pushary 1.9.61 → 1.9.62

package/dist/chunk-FYS27SUS.js

@@ -0,0 +1,216 @@
+import {
+  registerTranscript
+} from "./chunk-EUNSJKJJ.js";
+import {
+  namedEvent
+} from "./chunk-557ZE5EX.js";
+import {
+  isBridgeLocator,
+  liveBridgeProbe,
+  pusharyHookExecutable,
+  resolveBridgeStub
+} from "./chunk-7NJ4TDUH.js";
+import {
+  atLeast,
+  parseVersion
+} from "./chunk-6ICPEJY5.js";
+import {
+  writeDegraded
+} from "./chunk-RSNN2TPE.js";
+import {
+  cursorUserHooks
+} from "./chunk-6YSEOXP5.js";
+import {
+  CURSOR_GATE_COVERAGE,
+  CURSOR_GATE_SCRIPT,
+  HOOK_VERSION_PATTERN,
+  NO_CURSOR_GATE,
+  claudeShapedHookInput,
+  cursorGateOwnsToolCall,
+  hookCompatibleProfileBySource,
+  isCursorHookPayload,
+  isGrokHookPayload,
+  isGrokSessionEndStop,
+  isRecord,
+  toolsCoveredByGateEntry
+} from "./chunk-FXECTHAG.js";
+
+// src/tool-hook-input.ts
+var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode", "cursor_version"];
+function isInputRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isToolHookInput(value) {
+  if (!isInputRecord(value)) return false;
+  if (typeof value.tool_name !== "string" || value.tool_name.length === 0) return false;
+  if (!isInputRecord(value.tool_input)) return false;
+  for (const field of OPTIONAL_TEXT_FIELDS) {
+    if (value[field] !== void 0 && typeof value[field] !== "string") return false;
+  }
+  return true;
+}
+function parseToolHookInput(value) {
+  if (!isInputRecord(value)) return null;
+  const input = { ...value, tool_input: value.tool_input === void 0 ? {} : value.tool_input };
+  return isToolHookInput(input) ? input : null;
+}
+
+// src/admission.ts
+import { readFileSync } from "fs";
+import { homedir } from "os";
+import { join as join2 } from "path";
+
+// src/cursor-gate-registration.ts
+import { dirname, isAbsolute, join, resolve } from "path";
+var FIRST_PLUGIN_VERSION_HANDLING = {
+  beforeShellExecution: [0, 1, 0],
+  beforeMCPExecution: [0, 2, 1],
+  preToolUse: [0, 2, 2]
+};
+var COMMAND_HOOK_TYPE = "command";
+var PLUGIN_MANIFEST = join(".cursor-plugin", "plugin.json");
+var NO_SPOTLIGHT = () => [];
+var executableName = (executable) => executable.split(/[/\\]/).pop() ?? "";
+var isCursorGateScript = (executable) => executableName(executable) === CURSOR_GATE_SCRIPT;
+var fromHooksDirectory = (path, environment) => isAbsolute(path) ? path : resolve(dirname(environment.hooksFile), path);
+var pluginManifestBeside = (script) => join(dirname(dirname(script)), PLUGIN_MANIFEST);
+var versionIn = (manifest) => {
+  try {
+    const parsed = JSON.parse(manifest);
+    return isRecord(parsed) && typeof parsed.version === "string" && HOOK_VERSION_PATTERN.test(parsed.version) ? parseVersion(parsed.version) : null;
+  } catch {
+    return null;
+  }
+};
+var pluginVersionOf = (script, probe) => {
+  const manifest = probe.readFile(pluginManifestBeside(script));
+  return manifest === null ? null : versionIn(manifest);
+};
+var gateScriptHandles = (script, event, probe) => {
+  if (!probe.exists(script)) return false;
+  const version = pluginVersionOf(script, probe);
+  return version !== null && atLeast(version, FIRST_PLUGIN_VERSION_HANDLING[event]);
+};
+var appBundleResolves = (locator, probe) => resolveBridgeStub(locator, { ...probe, mdfind: NO_SPOTLIGHT }).kind === "bundle";
+var isLiveCursorGateCommand = (command, event, environment) => {
+  const executable = pusharyHookExecutable(command);
+  if (executable === null) return false;
+  const target = fromHooksDirectory(executable, environment);
+  if (isCursorGateScript(executable)) return gateScriptHandles(target, event, environment.probe);
+  return isBridgeLocator(executable) && appBundleResolves(target, environment.probe);
+};
+var isCommandHook = (entry) => entry.type === void 0 || entry.type === COMMAND_HOOK_TYPE;
+var entriesOn = (hooks, event) => {
+  const entries = Object.hasOwn(hooks, event) ? hooks[event] : void 0;
+  return Array.isArray(entries) ? entries.filter(isRecord) : [];
+};
+var runsALiveGate = (entry, event, isLiveGate) => isCommandHook(entry) && typeof entry.command === "string" && isLiveGate(entry.command, event);
+var toolsCoveredOn = (hooks, coverage, isLiveGate) => entriesOn(hooks, coverage.event).filter((entry) => runsALiveGate(entry, coverage.event, isLiveGate)).flatMap((entry) => toolsCoveredByGateEntry(coverage, entry.matcher) ?? []);
+var cursorGateRegistrationOf = (document, isLiveGate) => {
+  if (!isRecord(document) || !isRecord(document.hooks)) return NO_CURSOR_GATE;
+  const hooks = document.hooks;
+  return CURSOR_GATE_COVERAGE.flatMap((coverage) => toolsCoveredOn(hooks, coverage, isLiveGate));
+};
+var userCursorGateEnvironment = () => ({ hooksFile: cursorUserHooks(), probe: liveBridgeProbe() });
+var readCursorGateRegistration = (environment = userCursorGateEnvironment()) => {
+  try {
+    const raw = environment.probe.readFile(environment.hooksFile);
+    if (raw === null) return NO_CURSOR_GATE;
+    return cursorGateRegistrationOf(JSON.parse(raw), (command, event) => isLiveCursorGateCommand(command, event, environment));
+  } catch {
+    return NO_CURSOR_GATE;
+  }
+};
+var cursorGateOwnsClaudeCall = (payload, readRegistration) => isCursorHookPayload(payload) && cursorGateOwnsToolCall(readRegistration(), payload.tool_name);
+
+// src/admission.ts
+var NO_RULES = { version: 1, disabled: [] };
+var SUPPORTED_VERSION = 1;
+var parseAdmissionRules = (raw) => {
+  if (!raw) return NO_RULES;
+  try {
+    const parsed = JSON.parse(raw);
+    if (parsed.version !== SUPPORTED_VERSION) return NO_RULES;
+    if (!Array.isArray(parsed.disabled)) return NO_RULES;
+    return {
+      version: SUPPORTED_VERSION,
+      disabled: parsed.disabled.filter((rule) => typeof rule === "string")
+    };
+  } catch {
+    return NO_RULES;
+  }
+};
+var admissionRulesFile = () => process.env.PUSHARY_ADMISSION_FILE?.trim() || join2(homedir(), ".pushary", "admission-rules.json");
+var readAdmissionRules = () => {
+  try {
+    return parseAdmissionRules(readFileSync(admissionRulesFile(), "utf-8"));
+  } catch {
+    return NO_RULES;
+  }
+};
+var matches = (rule, source, event) => {
+  const colon = rule.indexOf(":");
+  if (colon <= 0 || colon === rule.length - 1) return false;
+  const ruleSource = rule.slice(0, colon);
+  const ruleEvent = rule.slice(colon + 1);
+  return (ruleSource === "*" || ruleSource === source) && (ruleEvent === "*" || ruleEvent === event);
+};
+var isAdmitted = (rules, source, event) => !rules.disabled.some((rule) => matches(rule, source, event));
+var UNREADABLE = { kind: "unreadable" };
+var UNKNOWN_AGENT = { kind: "unknown_agent" };
+var GATED_BY_CURSOR = { kind: "gated_by_cursor" };
+var readHookInputOutcome = async (source, fallbackEvent = "", stdin = process.stdin, parseInput, { cursorGateOwnsCall } = {}) => {
+  if (source === null) {
+    writeDegraded("hook", {
+      reason: "unknown_agent",
+      fallback: "stood aside, so nothing is gated or reported for this call",
+      event: fallbackEvent
+    });
+    return UNKNOWN_AGENT;
+  }
+  let raw = "";
+  for await (const chunk of stdin) raw += chunk;
+  if (!raw.trim()) return UNREADABLE;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return UNREADABLE;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return UNREADABLE;
+  if (source !== "grok" && process.env.GROK_SESSION_ID && isGrokHookPayload(parsed)) return UNREADABLE;
+  if (cursorGateOwnsCall?.(parsed)) return GATED_BY_CURSOR;
+  const shaped = inClaudeShape(source, namedEvent(process.argv) ?? fallbackEvent, parsed);
+  if (source === "grok" && isGrokSessionEndStop(shaped.hook_event_name, shaped.reason)) return UNREADABLE;
+  const input = parseInput ? parseInput(shaped) : shaped;
+  if (input === null) return UNREADABLE;
+  const event = eventNameOf(input) ?? fallbackEvent;
+  if (!isAdmitted(readAdmissionRules(), source, event)) return { kind: "not_admitted", input };
+  if (stdin === process.stdin) registerTranscript(source, input);
+  return { kind: "admitted", input };
+};
+var admittedInput = (read) => read.kind === "admitted" ? read.input : null;
+var readHookInput = async (source, fallbackEvent = "", stdin = process.stdin, parseInput) => admittedInput(await readHookInputOutcome(source, fallbackEvent, stdin, parseInput));
+var inClaudeShape = (source, event, parsed) => {
+  const profile = hookCompatibleProfileBySource(source);
+  return profile ? claudeShapedHookInput(profile.payload, event, parsed) : parsed;
+};
+var eventNameOf = (input) => {
+  if (!("hook_event_name" in input)) return void 0;
+  const name = input.hook_event_name;
+  return typeof name === "string" && name.length > 0 ? name : void 0;
+};
+function readToolHookInput(source, event, stdin = process.stdin) {
+  return readHookInput(source, event, stdin, parseToolHookInput);
+}
+var isClaudePreToolUse = (source, event) => source === "claude" && event === "PreToolUse";
+var screenFor = (source, event, readCursorGate) => isClaudePreToolUse(source, event) ? { cursorGateOwnsCall: (payload) => cursorGateOwnsClaudeCall(payload, readCursorGate) } : {};
+function readToolHookCall(source, event, stdin = process.stdin, { readCursorGate = readCursorGateRegistration } = {}) {
+  return readHookInputOutcome(source, event, stdin, parseToolHookInput, screenFor(source, event, readCursorGate));
+}
+
+export {
+  readHookInput,
+  readToolHookInput,
+  readToolHookCall
+};

package/dist/{chunk-SFAP4AJY.js → chunk-G3ZDCYMU.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-MWLTTLPK.js";
+} from "./chunk-6YSEOXP5.js";
 import {
   writeFileAtomic
 } from "./chunk-QENTGE75.js";

package/dist/{chunk-ELLJPP6O.js → chunk-GFAG72LR.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-2AELPDMT.js";
+} from "./chunk-7ETELRQX.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-GAMVAORR.js";
+} from "./chunk-UUAVYIWJ.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-ATKN4BJT.js → chunk-GV43RXR2.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-WN3RACVD.js";
+} from "./chunk-W3CBFLIX.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-7BAO42UV.js → chunk-HSRNWCXJ.js}

@@ -1,19 +1,19 @@
 import {
   readExistingMachineId
-} from "./chunk-SFAP4AJY.js";
+} from "./chunk-G3ZDCYMU.js";
 import {
   NetworkError
 } from "./chunk-PPY5N2E6.js";
 import {
   getBaseUrl
-} from "./chunk-BG4Y64FW.js";
+} from "./chunk-DFKEJARZ.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";
 import {
   clientContextHeaders,
   redactSecretsFromContent
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-RGSW36XH.js → chunk-LCNN7UOE.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-33OOEVPG.js";
+} from "./chunk-LL2KHEJH.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-MWLTTLPK.js";
+} from "./chunk-6YSEOXP5.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-4VRTSDGP.js → chunk-LILS32LF.js}

@@ -1,14 +1,14 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-UADSXJZ4.js";
+} from "./chunk-EO6CL4PD.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-WN3RACVD.js";
+} from "./chunk-W3CBFLIX.js";
 import {
   NpmInstallError,
   NpmMissingError,
   NpmPermissionError
-} from "./chunk-CJ5TCFD4.js";
+} from "./chunk-CFIQ3252.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -16,10 +16,10 @@ import {
 } from "./chunk-QENTGE75.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ERK24P76.js";
+} from "./chunk-FG5HMJ7C.js";
 import {
   readSetupAgentFailures
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/instruction-file.ts
 import { accessSync, constants, existsSync, readFileSync, statSync, writeFileSync, mkdirSync, rmSync } from "fs";

package/dist/{chunk-33OOEVPG.js → chunk-LL2KHEJH.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-DQLCFGHK.js → chunk-LWR5VKNC.js}

