pushary 1.9.134 → 1.9.136

package/dist/{chunk-SZYKS433.js → chunk-MQMVJDII.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {

package/dist/{chunk-75FJZR2M.js → chunk-N3VCBXI6.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-XHC3UNOK.js";
+} from "./chunk-5XDFQ6E3.js";
 import {
   parseFlags
 } from "./chunk-YPY4YCIZ.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-YU2EUD7O.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-SZYKS433.js";
+} from "./chunk-MQMVJDII.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-EPPH5RMJ.js → chunk-NN43KGTN.js}

@@ -1,17 +1,17 @@
 import {
   pusharyHookExecutable
-} from "./chunk-237FYIVC.js";
+} from "./chunk-TLK5YLIE.js";
 import {
   bridgeResolvesToApp,
   cursorUserHooks,
   executableFileName,
   isBridgeLocator,
   liveBridgeProbe
-} from "./chunk-W4FJR57E.js";
+} from "./chunk-R7KC57PC.js";
 import {
   atLeast,
   parseVersion
-} from "./chunk-A44MRVWG.js";
+} from "./chunk-GS5FH3C2.js";
 import {
   CURSOR_GATE_COVERAGE,
   CURSOR_GATE_SCRIPT,
@@ -21,7 +21,7 @@ import {
   isCursorHookPayload,
   isRecord,
   toolsCoveredByGateEntry
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/cursor-gate-registration.ts
 import { dirname, isAbsolute, join, resolve } from "path";

package/dist/{chunk-PFHRW3LR.js → chunk-NZD6ISCL.js}

@@ -1,12 +1,12 @@
 import {
   parseSseMessages
-} from "./chunk-2KN53MPE.js";
+} from "./chunk-WXUEOHYY.js";
 import {
   fetchAsCredential
-} from "./chunk-42PVKPHM.js";
+} from "./chunk-VVN3RPV6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-SZYKS433.js";
+} from "./chunk-MQMVJDII.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-QVIDOVT6.js → chunk-O5T53LZ5.js}

