@pushary/agent-hooks 0.83.1 → 0.84.0

package/CHANGELOG.md

@@ -1,5 +1,80 @@
 # Changelog
 
+## 0.84.0
+
+### The phone can start an agent on a machine that is not running one
+
+The phone could reach a session that already existed. Starting one meant being at
+the keyboard. `pushary setup` and `pushary claude` now bring up a small background
+process, `pushary-daemon`, which watches for a launch requested from the phone and
+starts a real session with the prompt you sent.
+
+It is a poller over a durable queue, not an open socket. Idle, it asks the server
+for work every 30 seconds and sends one heartbeat a minute, and it carries a
+prompt, never any code. One request is in flight at a time, each bounded by its
+own timeout, with a spawn rate cap so a queue backlog cannot fill a machine with
+agents. Exactly one daemon runs per machine: a second one asks the first to hand
+over rather than racing it, and it declines to take over from a daemon that is
+still healthy.
+
+This is a background process that was not running before. `pushary doctor` reports
+whether it is up, and `pushary daemon` in a terminal shows you what it is doing.
+
+A launch is now acknowledged rather than assumed. The daemon claims a request,
+confirms the session it started, and the phone shows what actually happened,
+including the failure when a launch does not come up.
+
+### Always allowing a tool no longer has to mean everywhere
+
+"Approve and always allow" wrote one kind of rule: this tool, this whole
+workspace, until you delete it. That is the right scope for `Read` and far too
+wide for a push.
+
+The approval now offers the scope alongside it. Workspace is the previous
+behaviour. Repository binds the rule to the repository the ask came from, so a
+rule written in one checkout stops governing another. Session binds it to the run
+you are watching and goes away with it.
+
+An older Pushary never sees the narrower rules. A CLI that does not ask for them
+is sent workspace-wide rules only, so a rule you scoped to one session cannot be
+quietly applied everywhere by something released before the idea existed.
+
+### AskUserQuestion reaches the phone with its descriptions
+
+A Claude Code question carries a header, a description per option, and sometimes
+permission to pick more than one. The phone received the bare labels. It now
+receives the question the way the agent wrote it.
+
+One question goes out as one card carrying the whole shape. Every surface that
+does not know that shape, the web decision page and Slack among them, still sees
+an ordinary choice list and answers with a label, which the server reads back onto
+the question. Two or more questions go out one at a time, which is what every
+surface has always been able to answer: a bare label cannot say which of several
+questions it belongs to, and a half-filled answer is worse for the agent than
+being asked again in the terminal.
+
+### Codex and Gemini sessions started from the phone stay live
+
+A phone-started Codex or Gemini run now goes through a bridge that survives the
+connection dropping and resumes the same session instead of opening a new one.
+The machine advertises only what it can actually do, so a Gemini CLI too old for
+the bridge is not offered as one, and the phone stops showing controls that would
+fail.
+
+Stopping is acknowledged the same way. A stop request names the session and the
+process it belongs to, and the machine proves it owns that process before acting
+on it, so a recycled pid cannot be mistaken for the agent you asked to stop.
+
+
+## 0.83.0 to 0.83.2
+
+Three releases went out without an entry here. In order: `ask_user` became
+idempotent, so a create that gets retried after a timeout resolves to the question
+already asked instead of buzzing a phone twice. The pairing QR stopped encoding a
+code only a browser could resolve. And the gate's two shared pieces, the verdict a
+policy produces and the "most specific rule wins" precedence, moved into the
+package the CLI and the server both read, with no change to what either decides.
+
 ## 0.82.0
 
