@pushary/agent-hooks 0.69.0 → 0.70.0

package/CHANGELOG.md

@@ -1,5 +1,54 @@
 # Changelog
 
+## 0.70.0
+
+### A key you name is the key you get
+
+Passing `--key` with a malformed value did not fail. Setup read it as no key at
+all, went looking elsewhere, and used whichever key it found: one already stored
+on the machine, one in your environment, or a brand new one it created by pairing.
+You named a credential and quietly got a different one. It now stops and says the
+key is not valid.
+
+### setup --json no longer stops to ask a question nobody can see
+
+Asking for machine-readable output says plainly that no human is watching, but
+setup could still reach an agent-selection prompt. Piped into a script it waited
+for a keypress that was never coming, and the prompt drew itself onto the same
+output a program was trying to read as JSON. It now selects the agents it detects,
+which is exactly what pressing Enter on that prompt would have chosen.
+
+`--json` also promises a single object of output, and every failing exit used to
+print nothing at all. A refused key, a cancelled pairing and a crash were
+indistinguishable to anything reading the output. Each now says which it was.
+
+### Setup checks its own work
+
+An agent installer that finished without an error was reported as configured,
+even if nothing had been written. Doctor would then contradict setup minutes
+later. Setup now confirms the configuration is really there, using the same check
+doctor uses, so the two cannot disagree.
+
+### connect points at the fix that matches your situation
+
+`pushary connect --app` gave one answer for every way a phone can be out of
+reach: open the app and allow notifications. That is right when the app is signed
+in and the permission was declined, and wrong otherwise. A terminal that was
+never paired needs setup. A phone signed in to a colleague's account needs your
+account, not a permission toggle. It now says which applies, and when it cannot
+tell the two apart it says both rather than sounding certain about the wrong one.
+
+### The editor gates say when a proxy is in the way
+
+The Cursor and VS Code gates cannot route through a corporate proxy. They still
+hand the decision safely to the editor's own prompt, so nothing is blocked, but
+every approval quietly stopped reaching your phone with no explanation. When a
+proxy is configured they now name it as the likely cause, and on Node 24 or newer
+they name the setting that fixes it.
+
+VS Code is also now listed among the supported agents, which it has been since
+its plugin shipped.
+
 ## 0.69.0
 
 ### An approval is never granted on a state Pushary could not confirm

package/README.md

@@ -4,7 +4,7 @@
 [![npm downloads](https://img.shields.io/npm/dm/@pushary/agent-hooks.svg)](https://www.npmjs.com/package/@pushary/agent-hooks)
 [![license](https://img.shields.io/npm/l/@pushary/agent-hooks.svg)](./LICENSE)
 
-Push notifications, questions, and permission approvals for AI coding agents. Get a push when your agent finishes work, answer its questions from your phone, and approve risky commands before they run. Works with Claude Code, Codex, Cursor, Gemini CLI, and Hermes.
+Push notifications, questions, and permission approvals for AI coding agents. Get a push when your agent finishes work, answer its questions from your phone, and approve risky commands before they run. Works with Claude Code, Codex, Cursor, VS Code, Gemini CLI, and Hermes.
 
 Your agent froze waiting for a yes. This is how it reaches you.
 
@@ -53,6 +53,7 @@ npx @pushary/agent-hooks@latest doctor
 | Cursor | yes | yes | yes |
 | Gemini CLI | yes | yes | yes |
 | Hermes | yes | yes | yes |
+| VS Code | yes | yes | yes |
 
 Any other MCP client can use notify and ask by pointing at the Pushary MCP endpoint directly.
 
@@ -62,7 +63,7 @@ Any other MCP client can use notify and ask by pointing at the Pushary MCP endpo
      asserts this list matches it. Do not edit one without the other. -->
 
 ```
-setup        Configure Claude Code, Codex, Gemini CLI, Hermes, or Cursor with Pushary
+setup        Configure Claude Code, Codex, Gemini CLI, Hermes, Cursor, or VS Code with Pushary
 claude       Run Claude Code through Pushary, reachable from your phone even when idle
 daemon       Keep this machine reachable so your phone can START a new session
 status       One screen: which key is in force, whether the server accepts it, what can receive an approval

package/data/cursor-plugin/scripts/pushary-gate.mjs

@@ -271,6 +271,31 @@ const capActionBody = (text) =>
   text.length <= ACTION_BODY_MAX ? text : `${text.slice(0, ACTION_BODY_MAX - ACTION_BODY_TRUNCATION_MARKER.length)}${ACTION_BODY_TRUNCATION_MARKER}`
 const deriveActionBody = (command) => capActionBody(redactSecretsDeep(command))
 
+// ── network diagnosis ────────────────────────────────────────────────────────
+//
+// This gate is a dependency-free .mjs, so unlike the CLI it cannot install
+// undici's EnvHttpProxyAgent and its fetch ignores HTTP_PROXY entirely. Node
+// gained a native equivalent in 24 (NODE_USE_ENV_PROXY), but that is read at
+// startup, so a script cannot switch it on for itself.
