@pushary/agent-hooks 1.9.57 → 1.9.59

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 1.9.59
+
+- Codex app cards now also carry three questions from Codex's browser: access to a site, a download and an upload. They used to show only in Codex, because the browser raises them itself and no hook sees them. With the switch on, each reaches Pushary as a yes or no question that names the site, and the first answer wins. A download or upload question carries the address up to the end of its path. Nothing after a `?` or `#` is in that question, and the address ends in … when something was left out; the path itself is sent.
+- For a download or an upload, Yes allows that one transfer. For a site, Yes allows the site for the rest of the conversation, or for the turn if Codex is set to ask each turn, and No blocks it for the conversation, because that is what Codex does with the answer its own Allow button sends. The question's details say which. Pushary never sends "always", "for this site" or "for all sites"; those stay in Codex.
+- `pushary codex --app-cards on`, `pushary codex --desktop` and the command's help now say that the browser's questions are carried too.
+- Other Browser use questions stay in Codex for now: Developer Tools access, browsing history, verification codes and sign-in.
+
+## 1.9.58
+
+- `pushary clean` no longer removes the Codex app cards launcher when it could not turn the switch off. It keeps the folder and prints the reason. Before, a failed turn-off could leave the Codex app starting through a launcher that was gone, and Codex would not start its engine until the next logout. The same now holds when the setting that starts the Codex app cannot be read while a launcher or login item is on disk: clean and `pushary codex --app-cards off` change nothing and say so, where they used to read it as not set.
+- `pushary clean` leaves the launcher folder to the step that turns the switch off. Its last sweep of `~/.pushary` used to remove the folder a second time, which could delete a launcher the running Mac app had just written back.
+- With the switch turned on from the command, cards keep reaching Pushary after the CLI updates itself while Codex is open. The pass-through loaded part of its code at the first card, and an update replaces those files, so the first card after an update stayed in Codex. It now loads that code when it starts.
+- `pushary codex --app-cards status --json` also reports where the launcher is, whether the launcher and login item are what this version writes, and whether a switch that is off left a launch setting behind. The Pushary Mac app uses these to rewrite files an older version wrote and to repair a launcher that was deleted.
+- Setup no longer says phone-start is "not running" when its background service is running and only the check fell short. That covers a service that started but was not verified in time, and an older service that could not be replaced and still runs. Setup now says the service is running but this run could not verify it, and points to `pushary doctor`. When the service could not be stopped or removed, setup says that, makes no claim about whether it runs, and no longer offers `pushary daemon install` for it.
+- `pushary upgrade` and the daily automatic update no longer fail when a phone-start service that Pushary started on its own is running but not verified in time, or does not come up on a computer that had no service before. `pushary upgrade` prints the line setup prints; the daily update writes it to its log. Since 1.9.50 setup treated this as a note while the update still exited 1 and kept retrying. A service that was running before the update and did not come back still fails the update, and the update tries again to bring it back: the daily update after 5 minutes, an hour, then daily, where automatic updates run, and `pushary upgrade` each time you run it. It stops trying when the service runs again, when phone-start is turned off, or when this computer can no longer run phone-start. Where setup never recorded a phone-start choice, because the key came from `pushary login` or the Mac app, it also stops when the service is no longer installed. One case is not tried again: an upgrade started with `pushary upgrade` by an installed version older than this one, which keeps no record to try again from. `npx pushary@latest upgrade` and the daily update always keep one. Phone-start you asked for with `--control on` is retried the same way.
+- `pushary upgrade` now remembers an upgrade whose last step, refreshing the agent configuration, did not finish. Running `pushary upgrade` again finishes it. This holds when the upgrade is started by this version or a later one, which `npx pushary@latest upgrade` always is. Before, the first run said to run it again and the second run answered "Already on the latest version" and did nothing. A last step that needs a change only you can make is recorded as waiting on you, so the daily update leaves it alone. `pushary doctor` shows these under "Last update check" (it said "Last automatic update check", which a manual upgrade is not), and a later upgrade that finishes replaces the record.
