@pushary/agent-hooks 0.95.8 → 0.98.0

package/dist/{chunk-QD73WATQ.js → chunk-6LRGZJFB.js}

@@ -2,15 +2,16 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-QV266EGS.js";
+} from "./chunk-HFQ7WSHZ.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks
-} from "./chunk-NOVA7KZ2.js";
+} from "./chunk-XL3RKJYQ.js";
 import {
   CURSOR_GATE_EVENTS,
-  HOOK_LOCATOR_BINARY
-} from "./chunk-MC5WUOJJ.js";
+  HOOK_LOCATOR_BINARY,
+  hookCommandHoldBudget
+} from "./chunk-OUAE3GKO.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -72,31 +73,20 @@ var toSeconds = (timeout, unit) => {
 };
 var registeredHooks = (entries, shape, unit) => {
   if (!Array.isArray(entries)) return [];
-  return entries.flatMap((entry, entryIndex) => {
+  return entries.flatMap((entry) => {
     const container = record(entry);
     if (!container) return [];
     const hooks = shape === "nested" ? Array.isArray(container.hooks) ? container.hooks : [] : [container];
-    return hooks.flatMap((hook, hookIndex) => {
+    return hooks.flatMap((hook) => {
       const command = record(hook)?.command;
       if (typeof command !== "string" || command.trim() === "") return [];
-      return [{
-        command,
-        timeoutSeconds: toSeconds(record(hook)?.timeout, unit),
-        order: [entryIndex, hookIndex]
-      }];
+      return [{ command, timeoutSeconds: toSeconds(record(hook)?.timeout, unit) }];
     });
   });
 };
-var runsBefore = (a, b) => a[0] < b[0] || a[0] === b[0] && a[1] < b[1];
 var holdersOnEvent = (event, hooks) => {
-  const ours = hooks.find((hook) => pusharyHookExecutable(hook.command) !== null);
-  if (!ours) return [];
-  return hooks.filter((hook) => pusharyHookExecutable(hook.command) === null).map((hook) => ({
-    event,
-    command: hook.command,
-    timeoutSeconds: hook.timeoutSeconds,
-    position: runsBefore(hook.order, ours.order) ? "before" : "after"
-  }));
+  if (!hooks.some((hook) => pusharyHookExecutable(hook.command) !== null)) return [];
+  return hooks.filter((hook) => pusharyHookExecutable(hook.command) === null).map((hook) => ({ event, command: hook.command, timeoutSeconds: hook.timeoutSeconds }));
 };
 var otherHolders = (hooks, events, shape, unit) => {
   const table = record(hooks);
@@ -111,6 +101,14 @@ var claudeOtherHolders = (settings) => otherHolders(record(settings)?.hooks, CLA
 var codexOtherHolders = (hooks) => otherHolders(record(hooks)?.hooks, CODEX_GATE_EVENTS, "nested", "seconds");
 var geminiOtherHolders = (settings) => otherHolders(record(settings)?.hooks, GEMINI_GATE_EVENTS, "nested", "milliseconds");
 var cursorOtherHolders = (userHooks) => otherHolders(record(userHooks)?.hooks, CURSOR_GATE_EVENTS, "flat", "seconds");
+var holdEvents = (table) => table.filter((hook) => hook.holds).map((hook) => hook.event);
+var unprovenHolds = (hooks, events) => {
+  const table = record(hooks);
+  if (!table) return [];
+  return events.filter((event) => registeredHooks(table[event], "nested", "seconds").some((hook) => pusharyHookExecutable(hook.command) !== null && hookCommandHoldBudget(hook.command) === void 0));
+};
+var claudeUnprovenHolds = (settings) => unprovenHolds(record(settings)?.hooks, holdEvents(CLAUDE_HOOK_EVENTS));
+var codexUnprovenHolds = (hooks) => unprovenHolds(record(hooks)?.hooks, holdEvents(CODEX_HOOK_EVENTS));
 var holdsLong = (holder) => holder.timeoutSeconds !== null && holder.timeoutSeconds > LONG_HOLD_SECONDS;
 var SHELLS = /* @__PURE__ */ new Set(["/bin/sh", "/bin/bash", "/bin/zsh", "/usr/bin/env"]);
 var holderExecutable = (command) => {
@@ -125,7 +123,7 @@ var describeHoldTimeout = (holder) => {
   if (seconds >= 60 && seconds % 60 === 0) return `${seconds / 60}m timeout`;
   return `${seconds}s timeout`;
 };
-var describeOtherHolder = (holder) => `another hook on ${holder.event}: ${holderExecutable(holder.command)} (${describeHoldTimeout(holder)}, runs ${holder.position} ours)`;
+var describeOtherHolder = (holder) => `another hook also registered on ${holder.event}: ${holderExecutable(holder.command)} (${describeHoldTimeout(holder)})`;
 var describeHoldSentence = (agentLabel) => `${agentLabel} waits for every hook on an event, so the terminal cannot move until that one returns, however fast your phone answered.`;
 
 export {
@@ -139,6 +137,8 @@ export {
   codexOtherHolders,
   geminiOtherHolders,
   cursorOtherHolders,
+  claudeUnprovenHolds,
+  codexUnprovenHolds,
   holdsLong,
   describeOtherHolder,
   describeHoldSentence

package/dist/{chunk-Z4JVEL7R.js → chunk-A76GNRIK.js}

@@ -3,9 +3,10 @@ import {
   AGENT_LABELS_BY_TYPE,
   DECISION_LINE_MAX,
   FILE_TARGET_TOOLS,
+  GATE_MAX_TOOL_INPUTS,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-OUAE3GKO.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";
@@ -173,6 +174,90 @@ var OPENCODE_TOOL_NAMES = {
   websearch: "WebSearch",
   task: "Task"
 };
+var canonicalGateInputs = (source, toolName, toolInputs, cwd) => {
+  if (source === "codex" && toolName === "apply_patch" || source === "vscode" && ["apply_patch", "applyPatch", "copilot_applyPatch"].includes(toolName)) {
+    const paths = [...new Set(toolInputs.flatMap((input) => parseApplyPatchFiles(input.command ?? input.input ?? input.patch)))];
+    if (paths.length > GATE_MAX_TOOL_INPUTS) return null;
+    return {
+      toolName: "Edit",
+      toolInputs: paths.length === 0 ? toolInputs.map((input) => ({ file_path: input.command })) : paths.map((path) => ({ file_path: cwd && !isAbsolute(path) ? resolve(cwd, path) : path }))
+    };
+  }
+  if (source === "opencode") {
+    const canonical2 = OPENCODE_TOOL_NAMES[toolName] ?? toolName;
+    return {
+      toolName: canonical2,
+      toolInputs: toolInputs.map((input) => {
+        const path = input.file_path;
+        return typeof path === "string" && path.length > 0 && cwd && !isAbsolute(path) ? { ...input, file_path: resolve(cwd, path) } : input;
+      })
+    };
+  }
+  if (source === "vscode" || source === "cursor") {
+    if (source === "vscode" && toolName.startsWith("mcp_pushary_")) return { toolName: `mcp__pushary__${toolName.slice("mcp_pushary_".length)}`, toolInputs };
+    const alias = toolName.replace(/^copilot_/, "").toLowerCase().replace(/[^a-z0-9]/g, "");
+    const shells = [
+      "runterminalcommand",
+      "runinterminal",
+      "runcommand",
+      "terminalcommand",
+      "executecommand",
+      "runinterminalcommand",
+      "bash",
+      "shell",
+      "terminal",
+      "sendtoterminal",
+      "powershell",
+      "localshell"
+    ];
+    const canonical2 = shells.includes(alias) ? "Bash" : ["createfile", "write", "createdirectory", "createnewjupyternotebook"].includes(alias) ? "Write" : ["replacestringinfile", "multireplacestringinfile", "replacestring", "multireplacestring", "inserteditintofile", "insertedit", "edit", "editfile", "editfiles", "editnotebookfile", "editnotebook"].includes(alias) ? "Edit" : [
+      "readfile",
+      "viewimage",
+      "listdir",
+      "listdirectory",
+      "filesearch",
+      "findfiles",
+      "grepsearch",
+      "findtextinfiles",
+      "semanticsearch",
+      "searchcodebase",
+      "searchworkspacesymbols",
+      "geterrors",
+      "getchangedfiles",
+      "readprojectstructure",
+      "getnotebooksummary",
+      "readnotebookcelloutput",
+      "testsearch",
+      "findtestfiles",
+      "testfailure",
+      "getvscodeapi",
+      "getterminaloutput",
+      "gettaskoutput",
+      "terminalselection",
+      "terminallastcommand"
+    ].includes(alias) ? "Read" : toolName;
+    const inputs = toolInputs.flatMap((input) => ["multireplacestringinfile", "multireplacestring"].includes(alias) && Array.isArray(input.replacements) ? input.replacements.filter((item) => !!item && typeof item === "object" && !Array.isArray(item)) : alias === "editfiles" && Array.isArray(input.files) ? input.files.map((file) => typeof file === "string" ? { file_path: file } : file).filter((file) => !!file && typeof file === "object" && !Array.isArray(file)) : [input]);
+    if (inputs.length > GATE_MAX_TOOL_INPUTS) return null;
+    return { toolName: canonical2, toolInputs: inputs.map((input) => {
+      if (canonical2 === "Bash") return { ...input, command: [input.command, input.commandLine, input.command_line, input.cmd, input.script, input.input, input.text].find((value) => typeof value === "string") };
+      const path = input.file_path ?? input.filePath ?? input.path;
+      return typeof path === "string" ? { ...input, file_path: cwd && !isAbsolute(path) ? resolve(cwd, path) : path } : input;
+    }) };
+  }
+  if (source !== "gemini") return { toolName, toolInputs };
+  if (toolName === "run_shell_command") {
+    return { toolName: "Bash", toolInputs: toolInputs.map((input) => ({ command: input.command })) };
+  }
+  const canonical = { write_file: "Write", replace: "Edit", read_file: "Read" }[toolName];
+  if (!canonical) return { toolName, toolInputs };
+  return {
+    toolName: canonical,
+    toolInputs: toolInputs.map((input) => {
+      const path = [input.file_path, input.absolute_path, input.path].find((value) => typeof value === "string" && value.length > 0);
+      return path ? { file_path: cwd && !isAbsolute(path) ? resolve(cwd, path) : path } : {};
+    })
+  };
+};
 var EXIT_CODE_FAILURE = /^Error: Exit code \d+/;
 var isToolResultError = (toolResult) => {
   try {
@@ -388,6 +473,105 @@ var sessionIdentityOf = (payload) => {
   return { sessionId: agentId, parentSessionId: sessionId };
 };
 
