@pushary/agent-hooks 0.84.1 → 0.85.0

package/CHANGELOG.md

@@ -1,5 +1,49 @@
 # Changelog
 
+## 0.85.0
+
+### A hook command that cannot outlive what it points at
+
+Every hook command written into `~/.claude/settings.json`, `~/.codex/hooks.json`
+and `~/.gemini/settings.json`, the free bell included, is now wrapped so that a missing binary, a removed
+`node`, a changed npm prefix or a moved home directory exits 0 and the agent reads
+"no opinion". Before, any of those turned every tool call into a failing hook.
+The guard is tested on every shell that can be `/bin/sh`, including dash, and with
+`node` off PATH, which used to exit 127 and print on every tool call.
+
+Codex hashes the exact command string to trust a hook, so `pushary upgrade` rewrites
+the trust entry when it re-applies the hooks.
+
+### Hooks registered for the CLI you have
+
+Claude Code events are registered from a table with a version floor per event.
+`SubagentStart`, `SubagentStop`, `PreCompact`, `PostCompact` and `TeammateIdle`
+are added on a CLI that understands them, and `pushary upgrade` re-registers
+against the CLI you have now. Disconnect removes every event in the table; a
+hand-typed list used to leave the five observability events behind.
+
+### `pushary disconnect <agent>`
+
+Removes the MCP server, the hooks, the skill and, for Codex, the trust entries and
+the API key from `config.toml`, for one agent, leaving the others alone. The bin
+map entry was written in a shape the build silently dropped, and the command read
+the dispatcher's own token as the agent name; both are fixed before this, its
+first release, and a test now holds every bin entry to the one shape tsup builds.
+
+### A kill switch per hook path
+
+`~/.pushary/admission-rules.json` (`{"version":1,"disabled":["claude:PostToolUse"]}`)
+silences one event on one agent, or one agent entirely, without a release. Every
+hook binary reads its input through this check, from the same file the macOS
+helper reads, so one file governs both transports. Deny-only: nothing in the file
+can enable a hook.
+
+### `PostToolUse` no longer pays two round trips per tool call
+
+The telemetry hooks reuse the mode state the gate fetched for the same session
+within the last 60 seconds. The gate itself still reads it live, so a remote stop
+and a scope contract are never served stale where they decide anything.
+
 ## 0.84.1
 
 ### Remote starts survive lost acknowledgements without double-launching

package/README.md

@@ -108,6 +108,29 @@ npx @pushary/agent-hooks@latest doctor
 
 Any other MCP client can use notify and ask by pointing at the Pushary MCP endpoint directly.
 
+## Hook events, gated by version
+
+Claude Code 2.1.239 names thirty-one hook events and the set grows release by release,
+so the ones we register are gated on the version actually installed. The version is
+read from disk and never by running the binary: `codex --version` once submitted the
+Codex CLI to XProtect, which killed it and moved the 181 MB binary to the Trash, so
+setup deleted the user's installation as a side effect of asking its version.
+
+An unreadable version registers only the events that predate gating. Each registration
+records `registered|<version>`, which is what lets an upgrade pick up newer events
+without anyone re-running setup.
+
+## Admission rules
+
+Publishing this package is a version bump merged to main, and a hook change is not
+live until that happens, so a hook that floods on one event would otherwise need a
+release to stop. `~/.pushary/admission-rules.json` can disable an `(agent, event)`
+pair as data.
+
+Deny-only by construction: a rule can silence a hook we ship, and no shape of the file
+can enable one we do not. A file that cannot be read admits everything, because
+failing closed would let one malformed download silence every hook on the machine.
+
 ## Commands
 
 <!-- Managed: every command below is declared in src/cli/commands.ts, and a test
@@ -123,6 +146,7 @@ logout       Remove the key this machine stores, and say what it does not remove
 connect      Connect a phone without re-running setup (--app for the Pushary app)
 bell         Free local bell when an agent finishes or needs you. No account, no key, no network
 doctor       Verify your Pushary installation is working
+disconnect   Turn off one agent (claude|codex|gemini|cursor)
 clean        Remove all Pushary configuration (--yes for non-interactive)
 mode         Switch approval mode (push_only, push_first, terminal_only)
 wait         Show or set the "wait for your phone" ladder (pushary wait 45)

