@pushary/agent-hooks 0.89.12 → 0.90.0

package/dist/bin/pushary-upgrade.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import {
   reapplyAllAgents
-} from "../chunk-7HYJPOGG.js";
-import "../chunk-NBRM3FMD.js";
+} from "../chunk-BQBEH6TV.js";
+import "../chunk-H2QZRQR2.js";
 import {
   waitForMachineReadiness
-} from "../chunk-DHR4F2CR.js";
-import "../chunk-NESKLV6R.js";
-import "../chunk-6V7ZDH3A.js";
-import "../chunk-KVHP5ZME.js";
-import "../chunk-VF3RTVWY.js";
+} from "../chunk-7TPQEWUZ.js";
+import "../chunk-DZDI62LY.js";
+import "../chunk-GL3FFM7A.js";
+import "../chunk-2LAHXHBR.js";
+import "../chunk-EZIEXHYM.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
@@ -20,7 +20,7 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-PS7DQ2SU.js";
+} from "../chunk-F2ICEWZL.js";
 import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
@@ -34,32 +34,32 @@ import {
   npmErrorMessage,
   resolveGlobalBinary
 } from "../chunk-L4ZCFMWW.js";
-import "../chunk-5NDB3YOE.js";
+import "../chunk-54ELC7D7.js";
 import {
   claudeJson,
   codexConfigToml,
   cursorPluginDir,
   geminiSettings,
   vscodePluginDir
-} from "../chunk-OVEGEQSB.js";
+} from "../chunk-KUZWXPUS.js";
 import {
   exitOnHelpFlag
-} from "../chunk-OTPJ4FUR.js";
-import "../chunk-RLQWNEPM.js";
+} from "../chunk-BVBEURWJ.js";
+import "../chunk-43GMYSS4.js";
 import {
   isNewerVersion
 } from "../chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "../chunk-RNKPLUWC.js";
+} from "../chunk-OSALSIUF.js";
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-XREW7RQ3.js";
+import "../chunk-JW4KO5AF.js";
 import "../chunk-4LL6LG5X.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
-import "../chunk-3MCEES6Z.js";
+import "../chunk-VNMKIJZB.js";
 
 // bin/pushary-upgrade.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-wait.js

@@ -4,8 +4,8 @@ import {
 } from "../chunk-IIENZE2J.js";
 import {
   exitOnFailedResponse
-} from "../chunk-327YMKP5.js";
-import "../chunk-Y4WVZIEI.js";
+} from "../chunk-DYP6SMOR.js";
+import "../chunk-AJYV3VGU.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -14,8 +14,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-OTPJ4FUR.js";
-import "../chunk-RLQWNEPM.js";
+} from "../chunk-BVBEURWJ.js";
+import "../chunk-43GMYSS4.js";
 import "../chunk-DINDL2CF.js";
 import "../chunk-SAF6HGAA.js";
 import {
@@ -28,7 +28,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-3MCEES6Z.js";
+import "../chunk-VNMKIJZB.js";
 
 // bin/pushary-wait.ts
 exitOnHelpFlag("wait");

package/dist/bin/pushary.js

@@ -3,7 +3,7 @@ import {
   COMMANDS,
   isCommandName,
   renderHelp
-} from "../chunk-RLQWNEPM.js";
+} from "../chunk-43GMYSS4.js";
 import {
   getPackageVersion
 } from "../chunk-DINDL2CF.js";
@@ -33,7 +33,8 @@ var LOADERS = {
   stats: () => import("./pushary-stats.js"),
   suggestions: () => import("./pushary-suggestions.js"),
   upgrade: () => import("./pushary-upgrade.js"),
-  hook: () => import("./pushary-hook.js")
+  hook: () => import("./pushary-hook.js"),
+  transcripts: () => import("./pushary-transcripts.js")
 };
 installProxyDispatcher();
 var argv = process.argv.slice(2);

package/dist/{chunk-KVHP5ZME.js → chunk-2LAHXHBR.js}

@@ -1,6 +1,6 @@
 import {
   ASKED_IN_EVERY_MODE_TOOLS
-} from "./chunk-3MCEES6Z.js";
+} from "./chunk-VNMKIJZB.js";
 
