pushary 1.9.35 → 1.9.36

package/dist/{chunk-7FQL5NWJ.js → chunk-2DZBIELP.js}

@@ -241,6 +241,20 @@ var AGENTS = {
     enforcementDetail: "Shell commands, file writes, edits and MCP calls through native PreToolUse hooks in ~/.gemini/config/hooks.json, answered allow or deny.",
     capabilityNote: 'Antigravity CLI ignores a hook\'s allow unless it runs in always-proceed mode, so connecting it sets `toolPermission: "always-proceed"` when you never chose a mode, and disconnecting puts it back. Pushary is then the only gate: it answers allow or deny and never ask, and a call it cannot decide, one nobody answers, or one made after Pushary was removed is blocked with a reason.'
   },
+  grok: {
+    ...defaults,
+    label: "Grok Build",
+    hookSource: "grok",
+    bridged: true,
+    policyAgent: "grok",
+    repoAware: true,
+    disconnectable: true,
+    enforcement: "enforced",
+    connectVia: "Native hooks + MCP",
+    setupCommand: PUSHARY_SETUP_COMMAND,
+    enforcementDetail: "Shell, edits and MCP calls through native PreToolUse hooks. Grok's own permission checks still apply after a phone approval.",
+    capabilityNote: "Grok fails open if it kills a hook or cannot run it. Setup leaves Grok's permission mode unchanged. Native question and plan dialogs stay in Grok; proactive phone questions use Pushary MCP."
+  },
   windsurf: {
     ...defaults,
     label: "Windsurf",
@@ -296,6 +310,59 @@ var normalizeAgentId = (value, accepted) => {
   return accepted.find((candidate) => names.includes(candidate)) ?? null;
 };
 
+// ../contracts/src/json-record.ts
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+
+// ../contracts/src/grok.ts
+var GROK_FIELD_ALIASES = {
+  sessionId: "session_id",
+  transcriptPath: "transcript_path",
+  permissionMode: "permission_mode",
+  toolName: "tool_name",
+  toolInput: "tool_input",
+  toolUseId: "tool_use_id",
+  toolResult: "tool_response",
+  notificationType: "notification_type",
+  lastAssistantMessage: "last_assistant_message",
+  stopHookActive: "stop_hook_active",
+  subagentId: "agent_id",
+  subagentType: "agent_type",
+  modelId: "model",
+  errorDetails: "error_details",
+  durationMs: "duration_ms"
+};
+var grokToolResult = (value) => {
+  if (!isRecord(value)) return value;
+  const { is_error, ...result } = value;
+  if (is_error === true) return { ...result, error: "Grok reported an MCP tool error." };
+  if (value.type === "Bash" && typeof value.exit_code === "number" && value.exit_code !== 0) {
+    return { ...result, error: `Command exited with code ${value.exit_code}.` };
+  }
+  if (value.type === "SearchReplace" && value.EditsApplied === void 0) return { ...result, error: "Grok could not apply the edit." };
+  if (value.type === "ApplyPatch" && value.Success === void 0) return { ...result, error: "Grok could not apply the patch." };
+  return is_error === false ? result : value;
+};
+var GROK_UNREADABLE_CALL = "Pushary could not read the complete Grok tool call. Nothing was approved; retry the call.";
+var isGrokHookPayload = (value) => isRecord(value) && typeof value.hookEventName === "string" && typeof value.sessionId === "string";
+var isGrokSessionEndStop = (event, reason) => event === "Stop" && (reason === "channel_closed" || reason === "shutdown");
+var grokHookInput = (event, payload) => {
+  const shaped = { ...payload };
+  for (const [native, canonical] of Object.entries(GROK_FIELD_ALIASES)) {
+    if (payload[native] !== void 0) shaped[canonical] = payload[native];
+  }
+  const name = typeof payload.hook_event_name === "string" && payload.hook_event_name.length > 0 ? payload.hook_event_name : event;
+  if (name) shaped.hook_event_name = name;
