@pushary/agent-hooks 0.82.0 → 0.83.1

package/dist/bin/pushary-bell-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-DNFYUBRP.js";
-import "../chunk-E6I3DBJW.js";
+} from "../chunk-UAWTJMXA.js";
+import "../chunk-RZP3Z2WR.js";
 import "../chunk-6MTNS63X.js";
 import "../chunk-BC3VCZ3E.js";
-import "../chunk-PPD3HHNJ.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-BT7NTTIW.js";
+import "../chunk-QA5HP7CR.js";
 import "../chunk-2UMNXADU.js";
 
 // bin/pushary-bell-hook.ts

package/dist/bin/pushary-bell.js

@@ -5,14 +5,14 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-DNFYUBRP.js";
+} from "../chunk-UAWTJMXA.js";
 import {
   claudeSettings
-} from "../chunk-Q4QULGAV.js";
+} from "../chunk-O55DONTG.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
-import "../chunk-E6I3DBJW.js";
+import "../chunk-RZP3Z2WR.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -21,9 +21,9 @@ import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-BC3VCZ3E.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/bin/pushary-claude.js

@@ -3,7 +3,7 @@ import {
   KILL_REASON,
   isDeferAnswer,
   resolveGate
-} from "../chunk-PVSCRRPA.js";
+} from "../chunk-FFT7L2VE.js";
 import {
   askUser,
   cancelQuestion,
@@ -15,14 +15,14 @@ import {
   reportEvent,
   scopePathFor,
   waitForAnswer
-} from "../chunk-FVVJ3FOW.js";
+} from "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
 import {
   redactSecrets
-} from "../chunk-T6BNEQ2A.js";
+} from "../chunk-QA5HP7CR.js";
 import {
   needsShell,
   spawnClaude

package/dist/bin/pushary-clean.js

@@ -4,14 +4,14 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-WYVKPLVT.js";
+} from "../chunk-HKKERYZP.js";
 import {
   removeGeminiSettings
-} from "../chunk-7DYFAM32.js";
+} from "../chunk-DMKSHZKF.js";
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-R6AYBATA.js";
+} from "../chunk-U752S5RE.js";
 import {
   claudeJson,
   claudeSettings,
@@ -29,7 +29,7 @@ import {
   pusharyDir,
   removeCodexHooks,
   vscodePluginDir
-} from "../chunk-Q4QULGAV.js";
+} from "../chunk-O55DONTG.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -37,7 +37,7 @@ import {
   removeClaudeAlias
 } from "../chunk-BC3VCZ3E.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import {
   execNpm
 } from "../chunk-MUEW424A.js";

package/dist/bin/pushary-codex-hook.js

@@ -2,13 +2,13 @@
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-MHA2WB7S.js";
+} from "../chunk-2R63XKLG.js";
 import {
   KILL_REASON,
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-PVSCRRPA.js";
+} from "../chunk-FFT7L2VE.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -39,17 +39,17 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   waitForAnswer
-} from "../chunk-FVVJ3FOW.js";
+} from "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-T6BNEQ2A.js";
+} from "../chunk-QA5HP7CR.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -142,7 +142,11 @@ var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode) => {
     intent: readLastPrompt(input.session_id || DEFAULT_SESSION),
     action: description.slice(0, DECISION_LINE_MAX),
     blocker: deriveBlocker(mode),
-    actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {})
+    actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {}),
+    // Codex has always sent this; it is what claimNotify and markApproved already
+    // key on locally. Passing it through lets the server collapse a retried create
+    // the same way, instead of putting the same approval on the phone twice.
+    toolUseId: input.tool_use_id
   });
   if (result.suppressed || result.noDevices) {
     return {

package/dist/bin/pushary-codex.js

@@ -3,12 +3,12 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-FVVJ3FOW.js";
+} from "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-connect.js

