@pushary/agent-hooks 1.9.45 → 1.9.47

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 1.9.47
+
+- `pushary codex`: when Codex asks to approve a call Pushary already allows (your rules, a preset, or a read-only command), it is approved for you once, as the Codex hook already does. A file change is never approved this way, and neither is a request Codex flags as needing a person. The kill switch and deny rules are unchanged. This needs the matching server.
+- `pushary codex`: a command Codex runs through a login shell (`/bin/zsh -lc 'git push origin main'`) is asked about and matched against your rules as the command itself, so a rule such as `Bash(git push*)` applies to it. This needs the matching server.
+- `pushary codex`: an approval Pushary hands back to Codex's own prompt is no longer reported as a failure in the Codex screen.
+- `pushary codex --desktop` no longer throws while stopping when the Codex engine's processes have exited but are not yet reaped, which macOS reports as a permission error.
+
+## 1.9.46
+
+- A command that feeds text to a database client or a shell through a pipe, a heredoc or a here-string is judged together with that text again. Under the Autonomous preset or a rule that allows everything, `echo "DROP TABLE users;" | psql app` asks a person, as it did before 1.9.39. A pipeline that only reads, such as `npm test | grep release`, still runs unasked.
+
 ## 1.9.45
 
 - Add an opt-in experimental Codex Desktop launch with `pushary codex --desktop`. Quit Desktop first; the bridge uses its supported bundled engine and forwards supported native permissions through Pushary.

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-335ZDJ7R.js";
+} from "../chunk-7VLY6RHG.js";
 import {
   readHookInput
-} from "../chunk-EH5ZDG6V.js";
-import "../chunk-3PM62C2R.js";
+} from "../chunk-MZQ5M6F6.js";
+import "../chunk-CVCOZWSB.js";
 import "../chunk-DWQYCOPI.js";
-import "../chunk-RBJWPUI6.js";
-import "../chunk-AUOSFZJ3.js";
-import "../chunk-ASK2MSD2.js";
-import "../chunk-5DCZL3BC.js";
-import "../chunk-OHFC3GJY.js";
-import "../chunk-U45OINYS.js";
+import "../chunk-TP5SLM2I.js";
+import "../chunk-RDVDW3WK.js";
+import "../chunk-FDDZEYGM.js";
+import "../chunk-PHKISQPB.js";
+import "../chunk-3KSN65VJ.js";
+import "../chunk-DDS472RO.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-7SGYCU5C.js";
-import "../chunk-YK7FGPYS.js";
-import "../chunk-SIN7NJD7.js";
-import "../chunk-RFQWB5ZV.js";
+import "../chunk-4MJ46JA7.js";
+import "../chunk-S3657KK2.js";
+import "../chunk-DRQVZHWE.js";
+import "../chunk-T3QKLW3M.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-GZSSAY6N.js";
-import "../chunk-HHX6IRSH.js";
-import "../chunk-CFMCV6Z7.js";
-import "../chunk-CDERSTBO.js";
+import "../chunk-ZR2EPWW4.js";
+import "../chunk-6W64IVG3.js";
+import "../chunk-ADKWE35P.js";
+import "../chunk-GLVPA4EK.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-SFQSOBLM.js";
-import "../chunk-PWUIPQ2I.js";
-import "../chunk-6TYKZ4DN.js";
-import "../chunk-4A6VUVXV.js";
+import "../chunk-6VFP72GX.js";
+import "../chunk-KQDHOQRG.js";
+import "../chunk-FY6ZTTDQ.js";
+import "../chunk-VQZ4FP6Z.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-IOVJVGIT.js";
+import "../chunk-MCL5IS6A.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-EWC4P4ZL.js";
-import "../chunk-57M4ERJK.js";
-import "../chunk-K7EGWMDU.js";
+import "../chunk-PRQMACC7.js";
+import "../chunk-VE4LQ23C.js";
+import "../chunk-DY5PQSQB.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,7 +5,7 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-335ZDJ7R.js";
+} from "../chunk-7VLY6RHG.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
@@ -13,31 +13,31 @@ import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-U45OINYS.js";
+} from "../chunk-DDS472RO.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-YK7FGPYS.js";
+import "../chunk-S3657KK2.js";
 import {
   exitOnHelpFlag
-} from "../chunk-ZSY6BWUD.js";
-import "../chunk-CFMCV6Z7.js";
+} from "../chunk-7JUISFZ7.js";
+import "../chunk-ADKWE35P.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
 import {
   claudeSettings
-} from "../chunk-IOVJVGIT.js";
+} from "../chunk-MCL5IS6A.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-AQFEP65J.js";
-import "../chunk-EWC4P4ZL.js";
-import "../chunk-57M4ERJK.js";
+import "../chunk-PRQMACC7.js";
+import "../chunk-VE4LQ23C.js";
 import {
   isRecord
-} from "../chunk-K7EGWMDU.js";
+} from "../chunk-DY5PQSQB.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -6,36 +6,36 @@ import {
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-ECFEYB6Z.js";
+} from "../chunk-R7AMICLS.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-3PM62C2R.js";
+} from "../chunk-CVCOZWSB.js";
 import "../chunk-DWQYCOPI.js";
 import {
   ensureDaemonRunning
-} from "../chunk-AUOSFZJ3.js";
-import "../chunk-ASK2MSD2.js";
-import "../chunk-5DCZL3BC.js";
-import "../chunk-OHFC3GJY.js";
-import "../chunk-U45OINYS.js";
+} from "../chunk-RDVDW3WK.js";
+import "../chunk-FDDZEYGM.js";
+import "../chunk-PHKISQPB.js";
+import "../chunk-3KSN65VJ.js";
+import "../chunk-DDS472RO.js";
 import "../chunk-GMXKITVA.js";
 import {
   transcriptsEnabled
-} from "../chunk-7SGYCU5C.js";
-import "../chunk-YK7FGPYS.js";
+} from "../chunk-4MJ46JA7.js";
+import "../chunk-S3657KK2.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-H4ODQD3Y.js";
+} from "../chunk-P4RKBBHE.js";
 import {
   encryptRecord
-} from "../chunk-SIN7NJD7.js";
-import "../chunk-RFQWB5ZV.js";
+} from "../chunk-DRQVZHWE.js";
+import "../chunk-T3QKLW3M.js";
 import {
   needsShell,
   spawnClaude
@@ -57,9 +57,9 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-GZSSAY6N.js";
-import "../chunk-HHX6IRSH.js";
-import "../chunk-CFMCV6Z7.js";
+} from "../chunk-ZR2EPWW4.js";
+import "../chunk-6W64IVG3.js";
+import "../chunk-ADKWE35P.js";
 import {
   askUser,
   cancelQuestion,
@@ -71,27 +71,27 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-CDERSTBO.js";
+} from "../chunk-GLVPA4EK.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-SFQSOBLM.js";
-import "../chunk-PWUIPQ2I.js";
-import "../chunk-6TYKZ4DN.js";
+} from "../chunk-6VFP72GX.js";
+import "../chunk-KQDHOQRG.js";
+import "../chunk-FY6ZTTDQ.js";
 import {
   getMachineId
-} from "../chunk-4A6VUVXV.js";
+} from "../chunk-VQZ4FP6Z.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-IOVJVGIT.js";
+import "../chunk-MCL5IS6A.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-EWC4P4ZL.js";
+} from "../chunk-PRQMACC7.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-57M4ERJK.js";
+} from "../chunk-VE4LQ23C.js";
 import {
   DECISION_STOP_REASON,
   HAND_BACK_WITHOUT_A_PROMPT,
@@ -101,7 +101,7 @@ import {
   redactSecretsFromContent,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-K7EGWMDU.js";
+} from "../chunk-DY5PQSQB.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {