@pushary/agent-hooks 1.9.23 → 1.9.25

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 1.9.25
+
+- "Always allow Bash in this workspace" and "Always allow Bash in this repository" now still ask about a command with a real consequence. That is running downloaded code (`curl ... | sh`, or a file downloaded and then run), a production deploy or migration (`vercel --prod`, `RAILS_ENV=production bin/rails db:migrate`), a schema push or reset (`prisma db push`, `prisma migrate reset`, `supabase db push`, `drizzle-kit push`), a SQL client that writes or runs a script file (`psql -c "UPDATE ..."`, `psql -f`, `psql < file`, `sqlite3 app.db < schema.sql`), `redis-cli FLUSHALL`, a cluster deploy (`kubectl apply`, `helm upgrade`), publishing (`docker push`, `npm publish`), `gh pr merge`, `gh repo delete`, `aws s3 sync --delete`, restarting, stopping or unloading a service (`systemctl restart`, `launchctl unload`), throwing away uncommitted changes (`git checkout <file>`, `git restore`, `git branch -D`), and writing or deleting a `.env` or secrets file. These used to run without a question. They are recognised behind wrappers such as `sudo`, `env`, `timeout` and `xargs`, behind global flags such as `git -C dir`, inside `if` and `for` blocks, and with output redirected to a log file.
+- Under those rules a plain `git push`, `git push -u origin HEAD`, `git push --dry-run`, `git clean -n`, and an `rm`, `git rm` or `unlink` of a file keep running. Asking about every push and every removal under a rule that says always allow is too much. A force push, `rm -r` and `git clean -f` still ask, as before, and a force push now also asks when it is written as `git -C dir push --force`, `git push origin +main`, or a push that deletes or mirrors branches on the remote (`--delete`, `:branch`, `--mirror`, `--prune`).
+- The same applies to a bare `Bash` approve rule written on the Policies page and to rules saved before this release. Presets and "Allow Bash for this session" keep their own rules. To let one of the held commands run anyway, add a specific rule such as `Bash(docker push:*)`.
+- Claude Code's commit form, `git commit -m "$(cat <<'EOF' ... EOF)"`, is now read as a commit when every shell reads its message as plain text, including macOS `/bin/bash` 3.2. "Allow Bash for this session" asks about fewer commits, a `Bash(git commit:*)` rule now covers them, and a `&& git push` after one is seen, also by a `Bash(git push:*)` deny rule. A message with an unmatched `)`, an apostrophe, a backslash, a backtick, or a line that starts with the closing word such as `EOF`, is not read this way and asks as before.
+- Production deploys and migrations, SQL that writes, runs a script file or comes from a variable or a pipe, `mongosh --eval`, cluster deploys and schema resets (`kubectl apply`, `helm upgrade`, `prisma db push`), `pg_restore --clean`, `mongorestore --drop`, `gh pr merge`, and publishing or deploying with `docker push`, `twine upload`, `cargo publish`, `npm unpublish`, `gh release create`, `pulumi up`, `cdk deploy`, `firebase deploy`, `fly deploy` or `wrangler deploy` now also ask under "Allow Bash for this session". These checks skip a command run with `--dry-run` or `--help`, but a command that says deploy, publish or release, such as `cargo publish --dry-run` or `firebase deploy --dry-run`, still asks, as it did before this release.
+
+## 1.9.24
+
+- Under When I'm out, a call nobody answers is refused for every agent with no approval prompt of its own (Antigravity CLI, Cursor file edits, sessions started from your phone), even when your rule approves on timeout. The 1.9.17 notes said this; only Codex did it. Under Every time a rule that approves on timeout still runs the call after its full wait.
+- After three approvals nobody answered in a session, an Every time call whose rule approves on timeout keeps reaching your phone instead of running at once with nothing shown. Antigravity CLI sessions are no longer paused at all: agy sends nothing that could lift the pause, so every later call was refused until a new conversation.
+- "Allow for this session" is offered for an MCP tool only when its name says it reads, such as `get_issue` or `list_files`. A grant cannot see the arguments of later calls, so a tool such as `query` or `create_issue` asks every time. A session grant already given for such a tool stops applying.
+- `pushary sign-out --revoke` and `pushary clean --everything` revoke only a key this CLI created by browser sign-in or pairing. The Pushary Mac app's key, a key you pasted or passed with `--key`, and a key from an `export PUSHARY_API_KEY` line are removed from this computer and not revoked, because the Mac app or another machine may still use them; the output says so and links to the dashboard to revoke it there. Since 1.9.8 `sign-out --revoke` could revoke the Mac app's own key. A key saved before 1.9.24 has no record of how it was made, so it is removed and not revoked until your next sign-in records one.
+
 ## 1.9.23
 
