@pushary/agent-hooks 1.4.1 → 1.4.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (78) hide show
  1. package/CHANGELOG.md +9 -0
  2. package/dist/bin/pushary-bell-hook.js +18 -18
  3. package/dist/bin/pushary-bell.js +6 -6
  4. package/dist/bin/pushary-claude.js +18 -18
  5. package/dist/bin/pushary-clean.js +24 -20
  6. package/dist/bin/pushary-codex-bridge.js +10 -10
  7. package/dist/bin/pushary-codex-hook.js +31 -26
  8. package/dist/bin/pushary-codex.js +6 -6
  9. package/dist/bin/pushary-connect.js +6 -6
  10. package/dist/bin/pushary-cowork.js +3 -3
  11. package/dist/bin/pushary-daemon.js +22 -22
  12. package/dist/bin/pushary-disconnect.js +10 -10
  13. package/dist/bin/pushary-doctor.js +20 -20
  14. package/dist/bin/pushary-elicitation-hook.js +17 -17
  15. package/dist/bin/pushary-gemini-bridge.js +9 -9
  16. package/dist/bin/pushary-gemini-hook.js +19 -19
  17. package/dist/bin/pushary-hook.js +23 -23
  18. package/dist/bin/pushary-login.js +7 -7
  19. package/dist/bin/pushary-logout.js +4 -4
  20. package/dist/bin/pushary-mode.js +3 -3
  21. package/dist/bin/pushary-notification-hook.js +20 -20
  22. package/dist/bin/pushary-opencode-hook.js +19 -19
  23. package/dist/bin/pushary-permission-denied-hook.js +24 -24
  24. package/dist/bin/pushary-permission-hook.js +23 -23
  25. package/dist/bin/pushary-post-hook.js +20 -20
  26. package/dist/bin/pushary-prompt-hook.js +20 -20
  27. package/dist/bin/pushary-session-end-hook.js +20 -20
  28. package/dist/bin/pushary-session-start-hook.js +22 -22
  29. package/dist/bin/pushary-setup.js +53 -32
  30. package/dist/bin/pushary-stats.js +2 -2
  31. package/dist/bin/pushary-status.js +10 -10
  32. package/dist/bin/pushary-stop-hook.js +20 -20
  33. package/dist/bin/pushary-stopfailure-hook.js +20 -20
  34. package/dist/bin/pushary-transcript-register.js +16 -16
  35. package/dist/bin/pushary-transcripts.js +4 -4
  36. package/dist/bin/pushary-upgrade.js +14 -14
  37. package/dist/bin/pushary-wait.js +3 -3
  38. package/dist/{chunk-BZBUPZC6.js → chunk-25RTLTQD.js} +1 -1
  39. package/dist/{chunk-SKXLIVFM.js → chunk-2V2IKOGJ.js} +1 -1
  40. package/dist/{chunk-MN3XOVRK.js → chunk-4BROEAKH.js} +1 -1
  41. package/dist/{chunk-KEMEBTCJ.js → chunk-4ZDKSDVW.js} +4 -4
  42. package/dist/{chunk-43JKGLZZ.js → chunk-55KW4FLG.js} +2 -2
  43. package/dist/{chunk-2GMI6JH6.js → chunk-ACYIZ3KH.js} +5 -5
  44. package/dist/{chunk-3BPB2HYZ.js → chunk-BZ4GDOJX.js} +3 -3
  45. package/dist/{chunk-R3AMKNIW.js → chunk-DY4ILT6L.js} +1 -1
  46. package/dist/{chunk-VYUDGQM7.js → chunk-F4UWL4NY.js} +1 -1
  47. package/dist/{chunk-TI3ZWXZG.js → chunk-FU2DFEAZ.js} +1 -1
  48. package/dist/{chunk-LNGYW6G4.js → chunk-G653QPTR.js} +17 -13
  49. package/dist/{chunk-CRNAXFQ6.js → chunk-GZ7E6VOB.js} +1 -1
  50. package/dist/{chunk-WIOXWUUH.js → chunk-II7PUMPB.js} +3 -3
  51. package/dist/{chunk-4FN6VV56.js → chunk-JVTOML54.js} +2 -2