@@ -3,20 +3,20 @@ import {
   confirmAppConnection,
   connectDevice,
   printConnectInstructions
-} from "../chunk-DFTD6W5B.js";
+} from "../chunk-7GTDHV7O.js";
 import "../chunk-3EGEA4KH.js";
 import {
   printKeyCheck
-} from "../chunk-MWZZ5G7B.js";
+} from "../chunk-3JDIGKPV.js";
 import {
   checkApiKey
-} from "../chunk-EBP4YG75.js";
+} from "../chunk-CXGJTN74.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   readKeySource
-} from "../chunk-E6I3DBJW.js";
+} from "../chunk-RZP3Z2WR.js";
 import "../chunk-6MTNS63X.js";
 import {
   parseFlags
@@ -24,11 +24,11 @@ import {
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/bin/pushary-doctor.js

@@ -6,7 +6,7 @@ import {
   claudeWired,
   codexWired,
   geminiWired
-} from "../chunk-UBUPETEQ.js";
+} from "../chunk-V6MCBCUC.js";
 import {
   agentProbes,
   detectAgent,
@@ -15,12 +15,12 @@ import {
   isDetected,
   isPluginRegistered,
   vscodeSettingsTargets
-} from "../chunk-WYVKPLVT.js";
+} from "../chunk-HKKERYZP.js";
 import {
   GEMINI_HOOK_BINARY,
   hasGeminiHooks,
   missingGeminiHookEvents
-} from "../chunk-7DYFAM32.js";
+} from "../chunk-DMKSHZKF.js";
 import {
   claudeJson,
   claudeSettings,
@@ -39,29 +39,29 @@ import {
   readCodexMcpAuth,
   untrustedCodexHookEvents,
   vscodePluginDir
-} from "../chunk-Q4QULGAV.js";
+} from "../chunk-O55DONTG.js";
 import {
   readLedgerSummary
-} from "../chunk-MHA2WB7S.js";
+} from "../chunk-2R63XKLG.js";
 import {
   describeReach,
   describeRoundTrip,
   fetchChannels,
   reachVerdict,
   verifyRoundTrip
-} from "../chunk-DFTD6W5B.js";
+} from "../chunk-7GTDHV7O.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-EBP4YG75.js";
+} from "../chunk-CXGJTN74.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   keyPrefix,
   readKeySource
-} from "../chunk-E6I3DBJW.js";
+} from "../chunk-RZP3Z2WR.js";
 import "../chunk-6MTNS63X.js";
 import {
   parseFlags
@@ -72,11 +72,11 @@ import {
   sendMcpRequest
 } from "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import {
   execNpm
 } from "../chunk-MUEW424A.js";

package/dist/bin/pushary-gemini-hook.js

@@ -2,13 +2,13 @@
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-MHA2WB7S.js";
+} from "../chunk-2R63XKLG.js";
 import {
   KILL_REASON,
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-PVSCRRPA.js";
+} from "../chunk-FFT7L2VE.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -30,17 +30,17 @@ import {
   scopePathFor,
   sendNotification,
   waitForAnswer
-} from "../chunk-FVVJ3FOW.js";
+} from "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-T6BNEQ2A.js";
+} from "../chunk-QA5HP7CR.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-hook.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-JU72KNUB.js";
-import "../chunk-R6AYBATA.js";
-import "../chunk-MHA2WB7S.js";
-import "../chunk-PVSCRRPA.js";
-import "../chunk-FVVJ3FOW.js";
+} from "../chunk-E7YX7CTM.js";
+import "../chunk-U752S5RE.js";
+import "../chunk-2R63XKLG.js";
+import "../chunk-FFT7L2VE.js";
+import "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import "../chunk-RN3NOEJF.js";
 import {
   exitOnHelpFlag

package/dist/bin/pushary-login.js

@@ -6,27 +6,27 @@ import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-EBP4YG75.js";
+} from "../chunk-CXGJTN74.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   readKeySource,
   writeKey
-} from "../chunk-E6I3DBJW.js";
+} from "../chunk-RZP3Z2WR.js";
 import "../chunk-6MTNS63X.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "../chunk-T6BNEQ2A.js";
+} from "../chunk-QA5HP7CR.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/bin/pushary-logout.js

