@pushary/agent-hooks 1.9.12 → 1.9.14

package/dist/{chunk-CXKY5FGY.js → chunk-5VP72OOI.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   ensureDaemonRunning
-} from "./chunk-2QJ6K2SR.js";
+} from "./chunk-7SIZISYH.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-PKQ435Z2.js";
+} from "./chunk-DVTXGXXL.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-ZHF4JDVE.js";
+} from "./chunk-CT4BJEU7.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-M2P3HQA3.js";
+} from "./chunk-7MGNY7S3.js";
 import {
   hookOwnerOf
-} from "./chunk-SJ7M37RL.js";
+} from "./chunk-SEQSZYLW.js";
 import {
   readTranscriptPreference
-} from "./chunk-3VPS7JPH.js";
+} from "./chunk-NMDGIMDV.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-AJRT3JGE.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-M2P3HQA3.js → chunk-7MGNY7S3.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-3VPS7JPH.js";
+} from "./chunk-NMDGIMDV.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-2QJ6K2SR.js → chunk-7SIZISYH.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-3VPS7JPH.js";
+} from "./chunk-NMDGIMDV.js";
 import {
   getMachineId
-} from "./chunk-2NKTEA42.js";
+} from "./chunk-ZVFKNSRX.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,14 +20,14 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-AJRT3JGE.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
   getPackageVersion,
   globalPackageFolder,
   globalRootFor
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-ZC6EVOX6.js → chunk-AJRT3JGE.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-RYBAJXV4.js";
+} from "./chunk-FKQMH2DW.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-UEQWLVJB.js → chunk-APG7IAUK.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-CPUEZAE2.js → chunk-ARM4DMIL.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-7U26QSMF.js";
+} from "./chunk-WYPQKDKX.js";
 
 // src/answer.ts
 var denyReasonFrom = (value, note) => {

package/dist/{chunk-CATIBZQH.js → chunk-CIZQARGJ.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-CMZ4CW5J.js";
+} from "./chunk-3U4R475X.js";
 import {
   installNetworkDefaults
-} from "./chunk-WBSL4FBX.js";
+} from "./chunk-EB6LH3U6.js";
 import {
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-AJRT3JGE.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-ZHF4JDVE.js → chunk-CT4BJEU7.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-AJRT3JGE.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-PKQ435Z2.js → chunk-DVTXGXXL.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-WBSL4FBX.js → chunk-EB6LH3U6.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-2NKTEA42.js";
+} from "./chunk-ZVFKNSRX.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-AJRT3JGE.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-EYLQVCME.js → chunk-ECU2Y7D2.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;

package/dist/{chunk-RYBAJXV4.js → chunk-FKQMH2DW.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {

package/dist/{chunk-TZCHW6KR.js → chunk-H7MTFFNI.js}

@@ -1,18 +1,18 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-Z6VYZSVA.js";
+} from "./chunk-5RONPCMH.js";
 import {
   keyPrefix
-} from "./chunk-3VPS7JPH.js";
+} from "./chunk-NMDGIMDV.js";
 import {
   bridgeAgentKey
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";
 import {
   isValidApiKey
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-SQJUXVLW.js → chunk-J5RQW52I.js}

@@ -3,10 +3,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-3VPS7JPH.js";
+} from "./chunk-NMDGIMDV.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-RYBAJXV4.js";
+} from "./chunk-FKQMH2DW.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-4DWQNP52.js → chunk-JHDHC2M7.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-SQJUXVLW.js";
+} from "./chunk-J5RQW52I.js";
 import {
   createIo
 } from "./chunk-U4TMAANR.js";
 import {
   readKeySource
-} from "./chunk-3VPS7JPH.js";
+} from "./chunk-NMDGIMDV.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-CMZ4CW5J.js";
+} from "./chunk-3U4R475X.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-AJRT3JGE.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-NDZKDJQU.js → chunk-K2IUMMZJ.js}

@@ -10,7 +10,7 @@ import {
   isSetupConnectMode,
   isValidApiKey,
   normalizeAgentId
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;

package/dist/{chunk-PNBJAYSL.js → chunk-LETLRKSY.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-5VUB6VVO.js → chunk-LRZMGU7T.js}

