pushary 1.9.72 → 1.9.75

package/dist/{chunk-5XKJH5GD.js → chunk-QRS7FQHE.js}

@@ -54,9 +54,9 @@ var isAgentQuestionSet = (value) => {
     const labels = /* @__PURE__ */ new Set();
     for (const option of question.options) {
       if (!option || typeof option !== "object" || Array.isArray(option)) return false;
-      const record3 = option;
-      const label = record3.label;
-      if (typeof label !== "string" || label.length === 0 || labels.has(label) || record3.description !== void 0 && typeof record3.description !== "string") return false;
+      const record4 = option;
+      const label = record4.label;
+      if (typeof label !== "string" || label.length === 0 || labels.has(label) || record4.description !== void 0 && typeof record4.description !== "string") return false;
       labels.add(label);
     }
     questions.add(question.question);
@@ -536,9 +536,9 @@ var CANONICAL_COMMAND_KEYS = ["command"];
 var SHELL_TOOLS = /* @__PURE__ */ new Set([SHELL_TOOL, POWERSHELL_TOOL]);
 var PATH_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit", "NotebookEdit", "Read"]);
 var PHONE_ANSWERED_TOOLS = /* @__PURE__ */ new Set(["AskUserQuestion", "ExitPlanMode"]);
-var firstString = (record3, keys2) => {
+var firstString = (record4, keys2) => {
   for (const key of keys2) {
-    const value = record3[key];
+    const value = record4[key];
     if (typeof value === "string" && value.length > 0) return value;
   }
   return void 0;
@@ -554,12 +554,12 @@ var BLANK_TASK_INPUT_TOOL = "TaskInput";
 var typesText = (value) => typeof value === "string" && value.trim().length > 0;
 var taskIdOf = (control, toolInput) => typeof toolInput[control.taskKey] === "string" ? { task_id: toolInput[control.taskKey] } : {};
 var typedIntoTask = (control, toolInput) => {
-  const text2 = toolInput[control.inputKey];
-  if (typesText(text2)) return { tool: SHELL_TOOL, input: { command: text2 }, unreadable: false };
-  if (text2 !== void 0 && typeof text2 !== "string") return { tool: control.name, input: toolInput, unreadable: true };
+  const text3 = toolInput[control.inputKey];
+  if (typesText(text3)) return { tool: SHELL_TOOL, input: { command: text3 }, unreadable: false };
+  if (text3 !== void 0 && typeof text3 !== "string") return { tool: control.name, input: toolInput, unreadable: true };
   return {
     tool: BLANK_TASK_INPUT_TOOL,
-    input: { ...taskIdOf(control, toolInput), input: text2 ?? "" },
+    input: { ...taskIdOf(control, toolInput), input: text3 ?? "" },
     unreadable: false
   };
 };
@@ -986,10 +986,10 @@ var secretRedactionRules = (shapes) => [
 var SECRET_REDACTION_RULES = secretRedactionRules(DISPLAYED_SECRET_SHAPES);
 var CUT_OFF_TEXT_REDACTION_RULES = secretRedactionRules(CUT_OFF_SECRET_SHAPES);
 var HIGH_ENTROPY_RULE = { pattern: /[A-Za-z0-9+/]{40,}={0,2}/g, replacement: "[redacted]" };
-var applyRedactionRules = (rules, text2) => rules.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text2);
-var redactSecrets = (text2) => applyRedactionRules(SECRET_REDACTION_RULES, text2);
-var redactSecretsFromContent = (text2) => applyRedactionRules(CUT_OFF_TEXT_REDACTION_RULES, text2);
-var redactSecretsDeep = (text2) => redactSecrets(text2).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
+var applyRedactionRules = (rules, text3) => rules.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text3);
+var redactSecrets = (text3) => applyRedactionRules(SECRET_REDACTION_RULES, text3);
+var redactSecretsFromContent = (text3) => applyRedactionRules(CUT_OFF_TEXT_REDACTION_RULES, text3);
+var redactSecretsDeep = (text3) => redactSecrets(text3).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
 
 // ../contracts/src/cursor.ts
 var CURSOR_GATE_EVENTS = ["beforeShellExecution", "beforeMCPExecution", "preToolUse"];
@@ -1029,13 +1029,13 @@ var cursorGateOwnsToolCall = (registration, toolName) => typeof toolName === "st
 var INTERNAL_ENVELOPE = /(^|\n) {0,3}(?:<(total_tokens|task-notification)>[\s\S]*?(?:<\/\2>|$)[\t ]*)+/g;
 var INCOMPLETE_ENVELOPE = /(^|\n) {0,3}<(?:total_tokens|task-notification)$/g;
 var SUGGESTION_REQUEST = /^This is an app-generated request for a suggested next user(?: message| prompt)/;
-var visibleProse = (text2) => text2.replace(INTERNAL_ENVELOPE, "$1").replace(INCOMPLETE_ENVELOPE, "$1");
-function conversationText(text2) {
-  if (SUGGESTION_REQUEST.test(text2.trimStart())) return "";
+var visibleProse = (text3) => text3.replace(INTERNAL_ENVELOPE, "$1").replace(INCOMPLETE_ENVELOPE, "$1");
+function conversationText(text3) {
+  if (SUGGESTION_REQUEST.test(text3.trimStart())) return "";
   const output = [];
   let prose = [];
   let fence = null;
-  for (const line of text2.split("\n")) {
+  for (const line of text3.split("\n")) {
     const marker = /^ {0,3}(`{3,}|~{3,})/.exec(line)?.[1];
     if (fence) {
       output.push(line);
@@ -1059,6 +1059,186 @@ function extractMessageText(content) {
   ).join("\n");
 }
 
+// ../contracts/src/native-input.ts
+var NativeInputAgent = /* @__PURE__ */ ((NativeInputAgent2) => {
+  NativeInputAgent2["codex"] = "codex";
+  NativeInputAgent2["hermes"] = "hermes";
+  return NativeInputAgent2;
+})(NativeInputAgent || {});
+var NATIVE_INPUT = {
+  protocol: 1,
+  codexVersion: "0.163.0",
+  hermesCommit: "2e83e2a935ee04f606aab58e498d34ca58d84c07",
+  hermesRecoveryCommit: "1ba5596b494c699386304d425792f214b67afe2c",
+  rpcTimeoutMs: 5e3,
+  receiptWindowMs: 15e3,
+  maxFrameBytes: 4194304,
+  maxSessions: 128,
+  receiptPageSize: 100,
+  receiptMaxPages: 4,
+  heartbeatMs: 6e4,
+  maxConcurrent: 4,
+  journalVersion: 1,
+  journalDirectory: "run/native-input",
+  codexSocket: "app-server-control/app-server-control.sock",
+  hermesSocket: "gateway.sock",
+  hermesWebSocketProtocol: "hermes-gateway-v1",
+  hermesTicketPrefix: "hermes-gateway-ticket."
+};
+var HermesInputCapability = /* @__PURE__ */ ((HermesInputCapability2) => {
+  HermesInputCapability2["durableAdmission"] = "durable-admission-v1";
+  HermesInputCapability2["submissionReceipt"] = "submission-receipt-v1";
+  HermesInputCapability2["admissionHistory"] = "admission-history-v1";
+  HermesInputCapability2["ordinaryInputEvents"] = "ordinary-input-events-v1";
+  return HermesInputCapability2;
+})(HermesInputCapability || {});
+var qualifyHermesReceiptMode = (codeSha, capabilities) => {
+  if (!Array.isArray(capabilities) || !capabilities.every((value) => typeof value === "string"))
+    return null;
+  if (!capabilities.includes("durable-admission-v1" /* durableAdmission */))
+    return null;
+  if (codeSha === NATIVE_INPUT.hermesCommit)
+    return "event_replay" /* eventReplay */;
+  if (codeSha === NATIVE_INPUT.hermesRecoveryCommit && Object.values(HermesInputCapability).every(
+    (capability) => capabilities.includes(capability)
+  ))
+    return "submission" /* submission */;
+  return null;
+};
+var nativeRecord = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var nativeIdentifier = (v) => typeof v === "string" && /^[A-Za-z0-9_-]{1,128}$/.test(v);
+var nativeInputAction = (p) => {
+  if (p.accepted) return "acknowledge" /* acknowledge */;
+  if (p.nowMs >= p.expiresAtMs)
+    return p.attempted ? "outcome_unknown" /* outcomeUnknown */ : "expire" /* expire */;
+  if (p.attempted) return "observe" /* observe */;
+  return "submit" /* submit */;
+};
+var isCodexQueuedReceipt = (v, commandId) => nativeRecord(v) && nativeIdentifier(v.id) && v.clientUserMessageId === commandId;
+var isCodexInputReceipt = (v, sessionId, commandId) => nativeRecord(v) && v.id === sessionId && Array.isArray(v.turns) && v.turns.some(
+  (turn) => nativeRecord(turn) && Array.isArray(turn.items) && turn.items.some(
+    (item) => nativeRecord(item) && item.type === "userMessage" && item.clientId === commandId
+  )
+);
+var parseHermesAdmission = (v, profile, sessionId) => {
+  if (!nativeRecord(v) || !nativeIdentifier(v.admission_id) || !nativeRecord(v.ref) || v.ref.profile_id !== profile || v.ref.session_id !== sessionId || v.status !== "queued" /* queued */ && v.status !== "started" /* started */ && v.status !== "terminal" /* terminal */ && v.status !== "unknown" /* unknown */)
+    return null;
+  return {
+    admissionId: v.admission_id,
+    status: v.status,
+    outcome: typeof v.outcome === "string" ? v.outcome : null
+  };
+};
+var parseHermesReplayCursor = (v) => {
+  if (!nativeRecord(v) || !nativeIdentifier(v.replay_epoch) || typeof v.last_sequence !== "number" || !Number.isSafeInteger(v.last_sequence) || v.last_sequence < 0)
