@pushary/agent-hooks 1.9.50 → 1.9.52

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 1.9.52
+
+- `pushary upgrade` and the daily automatic update now refresh the Pushary instructions in each agent's instruction file: Codex, Gemini CLI, OpenCode, fx, Qwen Code, CodeBuddy and Grok. Before this release only `setup` wrote them, so a machine set up before 1.9.43 kept the old text after every update and its agents were never told about reminders. In fx a plain "remind me in 2 minutes" could fall back to a sleep timer that stops when fx closes.
+- The refresh only replaces a Pushary block that is already there. It never adds one to a file that has none, never creates a file, and keeps the text around the block byte for byte, Windows line endings included. The file is replaced in one step, so a full disk or a stopped update cannot leave half a file.
+- It leaves a file alone and names it when the file is read-only, is not UTF-8 text, or holds Pushary markers that do not form exactly one block. The upgrade still finishes. Fix the file and run `pushary upgrade` again.
+- fx is now part of the refresh. Its instructions are refreshed when the Pushary server entry in `~/.fx/mcp.json` is the CLI's. The server entry and `~/.fx/settings.json` are not touched.
+- fx starts the daily update check. Each time fx starts the Pushary server, Pushary checks at most once a day for a newer version, the same way a Claude Code, Codex or Gemini session start does. A machine that only uses fx used to stay on the version it was set up with.
+- Agents the Pushary Mac app owns are left alone, fx included, and reported as kept.
+- `pushary upgrade` on a machine with no global install now names fx and the command that updates it.
+
+## 1.9.51
+
+- `pushary codex --desktop` now does the one thing it was built for. When the Codex app shows "Allow Computer Use to use Calculator?", you get one Pushary question, "Allow Codex to use Calculator for this conversation?". Yes allows that app for that conversation, No denies it, and answering in Codex first withdraws the question. Before this release the launch never forwarded anything: it expected the Codex app to start its engine in a way the app does not, and it did not recognise the request the app really sends.
+- Pushary asks only when the card comes from Codex's own Computer Use and carries exactly the words Codex shows. A card another tool raises, or one worded differently, stays in Codex. It waits ten minutes for an answer, then withdraws the question.
+- The launch no longer touches commands or file edits in the Codex app. Your hooks already handle those, so nothing is asked twice.
+- The launch works with any Codex app version that keeps its engine in the known place, instead of one exact version. A request Pushary does not recognise stays in Codex.
+- New, off by default: `pushary codex --app-cards on` makes the Codex app start through the same pass-through every time you open it, including after a restart, with no terminal to keep open. `pushary codex --app-cards off` undoes it and `status` says where it stands, including when Pushary or the Codex engine is no longer where the launcher expects. It writes a launcher under `~/.pushary/codex-app`, a login item, and the `CODEX_CLI_PATH` setting for your login session, and leaves that setting alone if another program already owns it. `off` replaces the launcher with one that only runs Codex's engine and leaves that file in place, because the Codex app records its path in `~/.codex/config.toml` and an open Codex keeps using it; `pushary clean` removes it, after which Codex should be reopened.
+- The launcher steps aside by itself: it hands every engine command except the app's own protocol straight to Codex's engine, starts the engine itself when Pushary is missing, broken, never starts it, or the launcher cannot write beside itself, and turns its own setting off if a Codex update moves the engine. If the launcher is stopped, Pushary stops the engine within a few seconds.
+- The pass-through holds at most 64 KiB of the app's input and inspects at most 256 KiB of a line from the engine, loads the code that talks to Pushary only when a card appears, does nothing while idle except check every two seconds that its launcher is still running, lets the engine finish its own shutdown when Codex quits, and keeps copying if anything in it fails. The first time Computer Use asks in a way this version does not know, it says so once in Codex's own log.
+- Setup: a Mac that has the Codex app and no Codex CLI gets native hooks again. The current Codex app keeps its engine behind a small script with its version in a file beside it; setup looked for the version inside the script, found none, and treated Codex as too old for hooks. Setup now reads that file, finds the engine where the app keeps it now, and never takes Pushary's own launcher for Codex.
+- `pushary codex` is experimental and no longer appears in `pushary --help`. It still runs when typed, and `pushary codex --help` describes it.
