pushary 1.9.114 → 1.9.117

package/dist/{chunk-KDTTCR3E.js → chunk-DE6ZYZZZ.js}

@@ -3,15 +3,15 @@ import {
 } from "./chunk-XMSDA5WA.js";
 import {
   fetchAsCredential
-} from "./chunk-NPG4WCIM.js";
+} from "./chunk-6ICAZ33G.js";
 import {
   getBaseUrl
-} from "./chunk-GSJUGW3A.js";
+} from "./chunk-N4DQDFEP.js";
 import {
   compressTranscriptRecord,
   redactSecretsFromContent,
   transcriptRecordPlaintext
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-KYWTX4R2.js";
 
 // src/transcript-api.ts
 var providerRecipientSchema = external_exports.object({

package/dist/{chunk-HJ566HEV.js → chunk-DH23XX7X.js}

@@ -1,9 +1,9 @@
 import {
   pusharyFetch
-} from "./chunk-XQFHB2EK.js";
+} from "./chunk-3OVRAD25.js";
 import {
   getBaseUrl
-} from "./chunk-GSJUGW3A.js";
+} from "./chunk-N4DQDFEP.js";
 import {
   NetworkError
 } from "./chunk-YU2EUD7O.js";
@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-KYWTX4R2.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-JRW5HK32.js → chunk-DZI6MSR4.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-GSJUGW3A.js";
+} from "./chunk-N4DQDFEP.js";
 import {
   normalizeInstallSource
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-KYWTX4R2.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-JXNDO7FB.js → chunk-EBL6XYOI.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   redactSecretsFromContent
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-KYWTX4R2.js";
 
 // src/cli/json.ts
 var writeStdoutFully = (text) => new Promise((resolve, reject) => {

package/dist/{chunk-TRSKGWEL.js → chunk-EXWJBUL5.js}

@@ -1,12 +1,12 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-GBT74TNN.js";
+} from "./chunk-XJC6PG7J.js";
 import {
   retryAgentCommand
-} from "./chunk-MPG4HYQ6.js";
+} from "./chunk-J3PBLQUD.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-JCHF4VR3.js";
+} from "./chunk-R5ZMI6BM.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-YM5OM2CI.js → chunk-F3Z7UWM6.js}

@@ -3,10 +3,10 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-Q4VB3DIL.js";
+} from "./chunk-X2JY437V.js";
 import {
   phoneStartIsRequired
-} from "./chunk-T2N7MEO3.js";
+} from "./chunk-G5EB7GAR.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -18,25 +18,25 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-D3XNQAQO.js";
+} from "./chunk-FRIQ4LQ5.js";
 import {
   autoUpdateLock,
   autoUpdateLog,
   autoUpdateState
-} from "./chunk-RLBTKTOK.js";
+} from "./chunk-ARRXCME5.js";
 import {
   execNpm,
   fetchLatestPublishedVersion,
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-RIBCPWOB.js";
+} from "./chunk-XU4DUX7K.js";
 import {
   EXIT
 } from "./chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-JCHF4VR3.js";
+} from "./chunk-R5ZMI6BM.js";
 import {
   commandsPackage,
   globalUpgradeEntry,