  52. package/dist/{chunk-SWFF5U2N.js → chunk-LEAAERSQ.js} +1 -1
  53. package/dist/{chunk-ED5TA2FJ.js → chunk-LPYCPFBZ.js} +3 -3
  54. package/dist/{chunk-HK3IXIQJ.js → chunk-M5CTUFF3.js} +1 -1
  55. package/dist/{chunk-3UA6FPRC.js → chunk-MUVTZNJW.js} +3 -3
  56. package/dist/{chunk-JOVWYVSR.js → chunk-MW6ZPC6R.js} +1 -1
  57. package/dist/{chunk-3T52B2OF.js → chunk-NHTAHAIS.js} +1 -1
  58. package/dist/{chunk-D7ERHWYB.js → chunk-NOWZUGZW.js} +1 -1
  59. package/dist/{chunk-QBS6LGEK.js → chunk-NY6XQ6CA.js} +1 -1
  60. package/dist/{chunk-LUT2EZLG.js → chunk-PC6DU5C4.js} +1 -1
  61. package/dist/{chunk-FVKFDTN6.js → chunk-SOUZBGYJ.js} +4 -0
  62. package/dist/{chunk-ALFT7H5B.js → chunk-SUWRZYQG.js} +56 -5
  63. package/dist/{chunk-S3EP4B35.js → chunk-T5SZ4PML.js} +24 -10
  64. package/dist/{chunk-SAF6NNXY.js → chunk-TRLFZKVG.js} +1 -1
  65. package/dist/{chunk-KI36MAT6.js → chunk-TYEO6T5J.js} +2 -2
  66. package/dist/{chunk-TNS3YLFE.js → chunk-UJBZIKSY.js} +6 -6
  67. package/dist/{chunk-K6I5M2ME.js → chunk-UM5J3J4V.js} +1 -1
  68. package/dist/{chunk-HQLAZWJJ.js → chunk-VIOL2DJS.js} +5 -5
  69. package/dist/{chunk-PHHGHHOW.js → chunk-VOMOZ4D5.js} +1 -1
  70. package/dist/{chunk-I6HRQOMT.js → chunk-VW66JEGU.js} +4 -4
  71. package/dist/{chunk-TF4IOINR.js → chunk-WPVHRUDT.js} +3 -3
  72. package/dist/{chunk-GOFDGTEI.js → chunk-XDP3UYH5.js} +16 -43
  73. package/dist/{chunk-37VLIYLI.js → chunk-Y3MM6PYN.js} +1 -1
  74. package/dist/{chunk-WEO5JCB4.js → chunk-YXP3WPAI.js} +1 -1
  75. package/dist/{chunk-LYXX5NSB.js → chunk-ZVY25BMK.js} +1 -1
  76. package/dist/{reapply-BAWDJTG7.js → reapply-J527BCJG.js} +8 -8
  77. package/dist/src/index.js +12 -12
  78. package/package.json +1 -1
package/CHANGELOG.md CHANGED
@@ -1,5 +1,14 @@
1
1
  # Changelog
2
2
 
3
+ ## 1.4.2
4
+
5
+ - Setup trusts the Pushary hooks for you on Codex up to 0.155.1. It used to stop at 0.147.0, so on a newer Codex it wrote the hooks without trusting them, Codex never ran them, and setup still said it was done.
6
+ - On a Codex newer than the last version Pushary checked, setup says so in one line and tells you to open Codex and choose Trust for the Pushary hooks.
7
+ - The phone QR stops waiting 10 seconds before the pairing code expires, so the code is cancelled cleanly on a timeout.
8
+ - After a minute at the QR with no scan, setup offers the browser sign-in: Ctrl-C, then `npx @pushary/agent-hooks setup --connect browser`.
9
+ - A kill switch or standing deny on Codex now appears in your decision history, as it already did for Claude Code. If that record fails to send, it is sent again on the next matching denial.
10
+ - `clean --everything` also removes the sign-in session the Mac app now keeps in the keychain.
11
+
3
12
  ## 1.4.1
4
13
 
5
14
  - `clean` masks credentials in shell lines it cannot rewrite, including output you might send to support.
@@ -1,35 +1,35 @@
1
1
  #!/usr/bin/env node
2
2
  import {
3
3
  handleBell
4
- } from "../chunk-BZBUPZC6.js";
4
+ } from "../chunk-25RTLTQD.js";
5
5
  import {
6
6
  readHookInput
7
- } from "../chunk-4FN6VV56.js";
8
- import "../chunk-TNS3YLFE.js";
7
+ } from "../chunk-JVTOML54.js";
8
+ import "../chunk-UJBZIKSY.js";
9
9
  import "../chunk-SGZJ5LYH.js";
10
- import "../chunk-KEMEBTCJ.js";
11
- import "../chunk-R3AMKNIW.js";
12
- import "../chunk-LYXX5NSB.js";
13
- import "../chunk-TF4IOINR.js";
14
- import "../chunk-3BPB2HYZ.js";
15
- import "../chunk-ED5TA2FJ.js";
16
- import "../chunk-JOVWYVSR.js";
17
- import "../chunk-CRNAXFQ6.js";
10
+ import "../chunk-4ZDKSDVW.js";
11
+ import "../chunk-DY4ILT6L.js";
12
+ import "../chunk-ZVY25BMK.js";
13
+ import "../chunk-WPVHRUDT.js";
14
+ import "../chunk-BZ4GDOJX.js";
15
+ import "../chunk-LPYCPFBZ.js";
16
+ import "../chunk-MW6ZPC6R.js";
17
+ import "../chunk-GZ7E6VOB.js";
18
18
  import "../chunk-EQRS3SGM.js";
19
- import "../chunk-MN3XOVRK.js";
19
+ import "../chunk-4BROEAKH.js";
20
20
  import "../chunk-XHKBHWLX.js";
21
- import "../chunk-WEO5JCB4.js";
22
- import "../chunk-3T52B2OF.js";
23
- import "../chunk-SAF6NNXY.js";
21
+ import "../chunk-YXP3WPAI.js";
22
+ import "../chunk-NHTAHAIS.js";
23
+ import "../chunk-TRLFZKVG.js";
24
24
  import "../chunk-GMXKITVA.js";
25
25
  import "../chunk-DINDL2CF.js";
26
- import "../chunk-TI3ZWXZG.js";
26
+ import "../chunk-FU2DFEAZ.js";
27
27
  import "../chunk-7QLSKOSU.js";
28
28
  import "../chunk-KZERVKTD.js";
29
- import "../chunk-K6I5M2ME.js";
29
+ import "../chunk-UM5J3J4V.js";
30
30
  import "../chunk-T7E75EKA.js";
31
31
  import "../chunk-2UMNXADU.js";
32
- import "../chunk-FVKFDTN6.js";
32
+ import "../chunk-SOUZBGYJ.js";
33
33
 
34
34
  // bin/pushary-bell-hook.ts
35
35
  var main = async () => {
@@ -5,15 +5,15 @@ import {
5
5
  liveAgentCount,
6
6
  ring,
7
7
  upgradeThreshold
8
- } from "../chunk-BZBUPZC6.js";
8
+ } from "../chunk-25RTLTQD.js";
9
9
  import {
10
10
  addBellHooks,
11
11
  bellInstalled,
12
12
  removeBellHooks
13
- } from "../chunk-JOVWYVSR.js";
13
+ } from "../chunk-MW6ZPC6R.js";
14
14
  import {
15
15
  claudeSettings
16
- } from "../chunk-SAF6NNXY.js";
16
+ } from "../chunk-TRLFZKVG.js";
17
17
  import {
18
18
  createIo
19
19
  } from "../chunk-5RUIFDTP.js";
@@ -25,18 +25,18 @@ import {
25
25
  parseFlags
26
26
  } from "../chunk-GMXKITVA.js";
27
27
  import "../chunk-DINDL2CF.js";
28
- import "../chunk-TI3ZWXZG.js";
28
+ import "../chunk-FU2DFEAZ.js";
29
29
  import "../chunk-7QLSKOSU.js";
30
30
  import {
31
31
  EXIT
32
32
  } from "../chunk-KZERVKTD.js";
33
- import "../chunk-K6I5M2ME.js";
33
+ import "../chunk-UM5J3J4V.js";
34
34
  import {
35
35
  readJsonSafe,
36
36
  writeJsonAtomic
37
37
  } from "../chunk-T7E75EKA.js";
38
38
  import "../chunk-2UMNXADU.js";
39
- import "../chunk-FVKFDTN6.js";
39
+ import "../chunk-SOUZBGYJ.js";
40
40
 
41
41
  // bin/pushary-bell.ts
42
42
  exitOnHelpFlag("bell");
@@ -8,7 +8,7 @@ import {
8
8
  describeIdleWindow,
9
9
  startProcessOwnership,
10
10
  withSpawnProcessOwnership
11
- } from "../chunk-PHHGHHOW.js";
11
+ } from "../chunk-VOMOZ4D5.js";
12
12
  import {
13
13
  isDeferAnswer
14
14
  } from "../chunk-YHG74UFF.js";
@@ -17,24 +17,24 @@ import {
17
17
  loadSessionKey,
18
18
  registerTranscript,
19
19
  registeredTranscriptEnabled
20
- } from "../chunk-TNS3YLFE.js";
20
+ } from "../chunk-UJBZIKSY.js";
21
21
  import "../chunk-SGZJ5LYH.js";
22
- import "../chunk-KEMEBTCJ.js";
23
- import "../chunk-R3AMKNIW.js";
24
- import "../chunk-LYXX5NSB.js";
25
- import "../chunk-TF4IOINR.js";
22
+ import "../chunk-4ZDKSDVW.js";
23
+ import "../chunk-DY4ILT6L.js";
24
+ import "../chunk-ZVY25BMK.js";
25
+ import "../chunk-WPVHRUDT.js";
26
26
  import {
27
27
  ensureDaemonRunning
28
- } from "../chunk-3BPB2HYZ.js";
29
- import "../chunk-ED5TA2FJ.js";
30
- import "../chunk-JOVWYVSR.js";
28
+ } from "../chunk-BZ4GDOJX.js";
29
+ import "../chunk-LPYCPFBZ.js";
30
+ import "../chunk-MW6ZPC6R.js";
31
31
  import {
32
32
  encryptRecord
33
- } from "../chunk-CRNAXFQ6.js";
33
+ } from "../chunk-GZ7E6VOB.js";
34
34
  import "../chunk-EQRS3SGM.js";
35
35
  import {
36
36
  transcriptsEnabled
37
- } from "../chunk-MN3XOVRK.js";
37
+ } from "../chunk-4BROEAKH.js";
38
38
  import {
39
39
  needsShell,
40
40
  spawnClaude
@@ -56,8 +56,8 @@ import {
56
56
  reportEvent,
57
57
  savePendingCommand,
58
58
  scopePathFor
59
- } from "../chunk-LNGYW6G4.js";
60
- import "../chunk-WEO5JCB4.js";
59
+ } from "../chunk-G653QPTR.js";
60
+ import "../chunk-YXP3WPAI.js";
61
61
  import {
62
62
  DECISION_STOP_REASON,
63
63
  askUser,
@@ -70,16 +70,16 @@ import {
70
70
  } from "../chunk-LGXUGYUH.js";
71
71
  import {
72
72
  getMachineId
73
- } from "../chunk-3T52B2OF.js";
74
- import "../chunk-SAF6NNXY.js";
73
+ } from "../chunk-NHTAHAIS.js";
74
+ import "../chunk-TRLFZKVG.js";
75
75
  import "../chunk-GMXKITVA.js";
76
76
  import "../chunk-DINDL2CF.js";
77
- import "../chunk-TI3ZWXZG.js";
77
+ import "../chunk-FU2DFEAZ.js";
78
78
  import "../chunk-EYRGBYZG.js";
79
79
  import "../chunk-SAF6HGAA.js";
80
80
  import "../chunk-7QLSKOSU.js";
81
81
  import "../chunk-KZERVKTD.js";
82
- import "../chunk-K6I5M2ME.js";
82
+ import "../chunk-UM5J3J4V.js";
83
83
  import "../chunk-T7E75EKA.js";
84
84
  import {
85
85
  getApiKey,
@@ -89,7 +89,7 @@ import {
89
89
  KILL_REASON,
90
90
  redactSecrets,
91
91
  resolveGate
92
- } from "../chunk-FVKFDTN6.js";
92
+ } from "../chunk-SOUZBGYJ.js";
93
93
 
94
94
  // src/wrapper/localPassthrough.ts
95
95
  var SIGNAL_NUMBERS = {
@@ -7,14 +7,14 @@ import {
7
7
  createGuards,
8
8
  resolveHermesPython,
9
9
  runHermesPythonScript
10
- } from "../chunk-37VLIYLI.js";
10
+ } from "../chunk-Y3MM6PYN.js";
11
11
  import "../chunk-P32LPT2L.js";
12
12
  import {
13
13
  removeInstructionBlock,
14
14
  shortenHome,
15
15
  unregisterPluginLocation,
16
16
  vscodeSettingsTargets
17
- } from "../chunk-3UA6FPRC.js";
17
+ } from "../chunk-MUVTZNJW.js";
18
18
  import {
19
19
  OPENCODE_PLUGIN_SIBLING,
20
20
  OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -24,7 +24,7 @@ import {
24
24
  openCodePluginDir,
25
25
  openCodePluginFile,
26
26
  removeOpenCodeMcpServer
27
- } from "../chunk-VYUDGQM7.js";
27
+ } from "../chunk-F4UWL4NY.js";
28
28
  import {
29
29
  compatibleConfigFile,
30
30
  compatibleInstructionsFile,
@@ -32,40 +32,40 @@ import {
32
32
  compatiblePermissionRuleFile,
33
33
