pushary 1.9.35 → 1.9.37

package/dist/{chunk-7FQL5NWJ.js → chunk-235LKHLW.js}

@@ -241,6 +241,20 @@ var AGENTS = {
     enforcementDetail: "Shell commands, file writes, edits and MCP calls through native PreToolUse hooks in ~/.gemini/config/hooks.json, answered allow or deny.",
     capabilityNote: 'Antigravity CLI ignores a hook\'s allow unless it runs in always-proceed mode, so connecting it sets `toolPermission: "always-proceed"` when you never chose a mode, and disconnecting puts it back. Pushary is then the only gate: it answers allow or deny and never ask, and a call it cannot decide, one nobody answers, or one made after Pushary was removed is blocked with a reason.'
   },
+  grok: {
+    ...defaults,
+    label: "Grok Build",
+    hookSource: "grok",
+    bridged: true,
+    policyAgent: "grok",
+    repoAware: true,
+    disconnectable: true,
+    enforcement: "enforced",
+    connectVia: "Native hooks + MCP",
+    setupCommand: PUSHARY_SETUP_COMMAND,
+    enforcementDetail: "Shell, edits and MCP calls through native PreToolUse hooks. Grok's own permission checks still apply after a phone approval.",
+    capabilityNote: "Grok fails open if it kills a hook or cannot run it. Setup leaves Grok's permission mode unchanged. Native question and plan dialogs stay in Grok; proactive phone questions use Pushary MCP."
+  },
   windsurf: {
     ...defaults,
     label: "Windsurf",
@@ -296,6 +310,59 @@ var normalizeAgentId = (value, accepted) => {
   return accepted.find((candidate) => names.includes(candidate)) ?? null;
 };
 
+// ../contracts/src/json-record.ts
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+
+// ../contracts/src/grok.ts
+var GROK_FIELD_ALIASES = {
+  sessionId: "session_id",
+  transcriptPath: "transcript_path",
+  permissionMode: "permission_mode",
+  toolName: "tool_name",
+  toolInput: "tool_input",
+  toolUseId: "tool_use_id",
+  toolResult: "tool_response",
+  notificationType: "notification_type",
+  lastAssistantMessage: "last_assistant_message",
+  stopHookActive: "stop_hook_active",
+  subagentId: "agent_id",
+  subagentType: "agent_type",
+  modelId: "model",
+  errorDetails: "error_details",
+  durationMs: "duration_ms"
+};
+var grokToolResult = (value) => {
+  if (!isRecord(value)) return value;
+  const { is_error, ...result } = value;
+  if (is_error === true) return { ...result, error: "Grok reported an MCP tool error." };
+  if (value.type === "Bash" && typeof value.exit_code === "number" && value.exit_code !== 0) {
+    return { ...result, error: `Command exited with code ${value.exit_code}.` };
+  }
+  if (value.type === "SearchReplace" && value.EditsApplied === void 0) return { ...result, error: "Grok could not apply the edit." };
+  if (value.type === "ApplyPatch" && value.Success === void 0) return { ...result, error: "Grok could not apply the patch." };
+  return is_error === false ? result : value;
+};
+var GROK_UNREADABLE_CALL = "Pushary could not read the complete Grok tool call. Nothing was approved; retry the call.";
+var isGrokHookPayload = (value) => isRecord(value) && typeof value.hookEventName === "string" && typeof value.sessionId === "string";
+var isGrokSessionEndStop = (event, reason) => event === "Stop" && (reason === "channel_closed" || reason === "shutdown");
+var grokHookInput = (event, payload) => {
+  const shaped = { ...payload };
+  for (const [native, canonical] of Object.entries(GROK_FIELD_ALIASES)) {
+    if (payload[native] !== void 0) shaped[canonical] = payload[native];
+  }
+  const name = typeof payload.hook_event_name === "string" && payload.hook_event_name.length > 0 ? payload.hook_event_name : event;
+  if (name) shaped.hook_event_name = name;
+  const tool = shaped.tool_name;
+  if (typeof tool === "string" && !tool.startsWith("mcp__") && /^[^_].*__.+$/.test(tool)) {
+    shaped.tool_name = `mcp__${tool}`;
+  }
+  if (shaped.tool_response !== void 0) shaped.tool_response = grokToolResult(shaped.tool_response);
+  if (payload.toolInputTruncated === true || name === "PreToolUse" && shaped.tool_input === void 0) shaped.tool_input = null;
