pushary 1.9.110 → 1.9.112

package/dist/{chunk-YLLQZ6MR.js → chunk-FUFJKR53.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-FYSQQW6Q.js";
+} from "./chunk-WOI2LYGL.js";
 import {
   readJsonSafe
 } from "./chunk-T5I4PKOQ.js";
 import {
   isRecord
-} from "./chunk-NMSRA7QO.js";
+} from "./chunk-2Y2HEOT6.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-DLS43QDO.js → chunk-FWFOABQJ.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-NMSRA7QO.js";
+} from "./chunk-2Y2HEOT6.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {

package/dist/{chunk-G2TL4OEY.js → chunk-GJWBVRPF.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-FYSQQW6Q.js";
+} from "./chunk-WOI2LYGL.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";

package/dist/{chunk-PKN4XIBP.js → chunk-HNR23BLB.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-FYSQQW6Q.js";
+} from "./chunk-WOI2LYGL.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   npmExitedOnPermissionDenied
-} from "./chunk-DQKTKMR3.js";
+} from "./chunk-RXIZTNVQ.js";
 import {
   writeJsonAtomic
 } from "./chunk-T5I4PKOQ.js";

package/dist/{chunk-3OLVEVGW.js → chunk-IAI6ZRVA.js}

@@ -4,19 +4,19 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "./chunk-G2TL4OEY.js";
+} from "./chunk-GJWBVRPF.js";
 import {
   readControlMode
-} from "./chunk-XF3K42EV.js";
+} from "./chunk-SLMDTNKA.js";
 import {
   pusharyDir
-} from "./chunk-FYSQQW6Q.js";
+} from "./chunk-WOI2LYGL.js";
 import {
   resolveGlobalBinary
-} from "./chunk-DQKTKMR3.js";
+} from "./chunk-RXIZTNVQ.js";
 import {
   getApiKey
-} from "./chunk-QYBQCMRP.js";
+} from "./chunk-BATGR3LA.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -32,7 +32,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "./chunk-NMSRA7QO.js";
+} from "./chunk-2Y2HEOT6.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-TR6AJV4Z.js → chunk-IFJ3XS2R.js}

@@ -1,13 +1,13 @@
 import {
   configFilePath
-} from "./chunk-QYBQCMRP.js";
+} from "./chunk-BATGR3LA.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "./chunk-T5I4PKOQ.js";
 import {
   readSetupOutcomeProperties
-} from "./chunk-NMSRA7QO.js";
+} from "./chunk-2Y2HEOT6.js";
 
 // src/diagnostics/service-runtime.ts
 var unescapeXml = (value) => value.replaceAll("&quot;", '"').replaceAll("&apos;", "'").replaceAll("&lt;", "<").replaceAll("&gt;", ">").replaceAll("&amp;", "&");

package/dist/{chunk-WKXSLMKC.js → chunk-J3THYTYM.js}

@@ -13,16 +13,16 @@ import {
 } from "./chunk-G66WIAST.js";
 import {
   keyPrefix
-} from "./chunk-XF3K42EV.js";
+} from "./chunk-SLMDTNKA.js";
 import {
   getBaseUrl
-} from "./chunk-QYBQCMRP.js";
+} from "./chunk-BATGR3LA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-DLS43QDO.js";
+} from "./chunk-FWFOABQJ.js";
 import {
   isValidApiKey
-} from "./chunk-NMSRA7QO.js";
+} from "./chunk-2Y2HEOT6.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-JMQORTFD.js → chunk-JG75WTA6.js}

@@ -7,10 +7,10 @@ import {
   codexHome,
   codexHooksJsonIn,
   isPusharyCodexCommand
-} from "./chunk-FYSQQW6Q.js";
+} from "./chunk-WOI2LYGL.js";
 import {
   resolvePathBinary
-} from "./chunk-DQKTKMR3.js";
+} from "./chunk-RXIZTNVQ.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";

package/dist/{chunk-GOUUFBBP.js → chunk-JY2QQNS4.js}

@@ -1,9 +1,9 @@
 import {
   pusharyFetch
-} from "./chunk-XNMSVXB4.js";
+} from "./chunk-MZOJR4TO.js";
 import {
   getBaseUrl
-} from "./chunk-QYBQCMRP.js";
+} from "./chunk-BATGR3LA.js";
 import {
   NetworkError
 } from "./chunk-YU2EUD7O.js";
@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-NMSRA7QO.js";
+} from "./chunk-2Y2HEOT6.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-KS3OJ4C2.js → chunk-KBPUTWVR.js}

@@ -9,13 +9,13 @@ import {
   installedCodexApp,
   readCodexAppRuntime,
   shellQuoted
-} from "./chunk-6ZPGNVXS.js";
+} from "./chunk-LWVOQZ24.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-3OLVEVGW.js";
+} from "./chunk-IAI6ZRVA.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";

package/dist/{chunk-MOBSQM4B.js → chunk-KJFCQ5I5.js}

@@ -1,12 +1,12 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-JMQORTFD.js";
+} from "./chunk-JG75WTA6.js";
 import {
   retryAgentCommand
-} from "./chunk-TTDJHOYY.js";
+} from "./chunk-FF3UYU76.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-DLS43QDO.js";
+} from "./chunk-FWFOABQJ.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {
@@ -18,6 +18,16 @@ var CODEX_TRUST_TELEMETRY = {
 };
 var isUnanswered = (confirmation) => confirmation.kind === "skipped" || confirmation.kind === "unavailable";
 var codexTrustOutcome = (confirmation, portedTrustWritten) => isUnanswered(confirmation) && !portedTrustWritten ? "manual" : CODEX_TRUST_TELEMETRY[confirmation.kind];
+var CODEX_APPROVALS_BY_TRUST = {
+  verified: "on",
+  pretrusted: "on",
+  unverified: "on",
+  manual: "hooks_not_running"
+};
+var GAPS_THAT_STOP_A_HOOK = /* @__PURE__ */ new Set(["untrusted", "disabled", "asynchronous"]);
+var CODEX_SETTINGS_STOP_A_HOOK = "Codex's own settings stop a Pushary hook from running: hooks are turned off in config.toml, or a hook is turned off or not trusted in Codex's hooks list (/hooks, or Settings then Hooks in the ChatGPT app). Run pushary doctor to see which, and how to fix it.";
+var codexSettingsStopAHook = (onDisk) => onDisk.kind === "read" && (onDisk.hooksFeatureOff || onDisk.gaps.some((gap) => GAPS_THAT_STOP_A_HOOK.has(gap.kind)));
+var codexApprovalsWithHooks = (trust, onDisk) => trust === "unverified" && codexSettingsStopAHook(onDisk) ? "hooks_not_running" : CODEX_APPROVALS_BY_TRUST[trust];
 var CODEX_TRUST_REFUSED = "Codex did not accept the trust Pushary asked for, so its hooks are not trusted yet. Open Codex, run /hooks, and choose Trust for the Pushary hooks.";
 var CODEX_HOOK_REMEDY = {
   asynchronous: "re-run setup to restore blocking permission hooks",
@@ -110,6 +120,8 @@ var describeHermesState = (state) => {
 
 export {
   codexTrustOutcome,
+  CODEX_SETTINGS_STOP_A_HOOK,
+  codexApprovalsWithHooks,
   CODEX_HOOK_REMEDY,
   needsCodexTrustStep,
   describeCodexTrustConfirmation,

package/dist/{chunk-DZMKNP3I.js → chunk-KSPVTLCC.js}

@@ -5,7 +5,7 @@ import {
   MCP_CREDENTIAL_REJECTION_BODY,
   isRecord,
   responseRejectsCredential
-} from "./chunk-NMSRA7QO.js";
+} from "./chunk-2Y2HEOT6.js";
 
 // src/credential-rejection.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-FE4CSARF.js → chunk-KZ56PDQ2.js}

@@ -3,15 +3,15 @@ import {
 } from "./chunk-XMSDA5WA.js";
 import {
   fetchAsCredential
-} from "./chunk-DZMKNP3I.js";
+} from "./chunk-KSPVTLCC.js";
 import {
   getBaseUrl
-} from "./chunk-QYBQCMRP.js";
+} from "./chunk-BATGR3LA.js";
 import {
   compressTranscriptRecord,
   redactSecretsFromContent,
   transcriptRecordPlaintext
-} from "./chunk-NMSRA7QO.js";
+} from "./chunk-2Y2HEOT6.js";
 
 // src/transcript-api.ts
 var providerRecipientSchema = external_exports.object({

package/dist/{chunk-6ZPGNVXS.js → chunk-LWVOQZ24.js}

@@ -531,8 +531,8 @@ var loadedOnce = (load) => {
 };
 
 // src/codex-desktop-proxy.ts
-var loadThePhone = () => import("./api-4MS4CPKY.js");
-var loadTheCardRouting = () => import("./codex-card-routing-YQIWKPSG.js");
+var loadThePhone = () => import("./api-3AWH6PR6.js");
+var loadTheCardRouting = () => import("./codex-card-routing-MT2V4TZW.js");
 var theFirstCardLoadsAgain = () => {
 };
 var ASKS_WITHOUT_ROUTING = {};
@@ -1085,7 +1085,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-MPIXI3DK.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-XJAPXIM4.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");

package/dist/{chunk-3FQTC27T.js → chunk-M52Q62SO.js}

@@ -1,30 +1,30 @@
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "./chunk-2MJL3ZVW.js";
+} from "./chunk-BNZOA7RL.js";
 import {
   AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
   claimThrottle,
   releaseThrottle,
   reportEvent
-} from "./chunk-5RWBSMCI.js";
+} from "./chunk-DO63NPJX.js";
 import {
   deriveToolTarget,
   permissionDeniedAction
-} from "./chunk-BCZSRQ3L.js";
+} from "./chunk-ZF2GMORS.js";
 import {
   askUser,
   isDecisionStopped,
   isQuestionLimitRefusal,
   waitForQuestion
-} from "./chunk-DP62DH2Q.js";
+} from "./chunk-MQTXIY32.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-OJZ3CVGK.js";
+} from "./chunk-TTIMLMWS.js";
 import {
   getMachineId
-} from "./chunk-G2TL4OEY.js";
+} from "./chunk-GJWBVRPF.js";
 import {
   ASK_CONTEXT_MAX,
   agentQuestionContext,
@@ -36,7 +36,7 @@ import {
   questionsShownAsASet,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-NMSRA7QO.js";
+} from "./chunk-2Y2HEOT6.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-WGQIJJIS.js → chunk-M6U4CXYS.js}

@@ -2,7 +2,7 @@ import {
   isApprovalMode,
   isRecord,
   isTimeoutAction
-} from "./chunk-NMSRA7QO.js";
+} from "./chunk-2Y2HEOT6.js";
 
 // src/cli/settings-response.ts
 var isFiniteNumber = (value) => typeof value === "number" && Number.isFinite(value);