  removeCompatibleHooks,
34
34
  removeCompatibleMcpServer
35
- } from "../chunk-HQLAZWJJ.js";
35
+ } from "../chunk-VIOL2DJS.js";
36
36
  import {
37
37
  isClaudeMcpSnapshot,
38
38
  removeClaudeMcpServers,
39
39
  removePusharySettings,
40
40
  removePusharyToolPermissions,
41
41
  restoreClaudeMcpServer
42
- } from "../chunk-WIOXWUUH.js";
42
+ } from "../chunk-II7PUMPB.js";
43
43
  import {
44
44
  hookOwnerOf,
45
45
  isHookTakeoverReceipt,
46
46
  restoreHookTakeover,
47
47
  restoreMcpServer
48
- } from "../chunk-KEMEBTCJ.js";
49
- import "../chunk-R3AMKNIW.js";
48
+ } from "../chunk-4ZDKSDVW.js";
49
+ import "../chunk-DY4ILT6L.js";
50
50
  import {
51
51
  liveBridgeProbe,
52
52
  resolveBridgeStub
53
- } from "../chunk-LYXX5NSB.js";
53
+ } from "../chunk-ZVY25BMK.js";
54
54
  import {
55
55
  pusharyHookExecutable
56
- } from "../chunk-TF4IOINR.js";
56
+ } from "../chunk-WPVHRUDT.js";
57
57
  import {
58
58
  disableDaemonService
59
- } from "../chunk-3BPB2HYZ.js";
59
+ } from "../chunk-BZ4GDOJX.js";
60
60
  import {
61
61
  removeGeminiSettings
62
- } from "../chunk-ED5TA2FJ.js";
63
- import "../chunk-JOVWYVSR.js";
62
+ } from "../chunk-LPYCPFBZ.js";
63
+ import "../chunk-MW6ZPC6R.js";
64
64
  import "../chunk-XHKBHWLX.js";
65
- import "../chunk-LNGYW6G4.js";
66
- import "../chunk-WEO5JCB4.js";
65
+ import "../chunk-G653QPTR.js";
66
+ import "../chunk-YXP3WPAI.js";
67
67
  import "../chunk-LGXUGYUH.js";
68
- import "../chunk-3T52B2OF.js";
68
+ import "../chunk-NHTAHAIS.js";
69
69
  import {
70
70
  bridgeAgentKey,
71
71
  claudeJson,
@@ -94,7 +94,7 @@ import {
94
94
  restoreCodexHookTrust,
95
95
  vscodePluginDir,
96
96
  vscodePluginMcp
97
- } from "../chunk-SAF6NNXY.js";
97
+ } from "../chunk-TRLFZKVG.js";
98
98
  import {
99
99
  exitOnHelpFlag
100
100
  } from "../chunk-TWWLVOPB.js";
@@ -107,14 +107,14 @@ import {
107
107
  CANDIDATE_RCS,
108
108
  isDisabledExport,
109
109
  removeClaudeAlias
110
- } from "../chunk-TI3ZWXZG.js";
110
+ } from "../chunk-FU2DFEAZ.js";
111
111
  import "../chunk-EYRGBYZG.js";
112
112
  import "../chunk-SAF6HGAA.js";
113
113
  import "../chunk-7QLSKOSU.js";
114
114
  import {
115
115
  EXIT
116
116
  } from "../chunk-KZERVKTD.js";
117
- import "../chunk-K6I5M2ME.js";
117
+ import "../chunk-UM5J3J4V.js";
118
118
  import "../chunk-T7E75EKA.js";
119
119
  import "../chunk-2UMNXADU.js";
120
120
  import {
@@ -125,7 +125,7 @@ import {
125
125
  SUPPORT_EMAIL,
126
126
  isValidApiKey,
127
127
  redactSecrets
128
- } from "../chunk-FVKFDTN6.js";
128
+ } from "../chunk-SOUZBGYJ.js";
129
129
 
130
130
  // bin/pushary-clean.ts
131
131
  import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync3 } from "fs";
@@ -187,7 +187,11 @@ var MAC_KEYCHAIN_ACCOUNTS = [
187
187
  "pushary.site-api-key",
188
188
  "pushary.site-id",
189
189
  "clerk.device-token",
190
- "clerk.session-id"
190
+ "clerk.session-id",
191
+ "clerkDeviceToken",
192
+ "cachedClient",
193
+ "cachedClientServerDate",
194
+ "cachedEnvironment"
191
195
  ];
192
196
  var MAC_DEFAULTS_DOMAINS = ["com.pushary.app", "pushary-bridge", "pushary.render"];
193
197
  var macLibraryState = (home = homedir()) => [
@@ -1,24 +1,24 @@
1
1
  #!/usr/bin/env node
2
- import "../chunk-KI36MAT6.js";
2
