@pushary/agent-hooks 1.9.21 → 1.9.22

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.9.22
+
+- Each approval Claude Code or Codex sends through Pushary now carries the approval mode the agent reported for the session, such as `default` or `bypassPermissions`, so Pushary can tell which mode an approval was asked in. It is recorded with the approval and never used to decide one. A mode that is empty or not text is left out, and a long one is cut to 64 characters.
+
 ## 1.9.21
 
 - `pushary setup` records a key as the one Pushary for Mac is signed in with only when Pushary for Mac holds that same key. It used to record any key it reused from your agent settings that way, including one left behind by an earlier CLI sign-in. `pushary clean` never revokes the Mac app's key, so it skipped that leftover key and left it working. Now it revokes it, and still leaves the Mac app's own key alone.

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-ESHO7OC3.js";
+} from "../chunk-76YNWUXC.js";
 import {
   readHookInput
-} from "../chunk-II6OFDB3.js";
-import "../chunk-TJ4KMPYO.js";
+} from "../chunk-E7HOX73X.js";
+import "../chunk-LH3GTSXC.js";
 import "../chunk-VTR4VRL2.js";
-import "../chunk-L5NPRGVE.js";
-import "../chunk-6WINXCXY.js";
-import "../chunk-IM7EGZVH.js";
-import "../chunk-6WBIQQHO.js";
+import "../chunk-N2JP3RKP.js";
+import "../chunk-E3FSKKTJ.js";
+import "../chunk-GNQZY4GL.js";
+import "../chunk-WE2RVY7V.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-BDL6GJOQ.js";
-import "../chunk-PYWZYM74.js";
-import "../chunk-YLLGKY7K.js";
-import "../chunk-247PAUW6.js";
-import "../chunk-AXBFNQG6.js";
+import "../chunk-6TSEEKPL.js";
+import "../chunk-TSFNX5J2.js";
+import "../chunk-YGR5PBOF.js";
+import "../chunk-U26CAOZC.js";
+import "../chunk-OZVZGWER.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-FH4O3QGQ.js";
-import "../chunk-YCL2V5FD.js";
-import "../chunk-JHAPJRAN.js";
-import "../chunk-Y2BOLNJV.js";
+import "../chunk-6IOLTFNP.js";
+import "../chunk-CW3QUV6B.js";
+import "../chunk-BDV4WDIA.js";
+import "../chunk-AGIO7SF5.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-ZNAGS7O7.js";
-import "../chunk-UZ2YEGIT.js";
-import "../chunk-TBCXMW2C.js";
-import "../chunk-NBGJ3EOE.js";
+import "../chunk-6SFTI7LM.js";
+import "../chunk-NB2PY5JX.js";
+import "../chunk-WAKQYJ6T.js";
+import "../chunk-U2IEM5FF.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
-import "../chunk-CEF4UQ3X.js";
+import "../chunk-5TLRS3AK.js";
+import "../chunk-E7EOUEGQ.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-4WHNRAOK.js";
-import "../chunk-B6KZME5D.js";
-import "../chunk-VBPASZU7.js";
+import "../chunk-75MJRC5I.js";
+import "../chunk-TZWZVAMN.js";
+import "../chunk-GFXZDU4V.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,39 +5,39 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-ESHO7OC3.js";
+} from "../chunk-76YNWUXC.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-BV5JPACQ.js";
+} from "../chunk-2MW4OHWI.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-AXBFNQG6.js";
+} from "../chunk-OZVZGWER.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-FH4O3QGQ.js";
+import "../chunk-6IOLTFNP.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
+import "../chunk-5TLRS3AK.js";
 import {
   claudeSettings
-} from "../chunk-CEF4UQ3X.js";
+} from "../chunk-E7EOUEGQ.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-AQFEP65J.js";
-import "../chunk-4WHNRAOK.js";
-import "../chunk-B6KZME5D.js";
+import "../chunk-75MJRC5I.js";
+import "../chunk-TZWZVAMN.js";
 import {
   isRecord
-} from "../chunk-VBPASZU7.js";
+} from "../chunk-GFXZDU4V.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,39 +8,39 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-7AFLHL2R.js";
+} from "../chunk-KH2EDRJQ.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-PCVAK67W.js";
+} from "../chunk-P345G4DK.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-TJ4KMPYO.js";
+} from "../chunk-LH3GTSXC.js";
 import "../chunk-VTR4VRL2.js";
 import {
   ensureDaemonRunning
-} from "../chunk-L5NPRGVE.js";
+} from "../chunk-N2JP3RKP.js";
 import {
   encryptRecord
-} from "../chunk-6WINXCXY.js";
-import "../chunk-IM7EGZVH.js";
+} from "../chunk-E3FSKKTJ.js";
+import "../chunk-GNQZY4GL.js";
 import {
   transcriptsEnabled
-} from "../chunk-6WBIQQHO.js";
+} from "../chunk-WE2RVY7V.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-PYWZYM74.js";
-import "../chunk-YLLGKY7K.js";
-import "../chunk-247PAUW6.js";
-import "../chunk-AXBFNQG6.js";
+import "../chunk-TSFNX5J2.js";
+import "../chunk-YGR5PBOF.js";
+import "../chunk-U26CAOZC.js";
+import "../chunk-OZVZGWER.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-FH4O3QGQ.js";
+import "../chunk-6IOLTFNP.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -58,8 +58,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-YCL2V5FD.js";
-import "../chunk-JHAPJRAN.js";
+} from "../chunk-CW3QUV6B.js";
+import "../chunk-BDV4WDIA.js";
 import {
   askUser,
   cancelQuestion,
@@ -69,35 +69,35 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-Y2BOLNJV.js";
+} from "../chunk-AGIO7SF5.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-ZNAGS7O7.js";
-import "../chunk-UZ2YEGIT.js";
-import "../chunk-TBCXMW2C.js";
+} from "../chunk-6SFTI7LM.js";
+import "../chunk-NB2PY5JX.js";
+import "../chunk-WAKQYJ6T.js";
 import {
   getMachineId
-} from "../chunk-NBGJ3EOE.js";
+} from "../chunk-U2IEM5FF.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
-import "../chunk-CEF4UQ3X.js";
+import "../chunk-5TLRS3AK.js";
+import "../chunk-E7EOUEGQ.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-4WHNRAOK.js";
+} from "../chunk-75MJRC5I.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-B6KZME5D.js";
+} from "../chunk-TZWZVAMN.js";
 import {
   DECISION_STOP_REASON,
   KILL_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
   redactSecretsFromContent,
   resolveGate
-} from "../chunk-VBPASZU7.js";
+} from "../chunk-GFXZDU4V.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -13,7 +13,7 @@ import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-U6GYFWT4.js";
+} from "../chunk-KCLWVCGN.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -22,27 +22,27 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-QHY3UDYC.js";
+} from "../chunk-SGUGGHMC.js";
 import {
   planFxRemoval,
   removeInstructionBlock
-} from "../chunk-4BKAZ4JN.js";
-import "../chunk-VD2AWSER.js";
+} from "../chunk-XDTYGS6R.js";
+import "../chunk-BDGKWUK2.js";
 import {
   disableDaemonService
-} from "../chunk-L5NPRGVE.js";
+} from "../chunk-N2JP3RKP.js";
 import "../chunk-XHKBHWLX.js";
 import {
   APPROVAL_SETTINGS_PATH
-} from "../chunk-SVQOEVAT.js";
+} from "../chunk-ZUOIDI6M.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-4RJQPI36.js";
-import "../chunk-I52ALHOM.js";
+} from "../chunk-YPZ4AE2R.js";
+import "../chunk-YODL2CJV.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -54,14 +54,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-BERMVODT.js";
+} from "../chunk-U4OWRGYI.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-BV5JPACQ.js";
+} from "../chunk-2MW4OHWI.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -74,7 +74,7 @@ import {
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-BDL6GJOQ.js";
+} from "../chunk-6TSEEKPL.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -82,12 +82,12 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-PYWZYM74.js";
+} from "../chunk-TSFNX5J2.js";
 import {
   removeGeminiSettings
-} from "../chunk-YLLGKY7K.js";
-import "../chunk-247PAUW6.js";
-import "../chunk-AXBFNQG6.js";
+} from "../chunk-YGR5PBOF.js";
+import "../chunk-U26CAOZC.js";
+import "../chunk-OZVZGWER.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -102,22 +102,22 @@ import {
   readKeySource,
   readMacAppKeyPrefix,
   removeClaudeAlias
-} from "../chunk-FH4O3QGQ.js";
-import "../chunk-YCL2V5FD.js";
-import "../chunk-JHAPJRAN.js";
-import "../chunk-Y2BOLNJV.js";
+} from "../chunk-6IOLTFNP.js";
+import "../chunk-CW3QUV6B.js";
+import "../chunk-BDV4WDIA.js";
+import "../chunk-AGIO7SF5.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-ZNAGS7O7.js";
+import "../chunk-6SFTI7LM.js";
 import {
   absoluteUrl
-} from "../chunk-UZ2YEGIT.js";
-import "../chunk-TBCXMW2C.js";
-import "../chunk-NBGJ3EOE.js";
+} from "../chunk-NB2PY5JX.js";
+import "../chunk-WAKQYJ6T.js";
+import "../chunk-U2IEM5FF.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
+import "../chunk-5TLRS3AK.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -154,14 +154,14 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-CEF4UQ3X.js";
+} from "../chunk-E7EOUEGQ.js";
 import "../chunk-AQFEP65J.js";
 import {
   getBaseUrl
-} from "../chunk-4WHNRAOK.js";
+} from "../chunk-75MJRC5I.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-B6KZME5D.js";
+} from "../chunk-TZWZVAMN.js";
 import {
   CLI_PACKAGE_NAMES,
   HOOK_COMPATIBLE_PROFILES,
@@ -173,7 +173,7 @@ import {
   globalRootFor,
   isValidApiKey,
   redactSecrets
-} from "../chunk-VBPASZU7.js";
+} from "../chunk-GFXZDU4V.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -5,10 +5,10 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-LUDGBOLV.js";
+} from "../chunk-DV26ZWUC.js";
 import {
   resolveProviderBinary
-} from "../chunk-Z5EYCMJH.js";
+} from "../chunk-UFGU7AK3.js";
 import "../chunk-RIVNNBEK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
@@ -16,50 +16,50 @@ import {
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-7AFLHL2R.js";
-import "../chunk-6WINXCXY.js";
-import "../chunk-IM7EGZVH.js";
+} from "../chunk-KH2EDRJQ.js";
+import "../chunk-E3FSKKTJ.js";
+import "../chunk-GNQZY4GL.js";
 import {
   transcriptsEnabled
-} from "../chunk-6WBIQQHO.js";
+} from "../chunk-WE2RVY7V.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-FH4O3QGQ.js";
+import "../chunk-6IOLTFNP.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "../chunk-Y2BOLNJV.js";
+} from "../chunk-AGIO7SF5.js";
 import "../chunk-POFBE6ZY.js";
 import {
   callMcpTool
-} from "../chunk-ZNAGS7O7.js";
-import "../chunk-UZ2YEGIT.js";
-import "../chunk-TBCXMW2C.js";
+} from "../chunk-6SFTI7LM.js";
+import "../chunk-NB2PY5JX.js";
+import "../chunk-WAKQYJ6T.js";
 import {
   getMachineId
-} from "../chunk-NBGJ3EOE.js";
+} from "../chunk-U2IEM5FF.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
-import "../chunk-CEF4UQ3X.js";
+import "../chunk-5TLRS3AK.js";
+import "../chunk-E7EOUEGQ.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-4WHNRAOK.js";
-import "../chunk-B6KZME5D.js";
+} from "../chunk-75MJRC5I.js";
+import "../chunk-TZWZVAMN.js";
 import {
   elicitationContent,
   parseAgentQuestion,
   parseAgentQuestionAnswers,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-VBPASZU7.js";
+} from "../chunk-GFXZDU4V.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -1,41 +1,40 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-TQIPIFL7.js";
+} from "../chunk-5AZ546F6.js";
 import {
   defersToNativeMode,
   reportMachineDenial
-} from "../chunk-G4TV5GYU.js";
+} from "../chunk-AR4NXO4Q.js";
 import {
   triggerAutoUpdate
-} from "../chunk-5PW6GMQO.js";
+} from "../chunk-GWKT2ZZS.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-UKCRTTKF.js";
+} from "../chunk-T57BCGHQ.js";
 import {
   readHookInput
-} from "../chunk-II6OFDB3.js";
+} from "../chunk-E7HOX73X.js";
 import {
   announceSubscriptionRequired,
-  denyReasonFrom,
   isDeferAnswer
-} from "../chunk-PCVAK67W.js";
-import "../chunk-TJ4KMPYO.js";
+} from "../chunk-P345G4DK.js";
+import "../chunk-LH3GTSXC.js";
 import "../chunk-VTR4VRL2.js";
-import "../chunk-L5NPRGVE.js";
-import "../chunk-6WINXCXY.js";
-import "../chunk-IM7EGZVH.js";
-import "../chunk-6WBIQQHO.js";
+import "../chunk-N2JP3RKP.js";
+import "../chunk-E3FSKKTJ.js";
+import "../chunk-GNQZY4GL.js";
+import "../chunk-WE2RVY7V.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-BDL6GJOQ.js";
-import "../chunk-PYWZYM74.js";
-import "../chunk-YLLGKY7K.js";
-import "../chunk-247PAUW6.js";
-import "../chunk-AXBFNQG6.js";
+import "../chunk-6TSEEKPL.js";
+import "../chunk-TSFNX5J2.js";
+import "../chunk-YGR5PBOF.js";
+import "../chunk-U26CAOZC.js";
+import "../chunk-OZVZGWER.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-FH4O3QGQ.js";
+import "../chunk-6IOLTFNP.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -79,8 +78,8 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   userScope
-} from "../chunk-YCL2V5FD.js";
-import "../chunk-JHAPJRAN.js";
+} from "../chunk-CW3QUV6B.js";
+import "../chunk-BDV4WDIA.js";
 import {
   askUser,
   cancelQuestion,
@@ -93,31 +92,31 @@ import {
   sendNotification,
   unavailableQuestionUnlessSubscriptionRequired,
   waitForQuestion
-} from "../chunk-Y2BOLNJV.js";
+} from "../chunk-AGIO7SF5.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-ZNAGS7O7.js";
-import "../chunk-UZ2YEGIT.js";
-import "../chunk-TBCXMW2C.js";
+} from "../chunk-6SFTI7LM.js";
+import "../chunk-NB2PY5JX.js";
+import "../chunk-WAKQYJ6T.js";
 import {
   getMachineId
-} from "../chunk-NBGJ3EOE.js";
+} from "../chunk-U2IEM5FF.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
+import "../chunk-5TLRS3AK.js";
 import {
   canonicalJson
-} from "../chunk-CEF4UQ3X.js";
+} from "../chunk-E7EOUEGQ.js";
 import {
   writeFileAtomic
 } from "../chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "../chunk-4WHNRAOK.js";
-import "../chunk-B6KZME5D.js";
+} from "../chunk-75MJRC5I.js";
+import "../chunk-TZWZVAMN.js";
 import {
   CODEX_RESCUE_TOOL_NAME,
   DECISION_STOP_REASON,
@@ -128,9 +127,10 @@ import {
   UNVERIFIABLE_APPROVAL_REASON,
   approvalModeWithoutLocalPrompt,
   codexCallNeedsAPerson,
-  codexRaisesItsOwnPrompts,
+  codexHasNoPromptOfItsOwn,
   codexStopRescueOutput,
   codexUnansweredPreToolUse,
+  denyReasonFrom,
   editGoesToTheAgentsPrompt,
   effectiveWaitSeconds,
   hookHoldWindowMs,
@@ -139,7 +139,7 @@ import {
   resolveGate,
   scopeBreachReasonOf,
   unapprovedScopeReason
-} from "../chunk-VBPASZU7.js";
+} from "../chunk-GFXZDU4V.js";
 
 // bin/pushary-codex-hook.ts
 import { basename } from "path";
@@ -580,8 +580,9 @@ var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode, scope) => {
     actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {}),
     repoKey: repoKeyFor(input.cwd),
     scopePath: scope?.path,
-    ...codexHasNoPromptOfItsOwn(scope, input.permission_mode) ? { localSurfaceAvailable: false } : {},
+    ...codexHasNoPromptOfItsOwn(scope?.reason, input.permission_mode) ? { localSurfaceAvailable: false } : {},
     sessionToolAware: true,
+    permissionMode: input.permission_mode,
     // Codex has always sent this; it is what claimNotify and markApproved already
     // key on locally. Passing it through lets the server collapse a retried create
     // the same way, instead of putting the same approval on the phone twice.
@@ -687,7 +688,6 @@ var scopeQuestionOf = (verdict) => {
   const reason = scopeBreachReasonOf(verdict);
   return reason !== void 0 && verdict.kind === "gate" ? { reason, path: verdict.scopePath } : void 0;
 };
-var codexHasNoPromptOfItsOwn = (scope, permissionMode) => scope !== void 0 || !codexRaisesItsOwnPrompts(permissionMode);
 var codexDeliveryMode = (policyMode, noPromptOfItsOwn) => noPromptOfItsOwn ? approvalModeWithoutLocalPrompt(policyMode) : policyMode;
 var unansweredOutcome = (scope, fallback) => scope ? codexDeny(unapprovedScopeReason(scope.reason)) : fallback;
 var codexDecisionOf = (ending) => ending.kind === "deny" ? codexDeny(ending.reason) : codexPass();
@@ -736,7 +736,7 @@ var decidePreToolUse = async (input) => {
     const toolPolicy = verdict.policy;
     const callKey = callKeyFor(input);
     if (scope && gateInput.toolInputs.length > 1) return recordPreToolUse(callKey, codexDeny(SCOPE_BATCH_REASON));
-    const deliveryMode = codexDeliveryMode(toolPolicy.mode, codexHasNoPromptOfItsOwn(scope, input.permission_mode));
+    const deliveryMode = codexDeliveryMode(toolPolicy.mode, codexHasNoPromptOfItsOwn(scope?.reason, input.permission_mode));
     if (deliveryMode === "push_only") {
       let pushed;
       try {
@@ -767,7 +767,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-BUCDXIIM.js");
+    const { repairCodexHolds } = await import("../reapply-4HP6N7LY.js");
     repairCodexHolds();
   } catch {
     return;

package/dist/bin/pushary-codex.js

@@ -1,32 +1,32 @@
 #!/usr/bin/env node
 import {
   reportEvent
-} from "../chunk-YCL2V5FD.js";
-import "../chunk-JHAPJRAN.js";
+} from "../chunk-CW3QUV6B.js";
+import "../chunk-BDV4WDIA.js";
 import {
   askUser,
   isDecisionStopped,
   waitForAnswer
-} from "../chunk-Y2BOLNJV.js";
+} from "../chunk-AGIO7SF5.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-ZNAGS7O7.js";
-import "../chunk-UZ2YEGIT.js";
-import "../chunk-TBCXMW2C.js";
+import "../chunk-6SFTI7LM.js";
+import "../chunk-NB2PY5JX.js";
+import "../chunk-WAKQYJ6T.js";
 import {
   getMachineId
-} from "../chunk-NBGJ3EOE.js";
+} from "../chunk-U2IEM5FF.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
-import "../chunk-CEF4UQ3X.js";
+import "../chunk-5TLRS3AK.js";
+import "../chunk-E7EOUEGQ.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "../chunk-4WHNRAOK.js";
+} from "../chunk-75MJRC5I.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-B6KZME5D.js";
-import "../chunk-VBPASZU7.js";
+} from "../chunk-TZWZVAMN.js";
+import "../chunk-GFXZDU4V.js";
 
 // bin/pushary-codex.ts
 import { basename } from "path";