+// ../hook-mapping/src/codex-rollout.ts
+var CODEX_TURN_CONTEXT_TYPE = "turn_context";
+var CODEX_AUTO_REVIEWER = "auto_review";
+var CODEX_GUARDIAN_THREAD_SOURCE = "guardian_review";
+var CODEX_PLANNED_ACTION_MARKER = "Planned action JSON:\n";
+var CODEX_APPROVAL_REQUEST_END = ">>> APPROVAL REQUEST END";
+var CODEX_SHELL_TOOL = "exec_command";
+var CODEX_SHELL_COMMAND_FLAGS = ["-lc", "-c"];
+var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+var parseRecord = (text) => {
+  try {
+    return asRecord(JSON.parse(text));
+  } catch {
+    return null;
+  }
+};
+var nonEmptyString = (value) => typeof value === "string" && value.length > 0 ? value : void 0;
+var isTimestamp = (value) => typeof value === "string" && Number.isFinite(Date.parse(value));
+var readCodexTurnContext = (line) => {
+  const entry = parseRecord(line);
+  if (entry?.type !== CODEX_TURN_CONTEXT_TYPE) return null;
+  const payload = asRecord(entry.payload);
+  const turnId = nonEmptyString(payload?.turn_id);
+  if (!payload || !turnId) return null;
+  return {
+    turnId,
+    approvalsReviewer: payload.approvals_reviewer === CODEX_AUTO_REVIEWER ? "auto_review" : "user",
+    ...isTimestamp(entry.timestamp) ? { startedAt: entry.timestamp } : {}
+  };
+};
+var isCodexGuardianRolloutHead = (line, sessionId) => {
+  if (!sessionId) return false;
+  const entry = parseRecord(line);
+  const payload = asRecord(entry?.payload);
+  return entry?.type === "session_meta" && payload?.parent_thread_id === sessionId && payload.thread_source === CODEX_GUARDIAN_THREAD_SOURCE;
+};
+var readCodexPlannedAction = (message) => {
+  const marker = message.lastIndexOf(CODEX_PLANNED_ACTION_MARKER);
+  if (marker < 0) return null;
+  const body = message.slice(marker + CODEX_PLANNED_ACTION_MARKER.length);
+  const end = body.lastIndexOf(CODEX_APPROVAL_REQUEST_END);
+  if (end < 0 || body.slice(end + CODEX_APPROVAL_REQUEST_END.length).trim().length > 0) return null;
+  return parseRecord(body.slice(0, end).trim());
+};
+var readCodexReviewVerdict = (message) => {
+  const verdict = parseRecord(message.trim());
+  if (verdict?.outcome !== "allow" && verdict?.outcome !== "deny") return null;
+  const rationale = typeof verdict.rationale === "string" ? verdict.rationale.trim() : "";
+  return { outcome: verdict.outcome, ...rationale ? { rationale } : {} };
+};
+var scanCodexGuardianReviews = (lines) => {
+  const reviews = [];
+  let pending = null;
+  for (const line of lines) {
+    const entry = parseRecord(line.text);
+    const payload = asRecord(entry?.payload);
+    if (entry?.type !== "event_msg" || typeof payload?.message !== "string") continue;
+    if (payload.type === "user_message") {
+      const plannedAction = readCodexPlannedAction(payload.message);
+      pending = plannedAction ? { offset: line.offset, plannedAction, ...isTimestamp(entry.timestamp) ? { requestedAt: entry.timestamp } : {} } : null;
+      continue;
+    }
+    if (payload.type !== "agent_message" || !pending) continue;
+    const verdict = readCodexReviewVerdict(payload.message);
+    if (!verdict) continue;
+    reviews.push({ ...pending, verdict });
+    pending = null;
+  }
+  return { reviews, ...pending ? { pendingOffset: pending.offset } : {} };
+};
+var codexPlannedShellCommand = (plannedAction) => {
+  if (plannedAction?.tool !== CODEX_SHELL_TOOL) return null;
+  const argv = plannedAction.command;
+  if (!Array.isArray(argv) || argv.length !== 3) return null;
+  const [shell, flag, command] = argv;
+  if (typeof shell !== "string" || shell.trim().length === 0) return null;
+  if (typeof flag !== "string" || !CODEX_SHELL_COMMAND_FLAGS.includes(flag)) return null;
+  if (typeof command !== "string" || command.trim().length === 0) return null;
+  const cwd = nonEmptyString(plannedAction.cwd);
+  return { command, ...cwd ? { cwd } : {} };
+};
+var codexReviewerDenialsSince = (reviews, since) => {
+  const sinceMs = Date.parse(since);
+  if (!Number.isFinite(sinceMs)) return [];
+  return reviews.flatMap((review) => {
+    if (review.verdict.outcome !== "deny" || !review.requestedAt) return [];
+    if (Date.parse(review.requestedAt) < sinceMs) return [];
+    const shell = codexPlannedShellCommand(review.plannedAction);
+    if (!shell) return [];
+    return [{
+      ...shell,
+      offset: review.offset,
+      requestedAt: review.requestedAt,
+      plannedAction: review.plannedAction,
+      ...review.verdict.rationale ? { rationale: review.verdict.rationale } : {}
+    }];
+  });
+};
+
 export {
   HOOK_FALLBACK_MAX,
   UNNAMED_ACTION,
@@ -396,6 +580,7 @@ export {
   parseApplyPatchOps,
   parseApplyPatchFiles,
   OPENCODE_TOOL_NAMES,
+  canonicalGateInputs,
   isToolResultError,
   toolResultErrorText,
   deriveReceiptMeta,
@@ -415,5 +600,9 @@ export {
   notificationAction,
   describeStopFailure,
   permissionDeniedAction,
-  sessionIdentityOf
+  sessionIdentityOf,
+  readCodexTurnContext,
+  isCodexGuardianRolloutHead,
+  scanCodexGuardianReviews,
+  codexReviewerDenialsSince
 };

package/dist/{chunk-RE25RJ5A.js → chunk-B35OCFXH.js}

@@ -2,24 +2,24 @@ import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-54W7ELDQ.js";
+} from "./chunk-TZHDKRMG.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-I7LKI4WO.js";
+} from "./chunk-DOD3A6EU.js";
 import {
   getMachineId
-} from "./chunk-E47WV7BJ.js";
+} from "./chunk-WU6LSXJ6.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-VMQU7YEJ.js";
+} from "./chunk-SJLGOVC6.js";
 import {
   getBaseUrl
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-UKMLSQXA.js → chunk-CP34FI4B.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-XZWUOCJZ.js";
+} from "./chunk-LBNAGGLV.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-I7LKI4WO.js → chunk-DOD3A6EU.js}

@@ -2,27 +2,25 @@ import {
   needsShell,
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
-import {
-  resolveGlobalBinary
-} from "./chunk-L4ZCFMWW.js";
 import {
   getMachineId
-} from "./chunk-E47WV7BJ.js";
+} from "./chunk-WU6LSXJ6.js";
 import {
-  pusharyDir
-} from "./chunk-NOVA7KZ2.js";
+  pusharyDir,
+  resolveGlobalBinary
+} from "./chunk-XL3RKJYQ.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "./chunk-VMQU7YEJ.js";
+} from "./chunk-SJLGOVC6.js";
 import {
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic,
   writeJsonAtomicDurable
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VZD2GEKB.js";
 import {
   getApiKey
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-N6FAXQDD.js → chunk-FAJ4R7IB.js}

@@ -1,6 +1,6 @@
 import {
   resolvePathBinary
-} from "./chunk-L4ZCFMWW.js";
+} from "./chunk-XL3RKJYQ.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-U5RIXR7I.js → chunk-HB2KB7QL.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-QV266EGS.js → chunk-HFQ7WSHZ.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
-  POSTTOOLUSE_MIRRORED_TOOLS,
-  PRETOOLUSE_PHONE_ANSWERED_TOOLS
-} from "./chunk-XUTSZYYJ.js";
+  POSTTOOLUSE_MIRRORED_TOOLS
+} from "./chunk-OPR2BPD4.js";
 import {
-  isProtectedByScope
-} from "./chunk-NOVA7KZ2.js";
+  isProtectedByScope,
+  registerHookEntry
+} from "./chunk-XL3RKJYQ.js";
 import {
+  CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
-  HOOK_LOCATOR_BINARY,
-  PRETOOLUSE_GATED_TOOLS
-} from "./chunk-MC5WUOJJ.js";
+  HOOK_LOCATOR_BINARY
+} from "./chunk-OUAE3GKO.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";
@@ -52,8 +52,7 @@ var addGeminiHooks = (settings, command) => {
   const hooks = ensureRecord(settings, "hooks");
   for (const definition of GEMINI_HOOK_EVENTS) {
     const existing = Array.isArray(hooks[definition.event]) ? hooks[definition.event] : [];
-    const entries = existing.filter((entry) => !isPusharyGeminiHook(entry));
-    entries.push({
+    hooks[definition.event] = registerHookEntry(existing, isPusharyGeminiHook, {
       ...definition.matcher ? { matcher: definition.matcher } : {},
       hooks: [{
         name: "pushary",
@@ -62,7 +61,6 @@ var addGeminiHooks = (settings, command) => {
         timeout: definition.timeoutMs
       }]
     });
-    hooks[definition.event] = entries;
   }
 };
 var removeGeminiHooks = (settings, scope) => {
@@ -128,12 +126,11 @@ var atLeast = (version, floor) => compareVersion(version, floor) >= 0;
 var formatVersion = (version) => version.join(".");
 
