@pushary/agent-hooks 0.85.1 → 0.86.0

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## 0.86.0
+
+### Approving a plan from your phone
+
+Exiting plan mode blocked the terminal and pushed nothing, so an away user's agent
+sat waiting on the one approval that decides everything after it. `ExitPlanMode` was
+never in the hook's tool matcher, and `plan` is a mode Pushary steps aside for
+entirely, so matching it alone would not have helped either.
+
+The plan approval now reaches your phone before Pushary steps aside, and it carries
+the plan itself, redacted and capped like any diff, so you are approving something
+you can read rather than a bare tool name. Two options rather than the terminal's
+three: a hook cannot set the permission mode the session lands in, so offering that
+choice would have quietly dropped half of what you picked.
+
+Falls back to the terminal exactly as before whenever the phone cannot answer.
+
+## 0.85.2
+
+### One agent-protocol renderer for CLI and native approvals
+
+Claude Code, Codex and Gemini hook output now comes from the shared contracts
+renderer also used by the native Mac gate. This keeps the CLI wire bytes unchanged
+while preventing the native bridge and published hooks from drifting into different
+allow or deny shapes.
+
 ## 0.85.1
 
 ### A rule you wrote is now honoured in auto mode

package/dist/bin/pushary-bell-hook.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-KTKIZEFT.js";
+} from "../chunk-5EUZYWID.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
-import "../chunk-CIVG746V.js";
+import "../chunk-7G5VO76N.js";
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-6MTNS63X.js";
-import "../chunk-ES3FAX5X.js";
+import "../chunk-7C5CJC3H.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-G3LXA2ZP.js";
+import "../chunk-CY4TZK5O.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,18 +5,18 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-KTKIZEFT.js";
+} from "../chunk-5EUZYWID.js";
 import {
   guardBinary
 } from "../chunk-HSGEEBBL.js";
 import "../chunk-VT4IVERX.js";
 import {
   claudeSettings
-} from "../chunk-PHXEADSL.js";
+} from "../chunk-VPJAAGD4.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
-import "../chunk-CIVG746V.js";
+import "../chunk-7G5VO76N.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -30,13 +30,13 @@ import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-6MTNS63X.js";
-import "../chunk-ES3FAX5X.js";
+import "../chunk-7C5CJC3H.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-G3LXA2ZP.js";
+import "../chunk-CY4TZK5O.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/bin/pushary-claude.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   ensureDaemonRunning
-} from "../chunk-XLM6COJA.js";
+} from "../chunk-MTKR4YLW.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
@@ -9,17 +9,17 @@ import {
   generateSessionKey,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "../chunk-JDQY47OW.js";
+} from "../chunk-XPAGN3SC.js";
 import {
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-55656H4Q.js";
+} from "../chunk-VZNDR3Z7.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-VT4IVERX.js";
-import "../chunk-PHXEADSL.js";
+import "../chunk-VPJAAGD4.js";
 import {
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
@@ -34,7 +34,7 @@ import {
   reportEvent,
   scopePathFor,
   waitForAnswer
-} from "../chunk-Y7BALRVB.js";
+} from "../chunk-33T5OOKP.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -42,7 +42,7 @@ import "../chunk-DINDL2CF.js";
 import "../chunk-6MTNS63X.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-ES3FAX5X.js";
+import "../chunk-7C5CJC3H.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import {
@@ -52,7 +52,7 @@ import {
 import {
   KILL_REASON,
   resolveGate
-} from "../chunk-G3LXA2ZP.js";
+} from "../chunk-CY4TZK5O.js";
 
 // src/wrapper/claudeBinary.ts
 import { statSync } from "fs";

package/dist/bin/pushary-clean.js

@@ -1,17 +1,18 @@
 #!/usr/bin/env node
+import {
+  removeClaudeMcpServers,
+  removePusharySettings
+} from "../chunk-GK4CED6Z.js";
 import {
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-IGV4KL7B.js";
+} from "../chunk-QW27ZFA4.js";
 import {
   removeGeminiSettings
-} from "../chunk-OZKRF7MS.js";
-import {
-  removeClaudeMcpServers,
-  removePusharySettings
-} from "../chunk-GM54KC62.js";
+} from "../chunk-2C6B6V2U.js";
+import "../chunk-ATBKJNWS.js";
 import "../chunk-HSGEEBBL.js";
 import {
   execNpm
@@ -33,7 +34,7 @@ import {
   pusharyDir,
   removeCodexHooks,
   vscodePluginDir
-} from "../chunk-PHXEADSL.js";
+} from "../chunk-VPJAAGD4.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -49,7 +50,7 @@ import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-G3LXA2ZP.js";
+import "../chunk-CY4TZK5O.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, copyFileSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -6,19 +6,19 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-XIR6N66V.js";
-import "../chunk-JDQY47OW.js";
+} from "../chunk-FOY5FISQ.js";
+import "../chunk-XPAGN3SC.js";
 import {
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-55656H4Q.js";
+} from "../chunk-VZNDR3Z7.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import {
   resolveBinary
 } from "../chunk-VT4IVERX.js";
-import "../chunk-PHXEADSL.js";
+import "../chunk-VPJAAGD4.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -27,7 +27,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-G3LXA2ZP.js";
+import "../chunk-CY4TZK5O.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -2,7 +2,7 @@
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-VGADRFG6.js";
+} from "../chunk-MNQI6ZZU.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
@@ -41,13 +41,13 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   waitForAnswer
-} from "../chunk-Y7BALRVB.js";
+} from "../chunk-33T5OOKP.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-ES3FAX5X.js";
+import "../chunk-7C5CJC3H.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import {
@@ -60,7 +60,7 @@ import {
   hookWaitClamped,
   hookWaitDeadline,
   resolveGate
-} from "../chunk-G3LXA2ZP.js";
+} from "../chunk-CY4TZK5O.js";
 
 // bin/pushary-codex-hook.ts
 import { basename, join } from "path";

package/dist/bin/pushary-codex.js

@@ -3,19 +3,19 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-Y7BALRVB.js";
+} from "../chunk-33T5OOKP.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-ES3FAX5X.js";
+import "../chunk-7C5CJC3H.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
-import "../chunk-G3LXA2ZP.js";
+import "../chunk-CY4TZK5O.js";
 
 // bin/pushary-codex.ts
 import { basename } from "path";

package/dist/bin/pushary-connect.js

@@ -1,22 +1,22 @@
 #!/usr/bin/env node
 import {
   printKeyCheck
-} from "../chunk-DNSIVHIA.js";
+} from "../chunk-N52CIK47.js";
 import {
   confirmAppConnection,
   connectDevice,
   printConnectInstructions
-} from "../chunk-BZKTCOZQ.js";
+} from "../chunk-PZR4XMFU.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey
-} from "../chunk-QDKJTPAT.js";
+} from "../chunk-2TZCZ7CL.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   readKeySource
-} from "../chunk-CIVG746V.js";
+} from "../chunk-7G5VO76N.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -29,7 +29,7 @@ import "../chunk-DINDL2CF.js";
 import "../chunk-6MTNS63X.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-ES3FAX5X.js";
+import "../chunk-7C5CJC3H.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
@@ -37,7 +37,7 @@ import {
   EXIT
 } from "../chunk-KZERVKTD.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-G3LXA2ZP.js";
+import "../chunk-CY4TZK5O.js";
 
 // bin/pushary-connect.ts
 exitOnHelpFlag("connect");

package/dist/bin/pushary-daemon.js

@@ -8,7 +8,7 @@ import {
   acquireDaemonLease,
   readDaemonStatus,
   requestDaemonHandoff
-} from "../chunk-XLM6COJA.js";
+} from "../chunk-MTKR4YLW.js";
 import {
   CODEX_BRIDGE_CAPABILITY,
   CODEX_RESUME_CAPABILITY,
@@ -17,7 +17,7 @@ import {
 import {
   findLiveProcessBySpawnId,
   ownsLiveProcess
-} from "../chunk-55656H4Q.js";
+} from "../chunk-VZNDR3Z7.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -26,7 +26,7 @@ import {
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
 } from "../chunk-VT4IVERX.js";
-import "../chunk-PHXEADSL.js";
+import "../chunk-VPJAAGD4.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -43,7 +43,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-G3LXA2ZP.js";
+import "../chunk-CY4TZK5O.js";
 