@@ -1,33 +1,38 @@
+import {
+  forgetPhoneApproval,
+  rememberPhoneApproval,
+  takePhoneApproval
+} from "./chunk-UP5QXEUU.js";
 import {
   claudeSettingsLocationFor,
   readClaudePermissionRules
-} from "./chunk-FT5MTCKU.js";
+} from "./chunk-G73ACPR2.js";
 import {
   askAgentQuestions,
   defersToNativeMode,
   outcomeOfFailedAsk,
   storedWaitDeadline
-} from "./chunk-XWUPOTJV.js";
+} from "./chunk-2R4OVJHS.js";
 import {
   reportMachineDenial
-} from "./chunk-HW63OEVM.js";
+} from "./chunk-HY4ATVCT.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-2U4MCUVZ.js";
+} from "./chunk-YQQGIDBC.js";
 import {
   isAdmitted,
   readAdmissionRules
-} from "./chunk-UDAXXR43.js";
+} from "./chunk-YURIU333.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-EA5EASYT.js";
+} from "./chunk-H2RE3IPK.js";
 import {
   activeHookSource,
   activeIdentity,
   namedSource
-} from "./chunk-RZBV5KTF.js";
+} from "./chunk-43DT3QWZ.js";
 import {
   DEFAULT_SESSION,
   approvalAwaitingRetry,
@@ -48,7 +53,7 @@ import {
   settleQuestionsForToolUse,
   sweepFilesOlderThan,
   userScope
-} from "./chunk-MRHGK3Q3.js";
+} from "./chunk-D7AAAD6W.js";
 import {
   UNNAMED_ACTION,
   deriveAction,
@@ -59,12 +64,12 @@ import {
   patchDeletesFiles,
   permissionDeniedAction,
   scopePathFor
-} from "./chunk-JYCAAQUW.js";
+} from "./chunk-A2YJ2FBR.js";
 import {
   branchFor,
   repoKeyFor,
   repositoryScopeFor
-} from "./chunk-RGVQOOGD.js";
+} from "./chunk-IRIXOH4U.js";
 import {
   askUser,
   cancelQuestion,
@@ -81,20 +86,20 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-J4UNR655.js";
+} from "./chunk-L2GADKFL.js";
 import {
   getMachineId
-} from "./chunk-DS7XMYUB.js";
+} from "./chunk-WNT4JHK3.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-T6HX6OTY.js";
+} from "./chunk-IKBTG3OT.js";
 import {
   writeFileAtomic
 } from "./chunk-TODDEIYG.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-SZYKS433.js";
+} from "./chunk-MQMVJDII.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -163,7 +168,7 @@ import {
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason,
   unapprovedScopeReason
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/terminal-answer-watch.ts
 import { closeSync, openSync, readSync, statSync } from "fs";
@@ -448,7 +453,9 @@ var ACTIVE_AGENT = activeIdentity(process.argv);
 var ACTIVE_SOURCE = activeHookSource(process.argv);
 var HANDED_DOWN_BY_THE_MAC_BRIDGE = namedSource(process.argv) !== void 0;
 var CLAUDE_SESSION_ATTENDED_ENV = "CLAUDE_CODE_SESSION_ATTENDED";
-var PUSHARY_IS_SOLE_GATE = ACTIVE_SOURCE !== null && hookCompatibleProfileBySource(ACTIVE_SOURCE)?.soleGate != null;
+var ACTIVE_PROFILE = ACTIVE_SOURCE === null ? void 0 : hookCompatibleProfileBySource(ACTIVE_SOURCE);
+var PUSHARY_IS_SOLE_GATE = ACTIVE_PROFILE?.soleGate != null;
+var PHONE_APPROVAL_SOURCE = ACTIVE_PROFILE?.promptFollowsPreToolUseAllow ? ACTIVE_PROFILE.source : null;
 var agentNameIn = (projectName) => `${ACTIVE_AGENT.label} - ${projectName}`;
 var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, updatedInput);
 var undecidedCall = (reason) => PUSHARY_IS_SOLE_GATE ? deny(reason) : void 0;
@@ -554,7 +561,7 @@ var emitDecisionEpisode = (apiKey, input, toolPolicy, machineId, toolTarget, dec
     machineId
   });
 };
-var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingConsent = false, scopeReason, scopePath, terminalLive, askReason, matchedRoute) => {
+var dispatchModeDecision = async (apiKey, input, toolPolicy, machineId, trainingConsent = false, scopeReason, scopePath, terminalLive, askReason, matchedRoute) => {
   const description = describeToolCall(input.tool_name, input.tool_input, "hook");
   const projectName = basename(input.cwd ?? process.cwd());
   const sessionId = input.session_id;
@@ -622,8 +629,10 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
   if (trainingConsent && signals.humanDecision) {
     emitDecisionEpisode(apiKey, input, toolPolicy, machineId, toolTarget, decision, result);
   }
-  return result;
+  return { result, humanDecision: signals.humanDecision === true };
 };
+var dispatchModeHandler = async (...args) => (await dispatchModeDecision(...args)).result;
+var isPhoneApproval = (decided) => decided.humanDecision && decided.result?.hookSpecificOutput.permissionDecision === "allow";
 var CURSOR_SCOPE_TIMEOUT_ACTION = "escalate";
 var cursorScopeWaitSeconds = ({ timeoutSeconds, timeoutAction }) => Math.min(effectiveWaitSeconds(timeoutAction, timeoutSeconds, "cursor"), hookMaxWaitSeconds("cursor"));
 var hasItsOwnApprovalPrompt = (source) => source === null || hasNativeApprovalPrompt(source, "PreToolUse");
@@ -865,6 +874,7 @@ var standingRefusalOf = async (input) => {
   }
 };
 var handlePreToolUse = async (input, canonical) => {
+  if (PHONE_APPROVAL_SOURCE) forgetPhoneApproval(PHONE_APPROVAL_SOURCE, input);
