@pushary/agent-hooks 1.6.0 → 1.6.1

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 1.6.1
+
+- Pushary-launched Codex sessions can answer supported questions from inside MCP tools through Pushary. Invalid answers and cancelled requests never become approval. This does not connect existing Codex Desktop Computer Use permission dialogs.
+- Claude forms with rules Pushary cannot preserve now stay in the native client instead of silently losing those rules.
+
 ## 1.6.0
 
 - Pushary no longer asks about a Claude Code command your own Claude Code allow rules already cover when only a Pushary default would have asked. Risky commands still ask: destructive, network and data-loss commands, and anything whose effect cannot be read from its text, such as `bash -c`, inline interpreter code, `xargs` or a `#` comment. If Claude Code prompts anyway, the approval still reaches your phone.

package/dist/bin/pushary-bell-hook.js

@@ -1,34 +1,34 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-E7MJBWSR.js";
+} from "../chunk-PWQHK3F7.js";
 import {
   readHookInput
-} from "../chunk-FDF72XHK.js";
-import "../chunk-A2GS2ENL.js";
+} from "../chunk-TPD6LCQI.js";
+import "../chunk-LNMHLXNR.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-KZBGITM4.js";
-import "../chunk-A5URWZTP.js";
-import "../chunk-GDXSCXQC.js";
-import "../chunk-MOQOJOMD.js";
-import "../chunk-DZ75BJ7V.js";
-import "../chunk-BK5F3FGE.js";
-import "../chunk-OR3A3RLH.js";
-import "../chunk-SFNRAEEW.js";
+import "../chunk-J7X5YVTP.js";
+import "../chunk-MK7ZJ2JN.js";
+import "../chunk-VT5TVFM3.js";
+import "../chunk-NYFBIXA7.js";
+import "../chunk-2PHHXWA4.js";
+import "../chunk-3TKMWW34.js";
+import "../chunk-CATEMFAP.js";
+import "../chunk-VT63XWPR.js";
 import "../chunk-66H2QQAK.js";
-import "../chunk-GP6SFVEN.js";
+import "../chunk-WBWF7WU7.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-VZANUMIF.js";
-import "../chunk-7JSE6JTZ.js";
-import "../chunk-F2OPOBRO.js";
+import "../chunk-MR2GHF3F.js";
+import "../chunk-WHOD4YGB.js";
+import "../chunk-L2FPZQQM.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-TDKE3V6W.js";
+import "../chunk-OLD4YGZR.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-VMNI33F5.js";
+import "../chunk-IEXXFXSP.js";
 import "../chunk-T7E75EKA.js";
 import "../chunk-OSJEMXSR.js";
-import "../chunk-YFD7CRIZ.js";
+import "../chunk-NTTMJFJU.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 

package/dist/bin/pushary-bell.js

@@ -5,15 +5,15 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-E7MJBWSR.js";
+} from "../chunk-PWQHK3F7.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-OR3A3RLH.js";
+} from "../chunk-CATEMFAP.js";
 import {
   claudeSettings
-} from "../chunk-F2OPOBRO.js";
+} from "../chunk-L2FPZQQM.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -23,18 +23,18 @@ import {
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-TDKE3V6W.js";
+import "../chunk-OLD4YGZR.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-VMNI33F5.js";
+import "../chunk-IEXXFXSP.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-T7E75EKA.js";
 import "../chunk-OSJEMXSR.js";
-import "../chunk-YFD7CRIZ.js";
+import "../chunk-NTTMJFJU.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 

