@pushary/agent-hooks 1.9.75 → 1.9.77

package/dist/chunk-MHUKYYYR.js

@@ -0,0 +1,239 @@
+// ../contracts/src/billing.ts
+var PARTNER_SELF_SERVE_PLANS = ["partner_launch", "partner_growth", "partner_scale"];
+var PARTNER_PLAN_TYPES = ["partner", ...PARTNER_SELF_SERVE_PLANS];
+var PLAN_TYPES = ["free", "agent", "agent_pro", "team", "partner", "starter", "growth", "pro", "enterprise", ...PARTNER_SELF_SERVE_PLANS];
+var PAID_PLAN_TYPES = ["agent", "agent_pro", "team", "partner", "starter", "growth", "pro", ...PARTNER_SELF_SERVE_PLANS];
+var SESSION_HISTORY_RETENTION_DAYS = { standard: 14, pro: 30 };
+var PLAN_CONFIGS = {
+  free: {
+    name: "Free",
+    price: 0,
+    priceId: null,
+    limits: {
+      subscribers: 100,
+      notifications: 500,
+      sites: 1,
+      members: 1,
+      campaigns: 25,
+      dataRetentionDays: 7,
+      sessionHistoryRetentionDays: SESSION_HISTORY_RETENTION_DAYS.standard
+    },
+    features: {
+      abTesting: false,
+      apiAccess: false,
+      prioritySupport: false
+    }
+  },
+  agent: {
+    name: "Agent",
+    price: 9.99,
+    priceId: null,
+    limits: {
+      subscribers: 3,
+      notifications: 5e3,
+      sites: 1,
+      members: 1,
+      campaigns: 0,
+      dataRetentionDays: 30,
+      sessionHistoryRetentionDays: SESSION_HISTORY_RETENTION_DAYS.standard
+    },
+    features: {
+      abTesting: false,
+      apiAccess: true,
+      prioritySupport: false
+    }
+  },
+  agent_pro: {
+    name: "Agent Pro",
+    price: 19.99,
+    priceId: null,
+    limits: {
+      subscribers: 5,
+      notifications: Infinity,
+      sites: 1,
+      members: 5,
+      campaigns: 0,
+      dataRetentionDays: 90,
+      sessionHistoryRetentionDays: SESSION_HISTORY_RETENTION_DAYS.pro
+    },
+    features: {
+      abTesting: false,
+      apiAccess: true,
+      prioritySupport: true
+    }
+  },
+  team: {
+    name: "Team",
+    price: 59.99,
+    priceId: null,
+    limits: {
+      subscribers: 25,
+      notifications: Infinity,
+      sites: 1,
+      members: 10,
+      campaigns: 0,
+      dataRetentionDays: 365,
+      sessionHistoryRetentionDays: SESSION_HISTORY_RETENTION_DAYS.pro
+    },
+    features: {
+      abTesting: false,
+      apiAccess: true,
+      prioritySupport: true
+    }
+  },
+  partner: {
+    name: "Partner",
+    price: 99,
+    priceId: null,
+    limits: {
+      subscribers: 25e3,
+      notifications: 1e5,
+      sites: 1,
+      members: 10,
+      campaigns: 0,
+      dataRetentionDays: 365,
+      sessionHistoryRetentionDays: SESSION_HISTORY_RETENTION_DAYS.pro
+    },
+    features: {
+      abTesting: false,
+      apiAccess: true,
+      prioritySupport: true
+    }
+  },
+  partner_launch: {
+    name: "Partner Launch",
+    price: 99,
+    priceId: null,
+    limits: {
+      subscribers: 5e3,
+      // Closed until request admission and fan-out accounting ship. Never sell
+      // human requests against the legacy notification-delivery counter.
+      notifications: 0,
+      humanDecisionRequests: 25e3,
+      sites: 1,
+      members: 3,
+      campaigns: 0,
+      dataRetentionDays: 90,
+      sessionHistoryRetentionDays: SESSION_HISTORY_RETENTION_DAYS.pro
+    },
+    features: { abTesting: false, apiAccess: true, prioritySupport: false }
+  },
+  partner_growth: {
+    name: "Partner Growth",
+    price: 299,
+    priceId: null,
+    limits: {
+      subscribers: 25e3,
+      // Closed until request admission and fan-out accounting ship. Never sell
+      // human requests against the legacy notification-delivery counter.
+      notifications: 0,
+      humanDecisionRequests: 1e5,
+      sites: 1,
+      members: 10,
+      campaigns: 0,
+      dataRetentionDays: 365,
+      sessionHistoryRetentionDays: SESSION_HISTORY_RETENTION_DAYS.pro
+    },
+    features: { abTesting: false, apiAccess: true, prioritySupport: true }
+  },
+  partner_scale: {
+    name: "Partner Scale",
+    price: 799,
+    priceId: null,
+    limits: {
+      subscribers: 1e5,
+      // Closed until request admission and fan-out accounting ship. Never sell
+      // human requests against the legacy notification-delivery counter.
+      notifications: 0,
+      humanDecisionRequests: 5e5,
+      sites: 1,
+      members: 25,
+      campaigns: 0,
+      dataRetentionDays: 730,
+      sessionHistoryRetentionDays: SESSION_HISTORY_RETENTION_DAYS.pro
+    },
+    features: { abTesting: false, apiAccess: true, prioritySupport: true }
+  },
+  starter: {
+    name: "Starter",
+    price: 29,
+    priceId: null,
+    limits: {
+      subscribers: 5e3,
+      notifications: 25e3,
+      sites: 3,
+      members: 5,
+      campaigns: 250,
+      dataRetentionDays: 30,
+      sessionHistoryRetentionDays: SESSION_HISTORY_RETENTION_DAYS.standard
+    },
+    features: {
+      abTesting: true,
+      apiAccess: true,
+      prioritySupport: false
+    }
+  },
+  growth: {
+    name: "Growth",
+    price: 99,
+    priceId: null,
+    limits: {
+      subscribers: 25e3,
+      notifications: 1e5,
+      sites: 10,
+      members: 15,
+      campaigns: Infinity,
+      dataRetentionDays: 90,
+      sessionHistoryRetentionDays: SESSION_HISTORY_RETENTION_DAYS.standard
+    },
+    features: {
+      abTesting: true,
+      apiAccess: true,
+      prioritySupport: true
+    }
+  },
+  pro: {
+    name: "Pro",
+    price: 149,
+    priceId: null,
+    limits: {
+      subscribers: 1e5,
+      notifications: 5e5,
+      sites: 25,
+      members: 50,
+      campaigns: Infinity,
+      dataRetentionDays: 180,
+      sessionHistoryRetentionDays: SESSION_HISTORY_RETENTION_DAYS.standard
+    },
+    features: {
+      abTesting: true,
+      apiAccess: true,
+      prioritySupport: true
+    }
+  },
+  enterprise: {
+    name: "Enterprise",
+    price: -1,
+    priceId: null,
+    limits: {
+      subscribers: Infinity,
+      notifications: Infinity,
+      sites: Infinity,
+      members: Infinity,
+      campaigns: Infinity,
+      dataRetentionDays: Infinity,
+      sessionHistoryRetentionDays: SESSION_HISTORY_RETENTION_DAYS.pro
+    },
+    features: {
+      abTesting: true,
+      apiAccess: true,
+      prioritySupport: true
+    }
+  }
+};
+
+export {
+  PLAN_TYPES,
+  SESSION_HISTORY_RETENTION_DAYS,
+  PLAN_CONFIGS
+};

package/dist/{chunk-I6TIZMM3.js → chunk-MQBQRXTN.js}

@@ -1,19 +1,19 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-E5XYFIYL.js";
+} from "./chunk-J2NPFRDI.js";
 import {
   keyPrefix
-} from "./chunk-LIDUPDEY.js";
+} from "./chunk-DYDA77FS.js";
 import {
   bridgeAgentKey
-} from "./chunk-2J4IVUEA.js";
+} from "./chunk-PZXQUV3P.js";
 import {
   readJsonSafe
-} from "./chunk-AUDYAVNM.js";
+} from "./chunk-ABAWD6QM.js";
 import {
   isRecord,
   isValidApiKey
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-INBG473K.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-DOG3BQFO.js → chunk-MRTGCXG4.js}

@@ -4,7 +4,7 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "./chunk-JOMG6J64.js";
+} from "./chunk-LIEPMKTX.js";
 import {
   CommandReceipts,
   controllerCommandSchema
@@ -14,24 +14,24 @@ import {
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership
-} from "./chunk-FEC3JUIH.js";
+} from "./chunk-FXQCSU4L.js";
 import {
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
 import {
   repoKeyFor
-} from "./chunk-DUOBFECC.js";
+} from "./chunk-XYNQA6YC.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "./chunk-EOGVWCLF.js";
+} from "./chunk-ESHMWZXX.js";
 import {
   callMcpTool,
   isRetryable
-} from "./chunk-32JJ5KV3.js";
+} from "./chunk-GV7FB5L3.js";
 import {
   AGENT_QUESTION_DESCRIPTION_MAX,
   AGENT_QUESTION_HEADER_MAX,
@@ -52,7 +52,7 @@ import {
   parseCodexQuestions,
   planElicitationAsk,
   readElicitationFields
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-INBG473K.js";
 
 // src/codex-question-owner.ts
 import { createHash } from "crypto";

package/dist/{chunk-EH5OLIP2.js → chunk-NHIEDRZR.js}

@@ -15,16 +15,20 @@ import {
 } from "./chunk-E46NE7FB.js";
 
 // src/codex-desktop-launch.ts
-import { spawn as spawn2, execFileSync } from "child_process";
+import { spawn as spawn2, execFileSync as execFileSync2 } from "child_process";
 import { existsSync } from "fs";
 import { mkdtemp, readFile, rm, writeFile, access } from "fs/promises";
 import { constants } from "fs";
 import { tmpdir } from "os";
-import { join, resolve } from "path";
+import { join as join2, resolve } from "path";
 
-// src/codex-desktop-proxy.ts
-import { spawn } from "child_process";
-import { Transform } from "stream";
+// src/codex-app-runtime.ts
+import { execFileSync } from "child_process";
+import { createHash, randomUUID } from "crypto";
+import { chmodSync, lstatSync, mkdirSync, readdirSync, rmdirSync, unlinkSync } from "fs";
+import { createConnection, createServer } from "net";
+import { homedir } from "os";
+import { join } from "path";
 
 // src/codex-permission-form.ts
 var CODEX_APP_CARD_METHOD = "mcpServer/elicitation/request";
@@ -51,6 +55,163 @@ var codexPermissionFormOf = (message) => {
 };
 var codexFormCameFrom = (message, servers) => isRecord(message) && message.method === CODEX_APP_CARD_METHOD && isRecord(message.params) && typeof message.params.serverName === "string" && servers.includes(message.params.serverName);
 
+// src/codex-app-runtime.ts
+var PROBE_TIMEOUT_MS = 400;
+var MAX_PROBE_BYTES = 1024;
+var MAX_PROXIES = 64;
+var SOCKET_SUFFIX = ".sock";
+var codexRuntimeDirectory = (home = homedir()) => join("/tmp", `pushary-codex-${process.getuid?.() ?? "unknown"}-${createHash("sha256").update(home).digest("hex").slice(0, 16)}`);
+var privateDirectory = (directory) => {
+  try {
+    const stat = lstatSync(directory);
+    return stat.isDirectory() && !stat.isSymbolicLink() && stat.uid === process.getuid?.() && (stat.mode & 63) === 0;
+  } catch {
+    return false;
+  }
+};
+var serveCodexRuntime = (enginePid, forwarding, report, directory = codexRuntimeDirectory()) => {
+  let close = () => {
+  };
+  try {
+    mkdirSync(directory, { recursive: true, mode: 448 });
+    if (!privateDirectory(directory)) throw new Error("runtime directory is not private");
+    const path = join(directory, `${process.pid}-${randomUUID().slice(0, 8)}${SOCKET_SUFFIX}`);
+    const server = createServer((socket) => {
+      socket.setTimeout(PROBE_TIMEOUT_MS, () => socket.destroy());
+      socket.on("error", () => socket.destroy());
+      let input = "";
+      socket.on("data", (chunk) => {
+        input += chunk.toString();
+        if (input.length > MAX_PROBE_BYTES) {
+          socket.destroy();
+          return;
+        }
+        if (!input.endsWith("\n")) return;
+        const nonce = input.trim();
+        if (!/^[a-f0-9-]{36}$/.test(nonce)) {
+          socket.destroy();
+          return;
+        }
+        socket.end(JSON.stringify({ nonce, pid: process.pid, enginePid, forwarding: forwarding() }) + "\n");
+      });
+    });
+    server.on("error", () => report("Codex connection status is unavailable; permission forwarding is unchanged."));
+    server.listen(path, () => {
+      try {
+        chmodSync(path, 384);
+      } catch {
+        server.close();
+      }
+    });
+    server.unref();
+    close = () => {
+      server.close();
+      try {
+        unlinkSync(path);
+      } catch {
+      }
+      try {
+        rmdirSync(directory);
+      } catch {
+      }
+    };
+  } catch {
+    report("Codex connection status is unavailable; permission forwarding is unchanged.");
+  }
+  return close;
+};
+var probeCodexRuntime = (path) => new Promise((resolve2) => {
+  const nonce = randomUUID();
+  const socket = createConnection(path);
+  let output = "";
+  let finished = false;
+  const finish = (reply) => {
+    if (finished) return;
+    finished = true;
+    socket.destroy();
+    resolve2(reply);
+  };
+  socket.setTimeout(PROBE_TIMEOUT_MS, () => finish(null));
+  socket.on("error", () => finish(null));
+  socket.on("connect", () => socket.write(nonce + "\n"));
+  socket.on("data", (chunk) => {
+    output += chunk.toString();
+    if (output.length > MAX_PROBE_BYTES) {
+      finish(null);
+      return;
+    }
+    if (!output.endsWith("\n")) return;
+    try {
+      const reply = JSON.parse(output);
+      if (!isRecord(reply) || reply.nonce !== nonce || !Number.isSafeInteger(reply.pid) || !Number.isSafeInteger(reply.enginePid) || typeof reply.pid !== "number" || reply.pid <= 0 || typeof reply.enginePid !== "number" || reply.enginePid <= 0 || typeof reply.forwarding !== "boolean") {
+        finish(null);
+        return;
+      }
+      finish({ pid: reply.pid, enginePid: reply.enginePid, forwarding: reply.forwarding });
+    } catch {
+      finish(null);
+    }
+  });
+  socket.on("close", () => finish(null));
+});
+var codexRuntimeProcesses = (output) => {
+  const processes = [];
+  for (const line of output.trim().split("\n")) {
+    const match = /^\s*(\d+)\s+(\d+)\s+(.+)$/.exec(line);
+    if (!match) return null;
+    const pid = Number(match[1]), parent = Number(match[2]);
+    if (!Number.isSafeInteger(pid) || pid <= 0 || !Number.isSafeInteger(parent) || parent < 0 || processes.some((process2) => process2.pid === pid)) return null;
+    processes.push({ pid, parent, executable: match[3] });
+  }
+  return processes;
+};
+var codexRuntimeStatus = (app, processes, replies) => {
+  const byPid = new Map(processes.map((process2) => [process2.pid, process2]));
+  const desktops = new Set(processes.filter((process2) => process2.executable.startsWith(`${app}/Contents/MacOS/`)).map((process2) => process2.pid));
+  if (desktops.size === 0) return "closed";
+  const isEngine = (process2) => process2.executable.startsWith(`${app}/Contents/Resources/codex-cli/`) && process2.executable.endsWith("/codex");
+  const owningDesktop = (engine) => {
+    const visited = /* @__PURE__ */ new Set([engine.pid]);
+    let parent = byPid.get(engine.parent);
+    while (parent && !visited.has(parent.pid)) {
+      if (desktops.has(parent.pid)) return parent.pid;
+      if (isEngine(parent)) return null;
+      visited.add(parent.pid);
+      parent = byPid.get(parent.parent);
+    }
+    return null;
+  };
+  const engines = processes.filter((process2) => isEngine(process2) && owningDesktop(process2) !== null);
+  const owners = new Set(engines.map(owningDesktop));
+  if ([...desktops].some((pid) => !owners.has(pid))) return "unknown";
+  const observed = engines.map((engine) => replies.find((reply) => reply.enginePid === engine.pid && reply.pid === engine.parent));
+  if (observed.some((reply) => reply === void 0)) return "restart_required";
+  return observed.every((reply) => reply?.forwarding) ? "connected" : "unsupported";
+};
+var readCodexAppRuntime = async (app, directory = codexRuntimeDirectory()) => {
+  const uid = process.getuid?.();
+  if (app === null || process.platform !== "darwin" || uid === void 0) return "unknown";
+  try {
+    const snapshot = execFileSync("/bin/ps", ["-U", String(uid), "-o", "pid=,ppid=,comm="], { encoding: "utf8", timeout: 1e3, maxBuffer: 2 * 1024 * 1024 });
+    const processes = codexRuntimeProcesses(snapshot);
+    if (processes === null) return "unknown";
+    const livePids = new Set(processes.map((process2) => process2.pid));
+    const names = privateDirectory(directory) ? readdirSync(directory).filter((name) => {
+      const match = /^(\d+)-[a-f0-9]{8}\.sock$/.exec(name);
+      return match !== null && livePids.has(Number(match[1]));
+    }) : [];
+    if (names.length > MAX_PROXIES) return "unknown";
+    const replies = await Promise.all(names.map((name) => probeCodexRuntime(join(directory, name))));
+    return codexRuntimeStatus(app, processes, replies.filter((reply) => reply !== null));
+  } catch {
+    return "unknown";
+  }
+};
+
+// src/codex-desktop-proxy.ts
+import { spawn } from "child_process";
+import { Transform } from "stream";
+
 // src/codex-app-card.ts
 var CODEX_REQUEST_RESOLVED_METHOD = "serverRequest/resolved";
 var COMPUTER_USE_CONNECTOR = "computer-use";
@@ -176,6 +337,17 @@ var CodexAppCardLedger = class {
   }
 };
 
+// src/codex-audio-card.ts
+var codexAudioCardOf = (message) => {
+  const form = codexPermissionFormOf(message);
+  if (!form || form.serverName !== CODEX_COMPUTER_USE_SERVER || !["form", "openai/form", "openaiForm"].includes(form.mode)) return null;
+  const meta = form.meta;
+  if (meta.connector_id !== "computer-use" || meta.tool_name !== "start_audio_recording" || form.sentence !== "Allow Computer Use to record computer audio?" || !Array.isArray(meta.persist) || !meta.persist.includes("session") || !isRecord(meta.tool_params) || Object.keys(meta.tool_params).length !== 0) return null;
+  return { kind: "audio", requestId: form.requestId, threadId: form.threadId };
+};
+var CODEX_AUDIO_QUESTION = "Allow Codex to record computer audio for this conversation?";
+var CODEX_AUDIO_CONTEXT = `${CODEX_SHOWS_THE_SAME_QUESTION} Yes permits computer audio recording for this conversation. Audio may include other apps and calls. No declines recording.`;
+
 // src/codex-browser-use-card.ts
 var BROWSER_USE_SERVERS = [CODEX_COMPUTER_USE_SERVER, CODEX_BROWSER_SERVER];
 var BROWSER_USE_CONNECTOR = "browser-use";
@@ -271,14 +443,49 @@ var codexBrowserUseCardReply = (requestId, decision) => ({
 // src/codex-card.ts
 var codexCardOf = (message) => {
   const app = codexAppCardOf(message);
-  return app ? { kind: "app", ...app } : codexBrowserUseCardOf(message);
+  return app ? { kind: "app", ...app } : codexBrowserUseCardOf(message) ?? codexAudioCardOf(message);
 };
 var comesFromCodexOwnTools = (message) => comesFromComputerUse(message) || comesFromBrowserUse(message);
 var codexAppMayAnswerItself = (card) => card.kind === "site_access";
-var codexCardQuestion = (card) => card.kind === "app" ? codexAppCardQuestion(card) : codexBrowserUseCardQuestion(card);
-var codexCardContext = (card) => card.kind === "app" ? codexAppCardContext(card) : codexBrowserUseCardContext(card);
-var codexCardSubject = (card) => card.kind === "app" ? card.appName : codexBrowserUseCardSubject(card);
-var codexCardReply = (card, decision) => card.kind === "app" ? codexAppCardReply(card.requestId, decision) : codexBrowserUseCardReply(card.requestId, decision);
+var codexCardQuestion = (card) => {
+  switch (card.kind) {
+    case "app":
+      return codexAppCardQuestion(card);
+    case "audio":
+      return CODEX_AUDIO_QUESTION;
+    default:
+      return codexBrowserUseCardQuestion(card);
+  }
+};
+var codexCardContext = (card) => {
+  switch (card.kind) {
+    case "app":
+      return codexAppCardContext(card);
+    case "audio":
+      return CODEX_AUDIO_CONTEXT;
+    default:
+      return codexBrowserUseCardContext(card);
+  }
+};
+var codexCardSubject = (card) => {
+  switch (card.kind) {
+    case "app":
+      return card.appName;
+    case "audio":
+      return "computer audio";
+    default:
+      return codexBrowserUseCardSubject(card);
+  }
+};
+var codexCardReply = (card, decision) => {
+  switch (card.kind) {
+    case "app":
+    case "audio":
+      return codexAppCardReply(card.requestId, decision);
+    default:
+      return codexBrowserUseCardReply(card.requestId, decision);
+  }
+};
 
 // src/load-once.ts
 var loadedOnce = (load) => {
@@ -294,7 +501,7 @@ var loadedOnce = (load) => {
 };
 
 // src/codex-desktop-proxy.ts
-var loadThePhone = () => import("./api-L3BIISGS.js");
+var loadThePhone = () => import("./api-IGMCPM35.js");
 var theFirstCardLoadsAgain = () => {
 };
 var APP_SERVER_COMMAND = "app-server";
@@ -645,6 +852,12 @@ var runCodexDesktopProxy = async (binary, args, readAccount, options = { watches
     env: codexEngineEnvironment(binary)
   });
   child.once("spawn", tellTheLauncherTheEngineStarted);
+  let forwarding = watches;
+  let closeRuntime = () => {
+  };
+  child.once("spawn", () => {
+    if (child.pid && args[subcommandIndexOf(args)] === APP_SERVER_COMMAND) closeRuntime = serveCodexRuntime(child.pid, () => forwarding, reportOnStderr);
+  });
   const abort = new AbortController();
   let killTimer;
   let lingerTimer;
@@ -673,6 +886,7 @@ var runCodexDesktopProxy = async (binary, args, readAccount, options = { watches
   let cards;
   const streams = [];
   const keepCopyingWithoutCards = (error) => {
+    forwarding = false;
     cards?.standDown();
     reportOnStderr(`Codex app cards stopped for this session after an unexpected error; Codex keeps working. ${error instanceof Error ? error.message.split("\n")[0] : ""}`.trim());
   };
@@ -701,6 +915,7 @@ var runCodexDesktopProxy = async (binary, args, readAccount, options = { watches
       child.once("close", (code) => resolve2(code ?? 1));
     });
   } finally {
+    closeRuntime();
     abort.abort();
     clearTimeout(killTimer);
     clearTimeout(lingerTimer);
@@ -783,12 +998,12 @@ var codexEngineBehindLauncher = (script) => {
   return shellUnquoted(assignment.slice(ENGINE_ASSIGNMENT.length));
 };
 var writeDesktopProxy = async (entry, app, engine, directory) => {
-  const shim = join(directory, "codex");
+  const shim = join2(directory, "codex");
   await writeFile(shim, desktopProxyScript(entry, app, engine), { mode: 448, flag: "wx" });
   return shim;
 };
 var desktopEngine = async (app) => {
-  const manifest = JSON.parse(await readFile(join(app, CODEX_ENGINE_DIRECTORY, CODEX_ENGINE_MANIFEST), "utf8"));
+  const manifest = JSON.parse(await readFile(join2(app, CODEX_ENGINE_DIRECTORY, CODEX_ENGINE_MANIFEST), "utf8"));
   const engine = desktopEngineFromManifest(app, manifest);
   await access(engine, constants.X_OK);
   return engine;
@@ -802,18 +1017,18 @@ var engineWhateverTheLayout = async (app) => {
     return { engine, layoutIsKnown: false };
   }
 };
-var codexAppOnThisMac = () => INSTALLED_CODEX_APPS.find((candidate) => existsSync(join(candidate, CODEX_ENGINE_DIRECTORY, CODEX_ENGINE_MANIFEST))) ?? null;
+var codexAppOnThisMac = () => INSTALLED_CODEX_APPS.find((candidate) => existsSync(join2(candidate, CODEX_ENGINE_DIRECTORY, CODEX_ENGINE_MANIFEST))) ?? null;
 var installedCodexApp = (chosen) => resolve(chosen ?? codexAppOnThisMac() ?? INSTALLED_CODEX_APPS[1]);
 var desktopExecutable = (app) => {
-  const plist = join(app, "Contents/Info.plist");
-  const read = (key) => execFileSync("/usr/bin/plutil", ["-extract", key, "raw", plist], { encoding: "utf8" }).trim();
+  const plist = join2(app, "Contents/Info.plist");
+  const read = (key) => execFileSync2("/usr/bin/plutil", ["-extract", key, "raw", plist], { encoding: "utf8" }).trim();
   if (read("CFBundleIdentifier") !== "com.openai.codex") throw new Error("Choose the Codex Desktop application");
   const name = read("CFBundleExecutable");
   if (!name || name.includes("/") || name === "." || name === "..") throw new Error("Invalid Desktop executable");
   try {
-    execFileSync("/usr/bin/pgrep", ["-x", name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")], { stdio: "ignore" });
+    execFileSync2("/usr/bin/pgrep", ["-x", name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")], { stdio: "ignore" });
   } catch (error) {
-    if (record(error) && error.status === 1) return join(app, "Contents/MacOS", name);
+    if (record(error) && error.status === 1) return join2(app, "Contents/MacOS", name);
     throw error;
   }
   throw new Error("Codex Desktop is already running. Finish active work and quit it yourself, then retry. Pushary will not restart it.");
@@ -827,7 +1042,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-CN3G7GZW.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-LTZCEFYB.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");
@@ -835,7 +1050,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
   const app = installedCodexApp(args[1]);
   const engine = await desktopEngine(app);
   const executable = desktopExecutable(app);
-  const directory = await mkdtemp(join(tmpdir(), "pushary-codex-desktop-"));
+  const directory = await mkdtemp(join2(tmpdir(), "pushary-codex-desktop-"));
   try {
     const shim = await writeDesktopProxy(entry, app, engine, directory);
     process.stderr.write("[pushary] Experimental Codex app launch. When Codex asks to use an app on this Mac, or its browser asks to open a site, download or upload, the question also reaches Pushary; every other prompt stays as it is. Quit and open Codex normally to turn this off.\n");
@@ -850,6 +1065,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
 };
 
 export {
+  readCodexAppRuntime,
   shellQuoted,
   LAUNCHCTL,
   desktopEngineFromManifest,