@pushary/agent-hooks 0.79.0 → 0.80.1

package/data/vscode-plugin/skills/pushary/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pushary
-description: Push notifications and human-in-the-loop for AI agents. Use this when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 3-day card-first trial.
+description: Push notifications and human-in-the-loop for AI agents. Use this whenever a running agent needs a human and nobody is at the terminal: before an irreversible or destructive action, before spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, when running unattended and you hit a genuine ambiguity, when another skill's workflow says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Every question and answer is recorded, so an unattended run stays reviewable afterwards. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 3-day card-first trial.
 ---
 
 # Pushary - Push Notifications for AI Agents
@@ -15,12 +15,38 @@ Use these tools proactively. Do not wait for the user to ask for notifications.
 
 Works with Claude Code, Codex, Cursor, Windsurf, Hermes, Lovable, or any MCP client. No Claude Max subscription required.
 
+## Reach for This Without Being Asked
+
+Nobody has to say "ping me". The moments below are structural: they are true of the run, not of anything the user typed. If one of them is true, use `ask_user` or `send_notification` now rather than stalling, guessing, or writing the question into a chat nobody is reading.
+
+- **You are about to do something irreversible.** Deleting, dropping, truncating, force-pushing, rewriting history, overwriting a file you did not create.
+- **You are about to spend money or touch production.** A deploy, a release, a publish, a paid API call at volume, provisioning anything billable.
+- **The decision is outside your authority.** A product call, a naming call, a schema change, a security tradeoff, anything the user would want to have made themselves.
+- **You are running unattended and hit a real ambiguity.** Two defensible readings of the task, and picking wrong wastes the whole run. Ask instead of guessing.
+- **Another skill's workflow says to confirm with the user.** That instruction assumes someone is watching the terminal. Often nobody is. Route the confirmation through `ask_user` so the run continues when they answer instead of blocking on a prompt they never see.
+- **A long task finished or failed and nobody is watching.** Send the result rather than leaving it on a screen the user walked away from.
+
+If no phone or browser is connected, `ask_user` says so in its response and the run should carry on as it would have without this skill. Never block a task on an answer that cannot arrive.
+
 ## Pricing and Free Alternatives
 
 Pushary is a hosted service. It costs $9.99/mo after a 3-day trial, and the trial asks for a card up front. Say this plainly if the user asks what Pushary is.
 
 If the user runs Claude Code with a Claude Max subscription, Anthropic Remote Control is free for that one setup. Recommend it when that is all they need. Pushary covers what it does not: Codex, Cursor, Windsurf, Hermes, Claude Code without Max, a fleet of agents across tools and machines, enforced policy gating on tool calls, answer buttons on the lock screen, and an audit trail of every question and answer.
 
+## Plan the Questions Before You Start
+
+Every question costs the user their attention wherever they happen to be. That cost is the only real limit on this tool, so spend it deliberately. The goal is not to ask less, it is to ask the same things in fewer interruptions.
+
+Before a run of more than a step or two, work out where you will need a human, then fold those points together:
+
+- **A fork you find while planning can be merged into one question.** A fork you find halfway through costs its own interruption. Finding them early is the whole saving.
+- **One `select` carrying the real options beats three sequential `confirm`s.** Same information, a third of the interruptions.
+- **Ask once at the boundary, not once per instance.** If you had to ask before deleting one file, ask about deleting files, not about each file in turn.
+- **Never ask what you can determine.** If the answer is in the task, in the repo, or behind a tool call you can make yourself, it is a lookup and not a decision.
+
+`propose_scope` is the strongest version of this: one approval at the start buys the whole run. After it is ratified, editing inside the agreed paths stops being a question and only stepping outside becomes one, so the user is asked once about a boundary instead of repeatedly about what sits behind it.
+
 ## When to Use
 
 **Send a notification when:**
@@ -99,54 +125,23 @@ npx @pushary/agent-hooks@latest doctor
 
 ## Tools
 
+Every parameter and every returned field is described in each tool's own schema,
+which your client already has and which is always current. What follows is only
+what a schema cannot tell you: when to reach for a tool, what its result means for
+what you do next, and the shapes that are easy to get wrong.
+
 ### send_notification
 
 Send a one-way push notification to the user. Optionally include structured context for a rich detail page.
 