@@ -2,10 +2,10 @@ import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-33OOEVPG.js";
+} from "./chunk-LL2KHEJH.js";
 import {
   repoKeyFor
-} from "./chunk-YPD3MTFU.js";
+} from "./chunk-4K6YZPZ3.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -13,26 +13,26 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-RJHX66EY.js";
+} from "./chunk-RSNN2TPE.js";
 import {
   withRetry
-} from "./chunk-XAO6EYGM.js";
+} from "./chunk-ESXGCZDA.js";
 import {
   getMachineId
-} from "./chunk-SFAP4AJY.js";
+} from "./chunk-G3ZDCYMU.js";
 import {
   reportedInstallSource
-} from "./chunk-Y5VKZNFN.js";
+} from "./chunk-PSCXEH42.js";
 import {
   canonicalJson
-} from "./chunk-MWLTTLPK.js";
+} from "./chunk-6YSEOXP5.js";
 import {
   writeFileAtomic
 } from "./chunk-QENTGE75.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-BG4Y64FW.js";
+} from "./chunk-DFKEJARZ.js";
 import {
   ACTION_BODY_MAX,
   AGENTS,
@@ -58,6 +58,7 @@ import {
   modeStateFromResponse,
   parseMcpToolName,
   pendingCommandEvents,
+  questionLimitHandBack,
   redactSecrets,
   redactSecretsDeep,
   reportableSessionId,
@@ -66,7 +67,7 @@ import {
   toToolLookup,
   truncateLine,
   unansweredRefusalReason
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";
@@ -1348,6 +1349,10 @@ var toPolicyLookups = (toolName, toolInput, cwd) => {
     inputs: files.map((file) => ({ file_path: cwd ? resolve2(cwd, file) : file }))
   };
 };
+var codexQuestionLimitDecision = (facts) => {
+  const handBack = questionLimitHandBack(facts);
+  return handBack.kind === "refuse" ? codexDeny(handBack.reason) : codexPass();
+};
 var permissionTimeoutDecision = (timeoutAction, paused) => {
   if (timeoutAction === "approve") return codexAllow();
   if (timeoutAction === "deny") return codexDeny(unansweredRefusalReason(paused));
@@ -2236,6 +2241,7 @@ export {
   describeApplyPatch,
   toPolicyLookup,
   toPolicyLookups,
+  codexQuestionLimitDecision,
   permissionTimeoutDecision,
   userScope,
   codexCallKey,

package/dist/{chunk-CICLXLQN.js → chunk-M7MEVILL.js}

@@ -1,16 +1,16 @@
 import {
   notificationAnswerStep
-} from "./chunk-HUI4OE43.js";
+} from "./chunk-RU37NSZH.js";
 import {
   matchMacAccountStep,
   retryAgentCommand
-} from "./chunk-4VRTSDGP.js";
+} from "./chunk-LILS32LF.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ERK24P76.js";
+} from "./chunk-FG5HMJ7C.js";
 
 // src/setup/closing.ts
 var ACTIVITY_URL = "pushary.com/dashboard/agent/activity";

package/dist/{chunk-XV6S5PWW.js → chunk-MURJ4WAL.js}

@@ -10,7 +10,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-FUZ5VYWD.js → chunk-MYEALNW6.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-BG4Y64FW.js";
+} from "./chunk-DFKEJARZ.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-ADR3KHOC.js → chunk-NAZRRXZM.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-WN3RACVD.js";
+} from "./chunk-W3CBFLIX.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ERK24P76.js";
+} from "./chunk-FG5HMJ7C.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-VX2MJ4X7.js → chunk-NZLQ6GMX.js}

@@ -7,7 +7,7 @@ import {
   reachVerdict,
   reachesYou,
   verifyDelivery
-} from "./chunk-HUI4OE43.js";
+} from "./chunk-RU37NSZH.js";
 import {
   generateKeypair,
   openSealedKey,
@@ -24,14 +24,14 @@ import {
 } from "./chunk-FO3MDD26.js";
 import {
   reportedInstallSource
-} from "./chunk-Y5VKZNFN.js";
+} from "./chunk-PSCXEH42.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ERK24P76.js";
+} from "./chunk-FG5HMJ7C.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/onboarding.ts
 import qrcodeTerminal from "qrcode-terminal";

package/dist/{chunk-K4MBKXAE.js → chunk-OZRT64BB.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-ERK24P76.js";
+} from "./chunk-FG5HMJ7C.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";

package/dist/{chunk-Y5VKZNFN.js → chunk-PSCXEH42.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-BG4Y64FW.js";
+} from "./chunk-DFKEJARZ.js";
 import {
   normalizeInstallSource
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-YDR4BQ7R.js → chunk-Q4WTIKM6.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-7BAO42UV.js";
+} from "./chunk-HSRNWCXJ.js";
 import {
   NetworkError
 } from "./chunk-PPY5N2E6.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-BG4Y64FW.js";
+} from "./chunk-DFKEJARZ.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-KPNZ7JUL.js → chunk-QIPW7OVB.js}

@@ -1,18 +1,18 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-ZGU3NXL2.js";
+} from "./chunk-6HIYOY6I.js";
 import {
   keyPrefix
-} from "./chunk-WN3RACVD.js";
+} from "./chunk-W3CBFLIX.js";
 import {
   bridgeAgentKey
-} from "./chunk-MWLTTLPK.js";
+} from "./chunk-6YSEOXP5.js";
 import {
   readJsonSafe
 } from "./chunk-QENTGE75.js";
 import {
   isValidApiKey
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-USE5IEEW.js → chunk-R3CLBNST.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-6ICPEJY5.js";
 import {
   isRecord
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-SHJVFW22.js → chunk-RFCEVROB.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-MWLTTLPK.js";
+} from "./chunk-6YSEOXP5.js";
 import {
   readJsonSafe
 } from "./chunk-QENTGE75.js";
 import {
   isRecord
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-RJHX66EY.js → chunk-RSNN2TPE.js}

@@ -1,7 +1,8 @@
 import {
+  McpToolError,
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-XAO6EYGM.js";
+} from "./chunk-ESXGCZDA.js";
 import {
   CLIENT_REPORT_DISABLE_ENV,
   isDisabledByEnv
@@ -9,22 +10,23 @@ import {
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-7BAO42UV.js";
+} from "./chunk-HSRNWCXJ.js";
 import {
   clientReportClaims
-} from "./chunk-MWLTTLPK.js";
+} from "./chunk-6YSEOXP5.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-BG4Y64FW.js";
+} from "./chunk-DFKEJARZ.js";
 import {
   ASK_AGENT_NAME_MAX,
   CLIENT_REPORT_PATH,
   DECISION_LINE_MAX,
   GATE_PERMISSION_MODE_MAX_LENGTH,
+  TOOL_FAILURE_CODES,
   degradedLine,
   truncateLine
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";
@@ -195,8 +197,10 @@ var isAwayPaused = (result) => result.paused === true;
 var isLocalQuestionHandoff = (result) => !isAwayPaused(result) && (result.suppressed === true || result.noDevices === true || result.status === "terminal" || result.status === "notified");
 var waitsForThePhone = (result) => result.answered !== true && !isAwayPaused(result) && !isLocalQuestionHandoff(result);
 var STOPPED = { answered: false, handoffAction: "stop" };
-var unavailableQuestionUnlessSubscriptionRequired = (error) => {
-  if (error instanceof SubscriptionRequiredError) throw error;
+var isQuestionLimitRefusal = (error) => error instanceof McpToolError && error.failure === TOOL_FAILURE_CODES.questionLimit;
+var isRefusedAsk = (error) => error instanceof SubscriptionRequiredError || isQuestionLimitRefusal(error);
+var unavailableQuestionUnlessRefused = (error) => {
+  if (isRefusedAsk(error)) throw error;
   return { correlationId: "", status: "unavailable" };
 };
 var truncateOptional = (text, max) => text === void 0 ? void 0 : truncateLine(text, max);
@@ -318,7 +322,8 @@ export {
   isAwayPaused,
   isLocalQuestionHandoff,
   waitsForThePhone,
-  unavailableQuestionUnlessSubscriptionRequired,
+  isQuestionLimitRefusal,
+  unavailableQuestionUnlessRefused,
   askUser,
   waitForAnswer,
   WAIT_RESPONSE_GRACE_MS,

package/dist/{chunk-HUI4OE43.js → chunk-RU37NSZH.js}

@@ -1,13 +1,13 @@
 import {
   callMcpTool
-} from "./chunk-XAO6EYGM.js";
+} from "./chunk-ESXGCZDA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ERK24P76.js";
+} from "./chunk-FG5HMJ7C.js";
 import {
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-FXECTHAG.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {