@pushary/agent-hooks 0.60.0 → 0.62.0

package/dist/bin/pushary-login.js

@@ -0,0 +1,156 @@
+#!/usr/bin/env node
+import {
+  runBrowserLogin
+} from "../chunk-QHOVJXOT.js";
+import "../chunk-3EGEA4KH.js";
+import {
+  parseFlags
+} from "../chunk-N4DA4CJB.js";
+import {
+  readKeySource,
+  writeKey
+} from "../chunk-247C4RE5.js";
+import {
+  checkApiKey,
+  describeKeyCheck
+} from "../chunk-YJ7YZRVV.js";
+import {
+  createIo
+} from "../chunk-TX7KBKT7.js";
+import {
+  UsageError
+} from "../chunk-7QLSKOSU.js";
+import "../chunk-BC3VCZ3E.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-IIZZYUWK.js";
+import {
+  EXIT,
+  getPackageVersion
+} from "../chunk-SP7OZXCQ.js";
+import {
+  isValidApiKey
+} from "../chunk-DQAN3JQP.js";
+import "../chunk-2UMNXADU.js";
+
+// bin/pushary-login.ts
+exitOnHelpFlag("login");
+var parseLoginOptions = (argv) => {
+  const flags = parseFlags(argv, {
+    bools: ["with-token", "no-browser", "json", "force", "help", "h"],
+    values: []
+  });
+  if (flags.command !== void 0 && flags.command !== "login") {
+    throw new UsageError(`login takes no positional arguments (got ${flags.command})`);
+  }
+  return {
+    withToken: flags.bools.has("with-token"),
+    noBrowser: flags.bools.has("no-browser"),
+    json: flags.bools.has("json"),
+    force: flags.bools.has("force")
+  };
+};
+var options;
+try {
+  options = parseLoginOptions(process.argv.slice(2));
+} catch (err) {
+  process.stderr.write(`  ! ${err instanceof Error ? err.message : String(err)}
+`);
+  process.stderr.write("  Run `pushary login --help` for the full list.\n");
+  process.exit(EXIT.USAGE);
+}
+var { bold, dim, green, cyan, yellow } = createIo();
+var check = green("\u2713");
+var say = options.json ? (line) => process.stderr.write(`${line}
+`) : (line) => process.stdout.write(`${line}
+`);
+var emit = (payload) => {
+  if (options.json) process.stdout.write(`${JSON.stringify(payload, null, 2)}
+`);
+};
+var readStdin = async () => {
+  const chunks = [];
+  for await (const chunk of process.stdin) chunks.push(Buffer.from(chunk));
+  return Buffer.concat(chunks).toString("utf8").trim();
+};
+var store = (apiKey, siteSlug, keyName) => {
+  const result = writeKey(apiKey);
+  say("");
+  say(`  ${check} ${bold("Signed in.")}${siteSlug ? ` ${dim(`Site ${siteSlug}`)}` : ""}`);
+  say(`  ${dim(`Key saved to ${result.configPath}`)}`);
+  if (result.rc.kind === "written" || result.rc.kind === "updated") {
+    say(`  ${dim(`Shell export ${result.rc.kind} in ${result.rc.path}`)}`);
+  } else if (result.rc.kind === "declined") {
+    say(`  ${yellow("!")} ${dim(`Left ${result.rc.path} alone: line ${result.rc.declinedLine} already sets PUSHARY_API_KEY.`)}`);
+  }
+  emit({ ok: true, siteSlug, keyName, configPath: result.configPath, rc: result.rc.kind });
+};