package/dist/{chunk-PU2KHDRD.js → chunk-FKH3KT4U.js}

@@ -1,31 +1,31 @@
 import {
   claudeSettingsLocationFor,
   readClaudePermissionRules
-} from "./chunk-6E2D22Y5.js";
+} from "./chunk-YEV6CIQZ.js";
 import {
   askAgentQuestions,
   defersToNativeMode,
   outcomeOfFailedAsk,
   reportMachineDenial,
   storedWaitDeadline
-} from "./chunk-DLCECUKY.js";
+} from "./chunk-SE62HPB7.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-CG5SK6NF.js";
+} from "./chunk-K54Y2QFA.js";
 import {
   isAdmitted,
   readAdmissionRules
-} from "./chunk-24M7PB2Y.js";
+} from "./chunk-3ZQT5LQ3.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-XL6DDWWT.js";
+} from "./chunk-2KYPNVRC.js";
 import {
   activeHookSource,
   activeIdentity,
   namedSource
-} from "./chunk-OJGHJIFQ.js";
+} from "./chunk-MA4KQLCT.js";
 import {
   DEFAULT_SESSION,
   approvalAwaitingRetry,
@@ -36,12 +36,15 @@ import {
   getPolicy,
   hasBlockedActionHint,
   markApprovalReminded,
+  readCachedPolicy,
   readLastPrompt,
   readLastUserPrompt,
   recordBlockedActionHint,
   reportEvent,
-  settleQuestionsForToolUse
-} from "./chunk-I7HSE5LD.js";
+  settleQuestionsForToolUse,
+  sweepFilesOlderThan,
+  userScope
+} from "./chunk-5TVOBKRE.js";
 import {
   UNNAMED_ACTION,
   deriveAction,
@@ -52,11 +55,12 @@ import {
   patchDeletesFiles,
   permissionDeniedAction,
   scopePathFor
-} from "./chunk-FQSFN5ZE.js";
+} from "./chunk-BE6JIWTM.js";
 import {
+  branchFor,
   repoKeyFor,
   repositoryScopeFor
-} from "./chunk-4I6FWGZ5.js";
+} from "./chunk-74MC5LRW.js";
 import {
   askUser,
   cancelQuestion,
@@ -73,17 +77,20 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-44O6GG4I.js";
+} from "./chunk-N74WJAL6.js";
 import {
   getMachineId
-} from "./chunk-F5TQ6TCH.js";
+} from "./chunk-RCCISH7T.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-GSJUGW3A.js";
+} from "./chunk-N4DQDFEP.js";
+import {
+  writeFileAtomic
+} from "./chunk-T5I4PKOQ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-JCHF4VR3.js";
+} from "./chunk-R5ZMI6BM.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -91,6 +98,7 @@ import {
   GATE_BLOCK_REASON_MAX_LENGTH,
   GATE_WIRE,
   HANDED_BACK_REASON,
+  MCP_TOOL_PREFIX,
   PLAN_DECLINED_REASON,
   PRETOOLUSE_HANDLED_TOOLS,
   QUESTION_LIMIT_PROMPT_REASON,
@@ -105,8 +113,10 @@ import {
   agentQuestionStrategy,
   agentRulesAllowEveryInput,
   approvalModeWithoutLocalPrompt,
+  approvalRouteHoldsMcpCall,
   approvalRouteOutranksAutoMode,
   buildDecisionEpisodeFeatures,
+  callMayPushTheCurrentBranch,
   claudeAllowlistOwnsCall,
   claudeConsultsItsAllowlist,
   claudePermissionDeniedOutput,
@@ -130,6 +140,8 @@ import {
   isPusharyOwnTool,
   isRecord,
   matchedRouteOf,
+  mcpCallCouldBeHeldForSomeoneElse,
+  namedRouteWaitsForSomeoneElse,
   parseAgentQuestions,
   permissionsOffAskReason,
   permissionsOffLineAppliesTo,
@@ -141,7 +153,7 @@ import {
   terminalStaysLiveForTheCall,
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-KYWTX4R2.js";
 
 // src/terminal-answer-watch.ts
 import { closeSync, openSync, readSync, statSync } from "fs";
@@ -381,6 +393,45 @@ var handlePushFirst = async (apiKey, call, pushFirstSeconds, signals) => {
   return ask(WITHDRAWN_APPROVAL_REASON);
 };
 
