@pushary/agent-hooks 1.9.29 → 1.9.31

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 1.9.31
+
+- SQL sent through `psql`, `mysql` and `mariadb` is now read the way the database reads it. These used to run under an approve rule and now ask: a write after a dollar quote with a non-ASCII tag, such as `psql -c 'SELECT $é$ -- $é$; UPDATE users SET x=1'`; a write after a carriage return that ends a `--` comment; and a write inside a MySQL `/*! ... */` or MariaDB `/*M! ... */` comment, which those clients run.
+- `SELECT ... INTO` and a `LOCK` statement now count as writes and ask, as do `EXECUTE IMMEDIATE` and `PREPARE ... FROM`.
+- A command after `bash -c` and its options is now seen, so a `Bash(git push:*)` deny rule now refuses `bash -c -x 'git push'`, `bash -c -- 'git push'` and `zsh -c -x 'git push'`, which used to run.
+- `env` options are read the way GNU and macOS `env` read them, abbreviations included, so the same deny rule now refuses `env --spl='git push'`. When the two versions of `env` would run different commands, Pushary asks.
+- Codex: `gh api -iXDELETE` and `gh api -iX DELETE` are read as DELETE requests and ask, instead of being passed back to Codex.
+- A tool name that is not one concrete tool, such as `*`, can no longer be saved as an Always allow rule.
+- History capture works when Claude Code or Codex keeps its files under a custom `CLAUDE_CONFIG_DIR` or `CODEX_HOME`.
+- `pushary-mcp` tells Pushary which computer is asking, so the phone's Try it step checks the computer you chose.
+
+## 1.9.30
+
+- "Always allow PowerShell" and "Always allow Monitor" now ask about the same consequences "Always allow Bash" does. A Monitor command is judged exactly as the same Bash command. In PowerShell that includes `Remove-Item -Recurse`, `irm ... | iex`, a downloaded script then run, `Set-Content .env`, `Stop-Service`, `Format-Volume` and a recursive `Get-ChildItem` piped to `Remove-Item`. A plain `Remove-Item file.txt`, `git push`, `Stop-Process`, `-WhatIf` and every read such as `Get-ChildItem` keep running.
+- A `*` approve rule no longer runs a destructive PowerShell or Monitor command, such as `Remove-Item -Recurse -Force ~`, `cmd /c rd /s` or `rm -rf ~`, without asking. It asks, as it already did for Bash.
+- Codex: a call nobody answers is now refused instead of passed back to Codex, which ran calls it does not ask about itself. Only a rule you set to approve on timeout lets it run.
+- A call refused because your phone approvals for a session are paused now says so, and tells you to tap Approve on the notification to resume. It used to say "No response within timeout".
+- Codex: a GitHub, Stripe, AWS or Twilio write behind `caffeinate`, `stdbuf` or `flock` now asks, and `gh` asks about anything that is not a known read, such as `gh extension install`, `gh ssh-key add` or `gh label clone`. `gh pr co` now runs like `gh pr checkout`.
+- Codex: a patch to a GitHub workflow or secrets file now asks however its path is capitalised, so `.GitHub/Workflows/ci.yml` no longer runs unasked.
+- When two of your rules hold a call equally, Pushary now uses the one that refuses it if nobody answers, whatever order the rules are in.
+- Antigravity CLI: input to a running command that is not text is now refused instead of shown as blank input.
+
 ## 1.9.29
 
 - Codex: answering "Handle on your machine" now always refuses the call, and tells you to ask Codex to run it again while you are at your computer, or to run it yourself. In Codex's default modes the call used to pass back to Codex, and a call Codex does not ask about itself, such as a remote API write or a file deletion, could run without anyone approving it.

package/data/SKILL.md

@@ -174,20 +174,46 @@ Put a boundary that is not a file path in `promises`, never in `allowedPaths`. R
 
 **Look at the machine first. Do not guess the install path.** Run these. Each one is read-only and fast. Run them as separate commands.
 