+//
+// The gate already fails safe: any error here hands the decision to the editor's
+// own prompt. The cost is therefore not a blocked command, it is SILENCE. On a
+// corporate network every approval quietly stops reaching the phone and the only
+// trace is one stderr line nobody reads. So when a proxy is configured and the
+// network call fails, say which of those two it is.
+export const PROXY_VARS = ['HTTPS_PROXY', 'https_proxy', 'HTTP_PROXY', 'http_proxy']
+
+export const proxyConfigured = (env = process.env) =>
+  PROXY_VARS.some(name => (env[name] ?? '').trim() !== '')
+
+export const describeNetworkFailure = (error, env = process.env) => {
+  const detail = error?.message ?? String(error)
+  if (!proxyConfigured(env)) return detail
+  const enabled = (env.NODE_USE_ENV_PROXY ?? '').trim() !== ''
+  if (enabled) return detail
+  return `${detail} (a proxy is set in HTTP_PROXY/HTTPS_PROXY and this hook cannot use it; on Node 24+ set NODE_USE_ENV_PROXY=1 in the editor's environment)`
+}
+
 // ── ask / wait ───────────────────────────────────────────────────────────────
 // Redacted, not raw. This is the text a human reads on a lock screen and in
 // Slack, and it used to be the command verbatim: `curl -H "Authorization:
@@ -447,12 +472,16 @@ const main = async () => {
         return respond(await handlePushFirst(apiKey, command, project, ident, tool.pushFirstSeconds))
     }
   } catch (error) {
-    process.stderr.write(`[pushary-gate] ${error?.message ?? error}\n`)
+    process.stderr.write(`[pushary-gate] ${describeNetworkFailure(error)}\n`)
     return respond(ask())
   }
 }
 
-main().catch((error) => {
-  process.stderr.write(`[pushary-gate] fatal: ${error?.message ?? error}\n`)
-  respond(ask())
-})
+// Guarded like the VS Code gate: importing this file to unit-test its pure
+// helpers must not start a hook run that reads stdin and writes a decision.
+if (!process.env.PUSHARY_GATE_IMPORT) {
+  main().catch((error) => {
+    process.stderr.write(`[pushary-gate] fatal: ${describeNetworkFailure(error)}\n`)
+    respond(ask())
+  })
+}

package/data/vscode-plugin/scripts/pushary-gate.mjs

@@ -345,6 +345,31 @@ export const shouldGate = (toolName, toolInput) => {
   return command
 }
 
+// ── network diagnosis ────────────────────────────────────────────────────────
+//
+// This gate is a dependency-free .mjs, so unlike the CLI it cannot install
+// undici's EnvHttpProxyAgent and its fetch ignores HTTP_PROXY entirely. Node
+// gained a native equivalent in 24 (NODE_USE_ENV_PROXY), but that is read at
+// startup, so a script cannot switch it on for itself.
+//
+// The gate already fails safe: any error here hands the decision to the editor's
+// own prompt. The cost is therefore not a blocked command, it is SILENCE. On a
+// corporate network every approval quietly stops reaching the phone and the only
+// trace is one stderr line nobody reads. So when a proxy is configured and the
+// network call fails, say which of those two it is.
+export const PROXY_VARS = ['HTTPS_PROXY', 'https_proxy', 'HTTP_PROXY', 'http_proxy']
+
+export const proxyConfigured = (env = process.env) =>
+  PROXY_VARS.some(name => (env[name] ?? '').trim() !== '')
+
+export const describeNetworkFailure = (error, env = process.env) => {
+  const detail = error?.message ?? String(error)
+  if (!proxyConfigured(env)) return detail
+  const enabled = (env.NODE_USE_ENV_PROXY ?? '').trim() !== ''
+  if (enabled) return detail
+  return `${detail} (a proxy is set in HTTP_PROXY/HTTPS_PROXY and this hook cannot use it; on Node 24+ set NODE_USE_ENV_PROXY=1 in the editor's environment)`
+}
+
 // ── ask / wait ────────────────────────────────────────────────────────────────
 // Redacted, not raw. This is the text a human reads on a lock screen and in
 // Slack, and it used to be the command verbatim: `curl -H "Authorization:
@@ -517,7 +542,7 @@ const main = async () => {
         return respond(await handlePushFirst(apiKey, command, project, ident, tool.pushFirstSeconds))
     }
   } catch (error) {
-    diag(String(error?.message ?? error))
+    diag(describeNetworkFailure(error))
     return respond(ask())
   }
 }
@@ -525,7 +550,7 @@ const main = async () => {
 // Importing this file for its testable helpers must not consume stdin or exit.
