pushary 1.9.96 → 1.9.99

package/dist/{chunk-OS32P4RZ.js → chunk-EBGUGOS3.js}

@@ -205,6 +205,18 @@ var CLAUDE_CONNECTOR_STEPS = [
 ];
 var CONNECTOR_SETUP_QUESTION = "Did this setup question reach you?";
 var CLAUDE_CONNECTOR_TEST = `Use Pushary ask_user to ask \u201C${CONNECTOR_SETUP_QUESTION}\u201D with type \u201Cconfirm\u201D. Use agentName \u201CClaude Cowork - Setup check\u201D in Cowork or \u201CClaude Chat - Setup check\u201D in Chat. Wait for my answer and tell me which answer you received. Do not run a command or change any files.`;
+var connectorStarterPrompt = (agentNameRule) => `I\u2019m stepping away. Reach me on my phone with Pushary while you work on the task at the end of this message.
+
+Before you start, use Pushary ask_user with type \u201Cselect\u201D to ask me the one choice that most changes the result. Give two to four options, put your recommendation first, and wait for my answer. Ask it even if you already have a recommendation. If I did not write a task, use ask_user with type \u201Cinput\u201D to ask me for one instead.
+
+While you work, ask me with ask_user before you send, buy or delete anything, and wait for my answer. Silence is not a yes.
+
+When you finish, send me a short note with send_notification and context.type \u201Ctask_complete\u201D.
+
+${agentNameRule}
+
+My task:`;
+var CLAUDE_CONNECTOR_STARTER = connectorStarterPrompt("Use agentName \u201CClaude Cowork - <task name>\u201D in Cowork or \u201CClaude Chat - <task name>\u201D in Chat.");
 var COWORK_STANDING_INSTRUCTIONS = `Pushary is connected as a connector. Use it proactively to reach me on my phone or Mac notch.
 
 - When you need a decision or clarifying answer, call ask_user. Use type "confirm", "select", or "input" as appropriate. Ask once on one channel.
@@ -1942,6 +1954,8 @@ var POWERSHELL_FILE_WRITERS = /* @__PURE__ */ new Set([
   "start-bitstransfer"
 ]);
 var POWERSHELL_FETCHERS = /* @__PURE__ */ new Set(["invoke-webrequest", "invoke-restmethod", "start-bitstransfer"]);
+var POWERSHELL_WEB_REQUESTS = /* @__PURE__ */ new Set(["invoke-webrequest", "invoke-restmethod"]);
+var WEB_READ_METHODS = /* @__PURE__ */ new Set(["get", "head", "options"]);
 var DISK_ERASERS = /* @__PURE__ */ new Set(["format-volume", "clear-disk", "initialize-disk", "remove-partition", "format"]);
 var WINDOWS_SERVICE_CHANGERS = /* @__PURE__ */ new Set([
   "start-service",
@@ -2140,9 +2154,29 @@ var stageIsDestructive = (stage, judge) => {
   const command = powerShellCommandOf(stage);
   return DOTNET_RECURSIVE_DELETE.test(stage.source) || command !== null && (removesRecursively(command) || !onlyReads(command, judge) && judge.namesADestructiveAction(keywordTextOf(command)));
 };
+var LOOKS_LIKE_AN_ADDRESS = /^(?:[a-z][a-z\d+.-]*:\/\/|localhost\b|127\.|\[::1\])/i;
+var namesAWebRequestBody = (command) => command.args.some((arg) => {
+  const parameter = parameterOf(arg);
+  return namesTheParameter(parameter, "body", 1) || namesTheParameter(parameter, "infile", 2) || namesTheParameter(parameter, "form", 3);
+});
+var webRequestMethodOf = (command) => parameterValueOf(command, "method", 2) ?? parameterValueOf(command, "custommethod", 2);
+var SPLATTED_PARAMETERS = /^@\w+$/;
+var splatsItsParameters = (command) => command.args.some((arg) => !arg.quoted && SPLATTED_PARAMETERS.test(arg.text));
+var goesThroughAProxy = (command) => command.args.some((arg) => namesTheParameter(parameterOf(arg), "proxy", 5));
+var webRequestSendsData = (command) => {
+  const method = webRequestMethodOf(command);
+  if (splatsItsParameters(command)) return true;
+  return method === void 0 ? namesAWebRequestBody(command) : method.includes("$") || !WEB_READ_METHODS.has(method.toLowerCase());
+};
+var webRequestAddressesOf = (command) => {
+  if (splatsItsParameters(command) || goesThroughAProxy(command)) return [];
+  const uri = parameterValueOf(command, "uri", 2);
+  return uri === void 0 ? positionalTextsOf(command).filter((text3) => LOOKS_LIKE_AN_ADDRESS.test(text3)) : [uri];
+};
+var sendsAWebRequestThatNeedsAPerson = (command, judge) => POWERSHELL_WEB_REQUESTS.has(command.cmdlet) && judge.webRequestNeedsAPerson({ sendsData: webRequestSendsData(command), addresses: webRequestAddressesOf(command) });
 var stageHasAVisibleConsequence = (stage, judge) => {
   const command = powerShellCommandOf(stage);
-  return stage.redirectTargets.some((target) => namesAPathThatNeedsAPerson(target.text, judge)) || command !== null && !onlyReads(command, judge) && powerShellCommandChangesSomething(command, judge);
+  return stage.redirectTargets.some((target) => namesAPathThatNeedsAPerson(target.text, judge)) || command !== null && sendsAWebRequestThatNeedsAPerson(command, judge) || command !== null && !onlyReads(command, judge) && powerShellCommandChangesSomething(command, judge);
 };
 var fetchesWithPowerShell = (stage, judge) => {
   const command = powerShellCommandOf(stage);
@@ -2880,6 +2914,7 @@ var shellCommandStringOf = (shell, args) => {
 
 // ../contracts/src/chatgpt-plugin.ts
 var CHATGPT_CONNECTOR_TEST = `@Pushary use ask_user to ask \u201C${CONNECTOR_SETUP_QUESTION}\u201D with type \u201Cconfirm\u201D and agentName \u201CChatGPT - Setup check\u201D. Wait for my answer and tell me which answer you received.`;
