@pushary/agent-hooks 0.95.7 → 0.97.0

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 0.97.0
+
+Requires the Codex auto-reviewer handling in `POST /api/agent/gate`, Codex bodies on `POST /api/agent/blocked-action/claim`, the `blocked-action/v2` Claude identity and `sessionCwd` on the gate request before rollout. Run `pushary upgrade` so Claude Code's `PermissionDenied` and Codex's `Stop` are registered with the hold budget, Codex gives `Stop` the full hook budget, and Codex trusts it again.
+
+- When Codex runs with `--approve-for-me`, stop asking you before its auto-reviewer. `PreToolUse` and `PermissionRequest` have no opinion under the reviewer, after the kill switch and a standing deny, so nothing the reviewer allows reaches your phone.
+- When the auto-reviewer denies a shell command, hold the turn end and ask once whether to allow that exact command. A yes continues the turn, Codex runs the same command again, and the retry skips the reviewer once. A no, or no answer, lets the denial stand. Denials of `apply_patch` and MCP calls are not asked about yet. The request names the session's directory as well as the command's, so the card can say where the command runs.
+- Hold a blocked call only when the hook can prove its host waits that long: the `--hold-budget=<seconds>` argument its registration now carries, or the budget the Mac app hands down in `PUSHARY_HOLD_BUDGET_SECONDS`. The hold never waits past that budget less its reserves. Without proof, which is an install registered before this release, the Claude plugin's older entry, an update that skipped `--finish-upgrade` or a Mac app built before it, a Claude block sends the "Auto mode blocked <tool>" notification instead, and a Codex turn end reads no denial, so it is still asked about once the hook is upgraded.
+- Build the `blocked-action/v2` identity for a Claude call, which includes its working directory, so the retry's hint and claim match the server's grant. A Claude call with no working directory is not asked about. Keep the retry hint for the grant's two minutes rather than ten.
+- `pushary doctor` warns when a `PermissionDenied` or Codex `Stop` registration carries no hold budget.
+
+## 0.96.0
+
+Requires the auto-mode block handling in `POST /api/agent/gate` and the `POST /api/agent/blocked-action/claim` route before rollout. Run `pushary upgrade` so Claude Code gives the `PermissionDenied` hook the full approval window.
+
+- When Claude Code's auto mode blocks a call, hold the agent and ask once whether to allow that exact call. A yes retries it and the retry runs. A no, or no answer, lets the block stand.
+- Stop sending a separate "Auto-mode blocked" notification and remove `PUSHARY_AUTOMODE_RETRY`. The server now decides whether a block is asked about, so the kill switch, a standing deny and your approval mode all apply.
+
+## 0.95.8
+
+- Stop `clean` leaving a key it installed in Claude Code, Codex and Gemini when the Mac app is installed. An entry is kept only when its key is the one the Mac app holds; when the app has never signed in, the key setup recorded is removed.
+- Keep `~/.pushary/bridge-auth` when the Mac app is installed. `clean` used to delete the app's bridge key.
+
 ## 0.95.7
 
 - Let Gemini's own prompt decide in When I'm out when Pushary cannot create the approval question, instead of refusing the call. Every time still refuses, and says Pushary could not create a verifiable approval.

