pushary 1.9.96 → 1.9.97

package/dist/{chunk-OS32P4RZ.js → chunk-WOFHN2IZ.js}

@@ -1942,6 +1942,8 @@ var POWERSHELL_FILE_WRITERS = /* @__PURE__ */ new Set([
   "start-bitstransfer"
 ]);
 var POWERSHELL_FETCHERS = /* @__PURE__ */ new Set(["invoke-webrequest", "invoke-restmethod", "start-bitstransfer"]);
+var POWERSHELL_WEB_REQUESTS = /* @__PURE__ */ new Set(["invoke-webrequest", "invoke-restmethod"]);
+var WEB_READ_METHODS = /* @__PURE__ */ new Set(["get", "head", "options"]);
 var DISK_ERASERS = /* @__PURE__ */ new Set(["format-volume", "clear-disk", "initialize-disk", "remove-partition", "format"]);
 var WINDOWS_SERVICE_CHANGERS = /* @__PURE__ */ new Set([
   "start-service",
@@ -2140,9 +2142,29 @@ var stageIsDestructive = (stage, judge) => {
   const command = powerShellCommandOf(stage);
   return DOTNET_RECURSIVE_DELETE.test(stage.source) || command !== null && (removesRecursively(command) || !onlyReads(command, judge) && judge.namesADestructiveAction(keywordTextOf(command)));
 };
+var LOOKS_LIKE_AN_ADDRESS = /^(?:[a-z][a-z\d+.-]*:\/\/|localhost\b|127\.|\[::1\])/i;
+var namesAWebRequestBody = (command) => command.args.some((arg) => {
+  const parameter = parameterOf(arg);
+  return namesTheParameter(parameter, "body", 1) || namesTheParameter(parameter, "infile", 2) || namesTheParameter(parameter, "form", 3);
+});
+var webRequestMethodOf = (command) => parameterValueOf(command, "method", 2) ?? parameterValueOf(command, "custommethod", 2);
+var SPLATTED_PARAMETERS = /^@\w+$/;
+var splatsItsParameters = (command) => command.args.some((arg) => !arg.quoted && SPLATTED_PARAMETERS.test(arg.text));
+var goesThroughAProxy = (command) => command.args.some((arg) => namesTheParameter(parameterOf(arg), "proxy", 5));
+var webRequestSendsData = (command) => {
+  const method = webRequestMethodOf(command);
+  if (splatsItsParameters(command)) return true;
+  return method === void 0 ? namesAWebRequestBody(command) : method.includes("$") || !WEB_READ_METHODS.has(method.toLowerCase());
+};
+var webRequestAddressesOf = (command) => {
+  if (splatsItsParameters(command) || goesThroughAProxy(command)) return [];
+  const uri = parameterValueOf(command, "uri", 2);
+  return uri === void 0 ? positionalTextsOf(command).filter((text3) => LOOKS_LIKE_AN_ADDRESS.test(text3)) : [uri];
+};
+var sendsAWebRequestThatNeedsAPerson = (command, judge) => POWERSHELL_WEB_REQUESTS.has(command.cmdlet) && judge.webRequestNeedsAPerson({ sendsData: webRequestSendsData(command), addresses: webRequestAddressesOf(command) });
 var stageHasAVisibleConsequence = (stage, judge) => {
   const command = powerShellCommandOf(stage);
-  return stage.redirectTargets.some((target) => namesAPathThatNeedsAPerson(target.text, judge)) || command !== null && !onlyReads(command, judge) && powerShellCommandChangesSomething(command, judge);
+  return stage.redirectTargets.some((target) => namesAPathThatNeedsAPerson(target.text, judge)) || command !== null && sendsAWebRequestThatNeedsAPerson(command, judge) || command !== null && !onlyReads(command, judge) && powerShellCommandChangesSomething(command, judge);
 };
 var fetchesWithPowerShell = (stage, judge) => {
   const command = powerShellCommandOf(stage);
@@ -4624,12 +4646,15 @@ var PUSHES_EVERY_TAG = /* @__PURE__ */ new Set(["--tags", "--follow-tags"]);
 var NAMES_A_TAG = /(?:^|:)\+?refs\/tags\/|^tag$|(?:^|:)v?\d+(?:\.\d+){1,3}$|(?:^|:)v?\d+\.\d+\.\d+[-+][\w.]+$|\/v\d+\.\d+\.\d+(?:\.\d+)?(?:[-+][\w.]+)?$|^v\$/;
 var TAG_HELD_IN_A_VARIABLE = /^v?\$\{?(?:\w+_)?(?:tag|version)(?:_name)?\}?$/i;
 var GIT_PUSH = "push";
+var NAMES_A_MAJOR_VERSION_TAG = /(?:^|:)v\d+$/;
+var SETS_THE_UPSTREAM_BRANCH = /* @__PURE__ */ new Set(["-u", "--set-upstream"]);
 var pushesATag = ({ program, args }) => {
   if (program === void 0 || basenameOf(program.text) !== GIT) return false;
   const [subcommand, ...rest] = argsAfterHarmlessGlobalFlags(args);
   if (subcommand?.text !== GIT_PUSH) return false;
   const operands = rest.filter((arg) => !FLAG.test(arg.text));
-  return rest.some((arg) => PUSHES_EVERY_TAG.has(arg.text)) || operands.slice(1).some((operand) => NAMES_A_TAG.test(operand.text) || TAG_HELD_IN_A_VARIABLE.test(operand.text));
+  const pushesABranch = rest.some((arg) => SETS_THE_UPSTREAM_BRANCH.has(arg.text));
