pushary 1.9.43 → 1.9.44

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 1.9.44
+
+- Start a managed Codex terminal session with `pushary codex` and route supported command, file-change, and MCP permissions through Pushary. The native terminal remains available for unsupported requests.
+- Preserve repository-specific deny and routing rules, cancel stale questions across delayed or lost responses, and stop owned session processes on shutdown. Existing Codex desktop chats are not attached by this feature.
+
 ## 1.9.43
 
 - Agent and fx setup guidance uses Pushary’s durable personal reminders, which persist after the agent exits and deliver privately to their creator.

package/README.md

@@ -205,6 +205,7 @@ failing closed would let one malformed download silence every hook on the machin
 
 ```
 cowork       Set up Claude Desktop and Cowork with the Pushary connector
+codex        Start a managed Codex terminal session with Pushary native approvals
 setup        Configure Claude Code, Codex, Gemini CLI, Hermes, Cursor, VS Code, OpenCode, or fx with Pushary
 claude       Run Claude Code through Pushary, reachable from your phone even when idle
 daemon       Keep this machine reachable so your phone can START a new session

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,42 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-JE6GG3OV.js";
+} from "../chunk-UJXLVH66.js";
 import {
   readHookInput
-} from "../chunk-CIERFMQT.js";
-import "../chunk-S4QT3YFG.js";
+} from "../chunk-DD6IBKEJ.js";
+import "../chunk-OZ7MLVDM.js";
 import "../chunk-DWQYCOPI.js";
-import "../chunk-SCYAXV7U.js";
-import "../chunk-MSUMSXTI.js";
-import "../chunk-J6MVBWF2.js";
-import "../chunk-VQL62ECJ.js";
-import "../chunk-XHKBHWLX.js";
-import "../chunk-V5SUKRRI.js";
-import "../chunk-PIZ65U3D.js";
-import "../chunk-IMD5FN6Y.js";
-import "../chunk-Q7CUTGT4.js";
-import "../chunk-55FB6OSG.js";
+import "../chunk-FKDZU6YX.js";
+import "../chunk-W2TA4EVZ.js";
+import "../chunk-T4CKP47U.js";
+import "../chunk-SI2NC6UU.js";
+import "../chunk-6EV3B5CD.js";
+import "../chunk-OSMNLNPF.js";
 import "../chunk-GMXKITVA.js";
+import "../chunk-WBD7HZEZ.js";
+import "../chunk-XHKBHWLX.js";
+import "../chunk-TJZUQRMH.js";
+import "../chunk-75M7NFFC.js";
+import "../chunk-MRQJCIFO.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-C3RVRTHS.js";
-import "../chunk-YRE6GUFZ.js";
-import "../chunk-O7ADPLBF.js";
-import "../chunk-4T2TGP4T.js";
+import "../chunk-BKK3JCTD.js";
+import "../chunk-CAJCCQ7N.js";
+import "../chunk-5ZSBQHCM.js";
+import "../chunk-M2L7625S.js";
+import "../chunk-GOEIW2VH.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-53KLSE2F.js";
-import "../chunk-C54VJJ37.js";
-import "../chunk-H6V5S52A.js";
-import "../chunk-W3BO56VE.js";
+import "../chunk-53UZN7JW.js";
+import "../chunk-TKTS3SIM.js";
+import "../chunk-S2ALW446.js";
+import "../chunk-WMO2XVG4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-LAAOHBLO.js";
-import "../chunk-S3OWTQ6Z.js";
+import "../chunk-4JHEZ2PV.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-GTOBOC6M.js";
-import "../chunk-LDCRV6HG.js";
-import "../chunk-RXXKFM22.js";
+import "../chunk-OWQOMGBF.js";
+import "../chunk-T3KMJI4W.js";
+import "../chunk-JNU3LV47.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,39 +5,39 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-JE6GG3OV.js";
+} from "../chunk-UJXLVH66.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
-import {
-  exitOnHelpFlag
-} from "../chunk-XLHFWG2E.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-55FB6OSG.js";
+} from "../chunk-OSMNLNPF.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-C3RVRTHS.js";
+import "../chunk-TJZUQRMH.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-OR6KJOHE.js";
+import "../chunk-M2L7625S.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-LAAOHBLO.js";
 import {
   claudeSettings
-} from "../chunk-S3OWTQ6Z.js";
+} from "../chunk-4JHEZ2PV.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-AQFEP65J.js";
-import "../chunk-GTOBOC6M.js";
-import "../chunk-LDCRV6HG.js";
+import "../chunk-OWQOMGBF.js";
+import "../chunk-T3KMJI4W.js";
 import {
   isRecord
-} from "../chunk-RXXKFM22.js";
+} from "../chunk-JNU3LV47.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,39 +8,39 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-LWW7SBK3.js";
+} from "../chunk-PGHN5D4N.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-ZJXEQV3A.js";
+} from "../chunk-2NVXFWQY.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-S4QT3YFG.js";
+} from "../chunk-OZ7MLVDM.js";
 import "../chunk-DWQYCOPI.js";
 import {
   ensureDaemonRunning
-} from "../chunk-SCYAXV7U.js";
-import {
-  encryptRecord
-} from "../chunk-MSUMSXTI.js";
-import "../chunk-J6MVBWF2.js";
+} from "../chunk-W2TA4EVZ.js";
+import "../chunk-T4CKP47U.js";
+import "../chunk-SI2NC6UU.js";
+import "../chunk-6EV3B5CD.js";
+import "../chunk-OSMNLNPF.js";
+import "../chunk-GMXKITVA.js";
 import {
   transcriptsEnabled
-} from "../chunk-VQL62ECJ.js";
+} from "../chunk-WBD7HZEZ.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-PIZ65U3D.js";
-import "../chunk-IMD5FN6Y.js";
-import "../chunk-Q7CUTGT4.js";
-import "../chunk-55FB6OSG.js";
-import "../chunk-GMXKITVA.js";
+import "../chunk-TJZUQRMH.js";
+import {
+  encryptRecord
+} from "../chunk-75M7NFFC.js";
+import "../chunk-MRQJCIFO.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-C3RVRTHS.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -54,12 +54,11 @@ import {
   readPendingCommand,
   readPendingCommandById,
   removePendingCommand,
-  repoKeyFor,
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-YRE6GUFZ.js";
-import "../chunk-O7ADPLBF.js";
+} from "../chunk-BKK3JCTD.js";
+import "../chunk-CAJCCQ7N.js";
 import {
   askUser,
   cancelQuestion,
@@ -70,28 +69,31 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-4T2TGP4T.js";
+} from "../chunk-5ZSBQHCM.js";
+import "../chunk-M2L7625S.js";
+import {
+  repoKeyFor
+} from "../chunk-GOEIW2VH.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-53KLSE2F.js";
-import "../chunk-C54VJJ37.js";
-import "../chunk-H6V5S52A.js";
+} from "../chunk-53UZN7JW.js";
+import "../chunk-TKTS3SIM.js";
+import "../chunk-S2ALW446.js";
 import {
   getMachineId
-} from "../chunk-W3BO56VE.js";
+} from "../chunk-WMO2XVG4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-LAAOHBLO.js";
-import "../chunk-S3OWTQ6Z.js";
+import "../chunk-4JHEZ2PV.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-GTOBOC6M.js";
+} from "../chunk-OWQOMGBF.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-LDCRV6HG.js";
+} from "../chunk-T3KMJI4W.js";
 import {
   DECISION_STOP_REASON,
   HAND_BACK_WITHOUT_A_PROMPT,
@@ -101,7 +103,7 @@ import {
   redactSecretsFromContent,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-RXXKFM22.js";
+} from "../chunk-JNU3LV47.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -9,12 +9,13 @@ import {
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-A64UCGX3.js";
+} from "../chunk-IWHDNMM3.js";
+import "../chunk-SWDPCDLT.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-ENGASUEL.js";
+} from "../chunk-FI2F5KZJ.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -23,25 +24,20 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-ZORCUL3Z.js";
-import {
