pushary 1.9.25 → 1.9.26

package/dist/{chunk-KGSN2SOL.js → chunk-TVP5UU33.js}

@@ -1370,7 +1370,6 @@ var SAFE_SHELL_COMMANDS = /* @__PURE__ */ new Set([
   "whoami",
   "id",
   "uname",
-  "arch",
   "printenv",
   "locale",
   "tty",
@@ -1721,6 +1720,7 @@ var COMMAND_RUNNERS = /* @__PURE__ */ new Set([
   "script",
   "su",
   "doas",
+  "arch",
   "npx",
   "bunx",
   "pnpx",
@@ -2178,6 +2178,157 @@ var writesASecretFile = ({ program, args }) => {
   if (WRITES_EVERY_OPERAND.has(name)) return operands.some(namesASecretFile);
   return EDITS_IN_PLACE.has(name) && args.some((arg) => IN_PLACE_FLAG.test(arg.text)) && operands.some(namesASecretFile);
 };
+var GITHUB_RESOURCE_NOUNS = /* @__PURE__ */ new Set([
+  "pr",
+  "issue",
+  "release",
+  "repo",
+  "gist",
+  "label",
+  "secret",
+  "variable",
+  "workflow",
+  "run",
+  "cache",
+  "project",
+  "ruleset",
+  "codespace",
+  "org",
+  "discussion"
+]);
+var GITHUB_READ_VERBS = /* @__PURE__ */ new Set([
+  "view",
+  "list",
+  "ls",
+  "status",
+  "diff",
+  "checks",
+  "check",
+  "watch",
+  "browse",
+  "download",
+  "clone",
+  "checkout",
+  "get",
+  "field-list",
+  "item-list"
+]);
+var GITHUB_OPTIONS_WITH_VALUES = /* @__PURE__ */ new Set(["-R", "--repo", "--hostname"]);
+var GITHUB_API_SUBCOMMAND = "api";
+var GITHUB_GRAPHQL_ENDPOINT = "graphql";
+var HTTP_METHOD_FLAGS = /* @__PURE__ */ new Set(["-X", "--method"]);
+var HTTP_METHOD_ATTACHED = /^(?:-X|--method=)(.+)$/;
+var HTTP_READ_METHODS = /* @__PURE__ */ new Set(["GET", "HEAD"]);
+var GITHUB_API_BODY_FLAG = /^(?:-[fF]|--(?:field|raw-field|input)(?:=|$))/;
+var GITHUB_API_FILE_FIELD = /=@|^--input(?:=|$)/;
+var GRAPHQL_MUTATION = /\bmutation\b/i;
+var STRIPE_READ_COMMANDS = /* @__PURE__ */ new Set([
+  "get",
+  "listen",
+  "logs",
+  "status",
+  "version",
+  "help",
+  "login",
+  "logout",
+  "config",
+  "completion",
+  "open",
+  "resources"
+]);
+var STRIPE_REQUEST_COMMANDS_THAT_WRITE = /* @__PURE__ */ new Set(["post", "delete", "trigger", "fixtures"]);
+var STRIPE_READ_OPERATIONS = /* @__PURE__ */ new Set(["list", "retrieve", "search"]);
+var STRIPE_OPTIONS_WITH_VALUES = /* @__PURE__ */ new Set([
+  "--api-key",
+  "--project-name",
+  "-p",
+  "--color",
+  "--log-level",
+  "--device-name",
+  "--config",
+  "--stripe-account"
+]);
+var AWS_OPTIONS_WITH_VALUES = /* @__PURE__ */ new Set([
+  "--region",
+  "--profile",
+  "--output",
+  "--endpoint-url",
+  "--query",
+  "--color",
+  "--ca-bundle",
+  "--cli-read-timeout",
+  "--cli-connect-timeout",
+  "--cli-binary-format"
+]);
+var AWS_LOCAL_COMMANDS = /* @__PURE__ */ new Set(["configure", "help", "history", "sso", "login", "logout"]);
+var AWS_READ_OPERATION = /^(?:describe|list|get|head|batch-get|lookup|search|filter|scan|query|select|wait|validate|estimate|simulate|tail|ls|presign|help)(?:-|$)/;
+var AWS_S3_SERVICE = "s3";
+var AWS_S3_COPIES = /* @__PURE__ */ new Set(["cp", "sync"]);
+var S3_URL_PREFIX = "s3://";
+var TWILIO_TOPIC_SEPARATOR = ":";
+var TWILIO_READ_ACTIONS = /* @__PURE__ */ new Set(["list", "fetch"]);
+var positionalWordsOf = (args, optionsWithValues) => {
+  const endOfOptions = args.findIndex((arg) => arg.text === END_OF_OPTIONS);
+  const options = endOfOptions === -1 ? args : args.slice(0, endOfOptions);