package/dist/bin/pushary-bell-hook.js

@@ -1,36 +1,34 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-TY6IJY6I.js";
+} from "../chunk-GGYH6LIE.js";
 import {
   readHookInput
-} from "../chunk-IZVK6FKD.js";
-import "../chunk-HAXZ6CBF.js";
-import "../chunk-EMGGUO2Q.js";
-import "../chunk-WPS5IM7B.js";
-import "../chunk-XZWUOCJZ.js";
-import "../chunk-QJPYJVL3.js";
-import "../chunk-GQRU4KJF.js";
-import "../chunk-VMZ4SWQD.js";
-import "../chunk-7RNY3UHJ.js";
-import "../chunk-GOPIMNVC.js";
-import "../chunk-3AJIK5AO.js";
-import "../chunk-SKPXQRKN.js";
+} from "../chunk-5ODZEFP3.js";
+import "../chunk-6VXZKOBB.js";
+import "../chunk-A4AIISZZ.js";
+import "../chunk-4AXWBCCO.js";
+import "../chunk-H4VNAOCG.js";
+import "../chunk-BYH75I7Y.js";
+import "../chunk-FU5SQKAY.js";
+import "../chunk-LYWTLNMG.js";
+import "../chunk-IBRX7LRE.js";
+import "../chunk-WIKEADOS.js";
+import "../chunk-CDSA3NTB.js";
 import "../chunk-EQRS3SGM.js";
-import "../chunk-VERXHIQF.js";
+import "../chunk-C2FYSFTQ.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-L4ZCFMWW.js";
-import "../chunk-XUTSZYYJ.js";
-import "../chunk-4OSQZ5TB.js";
-import "../chunk-BGX4QUQF.js";
+import "../chunk-QFAZ6QCT.js";
+import "../chunk-IZKCA35M.js";
+import "../chunk-67RNDRKL.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-VMQU7YEJ.js";
+import "../chunk-VF7YOT2W.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-L7NOG547.js";
+import "../chunk-VTUN7WSG.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-MC5WUOJJ.js";
+import "../chunk-HUZW6SEO.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,17 +5,15 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-TY6IJY6I.js";
+} from "../chunk-GGYH6LIE.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-GOPIMNVC.js";
-import "../chunk-3AJIK5AO.js";
-import "../chunk-L4ZCFMWW.js";
+} from "../chunk-WIKEADOS.js";
 import {
   claudeSettings
-} from "../chunk-BGX4QUQF.js";
+} from "../chunk-67RNDRKL.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -27,7 +25,7 @@ import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-VMQU7YEJ.js";
+import "../chunk-VF7YOT2W.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
@@ -35,9 +33,9 @@ import {
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "../chunk-L7NOG547.js";
+} from "../chunk-VTUN7WSG.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-MC5WUOJJ.js";
+import "../chunk-HUZW6SEO.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,7 +8,7 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-PQGLDN4V.js";
+} from "../chunk-KDPYXMUI.js";
 import {
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
@@ -17,30 +17,28 @@ import {
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-HAXZ6CBF.js";
-import "../chunk-EMGGUO2Q.js";
-import "../chunk-WPS5IM7B.js";
-import "../chunk-XZWUOCJZ.js";
-import "../chunk-QJPYJVL3.js";
-import "../chunk-GQRU4KJF.js";
+} from "../chunk-6VXZKOBB.js";
+import "../chunk-A4AIISZZ.js";
+import "../chunk-4AXWBCCO.js";
+import "../chunk-H4VNAOCG.js";
+import "../chunk-BYH75I7Y.js";
+import "../chunk-FU5SQKAY.js";
 import {
   ensureDaemonRunning
-} from "../chunk-VMZ4SWQD.js";
-import "../chunk-7RNY3UHJ.js";
-import "../chunk-GOPIMNVC.js";
-import "../chunk-3AJIK5AO.js";
+} from "../chunk-LYWTLNMG.js";
+import "../chunk-IBRX7LRE.js";
+import "../chunk-WIKEADOS.js";
 import {
   encryptRecord
-} from "../chunk-SKPXQRKN.js";
+} from "../chunk-CDSA3NTB.js";
 import "../chunk-EQRS3SGM.js";
 import {
   transcriptsEnabled
-} from "../chunk-VERXHIQF.js";
+} from "../chunk-C2FYSFTQ.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-L4ZCFMWW.js";
 import {
   DEFAULT_SESSION,
   fetchModeState,
@@ -54,14 +52,14 @@ import {
   repoKeyFor,
   reportEvent,
   savePendingCommand
-} from "../chunk-XJQOVWBQ.js";
+} from "../chunk-DGUMR5LZ.js";
 import {
