@pushary/agent-hooks 0.49.0 → 0.50.0

package/dist/bin/pushary-claude.js

@@ -16,12 +16,12 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -343,7 +343,7 @@ var createRemoteApprover = (deps) => {
       const sessionId = deps.getSessionId?.();
       const modeState = await fetchModeState2(deps.apiKey, sessionId);
       if (modeState.kill) return deny("Stopped by user \u2014 this agent was halted from Pushary");
-      const policyConfig = await getPolicy2(deps.apiKey, modeState.policyVersion);
+      const policyConfig = await getPolicy2(deps.apiKey, modeState.policyVersion, "claude_code");
       const policy = resolvePolicy2(policyConfig, toolName, modeState.mode, input);
       if (policy.timeoutSeconds === 0 && policy.timeoutAction === "approve") return allow(input);
       if (policy.timeoutSeconds === 0 && policy.timeoutAction === "deny") {
@@ -509,7 +509,7 @@ var startCommandPoller = (opts) => {
     schedule(nextDelay());
   };
   schedule(fast);
-  opts.log?.("[pushary] wrapper command poller active (experimental)");
+  opts.log?.("[pushary] command poller active");
   return {
     stop() {
       stopped = true;
@@ -1130,6 +1130,11 @@ var runDualMode = async (binary, args2, startingMode) => {
   const agentName = `Claude Code - ${projectName}`;
   const machineId = getMachineId();
   const stdin = createStdinHandoff();
+  const verbose = process.env.PUSHARY_VERBOSE === "1";
+  const verboseLog = (message) => {
+    if (verbose) process.stderr.write(`${message}
+`);
+  };
   const { initialPrompt, resume, permissionMode } = parseRemoteArgs(args2);
   const userManagesSession = args2.some((a) => SESSION_FLAG_RE.test(a));
   let sessionId = resume;
@@ -1164,10 +1169,8 @@ var runDualMode = async (binary, args2, startingMode) => {
       agentType: "claude_code",
       getSessionId: () => sessionId,
       onCommand: (command) => onPhoneCommand(command),
-      onFatal: (message) => process.stderr.write(`[pushary] relay unavailable (${message}); using polling
-`),
-      log: (message) => process.stderr.write(`${message}
-`)
+      onFatal: (message) => verboseLog(`[pushary] relay unavailable (${message}); using polling`),
+      log: verboseLog
     });
     relay.start();
   }
@@ -1228,8 +1231,7 @@ var runDualMode = async (binary, args2, startingMode) => {
         activeLeg?.stop("kill");
       }
     },
-    log: (message) => process.stderr.write(`${message}
-`)
+    log: verboseLog
   });
   const signals = ["SIGINT", "SIGTERM", "SIGHUP"];
   const onSignal = () => {
@@ -1265,6 +1267,9 @@ var runDualMode = async (binary, args2, startingMode) => {
   };
   try {
     if (sessionId && startingMode === "local") {
+      process.stderr.write(
+        "[pushary] reachable from your phone \u2014 send an instruction from the app when this goes idle (Ctrl-] keeps the terminal).\n"
+      );
       void announcePresence("session_start", "Session ready \u2014 reachable from your phone");
     }
     if (startingMode === "remote" && initialPrompt) input.push(userMessage(initialPrompt));

package/dist/bin/pushary-clean.js

@@ -1,20 +1,20 @@
 #!/usr/bin/env node
 import {
   removeClaudeAlias
-} from "../chunk-OW2AJ74U.js";
+} from "../chunk-BC3VCZ3E.js";
 import {
   removeCodexHooks,
   removeGeminiSettings,
   removeInstructionBlock
-} from "../chunk-SVVEC4QV.js";
+} from "../chunk-FDRSMTJS.js";
 import {
   execNpm
 } from "../chunk-J7JWI3KU.js";
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-7EW3USQF.js";
-import "../chunk-Z5PL3K7C.js";
+} from "../chunk-PUT2N5VA.js";
+import "../chunk-WI3F6XNZ.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, writeFileSync, rmSync, readdirSync } from "fs";
@@ -277,6 +277,13 @@ var main = async () => {
   console.log();
   console.log(`  ${green(bold("Clean complete."))}`);
   console.log(`  ${dim("Run")} npx @pushary/agent-hooks@latest setup ${dim("to reinstall.")}`);
+  if (aliasRemovedFrom.length > 0) {
+    console.log();
+    console.log(`  ${yellow("!")} ${bold("One thing left in your current terminal.")}`);
+    console.log(`  ${dim("It still has the")} ${bold("claude")} ${dim("alias loaded from before. Run")} ${bold("unalias claude")}`);
+    console.log(`  ${dim("(or open a new terminal) so")} ${bold("claude")} ${dim("runs Claude Code again.")}`);
+  }
+  console.log(`  ${dim("If a")} ${bold("pushary claude")} ${dim("or")} ${bold("pushary daemon")} ${dim("is still running anywhere, stop it (Ctrl-C).")}`);
   console.log();
 };
 main();