+  const operands = endOfOptions === -1 ? [] : args.slice(endOfOptions + 1);
+  const positional = options.filter((arg, index) => !arg.text.startsWith("-") && !optionsWithValues.has(options[index - 1]?.text ?? ""));
+  return [...positional, ...operands];
+};
+var httpMethodOf = (args) => {
+  for (const [index, arg] of args.entries()) {
+    const attached = HTTP_METHOD_ATTACHED.exec(arg.text);
+    if (attached) return arg.expands ? null : attached[1];
+    if (HTTP_METHOD_FLAGS.has(arg.text)) {
+      const value = args[index + 1];
+      return value === void 0 || value.expands ? null : value.text;
+    }
+  }
+  return void 0;
+};
+var graphqlRequestCanWrite = (args) => args.some((arg) => arg.expands || GRAPHQL_MUTATION.test(arg.text) || GITHUB_API_FILE_FIELD.test(arg.text));
+var githubApiRequestWrites = (args) => {
+  const method = httpMethodOf(args);
+  if (method !== void 0) return method === null || !HTTP_READ_METHODS.has(method.toUpperCase());
+  if (args.some((arg) => arg.text === GITHUB_GRAPHQL_ENDPOINT)) return graphqlRequestCanWrite(args);
+  return args.some((arg) => GITHUB_API_BODY_FLAG.test(arg.text));
+};
+var githubCliWrites = (args) => {
+  const meaningful = argsAfterHarmlessGlobalFlags(args);
+  const [noun, verb] = positionalWordsOf(meaningful, GITHUB_OPTIONS_WITH_VALUES);
+  if (noun?.text === GITHUB_API_SUBCOMMAND) return githubApiRequestWrites(meaningful.slice(meaningful.indexOf(noun) + 1));
+  return noun !== void 0 && GITHUB_RESOURCE_NOUNS.has(noun.text) && verb !== void 0 && !GITHUB_READ_VERBS.has(verb.text);
+};
+var stripeCliWrites = (args) => {
+  const [command, operation] = positionalWordsOf(args, STRIPE_OPTIONS_WITH_VALUES);
+  if (command === void 0 || STRIPE_READ_COMMANDS.has(command.text)) return false;
+  if (STRIPE_REQUEST_COMMANDS_THAT_WRITE.has(command.text)) return true;
+  return operation !== void 0 && !STRIPE_READ_OPERATIONS.has(operation.text);
+};
+var s3CommandWrites = (operation, operands) => !AWS_S3_COPIES.has(operation) ? !AWS_READ_OPERATION.test(operation) : operands.slice(1).some((operand) => operand.expands || operand.text.startsWith(S3_URL_PREFIX));
+var awsCliWrites = (args) => {
+  const [service, operation, ...operands] = positionalWordsOf(args, AWS_OPTIONS_WITH_VALUES);
+  if (service === void 0 || operation === void 0 || AWS_LOCAL_COMMANDS.has(service.text)) return false;
+  return service.text === AWS_S3_SERVICE ? s3CommandWrites(operation.text, operands) : !AWS_READ_OPERATION.test(operation.text);
+};
+var twilioCliWrites = (args) => {
+  const [topic] = positionalWordsOf(args, /* @__PURE__ */ new Set());
+  if (topic === void 0 || !topic.text.includes(TWILIO_TOPIC_SEPARATOR)) return false;
+  return !TWILIO_READ_ACTIONS.has(topic.text.split(TWILIO_TOPIC_SEPARATOR).at(-1) ?? "");
+};
+var REMOTE_API_CLI_WRITES = /* @__PURE__ */ new Map([
+  ["gh", githubCliWrites],
+  ["stripe", stripeCliWrites],
+  ["aws", awsCliWrites],
+  ["twilio", twilioCliWrites]
+]);
+var invocationWritesThroughARemoteApi = ({ program, args }) => {
+  const writes = program === void 0 ? void 0 : REMOTE_API_CLI_WRITES.get(basenameOf(program.text));
+  return writes !== void 0 && writes(args);
+};
+var commandWritesThroughARemoteApi = (command) => {
+  const segments = readableCommandSegments(command);
+  return segments !== null && segments.some((segment) => invocationWritesThroughARemoteApi(invocationOf(segment)));
+};
 var segmentNeedsAPerson = (toolName, segment) => {
   const invocation = invocationOf(segment);
   const normalized = normalizedInvocation(invocation);
@@ -2345,6 +2496,7 @@ var WRAPPER_SYNTAX = /* @__PURE__ */ new Map([
   ["stdbuf", wrapperSyntax(["-i", "-o", "-e", "--input", "--output", "--error"])],
   ["flock", wrapperSyntax(["-w", "--wait", "--timeout", "-E", "--conflict-exit-code"], 1)],
   ["caffeinate", wrapperSyntax(["-t", "-w"])],
+  ["arch", wrapperSyntax(["-arch", "-d", "-e"])],
   ["sudo", wrapperSyntax([
     "-u",
     "--user",
@@ -3398,9 +3550,16 @@ var scopeBreachReasonOf = (verdict) => verdict.kind === "gate" && isScopeReason(
 var onlyCodexPreToolUseCanAsk = (verdict, permissionMode) => verdict.kind === "gate" && (scopeBreachReasonOf(verdict) !== void 0 || !codexRaisesItsOwnPrompts(permissionMode));
 var runsACommandThatNeedsAPerson = ({ toolName, toolInputs }) => toolName === "Bash" && toolInputs.some((toolInput) => {
   const command = extractPolicyArg(toolName, toolInput);
-  return command !== void 0 && commandNeedsAPerson(toolName, command);
+  return command !== void 0 && (commandNeedsAPerson(toolName, command) || commandWritesThroughARemoteApi(command));
+});
+var CI_WORKFLOW_FILE = /(?:^|\/)\.github\/workflows\/[^/]+$/;
+var FILE_WRITING_TOOLS = /* @__PURE__ */ new Set(["Edit", "Write", "MultiEdit", "NotebookEdit"]);
+var namesASecretOrWorkflowFile = (path) => SECRET_FILE_NAME.test(basenameOf(path)) || CI_WORKFLOW_FILE.test(normalizeSeparators(path));
+var writesASecretOrWorkflowFile = ({ toolName, toolInputs }) => FILE_WRITING_TOOLS.has(toolName) && toolInputs.some((toolInput) => {
+  const path = extractPolicyArg(toolName, toolInput);
+  return path !== void 0 && namesASecretOrWorkflowFile(path);
 });
-var codexCallNeedsAPerson = (input, verdict, call) => onlyCodexPreToolUseCanAsk(verdict, call.permissionMode) || verdict.kind === "gate" && (aChosenRuleGoverns(input) || call.deletesFiles || runsACommandThatNeedsAPerson(input));
+var codexCallNeedsAPerson = (input, verdict, call) => onlyCodexPreToolUseCanAsk(verdict, call.permissionMode) || verdict.kind === "gate" && (aChosenRuleGoverns(input) || call.deletesFiles || runsACommandThatNeedsAPerson(input) || writesASecretOrWorkflowFile(input));
 var MAX_AGENT_PERMISSION_RULES_PER_KIND = 256;
 var MAX_AGENT_PERMISSION_RULE_LENGTH = 512;
 var isAgentPermissionRule = (value) => typeof value === "string" && value.length > 0 && value.length <= MAX_AGENT_PERMISSION_RULE_LENGTH;
@@ -3640,6 +3799,9 @@ var WITHDRAWN_APPROVAL_REASON = "The phone question was withdrawn. Approve in th
 var PLAN_DECLINED_REASON = "Plan declined from the phone. Ask what to change before coding.";
 var claudeStoppedPreToolUseOutput = (reason) => stoppedOutput(claudePreToolUseOutput("deny", reason), reason);
 var claudeStoppedPermissionRequestOutput = (reason) => stoppedOutput(claudePermissionRequestOutput("deny", reason), reason);
+var UNHEARD_PUSH_WINDOW_DAYS = 14;
+var DAY_MS = 24 * 60 * 60 * 1e3;
+var UNHEARD_PUSH_WINDOW_MS = UNHEARD_PUSH_WINDOW_DAYS * DAY_MS;
 var ELICITATION_ANSWERABLE_MODE = "form";
 var ELICITATION_MIN_OPTIONS = 2;
 var ELICITATION_MAX_MULTI_QUESTIONS = 4;

package/dist/{chunk-KZLOVLA6.js → chunk-XDTGYZIT.js}

@@ -1,13 +1,13 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-EJJNZYDS.js";
+} from "./chunk-BIKHLGEL.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-GC5HJE3T.js";
+} from "./chunk-3HBLQXCJ.js";
 import {
   NpmMissingError,
   NpmPermissionError
-} from "./chunk-2VQZC6DW.js";
+} from "./chunk-3TRGUDQ3.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -15,7 +15,7 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-OOKIWOMK.js";
+} from "./chunk-47RVFUEG.js";
 
 // src/instruction-file.ts
 import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";

package/dist/{chunk-A3QQWXIE.js → chunk-XUVKAWV3.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-KGSN2SOL.js";
+} from "./chunk-TVP5UU33.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-4KZP4YMV.js → chunk-Y5O4TO7U.js}

@@ -10,7 +10,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-KGSN2SOL.js";
+} from "./chunk-TVP5UU33.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-ZNT4ZZXJ.js → chunk-ZPLDPPZO.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-2VQZC6DW.js";
+} from "./chunk-3TRGUDQ3.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-SGGR5MN2.js → chunk-ZXYHVZZZ.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-AXB4ABUD.js";
+} from "./chunk-BIV2LKDK.js";
 
 // src/answer.ts
 var isDeferAnswer = (value) => value === "defer";

package/dist/{global-upgrade-4M4TJKQR.js → global-upgrade-3XKMGVAR.js}

@@ -5,15 +5,15 @@ import {
   readGlobalUpgradeSubject,
   upgradeInstalledPackage,
   withUpgradeLock
-} from "./chunk-BGJDOHNF.js";
-import "./chunk-PPGLIWOR.js";
-import "./chunk-VFF7ZBIS.js";
+} from "./chunk-BWXRLXNE.js";
+import "./chunk-I52A3NLY.js";
+import "./chunk-TS3CRCI7.js";
 import "./chunk-POFBE6ZY.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-2VQZC6DW.js";
+import "./chunk-3TRGUDQ3.js";
 import "./chunk-AQFEP65J.js";
-import "./chunk-OOKIWOMK.js";
-import "./chunk-KGSN2SOL.js";
+import "./chunk-47RVFUEG.js";
+import "./chunk-TVP5UU33.js";
 export {
   finishGlobalUpgrade,
   finishUpgradeWithLock,

package/dist/{paths-6JY6J56N.js → paths-UB2IUM57.js}

@@ -32,8 +32,8 @@ import {
   pusharyDir,
   vscodePluginDir,
   vscodePluginMcp
-} from "./chunk-2VQZC6DW.js";
-import "./chunk-KGSN2SOL.js";
+} from "./chunk-3TRGUDQ3.js";
+import "./chunk-TVP5UU33.js";
 export {
   autoUpdateLock,
   autoUpdateLog,

