@pushary/agent-hooks 1.9.13 → 1.9.15

package/dist/bin/pushary-transcripts.js

@@ -6,17 +6,17 @@ import {
 } from "../chunk-SGZJ5LYH.js";
 import {
   transcriptsEnabled
-} from "../chunk-G54VGPRX.js";
+} from "../chunk-HSVJ62BE.js";
 import {
   exitOnHelpFlag
-} from "../chunk-MWP65CZ3.js";
-import "../chunk-S2LDTUHS.js";
+} from "../chunk-C2OUUGCW.js";
+import "../chunk-5EWNGYFD.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-NPRFA7YM.js";
+import "../chunk-VKTDXQGH.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-7JM6TCMA.js";
-import "../chunk-4ATFPZ6X.js";
-import "../chunk-TVDI7SX2.js";
+import "../chunk-HTO2XULO.js";
+import "../chunk-PNUWMEIY.js";
+import "../chunk-AYV2NRYJ.js";
 
 // bin/pushary-transcripts.ts
 exitOnHelpFlag("transcripts");

package/dist/bin/pushary-upgrade.js

@@ -9,27 +9,27 @@ import {
   upgradeFinishOutcome,
   upgradeInstalledPackage,
   withUpgradeLock
-} from "../chunk-GFAVGG3X.js";
+} from "../chunk-SDDKVY4I.js";
 import {
   installWithUpgradeLock
-} from "../chunk-Y25RH4VF.js";
+} from "../chunk-57VUNV32.js";
 import {
   ensureCodexTrustAfterReapply,
   reapplyAllAgents
-} from "../chunk-6CM3B4PJ.js";
+} from "../chunk-5BIMNGRQ.js";
 import {
   describeCodexTrustConfirmation
-} from "../chunk-OOZ5RSEF.js";
-import "../chunk-RJAPOB34.js";
+} from "../chunk-CU7Y7Y4L.js";
+import "../chunk-LJJWNHUW.js";
 import {
   waitForMachineReadiness
-} from "../chunk-4ZSWBLVM.js";
+} from "../chunk-7QZZK2YU.js";
 import {
   detectProviderLiveCapabilities,
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-HHMMY6TB.js";
+} from "../chunk-JC3AGMOP.js";
 import "../chunk-RIVNNBEK.js";
 import {
   AUTO_UPDATE_DISABLE_ENV,
@@ -40,7 +40,7 @@ import {
   parseAutoUpdateFlag,
   readAutoUpdateState,
   updateAutoUpdateState
-} from "../chunk-MPDJJNGA.js";
+} from "../chunk-6MLSXBNR.js";
 import {
   DAEMON_COLD_START_TIMEOUT_MS,
   daemonHasRemoteProof,
@@ -52,39 +52,39 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-43IDNI4X.js";
+} from "../chunk-TFV6RATK.js";
 import "../chunk-XHKBHWLX.js";
 import {
   readMacAppAgentKey
-} from "../chunk-YI37QERZ.js";
-import "../chunk-6QPQG3Q5.js";
+} from "../chunk-6WECKO24.js";
+import "../chunk-NDKFHLJI.js";
 import {
   exitOnHelpFlag
-} from "../chunk-MWP65CZ3.js";
-import "../chunk-3VSMTCXV.js";
-import "../chunk-226PID65.js";
-import "../chunk-4EAILOOQ.js";
-import "../chunk-6MGD24SH.js";
-import "../chunk-FWAXBC3P.js";
+} from "../chunk-C2OUUGCW.js";
+import "../chunk-ME55HQOI.js";
+import "../chunk-FZW7Q7GM.js";
+import "../chunk-VP6WDFVO.js";
+import "../chunk-YKYFFCB5.js";
+import "../chunk-7VOEZPJ4.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
 import {
   readControlMode,
   recordMacAppKeyPrefix
-} from "../chunk-S2LDTUHS.js";
-import "../chunk-6NL3LYUM.js";
-import "../chunk-JRKUJOZL.js";
-import "../chunk-JVUK5YFM.js";
+} from "../chunk-5EWNGYFD.js";
+import "../chunk-IQCNOEQL.js";
+import "../chunk-52JA2WTH.js";
+import "../chunk-YL6HU2KF.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-LYDO2SS6.js";
-import "../chunk-U6QEHPEF.js";
-import "../chunk-LUYAXSUS.js";
-import "../chunk-43ORAXAL.js";
+import "../chunk-SYLJL63X.js";
+import "../chunk-PSWFYNOX.js";
+import "../chunk-3FQCZSEQ.js";
+import "../chunk-NA5D62OI.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-NPRFA7YM.js";
+import "../chunk-VKTDXQGH.js";
 import {
   LATEST_TAG,
   autoUpdateState,
@@ -94,19 +94,19 @@ import {
   fetchLatestPublishedVersion,
   geminiSettings,
   vscodePluginDir
-} from "../chunk-WP57USIT.js";
+} from "../chunk-HJL5RBOU.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "../chunk-7JM6TCMA.js";
+} from "../chunk-HTO2XULO.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-4ATFPZ6X.js";
+} from "../chunk-PNUWMEIY.js";
 import {
   CANONICAL_PACKAGE,
   LEGACY_PACKAGE,
   getPackageVersion
-} from "../chunk-TVDI7SX2.js";
+} from "../chunk-AYV2NRYJ.js";
 
