@pushary/agent-hooks 1.9.57 → 1.9.58

package/dist/{chunk-HCIB4YNB.js → chunk-5DZHKNBU.js}

@@ -1,6 +1,6 @@
 import {
   readExistingMachineId
-} from "./chunk-SQ5G6A6K.js";
+} from "./chunk-IJ6XKKQW.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";

package/dist/{chunk-QQYUWTYS.js → chunk-ATUZX4K7.js}

@@ -9,7 +9,7 @@ import {
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-TWLWDIFB.js";
+} from "./chunk-MYBCXDIL.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,

package/dist/{chunk-CB565EVO.js → chunk-CK5BCFQF.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-TWLWDIFB.js";
+} from "./chunk-MYBCXDIL.js";
 import {
   readJsonSafe
 } from "./chunk-QENTGE75.js";

package/dist/{chunk-AN6TVB2H.js → chunk-CSQJCXPX.js}

@@ -3,21 +3,21 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-DDQRYX2L.js";
+} from "./chunk-3KOPY2UQ.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-Z7Q36I4K.js";
+} from "./chunk-QP3XPS5U.js";
 import {
   readControlMode,
   readKeySource
 } from "./chunk-IRZ5FVWG.js";
 import {
   getMachineId
-} from "./chunk-SQ5G6A6K.js";
+} from "./chunk-IJ6XKKQW.js";
 import {
   getBaseUrl
 } from "./chunk-LVDC3RUE.js";

