@pushary/agent-hooks 0.95.8 → 0.97.0

package/dist/{chunk-HUGIKB5O.js → chunk-DGUMR5LZ.js}

@@ -18,26 +18,26 @@ import {
   summarizeStop,
   taskTitleFrom,
   toolResultErrorText
-} from "./chunk-Z4JVEL7R.js";
+} from "./chunk-VCKQ45QA.js";
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-XUTSZYYJ.js";
+} from "./chunk-QFAZ6QCT.js";
 import {
   cancelQuestion,
   isPolicyConfig,
   sendNotification,
   waitForAnswer
-} from "./chunk-XS33QBJA.js";
+} from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-E47WV7BJ.js";
+} from "./chunk-IZKCA35M.js";
 import {
   withRetry
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VTUN7WSG.js";
 import {
   getApiKey,
   getBaseUrl
@@ -54,7 +54,7 @@ import {
   pendingCommandEvents,
   resolveAutoResolveOrigin,
   resolvePolicy
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-HUZW6SEO.js";
 
 // src/policy.ts
 import { createHash } from "crypto";

package/dist/{chunk-54W7ELDQ.js → chunk-DNLFSRCF.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-L4ZCFMWW.js";
+} from "./chunk-67RNDRKL.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-HUZW6SEO.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-R6LBGKWQ.js → chunk-DOKFLZWL.js}

@@ -1,16 +1,16 @@
 import {
   detectClaudeVersion
-} from "./chunk-4DUEIUUO.js";
+} from "./chunk-YRXVC4HL.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-ATKGKAP6.js";
+} from "./chunk-6WJKYD3Q.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "./chunk-QD73WATQ.js";
+} from "./chunk-FU5SQKAY.js";
 import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_BINARY,
@@ -21,14 +21,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-QV266EGS.js";
-import {
-  guardBinary
-} from "./chunk-3AJIK5AO.js";
-import {
-  resolveGlobalBinDir,
-  resolveGlobalBinary
-} from "./chunk-L4ZCFMWW.js";
+} from "./chunk-IBRX7LRE.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -38,16 +31,19 @@ import {
   codexConfigToml,
   codexHookPositions,
   codexHooksJson,
+  guardBinary,
   hasCodexHooks,
+  resolveGlobalBinDir,
+  resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-NOVA7KZ2.js";
+} from "./chunk-67RNDRKL.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VTUN7WSG.js";
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-HUZW6SEO.js";
 
 // src/reapply.ts
 import { join } from "path";

package/dist/{chunk-U5RIXR7I.js → chunk-EHQC3GWL.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-HUZW6SEO.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-QD73WATQ.js → chunk-FU5SQKAY.js}

@@ -2,15 +2,16 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-QV266EGS.js";
+} from "./chunk-IBRX7LRE.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks
-} from "./chunk-NOVA7KZ2.js";
+} from "./chunk-67RNDRKL.js";
 import {
   CURSOR_GATE_EVENTS,
-  HOOK_LOCATOR_BINARY
-} from "./chunk-MC5WUOJJ.js";
+  HOOK_LOCATOR_BINARY,
+  hookCommandHoldBudget
+} from "./chunk-HUZW6SEO.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -111,6 +112,14 @@ var claudeOtherHolders = (settings) => otherHolders(record(settings)?.hooks, CLA
 var codexOtherHolders = (hooks) => otherHolders(record(hooks)?.hooks, CODEX_GATE_EVENTS, "nested", "seconds");
 var geminiOtherHolders = (settings) => otherHolders(record(settings)?.hooks, GEMINI_GATE_EVENTS, "nested", "milliseconds");
 var cursorOtherHolders = (userHooks) => otherHolders(record(userHooks)?.hooks, CURSOR_GATE_EVENTS, "flat", "seconds");
+var holdEvents = (table) => table.filter((hook) => hook.holds).map((hook) => hook.event);
+var unprovenHolds = (hooks, events) => {
+  const table = record(hooks);
+  if (!table) return [];
+  return events.filter((event) => registeredHooks(table[event], "nested", "seconds").some((hook) => pusharyHookExecutable(hook.command) !== null && hookCommandHoldBudget(hook.command) === void 0));
+};
+var claudeUnprovenHolds = (settings) => unprovenHolds(record(settings)?.hooks, holdEvents(CLAUDE_HOOK_EVENTS));
+var codexUnprovenHolds = (hooks) => unprovenHolds(record(hooks)?.hooks, holdEvents(CODEX_HOOK_EVENTS));
 var holdsLong = (holder) => holder.timeoutSeconds !== null && holder.timeoutSeconds > LONG_HOLD_SECONDS;
 var SHELLS = /* @__PURE__ */ new Set(["/bin/sh", "/bin/bash", "/bin/zsh", "/usr/bin/env"]);
 var holderExecutable = (command) => {
@@ -139,6 +148,8 @@ export {
   codexOtherHolders,
   geminiOtherHolders,
   cursorOtherHolders,
+  claudeUnprovenHolds,
+  codexUnprovenHolds,
   holdsLong,
   describeOtherHolder,
   describeHoldSentence

