pushary 1.9.64 → 1.9.66

package/dist/{chunk-MNKIR2ZB.js → chunk-EJR5JXMV.js}

@@ -5757,6 +5757,22 @@ var EXIT_PLAN_MODE_TOOL = "ExitPlanMode";
 var ASKED_IN_EVERY_MODE_TOOLS = [AGENT_QUESTION_TOOL, EXIT_PLAN_MODE_TOOL];
 var ASKED_IN_EVERY_MODE = /* @__PURE__ */ new Set([...ASKED_IN_EVERY_MODE_TOOLS, ...CODEX_QUESTION_TOOLS]);
 var isAskedInEveryMode = (toolName) => ASKED_IN_EVERY_MODE.has(toolName);
+var MODES_WITH_A_TERMINAL_PROMPT = /* @__PURE__ */ new Set(["default", "acceptEdits"]);
+var TERMINAL_AND_PHONE_REASON = "Pushary may also ask your phone. The first answer counts.";
+var terminalStaysLiveForTheCall = (facts) => facts.source === "claude" && facts.sessionAttended && facts.permissionHookAdmitted && !facts.handedDownByTheMacBridge && !facts.fromCursor && MODES_WITH_A_TERMINAL_PROMPT.has(facts.permissionMode ?? "") && !isAskedInEveryMode(facts.toolName);
+var TIMEOUT_DECISIONS = { approve: "allow", deny: "deny" };
+var pushOnlyTimeoutDecision = (policy) => policy.mode === "push_only" ? TIMEOUT_DECISIONS[policy.timeoutAction] : void 0;
+var phoneWindowSeconds = (policy) => Math.max(policy.mode === "push_only" ? policy.timeoutSeconds : policy.pushFirstSeconds, 0);
+var terminalLiveWait = (policy, holdBudgetProof) => {
+  const budget = Math.min(holdBudgetProof ?? HOOK_BUDGETS.claude.budgetSeconds, HOOK_BUDGETS.claude.budgetSeconds);
+  const ceiling = Math.max(budget - HOOK_BUDGETS.claude.guardSeconds, 1);
+  const policySeconds = phoneWindowSeconds(policy);
+  const decision = pushOnlyTimeoutDecision(policy);
+  if (decision !== void 0 && policySeconds <= ceiling) return { waitSeconds: policySeconds, holdSeconds: ceiling, onTimeout: decision };
+  const waitsForThePhone = policy.mode === "push_only" && policy.timeoutAction === "wait";
+  const holdsTheBudget = waitsForThePhone || holdBudgetProof !== void 0 && decision === void 0;
+  return { waitSeconds: holdsTheBudget ? ceiling : Math.min(policySeconds, ceiling), holdSeconds: ceiling, onTimeout: "leave_to_terminal" };
+};
 var NATIVE_BLOCK_EVENTS = /* @__PURE__ */ new Set(["PermissionDenied"]);
 var isNativeBlockEvent = (event) => typeof event === "string" && NATIVE_BLOCK_EVENTS.has(event);
 var CODEX_RESCUE_TOOL_NAME = "Bash";
@@ -5833,7 +5849,8 @@ var resolveGate = (input) => {
     scopePath: scopeReason && "path" in scopeVerdict ? widenablePath(scopeVerdict.path) : void 0
   };
 };
-var editAsksAtTheAgentsPrompt = (input, verdict) => verdict.kind === "gate" && !verdict.scopeReason && (input.modeState.mode ?? input.config.modeOverride ?? null) === null && !aChosenRuleGoverns(input) && verdict.policy.mode === "push_first" && FILE_EDIT_TOOLS.has(input.toolName);
+var noModeOverrideIsActive = (input) => (input.modeState.mode ?? input.config.modeOverride ?? null) === null;
+var editAsksAtTheAgentsPrompt = (input, verdict) => verdict.kind === "gate" && !verdict.scopeReason && noModeOverrideIsActive(input) && !aChosenRuleGoverns(input) && verdict.policy.mode === "push_first" && FILE_EDIT_TOOLS.has(input.toolName);
 var claudePromptsBeforeAnEdit = (permissionMode) => permissionMode === "default";
 var runsTheClaudeHook = (source) => source === null || source === "claude" || hookCompatibleProfileBySource(source) !== void 0;
 var agentPromptsBeforeAnEdit = ({ source, event, permissionMode }) => {
@@ -5950,6 +5967,7 @@ var aChosenRuleGoverns = (input) => {
   });
 };
 var claudeAllowlistOwnsCall = (input, verdict, permissionMode, rules) => rules !== null && verdict.kind === "gate" && !verdict.scopeReason && !aChosenRuleGoverns(input) && !isAskedInEveryMode(input.toolName) && claudeConsultsItsAllowlist(permissionMode) && agentRulesAllowEveryInput(rules, input.toolName, input.toolInputs, input.cwd);
+var claudePromptTakesTheCall = (facts, input, verdict) => verdict.kind === "gate" && !verdict.scopeReason && terminalStaysLiveForTheCall(facts) && noModeOverrideIsActive(input) && !aChosenRuleGoverns(input) && !editGoesToTheAgentsPrompt({ source: facts.source, event: "PreToolUse", permissionMode: facts.permissionMode }, input, verdict);
 var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
 var modeStateFromResponse = (data) => {
   const mode = data.override?.mode;
@@ -6426,12 +6444,16 @@ export {
   codexQuestionGoesToPushary,
   agentQuestionStrategy,
   questionHandedToTheTerminal,
+  TERMINAL_AND_PHONE_REASON,
+  terminalStaysLiveForTheCall,
+  terminalLiveWait,
   CODEX_RESCUE_TOOL_NAME,
   isBlockedActionRequest,
   canonicalJsonText,
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
   blockedActionIdentity,
   PRETOOLUSE_GATED_TOOLS,
+  PRETOOLUSE_HANDLED_TOOLS,
   isPermissionRequestOwnedByPreToolUse,
   CLAUDE_PRETOOLUSE_MATCHER,
   resolveGate,
@@ -6453,6 +6475,7 @@ export {
   claudeConsultsItsAllowlist,
   agentRulesAllowEveryInput,
   claudeAllowlistOwnsCall,
+  claudePromptTakesTheCall,
   modeStateFromResponse,
   GATE_WIRE,
   GATE_MAX_TOOL_INPUTS,

