pushary 1.9.118 → 1.9.120

package/dist/{chunk-D3PHTY54.js → chunk-5KCUQ3B7.js}

@@ -531,8 +531,8 @@ var loadedOnce = (load) => {
 };
 
 // src/codex-desktop-proxy.ts
-var loadThePhone = () => import("./api-Q2HBBRLT.js");
-var loadTheCardRouting = () => import("./codex-card-routing-7B77ISR2.js");
+var loadThePhone = () => import("./api-QFUMNTEQ.js");
+var loadTheCardRouting = () => import("./codex-card-routing-IKNAEEMC.js");
 var theFirstCardLoadsAgain = () => {
 };
 var ASKS_WITHOUT_ROUTING = {};
@@ -1085,7 +1085,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-45UK7FRY.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-545ISCGQ.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");

package/dist/{chunk-VIR7SCIQ.js → chunk-5NHWNILG.js}

@@ -4,13 +4,13 @@ import {
   configFailureKind,
   retryAgentCommand,
   writeSetupConfigFile
-} from "./chunk-B6HPULOG.js";
+} from "./chunk-EDNCFLR7.js";
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-5FJPEDMZ.js";
+} from "./chunk-NXWQZBOK.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-JBWEGNKE.js";
+} from "./chunk-CPBS6LS3.js";
 import {
   CLINE_SERVER_NAME_TAKEN,
   CLINE_SETTINGS_REFUSALS,
@@ -32,10 +32,10 @@ import {
   withClinePusharyServer,
   withRefreshedClineKey,
   withoutClinePusharyServer
-} from "./chunk-A23GIPWY.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   resolveGlobalBinary
-} from "./chunk-IKX4X4LJ.js";
+} from "./chunk-ODXZPMKN.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-H6YES2DS.js → chunk-6CJ7D6EQ.js}

@@ -1,12 +1,12 @@
 import {
   readMacAppAgentKey
-} from "./chunk-F5C6XZZ7.js";
+} from "./chunk-PTONPJWL.js";
 import {
   API_KEYS_PATH
-} from "./chunk-NPMVVR6I.js";
+} from "./chunk-KESS6HAK.js";
 import {
   absoluteUrl
-} from "./chunk-QQ24SUBD.js";
+} from "./chunk-ZV7G73KH.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -16,10 +16,10 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-JBWEGNKE.js";
+} from "./chunk-CPBS6LS3.js";
 import {
   isValidApiKey
-} from "./chunk-I7LP4DKM.js";
+} from "./chunk-W744DTUT.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";

package/dist/{chunk-A2TAWW5L.js → chunk-6FR5ZYMS.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-A23GIPWY.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";

package/dist/{chunk-CKR43BBJ.js → chunk-7VRL6XYM.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-I7LP4DKM.js";
+} from "./chunk-W744DTUT.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {

package/dist/{chunk-CVIJBTGE.js → chunk-7YRKM4AB.js}

@@ -3,10 +3,10 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-R4BBSIUK.js";
+} from "./chunk-J6ACLE2A.js";
 import {
   phoneStartIsRequired
-} from "./chunk-6UN3AUIS.js";
+} from "./chunk-W4MZBZU3.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -18,25 +18,25 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-QO6SWGLH.js";
+} from "./chunk-XUAGV5VH.js";
 import {
   autoUpdateLock,
   autoUpdateLog,
   autoUpdateState
-} from "./chunk-A23GIPWY.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   execNpm,
   fetchLatestPublishedVersion,
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-IKX4X4LJ.js";
+} from "./chunk-ODXZPMKN.js";
 import {
   EXIT
 } from "./chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-CKR43BBJ.js";
+} from "./chunk-7VRL6XYM.js";
 import {
   commandsPackage,
   globalUpgradeEntry,

