@pushary/agent-hooks 1.9.6 → 1.9.8

package/dist/bin/pushary-gemini-bridge.js

@@ -5,10 +5,10 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-F56SB65Y.js";
+} from "../chunk-WS4H76EP.js";
 import {
   resolveProviderBinary
-} from "../chunk-MKJ3RTUS.js";
+} from "../chunk-I6MJXLMY.js";
 import "../chunk-RIVNNBEK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
@@ -16,29 +16,29 @@ import {
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-RDK7FX5F.js";
-import "../chunk-5AXCOTIT.js";
-import "../chunk-7JTVYR5B.js";
+} from "../chunk-KF3UZLYI.js";
+import "../chunk-ZBK6E2OR.js";
+import "../chunk-CLOSJ4ES.js";
 import {
   transcriptsEnabled
-} from "../chunk-KK54WQ74.js";
+} from "../chunk-M6BZZFVQ.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-5BHROGRB.js";
+import "../chunk-N4QSPI3B.js";
 import {
   getMachineId
-} from "../chunk-3BUAEQCY.js";
-import "../chunk-75CA37FZ.js";
-import "../chunk-HJXZJF6O.js";
+} from "../chunk-DUZVXBBU.js";
+import "../chunk-FQ2GORVG.js";
+import "../chunk-ZBHUHJG6.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-2QRE6QH2.js";
-import "../chunk-L6USMDTW.js";
-import "../chunk-Q4E56K4X.js";
+} from "../chunk-5QUPKDI5.js";
+import "../chunk-7DVNSQWF.js";
+import "../chunk-I5IJRMNV.js";
 
 // bin/pushary-gemini-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-gemini-hook.js

@@ -1,31 +1,30 @@
 #!/usr/bin/env node
 import {
   triggerAutoUpdate
-} from "../chunk-SNJ3BOCP.js";
+} from "../chunk-7PT35RY2.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-GQHZIBAZ.js";
+} from "../chunk-ZSTSEBG7.js";
 import {
   readHookInput
-} from "../chunk-HWQNQVY6.js";
+} from "../chunk-WWOHTTVP.js";
 import {
   announceSubscriptionRequired,
   denyReasonFrom,
   isDeferAnswer
 } from "../chunk-5OP5MQI7.js";
-import "../chunk-VRT3EEZN.js";
+import "../chunk-DPGSLWOS.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-NVGDMTX3.js";
-import "../chunk-SPXBXN23.js";
-import "../chunk-SJN22ADZ.js";
-import "../chunk-D7SOOVHX.js";
-import "../chunk-ZC3TF4LR.js";
-import "../chunk-UKNKYTTY.js";
-import "../chunk-Q23MMVTD.js";
-import "../chunk-5AXCOTIT.js";
-import "../chunk-7JTVYR5B.js";
-import "../chunk-KK54WQ74.js";
+import "../chunk-YIG2R3BJ.js";
+import "../chunk-DL7XWKYV.js";
+import "../chunk-LKLVTG3V.js";
+import "../chunk-2QGYMY7A.js";
+import "../chunk-3I6IVOZV.js";
+import "../chunk-WG3K4TCH.js";
+import "../chunk-ZBK6E2OR.js";
+import "../chunk-CLOSJ4ES.js";
+import "../chunk-M6BZZFVQ.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
 import {
@@ -46,53 +45,53 @@ import {
   repoKeyFor,
   reportEvent,
   scopePathFor
-} from "../chunk-CCDVL63C.js";
+} from "../chunk-KRCR2CRQ.js";
 import {
   DEFAULT_SESSION
 } from "../chunk-N6IOSZOE.js";
-import "../chunk-DJ4BB264.js";
+import "../chunk-CD47ZFFZ.js";
 import {
-  DECISION_STOP_REASON,
-  UNVERIFIABLE_APPROVAL_REASON,
   askUser,
   isDecisionStopped,
   isLocalQuestionHandoff,
   sendNotification,
   waitForQuestion
-} from "../chunk-WN6WYUCV.js";
+} from "../chunk-2VZAALEJ.js";
 import {
   exitAfterClientReports
-} from "../chunk-DA4FTGTK.js";
+} from "../chunk-DKMD6AWR.js";
 import "../chunk-POFBE6ZY.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-5BHROGRB.js";
+import "../chunk-N4QSPI3B.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-ZPW4MJOV.js";
-import "../chunk-4QKM44N6.js";
-import "../chunk-W4Q7NFXU.js";
+} from "../chunk-MKTJEXZ3.js";
+import "../chunk-LWOO567I.js";
+import "../chunk-TCQ43LSG.js";
 import {
   getMachineId
-} from "../chunk-3BUAEQCY.js";
+} from "../chunk-DUZVXBBU.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-75CA37FZ.js";
-import "../chunk-HJXZJF6O.js";
+import "../chunk-FQ2GORVG.js";
+import "../chunk-ZBHUHJG6.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "../chunk-2QRE6QH2.js";
-import "../chunk-L6USMDTW.js";
+} from "../chunk-5QUPKDI5.js";
+import "../chunk-7DVNSQWF.js";
 import {
+  DECISION_STOP_REASON,
   KILL_REASON,
+  UNVERIFIABLE_APPROVAL_REASON,
   effectiveWaitSeconds,
   gateOutputFor,
   hookWaitClamped,
   hookWaitDeadline,
   resolveGate
-} from "../chunk-Q4E56K4X.js";
+} from "../chunk-I5IJRMNV.js";
 