+Use `uname -s` in a Unix shell (`Darwin` is Mac, `Linux` is Linux). In
+PowerShell, inspect `$env:OS` (`Windows_NT` is Windows). Platform discovery must
+not depend on Node: the native Mac route does not require it.
+
+In a Unix shell, run these separately:
+
 ```bash
-node -p "process.platform"
+uname -s
 [ -n "${PUSHARY_API_KEY:+x}" ] && echo key-in-env
-node -e "try{process.exit(JSON.parse(require('fs').readFileSync(process.env.HOME+'/.pushary/config.json','utf8')).apiKey?.trim()?0:1)}catch{process.exit(1)}" && echo keyed
+command -v node >/dev/null 2>&1 && echo node-available
+command -v npm >/dev/null 2>&1 && echo npm-available
 test -x ~/.pushary/bin/pushary-bridge && echo mac-app
 ```
 
-The third and fourth tests answer different questions.
+On Mac, check the stored key without Node or printing its value:
+
+```bash
+if pushary_key_check=$(/usr/bin/plutil -extract apiKey raw -expect string -o - ~/.pushary/config.json 2>/dev/null); then
+  printf '%s\n' "$pushary_key_check" | /usr/bin/awk 'NF { found=1 } END { exit !found }' && echo keyed
+fi
+unset pushary_key_check
+```
+
+When Node is available, other Unix platforms can check the stored key with:
 
-The third says a key is stored **and is not empty**. Test the value, not the file.
+```bash
+node -e "try{process.exit(JSON.parse(require('fs').readFileSync(process.env.HOME+'/.pushary/config.json','utf8')).apiKey?.trim()?0:1)}catch{process.exit(1)}" && echo keyed
+```
+
+In PowerShell, check for a nonempty environment/stored key without printing it;
+use `Get-Content` and `ConvertFrom-Json` for the config in `$env:USERPROFILE`.
+Check `Get-Command node,npm` before choosing the terminal installer.
+
+The stored-key and bridge tests answer different questions.
+
+The stored-key test says a key is stored **and is not empty**. Test the value, not the file.
 The file stays behind after a logout removes the key. A test for the file alone
 tells a logged-out user they are ready.
 
-The fourth says the Mac app is installed here. Only the Mac app writes that file.
+The bridge test says the Mac app is installed here. Only the Mac app writes that file.
 
 Check the environment before the stored key. An exported key wins over a stored
 one. Never print the key itself.
@@ -196,14 +222,22 @@ Then take one branch.
 
 ### Branch 1. `key-in-env`, `keyed`, or `mac-app`
 
-This machine is set up. Offer no install. Do not run `setup` again.
+This machine has an existing installation or credential. Offer no new install.
+Verify its readiness before reporting success. Do not run `setup` again.
 
 `mac-app` counts on its own. The Mac app signs in for the user. It writes the key
 into the agent configuration files it wires, not into `~/.pushary/config.json`. A
-machine the app set up therefore prints `mac-app` and nothing else. Treat it as
-ready.
+machine the app set up therefore prints `mac-app` and nothing else. The locator
+proves installation, not sign-in, entitlement, current agent admission or delivery.
+
+For `mac-app` without Node/npm, open Pushary and check the intended account,
+subscription and Agents connection state there. Use the native app to connect or
+repair the selected agents and phone. Then send a harmless question from the
+current agent and confirm its returned answer. Do not install Node to inspect
+the native setup and do not claim a CLI status exit code when no CLI ran.
 
-Check it with `npx pushary@latest status --json`. The exit code is the answer:
+When Node/npm are available, check it with `npx pushary@latest status --json`.
+The exit code is the answer:
 
 | Code | Meaning |
 | --- | --- |
@@ -224,7 +258,7 @@ grep -lq pushary-bridge ~/.claude/settings.json ~/.gemini/settings.json ~/.curso
 
 If the app owns them, `setup` would keep them and write almost nothing, so telling the user to re-run it is bad advice. Point them at the Pushary app instead.
 
-### Branch 2. `darwin`, no key, no `mac-app`
+### Branch 2. `Darwin`, no key, no `mac-app`
 
 Offer the Mac app first. It needs no Node and no terminal. It writes the agent configuration itself, and it answers questions in the notch at the desk.
 
