@pushary/agent-hooks 0.88.1 → 0.89.1

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## 0.89.0
+
+### Hermes approvals go to the phone, and setup wires it
+
+`setup --agents hermes` now selects Pushary as the Hermes approval transport,
+with `transport_fallback: builtin`. Hermes owns the timeout (300s) and the
+once/session/always/deny choices, and persists the last two, so a repeated
+approval can become a standing rule instead of being asked forever. The
+fallback is what makes selecting it safe: a missing key, an unreachable
+Pushary, or no connected device falls back to the terminal prompt rather than
+blocking work.
+
+The note explaining why setup writes `~/.hermes/config.yaml` directly rather
+than running `hermes plugins enable` was half wrong. Current Hermes does
+resolve pip-installed plugins in both `list` and `enable`; the reason to write
+the file is the rule against executing an agent's binary, and nothing else.
+
+### `pushary upgrade` named a package that does not exist
+
+It printed `pip install --upgrade pushary-hermes`. That package is not on PyPI.
+The real one is `hermes-plugin-pushary`, and the upgrade path for it is setup,
+which installs into the interpreter Hermes actually runs in. Now points there,
+like every other agent in that list.
+
 ## 0.88.1
 
 ### One install, whichever surface writes it

package/README.md

@@ -77,13 +77,18 @@ talking. Set `PUSHARY_BELL_QUIET=1` if you would rather it never mentioned it.
 
 ## Setup
 
-You need an API key. Sign up at [pushary.com](https://pushary.com/sign-up?from=npm), then run:
+Run setup:
 
 ```bash
 npx @pushary/agent-hooks@latest setup
 ```
 
