pushary 1.9.42 → 1.9.44

package/dist/bin/pushary-codex-hook.js

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-J7OBJZ5S.js";
+} from "../chunk-KYLY6UMN.js";
 import {
   askAgentQuestions,
   defersToNativeMode,
   reportMachineDenial
-} from "../chunk-WZNRDDC4.js";
+} from "../chunk-UC4PNLMK.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-JQX2L3ES.js";
+} from "../chunk-GRAPJKDK.js";
 import {
   triggerAutoUpdate
-} from "../chunk-7L6YSHZO.js";
+} from "../chunk-3IRC3XFG.js";
 import {
   readHookInput
-} from "../chunk-6PABNQVH.js";
+} from "../chunk-DD6IBKEJ.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-ZX3PFROQ.js";
-import "../chunk-RTM5GVRZ.js";
+} from "../chunk-2NVXFWQY.js";
+import "../chunk-OZ7MLVDM.js";
 import "../chunk-DWQYCOPI.js";
-import "../chunk-STETTN4K.js";
-import "../chunk-X7TNLYNZ.js";
-import "../chunk-MAB6CGL5.js";
-import "../chunk-QRNNIDGY.js";
-import "../chunk-XHKBHWLX.js";
-import "../chunk-IVUP2EE4.js";
-import "../chunk-NRSTNZYJ.js";
-import "../chunk-3U3FU6ZX.js";
-import "../chunk-KYFWYPHN.js";
-import "../chunk-Y3HTWB5S.js";
+import "../chunk-FKDZU6YX.js";
+import "../chunk-W2TA4EVZ.js";
+import "../chunk-T4CKP47U.js";
+import "../chunk-SI2NC6UU.js";
+import "../chunk-6EV3B5CD.js";
+import "../chunk-OSMNLNPF.js";
 import "../chunk-GMXKITVA.js";
+import "../chunk-WBD7HZEZ.js";
+import "../chunk-XHKBHWLX.js";
+import "../chunk-TJZUQRMH.js";
+import "../chunk-75M7NFFC.js";
+import "../chunk-MRQJCIFO.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-M7VKFAAK.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -70,7 +70,6 @@ import {
   readLastPrompt,
   recordBlockedActionHint,
   recordCodexCallDecision,
-  repoKeyFor,
   reportEvent,
   scanCodexGuardianReviews,
   scopePathFor,
@@ -79,13 +78,12 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   userScope
-} from "../chunk-CGRVIUKE.js";
-import "../chunk-K2SSNAUW.js";
+} from "../chunk-BKK3JCTD.js";
+import "../chunk-CAJCCQ7N.js";
 import {
   askUser,
   cancelQuestion,
   claimBlockedAction,
-  exitAfterClientReports,
   isAwayPaused,
   isDecisionStopped,
   isLocalQuestionHandoff,
@@ -94,31 +92,35 @@ import {
   sendNotification,
   unavailableQuestionUnlessSubscriptionRequired,
   waitForQuestion
-} from "../chunk-I7EZMNKI.js";
+} from "../chunk-5ZSBQHCM.js";
+import "../chunk-M2L7625S.js";
+import {
+  exitAfterClientReports,
+  repoKeyFor
+} from "../chunk-GOEIW2VH.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-AW4TDBUJ.js";
-import "../chunk-ZV56INA6.js";
-import "../chunk-4UCTKLHY.js";
+} from "../chunk-53UZN7JW.js";
+import "../chunk-TKTS3SIM.js";
+import "../chunk-S2ALW446.js";
 import {
   getMachineId
-} from "../chunk-QPT4PTUG.js";
+} from "../chunk-WMO2XVG4.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-ODPULZZG.js";
 import {
   canonicalJson
-} from "../chunk-EBZK2SJ2.js";
+} from "../chunk-4JHEZ2PV.js";
 import {
   writeFileAtomic
 } from "../chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "../chunk-CHD6IUNM.js";
-import "../chunk-DIJ532S7.js";
+} from "../chunk-OWQOMGBF.js";
+import "../chunk-T3KMJI4W.js";
 import {
   CODEX_RESCUE_TOOL_NAME,
   DECISION_STOP_REASON,
@@ -146,7 +148,7 @@ import {
   resolveGate,
   scopeBreachReasonOf,
   unapprovedScopeReason
-} from "../chunk-ORLTWJ2O.js";
+} from "../chunk-JNU3LV47.js";
 
