pushary 1.9.108 → 1.9.110

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 1.9.110
+
+- When Pushary's server says the key this computer sends is not valid (an unknown or revoked key, an expired connector key, or a value that is not a Pushary key at all), the CLI now remembers that for 60 seconds and sends no requests with that key in the meantime. During that minute, everything that would have asked the server gives exactly the answer it gives after that refusal today, with the same decision and the same message: the agent hooks, the `pushary-mcp` bridge, the MCP check in `pushary doctor`, the test approval in `pushary setup`, the Codex bridge and its native approvals, and session history capture. The memory is kept per key and per server in the temporary folder, holds a one-way hash of the key and never the key itself, and is ignored once it is older than 60 seconds or cannot be read. A different key, including a new one from `pushary login` or `pushary setup`, is used at once. A refusal about the plan or a key's permissions, a server error and a network failure are not remembered. A value that is not a Pushary key is remembered even while Pushary's sign-in service is having an outage, because no outage can make it a valid key. A server without this release sends no signal, so the CLI keeps asking it as before.
+
+## 1.9.109
+
+- On a Team workspace, approval routes now apply to the Codex app permission cards that Pushary forwards: Computer Use using an app or recording audio, and Browser use opening a site, downloading or uploading. Each card matches a route as the tool Codex raised it in, such as `mcp__cua_repl__get_app_state` or `mcp__cua_repl__access_browser_origin`, and a route for every tool matches them too. Nothing else in the CLI or the hooks changed.
+
 ## 1.9.108
 
 - After a successful `pushary setup` on the Agent or Agent Pro plan, setup prints one more line after the "Useful" list: "On a team? Send risky steps to a lead and see who approved: pushary.com/teams". It is not shown on Team, Partner, Enterprise or e-commerce plans, when setup could not check the plan, or when setup did not succeed. Nothing else in the CLI or the hooks changed.

package/dist/{api-RL5CPDTH.js → api-4MS4CPKY.js}

@@ -17,24 +17,25 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-IAASPG5B.js";
+} from "./chunk-DP62DH2Q.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-PFZCLG55.js";
-import "./chunk-EMSRB2KH.js";
-import "./chunk-LL7SW4RL.js";
-import "./chunk-I3IUS4SR.js";
-import "./chunk-JCSJEMTA.js";
-import "./chunk-ZCBTCW3T.js";
-import "./chunk-GKCDMAUM.js";
+import "./chunk-OJZ3CVGK.js";
+import "./chunk-GOUUFBBP.js";
+import "./chunk-XNMSVXB4.js";
+import "./chunk-DZMKNP3I.js";
+import "./chunk-G2TL4OEY.js";
+import "./chunk-FYSQQW6Q.js";
+import "./chunk-DQKTKMR3.js";
+import "./chunk-QYBQCMRP.js";
 import "./chunk-YU2EUD7O.js";
 import "./chunk-T5I4PKOQ.js";
 import "./chunk-BG4HHB7E.js";
-import "./chunk-YDQ6OJMF.js";
+import "./chunk-DLS43QDO.js";
 import "./chunk-ZVU6WMMU.js";
 import {
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON
-} from "./chunk-O5TB2LMQ.js";
+} from "./chunk-NMSRA7QO.js";
 import "./chunk-MLKGABMK.js";
 export {
   ABANDONED_WAIT,

package/dist/bin/pushary-audit.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   exitOnHelpFlag
-} from "../chunk-B5Q44HKN.js";
+} from "../chunk-E4ZZMAWF.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -9,7 +9,7 @@ import {
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
-import "../chunk-YDQ6OJMF.js";
+import "../chunk-DLS43QDO.js";
 import "../chunk-ZVU6WMMU.js";
 import {
   AUDIT_CHAIN_FINDING_SEVERITY,
@@ -22,7 +22,7 @@ import {
   parseAuditChainExport,
   parseAuditKnownHead,
   verifyAuditChainSite
-} from "../chunk-O5TB2LMQ.js";
+} from "../chunk-NMSRA7QO.js";
 import "../chunk-MLKGABMK.js";
 
 // src/audit-verify.ts

package/dist/bin/pushary-bell-hook.js

@@ -1,44 +1,45 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-X3QG5RT5.js";
+} from "../chunk-AZBKSMYC.js";
 import {
   readHookInput
-} from "../chunk-RKQVMFHN.js";
-import "../chunk-OINGJICB.js";
-import "../chunk-DS672F57.js";
+} from "../chunk-SQR7GGOH.js";
+import "../chunk-OKZR3LFO.js";
+import "../chunk-LJH2QDF3.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-JLJJRBTD.js";
-import "../chunk-KHZCJP7P.js";
-import "../chunk-HONSMBF2.js";
-import "../chunk-MFJHLVIZ.js";
-import "../chunk-76JOLPST.js";
-import "../chunk-DH22FQAS.js";
-import "../chunk-GUIS6ASL.js";
+import "../chunk-WKBXLLDY.js";
+import "../chunk-5RWBSMCI.js";
+import "../chunk-3OLVEVGW.js";
+import "../chunk-T72BV3CU.js";
+import "../chunk-BCZSRQ3L.js";
+import "../chunk-MZDFTXXO.js";
+import "../chunk-3QZSG2L4.js";
 import "../chunk-YPY4YCIZ.js";
-import "../chunk-4XE3DVF7.js";
+import "../chunk-FE4CSARF.js";
 import "../chunk-XMSDA5WA.js";
-import "../chunk-CJTJ55DR.js";
-import "../chunk-LMDXQIYT.js";
-import "../chunk-IAASPG5B.js";
+import "../chunk-UWQKGWBF.js";
+import "../chunk-ALA2OMOM.js";
+import "../chunk-DP62DH2Q.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-PFZCLG55.js";
-import "../chunk-EMSRB2KH.js";
-import "../chunk-LL7SW4RL.js";
+import "../chunk-OJZ3CVGK.js";
+import "../chunk-GOUUFBBP.js";
+import "../chunk-XNMSVXB4.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-I3IUS4SR.js";
-import "../chunk-B7O4CXFX.js";
-import "../chunk-Z5FV7LTD.js";
-import "../chunk-JCSJEMTA.js";
-import "../chunk-ZCBTCW3T.js";
-import "../chunk-GKCDMAUM.js";
+import "../chunk-DZMKNP3I.js";
+import "../chunk-G2TL4OEY.js";
+import "../chunk-XF3K42EV.js";
+import "../chunk-DOHQKE4Y.js";
+import "../chunk-FYSQQW6Q.js";
+import "../chunk-DQKTKMR3.js";
+import "../chunk-QYBQCMRP.js";
 import "../chunk-YU2EUD7O.js";
 import "../chunk-T5I4PKOQ.js";
 import "../chunk-BG4HHB7E.js";
-import "../chunk-YDQ6OJMF.js";
+import "../chunk-DLS43QDO.js";
 import "../chunk-ZVU6WMMU.js";
-import "../chunk-O5TB2LMQ.js";
+import "../chunk-NMSRA7QO.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-bell-hook.ts

package/dist/bin/pushary-bell.js

@@ -5,28 +5,28 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-X3QG5RT5.js";
+} from "../chunk-AZBKSMYC.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-B5Q44HKN.js";
+} from "../chunk-E4ZZMAWF.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-GUIS6ASL.js";
+} from "../chunk-3QZSG2L4.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";
-import "../chunk-B7O4CXFX.js";
-import "../chunk-Z5FV7LTD.js";
+import "../chunk-XF3K42EV.js";
+import "../chunk-DOHQKE4Y.js";
 import {
   claudeSettings
-} from "../chunk-JCSJEMTA.js";
-import "../chunk-ZCBTCW3T.js";
-import "../chunk-GKCDMAUM.js";
+} from "../chunk-FYSQQW6Q.js";
+import "../chunk-DQKTKMR3.js";
+import "../chunk-QYBQCMRP.js";
 import "../chunk-YU2EUD7O.js";
 import {
   readJsonSafe,
@@ -35,11 +35,11 @@ import {
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
-import "../chunk-YDQ6OJMF.js";
+import "../chunk-DLS43QDO.js";
 import "../chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "../chunk-O5TB2LMQ.js";
+} from "../chunk-NMSRA7QO.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-bell.ts

package/dist/bin/pushary-claude.js

@@ -12,19 +12,19 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-FE5JENEJ.js";
+} from "../chunk-YLLQZ6MR.js";
 import "../chunk-ROVLRXBI.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-UUJQK7DJ.js";
+} from "../chunk-2MJL3ZVW.js";
 import {
   claudeTranscriptPath,
   redactDraft,
   registerTranscript,
   registeredTranscriptEnabled,
   startDraftPublisher
-} from "../chunk-DS672F57.js";
+} from "../chunk-LJH2QDF3.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -40,32 +40,32 @@ import {
   removePendingCommand,
   reportEvent,
   savePendingCommand
-} from "../chunk-KHZCJP7P.js";
+} from "../chunk-5RWBSMCI.js";
 import {
   ensureDaemonRunning
-} from "../chunk-HONSMBF2.js";
-import "../chunk-MFJHLVIZ.js";
+} from "../chunk-3OLVEVGW.js";
+import "../chunk-T72BV3CU.js";
 import {
   UNNAMED_ACTION,
   deriveToolTarget,
   describeStopFailure,
   describeToolCall,
   scopePathFor
-} from "../chunk-76JOLPST.js";
-import "../chunk-DH22FQAS.js";
-import "../chunk-GUIS6ASL.js";
+} from "../chunk-BCZSRQ3L.js";
+import "../chunk-MZDFTXXO.js";
+import "../chunk-3QZSG2L4.js";
 import "../chunk-YPY4YCIZ.js";
-import "../chunk-4XE3DVF7.js";
+import "../chunk-FE4CSARF.js";
 import {
   external_exports
 } from "../chunk-XMSDA5WA.js";
 import {
   transcriptsEnabled
-} from "../chunk-CJTJ55DR.js";
+} from "../chunk-UWQKGWBF.js";
 import {
   repoKeyFor,
   repositoryScopeFor
-} from "../chunk-LMDXQIYT.js";
+} from "../chunk-ALA2OMOM.js";
 import {
   askUser,
   cancelQuestion,
@@ -77,36 +77,37 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-IAASPG5B.js";
+} from "../chunk-DP62DH2Q.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-PFZCLG55.js";
-import "../chunk-EMSRB2KH.js";
-import "../chunk-LL7SW4RL.js";
+} from "../chunk-OJZ3CVGK.js";
+import "../chunk-GOUUFBBP.js";
+import "../chunk-XNMSVXB4.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
+import "../chunk-DZMKNP3I.js";
 import {
   getMachineId
-} from "../chunk-I3IUS4SR.js";
-import "../chunk-B7O4CXFX.js";
-import "../chunk-Z5FV7LTD.js";
+} from "../chunk-G2TL4OEY.js";
+import "../chunk-XF3K42EV.js";
+import "../chunk-DOHQKE4Y.js";
 import {
   claudeConfigDir
-} from "../chunk-JCSJEMTA.js";
-import "../chunk-ZCBTCW3T.js";
+} from "../chunk-FYSQQW6Q.js";
+import "../chunk-DQKTKMR3.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-GKCDMAUM.js";
+} from "../chunk-QYBQCMRP.js";
 import "../chunk-YU2EUD7O.js";
 import "../chunk-T5I4PKOQ.js";
 import "../chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-YDQ6OJMF.js";
+} from "../chunk-DLS43QDO.js";
 import "../chunk-ZVU6WMMU.js";
 import {
   DECISION_STOP_REASON,
@@ -119,7 +120,7 @@ import {
   refusesWhenUnanswered,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-O5TB2LMQ.js";
+} from "../chunk-NMSRA7QO.js";
 import "../chunk-MLKGABMK.js";
 
 // src/wrapper/localPassthrough.ts

package/dist/bin/pushary-clean.js

@@ -15,30 +15,30 @@ import {
   storedMacAppState,
   storedPusharyKeychainServices,
   waitForMacAppExit
-} from "../chunk-G5HGV6D4.js";
+} from "../chunk-KS3OJ4C2.js";
 import {
   PUSHARY_SKILL_NAME,
   PUSHARY_SKILL_SOURCE,
   createGuards
 } from "../chunk-J42EAEX3.js";
-import "../chunk-S75UO75C.js";
+import "../chunk-6ZPGNVXS.js";
 import "../chunk-XCEN33UP.js";
 import {
   describeCliKeyRevocation,
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-ATVZAEM5.js";
+} from "../chunk-TBJ4OMO4.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-A37RKFI3.js";
+} from "../chunk-CUOFHW7F.js";
 import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-OBZQPBUI.js";
+} from "../chunk-ZCFPKN72.js";
 import {
   configFileHoldsMacAppKey,
   macAppKeepsMcpEntry,
@@ -46,22 +46,22 @@ import {
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-S2TTGX6F.js";
-import "../chunk-2HC5ISDW.js";
+} from "../chunk-NQAY6G3S.js";
+import "../chunk-5IRJERK2.js";
 import {
   HERMES_CONFIG_FILE,
   defaultHermesHome,
   hermesReceiptPaths,
   removeHermesWiring
-} from "../chunk-NM44KCO6.js";
+} from "../chunk-2U54YY4M.js";
 import "../chunk-QCGNGEGE.js";
 import {
   planClineRemoval,
   planFxRemoval,
   removeClineServer
-} from "../chunk-UXIUCMFO.js";
-import "../chunk-FJYUB3ZK.js";
-import "../chunk-DA57ZI62.js";
+} from "../chunk-DSA5E7IB.js";
+import "../chunk-TTDJHOYY.js";
+import "../chunk-NBNWMQH4.js";
 import {
   OPENCODE_ASKED_PERMISSIONS,
   OPENCODE_PLUGIN_SIBLING,
@@ -75,14 +75,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-IHQRLJEP.js";
+} from "../chunk-M6EYOBLJ.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-B5Q44HKN.js";
+} from "../chunk-E4ZZMAWF.js";
 import "../chunk-ROVLRXBI.js";
 import {
   compatibleConfigFile,
@@ -95,39 +95,40 @@ import {
   removeCompatibleHooks,
   removeCompatibleMcpServer,
   serializeConfigDocument
-} from "../chunk-JLJJRBTD.js";
-import "../chunk-KHZCJP7P.js";
+} from "../chunk-WKBXLLDY.js";
+import "../chunk-5RWBSMCI.js";
 import {
   disableDaemonService
-} from "../chunk-HONSMBF2.js";
+} from "../chunk-3OLVEVGW.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   removeGeminiSettings,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-MFJHLVIZ.js";
-import "../chunk-76JOLPST.js";
-import "../chunk-DH22FQAS.js";
-import "../chunk-GUIS6ASL.js";
+} from "../chunk-T72BV3CU.js";
+import "../chunk-BCZSRQ3L.js";
+import "../chunk-MZDFTXXO.js";
+import "../chunk-3QZSG2L4.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";
-import "../chunk-LMDXQIYT.js";
-import "../chunk-IAASPG5B.js";
+import "../chunk-ALA2OMOM.js";
+import "../chunk-DP62DH2Q.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-PFZCLG55.js";
-import "../chunk-EMSRB2KH.js";
-import "../chunk-LL7SW4RL.js";
+import "../chunk-OJZ3CVGK.js";
+import "../chunk-GOUUFBBP.js";
+import "../chunk-XNMSVXB4.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-I3IUS4SR.js";
+import "../chunk-DZMKNP3I.js";
+import "../chunk-G2TL4OEY.js";
 import {
   CANDIDATE_RCS,
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-B7O4CXFX.js";
-import "../chunk-Z5FV7LTD.js";
+} from "../chunk-XF3K42EV.js";
+import "../chunk-DOHQKE4Y.js";
 import {
   claudeConfigDir,
   claudeJson,
@@ -172,17 +173,17 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-JCSJEMTA.js";
+} from "../chunk-FYSQQW6Q.js";
 import {
   cleanNpmEnv,
   globalPackageState,
   npmIsOnPath,
   readGlobalFolder,
   readGlobalPrefix
-} from "../chunk-ZCBTCW3T.js";
+} from "../chunk-DQKTKMR3.js";
 import {
   getBaseUrl
-} from "../chunk-GKCDMAUM.js";
+} from "../chunk-QYBQCMRP.js";
 import "../chunk-YU2EUD7O.js";
 import "../chunk-T5I4PKOQ.js";
 import {
@@ -190,7 +191,7 @@ import {
 } from "../chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-YDQ6OJMF.js";
+} from "../chunk-DLS43QDO.js";
 import {
   CLI_PACKAGE_NAMES,
   globalPackageFolder,
@@ -204,7 +205,7 @@ import {
   SUPPORT_EMAIL,
   isValidApiKey,
   redactSecrets
-} from "../chunk-O5TB2LMQ.js";
+} from "../chunk-NMSRA7QO.js";
 import "../chunk-E46NE7FB.js";
 import "../chunk-MLKGABMK.js";
 

package/dist/bin/pushary-codex-bridge.js

@@ -1,46 +1,47 @@
 #!/usr/bin/env node
 import {
   runCodexBridge
-} from "../chunk-DIVVLBZZ.js";
-import "../chunk-HH5NNPB5.js";
+} from "../chunk-HENHPRJN.js";
+import "../chunk-S7ZX7V5S.js";
 import {
   resolveProviderBinary
-} from "../chunk-GESW4OSZ.js";
-import "../chunk-IGO5NDQY.js";
+} from "../chunk-JPR4S254.js";
+import "../chunk-TJUDVI2Y.js";
 import "../chunk-N5P2FLOJ.js";
 import {
   withSpawnProcessOwnership
-} from "../chunk-FE5JENEJ.js";
+} from "../chunk-YLLQZ6MR.js";
 import "../chunk-ROVLRXBI.js";
-import "../chunk-4XE3DVF7.js";
+import "../chunk-FE4CSARF.js";
 import "../chunk-XMSDA5WA.js";
 import {
   transcriptsEnabled
-} from "../chunk-CJTJ55DR.js";
-import "../chunk-LMDXQIYT.js";
-import "../chunk-IAASPG5B.js";
+} from "../chunk-UWQKGWBF.js";
+import "../chunk-ALA2OMOM.js";
+import "../chunk-DP62DH2Q.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-PFZCLG55.js";
-import "../chunk-EMSRB2KH.js";
-import "../chunk-LL7SW4RL.js";
+import "../chunk-OJZ3CVGK.js";
+import "../chunk-GOUUFBBP.js";
+import "../chunk-XNMSVXB4.js";
 import "../chunk-XHKBHWLX.js";
+import "../chunk-DZMKNP3I.js";
 import {
   getMachineId
-} from "../chunk-I3IUS4SR.js";
-import "../chunk-B7O4CXFX.js";
-import "../chunk-Z5FV7LTD.js";
-import "../chunk-JCSJEMTA.js";
-import "../chunk-ZCBTCW3T.js";
+} from "../chunk-G2TL4OEY.js";
+import "../chunk-XF3K42EV.js";
+import "../chunk-DOHQKE4Y.js";
+import "../chunk-FYSQQW6Q.js";
+import "../chunk-DQKTKMR3.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-GKCDMAUM.js";
+} from "../chunk-QYBQCMRP.js";
 import "../chunk-YU2EUD7O.js";
 import "../chunk-T5I4PKOQ.js";
 import "../chunk-BG4HHB7E.js";
-import "../chunk-YDQ6OJMF.js";
+import "../chunk-DLS43QDO.js";
 import "../chunk-ZVU6WMMU.js";
-import "../chunk-O5TB2LMQ.js";
+import "../chunk-NMSRA7QO.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-codex-bridge.ts