package/dist/bin/pushary-claude.js

@@ -8,7 +8,7 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-ALG3IBLB.js";
+} from "../chunk-3ROHFC7Q.js";
 import {
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
@@ -17,24 +17,24 @@ import {
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-A2GS2ENL.js";
+} from "../chunk-LNMHLXNR.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-KZBGITM4.js";
-import "../chunk-A5URWZTP.js";
-import "../chunk-GDXSCXQC.js";
-import "../chunk-MOQOJOMD.js";
+import "../chunk-J7X5YVTP.js";
+import "../chunk-MK7ZJ2JN.js";
+import "../chunk-VT5TVFM3.js";
+import "../chunk-NYFBIXA7.js";
 import {
   ensureDaemonRunning
-} from "../chunk-DZ75BJ7V.js";
-import "../chunk-BK5F3FGE.js";
-import "../chunk-OR3A3RLH.js";
+} from "../chunk-2PHHXWA4.js";
+import "../chunk-3TKMWW34.js";
+import "../chunk-CATEMFAP.js";
 import {
   encryptRecord
-} from "../chunk-SFNRAEEW.js";
+} from "../chunk-VT63XWPR.js";
 import "../chunk-66H2QQAK.js";
 import {
   transcriptsEnabled
-} from "../chunk-GP6SFVEN.js";
+} from "../chunk-WBWF7WU7.js";
 import {
   needsShell,
   spawnClaude
@@ -56,8 +56,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-66BIMA62.js";
-import "../chunk-VZANUMIF.js";
+} from "../chunk-ROCRCXTP.js";
+import "../chunk-MR2GHF3F.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -67,18 +67,18 @@ import {
   nextLongPollMs,
   waitForAnswer,
   withdrawQuestion
-} from "../chunk-PYCQXCI5.js";
+} from "../chunk-LVHGSD5E.js";
 import {
   getMachineId
-} from "../chunk-7JSE6JTZ.js";
-import "../chunk-F2OPOBRO.js";
+} from "../chunk-WHOD4YGB.js";
+import "../chunk-L2FPZQQM.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-TDKE3V6W.js";
+import "../chunk-OLD4YGZR.js";
 import "../chunk-HETOKNIL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-VMNI33F5.js";
+import "../chunk-IEXXFXSP.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
@@ -88,7 +88,7 @@ import {
   KILL_REASON,
   redactSecrets,
   resolveGate
-} from "../chunk-YFD7CRIZ.js";
+} from "../chunk-NTTMJFJU.js";
 import {
   NPX_LATEST_COMMAND
 } from "../chunk-EA3IELHP.js";

package/dist/bin/pushary-clean.js

@@ -7,14 +7,14 @@ import {
   createGuards,
   resolveHermesPython,
   runHermesPythonScript
-} from "../chunk-NYD7W7AT.js";
+} from "../chunk-7XGW7IKI.js";
 import "../chunk-P32LPT2L.js";
 import {
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-G5LENVCZ.js";
+} from "../chunk-B75OQ2E7.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -24,7 +24,7 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-B6TYEKJR.js";
+} from "../chunk-5NDOV3UU.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -32,40 +32,40 @@ import {
   compatiblePermissionRuleFile,
   removeCompatibleHooks,
   removeCompatibleMcpServer
-} from "../chunk-FI3LQCUH.js";
+} from "../chunk-X4G4MQEV.js";
 import {
   isClaudeMcpSnapshot,
   removeClaudeMcpServers,
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-HWG7X3VI.js";
+} from "../chunk-UMVM4HVV.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-KZBGITM4.js";
-import "../chunk-A5URWZTP.js";
+} from "../chunk-J7X5YVTP.js";
+import "../chunk-MK7ZJ2JN.js";
 import {
   liveBridgeProbe,
   resolveBridgeStub
-} from "../chunk-GDXSCXQC.js";
+} from "../chunk-VT5TVFM3.js";
 import {
   pusharyHookExecutable
-} from "../chunk-MOQOJOMD.js";
+} from "../chunk-NYFBIXA7.js";
 import {
   disableDaemonService
-} from "../chunk-DZ75BJ7V.js";
+} from "../chunk-2PHHXWA4.js";
 import {
   removeGeminiSettings
-} from "../chunk-BK5F3FGE.js";
-import "../chunk-OR3A3RLH.js";
+} from "../chunk-3TKMWW34.js";
+import "../chunk-CATEMFAP.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-66BIMA62.js";
-import "../chunk-VZANUMIF.js";
-import "../chunk-PYCQXCI5.js";
-import "../chunk-7JSE6JTZ.js";
+import "../chunk-ROCRCXTP.js";
+import "../chunk-MR2GHF3F.js";
+import "../chunk-LVHGSD5E.js";
+import "../chunk-WHOD4YGB.js";
 import {
   bridgeAgentKey,
   claudeJson,
@@ -94,7 +94,7 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-F2OPOBRO.js";
+} from "../chunk-L2FPZQQM.js";
 import {
   exitOnHelpFlag
 } from "../chunk-P4BNYJ5Q.js";
@@ -105,14 +105,14 @@ import {
   CANDIDATE_RCS,
   isDisabledExport,
   removeClaudeAlias
-} from "../chunk-TDKE3V6W.js";
+} from "../chunk-OLD4YGZR.js";
 import "../chunk-HETOKNIL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-VMNI33F5.js";
+import "../chunk-IEXXFXSP.js";
 import "../chunk-T7E75EKA.js";
 import "../chunk-OSJEMXSR.js";
 import {
@@ -123,7 +123,7 @@ import {
   SUPPORT_EMAIL,
   isValidApiKey,
   redactSecrets
-} from "../chunk-YFD7CRIZ.js";
+} from "../chunk-NTTMJFJU.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 

