pushary 1.9.102 → 1.9.103

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.9.103
+
+- The Hermes plugin Pushary installs is now 1.0.1. When it hands a Hermes session to Pushary's history helper, the helper now gets only what it reads: the home folder, the search path, the temporary folder and locale, the Pushary settings it uses, and the Pushary key Hermes holds. Hermes' other provider keys no longer reach it. Checking whether history is allowed sends the key on standard input only.
+
 ## 1.9.102
 
 - The Hermes plugin Pushary installs is now 1.0.0. In Hermes Desktop, a Pushary chip in the status bar shows the approvals waiting on your phone, and you can answer them there too. Only one answer counts: a Hermes Desktop answer is used only when Pushary confirms that answer is what withdrew the question, and otherwise the panel says the approval had already closed. The chip also lists how recent approvals ended and where they were answered. Enable Pushary under Capabilities, Plugins in Hermes Desktop to see it.

package/dist/bin/pushary-clean.js

@@ -53,7 +53,7 @@ import {
   defaultHermesHome,
   hermesReceiptPaths,
   removeHermesWiring
-} from "../chunk-PPWEBIKL.js";
+} from "../chunk-COBOR3ST.js";
 import "../chunk-QCGNGEGE.js";
 import {
   planClineRemoval,

package/dist/bin/pushary-codex-hook.js

@@ -814,7 +814,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-3LBUA5EV.js");
+    const { repairCodexHolds } = await import("../reapply-LDCMRN6Q.js");
     repairCodexHolds();
   } catch {
     return;

package/dist/bin/pushary-daemon.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   inspectConfiguredManagedProviders
-} from "../chunk-MA65OP6M.js";
+} from "../chunk-RMFL62HR.js";
 import {
   HEARTBEAT_INTERVAL_MS,
   sendHeartbeat
@@ -14,7 +14,7 @@ import {
   HERMES_INSTALL_MARKER_FILE,
   defaultHermesHome,
   parseHermesInstallMarker
-} from "../chunk-PPWEBIKL.js";
+} from "../chunk-COBOR3ST.js";
 import {
   writeHuman
 } from "../chunk-QCGNGEGE.js";

package/dist/bin/pushary-doctor.js

@@ -75,7 +75,7 @@ import {
   routesHermesQuestions,
   runsAnOlderPlugin,
   shippedHermesPlugin
-} from "../chunk-PPWEBIKL.js";
+} from "../chunk-COBOR3ST.js";
 import "../chunk-QCGNGEGE.js";
 import {
   FX_PROFILE_REFUSALS,

package/dist/bin/pushary-session-start-hook.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   reapplyClaudeForVersion
-} from "../chunk-MA65OP6M.js";
+} from "../chunk-RMFL62HR.js";
 import "../chunk-RVSRPDRF.js";
-import "../chunk-PPWEBIKL.js";
+import "../chunk-COBOR3ST.js";
 import "../chunk-SXAZPWL7.js";
 import "../chunk-JECH4NJL.js";
 import "../chunk-AZSOH2SF.js";

package/dist/bin/pushary-setup.js

@@ -136,7 +136,7 @@ import {
   routesHermesQuestions,
   runsAnOlderPlugin,
   shippedHermesPlugin
-} from "../chunk-PPWEBIKL.js";
+} from "../chunk-COBOR3ST.js";
 import {
   setHumanStream
 } from "../chunk-QCGNGEGE.js";

package/dist/bin/pushary-upgrade.js

@@ -28,7 +28,7 @@ import {
 import {
   ensureCodexTrustAfterReapply,
   reapplyAllAgents
-} from "../chunk-MA65OP6M.js";
+} from "../chunk-RMFL62HR.js";
 import {
   HERMES_RESTART_COMMAND,
   describeCodexTrustConfirmation
@@ -42,7 +42,7 @@ import {
   readMacAppAgentKey
 } from "../chunk-JKOAAIJD.js";
 import "../chunk-WYJ6QM7K.js";
-import "../chunk-PPWEBIKL.js";
+import "../chunk-COBOR3ST.js";
 import {
   FX_RELOAD_AFTER_BRIDGE,
   fxHttpEntryKeptNote,