-  planFxRemoval,
-  removeInstructionBlock
-} from "../chunk-VGPEXMYM.js";
-import "../chunk-LOUZNXTJ.js";
-import {
-  disableDaemonService
-} from "../chunk-SCYAXV7U.js";
-import "../chunk-XHKBHWLX.js";
-import "../chunk-JW4S4O4W.js";
+} from "../chunk-HV4TEKNP.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-F7SZ2RCK.js";
-import "../chunk-JB4JCGRW.js";
+} from "../chunk-LEHBWBCG.js";
+import "../chunk-42CVAOC5.js";
+import {
+  planFxRemoval,
+  removeInstructionBlock
+} from "../chunk-RGBTKOCC.js";
+import "../chunk-TWATOPHK.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -53,14 +49,11 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-O4SYJVAF.js";
+} from "../chunk-UZVF6MP2.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
-import {
-  exitOnHelpFlag
-} from "../chunk-XLHFWG2E.js";
 import {
   compatibleConfigFile,
   compatibleDocuments,
@@ -76,7 +69,10 @@ import {
   removePusharyToolPermissions,
   restoreClaudeMcpServer,
   serializeConfigDocument
-} from "../chunk-V5SUKRRI.js";
+} from "../chunk-FKDZU6YX.js";
+import {
+  disableDaemonService
+} from "../chunk-W2TA4EVZ.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -84,35 +80,40 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-PIZ65U3D.js";
+} from "../chunk-T4CKP47U.js";
 import {
   removeGeminiSettings
-} from "../chunk-IMD5FN6Y.js";
-import "../chunk-Q7CUTGT4.js";
-import "../chunk-55FB6OSG.js";
+} from "../chunk-SI2NC6UU.js";
+import "../chunk-6EV3B5CD.js";
+import "../chunk-OSMNLNPF.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-6ICPEJY5.js";
+import "../chunk-XHKBHWLX.js";
 import {
   CANDIDATE_RCS,
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-C3RVRTHS.js";
-import "../chunk-YRE6GUFZ.js";
-import "../chunk-O7ADPLBF.js";
-import "../chunk-4T2TGP4T.js";
+} from "../chunk-TJZUQRMH.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-OR6KJOHE.js";
+import "../chunk-6ICPEJY5.js";
+import "../chunk-BKK3JCTD.js";
+import "../chunk-CAJCCQ7N.js";
+import "../chunk-5ZSBQHCM.js";
+import "../chunk-M2L7625S.js";
+import "../chunk-GOEIW2VH.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-53KLSE2F.js";
-import "../chunk-C54VJJ37.js";
-import "../chunk-H6V5S52A.js";
-import "../chunk-W3BO56VE.js";
+import "../chunk-53UZN7JW.js";
+import "../chunk-TKTS3SIM.js";
+import "../chunk-S2ALW446.js";
+import "../chunk-WMO2XVG4.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-LAAOHBLO.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -149,14 +150,14 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-S3OWTQ6Z.js";
+} from "../chunk-4JHEZ2PV.js";
 import "../chunk-AQFEP65J.js";
 import {
   getBaseUrl
-} from "../chunk-GTOBOC6M.js";
+} from "../chunk-OWQOMGBF.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-LDCRV6HG.js";
+} from "../chunk-T3KMJI4W.js";
 import {
   CLI_PACKAGE_NAMES,
   HOOK_COMPATIBLE_PROFILES,
@@ -168,7 +169,7 @@ import {
   globalRootFor,
   isValidApiKey,
   redactSecrets
-} from "../chunk-RXXKFM22.js";
+} from "../chunk-JNU3LV47.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -1,59 +1,64 @@
 #!/usr/bin/env node
-import {
-  LiveTranscriptRelay,
-  liveSessionSleep,
-  postLiveSession,
-  postLiveSessionUntilAccepted,
-  startLiveSessionHeartbeat
-} from "../chunk-IDVKJICN.js";
-import {
-  resolveProviderBinary
-} from "../chunk-NV2LARV4.js";
-import "../chunk-RIVNNBEK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-LWW7SBK3.js";
-import "../chunk-MSUMSXTI.js";
-import "../chunk-J6MVBWF2.js";
+} from "../chunk-PGHN5D4N.js";
 import {
   transcriptsEnabled
-} from "../chunk-VQL62ECJ.js";
+} from "../chunk-WBD7HZEZ.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
