@pushary/agent-hooks 1.5.1 → 1.6.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 1.6.0
+
+- Pushary no longer asks about a Claude Code command your own Claude Code allow rules already cover when only a Pushary default would have asked. Risky commands still ask: destructive, network and data-loss commands, and anything whose effect cannot be read from its text, such as `bash -c`, inline interpreter code, `xargs` or a `#` comment. If Claude Code prompts anyway, the approval still reaches your phone.
+- Your Claude Code rules are read from your managed, user and local settings. A repository's committed `.claude/settings.json` can only add asks and denies, so a cloned repository cannot switch Pushary off.
+- After three approvals of Bash in a row in one session, the phone and the Mac offer "Allow Bash for this session". Risky commands still ask, and a command the grant holds back is delivered exactly as it was before the grant.
+- "Approve for this session" no longer saves a rule for a risky command, or for a wrapper such as `bash -c` or `git -C` that would cover every command after it.
+- A preset you picked in Policies now applies on sites that have an Approvals mode set, which is nearly all of them. The Approvals mode still decides where an approval goes.
+- A call your team routes to an approver keeps that approver, whatever your own Claude Code settings allow.
+- An automatic update whose agent configuration refresh fails now stays pending and retries, instead of reporting success.
+- A newer release now replaces a pending upgrade whose refresh keeps failing, so updates never stop. `pushary upgrade` prints what failed instead of a stack trace.
+- Setup, upgrade and doctor no longer run a Codex binary that sits inside an app bundle when `codex` on your PATH points there directly or through a symlink.
+
 ## 1.5.1
 
 - Setup no longer stops at a Codex version. It writes the Pushary hooks, asks Codex to trust them, and checks Codex's answer. It used to trust the hooks itself only up to Codex 0.155.1, and on anything newer told you to open Codex and trust them by hand.

package/dist/bin/pushary-bell-hook.js

@@ -1,34 +1,34 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-DTQNDR7C.js";
+} from "../chunk-E7MJBWSR.js";
 import {
   readHookInput
-} from "../chunk-6QFEQIPM.js";
-import "../chunk-TZGCUNOX.js";
+} from "../chunk-FDF72XHK.js";
+import "../chunk-A2GS2ENL.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-WNJSGZY7.js";
-import "../chunk-TFKBFQCE.js";
-import "../chunk-K3QVDAZW.js";
-import "../chunk-Z4VGIBJ7.js";
-import "../chunk-X7FESZTD.js";
-import "../chunk-2AUIEZYS.js";
-import "../chunk-5UQ5ATIE.js";
-import "../chunk-TIWURSLS.js";
+import "../chunk-KZBGITM4.js";
+import "../chunk-A5URWZTP.js";
+import "../chunk-GDXSCXQC.js";
+import "../chunk-MOQOJOMD.js";
+import "../chunk-DZ75BJ7V.js";
+import "../chunk-BK5F3FGE.js";
+import "../chunk-OR3A3RLH.js";
+import "../chunk-SFNRAEEW.js";
 import "../chunk-66H2QQAK.js";
-import "../chunk-2QT3GCU4.js";
+import "../chunk-GP6SFVEN.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-UYDTFCHW.js";
-import "../chunk-WOLPADR6.js";
-import "../chunk-6IU45EHE.js";
+import "../chunk-VZANUMIF.js";
+import "../chunk-7JSE6JTZ.js";
+import "../chunk-F2OPOBRO.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-USQDVBEV.js";
+import "../chunk-TDKE3V6W.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-HU5LSYL2.js";
+import "../chunk-VMNI33F5.js";
 import "../chunk-T7E75EKA.js";
 import "../chunk-OSJEMXSR.js";
-import "../chunk-T4QY64OR.js";
+import "../chunk-YFD7CRIZ.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 

package/dist/bin/pushary-bell.js

@@ -5,15 +5,15 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-DTQNDR7C.js";
+} from "../chunk-E7MJBWSR.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-5UQ5ATIE.js";
+} from "../chunk-OR3A3RLH.js";
 import {
   claudeSettings
-} from "../chunk-6IU45EHE.js";
+} from "../chunk-F2OPOBRO.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -23,18 +23,18 @@ import {
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-USQDVBEV.js";
+import "../chunk-TDKE3V6W.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-HU5LSYL2.js";
+import "../chunk-VMNI33F5.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-T7E75EKA.js";
 import "../chunk-OSJEMXSR.js";
-import "../chunk-T4QY64OR.js";
+import "../chunk-YFD7CRIZ.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 

package/dist/bin/pushary-claude.js

@@ -8,7 +8,7 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-M2LMXPJZ.js";
+} from "../chunk-ALG3IBLB.js";
 import {
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
@@ -17,24 +17,24 @@ import {
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-TZGCUNOX.js";
+} from "../chunk-A2GS2ENL.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-WNJSGZY7.js";
-import "../chunk-TFKBFQCE.js";
-import "../chunk-K3QVDAZW.js";
-import "../chunk-Z4VGIBJ7.js";
+import "../chunk-KZBGITM4.js";
+import "../chunk-A5URWZTP.js";
+import "../chunk-GDXSCXQC.js";
+import "../chunk-MOQOJOMD.js";
 import {
   ensureDaemonRunning
-} from "../chunk-X7FESZTD.js";
-import "../chunk-2AUIEZYS.js";
-import "../chunk-5UQ5ATIE.js";
+} from "../chunk-DZ75BJ7V.js";
+import "../chunk-BK5F3FGE.js";
+import "../chunk-OR3A3RLH.js";
 import {
   encryptRecord
-} from "../chunk-TIWURSLS.js";
+} from "../chunk-SFNRAEEW.js";
 import "../chunk-66H2QQAK.js";
 import {
   transcriptsEnabled
-} from "../chunk-2QT3GCU4.js";
+} from "../chunk-GP6SFVEN.js";
 import {
   needsShell,
   spawnClaude
@@ -56,8 +56,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-D573TLP6.js";
-import "../chunk-UYDTFCHW.js";
+} from "../chunk-66BIMA62.js";
+import "../chunk-VZANUMIF.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -70,15 +70,15 @@ import {
 } from "../chunk-PYCQXCI5.js";
 import {
   getMachineId
-} from "../chunk-WOLPADR6.js";
-import "../chunk-6IU45EHE.js";
+} from "../chunk-7JSE6JTZ.js";
+import "../chunk-F2OPOBRO.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-USQDVBEV.js";
+import "../chunk-TDKE3V6W.js";
 import "../chunk-HETOKNIL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-HU5LSYL2.js";
+import "../chunk-VMNI33F5.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
@@ -88,7 +88,7 @@ import {
   KILL_REASON,
   redactSecrets,
   resolveGate
-} from "../chunk-T4QY64OR.js";
+} from "../chunk-YFD7CRIZ.js";
 import {
   NPX_LATEST_COMMAND
 } from "../chunk-EA3IELHP.js";

package/dist/bin/pushary-clean.js

@@ -7,14 +7,14 @@ import {
   createGuards,
   resolveHermesPython,
   runHermesPythonScript
-} from "../chunk-YAWXKL2X.js";
+} from "../chunk-NYD7W7AT.js";
 import "../chunk-P32LPT2L.js";
 import {
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-KHXVTWYS.js";
+} from "../chunk-G5LENVCZ.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -24,7 +24,7 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-TUXFIVOH.js";
+} from "../chunk-B6TYEKJR.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -32,40 +32,40 @@ import {
   compatiblePermissionRuleFile,
   removeCompatibleHooks,
   removeCompatibleMcpServer
-} from "../chunk-R5KY3PBN.js";
+} from "../chunk-FI3LQCUH.js";
 import {
   isClaudeMcpSnapshot,
   removeClaudeMcpServers,
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-4ERLRNOK.js";
+} from "../chunk-HWG7X3VI.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-WNJSGZY7.js";
-import "../chunk-TFKBFQCE.js";
+} from "../chunk-KZBGITM4.js";
+import "../chunk-A5URWZTP.js";
 import {
   liveBridgeProbe,
   resolveBridgeStub
-} from "../chunk-K3QVDAZW.js";
+} from "../chunk-GDXSCXQC.js";
 import {
   pusharyHookExecutable
-} from "../chunk-Z4VGIBJ7.js";
+} from "../chunk-MOQOJOMD.js";
 import {
   disableDaemonService
-} from "../chunk-X7FESZTD.js";
+} from "../chunk-DZ75BJ7V.js";
 import {
   removeGeminiSettings
-} from "../chunk-2AUIEZYS.js";
-import "../chunk-5UQ5ATIE.js";
+} from "../chunk-BK5F3FGE.js";
+import "../chunk-OR3A3RLH.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-D573TLP6.js";
-import "../chunk-UYDTFCHW.js";
+import "../chunk-66BIMA62.js";
+import "../chunk-VZANUMIF.js";
 import "../chunk-PYCQXCI5.js";
-import "../chunk-WOLPADR6.js";
+import "../chunk-7JSE6JTZ.js";
 import {
   bridgeAgentKey,
   claudeJson,
@@ -94,7 +94,7 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-6IU45EHE.js";
+} from "../chunk-F2OPOBRO.js";
 import {
   exitOnHelpFlag
 } from "../chunk-P4BNYJ5Q.js";
@@ -105,14 +105,14 @@ import {
   CANDIDATE_RCS,
   isDisabledExport,
   removeClaudeAlias
-} from "../chunk-USQDVBEV.js";
+} from "../chunk-TDKE3V6W.js";
 import "../chunk-HETOKNIL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-HU5LSYL2.js";
+import "../chunk-VMNI33F5.js";
 import "../chunk-T7E75EKA.js";
 import "../chunk-OSJEMXSR.js";
 import {
@@ -123,7 +123,7 @@ import {
   SUPPORT_EMAIL,
   isValidApiKey,
   redactSecrets
-} from "../chunk-T4QY64OR.js";
+} from "../chunk-YFD7CRIZ.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 

package/dist/bin/pushary-codex-bridge.js

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
-import "../chunk-5ZZG76S2.js";
+import "../chunk-5MH5P366.js";
 import {
   LiveTranscriptRelay,
   liveSessionSleep,
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-HVBF35GT.js";
+} from "../chunk-5QCZYSYR.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-M2LMXPJZ.js";
-import "../chunk-TIWURSLS.js";
+} from "../chunk-ALG3IBLB.js";
+import "../chunk-SFNRAEEW.js";
 import "../chunk-66H2QQAK.js";
 import {
   transcriptsEnabled
-} from "../chunk-2QT3GCU4.js";
+} from "../chunk-GP6SFVEN.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -28,18 +28,18 @@ import {
 } from "../chunk-PYCQXCI5.js";
 import {
   getMachineId
-} from "../chunk-WOLPADR6.js";
+} from "../chunk-7JSE6JTZ.js";
 import {
   resolveBinary
-} from "../chunk-6IU45EHE.js";
-import "../chunk-USQDVBEV.js";
+} from "../chunk-F2OPOBRO.js";
+import "../chunk-TDKE3V6W.js";
 import {
   callMcpTool
 } from "../chunk-HETOKNIL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-HU5LSYL2.js";
+import "../chunk-VMNI33F5.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
@@ -48,7 +48,7 @@ import {
 import {
   parseAgentQuestion,
   parseAgentQuestionAnswers
-} from "../chunk-T4QY64OR.js";
+} from "../chunk-YFD7CRIZ.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 

package/dist/bin/pushary-codex-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-5HYNICS7.js";
+} from "../chunk-GOXINLDU.js";
 import {
   blockedActionFingerprint,
   codexCallKey,
@@ -13,33 +13,33 @@ import {
   recordCodexCallDecision,
   reportMachineDenial,
   userScope
-} from "../chunk-MDJJW3LP.js";
+} from "../chunk-BE4P7ERZ.js";
 import {
   triggerAutoUpdate
-} from "../chunk-MU3WU2FO.js";
+} from "../chunk-RBPJO4KG.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-43ZDACBO.js";
+} from "../chunk-F4KRNFDE.js";
 import {
   readHookInput
-} from "../chunk-6QFEQIPM.js";
+} from "../chunk-FDF72XHK.js";
 import {
   denyReasonFrom,
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
-import "../chunk-TZGCUNOX.js";
+import "../chunk-A2GS2ENL.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-WNJSGZY7.js";
-import "../chunk-TFKBFQCE.js";
-import "../chunk-K3QVDAZW.js";
-import "../chunk-Z4VGIBJ7.js";
-import "../chunk-X7FESZTD.js";
-import "../chunk-2AUIEZYS.js";
-import "../chunk-5UQ5ATIE.js";
-import "../chunk-TIWURSLS.js";
+import "../chunk-KZBGITM4.js";
+import "../chunk-A5URWZTP.js";
+import "../chunk-GDXSCXQC.js";
+import "../chunk-MOQOJOMD.js";
+import "../chunk-DZ75BJ7V.js";
+import "../chunk-BK5F3FGE.js";
+import "../chunk-OR3A3RLH.js";
+import "../chunk-SFNRAEEW.js";
 import "../chunk-66H2QQAK.js";
-import "../chunk-2QT3GCU4.js";
+import "../chunk-GP6SFVEN.js";
 import "../chunk-XHKBHWLX.js";
 import {
   CODEX_AGENT,
@@ -76,8 +76,8 @@ import {
   toCodexWire,
   toPolicyLookup,
   toPolicyLookups
-} from "../chunk-D573TLP6.js";
-import "../chunk-UYDTFCHW.js";
+} from "../chunk-66BIMA62.js";
+import "../chunk-VZANUMIF.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -92,17 +92,17 @@ import {
 } from "../chunk-PYCQXCI5.js";
 import {
   getMachineId
-} from "../chunk-WOLPADR6.js";
+} from "../chunk-7JSE6JTZ.js";
 import {
   canonicalJson
-} from "../chunk-6IU45EHE.js";
+} from "../chunk-F2OPOBRO.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-USQDVBEV.js";
+import "../chunk-TDKE3V6W.js";
 import "../chunk-HETOKNIL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-HU5LSYL2.js";
+import "../chunk-VMNI33F5.js";
 import {
   writeFileAtomic
 } from "../chunk-T7E75EKA.js";
@@ -122,7 +122,7 @@ import {
   hookWaitClamped,
   hookWaitDeadline,
   resolveGate
-} from "../chunk-T4QY64OR.js";
+} from "../chunk-YFD7CRIZ.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 
@@ -745,7 +745,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-5CZSTJZI.js");
+    const { repairCodexHolds } = await import("../reapply-RRDVJATI.js");
     repairCodexHolds();
   } catch {
     return;

package/dist/bin/pushary-codex.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   reportEvent
-} from "../chunk-D573TLP6.js";
-import "../chunk-UYDTFCHW.js";
+} from "../chunk-66BIMA62.js";
+import "../chunk-VZANUMIF.js";
 import {
   askUser,
   isDecisionStopped,
@@ -10,18 +10,18 @@ import {
 } from "../chunk-PYCQXCI5.js";
 import {
   getMachineId
-} from "../chunk-WOLPADR6.js";
-import "../chunk-6IU45EHE.js";
+} from "../chunk-7JSE6JTZ.js";
+import "../chunk-F2OPOBRO.js";
 import "../chunk-HETOKNIL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-HU5LSYL2.js";
+import "../chunk-VMNI33F5.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey
 } from "../chunk-OSJEMXSR.js";
-import "../chunk-T4QY64OR.js";
+import "../chunk-YFD7CRIZ.js";
 import {
   NPX_LATEST_COMMAND
 } from "../chunk-EA3IELHP.js";

package/dist/bin/pushary-connect.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   printKeyCheck
-} from "../chunk-XWEONSLV.js";
+} from "../chunk-PCVVCS4A.js";
 import {
   connectDevice,
   connectExistingApp,
   printConnectInstructions
-} from "../chunk-KJRALILH.js";
+} from "../chunk-PRZXYILJ.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey
-} from "../chunk-43LJSM4F.js";
+} from "../chunk-CSW6A2EW.js";
 import "../chunk-QCGNGEGE.js";
 import {
   createIo
@@ -23,7 +23,7 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   readKeySource
-} from "../chunk-USQDVBEV.js";
+} from "../chunk-TDKE3V6W.js";
 import "../chunk-HETOKNIL.js";
 import "../chunk-SAF6HGAA.js";
 import {
@@ -32,10 +32,10 @@ import {
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-HU5LSYL2.js";
+import "../chunk-VMNI33F5.js";
 import "../chunk-T7E75EKA.js";
 import "../chunk-OSJEMXSR.js";
-import "../chunk-T4QY64OR.js";
+import "../chunk-YFD7CRIZ.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";
 

package/dist/bin/pushary-cowork.js

@@ -2,12 +2,12 @@
 import {
   coworkOutput,
   parseCoworkOptions
-} from "../chunk-3ZSGKLSO.js";
+} from "../chunk-XGL5JC6U.js";
 import {
   canOpenBrowser,
   openInBrowser
 } from "../chunk-PUZZELE6.js";
-import "../chunk-TFKBFQCE.js";
+import "../chunk-A5URWZTP.js";
 import {
   exitOnHelpFlag
 } from "../chunk-P4BNYJ5Q.js";
@@ -20,7 +20,7 @@ import {
 } from "../chunk-KZERVKTD.js";
 import {
   CLAUDE_CONNECTOR_GUIDE
-} from "../chunk-T4QY64OR.js";
+} from "../chunk-YFD7CRIZ.js";
 import "../chunk-EA3IELHP.js";
 import "../chunk-HWJW3CPO.js";