pushary 1.9.97 → 1.9.100

package/dist/{chunk-CG3C2WL7.js → chunk-3BBJO25D.js}

@@ -1,14 +1,16 @@
 import {
-  SESSION_HISTORY_RETENTION_DAYS,
   readOwnerOnlyJson,
   savedTranscriptReadPositions
-} from "./chunk-VPT3RDTO.js";
+} from "./chunk-BBNMGXZA.js";
+import {
+  SESSION_HISTORY_RETENTION_DAYS
+} from "./chunk-G66WIAST.js";
 import {
   ensureDaemonRunning
-} from "./chunk-APFQBVQW.js";
+} from "./chunk-E4YZIS4C.js";
 import {
   hookOwnerOf
-} from "./chunk-HWEEBVS7.js";
+} from "./chunk-OUF7TX2C.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
@@ -19,33 +21,33 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-UAUADSJX.js";
+} from "./chunk-3OIUMHHO.js";
 import {
   external_exports
 } from "./chunk-XMSDA5WA.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-CP72YEEA.js";
+} from "./chunk-ZNPUYLOY.js";
 import {
   readTranscriptPreference
-} from "./chunk-HD7AURL6.js";
+} from "./chunk-THHVB46D.js";
 import {
   hookMeaning
-} from "./chunk-ZDIQPYM2.js";
+} from "./chunk-MP3SEXXJ.js";
 import {
   claudeConfigDir,
   codexHome,
   pusharyDir
-} from "./chunk-KNVTKFDP.js";
+} from "./chunk-SGECX2RY.js";
 import {
   writeJsonAtomic,
   writeJsonAtomicDurable
-} from "./chunk-6CDA4R5L.js";
+} from "./chunk-GKNTNKVQ.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-RZD7ULBJ.js";
+} from "./chunk-KOUB4ZLX.js";
 import {
   PENDING_COMMAND_PREFIX,
   SESSION_HISTORY_BACKFILL_LIMIT_BYTES,
@@ -53,7 +55,7 @@ import {
   isHookSource,
   isRecord,
   redactSecretsFromContent
-} from "./chunk-WOFHN2IZ.js";
+} from "./chunk-4FAJQPFY.js";
 
 // src/transcript-recipient-pin.ts
 import { createHash } from "crypto";

package/dist/{chunk-UAUADSJX.js → chunk-3OIUMHHO.js}

@@ -3,12 +3,12 @@ import {
 } from "./chunk-XMSDA5WA.js";
 import {
   getBaseUrl
-} from "./chunk-RZD7ULBJ.js";
+} from "./chunk-KOUB4ZLX.js";
 import {
   compressTranscriptRecord,
   redactSecretsFromContent,
   transcriptRecordPlaintext
-} from "./chunk-WOFHN2IZ.js";
+} from "./chunk-4FAJQPFY.js";
 
 // src/transcript-api.ts
 var providerRecipientSchema = external_exports.object({

package/dist/{chunk-5RNZP53C.js → chunk-43CU2HYQ.js}

@@ -2,31 +2,31 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-RPY5XCGA.js";
+} from "./chunk-ODJQ5KFS.js";
 import {
   APPROVAL_RULES_PATH
-} from "./chunk-VVHNHETX.js";
+} from "./chunk-ACVL2MHG.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
 import {
   readKeySource
-} from "./chunk-HD7AURL6.js";
+} from "./chunk-THHVB46D.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-OW4WEO56.js";
+} from "./chunk-O35JKL4T.js";
 import {
   getBaseUrl
-} from "./chunk-RZD7ULBJ.js";
+} from "./chunk-KOUB4ZLX.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   KEY_SCOPE
-} from "./chunk-WOFHN2IZ.js";
+} from "./chunk-4FAJQPFY.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-WOFHN2IZ.js → chunk-4FAJQPFY.js}

@@ -205,6 +205,18 @@ var CLAUDE_CONNECTOR_STEPS = [
 ];
 var CONNECTOR_SETUP_QUESTION = "Did this setup question reach you?";
 var CLAUDE_CONNECTOR_TEST = `Use Pushary ask_user to ask \u201C${CONNECTOR_SETUP_QUESTION}\u201D with type \u201Cconfirm\u201D. Use agentName \u201CClaude Cowork - Setup check\u201D in Cowork or \u201CClaude Chat - Setup check\u201D in Chat. Wait for my answer and tell me which answer you received. Do not run a command or change any files.`;
+var connectorStarterPrompt = (agentNameRule) => `I\u2019m stepping away. Reach me on my phone with Pushary while you work on the task at the end of this message.
+
+Before you start, use Pushary ask_user with type \u201Cselect\u201D to ask me the one choice that most changes the result. Give two to four options, put your recommendation first, and wait for my answer. Ask it even if you already have a recommendation. If I did not write a task, use ask_user with type \u201Cinput\u201D to ask me for one instead.
+
+While you work, ask me with ask_user before you send, buy or delete anything, and wait for my answer. Silence is not a yes.
+
+When you finish, send me a short note with send_notification and context.type \u201Ctask_complete\u201D.
+
+${agentNameRule}
+
+My task:`;
+var CLAUDE_CONNECTOR_STARTER = connectorStarterPrompt("Use agentName \u201CClaude Cowork - <task name>\u201D in Cowork or \u201CClaude Chat - <task name>\u201D in Chat.");
 var COWORK_STANDING_INSTRUCTIONS = `Pushary is connected as a connector. Use it proactively to reach me on my phone or Mac notch.
 