+import "../chunk-TJZUQRMH.js";
+import {
+  CodexNativeApprovals
+} from "../chunk-SVCT5D7K.js";
+import {
+  LiveTranscriptRelay,
+  liveSessionSleep,
+  postLiveSession,
+  postLiveSessionUntilAccepted,
+  startLiveSessionHeartbeat
+} from "../chunk-PQAFH4DF.js";
+import {
+  resolveProviderBinary
+} from "../chunk-L2ZM7LXN.js";
+import "../chunk-RIVNNBEK.js";
+import "../chunk-75M7NFFC.js";
+import "../chunk-MRQJCIFO.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-C3RVRTHS.js";
 import {
-  isAskUserResponse,
   isDecisionStopped,
+  withdrawQuestion
+} from "../chunk-5ZSBQHCM.js";
+import "../chunk-M2L7625S.js";
+import {
+  isAskUserResponse,
   isWaitForAnswerResponse,
-  withdrawQuestion,
   writeDegraded
-} from "../chunk-4T2TGP4T.js";
+} from "../chunk-GOEIW2VH.js";
 import "../chunk-POFBE6ZY.js";
 import {
   callMcpTool,
   isRetryable
-} from "../chunk-53KLSE2F.js";
-import "../chunk-C54VJJ37.js";
-import "../chunk-H6V5S52A.js";
+} from "../chunk-53UZN7JW.js";
+import "../chunk-TKTS3SIM.js";
+import "../chunk-S2ALW446.js";
 import {
   getMachineId
-} from "../chunk-W3BO56VE.js";
+} from "../chunk-WMO2XVG4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-LAAOHBLO.js";
-import "../chunk-S3OWTQ6Z.js";
+import "../chunk-4JHEZ2PV.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-GTOBOC6M.js";
-import "../chunk-LDCRV6HG.js";
+} from "../chunk-OWQOMGBF.js";
+import "../chunk-T3KMJI4W.js";
 import {
   AGENT_QUESTION_DESCRIPTION_MAX,
   AGENT_QUESTION_HEADER_MAX,
@@ -68,7 +73,7 @@ import {
   parseCodexQuestions,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-RXXKFM22.js";
+} from "../chunk-JNU3LV47.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";
@@ -178,6 +183,7 @@ var MAX_MESSAGE_BUFFERS = 16;
 var JsonRpcClient = class {
   constructor(command, cwd, timeoutMs, bridgeOptions) {
     this.bridgeOptions = bridgeOptions;
+    this.approvals = new CodexNativeApprovals({ ...bridgeOptions, shared: false, reply: (id, result) => this.write({ id, result }) });
     this.threadId = bridgeOptions.resumeThreadId ?? null;
     const options = { cwd, env: { ...process.env, PUSHARY_CODEX_BRIDGE: "1" }, stdio: ["pipe", "pipe", "pipe"] };
     this.child = process.platform === "win32" ? spawnClaude(command.command, command.args ?? [], options) : spawn(command.command, command.args ?? [], options);
@@ -189,6 +195,7 @@ var JsonRpcClient = class {
     this.child.once("exit", (code, signal) => this.fail(new Error(this.exitMessage(code, signal))));
     this.timeoutMs = timeoutMs;
   }
+  approvals;
   child;
   pending = /* @__PURE__ */ new Map();
   notifications = /* @__PURE__ */ new Set();
@@ -239,6 +246,7 @@ var JsonRpcClient = class {
     });
   }
   async close() {
+    await this.approvals.close();
     if (this.closed) return;
     this.closed = true;
     for (const request of this.serverRequests.values()) {
@@ -286,6 +294,7 @@ var JsonRpcClient = class {
     } catch {
       return;
     }
+    if (this.approvals.handle(message, this.threadId)) return;
     if (message.id !== void 0 && (message.method === "item/tool/requestUserInput" || message.method === "mcpServer/elicitation/request")) {
       const id = message.id;
       const owner = message.method === "item/tool/requestUserInput" ? codexQuestionOwner(message.params ?? {}, id, { machineId: this.bridgeOptions.machineId, generation: this.generation, threadId: this.threadId }) : null;
@@ -365,6 +374,7 @@ var JsonRpcClient = class {
     }
   }
   fail(error) {
+    void this.approvals.close();
     if (this.closed) return;
     this.closed = true;
     this.failure = error;