@pushary/agent-hooks 1.9.14 → 1.9.15

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 1.9.15
+
+- Codex in Every time asks your phone only about the calls that matter. Codex raises its own approval when a command leaves its sandbox, a forced `rm` runs, an MCP tool is not marked read-only, or a patch lands outside the project, and Pushary answers that request in your mode as before. Before a call runs, Pushary now adds a question only when the call leaves the scope you agreed, a rule you wrote, a preset you picked or an approval route covers it, the command destroys, rewrites history or reaches the network, or a patch deletes a file. Commands that only build, test or read no longer reach your phone, and an MCP tool Codex asks about itself is asked once, through Codex's own request. The kill switch and your deny rules still apply to every call.
+- In full access, where Codex asks nothing itself, every call your policy gates still comes to your phone, as before.
+- When I'm out is unchanged for Codex, except for scope: Codex's own approval requests go to your phone first, and nothing else is asked before a call runs.
+- A Codex edit outside the scope you agreed is now asked in Every time and When I'm out, also while you are at the keyboard, because Codex has no prompt for it there. Yes lets it run. No refuses it. No answer before your policy's wait ends refuses it with the path named. In Updates and Terminal, where nobody would be asked, it is refused. A patch that leaves the scope across several files is refused with a request to split it into single-file edits, as with Claude Code. Before this release Codex applied these edits without asking.
+- In Updates, Pushary sends an update before a Codex call only for the calls above. Codex's own approval requests still send one each.
+- A patch whose `*** Delete File:` or `*** Update File:` header is indented, which Codex applies, is now read as the delete or edit it is, so your path rules and the delete question apply to it.
+- A command that deletes through a cloud CLI subcommand spelled as one word, such as `aws dynamodb delete-table`, `aws ec2 terminate-instances`, `heroku apps:destroy` or `firebase firestore:delete`, now counts as destructive for every agent. Pushary asks about it instead of leaving it to the agent's own allowlist, and an "allow Bash for this session" grant does not cover it.
+- Codex questions can offer "Allow for this session": for Bash, where risky commands still ask, and, after three approvals in a row, for one exact MCP tool. It is never offered for Pushary's own tools or for a tool whose name says it runs code, sends, merges, publishes, deploys, writes, deletes or moves money.
+
 ## 1.9.14
 
 - Antigravity CLI approvals go to your phone every time. agy has no approval prompt of its own while Pushary is its only gate, so under When I'm out the phone is no longer skipped because you are at the keyboard, and the wait is your policy's timeout instead of the short push window. Before, such a call was blocked with nobody asked, or after 10 seconds when you were away. Other agents keep When I'm out as it was.
@@ -16,6 +27,9 @@
 - An Antigravity CLI tool call that failed is recorded as failed in the session, where it used to show as completed.
 - `pushary disconnect fx` is recorded in `~/.pushary/declined-agents.json`, so Pushary.app versions that read that file leave fx off until you connect it again.
 
+- `rg`, `sort`, `uniq`, `sleep`, `pgrep` and `git branch --show-current` run without asking when they only read. `rg` still asks with an option that runs another program (`--pre`, `--search-zip`, `-z`), `sort` with one that writes a file (`-o`, `--output`), and `uniq` with a second file, which it writes.
+- Codex's `wait_threads` and `send_message_to_thread` run without asking, matched by exact name. The kill switch, a deny rule and a rule you wrote for the tool still win over them.
+- A deny rule now blocks read-only commands too. A bare `Bash` deny, a `*` deny or a preset that never runs the shell used to let `ls` and other reads through.
 ## 1.9.11
 
 - `pushary setup` connects Antigravity CLI (`agy`). Pick it in setup or pass `--agents antigravity_cli`. Setup adds a hook named `pushary` to `~/.gemini/config/hooks.json` for `PreToolUse`, `PostToolUse` and `Stop`, and the Pushary MCP server to `~/.gemini/config/mcp_config.json`. Before agy runs a shell command, writes or edits a file, or calls an MCP tool, your policy decides, and the risky ones wait for your answer on your phone or your Mac. Pushary answers agy only with allow or deny: a denial, or no answer before your policy's wait ends, blocks the call with a reason the model sees.

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-QD6GQDYW.js";
+} from "../chunk-Q4JD6WNB.js";
 import {
   readHookInput
-} from "../chunk-LRZMGU7T.js";
-import "../chunk-5VP72OOI.js";
+} from "../chunk-JEJSAI6Z.js";
+import "../chunk-WBQK6KD5.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-7SIZISYH.js";
-import "../chunk-DVTXGXXL.js";
-import "../chunk-CT4BJEU7.js";
-import "../chunk-7MGNY7S3.js";
+import "../chunk-TFV6RATK.js";
+import "../chunk-QIOWXUFH.js";
+import "../chunk-3YCYTGGK.js";
+import "../chunk-HSVJ62BE.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-POJUUEGO.js";
-import "../chunk-SEQSZYLW.js";
-import "../chunk-RV4U3LYL.js";
-import "../chunk-K2IUMMZJ.js";
-import "../chunk-NXJNYAP7.js";
+import "../chunk-ME55HQOI.js";
+import "../chunk-FZW7Q7GM.js";
+import "../chunk-VP6WDFVO.js";
+import "../chunk-YKYFFCB5.js";
+import "../chunk-7VOEZPJ4.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-NMDGIMDV.js";
-import "../chunk-WYPQKDKX.js";
-import "../chunk-VYXXAFIA.js";
-import "../chunk-PWO6T7JG.js";
+import "../chunk-5EWNGYFD.js";
+import "../chunk-IQCNOEQL.js";
+import "../chunk-52JA2WTH.js";
+import "../chunk-YL6HU2KF.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-CIZQARGJ.js";
-import "../chunk-3U4R475X.js";
-import "../chunk-EB6LH3U6.js";
-import "../chunk-ZVFKNSRX.js";
+import "../chunk-SYLJL63X.js";
+import "../chunk-PSWFYNOX.js";
+import "../chunk-3FQCZSEQ.js";
+import "../chunk-NA5D62OI.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ZSL7B7NF.js";
-import "../chunk-2WWHZTI5.js";
+import "../chunk-VKTDXQGH.js";
+import "../chunk-HJL5RBOU.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-AJRT3JGE.js";
-import "../chunk-FKQMH2DW.js";
-import "../chunk-NAROM5IR.js";
+import "../chunk-HTO2XULO.js";
+import "../chunk-PNUWMEIY.js";
+import "../chunk-AYV2NRYJ.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,37 +5,37 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-QD6GQDYW.js";
+} from "../chunk-Q4JD6WNB.js";
 import {
   createIo
 } from "../chunk-U4TMAANR.js";
 import {
   exitOnHelpFlag
-} from "../chunk-NNCK2PUR.js";
+} from "../chunk-C2OUUGCW.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-NXJNYAP7.js";
+} from "../chunk-7VOEZPJ4.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-NMDGIMDV.js";
+import "../chunk-5EWNGYFD.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-ZSL7B7NF.js";
+import "../chunk-VKTDXQGH.js";
 import {
   claudeSettings
-} from "../chunk-2WWHZTI5.js";
+} from "../chunk-HJL5RBOU.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-T7E75EKA.js";
-import "../chunk-AJRT3JGE.js";
-import "../chunk-FKQMH2DW.js";
-import "../chunk-NAROM5IR.js";
+import "../chunk-HTO2XULO.js";
+import "../chunk-PNUWMEIY.js";
+import "../chunk-AYV2NRYJ.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,39 +8,39 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-5UYAJVAQ.js";
+} from "../chunk-5LQ7QUVF.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-ARM4DMIL.js";
+} from "../chunk-6GRUERVL.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-5VP72OOI.js";
+} from "../chunk-WBQK6KD5.js";
 import "../chunk-SGZJ5LYH.js";
 import {
   ensureDaemonRunning
-} from "../chunk-7SIZISYH.js";
+} from "../chunk-TFV6RATK.js";
 import {
   encryptRecord
-} from "../chunk-DVTXGXXL.js";
-import "../chunk-CT4BJEU7.js";
+} from "../chunk-QIOWXUFH.js";
+import "../chunk-3YCYTGGK.js";
 import {
   transcriptsEnabled
-} from "../chunk-7MGNY7S3.js";
+} from "../chunk-HSVJ62BE.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-SEQSZYLW.js";
-import "../chunk-RV4U3LYL.js";
-import "../chunk-K2IUMMZJ.js";
-import "../chunk-NXJNYAP7.js";
+import "../chunk-FZW7Q7GM.js";
+import "../chunk-VP6WDFVO.js";
+import "../chunk-YKYFFCB5.js";
+import "../chunk-7VOEZPJ4.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-NMDGIMDV.js";
+import "../chunk-5EWNGYFD.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -58,8 +58,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-WYPQKDKX.js";
-import "../chunk-VYXXAFIA.js";
+} from "../chunk-IQCNOEQL.js";
+import "../chunk-52JA2WTH.js";
 import {
   askUser,
   cancelQuestion,
@@ -68,35 +68,35 @@ import {
   nextLongPollMs,
   waitForAnswer,
   withdrawQuestion
-} from "../chunk-PWO6T7JG.js";
+} from "../chunk-YL6HU2KF.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-CIZQARGJ.js";
-import "../chunk-3U4R475X.js";
-import "../chunk-EB6LH3U6.js";
+} from "../chunk-SYLJL63X.js";
+import "../chunk-PSWFYNOX.js";
+import "../chunk-3FQCZSEQ.js";
 import {
   getMachineId
-} from "../chunk-ZVFKNSRX.js";
+} from "../chunk-NA5D62OI.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ZSL7B7NF.js";
-import "../chunk-2WWHZTI5.js";
+import "../chunk-VKTDXQGH.js";
+import "../chunk-HJL5RBOU.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-AJRT3JGE.js";
+} from "../chunk-HTO2XULO.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-FKQMH2DW.js";
+} from "../chunk-PNUWMEIY.js";
 import {
   DECISION_STOP_REASON,
   KILL_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
   redactSecretsFromContent,
   resolveGate
-} from "../chunk-NAROM5IR.js";
+} from "../chunk-AYV2NRYJ.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -13,7 +13,7 @@ import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-Q7JWY33N.js";
+} from "../chunk-H5YC7H6V.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -22,27 +22,27 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-ZECHTK3K.js";
+} from "../chunk-ZMUDVPOT.js";
 import {
   planFxRemoval,
   removeInstructionBlock
-} from "../chunk-4BXVGCPE.js";
-import "../chunk-2QASSTM5.js";
+} from "../chunk-NDZBDXU3.js";
+import "../chunk-D72OJS4S.js";
 import {
   disableDaemonService
-} from "../chunk-7SIZISYH.js";
+} from "../chunk-TFV6RATK.js";
 import "../chunk-XHKBHWLX.js";
 import {
   APPROVAL_SETTINGS_PATH
-} from "../chunk-JHDHC2M7.js";
+} from "../chunk-WJO7SENK.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-H7MTFFNI.js";
-import "../chunk-J5RQW52I.js";
+} from "../chunk-6WECKO24.js";
+import "../chunk-3QXCTYMG.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -54,14 +54,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-5RONPCMH.js";
+} from "../chunk-NDKFHLJI.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-U4TMAANR.js";
 import {
   exitOnHelpFlag
-} from "../chunk-NNCK2PUR.js";
+} from "../chunk-C2OUUGCW.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -74,7 +74,7 @@ import {
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-POJUUEGO.js";
+} from "../chunk-ME55HQOI.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -82,12 +82,12 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-SEQSZYLW.js";
+} from "../chunk-FZW7Q7GM.js";
 import {
   removeGeminiSettings
-} from "../chunk-RV4U3LYL.js";
-import "../chunk-K2IUMMZJ.js";
-import "../chunk-NXJNYAP7.js";
+} from "../chunk-VP6WDFVO.js";
+import "../chunk-YKYFFCB5.js";
+import "../chunk-7VOEZPJ4.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -100,22 +100,22 @@ import {
   readConfigFileKey,
   readMacAppKeyPrefix,
   removeClaudeAlias
-} from "../chunk-NMDGIMDV.js";
-import "../chunk-WYPQKDKX.js";
-import "../chunk-VYXXAFIA.js";
-import "../chunk-PWO6T7JG.js";
+} from "../chunk-5EWNGYFD.js";
+import "../chunk-IQCNOEQL.js";
+import "../chunk-52JA2WTH.js";
+import "../chunk-YL6HU2KF.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-CIZQARGJ.js";
+import "../chunk-SYLJL63X.js";
 import {
   absoluteUrl
-} from "../chunk-3U4R475X.js";
-import "../chunk-EB6LH3U6.js";
-import "../chunk-ZVFKNSRX.js";
+} from "../chunk-PSWFYNOX.js";
+import "../chunk-3FQCZSEQ.js";
+import "../chunk-NA5D62OI.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-ZSL7B7NF.js";
+import "../chunk-VKTDXQGH.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -152,14 +152,14 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-2WWHZTI5.js";
+} from "../chunk-HJL5RBOU.js";
 import "../chunk-T7E75EKA.js";
 import {
   getBaseUrl
-} from "../chunk-AJRT3JGE.js";
+} from "../chunk-HTO2XULO.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-FKQMH2DW.js";
+} from "../chunk-PNUWMEIY.js";
 import {
   CLI_PACKAGE_NAMES,
   HOOK_COMPATIBLE_PROFILES,
@@ -171,7 +171,7 @@ import {
   globalRootFor,
   isValidApiKey,
   redactSecrets
-} from "../chunk-NAROM5IR.js";
+} from "../chunk-AYV2NRYJ.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -5,10 +5,10 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-2NIBBM3N.js";
+} from "../chunk-Y6KG5JZP.js";
 import {
   resolveProviderBinary
-} from "../chunk-ECU2Y7D2.js";
+} from "../chunk-JC3AGMOP.js";
 import "../chunk-RIVNNBEK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
@@ -16,50 +16,50 @@ import {
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-5UYAJVAQ.js";
-import "../chunk-DVTXGXXL.js";
-import "../chunk-CT4BJEU7.js";
+} from "../chunk-5LQ7QUVF.js";
+import "../chunk-QIOWXUFH.js";
+import "../chunk-3YCYTGGK.js";
 import {
   transcriptsEnabled
-} from "../chunk-7MGNY7S3.js";
+} from "../chunk-HSVJ62BE.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-NMDGIMDV.js";
+import "../chunk-5EWNGYFD.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "../chunk-PWO6T7JG.js";
+} from "../chunk-YL6HU2KF.js";
 import "../chunk-POFBE6ZY.js";
 import {
   callMcpTool
-} from "../chunk-CIZQARGJ.js";
-import "../chunk-3U4R475X.js";
-import "../chunk-EB6LH3U6.js";
+} from "../chunk-SYLJL63X.js";
+import "../chunk-PSWFYNOX.js";
+import "../chunk-3FQCZSEQ.js";
 import {
   getMachineId
-} from "../chunk-ZVFKNSRX.js";
+} from "../chunk-NA5D62OI.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ZSL7B7NF.js";
-import "../chunk-2WWHZTI5.js";
+import "../chunk-VKTDXQGH.js";
+import "../chunk-HJL5RBOU.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-AJRT3JGE.js";
-import "../chunk-FKQMH2DW.js";
+} from "../chunk-HTO2XULO.js";
+import "../chunk-PNUWMEIY.js";
 import {
   elicitationContent,
   parseAgentQuestion,
   parseAgentQuestionAnswers,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-NAROM5IR.js";
+} from "../chunk-AYV2NRYJ.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";