@@ -236,7 +270,7 @@ They can also download it from https://pushary.com/download. It needs macOS 14 o
 
 The command line works on macOS too. Offer it if the user prefers the terminal, or if the user runs Hermes, because Hermes needs a Python the app cannot install.
 
-### Branch 3. `linux` or `win32`
+### Branch 3. `Linux` or `Windows_NT`
 
 There is no Mac app for these machines. Use the command line. It is fully supported.
 
@@ -251,7 +285,7 @@ Node 20.17+, 22.13+ or 23.5+ is necessary. Then the user needs a phone to answer
 
 On Windows, setup writes no shell file, so `~/.pushary/config.json` is the only key store. On a Linux machine with no screen, browser login does not work, but the pairing QR does.
 
-### Branch 4. `darwin`, `mac-app`, and the user asked for the command line
+### Branch 4. `Darwin`, `mac-app`, and the user asked for the command line
 
 Run `setup`. It reads the key the app signed in with, so it mints no second key, and it keeps the hooks the app owns. Pass `--take-over-hooks` only when the user wants the command line to own them instead.
 

package/data/cursor-plugin/skills/pushary/SKILL.md

@@ -167,20 +167,46 @@ Put a boundary that is not a file path in `promises`, never in `allowedPaths`. R
 
 **Look at the machine first. Do not guess the install path.** Run these. Each one is read-only and fast. Run them as separate commands.
 
+Use `uname -s` in a Unix shell (`Darwin` is Mac, `Linux` is Linux). In
+PowerShell, inspect `$env:OS` (`Windows_NT` is Windows). Platform discovery must
+not depend on Node: the native Mac route does not require it.
+
+In a Unix shell, run these separately:
+
 ```bash
-node -p "process.platform"
+uname -s
 [ -n "${PUSHARY_API_KEY:+x}" ] && echo key-in-env
-node -e "try{process.exit(JSON.parse(require('fs').readFileSync(process.env.HOME+'/.pushary/config.json','utf8')).apiKey?.trim()?0:1)}catch{process.exit(1)}" && echo keyed
+command -v node >/dev/null 2>&1 && echo node-available
+command -v npm >/dev/null 2>&1 && echo npm-available
 test -x ~/.pushary/bin/pushary-bridge && echo mac-app
 ```
 
-The third and fourth tests answer different questions.
+On Mac, check the stored key without Node or printing its value:
+
+```bash
+if pushary_key_check=$(/usr/bin/plutil -extract apiKey raw -expect string -o - ~/.pushary/config.json 2>/dev/null); then
+  printf '%s\n' "$pushary_key_check" | /usr/bin/awk 'NF { found=1 } END { exit !found }' && echo keyed
+fi
+unset pushary_key_check
+```
+
+When Node is available, other Unix platforms can check the stored key with:
 
-The third says a key is stored **and is not empty**. Test the value, not the file.
+```bash
+node -e "try{process.exit(JSON.parse(require('fs').readFileSync(process.env.HOME+'/.pushary/config.json','utf8')).apiKey?.trim()?0:1)}catch{process.exit(1)}" && echo keyed
+```
+
+In PowerShell, check for a nonempty environment/stored key without printing it;
+use `Get-Content` and `ConvertFrom-Json` for the config in `$env:USERPROFILE`.
+Check `Get-Command node,npm` before choosing the terminal installer.
+
+The stored-key and bridge tests answer different questions.
+
+The stored-key test says a key is stored **and is not empty**. Test the value, not the file.
 The file stays behind after a logout removes the key. A test for the file alone
 tells a logged-out user they are ready.
 
-The fourth says the Mac app is installed here. Only the Mac app writes that file.
+The bridge test says the Mac app is installed here. Only the Mac app writes that file.
 
 Check the environment before the stored key. An exported key wins over a stored
 one. Never print the key itself.
@@ -189,14 +215,22 @@ Then take one branch.
 
 ### Branch 1. `key-in-env`, `keyed`, or `mac-app`
 
-This machine is set up. Offer no install. Do not run `setup` again.
+This machine has an existing installation or credential. Offer no new install.
+Verify its readiness before reporting success. Do not run `setup` again.
 
