pushary 1.9.70 → 1.9.71

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 1.9.71
+
+- Codex in Full access: a call to an app you connected in ChatGPT or Codex that only reads, such as searching Gmail, listing GitHub issues or opening a Notion page, no longer asks you. Codex runs those calls without asking in Full access, and Pushary now does the same instead of holding each one for your phone and refusing it when nobody answered. With Alert only as your standing mode, these reads no longer send an update either.
+- These still ask: calls that change something, such as creating a pull request, updating a spreadsheet or sending an email; reads whose name points at a secret, such as a password, token, key, environment variables or a recovery code; a read whose input names a web address, sets an HTTP method that writes such as POST or DELETE, carries a SQL statement that changes data in a form prose does not take, or a GraphQL mutation; any call to a database, warehouse or BI app; a read outside the scope you agreed; any call while a mode you set for a limited time is on; any call a rule you wrote covers; and every MCP server that is not a ChatGPT connected app.
+- "Allow for this session" on an MCP read now stops covering a call whose input names a web address or asks to change something, the same way it never covers a risky shell command.
+
 ## 1.9.70
 
 - Hermes: the plugin (0.8.1) no longer sends "Tool error in Hermes" to your phone each time a tool call fails. Hermes counts any command that exits non-zero as a failed tool call, so a `grep` that finds nothing or a test run that fails on purpose became a high-urgency push, up to three per Hermes session, and Hermes recovers from those on its own.

package/dist/{api-KUJYE5YZ.js → api-HEIRLMTZ.js}

@@ -17,23 +17,23 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-FD6KOIT2.js";
+} from "./chunk-YG3NFC5N.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-VIQ5OS5E.js";
-import "./chunk-AQA63ZWO.js";
-import "./chunk-KHOWMC57.js";
-import "./chunk-FZ2SHXUE.js";
+import "./chunk-GIE7PLZD.js";
+import "./chunk-ZZ7VB6QC.js";
+import "./chunk-XSUWXBHF.js";
+import "./chunk-LWAYXE7G.js";
 import "./chunk-PPY5N2E6.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-274CV7IW.js";
-import "./chunk-OXOYS3UG.js";
-import "./chunk-32OSSYGZ.js";
-import "./chunk-X2MTVD4W.js";
+import "./chunk-SMIU5URV.js";
+import "./chunk-T7FPZN5V.js";
+import "./chunk-X2KK42JA.js";
+import "./chunk-AZ56FPRG.js";
 import "./chunk-QTOLNRET.js";
 import {
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON
-} from "./chunk-RQOT6QL3.js";
+} from "./chunk-JGEPODEP.js";
 import "./chunk-MLKGABMK.js";
 export {
   ABANDONED_WAIT,

package/dist/bin/pushary-bell-hook.js

@@ -1,39 +1,39 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-LWFSXSRG.js";
+} from "../chunk-VSQDVH43.js";
 import {
   readHookInput
-} from "../chunk-WOJW23ZD.js";
-import "../chunk-N2WAXSJY.js";
-import "../chunk-QZPRCMPV.js";
-import "../chunk-DJPNVVJQ.js";
-import "../chunk-TXRV7AOA.js";
-import "../chunk-NFWZVY25.js";
-import "../chunk-ZK5WYAMI.js";
-import "../chunk-CJ3W7XRU.js";
+} from "../chunk-HR6M44CX.js";
+import "../chunk-IYMYGKFB.js";
+import "../chunk-FTOKESSK.js";
+import "../chunk-LRS4TJU2.js";
+import "../chunk-G3J5JKEJ.js";
+import "../chunk-WOZLV3LN.js";
+import "../chunk-EVJRITSI.js";
+import "../chunk-MZ6GL46A.js";
 import "../chunk-NMUI3ZWG.js";
-import "../chunk-NWN6GGJL.js";
-import "../chunk-DTENGECG.js";
+import "../chunk-LA3MMHLO.js";
+import "../chunk-TATE22GH.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-GZHQQP7J.js";
-import "../chunk-HZNZJTGH.js";
-import "../chunk-GMHQYX3D.js";
-import "../chunk-FD6KOIT2.js";
+import "../chunk-D536PHXF.js";
+import "../chunk-5NQ3SMVP.js";
+import "../chunk-NPO3ZTR4.js";
+import "../chunk-YG3NFC5N.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-VIQ5OS5E.js";
-import "../chunk-AQA63ZWO.js";
-import "../chunk-KHOWMC57.js";
-import "../chunk-FZ2SHXUE.js";
+import "../chunk-GIE7PLZD.js";
+import "../chunk-ZZ7VB6QC.js";
+import "../chunk-XSUWXBHF.js";
+import "../chunk-LWAYXE7G.js";
 import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-METUT7V4.js";
-import "../chunk-274CV7IW.js";
-import "../chunk-OXOYS3UG.js";
-import "../chunk-32OSSYGZ.js";
-import "../chunk-X2MTVD4W.js";
+import "../chunk-AERRQEWZ.js";
+import "../chunk-SMIU5URV.js";
+import "../chunk-T7FPZN5V.js";
+import "../chunk-X2KK42JA.js";
+import "../chunk-AZ56FPRG.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-RQOT6QL3.js";
+import "../chunk-JGEPODEP.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-bell-hook.ts