+var loginWithToken = async () => {
+  const token = await readStdin();
+  if (!token) {
+    say(`  ${yellow("!")} Nothing arrived on stdin. Pipe the key in: pushary login --with-token < key.txt`);
+    emit({ ok: false, reason: "no_input" });
+    process.exit(EXIT.INPUT_REQUIRED);
+  }
+  if (!isValidApiKey(token)) {
+    say(`  ${yellow("!")} That does not look like a Pushary key. Expected pk_xxx.xxx`);
+    emit({ ok: false, reason: "malformed" });
+    process.exit(EXIT.USAGE);
+  }
+  const verdict = await checkApiKey(token);
+  if (verdict.kind !== "ok") {
+    const report = describeKeyCheck(verdict);
+    say(`  ${yellow("!")} ${report.message}`);
+    for (const line of report.next) say(`  ${dim(line)}`);
+    emit({ ok: false, reason: verdict.kind });
+    if (verdict.kind !== "unreachable") process.exit(report.exitCode);
+  }
+  store(token, verdict.kind === "ok" ? verdict.identity.siteSlug : "", "pasted key");
+  process.exit(EXIT.OK);
+};
+var main = async () => {
+  if (options.withToken) await loginWithToken();
+  if (!options.force) {
+    const existing = readKeySource();
+    if (existing.key) {
+      const verdict = await checkApiKey(existing.key);
+      if (verdict.kind === "ok") {
+        say("");
+        say(`  ${check} Already signed in ${dim(`(${verdict.identity.siteSlug})`)}`);
+        say(`  ${dim("Run")} ${cyan("pushary login --force")} ${dim("to replace this key.")}`);
+        emit({ ok: true, reused: true, siteSlug: verdict.identity.siteSlug });
+        process.exit(EXIT.OK);
+      }
+    }
+  }
+  const outcome = await runBrowserLogin(
+    { say, bold, dim, cyan, yellow },
+    { cliVersion: getPackageVersion(), noBrowser: options.noBrowser }
+  );
+  if (outcome.kind === "ok") {
+    store(outcome.apiKey, outcome.siteSlug, outcome.keyName);
+    process.exit(EXIT.OK);
+  }
+  if (outcome.kind === "unavailable") {
+    say(`  ${yellow("!")} Couldn't start a login ${dim(`(${outcome.detail})`)}`);
+    say(`  ${dim("Check your connection, or paste a key with")} ${cyan("pushary login --with-token < key.txt")}`);
+    emit({ ok: false, reason: "unreachable", detail: outcome.detail });
+    process.exit(EXIT.UNREACHABLE);
+  }
+  if (outcome.kind === "rejected") {
+    say("");
+    say(`  ${yellow("!")} That request was rejected in the browser. Nothing was written.`);
+    emit({ ok: false, reason: "rejected" });
+    process.exit(EXIT.NOT_CONFIGURED);
+  }
+  say("");
+  say(`  ${yellow("!")} The code expired before it was approved.`);
+  say(`  ${dim("Run")} ${cyan("pushary login")} ${dim("for a fresh one.")}`);
+  emit({ ok: false, reason: "expired" });
+  process.exit(EXIT.NOT_CONFIGURED);
+};
+main().catch((err) => {
+  process.stderr.write(`  ! login failed: ${err instanceof Error ? err.message : String(err)}
+`);
+  process.exit(EXIT.FAILED);
+});

