negotium 0.4.0 → 0.4.1

package/dist/hosted-agent.js

@@ -2382,7 +2382,7 @@ import { tmpdir } from "os";
 import { dirname as dirname5, join as join4 } from "path";
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.4.0";
+var NEGOTIUM_VERSION = "0.4.1";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 var moduleRequire = createRequire2(import.meta.url);
@@ -2820,6 +2820,8 @@ import { dirname as dirname6, join as join5, resolve as resolve5 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var MAX_HOOK_REQUEST_BYTES = 1024 * 1024;
 var SENSITIVE_STORAGE_DENIAL = "Runtime secret storage access is not permitted";
+var HOOK_SOCKET_ENV = "NEGOTIUM_CODEX_VAULT_HOOK_SOCKET";
+var HOOK_TOKEN_ENV = "NEGOTIUM_CODEX_VAULT_HOOK_TOKEN";
 function evaluateCodexVaultPreToolUse(input, userId, operations) {
   if (operations.referencesSensitiveStorage(input.tool_input)) {
     return {
@@ -2856,9 +2858,11 @@ function hookClientPath() {
     return packaged;
   throw new Error("Codex Vault hook client is missing from this installation");
 }
-function privateCodexWrapper(codexScript) {
+function privateCodexWrapper(codexScript, socketPath, token) {
   return [
     "#!/bin/sh",
+    `export ${HOOK_SOCKET_ENV}=${shellQuote(socketPath)}`,
+    `export ${HOOK_TOKEN_ENV}=${shellQuote(token)}`,
     'if [ "$1" = "exec" ]; then',
     "  shift",
     `  exec ${shellQuote(process.execPath)} ${shellQuote(codexScript)} exec --dangerously-bypass-hook-trust "$@"`,
@@ -2921,15 +2925,13 @@ async function createCodexVaultHookBridge(userId) {
       });
     });
     await chmod(socketPath, 384);
-    await writeFile(wrapperPath, privateCodexWrapper(codexCliScriptPath()), { mode: 448 });
-    const command = [
-      shellQuote(process.execPath),
-      shellQuote(hookClientPath()),
-      shellQuote(socketPath),
-      shellQuote(token)
-    ].join(" ");
+    await writeFile(wrapperPath, privateCodexWrapper(codexCliScriptPath(), socketPath, token), {
+      mode: 448
+    });
+    const command = [shellQuote(process.execPath), shellQuote(hookClientPath())].join(" ");
     return {
       codexPathOverride: wrapperPath,
+      environment: { [HOOK_SOCKET_ENV]: socketPath, [HOOK_TOKEN_ENV]: token },
       hooks: {
         PreToolUse: [
           {
@@ -3336,6 +3338,7 @@ function buildNumberedDiffSummary(before, after, startLine = 1) {
 }
 
 // ../../packages/core/src/agents/codex-provider.ts
+var CODEX_HOOK_TRUST_BYPASS_NOTICE = "`--dangerously-bypass-hook-trust` is enabled. Enabled hooks may run without review for this invocation.";
 function sameCodexUsage(usage, total) {
   return usage.input_tokens === total.inputTokens && usage.output_tokens === total.outputTokens && (usage.cached_input_tokens ?? 0) === total.cachedInputTokens && (usage.cache_write_input_tokens ?? 0) === total.cacheWriteInputTokens;
 }
@@ -3921,7 +3924,10 @@ async function* codexProvider(opts) {
                   yield fileEvent;
                 }
               } else if (item.type === "error") {
-                yield { type: "error", content: String(item.message ?? "") };
+                const message = String(item.message ?? "");
+                if (message !== CODEX_HOOK_TRUST_BYPASS_NOTICE) {
+                  yield { type: "error", content: message };
+                }
               }
               break;
             }
@@ -4233,4 +4239,4 @@ export {
   buildClaudeDisallowedTools
 };
 
-//# debugId=5CF9F07311E89AE364756E2164756E21
+//# debugId=08FB62E75535D71964756E2164756E21