package/dist/bin/pushary-bell.js

@@ -5,40 +5,40 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-LWFSXSRG.js";
+} from "../chunk-VSQDVH43.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-77L2TNJW.js";
+} from "../chunk-YRWGCYHH.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-CJ3W7XRU.js";
+} from "../chunk-MZ6GL46A.js";
 import {
   parseFlags
 } from "../chunk-NMUI3ZWG.js";
-import "../chunk-GZHQQP7J.js";
+import "../chunk-D536PHXF.js";
 import "../chunk-PPY5N2E6.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-METUT7V4.js";
+import "../chunk-AERRQEWZ.js";
 import {
   claudeSettings
-} from "../chunk-274CV7IW.js";
+} from "../chunk-SMIU5URV.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "../chunk-OXOYS3UG.js";
-import "../chunk-32OSSYGZ.js";
-import "../chunk-X2MTVD4W.js";
+} from "../chunk-T7FPZN5V.js";
+import "../chunk-X2KK42JA.js";
+import "../chunk-AZ56FPRG.js";
 import "../chunk-QTOLNRET.js";
 import {
   isRecord
-} from "../chunk-RQOT6QL3.js";
+} from "../chunk-JGEPODEP.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-bell.ts

package/dist/bin/pushary-claude.js

@@ -2,43 +2,43 @@
 import {
   WRAPPER_ACTIVE_ENV,
   findClaudeBinary
-} from "../chunk-JQMERLQS.js";
+} from "../chunk-YX6VQGLG.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-JWRDCANS.js";
-import "../chunk-YSOZVBFW.js";
+} from "../chunk-ITKAMUHG.js";
+import "../chunk-BJRLJJS2.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-SKTZKAGH.js";
+} from "../chunk-3CN2EFKK.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-N2WAXSJY.js";
-import "../chunk-QZPRCMPV.js";
+} from "../chunk-IYMYGKFB.js";
+import "../chunk-FTOKESSK.js";
 import {
   ensureDaemonRunning
-} from "../chunk-TXRV7AOA.js";
-import "../chunk-NFWZVY25.js";
-import "../chunk-ZK5WYAMI.js";
-import "../chunk-CJ3W7XRU.js";
+} from "../chunk-G3J5JKEJ.js";
+import "../chunk-WOZLV3LN.js";
+import "../chunk-EVJRITSI.js";
+import "../chunk-MZ6GL46A.js";
 import "../chunk-NMUI3ZWG.js";
 import {
   encryptRecord
-} from "../chunk-NWN6GGJL.js";
+} from "../chunk-LA3MMHLO.js";
 import {
   transcriptsEnabled
-} from "../chunk-DTENGECG.js";
+} from "../chunk-TATE22GH.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-GZHQQP7J.js";
+import "../chunk-D536PHXF.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -55,10 +55,10 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-HZNZJTGH.js";
+} from "../chunk-5NQ3SMVP.js";
 import {
   repoKeyFor
-} from "../chunk-GMHQYX3D.js";
+} from "../chunk-NPO3ZTR4.js";
 import {
   askUser,
   cancelQuestion,
@@ -70,30 +70,30 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-FD6KOIT2.js";
+} from "../chunk-YG3NFC5N.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-VIQ5OS5E.js";
-import "../chunk-AQA63ZWO.js";
-import "../chunk-KHOWMC57.js";
+} from "../chunk-GIE7PLZD.js";
+import "../chunk-ZZ7VB6QC.js";
+import "../chunk-XSUWXBHF.js";
 import {
   getMachineId
-} from "../chunk-FZ2SHXUE.js";
+} from "../chunk-LWAYXE7G.js";
 import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-METUT7V4.js";
+import "../chunk-AERRQEWZ.js";
 import {
   claudeConfigDir
-} from "../chunk-274CV7IW.js";
-import "../chunk-OXOYS3UG.js";
+} from "../chunk-SMIU5URV.js";
+import "../chunk-T7FPZN5V.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-32OSSYGZ.js";
+} from "../chunk-X2KK42JA.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-X2MTVD4W.js";
+} from "../chunk-AZ56FPRG.js";
 import "../chunk-QTOLNRET.js";
 import {
   DECISION_STOP_REASON,
@@ -106,7 +106,7 @@ import {
   refusesWhenUnanswered,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-RQOT6QL3.js";
+} from "../chunk-JGEPODEP.js";
 import "../chunk-MLKGABMK.js";
 