   if (isPusharyOwnTool(input.tool_name)) return void 0;
   if (isRefusalsOnlyCallInClaudeCode(input) && !mcpCallWaitsForSomeoneElse(input)) {
     return isPusharyConnectorTool(input.tool_name) ? void 0 : standingRefusalOf(input);
@@ -917,13 +927,12 @@ var handlePreToolUse = async (input, canonical) => {
       // opinion, so Claude Code's own flow runs as if the hook were absent.
       case "defer":
         return undecidedCall(SOLE_GATE_UNDECIDED_REASON);
-      default:
+      default: {
         if (preToolUseHandsOff(input, gateInput, verdict)) return ask(TERMINAL_AND_PHONE_REASON);
-        return rememberHandbackToThePrompt(
-          input,
-          heldForMcpRoute,
-          await dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, void 0, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput))
-        );
+        const decided = await dispatchModeDecision(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, void 0, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput));
+        if (PHONE_APPROVAL_SOURCE && isPhoneApproval(decided)) rememberPhoneApproval(PHONE_APPROVAL_SOURCE, input);
+        return rememberHandbackToThePrompt(input, heldForMcpRoute, decided.result);
+      }
     }
   } catch (error) {
     await reportHookFailure("pre_tool_use_failed", error);
@@ -940,6 +949,7 @@ var toPermissionRequestOutput = (hookOutput) => {
   if (d.permissionDecision === "deny") return permReqDeny(d.permissionDecisionReason);
   return void 0;
 };
+var answerOfTheReplay = (replayed) => replayed.humanDecision ? toPermissionRequestOutput(replayed.result) : void 0;
 var handlePermissionRequest = async (input, canonical, holdBudgetSeconds) => {
   const claudeRules = claudePermissionRulesFor(input);
   if (canonical === void 0 && !claudeRulesMayCover(input, claudeRules) && isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode) && !terminalStaysLiveForTheCall(terminalLiveFactsOf(input))) return void 0;
@@ -967,12 +977,14 @@ var handlePermissionRequest = async (input, canonical, holdBudgetSeconds) => {
     if (isMcpCallInClaudeCode(input) && claimMcpHoldHandback(blockedActionFingerprintFor(input))) return void 0;
     if (agentQuestionStrategy(ACTIVE_SOURCE, "PermissionRequest", input.tool_name) === AGENT_QUESTION_STRATEGY.native) return void 0;
     if (verdict.kind === "gate" && verdict.scopeReason && (canonical?.toolInputs.length ?? 0) > 1) return permReqDeny(SCOPE_BATCH_REASON);
+    const approvedCall = PHONE_APPROVAL_SOURCE ? takePhoneApproval(PHONE_APPROVAL_SOURCE, input) : void 0;
+    const preToolUseAllowLeftThePrompt = PHONE_APPROVAL_SOURCE !== null && (verdict.kind === "allow" || approvedCall !== void 0);
     const handedOff = preToolUseHandsOff(input, gateInput, verdict);
     const terminalLive = terminalStaysLiveForTheCall(terminalLiveFactsOf(input));
     const scopeQuestion = verdict.kind === "gate" && Boolean(verdict.scopeReason);
     const preToolUseRanForTheCall = PRETOOLUSE_HANDLED_TOOLS.has(input.tool_name) && isAdmitted(readAdmissionRules(), "claude", "PreToolUse");
     const preToolUseAskedTheScopeQuestion = scopeQuestion && terminalLive && preToolUseRanForTheCall;
-    const preToolUseOwnsTheCall = !scopeQuestion && !claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudeRules) && (isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode) || preToolUseRanForTheCall && approvalRouteOutranksAutoMode(gateInput, verdict, input.permission_mode));
+    const preToolUseOwnsTheCall = !scopeQuestion && !preToolUseAllowLeftThePrompt && !claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudeRules) && (isPermissionRequestOwnedByPreToolUse(input.tool_name, input.permission_mode, shouldDeferToNativeMode) || preToolUseRanForTheCall && approvalRouteOutranksAutoMode(gateInput, verdict, input.permission_mode));
     if (!handedOff && (preToolUseAskedTheScopeQuestion || preToolUseOwnsTheCall)) return void 0;
     const terminalLiveDispatch = handedOff ? { holdBudgetSeconds } : void 0;
     switch (verdict.kind) {
@@ -982,6 +994,11 @@ var handlePermissionRequest = async (input, canonical, holdBudgetSeconds) => {
       case "defer":
         return void 0;
       default:
+        if (approvedCall) {
+          return answerOfTheReplay(
+            await dispatchModeDecision(apiKey, approvedCall, verdict.policy, getMachineId(), false, verdict.scopeReason, verdict.scopePath, terminalLiveDispatch, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput))
+          );
+        }
         return toPermissionRequestOutput(
           await dispatchModeHandler(apiKey, input, verdict.policy, getMachineId(), modeState.trainingConsent, verdict.scopeReason, verdict.scopePath, terminalLiveDispatch, permissionsOffAskReason(gateInput, verdict), matchedRouteOf(gateInput))
         );

package/dist/{chunk-V2T5ZDMP.js → chunk-PHA6AFOR.js}

@@ -1,9 +1,9 @@
 import {
   readExistingMachineId
-} from "./chunk-DS7XMYUB.js";
+} from "./chunk-WNT4JHK3.js";
 import {
   getBaseUrl
-} from "./chunk-T6HX6OTY.js";
+} from "./chunk-IKBTG3OT.js";
 import {
   NetworkError
 } from "./chunk-YU2EUD7O.js";
@@ -13,7 +13,7 @@ import {
 import {
   clientContextHeaders,
   redactSecretsFromContent
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-CVBSETPW.js → chunk-PNVTPEO5.js}

@@ -1,9 +1,9 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-BKH4LQJC.js";
+} from "./chunk-LNF36PTF.js";
 import {
   configFilePath
-} from "./chunk-T6HX6OTY.js";
+} from "./chunk-IKBTG3OT.js";
 import {
   backupFile,
   readJsonSafe,
@@ -14,7 +14,7 @@ import {
   API_KEY_PREFIX_PATTERN,
   isRecord,
   isValidApiKey
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-PPUIIP3O.js → chunk-POV2TBFA.js}

@@ -1,13 +1,13 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-RLQDVWZ4.js";
+} from "./chunk-6SWFS4GU.js";
 import {
   hermesReceiptPaths,
   hermesSetupPredatesThePluginFolder,
   installHermesPlugin,
   refreshHermesPluginFiles,
   shippedHermesPlugin
-} from "./chunk-7MIT5C7B.js";
+} from "./chunk-A7R43KOX.js";
 import {
   fxIgnoresInstructionsFile,
   fxInstructionsBody,
@@ -16,7 +16,7 @@ import {
   macAppFxBridge,
   refreshClineKey,
   switchFxHttpEntryToBridge
-} from "./chunk-IZJDVOJV.js";
+} from "./chunk-2XDVEBHI.js";
 import {
   OPENCODE_HOOK_BINARY,
   agentHookOwner,
@@ -28,16 +28,16 @@ import {
   openCodePluginDir,
   openCodeWired,
   withOpenCodeAskRules
-} from "./chunk-NSBWFX7H.js";
+} from "./chunk-VBWJ756P.js";
 import {
   detectClaudeVersion
-} from "./chunk-UJZ5YHSR.js";
+} from "./chunk-EJHD44ZN.js";
 import {
   addCompatibleHooks,
   compatibleConfigFile,
   compatibleInstructionsFile,
   hasCompatibleHooks
-} from "./chunk-RZBV5KTF.js";
+} from "./chunk-43DT3QWZ.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
@@ -49,10 +49,10 @@ import {
   geminiWired,
   hasGeminiHooks,
   planHooks
-} from "./chunk-237FYIVC.js";
+} from "./chunk-TLK5YLIE.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-CVBSETPW.js";
+} from "./chunk-PNVTPEO5.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -99,13 +99,13 @@ import {
   renderAgentInstructions,
   supportedClaudeEvents,
   vscodePluginMcp
-} from "./chunk-W4FJR57E.js";
+} from "./chunk-R7KC57PC.js";
 import {
   formatVersion,
   hookCommandsUseBareNames,
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "./chunk-A44MRVWG.js";
+} from "./chunk-GS5FH3C2.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -115,7 +115,7 @@ import {
   HOOK_COMPATIBLE_PROFILES,
   isCompatibleAgentType,
   isRecord
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-LR3PIGRS.js → chunk-Q2VV77IY.js}