 // bin/pushary-gemini-hook.ts
 import { basename } from "path";

package/dist/bin/pushary-hook.js

@@ -1,64 +1,62 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-BSZ7VBVT.js";
+} from "../chunk-2A53H4S6.js";
 import {
   activeHookSource,
   normalizeToolCall,
   profileFromArgv
-} from "../chunk-TE5M6GGK.js";
-import "../chunk-IR5FRUPQ.js";
-import "../chunk-BVCHY4OY.js";
-import "../chunk-GQHZIBAZ.js";
+} from "../chunk-KHNFLYJO.js";
+import "../chunk-IHO3YQAN.js";
+import "../chunk-ZSTSEBG7.js";
 import {
   readToolHookInput
-} from "../chunk-HWQNQVY6.js";
+} from "../chunk-WWOHTTVP.js";
 import "../chunk-5OP5MQI7.js";
-import "../chunk-VRT3EEZN.js";
+import "../chunk-DPGSLWOS.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-NVGDMTX3.js";
-import "../chunk-SPXBXN23.js";
-import "../chunk-SJN22ADZ.js";
-import "../chunk-D7SOOVHX.js";
-import "../chunk-ZC3TF4LR.js";
-import "../chunk-UKNKYTTY.js";
-import "../chunk-Q23MMVTD.js";
-import "../chunk-5AXCOTIT.js";
-import "../chunk-7JTVYR5B.js";
-import "../chunk-KK54WQ74.js";
+import "../chunk-YIG2R3BJ.js";
+import "../chunk-DL7XWKYV.js";
+import "../chunk-LKLVTG3V.js";
+import "../chunk-2QGYMY7A.js";
+import "../chunk-3I6IVOZV.js";
+import "../chunk-WG3K4TCH.js";
+import "../chunk-ZBK6E2OR.js";
+import "../chunk-CLOSJ4ES.js";
+import "../chunk-M6BZZFVQ.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
 import {
   canonicalGateInputs
-} from "../chunk-CCDVL63C.js";
+} from "../chunk-KRCR2CRQ.js";
 import "../chunk-N6IOSZOE.js";
-import "../chunk-DJ4BB264.js";
-import "../chunk-WN6WYUCV.js";
+import "../chunk-CD47ZFFZ.js";
+import "../chunk-2VZAALEJ.js";
 import {
   exitAfterClientReports
-} from "../chunk-DA4FTGTK.js";
+} from "../chunk-DKMD6AWR.js";
 import "../chunk-POFBE6ZY.js";
 import {
   exitOnHelpFlag
-} from "../chunk-FBD3QGVJ.js";
+} from "../chunk-CKV3UPMU.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-5BHROGRB.js";
-import "../chunk-ZPW4MJOV.js";
-import "../chunk-4QKM44N6.js";
-import "../chunk-W4Q7NFXU.js";
-import "../chunk-3BUAEQCY.js";
+import "../chunk-N4QSPI3B.js";
+import "../chunk-MKTJEXZ3.js";
+import "../chunk-LWOO567I.js";
+import "../chunk-TCQ43LSG.js";
+import "../chunk-DUZVXBBU.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-75CA37FZ.js";
-import "../chunk-HJXZJF6O.js";
+import "../chunk-FQ2GORVG.js";
+import "../chunk-ZBHUHJG6.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-2QRE6QH2.js";
-import "../chunk-L6USMDTW.js";
+import "../chunk-5QUPKDI5.js";
+import "../chunk-7DVNSQWF.js";
 import {
   renderPreToolUseVerdict
-} from "../chunk-Q4E56K4X.js";
+} from "../chunk-I5IJRMNV.js";
 
 // bin/pushary-hook.ts
 exitOnHelpFlag("hook");

package/dist/bin/pushary-login.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   runBrowserLogin
-} from "../chunk-DGQTJDSJ.js";
+} from "../chunk-NWDG3MSW.js";
 import "../chunk-PUZZELE6.js";
 import {
   writeStdoutFully
 } from "../chunk-EO23EUOK.js";
 import {
   recoverDaemonAfterLogin
-} from "../chunk-ZC3TF4LR.js";
+} from "../chunk-LKLVTG3V.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-3EGEA4KH.js";
 import {
@@ -16,7 +16,7 @@ import {
 } from "../chunk-U4TMAANR.js";
 import {
   exitOnHelpFlag
-} from "../chunk-FBD3QGVJ.js";
+} from "../chunk-CKV3UPMU.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -25,28 +25,28 @@ import {
   readControlMode,
   readKeySource,
   writeKey
-} from "../chunk-5BHROGRB.js";
+} from "../chunk-N4QSPI3B.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-4QKM44N6.js";
-import "../chunk-W4Q7NFXU.js";
-import "../chunk-3BUAEQCY.js";
+} from "../chunk-LWOO567I.js";
+import "../chunk-TCQ43LSG.js";
+import "../chunk-DUZVXBBU.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-75CA37FZ.js";
-import "../chunk-HJXZJF6O.js";
+import "../chunk-FQ2GORVG.js";
+import "../chunk-ZBHUHJG6.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-2QRE6QH2.js";
-import "../chunk-L6USMDTW.js";
+import "../chunk-5QUPKDI5.js";
+import "../chunk-7DVNSQWF.js";
 import {
   getPackageVersion,
   isValidApiKey
-} from "../chunk-Q4E56K4X.js";
+} from "../chunk-I5IJRMNV.js";
 
 // bin/pushary-login.ts
 exitOnHelpFlag("login");

package/dist/bin/pushary-logout.js

@@ -4,41 +4,103 @@ import {
 } from "../chunk-U4TMAANR.js";
 import {
   exitOnHelpFlag
-} from "../chunk-FBD3QGVJ.js";
+} from "../chunk-CKV3UPMU.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import {
   clearKey,
   readKeySource
-} from "../chunk-5BHROGRB.js";
+} from "../chunk-N4QSPI3B.js";
+import {
+  checkApiKey
+} from "../chunk-LWOO567I.js";
+import "../chunk-TCQ43LSG.js";
+import "../chunk-DUZVXBBU.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-75CA37FZ.js";
+import "../chunk-FQ2GORVG.js";
 import {
   claudeJson,
   codexConfigToml,
   cursorUserMcp,
   geminiSettings
-} from "../chunk-HJXZJF6O.js";
+} from "../chunk-ZBHUHJG6.js";
 import "../chunk-T7E75EKA.js";
 import {
   getBaseUrl
-} from "../chunk-2QRE6QH2.js";
-import "../chunk-L6USMDTW.js";
-import "../chunk-Q4E56K4X.js";
+} from "../chunk-5QUPKDI5.js";
+import {
+  isInvocationOf
+} from "../chunk-7DVNSQWF.js";
+import "../chunk-I5IJRMNV.js";
 
 // bin/pushary-logout.ts
 import { existsSync } from "fs";
-exitOnHelpFlag("logout");
+
+// src/key-revocation.ts
+var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";
+var DEVICE_KEY_PATH = "/api/agent/device-key";
+var FULL_ACCESS_ONLY_STATUS = 403;
+var REVOKE_TIMEOUT_MS = 1e4;
+var readRevokedCount = async (response) => {
+  try {
+    const body = await response.json();
+    const revoked = typeof body === "object" && body !== null && "revoked" in body ? body.revoked : void 0;
+    return typeof revoked === "number" && Number.isInteger(revoked) && revoked >= 0 ? revoked : null;
+  } catch {
+    return null;
+  }
+};
+var revokeAgentKey = async (apiKey, baseUrl, fetchImpl) => {
+  const response = await fetchImpl(`${baseUrl}${DEVICE_KEY_PATH}`, {
+    method: "DELETE",
+    headers: { Authorization: `Bearer ${apiKey}` },
+    signal: AbortSignal.timeout(REVOKE_TIMEOUT_MS)
+  });
+  if (!response.ok) return { kind: "refused", status: response.status };
+  const revoked = await readRevokedCount(response);
+  if (revoked === null) return { kind: "refused", status: response.status };
+  return revoked > 0 ? { kind: "revoked" } : { kind: "not_accepted" };
+};
+var revokeOwnKey = async (apiKey, baseUrl, fetchImpl = fetch) => {
+  try {
+    const response = await fetchImpl(`${baseUrl}${SELF_REVOKE_PATH}`, {
+      method: "POST",
+      headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
+      signal: AbortSignal.timeout(REVOKE_TIMEOUT_MS)
+    });
+    if (response.status === 401) return { kind: "not_accepted" };
+    if (response.status === FULL_ACCESS_ONLY_STATUS) return await revokeAgentKey(apiKey, baseUrl, fetchImpl);
+    if (!response.ok) return { kind: "refused", status: response.status };
+    return { kind: "revoked" };
+  } catch (err) {
+    return { kind: "unreachable", detail: err instanceof Error ? err.message : "network error" };
+  }
+};
+var keyValidityOf = (check) => {
+  switch (check.kind) {
+    case "ok":
+    case "locked":
+      return "valid";
+    case "rejected":
+    case "malformed":
+      return "invalid";
+    case "unreachable":
+      return "unknown";
+  }
+};
+
+// bin/pushary-logout.ts
+exitOnHelpFlag("sign-out");
 var parseLogoutOptions = (argv) => {
   const flags = parseFlags(argv, { bools: ["json", "revoke", "help", "h"], values: [] });
-  if (flags.command !== void 0 && flags.command !== "logout") {
-    throw new UsageError(`logout takes no positional arguments (got ${flags.command})`);
+  if (flags.command !== void 0 && !isInvocationOf(flags.command, "sign-out")) {
+    throw new UsageError(`sign-out takes no positional arguments (got ${flags.command})`);
   }
   return { json: flags.bools.has("json"), revoke: flags.bools.has("revoke") };
 };
@@ -60,30 +122,26 @@ var AGENT_CONFIGS = [
   { label: "Gemini CLI", path: geminiSettings() },
   { label: "Cursor", path: cursorUserMcp() }
 ];
-var revokeRemotely = async (apiKey) => {
-  try {
-    const res = await fetch(`${getBaseUrl()}/api/v1/server/keys/self/revoke`, {
-      method: "POST",
-      headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
-      signal: AbortSignal.timeout(1e4)
-    });
-    if (res.status === 401) return { ok: true, detail: "the server had already stopped accepting it" };
-    if (!res.ok) return { ok: false, detail: `the server answered ${res.status}` };
-    return { ok: true, detail: "revoked server-side" };
-  } catch (err) {
-    return { ok: false, detail: err instanceof Error ? err.message : "network error" };
-  }
+var REVOKE_DETAIL = {
+  revoked: "Revoked the key on pushary.com.",
+  not_accepted: "pushary.com had already stopped accepting the key.",
+  refused: "pushary.com refused to revoke the key",
+  unreachable: "Could not reach pushary.com to revoke the key"
+};
+var describeRevokeAttempt = (attempt) => {
+  if (attempt.kind === "refused") return `${REVOKE_DETAIL.refused} (HTTP ${attempt.status}).`;
+  if (attempt.kind === "unreachable") return `${REVOKE_DETAIL.unreachable}: ${attempt.detail}`;
+  return REVOKE_DETAIL[attempt.kind];
+};
+var revokeAndVerify = async (apiKey) => {
+  const baseUrl = getBaseUrl();
+  const attempt = await revokeOwnKey(apiKey, baseUrl);
+  const validity = keyValidityOf(await checkApiKey(apiKey, { baseUrl }));
+  return { attempt, validity };
 };
 var main = async () => {
   const before = readKeySource();