package/dist/{chunk-VHKK3US3.js → chunk-EU2ZOZC3.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-SROWUG5W.js";
+} from "./chunk-UTAARXYQ.js";
 import {
   parseFlags
 } from "./chunk-NMUI3ZWG.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-PPY5N2E6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BAGBCSXA.js";
+} from "./chunk-GO7YKPT3.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-EJR5JXMV.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-AN7C3CHH.js → chunk-G6VJZ3RB.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-BAGBCSXA.js";
+} from "./chunk-GO7YKPT3.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";

package/dist/{chunk-H4BKC2GN.js → chunk-GDLT32I4.js}

@@ -4,7 +4,7 @@ import {
   quoteIfNeeded,
   shellDoubleQuoted,
   writeFileAtomic
-} from "./chunk-BSZIPIFA.js";
+} from "./chunk-KS3O6O7E.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   CODEX_QUESTION_TOOLS,
@@ -12,7 +12,7 @@ import {
   HOOK_LOCATOR_BINARY,
   PRETOOLUSE_GATED_TOOLS,
   withHookHoldBudget
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-EJR5JXMV.js";
 
 // src/setup/paths.ts
 import { createHash as createHash2 } from "crypto";
@@ -550,7 +550,7 @@ var CLAUDE_HOOK_EVENTS = [
   { event: "SessionStart", binary: "pushary-session-start-hook", matcher: "startup|resume|clear", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
   { event: "SessionEnd", binary: "pushary-session-end-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
   { event: "StopFailure", binary: "pushary-stopfailure-hook", timeout: 10, delivery: "telemetry", since: ESTABLISHED },
-  { event: "PermissionRequest", binary: "pushary-permission-hook", timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", since: ESTABLISHED },
+  { event: "PermissionRequest", binary: "pushary-permission-hook", timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", holds: true, since: ESTABLISHED },
   { event: "PermissionDenied", binary: "pushary-permission-denied-hook", timeout: HOOK_BUDGETS.claude.budgetSeconds, delivery: "approval", holds: true, since: ESTABLISHED },
   // Observability only. Each carries session shape the island cannot get any other
   // way, and none of them decides anything.

package/dist/{chunk-EEM65CGJ.js → chunk-GECU7V44.js}

@@ -1,19 +1,19 @@
 import {
   readExistingMachineId
-} from "./chunk-ADRPW7KU.js";
+} from "./chunk-IA5VWIHV.js";
 import {
   NetworkError
 } from "./chunk-PPY5N2E6.js";
 import {
   getBaseUrl
-} from "./chunk-Y64JGYTB.js";
+} from "./chunk-A47UKPC7.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";
 import {
   clientContextHeaders,
   redactSecretsFromContent
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-EJR5JXMV.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-BAGBCSXA.js → chunk-GO7YKPT3.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-EJR5JXMV.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {

package/dist/{chunk-QECRQWLV.js → chunk-GWYCKTXS.js}

@@ -3,24 +3,24 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-DCMRNIDM.js";
+} from "./chunk-T6YLXO6N.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-5NP3OJ5P.js";
+} from "./chunk-57NTMVMI.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-BLAIETMP.js";
+} from "./chunk-CNJ7SI5V.js";
 import {
   getMachineId
-} from "./chunk-ADRPW7KU.js";
+} from "./chunk-IA5VWIHV.js";
 import {
   getBaseUrl
-} from "./chunk-Y64JGYTB.js";
+} from "./chunk-A47UKPC7.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";

package/dist/{chunk-2PKHGHMA.js → chunk-HUGVJBDN.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-2KID4FK4.js";
+} from "./chunk-Q5RNYE2L.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BAGBCSXA.js";
+} from "./chunk-GO7YKPT3.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-ADRPW7KU.js → chunk-IA5VWIHV.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-H4BKC2GN.js";
+} from "./chunk-GDLT32I4.js";
 import {
   writeFileAtomic
-} from "./chunk-BSZIPIFA.js";
+} from "./chunk-KS3O6O7E.js";
 
 // src/identity.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-6HPLEGUP.js → chunk-IGO3AGZK.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-ML2Q6WWE.js";
+} from "./chunk-3EZP5ZPS.js";
 import {
   pusharyHookExecutable
-} from "./chunk-KA7JIMTG.js";
+} from "./chunk-YQDCTID4.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-H4BKC2GN.js";
+} from "./chunk-GDLT32I4.js";
 import {
   isRecord
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-EJR5JXMV.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-PMLQRB3D.js → chunk-IQ3GKPFM.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-H4BKC2GN.js";
+} from "./chunk-GDLT32I4.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-LV6DX4P6.js → chunk-JL3SZJJP.js}

@@ -7,10 +7,10 @@ import {
   codexHome,
   codexHooksJsonIn,
   isPusharyCodexCommand
-} from "./chunk-H4BKC2GN.js";
+} from "./chunk-GDLT32I4.js";
 import {
   resolvePathBinary
-} from "./chunk-BSZIPIFA.js";
+} from "./chunk-KS3O6O7E.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";

package/dist/{chunk-BSZIPIFA.js → chunk-KS3O6O7E.js}

@@ -443,9 +443,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-Y4USGPS2.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-QAWUV2DO.js");
-    const { autoUpdateLock } = await import("./paths-4MEBINV3.js");
+    const { withUpgradeLock } = await import("./global-upgrade-ABF5O3HU.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-EZ5JIPJE.js");
+    const { autoUpdateLock } = await import("./paths-FO76CFRQ.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;

package/dist/{chunk-IZTDX2MX.js → chunk-MDIGG3Q7.js}

@@ -1,12 +1,12 @@
 import {
   findNativeClaudeInstall
-} from "./chunk-MXPOLQZH.js";
+} from "./chunk-RJ6JEHCP.js";
 import {
   parseVersion
-} from "./chunk-BSZIPIFA.js";
+} from "./chunk-KS3O6O7E.js";
 import {
   isRecord
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-EJR5JXMV.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-JTOBQUIL.js → chunk-MNNQEUQC.js}

@@ -1,13 +1,13 @@
 import {
   callMcpTool
-} from "./chunk-2KID4FK4.js";
+} from "./chunk-Q5RNYE2L.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BAGBCSXA.js";
+} from "./chunk-GO7YKPT3.js";
 import {
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-EJR5JXMV.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-2KID4FK4.js → chunk-Q5RNYE2L.js}

@@ -1,17 +1,17 @@
 import {
   keyCheckFromResponse
-} from "./chunk-QNATBOUH.js";
+} from "./chunk-QR2QWGQI.js";
 import {
   installNetworkDefaults
-} from "./chunk-EEM65CGJ.js";
+} from "./chunk-GECU7V44.js";
 import {
   getBaseUrl
-} from "./chunk-Y64JGYTB.js";
+} from "./chunk-A47UKPC7.js";
 import {
   isRecord,
   isToolErrorResult,
   toolFailureCodeOfResult
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-EJR5JXMV.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-KX3RMF6T.js → chunk-QBNICXMC.js}