+  if (name === "PostToolUseFailure") shaped.tool_response = { error: payload.error };
+  if (name === "StopCancelled") shaped.error = payload.reason ?? "cancelled";
+  return shaped;
+};
+
 // ../contracts/src/shell-tools.ts
 var SHELL_TOOL = "Bash";
 var POWERSHELL_TOOL = "PowerShell";
@@ -312,8 +379,10 @@ var POSIX_SHELL_TOOLS = new Set(
 var toolNameForAPosixReading = (toolName) => shellDialectOf(toolName) === "posix" ? SHELL_TOOL : toolName;
 
 // ../contracts/src/agent-wiring.ts
-var COMPATIBLE_AGENT_TYPES = ["qwen_code", "codebuddy", "qoder", "droid", "devin", "antigravity_cli"];
+var COMPATIBLE_AGENT_TYPES = ["qwen_code", "codebuddy", "qoder", "droid", "devin", "antigravity_cli", "grok"];
 var isCompatibleAgentType = (value) => typeof value === "string" && COMPATIBLE_AGENT_TYPES.includes(value);
+var homeJson = (...path) => ({ root: "home", path, format: "json" });
+var homeFile = (...path) => ({ root: "home", path });
 var CANONICAL_PATH_KEYS = ["file_path", "path", "notebook_path"];
 var CANONICAL_COMMAND_KEYS = ["command"];
 var SHELL_TOOLS = /* @__PURE__ */ new Set([SHELL_TOOL, POWERSHELL_TOOL]);
@@ -406,7 +475,7 @@ var renderPreToolUseVerdict = (profile, verdict) => {
 var homePath = (segments) => `~/${segments.join("/")}`;
 var pusharyMissingReason = (profile) => {
   const settingBack = profile.soleGate ? ` and remove ${profile.soleGate.key} from ${homePath(profile.soleGate.file)}` : "";
-  return `Pushary is not installed on this computer any more, so nothing can approve this call and it did not run. Reinstall Pushary, or remove the pushary hook from ${homePath(profile.configFile)}${settingBack}.`;
+  return `Pushary is not installed on this computer any more, so nothing can approve this call and it did not run. Reinstall Pushary, or remove the pushary hook from ${homePath(defaultHomeSegments(profile.configFile))}${settingBack}.`;
 };
 var refusalOutput = (profile, reason) => JSON.stringify(renderPreToolUseVerdict(profile, {
   hookSpecificOutput: { permissionDecision: "deny", permissionDecisionReason: reason }
@@ -445,7 +514,10 @@ var fromAntigravity = (event, payload) => {
     ...error ? { tool_response: { error } } : {}
   };
 };
-var claudeShapedHookInput = (dialect, event, payload) => dialect === "antigravity" ? fromAntigravity(event, payload) : payload;
+var claudeShapedHookInput = (dialect, event, payload) => {
+  if (dialect === "grok") return grokHookInput(event, payload);
+  return dialect === "antigravity" ? fromAntigravity(event, payload) : payload;
+};
 var CLAUDE_SHAPED_EVENTS = [
   "PreToolUse",
   "PostToolUse",
@@ -470,7 +542,7 @@ var QWEN_CODE = {
   source: "qwen",
   label: "Qwen Code",
   binary: "qwen",
-  configFile: [".qwen", "settings.json"],
+  configFile: homeJson(".qwen", "settings.json"),
   hooksKeyPath: ["hooks"],
   toolAliases: {
     run_shell_command: "Bash",
@@ -492,8 +564,8 @@ var QWEN_CODE = {
   wire: "permission_decision",
   payload: "claude",
   nonToolEntries: "nested",
-  mcp: { shape: "gemini_http", file: [".qwen", "settings.json"], trusted: true },
-  instructions: { file: [".qwen", "QWEN.md"], label: "Qwen Code" },
+  mcp: { shape: "gemini_http", file: homeJson(".qwen", "settings.json"), container: "mcpServers", trusted: true },
+  instructions: { file: homeFile(".qwen", "QWEN.md"), label: "Qwen Code" },
   permissionRuleFile: null,
   configDirIsShared: false,
   soleGate: null,
@@ -504,7 +576,7 @@ var CODEBUDDY = {
   source: "codebuddy",
   label: "CodeBuddy",
   binary: "codebuddy",
-  configFile: [".codebuddy", "settings.json"],
+  configFile: homeJson(".codebuddy", "settings.json"),
   hooksKeyPath: ["hooks"],
   toolAliases: {},
   inputKeyAliases: {},
@@ -516,9 +588,9 @@ var CODEBUDDY = {
   wire: "permission_decision",
   payload: "claude",
   nonToolEntries: "nested",
-  mcp: { shape: "claude_http", file: [".codebuddy", ".mcp.json"], trusted: false },
-  instructions: { file: [".codebuddy", "CODEBUDDY.md"], label: "CodeBuddy" },
-  permissionRuleFile: [".codebuddy", "settings.json"],
+  mcp: { shape: "claude_http", file: homeJson(".codebuddy", ".mcp.json"), container: "mcpServers", trusted: false },
+  instructions: { file: homeFile(".codebuddy", "CODEBUDDY.md"), label: "CodeBuddy" },
+  permissionRuleFile: homeJson(".codebuddy", "settings.json"),
   configDirIsShared: false,
   soleGate: null,
   taskControl: null
@@ -528,7 +600,7 @@ var QODER = {
   source: "qoder",
   label: "Qoder",
   binary: "qoder",
-  configFile: [".qoder", "settings.json"],
+  configFile: homeJson(".qoder", "settings.json"),
   hooksKeyPath: ["hooks"],
   toolAliases: {},
   inputKeyAliases: {},
@@ -540,7 +612,7 @@ var QODER = {
   wire: "permission_decision",
   payload: "claude",
   nonToolEntries: "nested",
-  mcp: { shape: "claude_http", file: [".qoder", "settings.json"], trusted: true },
+  mcp: { shape: "claude_http", file: homeJson(".qoder", "settings.json"), container: "mcpServers", trusted: true },
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: false,
@@ -552,7 +624,7 @@ var DROID = {
   source: "droid",
   label: "Droid",
   binary: "droid",
-  configFile: [".factory", "hooks.json"],
+  configFile: homeJson(".factory", "hooks.json"),
   hooksKeyPath: [],
   toolAliases: {
     Execute: "Bash",
@@ -581,7 +653,7 @@ var DEVIN = {
   source: "devin",
   label: "Devin CLI",
   binary: "devin",
-  configFile: [".config", "devin", "config.json"],
+  configFile: homeJson(".config", "devin", "config.json"),
   hooksKeyPath: ["hooks"],
   toolAliases: {
     exec: "Bash",
@@ -624,7 +696,7 @@ var ANTIGRAVITY_CLI = {
   source: "antigravity",
   label: "Antigravity CLI",
   binary: "agy",
-  configFile: [".gemini", "config", "hooks.json"],
+  configFile: homeJson(".gemini", "config", "hooks.json"),
   hooksKeyPath: ["pushary"],
   toolAliases: {
     run_command: "Bash",
@@ -648,7 +720,7 @@ var ANTIGRAVITY_CLI = {
   wire: "allow_deny_decision",
   payload: "antigravity",
   nonToolEntries: "handler",
-  mcp: { shape: "antigravity_http", file: [".gemini", "config", "mcp_config.json"], trusted: false },
+  mcp: { shape: "antigravity_http", file: homeJson(".gemini", "config", "mcp_config.json"), container: "mcpServers", trusted: false },
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: true,
@@ -661,13 +733,48 @@ var ANTIGRAVITY_CLI = {
   },
   taskControl: ANTIGRAVITY_TASK_CONTROL
 };
-var HOOK_COMPATIBLE_PROFILES = Object.freeze([QWEN_CODE, CODEBUDDY, QODER, DROID, DEVIN, ANTIGRAVITY_CLI]);
+var GROK = {
+  agentType: "grok",
+  source: "grok",
+  label: "Grok Build",
+  binary: "grok",
+  configFile: { root: "grok_home", path: ["hooks", "pushary.json"], format: "json" },
+  hooksKeyPath: ["hooks"],
+  toolAliases: {
+    run_terminal_command: "Bash",
+    search_replace: "Edit",
+    apply_patch: "Edit",
+    read_file: "Read",
+    web_search: "WebSearch",
+    web_fetch: "WebFetch",
+    spawn_subagent: "Task",
+    task_output: "BashOutput",
+    kill_task: "KillShell"
+  },
+  inputKeyAliases: {},
+  extraMatchers: [".*"],
+  pathInputKeys: [],
+  shellCommandKeys: [],
+  shellContextKeys: ["cwd"],
+  events: ["PreToolUse", "PostToolUse", "PostToolUseFailure", "Stop", "StopCancelled", "StopFailure", "UserPromptSubmit", "Notification", "SessionStart", "SessionEnd", "SubagentStart", "SubagentStop", "PreCompact", "PostCompact"],
+  wire: "permission_decision",
+  payload: "grok",
+  nonToolEntries: "nested",
+  mcp: { shape: "grok_http", file: { root: "grok_home", path: ["config.toml"], format: "toml" }, container: "mcp_servers", trusted: false },
+  instructions: { file: { root: "grok_home", path: ["rules", "pushary.md"] }, label: "Grok Build" },
+  permissionRuleFile: null,
+  configDirIsShared: false,
+  soleGate: null,
+  taskControl: null
+};
+var HOOK_COMPATIBLE_PROFILES = Object.freeze([QWEN_CODE, CODEBUDDY, QODER, DROID, DEVIN, ANTIGRAVITY_CLI, GROK]);
 var hookCompatibleProfile = (agentType) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.agentType === agentType);
 var hookCompatibleProfileBySource = (source) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.source === source);
+var defaultHomeSegments = (file) => file.root === "home" ? file.path : [".grok", ...file.path];
 var compatibleTargetFiles = (profile) => {
   const seen = /* @__PURE__ */ new Map();
   for (const file of [profile.configFile, profile.mcp?.file, profile.permissionRuleFile, profile.instructions?.file]) {
-    if (file) seen.set(file.join("/"), file);
+    if (file) seen.set(`${file.root}/${file.path.join("/")}`, file);
   }
   return [...seen.values()];
 };
@@ -736,9 +843,6 @@ var redactSecrets = (text) => applyRedactionRules(SECRET_REDACTION_RULES, text);
 var redactSecretsFromContent = (text) => applyRedactionRules(CUT_OFF_TEXT_REDACTION_RULES, text);
 var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
 
-// ../contracts/src/json-record.ts
-var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-
 // ../contracts/src/shell-analysis.ts
 var SHELL_WORD_SEPARATOR = /[ \t\n]/;
 var ARITHMETIC_EVALUATING_EXPANSION = /\$[#+=~^]*(?:[A-Za-z_][A-Za-z0-9_]*|[0-9]+|[-?$!@*#])?\[/;
@@ -1458,41 +1562,33 @@ var DOTNET_DOWNLOAD = /\.Download(?:String|Data|File)(?:Async|TaskAsync)?\s*\(/i
 var SCRIPTBLOCK_FROM_TEXT = /\[(?:System\.Management\.Automation\.)?ScriptBlock\]::Create\s*\(/i;
 var POWERSHELL_HOSTS = /* @__PURE__ */ new Set(["powershell", "pwsh", "powershell_ise"]);
 var WINDOWS_POWERSHELL_HOST = "powershell";
-var POWERSHELL_HOST_COMMAND_SWITCHES = /* @__PURE__ */ new Set(["-c", "-command", "--command", "/c", "/command"]);
-var POWERSHELL_HOST_SWITCHES_THAT_HIDE_THE_COMMAND = /* @__PURE__ */ new Set([
-  "-f",
-  "-file",
-  "/f",
-  "/file",
-  "-e",
-  "-ec",
-  "-enc",
-  "-encodedcommand",
-  "/encodedcommand"
+var POWERSHELL_HOST_COMMAND_PARAMETER = "command";
+var POWERSHELL_HOST_COMMAND_WITH_ARGS_PARAMETERS = /* @__PURE__ */ new Set(["commandwithargs", "cwa"]);
+var POWERSHELL_HOST_FILE_PARAMETER = "file";
+var POWERSHELL_HOST_ENCODED_PARAMETER = "encodedcommand";
+var POWERSHELL_HOST_ENCODED_ALIAS = "ec";
+var POWERSHELL_HOST_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Map([
+  ["executionpolicy", "ex"],
+  ["ep", "ep"],
+  ["windowstyle", "w"],
+  ["workingdirectory", "wo"],
+  ["wd", "wd"],
+  ["configurationname", "config"],
+  ["configurationfile", "configurationfile"],
+  ["custompipename", "cus"],
+  ["inputformat", "inp"],
+  ["if", "if"],
+  ["outputformat", "o"],
+  ["of", "of"],
+  ["version", "v"],
+  ["settingsfile", "settings"],
+  ["psconsolefile", "ps"],
+  ["token", "to"],
+  ["encodedarguments", "encodeda"],
+  ["ea", "ea"]
 ]);
-var POWERSHELL_HOST_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set([
-  "-executionpolicy",
-  "-ep",
-  "-ex",
-  "-windowstyle",
-  "-w",
-  "-workingdirectory",
-  "-wd",
-  "-configurationname",
-  "-config",
-  "-inputformat",
-  "-inf",
-  "-if",
-  "-outputformat",
-  "-of",
-  "-o",
-  "-version",
-  "-v",
-  "-settingsfile",
-  "-custompipename",
-  "-psconsolefile"
-]);
-var POWERSHELL_HOST_SWITCH = /^[-/]/;
+var POWERSHELL_HOST_SWITCH = /^[-/–—―]/;
+var POWERSHELL_HOST_SWITCH_PREFIX = /^([-–—―])\1?|^\//;
 var POWERSHELL_FILE_RUNNERS = /* @__PURE__ */ new Set(["start-process", "invoke-item", "msiexec"]);
 var WINDOWS_SWITCH = /^[-/–—―]/;
 var CMD_PROGRAM = "cmd";
@@ -1648,23 +1744,33 @@ var runsADownloadedFile = (stages, judge) => {
   });
 };
 var invokedExpressionsOf = (command) => command.cmdlet === INVOKE_EXPRESSION ? positionalTextsOf(command) : [];
-var positionalHostCommandOf = (texts) => {
-  let index = 0;
-  while (index < texts.length && POWERSHELL_HOST_SWITCH.test(texts[index] ?? "")) {
-    index += POWERSHELL_HOST_OPTIONS_WITH_A_VALUE.has((texts[index] ?? "").toLowerCase()) ? 2 : 1;
+var hostOptionTakesValue = (option) => {
+  for (const [name, shortest] of POWERSHELL_HOST_OPTIONS_WITH_A_VALUE) {
+    if (option.length >= shortest.length && name.startsWith(option)) return true;
   }
-  return index < texts.length ? texts.slice(index).join(" ") : void 0;
+  return false;
 };
 var hostedPowerShellScriptOf = (command) => {
-  if (!POWERSHELL_HOSTS.has(command.name)) return void 0;
+  if (!POWERSHELL_HOSTS.has(command.name)) return { kind: "none" };
   const texts = command.args.map((arg) => arg.text);
-  const lowered = texts.map((text) => text.toLowerCase());
-  const commandSwitch = lowered.findIndex((text) => POWERSHELL_HOST_COMMAND_SWITCHES.has(text));
-  if (commandSwitch !== -1) return texts.slice(commandSwitch + 1).join(" ");
-  if (command.name !== WINDOWS_POWERSHELL_HOST || lowered.some((text) => POWERSHELL_HOST_SWITCHES_THAT_HIDE_THE_COMMAND.has(text))) {
-    return void 0;
+  for (let index = 0; index < texts.length; index += 1) {
+    const text = (texts[index] ?? "").trim();
+    if (!text) continue;
+    if (!POWERSHELL_HOST_SWITCH.test(text)) {
+      return command.name === WINDOWS_POWERSHELL_HOST ? { kind: "script", script: texts.slice(index).join(" ") } : { kind: "none" };
+    }
+    const option = text.toLowerCase().replace(POWERSHELL_HOST_SWITCH_PREFIX, "");
+    if (option && (POWERSHELL_HOST_ENCODED_PARAMETER.startsWith(option) || option === POWERSHELL_HOST_ENCODED_ALIAS)) {
+      return { kind: "incomplete", reason: "encoded_command" };
+    }
+    if (option && POWERSHELL_HOST_COMMAND_PARAMETER.startsWith(option)) {
+      return { kind: "script", script: texts.slice(index + 1).join(" ") };
+    }
+    if (POWERSHELL_HOST_COMMAND_WITH_ARGS_PARAMETERS.has(option)) return { kind: "script", script: texts[index + 1] ?? "" };
+    if (option && POWERSHELL_HOST_FILE_PARAMETER.startsWith(option)) return { kind: "none" };
+    if (hostOptionTakesValue(option)) index += 1;
   }
-  return positionalHostCommandOf(texts);
+  return { kind: "none" };
 };
 var cmdScriptOf = (command) => {
   if (command.name !== CMD_PROGRAM) return void 0;
@@ -1714,38 +1820,51 @@ var scriptsInsideTheStage = (stage) => {
   const groups = [...stage.words, ...stage.redirectTargets].flatMap((word) => word.nested);
   const command = powerShellCommandOf(stage);
   if (command === null) return { ...NO_SCRIPTS_INSIDE, powerShell: groups };
+  const hosted = hostedPowerShellScriptOf(command);
+  if (hosted.kind === "incomplete") return hosted;
   const cmd = presentOnly(cmdScriptOf(command));
   return {
-    powerShell: [...groups, ...invokedExpressionsOf(command), ...presentOnly(hostedPowerShellScriptOf(command)), ...cmd.flatMap(cmdPiecesOf)],
+    powerShell: [...groups, ...invokedExpressionsOf(command), ...hosted.kind === "script" ? [hosted.script] : [], ...cmd.flatMap(cmdPiecesOf)],
     cmd,
     posix: presentOnly(wslCommandWordsOf(command))
   };
 };
 var powerShellReadingAt = (command, depth) => {
   const statements = powerShellStatementsOf(command);
-  if (statements === null) return null;
-  const inside = depth >= MAX_NESTED_SCRIPT_DEPTH ? [] : statements.flatMap((statement) => statement.stages).map(scriptsInsideTheStage);
-  const nested = inside.flatMap((scripts) => scripts.powerShell).map((script) => ({ script, reading: powerShellReadingAt(script, depth + 1) }));
-  const readings = nested.flatMap(({ reading }) => reading === null ? [] : [reading]);
+  if (statements === null) return { kind: "incomplete", reason: "syntax" };
+  const inside = [];
+  for (const stage of statements.flatMap((statement) => statement.stages)) {
+    const scripts = scriptsInsideTheStage(stage);
+    if ("kind" in scripts) return scripts;
+    inside.push(scripts);
+  }
+  const nested = inside.flatMap((scripts) => scripts.powerShell);
+  if (nested.length > 0 && depth >= MAX_NESTED_SCRIPT_DEPTH) return { kind: "incomplete", reason: "nesting_limit" };
+  const readings = [];
+  for (const script of nested) {
+    const analysis = powerShellReadingAt(script, depth + 1);
+    if (analysis.kind === "incomplete") return analysis;
+    readings.push(analysis.reading);
+  }
   return {
-    statements: [...statements, ...readings.flatMap((reading) => reading.statements)],
-    cmdScripts: [...inside.flatMap((scripts) => scripts.cmd), ...readings.flatMap((reading) => reading.cmdScripts)],
-    posixCommands: [...inside.flatMap((scripts) => scripts.posix), ...readings.flatMap((reading) => reading.posixCommands)],
-    unreadScripts: [
-      ...nested.flatMap(({ script, reading }) => reading === null ? [script] : []),
-      ...readings.flatMap((reading) => reading.unreadScripts)
-    ]
+    kind: "complete",
+    reading: {
+      statements: [...statements, ...readings.flatMap((reading) => reading.statements)],
+      cmdScripts: [...inside.flatMap((scripts) => scripts.cmd), ...readings.flatMap((reading) => reading.cmdScripts)],
+      posixCommands: [...inside.flatMap((scripts) => scripts.posix), ...readings.flatMap((reading) => reading.posixCommands)]
+    }
   };
 };
 var stagesOfTheReading = (reading) => reading.statements.flatMap((statement) => statement.stages);
-var powerShellReadingIsDestructive = (reading, judge) => stagesOfTheReading(reading).some((stage) => stageIsDestructive(stage, judge)) || reading.cmdScripts.some(cmdScriptRemovesRecursively) || reading.unreadScripts.some((script) => judge.namesADestructiveAction(script));
+var powerShellReadingIsDestructive = (reading, judge) => stagesOfTheReading(reading).some((stage) => stageIsDestructive(stage, judge)) || reading.cmdScripts.some(cmdScriptRemovesRecursively);
 var powerShellCommandIsDestructive = (command, judge) => {
-  const reading = powerShellReadingAt(command, TOP_LEVEL_SCRIPT);
-  return reading === null ? judge.namesADestructiveAction(command) : powerShellReadingIsDestructive(reading, judge);
+  const analysis = powerShellReadingAt(command, TOP_LEVEL_SCRIPT);
+  return analysis.kind === "incomplete" || powerShellReadingIsDestructive(analysis.reading, judge);
 };
 var powerShellCommandHasAVisibleConsequence = (command, judge) => {
-  const reading = powerShellReadingAt(command, TOP_LEVEL_SCRIPT);
-  if (reading === null) return judge.namesADestructiveAction(command);
+  const analysis = powerShellReadingAt(command, TOP_LEVEL_SCRIPT);
+  if (analysis.kind === "incomplete") return true;
+  const { reading } = analysis;
   const stages = stagesOfTheReading(reading);
   return powerShellReadingIsDestructive(reading, judge) || stages.some((stage) => stageHasAVisibleConsequence(stage, judge)) || reading.statements.some(listsRecursivelyIntoARemoval) || runsFetchedPowerShellCode(stages, judge) || runsADownloadedFile(stages, judge) || reading.posixCommands.some((words) => judge.commandShowsAConsequence(words));
 };
@@ -2410,6 +2529,16 @@ var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
 var APPROVAL_MODES = ["push_only", "terminal_only", "push_first", "notify_only"];
 var isApprovalMode = (value) => typeof value === "string" && APPROVAL_MODES.includes(value);
+var approvalWaitsAtTheAgentsPrompt = (mode) => {
+  switch (mode) {
+    case "push_first":
+    case "push_only":
+      return false;
+    case "notify_only":
+    case "terminal_only":
+      return true;
+  }
+};
 var approvalModeWithoutLocalPrompt = (mode) => {
   switch (mode) {
     case "push_first":
@@ -2456,6 +2585,25 @@ var parseAgentQuestions = (toolInput) => {
   }
   return parsed;
 };
+var isAgentQuestionSet = (value) => {
+  if (!Array.isArray(value) || value.length === 0 || value.length > 4) return false;
+  const questions = /* @__PURE__ */ new Set();
+  for (const item of value) {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return false;
+    const question = item;
+    if (typeof question.question !== "string" || question.question.length === 0 || questions.has(question.question) || question.header !== void 0 && typeof question.header !== "string" || typeof question.multiSelect !== "boolean" || question.allowOther !== void 0 && typeof question.allowOther !== "boolean" || !Array.isArray(question.options) || question.options.length < 2 || question.options.length > 4) return false;
+    const labels = /* @__PURE__ */ new Set();
+    for (const option of question.options) {
+      if (!option || typeof option !== "object" || Array.isArray(option)) return false;
+      const record = option;
+      const label = record.label;
+      if (typeof label !== "string" || label.length === 0 || labels.has(label) || record.description !== void 0 && typeof record.description !== "string") return false;
+      labels.add(label);
+    }
+    questions.add(question.question);
+  }
+  return true;
+};
 var parseAgentQuestionAnswers = (questions, value) => {
   let parsed;
   try {
@@ -2487,6 +2635,29 @@ var parseAgentQuestionAnswers = (questions, value) => {
   }
   return answers;
 };
+var isQuestionRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var codexAsyncQuestionFields = (raw) => {
+  if (!isQuestionRecord(raw)) return void 0;
+  const labels = Array.isArray(raw.options) ? raw.options : [];
+  return { question: raw.title, options: labels.map((label) => ({ label })) };
+};
+var codexBlockingQuestionFields = (raw) => isQuestionRecord(raw) && raw.isOther === false ? { ...raw, allowOther: false } : raw;
+var asksForASecret = (questions) => questions.some((question) => isQuestionRecord(question) && question.isSecret === true);
+var parseCodexQuestions = (toolName, toolInput) => {
+  const raw = Array.isArray(toolInput.questions) ? toolInput.questions : [];
+  if (asksForASecret(raw)) return void 0;
+  const questions = raw.map(toolName === CODEX_ASYNC_QUESTION_TOOL ? codexAsyncQuestionFields : codexBlockingQuestionFields);
+  const parsed = parseAgentQuestions({ questions });
+  return parsed && isAgentQuestionSet(parsed) ? parsed : void 0;
+};
+var CODEX_QUESTION_ANSWERED_IN_PUSHARY = "The user already answered this question in Pushary, so it was not shown again";
+var CODEX_QUESTION_CONTINUE = "Continue with this answer and do not ask it again";
+var quotedAnswerPair = ([question, answer]) => `${JSON.stringify(question)}: ${JSON.stringify(answer)}`;
+var codexQuestionAnswerReason = (answers) => {
+  const pairs = Object.entries(answers);
+  const answered = pairs.length === 1 ? `Their answer: ${JSON.stringify(pairs[0]?.[1] ?? "")}` : `Their answers: ${pairs.map(quotedAnswerPair).join("; ")}`;
+  return `${CODEX_QUESTION_ANSWERED_IN_PUSHARY}. ${answered}. ${CODEX_QUESTION_CONTINUE}`;
+};
 var INSTALL_SOURCES = [
   /** `npx pushary@latest ...`, the documented one-liner. */
   "npx",
@@ -2537,7 +2708,8 @@ var HOOK_BUDGETS = {
   qoder: { budgetSeconds: 600, guardSeconds: 10 },
   droid: { budgetSeconds: 600, guardSeconds: 10 },
   devin: { budgetSeconds: 600, guardSeconds: 10 },
-  antigravity: { budgetSeconds: 600, guardSeconds: 10 }
+  antigravity: { budgetSeconds: 600, guardSeconds: 10 },
+  grok: { budgetSeconds: 600, guardSeconds: 10 }
 };
 var hookMaxWaitSeconds = (agent) => Math.max(HOOK_BUDGETS[agent].budgetSeconds - HOOK_BUDGETS[agent].guardSeconds, 1);
 var HOOK_HOLD_BUDGET_FLAG = "--hold-budget";
@@ -5119,17 +5291,32 @@ var shouldDeferToNativeMode = (permissionMode, toolName, options = {}) => {
   return false;
 };
 var AGENT_QUESTION_TOOL = "AskUserQuestion";
-var AGENT_QUESTION_STRATEGY = { native: "native_dialog", updatedInput: "updated_input", none: "not_a_question" };
+var AGENT_QUESTION_STRATEGY = {
+  native: "native_dialog",
+  updatedInput: "updated_input",
+  answeredInRefusal: "answered_in_refusal",
+  none: "not_a_question"
+};
 var UPDATED_INPUT_QUESTION_SOURCES = /* @__PURE__ */ new Set(["claude", "qoder", "codebuddy", "droid"]);
+var GROK_NATIVE_DIALOG_TOOLS = /* @__PURE__ */ new Set(["ask_user_question", "exit_plan_mode"]);
+var CODEX_QUESTION_TOOL = "request_user_input";
+var CODEX_ASYNC_QUESTION_TOOL = "request_user_input_async";
+var CODEX_QUESTION_TOOLS = [CODEX_QUESTION_TOOL, CODEX_ASYNC_QUESTION_TOOL];
+var CODEX_QUESTION_TOOL_NAMES = new Set(CODEX_QUESTION_TOOLS);
+var isCodexQuestionTool = (toolName) => typeof toolName === "string" && CODEX_QUESTION_TOOL_NAMES.has(toolName);
+var isCodexQuestionCall = (source, event, toolName) => source === "codex" && event === "PreToolUse" && isCodexQuestionTool(toolName);
+var codexQuestionGoesToPushary = (verdict) => verdict.kind === "gate" && !approvalWaitsAtTheAgentsPrompt(verdict.policy.mode);
 function agentQuestionStrategy(source, event, toolName) {
+  if (source === "grok" && GROK_NATIVE_DIALOG_TOOLS.has(toolName)) return AGENT_QUESTION_STRATEGY.native;
+  if (isCodexQuestionCall(source, event, toolName)) return AGENT_QUESTION_STRATEGY.answeredInRefusal;
   if (toolName !== AGENT_QUESTION_TOOL) return AGENT_QUESTION_STRATEGY.none;
   if (source !== null && event === "PreToolUse" && UPDATED_INPUT_QUESTION_SOURCES.has(source)) return AGENT_QUESTION_STRATEGY.updatedInput;
   return AGENT_QUESTION_STRATEGY.native;
 }
-var questionHandedToTheTerminal = (toolName, modeState) => toolName === AGENT_QUESTION_TOOL && modeState.askHandoff === true;
+var questionHandedToTheTerminal = (toolName, modeState) => (toolName === AGENT_QUESTION_TOOL || isCodexQuestionTool(toolName)) && modeState.askHandoff === true;
 var EXIT_PLAN_MODE_TOOL = "ExitPlanMode";
 var ASKED_IN_EVERY_MODE_TOOLS = [AGENT_QUESTION_TOOL, EXIT_PLAN_MODE_TOOL];
-var ASKED_IN_EVERY_MODE = new Set(ASKED_IN_EVERY_MODE_TOOLS);
+var ASKED_IN_EVERY_MODE = /* @__PURE__ */ new Set([...ASKED_IN_EVERY_MODE_TOOLS, ...CODEX_QUESTION_TOOLS]);
 var isAskedInEveryMode = (toolName) => ASKED_IN_EVERY_MODE.has(toolName);
 var NATIVE_BLOCK_EVENTS = /* @__PURE__ */ new Set(["PermissionDenied"]);
 var isNativeBlockEvent = (event) => typeof event === "string" && NATIVE_BLOCK_EVENTS.has(event);
@@ -5244,7 +5431,20 @@ var editsAFileThatNeedsAPerson = ({ toolName, toolInputs }) => toolInputs.some((
   const path = extractPolicyArg(toolName, toolInput);
   return path !== void 0 && fileEditNeedsAPerson(toolName, path);
 });
+var runsADestructiveCommand = ({ toolName, toolInputs }) => SHELL_DIALECT_BY_TOOL.has(toolName) && toolInputs.some((toolInput) => {
+  const command = extractPolicyArg(toolName, toolInput);
+  return command !== void 0 && classifyDecisionRisk(toolName, command) === "destructive";
+});
+var codexCallIsDestructive = (input, call) => call.deletesFiles || runsADestructiveCommand(input);
 var codexCallNeedsAPerson = (input, verdict, call) => onlyCodexPreToolUseCanAsk(verdict, call.permissionMode) || verdict.kind === "gate" && (aChosenRuleGoverns(input) || call.deletesFiles || runsACommandThatNeedsAPerson(input) || editsAFileThatNeedsAPerson(input));
+var CODEX_PRE_TOOL_USE_PASSES = { kind: "pass" };
+var codexPreToolUseDelivery = (input, verdict, call) => {
+  if (verdict.kind !== "gate" || !codexCallNeedsAPerson(input, verdict, call)) return CODEX_PRE_TOOL_USE_PASSES;
+  const noPromptOfItsOwn = codexHasNoPromptOfItsOwn(scopeBreachReasonOf(verdict), call.permissionMode);
+  const mode = noPromptOfItsOwn ? approvalModeWithoutLocalPrompt(verdict.policy.mode) : verdict.policy.mode;
+  if (mode === "push_first" && !codexCallIsDestructive(input, call)) return CODEX_PRE_TOOL_USE_PASSES;
+  return { kind: "ask", policy: { ...verdict.policy, mode }, agentPromptFollows: !noPromptOfItsOwn };
+};
 var MAX_AGENT_PERMISSION_RULES_PER_KIND = 256;
 var MAX_AGENT_PERMISSION_RULE_LENGTH = 512;
 var isAgentPermissionRule = (value) => typeof value === "string" && value.length > 0 && value.length <= MAX_AGENT_PERMISSION_RULE_LENGTH;
@@ -5400,6 +5600,8 @@ var pendingCommandEvents = (source) => {
     // so there is nothing for this to print.
     case "opencode":
       return [];
+    case "grok":
+      return ["PostToolUse"];
     case "qwen":
     case "codebuddy":
     case "qoder":
@@ -5788,6 +5990,10 @@ export {
   MANAGED_PROVIDERS,
   DISCONNECT_AGENT_IDS,
   normalizeAgentId,
+  isRecord,
+  GROK_UNREADABLE_CALL,
+  isGrokHookPayload,
+  isGrokSessionEndStop,
   isCompatibleAgentType,
   PHONE_ANSWERED_TOOLS,
   canonicalToolName,
@@ -5809,7 +6015,6 @@ export {
   redactSecrets,
   redactSecretsFromContent,
   redactSecretsDeep,
-  isRecord,
   degradedLine,
   hookWritePath,
   MAX_HOOK_ACTIVATION_EVIDENCE_ROWS,
@@ -5837,6 +6042,8 @@ export {
   parseAgentQuestion,
   parseAgentQuestions,
   parseAgentQuestionAnswers,
+  parseCodexQuestions,
+  codexQuestionAnswerReason,
   normalizeInstallSource,
   HOOK_BUDGETS,
   HOOK_HOLD_BUDGET_ENV,
@@ -5876,7 +6083,11 @@ export {
   KILL_REASON,
   isPusharyOwnTool,
   shouldDeferToNativeMode,
+  AGENT_QUESTION_TOOL,
   AGENT_QUESTION_STRATEGY,
+  CODEX_QUESTION_TOOLS,
+  isCodexQuestionTool,
+  codexQuestionGoesToPushary,
   agentQuestionStrategy,
   questionHandedToTheTerminal,
   CODEX_RESCUE_TOOL_NAME,
@@ -5897,7 +6108,7 @@ export {
   HAND_BACK_WITHOUT_A_PROMPT,
   codexDeferredPreToolUse,
   scopeBreachReasonOf,
-  codexCallNeedsAPerson,
+  codexPreToolUseDelivery,
   claudePermissionRulesFromSettings,
   claudeConsultsItsAllowlist,
   agentRulesAllowEveryInput,