 - A `printf` whose format has a numeric conversion, such as `%d`, `%x` or `%f`, is no longer approved as a read unless every argument is a plain number. zsh, the default shell on a Mac, evaluates those arguments as arithmetic, and an argument such as `'PWD[$(command)]'` ran the command while Pushary approved it without asking. `printf '%s\n' text`, `printf hello` and `printf '%d\n' 42` are still approved as reads.

package/data/cursor-plugin/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "pushary",
   "displayName": "Pushary — Control Panel for AI Agents",
   "description": "Push notifications, human-in-the-loop questions, and permission gating for your AI coding agent. Get a push when a task finishes, answer the agent from your phone, and approve risky commands before they run.",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "author": { "name": "Pushary", "email": "business@pushary.com" },
   "homepage": "https://pushary.com",
   "repository": "https://github.com/Pushary/cursor-plugin",

package/data/cursor-plugin/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.2.6
+
+- Under When I'm out, a file change nobody answers is refused, even when your rule approves on timeout. Cursor's file hooks have no prompt of their own, so the change used to run once the wait ended. Under Every time a rule that approves on timeout still runs the change, as before.
+
 ## 0.2.5
 
 - Under When I'm out, a file change asks your phone every time, also while you are at the keyboard, and waits for your policy's timeout. Cursor's file hooks cannot show a prompt of their own. Before, the change was refused with "Switch to Every time" and nobody was asked, or it was refused after the 10 second push window when you were away. Shell commands and MCP calls keep When I'm out as it was, because Cursor prompts for those itself.

package/data/cursor-plugin/scripts/pushary-gate.mjs

@@ -37,6 +37,8 @@ const unresolved = (verdict) => genericToolHook && verdict?.reason === 'not_gate
 
 const approvalModeWithoutLocalPrompt = (mode) => mode === 'push_first' ? 'push_only' : mode
 const deliveryModeForThisHook = (mode) => genericToolHook ? approvalModeWithoutLocalPrompt(mode) : mode
+const timeoutActionWithoutLocalPrompt = ({ mode, timeoutAction }) => mode !== 'push_only' && timeoutAction === 'approve' ? 'deny' : timeoutAction
+const timeoutActionForThisHook = (tool) => genericToolHook ? timeoutActionWithoutLocalPrompt(tool) : tool.timeoutAction
 const localSurfaceHint = () => genericToolHook ? { localSurfaceAvailable: false } : {}
 
 let activeQuestion
@@ -705,7 +707,7 @@ setTimeout(async () => {
       case 'notify_only':
         return respond(await handleNotifyOnly(apiKey, request, project, ident))
       case 'push_only':
-        return respond(await handlePushOnly(apiKey, request, project, ident, tool.timeoutSeconds, tool.timeoutAction))
+        return respond(await handlePushOnly(apiKey, request, project, ident, tool.timeoutSeconds, timeoutActionForThisHook(tool)))
       case 'push_first':
       default:
         return respond(await handlePushFirst(apiKey, request, project, ident, tool.pushFirstSeconds))
@@ -718,7 +720,7 @@ setTimeout(async () => {
 
 // Exported for scripts/pushary-gate.test.mjs. main() only runs when the gate is
 // executed directly, so importing this file for a test does not read stdin.
-export { normalizeRepoRemote, deriveRepoKey, describeRequest, handlePushOnly, handlePushFirst, withdraw, approvalModeWithoutLocalPrompt }
+export { normalizeRepoRemote, deriveRepoKey, describeRequest, handlePushOnly, handlePushFirst, withdraw, approvalModeWithoutLocalPrompt, timeoutActionWithoutLocalPrompt }
 
 const isDirectRun = process.argv[1] && import.meta.url === `file://${process.argv[1]}`
 if (!isDirectRun) {

package/data/cursor-plugin/scripts/pushary-gate.test.mjs

@@ -14,7 +14,7 @@
 
 import assert from 'node:assert/strict'
 import { describe, it } from 'node:test'
-import { describeRequest, normalizeRepoRemote, redactSecrets } from './pushary-gate.mjs'
+import { describeRequest, normalizeRepoRemote, redactSecrets, timeoutActionWithoutLocalPrompt } from './pushary-gate.mjs'
 
 describe('repo identity', () => {
   it('collapses the forms of one remote', () => {
@@ -135,3 +135,16 @@ describe('approval text redaction', () => {
     assert.equal(redactSecrets('export API_KEY="abc123" && rm -rf build'), 'export API_KEY="[redacted]" && rm -rf build')
   })
 })
+
+describe('a rule that approves on timeout, for a file hook with no prompt of its own', () => {
+  it('approves only under Every time, and is refused under When I am out', () => {
+    assert.equal(timeoutActionWithoutLocalPrompt({ mode: 'push_only', timeoutAction: 'approve' }), 'approve')
+    assert.equal(timeoutActionWithoutLocalPrompt({ mode: 'push_first', timeoutAction: 'approve' }), 'deny')
+  })
+
+  it('leaves every other timeout action as the rule wrote it', () => {
+    for (const timeoutAction of ['deny', 'escalate', 'wait']) {
+      assert.equal(timeoutActionWithoutLocalPrompt({ mode: 'push_first', timeoutAction }), timeoutAction)
+    }
+  })
+})

