pushary 1.9.44 → 1.9.45

package/dist/{reapply-MEU66ALO.js → reapply-LILGWJO3.js}

@@ -11,35 +11,34 @@ import {
   reapplyOpenCodePlugin,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-CESLE4UN.js";
-import "./chunk-E76QCZIA.js";
-import "./chunk-UZVF6MP2.js";
-import "./chunk-FKDZU6YX.js";
-import "./chunk-T4CKP47U.js";
-import "./chunk-SI2NC6UU.js";
-import "./chunk-6EV3B5CD.js";
-import "./chunk-OSMNLNPF.js";
+} from "./chunk-KS7NA5CK.js";
+import "./chunk-U6Z56IQS.js";
+import "./chunk-YXGWG5PO.js";
+import "./chunk-RBJWPUI6.js";
+import "./chunk-ASK2MSD2.js";
+import "./chunk-5DCZL3BC.js";
+import "./chunk-OHFC3GJY.js";
+import "./chunk-U45OINYS.js";
 import "./chunk-GMXKITVA.js";
-import "./chunk-XHKBHWLX.js";
 import "./chunk-RIVNNBEK.js";
+import "./chunk-XHKBHWLX.js";
 import "./chunk-6ICPEJY5.js";
-import "./chunk-BKK3JCTD.js";
-import "./chunk-CAJCCQ7N.js";
-import "./chunk-5ZSBQHCM.js";
-import "./chunk-M2L7625S.js";
-import "./chunk-GOEIW2VH.js";
+import "./chunk-GZSSAY6N.js";
+import "./chunk-HHX6IRSH.js";
+import "./chunk-CFMCV6Z7.js";
+import "./chunk-CDERSTBO.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-53UZN7JW.js";
-import "./chunk-TKTS3SIM.js";
-import "./chunk-S2ALW446.js";
-import "./chunk-WMO2XVG4.js";
+import "./chunk-SFQSOBLM.js";
+import "./chunk-PWUIPQ2I.js";
+import "./chunk-6TYKZ4DN.js";
+import "./chunk-4A6VUVXV.js";
 import "./chunk-7QLSKOSU.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-4JHEZ2PV.js";
+import "./chunk-IOVJVGIT.js";
 import "./chunk-AQFEP65J.js";
-import "./chunk-OWQOMGBF.js";
-import "./chunk-T3KMJI4W.js";
-import "./chunk-JNU3LV47.js";
+import "./chunk-EWC4P4ZL.js";
+import "./chunk-57M4ERJK.js";
+import "./chunk-K7EGWMDU.js";
 export {
   ensureCodexTrustAfterReapply,
   inspectConfiguredManagedProviders,

package/dist/src/index.js

@@ -1,14 +1,14 @@
 import {
   handlePreToolUse
-} from "../chunk-CEZTYTBN.js";
-import "../chunk-UC4PNLMK.js";
-import "../chunk-GRAPJKDK.js";
-import "../chunk-2NVXFWQY.js";
-import "../chunk-FKDZU6YX.js";
-import "../chunk-SI2NC6UU.js";
+} from "../chunk-WM76AN4X.js";
+import "../chunk-IKYI63RF.js";
+import "../chunk-46F4BRUQ.js";
+import "../chunk-ECFEYB6Z.js";
+import "../chunk-RBJWPUI6.js";
+import "../chunk-5DCZL3BC.js";
 import {
   fetchAccountPublicKey
-} from "../chunk-MRQJCIFO.js";
+} from "../chunk-RFQWB5ZV.js";
 import "../chunk-6ICPEJY5.js";
 import {
   fetchModeOverride,
@@ -18,32 +18,31 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-BKK3JCTD.js";
-import "../chunk-CAJCCQ7N.js";
+} from "../chunk-GZSSAY6N.js";
+import "../chunk-HHX6IRSH.js";
+import "../chunk-CFMCV6Z7.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
-} from "../chunk-5ZSBQHCM.js";
-import "../chunk-M2L7625S.js";
-import "../chunk-GOEIW2VH.js";
+} from "../chunk-CDERSTBO.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-53UZN7JW.js";
-import "../chunk-TKTS3SIM.js";
-import "../chunk-S2ALW446.js";
-import "../chunk-WMO2XVG4.js";
+import "../chunk-SFQSOBLM.js";
+import "../chunk-PWUIPQ2I.js";
+import "../chunk-6TYKZ4DN.js";
+import "../chunk-4A6VUVXV.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-4JHEZ2PV.js";
+import "../chunk-IOVJVGIT.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-OWQOMGBF.js";
-import "../chunk-T3KMJI4W.js";
+} from "../chunk-EWC4P4ZL.js";
+import "../chunk-57M4ERJK.js";
 import {
   resolvePolicy
-} from "../chunk-JNU3LV47.js";