 // src/wrapper/localPassthrough.ts

package/dist/bin/pushary-clean.js

@@ -15,30 +15,30 @@ import {
   storedMacAppState,
   storedPusharyKeychainServices,
   waitForMacAppExit
-} from "../chunk-FULXDMAP.js";
+} from "../chunk-OJFOIKRM.js";
 import {
   PUSHARY_SKILL_NAME,
   PUSHARY_SKILL_SOURCE,
   createGuards
 } from "../chunk-EUW7JL2K.js";
-import "../chunk-2LI3DF7Q.js";
+import "../chunk-YMBJU4CT.js";
 import "../chunk-XCEN33UP.js";
 import {
   describeCliKeyRevocation,
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-PIGBU7D3.js";
+} from "../chunk-JEZGDP55.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-AUYMNTUX.js";
+} from "../chunk-J7BLYQ7Z.js";
 import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-AVKD5QS4.js";
+} from "../chunk-NHC5YUH6.js";
 import {
   configFileHoldsMacAppKey,
   macAppKeepsMcpEntry,
@@ -46,22 +46,22 @@ import {
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-PK6WI4HH.js";
-import "../chunk-XLKO2XEG.js";
+} from "../chunk-B3KPRSCM.js";
+import "../chunk-VMQEB56V.js";
 import {
   HERMES_CONFIG_FILE,
   defaultHermesHome,
   hermesReceiptPaths,
   removeHermesWiring
-} from "../chunk-KLDUATG5.js";
+} from "../chunk-6W2ASRZO.js";
 import "../chunk-QCGNGEGE.js";
 import {
   planClineRemoval,
   planFxRemoval,
   removeClineServer
-} from "../chunk-SSJDAX4E.js";
-import "../chunk-N2FDORN6.js";
-import "../chunk-D5G2HSQ6.js";
+} from "../chunk-DOMDCMGC.js";
+import "../chunk-QWCOMSDH.js";
+import "../chunk-ONZ3UGNY.js";
 import {
   OPENCODE_ASKED_PERMISSIONS,
   OPENCODE_PLUGIN_SIBLING,
@@ -75,15 +75,15 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-72ILLFCY.js";
+} from "../chunk-AN26S5DC.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-77L2TNJW.js";
-import "../chunk-YSOZVBFW.js";
+} from "../chunk-YRWGCYHH.js";
+import "../chunk-BJRLJJS2.js";
 import {
   compatibleConfigFile,
   compatibleDocuments,
@@ -95,10 +95,10 @@ import {
   removeCompatibleHooks,
   removeCompatibleMcpServer,
   serializeConfigDocument
-} from "../chunk-DJPNVVJQ.js";
+} from "../chunk-LRS4TJU2.js";
 import {
   disableDaemonService
-} from "../chunk-TXRV7AOA.js";
+} from "../chunk-G3J5JKEJ.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -107,9 +107,9 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-NFWZVY25.js";
-import "../chunk-ZK5WYAMI.js";
-import "../chunk-CJ3W7XRU.js";
+} from "../chunk-WOZLV3LN.js";
+import "../chunk-EVJRITSI.js";
+import "../chunk-MZ6GL46A.js";
 import {
   parseFlags
 } from "../chunk-NMUI3ZWG.js";
@@ -119,21 +119,21 @@ import {
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-GZHQQP7J.js";
+} from "../chunk-D536PHXF.js";
 import "../chunk-E46NE7FB.js";
-import "../chunk-HZNZJTGH.js";
-import "../chunk-GMHQYX3D.js";
-import "../chunk-FD6KOIT2.js";
+import "../chunk-5NQ3SMVP.js";
+import "../chunk-NPO3ZTR4.js";
+import "../chunk-YG3NFC5N.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-VIQ5OS5E.js";
-import "../chunk-AQA63ZWO.js";
-import "../chunk-KHOWMC57.js";
-import "../chunk-FZ2SHXUE.js";
+import "../chunk-GIE7PLZD.js";
+import "../chunk-ZZ7VB6QC.js";
+import "../chunk-XSUWXBHF.js";
+import "../chunk-LWAYXE7G.js";
 import "../chunk-PPY5N2E6.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-METUT7V4.js";
+import "../chunk-AERRQEWZ.js";
 import {
   claudeConfigDir,
   claudeJson,
@@ -176,20 +176,20 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-274CV7IW.js";
+} from "../chunk-SMIU5URV.js";
 import {
   cleanNpmEnv,
   globalPackageState,
   npmIsOnPath,
   readGlobalFolder,
   readGlobalPrefix
-} from "../chunk-OXOYS3UG.js";
+} from "../chunk-T7FPZN5V.js";
 import {
   getBaseUrl
-} from "../chunk-32OSSYGZ.js";
+} from "../chunk-X2KK42JA.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-X2MTVD4W.js";
+} from "../chunk-AZ56FPRG.js";
 import {
   CLI_PACKAGE_NAMES,
   globalPackageFolder,
@@ -203,7 +203,7 @@ import {
   SUPPORT_EMAIL,
   isValidApiKey,
   redactSecrets
-} from "../chunk-RQOT6QL3.js";
+} from "../chunk-JGEPODEP.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-clean.ts

package/dist/bin/pushary-codex-bridge.js

@@ -1,43 +1,43 @@
 #!/usr/bin/env node
 import {
   runCodexBridge
-} from "../chunk-CPYVVEJP.js";
-import "../chunk-XZKSUJ55.js";
+} from "../chunk-MGF7D2ZL.js";
+import "../chunk-3FY5ZPIZ.js";
 import {
   resolveProviderBinary
-} from "../chunk-EAJUFO7Q.js";
-import "../chunk-YAA6MT6O.js";
+} from "../chunk-7OYWCOVC.js";
+import "../chunk-LKAO35SY.js";
 import {
   withSpawnProcessOwnership
-} from "../chunk-JWRDCANS.js";
-import "../chunk-YSOZVBFW.js";
-import "../chunk-NWN6GGJL.js";
+} from "../chunk-ITKAMUHG.js";
+import "../chunk-BJRLJJS2.js";
+import "../chunk-LA3MMHLO.js";
 import {
   transcriptsEnabled
-} from "../chunk-DTENGECG.js";
+} from "../chunk-TATE22GH.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-GZHQQP7J.js";
-import "../chunk-GMHQYX3D.js";
-import "../chunk-FD6KOIT2.js";
+import "../chunk-D536PHXF.js";
+import "../chunk-NPO3ZTR4.js";
+import "../chunk-YG3NFC5N.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-VIQ5OS5E.js";
-import "../chunk-AQA63ZWO.js";
-import "../chunk-KHOWMC57.js";
+import "../chunk-GIE7PLZD.js";
+import "../chunk-ZZ7VB6QC.js";
+import "../chunk-XSUWXBHF.js";
 import {
   getMachineId
-} from "../chunk-FZ2SHXUE.js";
+} from "../chunk-LWAYXE7G.js";
 import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-METUT7V4.js";
-import "../chunk-274CV7IW.js";
-import "../chunk-OXOYS3UG.js";
+import "../chunk-AERRQEWZ.js";
+import "../chunk-SMIU5URV.js";
+import "../chunk-T7FPZN5V.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-32OSSYGZ.js";
-import "../chunk-X2MTVD4W.js";
+} from "../chunk-X2KK42JA.js";
+import "../chunk-AZ56FPRG.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-RQOT6QL3.js";
+import "../chunk-JGEPODEP.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-codex-bridge.ts