package/dist/{chunk-PPWEBIKL.js → chunk-COBOR3ST.js}

@@ -1311,7 +1311,7 @@ def _await_decision(request, created, correlation_id: str, offered, uses_select:
     return _decided(request, correlation_id, "deny", None)
 ` },
   { path: "cancellation.py", contents: 'from __future__ import annotations\n\nfrom typing import Literal, Mapping, Tuple\n\nCancellation = Literal[\n    "withdrawn_by_this_call",\n    "cancelled_unproven",\n    "already_cancelled",\n    "not_pending",\n    "unreachable",\n]\n\nWITHDRAWN_BY_THIS_CALL: Cancellation = "withdrawn_by_this_call"\nCANCELLED_UNPROVEN: Cancellation = "cancelled_unproven"\nALREADY_CANCELLED: Cancellation = "already_cancelled"\nNOT_PENDING: Cancellation = "not_pending"\nUNREACHABLE: Cancellation = "unreachable"\nCANCELLATIONS: Tuple[Cancellation, ...] = (\n    WITHDRAWN_BY_THIS_CALL,\n    CANCELLED_UNPROVEN,\n    ALREADY_CANCELLED,\n    NOT_PENDING,\n    UNREACHABLE,\n)\n\nUNAVAILABLE_STATUS = "unavailable"\nSTOP_HANDOFF = "stop"\n\n\ndef classify_cancellation(response: object) -> Cancellation:\n    if not isinstance(response, Mapping):\n        return UNREACHABLE\n    fields: Mapping[object, object] = response\n    cancelled = fields.get("cancelled")\n    by_this_call = fields.get("cancelledByThisCall")\n    if (\n        not isinstance(cancelled, bool)\n        or fields.get("status") == UNAVAILABLE_STATUS\n        or fields.get("handoffAction") == STOP_HANDOFF\n        or (by_this_call is not None and not isinstance(by_this_call, bool))\n        or (by_this_call is True and not cancelled)\n    ):\n        return UNREACHABLE\n    if not cancelled:\n        return NOT_PENDING\n    if by_this_call is None:\n        return CANCELLED_UNPROVEN\n    return WITHDRAWN_BY_THIS_CALL if by_this_call else ALREADY_CANCELLED\n' },
-  { path: "dashboard/manifest.json", contents: '{\n  "name": "pushary",\n  "label": "Pushary",\n  "description": "Approvals Pushary is carrying to your phone, answerable from Hermes Desktop",\n  "version": "1.0.0",\n  "tab": { "hidden": true },\n  "entry": "web.js",\n  "api": "plugin_api.py"\n}\n' },
+  { path: "dashboard/manifest.json", contents: '{\n  "name": "pushary",\n  "label": "Pushary",\n  "description": "Approvals Pushary is carrying to your phone, answerable from Hermes Desktop",\n  "version": "1.0.1",\n  "tab": { "hidden": true },\n  "entry": "web.js",\n  "api": "plugin_api.py"\n}\n' },
   { path: "dashboard/plugin_api.py", contents: `import importlib
 import sys
 import time
@@ -1590,6 +1590,11 @@ SNAPSHOT_PRUNE_INTERVAL_SECONDS = 60 * 60
 SOURCE_UNAVAILABLE = "source_unavailable"
 HISTORY_NOT_ALLOWED_WARNING = ("[pushary] Hermes session history is not saved on this computer; it needs "
                                "\`npx pushary@latest setup\` with the key Hermes uses, or Session history turned on in the Pushary Mac app")
+HELPER_ENVIRONMENT_NAMES = frozenset({
+    "HOME", "PATH", "TMPDIR", "LANG", "LC_ALL", "LC_CTYPE",
+    "SYSTEMROOT", "PATHEXT", "COMSPEC", "USERPROFILE", "APPDATA", "LOCALAPPDATA", "TEMP", "TMP",
+    "PUSHARY_BASE_URL", "PUSHARY_API_URL", "PUSHARY_CONFIG_FILE", "PUSHARY_TRANSCRIPTS", "PUSHARY_TRANSCRIPT_REGISTRY_DIR",
+})
 
 
 class _Authorization(NamedTuple):
@@ -1717,6 +1722,14 @@ def write_snapshot(path: Path, session_id: str, messages: list[dict[str, object]
         Path(temporary).unlink(missing_ok=True)
 
 
+def _helper_environment() -> dict[str, str]:
+    return {name: value for name, value in os.environ.items() if name in HELPER_ENVIRONMENT_NAMES}
+
+
+def _registration_environment(key: str) -> dict[str, str]:
+    return {**_helper_environment(), "PUSHARY_API_KEY": key, "PUSHARY_BASE_URL": api.BASE_URL}
+
+
 def _registration_command(key: str) -> list[str] | None:
     root = Path.home() / ".pushary"
     try:
@@ -1731,7 +1744,7 @@ def _registration_command(key: str) -> list[str] | None:
             command = [helper, "hermes"]
         result = subprocess.run([helper, "authorize-export"],
                                 input=json.dumps({"apiKey": key, "baseUrl": api.BASE_URL}), text=True,
-                                stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, timeout=5, check=False)
+                                env=_helper_environment(), stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, timeout=5, check=False)
         if result.returncode != 0:
             return None
         authorization = json.loads(result.stdout)
@@ -1885,8 +1898,7 @@ def _export_loop(database_path: Path, session_id: str, key: str, command: list[s
             if ending or time.monotonic() >= next_registration:
                 payload = {"session_id": session_id, "cwd": str(database_path.parent), "transcript_path": str(path),
                            "hook_event_name": "SessionEnd" if ending else "SessionStart"}
-                environment = {**os.environ, "PUSHARY_API_KEY": key, "PUSHARY_BASE_URL": api.BASE_URL}
-                result = subprocess.run(command, input=json.dumps(payload), text=True, env=environment,
+                result = subprocess.run(command, input=json.dumps(payload), text=True, env=_registration_environment(key),
                                         stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL, timeout=5, check=False)
                 if result.returncode != 0:
                     logger.warning("[pushary] Hermes history reader could not register")
@@ -2084,7 +2096,7 @@ def record_plugin_load(approval_transport_registered, home=None, pid=None, now=N
         logger.debug("[pushary] could not record the plugin load: %s", exc)
         return None
 ` },
-  { path: "plugin.yaml", contents: 'name: pushary\nversion: 1.0.0\ndescription: Push notifications and human-in-the-loop for Hermes Agent via Pushary\nauthor: RalphNex OU\nrequires_env:\n  - name: PUSHARY_API_KEY\n    description: Your Pushary API key\n    url: https://pushary.com/sign-up?from=hermes\n    secret: true\nconfig_schema:\n  api_key:\n    type: secret\n    env: PUSHARY_API_KEY\n    label: Pushary API key\n    description: "Get one at pushary.com/sign-up?from=hermes"\n    required: true\nprovides_tools:\n  - pushary_remind\n  - pushary_notify\n  - pushary_ask\n  - pushary_wait\n  - pushary_cancel\n  - pushary_propose_scope\n  - pushary_enroll\n  - pushary_ask_end_user\nprovides_hooks:\n  - pre_llm_call\n  - pre_tool_call\n  - post_tool_call\n  - on_session_start\n  - on_session_end\n  - on_session_finalize\n  - post_approval_response\nprovides_approval_transports:\n  - pushary\n' },
+  { path: "plugin.yaml", contents: 'name: pushary\nversion: 1.0.1\ndescription: Push notifications and human-in-the-loop for Hermes Agent via Pushary\nauthor: RalphNex OU\nrequires_env:\n  - name: PUSHARY_API_KEY\n    description: Your Pushary API key\n    url: https://pushary.com/sign-up?from=hermes\n    secret: true\nconfig_schema:\n  api_key:\n    type: secret\n    env: PUSHARY_API_KEY\n    label: Pushary API key\n    description: "Get one at pushary.com/sign-up?from=hermes"\n    required: true\nprovides_tools:\n  - pushary_remind\n  - pushary_notify\n  - pushary_ask\n  - pushary_wait\n  - pushary_cancel\n  - pushary_propose_scope\n  - pushary_enroll\n  - pushary_ask_end_user\nprovides_hooks:\n  - pre_llm_call\n  - pre_tool_call\n  - post_tool_call\n  - on_session_start\n  - on_session_end\n  - on_session_finalize\n  - post_approval_response\nprovides_approval_transports:\n  - pushary\n' },
   { path: "schemas.py", contents: `PUSHARY_REMIND = {
     "name": "pushary_remind",
     "description": "Schedule a one-time personal reminder on Pushary, even after Hermes exits. Use body plus in_minutes or at (ISO timestamp with explicit UTC offset, within 30 days). Never guess the user's timezone. Confirm the returned time. No arguments lists pending reminders; cancel_reminder_id cancels a scheduled one. Use Hermes cron for agent work; use this for reminding the operator.",

package/dist/{chunk-MA65OP6M.js → chunk-RMFL62HR.js}

@@ -7,7 +7,7 @@ import {
   installHermesPlugin,
   refreshHermesPluginFiles,
   shippedHermesPlugin
-} from "./chunk-PPWEBIKL.js";
+} from "./chunk-COBOR3ST.js";
 import {
   fxIgnoresInstructionsFile,
   fxInstructionsBody,

package/dist/{reapply-3LBUA5EV.js → reapply-LDCMRN6Q.js}

@@ -12,9 +12,9 @@ import {
   reapplyOpenCodePlugin,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-MA65OP6M.js";
+} from "./chunk-RMFL62HR.js";
 import "./chunk-RVSRPDRF.js";
-import "./chunk-PPWEBIKL.js";
+import "./chunk-COBOR3ST.js";
 import "./chunk-SXAZPWL7.js";
 import "./chunk-JECH4NJL.js";
 import "./chunk-AZSOH2SF.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pushary",
-  "version": "1.9.102",
+  "version": "1.9.103",
   "description": "Human-in-the-loop (HITL) for AI agents: ask a person for approvals or answers by push notification. One command connects Claude Code, Codex, Cursor, Gemini CLI and more.",
   "keywords": [
     "pushary",