+} from "../chunk-K7EGWMDU.js";
 export {
   askUser,
   cancelQuestion,

package/dist/{upgrade-lock-YLXAU4AD.js → upgrade-lock-2BVFIDU4.js}

@@ -5,10 +5,10 @@ import {
   installWithUpgradeLock,
   ownsUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-XPQDBTW4.js";
-import "./chunk-4JHEZ2PV.js";
+} from "./chunk-S6EGJBI5.js";
+import "./chunk-IOVJVGIT.js";
 import "./chunk-AQFEP65J.js";
-import "./chunk-JNU3LV47.js";
+import "./chunk-K7EGWMDU.js";
 export {
   claimUpgradeLock,
   finishWithUpgradeLock,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pushary",
-  "version": "1.9.44",
+  "version": "1.9.45",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",

package/dist/chunk-5ZSBQHCM.js

@@ -1,161 +0,0 @@
-import {
-  clientErrorKindOf,
-  isAskUserResponse,
-  isBlockedActionClaim,
-  isGateReply,
-  isWaitForAnswerResponse,
-  reportClientError
-} from "./chunk-GOEIW2VH.js";
-import {
-  SubscriptionRequiredError,
-  callMcpTool
-} from "./chunk-53UZN7JW.js";
-import {
-  installNetworkDefaults
-} from "./chunk-S2ALW446.js";
-import {
-  getBaseUrl
-} from "./chunk-OWQOMGBF.js";
-import {
-  ASK_AGENT_NAME_MAX,
-  DECISION_LINE_MAX,
-  GATE_PERMISSION_MODE_MAX_LENGTH,
-  truncateLine
-} from "./chunk-JNU3LV47.js";
-
-// src/api.ts
-import { randomUUID } from "crypto";
-installNetworkDefaults();
-var isDecisionStopped = (result) => result.handoffAction === "stop" || ["cancelled", "unavailable", "stopped", "missing"].includes(result.status ?? "");
-var isAwayPaused = (result) => result.paused === true;
-var isLocalQuestionHandoff = (result) => !isAwayPaused(result) && (result.suppressed === true || result.noDevices === true || result.status === "terminal" || result.status === "notified");
-var waitsForThePhone = (result) => result.answered !== true && !isAwayPaused(result) && !isLocalQuestionHandoff(result);
-var STOPPED = { answered: false, handoffAction: "stop" };
-var unavailableQuestionUnlessSubscriptionRequired = (error) => {
-  if (error instanceof SubscriptionRequiredError) throw error;
-  return { correlationId: "", status: "unavailable" };
-};
-var truncateOptional = (text, max) => text === void 0 ? void 0 : truncateLine(text, max);
-var boundedPermissionMode = (value) => typeof value === "string" && value.length > 0 ? value.slice(0, GATE_PERMISSION_MODE_MAX_LENGTH) : void 0;
-var withinAskUserLimits = (params) => ({
-  ...params,
-  question: params.question,
-  agentName: truncateOptional(params.agentName, ASK_AGENT_NAME_MAX),
-  intent: truncateOptional(params.intent, DECISION_LINE_MAX),
-  action: truncateOptional(params.action, DECISION_LINE_MAX),
-  blocker: truncateOptional(params.blocker, DECISION_LINE_MAX),
-  permissionMode: boundedPermissionMode(params.permissionMode)
-});
-var askUser = async (apiKey, params, timeoutMs = 15e3) => {
-  const identified = params.toolUseId || params.requestId ? params : { ...params, requestId: randomUUID() };
-  const result = await callMcpTool(apiKey, "ask_user", { ...withinAskUserLimits(identified), pausedAware: true, wait: false }, { maxRetries: 3, timeoutMs });
-  if (!isAskUserResponse(result)) throw new Error("Invalid ask_user response");
-  return result;
-};
-var waitForAnswer = async (apiKey, correlationId, timeoutMs = 3e4, signal) => {
-  const result = await callMcpTool(apiKey, "wait_for_answer", {
-    correlationId,
-    timeoutMs
-  }, { timeoutMs: timeoutMs + 1e4, signal });
