@pushary/agent-hooks 0.75.0 → 0.76.0

package/CHANGELOG.md

@@ -1,5 +1,36 @@
 # Changelog
 
+## 0.76.0
+
+### A phone-supplied field could switch your approval gate off
+
+`pushary claude --remote` sessions started from the phone build their command
+line from fields the request supplies. The wrapper then read that command line
+back to learn what it had been asked to do, and it scanned every position without
+knowing which ones were a flag's **value** rather than a flag.
+
+So a prompt or a model of `--permission-mode=dontAsk` was read as a real
+permission mode. `dontAsk`, `plan` and `auto` all defer to the agent's own prompt
+unconditionally, which means the session stopped asking you for approvals
+entirely, and the decision log recorded a session that was never gated. A clean
+approval history that is not true is worse than a missing one.
+
+Flag values are now consumed with the flag that owns them, so nothing a request
+supplies can be mistaken for an instruction. A `--permission-mode` you passed
+yourself still works, in both the `--permission-mode plan` and
+`--permission-mode=plan` forms.
+
+The server that queues these sessions now also refuses flag-shaped model and
+working-directory values, so an out-of-date CLI is protected against those two.
+It cannot do the same for the prompt, which is free text you are entitled to
+start with a dash, so **updating is what closes this one properly.**
+
+Reaching it needed an authenticated session on your own account, spawning to your
+own machine, with the daemon running. It is not cross-tenant and not remote code
+execution. It matters most where the person spawning is not the person governed:
+Team approval routing, Partner, and any case where a phone session or API key has
+been compromised.
+
 ## 0.75.0
 
 ### An agent can now run the install

package/dist/bin/pushary-claude.js

@@ -1047,18 +1047,33 @@ var flagValue = (args2, index) => {
   const next = args2[index + 1];
   return next && !next.startsWith("-") ? next : void 0;
 };
+var VALUE_TAKING_FLAGS = /* @__PURE__ */ new Set(["--model", "-m", "--cwd", "--add-dir", "--settings"]);
+var markValueConsumed = (args2, index, consumed, ownsNextToken) => {
+  if (args2[index]?.includes("=")) return;
+  const next = args2[index + 1];
+  if (next == null) return;
+  if (!ownsNextToken && next.startsWith("-")) return;
+  consumed.add(index + 1);
+};
 var parseRemoteArgs = (args2) => {
   let initialPrompt;
   let resume;
   let permissionMode;
+  const consumedAsValue = /* @__PURE__ */ new Set();
   for (let i = 0; i < args2.length; i++) {
     const arg = args2[i];
+    if (consumedAsValue.has(i)) continue;
     if (arg === "-p" || arg === "--print" || arg?.startsWith("--print=")) {
       initialPrompt = flagValue(args2, i);
+      markValueConsumed(args2, i, consumedAsValue, false);
     } else if (arg === "-r" || arg === "--resume" || arg?.startsWith("--resume=")) {
       resume = flagValue(args2, i);
+      markValueConsumed(args2, i, consumedAsValue, false);
     } else if (arg === "--permission-mode" || arg?.startsWith("--permission-mode=")) {
       permissionMode = flagValue(args2, i);
+      markValueConsumed(args2, i, consumedAsValue, false);
+    } else if (VALUE_TAKING_FLAGS.has(arg ?? "")) {
+      markValueConsumed(args2, i, consumedAsValue, true);
     }
   }
   return { initialPrompt, resume, permissionMode };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.75.0",
+  "version": "0.76.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",