 // src/claude-events.ts
-var GATED_TOOLS = [...PRETOOLUSE_GATED_TOOLS, ...PRETOOLUSE_PHONE_ANSWERED_TOOLS].join("|");
 var MIRRORED_TOOLS = POSTTOOLUSE_MIRRORED_TOOLS.join("|");
 var ESTABLISHED = [1, 0, 0];
 var OBSERVED = [2, 0, 0];
 var CLAUDE_HOOK_EVENTS = [
-  { event: "PreToolUse", binary: "pushary-hook", matcher: GATED_TOOLS, timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: ESTABLISHED },
+  { event: "PreToolUse", binary: "pushary-hook", matcher: CLAUDE_PRETOOLUSE_MATCHER, timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: ESTABLISHED },
   { event: "PostToolUse", binary: "pushary-post-hook", matcher: MIRRORED_TOOLS, timeout: 10, delivery: "telemetry", since: ESTABLISHED },
   { event: "Stop", binary: "pushary-stop-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
   { event: "UserPromptSubmit", binary: "pushary-prompt-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
@@ -142,7 +139,7 @@ var CLAUDE_HOOK_EVENTS = [
   { event: "SessionEnd", binary: "pushary-session-end-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
   { event: "StopFailure", binary: "pushary-stopfailure-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
   { event: "PermissionRequest", binary: "pushary-permission-hook", timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: ESTABLISHED },
-  { event: "PermissionDenied", binary: "pushary-permission-denied-hook", timeout: 60, delivery: "telemetry", since: ESTABLISHED },
+  { event: "PermissionDenied", binary: "pushary-permission-denied-hook", timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", holds: true, since: ESTABLISHED },
   // Observability only. Each carries session shape the island cannot get any other
   // way, and none of them decides anything.
   { event: "SubagentStart", binary: "pushary-session-start-hook", timeout: 10, delivery: "telemetry", since: OBSERVED },

package/dist/{chunk-QJPYJVL3.js → chunk-IRLTW6KF.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-Y6SCMXR6.js → chunk-J44RPHUZ.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-NOVA7KZ2.js";
+} from "./chunk-XL3RKJYQ.js";
 import {
   readJsonSafe
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VZD2GEKB.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-R6LBGKWQ.js → chunk-JQU6PMH4.js}

@@ -1,16 +1,16 @@
 import {
   detectClaudeVersion
-} from "./chunk-4DUEIUUO.js";
+} from "./chunk-K6CH5NVW.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-ATKGKAP6.js";
+} from "./chunk-QXIF6R4P.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "./chunk-QD73WATQ.js";
+} from "./chunk-6LRGZJFB.js";
 import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_BINARY,
@@ -21,14 +21,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-QV266EGS.js";
-import {
-  guardBinary
-} from "./chunk-3AJIK5AO.js";
-import {
-  resolveGlobalBinDir,
-  resolveGlobalBinary
-} from "./chunk-L4ZCFMWW.js";
+} from "./chunk-HFQ7WSHZ.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -38,16 +31,21 @@ import {
   codexConfigToml,
   codexHookPositions,
   codexHooksJson,
+  codexVacatedIndexes,
+  dropVacatedCodexHookTrust,
+  guardBinary,
   hasCodexHooks,
+  resolveGlobalBinDir,
+  resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-NOVA7KZ2.js";
+} from "./chunk-XL3RKJYQ.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VZD2GEKB.js";
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/reapply.ts
 import { join } from "path";
@@ -218,6 +216,7 @@ var reapplyCodexSettings = (apiKey, paths = {}) => {
   const command = guardBinary(resolveGlobalBinary(CODEX_HOOK_BINARY) ?? CODEX_HOOK_BINARY);
   let hooks = false;
   let mcp = false;
+  const vacated = codexVacatedIndexes(hooksConfig ?? void 0);
   if (hooksConfig != null) {
     try {
       addCodexHooks(hooksConfig, command);
@@ -228,7 +227,10 @@ var reapplyCodexSettings = (apiKey, paths = {}) => {
   }
   if (config != null) {
     try {
-      if (hooks) addCodexHookTrust(config, hooksPath, command, codexHookPositions(hooksConfig ?? void 0));
+      if (hooks) {
+        dropVacatedCodexHookTrust(config, hooksPath, vacated);
+        addCodexHookTrust(config, hooksPath, command, codexHookPositions(hooksConfig ?? void 0));
+      }
       if (apiKey) {
         addCodexMcpServer(config, apiKey);
         mcp = true;

package/dist/{chunk-4DUEIUUO.js → chunk-K6CH5NVW.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-QV266EGS.js";
+} from "./chunk-HFQ7WSHZ.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-XZWUOCJZ.js → chunk-LBNAGGLV.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", "custom"];