-The wizard detects which agents you have installed and configures each one. To skip the prompts:
+It shows a QR code and short link. Open either in the Pushary app, check that the
+fingerprint matches, and approve. Setup then stores the credential and configures
+the agents it detects. If this machine already has a key, setup reuses it and skips
+pairing.
+
+For CI or another non-interactive install, pass an existing key explicitly:
 
 ```bash
 npx @pushary/agent-hooks@latest setup --key pk_xxx.sk_xxx --skip-phone

package/dist/bin/pushary-bell-hook.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-WPDMGNQR.js";
+} from "../chunk-B7JE4XHD.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
-import "../chunk-EKNFTIKO.js";
+import "../chunk-LALHWDWL.js";
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-6MTNS63X.js";
-import "../chunk-AJ4EMW5D.js";
+import "../chunk-OFRNZWC4.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-Q6MK2YKV.js";
+import "../chunk-L4C2JXJS.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,19 +5,19 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-WPDMGNQR.js";
+} from "../chunk-B7JE4XHD.js";
 import {
   guardBinary
 } from "../chunk-AIGDBRIJ.js";
 import "../chunk-PZA7G4CN.js";
 import {
   claudeSettings
-} from "../chunk-FRH2QIMY.js";
+} from "../chunk-VKVHY5HD.js";
 import "../chunk-GIRT7677.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
-import "../chunk-EKNFTIKO.js";
+import "../chunk-LALHWDWL.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -31,13 +31,13 @@ import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-6MTNS63X.js";
-import "../chunk-AJ4EMW5D.js";
+import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-Q6MK2YKV.js";
+import "../chunk-L4C2JXJS.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/bin/pushary-claude.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   ensureDaemonRunning
-} from "../chunk-4FANZF2L.js";
+} from "../chunk-K42SZKYF.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
@@ -9,17 +9,17 @@ import {
   generateSessionKey,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "../chunk-6GBQDZ7K.js";
+} from "../chunk-PMHTCDEO.js";
 import {
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-U44C3ULB.js";
+} from "../chunk-ZYPS2XMT.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-PZA7G4CN.js";
-import "../chunk-FRH2QIMY.js";
+import "../chunk-VKVHY5HD.js";
 import {
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
@@ -29,7 +29,7 @@ import {
   getPolicy,
   repoKeyFor,
   reportEvent
-} from "../chunk-OSE7X44J.js";
+} from "../chunk-6XSC6Z2K.js";
 import {
   askUser,
   cancelQuestion,
@@ -39,7 +39,7 @@ import {
   deriveToolTarget,
   describeToolCall,
   scopePathFor
-} from "../chunk-LXTX5CT7.js";
+} from "../chunk-LGXTBUT4.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -47,7 +47,7 @@ import "../chunk-DINDL2CF.js";
 import "../chunk-6MTNS63X.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-AJ4EMW5D.js";
+import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import {
@@ -57,7 +57,7 @@ import {
 import {
   KILL_REASON,
   resolveGate
-} from "../chunk-Q6MK2YKV.js";
+} from "../chunk-L4C2JXJS.js";
 
 // src/wrapper/claudeBinary.ts
 import { statSync } from "fs";

package/dist/bin/pushary-clean.js

@@ -4,13 +4,13 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-O7P7O4VY.js";
-import "../chunk-4KMWTOBK.js";
+} from "../chunk-LUCFN47K.js";
+import "../chunk-O5B7EK5U.js";
 import {
   removeClaudeMcpServers,
   removeGeminiSettings,
   removePusharySettings
-} from "../chunk-F3ZDPL6O.js";
+} from "../chunk-7TS2G4QG.js";
 import "../chunk-ATBKJNWS.js";
 import "../chunk-AIGDBRIJ.js";
 import {
@@ -35,9 +35,9 @@ import {
   removeCodexHookTrust,
   removeCodexHooks,
   vscodePluginDir
-} from "../chunk-FRH2QIMY.js";
+} from "../chunk-VKVHY5HD.js";
 import "../chunk-GIRT7677.js";
-import "../chunk-LXTX5CT7.js";
+import "../chunk-LGXTBUT4.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -55,7 +55,7 @@ import {
 } from "../chunk-KZERVKTD.js";
 import {
   CURSOR_GATE_EVENTS
-} from "../chunk-Q6MK2YKV.js";
+} from "../chunk-L4C2JXJS.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, copyFileSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -6,19 +6,19 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-LNAQWWBP.js";
-import "../chunk-6GBQDZ7K.js";
+} from "../chunk-C623LWJR.js";
+import "../chunk-PMHTCDEO.js";
 import {
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-U44C3ULB.js";
+} from "../chunk-ZYPS2XMT.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import {
   resolveBinary
 } from "../chunk-PZA7G4CN.js";
-import "../chunk-FRH2QIMY.js";
+import "../chunk-VKVHY5HD.js";
 import "../chunk-GIRT7677.js";
 import {
   getMachineId
@@ -28,7 +28,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-Q6MK2YKV.js";
+import "../chunk-L4C2JXJS.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -2,7 +2,7 @@
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-PXEFENML.js";
+} from "../chunk-VZKXBFUA.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
@@ -34,7 +34,7 @@ import {
   toCodexWire,
   toPolicyLookup,
   toPolicyLookups
-} from "../chunk-OSE7X44J.js";
+} from "../chunk-6XSC6Z2K.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -49,13 +49,13 @@ import {