package/dist/bin/pushary-logout.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-logout.js

@@ -0,0 +1,144 @@
+#!/usr/bin/env node
+import {
+  codexConfigToml
+} from "../chunk-ER657KRJ.js";
+import {
+  parseFlags
+} from "../chunk-N4DA4CJB.js";
+import {
+  clearKey,
+  readKeySource
+} from "../chunk-247C4RE5.js";
+import {
+  createIo
+} from "../chunk-TX7KBKT7.js";
+import {
+  UsageError
+} from "../chunk-7QLSKOSU.js";
+import "../chunk-BC3VCZ3E.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-IIZZYUWK.js";
+import {
+  EXIT
+} from "../chunk-SP7OZXCQ.js";
+import "../chunk-DQAN3JQP.js";
+import {
+  getBaseUrl
+} from "../chunk-2UMNXADU.js";
+
+// bin/pushary-logout.ts
+import { existsSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+exitOnHelpFlag("logout");
+var parseLogoutOptions = (argv) => {
+  const flags = parseFlags(argv, { bools: ["json", "revoke", "help", "h"], values: [] });
+  if (flags.command !== void 0 && flags.command !== "logout") {
+    throw new UsageError(`logout takes no positional arguments (got ${flags.command})`);
+  }
+  return { json: flags.bools.has("json"), revoke: flags.bools.has("revoke") };
+};
+var options;
+try {
+  options = parseLogoutOptions(process.argv.slice(2));
+} catch (err) {
+  process.stderr.write(`  ! ${err instanceof Error ? err.message : String(err)}
+`);
+  process.exit(EXIT.USAGE);
+}
+var { bold, dim, green, cyan, yellow } = createIo();
+var say = options.json ? (line) => process.stderr.write(`${line}
+`) : (line) => process.stdout.write(`${line}
+`);
+var AGENT_CONFIGS = [
+  { label: "Claude Code", path: join(homedir(), ".claude.json") },
+  { label: "Codex", path: codexConfigToml() },
+  { label: "Gemini CLI", path: join(homedir(), ".gemini", "settings.json") },
+  { label: "Cursor", path: join(homedir(), ".cursor", "mcp.json") }
+];
+var revokeRemotely = async (apiKey) => {
+  try {
+    const res = await fetch(`${getBaseUrl()}/api/v1/server/keys/self/revoke`, {
+      method: "POST",
+      headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (res.status === 401) return { ok: true, detail: "the server had already stopped accepting it" };
+    if (!res.ok) return { ok: false, detail: `the server answered ${res.status}` };
+    return { ok: true, detail: "revoked server-side" };
+  } catch (err) {
+    return { ok: false, detail: err instanceof Error ? err.message : "network error" };
+  }
+};
+var main = async () => {
+  const before = readKeySource();
+  let revoked = null;
+  if (options.revoke) {
+    if (before.key) {
+      revoked = await revokeRemotely(before.key);
+    } else {
+      revoked = { ok: false, detail: "no key was stored here, so there was nothing to revoke" };
+    }
+  }
+  const result = clearKey();
+  const remaining = AGENT_CONFIGS.filter((entry) => existsSync(entry.path));
+  say("");
+  if (!result.removedFromConfig && result.rcLinesDisabled === 0 && before.kind !== "env") {
+    say(`  ${dim("No key was stored on this machine. Nothing to remove.")}`);
+  } else {
+    say(`  ${green("\u2713")} ${bold("Signed out.")}`);
+    if (result.removedFromConfig) say(`  ${dim(`Key removed from ${result.configPath}`)}`);
+    if (result.rcLinesDisabled > 0) {
+      say(`  ${dim(`Commented out ${result.rcLinesDisabled} export line in ${result.rcPath}`)}`);
+    }
+  }
+  if (revoked) {
+    say("");
+    if (revoked.ok) {
+      say(`  ${green("\u2713")} Key ${revoked.detail}. It will not work anywhere else either.`);
+    } else {
+      say(`  ${yellow("!")} Could not revoke the key server-side: ${revoked.detail}`);
+      say(`  ${dim("It is still valid. Revoke it at")} ${cyan("pushary.com/dashboard/agent/settings")}`);
+    }
+  }
+  if (before.kind === "env") {
+    say("");
+    say(`  ${yellow("!")} PUSHARY_API_KEY is set in this shell, and a child process cannot unset it.`);
+    say(`  ${dim("Run")} ${cyan("unset PUSHARY_API_KEY")} ${dim("here, or open a new terminal.")}`);
+  }
+  if (remaining.length > 0) {
+    say("");
+    say(`  ${dim("Still holding a copy of the key, untouched by logout:")}`);
+    for (const entry of remaining) say(`  ${dim(`\u2022 ${entry.label}  ${entry.path}`)}`);
+    say(`  ${dim("Run")} ${cyan("pushary clean")} ${dim("to remove Pushary from those too.")}`);
+  }
+  say("");
+  say(`  ${dim("The key itself is still valid server-side. Revoke it at")} ${cyan("pushary.com/dashboard/agent/settings")}`);
+  say("");
+  if (options.json) {
+    process.stdout.write(
+      `${JSON.stringify(
+        {
+          ok: true,
+          removedFromConfig: result.removedFromConfig,
+          configPath: result.configPath,
+          rcPath: result.rcPath,
+          rcLinesDisabled: result.rcLinesDisabled,
+          envStillSet: before.kind === "env",
+          revoked: revoked === null ? null : revoked.ok,
+          agentConfigsRetainingKey: remaining.map((entry) => entry.path)
+        },
+        null,
+        2
+      )}
+`
+    );
+  }
+  process.exit(EXIT.OK);
+};
+main().catch((err) => {
+  process.stderr.write(`  ! logout failed: ${err instanceof Error ? err.message : String(err)}
+`);
+  process.exit(EXIT.FAILED);
+});

package/dist/bin/pushary-mode.js

@@ -1,15 +1,28 @@
 #!/usr/bin/env node
+import {
+  exitOnFailedResponse
+} from "../chunk-ONVEYEVR.js";
+import "../chunk-YJ7YZRVV.js";
+import {
+  createIo
+} from "../chunk-TX7KBKT7.js";
+import "../chunk-7QLSKOSU.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-IIZZYUWK.js";
+import {
+  EXIT
+} from "../chunk-SP7OZXCQ.js";
+import "../chunk-DQAN3JQP.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-NKXSILEW.js";
+} from "../chunk-2UMNXADU.js";
 
 // bin/pushary-mode.ts
+exitOnHelpFlag("mode");
 var VALID_MODES = ["push_only", "push_first", "terminal_only", "notify_only"];
-var dim = (s) => `\x1B[2m${s}\x1B[0m`;
-var green = (s) => `\x1B[32m${s}\x1B[0m`;
-var cyan = (s) => `\x1B[36m${s}\x1B[0m`;
-var yellow = (s) => `\x1B[33m${s}\x1B[0m`;
+var { dim, green, cyan, yellow } = createIo();
 var parseDuration = (value) => {
   const match = value.match(/^(\d+)(m|h)$/);
   if (!match) return null;
@@ -30,6 +43,7 @@ var main = async () => {
   };
   if (!mode || mode === "status") {
     const res2 = await fetch(`${baseUrl}/api/mcp/mode`, { headers });
+    if (!res2.ok) await exitOnFailedResponse(res2, baseUrl);
     const data2 = await res2.json();
     if (!data2.override) {
       console.log(`  Mode: ${cyan("default")} ${dim("(using per-tool policies)")}`);
@@ -44,7 +58,8 @@ var main = async () => {
     return;
   }
   if (mode === "clear" || mode === "reset") {
-    await fetch(`${baseUrl}/api/mcp/mode`, { method: "DELETE", headers });
+    const res2 = await fetch(`${baseUrl}/api/mcp/mode`, { method: "DELETE", headers });
+    if (!res2.ok) await exitOnFailedResponse(res2, baseUrl);
     console.log(`  ${green("\u2713")} Mode override cleared \u2014 using per-tool policies`);
     return;
   }
@@ -53,14 +68,14 @@ var main = async () => {
     console.log(`  Valid modes: ${VALID_MODES.join(", ")}`);
     console.log(`  ${dim("Usage: pushary mode <mode> [--for <duration>]")}`);
     console.log(`  ${dim("Example: pushary mode push_only --for 30m")}`);
-    return;
+    process.exit(EXIT.USAGE);
   }
   let ttlSeconds;
   if (forFlag === "--for" && forValue) {
     const parsed = parseDuration(forValue);
     if (!parsed) {
       console.log(`  ${yellow("!")} Invalid duration: ${forValue} ${dim("(use e.g. 30m, 1h)")}`);
-      return;
+      process.exit(EXIT.USAGE);
     }
     ttlSeconds = parsed;
   }
@@ -69,11 +84,7 @@ var main = async () => {
     headers,
     body: JSON.stringify({ mode, ttlSeconds })
   });
-  if (!res.ok) {
-    const err = await res.json();
-    console.log(`  ${yellow("!")} Failed: ${err.error ?? res.statusText}`);
-    return;
-  }
+  if (!res.ok) await exitOnFailedResponse(res, baseUrl);
   const data = await res.json();
   console.log(`  ${green("\u2713")} Mode set to ${cyan(data.override.mode)}`);
   if (data.override.expiresAt) {

package/dist/bin/pushary-notification-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-WNRYRN2R.js";
-import "../chunk-RN3NOEJF.js";
-import "../chunk-DWED7BS3.js";
+} from "../chunk-HIIBSYFJ.js";
+import "../chunk-HNTKTK5B.js";
 import "../chunk-DQAN3JQP.js";
-import "../chunk-NKXSILEW.js";
+import "../chunk-RN3NOEJF.js";
+import "../chunk-2UMNXADU.js";
 
 // bin/pushary-notification-hook.ts
 var main = async () => {

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-BE5X3WXL.js";
+} from "../chunk-5SO3CEGJ.js";
 import "../chunk-CAJZAFVS.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-WNRYRN2R.js";
-import "../chunk-RN3NOEJF.js";
+import "../chunk-HIIBSYFJ.js";
 import "../chunk-WLGEY4UX.js";
-import "../chunk-DWED7BS3.js";
+import "../chunk-HNTKTK5B.js";
 import "../chunk-DQAN3JQP.js";
-import "../chunk-NKXSILEW.js";
+import "../chunk-RN3NOEJF.js";
+import "../chunk-2UMNXADU.js";
 
 // bin/pushary-permission-denied-hook.ts
 var main = async () => {

package/dist/bin/pushary-permission-hook.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-BE5X3WXL.js";
+} from "../chunk-5SO3CEGJ.js";
 import "../chunk-CAJZAFVS.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-WNRYRN2R.js";
-import "../chunk-RN3NOEJF.js";
+import "../chunk-HIIBSYFJ.js";
 import "../chunk-WLGEY4UX.js";
-import "../chunk-DWED7BS3.js";
+import "../chunk-HNTKTK5B.js";
 import "../chunk-DQAN3JQP.js";
-import "../chunk-NKXSILEW.js";
+import "../chunk-RN3NOEJF.js";
+import "../chunk-2UMNXADU.js";
 
 // bin/pushary-permission-hook.ts
 var main = async () => {

package/dist/bin/pushary-post-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-WNRYRN2R.js";
-import "../chunk-RN3NOEJF.js";
-import "../chunk-DWED7BS3.js";
+} from "../chunk-HIIBSYFJ.js";
+import "../chunk-HNTKTK5B.js";
 import "../chunk-DQAN3JQP.js";
-import "../chunk-NKXSILEW.js";
+import "../chunk-RN3NOEJF.js";
+import "../chunk-2UMNXADU.js";
 
 // bin/pushary-post-hook.ts
 var main = async () => {

package/dist/bin/pushary-prompt-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-WNRYRN2R.js";
-import "../chunk-RN3NOEJF.js";
-import "../chunk-DWED7BS3.js";
+} from "../chunk-HIIBSYFJ.js";
+import "../chunk-HNTKTK5B.js";
 import "../chunk-DQAN3JQP.js";
-import "../chunk-NKXSILEW.js";
+import "../chunk-RN3NOEJF.js";
+import "../chunk-2UMNXADU.js";
 
 // bin/pushary-prompt-hook.ts
 var main = async () => {

package/dist/bin/pushary-session-end-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-WNRYRN2R.js";
-import "../chunk-RN3NOEJF.js";
-import "../chunk-DWED7BS3.js";
+} from "../chunk-HIIBSYFJ.js";
+import "../chunk-HNTKTK5B.js";
 import "../chunk-DQAN3JQP.js";
-import "../chunk-NKXSILEW.js";
+import "../chunk-RN3NOEJF.js";
+import "../chunk-2UMNXADU.js";
 
 // bin/pushary-session-end-hook.ts
 var main = async () => {

package/dist/bin/pushary-session-start-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-WNRYRN2R.js";
-import "../chunk-RN3NOEJF.js";
-import "../chunk-DWED7BS3.js";
+} from "../chunk-HIIBSYFJ.js";
+import "../chunk-HNTKTK5B.js";
 import "../chunk-DQAN3JQP.js";
-import "../chunk-NKXSILEW.js";
+import "../chunk-RN3NOEJF.js";
+import "../chunk-2UMNXADU.js";
 
 // bin/pushary-session-start-hook.ts
 var main = async () => {