pushary 1.9.116 → 1.9.118

package/dist/{chunk-4B6USDD3.js → chunk-R4BBSIUK.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-ZUVDQOU6.js";
+} from "./chunk-A23GIPWY.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   npmExitedOnPermissionDenied
-} from "./chunk-FU33PDFG.js";
+} from "./chunk-IKX4X4LJ.js";
 import {
   writeJsonAtomic
 } from "./chunk-T5I4PKOQ.js";

package/dist/{chunk-32R6ESWY.js → chunk-RMUKFMT3.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-H5TODUJ3.js";
+} from "./chunk-I7LP4DKM.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-4NCIAMPN.js → chunk-RPW7LX2L.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-OEXJ7AJO.js";
+} from "./chunk-CUQOWRYT.js";
 import {
   parseFlags
 } from "./chunk-YPY4YCIZ.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-YU2EUD7O.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-TWRDOVN4.js";
+} from "./chunk-CKR43BBJ.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-H5TODUJ3.js";
+} from "./chunk-I7LP4DKM.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-LQQWATPA.js → chunk-SAISSZZA.js}

@@ -4,19 +4,19 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "./chunk-TNQ5JFCV.js";
+} from "./chunk-A2TAWW5L.js";
 import {
   readControlMode
-} from "./chunk-S5B3LKOP.js";
+} from "./chunk-JBWEGNKE.js";
 import {
   pusharyDir
-} from "./chunk-ZUVDQOU6.js";
+} from "./chunk-A23GIPWY.js";
 import {
   resolveGlobalBinary
-} from "./chunk-FU33PDFG.js";
+} from "./chunk-IKX4X4LJ.js";
 import {
   getApiKey
-} from "./chunk-NGWG2CHI.js";
+} from "./chunk-KOEQIRDA.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -32,7 +32,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "./chunk-H5TODUJ3.js";
+} from "./chunk-I7LP4DKM.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-YDQ2KQOH.js → chunk-SMBFZFVN.js}

@@ -1,31 +1,31 @@
 import {
   MANAGED_CLAUDE_SETTINGS_BY_PLATFORM
-} from "./chunk-ZR7ODRKY.js";
+} from "./chunk-ZGYLMVNB.js";
 import {
   declinedAgentsFile,
   readDeclinedAgents
-} from "./chunk-LC2A3GBN.js";
+} from "./chunk-NJSCVQ6S.js";
 import {
   OPENCODE_HOOK_BINARY,
   openCodeConfigDir,
   openCodePluginArgv,
   openCodePluginFile
-} from "./chunk-GB5E3JHR.js";
+} from "./chunk-WZZHWX7Q.js";
 import {
   liveCursorGateCoverage
-} from "./chunk-DGZGCKDA.js";
+} from "./chunk-XSUNHOAP.js";
 import {
   compatibleConfigFile,
   compatibleHookEvents,
   grokHome,
   parseConfigDocument
-} from "./chunk-5LWC7PSM.js";
+} from "./chunk-OP2ZDOBR.js";
 import {
   DEFAULT_HOOKS_KEY_PATH,
   GEMINI_HOOK_BINARY,
   GEMINI_HOOK_EVENTS,
   hooksAt
-} from "./chunk-VAT53KQR.js";
+} from "./chunk-LWY2U7NZ.js";
 import {
   CODEX_EARLIER_APPROVAL_MATCHERS,
   CODEX_HOOK_BINARY,
@@ -53,7 +53,7 @@ import {
   parseHookArgv,
   parseHookCommand,
   supportedClaudeEvents
-} from "./chunk-ZUVDQOU6.js";
+} from "./chunk-A23GIPWY.js";
 import {
   readRegularJsonFile,
   readRegularTextFile
@@ -67,7 +67,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   isRecord,
   matcherMatchesEveryCall
-} from "./chunk-H5TODUJ3.js";
+} from "./chunk-I7LP4DKM.js";
 