package/dist/bin/pushary-codex-bridge.js

@@ -1,54 +1,60 @@
 #!/usr/bin/env node
-import "../chunk-5MH5P366.js";
+import "../chunk-GE64YOTX.js";
 import {
   LiveTranscriptRelay,
   liveSessionSleep,
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-5QCZYSYR.js";
+} from "../chunk-7H4HD2WR.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-ALG3IBLB.js";
-import "../chunk-SFNRAEEW.js";
+} from "../chunk-3ROHFC7Q.js";
+import "../chunk-VT63XWPR.js";
 import "../chunk-66H2QQAK.js";
 import {
   transcriptsEnabled
-} from "../chunk-GP6SFVEN.js";
+} from "../chunk-WBWF7WU7.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import {
+  isAskUserResponse,
   isDecisionStopped,
+  isWaitForAnswerResponse,
   withdrawQuestion
-} from "../chunk-PYCQXCI5.js";
+} from "../chunk-LVHGSD5E.js";
 import {
   getMachineId
-} from "../chunk-7JSE6JTZ.js";
+} from "../chunk-WHOD4YGB.js";
 import {
   resolveBinary
-} from "../chunk-F2OPOBRO.js";
-import "../chunk-TDKE3V6W.js";
+} from "../chunk-L2FPZQQM.js";
+import "../chunk-OLD4YGZR.js";
 import {
   callMcpTool
 } from "../chunk-HETOKNIL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-VMNI33F5.js";
+import "../chunk-IEXXFXSP.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-OSJEMXSR.js";
 import {
+  degradedLine,
+  elicitationContent,
   parseAgentQuestion,
-  parseAgentQuestionAnswers
-} from "../chunk-YFD7CRIZ.js";
+  parseAgentQuestionAnswers,
+  planElicitationAsk,
+  readElicitationFields
+} from "../chunk-NTTMJFJU.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 
@@ -57,6 +63,38 @@ import { existsSync } from "fs";
 