 // src/claude-tools.ts
 var PRETOOLUSE_GATED_TOOLS = [

package/dist/{chunk-RLQWNEPM.js → chunk-43GMYSS4.js}

@@ -69,6 +69,16 @@ var COMMAND_LIST = [
     name: "hook",
     module: "pushary-hook",
     summary: "Run as a PreToolUse hook (reads stdin, writes stdout)"
+  },
+  {
+    name: "transcripts",
+    module: "pushary-transcripts",
+    summary: "Show or re-trust the keys this machine seals transcripts to",
+    detail: [
+      "Sync stops if the phone key or the compliance recovery key changes, because a",
+      "change is either your reinstall or a server handing itself a copy. Compare the",
+      "fingerprint with the app under Settings, then accept it with --rotate."
+    ]
   }
 ];
 var COMMANDS = COMMAND_LIST;
@@ -79,6 +89,10 @@ var COMMAND_OPTIONS = {
     ["--dry-run", "List everything it would remove and change nothing"],
     ["--yes", "Remove everything without asking"]
   ],
+  transcripts: [
+    ["status", "Show the pinned keys and their fingerprints (default)"],
+    ["trust --rotate", "Accept the keys the server is offering now and resume syncing"]
+  ],
   mode: [
     ["<mode>", "One of: push_only, push_first, terminal_only, notify_only"],
     ["status", "Show the current override"],
@@ -135,6 +149,7 @@ var SETUP_OPTIONS = [
   ["--control auto|on|off", "Manage phone-start automatically (default), require it, or disable its background service"],
   ["--transcripts on|off", "Enable or disable encrypted transcript sync on this machine"],
   ["--skip-phone", "Skip the phone connect step"],
+  ["--take-over-hooks", "Replace hooks the Pushary Mac app owns with the CLI's. Without it the app's wiring is kept"],
   ["--verify roundtrip", "Send a real question and wait for you to answer it (default when a human is present)"],
   ["--verify push", "Only prove a notification was delivered. Automatic when nobody is at the terminal"],
   ["--verify none", "Skip the final check entirely"],

package/dist/{chunk-5NDB3YOE.js → chunk-54ELC7D7.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-OVEGEQSB.js";
+} from "./chunk-KUZWXPUS.js";
 import {
   writeFileAtomic
 } from "./chunk-4LL6LG5X.js";

package/dist/{chunk-VPLQFXCH.js → chunk-5NAZ7SFS.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-RNKPLUWC.js";
+} from "./chunk-OSALSIUF.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/chunk-7FE2KABY.js

@@ -0,0 +1,156 @@
+import {
+  redactSecrets
+} from "./chunk-VNMKIJZB.js";
+
+// src/crypto.ts
+import nacl from "tweetnacl";
+var EPH_PUB_LEN = nacl.box.publicKeyLength;
+var BOX_NONCE_LEN = nacl.box.nonceLength;
+var SECRETBOX_NONCE_LEN = nacl.secretbox.nonceLength;
+var SESSION_KEY_LEN = nacl.secretbox.keyLength;
+var toBase64 = (bytes) => Buffer.from(bytes).toString("base64");
+var fromBase64 = (value) => new Uint8Array(Buffer.from(value, "base64"));
+var utf8Encode = (text) => new Uint8Array(Buffer.from(text, "utf-8"));
+var decodePublicKey = (value) => fromBase64(value);
+var generateSessionKey = () => nacl.randomBytes(SESSION_KEY_LEN);
+var wrapSessionKey = (sessionKey, accountPublicKey) => {
+  const ephemeral = nacl.box.keyPair();
+  const nonce = nacl.randomBytes(BOX_NONCE_LEN);
+  const box = nacl.box(sessionKey, nonce, accountPublicKey, ephemeral.secretKey);
+  const bundle = new Uint8Array(EPH_PUB_LEN + BOX_NONCE_LEN + box.length);
+  bundle.set(ephemeral.publicKey, 0);
+  bundle.set(nonce, EPH_PUB_LEN);
+  bundle.set(box, EPH_PUB_LEN + BOX_NONCE_LEN);
+  return toBase64(bundle);
+};
+var encryptRecord = (plaintext, sessionKey) => {
+  const nonce = nacl.randomBytes(SECRETBOX_NONCE_LEN);
+  const box = nacl.secretbox(utf8Encode(plaintext), nonce, sessionKey);
+  const bundle = new Uint8Array(SECRETBOX_NONCE_LEN + box.length);
+  bundle.set(nonce, 0);
+  bundle.set(box, SECRETBOX_NONCE_LEN);
+  return toBase64(bundle);
+};
+
+// src/transcript-capture.ts
+import { createHmac } from "crypto";
+
+// src/transcript-budget.ts
+var CIPHERTEXT_BUDGET_CHARS = 64 * 1024;
+var SECRETBOX_OVERHEAD_BYTES = 24 + 16;
+var MAX_PLAINTEXT_BYTES = Math.floor(CIPHERTEXT_BUDGET_CHARS / 4) * 3 - SECRETBOX_OVERHEAD_BYTES;
+var MIN_KEEP_CHARS = 200;
+var note = (dropped) => `
+[Pushary truncated ${dropped} bytes to fit the transcript size limit]`;
+var stringSlots = (value, out = []) => {
+  if (Array.isArray(value)) {
+    value.forEach((inner, index) => {
+      if (typeof inner === "string") {
+        out.push({ get: () => value[index], set: (v) => {
+          value[index] = v;
+        } });
+      } else {
+        stringSlots(inner, out);
+      }
+    });
+  } else if (value && typeof value === "object") {
+    const object = value;
+    for (const key of Object.keys(object)) {
+      const inner = object[key];
+      if (typeof inner === "string") {
+        out.push({ get: () => object[key], set: (v) => {
+          object[key] = v;
+        } });
+      } else {
+        stringSlots(inner, out);
+      }
+    }
+  }
+  return out;
+};
+var jsonBytes = (value) => Buffer.byteLength(JSON.stringify(value), "utf-8");
+var fitWithinPlaintextBudget = (record, budget = MAX_PLAINTEXT_BYTES) => {
+  if (jsonBytes(record) <= budget) return false;
+  const slots = stringSlots(record).map((slot) => ({
+    slot,
+    originalBytes: Buffer.byteLength(slot.get(), "utf-8")
+  }));
+  if (slots.length === 0) return false;
+  let truncated = false;
+  for (let pass = 0; pass < 64 && jsonBytes(record) > budget; pass += 1) {
+    let worst = slots[0];
+    for (const candidate of slots) {
+      if (candidate.slot.get().length > worst.slot.get().length) worst = candidate;
+    }
+    const current = worst.slot.get();
+    const keep = Math.max(MIN_KEEP_CHARS, Math.floor(current.length / 2));
+    const kept = current.slice(0, keep);
+    const replacement = kept + note(worst.originalBytes - Buffer.byteLength(kept, "utf-8"));
+    if (replacement.length >= current.length) break;
+    worst.slot.set(replacement);
+    truncated = true;
+  }
+  return truncated;
+};
+
+// src/transcript-capture.ts
+var INTERNAL_TYPES = /* @__PURE__ */ new Set([
+  "file-history-snapshot",
+  "change",
+  "queue-operation",
+  "summary",
+  "last-prompt",
+  "mode",
+  "permission-mode",
+  "atis-latch",
+  "frame-link",
+  "cost-state",
+  "agent-name",
+  "bridge-session",
+  "artifact-autoreact-ledger",
+  "artifact-comment-monitor"
+]);
+var redactDeep = (value) => {
+  if (typeof value === "string") return redactSecrets(value);
+  if (Array.isArray(value)) return value.map(redactDeep);
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [key, inner] of Object.entries(value)) {
+      out[key] = redactDeep(inner);
+    }
+    return out;
+  }
+  return value;
+};
+var localIdFor = (parsed, rawLine, sessionKey) => typeof parsed.uuid === "string" && parsed.uuid.length > 0 ? parsed.uuid : createHmac("sha256", sessionKey).update(rawLine).digest("hex").slice(0, 32);
+var buildTranscriptRecords = (lines, sessionKey, seen = /* @__PURE__ */ new Set()) => {
+  const records = [];
+  const nextSeen = new Set(seen);
+  for (const line of lines) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+    let parsed;
+    try {
+      parsed = JSON.parse(trimmed);
+    } catch {
+      continue;
+    }
+    const type = typeof parsed.type === "string" ? parsed.type : "";
+    if (INTERNAL_TYPES.has(type)) continue;
+    const localId = localIdFor(parsed, trimmed, sessionKey);
+    if (nextSeen.has(localId)) continue;
+    nextSeen.add(localId);
+    const redacted = redactDeep(parsed);
+    fitWithinPlaintextBudget(redacted);
+    const content = encryptRecord(JSON.stringify(redacted), sessionKey);
+    records.push({ localId, content });
+  }
+  return { records, seen: nextSeen };
+};
+
+export {
+  decodePublicKey,
+  generateSessionKey,
+  wrapSessionKey,
+  buildTranscriptRecords
+};

package/dist/{chunk-DHR4F2CR.js → chunk-7TPQEWUZ.js}

@@ -1,6 +1,6 @@
 import {
   getMachineId
-} from "./chunk-5NDB3YOE.js";
+} from "./chunk-54ELC7D7.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";

package/dist/{chunk-Y4WVZIEI.js → chunk-AJYV3VGU.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   isValidApiKey
-} from "./chunk-3MCEES6Z.js";
+} from "./chunk-VNMKIJZB.js";
 
