pushary 1.9.21 → 1.9.23

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 1.9.23
+
+- A `printf` whose format has a numeric conversion, such as `%d`, `%x` or `%f`, is no longer approved as a read unless every argument is a plain number. zsh, the default shell on a Mac, evaluates those arguments as arithmetic, and an argument such as `'PWD[$(command)]'` ran the command while Pushary approved it without asking. `printf '%s\n' text`, `printf hello` and `printf '%d\n' 42` are still approved as reads.
+- Codex with its approval policy set to never: answering "Handle on your machine" on your phone now refuses the call. Codex has no prompt of its own there, so the call used to run, a destructive one included. With Codex's own prompts on, the call still goes to that prompt.
+- Antigravity CLI: when your Pushary subscription has ended, a call Pushary would ask about is refused with a message that says so. Pushary is agy's only gate, and the call used to run with nothing asking. Renew, or run `pushary disconnect antigravity` to give approvals back to agy.
+
+## 1.9.22
+
+- Each approval Claude Code or Codex sends through Pushary now carries the approval mode the agent reported for the session, such as `default` or `bypassPermissions`, so Pushary can tell which mode an approval was asked in. It is recorded with the approval and never used to decide one. A mode that is empty or not text is left out, and a long one is cut to 64 characters.
+
 ## 1.9.21
 
 - `pushary setup` records a key as the one Pushary for Mac is signed in with only when Pushary for Mac holds that same key. It used to record any key it reused from your agent settings that way, including one left behind by an earlier CLI sign-in. `pushary clean` never revokes the Mac app's key, so it skipped that leftover key and left it working. Now it revokes it, and still leaves the Mac app's own key alone.

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-ESHO7OC3.js";
+} from "../chunk-YZPFJCFE.js";
 import {
   readHookInput
-} from "../chunk-II6OFDB3.js";
-import "../chunk-TJ4KMPYO.js";
+} from "../chunk-OH6OGEOY.js";
+import "../chunk-AV5VX7OK.js";
 import "../chunk-VTR4VRL2.js";
-import "../chunk-L5NPRGVE.js";
-import "../chunk-6WINXCXY.js";
-import "../chunk-IM7EGZVH.js";
-import "../chunk-6WBIQQHO.js";
+import "../chunk-SSWK2WYX.js";
+import "../chunk-N4DMADJM.js";
+import "../chunk-QFNY4KUQ.js";
+import "../chunk-M6R3SZZS.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-BDL6GJOQ.js";
-import "../chunk-PYWZYM74.js";
-import "../chunk-YLLGKY7K.js";
-import "../chunk-247PAUW6.js";
-import "../chunk-AXBFNQG6.js";
+import "../chunk-K2EYK5RL.js";
+import "../chunk-A5U62Q6K.js";
+import "../chunk-7RGEJOQS.js";
+import "../chunk-R5C3QCVT.js";
+import "../chunk-AFP3HZVK.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-FH4O3QGQ.js";
-import "../chunk-YCL2V5FD.js";
-import "../chunk-JHAPJRAN.js";
-import "../chunk-Y2BOLNJV.js";
+import "../chunk-AQ3TSQA2.js";
+import "../chunk-GYP6DLA4.js";
+import "../chunk-KJA6IGOZ.js";
+import "../chunk-4GKQDFH6.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-ZNAGS7O7.js";
-import "../chunk-UZ2YEGIT.js";
-import "../chunk-TBCXMW2C.js";
-import "../chunk-NBGJ3EOE.js";
+import "../chunk-E2LGKG75.js";
+import "../chunk-Z4UDB7EC.js";
+import "../chunk-XBETSM5T.js";
+import "../chunk-EDN4F6GX.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
-import "../chunk-CEF4UQ3X.js";
+import "../chunk-6HT2TUZD.js";
+import "../chunk-QIODXPTP.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-4WHNRAOK.js";
-import "../chunk-B6KZME5D.js";
-import "../chunk-VBPASZU7.js";
+import "../chunk-OQPEHKH2.js";
+import "../chunk-LEQRIJ4H.js";
+import "../chunk-OH647UT3.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,39 +5,39 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-ESHO7OC3.js";
+} from "../chunk-YZPFJCFE.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-BV5JPACQ.js";
