@pushary/agent-hooks 0.69.0 → 0.71.0

package/CHANGELOG.md

@@ -1,5 +1,72 @@
 # Changelog
 
+## 0.71.0
+
+### Setting up Codex no longer gets Codex deleted by macOS
+
+Setup ran `codex --version` to decide whether your Codex was new enough for
+native hooks. On macOS, executing a binary hands it to XProtect, and current
+definitions false-positive on the Codex CLI: macOS killed it and moved it to the
+Trash. Reading a version number destroyed the tool it was asking, mid-setup, and
+the only thing you saw was "codex was not opened because it contains malware".
+
+Setup no longer runs Codex, or any other agent's binary, to learn something about
+it. The version now comes from the package manifest next to the binary, which
+covers npm, bun, pnpm and yarn installs, and from `brew list` for the Homebrew
+cask, which ships no manifest. Same result, nothing launched.
+
+If your Codex was already quarantined, reinstall it: `npm install -g @openai/codex`
+or `brew install --cask codex`.
+
+## 0.70.0
+
+### A key you name is the key you get
+
+Passing `--key` with a malformed value did not fail. Setup read it as no key at
+all, went looking elsewhere, and used whichever key it found: one already stored
+on the machine, one in your environment, or a brand new one it created by pairing.
+You named a credential and quietly got a different one. It now stops and says the
+key is not valid.
+
+### setup --json no longer stops to ask a question nobody can see
+
+Asking for machine-readable output says plainly that no human is watching, but
+setup could still reach an agent-selection prompt. Piped into a script it waited
+for a keypress that was never coming, and the prompt drew itself onto the same
+output a program was trying to read as JSON. It now selects the agents it detects,
+which is exactly what pressing Enter on that prompt would have chosen.
+
+`--json` also promises a single object of output, and every failing exit used to
+print nothing at all. A refused key, a cancelled pairing and a crash were
+indistinguishable to anything reading the output. Each now says which it was.
+
+### Setup checks its own work
+
+An agent installer that finished without an error was reported as configured,
+even if nothing had been written. Doctor would then contradict setup minutes
+later. Setup now confirms the configuration is really there, using the same check
+doctor uses, so the two cannot disagree.
+
+### connect points at the fix that matches your situation
+
+`pushary connect --app` gave one answer for every way a phone can be out of
+reach: open the app and allow notifications. That is right when the app is signed
+in and the permission was declined, and wrong otherwise. A terminal that was
+never paired needs setup. A phone signed in to a colleague's account needs your
+account, not a permission toggle. It now says which applies, and when it cannot
+tell the two apart it says both rather than sounding certain about the wrong one.
+
+### The editor gates say when a proxy is in the way
+
+The Cursor and VS Code gates cannot route through a corporate proxy. They still
+hand the decision safely to the editor's own prompt, so nothing is blocked, but
+every approval quietly stopped reaching your phone with no explanation. When a
+proxy is configured they now name it as the likely cause, and on Node 24 or newer
+they name the setting that fixes it.
+
+VS Code is also now listed among the supported agents, which it has been since
+its plugin shipped.
+
 ## 0.69.0
 
 ### An approval is never granted on a state Pushary could not confirm

package/README.md

@@ -4,7 +4,7 @@
 [![npm downloads](https://img.shields.io/npm/dm/@pushary/agent-hooks.svg)](https://www.npmjs.com/package/@pushary/agent-hooks)
 [![license](https://img.shields.io/npm/l/@pushary/agent-hooks.svg)](./LICENSE)
 
-Push notifications, questions, and permission approvals for AI coding agents. Get a push when your agent finishes work, answer its questions from your phone, and approve risky commands before they run. Works with Claude Code, Codex, Cursor, Gemini CLI, and Hermes.
+Push notifications, questions, and permission approvals for AI coding agents. Get a push when your agent finishes work, answer its questions from your phone, and approve risky commands before they run. Works with Claude Code, Codex, Cursor, VS Code, Gemini CLI, and Hermes.
 
 Your agent froze waiting for a yes. This is how it reaches you.
 
@@ -53,6 +53,7 @@ npx @pushary/agent-hooks@latest doctor
 | Cursor | yes | yes | yes |
 | Gemini CLI | yes | yes | yes |
 | Hermes | yes | yes | yes |
+| VS Code | yes | yes | yes |
 
 Any other MCP client can use notify and ask by pointing at the Pushary MCP endpoint directly.
 
@@ -62,7 +63,7 @@ Any other MCP client can use notify and ask by pointing at the Pushary MCP endpo
      asserts this list matches it. Do not edit one without the other. -->
 
 ```
-setup        Configure Claude Code, Codex, Gemini CLI, Hermes, or Cursor with Pushary
+setup        Configure Claude Code, Codex, Gemini CLI, Hermes, Cursor, or VS Code with Pushary
 claude       Run Claude Code through Pushary, reachable from your phone even when idle
 daemon       Keep this machine reachable so your phone can START a new session
 status       One screen: which key is in force, whether the server accepts it, what can receive an approval

package/data/cursor-plugin/scripts/pushary-gate.mjs

@@ -271,6 +271,31 @@ const capActionBody = (text) =>
   text.length <= ACTION_BODY_MAX ? text : `${text.slice(0, ACTION_BODY_MAX - ACTION_BODY_TRUNCATION_MARKER.length)}${ACTION_BODY_TRUNCATION_MARKER}`
 const deriveActionBody = (command) => capActionBody(redactSecretsDeep(command))
 
+// ── network diagnosis ────────────────────────────────────────────────────────
+//
+// This gate is a dependency-free .mjs, so unlike the CLI it cannot install
+// undici's EnvHttpProxyAgent and its fetch ignores HTTP_PROXY entirely. Node
+// gained a native equivalent in 24 (NODE_USE_ENV_PROXY), but that is read at
+// startup, so a script cannot switch it on for itself.
+//
+// The gate already fails safe: any error here hands the decision to the editor's
+// own prompt. The cost is therefore not a blocked command, it is SILENCE. On a
+// corporate network every approval quietly stops reaching the phone and the only
+// trace is one stderr line nobody reads. So when a proxy is configured and the
+// network call fails, say which of those two it is.
+export const PROXY_VARS = ['HTTPS_PROXY', 'https_proxy', 'HTTP_PROXY', 'http_proxy']
+
+export const proxyConfigured = (env = process.env) =>
+  PROXY_VARS.some(name => (env[name] ?? '').trim() !== '')
+
+export const describeNetworkFailure = (error, env = process.env) => {
+  const detail = error?.message ?? String(error)
+  if (!proxyConfigured(env)) return detail
+  const enabled = (env.NODE_USE_ENV_PROXY ?? '').trim() !== ''
+  if (enabled) return detail
+  return `${detail} (a proxy is set in HTTP_PROXY/HTTPS_PROXY and this hook cannot use it; on Node 24+ set NODE_USE_ENV_PROXY=1 in the editor's environment)`
+}
+
 // ── ask / wait ───────────────────────────────────────────────────────────────
 // Redacted, not raw. This is the text a human reads on a lock screen and in
 // Slack, and it used to be the command verbatim: `curl -H "Authorization:
@@ -447,12 +472,16 @@ const main = async () => {
         return respond(await handlePushFirst(apiKey, command, project, ident, tool.pushFirstSeconds))
     }
   } catch (error) {
-    process.stderr.write(`[pushary-gate] ${error?.message ?? error}\n`)
+    process.stderr.write(`[pushary-gate] ${describeNetworkFailure(error)}\n`)
     return respond(ask())
   }
 }
 
-main().catch((error) => {
-  process.stderr.write(`[pushary-gate] fatal: ${error?.message ?? error}\n`)
-  respond(ask())
-})
+// Guarded like the VS Code gate: importing this file to unit-test its pure
+// helpers must not start a hook run that reads stdin and writes a decision.
+if (!process.env.PUSHARY_GATE_IMPORT) {
+  main().catch((error) => {
+    process.stderr.write(`[pushary-gate] fatal: ${describeNetworkFailure(error)}\n`)
+    respond(ask())
+  })
+}

package/data/vscode-plugin/scripts/pushary-gate.mjs

@@ -345,6 +345,31 @@ export const shouldGate = (toolName, toolInput) => {
   return command
 }
 
+// ── network diagnosis ────────────────────────────────────────────────────────
+//
+// This gate is a dependency-free .mjs, so unlike the CLI it cannot install
+// undici's EnvHttpProxyAgent and its fetch ignores HTTP_PROXY entirely. Node
+// gained a native equivalent in 24 (NODE_USE_ENV_PROXY), but that is read at
+// startup, so a script cannot switch it on for itself.
+//
+// The gate already fails safe: any error here hands the decision to the editor's
+// own prompt. The cost is therefore not a blocked command, it is SILENCE. On a