package/dist/bin/pushary-bell-hook.js

@@ -2,6 +2,9 @@
 import {
   handleBell
 } from "../chunk-7PZPJSWI.js";
+import {
+  readHookInput
+} from "../chunk-6CUUA7HO.js";
 import "../chunk-K7CSRGKZ.js";
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-6MTNS63X.js";
@@ -11,10 +14,9 @@ import "../chunk-MQMPG5X4.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {
-  let rawInput = "";
   try {
-    for await (const chunk of process.stdin) rawInput += chunk;
-    handleBell(rawInput.trim() ? JSON.parse(rawInput) : {});
+    const input = await readHookInput("claude");
+    if (input) handleBell(input);
   } catch {
   }
   process.stdout.write("{}");

package/dist/bin/pushary-bell.js

@@ -6,9 +6,13 @@ import {
   ring,
   upgradeThreshold
 } from "../chunk-7PZPJSWI.js";
+import {
+  guardBinary
+} from "../chunk-PWTKKQQI.js";
+import "../chunk-VT4IVERX.js";
 import {
   claudeSettings
-} from "../chunk-SEAHGHCE.js";
+} from "../chunk-HVZIHTOO.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -18,8 +22,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-J4KFVOCQ.js";
-import "../chunk-MGJBC6DD.js";
+} from "../chunk-SQOFGPNX.js";
+import "../chunk-GOEXZ5QJ.js";
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-DINDL2CF.js";
 import {
@@ -53,10 +57,7 @@ var isBellHook = (entry) => {
 var BELL_TIMEOUT_SECONDS = 5;
 var BELL_NOTIFICATION_MATCHER = "idle_prompt|agent_needs_input|agent_completed";
 var addBellHooks = (settings, binDir) => {
-  const resolve = (name) => {
-    const path = binDir ? join(binDir, name) : name;
-    return /\s/.test(path) ? `"${path}"` : path;
-  };
+  const resolve = (name) => guardBinary(binDir ? join(binDir, name) : name);
   const hooks = ensureRecord(settings, "hooks");
   const notification = (Array.isArray(hooks.Notification) ? hooks.Notification : []).filter((entry) => !isBellHook(entry));
   notification.push({

package/dist/bin/pushary-claude.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   ensureDaemonRunning
-} from "../chunk-CCH775Y6.js";
+} from "../chunk-WEAQQSHQ.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
@@ -13,18 +13,18 @@ import {
 import {
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-ILB6UOAF.js";
+} from "../chunk-YKW6JCWI.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-VT4IVERX.js";
-import "../chunk-SEAHGHCE.js";
+import "../chunk-HVZIHTOO.js";
 import {
   KILL_REASON,
   isDeferAnswer,
   resolveGate
-} from "../chunk-BLDDXHHA.js";
+} from "../chunk-GXIFADGD.js";
 import {
   askUser,
   cancelQuestion,
@@ -36,7 +36,7 @@ import {
   reportEvent,
   scopePathFor,
   waitForAnswer
-} from "../chunk-CCCJ6BPW.js";
+} from "../chunk-EXMUM226.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-clean.js

@@ -4,14 +4,15 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-UXWEE3QI.js";
+} from "../chunk-ADISVXZL.js";
 import {
   removeGeminiSettings
 } from "../chunk-DOXSWT4Q.js";
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-UKSQWTBH.js";
+} from "../chunk-64PXDATC.js";
+import "../chunk-PWTKKQQI.js";
 import {
   execNpm
 } from "../chunk-VT4IVERX.js";
@@ -32,14 +33,14 @@ import {
   pusharyDir,
   removeCodexHooks,
   vscodePluginDir
-} from "../chunk-SEAHGHCE.js";
+} from "../chunk-HVZIHTOO.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-J4KFVOCQ.js";
-import "../chunk-MGJBC6DD.js";
+} from "../chunk-SQOFGPNX.js";
+import "../chunk-GOEXZ5QJ.js";
 import {
   removeClaudeAlias
 } from "../chunk-BC3VCZ3E.js";

package/dist/bin/pushary-codex-bridge.js

@@ -11,14 +11,14 @@ import "../chunk-GCKAWHFP.js";
 import {
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-ILB6UOAF.js";
+} from "../chunk-YKW6JCWI.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import {
   resolveBinary
 } from "../chunk-VT4IVERX.js";
-import "../chunk-SEAHGHCE.js";
+import "../chunk-HVZIHTOO.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-codex-hook.js

