pushary 1.9.111 → 1.9.113

package/dist/{chunk-KICQRZAT.js → chunk-JXN4SH6M.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-GXTW3W45.js → chunk-JXNDO7FB.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   redactSecretsFromContent
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/cli/json.ts
 var writeStdoutFully = (text) => new Promise((resolve, reject) => {

package/dist/{chunk-UN2QALQO.js → chunk-KB2EEK5T.js}

@@ -1,13 +1,13 @@
 import {
   compatibleConfigFile
-} from "./chunk-RUORT3DE.js";
+} from "./chunk-OJGHJIFQ.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands
-} from "./chunk-NZZFIIH6.js";
+} from "./chunk-NK5XT4RS.js";
 import {
   AGENT_CHOICES
-} from "./chunk-54DPX27B.js";
+} from "./chunk-5SUTYXCT.js";
 import {
   bridgeStub,
   claudeSettings,
@@ -19,7 +19,7 @@ import {
   resolveBridgeStub,
   vscodePluginDir,
   windowsNodeLauncherFor
-} from "./chunk-PCFIYMK4.js";
+} from "./chunk-RLBTKTOK.js";
 import {
   readJsonSafe
 } from "./chunk-T5I4PKOQ.js";
@@ -29,7 +29,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-262UYDKT.js → chunk-KDTTCR3E.js}

@@ -3,15 +3,15 @@ import {
 } from "./chunk-XMSDA5WA.js";
 import {
   fetchAsCredential
-} from "./chunk-PYAPWXVP.js";
+} from "./chunk-NPG4WCIM.js";
 import {
   getBaseUrl
-} from "./chunk-O76PTPKP.js";
+} from "./chunk-GSJUGW3A.js";
 import {
   compressTranscriptRecord,
   redactSecretsFromContent,
   transcriptRecordPlaintext
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/transcript-api.ts
 var providerRecipientSchema = external_exports.object({