package/dist/{chunk-K5H4YAMZ.js → chunk-A5YOWKPR.js}

@@ -7,13 +7,13 @@ import {
 } from "./chunk-G66WIAST.js";
 import {
   ensureDaemonRunning
-} from "./chunk-SAISSZZA.js";
+} from "./chunk-WFHUECGB.js";
 import {
   hookOwnerOf
-} from "./chunk-LWY2U7NZ.js";
+} from "./chunk-3GFJ7CXQ.js";
 import {
   hookMeaning
-} from "./chunk-GAYUSL24.js";
+} from "./chunk-HVGN7TRN.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
@@ -24,29 +24,29 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-XWVEAAZO.js";
+} from "./chunk-4DSJF5JD.js";
 import {
   external_exports
 } from "./chunk-XMSDA5WA.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-EJYLQNMC.js";
+} from "./chunk-XSSG5JLJ.js";
 import {
   fetchAsCredential
-} from "./chunk-7K6DZPYV.js";
+} from "./chunk-47HCNA5U.js";
 import {
   readTranscriptPreference
-} from "./chunk-JBWEGNKE.js";
+} from "./chunk-CPBS6LS3.js";
 import {
   claudeConfigDir,
   codexHome,
   pusharyDir
-} from "./chunk-A23GIPWY.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-KOEQIRDA.js";
+} from "./chunk-MZX35RFX.js";
 import {
   writeJsonAtomic,
   writeJsonAtomicDurable
@@ -58,7 +58,7 @@ import {
   isHookSource,
   isRecord,
   redactSecretsFromContent
-} from "./chunk-I7LP4DKM.js";
+} from "./chunk-W744DTUT.js";
 
 // src/transcript-recipient-pin.ts
 import { createHash } from "crypto";

package/dist/{chunk-TOUMNM7M.js → chunk-AIABYHHZ.js}

@@ -1,19 +1,19 @@
 import {
   APPROVAL_RULES_PATH,
   canChangeApprovalSettings
-} from "./chunk-NPMVVR6I.js";
+} from "./chunk-KESS6HAK.js";
 import {
   callMcpTool
-} from "./chunk-PZLNBKMS.js";
+} from "./chunk-UZL3VQCE.js";
 import {
   absoluteUrl
-} from "./chunk-QQ24SUBD.js";
+} from "./chunk-ZV7G73KH.js";
 import {
   getBaseUrl
-} from "./chunk-KOEQIRDA.js";
+} from "./chunk-MZX35RFX.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-CKR43BBJ.js";
+} from "./chunk-7VRL6XYM.js";
 import {
   AGENT_STOP_DEFAULT_SECONDS,
   APPROVAL_MODE_META,
@@ -21,7 +21,7 @@ import {
   classifyConfirmResponse,
   isAnswerSource,
   roundTripAsk
-} from "./chunk-I7LP4DKM.js";
+} from "./chunk-W744DTUT.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-46ZIEQGC.js → chunk-B4M2XZNQ.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-KOEQIRDA.js";
+} from "./chunk-MZX35RFX.js";
 import {
   normalizeInstallSource
-} from "./chunk-I7LP4DKM.js";
+} from "./chunk-W744DTUT.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-UKCCVMI2.js → chunk-BYP2R2PF.js}

@@ -7,7 +7,7 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-XWVEAAZO.js";
+} from "./chunk-4DSJF5JD.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-WLXXEFHA.js → chunk-BZ6N5DDZ.js}