+// corporate network every approval quietly stops reaching the phone and the only
+// trace is one stderr line nobody reads. So when a proxy is configured and the
+// network call fails, say which of those two it is.
+export const PROXY_VARS = ['HTTPS_PROXY', 'https_proxy', 'HTTP_PROXY', 'http_proxy']
+
+export const proxyConfigured = (env = process.env) =>
+  PROXY_VARS.some(name => (env[name] ?? '').trim() !== '')
+
+export const describeNetworkFailure = (error, env = process.env) => {
+  const detail = error?.message ?? String(error)
+  if (!proxyConfigured(env)) return detail
+  const enabled = (env.NODE_USE_ENV_PROXY ?? '').trim() !== ''
+  if (enabled) return detail
+  return `${detail} (a proxy is set in HTTP_PROXY/HTTPS_PROXY and this hook cannot use it; on Node 24+ set NODE_USE_ENV_PROXY=1 in the editor's environment)`
+}
+
 // ── ask / wait ────────────────────────────────────────────────────────────────
 // Redacted, not raw. This is the text a human reads on a lock screen and in
 // Slack, and it used to be the command verbatim: `curl -H "Authorization:
@@ -517,7 +542,7 @@ const main = async () => {
         return respond(await handlePushFirst(apiKey, command, project, ident, tool.pushFirstSeconds))
     }
   } catch (error) {
-    diag(String(error?.message ?? error))
+    diag(describeNetworkFailure(error))
     return respond(ask())
   }
 }
@@ -525,7 +550,7 @@ const main = async () => {
 // Importing this file for its testable helpers must not consume stdin or exit.
 if (!process.env.PUSHARY_GATE_IMPORT) {
   main().catch((error) => {
-    diag(`fatal: ${error?.message ?? error}`)
+    diag(`fatal: ${describeNetworkFailure(error)}`)
     respond(ask())
   })
 }

package/dist/bin/pushary-claude.js

@@ -7,7 +7,7 @@ import {
   KILL_REASON,
   isDeferAnswer,
   resolveGate
-} from "../chunk-3USMXNVB.js";
+} from "../chunk-GD275GEX.js";
 import {
   askUser,
   cancelQuestion,
@@ -19,7 +19,7 @@ import {
   reportEvent,
   scopePathFor,
   waitForAnswer
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-clean.js

@@ -41,8 +41,8 @@ import {
 } from "../chunk-MUEW424A.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-DQAN3JQP.js";
 import {

package/dist/bin/pushary-codex-hook.js

@@ -4,7 +4,7 @@ import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-3USMXNVB.js";
+} from "../chunk-GD275GEX.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -35,7 +35,7 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   waitForAnswer
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import {
   isGatingMoment,
   recordKeylessMoment

package/dist/bin/pushary-codex.js

@@ -3,7 +3,7 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-connect.js

@@ -6,7 +6,7 @@ import {
   confirmAppConnection,
   connectDevice,
   printConnectInstructions
-} from "../chunk-P7VBAYQO.js";
+} from "../chunk-MGFZXUUR.js";
 import "../chunk-3EGEA4KH.js";
 import {
   readKeySource
@@ -24,8 +24,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import {
@@ -84,7 +84,9 @@ var main = async () => {
     console.log();
     process.exit(EXIT.OK);
   }
-  console.log(`  ${dim("No device of yours can answer yet. Run")} ${cyan("pushary connect")} ${dim("again when you are ready.")}`);
+  console.log(`  ${dim("No device of yours can answer yet.")}`);
+  for (const line of result.repair ?? []) console.log(`  ${dim(line)}`);
+  console.log(`  ${dim("Then run")} ${cyan("pushary connect")} ${dim("again.")}`);
   console.log();
   process.exit(EXIT.NO_DEVICE);
 };

package/dist/bin/pushary-daemon.js

@@ -2,7 +2,7 @@
 import {
   HEARTBEAT_INTERVAL_MS,
   sendHeartbeat
-} from "../chunk-YZT2CBC3.js";
+} from "../chunk-NQTRA7H5.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -11,8 +11,8 @@ import {
 } from "../chunk-MUEW424A.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-doctor.js

@@ -2,6 +2,11 @@
 import {
   describeWaitLadder
 } from "../chunk-IIENZE2J.js";
+import {
+  claudeWired,
+  codexWired,
+  geminiWired
+} from "../chunk-B7R4YSAB.js";
 import {
   agentProbes,
   detectAgent,
@@ -39,7 +44,7 @@ import {
   describeReach,
   fetchChannels,
   reachVerdict
-} from "../chunk-P7VBAYQO.js";