 - When you need a decision or clarifying answer, call ask_user. Use type "confirm", "select", or "input" as appropriate. Ask once on one channel.
@@ -2902,6 +2914,7 @@ var shellCommandStringOf = (shell, args) => {
 
 // ../contracts/src/chatgpt-plugin.ts
 var CHATGPT_CONNECTOR_TEST = `@Pushary use ask_user to ask \u201C${CONNECTOR_SETUP_QUESTION}\u201D with type \u201Cconfirm\u201D and agentName \u201CChatGPT - Setup check\u201D. Wait for my answer and tell me which answer you received.`;
+var CHATGPT_CONNECTOR_STARTER = `@Pushary ${connectorStarterPrompt("Use agentName \u201CChatGPT - <task name>\u201D.")}`;
 
 // ../contracts/src/partner-developer-guide.ts
 var PARTNER_API_KEYS_URL = "https://pushary.com/dashboard/agent/settings";
@@ -4641,7 +4654,26 @@ var easCommandPublishes = (invocation) => {
   const words = wordsOfInvocation(invocation);
   return words.some((word, index) => EAS_PROGRAM.test(basenameOf(word.text)) && EAS_COMMANDS_THAT_PUBLISH.test(words[index + 1]?.text ?? ""));
 };
-var publishesAnAppBuild = (invocation) => invocation.args.some((arg) => SUBMITS_THE_BUILD_TO_A_STORE.test(arg.text)) || easCommandPublishes(invocation);
+var XCRUN = "xcrun";
+var ALTOOL = "altool";
+var NOTARYTOOL = "notarytool";
+var APPLE_UPLOAD_TOOLS = /* @__PURE__ */ new Set([ALTOOL, NOTARYTOOL]);
+var ALTOOL_UPLOAD_FLAG = /^--(?:upload-app|upload-package|notarize-app)$/;
+var NOTARYTOOL_SUBMIT = "submit";
+var appleUploadToolOf = ({ program, args }) => {
+  if (program === void 0) return [];
+  const name = basenameOf(program.text);
+  if (APPLE_UPLOAD_TOOLS.has(name)) return [program, ...args];
+  if (name !== XCRUN) return [];
+  const tool = args.findIndex((arg) => APPLE_UPLOAD_TOOLS.has(basenameOf(arg.text)));
+  return tool === -1 ? [] : args.slice(tool);
+};
+var uploadsABuildToApple = (invocation) => {
+  const [tool, ...rest] = appleUploadToolOf(invocation);
+  if (tool === void 0) return false;
+  return basenameOf(tool.text) === ALTOOL ? rest.some((arg) => ALTOOL_UPLOAD_FLAG.test(arg.text)) : rest.find((arg) => !FLAG.test(arg.text))?.text === NOTARYTOOL_SUBMIT;
+};
+var publishesAnAppBuild = (invocation) => invocation.args.some((arg) => SUBMITS_THE_BUILD_TO_A_STORE.test(arg.text)) || easCommandPublishes(invocation) || uploadsABuildToApple(invocation);
 var PUSHES_EVERY_TAG = /* @__PURE__ */ new Set(["--tags", "--follow-tags"]);
 var NAMES_A_TAG = /(?:^|:)\+?refs\/tags\/|^tag$|(?:^|:)v?\d+(?:\.\d+){1,3}$|(?:^|:)v?\d+\.\d+\.\d+[-+][\w.]+$|\/v\d+\.\d+\.\d+(?:\.\d+)?(?:[-+][\w.]+)?$|^v\$/;
 var TAG_HELD_IN_A_VARIABLE = /^v?\$\{?(?:\w+_)?(?:tag|version)(?:_name)?\}?$/i;
@@ -4689,6 +4721,10 @@ var FILE_THE_MACHINE_RUNS_LATER = new RegExp(String.raw`^(?:${[
   String.raw`\$profile(?:\.\w+)?`,
   String.raw`/(?:private/)?etc/.+`
 ].join("|")})$`, "i");
+var FILE_A_PROJECT_TOOL_RUNS_LATER = /^(?:.*\/)?(?:\.husky\/.+|\.envrc|\.vscode\/tasks\.json)$/i;
+var LINE_TERMINATOR = /[\n\r\u2028\u2029]/;
+var CREDENTIAL_FILE_IN_THE_HOME_FOLDER = new RegExp(String.raw`^${HOME_DIRECTORY}/(?:\.npmrc|[._]netrc|\.kube/config)$`, "i");
+var AGENT_INSTRUCTION_FILE = /(?:^|\/)(?:CLAUDE(?:\.local)?\.md|AGENTS(?:\.override)?\.md|\.claude\/(?:commands|agents)\/.+)$/i;
 var withoutDotSegments = (path) => {
   const kept = [];
   for (const segment of path.split("/")) {
@@ -4697,9 +4733,10 @@ var withoutDotSegments = (path) => {
   }
   return `${path.startsWith("/") ? "/" : ""}${kept.join("/")}`;
 };
+var namesAFileAToolOrAnAgentReadsLater = (path) => !LINE_TERMINATOR.test(path) && (FILE_A_PROJECT_TOOL_RUNS_LATER.test(path) || AGENT_INSTRUCTION_FILE.test(path));
 var pathNeedsAPersonToChange = (path) => {
   const written = withoutDotSegments(normalizeSeparators(path));
-  return SECRET_FILE_NAME.test(basenameOf(written)) || CI_WORKFLOW_FILE.test(written) || AGENT_SETTINGS_FILE.test(written) || FILE_THE_MACHINE_RUNS_LATER.test(written);
+  return SECRET_FILE_NAME.test(basenameOf(written)) || CI_WORKFLOW_FILE.test(written) || AGENT_SETTINGS_FILE.test(written) || FILE_THE_MACHINE_RUNS_LATER.test(written) || CREDENTIAL_FILE_IN_THE_HOME_FOLDER.test(written) || namesAFileAToolOrAnAgentReadsLater(written);
 };
 var REDIRECTS_INTO_A_SECRET_FILE = />>?\s*(?:[^\s;|&<>]*\/)?\.env(?:\.[\w-]+)?(?=$|[\s;|&)])/;
 var COPIES_ONTO_ITS_LAST_OPERAND = /* @__PURE__ */ new Set(["cp", "install", "ln", "rsync", "scp"]);
@@ -4761,7 +4798,9 @@ var FOLDER_THAT_NEEDS_A_PERSON = new RegExp(String.raw`(?:^|/)(?:${[
   String.raw`\.git/hooks`,
   String.raw`\.ssh`,
   String.raw`\.config/opencode(?:/plugins?)?`,
-  String.raw`Library/Launch(?:Agents|Daemons)`
+  String.raw`Library/Launch(?:Agents|Daemons)`,
+  String.raw`\.husky`,
+  String.raw`\.claude/(?:commands|agents)`
 ].join("|")})$`, "i");
 var folderNeedsAPersonToChange = (path) => FOLDER_THAT_NEEDS_A_PERSON.test(withoutDotSegments(normalizeSeparators(path)));
 var NETWORK_SENDERS = /* @__PURE__ */ new Set([
@@ -4844,14 +4883,112 @@ var NAMES_A_KNOWN_CREDENTIAL_HELPER = /^(?:osxkeychain|store|cache|manager|manag
 var namesNoNewProgram = (setting, value) => !value.expands && !GIT_INCLUDE_SETTING.test(setting) && (SWITCHES_A_SETTING_ON_OR_OFF.test(value.text) || GIT_CREDENTIAL_HELPER_SETTING.test(setting) && NAMES_A_KNOWN_CREDENTIAL_HELPER.test(value.text));
 var GIT_SETTING_THAT_RUNS_A_COMMAND_AFTER_A_BANG = /^(?:alias\..+|submodule\..+\.update)$/i;
 var RUNS_A_SHELL_COMMAND = /^!/;
-var setsAGitSettingThatRunsAProgram = ({ program, args }) => {
-  if (program === void 0 || basenameOf(program.text) !== GIT || !args.some((arg) => arg.text === GIT_CONFIG_SUBCOMMAND)) return false;
+var GIT_CONFIG_READ_OPTIONS = /* @__PURE__ */ new Set([
+  "--get",
+  "--get-all",
+  "--get-regexp",
+  "--get-urlmatch",
+  "--get-color",
+  "--get-colorbool",
+  "--list",
+  "-l"
+]);
+var GIT_CONFIG_READ_SUBCOMMANDS = /* @__PURE__ */ new Set(["get", "list"]);
+var GIT_CONFIG_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set(["--comment", "--file", "-f", "--blob", "--type", "--default"]);
+var gitConfigOnlyReads = (args) => {
+  let firstOperand;
+  for (let index = args.findIndex((arg) => arg.text === GIT_CONFIG_SUBCOMMAND) + 1; index < args.length; index++) {
+    const text3 = args[index]?.text ?? "";
+    if (!FLAG.test(text3)) firstOperand ??= text3;
+    else if (GIT_CONFIG_READ_OPTIONS.has(text3)) return true;
+    else if (GIT_CONFIG_OPTIONS_WITH_A_VALUE.has(text3)) index++;
+  }
+  return GIT_CONFIG_READ_SUBCOMMANDS.has(firstOperand ?? "");
+};
+var gitConfigWriteOf = (args, namesTheSetting) => {
+  if (!args.some((arg) => arg.text === GIT_CONFIG_SUBCOMMAND)) return void 0;
   const operands = args.filter((arg) => !FLAG.test(arg.text));
-  const setting = operands.findIndex((arg) => GIT_SETTING_THAT_RUNS_A_PROGRAM.test(arg.text) || GIT_SETTING_THAT_RUNS_A_COMMAND_AFTER_A_BANG.test(arg.text));
+  if (gitConfigOnlyReads(args)) return void 0;
+  const setting = operands.findIndex((arg) => namesTheSetting(arg.text));
   const value = setting === -1 ? void 0 : operands[setting + 1];
-  const name = operands[setting]?.text ?? "";
-  if (value === void 0 || namesNoNewProgram(name, value)) return false;
-  return !GIT_SETTING_THAT_RUNS_A_COMMAND_AFTER_A_BANG.test(name) || value.expands || RUNS_A_SHELL_COMMAND.test(value.text);
+  return value === void 0 ? void 0 : { name: operands[setting]?.text ?? "", value };
+};
+var namesAGitSettingThatRunsAProgram = (name) => GIT_SETTING_THAT_RUNS_A_PROGRAM.test(name) || GIT_SETTING_THAT_RUNS_A_COMMAND_AFTER_A_BANG.test(name);
+var setsAGitSettingThatRunsAProgram = ({ program, args }) => {
+  if (program === void 0 || basenameOf(program.text) !== GIT) return false;
+  const written = gitConfigWriteOf(args, namesAGitSettingThatRunsAProgram);
+  if (written === void 0 || namesNoNewProgram(written.name, written.value)) return false;