+
 ## 1.9.50
 
 - Setup no longer reports a problem when it tried to install phone-start on its own and the background service did not start. The run closes on what the approval check found, and the closing notes say phone-start is not running. `--control on` still fails the run when phone-start cannot be made ready.

package/README.md

@@ -205,7 +205,6 @@ failing closed would let one malformed download silence every hook on the machin
 
 ```
 cowork       Set up Claude Desktop and Cowork with the Pushary connector
-codex        Start Codex with Pushary native approvals
 setup        Configure Claude Code, Codex, Gemini CLI, Hermes, Cursor, VS Code, OpenCode, or fx with Pushary
 claude       Run Claude Code through Pushary, reachable from your phone even when idle
 daemon       Keep this machine reachable so your phone can START a new session
@@ -273,6 +272,15 @@ hook checks at most once a day whether a newer version is published. If one is,
 installs that version in the background into the same global npm folder your hooks
 already run from, then refreshes each agent's config the way `pushary upgrade` does.
 The session does not wait for it, and the new version runs from the next hook call.
+From 1.9.52, fx starts the same check each time it starts the Pushary server.
+
+The refresh covers what an update can safely rewrite for an agent that is already set
+up: its hooks, the Pushary block in its instruction file, and the Pushary server entry
+for Claude Code, Codex, Gemini CLI, Cursor and VS Code. It never adds an agent or an
+instruction block that is not already there. Skills, editor plugins, the fx server
+entry and permission rules, and the server entry of the other agents are written by
+`setup` only. An instruction file that is read-only, is not UTF-8 text, or holds
+Pushary markers that do not form exactly one block is left as it is and named.
 
 - It stays within the same major version. A new major shows in `pushary doctor`, and
   you move to it with `npx pushary@latest upgrade`.

package/dist/api-K6ZROHYB.js

@@ -0,0 +1,55 @@
+import {
+  WAIT_RESPONSE_GRACE_MS,
+  askUser,
+  cancelQuestion,
+  claimBlockedAction,
+  isAwayPaused,
+  isDecisionStopped,
+  isLocalQuestionHandoff,
+  nextLongPollMs,
+  pollForAnswer,
+  requestGate,
+  sendNotification,
+  unavailableQuestionUnlessSubscriptionRequired,
+  waitForAnswer,
+  waitForQuestion,
+  waitsForThePhone,
+  withdrawQuestion
+} from "./chunk-ZMPR436Z.js";
+import "./chunk-P2546BBI.js";
+import "./chunk-POFBE6ZY.js";
+import "./chunk-L5YTS2BP.js";
+import "./chunk-EK7SZJ4K.js";
+import "./chunk-T6RIKJUO.js";
+import "./chunk-7QLSKOSU.js";
+import "./chunk-KZERVKTD.js";
+import "./chunk-OML4YFBN.js";
+import "./chunk-XUW2DRAQ.js";
+import "./chunk-AQFEP65J.js";
+import "./chunk-CQ5JGRML.js";
+import "./chunk-MC4VY5LK.js";
+import "./chunk-QTOLNRET.js";
+import {
+  DECISION_STOP_REASON,
+  UNVERIFIABLE_APPROVAL_REASON
+} from "./chunk-LF3TLC7B.js";
+export {
+  DECISION_STOP_REASON,
+  UNVERIFIABLE_APPROVAL_REASON,
+  WAIT_RESPONSE_GRACE_MS,
+  askUser,
+  cancelQuestion,
+  claimBlockedAction,
+  isAwayPaused,
+  isDecisionStopped,
+  isLocalQuestionHandoff,
+  nextLongPollMs,
+  pollForAnswer,
+  requestGate,
+  sendNotification,
+  unavailableQuestionUnlessSubscriptionRequired,
+  waitForAnswer,
+  waitForQuestion,
+  waitsForThePhone,
+  withdrawQuestion
+};

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,44 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-X3RCIOIH.js";
+} from "../chunk-ONCWYACA.js";
 import {
   readHookInput
-} from "../chunk-SALUTWPX.js";
-import "../chunk-UCF3EZZL.js";
+} from "../chunk-IHUFRAHB.js";
+import "../chunk-VQPSWD3A.js";
 import "../chunk-DWQYCOPI.js";
-import "../chunk-Y74IJ2IO.js";
-import "../chunk-ZMYLVFXC.js";
-import "../chunk-WEY5ZHDB.js";
-import "../chunk-25SYEAW4.js";
-import "../chunk-PA54A437.js";
-import "../chunk-XTVEW2NG.js";
+import "../chunk-N77BH7H2.js";
+import "../chunk-BL3WAGIK.js";
+import "../chunk-Q7OXI6VS.js";
+import "../chunk-6C4S3QYD.js";
+import "../chunk-BUXDR6US.js";
+import "../chunk-LIESRXK5.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-JGNYCRB2.js";
-import "../chunk-XH3F66VD.js";
-import "../chunk-XNZB274I.js";
-import "../chunk-KK2DIUVV.js";
+import "../chunk-5463UUO2.js";
+import "../chunk-GCN73COS.js";
+import "../chunk-FV34HT35.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-YVO4HIHX.js";
-import "../chunk-B7LV6W7U.js";
-import "../chunk-KEAIIVW3.js";
-import "../chunk-AWMMABVB.js";
+import "../chunk-VYBH6D4X.js";
+import "../chunk-U2L42GVI.js";
+import "../chunk-3RPN7AAT.js";
+import "../chunk-JBT3ZSJS.js";
+import "../chunk-ZMPR436Z.js";
+import "../chunk-P2546BBI.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-LZYJMSOY.js";
-import "../chunk-34RXPM5U.js";
-import "../chunk-ABMEBN2R.js";
-import "../chunk-LY3OJFBW.js";
+import "../chunk-L5YTS2BP.js";
+import "../chunk-EK7SZJ4K.js";
+import "../chunk-T6RIKJUO.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ZYYQJSIO.js";
+import "../chunk-4QQEUJL4.js";
+import "../chunk-OML4YFBN.js";
+import "../chunk-XUW2DRAQ.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-VUS6QGND.js";
-import "../chunk-ZOKMGBPR.js";
-import "../chunk-OR5F63C2.js";
+import "../chunk-CQ5JGRML.js";
+import "../chunk-MC4VY5LK.js";
+import "../chunk-QTOLNRET.js";
+import "../chunk-LF3TLC7B.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,39 +5,41 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-X3RCIOIH.js";
+} from "../chunk-ONCWYACA.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-S6RNS4UL.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-XTVEW2NG.js";
+} from "../chunk-LIESRXK5.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-XH3F66VD.js";
-import {
-  exitOnHelpFlag
-} from "../chunk-BOVSUH4N.js";
-import "../chunk-KEAIIVW3.js";
+import "../chunk-VYBH6D4X.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
+import "../chunk-4QQEUJL4.js";
 import {
   claudeSettings
-} from "../chunk-ZYYQJSIO.js";
+} from "../chunk-OML4YFBN.js";
+import "../chunk-XUW2DRAQ.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-AQFEP65J.js";
-import "../chunk-VUS6QGND.js";
-import "../chunk-ZOKMGBPR.js";
+import "../chunk-CQ5JGRML.js";
+import "../chunk-MC4VY5LK.js";
+import "../chunk-QTOLNRET.js";
 import {
   isRecord
-} from "../chunk-OR5F63C2.js";
+} from "../chunk-LF3TLC7B.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -3,44 +3,44 @@ import {
   WRAPPER_ACTIVE_ENV,
   findClaudeBinary
 } from "../chunk-PQ4K74WL.js";
+import {
+  SESSION_IDLE_TIMEOUT_MS,
+  describeIdleWindow,
+  startProcessOwnership,
+  withSpawnProcessOwnership
+} from "../chunk-56ZTIY6D.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-IF2UPWD2.js";
+} from "../chunk-DHJSBK63.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-UCF3EZZL.js";
+} from "../chunk-VQPSWD3A.js";
 import "../chunk-DWQYCOPI.js";
 import {
