@pushary/agent-hooks 0.70.0 → 0.71.0

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 0.71.0
+
+### Setting up Codex no longer gets Codex deleted by macOS
+
+Setup ran `codex --version` to decide whether your Codex was new enough for
+native hooks. On macOS, executing a binary hands it to XProtect, and current
+definitions false-positive on the Codex CLI: macOS killed it and moved it to the
+Trash. Reading a version number destroyed the tool it was asking, mid-setup, and
+the only thing you saw was "codex was not opened because it contains malware".
+
+Setup no longer runs Codex, or any other agent's binary, to learn something about
+it. The version now comes from the package manifest next to the binary, which
+covers npm, bun, pnpm and yarn installs, and from `brew list` for the Homebrew
+cask, which ships no manifest. Same result, nothing launched.
+
+If your Codex was already quarantined, reinstall it: `npm install -g @openai/codex`
+or `brew install --cask codex`.
+
 ## 0.70.0
 
 ### A key you name is the key you get

package/dist/bin/pushary-setup.js

@@ -110,7 +110,7 @@ import {
 } from "../chunk-KZERVKTD.js";
 
 // bin/pushary-setup.ts
-import { existsSync, readFileSync, writeFileSync, mkdirSync, cpSync, rmSync, renameSync } from "fs";
+import { existsSync, readFileSync, writeFileSync, mkdirSync, cpSync, rmSync, renameSync, realpathSync } from "fs";
 import { join, dirname, basename } from "path";
 import { homedir, tmpdir } from "os";
 import { execSync as execSync2 } from "child_process";
@@ -198,6 +198,53 @@ var describeClosing = (facts) => {
   };
 };
 