@@ -1,41 +1,43 @@
 import {
   claudeSettingsLocationFor,
   readClaudePermissionRules
-} from "./chunk-ZGYLMVNB.js";
+} from "./chunk-ZR35L635.js";
 import {
   askAgentQuestions,
   defersToNativeMode,
   outcomeOfFailedAsk,
   storedWaitDeadline
-} from "./chunk-BQVB563P.js";
+} from "./chunk-3DD44QTA.js";
 import {
   reportMachineDenial
-} from "./chunk-5UIRDDJN.js";
+} from "./chunk-PEMESJZY.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-UXVCDVPL.js";
+} from "./chunk-SSTO42XS.js";
 import {
   isAdmitted,
   readAdmissionRules
-} from "./chunk-H7B6LLP4.js";
+} from "./chunk-VKRRUT45.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-MG5WFAND.js";
+} from "./chunk-K4RIBZ32.js";
 import {
   activeHookSource,
   activeIdentity,
   namedSource
-} from "./chunk-OP2ZDOBR.js";
+} from "./chunk-HHZSB6KL.js";
 import {
   DEFAULT_SESSION,
   approvalAwaitingRetry,
   blockedActionFingerprint,
   claimThrottle,
+  fetchLiveModeState,
   fetchModeState,
   forgetBlockedActionHint,
   getPolicy,
+  getPolicyForStandingDenies,
   hasBlockedActionHint,
   markApprovalReminded,
   readCachedPolicy,
@@ -46,7 +48,7 @@ import {
   settleQuestionsForToolUse,
   sweepFilesOlderThan,
   userScope
-} from "./chunk-UNXVORET.js";
+} from "./chunk-XOPOX5QY.js";
 import {
   UNNAMED_ACTION,
   deriveAction,
@@ -57,12 +59,12 @@ import {
   patchDeletesFiles,
   permissionDeniedAction,
   scopePathFor
-} from "./chunk-GAYUSL24.js";
+} from "./chunk-HVGN7TRN.js";
 import {
   branchFor,
   repoKeyFor,
   repositoryScopeFor
-} from "./chunk-WELDACYF.js";
+} from "./chunk-363YZ5WJ.js";
 import {
   askUser,
   cancelQuestion,
@@ -79,27 +81,29 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-YQVZQM53.js";
+} from "./chunk-KG7UZSCD.js";
 import {
   getMachineId
-} from "./chunk-A2TAWW5L.js";
+} from "./chunk-6FR5ZYMS.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-KOEQIRDA.js";
+} from "./chunk-MZX35RFX.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-CKR43BBJ.js";
+} from "./chunk-7VRL6XYM.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
+  CLAUDE_REFUSALS_ONLY_TOOLS,
   DECISION_STOP_REASON,
   GATE_BLOCK_REASON_MAX_LENGTH,
   GATE_WIRE,
   HANDED_BACK_REASON,
+  KILL_REASON,
   MCP_TOOL_PREFIX,
   PLAN_DECLINED_REASON,
   PRETOOLUSE_HANDLED_TOOLS,
@@ -111,6 +115,7 @@ import {
   TERMINAL_AND_PHONE_REASON,
   UNREADABLE_CALL_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
+  WILDCARD_TOOL_PATTERN,
   WITHDRAWN_APPROVAL_REASON,
   agentQuestionStrategy,
   agentRulesAllowEveryInput,
@@ -127,6 +132,7 @@ import {
   claudePromptTakesTheCall,
   claudeStoppedPermissionRequestOutput,
   claudeStoppedPreToolUseOutput,
+  claudeSubagentToolAliasOf,
   denyReasonFrom,
   editGoesToTheAgentsPrompt,
   effectiveWaitSeconds,
@@ -140,6 +146,7 @@ import {
   isBlockedActionRequest,
   isCursorHookPayload,
   isPermissionRequestOwnedByPreToolUse,
+  isPusharyConnectorTool,
   isPusharyOwnTool,
   isRecord,
   matchedRouteOf,
@@ -157,7 +164,7 @@ import {
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason,
   unapprovedScopeReason
-} from "./chunk-I7LP4DKM.js";
+} from "./chunk-W744DTUT.js";
 
 // src/terminal-answer-watch.ts
 import { closeSync, openSync, readSync, statSync } from "fs";
@@ -829,9 +836,46 @@ var rememberHandbackToThePrompt = (input, heldForMcpRoute, result) => {
   if (heldForMcpRoute && result?.hookSpecificOutput?.permissionDecision === "ask") recordMcpHoldHandback(blockedActionFingerprintFor(input));
   return result;
 };
+var isRefusalsOnlyCallInClaudeCode = (input) => isMcpCallInClaudeCode(input) || ACTIVE_SOURCE === "claude" && CLAUDE_REFUSALS_ONLY_TOOLS.includes(input.tool_name);
+var STANDING_REFUSAL_NETWORK_BUDGET_MS = 800;
+var standingDenyOfTheSubagentAlias = (gateInputFor, toolName) => {
+  const alias = claudeSubagentToolAliasOf(toolName);
+  if (alias === void 0) return void 0;
+  const verdict = resolveGate(gateInputFor(alias));
+  return verdict.kind === "deny" && verdict.policy.tool !== WILDCARD_TOOL_PATTERN ? verdict : void 0;
+};
+var standingRefusalOf = async (input) => {
+  let apiKey;
+  try {
+    apiKey = getApiKey();
+  } catch {
+    return void 0;
+  }
+  try {
+    const networkBudget = AbortSignal.timeout(STANDING_REFUSAL_NETWORK_BUDGET_MS);
+    const { state: modeState, answeredLive } = await fetchLiveModeState(apiKey, input.session_id, networkBudget);
+    if (modeState.kill) {
+      await reportMachineDenial(input, { kind: "kill", reason: KILL_REASON }, ACTIVE_AGENT);
+      return halted(KILL_REASON);
+    }
+    const policy = answeredLive ? await getPolicyForStandingDenies(apiKey, modeState.policyVersion, ACTIVE_AGENT.type, true, input.session_id, networkBudget) : readCachedPolicy(apiKey, ACTIVE_AGENT.type, true);
+    if (policy === null) return void 0;
+    const gateInputFor = (toolName) => claudeGateInput(modeState, policy, { ...input, tool_name: toolName });
+    const asCalled = resolveGate(gateInputFor(input.tool_name));
+    const denied = asCalled.kind === "deny" ? asCalled : standingDenyOfTheSubagentAlias(gateInputFor, input.tool_name);
+    if (denied === void 0) return void 0;
+    await reportMachineDenial(input, denied, ACTIVE_AGENT);
+    return deny(denied.reason);
+  } catch (error) {
+    await reportHookFailure("pre_tool_use_failed", error);
+    return void 0;
+  }
+};
 var handlePreToolUse = async (input, canonical) => {
   if (isPusharyOwnTool(input.tool_name)) return void 0;
-  if (isMcpCallInClaudeCode(input) && !mcpCallWaitsForSomeoneElse(input)) return void 0;
+  if (isRefusalsOnlyCallInClaudeCode(input) && !mcpCallWaitsForSomeoneElse(input)) {
+    return isPusharyConnectorTool(input.tool_name) ? void 0 : standingRefusalOf(input);
+  }
   let apiKey;
   try {
     apiKey = getApiKey();

package/dist/{chunk-JBWEGNKE.js → chunk-CPBS6LS3.js}

@@ -1,9 +1,9 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-46ZIEQGC.js";
+} from "./chunk-B4M2XZNQ.js";
 import {
   configFilePath
-} from "./chunk-KOEQIRDA.js";
+} from "./chunk-MZX35RFX.js";
 import {
   backupFile,
   readJsonSafe,
@@ -14,7 +14,7 @@ import {
   API_KEY_PREFIX_PATTERN,
   isRecord,
   isValidApiKey
-} from "./chunk-I7LP4DKM.js";
+} from "./chunk-W744DTUT.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-B6HPULOG.js → chunk-EDNCFLR7.js}

@@ -2,16 +2,16 @@ import {
   NpmInstallError,
   NpmMissingError,
   NpmPermissionError
-} from "./chunk-IKX4X4LJ.js";
+} from "./chunk-ODXZPMKN.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-CKR43BBJ.js";
+} from "./chunk-7VRL6XYM.js";
 import {
   readSetupAgentFailures
-} from "./chunk-I7LP4DKM.js";
+} from "./chunk-W744DTUT.js";
 
 // src/setup/config-write.ts
 var AgentConfigWriteError = class extends Error {

package/dist/{chunk-7YQPI4UE.js → chunk-EG2E2562.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-A23GIPWY.js";
+} from "./chunk-ZRTUS6WD.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-NJSCVQ6S.js → chunk-EU4NV7SS.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-A23GIPWY.js";
+} from "./chunk-ZRTUS6WD.js";
 import {
   readRegularJsonFile,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-I7LP4DKM.js";
+} from "./chunk-W744DTUT.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-WCSPOQ5W.js → chunk-F24QURGP.js}

@@ -1,21 +1,21 @@
 import {
   UNNAMED_ACTION
-} from "./chunk-GAYUSL24.js";
+} from "./chunk-HVGN7TRN.js";
 import {
   askUser,
   isAwayPaused,
   isLocalQuestionHandoff,
   unavailableQuestionUnlessRefused,
   waitForQuestion
-} from "./chunk-YQVZQM53.js";
+} from "./chunk-KG7UZSCD.js";
 import {
   getMachineId
-} from "./chunk-A2TAWW5L.js";
+} from "./chunk-6FR5ZYMS.js";
 import {
   hookWaitClamped,
   hookWaitDeadline,
   scopeBreachReasonOf
-} from "./chunk-I7LP4DKM.js";
+} from "./chunk-W744DTUT.js";
 
 // src/pushed-question.ts
 var scopeQuestionOf = (verdict) => {

package/dist/{chunk-FLBMCN45.js → chunk-H4LCCX7W.js}

@@ -4,7 +4,7 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "./chunk-UKCCVMI2.js";
+} from "./chunk-BYP2R2PF.js";
 import {
   CommandReceipts,
   controllerCommandSchema
@@ -14,21 +14,21 @@ import {
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership
-} from "./chunk-QASBFNVD.js";
+} from "./chunk-HSFTTGOB.js";
 import {
   repositoryScopeFor
-} from "./chunk-WELDACYF.js";
+} from "./chunk-363YZ5WJ.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "./chunk-YQVZQM53.js";
+} from "./chunk-KG7UZSCD.js";
 import {
   callMcpTool,
   isRetryable
-} from "./chunk-PZLNBKMS.js";
+} from "./chunk-UZL3VQCE.js";
 import {
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
@@ -52,7 +52,7 @@ import {
   parseCodexQuestions,
   planElicitationAsk,
   readElicitationFields
-} from "./chunk-I7LP4DKM.js";
+} from "./chunk-W744DTUT.js";
 
 // src/codex-question-owner.ts
 import { createHash } from "crypto";