 `mac-app` counts on its own. The Mac app signs in for the user. It writes the key
 into the agent configuration files it wires, not into `~/.pushary/config.json`. A
-machine the app set up therefore prints `mac-app` and nothing else. Treat it as
-ready.
+machine the app set up therefore prints `mac-app` and nothing else. The locator
+proves installation, not sign-in, entitlement, current agent admission or delivery.
+
+For `mac-app` without Node/npm, open Pushary and check the intended account,
+subscription and Agents connection state there. Use the native app to connect or
+repair the selected agents and phone. Then send a harmless question from the
+current agent and confirm its returned answer. Do not install Node to inspect
+the native setup and do not claim a CLI status exit code when no CLI ran.
 
-Check it with `npx pushary@latest status --json`. The exit code is the answer:
+When Node/npm are available, check it with `npx pushary@latest status --json`.
+The exit code is the answer:
 
 | Code | Meaning |
 | --- | --- |
@@ -217,7 +251,7 @@ grep -lq pushary-bridge ~/.claude/settings.json ~/.gemini/settings.json ~/.curso
 
 If the app owns them, `setup` would keep them and write almost nothing, so telling the user to re-run it is bad advice. Point them at the Pushary app instead.
 
-### Branch 2. `darwin`, no key, no `mac-app`
+### Branch 2. `Darwin`, no key, no `mac-app`
 
 Offer the Mac app first. It needs no Node and no terminal. It writes the agent configuration itself, and it answers questions in the notch at the desk.
 
@@ -229,7 +263,7 @@ They can also download it from https://pushary.com/download. It needs macOS 14 o
 
 The command line works on macOS too. Offer it if the user prefers the terminal, or if the user runs Hermes, because Hermes needs a Python the app cannot install.
 
-### Branch 3. `linux` or `win32`
+### Branch 3. `Linux` or `Windows_NT`
 
 There is no Mac app for these machines. Use the command line. It is fully supported.
 
@@ -244,7 +278,7 @@ Node 20.17+, 22.13+ or 23.5+ is necessary. Then the user needs a phone to answer
 
 On Windows, setup writes no shell file, so `~/.pushary/config.json` is the only key store. On a Linux machine with no screen, browser login does not work, but the pairing QR does.
 
-### Branch 4. `darwin`, `mac-app`, and the user asked for the command line
+### Branch 4. `Darwin`, `mac-app`, and the user asked for the command line
 
 Run `setup`. It reads the key the app signed in with, so it mints no second key, and it keeps the hooks the app owns. Pass `--take-over-hooks` only when the user wants the command line to own them instead.
 

package/data/vscode-plugin/skills/pushary/SKILL.md

@@ -167,20 +167,46 @@ Put a boundary that is not a file path in `promises`, never in `allowedPaths`. R
 
 **Look at the machine first. Do not guess the install path.** Run these. Each one is read-only and fast. Run them as separate commands.
 
+Use `uname -s` in a Unix shell (`Darwin` is Mac, `Linux` is Linux). In
+PowerShell, inspect `$env:OS` (`Windows_NT` is Windows). Platform discovery must
+not depend on Node: the native Mac route does not require it.
+
+In a Unix shell, run these separately:
+
 ```bash
-node -p "process.platform"
+uname -s
 [ -n "${PUSHARY_API_KEY:+x}" ] && echo key-in-env
-node -e "try{process.exit(JSON.parse(require('fs').readFileSync(process.env.HOME+'/.pushary/config.json','utf8')).apiKey?.trim()?0:1)}catch{process.exit(1)}" && echo keyed
+command -v node >/dev/null 2>&1 && echo node-available
+command -v npm >/dev/null 2>&1 && echo npm-available
 test -x ~/.pushary/bin/pushary-bridge && echo mac-app
 ```
 
-The third and fourth tests answer different questions.
+On Mac, check the stored key without Node or printing its value:
+
+```bash
+if pushary_key_check=$(/usr/bin/plutil -extract apiKey raw -expect string -o - ~/.pushary/config.json 2>/dev/null); then
+  printf '%s\n' "$pushary_key_check" | /usr/bin/awk 'NF { found=1 } END { exit !found }' && echo keyed
+fi
+unset pushary_key_check
+```
+
+When Node is available, other Unix platforms can check the stored key with:
 
-The third says a key is stored **and is not empty**. Test the value, not the file.
+```bash
+node -e "try{process.exit(JSON.parse(require('fs').readFileSync(process.env.HOME+'/.pushary/config.json','utf8')).apiKey?.trim()?0:1)}catch{process.exit(1)}" && echo keyed
+```
+
+In PowerShell, check for a nonempty environment/stored key without printing it;
+use `Get-Content` and `ConvertFrom-Json` for the config in `$env:USERPROFILE`.
+Check `Get-Command node,npm` before choosing the terminal installer.
+
+The stored-key and bridge tests answer different questions.
+
+The stored-key test says a key is stored **and is not empty**. Test the value, not the file.
 The file stays behind after a logout removes the key. A test for the file alone
 tells a logged-out user they are ready.
 
-The fourth says the Mac app is installed here. Only the Mac app writes that file.
+The bridge test says the Mac app is installed here. Only the Mac app writes that file.
 
 Check the environment before the stored key. An exported key wins over a stored
 one. Never print the key itself.
@@ -189,14 +215,22 @@ Then take one branch.
 
 ### Branch 1. `key-in-env`, `keyed`, or `mac-app`
 
-This machine is set up. Offer no install. Do not run `setup` again.
+This machine has an existing installation or credential. Offer no new install.
+Verify its readiness before reporting success. Do not run `setup` again.
 
 `mac-app` counts on its own. The Mac app signs in for the user. It writes the key
 into the agent configuration files it wires, not into `~/.pushary/config.json`. A
-machine the app set up therefore prints `mac-app` and nothing else. Treat it as
-ready.
+machine the app set up therefore prints `mac-app` and nothing else. The locator
+proves installation, not sign-in, entitlement, current agent admission or delivery.
+
+For `mac-app` without Node/npm, open Pushary and check the intended account,
+subscription and Agents connection state there. Use the native app to connect or
+repair the selected agents and phone. Then send a harmless question from the
+current agent and confirm its returned answer. Do not install Node to inspect
+the native setup and do not claim a CLI status exit code when no CLI ran.
 
-Check it with `npx pushary@latest status --json`. The exit code is the answer:
+When Node/npm are available, check it with `npx pushary@latest status --json`.
+The exit code is the answer:
 
 | Code | Meaning |
 | --- | --- |
@@ -217,7 +251,7 @@ grep -lq pushary-bridge ~/.claude/settings.json ~/.gemini/settings.json ~/.curso
 
 If the app owns them, `setup` would keep them and write almost nothing, so telling the user to re-run it is bad advice. Point them at the Pushary app instead.
 
-### Branch 2. `darwin`, no key, no `mac-app`
+### Branch 2. `Darwin`, no key, no `mac-app`
 
 Offer the Mac app first. It needs no Node and no terminal. It writes the agent configuration itself, and it answers questions in the notch at the desk.
 
@@ -229,7 +263,7 @@ They can also download it from https://pushary.com/download. It needs macOS 14 o
 
 The command line works on macOS too. Offer it if the user prefers the terminal, or if the user runs Hermes, because Hermes needs a Python the app cannot install.
 
-### Branch 3. `linux` or `win32`
+### Branch 3. `Linux` or `Windows_NT`
 
 There is no Mac app for these machines. Use the command line. It is fully supported.
 
@@ -244,7 +278,7 @@ Node 20.17+, 22.13+ or 23.5+ is necessary. Then the user needs a phone to answer
 
 On Windows, setup writes no shell file, so `~/.pushary/config.json` is the only key store. On a Linux machine with no screen, browser login does not work, but the pairing QR does.
 
-### Branch 4. `darwin`, `mac-app`, and the user asked for the command line
+### Branch 4. `Darwin`, `mac-app`, and the user asked for the command line
 
 Run `setup`. It reads the key the app signed in with, so it mints no second key, and it keeps the hooks the app owns. Pass `--take-over-hooks` only when the user wants the command line to own them instead.
 

