@pushary/agent-hooks 1.9.28 → 1.9.30

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 1.9.30
+
+- "Always allow PowerShell" and "Always allow Monitor" now ask about the same consequences "Always allow Bash" does. A Monitor command is judged exactly as the same Bash command. In PowerShell that includes `Remove-Item -Recurse`, `irm ... | iex`, a downloaded script then run, `Set-Content .env`, `Stop-Service`, `Format-Volume` and a recursive `Get-ChildItem` piped to `Remove-Item`. A plain `Remove-Item file.txt`, `git push`, `Stop-Process`, `-WhatIf` and every read such as `Get-ChildItem` keep running.
+- A `*` approve rule no longer runs a destructive PowerShell or Monitor command, such as `Remove-Item -Recurse -Force ~`, `cmd /c rd /s` or `rm -rf ~`, without asking. It asks, as it already did for Bash.
+- Codex: a call nobody answers is now refused instead of passed back to Codex, which ran calls it does not ask about itself. Only a rule you set to approve on timeout lets it run.
+- A call refused because your phone approvals for a session are paused now says so, and tells you to tap Approve on the notification to resume. It used to say "No response within timeout".
+- Codex: a GitHub, Stripe, AWS or Twilio write behind `caffeinate`, `stdbuf` or `flock` now asks, and `gh` asks about anything that is not a known read, such as `gh extension install`, `gh ssh-key add` or `gh label clone`. `gh pr co` now runs like `gh pr checkout`.
+- Codex: a patch to a GitHub workflow or secrets file now asks however its path is capitalised, so `.GitHub/Workflows/ci.yml` no longer runs unasked.
+- When two of your rules hold a call equally, Pushary now uses the one that refuses it if nobody answers, whatever order the rules are in.
+- Antigravity CLI: input to a running command that is not text is now refused instead of shown as blank input.
+
+## 1.9.29
+
+- Codex: answering "Handle on your machine" now always refuses the call, and tells you to ask Codex to run it again while you are at your computer, or to run it yourself. In Codex's default modes the call used to pass back to Codex, and a call Codex does not ask about itself, such as a remote API write or a file deletion, could run without anyone approving it.
+- In a session started from your phone, "Handle on your machine" now refuses the call with the same reason every agent without an approval prompt of its own gives.
+
 ## 1.9.28
 
 - Antigravity CLI: text agy sends to a command it left running (`manage_task` with `send_input`) now goes through Pushary and is judged as the shell command it types, so your `Bash` rules and safe read-only commands apply to it. It used to run with nobody asked, because connecting agy turns off its own prompt. Sending blank input, such as pressing Enter, asks your phone. Listing, checking and stopping agy's own background tasks run without a question.

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-EBO5KWWC.js";
+} from "../chunk-SAGO6JNL.js";
 import {
   readHookInput
-} from "../chunk-3OFFLLSJ.js";
-import "../chunk-EP425PGA.js";
+} from "../chunk-HMA7QQ3P.js";
+import "../chunk-JHVSVVHB.js";
 import "../chunk-VTR4VRL2.js";
-import "../chunk-VU6O4P2N.js";
-import "../chunk-HRAZMBUX.js";
-import "../chunk-AXGA3WJI.js";
-import "../chunk-MNHY3EIN.js";
+import "../chunk-QYD5TN2J.js";
+import "../chunk-E2WJLU5U.js";
+import "../chunk-IMUCTAM2.js";
+import "../chunk-434NFCK2.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-ZX5ISG5O.js";
-import "../chunk-COEOZ2NC.js";
-import "../chunk-BXUYF5HB.js";
-import "../chunk-SGAQYFGS.js";
-import "../chunk-GXZFDZJG.js";
+import "../chunk-KT4SP73I.js";
+import "../chunk-GFY6XONT.js";
+import "../chunk-2OIGS4P2.js";
+import "../chunk-DP6FJABB.js";
