pushary 1.9.23 → 1.9.25

package/dist/{chunk-SWQLZQE3.js → chunk-2XHBYMVN.js}

@@ -1,20 +1,20 @@
 import {
   defersToNativeMode,
   reportMachineDenial
-} from "./chunk-FBV2KS3Z.js";
+} from "./chunk-BHRMHDOO.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-GN6BJXC7.js";
+} from "./chunk-2CUE3XXS.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer,
   oncePerSession
-} from "./chunk-M7DCI44L.js";
+} from "./chunk-SGGR5MN2.js";
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-K2EYK5RL.js";
+} from "./chunk-5WTEKIAS.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -39,7 +39,7 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-GYP6DLA4.js";
+} from "./chunk-AXB4ABUD.js";
 import {
   askUser,
   cancelQuestion,
@@ -51,20 +51,20 @@ import {
   sendNotification,
   waitForQuestion,
   waitsForThePhone
-} from "./chunk-4GKQDFH6.js";
+} from "./chunk-NFH2H7PD.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-E2LGKG75.js";
+} from "./chunk-7V6PJFDF.js";
 import {
   getMachineId
-} from "./chunk-EDN4F6GX.js";
+} from "./chunk-ZLGCNHJG.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-OQPEHKH2.js";
+} from "./chunk-5Q2QJ2AL.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LEQRIJ4H.js";
+} from "./chunk-OOKIWOMK.js";
 import {
   AGENT_QUESTION_STRATEGY,
   DECISION_STOP_REASON,
@@ -104,8 +104,9 @@ import {
   parseAgentQuestionAnswers,
   parseAgentQuestions,
   questionHandedToTheTerminal,
-  resolveGate
-} from "./chunk-OH647UT3.js";
+  resolveGate,
+  timeoutActionWithoutLocalPrompt
+} from "./chunk-KGSN2SOL.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";
@@ -345,7 +346,7 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
   const runHandler = () => {
     switch (ownPrompt ? toolPolicy.mode : approvalModeWithoutLocalPrompt(toolPolicy.mode)) {
       case "push_only":
-        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget, decision, signals);
+        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, ownPrompt ? toolPolicy.timeoutAction : timeoutActionWithoutLocalPrompt(toolPolicy), sessionId, machineId, input.tool_name, toolTarget, decision, signals);
       case "terminal_only":
         return Promise.resolve(handleTerminalOnly());
       case "push_first":

package/dist/{chunk-HXZG5WHU.js → chunk-3UYMOWX6.js}

@@ -1,9 +1,9 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-RHIKMNWJ.js";
+} from "./chunk-VN5Q4KOD.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LEQRIJ4H.js";
+} from "./chunk-OOKIWOMK.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-R5C3QCVT.js → chunk-4KZP4YMV.js}

@@ -10,7 +10,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-73HGV4R6.js → chunk-5ETE7F45.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-N4DMADJM.js";
+} from "./chunk-FCXYDR62.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-QFNY4KUQ.js";
+} from "./chunk-FLC4TVXH.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-OQPEHKH2.js → chunk-5Q2QJ2AL.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LEQRIJ4H.js";
+} from "./chunk-OOKIWOMK.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-K2EYK5RL.js → chunk-5WTEKIAS.js}

@@ -3,18 +3,18 @@ import {
   addGeminiMcpServer,
   removeGeminiMcpServer,
   supportedClaudeEvents
-} from "./chunk-7RGEJOQS.js";
+} from "./chunk-KM7AEGKF.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-GYP6DLA4.js";
+} from "./chunk-AXB4ABUD.js";
 import {
   guardBinary,
   guardBinaryRefusing,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   HOOK_LOCATOR_BINARY,
   PHONE_ANSWERED_TOOLS,
@@ -24,7 +24,7 @@ import {
   refusalOutput,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-AV5VX7OK.js → chunk-7UZD2F4Y.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-VTR4VRL2.js";
 import {
   ensureDaemonRunning
-} from "./chunk-SSWK2WYX.js";
+} from "./chunk-PAMW5M53.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-N4DMADJM.js";
+} from "./chunk-FCXYDR62.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-QFNY4KUQ.js";
+} from "./chunk-FLC4TVXH.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-M6R3SZZS.js";
+} from "./chunk-YD3DIFIU.js";
 import {
   hookOwnerOf
-} from "./chunk-A5U62Q6K.js";
+} from "./chunk-ZLY7BHN4.js";
 import {
   readTranscriptPreference
-} from "./chunk-AQ3TSQA2.js";
+} from "./chunk-GC5HJE3T.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   writeJsonAtomic
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-OQPEHKH2.js";
+} from "./chunk-5Q2QJ2AL.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-E2LGKG75.js → chunk-7V6PJFDF.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-Z4UDB7EC.js";
+} from "./chunk-VEGS4NYF.js";
 import {
   installNetworkDefaults
-} from "./chunk-XBETSM5T.js";
+} from "./chunk-ZV3262AA.js";
 import {
   getBaseUrl
-} from "./chunk-OQPEHKH2.js";
+} from "./chunk-5Q2QJ2AL.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-KJA6IGOZ.js → chunk-A3QQWXIE.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-GYP6DLA4.js → chunk-AXB4ABUD.js}