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-5L7H32JK.js";
+} from "../chunk-75UCMLT5.js";
 import {
   readHookInput
-} from "../chunk-LSB66XQC.js";
-import "../chunk-2FOAQ64R.js";
-import "../chunk-VTR4VRL2.js";
-import "../chunk-CJQEJWLU.js";
-import "../chunk-OUWDJIJF.js";
-import "../chunk-LRLF6PZ2.js";
-import "../chunk-AVQ6ETA7.js";
+} from "../chunk-ALSIMOFS.js";
+import "../chunk-GSBOLJZ4.js";
+import "../chunk-DWQYCOPI.js";
+import "../chunk-VFNYTVTJ.js";
+import "../chunk-7447DYNW.js";
+import "../chunk-EPVY3JU3.js";
+import "../chunk-MRR4NQ3H.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-BJMVQ6D5.js";
-import "../chunk-TJXCBTL4.js";
-import "../chunk-UM2HNUJA.js";
-import "../chunk-WJUYWTNT.js";
-import "../chunk-BUOLA2AM.js";
+import "../chunk-SAHD5DYW.js";
+import "../chunk-FXJ5SEQT.js";
+import "../chunk-OS6AE2MR.js";
+import "../chunk-35RJKPIC.js";
+import "../chunk-IDGESFKZ.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-GMVZYB3W.js";
-import "../chunk-OSVDGVLL.js";
-import "../chunk-KMTSU366.js";
-import "../chunk-Y3OZ3CT6.js";
+import "../chunk-IKJJB4QG.js";
+import "../chunk-X427XA76.js";
+import "../chunk-4JOWKPUF.js";
+import "../chunk-464FX6W5.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-GVIPEBEL.js";
-import "../chunk-TILXDMUR.js";
-import "../chunk-35CMXPES.js";
-import "../chunk-YFEHKEGQ.js";
+import "../chunk-FEICGRNI.js";
+import "../chunk-SYUHM6V3.js";
+import "../chunk-4WGKAGIU.js";
+import "../chunk-NTWTU6FA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-S3DP6DCZ.js";
-import "../chunk-CBOHZ6NY.js";
+import "../chunk-KBRKQMCI.js";
+import "../chunk-SRRJLA24.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-TXKAPRIA.js";
-import "../chunk-QOMUEL44.js";
-import "../chunk-H7QTZTIE.js";
+import "../chunk-5EX2SD5N.js";
+import "../chunk-2ROXUEZV.js";
+import "../chunk-TDLEFGAM.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,39 +5,39 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-5L7H32JK.js";
+} from "../chunk-75UCMLT5.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-XH7NMH3Q.js";
+} from "../chunk-CJCVPCOB.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-BUOLA2AM.js";
+} from "../chunk-IDGESFKZ.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-GMVZYB3W.js";
+import "../chunk-IKJJB4QG.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-S3DP6DCZ.js";
+import "../chunk-KBRKQMCI.js";
 import {
   claudeSettings
-} from "../chunk-CBOHZ6NY.js";
+} from "../chunk-SRRJLA24.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-AQFEP65J.js";
-import "../chunk-TXKAPRIA.js";
-import "../chunk-QOMUEL44.js";
+import "../chunk-5EX2SD5N.js";
+import "../chunk-2ROXUEZV.js";
 import {
   isRecord
-} from "../chunk-H7QTZTIE.js";
+} from "../chunk-TDLEFGAM.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,39 +8,39 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-PRVG3COH.js";
+} from "../chunk-D3TVRNZC.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-AZMHKUUU.js";
+} from "../chunk-MG523AVN.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-2FOAQ64R.js";
-import "../chunk-VTR4VRL2.js";
+} from "../chunk-GSBOLJZ4.js";
+import "../chunk-DWQYCOPI.js";
 import {
   ensureDaemonRunning
-} from "../chunk-CJQEJWLU.js";
+} from "../chunk-VFNYTVTJ.js";
 import {
   encryptRecord
-} from "../chunk-OUWDJIJF.js";
-import "../chunk-LRLF6PZ2.js";
+} from "../chunk-7447DYNW.js";
+import "../chunk-EPVY3JU3.js";
 import {
   transcriptsEnabled
-} from "../chunk-AVQ6ETA7.js";
+} from "../chunk-MRR4NQ3H.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-TJXCBTL4.js";
-import "../chunk-UM2HNUJA.js";
-import "../chunk-WJUYWTNT.js";
-import "../chunk-BUOLA2AM.js";
+import "../chunk-FXJ5SEQT.js";
+import "../chunk-OS6AE2MR.js";
+import "../chunk-35RJKPIC.js";
+import "../chunk-IDGESFKZ.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-GMVZYB3W.js";
+import "../chunk-IKJJB4QG.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -58,48 +58,50 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-OSVDGVLL.js";
-import "../chunk-KMTSU366.js";
+} from "../chunk-X427XA76.js";
+import "../chunk-4JOWKPUF.js";
 import {
   askUser,
   cancelQuestion,
+  isAwayPaused,
   isDecisionStopped,
   isLocalQuestionHandoff,
   nextLongPollMs,
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-Y3OZ3CT6.js";
+} from "../chunk-464FX6W5.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-GVIPEBEL.js";
-import "../chunk-TILXDMUR.js";
-import "../chunk-35CMXPES.js";
+} from "../chunk-FEICGRNI.js";
+import "../chunk-SYUHM6V3.js";
+import "../chunk-4WGKAGIU.js";
 import {
   getMachineId
-} from "../chunk-YFEHKEGQ.js";
+} from "../chunk-NTWTU6FA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-S3DP6DCZ.js";
-import "../chunk-CBOHZ6NY.js";
+import "../chunk-KBRKQMCI.js";
+import "../chunk-SRRJLA24.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-TXKAPRIA.js";
+} from "../chunk-5EX2SD5N.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-QOMUEL44.js";
+} from "../chunk-2ROXUEZV.js";
 import {
   DECISION_STOP_REASON,
   HAND_BACK_WITHOUT_A_PROMPT,
   KILL_REASON,
+  SESSION_PAUSED_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
   redactSecretsFromContent,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-H7QTZTIE.js";
+} from "../chunk-TDLEFGAM.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {
@@ -431,6 +433,7 @@ var BoundedInputQueue = class {
 