 // src/session.ts
 var IDENTITY_PATH = "/api/v1/server/identity";

package/dist/{chunk-QFJZHVVL.js → chunk-AZPIQG4G.js}

@@ -232,9 +232,43 @@ var runHermesPythonScript = (python, script, ...args) => {
   }
 };
 
+// src/cli/dry-run.ts
+import { execSync } from "child_process";
+import { rmSync as rmSync2, writeFileSync as writeFileSync2 } from "fs";
+var createGuards = (isDryRun, note) => ({
+  write: (path, contents) => {
+    if (isDryRun()) return note("rewrite", path);
+    writeFileSync2(path, contents, "utf-8");
+  },
+  remove: (path, options = {}) => {
+    if (isDryRun()) return note("remove ", path);
+    rmSync2(path, { recursive: true, force: options.force ?? false });
+  },
+  exec: (command, options, describe) => {
+    if (isDryRun()) return note("run    ", describe);
+    execSync(command, options);
+  }
+});
+var describeService = (effects) => {
+  if (effects.controlMode === "off") return "skip     the phone-start background service (--control off)";
+  const where = effects.serviceDefinitionPath ?? "the phone-start service definition";
+  const condition = effects.controlMode === "on" ? "" : ", when a supported agent and a service manager are present";
+  return `write    ${where} and register it with the OS${condition}`;
+};
+var describeSetupSideEffects = (effects) => [
+  `run      npm install -g @pushary/agent-hooks@${effects.version} (the hooks run from the global copy; up to two minutes)`,
+  `write    ${effects.configFile} (the API key, mode 600)`,
+  effects.rcPath ? `edit     ${effects.rcPath} (export PUSHARY_API_KEY)` : "print    the export line for your shell, since no rc file was found",
+  describeService(effects),
+  "ask      Add Pushary instructions to this project's CLAUDE.md/AGENTS.md? (default no)",
+  "ask      Alias claude to pushary claude? (default no)"
+];
+
 export {
   isHermesConfigReceipt,
   HERMES_CONFIG_SCRIPT,
   resolveHermesPython,
-  runHermesPythonScript
+  runHermesPythonScript,
+  createGuards,
+  describeSetupSideEffects
 };