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-YZPFJCFE.js";
+} from "../chunk-UK7OY3EJ.js";
 import {
   readHookInput
-} from "../chunk-OH6OGEOY.js";
-import "../chunk-AV5VX7OK.js";
+} from "../chunk-2J2WFX7X.js";
+import "../chunk-7UZD2F4Y.js";
 import "../chunk-VTR4VRL2.js";
-import "../chunk-SSWK2WYX.js";
-import "../chunk-N4DMADJM.js";
-import "../chunk-QFNY4KUQ.js";
-import "../chunk-M6R3SZZS.js";
+import "../chunk-PAMW5M53.js";
+import "../chunk-FCXYDR62.js";
+import "../chunk-FLC4TVXH.js";
+import "../chunk-YD3DIFIU.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-K2EYK5RL.js";
-import "../chunk-A5U62Q6K.js";
-import "../chunk-7RGEJOQS.js";
-import "../chunk-R5C3QCVT.js";
-import "../chunk-AFP3HZVK.js";
+import "../chunk-5WTEKIAS.js";
+import "../chunk-ZLY7BHN4.js";
+import "../chunk-KM7AEGKF.js";
+import "../chunk-4KZP4YMV.js";
+import "../chunk-ZNT4ZZXJ.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-AQ3TSQA2.js";
-import "../chunk-GYP6DLA4.js";
-import "../chunk-KJA6IGOZ.js";
-import "../chunk-4GKQDFH6.js";
+import "../chunk-GC5HJE3T.js";
+import "../chunk-AXB4ABUD.js";
+import "../chunk-A3QQWXIE.js";
+import "../chunk-NFH2H7PD.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-E2LGKG75.js";
-import "../chunk-Z4UDB7EC.js";
-import "../chunk-XBETSM5T.js";
-import "../chunk-EDN4F6GX.js";
+import "../chunk-7V6PJFDF.js";
+import "../chunk-VEGS4NYF.js";
+import "../chunk-ZV3262AA.js";
+import "../chunk-ZLGCNHJG.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-6HT2TUZD.js";
-import "../chunk-QIODXPTP.js";
+import "../chunk-EJMXZH5E.js";
+import "../chunk-2VQZC6DW.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-OQPEHKH2.js";
-import "../chunk-LEQRIJ4H.js";
-import "../chunk-OH647UT3.js";
+import "../chunk-5Q2QJ2AL.js";
+import "../chunk-OOKIWOMK.js";
+import "../chunk-KGSN2SOL.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,39 +5,39 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-YZPFJCFE.js";
+} from "../chunk-UK7OY3EJ.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-FIYCICHC.js";
+} from "../chunk-KP4BIZLP.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-AFP3HZVK.js";
+} from "../chunk-ZNT4ZZXJ.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-AQ3TSQA2.js";
+import "../chunk-GC5HJE3T.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-6HT2TUZD.js";
+import "../chunk-EJMXZH5E.js";
 import {
   claudeSettings
-} from "../chunk-QIODXPTP.js";
+} from "../chunk-2VQZC6DW.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-AQFEP65J.js";
-import "../chunk-OQPEHKH2.js";
-import "../chunk-LEQRIJ4H.js";
+import "../chunk-5Q2QJ2AL.js";
+import "../chunk-OOKIWOMK.js";
 import {
   isRecord
-} from "../chunk-OH647UT3.js";
+} from "../chunk-KGSN2SOL.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,39 +8,39 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-CJTQNUUT.js";
+} from "../chunk-HEJMZVJI.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-M7DCI44L.js";
+} from "../chunk-SGGR5MN2.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-AV5VX7OK.js";
+} from "../chunk-7UZD2F4Y.js";
 import "../chunk-VTR4VRL2.js";
 import {
   ensureDaemonRunning
-} from "../chunk-SSWK2WYX.js";
+} from "../chunk-PAMW5M53.js";
 import {
   encryptRecord
-} from "../chunk-N4DMADJM.js";
-import "../chunk-QFNY4KUQ.js";
+} from "../chunk-FCXYDR62.js";
+import "../chunk-FLC4TVXH.js";
 import {
   transcriptsEnabled
-} from "../chunk-M6R3SZZS.js";
+} from "../chunk-YD3DIFIU.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-A5U62Q6K.js";
-import "../chunk-7RGEJOQS.js";
-import "../chunk-R5C3QCVT.js";
-import "../chunk-AFP3HZVK.js";
+import "../chunk-ZLY7BHN4.js";
+import "../chunk-KM7AEGKF.js";
+import "../chunk-4KZP4YMV.js";
+import "../chunk-ZNT4ZZXJ.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-AQ3TSQA2.js";
+import "../chunk-GC5HJE3T.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -58,8 +58,8 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-GYP6DLA4.js";
-import "../chunk-KJA6IGOZ.js";
+} from "../chunk-AXB4ABUD.js";
+import "../chunk-A3QQWXIE.js";
 import {
   askUser,
   cancelQuestion,
@@ -69,35 +69,36 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-4GKQDFH6.js";
+} from "../chunk-NFH2H7PD.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-E2LGKG75.js";
-import "../chunk-Z4UDB7EC.js";
-import "../chunk-XBETSM5T.js";
+} from "../chunk-7V6PJFDF.js";
+import "../chunk-VEGS4NYF.js";
+import "../chunk-ZV3262AA.js";
 import {
   getMachineId
-} from "../chunk-EDN4F6GX.js";
+} from "../chunk-ZLGCNHJG.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-6HT2TUZD.js";
-import "../chunk-QIODXPTP.js";
+import "../chunk-EJMXZH5E.js";
+import "../chunk-2VQZC6DW.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-OQPEHKH2.js";
+} from "../chunk-5Q2QJ2AL.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-LEQRIJ4H.js";
+} from "../chunk-OOKIWOMK.js";
 import {
   DECISION_STOP_REASON,
   KILL_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
   redactSecretsFromContent,
-  resolveGate
-} from "../chunk-OH647UT3.js";
+  resolveGate,
+  timeoutActionWithoutLocalPrompt
+} from "../chunk-KGSN2SOL.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {
@@ -454,7 +455,7 @@ var createRemoteApprover = (deps) => {
     const ceiling = policy.timeoutAction === "wait" ? MAX_APPROVAL_WINDOW_MS : base;
     return Math.min(Math.max(base, 15e3), Math.max(ceiling, 15e3));
   };
-  const applyTimeout = (policy, input) => policy.timeoutAction === "approve" ? allow(input) : deny("No approval received in time");
+  const applyTimeout = (policy, input) => timeoutActionWithoutLocalPrompt(policy) === "approve" ? allow(input) : deny("No approval received in time");
   const waitForPhone = async (entry, correlationId, windowMs) => {
     const deadline = now() + windowMs;
     while (now() < deadline && !entry.controller.signal.aborted) {

package/dist/bin/pushary-clean.js

@@ -5,15 +5,16 @@ import {
   createGuards
 } from "../chunk-EUW7JL2K.js";
 import {
-  describeRevokeAttempt,
-  keyNoLongerAccepted,
-  revokeOwnKey
-} from "../chunk-OYIN77HO.js";
+  describeCliKeyRevocation,
+  planCliKeyRevocations,
+  readCliHeldKeys,
+  revokeCliKeys
+} from "../chunk-UJB6HHP4.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-2AUKCSLQ.js";
+} from "../chunk-Q37XFSPO.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -22,27 +23,25 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-AXSHPFU3.js";
+} from "../chunk-LDNKGG5G.js";
 import {
   planFxRemoval,
   removeInstructionBlock
-} from "../chunk-YXHVMZPR.js";
-import "../chunk-RN5NRRHX.js";
+} from "../chunk-KZLOVLA6.js";
+import "../chunk-EJJNZYDS.js";
 import {
   disableDaemonService
-} from "../chunk-SSWK2WYX.js";
+} from "../chunk-PAMW5M53.js";
 import "../chunk-XHKBHWLX.js";
-import {
-  APPROVAL_SETTINGS_PATH
-} from "../chunk-S2R2U5W5.js";
+import "../chunk-RSENVGBQ.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-6GHZAS7S.js";
-import "../chunk-SLBO7PHS.js";
+} from "../chunk-WEKXYS2F.js";
+import "../chunk-WKEP4JAW.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -54,14 +53,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-ZGYO6OQE.js";
+} from "../chunk-FJKV64M7.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-FIYCICHC.js";
+} from "../chunk-KP4BIZLP.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -74,7 +73,7 @@ import {
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-K2EYK5RL.js";
+} from "../chunk-5WTEKIAS.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -82,42 +81,35 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-A5U62Q6K.js";
+} from "../chunk-ZLY7BHN4.js";
 import {
   removeGeminiSettings
-} from "../chunk-7RGEJOQS.js";
-import "../chunk-R5C3QCVT.js";
-import "../chunk-AFP3HZVK.js";
+} from "../chunk-KM7AEGKF.js";
+import "../chunk-4KZP4YMV.js";
+import "../chunk-ZNT4ZZXJ.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
 import {
   CANDIDATE_RCS,
-  findExportedKeyLines,
-  isAdoptedMacAppKey,
   isDisabledExport,
-  keyPrefix,
-  readConfigFileKey,
-  readKeySource,
-  readMacAppKeyPrefix,
-  removeClaudeAlias
-} from "../chunk-AQ3TSQA2.js";
-import "../chunk-GYP6DLA4.js";
-import "../chunk-KJA6IGOZ.js";
-import "../chunk-4GKQDFH6.js";
+  removeClaudeAlias,
+  shellProfileCandidates
+} from "../chunk-GC5HJE3T.js";
+import "../chunk-AXB4ABUD.js";
+import "../chunk-A3QQWXIE.js";
+import "../chunk-NFH2H7PD.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-E2LGKG75.js";
-import {
-  absoluteUrl
-} from "../chunk-Z4UDB7EC.js";
-import "../chunk-XBETSM5T.js";
-import "../chunk-EDN4F6GX.js";
+import "../chunk-7V6PJFDF.js";
+import "../chunk-VEGS4NYF.js";
+import "../chunk-ZV3262AA.js";
+import "../chunk-ZLGCNHJG.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-6HT2TUZD.js";
+import "../chunk-EJMXZH5E.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -154,14 +146,14 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-QIODXPTP.js";
+} from "../chunk-2VQZC6DW.js";
 import "../chunk-AQFEP65J.js";
 import {
   getBaseUrl
-} from "../chunk-OQPEHKH2.js";
+} from "../chunk-5Q2QJ2AL.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-LEQRIJ4H.js";
+} from "../chunk-OOKIWOMK.js";
 import {
   CLI_PACKAGE_NAMES,
   HOOK_COMPATIBLE_PROFILES,
@@ -173,7 +165,7 @@ import {
   globalRootFor,
   isValidApiKey,
   redactSecrets
-} from "../chunk-OH647UT3.js";
+} from "../chunk-KGSN2SOL.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";
@@ -599,43 +591,6 @@ var cleanCompatibleAgent = (profile, scope, io, home) => {
   };
 };
 
-// src/cli/clean-key-revocation.ts
-var isMacAppCurrentOrAdoptedKey = (key, keys) => key === keys.macAppKey || isAdoptedMacAppKey(key, keys.macAppKeyPrefix);
-var revocationFor = (keys) => (key) => isMacAppCurrentOrAdoptedKey(key, keys) ? { kind: "mac_app_key", keyPrefix: keyPrefix(key) } : { kind: "revoke", key };
-var validKeys = (keys) => [...new Set(keys)].filter((key) => key !== null && isValidApiKey(key));
-var environmentOnlyKey = (keys, written) => validKeys([keys.envKey]).filter((key) => !written.includes(key)).map((key) => ({ kind: "environment_only", keyPrefix: keyPrefix(key) }));
-var planCliKeyRevocations = (keys) => {
-  const written = validKeys([keys.configKey, ...keys.profileKeys]);
-  return [...written.map(revocationFor(keys)), ...environmentOnlyKey(keys, written)];
-};
-var runRevocation = async (revocation, run) => {
-  if (revocation.kind !== "revoke") return revocation;
-  if (run.dryRun) return { kind: "would_revoke", keyPrefix: keyPrefix(revocation.key) };
-  return { kind: "attempted", keyPrefix: keyPrefix(revocation.key), attempt: await revokeOwnKey(revocation.key, run.baseUrl) };
-};
-var revokeCliKeys = async (revocations, run) => {
-  const outcomes = [];
-  for (const revocation of revocations) outcomes.push(await runRevocation(revocation, run));
-  return outcomes;
-};
-var describeCliKeyRevocation = (outcome, baseUrl) => {
-  const label = `API key ${outcome.keyPrefix}`;
-  switch (outcome.kind) {
-    case "would_revoke":
-      return { tone: "skipped", line: `${label} (would revoke it on pushary.com)`, next: null };
-    case "mac_app_key":
-      return { tone: "skipped", line: `${label} (not revoked: it is the Pushary Mac app's key)`, next: null };
-    case "environment_only":
-      return { tone: "skipped", line: `${label} in PUSHARY_API_KEY (left alone: Pushary did not write it)`, next: null };
-    case "attempted":
-      return keyNoLongerAccepted(outcome.attempt) ? { tone: "done", line: `${label}: ${describeRevokeAttempt(outcome.attempt)}`, next: null } : {
-        tone: "warning",
-        line: `${label}: ${describeRevokeAttempt(outcome.attempt)}`,
-        next: `It may still be valid. Revoke it at ${absoluteUrl(baseUrl, APPROVAL_SETTINGS_PATH)}`
-      };
-  }
-};
-
 // bin/pushary-clean.ts
 exitOnHelpFlag("clean");
 var paint = ansiPainter(() => useColor());
@@ -870,18 +825,11 @@ var printKeyRevocation = (report) => {
   console.log(`  ${KEY_REVOCATION_ICONS[report.tone]} ${report.line}`);
   if (report.next) console.log(`    ${dim(report.next)}`);
 };
-var revokeKeysThisCliHolds = async () => {
-  const baseUrl = getBaseUrl();
-  const source = readKeySource();
-  const revocations = planCliKeyRevocations({
-    configKey: readConfigFileKey(),
-    profileKeys: findExportedKeyLines().map((line) => line.key),
-    envKey: source.kind === "env" ? source.key : null,
-    macAppKey: readMacAppAgentKey(),
-    macAppKeyPrefix: readMacAppKeyPrefix()
-  });
-  const outcomes = await revokeCliKeys(revocations, { dryRun, baseUrl });
-  for (const outcome of outcomes) printKeyRevocation(describeCliKeyRevocation(outcome, baseUrl));
+var revokeKeysThisCliCreated = async () => {
+  const run = { dryRun, baseUrl: getBaseUrl() };
+  const revocations = planCliKeyRevocations(readCliHeldKeys(shellProfileCandidates()));
+  const outcomes = await revokeCliKeys(revocations, run);
+  for (const outcome of outcomes) printKeyRevocation(describeCliKeyRevocation(outcome, run));
 };
 var main = async () => {
   console.log();
@@ -961,7 +909,7 @@ var main = async () => {
     process.exit(EXIT.FAILED);
   }
   console.log(`  ${check} Background service ${dim(did("uninstalled"))}`);
-  if (everything) await revokeKeysThisCliHolds();
+  if (everything) await revokeKeysThisCliCreated();
   const claudeJson2 = readJson(CLAUDE_JSON);
   const keepClaudeMcp = macAppKeeps("claude_code", mcpServerBearer(claudeJson2?.mcpServers));
   const claudeHasPusharyEntry = () => Boolean(claudeJson2?.mcpServers?.pushary);

package/dist/bin/pushary-codex-bridge.js

@@ -5,10 +5,10 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-73HGV4R6.js";
+} from "../chunk-5ETE7F45.js";
 import {
   resolveProviderBinary
-} from "../chunk-7J2AX5T6.js";
+} from "../chunk-OWOSNGEQ.js";
 import "../chunk-RIVNNBEK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
@@ -16,50 +16,50 @@ import {
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-CJTQNUUT.js";
-import "../chunk-N4DMADJM.js";
-import "../chunk-QFNY4KUQ.js";
+} from "../chunk-HEJMZVJI.js";
+import "../chunk-FCXYDR62.js";
+import "../chunk-FLC4TVXH.js";
 import {
   transcriptsEnabled
-} from "../chunk-M6R3SZZS.js";
+} from "../chunk-YD3DIFIU.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-AQ3TSQA2.js";
+import "../chunk-GC5HJE3T.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "../chunk-4GKQDFH6.js";
+} from "../chunk-NFH2H7PD.js";
 import "../chunk-POFBE6ZY.js";
 import {
   callMcpTool
-} from "../chunk-E2LGKG75.js";
-import "../chunk-Z4UDB7EC.js";
-import "../chunk-XBETSM5T.js";
+} from "../chunk-7V6PJFDF.js";
+import "../chunk-VEGS4NYF.js";
+import "../chunk-ZV3262AA.js";
 import {
   getMachineId
-} from "../chunk-EDN4F6GX.js";
+} from "../chunk-ZLGCNHJG.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-6HT2TUZD.js";
-import "../chunk-QIODXPTP.js";
+import "../chunk-EJMXZH5E.js";
+import "../chunk-2VQZC6DW.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-OQPEHKH2.js";
-import "../chunk-LEQRIJ4H.js";
+} from "../chunk-5Q2QJ2AL.js";
+import "../chunk-OOKIWOMK.js";
 import {
   elicitationContent,
   parseAgentQuestion,
   parseAgentQuestionAnswers,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-OH647UT3.js";
+} from "../chunk-KGSN2SOL.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";