@pushary/agent-hooks 0.97.0 → 0.98.0

package/dist/{chunk-ROTIPRM4.js → chunk-5KLAETSU.js}

@@ -3,7 +3,7 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-CDSA3NTB.js";
+} from "./chunk-XPPXOKIG.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords

package/dist/{chunk-VDTC5DEM.js → chunk-6C6MS57P.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-SW37HB27.js";
+} from "./chunk-3RVCQDC4.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-YX3U2CLP.js → chunk-6CYB77VD.js}

@@ -4,11 +4,11 @@ import {
   forgetBlockedActionHint,
   hasBlockedActionHint,
   recordBlockedActionHint
-} from "./chunk-XDMHLQMH.js";
+} from "./chunk-53QCTSWY.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-VOC55PQV.js";
+} from "./chunk-XOOWC62T.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -24,7 +24,7 @@ import {
   reportEvent,
   settleQuestionsForToolUse,
   throttlePass
-} from "./chunk-DGUMR5LZ.js";
+} from "./chunk-YJDRHQLG.js";
 import {
   UNNAMED_ACTION,
   deriveAction,
@@ -34,7 +34,7 @@ import {
   describeToolCall,
   permissionDeniedAction,
   scopePathFor
-} from "./chunk-VCKQ45QA.js";
+} from "./chunk-A76GNRIK.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -49,7 +49,7 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-IZKCA35M.js";
+} from "./chunk-WU6LSXJ6.js";
 import {
   getApiKey,
   getBaseUrl
@@ -73,7 +73,7 @@ import {
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";

package/dist/{chunk-FU5SQKAY.js → chunk-6LRGZJFB.js}

@@ -2,16 +2,16 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-IBRX7LRE.js";
+} from "./chunk-HFQ7WSHZ.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks
-} from "./chunk-67RNDRKL.js";
+} from "./chunk-XL3RKJYQ.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -73,31 +73,20 @@ var toSeconds = (timeout, unit) => {
 };
 var registeredHooks = (entries, shape, unit) => {
   if (!Array.isArray(entries)) return [];
-  return entries.flatMap((entry, entryIndex) => {
+  return entries.flatMap((entry) => {
     const container = record(entry);
     if (!container) return [];
     const hooks = shape === "nested" ? Array.isArray(container.hooks) ? container.hooks : [] : [container];
-    return hooks.flatMap((hook, hookIndex) => {
+    return hooks.flatMap((hook) => {
       const command = record(hook)?.command;
       if (typeof command !== "string" || command.trim() === "") return [];
-      return [{
-        command,
-        timeoutSeconds: toSeconds(record(hook)?.timeout, unit),
-        order: [entryIndex, hookIndex]
-      }];
+      return [{ command, timeoutSeconds: toSeconds(record(hook)?.timeout, unit) }];
     });
   });
 };
-var runsBefore = (a, b) => a[0] < b[0] || a[0] === b[0] && a[1] < b[1];
 var holdersOnEvent = (event, hooks) => {
-  const ours = hooks.find((hook) => pusharyHookExecutable(hook.command) !== null);
-  if (!ours) return [];
-  return hooks.filter((hook) => pusharyHookExecutable(hook.command) === null).map((hook) => ({
-    event,
-    command: hook.command,
-    timeoutSeconds: hook.timeoutSeconds,
-    position: runsBefore(hook.order, ours.order) ? "before" : "after"
-  }));
+  if (!hooks.some((hook) => pusharyHookExecutable(hook.command) !== null)) return [];
+  return hooks.filter((hook) => pusharyHookExecutable(hook.command) === null).map((hook) => ({ event, command: hook.command, timeoutSeconds: hook.timeoutSeconds }));
 };
 var otherHolders = (hooks, events, shape, unit) => {
   const table = record(hooks);
@@ -134,7 +123,7 @@ var describeHoldTimeout = (holder) => {
   if (seconds >= 60 && seconds % 60 === 0) return `${seconds / 60}m timeout`;
   return `${seconds}s timeout`;
 };
-var describeOtherHolder = (holder) => `another hook on ${holder.event}: ${holderExecutable(holder.command)} (${describeHoldTimeout(holder)}, runs ${holder.position} ours)`;
+var describeOtherHolder = (holder) => `another hook also registered on ${holder.event}: ${holderExecutable(holder.command)} (${describeHoldTimeout(holder)})`;
 var describeHoldSentence = (agentLabel) => `${agentLabel} waits for every hook on an event, so the terminal cannot move until that one returns, however fast your phone answered.`;
 
 export {

package/dist/{chunk-VCKQ45QA.js → chunk-A76GNRIK.js}

@@ -6,7 +6,7 @@ import {
   GATE_MAX_TOOL_INPUTS,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";

package/dist/{chunk-3SNTEHOH.js → chunk-B35OCFXH.js}

@@ -2,24 +2,24 @@ import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-DNLFSRCF.js";
+} from "./chunk-TZHDKRMG.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-LYWTLNMG.js";
+} from "./chunk-DOD3A6EU.js";
 import {
   getMachineId
-} from "./chunk-IZKCA35M.js";
+} from "./chunk-WU6LSXJ6.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-VF7YOT2W.js";
+} from "./chunk-SJLGOVC6.js";
 import {
   getBaseUrl
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-ICUBJNFL.js → chunk-CP34FI4B.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-H4VNAOCG.js";
+} from "./chunk-LBNAGGLV.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-LYWTLNMG.js → chunk-DOD3A6EU.js}

@@ -4,23 +4,23 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "./chunk-IZKCA35M.js";
+} from "./chunk-WU6LSXJ6.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-67RNDRKL.js";
+} from "./chunk-XL3RKJYQ.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "./chunk-VF7YOT2W.js";
+} from "./chunk-SJLGOVC6.js";
 import {
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic,
   writeJsonAtomicDurable
-} from "./chunk-VTUN7WSG.js";
+} from "./chunk-VZD2GEKB.js";
 import {
   getApiKey
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-AXSDMDJI.js → chunk-FAJ4R7IB.js}

@@ -1,6 +1,6 @@
 import {
   resolvePathBinary
-} from "./chunk-67RNDRKL.js";
+} from "./chunk-XL3RKJYQ.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-EHQC3GWL.js → chunk-HB2KB7QL.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-IBRX7LRE.js → chunk-HFQ7WSHZ.js}

@@ -1,15 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-QFAZ6QCT.js";
+} from "./chunk-OPR2BPD4.js";
 import {
-  isProtectedByScope
-} from "./chunk-67RNDRKL.js";
+  isProtectedByScope,
+  registerHookEntry
+} from "./chunk-XL3RKJYQ.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";
@@ -51,8 +52,7 @@ var addGeminiHooks = (settings, command) => {
   const hooks = ensureRecord(settings, "hooks");
   for (const definition of GEMINI_HOOK_EVENTS) {
     const existing = Array.isArray(hooks[definition.event]) ? hooks[definition.event] : [];
-    const entries = existing.filter((entry) => !isPusharyGeminiHook(entry));
-    entries.push({
+    hooks[definition.event] = registerHookEntry(existing, isPusharyGeminiHook, {
       ...definition.matcher ? { matcher: definition.matcher } : {},
       hooks: [{
         name: "pushary",
@@ -61,7 +61,6 @@ var addGeminiHooks = (settings, command) => {
         timeout: definition.timeoutMs
       }]
     });
-    hooks[definition.event] = entries;
   }
 };
 var removeGeminiHooks = (settings, scope) => {

package/dist/{chunk-BYH75I7Y.js → chunk-IRLTW6KF.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-KDPYXMUI.js → chunk-J44RPHUZ.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-67RNDRKL.js";
+} from "./chunk-XL3RKJYQ.js";
 import {
   readJsonSafe
-} from "./chunk-VTUN7WSG.js";
+} from "./chunk-VZD2GEKB.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-DOKFLZWL.js → chunk-JQU6PMH4.js}

@@ -1,16 +1,16 @@
 import {
   detectClaudeVersion
-} from "./chunk-YRXVC4HL.js";
+} from "./chunk-K6CH5NVW.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-6WJKYD3Q.js";
+} from "./chunk-QXIF6R4P.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "./chunk-FU5SQKAY.js";
+} from "./chunk-6LRGZJFB.js";
 import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_BINARY,
@@ -21,7 +21,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-IBRX7LRE.js";
+} from "./chunk-HFQ7WSHZ.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -31,19 +31,21 @@ import {
   codexConfigToml,
   codexHookPositions,
   codexHooksJson,
+  codexVacatedIndexes,
+  dropVacatedCodexHookTrust,
   guardBinary,
   hasCodexHooks,
   resolveGlobalBinDir,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-67RNDRKL.js";
+} from "./chunk-XL3RKJYQ.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "./chunk-VTUN7WSG.js";
+} from "./chunk-VZD2GEKB.js";
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/reapply.ts
 import { join } from "path";
@@ -214,6 +216,7 @@ var reapplyCodexSettings = (apiKey, paths = {}) => {
   const command = guardBinary(resolveGlobalBinary(CODEX_HOOK_BINARY) ?? CODEX_HOOK_BINARY);
   let hooks = false;
   let mcp = false;
+  const vacated = codexVacatedIndexes(hooksConfig ?? void 0);
   if (hooksConfig != null) {
     try {
       addCodexHooks(hooksConfig, command);
@@ -224,7 +227,10 @@ var reapplyCodexSettings = (apiKey, paths = {}) => {
   }
   if (config != null) {
     try {
-      if (hooks) addCodexHookTrust(config, hooksPath, command, codexHookPositions(hooksConfig ?? void 0));
+      if (hooks) {
+        dropVacatedCodexHookTrust(config, hooksPath, vacated);
+        addCodexHookTrust(config, hooksPath, command, codexHookPositions(hooksConfig ?? void 0));
+      }
       if (apiKey) {
         addCodexMcpServer(config, apiKey);
         mcp = true;

package/dist/{chunk-YRXVC4HL.js → chunk-K6CH5NVW.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-IBRX7LRE.js";
+} from "./chunk-HFQ7WSHZ.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-H4VNAOCG.js → chunk-LBNAGGLV.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", "custom"];

package/dist/{chunk-B3557BDL.js → chunk-LX4NNYII.js}

@@ -15,10 +15,10 @@ import {
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-VTUN7WSG.js";
+} from "./chunk-VZD2GEKB.js";
 import {
   isAnswerSource
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-5ODZEFP3.js → chunk-M4TVEMLH.js}

@@ -1,6 +1,6 @@
 import {
   registerTranscript
-} from "./chunk-6VXZKOBB.js";
+} from "./chunk-5B5QV3KC.js";
 
 // src/admission.ts
 import { readFileSync } from "fs";

package/dist/{chunk-GGYH6LIE.js → chunk-NIXVMMJM.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-VF7YOT2W.js";
+} from "./chunk-SJLGOVC6.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-C2FYSFTQ.js → chunk-NQGYPTJQ.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-VF7YOT2W.js";
+} from "./chunk-SJLGOVC6.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-A4AIISZZ.js → chunk-OBYC6SN4.js}

@@ -1,6 +1,6 @@
 import {
   writeJsonAtomicDurable
-} from "./chunk-VTUN7WSG.js";
+} from "./chunk-VZD2GEKB.js";
 
 // src/transcript-recipient-pin.ts
 import { existsSync, mkdirSync, readFileSync, rmSync } from "fs";

package/dist/{chunk-QFAZ6QCT.js → chunk-OPR2BPD4.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-HUZW6SEO.js → chunk-OUAE3GKO.js}

@@ -1397,8 +1397,8 @@ var claudePermissionDeniedOutput = (decision) => ({
   }
 });
 var CODEX_RESCUE_COMMAND_MAX_LENGTH = 2e3;
-var CODEX_RESCUE_APPROVED = "The user approved this command from Pushary after the auto-reviewer denied it.";
-var codexRescueRetryInstruction = (command) => command.length <= CODEX_RESCUE_COMMAND_MAX_LENGTH ? `Run it again exactly as before, unchanged: ${command}` : `Run it again exactly as before, unchanged. It is too long to repeat in full here and begins: ${command.slice(0, CODEX_RESCUE_COMMAND_MAX_LENGTH)}`;
+var CODEX_RESCUE_APPROVED = "I approved this command in Pushary after the auto-reviewer denied it. If it is denied again, stop and tell me.";
+var codexRescueRetryInstruction = (command) => command.length <= CODEX_RESCUE_COMMAND_MAX_LENGTH ? `Run it again now, exactly as before: ${command}` : `Run it again now, exactly as before. It is too long to repeat in full here and begins: ${command.slice(0, CODEX_RESCUE_COMMAND_MAX_LENGTH)}`;
 var codexStopRescueOutput = (decision, command) => decision === "allow" ? { decision: "block", reason: `${CODEX_RESCUE_APPROVED} ${codexRescueRetryInstruction(command)}` } : { continue: true };
 var stoppedOutput = (output, stopReason) => ({ ...output, continue: false, stopReason });
 var claudePreToolUseOutput = (decision, reason, updatedInput) => ({

