pushary 1.9.61 → 1.9.63

package/dist/{chunk-ZEWIMY63.js → chunk-KL76XWZ7.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-DQLCFGHK.js";
+} from "./chunk-PXAOEFJZ.js";
 
 // src/answer.ts
 var isDeferAnswer = (value) => value === "defer";

package/dist/{chunk-IFPOHFDJ.js → chunk-KLZZI5TU.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-MWLTTLPK.js";
+} from "./chunk-MK4USZYQ.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-ATKN4BJT.js → chunk-KUCL7ETL.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-WN3RACVD.js";
+} from "./chunk-IOH2T3CB.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-SFAP4AJY.js → chunk-L5CDGXPO.js}

@@ -1,9 +1,9 @@
-import {
-  pusharyDir
-} from "./chunk-MWLTTLPK.js";
 import {
   writeFileAtomic
 } from "./chunk-QENTGE75.js";
+import {
+  pusharyDir
+} from "./chunk-MK4USZYQ.js";
 
 // src/identity.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-GDKQUB52.js → chunk-LGZ545TA.js}

@@ -1,22 +1,22 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-ZGU3NXL2.js";
+} from "./chunk-LTT54NOU.js";
 import {
   nativeClaudeInstallPath
 } from "./chunk-VUFHYMSP.js";
 import {
   grokHome
-} from "./chunk-GKFO5JLN.js";
+} from "./chunk-3QLFB2EY.js";
 import {
   claudeConfigDir,
   codexHomeFrom
-} from "./chunk-MWLTTLPK.js";
+} from "./chunk-MK4USZYQ.js";
 import {
   resolvePathBinary
-} from "./chunk-CJ5TCFD4.js";
+} from "./chunk-5LOP4AVD.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-7NCLUA65.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-ZGU3NXL2.js → chunk-LTT54NOU.js}

@@ -1,15 +1,18 @@
 import {
   compatibleConfigFile
-} from "./chunk-GKFO5JLN.js";
+} from "./chunk-3QLFB2EY.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-BJTSKOH3.js";
+} from "./chunk-SKUSGWFK.js";
 import {
   AGENT_CHOICES
-} from "./chunk-XV6S5PWW.js";
+} from "./chunk-XE5N352V.js";
+import {
+  readJsonSafe
+} from "./chunk-QENTGE75.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -18,10 +21,7 @@ import {
   guardedArgv,
   pusharyDir,
   vscodePluginDir
-} from "./chunk-MWLTTLPK.js";
-import {
-  readJsonSafe
-} from "./chunk-QENTGE75.js";
+} from "./chunk-MK4USZYQ.js";
 import {
   HOOK_BUDGETS,
   HOOK_COMPATIBLE_PROFILES,
@@ -29,7 +29,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-7NCLUA65.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-MWLTTLPK.js → chunk-MK4USZYQ.js}

@@ -1,13 +1,13 @@
 import {
   quoteIfNeeded,
   shellDoubleQuoted
-} from "./chunk-CJ5TCFD4.js";
+} from "./chunk-5LOP4AVD.js";
 import {
   CODEX_QUESTION_TOOLS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-7NCLUA65.js";
 
 // src/setup/paths.ts
 import { createHash as createHash2 } from "crypto";

package/dist/{chunk-NKLNU577.js → chunk-MRCVYYPW.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-XV6S5PWW.js";
+} from "./chunk-XE5N352V.js";
 import {
   parseFlags
 } from "./chunk-NMUI3ZWG.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-PPY5N2E6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ERK24P76.js";
+} from "./chunk-6Z2VR3BA.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-7NCLUA65.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-7JXJJNQ5.js → chunk-OJEIS5L2.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-WN3RACVD.js";
+} from "./chunk-IOH2T3CB.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-ELLJPP6O.js → chunk-OP5IBEV7.js}