 if (!process.env.PUSHARY_GATE_IMPORT) {
   main().catch((error) => {
-    diag(`fatal: ${error?.message ?? error}`)
+    diag(`fatal: ${describeNetworkFailure(error)}`)
     respond(ask())
   })
 }

package/dist/bin/pushary-claude.js

@@ -7,7 +7,7 @@ import {
   KILL_REASON,
   isDeferAnswer,
   resolveGate
-} from "../chunk-3USMXNVB.js";
+} from "../chunk-GD275GEX.js";
 import {
   askUser,
   cancelQuestion,
@@ -19,7 +19,7 @@ import {
   reportEvent,
   scopePathFor,
   waitForAnswer
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-clean.js

@@ -41,8 +41,8 @@ import {
 } from "../chunk-MUEW424A.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-DQAN3JQP.js";
 import {

package/dist/bin/pushary-codex-hook.js

@@ -4,7 +4,7 @@ import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-3USMXNVB.js";
+} from "../chunk-GD275GEX.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -35,7 +35,7 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   waitForAnswer
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import {
   isGatingMoment,
   recordKeylessMoment

package/dist/bin/pushary-codex.js

@@ -3,7 +3,7 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-connect.js

@@ -6,7 +6,7 @@ import {
   confirmAppConnection,
   connectDevice,
   printConnectInstructions
-} from "../chunk-P7VBAYQO.js";
+} from "../chunk-MGFZXUUR.js";
 import "../chunk-3EGEA4KH.js";
 import {
   readKeySource
@@ -24,8 +24,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import {
@@ -84,7 +84,9 @@ var main = async () => {
     console.log();
     process.exit(EXIT.OK);
   }
-  console.log(`  ${dim("No device of yours can answer yet. Run")} ${cyan("pushary connect")} ${dim("again when you are ready.")}`);
+  console.log(`  ${dim("No device of yours can answer yet.")}`);
+  for (const line of result.repair ?? []) console.log(`  ${dim(line)}`);
+  console.log(`  ${dim("Then run")} ${cyan("pushary connect")} ${dim("again.")}`);
   console.log();
   process.exit(EXIT.NO_DEVICE);
 };

package/dist/bin/pushary-daemon.js

@@ -2,7 +2,7 @@
 import {
   HEARTBEAT_INTERVAL_MS,
   sendHeartbeat
-} from "../chunk-YZT2CBC3.js";
+} from "../chunk-NQTRA7H5.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -11,8 +11,8 @@ import {
 } from "../chunk-MUEW424A.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-doctor.js

@@ -2,6 +2,11 @@
 import {
   describeWaitLadder
 } from "../chunk-IIENZE2J.js";
+import {
+  claudeWired,
+  codexWired,
+  geminiWired
+} from "../chunk-B7R4YSAB.js";
 import {
   agentProbes,
   detectAgent,
@@ -39,7 +44,7 @@ import {
   describeReach,
   fetchChannels,
   reachVerdict
-} from "../chunk-P7VBAYQO.js";
+} from "../chunk-MGFZXUUR.js";
 import "../chunk-3EGEA4KH.js";
 import {
   keyPrefix,
@@ -62,10 +67,10 @@ import {
 } from "../chunk-MUEW424A.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
+} from "../chunk-BBK3TTU2.js";
 import {
   getPackageVersion
-} from "../chunk-JGH37QRB.js";
+} from "../chunk-7OYGFJYZ.js";
 import {
   readLedgerSummary
 } from "../chunk-WLGEY4UX.js";
@@ -149,32 +154,6 @@ var resolveDoctorExit = ({ keyExit, failures }) => {
   return EXIT.PROBLEMS_FOUND;
 };
 
-// src/diagnostics/wiring.ts
-var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
-var CLAUDE_HOOK_BINARY = /pushary-[a-z-]*hook/;
-var claudeWired = ({ claudeJson: claudeJson2, settings, skillExists }) => {
-  if (record(record(claudeJson2)?.mcpServers)?.pushary) return true;
-  const s = record(settings);
-  if (s) {
-    if (CLAUDE_HOOK_BINARY.test(JSON.stringify(s.hooks ?? {}))) return true;
-    const allow = record(s.permissions)?.allow;
-    if (Array.isArray(allow) && allow.some((rule) => String(rule).includes("mcp__pushary__"))) return true;
-  }
-  return skillExists;
-};
-var codexWired = ({ config, hooks, skillExists }) => {
-  if (record(record(config)?.mcp_servers)?.pushary) return true;
-  const h = record(hooks);
-  if (h && hasCodexHooks(h)) return true;
-  return skillExists;
-};
-var geminiWired = ({ settings }) => {
-  const s = record(settings);
-  if (!s) return false;
-  if (record(s.mcpServers)?.pushary) return true;
-  return hasGeminiHooks(s);
-};
-
 // bin/pushary-doctor.ts
 exitOnHelpFlag("doctor");
 var parseDoctorOptions = (argv) => {

package/dist/bin/pushary-gemini-hook.js