package/dist/{chunk-DZE26BID.js → chunk-KPCVIH52.js}

@@ -4474,6 +4474,8 @@ var isSafeReadOnlyCommand = (command) => {
   if (visibleWithoutRedirection.replace(/&&/g, "  ").includes("&")) return false;
   return segmentsSplitWhereVisible(blankedSafeRedirections(trimmed), visibleWithoutRedirection, READ_ONLY_SEGMENT_SEPARATOR).every((segment) => trimShellWhitespace(segment).length > 0 && isSafeSimpleCommand(segment));
 };
+var READ_ONLY_PROGRAMS = [...SAFE_SHELL_COMMANDS, ...INSPECTED_ARGUMENT_COMMANDS];
+var READ_ONLY_GIT_FIRST_ARGUMENTS = [...SAFE_GIT_SUBCOMMANDS, ...GIT_READ_ONLY_BRANCH_ARGUMENTS.slice(0, 1)];
 var isAutoApprove = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "approve";
 var isAutoDeny = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "deny";
 var verdictForPolicy = (policy) => {
@@ -8614,7 +8616,7 @@ var agentRulesAllowEveryInput = (rules, toolName, toolInputs, cwd) => rules.allo
   return allowRulesGrant(rules.allow, toolName, args) && !anyRuleRestrictsReading(rules.ask, toolName, reading) && !anyRuleRestrictsReading(rules.deny, toolName, reading) && !inputNeedsAPerson(toolName, toolInput);
 });
 var isDefaultRule = (policy) => policy.origin === "builtin" || policy.tool === WILDCARD_TOOL_PATTERN;
-var isApprovalRoutePattern = (value) => typeof value === "object" && value !== null && typeof value.toolPattern === "string" && ["string", "undefined"].includes(typeof value.repoKey);
+var isApprovalRoutePattern = (value) => typeof value === "object" && value !== null && typeof value.toolPattern === "string" && ["string", "undefined"].includes(typeof value.repoKey) && ["boolean", "undefined"].includes(typeof value.answeredBySomeoneElse);
 var approvalRoutesOf = (config) => {
   const routes = config.approvalRoutes ?? [];
   return Array.isArray(routes) && routes.every(isApprovalRoutePattern) ? routes : null;
@@ -8631,6 +8633,22 @@ var aChosenRuleGoverns = (input, counts = everyRule) => {
     return governing !== void 0 && counts(governing.policy) || findBestRoute(routes, input.toolName, args, input.repoKey) !== void 0;
   });
 };
+var AUTO_PERMISSION_MODE = "auto";
+var routeDeliveredFor = (input, routes, toolInput) => findBestRoute(routes, input.toolName, policyArgForms(input.toolName, toolInput, input.cwd), input.sharedRepoKey ?? input.repoKey);
+var callWaitsForSomeoneElse = (input) => {
+  const routes = approvalRoutesOf(input.config);
+  if (routes === null) return false;
+  return input.toolInputs.some((toolInput) => routeDeliveredFor(input, routes, toolInput)?.answeredBySomeoneElse === true);
+};
+var matchedRouteOf = (input) => {
+  const routes = approvalRoutesOf(input.config);
+  if (routes === null) return void 0;
+  const matched = input.toolInputs.flatMap((toolInput) => routeDeliveredFor(input, routes, toolInput) ?? []);
+  const route = matched.find((candidate) => candidate.answeredBySomeoneElse === true) ?? matched[0];
+  if (route === void 0) return void 0;
+  return route.repoKey ? { toolPattern: route.toolPattern, repoKey: route.repoKey } : { toolPattern: route.toolPattern };
+};
+var approvalRouteOutranksAutoMode = (input, verdict, permissionMode) => permissionMode === AUTO_PERMISSION_MODE && PRETOOLUSE_HANDLED_TOOLS.has(input.toolName) && verdict.kind === "gate" && !approvalWaitsAtTheAgentsPrompt(verdict.policy.mode) && !approvesWhenUnanswered(verdict.policy) && callWaitsForSomeoneElse(input);
 var claudeAllowlistOwnsCall = (input, verdict, permissionMode, rules) => rules !== null && verdict.kind === "gate" && !verdict.scopeReason && !aChosenRuleGoverns(input) && !isAskedInEveryMode(input.toolName) && claudeConsultsItsAllowlist(permissionMode) && agentRulesAllowEveryInput(rules, input.toolName, input.toolInputs, input.cwd);
 var claudePromptTakesTheCall = (facts, input, verdict) => verdict.kind === "gate" && !verdict.scopeReason && terminalStaysLiveForTheCall(facts) && noModeOverrideIsActive(input) && !aChosenRuleGoverns(input) && !editGoesToTheAgentsPrompt({ source: facts.source, event: "PreToolUse", permissionMode: facts.permissionMode }, input, verdict);
 var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
@@ -8826,6 +8844,7 @@ var unansweredRefusalReason = (paused) => paused ? SESSION_PAUSED_REASON : NO_RE
 var UNHEARD_PUSH_WINDOW_DAYS = 14;
 var DAY_MS = 24 * 60 * 60 * 1e3;
 var UNHEARD_PUSH_WINDOW_MS = UNHEARD_PUSH_WINDOW_DAYS * DAY_MS;
+var approvesWhenUnanswered = ({ mode, timeoutAction }) => mode === "push_only" && timeoutAction === "approve";
 var ELICITATION_ANSWERABLE_MODE = "form";
 var ELICITATION_MIN_OPTIONS = 2;
 var ELICITATION_MAX_MULTI_QUESTIONS = 4;
@@ -9210,6 +9229,8 @@ export {
   claudePermissionRulesFromSettings,
   claudeConsultsItsAllowlist,
   agentRulesAllowEveryInput,
+  matchedRouteOf,
+  approvalRouteOutranksAutoMode,
   claudeAllowlistOwnsCall,
   claudePromptTakesTheCall,
   modeStateFromResponse,

package/dist/{chunk-RBM2ROSY.js → chunk-LUBECFXJ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   renderCommandHelp
-} from "./chunk-KHWNW4AS.js";
+} from "./chunk-JCHF4VR3.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";

package/dist/{chunk-4M6VUUTX.js → chunk-MDEXA6JD.js}

@@ -5,10 +5,10 @@ import {
   hermesAppWiringRecord,
   hermesConfigReceipt,
   hermesSetupReceipt
-} from "./chunk-PCFIYMK4.js";
+} from "./chunk-RLBTKTOK.js";
 import {
   resolvePathBinary
-} from "./chunk-QQMT2JIC.js";
+} from "./chunk-RIBCPWOB.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -19,7 +19,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/hermes/plugin-payload.ts
 import { createHash } from "crypto";

package/dist/{chunk-Y3N7LIFV.js → chunk-MPG4HYQ6.js}

@@ -2,16 +2,16 @@ import {
   NpmInstallError,
   NpmMissingError,
   NpmPermissionError
-} from "./chunk-QQMT2JIC.js";
+} from "./chunk-RIBCPWOB.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-KHWNW4AS.js";
+} from "./chunk-JCHF4VR3.js";
 import {
   readSetupAgentFailures
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/setup/config-write.ts
 var AgentConfigWriteError = class extends Error {