-  let revoked = null;
-  if (options.revoke) {
-    if (before.key) {
-      revoked = await revokeRemotely(before.key);
-    } else {
-      revoked = { ok: false, detail: "no key was stored here, so there was nothing to revoke" };
-    }
-  }
+  const revoked = options.revoke && before.key ? await revokeAndVerify(before.key) : null;
   const result = clearKey();
   const remaining = AGENT_CONFIGS.filter((entry) => existsSync(entry.path));
   say("");
@@ -96,14 +154,16 @@ var main = async () => {
       say(`  ${dim(`Commented out ${result.rcLinesDisabled} export line in ${result.rcPath}`)}`);
     }
   }
+  if (options.revoke && !before.key) {
+    say("");
+    say(`  ${yellow("!")} No key was stored here, so there was nothing to revoke.`);
+  }
   if (revoked) {
     say("");
-    if (revoked.ok) {
-      say(`  ${green("\u2713")} Key ${revoked.detail}. It will not work anywhere else either.`);
-    } else {
-      say(`  ${yellow("!")} Could not revoke the key server-side: ${revoked.detail}`);
-      say(`  ${dim("It is still valid. Revoke it at")} ${cyan("pushary.com/dashboard/agent/settings")}`);
-    }
+    say(`  ${revoked.attempt.kind === "revoked" || revoked.attempt.kind === "not_accepted" ? green("\u2713") : yellow("!")} ${describeRevokeAttempt(revoked.attempt)}`);
+    if (revoked.validity === "invalid") say(`  ${green("\u2713")} The key no longer works anywhere.`);
+    else if (revoked.validity === "valid") say(`  ${yellow("!")} The key still works on pushary.com. Revoke it at ${cyan("pushary.com/dashboard/agent/settings")}`);
+    else say(`  ${yellow("!")} Could not check whether the key still works. Check it at ${cyan("pushary.com/dashboard/agent/settings")}`);
   }
   if (before.kind === "env") {
     say("");
@@ -112,12 +172,14 @@ var main = async () => {
   }
   if (remaining.length > 0) {
     say("");
-    say(`  ${dim("Still holding a copy of the key, untouched by logout:")}`);
+    say(`  ${dim("Still holding a copy of the key, untouched by sign-out:")}`);
     for (const entry of remaining) say(`  ${dim(`\u2022 ${entry.label}  ${entry.path}`)}`);
     say(`  ${dim("Run")} ${cyan("pushary clean")} ${dim("to remove Pushary from those too.")}`);
   }
-  say("");
-  say(`  ${dim("The key itself is still valid server-side. Revoke it at")} ${cyan("pushary.com/dashboard/agent/settings")}`);
+  if (!options.revoke) {
+    say("");
+    say(`  ${dim("The key itself is still valid server-side. Revoke it at")} ${cyan("pushary.com/dashboard/agent/settings")}`);
+  }
   say("");
   if (options.json) {
     process.stdout.write(
@@ -129,7 +191,8 @@ var main = async () => {
           rcPath: result.rcPath,
           rcLinesDisabled: result.rcLinesDisabled,
           envStillSet: before.kind === "env",
-          revoked: revoked === null ? null : revoked.ok,
+          revoked: revoked === null ? options.revoke ? false : null : revoked.attempt.kind === "revoked" || revoked.attempt.kind === "not_accepted",
+          keyStillValid: revoked === null ? null : revoked.validity === "unknown" ? null : revoked.validity === "valid",
           agentConfigsRetainingKey: remaining.map((entry) => entry.path)
         },
         null,
@@ -141,7 +204,7 @@ var main = async () => {
   process.exit(EXIT.OK);
 };
 main().catch((err) => {
-  process.stderr.write(`  ! logout failed: ${err instanceof Error ? err.message : String(err)}
+  process.stderr.write(`  ! sign-out failed: ${err instanceof Error ? err.message : String(err)}
 `);
   process.exit(EXIT.FAILED);
 });

package/dist/bin/pushary-mcp.js

@@ -4,25 +4,25 @@ import {
   bridgeError,
   createMcpStdioBridge,
   parseBridgeLine
-} from "../chunk-WUKUXICK.js";
-import "../chunk-ZPW4MJOV.js";
-import "../chunk-4QKM44N6.js";
+} from "../chunk-HRULIYDU.js";
+import "../chunk-MKTJEXZ3.js";
+import "../chunk-LWOO567I.js";
 import {
   installNetworkDefaults
-} from "../chunk-W4Q7NFXU.js";
-import "../chunk-3BUAEQCY.js";
+} from "../chunk-TCQ43LSG.js";
+import "../chunk-DUZVXBBU.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-HJXZJF6O.js";
+import "../chunk-ZBHUHJG6.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-2QRE6QH2.js";
-import "../chunk-L6USMDTW.js";
-import "../chunk-Q4E56K4X.js";
+} from "../chunk-5QUPKDI5.js";
+import "../chunk-7DVNSQWF.js";
+import "../chunk-I5IJRMNV.js";
 
 // src/mcp-stdio-stream.ts
 var MCP_MAX_IN_FLIGHT = 16;