+ import "../chunk-TYEO6T5J.js";
3
3
  import {
4
4
  LiveTranscriptRelay,
5
5
  liveSessionSleep,
6
6
  postLiveSession,
7
7
  postLiveSessionUntilAccepted,
8
8
  startLiveSessionHeartbeat
9
- } from "../chunk-SKXLIVFM.js";
9
+ } from "../chunk-2V2IKOGJ.js";
10
10
  import {
11
11
  SESSION_IDLE_TIMEOUT_MS,
12
12
  describeIdleWindow,
13
13
  idleDeadlinePassed,
14
14
  startProcessOwnership,
15
15
  withSpawnProcessOwnership
16
- } from "../chunk-PHHGHHOW.js";
17
- import "../chunk-CRNAXFQ6.js";
16
+ } from "../chunk-VOMOZ4D5.js";
17
+ import "../chunk-GZ7E6VOB.js";
18
18
  import "../chunk-EQRS3SGM.js";
19
19
  import {
20
20
  transcriptsEnabled
21
- } from "../chunk-MN3XOVRK.js";
21
+ } from "../chunk-4BROEAKH.js";
22
22
  import {
23
23
  spawnClaude
24
24
  } from "../chunk-XHKBHWLX.js";
@@ -28,18 +28,18 @@ import {
28
28
  } from "../chunk-LGXUGYUH.js";
29
29
  import {
30
30
  getMachineId
31
- } from "../chunk-3T52B2OF.js";
31
+ } from "../chunk-NHTAHAIS.js";
32
32
  import {
33
33
  resolveBinary
34
- } from "../chunk-SAF6NNXY.js";
35
- import "../chunk-TI3ZWXZG.js";
34
+ } from "../chunk-TRLFZKVG.js";
35
+ import "../chunk-FU2DFEAZ.js";
36
36
  import {
37
37
  callMcpTool
38
38
  } from "../chunk-EYRGBYZG.js";
39
39
  import "../chunk-SAF6HGAA.js";
40
40
  import "../chunk-7QLSKOSU.js";
41
41
  import "../chunk-KZERVKTD.js";
42
- import "../chunk-K6I5M2ME.js";
42
+ import "../chunk-UM5J3J4V.js";
43
43
  import "../chunk-T7E75EKA.js";
44
44
  import {
45
45
  getApiKey,
@@ -48,7 +48,7 @@ import {
48
48
  import {
49
49
  parseAgentQuestion,
50
50
  parseAgentQuestionAnswers
51
- } from "../chunk-FVKFDTN6.js";
51
+ } from "../chunk-SOUZBGYJ.js";
52
52
 
53
53
  // bin/pushary-codex-bridge.ts
54
54
  import { existsSync } from "fs";
@@ -1,7 +1,7 @@
1
1
  #!/usr/bin/env node
2
2
  import {
3
3
  takeHookHoldBudget
4
- } from "../chunk-HK3IXIQJ.js";
4
+ } from "../chunk-M5CTUFF3.js";
5
5
  import {
6
6
  blockedActionFingerprint,
7
7
  codexCallKey,
@@ -11,31 +11,32 @@ import {
11
11
  hasBlockedActionHint,
12
12
  recordBlockedActionHint,
13
13
  recordCodexCallDecision,
14
+ reportMachineDenial,
14
15
  userScope
15
- } from "../chunk-ALFT7H5B.js";
16
+ } from "../chunk-SUWRZYQG.js";
16
17
  import {
17
18
  isGatingMoment,
18
19
  recordKeylessMoment
19
- } from "../chunk-SWFF5U2N.js";
20
+ } from "../chunk-LEAAERSQ.js";
20
21
  import {
21
22
  readHookInput
22
- } from "../chunk-4FN6VV56.js";
23
+ } from "../chunk-JVTOML54.js";
23
24
  import {
24
25
  denyReasonFrom,
25
26
  isDeferAnswer
26
27
  } from "../chunk-YHG74UFF.js";
27
- import "../chunk-TNS3YLFE.js";
28
+ import "../chunk-UJBZIKSY.js";
28
29
  import "../chunk-SGZJ5LYH.js";
29
- import "../chunk-KEMEBTCJ.js";
30
- import "../chunk-R3AMKNIW.js";
31
- import "../chunk-LYXX5NSB.js";
32
- import "../chunk-TF4IOINR.js";
33
- import "../chunk-3BPB2HYZ.js";
34
- import "../chunk-ED5TA2FJ.js";
35
- import "../chunk-JOVWYVSR.js";
36
- import "../chunk-CRNAXFQ6.js";
30
+ import "../chunk-4ZDKSDVW.js";
31
+ import "../chunk-DY4ILT6L.js";
32
+ import "../chunk-ZVY25BMK.js";
33
+ import "../chunk-WPVHRUDT.js";
34
+ import "../chunk-BZ4GDOJX.js";
35
+ import "../chunk-LPYCPFBZ.js";
36
+ import "../chunk-MW6ZPC6R.js";
37
+ import "../chunk-GZ7E6VOB.js";
37
38
  import "../chunk-EQRS3SGM.js";
38
- import "../chunk-MN3XOVRK.js";
39
+ import "../chunk-4BROEAKH.js";
39
40
  import "../chunk-XHKBHWLX.js";
40
41
  import {
41
42
  CODEX_AGENT,
@@ -72,8 +73,8 @@ import {
72
73
  toCodexWire,
73
74
  toPolicyLookup,
74
75
  toPolicyLookups
75
- } from "../chunk-LNGYW6G4.js";
76
- import "../chunk-WEO5JCB4.js";
76
+ } from "../chunk-G653QPTR.js";
77
+ import "../chunk-YXP3WPAI.js";
77
78
  import {
78
79
  DECISION_STOP_REASON,
79
80
  askUser,
@@ -88,18 +89,18 @@ import {
88
89
  } from "../chunk-LGXUGYUH.js";
89
90
  import {
90
91
  getMachineId
91
- } from "../chunk-3T52B2OF.js";
92
+ } from "../chunk-NHTAHAIS.js";
92
93
  import {
93
94
  canonicalJson
94
- } from "../chunk-SAF6NNXY.js";
95
+ } from "../chunk-TRLFZKVG.js";
95
96
  import "../chunk-GMXKITVA.js";
96
97
  import "../chunk-DINDL2CF.js";
97
- import "../chunk-TI3ZWXZG.js";
98
+ import "../chunk-FU2DFEAZ.js";
98
99
  import "../chunk-EYRGBYZG.js";
99
100
  import "../chunk-SAF6HGAA.js";
100
101
  import "../chunk-7QLSKOSU.js";
101
102
  import "../chunk-KZERVKTD.js";
102
- import "../chunk-K6I5M2ME.js";
103
+ import "../chunk-UM5J3J4V.js";
103
104
  import {
104
105
  writeFileAtomic
105
106
  } from "../chunk-T7E75EKA.js";
@@ -119,7 +120,7 @@ import {
119
120
  hookWaitClamped,
120
121
  hookWaitDeadline,
121
122
  resolveGate
122
- } from "../chunk-FVKFDTN6.js";
123
+ } from "../chunk-SOUZBGYJ.js";
123
124
 
124
125
  // bin/pushary-codex-hook.ts
125
126
  import { basename } from "path";
@@ -609,8 +610,10 @@ var decidePermissionRequest = async (input) => {
609
610
  try {
610
611
  const apiKey = getApiKey();
611
612
  const { verdict, lookup, gateInput } = await codexGate(apiKey, input);
612
- if (verdict.kind === "kill") return codexDeny(KILL_REASON);
613
- if (verdict.kind === "deny") return codexDeny(verdict.reason);
613
+ if (verdict.kind === "kill" || verdict.kind === "deny") {
614
+ await reportMachineDenial({ ...input, tool_name: lookup.tool, tool_input: lookup.input }, verdict, CODEX_AGENT);
615
+ return codexDeny(verdict.kind === "kill" ? KILL_REASON : verdict.reason);
616
+ }
614
617
  const recorded = consumeCodexCallDecision(callKeyFor(input));
615
618
  if (recorded?.kind === "denied") return codexDeny(recorded.reason);
616
619
  if (recorded?.kind === "handled") return codexPass();
@@ -695,9 +698,11 @@ var decidePreToolUse = async (input) => {
695
698
  }
696
699
  try {
697
700
  const { verdict, lookup } = await codexGate(apiKey, input);
698
- if (verdict.kind === "kill") return codexDeny(KILL_REASON);
701
+ if (verdict.kind === "kill" || verdict.kind === "deny") {
702
+ await reportMachineDenial({ ...input, tool_name: lookup.tool, tool_input: lookup.input }, verdict, CODEX_AGENT);
703
+ return codexDeny(verdict.kind === "kill" ? KILL_REASON : verdict.reason);
704
+ }
699
705
  if (verdict.kind === "allow") return codexPass();
700
- if (verdict.kind === "deny") return codexDeny(verdict.reason);
701
706
  if (codexApprovalsReviewer(input) === "auto_review") return codexPass();
702
707
  if (defersToNativeMode(input.permission_mode, input.tool_name ?? "")) return codexPass();
703
708
  if (verdict.kind === "defer") return codexPass();
