pushary 1.9.35 → 1.9.37

package/dist/{chunk-7S7H7V5V.js → chunk-KHLYOIPY.js}

@@ -3,28 +3,29 @@ import {
   addGeminiMcpServer,
   removeGeminiMcpServer,
   supportedClaudeEvents
-} from "./chunk-QJ3ENGBT.js";
+} from "./chunk-6SYU5LVK.js";
 import {
   CLAUDE_CODE_AGENT,
-  parseApplyPatchFiles
-} from "./chunk-SMRMWDFE.js";
+  compatibleToolLookup
+} from "./chunk-W73URGML.js";
 import {
   guardBinary,
   guardBinaryRefusing,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   HOOK_LOCATOR_BINARY,
   PHONE_ANSWERED_TOOLS,
+  compatibleTargetFiles,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
+  isRecord,
   pusharyMissingReason,
   refusalOutput,
-  toToolLookup,
   withHookHoldBudget
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/claude-config.ts
 import { join } from "path";
@@ -146,14 +147,14 @@ var addPusharyToolPermissions = (settings) => {
   permissions.allow = filtered;
 };
 var addPusharyHooks = (settings, binDir, version = null) => {
-  const resolve2 = (name) => guardBinary(binDir ? join(binDir, name) : name);
+  const resolve = (name) => guardBinary(binDir ? join(binDir, name) : name);
   const hooks = ensureRecord(settings, "hooks");
   const supported = new Map(supportedClaudeEvents(version).map((hook) => [hook.event, hook]));
   for (const known of CLAUDE_HOOK_EVENTS) {
     const current = Array.isArray(hooks[known.event]) ? hooks[known.event] : [];
     const definition = supported.get(known.event);
     if (definition) {
-      hooks[known.event] = registerHookEntry(current, isPusharyHook, entry(definition, resolve2));
+      hooks[known.event] = registerHookEntry(current, isPusharyHook, entry(definition, resolve));
       continue;
     }
     const others = current.filter((item) => !isPusharyHook(item));
@@ -164,11 +165,11 @@ var addPusharyHooks = (settings, binDir, version = null) => {
     }
   }
 };
-var entry = (definition, resolve2) => ({
+var entry = (definition, resolve) => ({
   ...definition.matcher ? { matcher: definition.matcher } : {},
   hooks: [{
     type: "command",
-    command: withHookHoldBudget(resolve2(definition.binary), holdBudgetOf(definition)),
+    command: withHookHoldBudget(resolve(definition.binary), holdBudgetOf(definition)),
     timeout: definition.timeout
   }]
 });
@@ -195,9 +196,37 @@ var removePusharySettings = (settings, scope) => {
   return changed;
 };
 
+// src/config-document.ts
+import { parse, stringify } from "smol-toml";
+var parseConfigDocument = (text, format) => {
+  if (text === null) return { kind: "missing" };
+  try {
+    const value = format === "toml" ? parse(text) : JSON.parse(text);
+    return isRecord(value) ? { kind: "parsed", value } : { kind: "unreadable" };
+  } catch {
+    return { kind: "unreadable" };
+  }
+};
+var readConfigDocument = (path, format, files) => {
+  try {
+    return parseConfigDocument(files.read(path), format);
+  } catch {
+    return { kind: "unreadable" };
+  }
+};
+var serializeConfigDocument = (value, format) => format === "toml" ? stringify(value) : `${JSON.stringify(value, null, 2)}
+`;
+
 // src/compatible-config.ts
 import { homedir } from "os";
-import { isAbsolute, join as join2, resolve } from "path";
+import { join as join2 } from "path";
+var hasCompatibleMcpServer = (profile, contents) => {
+  if (!profile.mcp) return false;
+  const document = parseConfigDocument(contents, profile.mcp.file.format);
+  if (document.kind !== "parsed") return false;
+  const servers = document.value[profile.mcp.container];
+  return isRecord(servers) && isRecord(servers.pushary);
+};
 var AGENT_FLAG = "--agent";
 var SOURCE_FLAG = "--source";
 var EVENT_FLAG = "--event";
@@ -237,25 +266,24 @@ var activeHookSource = (argv) => {
   if (source === void 0) return "claude";
   return source === "claude" ? "claude" : hookCompatibleProfileBySource(source)?.source ?? null;
 };
-var PATCH_INPUT_KEYS = ["command", "patch", "input"];
-var patchedFiles = (toolInput) => [...new Set(PATCH_INPUT_KEYS.flatMap((key) => parseApplyPatchFiles(toolInput[key])))];
-var lookupFor = (profile, input) => {
-  const absolute = (path) => input.cwd && !isAbsolute(path) ? resolve(input.cwd, path) : path;
-  const toolInput = input.tool_input ?? {};
-  const lookup = toToolLookup(profile, input.tool_name ?? "", toolInput, absolute);
-  if (!lookup.unreadable) return lookup;
-  const files = patchedFiles(toolInput);
-  return files.length === 1 ? { ...lookup, input: { ...lookup.input, file_path: absolute(files[0]) }, unreadable: false } : lookup;
-};
-var normalizeToolCall = (profile, input) => {
+function normalizeToolCall(profile, input) {
   if (!profile || !input.tool_name) return input;
-  const lookup = lookupFor(profile, input);
+  const lookup = compatibleToolLookup(profile, input.tool_name, input.tool_input ?? {}, input.cwd);
   return { ...input, tool_name: lookup.tool, tool_input: lookup.input };
+}
+var grokHome = (home = homedir(), environment = process.env) => environment.GROK_HOME?.trim() || join2(home, ".grok");
+var compatibleFilePath = (file, home = homedir()) => join2(file.root === "grok_home" ? grokHome(home) : home, ...file.path);
+var compatibleDocuments = (profile, home) => {
+  const documents = /* @__PURE__ */ new Map();
+  for (const file of [profile.configFile, profile.mcp?.file, profile.permissionRuleFile]) {
+    if (file) documents.set(compatibleFilePath(file, home), file);
+  }
+  return documents;
 };
-var underHome = (segments, home = homedir()) => join2(home, ...segments);
-var compatibleConfigFile = (profile, home) => underHome(profile.configFile, home);
-var compatibleMcpFile = (profile, home) => profile.mcp ? underHome(profile.mcp.file, home) : null;
-var compatibleInstructionsFile = (profile, home) => profile.instructions ? underHome(profile.instructions.file, home) : null;
+var compatibleTargetPaths = (profile, home) => compatibleTargetFiles(profile).map((file) => compatibleFilePath(file, home));
+var compatibleConfigFile = (profile, home) => compatibleFilePath(profile.configFile, home);
+var compatibleMcpFile = (profile, home) => profile.mcp ? compatibleFilePath(profile.mcp.file, home) : null;
+var compatibleInstructionsFile = (profile, home) => profile.instructions ? compatibleFilePath(profile.instructions.file, home) : null;
 var asRecord2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 var ensureRecord2 = (target, key) => {
   const existing = asRecord2(target[key]);
@@ -283,14 +311,22 @@ var translateMatcher = (profile, definition, matcher) => {
   const spellings = matcher.split("|").filter((canonical) => !carriesPhoneAnswer(profile, canonical)).flatMap((canonical) => [canonical, ...aliasesFor(profile, canonical)]);
   return [.../* @__PURE__ */ new Set([...spellings, ...soleGateCoverage(profile, definition), ...profile.extraMatchers])].join("|");
 };
-var TOOL_MATCHED_EVENTS = /* @__PURE__ */ new Set(["PreToolUse", "PostToolUse"]);
+var TOOL_MATCHED_EVENTS = /* @__PURE__ */ new Set(["PreToolUse", "PostToolUse", "PostToolUseFailure"]);
 var isPusharyHandler = (entry2, scope) => {
   const record = asRecord2(entry2);
   return record !== void 0 && !Array.isArray(record.hooks) && isPusharyHook({ hooks: [record] }, scope);
 };
 var isPusharyCompatibleEntry = (entry2, scope) => isPusharyHook(entry2, scope) || isPusharyHandler(entry2, scope);
 var withoutMatcher = ({ matcher, ...hook }) => hook;
-var compatibleHookEvents = (profile) => CLAUDE_HOOK_EVENTS.filter((hook) => profile.events.includes(hook.event)).map((hook) => {
+var compatibleDefinitions = (profile) => {
+  if (profile.source !== "grok") return CLAUDE_HOOK_EVENTS;
+  return [
+    ...CLAUDE_HOOK_EVENTS,
+    { event: "PostToolUseFailure", binary: "pushary-post-hook", timeout: 10, delivery: "telemetry", since: [1, 0, 0] },
+    { event: "StopCancelled", binary: "pushary-stopfailure-hook", timeout: 10, delivery: "telemetry", since: [1, 0, 0] }
+  ];
+};
+var compatibleHookEvents = (profile) => compatibleDefinitions(profile).filter((hook) => profile.events.includes(hook.event)).map((hook) => {
   if (!hook.matcher) return hook;
   if (!TOOL_MATCHED_EVENTS.has(hook.event)) return withoutMatcher(hook);
   return { ...hook, matcher: translateMatcher(profile, hook, hook.matcher) };
@@ -309,7 +345,7 @@ var hooksShapeConflict = (config, profile) => {
     walked.push(key);
     node = nested;
   }
-  const clash = CLAUDE_HOOK_EVENTS.find(({ event }) => node[event] !== void 0 && !Array.isArray(node[event]));
+  const clash = compatibleDefinitions(profile).find(({ event }) => node[event] !== void 0 && !Array.isArray(node[event]));
   return clash ? dotted([...walked, clash.event]) : void 0;
 };
 var permissionsShapeConflict = (config) => {
@@ -325,15 +361,15 @@ var addCompatibleToolPermissions = (config) => {
   addPusharyToolPermissions(config);
   return WRITTEN;
 };
-var commandFor = (profile, definition, resolve2) => {
-  const named = `${resolve2(definition.binary)} ${agentArgument(profile)}`;
+var commandFor = (profile, definition, resolve) => {
+  const named = `${resolve(definition.binary)} ${agentArgument(profile)}`;
   const command = payloadNamesItsEvent(profile) ? named : `${named} ${eventArgument(definition.event)}`;
   return withHookHoldBudget(command, holdBudgetOf(definition));
 };
 var writesBareHandler = (profile, definition) => profile.nonToolEntries === "handler" && !TOOL_MATCHED_EVENTS.has(definition.event);
-var guardFor = (profile, definition, path) => isSoleGateEvent(profile, definition) ? guardBinaryRefusing(path, refusalOutput(profile, pusharyMissingReason(profile))) : guardBinary(path);
-var entryFor = (profile, definition, resolve2) => {
-  const handler = { type: "command", command: commandFor(profile, definition, resolve2), timeout: definition.timeout };
+var guardFor = (profile, definition, path) => isSoleGateEvent(profile, definition) || profile.source === "grok" && definition.delivery === "approval" ? guardBinaryRefusing(path, refusalOutput(profile, pusharyMissingReason(profile))) : guardBinary(path);
+var entryFor = (profile, definition, resolve) => {
+  const handler = { type: "command", command: commandFor(profile, definition, resolve), timeout: definition.timeout };
   if (writesBareHandler(profile, definition)) return handler;
   return {
     ...definition.matcher ? { matcher: definition.matcher } : {},
@@ -345,12 +381,12 @@ var addCompatibleHooks = (config, profile, binDir) => {
   if (conflictAt) return { ok: false, conflictAt };
   const hooks = descend(config, profile.hooksKeyPath);
   const supported = new Map(compatibleHookEvents(profile).map((hook) => [hook.event, hook]));
-  for (const known of CLAUDE_HOOK_EVENTS) {
+  for (const known of compatibleDefinitions(profile)) {
     const current = Array.isArray(hooks[known.event]) ? hooks[known.event] : [];
     const definition = supported.get(known.event);
     if (definition) {
-      const resolve2 = (name) => guardFor(profile, definition, binDir ? join2(binDir, name) : name);
-      hooks[known.event] = registerHookEntry(current, isPusharyCompatibleEntry, entryFor(profile, definition, resolve2));
+      const resolve = (name) => guardFor(profile, definition, binDir ? join2(binDir, name) : name);
+      hooks[known.event] = registerHookEntry(current, isPusharyCompatibleEntry, entryFor(profile, definition, resolve));
       continue;
     }
     const others = current.filter((item) => !isPusharyCompatibleEntry(item));
@@ -363,7 +399,7 @@ var removeCompatibleHooks = (config, profile, scope) => {
   const hooks = findMap(config, profile.hooksKeyPath);
   if (!hooks) return false;
   let changed = false;
-  for (const { event } of CLAUDE_HOOK_EVENTS) {
+  for (const { event } of compatibleDefinitions(profile)) {
     const entries = hooks[event];
     if (!Array.isArray(entries)) continue;
     const kept = entries.filter((entry2) => !isPusharyCompatibleEntry(entry2, scope));
@@ -390,9 +426,15 @@ var missingCompatibleHookEvents = (config, profile) => {
     return !Array.isArray(entries) || !entries.some((entry2) => isPusharyCompatibleEntry(entry2));
   }).map(({ event }) => event);
 };
-var compatiblePermissionRuleFile = (profile, home) => profile.permissionRuleFile ? underHome(profile.permissionRuleFile, home) : null;
+var compatiblePermissionRuleFile = (profile, home) => profile.permissionRuleFile ? compatibleFilePath(profile.permissionRuleFile, home) : null;
 var addCompatibleMcpServer = (config, profile, apiKey) => {
   if (!profile.mcp) return;
+  if (profile.mcp.shape === "grok_http") {
+    const container = profile.mcp.container;
+    if (config[container] !== void 0 && !asRecord2(config[container])) throw new Error(`${profile.label} ${container} is not a table; configuration was left unchanged.`);
+    ensureRecord2(config, container).pushary = { url: PUSHARY_MCP_URL, headers: { Authorization: `Bearer ${apiKey}` } };
+    return;
+  }
   if (profile.mcp.shape === "gemini_http") {
     addGeminiMcpServer(config, apiKey);
     return;
@@ -411,10 +453,20 @@ var addCompatibleMcpServer = (config, profile, apiKey) => {
 };
 var removeCompatibleMcpServer = (config, profile) => {
   if (!profile.mcp) return false;
+  if (profile.mcp.shape === "grok_http") {
+    const container = profile.mcp.container;
+    const servers = asRecord2(config[container]);
+    if (!servers || servers.pushary === void 0) return false;
+    delete servers.pushary;
+    if (Object.keys(servers).length === 0) delete config[container];
+    return true;
+  }
   return profile.mcp.shape === "gemini_http" ? removeGeminiMcpServer(config) : removeClaudeMcpServers(config);
 };
 
 export {
+  readConfigDocument,
+  serializeConfigDocument,
   addClaudeMcpServer,
   isClaudeMcpSnapshot,
   captureClaudeMcpServer,
@@ -425,11 +477,16 @@ export {
   addPusharyToolPermissions,
   addPusharyHooks,
   removePusharySettings,
+  hasCompatibleMcpServer,
   profileFromArgv,
   activeIdentity,
   namedEvent,
   activeHookSource,
   normalizeToolCall,
+  grokHome,
+  compatibleFilePath,
+  compatibleDocuments,
+  compatibleTargetPaths,
   compatibleConfigFile,
   compatibleMcpFile,
   compatibleInstructionsFile,

package/dist/{chunk-HVUBWLER.js → chunk-KZ3XE3JG.js}

@@ -1,20 +1,22 @@
 import {
+  askAgentQuestions,
   defersToNativeMode,
-  reportMachineDenial
-} from "./chunk-FYQG2UTK.js";
+  outcomeOfFailedAsk,
+  reportMachineDenial,
+  storedWaitDeadline
+} from "./chunk-PDRKQSC6.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-VTAC5FBZ.js";
+} from "./chunk-HK2RPWAD.js";
 import {
-  announceSubscriptionRequired,
   isDeferAnswer,
   oncePerSession
-} from "./chunk-NKAMF2YJ.js";
+} from "./chunk-6VUVVVVN.js";
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-7S7H7V5V.js";
+} from "./chunk-KHLYOIPY.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -39,7 +41,7 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-SMRMWDFE.js";
+} from "./chunk-W73URGML.js";
 import {
   askUser,
   cancelQuestion,
@@ -52,22 +54,20 @@ import {
   sendNotification,
   waitForQuestion,
   waitsForThePhone
-} from "./chunk-OZMGO4WF.js";
-import {
-  SubscriptionRequiredError
-} from "./chunk-H52HBSOD.js";
+} from "./chunk-HA22GGDG.js";
 import {
   getMachineId
-} from "./chunk-ULJFIF5N.js";
+} from "./chunk-VA36Q6BD.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-3LS3GFJW.js";
+} from "./chunk-AZXPJLKC.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-45OXG3VR.js";
+} from "./chunk-WXA3CFZR.js";
 import {
   AGENT_QUESTION_STRATEGY,
+  AGENT_QUESTION_TOOL,
   DECISION_STOP_REASON,
   GATE_BLOCK_REASON_MAX_LENGTH,
   GATE_WIRE,
@@ -104,13 +104,12 @@ import {
   isBlockedActionRequest,
   isPermissionRequestOwnedByPreToolUse,
   isPusharyOwnTool,
-  parseAgentQuestionAnswers,
   parseAgentQuestions,
   questionHandedToTheTerminal,
   resolveGate,
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";
@@ -191,16 +190,7 @@ var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, u
 var ask = (reason) => claudePreToolUseOutput("ask", reason);
 var halted = (reason) => claudeStoppedPreToolUseOutput(reason);
 var undecidedCall = (reason) => PUSHARY_IS_SOLE_GATE ? deny(reason) : void 0;
-var outcomeOfFailedAsk = (error, sessionId, failure) => {
-  if (!(error instanceof SubscriptionRequiredError)) return failure;
-  announceSubscriptionRequired(error.upgradeUrl, sessionId);
-  return void 0;
-};
 var outcomeOfFailedPermissionAsk = (error, sessionId) => outcomeOfFailedAsk(error, sessionId, halted(UNVERIFIABLE_APPROVAL_REASON)) ?? undecidedCall(SOLE_GATE_SUBSCRIPTION_REASON);
-var storedWaitDeadline = (result, requestedDeadline) => {
-  const stored = result.waitEndsAt ? Date.parse(result.waitEndsAt) : Number.NaN;
-  return Number.isFinite(stored) ? Math.min(stored, requestedDeadline) : requestedDeadline;
-};
 var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget, decision, signals) => {
   const effectiveWait = effectiveWaitSeconds(timeoutAction, timeoutSeconds, "claude");
   const now = Date.now();
@@ -393,94 +383,29 @@ var keylessNoticeOnce = (sessionId) => {
   }
 };
 var shouldDeferToNativeMode = defersToNativeMode;
-var withLabels = (question) => ({
-  ...question,
-  labels: question.options.map((option) => option.label)
-});
-var withoutLabels = ({ labels: _, ...question }) => question;
-var parseQuestions = (toolInput) => parseAgentQuestions(toolInput)?.map(withLabels);
-var questionContext = (question, index, total, project) => {
-  const subject = question.header ? `${question.header}: your agent is asking in ${project}` : `Your agent is asking in ${project}`;
-  return total > 1 ? `${subject} (${index + 1} of ${total})` : subject;
-};
-var askAsOneCard = async (apiKey, input, parsed, projectName, deadline) => {
-  const only = parsed[0];
-  let result;
-  try {
-    result = await askUser(apiKey, {
-      question: only.question,
-      type: "select",
-      options: [...only.labels],
-      questions: parsed.map(withoutLabels),
-      context: questionContext(only, 0, 1, projectName),
-      agentName: agentNameIn(projectName),
-      sessionId: input.session_id,
-      machineId: getMachineId(),
-      toolName: "AskUserQuestion",
-      toolUseId: input.tool_use_id,
-      waitEndsAt: new Date(deadline).toISOString()
-    });
-  } catch (error) {
-    return outcomeOfFailedAsk(error, input.session_id, null);
-  }
-  if (isDecisionStopped(result)) return null;
-  const answer = await waitForQuestion(apiKey, result, storedWaitDeadline(result, deadline));
-  if (isDecisionStopped(answer)) return null;
-  const values = answer.answered && answer.value ? parseAgentQuestionAnswers(parsed, answer.value) : null;
-  if (!values || isDeferAnswer(answer.value)) {
-    return void 0;
-  }
-  return values;
-};
-var askQuestionByQuestion = async (apiKey, input, parsed, projectName, deadline) => {
-  const answers = {};
-  for (const [index, question] of parsed.entries()) {
-    let result;
-    try {
-      result = await askUser(apiKey, {
-        question: question.question,
-        type: "select",
-        options: [...question.labels],
-        questions: [withoutLabels(question)],
-        context: questionContext(question, index, parsed.length, projectName),
-        agentName: agentNameIn(projectName),
-        sessionId: input.session_id,
-        machineId: getMachineId(),
-        toolName: "AskUserQuestion",
-        // One AskUserQuestion call raises several questions, and their payload
-        // fingerprints are identical (same tool, no target, no body). Without the
-        // index they would all collapse onto the first decision.
-        toolUseId: input.tool_use_id ? `${input.tool_use_id}#q${index}` : void 0,
-        waitEndsAt: new Date(deadline).toISOString()
-      });
-    } catch (error) {
-      return outcomeOfFailedAsk(error, input.session_id, null);
-    }
-    if (isDecisionStopped(result)) return null;
-    const answer = await waitForQuestion(apiKey, result, storedWaitDeadline(result, deadline));
-    if (isDecisionStopped(answer)) return null;
-    const legacyValue = answer.answered ? answer.value?.trim() : void 0;
-    const values = legacyValue ? parseAgentQuestionAnswers([question], legacyValue) ?? parseAgentQuestionAnswers([question], JSON.stringify({
-      [question.question]: question.multiSelect ? JSON.stringify([legacyValue]) : legacyValue
-    })) : null;
-    const value = values?.[question.question];
-    if (!value || isDeferAnswer(answer.value)) {
-      return void 0;
-    }
-    answers[question.question] = value;
-  }
-  return answers;
-};
 var handleAskUserQuestion = async (apiKey, input, modeState) => {
   if (questionHandedToTheTerminal(input.tool_name, modeState)) return void 0;
-  const parsed = parseQuestions(input.tool_input ?? {});
-  if (!parsed) return void 0;
+  const questions = parseAgentQuestions(input.tool_input ?? {});
+  if (!questions) return void 0;
   const projectName = basename(input.cwd ?? process.cwd());
   const deadline = hookWaitDeadline(START_MS, effectiveWaitSeconds("wait", 0, "claude"), "claude", Date.now());
-  const answers = parsed.length === 1 ? await askAsOneCard(apiKey, input, parsed, projectName, deadline) : await askQuestionByQuestion(apiKey, input, parsed, projectName, deadline);
-  if (answers === null) return halted(DECISION_STOP_REASON);