+  return !GIT_SETTING_THAT_RUNS_A_COMMAND_AFTER_A_BANG.test(written.name) || written.value.expands || RUNS_A_SHELL_COMMAND.test(written.value.text);
+};
+var GIT_DESTINATION_SETTING = String.raw`(?:remote\..+\.(?:url|pushurl)|url\..+\.(?:insteadof|pushinsteadof))`;
+var GIT_SETTING_THAT_CHANGES_WHERE_GIT_SENDS = new RegExp(`^${GIT_DESTINATION_SETTING}$`, "i");
+var GIT_ONE_COMMAND_SETTING_THAT_CHANGES_WHERE_GIT_SENDS = new RegExp(`^${GIT_DESTINATION_SETTING}=`, "i");
+var GIT_REMOTE_SUBCOMMAND = "remote";
+var GIT_REMOTE_ACTIONS_THAT_CHANGE_WHERE_GIT_SENDS = /* @__PURE__ */ new Set(["set-url", "add"]);
+var namesAGitSettingThatChangesWhereGitSends = (name) => GIT_SETTING_THAT_CHANGES_WHERE_GIT_SENDS.test(name);
+var setsWhereGitSendsForOneCommand = (args) => args.some((arg, index) => args[index - 1]?.text === GIT_ONE_COMMAND_SETTING_FLAG && GIT_ONE_COMMAND_SETTING_THAT_CHANGES_WHERE_GIT_SENDS.test(arg.text));
+var changesWhereGitSends = ({ program, args }) => {
+  if (program === void 0 || basenameOf(program.text) !== GIT) return false;
+  const [subcommand, action] = subcommandWordsOf(argsAfterGitGlobalOptions(args));
+  if (subcommand?.text === GIT_PUSH) return setsWhereGitSendsForOneCommand(args);
+  if (subcommand?.text === GIT_REMOTE_SUBCOMMAND) return GIT_REMOTE_ACTIONS_THAT_CHANGE_WHERE_GIT_SENDS.has(action?.text ?? "");
+  return gitConfigWriteOf(args, namesAGitSettingThatChangesWhereGitSends) !== void 0;
+};
+var GIT_COMMANDS_THAT_SEND_TO_THE_ADDRESS_THEY_ARE_GIVEN = /* @__PURE__ */ new Set(["send-pack", "http-push"]);
+var GIT_PUSH_REPOSITORY_OPTION = "--repo";
+var GIT_PUSH_LONG_OPTIONS_WITH_A_SEPARATE_VALUE = [
+  GIT_PUSH_REPOSITORY_OPTION,
+  "--recurse-submodules",
+  "--receive-pack",
+  "--exec",
+  "--push-option"
+];
+var GIT_PUSH_SHORT_OPTION_WITH_A_VALUE = "o";
+var ANY_SHORT_OPTION_CLUSTER = /^-[^-]/;
+var WINDOWS_DRIVE_LETTER = /^[A-Za-z]:/;
+var abbreviatesTheGitPushRepositoryOption = (name) => name.length > LONG_OPTION_PREFIX3.length && GIT_PUSH_REPOSITORY_OPTION.startsWith(name);
+var gitPushOptionTakesTheNextWord = (text3) => ANY_SHORT_OPTION_CLUSTER.test(text3) ? text3.indexOf(GIT_PUSH_SHORT_OPTION_WITH_A_VALUE, 1) === text3.length - 1 : text3.startsWith(LONG_OPTION_PREFIX3) && !text3.includes(OPTION_VALUE_SEPARATOR) && abbreviatesALongOption(text3, GIT_PUSH_LONG_OPTIONS_WITH_A_SEPARATE_VALUE);
+var attachedOptionValueOf = (word, name) => word.text.length > name.length ? { ...word, text: word.text.slice(name.length + OPTION_VALUE_SEPARATOR.length) } : void 0;
+var wordsNamingWhereAGitPushSends = (pushArgs) => {
+  const named = [];
+  let repositoryRead = false;
+  for (let index = 0; index < pushArgs.length; index += 1) {
+    const word = pushArgs[index];
+    if (word === void 0) break;
+    if (word.text === END_OF_OPTIONS3) {
+      const operand = repositoryRead ? void 0 : pushArgs[index + 1];
+      return operand === void 0 ? named : [...named, operand];
+    }
+    if (!FLAG.test(word.text)) {
+      if (!repositoryRead) named.push(word);
+      repositoryRead = true;
+      continue;
+    }
+    const name = longOptionName(word.text);
+    if (abbreviatesTheGitPushRepositoryOption(name)) {
+      const attachedValue = attachedOptionValueOf(word, name);
+      const value = attachedValue ?? pushArgs[index + 1];
+      if (value !== void 0) named.push(value);
+      if (attachedValue === void 0) index += 1;
+    } else if (gitPushOptionTakesTheNextWord(word.text)) {
+      index += 1;
+    }
+  }
+  return named;
+};
+var namesAGitAddress = (text3) => {
+  const colon = text3.indexOf(":");
+  const slash = text3.indexOf("/");
+  return colon !== -1 && (slash === -1 || colon < slash) && !WINDOWS_DRIVE_LETTER.test(text3);
+};
+var mayNameAGitAddress = (word) => word.expands || namesAGitAddress(word.text);
+var gitSendsToAPlaceTheCommandNames = ({ program, args }) => {
+  if (program === void 0 || basenameOf(program.text) !== GIT) return false;
+  const gitArgs = argsAfterGitGlobalOptions(args);
+  const [subcommand] = subcommandWordsOf(gitArgs);
+  if (subcommand === void 0) return false;
+  if (GIT_COMMANDS_THAT_SEND_TO_THE_ADDRESS_THEY_ARE_GIVEN.has(subcommand.text)) return true;
+  return subcommand.text === GIT_PUSH && wordsNamingWhereAGitPushSends(gitArgs.slice(gitArgs.indexOf(subcommand) + 1)).some(mayNameAGitAddress);
 };
 var writesAFileThatNeedsAPerson = ({ program, args }) => {
   if (program === void 0) return false;
@@ -5470,6 +5607,93 @@ var writesAHostedSecret = (invocation) => {
   const words = args.filter((arg) => !FLAG.test(arg.text)).map((arg) => arg.text.toLowerCase()).join(" ");
   return (HOSTED_SECRET_WRITES.get(name)?.test(words) ?? false) || name === RAILWAY_CLI && RAILWAY_VARIABLES.test(words) && args.some((arg) => RAILWAY_SET_FLAG.test(arg.text));
 };
+var NPM_REGISTRY_CHANGE = /^(?:(?:owner|author) (?:add|rm|remove)|dist-tags? (?:add|rm|remove|set)|deprecate|access (?:grant|revoke|public|restricted|set|edit|2fa-required|2fa-not-required)|team (?:create|destroy|add|rm))(?: |$)/;
+var YARN_REGISTRY_CHANGE = /^(?:npm )?(?:owner (?:add|remove)|tag (?:add|remove))(?: |$)/;
+var REGISTRY_CHANGE_BY_PACKAGE_MANAGER = /* @__PURE__ */ new Map([
+  ["npm", NPM_REGISTRY_CHANGE],
+  ["pnpm", NPM_REGISTRY_CHANGE],
+  ["yarn", YARN_REGISTRY_CHANGE]
+]);
+var PACKAGE_MANAGER_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Map([
+  ["npm", /* @__PURE__ */ new Set(["-w", "--workspace", "--prefix", "-C", "--registry", "--userconfig", "--globalconfig", "--cache", "--loglevel", "--otp", "--scope"])],
+  ["pnpm", /* @__PURE__ */ new Set(["-F", "--filter", "-C", "--dir", "--registry", "--loglevel", "--otp", "--config-dir"])],
+  ["yarn", /* @__PURE__ */ new Set(["--cwd"])]
+]);
+var PACKAGE_MANAGER_RUNS_A_PACKAGE = /* @__PURE__ */ new Set(["exec", "x", "dlx"]);
+var NO_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set();
+var YARN = "yarn";
+var YARN_WORKSPACE = "workspace";
+var COREPACK = "corepack";
+var REGISTRY_COMMAND_WORDS = 3;
+var REGISTRY_COMMAND_SPAN = 8;
+var OPTIONS_BEFORE_A_REGISTRY_COMMAND = 16;
+var MAX_PACKAGE_RUNNER_DEPTH = 2;
+var MAX_COMMAND_WORD_LENGTH = 214;
+var WORD_TOO_LONG_TO_BE_A_COMMAND = "-";
+var optionTakesItsValueAlong = (option) => option.includes("=");
+var commandStartsAfterOptions = (args, from, optionsWithAValue) => {
+  const end = Math.min(args.length, from + OPTIONS_BEFORE_A_REGISTRY_COMMAND);
+  const starts = /* @__PURE__ */ new Set();
+  const visited = /* @__PURE__ */ new Set();
+  const pending = [from];
+  for (let index = pending.pop(); index !== void 0; index = pending.pop()) {
+    if (visited.has(index) || index >= end) continue;
+    visited.add(index);
+    const option = args[index]?.text ?? "";
+    if (!FLAG.test(option)) starts.add(index);
+    else if (optionTakesItsValueAlong(option)) pending.push(index + 1);
+    else if (optionsWithAValue.has(option)) pending.push(index + 2);
+    else if (FLAG.test(args[index + 1]?.text ?? "")) pending.push(index + 1);
+    else pending.push(index + 1, index + 2);
+  }
+  return [...starts];
+};
+var commandWordText = (text3) => text3.length > MAX_COMMAND_WORD_LENGTH ? WORD_TOO_LONG_TO_BE_A_COMMAND : text3.toLowerCase();
+var commandWordsFrom = (args, start, optionsWithAValue) => {
+  const words = [];
+  const end = Math.min(args.length, start + REGISTRY_COMMAND_SPAN);
+  for (let index = start; index < end && words.length < REGISTRY_COMMAND_WORDS; index++) {
+    const text3 = args[index]?.text ?? "";
+    if (!FLAG.test(text3)) words.push(commandWordText(text3));
+    else if (optionsWithAValue.has(text3)) index++;
+  }
+  return words;
+};
+var packageManagerNameOf = (word) => {
+  if (word.text.length > MAX_COMMAND_WORD_LENGTH) return void 0;
