@pushary/agent-hooks 1.9.7 → 1.9.8

package/dist/{chunk-STQRUH3S.js → chunk-7DVNSQWF.js}

@@ -1,6 +1,36 @@
 import {
-  SETUP_AGENT_CHOICES
-} from "./chunk-QR6VE5ME.js";
+  DISCONNECT_AGENT_IDS,
+  SETUP_AGENT_CHOICES,
+  isApprovalMode
+} from "./chunk-I5IJRMNV.js";
+
+// src/cli/mode-request.ts
+var parseDuration = (value) => {
+  const match = value.match(/^(\d+)(m|h)$/);
+  if (!match) return null;
+  const amount = Number(match[1]);
+  return match[2] === "h" ? amount * 3600 : amount * 60;
+};
+var modeRequestBody = (mode, duration) => {
+  if (duration === void 0) return { mode, permanent: true };
+  const ttlSeconds = parseDuration(duration);
+  return ttlSeconds ? { mode, ttlSeconds } : null;
+};
+var UPDATES_ONLY_MODE_INPUTS = ["updates-only", "updates_only"];
+var UPDATES_ONLY_MODE = "notify_only";
+var MODE_PROSE_NAMES = {
+  [UPDATES_ONLY_MODE]: "Updates only"
+};
+var isUpdatesOnlyInput = (value) => UPDATES_ONLY_MODE_INPUTS.includes(value);
+var resolveModeInput = (value) => {
+  const name = value.trim().toLowerCase();
+  if (isUpdatesOnlyInput(name)) return UPDATES_ONLY_MODE;
+  return isApprovalMode(name) ? name : null;
+};
+var describeMode = (mode) => {
+  const prose = isApprovalMode(mode) ? MODE_PROSE_NAMES[mode] : void 0;
+  return prose === void 0 ? mode : `${prose} (${mode})`;
+};
 