@@ -1,16 +1,16 @@
 import {
   registerTranscript
-} from "./chunk-CXKY5FGY.js";
+} from "./chunk-5VP72OOI.js";
 import {
   namedEvent
-} from "./chunk-BOHDM4T7.js";
+} from "./chunk-POJUUEGO.js";
 import {
   writeDegraded
-} from "./chunk-DWHCF4RH.js";
+} from "./chunk-PWO6T7JG.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-CKUACXAX.js → chunk-MSEUUAJ7.js}

@@ -4,7 +4,7 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-PNBJAYSL.js";
+} from "./chunk-LETLRKSY.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -14,7 +14,7 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-J5XCHLP4.js";
+} from "./chunk-2Z56BRTF.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
@@ -27,10 +27,10 @@ import {
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-2WWHZTI5.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-RYBAJXV4.js";
+} from "./chunk-FKQMH2DW.js";
 import {
   commandsPackage,
   globalUpgradeEntry,
@@ -39,7 +39,7 @@ import {
   isSameMajorVersion,
   ownPackageRoot,
   packageVersionAt
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/global-upgrade.ts
 import { existsSync } from "fs";

package/dist/{chunk-QOBOIFGG.js → chunk-NAROM5IR.js}

@@ -239,7 +239,7 @@ var AGENTS = {
     connectVia: "Native hooks + MCP",
     setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell commands, file writes, edits and MCP calls through native PreToolUse hooks in ~/.gemini/config/hooks.json, answered allow or deny.",
-    capabilityNote: 'Antigravity CLI ignores a hook\'s allow unless it runs in always-proceed mode (`toolPermission: "always-proceed"` or `--dangerously-skip-permissions`), so approving from the phone needs that mode, with Pushary as the only gate. Pushary answers allow or deny and never ask, because ask and force_ask run the call unprompted in that mode. An unanswered approval is blocked with a reason.'
+    capabilityNote: 'Antigravity CLI ignores a hook\'s allow unless it runs in always-proceed mode, so connecting it sets `toolPermission: "always-proceed"` when you never chose a mode, and disconnecting puts it back. Pushary is then the only gate: it answers allow or deny and never ask, and a call it cannot decide, one nobody answers, or one made after Pushary was removed is blocked with a reason.'
   },
   windsurf: {
     ...defaults,
@@ -332,6 +332,8 @@ var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path)
 };
 var NO_AGENT_PROMPT_REASON = "Pushary needs an answer from the phone before this can run, and this agent has no approval prompt of its own here, so nothing ran. Ask the user, then try again.";
 var DENIED_BY_PUSHARY_REASON = "Denied from Pushary.";
+var SOLE_GATE_UNDECIDED_REASON = "Pushary could not decide on this call, so it did not run. Pushary is the only approval for this agent. Check that Pushary is signed in and online, then try again.";
+var SOLE_GATE_SIGNED_OUT_REASON = "Pushary is not signed in on this computer, so nothing can approve this call and it did not run. Sign in to Pushary, or disconnect this agent from Pushary.";
 var UNCARRIED_ANSWER_REASON = "The answer from the phone cannot be passed to this agent, so the call did not run. Ask the question in chat instead.";
 var renderAllowDenyDecision = (verdict) => {
   const { permissionDecision, permissionDecisionReason } = verdict.hookSpecificOutput;
@@ -357,6 +359,14 @@ var renderPreToolUseVerdict = (profile, verdict) => {
     ...stop
   };
 };
+var homePath = (segments) => `~/${segments.join("/")}`;
+var pusharyMissingReason = (profile) => {
+  const settingBack = profile.soleGate ? ` and remove ${profile.soleGate.key} from ${homePath(profile.soleGate.file)}` : "";
+  return `Pushary is not installed on this computer any more, so nothing can approve this call and it did not run. Reinstall Pushary, or remove the pushary hook from ${homePath(profile.configFile)}${settingBack}.`;
+};
+var refusalOutput = (profile, reason) => JSON.stringify(renderPreToolUseVerdict(profile, {
+  hookSpecificOutput: { permissionDecision: "deny", permissionDecisionReason: reason }
+}));
 var ANTIGRAVITY_MCP_TOOL = "call_mcp_tool";
 var isPayloadRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var nonEmptyString = (value) => typeof value === "string" && value.length > 0 ? value : void 0;
@@ -442,7 +452,7 @@ var QWEN_CODE = {
   instructions: { file: [".qwen", "QWEN.md"], label: "Qwen Code" },
   permissionRuleFile: null,
   configDirIsShared: false,
-  setupNote: null
+  soleGate: null
 };
 var CODEBUDDY = {
   agentType: "codebuddy",
@@ -465,7 +475,7 @@ var CODEBUDDY = {
   instructions: { file: [".codebuddy", "CODEBUDDY.md"], label: "CodeBuddy" },
   permissionRuleFile: [".codebuddy", "settings.json"],
   configDirIsShared: false,
-  setupNote: null
+  soleGate: null
 };
 var QODER = {
   agentType: "qoder",
@@ -488,7 +498,7 @@ var QODER = {
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: false,
-  setupNote: null
+  soleGate: null
 };
 var DROID = {
   agentType: "droid",
@@ -516,7 +526,7 @@ var DROID = {
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: false,
-  setupNote: null
+  soleGate: null
 };
 var DEVIN = {
   agentType: "devin",
@@ -549,7 +559,7 @@ var DEVIN = {
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: false,
-  setupNote: null
+  soleGate: null
 };
 var ANTIGRAVITY_CLI = {
   agentType: "antigravity_cli",
@@ -584,7 +594,12 @@ var ANTIGRAVITY_CLI = {
   instructions: null,
   permissionRuleFile: null,
   configDirIsShared: true,
-  setupNote: 'Approvals from your phone take effect only when Antigravity CLI runs in always-proceed mode: start it with --dangerously-skip-permissions, or set "toolPermission": "always-proceed" in ~/.gemini/antigravity-cli/settings.json. Pushary is then the only gate, and an unanswered approval is blocked.'
+  soleGate: {
+    file: [".gemini", "antigravity-cli", "settings.json"],
+    key: "toolPermission",
+    value: "always-proceed",
+    receipt: [".pushary", "setup", "antigravity-tool-permission.json"]
+  }
 };
 var HOOK_COMPATIBLE_PROFILES = Object.freeze([QWEN_CODE, CODEBUDDY, QODER, DROID, DEVIN, ANTIGRAVITY_CLI]);
 var hookCompatibleProfile = (agentType) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.agentType === agentType);
@@ -885,6 +900,16 @@ var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
 var APPROVAL_MODES = ["push_only", "terminal_only", "push_first", "notify_only"];
 var isApprovalMode = (value) => typeof value === "string" && APPROVAL_MODES.includes(value);
+var approvalModeWithoutLocalPrompt = (mode) => {
+  switch (mode) {
+    case "push_first":
+      return "push_only";
+    case "push_only":
+    case "notify_only":
+    case "terminal_only":
+      return mode;
+  }
+};
 var MAX_AGENT_QUESTIONS = 4;
 var parseAgentQuestion = (raw) => {
   const q = raw;
@@ -3019,7 +3044,11 @@ export {
   PHONE_ANSWERED_TOOLS,
   canonicalToolName,
   toToolLookup,
+  SOLE_GATE_UNDECIDED_REASON,
+  SOLE_GATE_SIGNED_OUT_REASON,
   renderPreToolUseVerdict,
+  pusharyMissingReason,
+  refusalOutput,
   claudeShapedHookInput,
   HOOK_COMPATIBLE_PROFILES,
   hookCompatibleProfile,
@@ -3049,6 +3078,7 @@ export {
   withoutDeclinedAgent,
   normalizeKeyScope,
   isApprovalMode,
+  approvalModeWithoutLocalPrompt,
   parseAgentQuestion,
   parseAgentQuestions,
   parseAgentQuestionAnswers,

package/dist/{chunk-3VPS7JPH.js → chunk-NMDGIMDV.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-WKP2KRTU.js";
+} from "./chunk-ZSL7B7NF.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,7 +9,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   configFilePath
-} from "./chunk-ZC6EVOX6.js";
+} from "./chunk-AJRT3JGE.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-GTM7C36Y.js → chunk-NNCK2PUR.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-RYBAJXV4.js";
+} from "./chunk-FKQMH2DW.js";
 import {
   getPackageVersion
-} from "./chunk-QOBOIFGG.js";
+} from "./chunk-NAROM5IR.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-JNDELCH5.js → chunk-NXJNYAP7.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-AWD2SLNA.js";
+} from "./chunk-2WWHZTI5.js";
 
 // src/bell/install.ts
 import { join } from "path";