package/dist/{chunk-TY6IJY6I.js → chunk-GGYH6LIE.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-VMQU7YEJ.js";
+} from "./chunk-VF7YOT2W.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-XZWUOCJZ.js → chunk-H4VNAOCG.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-HUZW6SEO.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", "custom"];

package/dist/{chunk-MC5WUOJJ.js → chunk-HUZW6SEO.js}

@@ -293,6 +293,26 @@ var HOOK_BUDGETS = {
   opencode: { budgetSeconds: 120, guardSeconds: 10 }
 };
 var hookMaxWaitSeconds = (agent) => Math.max(HOOK_BUDGETS[agent].budgetSeconds - HOOK_BUDGETS[agent].guardSeconds, 1);
+var HOOK_HOLD_BUDGET_FLAG = "--hold-budget";
+var HOOK_HOLD_BUDGET_ENV = "PUSHARY_HOLD_BUDGET_SECONDS";
+var HOOK_BRIDGE_SOURCE_FLAG = "--source";
+var HOOK_HOLD_BUDGET_SECONDS = /^[1-9]\d{0,5}$/;
+var hookHoldBudgetSeconds = (text) => text !== void 0 && HOOK_HOLD_BUDGET_SECONDS.test(text) ? Number(text) : void 0;
+var hookHoldBudgetArgument = (seconds) => `${HOOK_HOLD_BUDGET_FLAG}=${seconds}`;
+var withHookHoldBudget = (command, holdBudgetSeconds) => holdBudgetSeconds === void 0 ? command : `${command} ${hookHoldBudgetArgument(holdBudgetSeconds)}`;
+var registeredHookHoldBudget = (args) => {
+  const prefix = `${HOOK_HOLD_BUDGET_FLAG}=`;
+  const proofs = args.filter((arg) => arg.startsWith(prefix));
+  return proofs.length === 1 ? hookHoldBudgetSeconds(proofs[0].slice(prefix.length)) : void 0;
+};
+var hookCommandHoldBudget = (command) => registeredHookHoldBudget(command.trim().split(/\s+/));
+var hookHoldBudgetProof = (args, env) => {
+  const handedDown = hookHoldBudgetSeconds(env[HOOK_HOLD_BUDGET_ENV]);
+  const registered = args.includes(HOOK_BRIDGE_SOURCE_FLAG) ? void 0 : registeredHookHoldBudget(args);
+  if (handedDown === void 0) return registered;
+  return registered === void 0 ? handedDown : Math.min(handedDown, registered);
+};
+var hookHoldWindowMs = (agent, holdBudgetSeconds) => holdBudgetSeconds === void 0 ? 0 : Math.max((Math.min(holdBudgetSeconds, HOOK_BUDGETS[agent].budgetSeconds) - HOOK_BUDGETS[agent].guardSeconds) * 1e3, 0);
 var hookWaitDeadline = (startMs, policyWaitSeconds, agent, nowMs) => {
   const maxWait = hookMaxWaitSeconds(agent);
   return Math.min(
@@ -1275,6 +1295,30 @@ var shouldDeferToNativeMode = (permissionMode, toolName, options = {}) => {
 var ASKED_IN_EVERY_MODE_TOOLS = ["AskUserQuestion", "ExitPlanMode"];
 var ASKED_IN_EVERY_MODE = new Set(ASKED_IN_EVERY_MODE_TOOLS);
 var isAskedInEveryMode = (toolName) => ASKED_IN_EVERY_MODE.has(toolName);
+var NATIVE_BLOCK_EVENTS = /* @__PURE__ */ new Set(["PermissionDenied"]);
