negotium 0.4.0 → 0.4.1

package/dist/agent-helpers.js

@@ -2412,7 +2412,7 @@ var init_claude_registry = __esm(() => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.4.0";
+var NEGOTIUM_VERSION = "0.4.1";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn2 } from "child_process";
@@ -4621,9 +4621,11 @@ function hookClientPath() {
     return packaged;
   throw new Error("Codex Vault hook client is missing from this installation");
 }
-function privateCodexWrapper(codexScript) {
+function privateCodexWrapper(codexScript, socketPath, token) {
   return [
     "#!/bin/sh",
+    `export ${HOOK_SOCKET_ENV}=${shellQuote(socketPath)}`,
+    `export ${HOOK_TOKEN_ENV}=${shellQuote(token)}`,
     'if [ "$1" = "exec" ]; then',
     "  shift",
     `  exec ${shellQuote(process.execPath)} ${shellQuote(codexScript)} exec --dangerously-bypass-hook-trust "$@"`,
@@ -4686,15 +4688,13 @@ async function createCodexVaultHookBridge(userId) {
       });
     });
     await chmod(socketPath, 384);
-    await writeFile(wrapperPath, privateCodexWrapper(codexCliScriptPath()), { mode: 448 });
-    const command = [
-      shellQuote(process.execPath),
-      shellQuote(hookClientPath()),
-      shellQuote(socketPath),
-      shellQuote(token)
-    ].join(" ");
+    await writeFile(wrapperPath, privateCodexWrapper(codexCliScriptPath(), socketPath, token), {
+      mode: 448
+    });
+    const command = [shellQuote(process.execPath), shellQuote(hookClientPath())].join(" ");
     return {
       codexPathOverride: wrapperPath,
+      environment: { [HOOK_SOCKET_ENV]: socketPath, [HOOK_TOKEN_ENV]: token },
       hooks: {
         PreToolUse: [
           {
@@ -4723,7 +4723,7 @@ async function createCodexVaultHookBridge(userId) {
     throw error;
   }
 }
-var MAX_HOOK_REQUEST_BYTES, SENSITIVE_STORAGE_DENIAL = "Runtime secret storage access is not permitted";
+var MAX_HOOK_REQUEST_BYTES, SENSITIVE_STORAGE_DENIAL = "Runtime secret storage access is not permitted", HOOK_SOCKET_ENV = "NEGOTIUM_CODEX_VAULT_HOOK_SOCKET", HOOK_TOKEN_ENV = "NEGOTIUM_CODEX_VAULT_HOOK_TOKEN";
 var init_codex_vault_hook_bridge = __esm(async () => {
   init_codex_native_multi_agent();
   await init_execution_host();
@@ -5837,7 +5837,10 @@ async function* codexProvider(opts) {
                   yield fileEvent;
                 }
               } else if (item.type === "error") {
-                yield { type: "error", content: String(item.message ?? "") };
+                const message = String(item.message ?? "");
+                if (message !== CODEX_HOOK_TRUST_BYPASS_NOTICE) {
+                  yield { type: "error", content: message };
+                }
               }
               break;
             }
@@ -5928,7 +5931,7 @@ async function* codexProvider(opts) {
     await vaultHook.close();
   }
 }
-var CODEX_MCP_SERVER_NAME_OVERRIDES, CODEX_DIFF_FILE_LIMIT, CODEX_DIFF_BASELINE_FILE_LIMIT = 200, CODEX_DIFF_BASELINE_BYTE_LIMIT, CODEX_STARTUP_TIMEOUT_MS = 90000;
+var CODEX_HOOK_TRUST_BYPASS_NOTICE = "`--dangerously-bypass-hook-trust` is enabled. Enabled hooks may run without review for this invocation.", CODEX_MCP_SERVER_NAME_OVERRIDES, CODEX_DIFF_FILE_LIMIT, CODEX_DIFF_BASELINE_FILE_LIMIT = 200, CODEX_DIFF_BASELINE_BYTE_LIMIT, CODEX_STARTUP_TIMEOUT_MS = 90000;
 var init_codex_provider = __esm(async () => {
   init_codex_native_multi_agent();
   init_codex_tree_kill();
@@ -19130,4 +19133,4 @@ export {
   DEFAULT_SELF_CONFIG_PRODUCT
 };
 
-//# debugId=0F776DB92A8B6B8F64756E2164756E21
+//# debugId=0CE166A02CA7806164756E2164756E21