+  const name = cliNameOf(word);
+  return REGISTRY_CHANGE_BY_PACKAGE_MANAGER.has(name) || name === COREPACK ? name : void 0;
+};
+var packageManagerRunFrom = (args, from) => {
+  const end = Math.min(args.length, from + REGISTRY_COMMAND_SPAN);
+  for (let index = from; index < end; index++) {
+    const word = args[index];
+    const name = word === void 0 ? void 0 : packageManagerNameOf(word);
+    if (name !== void 0) return { name, args: index + 1 };
+  }
+  return null;
+};
+var runChangesAPublishedPackage = (args, from, depth) => {
+  const inner = depth > MAX_PACKAGE_RUNNER_DEPTH ? null : packageManagerRunFrom(args, from);
+  return inner !== null && packageManagerChangesAPublishedPackage(inner.name, args, inner.args, depth);
+};
+var packageManagerChangesAPublishedPackage = (name, args, from, depth) => {
+  if (name === COREPACK) return runChangesAPublishedPackage(args, from, depth + 1);
+  const registryChange = REGISTRY_CHANGE_BY_PACKAGE_MANAGER.get(name);
+  if (registryChange === void 0) return false;
+  const options = PACKAGE_MANAGER_OPTIONS_WITH_A_VALUE.get(name) ?? NO_OPTIONS_WITH_A_VALUE;
+  return commandStartsAfterOptions(args, from, options).some((start) => {
+    const words = commandWordsFrom(args, start, options);
+    const [first] = words;
+    if (first !== void 0 && PACKAGE_MANAGER_RUNS_A_PACKAGE.has(first)) return runChangesAPublishedPackage(args, start + 1, depth + 1);
+    if (name === YARN && first === YARN_WORKSPACE) return registryChange.test(commandWordsFrom(args, start + 2, options).join(" "));
+    return registryChange.test(words.join(" "));
+  });
+};
+var changesAPublishedPackage = ({ program, args }) => {
+  const name = program === void 0 ? void 0 : packageManagerNameOf(program);
+  return name !== void 0 && packageManagerChangesAPublishedPackage(name, args, 0, 0);
+};
 var changesSomethingHostedElsewhere = (invocation) => githubCommandHasAConsequence(invocation) || writesThroughAServiceApi(invocation) || writesAHostedSecret(invocation) || sendsDataOffThisMachine(invocation) || copiesOntoAnotherMachine(invocation) || kubectlExecRunsMoreThanAReadOnlyCommand(invocation) || sshRunsMoreThanAReadOnlyCommand(invocation);
 var segmentWritesThroughARemoteApi = (segment, depth) => {
   const innermost = innermostInvocation(segment.invocation);
@@ -5770,14 +5994,34 @@ var honoursPreviewFlags = ({ program, args }) => {
 var onlyPreviews = (invocation) => invocation.program !== void 0 && honoursPreviewFlags(invocation) && invocation.args.some((arg) => !arg.expands && PREVIEW_FLAG.test(arg.text));
 var changesWhatIsDeployed = (toolName, invocation, normalized) => !onlyPreviews(invocation) && (changesProduction(invocation) || mergesAPullRequest(invocation) || isCoveredByPolicy(DEPLOY_AND_SCHEMA_COMMAND_PATTERNS, toolName, normalized));
 var releasesOrChangesACluster = (toolName, invocation, normalized) => !onlyPreviews(invocation) && (pushesATag(invocation) || publishesAnAppBuild(invocation) || RELEASE_AND_CLUSTER_PROGRAMS.has(basenameOf(invocation.program?.text ?? "")) && isCoveredByPolicy(RELEASE_AND_CLUSTER_COMMAND_PATTERNS, toolName, normalized));
-var invocationHasAConsequenceOnlyPermissionsOffAsksAbout = (toolName, invocation, normalized) => releasesOrChangesACluster(toolName, invocation, normalized) || mergesAPullRequestByAnyPath(invocation) || writesAFileThatNeedsAPerson(invocation) || changesWhereGitLooksForHooks(invocation) || setsAGitSettingThatRunsAProgram(invocation) || changesSomethingHostedElsewhere(invocation);
-var invocationHasAVisibleConsequence = (toolName, invocation, depth, line) => {
+var MAIL_TRANSFER_PROGRAMS = /* @__PURE__ */ new Set(["sendmail", "msmtp", "ssmtp"]);
+var MAIL_CLIENTS = /* @__PURE__ */ new Set(["mail", "mailx", "mutt", "s-nail", "nail"]);
+var MAIL_TRANSFER_MODE_THAT_ONLY_READS = /^(?:-b[ptv]|--help|--version|-V|--serverinfo|--pretend)$/;
+var EMAIL_ADDRESS = /^[^\s@]+@[^\s@]+$/;
+var ADDRESS_SEPARATOR = /[\s<>,;"'()]+/;
+var namesAnEmailAddress = (word) => word.text.includes("@") && word.text.split(ADDRESS_SEPARATOR).some((part) => EMAIL_ADDRESS.test(part));
+var sendsMail = ({ program, args }) => {
+  if (program === void 0) return false;
+  const name = basenameOf(program.text);
+  if (MAIL_TRANSFER_PROGRAMS.has(name)) return !args.some((arg) => MAIL_TRANSFER_MODE_THAT_ONLY_READS.test(arg.text));
+  return MAIL_CLIENTS.has(name) && args.some(namesAnEmailAddress);
+};
+var PROGRAMS_THAT_STOP_THE_MACHINE = /* @__PURE__ */ new Set(["shutdown", "reboot", "halt", "poweroff"]);
+var ONLY_DESCRIBES_ITSELF = /^--(?:help|version)$/;
+var SHUTDOWN = "shutdown";
+var CANCELS_A_SHUTDOWN = "-c";
+var stopsTheMachine = ({ program, args }) => {
+  const name = program === void 0 ? void 0 : basenameOf(program.text);
+  return name !== void 0 && PROGRAMS_THAT_STOP_THE_MACHINE.has(name) && !args.some((arg) => ONLY_DESCRIBES_ITSELF.test(arg.text)) && !(name === SHUTDOWN && args.some((arg) => arg.text === CANCELS_A_SHUTDOWN));
+};
+var invocationHasAConsequenceOnlyPermissionsOffAsksAbout = (toolName, invocation, normalized, reading) => releasesOrChangesACluster(toolName, invocation, normalized) || reading === "as_written" && changesAPublishedPackage(invocation) || mergesAPullRequestByAnyPath(invocation) || writesAFileThatNeedsAPerson(invocation) || changesWhereGitLooksForHooks(invocation) || setsAGitSettingThatRunsAProgram(invocation) || changesWhereGitSends(invocation) || gitSendsToAPlaceTheCommandNames(invocation) || changesSomethingHostedElsewhere(invocation) || sendsMail(invocation) || stopsTheMachine(invocation);
+var invocationHasAVisibleConsequence = (toolName, invocation, depth, line, reading = "as_written") => {
   if (depth > MAX_CONSEQUENCE_DEPTH) return true;
   if (invocation.program === void 0) return false;
   const normalized = quotedInvocation(invocation);
   const innermost = innermostInvocation(invocation);
   const script = shellScriptOf(invocation);
-  return classifyDecisionRisk(toolName, normalized) === "destructive" || changesWhatIsDeployed(toolName, invocation, normalized) || writesASecretFile(invocation) || line === "permissions_off" && invocationHasAConsequenceOnlyPermissionsOffAsksAbout(toolName, invocation, normalized) || losesDataVisibly(toolName, invocation, normalized, depth, line) || subcommandDestroysVisibly(invocation) || sqlClientChangesData(invocation) || innermost !== invocation && invocationHasAVisibleConsequence(toolName, innermost, depth, line) || script === null && passesAnInlineScript(invocation) || script !== null && commandHasAVisibleConsequenceAt(toolName, script, depth + 1, line) || readingsPastGlobalFlags(invocation).some((reading) => invocationHasAVisibleConsequence(toolName, reading, depth + 1, line));
+  return classifyDecisionRisk(toolName, normalized) === "destructive" || changesWhatIsDeployed(toolName, invocation, normalized) || writesASecretFile(invocation) || line === "permissions_off" && invocationHasAConsequenceOnlyPermissionsOffAsksAbout(toolName, invocation, normalized, reading) || losesDataVisibly(toolName, invocation, normalized, depth, line) || subcommandDestroysVisibly(invocation) || sqlClientChangesData(invocation) || innermost !== invocation && invocationHasAVisibleConsequence(toolName, innermost, depth, line) || script === null && passesAnInlineScript(invocation) || script !== null && commandHasAVisibleConsequenceAt(toolName, script, depth + 1, line) || readingsPastGlobalFlags(invocation).some((pastFlags) => invocationHasAVisibleConsequence(toolName, pastFlags, depth + 1, line, "past_global_flags"));
 };
 var RUNS_FETCHED_CODE = /(?:\$\(|`|<\()\s*(?:curl|wget)\b/;
 var RUNS_DECODED_CODE = /(?:^|[;&|(\s])(?:bash|sh|zsh|source|\.|python3?|node|ruby|perl)\s+(?:-[A-Za-z]+\s+)*["']?(?:<\(|\$\()[^)]*\b(?:base64|xxd|openssl)\b/;

package/dist/{chunk-QCEY7TSX.js → chunk-4JUQ74CG.js}

@@ -1,12 +1,12 @@
 import {
   findNativeClaudeInstall
-} from "./chunk-NI3NSURQ.js";
+} from "./chunk-UPQE4YPM.js";
 import {
   parseVersion
-} from "./chunk-6CDA4R5L.js";
+} from "./chunk-GKNTNKVQ.js";
 import {
   isRecord
-} from "./chunk-WOFHN2IZ.js";
+} from "./chunk-4FAJQPFY.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-CB2RYMAO.js → chunk-4QO267OY.js}

@@ -2,7 +2,7 @@ import {
   localRepoKey,
   normalizeRepoRemote,
   parseGitBranch
-} from "./chunk-WOFHN2IZ.js";
+} from "./chunk-4FAJQPFY.js";
 
 // src/repo.ts
 import { existsSync, readFileSync, statSync } from "fs";

package/dist/{chunk-R7D3PH2M.js → chunk-4TLE7CSQ.js}

@@ -1,19 +1,19 @@
 import {
   APPROVAL_RULES_PATH,
   canChangeApprovalSettings
-} from "./chunk-VVHNHETX.js";
+} from "./chunk-ACVL2MHG.js";
 import {
   callMcpTool
-} from "./chunk-E5WUBHVH.js";
+} from "./chunk-VMXY3PAT.js";
 import {
   absoluteUrl
-} from "./chunk-OW4WEO56.js";
+} from "./chunk-O35JKL4T.js";
 import {
   getBaseUrl
-} from "./chunk-RZD7ULBJ.js";
+} from "./chunk-KOUB4ZLX.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-CMDIKFVL.js";
+} from "./chunk-PWGD5EP6.js";
 import {
   AGENT_STOP_DEFAULT_SECONDS,
   APPROVAL_MODE_META,
@@ -21,7 +21,7 @@ import {
   classifyConfirmResponse,
   isAnswerSource,
   roundTripAsk
-} from "./chunk-WOFHN2IZ.js";
+} from "./chunk-4FAJQPFY.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-RRA6POT5.js → chunk-4TVLPGJV.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-WOFHN2IZ.js";
+} from "./chunk-4FAJQPFY.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-ORVMA5KJ.js → chunk-5PW25NHB.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-5YRDZE5F.js";
+} from "./chunk-WVAJSBI2.js";
 import {
   parseFlags
 } from "./chunk-NMUI3ZWG.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-PPY5N2E6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-CMDIKFVL.js";
+} from "./chunk-PWGD5EP6.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-WOFHN2IZ.js";
+} from "./chunk-4FAJQPFY.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";