@pushary/agent-hooks 1.9.14 → 1.9.16

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # Changelog
 
+## 1.9.16
+
+- `pushary setup` names the account before it reuses a key: the key saved on this machine, `PUSHARY_API_KEY`, or a key found in your agent settings. At a terminal it asks `Continue as @workspace? (Y/n)`, and No connects a new key the way you asked: the Pushary app on your phone by default, or a browser sign-in with `--connect browser`. Without a terminal it names the account and prints `Wrong account? Run npx pushary@latest setup --connect app`. A key found in your agent settings is called the Pushary for Mac key only when Pushary for Mac is installed. A key on an inactive plan names its account and the same `--connect app` line instead of telling you to re-run setup with the saved key.
+- The pairing screen prints the QR code last, directly above the waiting line, so it no longer scrolls off a 24-row terminal. Above it: what to scan, the short link, the fingerprint in plain words, the app link, and where to get the app. The browser fallback is offered once, after a minute.
+- Stopping setup with SIGTERM while it waits for the phone cancels the pairing, as Ctrl-C already did. An agent whose tool call times out no longer leaves a live QR behind.
+- Setup saves a paired key as soon as the key is checked, before it asks which agents to set up. Stopping at the agent list keeps the key, and the next run does not draw a new QR.
+- When the phone answers the test question, setup ends with `You're set. Your phone answered in 3s.` and one line asking you to restart open agent sessions. The two "Agent hook activation remains unverified" lines are gone. A test nobody answered now shows `! No answer yet` instead of a tick.
+- Setup says `Signed in to @workspace (Agent plan)` instead of `Key verified (workspace · plan agent)`, and names the agents Pushary for Mac handles in plain words.
+- The transcript notice is one line: transcripts sync redacted and encrypted, your phone can decrypt them, authorized Pushary compliance admins can recover them for documented legal obligations, and the command that turns sync off. Transcript sync is still on by default.
+- The two questions after setup wires your agents say plainly what they change: a Pushary section in this folder's `CLAUDE.md` or `AGENTS.md`, and a `claude` alias in your shell profile. Both still default to No.
+- On Windows every printed `npx pushary@latest` command reads `npx.cmd pushary@latest`, which PowerShell runs without the execution policy blocking it.
+- When npm cannot install globally (EACCES or EPERM), setup says to use nvm or set an npm prefix, instead of offering a retry that fails the same way.
+- Setup prints one line before it installs the phone-start background service, with `--control off` to turn it off.
+- When Pushary for Mac is signed into a different account, setup names both accounts and the two ways out: sign Pushary for Mac into this setup's account, or take over the hooks with `--take-over-hooks`.
+- An unreachable phone is pointed at `npx pushary@latest setup --connect app` to pair the Pushary app, not at web push.
+- On an unsupported Node, `pushary` says which releases it needs, which one you have, and where to get Node.js.
+
+## 1.9.15
+
+- Codex in Every time asks your phone only about the calls that matter. Codex raises its own approval when a command leaves its sandbox, a forced `rm` runs, an MCP tool is not marked read-only, or a patch lands outside the project, and Pushary answers that request in your mode as before. Before a call runs, Pushary now adds a question only when the call leaves the scope you agreed, a rule you wrote, a preset you picked or an approval route covers it, the command destroys, rewrites history or reaches the network, or a patch deletes a file. Commands that only build, test or read no longer reach your phone, and an MCP tool Codex asks about itself is asked once, through Codex's own request. The kill switch and your deny rules still apply to every call.
+- In full access, where Codex asks nothing itself, every call your policy gates still comes to your phone, as before.
+- When I'm out is unchanged for Codex, except for scope: Codex's own approval requests go to your phone first, and nothing else is asked before a call runs.
+- A Codex edit outside the scope you agreed is now asked in Every time and When I'm out, also while you are at the keyboard, because Codex has no prompt for it there. Yes lets it run. No refuses it. No answer before your policy's wait ends refuses it with the path named. In Updates and Terminal, where nobody would be asked, it is refused. A patch that leaves the scope across several files is refused with a request to split it into single-file edits, as with Claude Code. Before this release Codex applied these edits without asking.
+- In Updates, Pushary sends an update before a Codex call only for the calls above. Codex's own approval requests still send one each.
+- A patch whose `*** Delete File:` or `*** Update File:` header is indented, which Codex applies, is now read as the delete or edit it is, so your path rules and the delete question apply to it.
+- A command that deletes through a cloud CLI subcommand spelled as one word, such as `aws dynamodb delete-table`, `aws ec2 terminate-instances`, `heroku apps:destroy` or `firebase firestore:delete`, now counts as destructive for every agent. Pushary asks about it instead of leaving it to the agent's own allowlist, and an "allow Bash for this session" grant does not cover it.
+- Codex questions can offer "Allow for this session": for Bash, where risky commands still ask, and, after three approvals in a row, for one exact MCP tool. It is never offered for Pushary's own tools or for a tool whose name says it runs code, sends, merges, publishes, deploys, writes, deletes or moves money.
+
 ## 1.9.14
 
 - Antigravity CLI approvals go to your phone every time. agy has no approval prompt of its own while Pushary is its only gate, so under When I'm out the phone is no longer skipped because you are at the keyboard, and the wait is your policy's timeout instead of the short push window. Before, such a call was blocked with nobody asked, or after 10 seconds when you were away. Other agents keep When I'm out as it was.
@@ -16,6 +44,10 @@
 - An Antigravity CLI tool call that failed is recorded as failed in the session, where it used to show as completed.
 - `pushary disconnect fx` is recorded in `~/.pushary/declined-agents.json`, so Pushary.app versions that read that file leave fx off until you connect it again.
 
+- `rg`, `sort`, `uniq`, `sleep`, `pgrep` and `git branch --show-current` run without asking when they only read. `rg` still asks with an option that runs another program (`--pre`, `--search-zip`, `-z`), `sort` with one that writes a file (`-o`, `--output`), and `uniq` with a second file, which it writes.
+- Codex's `wait_threads` and `send_message_to_thread` run without asking, matched by exact name. The kill switch, a deny rule and a rule you wrote for the tool still win over them.
+- A deny rule now blocks read-only commands too. A bare `Bash` deny, a `*` deny or a preset that never runs the shell used to let `ls` and other reads through.
+
 ## 1.9.11
 
 - `pushary setup` connects Antigravity CLI (`agy`). Pick it in setup or pass `--agents antigravity_cli`. Setup adds a hook named `pushary` to `~/.gemini/config/hooks.json` for `PreToolUse`, `PostToolUse` and `Stop`, and the Pushary MCP server to `~/.gemini/config/mcp_config.json`. Before agy runs a shell command, writes or edits a file, or calls an MCP tool, your policy decides, and the risky ones wait for your answer on your phone or your Mac. Pushary answers agy only with allow or deny: a denial, or no answer before your policy's wait ends, blocks the call with a reason the model sees.

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-QD6GQDYW.js";
+} from "../chunk-COGQIULO.js";
 import {
   readHookInput
-} from "../chunk-LRZMGU7T.js";
-import "../chunk-5VP72OOI.js";
+} from "../chunk-L52HDK35.js";
+import "../chunk-NM6IHHRO.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-7SIZISYH.js";
-import "../chunk-DVTXGXXL.js";
-import "../chunk-CT4BJEU7.js";
-import "../chunk-7MGNY7S3.js";
+import "../chunk-PZ33VQ54.js";
+import "../chunk-QIOWXUFH.js";
+import "../chunk-OEMDXBV6.js";
+import "../chunk-JF2XRQR2.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-POJUUEGO.js";
-import "../chunk-SEQSZYLW.js";
-import "../chunk-RV4U3LYL.js";
-import "../chunk-K2IUMMZJ.js";
-import "../chunk-NXJNYAP7.js";
+import "../chunk-PVOOKOKX.js";
+import "../chunk-ZOMVMLMU.js";
+import "../chunk-EDEIIKCV.js";
+import "../chunk-YKYFFCB5.js";
+import "../chunk-QJYBHKHO.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-NMDGIMDV.js";
-import "../chunk-WYPQKDKX.js";
-import "../chunk-VYXXAFIA.js";
-import "../chunk-PWO6T7JG.js";
+import "../chunk-DUDI3Z7F.js";
+import "../chunk-IHPSFUL2.js";
+import "../chunk-52JA2WTH.js";
+import "../chunk-7EBZRHIH.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-CIZQARGJ.js";
-import "../chunk-3U4R475X.js";
-import "../chunk-EB6LH3U6.js";
-import "../chunk-ZVFKNSRX.js";
+import "../chunk-S2LU6HIZ.js";
+import "../chunk-BARUIIUR.js";
+import "../chunk-3DZG5EXY.js";
+import "../chunk-XIJMMY6M.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ZSL7B7NF.js";
-import "../chunk-2WWHZTI5.js";
+import "../chunk-VKYDON4A.js";
+import "../chunk-5ETPCIG4.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-AJRT3JGE.js";
-import "../chunk-FKQMH2DW.js";
-import "../chunk-NAROM5IR.js";
+import "../chunk-PJNZJPPX.js";
+import "../chunk-OIAZ2QAC.js";