@@ -4,7 +4,7 @@ import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-3USMXNVB.js";
+} from "../chunk-GD275GEX.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -26,7 +26,7 @@ import {
   scopePathFor,
   sendNotification,
   waitForAnswer
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import {
   isGatingMoment,
   recordKeylessMoment

package/dist/bin/pushary-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-C5I2RAMT.js";
+} from "../chunk-HU43EZ5Q.js";
 import "../chunk-CAJZAFVS.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
-import "../chunk-3USMXNVB.js";
-import "../chunk-H46LSQRT.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
+import "../chunk-GD275GEX.js";
+import "../chunk-FZIQSDTQ.js";
 import "../chunk-WLGEY4UX.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-login.js

@@ -21,10 +21,10 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
+} from "../chunk-BBK3TTU2.js";
 import {
   getPackageVersion
-} from "../chunk-JGH37QRB.js";
+} from "../chunk-7OYGFJYZ.js";
 import "../chunk-SAF6HGAA.js";
 import {
   UsageError

package/dist/bin/pushary-logout.js

@@ -19,8 +19,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-mode.js

@@ -11,8 +11,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import "../chunk-SAF6HGAA.js";
 import {
   UsageError

package/dist/bin/pushary-notification-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-C5I2RAMT.js";
+} from "../chunk-HU43EZ5Q.js";
 import "../chunk-CAJZAFVS.js";
-import "../chunk-3USMXNVB.js";
-import "../chunk-H46LSQRT.js";
+import "../chunk-GD275GEX.js";
+import "../chunk-FZIQSDTQ.js";
 import "../chunk-WLGEY4UX.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-permission-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-C5I2RAMT.js";
+} from "../chunk-HU43EZ5Q.js";
 import "../chunk-CAJZAFVS.js";
-import "../chunk-3USMXNVB.js";
-import "../chunk-H46LSQRT.js";
+import "../chunk-GD275GEX.js";
+import "../chunk-FZIQSDTQ.js";
 import "../chunk-WLGEY4UX.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-post-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-prompt-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-session-end-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-session-start-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-setup.js

@@ -7,6 +7,11 @@ import {
   addPusharyHooks,
   addPusharyToolPermissions
 } from "../chunk-CAJZAFVS.js";
+import {
+  claudeWired,
+  codexWired,
+  geminiWired
+} from "../chunk-B7R4YSAB.js";
 import {
   describeDetection,
   detectAllAgents,
@@ -48,7 +53,7 @@ import {
   connectViaAppPairing,
   printConnectInstructions,
   setHumanStream
-} from "../chunk-P7VBAYQO.js";
+} from "../chunk-MGFZXUUR.js";
 import "../chunk-3EGEA4KH.js";
 import {
   KEY_FILE_MODE,
@@ -86,10 +91,10 @@ import {
   getPackageVersion,
   isNewerVersion,
   renderCommandHelp
-} from "../chunk-JGH37QRB.js";
+} from "../chunk-7OYGFJYZ.js";
 import {
   reportEvent
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import {
@@ -318,6 +323,9 @@ var parseSetupOptions = (input2) => {
   if (key && keyStdin) {
     throw new UsageError("Pass either --key or --key-stdin, not both");
   }
+  if (key && !isValidApiKey(key)) {
+    throw new UsageError("--key is not a valid API key. Expected the pk_xxx.xxx shape from pushary.com/dashboard/agent/settings");
+  }
   return {
     connectMode,
     connectExplicit: connectRaw !== void 0,
@@ -328,7 +336,14 @@ var parseSetupOptions = (input2) => {
     // Anything that means "there is nobody to answer a prompt". A non-TTY stdin
     // is included because that is the case that used to hang: it is better to
     // take the defaults and say so than to wait forever for a keypress.
-    nonInteractive: yes || agentsFlag !== void 0 || !input2.stdinIsTty,
+    //
+    // --json counts. Under it stdout carries exactly one object and every human
+    // line is redirected to stderr, so a prompt has nowhere to render: the
+    // question goes to stderr while the run blocks on a keypress the caller
+    // cannot see it is waiting for, and whatever is reading stdout waits forever
+    // for an object that never arrives. Asking for machine-readable output is
+    // itself a statement that no human is watching.