@@ -1,13 +1,15 @@
 import {
   buildTranscriptRecords,
   decodePublicKey,
+  encryptRecord,
   generateSessionKey,
+  recordSealerFor,
   wrapSessionKey
-} from "./chunk-2AELPDMT.js";
+} from "./chunk-BCVCUDFI.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-GAMVAORR.js";
+} from "./chunk-V7N5NOZV.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;
@@ -68,6 +70,7 @@ var LiveTranscriptRelay = class {
   wrappedKey = null;
   providerWrappedKey = null;
   providerKeyId = null;
+  sealRecord = encryptRecord;
   keyUploaded = false;
   keyRejected = false;
   flushing = null;
@@ -98,13 +101,14 @@ var LiveTranscriptRelay = class {
         if (!recipients) return false;
         this.sessionKey = generateSessionKey();
         this.wrappedKey = wrapSessionKey(this.sessionKey, decodePublicKey(recipients.phonePublicKey));
+        this.sealRecord = recordSealerFor(recipients.phoneReadsCompressedRecords);
         if (recipients.provider) {
           this.providerWrappedKey = wrapSessionKey(this.sessionKey, decodePublicKey(recipients.provider.publicKey));
           this.providerKeyId = recipients.provider.keyId;
         }
       }
       const count = Math.min(this.queue.length, 50);
-      const records = buildTranscriptRecords(this.queue.slice(0, count), this.sessionKey).records;
+      const records = buildTranscriptRecords(this.queue.slice(0, count), this.sessionKey, /* @__PURE__ */ new Set(), this.sealRecord).records;
       if (records.length === 0) {
         this.queue.splice(0, count);
         return true;

package/dist/{chunk-BQ2VV7LY.js → chunk-OU3BYBJ3.js}

@@ -8,13 +8,13 @@ import {
   everyProgramFileIsThere,
   installedCodexApp,
   shellQuoted
-} from "./chunk-PITQ5ZIQ.js";
+} from "./chunk-5JK3DQGZ.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-LBHJJEKT.js";
+} from "./chunk-4WFAP6QN.js";
 import {
   CODEX_APP_LAUNCH_AT_LOGIN_VERB,
   CODEX_APP_LAUNCH_VARIABLE

package/dist/{chunk-6T5Z64KS.js → chunk-OW6VBXXI.js}

@@ -1,6 +1,6 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-BUZIEL7Y.js";
+} from "./chunk-YK6GR4GU.js";
 import {
   CODEX_INSTRUCTIONS_LABEL,
   GEMINI_INSTRUCTIONS_LABEL,
@@ -11,7 +11,7 @@ import {
   macAppFxBridge,
   refreshInstructionBlock,
   renderAgentInstructions
-} from "./chunk-4VRTSDGP.js";
+} from "./chunk-DMNLFWGY.js";
 import {
   OPENCODE_HOOK_BINARY,
   agentHookOwner,
@@ -21,10 +21,10 @@ import {
   openCodeInstructionsFile,
   openCodePluginDir,
   openCodeWired
-} from "./chunk-ZGU3NXL2.js";
+} from "./chunk-LTT54NOU.js";
 import {
   detectClaudeVersion
-} from "./chunk-USE5IEEW.js";
+} from "./chunk-OY6Z4IKB.js";
 import {
   addClaudeMcpServer,
   addCompatibleHooks,
@@ -33,7 +33,7 @@ import {
   compatibleConfigFile,
   compatibleInstructionsFile,
   hasCompatibleHooks
-} from "./chunk-GKFO5JLN.js";
+} from "./chunk-3QLFB2EY.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
@@ -41,7 +41,7 @@ import {
   codexWired,
   geminiWired,
   planHooks
-} from "./chunk-BJTSKOH3.js";
+} from "./chunk-SKUSGWFK.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -52,10 +52,15 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-RGSW36XH.js";
+} from "./chunk-BQFL2ECS.js";
 import {
   formatVersion
 } from "./chunk-6ICPEJY5.js";
+import {
+  readJsonSafe,
+  writeFileAtomic,
+  writeJsonAtomic
+} from "./chunk-QENTGE75.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -83,21 +88,16 @@ import {
   registeredCommands,
   registrationHolderOf,
   vscodePluginMcp
-} from "./chunk-MWLTTLPK.js";
+} from "./chunk-MK4USZYQ.js";
 import {
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "./chunk-CJ5TCFD4.js";
-import {
-  readJsonSafe,
-  writeFileAtomic,
-  writeJsonAtomic
-} from "./chunk-QENTGE75.js";
+} from "./chunk-5LOP4AVD.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   isCompatibleAgentType,
   isRecord
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-7NCLUA65.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-USE5IEEW.js → chunk-OY6Z4IKB.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-6ICPEJY5.js";
 import {
   isRecord
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-7NCLUA65.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-O65F2IIN.js → chunk-P6RF4RQN.js}