   UNNAMED_ACTION,
   deriveToolTarget,
   describeToolCall,
   scopePathFor
-} from "../chunk-Z4JVEL7R.js";
-import "../chunk-XUTSZYYJ.js";
+} from "../chunk-VCKQ45QA.js";
+import "../chunk-QFAZ6QCT.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -71,19 +69,19 @@ import {
   nextLongPollMs,
   waitForAnswer,
   withdrawQuestion
-} from "../chunk-XS33QBJA.js";
+} from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-4OSQZ5TB.js";
-import "../chunk-BGX4QUQF.js";
+} from "../chunk-IZKCA35M.js";
+import "../chunk-67RNDRKL.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-VMQU7YEJ.js";
+import "../chunk-VF7YOT2W.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-L7NOG547.js";
+import "../chunk-VTUN7WSG.js";
 import {
   getApiKey,
   getBaseUrl
@@ -92,7 +90,7 @@ import {
   KILL_REASON,
   redactSecrets,
   resolveGate
-} from "../chunk-MC5WUOJJ.js";
+} from "../chunk-HUZW6SEO.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -5,14 +5,14 @@ import {
   createGuards,
   resolveHermesPython,
   runHermesPythonScript
-} from "../chunk-N6FAXQDD.js";
+} from "../chunk-AXSDMDJI.js";
 import "../chunk-KBITFQST.js";
 import {
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-NKUE5SJB.js";
+} from "../chunk-K7MLXXPY.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -22,40 +22,37 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-U5RIXR7I.js";
+} from "../chunk-EHQC3GWL.js";
 import {
   isClaudeMcpSnapshot,
   removeClaudeMcpServers,
   removePusharySettings,
   restoreClaudeMcpServer
-} from "../chunk-CNUDZS4V.js";
+} from "../chunk-6WJKYD3Q.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-WPS5IM7B.js";
-import "../chunk-XZWUOCJZ.js";
-import "../chunk-QJPYJVL3.js";
+} from "../chunk-4AXWBCCO.js";
+import "../chunk-H4VNAOCG.js";
+import "../chunk-BYH75I7Y.js";
 import {
   pusharyHookExecutable
-} from "../chunk-GQRU4KJF.js";
+} from "../chunk-FU5SQKAY.js";
 import {
   disableDaemonService
-} from "../chunk-VMZ4SWQD.js";
+} from "../chunk-LYWTLNMG.js";
 import {
   removeGeminiSettings
-} from "../chunk-7RNY3UHJ.js";
-import "../chunk-GOPIMNVC.js";
-import "../chunk-3AJIK5AO.js";
+} from "../chunk-IBRX7LRE.js";
+import "../chunk-WIKEADOS.js";
 import "../chunk-XHKBHWLX.js";
+import "../chunk-VCKQ45QA.js";
+import "../chunk-QFAZ6QCT.js";
+import "../chunk-IZKCA35M.js";
 import {
-  execNpm
-} from "../chunk-L4ZCFMWW.js";
-import "../chunk-Z4JVEL7R.js";
-import "../chunk-XUTSZYYJ.js";
-import "../chunk-4OSQZ5TB.js";
-import {
+  bridgeAgentKey,
   claudeJson,
   claudeMcpReceipt,
   claudeSettings,
@@ -69,18 +66,20 @@ import {
   cursorPluginDir,
   cursorUserHooks,
   cursorUserMcp,
+  execNpm,
   geminiMd,
   geminiSettings,
   hermesConfigReceipt,
   hookTakeoverReceipt,
   isProtectedByScope,
   pusharyDir,
+  readCodexMcpAuth,
   removeCodexHookTrust,
   removeCodexHooks,
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-BGX4QUQF.js";
+} from "../chunk-67RNDRKL.js";
 import {
   exitOnHelpFlag
 } from "../chunk-GOQHN2UH.js";
@@ -91,17 +90,18 @@ import {
 import "../chunk-DINDL2CF.js";
 import {
   removeClaudeAlias
-} from "../chunk-VMQU7YEJ.js";
+} from "../chunk-VF7YOT2W.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-L7NOG547.js";
+import "../chunk-VTUN7WSG.js";
 import "../chunk-2UMNXADU.js";
 import {
   CURSOR_GATE_EVENTS,
-  HOOK_LOCATOR_BINARY
-} from "../chunk-MC5WUOJJ.js";
+  HOOK_LOCATOR_BINARY,
+  isValidApiKey
+} from "../chunk-HUZW6SEO.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, copyFileSync, readdirSync } from "fs";
@@ -121,10 +121,24 @@ var APP_OWNED_ENTRIES = [
   // Shared: AgentInstaller.vscodePlugin writes .pushary/plugins/vscode, and so
   // does the CLI. Not attributable, so it is kept whenever the app is installed
   // rather than removed and left registered against a path that is gone.