@@ -1,9 +1,9 @@
 import {
   pusharyFetch
-} from "./chunk-V2T5ZDMP.js";
+} from "./chunk-PHA6AFOR.js";
 import {
   getBaseUrl
-} from "./chunk-T6HX6OTY.js";
+} from "./chunk-IKBTG3OT.js";
 import {
   NetworkError
 } from "./chunk-YU2EUD7O.js";
@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-NYFUU23B.js → chunk-QXATIKHQ.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-N5P2FLOJ.js → chunk-R7CQF2P3.js}

@@ -1,6 +1,10 @@
 import {
   external_exports
 } from "./chunk-XMSDA5WA.js";
+import {
+  RETRY_ACK,
+  refusedReceiptMessage
+} from "./chunk-Y47BMZUR.js";
 
 // src/command-receipts.ts
 import { randomUUID } from "crypto";
@@ -16,8 +20,10 @@ var CommandReceipts = class {
     this.options = options;
   }
   pending = /* @__PURE__ */ new Map();
+  refused = /* @__PURE__ */ new Set();
   flushing;
   async receive(command, acknowledge) {
+    if (this.refused.has(command.id)) return;
     if (this.pending.has(command.id)) {
       await this.flush();
       return;
@@ -34,8 +40,9 @@ var CommandReceipts = class {
       await this.flush();
       return;
     }
-    const dispatched = await acknowledge("dispatching", receipt.dispatchId).catch(() => false);
-    if (!dispatched) {
+    const dispatched = await acknowledge("dispatching", receipt.dispatchId).catch(() => RETRY_ACK);
+    if (dispatched.outcome !== "settled") {
+      if (dispatched.outcome === "refused") this.refused.add(command.id);
       this.pending.delete(command.id);
       return;
     }
@@ -66,9 +73,17 @@ var CommandReceipts = class {
       if (receipt.state === "dispatching") continue;
       const state = receipt.state;
       try {
-        const confirmed = await receipt.acknowledge(state, receipt.dispatchId);
-        if (confirmed && receipt.state === state) this.pending.delete(id);
-        if (!confirmed) this.options.log("[pushary] receipt not confirmed; retrying on reconnect");
+        const ack = await receipt.acknowledge(state, receipt.dispatchId);
+        if (ack.outcome === "retry") {
+          this.options.log("[pushary] receipt not confirmed; retrying on reconnect");
+          continue;
+        }
+        if (receipt.state !== state) continue;
+        this.pending.delete(id);
+        if (ack.outcome === "refused") {
+          this.refused.add(id);
+          this.options.log(refusedReceiptMessage(id, ack.status));
+        }
       } catch {
         this.options.log("[pushary] receipt could not be confirmed; retrying on reconnect");
       }

package/dist/{chunk-W4FJR57E.js → chunk-R7KC57PC.js}

@@ -3,7 +3,7 @@ import {
   formatVersion,
   quoteIfNeeded,
   shellDoubleQuoted
-} from "./chunk-A44MRVWG.js";
+} from "./chunk-GS5FH3C2.js";
 import {
   writeFileAtomic
 } from "./chunk-TODDEIYG.js";
@@ -20,7 +20,7 @@ import {
   PRETOOLUSE_GATED_TOOLS,
   PUSHARY_TOOL_PREFIX,
   withHookHoldBudget
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/setup/paths.ts
 import { createHash as createHash2 } from "crypto";

package/dist/{chunk-VME5NXCM.js → chunk-RPFSVNH6.js}

@@ -531,8 +531,8 @@ var loadedOnce = (load) => {
 };
 