package/dist/bin/pushary-codex-hook.js

@@ -31,21 +31,21 @@ import {
   toCodexWire,
   toPolicyLookup,
   waitForAnswer
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-R5AJNXZS.js";
+} from "../chunk-V42K3XQI.js";
 import "../chunk-DWED7BS3.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-Z5PL3K7C.js";
+} from "../chunk-WI3F6XNZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";
@@ -170,7 +170,7 @@ var decidePermissionRequest = async (input) => {
     const modeState = await fetchModeState(apiKey, input.session_id);
     if (modeState.kill) return codexDeny(KILL_REASON);
     const lookup = toPolicyLookup(input.tool_name ?? "", input.tool_input ?? {}, input.cwd);
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "codex");
     const toolPolicy = resolvePolicy(policy, lookup.tool, modeState.mode, lookup.input);
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return codexAllow();
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {
@@ -229,7 +229,7 @@ var decidePreToolUse = async (input) => {
     const modeState = await fetchModeState(apiKey, input.session_id);
     if (modeState.kill) return codexDeny(KILL_REASON);
     const lookup = toPolicyLookup(input.tool_name ?? "", input.tool_input ?? {}, input.cwd);
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "codex");
     const toolPolicy = resolvePolicy(policy, lookup.tool, modeState.mode, lookup.input);
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return codexPass();
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {

package/dist/bin/pushary-codex.js

@@ -3,12 +3,12 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-daemon.js

@@ -14,8 +14,9 @@ import {
 } from "../chunk-NKXSILEW.js";
 