@@ -736,7 +741,7 @@ var decidePreToolUse = async (input) => {
736
741
  };
737
742
  var repairCodexHoldsQuietly = async () => {
738
743
  try {
739
- const { repairCodexHolds } = await import("../reapply-BAWDJTG7.js");
744
+ const { repairCodexHolds } = await import("../reapply-J527BCJG.js");
740
745
  repairCodexHolds();
741
746
  } catch {
742
747
  return;
@@ -1,8 +1,8 @@
1
1
  #!/usr/bin/env node
2
2
  import {
3
3
  reportEvent
4
- } from "../chunk-LNGYW6G4.js";
5
- import "../chunk-WEO5JCB4.js";
4
+ } from "../chunk-G653QPTR.js";
5
+ import "../chunk-YXP3WPAI.js";
6
6
  import {
7
7
  askUser,
8
8
  isDecisionStopped,
@@ -10,18 +10,18 @@ import {
10
10
  } from "../chunk-LGXUGYUH.js";
11
11
  import {
12
12
  getMachineId
13
- } from "../chunk-3T52B2OF.js";
14
- import "../chunk-SAF6NNXY.js";
13
+ } from "../chunk-NHTAHAIS.js";
14
+ import "../chunk-TRLFZKVG.js";
15
15
  import "../chunk-EYRGBYZG.js";
16
16
  import "../chunk-SAF6HGAA.js";
17
17
  import "../chunk-7QLSKOSU.js";
18
18
  import "../chunk-KZERVKTD.js";
19
- import "../chunk-K6I5M2ME.js";
19
+ import "../chunk-UM5J3J4V.js";
20
20
  import "../chunk-T7E75EKA.js";
21
21
  import {
22
22
  getApiKey
23
23
  } from "../chunk-2UMNXADU.js";
24
- import "../chunk-FVKFDTN6.js";
24
+ import "../chunk-SOUZBGYJ.js";
25
25
 
26
26
  // bin/pushary-codex.ts
27
27
  import { basename } from "path";
@@ -1,16 +1,16 @@
1
1
  #!/usr/bin/env node
2
2
  import {
3
3
  printKeyCheck
4
- } from "../chunk-D7ERHWYB.js";
4
+ } from "../chunk-NOWZUGZW.js";
5
5
  import {
6
6
  connectDevice,
7
7
  connectExistingApp,
8
8
  printConnectInstructions
9
- } from "../chunk-S3EP4B35.js";
9
+ } from "../chunk-T5SZ4PML.js";
10
10
  import "../chunk-3EGEA4KH.js";
11
11
  import {
12
12
  checkApiKey
13
- } from "../chunk-QBS6LGEK.js";
13
+ } from "../chunk-NY6XQ6CA.js";
14
14
  import "../chunk-QCGNGEGE.js";
15
15
  import {
16
16
  createIo
@@ -25,7 +25,7 @@ import {
25
25
  import "../chunk-DINDL2CF.js";
26
26
  import {
27
27
  readKeySource
28
- } from "../chunk-TI3ZWXZG.js";
28
+ } from "../chunk-FU2DFEAZ.js";
29
29
  import "../chunk-EYRGBYZG.js";
30
30
  import "../chunk-SAF6HGAA.js";
31
31
  import {
@@ -34,10 +34,10 @@ import {
34
34
  import {
35
35
  EXIT
36
36
  } from "../chunk-KZERVKTD.js";
37
- import "../chunk-K6I5M2ME.js";
37
+ import "../chunk-UM5J3J4V.js";
38
38
  import "../chunk-T7E75EKA.js";
39
39
  import "../chunk-2UMNXADU.js";
40
- import "../chunk-FVKFDTN6.js";
40
+ import "../chunk-SOUZBGYJ.js";
41
41
 
42
42
  // bin/pushary-connect.ts
43
43
  exitOnHelpFlag("connect");
@@ -2,12 +2,12 @@
2
2
  import {
3
3
  coworkOutput,
4
4
  parseCoworkOptions
5
- } from "../chunk-43JKGLZZ.js";
5
+ } from "../chunk-55KW4FLG.js";
6
6
  import {
7
7
  canOpenBrowser,
8
8
  openInBrowser
9
9
  } from "../chunk-PUZZELE6.js";
10
- import "../chunk-R3AMKNIW.js";
10
+ import "../chunk-DY4ILT6L.js";
11
11
  import {
12
12
  exitOnHelpFlag
13
13
  } from "../chunk-TWWLVOPB.js";
@@ -22,7 +22,7 @@ import {
22
22
  } from "../chunk-KZERVKTD.js";
23
23
  import {
24
24
  CLAUDE_CONNECTOR_GUIDE
25
- } from "../chunk-FVKFDTN6.js";
25
+ } from "../chunk-SOUZBGYJ.js";
26
26
 
27
27
  // bin/pushary-cowork.ts
28
28
  exitOnHelpFlag("cowork");