pushary 1.9.113 → 1.9.116

package/dist/{chunk-PU2KHDRD.js → chunk-BWSAVEMV.js}

@@ -1,31 +1,31 @@
 import {
   claudeSettingsLocationFor,
   readClaudePermissionRules
-} from "./chunk-6E2D22Y5.js";
+} from "./chunk-ZR7ODRKY.js";
 import {
   askAgentQuestions,
   defersToNativeMode,
   outcomeOfFailedAsk,
   reportMachineDenial,
   storedWaitDeadline
-} from "./chunk-DLCECUKY.js";
+} from "./chunk-PPEN3N44.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-CG5SK6NF.js";
+} from "./chunk-4QJUMXZS.js";
 import {
   isAdmitted,
   readAdmissionRules
-} from "./chunk-24M7PB2Y.js";
+} from "./chunk-KK7JA5JP.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-XL6DDWWT.js";
+} from "./chunk-CJL7IMWO.js";
 import {
   activeHookSource,
   activeIdentity,
   namedSource
-} from "./chunk-OJGHJIFQ.js";
+} from "./chunk-5LWC7PSM.js";
 import {
   DEFAULT_SESSION,
   approvalAwaitingRetry,
@@ -36,12 +36,15 @@ import {
   getPolicy,
   hasBlockedActionHint,
   markApprovalReminded,
+  readCachedPolicy,
   readLastPrompt,
   readLastUserPrompt,
   recordBlockedActionHint,
   reportEvent,
-  settleQuestionsForToolUse
-} from "./chunk-I7HSE5LD.js";
+  settleQuestionsForToolUse,
+  sweepFilesOlderThan,
+  userScope
+} from "./chunk-XUHDUD34.js";
 import {
   UNNAMED_ACTION,
   deriveAction,
@@ -52,11 +55,12 @@ import {
   patchDeletesFiles,
   permissionDeniedAction,
   scopePathFor
-} from "./chunk-FQSFN5ZE.js";
+} from "./chunk-27CV6IXW.js";
 import {
+  branchFor,
   repoKeyFor,
   repositoryScopeFor
-} from "./chunk-4I6FWGZ5.js";
+} from "./chunk-SDMGCRO3.js";
 import {
   askUser,
   cancelQuestion,
@@ -73,17 +77,20 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-44O6GG4I.js";
+} from "./chunk-PBM565KU.js";
 import {
   getMachineId
-} from "./chunk-F5TQ6TCH.js";
+} from "./chunk-TNQ5JFCV.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-GSJUGW3A.js";
+} from "./chunk-NGWG2CHI.js";
+import {
+  writeFileAtomic
+} from "./chunk-T5I4PKOQ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-JCHF4VR3.js";
+} from "./chunk-TWRDOVN4.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -91,6 +98,7 @@ import {
   GATE_BLOCK_REASON_MAX_LENGTH,
   GATE_WIRE,
   HANDED_BACK_REASON,
+  MCP_TOOL_PREFIX,
   PLAN_DECLINED_REASON,
   PRETOOLUSE_HANDLED_TOOLS,
   QUESTION_LIMIT_PROMPT_REASON,
@@ -105,8 +113,10 @@ import {
   agentQuestionStrategy,
   agentRulesAllowEveryInput,
   approvalModeWithoutLocalPrompt,
+  approvalRouteHoldsMcpCall,
   approvalRouteOutranksAutoMode,
   buildDecisionEpisodeFeatures,
+  callMayPushTheCurrentBranch,
   claudeAllowlistOwnsCall,
   claudeConsultsItsAllowlist,
   claudePermissionDeniedOutput,
@@ -130,6 +140,8 @@ import {
   isPusharyOwnTool,
   isRecord,
   matchedRouteOf,
+  mcpCallCouldBeHeldForSomeoneElse,
+  namedRouteWaitsForSomeoneElse,
   parseAgentQuestions,
   permissionsOffAskReason,
   permissionsOffLineAppliesTo,
@@ -141,7 +153,7 @@ import {
   terminalStaysLiveForTheCall,
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/terminal-answer-watch.ts
 import { closeSync, openSync, readSync, statSync } from "fs";
@@ -381,6 +393,45 @@ var handlePushFirst = async (apiKey, call, pushFirstSeconds, signals) => {
   return ask(WITHDRAWN_APPROVAL_REASON);
 };
 