 // bin/pushary-upgrade.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-wait.js

@@ -4,36 +4,36 @@ import {
 } from "../chunk-CVWG2N3Y.js";
 import {
   exitOnFailedSettingsRequest
-} from "../chunk-ZAH3CCEV.js";
-import "../chunk-UUBEEKT6.js";
+} from "../chunk-WJO7SENK.js";
+import "../chunk-3QXCTYMG.js";
 import {
   createIo
 } from "../chunk-U4TMAANR.js";
 import {
   exitOnHelpFlag
-} from "../chunk-MWP65CZ3.js";
+} from "../chunk-C2OUUGCW.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-S2LDTUHS.js";
-import "../chunk-U6QEHPEF.js";
-import "../chunk-LUYAXSUS.js";
-import "../chunk-43ORAXAL.js";
+import "../chunk-5EWNGYFD.js";
+import "../chunk-PSWFYNOX.js";
+import "../chunk-3FQCZSEQ.js";
+import "../chunk-NA5D62OI.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-NPRFA7YM.js";
-import "../chunk-WP57USIT.js";
+import "../chunk-VKTDXQGH.js";
+import "../chunk-HJL5RBOU.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-7JM6TCMA.js";
-import "../chunk-4ATFPZ6X.js";
-import "../chunk-TVDI7SX2.js";
+} from "../chunk-HTO2XULO.js";
+import "../chunk-PNUWMEIY.js";
+import "../chunk-AYV2NRYJ.js";
 
 // bin/pushary-wait.ts
 exitOnHelpFlag("wait");

package/dist/bin/pushary.js

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
 import {
   installNetworkDefaults
-} from "../chunk-LUYAXSUS.js";
-import "../chunk-43ORAXAL.js";
+} from "../chunk-3FQCZSEQ.js";
+import "../chunk-NA5D62OI.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-WP57USIT.js";
+import "../chunk-HJL5RBOU.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-7JM6TCMA.js";
+import "../chunk-HTO2XULO.js";
 import {
   COMMANDS,
   renderHelp,
   resolveCommandName
-} from "../chunk-4ATFPZ6X.js";
+} from "../chunk-PNUWMEIY.js";
 import {
   getPackageVersion
-} from "../chunk-TVDI7SX2.js";
+} from "../chunk-AYV2NRYJ.js";
 
 // src/cli/runtime.ts
 var supportsRuntime = (version) => {

package/dist/{chunk-G5K656XW.js → chunk-2DCGUCPZ.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-WP57USIT.js";
+} from "./chunk-HJL5RBOU.js";
 import {
   readJsonSafe,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-AYV2NRYJ.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-LUYAXSUS.js → chunk-3FQCZSEQ.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-43ORAXAL.js";
+} from "./chunk-NA5D62OI.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-7JM6TCMA.js";
+} from "./chunk-HTO2XULO.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-AYV2NRYJ.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-UUBEEKT6.js → chunk-3QXCTYMG.js}

@@ -3,10 +3,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-S2LDTUHS.js";
+} from "./chunk-5EWNGYFD.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-4ATFPZ6X.js";
+} from "./chunk-PNUWMEIY.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-3EOXZYUE.js → chunk-3YCYTGGK.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-7JM6TCMA.js";
+} from "./chunk-HTO2XULO.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-JRKUJOZL.js → chunk-52JA2WTH.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-AYV2NRYJ.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-Y25RH4VF.js → chunk-57VUNV32.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-WP57USIT.js";
+} from "./chunk-HJL5RBOU.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-6CM3B4PJ.js → chunk-5BIMNGRQ.js}