+    nonInteractive: yes || agentsFlag !== void 0 || flags.bools.has("json") || !input2.stdinIsTty,
     json: flags.bools.has("json"),
     dryRun: flags.bools.has("dry-run"),
     help,
@@ -359,6 +374,7 @@ var humanStream = process.stdout;
 var writeHuman = (text) => {
   humanStream.write(text);
 };
+var jsonMode = false;
 var dim = (s) => `\x1B[2m${s}\x1B[0m`;
 var bold = (s) => `\x1B[1m${s}\x1B[0m`;
 var green = (s) => `\x1B[32m${s}\x1B[0m`;
@@ -367,6 +383,10 @@ var yellow = (s) => `\x1B[33m${s}\x1B[0m`;
 var check = green("\u2713");
 var abortWith = async (reason, code, keyCheck) => {
   await reportSetupAbort(reason, code, keyCheck);
+  if (jsonMode) {
+    process.stdout.write(`${JSON.stringify({ ok: false, reason, exitCode: code, ...keyCheck ? { keyCheck } : {} }, null, 2)}
+`);
+  }
   return code;
 };
 var readKeyFromStdin = async (options) => {
@@ -1053,6 +1073,44 @@ var setupGemini = async (apiKey) => {
   console.log(`  ${dim("Restart Gemini CLI to load the new config.")}`);
   noteManual("Restart Gemini CLI to load the new config.");
 };
+var agentIsWired = (agent) => {
+  const readJson2 = (path) => {
+    try {
+      return JSON.parse(readFileSync(path, "utf-8"));
+    } catch {
+      return null;
+    }
+  };
+  switch (agent) {
+    case "claude_code":
+      return claudeWired({
+        claudeJson: readJson2(CLAUDE_JSON),
+        settings: readJson2(CLAUDE_SETTINGS),
+        skillExists: existsSync(join(CLAUDE_SKILL_DIR, "SKILL.md"))
+      });
+    case "codex": {
+      let config = null;
+      try {
+        config = parseTOML(readFileSync(join(CODEX_HOME, "config.toml"), "utf-8"));
+      } catch {
+        config = null;
+      }
+      return codexWired({
+        config,
+        hooks: readJson2(CODEX_HOOKS_JSON),
+        skillExists: existsSync(join(CODEX_SKILL_DIR, "SKILL.md"))
+      });
+    }
+    case "gemini_cli":
+      return geminiWired({ settings: readJson2(GEMINI_SETTINGS) });
+    case "cursor":
+      return existsSync(join(CURSOR_PLUGIN_DIR, "mcp.json"));
+    case "vscode":
+      return existsSync(join(VSCODE_PLUGIN_DIR, ".mcp.json"));
+    default:
+      return true;
+  }
+};
 var AGENT_SETUP = {
   claude_code: setupClaudeCode,
   codex: setupCodex,
@@ -1201,7 +1259,8 @@ var resolveAgents = async (options) => {
     return options.agents.agents;
   }
   const detected = detectAgents();
-  if (options.agents.kind === "auto") {
+  const wantsAuto = options.agents.kind === "auto" || options.nonInteractive;
+  if (wantsAuto) {
     const picked = Object.keys(detected).filter((agent) => detected[agent].found);
     if (picked.length === 0) {
       console.log(`  ${yellow("!")} No agents detected, so nothing was configured. Your key is saved.`);
@@ -1283,6 +1342,7 @@ var main = async () => {
   }
   recordSetupOptions(options);
   if (options.json) {
+    jsonMode = true;
     humanStream = process.stderr;
     setHumanStream(process.stderr);
     console.log = (...args) => {
@@ -1304,12 +1364,12 @@ var main = async () => {
   let keyFromPairing = false;
   const storedKey = readConfigFileKey();
   const pairingRequested = connectMode === "app" && options.connectExplicit && !options.skipPhone;
-  const ambientEligible = !(flagKey && isValidApiKey(flagKey)) && !pairingRequested;
+  const ambientEligible = flagKey === void 0 && !pairingRequested;
   const envCheck = ambientEligible && envKey && isValidApiKey(envKey) ? await usableStoredKey(envKey) : null;
   const storedCheck = ambientEligible && envCheck === null && storedKey !== null && isValidApiKey(storedKey) && // login writes both, so without this the same key is probed twice.
   storedKey !== envKey ? await usableStoredKey(storedKey) : null;
   let storedKeyCheck = null;
-  if (flagKey && isValidApiKey(flagKey)) {
+  if (flagKey) {
     const masked = `${flagKey.slice(0, 8)}...${flagKey.slice(-4)}`;
     console.log(`  ${check} Using API key: ${dim(masked)}`);
     console.log();
@@ -1445,8 +1505,15 @@ var main = async () => {
       markStep(`configure:${agent}`);
       try {
         const outcome = await AGENT_SETUP[agent](trimmedKey, context);
-        if (outcome === "skipped") skipped.push(agent);
-        else completed.push(agent);
+        if (outcome === "skipped") {
+          skipped.push(agent);
+        } else if (agentIsWired(agent)) {
+          completed.push(agent);
+        } else {
+          failed.push(agent.replace("_", " "));
+          console.log(`  ${yellow("!")} ${agent.replace("_", " ")} reported success but its config is not there.`);
