pushary 1.9.134 → 1.9.136

package/dist/bin/pushary-codex-hook.js

@@ -1,50 +1,49 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-NYFUU23B.js";
+} from "../chunk-QXATIKHQ.js";
 import {
   parseCodexHookInput,
   pushQuestionAndWait,
   scopeQuestionOf
-} from "../chunk-C4UH6YPD.js";
+} from "../chunk-VV7WRIQT.js";
 import {
   askAgentQuestions,
   defersToNativeMode
-} from "../chunk-XWUPOTJV.js";
+} from "../chunk-2R4OVJHS.js";
 import {
   reportMachineDenial
-} from "../chunk-HW63OEVM.js";
+} from "../chunk-HY4ATVCT.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-2U4MCUVZ.js";
+} from "../chunk-YQQGIDBC.js";
 import {
   triggerAutoUpdate
-} from "../chunk-UZUDMZES.js";
+} from "../chunk-ICCM3DLT.js";
 import {
   readHookInput
-} from "../chunk-UDAXXR43.js";
-import "../chunk-EPPH5RMJ.js";
+} from "../chunk-YURIU333.js";
+import "../chunk-NN43KGTN.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-EA5EASYT.js";
-import "../chunk-I6MI4NWX.js";
+} from "../chunk-H2RE3IPK.js";
+import "../chunk-L7Q57R4J.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-RZBV5KTF.js";
-import "../chunk-3DCCMO23.js";
-import "../chunk-237FYIVC.js";
+import "../chunk-43DT3QWZ.js";
+import "../chunk-FAF5RDWT.js";
+import "../chunk-TLK5YLIE.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
   blockedActionFingerprint,
+  callDecisionStore,
   codexAllow,
-  codexCallKey,
   codexDeny,
   codexPass,
   codexQuestionLimitDecision,
-  consumeCodexCallDecision,
   describeApplyPatch,
   fetchModeState,
   forgetBlockedActionHint,
@@ -56,17 +55,17 @@ import {
   handleSubagentStop,
   handleUserPrompt,
   hasBlockedActionHint,
+  identifyingToolInput,
   permissionTimeoutDecision,
   policyRequestFor,
   readLastPrompt,
   recordBlockedActionHint,
-  recordCodexCallDecision,
   reportEvent,
   toCodexWire,
   toPolicyLookup,
   toPolicyLookups,
   userScope
-} from "../chunk-MRHGK3Q3.js";
+} from "../chunk-D7AAAD6W.js";
 import {
   codexReviewerDenialsSince,
   deriveActionBody,
@@ -79,18 +78,18 @@ import {
   scanCodexGuardianReviews,
   scopePathFor,
   sessionIdentityOf
-} from "../chunk-JYCAAQUW.js";
-import "../chunk-XHC3UNOK.js";
-import "../chunk-MJVDFNP2.js";
+} from "../chunk-A2YJ2FBR.js";
+import "../chunk-5XDFQ6E3.js";
+import "../chunk-LAWI6NQK.js";
 import "../chunk-YPY4YCIZ.js";
-import "../chunk-KWICQAP7.js";
+import "../chunk-YOV3LHOL.js";
 import "../chunk-XMSDA5WA.js";
-import "../chunk-25UU4Q4V.js";
+import "../chunk-ZWURBNA3.js";
 import "../chunk-H6CL3T2S.js";
 import {
   repoKeyFor,
   repositoryScopeFor
-} from "../chunk-RGVQOOGD.js";
+} from "../chunk-IRIXOH4U.js";
 import {
   cancelQuestion,
   claimBlockedAction,
@@ -100,26 +99,27 @@ import {
   pollForAnswer,
   requestGate,
   sendNotification
-} from "../chunk-J4UNR655.js";
+} from "../chunk-L2GADKFL.js";
+import "../chunk-Y47BMZUR.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-2KN53MPE.js";
-import "../chunk-42PVKPHM.js";
-import "../chunk-LR3PIGRS.js";
-import "../chunk-V2T5ZDMP.js";
+} from "../chunk-WXUEOHYY.js";
+import "../chunk-VVN3RPV6.js";
+import "../chunk-Q2VV77IY.js";
+import "../chunk-PHA6AFOR.js";
 import {
   getMachineId
-} from "../chunk-DS7XMYUB.js";
-import "../chunk-CVBSETPW.js";
-import "../chunk-BKH4LQJC.js";
+} from "../chunk-WNT4JHK3.js";
+import "../chunk-PNVTPEO5.js";
+import "../chunk-LNF36PTF.js";
 import {
   canonicalJson
-} from "../chunk-W4FJR57E.js";
-import "../chunk-A44MRVWG.js";
+} from "../chunk-R7KC57PC.js";
+import "../chunk-GS5FH3C2.js";
 import {
   getApiKey
-} from "../chunk-T6HX6OTY.js";
+} from "../chunk-IKBTG3OT.js";
 import "../chunk-YU2EUD7O.js";
 import {
   writeFileAtomic
@@ -127,7 +127,7 @@ import {
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
-import "../chunk-SZYKS433.js";
+import "../chunk-MQMVJDII.js";
 import "../chunk-WIIMW5YO.js";
 import {
   CODEX_RESCUE_STOP_RESERVE_SECONDS,
@@ -156,17 +156,34 @@ import {
   refusesWhenUnanswered,
   resolveGate,
   unapprovedScopeReason
-} from "../chunk-M65LPNIO.js";
+} from "../chunk-DL67HX3D.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-codex-hook.ts
 import { basename } from "path";
 