+var CHATGPT_CONNECTOR_STARTER = `@Pushary ${connectorStarterPrompt("Use agentName \u201CChatGPT - <task name>\u201D.")}`;
 
 // ../contracts/src/partner-developer-guide.ts
 var PARTNER_API_KEYS_URL = "https://pushary.com/dashboard/agent/settings";
@@ -4619,17 +4654,39 @@ var easCommandPublishes = (invocation) => {
   const words = wordsOfInvocation(invocation);
   return words.some((word, index) => EAS_PROGRAM.test(basenameOf(word.text)) && EAS_COMMANDS_THAT_PUBLISH.test(words[index + 1]?.text ?? ""));
 };
-var publishesAnAppBuild = (invocation) => invocation.args.some((arg) => SUBMITS_THE_BUILD_TO_A_STORE.test(arg.text)) || easCommandPublishes(invocation);
+var XCRUN = "xcrun";
+var ALTOOL = "altool";
+var NOTARYTOOL = "notarytool";
+var APPLE_UPLOAD_TOOLS = /* @__PURE__ */ new Set([ALTOOL, NOTARYTOOL]);
+var ALTOOL_UPLOAD_FLAG = /^--(?:upload-app|upload-package|notarize-app)$/;
+var NOTARYTOOL_SUBMIT = "submit";
+var appleUploadToolOf = ({ program, args }) => {
+  if (program === void 0) return [];
+  const name = basenameOf(program.text);
+  if (APPLE_UPLOAD_TOOLS.has(name)) return [program, ...args];
+  if (name !== XCRUN) return [];
+  const tool = args.findIndex((arg) => APPLE_UPLOAD_TOOLS.has(basenameOf(arg.text)));
+  return tool === -1 ? [] : args.slice(tool);
+};
+var uploadsABuildToApple = (invocation) => {
+  const [tool, ...rest] = appleUploadToolOf(invocation);
+  if (tool === void 0) return false;
+  return basenameOf(tool.text) === ALTOOL ? rest.some((arg) => ALTOOL_UPLOAD_FLAG.test(arg.text)) : rest.find((arg) => !FLAG.test(arg.text))?.text === NOTARYTOOL_SUBMIT;
+};
+var publishesAnAppBuild = (invocation) => invocation.args.some((arg) => SUBMITS_THE_BUILD_TO_A_STORE.test(arg.text)) || easCommandPublishes(invocation) || uploadsABuildToApple(invocation);
 var PUSHES_EVERY_TAG = /* @__PURE__ */ new Set(["--tags", "--follow-tags"]);
 var NAMES_A_TAG = /(?:^|:)\+?refs\/tags\/|^tag$|(?:^|:)v?\d+(?:\.\d+){1,3}$|(?:^|:)v?\d+\.\d+\.\d+[-+][\w.]+$|\/v\d+\.\d+\.\d+(?:\.\d+)?(?:[-+][\w.]+)?$|^v\$/;
 var TAG_HELD_IN_A_VARIABLE = /^v?\$\{?(?:\w+_)?(?:tag|version)(?:_name)?\}?$/i;
 var GIT_PUSH = "push";
+var NAMES_A_MAJOR_VERSION_TAG = /(?:^|:)v\d+$/;
+var SETS_THE_UPSTREAM_BRANCH = /* @__PURE__ */ new Set(["-u", "--set-upstream"]);
 var pushesATag = ({ program, args }) => {
   if (program === void 0 || basenameOf(program.text) !== GIT) return false;
   const [subcommand, ...rest] = argsAfterHarmlessGlobalFlags(args);
   if (subcommand?.text !== GIT_PUSH) return false;
   const operands = rest.filter((arg) => !FLAG.test(arg.text));
-  return rest.some((arg) => PUSHES_EVERY_TAG.has(arg.text)) || operands.slice(1).some((operand) => NAMES_A_TAG.test(operand.text) || TAG_HELD_IN_A_VARIABLE.test(operand.text));
+  const pushesABranch = rest.some((arg) => SETS_THE_UPSTREAM_BRANCH.has(arg.text));
+  return rest.some((arg) => PUSHES_EVERY_TAG.has(arg.text)) || operands.slice(1).some((operand) => NAMES_A_TAG.test(operand.text) || TAG_HELD_IN_A_VARIABLE.test(operand.text) || !pushesABranch && NAMES_A_MAJOR_VERSION_TAG.test(operand.text));
 };
 var SECRET_FILE_NAME = /^(?:\.env(?:\.(?!example$|sample$|template$)[\w.-]+)?|(?:secrets?|credentials)\.(?:json|ya?ml|env|toml|ini)|credentials)$/i;
 var CI_WORKFLOW_FILE = /(?:^|\/)\.github\/workflows\/[^/]+$/i;
@@ -4645,8 +4702,29 @@ var AGENT_SETTINGS_FILE = new RegExp(String.raw`(?:^|/)(?:${[
   String.raw`\.config/opencode/(?:opencode\.jsonc?|plugins?/.+)`,
   String.raw`\.pushary(?:/.+)?`,
   String.raw`\.git/hooks(?:/.+)?`,
-  String.raw`\.ssh(?:/(?!known_hosts(?:\.old)?$).+)?`
+  String.raw`\.git/config`,
+  String.raw`\.ssh(?:/(?!known_hosts(?:\.old)?$).+)?`,
+  String.raw`\.mcp\.json`,
+  String.raw`\.cursor/mcp\.json`,
+  String.raw`\.claude/hooks/.+`,
+  String.raw`pushary-(?:policy|mode)-[^/]*\.json`
 ].join("|")})$`, "i");
+var HOME_DIRECTORY = String.raw`(?:~|\$HOME|\$\{HOME\}|(?:[A-Za-z]:)?/Users/[^/]+|/home/[^/]+|/root|/var/root)`;
+var FILE_THE_MACHINE_RUNS_LATER = new RegExp(String.raw`^(?:${[
+  String.raw`${HOME_DIRECTORY}/\.(?:zshrc|zshenv|zprofile|zlogin|zlogout|bashrc|bash_profile|bash_login|bash_logout|bash_aliases|profile)(?:\.[\w-]+)?`,
+  String.raw`${HOME_DIRECTORY}/\.gitconfig(?:[-._][\w.-]+)?`,
+  String.raw`${HOME_DIRECTORY}/\.p10k\.zsh`,
+  String.raw`${HOME_DIRECTORY}/\.(?:zsh|zshrc\.d|oh-my-zsh)/.+`,
+  String.raw`${HOME_DIRECTORY}/\.config/(?:fish/config\.fish|fish/conf\.d/.+|git/config|zsh/.+|systemd/user/.+)`,
+  String.raw`(?:.*/)?Library/Launch(?:Agents|Daemons)/[^/]+`,
+  String.raw`(?:.*/)?(?:Windows)?PowerShell/(?:Microsoft\.[\w.]+_)?profile\.ps1`,
+  String.raw`\$profile(?:\.\w+)?`,
+  String.raw`/(?:private/)?etc/.+`
+].join("|")})$`, "i");
+var FILE_A_PROJECT_TOOL_RUNS_LATER = /^(?:.*\/)?(?:\.husky\/.+|\.envrc|\.vscode\/tasks\.json)$/i;
+var LINE_TERMINATOR = /[\n\r\u2028\u2029]/;
+var CREDENTIAL_FILE_IN_THE_HOME_FOLDER = new RegExp(String.raw`^${HOME_DIRECTORY}/(?:\.npmrc|[._]netrc|\.kube/config)$`, "i");
+var AGENT_INSTRUCTION_FILE = /(?:^|\/)(?:CLAUDE(?:\.local)?\.md|AGENTS(?:\.override)?\.md|\.claude\/(?:commands|agents)\/.+)$/i;
 var withoutDotSegments = (path) => {
   const kept = [];
   for (const segment of path.split("/")) {
