@pushary/agent-hooks 0.62.0 → 0.62.2

package/dist/{chunk-247C4RE5.js → chunk-COC6NPWG.js}

@@ -1,3 +1,9 @@
+import {
+  backupFile,
+  readJsonSafe,
+  writeFileAtomic,
+  writeJsonAtomic
+} from "./chunk-6MTNS63X.js";
 import {
   resolveShellRc
 } from "./chunk-BC3VCZ3E.js";
@@ -5,59 +11,10 @@ import {
   configFilePath
 } from "./chunk-2UMNXADU.js";
 
-// src/cli/fsx.ts
-import { copyFileSync, existsSync, fsyncSync, mkdirSync, openSync, closeSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";
-import { dirname, join } from "path";
-var readJsonSafe = (filePath) => {
-  let raw;
-  try {
-    raw = readFileSync(filePath, "utf-8");
-  } catch (err) {
-    const error = err;
-    if (error.code === "ENOENT") return { kind: "missing" };
-    return { kind: "unreadable", error };
-  }
-  if (raw.trim() === "") return { kind: "ok", value: {} };
-  try {
-    return { kind: "ok", value: JSON.parse(raw) };
-  } catch (err) {
-    return { kind: "unparseable", error: err, raw };
-  }
-};
-var stamp = () => (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-var backupFile = (filePath) => {
-  const target = `${filePath}.pushary-backup-${stamp()}`;
-  copyFileSync(filePath, target);
-  return target;
-};
-var writeFileAtomic = (filePath, contents, mode) => {
-  const dir = dirname(filePath);
-  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
-  const temp = join(dir, `.${process.pid}-${stamp()}.pushary-tmp`);
-  try {
-    writeFileSync(temp, contents, mode === void 0 ? "utf-8" : { encoding: "utf-8", mode });
-    const handle = openSync(temp, "r+");
-    try {
-      fsyncSync(handle);
-    } finally {
-      closeSync(handle);
-    }
-    renameSync(temp, filePath);
-  } catch (err) {
-    try {
-      if (existsSync(temp)) unlinkSync(temp);
-    } catch {
-    }
-    throw err;
-  }
-};
-var writeJsonAtomic = (filePath, data, mode) => writeFileAtomic(filePath, `${JSON.stringify(data, null, 2)}
-`, mode);
-
 // src/keystore.ts
-import { chmodSync, existsSync as existsSync2, readFileSync as readFileSync2, realpathSync, writeFileSync as writeFileSync2 } from "fs";
+import { chmodSync, existsSync, readFileSync, realpathSync, writeFileSync } from "fs";
 import { homedir } from "os";
-import { join as join2 } from "path";
+import { join } from "path";
 var KEY_FILE_MODE = 384;
 var FALLBACK_RCS = [".zshrc", ".zprofile", ".bashrc", ".bash_profile"];
 var OUR_EXPORT = /^[ \t]*export[ \t]+PUSHARY_API_KEY=(['"]?)(pk_[a-f0-9]+\.[a-f0-9]+)\1[ \t]*$/;
@@ -86,7 +43,7 @@ var rewriteRcExport = (rcPath, apiKey, shell = null) => {
   const target = realPathOf(rcPath);
   let content = "";
   try {
-    content = readFileSync2(target, "utf-8");
+    content = readFileSync(target, "utf-8");
   } catch (err) {
     const error = err;
     if (error.code !== "ENOENT") {
@@ -141,7 +98,7 @@ var rewriteRcExport = (rcPath, apiKey, shell = null) => {
 var resolveRcTarget = () => {
   const resolved = resolveShellRc();
   if (resolved) return { path: resolved.path, shell: resolved.shell };
-  const fallback = FALLBACK_RCS.map((name) => join2(homedir(), name)).find(existsSync2);
+  const fallback = FALLBACK_RCS.map((name) => join(homedir(), name)).find(existsSync);
   return fallback ? { path: fallback, shell: null } : null;
 };
 var writeKey = (apiKey, options = {}) => {
@@ -181,13 +138,13 @@ var clearKey = (options = {}) => {
   if (target) {
     try {
       const real = realpathSync(target.path);
-      const lines = readFileSync2(real, "utf8").split("\n");
+      const lines = readFileSync(real, "utf8").split("\n");
       const next = lines.map((line) => {
         if (!OUR_EXPORT.test(line)) return line;
         rcLinesDisabled += 1;
         return `# ${line.trim()}   # removed by pushary logout`;
       });
-      if (rcLinesDisabled > 0) writeFileSync2(real, next.join("\n"));
+      if (rcLinesDisabled > 0) writeFileSync(real, next.join("\n"));
     } catch {
       rcLinesDisabled = 0;
     }
@@ -223,10 +180,6 @@ var readKeySource = () => {
 };
 