 // bin/pushary-codex-hook.ts
 import { basename } from "path";
@@ -795,7 +797,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-XBEB2B5A.js");
+    const { repairCodexHolds } = await import("../reapply-MEU66ALO.js");
     repairCodexHolds();
   } catch {
     return;

package/dist/bin/pushary-codex-session.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-codex-session.js

@@ -0,0 +1,253 @@
+#!/usr/bin/env node
+import {
+  exitOnHelpFlag
+} from "../chunk-OR6KJOHE.js";
+import {
+  CodexNativeApprovals
+} from "../chunk-SVCT5D7K.js";
+import "../chunk-PQAFH4DF.js";
+import {
+  resolveProviderBinary
+} from "../chunk-L2ZM7LXN.js";
+import "../chunk-RIVNNBEK.js";
+import "../chunk-75M7NFFC.js";
+import "../chunk-MRQJCIFO.js";
+import "../chunk-6ICPEJY5.js";
+import "../chunk-GOEIW2VH.js";
+import "../chunk-POFBE6ZY.js";
+import "../chunk-53UZN7JW.js";
+import "../chunk-TKTS3SIM.js";
+import "../chunk-S2ALW446.js";
+import {
+  getMachineId
+} from "../chunk-WMO2XVG4.js";
+import "../chunk-7QLSKOSU.js";
+import "../chunk-KZERVKTD.js";
+import "../chunk-4JHEZ2PV.js";
+import "../chunk-AQFEP65J.js";
+import {
+  getApiKey,
+  getBaseUrl
+} from "../chunk-OWQOMGBF.js";
+import "../chunk-T3KMJI4W.js";
+import "../chunk-JNU3LV47.js";
+
+// src/codex-session-launch.ts
+import { spawn as spawn2 } from "child_process";
+import { stat } from "fs/promises";
+import { resolve } from "path";
+
+// src/codex-shared-session.ts
+import { spawn } from "child_process";
+import { mkdtemp, rm } from "fs/promises";
+import { createServer } from "http";
+import { tmpdir } from "os";
+import { join } from "path";
+import WebSocket, { WebSocketServer } from "ws";
+var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var requestId = (value) => typeof value === "string" || typeof value === "number" && Number.isSafeInteger(value);
+var MAX_MESSAGE_BYTES = 16 * 1024 * 1024;
+var startCodexSharedSession = async (options) => {
+  if (process.platform === "win32") throw new Error("Managed Codex sessions currently require macOS or Linux");
+  options.signal.throwIfAborted();
+  const directory = await mkdtemp(join(tmpdir(), "pushary-codex-"));
+  const socketPath = join(directory, "terminal.sock");
+  const controller = new AbortController();
+  const signal = AbortSignal.any([controller.signal, options.signal]);
+  const http = createServer((_request, response) => {
+    response.writeHead(404);
+    response.end();
+  });
+  const websocket = new WebSocketServer({ server: http, maxPayload: MAX_MESSAGE_BYTES, perMessageDeflate: false });
+  const child = spawn(options.binary, ["app-server"], {
+    cwd: options.cwd,
+    env: { ...options.env ?? process.env, PUSHARY_CODEX_BRIDGE: "1" },
+    stdio: ["pipe", "pipe", "pipe"],
+    detached: true
+  });
+  child.stderr.resume();
+  const exited = new Promise((resolve2) => {
+    child.once("exit", () => {
+      controller.abort(new Error("Codex app-server stopped"));
+      resolve2();
+    });
+    child.once("error", () => {
+      controller.abort(new Error("Could not start Codex app-server"));
+      resolve2();
+    });
+  });
+  let terminal = null;
+  let closing = null;
+  let buffered = "";
+  const unanswered = /* @__PURE__ */ new Set();
+  const write = (message) => {
+    if (signal.aborted || child.stdin.destroyed) throw new Error("Codex connection closed");
+    child.stdin.write(JSON.stringify(message) + "\n");
+  };
+  const approvals = new CodexNativeApprovals({ ...options, signal, shared: true, reply: (id, result) => {
+    if (!unanswered.delete(id)) throw new Error("Native request already answered");
+    write({ id, result });
+  } });
+  const observeNative = (message) => {
+    if (typeof message.method !== "string") return;
+    if (requestId(message.id)) unanswered.add(message.id);
+    if (!record(message.params)) return;
+    if (message.method === "serverRequest/resolved" && requestId(message.params.requestId)) unanswered.delete(message.params.requestId);
+    approvals.handle({ id: message.id, method: message.method, params: message.params }, typeof message.params.threadId === "string" ? message.params.threadId : null);
+  };
+  child.stdout.setEncoding("utf8");
+  child.stdout.on("data", (chunk) => {
+    buffered += chunk;
+    let end;
+    while ((end = buffered.indexOf("\n")) >= 0) {
+      const line = buffered.slice(0, end);
+      buffered = buffered.slice(end + 1);
+      if (!line.trim()) continue;
+      if (Buffer.byteLength(line) > MAX_MESSAGE_BYTES) {
+        controller.abort();
+        return;
+      }
+      try {
+        const message = JSON.parse(line);
+        if (!record(message)) throw new Error("Invalid Codex message");
+        observeNative(message);
+        if (terminal?.readyState === WebSocket.OPEN) terminal.send(line);
+      } catch {
+        controller.abort();
+        return;
+      }
+    }
+    if (Buffer.byteLength(buffered) > MAX_MESSAGE_BYTES) controller.abort();
+  });
+  child.stdin.on("error", () => controller.abort());
+  websocket.on("connection", (client) => {
+    if (terminal || signal.aborted) {
+      client.close();
+      return;
+    }
+    terminal = client;
+    client.on("error", () => controller.abort());
+    client.on("close", () => controller.abort());
+    client.on("message", (bytes) => {
+      try {
+        const message = JSON.parse(bytes.toString());
+        if (!record(message)) throw new Error("Invalid terminal message");
+        if (requestId(message.id) && !("method" in message)) {
+          if (!unanswered.delete(message.id)) return;
+          approvals.handle({ method: "serverRequest/resolved", params: { requestId: message.id } }, null);
+        }
+        write(message);
+      } catch {
+        controller.abort();
+      }
+    });
+  });
+  const signalServerGroup = (signal2) => {
+    if (!child.pid) return false;
+    try {
+      process.kill(-child.pid, signal2);
+      return true;
+    } catch (error) {
+      if (record(error) && error.code === "ESRCH") return false;
+      throw error;
+    }
+  };
+  const stopServer = async () => {
+    signalServerGroup("SIGTERM");
+    const deadline = Date.now() + 2e3;
+    while (signalServerGroup(0) && Date.now() < deadline) await new Promise((resolve2) => setTimeout(resolve2, 25));
+    if (signalServerGroup(0)) signalServerGroup("SIGKILL");
+    await exited;
+  };
+  const close = () => {
+    if (closing) return closing;
+    closing = Promise.resolve().then(async () => {
+      controller.abort();
+      terminal?.terminate();
+      websocket.close();
+      http.close();
+      try {
+        await Promise.all([approvals.close(), stopServer()]);
+      } finally {
+        await rm(directory, { recursive: true, force: true });
+      }
+    });
+    return closing;
+  };
+  signal.addEventListener("abort", () => {
+    void close();
+  }, { once: true });
+  try {
+    await new Promise((resolve2, reject) => {
+      http.once("error", reject);
+      http.listen(socketPath, resolve2);
+    });
+    signal.throwIfAborted();
+    return { endpoint: "unix://" + socketPath, signal, close };
+  } catch (error) {
+    await close();
+    throw error;
+  }
+};
+
+// src/codex-session-launch.ts
+var codexSessionDirectory = (args2, cwd) => {
+  if (args2.length === 0) return cwd;
+  if (args2.length === 2 && args2[0] === "--cwd" && args2[1]) return resolve(cwd, args2[1]);
+  throw new Error("Usage: pushary codex [--cwd <directory>]");
+};
+var launchCodexSession = async (options) => {
+  if (!(await stat(options.cwd)).isDirectory()) throw new Error("Codex needs a project directory");
+  const session = await startCodexSharedSession(options);
+  try {
+    process.stderr.write("[pushary] Managed Codex session. Supported native permissions can reach Pushary; other prompts stay in this terminal.\n");
+    const tui = spawn2(options.binary, ["--remote", session.endpoint], {
+      cwd: options.cwd,
+      env: { ...options.env ?? process.env, PUSHARY_CODEX_BRIDGE: "1" },
+      stdio: "inherit"
+    });
+    const stop = () => {
+      tui.kill("SIGTERM");
+    };
+    session.signal.addEventListener("abort", stop, { once: true });
+    if (session.signal.aborted) stop();
+    try {
+      return await new Promise((resolve2, reject) => {
+        tui.once("error", reject);
+        tui.once("close", (code) => resolve2(code ?? 1));
+      });
+    } finally {
+      session.signal.removeEventListener("abort", stop);
+    }
+  } finally {
+    await session.close();
+  }
+};
+
+// bin/pushary-codex-session.ts
+exitOnHelpFlag("codex");
+var args = process.argv.slice(2);
+if (args[0] === "codex") args.shift();
+{
+  const abort = new AbortController();
+  const stop = () => abort.abort();
+  for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) process.on(signal, stop);
+  try {
+    const binary = resolveProviderBinary("codex");
+    if (!binary) throw new Error("Install Codex first, then run pushary codex");
+    process.exitCode = await launchCodexSession({
+      binary,
+      cwd: codexSessionDirectory(args, process.cwd()),
+      apiKey: getApiKey(),
+      baseUrl: getBaseUrl(),
+      machineId: getMachineId(),
+      signal: abort.signal
+    });
+  } catch (error) {
+    process.stderr.write(`[pushary] ${error instanceof Error ? error.message : "Codex session failed"}
+`);
+    process.exitCode = 1;
+  } finally {
+    for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) process.off(signal, stop);
+  }
+}

package/dist/bin/pushary-codex.js

@@ -1,32 +1,33 @@
 #!/usr/bin/env node
 import {
   reportEvent
-} from "../chunk-CGRVIUKE.js";
-import "../chunk-K2SSNAUW.js";
+} from "../chunk-BKK3JCTD.js";
+import "../chunk-CAJCCQ7N.js";
 import {
   askUser,
   isDecisionStopped,
   waitForAnswer
-} from "../chunk-I7EZMNKI.js";
+} from "../chunk-5ZSBQHCM.js";
+import "../chunk-M2L7625S.js";
+import "../chunk-GOEIW2VH.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-AW4TDBUJ.js";
-import "../chunk-ZV56INA6.js";
-import "../chunk-4UCTKLHY.js";
+import "../chunk-53UZN7JW.js";
+import "../chunk-TKTS3SIM.js";
+import "../chunk-S2ALW446.js";
 import {
   getMachineId
-} from "../chunk-QPT4PTUG.js";
+} from "../chunk-WMO2XVG4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ODPULZZG.js";
-import "../chunk-EBZK2SJ2.js";
+import "../chunk-4JHEZ2PV.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "../chunk-CHD6IUNM.js";
+} from "../chunk-OWQOMGBF.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-DIJ532S7.js";
-import "../chunk-ORLTWJ2O.js";
+} from "../chunk-T3KMJI4W.js";
+import "../chunk-JNU3LV47.js";
 
 // bin/pushary-codex.ts
 import { basename } from "path";

package/dist/bin/pushary-connect.js

@@ -3,61 +3,62 @@ import {
   connectDevice,
   connectExistingApp,
   printConnectInstructions
-} from "../chunk-ZJY4KON3.js";
+} from "../chunk-KILK6SWZ.js";
 import "../chunk-3EGEA4KH.js";
 import "../chunk-QCGNGEGE.js";
 import {
   printKeyCheck
-} from "../chunk-ZVMFRUBD.js";
+} from "../chunk-SWDPCDLT.js";
 import {
   CONNECTED_THROUGH_MAC_APP,
   PAIR_FROM_MAC_APP,
   readMacAppConnection
-} from "../chunk-PJ3C6IID.js";
-import "../chunk-IXNVIWNN.js";
-import "../chunk-FP2ZJK3T.js";
+} from "../chunk-LEHBWBCG.js";
+import "../chunk-42CVAOC5.js";
+import "../chunk-UZVF6MP2.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
-import {
-  exitOnHelpFlag
-} from "../chunk-F43LAKAK.js";
-import "../chunk-IVUP2EE4.js";
-import "../chunk-NRSTNZYJ.js";
-import "../chunk-3U3FU6ZX.js";
-import "../chunk-KYFWYPHN.js";
-import "../chunk-Y3HTWB5S.js";
+import "../chunk-FKDZU6YX.js";
+import "../chunk-T4CKP47U.js";
+import "../chunk-SI2NC6UU.js";
+import "../chunk-6EV3B5CD.js";
+import "../chunk-OSMNLNPF.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-6ICPEJY5.js";
 import {
   readKeySource
-} from "../chunk-M7VKFAAK.js";
-import "../chunk-CGRVIUKE.js";
-import "../chunk-K2SSNAUW.js";
-import "../chunk-I7EZMNKI.js";
+} from "../chunk-TJZUQRMH.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-OR6KJOHE.js";
+import "../chunk-6ICPEJY5.js";
+import "../chunk-BKK3JCTD.js";
+import "../chunk-CAJCCQ7N.js";
+import "../chunk-5ZSBQHCM.js";
+import "../chunk-M2L7625S.js";
+import "../chunk-GOEIW2VH.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-AW4TDBUJ.js";
+import "../chunk-53UZN7JW.js";
 import {
   checkApiKey
-} from "../chunk-ZV56INA6.js";
-import "../chunk-4UCTKLHY.js";
-import "../chunk-QPT4PTUG.js";
+} from "../chunk-TKTS3SIM.js";
+import "../chunk-S2ALW446.js";
+import "../chunk-WMO2XVG4.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-ODPULZZG.js";
-import "../chunk-EBZK2SJ2.js";
+import "../chunk-4JHEZ2PV.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-CHD6IUNM.js";
+import "../chunk-OWQOMGBF.js";
 import {
   isInvocationOf
-} from "../chunk-DIJ532S7.js";
-import "../chunk-ORLTWJ2O.js";
+} from "../chunk-T3KMJI4W.js";
+import "../chunk-JNU3LV47.js";
 
 // bin/pushary-connect.ts
 exitOnHelpFlag("pair");

package/dist/bin/pushary-cowork.js

@@ -2,26 +2,26 @@
 import {
   coworkOutput,
   parseCoworkOptions
-} from "../chunk-M2YE3OEC.js";
+} from "../chunk-GBCR2FH2.js";
 import {
   canOpenBrowser,
   openInBrowser
 } from "../chunk-PUZZELE6.js";
+import "../chunk-6EV3B5CD.js";
+import "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-F43LAKAK.js";
-import "../chunk-KYFWYPHN.js";
-import "../chunk-GMXKITVA.js";
+} from "../chunk-OR6KJOHE.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-DIJ532S7.js";
+import "../chunk-T3KMJI4W.js";
 import {
   CLAUDE_CONNECTOR_GUIDE
-} from "../chunk-ORLTWJ2O.js";
+} from "../chunk-JNU3LV47.js";
 
 // bin/pushary-cowork.ts
 exitOnHelpFlag("cowork");