@@ -1,23 +1,23 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-VNRWQCGU.js";
+} from "./chunk-7LK3Y6ET.js";
 import {
   nativeClaudeInstallPath
-} from "./chunk-MXPOLQZH.js";
+} from "./chunk-RJ6JEHCP.js";
 import {
   grokHome
-} from "./chunk-ML2Q6WWE.js";
+} from "./chunk-3EZP5ZPS.js";
 import {
   claudeConfigDir,
   clineDataDirectory,
   codexHomeFrom
-} from "./chunk-H4BKC2GN.js";
+} from "./chunk-GDLT32I4.js";
 import {
   resolvePathBinary
-} from "./chunk-BSZIPIFA.js";
+} from "./chunk-KS3O6O7E.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-EJR5JXMV.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-YUDZCJYC.js → chunk-QN25WBXL.js}

@@ -1,25 +1,25 @@
 import {
   registerTranscript
-} from "./chunk-57PU5OBL.js";
+} from "./chunk-SVKCYUYP.js";
 import {
   namedEvent
-} from "./chunk-ML2Q6WWE.js";
+} from "./chunk-3EZP5ZPS.js";
 import {
   isBridgeLocator,
   liveBridgeProbe,
   pusharyHookExecutable,
   resolveBridgeStub
-} from "./chunk-KA7JIMTG.js";
+} from "./chunk-YQDCTID4.js";
 import {
   writeDegraded
-} from "./chunk-E23RKH3T.js";
+} from "./chunk-ZAZUDYSF.js";
 import {
   cursorUserHooks
-} from "./chunk-H4BKC2GN.js";
+} from "./chunk-GDLT32I4.js";
 import {
   atLeast,
   parseVersion
-} from "./chunk-BSZIPIFA.js";
+} from "./chunk-KS3O6O7E.js";
 import {
   CURSOR_GATE_COVERAGE,
   CURSOR_GATE_SCRIPT,
@@ -33,7 +33,7 @@ import {
   isGrokSessionEndStop,
   isRecord,
   toolsCoveredByGateEntry
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-EJR5JXMV.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode", "cursor_version"];
@@ -210,6 +210,8 @@ function readToolHookCall(source, event, stdin = process.stdin, { readCursorGate
 }
 
 export {
+  readAdmissionRules,
+  isAdmitted,
   readHookInput,
   readToolHookInput,
   readToolHookCall

package/dist/{chunk-NUEPJ5W6.js → chunk-QOIPUYUD.js}

@@ -2,14 +2,12 @@ import {
   buildTranscriptRecords,
   decodePublicKey,
   encryptRecord,
+  fetchTranscriptRecipients,
   generateSessionKey,
   recordSealerFor,
+  uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-QSW3HAKI.js";
-import {
-  fetchTranscriptRecipients,
-  uploadTranscriptRecords
-} from "./chunk-TJUJAK5L.js";
+} from "./chunk-XEXF2OFZ.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-QNATBOUH.js → chunk-QR2QWGQI.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-EEM65CGJ.js";
+} from "./chunk-GECU7V44.js";
 import {
   NetworkError
 } from "./chunk-PPY5N2E6.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-Y64JGYTB.js";
+} from "./chunk-A47UKPC7.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-EJR5JXMV.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-NOH3EJFH.js → chunk-R7C2FS33.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-Y64JGYTB.js";
+} from "./chunk-A47UKPC7.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-MXPOLQZH.js → chunk-RJ6JEHCP.js}

@@ -1,6 +1,6 @@
 import {
   isFile
-} from "./chunk-BSZIPIFA.js";
+} from "./chunk-KS3O6O7E.js";
 