+    return null;
+  return { replay_epoch: v.replay_epoch, last_sequence: v.last_sequence };
+};
+var hermesPendingAdmissionId = (snapshot, profile, sessionId, commandId) => {
+  if (!nativeRecord(snapshot) || snapshot.session_id !== sessionId || !Array.isArray(snapshot.pending))
+    return null;
+  for (const row of snapshot.pending) {
+    if (!nativeRecord(row) || row.input_id !== commandId) continue;
+    const receipt = parseHermesAdmission(row, profile, sessionId);
+    if (receipt) return receipt.admissionId;
+  }
+  return null;
+};
+var hermesReplayAdmissionId = (replay, cursor, sessionId, commandId) => {
+  if (!nativeRecord(replay) || replay.replay_epoch !== cursor.replay_epoch || replay.truncated !== false || replay.snapshot_required !== false || !Array.isArray(replay.events))
+    return null;
+  for (const event of replay.events) {
+    if (!nativeRecord(event) || event.type !== "message.complete" || event.session_id !== sessionId || event.replay_epoch !== cursor.replay_epoch || typeof event.seq !== "number" || !Number.isSafeInteger(event.seq) || event.seq <= cursor.last_sequence || !nativeIdentifier(event.admission_id) || !nativeRecord(event.payload) || event.payload.admission_id !== event.admission_id || !nativeRecord(event.payload.persisted_turn) || event.payload.persisted_turn.submission_id !== commandId)
+      continue;
+    return event.admission_id;
+  }
+  return null;
+};
+
+// ../contracts/src/command-delivery.ts
+var COMMAND_SETTLEMENT_STATES = [
+  "delivered",
+  "failed",
+  "uncertain"
+];
+var COMMAND_RECOVERY = {
+  receiptRetentionMs: 7 * 24 * 60 * 60 * 1e3,
+  waitingObservationMs: 9e4,
+  acknowledgementTimeoutMs: 5e3,
+  emissionRecoveryGraceMs: 6e4,
+  retrySendWindowMs: 72e5
+};
+var COMMAND_ACKNOWLEDGEMENT_STATES = [
+  "dispatching",
+  ...COMMAND_SETTLEMENT_STATES
+];
+var isCommandAcknowledgementReceipt = (value) => typeof value === "object" && value !== null && "ok" in value && value.ok === true;
+
+// ../contracts/src/claude-wake.ts
+var CLAUDE_WAKE = {
+  apiPath: "/api/agent/command/wake",
+  message: "Pushary has a message from your user. It arrives through Pushary's hook; no reply is needed.",
+  unixMinimumVersion: "2.1.224",
+  windowsMinimumVersion: "2.1.234",
+  stopFeedbackMinimumVersion: "2.1.163",
+  receiptWindowMs: 15e3,
+  debounceMs: 6e4,
+  missingReceiptLimit: 3,
+  retainedAttempts: 128,
+  directory: "run/claude-wake"
+};
+var versionAtLeast = (version, floor) => {
+  if (!version || !/^\d+\.\d+\.\d+$/.test(version)) return false;
+  const parts = version.split(".").map(Number);
+  const minimum = floor.split(".").map(Number);
+  if (!parts.every(Number.isSafeInteger)) return false;
+  for (let index = 0; index < 3; index++) {
+    if (parts[index] !== minimum[index]) return parts[index] > minimum[index];
+  }
+  return true;
+};
+var supportsClaudeInbox = (version, platform) => {
+  if (platform === "win32")
+    return versionAtLeast(version, CLAUDE_WAKE.windowsMinimumVersion);
+  return (platform === "darwin" || platform === "linux") && versionAtLeast(version, CLAUDE_WAKE.unixMinimumVersion);
+};
+var claudeWakeDecision = (progress) => {
+  if (!progress.idle) return "agent_busy" /* busy */;
+  const attempts = [...progress.attempts].sort(
+    (a, b) => b.submittedAtMs - a.submittedAtMs
+  );
+  const recent = attempts.find(
+    (attempt) => attempt.sessionId === progress.sessionId
+  );
+  if (recent && progress.nowMs - recent.submittedAtMs < CLAUDE_WAKE.debounceMs) {
+    return recent.accepted ? "wake_accepted" /* accepted */ : "wake_unconfirmed" /* unconfirmed */;
+  }
+  let missing = 0;
+  for (const attempt of attempts) {
+    if (attempt.accepted) break;
+    if (progress.nowMs - attempt.submittedAtMs >= CLAUDE_WAKE.receiptWindowMs)
+      missing++;
+    if (missing >= CLAUDE_WAKE.missingReceiptLimit)
+      return "wake_disabled" /* circuitOpen */;
+  }
+  return null;
+};
+var CLAUDE_WAKE_API = CLAUDE_WAKE.apiPath;
+var claudeWakeWaitingOn = (outcome) => {
+  switch (outcome) {
+    case "wake_accepted" /* accepted */:
+      return "hook" /* hook */;
+    case "agent_busy" /* busy */:
+      return "agent_turn" /* agentTurn */;
+    case "wake_unconfirmed" /* unconfirmed */:
+      return "wake_unconfirmed" /* wakeUnconfirmed */;
+    case "wake_disabled" /* circuitOpen */:
+      return "wake_disabled" /* wakeDisabled */;
+    case "wake_not_sent" /* notSent */:
+      return "local_use" /* localUse */;
+  }
+};
+
 // ../contracts/src/shell-analysis.ts
 var SHELL_WORD_SEPARATOR = /[ \t\n]/;
 var ARITHMETIC_EVALUATING_EXPANSION = /\$[#+=~^]*(?:[A-Za-z_][A-Za-z0-9_]*|[0-9]+|[-?$!@*#])?\[/;
@@ -1096,16 +1276,16 @@ var splitShellSegments = (command) => {
   let consumed = -1;
   let readsPipe = false;
   for (const lexeme of lexemes) {
-    const { index, text: text2, quote, kind } = lexeme;
+    const { index, text: text3, quote, kind } = lexeme;
     if (index <= consumed || kind !== "text" || quote === "'") continue;
-    if (text2 === "`" || text2 === "$" && command[index + 1] === "(") return null;
+    if (text3 === "`" || text3 === "$" && command[index + 1] === "(") return null;
     if (quote !== null) continue;
-    if (UNDECOMPOSABLE.has(text2)) return null;
-    if (!SEGMENT_SEPARATORS.has(text2)) continue;
-    const doubled = DOUBLED_SEPARATORS.has(text2) && command[index + 1] === text2;
+    if (UNDECOMPOSABLE.has(text3)) return null;
+    if (!SEGMENT_SEPARATORS.has(text3)) continue;
+    const doubled = DOUBLED_SEPARATORS.has(text3) && command[index + 1] === text3;
     consumed = index + (doubled ? 1 : 0);
     segments.push({ text: trimShellWhitespace(command.slice(start, index)), readsPipe });
-    readsPipe = text2 === PIPE && !doubled;
+    readsPipe = text3 === PIPE && !doubled;
     start = consumed + 1;
   }
   segments.push({ text: trimShellWhitespace(command.slice(start)), readsPipe });
@@ -1203,10 +1383,10 @@ var shellVisibleText = (command) => {
   const lexemes = scanShell(command);
   if (lexemes === null) return null;
   let visible = "";
-  for (const { text: text2, quote, kind } of lexemes) {
+  for (const { text: text3, quote, kind } of lexemes) {
     if (kind === "escape" && quote === '"') return null;
-    const literal = kind === "text" && (quote === "'" || quote === '"' && LITERAL_IN_DOUBLE_QUOTES.has(text2));
-    visible += literal ? "_".repeat(text2.length) : text2;
+    const literal = kind === "text" && (quote === "'" || quote === '"' && LITERAL_IN_DOUBLE_QUOTES.has(text3));
+    visible += literal ? "_".repeat(text3.length) : text3;
   }
   return visible;
 };
@@ -1222,14 +1402,14 @@ var shellWordsOf = (command) => {
   const lexemes = scanShell(command);
   if (lexemes === null) return null;
   const words = [];
-  let text2 = "";
+  let text3 = "";
   let plain = true;
   let expands = false;
   let comment = false;
   let started = false;
   const finishWord = () => {
-    if (started) words.push({ text: text2, plain, expands, comment });
-    text2 = "";
+    if (started) words.push({ text: text3, plain, expands, comment });
+    text3 = "";
     plain = true;
     expands = false;
     comment = false;
@@ -1242,7 +1422,7 @@ var shellWordsOf = (command) => {
       continue;
     }
     if (lexeme.kind === "escape") {
-      text2 += lexeme.text.slice(1);
+      text3 += lexeme.text.slice(1);
       plain = false;
       started = true;
       continue;
@@ -1253,7 +1433,7 @@ var shellWordsOf = (command) => {
     }
     comment ||= lexeme.quote === null && !started && lexeme.text === "#";
     expands ||= lexeme.quote !== "'" && lexeme.text === "$";
-    text2 += lexeme.text;
+    text3 += lexeme.text;
     started = true;
   }
   finishWord();
@@ -1328,40 +1508,40 @@ var opensAHereString = (source, index) => {
   return source.charAt(index) === HERE_STRING_SIGIL && (SINGLE_QUOTES.has(quote) || DOUBLE_QUOTES.has(quote)) && HERE_STRING_HEADER_REST.test(source.slice(index + 2));
 };
 var singleQuotedTextAt = (source, open) => {
-  let text2 = "";
+  let text3 = "";
   for (let index = open + 1; index < source.length; index += 1) {
     const char = source.charAt(index);
     if (!SINGLE_QUOTES.has(char)) {
-      text2 += char;
+      text3 += char;
     } else if (SINGLE_QUOTES.has(source.charAt(index + 1))) {
-      text2 += char;
+      text3 += char;
       index += 1;
     } else {
-      return { end: index + 1, text: text2, expands: false, nested: [] };
