pushary 1.9.21 → 1.9.23

package/dist/{chunk-YCL2V5FD.js → chunk-GYP6DLA4.js}

@@ -2,7 +2,7 @@ import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-JHAPJRAN.js";
+} from "./chunk-KJA6IGOZ.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -10,26 +10,26 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-Y2BOLNJV.js";
+} from "./chunk-4GKQDFH6.js";
 import {
   withRetry
-} from "./chunk-ZNAGS7O7.js";
+} from "./chunk-E2LGKG75.js";
 import {
   getMachineId
-} from "./chunk-NBGJ3EOE.js";
+} from "./chunk-EDN4F6GX.js";
 import {
   reportedInstallSource
-} from "./chunk-NVXC6ZBR.js";
+} from "./chunk-6HT2TUZD.js";
 import {
   canonicalJson
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   writeFileAtomic
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-4WHNRAOK.js";
+} from "./chunk-OQPEHKH2.js";
 import {
   ACTION_BODY_MAX,
   AGENT_LABELS_BY_TYPE,
@@ -60,7 +60,7 @@ import {
   resolvePolicy,
   toToolLookup,
   truncateLine
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";
@@ -204,6 +204,7 @@ var parseApplyPatchOps = (command) => {
   return ops;
 };
 var parseApplyPatchFiles = (command) => [...new Set(parseApplyPatchOps(command).map((entry) => entry.path))];
+var patchDeletesFiles = (toolName, toolInput) => toolName === "apply_patch" && parseApplyPatchOps(toolInput.command).some((entry) => entry.op === "delete");
 var OPENCODE_TOOL_NAMES = {
   bash: "Bash",
   // A shell command reaching outside the worktree asks a second time under its
@@ -1359,7 +1360,6 @@ var toCodexWire = (event, decision) => {
     decision.kind === "deny" ? decision.reason : void 0
   ) ?? null;
 };
-var patchDeletesFiles = (toolName, toolInput) => toolName === "apply_patch" && parseApplyPatchOps(toolInput.command).some((entry) => entry.op === "delete");
 var describeApplyPatch = (command) => {
   const ops = parseApplyPatchOps(command);
   if (ops.length === 0) return null;
@@ -2246,6 +2246,7 @@ export {
   describeToolCall,
   deriveToolTarget,
   parseApplyPatchFiles,
+  patchDeletesFiles,
   OPENCODE_TOOL_NAMES,
   canonicalGateInputs,
   scopePathFor,
@@ -2279,7 +2280,6 @@ export {
   codexDeny,
   codexPass,
   toCodexWire,
-  patchDeletesFiles,
   describeApplyPatch,
   toPolicyLookup,
   toPolicyLookups,

package/dist/{chunk-RVP6COOQ.js → chunk-HXZG5WHU.js}

@@ -1,9 +1,9 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-Y6PZ3B5U.js";
+} from "./chunk-RHIKMNWJ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-B6KZME5D.js";
+} from "./chunk-LEQRIJ4H.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-2V55RBUR.js → chunk-I46QTKYI.js}

@@ -4,7 +4,7 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-VRXX2AY2.js";
+} from "./chunk-JCEUDLGW.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -14,7 +14,7 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-5PW6GMQO.js";
+} from "./chunk-USUI4P63.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
@@ -27,10 +27,10 @@ import {
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-B6KZME5D.js";
+} from "./chunk-LEQRIJ4H.js";
 import {
   commandsPackage,
   globalUpgradeEntry,
@@ -39,7 +39,7 @@ import {
   isSameMajorVersion,
   ownPackageRoot,
   packageVersionAt
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/global-upgrade.ts
 import { existsSync } from "fs";