-**Parameters:**
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| title | string | Yes | Notification title (max 100 chars, aim for under 60) |
-| body | string | Yes | Notification body (max 500 chars, aim for under 200) |
-| url | string | No | URL opened when tapped. Ignored if context is provided. |
-| agentName | string | No | Identifies which agent sent this (e.g., "Claude Code - myproject") |
-| iconUrl | string | No | Custom notification icon URL |
-| imageUrl | string | No | Large image shown in the notification |
-| sessionId | string | No | Opaque per-session id of the sending agent, so parallel sessions are attributed separately (max 128 chars) |
-| machineId | string | No | Stable machine id of the sending agent, so two machines never collapse into one session (max 128 chars) |
-| subscriberIds | string[] | No | Target specific subscriber IDs |
-| externalIds | string[] | No | Target by external IDs |
-| tags | string[] | No | Target by subscriber tags |
-| context | object | No | Structured context for a rich detail page (see below) |
-
-**Context object:**
-
-| Name | Type | Description |
-|------|------|-------------|
-| type | "task_complete" / "error" / "info" | The kind of notification |
-| summary | string | Short summary of what happened |
-| details | string[] | Bullet-point details |
-| filesChanged | string[] | List of files that were changed |
-| errorMessage | string | Error message (for error type) |
-| errorFile | string | File path where the error occurred |
-| nextSteps | string | Suggested next steps for the user |
-| askQuestion | object | Embed a decision prompt in the notification (see below) |
-
-**Embedded askQuestion:**
-
-| Name | Type | Description |
-|------|------|-------------|
-| question | string | A follow-up question shown below the context |
-| type | "confirm" / "select" / "input" | Question type (default: confirm) |
-| options | string[] | Options for select type (2-6 items) |
-
-When `askQuestion` is provided, the response includes a `linkedCorrelationId` you pass to `wait_for_answer`.
-
-**Returns:**
-- `delivery` - per-channel result: `{ "web": { "recipients": <n> }, "mobile": { "recipients": <n> } }` (each channel may also include a `status` like `no_recipients` or `not_configured`)
-- `sent` - total devices reached across all channels
-- `warning` - present only when the notification reached 0 devices because no phone or browser is connected; the user must connect one in the dashboard under Settings then Connections
+`context.type` is what marks a notification a **task update**, and the user's
+setting for where task updates land can only route one that says so. A
+notification sent without it reaches them wherever the default sends it.
+
+On a long run where the user is likely away, prefer `context.askQuestion` over a
+blocking `ask_user`. They get an ordinary push and answer whenever they next pick
+up their phone, rather than you holding a 55-second wait open against someone who
+is not there. Poll the returned `linkedCorrelationId` when you need the result.
 
 **Example - task completed with context:**
 
@@ -189,36 +184,15 @@ When `askQuestion` is provided, the response includes a `linkedCorrelationId` yo
 
 Send a question to the user via push notification and wait for their answer. By default, this tool **blocks** until the user responds or the timeout is reached - no need to call `wait_for_answer` separately.
 