-  if (!isWaitForAnswerResponse(result)) throw new Error("Invalid wait_for_answer response");
-  return result;
-};
-var WAIT_RESPONSE_GRACE_MS = 2e3;
-var MIN_LONG_POLL_MS = 1e3;
-var MAX_LONG_POLL_MS = 3e4;
-var nextLongPollMs = (deadlineMs, nowMs) => {
-  const hold = Math.min(deadlineMs - nowMs - WAIT_RESPONSE_GRACE_MS, MAX_LONG_POLL_MS);
-  return hold >= MIN_LONG_POLL_MS ? hold : null;
-};
-var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
-  const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-  while (Date.now() < deadlineMs) {
-    const hold = nextLongPollMs(deadlineMs, Date.now());
-    if (hold === null) {
-      await sleep(Math.max(0, deadlineMs - Date.now()));
-      continue;
-    }
-    let answer;
-    try {
-      answer = await waitForAnswer(apiKey, correlationId, hold, AbortSignal.timeout(Math.max(1, deadlineMs - Date.now())));
-    } catch {
-      const late = await withdrawQuestion(apiKey, correlationId);
-      return late.answered ? late : STOPPED;
-    }
-    if (isDecisionStopped(answer) || answer.answered) return answer;
-    if (answer.status === "expired") return STOPPED;
-    await sleep(Math.min(pollInterval, Math.max(0, deadlineMs - Date.now())));
-  }
-  return withdrawQuestion(apiKey, correlationId);
-};
-var cancelQuestion = async (apiKey, correlationId, signal) => {
-  return callMcpTool(apiKey, "cancel_question", { correlationId }, { signal, timeoutMs: 4e3, maxRetries: 1 });
-};
-var withdrawQuestion = async (apiKey, correlationId, transport = { cancelQuestion, waitForAnswer }) => {
-  try {
-    const cancelled = await transport.cancelQuestion(apiKey, correlationId, AbortSignal.timeout(4e3));
-    if (!cancelled || isDecisionStopped(cancelled)) return STOPPED;
-    if (cancelled.cancelled === true) return { answered: false, status: "withdrawn" };
-    const late = await transport.waitForAnswer(apiKey, correlationId, 1e3, AbortSignal.timeout(2e3));
-    if (late.answered || isDecisionStopped(late)) return late;
-    return late.status === "expired" ? { answered: false, status: "withdrawn" } : STOPPED;
-  } catch {
-    return STOPPED;
-  }
-};
-var waitForQuestion = async (apiKey, question, deadlineMs, pollInterval = 2e3) => {
-  if (isDecisionStopped(question) || question.answered) return { ...question, answered: !!question.answered };
-  if (question.status === "expired") return STOPPED;
-  return isAwayPaused(question) || isLocalQuestionHandoff(question) ? withdrawQuestion(apiKey, question.correlationId) : pollForAnswer(apiKey, question.correlationId, deadlineMs, pollInterval);
-};
-var sendNotification = async (apiKey, params, timeoutMs = 15e3, signal) => {
-  await callMcpTool(apiKey, "send_notification", { ...params }, { maxRetries: signal ? 1 : 3, timeoutMs, signal });
-};
-var GATE_PATH = "/api/agent/gate";
-var BLOCKED_ACTION_CLAIM_PATH = "/api/agent/blocked-action/claim";
-var postAgentRequest = async (apiKey, path, body, timeoutMs) => {
-  const response = await fetch(`${getBaseUrl()}${path}`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json", Authorization: `Bearer ${apiKey}` },
-    body: JSON.stringify(body),
-    signal: AbortSignal.timeout(timeoutMs)
-  });
-  if (!response.ok) throw new Error(`${path} rejected (${response.status})`);
-  return response.json();
-};
-var requestGate = async (apiKey, request, timeoutMs = 15e3) => {
-  try {
-    const reply = await postAgentRequest(apiKey, GATE_PATH, request, timeoutMs);
-    return isGateReply(reply) ? reply : null;
-  } catch (error) {
-    void reportClientError({ kind: clientErrorKindOf(error), code: "gate_request_failed" });
-    return null;
-  }
-};
-var claimBlockedAction = async (apiKey, request, timeoutMs) => {
-  try {
-    const reply = await postAgentRequest(apiKey, BLOCKED_ACTION_CLAIM_PATH, request, timeoutMs);
-    return isBlockedActionClaim(reply) ? reply.granted : null;
-  } catch (error) {
-    void reportClientError({ kind: clientErrorKindOf(error), code: "blocked_action_claim_failed" });
-    return null;
-  }
-};
-
-export {
-  isDecisionStopped,
-  isAwayPaused,
-  isLocalQuestionHandoff,
-  waitsForThePhone,
-  unavailableQuestionUnlessSubscriptionRequired,
-  askUser,
-  waitForAnswer,
-  nextLongPollMs,
-  pollForAnswer,
-  cancelQuestion,
-  withdrawQuestion,
-  waitForQuestion,
-  sendNotification,
-  requestGate,
-  claimBlockedAction
-};

package/dist/chunk-SVCT5D7K.js

@@ -1,196 +0,0 @@
-import {
-  liveSessionSleep,
-  postLiveSession
-} from "./chunk-PQAFH4DF.js";
-import {
-  isWaitForAnswerResponse,
-  repoKeyFor,
-  writeDegraded
-} from "./chunk-GOEIW2VH.js";
-import {
-  callMcpTool
-} from "./chunk-53UZN7JW.js";
-import {
-  CODEX_NATIVE_APPROVAL_CAPABILITY,
-  CODEX_NATIVE_APPROVAL_METHODS,
-  canonicalJsonText,
-  codexNativeApprovalResponse,
-  parseCodexNativeApproval
-} from "./chunk-JNU3LV47.js";
-
-// src/codex-native-approvals.ts
-import { createHash, randomUUID } from "crypto";
-var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var validId = (id) => typeof id === "string" && id.length > 0 && id.length <= 200 || typeof id === "number" && Number.isSafeInteger(id);
-var PATCH_LIMIT = 32;
-var WAIT_LIMIT_MS = 3e5;
-var CodexNativeApprovals = class {
-  constructor(options) {
-    this.options = options;
-  }
-  generation = randomUUID();
-  pending = /* @__PURE__ */ new Map();
-  retired = /* @__PURE__ */ new Set();
-  patches = /* @__PURE__ */ new Map();
-  tasks = /* @__PURE__ */ new Set();
-  closed = false;
-  handle(message, threadId) {
-    if (this.closed || !message.method) return false;
-    const p = message.params ?? {};
-    if (message.id === void 0) {
-      this.observe(message.method, p);
-      return false;
-    }
-    if (!validId(message.id) || !CODEX_NATIVE_APPROVAL_METHODS.some((method) => method === message.method)) return false;
-    if (this.retired.has(message.id)) return true;
-    const changes = this.patches.get(this.patchKey(p));
-    const approval = parseCodexNativeApproval({ method: message.method, params: p, ...changes ? { changes } : {} });
-    if (!approval || approval.threadId !== threadId) return false;
-    const repoKey = repoKeyFor(approval.cwd ?? this.options.cwd);
-    const subjectHash = createHash("sha256").update(canonicalJsonText({ request: approval.request, cwd: this.options.cwd, repoKey })).digest("hex");
-    const existing = this.pending.get(message.id);
-    if (existing) {
-      if (existing.owner.subjectHash !== subjectHash) this.retire(message.id, existing, false);
-      return true;
-    }
-    if (this.pending.size >= 8) return false;
-    const owner = {
-      capability: CODEX_NATIVE_APPROVAL_CAPABILITY,
-      machineId: this.options.machineId,
-      generation: this.generation,
-      threadId: approval.threadId,
-      requestId: message.id,
