pushary 1.9.143 → 1.9.145

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 1.9.145
+
+- Hermes: Hermes skips its own dangerous-command approvals when its terminal backend is a container: `docker` with no host folder mounted, `modal`, `daytona`, `vercel_sandbox`, or a plugin backend that marks itself as a sandbox. Pushary gets those approvals through Hermes, so on such a backend no shell command reached your phone, and nothing said so. `pushary doctor` now names the backend, says that Pushary only gates the tools listed in `PUSHARY_GATE_TOOLS` there, and gives the fix.
+- Setup run at a terminal without `--agents` offers to add `terminal` to `PUSHARY_GATE_TOOLS` on such a backend, so your phone is asked before each shell command, read-only ones included. The answer defaults to No. With `--agents`, or without a person at the terminal, it changes nothing and prints the command instead. `--hermes-gate-terminal` makes the same change without asking. Setup writes the setting with `hermes config set`, which saves it in `~/.hermes/.env`, keeps any tools already listed, and records what was there before so `pushary clean` puts it back. On a backend where Hermes checks commands itself, the flag leaves the setting alone.
+- Doctor reads `TERMINAL_DOCKER_VOLUMES` and `TERMINAL_DOCKER_MOUNT_CWD_TO_WORKSPACE` from Hermes too, so a host folder mounted only in `~/.hermes/.env` no longer reads as a container that skips approvals. With Pushary as the approval transport, doctor warns when `command_allowlist` holds `plugin_rule:terminal`, which **Always allow** adds and which lets every shell command through, instead of saying Pushary gates them. Doctor and setup read these settings as a gateway running as a service sees them, so a `PUSHARY_GATE_TOOLS` exported only in your shell no longer reads as gated.
+- The Hermes plugin Pushary installs is now 1.0.2. When Hermes loads it on such a backend and `PUSHARY_GATE_TOOLS` does not name `terminal`, it logs one warning with the command that fixes it.
+
+## 1.9.144
+
+- The Pushary instructions this CLI writes into AGENTS.md and GEMINI.md, and the Pushary skill it installs (0.13.3), say what to do when you ask an agent to call, phone or ring you if it gets stuck: ask with `ask_user`. Pushary may phone you only when the `ask_user` reply includes `phoneCall`; without it no call is planned, and the agent is told not to promise one. While the reply is pending and has no `handoffAction`, the agent keeps waiting with `wait_for_answer`; with one, it follows the handoff.
+- The skill's description is cut to 1015 characters, inside the 1024 that Agent Skills and Codex read. It no longer names "keep working while I am in a meeting" or the Claude Max line.
+- fx: the instructions setup writes into `~/.fx/AGENTS.md` say how to load a Pushary tool both in an fx with the `toolbox` tool, which replaces `mcp_select_tool` in fx after 0.0.16, and in an older fx. Setup and `pushary upgrade` say fx picks up the change automatically and to restart it if Pushary's tools do not appear, since fx 0.0.15 removed `/mcp reload`.
+
 ## 1.9.143
 
 - A hook waiting on your answer no longer cancels the question when one poll fails. A network blip, a dropped connection, a server error or a rate limit while the hook waits for `wait_for_answer` used to withdraw the question at once, so a phone call or a late tap had nothing left to answer. The hook now keeps polling with growing pauses (2, 4, 8, then 15 seconds) until its own deadline. A failure that will not pass, such as a refused request, a tool error or a reply the hook cannot read, still withdraws the question right away. The `pushary claude` wrapper waits the same way, and a session cancelled during a pause stops at once.

package/data/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pushary
-version: 0.13.2
-description: Push notifications and human-in-the-loop for AI agents. Use this whenever a running agent needs a person who may not be at the terminal, such as before an irreversible or destructive action, before spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, when running unattended and you hit a genuine ambiguity, when another skill's workflow says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, or do not wait for me, or wants a long task to run unattended. Ask yes/no, multiple choice or free-text questions on their phone and get the answer back, and send an update when a task finishes or fails. Use these tools proactively, without waiting to be asked. Every question and answer is recorded, so an unattended run stays reviewable afterwards. Works with Claude Code, Codex, Cursor, VS Code, Gemini CLI, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted, paid service; web and native store checkout have different price and trial terms.