+import "../chunk-S6J3A4DF.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-IDXEDMWI.js";
-import "../chunk-FD3QASU3.js";
-import "../chunk-V5BIWNB3.js";
-import "../chunk-3TF5FHAT.js";
+import "../chunk-LD3A63IE.js";
+import "../chunk-XLNSQLTV.js";
+import "../chunk-Q6HJD6SH.js";
+import "../chunk-OQ5K6QHU.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-ZREXC363.js";
-import "../chunk-5NXOJ3JG.js";
-import "../chunk-56U55YDV.js";
-import "../chunk-IWPQBWFN.js";
+import "../chunk-7JO33ODX.js";
+import "../chunk-XKSAXKRY.js";
+import "../chunk-3QKX22ZA.js";
+import "../chunk-6DJBVMTR.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-L5ZMZOQL.js";
-import "../chunk-TAPGV2YV.js";
+import "../chunk-KRZECDHA.js";
+import "../chunk-2QEW5FJK.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-OK4WDRGM.js";
-import "../chunk-7RKX7WRQ.js";
-import "../chunk-7DXPQW2H.js";
+import "../chunk-XNKFK27C.js";
+import "../chunk-SMA7LUCS.js";
+import "../chunk-JBVKA3UR.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,39 +5,39 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-EBO5KWWC.js";
+} from "../chunk-SAGO6JNL.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-74YRZTGP.js";
+} from "../chunk-6R22H57A.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-GXZFDZJG.js";
+} from "../chunk-S6J3A4DF.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-IDXEDMWI.js";
+import "../chunk-LD3A63IE.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-L5ZMZOQL.js";
+import "../chunk-KRZECDHA.js";
 import {
   claudeSettings
-} from "../chunk-TAPGV2YV.js";
+} from "../chunk-2QEW5FJK.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-AQFEP65J.js";
-import "../chunk-OK4WDRGM.js";
-import "../chunk-7RKX7WRQ.js";
+import "../chunk-XNKFK27C.js";
+import "../chunk-SMA7LUCS.js";
 import {
   isRecord
-} from "../chunk-7DXPQW2H.js";
+} from "../chunk-JBVKA3UR.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,39 +8,39 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-URZOKMAV.js";
+} from "../chunk-CS5JKDWW.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-ZH32OREM.js";
+} from "../chunk-J3HI2SRD.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-EP425PGA.js";
+} from "../chunk-JHVSVVHB.js";
 import "../chunk-VTR4VRL2.js";
 import {
   ensureDaemonRunning
-} from "../chunk-VU6O4P2N.js";
+} from "../chunk-QYD5TN2J.js";
 import {
   encryptRecord
-} from "../chunk-HRAZMBUX.js";
-import "../chunk-AXGA3WJI.js";
+} from "../chunk-E2WJLU5U.js";
+import "../chunk-IMUCTAM2.js";
 import {
   transcriptsEnabled
-} from "../chunk-MNHY3EIN.js";
+} from "../chunk-434NFCK2.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-COEOZ2NC.js";
-import "../chunk-BXUYF5HB.js";
-import "../chunk-SGAQYFGS.js";
-import "../chunk-GXZFDZJG.js";
+import "../chunk-GFY6XONT.js";
+import "../chunk-2OIGS4P2.js";
+import "../chunk-DP6FJABB.js";
+import "../chunk-S6J3A4DF.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-IDXEDMWI.js";
+import "../chunk-LD3A63IE.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -58,47 +58,50 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-FD3QASU3.js";
-import "../chunk-V5BIWNB3.js";
+} from "../chunk-XLNSQLTV.js";
+import "../chunk-Q6HJD6SH.js";
 import {
   askUser,
   cancelQuestion,
+  isAwayPaused,
   isDecisionStopped,
   isLocalQuestionHandoff,
   nextLongPollMs,
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-3TF5FHAT.js";
+} from "../chunk-OQ5K6QHU.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-ZREXC363.js";
-import "../chunk-5NXOJ3JG.js";
-import "../chunk-56U55YDV.js";
+} from "../chunk-7JO33ODX.js";
+import "../chunk-XKSAXKRY.js";
+import "../chunk-3QKX22ZA.js";
 import {
   getMachineId
-} from "../chunk-IWPQBWFN.js";
+} from "../chunk-6DJBVMTR.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-L5ZMZOQL.js";
-import "../chunk-TAPGV2YV.js";
+import "../chunk-KRZECDHA.js";
+import "../chunk-2QEW5FJK.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-OK4WDRGM.js";
+} from "../chunk-XNKFK27C.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-7RKX7WRQ.js";
+} from "../chunk-SMA7LUCS.js";
 import {
   DECISION_STOP_REASON,
+  HAND_BACK_WITHOUT_A_PROMPT,
   KILL_REASON,
+  SESSION_PAUSED_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
   redactSecretsFromContent,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-7DXPQW2H.js";
+} from "../chunk-JBVKA3UR.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {
@@ -430,6 +433,7 @@ var BoundedInputQueue = class {
 
 // src/wrapper/approver.ts
 var DEFAULT_MAX_CONCURRENT = 16;
+var NO_APPROVAL_IN_TIME = "No approval received in time";
 var NO_LOCAL_APPROVAL_UI = "This remote session has no local approval UI. Continue in an interactive session or choose a mode that permits remote approval.";
 var SUBSCRIPTION_REQUIRED_NO_LOCAL_APPROVAL_UI = "Your Pushary workspace has no active subscription, so approvals cannot reach your phone, and this remote session has no local approval UI. Continue in an interactive session.";
 var DEFAULT_APPROVAL_WINDOW_MS = 5 * 6e4;
@@ -455,7 +459,7 @@ var createRemoteApprover = (deps) => {
     const ceiling = policy.timeoutAction === "wait" ? MAX_APPROVAL_WINDOW_MS : base;
     return Math.min(Math.max(base, 15e3), Math.max(ceiling, 15e3));
   };
-  const applyTimeout = (policy, input) => timeoutActionWithoutLocalPrompt(policy) === "approve" ? allow(input) : deny("No approval received in time");
+  const applyTimeout = (policy, input, paused) => timeoutActionWithoutLocalPrompt(policy) === "approve" ? allow(input) : deny(paused ? SESSION_PAUSED_REASON : NO_APPROVAL_IN_TIME);
   const waitForPhone = async (entry, correlationId, windowMs) => {
     const deadline = now() + windowMs;
     while (now() < deadline && !entry.controller.signal.aborted) {
@@ -553,11 +557,11 @@ var createRemoteApprover = (deps) => {
       }
       answered = answer.answered;
       if (answer.answered) {
-        if (isDeferAnswer(answer.value)) return deny("Deferred \u2014 handle it on the machine");
+        if (isDeferAnswer(answer.value)) return deny(HAND_BACK_WITHOUT_A_PROMPT.reason);
         return answer.value === "yes" ? allow(input) : deny("Denied from your phone");
       }
       if (localHandoff) return deny(NO_LOCAL_APPROVAL_UI);
-      return applyTimeout(policy, input);
+      return applyTimeout(policy, input, isAwayPaused(question));
     } catch {
       return deny("Approval unavailable; denied by default");
     } finally {

package/dist/bin/pushary-clean.js

@@ -9,12 +9,12 @@ import {
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-FY2XCYLK.js";
+} from "../chunk-T4KXYKDL.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-ZMWCN3QS.js";
+} from "../chunk-ZLKJHXSC.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -23,25 +23,25 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-W6MUIG6S.js";
+} from "../chunk-AO75FKBR.js";
 import {
   planFxRemoval,
   removeInstructionBlock
-} from "../chunk-WIAWMH6T.js";
-import "../chunk-FYYWKCPO.js";
+} from "../chunk-YZPCDR32.js";
+import "../chunk-DU6UZXGV.js";
 import {
   disableDaemonService
-} from "../chunk-VU6O4P2N.js";
+} from "../chunk-QYD5TN2J.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-VYKUGORF.js";
+import "../chunk-NKDK3H3I.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-S3NAONBN.js";
-import "../chunk-UJZ3KD4E.js";
+} from "../chunk-H7HRHS3M.js";
+import "../chunk-V2FRBKMP.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -53,14 +53,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-YW7JQ7Z4.js";
+} from "../chunk-EDEEITT3.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-74YRZTGP.js";
+} from "../chunk-6R22H57A.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -73,7 +73,7 @@ import {
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-ZX5ISG5O.js";
+} from "../chunk-KT4SP73I.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -81,12 +81,12 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-COEOZ2NC.js";
+} from "../chunk-GFY6XONT.js";
 import {
   removeGeminiSettings
-} from "../chunk-BXUYF5HB.js";
-import "../chunk-SGAQYFGS.js";
-import "../chunk-GXZFDZJG.js";
+} from "../chunk-2OIGS4P2.js";
+import "../chunk-DP6FJABB.js";
+import "../chunk-S6J3A4DF.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -96,20 +96,20 @@ import {
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-IDXEDMWI.js";
-import "../chunk-FD3QASU3.js";
-import "../chunk-V5BIWNB3.js";
-import "../chunk-3TF5FHAT.js";
+} from "../chunk-LD3A63IE.js";
+import "../chunk-XLNSQLTV.js";
+import "../chunk-Q6HJD6SH.js";
+import "../chunk-OQ5K6QHU.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-ZREXC363.js";
-import "../chunk-5NXOJ3JG.js";
-import "../chunk-56U55YDV.js";
-import "../chunk-IWPQBWFN.js";
+import "../chunk-7JO33ODX.js";
+import "../chunk-XKSAXKRY.js";
+import "../chunk-3QKX22ZA.js";
+import "../chunk-6DJBVMTR.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-L5ZMZOQL.js";
+import "../chunk-KRZECDHA.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -146,14 +146,14 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-TAPGV2YV.js";
+} from "../chunk-2QEW5FJK.js";
 import "../chunk-AQFEP65J.js";
 import {
   getBaseUrl
-} from "../chunk-OK4WDRGM.js";
+} from "../chunk-XNKFK27C.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-7RKX7WRQ.js";
+} from "../chunk-SMA7LUCS.js";
 import {
   CLI_PACKAGE_NAMES,
   HOOK_COMPATIBLE_PROFILES,
@@ -165,7 +165,7 @@ import {
   globalRootFor,
   isValidApiKey,
   redactSecrets
-} from "../chunk-7DXPQW2H.js";
+} from "../chunk-JBVKA3UR.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -5,10 +5,10 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-VAJLOCFP.js";
+} from "../chunk-2VQULZ4L.js";
 import {
   resolveProviderBinary
-} from "../chunk-7TBCGHJT.js";
+} from "../chunk-CI2H3U7O.js";
 import "../chunk-RIVNNBEK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
@@ -16,50 +16,50 @@ import {
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-URZOKMAV.js";
-import "../chunk-HRAZMBUX.js";
-import "../chunk-AXGA3WJI.js";
+} from "../chunk-CS5JKDWW.js";
+import "../chunk-E2WJLU5U.js";
+import "../chunk-IMUCTAM2.js";
 import {
   transcriptsEnabled
-} from "../chunk-MNHY3EIN.js";
+} from "../chunk-434NFCK2.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-IDXEDMWI.js";
+import "../chunk-LD3A63IE.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "../chunk-3TF5FHAT.js";
+} from "../chunk-OQ5K6QHU.js";
 import "../chunk-POFBE6ZY.js";
 import {
   callMcpTool
-} from "../chunk-ZREXC363.js";
-import "../chunk-5NXOJ3JG.js";
-import "../chunk-56U55YDV.js";
+} from "../chunk-7JO33ODX.js";
+import "../chunk-XKSAXKRY.js";
+import "../chunk-3QKX22ZA.js";
 import {
   getMachineId
-} from "../chunk-IWPQBWFN.js";
+} from "../chunk-6DJBVMTR.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-L5ZMZOQL.js";
-import "../chunk-TAPGV2YV.js";
+import "../chunk-KRZECDHA.js";
+import "../chunk-2QEW5FJK.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-OK4WDRGM.js";
-import "../chunk-7RKX7WRQ.js";
+} from "../chunk-XNKFK27C.js";
+import "../chunk-SMA7LUCS.js";
 import {
   elicitationContent,
   parseAgentQuestion,
   parseAgentQuestionAnswers,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-7DXPQW2H.js";
+} from "../chunk-JBVKA3UR.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";