pushary 1.9.107 → 1.9.109

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 1.9.109
+
+- On a Team workspace, approval routes now apply to the Codex app permission cards that Pushary forwards: Computer Use using an app or recording audio, and Browser use opening a site, downloading or uploading. Each card matches a route as the tool Codex raised it in, such as `mcp__cua_repl__get_app_state` or `mcp__cua_repl__access_browser_origin`, and a route for every tool matches them too. Nothing else in the CLI or the hooks changed.
+
+## 1.9.108
+
+- After a successful `pushary setup` on the Agent or Agent Pro plan, setup prints one more line after the "Useful" list: "On a team? Send risky steps to a lead and see who approved: pushary.com/teams". It is not shown on Team, Partner, Enterprise or e-commerce plans, when setup could not check the plan, or when setup did not succeed. Nothing else in the CLI or the hooks changed.
+
 ## 1.9.107
 
 - On Windows, the hook now reads Claude Code's managed settings from `C:\Program Files\ClaudeCode\managed-settings.json`, where Claude Code reads them. It read `C:\ProgramData\ClaudeCode\managed-settings.json`, which Claude Code no longer reads, so an organization's managed allow, ask and deny rules were missing when Pushary checked whether Claude Code's own rules already cover a tool call, and from the hook wiring report. macOS and Linux are unchanged. Nothing else in the CLI or the hooks changed.

package/data/cursor-plugin/README.md

@@ -83,6 +83,15 @@ The hooks register the supported execution boundaries; your dashboard policy dec
 
 Timeout approvals apply only after the configured wait actually elapsed. Short editor hook budgets can end a wait earlier; cancellation is attempted before handoff. An uncertain cancellation denies the action. Local plugin installation does not install hooks into remote or cloud agent environments.
 
+## For teams
+
+On [Pushary for Teams](https://pushary.com/teams?utm_source=github&utm_medium=oss-adapter&utm_campaign=cursor-plugin&utm_content=readme-teams), each person installs the plugin and connects their own Cursor. Their agent's questions go to them. An owner or admin can send a chosen step to someone else with a routing rule in **Policies**, under **Approval routing**, such as `Bash(git push:*)` in the `infra` repository, routed to the Admins role. Cursor's shell commands match `Bash(...)` rules, so the same rule also covers teammates on Claude Code, Codex or Gemini CLI. Whoever answers in the phone app, Mac app or dashboard is recorded by name.
+
+- Cursor gives a hook about 60 seconds, so a lead has to answer within that. If nobody does, the step goes back to Cursor, and a yes given there isn't recorded.
+- The phone can only deny risky steps such as a force push or `rm -r`. Approve those in the dashboard.
+
+Team is $59 a month for 5 people, plus $12 for each extra person.
+
 ## Commands
 
 - `/pushary-test` sends a test push so you can confirm delivery.

package/dist/{api-RL5CPDTH.js → api-YCDTPFT7.js}

@@ -17,24 +17,24 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-IAASPG5B.js";
+} from "./chunk-FYK7JV2R.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-PFZCLG55.js";
-import "./chunk-EMSRB2KH.js";
-import "./chunk-LL7SW4RL.js";
-import "./chunk-I3IUS4SR.js";
-import "./chunk-JCSJEMTA.js";
-import "./chunk-ZCBTCW3T.js";
-import "./chunk-GKCDMAUM.js";
+import "./chunk-FR25IWL7.js";
+import "./chunk-QNUGTQKZ.js";
+import "./chunk-G6PHMB3F.js";
+import "./chunk-J5EAU44S.js";
+import "./chunk-KK5YNO2M.js";
+import "./chunk-MAWFWQLR.js";
+import "./chunk-RXRKX646.js";
 import "./chunk-YU2EUD7O.js";
 import "./chunk-T5I4PKOQ.js";
 import "./chunk-BG4HHB7E.js";
-import "./chunk-YDQ6OJMF.js";
+import "./chunk-MYDTSPIZ.js";
 import "./chunk-ZVU6WMMU.js";
 import {
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON
-} from "./chunk-O5TB2LMQ.js";
+} from "./chunk-SALM3IYQ.js";
 import "./chunk-MLKGABMK.js";
 export {
   ABANDONED_WAIT,

package/dist/bin/pushary-audit.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   exitOnHelpFlag
-} from "../chunk-B5Q44HKN.js";
+} from "../chunk-YB2S73VZ.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -9,7 +9,7 @@ import {
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
-import "../chunk-YDQ6OJMF.js";
+import "../chunk-MYDTSPIZ.js";
 import "../chunk-ZVU6WMMU.js";
 import {
   AUDIT_CHAIN_FINDING_SEVERITY,
@@ -22,7 +22,7 @@ import {
   parseAuditChainExport,
   parseAuditKnownHead,
   verifyAuditChainSite
-} from "../chunk-O5TB2LMQ.js";
+} from "../chunk-SALM3IYQ.js";
 import "../chunk-MLKGABMK.js";
 
 // src/audit-verify.ts

package/dist/bin/pushary-bell-hook.js

@@ -1,44 +1,44 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-X3QG5RT5.js";
+} from "../chunk-3OPHZY7L.js";
 import {
   readHookInput
-} from "../chunk-RKQVMFHN.js";
-import "../chunk-OINGJICB.js";
-import "../chunk-DS672F57.js";
+} from "../chunk-QMUSLBVA.js";
+import "../chunk-SDZBQQEK.js";
+import "../chunk-BUBLUKJM.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-JLJJRBTD.js";
-import "../chunk-KHZCJP7P.js";
-import "../chunk-HONSMBF2.js";
-import "../chunk-MFJHLVIZ.js";
-import "../chunk-76JOLPST.js";
-import "../chunk-DH22FQAS.js";
-import "../chunk-GUIS6ASL.js";
+import "../chunk-S2NBNU4K.js";
+import "../chunk-PEWTRW6S.js";
+import "../chunk-II6M23WI.js";
+import "../chunk-3YY6CUU7.js";
+import "../chunk-UC2NBQS3.js";
+import "../chunk-K6E24TJ6.js";
+import "../chunk-GNOSBEUB.js";
 import "../chunk-YPY4YCIZ.js";
-import "../chunk-4XE3DVF7.js";
+import "../chunk-BDAT6H7J.js";
 import "../chunk-XMSDA5WA.js";
-import "../chunk-CJTJ55DR.js";
-import "../chunk-LMDXQIYT.js";
-import "../chunk-IAASPG5B.js";
+import "../chunk-7S262556.js";
+import "../chunk-UK4Z3X75.js";
+import "../chunk-FYK7JV2R.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-PFZCLG55.js";
-import "../chunk-EMSRB2KH.js";
-import "../chunk-LL7SW4RL.js";
+import "../chunk-FR25IWL7.js";
+import "../chunk-QNUGTQKZ.js";
+import "../chunk-G6PHMB3F.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-I3IUS4SR.js";
-import "../chunk-B7O4CXFX.js";
-import "../chunk-Z5FV7LTD.js";
-import "../chunk-JCSJEMTA.js";
-import "../chunk-ZCBTCW3T.js";
-import "../chunk-GKCDMAUM.js";
+import "../chunk-J5EAU44S.js";
+import "../chunk-4SUNBCR6.js";
+import "../chunk-I4THVOUC.js";
+import "../chunk-KK5YNO2M.js";
+import "../chunk-MAWFWQLR.js";
+import "../chunk-RXRKX646.js";
 import "../chunk-YU2EUD7O.js";
 import "../chunk-T5I4PKOQ.js";
 import "../chunk-BG4HHB7E.js";
-import "../chunk-YDQ6OJMF.js";
+import "../chunk-MYDTSPIZ.js";
 import "../chunk-ZVU6WMMU.js";
-import "../chunk-O5TB2LMQ.js";
+import "../chunk-SALM3IYQ.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-bell-hook.ts

package/dist/bin/pushary-bell.js

@@ -5,28 +5,28 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-X3QG5RT5.js";
+} from "../chunk-3OPHZY7L.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-B5Q44HKN.js";
+} from "../chunk-YB2S73VZ.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-GUIS6ASL.js";
+} from "../chunk-GNOSBEUB.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";
-import "../chunk-B7O4CXFX.js";
-import "../chunk-Z5FV7LTD.js";
+import "../chunk-4SUNBCR6.js";
+import "../chunk-I4THVOUC.js";
 import {
   claudeSettings
-} from "../chunk-JCSJEMTA.js";
-import "../chunk-ZCBTCW3T.js";
-import "../chunk-GKCDMAUM.js";
+} from "../chunk-KK5YNO2M.js";
+import "../chunk-MAWFWQLR.js";
+import "../chunk-RXRKX646.js";
 import "../chunk-YU2EUD7O.js";
 import {
   readJsonSafe,
@@ -35,11 +35,11 @@ import {
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
-import "../chunk-YDQ6OJMF.js";
+import "../chunk-MYDTSPIZ.js";
 import "../chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "../chunk-O5TB2LMQ.js";
+} from "../chunk-SALM3IYQ.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-bell.ts

package/dist/bin/pushary-claude.js

@@ -12,19 +12,19 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-FE5JENEJ.js";
+} from "../chunk-QPNYMNB7.js";
 import "../chunk-ROVLRXBI.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-UUJQK7DJ.js";
+} from "../chunk-3X3FNKAE.js";
 import {
   claudeTranscriptPath,
   redactDraft,
   registerTranscript,
   registeredTranscriptEnabled,
   startDraftPublisher
-} from "../chunk-DS672F57.js";
+} from "../chunk-BUBLUKJM.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -40,32 +40,32 @@ import {
   removePendingCommand,
   reportEvent,
   savePendingCommand
-} from "../chunk-KHZCJP7P.js";
+} from "../chunk-PEWTRW6S.js";
 import {
   ensureDaemonRunning
-} from "../chunk-HONSMBF2.js";
-import "../chunk-MFJHLVIZ.js";
+} from "../chunk-II6M23WI.js";
+import "../chunk-3YY6CUU7.js";
 import {
   UNNAMED_ACTION,
   deriveToolTarget,
   describeStopFailure,
   describeToolCall,
   scopePathFor
-} from "../chunk-76JOLPST.js";
-import "../chunk-DH22FQAS.js";
-import "../chunk-GUIS6ASL.js";
+} from "../chunk-UC2NBQS3.js";
+import "../chunk-K6E24TJ6.js";
+import "../chunk-GNOSBEUB.js";
 import "../chunk-YPY4YCIZ.js";
-import "../chunk-4XE3DVF7.js";
+import "../chunk-BDAT6H7J.js";
 import {
   external_exports
 } from "../chunk-XMSDA5WA.js";
 import {
   transcriptsEnabled
-} from "../chunk-CJTJ55DR.js";
+} from "../chunk-7S262556.js";
 import {
   repoKeyFor,
   repositoryScopeFor
-} from "../chunk-LMDXQIYT.js";
+} from "../chunk-UK4Z3X75.js";
 import {
   askUser,
   cancelQuestion,
@@ -77,36 +77,36 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-IAASPG5B.js";
+} from "../chunk-FYK7JV2R.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-PFZCLG55.js";
-import "../chunk-EMSRB2KH.js";
-import "../chunk-LL7SW4RL.js";
+} from "../chunk-FR25IWL7.js";
+import "../chunk-QNUGTQKZ.js";
+import "../chunk-G6PHMB3F.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "../chunk-I3IUS4SR.js";
-import "../chunk-B7O4CXFX.js";
-import "../chunk-Z5FV7LTD.js";
+} from "../chunk-J5EAU44S.js";
+import "../chunk-4SUNBCR6.js";
+import "../chunk-I4THVOUC.js";
 import {
   claudeConfigDir
-} from "../chunk-JCSJEMTA.js";
-import "../chunk-ZCBTCW3T.js";
+} from "../chunk-KK5YNO2M.js";
+import "../chunk-MAWFWQLR.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-GKCDMAUM.js";
+} from "../chunk-RXRKX646.js";
 import "../chunk-YU2EUD7O.js";
 import "../chunk-T5I4PKOQ.js";
 import "../chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-YDQ6OJMF.js";
+} from "../chunk-MYDTSPIZ.js";
 import "../chunk-ZVU6WMMU.js";
 import {
   DECISION_STOP_REASON,
@@ -119,7 +119,7 @@ import {
   refusesWhenUnanswered,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-O5TB2LMQ.js";
+} from "../chunk-SALM3IYQ.js";
 import "../chunk-MLKGABMK.js";
 
 // src/wrapper/localPassthrough.ts

package/dist/bin/pushary-clean.js

@@ -15,30 +15,30 @@ import {
   storedMacAppState,
   storedPusharyKeychainServices,
   waitForMacAppExit
-} from "../chunk-G5HGV6D4.js";
+} from "../chunk-JOF3TPDT.js";
 import {
   PUSHARY_SKILL_NAME,
   PUSHARY_SKILL_SOURCE,
   createGuards
 } from "../chunk-J42EAEX3.js";
-import "../chunk-S75UO75C.js";
+import "../chunk-MMHBNMHK.js";
 import "../chunk-XCEN33UP.js";
 import {
   describeCliKeyRevocation,
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-ATVZAEM5.js";
+} from "../chunk-EMEF7ALE.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-A37RKFI3.js";
+} from "../chunk-KCKLLGMW.js";
 import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-OBZQPBUI.js";
+} from "../chunk-PZ3X6NFM.js";
 import {
   configFileHoldsMacAppKey,
   macAppKeepsMcpEntry,
@@ -46,22 +46,22 @@ import {
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-S2TTGX6F.js";
-import "../chunk-2HC5ISDW.js";
+} from "../chunk-F3O5VDQL.js";
+import "../chunk-7VIJBCMF.js";
 import {
   HERMES_CONFIG_FILE,
   defaultHermesHome,
   hermesReceiptPaths,
   removeHermesWiring
-} from "../chunk-NM44KCO6.js";
+} from "../chunk-FIFSPMQZ.js";
 import "../chunk-QCGNGEGE.js";
 import {
   planClineRemoval,
   planFxRemoval,
   removeClineServer
-} from "../chunk-UXIUCMFO.js";
-import "../chunk-FJYUB3ZK.js";
-import "../chunk-DA57ZI62.js";
+} from "../chunk-4BDOUP4B.js";
+import "../chunk-P7LHBBM5.js";
+import "../chunk-ZMZG32RS.js";
 import {
   OPENCODE_ASKED_PERMISSIONS,
   OPENCODE_PLUGIN_SIBLING,
@@ -75,14 +75,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-IHQRLJEP.js";
+} from "../chunk-VKGSGULO.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-B5Q44HKN.js";
+} from "../chunk-YB2S73VZ.js";
 import "../chunk-ROVLRXBI.js";
 import {
   compatibleConfigFile,
@@ -95,39 +95,39 @@ import {
   removeCompatibleHooks,
   removeCompatibleMcpServer,
   serializeConfigDocument
-} from "../chunk-JLJJRBTD.js";
-import "../chunk-KHZCJP7P.js";
+} from "../chunk-S2NBNU4K.js";
+import "../chunk-PEWTRW6S.js";
 import {
   disableDaemonService
-} from "../chunk-HONSMBF2.js";
+} from "../chunk-II6M23WI.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   removeGeminiSettings,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-MFJHLVIZ.js";
-import "../chunk-76JOLPST.js";
-import "../chunk-DH22FQAS.js";
-import "../chunk-GUIS6ASL.js";
+} from "../chunk-3YY6CUU7.js";
+import "../chunk-UC2NBQS3.js";
+import "../chunk-K6E24TJ6.js";
+import "../chunk-GNOSBEUB.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";
-import "../chunk-LMDXQIYT.js";
-import "../chunk-IAASPG5B.js";
+import "../chunk-UK4Z3X75.js";
+import "../chunk-FYK7JV2R.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-PFZCLG55.js";
-import "../chunk-EMSRB2KH.js";
-import "../chunk-LL7SW4RL.js";
+import "../chunk-FR25IWL7.js";
+import "../chunk-QNUGTQKZ.js";
+import "../chunk-G6PHMB3F.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-I3IUS4SR.js";
+import "../chunk-J5EAU44S.js";
 import {
   CANDIDATE_RCS,
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-B7O4CXFX.js";
-import "../chunk-Z5FV7LTD.js";
+} from "../chunk-4SUNBCR6.js";
+import "../chunk-I4THVOUC.js";
 import {
   claudeConfigDir,
   claudeJson,
@@ -172,17 +172,17 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-JCSJEMTA.js";
+} from "../chunk-KK5YNO2M.js";
 import {
   cleanNpmEnv,
   globalPackageState,
   npmIsOnPath,
   readGlobalFolder,
   readGlobalPrefix
-} from "../chunk-ZCBTCW3T.js";
+} from "../chunk-MAWFWQLR.js";
 import {
   getBaseUrl
-} from "../chunk-GKCDMAUM.js";
+} from "../chunk-RXRKX646.js";
 import "../chunk-YU2EUD7O.js";
 import "../chunk-T5I4PKOQ.js";
 import {
@@ -190,7 +190,7 @@ import {
 } from "../chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-YDQ6OJMF.js";
+} from "../chunk-MYDTSPIZ.js";
 import {
   CLI_PACKAGE_NAMES,
   globalPackageFolder,
@@ -204,7 +204,7 @@ import {
   SUPPORT_EMAIL,
   isValidApiKey,
   redactSecrets
-} from "../chunk-O5TB2LMQ.js";
+} from "../chunk-SALM3IYQ.js";
 import "../chunk-E46NE7FB.js";
 import "../chunk-MLKGABMK.js";
 

package/dist/bin/pushary-codex-bridge.js

@@ -1,46 +1,46 @@
 #!/usr/bin/env node
 import {
   runCodexBridge
-} from "../chunk-DIVVLBZZ.js";
-import "../chunk-HH5NNPB5.js";
+} from "../chunk-ULTBTBMV.js";
+import "../chunk-SCQRKKGL.js";
 import {
   resolveProviderBinary
-} from "../chunk-GESW4OSZ.js";
-import "../chunk-IGO5NDQY.js";
+} from "../chunk-M6SP3FZF.js";
+import "../chunk-V25XPPEY.js";
 import "../chunk-N5P2FLOJ.js";
 import {
   withSpawnProcessOwnership
-} from "../chunk-FE5JENEJ.js";
+} from "../chunk-QPNYMNB7.js";
 import "../chunk-ROVLRXBI.js";
-import "../chunk-4XE3DVF7.js";
+import "../chunk-BDAT6H7J.js";
 import "../chunk-XMSDA5WA.js";
 import {
   transcriptsEnabled
-} from "../chunk-CJTJ55DR.js";
-import "../chunk-LMDXQIYT.js";
-import "../chunk-IAASPG5B.js";
+} from "../chunk-7S262556.js";
+import "../chunk-UK4Z3X75.js";
+import "../chunk-FYK7JV2R.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-PFZCLG55.js";
-import "../chunk-EMSRB2KH.js";
-import "../chunk-LL7SW4RL.js";
+import "../chunk-FR25IWL7.js";
+import "../chunk-QNUGTQKZ.js";
+import "../chunk-G6PHMB3F.js";
 import "../chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "../chunk-I3IUS4SR.js";
-import "../chunk-B7O4CXFX.js";
-import "../chunk-Z5FV7LTD.js";
-import "../chunk-JCSJEMTA.js";
-import "../chunk-ZCBTCW3T.js";
+} from "../chunk-J5EAU44S.js";
+import "../chunk-4SUNBCR6.js";
+import "../chunk-I4THVOUC.js";
+import "../chunk-KK5YNO2M.js";
+import "../chunk-MAWFWQLR.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-GKCDMAUM.js";
+} from "../chunk-RXRKX646.js";
 import "../chunk-YU2EUD7O.js";
 import "../chunk-T5I4PKOQ.js";
 import "../chunk-BG4HHB7E.js";
-import "../chunk-YDQ6OJMF.js";
+import "../chunk-MYDTSPIZ.js";
 import "../chunk-ZVU6WMMU.js";
-import "../chunk-O5TB2LMQ.js";
+import "../chunk-SALM3IYQ.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-codex-bridge.ts