@@ -4,30 +4,30 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "./chunk-ELLJPP6O.js";
+} from "./chunk-OP5IBEV7.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership
-} from "./chunk-SHJVFW22.js";
+} from "./chunk-CLABCSZC.js";
 import {
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
 import {
   repoKeyFor
-} from "./chunk-YPD3MTFU.js";
+} from "./chunk-7GRQGXF4.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "./chunk-RJHX66EY.js";
+} from "./chunk-TBKHQWIH.js";
 import {
   callMcpTool,
   isRetryable
-} from "./chunk-XAO6EYGM.js";
+} from "./chunk-ELAK46NR.js";
 import {
   AGENT_QUESTION_DESCRIPTION_MAX,
   AGENT_QUESTION_HEADER_MAX,
@@ -48,7 +48,7 @@ import {
   parseCodexQuestions,
   planElicitationAsk,
   readElicitationFields
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-7NCLUA65.js";
 
 // src/codex-question-owner.ts
 import { createHash } from "crypto";

package/dist/{chunk-4N5E4JNF.js → chunk-PIQ4HHA2.js}

@@ -1,13 +1,13 @@
+import {
+  writeJsonAtomic
+} from "./chunk-QENTGE75.js";
 import {
   autoUpdateLock
-} from "./chunk-MWLTTLPK.js";
+} from "./chunk-MK4USZYQ.js";
 import {
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-CJ5TCFD4.js";
-import {
-  writeJsonAtomic
-} from "./chunk-QENTGE75.js";
+} from "./chunk-5LOP4AVD.js";
 
 // src/upgrade-lock.ts
 import { fork } from "child_process";

package/dist/{chunk-7HDGH3Z2.js → chunk-PJ34FOIV.js}

@@ -1,13 +1,13 @@
 import {
   isDisabledByEnv
 } from "./chunk-POFBE6ZY.js";
-import {
-  autoUpdateState
-} from "./chunk-MWLTTLPK.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "./chunk-QENTGE75.js";
+import {
+  autoUpdateState
+} from "./chunk-MK4USZYQ.js";
 import {
   CLI_PACKAGE_NAMES,
   POSIX_GLOBAL_ROOT_SEGMENTS,
@@ -17,7 +17,7 @@ import {
 } from "./chunk-QTOLNRET.js";
 import {
   isAutoUpdateResult
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-7NCLUA65.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-DQLCFGHK.js → chunk-PXAOEFJZ.js}

@@ -2,10 +2,10 @@ import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-33OOEVPG.js";
+} from "./chunk-VC3HFFMQ.js";
 import {
   repoKeyFor
-} from "./chunk-YPD3MTFU.js";
+} from "./chunk-7GRQGXF4.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -13,26 +13,26 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-RJHX66EY.js";
+} from "./chunk-TBKHQWIH.js";
 import {
   withRetry
-} from "./chunk-XAO6EYGM.js";
+} from "./chunk-ELAK46NR.js";
 import {
   getMachineId
-} from "./chunk-SFAP4AJY.js";
+} from "./chunk-L5CDGXPO.js";
 import {
   reportedInstallSource
-} from "./chunk-Y5VKZNFN.js";
-import {
-  canonicalJson
-} from "./chunk-MWLTTLPK.js";
+} from "./chunk-V5W3CK7F.js";
 import {
   writeFileAtomic
 } from "./chunk-QENTGE75.js";
+import {
+  canonicalJson
+} from "./chunk-MK4USZYQ.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-BG4Y64FW.js";
+} from "./chunk-BUQU3OPX.js";
 import {
   ACTION_BODY_MAX,
   AGENTS,
@@ -58,6 +58,7 @@ import {
   modeStateFromResponse,
   parseMcpToolName,
   pendingCommandEvents,
+  questionLimitHandBack,
   redactSecrets,
   redactSecretsDeep,
   reportableSessionId,
@@ -66,7 +67,7 @@ import {
   toToolLookup,
   truncateLine,
   unansweredRefusalReason
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-7NCLUA65.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";
@@ -1348,6 +1349,10 @@ var toPolicyLookups = (toolName, toolInput, cwd) => {
     inputs: files.map((file) => ({ file_path: cwd ? resolve2(cwd, file) : file }))
   };
 };
+var codexQuestionLimitDecision = (facts) => {
+  const handBack = questionLimitHandBack(facts);
+  return handBack.kind === "refuse" ? codexDeny(handBack.reason) : codexPass();
+};
 var permissionTimeoutDecision = (timeoutAction, paused) => {
   if (timeoutAction === "approve") return codexAllow();
   if (timeoutAction === "deny") return codexDeny(unansweredRefusalReason(paused));
@@ -2236,6 +2241,7 @@ export {
   describeApplyPatch,
   toPolicyLookup,
   toPolicyLookups,
+  codexQuestionLimitDecision,
   permissionTimeoutDecision,
   userScope,
   codexCallKey,

package/dist/{chunk-P3VQH65N.js → chunk-QC2W42DE.js}

@@ -4,19 +4,19 @@ import {
   outcomeOfFailedAsk,
   reportMachineDenial,
   storedWaitDeadline
-} from "./chunk-ORX5BTV4.js";
+} from "./chunk-2MZ6ROWZ.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-SVQWHV65.js";
+} from "./chunk-XO3KAH7K.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-ZEWIMY63.js";
+} from "./chunk-KL76XWZ7.js";
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-GKFO5JLN.js";
+} from "./chunk-3QLFB2EY.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -40,10 +40,10 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-DQLCFGHK.js";
+} from "./chunk-PXAOEFJZ.js";
 import {
   repoKeyFor
-} from "./chunk-YPD3MTFU.js";
+} from "./chunk-7GRQGXF4.js";
 import {
   askUser,
   cancelQuestion,
@@ -52,26 +52,27 @@ import {
   isAwayPaused,
   isDecisionStopped,
   isLocalQuestionHandoff,
+  isQuestionLimitRefusal,
   pollForAnswer,
   reportClientError,
   requestGate,
   sendNotification,
   waitForQuestion,
   waitsForThePhone
-} from "./chunk-RJHX66EY.js";
+} from "./chunk-TBKHQWIH.js";
 import {
   getMachineId
-} from "./chunk-SFAP4AJY.js";
+} from "./chunk-L5CDGXPO.js";
 import {
   claudeConfigDir
-} from "./chunk-MWLTTLPK.js";
+} from "./chunk-MK4USZYQ.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-BG4Y64FW.js";
+} from "./chunk-BUQU3OPX.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ERK24P76.js";
+} from "./chunk-6Z2VR3BA.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -80,6 +81,7 @@ import {
   GATE_WIRE,
   HANDED_BACK_REASON,
   PLAN_DECLINED_REASON,
+  QUESTION_LIMIT_PROMPT_REASON,
   SCOPE_BATCH_REASON,
   SOLE_GATE_SIGNED_OUT_REASON,
   SOLE_GATE_SUBSCRIPTION_REASON,
@@ -109,14 +111,17 @@ import {
   hookWaitDeadline,
   hookWritePath,
   isBlockedActionRequest,
+  isCursorHookPayload,
   isPermissionRequestOwnedByPreToolUse,
   isPusharyOwnTool,
   parseAgentQuestions,
   questionHandedToTheTerminal,
+  questionLimitHandBack,
+  refusesWhenUnanswered,
   resolveGate,
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-7NCLUA65.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";
@@ -197,8 +202,12 @@ var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, u
 var ask = (reason) => claudePreToolUseOutput("ask", reason);
 var halted = (reason) => claudeStoppedPreToolUseOutput(reason);
 var undecidedCall = (reason) => PUSHARY_IS_SOLE_GATE ? deny(reason) : void 0;
-var outcomeOfFailedPermissionAsk = (error, sessionId) => outcomeOfFailedAsk(error, sessionId, halted(UNVERIFIABLE_APPROVAL_REASON)) ?? undecidedCall(SOLE_GATE_SUBSCRIPTION_REASON);
-var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget, decision, signals) => {
+var questionLimitOutput = (handBack) => handBack.kind === "refuse" ? deny(handBack.reason) : ask(QUESTION_LIMIT_PROMPT_REASON);
+var outcomeOfFailedPermissionAsk = (error, sessionId, questionLimitFacts) => {
+  if (isQuestionLimitRefusal(error)) return questionLimitOutput(questionLimitHandBack(questionLimitFacts));
+  return outcomeOfFailedAsk(error, sessionId, halted(UNVERIFIABLE_APPROVAL_REASON)) ?? undecidedCall(SOLE_GATE_SUBSCRIPTION_REASON);
+};
+var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget, decision, signals, agentPromptFollows) => {
   const effectiveWait = effectiveWaitSeconds(timeoutAction, timeoutSeconds, "claude");
   const now = Date.now();
   const requestedDeadline = hookWaitDeadline(START_MS, effectiveWait, "claude", now);
@@ -218,7 +227,10 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