@@ -1,6 +1,6 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-RJAPOB34.js";
+} from "./chunk-LJJWNHUW.js";
 import {
   detectClaudeVersion
 } from "./chunk-RIVNNBEK.js";
@@ -12,12 +12,12 @@ import {
   openCodeHookArgv,
   openCodePluginDir,
   openCodeWired
-} from "./chunk-6QPQG3Q5.js";
+} from "./chunk-NDKFHLJI.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-3VSMTCXV.js";
+} from "./chunk-ME55HQOI.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
@@ -25,7 +25,7 @@ import {
   codexWired,
   geminiWired,
   planHooks
-} from "./chunk-226PID65.js";
+} from "./chunk-FZW7Q7GM.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -36,7 +36,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-4EAILOOQ.js";
+} from "./chunk-VP6WDFVO.js";
 import {
   formatVersion
 } from "./chunk-6ICPEJY5.js";
@@ -59,7 +59,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-WP57USIT.js";
+} from "./chunk-HJL5RBOU.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-S2LDTUHS.js → chunk-5EWNGYFD.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-NPRFA7YM.js";
+} from "./chunk-VKTDXQGH.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,7 +9,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   configFilePath
-} from "./chunk-7JM6TCMA.js";
+} from "./chunk-HTO2XULO.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-TDSLVFG6.js → chunk-5LQ7QUVF.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-WP57USIT.js";
+} from "./chunk-HJL5RBOU.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-GYR4G4WO.js → chunk-6GRUERVL.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-6NL3LYUM.js";
+} from "./chunk-IQCNOEQL.js";
 
 // src/answer.ts
 var denyReasonFrom = (value, note) => {

package/dist/{chunk-J2VNQSS6.js → chunk-6LORREOI.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-7JM6TCMA.js";
+} from "./chunk-HTO2XULO.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-MPDJJNGA.js → chunk-6MLSXBNR.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-WP57USIT.js";
+} from "./chunk-HJL5RBOU.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -14,7 +14,7 @@ import {
   cliPackagePathSegments,
   globalUpgradeEntry,
   ownPackageRoot
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-AYV2NRYJ.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-YI37QERZ.js → chunk-6WECKO24.js}

@@ -1,18 +1,18 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-6QPQG3Q5.js";
+} from "./chunk-NDKFHLJI.js";
 import {
   keyPrefix
-} from "./chunk-S2LDTUHS.js";
+} from "./chunk-5EWNGYFD.js";
 import {
   bridgeAgentKey
-} from "./chunk-WP57USIT.js";
+} from "./chunk-HJL5RBOU.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";
 import {
   isValidApiKey
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-AYV2NRYJ.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-4ZSWBLVM.js → chunk-7QZZK2YU.js}

@@ -3,27 +3,27 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-HHMMY6TB.js";
+} from "./chunk-JC3AGMOP.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-43IDNI4X.js";
+} from "./chunk-TFV6RATK.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-S2LDTUHS.js";
+} from "./chunk-5EWNGYFD.js";
 import {
   getMachineId
-} from "./chunk-43ORAXAL.js";
+} from "./chunk-NA5D62OI.js";
 import {
   getBaseUrl
-} from "./chunk-7JM6TCMA.js";
+} from "./chunk-HTO2XULO.js";
 import {
   getPackageVersion
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-AYV2NRYJ.js";
 
 // src/machines.ts
 import { hostname } from "os";

package/dist/{chunk-FWAXBC3P.js → chunk-7VOEZPJ4.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-WP57USIT.js";
+} from "./chunk-HJL5RBOU.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-TVDI7SX2.js → chunk-AYV2NRYJ.js}

@@ -900,6 +900,16 @@ var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
 var APPROVAL_MODES = ["push_only", "terminal_only", "push_first", "notify_only"];
 var isApprovalMode = (value) => typeof value === "string" && APPROVAL_MODES.includes(value);
+var approvalModeWithoutLocalPrompt = (mode) => {
+  switch (mode) {
+    case "push_first":
+      return "push_only";
+    case "push_only":
+    case "notify_only":
+    case "terminal_only":
+      return mode;
+  }
+};
 var MAX_AGENT_QUESTIONS = 4;
 var parseAgentQuestion = (raw) => {
   const q = raw;
@@ -1706,6 +1716,8 @@ var DESTRUCTIVE_SUBCOMMANDS = /* @__PURE__ */ new Set([
   "wipe",
   "reset"
 ]);
+var SUBCOMMAND_WORD_SEPARATOR = /[-:]/;
+var subcommandWordDestroys = (word) => word.split(SUBCOMMAND_WORD_SEPARATOR).some((part) => DESTRUCTIVE_SUBCOMMANDS.has(part));
 var DATA_LOSS_COMMAND_PATTERNS = [
   "Bash(git branch -D:*)",
   "Bash(git branch --delete:*)",
@@ -1800,7 +1812,7 @@ var normalizedCommand = (command) => {
   const segments = readableCommandSegments(command);
   return segments === null ? null : segments.map((segment) => normalizedInvocation(invocationOf(segment))).join("; ");
 };
-var subcommandDestroys = ({ program, args }) => program !== void 0 && SUBCOMMAND_CLIS.has(basenameOf(program.text)) && subcommandWordsOf(argsAfterHarmlessGlobalFlags(args)).some((word) => DESTRUCTIVE_SUBCOMMANDS.has(word.text));
+var subcommandDestroys = ({ program, args }) => program !== void 0 && SUBCOMMAND_CLIS.has(basenameOf(program.text)) && subcommandWordsOf(argsAfterHarmlessGlobalFlags(args)).some((word) => subcommandWordDestroys(word.text));
 var segmentNeedsAPerson = (toolName, segment) => {
   const invocation = invocationOf(segment);
   const normalized = normalizedInvocation(invocation);
@@ -1816,7 +1828,79 @@ var withoutSessionToolGrants = (config) => ({
   policies: config.policies.filter((policy) => !isSessionToolGrant(policy))
 });
 var SESSION_TOOL_GRANT_TOOLS = /* @__PURE__ */ new Set(["Bash"]);
-var isSessionToolGrant = (policy) => Boolean(policy.sessionId) && SESSION_TOOL_GRANT_TOOLS.has(policy.tool) && isAutoApprove(policy);
+var MCP_TOOL_PREFIX = "mcp__";
+var parseMcpToolName = (toolName) => {
+  if (!toolName.startsWith(MCP_TOOL_PREFIX)) return void 0;
+  const rest = toolName.slice(MCP_TOOL_PREFIX.length);
+  const split = rest.indexOf("__");
+  if (split <= 0 || split + 2 >= rest.length) return void 0;
+  return { server: rest.slice(0, split), tool: rest.slice(split + 2) };
+};
+var CAMEL_CASE_BOUNDARY = /([a-z0-9])([A-Z])/g;
+var MCP_TOOL_NAME_WORD_SEPARATOR = /[\s_.:-]+/;
+var wordsOfMcpToolName = (toolName) => toolName.replace(CAMEL_CASE_BOUNDARY, "$1 $2").toLowerCase().split(MCP_TOOL_NAME_WORD_SEPARATOR).filter((word) => word.length > 0);
+var MCP_TOOL_WORDS_THAT_MOVE_MONEY = /* @__PURE__ */ new Set([
+  "pay",
+  "payment",
+  "payout",
+  "refund",
+  "charge",
+  "transfer",
+  "withdraw",
+  "money",
+  "purchase",
+  "buy",
+  "wire",
+  "transaction",
+  "invoice",
+  "subscription"
+]);
+var MCP_TOOL_WORDS_THAT_RUN_CODE = /* @__PURE__ */ new Set([
+  "exec",
+  "execute",
+  "eval",
+  "run",
+  "shell",
+  "command",
+  "cmd",
+  "script",
+  "sql",
+  "repl",
+  "js",
+  "python",
+  "terminal"
+]);
+var MCP_TOOL_WORDS_THAT_REACH_OTHERS = /* @__PURE__ */ new Set([
+  "send",
+  "email",
+  "post",
+  "publish",
+  "merge",
+  "deploy",
+  "promote",
+  "release",
+  "push",
+  "force",
+  "cancel",
+  "revoke",
+  "kill",
+  "truncate",
+  "write",
+  "overwrite",
+  "move",
+  "rename",
+  "upload",
+  "invite",
+  "share"
+]);
+var mcpToolWordNeedsAPerson = (word) => DESTRUCTIVE_SUBCOMMANDS.has(word) || MCP_TOOL_WORDS_THAT_MOVE_MONEY.has(word) || MCP_TOOL_WORDS_THAT_RUN_CODE.has(word) || MCP_TOOL_WORDS_THAT_REACH_OTHERS.has(word);
+var mcpToolNameNeedsAPerson = (toolName) => {
+  const words = wordsOfMcpToolName(toolName);
+  const phrase = words.join(" ");
+  return words.some(mcpToolWordNeedsAPerson) || classifyDecisionRisk(phrase, phrase) !== "standard";
+};
+var allowsSessionToolGrant = (toolName) => SESSION_TOOL_GRANT_TOOLS.has(toolName) || parseMcpToolName(toolName) !== void 0 && !isPusharyOwnTool(toolName.toLowerCase()) && !mcpToolNameNeedsAPerson(toolName);
+var isSessionToolGrant = (policy) => Boolean(policy.sessionId) && allowsSessionToolGrant(policy.tool) && isAutoApprove(policy);
 var API_KEY_PATTERN = /^pk_[a-f0-9]+\.[a-f0-9]+$/;
 var isValidApiKey = (value) => API_KEY_PATTERN.test(value);
 var ACTION_BODY_MAX = 4e3;
@@ -2499,6 +2583,17 @@ var agentPromptsBeforeAnEdit = ({ source, event, permissionMode }) => {
   return event === "PreToolUse" && runsTheClaudeHook(source) && claudePromptsBeforeAnEdit(permissionMode);
 };
 var editGoesToTheAgentsPrompt = (call, input, verdict) => agentPromptsBeforeAnEdit(call) && editAsksAtTheAgentsPrompt(input, verdict);
+var SCOPE_BATCH_REASON = "This patch exceeds the agreed scope. Split it into single-file edits so each additional path can be approved.";
+var unapprovedScopeReason = (scopeReason) => `${scopeReason}. Nobody approved this path, so the change was refused.`;
+var codexRaisesItsOwnPrompts = (permissionMode) => permissionMode !== "bypassPermissions";
+var isScopeReason = (scopeReason) => typeof scopeReason === "string" && scopeReason.length > 0;
+var scopeBreachReasonOf = (verdict) => verdict.kind === "gate" && isScopeReason(verdict.scopeReason) ? verdict.scopeReason : void 0;
+var onlyCodexPreToolUseCanAsk = (verdict, permissionMode) => verdict.kind === "gate" && (scopeBreachReasonOf(verdict) !== void 0 || !codexRaisesItsOwnPrompts(permissionMode));
+var runsACommandThatNeedsAPerson = ({ toolName, toolInputs }) => toolName === "Bash" && toolInputs.some((toolInput) => {
+  const command = extractPolicyArg(toolName, toolInput);
+  return command !== void 0 && commandNeedsAPerson(toolName, command);
+});
+var codexCallNeedsAPerson = (input, verdict, call) => onlyCodexPreToolUseCanAsk(verdict, call.permissionMode) || verdict.kind === "gate" && (aChosenRuleGoverns(input) || call.deletesFiles || runsACommandThatNeedsAPerson(input));
 var MAX_AGENT_PERMISSION_RULES_PER_KIND = 256;
 var MAX_AGENT_PERMISSION_RULE_LENGTH = 512;
 var isAgentPermissionRule = (value) => typeof value === "string" && value.length > 0 && value.length <= MAX_AGENT_PERMISSION_RULE_LENGTH;
@@ -3068,6 +3163,7 @@ export {
   withoutDeclinedAgent,
   normalizeKeyScope,
   isApprovalMode,
+  approvalModeWithoutLocalPrompt,
   parseAgentQuestion,
   parseAgentQuestions,
   parseAgentQuestionAnswers,
@@ -3094,6 +3190,7 @@ export {
   isSafeReadOnlyCommand,
   isAutoApprove,
   FILE_TARGET_TOOLS,
+  parseMcpToolName,
   isValidApiKey,
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
@@ -3120,6 +3217,11 @@ export {
   CLAUDE_PRETOOLUSE_MATCHER,
   resolveGate,
   editGoesToTheAgentsPrompt,
+  SCOPE_BATCH_REASON,
+  unapprovedScopeReason,
+  scopeBreachReasonOf,
+  onlyCodexPreToolUseCanAsk,
+  codexCallNeedsAPerson,
   claudePermissionRulesFromSettings,
   claudeConsultsItsAllowlist,
   agentRulesAllowEveryInput,

package/dist/{chunk-MWP65CZ3.js → chunk-C2OUUGCW.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-4ATFPZ6X.js";
+} from "./chunk-PNUWMEIY.js";
 import {
   getPackageVersion
-} from "./chunk-TVDI7SX2.js";
+} from "./chunk-AYV2NRYJ.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {