pushary 1.9.44 → 1.9.46

package/dist/bin/pushary-upgrade.js

@@ -9,25 +9,25 @@ import {
   upgradeFinishOutcome,
   upgradeInstalledPackage,
   withUpgradeLock
-} from "../chunk-UY5E2UUW.js";
+} from "../chunk-PGULTXDJ.js";
 import {
   installWithUpgradeLock
-} from "../chunk-XPQDBTW4.js";
+} from "../chunk-FQWI6XQG.js";
 import {
   ensureCodexTrustAfterReapply,
   reapplyAllAgents
-} from "../chunk-CESLE4UN.js";
+} from "../chunk-MBB4XJIN.js";
 import {
   describeCodexTrustConfirmation
-} from "../chunk-MIBCRQWK.js";
+} from "../chunk-G227SH2O.js";
 import {
   waitForMachineReadiness
-} from "../chunk-4WBAHVBK.js";
-import "../chunk-E76QCZIA.js";
+} from "../chunk-BKJP2MQN.js";
+import "../chunk-2ZD53EQW.js";
 import {
   readMacAppAgentKey
-} from "../chunk-LEHBWBCG.js";
-import "../chunk-UZVF6MP2.js";
+} from "../chunk-UP2RNIHL.js";
+import "../chunk-VTF7LKDB.js";
 import {
   AUTO_UPDATE_DISABLE_ENV,
   describeAutoUpdateCheck,
@@ -37,8 +37,8 @@ import {
   parseAutoUpdateFlag,
   readAutoUpdateState,
   updateAutoUpdateState
-} from "../chunk-3IRC3XFG.js";
-import "../chunk-FKDZU6YX.js";
+} from "../chunk-2UABJ75E.js";
+import "../chunk-OI6YNNI5.js";
 import {
   DAEMON_COLD_START_TIMEOUT_MS,
   daemonHasRemoteProof,
@@ -50,38 +50,37 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-W2TA4EVZ.js";
-import "../chunk-T4CKP47U.js";
-import "../chunk-SI2NC6UU.js";
-import "../chunk-6EV3B5CD.js";
-import "../chunk-OSMNLNPF.js";
+} from "../chunk-CA6F44OF.js";
+import "../chunk-EP4MD6TH.js";
+import "../chunk-35TUEZ5E.js";
+import "../chunk-NO3ADUD4.js";
+import "../chunk-UCRG5QGN.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-XHKBHWLX.js";
 import {
   readControlMode,
   recordMacAppKeyPrefix
-} from "../chunk-TJZUQRMH.js";
+} from "../chunk-LA4S2KIM.js";
 import {
   exitOnHelpFlag
-} from "../chunk-OR6KJOHE.js";
+} from "../chunk-GG6C4CHH.js";
 import {
   detectProviderLiveCapabilities,
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-L2ZM7LXN.js";
+} from "../chunk-2PTJHEX4.js";
 import "../chunk-RIVNNBEK.js";
+import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-BKK3JCTD.js";
-import "../chunk-CAJCCQ7N.js";
-import "../chunk-5ZSBQHCM.js";
-import "../chunk-M2L7625S.js";
-import "../chunk-GOEIW2VH.js";
+import "../chunk-WYD4PYTL.js";
+import "../chunk-NWZZTHWF.js";
+import "../chunk-W7MXYDGP.js";
+import "../chunk-UGXRDY3O.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-53UZN7JW.js";
-import "../chunk-TKTS3SIM.js";
-import "../chunk-S2ALW446.js";
-import "../chunk-WMO2XVG4.js";
+import "../chunk-FQW7AV6U.js";
+import "../chunk-2X3PPRNC.js";
+import "../chunk-KJNWVAS6.js";
+import "../chunk-ULEX43F7.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
@@ -95,19 +94,19 @@ import {
   fetchLatestPublishedVersion,
   geminiSettings,
   vscodePluginDir
-} from "../chunk-4JHEZ2PV.js";
+} from "../chunk-EW52AGOV.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "../chunk-OWQOMGBF.js";
+} from "../chunk-7XSIUY5F.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-T3KMJI4W.js";
+} from "../chunk-WN3MDHAM.js";
 import {
   CANONICAL_PACKAGE,
   LEGACY_PACKAGE,
   getPackageVersion
-} from "../chunk-JNU3LV47.js";
+} from "../chunk-EDSXF7NV.js";
 
 // bin/pushary-upgrade.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-wait.js

@@ -4,36 +4,36 @@ import {
 } from "../chunk-CVWG2N3Y.js";
 import {
   exitOnFailedSettingsRequest
-} from "../chunk-SWDPCDLT.js";
-import "../chunk-42CVAOC5.js";
+} from "../chunk-HX34VBPE.js";
+import "../chunk-5O6GB64K.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-TJZUQRMH.js";
+import "../chunk-LA4S2KIM.js";
 import {
   exitOnHelpFlag
-} from "../chunk-OR6KJOHE.js";
-import "../chunk-M2L7625S.js";
-import "../chunk-TKTS3SIM.js";
-import "../chunk-S2ALW446.js";
-import "../chunk-WMO2XVG4.js";
+} from "../chunk-GG6C4CHH.js";
+import "../chunk-W7MXYDGP.js";
+import "../chunk-2X3PPRNC.js";
+import "../chunk-KJNWVAS6.js";
+import "../chunk-ULEX43F7.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-4JHEZ2PV.js";
+import "../chunk-EW52AGOV.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-OWQOMGBF.js";
-import "../chunk-T3KMJI4W.js";
-import "../chunk-JNU3LV47.js";
+} from "../chunk-7XSIUY5F.js";
+import "../chunk-WN3MDHAM.js";
+import "../chunk-EDSXF7NV.js";
 
 // bin/pushary-wait.ts
 exitOnHelpFlag("wait");

package/dist/bin/pushary.js

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
 import {
   installNetworkDefaults
-} from "../chunk-S2ALW446.js";
-import "../chunk-WMO2XVG4.js";
+} from "../chunk-KJNWVAS6.js";
+import "../chunk-ULEX43F7.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-4JHEZ2PV.js";
+import "../chunk-EW52AGOV.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-OWQOMGBF.js";
+import "../chunk-7XSIUY5F.js";
 import {
   COMMANDS,
   renderHelp,
   resolveCommandName
-} from "../chunk-T3KMJI4W.js";
+} from "../chunk-WN3MDHAM.js";
 import {
   getPackageVersion
-} from "../chunk-JNU3LV47.js";
+} from "../chunk-EDSXF7NV.js";
 
 // src/cli/runtime.ts
 var supportsRuntime = (version) => {

package/dist/{chunk-KYLY6UMN.js → chunk-2IFTZZ5K.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-JNU3LV47.js";
+} from "./chunk-EDSXF7NV.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-L2ZM7LXN.js → chunk-2PTJHEX4.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-4JHEZ2PV.js";
+} from "./chunk-EW52AGOV.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-JNU3LV47.js";
+} from "./chunk-EDSXF7NV.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;

package/dist/{chunk-3IRC3XFG.js → chunk-2UABJ75E.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-4JHEZ2PV.js";
+} from "./chunk-EW52AGOV.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -15,7 +15,7 @@ import {
   globalUpgradeEntry,
   isAutoUpdateResult,
   ownPackageRoot
-} from "./chunk-JNU3LV47.js";
+} from "./chunk-EDSXF7NV.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-MRQJCIFO.js → chunk-2VNHP2OE.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-OWQOMGBF.js";
+} from "./chunk-7XSIUY5F.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-TKTS3SIM.js → chunk-2X3PPRNC.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-S2ALW446.js";
+} from "./chunk-KJNWVAS6.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-OWQOMGBF.js";
+} from "./chunk-7XSIUY5F.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-JNU3LV47.js";
+} from "./chunk-EDSXF7NV.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-E76QCZIA.js → chunk-2ZD53EQW.js}

@@ -8,10 +8,10 @@ import {
   codexHooksJsonIn,
   isPusharyCodexCommand,
   resolvePathBinary
-} from "./chunk-4JHEZ2PV.js";
+} from "./chunk-EW52AGOV.js";
 import {
   getPackageVersion
-} from "./chunk-JNU3LV47.js";
+} from "./chunk-EDSXF7NV.js";
 
 // src/codex-app-server.ts
 import { existsSync, realpathSync } from "fs";

package/dist/{chunk-SI2NC6UU.js → chunk-35TUEZ5E.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-CAJCCQ7N.js";
+} from "./chunk-NWZZTHWF.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-4JHEZ2PV.js";
+} from "./chunk-EW52AGOV.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-JNU3LV47.js";
+} from "./chunk-EDSXF7NV.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-7UM4NCUI.js → chunk-5NXD6ZHQ.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-4JHEZ2PV.js";
+} from "./chunk-EW52AGOV.js";
 import {
   readJsonSafe,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-JNU3LV47.js";
+} from "./chunk-EDSXF7NV.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-42CVAOC5.js → chunk-5O6GB64K.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-TJZUQRMH.js";
+} from "./chunk-LA4S2KIM.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-T3KMJI4W.js";
+} from "./chunk-WN3MDHAM.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-OWQOMGBF.js → chunk-7XSIUY5F.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-T3KMJI4W.js";
+} from "./chunk-WN3MDHAM.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-4WBAHVBK.js → chunk-BKJP2MQN.js}

@@ -4,26 +4,26 @@ import {
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-W2TA4EVZ.js";
+} from "./chunk-CA6F44OF.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-TJZUQRMH.js";
+} from "./chunk-LA4S2KIM.js";
 import {
   detectProviderLiveCapabilities,
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-L2ZM7LXN.js";
+} from "./chunk-2PTJHEX4.js";
 import {
   getMachineId
-} from "./chunk-WMO2XVG4.js";
+} from "./chunk-ULEX43F7.js";
 import {
   getBaseUrl
-} from "./chunk-OWQOMGBF.js";
+} from "./chunk-7XSIUY5F.js";
 import {
   getPackageVersion
-} from "./chunk-JNU3LV47.js";
+} from "./chunk-EDSXF7NV.js";
 
 // src/machines.ts
 import { hostname } from "os";

package/dist/{chunk-W2TA4EVZ.js → chunk-CA6F44OF.js}

@@ -1,17 +1,17 @@
+import {
+  readControlMode
+} from "./chunk-LA4S2KIM.js";
 import {
   needsShell,
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
-import {
-  readControlMode
-} from "./chunk-TJZUQRMH.js";
 import {
   getMachineId
-} from "./chunk-WMO2XVG4.js";
+} from "./chunk-ULEX43F7.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-4JHEZ2PV.js";
+} from "./chunk-EW52AGOV.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,7 +20,7 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "./chunk-OWQOMGBF.js";
+} from "./chunk-7XSIUY5F.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
@@ -28,7 +28,7 @@ import {
   globalPackageFolder,
   globalRootFor,
   isRecord
-} from "./chunk-JNU3LV47.js";
+} from "./chunk-EDSXF7NV.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-DD6IBKEJ.js → chunk-CJKEU4EZ.js}

@@ -1,18 +1,18 @@
 import {
   registerTranscript
-} from "./chunk-OZ7MLVDM.js";
+} from "./chunk-I5EQ5NJD.js";
 import {
   namedEvent
-} from "./chunk-FKDZU6YX.js";
+} from "./chunk-OI6YNNI5.js";
 import {
   writeDegraded
-} from "./chunk-GOEIW2VH.js";
+} from "./chunk-UGXRDY3O.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource,
   isGrokHookPayload,
   isGrokSessionEndStop
-} from "./chunk-JNU3LV47.js";
+} from "./chunk-EDSXF7NV.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-JNU3LV47.js → chunk-EDSXF7NV.js}