-      subjectHash,
-      method: approval.request.method
-    };
-    const pending = { owner, approval, repoKey, controller: new AbortController(), replied: false, creating: true, correlationId: randomUUID() };
-    this.pending.set(message.id, pending);
-    const task = this.answer(pending).finally(() => {
-      this.tasks.delete(task);
-    });
-    this.tasks.add(task);
-    return true;
-  }
-  async close() {
-    this.closed = true;
-    for (const [id, pending] of this.pending) this.retire(id, pending, false);
-    await Promise.allSettled(this.tasks);
-  }
-  patchKey(params) {
-    return JSON.stringify([params.threadId, params.turnId, params.itemId]);
-  }
-  observe(method, params) {
-    if (method === "item/started" && record(params.item) && params.item.type === "fileChange" && Array.isArray(params.item.changes)) {
-      if (this.patches.size >= PATCH_LIMIT) this.patches.delete(this.patches.keys().next().value ?? "");
-      this.patches.set(this.patchKey({ ...params, itemId: params.item.id }), params.item.changes);
-    }
-    for (const [id, pending] of this.pending) {
-      const a = pending.approval;
-      const resolved = method === "serverRequest/resolved" && params.requestId === id;
-      const sameThread = params.threadId === a.threadId;
-      const closed = sameThread && (method === "thread/closed" || method === "thread/archived" || method === "turn/completed" && record(params.turn) && params.turn.id === a.turnId || method === "item/completed" && params.turnId === a.turnId && record(params.item) && params.item.id === a.itemId);
-      const patchChanged = method === "item/fileChange/patchUpdated" && sameThread && params.turnId === a.turnId && params.itemId === a.itemId;
-      if (resolved || closed || patchChanged) this.retire(id, pending, resolved || closed);
-    }
-    if (method === "item/fileChange/patchUpdated") this.patches.delete(this.patchKey(params));
-    if (method === "turn/completed" || method === "thread/closed") this.patches.clear();
-  }
-  retire(id, pending, nativeClosed) {
-    pending.controller.abort();
-    this.pending.delete(id);
-    this.retired.add(id);
-    if (!nativeClosed && !this.closed && !pending.replied && !this.options.shared) {
-      this.options.reply(id, codexNativeApprovalResponse(pending.approval, "Deny"));
-      pending.replied = true;
-    }
-    const task = this.cleanup(pending, nativeClosed).finally(() => {
-      this.tasks.delete(task);
-    });
-    this.tasks.add(task);
-  }
-  async post(pending, operation, signal) {
-    const boundedSignal = AbortSignal.any([signal, AbortSignal.timeout(this.options.requestTimeoutMs ?? 1e4)]);
-    const response = await postLiveSession({ ...this.options, signal: boundedSignal }, "/api/agent/native-approval", {
-      operation,
-      owner: pending.owner,
-      request: pending.approval.request,
-      correlationId: pending.correlationId,
-      claimId: pending.claimId,
-      localSurfaceAvailable: this.options.shared,
-      cwd: this.options.cwd,
-      repoKey: pending.repoKey
-    });
-    const body = await response.json();
-    if (!response.ok || !record(body)) throw new Error("Native approval service unavailable");
-    return body;
-  }
-  async cleanup(pending, nativeClosed) {
-    if (pending.creating || !pending.correlationId) return;
-    try {
-      const signal = AbortSignal.timeout(3e3);
-      while (!signal.aborted) {
-        const result = await this.post(pending, nativeClosed ? "request_closed" : "unavailable", signal);
-        if (result.recorded === true) return;
-        await liveSessionSleep(100, signal);
-      }
-      throw new Error("Native approval cleanup not recorded");
-    } catch {
-      writeDegraded("questions", { reason: "native_approval_cleanup_unconfirmed", fallback: "expiry", event: pending.owner.method });
-    }
-  }
-  async answer(pending) {
-    const signal = AbortSignal.any([this.options.signal, pending.controller.signal, AbortSignal.timeout(WAIT_LIMIT_MS)]);
-    try {
-      let created;
-      try {
-        created = await this.post(pending, "create", AbortSignal.timeout(this.options.requestTimeoutMs ?? 1e4));
-        pending.correlationId = typeof created.correlationId === "string" ? created.correlationId : void 0;
-      } finally {
-        pending.creating = false;
-      }
-      if (signal.aborted) return;
-      if (created.kind === "deny") {
-        this.options.reply(pending.owner.requestId, codexNativeApprovalResponse(pending.approval, "Deny"));
-        pending.replied = true;
-        return;
-      }
-      if (created.kind !== "ask" || !pending.correlationId) throw new Error("Native approval unavailable");
-      let answer = null;
-      while (!signal.aborted) {
-        const result = await callMcpTool(
-          this.options.apiKey,
-          "wait_for_answer",
-          { correlationId: pending.correlationId, timeoutMs: 25e3 },
-          { baseUrl: this.options.baseUrl, signal, timeoutMs: 27e3, maxRetries: 1 }
-        );
-        if (!isWaitForAnswerResponse(result)) throw new Error("Invalid native approval answer");
-        if (result.answered) {
-          answer = typeof result.value === "string" ? result.value : null;
-          break;
-        }
-        if (!("status" in result) || result.status !== "pending") throw new Error("Native approval no longer pending");
-        await liveSessionSleep(100, signal);
-      }
-      if (signal.aborted || !answer || !pending.approval.options.includes(answer)) throw new Error("No supported approval answer");
-      const claim = await this.post(pending, "claim", signal);
-      if (typeof claim.claimId !== "string" || !claim.claimId) throw new Error("Native approval dispatch refused");
-      pending.claimId = claim.claimId;
-      if (signal.aborted || this.pending.get(pending.owner.requestId) !== pending) return;
-      this.options.reply(pending.owner.requestId, codexNativeApprovalResponse(pending.approval, answer));
-      pending.replied = true;
-      await this.post(pending, "reply_queued", AbortSignal.timeout(3e3));
-    } catch {
-      if (!pending.controller.signal.aborted && !this.options.signal.aborted && !this.closed && !this.options.shared && !pending.replied) {
-        this.options.reply(pending.owner.requestId, codexNativeApprovalResponse(pending.approval, "Deny"));
-        pending.replied = true;
-      }
-      if (!pending.controller.signal.aborted && !this.options.signal.aborted) writeDegraded("questions", { reason: "native_approval_unavailable", fallback: this.options.shared ? "native client" : "refused", event: pending.owner.method });
-    } finally {
-      if (!pending.claimId || !pending.replied || signal.aborted) await this.cleanup(pending, false);
-    }
-  }
-};
-
-export {
-  CodexNativeApprovals
-};