@@ -3,12 +3,15 @@ import {
   isGatingMoment,
   recordKeylessMoment
 } from "../chunk-NJ7JT26G.js";
+import {
+  readHookInput
+} from "../chunk-6CUUA7HO.js";
 import {
   KILL_REASON,
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-BLDDXHHA.js";
+} from "../chunk-GXIFADGD.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -40,7 +43,7 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   waitForAnswer
-} from "../chunk-CCCJ6BPW.js";
+} from "../chunk-EXMUM226.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -310,17 +313,8 @@ var emit = (wire) => {
   if (wire) process.stdout.write(JSON.stringify(wire));
 };
 var main = async () => {
-  let rawInput = "";
-  for await (const chunk of process.stdin) {
-    rawInput += chunk;
-  }
-  if (!rawInput.trim()) {
-    process.exit(0);
-  }
-  let input;
-  try {
-    input = JSON.parse(rawInput);
-  } catch {
+  const input = await readHookInput("codex");
+  if (!input) {
     process.exit(0);
   }
   try {

package/dist/bin/pushary-codex.js

@@ -3,7 +3,7 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-CCCJ6BPW.js";
+} from "../chunk-EXMUM226.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-connect.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
+import {
+  printKeyCheck
+} from "../chunk-FBGBJXVC.js";
 import {
   confirmAppConnection,
   connectDevice,
   printConnectInstructions
 } from "../chunk-6LC4WSCL.js";
 import "../chunk-3EGEA4KH.js";
-import {
-  printKeyCheck
-} from "../chunk-FBGBJXVC.js";
 import {
   checkApiKey
 } from "../chunk-F52SIIDG.js";
@@ -22,8 +22,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-J4KFVOCQ.js";
-import "../chunk-MGJBC6DD.js";
+} from "../chunk-SQOFGPNX.js";
+import "../chunk-GOEXZ5QJ.js";
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-DINDL2CF.js";
 import "../chunk-6MTNS63X.js";

package/dist/bin/pushary-daemon.js

@@ -8,7 +8,7 @@ import {
   acquireDaemonLease,
   readDaemonStatus,
   requestDaemonHandoff
-} from "../chunk-CCH775Y6.js";
+} from "../chunk-WEAQQSHQ.js";
 import {
   CODEX_BRIDGE_CAPABILITY,
   CODEX_RESUME_CAPABILITY,
@@ -17,7 +17,7 @@ import {
 import {
   findLiveProcessBySpawnId,
   ownsLiveProcess
-} from "../chunk-ILB6UOAF.js";
+} from "../chunk-YKW6JCWI.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -26,14 +26,14 @@ import {
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
 } from "../chunk-VT4IVERX.js";
-import "../chunk-SEAHGHCE.js";
+import "../chunk-HVZIHTOO.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import {
   exitOnHelpFlag
-} from "../chunk-J4KFVOCQ.js";
-import "../chunk-MGJBC6DD.js";
+} from "../chunk-SQOFGPNX.js";
+import "../chunk-GOEXZ5QJ.js";
 import "../chunk-DINDL2CF.js";
 import "../chunk-6MTNS63X.js";
 import {

package/dist/bin/pushary-disconnect.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-disconnect.js

