diff --git a/package.json b/package.json
index 1fb6957..a48414b 100644
--- a/package.json
+++ b/package.json
@@ -8,7 +8,7 @@
   "type": "module",
   "private": true,
   "dependencies": {
-    "@gotgenes/pi-permission-system": "^25.3.0"
+    "@gotgenes/pi-permission-system": "^25.4.0"
   },
   "pi": {
     "extensions": [
diff --git a/packages/pi-permission-ai-judge/package.json b/packages/pi-permission-ai-judge/package.json
index 46eeda0..d4c01c8 100644
--- a/packages/pi-permission-ai-judge/package.json
+++ b/packages/pi-permission-ai-judge/package.json
@@ -14,12 +14,12 @@
   "peerDependencies": {
     "@earendil-works/pi-ai": "*",
     "@earendil-works/pi-coding-agent": "*",
-    "@gotgenes/pi-permission-system": ">=25.3.0"
+    "@gotgenes/pi-permission-system": ">=25.4.0"
   },
   "devDependencies": {
     "@earendil-works/pi-ai": "*",
     "@earendil-works/pi-coding-agent": "*",
-    "@gotgenes/pi-permission-system": ">=25.3.0",
+    "@gotgenes/pi-permission-system": ">=25.4.0",
     "@types/node": "^26.0.0",
     "typescript": "^5",
     "vitest": "^3"
diff --git a/packages/pi-permission-inner-cmd/package.json b/packages/pi-permission-inner-cmd/package.json
index a55e3b3..2db765a 100644
--- a/packages/pi-permission-inner-cmd/package.json
+++ b/packages/pi-permission-inner-cmd/package.json
@@ -12,7 +12,7 @@
     ]
   },
   "dependencies": {
-    "@gotgenes/pi-permission-system": ">=25.3.0"
+    "@gotgenes/pi-permission-system": "^25.4.0"
   },
   "bundledDependencies": [
     "@gotgenes/pi-permission-system"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 9b8568c..9161b60 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -208,8 +208,8 @@ importers:
   .:
     dependencies:
       '@gotgenes/pi-permission-system':
-        specifier: ^25.3.0
-        version: 25.3.0(@earendil-works/pi-coding-agent@0.84.1)(@earendil-works/pi-tui@0.84.1)
+        specifier: ^25.4.0
+        version: 25.4.0(@earendil-works/pi-coding-agent@0.84.1)(@earendil-works/pi-tui@0.84.1)
 
   packages/pi-permission-ai-judge:
     devDependencies:
@@ -220,8 +220,8 @@ importers:
         specifier: '*'
         version: 0.84.1(ws@8.21.2)(zod@4.4.3)
       '@gotgenes/pi-permission-system':
-        specifier: '>=25.3.0'
-        version: 25.3.0(@earendil-works/pi-coding-agent@0.84.1)(@earendil-works/pi-tui@0.84.1)
+        specifier: '>=25.4.0'
+        version: 25.4.0(@earendil-works/pi-coding-agent@0.84.1)(@earendil-works/pi-tui@0.84.1)
       '@types/node':
         specifier: ^26.0.0
         version: 26.1.2
@@ -235,8 +235,8 @@ importers:
   packages/pi-permission-inner-cmd:
     dependencies:
       '@gotgenes/pi-permission-system':
-        specifier: '>=25.3.0'
-        version: 25.3.0(@earendil-works/pi-coding-agent@0.84.1)(@earendil-works/pi-tui@0.84.1)
+        specifier: ^25.4.0
+        version: 25.4.0(@earendil-works/pi-coding-agent@0.84.1)(@earendil-works/pi-tui@0.84.1)
     devDependencies:
       '@earendil-works/pi-ai':
         specifier: '*'
@@ -561,8 +561,8 @@ packages:
       '@modelcontextprotocol/sdk':
         optional: true
 
-  '@gotgenes/pi-permission-system@25.3.0':
-    resolution: {integrity: sha512-L72uZOIZQE4TAv0fjFD9l1lt3QSRbo2nfmWsvZZ6JX7+o/+V6KmVP6U5KqJ4pVSTKsK3/6YgXgie5tgeTRkQlg==}
+  '@gotgenes/pi-permission-system@25.4.0':
+    resolution: {integrity: sha512-aScZEf4OZV3RN1Fw9s/nvVZ/wDJIaD8NOujkRbfYVUBr+nWJxoyn+tIS8PbLHAatysR9NnOuibLJROK9ijcb0g==}
     engines: {node: '>=22'}
     peerDependencies:
       '@earendil-works/pi-coding-agent': '>=0.79.0'
@@ -1815,7 +1815,7 @@ snapshots:
       - supports-color
       - utf-8-validate
 
-  '@gotgenes/pi-permission-system@25.3.0(@earendil-works/pi-coding-agent@0.84.1)(@earendil-works/pi-tui@0.84.1)':
+  '@gotgenes/pi-permission-system@25.4.0(@earendil-works/pi-coding-agent@0.84.1)(@earendil-works/pi-tui@0.84.1)':
     dependencies:
       '@earendil-works/pi-coding-agent': 0.84.1(ws@8.21.2)(zod@4.4.3)
       '@earendil-works/pi-tui': 0.84.1