 export {
-  readJsonSafe,
-  backupFile,
-  writeFileAtomic,
-  writeJsonAtomic,
   KEY_FILE_MODE,
   exportLine,
   keyPrefix,

package/dist/{chunk-YJ7YZRVV.js → chunk-G4TARJAY.js}

@@ -1,68 +1,22 @@
+import {
+  pusharyFetch
+} from "./chunk-SAF6HGAA.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
-import {
-  EXIT
-} from "./chunk-SP7OZXCQ.js";
 import {
   isValidApiKey
 } from "./chunk-DQAN3JQP.js";
 import {
   getBaseUrl
 } from "./chunk-2UMNXADU.js";
-
-// src/cli/net.ts
-import { createRequire } from "module";
-var requireCjs = createRequire(import.meta.url);
-var PROXY_VARS = ["HTTPS_PROXY", "https_proxy", "HTTP_PROXY", "http_proxy"];
-var proxyFromEnv = () => {
-  for (const name of PROXY_VARS) {
-    const value = process.env[name]?.trim();
-    if (value) return value;
-  }
-  return void 0;
-};
-var installed = false;
-var installProxyDispatcher = () => {
-  if (installed) return;
-  installed = true;
-  if (!proxyFromEnv()) return;
-  try {
-    const { EnvHttpProxyAgent, setGlobalDispatcher } = requireCjs("undici");
-    setGlobalDispatcher(new EnvHttpProxyAgent());
-  } catch {
-  }
-};
-var isNetworkFailure = (err) => {
-  if (!(err instanceof Error)) return false;
-  const code = err.code;
-  if (code && ["ENOTFOUND", "ECONNREFUSED", "ECONNRESET", "ETIMEDOUT", "EAI_AGAIN", "EPROTO", "CERT_HAS_EXPIRED", "UNABLE_TO_VERIFY_LEAF_SIGNATURE"].includes(code)) {
-    return true;
-  }
-  return err.name === "AbortError" || err.name === "TimeoutError" || /fetch failed/i.test(err.message);
-};
-var DEFAULT_TIMEOUT_MS = 15e3;
-var pusharyFetch = async (url, init = {}) => {
-  installProxyDispatcher();
-  const { timeoutMs = DEFAULT_TIMEOUT_MS, signal, ...rest } = init;
-  try {
-    return await fetch(url, {
-      ...rest,
-      signal: signal ?? AbortSignal.timeout(timeoutMs)
-    });
-  } catch (err) {
-    if (isNetworkFailure(err)) {
-      const proxy = proxyFromEnv();
-      const via = proxy ? ` (via proxy ${proxy})` : "";
-      throw new NetworkError(`Could not reach ${new URL(url).host}${via}: ${err instanceof Error ? err.message : String(err)}`);
-    }
-    throw err;
-  }
-};
+import {
+  EXIT
+} from "./chunk-KZERVKTD.js";
 