@@ -0,0 +1,125 @@
+#!/usr/bin/env node
+import {
+  removeGeminiSettings
+} from "../chunk-DOXSWT4Q.js";
+import {
+  removeClaudeMcpServers,
+  removePusharySettings
+} from "../chunk-64PXDATC.js";
+import "../chunk-PWTKKQQI.js";
+import "../chunk-VT4IVERX.js";
+import {
+  claudeJson,
+  claudeSettings,
+  claudeSettingsLocal,
+  codexConfigToml,
+  codexHooksJson,
+  cursorUserHooks,
+  cursorUserMcp,
+  geminiSettings,
+  removeCodexHooks,
+  removeCodexSettings
+} from "../chunk-HVZIHTOO.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-SQOFGPNX.js";
+import "../chunk-GOEXZ5QJ.js";
+import "../chunk-DINDL2CF.js";
+import "../chunk-KZERVKTD.js";
+import "../chunk-MQMPG5X4.js";
+
+// bin/pushary-disconnect.ts
+import { readFileSync, writeFileSync } from "fs";
+import { parse as parseTOML, stringify as stringifyTOML } from "smol-toml";
+
+// src/disconnect.ts
+var DISCONNECTABLE_AGENTS = ["claude", "codex", "gemini", "cursor"];
+var isDisconnectableAgent = (value) => DISCONNECTABLE_AGENTS.includes(value);
+var removeCursorHooks = (config) => {
+  const hooks = config.hooks;
+  if (!hooks) return false;
+  let changed = false;
+  for (const [event, entries] of Object.entries(hooks)) {
+    if (!Array.isArray(entries)) continue;
+    const kept = entries.filter((entry) => !String(entry?.command ?? "").includes("pushary"));
+    if (kept.length === entries.length) continue;
+    changed = true;
+    if (kept.length === 0) delete hooks[event];
+    else hooks[event] = kept;
+  }
+  if (changed && Object.keys(hooks).length === 0) delete config.hooks;
+  return changed;
+};
+var disconnectPlan = (agent) => {
+  switch (agent) {
+    case "claude":
+      return [
+        { path: claudeSettings(), format: "json", remove: removePusharySettings },
+        { path: claudeSettingsLocal(), format: "json", remove: removePusharySettings },
+        { path: claudeJson(), format: "json", remove: removeClaudeMcpServers }
+      ];
+    case "codex":
+      return [
+        { path: codexHooksJson(), format: "json", remove: removeCodexHooks },
+        { path: codexConfigToml(), format: "toml", remove: (config) => removeCodexSettings(config, codexHooksJson()) }
+      ];
+    case "gemini":
+      return [{ path: geminiSettings(), format: "json", remove: removeGeminiSettings }];
+    case "cursor":
+      return [
+        { path: cursorUserHooks(), format: "json", remove: removeCursorHooks },
+        { path: cursorUserMcp(), format: "json", remove: removeClaudeMcpServers }
+      ];
+  }
+};
+var disconnectAgent = (agent, io) => {
+  const changed = [];
+  const untouched = [];
+  for (const edit of disconnectPlan(agent)) {
+    const raw = io.read(edit.path);
+    if (raw === null) continue;
+    try {
+      const config = edit.format === "toml" ? io.parseToml(raw) : JSON.parse(raw);
+      if (!edit.remove(config)) {
+        untouched.push(edit.path);
+        continue;
+      }
+      io.write(
+        edit.path,
+        edit.format === "toml" ? io.stringifyToml(config) : `${JSON.stringify(config, null, 2)}
+`
+      );
+      changed.push(edit.path);
+    } catch {
+      untouched.push(edit.path);
+    }
+  }
+  return { agent, changed, untouched };
+};
+
+// bin/pushary-disconnect.ts
+exitOnHelpFlag("disconnect");
+var rest = process.argv.slice(2);
+var requested = rest[0] === "disconnect" ? rest[1] : rest[0];
+if (!requested || !isDisconnectableAgent(requested)) {
+  console.error(`Usage: pushary disconnect <${DISCONNECTABLE_AGENTS.join("|")}>`);
+  process.exit(1);
+}
+var result = disconnectAgent(requested, {
+  read: (path) => {
+    try {
+      return readFileSync(path, "utf-8");
+    } catch {
+      return null;
+    }
+  },
+  write: (path, contents) => writeFileSync(path, contents, "utf-8"),
+  parseToml: (raw) => parseTOML(raw),
+  stringifyToml: (config) => stringifyTOML(config)
+});
+if (result.changed.length === 0) {
+  console.log(`${requested} was not connected.`);
+} else {
+  console.log(`Disconnected ${requested}:`);
+  for (const path of result.changed) console.log(`  ${path}`);
+}