   deriveToolTarget,
   describeToolCall,
   scopePathFor
-} from "../chunk-LXTX5CT7.js";
+} from "../chunk-LGXTBUT4.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-AJ4EMW5D.js";
+import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import {
@@ -68,7 +68,7 @@ import {
   hookWaitClamped,
   hookWaitDeadline,
   resolveGate
-} from "../chunk-Q6MK2YKV.js";
+} from "../chunk-L4C2JXJS.js";
 
 // bin/pushary-codex-hook.ts
 import { basename } from "path";

package/dist/bin/pushary-codex.js

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
 import {
   reportEvent
-} from "../chunk-OSE7X44J.js";
+} from "../chunk-6XSC6Z2K.js";
 import {
   askUser,
   waitForAnswer
 } from "../chunk-J3YDT4HM.js";
-import "../chunk-LXTX5CT7.js";
+import "../chunk-LGXTBUT4.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-AJ4EMW5D.js";
+import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
-import "../chunk-Q6MK2YKV.js";
+import "../chunk-L4C2JXJS.js";
 
 // bin/pushary-codex.ts
 import { basename } from "path";

package/dist/bin/pushary-connect.js

@@ -1,22 +1,22 @@
 #!/usr/bin/env node
 import {
   printKeyCheck
-} from "../chunk-ZPRF4YLA.js";
+} from "../chunk-SS72Z7FV.js";
 import {
   confirmAppConnection,
   connectDevice,
   printConnectInstructions
-} from "../chunk-SHVW5KFR.js";
+} from "../chunk-T3LRWZKI.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey
-} from "../chunk-WFFPWJN6.js";
+} from "../chunk-I5L6SK5V.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   readKeySource
-} from "../chunk-EKNFTIKO.js";
+} from "../chunk-LALHWDWL.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -29,7 +29,7 @@ import "../chunk-DINDL2CF.js";
 import "../chunk-6MTNS63X.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-AJ4EMW5D.js";
+import "../chunk-OFRNZWC4.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
@@ -37,7 +37,7 @@ import {
   EXIT
 } from "../chunk-KZERVKTD.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-Q6MK2YKV.js";
+import "../chunk-L4C2JXJS.js";
 
 // bin/pushary-connect.ts
 exitOnHelpFlag("connect");

package/dist/bin/pushary-daemon.js

@@ -8,7 +8,7 @@ import {
   acquireDaemonLease,
   readDaemonStatus,
   requestDaemonHandoff
-} from "../chunk-4FANZF2L.js";
+} from "../chunk-K42SZKYF.js";
 import {
   CODEX_BRIDGE_CAPABILITY,
   CODEX_RESUME_CAPABILITY,
@@ -17,7 +17,7 @@ import {
 import {
   findLiveProcessBySpawnId,
   ownsLiveProcess
-} from "../chunk-U44C3ULB.js";
+} from "../chunk-ZYPS2XMT.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -26,7 +26,7 @@ import {
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
 } from "../chunk-PZA7G4CN.js";
-import "../chunk-FRH2QIMY.js";
+import "../chunk-VKVHY5HD.js";
 import "../chunk-GIRT7677.js";
 import {
   getMachineId
@@ -44,7 +44,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-Q6MK2YKV.js";
+import "../chunk-L4C2JXJS.js";
 
 // src/spawn-daemon.ts
 import { execFileSync, spawn } from "child_process";

package/dist/bin/pushary-disconnect.js

@@ -8,12 +8,12 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-4KMWTOBK.js";
+} from "../chunk-O5B7EK5U.js";
 import {
   removeClaudeMcpServers,
   removeGeminiSettings,
   removePusharySettings
-} from "../chunk-F3ZDPL6O.js";
+} from "../chunk-7TS2G4QG.js";
 import "../chunk-ATBKJNWS.js";
 import "../chunk-AIGDBRIJ.js";
 import "../chunk-PZA7G4CN.js";
@@ -29,7 +29,7 @@ import {
   geminiSettings,
   removeCodexHooks,
   removeCodexSettings
-} from "../chunk-FRH2QIMY.js";
+} from "../chunk-VKVHY5HD.js";
 import "../chunk-GIRT7677.js";
 import {
   exitOnHelpFlag
@@ -37,7 +37,7 @@ import {
 import "../chunk-GOEXZ5QJ.js";
 import "../chunk-DINDL2CF.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-Q6MK2YKV.js";
+import "../chunk-L4C2JXJS.js";
 
 // bin/pushary-disconnect.ts
 import { readdirSync, readFileSync, rmSync, writeFileSync } from "fs";

package/dist/bin/pushary-doctor.js

@@ -6,10 +6,10 @@ import {
   claudeWired,
   codexWired,
   geminiWired
-} from "../chunk-SUZF64M4.js";
+} from "../chunk-4VYUMYWD.js";
 import {
   readDaemonStatus
-} from "../chunk-4FANZF2L.js";
+} from "../chunk-K42SZKYF.js";
 import {
   agentProbes,
   detectAgent,
@@ -18,18 +18,18 @@ import {
   isDetected,
   isPluginRegistered,
   vscodeSettingsTargets
-} from "../chunk-O7P7O4VY.js";
+} from "../chunk-LUCFN47K.js";
 import {
   OPENCODE_PLUGIN_PLACEHOLDER,
   openCodePluginDir,
   openCodePluginFile,
   openCodeWired
-} from "../chunk-4KMWTOBK.js";
+} from "../chunk-O5B7EK5U.js";
 import {
   GEMINI_HOOK_BINARY,
   hasGeminiHooks,
   missingGeminiHookEvents
-} from "../chunk-F3ZDPL6O.js";
+} from "../chunk-7TS2G4QG.js";
 import "../chunk-ATBKJNWS.js";
 import "../chunk-AIGDBRIJ.js";
 import "../chunk-XHKBHWLX.js";
@@ -55,12 +55,12 @@ import {
   readCodexMcpAuth,
   untrustedCodexHookEvents,
   vscodePluginDir
-} from "../chunk-FRH2QIMY.js";
+} from "../chunk-VKVHY5HD.js";
 import {
   readLedgerSummary
-} from "../chunk-PXEFENML.js";
+} from "../chunk-VZKXBFUA.js";
 import "../chunk-GIRT7677.js";
-import "../chunk-LXTX5CT7.js";
+import "../chunk-LGXTBUT4.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -70,19 +70,19 @@ import {
   fetchChannels,
   reachVerdict,
   verifyRoundTrip
-} from "../chunk-SHVW5KFR.js";