 // src/session.ts
 var IDENTITY_PATH = "/api/v1/server/identity";
-var DEFAULT_TIMEOUT_MS2 = 1e4;
+var DEFAULT_TIMEOUT_MS = 1e4;
 var SUBSCRIPTION_REQUIRED_CODE = "subscription_required";
 var DEFAULT_UPGRADE_PATH = "/dashboard/settings?tab=billing";
 var KEY_SCOPES = ["full_access", "connector", "bound"];
@@ -120,7 +74,7 @@ var checkApiKey = async (apiKey, options = {}) => {
   if (!isValidApiKey(apiKey)) return { kind: "malformed" };
   const baseUrl = options.baseUrl ?? getBaseUrl();
   const fetchImpl = options.fetchImpl ?? pusharyFetch;
-  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
+  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
   let response;
   try {
     response = await fetchImpl(`${baseUrl.replace(/\/+$/, "")}${IDENTITY_PATH}`, {

package/dist/{chunk-N4DA4CJB.js → chunk-GMXKITVA.js}

@@ -9,6 +9,18 @@ var known = (spec, name) => {
   if (spec.values.includes(name)) return "value";
   return void 0;
 };
+var rejectUnknownFlags = (args, allowed) => {
+  for (const token of args) {
+    if (token === "--") break;
+    if (!token.startsWith("-")) continue;
+    const name = token.includes("=") ? token.slice(0, token.indexOf("=")) : token;
+    if (!allowed.includes(name)) {
+      throw new UsageError(
+        `Unknown flag: ${name}${allowed.length > 0 ? `. This command accepts ${allowed.join(", ")}` : ". This command takes no flags"}`
+      );
+    }
+  }
+};
 var parseFlags = (argv, spec) => {
   const bools = /* @__PURE__ */ new Set();
   const values = /* @__PURE__ */ new Map();
@@ -53,5 +65,6 @@ var parseFlags = (argv, spec) => {
 };
 
 export {
+  rejectUnknownFlags,
   parseFlags
 };

package/dist/chunk-KZERVKTD.js

@@ -0,0 +1,16 @@
+// src/exit.ts
+var EXIT = {
+  OK: 0,
+  FAILED: 1,
+  USAGE: 2,
+  NOT_CONFIGURED: 3,
+  UNAUTHENTICATED: 4,
+  PROBLEMS_FOUND: 5,
+  NO_DEVICE: 6,
+  INPUT_REQUIRED: 7,
+  UNREACHABLE: 8
+};
+
+export {
+  EXIT
+};

package/dist/{chunk-3O27ZSRE.js → chunk-NGZMVCXN.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   callMcpTool
-} from "./chunk-HNTKTK5B.js";
+} from "./chunk-BSZYIAZL.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/chunk-SAF6HGAA.js

@@ -0,0 +1,57 @@
+import {
+  NetworkError
+} from "./chunk-7QLSKOSU.js";
+
+// src/cli/net.ts
+import { createRequire } from "module";
+var requireCjs = createRequire(import.meta.url);
+var PROXY_VARS = ["HTTPS_PROXY", "https_proxy", "HTTP_PROXY", "http_proxy"];
+var proxyFromEnv = () => {
+  for (const name of PROXY_VARS) {
+    const value = process.env[name]?.trim();
+    if (value) return value;
+  }
+  return void 0;
+};
+var installed = false;
+var installProxyDispatcher = () => {
+  if (installed) return;
+  installed = true;
+  if (!proxyFromEnv()) return;
+  try {
+    const { EnvHttpProxyAgent, setGlobalDispatcher } = requireCjs("undici");
+    setGlobalDispatcher(new EnvHttpProxyAgent());
+  } catch {
+  }
+};
+var isNetworkFailure = (err) => {
+  if (!(err instanceof Error)) return false;
+  const code = err.code;
+  if (code && ["ENOTFOUND", "ECONNREFUSED", "ECONNRESET", "ETIMEDOUT", "EAI_AGAIN", "EPROTO", "CERT_HAS_EXPIRED", "UNABLE_TO_VERIFY_LEAF_SIGNATURE"].includes(code)) {
+    return true;
+  }
+  return err.name === "AbortError" || err.name === "TimeoutError" || /fetch failed/i.test(err.message);
+};
+var DEFAULT_TIMEOUT_MS = 15e3;
+var pusharyFetch = async (url, init = {}) => {
+  installProxyDispatcher();
+  const { timeoutMs = DEFAULT_TIMEOUT_MS, signal, ...rest } = init;
+  try {
+    return await fetch(url, {
+      ...rest,
+      signal: signal ?? AbortSignal.timeout(timeoutMs)
+    });
+  } catch (err) {
+    if (isNetworkFailure(err)) {
+      const proxy = proxyFromEnv();
+      const via = proxy ? ` (via proxy ${proxy})` : "";
+      throw new NetworkError(`Could not reach ${new URL(url).host}${via}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    throw err;
+  }
+};
+
+export {
+  installProxyDispatcher,
+  pusharyFetch
+};