       ...decision
     });
   } catch (error) {
-    return outcomeOfFailedPermissionAsk(error, sessionId);
+    return outcomeOfFailedPermissionAsk(error, sessionId, {
+      refusesUnanswered: refusesWhenUnanswered({ mode: "push_only", timeoutAction }),
+      agentPromptFollows
+    });
   }
   if (isDecisionStopped(result)) return halted(DECISION_STOP_REASON);
   const deadline = storedWaitDeadline(result, requestedDeadline);
@@ -246,7 +258,7 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
 var handleTerminalOnly = () => {
   return ask();
 };
-var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds, sessionId, machineId, toolName, toolTarget, decision, signals) => {
+var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds, sessionId, machineId, toolName, toolTarget, decision, signals, agentPromptFollows) => {
   const requestedDeadline = hookWaitDeadline(START_MS, pushFirstSeconds, "claude", Date.now());
   let result;
   try {
@@ -263,7 +275,7 @@ var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds,
       ...decision
     });
   } catch (error) {
-    return outcomeOfFailedPermissionAsk(error, sessionId);
+    return outcomeOfFailedPermissionAsk(error, sessionId, { refusesUnanswered: false, agentPromptFollows });
   }
   if (isDecisionStopped(result)) return halted(DECISION_STOP_REASON);
   if (waitsForThePhone(result)) announceWait(pushFirstSeconds, result.answerUrl, sessionId);
@@ -324,6 +336,7 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
   const sessionId = input.session_id;
   const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
   const ownPrompt = hasItsOwnApprovalPrompt(ACTIVE_SOURCE);
+  const agentPromptFollows = ownPrompt && !isCursorHookPayload(input);
   const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
   const decision = {
     toolPath: hookWritePath(input.tool_name, input.tool_input),
@@ -347,15 +360,15 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
   const runHandler = () => {
     switch (ownPrompt ? toolPolicy.mode : approvalModeWithoutLocalPrompt(toolPolicy.mode)) {
       case "push_only":
-        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, ownPrompt ? toolPolicy.timeoutAction : timeoutActionWithoutLocalPrompt(toolPolicy), sessionId, machineId, input.tool_name, toolTarget, decision, signals);
+        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, ownPrompt ? toolPolicy.timeoutAction : timeoutActionWithoutLocalPrompt(toolPolicy), sessionId, machineId, input.tool_name, toolTarget, decision, signals, agentPromptFollows);
       case "terminal_only":
         return Promise.resolve(handleTerminalOnly());
       case "push_first":
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision, signals);
+        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision, signals, agentPromptFollows);
       case "notify_only":
         return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
       default:
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision, signals);
+        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision, signals, agentPromptFollows);
     }
   };
   const result = await runHandler();

package/dist/{chunk-X3YKQJCZ.js → chunk-RAJ3QEIL.js}

@@ -2,7 +2,7 @@ import {
   isApprovalMode,
   isRecord,
   isTimeoutAction
-} from "./chunk-AXJLJJ3M.js";
+} from "./chunk-7NCLUA65.js";
 
 // src/cli/settings-response.ts
 var isFiniteNumber = (value) => typeof value === "number" && Number.isFinite(value);