 // src/cli/commands.ts
 var NPX_LATEST_COMMAND = "npx pushary@latest";
@@ -44,14 +74,16 @@ var COMMAND_LIST = [
     summary: "Sign in from this terminal, no key to copy (--with-token to pipe one in)"
   },
   {
-    name: "logout",
+    name: "sign-out",
     module: "pushary-logout",
-    summary: "Remove the key this machine stores, and say what it does not remove"
+    aliases: ["logout"],
+    summary: "Sign out: remove the key this machine stores, and say what it does not remove (also: logout)"
   },
   {
-    name: "connect",
+    name: "pair",
     module: "pushary-connect",
-    summary: "Connect a phone without re-running setup (--app for the Pushary app)"
+    aliases: ["connect"],
+    summary: "Pair a phone without re-running setup (--app for the Pushary app; also: connect)"
   },
   {
     name: "bell",
@@ -63,7 +95,7 @@ var COMMAND_LIST = [
     ]
   },
   { name: "doctor", module: "pushary-doctor", summary: "Verify your Pushary installation is working" },
-  { name: "disconnect", module: "pushary-disconnect", summary: "Turn off one agent (claude|codex|gemini|cursor)" },
+  { name: "disconnect", module: "pushary-disconnect", summary: `Turn off one agent (${DISCONNECT_AGENT_IDS.join("|")})` },
   { name: "clean", module: "pushary-clean", summary: "Remove Pushary from this machine (--everything: the Mac app's setup too, --dry-run: preview)" },
   { name: "mode", module: "pushary-mode", summary: "Choose where approval requests appear" },
   { name: "wait", module: "pushary-wait", summary: 'Show or set the "wait for your phone" ladder (pushary wait 45)' },
@@ -92,8 +124,14 @@ var COMMAND_LIST = [
   }
 ];
 var COMMANDS = COMMAND_LIST;
-var findCommand = (name) => COMMANDS.find((command) => command.name === name);
+var answersTo = (command, token) => command.name === token || (command.aliases ?? []).includes(token);
+var findCommand = (token) => COMMANDS.find((command) => answersTo(command, token));
 var isCommandName = (name) => COMMANDS.some((command) => command.name === name);
+var resolveCommandName = (token) => {
+  const name = findCommand(token)?.name;
+  return name !== void 0 && isCommandName(name) ? name : null;
+};
+var isInvocationOf = (token, name) => resolveCommandName(token) === name;
 var COMMAND_OPTIONS = {
   cowork: [
     ["--open", "Also open the setup guide in your browser"],
@@ -111,7 +149,7 @@ var COMMAND_OPTIONS = {
     ["trust --rotate", "Accept the keys the server is offering now and resume syncing"]
   ],
   mode: [
-    ["<mode>", "One of: push_only, push_first, terminal_only, notify_only"],
+    ["<mode>", `One of: push_only, push_first, terminal_only, notify_only (Updates only; also: ${UPDATES_ONLY_MODE_INPUTS.join(", ")})`],
     ["status", "Show the current override"],
     ["clear", "Drop the override and go back to per-tool policies"],
     ["--for <30m|2h>", "Expire the override after this long"]
@@ -125,7 +163,7 @@ var COMMAND_OPTIONS = {
     ["--json", "Emit the whole report as one object instead of the screen"],
     ["--devices", "Also list the machines registered to this site"]
   ],
-  logout: [
+  "sign-out": [
     ["--revoke", "Also kill the key server-side, so it stops working everywhere"],
     ["--json", "Emit the result as one object instead of the screen"]
   ],
@@ -168,10 +206,10 @@ var SETUP_OPTIONS = [
   ["--connect app", "Pair the native Pushary app, no key to paste (default)"],
   ["--connect browser", "Approve in a browser tab instead. For a machine with no app"],
   ["--connect web", "Legacy browser subscribe page"],
-  ["--connect none", "Skip the phone connect step, same as --skip-phone"],
+  ["--connect none", "Skip pairing a phone, same as --skip-phone"],
   ["--control auto|on|off", "Manage phone-start automatically (default), require it, or disable its background service"],
   ["--transcripts on|off", "Enable or disable encrypted transcript sync on this machine"],
-  ["--skip-phone", "Skip the phone connect step"],
+  ["--skip-phone", "Skip pairing a phone"],
   ["--take-over-hooks", "Replace hooks the Pushary Mac app owns with the CLI's. Without it the app's wiring is kept"],
   ["--verify roundtrip", "Send a real question and wait for you to answer it (default when a human is present)"],
   ["--verify push", "Only prove a notification was delivered. Automatic when nobody is at the terminal"],
@@ -220,8 +258,9 @@ var renderHelp = (version) => {
     ""
   ].join("\n");
 };
-var renderCommandHelp = (name, version) => {
-  const spec = findCommand(name);
+var renderCommandHelp = (token, version) => {
+  const spec = findCommand(token);
+  const name = spec?.name ?? token;
   const options = name === "setup" ? SETUP_OPTIONS : COMMAND_OPTIONS[name] ?? [];
   const width = options.length > 0 ? Math.max(...options.map(([flag]) => flag.length)) + 2 : 0;
   return [
@@ -241,9 +280,14 @@ var renderCommandHelp = (name, version) => {
 };
 
 export {
+  modeRequestBody,
+  UPDATES_ONLY_MODE_INPUTS,
+  resolveModeInput,
+  describeMode,
   NPX_LATEST_COMMAND,
   COMMANDS,
-  isCommandName,
+  resolveCommandName,
+  isInvocationOf,
   renderHelp,
   renderCommandHelp
 };

package/dist/{chunk-QTO6HEZD.js → chunk-7PT35RY2.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-ZUTU43FT.js";
+} from "./chunk-ZBHUHJG6.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -14,7 +14,7 @@ import {
   cliPackagePathSegments,
   globalUpgradeEntry,
   ownPackageRoot
-} from "./chunk-QR6VE5ME.js";
+} from "./chunk-I5IJRMNV.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-7OIWWZAD.js → chunk-B64KHETR.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-SBLPHUEB.js";
+} from "./chunk-DL7XWKYV.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-STQRUH3S.js";
+} from "./chunk-7DVNSQWF.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-QR6VE5ME.js";
+} from "./chunk-I5IJRMNV.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/chunk-BEJRK4DF.js