 // src/spawn-daemon.ts
 import { execFileSync, spawn } from "child_process";

package/dist/bin/pushary-disconnect.js

@@ -1,11 +1,12 @@
 #!/usr/bin/env node
-import {
-  removeGeminiSettings
-} from "../chunk-OZKRF7MS.js";
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-GM54KC62.js";
+} from "../chunk-GK4CED6Z.js";
+import {
+  removeGeminiSettings
+} from "../chunk-2C6B6V2U.js";
+import "../chunk-ATBKJNWS.js";
 import "../chunk-HSGEEBBL.js";
 import "../chunk-VT4IVERX.js";
 import {
@@ -19,14 +20,14 @@ import {
   geminiSettings,
   removeCodexHooks,
   removeCodexSettings
-} from "../chunk-PHXEADSL.js";
+} from "../chunk-VPJAAGD4.js";
 import {
   exitOnHelpFlag
 } from "../chunk-SQOFGPNX.js";
 import "../chunk-GOEXZ5QJ.js";
 import "../chunk-DINDL2CF.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-G3LXA2ZP.js";
+import "../chunk-CY4TZK5O.js";
 
 // bin/pushary-disconnect.ts
 import { readFileSync, writeFileSync } from "fs";

package/dist/bin/pushary-doctor.js

@@ -3,13 +3,13 @@ import {
   claudeWired,
   codexWired,
   geminiWired
-} from "../chunk-VKJUVPTJ.js";
+} from "../chunk-Q7N3XGWM.js";
 import {
   describeWaitLadder
 } from "../chunk-IIENZE2J.js";
 import {
   readDaemonStatus
-} from "../chunk-XLM6COJA.js";
+} from "../chunk-MTKR4YLW.js";
 import {
   agentProbes,
   detectAgent,
@@ -18,12 +18,12 @@ import {
   isDetected,
   isPluginRegistered,
   vscodeSettingsTargets
-} from "../chunk-IGV4KL7B.js";
+} from "../chunk-QW27ZFA4.js";
 import {
   GEMINI_HOOK_BINARY,
   hasGeminiHooks,
   missingGeminiHookEvents
-} from "../chunk-OZKRF7MS.js";
+} from "../chunk-2C6B6V2U.js";
 import "../chunk-XHKBHWLX.js";
 import {
   execNpm
@@ -46,10 +46,10 @@ import {
   readCodexMcpAuth,
   untrustedCodexHookEvents,
   vscodePluginDir
-} from "../chunk-PHXEADSL.js";
+} from "../chunk-VPJAAGD4.js";
 import {
   readLedgerSummary
-} from "../chunk-VGADRFG6.js";
+} from "../chunk-MNQI6ZZU.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -59,19 +59,19 @@ import {
   fetchChannels,
   reachVerdict,
   verifyRoundTrip
-} from "../chunk-BZKTCOZQ.js";
+} from "../chunk-PZR4XMFU.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-QDKJTPAT.js";
+} from "../chunk-2TZCZ7CL.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   keyPrefix,
   readKeySource
-} from "../chunk-CIVG746V.js";
+} from "../chunk-7G5VO76N.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -89,7 +89,7 @@ import {
   sendMcpRequest
 } from "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-ES3FAX5X.js";
+import "../chunk-7C5CJC3H.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
@@ -99,7 +99,7 @@ import {
 import {
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-G3LXA2ZP.js";
+import "../chunk-CY4TZK5O.js";
 
 // bin/pushary-doctor.ts
 import { existsSync, readFileSync, writeFileSync } from "fs";

package/dist/bin/pushary-gemini-bridge.js

@@ -5,19 +5,19 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-XIR6N66V.js";
-import "../chunk-JDQY47OW.js";
+} from "../chunk-FOY5FISQ.js";
+import "../chunk-XPAGN3SC.js";
 import {
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-55656H4Q.js";
+} from "../chunk-VZNDR3Z7.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import {
   resolveBinary
 } from "../chunk-VT4IVERX.js";
-import "../chunk-PHXEADSL.js";
+import "../chunk-VPJAAGD4.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -26,7 +26,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-G3LXA2ZP.js";
+import "../chunk-CY4TZK5O.js";
 
 // bin/pushary-gemini-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-gemini-hook.js

@@ -2,7 +2,7 @@
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-VGADRFG6.js";
+} from "../chunk-MNQI6ZZU.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
@@ -32,13 +32,13 @@ import {
   scopePathFor,
   sendNotification,
   waitForAnswer
-} from "../chunk-Y7BALRVB.js";
+} from "../chunk-33T5OOKP.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-ES3FAX5X.js";
+import "../chunk-7C5CJC3H.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import {
@@ -48,10 +48,11 @@ import {
   DECISION_LINE_MAX,
   KILL_REASON,
   effectiveWaitSeconds,
+  gateOutputFor,
   hookWaitClamped,
   hookWaitDeadline,
   resolveGate
-} from "../chunk-G3LXA2ZP.js";
+} from "../chunk-CY4TZK5O.js";
 
 // bin/pushary-gemini-hook.ts
 import { basename } from "path";
@@ -85,9 +86,13 @@ var geminiAllow = () => ({ kind: "allow" });
 var geminiDeny = (reason) => ({ kind: "deny", reason });
 var geminiPass = () => ({ kind: "pass" });
 var toGeminiWire = (decision) => {
-  if (decision.kind === "allow") return { decision: "allow" };
-  if (decision.kind === "deny") return { decision: "deny", reason: decision.reason };
-  return null;
+  if (decision.kind === "pass") return null;
+  return gateOutputFor(
+    "gemini",
+    "BeforeTool",
+    decision.kind,
+    decision.kind === "deny" ? decision.reason : void 0
+  ) ?? null;
 };
 var geminiTimeoutDecision = (timeoutAction, denyReason = "No response within timeout") => {
   if (timeoutAction === "approve") return geminiAllow();

package/dist/bin/pushary-hook.js

@@ -1,16 +1,14 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-LB6RSCLL.js";
-import "../chunk-GM54KC62.js";
-import "../chunk-HSGEEBBL.js";
-import "../chunk-VT4IVERX.js";
-import "../chunk-VGADRFG6.js";
+} from "../chunk-S3UD7O35.js";
+import "../chunk-ATBKJNWS.js";
+import "../chunk-MNQI6ZZU.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-Y7BALRVB.js";
+import "../chunk-33T5OOKP.js";
 import "../chunk-RN3NOEJF.js";
 import {
   exitOnHelpFlag
@@ -19,11 +17,11 @@ import "../chunk-GOEXZ5QJ.js";
 import "../chunk-DINDL2CF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-ES3FAX5X.js";
+import "../chunk-7C5CJC3H.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-G3LXA2ZP.js";
+import "../chunk-CY4TZK5O.js";
 
 // bin/pushary-hook.ts
 exitOnHelpFlag("hook");

package/dist/bin/pushary-login.js

@@ -6,14 +6,14 @@ import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-QDKJTPAT.js";
+} from "../chunk-2TZCZ7CL.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   readKeySource,
   writeKey
-} from "../chunk-CIVG746V.js";
+} from "../chunk-7G5VO76N.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -27,7 +27,7 @@ import {
 } from "../chunk-DINDL2CF.js";
 import "../chunk-6MTNS63X.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-ES3FAX5X.js";
+import "../chunk-7C5CJC3H.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
@@ -37,7 +37,7 @@ import {
 import "../chunk-2UMNXADU.js";
 import {
   isValidApiKey
-} from "../chunk-G3LXA2ZP.js";
+} from "../chunk-CY4TZK5O.js";
 
 // bin/pushary-login.ts
 exitOnHelpFlag("login");

package/dist/bin/pushary-logout.js

@@ -4,14 +4,14 @@ import {
   codexConfigToml,
   cursorUserMcp,
   geminiSettings
-} from "../chunk-PHXEADSL.js";
+} from "../chunk-VPJAAGD4.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   clearKey,
   readKeySource
-} from "../chunk-CIVG746V.js";
+} from "../chunk-7G5VO76N.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -22,7 +22,7 @@ import "../chunk-GOEXZ5QJ.js";
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-DINDL2CF.js";
 import "../chunk-6MTNS63X.js";
-import "../chunk-ES3FAX5X.js";
+import "../chunk-7C5CJC3H.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
@@ -32,7 +32,7 @@ import {
 import {
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-G3LXA2ZP.js";
+import "../chunk-CY4TZK5O.js";
 
 // bin/pushary-logout.ts
 import { existsSync } from "fs";