 // src/hook-wiring.ts
 import { createHash } from "crypto";

package/dist/{chunk-EQZKJXHE.js → chunk-T5N42XDU.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   renderCommandHelp
-} from "./chunk-TWRDOVN4.js";
+} from "./chunk-CKR43BBJ.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";

package/dist/{chunk-6FMHWS6M.js → chunk-TOUMNM7M.js}

@@ -1,19 +1,19 @@
 import {
   APPROVAL_RULES_PATH,
   canChangeApprovalSettings
-} from "./chunk-7ELMLTD7.js";
+} from "./chunk-NPMVVR6I.js";
 import {
   callMcpTool
-} from "./chunk-3CYXPFGA.js";
+} from "./chunk-PZLNBKMS.js";
 import {
   absoluteUrl
-} from "./chunk-Z3WNBZG6.js";
+} from "./chunk-QQ24SUBD.js";
 import {
   getBaseUrl
-} from "./chunk-NGWG2CHI.js";
+} from "./chunk-KOEQIRDA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-TWRDOVN4.js";
+} from "./chunk-CKR43BBJ.js";
 import {
   AGENT_STOP_DEFAULT_SECONDS,
   APPROVAL_MODE_META,
@@ -21,7 +21,7 @@ import {
   classifyConfirmResponse,
   isAnswerSource,
   roundTripAsk
-} from "./chunk-H5TODUJ3.js";
+} from "./chunk-I7LP4DKM.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-3WEWYRLQ.js → chunk-TUQ6R6DD.js}

@@ -1,20 +1,20 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-GB5E3JHR.js";
+} from "./chunk-WZZHWX7Q.js";
 import {
   nativeClaudeInstallPath
 } from "./chunk-ROVLRXBI.js";
 import {
   grokHome
-} from "./chunk-5LWC7PSM.js";
+} from "./chunk-OP2ZDOBR.js";
 import {
   claudeConfigDir,
   clineDataDirectory,
   codexHomeFrom
-} from "./chunk-ZUVDQOU6.js";
+} from "./chunk-A23GIPWY.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-H5TODUJ3.js";
+} from "./chunk-I7LP4DKM.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-32MHL5HC.js → chunk-UJ6UCGY4.js}

@@ -13,16 +13,16 @@ import {
 } from "./chunk-G66WIAST.js";
 import {
   keyPrefix
-} from "./chunk-S5B3LKOP.js";
+} from "./chunk-JBWEGNKE.js";
 import {
   getBaseUrl
-} from "./chunk-NGWG2CHI.js";
+} from "./chunk-KOEQIRDA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-TWRDOVN4.js";
+} from "./chunk-CKR43BBJ.js";
 import {
   isValidApiKey
-} from "./chunk-H5TODUJ3.js";
+} from "./chunk-I7LP4DKM.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-R7BP6ZEW.js → chunk-UKCCVMI2.js}

@@ -7,7 +7,7 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-DMY2J2MY.js";
+} from "./chunk-XWVEAAZO.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-XUHDUD34.js → chunk-UNXVORET.js}

@@ -27,11 +27,11 @@ import {
   toolResultErrorText,
   transcriptTokensIn,
   transcriptUsageRequest
-} from "./chunk-27CV6IXW.js";
+} from "./chunk-GAYUSL24.js";
 import {
   branchFor,
   repoKeyFor
-} from "./chunk-SDMGCRO3.js";
+} from "./chunk-WELDACYF.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -39,34 +39,34 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-PBM565KU.js";
+} from "./chunk-YQVZQM53.js";
 import {
   withRetry
-} from "./chunk-3CYXPFGA.js";
+} from "./chunk-PZLNBKMS.js";
 import {
   fetchAsCredential
-} from "./chunk-JSTA2JTL.js";
+} from "./chunk-7K6DZPYV.js";
 import {
   getMachineId
-} from "./chunk-TNQ5JFCV.js";
+} from "./chunk-A2TAWW5L.js";
 import {
   reportedInstallSource
-} from "./chunk-WACBGAWA.js";
+} from "./chunk-46ZIEQGC.js";
 import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS,
   canonicalJson,
   claudeConfigDir
-} from "./chunk-ZUVDQOU6.js";
+} from "./chunk-A23GIPWY.js";
 import {
   compareVersion,
   parseVersion
-} from "./chunk-FU33PDFG.js";
+} from "./chunk-IKX4X4LJ.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-NGWG2CHI.js";
+} from "./chunk-KOEQIRDA.js";
 import {
   writeFileAtomic,
   writeJsonAtomicDurable
@@ -84,6 +84,7 @@ import {
   gateOutputFor,
   isAutoApprove,
   isClaudeWakePrompt,
+  isProvenModeResponse,
   isRecord,
   modeStateFromResponse,
   nativeRecord,
@@ -94,7 +95,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   unansweredRefusalReason
-} from "./chunk-H5TODUJ3.js";
+} from "./chunk-I7LP4DKM.js";
 
 // src/pending.ts
 import { join } from "path";
@@ -413,7 +414,7 @@ var getPolicy = async (apiKey, expectedVersion, agent, repoAware = false, sessio
       if (ttlFresh && !versionStale && !sessionStale) {
         return cached;
       }
-      if (!sessionStale && age < STALE_CACHE_MAX_MS) staleCache = cached;
+      if (!sessionStale && age < STALE_CACHE_MAX_MS) staleCache = versionStale ? { ...cached, knownSuperseded: true } : cached;
     } catch {
     }
   }
@@ -503,7 +504,12 @@ var fetchModeState = async (apiKey, sessionId, reuseWithinMs = 0, signal) => {
       void reportClientError({ kind: "http_status", code: `mode_http_${response.status}` });
       return degradedFallback(apiKey, response.status === 401 || response.status === 403);
     }
-    const state = modeStateFromResponse(await response.json());
+    const body = await response.json();
+    if (!isProvenModeResponse(body)) {
+      void reportClientError({ kind: "invalid_response", code: "mode_response_unproven" });
+      return degradedFallback(apiKey);
+    }
+    const state = modeStateFromResponse(body);
     writeLastGoodMode(apiKey, state, sessionId);
     return state;
   } catch (error) {
@@ -1369,6 +1375,7 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
       event: isError ? "tool_error" : "tool_complete",
       occurredAt,
       toolUseId: input.tool_use_id,
+      toolName: input.tool_name,
       agentType: agent.type,
       agentName: `${agent.label} - ${projectName}`,
       action,

package/dist/{chunk-4QJUMXZS.js → chunk-UXVCDVPL.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-H5TODUJ3.js";
+} from "./chunk-I7LP4DKM.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-PCRLVQW3.js → chunk-VIR7SCIQ.js}

@@ -4,13 +4,13 @@ import {
   configFailureKind,
   retryAgentCommand,
   writeSetupConfigFile
-} from "./chunk-4X6GTMU4.js";
+} from "./chunk-B6HPULOG.js";
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-KVZAFFEE.js";
+} from "./chunk-5FJPEDMZ.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-S5B3LKOP.js";
+} from "./chunk-JBWEGNKE.js";
 import {
   CLINE_SERVER_NAME_TAKEN,
   CLINE_SETTINGS_REFUSALS,
@@ -32,10 +32,10 @@ import {
   withClinePusharyServer,
   withRefreshedClineKey,
   withoutClinePusharyServer
-} from "./chunk-ZUVDQOU6.js";
+} from "./chunk-A23GIPWY.js";
 import {
   resolveGlobalBinary
-} from "./chunk-FU33PDFG.js";
+} from "./chunk-IKX4X4LJ.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/chunk-WCSPOQ5W.js

@@ -0,0 +1,121 @@
+import {
+  UNNAMED_ACTION
+} from "./chunk-GAYUSL24.js";
+import {
+  askUser,
+  isAwayPaused,
+  isLocalQuestionHandoff,
+  unavailableQuestionUnlessRefused,
+  waitForQuestion
+} from "./chunk-YQVZQM53.js";
+import {
+  getMachineId
+} from "./chunk-A2TAWW5L.js";
+import {
+  hookWaitClamped,
+  hookWaitDeadline,
+  scopeBreachReasonOf
+} from "./chunk-I7LP4DKM.js";
+
+// src/pushed-question.ts
+var scopeQuestionOf = (verdict) => {
+  const reason = scopeBreachReasonOf(verdict);
+  return reason !== void 0 && verdict.kind === "gate" ? { reason, path: verdict.scopePath } : void 0;
+};
+var pushQuestionAndWait = async (apiKey, question, wait) => {
+  const creating = askUser(apiKey, {
+    question: `Allow ${question.description || UNNAMED_ACTION}?`,
+    type: "confirm",
+    context: `Agent wants to run this in ${question.projectName}`,
+    agentName: question.agentName,
+    sessionId: question.sessionId,
+    machineId: getMachineId(),
+    toolName: question.toolName,
+    toolTarget: question.toolTarget,
+    ...question.decision
+  });
+  const created = await (wait.askFailure === "wait_as_unavailable" ? creating.catch(unavailableQuestionUnlessRefused) : creating);
+  wait.onQuestionCreated?.(created.correlationId);
+  const now = Date.now();
+  const deadline = hookWaitDeadline(wait.startMs, wait.waitSeconds, wait.agent, now);
+  const clampCut = hookWaitClamped(wait.startMs, wait.waitSeconds, wait.agent, now);
+  const answer = await waitForQuestion(apiKey, created, deadline, wait.pollIntervalMs);
+  return {
+    answer,
+    localHandoff: !answer.answered && isLocalQuestionHandoff(created),
+    clampCut,
+    paused: isAwayPaused(created),
+    askStatus: created.status,
+    noDevices: created.noDevices === true
+  };
+};
+
+// src/agent-hook-input.ts
+var CODEX_TEXT_FIELDS = [
+  "hook_event_name",
+  "session_id",
+  "turn_id",
+  "transcript_path",
+  "cwd",
+  "tool_name",
+  "tool_use_id",
+  "prompt",
+  "source",
+  "reason",
+  "permission_mode",
+  "trigger",
+  "agent_id",
+  "agent_type",
+  "last_assistant_message"
+];
+var GEMINI_TEXT_FIELDS = [
+  "hook_event_name",
+  "session_id",
+  "cwd",
+  "transcript_path",
+  "tool_name",
+  "prompt",
+  "prompt_response",
+  "reason"
+];
+var OPENCODE_TEXT_FIELDS = [
+  "hook_event_name",
+  "session_id",
+  "cwd",
+  "tool_name",
+  "prompt",
+  "permission_id",
+  "permission_type",
+  "title"
+];
+var MCP_CONTEXT_TEXT_FIELDS = ["server_name", "tool_name"];
+var isInputRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var withoutNullFields = (record) => Object.fromEntries(Object.entries(record).filter(([, value]) => value !== null));
+var FIELDS_THE_GATE_DECIDES_FROM = ["hook_event_name", "tool_name", "session_id", "cwd"];
+var withoutUnreadableLabels = (record, textFields) => Object.fromEntries(Object.entries(record).filter(([field, value]) => FIELDS_THE_GATE_DECIDES_FROM.includes(field) || !textFields.includes(field) || typeof value === "string"));
+var isTextWhereSent = (record, fields) => fields.every((field) => record[field] === void 0 || typeof record[field] === "string");
+var isRecordWhereSent = (value) => value === void 0 || isInputRecord(value);
+var withReadableMcpContext = ({ mcp_context: context, ...record }) => {
+  if (!isInputRecord(context)) return record;
+  const present = withoutNullFields(context);
+  return isTextWhereSent(present, MCP_CONTEXT_TEXT_FIELDS) ? { ...record, mcp_context: present } : record;
+};
+var isCodexHookInput = (value) => isTextWhereSent(value, CODEX_TEXT_FIELDS) && isRecordWhereSent(value.tool_input);
+var isGeminiHookInput = (value) => isTextWhereSent(value, GEMINI_TEXT_FIELDS) && isRecordWhereSent(value.tool_input);
+var isOpenCodeHookInput = (value) => isTextWhereSent(value, OPENCODE_TEXT_FIELDS) && isRecordWhereSent(value.tool_input);
+var hookInputParser = (textFields, isHookInput, withReadableParts = (record) => record) => (value) => {
+  if (!isInputRecord(value)) return null;
+  const readable = withReadableParts(withoutUnreadableLabels(withoutNullFields(value), textFields));
+  return isHookInput(readable) ? readable : null;
+};
+var parseCodexHookInput = hookInputParser(CODEX_TEXT_FIELDS, isCodexHookInput);
+var parseGeminiHookInput = hookInputParser(GEMINI_TEXT_FIELDS, isGeminiHookInput, withReadableMcpContext);
+var parseOpenCodeHookInput = hookInputParser(OPENCODE_TEXT_FIELDS, isOpenCodeHookInput);
+
+export {
+  scopeQuestionOf,
+  pushQuestionAndWait,
+  parseCodexHookInput,
+  parseGeminiHookInput,
+  parseOpenCodeHookInput
+};

package/dist/{chunk-SDMGCRO3.js → chunk-WELDACYF.js}

@@ -2,7 +2,7 @@ import {
   localRepoKey,
   normalizeRepoRemote,
   parseGitBranch
-} from "./chunk-H5TODUJ3.js";
+} from "./chunk-I7LP4DKM.js";
 
 // src/repo.ts
 import { existsSync, readFileSync, statSync } from "fs";

package/dist/{chunk-BWSAVEMV.js → chunk-WLXXEFHA.js}

@@ -1,31 +1,33 @@
 import {
   claudeSettingsLocationFor,
   readClaudePermissionRules
-} from "./chunk-ZR7ODRKY.js";
+} from "./chunk-ZGYLMVNB.js";
 import {
   askAgentQuestions,
   defersToNativeMode,
   outcomeOfFailedAsk,
-  reportMachineDenial,
   storedWaitDeadline
-} from "./chunk-PPEN3N44.js";
+} from "./chunk-BQVB563P.js";
+import {
+  reportMachineDenial
+} from "./chunk-5UIRDDJN.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-4QJUMXZS.js";
+} from "./chunk-UXVCDVPL.js";
 import {
   isAdmitted,
   readAdmissionRules
-} from "./chunk-KK7JA5JP.js";
+} from "./chunk-H7B6LLP4.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-CJL7IMWO.js";
+} from "./chunk-MG5WFAND.js";
 import {
   activeHookSource,
   activeIdentity,
   namedSource
-} from "./chunk-5LWC7PSM.js";
+} from "./chunk-OP2ZDOBR.js";
 import {
   DEFAULT_SESSION,
   approvalAwaitingRetry,
@@ -44,7 +46,7 @@ import {
   settleQuestionsForToolUse,
   sweepFilesOlderThan,
   userScope
-} from "./chunk-XUHDUD34.js";
+} from "./chunk-UNXVORET.js";
 import {
   UNNAMED_ACTION,
   deriveAction,
@@ -55,12 +57,12 @@ import {
   patchDeletesFiles,
   permissionDeniedAction,
   scopePathFor
-} from "./chunk-27CV6IXW.js";
+} from "./chunk-GAYUSL24.js";
 import {
   branchFor,
   repoKeyFor,
   repositoryScopeFor
-} from "./chunk-SDMGCRO3.js";
+} from "./chunk-WELDACYF.js";
 import {
   askUser,
   cancelQuestion,
@@ -77,20 +79,20 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-PBM565KU.js";
+} from "./chunk-YQVZQM53.js";
 import {
   getMachineId
-} from "./chunk-TNQ5JFCV.js";
+} from "./chunk-A2TAWW5L.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-NGWG2CHI.js";
+} from "./chunk-KOEQIRDA.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-TWRDOVN4.js";
+} from "./chunk-CKR43BBJ.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -131,6 +133,7 @@ import {
   hasNativeApprovalPrompt,
   hookCompatibleProfileBySource,
   hookHoldWindowMs,
+  hookMaxWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline,
   hookWritePath,
@@ -152,8 +155,9 @@ import {
   terminalLiveWait,
   terminalStaysLiveForTheCall,
   timeoutActionWithoutLocalPrompt,
-  unansweredRefusalReason
-} from "./chunk-H5TODUJ3.js";
+  unansweredRefusalReason,
+  unapprovedScopeReason
+} from "./chunk-I7LP4DKM.js";
 
 // src/terminal-answer-watch.ts
 import { closeSync, openSync, readSync, statSync } from "fs";
@@ -551,6 +555,9 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
   const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
   const ownPrompt = hasItsOwnApprovalPrompt(ACTIVE_SOURCE);
   const agentPromptFollows = ownPrompt && !isCursorHookPayload(input);
+  const scopeQuestionHasNoPrompt = scopeReason !== void 0 && !agentPromptFollows;
+  const deliveredWithoutAPrompt = !ownPrompt || scopeQuestionHasNoPrompt;
+  const scopeQuestionFromCursor = scopeReason !== void 0 && isCursorHookPayload(input);
   const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
   const decision = {
     toolPath: hookWritePath(input.tool_name, input.tool_input),
@@ -568,7 +575,7 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
     // creates a fresh decision exactly as before.
     toolUseId: input.tool_use_id,
     sessionToolAware: true,
-    ...ownPrompt ? {} : { localSurfaceAvailable: false },
+    ...deliveredWithoutAPrompt ? { localSurfaceAvailable: false } : {},
     permissionMode: input.permission_mode
   };
   const signals = {};
@@ -587,29 +594,32 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
     announceWait
   };
   const runHandler = () => {
-    const mode = ownPrompt ? toolPolicy.mode : approvalModeWithoutLocalPrompt(toolPolicy.mode);
+    const mode = deliveredWithoutAPrompt ? approvalModeWithoutLocalPrompt(toolPolicy.mode) : toolPolicy.mode;
     if (terminalLive && pushesToThePhone(mode)) {
       return handleTerminalLive(apiKey, input, description, projectName, { ...toolPolicy, mode }, terminalLive.holdBudgetSeconds, machineId, toolTarget, decision, signals);
     }
     switch (mode) {
       case "push_only":
-        return handlePushOnly(apiKey, permissionAsk, toolPolicy.timeoutSeconds, ownPrompt ? toolPolicy.timeoutAction : timeoutActionWithoutLocalPrompt(toolPolicy), signals);
+        return scopeQuestionFromCursor ? handlePushOnly(apiKey, permissionAsk, cursorScopeWaitSeconds(toolPolicy), CURSOR_SCOPE_TIMEOUT_ACTION, signals) : handlePushOnly(apiKey, permissionAsk, toolPolicy.timeoutSeconds, deliveredWithoutAPrompt ? timeoutActionWithoutLocalPrompt(toolPolicy) : toolPolicy.timeoutAction, signals);
       case "terminal_only":
         return Promise.resolve(handleTerminalOnly());
       case "push_first":
         return handlePushFirst(apiKey, permissionAsk, toolPolicy.pushFirstSeconds, signals);
       case "notify_only":
-        return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
+        return scopeQuestionHasNoPrompt ? Promise.resolve(deny(unapprovedScopeReason(scopeReason))) : handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
       default:
         return handlePushFirst(apiKey, permissionAsk, toolPolicy.pushFirstSeconds, signals);
     }
   };
-  const result = await runHandler();
+  const handled = await runHandler();
+  const result = scopeQuestionHasNoPrompt && handled?.hookSpecificOutput?.permissionDecision === "ask" ? deny(unapprovedScopeReason(scopeReason)) : handled;
   if (trainingConsent && signals.humanDecision) {
     emitDecisionEpisode(apiKey, input, toolPolicy, machineId, toolTarget, decision, result);
   }
   return result;
 };
+var CURSOR_SCOPE_TIMEOUT_ACTION = "escalate";
+var cursorScopeWaitSeconds = ({ timeoutSeconds, timeoutAction }) => Math.min(effectiveWaitSeconds(timeoutAction, timeoutSeconds, "cursor"), hookMaxWaitSeconds("cursor"));
 var hasItsOwnApprovalPrompt = (source) => source === null || hasNativeApprovalPrompt(source, "PreToolUse");
 var phoneWaitHandoff = (source, waitSeconds) => {
   if (waitSeconds <= 0) return "Waiting for your answer.";