   ensureDaemonRunning
-} from "../chunk-ZMYLVFXC.js";
-import "../chunk-WEY5ZHDB.js";
-import "../chunk-25SYEAW4.js";
-import "../chunk-PA54A437.js";
-import "../chunk-XTVEW2NG.js";
+} from "../chunk-BL3WAGIK.js";
+import "../chunk-Q7OXI6VS.js";
+import "../chunk-6C4S3QYD.js";
+import "../chunk-BUXDR6US.js";
+import "../chunk-LIESRXK5.js";
 import "../chunk-GMXKITVA.js";
-import {
-  transcriptsEnabled
-} from "../chunk-JGNYCRB2.js";
-import "../chunk-XH3F66VD.js";
-import {
-  SESSION_IDLE_TIMEOUT_MS,
-  describeIdleWindow,
-  startProcessOwnership,
-  withSpawnProcessOwnership
-} from "../chunk-FPKQGWAF.js";
 import {
   encryptRecord
-} from "../chunk-XNZB274I.js";
-import "../chunk-KK2DIUVV.js";
+} from "../chunk-5463UUO2.js";
+import "../chunk-GCN73COS.js";
+import {
+  transcriptsEnabled
+} from "../chunk-FV34HT35.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
+import "../chunk-VYBH6D4X.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -57,9 +57,11 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-YVO4HIHX.js";
-import "../chunk-B7LV6W7U.js";
-import "../chunk-KEAIIVW3.js";
+} from "../chunk-U2L42GVI.js";
+import "../chunk-3RPN7AAT.js";
+import {
+  repoKeyFor
+} from "../chunk-JBT3ZSJS.js";
 import {
   askUser,
   cancelQuestion,
@@ -67,31 +69,33 @@ import {
   isDecisionStopped,
   isLocalQuestionHandoff,
   nextLongPollMs,
-  repoKeyFor,
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-AWMMABVB.js";
-import "../chunk-POFBE6ZY.js";
+} from "../chunk-ZMPR436Z.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-LZYJMSOY.js";
-import "../chunk-34RXPM5U.js";
-import "../chunk-ABMEBN2R.js";
+} from "../chunk-P2546BBI.js";
+import "../chunk-POFBE6ZY.js";
+import "../chunk-L5YTS2BP.js";
+import "../chunk-EK7SZJ4K.js";
 import {
   getMachineId
-} from "../chunk-LY3OJFBW.js";
+} from "../chunk-T6RIKJUO.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ZYYQJSIO.js";
+import "../chunk-4QQEUJL4.js";
+import "../chunk-OML4YFBN.js";
+import "../chunk-XUW2DRAQ.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-VUS6QGND.js";
+} from "../chunk-CQ5JGRML.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-ZOKMGBPR.js";
+} from "../chunk-MC4VY5LK.js";
+import "../chunk-QTOLNRET.js";
 import {
   DECISION_STOP_REASON,
   HAND_BACK_WITHOUT_A_PROMPT,
@@ -101,7 +105,7 @@ import {
   redactSecretsFromContent,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-OR5F63C2.js";
+} from "../chunk-LF3TLC7B.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -1,21 +1,27 @@
 #!/usr/bin/env node
+import {
+  CODEX_APP_CARDS_DIRECTORY,
+  removeCodexAppCardsFromThisMac
+} from "../chunk-OHSHDQZF.js";
 import {
   PUSHARY_SKILL_NAME,
   PUSHARY_SKILL_SOURCE,
   createGuards
 } from "../chunk-EUW7JL2K.js";
+import "../chunk-DMJFW4KL.js";
+import "../chunk-XCEN33UP.js";
 import {
   describeCliKeyRevocation,
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-TYTIDEBW.js";
-import "../chunk-5Q2FRMPC.js";
+} from "../chunk-RH6KR6EH.js";
+import "../chunk-JOWF4Y4P.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-34AQAQKW.js";
+} from "../chunk-63IQRYVP.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -24,20 +30,21 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-VCZN7NAB.js";
+} from "../chunk-EPOD7QHT.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-K73CBZKW.js";
-import "../chunk-4PCJ6DYK.js";
+} from "../chunk-MHQB62K5.js";
+import "../chunk-QCGNGEGE.js";
+import "../chunk-6SWMKF5E.js";