 // src/spawn-daemon.ts
+import { spawn } from "child_process";
 import { existsSync } from "fs";
-import { basename } from "path";
+import { basename, dirname, join } from "path";
 var DRAIN_PATH = "/api/agent/spawn/drain";
 var FAST_POLL_MS = 3e3;
 var SLOW_POLL_MS = 3e4;
@@ -43,6 +44,8 @@ var runSpawnDaemon = async () => {
   const machineId = getMachineId();
   const baseUrl = getBaseUrl();
   const pusharyBin = resolveGlobalBinary("pushary") ?? "pushary";
+  const siblingEntry = process.argv[1] ? join(dirname(process.argv[1]), "pushary.js") : "";
+  const spawnDirect = siblingEntry.length > 0 && existsSync(siblingEntry);
   let stopped = false;
   let idleTicks = 0;
   let errorStreak = 0;
@@ -50,20 +53,11 @@ var runSpawnDaemon = async () => {
   let timer;
   let inflight;
   const launch = (req) => {
-    if (!spawnRateAllows(spawnTimestamps, Date.now())) {
-      stderr(`[pushary] spawn rate limit reached; skipping a queued session
-`);
-      return;
-    }
     spawnTimestamps.push(Date.now());
     const cwd = req.cwd && existsSync(req.cwd) ? req.cwd : process.cwd();
+    const args = ["claude", "--remote", "-p", req.prompt];
     try {
-      const child = spawnClaude(pusharyBin, ["claude", "--remote", "-p", req.prompt], {
-        cwd,
-        detached: true,
-        stdio: "ignore",
-        env: process.env
-      });
+      const child = spawnDirect ? spawn(process.execPath, [siblingEntry, ...args], { cwd, detached: true, stdio: "ignore", env: process.env }) : spawnClaude(pusharyBin, args, { cwd, detached: true, stdio: "ignore", env: process.env });
       child.on("error", (err) => stderr(`[pushary] could not launch session: ${err.message}
 `));
       child.unref();
@@ -83,8 +77,8 @@ var runSpawnDaemon = async () => {
     });
     if (!res.ok) throw new Error(`drain ${res.status}`);
     const data = await res.json();
-    const spawn = data.spawn;
-    return spawn && typeof spawn.prompt === "string" && typeof spawn.id === "string" ? spawn : null;
+    const spawn2 = data.spawn;
+    return spawn2 && typeof spawn2.prompt === "string" && typeof spawn2.id === "string" ? spawn2 : null;
   };
   const nextDelay = () => {
     if (errorStreak > 0) return Math.min(SLOW_POLL_MS * 2 ** (errorStreak - 1), MAX_ERROR_BACKOFF_MS);
@@ -93,6 +87,10 @@ var runSpawnDaemon = async () => {
   const jitter = (ms) => Math.max(1, Math.round(ms * (0.85 + Math.random() * 0.3)));
   const tick = async () => {
     if (stopped) return;
+    if (!spawnRateAllows(spawnTimestamps, Date.now())) {
+      timer = setTimeout(tick, jitter(nextDelay()));
+      return;
+    }
     const controller = new AbortController();
     inflight = controller;
     const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
@@ -119,18 +117,18 @@ var runSpawnDaemon = async () => {
     if (timer) clearTimeout(timer);
     inflight?.abort();
   };
-  const signals = ["SIGINT", "SIGTERM", "SIGHUP"];
-  const onSignal = () => {
-    teardown();
-    process.exit(0);
-  };
-  for (const signal of signals) process.on(signal, onSignal);
   stderr(
     `[pushary] daemon online \u2014 this machine (${machineId}) can now be sent a new session from your phone. Ctrl-C to stop.
 `
   );
   timer = setTimeout(tick, FAST_POLL_MS);
-  await new Promise(() => {
+  const signals = ["SIGINT", "SIGTERM", "SIGHUP"];
+  await new Promise((resolve) => {
+    const onSignal = () => {
+      teardown();
+      resolve();
+    };
+    for (const signal of signals) process.on(signal, onSignal);
   });
   return 0;
 };

package/dist/bin/pushary-doctor.js

@@ -11,18 +11,18 @@ import {
   missingGeminiHookEvents,
   readCodexMcpAuth,
   untrustedCodexHookEvents
-} from "../chunk-SVVEC4QV.js";
+} from "../chunk-FDRSMTJS.js";
 import {
   execNpm
 } from "../chunk-J7JWI3KU.js";
 import {
   readLedgerSummary
-} from "../chunk-R5AJNXZS.js";
+} from "../chunk-V42K3XQI.js";
 import {
   callMcpTool,
   sendMcpRequest
 } from "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import {
   getBaseUrl
 } from "../chunk-NKXSILEW.js";
@@ -342,6 +342,45 @@ var main = async () => {
     }
   }
   console.log();
+  console.log(`  ${dim("Remote control")}`);
+  const aliasRc = SHELL_FILES.find((f) => {
+    try {
+      return /alias\s+claude=['"]?pushary claude/.test(readFileSync(f, "utf-8"));
+    } catch {
+      return false;
+    }
+  });
+  if (aliasRc) {
+    if (globalVersion) {
+      check(true, "claude alias \u2192 pushary claude", `set in ${aliasRc.split("/").pop()}`);
+    } else {
+      check(false, "claude alias \u2192 pushary claude", "alias is set but pushary is not installed \u2014 run `unalias claude` (this shell) or reinstall");
+    }
+  } else {
+    console.log(`  ${dim("\u2013")} claude alias not set ${dim("(optional \u2014 run `pushary claude` directly, or re-run setup to add it)")}`);
+  }
+  if (apiKey) {
+    try {
+      const modeRes = await fetch(`${getBaseUrl()}/api/mcp/mode`, {
+        headers: { Authorization: `Bearer ${apiKey}` },
+        signal: AbortSignal.timeout(8e3)
+      });
+      const relayUrl = modeRes.ok ? (await modeRes.json()).relayUrl : void 0;
+      if (typeof relayUrl === "string" && relayUrl.length > 0) {
+        const healthUrl = relayUrl.replace(/^wss:/, "https:").replace(/\/relay$/, "/health/ready");
+        try {
+          const h = await fetch(healthUrl, { signal: AbortSignal.timeout(6e3) });
+          console.log(h.ok ? `  ${pass} Relay reachable ${dim("(sub-second phone commands)")}` : `  ${dim("\u2013")} Relay advertised but returned ${h.status} ${dim("(commands still delivered via polling)")}`);
+        } catch {
+          console.log(`  ${dim("\u2013")} Relay advertised but unreachable ${dim("(commands still delivered via polling)")}`);
+        }
+      } else {
+        console.log(`  ${dim("\u2013")} Relay not enabled ${dim("(phone commands delivered via polling)")}`);
+      }
+    } catch {
+    }
+  }
+  console.log();
   console.log(`  ${dim("Connectivity")}`);
   if (!apiKey) {
     check(false, "MCP server reachable", "skipped \u2014 no API key");

package/dist/bin/pushary-gemini-hook.js

@@ -23,21 +23,21 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-R5AJNXZS.js";
+} from "../chunk-V42K3XQI.js";
 import "../chunk-DWED7BS3.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-Z5PL3K7C.js";
+} from "../chunk-WI3F6XNZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";
@@ -209,7 +209,7 @@ var decideBeforeTool = async (input) => {
     const modeState = await fetchModeState(apiKey, input.session_id);
     if (modeState.kill) return geminiDeny(KILL_REASON);
     const lookup = toGeminiPolicyLookup(input.tool_name ?? "", input.tool_input ?? {});
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "gemini_cli");
     const toolPolicy = resolvePolicy(policy, lookup.tool, modeState.mode, lookup.input);
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return geminiAllow();
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "deny") {

package/dist/bin/pushary-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-OQMEGREX.js";
-import "../chunk-7EW3USQF.js";
+} from "../chunk-M24KUFLW.js";
+import "../chunk-PUT2N5VA.js";
 import "../chunk-KQYIHZ5E.js";
-import "../chunk-O5MFSRWV.js";
+import "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-R5AJNXZS.js";
+import "../chunk-V42K3XQI.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-hook.ts

package/dist/bin/pushary-notification-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-notification-hook.ts

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-OQMEGREX.js";
-import "../chunk-7EW3USQF.js";
+} from "../chunk-M24KUFLW.js";
+import "../chunk-PUT2N5VA.js";
 import "../chunk-KQYIHZ5E.js";
-import "../chunk-O5MFSRWV.js";
+import "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-R5AJNXZS.js";
+import "../chunk-V42K3XQI.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-permission-denied-hook.ts

package/dist/bin/pushary-permission-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-OQMEGREX.js";
-import "../chunk-7EW3USQF.js";
+} from "../chunk-M24KUFLW.js";
+import "../chunk-PUT2N5VA.js";
 import "../chunk-KQYIHZ5E.js";
-import "../chunk-O5MFSRWV.js";
+import "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-R5AJNXZS.js";
+import "../chunk-V42K3XQI.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-permission-hook.ts

package/dist/bin/pushary-post-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-post-hook.ts

package/dist/bin/pushary-prompt-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-prompt-hook.ts

package/dist/bin/pushary-session-end-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-session-end-hook.ts

package/dist/bin/pushary-session-start-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-session-start-hook.ts

package/dist/bin/pushary-setup.js

@@ -2,7 +2,7 @@
 import {
   installClaudeAlias,
   resolveShellRc
-} from "../chunk-OW2AJ74U.js";
+} from "../chunk-BC3VCZ3E.js";
 import {
   GEMINI_HOOK_BINARY,
   addCodexHookTrust,
@@ -13,7 +13,7 @@ import {
   renderAgentInstructions,
   renderProjectAgentInstructions,
   writeInstructionBlock
-} from "../chunk-SVVEC4QV.js";
+} from "../chunk-FDRSMTJS.js";
 import {
   execNpm,
   npmErrorMessage,
@@ -25,15 +25,15 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-7EW3USQF.js";
+} from "../chunk-PUT2N5VA.js";
 import {
   reportEvent
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
 import {
   isValidApiKey
-} from "../chunk-Z5PL3K7C.js";
+} from "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-setup.ts

package/dist/bin/pushary-stats.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   readLedgerSummary
-} from "../chunk-R5AJNXZS.js";
-import "../chunk-Z5PL3K7C.js";
+} from "../chunk-V42K3XQI.js";
+import "../chunk-WI3F6XNZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-stop-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stop-hook.ts

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stopfailure-hook.ts

package/dist/bin/pushary-upgrade.js

@@ -8,8 +8,8 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-7EW3USQF.js";
-import "../chunk-Z5PL3K7C.js";
+} from "../chunk-PUT2N5VA.js";
+import "../chunk-WI3F6XNZ.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/{chunk-OW2AJ74U.js → chunk-BC3VCZ3E.js}

@@ -37,7 +37,9 @@ var resolveShellRc = () => {
   if (shell === "zsh") return { path: join(home, ".zshrc"), shell };
   if (shell === "bash") {
     const bashrc = join(home, ".bashrc");
-    return { path: existsSync(bashrc) ? bashrc : join(home, ".bash_profile"), shell };
+    const profile = join(home, ".bash_profile");
+    if (process.platform === "darwin") return { path: profile, shell };
+    return { path: existsSync(bashrc) ? bashrc : profile, shell };
   }
   return null;
 };

package/dist/{chunk-SVVEC4QV.js → chunk-FDRSMTJS.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-Z5PL3K7C.js";
+} from "./chunk-WI3F6XNZ.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";

package/dist/{chunk-OQMEGREX.js → chunk-M24KUFLW.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS
-} from "./chunk-7EW3USQF.js";
+} from "./chunk-PUT2N5VA.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -23,19 +23,19 @@ import {
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-O5MFSRWV.js";
+} from "./chunk-SCXPHMAS.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-R5AJNXZS.js";
+} from "./chunk-V42K3XQI.js";
 import {
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "./chunk-Z5PL3K7C.js";
+} from "./chunk-WI3F6XNZ.js";
 import {
   getApiKey
 } from "./chunk-NKXSILEW.js";
@@ -322,7 +322,7 @@ var handlePreToolUse = async (input) => {
   }
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code");
     if (modeState.kill) {
       return deny("Stopped by user \u2014 this agent was halted from Pushary");
     }
@@ -374,7 +374,7 @@ var handlePermissionRequest = async (input) => {
   }
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
-    const policy = await getPolicy(apiKey, modeState.policyVersion);
+    const policy = await getPolicy(apiKey, modeState.policyVersion, "claude_code");
     if (modeState.kill) return permReqDeny("Stopped by user \u2014 this agent was halted from Pushary");
     const toolPolicy = resolvePolicy(policy, input.tool_name, modeState.mode, input.tool_input);
     if (toolPolicy.timeoutSeconds === 0 && toolPolicy.timeoutAction === "approve") return permReqAllow();

package/dist/{chunk-7EW3USQF.js → chunk-PUT2N5VA.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-Z5PL3K7C.js";
+} from "./chunk-WI3F6XNZ.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-O5MFSRWV.js → chunk-SCXPHMAS.js}

@@ -8,6 +8,7 @@ import {
 import {
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
+  classifyDecisionRisk,
   extractPolicyArg,
   isApprovalMode,
   isSafeReadOnlyCommand,
@@ -15,7 +16,7 @@ import {
   matchToolPattern,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-Z5PL3K7C.js";
+} from "./chunk-WI3F6XNZ.js";
 import {
   getApiKey,
   getBaseUrl
@@ -46,14 +47,15 @@ var isWaitForAnswerResponse = (data) => {
 
 // src/policy.ts
 var CACHE_TTL_MS = 60 * 1e3;
-var cacheFile = (apiKey) => {
-  const hash = createHash("sha256").update(apiKey).digest("hex").slice(0, 12);
+var cacheFile = (apiKey, agent) => {
+  const hash = createHash("sha256").update(agent ? `${apiKey}:${agent}` : apiKey).digest("hex").slice(0, 12);
   return join(tmpdir(), `pushary-policy-${hash}.json`);
 };
-var fetchPolicy = async (apiKey) => {
+var fetchPolicy = async (apiKey, agent) => {
   return withRetry(async () => {
     const baseUrl = getBaseUrl();
-    const response = await fetch(`${baseUrl}/api/mcp/policy`, {
+    const url = agent ? `${baseUrl}/api/mcp/policy?agent=${encodeURIComponent(agent)}` : `${baseUrl}/api/mcp/policy`;
+    const response = await fetch(url, {
       headers: { "Authorization": `Bearer ${apiKey}` },
       signal: AbortSignal.timeout(1e4)
     });
@@ -65,8 +67,8 @@ var fetchPolicy = async (apiKey) => {
     return raw;
   }, { maxAttempts: 2 });
 };
-var getPolicy = async (apiKey, expectedVersion) => {
-  const path = cacheFile(apiKey);
+var getPolicy = async (apiKey, expectedVersion, agent) => {
+  const path = cacheFile(apiKey, agent);
   let staleCache = null;
   if (existsSync(path)) {
     try {
@@ -83,7 +85,7 @@ var getPolicy = async (apiKey, expectedVersion) => {
     }
   }
   try {
-    const policy = await fetchPolicy(apiKey);
+    const policy = await fetchPolicy(apiKey, agent);
     try {
       writeFileSync(path, JSON.stringify({ ...policy, _cachedAt: Date.now(), _policyVersion: expectedVersion ?? null }), "utf-8");
     } catch {
@@ -141,6 +143,16 @@ var resolvePolicy = (config, toolName, modeOverride, toolInput) => {
   if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
     base = autoApprove(base.tool);
   }
+  const wouldAutoApprove = base.timeoutSeconds === 0 && base.timeoutAction === "approve";
+  if (!governedBySpecificRule && wouldAutoApprove && toolName === "Bash" && typeof arg === "string" && classifyDecisionRisk(toolName, arg) === "destructive") {
+    base = {
+      tool: base.tool,
+      timeoutSeconds: config.defaultTimeoutSeconds,
+      timeoutAction: "wait",
+      mode: "push_first",
+      pushFirstSeconds: config.defaultPushFirstSeconds ?? 20
+    };
+  }
   const effectiveOverride = modeOverride ?? config.modeOverride;
   if (effectiveOverride) {
     return { ...base, mode: effectiveOverride };

package/dist/{chunk-R5AJNXZS.js → chunk-V42K3XQI.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-Z5PL3K7C.js";
+} from "./chunk-WI3F6XNZ.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-Z5PL3K7C.js → chunk-WI3F6XNZ.js}

@@ -279,6 +279,31 @@ var API_KEY_PATTERN = /^pk_[a-f0-9]+\.[a-f0-9]+$/;
 var isValidApiKey = (value) => API_KEY_PATTERN.test(value);
 var ACTION_BODY_MAX = 4e3;
 var DECISION_LINE_MAX = 500;
+var APPROVAL_FATIGUE_FLAG_PATTERNS = [
+  /\brm\s+-[a-z]*r/i,
+  /\brmdir\b/i,
+  /git\s+push[^\n]*(--force|--force-with-lease|\s-f\b)/i,
+  /git\s+reset\s+--hard/i,
+  /git\s+clean\s+-[a-z]*f/i,
+  /\bdrop\s+(table|database|schema)\b/i,
+  /\bdelete\s+from\b/i,
+  /\btruncate\b/i,
+  /\b(deploy|publish|release)\b/i,
+  /\bnpm\s+publish\b/i,
+  /\bsudo\b/i,
+  /chmod\s+-?R?\s*777/i,
+  /\bkubectl\s+delete\b/i,
+  /\bterraform\s+(apply|destroy)\b/i,
+  /\bdocker\s+system\s+prune\b/i
+];
+var HIGH_CONSEQUENCE_PATTERNS = [
+  /(^|[\\/])\.env(\.|$|[\\/])/i,
+  /secrets?/i,
+  /credentials?/i,
+  /(^|[\\/])deploy/i,
+  /\.github[\\/]workflows/i,
+  /package\.json/i
+];
 var SECRET_REDACTION_RULES = [
   { pattern: /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, replacement: "[redacted key]" },
   { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, replacement: "[redacted]" },
@@ -303,6 +328,13 @@ var SECRET_REDACTION_RULES = [
 var HIGH_ENTROPY_RULE = { pattern: /[A-Za-z0-9+/]{40,}={0,2}/g, replacement: "[redacted]" };
 var redactSecrets = (text) => SECRET_REDACTION_RULES.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
 var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
+var classifyDecisionRisk = (toolName, toolTarget) => {
+  const parts = [toolName, toolTarget ?? ""];
+  const matchesAny = (patterns) => parts.some((part) => patterns.some((re) => re.test(part)));
+  if (matchesAny(APPROVAL_FATIGUE_FLAG_PATTERNS)) return "destructive";
+  if (matchesAny(HIGH_CONSEQUENCE_PATTERNS)) return "elevated";
+  return "standard";
+};
 