package/dist/{chunk-FUXCWF4Y.js → chunk-ISAKLEKE.js}

@@ -1,6 +1,6 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-Y6PZ3B5U.js";
+} from "./chunk-RHIKMNWJ.js";
 import {
   detectClaudeVersion
 } from "./chunk-RIVNNBEK.js";
@@ -12,12 +12,12 @@ import {
   openCodeHookArgv,
   openCodePluginDir,
   openCodeWired
-} from "./chunk-BERMVODT.js";
+} from "./chunk-ZGYO6OQE.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-BDL6GJOQ.js";
+} from "./chunk-K2EYK5RL.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
@@ -25,7 +25,7 @@ import {
   codexWired,
   geminiWired,
   planHooks
-} from "./chunk-PYWZYM74.js";
+} from "./chunk-A5U62Q6K.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -36,7 +36,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-YLLGKY7K.js";
+} from "./chunk-7RGEJOQS.js";
 import {
   formatVersion
 } from "./chunk-6ICPEJY5.js";
@@ -59,7 +59,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -67,7 +67,7 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   isRecord
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-VRXX2AY2.js → chunk-JCEUDLGW.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   writeJsonAtomic
 } from "./chunk-AQFEP65J.js";

package/dist/{chunk-TQIPIFL7.js → chunk-JNKHCGHR.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-BDL6GJOQ.js → chunk-K2EYK5RL.js}

@@ -3,18 +3,18 @@ import {
   addGeminiMcpServer,
   removeGeminiMcpServer,
   supportedClaudeEvents
-} from "./chunk-YLLGKY7K.js";
+} from "./chunk-7RGEJOQS.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-YCL2V5FD.js";
+} from "./chunk-GYP6DLA4.js";
 import {
   guardBinary,
   guardBinaryRefusing,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   HOOK_LOCATOR_BINARY,
   PHONE_ANSWERED_TOOLS,
@@ -24,7 +24,7 @@ import {
   refusalOutput,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-JHAPJRAN.js → chunk-KJA6IGOZ.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-B6KZME5D.js → chunk-LEQRIJ4H.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {

package/dist/{chunk-6WBIQQHO.js → chunk-M6R3SZZS.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-FH4O3QGQ.js";
+} from "./chunk-AQ3TSQA2.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-PCVAK67W.js → chunk-M7DCI44L.js}

@@ -1,13 +1,8 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-YCL2V5FD.js";
+} from "./chunk-GYP6DLA4.js";
 
 // src/answer.ts
-var denyReasonFrom = (value, note) => {
-  const trimmed = note?.trim();
-  if (trimmed) return `Denied from your phone: ${trimmed}`;
-  return value && value !== "no" && value !== "yes" ? `Denied from your phone: ${value}` : "Denied via push notification";
-};
 var isDeferAnswer = (value) => value === "defer";
 
 // src/session-notice.ts
@@ -38,7 +33,6 @@ var announceSubscriptionRequired = (upgradeUrl, sessionId) => {
 };
 
 export {
-  denyReasonFrom,
   isDeferAnswer,
   oncePerSession,
   announceSubscriptionRequired

package/dist/{chunk-6WINXCXY.js → chunk-N4DMADJM.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-IEYFFMTU.js → chunk-NHBPW6C4.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   readJsonSafe,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-XNO3CSVW.js → chunk-NSCETODW.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-4WHNRAOK.js";
+} from "./chunk-OQPEHKH2.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-VBPASZU7.js → chunk-OH647UT3.js}

@@ -102,7 +102,7 @@ var AGENTS = {
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
     setupCommand: PUSHARY_SETUP_COMMAND,
-    enforcementDetail: "Shell, writes and edits through native BeforeTool hooks."
+    enforcementDetail: "Shell, writes, edits and MCP calls through native BeforeTool hooks."
   },
   hermes: {
     ...defaults,
@@ -333,6 +333,7 @@ var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path)
 var NO_AGENT_PROMPT_REASON = "Pushary needs an answer from the phone before this can run, and this agent has no approval prompt of its own here, so nothing ran. Ask the user, then try again.";
 var DENIED_BY_PUSHARY_REASON = "Denied from Pushary.";
 var SOLE_GATE_UNDECIDED_REASON = "Pushary could not decide on this call, so it did not run. Pushary is the only approval for this agent. Check that Pushary is signed in and online, then try again.";
+var SOLE_GATE_SUBSCRIPTION_REASON = "Pushary needs an active subscription to approve this call, so it did not run. Pushary is the only approval for this agent. Renew Pushary, or disconnect this agent from Pushary.";
 var SOLE_GATE_SIGNED_OUT_REASON = "Pushary is not signed in on this computer, so nothing can approve this call and it did not run. Sign in to Pushary, or disconnect this agent from Pushary.";
 var UNCARRIED_ANSWER_REASON = "The answer from the phone cannot be passed to this agent, so the call did not run. Ask the question in chat instead.";
 var renderAllowDenyDecision = (verdict) => {
@@ -1510,7 +1511,14 @@ var DATE_UTC_FLAG = "-u";
 var isFlagToken = (token) => token.startsWith("-");
 var isPrintOnlySed = (args) => args[0] === SED_QUIET_FLAG && SED_PRINT_ONLY_SCRIPT.test(args[1] ?? "") && !args.slice(2).some(isFlagToken);
 var isReadOnlyDate = (args) => args.every((arg) => arg.startsWith(DATE_FORMAT_PREFIX) || arg === DATE_UTC_FLAG);
-var isOutputOnlyPrintf = (args) => args[0] === END_OF_OPTIONS || !isFlagToken(args[0] ?? "");
+var PRINTF_TEXT_CONVERSION = /%(?:%|[-+ #0]*\d*(?:\.\d*)?[bcqs])/g;
+var PRINTF_CONVERSION_START = "%";
+var ARITHMETIC_SAFE_NUMBER = /^[-+]?(?:0[xX][0-9a-fA-F]+|\d+(?:\.\d+)?)$/;
+var printfAssignsNothing = (args) => args[0] === END_OF_OPTIONS || !isFlagToken(args[0] ?? "");
+var printfOperands = (args) => args[0] === END_OF_OPTIONS ? args.slice(1) : args;
+var convertsArgumentsOnlyAsText = (format) => !format.replace(PRINTF_TEXT_CONVERSION, "").includes(PRINTF_CONVERSION_START);
+var printfNeverEvaluatesAnArgument = ([format = "", ...values]) => convertsArgumentsOnlyAsText(format) || values.every((value) => ARITHMETIC_SAFE_NUMBER.test(value));
+var isOutputOnlyPrintf = (args) => printfAssignsNothing(args) && printfNeverEvaluatesAnArgument(printfOperands(args));
 var READ_ONLY_SEGMENT_SEPARATOR = /&&|\|\||[;|]/g;
 var PIPELINE_CHAIN_SEPARATOR = /&&|\|\||;/g;
 var EXPANSION_THAT_CAN_BECOME_A_FLAG = /\$|(?:^|\s)[*?[]/;
@@ -2125,9 +2133,19 @@ var SETTLED_OUTCOME = {
   deny: "deny"
 };
 var isSettledOutcome = (value) => typeof value === "string" && SETTLED_OUTCOMES.includes(value);
-var APPROVE_RESPONSES = /* @__PURE__ */ new Set(["yes", "approve", "approved"]);
-var DENY_RESPONSES = /* @__PURE__ */ new Set(["no", "deny", "denied", "reject", "rejected"]);
-var DEFER_RESPONSES = /* @__PURE__ */ new Set(["defer"]);
+var APPROVE_ANSWER = "yes";
+var DENY_ANSWER = "no";
+var DEFER_ANSWER = "defer";
+var PHONE_DENIAL_PREFIX = "Denied from your phone: ";
+var PHONE_DENIAL_REASON = "Denied via push notification";