+} from "../chunk-FIYCICHC.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-AXBFNQG6.js";
+} from "../chunk-AFP3HZVK.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-FH4O3QGQ.js";
+import "../chunk-AQ3TSQA2.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
+import "../chunk-6HT2TUZD.js";
 import {
   claudeSettings
-} from "../chunk-CEF4UQ3X.js";
+} from "../chunk-QIODXPTP.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-AQFEP65J.js";
-import "../chunk-4WHNRAOK.js";
-import "../chunk-B6KZME5D.js";
+import "../chunk-OQPEHKH2.js";
+import "../chunk-LEQRIJ4H.js";
 import {
   isRecord
-} from "../chunk-VBPASZU7.js";
+} from "../chunk-OH647UT3.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,39 +8,39 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-7AFLHL2R.js";
+} from "../chunk-CJTQNUUT.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-PCVAK67W.js";
+} from "../chunk-M7DCI44L.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-TJ4KMPYO.js";
+} from "../chunk-AV5VX7OK.js";
 import "../chunk-VTR4VRL2.js";
 import {
   ensureDaemonRunning
-} from "../chunk-L5NPRGVE.js";
+} from "../chunk-SSWK2WYX.js";
 import {
   encryptRecord
-} from "../chunk-6WINXCXY.js";
-import "../chunk-IM7EGZVH.js";
+} from "../chunk-N4DMADJM.js";
+import "../chunk-QFNY4KUQ.js";
 import {
   transcriptsEnabled
-} from "../chunk-6WBIQQHO.js";
+} from "../chunk-M6R3SZZS.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-PYWZYM74.js";
-import "../chunk-YLLGKY7K.js";
-import "../chunk-247PAUW6.js";
-import "../chunk-AXBFNQG6.js";
+import "../chunk-A5U62Q6K.js";
+import "../chunk-7RGEJOQS.js";
+import "../chunk-R5C3QCVT.js";
+import "../chunk-AFP3HZVK.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-FH4O3QGQ.js";
+import "../chunk-AQ3TSQA2.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -58,8 +58,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-YCL2V5FD.js";
-import "../chunk-JHAPJRAN.js";
+} from "../chunk-GYP6DLA4.js";
+import "../chunk-KJA6IGOZ.js";
 import {
   askUser,
   cancelQuestion,
@@ -69,35 +69,35 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-Y2BOLNJV.js";
+} from "../chunk-4GKQDFH6.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-ZNAGS7O7.js";
-import "../chunk-UZ2YEGIT.js";
-import "../chunk-TBCXMW2C.js";
+} from "../chunk-E2LGKG75.js";
+import "../chunk-Z4UDB7EC.js";
+import "../chunk-XBETSM5T.js";
 import {
   getMachineId
-} from "../chunk-NBGJ3EOE.js";
+} from "../chunk-EDN4F6GX.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
-import "../chunk-CEF4UQ3X.js";
+import "../chunk-6HT2TUZD.js";
+import "../chunk-QIODXPTP.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-4WHNRAOK.js";
+} from "../chunk-OQPEHKH2.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-B6KZME5D.js";
+} from "../chunk-LEQRIJ4H.js";
 import {
   DECISION_STOP_REASON,
   KILL_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
   redactSecretsFromContent,
   resolveGate
-} from "../chunk-VBPASZU7.js";
+} from "../chunk-OH647UT3.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -13,7 +13,7 @@ import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-U6GYFWT4.js";
+} from "../chunk-2AUKCSLQ.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -22,27 +22,27 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-QHY3UDYC.js";
+} from "../chunk-AXSHPFU3.js";
 import {
   planFxRemoval,
   removeInstructionBlock
-} from "../chunk-4BKAZ4JN.js";
-import "../chunk-VD2AWSER.js";
+} from "../chunk-YXHVMZPR.js";
+import "../chunk-RN5NRRHX.js";
 import {
   disableDaemonService
-} from "../chunk-L5NPRGVE.js";
+} from "../chunk-SSWK2WYX.js";
 import "../chunk-XHKBHWLX.js";
 import {
   APPROVAL_SETTINGS_PATH
-} from "../chunk-SVQOEVAT.js";
+} from "../chunk-S2R2U5W5.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-4RJQPI36.js";
-import "../chunk-I52ALHOM.js";
+} from "../chunk-6GHZAS7S.js";
+import "../chunk-SLBO7PHS.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -54,14 +54,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-BERMVODT.js";
+} from "../chunk-ZGYO6OQE.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-BV5JPACQ.js";
+} from "../chunk-FIYCICHC.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -74,7 +74,7 @@ import {
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-BDL6GJOQ.js";
+} from "../chunk-K2EYK5RL.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -82,12 +82,12 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-PYWZYM74.js";
+} from "../chunk-A5U62Q6K.js";
 import {
   removeGeminiSettings
-} from "../chunk-YLLGKY7K.js";
-import "../chunk-247PAUW6.js";
-import "../chunk-AXBFNQG6.js";
+} from "../chunk-7RGEJOQS.js";
+import "../chunk-R5C3QCVT.js";
+import "../chunk-AFP3HZVK.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -102,22 +102,22 @@ import {
   readKeySource,
   readMacAppKeyPrefix,
   removeClaudeAlias
-} from "../chunk-FH4O3QGQ.js";
-import "../chunk-YCL2V5FD.js";
-import "../chunk-JHAPJRAN.js";
-import "../chunk-Y2BOLNJV.js";
+} from "../chunk-AQ3TSQA2.js";
+import "../chunk-GYP6DLA4.js";
+import "../chunk-KJA6IGOZ.js";
+import "../chunk-4GKQDFH6.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-ZNAGS7O7.js";
+import "../chunk-E2LGKG75.js";
 import {
   absoluteUrl
-} from "../chunk-UZ2YEGIT.js";
-import "../chunk-TBCXMW2C.js";
-import "../chunk-NBGJ3EOE.js";
+} from "../chunk-Z4UDB7EC.js";
+import "../chunk-XBETSM5T.js";
+import "../chunk-EDN4F6GX.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
+import "../chunk-6HT2TUZD.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -154,14 +154,14 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-CEF4UQ3X.js";
+} from "../chunk-QIODXPTP.js";
 import "../chunk-AQFEP65J.js";
 import {
   getBaseUrl
-} from "../chunk-4WHNRAOK.js";
+} from "../chunk-OQPEHKH2.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-B6KZME5D.js";
+} from "../chunk-LEQRIJ4H.js";
 import {
   CLI_PACKAGE_NAMES,
   HOOK_COMPATIBLE_PROFILES,
@@ -173,7 +173,7 @@ import {
   globalRootFor,
   isValidApiKey,
   redactSecrets
-} from "../chunk-VBPASZU7.js";
+} from "../chunk-OH647UT3.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -5,10 +5,10 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-LUDGBOLV.js";
+} from "../chunk-73HGV4R6.js";
 import {
   resolveProviderBinary
-} from "../chunk-Z5EYCMJH.js";
+} from "../chunk-7J2AX5T6.js";
 import "../chunk-RIVNNBEK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
@@ -16,50 +16,50 @@ import {
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-7AFLHL2R.js";
-import "../chunk-6WINXCXY.js";
-import "../chunk-IM7EGZVH.js";
+} from "../chunk-CJTQNUUT.js";
+import "../chunk-N4DMADJM.js";
+import "../chunk-QFNY4KUQ.js";
 import {
   transcriptsEnabled
-} from "../chunk-6WBIQQHO.js";
+} from "../chunk-M6R3SZZS.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-FH4O3QGQ.js";
+import "../chunk-AQ3TSQA2.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "../chunk-Y2BOLNJV.js";
+} from "../chunk-4GKQDFH6.js";
 import "../chunk-POFBE6ZY.js";
 import {
   callMcpTool
-} from "../chunk-ZNAGS7O7.js";
-import "../chunk-UZ2YEGIT.js";
-import "../chunk-TBCXMW2C.js";
+} from "../chunk-E2LGKG75.js";
+import "../chunk-Z4UDB7EC.js";
+import "../chunk-XBETSM5T.js";
 import {
   getMachineId
-} from "../chunk-NBGJ3EOE.js";
+} from "../chunk-EDN4F6GX.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
-import "../chunk-CEF4UQ3X.js";
+import "../chunk-6HT2TUZD.js";
+import "../chunk-QIODXPTP.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-4WHNRAOK.js";
-import "../chunk-B6KZME5D.js";
+} from "../chunk-OQPEHKH2.js";
+import "../chunk-LEQRIJ4H.js";
 import {
   elicitationContent,
   parseAgentQuestion,
   parseAgentQuestionAnswers,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-VBPASZU7.js";
+} from "../chunk-OH647UT3.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -1,41 +1,40 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-TQIPIFL7.js";
+} from "../chunk-JNKHCGHR.js";
 import {
   defersToNativeMode,
   reportMachineDenial
-} from "../chunk-G4TV5GYU.js";
+} from "../chunk-FBV2KS3Z.js";
 import {
   triggerAutoUpdate
-} from "../chunk-5PW6GMQO.js";
+} from "../chunk-USUI4P63.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-UKCRTTKF.js";
+} from "../chunk-GN6BJXC7.js";
 import {
   readHookInput
-} from "../chunk-II6OFDB3.js";
+} from "../chunk-OH6OGEOY.js";
 import {
   announceSubscriptionRequired,
-  denyReasonFrom,
   isDeferAnswer
-} from "../chunk-PCVAK67W.js";
-import "../chunk-TJ4KMPYO.js";
+} from "../chunk-M7DCI44L.js";
+import "../chunk-AV5VX7OK.js";
 import "../chunk-VTR4VRL2.js";
-import "../chunk-L5NPRGVE.js";
-import "../chunk-6WINXCXY.js";
-import "../chunk-IM7EGZVH.js";
-import "../chunk-6WBIQQHO.js";
+import "../chunk-SSWK2WYX.js";
+import "../chunk-N4DMADJM.js";
+import "../chunk-QFNY4KUQ.js";
+import "../chunk-M6R3SZZS.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-BDL6GJOQ.js";
-import "../chunk-PYWZYM74.js";
-import "../chunk-YLLGKY7K.js";
-import "../chunk-247PAUW6.js";
-import "../chunk-AXBFNQG6.js";
+import "../chunk-K2EYK5RL.js";
+import "../chunk-A5U62Q6K.js";
+import "../chunk-7RGEJOQS.js";
+import "../chunk-R5C3QCVT.js";
+import "../chunk-AFP3HZVK.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-FH4O3QGQ.js";
+import "../chunk-AQ3TSQA2.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -79,8 +78,8 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   userScope
-} from "../chunk-YCL2V5FD.js";
-import "../chunk-JHAPJRAN.js";
+} from "../chunk-GYP6DLA4.js";
+import "../chunk-KJA6IGOZ.js";
 import {
   askUser,
   cancelQuestion,
@@ -93,31 +92,31 @@ import {
   sendNotification,
   unavailableQuestionUnlessSubscriptionRequired,
   waitForQuestion
-} from "../chunk-Y2BOLNJV.js";
+} from "../chunk-4GKQDFH6.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-ZNAGS7O7.js";
-import "../chunk-UZ2YEGIT.js";
-import "../chunk-TBCXMW2C.js";
+} from "../chunk-E2LGKG75.js";
+import "../chunk-Z4UDB7EC.js";
+import "../chunk-XBETSM5T.js";
 import {
   getMachineId
-} from "../chunk-NBGJ3EOE.js";
+} from "../chunk-EDN4F6GX.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-NVXC6ZBR.js";
+import "../chunk-6HT2TUZD.js";
 import {
   canonicalJson
-} from "../chunk-CEF4UQ3X.js";
+} from "../chunk-QIODXPTP.js";
 import {
   writeFileAtomic
 } from "../chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "../chunk-4WHNRAOK.js";
-import "../chunk-B6KZME5D.js";
+} from "../chunk-OQPEHKH2.js";
+import "../chunk-LEQRIJ4H.js";
 import {
   CODEX_RESCUE_TOOL_NAME,
   DECISION_STOP_REASON,
@@ -128,9 +127,11 @@ import {
   UNVERIFIABLE_APPROVAL_REASON,
   approvalModeWithoutLocalPrompt,
   codexCallNeedsAPerson,
-  codexRaisesItsOwnPrompts,
+  codexDeferredPreToolUse,
+  codexHasNoPromptOfItsOwn,
   codexStopRescueOutput,
   codexUnansweredPreToolUse,
+  denyReasonFrom,
   editGoesToTheAgentsPrompt,
   effectiveWaitSeconds,
   hookHoldWindowMs,
@@ -139,7 +140,7 @@ import {
   resolveGate,
   scopeBreachReasonOf,
   unapprovedScopeReason
-} from "../chunk-VBPASZU7.js";
+} from "../chunk-OH647UT3.js";
 
 // bin/pushary-codex-hook.ts
 import { basename } from "path";
@@ -580,8 +581,9 @@ var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode, scope) => {
     actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {}),
     repoKey: repoKeyFor(input.cwd),
     scopePath: scope?.path,
-    ...codexHasNoPromptOfItsOwn(scope, input.permission_mode) ? { localSurfaceAvailable: false } : {},
+    ...codexHasNoPromptOfItsOwn(scope?.reason, input.permission_mode) ? { localSurfaceAvailable: false } : {},
     sessionToolAware: true,
+    permissionMode: input.permission_mode,
     // Codex has always sent this; it is what claimNotify and markApproved already
     // key on locally. Passing it through lets the server collapse a retried create
     // the same way, instead of putting the same approval on the phone twice.
@@ -687,10 +689,10 @@ var scopeQuestionOf = (verdict) => {
   const reason = scopeBreachReasonOf(verdict);
   return reason !== void 0 && verdict.kind === "gate" ? { reason, path: verdict.scopePath } : void 0;
 };
-var codexHasNoPromptOfItsOwn = (scope, permissionMode) => scope !== void 0 || !codexRaisesItsOwnPrompts(permissionMode);
 var codexDeliveryMode = (policyMode, noPromptOfItsOwn) => noPromptOfItsOwn ? approvalModeWithoutLocalPrompt(policyMode) : policyMode;
 var unansweredOutcome = (scope, fallback) => scope ? codexDeny(unapprovedScopeReason(scope.reason)) : fallback;
 var codexDecisionOf = (ending) => ending.kind === "deny" ? codexDeny(ending.reason) : codexPass();
+var deferredPreToolUse = (scope, input) => unansweredOutcome(scope, codexDecisionOf(codexDeferredPreToolUse(!codexHasNoPromptOfItsOwn(scope?.reason, input.permission_mode))));
 var unansweredPreToolUse = (toolPolicy, input, fullWindowServed) => codexDecisionOf(codexUnansweredPreToolUse({
   mode: toolPolicy.mode,
   timeoutAction: toolPolicy.timeoutAction,
@@ -736,7 +738,7 @@ var decidePreToolUse = async (input) => {
     const toolPolicy = verdict.policy;
     const callKey = callKeyFor(input);
     if (scope && gateInput.toolInputs.length > 1) return recordPreToolUse(callKey, codexDeny(SCOPE_BATCH_REASON));
-    const deliveryMode = codexDeliveryMode(toolPolicy.mode, codexHasNoPromptOfItsOwn(scope, input.permission_mode));
+    const deliveryMode = codexDeliveryMode(toolPolicy.mode, codexHasNoPromptOfItsOwn(scope?.reason, input.permission_mode));
     if (deliveryMode === "push_only") {
       let pushed;
       try {
@@ -749,7 +751,7 @@ var decidePreToolUse = async (input) => {
       if (isDecisionStopped(answer)) return codexDeny(DECISION_STOP_REASON);
       if (localHandoff) return recordPreToolUse(callKey, unansweredOutcome(scope, unansweredPreToolUse(toolPolicy, input, false)));
       if (answer.answered) {
-        if (isDeferAnswer(answer.value)) return recordPreToolUse(callKey, unansweredOutcome(scope, codexPass()));
+        if (isDeferAnswer(answer.value)) return recordPreToolUse(callKey, deferredPreToolUse(scope, input));
         if (answer.value === "yes") return recordApproval(callKey, input);
         return recordPreToolUse(callKey, codexDeny(denyReasonFrom(answer.value, answer.note)));
       }
@@ -767,7 +769,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-BUCDXIIM.js");
+    const { repairCodexHolds } = await import("../reapply-WQDP26EA.js");
     repairCodexHolds();
   } catch {
     return;