package/dist/{chunk-5SO3CEGJ.js → chunk-SDXF5I46.js}

@@ -25,7 +25,7 @@ import {
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-HIIBSYFJ.js";
+} from "./chunk-5ZDYDU2Q.js";
 import {
   isGatingMoment,
   recordKeylessMoment

package/dist/{chunk-ONVEYEVR.js → chunk-SR52774M.js}

@@ -1,13 +1,13 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-YJ7YZRVV.js";
+} from "./chunk-G4TARJAY.js";
 import {
   createIo
 } from "./chunk-TX7KBKT7.js";
 import {
   EXIT
-} from "./chunk-SP7OZXCQ.js";
+} from "./chunk-KZERVKTD.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-IIZZYUWK.js → chunk-WXFEK7KD.js}

@@ -1,8 +1,10 @@
 import {
-  EXIT,
   getPackageVersion,
   renderCommandHelp
-} from "./chunk-SP7OZXCQ.js";
+} from "./chunk-7OXIC7E3.js";
+import {
+  EXIT
+} from "./chunk-KZERVKTD.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-QHOVJXOT.js → chunk-Z3Z4VK5F.js}

@@ -227,7 +227,8 @@ var runBrowserLogin = async (ui, options, deps = {}) => {
       } else if (state2.kind === "payment-required") {
         ui.say(`  ${ui.yellow("!")} A plan is needed before a key can be issued. Nothing was created yet.`);
         ui.say(`  ${ui.dim("Choose one at")} ${ui.cyan(state2.checkoutUrl)}`);
-        ui.say(`  ${ui.dim("This terminal keeps the same code and finishes on its own once the plan is active.")}`);
+        ui.say(`  ${ui.dim("Keep the browser tab open and this finishes on its own once the plan is active.")}`);
+        ui.say(`  ${ui.dim("If you closed it, reopen the page and enter the same code again.")}`);
         if (!options.noBrowser && canOpenBrowser()) openInBrowser(state2.checkoutUrl);
       } else if (state2.kind === "unreachable") {
         ui.say(`  ${ui.yellow("!")} Still trying. pushary.com is not answering ${ui.dim(`(${state2.detail})`)}`);

package/dist/src/index.js

@@ -1,6 +1,6 @@
 import {
   handlePreToolUse
-} from "../chunk-5SO3CEGJ.js";
+} from "../chunk-SDXF5I46.js";
 import "../chunk-CAJZAFVS.js";
 import "../chunk-YHG74UFF.js";
 import {
@@ -15,15 +15,18 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-HIIBSYFJ.js";
+} from "../chunk-5ZDYDU2Q.js";
 import "../chunk-WLGEY4UX.js";
-import "../chunk-HNTKTK5B.js";
+import "../chunk-BSZYIAZL.js";
+import "../chunk-SAF6HGAA.js";
+import "../chunk-7QLSKOSU.js";
 import "../chunk-DQAN3JQP.js";
 import "../chunk-RN3NOEJF.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
+import "../chunk-KZERVKTD.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.62.0",
+  "version": "0.62.2",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",