+  return rest.some((arg) => PUSHES_EVERY_TAG.has(arg.text)) || operands.slice(1).some((operand) => NAMES_A_TAG.test(operand.text) || TAG_HELD_IN_A_VARIABLE.test(operand.text) || !pushesABranch && NAMES_A_MAJOR_VERSION_TAG.test(operand.text));
 };
 var SECRET_FILE_NAME = /^(?:\.env(?:\.(?!example$|sample$|template$)[\w.-]+)?|(?:secrets?|credentials)\.(?:json|ya?ml|env|toml|ini)|credentials)$/i;
 var CI_WORKFLOW_FILE = /(?:^|\/)\.github\/workflows\/[^/]+$/i;
@@ -4645,7 +4670,24 @@ var AGENT_SETTINGS_FILE = new RegExp(String.raw`(?:^|/)(?:${[
   String.raw`\.config/opencode/(?:opencode\.jsonc?|plugins?/.+)`,
   String.raw`\.pushary(?:/.+)?`,
   String.raw`\.git/hooks(?:/.+)?`,
-  String.raw`\.ssh(?:/(?!known_hosts(?:\.old)?$).+)?`
+  String.raw`\.git/config`,
+  String.raw`\.ssh(?:/(?!known_hosts(?:\.old)?$).+)?`,
+  String.raw`\.mcp\.json`,
+  String.raw`\.cursor/mcp\.json`,
+  String.raw`\.claude/hooks/.+`,
+  String.raw`pushary-(?:policy|mode)-[^/]*\.json`
+].join("|")})$`, "i");
+var HOME_DIRECTORY = String.raw`(?:~|\$HOME|\$\{HOME\}|(?:[A-Za-z]:)?/Users/[^/]+|/home/[^/]+|/root|/var/root)`;
+var FILE_THE_MACHINE_RUNS_LATER = new RegExp(String.raw`^(?:${[
+  String.raw`${HOME_DIRECTORY}/\.(?:zshrc|zshenv|zprofile|zlogin|zlogout|bashrc|bash_profile|bash_login|bash_logout|bash_aliases|profile)(?:\.[\w-]+)?`,
+  String.raw`${HOME_DIRECTORY}/\.gitconfig(?:[-._][\w.-]+)?`,
+  String.raw`${HOME_DIRECTORY}/\.p10k\.zsh`,
+  String.raw`${HOME_DIRECTORY}/\.(?:zsh|zshrc\.d|oh-my-zsh)/.+`,
+  String.raw`${HOME_DIRECTORY}/\.config/(?:fish/config\.fish|fish/conf\.d/.+|git/config|zsh/.+|systemd/user/.+)`,
+  String.raw`(?:.*/)?Library/Launch(?:Agents|Daemons)/[^/]+`,
+  String.raw`(?:.*/)?(?:Windows)?PowerShell/(?:Microsoft\.[\w.]+_)?profile\.ps1`,
+  String.raw`\$profile(?:\.\w+)?`,
+  String.raw`/(?:private/)?etc/.+`
 ].join("|")})$`, "i");
 var withoutDotSegments = (path) => {
   const kept = [];
@@ -4657,7 +4699,7 @@ var withoutDotSegments = (path) => {
 };
 var pathNeedsAPersonToChange = (path) => {
   const written = withoutDotSegments(normalizeSeparators(path));
-  return SECRET_FILE_NAME.test(basenameOf(written)) || CI_WORKFLOW_FILE.test(written) || AGENT_SETTINGS_FILE.test(written);
+  return SECRET_FILE_NAME.test(basenameOf(written)) || CI_WORKFLOW_FILE.test(written) || AGENT_SETTINGS_FILE.test(written) || FILE_THE_MACHINE_RUNS_LATER.test(written);
 };
 var REDIRECTS_INTO_A_SECRET_FILE = />>?\s*(?:[^\s;|&<>]*\/)?\.env(?:\.[\w-]+)?(?=$|[\s;|&)])/;
 var COPIES_ONTO_ITS_LAST_OPERAND = /* @__PURE__ */ new Set(["cp", "install", "ln", "rsync", "scp"]);
@@ -4718,7 +4760,8 @@ var FOLDER_THAT_NEEDS_A_PERSON = new RegExp(String.raw`(?:^|/)(?:${[
   String.raw`\.pushary`,
   String.raw`\.git/hooks`,
   String.raw`\.ssh`,
-  String.raw`\.config/opencode(?:/plugins?)?`
+  String.raw`\.config/opencode(?:/plugins?)?`,
+  String.raw`Library/Launch(?:Agents|Daemons)`
 ].join("|")})$`, "i");
 var folderNeedsAPersonToChange = (path) => FOLDER_THAT_NEEDS_A_PERSON.test(withoutDotSegments(normalizeSeparators(path)));
 var NETWORK_SENDERS = /* @__PURE__ */ new Set([
@@ -4775,6 +4818,41 @@ var changesWhereGitLooksForHooks = ({ program, args }) => {
   if (args[setting - 1]?.text === GIT_ONE_COMMAND_SETTING_FLAG) return true;
   return args.some((arg) => arg.text === GIT_CONFIG_SUBCOMMAND) && (args[setting + 1] !== void 0 || args.some((arg) => GIT_CONFIG_UNSET_FLAGS.has(arg.text)));
 };
+var GIT_SETTING_THAT_RUNS_A_PROGRAM = new RegExp(`^(?:${[
+  String.raw`core\.(?:fsmonitor|sshcommand|pager|editor|askpass|gitproxy|alternaterefscommand|hookspath)`,
+  String.raw`pager\..+`,
+  String.raw`sequence\.editor`,
+  String.raw`diff\.external`,
+  String.raw`diff\..+\.(?:textconv|command)`,
+  String.raw`merge\..+\.driver`,
+  String.raw`(?:diff|merge)tool\..+\.(?:cmd|path)`,
+  String.raw`interactive\.difffilter`,
+  String.raw`gpg\.ssh\.defaultkeycommand`,
+  String.raw`uploadpack\.packobjectshook`,
+  String.raw`credential\.(?:.+\.)?helper`,
+  String.raw`gpg(?:\.[\w-]+)?\.program`,
+  String.raw`filter\..+\.(?:clean|smudge|process)`,
+  String.raw`remote\..+\.(?:uploadpack|receivepack)`,
+  String.raw`protocol\.(?:.+\.)?allow`,
+  String.raw`include\.path`,
+  String.raw`includeif\..+\.path`
+].join("|")})$`, "i");
+var SWITCHES_A_SETTING_ON_OR_OFF = /^(?:true|false|yes|no|on|off|0|1|never|)$/i;
+var GIT_INCLUDE_SETTING = /^include(?:if\..+)?\.path$/i;
+var GIT_CREDENTIAL_HELPER_SETTING = /^credential\.(?:.+\.)?helper$/i;