 ### Setup reads properly when an agent is the one running it

package/dist/bin/pushary-bell-hook.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-UAWTJMXA.js";
-import "../chunk-RZP3Z2WR.js";
-import "../chunk-6MTNS63X.js";
+} from "../chunk-7PZPJSWI.js";
+import "../chunk-K7CSRGKZ.js";
 import "../chunk-BC3VCZ3E.js";
-import "../chunk-BT7NTTIW.js";
-import "../chunk-QA5HP7CR.js";
+import "../chunk-6MTNS63X.js";
+import "../chunk-437T77TY.js";
 import "../chunk-2UMNXADU.js";
+import "../chunk-MQMPG5X4.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,33 +5,34 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-UAWTJMXA.js";
+} from "../chunk-7PZPJSWI.js";
 import {
   claudeSettings
-} from "../chunk-O55DONTG.js";
+} from "../chunk-SEAHGHCE.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
-import "../chunk-RZP3Z2WR.js";
-import {
-  readJsonSafe,
-  writeJsonAtomic
-} from "../chunk-6MTNS63X.js";
+import "../chunk-K7CSRGKZ.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-BC3VCZ3E.js";
-import "../chunk-BT7NTTIW.js";
-import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
 import {
   exitOnHelpFlag
-} from "../chunk-RRZZ7TFJ.js";
-import "../chunk-ZUKH2NPJ.js";
-import "../chunk-2UMNXADU.js";
+} from "../chunk-J4KFVOCQ.js";
+import "../chunk-MGJBC6DD.js";
+import "../chunk-BC3VCZ3E.js";
+import "../chunk-DINDL2CF.js";
+import {
+  readJsonSafe,
+  writeJsonAtomic
+} from "../chunk-6MTNS63X.js";
+import "../chunk-437T77TY.js";
+import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
+import "../chunk-2UMNXADU.js";
+import "../chunk-MQMPG5X4.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/bin/pushary-claude.js

@@ -1,9 +1,29 @@
 #!/usr/bin/env node
+import {
+  ensureDaemonRunning
+} from "../chunk-CCH775Y6.js";
+import {
+  buildTranscriptRecords,
+  decodePublicKey,
+  fetchAccountPublicKey,
+  generateSessionKey,
+  uploadTranscriptRecords,
+  wrapSessionKey
+} from "../chunk-NWYGW7HY.js";
+import {
+  startProcessOwnership
+} from "../chunk-EVJ6ULHN.js";
+import {
+  needsShell,
+  spawnClaude
+} from "../chunk-XHKBHWLX.js";
+import "../chunk-VT4IVERX.js";
+import "../chunk-SEAHGHCE.js";
 import {
   KILL_REASON,
   isDeferAnswer,
   resolveGate
-} from "../chunk-FFT7L2VE.js";
+} from "../chunk-37AD5K7W.js";
 import {
   askUser,
   cancelQuestion,
@@ -15,26 +35,22 @@ import {
   reportEvent,
   scopePathFor,
   waitForAnswer
-} from "../chunk-C4SQY777.js";
-import "../chunk-BSZYIAZL.js";
-import "../chunk-SAF6HGAA.js";
-import "../chunk-BT7NTTIW.js";
-import "../chunk-7QLSKOSU.js";
-import {
-  redactSecrets
-} from "../chunk-QA5HP7CR.js";
-import {
-  needsShell,
-  spawnClaude
-} from "../chunk-XHKBHWLX.js";
+} from "../chunk-OPMSMF5R.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
+import "../chunk-DINDL2CF.js";
+import "../chunk-6MTNS63X.js";
+import "../chunk-BSZYIAZL.js";
+import "../chunk-SAF6HGAA.js";
+import "../chunk-437T77TY.js";
+import "../chunk-7QLSKOSU.js";
+import "../chunk-KZERVKTD.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-KZERVKTD.js";
+import "../chunk-MQMPG5X4.js";
 
 // src/wrapper/claudeBinary.ts
 import { statSync } from "fs";
@@ -113,112 +129,6 @@ import { basename } from "path";
 import { homedir } from "os";
 import { join as join2, resolve } from "path";
 import { existsSync, readFileSync } from "fs";
-
-// src/transcript-capture.ts
-import { createHash } from "crypto";
-
-// src/crypto.ts
-import nacl from "tweetnacl";
-var EPH_PUB_LEN = nacl.box.publicKeyLength;
-var BOX_NONCE_LEN = nacl.box.nonceLength;
-var SECRETBOX_NONCE_LEN = nacl.secretbox.nonceLength;
-var SESSION_KEY_LEN = nacl.secretbox.keyLength;
-var toBase64 = (bytes) => Buffer.from(bytes).toString("base64");
-var fromBase64 = (value) => new Uint8Array(Buffer.from(value, "base64"));
-var utf8Encode = (text) => new Uint8Array(Buffer.from(text, "utf-8"));
-var decodePublicKey = (value) => fromBase64(value);
-var generateSessionKey = () => nacl.randomBytes(SESSION_KEY_LEN);
-var wrapSessionKey = (sessionKey, accountPublicKey) => {
-  const ephemeral = nacl.box.keyPair();
-  const nonce = nacl.randomBytes(BOX_NONCE_LEN);
-  const box = nacl.box(sessionKey, nonce, accountPublicKey, ephemeral.secretKey);
-  const bundle = new Uint8Array(EPH_PUB_LEN + BOX_NONCE_LEN + box.length);
-  bundle.set(ephemeral.publicKey, 0);
-  bundle.set(nonce, EPH_PUB_LEN);
-  bundle.set(box, EPH_PUB_LEN + BOX_NONCE_LEN);
-  return toBase64(bundle);
-};
-var encryptRecord = (plaintext, sessionKey) => {
-  const nonce = nacl.randomBytes(SECRETBOX_NONCE_LEN);
-  const box = nacl.secretbox(utf8Encode(plaintext), nonce, sessionKey);
-  const bundle = new Uint8Array(SECRETBOX_NONCE_LEN + box.length);
-  bundle.set(nonce, 0);
-  bundle.set(box, SECRETBOX_NONCE_LEN);
-  return toBase64(bundle);
-};
-
-// src/transcript-capture.ts
-var INTERNAL_TYPES = /* @__PURE__ */ new Set([
-  "file-history-snapshot",
-  "change",
-  "queue-operation",
-  "summary"
-]);
-var redactDeep = (value) => {
-  if (typeof value === "string") return redactSecrets(value);
-  if (Array.isArray(value)) return value.map(redactDeep);
-  if (value && typeof value === "object") {
-    const out = {};
-    for (const [key, inner] of Object.entries(value)) {
-      out[key] = redactDeep(inner);
-    }
-    return out;
-  }
-  return value;
-};
-var localIdFor = (parsed, rawLine) => typeof parsed.uuid === "string" && parsed.uuid.length > 0 ? parsed.uuid : createHash("sha256").update(rawLine).digest("hex").slice(0, 32);
-var buildTranscriptRecords = (lines, sessionKey, seen = /* @__PURE__ */ new Set()) => {
-  const records = [];
-  const nextSeen = new Set(seen);
-  for (const line of lines) {
-    const trimmed = line.trim();
-    if (!trimmed) continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(trimmed);
-    } catch {
-      continue;
-    }
-    const type = typeof parsed.type === "string" ? parsed.type : "";
-    if (INTERNAL_TYPES.has(type)) continue;
-    const localId = localIdFor(parsed, trimmed);
-    if (nextSeen.has(localId)) continue;
-    nextSeen.add(localId);
-    const content = encryptRecord(JSON.stringify(redactDeep(parsed)), sessionKey);
-    records.push({ localId, content });
-  }
-  return { records, seen: nextSeen };
-};
-
-// src/transcript-api.ts
-var fetchAccountPublicKey = async (apiKey) => {
-  try {
-    const res = await fetch(`${getBaseUrl()}/api/agent/encryption-account`, {
-      headers: { Authorization: `Bearer ${apiKey}` },
-      signal: AbortSignal.timeout(5e3)
-    });
-    if (!res.ok) return null;
-    const data = await res.json();
-    return typeof data.publicKey === "string" && data.publicKey.length > 0 ? data.publicKey : null;
-  } catch {
-    return null;
-  }
-};
-var uploadTranscriptRecords = async (apiKey, params) => {
-  try {
-    const res = await fetch(`${getBaseUrl()}/api/agent/transcript`, {
-      method: "POST",
-      headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
-      body: JSON.stringify(params),
-      signal: AbortSignal.timeout(15e3)
-    });
-    return res.ok;
-  } catch {
-    return false;
-  }
-};
-
-// src/transcript-sync.ts
 var transcriptsEnabled = () => process.env.PUSHARY_TRANSCRIPTS === "1";
 var claudeTranscriptPath = (cwd, sessionId) => {
   const projectId = resolve(cwd).replace(/[^a-zA-Z0-9-]/g, "-");
@@ -533,7 +443,7 @@ var createRemoteApprover = (deps) => {
     try {
       const sessionId = deps.getSessionId?.();
       const modeState = await fetchModeState2(deps.apiKey, sessionId);
-      const policyConfig = await getPolicy2(deps.apiKey, modeState.policyVersion, "claude_code", true);
+      const policyConfig = await getPolicy2(deps.apiKey, modeState.policyVersion, "claude_code", true, sessionId);
       const scopePath = modeState.scope ? scopePathFor(toolName, input, deps.cwd) : void 0;
       const verdict = resolveGate({
         modeState,
@@ -542,7 +452,8 @@ var createRemoteApprover = (deps) => {
         toolInputs: [input],
         scopePaths: scopePath ? [scopePath] : [],
         cwd: deps.cwd,
-        repoKey: repoKeyFor(deps.cwd)
+        repoKey: repoKeyFor(deps.cwd),
+        sessionId
       });
       if (verdict.kind === "kill") return deny(KILL_REASON);
       if (verdict.kind === "allow") return allow(input);
@@ -561,7 +472,8 @@ var createRemoteApprover = (deps) => {
           sessionId,
           machineId: deps.machineId,
           toolName,
-          toolTarget
+          toolTarget,
+          repoKey: repoKeyFor(deps.cwd)
         });
       } catch {
         return applyTimeout(policy, input);
@@ -1294,6 +1206,7 @@ var driveModeLoop = async (deps) => {
 var INPUT_QUEUE_CAP = 32;
 var MIN_MODE_DWELL_MS = 300;
 var RELAY_FALLBACK_POLL_MS = 6e4;
+var PRESENCE_HEARTBEAT_MS = 6e4;
 var SESSION_FLAG_RE = /^(-r|--resume|-c|--continue|--session-id)(=.*)?$/;
 var extractAssistantText = (message) => {
   const content = message.message?.content;
@@ -1378,28 +1291,53 @@ var runDualMode = async (binary, args2, startingMode) => {
     });
     relay.start();
   }
-  const announcePresence = (event, action) => {
-    if (!sessionId) return Promise.resolve();
-    return reportEvent(
-      { event, agentType: "claude_code", agentName, action, sessionId, machineId },
-      { maxAttempts: 2, timeoutMs: 4e3 }
-    ).then(() => {
-    }).catch(() => {
+  let ownership;
+  let ownershipSessionId;
+  const ensureOwnership = async () => {
+    if (!sessionId || ownershipSessionId === sessionId) return ownership?.ready;
+    ownership?.stop();
+    ownershipSessionId = sessionId;
+    ownership = startProcessOwnership({
+      sessionId,
+      pid: process.pid,
+      ...process.env.PUSHARY_SPAWN_ID ? { spawnId: process.env.PUSHARY_SPAWN_ID } : {}
     });
+    await ownership.ready;
+  };
+  const announcePresence = async (event, action) => {
+    if (!sessionId) return Promise.resolve();
+    try {
+      await ensureOwnership();
+      await reportEvent(
+        { event, agentType: "claude_code", agentName, action, sessionId, machineId, pid: process.pid },
+        { maxAttempts: event === "session_start" ? 4 : 2, timeoutMs: 4e3, requireOk: event === "session_start" }
+      );
+    } catch {
+    }
   };
   let stopTranscript;
+  let presenceHeartbeat;
   let transcriptStarted = false;
   const ensureTranscriptSync = () => {
     if (transcriptStarted || !transcriptsEnabled() || !sessionId) return;
     transcriptStarted = true;
     stopTranscript = startTranscriptSync({ apiKey, sessionId, cwd: process.cwd(), machineId });
   };
+  const ensurePresenceHeartbeat = () => {
+    if (presenceHeartbeat || !sessionId) return;
+    presenceHeartbeat = setInterval(
+      () => void announcePresence("heartbeat", "Session online"),
+      PRESENCE_HEARTBEAT_MS
+    );
+    presenceHeartbeat.unref();
+  };
   const setSessionId = (id) => {
     const isNew = sessionId !== id;
     sessionId = id;
     sessionCreated = true;
     relay?.reannounce();
     if (isNew) void announcePresence("session_start", "Remote session ready \u2014 reachable from your phone");
+    ensurePresenceHeartbeat();
     ensureTranscriptSync();
   };
   const onPhoneCommand = (command) => {
@@ -1483,6 +1421,7 @@ var runDualMode = async (binary, args2, startingMode) => {
         "[pushary] reachable from your phone \u2014 send an instruction from the app when this goes idle (Ctrl-] keeps the terminal).\n"
       );
       void announcePresence("session_start", "Session ready \u2014 reachable from your phone");
+      ensurePresenceHeartbeat();
       ensureTranscriptSync();
     }
     if (startingMode === "remote" && initialPrompt) input.push(userMessage(initialPrompt));
@@ -1513,11 +1452,13 @@ var runDualMode = async (binary, args2, startingMode) => {
     process.removeListener("exit", restoreStdin);
     relay?.stop();
     poller.stop();
+    if (presenceHeartbeat) clearInterval(presenceHeartbeat);
     stopTranscript?.();
     approver.teardown();
     input.close();
     stdin.dispose();
     await announcePresence("session_closed", "Session ended");
+    ownership?.stop();
     if (totalCostUsd > 0) {
       process.stderr.write(`[pushary] session cost: $${totalCostUsd.toFixed(4)}
 `);
@@ -1551,7 +1492,7 @@ var runClaudeWrapper = async (args2) => {
 