+// src/codex-call-decision.ts
+import { createHash } from "crypto";
+var CODEX_DECISION_TTL_MS = 60 * 1e3;
+var codexCallKey = (identity) => {
+  if (!identity.sessionId || !identity.turnId || !identity.toolName) return null;
+  const material = canonicalJson([
+    identity.sessionId,
+    identity.turnId,
+    identity.toolName,
+    identifyingToolInput(identity.toolInput)
+  ]);
+  return createHash("sha256").update(material, "utf-8").digest("hex").slice(0, 32);
+};
+var codexDecisions = callDecisionStore("codex", CODEX_DECISION_TTL_MS);
+var recordCodexCallDecision = codexDecisions.record;
+var consumeCodexCallDecision = codexDecisions.consume;
+
 // src/codex-reviewer.ts
-import { createHash as createHash2 } from "crypto";
+import { createHash as createHash3 } from "crypto";
 
 // src/codex-rollout.ts
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 import { closeSync, existsSync, fstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, rmSync, statSync } from "fs";
 import { tmpdir } from "os";
 import { dirname, isAbsolute, join, relative } from "path";
@@ -183,7 +200,7 @@ var NEWLINE = 10;
 var TURN_CONTEXT_MARKER = '"turn_context"';
 var ROLLOUT_FILE = /^rollout-.*\.jsonl$/;
 var DATE_SEGMENTS = /^(\d{4})\/(\d{2})\/(\d{2})$/;
-var cacheKey = (...parts) => createHash("sha256").update(parts.join("\n"), "utf-8").digest("hex").slice(0, 32);
+var cacheKey = (...parts) => createHash2("sha256").update(parts.join("\n"), "utf-8").digest("hex").slice(0, 32);
 var turnCacheDir = () => join(tmpdir(), `pushary-codex-turns-${userScope()}`);
 var guardianCursorDir = () => join(tmpdir(), `pushary-codex-guardian-${userScope()}`);
 var readJsonRecord = (path) => {
@@ -486,7 +503,7 @@ var claimCodexReviewerRetry = async (apiKey, call) => {
   return granted === true;
 };
 var blockReasonOf = (rationale) => rationale?.trim().slice(0, GATE_BLOCK_REASON_MAX_LENGTH).trim() || void 0;
-var reviewToolUseId = (guardianPath, denial) => `codex-review-${createHash2("sha256").update(canonicalJson([guardianPath, denial.offset, denial.plannedAction]), "utf-8").digest("hex").slice(0, 40)}`;
+var reviewToolUseId = (guardianPath, denial) => `codex-review-${createHash3("sha256").update(canonicalJson([guardianPath, denial.offset, denial.plannedAction]), "utf-8").digest("hex").slice(0, 40)}`;
 var isRescueApproval = (output) => {
   if (!output) return false;
   try {
@@ -806,7 +823,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-LNVBPUWL.js");
+    const { repairCodexHolds } = await import("../reapply-OPQF4DPQ.js");
     repairCodexHolds();
   } catch {
     return;