+      return { end: index + 1, text: text3, expands: false, nested: [] };
     }
   }
   return null;
 };
 var expandableTextUntil = (source, start, closesAt, nesting) => {
-  let text2 = "";
+  let text3 = "";
   let expands = false;
   const nested = [];
   for (let index = start; index < source.length; index += 1) {
     const char = source.charAt(index);
-    if (closesAt(index)) return { end: index + 1, text: text2, expands, nested };
+    if (closesAt(index)) return { end: index + 1, text: text3, expands, nested };
     if (char === ESCAPE || DOUBLE_QUOTES.has(char) && DOUBLE_QUOTES.has(source.charAt(index + 1))) {
-      text2 += source.charAt(index + 1);
+      text3 += source.charAt(index + 1);
       index += 1;
     } else if (source.startsWith(SUBEXPRESSION_OPEN, index)) {
       const group = groupAt(source, index + SUBEXPRESSION_OPEN.length, ")", nesting + 1);
       if (group === null) return null;
       nested.push(group.inner);
-      text2 += SUBEXPRESSION_PLACEHOLDER;
+      text3 += SUBEXPRESSION_PLACEHOLDER;
       expands = true;
       index = group.end - 1;
     } else {
       expands ||= opensAVariable(source, index);
-      text2 += char;
+      text3 += char;
     }
   }
   return null;
@@ -1860,12 +2040,12 @@ var parameterValueOf = (command, fullName, shortestPrefix) => {
 };
 var operandTextsOf = (command) => command.args.flatMap((arg) => {
   const parameter = parameterOf(arg);
-  const text2 = parameter === null ? arg.text : parameter.value;
-  return text2 === void 0 ? [] : text2.split(POWERSHELL_ARRAY_SEPARATOR);
+  const text3 = parameter === null ? arg.text : parameter.value;
+  return text3 === void 0 ? [] : text3.split(POWERSHELL_ARRAY_SEPARATOR);
 });
 var positionalTextsOf = (command) => command.args.filter((arg) => parameterOf(arg) === null).map((arg) => arg.text);
 var firstOperandOf = (command, isSwitch) => command.args.find((arg) => !isSwitch.test(arg.text))?.text;
-var namesASecretPath = (text2, judge) => judge.namesASecretFile(fileNameOf(text2.trim()));
+var namesASecretPath = (text3, judge) => judge.namesASecretFile(fileNameOf(text3.trim()));
 var isAssignmentTarget = (word) => POWERSHELL_ASSIGNMENT_TARGET.test(word.text) || word.text === POWERSHELL_ARRAY_SEPARATOR;
 var wordsAfterAnAssignment = (words) => {
   const operator = words.findIndex((word) => isPowerShellAssignmentOperator(word));
@@ -1924,7 +2104,7 @@ var copyDestinationOf = (command) => {
 };
 var writesASecretFileFromPowerShell = (command, judge) => {
   if (command.cmdlet !== COPY_ITEM) {
-    return POWERSHELL_FILE_WRITERS.has(command.cmdlet) && operandTextsOf(command).some((text2) => namesASecretPath(text2, judge));
+    return POWERSHELL_FILE_WRITERS.has(command.cmdlet) && operandTextsOf(command).some((text3) => namesASecretPath(text3, judge));
   }
   const destination = copyDestinationOf(command);
   return destination !== void 0 && namesASecretPath(destination, judge);
@@ -1932,7 +2112,7 @@ var writesASecretFileFromPowerShell = (command, judge) => {
 var formatsADisk = (command) => DISK_ERASERS.has(command.cmdlet);
 var changesAWindowsService = (command) => {
   if (WINDOWS_SERVICE_CHANGERS.has(command.cmdlet)) return true;
-  const [verb, ...operands] = command.args.map((arg) => arg.text.toLowerCase()).filter((text2) => !text2.startsWith(REMOTE_MACHINE_PREFIX));
+  const [verb, ...operands] = command.args.map((arg) => arg.text.toLowerCase()).filter((text3) => !text3.startsWith(REMOTE_MACHINE_PREFIX));
   if (command.name === SERVICE_CONTROL_PROGRAM) return SERVICE_CONTROL_VERBS_THAT_CHANGE.has(verb ?? "");
   return NET_PROGRAMS.has(command.name) && (NET_VERBS_THAT_CHANGE_A_SERVICE.has(verb ?? "") || verb === NET_START && operands.length > 0);
 };
@@ -1956,7 +2136,7 @@ var runsTextAsCode = (stage, judge) => {
   return SCRIPTBLOCK_FROM_TEXT.test(stage.source) || command !== null && (command.cmdlet === INVOKE_EXPRESSION || stage.readsAPipe && judge.runsWhatItReads(posixInvocationOf(command)));
 };
 var runsFetchedPowerShellCode = (stages, judge) => stages.some((stage) => fetchesWithPowerShell(stage, judge)) && stages.some((stage) => runsTextAsCode(stage, judge));
-var downloadedFileNameOf = (text2) => fileNameOf(text2.replace(URL_QUERY_OR_FRAGMENT, "")).toLowerCase();
+var downloadedFileNameOf = (text3) => fileNameOf(text3.replace(URL_QUERY_OR_FRAGMENT, "")).toLowerCase();
 var downloadedFileNamesOf = (stages, judge) => new Set(stages.filter((stage) => fetchesWithPowerShell(stage, judge)).flatMap((stage) => {
   const command = powerShellCommandOf(stage);
   return command === null ? [] : operandTextsOf(command).map(downloadedFileNameOf);
@@ -1988,12 +2168,12 @@ var hostedPowerShellScriptOf = (command) => {
   if (!POWERSHELL_HOSTS.has(command.name)) return { kind: "none" };
   const texts = command.args.map((arg) => arg.text);
   for (let index = 0; index < texts.length; index += 1) {
-    const text2 = (texts[index] ?? "").trim();
-    if (!text2) continue;
-    if (!POWERSHELL_HOST_SWITCH.test(text2)) {
+    const text3 = (texts[index] ?? "").trim();
+    if (!text3) continue;
+    if (!POWERSHELL_HOST_SWITCH.test(text3)) {
       return command.name === WINDOWS_POWERSHELL_HOST ? { kind: "script", script: texts.slice(index).join(" ") } : { kind: "none" };
     }
-    const option = text2.toLowerCase().replace(POWERSHELL_HOST_SWITCH_PREFIX, "");
+    const option = text3.toLowerCase().replace(POWERSHELL_HOST_SWITCH_PREFIX, "");
     if (option && (POWERSHELL_HOST_ENCODED_PARAMETER.startsWith(option) || option === POWERSHELL_HOST_ENCODED_ALIAS)) {
       return { kind: "incomplete", reason: "encoded_command" };
     }
@@ -2043,9 +2223,9 @@ var wslCommandWordsOf = (command) => {
   const texts = command.args.map((arg) => arg.text);
   let index = 0;
   while (index < texts.length && POSIX_FLAG.test(texts[index] ?? "")) {
-    const text2 = texts[index] ?? "";
-    index += WSL_OPTIONS_WITH_A_VALUE.has(text2) ? 2 : 1;
-    if (WSL_COMMAND_MARKERS.has(text2)) break;
+    const text3 = texts[index] ?? "";
+    index += WSL_OPTIONS_WITH_A_VALUE.has(text3) ? 2 : 1;
+    if (WSL_COMMAND_MARKERS.has(text3)) break;
   }
   return index < texts.length ? texts.slice(index) : void 0;
 };
@@ -2103,6 +2283,51 @@ var powerShellCommandHasAVisibleConsequence = (command, judge) => {
   return powerShellReadingIsDestructive(reading, judge) || stages.some((stage) => stageHasAVisibleConsequence(stage, judge)) || reading.statements.some(listsRecursivelyIntoARemoval) || runsFetchedPowerShellCode(stages, judge) || runsADownloadedFile(stages, judge) || reading.posixCommands.some((words) => judge.commandShowsAConsequence(words));
 };
 
+// ../contracts/src/release-version.ts
+var RELEASE_VERSION_PATTERN = /^(0|[1-9]\d{0,8})\.(0|[1-9]\d{0,8})\.(0|[1-9]\d{0,8})$/;
+var parseReleaseVersion = (version) => {
+  const match = RELEASE_VERSION_PATTERN.exec(version);
+  return match ? [Number(match[1]), Number(match[2]), Number(match[3])] : null;
+};
+var compareReleaseVersions = (left, right) => {
+  for (let index = 0; index < left.length; index++) {
+    if (left[index] !== right[index]) return left[index] < right[index] ? -1 : 1;
+  }
+  return 0;
+};
+var isReleaseBelow = (version, floor) => compareReleaseVersions(version, floor) < 0;
+var formatReleaseVersion = (version) => version.join(".");
+
+// ../contracts/src/claude-turn-end.ts
+var STOP_CONTEXT_RELEASE = [2, 1, 163];
+var readsStopContext = (claudeVersion) => {
+  const release = claudeVersion === null ? null : parseReleaseVersion(claudeVersion);
+  return release !== null && !isReleaseBelow(release, STOP_CONTEXT_RELEASE);
+};
+var stopContext = (additionalContext) => ({
+  hookEventName: "Stop",
+  additionalContext
+});
+var instructionAtTurnEnd = (instruction, claudeVersion) => readsStopContext(claudeVersion) ? { hookSpecificOutput: stopContext(instruction) } : { decision: "block", reason: instruction };
+var claudeTurnEndOutput = ({
+  instruction,
+  continueReason,
+  claudeVersion
+}) => {
+  if (instruction === void 0) return continueReason === void 0 ? void 0 : { decision: "block", reason: continueReason };
+  if (continueReason === void 0) return instructionAtTurnEnd(instruction, claudeVersion);
+  return readsStopContext(claudeVersion) ? { decision: "block", reason: continueReason, hookSpecificOutput: stopContext(instruction) } : { decision: "block", reason: `${continueReason}
+
+${instruction}` };
+};
+
+// ../contracts/src/pending-command.ts
+var PENDING_COMMAND_PREFIX = "The user sent a new instruction from their phone via Pushary:";