 // bin/pushary-claude.ts
 var args = resolveClaudeArgs(process.argv);
-runClaudeWrapper(args).then((code) => process.exit(code)).catch((err) => {
+ensureDaemonRunning().then(() => runClaudeWrapper(args)).then((code) => process.exit(code)).catch((err) => {
   process.stderr.write(
     `[pushary] wrapper error: ${err instanceof Error ? err.message : String(err)}
 `

package/dist/bin/pushary-clean.js

@@ -4,14 +4,17 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-HKKERYZP.js";
+} from "../chunk-UXWEE3QI.js";
 import {
   removeGeminiSettings
-} from "../chunk-DMKSHZKF.js";
+} from "../chunk-DOXSWT4Q.js";
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-U752S5RE.js";
+} from "../chunk-UKSQWTBH.js";
+import {
+  execNpm
+} from "../chunk-VT4IVERX.js";
 import {
   claudeJson,
   claudeSettings,
@@ -29,25 +32,23 @@ import {
   pusharyDir,
   removeCodexHooks,
   vscodePluginDir
-} from "../chunk-O55DONTG.js";
+} from "../chunk-SEAHGHCE.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-J4KFVOCQ.js";
+import "../chunk-MGJBC6DD.js";
 import {
   removeClaudeAlias
 } from "../chunk-BC3VCZ3E.js";
+import "../chunk-DINDL2CF.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-QA5HP7CR.js";
-import {
-  execNpm
-} from "../chunk-MUEW424A.js";
-import {
-  exitOnHelpFlag
-} from "../chunk-RRZZ7TFJ.js";
-import "../chunk-ZUKH2NPJ.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
+import "../chunk-MQMPG5X4.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, copyFileSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-bridge.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node