@pushary/agent-hooks 0.92.0 → 0.92.1

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## 0.92.1
+
+### A rejected key is an answer, not an empty poll
+
+`pollAgent` returned `{ command: null, mode: null }` for every non-OK response,
+so a 401 was indistinguishable from a healthy poll with nothing queued. That
+landed on the success branch of `startCommandPoller`, which resets `errorStreak`
+to zero, so the backoff never engaged and the wrapper polled a dead key at the
+idle cadence forever. Because `mode` was null, `onModeState` never fired, and
+`onModeState` is the only place `dualMode` sets `killed` and stops the active
+leg. A wrapper whose key the server rejects therefore reported `kill=false` to
+itself indefinitely: remote stop could not reach it, phone messages never
+landed, and nothing was printed.
+
+`PollResult` now carries `rejected`, set only for 401 and 403, which is the same
+line `fetchModeState` already drew between an answer and a blip. A rejected poll
+takes the error path, so the existing exponential backoff applies, and the
+wrapper prints once that remote stop and phone messages are not active. A 500 or
+a dropped connection is still a blip and still retried at the normal cadence.
+
+A rejected response is also no longer trusted for its contents: neither the
+command nor the mode state it carries is applied.
+
 ## 0.92.0
 
 ### A Claude Code upgrade registers the events it just gained

package/dist/bin/pushary-claude.js

@@ -744,6 +744,8 @@ var FAST_DECAY_TICKS = 3;
 var MAX_ERROR_BACKOFF_MS = 12e4;
 var MAX_ERROR_STREAK = 6;
 var REQUEST_TIMEOUT_MS = 1e4;
+var PollRejectedError = class extends Error {
+};
 var startCommandPoller = (opts) => {
   const drain = opts.drain ?? drainPendingCommand;
   const slow = opts.slowPollMs ?? SLOW_POLL_MS;
@@ -754,6 +756,16 @@ var startCommandPoller = (opts) => {
   let inflight;
   let idleTicks = 0;
   let errorStreak = 0;
+  let authRejectionReported = false;
+  const reportAuthRejection = () => {
+    if (authRejectionReported) return;
+    authRejectionReported = true;
+    try {
+      opts.onAuthRejected?.();
+    } catch {
+      return;
+    }
+  };
   const jitter = (ms) => {
     const r = opts.jitter ? opts.jitter() : Math.random();
     return Math.max(1, Math.round(ms * (0.85 + r * 0.3)));
@@ -789,6 +801,10 @@ var startCommandPoller = (opts) => {
       let command;
       if (opts.poll) {
         const result = await opts.poll(opts.apiKey, opts.getSessionId?.(), wantCommands, controller.signal);
+        if (result.rejected) {
+          reportAuthRejection();
+          throw new PollRejectedError();
+        }
         command = result.command;
         if (result.mode && opts.onModeState) {
           try {
@@ -845,6 +861,7 @@ var startCommandPoller = (opts) => {
 
 // src/wrapper/pollClient.ts
 var APPROVAL_MODES = /* @__PURE__ */ new Set(["push_only", "terminal_only", "push_first", "notify_only"]);
+var isRejection = (status) => status === 401 || status === 403;
 var pollAgent = async (apiKey, sessionId, wantCommand, signal, baseUrl = getBaseUrl(), machineId) => {
   try {
     const sessionKey = sessionId || DEFAULT_SESSION;
@@ -894,7 +911,7 @@ var pollAgent = async (apiKey, sessionId, wantCommand, signal, baseUrl = getBase
       }),
       signal
     });
-    if (!response.ok) return { command: null, mode: null };
+    if (!response.ok) return { command: null, mode: null, rejected: isRejection(response.status) };
     const data = await response.json();
     const claimedCommand = (id, text) => ({
       id,
@@ -923,9 +940,9 @@ var pollAgent = async (apiKey, sessionId, wantCommand, signal, baseUrl = getBase
       policyVersion: typeof data.policyVersion === "string" && data.policyVersion.length > 0 ? data.policyVersion : null,
       relayUrl: typeof data.relayUrl === "string" && data.relayUrl.length > 0 ? data.relayUrl : null
     };
-    return { command, mode };
+    return { command, mode, rejected: false };
   } catch {
-    return { command: null, mode: null };
+    return { command: null, mode: null, rejected: false };
   }
 };
 
@@ -1734,6 +1751,11 @@ var runDualMode = async (binary, args2, startingMode) => {
     // Relay-primary: idle the safety-net poll at 60s (see RELAY_FALLBACK_POLL_MS).
     // No relay advertised -> the poller IS the command path, so keep the default.
     slowPollMs: relayAdvertised ? RELAY_FALLBACK_POLL_MS : void 0,
+    onAuthRejected: () => {
+      process.stderr.write(
+        "[pushary] this key was rejected \u2014 remote stop and phone messages are NOT active; run `pushary login` to reconnect\n"
+      );
+    },
     onModeState: (state) => {
       if (state.kill && !killed) {
         killed = true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.92.0",
+  "version": "0.92.1",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",