+var pendingCommandInstruction = (command) => {
+  const instruction = command.trim();
+  return instruction.length === 0 ? void 0 : `${PENDING_COMMAND_PREFIX} ${instruction}`;
+};
+
 // ../contracts/src/command-analysis/sql-text.ts
 var UNCERTAIN_SQL = { kind: "uncertain" };
 var STRING_PLACEHOLDER = "''";
@@ -2244,8 +2469,8 @@ var quotedToken = (source, start, reading, inside) => {
   }
   if (swallowsABacktick(source, start, end, reading.lexicon)) return "uncertain";
   const quote = source.charAt(start);
-  const text2 = syntax.content === "hidden" ? STRING_PLACEHOLDER : visibleQuotedText(source.slice(start + opener.length, end - opener.length).replaceAll(quote + quote, quote));
-  return { text: text2, end, insideExecutableComment: inside };
+  const text3 = syntax.content === "hidden" ? STRING_PLACEHOLDER : visibleQuotedText(source.slice(start + opener.length, end - opener.length).replaceAll(quote + quote, quote));
+  return { text: text3, end, insideExecutableComment: inside };
 };
 var lineCommentEnd = (source, start, lexicon) => {
   const terminator = endOfRun(source, start, (character) => !isLineCommentTerminator(character));
@@ -2295,9 +2520,9 @@ var dollarToken = (source, start, lexicon, inside) => {
 };
 var numberToken = (source, start, inside) => {
   const end = endOfRun(source, start, isWordCharacter);
-  const text2 = source.slice(start, end);
-  if (!DECIMAL_DIGITS.test(text2) && dollarQuoteDelimiterAt(source, end) !== void 0) return "uncertain";
-  return { text: text2, end, insideExecutableComment: inside };
+  const text3 = source.slice(start, end);
+  if (!DECIMAL_DIGITS.test(text3) && dollarQuoteDelimiterAt(source, end) !== void 0) return "uncertain";
+  return { text: text3, end, insideExecutableComment: inside };
 };
 var identifierToken = (source, start, inside) => {
   const end = endOfRun(source, start, isIdentifierPart);
@@ -2505,13 +2730,13 @@ var splitReading = (args, index, clusterBefore, attached) => {
   return { kind: "split", prefix, value: args[index + 1], rest: index + 2 };
 };
 var requiredValueStep = (args, index) => index + 1 < args.length ? nextOption(index + 2) : finished(EXITS);
-var shortOptionStep = (args, index, text2, options) => {
-  for (let position = 1; position < text2.length; position += 1) {
-    const letter = text2.charAt(position);
+var shortOptionStep = (args, index, text3, options) => {
+  for (let position = 1; position < text3.length; position += 1) {
+    const letter = text3.charAt(position);
     if (options.switches.has(letter)) continue;
     if (!options.withAValue.has(letter)) return finished(EXITS);
-    const attached = text2.slice(position + 1);
-    if (letter === SPLIT_STRING_LETTER) return finished(splitReading(args, index, text2.slice(0, position), attached === "" ? void 0 : attached));
+    const attached = text3.slice(position + 1);
+    if (letter === SPLIT_STRING_LETTER) return finished(splitReading(args, index, text3.slice(0, position), attached === "" ? void 0 : attached));
     return attached === "" ? requiredValueStep(args, index) : nextOption(index + 1);
   }
   return nextOption(index + 1);
@@ -2522,8 +2747,8 @@ var gnuLongOptionAbbreviatedBy = (name, options) => {
   const candidates = options.filter((option) => option.name.startsWith(name));
   return candidates.length === 1 ? candidates[0] : void 0;
 };
-var longOptionStep = (args, index, text2, options) => {
-  const body = text2.slice(LONG_OPTION_PREFIX.length);
+var longOptionStep = (args, index, text3, options) => {
+  const body = text3.slice(LONG_OPTION_PREFIX.length);
   const separator = body.indexOf(ASSIGNMENT_SEPARATOR);
   const attached = separator === -1 ? void 0 : body.slice(separator + 1);
   const option = gnuLongOptionAbbreviatedBy(separator === -1 ? body : body.slice(0, separator), options);
@@ -2553,7 +2778,7 @@ var runsSomething = (reading) => reading.kind === "command" || reading.kind ===
 var sameEnvReading = (left, right) => {
   if (left.kind === "command" && right.kind === "command") return left.start === right.start;
   if (left.kind !== "split" || right.kind !== "split") return false;
-  return left.rest === right.rest && left.prefix.length === right.prefix.length && left.prefix.every((text2, position) => text2 === right.prefix[position]) && left.value?.text === right.value?.text && left.value?.expands === right.value?.expands;
+  return left.rest === right.rest && left.prefix.length === right.prefix.length && left.prefix.every((text3, position) => text3 === right.prefix[position]) && left.value?.text === right.value?.text && left.value?.expands === right.value?.expands;
 };
 var envReadingOf = (args) => {
   const readings = ENV_FLAVORS.map((flavor) => flavorReadingOf(args, flavor));
@@ -2597,8 +2822,8 @@ var clusterReadingOf = (cluster, syntax) => {
     endsOptions: [...letters].some((letter) => syntax.lettersThatEndOptions.has(letter))
   };
 };
-var endsOptionParsing = (text2) => text2 === END_OF_OPTIONS2 || text2 === LONE_DASH2;
-var isAnOperand = (text2) => !text2.startsWith("-") && !text2.startsWith("+");
+var endsOptionParsing = (text3) => text3 === END_OF_OPTIONS2 || text3 === LONE_DASH2;
+var isAnOperand = (text3) => !text3.startsWith("-") && !text3.startsWith("+");
 var optionValueIsUnreadable = (value) => value === void 0 || value.expands;
 var shellCommandStringOf = (shell, args) => {
   const syntax = SHELL_OPTION_SYNTAX.get(shell);
@@ -2900,7 +3125,6 @@ var withoutDeclinedAgent = (agents, agent) => agents.filter((candidate) => candi
 // ../contracts/src/cli-version-standing.ts
 var FIRST_AUTO_UPDATING_RELEASE = [1, 5, 0];
 var MIN_SAFE_RELEASE = [1, 9, 26];
-var formatReleaseVersion = (version) => version.join(".");
 var FIRST_AUTO_UPDATING_CLI_VERSION = formatReleaseVersion(FIRST_AUTO_UPDATING_RELEASE);
 var MIN_SAFE_CLI_VERSION = formatReleaseVersion(MIN_SAFE_RELEASE);
 
@@ -2940,13 +3164,13 @@ var leadingWordPart = (rest) => {
   return double ? { text: (double[1] ?? "").replace(ESCAPED_INSIDE_DOUBLE_QUOTES, "$1"), length: double[0].length } : null;
 };
 var leadingWord = (rest) => {
-  let text2 = "";
+  let text3 = "";
   let length = 0;
   for (let part = leadingWordPart(rest); part !== null; part = leadingWordPart(rest.slice(length))) {
-    text2 += part.text;
+    text3 += part.text;
     length += part.length;
   }
-  return length === 0 ? null : { text: text2, length };
+  return length === 0 ? null : { text: text3, length };
 };
 var wordsOfAJoinedCommand = (joined) => {
   const words = [];
@@ -3114,15 +3338,89 @@ var codexNativeApprovalResponse = (approval, answer) => {
 // ../contracts/src/transcript-record.ts
 var COMPRESSED_TRANSCRIPT_RECORD_MARKER = 1;
 var TRANSCRIPT_RECORD_MAX_INFLATED_BYTES = 1024 * 1024;
+var isCompressedTranscriptRecord = (opened) => opened[0] === COMPRESSED_TRANSCRIPT_RECORD_MARKER;
 var compressionShrinks = (raw, deflated) => deflated.length + 1 < raw.length;
+var inflatedRecord = (deflated, inflateRawWithin) => {
+  const inflated = inflateRawWithin(deflated, TRANSCRIPT_RECORD_MAX_INFLATED_BYTES);
+  return inflated && inflated.length > 0 ? inflated : null;
+};
+var transcriptRecordPlaintext = (opened, inflateRawWithin) => isCompressedTranscriptRecord(opened) ? inflatedRecord(opened.subarray(1), inflateRawWithin) : opened;
 var compressTranscriptRecord = (raw, deflateRaw) => {
   if (raw.length > TRANSCRIPT_RECORD_MAX_INFLATED_BYTES) return raw;
   const deflated = deflateRaw(raw);
   if (!compressionShrinks(raw, deflated)) return raw;
-  const record3 = new Uint8Array(deflated.length + 1);
-  record3[0] = COMPRESSED_TRANSCRIPT_RECORD_MARKER;
-  record3.set(deflated, 1);
-  return record3;
+  const record4 = new Uint8Array(deflated.length + 1);
+  record4[0] = COMPRESSED_TRANSCRIPT_RECORD_MARKER;
+  record4.set(deflated, 1);
+  return record4;
+};
+
+// ../contracts/src/claude-inbox.ts
+var CLAUDE_INBOX = {
+  protocol: 1,
+  connectTimeoutMs: 1e3,
+  receiptWindowMs: 15e3,
+  receiptPollMs: 200,
+  maxRecordBytes: 16384,
+  maxTranscriptReadBytes: 4194304,
+  maxMessageBytes: 65536,
+  journalVersion: 1,
+  journalDirectory: "run/native-input",
+  sender: "pushary",
+  carrier: "native"
+};
+var record3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var text2 = (value) => typeof value === "string" && value.length > 0;
+var sessionIdPattern = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var parseClaudeInboxSession = (value, platform = "darwin") => {
+  if (!record3(value) || !Number.isSafeInteger(value.pid) || typeof value.pid !== "number" || value.pid <= 0 || !text2(value.sessionId) || !sessionIdPattern.test(value.sessionId) || !text2(value.cwd) || !text2(value.procStart) || !text2(value.messagingSocketPath) || value.peerProtocol !== CLAUDE_INBOX.protocol || !text2(value.version) || !supportsClaudeInbox(value.version, platform))
+    return null;
+  return {
+    pid: value.pid,
+    sessionId: value.sessionId,
+    cwd: value.cwd,
+    procStart: value.procStart,
+    messagingSocketPath: value.messagingSocketPath,
+    peerProtocol: value.peerProtocol,
+    version: value.version,
+    ...typeof value.status === "string" ? { status: value.status } : {}
+  };
+};
+var claudeInboxAction = (progress) => {
+  if (progress.accepted) return "acknowledge" /* acknowledge */;
+  if (progress.expiresAtMs <= progress.nowMs) {
+    return progress.attempted ? "outcome_unknown" /* outcomeUnknown */ : "expire" /* expire */;
+  }
+  return progress.attempted ? "observe" /* observe */ : "submit" /* submit */;
+};
+var isClaudeInboxReceipt = (value, sessionId, commandId) => record3(value) && value.type === "user" && value.sessionId === sessionId && value.uuid === commandId && record3(value.origin) && value.origin.kind === "peer" && value.origin.msg_id === commandId;
+var CLAUDE_INBOX_MAX_SESSIONS = 128;
+var parseClaudeInboxCommand = (value) => {
+  if (!record3(value) || !text2(value.id) || !sessionIdPattern.test(value.id) || !text2(value.text) || typeof value.expiresAtMs !== "number" || !Number.isSafeInteger(value.expiresAtMs))
+    return null;
+  return { id: value.id, text: value.text, expiresAtMs: value.expiresAtMs };
+};
+var parseClaudeInboxPoll = (value) => {
+  if (!record3(value) || value.protocol !== CLAUDE_INBOX.protocol || !Array.isArray(value.sessionIds) || value.sessionIds.length > CLAUDE_INBOX_MAX_SESSIONS || !value.sessionIds.every((id) => nativeIdentifier(id)))
+    return null;
+  return value.sessionIds;
+};
+var parseClaudeInboxClaim = (value) => record3(value) && value.protocol === CLAUDE_INBOX.protocol ? parseClaudeInboxCommand(value.command) : null;
+var CLAUDE_INBOX_RECEIVER = {
+  pollMs: 3e3,
+  heartbeatMs: 6e4,
+  requestTimeoutMs: 1e4,
+  maxConcurrent: 4
+};
+var CLAUDE_INBOX_SETTLEMENTS = {
+  ["accepted" /* accepted */]: { state: "delivered" },
+  ["expired" /* expired */]: { state: "failed", failureCode: "expired" },
+  ["outcome_unknown" /* outcomeUnknown */]: {
+    state: "uncertain",
+    failureCode: "delivery_unconfirmed"
+  },
+  ["not_sent" /* notSent */]: null,
+  ["unconfirmed" /* unconfirmed */]: null
 };
 
 // ../contracts/src/index.ts
@@ -3170,11 +3468,11 @@ var TIMEOUT_ACTION_THAT_REFUSES = "deny";
 var timeoutActionWithoutLocalPrompt = ({ mode, timeoutAction }) => mode !== "push_only" && timeoutAction === "approve" ? TIMEOUT_ACTION_THAT_REFUSES : timeoutAction;
 var TIMEOUT_ACTIONS = ["approve", "deny", "escalate", "wait"];
 var isTimeoutAction = (value) => typeof value === "string" && TIMEOUT_ACTIONS.includes(value);
-var typedTextAsAnswers = (questions, text2) => {
+var typedTextAsAnswers = (questions, text3) => {
   const [only, ...others] = questions;
   if (!only || others.length > 0 || !isTypedAnswerQuestion(only)) return null;
-  if (text2.trim().length === 0 || isHandBackAnswer(text2)) return null;
-  return { [only.question]: text2 };
+  if (text3.trim().length === 0 || isHandBackAnswer(text3)) return null;
+  return { [only.question]: text3 };
 };
 var plainAskOf = (question) => isTypedAnswerQuestion(question) ? { type: "input" } : { type: "select", options: question.options.map((option) => option.label) };
 var isLoneTypedAnswerQuestion = (questions) => questions.length === 1 && questions.every(isTypedAnswerQuestion);
@@ -3239,7 +3537,7 @@ var HOOK_HOLD_BUDGET_FLAG = "--hold-budget";
 var HOOK_HOLD_BUDGET_ENV = "PUSHARY_HOLD_BUDGET_SECONDS";
 var HOOK_BRIDGE_SOURCE_FLAG = "--source";
 var HOOK_HOLD_BUDGET_SECONDS = /^[1-9]\d{0,5}$/;
-var hookHoldBudgetSeconds = (text2) => text2 !== void 0 && HOOK_HOLD_BUDGET_SECONDS.test(text2) ? Number(text2) : void 0;
+var hookHoldBudgetSeconds = (text3) => text3 !== void 0 && HOOK_HOLD_BUDGET_SECONDS.test(text3) ? Number(text3) : void 0;
 var hookHoldBudgetArgument = (seconds) => `${HOOK_HOLD_BUDGET_FLAG}=${seconds}`;
 var withHookHoldBudget = (command, holdBudgetSeconds) => holdBudgetSeconds === void 0 ? command : `${command} ${hookHoldBudgetArgument(holdBudgetSeconds)}`;
 var registeredHookHoldBudget = (args) => {
@@ -3348,8 +3646,8 @@ var tokenizeGlob = (glob) => {
   return tokens;
 };
 var SLASH = "/".charCodeAt(0);
-var matchGlobTokens = (tokens, text2) => {
-  const n = text2.length;
+var matchGlobTokens = (tokens, text3) => {
+  const n = text3.length;
   let reachable = new Uint8Array(n + 1);
   reachable[0] = 1;
   for (const token of tokens) {
@@ -3357,13 +3655,13 @@ var matchGlobTokens = (tokens, text2) => {
     if (token.kind === "literal") {
       const { value } = token;
       for (let p = 0; p <= n - value.length; p += 1) {
-        if (reachable[p] && text2.startsWith(value, p)) next[p + value.length] = 1;
+        if (reachable[p] && text3.startsWith(value, p)) next[p + value.length] = 1;
       }
     } else {
       const spansSeparators = token.kind === "globstar";
       let open = 0;
       for (let p = 0; p <= n; p += 1) {
-        if (!spansSeparators && p > 0 && text2.charCodeAt(p - 1) === SLASH) open = 0;
+        if (!spansSeparators && p > 0 && text3.charCodeAt(p - 1) === SLASH) open = 0;
         if (reachable[p]) open = 1;
         if (open) next[p] = 1;
       }
@@ -3727,7 +4025,7 @@ var argumentsMayExpand = (segment) => {
   const visible = shellVisibleText(segment);
   return visible === null || EXPANSION_THAT_CAN_BECOME_A_FLAG.test(visible.replace(SHELL_QUOTE_CHARACTERS, ""));
 };
-var blankedSafeRedirections = (text2) => text2.replace(SAFE_REDIRECTION, (redirection) => " ".repeat(redirection.length));
+var blankedSafeRedirections = (text3) => text3.replace(SAFE_REDIRECTION, (redirection) => " ".repeat(redirection.length));
 var segmentsSplitWhereVisible = (command, visible, separators) => {
   const segments = [];
   let start = 0;
@@ -3876,10 +4174,10 @@ var DESTRUCTIVE_WORDS_IN_ANY_CASE_BY_COMMAND = /* @__PURE__ */ new Map([
 ]);
 var namesDestructiveWordInAnyCase = (name, texts) => {
   const words = DESTRUCTIVE_WORDS_IN_ANY_CASE_BY_COMMAND.get(name);
-  return words !== void 0 && texts.some((text2) => words.has(text2.toLowerCase()));
+  return words !== void 0 && texts.some((text3) => words.has(text3.toLowerCase()));
 };
 var LONG_OPTION = /^--[A-Za-z]/;
-var namesDestructiveArgument = (text2, destructiveArguments) => destructiveArguments.has(text2) || LONG_OPTION.test(text2) && [...destructiveArguments].some((argument) => argument.startsWith(text2)) || [...SHORT_FLAG_CLUSTER.exec(text2)?.[1] ?? ""].some((letter) => destructiveArguments.has(`-${letter}`));
+var namesDestructiveArgument = (text3, destructiveArguments) => destructiveArguments.has(text3) || LONG_OPTION.test(text3) && [...destructiveArguments].some((argument) => argument.startsWith(text3)) || [...SHORT_FLAG_CLUSTER.exec(text3)?.[1] ?? ""].some((letter) => destructiveArguments.has(`-${letter}`));
 var RUNNER_SUBCOMMANDS = /* @__PURE__ */ new Set(["exec", "dlx"]);
 var SUBCOMMAND_CLIS = /* @__PURE__ */ new Set([
   "git",
@@ -4006,7 +4304,7 @@ var argumentsHideTheEffect = (name, args) => {
   const texts = args.map((arg) => arg.text);
   if (INLINE_CODE_INTERPRETERS.has(name.replace(/\d+(?:\.\d+)*$/, "")) && interpreterRunsUnreadableCode(texts)) return true;
   const destructiveArguments = destructiveArgumentsOf(name, args);
-  if (destructiveArguments && texts.some((text2) => namesDestructiveArgument(text2, destructiveArguments))) return true;
+  if (destructiveArguments && texts.some((text3) => namesDestructiveArgument(text3, destructiveArguments))) return true;
   if (namesDestructiveWordInAnyCase(name, texts)) return true;
   if (!SUBCOMMAND_CLIS.has(name)) return false;
   const meaningful = argsAfterHarmlessGlobalFlags(args);
@@ -4025,7 +4323,7 @@ var normalizedInvocation = (invocation) => invocationTextWith(invocation, (word)
 var SHELL_METACHARACTER = /[\s;&|<>()$`\\"'*?[\]#~{}!]/;
 var SINGLE_QUOTE2 = "'";
 var ESCAPED_SINGLE_QUOTE = `'\\''`;
-var asOneShellWord = (text2) => SHELL_METACHARACTER.test(text2) ? `${SINGLE_QUOTE2}${text2.replaceAll(SINGLE_QUOTE2, ESCAPED_SINGLE_QUOTE)}${SINGLE_QUOTE2}` : text2;