+var isNativeBlockEvent = (event) => typeof event === "string" && NATIVE_BLOCK_EVENTS.has(event);
+var CODEX_RESCUE_TOOL_NAME = "Bash";
+var isBlockedActionEvent = ({ source, event, blockedBy }) => isNativeBlockEvent(event) || source === "codex" && event === "Stop" && blockedBy === "auto_review";
+var blockedActionRetryReachesGate = (source, toolName) => source === "claude" ? PRETOOLUSE_HANDLED_TOOLS.has(toolName) && !isAskedInEveryMode(toolName) : source === "codex" && toolName === CODEX_RESCUE_TOOL_NAME;
+var isBlockedActionRequest = (request) => isBlockedActionEvent(request) && blockedActionRetryReachesGate(request.source, request.toolName);
+var canonicalJsonText = (value) => {
+  if (Array.isArray(value)) return `[${value.map(canonicalJsonText).join(",")}]`;
+  if (value !== null && typeof value === "object") {
+    const record = value;
+    return `{${Object.keys(record).filter((key) => record[key] !== void 0).sort().map((key) => `${JSON.stringify(key)}:${canonicalJsonText(record[key])}`).join(",")}}`;
+  }
+  return JSON.stringify(value) ?? "null";
+};
+var BLOCKED_ACTION_IDENTITY_VERSION = "blocked-action/v1";
+var CLAUDE_BLOCKED_ACTION_IDENTITY_VERSION = "blocked-action/v2";
+var BLOCKED_ACTION_GRANT_TTL_SECONDS = 120;
+var BLOCKED_ACTION_PRESENTATION_ONLY_KEYS = ["description"];
+var isPresentationOnlyInputKey = (key) => BLOCKED_ACTION_PRESENTATION_ONLY_KEYS.includes(key);
+var identifyingBlockedActionInput = (toolInput) => Object.fromEntries(Object.entries(toolInput).filter(([key]) => !isPresentationOnlyInputKey(key)));
+var blockedActionIdentity = (subject) => {
+  const { sessionId, toolName, toolInput } = subject;
+  return subject.source === "claude" ? canonicalJsonText([CLAUDE_BLOCKED_ACTION_IDENTITY_VERSION, sessionId, subject.cwd, toolName, identifyingBlockedActionInput(toolInput)]) : canonicalJsonText([BLOCKED_ACTION_IDENTITY_VERSION, sessionId, toolName, identifyingBlockedActionInput(toolInput)]);
+};
 var PRETOOLUSE_GATED_TOOLS = [
   "Bash",
   "Write",
@@ -1286,6 +1330,7 @@ var PRETOOLUSE_GATED_TOOLS = [
 ];
 var PRETOOLUSE_HANDLED_TOOLS = /* @__PURE__ */ new Set([...PRETOOLUSE_GATED_TOOLS, ...ASKED_IN_EVERY_MODE_TOOLS]);
 var isPermissionRequestOwnedByPreToolUse = (toolName, permissionMode, defers = shouldDeferToNativeMode) => PRETOOLUSE_HANDLED_TOOLS.has(toolName) && (isAskedInEveryMode(toolName) || !defers(permissionMode, toolName));
+var CLAUDE_PRETOOLUSE_MATCHER = [...PRETOOLUSE_HANDLED_TOOLS].join("|");
 var resolveGate = (input) => {
   const { modeState, config, toolName, toolInputs, cwd, repoKey, sessionId } = input;
   if (isPusharyOwnTool(toolName)) {
@@ -1342,6 +1387,19 @@ var modeStateFromResponse = (data) => {
     askHandoff: data.askHandoff === true
   };
 };
+var GATE_WIRE = 1;
+var GATE_MAX_TOOL_INPUTS = 32;
+var GATE_BLOCK_REASON_MAX_LENGTH = 200;
+var claudePermissionDeniedOutput = (decision) => ({
+  hookSpecificOutput: {
+    hookEventName: "PermissionDenied",
+    retry: decision === "allow"
+  }
+});
+var CODEX_RESCUE_COMMAND_MAX_LENGTH = 2e3;
+var CODEX_RESCUE_APPROVED = "The user approved this command from Pushary after the auto-reviewer denied it.";
+var codexRescueRetryInstruction = (command) => command.length <= CODEX_RESCUE_COMMAND_MAX_LENGTH ? `Run it again exactly as before, unchanged: ${command}` : `Run it again exactly as before, unchanged. It is too long to repeat in full here and begins: ${command.slice(0, CODEX_RESCUE_COMMAND_MAX_LENGTH)}`;
+var codexStopRescueOutput = (decision, command) => decision === "allow" ? { decision: "block", reason: `${CODEX_RESCUE_APPROVED} ${codexRescueRetryInstruction(command)}` } : { continue: true };
 var stoppedOutput = (output, stopReason) => ({ ...output, continue: false, stopReason });
 var claudePreToolUseOutput = (decision, reason, updatedInput) => ({
   hookSpecificOutput: {
@@ -1387,6 +1445,8 @@ var gateOutputFor = (source, event, decision, reason) => {
       output = claudePreToolUseOutput(decision, reason);
     } else if (event === "PermissionRequest" && decision !== "ask") {
       output = claudePermissionRequestOutput(decision, reason);
+    } else if (source === "claude" && event === "PermissionDenied" && decision !== "ask") {
+      output = claudePermissionDeniedOutput(decision);
     }
   } else if (source === "codex") {
     if (event === "PermissionRequest" && decision !== "ask") {
@@ -1582,6 +1642,11 @@ export {
   parseAgentQuestionAnswers,
   normalizeInstallSource,
   HOOK_BUDGETS,
+  HOOK_HOLD_BUDGET_ENV,
+  withHookHoldBudget,
+  hookCommandHoldBudget,
+  hookHoldBudgetProof,
+  hookHoldWindowMs,
   hookWaitDeadline,
   hookWaitClamped,
   effectiveWaitSeconds,
@@ -1605,11 +1670,20 @@ export {
   KILL_REASON,
   isPusharyOwnTool,
   shouldDeferToNativeMode,
-  ASKED_IN_EVERY_MODE_TOOLS,
+  CODEX_RESCUE_TOOL_NAME,
+  isBlockedActionRequest,
+  BLOCKED_ACTION_GRANT_TTL_SECONDS,
+  blockedActionIdentity,
   PRETOOLUSE_GATED_TOOLS,
   isPermissionRequestOwnedByPreToolUse,
+  CLAUDE_PRETOOLUSE_MATCHER,
   resolveGate,
   modeStateFromResponse,
+  GATE_WIRE,
+  GATE_MAX_TOOL_INPUTS,
+  GATE_BLOCK_REASON_MAX_LENGTH,
+  claudePermissionDeniedOutput,
+  codexStopRescueOutput,
   stoppedOutput,
   claudePreToolUseOutput,
   PENDING_COMMAND_PREFIX,

package/dist/{chunk-QV266EGS.js → chunk-IBRX7LRE.js}

@@ -1,16 +1,15 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
-  POSTTOOLUSE_MIRRORED_TOOLS,
-  PRETOOLUSE_PHONE_ANSWERED_TOOLS
-} from "./chunk-XUTSZYYJ.js";
+  POSTTOOLUSE_MIRRORED_TOOLS
+} from "./chunk-QFAZ6QCT.js";
 import {
   isProtectedByScope
-} from "./chunk-NOVA7KZ2.js";
+} from "./chunk-67RNDRKL.js";
 import {
+  CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
-  HOOK_LOCATOR_BINARY,
-  PRETOOLUSE_GATED_TOOLS
-} from "./chunk-MC5WUOJJ.js";
+  HOOK_LOCATOR_BINARY
+} from "./chunk-HUZW6SEO.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";
@@ -128,12 +127,11 @@ var atLeast = (version, floor) => compareVersion(version, floor) >= 0;
 var formatVersion = (version) => version.join(".");
 
 // src/claude-events.ts
-var GATED_TOOLS = [...PRETOOLUSE_GATED_TOOLS, ...PRETOOLUSE_PHONE_ANSWERED_TOOLS].join("|");
 var MIRRORED_TOOLS = POSTTOOLUSE_MIRRORED_TOOLS.join("|");
 var ESTABLISHED = [1, 0, 0];
 var OBSERVED = [2, 0, 0];
 var CLAUDE_HOOK_EVENTS = [
-  { event: "PreToolUse", binary: "pushary-hook", matcher: GATED_TOOLS, timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: ESTABLISHED },
+  { event: "PreToolUse", binary: "pushary-hook", matcher: CLAUDE_PRETOOLUSE_MATCHER, timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: ESTABLISHED },
   { event: "PostToolUse", binary: "pushary-post-hook", matcher: MIRRORED_TOOLS, timeout: 10, delivery: "telemetry", since: ESTABLISHED },
   { event: "Stop", binary: "pushary-stop-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
   { event: "UserPromptSubmit", binary: "pushary-prompt-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
@@ -142,7 +140,7 @@ var CLAUDE_HOOK_EVENTS = [
   { event: "SessionEnd", binary: "pushary-session-end-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
   { event: "StopFailure", binary: "pushary-stopfailure-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
   { event: "PermissionRequest", binary: "pushary-permission-hook", timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: ESTABLISHED },
-  { event: "PermissionDenied", binary: "pushary-permission-denied-hook", timeout: 60, delivery: "telemetry", since: ESTABLISHED },
+  { event: "PermissionDenied", binary: "pushary-permission-denied-hook", timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", holds: true, since: ESTABLISHED },
   // Observability only. Each carries session shape the island cannot get any other
   // way, and none of them decides anything.
   { event: "SubagentStart", binary: "pushary-session-start-hook", timeout: 10, delivery: "telemetry", since: OBSERVED },

package/dist/{chunk-UKMLSQXA.js → chunk-ICUBJNFL.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-XZWUOCJZ.js";
+} from "./chunk-H4VNAOCG.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-HUZW6SEO.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-E47WV7BJ.js → chunk-IZKCA35M.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-NOVA7KZ2.js";
+} from "./chunk-67RNDRKL.js";
 import {
   writeFileAtomic
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VTUN7WSG.js";
 
 // src/identity.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-F4TMY6XI.js → chunk-K7MLXXPY.js}

@@ -1,9 +1,9 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-U5RIXR7I.js";
+} from "./chunk-EHQC3GWL.js";
 import {
   codexHomeFrom
-} from "./chunk-NOVA7KZ2.js";
+} from "./chunk-67RNDRKL.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-Y6SCMXR6.js → chunk-KDPYXMUI.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-NOVA7KZ2.js";
+} from "./chunk-67RNDRKL.js";
 import {
   readJsonSafe
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VTUN7WSG.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-XS33QBJA.js → chunk-LGXUGYUH.js}

@@ -4,6 +4,9 @@ import {
 import {
   installProxyDispatcher
 } from "./chunk-SAF6HGAA.js";
+import {
+  getBaseUrl
+} from "./chunk-2UMNXADU.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";
@@ -24,6 +27,21 @@ var isWaitForAnswerResponse = (data) => {
   const d = data;
   return typeof d.answered === "boolean";
 };
+var GATE_REPLY_KINDS = ["kill", "allow", "deny", "ask", "no_opinion"];
+var isSettlementOutputs = (value) => {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const outputs = value;
+  return (outputs.approve === void 0 || typeof outputs.approve === "string") && (outputs.deny === void 0 || typeof outputs.deny === "string");
+};
+var isGateReply = (data) => {
+  if (!data || typeof data !== "object") return false;
+  const d = data;
+  return GATE_REPLY_KINDS.includes(d.kind) && (d.output === void 0 || typeof d.output === "string") && (d.correlationId === void 0 || typeof d.correlationId === "string") && (d.deadlineSeconds === void 0 || typeof d.deadlineSeconds === "number") && (d.noDevices === void 0 || typeof d.noDevices === "boolean") && (d.suppressed === void 0 || typeof d.suppressed === "boolean") && (d.settlementOutputs === void 0 || isSettlementOutputs(d.settlementOutputs));
+};
+var isBlockedActionClaim = (data) => {
+  if (!data || typeof data !== "object") return false;
+  return typeof data.granted === "boolean";
+};
 
 // src/api.ts
 installProxyDispatcher();
@@ -96,6 +114,34 @@ var waitForQuestion = async (apiKey, question, deadlineMs, pollInterval = 2e3) =
 var sendNotification = async (apiKey, params, timeoutMs = 15e3, signal) => {
   await callMcpTool(apiKey, "send_notification", { ...params }, { maxRetries: signal ? 1 : 3, timeoutMs, signal });
 };
+var GATE_PATH = "/api/agent/gate";
+var BLOCKED_ACTION_CLAIM_PATH = "/api/agent/blocked-action/claim";
+var postAgentRequest = async (apiKey, path, body, timeoutMs) => {
+  const response = await fetch(`${getBaseUrl()}${path}`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json", Authorization: `Bearer ${apiKey}` },
+    body: JSON.stringify(body),
+    signal: AbortSignal.timeout(timeoutMs)
+  });
+  if (!response.ok) throw new Error(`${path} rejected (${response.status})`);
+  return response.json();
+};
+var requestGate = async (apiKey, request, timeoutMs = 15e3) => {
+  try {
+    const reply = await postAgentRequest(apiKey, GATE_PATH, request, timeoutMs);
+    return isGateReply(reply) ? reply : null;
+  } catch {
+    return null;
+  }
+};
+var claimBlockedAction = async (apiKey, request, timeoutMs) => {
+  try {
+    const reply = await postAgentRequest(apiKey, BLOCKED_ACTION_CLAIM_PATH, request, timeoutMs);
+    return isBlockedActionClaim(reply) ? reply.granted : null;
+  } catch {
+    return null;
+  }
+};
 
 export {
   isPolicyConfig,
@@ -105,8 +151,11 @@ export {
   askUser,
   waitForAnswer,
   nextLongPollMs,
+  pollForAnswer,
   cancelQuestion,
   withdrawQuestion,
   waitForQuestion,
-  sendNotification
+  sendNotification,
+  requestGate,
+  claimBlockedAction
 };

package/dist/{chunk-I7LKI4WO.js → chunk-LYWTLNMG.js}

@@ -2,27 +2,25 @@ import {
   needsShell,
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
-import {
-  resolveGlobalBinary
-} from "./chunk-L4ZCFMWW.js";
 import {
   getMachineId
-} from "./chunk-E47WV7BJ.js";
+} from "./chunk-IZKCA35M.js";
 import {
-  pusharyDir
-} from "./chunk-NOVA7KZ2.js";
+  pusharyDir,
+  resolveGlobalBinary
+} from "./chunk-67RNDRKL.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "./chunk-VMQU7YEJ.js";
+} from "./chunk-VF7YOT2W.js";
 import {
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic,
   writeJsonAtomicDurable
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VTUN7WSG.js";
 import {
   getApiKey
 } from "./chunk-2UMNXADU.js";

package/dist/chunk-OYTOLQ3N.js

@@ -0,0 +1,15 @@
+import {
+  HOOK_HOLD_BUDGET_ENV,
+  hookHoldBudgetProof
+} from "./chunk-HUZW6SEO.js";
+
+// src/hold-budget.ts
+var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {
+  const proof = hookHoldBudgetProof(args, env);
+  delete env[HOOK_HOLD_BUDGET_ENV];
+  return proof;
+};
+
+export {
+  takeHookHoldBudget
+};

package/dist/{chunk-XUTSZYYJ.js → chunk-QFAZ6QCT.js}

@@ -1,10 +1,8 @@
 import {
-  ASKED_IN_EVERY_MODE_TOOLS,
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-HUZW6SEO.js";
 
 // src/claude-tools.ts
-var PRETOOLUSE_PHONE_ANSWERED_TOOLS = ASKED_IN_EVERY_MODE_TOOLS;
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];
 var POSTTOOLUSE_MIRRORED_TOOLS = [...PRETOOLUSE_GATED_TOOLS, ...POSTTOOLUSE_MIRROR_ONLY_TOOLS];
 
@@ -34,7 +32,6 @@ var NOTIFICATION_PUSH_TYPES = /* @__PURE__ */ new Set([
 ]);
 
 export {
-  PRETOOLUSE_PHONE_ANSWERED_TOOLS,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS,
   POSTTOOLUSE_MIRRORED_TOOLS,
   NOTIFICATION_MATCHED_TYPES,

package/dist/{chunk-FRXZMCVA.js → chunk-ROTIPRM4.js}

@@ -3,7 +3,7 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-SKPXQRKN.js";
+} from "./chunk-CDSA3NTB.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords

package/dist/{chunk-BQL7UDIB.js → chunk-SW37HB27.js}

@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-HUZW6SEO.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;