 // src/claude-native-install.ts
 import { accessSync, constants } from "fs";

package/dist/{chunk-E2LB6JNV.js → chunk-RSZQEEEW.js}

@@ -3,10 +3,10 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-OQKSF5ST.js";
+} from "./chunk-V3YBVOTZ.js";
 import {
   phoneStartIsRequired
-} from "./chunk-DCMRNIDM.js";
+} from "./chunk-T6YLXO6N.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -18,7 +18,7 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-PLMX3IHG.js";
+} from "./chunk-VURDLVAQ.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
@@ -26,17 +26,17 @@ import {
   autoUpdateLock,
   autoUpdateLog,
   autoUpdateState
-} from "./chunk-H4BKC2GN.js";
+} from "./chunk-GDLT32I4.js";
 import {
   execNpm,
   fetchLatestPublishedVersion,
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-BSZIPIFA.js";
+} from "./chunk-KS3O6O7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BAGBCSXA.js";
+} from "./chunk-GO7YKPT3.js";
 import {
   commandsPackage,
   globalUpgradeEntry,
@@ -59,6 +59,7 @@ var FINISHED_UPGRADE = { kind: "finished" };
 var refreshedPartsOf = (agent) => [
   ...agent.result.hooks ? ["hooks"] : [],
   ...agent.result.mcp ? ["MCP key"] : [],
+  ...agent.result.approvalRules ? ["approval rules"] : [],
   ...agent.instructions?.outcome === "refreshed" ? ["instructions"] : []
 ];
 var wasRefreshed = (agent) => refreshedPartsOf(agent).length > 0;

package/dist/{chunk-57PU5OBL.js → chunk-SVKCYUYP.js}

@@ -3,43 +3,41 @@ import {
   loadPin,
   savePin,
   verifyRecipients
-} from "./chunk-DVYVGBPB.js";
+} from "./chunk-DBUHSUL7.js";
 import {
   ensureDaemonRunning
-} from "./chunk-5NP3OJ5P.js";
+} from "./chunk-57NTMVMI.js";
 import {
   hookOwnerOf
-} from "./chunk-KA7JIMTG.js";
+} from "./chunk-YQDCTID4.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
+  fetchTranscriptRecipients,
   generateSessionKey,
   recordSealerFor,
+  uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-QSW3HAKI.js";
-import {
-  fetchTranscriptRecipients,
-  uploadTranscriptRecords
-} from "./chunk-TJUJAK5L.js";
+} from "./chunk-XEXF2OFZ.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-5TUDGSDC.js";
+} from "./chunk-XGFFNERF.js";
 import {
   readTranscriptPreference
-} from "./chunk-BLAIETMP.js";
+} from "./chunk-CNJ7SI5V.js";
 import {
   claudeConfigDir,
   codexHome,
   pusharyDir
-} from "./chunk-H4BKC2GN.js";
+} from "./chunk-GDLT32I4.js";
 import {
   writeJsonAtomic
-} from "./chunk-BSZIPIFA.js";
+} from "./chunk-KS3O6O7E.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-Y64JGYTB.js";
+} from "./chunk-A47UKPC7.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-DCMRNIDM.js → chunk-T6YLXO6N.js}

@@ -1,9 +1,9 @@
 import {
   realpath
-} from "./chunk-IZTDX2MX.js";
+} from "./chunk-MDIGG3Q7.js";
 import {
   findNativeClaudeInstall
-} from "./chunk-MXPOLQZH.js";
+} from "./chunk-RJ6JEHCP.js";
 import {
   readGlobalPrefixAsync,
   resolveGlobalBinary,
@@ -13,10 +13,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-BSZIPIFA.js";
+} from "./chunk-KS3O6O7E.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-EJR5JXMV.js";
 
 // src/live-capabilities.ts
 import { homedir } from "os";

package/dist/{chunk-Q6ID23SU.js → chunk-TQNFDNJA.js}

@@ -4,30 +4,30 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "./chunk-NUEPJ5W6.js";
+} from "./chunk-QOIPUYUD.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership
-} from "./chunk-A5KQXZR7.js";
+} from "./chunk-3ELJIG2R.js";
 import {
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
 import {
   repoKeyFor
-} from "./chunk-3KXBRSL3.js";
+} from "./chunk-XXIJBYNW.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "./chunk-E23RKH3T.js";
+} from "./chunk-ZAZUDYSF.js";
 import {
   callMcpTool,
   isRetryable
-} from "./chunk-2KID4FK4.js";
+} from "./chunk-Q5RNYE2L.js";
 import {
   AGENT_QUESTION_DESCRIPTION_MAX,
   AGENT_QUESTION_HEADER_MAX,
@@ -48,7 +48,7 @@ import {
   parseCodexQuestions,
   planElicitationAsk,
   readElicitationFields
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-EJR5JXMV.js";
 
 // src/codex-question-owner.ts
 import { createHash } from "crypto";