@dylanpiercey/work 0.0.69 → 0.0.71

package/dist/{_mSrLyFdO.js → _DgDsZuoQ.js}

@@ -7,6 +7,7 @@ import os from "node:os";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { DatabaseSync } from "node:sqlite";
+import { createHash } from "node:crypto";
 //#region src/server/config.ts
 var home$1 = os.homedir();
 var config = {
@@ -4585,14 +4586,14 @@ var require_buffer_equal_constant_time = /* @__PURE__ */ __commonJSMin(((exports
 //#region node_modules/.pnpm/jwa@2.0.1/node_modules/jwa/index.js
 var require_jwa = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var Buffer = require_safe_buffer().Buffer;
-	var crypto$3 = __require("crypto");
+	var crypto$4 = __require("crypto");
 	var formatEcdsa = require_ecdsa_sig_formatter();
 	var util$2 = __require("util");
 	var MSG_INVALID_ALGORITHM = "\"%s\" is not a valid algorithm.\n  Supported algorithms are:\n  \"HS256\", \"HS384\", \"HS512\", \"RS256\", \"RS384\", \"RS512\", \"PS256\", \"PS384\", \"PS512\", \"ES256\", \"ES384\", \"ES512\" and \"none\".";
 	var MSG_INVALID_SECRET = "secret must be a string or buffer";
 	var MSG_INVALID_VERIFIER_KEY = "key must be a string or a buffer";
 	var MSG_INVALID_SIGNER_KEY = "key must be a string, a buffer or an object";
-	var supportsKeyObjects = typeof crypto$3.createPublicKey === "function";
+	var supportsKeyObjects = typeof crypto$4.createPublicKey === "function";
 	if (supportsKeyObjects) {
 		MSG_INVALID_VERIFIER_KEY += " or a KeyObject";
 		MSG_INVALID_SECRET += "or a KeyObject";
@@ -4645,14 +4646,14 @@ var require_jwa = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		return function sign(thing, secret) {
 			checkIsSecretKey(secret);
 			thing = normalizeInput(thing);
-			var hmac = crypto$3.createHmac("sha" + bits, secret);
+			var hmac = crypto$4.createHmac("sha" + bits, secret);
 			return fromBase64((hmac.update(thing), hmac.digest("base64")));
 		};
 	}
 	var bufferEqual;
-	var timingSafeEqual = "timingSafeEqual" in crypto$3 ? function timingSafeEqual(a, b) {
+	var timingSafeEqual = "timingSafeEqual" in crypto$4 ? function timingSafeEqual(a, b) {
 		if (a.byteLength !== b.byteLength) return false;
-		return crypto$3.timingSafeEqual(a, b);
+		return crypto$4.timingSafeEqual(a, b);
 	} : function timingSafeEqual(a, b) {
 		if (!bufferEqual) bufferEqual = require_buffer_equal_constant_time();
 		return bufferEqual(a, b);
@@ -4667,7 +4668,7 @@ var require_jwa = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		return function sign(thing, privateKey) {
 			checkIsPrivateKey(privateKey);
 			thing = normalizeInput(thing);
-			var signer = crypto$3.createSign("RSA-SHA" + bits);
+			var signer = crypto$4.createSign("RSA-SHA" + bits);
 			return fromBase64((signer.update(thing), signer.sign(privateKey, "base64")));
 		};
 	}
@@ -4676,7 +4677,7 @@ var require_jwa = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			checkIsPublicKey(publicKey);
 			thing = normalizeInput(thing);
 			signature = toBase64(signature);
-			var verifier = crypto$3.createVerify("RSA-SHA" + bits);
+			var verifier = crypto$4.createVerify("RSA-SHA" + bits);
 			verifier.update(thing);
 			return verifier.verify(publicKey, signature, "base64");
 		};
@@ -4685,11 +4686,11 @@ var require_jwa = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		return function sign(thing, privateKey) {
 			checkIsPrivateKey(privateKey);
 			thing = normalizeInput(thing);
-			var signer = crypto$3.createSign("RSA-SHA" + bits);
+			var signer = crypto$4.createSign("RSA-SHA" + bits);
 			return fromBase64((signer.update(thing), signer.sign({
 				key: privateKey,
-				padding: crypto$3.constants.RSA_PKCS1_PSS_PADDING,
-				saltLength: crypto$3.constants.RSA_PSS_SALTLEN_DIGEST
+				padding: crypto$4.constants.RSA_PKCS1_PSS_PADDING,
+				saltLength: crypto$4.constants.RSA_PSS_SALTLEN_DIGEST
 			}, "base64")));
 		};
 	}
@@ -4698,12 +4699,12 @@ var require_jwa = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			checkIsPublicKey(publicKey);
 			thing = normalizeInput(thing);
 			signature = toBase64(signature);
-			var verifier = crypto$3.createVerify("RSA-SHA" + bits);
+			var verifier = crypto$4.createVerify("RSA-SHA" + bits);
 			verifier.update(thing);
 			return verifier.verify({
 				key: publicKey,
-				padding: crypto$3.constants.RSA_PKCS1_PSS_PADDING,
-				saltLength: crypto$3.constants.RSA_PSS_SALTLEN_DIGEST
+				padding: crypto$4.constants.RSA_PKCS1_PSS_PADDING,
+				saltLength: crypto$4.constants.RSA_PSS_SALTLEN_DIGEST
 			}, signature, "base64");
 		};
 	}
@@ -5001,7 +5002,7 @@ var require_urlsafe_base64_helper = /* @__PURE__ */ __commonJSMin(((exports, mod
 //#endregion
 //#region node_modules/.pnpm/web-push@3.6.7_supports-color@10.2.2/node_modules/web-push/src/vapid-helper.js
 var require_vapid_helper = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var crypto$2 = __require("crypto");
+	var crypto$3 = __require("crypto");
 	var asn1 = require_asn1();
 	var jws = require_jws();
 	var { URL } = __require("url");
@@ -5031,7 +5032,7 @@ var require_vapid_helper = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}, "pem", { label: "EC PRIVATE KEY" });
 	}
 	function generateVAPIDKeys() {
-		const curve = crypto$2.createECDH("prime256v1");
+		const curve = crypto$3.createECDH("prime256v1");
 		curve.generateKeys();
 		let publicKeyBuffer = curve.getPublicKey();
 		let privateKeyBuffer = curve.getPrivateKey();
@@ -5161,7 +5162,7 @@ var require_vapid_helper = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region node_modules/.pnpm/http_ece@1.2.0/node_modules/http_ece/ece.js
 var require_ece = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var crypto$1 = __require("crypto");
+	var crypto$2 = __require("crypto");
 	var AES_GCM = "aes-128-gcm";
 	var PAD_SIZE = {
 		"aes128gcm": 1,
@@ -5186,7 +5187,7 @@ var require_ece = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		return b;
 	}
 	function HMAC_hash(key, input) {
-		var hmac = crypto$1.createHmac("sha256", key);
+		var hmac = crypto$2.createHmac("sha256", key);
 		hmac.update(input);
 		return hmac.digest();
 	}
@@ -5390,7 +5391,7 @@ var require_ece = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	function decryptRecord(key, counter, buffer, header, last) {
 		keylog("decrypt", buffer);
 		var nonce = generateNonce(key.nonce, counter);
-		var gcm = crypto$1.createDecipheriv(AES_GCM, key.key, nonce);
+		var gcm = crypto$2.createDecipheriv(AES_GCM, key.key, nonce);
 		gcm.setAuthTag(buffer.slice(buffer.length - TAG_LENGTH));
 		var data = gcm.update(buffer.slice(0, buffer.length - TAG_LENGTH));
 		data = Buffer.concat([data, gcm.final()]);
@@ -5440,7 +5441,7 @@ var require_ece = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		keylog("encrypt", buffer);
 		pad = pad || 0;
 		var nonce = generateNonce(key.nonce, counter);
-		var gcm = crypto$1.createCipheriv(AES_GCM, key.key, nonce);
+		var gcm = crypto$2.createCipheriv(AES_GCM, key.key, nonce);
 		var ciphertext = [];
 		var padSize = PAD_SIZE[header.version];
 		var padding = Buffer.alloc(pad + padSize);
@@ -5492,7 +5493,7 @@ var require_ece = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	function encrypt(buffer, params, keyLookupCallback) {
 		if (!Buffer.isBuffer(buffer)) throw new Error("buffer argument must be a Buffer");
 		var header = parseParams(params);
-		if (!header.salt) header.salt = crypto$1.randomBytes(KEY_LENGTH);
+		if (!header.salt) header.salt = crypto$2.randomBytes(KEY_LENGTH);
 		var result;
 		if (header.version === "aes128gcm") {
 			if (header.privateKey && !header.keyid) header.keyid = header.privateKey.getPublicKey();
@@ -5533,7 +5534,7 @@ var require_ece = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region node_modules/.pnpm/web-push@3.6.7_supports-color@10.2.2/node_modules/web-push/src/encryption-helper.js
 var require_encryption_helper = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var crypto = __require("crypto");
+	var crypto$1 = __require("crypto");
 	var ece = require_ece();
 	var encrypt = function(userPublicKey, userAuth, payload, contentEncoding) {
 		if (!userPublicKey) throw new Error("No user public key provided for encryption.");
@@ -5544,9 +5545,9 @@ var require_encryption_helper = /* @__PURE__ */ __commonJSMin(((exports, module)
 		if (Buffer.from(userAuth, "base64url").length < 16) throw new Error("The subscription auth key should be at least 16 bytes long");
 		if (typeof payload !== "string" && !Buffer.isBuffer(payload)) throw new Error("Payload must be either a string or a Node Buffer.");
 		if (typeof payload === "string" || payload instanceof String) payload = Buffer.from(payload);
-		const localCurve = crypto.createECDH("prime256v1");
+		const localCurve = crypto$1.createECDH("prime256v1");
 		const localPublicKey = localCurve.generateKeys();
-		const salt = crypto.randomBytes(16).toString("base64url");
+		const salt = crypto$1.randomBytes(16).toString("base64url");
 		return {
 			localPublicKey,
 			salt,
@@ -6325,7 +6326,7 @@ var summaries = /* @__PURE__ */ new Map();
 var viewers = /* @__PURE__ */ new Map();
 /** Human-readable one-liner mined from an agent CLI's hook payload.
 * Claude's Stop hook carries the agent's actual final message
-* (last_assistant_message); Codex's notify payload spells it
+* (last_assistant_message), as does Codex's Stop hook; the legacy notify payload spells it
 * last-assistant-message; Claude Notifications carry a type. Anything
 * else falls back to terminal scraping. */
 function summaryFromHookPayload(payload) {
@@ -6334,6 +6335,11 @@ function summaryFromHookPayload(payload) {
 	const text = typeof p.last_assistant_message === "string" && p.last_assistant_message || typeof p["last-assistant-message"] === "string" && p["last-assistant-message"] || typeof p.agent_message === "string" && p.agent_message || "";
 	if (text) return cleanSummary(text);
 	if (typeof p.notification_type === "string") return NOTIFICATION_LABELS[p.notification_type];
+	if (p.hook_event_name === "PermissionRequest") {
+		const input = p.tool_input;
+		const what = (input && typeof input.command === "string" ? input.command : "") || (typeof p.tool_name === "string" ? p.tool_name : "");
+		return what ? cleanSummary(`Approve: ${what}`) : "Waiting for permission";
+	}
 }
 var NOTIFICATION_LABELS = {
 	permission_prompt: "Waiting for permission",
@@ -6442,7 +6448,7 @@ function publishChange(sessionId) {
 	const row = get("SELECT workspace_id FROM sessions WHERE id = ?", sessionId);
 	if (row?.workspace_id) {
 		const workspaceId = row.workspace_id;
-		import("./_C8-SYmgW.js").then((m) => m.notifySessionsChanged(workspaceId));
+		import("./_xZfpJdQE.js").then((m) => m.notifySessionsChanged(workspaceId));
 		return;
 	}
 	publish("sessions.changed");
@@ -6451,22 +6457,81 @@ function publishChange(sessionId) {
 //#region src/server/agent-flags.ts
 /** Agent-state reporting via launch-time flags — nothing is written to the
 * workspace or the user's global config. Claude takes an inline settings
-* JSON (--settings accepts a JSON string); Codex takes its notify command
-* via `-c` (its turn-complete payload carries last-assistant-message).
-* Grok, Cursor and Copilot expose no file-free hook mechanism, so their
-* sessions get working/idle from pane activity (see scraper.ts) and
-* nothing else — a stopped turn and a question look the same. */
+* JSON (--settings accepts a JSON string); Codex takes lifecycle hooks via
+* `-c` overrides, trusted through a `hooks.state` entry in the same
+* override layer (see codexHookFlags). Grok, Cursor and Copilot expose no
+* file-free hook mechanism, so their sessions get working/idle from pane
+* activity (see scraper.ts) and nothing else — a stopped turn and a
+* question look the same. */
 function stateCurl(state, reason) {
 	const qs = `session=$WORK_SESSION_ID&state=${state}` + (reason ? `&reason=${reason}` : "");
 	return `[ -n "$WORK_SESSION_ID" ] && curl -sf -m 3 -X POST "http://127.0.0.1:\${WORK_APP_PORT:-${config.appPort}}/api/agent-state?${qs}" -H 'content-type: application/json' --data-binary @- >/dev/null 2>&1; exit 0`;
 }
 /** Whether the agent says when it *starts* working, not just when it stops.
-* Codex's notify only fires on turn-complete, so the screen is the only
-* thing that can tell us it picked up again; Claude announces it, and
-* believing the screen over that costs it the state its own hook just
-* reported. */
+* Claude and Codex announce it through hooks; believing the screen over that
+* costs them the state their own hook just reported. */
 function reportsWorking(agent) {
-	return agentFamily(agent) === "claude";
+	const family = agentFamily(agent);
+	return family === "claude" || family === "codex";
+}
+/** Codex hook events → the state each reports. Same shape as Claude's:
+* a prompt or a tool call means working, Stop means the turn is done,
+* PermissionRequest means it is about to ask (fires just before the
+* approval prompt; PostToolUse clears it once the approved call has run,
+* or the next PreToolUse does if a reviewer auto-decided). */
+var CODEX_HOOKS = [
+	["UserPromptSubmit", "working"],
+	["PreToolUse", "working"],
+	["PostToolUse", "working"],
+	[
+		"PermissionRequest",
+		"waiting",
+		"attention"
+	],
+	[
+		"Stop",
+		"waiting",
+		"done"
+	]
+];
+/** Codex only runs hooks it trusts. Trust is a hash of the normalized hook
+* kept in config (`hooks.state.<key>.trusted_hash`), and both the hooks and
+* that state are read from the `-c` override layer too — so the launch flags
+* can carry their own trust without touching ~/.codex/config.toml.
+* Mirrors codex-rs/hooks/src/engine/discovery.rs (hook_hash, hook_key,
+* normalized Command config: timeout defaults to 600, async false, None
+* fields omitted) and codex-rs/config/src/fingerprint.rs (sha256 of
+* key-sorted JSON). Verified against real trusted_hash entries. */
+function codexHookTrustHash(event, command) {
+	const identity = {
+		event_name: codexHookKeyLabel(event),
+		hooks: [{
+			async: false,
+			command,
+			timeout: 600,
+			type: "command"
+		}]
+	};
+	return "sha256:" + createHash("sha256").update(JSON.stringify(identity)).digest("hex");
+}
+/** `PermissionRequest` → `permission_request` (codex-rs/hooks/src/lib.rs). */
+function codexHookKeyLabel(event) {
+	return event.replace(/([a-z])([A-Z])/g, "$1_$2").toLowerCase();
+}
+/** Synthetic path Codex gives the `-c` override layer when keying hook state. */
+var CODEX_SESSION_FLAGS_PATH = "/<session-flags>/config.toml";
+/** `-c` overrides that install work's state hooks in a Codex session. */
+function codexHookFlags() {
+	const flags = [];
+	const state = [];
+	for (const [event, st, reason] of CODEX_HOOKS) {
+		const command = stateCurl(st, reason);
+		flags.push("-c", `hooks.${event}=[{hooks=[{type="command",command=${JSON.stringify(command)}}]}]`);
+		const key = `${CODEX_SESSION_FLAGS_PATH}:${codexHookKeyLabel(event)}:0:0`;
+		state.push(`${JSON.stringify(key)}={trusted_hash=${JSON.stringify(codexHookTrustHash(event, command))}}`);
+	}
+	flags.push("-c", `hooks.state={${state.join(",")}}`);
+	return flags;
 }
 /** Family of an instance id (`claude2` → `claude`); flags and hooks are
 * per family, every numbered copy behaves the same. */
@@ -6488,12 +6553,7 @@ function agentLaunchFlags(agent) {
 			Notification: hook("waiting", "attention")
 		} })];
 	}
-	if (family === "codex") return ["-c", `notify=[${[
-		"sh",
-		"-c",
-		`[ -n "$WORK_SESSION_ID" ] && curl -sf -m 3 -X POST "http://127.0.0.1:\${WORK_APP_PORT:-${config.appPort}}/api/agent-state?session=$WORK_SESSION_ID&state=waiting&reason=done" -H 'content-type: application/json' --data "$1" >/dev/null 2>&1; exit 0`,
-		"work-notify"
-	].map((w) => JSON.stringify(w)).join(",")}]`];
+	if (family === "codex") return codexHookFlags();
 	return [];
 }
 //#endregion

package/dist/_xZfpJdQE.js

@@ -0,0 +1,2 @@
+import { f as notifySessionsChanged } from "./_DgDsZuoQ.js";
+export { notifySessionsChanged };