@pushary/agent-hooks 0.73.0 → 0.75.0

package/dist/bin/pushary-session-start-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-FZIQSDTQ.js";
+} from "../chunk-7L57N7WN.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-DQAN3JQP.js";
+import "../chunk-TJJBF73A.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-setup.js

@@ -6,12 +6,12 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-CAJZAFVS.js";
+} from "../chunk-3CBPY2G5.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "../chunk-B7R4YSAB.js";
+} from "../chunk-46UEJXQO.js";
 import {
   describeDetection,
   detectAllAgents,
@@ -23,12 +23,12 @@ import {
   shortenHome,
   vscodeSettingsTargets,
   writeInstructionBlock
-} from "../chunk-I4BYZIX4.js";
+} from "../chunk-IZA7SWXX.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
   addGeminiMcpServer
-} from "../chunk-E2U35RLD.js";
+} from "../chunk-CC2K2SST.js";
 import {
   addCodexHookTrust,
   addCodexHooks,
@@ -46,7 +46,7 @@ import {
   geminiSettings,
   pusharyConfigFile,
   vscodePluginDir
-} from "../chunk-7HG4WUIE.js";
+} from "../chunk-QCYN5VXB.js";
 import {
   confirmAppConnection,
   connectDevice,
@@ -72,7 +72,7 @@ import {
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-G4TARJAY.js";
+} from "../chunk-DLBW37U6.js";
 import {
   installClaudeAlias,
   resolveShellRc
@@ -94,7 +94,7 @@ import {
 } from "../chunk-7OYGFJYZ.js";
 import {
   reportEvent
-} from "../chunk-FZIQSDTQ.js";
+} from "../chunk-7L57N7WN.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import {
@@ -102,7 +102,7 @@ import {
 } from "../chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "../chunk-DQAN3JQP.js";
+} from "../chunk-TJJBF73A.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import {
@@ -1412,6 +1412,7 @@ var detectAgents = () => {
   return map;
 };
 var canRunBrowserLogin = () => process.stdout.isTTY === true && !process.env.CI;
+var canShowPairingQr = () => !process.env.CI;
 var resolveAgents = async (options) => {
   if (options.agents.kind === "none") return [];
   if (options.agents.kind === "explicit") {
@@ -1567,7 +1568,7 @@ var main = async () => {
     reportDryRun(null, plannedAgents, null);
     emitJson(options, { ok: true, dryRun: true, agents: plannedAgents, keyCheck: "skipped", key: "none" });
     process.exit(EXIT.OK);
-  } else if (connectMode === "app" && canRunBrowserLogin() && !options.skipPhone) {
+  } else if (connectMode === "app" && canShowPairingQr() && !options.skipPhone) {
     console.log(`  ${dim("Pairing with your Pushary app.")}`);
     console.log(`  ${dim("No app? Ctrl-C, then:")} ${cyan("npx @pushary/agent-hooks setup --connect browser")}`);
     markStep("pair");
@@ -1594,12 +1595,15 @@ var main = async () => {
     console.log();
   } else if (!canRunBrowserLogin()) {
     if (pairingRequested) {
-      console.log(`  ${yellow("!")} ${cyan("--connect app")} needs a terminal to show the pairing QR in.`);
-      console.log(`  ${dim("Drop the flag to use the key this machine already has, or pass --key <pk_xxx.xxx>.")}`);
+      console.log(`  ${yellow("!")} ${cyan("--connect app")} will not draw a pairing QR in CI.`);
+      console.log(`  ${dim("Pass --key <pk_xxx.xxx> or --key-stdin here. Outside CI, setup pairs with no terminal needed.")}`);
+    } else if (process.env.CI) {
+      console.log(`  ${yellow("!")} No API key, and setup does not pair in CI.`);
+      console.log(`  ${dim("Pass --key <pk_xxx.xxx>, or --key-stdin, or export PUSHARY_API_KEY.")}`);
     } else {
-      console.log(`  ${yellow("!")} No API key, and no terminal to sign in from.`);
+      console.log(`  ${yellow("!")} No API key, and nothing here can acquire one.`);
       console.log(`  ${dim("Pass --key <pk_xxx.xxx>, or --key-stdin, or export PUSHARY_API_KEY.")}`);
-      console.log(`  ${dim("On a machine with a terminal, run")} ${cyan("pushary login")} ${dim("once and re-run this.")}`);
+      console.log(`  ${dim("Or drop")} ${cyan("--connect browser")}${dim("/")}${cyan("--skip-phone")} ${dim("and setup will pair with your phone instead.")}`);
     }
     console.log();
     process.exit(await abortWith("no-key", EXIT.NOT_CONFIGURED));

