@pushary/agent-hooks 0.95.8 → 0.98.0

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # Changelog
 
+## 0.98.0
+
+Run `pushary setup` so the instruction block in Codex's AGENTS.md, GEMINI.md and OpenCode's AGENTS.md carries the new line. `pushary upgrade` rewrites hooks and trust, not instruction files.
+
+- Say the Codex rescue in your own voice. When you allow a command the auto-reviewer denied, the turn now resumes with "I approved this command in Pushary after the auto-reviewer denied it", because Codex hands that text to the model as your own turn. The old third-person wording read as a tool claiming someone else's permission and the model refused to run the command again.
+- In the instructions Pushary writes, say that rerunning the exact command you approved after a denial is the approved path and not a bypass of an enforced gate. It sits beside the line that says never to bypass one, which is what the old wording collided with. Tied to the hook result rather than to "when Pushary reports", so a page or a diff reciting the sentence beside a command is not a rule telling the model to run it.
+- Register the Cursor gate where it already sits, like every other writer, instead of taking it out and adding a fresh one on the end.
+- Drop the Codex trust key of a duplicate of ours when a rewrite collapses it. Otherwise the tool that moves up into that index inherits a hash it cannot match, and Codex reads its hook as Modified and silently stops running it.
+- `pushary doctor` no longer says another tool's hook "runs before ours" or "runs after ours". No agent runs the hooks on an event in a defined order, so the line names who else holds the event and for how long, and claims nothing about which goes first.
+
+## 0.97.0
+
+Requires the Codex auto-reviewer handling in `POST /api/agent/gate`, Codex bodies on `POST /api/agent/blocked-action/claim`, the `blocked-action/v2` Claude identity and `sessionCwd` on the gate request before rollout. Run `pushary upgrade` so Claude Code's `PermissionDenied` and Codex's `Stop` are registered with the hold budget, Codex gives `Stop` the full hook budget, and Codex trusts it again.
+
+- When Codex runs with `--approve-for-me`, stop asking you before its auto-reviewer. `PreToolUse` and `PermissionRequest` have no opinion under the reviewer, after the kill switch and a standing deny, so nothing the reviewer allows reaches your phone.
+- When the auto-reviewer denies a shell command, hold the turn end and ask once whether to allow that exact command. A yes continues the turn, Codex runs the same command again, and the retry skips the reviewer once. A no, or no answer, lets the denial stand. Denials of `apply_patch` and MCP calls are not asked about yet. The request names the session's directory as well as the command's, so the card can say where the command runs.
+- Hold a blocked call only when the hook can prove its host waits that long: the `--hold-budget=<seconds>` argument its registration now carries, or the budget the Mac app hands down in `PUSHARY_HOLD_BUDGET_SECONDS`. The hold never waits past that budget less its reserves. Without proof, which is an install registered before this release, the Claude plugin's older entry, an update that skipped `--finish-upgrade` or a Mac app built before it, a Claude block sends the "Auto mode blocked <tool>" notification instead, and a Codex turn end reads no denial, so it is still asked about once the hook is upgraded.
+- Build the `blocked-action/v2` identity for a Claude call, which includes its working directory, so the retry's hint and claim match the server's grant. A Claude call with no working directory is not asked about. Keep the retry hint for the grant's two minutes rather than ten.
+- `pushary doctor` warns when a `PermissionDenied` or Codex `Stop` registration carries no hold budget.
+
+## 0.96.0
+
+Requires the auto-mode block handling in `POST /api/agent/gate` and the `POST /api/agent/blocked-action/claim` route before rollout. Run `pushary upgrade` so Claude Code gives the `PermissionDenied` hook the full approval window.
+
+- When Claude Code's auto mode blocks a call, hold the agent and ask once whether to allow that exact call. A yes retries it and the retry runs. A no, or no answer, lets the block stand.
+- Stop sending a separate "Auto-mode blocked" notification and remove `PUSHARY_AUTOMODE_RETRY`. The server now decides whether a block is asked about, so the kill switch, a standing deny and your approval mode all apply.
+
 ## 0.95.8
 
 - Stop `clean` leaving a key it installed in Claude Code, Codex and Gemini when the Mac app is installed. An entry is kept only when its key is the one the Mac app holds; when the app has never signed in, the key setup recorded is removed.

package/dist/bin/pushary-bell-hook.js

@@ -1,36 +1,34 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-TY6IJY6I.js";
+} from "../chunk-NIXVMMJM.js";
 import {
   readHookInput
-} from "../chunk-XEVOPOKT.js";
-import "../chunk-3YFJGKJQ.js";
-import "../chunk-EMGGUO2Q.js";
-import "../chunk-R3OZ5ISU.js";
-import "../chunk-XZWUOCJZ.js";
-import "../chunk-QJPYJVL3.js";
-import "../chunk-QD73WATQ.js";
-import "../chunk-I7LKI4WO.js";
-import "../chunk-QV266EGS.js";
-import "../chunk-GOPIMNVC.js";
-import "../chunk-3AJIK5AO.js";
-import "../chunk-SKPXQRKN.js";
+} from "../chunk-M4TVEMLH.js";
+import "../chunk-5B5QV3KC.js";
+import "../chunk-OBYC6SN4.js";
+import "../chunk-W2MG2P46.js";
+import "../chunk-LBNAGGLV.js";
+import "../chunk-IRLTW6KF.js";
+import "../chunk-6LRGZJFB.js";
+import "../chunk-DOD3A6EU.js";
+import "../chunk-HFQ7WSHZ.js";
+import "../chunk-2GLOHBYB.js";
+import "../chunk-XPPXOKIG.js";
 import "../chunk-EQRS3SGM.js";
-import "../chunk-VERXHIQF.js";
+import "../chunk-NQGYPTJQ.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-L4ZCFMWW.js";
-import "../chunk-XUTSZYYJ.js";
-import "../chunk-E47WV7BJ.js";
-import "../chunk-NOVA7KZ2.js";
+import "../chunk-OPR2BPD4.js";
+import "../chunk-WU6LSXJ6.js";
+import "../chunk-XL3RKJYQ.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-VMQU7YEJ.js";
+import "../chunk-SJLGOVC6.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-L7NOG547.js";
+import "../chunk-VZD2GEKB.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-MC5WUOJJ.js";
+import "../chunk-OUAE3GKO.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,17 +5,15 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-TY6IJY6I.js";
+} from "../chunk-NIXVMMJM.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-GOPIMNVC.js";
-import "../chunk-3AJIK5AO.js";
-import "../chunk-L4ZCFMWW.js";
+} from "../chunk-2GLOHBYB.js";
 import {
   claudeSettings
-} from "../chunk-NOVA7KZ2.js";
+} from "../chunk-XL3RKJYQ.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -27,7 +25,7 @@ import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-VMQU7YEJ.js";
+import "../chunk-SJLGOVC6.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
@@ -35,9 +33,9 @@ import {
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "../chunk-L7NOG547.js";
+} from "../chunk-VZD2GEKB.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-MC5WUOJJ.js";
+import "../chunk-OUAE3GKO.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,7 +8,7 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-Y6SCMXR6.js";
+} from "../chunk-J44RPHUZ.js";
 import {
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
@@ -17,30 +17,28 @@ import {
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-3YFJGKJQ.js";
-import "../chunk-EMGGUO2Q.js";
-import "../chunk-R3OZ5ISU.js";
-import "../chunk-XZWUOCJZ.js";
-import "../chunk-QJPYJVL3.js";
-import "../chunk-QD73WATQ.js";
+} from "../chunk-5B5QV3KC.js";
+import "../chunk-OBYC6SN4.js";
+import "../chunk-W2MG2P46.js";
+import "../chunk-LBNAGGLV.js";
+import "../chunk-IRLTW6KF.js";
+import "../chunk-6LRGZJFB.js";
 import {
   ensureDaemonRunning
-} from "../chunk-I7LKI4WO.js";
-import "../chunk-QV266EGS.js";
-import "../chunk-GOPIMNVC.js";
-import "../chunk-3AJIK5AO.js";
+} from "../chunk-DOD3A6EU.js";
+import "../chunk-HFQ7WSHZ.js";
+import "../chunk-2GLOHBYB.js";
 import {
   encryptRecord
-} from "../chunk-SKPXQRKN.js";
+} from "../chunk-XPPXOKIG.js";
 import "../chunk-EQRS3SGM.js";
 import {
   transcriptsEnabled
-} from "../chunk-VERXHIQF.js";
+} from "../chunk-NQGYPTJQ.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-L4ZCFMWW.js";
 import {
   DEFAULT_SESSION,
   fetchModeState,
@@ -54,14 +52,14 @@ import {
   repoKeyFor,
   reportEvent,
   savePendingCommand
-} from "../chunk-HUGIKB5O.js";
+} from "../chunk-YJDRHQLG.js";
 import {
   UNNAMED_ACTION,
   deriveToolTarget,
   describeToolCall,
   scopePathFor
-} from "../chunk-Z4JVEL7R.js";
-import "../chunk-XUTSZYYJ.js";
+} from "../chunk-A76GNRIK.js";
+import "../chunk-OPR2BPD4.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -71,19 +69,19 @@ import {
   nextLongPollMs,
   waitForAnswer,
   withdrawQuestion
-} from "../chunk-XS33QBJA.js";
+} from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-E47WV7BJ.js";
-import "../chunk-NOVA7KZ2.js";
+} from "../chunk-WU6LSXJ6.js";
+import "../chunk-XL3RKJYQ.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-VMQU7YEJ.js";
+import "../chunk-SJLGOVC6.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-L7NOG547.js";
+import "../chunk-VZD2GEKB.js";
 import {
   getApiKey,
   getBaseUrl
@@ -92,7 +90,7 @@ import {
   KILL_REASON,
   redactSecrets,
   resolveGate
-} from "../chunk-MC5WUOJJ.js";
+} from "../chunk-OUAE3GKO.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -5,14 +5,14 @@ import {
   createGuards,
   resolveHermesPython,
   runHermesPythonScript
-} from "../chunk-N6FAXQDD.js";
+} from "../chunk-FAJ4R7IB.js";
 import "../chunk-KBITFQST.js";
 import {
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-F4TMY6XI.js";
+} from "../chunk-V47GITZV.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -22,39 +22,35 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-U5RIXR7I.js";
+} from "../chunk-HB2KB7QL.js";
 import {
   isClaudeMcpSnapshot,
   removeClaudeMcpServers,
   removePusharySettings,
   restoreClaudeMcpServer
-} from "../chunk-ATKGKAP6.js";
+} from "../chunk-QXIF6R4P.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-R3OZ5ISU.js";
-import "../chunk-XZWUOCJZ.js";
-import "../chunk-QJPYJVL3.js";
+} from "../chunk-W2MG2P46.js";
+import "../chunk-LBNAGGLV.js";
+import "../chunk-IRLTW6KF.js";
 import {
   pusharyHookExecutable
-} from "../chunk-QD73WATQ.js";
+} from "../chunk-6LRGZJFB.js";
 import {
   disableDaemonService
-} from "../chunk-I7LKI4WO.js";
+} from "../chunk-DOD3A6EU.js";
 import {
   removeGeminiSettings
-} from "../chunk-QV266EGS.js";
-import "../chunk-GOPIMNVC.js";
-import "../chunk-3AJIK5AO.js";
+} from "../chunk-HFQ7WSHZ.js";
+import "../chunk-2GLOHBYB.js";
 import "../chunk-XHKBHWLX.js";
-import {
-  execNpm
-} from "../chunk-L4ZCFMWW.js";
-import "../chunk-Z4JVEL7R.js";
-import "../chunk-XUTSZYYJ.js";
-import "../chunk-E47WV7BJ.js";
+import "../chunk-A76GNRIK.js";
+import "../chunk-OPR2BPD4.js";
+import "../chunk-WU6LSXJ6.js";
 import {
   bridgeAgentKey,
   claudeJson,
@@ -70,6 +66,7 @@ import {
   cursorPluginDir,
   cursorUserHooks,
   cursorUserMcp,
+  execNpm,
   geminiMd,
   geminiSettings,
   hermesConfigReceipt,
@@ -82,7 +79,7 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-NOVA7KZ2.js";
+} from "../chunk-XL3RKJYQ.js";
 import {
   exitOnHelpFlag
 } from "../chunk-GOQHN2UH.js";
@@ -93,18 +90,18 @@ import {
 import "../chunk-DINDL2CF.js";
 import {
   removeClaudeAlias
-} from "../chunk-VMQU7YEJ.js";
+} from "../chunk-SJLGOVC6.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-L7NOG547.js";
+import "../chunk-VZD2GEKB.js";
 import "../chunk-2UMNXADU.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   isValidApiKey
-} from "../chunk-MC5WUOJJ.js";
+} from "../chunk-OUAE3GKO.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, copyFileSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -1,46 +1,45 @@
 #!/usr/bin/env node
-import "../chunk-54W7ELDQ.js";
+import "../chunk-TZHDKRMG.js";
 import {
   LiveTranscriptRelay,
   liveSessionSleep,
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-FRXZMCVA.js";
+} from "../chunk-5KLAETSU.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-Y6SCMXR6.js";
-import "../chunk-SKPXQRKN.js";
+} from "../chunk-J44RPHUZ.js";
+import "../chunk-XPPXOKIG.js";
 import "../chunk-EQRS3SGM.js";
 import {
   transcriptsEnabled
-} from "../chunk-VERXHIQF.js";
+} from "../chunk-NQGYPTJQ.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import {
-  resolveBinary
-} from "../chunk-L4ZCFMWW.js";
 import {
   isDecisionStopped,
   withdrawQuestion
-} from "../chunk-XS33QBJA.js";
+} from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-E47WV7BJ.js";
-import "../chunk-NOVA7KZ2.js";
-import "../chunk-VMQU7YEJ.js";
+} from "../chunk-WU6LSXJ6.js";
+import {
+  resolveBinary
+} from "../chunk-XL3RKJYQ.js";
+import "../chunk-SJLGOVC6.js";
 import {
   callMcpTool
 } from "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-L7NOG547.js";
+import "../chunk-VZD2GEKB.js";
 import {
   getApiKey,
   getBaseUrl
@@ -48,7 +47,7 @@ import {
 import {
   parseAgentQuestion,
   parseAgentQuestionAnswers
-} from "../chunk-MC5WUOJJ.js";
+} from "../chunk-OUAE3GKO.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";