 export {
   isApprovalMode,
@@ -318,5 +350,6 @@ export {
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
   redactSecrets,
-  redactSecretsDeep
+  redactSecretsDeep,
+  classifyDecisionRisk
 };

package/dist/src/index.d.ts

@@ -26,7 +26,7 @@ interface ReceiptMeta {
     ok: boolean;
 }
 
-declare const getPolicy: (apiKey: string, expectedVersion?: string | null) => Promise<PolicyConfig>;
+declare const getPolicy: (apiKey: string, expectedVersion?: string | null, agent?: string) => Promise<PolicyConfig>;
 type AutoResolveOrigin = 'safe_readonly' | 'policy_timeout';
 declare const resolvePolicy: (config: PolicyConfig, toolName: string, modeOverride?: ApprovalMode | null, toolInput?: Record<string, unknown>) => ToolPolicy;
 interface ModeState {

package/dist/src/index.js

@@ -1,7 +1,7 @@
 import {
   handlePreToolUse
-} from "../chunk-OQMEGREX.js";
-import "../chunk-7EW3USQF.js";
+} from "../chunk-M24KUFLW.js";
+import "../chunk-PUT2N5VA.js";
 import "../chunk-KQYIHZ5E.js";
 import {
   askUser,
@@ -15,11 +15,11 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-O5MFSRWV.js";
+} from "../chunk-SCXPHMAS.js";
 import "../chunk-RN3NOEJF.js";
-import "../chunk-R5AJNXZS.js";
+import "../chunk-V42K3XQI.js";
 import "../chunk-DWED7BS3.js";
-import "../chunk-Z5PL3K7C.js";
+import "../chunk-WI3F6XNZ.js";
 import {
   getApiKey,
   getBaseUrl

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.49.0",
+  "version": "0.50.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",
@@ -73,12 +73,13 @@
   "scripts": {
     "build": "node scripts/bundle-plugin.mjs && tsup",
     "dev": "tsup --watch",
-    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/reapply.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts && bun test src/ledger.test.ts && bun test src/wrapper/wrapper.test.ts && bun test src/wrapper/messageQueue.test.ts && bun test src/wrapper/approver.test.ts && bun test src/wrapper/remoteLoop.test.ts && bun test src/wrapper/spawnClaude.test.ts && bun test src/wrapper/wsProtocol.test.ts && bun test src/wrapper/relayClient.test.ts && bun test src/wrapper/modeLoop.test.ts && bun test src/wrapper/stdinHandoff.test.ts && bun test src/wrapper/localLeg.test.ts"
+    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/reapply.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts && bun test src/ledger.test.ts && bun test src/wrapper/wrapper.test.ts && bun test src/wrapper/messageQueue.test.ts && bun test src/wrapper/approver.test.ts && bun test src/wrapper/remoteLoop.test.ts && bun test src/wrapper/spawnClaude.test.ts && bun test src/wrapper/wsProtocol.test.ts && bun test src/wrapper/relayClient.test.ts && bun test src/wrapper/modeLoop.test.ts && bun test src/wrapper/stdinHandoff.test.ts && bun test src/wrapper/localLeg.test.ts && bun test src/crypto.test.ts && bun test src/transcript-capture.test.ts"
   },
   "dependencies": {
     "@inquirer/prompts": "^8.4.2",
     "qrcode-terminal": "^0.12.0",
-    "smol-toml": "^1.6.1"
+    "smol-toml": "^1.6.1",
+    "tweetnacl": "^1.0.3"
   },
   "devDependencies": {
     "@pushary/contracts": "workspace:*",