+// src/route-hold-handback.ts
+import { existsSync, mkdirSync, rmSync, statSync as statSync2 } from "fs";
+import { tmpdir } from "os";
+import { join } from "path";
+var HANDBACK_TTL_MS = 2 * 60 * 1e3;
+var FINGERPRINT = /^[0-9a-f]{64}$/;
+var claudeMcpHoldHandbackDir = () => join(tmpdir(), `pushary-mcp-hold-handbacks-${userScope()}`);
+var handbackFile = (fingerprint) => join(claudeMcpHoldHandbackDir(), fingerprint);
+var isLive = (path) => {
+  try {
+    const stat = statSync2(path);
+    return stat.isFile() && Date.now() - stat.mtimeMs < HANDBACK_TTL_MS;
+  } catch {
+    return false;
+  }
+};
+var recordMcpHoldHandback = (fingerprint) => {
+  if (!fingerprint || !FINGERPRINT.test(fingerprint)) return;
+  try {
+    const dir = claudeMcpHoldHandbackDir();
+    if (!existsSync(dir)) mkdirSync(dir, { recursive: true, mode: 448 });
+    else sweepFilesOlderThan(dir, HANDBACK_TTL_MS, Date.now());
+    writeFileAtomic(handbackFile(fingerprint), "1", 384);
+  } catch {
+    return;
+  }
+};
+var claimMcpHoldHandback = (fingerprint) => {
+  if (!fingerprint || !FINGERPRINT.test(fingerprint)) return false;
+  const path = handbackFile(fingerprint);
+  const live = isLive(path);
+  try {
+    rmSync(path, { force: true });
+  } catch {
+    return live;
+  }
+  return live;
+};
+
 // src/hook.ts
 var START_MS = Date.now();
 var ACTIVE_AGENT = activeIdentity(process.argv);
@@ -674,6 +725,7 @@ var handleKeyless = (input) => {
 };
 var claudePermissionRulesFor = (input) => ACTIVE_SOURCE === "claude" ? readClaudePermissionRules(claudeSettingsLocationFor(input.cwd)) : null;
 var claudeRulesMayCover = (input, rules) => rules !== null && claudeConsultsItsAllowlist(input.permission_mode) && agentRulesAllowEveryInput(rules, input.tool_name, [input.tool_input ?? {}], input.cwd);
+var currentBranchOfAPush = (toolName, toolInputs, cwd) => callMayPushTheCurrentBranch(toolName, toolInputs) ? branchFor(cwd) : void 0;
 var claudeGateInput = (modeState, config, input, canonical) => {
   const toolName = canonical?.toolName ?? input.tool_name;
   const toolInputs = canonical?.toolInputs ?? [input.tool_input ?? {}];
@@ -690,7 +742,8 @@ var claudeGateInput = (modeState, config, input, canonical) => {
     ...repositoryScopeFor(input.cwd),
     sessionId: input.session_id,
     permissionMode: permissionsOffLineAppliesTo(ACTIVE_AGENT.type) ? input.permission_mode : void 0,
-    deletesFiles: patchDeletesFiles(input.tool_name, input.tool_input ?? {})
+    deletesFiles: patchDeletesFiles(input.tool_name, input.tool_input ?? {}),
+    currentBranch: currentBranchOfAPush(toolName, toolInputs, input.cwd)
   };
 };
 var BLOCKED_ACTION_GATE_TIMEOUT_MS = 15e3;
@@ -740,12 +793,35 @@ var remindedOfApprovedRetry = (input) => {
   markApprovalReminded(approval);
   return true;
 };
+var isMcpCallInClaudeCode = (input) => ACTIVE_SOURCE === "claude" && input.tool_name.startsWith(MCP_TOOL_PREFIX);
+var mcpCallWaitsForSomeoneElse = (input) => {
+  if (!mcpCallCouldBeHeldForSomeoneElse(input.tool_name, input.permission_mode)) return false;
+  let apiKey;
+  try {
+    apiKey = getApiKey();
+  } catch {
+    return false;
+  }
+  const config = readCachedPolicy(apiKey, ACTIVE_AGENT.type, true);
+  return config !== null && namedRouteWaitsForSomeoneElse({
+    config,
+    toolName: input.tool_name,