 // src/codex-bridge.ts
 import { randomUUID } from "crypto";
+
+// src/codex-elicitation.ts
+var planCodexElicitation = (params, threadId) => {
+  if (!threadId || params.threadId !== threadId || params.mode !== "form" || params._meta != null || typeof params.serverName !== "string" || !params.serverName.trim() || typeof params.message !== "string" || !params.message.trim()) return null;
+  const fields = readElicitationFields(params.requestedSchema);
+  if (!fields || fields.length > 3) return null;
+  const plan = [];
+  for (const [index, field] of fields.entries()) {
+    const question = `${params.serverName}: ${params.message} \u2014 ${field.label}`;
+    const ask = planElicitationAsk(question, [field]);
+    if (!ask || ask.kind === "questions" || question.length > 500) return null;
+    let labels = [];
+    if (ask.kind === "confirm") labels = ["Yes", "No"];
+    if (ask.kind === "select") labels = ask.options;
+    if (labels.length > 4 || labels.some((label) => label.length > 100)) return null;
+    plan.push({ ask, question: { id: String(index), question, isOther: false, options: labels.map((label) => ({ label })) } });
+  }
+  return plan;
+};
+var codexElicitationContent = (plan, answers) => {
+  let content = {};
+  for (const { ask, question } of plan) {
+    const values = answers[question.id]?.answers;
+    if (!values || values.length !== 1) return null;
+    const field = elicitationContent(ask, values[0]);
+    if (!field) return null;
+    content = { ...content, ...field };
+  }
+  return content;
+};
+
+// src/codex-bridge.ts
 import { spawn } from "child_process";
 import { basename } from "path";
 var MAX_RPC_LINE = 1024 * 1024;
@@ -70,6 +108,7 @@ var MAX_MESSAGE_BUFFERS = 16;
 var JsonRpcClient = class {
   constructor(command, cwd, timeoutMs, bridgeOptions) {
     this.bridgeOptions = bridgeOptions;
+    this.threadId = bridgeOptions.resumeThreadId ?? null;
     const options = { cwd, env: process.env, stdio: ["pipe", "pipe", "pipe"] };
     this.child = process.platform === "win32" ? spawnClaude(command.command, command.args ?? [], options) : spawn(command.command, command.args ?? [], options);
     this.child.stdout?.setEncoding("utf8");
@@ -84,6 +123,7 @@ var JsonRpcClient = class {
   pending = /* @__PURE__ */ new Map();
   notifications = /* @__PURE__ */ new Set();
   serverRequests = /* @__PURE__ */ new Map();
+  threadId = null;
   nextId = 1;
   buffer = "";
   closed = false;
@@ -108,6 +148,9 @@ var JsonRpcClient = class {
     this.notifications.add(listener);
     return () => this.notifications.delete(listener);
   }
+  bindThread(threadId) {
+    this.threadId = threadId;
+  }
   notify(method) {
     this.write({ method });
   }
@@ -163,11 +206,13 @@ var JsonRpcClient = class {
   handle(line) {
     let message;
     try {
-      message = JSON.parse(line);
+      const parsed = JSON.parse(line);
+      if (!isRpcMessage(parsed)) return;
+      message = parsed;
     } catch {
       return;
     }
-    if (message.id !== void 0 && message.method === "item/tool/requestUserInput") {
+    if (message.id !== void 0 && (message.method === "item/tool/requestUserInput" || message.method === "mcpServer/elicitation/request")) {
       const id = message.id;
       if (this.serverRequests.has(id)) return;
       if (this.serverRequests.size >= MAX_PENDING_RPC) {
@@ -177,7 +222,8 @@ var JsonRpcClient = class {
       const controller = new AbortController();
       this.serverRequests.set(id, controller);
       const signal = AbortSignal.any([controller.signal, this.bridgeOptions.signal]);
-      void answerCodexQuestions(this.bridgeOptions, message.params ?? {}, signal).then(
+      const answer = message.method === "mcpServer/elicitation/request" ? answerCodexElicitation(this.bridgeOptions, message.params ?? {}, this.threadId, signal) : answerCodexQuestions(this.bridgeOptions, message.params ?? {}, signal);
+      void answer.then(
         (result) => {
           if (!signal.aborted && !this.closed) this.write({ id, result });
         },
@@ -226,7 +272,9 @@ var JsonRpcClient = class {
     this.pending.clear();
   }
 };
-var object = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+var isJsonObject = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var object = (value) => isJsonObject(value) ? value : null;
+var isRpcMessage = (value) => isJsonObject(value) && (value.id === void 0 || typeof value.id === "string" || typeof value.id === "number" && Number.isFinite(value.id)) && (value.method === void 0 || typeof value.method === "string") && (value.params === void 0 || isJsonObject(value.params)) && (value.error === void 0 || isJsonObject(value.error) && (value.error.message === void 0 || typeof value.error.message === "string"));