@@ -4,24 +4,24 @@ import {
   codexConfigToml,
   cursorUserMcp,
   geminiSettings
-} from "../chunk-Q4QULGAV.js";
+} from "../chunk-O55DONTG.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   clearKey,
   readKeySource
-} from "../chunk-E6I3DBJW.js";
+} from "../chunk-RZP3Z2WR.js";
 import "../chunk-6MTNS63X.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-BC3VCZ3E.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/bin/pushary-mode.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   exitOnFailedResponse
-} from "../chunk-MWZZ5G7B.js";
-import "../chunk-EBP4YG75.js";
+} from "../chunk-3JDIGKPV.js";
+import "../chunk-CXGJTN74.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -13,7 +13,7 @@ import "../chunk-SAF6HGAA.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/bin/pushary-notification-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-FVVJ3FOW.js";
+} from "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-JU72KNUB.js";
-import "../chunk-R6AYBATA.js";
-import "../chunk-MHA2WB7S.js";
-import "../chunk-PVSCRRPA.js";
-import "../chunk-FVVJ3FOW.js";
+} from "../chunk-E7YX7CTM.js";
+import "../chunk-U752S5RE.js";
+import "../chunk-2R63XKLG.js";
+import "../chunk-FFT7L2VE.js";
+import "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-permission-hook.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-JU72KNUB.js";
-import "../chunk-R6AYBATA.js";
-import "../chunk-MHA2WB7S.js";
-import "../chunk-PVSCRRPA.js";
-import "../chunk-FVVJ3FOW.js";
+} from "../chunk-E7YX7CTM.js";
+import "../chunk-U752S5RE.js";
+import "../chunk-2R63XKLG.js";
+import "../chunk-FFT7L2VE.js";
+import "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-post-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-FVVJ3FOW.js";
+} from "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-prompt-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-FVVJ3FOW.js";
+} from "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-session-end-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-FVVJ3FOW.js";
+} from "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-session-start-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-FVVJ3FOW.js";
+} from "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-setup.js

@@ -3,7 +3,7 @@ import {
   claudeWired,
   codexWired,
   geminiWired
-} from "../chunk-UBUPETEQ.js";
+} from "../chunk-V6MCBCUC.js";
 import {
   runBrowserLogin
 } from "../chunk-Z3Z4VK5F.js";
@@ -18,17 +18,17 @@ import {
   shortenHome,
   vscodeSettingsTargets,
   writeInstructionBlock
-} from "../chunk-WYVKPLVT.js";
+} from "../chunk-HKKERYZP.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
   addGeminiMcpServer
-} from "../chunk-7DYFAM32.js";
+} from "../chunk-DMKSHZKF.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-R6AYBATA.js";
+} from "../chunk-U752S5RE.js";
 import {
   addCodexHookTrust,
   addCodexHooks,
@@ -46,10 +46,10 @@ import {
   geminiSettings,
   pusharyConfigFile,
   vscodePluginDir
-} from "../chunk-Q4QULGAV.js";
+} from "../chunk-O55DONTG.js";
 import {
   reportEvent
-} from "../chunk-FVVJ3FOW.js";
+} from "../chunk-C4SQY777.js";
 import {
   confirmAppConnection,
   connectDevice,
@@ -58,12 +58,12 @@ import {
   printConnectInstructions,
   setHumanStream,
   verifyRoundTrip
-} from "../chunk-DFTD6W5B.js";
+} from "../chunk-7GTDHV7O.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-EBP4YG75.js";
+} from "../chunk-CXGJTN74.js";
 import {
   useColor
 } from "../chunk-5RUIFDTP.js";
@@ -74,7 +74,7 @@ import {
   readConfigFileKey,
   readKeySource,
   writeKey
-} from "../chunk-E6I3DBJW.js";
+} from "../chunk-RZP3Z2WR.js";
 import {
   backupFile,
   readJsonSafe,
@@ -90,13 +90,13 @@ import {
 } from "../chunk-BC3VCZ3E.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "../chunk-T6BNEQ2A.js";
+} from "../chunk-QA5HP7CR.js";
 import {
   installGlobally,
   npmErrorMessage,

package/dist/bin/pushary-stats.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   readLedgerSummary
-} from "../chunk-MHA2WB7S.js";
-import "../chunk-T6BNEQ2A.js";
+} from "../chunk-2R63XKLG.js";
+import "../chunk-QA5HP7CR.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/bin/pushary-status.js

@@ -3,18 +3,18 @@ import {
   describeReach,
   fetchChannels,
   reachVerdict
-} from "../chunk-DFTD6W5B.js";
+} from "../chunk-7GTDHV7O.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-EBP4YG75.js";
+} from "../chunk-CXGJTN74.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   readKeySource
-} from "../chunk-E6I3DBJW.js";
+} from "../chunk-RZP3Z2WR.js";
 import "../chunk-6MTNS63X.js";
 import {
   rejectUnknownFlags
@@ -22,11 +22,11 @@ import {
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import {
   describeLastSeen,
   listMachines

package/dist/bin/pushary-stop-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-FVVJ3FOW.js";
+} from "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-FVVJ3FOW.js";
+} from "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-upgrade.js

@@ -4,12 +4,12 @@ import {
   addGeminiHooks,
   addGeminiMcpServer,
   hasGeminiHooks
-} from "../chunk-7DYFAM32.js";
+} from "../chunk-DMKSHZKF.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-R6AYBATA.js";
+} from "../chunk-U752S5RE.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -23,11 +23,11 @@ import {
   hasCodexHooks,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-Q4QULGAV.js";
+} from "../chunk-O55DONTG.js";
 import {
   readJsonSafe
 } from "../chunk-6MTNS63X.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import {
   execNpm,
   npmErrorMessage,

package/dist/bin/pushary-wait.js

@@ -4,8 +4,8 @@ import {
 } from "../chunk-IIENZE2J.js";
 import {
   exitOnFailedResponse
-} from "../chunk-MWZZ5G7B.js";
-import "../chunk-EBP4YG75.js";
+} from "../chunk-3JDIGKPV.js";
+import "../chunk-CXGJTN74.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -16,7 +16,7 @@ import "../chunk-SAF6HGAA.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import {
   exitOnHelpFlag
 } from "../chunk-RRZZ7TFJ.js";

package/dist/{chunk-MHA2WB7S.js → chunk-2R63XKLG.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-T6BNEQ2A.js";
+} from "./chunk-QA5HP7CR.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-MWZZ5G7B.js → chunk-3JDIGKPV.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-EBP4YG75.js";
+} from "./chunk-CXGJTN74.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-DFTD6W5B.js → chunk-7GTDHV7O.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-BSZYIAZL.js";
 import {
   reportedInstallSource
-} from "./chunk-PPD3HHNJ.js";
+} from "./chunk-BT7NTTIW.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {
@@ -691,10 +691,15 @@ var buildPairLinks = (pairId, publicKeyB64, baseUrl = apiBase(), code = null) =>
   const id = encodeURIComponent(pairId);
   const pk = encodeURIComponent(publicKeyB64);
   const origin = baseUrl.replace(/\/+$/, "");
+  const longLink = `${origin}/pair?id=${id}&pk=${pk}`;
   return {
-    // 33 characters against 114, so 16 rows of QR against 22. Without a code this
-    // is the exact URL every published CLI already encodes.
-    universalLink: code ? `${origin}/pair/${encodeURIComponent(code)}` : `${origin}/pair?id=${id}&pk=${pk}`,
+    // Never shortened. Both scanners have to read this one: the phone camera,
+    // which opens it, and the app's own scanner, which parses id and pk straight
+    // off it and cannot resolve a code. 22 rows of QR instead of 16 is the price
+    // of the in-app scan button working at all.
+    qrLink: longLink,
+    // 33 characters against 114, for the person reading it off the screen.
+    universalLink: code ? `${origin}/pair/${encodeURIComponent(code)}` : longLink,
     // Never shortened: the scheme reaches an installed app with no server round
     // trip, which is the path that has to survive the short code failing.
     deepLink: `pushary://pair?pk=${pk}&id=${id}`
@@ -708,11 +713,11 @@ var connectViaAppPairing = async (options = {}) => {
     return null;
   }
   const { pairId, code } = started;
-  const { universalLink, deepLink } = buildPairLinks(pairId, keypair.publicKeyB64, apiBase(), code);
+  const { qrLink, universalLink, deepLink } = buildPairLinks(pairId, keypair.publicKeyB64, apiBase(), code);
   console.log();
   console.log(`  ${bold("Connect your Pushary app")}`);
   console.log(`  ${dim("Scan this with your phone camera:")}`);
-  await printQr(universalLink);
+  await printQr(qrLink);
   console.log(`  ${dim("No camera handy? Open this on the phone instead:")}`);
   console.log(`  ${cyan(universalLink)}`);
   console.log(`  ${dim("Confirm the app shows fingerprint")} ${cyan(publicKeyFingerprint(keypair.publicKeyB64))}`);

package/dist/{chunk-PPD3HHNJ.js → chunk-BT7NTTIW.js}

@@ -1,6 +1,6 @@
 import {
   normalizeInstallSource
-} from "./chunk-T6BNEQ2A.js";
+} from "./chunk-QA5HP7CR.js";
 import {
   configFilePath
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-FVVJ3FOW.js → chunk-C4SQY777.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-SAF6HGAA.js";
 import {
   reportedInstallSource
-} from "./chunk-PPD3HHNJ.js";
+} from "./chunk-BT7NTTIW.js";
 import {
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
@@ -23,7 +23,7 @@ import {
   policyArgForms,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-T6BNEQ2A.js";
+} from "./chunk-QA5HP7CR.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";

package/dist/{chunk-EBP4YG75.js → chunk-CXGJTN74.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "./chunk-T6BNEQ2A.js";
+} from "./chunk-QA5HP7CR.js";
 import {
   getBaseUrl
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-7DYFAM32.js → chunk-DMKSHZKF.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-T6BNEQ2A.js";
+} from "./chunk-QA5HP7CR.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-JU72KNUB.js → chunk-E7YX7CTM.js}

@@ -1,15 +1,15 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS
-} from "./chunk-R6AYBATA.js";
+} from "./chunk-U752S5RE.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-MHA2WB7S.js";
+} from "./chunk-2R63XKLG.js";
 import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "./chunk-PVSCRRPA.js";
+} from "./chunk-FFT7L2VE.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -29,13 +29,13 @@ import {
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-FVVJ3FOW.js";
+} from "./chunk-C4SQY777.js";
 import {
   buildDecisionEpisodeFeatures,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "./chunk-T6BNEQ2A.js";
+} from "./chunk-QA5HP7CR.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";
@@ -273,7 +273,11 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
     actionBody: deriveActionBody(input.tool_name, input.tool_input),
     // Only when the breach is what caused the question, so an ordinary approval
     // can never silently widen a scope.
-    scopePath: scopeReason ? scopePath : void 0
+    scopePath: scopeReason ? scopePath : void 0,
+    // The gate asks at most one question per tool call, so the runtime's id needs
+    // no suffix here. Absent on runtimes that do not send one, and the server then
+    // creates a fresh decision exactly as before.
+    toolUseId: input.tool_use_id
   };
   const signals = {};
   const runHandler = () => {
@@ -386,7 +390,11 @@ var handleAskUserQuestion = async (apiKey, input) => {
         agentName: `Claude Code - ${projectName}`,
         sessionId: input.session_id,
         machineId: getMachineId(),
-        toolName: "AskUserQuestion"
+        toolName: "AskUserQuestion",
+        // One AskUserQuestion call raises several questions, and their payload
+        // fingerprints are identical (same tool, no target, no body). Without the
+        // index they would all collapse onto the first decision.
+        toolUseId: input.tool_use_id ? `${input.tool_use_id}#q${index}` : void 0
       });
     } catch {
       return void 0;
@@ -561,7 +569,11 @@ var handlePermissionDenied = async (input) => {
         agentName: `Claude Code - ${projectName}`,
         sessionId: input.session_id,
         machineId: getMachineId(),
-        toolName: input.tool_name
+        toolName: input.tool_name,
+        // Suffixed because the PreToolUse gate may already have asked about this
+        // same tool call. Without it, the retry prompt would collide with that
+        // decision and hand back its answer instead of asking a new question.
+        toolUseId: input.tool_use_id ? `${input.tool_use_id}#retry` : void 0
       });
     } catch {
       return void 0;

package/dist/{chunk-PVSCRRPA.js → chunk-FFT7L2VE.js}

@@ -4,12 +4,12 @@ import {
   isModeStateDegraded,
   resolveAutoResolveOrigin,
   resolvePolicyAcross
-} from "./chunk-FVVJ3FOW.js";
+} from "./chunk-C4SQY777.js";
 import {
   evaluateScope,
   scopeChangeReason,
   scopeRequiresHuman
-} from "./chunk-T6BNEQ2A.js";
+} from "./chunk-QA5HP7CR.js";
 
 // src/answer.ts
 var denyReasonFrom = (value, note) => {

package/dist/{chunk-WYVKPLVT.js → chunk-HKKERYZP.js}

@@ -1,6 +1,6 @@
 import {
   codexHomeFrom
-} from "./chunk-Q4QULGAV.js";
+} from "./chunk-O55DONTG.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-Q4QULGAV.js → chunk-O55DONTG.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-T6BNEQ2A.js";
+} from "./chunk-QA5HP7CR.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";

package/dist/{chunk-E6I3DBJW.js → chunk-RZP3Z2WR.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-BC3VCZ3E.js";
 import {
   resolveInstallSourceFor
-} from "./chunk-PPD3HHNJ.js";
+} from "./chunk-BT7NTTIW.js";
 import {
   configFilePath
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-R6AYBATA.js → chunk-U752S5RE.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-T6BNEQ2A.js";
+} from "./chunk-QA5HP7CR.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-DNFYUBRP.js → chunk-UAWTJMXA.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-E6I3DBJW.js";
+} from "./chunk-RZP3Z2WR.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-UBUPETEQ.js → chunk-V6MCBCUC.js}

@@ -1,9 +1,9 @@
 import {
   hasGeminiHooks
-} from "./chunk-7DYFAM32.js";
+} from "./chunk-DMKSHZKF.js";
 import {
   hasCodexHooks
-} from "./chunk-Q4QULGAV.js";
+} from "./chunk-O55DONTG.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/src/index.d.ts

@@ -7,6 +7,7 @@ interface ToolInput {
     session_id?: string;
     cwd?: string;
     transcript_path?: string;
+    tool_use_id?: string;
     permission_mode?: string;
 }
 interface HookOutput {
@@ -137,6 +138,7 @@ interface AskUserParams {
     blocker?: string;
     actionBody?: string;
     scopePath?: string;
+    toolUseId?: string;
 }
 interface AskUserResponse {
     correlationId: string;

package/dist/src/index.js

@@ -1,9 +1,9 @@
 import {
   handlePreToolUse
-} from "../chunk-JU72KNUB.js";
-import "../chunk-R6AYBATA.js";
-import "../chunk-MHA2WB7S.js";
-import "../chunk-PVSCRRPA.js";
+} from "../chunk-E7YX7CTM.js";
+import "../chunk-U752S5RE.js";
+import "../chunk-2R63XKLG.js";
+import "../chunk-FFT7L2VE.js";
 import {
   askUser,
   cancelQuestion,
@@ -16,12 +16,12 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-FVVJ3FOW.js";
+} from "../chunk-C4SQY777.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-PPD3HHNJ.js";
+import "../chunk-BT7NTTIW.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-T6BNEQ2A.js";
+import "../chunk-QA5HP7CR.js";
 import "../chunk-RN3NOEJF.js";
 import {
   getApiKey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.82.0",
+  "version": "0.83.1",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",