-  if (!answers) return void 0;
-  return allowWithInput({ ...input.tool_input ?? {}, answers });
+  const outcome = await askAgentQuestions(apiKey, {
+    toolName: AGENT_QUESTION_TOOL,
+    agentName: agentNameIn(projectName),
+    projectName,
+    sessionId: input.session_id,
+    toolUseId: input.tool_use_id,
+    deadline
+  }, questions);
+  switch (outcome.kind) {
+    case "answered":
+      return allowWithInput({ ...input.tool_input ?? {}, answers: outcome.answers });
+    case "stopped":
+    case "unavailable":
+      return halted(DECISION_STOP_REASON);
+    case "unanswered":
+      return void 0;
+  }
 };
 var PLAN_APPROVE = "Approve, start coding";
 var PLAN_KEEP_PLANNING = "Keep planning";

package/dist/{chunk-CK3W7Q5S.js → chunk-MAGB6VW6.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-DCBSD22V.js → chunk-N5WEEYV6.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-NMQLY4PE.js";
+} from "./chunk-GUHM2UQO.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,11 +9,11 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   configFilePath
-} from "./chunk-3LS3GFJW.js";
+} from "./chunk-AZXPJLKC.js";
 import {
   API_KEY_PREFIX_PATTERN,
   isRecord
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-U7CN5HG2.js → chunk-NDQXKLGE.js}

@@ -1,9 +1,9 @@
 import {
   APPROVAL_SETTINGS_PATH
-} from "./chunk-PEEJP4HN.js";
+} from "./chunk-EK6PRPCY.js";
 import {
   readMacAppAgentKey
-} from "./chunk-EGTRIM74.js";
+} from "./chunk-GSP7CC52.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -13,13 +13,13 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-DCBSD22V.js";
+} from "./chunk-N5WEEYV6.js";
 import {
   absoluteUrl
-} from "./chunk-7IVV4LLF.js";
+} from "./chunk-DYALNCS6.js";
 import {
   isValidApiKey
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";

package/dist/{chunk-IRU7DKJW.js → chunk-NPE44CX4.js}

@@ -1,13 +1,16 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-WFPXKCN4.js";
+} from "./chunk-HJF57K2U.js";
+import {
+  grokHome
+} from "./chunk-KHLYOIPY.js";
 import {
   codexHomeFrom,
   resolvePathBinary
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";
@@ -550,6 +553,7 @@ var agentProbes = (home = homedir3()) => ({
     configMarkers: []
   },
   ...compatibleProbes(),
+  grok: { binary: "grok", paths: [join3(home, ".local", "bin", "grok")], configMarkers: [grokHome(home)] },
   // "Other" is a set of printed instructions for any MCP or HTTP client. There is
   // nothing to detect, and it must never be auto-selected.
   custom: { binary: null, paths: [], configMarkers: [] }

package/dist/{chunk-22YSHBTI.js → chunk-NWSWP3KY.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-ULJFIF5N.js";
+} from "./chunk-VA36Q6BD.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-3LS3GFJW.js";
+} from "./chunk-AZXPJLKC.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-HQKYWUBF.js → chunk-OSLC7G3D.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-CK3W7Q5S.js";
+} from "./chunk-MAGB6VW6.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-4PIAOJAW.js";
+} from "./chunk-PYWLW7PC.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-7UGGCTTW.js → chunk-PDDJKGIW.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-UPRNSD2T.js";
+} from "./chunk-RFIHLLRH.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -15,7 +15,7 @@ import {
   globalUpgradeEntry,
   isAutoUpdateResult,
   ownPackageRoot
-} from "./chunk-7FQL5NWJ.js";
+} from "./chunk-235LKHLW.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";