-  "plugins"
+  "plugins",
+  "bridge-auth"
 ];
 var isAppOwned = (name) => APP_OWNED_ENTRIES.includes(name);
 
+// src/shared-mcp-key.ts
+var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+var pusharyKey = (value) => typeof value === "string" && isValidApiKey(value.trim()) ? value.trim() : null;
+var bearerKey = (authorization) => typeof authorization === "string" && authorization.startsWith("Bearer ") ? pusharyKey(authorization.slice("Bearer ".length)) : null;
+var mcpServerBearer = (mcpServers) => bearerKey(asRecord(asRecord(asRecord(mcpServers)?.pushary)?.headers)?.Authorization);
+var appAgentKey = (bridgeAgentKey2) => pusharyKey(asRecord(bridgeAgentKey2)?.key);
+var setupReceiptKey = (claudeMcpReceipt2) => bearerKey(asRecord(asRecord(asRecord(claudeMcpReceipt2)?.installedPushary)?.headers)?.Authorization);
+var macAppKeepsMcpEntry = (entryKey, keys) => {
+  if (!entryKey) return true;
+  if (keys.appKey) return entryKey === keys.appKey;
+  return entryKey !== keys.setupKey;
+};
+
 // bin/pushary-clean.ts
 exitOnHelpFlag("clean");
 var dim = (s) => `\x1B[2m${s}\x1B[0m`;
@@ -154,6 +168,10 @@ var removalScope = (keepMcpServer) => ({
   keepAppWiring: true,
   keepMcpServer
 });
+var codexMcpKey = (config) => {
+  const auth = readCodexMcpAuth(config);
+  return auth?.method === "embedded" ? pusharyKey(auth.key) : null;
+};
 var readJson = (path) => {
   try {
     return JSON.parse(readFileSync(path, "utf-8"));
@@ -355,7 +373,15 @@ var main = async () => {
     console.log(`  ${dim("The Mac app is installed, so its wiring and the state it owns are left alone.")}`);
     console.log();
   }
+  const restoredByTakeover = new Set(
+    ["claude_code", "codex", "gemini_cli"].filter((agent) => existsSync(hookTakeoverReceipt(agent)))
+  );
   if (keepShared) restoreTakeoverReceipts();
+  const sharedMcpKeys = {
+    appKey: appAgentKey(readJson(bridgeAgentKey())),
+    setupKey: setupReceiptKey(readJson(CLAUDE_MCP_RECEIPT))
+  };
+  const macAppKeeps = (agent, entryKey) => keepShared && (restoredByTakeover.has(agent) || macAppKeepsMcpEntry(entryKey, sharedMcpKeys));
   if (keepCliRuntime) {
     console.log(`  ${yellow(bold("Clean stopped before changing provider configuration."))}`);
     console.log(`  ${dim("Fix the hooks file or receipt above, then re-run")} npx @pushary/agent-hooks@latest clean`);
@@ -370,22 +396,24 @@ var main = async () => {
     process.exit(EXIT.FAILED);
   }
   console.log(`  ${check} Background service ${dim(did("uninstalled"))}`);
-  cleanSettingsFile(CLAUDE_SETTINGS, "Claude Code settings", scope);
-  cleanSettingsFile(CLAUDE_SETTINGS_LOCAL, "Claude Code settings.local", scope);
-  const claudeJson2 = keepShared ? null : readJson(CLAUDE_JSON);
-  if (keepShared) {
+  const claudeJson2 = readJson(CLAUDE_JSON);
+  const keepClaudeMcp = macAppKeeps("claude_code", mcpServerBearer(claudeJson2?.mcpServers));
+  const claudeHasPusharyEntry = () => Boolean(claudeJson2?.mcpServers?.pushary);
+  const claudeHadPusharyEntry = claudeHasPusharyEntry();
+  if (keepClaudeMcp) {
     console.log(`  ${skip} Claude Code MCP servers ${dim("(kept: the Mac app uses it)")}`);
   } else if (claudeJson2) {
     const rawReceipt = readJson(CLAUDE_MCP_RECEIPT);
     const receipt = isClaudeMcpSnapshot(rawReceipt) ? rawReceipt : null;
     if (existsSync(CLAUDE_MCP_RECEIPT) && !receipt) {
-      incompleteClean = true;
+      if (!keepShared) incompleteClean = true;
       console.log(`  ${skip} Claude Code MCP servers ${dim("(setup receipt is unreadable; left unchanged)")}`);
     } else if (receipt && restoreClaudeMcpServer(claudeJson2, receipt) || !receipt && removeClaudeMcpServers(claudeJson2)) {
       writeJson(CLAUDE_JSON, claudeJson2);
       console.log(`  ${check} Claude Code MCP servers ${dim(receipt ? "(previous entry restored)" : "(removed from ~/.claude.json)")}`);
+      if (keepShared && receipt) guardedRemove(CLAUDE_MCP_RECEIPT, { force: true });