+var denyReasonFrom = (value, note) => {
+  const trimmed = note?.trim();
+  if (trimmed) return `${PHONE_DENIAL_PREFIX}${trimmed}`;
+  return value && value !== DENY_ANSWER && value !== APPROVE_ANSWER ? `${PHONE_DENIAL_PREFIX}${value}` : PHONE_DENIAL_REASON;
+};
+var APPROVE_RESPONSES = /* @__PURE__ */ new Set([APPROVE_ANSWER, "approve", "approved"]);
+var DENY_RESPONSES = /* @__PURE__ */ new Set([DENY_ANSWER, "deny", "denied", "reject", "rejected"]);
+var DEFER_RESPONSES = /* @__PURE__ */ new Set([DEFER_ANSWER]);
 var classifyConfirmResponse = (response) => {
   const normalized = (response ?? "").trim().toLowerCase();
   if (APPROVE_RESPONSES.has(normalized)) return "approve";
@@ -2590,6 +2608,7 @@ var SCOPE_BATCH_REASON = "This patch exceeds the agreed scope. Split it into sin
 var unapprovedScopeReason = (scopeReason) => `${scopeReason}. Nobody approved this path, so the change was refused.`;
 var NO_RESPONSE_REASON = "No response within timeout";
 var codexRaisesItsOwnPrompts = (permissionMode) => permissionMode !== "bypassPermissions";
+var codexHasNoPromptOfItsOwn = (scopeReason, permissionMode) => scopeReason !== void 0 || !codexRaisesItsOwnPrompts(permissionMode);
 var CODEX_ASK_PASSES = { kind: "pass" };
 var CODEX_ASK_UNANSWERED = { kind: "deny", reason: NO_RESPONSE_REASON };
 var timeoutActionApplies = (ask) => ask.mode === "push_only" && ask.fullWindowServed;
@@ -2598,6 +2617,8 @@ var codexUnansweredPreToolUse = (ask) => {
   if (timeoutActionApplies(ask) && ask.timeoutAction === "deny") return CODEX_ASK_UNANSWERED;
   return codexRaisesItsOwnPrompts(ask.permissionMode) ? CODEX_ASK_PASSES : CODEX_ASK_UNANSWERED;
 };
+var CODEX_DEFER_WITHOUT_A_PROMPT = { kind: "deny", reason: NO_AGENT_PROMPT_REASON };
+var codexDeferredPreToolUse = (agentPromptFollows) => agentPromptFollows ? CODEX_ASK_PASSES : CODEX_DEFER_WITHOUT_A_PROMPT;
 var isScopeReason = (scopeReason) => typeof scopeReason === "string" && scopeReason.length > 0;
 var scopeBreachReasonOf = (verdict) => verdict.kind === "gate" && isScopeReason(verdict.scopeReason) ? verdict.scopeReason : void 0;
 var onlyCodexPreToolUseCanAsk = (verdict, permissionMode) => verdict.kind === "gate" && (scopeBreachReasonOf(verdict) !== void 0 || !codexRaisesItsOwnPrompts(permissionMode));
@@ -2679,6 +2700,7 @@ var modeStateFromResponse = (data) => {
 };
 var GATE_WIRE = 1;
 var GATE_MAX_TOOL_INPUTS = 32;
+var GATE_PERMISSION_MODE_MAX_LENGTH = 64;
 var GATE_BLOCK_REASON_MAX_LENGTH = 200;
 var wireVerdictFor = (verdict, deadlineSeconds) => {
   switch (verdict.kind) {
@@ -3142,6 +3164,7 @@ export {
   canonicalToolName,
   toToolLookup,
   SOLE_GATE_UNDECIDED_REASON,
+  SOLE_GATE_SUBSCRIPTION_REASON,
   SOLE_GATE_SIGNED_OUT_REASON,
   renderPreToolUseVerdict,
   pusharyMissingReason,
@@ -3212,6 +3235,7 @@ export {
   ASK_AGENT_NAME_MAX,
   truncateLine,
   isAnswerSource,
+  denyReasonFrom,
   classifyConfirmResponse,
   buildDecisionEpisodeFeatures,
   resolveAutoResolveOrigin,
@@ -3234,8 +3258,9 @@ export {
   SCOPE_BATCH_REASON,
   unapprovedScopeReason,
   NO_RESPONSE_REASON,
-  codexRaisesItsOwnPrompts,
+  codexHasNoPromptOfItsOwn,
   codexUnansweredPreToolUse,
+  codexDeferredPreToolUse,
   scopeBreachReasonOf,
   codexCallNeedsAPerson,
   claudePermissionRulesFromSettings,
@@ -3245,6 +3270,7 @@ export {
   modeStateFromResponse,
   GATE_WIRE,
   GATE_MAX_TOOL_INPUTS,
+  GATE_PERMISSION_MODE_MAX_LENGTH,
   GATE_BLOCK_REASON_MAX_LENGTH,
   wireVerdictFor,
   machineDecisionFor,

package/dist/{chunk-II6OFDB3.js → chunk-OH6OGEOY.js}

@@ -1,16 +1,16 @@
 import {
   registerTranscript
-} from "./chunk-TJ4KMPYO.js";
+} from "./chunk-AV5VX7OK.js";
 import {
   namedEvent
-} from "./chunk-BDL6GJOQ.js";
+} from "./chunk-K2EYK5RL.js";
 import {
   writeDegraded
-} from "./chunk-Y2BOLNJV.js";
+} from "./chunk-4GKQDFH6.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-4WHNRAOK.js → chunk-OQPEHKH2.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-B6KZME5D.js";
+} from "./chunk-LEQRIJ4H.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-IIQ77WUJ.js → chunk-PFB7P4F3.js}

@@ -3,27 +3,27 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-Z5EYCMJH.js";
+} from "./chunk-7J2AX5T6.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-L5NPRGVE.js";
+} from "./chunk-SSWK2WYX.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-FH4O3QGQ.js";
+} from "./chunk-AQ3TSQA2.js";
 import {
   getMachineId
-} from "./chunk-NBGJ3EOE.js";
+} from "./chunk-EDN4F6GX.js";
 import {
   getBaseUrl
-} from "./chunk-4WHNRAOK.js";
+} from "./chunk-OQPEHKH2.js";
 import {
   getPackageVersion
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/machines.ts
 import { hostname } from "os";

package/dist/{chunk-IM7EGZVH.js → chunk-QFNY4KUQ.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-4WHNRAOK.js";
+} from "./chunk-OQPEHKH2.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-CEF4UQ3X.js → chunk-QIODXPTP.js}

@@ -13,7 +13,7 @@ import {
   isReleaseVersion,
   ownPackageName,
   withHookHoldBudget
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/setup/paths.ts
 import { homedir as homedir2 } from "os";
@@ -395,9 +395,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-AHRKGQ7M.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-7Z5WBZVH.js");
-    const { autoUpdateLock: autoUpdateLock2 } = await import("./paths-AGUCNYQ5.js");
+    const { withUpgradeLock } = await import("./global-upgrade-SKY7A3SI.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-AYW3TB7X.js");
+    const { autoUpdateLock: autoUpdateLock2 } = await import("./paths-XUUEK7OU.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;

package/dist/{chunk-247PAUW6.js → chunk-R5C3QCVT.js}

@@ -10,7 +10,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-Y6PZ3B5U.js → chunk-RHIKMNWJ.js}

@@ -8,10 +8,10 @@ import {
   codexHooksJsonIn,
   isPusharyCodexCommand,
   resolvePathBinary
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   getPackageVersion
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/codex-app-server.ts
 import { existsSync, realpathSync } from "fs";

package/dist/{chunk-VD2AWSER.js → chunk-RN5NRRHX.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-ZNAGS7O7.js";
+} from "./chunk-E2LGKG75.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-B6KZME5D.js";
+} from "./chunk-LEQRIJ4H.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-SVQOEVAT.js → chunk-S2R2U5W5.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-I52ALHOM.js";
+} from "./chunk-SLBO7PHS.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
 import {
   readKeySource
-} from "./chunk-FH4O3QGQ.js";
+} from "./chunk-AQ3TSQA2.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-UZ2YEGIT.js";
+} from "./chunk-Z4UDB7EC.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-4WHNRAOK.js";
+} from "./chunk-OQPEHKH2.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-I52ALHOM.js → chunk-SLBO7PHS.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-FH4O3QGQ.js";
+} from "./chunk-AQ3TSQA2.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-B6KZME5D.js";
+} from "./chunk-LEQRIJ4H.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-L5NPRGVE.js → chunk-SSWK2WYX.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-FH4O3QGQ.js";
+} from "./chunk-AQ3TSQA2.js";
 import {
   getMachineId
-} from "./chunk-NBGJ3EOE.js";
+} from "./chunk-EDN4F6GX.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-CEF4UQ3X.js";
+} from "./chunk-QIODXPTP.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,7 +20,7 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "./chunk-4WHNRAOK.js";
+} from "./chunk-OQPEHKH2.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
@@ -28,7 +28,7 @@ import {
   globalPackageFolder,
   globalRootFor,
   isRecord
-} from "./chunk-VBPASZU7.js";
+} from "./chunk-OH647UT3.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";