package/dist/bin/pushary-stats.js

@@ -5,8 +5,8 @@ import {
 import "../chunk-7OYGFJYZ.js";
 import {
   readLedgerSummary
-} from "../chunk-WLGEY4UX.js";
-import "../chunk-DQAN3JQP.js";
+} from "../chunk-IA5GBKNL.js";
+import "../chunk-TJJBF73A.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";

package/dist/bin/pushary-status.js

@@ -16,7 +16,7 @@ import "../chunk-6MTNS63X.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-G4TARJAY.js";
+} from "../chunk-DLBW37U6.js";
 import {
   createIo
 } from "../chunk-TX7KBKT7.js";
@@ -33,7 +33,7 @@ import "../chunk-SAF6HGAA.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-DQAN3JQP.js";
+import "../chunk-TJJBF73A.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import {

package/dist/bin/pushary-stop-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-FZIQSDTQ.js";
+} from "../chunk-7L57N7WN.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-DQAN3JQP.js";
+import "../chunk-TJJBF73A.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-FZIQSDTQ.js";
+} from "../chunk-7L57N7WN.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-DQAN3JQP.js";
+import "../chunk-TJJBF73A.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-upgrade.js

@@ -3,13 +3,13 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-CAJZAFVS.js";
+} from "../chunk-3CBPY2G5.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
   addGeminiMcpServer,
   hasGeminiHooks
-} from "../chunk-E2U35RLD.js";
+} from "../chunk-CC2K2SST.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -23,7 +23,7 @@ import {
   hasCodexHooks,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-7HG4WUIE.js";
+} from "../chunk-QCYN5VXB.js";
 import {
   readJsonSafe
 } from "../chunk-6MTNS63X.js";
@@ -40,7 +40,7 @@ import {
 import {
   isNewerVersion
 } from "../chunk-7OYGFJYZ.js";
-import "../chunk-DQAN3JQP.js";
+import "../chunk-TJJBF73A.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";

package/dist/bin/pushary-wait.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   exitOnFailedResponse
-} from "../chunk-SR52774M.js";
+} from "../chunk-7BBUTWBD.js";
 import {
   describeWaitLadder
 } from "../chunk-IIENZE2J.js";
-import "../chunk-G4TARJAY.js";
+import "../chunk-DLBW37U6.js";
 import {
   createIo
 } from "../chunk-TX7KBKT7.js";
@@ -20,7 +20,7 @@ import "../chunk-SAF6HGAA.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-DQAN3JQP.js";
+import "../chunk-TJJBF73A.js";
 import {
   getApiKey,
   getBaseUrl

package/dist/{chunk-CAJZAFVS.js → chunk-3CBPY2G5.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-DQAN3JQP.js";
+} from "./chunk-TJJBF73A.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-B7R4YSAB.js → chunk-46UEJXQO.js}

@@ -1,9 +1,9 @@
 import {
   hasGeminiHooks
-} from "./chunk-E2U35RLD.js";
+} from "./chunk-CC2K2SST.js";
 import {
   hasCodexHooks
-} from "./chunk-7HG4WUIE.js";
+} from "./chunk-QCYN5VXB.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-SR52774M.js → chunk-7BBUTWBD.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-G4TARJAY.js";
+} from "./chunk-DLBW37U6.js";
 import {
   createIo
 } from "./chunk-TX7KBKT7.js";

package/dist/{chunk-FZIQSDTQ.js → chunk-7L57N7WN.js}

@@ -20,7 +20,7 @@ import {
   policyArgForms,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-DQAN3JQP.js";
+} from "./chunk-TJJBF73A.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";

package/dist/{chunk-E2U35RLD.js → chunk-CC2K2SST.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-DQAN3JQP.js";
+} from "./chunk-TJJBF73A.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-HU43EZ5Q.js → chunk-DJHWBNM3.js}

@@ -1,11 +1,11 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS
-} from "./chunk-CAJZAFVS.js";
+} from "./chunk-3CBPY2G5.js";
 import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "./chunk-GD275GEX.js";
+} from "./chunk-UPPHYOIZ.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -25,17 +25,17 @@ import {
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-FZIQSDTQ.js";
+} from "./chunk-7L57N7WN.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-WLGEY4UX.js";
+} from "./chunk-IA5GBKNL.js";
 import {
   buildDecisionEpisodeFeatures,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "./chunk-DQAN3JQP.js";
+} from "./chunk-TJJBF73A.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";
@@ -159,6 +159,7 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
   const now = Date.now();
   const deadline = hookWaitDeadline(START_MS, effectiveWait, "claude", now);
   const clampCut = hookWaitClamped(START_MS, effectiveWait, "claude", now);
+  announceWait(effectiveWait, result.answerUrl, sessionId);
   const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
   if (answer.answered) {
     if (isDeferAnswer(answer.value)) return ask("Handling on your machine");
@@ -206,6 +207,7 @@ var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds,
   if (result.noDevices) {
     return void 0;
   }
+  announceWait(pushFirstSeconds, result.answerUrl, sessionId);
   const deadline = hookWaitDeadline(START_MS, pushFirstSeconds, "claude", Date.now());
   const answer = await pollForAnswer(apiKey, result.correlationId, deadline, 1500);
   if (answer.answered) {
@@ -294,13 +296,33 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
   }
   return result;
 };
+var announceWait = (waitSeconds, answerUrl, sessionId) => {
+  try {
+    const handoff = waitSeconds > 0 ? `Waiting ${waitSeconds}s, then this terminal takes over.` : "Waiting for your answer.";
+    process.stderr.write(`[pushary] Sent to your phone. ${handoff}
+`);
+    if (answerUrl && oncePerSession("answerurl", sessionId)) {
+      process.stderr.write(`          Answer here instead: ${answerUrl}
+`);
+    }
+  } catch {
+  }
+};
 var KEYLESS_NOTICE = "[pushary] Not connected (no API key), so your agent runs untouched. Approval moments are counted locally; see them with: npx @pushary/agent-hooks@latest stats. Connect: https://pushary.com/sign-up?utm_source=cli&utm_medium=keyless-hook";
-var keylessNoticeOnce = (sessionId) => {
+var oncePerSession = (kind, sessionId) => {
   try {
     const key = (sessionId || DEFAULT_SESSION).replace(/[^a-zA-Z0-9_-]/g, "");
-    const marker = join(tmpdir(), `pushary-keyless-${key}`);
-    if (existsSync(marker)) return;
+    const marker = join(tmpdir(), `pushary-${kind}-${key}`);
+    if (existsSync(marker)) return false;
     writeFileSync(marker, "1", "utf-8");
+    return true;
+  } catch {
+    return false;
+  }
+};
+var keylessNoticeOnce = (sessionId) => {
+  try {
+    if (!oncePerSession("keyless", sessionId)) return;
     process.stderr.write(`${KEYLESS_NOTICE}
 `);
   } catch {

package/dist/{chunk-G4TARJAY.js → chunk-DLBW37U6.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "./chunk-DQAN3JQP.js";
+} from "./chunk-TJJBF73A.js";
 import {
   getBaseUrl
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-WLGEY4UX.js → chunk-IA5GBKNL.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-DQAN3JQP.js";
+} from "./chunk-TJJBF73A.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-I4BYZIX4.js → chunk-IZA7SWXX.js}

@@ -1,6 +1,6 @@
 import {
   codexHomeFrom
-} from "./chunk-7HG4WUIE.js";
+} from "./chunk-QCYN5VXB.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-7HG4WUIE.js → chunk-QCYN5VXB.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-DQAN3JQP.js";
+} from "./chunk-TJJBF73A.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";

package/dist/{chunk-GD275GEX.js → chunk-UPPHYOIZ.js}

@@ -4,12 +4,12 @@ import {
   isModeStateDegraded,
   resolveAutoResolveOrigin,
   resolvePolicyAcross
-} from "./chunk-FZIQSDTQ.js";
+} from "./chunk-7L57N7WN.js";
 import {
   evaluateScope,
   scopeChangeReason,
   scopeRequiresHuman
-} from "./chunk-DQAN3JQP.js";
+} from "./chunk-TJJBF73A.js";
 
 // src/answer.ts
 var denyReasonFrom = (value, note) => {

package/dist/src/index.d.ts

@@ -146,6 +146,7 @@ interface AskUserResponse {
     };
     suppressed?: boolean;
     noDevices?: boolean;
+    answerUrl?: string;
 }
 interface WaitForAnswerResponse {
     answered: boolean;

package/dist/src/index.js

@@ -1,8 +1,8 @@
 import {
   handlePreToolUse
-} from "../chunk-HU43EZ5Q.js";
-import "../chunk-CAJZAFVS.js";
-import "../chunk-GD275GEX.js";
+} from "../chunk-DJHWBNM3.js";
+import "../chunk-3CBPY2G5.js";
+import "../chunk-UPPHYOIZ.js";
 import {
   askUser,
   cancelQuestion,
@@ -15,12 +15,12 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-FZIQSDTQ.js";
-import "../chunk-WLGEY4UX.js";
+} from "../chunk-7L57N7WN.js";
+import "../chunk-IA5GBKNL.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-DQAN3JQP.js";
+import "../chunk-TJJBF73A.js";
 import "../chunk-RN3NOEJF.js";
 import {
   getApiKey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.73.0",
+  "version": "0.75.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",