package/dist/bin/pushary-doctor.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import {
-  describeWaitLadder
-} from "../chunk-IIENZE2J.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "../chunk-HZNOAJGB.js";
+} from "../chunk-4QPOMJUB.js";
+import {
+  describeWaitLadder
+} from "../chunk-IIENZE2J.js";
 import {
   readDaemonStatus
-} from "../chunk-CCH775Y6.js";
+} from "../chunk-WEAQQSHQ.js";
 import {
   agentProbes,
   detectAgent,
@@ -18,7 +18,7 @@ import {
   isDetected,
   isPluginRegistered,
   vscodeSettingsTargets
-} from "../chunk-UXWEE3QI.js";
+} from "../chunk-ADISVXZL.js";
 import {
   GEMINI_HOOK_BINARY,
   hasGeminiHooks,
@@ -46,7 +46,7 @@ import {
   readCodexMcpAuth,
   untrustedCodexHookEvents,
   vscodePluginDir
-} from "../chunk-SEAHGHCE.js";
+} from "../chunk-HVZIHTOO.js";
 import {
   readLedgerSummary
 } from "../chunk-NJ7JT26G.js";
@@ -77,8 +77,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-J4KFVOCQ.js";
-import "../chunk-MGJBC6DD.js";
+} from "../chunk-SQOFGPNX.js";
+import "../chunk-GOEXZ5QJ.js";
 import "../chunk-BC3VCZ3E.js";
 import {
   getPackageVersion

package/dist/bin/pushary-gemini-bridge.js

@@ -10,14 +10,14 @@ import "../chunk-GCKAWHFP.js";
 import {
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-ILB6UOAF.js";
+} from "../chunk-YKW6JCWI.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import {
   resolveBinary
 } from "../chunk-VT4IVERX.js";
-import "../chunk-SEAHGHCE.js";
+import "../chunk-HVZIHTOO.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-gemini-hook.js

@@ -3,12 +3,15 @@ import {
   isGatingMoment,
   recordKeylessMoment
 } from "../chunk-NJ7JT26G.js";
+import {
+  readHookInput
+} from "../chunk-6CUUA7HO.js";
 import {
   KILL_REASON,
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-BLDDXHHA.js";
+} from "../chunk-GXIFADGD.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -31,7 +34,7 @@ import {
   scopePathFor,
   sendNotification,
   waitForAnswer
-} from "../chunk-CCCJ6BPW.js";
+} from "../chunk-EXMUM226.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -278,17 +281,8 @@ var emit = (wire) => {
   if (wire) process.stdout.write(JSON.stringify(wire));
 };
 var main = async () => {
-  let rawInput = "";
-  for await (const chunk of process.stdin) {
-    rawInput += chunk;
-  }
-  if (!rawInput.trim()) {
-    process.exit(0);
-  }
-  let input;
-  try {
-    input = JSON.parse(rawInput);
-  } catch {
+  const input = await readHookInput("gemini");
+  if (!input) {
     process.exit(0);
   }
   try {

package/dist/bin/pushary-hook.js

@@ -1,16 +1,21 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-YR5TSPXB.js";
-import "../chunk-UKSQWTBH.js";
+} from "../chunk-GFM3STWO.js";
+import "../chunk-64PXDATC.js";
+import "../chunk-PWTKKQQI.js";
+import "../chunk-VT4IVERX.js";
 import "../chunk-NJ7JT26G.js";
-import "../chunk-BLDDXHHA.js";
-import "../chunk-CCCJ6BPW.js";
+import {
+  readHookInput
+} from "../chunk-6CUUA7HO.js";
+import "../chunk-GXIFADGD.js";
+import "../chunk-EXMUM226.js";
 import "../chunk-RN3NOEJF.js";
 import {
   exitOnHelpFlag
-} from "../chunk-J4KFVOCQ.js";
-import "../chunk-MGJBC6DD.js";
+} from "../chunk-SQOFGPNX.js";
+import "../chunk-GOEXZ5QJ.js";
 import "../chunk-DINDL2CF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
@@ -23,20 +28,8 @@ import "../chunk-MQMPG5X4.js";
 // bin/pushary-hook.ts
 exitOnHelpFlag("hook");
 var main = async () => {
-  let rawInput = "";
-  for await (const chunk of process.stdin) {
-    rawInput += chunk;
-  }
-  if (!rawInput.trim()) {
-    process.exit(0);
-  }
-  let input;
-  try {
-    input = JSON.parse(rawInput);
-  } catch {
-    process.exit(0);
-  }
-  if (!input.tool_name) {
+  const input = await readHookInput("claude", "PreToolUse");
+  if (!input?.tool_name) {
     process.exit(0);
   }
   try {

package/dist/bin/pushary-login.js

@@ -19,8 +19,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-J4KFVOCQ.js";
-import "../chunk-MGJBC6DD.js";
+} from "../chunk-SQOFGPNX.js";
+import "../chunk-GOEXZ5QJ.js";
 import "../chunk-BC3VCZ3E.js";
 import {
   getPackageVersion