+} from "../chunk-T3LRWZKI.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-WFFPWJN6.js";
+} from "../chunk-I5L6SK5V.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   keyPrefix,
   readKeySource
-} from "../chunk-EKNFTIKO.js";
+} from "../chunk-LALHWDWL.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -100,7 +100,7 @@ import {
   sendMcpRequest
 } from "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-AJ4EMW5D.js";
+import "../chunk-OFRNZWC4.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
@@ -112,7 +112,7 @@ import {
 } from "../chunk-2UMNXADU.js";
 import {
   CURSOR_GATE_EVENTS
-} from "../chunk-Q6MK2YKV.js";
+} from "../chunk-L4C2JXJS.js";
 
 // bin/pushary-doctor.ts
 import { existsSync, readFileSync, writeFileSync } from "fs";

package/dist/bin/pushary-elicitation-hook.js

@@ -32,7 +32,7 @@ import {
   planElicitationAsk,
   readElicitationFields,
   renderElicitationOutput
-} from "../chunk-Q6MK2YKV.js";
+} from "../chunk-L4C2JXJS.js";
 
 // bin/pushary-elicitation-hook.ts
 import { basename } from "path";
@@ -59,35 +59,55 @@ var main = async () => {
   if (!apiKey) return;
   const project = basename(input.cwd ?? process.cwd());
   const deadline = hookWaitDeadline(START_MS, effectiveWaitSeconds("wait", 0, "claude"), "claude", Date.now());
-  let created;
-  try {
-    created = await askUser(apiKey, {
-      question: ask.kind === "questions" ? ask.questions[0].question : ask.question,
-      type: ask.kind === "questions" ? "select" : ask.kind,
-      ...ask.kind === "select" ? { options: [...ask.options] } : {},
-      ...ask.kind === "questions" ? { options: ask.questions[0].options.map((option) => option.label), questions: [...ask.questions] } : {},
-      context: `${input.mcp_server_name ?? "An MCP server"} is asking for input`,
-      agentName: `Claude Code - ${project}`,
-      sessionId: input.session_id,
-      machineId: getMachineId(),
-      toolName: "Elicitation",
-      toolTarget: input.mcp_server_name,
-      // The elicitation's own id, so a retried create is the same decision rather
-      // than a second question on the same lock screen.
-      toolUseId: input.elicitation_id
-    });
-  } catch {
-    return;
-  }
-  if (created.suppressed || created.noDevices) {
-    await cancelQuestion(apiKey, created.correlationId).catch(() => {
-    });
-    return;
+  const common = {
+    context: `${input.mcp_server_name ?? "An MCP server"} is asking for input`,
+    agentName: `Claude Code - ${project}`,
+    sessionId: input.session_id,
+    machineId: getMachineId(),
+    toolName: "Elicitation",
+    toolTarget: input.mcp_server_name
+  };
+  const prompts = ask.kind === "questions" ? [...ask.questions.entries()].map(([index, question]) => ({
+    question: question.question,
+    type: "select",
+    options: question.options.map((option) => option.label),
+    questions: [question],
+    toolUseId: input.elicitation_id ? `${input.elicitation_id}:${index}` : void 0
+  })) : [{
+    question: ask.question,
+    type: ask.kind,
+    ...ask.kind === "select" ? { options: [...ask.options] } : {},
+    toolUseId: input.elicitation_id
+  }];
+  let simpleAnswer;
+  const questionAnswers = {};
+  for (const prompt of prompts) {
+    let created;
+    try {
+      created = await askUser(apiKey, { ...common, ...prompt });
+    } catch {
+      return;
+    }
+    if (created.suppressed || created.noDevices) {
+      await cancelQuestion(apiKey, created.correlationId).catch(() => {
+      });
+      return;
+    }
+    const answer = await pollForAnswer(apiKey, created.correlationId, deadline);
+    if (ask.kind === "questions") {
+      const question = "questions" in prompt ? prompt.questions[0] : void 0;
+      const parsed = question && answer.answered && answer.value ? parseAgentQuestionAnswers([question], answer.value) : null;
+      if (parsed) Object.assign(questionAnswers, parsed);
+      else {
+        savePendingQuestion(input.session_id || DEFAULT_SESSION, created.correlationId);
+        return;
+      }
+    } else {
+      simpleAnswer = answer;
+    }
   }
-  const answer = await pollForAnswer(apiKey, created.correlationId, deadline);
-  const content = answered(ask, answer);
+  const content = ask.kind === "questions" ? elicitationContentFromAnswers(ask, questionAnswers) : simpleAnswer ? answered(ask, simpleAnswer) : null;
   if (!content) {
-    savePendingQuestion(input.session_id || DEFAULT_SESSION, created.correlationId);
     return;
   }
   const output = renderElicitationOutput("Elicitation", "accept", content);

package/dist/bin/pushary-gemini-bridge.js

@@ -5,19 +5,19 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-LNAQWWBP.js";
-import "../chunk-6GBQDZ7K.js";
+} from "../chunk-C623LWJR.js";
+import "../chunk-PMHTCDEO.js";
 import {
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-U44C3ULB.js";
+} from "../chunk-ZYPS2XMT.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import {
   resolveBinary
 } from "../chunk-PZA7G4CN.js";
-import "../chunk-FRH2QIMY.js";
+import "../chunk-VKVHY5HD.js";
 import "../chunk-GIRT7677.js";
 import {
   getMachineId
@@ -27,7 +27,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-Q6MK2YKV.js";
+import "../chunk-L4C2JXJS.js";
 
 // bin/pushary-gemini-bridge.ts
 import { existsSync } from "fs";