@pushary/agent-hooks 0.59.0 → 0.61.0

package/dist/chunk-UKNAAVEE.js

@@ -0,0 +1,217 @@
+import {
+  NetworkError
+} from "./chunk-7QLSKOSU.js";
+import {
+  EXIT
+} from "./chunk-SML23YOT.js";
+import {
+  isValidApiKey
+} from "./chunk-DQAN3JQP.js";
+import {
+  getBaseUrl
+} from "./chunk-2UMNXADU.js";
+
+// src/cli/net.ts
+import { createRequire } from "module";
+var requireCjs = createRequire(import.meta.url);
+var PROXY_VARS = ["HTTPS_PROXY", "https_proxy", "HTTP_PROXY", "http_proxy"];
+var proxyFromEnv = () => {
+  for (const name of PROXY_VARS) {
+    const value = process.env[name]?.trim();
+    if (value) return value;
+  }
+  return void 0;
+};
+var installed = false;
+var installProxyDispatcher = () => {
+  if (installed) return;
+  installed = true;
+  if (!proxyFromEnv()) return;
+  try {
+    const { EnvHttpProxyAgent, setGlobalDispatcher } = requireCjs("undici");
+    setGlobalDispatcher(new EnvHttpProxyAgent());
+  } catch {
+  }
+};
+var isNetworkFailure = (err) => {
+  if (!(err instanceof Error)) return false;
+  const code = err.code;
+  if (code && ["ENOTFOUND", "ECONNREFUSED", "ECONNRESET", "ETIMEDOUT", "EAI_AGAIN", "EPROTO", "CERT_HAS_EXPIRED", "UNABLE_TO_VERIFY_LEAF_SIGNATURE"].includes(code)) {
+    return true;
+  }
+  return err.name === "AbortError" || err.name === "TimeoutError" || /fetch failed/i.test(err.message);
+};
+var DEFAULT_TIMEOUT_MS = 15e3;
+var pusharyFetch = async (url, init = {}) => {
+  installProxyDispatcher();
+  const { timeoutMs = DEFAULT_TIMEOUT_MS, signal, ...rest } = init;
+  try {
+    return await fetch(url, {
+      ...rest,
+      signal: signal ?? AbortSignal.timeout(timeoutMs)
+    });
+  } catch (err) {
+    if (isNetworkFailure(err)) {
+      const proxy = proxyFromEnv();
+      const via = proxy ? ` (via proxy ${proxy})` : "";
+      throw new NetworkError(`Could not reach ${new URL(url).host}${via}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    throw err;
+  }
+};
+
+// src/session.ts
+var IDENTITY_PATH = "/api/v1/server/identity";
+var DEFAULT_TIMEOUT_MS2 = 1e4;
+var SUBSCRIPTION_REQUIRED_CODE = "subscription_required";
+var DEFAULT_UPGRADE_PATH = "/dashboard/settings?tab=billing";
+var KEY_SCOPES = ["full_access", "connector", "bound"];
+var SUBSCRIPTION_STATUSES = [
+  "active",
+  "past_due",
+  "canceled",
+  "incomplete",
+  "trialing",
+  "expired",
+  "none"
+];
+var asString = (value) => typeof value === "string" && value ? value : null;
+var asScope = (value) => KEY_SCOPES.includes(value) ? value : "full_access";
+var asStatus = (value) => SUBSCRIPTION_STATUSES.includes(value) ? value : "none";
+var asCount = (value) => typeof value === "number" && Number.isFinite(value) ? Math.max(0, Math.trunc(value)) : 0;
+var absoluteUrl = (baseUrl, pathOrUrl) => {
+  if (/^https?:\/\//i.test(pathOrUrl)) return pathOrUrl;
+  return `${baseUrl.replace(/\/+$/, "")}${pathOrUrl.startsWith("/") ? "" : "/"}${pathOrUrl}`;
+};
+var toIdentity = (body) => {
+  if (typeof body !== "object" || body === null) return null;
+  const raw = body;
+  const keyId = asString(raw.keyId);
+  const siteId = asString(raw.siteId);
+  if (!keyId || !siteId) return null;
+  return {
+    keyId,
+    keyPrefix: asString(raw.keyPrefix) ?? "",
+    keyName: asString(raw.keyName) ?? "",
+    keyScope: asScope(raw.keyScope),
+    siteId,
+    siteSlug: asString(raw.siteSlug) ?? "",
+    siteName: asString(raw.siteName) ?? "",
+    workspaceId: asString(raw.workspaceId) ?? "",
+    plan: asString(raw.plan) ?? "unknown",
+    surfacePlan: asString(raw.surfacePlan) ?? "unknown",
+    subscriptionStatus: asStatus(raw.subscriptionStatus),
+    locked: raw.locked === true,
+    machineId: asString(raw.machineId),
+    authorizedUserId: asString(raw.authorizedUserId),
+    workspaceMembers: asCount(raw.workspaceMembers),
+    createdAt: asString(raw.createdAt),
+    lastUsedAt: asString(raw.lastUsedAt)
+  };
+};
+var readJsonBody = async (response) => {
+  try {
+    return await response.json();
+  } catch {
+    return null;
+  }
+};
+var checkApiKey = async (apiKey, options = {}) => {
+  if (!isValidApiKey(apiKey)) return { kind: "malformed" };
+  const baseUrl = options.baseUrl ?? getBaseUrl();
+  const fetchImpl = options.fetchImpl ?? pusharyFetch;
+  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
+  let response;
+  try {
+    response = await fetchImpl(`${baseUrl.replace(/\/+$/, "")}${IDENTITY_PATH}`, {
+      headers: { Authorization: `Bearer ${apiKey}`, Accept: "application/json" },
+      timeoutMs
+    });
+  } catch (err) {
+    const detail = err instanceof NetworkError || err instanceof Error ? err.message : String(err);
+    return { kind: "unreachable", detail };
+  }
+  if (response.status === 401) return { kind: "rejected" };
+  if (response.status === 403) {
+    const body = await readJsonBody(response);
+    const raw = typeof body === "object" && body !== null ? body : {};
+    if (raw.code !== SUBSCRIPTION_REQUIRED_CODE) {
+      return { kind: "unreachable", detail: asString(raw.message) ?? `HTTP ${response.status}` };
+    }
+    return {
+      kind: "locked",
+      plan: asString(raw.plan),
+      upgradeUrl: absoluteUrl(baseUrl, asString(raw.upgradeUrl) ?? DEFAULT_UPGRADE_PATH)
+    };
+  }
+  if (!response.ok) {
+    return { kind: "unreachable", detail: `HTTP ${response.status}` };
+  }
+  const identity = toIdentity(await readJsonBody(response));
+  if (!identity) {
+    return { kind: "unreachable", detail: "the server answered with an unexpected body" };
+  }
+  return { kind: "ok", identity };
+};
+var keyCheckFromResponse = async (response, baseUrl = getBaseUrl()) => {
+  if (response.status === 401) return { kind: "rejected" };
+  if (response.status !== 403) return null;
+  const body = await readJsonBody(response.clone());
+  const raw = typeof body === "object" && body !== null ? body : {};
+  if (raw.code !== SUBSCRIPTION_REQUIRED_CODE) return null;
+  return {
+    kind: "locked",
+    plan: asString(raw.plan),
+    upgradeUrl: absoluteUrl(baseUrl, asString(raw.upgradeUrl) ?? DEFAULT_UPGRADE_PATH)
+  };
+};
+var describeKeyCheck = (check, baseUrl = getBaseUrl()) => {
+  const settingsUrl = absoluteUrl(baseUrl, "/dashboard/agent/settings");
+  switch (check.kind) {
+    case "ok":
+      return {
+        message: `Key verified for ${check.identity.siteSlug || check.identity.siteName || "your site"}.`,
+        next: [],
+        exitCode: EXIT.OK,
+        fatal: false
+      };
+    case "malformed":
+      return {
+        message: "That does not look like a Pushary API key.",
+        next: [`Expected the pk_xxx.xxx form. Copy yours from ${settingsUrl}`],
+        exitCode: EXIT.USAGE,
+        fatal: true
+      };
+    case "rejected":
+      return {
+        message: "This key was rejected by pushary.com.",
+        next: [`Get a working key: ${settingsUrl}`, "Then re-run: pushary setup"],
+        exitCode: EXIT.UNAUTHENTICATED,
+        fatal: true
+      };
+    case "locked":
+      return {
+        message: "Your Pushary plan is not active, so approvals will not deliver yet.",
+        next: [
+          "Your agents are configured and your key itself is fine.",
+          `Activate the plan: ${check.upgradeUrl}`,
+          "Then run: pushary doctor"
+        ],
+        exitCode: EXIT.PROBLEMS_FOUND,
+        fatal: false
+      };
+    case "unreachable":
+      return {
+        message: `Could not reach pushary.com to verify the key (${check.detail}).`,
+        next: ["Continuing anyway. Run `pushary doctor` once you are online."],
+        exitCode: EXIT.UNREACHABLE,
+        fatal: false
+      };
+  }
+};
+
+export {
+  checkApiKey,
+  keyCheckFromResponse,
+  describeKeyCheck
+};

package/dist/{chunk-WNRYRN2R.js → chunk-VFBYRR2N.js}

@@ -4,7 +4,7 @@ import {
 import {
   callMcpTool,
   withRetry
-} from "./chunk-DWED7BS3.js";
+} from "./chunk-HNTKTK5B.js";
 import {
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
@@ -24,7 +24,7 @@ import {
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-NKXSILEW.js";
+} from "./chunk-2UMNXADU.js";
 
 // src/policy.ts
 import { createHash } from "crypto";

package/dist/src/index.js

@@ -1,6 +1,6 @@
 import {
   handlePreToolUse
-} from "../chunk-BE5X3WXL.js";
+} from "../chunk-HI4AGGE6.js";
 import "../chunk-CAJZAFVS.js";
 import "../chunk-YHG74UFF.js";
 import {
@@ -15,15 +15,15 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-WNRYRN2R.js";
+} from "../chunk-VFBYRR2N.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-WLGEY4UX.js";
-import "../chunk-DWED7BS3.js";
+import "../chunk-HNTKTK5B.js";
 import "../chunk-DQAN3JQP.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-NKXSILEW.js";
+} from "../chunk-2UMNXADU.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.59.0",
+  "version": "0.61.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",
@@ -60,6 +60,10 @@
     "pushary-gemini-hook": "./dist/bin/pushary-gemini-hook.js",
     "pushary-setup": "./dist/bin/pushary-setup.js",
     "pushary-clean": "./dist/bin/pushary-clean.js",
+    "pushary-status": "./dist/bin/pushary-status.js",
+    "pushary-login": "./dist/bin/pushary-login.js",
+    "pushary-logout": "./dist/bin/pushary-logout.js",
+    "pushary-connect": "./dist/bin/pushary-connect.js",
     "pushary-doctor": "./dist/bin/pushary-doctor.js",
     "pushary-mode": "./dist/bin/pushary-mode.js",
     "pushary-wait": "./dist/bin/pushary-wait.js",
@@ -69,18 +73,21 @@
   },
   "files": [
     "dist",
-    "data"
+    "data",
+    "CHANGELOG.md"
   ],
   "scripts": {
     "build": "node scripts/bundle-plugin.mjs && tsup",
     "dev": "tsup --watch",
-    "test": "bun test src/api.test.ts && bun test src/claude-config.test.ts && bun test src/config.test.ts && bun test src/mcp-http.test.ts && bun test src/retry.test.ts && bun test src/usage.test.ts && bun test src/validate.test.ts && bun test src/policy.test.ts && bun test src/npm.test.ts && bun test src/identity.test.ts && bun test src/pending.test.ts && bun test src/events.test.ts && bun test src/describe.test.ts && bun test src/reapply.test.ts && bun test src/suggestions.test.ts && bun test src/safe-commands.test.ts && bun test src/hook.test.ts && bun test src/codex-adapter.test.ts && bun test src/codex-config.test.ts && bun test src/gemini-adapter.test.ts && bun test src/gemini-config.test.ts && bun test src/instruction-file.test.ts && bun test src/pairing.test.ts && bun test src/wait-ladder.test.ts && bun test src/ledger.test.ts && bun test src/wrapper/wrapper.test.ts && bun test src/wrapper/messageQueue.test.ts && bun test src/wrapper/approver.test.ts && bun test src/wrapper/remoteLoop.test.ts && bun test src/wrapper/spawnClaude.test.ts && bun test src/wrapper/wsProtocol.test.ts && bun test src/wrapper/relayClient.test.ts && bun test src/wrapper/modeLoop.test.ts && bun test src/wrapper/stdinHandoff.test.ts && bun test src/wrapper/localLeg.test.ts && bun test src/crypto.test.ts && bun test src/crypto-vector.test.ts && bun test src/transcript-capture.test.ts && bun test src/transcript-sync.test.ts && bun test src/spawn-daemon.test.ts && bun test src/decision-episode.test.ts && bun test src/repo.test.ts"
+    "test": "node ../../scripts/ci/run-tests.mjs src bin",
+    "typecheck": "tsc --noEmit"
   },
   "dependencies": {
     "@inquirer/prompts": "^8.4.2",
     "qrcode-terminal": "^0.12.0",
     "smol-toml": "^1.6.1",
-    "tweetnacl": "^1.0.3"
+    "tweetnacl": "^1.0.3",
+    "undici": "^6.21.0"
   },
   "devDependencies": {
     "@pushary/contracts": "workspace:*",