@@ -2662,6 +2662,8 @@ var boundedJson = (value) => {
 };
 var BASE_KEYS = ["threadId", "turnId", "itemId", "startedAtMs", "reason"];
 var MCP_META_KEYS = ["codex_approval_kind", "codex_requires_user_input", "codex_request_type", "codex_strict_auto_review", "codex_sensitive_action", "approvals_reviewer", "persist", "source", "connector_id", "connector_name", "connector_description", "tool_name", "tool_title", "tool_description", "tool_params", "tool_params_display"];
+var COMPUTER_USE_META_KEYS = [...MCP_META_KEYS, "riskLevel", "subtitle", "tool_call_id"];
+var computerUseDisplay = (value) => Array.isArray(value) && value.length <= 16 && value.every((item) => record2(item) && keys(item, ["name", "display_name", "value"]) && text(item.name) && text(item.display_name) && text(item.value));
 var isExecpolicyAmendment = (value) => Array.isArray(value) && value.length > 0 && value.length <= 128 && value.every((token) => typeof token === "string" && token.length <= 16384);
 var isCommandDecision = (value) => {
   if (typeof value === "string") return ["accept", "acceptForSession", "decline", "cancel"].includes(value);
@@ -2682,15 +2684,28 @@ var parseCodexNativeApproval = (value) => {
     negativeDecision: "decline"
   };
   if (value.method === "mcpServer/elicitation/request") {
-    if (value.changes !== void 0 || !keys(p, ["threadId", "turnId", "serverName", "mode", "message", "requestedSchema", "_meta"]) || p.mode !== "form" || !identifier2(p.serverName) || !text(p.message) || p.message.length > 500 || !record2(p.requestedSchema) || !keys(p.requestedSchema, ["type", "properties", "required", "$schema"]) || p.requestedSchema.type !== "object" || !record2(p.requestedSchema.properties) || Object.keys(p.requestedSchema.properties).length !== 0 || p.requestedSchema.required != null && (!Array.isArray(p.requestedSchema.required) || p.requestedSchema.required.length !== 0)) return null;
     const meta = p._meta;
-    if (!record2(meta) || !keys(meta, MCP_META_KEYS) || meta.codex_approval_kind !== "mcp_tool_call" || !identifier2(meta.tool_name) || !record2(meta.tool_params) || meta.tool_params_display != null && !record2(meta.tool_params_display)) return null;
+    const computerUse = record2(meta) && meta.connector_id === "computer-use";
+    if (value.changes !== void 0 || !keys(p, ["threadId", "turnId", "serverName", "mode", "message", "requestedSchema", "_meta"]) || !(p.mode === "form" || computerUse && (p.mode === "openai/form" || p.mode === "openaiForm")) || !identifier2(p.serverName) || !text(p.message) || p.message.length > 500 || !record2(p.requestedSchema) || !keys(p.requestedSchema, ["type", "properties", "required", "$schema"]) || p.requestedSchema.type !== "object" || !record2(p.requestedSchema.properties) || Object.keys(p.requestedSchema.properties).length !== 0 || p.requestedSchema.required != null && (!Array.isArray(p.requestedSchema.required) || p.requestedSchema.required.length !== 0)) return null;
+    if (!record2(meta) || !keys(meta, computerUse ? COMPUTER_USE_META_KEYS : MCP_META_KEYS) || meta.codex_approval_kind !== "mcp_tool_call" || !identifier2(meta.tool_name) || !record2(meta.tool_params) || meta.tool_params_display != null && !(computerUse ? computerUseDisplay(meta.tool_params_display) : record2(meta.tool_params_display))) return null;
+    if (computerUse && (meta.riskLevel !== "low" && meta.riskLevel !== "high" || meta.subtitle != null && !text(meta.subtitle) || !optionalIdentifier(meta.tool_call_id))) return null;
     if (["codex_requires_user_input", "codex_strict_auto_review", "codex_sensitive_action"].some((key) => meta[key] != null && typeof meta[key] !== "boolean")) return null;
     if (meta.approvals_reviewer != null && meta.approvals_reviewer !== "user") return null;
     if (meta.codex_request_type != null && meta.codex_request_type !== "approval_request") return null;
     if (["source", "connector_id", "connector_name", "connector_description", "tool_title", "tool_description"].some((key) => meta[key] != null && !text(meta[key]))) return null;
     const persistence = meta.persist == null ? [] : typeof meta.persist === "string" ? [meta.persist] : meta.persist;
     if (!Array.isArray(persistence) || persistence.some((v) => v !== "session" && v !== "always")) return null;
+    if (computerUse) {
+      if (!persistence.includes("session")) return null;
+      return {
+        ...base,
+        toolName: `mcp__${p.serverName}__${meta.tool_name}`,
+        toolInputs: [meta.tool_params],
+        question: p.message,
+        detail: [`Risk: ${meta.riskLevel}`, meta.subtitle, JSON.stringify(meta.tool_params)].filter(Boolean).join("\n"),
+        options: [CODEX_NATIVE_APPROVAL_CHOICES.session, CODEX_NATIVE_APPROVAL_CHOICES.deny]
+      };
+    }
     return {
       ...base,
       toolName: `mcp__${p.serverName}__${meta.tool_name}`,
@@ -2725,7 +2740,7 @@ ${change.diff}`);
   }
   return {
     ...base,
-    toolName: "Write",
+    toolName: "Edit",
     toolInputs: paths.map((file_path) => ({ file_path })),
     scopePaths: paths,
     question: `Allow these ${paths.length} file changes once?`,
@@ -4645,7 +4660,7 @@ var posixShellJudgeFor = (toolName) => ({
   runsScripts,
   namesASecretFile: (fileName) => SECRET_FILE_NAME.test(fileName)
 });
-var commandIsDestructive = (toolName, command) => shellDialectOf(toolName) === "powershell" ? powerShellCommandIsDestructive(command, posixShellJudgeFor(toolName)) : commandSpellings(command).forms.some((form) => classifyDecisionRisk(toolNameForAPosixReading(toolName), form) === "destructive");
+var commandIsDestructive = (toolName, command) => shellDialectOf(toolName) === "powershell" ? powerShellCommandIsDestructive(command, posixShellJudgeFor(toolName)) : readingsThatCanAct(command).some((reading) => classifyDecisionRisk(toolNameForAPosixReading(toolName), reading) === "destructive");
 var commandHasAVisibleConsequence = (toolName, command) => shellDialectOf(toolName) === "powershell" ? powerShellCommandHasAVisibleConsequence(command, posixShellJudgeFor(toolName)) : commandHasAVisibleConsequenceAt(toolNameForAPosixReading(toolName), command, 0);
 var MAX_SPELLING_DEPTH = 3;
 var GIT_GLOBAL_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set([
@@ -4771,6 +4786,12 @@ var commandSpellingsAt = (command, depth) => {
   return { forms, hidesWhatItRuns };
 };
 var commandSpellings = (command) => commandSpellingsAt(command, 0);
+var passesItsInputToSomethingThatCanAct = (segment) => segment.readsInput && !isSafeReadOnlyCommand(verbatimInvocationText(segment.invocation));
+var feedsTextToSomethingThatCanAct = (command) => roughSegmentsOf(command).some(passesItsInputToSomethingThatCanAct);
+var readingsThatCanAct = (command) => {
+  const spellings = commandSpellings(command).forms;
+  return feedsTextToSomethingThatCanAct(command) ? [command, ...spellings] : spellings;
+};
 var withoutSessionToolGrants = (config) => ({
   ...config,
   policies: config.policies.filter((policy) => !isSessionToolGrant(policy))