+import "../chunk-AYV2NRYJ.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,37 +5,37 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-QD6GQDYW.js";
+} from "../chunk-COGQIULO.js";
 import {
   createIo
-} from "../chunk-U4TMAANR.js";
+} from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-NNCK2PUR.js";
+} from "../chunk-4PQGFWPO.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-NXJNYAP7.js";
+} from "../chunk-QJYBHKHO.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-NMDGIMDV.js";
+import "../chunk-DUDI3Z7F.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-ZSL7B7NF.js";
+import "../chunk-VKYDON4A.js";
 import {
   claudeSettings
-} from "../chunk-2WWHZTI5.js";
+} from "../chunk-5ETPCIG4.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-T7E75EKA.js";
-import "../chunk-AJRT3JGE.js";
-import "../chunk-FKQMH2DW.js";
-import "../chunk-NAROM5IR.js";
+import "../chunk-PJNZJPPX.js";
+import "../chunk-OIAZ2QAC.js";
+import "../chunk-AYV2NRYJ.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,39 +8,39 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-5UYAJVAQ.js";
+} from "../chunk-JQC7ZFHM.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-ARM4DMIL.js";
+} from "../chunk-MN2QJA7K.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-5VP72OOI.js";
+} from "../chunk-NM6IHHRO.js";
 import "../chunk-SGZJ5LYH.js";
 import {
   ensureDaemonRunning
-} from "../chunk-7SIZISYH.js";
+} from "../chunk-PZ33VQ54.js";
 import {
   encryptRecord
-} from "../chunk-DVTXGXXL.js";
-import "../chunk-CT4BJEU7.js";
+} from "../chunk-QIOWXUFH.js";
+import "../chunk-OEMDXBV6.js";
 import {
   transcriptsEnabled
-} from "../chunk-7MGNY7S3.js";
+} from "../chunk-JF2XRQR2.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-SEQSZYLW.js";
-import "../chunk-RV4U3LYL.js";
-import "../chunk-K2IUMMZJ.js";
-import "../chunk-NXJNYAP7.js";
+import "../chunk-ZOMVMLMU.js";
+import "../chunk-EDEIIKCV.js";
+import "../chunk-YKYFFCB5.js";
+import "../chunk-QJYBHKHO.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-NMDGIMDV.js";
+import "../chunk-DUDI3Z7F.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -58,8 +58,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-WYPQKDKX.js";
-import "../chunk-VYXXAFIA.js";
+} from "../chunk-IHPSFUL2.js";
+import "../chunk-52JA2WTH.js";
 import {
   askUser,
   cancelQuestion,
@@ -68,35 +68,35 @@ import {
   nextLongPollMs,
   waitForAnswer,
   withdrawQuestion
-} from "../chunk-PWO6T7JG.js";
+} from "../chunk-7EBZRHIH.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-CIZQARGJ.js";
-import "../chunk-3U4R475X.js";
-import "../chunk-EB6LH3U6.js";
+} from "../chunk-S2LU6HIZ.js";
+import "../chunk-BARUIIUR.js";
+import "../chunk-3DZG5EXY.js";
 import {
   getMachineId
-} from "../chunk-ZVFKNSRX.js";
+} from "../chunk-XIJMMY6M.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ZSL7B7NF.js";
-import "../chunk-2WWHZTI5.js";
+import "../chunk-VKYDON4A.js";
+import "../chunk-5ETPCIG4.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-AJRT3JGE.js";
+} from "../chunk-PJNZJPPX.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-FKQMH2DW.js";
+} from "../chunk-OIAZ2QAC.js";
 import {
   DECISION_STOP_REASON,
   KILL_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
   redactSecretsFromContent,
   resolveGate
-} from "../chunk-NAROM5IR.js";
+} from "../chunk-AYV2NRYJ.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -13,7 +13,7 @@ import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-Q7JWY33N.js";
+} from "../chunk-HKSH4KWI.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -22,27 +22,27 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-ZECHTK3K.js";
+} from "../chunk-LJJLMU5B.js";
 import {
   planFxRemoval,
   removeInstructionBlock
-} from "../chunk-4BXVGCPE.js";
-import "../chunk-2QASSTM5.js";
+} from "../chunk-HDQAN2C3.js";
+import "../chunk-WVSECXIM.js";
 import {
   disableDaemonService
-} from "../chunk-7SIZISYH.js";
+} from "../chunk-PZ33VQ54.js";
 import "../chunk-XHKBHWLX.js";
 import {
   APPROVAL_SETTINGS_PATH
-} from "../chunk-JHDHC2M7.js";
+} from "../chunk-J36EWRVL.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-H7MTFFNI.js";
-import "../chunk-J5RQW52I.js";
+} from "../chunk-EDXJEQCK.js";
+import "../chunk-PYPZ3MYC.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -54,14 +54,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-5RONPCMH.js";
+} from "../chunk-HBDZYQZX.js";
 import {
   ansiPainter,
   useColor
-} from "../chunk-U4TMAANR.js";
+} from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-NNCK2PUR.js";
+} from "../chunk-4PQGFWPO.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -74,7 +74,7 @@ import {
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-POJUUEGO.js";
+} from "../chunk-PVOOKOKX.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -82,12 +82,12 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-SEQSZYLW.js";
+} from "../chunk-ZOMVMLMU.js";
 import {
   removeGeminiSettings
-} from "../chunk-RV4U3LYL.js";
-import "../chunk-K2IUMMZJ.js";
-import "../chunk-NXJNYAP7.js";
+} from "../chunk-EDEIIKCV.js";
+import "../chunk-YKYFFCB5.js";
+import "../chunk-QJYBHKHO.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -100,22 +100,22 @@ import {
   readConfigFileKey,
   readMacAppKeyPrefix,
   removeClaudeAlias
-} from "../chunk-NMDGIMDV.js";
-import "../chunk-WYPQKDKX.js";
-import "../chunk-VYXXAFIA.js";
-import "../chunk-PWO6T7JG.js";
+} from "../chunk-DUDI3Z7F.js";
+import "../chunk-IHPSFUL2.js";
+import "../chunk-52JA2WTH.js";
+import "../chunk-7EBZRHIH.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-CIZQARGJ.js";
+import "../chunk-S2LU6HIZ.js";
 import {
   absoluteUrl
-} from "../chunk-3U4R475X.js";
-import "../chunk-EB6LH3U6.js";
-import "../chunk-ZVFKNSRX.js";
+} from "../chunk-BARUIIUR.js";
+import "../chunk-3DZG5EXY.js";
+import "../chunk-XIJMMY6M.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-ZSL7B7NF.js";
+import "../chunk-VKYDON4A.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -152,14 +152,14 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-2WWHZTI5.js";
+} from "../chunk-5ETPCIG4.js";
 import "../chunk-T7E75EKA.js";
 import {
   getBaseUrl
-} from "../chunk-AJRT3JGE.js";
+} from "../chunk-PJNZJPPX.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-FKQMH2DW.js";
+} from "../chunk-OIAZ2QAC.js";
 import {
   CLI_PACKAGE_NAMES,
   HOOK_COMPATIBLE_PROFILES,
@@ -171,7 +171,7 @@ import {
   globalRootFor,
   isValidApiKey,
   redactSecrets
-} from "../chunk-NAROM5IR.js";
+} from "../chunk-AYV2NRYJ.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -5,10 +5,10 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-2NIBBM3N.js";
+} from "../chunk-YHHUYJQN.js";
 import {
   resolveProviderBinary
-} from "../chunk-ECU2Y7D2.js";
+} from "../chunk-W2AUU35K.js";
 import "../chunk-RIVNNBEK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
@@ -16,50 +16,50 @@ import {
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-5UYAJVAQ.js";
-import "../chunk-DVTXGXXL.js";
-import "../chunk-CT4BJEU7.js";
+} from "../chunk-JQC7ZFHM.js";
+import "../chunk-QIOWXUFH.js";
+import "../chunk-OEMDXBV6.js";
 import {
   transcriptsEnabled
-} from "../chunk-7MGNY7S3.js";
+} from "../chunk-JF2XRQR2.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-NMDGIMDV.js";
+import "../chunk-DUDI3Z7F.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "../chunk-PWO6T7JG.js";
+} from "../chunk-7EBZRHIH.js";
 import "../chunk-POFBE6ZY.js";
 import {
   callMcpTool
-} from "../chunk-CIZQARGJ.js";
-import "../chunk-3U4R475X.js";
-import "../chunk-EB6LH3U6.js";
+} from "../chunk-S2LU6HIZ.js";
+import "../chunk-BARUIIUR.js";
+import "../chunk-3DZG5EXY.js";
 import {
   getMachineId
-} from "../chunk-ZVFKNSRX.js";
+} from "../chunk-XIJMMY6M.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ZSL7B7NF.js";
-import "../chunk-2WWHZTI5.js";
+import "../chunk-VKYDON4A.js";
+import "../chunk-5ETPCIG4.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-AJRT3JGE.js";
-import "../chunk-FKQMH2DW.js";
+} from "../chunk-PJNZJPPX.js";
+import "../chunk-OIAZ2QAC.js";
 import {
   elicitationContent,
   parseAgentQuestion,
   parseAgentQuestionAnswers,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-NAROM5IR.js";
+} from "../chunk-AYV2NRYJ.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";