@pushary/agent-hooks 0.95.8 → 0.97.0

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 0.97.0
+
+Requires the Codex auto-reviewer handling in `POST /api/agent/gate`, Codex bodies on `POST /api/agent/blocked-action/claim`, the `blocked-action/v2` Claude identity and `sessionCwd` on the gate request before rollout. Run `pushary upgrade` so Claude Code's `PermissionDenied` and Codex's `Stop` are registered with the hold budget, Codex gives `Stop` the full hook budget, and Codex trusts it again.
+
+- When Codex runs with `--approve-for-me`, stop asking you before its auto-reviewer. `PreToolUse` and `PermissionRequest` have no opinion under the reviewer, after the kill switch and a standing deny, so nothing the reviewer allows reaches your phone.
+- When the auto-reviewer denies a shell command, hold the turn end and ask once whether to allow that exact command. A yes continues the turn, Codex runs the same command again, and the retry skips the reviewer once. A no, or no answer, lets the denial stand. Denials of `apply_patch` and MCP calls are not asked about yet. The request names the session's directory as well as the command's, so the card can say where the command runs.
+- Hold a blocked call only when the hook can prove its host waits that long: the `--hold-budget=<seconds>` argument its registration now carries, or the budget the Mac app hands down in `PUSHARY_HOLD_BUDGET_SECONDS`. The hold never waits past that budget less its reserves. Without proof, which is an install registered before this release, the Claude plugin's older entry, an update that skipped `--finish-upgrade` or a Mac app built before it, a Claude block sends the "Auto mode blocked <tool>" notification instead, and a Codex turn end reads no denial, so it is still asked about once the hook is upgraded.
+- Build the `blocked-action/v2` identity for a Claude call, which includes its working directory, so the retry's hint and claim match the server's grant. A Claude call with no working directory is not asked about. Keep the retry hint for the grant's two minutes rather than ten.
+- `pushary doctor` warns when a `PermissionDenied` or Codex `Stop` registration carries no hold budget.
+
+## 0.96.0
+
+Requires the auto-mode block handling in `POST /api/agent/gate` and the `POST /api/agent/blocked-action/claim` route before rollout. Run `pushary upgrade` so Claude Code gives the `PermissionDenied` hook the full approval window.
+
+- When Claude Code's auto mode blocks a call, hold the agent and ask once whether to allow that exact call. A yes retries it and the retry runs. A no, or no answer, lets the block stand.
+- Stop sending a separate "Auto-mode blocked" notification and remove `PUSHARY_AUTOMODE_RETRY`. The server now decides whether a block is asked about, so the kill switch, a standing deny and your approval mode all apply.
+
 ## 0.95.8
 
 - Stop `clean` leaving a key it installed in Claude Code, Codex and Gemini when the Mac app is installed. An entry is kept only when its key is the one the Mac app holds; when the app has never signed in, the key setup recorded is removed.

package/dist/bin/pushary-bell-hook.js

@@ -1,36 +1,34 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-TY6IJY6I.js";
+} from "../chunk-GGYH6LIE.js";
 import {
   readHookInput
-} from "../chunk-XEVOPOKT.js";
-import "../chunk-3YFJGKJQ.js";
-import "../chunk-EMGGUO2Q.js";
-import "../chunk-R3OZ5ISU.js";
-import "../chunk-XZWUOCJZ.js";
-import "../chunk-QJPYJVL3.js";
-import "../chunk-QD73WATQ.js";
-import "../chunk-I7LKI4WO.js";
-import "../chunk-QV266EGS.js";
-import "../chunk-GOPIMNVC.js";
-import "../chunk-3AJIK5AO.js";
-import "../chunk-SKPXQRKN.js";
+} from "../chunk-5ODZEFP3.js";
+import "../chunk-6VXZKOBB.js";
+import "../chunk-A4AIISZZ.js";
+import "../chunk-4AXWBCCO.js";
+import "../chunk-H4VNAOCG.js";
+import "../chunk-BYH75I7Y.js";
+import "../chunk-FU5SQKAY.js";
+import "../chunk-LYWTLNMG.js";
+import "../chunk-IBRX7LRE.js";
+import "../chunk-WIKEADOS.js";
+import "../chunk-CDSA3NTB.js";
 import "../chunk-EQRS3SGM.js";
-import "../chunk-VERXHIQF.js";
+import "../chunk-C2FYSFTQ.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-L4ZCFMWW.js";
-import "../chunk-XUTSZYYJ.js";
-import "../chunk-E47WV7BJ.js";
-import "../chunk-NOVA7KZ2.js";
+import "../chunk-QFAZ6QCT.js";
+import "../chunk-IZKCA35M.js";
+import "../chunk-67RNDRKL.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-VMQU7YEJ.js";
+import "../chunk-VF7YOT2W.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-L7NOG547.js";
+import "../chunk-VTUN7WSG.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-MC5WUOJJ.js";
+import "../chunk-HUZW6SEO.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,17 +5,15 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-TY6IJY6I.js";
+} from "../chunk-GGYH6LIE.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-GOPIMNVC.js";
-import "../chunk-3AJIK5AO.js";
-import "../chunk-L4ZCFMWW.js";
+} from "../chunk-WIKEADOS.js";
 import {
   claudeSettings
-} from "../chunk-NOVA7KZ2.js";
+} from "../chunk-67RNDRKL.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -27,7 +25,7 @@ import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-VMQU7YEJ.js";
+import "../chunk-VF7YOT2W.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
@@ -35,9 +33,9 @@ import {
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "../chunk-L7NOG547.js";
+} from "../chunk-VTUN7WSG.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-MC5WUOJJ.js";
+import "../chunk-HUZW6SEO.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,7 +8,7 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-Y6SCMXR6.js";
+} from "../chunk-KDPYXMUI.js";
 import {
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
@@ -17,30 +17,28 @@ import {
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-3YFJGKJQ.js";
-import "../chunk-EMGGUO2Q.js";
-import "../chunk-R3OZ5ISU.js";
-import "../chunk-XZWUOCJZ.js";
-import "../chunk-QJPYJVL3.js";
-import "../chunk-QD73WATQ.js";
+} from "../chunk-6VXZKOBB.js";
+import "../chunk-A4AIISZZ.js";
+import "../chunk-4AXWBCCO.js";
+import "../chunk-H4VNAOCG.js";
+import "../chunk-BYH75I7Y.js";
+import "../chunk-FU5SQKAY.js";
 import {
   ensureDaemonRunning
-} from "../chunk-I7LKI4WO.js";
-import "../chunk-QV266EGS.js";
-import "../chunk-GOPIMNVC.js";
-import "../chunk-3AJIK5AO.js";
+} from "../chunk-LYWTLNMG.js";
+import "../chunk-IBRX7LRE.js";
+import "../chunk-WIKEADOS.js";
 import {
   encryptRecord
-} from "../chunk-SKPXQRKN.js";
+} from "../chunk-CDSA3NTB.js";
 import "../chunk-EQRS3SGM.js";
 import {
   transcriptsEnabled
-} from "../chunk-VERXHIQF.js";
+} from "../chunk-C2FYSFTQ.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-L4ZCFMWW.js";
 import {
   DEFAULT_SESSION,
   fetchModeState,
@@ -54,14 +52,14 @@ import {
   repoKeyFor,
   reportEvent,
   savePendingCommand
-} from "../chunk-HUGIKB5O.js";
+} from "../chunk-DGUMR5LZ.js";
 import {
   UNNAMED_ACTION,
   deriveToolTarget,
   describeToolCall,
   scopePathFor
-} from "../chunk-Z4JVEL7R.js";
-import "../chunk-XUTSZYYJ.js";
+} from "../chunk-VCKQ45QA.js";
+import "../chunk-QFAZ6QCT.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -71,19 +69,19 @@ import {
   nextLongPollMs,
   waitForAnswer,
   withdrawQuestion
-} from "../chunk-XS33QBJA.js";
+} from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-E47WV7BJ.js";
-import "../chunk-NOVA7KZ2.js";
+} from "../chunk-IZKCA35M.js";
+import "../chunk-67RNDRKL.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-VMQU7YEJ.js";
+import "../chunk-VF7YOT2W.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-L7NOG547.js";
+import "../chunk-VTUN7WSG.js";
 import {
   getApiKey,
   getBaseUrl
@@ -92,7 +90,7 @@ import {
   KILL_REASON,
   redactSecrets,
   resolveGate
-} from "../chunk-MC5WUOJJ.js";
+} from "../chunk-HUZW6SEO.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -5,14 +5,14 @@ import {
   createGuards,
   resolveHermesPython,
   runHermesPythonScript
-} from "../chunk-N6FAXQDD.js";
+} from "../chunk-AXSDMDJI.js";
 import "../chunk-KBITFQST.js";
 import {
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-F4TMY6XI.js";
+} from "../chunk-K7MLXXPY.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -22,39 +22,35 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-U5RIXR7I.js";
+} from "../chunk-EHQC3GWL.js";
 import {
   isClaudeMcpSnapshot,
   removeClaudeMcpServers,
   removePusharySettings,
   restoreClaudeMcpServer
-} from "../chunk-ATKGKAP6.js";
+} from "../chunk-6WJKYD3Q.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-R3OZ5ISU.js";
-import "../chunk-XZWUOCJZ.js";
-import "../chunk-QJPYJVL3.js";
+} from "../chunk-4AXWBCCO.js";
+import "../chunk-H4VNAOCG.js";
+import "../chunk-BYH75I7Y.js";
 import {
   pusharyHookExecutable
-} from "../chunk-QD73WATQ.js";
+} from "../chunk-FU5SQKAY.js";
 import {
   disableDaemonService
-} from "../chunk-I7LKI4WO.js";
+} from "../chunk-LYWTLNMG.js";
 import {
   removeGeminiSettings
-} from "../chunk-QV266EGS.js";
-import "../chunk-GOPIMNVC.js";
-import "../chunk-3AJIK5AO.js";
+} from "../chunk-IBRX7LRE.js";
+import "../chunk-WIKEADOS.js";
 import "../chunk-XHKBHWLX.js";
-import {
-  execNpm
-} from "../chunk-L4ZCFMWW.js";
-import "../chunk-Z4JVEL7R.js";
-import "../chunk-XUTSZYYJ.js";
-import "../chunk-E47WV7BJ.js";
+import "../chunk-VCKQ45QA.js";
+import "../chunk-QFAZ6QCT.js";
+import "../chunk-IZKCA35M.js";
 import {
   bridgeAgentKey,
   claudeJson,
@@ -70,6 +66,7 @@ import {
   cursorPluginDir,
   cursorUserHooks,
   cursorUserMcp,
+  execNpm,
   geminiMd,
   geminiSettings,
   hermesConfigReceipt,
@@ -82,7 +79,7 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-NOVA7KZ2.js";
+} from "../chunk-67RNDRKL.js";
 import {
   exitOnHelpFlag
 } from "../chunk-GOQHN2UH.js";
@@ -93,18 +90,18 @@ import {
 import "../chunk-DINDL2CF.js";
 import {
   removeClaudeAlias
-} from "../chunk-VMQU7YEJ.js";
+} from "../chunk-VF7YOT2W.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-L7NOG547.js";
+import "../chunk-VTUN7WSG.js";
 import "../chunk-2UMNXADU.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   isValidApiKey
-} from "../chunk-MC5WUOJJ.js";
+} from "../chunk-HUZW6SEO.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, copyFileSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -1,46 +1,45 @@
 #!/usr/bin/env node
-import "../chunk-54W7ELDQ.js";
+import "../chunk-DNLFSRCF.js";
 import {
   LiveTranscriptRelay,
   liveSessionSleep,
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-FRXZMCVA.js";
+} from "../chunk-ROTIPRM4.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-Y6SCMXR6.js";
-import "../chunk-SKPXQRKN.js";
+} from "../chunk-KDPYXMUI.js";
+import "../chunk-CDSA3NTB.js";
 import "../chunk-EQRS3SGM.js";
 import {
   transcriptsEnabled
-} from "../chunk-VERXHIQF.js";
+} from "../chunk-C2FYSFTQ.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import {
-  resolveBinary
-} from "../chunk-L4ZCFMWW.js";
 import {
   isDecisionStopped,
   withdrawQuestion
-} from "../chunk-XS33QBJA.js";
+} from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-E47WV7BJ.js";
-import "../chunk-NOVA7KZ2.js";
-import "../chunk-VMQU7YEJ.js";
+} from "../chunk-IZKCA35M.js";
+import {
+  resolveBinary
+} from "../chunk-67RNDRKL.js";
+import "../chunk-VF7YOT2W.js";
 import {
   callMcpTool
 } from "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-L7NOG547.js";
+import "../chunk-VTUN7WSG.js";
 import {
   getApiKey,
   getBaseUrl
@@ -48,7 +47,7 @@ import {
 import {
   parseAgentQuestion,
   parseAgentQuestionAnswers
-} from "../chunk-MC5WUOJJ.js";
+} from "../chunk-HUZW6SEO.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";