+// src/route-hold-handback.ts
+import { existsSync, mkdirSync, rmSync, statSync as statSync2 } from "fs";
+import { tmpdir } from "os";
+import { join } from "path";
+var HANDBACK_TTL_MS = 2 * 60 * 1e3;
+var FINGERPRINT = /^[0-9a-f]{64}$/;
+var claudeMcpHoldHandbackDir = () => join(tmpdir(), `pushary-mcp-hold-handbacks-${userScope()}`);
+var handbackFile = (fingerprint) => join(claudeMcpHoldHandbackDir(), fingerprint);
+var isLive = (path) => {
+  try {
+    const stat = statSync2(path);
+    return stat.isFile() && Date.now() - stat.mtimeMs < HANDBACK_TTL_MS;
+  } catch {
+    return false;
+  }
+};
+var recordMcpHoldHandback = (fingerprint) => {
+  if (!fingerprint || !FINGERPRINT.test(fingerprint)) return;
+  try {
+    const dir = claudeMcpHoldHandbackDir();
+    if (!existsSync(dir)) mkdirSync(dir, { recursive: true, mode: 448 });
+    else sweepFilesOlderThan(dir, HANDBACK_TTL_MS, Date.now());
+    writeFileAtomic(handbackFile(fingerprint), "1", 384);
+  } catch {
+    return;
+  }
+};
+var claimMcpHoldHandback = (fingerprint) => {
+  if (!fingerprint || !FINGERPRINT.test(fingerprint)) return false;
+  const path = handbackFile(fingerprint);
+  const live = isLive(path);
+  try {
+    rmSync(path, { force: true });
+  } catch {
+    return live;
+  }
+  return live;
+};
+
 // src/hook.ts
 var START_MS = Date.now();
 var ACTIVE_AGENT = activeIdentity(process.argv);
@@ -674,6 +725,7 @@ var handleKeyless = (input) => {
 };
 var claudePermissionRulesFor = (input) => ACTIVE_SOURCE === "claude" ? readClaudePermissionRules(claudeSettingsLocationFor(input.cwd)) : null;
 var claudeRulesMayCover = (input, rules) => rules !== null && claudeConsultsItsAllowlist(input.permission_mode) && agentRulesAllowEveryInput(rules, input.tool_name, [input.tool_input ?? {}], input.cwd);
+var currentBranchOfAPush = (toolName, toolInputs, cwd) => callMayPushTheCurrentBranch(toolName, toolInputs) ? branchFor(cwd) : void 0;
 var claudeGateInput = (modeState, config, input, canonical) => {
   const toolName = canonical?.toolName ?? input.tool_name;
   const toolInputs = canonical?.toolInputs ?? [input.tool_input ?? {}];
@@ -690,7 +742,8 @@ var claudeGateInput = (modeState, config, input, canonical) => {
     ...repositoryScopeFor(input.cwd),
     sessionId: input.session_id,
     permissionMode: permissionsOffLineAppliesTo(ACTIVE_AGENT.type) ? input.permission_mode : void 0,
-    deletesFiles: patchDeletesFiles(input.tool_name, input.tool_input ?? {})
+    deletesFiles: patchDeletesFiles(input.tool_name, input.tool_input ?? {}),
+    currentBranch: currentBranchOfAPush(toolName, toolInputs, input.cwd)
   };
 };
 var BLOCKED_ACTION_GATE_TIMEOUT_MS = 15e3;
@@ -740,12 +793,35 @@ var remindedOfApprovedRetry = (input) => {
   markApprovalReminded(approval);
   return true;
 };
+var isMcpCallInClaudeCode = (input) => ACTIVE_SOURCE === "claude" && input.tool_name.startsWith(MCP_TOOL_PREFIX);
+var mcpCallWaitsForSomeoneElse = (input) => {
+  if (!mcpCallCouldBeHeldForSomeoneElse(input.tool_name, input.permission_mode)) return false;
+  let apiKey;
+  try {
+    apiKey = getApiKey();
+  } catch {
+    return false;
+  }
+  const config = readCachedPolicy(apiKey, ACTIVE_AGENT.type, true);
+  return config !== null && namedRouteWaitsForSomeoneElse({
+    config,
+    toolName: input.tool_name,
+    toolInputs: [input.tool_input ?? {}],
+    cwd: input.cwd,
+    ...repositoryScopeFor(input.cwd)
+  });
+};
 var reportHookFailure = async (code, error) => {
   console.error(`[Pushary] ${code}: could not complete the approval check; keeping the agent's existing fallback.`);
   await reportClientError({ kind: clientErrorKindOf(error), code });
 };
+var rememberHandbackToThePrompt = (input, heldForMcpRoute, result) => {
+  if (heldForMcpRoute && result?.hookSpecificOutput?.permissionDecision === "ask") recordMcpHoldHandback(blockedActionFingerprintFor(input));
+  return result;
+};
 var handlePreToolUse = async (input, canonical) => {
   if (isPusharyOwnTool(input.tool_name)) return void 0;
+  if (isMcpCallInClaudeCode(input) && !mcpCallWaitsForSomeoneElse(input)) return void 0;
   let apiKey;
   try {
     apiKey = getApiKey();
@@ -775,9 +851,11 @@ var handlePreToolUse = async (input, canonical) => {
     if (input.tool_name === "ExitPlanMode") {
       return await handleExitPlanMode(apiKey, input);
     }
+    const heldForMcpRoute = approvalRouteHoldsMcpCall(gateInput, verdict, input.permission_mode);
+    if (isMcpCallInClaudeCode(input) && !heldForMcpRoute) return void 0;
     if (await claimedBlockedActionRetry(apiKey, input)) return allow(BLOCKED_ACTION_ALLOW_REASON);
     if (remindedOfApprovedRetry(input)) return deny(BLOCKED_ACTION_CHANGED_RETRY_REASON);
-    if (!(verdict.kind === "gate" && verdict.scopeReason) && !approvalRouteOutranksAutoMode(gateInput, verdict, input.permission_mode) && shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
+    if (!(verdict.kind === "gate" && verdict.scopeReason) && !approvalRouteOutranksAutoMode(gateInput, verdict, input.permission_mode) && !heldForMcpRoute && shouldDeferToNativeMode(input.permission_mode, input.tool_name)) {
       return void 0;
     }
     if (claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudePermissionRulesFor(input))) return void 0;
@@ -794,7 +872,11 @@ var handlePreToolUse = async (input, canonical) => {
         return undecidedCall(SOLE_GATE_UNDECIDED_REASON);
       default:
         if (preToolUseHandsOff(input, gateInput, verdict)) return ask(TERMINAL_AND_PHONE_REASON);
-        return await dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, void 0, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput));
+        return rememberHandbackToThePrompt(
+          input,
+          heldForMcpRoute,
+          await dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, void 0, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput))
+        );
     }
   } catch (error) {
     await reportHookFailure("pre_tool_use_failed", error);
@@ -835,6 +917,7 @@ var handlePermissionRequest = async (input, canonical, holdBudgetSeconds) => {
       return permReqDeny(verdict.reason);
     }
     if (canonical === null) return permReqDeny(UNREADABLE_CALL_REASON);
+    if (isMcpCallInClaudeCode(input) && claimMcpHoldHandback(blockedActionFingerprintFor(input))) return void 0;
     if (agentQuestionStrategy(ACTIVE_SOURCE, "PermissionRequest", input.tool_name) === AGENT_QUESTION_STRATEGY.native) return void 0;
     if (verdict.kind === "gate" && verdict.scopeReason && (canonical?.toolInputs.length ?? 0) > 1) return permReqDeny(SCOPE_BATCH_REASON);
     const handedOff = preToolUseHandsOff(input, gateInput, verdict);

package/dist/{chunk-D3XNQAQO.js → chunk-FRIQ4LQ5.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-RLBTKTOK.js";
+} from "./chunk-ARRXCME5.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -17,7 +17,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isAutoUpdateResult
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-KYWTX4R2.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-BMZFL3HF.js → chunk-FW2SOQ5J.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-OJGHJIFQ.js";
+} from "./chunk-MA4KQLCT.js";
 import {
   pusharyHookExecutable
-} from "./chunk-NK5XT4RS.js";
+} from "./chunk-7VPA5PXJ.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-RLBTKTOK.js";
+} from "./chunk-ARRXCME5.js";
 import {
   isRecord
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-KYWTX4R2.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-T2N7MEO3.js → chunk-G5EB7GAR.js}

@@ -1,6 +1,6 @@
 import {
   realpath
-} from "./chunk-FLRVTAV4.js";
+} from "./chunk-PHDPS5C7.js";
 import {
   findNativeClaudeInstall
 } from "./chunk-ROVLRXBI.js";
@@ -13,10 +13,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-RIBCPWOB.js";
+} from "./chunk-XU4DUX7K.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-KYWTX4R2.js";
 
 // src/live-capabilities.ts
 import { homedir } from "os";

package/dist/{chunk-T5GJK54S.js → chunk-GJNWZWMA.js}

@@ -13,16 +13,16 @@ import {
 } from "./chunk-G66WIAST.js";
 import {
   keyPrefix
-} from "./chunk-22OATDEL.js";
+} from "./chunk-YU3LDR5W.js";
 import {
   getBaseUrl
-} from "./chunk-GSJUGW3A.js";
+} from "./chunk-N4DQDFEP.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-JCHF4VR3.js";
+} from "./chunk-R5ZMI6BM.js";
 import {
   isValidApiKey
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-KYWTX4R2.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-5SUTYXCT.js → chunk-H5RGOO3B.js}

@@ -9,7 +9,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-KYWTX4R2.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-E3A77P52.js → chunk-IUPEFEBH.js}

@@ -1,19 +1,19 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-KB2EEK5T.js";
+} from "./chunk-MKTZZPWV.js";
 import {
   keyPrefix
-} from "./chunk-22OATDEL.js";
+} from "./chunk-YU3LDR5W.js";
 import {
   bridgeAgentKey
-} from "./chunk-RLBTKTOK.js";
+} from "./chunk-ARRXCME5.js";
 import {
   readJsonSafe
 } from "./chunk-T5I4PKOQ.js";
 import {
   isRecord,
   isValidApiKey
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-KYWTX4R2.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-MPG4HYQ6.js → chunk-J3PBLQUD.js}

@@ -2,16 +2,16 @@ import {
   NpmInstallError,
   NpmMissingError,
   NpmPermissionError
-} from "./chunk-RIBCPWOB.js";
+} from "./chunk-XU4DUX7K.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-JCHF4VR3.js";
+} from "./chunk-R5ZMI6BM.js";
 import {
   readSetupAgentFailures
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-KYWTX4R2.js";
 
 // src/setup/config-write.ts
 var AgentConfigWriteError = class extends Error {

package/dist/{chunk-CG5SK6NF.js → chunk-K54Y2QFA.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-KPCVIH52.js";
+} from "./chunk-KYWTX4R2.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";