@@ -2,7 +2,7 @@ import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-KJA6IGOZ.js";
+} from "./chunk-A3QQWXIE.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -10,26 +10,26 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-4GKQDFH6.js";
+} from "./chunk-NFH2H7PD.js";
 import {
   withRetry
-} from "./chunk-E2LGKG75.js";
+} from "./chunk-7V6PJFDF.js";
 import {
   getMachineId
-} from "./chunk-EDN4F6GX.js";
+} from "./chunk-ZLGCNHJG.js";
 import {
   reportedInstallSource
-} from "./chunk-6HT2TUZD.js";
+} from "./chunk-EJMXZH5E.js";
 import {
   canonicalJson
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   writeFileAtomic
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-OQPEHKH2.js";
+} from "./chunk-5Q2QJ2AL.js";
 import {
   ACTION_BODY_MAX,
   AGENT_LABELS_BY_TYPE,
@@ -60,7 +60,7 @@ import {
   resolvePolicy,
   toToolLookup,
   truncateLine
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";

package/dist/{chunk-I46QTKYI.js → chunk-BGJDOHNF.js}

@@ -4,7 +4,7 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-JCEUDLGW.js";
+} from "./chunk-PPGLIWOR.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -14,7 +14,7 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-USUI4P63.js";
+} from "./chunk-VFF7ZBIS.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
@@ -27,10 +27,10 @@ import {
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LEQRIJ4H.js";
+} from "./chunk-OOKIWOMK.js";
 import {
   commandsPackage,
   globalUpgradeEntry,
@@ -39,7 +39,7 @@ import {
   isSameMajorVersion,
   ownPackageRoot,
   packageVersionAt
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/global-upgrade.ts
 import { existsSync } from "fs";

package/dist/{chunk-FBV2KS3Z.js → chunk-BHRMHDOO.js}

@@ -6,12 +6,12 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-GYP6DLA4.js";
+} from "./chunk-AXB4ABUD.js";
 import {
   machineDecisionFor,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-RN5NRRHX.js → chunk-EJJNZYDS.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-E2LGKG75.js";
+} from "./chunk-7V6PJFDF.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LEQRIJ4H.js";
+} from "./chunk-OOKIWOMK.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-6HT2TUZD.js → chunk-EJMXZH5E.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-OQPEHKH2.js";
+} from "./chunk-5Q2QJ2AL.js";
 import {
   normalizeInstallSource
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-N4DMADJM.js → chunk-FCXYDR62.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-ZGYO6OQE.js → chunk-FJKV64M7.js}