@@ -0,0 +1,94 @@
+import {
+  SIGNED_OUT_ON_MAC_MESSAGE,
+  describeSignedOutKey,
+  readSignedOutDiagnosis
+} from "./chunk-2WXF3QJR.js";
+import {
+  createIo
+} from "./chunk-U4TMAANR.js";
+import {
+  readKeySource
+} from "./chunk-N4QSPI3B.js";
+import {
+  absoluteUrl,
+  checkApiKey,
+  describeKeyCheck,
+  keyCheckFromResponse
+} from "./chunk-LWOO567I.js";
+import {
+  EXIT
+} from "./chunk-KZERVKTD.js";
+import {
+  getBaseUrl
+} from "./chunk-5QUPKDI5.js";
+
+// src/cli/report-key.ts
+var { dim, yellow } = createIo();
+var printReport = (report) => {
+  console.log(`  ${yellow("!")} ${report.message}`);
+  for (const line of report.next) console.log(`  ${dim(line)}`);
+};
+var signedOutKeyReport = (check) => {
+  if (check.kind !== "rejected") return null;
+  const diagnosis = readSignedOutDiagnosis(readKeySource().key, "rejected");
+  if (diagnosis.kind !== "signed_out_on_mac") return null;
+  return { message: SIGNED_OUT_ON_MAC_MESSAGE, next: describeSignedOutKey(diagnosis), exitCode: EXIT.UNAUTHENTICATED, fatal: true };
+};
+var printKeyCheck = (check, baseUrl) => {
+  const report = signedOutKeyReport(check) ?? describeKeyCheck(check, baseUrl);
+  printReport(report);
+  return report;
+};
+var exitIfKeyFailure = async (response, baseUrl) => {
+  const check = await keyCheckFromResponse(response, baseUrl);
+  if (!check) return;
+  const report = printKeyCheck(check, baseUrl);
+  process.exit(report.exitCode);
+};
+var responseDetail = async (response) => {
+  try {
+    const body = await response.json();
+    const text = [body.error, body.message].find((part) => typeof part === "string" && part);
+    if (typeof text === "string") return text;
+  } catch {
+  }
+  return response.statusText || `HTTP ${response.status}`;
+};
+var exitOnFailedResponse = async (response, baseUrl) => {
+  await exitIfKeyFailure(response, baseUrl);
+  console.log(`  ${yellow("!")} Failed: ${await responseDetail(response)}`);
+  process.exit(EXIT.FAILED);
+};
+var REFUSED_SETTINGS_ACTION = {
+  mode: "change the approval mode",
+  wait: "change how long approvals wait for you",
+  suggestions: "read or accept rule suggestions"
+};
+var APPROVAL_SETTINGS_PATH = "/dashboard/agent/settings";
+var AGENT_KEY_SCOPE = "agent";
+var isAgentKeyRefusal = (status, check) => status === 401 && check.kind === "ok" && check.identity.keyScope === AGENT_KEY_SCOPE;
+var describeAgentKeyRefusal = (request, baseUrl = getBaseUrl()) => ({
+  message: `This computer's key cannot ${REFUSED_SETTINGS_ACTION[request]}. Keys from pushary login, phone pairing and the Mac app run approvals and notifications, not account settings.`,
+  next: [
+    `Change it from the Pushary app, your phone, or the dashboard: ${absoluteUrl(baseUrl, APPROVAL_SETTINGS_PATH)}`,
+    "The key itself is valid. Nothing on this computer needs fixing."
+  ],
+  exitCode: EXIT.USAGE,
+  fatal: true
+});
+var exitOnFailedSettingsRequest = async (response, settings) => {
+  if (response.status === 401) {
+    const check = await checkApiKey(settings.apiKey, { baseUrl: settings.baseUrl });
+    if (isAgentKeyRefusal(response.status, check)) {
+      const report = describeAgentKeyRefusal(settings.request, settings.baseUrl);
+      printReport(report);
+      process.exit(report.exitCode);
+    }
+  }
+  return exitOnFailedResponse(response, settings.baseUrl);
+};
+
+export {
+  printKeyCheck,
+  exitOnFailedSettingsRequest
+};

package/dist/chunk-BXET3ALR.js

@@ -0,0 +1,46 @@
+import {
+  pusharyDir
+} from "./chunk-ZBHUHJG6.js";
+import {
+  readJsonSafe,
+  writeFileAtomic
+} from "./chunk-T7E75EKA.js";
+import {
+  DECLINED_AGENTS_FILE,
+  HOOK_SOURCES,
+  normalizeAgentId,
+  parseDeclinedAgents,
+  serializeDeclinedAgents,
+  withDeclinedAgent,
+  withoutDeclinedAgent
+} from "./chunk-I5IJRMNV.js";
+
+// src/declined-agents-file.ts
+import { join } from "path";
+var DECLINED_AGENTS_MODE = 384;
+var declinedAgentsFile = () => join(pusharyDir(), DECLINED_AGENTS_FILE);
+var readDeclinedAgents = (file = declinedAgentsFile()) => {
+  const stored = readJsonSafe(file);
+  return stored.kind === "ok" ? parseDeclinedAgents(stored.value) : [];
+};
+var writeDeclinedAgents = (agents, file) => writeFileAtomic(file, serializeDeclinedAgents(agents), DECLINED_AGENTS_MODE, "utf-8");
+var changeDeclinedAgents = (file, applies, next) => {
+  const current = readDeclinedAgents(file);
+  if (!applies(current)) return "unchanged";
+  try {
+    writeDeclinedAgents(next(current), file);
+    return "changed";
+  } catch {
+    return "unwritable";
+  }
+};
+var recordDeclinedAgent = (agent, file = declinedAgentsFile()) => changeDeclinedAgents(file, (current) => !current.includes(agent), (current) => withDeclinedAgent(current, agent));
+var clearDeclinedAgent = (agent, file = declinedAgentsFile()) => changeDeclinedAgents(file, (current) => current.includes(agent), (current) => withoutDeclinedAgent(current, agent));
+var declinedAgentForSetupChoice = (choice) => normalizeAgentId(choice, HOOK_SOURCES);
+
+export {
+  declinedAgentsFile,
+  recordDeclinedAgent,
+  clearDeclinedAgent,
+  declinedAgentForSetupChoice
+};

package/dist/{chunk-6DJTDHBI.js → chunk-CD47ZFFZ.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-QR6VE5ME.js";
+} from "./chunk-I5IJRMNV.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-UFVGSEWH.js → chunk-CKV3UPMU.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-STQRUH3S.js";
+} from "./chunk-7DVNSQWF.js";
 import {
   getPackageVersion
-} from "./chunk-QR6VE5ME.js";
+} from "./chunk-I5IJRMNV.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-4FK6RZVJ.js → chunk-CLOSJ4ES.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-Z6HPS67T.js";
+} from "./chunk-5QUPKDI5.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-AVNKVF7N.js → chunk-DKMD6AWR.js}

@@ -4,18 +4,18 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   isNetworkFailure
-} from "./chunk-JXISQ7DT.js";
+} from "./chunk-TCQ43LSG.js";
 import {
   clientReportClaims
-} from "./chunk-ZUTU43FT.js";
+} from "./chunk-ZBHUHJG6.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-Z6HPS67T.js";
+} from "./chunk-5QUPKDI5.js";
 import {
   CLIENT_REPORT_PATH,
   degradedLine
-} from "./chunk-QR6VE5ME.js";
+} from "./chunk-I5IJRMNV.js";
 
 // src/client-report-claim.ts
 import { createHash } from "crypto";

package/dist/{chunk-SBLPHUEB.js → chunk-DL7XWKYV.js}

@@ -8,8 +8,9 @@ import {
   SETUP_AGENT_CHOICES,
   SETUP_CONNECT_MODES,
   isSetupConnectMode,
-  isValidApiKey
-} from "./chunk-QR6VE5ME.js";
+  isValidApiKey,
+  normalizeAgentId
+} from "./chunk-I5IJRMNV.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = SETUP_AGENT_CHOICES;
@@ -42,7 +43,6 @@ var SETUP_FLAGS = {
   values: ["key", "connect", "agents", "verify", "control", "transcripts"]
 };
 var effectiveControlMode = (options, stored, configPresent) => options.controlExplicit ? options.control : stored ?? (configPresent ? null : options.control);
-var isAgentChoice = (value) => AGENT_CHOICES.includes(value);
 var parseAgentSelection = (raw, yes) => {
   if (raw === void 0) {
     return yes ? { kind: "auto" } : { kind: "ask" };
@@ -52,13 +52,15 @@ var parseAgentSelection = (raw, yes) => {
   if (value === "none") return { kind: "none" };
   const parts = value.split(",").map((part) => part.trim()).filter((part) => part !== "");
   if (parts.length === 0) throw new UsageError("--agents needs a value");
-  const unknown = parts.filter((part) => !isAgentChoice(part));
+  const resolved = parts.map((part) => ({ part, agent: normalizeAgentId(part, AGENT_CHOICES) }));
+  const unknown = resolved.flatMap(({ part, agent }) => agent === null ? [part] : []);
   if (unknown.length > 0) {
     throw new UsageError(
       `--agents does not know: ${unknown.join(", ")}. Use auto, none, or any of: ${AGENT_CHOICES.join(", ")}`
     );
   }
-  return { kind: "explicit", agents: [...new Set(parts)] };
+  const agents = resolved.flatMap(({ agent }) => agent === null ? [] : [agent]);
+  return { kind: "explicit", agents: [...new Set(agents)] };
 };
 var parseSetupOptions = (input) => {
   const flags = parseFlags(input.argv, SETUP_FLAGS);

package/dist/{chunk-BTQGAXZ3.js → chunk-DPGSLWOS.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-SD3272LS.js";
+} from "./chunk-YIG2R3BJ.js";
 import {
   ensureDaemonRunning
-} from "./chunk-VXRXFU6Q.js";
+} from "./chunk-LKLVTG3V.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-AUUXS44H.js";
+} from "./chunk-ZBK6E2OR.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-4FK6RZVJ.js";
+} from "./chunk-CLOSJ4ES.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-HPRZJKRO.js";
+} from "./chunk-M6BZZFVQ.js";
 import {
   readTranscriptPreference
-} from "./chunk-ADSQDYYG.js";
+} from "./chunk-N4QSPI3B.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-ZUTU43FT.js";
+} from "./chunk-ZBHUHJG6.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-Z6HPS67T.js";
+} from "./chunk-5QUPKDI5.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-KYO45G5L.js → chunk-DUZVXBBU.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-ZUTU43FT.js";
+} from "./chunk-ZBHUHJG6.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-EB4XGVBG.js → chunk-EUW7JL2K.js}

@@ -1,11 +1,3 @@
-import {
-  pusharyHookExecutable
-} from "./chunk-4YO4T5FV.js";
-import {
-  isProtectedByScope,
-  registerHookEntry
-} from "./chunk-ZUTU43FT.js";
-
 // src/skills-cli.ts
 import { execSync } from "child_process";
 var PUSHARY_SKILL_SOURCE = "Pushary/pushary-skill";
@@ -33,28 +25,6 @@ var installAgentSkill = async (request, effects) => {
   return "packaged-copy";
 };
 
-// src/cursor-config.ts
-var hookCommandOf = (entry) => {
-  const command = entry && typeof entry === "object" && !Array.isArray(entry) ? entry.command : void 0;
-  return typeof command === "string" ? command : "";
-};
-var isPusharyCursorEntry = (entry) => pusharyHookExecutable(hookCommandOf(entry)) !== null;
-var registerCursorGate = (existing, entry) => registerHookEntry(existing, isPusharyCursorEntry, entry);
-var withoutPusharyCursorHooks = (hooks, scope) => {
-  let removed = 0;
-  const kept = {};
-  for (const [event, entries] of Object.entries(hooks)) {
-    if (!Array.isArray(entries)) {
-      kept[event] = entries;
-      continue;
-    }
-    const others = entries.filter((entry) => !isPusharyCursorEntry(entry) || isProtectedByScope(hookCommandOf(entry), scope));
-    removed += entries.length - others.length;
-    if (others.length > 0 || entries.length === 0) kept[event] = others;
-  }
-  return { hooks: kept, removed };
-};
-
 // src/cli/dry-run.ts
 import { execFileSync } from "child_process";
 import { rmSync, writeFileSync } from "fs";
@@ -92,8 +62,6 @@ export {
   PUSHARY_SKILL_NAME,
   installSkillViaSkillsCli,
   installAgentSkill,
-  registerCursorGate,
-  withoutPusharyCursorHooks,
   createGuards,
   describeSetupSideEffects
 };

package/dist/{chunk-4D2AYNSE.js → chunk-FQ2GORVG.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-Z6HPS67T.js";
+} from "./chunk-5QUPKDI5.js";
 import {
   normalizeInstallSource
-} from "./chunk-QR6VE5ME.js";
+} from "./chunk-I5IJRMNV.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-W2KI5KPD.js → chunk-HRULIYDU.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-L76HTPU6.js";
+} from "./chunk-MKTJEXZ3.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-STQRUH3S.js";
+} from "./chunk-7DVNSQWF.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";