 // src/wrapper/approver.ts
 var DEFAULT_MAX_CONCURRENT = 16;
+var NO_APPROVAL_IN_TIME = "No approval received in time";
 var NO_LOCAL_APPROVAL_UI = "This remote session has no local approval UI. Continue in an interactive session or choose a mode that permits remote approval.";
 var SUBSCRIPTION_REQUIRED_NO_LOCAL_APPROVAL_UI = "Your Pushary workspace has no active subscription, so approvals cannot reach your phone, and this remote session has no local approval UI. Continue in an interactive session.";
 var DEFAULT_APPROVAL_WINDOW_MS = 5 * 6e4;
@@ -456,7 +459,7 @@ var createRemoteApprover = (deps) => {
     const ceiling = policy.timeoutAction === "wait" ? MAX_APPROVAL_WINDOW_MS : base;
     return Math.min(Math.max(base, 15e3), Math.max(ceiling, 15e3));
   };
-  const applyTimeout = (policy, input) => timeoutActionWithoutLocalPrompt(policy) === "approve" ? allow(input) : deny("No approval received in time");
+  const applyTimeout = (policy, input, paused) => timeoutActionWithoutLocalPrompt(policy) === "approve" ? allow(input) : deny(paused ? SESSION_PAUSED_REASON : NO_APPROVAL_IN_TIME);
   const waitForPhone = async (entry, correlationId, windowMs) => {
     const deadline = now() + windowMs;
     while (now() < deadline && !entry.controller.signal.aborted) {
@@ -558,7 +561,7 @@ var createRemoteApprover = (deps) => {
         return answer.value === "yes" ? allow(input) : deny("Denied from your phone");
       }
       if (localHandoff) return deny(NO_LOCAL_APPROVAL_UI);
-      return applyTimeout(policy, input);
+      return applyTimeout(policy, input, isAwayPaused(question));
     } catch {
       return deny("Approval unavailable; denied by default");
     } finally {