package/dist/{chunk-OCMOTJTW.js → chunk-B7UZHEBL.js}

@@ -1,14 +1,14 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS,
   PRETOOLUSE_PHONE_ANSWERED_TOOLS
-} from "./chunk-KVHP5ZME.js";
+} from "./chunk-2LAHXHBR.js";
 import {
   defersToNativeMode
-} from "./chunk-GKPURU7P.js";
+} from "./chunk-I463AEG3.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-FCUUVHTS.js";
+} from "./chunk-VHWCVD42.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -19,8 +19,9 @@ import {
   readLastPrompt,
   readLastUserPrompt,
   repoKeyFor,
+  settleQuestionsForToolUse,
   throttlePass
-} from "./chunk-OADGBOP7.js";
+} from "./chunk-TDZFPMSZ.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -28,7 +29,7 @@ import {
   pollForAnswer,
   savePendingQuestion,
   sendNotification
-} from "./chunk-JHJHCMAF.js";
+} from "./chunk-FXEVRLHC.js";
 import {
   UNNAMED_ACTION,
   deriveAction,
@@ -37,10 +38,10 @@ import {
   deriveToolTarget,
   describeToolCall,
   scopePathFor
-} from "./chunk-JVZX5YRJ.js";
+} from "./chunk-L4E2BIJ2.js";
 import {
   getMachineId
-} from "./chunk-5NDB3YOE.js";
+} from "./chunk-54ELC7D7.js";
 import {
   getApiKey,
   getBaseUrl
@@ -52,10 +53,12 @@ import {
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline,
+  isPusharyOwnTool,
   parseAgentQuestionAnswers,
   parseAgentQuestions,
-  resolveGate
-} from "./chunk-3MCEES6Z.js";
+  resolveGate,
+  stoppedOutput
+} from "./chunk-VNMKIJZB.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
@@ -88,6 +91,7 @@ var allow = () => claudePreToolUseOutput("allow");
 var deny = (reason) => claudePreToolUseOutput("deny", reason);
 var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, updatedInput);
 var ask = (reason) => claudePreToolUseOutput("ask", reason);
+var halted = (reason) => stoppedOutput(deny(reason), reason);
 var storedWaitDeadline = (result, requestedDeadline) => {
   const stored = result.waitEndsAt ? Date.parse(result.waitEndsAt) : Number.NaN;
   return Number.isFinite(stored) ? Math.min(stored, requestedDeadline) : requestedDeadline;
@@ -148,7 +152,7 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
     return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value, answer.note));
   }
   if (timeoutAction === "wait" || clampCut) {
-    savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId);
+    savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId, decision.toolUseId);
     return ask(timeoutAction === "wait" ? "Still waiting on your phone. Answer here, or on your phone and it will be applied on the next step." : "This step cannot wait any longer. Answer here, or on your phone and it will be applied on the next step.");
   }
   switch (timeoutAction) {
@@ -157,7 +161,7 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
     case "deny":
       return deny("No response within timeout");
     default:
-      savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId);
+      savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId, decision.toolUseId);
       return ask("No push response, asking in terminal");
   }
 };
@@ -201,7 +205,7 @@ var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds,
     signals.humanDecision = true;
     return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value, answer.note));
   }
-  savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId);
+  savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId, decision.toolUseId);
   return ask("Sent as push notification. You can also approve here.");
 };
 var handleNotifyOnly = async (apiKey, description, projectName, sessionId, machineId) => {
@@ -359,7 +363,7 @@ var askAsOneCard = async (apiKey, input, parsed, projectName, deadline) => {
   const answer = returnedAnswer(result) ?? await pollForAnswer(apiKey, result.correlationId, storedWaitDeadline(result, deadline));
   const values = answer.answered && answer.value ? parseAgentQuestionAnswers(parsed, answer.value) : null;
   if (!values || isDeferAnswer(answer.value)) {
-    savePendingQuestion(input.session_id || DEFAULT_SESSION, result.correlationId);
+    savePendingQuestion(input.session_id || DEFAULT_SESSION, result.correlationId, input.tool_use_id);
     return void 0;
   }
   return values;
@@ -400,14 +404,15 @@ var askQuestionByQuestion = async (apiKey, input, parsed, projectName, deadline)
     })) : null;
     const value = values?.[question.question];
     if (!value || isDeferAnswer(answer.value)) {
-      savePendingQuestion(input.session_id || DEFAULT_SESSION, result.correlationId);
+      savePendingQuestion(input.session_id || DEFAULT_SESSION, result.correlationId, input.tool_use_id);
       return void 0;
     }
     answers[question.question] = value;
   }
   return answers;
 };
-var handleAskUserQuestion = async (apiKey, input) => {
+var handleAskUserQuestion = async (apiKey, input, modeState) => {
+  if (modeState.askHandoff) return void 0;
   const parsed = parseQuestions(input.tool_input ?? {});
   if (!parsed) return void 0;
   const projectName = basename(input.cwd ?? process.cwd());
@@ -452,7 +457,7 @@ var handleExitPlanMode = async (apiKey, input) => {
   const answer = returnedAnswer(result) ?? await pollForAnswer(apiKey, result.correlationId, storedWaitDeadline(result, deadline));
   const value = answer.answered ? (answer.value ?? "").trim() : "";
   if (!value || isDeferAnswer(answer.value)) {
-    savePendingQuestion(input.session_id || DEFAULT_SESSION, result.correlationId);
+    savePendingQuestion(input.session_id || DEFAULT_SESSION, result.correlationId, input.tool_use_id);
     return void 0;
   }
   if (value === PLAN_APPROVE) return allow();
@@ -487,7 +492,7 @@ var claudeGateInput = (modeState, config, input) => {
   };
 };
 var handlePreToolUse = async (input) => {
-  if (input.tool_name.startsWith("mcp__pushary__")) return void 0;
+  if (isPusharyOwnTool(input.tool_name)) return void 0;
   let apiKey;
   try {
     apiKey = getApiKey();
@@ -498,10 +503,10 @@ var handlePreToolUse = async (input) => {
     const modeState = await fetchModeState(apiKey, input.session_id);
     const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code", true, input.session_id);
     const verdict = resolveGate(claudeGateInput(modeState, policy, input));
-    if (verdict.kind === "kill") return deny(verdict.reason);
+    if (verdict.kind === "kill") return halted(verdict.reason);
     if (verdict.kind === "deny") return deny(verdict.reason);
     if (input.tool_name === "AskUserQuestion") {
-      return handleAskUserQuestion(apiKey, input);
+      return handleAskUserQuestion(apiKey, input, modeState);
     }
     if (input.tool_name === "ExitPlanMode") {
       return handleExitPlanMode(apiKey, input);
@@ -528,6 +533,7 @@ var handlePreToolUse = async (input) => {
 };
 var permReqAllow = (updatedInput) => claudePermissionRequestOutput("allow", void 0, updatedInput);
 var permReqDeny = (message) => claudePermissionRequestOutput("deny", message);
+var permReqHalted = (reason) => stoppedOutput(permReqDeny(reason), reason);
 var toPermissionRequestOutput = (hookOutput) => {
   if (!hookOutput) return void 0;
   const d = hookOutput.hookSpecificOutput;
@@ -540,7 +546,7 @@ var handlePermissionRequest = async (input) => {
     const reclaimDeferredExec = !PRETOOLUSE_PHONE_ANSWERED_TOOLS.includes(input.tool_name) && shouldDeferToNativeMode(input.permission_mode, input.tool_name);
     if (!reclaimDeferredExec) return void 0;
   }
-  if (input.tool_name.startsWith("mcp__pushary__")) return void 0;
+  if (isPusharyOwnTool(input.tool_name)) return void 0;
   let apiKey;
   try {
     apiKey = getApiKey();
@@ -553,7 +559,7 @@ var handlePermissionRequest = async (input) => {
     const verdict = resolveGate(claudeGateInput(modeState, policy, input));
     switch (verdict.kind) {
       case "kill":
-        return permReqDeny(verdict.reason);
+        return permReqHalted(verdict.reason);
       case "allow":
         return permReqAllow();
       case "deny":
@@ -577,7 +583,7 @@ var automodeRetryEnabled = () => {
   return flag === "1" || flag === "true";
 };
 var handlePermissionDenied = async (input) => {
-  if (input.tool_name.startsWith("mcp__pushary__")) return void 0;
+  if (isPusharyOwnTool(input.tool_name)) return void 0;
   let apiKey;
   try {
     apiKey = getApiKey();
@@ -587,6 +593,7 @@ var handlePermissionDenied = async (input) => {
   try {
     const projectName = basename(input.cwd ?? process.cwd());
     const sessionKey = input.session_id || DEFAULT_SESSION;
+    await settleQuestionsForToolUse(sessionKey, input.tool_use_id);
     if (!throttlePass(`permdenied:${sessionKey}:${input.tool_name}`, PERMISSION_DENIED_WINDOW_MS)) return void 0;
     const mode = await fetchModeState(apiKey, input.session_id).catch(() => null);
     if (mode?.kill || mode?.mode === "terminal_only") return void 0;

package/dist/{chunk-7HYJPOGG.js → chunk-BQBEH6TV.js}

@@ -1,11 +1,11 @@
 import {
   detectClaudeVersion
-} from "./chunk-NBRM3FMD.js";
+} from "./chunk-H2QZRQR2.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "./chunk-NESKLV6R.js";
+} from "./chunk-DZDI62LY.js";
 import {
   GEMINI_HOOK_BINARY,
   addClaudeMcpServer,
@@ -14,10 +14,10 @@ import {
   addPusharyHooks,
   addPusharyToolPermissions,
   hasGeminiHooks
-} from "./chunk-6V7ZDH3A.js";
+} from "./chunk-GL3FFM7A.js";
 import {
   guardBinary
-} from "./chunk-VF3RTVWY.js";
+} from "./chunk-EZIEXHYM.js";
 import {
   resolveGlobalBinDir,
   resolveGlobalBinary
@@ -32,7 +32,7 @@ import {
   codexHooksJson,
   hasCodexHooks,
   vscodePluginMcp
-} from "./chunk-OVEGEQSB.js";
+} from "./chunk-KUZWXPUS.js";
 import {
   readJsonSafe
 } from "./chunk-4LL6LG5X.js";

package/dist/{chunk-OTPJ4FUR.js → chunk-BVBEURWJ.js}

@@ -1,6 +1,6 @@
 import {
   renderCommandHelp
-} from "./chunk-RLQWNEPM.js";
+} from "./chunk-43GMYSS4.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";

package/dist/{chunk-7DK3ZH3N.js → chunk-CELX75MW.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-3MCEES6Z.js";
+} from "./chunk-VNMKIJZB.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";