package/dist/{reapply-LFEQ5GF6.js → reapply-B7KMGQH7.js}

@@ -10,34 +10,34 @@ import {
   reapplyOpenCodePlugin,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-UUOC7A7M.js";
-import "./chunk-VN5Q4KOD.js";
+} from "./chunk-R5ABJ5H5.js";
+import "./chunk-LGMSGVDN.js";
 import "./chunk-RIVNNBEK.js";
 import "./chunk-XHKBHWLX.js";
-import "./chunk-FJKV64M7.js";
-import "./chunk-5WTEKIAS.js";
-import "./chunk-ZLY7BHN4.js";
-import "./chunk-KM7AEGKF.js";
-import "./chunk-4KZP4YMV.js";
-import "./chunk-ZNT4ZZXJ.js";
+import "./chunk-TEQJNXJH.js";
+import "./chunk-AXOMDPA7.js";
+import "./chunk-L62RNE5F.js";
+import "./chunk-2YF72RC5.js";
+import "./chunk-Y5O4TO7U.js";
+import "./chunk-ZPLDPPZO.js";
 import "./chunk-GMXKITVA.js";
 import "./chunk-6ICPEJY5.js";
-import "./chunk-AXB4ABUD.js";
-import "./chunk-A3QQWXIE.js";
-import "./chunk-NFH2H7PD.js";
+import "./chunk-BIV2LKDK.js";
+import "./chunk-XUVKAWV3.js";
+import "./chunk-DDRSG6JL.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-7V6PJFDF.js";
-import "./chunk-VEGS4NYF.js";
-import "./chunk-ZV3262AA.js";
-import "./chunk-ZLGCNHJG.js";
+import "./chunk-AG5ATWVT.js";
+import "./chunk-GRL4VVUP.js";
+import "./chunk-CXG7XA4E.js";
+import "./chunk-4YWINUPJ.js";
 import "./chunk-7QLSKOSU.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-EJMXZH5E.js";
-import "./chunk-2VQZC6DW.js";
+import "./chunk-KJ2W7ECE.js";
+import "./chunk-3TRGUDQ3.js";
 import "./chunk-AQFEP65J.js";
-import "./chunk-5Q2QJ2AL.js";
-import "./chunk-OOKIWOMK.js";
-import "./chunk-KGSN2SOL.js";
+import "./chunk-5UKZXDHV.js";
+import "./chunk-47RVFUEG.js";
+import "./chunk-TVP5UU33.js";
 export {
   ensureCodexTrustAfterReapply,
   inspectConfiguredManagedProviders,

package/dist/src/index.js

@@ -1,14 +1,14 @@
 import {
   handlePreToolUse
-} from "../chunk-2XHBYMVN.js";
-import "../chunk-BHRMHDOO.js";
-import "../chunk-2CUE3XXS.js";
-import "../chunk-SGGR5MN2.js";
+} from "../chunk-GEN4YTNR.js";
+import "../chunk-FA3YPD4P.js";
+import "../chunk-3DLVLVEM.js";
+import "../chunk-ZXYHVZZZ.js";
 import {
   fetchAccountPublicKey
-} from "../chunk-FLC4TVXH.js";
-import "../chunk-5WTEKIAS.js";
-import "../chunk-KM7AEGKF.js";
+} from "../chunk-4GKLAQY4.js";
+import "../chunk-AXOMDPA7.js";
+import "../chunk-2YF72RC5.js";
 import "../chunk-6ICPEJY5.js";
 import {
   fetchModeOverride,
@@ -18,31 +18,31 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-AXB4ABUD.js";
-import "../chunk-A3QQWXIE.js";
+} from "../chunk-BIV2LKDK.js";
+import "../chunk-XUVKAWV3.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
-} from "../chunk-NFH2H7PD.js";
+} from "../chunk-DDRSG6JL.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-7V6PJFDF.js";
-import "../chunk-VEGS4NYF.js";
-import "../chunk-ZV3262AA.js";
-import "../chunk-ZLGCNHJG.js";
+import "../chunk-AG5ATWVT.js";
+import "../chunk-GRL4VVUP.js";
+import "../chunk-CXG7XA4E.js";
+import "../chunk-4YWINUPJ.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-EJMXZH5E.js";
-import "../chunk-2VQZC6DW.js";
+import "../chunk-KJ2W7ECE.js";
+import "../chunk-3TRGUDQ3.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-5Q2QJ2AL.js";
-import "../chunk-OOKIWOMK.js";
+} from "../chunk-5UKZXDHV.js";
+import "../chunk-47RVFUEG.js";
 import {
   resolvePolicy
-} from "../chunk-KGSN2SOL.js";
+} from "../chunk-TVP5UU33.js";
 export {
   askUser,
   cancelQuestion,

package/dist/{upgrade-lock-CZRCHYVU.js → upgrade-lock-6LLAEJTW.js}

@@ -5,10 +5,10 @@ import {
   installWithUpgradeLock,
   ownsUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-PPGLIWOR.js";
-import "./chunk-2VQZC6DW.js";
+} from "./chunk-I52A3NLY.js";
+import "./chunk-3TRGUDQ3.js";
 import "./chunk-AQFEP65J.js";
-import "./chunk-KGSN2SOL.js";
+import "./chunk-TVP5UU33.js";
 export {
   claimUpgradeLock,
   finishWithUpgradeLock,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pushary",
-  "version": "1.9.25",
+  "version": "1.9.26",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",