@@ -4655,9 +4733,10 @@ var withoutDotSegments = (path) => {
   }
   return `${path.startsWith("/") ? "/" : ""}${kept.join("/")}`;
 };
+var namesAFileAToolOrAnAgentReadsLater = (path) => !LINE_TERMINATOR.test(path) && (FILE_A_PROJECT_TOOL_RUNS_LATER.test(path) || AGENT_INSTRUCTION_FILE.test(path));
 var pathNeedsAPersonToChange = (path) => {
   const written = withoutDotSegments(normalizeSeparators(path));
-  return SECRET_FILE_NAME.test(basenameOf(written)) || CI_WORKFLOW_FILE.test(written) || AGENT_SETTINGS_FILE.test(written);
+  return SECRET_FILE_NAME.test(basenameOf(written)) || CI_WORKFLOW_FILE.test(written) || AGENT_SETTINGS_FILE.test(written) || FILE_THE_MACHINE_RUNS_LATER.test(written) || CREDENTIAL_FILE_IN_THE_HOME_FOLDER.test(written) || namesAFileAToolOrAnAgentReadsLater(written);
 };
 var REDIRECTS_INTO_A_SECRET_FILE = />>?\s*(?:[^\s;|&<>]*\/)?\.env(?:\.[\w-]+)?(?=$|[\s;|&)])/;
 var COPIES_ONTO_ITS_LAST_OPERAND = /* @__PURE__ */ new Set(["cp", "install", "ln", "rsync", "scp"]);
@@ -4718,7 +4797,10 @@ var FOLDER_THAT_NEEDS_A_PERSON = new RegExp(String.raw`(?:^|/)(?:${[
   String.raw`\.pushary`,
   String.raw`\.git/hooks`,
   String.raw`\.ssh`,
-  String.raw`\.config/opencode(?:/plugins?)?`
+  String.raw`\.config/opencode(?:/plugins?)?`,
+  String.raw`Library/Launch(?:Agents|Daemons)`,
+  String.raw`\.husky`,
+  String.raw`\.claude/(?:commands|agents)`
 ].join("|")})$`, "i");
 var folderNeedsAPersonToChange = (path) => FOLDER_THAT_NEEDS_A_PERSON.test(withoutDotSegments(normalizeSeparators(path)));
 var NETWORK_SENDERS = /* @__PURE__ */ new Set([
@@ -4775,6 +4857,83 @@ var changesWhereGitLooksForHooks = ({ program, args }) => {
   if (args[setting - 1]?.text === GIT_ONE_COMMAND_SETTING_FLAG) return true;
   return args.some((arg) => arg.text === GIT_CONFIG_SUBCOMMAND) && (args[setting + 1] !== void 0 || args.some((arg) => GIT_CONFIG_UNSET_FLAGS.has(arg.text)));
 };
+var GIT_SETTING_THAT_RUNS_A_PROGRAM = new RegExp(`^(?:${[
+  String.raw`core\.(?:fsmonitor|sshcommand|pager|editor|askpass|gitproxy|alternaterefscommand|hookspath)`,
+  String.raw`pager\..+`,
+  String.raw`sequence\.editor`,
+  String.raw`diff\.external`,
+  String.raw`diff\..+\.(?:textconv|command)`,
+  String.raw`merge\..+\.driver`,
+  String.raw`(?:diff|merge)tool\..+\.(?:cmd|path)`,
+  String.raw`interactive\.difffilter`,
+  String.raw`gpg\.ssh\.defaultkeycommand`,
+  String.raw`uploadpack\.packobjectshook`,
+  String.raw`credential\.(?:.+\.)?helper`,
+  String.raw`gpg(?:\.[\w-]+)?\.program`,
+  String.raw`filter\..+\.(?:clean|smudge|process)`,
+  String.raw`remote\..+\.(?:uploadpack|receivepack)`,
+  String.raw`protocol\.(?:.+\.)?allow`,
+  String.raw`include\.path`,
+  String.raw`includeif\..+\.path`
+].join("|")})$`, "i");
+var SWITCHES_A_SETTING_ON_OR_OFF = /^(?:true|false|yes|no|on|off|0|1|never|)$/i;
+var GIT_INCLUDE_SETTING = /^include(?:if\..+)?\.path$/i;
+var GIT_CREDENTIAL_HELPER_SETTING = /^credential\.(?:.+\.)?helper$/i;
+var NAMES_A_KNOWN_CREDENTIAL_HELPER = /^(?:osxkeychain|store|cache|manager|manager-core|libsecret|wincred|gnome-keyring)(?:\s+--[\w-]+(?:=[\w./~:@%+,-]+)?)*$/i;
+var namesNoNewProgram = (setting, value) => !value.expands && !GIT_INCLUDE_SETTING.test(setting) && (SWITCHES_A_SETTING_ON_OR_OFF.test(value.text) || GIT_CREDENTIAL_HELPER_SETTING.test(setting) && NAMES_A_KNOWN_CREDENTIAL_HELPER.test(value.text));
+var GIT_SETTING_THAT_RUNS_A_COMMAND_AFTER_A_BANG = /^(?:alias\..+|submodule\..+\.update)$/i;
+var RUNS_A_SHELL_COMMAND = /^!/;
+var GIT_CONFIG_READ_OPTIONS = /* @__PURE__ */ new Set([
+  "--get",
+  "--get-all",
+  "--get-regexp",
+  "--get-urlmatch",
+  "--get-color",
+  "--get-colorbool",
+  "--list",
+  "-l"
+]);
+var GIT_CONFIG_READ_SUBCOMMANDS = /* @__PURE__ */ new Set(["get", "list"]);
+var GIT_CONFIG_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set(["--comment", "--file", "-f", "--blob", "--type", "--default"]);
+var gitConfigOnlyReads = (args) => {
+  let firstOperand;
+  for (let index = args.findIndex((arg) => arg.text === GIT_CONFIG_SUBCOMMAND) + 1; index < args.length; index++) {
+    const text3 = args[index]?.text ?? "";
+    if (!FLAG.test(text3)) firstOperand ??= text3;
+    else if (GIT_CONFIG_READ_OPTIONS.has(text3)) return true;
+    else if (GIT_CONFIG_OPTIONS_WITH_A_VALUE.has(text3)) index++;
+  }
+  return GIT_CONFIG_READ_SUBCOMMANDS.has(firstOperand ?? "");
+};
+var gitConfigWriteOf = (args, namesTheSetting) => {
+  if (!args.some((arg) => arg.text === GIT_CONFIG_SUBCOMMAND)) return void 0;
+  const operands = args.filter((arg) => !FLAG.test(arg.text));
+  if (gitConfigOnlyReads(args)) return void 0;
+  const setting = operands.findIndex((arg) => namesTheSetting(arg.text));
+  const value = setting === -1 ? void 0 : operands[setting + 1];
+  return value === void 0 ? void 0 : { name: operands[setting]?.text ?? "", value };
+};
+var namesAGitSettingThatRunsAProgram = (name) => GIT_SETTING_THAT_RUNS_A_PROGRAM.test(name) || GIT_SETTING_THAT_RUNS_A_COMMAND_AFTER_A_BANG.test(name);
+var setsAGitSettingThatRunsAProgram = ({ program, args }) => {
+  if (program === void 0 || basenameOf(program.text) !== GIT) return false;
+  const written = gitConfigWriteOf(args, namesAGitSettingThatRunsAProgram);