 var string = (value) => typeof value === "string" && value.length > 0 ? value : null;
 var input = (text) => [{ type: "text", text, text_elements: [] }];
 var rpcThreadId = (result) => string(object(object(result)?.thread)?.id);
@@ -234,7 +282,7 @@ var rpcTurnId = (result) => {
   const response = object(result);
   return string(object(response?.turn)?.id) ?? string(response?.turnId);
 };
-var answerCodexQuestions = async (options, params, signal) => {
+var answerCodexQuestions = async (options, params, signal, toolName = "request_user_input") => {
   if (!Array.isArray(params.questions) || !params.questions.length || params.questions.length > 3) throw new Error("Invalid questions");
   const answers = /* @__PURE__ */ Object.create(null);
   const deadline = Date.now() + Math.min(12e4, typeof params.autoResolutionMs === "number" ? Math.max(0, params.autoResolutionMs) : 12e4);
@@ -248,7 +296,11 @@ var answerCodexQuestions = async (options, params, signal) => {
     const structured = labels.length >= 2 ? parseAgentQuestion({ ...question, multiSelect: false, allowOther: question?.isOther === true }) : void 0;
     let correlationId = null;
     let settled = false;
-    const call = (name, args, timeoutMs, waitSignal = signal) => callMcpTool(options.apiKey, name, args, { baseUrl: options.baseUrl, signal: waitSignal, timeoutMs, maxRetries: 1 });
+    const call = async (name, args, timeoutMs, waitSignal = signal) => {
+      const result = await callMcpTool(options.apiKey, name, args, { baseUrl: options.baseUrl, signal: waitSignal, timeoutMs, maxRetries: 1 });
+      if (name === "wait_for_answer" && !isWaitForAnswerResponse(result)) throw new Error("Invalid wait_for_answer response");
+      return result;
+    };
     try {
       signal.throwIfAborted();
       if (Date.now() >= deadline) throw new Error("Question expired");
@@ -262,11 +314,12 @@ var answerCodexQuestions = async (options, params, signal) => {
         agentName: `Codex - ${basename(options.cwd)}`,
         sessionId: params.threadId,
         machineId: options.machineId,
-        toolName: "request_user_input",
+        toolName,
         wait: false,
         waitEndsAt: new Date(deadline).toISOString()
       }, Math.min(1e4, deadline - Date.now()));
-      correlationId = string(result.correlationId);
+      correlationId = string(object(result)?.correlationId);
+      if (!isAskUserResponse(result)) throw new Error("Invalid ask_user response");
       while (!result.answered) {
         if (result.status === "terminal" || result.status === "notified" || result.suppressed || result.mode === "terminal_only" || result.mode === "notify_only") {
           if (correlationId) {
@@ -302,6 +355,27 @@ var answerCodexQuestions = async (options, params, signal) => {
   }
   return { answers };
 };
+var answerCodexElicitation = async (options, params, threadId, signal) => {
+  const plan = planCodexElicitation(params, threadId);
+  if (!plan) {
+    process.stderr.write(`${degradedLine("questions", { reason: "unsupported_codex_elicitation", fallback: "no form answer submitted", event: "mcpServer/elicitation/request" })}
+`);
+    return { action: "cancel", content: null };
+  }
+  try {
+    const result = await answerCodexQuestions(options, {
+      threadId,
+      questions: plan.map((field) => field.question)
+    }, signal, "Elicitation");
+    const content = codexElicitationContent(plan, result.answers);
+    if (!content) throw new Error("Invalid elicitation answer");
+    return { action: "accept", content };
+  } catch {
+    process.stderr.write(`${degradedLine("questions", { reason: "codex_elicitation_unanswered", fallback: "no form answer submitted", event: "mcpServer/elicitation/request" })}
+`);
+    return { action: "cancel", content: null };
+  }
+};
 var runCodexBridge = async (options) => {
   const timeoutMs = options.requestTimeoutMs ?? 1e4;
   const now = options.now ?? Date.now;
@@ -368,6 +442,7 @@ var runCodexBridge = async (options) => {
     rpc.notify("initialized");
     const thread = options.resumeThreadId ? await rpc.request("thread/resume", { threadId: options.resumeThreadId, cwd: options.cwd, excludeTurns: true }) : await rpc.request("thread/start", { cwd: options.cwd, model: options.model ?? null });
     threadId = rpcThreadId(thread);
+    if (threadId) rpc.bindThread(threadId);
     if (!threadId) throw new Error("Codex app-server did not return a thread id");
     ownership = startProcessOwnership({ sessionId: threadId, pid: process.pid, spawnId: options.spawnId });
     await ownership.ready;