package/dist/{chunk-6WJKYD3Q.js → chunk-QXIF6R4P.js}

@@ -1,16 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-IBRX7LRE.js";
+} from "./chunk-HFQ7WSHZ.js";
 import {
   guardBinary,
   holdBudgetOf,
-  isProtectedByScope
-} from "./chunk-67RNDRKL.js";
+  isProtectedByScope,
+  registerHookEntry
+} from "./chunk-XL3RKJYQ.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/claude-config.ts
 import { join } from "path";
@@ -126,12 +127,14 @@ var addPusharyHooks = (settings, binDir, version = null) => {
   const hooks = ensureRecord(settings, "hooks");
   const supported = new Map(supportedClaudeEvents(version).map((hook) => [hook.event, hook]));
   for (const known of CLAUDE_HOOK_EVENTS) {
-    const current = hooks[known.event];
-    const others = (Array.isArray(current) ? current : []).filter((item) => !isPusharyHook(item));
+    const current = Array.isArray(hooks[known.event]) ? hooks[known.event] : [];
     const definition = supported.get(known.event);
     if (definition) {
-      hooks[known.event] = [...others, entry(definition, resolve)];
-    } else if (others.length > 0) {
+      hooks[known.event] = registerHookEntry(current, isPusharyHook, entry(definition, resolve));
+      continue;
+    }
+    const others = current.filter((item) => !isPusharyHook(item));
+    if (others.length > 0) {
       hooks[known.event] = others;
     } else {
       delete hooks[known.event];

package/dist/{chunk-OYTOLQ3N.js → chunk-SI7GYBQP.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-VF7YOT2W.js → chunk-SJLGOVC6.js}

@@ -4,7 +4,7 @@ import {
   resolveInstallSourceFor,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-VTUN7WSG.js";
+} from "./chunk-VZD2GEKB.js";
 import {
   configFilePath
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-DNLFSRCF.js → chunk-TZHDKRMG.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-67RNDRKL.js";
+} from "./chunk-XL3RKJYQ.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-K7MLXXPY.js → chunk-V47GITZV.js}

@@ -1,9 +1,9 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-EHQC3GWL.js";
+} from "./chunk-HB2KB7QL.js";
 import {
   codexHomeFrom
-} from "./chunk-67RNDRKL.js";
+} from "./chunk-XL3RKJYQ.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";
@@ -264,7 +264,7 @@ You have Pushary MCP tools that reach the user on their phone. Use them proactiv
 
 - When you need the user to make a decision or answer a clarifying question, call \`ask_user\` instead of guessing or stalling. Use type "confirm" for yes/no, "select" for a fixed set of options, and "input" for free text. Read \`answered\`, \`status\` and the returned handoff instead of assuming the tool blocked. Silence is not consent; choice/text answers do not authorize a separate action.
 - Ask once, on one channel. If you also have a built-in way to prompt the user, use that or \`ask_user\` for a given question, never both. \`ask_user\` is the one that reaches the user when they are away from this machine, so prefer it. Raising both strands the user in whichever prompt you are not waiting on.
-- Honor authorization already granted in this session. Ask before a risky or irreversible action outside that authorization, or when an enforced host policy requires it. Do not ask again for an already authorized step, and never bypass an enforced gate.
+- Honor authorization already granted in this session. Ask before a risky or irreversible action outside that authorization, or when an enforced host policy requires it. Do not ask again for an already authorized step, and never bypass an enforced gate. When a Pushary hook result says the user approved a specific command after a denial, rerunning that exact command is the approved path and not a bypass of that gate.
 - Call \`propose_scope\` only for an unresolved or requested file boundary. A ratified scope narrows what may proceed; it does not bypass other approval rules. Do not add a plan approval merely because work spans several files, and do not propose a new scope mid-run just to widen it. Let the installed gate request any scope expansion before the edit executes.
 - When you are blocked, stuck, or hit an error you cannot resolve on your own, call \`send_notification\` so the user knows, and call \`ask_user\` if you need a decision to continue.
 - When meaningful work finishes while the user is away, or they requested an alert, call \`send_notification\` so the user knows it is done. Skip trivial completions and duplicate reports to someone already reading. Always pass \`context\` with a \`type\` of "task_complete", "error" or "info": it is what tells Pushary this is a task update, so the user's own setting for where updates land can route it.

package/dist/{chunk-VTUN7WSG.js → chunk-VZD2GEKB.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-HUZW6SEO.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/cli/fsx.ts
 import { copyFileSync, existsSync, fsyncSync, mkdirSync, openSync, closeSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";

package/dist/{chunk-4AXWBCCO.js → chunk-W2MG2P46.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-H4VNAOCG.js";
+} from "./chunk-LBNAGGLV.js";
 import {
   isBridgeLocator
-} from "./chunk-BYH75I7Y.js";
+} from "./chunk-IRLTW6KF.js";
 import {
   pusharyHookExecutable
-} from "./chunk-FU5SQKAY.js";
+} from "./chunk-6LRGZJFB.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-WIKEADOS.js";
+} from "./chunk-2GLOHBYB.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-IZKCA35M.js → chunk-WU6LSXJ6.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-67RNDRKL.js";
+} from "./chunk-XL3RKJYQ.js";
 import {
   writeFileAtomic
-} from "./chunk-VTUN7WSG.js";
+} from "./chunk-VZD2GEKB.js";
 
 // src/identity.ts
 import { randomUUID } from "crypto";