+          console.log(`  ${dim("Re-run setup, then")} ${cyan("npx @pushary/agent-hooks@latest doctor")} ${dim("to see what is missing.")}`);
+        }
       } catch (err) {
         failed.push(agent.replace("_", " "));
         console.log(`  ${yellow("!")} ${agent.replace("_", " ")} setup failed: ${formatError(err)}`);

package/dist/bin/pushary-stats.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import {
   readLedgerSummary
 } from "../chunk-WLGEY4UX.js";

package/dist/bin/pushary-status.js

@@ -2,12 +2,12 @@
 import {
   describeLastSeen,
   listMachines
-} from "../chunk-YZT2CBC3.js";
+} from "../chunk-NQTRA7H5.js";
 import {
   describeReach,
   fetchChannels,
   reachVerdict
-} from "../chunk-P7VBAYQO.js";
+} from "../chunk-MGFZXUUR.js";
 import "../chunk-3EGEA4KH.js";
 import {
   readKeySource
@@ -26,8 +26,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import {

package/dist/bin/pushary-stop-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-suggestions.js

@@ -7,8 +7,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-upgrade.js

@@ -36,10 +36,10 @@ import {
 } from "../chunk-MUEW424A.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
+} from "../chunk-BBK3TTU2.js";
 import {
   isNewerVersion
-} from "../chunk-JGH37QRB.js";
+} from "../chunk-7OYGFJYZ.js";
 import "../chunk-DQAN3JQP.js";
 import {
   getApiKey

package/dist/bin/pushary-wait.js

@@ -14,8 +14,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import "../chunk-SAF6HGAA.js";
 import {
   UsageError

package/dist/bin/pushary.js

@@ -4,7 +4,7 @@ import {
   getPackageVersion,
   isCommandName,
   renderHelp
-} from "../chunk-JGH37QRB.js";
+} from "../chunk-7OYGFJYZ.js";
 import {
   installProxyDispatcher
 } from "../chunk-SAF6HGAA.js";

package/dist/{chunk-JGH37QRB.js → chunk-7OYGFJYZ.js}

@@ -3,7 +3,7 @@ var COMMAND_LIST = [
   {
     name: "setup",
     module: "pushary-setup",
-    summary: "Configure Claude Code, Codex, Gemini CLI, Hermes, or Cursor with Pushary"
+    summary: "Configure Claude Code, Codex, Gemini CLI, Hermes, Cursor, or VS Code with Pushary"
   },
   {
     name: "claude",

package/dist/chunk-B7R4YSAB.js

@@ -0,0 +1,38 @@
+import {
+  hasGeminiHooks
+} from "./chunk-E2U35RLD.js";
+import {
+  hasCodexHooks
+} from "./chunk-7HG4WUIE.js";
+
+// src/diagnostics/wiring.ts
+var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+var CLAUDE_HOOK_BINARY = /pushary-[a-z-]*hook/;
+var claudeWired = ({ claudeJson, settings, skillExists }) => {
+  if (record(record(claudeJson)?.mcpServers)?.pushary) return true;
+  const s = record(settings);
+  if (s) {
+    if (CLAUDE_HOOK_BINARY.test(JSON.stringify(s.hooks ?? {}))) return true;
+    const allow = record(s.permissions)?.allow;
+    if (Array.isArray(allow) && allow.some((rule) => String(rule).includes("mcp__pushary__"))) return true;
+  }
+  return skillExists;
+};
+var codexWired = ({ config, hooks, skillExists }) => {
+  if (record(record(config)?.mcp_servers)?.pushary) return true;
+  const h = record(hooks);
+  if (h && hasCodexHooks(h)) return true;
+  return skillExists;
+};
+var geminiWired = ({ settings }) => {
+  const s = record(settings);
+  if (!s) return false;
+  if (record(s.mcpServers)?.pushary) return true;
+  return hasGeminiHooks(s);
+};
+
+export {
+  claudeWired,
+  codexWired,
+  geminiWired
+};

package/dist/{chunk-ATP6UQPH.js → chunk-BBK3TTU2.js}

@@ -1,7 +1,7 @@
 import {
   getPackageVersion,
   renderCommandHelp
-} from "./chunk-JGH37QRB.js";
+} from "./chunk-7OYGFJYZ.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";

package/dist/{chunk-H46LSQRT.js → chunk-FZIQSDTQ.js}

@@ -55,6 +55,10 @@ var isWaitForAnswerResponse = (data) => {
 // src/policy.ts
 var CACHE_TTL_MS = 60 * 1e3;
 var STALE_CACHE_MAX_MS = 12 * 60 * 60 * 1e3;
+var policyRequestFor = (agentType) => ({
+  agent: agentType,
+  repoAware: agentType === "claude_code"
+});
 var policyCacheFile = (apiKey, agent, repoAware = false) => {
   const parts = [apiKey, agent, repoAware ? "repoAware" : void 0].filter(Boolean);
   const hash = createHash("sha256").update(parts.join(":")).digest("hex").slice(0, 12);
@@ -132,6 +136,8 @@ var findBestMatch = (policies, toolName, args, repoKey) => {
   }
   return best;
 };
+var isAutoApprove = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "approve";
+var isAutoDeny = (policy) => policy.timeoutSeconds === 0 && policy.timeoutAction === "deny";
 var autoApprove = (tool) => ({
   tool,
   timeoutSeconds: 0,
@@ -164,7 +170,7 @@ var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey) =>
   if (!governedBySpecificRule && toolName === "Bash" && typeof arg === "string" && isSafeReadOnlyCommand(arg)) {
     base = autoApprove(base.tool);
   }
-  const wouldAutoApprove = base.timeoutSeconds === 0 && base.timeoutAction === "approve";
+  const wouldAutoApprove = isAutoApprove(base);
   if (!governedBySpecificRule && wouldAutoApprove && toolName === "Bash" && typeof arg === "string" && classifyDecisionRisk(toolName, arg) === "destructive") {
     base = {
       tool: base.tool,
@@ -181,8 +187,8 @@ var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey) =>
   return base;
 };
 var restraintRank = (policy) => {
-  if (policy.timeoutSeconds === 0 && policy.timeoutAction === "deny") return 4;
-  if (policy.timeoutSeconds === 0 && policy.timeoutAction === "approve") return 0;
+  if (isAutoDeny(policy)) return 4;
+  if (isAutoApprove(policy)) return 0;
   if (policy.mode === "push_only") return 3;
   return policy.mode === "terminal_only" || policy.mode === "notify_only" ? 1 : 2;
 };
@@ -945,31 +951,38 @@ var notifyLateAnswers = async (apiKey, late, agentName, sessionId) => {
 };
 var CLAUDE_CODE_AGENT = { type: "claude_code", label: "Claude Code" };
 var POLICY_CACHE_TTL_MS = 5 * 60 * 1e3;
-var readFreshCachedPolicy = (apiKey) => {
-  const path = policyCacheFile(apiKey);
+var readFreshCachedPolicy = (apiKey, agentType) => {
+  const request = policyRequestFor(agentType);
+  const path = policyCacheFile(apiKey, request.agent, request.repoAware);
   if (!existsSync5(path)) return null;
   const cached = JSON.parse(readFileSync4(path, "utf-8"));
   if (!isPolicyConfig(cached)) return null;
   if (!cached._cachedAt || Date.now() - cached._cachedAt >= POLICY_CACHE_TTL_MS) return null;
   return cached;
 };
-var deriveDecisionSource = (toolName, toolInput, liveMode, cwd) => {
+var autoDecisionEnabled = () => {
+  const flag = process.env.PUSHARY_AUTO_DECISION_BEACON;
+  return flag === "1" || flag === "true";
+};
+var deriveDecisionSource = (toolName, toolInput, liveMode, agentType, cwd) => {
   try {
     if (liveMode.kill) return "terminal";
-    const policy = readFreshCachedPolicy(getApiKey());
+    if (!autoDecisionEnabled()) return void 0;
+    const policy = readFreshCachedPolicy(getApiKey(), agentType);
     if (!policy) return void 0;
     const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput, cwd, repoKeyFor(cwd));
-    if (resolved.timeoutSeconds === 0 && resolved.timeoutAction === "approve") return "policy_auto";
+    if (isAutoApprove(resolved)) return "policy_auto";
     if (resolved.mode === "push_only" || resolved.mode === "push_first") return "human";
     return "terminal";
   } catch {
     return void 0;
   }
 };
-var deriveAutoDecisionBeacon = (toolName, toolInput, liveMode, cwd) => {
+var deriveAutoDecisionBeacon = (toolName, toolInput, liveMode, agentType, cwd) => {
   try {
     if (liveMode.kill) return void 0;
-    const policy = readFreshCachedPolicy(getApiKey());
+    if (!autoDecisionEnabled()) return void 0;
+    const policy = readFreshCachedPolicy(getApiKey(), agentType);
     if (!policy) return void 0;
     const resolved = resolvePolicy(policy, toolName, liveMode.mode, toolInput, cwd, repoKeyFor(cwd));
     if (resolved.timeoutSeconds !== 0 || resolved.timeoutAction !== "approve") return void 0;
@@ -1055,8 +1068,8 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
       for (const l of late) removePendingQuestion(sessionKey, l.correlationId);
     }
     const isMirrorOnly = NON_GATED_MIRROR_TOOLS.has(input.tool_name);
-    const decisionSource = isMirrorOnly ? void 0 : deriveDecisionSource(lookup.tool, lookup.input, liveMode, input.cwd);
-    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, input.cwd) : void 0;
+    const decisionSource = isMirrorOnly ? void 0 : deriveDecisionSource(lookup.tool, lookup.input, liveMode, agent.type, input.cwd);
+    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, agent.type, input.cwd) : void 0;
     const toolReport = reportEvent({
       event: isError ? "tool_error" : "tool_complete",
       agentType: agent.type,
@@ -1310,6 +1323,8 @@ var handleStopFailure = async (input, agent = CLAUDE_CODE_AGENT) => {
 
 export {
   getPolicy,
+  isAutoApprove,
+  isAutoDeny,
   resolveAutoResolveOrigin,
   resolvePolicy,
   resolvePolicyAcross,

package/dist/{chunk-3USMXNVB.js → chunk-GD275GEX.js}

@@ -1,8 +1,10 @@
 import {
+  isAutoApprove,
+  isAutoDeny,
   isModeStateDegraded,
   resolveAutoResolveOrigin,
   resolvePolicyAcross
-} from "./chunk-H46LSQRT.js";
+} from "./chunk-FZIQSDTQ.js";
 import {
   evaluateScope,
   scopeChangeReason,
@@ -34,8 +36,8 @@ var resolveGate = (input) => {
   const { modeState, config, toolName, toolInputs, cwd, repoKey } = input;
   if (modeState.kill) return { kind: "kill", reason: KILL_REASON };
   const policy = resolvePolicyAcross(config, toolName, modeState.mode, toolInputs, cwd, repoKey);
-  const autoApproves = policy.timeoutSeconds === 0 && policy.timeoutAction === "approve";
-  const autoDenies = policy.timeoutSeconds === 0 && policy.timeoutAction === "deny";
+  const autoApproves = isAutoApprove(policy);
+  const autoDenies = isAutoDeny(policy);
   if (autoDenies) return { kind: "deny", policy, reason: `Denied by policy for ${policy.tool}` };
   if (isModeStateDegraded(modeState)) {
     if (autoApproves) {

package/dist/{chunk-C5I2RAMT.js → chunk-HU43EZ5Q.js}

@@ -5,7 +5,7 @@ import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "./chunk-3USMXNVB.js";
+} from "./chunk-GD275GEX.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -25,7 +25,7 @@ import {
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-H46LSQRT.js";
+} from "./chunk-FZIQSDTQ.js";
 import {
   isGatingMoment,
   recordKeylessMoment

package/dist/{chunk-P7VBAYQO.js → chunk-MGFZXUUR.js}

@@ -45,6 +45,27 @@ var describeReach = (channels) => {
   if (verdict.kind === "unattributable") return `${summary}, and no way to tell whose`;
   return summary;
 };
+var describeAppRepair = (verdict) => {
+  switch (verdict.kind) {
+    case "yours":
+      return null;
+    case "nobody":
+      return [
+        "Open the Pushary app, sign in, and allow notifications.",
+        "If this terminal was never paired with your phone, run: npx @pushary/agent-hooks@latest setup --connect app"
+      ];
+    case "others":
+      return [
+        `Reachable devices belong to other members of this workspace (${verdict.otherMembers}).`,
+        "Sign in on the Pushary app with your own account so approvals can reach you."
+      ];
+    case "unattributable":
+      return [
+        "Something is reachable here, but not identifiably yours.",
+        "Sign in on the Pushary app so your approvals are routed to your device."
+      ];
+  }
+};
 
 // src/cli/human.ts
 var stream = process.stdout;
@@ -324,7 +345,12 @@ var printQr = (url) => new Promise((resolve, reject) => {
     reject(err);
   }
 });
-var phoneFailure = (detail) => ({ reachesYou: false, outcome: null, detail });
+var phoneFailure = (detail, repair) => ({
+  reachesYou: false,
+  outcome: null,
+  detail,
+  ...repair ? { repair } : {}
+});
 var waitForDevice = async (apiKey, baseline) => {
   const deadline = Date.now() + CONNECT_TIMEOUT_MS;
   let consecutiveFailures = 0;
@@ -469,9 +495,11 @@ var confirmAppConnection = async (apiKey) => {
   const channels = probe.status;
   const ownedApp = channels.yours?.appDevices ?? channels.appDevices;
   if (channels.precise && ownedApp === 0) {
-    console.log(`  ${yellow("!")} Paired, but the app hasn't registered for notifications yet.`);
-    console.log(`  ${dim("Open the Pushary app and allow notifications, then run")} ${cyan("pushary doctor")}${dim(".")}`);
-    return phoneFailure("app_not_registered");
+    const repair = describeAppRepair(reachVerdict(channels)) ?? [];
+    console.log(`  ${yellow("!")} No device of yours is registered for notifications yet.`);
+    for (const line of repair) console.log(`  ${dim(line)}`);
+    console.log(`  ${dim("Then run")} ${cyan("pushary doctor")}${dim(".")}`);
+    return phoneFailure("app_not_registered", repair);
   }
   return sendAndConfirm(apiKey, channels);
 };

package/dist/{chunk-YZT2CBC3.js → chunk-NQTRA7H5.js}

@@ -1,6 +1,6 @@
 import {
   getPackageVersion
-} from "./chunk-JGH37QRB.js";
+} from "./chunk-7OYGFJYZ.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";

package/dist/src/index.js

@@ -1,8 +1,8 @@
 import {
   handlePreToolUse
-} from "../chunk-C5I2RAMT.js";
+} from "../chunk-HU43EZ5Q.js";
 import "../chunk-CAJZAFVS.js";
-import "../chunk-3USMXNVB.js";
+import "../chunk-GD275GEX.js";
 import {
   askUser,
   cancelQuestion,
@@ -15,7 +15,7 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-WLGEY4UX.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.69.0",
+  "version": "0.70.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",