+  const tool = shaped.tool_name;
+  if (typeof tool === "string" && !tool.startsWith("mcp__") && /^[^_].*__.+$/.test(tool)) {
+    shaped.tool_name = `mcp__${tool}`;
+  }
+  if (shaped.tool_response !== void 0) shaped.tool_response = grokToolResult(shaped.tool_response);
+  if (payload.toolInputTruncated === true || name === "PreToolUse" && shaped.tool_input === void 0) shaped.tool_input = null;
+  if (name === "PostToolUseFailure") shaped.tool_response = { error: payload.error };
+  if (name === "StopCancelled") shaped.error = payload.reason ?? "cancelled";
+  return shaped;
+};
+
 // ../contracts/src/shell-tools.ts
 var SHELL_TOOL = "Bash";
 var POWERSHELL_TOOL = "PowerShell";
@@ -312,8 +379,10 @@ var POSIX_SHELL_TOOLS = new Set(
 var toolNameForAPosixReading = (toolName) => shellDialectOf(toolName) === "posix" ? SHELL_TOOL : toolName;
 
 // ../contracts/src/agent-wiring.ts
-var COMPATIBLE_AGENT_TYPES = ["qwen_code", "codebuddy", "qoder", "droid", "devin", "antigravity_cli"];
+var COMPATIBLE_AGENT_TYPES = ["qwen_code", "codebuddy", "qoder", "droid", "devin", "antigravity_cli", "grok"];
 var isCompatibleAgentType = (value) => typeof value === "string" && COMPATIBLE_AGENT_TYPES.includes(value);
+var homeJson = (...path) => ({ root: "home", path, format: "json" });
+var homeFile = (...path) => ({ root: "home", path });
 var CANONICAL_PATH_KEYS = ["file_path", "path", "notebook_path"];
 var CANONICAL_COMMAND_KEYS = ["command"];
 var SHELL_TOOLS = /* @__PURE__ */ new Set([SHELL_TOOL, POWERSHELL_TOOL]);
@@ -406,7 +475,7 @@ var renderPreToolUseVerdict = (profile, verdict) => {
 var homePath = (segments) => `~/${segments.join("/")}`;
 var pusharyMissingReason = (profile) => {
   const settingBack = profile.soleGate ? ` and remove ${profile.soleGate.key} from ${homePath(profile.soleGate.file)}` : "";
-  return `Pushary is not installed on this computer any more, so nothing can approve this call and it did not run. Reinstall Pushary, or remove the pushary hook from ${homePath(profile.configFile)}${settingBack}.`;
+  return `Pushary is not installed on this computer any more, so nothing can approve this call and it did not run. Reinstall Pushary, or remove the pushary hook from ${homePath(defaultHomeSegments(profile.configFile))}${settingBack}.`;
 };
 var refusalOutput = (profile, reason) => JSON.stringify(renderPreToolUseVerdict(profile, {
   hookSpecificOutput: { permissionDecision: "deny", permissionDecisionReason: reason }
@@ -445,7 +514,10 @@ var fromAntigravity = (event, payload) => {
     ...error ? { tool_response: { error } } : {}
   };
 };
-var claudeShapedHookInput = (dialect, event, payload) => dialect === "antigravity" ? fromAntigravity(event, payload) : payload;
+var claudeShapedHookInput = (dialect, event, payload) => {
+  if (dialect === "grok") return grokHookInput(event, payload);
+  return dialect === "antigravity" ? fromAntigravity(event, payload) : payload;
+};
 var CLAUDE_SHAPED_EVENTS = [
   "PreToolUse",
   "PostToolUse",
@@ -470,7 +542,7 @@ var QWEN_CODE = {
   source: "qwen",
   label: "Qwen Code",
   binary: "qwen",
-  configFile: [".qwen", "settings.json"],
+  configFile: homeJson(".qwen", "settings.json"),
   hooksKeyPath: ["hooks"],
   toolAliases: {
     run_shell_command: "Bash",
@@ -492,8 +564,8 @@ var QWEN_CODE = {
   wire: "permission_decision",
   payload: "claude",
   nonToolEntries: "nested",
-  mcp: { shape: "gemini_http", file: [".qwen", "settings.json"], trusted: true },
-  instructions: { file: [".qwen", "QWEN.md"], label: "Qwen Code" },
+  mcp: { shape: "gemini_http", file: homeJson(".qwen", "settings.json"), container: "mcpServers", trusted: true },
+  instructions: { file: homeFile(".qwen", "QWEN.md"), label: "Qwen Code" },
   permissionRuleFile: null,
   configDirIsShared: false,
   soleGate: null,
@@ -504,7 +576,7 @@ var CODEBUDDY = {
   source: "codebuddy",
   label: "CodeBuddy",
   binary: "codebuddy",
-  configFile: [".codebuddy", "settings.json"],
+  configFile: homeJson(".codebuddy", "settings.json"),
   hooksKeyPath: ["hooks"],
   toolAliases: {},
   inputKeyAliases: {},
@@ -516,9 +588,9 @@ var CODEBUDDY = {
   wire: "permission_decision",
   payload: "claude",
   nonToolEntries: "nested",
-  mcp: { shape: "claude_http", file: [".codebuddy", ".mcp.json"], trusted: false },
-  instructions: { file: [".codebuddy", "CODEBUDDY.md"], label: "CodeBuddy" },
-  permissionRuleFile: [".codebuddy", "settings.json"],
+  mcp: { shape: "claude_http", file: homeJson(".codebuddy", ".mcp.json"), container: "mcpServers", trusted: false },
+  instructions: { file: homeFile(".codebuddy", "CODEBUDDY.md"), label: "CodeBuddy" },
+  permissionRuleFile: homeJson(".codebuddy", "settings.json"),
   configDirIsShared: false,
   soleGate: null,
   taskControl: null
@@ -528,7 +600,7 @@ var QODER = {
   source: "qoder",
   label: "Qoder",
   binary: "qoder",
-  configFile: [".qoder", "settings.json"],
+  configFile: homeJson(".qoder", "settings.json"),
   hooksKeyPath: ["hooks"],
   toolAliases: {},
   inputKeyAliases: {},
@@ -540,7 +612,7 @@ var QODER = {
   wire: "permission_decision",
   payload: "claude",
   nonToolEntries: "nested",
-  mcp: { shape: "claude_http", file: [".qoder", "settings.json"], trusted: true },
+  mcp: { shape: "claude_http", file: homeJson(".qoder", "settings.json"), container: "mcpServers", trusted: true },
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: false,
@@ -552,7 +624,7 @@ var DROID = {
   source: "droid",
   label: "Droid",
   binary: "droid",
-  configFile: [".factory", "hooks.json"],
+  configFile: homeJson(".factory", "hooks.json"),
   hooksKeyPath: [],
   toolAliases: {
     Execute: "Bash",
@@ -581,7 +653,7 @@ var DEVIN = {
   source: "devin",
   label: "Devin CLI",
   binary: "devin",
-  configFile: [".config", "devin", "config.json"],
+  configFile: homeJson(".config", "devin", "config.json"),
   hooksKeyPath: ["hooks"],
   toolAliases: {
     exec: "Bash",
@@ -624,7 +696,7 @@ var ANTIGRAVITY_CLI = {
   source: "antigravity",
   label: "Antigravity CLI",
   binary: "agy",
-  configFile: [".gemini", "config", "hooks.json"],
+  configFile: homeJson(".gemini", "config", "hooks.json"),
   hooksKeyPath: ["pushary"],
   toolAliases: {
     run_command: "Bash",
@@ -648,7 +720,7 @@ var ANTIGRAVITY_CLI = {
   wire: "allow_deny_decision",
   payload: "antigravity",
   nonToolEntries: "handler",
-  mcp: { shape: "antigravity_http", file: [".gemini", "config", "mcp_config.json"], trusted: false },
+  mcp: { shape: "antigravity_http", file: homeJson(".gemini", "config", "mcp_config.json"), container: "mcpServers", trusted: false },
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: true,
@@ -661,13 +733,48 @@ var ANTIGRAVITY_CLI = {
   },
   taskControl: ANTIGRAVITY_TASK_CONTROL
 };
-var HOOK_COMPATIBLE_PROFILES = Object.freeze([QWEN_CODE, CODEBUDDY, QODER, DROID, DEVIN, ANTIGRAVITY_CLI]);
+var GROK = {
+  agentType: "grok",
+  source: "grok",
+  label: "Grok Build",
+  binary: "grok",
+  configFile: { root: "grok_home", path: ["hooks", "pushary.json"], format: "json" },
+  hooksKeyPath: ["hooks"],
+  toolAliases: {
+    run_terminal_command: "Bash",
+    search_replace: "Edit",
+    apply_patch: "Edit",
+    read_file: "Read",
+    web_search: "WebSearch",
+    web_fetch: "WebFetch",
+    spawn_subagent: "Task",
+    task_output: "BashOutput",
+    kill_task: "KillShell"
+  },
+  inputKeyAliases: {},
+  extraMatchers: [".*"],
+  pathInputKeys: [],
+  shellCommandKeys: [],
+  shellContextKeys: ["cwd"],
+  events: ["PreToolUse", "PostToolUse", "PostToolUseFailure", "Stop", "StopCancelled", "StopFailure", "UserPromptSubmit", "Notification", "SessionStart", "SessionEnd", "SubagentStart", "SubagentStop", "PreCompact", "PostCompact"],
+  wire: "permission_decision",
+  payload: "grok",
+  nonToolEntries: "nested",
+  mcp: { shape: "grok_http", file: { root: "grok_home", path: ["config.toml"], format: "toml" }, container: "mcp_servers", trusted: false },
+  instructions: { file: { root: "grok_home", path: ["rules", "pushary.md"] }, label: "Grok Build" },
+  permissionRuleFile: null,
+  configDirIsShared: false,
+  soleGate: null,
+  taskControl: null
+};
+var HOOK_COMPATIBLE_PROFILES = Object.freeze([QWEN_CODE, CODEBUDDY, QODER, DROID, DEVIN, ANTIGRAVITY_CLI, GROK]);
 var hookCompatibleProfile = (agentType) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.agentType === agentType);
 var hookCompatibleProfileBySource = (source) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.source === source);
+var defaultHomeSegments = (file) => file.root === "home" ? file.path : [".grok", ...file.path];
 var compatibleTargetFiles = (profile) => {
   const seen = /* @__PURE__ */ new Map();
   for (const file of [profile.configFile, profile.mcp?.file, profile.permissionRuleFile, profile.instructions?.file]) {
-    if (file) seen.set(file.join("/"), file);
+    if (file) seen.set(`${file.root}/${file.path.join("/")}`, file);
   }
   return [...seen.values()];
 };
@@ -736,9 +843,6 @@ var redactSecrets = (text) => applyRedactionRules(SECRET_REDACTION_RULES, text);
 var redactSecretsFromContent = (text) => applyRedactionRules(CUT_OFF_TEXT_REDACTION_RULES, text);
 var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
 
-// ../contracts/src/json-record.ts
-var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-
 // ../contracts/src/shell-analysis.ts
 var SHELL_WORD_SEPARATOR = /[ \t\n]/;
 var ARITHMETIC_EVALUATING_EXPANSION = /\$[#+=~^]*(?:[A-Za-z_][A-Za-z0-9_]*|[0-9]+|[-?$!@*#])?\[/;
@@ -2537,7 +2641,8 @@ var HOOK_BUDGETS = {
   qoder: { budgetSeconds: 600, guardSeconds: 10 },
   droid: { budgetSeconds: 600, guardSeconds: 10 },
   devin: { budgetSeconds: 600, guardSeconds: 10 },
-  antigravity: { budgetSeconds: 600, guardSeconds: 10 }
+  antigravity: { budgetSeconds: 600, guardSeconds: 10 },
+  grok: { budgetSeconds: 600, guardSeconds: 10 }
 };
 var hookMaxWaitSeconds = (agent) => Math.max(HOOK_BUDGETS[agent].budgetSeconds - HOOK_BUDGETS[agent].guardSeconds, 1);
 var HOOK_HOLD_BUDGET_FLAG = "--hold-budget";
@@ -5121,7 +5226,9 @@ var shouldDeferToNativeMode = (permissionMode, toolName, options = {}) => {
 var AGENT_QUESTION_TOOL = "AskUserQuestion";
 var AGENT_QUESTION_STRATEGY = { native: "native_dialog", updatedInput: "updated_input", none: "not_a_question" };
 var UPDATED_INPUT_QUESTION_SOURCES = /* @__PURE__ */ new Set(["claude", "qoder", "codebuddy", "droid"]);
+var GROK_NATIVE_DIALOG_TOOLS = /* @__PURE__ */ new Set(["ask_user_question", "exit_plan_mode"]);
 function agentQuestionStrategy(source, event, toolName) {
+  if (source === "grok" && GROK_NATIVE_DIALOG_TOOLS.has(toolName)) return AGENT_QUESTION_STRATEGY.native;
   if (toolName !== AGENT_QUESTION_TOOL) return AGENT_QUESTION_STRATEGY.none;
   if (source !== null && event === "PreToolUse" && UPDATED_INPUT_QUESTION_SOURCES.has(source)) return AGENT_QUESTION_STRATEGY.updatedInput;
   return AGENT_QUESTION_STRATEGY.native;
@@ -5400,6 +5507,8 @@ var pendingCommandEvents = (source) => {
     // so there is nothing for this to print.
     case "opencode":
       return [];
+    case "grok":
+      return ["PostToolUse"];
     case "qwen":
     case "codebuddy":
     case "qoder":
@@ -5788,6 +5897,10 @@ export {
   MANAGED_PROVIDERS,
   DISCONNECT_AGENT_IDS,
   normalizeAgentId,
+  isRecord,
+  GROK_UNREADABLE_CALL,
+  isGrokHookPayload,
+  isGrokSessionEndStop,
   isCompatibleAgentType,
   PHONE_ANSWERED_TOOLS,
   canonicalToolName,
@@ -5809,7 +5922,6 @@ export {
   redactSecrets,
   redactSecretsFromContent,
   redactSecretsDeep,
-  isRecord,
   degradedLine,
   hookWritePath,
   MAX_HOOK_ACTIVATION_EVIDENCE_ROWS,

package/dist/{chunk-DCBSD22V.js → chunk-42FTY5II.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-NMQLY4PE.js";
+} from "./chunk-5S2P2CK6.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,11 +9,11 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   configFilePath
-} from "./chunk-3LS3GFJW.js";
+} from "./chunk-PRKH662J.js";
 import {
   API_KEY_PREFIX_PATTERN,
   isRecord
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-2DZBIELP.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-PEEJP4HN.js → chunk-4E4PZQFE.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-FDNMQEU6.js";
+} from "./chunk-JWURAYXK.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
 import {
   readKeySource
-} from "./chunk-DCBSD22V.js";
+} from "./chunk-42FTY5II.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-7IVV4LLF.js";
+} from "./chunk-GNESC5EF.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-3LS3GFJW.js";
+} from "./chunk-PRKH662J.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-6OGDGQTT.js → chunk-4NMDFPK7.js}

@@ -2,23 +2,23 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-QJ3ENGBT.js";
+} from "./chunk-ULDOQF4Q.js";
 import {
   AGENT_CHOICES
-} from "./chunk-57FFQR46.js";
+} from "./chunk-EQXMVKKD.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-36ZCFJUI.js";
+} from "./chunk-5ML6E3L7.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-K5X25GUV.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-2DZBIELP.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-43H2FUNN.js → chunk-556JCOMK.js}

@@ -14,19 +14,19 @@ import {
 } from "./chunk-FO3MDD26.js";
 import {
   callMcpTool
-} from "./chunk-H52HBSOD.js";
+} from "./chunk-BS64ZHTB.js";
 import {
   reportedInstallSource
-} from "./chunk-NMQLY4PE.js";
+} from "./chunk-5S2P2CK6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-45OXG3VR.js";
+} from "./chunk-LL256PHP.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS,
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-2DZBIELP.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-FQQSW7MD.js → chunk-55XIK7YS.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-K5X25GUV.js";
 import {
   writeJsonAtomic
 } from "./chunk-AQFEP65J.js";

package/dist/{chunk-36ZCFJUI.js → chunk-5ML6E3L7.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-K5X25GUV.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-NMQLY4PE.js → chunk-5S2P2CK6.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-3LS3GFJW.js";
+} from "./chunk-PRKH662J.js";
 import {
   normalizeInstallSource
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-2DZBIELP.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-SMRMWDFE.js → chunk-6LKIK7V2.js}

@@ -2,7 +2,7 @@ import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-DQKEGNTI.js";
+} from "./chunk-U2PUHT4W.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -10,28 +10,29 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-OZMGO4WF.js";
+} from "./chunk-FBKGGIFB.js";
 import {
   withRetry
-} from "./chunk-H52HBSOD.js";
+} from "./chunk-BS64ZHTB.js";
 import {
   getMachineId
-} from "./chunk-ULJFIF5N.js";
+} from "./chunk-EGTVN6YV.js";
 import {
   reportedInstallSource
-} from "./chunk-NMQLY4PE.js";
+} from "./chunk-5S2P2CK6.js";
 import {
   canonicalJson
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-K5X25GUV.js";
 import {
   writeFileAtomic
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-3LS3GFJW.js";
+} from "./chunk-PRKH662J.js";
 import {
   ACTION_BODY_MAX,
+  AGENTS,
   AGENT_LABELS_BY_TYPE,
   BLANK_TASK_INPUT_TOOL,
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
@@ -63,7 +64,7 @@ import {
   toToolLookup,
   truncateLine,
   unansweredRefusalReason
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-2DZBIELP.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";
@@ -72,8 +73,8 @@ var hookPrefixes = {
   PowerShell: (input) => `powershell: ${input.command ?? "(no command)"}`,
   Monitor: (input) => `monitor: ${input.command ?? "(no command)"}`,
   Write: (input) => `write file: ${input.file_path ?? "(unknown path)"}`,
-  Edit: (input) => `edit file: ${input.file_path ?? "(unknown path)"}`,
-  MultiEdit: (input) => `edit file: ${input.file_path ?? "(unknown path)"}`,
+  Edit: (input) => `edit file: ${editTarget(input) ?? "(unknown path)"}`,
+  MultiEdit: (input) => `edit file: ${editTarget(input) ?? "(unknown path)"}`,
   Read: (input) => `read file: ${input.file_path ?? "(unknown path)"}`,
   // Without an entry here the fallback stringifies the whole tool input, and for
   // ExitPlanMode that input IS the plan: the action line became a truncated dump of
@@ -104,13 +105,18 @@ var describeTodoProgress = (todos) => {
   if (label) return `${label.trim()} (${done}/${total} done)`;
   return `${done}/${total} tasks done`;
 };
+var editTarget = (input) => {
+  if (typeof input.file_path === "string") return input.file_path;
+  if (!Array.isArray(input.file_paths) || !input.file_paths.every((path) => typeof path === "string")) return void 0;
+  return input.file_paths.join(", ");
+};
 var eventPrefixes = {
   Bash: (input) => `ran: ${String(input.command ?? "")}`,
   PowerShell: (input) => `ran: ${String(input.command ?? "")}`,
   Monitor: (input) => `ran: ${String(input.command ?? "")}`,
   Write: (input) => `wrote: ${input.file_path ?? "unknown"}`,
-  Edit: (input) => `edited: ${input.file_path ?? "unknown"}`,
-  MultiEdit: (input) => `edited: ${input.file_path ?? "unknown"}`,
+  Edit: (input) => `edited: ${editTarget(input) ?? "unknown"}`,
+  MultiEdit: (input) => `edited: ${editTarget(input) ?? "unknown"}`,
   Read: (input) => `read: ${input.file_path ?? "unknown"}`,
   TodoWrite: (input) => describeTodoProgress(input.todos),
   Task: (input) => `ran subagent: ${describeTaskCall(input)}`,
@@ -233,11 +239,25 @@ var OPENCODE_TOOL_NAMES = {
 var PATCH_ARG_KEYS = ["command", "patch", "input"];
 var patchedFilesIn = (input) => [...new Set(PATCH_ARG_KEYS.flatMap((key) => parseApplyPatchFiles(input[key])))];
 var lookupsForInput = (profile, toolName, input, absolute) => {
-  const lookup = toToolLookup(profile, toolName, input, absolute);
+  const gateInput = profile.source === "grok" && toolName === "apply_patch" ? { patch: input.patch, diff: input.patch } : input;
+  const lookup = toToolLookup(profile, toolName, gateInput, absolute);
   if (!lookup.unreadable) return [lookup];
-  const files = patchedFilesIn(input);
+  const files = patchedFilesIn(gateInput);
   if (files.length === 0) return [lookup];
-  return files.slice(0, GATE_MAX_TOOL_INPUTS + 1).map((file) => toToolLookup(profile, toolName, { ...input, file_path: absolute(file) }, absolute));