package/dist/chunk-CZULJ647.js

@@ -0,0 +1,378 @@
+import {
+  callMcpTool
+} from "./chunk-ZL3UR6M5.js";
+import {
+  NPX_LATEST_COMMAND
+} from "./chunk-5SFM6XB4.js";
+import {
+  classifyConfirmResponse,
+  isAnswerSource
+} from "./chunk-GZL3KEPC.js";
+
+// src/reach.ts
+var reachVerdict = (channels) => {
+  const { yours, site } = channels;
+  if (yours === null || site === null) {
+    return channels.phoneReachable || channels.webActive > 0 ? { kind: "yours" } : { kind: "nobody" };
+  }
+  if (yours.phoneReachable) return { kind: "yours" };
+  const solo = site.otherMembers === 0;
+  if (solo) {
+    return site.phoneReachable || site.webActive > 0 ? { kind: "yours" } : { kind: "nobody" };
+  }
+  if (site.appDevices === 0 && site.webActive === 0) return { kind: "nobody" };
+  if (site.webActive > 0 && !yours.webAttributable) {
+    return { kind: "unattributable", otherMembers: site.otherMembers };
+  }
+  return { kind: "others", otherMembers: site.otherMembers };
+};
+var reachesYou = (channels) => reachVerdict(channels).kind === "yours";
+var plural = (count, one, many = `${one}s`) => `${count} ${count === 1 ? one : many}`;
+var describeReach = (channels) => {
+  const verdict = reachVerdict(channels);
+  if (verdict.kind === "nobody") return "nothing can receive an approval";
+  const parts = [];
+  const own = channels.yours;
+  if (verdict.kind === "yours" && own !== null && own.appDevices > 0) {
+    const platforms = own.appPlatforms.length > 0 ? ` (${own.appPlatforms.join(", ")})` : "";
+    parts.push(`${plural(own.appDevices, "app device")}${platforms}`);
+  } else if (channels.appDevices > 0) {
+    const platforms = channels.appPlatforms.length > 0 ? ` (${channels.appPlatforms.join(", ")})` : "";
+    parts.push(`${plural(channels.appDevices, "app device")}${platforms}`);
+  }
+  if (channels.webPhone > 0) parts.push(`${plural(channels.webPhone, "browser")} on a phone`);
+  if (channels.webDesktop > 0) parts.push(`${plural(channels.webDesktop, "browser")} on a desktop`);
+  const summary = parts.length > 0 ? parts.join(", ") : "a device";
+  if (verdict.kind === "others") return `${summary}, none of them yours`;
+  if (verdict.kind === "unattributable") return `${summary}, and no way to tell whose`;
+  return summary;
+};
+var describeAppRepair = (verdict) => {
+  switch (verdict.kind) {
+    case "yours":
+      return null;
+    case "nobody":
+      return [
+        "Open the Pushary app, sign in, and allow notifications.",
+        `If this terminal was never paired with your phone, run: ${NPX_LATEST_COMMAND} setup --connect app`
+      ];
+    case "others":
+      return [
+        `Reachable devices belong to other members of this workspace (${verdict.otherMembers}).`,
+        "Sign in on the Pushary app with your own account so approvals can reach you."
+      ];
+    case "unattributable":
+      return [
+        "Something is reachable here, but not identifiably yours.",
+        "Sign in on the Pushary app so your approvals are routed to your device."
+      ];
+  }
+};
+var describeJustPairedRepair = (verdict) => {
+  if (verdict.kind === "nobody") {
+    return [
+      "The app asks for the notification permission after it grants the pairing.",
+      "Open the Pushary app and allow notifications. That is the whole remaining step."
+    ];
+  }
+  return describeAppRepair(verdict) ?? [];
+};
+
+// src/setup/verify.ts
+var plural2 = (count, one) => `${count} ${one}${count === 1 ? "" : "s"}`;
+var SETUP_AGENT_NAME = "Pushary setup";
+var ownAppPlatforms = (channels) => channels.yours?.appPlatforms ?? channels.appPlatforms;
+var describeRecipients = (push, channels) => {
+  const parts = [];
+  if (push.app > 0) {
+    const platforms = ownAppPlatforms(channels);
+    const suffix = platforms.length > 0 ? ` (${platforms.join(", ")})` : "";
+    parts.push(`${plural2(push.app, "app device")}${suffix}`);
+  }
+  if (push.web > 0) parts.push(plural2(push.web, "browser"));
+  return parts.length > 0 ? parts.join(" and ") : plural2(push.total, "device");
+};
+var classifyDelivery = (channels, push) => {
+  if (push.total <= 0) return { kind: "no-recipients" };
+  const verdict = reachVerdict(channels);
+  if (verdict.kind === "yours" && (push.app > 0 || channels.yours === null || channels.site?.otherMembers === 0)) {
+    return { kind: "delivered", recipients: push.total, deviceLabel: describeRecipients(push, channels) };
+  }
+  if (verdict.kind === "unattributable") {
+    return { kind: "unattributable", recipients: push.total, otherMembers: verdict.otherMembers };
+  }
+  if (verdict.kind === "others") {
+    return { kind: "others-only", recipients: push.total, otherMembers: verdict.otherMembers };
+  }
+  if (verdict.kind === "yours") {
+    const otherMembers = channels.site?.otherMembers ?? 0;
+    return { kind: "unattributable", recipients: push.total, otherMembers };
+  }
+  return { kind: "delivered", recipients: push.total, deviceLabel: describeRecipients(push, channels) };
+};
+var sendTestNotification = async (apiKey) => {
+  const result = await callMcpTool(apiKey, "send_notification", {
+    title: "Pushary is connected",
+    body: "This setup notification reached you. Agent hooks still need a real-agent check.",
+    agentName: SETUP_AGENT_NAME
+  }, { timeoutMs: 2e4 });
+  const toCount = (value) => typeof value === "number" && Number.isFinite(value) ? value : 0;