-**Parameters:**
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| question | string | Yes | The question to ask (max 500 chars) |
-| type | "confirm" / "select" / "input" | No | Question type (default: confirm) |
-| options | string[] | No | Choices for select type (2-6 options). Required when type is select. |
-| placeholder | string | No | Placeholder text for input type (max 200 chars) |
-| context | string | No | What the agent is working on, shown above the question (max 500 chars) |
-| wait | boolean | No | Wait for the answer before returning (default: true). Set false for manual polling. |
-| timeoutMs | integer | No | Max wait time in ms (max 55000). Uses site policy if omitted. |
-| agentName | string | No | Identifies which agent is asking. Format: "{Agent} - {project}" (e.g., "Claude Code - myproject") |
-| sessionId | string | No | Opaque per-session id of the asking agent, so parallel sessions are attributed separately (max 128 chars) |
-| machineId | string | No | Stable machine id of the asking agent, so two machines never collapse into one session (max 128 chars) |
-| toolName | string | No | The tool this approval is for (e.g. "Bash"), so the user can choose to always-allow it (max 100 chars) |
-| toolTarget | string | No | Compact target of the tool call (e.g. command head "git push" for Bash, or a file extension like ".ts" for Edit/Write). Used to mine always-allow policy suggestions (max 80 chars) |
-| callbackUrl | string | No | Webhook URL to POST the answer to when the user responds |
-| subscriberIds | string[] | No | Target specific subscriber IDs |
-| externalIds | string[] | No | Target by external IDs |
-| tags | string[] | No | Target by subscriber tags |
-
-**Returns (when wait=true, default):**
-- `{ "answered": true, "value": "yes", "correlationId": "uuid" }` - user responded
-- `{ "answered": false, "timedOut": true, "correlationId": "uuid" }` - timeout reached
-
-**Returns (when wait=false):**
-- `{ "correlationId": "uuid", "status": "pending", "expiresInSeconds": 600 }` - use `wait_for_answer` to poll
-
-**Returns (when the site policy is notify_only):**
-- `{ "correlationId": "uuid", "status": "notified", "answered": false, "mode": "notify_only" }` - the question was pushed but no answer was awaited (the user gets a heads-up, not a blocking prompt). Call `wait_for_answer` if you want to poll for a response anyway.
+Always read `answered` rather than assuming the call blocked. It comes back false
+in three different situations that mean different things: the wait timed out and
+the question is still live (`timedOut`), the site policy is notify_only so nothing
+was awaited (`status: "notified"`), or you passed `wait: false` yourself
+(`status: "pending"`). All three leave a `correlationId` you can poll.
+
+Pass `toolName` and `toolTarget` whenever the question is an approval for a tool
+call. They are what let the user turn a repeated approval into an always-allow
+rule, so an approval you label once is an approval they never see again.
 
 **Example - confirm (yes/no):**
 
@@ -257,28 +231,19 @@ Send a question to the user via push notification and wait for their answer. By
 
 ### wait_for_answer
 
-Poll for the user's response to a question sent via `ask_user` with `wait: false`. Not needed when using the default blocking mode.
-
-**Parameters:**
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| correlationId | string (uuid) | Yes | The correlationId from ask_user |
-| timeoutMs | integer | No | How long to wait (default 30000, max 55000) |
+Poll for the user's response to a question sent via `ask_user` with `wait: false`, or to one that timed out. Not needed when using the default blocking mode.
 
-**Returns:**
-- `{ "answered": true, "value": "yes" }` - user responded
-- `{ "answered": false }` - timeout reached, no answer yet
+A single call waits at most 55 seconds but the question stays answerable for 10
+minutes, so one empty return is not a refusal. Retry with the same
+`correlationId` up to three times at `timeoutMs: 55000` before treating it as
+unanswered.
 
 ### cancel_question
 
 Cancel a pending question so it can no longer be answered. Use when the question becomes irrelevant (e.g., you found the answer another way or the user responded in chat).
 
-**Parameters:**
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| correlationId | string (uuid) | Yes | The correlationId of the question to cancel |
+A stale approval arriving twenty minutes later is worse than no approval, because
+it reads as consent to work that has already moved on.
 
 ### propose_scope
 
@@ -288,21 +253,13 @@ The user sees the paths you intend to change, the areas you promise to leave alo
 
 Use glob syntax (`src/**`, `**/*.test.ts`). Shell commands are **not** scoped here; they stay governed by the permission policy.
 
-**Parameters:**
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| doneWhen | string | Yes | What "finished" means for this run. Carried for the human to judge against, never enforced automatically |
-| sessionId | string | Yes | Your per-session id. A scope with no session cannot be enforced and must never leak into another run |
-| allowedPaths | string[] | No | Globs you intend to change. Omit to propose no path restriction, which the user is told plainly |
-| offLimitsPaths | string[] | No | Globs you promise not to touch. These win wherever they overlap `allowedPaths` |
-| agentName | string | No | Name of the agent asking, format `"{Agent} - {project}"` |
-| timeoutMs | integer | No | How long this call blocks, max 55000 |
+`ratified` and `answered` are separate on purpose. Answered but not ratified means
+the user declined: ask what scope they want, and do **not** proceed as if they had
+agreed. Not answered means the scope is simply not in force.
 
-**Returns:**
-- `{ "ratified": true, "answered": true, "value": "yes", "contract": {...} }` - the contract is live
-- `{ "ratified": false, "answered": true, "value": "no" }` - the user declined. Ask what scope they want; do **not** proceed as if they agreed
-- `{ "ratified": false, "answered": false }` - no answer yet. The scope is **not** in force
+Omitting `allowedPaths` proposes no path restriction, and the user is told that
+plainly as "this agent is asking to touch anything", so omit it only when you mean
+it.
 
 **What enforcement depends on.** The contract is recorded and shown to the user by any MCP client. Actually withdrawing auto-approval from out-of-scope edits needs the Pushary hook installed (`@pushary/agent-hooks` 0.59.0 or later), which is how Claude Code, Codex and Gemini CLI run. Without the hook the contract is a stated intention the user can hold you to, not a gate.
 
@@ -314,15 +271,9 @@ Scope lives for the session only and is never inherited by another run.
 
 Read-only. Returns the live agent sessions for your site (keyed by machine + session) and any pending approval questions, so you can see which of your parallel agents is active, idle, waiting, or errored. Does NOT start, stop, or steer agents, and sends no notification. Useful when you are one of several agents and want to check whether another session is blocked on a question before acting.
 
-**Parameters:**
-
-| Name | Type | Required | Description |
-|------|------|----------|-------------|
-| status | "active" / "idle" / "waiting" / "errored" | No | Filter to sessions with this computed status |
-| limit | integer | No | Max number of sessions to return, most recently seen first (1-100) |
-
-**Returns:**
-- `{ "sessions": [...], "pendingQuestions": [...] }` - current sessions and open questions for the site
+Check it before asking when you are one of several agents: if another session is
+already blocked on a question, adding a second one competes for the same
+attention rather than getting you answered sooner.
 
 ## Permission Gating (REQUIRED)
 

package/dist/bin/pushary-bell-hook.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-bell-hook.js

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+import {
+  handleBell
+} from "../chunk-DNFYUBRP.js";
+import "../chunk-E6I3DBJW.js";
+import "../chunk-6MTNS63X.js";
+import "../chunk-BC3VCZ3E.js";
+import "../chunk-PPD3HHNJ.js";
+import "../chunk-T6BNEQ2A.js";
+import "../chunk-2UMNXADU.js";
+
+// bin/pushary-bell-hook.ts
+var main = async () => {
+  let rawInput = "";
+  try {
+    for await (const chunk of process.stdin) rawInput += chunk;
+    handleBell(rawInput.trim() ? JSON.parse(rawInput) : {});
+  } catch {
+  }
+  process.stdout.write("{}");
+};
+main();

package/dist/bin/pushary-bell.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-bell.js

@@ -0,0 +1,203 @@
+#!/usr/bin/env node
+import {
+  DEFAULT_UPGRADE_THRESHOLD,
+  handleBell,
+  liveAgentCount,
+  ring,
+  upgradeThreshold
+} from "../chunk-DNFYUBRP.js";
+import {
+  claudeSettings
+} from "../chunk-Q4QULGAV.js";
+import {
+  createIo
+} from "../chunk-TX7KBKT7.js";
+import "../chunk-E6I3DBJW.js";
+import {
+  readJsonSafe,
+  writeJsonAtomic
+} from "../chunk-6MTNS63X.js";
+import {
+  parseFlags
+} from "../chunk-GMXKITVA.js";
+import "../chunk-BC3VCZ3E.js";
+import "../chunk-PPD3HHNJ.js";
+import "../chunk-7QLSKOSU.js";
+import "../chunk-T6BNEQ2A.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-RRZZ7TFJ.js";
+import "../chunk-ZUKH2NPJ.js";
+import "../chunk-2UMNXADU.js";
+import {
+  EXIT
+} from "../chunk-KZERVKTD.js";
+
+// src/bell/install.ts
+import { join } from "path";
+var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+var ensureRecord = (parent, key) => {
+  const existing = asRecord(parent[key]);
+  if (existing) return existing;
+  const created = {};
+  parent[key] = created;
+  return created;
+};
+var BELL_HOOK_BINARY = "pushary-bell-hook";
+var isBellHook = (entry) => {
+  const hooks = asRecord(entry)?.hooks;
+  if (!Array.isArray(hooks)) return false;
+  return hooks.some((hook) => String(asRecord(hook)?.command ?? "").includes(BELL_HOOK_BINARY));
+};
+var BELL_TIMEOUT_SECONDS = 5;
+var BELL_NOTIFICATION_MATCHER = "idle_prompt|agent_needs_input|agent_completed";
+var addBellHooks = (settings, binDir) => {
+  const resolve = (name) => {
+    const path = binDir ? join(binDir, name) : name;
+    return /\s/.test(path) ? `"${path}"` : path;
+  };
+  const hooks = ensureRecord(settings, "hooks");
+  const notification = (Array.isArray(hooks.Notification) ? hooks.Notification : []).filter((entry) => !isBellHook(entry));
+  notification.push({
+    matcher: BELL_NOTIFICATION_MATCHER,
+    hooks: [{ type: "command", command: resolve(BELL_HOOK_BINARY), timeout: BELL_TIMEOUT_SECONDS }]
+  });
+  hooks.Notification = notification;
+  const stop = Array.isArray(hooks.Stop) ? hooks.Stop.filter((entry) => !isBellHook(entry)) : [];
+  if (Array.isArray(hooks.Stop)) {
+    if (stop.length === 0) delete hooks.Stop;
+    else hooks.Stop = stop;
+  }
+};
+var removeBellHooks = (settings) => {
+  const hooks = asRecord(settings.hooks);
+  if (!hooks) return false;
+  let changed = false;
+  for (const key of ["Stop", "Notification"]) {
+    const entries = hooks[key];
+    if (!Array.isArray(entries)) continue;
+    const filtered = entries.filter((entry) => !isBellHook(entry));
+    if (filtered.length === entries.length) continue;
+    if (filtered.length === 0) delete hooks[key];
+    else hooks[key] = filtered;
+    changed = true;
+  }
+  if (Object.keys(hooks).length === 0) delete settings.hooks;
+  return changed;
+};
+var bellInstalled = (settings) => {
+  const hooks = asRecord(settings.hooks);
+  if (!hooks) return false;
+  return ["Stop", "Notification"].some((key) => {
+    const entries = hooks[key];
+    return Array.isArray(entries) && entries.some(isBellHook);
+  });
+};
+
+// bin/pushary-bell.ts
+exitOnHelpFlag("bell");
+var { bold, cyan, dim, green, yellow } = createIo();
+var readStdin = async () => {
+  const chunks = [];
+  for await (const chunk of process.stdin) chunks.push(Buffer.from(chunk));
+  return Buffer.concat(chunks).toString("utf-8");
+};
+var settingsPath = () => claudeSettings();
+var loadSettings = (path) => {
+  const existing = readJsonSafe(path);
+  if (existing.kind === "ok") return existing.value;
+  if (existing.kind === "unreadable" || existing.kind === "unparseable") {
+    throw new Error(`${path} exists but could not be read. Fix or move it, then re-run. Nothing was changed.`);
+  }
+  return {};
+};
+var install = () => {
+  const path = settingsPath();
+  const settings = loadSettings(path);
+  const already = bellInstalled(settings);
+  addBellHooks(settings);
+  writeJsonAtomic(path, settings);
+  console.log();
+  console.log(`  ${green("\u2713")} ${bold(already ? "Bell updated." : "Bell on.")}`);
+  console.log(`  ${dim(`Claude Code will ring this terminal when an agent finishes or needs you (${path}).`)}`);
+  console.log();
+  console.log(`  ${dim("It makes a local noise. That is all it does.")}`);
+  console.log(`  ${dim("No account, no API key, no network call, nothing leaves this machine.")}`);
+  console.log();
+  console.log(`  ${dim("Try it:")} ${cyan("pushary bell --test")}`);
+  console.log(`  ${dim("Turn it off:")} ${cyan("pushary bell --off")}`);
+  console.log();
+};
+var uninstall = () => {
+  const path = settingsPath();
+  const settings = loadSettings(path);
+  const removed = removeBellHooks(settings);
+  if (removed) writeJsonAtomic(path, settings);
+  console.log();
+  console.log(`  ${green("\u2713")} ${removed ? "Bell off." : "The bell was not installed."}`);
+  if (removed) console.log(`  ${dim(`Removed from ${path}. Nothing else was touched.`)}`);
+  console.log();
+};
+var test = () => {
+  const result = ring({ title: "Pushary bell", body: "This is what it sounds like." });
+  console.log();
+  console.log(`  ${result.rang ? green("\u2713") : yellow("!")} Terminal bell ${result.rang ? "sent" : "could not be written"}`);
+  console.log(
+    `  ${result.notified ? green("\u2713") : dim("\u2013")} Desktop notification ${result.notified ? "sent" : "not available on this platform"}`
+  );
+  if (!result.rang) {
+    console.log();
+    console.log(`  ${dim("Some terminals mute the bell by default. In iTerm2 it is")} ${cyan("Settings > Profiles > Terminal > Silence bell")}${dim(".")}`);
+  }
+  console.log();
+};
+var status = () => {
+  const path = settingsPath();
+  let installed = false;
+  try {
+    installed = bellInstalled(loadSettings(path));
+  } catch {
+    installed = false;
+  }
+  const live = liveAgentCount();
+  const threshold = upgradeThreshold();
+  console.log();
+  console.log(`  ${installed ? green("\u2713") : dim("\u2013")} Bell ${installed ? "on" : "off"} ${dim(`(${path})`)}`);
+  console.log(`  ${dim(`${live} agent${live === 1 ? "" : "s"} seen in the last 10 minutes`)}`);
+  if (!installed) console.log(`  ${dim("Turn it on:")} ${cyan("pushary bell")}`);
+  console.log();
+  console.log(
+    `  ${dim(
+      `Above ${threshold} concurrent agents the bell says so, once a day. A bell cannot tell you which agent is asking.`
+    )}`
+  );
+  if (threshold !== DEFAULT_UPGRADE_THRESHOLD) {
+    console.log(`  ${dim(`Threshold overridden by PUSHARY_BELL_UPGRADE_AT (default ${DEFAULT_UPGRADE_THRESHOLD}).`)}`);
+  }
+  console.log();
+};
+var runHook = async () => {
+  try {
+    const raw = await readStdin();
+    const input = raw.trim() ? JSON.parse(raw) : {};
+    handleBell(input);
+  } catch {
+  }
+  process.stdout.write("{}");
+  process.exit(EXIT.OK);
+};
+var main = async () => {
+  const argv = process.argv.slice(2);
+  const flags = parseFlags(argv, { bools: ["off", "test", "status", "hook", "help", "h"], values: [] });
+  if (flags.bools.has("hook")) return runHook();
+  if (flags.bools.has("test")) return test();
+  if (flags.bools.has("status")) return status();
+  if (flags.bools.has("off")) return uninstall();
+  return install();
+};
+await main().catch((err) => {
+  console.log();
+  console.log(`  ${yellow("!")} ${err instanceof Error ? err.message : "Something went wrong."}`);
+  console.log();
+  process.exit(EXIT.FAILED);
+});

package/dist/bin/pushary-claude.js

@@ -1,13 +1,9 @@
 #!/usr/bin/env node
-import {
-  needsShell,
-  spawnClaude
-} from "../chunk-XHKBHWLX.js";
 import {
   KILL_REASON,
   isDeferAnswer,
   resolveGate
-} from "../chunk-QVOJF23R.js";
+} from "../chunk-A5DAEWBZ.js";
 import {
   askUser,
   cancelQuestion,
@@ -19,13 +15,18 @@ import {
   reportEvent,
   scopePathFor,
   waitForAnswer
-} from "../chunk-MDPSJR45.js";
+} from "../chunk-DUYM5SHH.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
+import "../chunk-PPD3HHNJ.js";
 import "../chunk-7QLSKOSU.js";
 import {
   redactSecrets
-} from "../chunk-KJFKEKTC.js";
+} from "../chunk-T6BNEQ2A.js";
+import {
+  needsShell,
+  spawnClaude
+} from "../chunk-XHKBHWLX.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-clean.js

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
-import {
-  removeClaudeMcpServers,
-  removePusharySettings
-} from "../chunk-FCB6J5YC.js";
 import {
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-EQJZS2LE.js";
+} from "../chunk-WYVKPLVT.js";
 import {
   removeGeminiSettings
-} from "../chunk-PXE6HXRP.js";
+} from "../chunk-7DYFAM32.js";
+import {
+  removeClaudeMcpServers,
+  removePusharySettings
+} from "../chunk-R6AYBATA.js";
 import {
   claudeJson,
   claudeSettings,
@@ -29,22 +29,22 @@ import {
   pusharyDir,
   removeCodexHooks,
   vscodePluginDir
-} from "../chunk-TNG3EWFN.js";
-import {
-  removeClaudeAlias
-} from "../chunk-BC3VCZ3E.js";
+} from "../chunk-Q4QULGAV.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
+import {
+  removeClaudeAlias
+} from "../chunk-BC3VCZ3E.js";
+import "../chunk-7QLSKOSU.js";
+import "../chunk-T6BNEQ2A.js";
 import {
   execNpm
 } from "../chunk-MUEW424A.js";
 import {
   exitOnHelpFlag
-} from "../chunk-BBK3TTU2.js";
-import "../chunk-7OYGFJYZ.js";
-import "../chunk-7QLSKOSU.js";
-import "../chunk-KJFKEKTC.js";
+} from "../chunk-RRZZ7TFJ.js";
+import "../chunk-ZUKH2NPJ.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";

package/dist/bin/pushary-codex-hook.js

@@ -1,10 +1,14 @@
 #!/usr/bin/env node
+import {
+  isGatingMoment,
+  recordKeylessMoment
+} from "../chunk-MHA2WB7S.js";
 import {
   KILL_REASON,
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-QVOJF23R.js";
+} from "../chunk-A5DAEWBZ.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -35,20 +39,17 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   waitForAnswer
-} from "../chunk-MDPSJR45.js";
-import {
-  isGatingMoment,
-  recordKeylessMoment
-} from "../chunk-HAP7UTZS.js";
+} from "../chunk-DUYM5SHH.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
+import "../chunk-PPD3HHNJ.js";
 import "../chunk-7QLSKOSU.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-KJFKEKTC.js";
+} from "../chunk-T6BNEQ2A.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-codex.js

@@ -3,11 +3,12 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-MDPSJR45.js";
+} from "../chunk-DUYM5SHH.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
+import "../chunk-PPD3HHNJ.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-KJFKEKTC.js";
+import "../chunk-T6BNEQ2A.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";