     } else {
-      if (receipt) incompleteClean = true;
+      if (receipt && !keepShared) incompleteClean = true;
       console.log(`  ${skip} Claude Code MCP servers ${dim(receipt ? "(changed after setup; left unchanged)" : "(no pushary entries)")}`);
     }
   } else if (existsSync(CLAUDE_MCP_RECEIPT)) {
@@ -394,6 +422,9 @@ var main = async () => {
   } else {
     console.log(`  ${skip} Claude Code MCP servers ${dim("(not found)")}`);
   }
+  const claudeScope = removalScope(keepShared && !(claudeHadPusharyEntry && !claudeHasPusharyEntry()));
+  cleanSettingsFile(CLAUDE_SETTINGS, "Claude Code settings", claudeScope);
+  cleanSettingsFile(CLAUDE_SETTINGS_LOCAL, "Claude Code settings.local", claudeScope);
   const cursorData = keepShared ? null : readJson(CURSOR_MCP);
   if (keepShared) {
     console.log(`  ${skip} Cursor MCP config ${dim("(kept: the Mac app uses it)")}`);
@@ -469,7 +500,8 @@ var main = async () => {
     const trustRemoved = hookOwnerOf(codexHooksData) === "app" ? false : removeCodexHookTrust(parsed, codexHooksJson2, codexPositions);
     const hadPushary = config.includes("pushary");
     if (hadPushary || trustRemoved) {
-      if (!keepShared) {
+      const macAppKeepsCodexMcp = macAppKeeps("codex", codexMcpKey(parsed));
+      if (!macAppKeepsCodexMcp) {
         const mcpServers = parsed.mcp_servers ?? {};
         delete mcpServers.pushary;
         if (Object.keys(mcpServers).length === 0) delete parsed.mcp_servers;
@@ -482,6 +514,9 @@ var main = async () => {
       guardedWrite(codexConfig, stringifyTOML(parsed));
       const what = trustRemoved ? "cleaned, hook trust removed" : "cleaned";
       console.log(`  ${check} Codex config ${dim(did(what))}`);
+      if (macAppKeepsCodexMcp && parsed.mcp_servers?.pushary) {
+        console.log(`  ${skip} Codex MCP server ${dim("(kept: the Mac app uses it)")}`);
+      }
     } else {
       console.log(`  ${skip} Codex config ${dim("(no pushary entries)")}`);
     }
@@ -518,7 +553,7 @@ var main = async () => {
   const geminiSettingsPath = geminiSettings();
   const geminiSettings2 = readJson(geminiSettingsPath);
   if (geminiSettings2) {
-    if (removeGeminiSettings(geminiSettings2, scope)) {
+    if (removeGeminiSettings(geminiSettings2, removalScope(macAppKeeps("gemini_cli", mcpServerBearer(geminiSettings2.mcpServers))))) {
       writeJson(geminiSettingsPath, geminiSettings2);
       console.log(`  ${check} Gemini CLI settings ${dim(did("cleaned"))}`);
     } else {

package/dist/bin/pushary-codex-bridge.js

@@ -1,46 +1,45 @@
 #!/usr/bin/env node
-import "../chunk-54W7ELDQ.js";
+import "../chunk-DNLFSRCF.js";
 import {
   LiveTranscriptRelay,
   liveSessionSleep,
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-FRXZMCVA.js";
+} from "../chunk-ROTIPRM4.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-PQGLDN4V.js";
-import "../chunk-SKPXQRKN.js";
+} from "../chunk-KDPYXMUI.js";
+import "../chunk-CDSA3NTB.js";
 import "../chunk-EQRS3SGM.js";
 import {
   transcriptsEnabled
-} from "../chunk-VERXHIQF.js";
+} from "../chunk-C2FYSFTQ.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import {
-  resolveBinary
-} from "../chunk-L4ZCFMWW.js";
 import {
   isDecisionStopped,
   withdrawQuestion
-} from "../chunk-XS33QBJA.js";
+} from "../chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "../chunk-4OSQZ5TB.js";
-import "../chunk-BGX4QUQF.js";
-import "../chunk-VMQU7YEJ.js";
+} from "../chunk-IZKCA35M.js";
+import {
+  resolveBinary
+} from "../chunk-67RNDRKL.js";
+import "../chunk-VF7YOT2W.js";
 import {
   callMcpTool
 } from "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-L7NOG547.js";
+import "../chunk-VTUN7WSG.js";
 import {
   getApiKey,
   getBaseUrl
@@ -48,7 +47,7 @@ import {
 import {
   parseAgentQuestion,
   parseAgentQuestionAnswers
-} from "../chunk-MC5WUOJJ.js";
+} from "../chunk-HUZW6SEO.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";