+import "../chunk-K2EYK5RL.js";
+import "../chunk-A5U62Q6K.js";
+import "../chunk-7RGEJOQS.js";
+import "../chunk-R5C3QCVT.js";
+import "../chunk-AFP3HZVK.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
 import {
   readControlMode,
   recordMacAppKeyPrefix
-} from "../chunk-FH4O3QGQ.js";
-import "../chunk-YCL2V5FD.js";
-import "../chunk-JHAPJRAN.js";
-import "../chunk-Y2BOLNJV.js";
+} from "../chunk-AQ3TSQA2.js";
+import "../chunk-GYP6DLA4.js";
+import "../chunk-KJA6IGOZ.js";
+import "../chunk-4GKQDFH6.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-ZNAGS7O7.js";
-import "../chunk-UZ2YEGIT.js";
-import "../chunk-TBCXMW2C.js";
-import "../chunk-NBGJ3EOE.js";
+import "../chunk-E2LGKG75.js";
+import "../chunk-Z4UDB7EC.js";
+import "../chunk-XBETSM5T.js";
+import "../chunk-EDN4F6GX.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
+import "../chunk-6HT2TUZD.js";
 import {
   LATEST_TAG,
   autoUpdateState,
@@ -94,19 +94,19 @@ import {
   fetchLatestPublishedVersion,
   geminiSettings,
   vscodePluginDir
-} from "../chunk-CEF4UQ3X.js";
+} from "../chunk-QIODXPTP.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "../chunk-4WHNRAOK.js";
+} from "../chunk-OQPEHKH2.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-B6KZME5D.js";
+} from "../chunk-LEQRIJ4H.js";
 import {
   CANONICAL_PACKAGE,
   LEGACY_PACKAGE,
   getPackageVersion
-} from "../chunk-VBPASZU7.js";
+} from "../chunk-OH647UT3.js";
 
 // bin/pushary-upgrade.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-wait.js

@@ -4,36 +4,36 @@ import {
 } from "../chunk-CVWG2N3Y.js";
 import {
   exitOnFailedSettingsRequest
-} from "../chunk-SVQOEVAT.js";
-import "../chunk-I52ALHOM.js";
+} from "../chunk-S2R2U5W5.js";
+import "../chunk-SLBO7PHS.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-BV5JPACQ.js";
+} from "../chunk-FIYCICHC.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-FH4O3QGQ.js";
-import "../chunk-UZ2YEGIT.js";
-import "../chunk-TBCXMW2C.js";
-import "../chunk-NBGJ3EOE.js";
+import "../chunk-AQ3TSQA2.js";
+import "../chunk-Z4UDB7EC.js";
+import "../chunk-XBETSM5T.js";
+import "../chunk-EDN4F6GX.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
-import "../chunk-CEF4UQ3X.js";
+import "../chunk-6HT2TUZD.js";
+import "../chunk-QIODXPTP.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-4WHNRAOK.js";
-import "../chunk-B6KZME5D.js";
-import "../chunk-VBPASZU7.js";
+} from "../chunk-OQPEHKH2.js";
+import "../chunk-LEQRIJ4H.js";
+import "../chunk-OH647UT3.js";
 
 // bin/pushary-wait.ts
 exitOnHelpFlag("wait");

package/dist/bin/pushary.js

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
 import {
   installNetworkDefaults
-} from "../chunk-TBCXMW2C.js";
-import "../chunk-NBGJ3EOE.js";
+} from "../chunk-XBETSM5T.js";
+import "../chunk-EDN4F6GX.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-CEF4UQ3X.js";
+import "../chunk-QIODXPTP.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-4WHNRAOK.js";
+import "../chunk-OQPEHKH2.js";
 import {
   COMMANDS,
   renderHelp,
   resolveCommandName
-} from "../chunk-B6KZME5D.js";
+} from "../chunk-LEQRIJ4H.js";
 import {
   getPackageVersion
-} from "../chunk-VBPASZU7.js";
+} from "../chunk-OH647UT3.js";
 
 // src/cli/runtime.ts
 var supportsRuntime = (version) => {

package/dist/{chunk-U6GYFWT4.js → chunk-2AUKCSLQ.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-BDL6GJOQ.js";
+} from "./chunk-K2EYK5RL.js";
 import {
   pusharyHookExecutable
-} from "./chunk-PYWZYM74.js";
+} from "./chunk-A5U62Q6K.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   isRecord
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-Y2BOLNJV.js → chunk-4GKQDFH6.js}

@@ -5,26 +5,27 @@ import {
 import {
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-ZNAGS7O7.js";
+} from "./chunk-E2LGKG75.js";
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-TBCXMW2C.js";
+} from "./chunk-XBETSM5T.js";
 import {
   clientReportClaims
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-4WHNRAOK.js";
+} from "./chunk-OQPEHKH2.js";
 import {
   ASK_AGENT_NAME_MAX,
   ASK_QUESTION_MAX,
   CLIENT_REPORT_PATH,
   DECISION_LINE_MAX,
+  GATE_PERMISSION_MODE_MAX_LENGTH,
   degradedLine,
   truncateLine
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/client-report-claim.ts
 import { createHash } from "crypto";
@@ -190,13 +191,15 @@ var unavailableQuestionUnlessSubscriptionRequired = (error) => {
   return { correlationId: "", status: "unavailable" };
 };
 var truncateOptional = (text, max) => text === void 0 ? void 0 : truncateLine(text, max);
+var boundedPermissionMode = (value) => typeof value === "string" && value.length > 0 ? value.slice(0, GATE_PERMISSION_MODE_MAX_LENGTH) : void 0;
 var withinAskUserLimits = (params) => ({
   ...params,
   question: truncateLine(params.question, ASK_QUESTION_MAX),
   agentName: truncateOptional(params.agentName, ASK_AGENT_NAME_MAX),
   intent: truncateOptional(params.intent, DECISION_LINE_MAX),
   action: truncateOptional(params.action, DECISION_LINE_MAX),
-  blocker: truncateOptional(params.blocker, DECISION_LINE_MAX)
+  blocker: truncateOptional(params.blocker, DECISION_LINE_MAX),
+  permissionMode: boundedPermissionMode(params.permissionMode)
 });
 var askUser = async (apiKey, params, timeoutMs = 15e3) => {
   const identified = params.toolUseId || params.requestId ? params : { ...params, requestId: randomUUID() };

package/dist/{chunk-4RJQPI36.js → chunk-6GHZAS7S.js}

@@ -1,18 +1,18 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-BERMVODT.js";
+} from "./chunk-ZGYO6OQE.js";
 import {
   keyPrefix
-} from "./chunk-FH4O3QGQ.js";
+} from "./chunk-AQ3TSQA2.js";
 import {
   bridgeAgentKey
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   readJsonSafe
 } from "./chunk-AQFEP65J.js";
 import {
   isValidApiKey
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-NVXC6ZBR.js → chunk-6HT2TUZD.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-4WHNRAOK.js";
+} from "./chunk-OQPEHKH2.js";
 import {
   normalizeInstallSource
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-LUDGBOLV.js → chunk-73HGV4R6.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-6WINXCXY.js";
+} from "./chunk-N4DMADJM.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-IM7EGZVH.js";
+} from "./chunk-QFNY4KUQ.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-Z5EYCMJH.js → chunk-7J2AX5T6.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;

package/dist/{chunk-YLLGKY7K.js → chunk-7RGEJOQS.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-JHAPJRAN.js";
+} from "./chunk-KJA6IGOZ.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-PYWZYM74.js → chunk-A5U62Q6K.js}

@@ -2,23 +2,23 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-YLLGKY7K.js";
+} from "./chunk-7RGEJOQS.js";
 import {
   AGENT_CHOICES
-} from "./chunk-247PAUW6.js";
+} from "./chunk-R5C3QCVT.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-AXBFNQG6.js";
+} from "./chunk-AFP3HZVK.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-AXBFNQG6.js → chunk-AFP3HZVK.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-FH4O3QGQ.js → chunk-AQ3TSQA2.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-NVXC6ZBR.js";
+} from "./chunk-6HT2TUZD.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,11 +9,11 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   configFilePath
-} from "./chunk-4WHNRAOK.js";
+} from "./chunk-OQPEHKH2.js";
 import {
   API_KEY_PREFIX_PATTERN,
   isRecord
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-TJ4KMPYO.js → chunk-AV5VX7OK.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-VTR4VRL2.js";
 import {
   ensureDaemonRunning
-} from "./chunk-L5NPRGVE.js";
+} from "./chunk-SSWK2WYX.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-6WINXCXY.js";
+} from "./chunk-N4DMADJM.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-IM7EGZVH.js";
+} from "./chunk-QFNY4KUQ.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-6WBIQQHO.js";
+} from "./chunk-M6R3SZZS.js";
 import {
   hookOwnerOf
-} from "./chunk-PYWZYM74.js";
+} from "./chunk-A5U62Q6K.js";
 import {
   readTranscriptPreference
-} from "./chunk-FH4O3QGQ.js";
+} from "./chunk-AQ3TSQA2.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   writeJsonAtomic
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-4WHNRAOK.js";
+} from "./chunk-OQPEHKH2.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-QHY3UDYC.js → chunk-AXSHPFU3.js}

@@ -1,13 +1,13 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-BERMVODT.js";
+} from "./chunk-ZGYO6OQE.js";
 import {
   codexHomeFrom,
   resolvePathBinary
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-PCF7JUTP.js → chunk-BY5EKA6W.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-247PAUW6.js";
+} from "./chunk-R5C3QCVT.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-B6KZME5D.js";
+} from "./chunk-LEQRIJ4H.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-7AFLHL2R.js → chunk-CJTQNUUT.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   readJsonSafe
 } from "./chunk-AQFEP65J.js";
 import {
   isRecord
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-TVBEHME2.js → chunk-DKBPNHAI.js}

@@ -14,19 +14,19 @@ import {
 } from "./chunk-FO3MDD26.js";
 import {
   callMcpTool
-} from "./chunk-ZNAGS7O7.js";
+} from "./chunk-E2LGKG75.js";
 import {
   reportedInstallSource
-} from "./chunk-NVXC6ZBR.js";
+} from "./chunk-6HT2TUZD.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-B6KZME5D.js";
+} from "./chunk-LEQRIJ4H.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS,
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-ZNAGS7O7.js → chunk-E2LGKG75.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-UZ2YEGIT.js";
+} from "./chunk-Z4UDB7EC.js";
 import {
   installNetworkDefaults
-} from "./chunk-TBCXMW2C.js";
+} from "./chunk-XBETSM5T.js";
 import {
   getBaseUrl
-} from "./chunk-4WHNRAOK.js";
+} from "./chunk-OQPEHKH2.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-NBGJ3EOE.js → chunk-EDN4F6GX.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   writeFileAtomic
 } from "./chunk-AQFEP65J.js";

package/dist/{chunk-G4TV5GYU.js → chunk-FBV2KS3Z.js}

@@ -6,12 +6,12 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-YCL2V5FD.js";
+} from "./chunk-GYP6DLA4.js";
 import {
   machineDecisionFor,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-BV5JPACQ.js → chunk-FIYCICHC.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-B6KZME5D.js";
+} from "./chunk-LEQRIJ4H.js";
 import {
   getPackageVersion
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-UKCRTTKF.js → chunk-GN6BJXC7.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";