package/dist/{chunk-75M7NFFC.js → chunk-EKDSF3IX.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-JNU3LV47.js";
+} from "./chunk-EDSXF7NV.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-PQAFH4DF.js → chunk-ELLN4XAF.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-75M7NFFC.js";
+} from "./chunk-EKDSF3IX.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-MRQJCIFO.js";
+} from "./chunk-2VNHP2OE.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-T4CKP47U.js → chunk-EP4MD6TH.js}

@@ -2,23 +2,23 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-SI2NC6UU.js";
+} from "./chunk-35TUEZ5E.js";
 import {
   AGENT_CHOICES
-} from "./chunk-6EV3B5CD.js";
+} from "./chunk-NO3ADUD4.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-OSMNLNPF.js";
+} from "./chunk-UCRG5QGN.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-4JHEZ2PV.js";
+} from "./chunk-EW52AGOV.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-JNU3LV47.js";
+} from "./chunk-EDSXF7NV.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-4JHEZ2PV.js → chunk-EW52AGOV.js}

@@ -14,7 +14,7 @@ import {
   isReleaseVersion,
   ownPackageName,
   withHookHoldBudget
-} from "./chunk-JNU3LV47.js";
+} from "./chunk-EDSXF7NV.js";
 
 // src/setup/paths.ts
 import { homedir as homedir2 } from "os";
@@ -402,9 +402,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-QSSDYZCZ.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-YLXAU4AD.js");
-    const { autoUpdateLock: autoUpdateLock2 } = await import("./paths-55DDFLY4.js");
+    const { withUpgradeLock } = await import("./global-upgrade-A7EADTOL.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-YUSXU5I5.js");
+    const { autoUpdateLock: autoUpdateLock2 } = await import("./paths-UIPHTZH4.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;