+  return files.slice(0, GATE_MAX_TOOL_INPUTS + 1).map((file) => toToolLookup(profile, toolName, { ...gateInput, file_path: absolute(file) }, absolute));
+};
+var compatibleToolLookup = (profile, toolName, input, cwd) => {
+  const absolute = (path) => cwd && !isAbsolute(path) ? resolve(cwd, path) : path;
+  const lookups = lookupsForInput(profile, toolName, input, absolute);
+  const first = lookups[0];
+  if (!first) return { tool: canonicalToolName(profile, toolName), input, unreadable: true };
+  if (lookups.length === 1) return first;
+  const { file_path, ...content } = first.input;
+  return {
+    tool: first.tool,
+    input: { ...content, file_paths: lookups.map((lookup) => lookup.input.file_path) },
+    unreadable: lookups.length > GATE_MAX_TOOL_INPUTS || lookups.some((lookup) => lookup.unreadable)
+  };
 };
 var compatibleGateInputs = (profile, toolName, toolInputs, cwd) => {
   const absolute = (path) => cwd && !isAbsolute(path) ? resolve(cwd, path) : path;
@@ -377,6 +397,10 @@ var deriveReceiptMeta = (toolName, toolInput, toolResult, cwd) => {
       ...toolInput,
       file_path: toolInput.file_path ?? toolInput.absolute_path ?? toolInput.path
     };
+    if (canonicalTool === "Edit" && Array.isArray(canonicalInput.file_paths)) {
+      const patch = firstString(canonicalInput.diff, canonicalInput.command, canonicalInput.patch, canonicalInput.input);
+      if (patch) return { kind: "edit", target: redactSecrets(patch).slice(0, RECEIPT_TARGET_MAX_LENGTH), ok };
+    }
     if (FILE_TARGET_TOOLS.has(canonicalTool)) {
       const filePath = canonicalInput.file_path;
       if (typeof filePath !== "string" || !filePath) return void 0;
@@ -462,7 +486,8 @@ var AGENT_IDENTITIES = {
   qoder: { type: "qoder", label: AGENT_LABELS_BY_TYPE.qoder },
   droid: { type: "droid", label: AGENT_LABELS_BY_TYPE.droid },
   devin: { type: "devin", label: AGENT_LABELS_BY_TYPE.devin },
-  antigravity: { type: "antigravity_cli", label: AGENT_LABELS_BY_TYPE.antigravity_cli }
+  antigravity: { type: "antigravity_cli", label: AGENT_LABELS_BY_TYPE.antigravity_cli },
+  grok: { type: "grok", label: AGENTS.grok.label }
 };
 var TEAMMATE_IDLE_ACTION = "A teammate went idle";
 var CLAUDE_MEANINGS = {
@@ -495,6 +520,7 @@ var MEANING_BY_HOOK = {
   droid: compatibleMeanings("droid"),
   devin: compatibleMeanings("devin"),
   antigravity: compatibleMeanings("antigravity_cli"),
+  grok: { ...compatibleMeanings("grok"), PostToolUseFailure: { kind: "tool", event: "tool_complete" }, StopCancelled: { kind: "stop_failure", event: "turn_error" } },
   codex: {
     PostToolUse: { kind: "tool", event: "tool_complete" },
     UserPromptSubmit: { kind: "prompt", event: "user_prompt" },
@@ -2254,9 +2280,9 @@ export {
   UNNAMED_ACTION,
   describeToolCall,
   deriveToolTarget,
-  parseApplyPatchFiles,
   patchDeletesFiles,
   OPENCODE_TOOL_NAMES,
+  compatibleToolLookup,
   canonicalGateInputs,
   scopePathFor,
   deriveActionBody,

package/dist/{chunk-U7CN5HG2.js → chunk-7GQILLZD.js}

@@ -1,9 +1,9 @@
 import {
   APPROVAL_SETTINGS_PATH
-} from "./chunk-PEEJP4HN.js";
+} from "./chunk-4E4PZQFE.js";
 import {
   readMacAppAgentKey
-} from "./chunk-EGTRIM74.js";
+} from "./chunk-VRALPR4B.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -13,13 +13,13 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-DCBSD22V.js";
+} from "./chunk-42FTY5II.js";
 import {
   absoluteUrl
-} from "./chunk-7IVV4LLF.js";
+} from "./chunk-GNESC5EF.js";
 import {
   isValidApiKey
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-2DZBIELP.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";