package/dist/bin/pushary-codex-hook.js

@@ -1,38 +1,38 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-UC2J5RR4.js";
+} from "../chunk-BZ7XGS5L.js";
 import {
   askAgentQuestions,
   defersToNativeMode,
   reportMachineDenial
-} from "../chunk-7FWZNWIO.js";
+} from "../chunk-4QPF4BGP.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-7YJSDXLM.js";
+} from "../chunk-XJMUEOXT.js";
 import {
   triggerAutoUpdate
-} from "../chunk-4BXI6WJI.js";
+} from "../chunk-IPSO7DUB.js";
 import {
   readHookInput
-} from "../chunk-WOJW23ZD.js";
+} from "../chunk-HR6M44CX.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-SKTZKAGH.js";
-import "../chunk-N2WAXSJY.js";
-import "../chunk-QZPRCMPV.js";
-import "../chunk-DJPNVVJQ.js";
-import "../chunk-TXRV7AOA.js";
-import "../chunk-NFWZVY25.js";
-import "../chunk-ZK5WYAMI.js";
-import "../chunk-CJ3W7XRU.js";
+} from "../chunk-3CN2EFKK.js";
+import "../chunk-IYMYGKFB.js";
+import "../chunk-FTOKESSK.js";
+import "../chunk-LRS4TJU2.js";
+import "../chunk-G3J5JKEJ.js";
+import "../chunk-WOZLV3LN.js";
+import "../chunk-EVJRITSI.js";
+import "../chunk-MZ6GL46A.js";
 import "../chunk-NMUI3ZWG.js";
-import "../chunk-NWN6GGJL.js";
-import "../chunk-DTENGECG.js";
+import "../chunk-LA3MMHLO.js";
+import "../chunk-TATE22GH.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-GZHQQP7J.js";
+import "../chunk-D536PHXF.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -76,10 +76,10 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   userScope
-} from "../chunk-HZNZJTGH.js";
+} from "../chunk-5NQ3SMVP.js";
 import {
   repoKeyFor
-} from "../chunk-GMHQYX3D.js";
+} from "../chunk-NPO3ZTR4.js";
 import {
   askUser,
   cancelQuestion,
@@ -94,31 +94,31 @@ import {
   sendNotification,
   unavailableQuestionUnlessRefused,
   waitForQuestion
-} from "../chunk-FD6KOIT2.js";
+} from "../chunk-YG3NFC5N.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-VIQ5OS5E.js";
-import "../chunk-AQA63ZWO.js";
-import "../chunk-KHOWMC57.js";
+} from "../chunk-GIE7PLZD.js";
+import "../chunk-ZZ7VB6QC.js";
+import "../chunk-XSUWXBHF.js";
 import {
   getMachineId
-} from "../chunk-FZ2SHXUE.js";
+} from "../chunk-LWAYXE7G.js";
 import "../chunk-PPY5N2E6.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-METUT7V4.js";
+import "../chunk-AERRQEWZ.js";
 import {
   canonicalJson
-} from "../chunk-274CV7IW.js";
+} from "../chunk-SMIU5URV.js";
 import {
   writeFileAtomic
-} from "../chunk-OXOYS3UG.js";
+} from "../chunk-T7FPZN5V.js";
 import {
   getApiKey
-} from "../chunk-32OSSYGZ.js";
-import "../chunk-X2MTVD4W.js";
+} from "../chunk-X2KK42JA.js";
+import "../chunk-AZ56FPRG.js";
 import "../chunk-QTOLNRET.js";
 import {
   CODEX_RESCUE_TOOL_NAME,
@@ -148,7 +148,7 @@ import {
   resolveGate,
   scopeBreachReasonOf,
   unapprovedScopeReason
-} from "../chunk-RQOT6QL3.js";
+} from "../chunk-JGEPODEP.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-codex-hook.ts
@@ -808,7 +808,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-TRR4XB6N.js");
+    const { repairCodexHolds } = await import("../reapply-MSIZJULX.js");
     repairCodexHolds();
   } catch {
     return;