+  const app = toCount(result.delivery?.mobile?.recipients);
+  const web = toCount(result.delivery?.web?.recipients);
+  return { app, web, total: typeof result.sent === "number" ? result.sent : app + web };
+};
+var verifyDelivery = async (apiKey, channels, deps = {}) => {
+  const send = deps.send ?? sendTestNotification;
+  try {
+    return classifyDelivery(channels, await send(apiKey));
+  } catch (err) {
+    return { kind: "error", detail: err instanceof Error ? err.message : "send failed" };
+  }
+};
+var describeVerifyOutcome = (outcome) => {
+  switch (outcome.kind) {
+    case "delivered":
+      return { ok: true, message: `Delivered to ${outcome.deviceLabel}. Push works.`, next: [] };
+    case "no-recipients":
+      return {
+        ok: false,
+        message: "Nothing to deliver to. Agents are configured; approvals will fall back to the terminal.",
+        next: [
+          "Run pushary pair to pair your phone.",
+          "Then pushary doctor --roundtrip to test a synthetic question and answer."
+        ]
+      };
+    case "others-only":
+      return {
+        ok: false,
+        message: `Delivered to ${plural2(outcome.recipients, "device")} on this site, none of them yours.`,
+        next: [
+          `Approvals for your agent would wake one of your ${plural2(outcome.otherMembers, "teammate")}.`,
+          "Run pushary pair to pair your own phone."
+        ]
+      };
+    case "unattributable":
+      return {
+        ok: false,
+        message: `Delivered to ${plural2(outcome.recipients, "device")} on this site, and no way to tell whose.`,
+        next: [
+          "Browser subscriptions carry no owner, and this site has other members.",
+          "Install the Pushary app and pair it with pushary pair, or run pushary doctor --roundtrip to prove it reaches you."
+        ]
+      };
+    case "error":
+      return {
+        ok: false,
+        message: `Could not send the test notification (${outcome.detail}).`,
+        next: ["Agents are configured. Run pushary doctor once the connection is back."]
+      };
+  }
+};
+var ROUND_TRIP_QUESTION = "Pushary delivery test. Answer either way to test returning an answer. This does not test your agent hooks.";
+var ROUND_TRIP_TIMEOUT_MS = 55e3;
+var reportNoInterrupt = async () => {
+};
+var defaultAsk = (apiKey, agentName) => (
+  // wait:false so the poll is ours: the blocking form returns on the SITE's
+  // policy timeout, which a user may have set to seconds, and a setup check
+  // reporting "unanswered" after three seconds would be a lie about the product.
+  callMcpTool(apiKey, "ask_user", {
+    question: ROUND_TRIP_QUESTION,
+    type: "confirm",
+    agentName,
+    wait: false
+  }, { timeoutMs: 15e3 })
+);
+var defaultWait = (apiKey, correlationId) => callMcpTool(apiKey, "wait_for_answer", {
+  correlationId,
+  timeoutMs: ROUND_TRIP_TIMEOUT_MS
+}, { timeoutMs: ROUND_TRIP_TIMEOUT_MS + 5e3 });
+var defaultCancel = async (apiKey, correlationId) => {
+  await callMcpTool(apiKey, "cancel_question", { correlationId }, { timeoutMs: 1e4 }).catch(() => {
+  });
+};
+var answeredRoundTrip = (answer, correlationId, latencyMs) => {
+  if (answer.value === void 0 || classifyConfirmResponse(answer.value) === null) {
+    return { kind: "error", detail: "the server reported an answer without a valid Yes, No or defer value" };
+  }
+  return {
+    kind: "answered",
+    value: answer.value,
+    latencyMs,
+    correlationId,
+    ...isAnswerSource(answer.answerSource) ? { answerSource: answer.answerSource } : {}
+  };
+};
+var verifyRoundTrip = async (apiKey, agentName = SETUP_AGENT_NAME, deps = {}) => {
+  const ask = deps.ask ?? defaultAsk;
+  const wait = deps.wait ?? defaultWait;
+  const cancel = deps.cancel ?? defaultCancel;
+  const interrupted = deps.interrupted ?? reportNoInterrupt;
+  const now = deps.now ?? Date.now;
+  const started = now();
+  let asked;
+  try {
+    asked = await ask(apiKey, agentName);
+  } catch (err) {
+    return { kind: "error", detail: err instanceof Error ? err.message : "ask failed" };
+  }
+  let shutdown;
+  const stop = (code) => {
+    if (shutdown) return;
+    shutdown = (async () => {
+      let timer;
+      try {
+        await Promise.race([
+          Promise.all([
+            cancel(apiKey, asked.correlationId).catch(() => {
+            }),
+            interrupted(code).catch(() => {
+            })
+          ]),
+          new Promise((resolve) => {
+            timer = setTimeout(resolve, 4e3);
+          })
+        ]);
+      } finally {
+        clearTimeout(timer);
+        process.stderr.write("Delivery test interrupted. Cleanup was attempted; an unresolved question expires automatically.\n");
+        process.exit(code);
+      }
+    })();
+  };
+  const onInterrupt = () => stop(130);
+  const onTerminate = () => stop(143);
+  if (asked.correlationId) {
+    process.on("SIGINT", onInterrupt);
+    process.on("SIGTERM", onTerminate);
+  }
+  let answerObserved = false;
+  try {
+    if (asked.noDevices || asked.warning) return { kind: "no-recipients" };
+    if (asked.mode === "notify_only" || asked.status === "notified") return { kind: "notify-only" };
+    if (!asked.correlationId) return { kind: "error", detail: "no correlationId returned" };