+    toolInputs: [input.tool_input ?? {}],
+    cwd: input.cwd,
+    ...repositoryScopeFor(input.cwd)
+  });
+};
 var reportHookFailure = async (code, error) => {
   console.error(`[Pushary] ${code}: could not complete the approval check; keeping the agent's existing fallback.`);
   await reportClientError({ kind: clientErrorKindOf(error), code });
 };
+var rememberHandbackToThePrompt = (input, heldForMcpRoute, result) => {
+  if (heldForMcpRoute && result?.hookSpecificOutput?.permissionDecision === "ask") recordMcpHoldHandback(blockedActionFingerprintFor(input));
+  return result;
+};
 var handlePreToolUse = async (input, canonical) => {
   if (isPusharyOwnTool(input.tool_name)) return void 0;
+  if (isMcpCallInClaudeCode(input) && !mcpCallWaitsForSomeoneElse(input)) return void 0;
   let apiKey;
   try {
     apiKey = getApiKey();
@@ -775,9 +851,11 @@ var handlePreToolUse = async (input, canonical) => {
     if (input.tool_name === "ExitPlanMode") {
       return await handleExitPlanMode(apiKey, input);
     }
+    const heldForMcpRoute = approvalRouteHoldsMcpCall(gateInput, verdict, input.permission_mode);
+    if (isMcpCallInClaudeCode(input) && !heldForMcpRoute) return void 0;
     if (await claimedBlockedActionRetry(apiKey, input)) return allow(BLOCKED_ACTION_ALLOW_REASON);
     if (remindedOfApprovedRetry(input)) return deny(BLOCKED_ACTION_CHANGED_RETRY_REASON);
-    if (!(verdict.kind === "gate" && verdict.scopeReason) && !approvalRouteOutranksAutoMode(gateInput, verdict, input.permission_mode) && shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
+    if (!(verdict.kind === "gate" && verdict.scopeReason) && !approvalRouteOutranksAutoMode(gateInput, verdict, input.permission_mode) && !heldForMcpRoute && shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
       return void 0;
     }
     if (claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudePermissionRulesFor(input))) return void 0;
@@ -794,7 +872,11 @@ var handlePreToolUse = async (input, canonical) => {
         return undecidedCall(SOLE_GATE_UNDECIDED_REASON);
       default:
         if (preToolUseHandsOff(input, gateInput, verdict)) return ask(TERMINAL_AND_PHONE_REASON);
-        return await dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, void 0, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput));
+        return rememberHandbackToThePrompt(
+          input,
+          heldForMcpRoute,
+          await dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, void 0, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput))
+        );
     }
   } catch (error) {
     await reportHookFailure("pre_tool_use_failed", error);
@@ -835,6 +917,7 @@ var handlePermissionRequest = async (input, canonical, holdBudgetSeconds) => {
       return permReqDeny(verdict.reason);
     }
     if (canonical === null) return permReqDeny(UNREADABLE_CALL_REASON);
+    if (isMcpCallInClaudeCode(input) && claimMcpHoldHandback(blockedActionFingerprintFor(input))) return void 0;
     if (agentQuestionStrategy(ACTIVE_SOURCE, "PermissionRequest", input.tool_name) === AGENT_QUESTION_STRATEGY.native) return void 0;
     if (verdict.kind === "gate" && verdict.scopeReason && (canonical?.toolInputs.length ?? 0) > 1) return permReqDeny(SCOPE_BATCH_REASON);
     const handedOff = preToolUseHandsOff(input, gateInput, verdict);

package/dist/{chunk-BMZFL3HF.js → chunk-BZLG63YR.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-OJGHJIFQ.js";
+} from "./chunk-5LWC7PSM.js";
 import {
   pusharyHookExecutable
-} from "./chunk-NK5XT4RS.js";
+} from "./chunk-VAT53KQR.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-RLBTKTOK.js";
+} from "./chunk-ZUVDQOU6.js";
 import {
   isRecord
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-3D2J3T2M.js → chunk-CBJXUJ4Y.js}

@@ -2,7 +2,7 @@ import {
   isApprovalMode,
   isRecord,
   isTimeoutAction
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/cli/settings-response.ts
 var isFiniteNumber = (value) => typeof value === "number" && Number.isFinite(value);

package/dist/{chunk-GNP6I5XM.js → chunk-CHHS7WT2.js}

@@ -9,13 +9,13 @@ import {
   installedCodexApp,
   readCodexAppRuntime,
   shellQuoted
-} from "./chunk-BYL7RNOM.js";
+} from "./chunk-PPYNBRU6.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-3ZU77DJH.js";
+} from "./chunk-LQQWATPA.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";

package/dist/{chunk-XL6DDWWT.js → chunk-CJL7IMWO.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-I7HSE5LD.js";
+} from "./chunk-XUHDUD34.js";
 
 // src/answer.ts
 var isDeferAnswer = (value) => value === "defer";

package/dist/{chunk-GQFT3QTC.js → chunk-CW34RKBV.js}

@@ -1,12 +1,12 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-GBT74TNN.js";
+} from "./chunk-7THCN7FJ.js";
 import {
   retryAgentCommand
-} from "./chunk-MPG4HYQ6.js";
+} from "./chunk-4X6GTMU4.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-JCHF4VR3.js";
+} from "./chunk-TWRDOVN4.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {
@@ -26,6 +26,7 @@ var CODEX_APPROVALS_BY_TRUST = {
 };
 var GAPS_THAT_STOP_A_HOOK = /* @__PURE__ */ new Set(["untrusted", "disabled", "asynchronous"]);
 var CODEX_SETTINGS_STOP_A_HOOK = "Codex's own settings stop a Pushary hook from running: hooks are turned off in config.toml, or a hook is turned off or not trusted in Codex's hooks list (/hooks, or Settings then Hooks in the ChatGPT app). Run pushary doctor to see which, and how to fix it.";
+var CODEX_NEEDS_A_NEWER_VERSION = "Update Codex to get approvals, then run setup again.";
 var codexSettingsStopAHook = (onDisk) => onDisk.kind === "read" && (onDisk.hooksFeatureOff || onDisk.gaps.some((gap) => GAPS_THAT_STOP_A_HOOK.has(gap.kind)));
 var codexApprovalsWithHooks = (trust, onDisk) => trust === "unverified" && codexSettingsStopAHook(onDisk) ? "hooks_not_running" : CODEX_APPROVALS_BY_TRUST[trust];
 var CODEX_TRUST_REFUSED = "Codex did not accept the trust Pushary asked for, so its hooks are not trusted yet. Open Codex, run /hooks, and choose Trust for the Pushary hooks.";
@@ -121,6 +122,7 @@ var describeHermesState = (state) => {
 export {
   codexTrustOutcome,
   CODEX_SETTINGS_STOP_A_HOOK,
+  CODEX_NEEDS_A_NEWER_VERSION,
   codexApprovalsWithHooks,
   CODEX_HOOK_REMEDY,
   needsCodexTrustStep,