+// src/setup/codex-version.ts
+var parseCodexVersion = (raw) => {
+  const match = raw.match(/(\d+)\.(\d+)\.(\d+)/);
+  if (!match) return null;
+  return [Number(match[1]), Number(match[2]), Number(match[3])];
+};
+var compareCodexVersion = (a, b) => {
+  for (let i = 0; i < 3; i++) {
+    if (a[i] !== b[i]) return a[i] < b[i] ? -1 : 1;
+  }
+  return 0;
+};
+var versionFromPackageManifest = (probe, binPath) => {
+  let dir = probe.dirname(binPath);
+  for (let depth = 0; depth < 4; depth++) {
+    const raw = probe.readFile(probe.join(dir, "package.json"));
+    if (raw) {
+      try {
+        const manifest = JSON.parse(raw);
+        if (typeof manifest.version === "string") {
+          const parsed = parseCodexVersion(manifest.version);
+          if (parsed) return parsed;
+        }
+      } catch {
+      }
+    }
+    const parent = probe.dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return null;
+};
+var readCodexVersion = (probe) => {
+  const onPath = probe.resolveOnPath();
+  if (onPath) {
+    const real = probe.realpath(onPath) ?? onPath;
+    const fromManifest = versionFromPackageManifest(probe, real);
+    if (fromManifest) return { kind: "known", version: fromManifest, source: "package manifest" };
+  }
+  const brew = probe.brewVersions();
+  if (brew) {
+    const parsed = parseCodexVersion(brew);
+    if (parsed) return { kind: "known", version: parsed, source: "homebrew" };
+  }
+  return { kind: "unknown" };
+};
+
 // src/skills-cli.ts
 import { execSync } from "child_process";
 var installSkillViaSkillsCli = (agent) => {
@@ -641,26 +688,46 @@ var setupHermes = async (_apiKey) => {
 var CODEX_HOOKS_JSON = join(CODEX_HOME, "hooks.json");
 var CODEX_HOOKS_MIN_VERSION = [0, 122, 0];
 var CODEX_TRUST_VERIFIED_MAX = [0, 142, 2];
-var parseCodexVersion = (raw) => {
-  const match = raw.match(/(\d+)\.(\d+)\.(\d+)/);
-  if (!match) return null;
-  return [Number(match[1]), Number(match[2]), Number(match[3])];
-};
-var compareCodexVersion = (a, b) => {
-  for (let i = 0; i < 3; i++) {
-    if (a[i] !== b[i]) return a[i] < b[i] ? -1 : 1;
-  }
-  return 0;
-};
-var readCodexVersion = () => {
-  try {
-    return parseCodexVersion(execSync2("codex --version", { encoding: "utf-8", stdio: "pipe", timeout: 1e4 }));
-  } catch {
-    return null;
-  }
-};
-var codexSupportsHooks = (version) => version !== null && compareCodexVersion(version, CODEX_HOOKS_MIN_VERSION) >= 0;
-var codexTrustAutoSupported = (version) => version !== null && codexSupportsHooks(version) && compareCodexVersion(version, CODEX_TRUST_VERIFIED_MAX) <= 0;
+var detectCodexVersion = () => readCodexVersion({
+  resolveOnPath: () => {
+    const whichCmd = IS_WINDOWS ? "where" : "which";
+    try {
+      const found = execSync2(`${whichCmd} codex`, { encoding: "utf-8", stdio: "pipe", timeout: 5e3 }).split("\n")[0].trim();
+      return found || null;
+    } catch {
+      return null;
+    }
+  },
+  realpath: (path) => {
+    try {
+      return realpathSync(path);
+    } catch {
+      return null;
+    }
+  },
+  readFile: (path) => {
+    try {
+      return readFileSync(path, "utf-8");
+    } catch {
+      return null;
+    }
+  },
+  brewVersions: () => {
+    try {
+      return execSync2("brew list --versions codex", {
+        encoding: "utf-8",
+        stdio: "pipe",
+        timeout: 1e4
+      }).trim() || null;
+    } catch {
+      return null;
+    }
+  },
+  join,
+  dirname
+});
+var codexSupportsHooks = (result) => result.kind === "known" && compareCodexVersion(result.version, CODEX_HOOKS_MIN_VERSION) >= 0;
+var codexTrustAutoSupported = (result) => result.kind === "known" && codexSupportsHooks(result) && compareCodexVersion(result.version, CODEX_TRUST_VERIFIED_MAX) <= 0;
 var removeCodexNotifyEntry = (codexConfig) => {
   let raw = "";
   try {
@@ -711,7 +778,7 @@ var setupCodex = async (apiKey) => {
     addCodexMcpServer(config, apiKey);
     writeFileAtomic(codexConfig, stringifyTOML(config), KEY_FILE_MODE);
   });
-  const codexVersion = readCodexVersion();
+  const codexVersion = detectCodexVersion();
   const hooksSupported = codexSupportsHooks(codexVersion);
   const trustAuto = codexTrustAutoSupported(codexVersion);
   let trusted = false;
@@ -739,9 +806,16 @@ var setupCodex = async (apiKey) => {
       removeCodexNotifyEntry(codexConfig);
     });
   } else {
-    console.log(`  ${yellow("!")} This Codex version predates native hooks (needs ${CODEX_HOOKS_MIN_VERSION.join(".")}+).`);
-    console.log(`  ${dim("Installing the deprecated notify handler instead. Upgrade Codex and re-run setup")}`);
-    console.log(`  ${dim("to get policy enforcement, phone approvals, and session tracking.")}`);
+    if (codexVersion.kind === "known") {
+      console.log(`  ${yellow("!")} This Codex version predates native hooks (needs ${CODEX_HOOKS_MIN_VERSION.join(".")}+).`);
+      console.log(`  ${dim("Installing the deprecated notify handler instead. Upgrade Codex and re-run setup")}`);
+      console.log(`  ${dim("to get policy enforcement, phone approvals, and session tracking.")}`);
+    } else {
+      console.log(`  ${yellow("!")} Could not read your Codex version from its install, so hooks were skipped.`);
+      console.log(`  ${dim("Deliberately not run: asking the binary its version is what macOS quarantines.")}`);
+      console.log(`  ${dim(`Installing the notify handler, which works on every version. If Codex is ${CODEX_HOOKS_MIN_VERSION.join(".")}+,`)}`);
+      console.log(`  ${dim("re-run setup after installing it through npm or Homebrew to get native hooks.")}`);
+    }
     await spinner("Adding notify handler for Codex events (deprecated)", async () => {
       addCodexNotifyEntry(codexConfig);
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.70.0",
+  "version": "0.71.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",