+    const answer = asked.answered === true ? asked : await wait(apiKey, asked.correlationId);
+    if (answer.answered === true) {
+      const outcome = answeredRoundTrip(answer, asked.correlationId, now() - started);
+      answerObserved = outcome.kind === "answered";
+      return outcome;
+    }
+    return { kind: "unanswered" };
+  } catch (err) {
+    return { kind: "error", detail: err instanceof Error ? err.message : "wait failed" };
+  } finally {
+    if (shutdown) await shutdown;
+    process.off("SIGINT", onInterrupt);
+    process.off("SIGTERM", onTerminate);
+    if (!answerObserved && asked.correlationId) await cancel(apiKey, asked.correlationId).catch(() => {
+    });
+  }
+};
+var describeAnswerSource = (source) => {
+  switch (source) {
+    case "mobile_app":
+    case "mobile_background":
+      return "Answered on your phone.";
+    case "mac_app":
+      return "Answered on your Mac.";
+    case "sandbox":
+      return "This was a simulated sandbox answer.";
+    default:
+      return source ? `Answer source: ${source}. This was a synthetic test.` : "The answering surface was not reported. This was a synthetic test.";
+  }
+};
+var NOTIFICATION_ANSWER_STEPS = /* @__PURE__ */ new Map([
+  ["ios", "Press and hold the notification, then tap Approve."],
+  ["android", "Expand the notification, then tap Approve."]
+]);
+var EITHER_PHONE_ANSWER_STEP = "Press and hold the notification on iPhone, or expand it on Android, then tap Approve.";
+var notificationAnswerStep = (appPlatforms) => {
+  const platforms = [...new Set(appPlatforms)];
+  const [onlyPlatform] = platforms;
+  if (onlyPlatform === void 0) return null;
+  if (platforms.length > 1) return EITHER_PHONE_ANSWER_STEP;
+  return NOTIFICATION_ANSWER_STEPS.get(onlyPlatform) ?? EITHER_PHONE_ANSWER_STEP;
+};
+var WAITING_FOR_TAP = "Waiting for you to tap the notification";
+var WAITING_FOR_ANSWER = "Waiting for your answer";
+var describeAnswerTestPrompt = (appPlatforms) => {
+  const step = notificationAnswerStep(appPlatforms);
+  return { step, waiting: step === null ? WAITING_FOR_TAP : WAITING_FOR_ANSWER };
+};
+var CHECK_THE_NOTIFICATION_OPENED = "Check the notification actually opened something you could tap, then run pushary doctor --roundtrip.";
+var unansweredNextStep = (appPlatforms) => {
+  const step = notificationAnswerStep(appPlatforms);
+  return step === null ? CHECK_THE_NOTIFICATION_OPENED : `To send another one, run pushary doctor --roundtrip. ${step}`;
+};
+var describeRoundTripOutcome = (outcome, appPlatforms = []) => {
+  switch (outcome.kind) {
+    case "answered":
+      return {
+        ok: true,
+        message: `Answered "${outcome.value}" in ${(outcome.latencyMs / 1e3).toFixed(1)}s. ${describeAnswerSource(outcome.answerSource)}`,
+        next: []
+      };
+    case "unanswered":
+      return {
+        ok: false,
+        message: "The question was sent and nothing came back.",
+        next: [
+          "A push that arrives and cannot be answered is the most common way this breaks, so this is worth resolving now.",
+          unansweredNextStep(appPlatforms)
+        ]
+      };
+    case "notify-only":
+      return {
+        ok: true,
+        message: "Sent. This site is in notify-only mode, so questions never wait for an answer.",
+        next: ["Switch with pushary mode push_first if you want approvals to hold for your phone."]
+      };
+    case "no-recipients":
+      return {
+        ok: false,
+        message: "Nothing to ask. No phone or browser is connected to this site.",
+        next: [
+          "Run pushary pair to pair your phone.",
+          "Or pushary pair --app if you already have the Pushary app."
+        ]
+      };
+    case "error":
+      return {
+        ok: false,
+        message: `Could not complete the round trip (${outcome.detail}).`,
+        next: ["Agents are configured. Run pushary doctor --roundtrip once the connection is back."]
+      };
+  }
+};
+var describeRoundTrip = (outcome, appPlatforms = []) => {
+  const report = describeRoundTripOutcome(outcome, appPlatforms);
+  return { ...report, next: [...report.next, "Agent hook activation remains unverified. Restart your agent and check one real approval."] };
+};
+var roundTripEvidence = (outcome) => ({
+  kind: outcome?.kind ?? "skipped",
+  ...outcome?.kind === "answered" ? {
+    correlationId: outcome.correlationId ?? null,
+    answerSource: outcome.answerSource ?? null,
+    value: outcome.value,
+    latencyMs: outcome.latencyMs
+  } : {},
+  hookActivation: "unverified"
+});
+
+export {
+  reachVerdict,
+  reachesYou,
+  describeReach,
+  describeAppRepair,
+  describeJustPairedRepair,
+  SETUP_AGENT_NAME,
+  ownAppPlatforms,
+  verifyDelivery,
+  describeVerifyOutcome,
+  verifyRoundTrip,
+  notificationAnswerStep,
+  describeAnswerTestPrompt,
+  describeRoundTripOutcome,
+  describeRoundTrip,
+  roundTripEvidence
+};

package/dist/{chunk-6QM54CSJ.js → chunk-DQ565WFA.js}

@@ -1,7 +1,7 @@
 import {
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-A54W5A74.js";
+} from "./chunk-ZL3UR6M5.js";
 import {
   CLIENT_REPORT_DISABLE_ENV,
   isDisabledByEnv
@@ -9,10 +9,10 @@ import {
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-HCIB4YNB.js";
+} from "./chunk-5DZHKNBU.js";
 import {
   clientReportClaims
-} from "./chunk-TWLWDIFB.js";
+} from "./chunk-MYBCXDIL.js";
 import {
   getApiKey,
   getBaseUrl