+} from "../chunk-MGFZXUUR.js";
 import "../chunk-3EGEA4KH.js";
 import {
   keyPrefix,
@@ -62,10 +67,10 @@ import {
 } from "../chunk-MUEW424A.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
+} from "../chunk-BBK3TTU2.js";
 import {
   getPackageVersion
-} from "../chunk-JGH37QRB.js";
+} from "../chunk-7OYGFJYZ.js";
 import {
   readLedgerSummary
 } from "../chunk-WLGEY4UX.js";
@@ -149,32 +154,6 @@ var resolveDoctorExit = ({ keyExit, failures }) => {
   return EXIT.PROBLEMS_FOUND;
 };
 
-// src/diagnostics/wiring.ts
-var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
-var CLAUDE_HOOK_BINARY = /pushary-[a-z-]*hook/;
-var claudeWired = ({ claudeJson: claudeJson2, settings, skillExists }) => {
-  if (record(record(claudeJson2)?.mcpServers)?.pushary) return true;
-  const s = record(settings);
-  if (s) {
-    if (CLAUDE_HOOK_BINARY.test(JSON.stringify(s.hooks ?? {}))) return true;
-    const allow = record(s.permissions)?.allow;
-    if (Array.isArray(allow) && allow.some((rule) => String(rule).includes("mcp__pushary__"))) return true;
-  }
-  return skillExists;
-};
-var codexWired = ({ config, hooks, skillExists }) => {
-  if (record(record(config)?.mcp_servers)?.pushary) return true;
-  const h = record(hooks);
-  if (h && hasCodexHooks(h)) return true;
-  return skillExists;
-};
-var geminiWired = ({ settings }) => {
-  const s = record(settings);
-  if (!s) return false;
-  if (record(s.mcpServers)?.pushary) return true;
-  return hasGeminiHooks(s);
-};
-
 // bin/pushary-doctor.ts
 exitOnHelpFlag("doctor");
 var parseDoctorOptions = (argv) => {

package/dist/bin/pushary-gemini-hook.js

@@ -4,7 +4,7 @@ import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-3USMXNVB.js";
+} from "../chunk-GD275GEX.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -26,7 +26,7 @@ import {
   scopePathFor,
   sendNotification,
   waitForAnswer
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import {
   isGatingMoment,
   recordKeylessMoment

package/dist/bin/pushary-hook.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-C5I2RAMT.js";
+} from "../chunk-HU43EZ5Q.js";
 import "../chunk-CAJZAFVS.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
-import "../chunk-3USMXNVB.js";
-import "../chunk-H46LSQRT.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
+import "../chunk-GD275GEX.js";
+import "../chunk-FZIQSDTQ.js";
 import "../chunk-WLGEY4UX.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-login.js

@@ -21,10 +21,10 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
+} from "../chunk-BBK3TTU2.js";
 import {
   getPackageVersion
-} from "../chunk-JGH37QRB.js";
+} from "../chunk-7OYGFJYZ.js";
 import "../chunk-SAF6HGAA.js";
 import {
   UsageError

package/dist/bin/pushary-logout.js

@@ -19,8 +19,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-mode.js

@@ -11,8 +11,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ATP6UQPH.js";
-import "../chunk-JGH37QRB.js";
+} from "../chunk-BBK3TTU2.js";
+import "../chunk-7OYGFJYZ.js";
 import "../chunk-SAF6HGAA.js";
 import {
   UsageError

package/dist/bin/pushary-notification-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-C5I2RAMT.js";
+} from "../chunk-HU43EZ5Q.js";
 import "../chunk-CAJZAFVS.js";
-import "../chunk-3USMXNVB.js";
-import "../chunk-H46LSQRT.js";
+import "../chunk-GD275GEX.js";
+import "../chunk-FZIQSDTQ.js";
 import "../chunk-WLGEY4UX.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-permission-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-C5I2RAMT.js";
+} from "../chunk-HU43EZ5Q.js";
 import "../chunk-CAJZAFVS.js";
-import "../chunk-3USMXNVB.js";
-import "../chunk-H46LSQRT.js";
+import "../chunk-GD275GEX.js";
+import "../chunk-FZIQSDTQ.js";
 import "../chunk-WLGEY4UX.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-post-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-prompt-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-session-end-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/dist/bin/pushary-session-start-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-H46LSQRT.js";
+} from "../chunk-FZIQSDTQ.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";