@pushary/agent-hooks 1.9.6 → 1.9.8

package/dist/{chunk-6GERGJHF.js → chunk-EUW7JL2K.js}

@@ -1,11 +1,3 @@
-import {
-  pusharyHookExecutable
-} from "./chunk-D7SOOVHX.js";
-import {
-  isProtectedByScope,
-  registerHookEntry
-} from "./chunk-HJXZJF6O.js";
-
 // src/skills-cli.ts
 import { execSync } from "child_process";
 var PUSHARY_SKILL_SOURCE = "Pushary/pushary-skill";
@@ -33,28 +25,6 @@ var installAgentSkill = async (request, effects) => {
   return "packaged-copy";
 };
 
-// src/cursor-config.ts
-var hookCommandOf = (entry) => {
-  const command = entry && typeof entry === "object" && !Array.isArray(entry) ? entry.command : void 0;
-  return typeof command === "string" ? command : "";
-};
-var isPusharyCursorEntry = (entry) => pusharyHookExecutable(hookCommandOf(entry)) !== null;
-var registerCursorGate = (existing, entry) => registerHookEntry(existing, isPusharyCursorEntry, entry);
-var withoutPusharyCursorHooks = (hooks, scope) => {
-  let removed = 0;
-  const kept = {};
-  for (const [event, entries] of Object.entries(hooks)) {
-    if (!Array.isArray(entries)) {
-      kept[event] = entries;
-      continue;
-    }
-    const others = entries.filter((entry) => !isPusharyCursorEntry(entry) || isProtectedByScope(hookCommandOf(entry), scope));
-    removed += entries.length - others.length;
-    if (others.length > 0 || entries.length === 0) kept[event] = others;
-  }
-  return { hooks: kept, removed };
-};
-
 // src/cli/dry-run.ts
 import { execFileSync } from "child_process";
 import { rmSync, writeFileSync } from "fs";
@@ -92,8 +62,6 @@ export {
   PUSHARY_SKILL_NAME,
   installSkillViaSkillsCli,
   installAgentSkill,
-  registerCursorGate,
-  withoutPusharyCursorHooks,
   createGuards,
   describeSetupSideEffects
 };

package/dist/{chunk-75CA37FZ.js → chunk-FQ2GORVG.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-2QRE6QH2.js";
+} from "./chunk-5QUPKDI5.js";
 import {
   normalizeInstallSource
-} from "./chunk-Q4E56K4X.js";
+} from "./chunk-I5IJRMNV.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-WUKUXICK.js → chunk-HRULIYDU.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-ZPW4MJOV.js";
+} from "./chunk-MKTJEXZ3.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-L6USMDTW.js";
+} from "./chunk-7DVNSQWF.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-Q4E56K4X.js → chunk-I5IJRMNV.js}

@@ -154,6 +154,7 @@ var AGENTS = {
   fx: {
     ...defaults,
     label: "fx",
+    disconnectable: true,
     connectVia: "Local MCP bridge",
     setupCommand: PUSHARY_SETUP_COMMAND,
     capabilityNote: "fx has no hooks that other tools can register, so Pushary cannot answer fx's own approval prompts. Setup turns off fx's terminal question tool so fx's agent asks through Pushary. fx's full-access mode ignores that setting; there the agent is only instructed to ask through Pushary."
@@ -196,7 +197,7 @@ var AGENTS = {
     connectVia: "Native hooks + MCP",
     setupCommand: PUSHARY_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native PreToolUse hooks, plus PermissionRequest, over Qoder's superset of the Claude Code event list.",
-    capabilityNote: "Qoder documents no user-level instructions file, so the proactive-ask block is not installed. Hooks and MCP are unaffected. Like every agent in this family, the CLI wires it; the macOS app does not yet."
+    capabilityNote: "Qoder documents no user-level instructions file, so the proactive-ask block is not installed. Hooks and MCP are unaffected."
   },
   droid: {
     ...defaults,
@@ -262,10 +263,24 @@ var POLICY_AGENTS = [...Object.values(AGENTS).flatMap((agent) => agent.policyAge
 var AGENT_LABELS_BY_TYPE = Object.fromEntries(
   Object.entries(AGENTS).flatMap(([id, agent]) => agent.hasStoredIdentity ? [[id, agent.label]] : [])
 );
-var DISCONNECTABLE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.disconnectable ? [agent.hookSource] : []));
+var DISCONNECTABLE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.disconnectable && agent.hookSource !== null ? [agent.hookSource] : []));
 var REPO_AWARE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.repoAware ? [agent.policyAgent] : []));
 var MANAGED_PROVIDERS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.managedProvider ? [agent.hookSource] : []));
 var BRIDGE_HOOK_SOURCES = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.bridged ? [agent.hookSource] : []));
+var isAgentId = (value) => Object.keys(AGENTS).includes(value);
+var isHooklessDisconnectableAgent = (value) => isAgentId(value) && AGENTS[value].disconnectable && AGENTS[value].hookSource === null;
+var DISCONNECT_AGENT_IDS = Object.freeze([...DISCONNECTABLE_AGENTS, ...Object.keys(AGENTS).filter(isHooklessDisconnectableAgent)]);
+var agentIdCalled = (name) => isAgentId(name) ? name : Object.keys(AGENTS).filter(isAgentId).find((id) => AGENTS[id].hookSource === name) ?? null;
+var namesOfAgent = (id) => {
+  const source = AGENTS[id].hookSource;
+  return source === null ? [id] : [id, source];
+};
+var normalizeAgentId = (value, accepted) => {
+  const name = value.trim().toLowerCase();
+  const agent = agentIdCalled(name);
+  const names = agent === null ? [name] : namesOfAgent(agent);
+  return accepted.find((candidate) => names.includes(candidate)) ?? null;
+};
 
 // ../contracts/src/agent-wiring.ts
 var COMPATIBLE_AGENT_TYPES = ["qwen_code", "codebuddy", "qoder", "droid", "devin"];
@@ -697,6 +712,45 @@ var clientContextHeaders = (source) => {
   if (isClientPlatform(source.platform)) headers[CLIENT_CONTEXT_HEADERS.platform] = source.platform;
   return headers;
 };
+var AGENT_SITE_REJECTION_REASONS = [
+  "pairing_user_blank",
+  "pairing_user_mismatch",
+  "site_header_blank",
+  "device_token_blank",
+  "device_token_too_long",
+  "device_not_found",
+  "not_site_member",
+  "sandbox_site",
+  "no_current_site"
+];
+var AUTH_REJECTION_REASONS = [
+  "malformed_key",
+  "unknown_key",
+  "expired_key",
+  "scope_denied",
+  "oauth_rejected",
+  "site_not_found",
+  ...AGENT_SITE_REJECTION_REASONS
+];
+
+// ../contracts/src/declined-agents.ts
+var DECLINED_AGENTS_FILE = "declined-agents.json";
+var DECLINED_AGENTS_VERSION = 1;
+var isDeclinableAgent = (value) => typeof value === "string" && HOOK_SOURCES.includes(value);
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var canonicalAgents = (agents) => [...new Set(agents)].sort();
+var parseDeclinedAgents = (value) => {
+  if (!isRecord(value) || value.version !== DECLINED_AGENTS_VERSION || !Array.isArray(value.agents)) return [];
+  return canonicalAgents(value.agents.filter(isDeclinableAgent));
+};
+var declinedAgentsDocument = (agents) => ({
+  version: DECLINED_AGENTS_VERSION,
+  agents: canonicalAgents(agents)
+});
+var serializeDeclinedAgents = (agents) => `${JSON.stringify(declinedAgentsDocument(agents), null, 2)}
+`;
+var withDeclinedAgent = (agents, agent) => canonicalAgents([...agents, agent]);
+var withoutDeclinedAgent = (agents, agent) => agents.filter((candidate) => candidate !== agent);
 
 // ../contracts/src/index.ts
 var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
@@ -854,7 +908,7 @@ var CURSOR_GATE_EVENTS = ["beforeShellExecution", "beforeMCPExecution", "preTool
 var SUPPORT_EMAIL = "business@pushary.com";
 var SUPPORT_DISCORD = "https://discord.gg/9v3VvUByrr";
 var HOOK_LOCATOR_BINARY = "pushary-bridge";
-var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isRecord2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var HOOK_BATCH_MAX_BYTES = 4 * 1024 * 1024;
 var REPO_KEY_MAX_LENGTH = 200;
 var WILDCARD_TOOL_PATTERN = "*";
@@ -2222,7 +2276,7 @@ var settingsPermissionList = (permissions, kind) => {
 };
 var boundedUnion = (lists) => [...new Set(lists.flat())].slice(0, MAX_AGENT_PERMISSION_RULES_PER_KIND);
 var claudePermissionRulesFromSettings = (documents) => {
-  const permissionBlocks = documents.flatMap((document) => isRecord(document) && isRecord(document.permissions) ? [document.permissions] : []);
+  const permissionBlocks = documents.flatMap((document) => isRecord2(document) && isRecord2(document.permissions) ? [document.permissions] : []);
   const collect = (kind) => boundedUnion(permissionBlocks.map((permissions) => settingsPermissionList(permissions, kind)));
   return { allow: collect("allow"), ask: collect("ask"), deny: collect("deny") };
 };
@@ -2443,6 +2497,10 @@ var claudeElicitationOutput = (event, action, content) => ({
   }
 });
 var renderElicitationOutput = (event, action, content) => ELICITATION_EVENTS.includes(event) ? JSON.stringify(claudeElicitationOutput(event, action, content)) : void 0;
+var UNVERIFIABLE_APPROVAL_REASON = "Pushary could not create a verifiable approval. Retry the action.";
+var DECISION_STOP_REASON = "Approval was cancelled or became unavailable. Retry only after resolving it.";
+var WITHDRAWN_APPROVAL_REASON = "The phone question was withdrawn. Approve in the current client.";
+var claudeStoppedPreToolUseOutput = (reason) => stoppedOutput(claudePreToolUseOutput("deny", reason), reason);
 var ELICITATION_ANSWERABLE_MODE = "form";
 var ELICITATION_MIN_OPTIONS = 2;
 var ELICITATION_MAX_MULTI_QUESTIONS = 4;
@@ -2635,16 +2693,16 @@ var globalInstallTarget = (owner, ownName) => {
       return LEGACY_PACKAGE;
   }
 };
-var isRecord2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-var declaresOwnershipProbe = (bin) => isRecord2(bin) && typeof bin[OWNERSHIP_PROBE_COMMAND] === "string";
+var isRecord3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var declaresOwnershipProbe = (bin) => isRecord3(bin) && typeof bin[OWNERSHIP_PROBE_COMMAND] === "string";
 var cliManifestName = (manifest) => {
-  if (!isRecord2(manifest) || !isCliPackageName(manifest.name) || !declaresOwnershipProbe(manifest.bin)) return void 0;
+  if (!isRecord3(manifest) || !isCliPackageName(manifest.name) || !declaresOwnershipProbe(manifest.bin)) return void 0;
   return manifest.name;
 };
 var classifyGlobalFolder = (name, read) => {
   if (read.kind === "unreadable") return { kind: "unseen" };
   const { manifest } = read;
-  if (!isRecord2(manifest) || cliManifestName(manifest) !== name) return { kind: "foreign" };
+  if (!isRecord3(manifest) || cliManifestName(manifest) !== name) return { kind: "foreign" };
   return { kind: "ours", installed: { name, version: typeof manifest.version === "string" ? manifest.version : void 0 } };
 };
 var classifyGlobalInstall = (installed, owner) => {
@@ -2735,6 +2793,8 @@ export {
   DISCONNECTABLE_AGENTS,
   REPO_AWARE_AGENTS,
   MANAGED_PROVIDERS,
+  DISCONNECT_AGENT_IDS,
+  normalizeAgentId,
   PHONE_ANSWERED_TOOLS,
   canonicalToolName,
   toToolLookup,
@@ -2760,7 +2820,13 @@ export {
   isSetupConnectMode,
   CLIENT_REPORT_PATH,
   clientContextHeaders,
+  DECLINED_AGENTS_FILE,
+  parseDeclinedAgents,
+  serializeDeclinedAgents,
+  withDeclinedAgent,
+  withoutDeclinedAgent,
   normalizeKeyScope,
+  isApprovalMode,
   parseAgentQuestion,
   parseAgentQuestions,
   parseAgentQuestionAnswers,
@@ -2829,6 +2895,10 @@ export {
   claudePermissionRequestOutput,
   gateOutputFor,
   renderElicitationOutput,
+  UNVERIFIABLE_APPROVAL_REASON,
+  DECISION_STOP_REASON,
+  WITHDRAWN_APPROVAL_REASON,
+  claudeStoppedPreToolUseOutput,
   ELICITATION_ANSWERABLE_MODE,
   readElicitationFields,
   planElicitationAsk,

package/dist/{chunk-MKJ3RTUS.js → chunk-I6MJXLMY.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-HJXZJF6O.js";
+} from "./chunk-ZBHUHJG6.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-Q4E56K4X.js";
+} from "./chunk-I5IJRMNV.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;

package/dist/{chunk-YPXUD6DW.js → chunk-IAD2RT4L.js}

@@ -14,19 +14,19 @@ import {
 } from "./chunk-U4TMAANR.js";
 import {
   callMcpTool
-} from "./chunk-ZPW4MJOV.js";
+} from "./chunk-MKTJEXZ3.js";
 import {
   reportedInstallSource
-} from "./chunk-75CA37FZ.js";
+} from "./chunk-FQ2GORVG.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-L6USMDTW.js";
+} from "./chunk-7DVNSQWF.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS,
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-Q4E56K4X.js";
+} from "./chunk-I5IJRMNV.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {
@@ -155,7 +155,7 @@ var describeVerifyOutcome = (outcome) => {
         ok: false,
         message: "Nothing to deliver to. Agents are configured; approvals will fall back to the terminal.",
         next: [
-          "Run pushary connect to add your phone.",
+          "Run pushary pair to pair your phone.",
           "Then pushary doctor --roundtrip to test a synthetic question and answer."
         ]
       };
@@ -165,7 +165,7 @@ var describeVerifyOutcome = (outcome) => {
         message: `Delivered to ${plural2(outcome.recipients, "device")} on this site, none of them yours.`,
         next: [
           `Approvals for your agent would wake one of your ${plural2(outcome.otherMembers, "teammate")}.`,
-          "Run pushary connect to add your own phone."
+          "Run pushary pair to pair your own phone."
         ]
       };
     case "unattributable":
@@ -174,7 +174,7 @@ var describeVerifyOutcome = (outcome) => {
         message: `Delivered to ${plural2(outcome.recipients, "device")} on this site, and no way to tell whose.`,
         next: [
           "Browser subscriptions carry no owner, and this site has other members.",
-          "Install the Pushary app with pushary connect, or run pushary doctor --roundtrip to prove it reaches you."
+          "Install the Pushary app and pair it with pushary pair, or run pushary doctor --roundtrip to prove it reaches you."
         ]
       };
     case "error":
@@ -319,8 +319,8 @@ var describeRoundTripOutcome = (outcome) => {
         ok: false,
         message: "Nothing to ask. No phone or browser is connected to this site.",
         next: [
-          "Run pushary connect to add your phone.",
-          "Or pushary connect --app if you already have the Pushary app."
+          "Run pushary pair to pair your phone.",
+          "Or pushary pair --app if you already have the Pushary app."
         ]
       };
     case "error":
@@ -538,14 +538,14 @@ var waitForDevice = async (apiKey, baseline) => {
       consecutiveFailures = 0;
       const channels = probe.status;
       if (reachesYou(channels) || channels.webActive > baseline.webActive) {
-        stop(check, "Phone connected");
+        stop(check, "Phone paired");
         return { kind: "connected", channels };
       }
       await sleep(CONNECT_POLL_INTERVAL_MS);