+  if (written === void 0 || namesNoNewProgram(written.name, written.value)) return false;
+  return !GIT_SETTING_THAT_RUNS_A_COMMAND_AFTER_A_BANG.test(written.name) || written.value.expands || RUNS_A_SHELL_COMMAND.test(written.value.text);
+};
+var GIT_DESTINATION_SETTING = String.raw`(?:remote\..+\.(?:url|pushurl)|url\..+\.(?:insteadof|pushinsteadof))`;
+var GIT_SETTING_THAT_CHANGES_WHERE_GIT_SENDS = new RegExp(`^${GIT_DESTINATION_SETTING}$`, "i");
+var GIT_ONE_COMMAND_SETTING_THAT_CHANGES_WHERE_GIT_SENDS = new RegExp(`^${GIT_DESTINATION_SETTING}=`, "i");
+var GIT_REMOTE_SUBCOMMAND = "remote";
+var GIT_REMOTE_SET_URL = "set-url";
+var namesAGitSettingThatChangesWhereGitSends = (name) => GIT_SETTING_THAT_CHANGES_WHERE_GIT_SENDS.test(name);
+var setsWhereGitSendsForOneCommand = (args) => args.some((arg, index) => args[index - 1]?.text === GIT_ONE_COMMAND_SETTING_FLAG && GIT_ONE_COMMAND_SETTING_THAT_CHANGES_WHERE_GIT_SENDS.test(arg.text));
+var changesWhereGitSends = ({ program, args }) => {
+  if (program === void 0 || basenameOf(program.text) !== GIT) return false;
+  const [subcommand, action] = subcommandWordsOf(argsAfterGitGlobalOptions(args));
+  if (subcommand?.text === GIT_PUSH) return setsWhereGitSendsForOneCommand(args);
+  if (subcommand?.text === GIT_REMOTE_SUBCOMMAND) return action?.text === GIT_REMOTE_SET_URL;
+  return gitConfigWriteOf(args, namesAGitSettingThatChangesWhereGitSends) !== void 0;
+};
 var writesAFileThatNeedsAPerson = ({ program, args }) => {
   if (program === void 0) return false;
   if (sendsAFileThatNeedsAPerson({ program, args })) return true;
@@ -5018,6 +5177,7 @@ var GITHUB_COMMANDS_WITH_A_CONSEQUENCE = /* @__PURE__ */ new Map([
   ["secret", /* @__PURE__ */ new Set(["set"])],
   ["variable", /* @__PURE__ */ new Set(["set"])],
   [GITHUB_REPO_NOUN, /* @__PURE__ */ new Set(["archive", "rename"])],
+  ["workflow", /* @__PURE__ */ new Set(["run", "enable", "disable"])],
   ["ssh-key", /* @__PURE__ */ new Set(["add"])],
   ["gpg-key", /* @__PURE__ */ new Set(["add"])]
 ]);
@@ -5188,13 +5348,297 @@ var sshRemoteCommandOf = (args) => {
   }
   return args.slice(index + 1);
 };
+var PLAIN_REMOTE_COMMAND = /^[\w ./:=,@%+-]+$/;
+var REMOTE_STATUS_COMMAND = new RegExp(`^(?:${[
+  String.raw`(?:uptime|free|who|w|nproc|lscpu|lsblk|last|lsof|netstat)`,
+  String.raw`docker (?:compose )?(?:ps|images|logs|inspect|stats|top|version|info)`,
+  String.raw`systemctl (?:status|is-active|is-enabled|is-failed|list-units|list-timers|show|cat)`,
+  String.raw`journalctl`
+].join("|")})(?: |$)`);
+var JOURNAL_CHANGING_OPTIONS = [
+  "vacuum-size",
+  "vacuum-time",
+  "vacuum-files",
+  "rotate",
+  "flush",
+  "sync",
+  "relinquish-var",
+  "smart-relinquish-var",
+  "setup-keys",
+  "update-catalog",
+  "cursor-file"
+];
+var JOURNAL_READ_OPTIONS_SHARING_A_PREFIX = /* @__PURE__ */ new Set(["cursor"]);
+var LONG_OPTION_NAME = /^--([\w-]+)/;
+var namesAJournalChangingOption = (word) => {
+  const name = LONG_OPTION_NAME.exec(word)?.[1];
+  return name !== void 0 && !JOURNAL_READ_OPTIONS_SHARING_A_PREFIX.has(name) && JOURNAL_CHANGING_OPTIONS.some((option) => option.startsWith(name));
+};
+var onlyReadsTheRemoteStatus = (command) => PLAIN_REMOTE_COMMAND.test(command) && REMOTE_STATUS_COMMAND.test(command) && !command.split(" ").some(namesAJournalChangingOption);
 var sshRunsMoreThanAReadOnlyCommand = ({ program, args }) => {
   if (program === void 0 || basenameOf(program.text) !== SSH) return false;
   if (sshOptionRunsACommand(args)) return true;
   const command = sshRemoteCommandOf(args);
-  return command.length > 0 && (command.some((arg) => arg.expands) || !isSafeReadOnlyCommand(command.map((arg) => arg.text).join(" ")));
+  const remote = command.map((arg) => arg.text).join(" ");
+  return command.length > 0 && (command.some((arg) => arg.expands) || !isSafeReadOnlyCommand(remote) && !onlyReadsTheRemoteStatus(remote));
+};
+var REMOTE_COPY_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Map([
+  ["scp", /* @__PURE__ */ new Set(["-c", "-D", "-F", "-i", "-J", "-l", "-o", "-P", "-S", "-X"])],
+  ["rsync", /* @__PURE__ */ new Set([
+    "-e",
+    "--rsh",
+    "--rsync-path",
+    "--exclude",
+    "--include",
+    "--filter",
+    "-f",
+    "--exclude-from",
+    "--include-from",
+    "--files-from",
+    "--chmod",
+    "--chown",
+    "--log-file",
+    "--password-file",
+    "--port",
+    "--timeout",
+    "--contimeout",
+    "--bwlimit",
+    "--max-size",
+    "--min-size",
+    "--max-delete",
+    "--backup-dir",
+    "--link-dest",
+    "--compare-dest",
+    "--copy-dest",
+    "--partial-dir",
+    "--temp-dir",
+    "-T",
+    "--suffix",
+    "--out-format",
+    "--iconv",
+    "--usermap",
+    "--groupmap",
+    "-M",
+    "--remote-option",
+    "--info",
+    "--debug",
+    "--skip-compress",
+    "--compress-level",
+    "--block-size",
+    "-B",
+    "--modify-window",
+    "--sockopts",
+    "--outbuf",
+    "--copy-as",
+    "--stop-at",
+    "--stop-after",
+    "--time-limit",
+    "--checksum-seed",
+    "--max-alloc",
+    "--early-input",
+    "--address",
+    "--write-batch",
+    "--read-batch",
+    "--only-write-batch"
+  ])]
+]);
+var SSHPASS = "sshpass";
+var SSHPASS_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set(["-p", "-f", "-d", "-P"]);
+var NAMES_ANOTHER_MACHINE = /^(?:(?:rsync|scp|sftp):\/\/|(?:[^\s/:@]+@)?[^\s/:@]+:)/i;
+var SHORT_OPTION_CLUSTER2 = /^-[A-Za-z]+$/;
+var clusterEndsWithAnOptionThatTakesAValue = (text3, withAValue) => {
+  const letters = text3.slice(1);
+  const firstWithAValue = [...letters].findIndex((letter) => withAValue.has(`-${letter}`));
+  return firstWithAValue === letters.length - 1;
+};
+var optionTakesTheNextWord = (text3, withAValue) => withAValue.has(text3) || SHORT_OPTION_CLUSTER2.test(text3) && clusterEndsWithAnOptionThatTakesAValue(text3, withAValue);
+var operandsAfterOptions = (args, withAValue) => {
+  const operands = [];
+  for (let index = 0; index < args.length; index += 1) {
+    const text3 = args[index]?.text ?? "";
+    if (text3 === END_OF_OPTIONS3) return [...operands, ...args.slice(index + 1)];
+    if (!FLAG.test(text3)) operands.push(args[index]);
+    else if (optionTakesTheNextWord(text3, withAValue)) index += 1;
+  }
+  return operands;
 };
-var changesSomethingHostedElsewhere = (invocation) => githubCommandHasAConsequence(invocation) || writesThroughAServiceApi(invocation) || sendsDataOffThisMachine(invocation) || kubectlExecRunsMoreThanAReadOnlyCommand(invocation) || sshRunsMoreThanAReadOnlyCommand(invocation);
+var optionWordsOf = (args, withAValue) => {
+  const options = [];
+  for (let index = 0; index < args.length; index += 1) {
+    const text3 = args[index]?.text ?? "";
+    if (text3 === END_OF_OPTIONS3) break;
+    if (!FLAG.test(text3)) continue;
+    options.push(text3);
+    if (optionTakesTheNextWord(text3, withAValue)) index += 1;
+  }
+  return options;
+};
+var withoutSshpass = (invocation) => {
+  if (invocation.program === void 0 || basenameOf(invocation.program.text) !== SSHPASS) return invocation;
+  const [program, ...args] = operandsAfterOptions(invocation.args, SSHPASS_OPTIONS_WITH_A_VALUE);
+  const start = program === void 0 ? -1 : invocation.args.indexOf(program);
+  return { program, args: start === -1 ? [] : invocation.args.slice(start + 1) };
+};
+var RSYNC = "rsync";
+var RSYNC_DRY_RUN = "--dry-run";
+var RSYNC_DRY_RUN_LETTER = "n";
+var RSYNC_REMOTE_SHELL_LETTER = "e";
+var RSYNC_NAMES_A_PROGRAM = /^--(?:rsh|rsync-path)(?:=|$)/;
+var clusterTurnsOn = (text3, letter, withAValue) => {
+  if (!SHORT_OPTION_CLUSTER2.test(text3)) return false;
+  for (const each of text3.slice(1)) {
+    if (each === letter) return true;
+    if (withAValue.has(`-${each}`)) return false;
+  }
+  return false;
+};
+var rsyncOnlyPreviews = (args, withAValue) => {
+  const options = optionWordsOf(args, withAValue);
+  return options.some((text3) => text3 === RSYNC_DRY_RUN || clusterTurnsOn(text3, RSYNC_DRY_RUN_LETTER, withAValue)) && !options.some((text3) => RSYNC_NAMES_A_PROGRAM.test(text3) || clusterTurnsOn(text3, RSYNC_REMOTE_SHELL_LETTER, withAValue));
+};
+var copiesOntoAnotherMachine = (invocation) => {
+  const { program, args } = withoutSshpass(invocation);
+  const name = program === void 0 ? void 0 : basenameOf(program.text);
+  const withAValue = name === void 0 ? void 0 : REMOTE_COPY_OPTIONS_WITH_A_VALUE.get(name);
+  if (withAValue === void 0 || name === RSYNC && rsyncOnlyPreviews(args, withAValue)) return false;
+  const operands = operandsAfterOptions(args, withAValue);
+  const destination = operands.at(-1);
+  return operands.length > 1 && destination !== void 0 && NAMES_ANOTHER_MACHINE.test(destination.text);
+};
+var HOSTED_SECRET_WRITES = /* @__PURE__ */ new Map([
+  ["doppler", /(?:^| )secrets (?:set|delete|upload)(?: |$)/],
+  ["vercel", /(?:^| )env (?:add|rm|remove|update)(?: |$)/],
+  ["fly", /(?:^| )secrets (?:set|unset|import|deploy)(?: |$)/],
+  ["flyctl", /(?:^| )secrets (?:set|unset|import|deploy)(?: |$)/],
+  ["heroku", /(?:^| )config:(?:set|unset|add|remove)(?: |$)/],
+  ["netlify", /(?:^| )env:(?:set|unset|import|clone)(?: |$)/],
+  ["railway", /(?:^| )variables? (?:set|delete)(?: |$)/],
+  ["supabase", /(?:^| )secrets (?:set|unset)(?: |$)/],
+  ["wrangler", /(?:^| )secret (?:put|delete|bulk)(?: |$)/],
+  ["firebase", /(?:^| )functions:secrets:(?:set|destroy|prune)(?: |$)/],
+  ["gcloud", /(?:^| )secrets (?:create|delete|update|versions (?:add|destroy|disable|enable))(?: |$)/],
+  ["az", /(?:^| )keyvault secret (?:set|set-attributes|delete|purge|recover|restore)(?: |$)/]
+]);
+var RAILWAY_CLI = "railway";
+var RAILWAY_VARIABLES = /(?:^| )variables?(?: |$)/;
+var RAILWAY_SET_FLAG = /^(?:--set(?:=|$)|-s$)/;
+var PACKAGE_RUNNERS = /* @__PURE__ */ new Set(["npx", "bunx", "pnpx", "pnpm", "yarn", "npm", "bun"]);
+var CLI_OF_A_PACKAGE = /* @__PURE__ */ new Map([
+  ["netlify-cli", "netlify"],
+  ["firebase-tools", "firebase"],
+  ["@railway/cli", "railway"],
+  ["@doppler/cli", "doppler"]
+]);
+var PACKAGE_VERSION = /(?<=.)@[^/@]*$/;
+var cliNameOf = (program) => {
+  const unversioned = program.text.replace(PACKAGE_VERSION, "");
+  return CLI_OF_A_PACKAGE.get(unversioned) ?? basenameOf(unversioned);
+};
+var namesAHostingCli = (word) => {
+  const name = cliNameOf(word);
+  return HOSTED_SECRET_WRITES.has(name) || name === RAILWAY_CLI;
+};
+var withoutAPackageRunner = (invocation) => {
+  const { program, args } = invocation;