package/dist/{chunk-75UJ7W6H.js → chunk-NG2EWF32.js}

@@ -1,9 +1,9 @@
 import {
   absoluteUrl
-} from "./chunk-OECCPPO6.js";
+} from "./chunk-HJ566HEV.js";
 import {
   KEY_SCOPE
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/cli/approval-settings-pages.ts
 var API_KEYS_PATH = "/dashboard/agent/settings";

package/dist/{chunk-NZZFIIH6.js → chunk-NK5XT4RS.js}

@@ -1,9 +1,9 @@
 import {
   AGENT_CHOICES
-} from "./chunk-54DPX27B.js";
+} from "./chunk-5SUTYXCT.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-YBQF7DCL.js";
+} from "./chunk-233KC6DP.js";
 import {
   CLAUDE_HOOK_EVENTS,
   CODEX_HOOK_EVENTS,
@@ -15,13 +15,13 @@ import {
   isBridgeLocator,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-PCFIYMK4.js";
+} from "./chunk-RLBTKTOK.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-PYAPWXVP.js → chunk-NPG4WCIM.js}

@@ -5,7 +5,7 @@ import {
   MCP_CREDENTIAL_REJECTION_BODY,
   isRecord,
   responseRejectsCredential
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/credential-rejection.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-AW7IJ56H.js → chunk-O5VJGP6H.js}

@@ -1,20 +1,20 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-UN2QALQO.js";
+} from "./chunk-KB2EEK5T.js";
 import {
   nativeClaudeInstallPath
 } from "./chunk-ROVLRXBI.js";
 import {
   grokHome
-} from "./chunk-RUORT3DE.js";
+} from "./chunk-OJGHJIFQ.js";
 import {
   claudeConfigDir,
   clineDataDirectory,
   codexHomeFrom
-} from "./chunk-PCFIYMK4.js";
+} from "./chunk-RLBTKTOK.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-RUORT3DE.js → chunk-OJGHJIFQ.js}

@@ -1,13 +1,13 @@
 import {
   CLAUDE_CODE_AGENT
-} from "./chunk-7HDO5W4C.js";
+} from "./chunk-I7HSE5LD.js";
 import {
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-NZZFIIH6.js";
+} from "./chunk-NK5XT4RS.js";
 import {
   compatibleToolLookup
-} from "./chunk-FYVRA5GN.js";
+} from "./chunk-FQSFN5ZE.js";
 import {
   CLAUDE_HOOK_EVENTS,
   PUSHARY_MCP_URL,
@@ -19,7 +19,7 @@ import {
   isPusharyHook,
   registerHookEntry,
   removeClaudeMcpServers
-} from "./chunk-PCFIYMK4.js";
+} from "./chunk-RLBTKTOK.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   PHONE_ANSWERED_TOOLS,
@@ -30,7 +30,7 @@ import {
   pusharyMissingReason,
   refusalOutput,
   withHookHoldBudget
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/config-document.ts
 import { parse, stringify } from "smol-toml";

package/dist/{chunk-56ANL3UO.js → chunk-OR5SWH44.js}

@@ -7,13 +7,13 @@ import {
 } from "./chunk-G66WIAST.js";
 import {
   ensureDaemonRunning
-} from "./chunk-SSW4QRGU.js";
+} from "./chunk-3ZU77DJH.js";
 import {
   hookOwnerOf
-} from "./chunk-NZZFIIH6.js";
+} from "./chunk-NK5XT4RS.js";
 import {
   hookMeaning
-} from "./chunk-FYVRA5GN.js";
+} from "./chunk-FQSFN5ZE.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
@@ -24,29 +24,29 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-262UYDKT.js";
+} from "./chunk-KDTTCR3E.js";
 import {
   external_exports
 } from "./chunk-XMSDA5WA.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-G42VQNBC.js";
+} from "./chunk-5J2OGCUA.js";
 import {
   fetchAsCredential
-} from "./chunk-PYAPWXVP.js";
+} from "./chunk-NPG4WCIM.js";
 import {
   readTranscriptPreference
-} from "./chunk-NUU2JVOG.js";
+} from "./chunk-22OATDEL.js";
 import {
   claudeConfigDir,
   codexHome,
   pusharyDir
-} from "./chunk-PCFIYMK4.js";
+} from "./chunk-RLBTKTOK.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-O76PTPKP.js";
+} from "./chunk-GSJUGW3A.js";
 import {
   writeJsonAtomic,
   writeJsonAtomicDurable
@@ -58,7 +58,7 @@ import {
   isHookSource,
   isRecord,
   redactSecretsFromContent
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/transcript-recipient-pin.ts
 import { createHash } from "crypto";

package/dist/{chunk-FE7HSLTK.js → chunk-P4PLDBZK.js}

@@ -1,12 +1,12 @@
 import {
   readMacAppAgentKey
-} from "./chunk-76ATPJN2.js";
+} from "./chunk-E3A77P52.js";
 import {
   API_KEYS_PATH
-} from "./chunk-75UJ7W6H.js";
+} from "./chunk-NG2EWF32.js";
 import {
   absoluteUrl
-} from "./chunk-OECCPPO6.js";
+} from "./chunk-HJ566HEV.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -16,10 +16,10 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-NUU2JVOG.js";
+} from "./chunk-22OATDEL.js";
 import {
   isValidApiKey
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";

package/dist/{chunk-4AKZALX4.js → chunk-PU2KHDRD.js}

@@ -1,31 +1,31 @@
 import {
   claudeSettingsLocationFor,
   readClaudePermissionRules
-} from "./chunk-M73Q37LC.js";
+} from "./chunk-6E2D22Y5.js";
 import {
   askAgentQuestions,
   defersToNativeMode,
   outcomeOfFailedAsk,
   reportMachineDenial,
   storedWaitDeadline
-} from "./chunk-BM32JPXJ.js";
+} from "./chunk-DLCECUKY.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-XJ4PMNCR.js";
+} from "./chunk-CG5SK6NF.js";
 import {
   isAdmitted,
   readAdmissionRules
-} from "./chunk-2MOWY5QL.js";
+} from "./chunk-24M7PB2Y.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-BH5WEDQ4.js";
+} from "./chunk-XL6DDWWT.js";
 import {
   activeHookSource,
   activeIdentity,
   namedSource
-} from "./chunk-RUORT3DE.js";
+} from "./chunk-OJGHJIFQ.js";
 import {
   DEFAULT_SESSION,
   approvalAwaitingRetry,
@@ -41,7 +41,7 @@ import {
   recordBlockedActionHint,
   reportEvent,
   settleQuestionsForToolUse
-} from "./chunk-7HDO5W4C.js";
+} from "./chunk-I7HSE5LD.js";
 import {
   UNNAMED_ACTION,
   deriveAction,
@@ -52,11 +52,11 @@ import {
   patchDeletesFiles,
   permissionDeniedAction,
   scopePathFor
-} from "./chunk-FYVRA5GN.js";
+} from "./chunk-FQSFN5ZE.js";
 import {
   repoKeyFor,
   repositoryScopeFor
-} from "./chunk-NVPCETJ3.js";
+} from "./chunk-4I6FWGZ5.js";
 import {
   askUser,
   cancelQuestion,
@@ -73,17 +73,17 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-TILEGY4M.js";
+} from "./chunk-44O6GG4I.js";
 import {
   getMachineId
-} from "./chunk-SDQQ43FT.js";
+} from "./chunk-F5TQ6TCH.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-O76PTPKP.js";
+} from "./chunk-GSJUGW3A.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-KHWNW4AS.js";
+} from "./chunk-JCHF4VR3.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -105,6 +105,7 @@ import {
   agentQuestionStrategy,
   agentRulesAllowEveryInput,
   approvalModeWithoutLocalPrompt,
+  approvalRouteOutranksAutoMode,
   buildDecisionEpisodeFeatures,
   claudeAllowlistOwnsCall,
   claudeConsultsItsAllowlist,
@@ -128,6 +129,7 @@ import {
   isPermissionRequestOwnedByPreToolUse,
   isPusharyOwnTool,
   isRecord,
+  matchedRouteOf,
   parseAgentQuestions,
   permissionsOffAskReason,
   permissionsOffLineAppliesTo,
@@ -139,7 +141,7 @@ import {
   terminalStaysLiveForTheCall,
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/terminal-answer-watch.ts
 import { closeSync, openSync, readSync, statSync } from "fs";
@@ -491,7 +493,7 @@ var emitDecisionEpisode = (apiKey, input, toolPolicy, machineId, toolTarget, dec
     machineId
   });
 };
-var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingConsent = false, scopeReason, scopePath, terminalLive, askReason) => {
+var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingConsent = false, scopeReason, scopePath, terminalLive, askReason, matchedRoute) => {
   const description = describeToolCall(input.tool_name, input.tool_input, "hook");
   const projectName = basename(input.cwd ?? process.cwd());
   const sessionId = input.session_id;
@@ -501,6 +503,7 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
   const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
   const decision = {
     toolPath: hookWritePath(input.tool_name, input.tool_input),
+    ...matchedRoute ? { matchedRoute } : {},
     intent,
     action: deriveAction(input.tool_name, input.tool_input),
     blocker: scopeReason ?? deriveBlocker(toolPolicy.mode, askReason),
@@ -774,7 +777,7 @@ var handlePreToolUse = async (input, canonical) => {
     }
     if (await claimedBlockedActionRetry(apiKey, input)) return allow(BLOCKED_ACTION_ALLOW_REASON);
     if (remindedOfApprovedRetry(input)) return deny(BLOCKED_ACTION_CHANGED_RETRY_REASON);
-    if (!(verdict.kind === "gate" && verdict.scopeReason) && shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
+    if (!(verdict.kind === "gate" && verdict.scopeReason) && !approvalRouteOutranksAutoMode(gateInput, verdict, input.permission_mode) && shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
       return void 0;
     }
     if (claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudePermissionRulesFor(input))) return void 0;
@@ -791,7 +794,7 @@ var handlePreToolUse = async (input, canonical) => {
         return undecidedCall(SOLE_GATE_UNDECIDED_REASON);
       default:
         if (preToolUseHandsOff(input, gateInput, verdict)) return ask(TERMINAL_AND_PHONE_REASON);
-        return await dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, void 0, permissionsOffAskReason(gateInput, verdict));
+        return await dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, void 0, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput));
     }
   } catch (error) {
     await reportHookFailure("pre_tool_use_failed", error);
@@ -839,7 +842,7 @@ var handlePermissionRequest = async (input, canonical, holdBudgetSeconds) => {
     const scopeQuestion = verdict.kind === "gate" && Boolean(verdict.scopeReason);
     const preToolUseRanForTheCall = PRETOOLUSE_HANDLED_TOOLS.has(input.tool_name) && isAdmitted(readAdmissionRules(), "claude", "PreToolUse");
     const preToolUseAskedTheScopeQuestion = scopeQuestion && terminalLive && preToolUseRanForTheCall;
-    const preToolUseOwnsTheCall = !scopeQuestion && !claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudeRules) && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode);
+    const preToolUseOwnsTheCall = !scopeQuestion && !claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudeRules) && (isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode) || preToolUseRanForTheCall && approvalRouteOutranksAutoMode(gateInput, verdict, input.permission_mode));
     if (!handedOff && (preToolUseAskedTheScopeQuestion || preToolUseOwnsTheCall)) return void 0;
     const terminalLiveDispatch = handedOff ? { holdBudgetSeconds } : void 0;
     switch (verdict.kind) {
@@ -850,7 +853,7 @@ var handlePermissionRequest = async (input, canonical, holdBudgetSeconds) => {
         return void 0;
       default:
         return toPermissionRequestOutput(
-          await dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, terminalLiveDispatch, permissionsOffAskReason(gateInput, verdict))
+          await dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, terminalLiveDispatch, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput))
         );
     }
   } catch (error) {

package/dist/{chunk-YQMARTNQ.js → chunk-Q4VB3DIL.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-PCFIYMK4.js";
+} from "./chunk-RLBTKTOK.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   npmExitedOnPermissionDenied
-} from "./chunk-QQMT2JIC.js";
+} from "./chunk-RIBCPWOB.js";
 import {
   writeJsonAtomic
 } from "./chunk-T5I4PKOQ.js";

package/dist/{chunk-QQMT2JIC.js → chunk-RIBCPWOB.js}

@@ -399,9 +399,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-2BXXJQHR.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-HYD3MFFS.js");
-    const { autoUpdateLock } = await import("./paths-A2TITMY3.js");
+    const { withUpgradeLock } = await import("./global-upgrade-LDIMKAPF.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-76Z2YLIV.js");
+    const { autoUpdateLock } = await import("./paths-H5LP5HJB.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;

package/dist/{chunk-PCFIYMK4.js → chunk-RLBTKTOK.js}

@@ -3,7 +3,7 @@ import {
   formatVersion,
   quoteIfNeeded,
   shellDoubleQuoted
-} from "./chunk-QQMT2JIC.js";
+} from "./chunk-RIBCPWOB.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";
@@ -17,7 +17,7 @@ import {
   HOOK_LOCATOR_BINARY,
   PRETOOLUSE_GATED_TOOLS,
   withHookHoldBudget
-} from "./chunk-DZE26BID.js";
+} from "./chunk-KPCVIH52.js";
 
 // src/setup/paths.ts
 import { createHash as createHash2 } from "crypto";