package/dist/bin/pushary-codex-session.js

@@ -8,8 +8,8 @@ import "../chunk-MLKGABMK.js";
 var args = process.argv.slice(2);
 if (args[0] === "codex") args.shift();
 var appBehindTheProxy = args[0] === "--desktop-proxy" && args[2] === "--" ? args[1] : void 0;
-if (args[0] !== "--desktop-proxy") (await import("../usage-XLJK7OTL.js")).exitOnHelpFlag("codex");
-var loadWhatReadsTheAccount = () => Promise.all([import("../config-5SNDVPS2.js"), import("../identity-DCRNA3J3.js")]);
+if (args[0] !== "--desktop-proxy") (await import("../usage-ZSV4LFDL.js")).exitOnHelpFlag("codex");
+var loadWhatReadsTheAccount = () => Promise.all([import("../config-34VUNHK6.js"), import("../identity-UFJEWGEU.js")]);
 var loadedWhenThePassThroughStarted = appBehindTheProxy === void 0 ? null : loadWhatReadsTheAccount().catch(() => null);
 var desktopAccount = async () => {
   try {
@@ -19,7 +19,7 @@ var desktopAccount = async () => {
     return null;
   }
 };
-var desktopLaunch = await import("../codex-desktop-launch-CFKIJZVB.js").catch(() => null);
+var desktopLaunch = await import("../codex-desktop-launch-HKXGKL3T.js").catch(() => null);
 if (desktopLaunch === null && appBehindTheProxy !== void 0) {
   process.exitCode = await letCodexRunWithoutPushary(appBehindTheProxy, args.slice(3));
 } else {
@@ -27,15 +27,15 @@ if (desktopLaunch === null && appBehindTheProxy !== void 0) {
   const stop = () => abort.abort();
   if (!args[0]?.startsWith("--desktop")) for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) process.on(signal, stop);
   try {
-    const { codexDesktopCommand } = desktopLaunch ?? await import("../codex-desktop-launch-CFKIJZVB.js");
+    const { codexDesktopCommand } = desktopLaunch ?? await import("../codex-desktop-launch-HKXGKL3T.js");
     const desktop = await codexDesktopCommand(args, [process.execPath, ...process.execArgv, process.argv[1], "codex"], desktopAccount);
     if (desktop !== null) process.exitCode = desktop;
     else {
       const [{ getApiKey, getBaseUrl }, { getMachineId }, { resolveProviderBinary }, { codexSessionDirectory, launchCodexSession }] = await Promise.all([
-        import("../config-5SNDVPS2.js"),
-        import("../identity-DCRNA3J3.js"),
-        import("../live-capabilities-H7J5ANZ3.js"),
-        import("../codex-session-launch-YGH5UUAH.js")
+        import("../config-34VUNHK6.js"),
+        import("../identity-UFJEWGEU.js"),
+        import("../live-capabilities-BL3SHFWX.js"),
+        import("../codex-session-launch-DTGH7ZKM.js")
       ]);
       const binary = resolveProviderBinary("codex");
       if (!binary) throw new Error("Install Codex first, then run pushary codex");

package/dist/bin/pushary-codex.js

@@ -1,36 +1,37 @@
 #!/usr/bin/env node
 import {
   reportEvent
-} from "../chunk-MRHGK3Q3.js";
-import "../chunk-JYCAAQUW.js";
-import "../chunk-RGVQOOGD.js";
+} from "../chunk-D7AAAD6W.js";
+import "../chunk-A2YJ2FBR.js";
+import "../chunk-IRIXOH4U.js";
 import {
   askUser,
   isDecisionStopped,
   waitForAnswer
-} from "../chunk-J4UNR655.js";
+} from "../chunk-L2GADKFL.js";
+import "../chunk-Y47BMZUR.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-2KN53MPE.js";
-import "../chunk-42PVKPHM.js";
-import "../chunk-LR3PIGRS.js";
-import "../chunk-V2T5ZDMP.js";
+import "../chunk-WXUEOHYY.js";
+import "../chunk-VVN3RPV6.js";
+import "../chunk-Q2VV77IY.js";
+import "../chunk-PHA6AFOR.js";
 import {
   getMachineId
-} from "../chunk-DS7XMYUB.js";
-import "../chunk-BKH4LQJC.js";
-import "../chunk-W4FJR57E.js";
-import "../chunk-A44MRVWG.js";
+} from "../chunk-WNT4JHK3.js";
+import "../chunk-LNF36PTF.js";
+import "../chunk-R7KC57PC.js";
+import "../chunk-GS5FH3C2.js";
 import {
   getApiKey
-} from "../chunk-T6HX6OTY.js";
+} from "../chunk-IKBTG3OT.js";
 import "../chunk-YU2EUD7O.js";
 import "../chunk-TODDEIYG.js";
 import "../chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-SZYKS433.js";
+} from "../chunk-MQMVJDII.js";
 import "../chunk-WIIMW5YO.js";
-import "../chunk-M65LPNIO.js";
+import "../chunk-DL67HX3D.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-codex.ts

package/dist/bin/pushary-connect.js

@@ -1,55 +1,56 @@
 #!/usr/bin/env node
 import {
   printKeyCheck
-} from "../chunk-ZJPBTJED.js";
+} from "../chunk-2E46RALI.js";
 import {
   connectDevice,
   connectExistingApp,
   printConnectInstructions
-} from "../chunk-LBMCQWRX.js";
+} from "../chunk-4T72AHIA.js";
 import "../chunk-3EGEA4KH.js";
-import "../chunk-L5RSLIBQ.js";
-import "../chunk-2YS7YEUW.js";
+import "../chunk-V7ZY7P2X.js";
+import "../chunk-U3OLXV5Z.js";
 import {
   CONNECTED_THROUGH_MAC_APP,
   PAIR_FROM_MAC_APP,
   readMacAppConnection
-} from "../chunk-FTH4TSJ2.js";
-import "../chunk-GKZMBU6T.js";
+} from "../chunk-KLV2NQVT.js";
+import "../chunk-3QBI5C6P.js";
 import "../chunk-QCGNGEGE.js";
-import "../chunk-NSBWFX7H.js";
+import "../chunk-VBWJ756P.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-4EQOCSJW.js";
-import "../chunk-RZBV5KTF.js";
-import "../chunk-237FYIVC.js";
-import "../chunk-MRHGK3Q3.js";
-import "../chunk-JYCAAQUW.js";
-import "../chunk-XHC3UNOK.js";
-import "../chunk-MJVDFNP2.js";
+} from "../chunk-K7YJBVR3.js";
+import "../chunk-43DT3QWZ.js";
+import "../chunk-TLK5YLIE.js";
+import "../chunk-D7AAAD6W.js";
+import "../chunk-A2YJ2FBR.js";
+import "../chunk-5XDFQ6E3.js";
+import "../chunk-LAWI6NQK.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";
-import "../chunk-RGVQOOGD.js";
-import "../chunk-J4UNR655.js";
+import "../chunk-IRIXOH4U.js";
+import "../chunk-L2GADKFL.js";
+import "../chunk-Y47BMZUR.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-2KN53MPE.js";
-import "../chunk-42PVKPHM.js";
+import "../chunk-WXUEOHYY.js";
+import "../chunk-VVN3RPV6.js";
 import {
   checkApiKey
-} from "../chunk-LR3PIGRS.js";
-import "../chunk-V2T5ZDMP.js";
-import "../chunk-DS7XMYUB.js";
+} from "../chunk-Q2VV77IY.js";
+import "../chunk-PHA6AFOR.js";
+import "../chunk-WNT4JHK3.js";
 import {
   readKeySource
-} from "../chunk-CVBSETPW.js";
-import "../chunk-BKH4LQJC.js";
-import "../chunk-W4FJR57E.js";
-import "../chunk-A44MRVWG.js";
-import "../chunk-T6HX6OTY.js";
+} from "../chunk-PNVTPEO5.js";
+import "../chunk-LNF36PTF.js";
+import "../chunk-R7KC57PC.js";
+import "../chunk-GS5FH3C2.js";
+import "../chunk-IKBTG3OT.js";
 import {
   UsageError
 } from "../chunk-YU2EUD7O.js";
@@ -59,9 +60,9 @@ import {
 } from "../chunk-BG4HHB7E.js";
 import {
   isInvocationOf
-} from "../chunk-SZYKS433.js";
+} from "../chunk-MQMVJDII.js";
 import "../chunk-WIIMW5YO.js";
-import "../chunk-M65LPNIO.js";
+import "../chunk-DL67HX3D.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-connect.ts

package/dist/bin/pushary-cowork.js

@@ -2,15 +2,15 @@
 import {
   coworkOutput,
   parseCoworkOptions
-} from "../chunk-75FJZR2M.js";
+} from "../chunk-N3VCBXI6.js";
 import {
   canOpenBrowser,
   openInBrowser
 } from "../chunk-PUZZELE6.js";
 import {
   exitOnHelpFlag
-} from "../chunk-4EQOCSJW.js";
-import "../chunk-XHC3UNOK.js";
+} from "../chunk-K7YJBVR3.js";
+import "../chunk-5XDFQ6E3.js";
 import "../chunk-YPY4YCIZ.js";
 import {
   UsageError
@@ -18,11 +18,11 @@ import {
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
-import "../chunk-SZYKS433.js";
+import "../chunk-MQMVJDII.js";
 import "../chunk-WIIMW5YO.js";
 import {
   CLAUDE_CONNECTOR_GUIDE
-} from "../chunk-M65LPNIO.js";
+} from "../chunk-DL67HX3D.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-cowork.ts