@@ -1,15 +1,15 @@
 import {
   compatibleConfigFile
-} from "./chunk-K2EYK5RL.js";
+} from "./chunk-5WTEKIAS.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-A5U62Q6K.js";
+} from "./chunk-ZLY7BHN4.js";
 import {
   AGENT_CHOICES
-} from "./chunk-R5C3QCVT.js";
+} from "./chunk-4KZP4YMV.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -18,7 +18,7 @@ import {
   guardedArgv,
   pusharyDir,
   vscodePluginDir
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   readJsonSafe
 } from "./chunk-AQFEP65J.js";
@@ -29,7 +29,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-QFNY4KUQ.js → chunk-FLC4TVXH.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-OQPEHKH2.js";
+} from "./chunk-5Q2QJ2AL.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-NHBPW6C4.js → chunk-G446AVR5.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   readJsonSafe,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-AQ3TSQA2.js → chunk-GC5HJE3T.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-6HT2TUZD.js";
+} from "./chunk-EJMXZH5E.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,11 +9,11 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   configFilePath
-} from "./chunk-OQPEHKH2.js";
+} from "./chunk-5Q2QJ2AL.js";
 import {
   API_KEY_PREFIX_PATTERN,
   isRecord
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";
@@ -115,6 +115,8 @@ var isDisabledExport = (line) => {
 };
 var keyPrefix = (key) => key.split(".")[0] ?? key;
 var MAC_APP_KEY_PREFIX_FIELD = "macAppKeyPrefix";
+var CLI_CREATED_KEY_PREFIX_FIELD = "cliCreatedKeyPrefix";
+var isCliCreatedKey = (key, createdPrefix) => keyPrefix(key) === createdPrefix;
 var findKeyExport = (contents) => {
   const lines = contents.split("\n");
   for (const [index, line] of lines.entries()) {
@@ -131,6 +133,11 @@ var keepMacAppKeyPrefix = (current, apiKey) => {
   const { [MAC_APP_KEY_PREFIX_FIELD]: recorded, ...rest } = current;
   return recorded === keyPrefix(apiKey) ? { ...rest, [MAC_APP_KEY_PREFIX_FIELD]: recorded } : rest;
 };
+var savedKeyIsCliCreated = (current, apiKey, origin) => origin === "created_by_this_cli" || current[CLI_CREATED_KEY_PREFIX_FIELD] === keyPrefix(apiKey);
+var withKeyRecords = (current, apiKey, origin) => {
+  const { [CLI_CREATED_KEY_PREFIX_FIELD]: _previous, ...rest } = keepMacAppKeyPrefix(current, apiKey);
+  return savedKeyIsCliCreated(current, apiKey, origin) ? { ...rest, [CLI_CREATED_KEY_PREFIX_FIELD]: keyPrefix(apiKey) } : rest;
+};
 var manualKeyStepFor = (kind, platform) => kind === "no-rc" || platform === "win32" ? "config-only" : "paste-export";
 var rcResult = (kind, over = {}) => ({
   kind,
@@ -211,7 +218,7 @@ var resolveRcTarget = () => {
   const fallback = FALLBACK_RCS.map((name) => join2(homedir2(), name)).find(existsSync2);
   return fallback ? { path: fallback, shell: null } : null;
 };
-var writeKey = (apiKey, options = {}) => {
+var writeKey = (apiKey, origin, options = {}) => {
   const configPath = configFilePath();
   const existing = readJsonSafe(configPath);
   let current = {};
@@ -229,7 +236,7 @@ var writeKey = (apiKey, options = {}) => {
   writeJsonAtomic(
     configPath,
     {
-      ...keepMacAppKeyPrefix(current, apiKey),
+      ...withKeyRecords(current, apiKey, origin),
       apiKey,
       installSource: resolveInstallSourceFor(current),
       ...options.controlMode ? { controlMode: options.controlMode } : {},
@@ -248,7 +255,7 @@ var clearKey = (options = {}) => {
   const existing = readConfigRecord(configPath);
   let removedFromConfig = false;
   if (existing !== null && typeof existing.apiKey === "string") {
-    const { apiKey: _dropped, [MAC_APP_KEY_PREFIX_FIELD]: _adopted, ...rest } = existing;
+    const { apiKey: _dropped, [MAC_APP_KEY_PREFIX_FIELD]: _adopted, [CLI_CREATED_KEY_PREFIX_FIELD]: _created, ...rest } = existing;
     writeJsonAtomic(configPath, rest, KEY_FILE_MODE);
     restrictFile(configPath);
     removedFromConfig = true;
@@ -306,11 +313,13 @@ var readKeySource = () => {
   if (fileKey) return { kind: "config", key: fileKey, origin: configPath, drift: null };
   return { kind: "none", key: null, origin: null, drift: null };
 };
-var readMacAppKeyPrefix = (configPath = configFilePath()) => {
-  const recorded = readConfigRecord(configPath)?.[MAC_APP_KEY_PREFIX_FIELD];
+var readRecordedKeyPrefix = (configPath, field) => {
+  const recorded = readConfigRecord(configPath)?.[field];
   return typeof recorded === "string" && API_KEY_PREFIX_PATTERN.test(recorded) ? recorded : null;
 };
+var readMacAppKeyPrefix = (configPath = configFilePath()) => readRecordedKeyPrefix(configPath, MAC_APP_KEY_PREFIX_FIELD);
 var isAdoptedMacAppKey = (key, adoptedPrefix) => keyPrefix(key) === adoptedPrefix;
+var readCliCreatedKeyPrefix = (configPath = configFilePath()) => readRecordedKeyPrefix(configPath, CLI_CREATED_KEY_PREFIX_FIELD);
 var recordMacAppKeyPrefix = (apiKey, configPath = configFilePath()) => {
   const config = readConfigRecord(configPath);
   if (config === null || config.apiKey !== apiKey) return false;
@@ -348,7 +357,9 @@ export {
   exportLine,
   isDisabledExport,
   keyPrefix,
+  isCliCreatedKey,
   manualKeyStepFor,
+  resolveRcTarget,
   writeKey,
   clearKey,
   readConfigFileKey,
@@ -357,7 +368,9 @@ export {
   readKeySource,
   readMacAppKeyPrefix,
   isAdoptedMacAppKey,
+  readCliCreatedKeyPrefix,
   recordMacAppKeyPrefix,
+  shellProfileCandidates,
   findExportedKeyLines,
   findExportedKeyLine
 };

package/dist/{chunk-CJTQNUUT.js → chunk-HEJMZVJI.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-QIODXPTP.js";
+} from "./chunk-2VQZC6DW.js";
 import {
   readJsonSafe
 } from "./chunk-AQFEP65J.js";
 import {
   isRecord
-} from "./chunk-OH647UT3.js";
+} from "./chunk-KGSN2SOL.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";