package/dist/{chunk-IWUYKDDW.js → chunk-DGZGCKDA.js}

@@ -1,17 +1,17 @@
 import {
   pusharyHookExecutable
-} from "./chunk-NK5XT4RS.js";
+} from "./chunk-VAT53KQR.js";
 import {
   bridgeResolvesToApp,
   cursorUserHooks,
   executableFileName,
   isBridgeLocator,
   liveBridgeProbe
-} from "./chunk-RLBTKTOK.js";
+} from "./chunk-ZUVDQOU6.js";
 import {
   atLeast,
   parseVersion
-} from "./chunk-RIBCPWOB.js";
+} from "./chunk-FU33PDFG.js";
 import {
   CURSOR_GATE_COVERAGE,
   CURSOR_GATE_SCRIPT,
@@ -21,7 +21,7 @@ import {
   isCursorHookPayload,
   isRecord,
   toolsCoveredByGateEntry
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/cursor-gate-registration.ts
 import { dirname, isAbsolute, join, resolve } from "path";

package/dist/{chunk-KDTTCR3E.js → chunk-DMY2J2MY.js}

@@ -3,15 +3,15 @@ import {
 } from "./chunk-XMSDA5WA.js";
 import {
   fetchAsCredential
-} from "./chunk-NPG4WCIM.js";
+} from "./chunk-JSTA2JTL.js";
 import {
   getBaseUrl
-} from "./chunk-GSJUGW3A.js";
+} from "./chunk-NGWG2CHI.js";
 import {
   compressTranscriptRecord,
   redactSecretsFromContent,
   transcriptRecordPlaintext
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/transcript-api.ts
 var providerRecipientSchema = external_exports.object({

package/dist/{chunk-LUBECFXJ.js → chunk-EQZKJXHE.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   renderCommandHelp
-} from "./chunk-JCHF4VR3.js";
+} from "./chunk-TWRDOVN4.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";

package/dist/{chunk-T2N7MEO3.js → chunk-FHRXFUGD.js}

@@ -1,6 +1,6 @@
 import {
   realpath
-} from "./chunk-FLRVTAV4.js";
+} from "./chunk-BVN3WPDZ.js";
 import {
   findNativeClaudeInstall
 } from "./chunk-ROVLRXBI.js";
@@ -13,10 +13,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-RIBCPWOB.js";
+} from "./chunk-FU33PDFG.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/live-capabilities.ts
 import { homedir } from "os";

package/dist/{chunk-GI3266RE.js → chunk-FKVPV3SH.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-22OATDEL.js";
+} from "./chunk-S5B3LKOP.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-JCHF4VR3.js";
+} from "./chunk-TWRDOVN4.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-RIBCPWOB.js → chunk-FU33PDFG.js}

@@ -399,9 +399,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-LDIMKAPF.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-76Z2YLIV.js");
-    const { autoUpdateLock } = await import("./paths-H5LP5HJB.js");
+    const { withUpgradeLock } = await import("./global-upgrade-BTHOIZK5.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-LQQDJAEJ.js");
+    const { autoUpdateLock } = await import("./paths-BVROPWE2.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;

package/dist/{chunk-KB2EEK5T.js → chunk-GB5E3JHR.js}

@@ -1,13 +1,13 @@
 import {
   compatibleConfigFile
-} from "./chunk-OJGHJIFQ.js";
+} from "./chunk-5LWC7PSM.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands
-} from "./chunk-NK5XT4RS.js";
+} from "./chunk-VAT53KQR.js";
 import {
   AGENT_CHOICES
-} from "./chunk-5SUTYXCT.js";
+} from "./chunk-OEXJ7AJO.js";
 import {
   bridgeStub,
   claudeSettings,
@@ -19,7 +19,7 @@ import {
   resolveBridgeStub,
   vscodePluginDir,
   windowsNodeLauncherFor
-} from "./chunk-RLBTKTOK.js";
+} from "./chunk-ZUVDQOU6.js";
 import {
   readJsonSafe
 } from "./chunk-T5I4PKOQ.js";
@@ -29,7 +29,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-H5TODUJ3.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-ZUZ4RXM7.js → chunk-GKXEA6IW.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-22OATDEL.js";
+} from "./chunk-S5B3LKOP.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";