package/dist/bin/pushary-codex-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-GOXINLDU.js";
+} from "../chunk-GOQC7R3F.js";
 import {
   blockedActionFingerprint,
   codexCallKey,
@@ -13,33 +13,33 @@ import {
   recordCodexCallDecision,
   reportMachineDenial,
   userScope
-} from "../chunk-BE4P7ERZ.js";
+} from "../chunk-ZR4NP264.js";
 import {
   triggerAutoUpdate
-} from "../chunk-RBPJO4KG.js";
+} from "../chunk-O6MHM25J.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-F4KRNFDE.js";
+} from "../chunk-7WRJFRNF.js";
 import {
   readHookInput
-} from "../chunk-FDF72XHK.js";
+} from "../chunk-TPD6LCQI.js";
 import {
   denyReasonFrom,
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
-import "../chunk-A2GS2ENL.js";
+import "../chunk-LNMHLXNR.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-KZBGITM4.js";
-import "../chunk-A5URWZTP.js";
-import "../chunk-GDXSCXQC.js";
-import "../chunk-MOQOJOMD.js";
-import "../chunk-DZ75BJ7V.js";
-import "../chunk-BK5F3FGE.js";
-import "../chunk-OR3A3RLH.js";
-import "../chunk-SFNRAEEW.js";
+import "../chunk-J7X5YVTP.js";
+import "../chunk-MK7ZJ2JN.js";
+import "../chunk-VT5TVFM3.js";
+import "../chunk-NYFBIXA7.js";
+import "../chunk-2PHHXWA4.js";
+import "../chunk-3TKMWW34.js";
+import "../chunk-CATEMFAP.js";
+import "../chunk-VT63XWPR.js";
 import "../chunk-66H2QQAK.js";
-import "../chunk-GP6SFVEN.js";
+import "../chunk-WBWF7WU7.js";
 import "../chunk-XHKBHWLX.js";
 import {
   CODEX_AGENT,
@@ -76,8 +76,8 @@ import {
   toCodexWire,
   toPolicyLookup,
   toPolicyLookups
-} from "../chunk-66BIMA62.js";
-import "../chunk-VZANUMIF.js";
+} from "../chunk-ROCRCXTP.js";
+import "../chunk-MR2GHF3F.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -89,20 +89,20 @@ import {
   requestGate,
   sendNotification,
   waitForQuestion
-} from "../chunk-PYCQXCI5.js";
+} from "../chunk-LVHGSD5E.js";
 import {
   getMachineId
-} from "../chunk-7JSE6JTZ.js";
+} from "../chunk-WHOD4YGB.js";
 import {
   canonicalJson
-} from "../chunk-F2OPOBRO.js";
+} from "../chunk-L2FPZQQM.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-TDKE3V6W.js";
+import "../chunk-OLD4YGZR.js";
 import "../chunk-HETOKNIL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-VMNI33F5.js";
+import "../chunk-IEXXFXSP.js";
 import {
   writeFileAtomic
 } from "../chunk-T7E75EKA.js";
@@ -122,7 +122,7 @@ import {
   hookWaitClamped,
   hookWaitDeadline,
   resolveGate
-} from "../chunk-YFD7CRIZ.js";
+} from "../chunk-NTTMJFJU.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 
@@ -745,7 +745,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-RRDVJATI.js");
+    const { repairCodexHolds } = await import("../reapply-GGHT2YJX.js");
     repairCodexHolds();
   } catch {
     return;