+  if (program === void 0 || !PACKAGE_RUNNERS.has(basenameOf(program.text))) return invocation;
+  const start = args.findIndex((arg) => !FLAG.test(arg.text) && namesAHostingCli(arg));
+  return start === -1 ? invocation : { program: args[start], args: args.slice(start + 1) };
+};
+var writesAHostedSecret = (invocation) => {
+  const { program, args } = withoutAPackageRunner(invocation);
+  if (program === void 0) return false;
+  const name = cliNameOf(program);
+  const words = args.filter((arg) => !FLAG.test(arg.text)).map((arg) => arg.text.toLowerCase()).join(" ");
+  return (HOSTED_SECRET_WRITES.get(name)?.test(words) ?? false) || name === RAILWAY_CLI && RAILWAY_VARIABLES.test(words) && args.some((arg) => RAILWAY_SET_FLAG.test(arg.text));
+};
+var NPM_REGISTRY_CHANGE = /^(?:(?:owner|author) (?:add|rm|remove)|dist-tags? (?:add|rm|remove|set)|deprecate|access (?:grant|revoke|public|restricted|set|edit|2fa-required|2fa-not-required)|team (?:create|destroy|add|rm))(?: |$)/;
+var YARN_REGISTRY_CHANGE = /^(?:npm )?(?:owner (?:add|remove)|tag (?:add|remove))(?: |$)/;
+var REGISTRY_CHANGE_BY_PACKAGE_MANAGER = /* @__PURE__ */ new Map([
+  ["npm", NPM_REGISTRY_CHANGE],
+  ["pnpm", NPM_REGISTRY_CHANGE],
+  ["yarn", YARN_REGISTRY_CHANGE]
+]);
+var PACKAGE_MANAGER_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Map([
+  ["npm", /* @__PURE__ */ new Set(["-w", "--workspace", "--prefix", "-C", "--registry", "--userconfig", "--globalconfig", "--cache", "--loglevel", "--otp", "--scope"])],
+  ["pnpm", /* @__PURE__ */ new Set(["-F", "--filter", "-C", "--dir", "--registry", "--loglevel", "--otp", "--config-dir"])],
+  ["yarn", /* @__PURE__ */ new Set(["--cwd"])]
+]);
+var PACKAGE_MANAGER_RUNS_A_PACKAGE = /* @__PURE__ */ new Set(["exec", "x", "dlx"]);
+var NO_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set();
+var YARN = "yarn";
+var YARN_WORKSPACE = "workspace";
+var COREPACK = "corepack";
+var REGISTRY_COMMAND_WORDS = 3;
+var REGISTRY_COMMAND_SPAN = 8;
+var OPTIONS_BEFORE_A_REGISTRY_COMMAND = 16;
+var MAX_PACKAGE_RUNNER_DEPTH = 2;
+var MAX_COMMAND_WORD_LENGTH = 214;
+var WORD_TOO_LONG_TO_BE_A_COMMAND = "-";
+var optionTakesItsValueAlong = (option) => option.includes("=");
+var commandStartsAfterOptions = (args, from, optionsWithAValue) => {
+  const end = Math.min(args.length, from + OPTIONS_BEFORE_A_REGISTRY_COMMAND);
+  const starts = /* @__PURE__ */ new Set();
+  const visited = /* @__PURE__ */ new Set();
+  const pending = [from];
+  for (let index = pending.pop(); index !== void 0; index = pending.pop()) {
+    if (visited.has(index) || index >= end) continue;
+    visited.add(index);
+    const option = args[index]?.text ?? "";
+    if (!FLAG.test(option)) starts.add(index);
+    else if (optionTakesItsValueAlong(option)) pending.push(index + 1);
+    else if (optionsWithAValue.has(option)) pending.push(index + 2);
+    else if (FLAG.test(args[index + 1]?.text ?? "")) pending.push(index + 1);
+    else pending.push(index + 1, index + 2);
+  }
+  return [...starts];
+};
+var commandWordText = (text3) => text3.length > MAX_COMMAND_WORD_LENGTH ? WORD_TOO_LONG_TO_BE_A_COMMAND : text3.toLowerCase();
+var commandWordsFrom = (args, start, optionsWithAValue) => {
+  const words = [];
+  const end = Math.min(args.length, start + REGISTRY_COMMAND_SPAN);
+  for (let index = start; index < end && words.length < REGISTRY_COMMAND_WORDS; index++) {
+    const text3 = args[index]?.text ?? "";
+    if (!FLAG.test(text3)) words.push(commandWordText(text3));
+    else if (optionsWithAValue.has(text3)) index++;
+  }
+  return words;
+};
+var packageManagerNameOf = (word) => {
+  if (word.text.length > MAX_COMMAND_WORD_LENGTH) return void 0;
+  const name = cliNameOf(word);
+  return REGISTRY_CHANGE_BY_PACKAGE_MANAGER.has(name) || name === COREPACK ? name : void 0;
+};
+var packageManagerRunFrom = (args, from) => {
+  const end = Math.min(args.length, from + REGISTRY_COMMAND_SPAN);
+  for (let index = from; index < end; index++) {
+    const word = args[index];
+    const name = word === void 0 ? void 0 : packageManagerNameOf(word);
+    if (name !== void 0) return { name, args: index + 1 };
+  }
+  return null;
+};
+var runChangesAPublishedPackage = (args, from, depth) => {
+  const inner = depth > MAX_PACKAGE_RUNNER_DEPTH ? null : packageManagerRunFrom(args, from);
+  return inner !== null && packageManagerChangesAPublishedPackage(inner.name, args, inner.args, depth);
+};
+var packageManagerChangesAPublishedPackage = (name, args, from, depth) => {
+  if (name === COREPACK) return runChangesAPublishedPackage(args, from, depth + 1);
+  const registryChange = REGISTRY_CHANGE_BY_PACKAGE_MANAGER.get(name);
+  if (registryChange === void 0) return false;
+  const options = PACKAGE_MANAGER_OPTIONS_WITH_A_VALUE.get(name) ?? NO_OPTIONS_WITH_A_VALUE;
+  return commandStartsAfterOptions(args, from, options).some((start) => {
+    const words = commandWordsFrom(args, start, options);
+    const [first] = words;
+    if (first !== void 0 && PACKAGE_MANAGER_RUNS_A_PACKAGE.has(first)) return runChangesAPublishedPackage(args, start + 1, depth + 1);
+    if (name === YARN && first === YARN_WORKSPACE) return registryChange.test(commandWordsFrom(args, start + 2, options).join(" "));
+    return registryChange.test(words.join(" "));
+  });
+};
+var changesAPublishedPackage = ({ program, args }) => {
+  const name = program === void 0 ? void 0 : packageManagerNameOf(program);
+  return name !== void 0 && packageManagerChangesAPublishedPackage(name, args, 0, 0);
+};
+var changesSomethingHostedElsewhere = (invocation) => githubCommandHasAConsequence(invocation) || writesThroughAServiceApi(invocation) || writesAHostedSecret(invocation) || sendsDataOffThisMachine(invocation) || copiesOntoAnotherMachine(invocation) || kubectlExecRunsMoreThanAReadOnlyCommand(invocation) || sshRunsMoreThanAReadOnlyCommand(invocation);
 var segmentWritesThroughARemoteApi = (segment, depth) => {
   const innermost = innermostInvocation(segment.invocation);
   return invocationWritesThroughARemoteApi(innermost) || commandsNestedIn(innermost, inlineScriptsOf(innermost, segment.heredocs)).some((nested) => commandWritesThroughARemoteApiAt(nested, depth + 1));
@@ -5494,14 +5938,34 @@ var honoursPreviewFlags = ({ program, args }) => {
 var onlyPreviews = (invocation) => invocation.program !== void 0 && honoursPreviewFlags(invocation) && invocation.args.some((arg) => !arg.expands && PREVIEW_FLAG.test(arg.text));
 var changesWhatIsDeployed = (toolName, invocation, normalized) => !onlyPreviews(invocation) && (changesProduction(invocation) || mergesAPullRequest(invocation) || isCoveredByPolicy(DEPLOY_AND_SCHEMA_COMMAND_PATTERNS, toolName, normalized));
 var releasesOrChangesACluster = (toolName, invocation, normalized) => !onlyPreviews(invocation) && (pushesATag(invocation) || publishesAnAppBuild(invocation) || RELEASE_AND_CLUSTER_PROGRAMS.has(basenameOf(invocation.program?.text ?? "")) && isCoveredByPolicy(RELEASE_AND_CLUSTER_COMMAND_PATTERNS, toolName, normalized));
-var invocationHasAConsequenceOnlyPermissionsOffAsksAbout = (toolName, invocation, normalized) => releasesOrChangesACluster(toolName, invocation, normalized) || mergesAPullRequestByAnyPath(invocation) || writesAFileThatNeedsAPerson(invocation) || changesWhereGitLooksForHooks(invocation) || changesSomethingHostedElsewhere(invocation);
-var invocationHasAVisibleConsequence = (toolName, invocation, depth, line) => {
+var MAIL_TRANSFER_PROGRAMS = /* @__PURE__ */ new Set(["sendmail", "msmtp", "ssmtp"]);
+var MAIL_CLIENTS = /* @__PURE__ */ new Set(["mail", "mailx", "mutt", "s-nail", "nail"]);
+var MAIL_TRANSFER_MODE_THAT_ONLY_READS = /^(?:-b[ptv]|--help|--version|-V|--serverinfo|--pretend)$/;
+var EMAIL_ADDRESS = /^[^\s@]+@[^\s@]+$/;
+var ADDRESS_SEPARATOR = /[\s<>,;"'()]+/;
+var namesAnEmailAddress = (word) => word.text.includes("@") && word.text.split(ADDRESS_SEPARATOR).some((part) => EMAIL_ADDRESS.test(part));
+var sendsMail = ({ program, args }) => {
+  if (program === void 0) return false;
+  const name = basenameOf(program.text);
+  if (MAIL_TRANSFER_PROGRAMS.has(name)) return !args.some((arg) => MAIL_TRANSFER_MODE_THAT_ONLY_READS.test(arg.text));
+  return MAIL_CLIENTS.has(name) && args.some(namesAnEmailAddress);
+};
+var PROGRAMS_THAT_STOP_THE_MACHINE = /* @__PURE__ */ new Set(["shutdown", "reboot", "halt", "poweroff"]);
+var ONLY_DESCRIBES_ITSELF = /^--(?:help|version)$/;
+var SHUTDOWN = "shutdown";
+var CANCELS_A_SHUTDOWN = "-c";
+var stopsTheMachine = ({ program, args }) => {
+  const name = program === void 0 ? void 0 : basenameOf(program.text);
+  return name !== void 0 && PROGRAMS_THAT_STOP_THE_MACHINE.has(name) && !args.some((arg) => ONLY_DESCRIBES_ITSELF.test(arg.text)) && !(name === SHUTDOWN && args.some((arg) => arg.text === CANCELS_A_SHUTDOWN));
+};
+var invocationHasAConsequenceOnlyPermissionsOffAsksAbout = (toolName, invocation, normalized, reading) => releasesOrChangesACluster(toolName, invocation, normalized) || reading === "as_written" && changesAPublishedPackage(invocation) || mergesAPullRequestByAnyPath(invocation) || writesAFileThatNeedsAPerson(invocation) || changesWhereGitLooksForHooks(invocation) || setsAGitSettingThatRunsAProgram(invocation) || changesWhereGitSends(invocation) || changesSomethingHostedElsewhere(invocation) || sendsMail(invocation) || stopsTheMachine(invocation);
+var invocationHasAVisibleConsequence = (toolName, invocation, depth, line, reading = "as_written") => {
   if (depth > MAX_CONSEQUENCE_DEPTH) return true;
   if (invocation.program === void 0) return false;
   const normalized = quotedInvocation(invocation);
   const innermost = innermostInvocation(invocation);
   const script = shellScriptOf(invocation);
-  return classifyDecisionRisk(toolName, normalized) === "destructive" || changesWhatIsDeployed(toolName, invocation, normalized) || writesASecretFile(invocation) || line === "permissions_off" && invocationHasAConsequenceOnlyPermissionsOffAsksAbout(toolName, invocation, normalized) || losesDataVisibly(toolName, invocation, normalized, depth, line) || subcommandDestroysVisibly(invocation) || sqlClientChangesData(invocation) || innermost !== invocation && invocationHasAVisibleConsequence(toolName, innermost, depth, line) || script === null && passesAnInlineScript(invocation) || script !== null && commandHasAVisibleConsequenceAt(toolName, script, depth + 1, line) || readingsPastGlobalFlags(invocation).some((reading) => invocationHasAVisibleConsequence(toolName, reading, depth + 1, line));
+  return classifyDecisionRisk(toolName, normalized) === "destructive" || changesWhatIsDeployed(toolName, invocation, normalized) || writesASecretFile(invocation) || line === "permissions_off" && invocationHasAConsequenceOnlyPermissionsOffAsksAbout(toolName, invocation, normalized, reading) || losesDataVisibly(toolName, invocation, normalized, depth, line) || subcommandDestroysVisibly(invocation) || sqlClientChangesData(invocation) || innermost !== invocation && invocationHasAVisibleConsequence(toolName, innermost, depth, line) || script === null && passesAnInlineScript(invocation) || script !== null && commandHasAVisibleConsequenceAt(toolName, script, depth + 1, line) || readingsPastGlobalFlags(invocation).some((pastFlags) => invocationHasAVisibleConsequence(toolName, pastFlags, depth + 1, line, "past_global_flags"));
 };
 var RUNS_FETCHED_CODE = /(?:\$\(|`|<\()\s*(?:curl|wget)\b/;
 var RUNS_DECODED_CODE = /(?:^|[;&|(\s])(?:bash|sh|zsh|source|\.|python3?|node|ruby|perl)\s+(?:-[A-Za-z]+\s+)*["']?(?:<\(|\$\()[^)]*\b(?:base64|xxd|openssl)\b/;
@@ -5776,6 +6240,8 @@ var redirectsIntoAFileThatNeedsAPerson = (command) => {
   });
 };
 var posixCommandOf = (words) => words.map(asOneShellWord).join(" ");
+var webRequestSendsDataOffThisMachine = ({ sendsData, addresses }) => sendsData && !(addresses.length > 0 && addresses.every((address) => THIS_MACHINE_ADDRESS.test(address)));
+var noWebRequestNeedsAPerson = () => false;
 var namesASecretPowerShellPath = (path) => SECRET_FILE_NAME.test(fileNameOf(path));
 var posixShellJudgeFor = (toolName, line = "standing_allow") => ({
   namesADestructiveAction: (text3) => classifyDecisionRisk(toolName, text3) === "destructive",
@@ -5785,7 +6251,8 @@ var posixShellJudgeFor = (toolName, line = "standing_allow") => ({
   fetches,
   runsWhatItReads,
   runsScripts,
-  namesAFileThatNeedsAPerson: line === "permissions_off" ? pathNeedsAPersonToChange : namesASecretPowerShellPath
+  namesAFileThatNeedsAPerson: line === "permissions_off" ? pathNeedsAPersonToChange : namesASecretPowerShellPath,
+  webRequestNeedsAPerson: line === "permissions_off" ? webRequestSendsDataOffThisMachine : noWebRequestNeedsAPerson
 });
 var commandIsDestructive = (toolName, command) => shellDialectOf(toolName) === "powershell" ? powerShellCommandIsDestructive(command, posixShellJudgeFor(toolName)) : readingsThatCanAct(command).some((reading) => classifyDecisionRisk(toolNameForAPosixReading(toolName), reading) === "destructive");
 var commandHasAConsequenceOnTheLine = (toolName, command, line) => shellDialectOf(toolName) === "powershell" ? powerShellCommandHasAVisibleConsequence(command, posixShellJudgeFor(toolName, line)) : commandHasAVisibleConsequenceAt(toolNameForAPosixReading(toolName), command, 0, line);
@@ -7179,6 +7646,7 @@ var bypassModeCoversEveryInput = (input) => input.deletesFiles !== true && input
 var bypassModeApplies = (input) => isBypassPermissionMode(input.permissionMode) && !isModeStateDegraded(input.modeState) && noModeOverrideIsActive(input) && input.toolInputs.length > 0;
 var bypassModeAllows = (input) => bypassModeApplies(input) && (bypassStopsOf(input.config) === "nothing" ? !aChosenRuleGovernsInEitherRepository(input, ruleAsksOrRefuses) : bypassModeCoversEveryInput(input));
 var PERMISSIONS_OFF_ASK_REASON = "Permissions are off in your agent, so Pushary only stops for risky steps like this one. You can change this in Settings on pushary.com.";
+var permissionsOffLineAppliesTo = (agentType) => agentType === CLAUDE_CODE_AGENT_TYPE;
 var permissionsOffAskReason = (input, verdict) => verdict.kind === "gate" && !verdict.scopeReason && !isAskedInEveryMode(input.toolName) && bypassModeApplies(input) && bypassStopsOf(input.config) === "consequences" && !aChosenRuleGovernsInEitherRepository(input) ? PERMISSIONS_OFF_ASK_REASON : void 0;
 var resolveGate = (input) => {
   const { modeState, config, toolName, toolInputs, cwd, sessionId } = input;
@@ -7536,6 +8004,7 @@ var PLAN_DECLINED_REASON = "Plan declined from the phone. Ask what to change bef
 var claudeStoppedPreToolUseOutput = (reason) => stoppedOutput(claudePreToolUseOutput("deny", reason), reason);
 var claudeStoppedPermissionRequestOutput = (reason) => stoppedOutput(claudePermissionRequestOutput("deny", reason), reason);
 var UNANSWERED_ASKS_BEFORE_PAUSE = 3;
+var CLAUDE_CODE_AGENT_TYPE = "claude_code";
 var SESSION_PAUSED_REASON = `Phone approvals for this session are paused because ${UNANSWERED_ASKS_BEFORE_PAUSE} of them went unanswered, so this was refused without asking anyone. A notification was sent to your phone: tap Approve on it to resume, then run this again.`;
 var unansweredRefusalReason = (paused) => paused ? SESSION_PAUSED_REASON : NO_RESPONSE_REASON;
 var UNHEARD_PUSH_WINDOW_DAYS = 14;
@@ -7883,6 +8352,7 @@ export {
   PRETOOLUSE_HANDLED_TOOLS,
   isPermissionRequestOwnedByPreToolUse,
   CLAUDE_PRETOOLUSE_MATCHER,
+  permissionsOffLineAppliesTo,
   permissionsOffAskReason,
   resolveGate,
   editGoesToTheAgentsPrompt,

package/dist/{chunk-MSPHJNUL.js → chunk-EIREGHP2.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-6YG5PZZS.js";
+} from "./chunk-3QTUISNT.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";