@pushary/agent-hooks 1.7.0 → 1.7.2

package/dist/{chunk-V6QRSU2G.js → chunk-6QZK4O36.js}

@@ -4,18 +4,18 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   isNetworkFailure
-} from "./chunk-KW2RRR7D.js";
+} from "./chunk-UFNBKYWT.js";
 import {
   clientReportClaims
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-NYBZJ44G.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-SJN64NJX.js";
 import {
   CLIENT_REPORT_PATH,
   degradedLine
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/client-report-claim.ts
 import { createHash } from "crypto";

package/dist/{chunk-ZQ7IDOKY.js → chunk-A6WQF7FQ.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-DZURML2D.js";
+} from "./chunk-RLRDPZG4.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-NYBZJ44G.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-QXAK5RFU.js → chunk-AWZNDM3B.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-SJN64NJX.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-JNXVOU6Y.js → chunk-D4OGEWLH.js}

@@ -1,9 +1,12 @@
+import {
+  keyCheckFromResponse
+} from "./chunk-VQDJ6KB3.js";
 import {
   installNetworkDefaults
-} from "./chunk-KW2RRR7D.js";
+} from "./chunk-UFNBKYWT.js";
 import {
   getBaseUrl
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-SJN64NJX.js";
 
 // src/retry.ts
 var isRetryable = (err) => {
@@ -35,6 +38,17 @@ var withRetry = async (fn, options = {}) => {
 
 // src/mcp-http.ts
 installNetworkDefaults();
+var SUBSCRIPTION_REQUIRED_MESSAGE = "Pushary MCP error: 403 Subscription required";
+var SubscriptionRequiredError = class extends Error {
+  plan;
+  upgradeUrl;
+  constructor(plan, upgradeUrl) {
+    super(SUBSCRIPTION_REQUIRED_MESSAGE);
+    this.name = "SubscriptionRequiredError";
+    this.plan = plan;
+    this.upgradeUrl = upgradeUrl;
+  }
+};
 var parseSseMessages = (body) => {
   const messages = [];
   for (const event of body.split(/\r?\n\r?\n/)) {
@@ -77,6 +91,8 @@ var sendMcpRequest = async (apiKey, message, options = {}) => {
       body: JSON.stringify(message),
       signal: options.timeoutMs ? AbortSignal.any([AbortSignal.timeout(options.timeoutMs), ...options.signal ? [options.signal] : []]) : options.signal
     });
+    const lock = response.ok ? null : await keyCheckFromResponse(response, baseUrl);
+    if (lock?.kind === "locked") throw new SubscriptionRequiredError(lock.plan, lock.upgradeUrl);
     const body = await response.text();
     const contentType = response.headers.get("content-type");
     let data = null;
@@ -115,6 +131,7 @@ var callMcpTool = async (apiKey, toolName, params, options = {}) => {
 
 export {
   withRetry,
+  SubscriptionRequiredError,
   parseSseMessages,
   sendMcpRequest,
   callMcpTool

package/dist/{chunk-R2XCLT6I.js → chunk-E3PLF7YB.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-CVALVGA7.js";
+} from "./chunk-I7B2DNVU.js";
 import {
   isBridgeLocator
-} from "./chunk-5HLTWFJ6.js";
+} from "./chunk-JMSB6CJT.js";
 import {
   pusharyHookExecutable
-} from "./chunk-PQ4F64M2.js";
+} from "./chunk-L6IF4JOF.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-VKVIAZQO.js";
+} from "./chunk-KLXYMPTM.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-2C7CCWVX.js → chunk-F6BMJOSW.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-XNCMT7YY.js → chunk-HOIGXMI7.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-NYBZJ44G.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-CVALVGA7.js → chunk-I7B2DNVU.js}

@@ -9,7 +9,7 @@ import {
   SETUP_CONNECT_MODES,
   isSetupConnectMode,
   isValidApiKey
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-S3UD4V6W.js → chunk-INR3RVQ3.js}

@@ -1,6 +1,9 @@
+import {
+  NpmMissingError
+} from "./chunk-NYBZJ44G.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-B3UXMSMW.js";
+} from "./chunk-65RN6ZCO.js";
 
 // src/setup/agent-failure.ts
 var AgentConfigError = class extends Error {
@@ -21,14 +24,19 @@ var AGENT_FAILURE_DETAILS = {
 var describedAgentFailure = (agent, kind) => ({
   agent,
   kind,
-  detail: AGENT_FAILURE_DETAILS[kind]
+  detail: AGENT_FAILURE_DETAILS[kind],
+  remedy: "retry-agent"
 });
 var agentFailureFromError = (agent, error, describeError) => ({
   agent,
   kind: error instanceof AgentConfigError ? error.kind : "installer-error",
-  detail: describeError(error)
+  detail: describeError(error),
+  remedy: error instanceof NpmMissingError ? "install-node" : "retry-agent"
 });
 var retryAgentCommand = (agent) => `${NPX_LATEST_COMMAND} setup --agents ${agent}`;
+var REMAINING_AGENTS_CONTINUE = "Other agents will continue. Re-run setup to retry.";
+var afterAgentFailureNote = (agentsStillToSetUp) => agentsStillToSetUp > 0 ? REMAINING_AGENTS_CONTINUE : null;
+var failedAgentsContext = (configuredAgentNames) => configuredAgentNames.length > 0 ? `(configured: ${configuredAgentNames.join(", ")})` : null;
 var agentFailureWire = (failures) => failures.map(({ agent, kind }) => ({ agent, kind }));
 
 // src/diagnostics/service-runtime.ts
@@ -75,6 +83,8 @@ export {
   describedAgentFailure,
   agentFailureFromError,
   retryAgentCommand,
+  afterAgentFailureNote,
+  failedAgentsContext,
   agentFailureWire,
   readServiceExecPath,
   versionManagerOf,

package/dist/{chunk-52NVBNJT.js → chunk-IZVAVXHQ.js}

@@ -1,16 +1,18 @@
 import {
   AUTO_DECISION_WINDOW_MS,
-  DEFAULT_SESSION,
   canonicalGateInputs,
   claimThrottle,
   deriveToolTarget,
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-IJ6ECPA6.js";
+} from "./chunk-2B4XCMH6.js";
+import {
+  DEFAULT_SESSION
+} from "./chunk-N6IOSZOE.js";
 import {
   canonicalJson
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-NYBZJ44G.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";
@@ -20,7 +22,7 @@ import {
   machineDecisionFor,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-5HLTWFJ6.js → chunk-JMSB6CJT.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-KYQXUGH7.js → chunk-KAJT6HPI.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-ZQ7IDOKY.js";
+} from "./chunk-A6WQF7FQ.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-NYBZJ44G.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-VKVIAZQO.js → chunk-KLXYMPTM.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-NYBZJ44G.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-PQ4F64M2.js → chunk-L6IF4JOF.js}

@@ -2,17 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-ZQ7IDOKY.js";
+} from "./chunk-A6WQF7FQ.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-DNJUSFBL.js";
+} from "./chunk-NYBZJ44G.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-ROQK7IN3.js → chunk-LI3C2IQY.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-V4AQBAVG.js";
+} from "./chunk-SJN64NJX.js";
 import {
   normalizeInstallSource
-} from "./chunk-YROGUPOZ.js";
+} from "./chunk-WWTLAZQA.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-B234346F.js → chunk-M2JGLFFS.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-B3UXMSMW.js";
+} from "./chunk-65RN6ZCO.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/chunk-MY3UZO5U.js

@@ -0,0 +1,99 @@
+import {
+  pusharyHookExecutable
+} from "./chunk-L6IF4JOF.js";
+import {
+  isProtectedByScope,
+  registerHookEntry
+} from "./chunk-NYBZJ44G.js";
+
+// src/skills-cli.ts
+import { execSync } from "child_process";
+var PUSHARY_SKILL_SOURCE = "Pushary/pushary-skill";
+var PUSHARY_SKILL_NAME = "pushary";
+var installSkillViaSkillsCli = (agent) => {
+  try {
+    execSync(`npx -y skills@latest add ${PUSHARY_SKILL_SOURCE}@${PUSHARY_SKILL_NAME} -y -g --agent ${agent}`, {
+      stdio: "pipe",
+      timeout: 9e4
+    });
+    return true;
+  } catch {
+    return false;
+  }
+};
+var installAgentSkill = async (request, effects) => {
+  if (request.skillsCliInUse) {
+    const startedAt = effects.now();
+    if (effects.runSkillsCli(request.agent)) {
+      const modifiedAt = effects.skillModifiedAt(request.agentSkillDir);
+      if (modifiedAt !== null && modifiedAt >= startedAt) return "skills-cli";
+    }
+  }
+  await effects.writePackagedSkill(request.agentSkillDir);
+  return "packaged-copy";
+};
+
+// src/cursor-config.ts
+var hookCommandOf = (entry) => {
+  const command = entry && typeof entry === "object" && !Array.isArray(entry) ? entry.command : void 0;
+  return typeof command === "string" ? command : "";
+};
+var isPusharyCursorEntry = (entry) => pusharyHookExecutable(hookCommandOf(entry)) !== null;
+var registerCursorGate = (existing, entry) => registerHookEntry(existing, isPusharyCursorEntry, entry);
+var withoutPusharyCursorHooks = (hooks, scope) => {
+  let removed = 0;
+  const kept = {};
+  for (const [event, entries] of Object.entries(hooks)) {
+    if (!Array.isArray(entries)) {
+      kept[event] = entries;
+      continue;
+    }
+    const others = entries.filter((entry) => !isPusharyCursorEntry(entry) || isProtectedByScope(hookCommandOf(entry), scope));
+    removed += entries.length - others.length;
+    if (others.length > 0 || entries.length === 0) kept[event] = others;
+  }
+  return { hooks: kept, removed };
+};
+
+// src/cli/dry-run.ts
+import { execFileSync } from "child_process";
+import { rmSync, writeFileSync } from "fs";
+var createGuards = (isDryRun, note) => ({
+  write: (path, contents) => {
+    if (isDryRun()) return note("rewrite", path);
+    writeFileSync(path, contents, "utf-8");
+  },
+  remove: (path, options = {}) => {
+    if (isDryRun()) return note("remove ", path);
+    rmSync(path, { recursive: true, force: options.force ?? false });
+  },
+  execFile: (file, args, options, describe) => {
+    if (isDryRun()) return note("run    ", describe);
+    execFileSync(file, args, options);
+  }
+});
+var describeService = (effects) => {
+  if (effects.controlMode === "off") return "skip     the phone-start background service (--control off)";
+  const where = effects.serviceDefinitionPath ?? "the phone-start service definition";
+  const condition = effects.controlMode === "on" ? "" : ", when a supported agent and a service manager are present";
+  return `write    ${where} and register it with the OS${condition}`;
+};
+var describeSetupSideEffects = (effects) => [
+  `run      npm install -g @pushary/agent-hooks@${effects.version} (the hooks run from the global copy; up to two minutes)`,
+  `write    ${effects.configFile} (the API key, mode 600)`,
+  effects.rcPath ? `edit     ${effects.rcPath} (export PUSHARY_API_KEY)` : "print    the export line for your shell, since no rc file was found",
+  describeService(effects),
+  "ask      Add Pushary instructions to this project's CLAUDE.md/AGENTS.md? (default no)",
+  "ask      Alias claude to pushary claude? (default no)"
+];
+
+export {
+  PUSHARY_SKILL_SOURCE,
+  PUSHARY_SKILL_NAME,
+  installSkillViaSkillsCli,
+  installAgentSkill,
+  registerCursorGate,
+  withoutPusharyCursorHooks,
+  createGuards,
+  describeSetupSideEffects
+};

package/dist/chunk-N6IOSZOE.js

@@ -0,0 +1,185 @@
+// src/pending.ts
+import { join } from "path";
+import { homedir, tmpdir } from "os";
+import { createHash } from "crypto";
+import { existsSync, mkdirSync, writeFileSync, readFileSync, readdirSync, renameSync, unlinkSync, rmSync, statSync } from "fs";
+var PENDING_DIR = join(tmpdir(), "pushary-pending");
+var commandRoot = () => process.env.PUSHARY_COMMAND_DIR?.trim() || join(homedir(), ".pushary", "run", "commands");
+var DEFAULT_SESSION = "_no_session";
+var GRACE_MS = 10 * 60 * 1e3;
+var sanitize = (sessionId) => sessionId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || DEFAULT_SESSION;
+var dirFor = (sessionId) => join(PENDING_DIR, sanitize(sessionId));
+var commandDirFor = (sessionId, namespace = "") => join(
+  commandRoot(),
+  createHash("sha256").update(namespace).digest("hex").slice(0, 16),
+  sanitize(sessionId)
+);
+var legacyCommandFile = (sessionId, namespace = "") => join(commandDirFor(sessionId, namespace), "command.json");
+var commandFile = (sessionId, id, namespace = "") => join(commandDirFor(sessionId, namespace), `${createHash("sha256").update(id).digest("hex")}.json`);
+var readCommandFile = (file) => {
+  try {
+    const value = JSON.parse(readFileSync(file, "utf-8"));
+    if (typeof value.id !== "string" || typeof value.text !== "string" || typeof value.expiresAtMs !== "number") return null;
+    if (value.expiresAtMs <= Date.now()) {
+      unlinkSync(file);
+      return null;
+    }
+    return {
+      ...value,
+      delivered: value.delivered === true,
+      ...value.failed === true ? { failed: true } : {}
+    };
+  } catch {
+    return null;
+  }
+};
+var readPendingCommandById = (sessionId, id, namespace = "") => {
+  const current = readCommandFile(commandFile(sessionId, id, namespace));
+  if (current?.id === id) return current;
+  const legacy = readCommandFile(legacyCommandFile(sessionId, namespace));
+  return legacy?.id === id ? legacy : null;
+};
+var pruneExpiredCommands = (dir) => {
+  let files;
+  try {
+    files = readdirSync(dir).filter((file) => file.endsWith(".json"));
+  } catch {
+    return [];
+  }
+  return files.flatMap((file) => {
+    const command = readCommandFile(join(dir, file));
+    return command ? [command] : [];
+  });
+};
+var pruneExpiredCommandStore = () => {
+  let namespaces;
+  try {
+    namespaces = readdirSync(commandRoot(), { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const namespace of namespaces.filter((entry) => entry.isDirectory())) {
+    const namespaceDir = join(commandRoot(), namespace.name);
+    let sessions;
+    try {
+      sessions = readdirSync(namespaceDir, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const session of sessions.filter((entry) => entry.isDirectory())) {
+      pruneExpiredCommands(join(namespaceDir, session.name));
+    }
+  }
+};
+var readPendingCommand = (sessionId, namespace = "") => {
+  const commands = pruneExpiredCommands(commandDirFor(sessionId, namespace));
+  return commands.find((command) => !command.delivered && !command.failed) ?? commands[0] ?? null;
+};
+var savePendingCommand = (sessionId, command, namespace = "") => {
+  const dir = commandDirFor(sessionId, namespace);
+  try {
+    mkdirSync(dir, { recursive: true, mode: 448 });
+    pruneExpiredCommandStore();
+    if (readPendingCommandById(sessionId, command.id, namespace)) return false;
+    writeFileSync(commandFile(sessionId, command.id, namespace), JSON.stringify(command), { encoding: "utf-8", mode: 384, flag: "wx" });
+    return true;
+  } catch {
+    return false;
+  }
+};
+var updatePendingCommand = (sessionId, id, update, namespace = "") => {
+  const command = readPendingCommandById(sessionId, id, namespace);
+  if (!command) return false;
+  const currentFile = commandFile(sessionId, id, namespace);
+  const file = existsSync(currentFile) ? currentFile : legacyCommandFile(sessionId, namespace);
+  const temporary = `${file}.${process.pid}.tmp`;
+  try {
+    writeFileSync(temporary, JSON.stringify({ ...command, ...update, text: "" }), { encoding: "utf-8", mode: 384 });
+    renameSync(temporary, file);
+    return true;
+  } catch {
+    try {
+      unlinkSync(temporary);
+    } catch {
+    }
+    return false;
+  }
+};
+var markPendingCommandDelivered = (sessionId, id, namespace = "") => updatePendingCommand(sessionId, id, { delivered: true, failed: void 0 }, namespace);
+var markPendingCommandFailed = (sessionId, id, namespace = "") => updatePendingCommand(sessionId, id, { delivered: false, failed: true }, namespace);
+var removePendingCommand = (sessionId, id, namespace = "") => {
+  if (!readPendingCommandById(sessionId, id, namespace)) return;
+  try {
+    unlinkSync(commandFile(sessionId, id, namespace));
+  } catch {
+  }
+  try {
+    if (readCommandFile(legacyCommandFile(sessionId, namespace))?.id === id) {
+      unlinkSync(legacyCommandFile(sessionId, namespace));
+    }
+  } catch {
+  }
+};
+var isDefaultSession = (sessionId) => sanitize(sessionId) === DEFAULT_SESSION;
+var listPendingQuestionsForToolUse = (sessionId, toolUseId) => {
+  if (!toolUseId) return [];
+  const dir = dirFor(sessionId);
+  let files;
+  try {
+    files = readdirSync(dir);
+  } catch {
+    return [];
+  }
+  return files.filter((name) => {
+    try {
+      return readFileSync(join(dir, name), "utf-8") === toolUseId;
+    } catch {
+      return false;
+    }
+  });
+};
+var listPendingQuestions = (sessionId) => {
+  const dir = dirFor(sessionId);
+  let files;
+  try {
+    files = readdirSync(dir);
+  } catch {
+    return [];
+  }
+  if (!isDefaultSession(sessionId)) return files;
+  const cutoff = Date.now() - GRACE_MS;
+  return files.filter((name) => {
+    try {
+      return statSync(join(dir, name)).mtimeMs < cutoff;
+    } catch {
+      return false;
+    }
+  });
+};
+var removePendingQuestion = (sessionId, correlationId) => {
+  try {
+    unlinkSync(join(dirFor(sessionId), correlationId));
+  } catch {
+  }
+};
+var removePendingSession = (sessionId) => {
+  try {
+    rmSync(dirFor(sessionId), { recursive: true, force: true });
+  } catch {
+  }
+};
+
+export {
+  DEFAULT_SESSION,
+  readPendingCommandById,
+  readPendingCommand,
+  savePendingCommand,
+  markPendingCommandDelivered,
+  markPendingCommandFailed,
+  removePendingCommand,
+  isDefaultSession,
+  listPendingQuestionsForToolUse,
+  listPendingQuestions,
+  removePendingQuestion,
+  removePendingSession
+};