+var asOneShellWord = (text3) => SHELL_METACHARACTER.test(text3) ? `${SINGLE_QUOTE2}${text3.replaceAll(SINGLE_QUOTE2, ESCAPED_SINGLE_QUOTE)}${SINGLE_QUOTE2}` : text3;
 var quotedInvocation = (invocation) => invocationTextWith(invocation, (word) => asOneShellWord(word.text));
 var normalizedCommand = (command) => {
   const segments = readableCommandSegments(command);
@@ -4143,8 +4441,8 @@ var statementSelectsIntoATable = (statement) => {
   return select !== -1 && SQL_INTO_A_TABLE.test(statement.slice(select));
 };
 var selectsIntoATable = (sql) => sql.split(SQL_STATEMENT_SEPARATOR).some(statementSelectsIntoATable);
-var sqlTextWrites = (text2) => {
-  const statement = text2.replace(SQL_READ_PHRASE, "");
+var sqlTextWrites = (text3) => {
+  const statement = text3.replace(SQL_READ_PHRASE, "");
   return SQL_WRITE_STATEMENT.test(statement) || selectsIntoATable(statement) || SQL_CLIENT_FILE_COMMAND.test(statement);
 };
 var writesThroughSql = (sql, lexicon) => {
@@ -4160,7 +4458,7 @@ var SQL_CLIENT_FILE_COMMAND = new RegExp([
 var SHORT_FLAG_CLUSTER_ONLY = /^-([A-Za-z0-9]+)$/;
 var LEADING_OPTION_DASHES = /^-+/;
 var NO_SQL = { script: false, sql: null, hidden: false };
-var shortFlagOf = (flags, text2) => [...flags].find((flag) => /^-[A-Za-z]$/.test(flag) && text2.startsWith(flag) && text2.length > flag.length && !text2.startsWith("--"));
+var shortFlagOf = (flags, text3) => [...flags].find((flag) => /^-[A-Za-z]$/.test(flag) && text3.startsWith(flag) && text3.length > flag.length && !text3.startsWith("--"));
 var sqlArgumentAt = (args, index, syntax) => {
   const arg = args[index];
   if (arg === void 0) return NO_SQL;
@@ -4180,7 +4478,7 @@ var sqlArgumentAt = (args, index, syntax) => {
   if (cluster && cluster.length > 1 && syntax.inlineFlags.has(last)) return valueOf(next);
   return { script: false, sql: arg.text.replace(LEADING_OPTION_DASHES, ""), hidden: false };
 };
-var namesALongFlagValue = (text2, flags) => [...flags].some((flag) => flag.startsWith("--") && text2.startsWith(`${flag}${FLAG_VALUE_SEPARATOR}`));
+var namesALongFlagValue = (text3, flags) => [...flags].some((flag) => flag.startsWith("--") && text3.startsWith(`${flag}${FLAG_VALUE_SEPARATOR}`));
 var positionalSqlIsHidden = (args, syntax) => syntax.positionalSql && args.filter((arg) => !arg.text.startsWith("-")).slice(1).some((arg) => arg.expands);
 var sqlClientSyntaxOf = ({ program }) => program === void 0 ? void 0 : SQL_CLIENT_SYNTAX.get(basenameOf(program.text));
 var sqlClientChangesData = (invocation) => {
@@ -4554,7 +4852,7 @@ var gitDiscardsWork = ({ program, args }) => {
   const [subcommand, ...rest] = argsAfterHarmlessGlobalFlags(args);
   const discards = GIT_WORK_DISCARDERS.get(subcommand?.text ?? "");
   const texts = rest.map((arg) => arg.text);
-  return discards !== void 0 && discards(texts.filter((text2) => FLAG.test(text2)), texts.filter((text2) => !FLAG.test(text2)));
+  return discards !== void 0 && discards(texts.filter((text3) => FLAG.test(text3)), texts.filter((text3) => !FLAG.test(text3)));
 };
 var PACKAGE_MANAGERS = /* @__PURE__ */ new Set([
   "npm",
@@ -4702,25 +5000,25 @@ var WRAPPER_SYNTAX = /* @__PURE__ */ new Map([
 ]);
 var EVAL = "eval";
 var MAX_CONSEQUENCE_DEPTH = 4;
-var shortValueOptionPosition = (text2, options) => {
-  if (!text2.startsWith("-") || text2.startsWith("--")) return -1;
-  for (let index = 1; index < text2.length; index += 1) {
-    if (options.has(`-${text2[index]}`)) return index;
+var shortValueOptionPosition = (text3, options) => {
+  if (!text3.startsWith("-") || text3.startsWith("--")) return -1;
+  for (let index = 1; index < text3.length; index += 1) {
+    if (options.has(`-${text3[index]}`)) return index;
   }
   return -1;
 };
-var wrapperOptionConsumesNextWord = (text2, options) => {
-  if (options.has(text2)) return true;
-  const position = shortValueOptionPosition(text2, options);
-  return position !== -1 && position === text2.length - 1;
+var wrapperOptionConsumesNextWord = (text3, options) => {
+  if (options.has(text3)) return true;
+  const position = shortValueOptionPosition(text3, options);
+  return position !== -1 && position === text3.length - 1;
 };
 var commandStartAfterWrapper = (words, syntax) => {
   let index = 0;
   while (index < words.length) {
-    const text2 = words[index]?.text ?? "";
-    if (text2 === END_OF_OPTIONS3) return index + 1 + syntax.operandsBeforeTheCommand;
-    if (!SHELL_ENV_ASSIGNMENT.test(text2) && (!FLAG.test(text2) || text2 === STANDARD_INPUT_ARGUMENT)) break;
-    index += wrapperOptionConsumesNextWord(text2, syntax.optionsWithAValue) ? 2 : 1;
+    const text3 = words[index]?.text ?? "";
+    if (text3 === END_OF_OPTIONS3) return index + 1 + syntax.operandsBeforeTheCommand;
+    if (!SHELL_ENV_ASSIGNMENT.test(text3) && (!FLAG.test(text3) || text3 === STANDARD_INPUT_ARGUMENT)) break;
+    index += wrapperOptionConsumesNextWord(text3, syntax.optionsWithAValue) ? 2 : 1;
   }
   return index + syntax.operandsBeforeTheCommand;
 };
@@ -4822,16 +5120,16 @@ var pipesFetchedCodeIntoAnInterpreter = (command, invocations) => invocations.so
 var WORDS_THAT_OPEN_A_COMMAND = String.raw`if|then|elif|else|do|while|until|!`;
 var SHELL_GROUPING_PREFIX = new RegExp(String.raw`^\s*(?:(?:${WORDS_THAT_OPEN_A_COMMAND})\s+|[({]\s*)+`);
 var GROUP_OPENER_BY_CLOSER = /* @__PURE__ */ new Map([[")", "("], ["}", "{"]]);
-var occurrencesOf = (text2, character) => text2.split(character).length - 1;
-var closesAGroupItDidNotOpen = (text2) => {
-  const last = text2.at(-1) ?? "";
+var occurrencesOf = (text3, character) => text3.split(character).length - 1;
+var closesAGroupItDidNotOpen = (text3) => {
+  const last = text3.at(-1) ?? "";
   const opener = GROUP_OPENER_BY_CLOSER.get(last);
-  return opener !== void 0 && occurrencesOf(text2, last) > occurrencesOf(text2, opener);
+  return opener !== void 0 && occurrencesOf(text3, last) > occurrencesOf(text3, opener);
 };
 var withoutShellGrouping = (segment) => {
-  let text2 = segment.replace(SHELL_GROUPING_PREFIX, "").trimEnd();
-  while (closesAGroupItDidNotOpen(text2)) text2 = text2.slice(0, -1).trimEnd();
-  return text2;
+  let text3 = segment.replace(SHELL_GROUPING_PREFIX, "").trimEnd();
+  while (closesAGroupItDidNotOpen(text3)) text3 = text3.slice(0, -1).trimEnd();
+  return text3;
 };
 var HEREDOC_OPERATOR = /(?<!<)\d*<<(?!<)-?[ \t]*(?:'([A-Za-z_]\w*)'|"([A-Za-z_]\w*)"|\\?([A-Za-z_]\w*))/g;
 var HEREDOC_MARK = "\uE001";
@@ -4864,24 +5162,24 @@ var SEPARATORS_INSIDE_DOUBLE_QUOTES = /* @__PURE__ */ new Set(["$(", "`", ")"]);
 var PIPE3 = "|";
 var SUBSTITUTION_OPENERS = /* @__PURE__ */ new Set(["$(", "`"]);
 var QUOTE_CHARACTERS = /['"]/g;
-var roughPiecesOf = (text2) => {
+var roughPiecesOf = (text3) => {
   const pieces = [];
   let current = "";
   let before = "";
   let quote = null;
-  for (let index = 0; index < text2.length; index += 1) {
-    const char = text2.charAt(index);
+  for (let index = 0; index < text3.length; index += 1) {
+    const char = text3.charAt(index);
     if (quote === "'") {
       current += char;
       if (char === "'") quote = null;
       continue;
     }
     if (char === "\\") {
-      current += text2.slice(index, index + 2);
+      current += text3.slice(index, index + 2);
       index += 1;
       continue;
     }
-    const separator = ROUGH_SEPARATORS.find((candidate) => text2.startsWith(candidate, index) && (quote === null || SEPARATORS_INSIDE_DOUBLE_QUOTES.has(candidate)));
+    const separator = ROUGH_SEPARATORS.find((candidate) => text3.startsWith(candidate, index) && (quote === null || SEPARATORS_INSIDE_DOUBLE_QUOTES.has(candidate)));
     if (separator !== void 0) {
       pieces.push({ text: current, before });
       current = "";
@@ -4894,14 +5192,14 @@ var roughPiecesOf = (text2) => {
   }
   return [...pieces, { text: current, before }];
 };
-var invocationOfRoughPiece = (text2) => {
-  const piece = withoutShellGrouping(text2.replaceAll(REDIRECTED_INPUT_MARK, "").replaceAll(HEREDOC_MARK, ""));
+var invocationOfRoughPiece = (text3) => {
+  const piece = withoutShellGrouping(text3.replaceAll(REDIRECTED_INPUT_MARK, "").replaceAll(HEREDOC_MARK, ""));
   const parsed = invocationOf(piece);
   return parsed.program !== void 0 ? parsed : invocationOf(piece.replace(QUOTE_CHARACTERS, ""));
 };
 var roughSegmentsOf = (command) => {
-  const { text: text2, bodies } = withHeredocBodiesSetAside(commandForReading(command));
-  const pieces = roughPiecesOf(text2.replace(INPUT_REDIRECTION, ` ${REDIRECTED_INPUT_MARK} `).replace(OUTPUT_REDIRECTION, " "));
+  const { text: text3, bodies } = withHeredocBodiesSetAside(commandForReading(command));
+  const pieces = roughPiecesOf(text3.replace(INPUT_REDIRECTION, ` ${REDIRECTED_INPUT_MARK} `).replace(OUTPUT_REDIRECTION, " "));
   let heredocsSeen = 0;
   return pieces.map((piece, index) => {
     const heredocCount = occurrencesOf(piece.text, HEREDOC_MARK);
@@ -4938,7 +5236,7 @@ var commandHasAVisibleConsequenceAt = (toolName, command, depth) => {
 };
 var posixCommandOf = (words) => words.map(asOneShellWord).join(" ");
 var posixShellJudgeFor = (toolName) => ({
-  namesADestructiveAction: (text2) => classifyDecisionRisk(toolName, text2) === "destructive",
+  namesADestructiveAction: (text3) => classifyDecisionRisk(toolName, text3) === "destructive",
   invocationShowsAConsequence: (invocation) => invocationHasAVisibleConsequence(SHELL_TOOL, invocation, 0),
   commandShowsAConsequence: (words) => commandHasAVisibleConsequenceAt(SHELL_TOOL, posixCommandOf(words), 1),
   onlyReads: (words) => isSafeReadOnlyCommand(posixCommandOf(words)),
@@ -4981,9 +5279,9 @@ var GIT_GLOBAL_FLAGS = /* @__PURE__ */ new Set([
 var GIT_OPTION_AND_ITS_VALUE = 2;
 var GIT_OPTION_ALONE = 1;
 var NOT_A_GIT_GLOBAL_OPTION = 0;
-var gitGlobalOptionWidth = (text2) => {
-  if (GIT_GLOBAL_OPTIONS_WITH_A_VALUE.has(text2)) return GIT_OPTION_AND_ITS_VALUE;
-  const name = longOptionName(text2);
+var gitGlobalOptionWidth = (text3) => {
+  if (GIT_GLOBAL_OPTIONS_WITH_A_VALUE.has(text3)) return GIT_OPTION_AND_ITS_VALUE;
+  const name = longOptionName(text3);
   return GIT_GLOBAL_OPTIONS_WITH_A_VALUE.has(name) || GIT_GLOBAL_FLAGS.has(name) ? GIT_OPTION_ALONE : NOT_A_GIT_GLOBAL_OPTION;
 };
 var argsAfterGitGlobalOptions = (args) => {
@@ -5002,7 +5300,7 @@ var gitReadingsPastGlobalOptions = ({ program, args }) => {
 };
 var CURRENT_DIRECTORY_STEP = /\/\.(?=\/)/g;
 var LEADING_CURRENT_DIRECTORY = /^(?:\.\/+)+(?=[^/])/;
-var canonicalPathWord = (text2) => text2.replace(CURRENT_DIRECTORY_STEP, "").replace(LEADING_CURRENT_DIRECTORY, "");
+var canonicalPathWord = (text3) => text3.replace(CURRENT_DIRECTORY_STEP, "").replace(LEADING_CURRENT_DIRECTORY, "");
 var verbatimInvocationText = (invocation) => wordsOfInvocation(invocation).map((word) => asOneShellWord(word.text)).join(" ");
 var canonicalInvocationText = (invocation) => invocationTextWith(invocation, (word) => asOneShellWord(canonicalPathWord(word.text)));
 var spellingsOfAnInvocation = (invocation, innermost) => [invocation, innermost, ...gitReadingsPastGlobalOptions(innermost), ...readingsPastGlobalFlags(innermost)].flatMap((reading) => [verbatimInvocationText(reading), canonicalInvocationText(reading)]);
@@ -5041,8 +5339,8 @@ var runsASubstitutionAsAProgram = (command) => {
   return visible !== null && SUBSTITUTION_AS_A_PROGRAM.test(visible);
 };
 var parsedSpelledSegment = (segment) => {
-  const text2 = withoutShellGrouping(segment);
-  return { text: text2, invocation: invocationOf(text2), heredocs: [], feedsASubstitution: false };
+  const text3 = withoutShellGrouping(segment);
+  return { text: text3, invocation: invocationOf(text3), heredocs: [], feedsASubstitution: false };
 };
 var roughSpelledSegment = ({ invocation, heredocs, feedsASubstitution }) => ({ text: verbatimInvocationText(invocation), invocation, heredocs, feedsASubstitution });
 var segmentHidesWhatItRuns = (segment, innermost, scripts) => programIsHidden(innermost) || scripts.kind === "hidden" || segment.feedsASubstitution && passesAnInlineScript(innermost);
@@ -5094,7 +5392,7 @@ var parseMcpToolName = (toolName) => {
   return { server: rest.slice(0, split), tool: rest.slice(split + 2) };
 };
 var INVISIBLE_CHARACTERS = /[\u200B-\u200D\u2060\uFEFF]/g;
-var readableText = (text2) => text2.normalize("NFKC").replace(INVISIBLE_CHARACTERS, "");
+var readableText = (text3) => text3.normalize("NFKC").replace(INVISIBLE_CHARACTERS, "");
 var ACRONYM_BOUNDARY = /([A-Z]{1,63})([A-Z][a-z])/g;
 var CAMEL_CASE_BOUNDARY = /([a-z0-9])([A-Z])/g;
 var IDENTIFIER_WORD_SEPARATOR = /[^a-z0-9]+/;
@@ -5464,15 +5762,15 @@ var toolInputFieldNamed = (fieldName, parent) => {
     holdsGraphql: inherited.holdsGraphql || fieldWordsNameOnly(words, FIELD_WORDS_THAT_NAME_GRAPHQL, FIELD_WORDS_THAT_QUALIFY_A_QUERY)
   };
 };
-var readableToolInputText = (text2) => {
-  if (text2.length > LONGEST_TOOL_INPUT_TEXT_READ || COMBINING_MARK_RUN_LONGER_THAN_ANY_LANGUAGE_WRITES.test(text2)) {
+var readableToolInputText = (text3) => {
+  if (text3.length > LONGEST_TOOL_INPUT_TEXT_READ || COMBINING_MARK_RUN_LONGER_THAN_ANY_LANGUAGE_WRITES.test(text3)) {
     return UNREADABLE_TOOL_INPUT_TEXT;
   }
-  const readable = readableText(text2);
+  const readable = readableText(text3);
   return readable.length > LONGEST_TOOL_INPUT_TEXT_READ ? UNREADABLE_TOOL_INPUT_TEXT : { kind: "readable", text: readable };
 };
-var toolInputTextMatches = (field, text2, test) => {
-  const readable = readableToolInputText(text2);
+var toolInputTextMatches = (field, text3, test) => {
+  const readable = readableToolInputText(text3);
   return readable.kind === "unreadable" || test(field, readable.text);
 };
 var fieldNameTooLongToRead = (fieldName) => fieldName.length > LONGEST_TOOL_INPUT_FIELD_NAME_READ;
@@ -5506,9 +5804,9 @@ var WRITTEN_WEB_ADDRESSES = [
   /\blocalhost(?::\d|\/)/i
 ];
 var WHOLE_VALUE_HOST_THAT_CARRIES_DATA_IN_ITS_QUERY = /^[<"'(\[]?(?:[^@\s/]{1,64}@)?(?:[a-z0-9-]{1,63}\.)+[a-z]{2,63}(?::\d{1,5})?(?:\/[^\s?#]*)?\?[^\s#]\S*$/i;
-var textNamesAWebAddress = (field, text2) => {
-  const unbroken = text2.replace(LINE_BREAKS_A_URL_PARSER_DROPS, "");
-  return field.holdsAnAddress && text2.trim().length > 0 || WRITTEN_WEB_ADDRESSES.some((pattern) => pattern.test(unbroken)) || WHOLE_VALUE_HOST_THAT_CARRIES_DATA_IN_ITS_QUERY.test(unbroken.trim());
+var textNamesAWebAddress = (field, text3) => {
+  const unbroken = text3.replace(LINE_BREAKS_A_URL_PARSER_DROPS, "");
+  return field.holdsAnAddress && text3.trim().length > 0 || WRITTEN_WEB_ADDRESSES.some((pattern) => pattern.test(unbroken)) || WHOLE_VALUE_HOST_THAT_CARRIES_DATA_IN_ITS_QUERY.test(unbroken.trim());
 };
 var HTTP_METHODS_THAT_WRITE = /* @__PURE__ */ new Set([
   "POST",
@@ -5578,20 +5876,20 @@ var STATEMENTS_THAT_CHANGE = [
   String.raw`\bpg_(?:terminate|cancel)_backend\b`,
   String.raw`\bmutation\b(?:\s+[a-z_]\w{0,127})?\s*(?:\{|@[a-z_]|\(\s*\$)`
 ].map((source) => new RegExp(source, "i"));
-var fieldSetsAnHttpMethodThatWrites = (field, text2) => field.namesAnHttpMethod && HTTP_METHODS_THAT_WRITE.has(text2.trim().toUpperCase());
-var sqlTextWritesAsAClientReadsIt = (text2) => writesThroughSql(text2, UNVERIFIED_SQL_LEXICON);
-var fieldHoldsSqlThatWrites = (field, text2) => field.holdsSql && sqlTextWritesAsAClientReadsIt(text2);
-var fieldHoldsAGraphqlMutation = (field, text2) => field.holdsGraphql && GRAPHQL_MUTATION.test(text2);
+var fieldSetsAnHttpMethodThatWrites = (field, text3) => field.namesAnHttpMethod && HTTP_METHODS_THAT_WRITE.has(text3.trim().toUpperCase());
+var sqlTextWritesAsAClientReadsIt = (text3) => writesThroughSql(text3, UNVERIFIED_SQL_LEXICON);
+var fieldHoldsSqlThatWrites = (field, text3) => field.holdsSql && sqlTextWritesAsAClientReadsIt(text3);
+var fieldHoldsAGraphqlMutation = (field, text3) => field.holdsGraphql && GRAPHQL_MUTATION.test(text3);
 var COPY_OF_A_SUBQUERY = /\bcopy\s*\((?:\s*\()*\s*(?:select|with|values|table|insert|update|delete|merge)\b/i;
 var COPY_TO_A_PROGRAM_OR_A_FILE = /\)\s*to\s+(?:program\b|')/i;
-var copiesASubqueryOut = (text2) => {
-  const copy = text2.search(COPY_OF_A_SUBQUERY);
-  return copy !== -1 && COPY_TO_A_PROGRAM_OR_A_FILE.test(text2.slice(copy));
-};
-var carriesAStatementThatChanges = (text2) => STATEMENTS_THAT_CHANGE.some((pattern) => pattern.test(text2)) || copiesASubqueryOut(text2);
-var textCarriesAStatementThatChanges = (text2) => carriesAStatementThatChanges(text2) || carriesAStatementThatChanges(text2.replace(SQL_COMMENT, " "));
-var textAsksToChange = (field, text2) => fieldSetsAnHttpMethodThatWrites(field, text2) || fieldHoldsSqlThatWrites(field, text2) || fieldHoldsAGraphqlMutation(field, text2) || textCarriesAStatementThatChanges(text2);
-var textNeedsAPersonFor = (toolNamesADatabase) => (field, text2) => textNamesAWebAddress(field, text2) || textAsksToChange(field, text2) || toolNamesADatabase && sqlTextWritesAsAClientReadsIt(text2);
+var copiesASubqueryOut = (text3) => {
+  const copy = text3.search(COPY_OF_A_SUBQUERY);
+  return copy !== -1 && COPY_TO_A_PROGRAM_OR_A_FILE.test(text3.slice(copy));
+};
+var carriesAStatementThatChanges = (text3) => STATEMENTS_THAT_CHANGE.some((pattern) => pattern.test(text3)) || copiesASubqueryOut(text3);
+var textCarriesAStatementThatChanges = (text3) => carriesAStatementThatChanges(text3) || carriesAStatementThatChanges(text3.replace(SQL_COMMENT, " "));
+var textAsksToChange = (field, text3) => fieldSetsAnHttpMethodThatWrites(field, text3) || fieldHoldsSqlThatWrites(field, text3) || fieldHoldsAGraphqlMutation(field, text3) || textCarriesAStatementThatChanges(text3);
+var textNeedsAPersonFor = (toolNamesADatabase) => (field, text3) => textNamesAWebAddress(field, text3) || textAsksToChange(field, text3) || toolNamesADatabase && sqlTextWritesAsAClientReadsIt(text3);
 var mcpToolInputOnlyReads = (toolName, toolInput) => !toolInputTooLargeToRead(toolInput) && !anyToolInputText(toolInput, UNNAMED_TOOL_INPUT_FIELD, 0, textNeedsAPersonFor(mcpToolNamesADatabase(toolName)));
 var allowsSessionToolGrant = (toolName) => SESSION_TOOL_GRANT_TOOLS.has(toolName) || mcpToolOnlyReads(toolName);
 var isSessionToolGrant = (policy) => Boolean(policy.sessionId) && allowsSessionToolGrant(policy.tool) && isAutoApprove(policy);
@@ -5606,11 +5904,11 @@ var ASK_CONTEXT_MAX = 500;
 var ASK_AGENT_NAME_MAX = 100;
 var TRUNCATION_MARK = "\u2026";
 var isHighSurrogate = (code) => code >= 55296 && code <= 56319;
-var truncateLine = (text2, max, mark = TRUNCATION_MARK) => {
-  if (text2.length <= max) return text2;
+var truncateLine = (text3, max, mark = TRUNCATION_MARK) => {
+  if (text3.length <= max) return text3;
   const end = max - mark.length;
-  const keep = isHighSurrogate(text2.charCodeAt(end - 1)) ? end - 1 : end;
-  return `${text2.slice(0, keep)}${mark}`;
+  const keep = isHighSurrogate(text3.charCodeAt(end - 1)) ? end - 1 : end;
+  return `${text3.slice(0, keep)}${mark}`;
 };
 var APPROVAL_FATIGUE_FLAG_PATTERNS = [
   /\brm\s+-[a-z]*r/i,
@@ -5672,9 +5970,9 @@ var addAlnumTokens = (source, set) => {
     if (raw) set.add(raw);
   }
 };
-var tokenize = (text2) => {
+var tokenize = (text3) => {
   const set = /* @__PURE__ */ new Set();
-  for (const raw of text2.toLowerCase().split(/[^a-z0-9]+/)) {
+  for (const raw of text3.toLowerCase().split(/[^a-z0-9]+/)) {
     if (raw && !DELTA_STOPWORDS.has(raw)) set.add(raw);
   }
   return set;
@@ -5945,19 +6243,19 @@ var deriveTargetClass = (path) => {
 var bucketArgCount = (n) => n <= 0 ? "none" : n <= 3 ? "few" : "many";
 var bucketLength = (n) => n < 40 ? "short" : n < 200 ? "medium" : "long";
 var deriveArgShape = (isCommand, commandText, path) => {
-  const text2 = isCommand ? commandText : path;
-  const tokenCount = isCommand ? text2.trim().split(/\s+/).filter(Boolean).length : 0;
+  const text3 = isCommand ? commandText : path;
+  const tokenCount = isCommand ? text3.trim().split(/\s+/).filter(Boolean).length : 0;
   return {
-    hasPipe: isCommand && /(?<!\|)\|(?!\|)/.test(text2),
-    hasRedirect: isCommand && /(?<![0-9])[<>]/.test(text2),
-    hasChain: isCommand && /&&|\|\||;/.test(text2),
-    hasSudo: /\bsudo\b/i.test(text2),
-    hasGlob: isCommand && /[*?]/.test(text2),
-    hasSubshell: isCommand && /\$\(|`/.test(text2),
-    touchesSecretPath: SECRET_TARGET_PATTERNS.some((re) => re.test(text2)),
+    hasPipe: isCommand && /(?<!\|)\|(?!\|)/.test(text3),
+    hasRedirect: isCommand && /(?<![0-9])[<>]/.test(text3),
+    hasChain: isCommand && /&&|\|\||;/.test(text3),
+    hasSudo: /\bsudo\b/i.test(text3),
+    hasGlob: isCommand && /[*?]/.test(text3),
+    hasSubshell: isCommand && /\$\(|`/.test(text3),
+    touchesSecretPath: SECRET_TARGET_PATTERNS.some((re) => re.test(text3)),
     // The command word itself is not an argument, so subtract one.
     argCountBucket: bucketArgCount(isCommand ? Math.max(0, tokenCount - 1) : 0),
-    lengthBucket: bucketLength(text2.length)
+    lengthBucket: bucketLength(text3.length)
   };
 };
 var deriveReversibility = (capability, riskClass) => {
@@ -6287,8 +6585,8 @@ var isBlockedActionRequest = (request) => isBlockedActionEvent(request) && block
 var canonicalJsonText = (value) => {
   if (Array.isArray(value)) return `[${value.map(canonicalJsonText).join(",")}]`;
   if (value !== null && typeof value === "object") {
-    const record3 = value;
-    return `{${Object.keys(record3).filter((key) => record3[key] !== void 0).sort().map((key) => `${JSON.stringify(key)}:${canonicalJsonText(record3[key])}`).join(",")}}`;
+    const record4 = value;
+    return `{${Object.keys(record4).filter((key) => record4[key] !== void 0).sort().map((key) => `${JSON.stringify(key)}:${canonicalJsonText(record4[key])}`).join(",")}}`;
   }
   return JSON.stringify(value) ?? "null";
 };
@@ -6550,7 +6848,6 @@ var claudePreToolUseOutput = (decision, reason, updatedInput) => ({
     ...updatedInput ? { updatedInput } : {}
   }
 });
-var PENDING_COMMAND_PREFIX = "The user sent a new instruction from their phone via Pushary:";
 var pendingCommandEvents = (source) => {
   switch (source) {
     case "claude":
@@ -6588,6 +6885,7 @@ var compatiblePendingCommandEvents = (source) => {
   if (!profile || profile.wire !== "permission_decision") return [];
   return COMPATIBLE_PENDING_COMMAND_EVENTS.filter((event) => profile.events.includes(event));
 };
+var canCarryPendingCommand = (source, event) => pendingCommandEvents(source).includes(event);
 var claudePermissionRequestOutput = (decision, reason, updatedInput) => ({
   hookSpecificOutput: {
     hookEventName: "PermissionRequest",
@@ -6679,11 +6977,11 @@ var elicitationEnum = (property) => {
   return members.length === property.enum.length && members.length >= ELICITATION_MIN_OPTIONS ? members : null;
 };
 var readElicitationFields = (schema) => {
-  const record3 = elicitationRecord(schema);
-  const properties = elicitationRecord(record3?.properties);
-  if (!properties || record3?.type !== "object") return null;
-  if (Object.keys(record3).some((key) => !["type", "properties", "required", "$schema"].includes(key))) return null;
-  if (record3.required !== void 0 && (!Array.isArray(record3.required) || !record3.required.every((name) => typeof name === "string" && Object.hasOwn(properties, name)))) return null;
+  const record4 = elicitationRecord(schema);
+  const properties = elicitationRecord(record4?.properties);
+  if (!properties || record4?.type !== "object") return null;
+  if (Object.keys(record4).some((key) => !["type", "properties", "required", "$schema"].includes(key))) return null;
+  if (record4.required !== void 0 && (!Array.isArray(record4.required) || !record4.required.every((name) => typeof name === "string" && Object.hasOwn(properties, name)))) return null;
   const entries = Object.entries(properties);
   if (entries.length === 0) return null;
   const fields = [];
@@ -6807,6 +7105,24 @@ var hookActivationResult = (report) => {
 export {
   conversationText,
   extractMessageText,
+  NativeInputAgent,
+  NATIVE_INPUT,
+  qualifyHermesReceiptMode,
+  nativeRecord,
+  nativeIdentifier,
+  nativeInputAction,
+  isCodexQueuedReceipt,
+  isCodexInputReceipt,
+  parseHermesAdmission,
+  parseHermesReplayCursor,
+  hermesPendingAdmissionId,
+  hermesReplayAdmissionId,
+  COMMAND_RECOVERY,
+  isCommandAcknowledgementReceipt,
+  CLAUDE_WAKE,
+  claudeWakeDecision,
+  CLAUDE_WAKE_API,
+  claudeWakeWaitingOn,
   isRecord,
   AGENT_QUESTION_HEADER_MAX,
   AGENT_QUESTION_OPTION_MAX,
@@ -6863,6 +7179,9 @@ export {
   NO_CURSOR_GATE,
   toolsCoveredByGateEntry,
   cursorGateOwnsToolCall,
+  claudeTurnEndOutput,
+  PENDING_COMMAND_PREFIX,
+  pendingCommandInstruction,
   degradedLine,
   KEY_SCOPE,
   normalizeKeyScope,
@@ -6899,7 +7218,17 @@ export {
   CODEX_NATIVE_APPROVAL_REPLIES,
   parseCodexNativeApproval,
   codexNativeApprovalResponse,
+  transcriptRecordPlaintext,
   compressTranscriptRecord,
+  CLAUDE_INBOX,
+  parseClaudeInboxSession,
+  claudeInboxAction,
+  isClaudeInboxReceipt,
+  CLAUDE_INBOX_MAX_SESSIONS,
+  parseClaudeInboxPoll,
+  parseClaudeInboxClaim,
+  CLAUDE_INBOX_RECEIVER,
+  CLAUDE_INBOX_SETTLEMENTS,
   isApprovalMode,
   APPROVAL_MODE_META,
   approvalModeWithoutLocalPrompt,
@@ -6997,8 +7326,8 @@ export {
   claudePermissionDeniedOutput,
   codexStopRescueOutput,
   claudePreToolUseOutput,
-  PENDING_COMMAND_PREFIX,
   pendingCommandEvents,
+  canCarryPendingCommand,
   claudePermissionRequestOutput,
   gateOutputFor,
   renderElicitationOutput,