+var NAMES_A_KNOWN_CREDENTIAL_HELPER = /^(?:osxkeychain|store|cache|manager|manager-core|libsecret|wincred|gnome-keyring)(?:\s+--[\w-]+(?:=[\w./~:@%+,-]+)?)*$/i;
+var namesNoNewProgram = (setting, value) => !value.expands && !GIT_INCLUDE_SETTING.test(setting) && (SWITCHES_A_SETTING_ON_OR_OFF.test(value.text) || GIT_CREDENTIAL_HELPER_SETTING.test(setting) && NAMES_A_KNOWN_CREDENTIAL_HELPER.test(value.text));
+var GIT_SETTING_THAT_RUNS_A_COMMAND_AFTER_A_BANG = /^(?:alias\..+|submodule\..+\.update)$/i;
+var RUNS_A_SHELL_COMMAND = /^!/;
+var setsAGitSettingThatRunsAProgram = ({ program, args }) => {
+  if (program === void 0 || basenameOf(program.text) !== GIT || !args.some((arg) => arg.text === GIT_CONFIG_SUBCOMMAND)) return false;
+  const operands = args.filter((arg) => !FLAG.test(arg.text));
+  const setting = operands.findIndex((arg) => GIT_SETTING_THAT_RUNS_A_PROGRAM.test(arg.text) || GIT_SETTING_THAT_RUNS_A_COMMAND_AFTER_A_BANG.test(arg.text));
+  const value = setting === -1 ? void 0 : operands[setting + 1];
+  const name = operands[setting]?.text ?? "";
+  if (value === void 0 || namesNoNewProgram(name, value)) return false;
+  return !GIT_SETTING_THAT_RUNS_A_COMMAND_AFTER_A_BANG.test(name) || value.expands || RUNS_A_SHELL_COMMAND.test(value.text);
+};
 var writesAFileThatNeedsAPerson = ({ program, args }) => {
   if (program === void 0) return false;
   if (sendsAFileThatNeedsAPerson({ program, args })) return true;
@@ -5018,6 +5096,7 @@ var GITHUB_COMMANDS_WITH_A_CONSEQUENCE = /* @__PURE__ */ new Map([
   ["secret", /* @__PURE__ */ new Set(["set"])],
   ["variable", /* @__PURE__ */ new Set(["set"])],
   [GITHUB_REPO_NOUN, /* @__PURE__ */ new Set(["archive", "rename"])],
+  ["workflow", /* @__PURE__ */ new Set(["run", "enable", "disable"])],
   ["ssh-key", /* @__PURE__ */ new Set(["add"])],
   ["gpg-key", /* @__PURE__ */ new Set(["add"])]
 ]);
@@ -5188,13 +5267,210 @@ var sshRemoteCommandOf = (args) => {
   }
   return args.slice(index + 1);
 };
+var PLAIN_REMOTE_COMMAND = /^[\w ./:=,@%+-]+$/;
+var REMOTE_STATUS_COMMAND = new RegExp(`^(?:${[
+  String.raw`(?:uptime|free|who|w|nproc|lscpu|lsblk|last|lsof|netstat)`,
+  String.raw`docker (?:compose )?(?:ps|images|logs|inspect|stats|top|version|info)`,
+  String.raw`systemctl (?:status|is-active|is-enabled|is-failed|list-units|list-timers|show|cat)`,
+  String.raw`journalctl`
+].join("|")})(?: |$)`);
+var JOURNAL_CHANGING_OPTIONS = [
+  "vacuum-size",
+  "vacuum-time",
+  "vacuum-files",
+  "rotate",
+  "flush",
+  "sync",
+  "relinquish-var",
+  "smart-relinquish-var",
+  "setup-keys",
+  "update-catalog",
+  "cursor-file"
+];
+var JOURNAL_READ_OPTIONS_SHARING_A_PREFIX = /* @__PURE__ */ new Set(["cursor"]);
+var LONG_OPTION_NAME = /^--([\w-]+)/;
+var namesAJournalChangingOption = (word) => {
+  const name = LONG_OPTION_NAME.exec(word)?.[1];
+  return name !== void 0 && !JOURNAL_READ_OPTIONS_SHARING_A_PREFIX.has(name) && JOURNAL_CHANGING_OPTIONS.some((option) => option.startsWith(name));
+};
+var onlyReadsTheRemoteStatus = (command) => PLAIN_REMOTE_COMMAND.test(command) && REMOTE_STATUS_COMMAND.test(command) && !command.split(" ").some(namesAJournalChangingOption);
 var sshRunsMoreThanAReadOnlyCommand = ({ program, args }) => {
   if (program === void 0 || basenameOf(program.text) !== SSH) return false;
   if (sshOptionRunsACommand(args)) return true;
   const command = sshRemoteCommandOf(args);
-  return command.length > 0 && (command.some((arg) => arg.expands) || !isSafeReadOnlyCommand(command.map((arg) => arg.text).join(" ")));
+  const remote = command.map((arg) => arg.text).join(" ");
+  return command.length > 0 && (command.some((arg) => arg.expands) || !isSafeReadOnlyCommand(remote) && !onlyReadsTheRemoteStatus(remote));
+};
+var REMOTE_COPY_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Map([
+  ["scp", /* @__PURE__ */ new Set(["-c", "-D", "-F", "-i", "-J", "-l", "-o", "-P", "-S", "-X"])],
+  ["rsync", /* @__PURE__ */ new Set([
+    "-e",
+    "--rsh",
+    "--rsync-path",
+    "--exclude",
+    "--include",
+    "--filter",
+    "-f",
+    "--exclude-from",
+    "--include-from",
+    "--files-from",
+    "--chmod",
+    "--chown",
+    "--log-file",
+    "--password-file",
+    "--port",
+    "--timeout",
+    "--contimeout",
+    "--bwlimit",
+    "--max-size",
+    "--min-size",
+    "--max-delete",
+    "--backup-dir",
+    "--link-dest",
+    "--compare-dest",
+    "--copy-dest",
+    "--partial-dir",
+    "--temp-dir",
+    "-T",
+    "--suffix",
+    "--out-format",
+    "--iconv",
+    "--usermap",
+    "--groupmap",
+    "-M",
+    "--remote-option",
+    "--info",
+    "--debug",
+    "--skip-compress",
+    "--compress-level",
+    "--block-size",
+    "-B",
+    "--modify-window",
+    "--sockopts",
+    "--outbuf",
+    "--copy-as",
+    "--stop-at",
+    "--stop-after",
+    "--time-limit",
+    "--checksum-seed",
+    "--max-alloc",
+    "--early-input",
+    "--address",
+    "--write-batch",
+    "--read-batch",
+    "--only-write-batch"
+  ])]
+]);
+var SSHPASS = "sshpass";
+var SSHPASS_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set(["-p", "-f", "-d", "-P"]);
+var NAMES_ANOTHER_MACHINE = /^(?:(?:rsync|scp|sftp):\/\/|(?:[^\s/:@]+@)?[^\s/:@]+:)/i;
+var SHORT_OPTION_CLUSTER2 = /^-[A-Za-z]+$/;
+var clusterEndsWithAnOptionThatTakesAValue = (text3, withAValue) => {
+  const letters = text3.slice(1);
+  const firstWithAValue = [...letters].findIndex((letter) => withAValue.has(`-${letter}`));
+  return firstWithAValue === letters.length - 1;
+};
+var optionTakesTheNextWord = (text3, withAValue) => withAValue.has(text3) || SHORT_OPTION_CLUSTER2.test(text3) && clusterEndsWithAnOptionThatTakesAValue(text3, withAValue);
+var operandsAfterOptions = (args, withAValue) => {
+  const operands = [];
+  for (let index = 0; index < args.length; index += 1) {
+    const text3 = args[index]?.text ?? "";
+    if (text3 === END_OF_OPTIONS3) return [...operands, ...args.slice(index + 1)];
+    if (!FLAG.test(text3)) operands.push(args[index]);
+    else if (optionTakesTheNextWord(text3, withAValue)) index += 1;
+  }
+  return operands;
+};
+var optionWordsOf = (args, withAValue) => {
+  const options = [];
+  for (let index = 0; index < args.length; index += 1) {
+    const text3 = args[index]?.text ?? "";
+    if (text3 === END_OF_OPTIONS3) break;
+    if (!FLAG.test(text3)) continue;
+    options.push(text3);
+    if (optionTakesTheNextWord(text3, withAValue)) index += 1;
+  }
+  return options;
+};
+var withoutSshpass = (invocation) => {
+  if (invocation.program === void 0 || basenameOf(invocation.program.text) !== SSHPASS) return invocation;
+  const [program, ...args] = operandsAfterOptions(invocation.args, SSHPASS_OPTIONS_WITH_A_VALUE);
+  const start = program === void 0 ? -1 : invocation.args.indexOf(program);
+  return { program, args: start === -1 ? [] : invocation.args.slice(start + 1) };
+};
+var RSYNC = "rsync";
+var RSYNC_DRY_RUN = "--dry-run";
+var RSYNC_DRY_RUN_LETTER = "n";
+var RSYNC_REMOTE_SHELL_LETTER = "e";
+var RSYNC_NAMES_A_PROGRAM = /^--(?:rsh|rsync-path)(?:=|$)/;
+var clusterTurnsOn = (text3, letter, withAValue) => {
+  if (!SHORT_OPTION_CLUSTER2.test(text3)) return false;
+  for (const each of text3.slice(1)) {
+    if (each === letter) return true;
+    if (withAValue.has(`-${each}`)) return false;
+  }
+  return false;
+};
+var rsyncOnlyPreviews = (args, withAValue) => {
+  const options = optionWordsOf(args, withAValue);
+  return options.some((text3) => text3 === RSYNC_DRY_RUN || clusterTurnsOn(text3, RSYNC_DRY_RUN_LETTER, withAValue)) && !options.some((text3) => RSYNC_NAMES_A_PROGRAM.test(text3) || clusterTurnsOn(text3, RSYNC_REMOTE_SHELL_LETTER, withAValue));
+};
+var copiesOntoAnotherMachine = (invocation) => {
+  const { program, args } = withoutSshpass(invocation);
+  const name = program === void 0 ? void 0 : basenameOf(program.text);
+  const withAValue = name === void 0 ? void 0 : REMOTE_COPY_OPTIONS_WITH_A_VALUE.get(name);
+  if (withAValue === void 0 || name === RSYNC && rsyncOnlyPreviews(args, withAValue)) return false;
+  const operands = operandsAfterOptions(args, withAValue);
+  const destination = operands.at(-1);
+  return operands.length > 1 && destination !== void 0 && NAMES_ANOTHER_MACHINE.test(destination.text);
+};
+var HOSTED_SECRET_WRITES = /* @__PURE__ */ new Map([
+  ["doppler", /(?:^| )secrets (?:set|delete|upload)(?: |$)/],
+  ["vercel", /(?:^| )env (?:add|rm|remove|update)(?: |$)/],
+  ["fly", /(?:^| )secrets (?:set|unset|import|deploy)(?: |$)/],
+  ["flyctl", /(?:^| )secrets (?:set|unset|import|deploy)(?: |$)/],
+  ["heroku", /(?:^| )config:(?:set|unset|add|remove)(?: |$)/],
+  ["netlify", /(?:^| )env:(?:set|unset|import|clone)(?: |$)/],
+  ["railway", /(?:^| )variables? (?:set|delete)(?: |$)/],
+  ["supabase", /(?:^| )secrets (?:set|unset)(?: |$)/],
+  ["wrangler", /(?:^| )secret (?:put|delete|bulk)(?: |$)/],
+  ["firebase", /(?:^| )functions:secrets:(?:set|destroy|prune)(?: |$)/],
+  ["gcloud", /(?:^| )secrets (?:create|delete|update|versions (?:add|destroy|disable|enable))(?: |$)/],
+  ["az", /(?:^| )keyvault secret (?:set|set-attributes|delete|purge|recover|restore)(?: |$)/]
+]);
+var RAILWAY_CLI = "railway";
+var RAILWAY_VARIABLES = /(?:^| )variables?(?: |$)/;
+var RAILWAY_SET_FLAG = /^(?:--set(?:=|$)|-s$)/;
+var PACKAGE_RUNNERS = /* @__PURE__ */ new Set(["npx", "bunx", "pnpx", "pnpm", "yarn", "npm", "bun"]);
+var CLI_OF_A_PACKAGE = /* @__PURE__ */ new Map([
+  ["netlify-cli", "netlify"],
+  ["firebase-tools", "firebase"],
+  ["@railway/cli", "railway"],
+  ["@doppler/cli", "doppler"]
+]);
+var PACKAGE_VERSION = /(?<=.)@[^/@]*$/;
+var cliNameOf = (program) => {
+  const unversioned = program.text.replace(PACKAGE_VERSION, "");
+  return CLI_OF_A_PACKAGE.get(unversioned) ?? basenameOf(unversioned);
+};
+var namesAHostingCli = (word) => {
+  const name = cliNameOf(word);
+  return HOSTED_SECRET_WRITES.has(name) || name === RAILWAY_CLI;
+};
+var withoutAPackageRunner = (invocation) => {
+  const { program, args } = invocation;
+  if (program === void 0 || !PACKAGE_RUNNERS.has(basenameOf(program.text))) return invocation;
+  const start = args.findIndex((arg) => !FLAG.test(arg.text) && namesAHostingCli(arg));
+  return start === -1 ? invocation : { program: args[start], args: args.slice(start + 1) };
+};
+var writesAHostedSecret = (invocation) => {
+  const { program, args } = withoutAPackageRunner(invocation);
+  if (program === void 0) return false;
+  const name = cliNameOf(program);
+  const words = args.filter((arg) => !FLAG.test(arg.text)).map((arg) => arg.text.toLowerCase()).join(" ");
+  return (HOSTED_SECRET_WRITES.get(name)?.test(words) ?? false) || name === RAILWAY_CLI && RAILWAY_VARIABLES.test(words) && args.some((arg) => RAILWAY_SET_FLAG.test(arg.text));
 };
-var changesSomethingHostedElsewhere = (invocation) => githubCommandHasAConsequence(invocation) || writesThroughAServiceApi(invocation) || sendsDataOffThisMachine(invocation) || kubectlExecRunsMoreThanAReadOnlyCommand(invocation) || sshRunsMoreThanAReadOnlyCommand(invocation);
+var changesSomethingHostedElsewhere = (invocation) => githubCommandHasAConsequence(invocation) || writesThroughAServiceApi(invocation) || writesAHostedSecret(invocation) || sendsDataOffThisMachine(invocation) || copiesOntoAnotherMachine(invocation) || kubectlExecRunsMoreThanAReadOnlyCommand(invocation) || sshRunsMoreThanAReadOnlyCommand(invocation);
 var segmentWritesThroughARemoteApi = (segment, depth) => {
   const innermost = innermostInvocation(segment.invocation);
   return invocationWritesThroughARemoteApi(innermost) || commandsNestedIn(innermost, inlineScriptsOf(innermost, segment.heredocs)).some((nested) => commandWritesThroughARemoteApiAt(nested, depth + 1));
@@ -5494,7 +5770,7 @@ var honoursPreviewFlags = ({ program, args }) => {
 var onlyPreviews = (invocation) => invocation.program !== void 0 && honoursPreviewFlags(invocation) && invocation.args.some((arg) => !arg.expands && PREVIEW_FLAG.test(arg.text));
 var changesWhatIsDeployed = (toolName, invocation, normalized) => !onlyPreviews(invocation) && (changesProduction(invocation) || mergesAPullRequest(invocation) || isCoveredByPolicy(DEPLOY_AND_SCHEMA_COMMAND_PATTERNS, toolName, normalized));
 var releasesOrChangesACluster = (toolName, invocation, normalized) => !onlyPreviews(invocation) && (pushesATag(invocation) || publishesAnAppBuild(invocation) || RELEASE_AND_CLUSTER_PROGRAMS.has(basenameOf(invocation.program?.text ?? "")) && isCoveredByPolicy(RELEASE_AND_CLUSTER_COMMAND_PATTERNS, toolName, normalized));
-var invocationHasAConsequenceOnlyPermissionsOffAsksAbout = (toolName, invocation, normalized) => releasesOrChangesACluster(toolName, invocation, normalized) || mergesAPullRequestByAnyPath(invocation) || writesAFileThatNeedsAPerson(invocation) || changesWhereGitLooksForHooks(invocation) || changesSomethingHostedElsewhere(invocation);
+var invocationHasAConsequenceOnlyPermissionsOffAsksAbout = (toolName, invocation, normalized) => releasesOrChangesACluster(toolName, invocation, normalized) || mergesAPullRequestByAnyPath(invocation) || writesAFileThatNeedsAPerson(invocation) || changesWhereGitLooksForHooks(invocation) || setsAGitSettingThatRunsAProgram(invocation) || changesSomethingHostedElsewhere(invocation);
 var invocationHasAVisibleConsequence = (toolName, invocation, depth, line) => {
   if (depth > MAX_CONSEQUENCE_DEPTH) return true;
   if (invocation.program === void 0) return false;
@@ -5776,6 +6052,8 @@ var redirectsIntoAFileThatNeedsAPerson = (command) => {
   });
 };
 var posixCommandOf = (words) => words.map(asOneShellWord).join(" ");
+var webRequestSendsDataOffThisMachine = ({ sendsData, addresses }) => sendsData && !(addresses.length > 0 && addresses.every((address) => THIS_MACHINE_ADDRESS.test(address)));
+var noWebRequestNeedsAPerson = () => false;
 var namesASecretPowerShellPath = (path) => SECRET_FILE_NAME.test(fileNameOf(path));
 var posixShellJudgeFor = (toolName, line = "standing_allow") => ({
   namesADestructiveAction: (text3) => classifyDecisionRisk(toolName, text3) === "destructive",
@@ -5785,7 +6063,8 @@ var posixShellJudgeFor = (toolName, line = "standing_allow") => ({
   fetches,
   runsWhatItReads,
   runsScripts,
-  namesAFileThatNeedsAPerson: line === "permissions_off" ? pathNeedsAPersonToChange : namesASecretPowerShellPath
+  namesAFileThatNeedsAPerson: line === "permissions_off" ? pathNeedsAPersonToChange : namesASecretPowerShellPath,
+  webRequestNeedsAPerson: line === "permissions_off" ? webRequestSendsDataOffThisMachine : noWebRequestNeedsAPerson
 });
 var commandIsDestructive = (toolName, command) => shellDialectOf(toolName) === "powershell" ? powerShellCommandIsDestructive(command, posixShellJudgeFor(toolName)) : readingsThatCanAct(command).some((reading) => classifyDecisionRisk(toolNameForAPosixReading(toolName), reading) === "destructive");
 var commandHasAConsequenceOnTheLine = (toolName, command, line) => shellDialectOf(toolName) === "powershell" ? powerShellCommandHasAVisibleConsequence(command, posixShellJudgeFor(toolName, line)) : commandHasAVisibleConsequenceAt(toolNameForAPosixReading(toolName), command, 0, line);
@@ -7179,6 +7458,7 @@ var bypassModeCoversEveryInput = (input) => input.deletesFiles !== true && input
 var bypassModeApplies = (input) => isBypassPermissionMode(input.permissionMode) && !isModeStateDegraded(input.modeState) && noModeOverrideIsActive(input) && input.toolInputs.length > 0;
 var bypassModeAllows = (input) => bypassModeApplies(input) && (bypassStopsOf(input.config) === "nothing" ? !aChosenRuleGovernsInEitherRepository(input, ruleAsksOrRefuses) : bypassModeCoversEveryInput(input));
 var PERMISSIONS_OFF_ASK_REASON = "Permissions are off in your agent, so Pushary only stops for risky steps like this one. You can change this in Settings on pushary.com.";
+var permissionsOffLineAppliesTo = (agentType) => agentType === CLAUDE_CODE_AGENT_TYPE;
 var permissionsOffAskReason = (input, verdict) => verdict.kind === "gate" && !verdict.scopeReason && !isAskedInEveryMode(input.toolName) && bypassModeApplies(input) && bypassStopsOf(input.config) === "consequences" && !aChosenRuleGovernsInEitherRepository(input) ? PERMISSIONS_OFF_ASK_REASON : void 0;
 var resolveGate = (input) => {
   const { modeState, config, toolName, toolInputs, cwd, sessionId } = input;
@@ -7536,6 +7816,7 @@ var PLAN_DECLINED_REASON = "Plan declined from the phone. Ask what to change bef
 var claudeStoppedPreToolUseOutput = (reason) => stoppedOutput(claudePreToolUseOutput("deny", reason), reason);
 var claudeStoppedPermissionRequestOutput = (reason) => stoppedOutput(claudePermissionRequestOutput("deny", reason), reason);
 var UNANSWERED_ASKS_BEFORE_PAUSE = 3;
+var CLAUDE_CODE_AGENT_TYPE = "claude_code";
 var SESSION_PAUSED_REASON = `Phone approvals for this session are paused because ${UNANSWERED_ASKS_BEFORE_PAUSE} of them went unanswered, so this was refused without asking anyone. A notification was sent to your phone: tap Approve on it to resume, then run this again.`;
 var unansweredRefusalReason = (paused) => paused ? SESSION_PAUSED_REASON : NO_RESPONSE_REASON;
 var UNHEARD_PUSH_WINDOW_DAYS = 14;
@@ -7883,6 +8164,7 @@ export {
   PRETOOLUSE_HANDLED_TOOLS,
   isPermissionRequestOwnedByPreToolUse,
   CLAUDE_PRETOOLUSE_MATCHER,
+  permissionsOffLineAppliesTo,
   permissionsOffAskReason,
   resolveGate,
   editGoesToTheAgentsPrompt,

package/dist/{chunk-JCYXG6LQ.js → chunk-X22LLKBY.js}

@@ -1,12 +1,12 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-LGJPT33C.js";
+} from "./chunk-SXX47FHL.js";
 import {
   retryAgentCommand
-} from "./chunk-IVYKPYMH.js";
+} from "./chunk-TZE2S3XP.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-6YG5PZZS.js";
+} from "./chunk-CMDIKFVL.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-CRJDKGEF.js → chunk-Z6O6CDTP.js}

@@ -6,18 +6,18 @@ import {
   McpToolError,
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-V7EWOHNV.js";
+} from "./chunk-E5WUBHVH.js";
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-B75SIY5C.js";
+} from "./chunk-6RGQIKAC.js";
 import {
   clientReportClaims
-} from "./chunk-YCYFREHD.js";
+} from "./chunk-KNVTKFDP.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-TXDFQD2I.js";
+} from "./chunk-RZD7ULBJ.js";
 import {
   ASK_AGENT_NAME_MAX,
   CLIENT_REPORT_PATH,
@@ -26,7 +26,7 @@ import {
   TOOL_FAILURE_CODES,
   degradedLine,
   truncateLine
-} from "./chunk-OS32P4RZ.js";
+} from "./chunk-WOFHN2IZ.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-XLM2JZBE.js → chunk-ZDIQPYM2.js}

@@ -24,7 +24,7 @@ import {
   reportableSessionId,
   toToolLookup,
   truncateLine
-} from "./chunk-OS32P4RZ.js";
+} from "./chunk-WOFHN2IZ.js";
 
 // ../hook-mapping/src/commit-receipt.ts
 var COMMIT_OUTPUT_MAX_LENGTH = 65536;

package/dist/{chunk-N2KK2NSY.js → chunk-ZFUSWR2P.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-YCYFREHD.js";
+} from "./chunk-KNVTKFDP.js";
 import {
   writeFileAtomic
-} from "./chunk-77HBRZJI.js";
+} from "./chunk-6CDA4R5L.js";
 
 // src/identity.ts
 import { randomUUID } from "crypto";

package/dist/{codex-app-cards-switch-7YTDIMCX.js → codex-app-cards-switch-DFZK6GPW.js}

@@ -22,22 +22,22 @@ import {
   turnCodexAppCardsOff,
   turnCodexAppCardsOn,
   whyLaunchctlFailed
-} from "./chunk-AEOYYLXF.js";
-import "./chunk-VTFXPV4U.js";
+} from "./chunk-2ZAFA3XI.js";
+import "./chunk-TKOL7DJH.js";
 import "./chunk-XCEN33UP.js";
 import "./chunk-QCGNGEGE.js";
-import "./chunk-TZWK2BVY.js";
+import "./chunk-APFQBVQW.js";
 import "./chunk-XHKBHWLX.js";
-import "./chunk-TVGOSEWS.js";
+import "./chunk-HD7AURL6.js";
 import "./chunk-E46NE7FB.js";
-import "./chunk-N2KK2NSY.js";
-import "./chunk-C4IKRLT4.js";
-import "./chunk-YCYFREHD.js";
-import "./chunk-77HBRZJI.js";
-import "./chunk-TXDFQD2I.js";
-import "./chunk-6YG5PZZS.js";
+import "./chunk-ZFUSWR2P.js";
+import "./chunk-GEA6ZV2P.js";
+import "./chunk-KNVTKFDP.js";
+import "./chunk-6CDA4R5L.js";
+import "./chunk-RZD7ULBJ.js";
+import "./chunk-CMDIKFVL.js";
 import "./chunk-ZVU6WMMU.js";
-import "./chunk-OS32P4RZ.js";
+import "./chunk-WOFHN2IZ.js";
 import "./chunk-MLKGABMK.js";
 export {
   CODEX_APP_CARDS_DIRECTORY,

package/dist/{codex-desktop-launch-CICLFWQX.js → codex-desktop-launch-7QGN7SL7.js}

@@ -11,7 +11,7 @@ import {
   installedCodexApp,
   shellQuoted,
   writeDesktopProxy
-} from "./chunk-VTFXPV4U.js";
+} from "./chunk-TKOL7DJH.js";
 import "./chunk-XCEN33UP.js";
 import {
   CODEX_APP_LAUNCH_VARIABLE

package/dist/{codex-session-launch-KW7VUPAH.js → codex-session-launch-OWMNCYAH.js}

@@ -11,35 +11,35 @@ import {
   isCodexQuestionLeftWithTheLocalClient,
   planCodexElicitation,
   reportOwnedQuestion
-} from "./chunk-YGMSDYOH.js";
-import "./chunk-NGSJHUQN.js";
-import "./chunk-KHGW7THQ.js";
-import "./chunk-UFWRBHTV.js";
+} from "./chunk-KZTN6OXM.js";
+import "./chunk-5OLBO5EB.js";
+import "./chunk-LKDAMWTZ.js";
+import "./chunk-QCEY7TSX.js";
 import "./chunk-N5P2FLOJ.js";
-import "./chunk-SI2CJ2BB.js";
-import "./chunk-J3W32P43.js";
-import "./chunk-PDRPVVZX.js";
+import "./chunk-VHOGSWUF.js";
+import "./chunk-NI3NSURQ.js";
+import "./chunk-UAUADSJX.js";
 import "./chunk-XMSDA5WA.js";
 import "./chunk-XHKBHWLX.js";
-import "./chunk-KG7GT7UW.js";
+import "./chunk-CB2RYMAO.js";
 import {
   writeDegraded
-} from "./chunk-CRJDKGEF.js";
+} from "./chunk-Z6O6CDTP.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-V7EWOHNV.js";
-import "./chunk-CTKJVVDL.js";
-import "./chunk-B75SIY5C.js";
-import "./chunk-N2KK2NSY.js";
-import "./chunk-YCYFREHD.js";
-import "./chunk-77HBRZJI.js";
-import "./chunk-TXDFQD2I.js";
+import "./chunk-E5WUBHVH.js";
+import "./chunk-OW4WEO56.js";
+import "./chunk-6RGQIKAC.js";
+import "./chunk-ZFUSWR2P.js";
+import "./chunk-KNVTKFDP.js";
+import "./chunk-6CDA4R5L.js";
+import "./chunk-RZD7ULBJ.js";
 import "./chunk-PPY5N2E6.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-6YG5PZZS.js";
+import "./chunk-CMDIKFVL.js";
 import "./chunk-ZVU6WMMU.js";
 import {
   canonicalJsonText
-} from "./chunk-OS32P4RZ.js";
+} from "./chunk-WOFHN2IZ.js";
 import "./chunk-MLKGABMK.js";
 
 // src/codex-session-launch.ts

package/dist/{config-632JSNBM.js → config-ITPE5M6M.js}

@@ -3,9 +3,9 @@ import {
   getApiKey,
   getBaseUrl,
   resetKeyDriftWarning
-} from "./chunk-TXDFQD2I.js";
-import "./chunk-6YG5PZZS.js";
-import "./chunk-OS32P4RZ.js";
+} from "./chunk-RZD7ULBJ.js";
+import "./chunk-CMDIKFVL.js";
+import "./chunk-WOFHN2IZ.js";
 import "./chunk-MLKGABMK.js";
 export {
   configFilePath,

package/dist/{global-upgrade-BMCLOI2P.js → global-upgrade-PYEFLMJA.js}

@@ -7,19 +7,19 @@ import {
   recordUnfinishedUpgrade,
   upgradeInstalledPackage,
   withUpgradeLock
-} from "./chunk-R2RCFCFW.js";
-import "./chunk-CQ3YV6QI.js";
-import "./chunk-KHGW7THQ.js";
-import "./chunk-UFWRBHTV.js";
-import "./chunk-J3W32P43.js";
-import "./chunk-6JZNZTGZ.js";
+} from "./chunk-AUZITE2H.js";
+import "./chunk-TSSV3NBD.js";
+import "./chunk-LKDAMWTZ.js";
+import "./chunk-QCEY7TSX.js";
+import "./chunk-NI3NSURQ.js";
+import "./chunk-IED5CTYP.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-YCYFREHD.js";
-import "./chunk-77HBRZJI.js";
+import "./chunk-KNVTKFDP.js";
+import "./chunk-6CDA4R5L.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-6YG5PZZS.js";
+import "./chunk-CMDIKFVL.js";
 import "./chunk-ZVU6WMMU.js";
-import "./chunk-OS32P4RZ.js";
+import "./chunk-WOFHN2IZ.js";
 import "./chunk-MLKGABMK.js";
 export {
   finishGlobalUpgrade,

package/dist/{identity-UCVTGQHM.js → identity-WTYTOLG3.js}

@@ -2,11 +2,11 @@ import {
   getMachineId,
   getOrCreateMachineId,
   readExistingMachineId
-} from "./chunk-N2KK2NSY.js";
-import "./chunk-YCYFREHD.js";
-import "./chunk-77HBRZJI.js";
+} from "./chunk-ZFUSWR2P.js";
+import "./chunk-KNVTKFDP.js";
+import "./chunk-6CDA4R5L.js";
 import "./chunk-ZVU6WMMU.js";
-import "./chunk-OS32P4RZ.js";
+import "./chunk-WOFHN2IZ.js";
 import "./chunk-MLKGABMK.js";
 export {
   getMachineId,