 import {
   planFxRemoval,
   removeInstructionBlock
-} from "../chunk-DH4BWFU7.js";
-import "../chunk-GDDXGBTM.js";
+} from "../chunk-MTKV4RUQ.js";
+import "../chunk-46TC24ET.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -49,11 +56,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-LLRYP5TR.js";
+} from "../chunk-K23WMLPY.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-S6RNS4UL.js";
 import {
   compatibleConfigFile,
   compatibleDocuments,
@@ -70,10 +80,10 @@ import {
   removePusharyToolPermissions,
   restoreClaudeMcpServer,
   serializeConfigDocument
-} from "../chunk-Y74IJ2IO.js";
+} from "../chunk-N77BH7H2.js";
 import {
   disableDaemonService
-} from "../chunk-ZMYLVFXC.js";
+} from "../chunk-BL3WAGIK.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -81,46 +91,44 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-WEY5ZHDB.js";
+} from "../chunk-Q7OXI6VS.js";
 import {
   removeGeminiSettings
-} from "../chunk-25SYEAW4.js";
-import "../chunk-PA54A437.js";
-import "../chunk-XTVEW2NG.js";
+} from "../chunk-6C4S3QYD.js";
+import "../chunk-BUXDR6US.js";
+import "../chunk-LIESRXK5.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
+import "../chunk-XHKBHWLX.js";
+import "../chunk-6ICPEJY5.js";
 import {
   CANDIDATE_RCS,
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-XH3F66VD.js";
-import {
-  exitOnHelpFlag
-} from "../chunk-BOVSUH4N.js";
-import "../chunk-XHKBHWLX.js";
-import "../chunk-6ICPEJY5.js";
-import "../chunk-YVO4HIHX.js";
-import "../chunk-B7LV6W7U.js";
-import "../chunk-KEAIIVW3.js";
-import "../chunk-AWMMABVB.js";
+} from "../chunk-VYBH6D4X.js";
+import "../chunk-36NGFHE4.js";
+import "../chunk-U2L42GVI.js";
+import "../chunk-3RPN7AAT.js";
+import "../chunk-JBT3ZSJS.js";
+import "../chunk-ZMPR436Z.js";
+import "../chunk-P2546BBI.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-LZYJMSOY.js";
-import "../chunk-34RXPM5U.js";
-import "../chunk-ABMEBN2R.js";
-import "../chunk-LY3OJFBW.js";
+import "../chunk-L5YTS2BP.js";
+import "../chunk-EK7SZJ4K.js";
+import "../chunk-T6RIKJUO.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
+import "../chunk-4QQEUJL4.js";
 import {
   claudeJson,
   claudeMcpReceipt,
   claudeSettings,
   claudeSettingsLocal,
   claudeSkillDir,
-  cleanNpmEnv,
   codexAgentsMd,
   codexConfigToml,
   codexHookPositions,
@@ -136,40 +144,45 @@ import {
   fxSettings,
   geminiMd,
   geminiSettings,
-  globalPackageState,
   hermesConfig,
   hermesConfigReceipt,
   hookTakeoverReceipt,
-  npmIsOnPath,
   pusharyDir,
   readCodexMcpAuth,
-  readGlobalFolder,
-  readGlobalPrefix,
   removeCodexHookTrust,
   removeCodexHooks,
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-ZYYQJSIO.js";
+} from "../chunk-OML4YFBN.js";
+import {
+  cleanNpmEnv,
+  globalPackageState,
+  npmIsOnPath,
+  readGlobalFolder,
+  readGlobalPrefix
+} from "../chunk-XUW2DRAQ.js";
 import "../chunk-AQFEP65J.js";
 import {
   getBaseUrl
-} from "../chunk-VUS6QGND.js";
+} from "../chunk-CQ5JGRML.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-ZOKMGBPR.js";
+} from "../chunk-MC4VY5LK.js";
 import {
   CLI_PACKAGE_NAMES,
+  globalPackageFolder,
+  globalPackagesToUninstall,
+  globalRootFor
+} from "../chunk-QTOLNRET.js";
+import {
   HOOK_COMPATIBLE_PROFILES,
   HOOK_LOCATOR_BINARY,
   SUPPORT_DISCORD,
   SUPPORT_EMAIL,
-  globalPackageFolder,
-  globalPackagesToUninstall,
-  globalRootFor,
   isValidApiKey,
   redactSecrets
-} from "../chunk-OR5F63C2.js";
+} from "../chunk-LF3TLC7B.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync5 } from "fs";
@@ -980,6 +993,19 @@ var main = async () => {
     process.exit(EXIT.FAILED);
   }
   console.log(`  ${check} Background service ${dim(did("uninstalled"))}`);
+  const uid = process.platform === "darwin" ? process.getuid?.() : void 0;
+  let macAppKeepsCodexAppCards = false;
+  if (uid !== void 0) {
+    try {
+      const appCards = removeCodexAppCardsFromThisMac({ homeDir: homedir5(), uid, keepWhatTheMacAppTurnedOn: keepShared, dryRun });
+      macAppKeepsCodexAppCards = appCards === "kept_for_the_mac_app";
+      if (appCards === "removed") console.log(`  ${check} Codex app cards ${dim(did("removed"))} ${dim("(quit Codex and open it again)")}`);
+      if (macAppKeepsCodexAppCards) console.log(`  ${skip} Codex app cards ${dim("(turned on by the Mac app; left on)")}`);
+    } catch {
+      incompleteClean = true;
+      console.log(`  ${cross} Codex app cards ${dim("(could not turn off; run pushary codex --app-cards off)")}`);
+    }
+  }
   if (everything) await revokeKeysThisCliCreated();
   const claudeJson2 = readJson(CLAUDE_JSON);
   const keepClaudeMcp = macAppKeeps("claude_code", mcpServerBearer(claudeJson2?.mcpServers));
@@ -1334,7 +1360,7 @@ var main = async () => {
     let removed = 0;
     const kept = [];
     for (const entry of readdirSync5(PUSHARY_DIR)) {
-      if (keepShared && isAppOwned(entry) || entry === "setup" && (keepShared || incompleteClean)) {
+      if (keepShared && isAppOwned(entry) || entry === "setup" && (keepShared || incompleteClean) || entry === CODEX_APP_CARDS_DIRECTORY && macAppKeepsCodexAppCards) {
         kept.push(entry);
         continue;
       }

package/dist/bin/pushary-codex-bridge.js

@@ -1,42 +1,45 @@
 #!/usr/bin/env node
-import {
-  transcriptsEnabled
-} from "../chunk-JGNYCRB2.js";
-import "../chunk-XH3F66VD.js";
 import {
   runCodexBridge
-} from "../chunk-SE4JFMLW.js";
-import "../chunk-BXK6ZJVJ.js";
+} from "../chunk-LD4MWJMD.js";
+import "../chunk-UVT6B6XN.js";
 import {
   resolveProviderBinary
-} from "../chunk-GBKSCDEK.js";
+} from "../chunk-2LEH5IGX.js";
 import "../chunk-RIVNNBEK.js";
 import {
   withSpawnProcessOwnership
-} from "../chunk-FPKQGWAF.js";
-import "../chunk-XNZB274I.js";
-import "../chunk-KK2DIUVV.js";
+} from "../chunk-56ZTIY6D.js";
+import "../chunk-5463UUO2.js";
+import "../chunk-GCN73COS.js";
+import {
+  transcriptsEnabled
+} from "../chunk-FV34HT35.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-KEAIIVW3.js";
-import "../chunk-AWMMABVB.js";
+import "../chunk-VYBH6D4X.js";
+import "../chunk-JBT3ZSJS.js";
+import "../chunk-ZMPR436Z.js";
+import "../chunk-P2546BBI.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-LZYJMSOY.js";
-import "../chunk-34RXPM5U.js";
-import "../chunk-ABMEBN2R.js";
+import "../chunk-L5YTS2BP.js";
+import "../chunk-EK7SZJ4K.js";
 import {
   getMachineId
-} from "../chunk-LY3OJFBW.js";
+} from "../chunk-T6RIKJUO.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ZYYQJSIO.js";
+import "../chunk-4QQEUJL4.js";
+import "../chunk-OML4YFBN.js";
+import "../chunk-XUW2DRAQ.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-VUS6QGND.js";
-import "../chunk-ZOKMGBPR.js";
-import "../chunk-OR5F63C2.js";
+} from "../chunk-CQ5JGRML.js";
+import "../chunk-MC4VY5LK.js";
+import "../chunk-QTOLNRET.js";
+import "../chunk-LF3TLC7B.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";