 // src/codex-desktop-proxy.ts
-var loadThePhone = () => import("./api-7CZR7B53.js");
-var loadTheCardRouting = () => import("./codex-card-routing-X2HUY2AV.js");
+var loadThePhone = () => import("./api-5H25QRNM.js");
+var loadTheCardRouting = () => import("./codex-card-routing-LQJEJNTS.js");
 var theFirstCardLoadsAgain = () => {
 };
 var ASKS_WITHOUT_ROUTING = {};
@@ -1085,7 +1085,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-D2SODMQN.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-Z7TMF2OR.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");

package/dist/{chunk-VRUEKURE.js → chunk-RRUP72V6.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-BG4HHB7E.js";
 import {
   redactSecretsFromContent
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/cli/json.ts
 var writeStdoutFully = (text) => new Promise((resolve, reject) => {

package/dist/{chunk-237FYIVC.js → chunk-TLK5YLIE.js}

@@ -1,9 +1,9 @@
 import {
   AGENT_CHOICES
-} from "./chunk-XHC3UNOK.js";
+} from "./chunk-5XDFQ6E3.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-MJVDFNP2.js";
+} from "./chunk-LAWI6NQK.js";
 import {
   CLAUDE_HOOK_EVENTS,
   CODEX_HOOK_EVENTS,
@@ -16,13 +16,13 @@ import {
   isBridgeLocator,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-W4FJR57E.js";
+} from "./chunk-R7KC57PC.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-2YS7YEUW.js → chunk-U3OLXV5Z.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-CVBSETPW.js";
+} from "./chunk-PNVTPEO5.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-SZYKS433.js";
+} from "./chunk-MQMVJDII.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/chunk-UP5QXEUU.js

@@ -0,0 +1,31 @@
+import {
+  callDecisionStore,
+  identifyingToolInput
+} from "./chunk-D7AAAD6W.js";
+import {
+  canonicalJson
+} from "./chunk-R7KC57PC.js";
+
+// src/phone-approval.ts
+import { createHash } from "crypto";
+var PHONE_APPROVAL_TTL_MS = 60 * 60 * 1e3;
+var promptedCallKey = (source, call) => {
+  if (!call.session_id || !call.tool_name) return null;
+  const material = canonicalJson([source, call.session_id, call.cwd ?? "", call.tool_name, identifyingToolInput(call.tool_input)]);
+  return createHash("sha256").update(material, "utf-8").digest("hex").slice(0, 32);
+};
+var phoneApprovals = callDecisionStore("phone-approval", PHONE_APPROVAL_TTL_MS);
+var forgetPhoneApproval = (source, call) => phoneApprovals.forget(promptedCallKey(source, call));
+var rememberPhoneApproval = (source, call) => {
+  if (call.tool_use_id) phoneApprovals.record(promptedCallKey(source, call), { kind: "approved", toolUseId: call.tool_use_id });
+};
+var takePhoneApproval = (source, call) => {
+  const recorded = phoneApprovals.consume(promptedCallKey(source, call));
+  return recorded?.kind === "approved" ? { ...call, tool_use_id: recorded.toolUseId } : void 0;
+};
+
+export {
+  forgetPhoneApproval,
+  rememberPhoneApproval,
+  takePhoneApproval
+};

package/dist/{chunk-L5RSLIBQ.js → chunk-V7ZY7P2X.js}

@@ -1,19 +1,19 @@
 import {
   APPROVAL_RULES_PATH,
   canChangeApprovalSettings
-} from "./chunk-GKZMBU6T.js";
+} from "./chunk-3QBI5C6P.js";
 import {
   callMcpTool
-} from "./chunk-2KN53MPE.js";
+} from "./chunk-WXUEOHYY.js";
 import {
   absoluteUrl
-} from "./chunk-LR3PIGRS.js";
+} from "./chunk-Q2VV77IY.js";
 import {
   getBaseUrl
-} from "./chunk-T6HX6OTY.js";
+} from "./chunk-IKBTG3OT.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-SZYKS433.js";
+} from "./chunk-MQMVJDII.js";
 import {
   AGENT_STOP_DEFAULT_SECONDS,
   APPROVAL_MODE_META,
@@ -21,7 +21,7 @@ import {
   classifyConfirmResponse,
   isAnswerSource,
   roundTripAsk
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-DL67HX3D.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {