@pushary/agent-hooks 1.9.22 → 1.9.23

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 1.9.23
+
+- A `printf` whose format has a numeric conversion, such as `%d`, `%x` or `%f`, is no longer approved as a read unless every argument is a plain number. zsh, the default shell on a Mac, evaluates those arguments as arithmetic, and an argument such as `'PWD[$(command)]'` ran the command while Pushary approved it without asking. `printf '%s\n' text`, `printf hello` and `printf '%d\n' 42` are still approved as reads.
+- Codex with its approval policy set to never: answering "Handle on your machine" on your phone now refuses the call. Codex has no prompt of its own there, so the call used to run, a destructive one included. With Codex's own prompts on, the call still goes to that prompt.
+- Antigravity CLI: when your Pushary subscription has ended, a call Pushary would ask about is refused with a message that says so. Pushary is agy's only gate, and the call used to run with nothing asking. Renew, or run `pushary disconnect antigravity` to give approvals back to agy.
+
 ## 1.9.22
 
 - Each approval Claude Code or Codex sends through Pushary now carries the approval mode the agent reported for the session, such as `default` or `bypassPermissions`, so Pushary can tell which mode an approval was asked in. It is recorded with the approval and never used to decide one. A mode that is empty or not text is left out, and a long one is cut to 64 characters.

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-76YNWUXC.js";
+} from "../chunk-YZPFJCFE.js";
 import {
   readHookInput
-} from "../chunk-E7HOX73X.js";
-import "../chunk-LH3GTSXC.js";
+} from "../chunk-OH6OGEOY.js";
+import "../chunk-AV5VX7OK.js";
 import "../chunk-VTR4VRL2.js";
-import "../chunk-N2JP3RKP.js";
-import "../chunk-E3FSKKTJ.js";
-import "../chunk-GNQZY4GL.js";
-import "../chunk-WE2RVY7V.js";
+import "../chunk-SSWK2WYX.js";
+import "../chunk-N4DMADJM.js";
+import "../chunk-QFNY4KUQ.js";
+import "../chunk-M6R3SZZS.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-6TSEEKPL.js";
-import "../chunk-TSFNX5J2.js";
-import "../chunk-YGR5PBOF.js";
-import "../chunk-U26CAOZC.js";
-import "../chunk-OZVZGWER.js";
+import "../chunk-K2EYK5RL.js";
+import "../chunk-A5U62Q6K.js";
+import "../chunk-7RGEJOQS.js";
+import "../chunk-R5C3QCVT.js";
+import "../chunk-AFP3HZVK.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-6IOLTFNP.js";
-import "../chunk-CW3QUV6B.js";
-import "../chunk-BDV4WDIA.js";
-import "../chunk-AGIO7SF5.js";
+import "../chunk-AQ3TSQA2.js";
+import "../chunk-GYP6DLA4.js";
+import "../chunk-KJA6IGOZ.js";
+import "../chunk-4GKQDFH6.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-6SFTI7LM.js";
-import "../chunk-NB2PY5JX.js";
-import "../chunk-WAKQYJ6T.js";
-import "../chunk-U2IEM5FF.js";
+import "../chunk-E2LGKG75.js";
+import "../chunk-Z4UDB7EC.js";
+import "../chunk-XBETSM5T.js";
+import "../chunk-EDN4F6GX.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-5TLRS3AK.js";
-import "../chunk-E7EOUEGQ.js";
+import "../chunk-6HT2TUZD.js";
+import "../chunk-QIODXPTP.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-75MJRC5I.js";
-import "../chunk-TZWZVAMN.js";
-import "../chunk-GFXZDU4V.js";
+import "../chunk-OQPEHKH2.js";
+import "../chunk-LEQRIJ4H.js";
+import "../chunk-OH647UT3.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,39 +5,39 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-76YNWUXC.js";
+} from "../chunk-YZPFJCFE.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-2MW4OHWI.js";
+} from "../chunk-FIYCICHC.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-OZVZGWER.js";
+} from "../chunk-AFP3HZVK.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-6IOLTFNP.js";
+import "../chunk-AQ3TSQA2.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-5TLRS3AK.js";
+import "../chunk-6HT2TUZD.js";
 import {
   claudeSettings
-} from "../chunk-E7EOUEGQ.js";
+} from "../chunk-QIODXPTP.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-AQFEP65J.js";
-import "../chunk-75MJRC5I.js";
-import "../chunk-TZWZVAMN.js";
+import "../chunk-OQPEHKH2.js";
+import "../chunk-LEQRIJ4H.js";
 import {
   isRecord
-} from "../chunk-GFXZDU4V.js";
+} from "../chunk-OH647UT3.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,39 +8,39 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-KH2EDRJQ.js";
+} from "../chunk-CJTQNUUT.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-P345G4DK.js";
+} from "../chunk-M7DCI44L.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-LH3GTSXC.js";
+} from "../chunk-AV5VX7OK.js";
 import "../chunk-VTR4VRL2.js";
 import {
   ensureDaemonRunning
-} from "../chunk-N2JP3RKP.js";
+} from "../chunk-SSWK2WYX.js";
 import {
   encryptRecord
-} from "../chunk-E3FSKKTJ.js";
-import "../chunk-GNQZY4GL.js";
+} from "../chunk-N4DMADJM.js";
+import "../chunk-QFNY4KUQ.js";
 import {
   transcriptsEnabled
-} from "../chunk-WE2RVY7V.js";
+} from "../chunk-M6R3SZZS.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-TSFNX5J2.js";
-import "../chunk-YGR5PBOF.js";
-import "../chunk-U26CAOZC.js";
-import "../chunk-OZVZGWER.js";
+import "../chunk-A5U62Q6K.js";
+import "../chunk-7RGEJOQS.js";
+import "../chunk-R5C3QCVT.js";
+import "../chunk-AFP3HZVK.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-6IOLTFNP.js";
+import "../chunk-AQ3TSQA2.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -58,8 +58,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-CW3QUV6B.js";
-import "../chunk-BDV4WDIA.js";
+} from "../chunk-GYP6DLA4.js";
+import "../chunk-KJA6IGOZ.js";
 import {
   askUser,
   cancelQuestion,
@@ -69,35 +69,35 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-AGIO7SF5.js";
+} from "../chunk-4GKQDFH6.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-6SFTI7LM.js";
-import "../chunk-NB2PY5JX.js";
-import "../chunk-WAKQYJ6T.js";
+} from "../chunk-E2LGKG75.js";
+import "../chunk-Z4UDB7EC.js";
+import "../chunk-XBETSM5T.js";
 import {
   getMachineId
-} from "../chunk-U2IEM5FF.js";
+} from "../chunk-EDN4F6GX.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-5TLRS3AK.js";
-import "../chunk-E7EOUEGQ.js";
+import "../chunk-6HT2TUZD.js";
+import "../chunk-QIODXPTP.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-75MJRC5I.js";
+} from "../chunk-OQPEHKH2.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-TZWZVAMN.js";
+} from "../chunk-LEQRIJ4H.js";
 import {
   DECISION_STOP_REASON,
   KILL_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
   redactSecretsFromContent,
   resolveGate
-} from "../chunk-GFXZDU4V.js";
+} from "../chunk-OH647UT3.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -13,7 +13,7 @@ import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-KCLWVCGN.js";
+} from "../chunk-2AUKCSLQ.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -22,27 +22,27 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-SGUGGHMC.js";
+} from "../chunk-AXSHPFU3.js";
 import {
   planFxRemoval,
   removeInstructionBlock
-} from "../chunk-XDTYGS6R.js";
-import "../chunk-BDGKWUK2.js";
+} from "../chunk-YXHVMZPR.js";
+import "../chunk-RN5NRRHX.js";
 import {
   disableDaemonService
-} from "../chunk-N2JP3RKP.js";
+} from "../chunk-SSWK2WYX.js";
 import "../chunk-XHKBHWLX.js";
 import {
   APPROVAL_SETTINGS_PATH
-} from "../chunk-ZUOIDI6M.js";
+} from "../chunk-S2R2U5W5.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-YPZ4AE2R.js";
-import "../chunk-YODL2CJV.js";
+} from "../chunk-6GHZAS7S.js";
+import "../chunk-SLBO7PHS.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -54,14 +54,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-U4OWRGYI.js";
+} from "../chunk-ZGYO6OQE.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-2MW4OHWI.js";
+} from "../chunk-FIYCICHC.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -74,7 +74,7 @@ import {
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-6TSEEKPL.js";
+} from "../chunk-K2EYK5RL.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -82,12 +82,12 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-TSFNX5J2.js";
+} from "../chunk-A5U62Q6K.js";
 import {
   removeGeminiSettings
-} from "../chunk-YGR5PBOF.js";
-import "../chunk-U26CAOZC.js";
-import "../chunk-OZVZGWER.js";
+} from "../chunk-7RGEJOQS.js";
+import "../chunk-R5C3QCVT.js";
+import "../chunk-AFP3HZVK.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -102,22 +102,22 @@ import {
   readKeySource,
   readMacAppKeyPrefix,
   removeClaudeAlias
-} from "../chunk-6IOLTFNP.js";
-import "../chunk-CW3QUV6B.js";
-import "../chunk-BDV4WDIA.js";
-import "../chunk-AGIO7SF5.js";
+} from "../chunk-AQ3TSQA2.js";
+import "../chunk-GYP6DLA4.js";
+import "../chunk-KJA6IGOZ.js";
+import "../chunk-4GKQDFH6.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-6SFTI7LM.js";
+import "../chunk-E2LGKG75.js";
 import {
   absoluteUrl
-} from "../chunk-NB2PY5JX.js";
-import "../chunk-WAKQYJ6T.js";
-import "../chunk-U2IEM5FF.js";
+} from "../chunk-Z4UDB7EC.js";
+import "../chunk-XBETSM5T.js";
+import "../chunk-EDN4F6GX.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-5TLRS3AK.js";
+import "../chunk-6HT2TUZD.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -154,14 +154,14 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-E7EOUEGQ.js";
+} from "../chunk-QIODXPTP.js";
 import "../chunk-AQFEP65J.js";
 import {
   getBaseUrl
-} from "../chunk-75MJRC5I.js";
+} from "../chunk-OQPEHKH2.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-TZWZVAMN.js";
+} from "../chunk-LEQRIJ4H.js";
 import {
   CLI_PACKAGE_NAMES,
   HOOK_COMPATIBLE_PROFILES,
@@ -173,7 +173,7 @@ import {
   globalRootFor,
   isValidApiKey,
   redactSecrets
-} from "../chunk-GFXZDU4V.js";
+} from "../chunk-OH647UT3.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -5,10 +5,10 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-DV26ZWUC.js";
+} from "../chunk-73HGV4R6.js";
 import {
   resolveProviderBinary
-} from "../chunk-UFGU7AK3.js";
+} from "../chunk-7J2AX5T6.js";
 import "../chunk-RIVNNBEK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
@@ -16,50 +16,50 @@ import {
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-KH2EDRJQ.js";
-import "../chunk-E3FSKKTJ.js";
-import "../chunk-GNQZY4GL.js";
+} from "../chunk-CJTQNUUT.js";
+import "../chunk-N4DMADJM.js";
+import "../chunk-QFNY4KUQ.js";
 import {
   transcriptsEnabled
-} from "../chunk-WE2RVY7V.js";
+} from "../chunk-M6R3SZZS.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-6IOLTFNP.js";
+import "../chunk-AQ3TSQA2.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "../chunk-AGIO7SF5.js";
+} from "../chunk-4GKQDFH6.js";
 import "../chunk-POFBE6ZY.js";
 import {
   callMcpTool
-} from "../chunk-6SFTI7LM.js";
-import "../chunk-NB2PY5JX.js";
-import "../chunk-WAKQYJ6T.js";
+} from "../chunk-E2LGKG75.js";
+import "../chunk-Z4UDB7EC.js";
+import "../chunk-XBETSM5T.js";
 import {
   getMachineId
-} from "../chunk-U2IEM5FF.js";
+} from "../chunk-EDN4F6GX.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-5TLRS3AK.js";
-import "../chunk-E7EOUEGQ.js";
+import "../chunk-6HT2TUZD.js";
+import "../chunk-QIODXPTP.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-75MJRC5I.js";
-import "../chunk-TZWZVAMN.js";
+} from "../chunk-OQPEHKH2.js";
+import "../chunk-LEQRIJ4H.js";
 import {
   elicitationContent,
   parseAgentQuestion,
   parseAgentQuestionAnswers,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-GFXZDU4V.js";
+} from "../chunk-OH647UT3.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -1,40 +1,40 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-5AZ546F6.js";
+} from "../chunk-JNKHCGHR.js";
 import {
   defersToNativeMode,
   reportMachineDenial
-} from "../chunk-AR4NXO4Q.js";
+} from "../chunk-FBV2KS3Z.js";
 import {
   triggerAutoUpdate
-} from "../chunk-GWKT2ZZS.js";
+} from "../chunk-USUI4P63.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-T57BCGHQ.js";
+} from "../chunk-GN6BJXC7.js";
 import {
   readHookInput
-} from "../chunk-E7HOX73X.js";
+} from "../chunk-OH6OGEOY.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-P345G4DK.js";
-import "../chunk-LH3GTSXC.js";
+} from "../chunk-M7DCI44L.js";
+import "../chunk-AV5VX7OK.js";
 import "../chunk-VTR4VRL2.js";
-import "../chunk-N2JP3RKP.js";
-import "../chunk-E3FSKKTJ.js";
-import "../chunk-GNQZY4GL.js";
-import "../chunk-WE2RVY7V.js";
+import "../chunk-SSWK2WYX.js";
+import "../chunk-N4DMADJM.js";
+import "../chunk-QFNY4KUQ.js";
+import "../chunk-M6R3SZZS.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-6TSEEKPL.js";
-import "../chunk-TSFNX5J2.js";
-import "../chunk-YGR5PBOF.js";
-import "../chunk-U26CAOZC.js";
-import "../chunk-OZVZGWER.js";
+import "../chunk-K2EYK5RL.js";
+import "../chunk-A5U62Q6K.js";
+import "../chunk-7RGEJOQS.js";
+import "../chunk-R5C3QCVT.js";
+import "../chunk-AFP3HZVK.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-6IOLTFNP.js";
+import "../chunk-AQ3TSQA2.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -78,8 +78,8 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   userScope
-} from "../chunk-CW3QUV6B.js";
-import "../chunk-BDV4WDIA.js";
+} from "../chunk-GYP6DLA4.js";
+import "../chunk-KJA6IGOZ.js";
 import {
   askUser,
   cancelQuestion,
@@ -92,31 +92,31 @@ import {
   sendNotification,
   unavailableQuestionUnlessSubscriptionRequired,
   waitForQuestion
-} from "../chunk-AGIO7SF5.js";
+} from "../chunk-4GKQDFH6.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-6SFTI7LM.js";
-import "../chunk-NB2PY5JX.js";
-import "../chunk-WAKQYJ6T.js";
+} from "../chunk-E2LGKG75.js";
+import "../chunk-Z4UDB7EC.js";
+import "../chunk-XBETSM5T.js";
 import {
   getMachineId
-} from "../chunk-U2IEM5FF.js";
+} from "../chunk-EDN4F6GX.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-5TLRS3AK.js";
+import "../chunk-6HT2TUZD.js";
 import {
   canonicalJson
-} from "../chunk-E7EOUEGQ.js";
+} from "../chunk-QIODXPTP.js";
 import {
   writeFileAtomic
 } from "../chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "../chunk-75MJRC5I.js";
-import "../chunk-TZWZVAMN.js";
+} from "../chunk-OQPEHKH2.js";
+import "../chunk-LEQRIJ4H.js";
 import {
   CODEX_RESCUE_TOOL_NAME,
   DECISION_STOP_REASON,
@@ -127,6 +127,7 @@ import {
   UNVERIFIABLE_APPROVAL_REASON,
   approvalModeWithoutLocalPrompt,
   codexCallNeedsAPerson,
+  codexDeferredPreToolUse,
   codexHasNoPromptOfItsOwn,
   codexStopRescueOutput,
   codexUnansweredPreToolUse,
@@ -139,7 +140,7 @@ import {
   resolveGate,
   scopeBreachReasonOf,
   unapprovedScopeReason
-} from "../chunk-GFXZDU4V.js";
+} from "../chunk-OH647UT3.js";
 
 // bin/pushary-codex-hook.ts
 import { basename } from "path";
@@ -691,6 +692,7 @@ var scopeQuestionOf = (verdict) => {
 var codexDeliveryMode = (policyMode, noPromptOfItsOwn) => noPromptOfItsOwn ? approvalModeWithoutLocalPrompt(policyMode) : policyMode;
 var unansweredOutcome = (scope, fallback) => scope ? codexDeny(unapprovedScopeReason(scope.reason)) : fallback;
 var codexDecisionOf = (ending) => ending.kind === "deny" ? codexDeny(ending.reason) : codexPass();
+var deferredPreToolUse = (scope, input) => unansweredOutcome(scope, codexDecisionOf(codexDeferredPreToolUse(!codexHasNoPromptOfItsOwn(scope?.reason, input.permission_mode))));
 var unansweredPreToolUse = (toolPolicy, input, fullWindowServed) => codexDecisionOf(codexUnansweredPreToolUse({
   mode: toolPolicy.mode,
   timeoutAction: toolPolicy.timeoutAction,
@@ -749,7 +751,7 @@ var decidePreToolUse = async (input) => {
       if (isDecisionStopped(answer)) return codexDeny(DECISION_STOP_REASON);
       if (localHandoff) return recordPreToolUse(callKey, unansweredOutcome(scope, unansweredPreToolUse(toolPolicy, input, false)));
       if (answer.answered) {
-        if (isDeferAnswer(answer.value)) return recordPreToolUse(callKey, unansweredOutcome(scope, codexPass()));
+        if (isDeferAnswer(answer.value)) return recordPreToolUse(callKey, deferredPreToolUse(scope, input));
         if (answer.value === "yes") return recordApproval(callKey, input);
         return recordPreToolUse(callKey, codexDeny(denyReasonFrom(answer.value, answer.note)));
       }
@@ -767,7 +769,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-4HP6N7LY.js");
+    const { repairCodexHolds } = await import("../reapply-WQDP26EA.js");
     repairCodexHolds();
   } catch {
     return;

package/dist/bin/pushary-codex.js

@@ -1,32 +1,32 @@
 #!/usr/bin/env node
 import {
   reportEvent
-} from "../chunk-CW3QUV6B.js";
-import "../chunk-BDV4WDIA.js";
+} from "../chunk-GYP6DLA4.js";
+import "../chunk-KJA6IGOZ.js";
 import {
   askUser,
   isDecisionStopped,
   waitForAnswer
-} from "../chunk-AGIO7SF5.js";
+} from "../chunk-4GKQDFH6.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-6SFTI7LM.js";
-import "../chunk-NB2PY5JX.js";
-import "../chunk-WAKQYJ6T.js";
+import "../chunk-E2LGKG75.js";
+import "../chunk-Z4UDB7EC.js";
+import "../chunk-XBETSM5T.js";
 import {
   getMachineId
-} from "../chunk-U2IEM5FF.js";
+} from "../chunk-EDN4F6GX.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-5TLRS3AK.js";
-import "../chunk-E7EOUEGQ.js";
+import "../chunk-6HT2TUZD.js";
+import "../chunk-QIODXPTP.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "../chunk-75MJRC5I.js";
+} from "../chunk-OQPEHKH2.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-TZWZVAMN.js";
-import "../chunk-GFXZDU4V.js";
+} from "../chunk-LEQRIJ4H.js";
+import "../chunk-OH647UT3.js";
 
 // bin/pushary-codex.ts
 import { basename } from "path";