@pushary/agent-hooks 1.9.37 → 1.9.39

package/dist/bin/pushary-suggestions.js

@@ -1,36 +1,36 @@
 #!/usr/bin/env node
 import {
   exitOnFailedSettingsRequest
-} from "../chunk-EK6PRPCY.js";
-import "../chunk-VMIDUNOT.js";
+} from "../chunk-TNGCGQ4R.js";
+import "../chunk-JTHGOW7A.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-JMLJHKJN.js";
+} from "../chunk-RDR4CWVU.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-N5WEEYV6.js";
-import "../chunk-DYALNCS6.js";
-import "../chunk-NWSWP3KY.js";
-import "../chunk-VA36Q6BD.js";
+import "../chunk-Z2ZPMSJO.js";
+import "../chunk-SSV75WCM.js";
+import "../chunk-ZEJ4HPXN.js";
+import "../chunk-E3ZYXYBV.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-GUHM2UQO.js";
-import "../chunk-RFIHLLRH.js";
+import "../chunk-WBZEW5RY.js";
+import "../chunk-IL5NWORI.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-AZXPJLKC.js";
-import "../chunk-WXA3CFZR.js";
-import "../chunk-235LKHLW.js";
+} from "../chunk-SOPKWVMZ.js";
+import "../chunk-AX4MCCIQ.js";
+import "../chunk-AWPUBTCU.js";
 
 // bin/pushary-suggestions.ts
 exitOnHelpFlag("suggestions");

package/dist/bin/pushary-transcript-register.js

@@ -1,30 +1,30 @@
 #!/usr/bin/env node
 import {
   registerTranscript
-} from "../chunk-V7Q7DQXL.js";
+} from "../chunk-6UQC6RLE.js";
 import "../chunk-DWQYCOPI.js";
-import "../chunk-F3J6JFR2.js";
-import "../chunk-MAGB6VW6.js";
-import "../chunk-PYWLW7PC.js";
-import "../chunk-HQR6DYVG.js";
+import "../chunk-BXD33IG7.js";
+import "../chunk-4G4T2EL2.js";
+import "../chunk-NEPOKBSG.js";
+import "../chunk-BCOS5PVT.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-Q3TCLMYC.js";
-import "../chunk-6SYU5LVK.js";
-import "../chunk-Q52PBCN7.js";
-import "../chunk-SNI4FGOV.js";
+import "../chunk-LBNXMPQ6.js";
+import "../chunk-RJDMLAHO.js";
+import "../chunk-EOULXXHA.js";
+import "../chunk-X7OOLKKT.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-N5WEEYV6.js";
-import "../chunk-QUKATQ66.js";
-import "../chunk-VA36Q6BD.js";
+import "../chunk-Z2ZPMSJO.js";
+import "../chunk-BPHAE44X.js";
+import "../chunk-E3ZYXYBV.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-GUHM2UQO.js";
-import "../chunk-RFIHLLRH.js";
+import "../chunk-WBZEW5RY.js";
+import "../chunk-IL5NWORI.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-AZXPJLKC.js";
-import "../chunk-WXA3CFZR.js";
-import "../chunk-235LKHLW.js";
+import "../chunk-SOPKWVMZ.js";
+import "../chunk-AX4MCCIQ.js";
+import "../chunk-AWPUBTCU.js";
 
 // bin/pushary-transcript-register.ts
 var raw = "";

package/dist/bin/pushary-transcripts.js

@@ -6,17 +6,17 @@ import {
 } from "../chunk-DWQYCOPI.js";
 import {
   transcriptsEnabled
-} from "../chunk-HQR6DYVG.js";
+} from "../chunk-BCOS5PVT.js";
 import {
   exitOnHelpFlag
-} from "../chunk-JMLJHKJN.js";
-import "../chunk-N5WEEYV6.js";
+} from "../chunk-RDR4CWVU.js";
+import "../chunk-Z2ZPMSJO.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-GUHM2UQO.js";
+import "../chunk-WBZEW5RY.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-AZXPJLKC.js";
-import "../chunk-WXA3CFZR.js";
-import "../chunk-235LKHLW.js";
+import "../chunk-SOPKWVMZ.js";
+import "../chunk-AX4MCCIQ.js";
+import "../chunk-AWPUBTCU.js";
 
 // bin/pushary-transcripts.ts
 exitOnHelpFlag("transcripts");

package/dist/bin/pushary-upgrade.js

@@ -9,27 +9,27 @@ import {
   upgradeFinishOutcome,
   upgradeInstalledPackage,
   withUpgradeLock
-} from "../chunk-2WZJHJAB.js";
+} from "../chunk-RQN752UC.js";
 import {
   installWithUpgradeLock
-} from "../chunk-ISNGKZG4.js";
+} from "../chunk-AVCTQB2J.js";
 import {
   ensureCodexTrustAfterReapply,
   reapplyAllAgents
-} from "../chunk-ZQD6GVS7.js";
+} from "../chunk-I2SXJH5G.js";
 import {
   describeCodexTrustConfirmation
-} from "../chunk-FFRH7KZP.js";
-import "../chunk-B7SE22M7.js";
+} from "../chunk-W52MFAWQ.js";
+import "../chunk-VHGTMFKS.js";
 import {
   waitForMachineReadiness
-} from "../chunk-GQSJVYKN.js";
+} from "../chunk-XWG22IUE.js";
 import {
   detectProviderLiveCapabilities,
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-YNJ372JU.js";
+} from "../chunk-NNJNN5OL.js";
 import "../chunk-RIVNNBEK.js";
 import {
   AUTO_UPDATE_DISABLE_ENV,
@@ -40,7 +40,7 @@ import {
   parseAutoUpdateFlag,
   readAutoUpdateState,
   updateAutoUpdateState
-} from "../chunk-PDDJKGIW.js";
+} from "../chunk-NBH6KBD4.js";
 import {
   DAEMON_COLD_START_TIMEOUT_MS,
   daemonHasRemoteProof,
@@ -52,39 +52,39 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-F3J6JFR2.js";
+} from "../chunk-BXD33IG7.js";
 import "../chunk-XHKBHWLX.js";
 import {
   readMacAppAgentKey
-} from "../chunk-GSP7CC52.js";
-import "../chunk-HJF57K2U.js";
+} from "../chunk-77HOP22I.js";
+import "../chunk-6DYR4SX2.js";
 import {
   exitOnHelpFlag
-} from "../chunk-JMLJHKJN.js";
-import "../chunk-KHLYOIPY.js";
-import "../chunk-Q3TCLMYC.js";
-import "../chunk-6SYU5LVK.js";
-import "../chunk-Q52PBCN7.js";
-import "../chunk-SNI4FGOV.js";
+} from "../chunk-RDR4CWVU.js";
+import "../chunk-PP3D2TG6.js";
+import "../chunk-LBNXMPQ6.js";
+import "../chunk-RJDMLAHO.js";
+import "../chunk-EOULXXHA.js";
+import "../chunk-X7OOLKKT.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
 import {
   readControlMode,
   recordMacAppKeyPrefix
-} from "../chunk-N5WEEYV6.js";
-import "../chunk-W73URGML.js";
-import "../chunk-QUKATQ66.js";
-import "../chunk-HA22GGDG.js";
+} from "../chunk-Z2ZPMSJO.js";
+import "../chunk-GLGMC25A.js";
+import "../chunk-BPHAE44X.js";
+import "../chunk-KBH7AEQK.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-Z5ORWTY3.js";
-import "../chunk-DYALNCS6.js";
-import "../chunk-NWSWP3KY.js";
-import "../chunk-VA36Q6BD.js";
+import "../chunk-Z4IBDCBH.js";
+import "../chunk-SSV75WCM.js";
+import "../chunk-ZEJ4HPXN.js";
+import "../chunk-E3ZYXYBV.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-GUHM2UQO.js";
+import "../chunk-WBZEW5RY.js";
 import {
   LATEST_TAG,
   autoUpdateState,
@@ -94,19 +94,19 @@ import {
   fetchLatestPublishedVersion,
   geminiSettings,
   vscodePluginDir
-} from "../chunk-RFIHLLRH.js";
+} from "../chunk-IL5NWORI.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "../chunk-AZXPJLKC.js";
+} from "../chunk-SOPKWVMZ.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-WXA3CFZR.js";
+} from "../chunk-AX4MCCIQ.js";
 import {
   CANONICAL_PACKAGE,
   LEGACY_PACKAGE,
   getPackageVersion
-} from "../chunk-235LKHLW.js";
+} from "../chunk-AWPUBTCU.js";
 
 // bin/pushary-upgrade.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-wait.js

@@ -4,36 +4,36 @@ import {
 } from "../chunk-CVWG2N3Y.js";
 import {
   exitOnFailedSettingsRequest
-} from "../chunk-EK6PRPCY.js";
-import "../chunk-VMIDUNOT.js";
+} from "../chunk-TNGCGQ4R.js";
+import "../chunk-JTHGOW7A.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-JMLJHKJN.js";
+} from "../chunk-RDR4CWVU.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-N5WEEYV6.js";
-import "../chunk-DYALNCS6.js";
-import "../chunk-NWSWP3KY.js";
-import "../chunk-VA36Q6BD.js";
+import "../chunk-Z2ZPMSJO.js";
+import "../chunk-SSV75WCM.js";
+import "../chunk-ZEJ4HPXN.js";
+import "../chunk-E3ZYXYBV.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-GUHM2UQO.js";
-import "../chunk-RFIHLLRH.js";
+import "../chunk-WBZEW5RY.js";
+import "../chunk-IL5NWORI.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-AZXPJLKC.js";
-import "../chunk-WXA3CFZR.js";
-import "../chunk-235LKHLW.js";
+} from "../chunk-SOPKWVMZ.js";
+import "../chunk-AX4MCCIQ.js";
+import "../chunk-AWPUBTCU.js";
 
 // bin/pushary-wait.ts
 exitOnHelpFlag("wait");

package/dist/bin/pushary.js

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
 import {
   installNetworkDefaults
-} from "../chunk-NWSWP3KY.js";
-import "../chunk-VA36Q6BD.js";
+} from "../chunk-ZEJ4HPXN.js";
+import "../chunk-E3ZYXYBV.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-RFIHLLRH.js";
+import "../chunk-IL5NWORI.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-AZXPJLKC.js";
+import "../chunk-SOPKWVMZ.js";
 import {
   COMMANDS,
   renderHelp,
   resolveCommandName
-} from "../chunk-WXA3CFZR.js";
+} from "../chunk-AX4MCCIQ.js";
 import {
   getPackageVersion
-} from "../chunk-235LKHLW.js";
+} from "../chunk-AWPUBTCU.js";
 
 // src/cli/runtime.ts
 var supportsRuntime = (version) => {

package/dist/{chunk-6VUVVVVN.js → chunk-36Y2YAAQ.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-W73URGML.js";
+} from "./chunk-GLGMC25A.js";
 
 // src/answer.ts
 var isDeferAnswer = (value) => value === "defer";

package/dist/{chunk-NDQXKLGE.js → chunk-3KWEGRNF.js}

@@ -1,9 +1,9 @@
 import {
   APPROVAL_SETTINGS_PATH
-} from "./chunk-EK6PRPCY.js";
+} from "./chunk-TNGCGQ4R.js";
 import {
   readMacAppAgentKey
-} from "./chunk-GSP7CC52.js";
+} from "./chunk-77HOP22I.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -13,13 +13,13 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-N5WEEYV6.js";
+} from "./chunk-Z2ZPMSJO.js";
 import {
   absoluteUrl
-} from "./chunk-DYALNCS6.js";
+} from "./chunk-SSV75WCM.js";
 import {
   isValidApiKey
-} from "./chunk-235LKHLW.js";
+} from "./chunk-AWPUBTCU.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";

package/dist/{chunk-MAGB6VW6.js → chunk-4G4T2EL2.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-235LKHLW.js";
+} from "./chunk-AWPUBTCU.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-HK2RPWAD.js → chunk-4QAX6YTC.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-235LKHLW.js";
+} from "./chunk-AWPUBTCU.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-T2NKNQPM.js → chunk-54OESWJ5.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-RFIHLLRH.js";
+} from "./chunk-IL5NWORI.js";
 import {
   readJsonSafe,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-235LKHLW.js";
+} from "./chunk-AWPUBTCU.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-HJF57K2U.js → chunk-6DYR4SX2.js}

@@ -1,15 +1,15 @@
 import {
   compatibleConfigFile
-} from "./chunk-KHLYOIPY.js";
+} from "./chunk-PP3D2TG6.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-Q3TCLMYC.js";
+} from "./chunk-LBNXMPQ6.js";
 import {
   AGENT_CHOICES
-} from "./chunk-Q52PBCN7.js";
+} from "./chunk-EOULXXHA.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -18,7 +18,7 @@ import {
   guardedArgv,
   pusharyDir,
   vscodePluginDir
-} from "./chunk-RFIHLLRH.js";
+} from "./chunk-IL5NWORI.js";
 import {
   readJsonSafe
 } from "./chunk-AQFEP65J.js";
@@ -29,7 +29,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-235LKHLW.js";
+} from "./chunk-AWPUBTCU.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-JLQV3XLV.js → chunk-6EVKSX75.js}

@@ -1,13 +1,13 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-UK3WY3LE.js";
+} from "./chunk-GFPUTOME.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-N5WEEYV6.js";
+} from "./chunk-Z2ZPMSJO.js";
 import {
   NpmMissingError,
   NpmPermissionError
-} from "./chunk-RFIHLLRH.js";
+} from "./chunk-IL5NWORI.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -15,7 +15,7 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-WXA3CFZR.js";
+} from "./chunk-AX4MCCIQ.js";
 
 // src/instruction-file.ts
 import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";

package/dist/{chunk-DG5QHKJA.js → chunk-6FBQLKOJ.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-Q52PBCN7.js";
+} from "./chunk-EOULXXHA.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-WXA3CFZR.js";
+} from "./chunk-AX4MCCIQ.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-235LKHLW.js";
+} from "./chunk-AWPUBTCU.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-V7Q7DQXL.js → chunk-6UQC6RLE.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-DWQYCOPI.js";
 import {
   ensureDaemonRunning
-} from "./chunk-F3J6JFR2.js";
+} from "./chunk-BXD33IG7.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-MAGB6VW6.js";
+} from "./chunk-4G4T2EL2.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-PYWLW7PC.js";
+} from "./chunk-NEPOKBSG.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-HQR6DYVG.js";
+} from "./chunk-BCOS5PVT.js";
 import {
   hookOwnerOf
-} from "./chunk-Q3TCLMYC.js";
+} from "./chunk-LBNXMPQ6.js";
 import {
   readTranscriptPreference
-} from "./chunk-N5WEEYV6.js";
+} from "./chunk-Z2ZPMSJO.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-RFIHLLRH.js";
+} from "./chunk-IL5NWORI.js";
 import {
   writeJsonAtomic
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-AZXPJLKC.js";
+} from "./chunk-SOPKWVMZ.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-GSP7CC52.js → chunk-77HOP22I.js}

@@ -1,18 +1,18 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-HJF57K2U.js";
+} from "./chunk-6DYR4SX2.js";
 import {
   keyPrefix
-} from "./chunk-N5WEEYV6.js";
+} from "./chunk-Z2ZPMSJO.js";
 import {
   bridgeAgentKey
-} from "./chunk-RFIHLLRH.js";
+} from "./chunk-IL5NWORI.js";
 import {
   readJsonSafe
 } from "./chunk-AQFEP65J.js";
 import {
   isValidApiKey
-} from "./chunk-235LKHLW.js";
+} from "./chunk-AWPUBTCU.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-4OQHT5IJ.js → chunk-A4C6JKIJ.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-KHLYOIPY.js";
+} from "./chunk-PP3D2TG6.js";
 import {
   pusharyHookExecutable
-} from "./chunk-Q3TCLMYC.js";
+} from "./chunk-LBNXMPQ6.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-RFIHLLRH.js";
+} from "./chunk-IL5NWORI.js";
 import {
   isRecord
-} from "./chunk-235LKHLW.js";
+} from "./chunk-AWPUBTCU.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-ISNGKZG4.js → chunk-AVCTQB2J.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-RFIHLLRH.js";
+} from "./chunk-IL5NWORI.js";
 import {
   writeJsonAtomic
 } from "./chunk-AQFEP65J.js";

package/dist/{chunk-235LKHLW.js → chunk-AWPUBTCU.js}

@@ -2524,6 +2524,10 @@ var isAutoUpdateResult = (value) => typeof value === "string" && AUTO_UPDATE_RES
 // ../contracts/src/answer-drafts.ts
 var ANSWER_DRAFT_TTL_MS = 24 * 60 * 60 * 1e3;
 
+// ../contracts/src/decision-lifetime.ts
+var DECISION_REMINDER_DELAY_MS = 10 * 60 * 1e3;
+var DECISION_CACHE_TTL_SECONDS = 10 * 60;
+
 // ../contracts/src/index.ts
 var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
@@ -2635,20 +2639,18 @@ var parseAgentQuestionAnswers = (questions, value) => {
   }
   return answers;
 };
-var isQuestionRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var codexAsyncQuestionFields = (raw) => {
-  if (!isQuestionRecord(raw)) return void 0;
-  const labels = Array.isArray(raw.options) ? raw.options : [];
-  return { question: raw.title, options: labels.map((label) => ({ label })) };
+var codexQuestionFields = (raw, toolName) => {
+  if (!isRecord(raw) || raw.isSecret === true) return void 0;
+  if (toolName === CODEX_ASYNC_QUESTION_TOOL) {
+    const labels = Array.isArray(raw.options) ? raw.options : [];
+    return { question: raw.title, options: labels.map((label) => ({ label })), multiSelect: false };
+  }
+  return { ...raw, multiSelect: raw.multiSelect ?? false, ...raw.isOther === false ? { allowOther: false } : {} };
 };
-var codexBlockingQuestionFields = (raw) => isQuestionRecord(raw) && raw.isOther === false ? { ...raw, allowOther: false } : raw;
-var asksForASecret = (questions) => questions.some((question) => isQuestionRecord(question) && question.isSecret === true);
 var parseCodexQuestions = (toolName, toolInput) => {
   const raw = Array.isArray(toolInput.questions) ? toolInput.questions : [];
-  if (asksForASecret(raw)) return void 0;
-  const questions = raw.map(toolName === CODEX_ASYNC_QUESTION_TOOL ? codexAsyncQuestionFields : codexBlockingQuestionFields);
-  const parsed = parseAgentQuestions({ questions });
-  return parsed && isAgentQuestionSet(parsed) ? parsed : void 0;
+  const questions = raw.map((question) => codexQuestionFields(question, toolName));
+  return isAgentQuestionSet(questions) ? parseAgentQuestions({ questions }) : void 0;
 };
 var CODEX_QUESTION_ANSWERED_IN_PUSHARY = "The user already answered this question in Pushary, so it was not shown again";
 var CODEX_QUESTION_CONTINUE = "Continue with this answer and do not ask it again";
@@ -4424,7 +4426,7 @@ var posixShellJudgeFor = (toolName) => ({
   runsScripts,
   namesASecretFile: (fileName) => SECRET_FILE_NAME.test(fileName)
 });
-var commandIsDestructive = (toolName, command) => shellDialectOf(toolName) === "powershell" ? powerShellCommandIsDestructive(command, posixShellJudgeFor(toolName)) : classifyDecisionRisk(toolNameForAPosixReading(toolName), command) === "destructive";
+var commandIsDestructive = (toolName, command) => shellDialectOf(toolName) === "powershell" ? powerShellCommandIsDestructive(command, posixShellJudgeFor(toolName)) : commandSpellings(command).forms.some((form) => classifyDecisionRisk(toolNameForAPosixReading(toolName), form) === "destructive");
 var commandHasAVisibleConsequence = (toolName, command) => shellDialectOf(toolName) === "powershell" ? powerShellCommandHasAVisibleConsequence(command, posixShellJudgeFor(toolName)) : commandHasAVisibleConsequenceAt(toolNameForAPosixReading(toolName), command, 0);
 var MAX_SPELLING_DEPTH = 3;
 var GIT_GLOBAL_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set([
@@ -5433,7 +5435,7 @@ var editsAFileThatNeedsAPerson = ({ toolName, toolInputs }) => toolInputs.some((
 });
 var runsADestructiveCommand = ({ toolName, toolInputs }) => SHELL_DIALECT_BY_TOOL.has(toolName) && toolInputs.some((toolInput) => {
   const command = extractPolicyArg(toolName, toolInput);
-  return command !== void 0 && classifyDecisionRisk(toolName, command) === "destructive";
+  return command !== void 0 && commandIsDestructive(toolName, command);
 });
 var codexCallIsDestructive = (input, call) => call.deletesFiles || runsADestructiveCommand(input);
 var codexCallNeedsAPerson = (input, verdict, call) => onlyCodexPreToolUseCanAsk(verdict, call.permissionMode) || verdict.kind === "gate" && (aChosenRuleGoverns(input) || call.deletesFiles || runsACommandThatNeedsAPerson(input) || editsAFileThatNeedsAPerson(input));