+- When phone-start you asked for with `--control on` started but could not be verified in time, `pushary upgrade` says so and points to `pushary doctor`. It used to say the service did not start. With `--control on` on a computer that cannot run phone-start, it no longer says to run `pushary daemon install`, which could not work there.
+- When an instruction file is left alone during an update, the message no longer says to run `pushary upgrade` again. That did nothing while the installed version was current. It now says the next update refreshes the file once it is fixed.
+
 ## 1.9.57
 
 - Codex questions you answer by typing now reach Pushary. When Codex asks something with no suggested answers, the hook used to leave it in Codex, so it never showed in the notch or on your phone. It now arrives as a question with a text field, and what you type goes back to Codex in place of its card, word for word. One exception: an answer that is only the word "defer" hands the question back, as it does everywhere else, and Codex shows its own card.

package/dist/{api-RQAY3A5V.js → api-UVJGNZIF.js}

@@ -15,24 +15,24 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-6QM54CSJ.js";
-import "./chunk-A54W5A74.js";
+} from "./chunk-WW24SG27.js";
+import "./chunk-5EFNBL6V.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-FBKVCODG.js";
-import "./chunk-HCIB4YNB.js";
-import "./chunk-SQ5G6A6K.js";
+import "./chunk-MA37WNVS.js";
+import "./chunk-JAKBCKEB.js";
+import "./chunk-M46WDK64.js";
 import "./chunk-7QLSKOSU.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-TWLWDIFB.js";
-import "./chunk-AEXACKDR.js";
+import "./chunk-KZCYHWDF.js";
+import "./chunk-US3IT6ZC.js";
 import "./chunk-QENTGE75.js";
-import "./chunk-LVDC3RUE.js";
-import "./chunk-5SFM6XB4.js";
+import "./chunk-4XXZUFWN.js";
+import "./chunk-BMPZ5HVJ.js";
 import "./chunk-QTOLNRET.js";
 import {
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 export {
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON,

package/dist/bin/pushary-bell-hook.js

@@ -1,44 +1,44 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-XTZHUIGJ.js";
+} from "../chunk-MMLIQDTG.js";
 import {
   readHookInput
-} from "../chunk-ZZB4J6CX.js";
-import "../chunk-W6363YYZ.js";
+} from "../chunk-KQHY6L3X.js";
+import "../chunk-2WMZDKPM.js";
 import "../chunk-QW3FRUFB.js";
-import "../chunk-UPFFO4F6.js";
-import "../chunk-Z7Q36I4K.js";
-import "../chunk-CUEUANIU.js";
-import "../chunk-QQYUWTYS.js";
-import "../chunk-ECJJKDP7.js";
-import "../chunk-YKYVDHIY.js";
+import "../chunk-KQWN7C5C.js";
+import "../chunk-4QF2YLYK.js";
+import "../chunk-X4ES7QBT.js";
+import "../chunk-TDOKDCFH.js";
+import "../chunk-75UYYIFJ.js";
+import "../chunk-AS4Z6KS4.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-JSQOHMNJ.js";
-import "../chunk-N3NSWWNU.js";
-import "../chunk-C3IWX6KU.js";
+import "../chunk-PVANKDWM.js";
+import "../chunk-3N2ZTHZZ.js";
+import "../chunk-D6CXQIXO.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-IRZ5FVWG.js";
-import "../chunk-4YTFYILS.js";
-import "../chunk-QTCFEKLJ.js";
-import "../chunk-XXNT4FGA.js";
-import "../chunk-6QM54CSJ.js";
-import "../chunk-A54W5A74.js";
+import "../chunk-KAJDKYUM.js";
+import "../chunk-5JWCWALO.js";
+import "../chunk-W47WL6JY.js";
+import "../chunk-XGP5VSQG.js";
+import "../chunk-WW24SG27.js";
+import "../chunk-5EFNBL6V.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-FBKVCODG.js";
-import "../chunk-HCIB4YNB.js";
-import "../chunk-SQ5G6A6K.js";
+import "../chunk-MA37WNVS.js";
+import "../chunk-JAKBCKEB.js";
+import "../chunk-M46WDK64.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-7RZO6VWD.js";
-import "../chunk-TWLWDIFB.js";
-import "../chunk-AEXACKDR.js";
+import "../chunk-3RKIJM26.js";
+import "../chunk-KZCYHWDF.js";
+import "../chunk-US3IT6ZC.js";
 import "../chunk-QENTGE75.js";
-import "../chunk-LVDC3RUE.js";
-import "../chunk-5SFM6XB4.js";
+import "../chunk-4XXZUFWN.js";
+import "../chunk-BMPZ5HVJ.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-GZL3KEPC.js";
+import "../chunk-762CDAJJ.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,41 +5,41 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-XTZHUIGJ.js";
+} from "../chunk-MMLIQDTG.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-M7NX25ZA.js";
+} from "../chunk-UVZK5LIK.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-YKYVDHIY.js";
+} from "../chunk-AS4Z6KS4.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-IRZ5FVWG.js";
+import "../chunk-KAJDKYUM.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-7RZO6VWD.js";
+import "../chunk-3RKIJM26.js";
 import {
   claudeSettings
-} from "../chunk-TWLWDIFB.js";
-import "../chunk-AEXACKDR.js";
+} from "../chunk-KZCYHWDF.js";
+import "../chunk-US3IT6ZC.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-QENTGE75.js";
-import "../chunk-LVDC3RUE.js";
-import "../chunk-5SFM6XB4.js";
+import "../chunk-4XXZUFWN.js";
+import "../chunk-BMPZ5HVJ.js";
 import "../chunk-QTOLNRET.js";
 import {
   isRecord
-} from "../chunk-GZL3KEPC.js";
+} from "../chunk-762CDAJJ.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,40 +8,40 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-CB565EVO.js";
+} from "../chunk-MSU3VKGJ.js";
 import "../chunk-VUFHYMSP.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-LVZYIUSR.js";
+} from "../chunk-LAEW5QQD.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-W6363YYZ.js";
+} from "../chunk-2WMZDKPM.js";
 import "../chunk-QW3FRUFB.js";
 import {
   ensureDaemonRunning
-} from "../chunk-Z7Q36I4K.js";
-import "../chunk-CUEUANIU.js";
-import "../chunk-QQYUWTYS.js";
-import "../chunk-ECJJKDP7.js";
-import "../chunk-YKYVDHIY.js";
+} from "../chunk-4QF2YLYK.js";
+import "../chunk-X4ES7QBT.js";
+import "../chunk-TDOKDCFH.js";
+import "../chunk-75UYYIFJ.js";
+import "../chunk-AS4Z6KS4.js";
 import "../chunk-GMXKITVA.js";
 import {
   encryptRecord
-} from "../chunk-JSQOHMNJ.js";
-import "../chunk-N3NSWWNU.js";
+} from "../chunk-PVANKDWM.js";
+import "../chunk-3N2ZTHZZ.js";
 import {
   transcriptsEnabled
-} from "../chunk-C3IWX6KU.js";
+} from "../chunk-D6CXQIXO.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-IRZ5FVWG.js";
+import "../chunk-KAJDKYUM.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -58,11 +58,11 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-4YTFYILS.js";
-import "../chunk-QTCFEKLJ.js";
+} from "../chunk-5JWCWALO.js";
+import "../chunk-W47WL6JY.js";
 import {
   repoKeyFor
-} from "../chunk-XXNT4FGA.js";
+} from "../chunk-XGP5VSQG.js";
 import {
   askUser,
   cancelQuestion,
@@ -73,29 +73,29 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-6QM54CSJ.js";
+} from "../chunk-WW24SG27.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-A54W5A74.js";
+} from "../chunk-5EFNBL6V.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-FBKVCODG.js";
-import "../chunk-HCIB4YNB.js";
+import "../chunk-MA37WNVS.js";
+import "../chunk-JAKBCKEB.js";
 import {
   getMachineId
-} from "../chunk-SQ5G6A6K.js";
+} from "../chunk-M46WDK64.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-7RZO6VWD.js";
-import "../chunk-TWLWDIFB.js";
-import "../chunk-AEXACKDR.js";
+import "../chunk-3RKIJM26.js";
+import "../chunk-KZCYHWDF.js";
+import "../chunk-US3IT6ZC.js";
 import "../chunk-QENTGE75.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-LVDC3RUE.js";
+} from "../chunk-4XXZUFWN.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-5SFM6XB4.js";
+} from "../chunk-BMPZ5HVJ.js";
 import "../chunk-QTOLNRET.js";
 import {
   DECISION_STOP_REASON,
@@ -106,7 +106,7 @@ import {
   redactSecretsFromContent,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-GZL3KEPC.js";
+} from "../chunk-762CDAJJ.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -5,36 +5,36 @@ import {
   MAC_APP_BUNDLE_ID,
   MAC_DEFAULTS_DOMAINS,
   MAC_KEYCHAIN_ACCOUNTS,
-  codexAppCardsFolderStaysOnThisMac,
+  cleanUpCodexAppCardsOnThisMac,
+  codexAppCardsFolderInTheLastSweep,
   developerDefaults,
   installedPusharyBundles,
   liveMacStatePresence,
   registeredPusharyBundles,
-  removeCodexAppCardsFromThisMac,
   runningMacAppPIDs,
   storedMacAppState,
   storedPusharyKeychainServices,
   waitForMacAppExit
-} from "../chunk-2PJENKRJ.js";
+} from "../chunk-TCH5UCPR.js";
 import {
   PUSHARY_SKILL_NAME,
   PUSHARY_SKILL_SOURCE,
   createGuards
 } from "../chunk-EUW7JL2K.js";
-import "../chunk-OZSP4RIQ.js";
+import "../chunk-CPRA7IEK.js";
 import "../chunk-XCEN33UP.js";
 import {
   describeCliKeyRevocation,
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-T45PAPOG.js";
-import "../chunk-K45CFSYV.js";
+} from "../chunk-DK35M4TH.js";
+import "../chunk-DS7X36Z3.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-ZU6L34DQ.js";
+} from "../chunk-MYU5D5VH.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -43,21 +43,21 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-LW7IWGSV.js";
+} from "../chunk-YQVKG5MC.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-OLNBYAPI.js";
+} from "../chunk-EHCIQA5D.js";
 import "../chunk-QCGNGEGE.js";
-import "../chunk-4YNNAF53.js";
+import "../chunk-AY32RSUC.js";
 import {
   planFxRemoval,
   removeInstructionBlock
-} from "../chunk-NQDEMRAS.js";
-import "../chunk-JCMSISCC.js";
+} from "../chunk-6ONSTCDJ.js";
+import "../chunk-3NROUNIS.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -69,14 +69,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-PZDMZ7LM.js";
+} from "../chunk-JBCMXSBO.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-M7NX25ZA.js";
+} from "../chunk-UVZK5LIK.js";
 import "../chunk-VUFHYMSP.js";
 import {
   compatibleConfigFile,
@@ -94,10 +94,10 @@ import {
   removePusharyToolPermissions,
   restoreClaudeMcpServer,
   serializeConfigDocument
-} from "../chunk-UPFFO4F6.js";
+} from "../chunk-KQWN7C5C.js";
 import {
   disableDaemonService
-} from "../chunk-Z7Q36I4K.js";
+} from "../chunk-4QF2YLYK.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -105,12 +105,12 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-CUEUANIU.js";
+} from "../chunk-X4ES7QBT.js";
 import {
   removeGeminiSettings
-} from "../chunk-QQYUWTYS.js";
-import "../chunk-ECJJKDP7.js";
-import "../chunk-YKYVDHIY.js";
+} from "../chunk-TDOKDCFH.js";
+import "../chunk-75UYYIFJ.js";
+import "../chunk-AS4Z6KS4.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -121,22 +121,22 @@ import {
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-IRZ5FVWG.js";
+} from "../chunk-KAJDKYUM.js";
 import "../chunk-E46NE7FB.js";
-import "../chunk-4YTFYILS.js";
-import "../chunk-QTCFEKLJ.js";
-import "../chunk-XXNT4FGA.js";
-import "../chunk-6QM54CSJ.js";
-import "../chunk-A54W5A74.js";
+import "../chunk-5JWCWALO.js";
+import "../chunk-W47WL6JY.js";
+import "../chunk-XGP5VSQG.js";
+import "../chunk-WW24SG27.js";
+import "../chunk-5EFNBL6V.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-FBKVCODG.js";
-import "../chunk-HCIB4YNB.js";
-import "../chunk-SQ5G6A6K.js";
+import "../chunk-MA37WNVS.js";
+import "../chunk-JAKBCKEB.js";
+import "../chunk-M46WDK64.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-7RZO6VWD.js";
+import "../chunk-3RKIJM26.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -168,21 +168,21 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-TWLWDIFB.js";
+} from "../chunk-KZCYHWDF.js";
 import {
   cleanNpmEnv,
   globalPackageState,
   npmIsOnPath,
   readGlobalFolder,
   readGlobalPrefix
-} from "../chunk-AEXACKDR.js";
+} from "../chunk-US3IT6ZC.js";
 import "../chunk-QENTGE75.js";
 import {
   getBaseUrl
-} from "../chunk-LVDC3RUE.js";
+} from "../chunk-4XXZUFWN.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-5SFM6XB4.js";
+} from "../chunk-BMPZ5HVJ.js";
 import {
   CLI_PACKAGE_NAMES,
   globalPackageFolder,
@@ -196,7 +196,7 @@ import {
   SUPPORT_EMAIL,
   isValidApiKey,
   redactSecrets
-} from "../chunk-GZL3KEPC.js";
+} from "../chunk-762CDAJJ.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync5, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";
@@ -828,17 +828,18 @@ var main = async () => {
   }
   console.log(`  ${check} Background service ${dim(did("uninstalled"))}`);
   const uid = process.platform === "darwin" ? process.getuid?.() : void 0;
-  let macAppKeepsCodexAppCards = false;
-  if (uid !== void 0) {
-    try {
-      const removal = { homeDir: homedir4(), uid, keepWhatTheMacAppTurnedOn: keepShared, dryRun };
-      const appCards = removeCodexAppCardsFromThisMac(removal);
-      macAppKeepsCodexAppCards = codexAppCardsFolderStaysOnThisMac(removal);
-      if (appCards === "removed") console.log(`  ${check} Codex app cards ${dim(did("removed"))} ${dim("(quit Codex and open it again)")}`);
-      if (appCards === "kept_for_the_mac_app") console.log(`  ${skip} Codex app cards ${dim("(turned on by the Mac app; left on)")}`);
-    } catch {
+  const appCardsCleanUp = uid === void 0 ? null : cleanUpCodexAppCardsOnThisMac({ homeDir: homedir4(), uid, keepWhatTheMacAppTurnedOn: keepShared, dryRun });
+  if (appCardsCleanUp !== null) {
+    const appCards = appCardsCleanUp;
+    if (appCards.outcome === "removed") console.log(`  ${check} Codex app cards ${dim(did("removed"))} ${dim("(quit Codex and open it again)")}`);
+    if (appCards.outcome === "kept_for_the_mac_app") console.log(`  ${skip} Codex app cards ${dim("(turned on by the Mac app; left on)")}`);
+    if (appCards.outcome === "could_not_turn_off") {
+      incompleteClean = true;
+      console.log(`  ${cross} Codex app cards ${dim(`(could not turn off, so their launcher was kept: ${appCards.reason})`)}`);
+    }
+    if (appCards.outcome === "off_but_not_tidied") {
       incompleteClean = true;
-      console.log(`  ${cross} Codex app cards ${dim("(could not turn off; run pushary codex --app-cards off)")}`);
+      console.log(`  ${cross} Codex app cards ${dim(`(off, but tidying their folder did not finish: ${appCards.reason})`)}`);
     }
   }
   if (everything) await revokeKeysThisCliCreated();
@@ -1195,7 +1196,9 @@ var main = async () => {
     let removed = 0;
     const kept = [];
     for (const entry of readdirSync4(PUSHARY_DIR)) {
-      if (keepShared && isAppOwned(entry) || entry === "setup" && (keepShared || incompleteClean) || entry === CODEX_APP_CARDS_DIRECTORY && macAppKeepsCodexAppCards) {
+      const appCardsFolder = entry === CODEX_APP_CARDS_DIRECTORY ? codexAppCardsFolderInTheLastSweep(appCardsCleanUp) : "swept_with_the_rest";
+      if (appCardsFolder === "left_to_the_switch") continue;
+      if (keepShared && isAppOwned(entry) || entry === "setup" && (keepShared || incompleteClean) || appCardsFolder === "kept") {
         kept.push(entry);
         continue;
       }

package/dist/bin/pushary-codex-bridge.js

@@ -1,46 +1,46 @@
 #!/usr/bin/env node
 import {
   runCodexBridge
-} from "../chunk-DS6OR5OS.js";
-import "../chunk-IUOUNRLH.js";
+} from "../chunk-SIU6OWA6.js";
+import "../chunk-V3PDUDPB.js";
 import {
   resolveProviderBinary
-} from "../chunk-DDQRYX2L.js";
-import "../chunk-LVWXRXT7.js";
+} from "../chunk-5PP4455M.js";
+import "../chunk-M6MOQBR5.js";
 import {
   withSpawnProcessOwnership
-} from "../chunk-CB565EVO.js";
+} from "../chunk-MSU3VKGJ.js";
 import "../chunk-VUFHYMSP.js";
-import "../chunk-JSQOHMNJ.js";
-import "../chunk-N3NSWWNU.js";
+import "../chunk-PVANKDWM.js";
+import "../chunk-3N2ZTHZZ.js";
 import {
   transcriptsEnabled
-} from "../chunk-C3IWX6KU.js";
+} from "../chunk-D6CXQIXO.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-IRZ5FVWG.js";
-import "../chunk-XXNT4FGA.js";
-import "../chunk-6QM54CSJ.js";
-import "../chunk-A54W5A74.js";
+import "../chunk-KAJDKYUM.js";
+import "../chunk-XGP5VSQG.js";
+import "../chunk-WW24SG27.js";
+import "../chunk-5EFNBL6V.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-FBKVCODG.js";
-import "../chunk-HCIB4YNB.js";
+import "../chunk-MA37WNVS.js";
+import "../chunk-JAKBCKEB.js";
 import {
   getMachineId
-} from "../chunk-SQ5G6A6K.js";
+} from "../chunk-M46WDK64.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-7RZO6VWD.js";
-import "../chunk-TWLWDIFB.js";
-import "../chunk-AEXACKDR.js";
+import "../chunk-3RKIJM26.js";
+import "../chunk-KZCYHWDF.js";
+import "../chunk-US3IT6ZC.js";
 import "../chunk-QENTGE75.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-LVDC3RUE.js";
-import "../chunk-5SFM6XB4.js";
+} from "../chunk-4XXZUFWN.js";
+import "../chunk-BMPZ5HVJ.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-GZL3KEPC.js";
+import "../chunk-762CDAJJ.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";