     }
     stop(yellow("!"), "Didn't detect a connection yet");
     console.log(`  ${dim("Signed in on the app already? Open it and allow notifications.")}`);
-    console.log(`  ${dim("Signing in alone does not connect the phone. Then run")} ${cyan("pushary doctor")}${dim(".")}`);
+    console.log(`  ${dim("Signing in alone does not pair the phone. Then run")} ${cyan("pushary doctor")}${dim(".")}`);
     return { kind: "timeout" };
   } catch (err) {
     stop(yellow("!"), `Couldn't check connection ${dim(`(${err instanceof Error ? err.message : "network error"})`)}`);
@@ -588,14 +588,14 @@ var connectDevice = async (apiKey, options = {}) => {
   }
   const site = await fetchSite(apiKey);
   if (!site) {
-    console.log(`  ${yellow("!")} Couldn't load your subscribe link. Connect your phone later at ${cyan("pushary.com/download")}.`);
+    console.log(`  ${yellow("!")} Couldn't load your subscribe link. Pair your phone later at ${cyan("pushary.com/download")}.`);
     return phoneFailure("no_subscribe_link");
   }
   console.log();
   if (channels.site !== null && channels.site.otherMembers > 0 && channels.phoneReachable) {
     printSiteOnlyWarning(channels);
   } else {
-    console.log(`  ${bold("Connect your phone")}`);
+    console.log(`  ${bold("Pair your phone")}`);
     if (channels.webDesktop > 0) {
       console.log(`  ${dim("A browser on this computer is subscribed, but no phone is connected yet.")}`);
     }
@@ -727,7 +727,7 @@ var printConnectInstructions = async (apiKey) => {
   }
   const site = await fetchSite(apiKey);
   const target = site?.subscribeUrl ?? "https://pushary.com/download";
-  console.log(`  ${dim("Connect your phone for push notifications at")} ${cyan(target)}`);
+  console.log(`  ${dim("Pair your phone for push notifications at")} ${cyan(target)}`);
   console.log(`  ${dim("or get the Pushary app at")} ${cyan("https://pushary.com/download")}`);
   return phoneFailure("no_device");
 };

package/dist/{chunk-LBLCFD5K.js → chunk-IHFDPV7C.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-5BHROGRB.js";
+} from "./chunk-N4QSPI3B.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";
@@ -141,7 +141,7 @@ var writeLastShown = (at) => {
   }
 };
 var upgradeLine = (context) => `  ${context.liveAgents} agents running. A bell can't tell you which one needs you, and it can't reach your pocket.
-  pushary connect`;
+  pushary pair`;
 var upgradeNotice = (context, deps = {}) => {
   const env = deps.env ?? process.env;
   if (env.PUSHARY_BELL_QUIET === "1" || env.PUSHARY_BELL_QUIET === "true") return null;

package/dist/{chunk-BVCHY4OY.js → chunk-IHO3YQAN.js}

@@ -5,7 +5,7 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-CCDVL63C.js";
+} from "./chunk-KRCR2CRQ.js";
 import {
   DEFAULT_SESSION
 } from "./chunk-N6IOSZOE.js";
@@ -13,7 +13,7 @@ import {
   machineDecisionFor,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-Q4E56K4X.js";
+} from "./chunk-I5IJRMNV.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-RDK7FX5F.js → chunk-KF3UZLYI.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-HJXZJF6O.js";
+} from "./chunk-ZBHUHJG6.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";