+version: 0.13.3
+description: Push notifications and human-in-the-loop for AI agents. Use it whenever a running agent needs a person who may not be at the terminal, such as before an irreversible or destructive action, spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, on a genuine ambiguity while unattended, when another skill says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says keep going and ping me on my phone if you need anything, call me if you get stuck, notify me when my agent needs me, approve from my phone, ask me while I am away, run this overnight, I am stepping away, or do not wait for me. Ask yes/no, choice or free-text questions on their phone and send updates. Use these tools proactively. Works with Claude Code, Codex, Cursor, VS Code, Gemini CLI, Windsurf, Hermes, Lovable or any MCP client. Pushary is a hosted, paid service; web and native store checkout have different price and trial terms.
 metadata:
   hermes:
     tags: [notifications, push, human-in-the-loop, alerts, permissions, mcp]
@@ -215,6 +215,8 @@ Asks a question and waits. Use `confirm` for yes or no, `select` for 2 to 6 know
 
 **Answers.** `value` is "yes" or "no" for confirm, the chosen option for select, and the typed text for input. Read `note` too: a denial with a note carries the reason or a condition. A select or input value containing "yes" is answer data, not approval of a separate action.
 
+**Phone calls.** When the user says "call me", "phone me" or "ring me if you get stuck", ask with `ask_user`; there is no separate call tool. Pushary may phone only when the reply includes `phoneCall`; without it no call is planned, so do not promise one. With it, Pushary phones the person who can answer if the question is still unanswered, and records what they say as the answer: an approval, a choice or free text. For a call to the user, `ringsAt` says when it rings, and `waiting_for_calling_hours` means it rings when their calling hours start. While the reply is pending and has no `handoffAction`, keep waiting with `wait_for_answer` and the same `correlationId`: the spoken answer arrives there like any other. Do not cancel the question, ask it again or give up because a call is coming.
+
 ```json
 { "question": "Delete the 3 unused migration files in db/migrate/?", "type": "confirm", "context": "Cleaning up old migrations before the schema change", "toolName": "Bash", "toolTarget": "rm", "actionBody": "rm db/migrate/0003_*.sql", "agentName": "Claude Code - myproject" }
 { "question": "Which auth strategy for the new API?", "type": "select", "options": ["JWT tokens", "Session cookies", "OAuth2 + PKCE"], "context": "Setting up auth for the new endpoints", "agentName": "Claude Code - api-server" }

package/data/cursor-plugin/skills/pushary/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pushary
-description: Push notifications and human-in-the-loop for AI agents. Use this whenever a running agent needs a person who may not be at the terminal, such as before an irreversible or destructive action, before spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, when running unattended and you hit a genuine ambiguity, when another skill's workflow says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, or do not wait for me, or wants a long task to run unattended. Ask yes/no, multiple choice or free-text questions on their phone and get the answer back, and send an update when a task finishes or fails. Use these tools proactively, without waiting to be asked. Every question and answer is recorded, so an unattended run stays reviewable afterwards. Works with Claude Code, Codex, Cursor, VS Code, Gemini CLI, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted, paid service; web and native store checkout have different price and trial terms.
+description: Push notifications and human-in-the-loop for AI agents. Use it whenever a running agent needs a person who may not be at the terminal, such as before an irreversible or destructive action, spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, on a genuine ambiguity while unattended, when another skill says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says keep going and ping me on my phone if you need anything, call me if you get stuck, notify me when my agent needs me, approve from my phone, ask me while I am away, run this overnight, I am stepping away, or do not wait for me. Ask yes/no, choice or free-text questions on their phone and send updates. Use these tools proactively. Works with Claude Code, Codex, Cursor, VS Code, Gemini CLI, Windsurf, Hermes, Lovable or any MCP client. Pushary is a hosted, paid service; web and native store checkout have different price and trial terms.
 ---
 
 # Pushary - Push Notifications for AI Agents
@@ -208,6 +208,8 @@ Asks a question and waits. Use `confirm` for yes or no, `select` for 2 to 6 know
 
 **Answers.** `value` is "yes" or "no" for confirm, the chosen option for select, and the typed text for input. Read `note` too: a denial with a note carries the reason or a condition. A select or input value containing "yes" is answer data, not approval of a separate action.
 
+**Phone calls.** When the user says "call me", "phone me" or "ring me if you get stuck", ask with `ask_user`; there is no separate call tool. Pushary may phone only when the reply includes `phoneCall`; without it no call is planned, so do not promise one. With it, Pushary phones the person who can answer if the question is still unanswered, and records what they say as the answer: an approval, a choice or free text. For a call to the user, `ringsAt` says when it rings, and `waiting_for_calling_hours` means it rings when their calling hours start. While the reply is pending and has no `handoffAction`, keep waiting with `wait_for_answer` and the same `correlationId`: the spoken answer arrives there like any other. Do not cancel the question, ask it again or give up because a call is coming.
+
 ```json
 { "question": "Delete the 3 unused migration files in db/migrate/?", "type": "confirm", "context": "Cleaning up old migrations before the schema change", "toolName": "Bash", "toolTarget": "rm", "actionBody": "rm db/migrate/0003_*.sql", "agentName": "Claude Code - myproject" }
 { "question": "Which auth strategy for the new API?", "type": "select", "options": ["JWT tokens", "Session cookies", "OAuth2 + PKCE"], "context": "Setting up auth for the new endpoints", "agentName": "Claude Code - api-server" }

package/data/vscode-plugin/skills/pushary/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pushary
-description: Push notifications and human-in-the-loop for AI agents. Use this whenever a running agent needs a person who may not be at the terminal, such as before an irreversible or destructive action, before spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, when running unattended and you hit a genuine ambiguity, when another skill's workflow says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, or do not wait for me, or wants a long task to run unattended. Ask yes/no, multiple choice or free-text questions on their phone and get the answer back, and send an update when a task finishes or fails. Use these tools proactively, without waiting to be asked. Every question and answer is recorded, so an unattended run stays reviewable afterwards. Works with Claude Code, Codex, Cursor, VS Code, Gemini CLI, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted, paid service; web and native store checkout have different price and trial terms.
+description: Push notifications and human-in-the-loop for AI agents. Use it whenever a running agent needs a person who may not be at the terminal, such as before an irreversible or destructive action, spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, on a genuine ambiguity while unattended, when another skill says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says keep going and ping me on my phone if you need anything, call me if you get stuck, notify me when my agent needs me, approve from my phone, ask me while I am away, run this overnight, I am stepping away, or do not wait for me. Ask yes/no, choice or free-text questions on their phone and send updates. Use these tools proactively. Works with Claude Code, Codex, Cursor, VS Code, Gemini CLI, Windsurf, Hermes, Lovable or any MCP client. Pushary is a hosted, paid service; web and native store checkout have different price and trial terms.
 ---
 
 # Pushary - Push Notifications for AI Agents
@@ -208,6 +208,8 @@ Asks a question and waits. Use `confirm` for yes or no, `select` for 2 to 6 know
 
 **Answers.** `value` is "yes" or "no" for confirm, the chosen option for select, and the typed text for input. Read `note` too: a denial with a note carries the reason or a condition. A select or input value containing "yes" is answer data, not approval of a separate action.
 
+**Phone calls.** When the user says "call me", "phone me" or "ring me if you get stuck", ask with `ask_user`; there is no separate call tool. Pushary may phone only when the reply includes `phoneCall`; without it no call is planned, so do not promise one. With it, Pushary phones the person who can answer if the question is still unanswered, and records what they say as the answer: an approval, a choice or free text. For a call to the user, `ringsAt` says when it rings, and `waiting_for_calling_hours` means it rings when their calling hours start. While the reply is pending and has no `handoffAction`, keep waiting with `wait_for_answer` and the same `correlationId`: the spoken answer arrives there like any other. Do not cancel the question, ask it again or give up because a call is coming.
+
 ```json
 { "question": "Delete the 3 unused migration files in db/migrate/?", "type": "confirm", "context": "Cleaning up old migrations before the schema change", "toolName": "Bash", "toolTarget": "rm", "actionBody": "rm db/migrate/0003_*.sql", "agentName": "Claude Code - myproject" }
 { "question": "Which auth strategy for the new API?", "type": "select", "options": ["JWT tokens", "Session cookies", "OAuth2 + PKCE"], "context": "Setting up auth for the new endpoints", "agentName": "Claude Code - api-server" }

package/dist/{api-2YC2KSIM.js → api-KWJQMO6G.js}

@@ -19,25 +19,25 @@ import {
   waitRetryPauseMs,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-CNURORKI.js";
+} from "./chunk-YU5XE6VC.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-V53QYJNY.js";
-import "./chunk-DZLLKJJT.js";
-import "./chunk-4OX4SJGA.js";
-import "./chunk-YCU7Y77H.js";
-import "./chunk-4Z7YVVKQ.js";
+import "./chunk-WPBWJMBZ.js";
+import "./chunk-YRJZF5RG.js";
+import "./chunk-LJRPWUST.js";
+import "./chunk-S7HGPKCL.js";
+import "./chunk-KS3PNTRT.js";
 import "./chunk-YU2EUD7O.js";
-import "./chunk-IG7NGXBS.js";
-import "./chunk-QFZNPZRO.js";
-import "./chunk-4EBJ4PTZ.js";
+import "./chunk-72LP4RPC.js";
+import "./chunk-VTJ4WZOC.js";
+import "./chunk-BWREST4F.js";
 import "./chunk-BG4HHB7E.js";
 import "./chunk-TODDEIYG.js";
-import "./chunk-R7FSMUHG.js";
+import "./chunk-6LZ7MXHD.js";
 import "./chunk-WIIMW5YO.js";
 import {
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON
-} from "./chunk-C5LIS3XM.js";
+} from "./chunk-LQXUWXQP.js";
 import "./chunk-MLKGABMK.js";
 export {
   ABANDONED_WAIT,

package/dist/bin/pushary-audit.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   exitOnHelpFlag
-} from "../chunk-QESEICW4.js";
+} from "../chunk-A2H256WR.js";
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
@@ -9,7 +9,7 @@ import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-TODDEIYG.js";
-import "../chunk-R7FSMUHG.js";
+import "../chunk-6LZ7MXHD.js";
 import "../chunk-WIIMW5YO.js";
 import {
   AUDIT_CHAIN_FINDING_SEVERITY,
@@ -22,7 +22,7 @@ import {
   parseAuditChainExport,
   parseAuditKnownHead,
   verifyAuditChainSite
-} from "../chunk-C5LIS3XM.js";
+} from "../chunk-LQXUWXQP.js";
 import "../chunk-MLKGABMK.js";
 
 // src/audit-verify.ts

package/dist/bin/pushary-bell-hook.js

@@ -1,46 +1,46 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-P5QXH5QI.js";
+} from "../chunk-IIN26HL7.js";
 import {
   readHookInput
-} from "../chunk-NZHRH4RR.js";
-import "../chunk-6JLANX5L.js";
-import "../chunk-LTPKSJWY.js";
+} from "../chunk-5TWW7ZUL.js";
+import "../chunk-L4OGTRVW.js";
+import "../chunk-S3A4PCRR.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-5RSM5DRT.js";
-import "../chunk-ZF4CPOO7.js";
-import "../chunk-3VOUWGFF.js";
-import "../chunk-QGJK3NAR.js";
-import "../chunk-7QWH257P.js";
-import "../chunk-53KLGXFL.js";
-import "../chunk-MH5BRZOQ.js";
+import "../chunk-R34RWVN2.js";
+import "../chunk-WH4ODOCE.js";
+import "../chunk-CUR2DCZN.js";
+import "../chunk-K2SKUBYY.js";
+import "../chunk-JZT2LPRM.js";
+import "../chunk-ZBMVOMFG.js";
+import "../chunk-SQL5YXUH.js";
 import "../chunk-YPY4YCIZ.js";
-import "../chunk-22CXL7YI.js";
+import "../chunk-IRPIMQ7U.js";
 import "../chunk-XMSDA5WA.js";
-import "../chunk-7VMVMC4H.js";
-import "../chunk-EMODTMHE.js";
-import "../chunk-CNURORKI.js";
+import "../chunk-HOQH5CLZ.js";
+import "../chunk-6UK4K5RS.js";
+import "../chunk-YU5XE6VC.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-V53QYJNY.js";
-import "../chunk-DZLLKJJT.js";
-import "../chunk-4OX4SJGA.js";
+import "../chunk-WPBWJMBZ.js";
+import "../chunk-YRJZF5RG.js";
+import "../chunk-LJRPWUST.js";
 import "../chunk-H6CL3T2S.js";
-import "../chunk-ZVJIJPQY.js";
-import "../chunk-YCU7Y77H.js";
-import "../chunk-4Z7YVVKQ.js";
+import "../chunk-BYKRAYGD.js";
+import "../chunk-S7HGPKCL.js";
+import "../chunk-KS3PNTRT.js";
 import "../chunk-YU2EUD7O.js";
-import "../chunk-HIIXYZYV.js";
-import "../chunk-BHKODM4L.js";
-import "../chunk-IG7NGXBS.js";
-import "../chunk-QFZNPZRO.js";
-import "../chunk-4EBJ4PTZ.js";
+import "../chunk-WOSO4YFQ.js";
+import "../chunk-MOC2DN42.js";
+import "../chunk-72LP4RPC.js";
+import "../chunk-VTJ4WZOC.js";
+import "../chunk-BWREST4F.js";
 import "../chunk-BG4HHB7E.js";
 import "../chunk-TODDEIYG.js";
-import "../chunk-R7FSMUHG.js";
+import "../chunk-6LZ7MXHD.js";
 import "../chunk-WIIMW5YO.js";
-import "../chunk-C5LIS3XM.js";
+import "../chunk-LQXUWXQP.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-bell-hook.ts

package/dist/bin/pushary-bell.js

@@ -5,29 +5,29 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-P5QXH5QI.js";
+} from "../chunk-IIN26HL7.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-QESEICW4.js";
+} from "../chunk-A2H256WR.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-MH5BRZOQ.js";
+} from "../chunk-SQL5YXUH.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";
 import "../chunk-YU2EUD7O.js";
-import "../chunk-HIIXYZYV.js";
-import "../chunk-BHKODM4L.js";
+import "../chunk-WOSO4YFQ.js";
+import "../chunk-MOC2DN42.js";
 import {
   claudeSettings
-} from "../chunk-IG7NGXBS.js";
-import "../chunk-QFZNPZRO.js";
-import "../chunk-4EBJ4PTZ.js";
+} from "../chunk-72LP4RPC.js";
+import "../chunk-VTJ4WZOC.js";
+import "../chunk-BWREST4F.js";
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
@@ -35,11 +35,11 @@ import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-TODDEIYG.js";
-import "../chunk-R7FSMUHG.js";
+import "../chunk-6LZ7MXHD.js";
 import "../chunk-WIIMW5YO.js";
 import {
   isRecord
-} from "../chunk-C5LIS3XM.js";
+} from "../chunk-LQXUWXQP.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-bell.ts

package/dist/bin/pushary-claude.js

@@ -6,31 +6,31 @@ import {
 import {
   CommandReceipts,
   controllerCommandSchema
-} from "../chunk-DDJHPMBJ.js";
+} from "../chunk-LMU6NG2G.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-NQF652IG.js";
+} from "../chunk-PXZTCR4M.js";
 import "../chunk-CYTPQDQY.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-42DRRA6N.js";
+} from "../chunk-USFZJAB4.js";
 import {
   claudeTranscriptPath,
   redactDraft,
   registerTranscript,
   registeredTranscriptEnabled,
   startDraftPublisher
-} from "../chunk-LTPKSJWY.js";
+} from "../chunk-S3A4PCRR.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import {
   ensureDaemonRunning
-} from "../chunk-ZF4CPOO7.js";
-import "../chunk-3VOUWGFF.js";
+} from "../chunk-WH4ODOCE.js";
+import "../chunk-CUR2DCZN.js";
 import {
   DEFAULT_SESSION,
   PHONE_DRIVER,
@@ -45,28 +45,28 @@ import {
   removePendingCommand,
   reportEvent,
   savePendingCommand
-} from "../chunk-QGJK3NAR.js";
+} from "../chunk-K2SKUBYY.js";
 import {
   UNNAMED_ACTION,
   deriveToolTarget,
   describeStopFailure,
   describeToolCall,
   scopePathFor
-} from "../chunk-7QWH257P.js";
-import "../chunk-53KLGXFL.js";
-import "../chunk-MH5BRZOQ.js";
+} from "../chunk-JZT2LPRM.js";
+import "../chunk-ZBMVOMFG.js";
+import "../chunk-SQL5YXUH.js";
 import "../chunk-YPY4YCIZ.js";
-import "../chunk-22CXL7YI.js";
+import "../chunk-IRPIMQ7U.js";
 import {
   external_exports
 } from "../chunk-XMSDA5WA.js";
 import {
   transcriptsEnabled
-} from "../chunk-7VMVMC4H.js";
+} from "../chunk-HOQH5CLZ.js";
 import {
   repoKeyFor,
   repositoryScopeFor
-} from "../chunk-EMODTMHE.js";
+} from "../chunk-6UK4K5RS.js";
 import {
   askUser,
   cancelQuestion,
@@ -80,13 +80,13 @@ import {
   waitRetryPauseMs,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-CNURORKI.js";
+} from "../chunk-YU5XE6VC.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-V53QYJNY.js";
-import "../chunk-DZLLKJJT.js";
-import "../chunk-4OX4SJGA.js";
+} from "../chunk-WPBWJMBZ.js";
+import "../chunk-YRJZF5RG.js";
+import "../chunk-LJRPWUST.js";
 import {
   needsShell,
   spawnClaude
@@ -96,27 +96,27 @@ import {
   commandAckIsFinal,
   readCommandAck,
   refusedReceiptMessage
-} from "../chunk-ZVJIJPQY.js";
-import "../chunk-YCU7Y77H.js";
+} from "../chunk-BYKRAYGD.js";
+import "../chunk-S7HGPKCL.js";
 import {
   getMachineId
-} from "../chunk-4Z7YVVKQ.js";
+} from "../chunk-KS3PNTRT.js";
 import "../chunk-YU2EUD7O.js";
-import "../chunk-HIIXYZYV.js";
-import "../chunk-BHKODM4L.js";
+import "../chunk-WOSO4YFQ.js";
+import "../chunk-MOC2DN42.js";
 import {
   claudeConfigDir
-} from "../chunk-IG7NGXBS.js";
-import "../chunk-QFZNPZRO.js";
+} from "../chunk-72LP4RPC.js";
+import "../chunk-VTJ4WZOC.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-4EBJ4PTZ.js";
+} from "../chunk-BWREST4F.js";
 import "../chunk-BG4HHB7E.js";
 import "../chunk-TODDEIYG.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-R7FSMUHG.js";
+} from "../chunk-6LZ7MXHD.js";
 import "../chunk-WIIMW5YO.js";
 import {
   DECISION_STOP_REASON,
@@ -129,7 +129,7 @@ import {
   refusesWhenUnanswered,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-C5LIS3XM.js";
+} from "../chunk-LQXUWXQP.js";
 import "../chunk-MLKGABMK.js";
 
 // src/wrapper/localPassthrough.ts

package/dist/bin/pushary-clean.js

@@ -15,30 +15,30 @@ import {
   storedMacAppState,
   storedPusharyKeychainServices,
   waitForMacAppExit
-} from "../chunk-FYB6HBHQ.js";
+} from "../chunk-RO6EVL5C.js";
 import {
   PUSHARY_SKILL_NAME,
   PUSHARY_SKILL_SOURCE,
   createGuards
 } from "../chunk-XR27HPYC.js";
-import "../chunk-44Z6MQZ2.js";
+import "../chunk-KGFB2LEB.js";
 import "../chunk-XCEN33UP.js";
 import {
   describeCliKeyRevocation,
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-3WZMIDGX.js";
+} from "../chunk-WMBWKPKJ.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-DOXH5BV4.js";
+} from "../chunk-6IWOMXUF.js";
 import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-G7G2ZPT4.js";
+} from "../chunk-Q6P7G4NY.js";
 import {
   configFileHoldsMacAppKey,
   macAppKeepsMcpEntry,
@@ -46,22 +46,22 @@ import {
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-K7MVCPH5.js";
-import "../chunk-TKFNIDZK.js";
+} from "../chunk-KFALRZIN.js";
+import "../chunk-YZA3YBHX.js";
 import {
   HERMES_CONFIG_FILE,
   defaultHermesHome,
   hermesReceiptPaths,
   removeHermesWiring
-} from "../chunk-KP6FVUCC.js";
+} from "../chunk-ZSOCJHL7.js";
 import "../chunk-QCGNGEGE.js";
 import {
   planClineRemoval,
   planFxRemoval,
   removeClineServer
-} from "../chunk-ZDOTNMGL.js";
-import "../chunk-XWYCFODT.js";
-import "../chunk-EGUT2MWV.js";
+} from "../chunk-YNCVSKUW.js";
+import "../chunk-2ELNRGNX.js";
+import "../chunk-52UXNCZG.js";
 import {
   OPENCODE_ASKED_PERMISSIONS,
   OPENCODE_PLUGIN_SIBLING,
@@ -75,14 +75,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-SYZF5SDG.js";
+} from "../chunk-GK5X2ZTN.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-QESEICW4.js";
+} from "../chunk-A2H256WR.js";
 import "../chunk-CYTPQDQY.js";
 import {
   compatibleConfigFile,
@@ -95,42 +95,42 @@ import {
   removeCompatibleHooks,
   removeCompatibleMcpServer,
   serializeConfigDocument
-} from "../chunk-5RSM5DRT.js";
+} from "../chunk-R34RWVN2.js";
 import {
   disableDaemonService
-} from "../chunk-ZF4CPOO7.js";
+} from "../chunk-WH4ODOCE.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   removeGeminiSettings,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-3VOUWGFF.js";
-import "../chunk-QGJK3NAR.js";
-import "../chunk-7QWH257P.js";
-import "../chunk-53KLGXFL.js";
-import "../chunk-MH5BRZOQ.js";
+} from "../chunk-CUR2DCZN.js";
+import "../chunk-K2SKUBYY.js";
+import "../chunk-JZT2LPRM.js";
+import "../chunk-ZBMVOMFG.js";
+import "../chunk-SQL5YXUH.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";
-import "../chunk-EMODTMHE.js";
-import "../chunk-CNURORKI.js";
+import "../chunk-6UK4K5RS.js";
+import "../chunk-YU5XE6VC.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-V53QYJNY.js";
-import "../chunk-DZLLKJJT.js";
-import "../chunk-4OX4SJGA.js";
+import "../chunk-WPBWJMBZ.js";
+import "../chunk-YRJZF5RG.js";
+import "../chunk-LJRPWUST.js";
 import "../chunk-H6CL3T2S.js";
-import "../chunk-ZVJIJPQY.js";
-import "../chunk-YCU7Y77H.js";
-import "../chunk-4Z7YVVKQ.js";
+import "../chunk-BYKRAYGD.js";
+import "../chunk-S7HGPKCL.js";
+import "../chunk-KS3PNTRT.js";
 import "../chunk-YU2EUD7O.js";
 import {
   CANDIDATE_RCS,
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-HIIXYZYV.js";
-import "../chunk-BHKODM4L.js";
+} from "../chunk-WOSO4YFQ.js";
+import "../chunk-MOC2DN42.js";
 import {
   claudeConfigDir,
   claudeJson,
@@ -175,24 +175,24 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-IG7NGXBS.js";
+} from "../chunk-72LP4RPC.js";
 import {
   cleanNpmEnv,
   globalPackageState,
   npmIsOnPath,
   readGlobalFolder,
   readGlobalPrefix
-} from "../chunk-QFZNPZRO.js";
+} from "../chunk-VTJ4WZOC.js";
 import {
   getBaseUrl
-} from "../chunk-4EBJ4PTZ.js";
+} from "../chunk-BWREST4F.js";
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
 import "../chunk-TODDEIYG.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-R7FSMUHG.js";
+} from "../chunk-6LZ7MXHD.js";
 import {
   CLI_PACKAGE_NAMES,
   globalPackageFolder,
@@ -206,7 +206,7 @@ import {
   SUPPORT_EMAIL,
   isValidApiKey,
   redactSecrets
-} from "../chunk-C5LIS3XM.js";
+} from "../chunk-LQXUWXQP.js";
 import "../chunk-U4P4NDVB.js";
 import "../chunk-MLKGABMK.js";