pushary 1.9.49 → 1.9.51

package/dist/{chunk-OR5F63C2.js → chunk-LF3TLC7B.js}

@@ -2475,6 +2475,7 @@ var AUTH_REJECTION_REASONS = [
   "expired_key",
   "scope_denied",
   "oauth_rejected",
+  "session_rejected",
   "site_not_found",
   ...AGENT_SITE_REJECTION_REASONS
 ];
@@ -6156,149 +6157,6 @@ var hookActivationResult = (report) => {
   return report && !report.truncated && report.evidence.length === 1 ? report.evidence[0].result : "unverified";
 };
 
-// src/cli-package-name.ts
-var CANONICAL_PACKAGE = "pushary";
-var LEGACY_PACKAGE = "@pushary/agent-hooks";
-var CLI_PACKAGE_NAMES = [CANONICAL_PACKAGE, LEGACY_PACKAGE];
-var isCliPackageName = (value) => typeof value === "string" && CLI_PACKAGE_NAMES.some((name) => name === value);
-var cliPackagePathSegments = (name) => name.split("/");
-
-// src/global-package.ts
-import { posix, win32 } from "path";
-var OWNERSHIP_PROBE_COMMAND = "pushary-hook";
-var pathApiFor = (platform) => platform === "win32" ? win32 : posix;
-var POSIX_GLOBAL_ROOT_SEGMENTS = ["lib", "node_modules"];
-var UPGRADE_ENTRY_SEGMENTS = ["dist", "bin", "pushary-upgrade.js"];
-var globalRootFor = (prefix, platform) => platform === "win32" ? win32.join(prefix, "node_modules") : posix.join(prefix, ...POSIX_GLOBAL_ROOT_SEGMENTS);
-var globalPackageFolder = (root, name, platform) => pathApiFor(platform).join(root, ...cliPackagePathSegments(name));
-var globalUpgradeEntry = (prefix, name, platform) => pathApiFor(platform).join(globalPackageFolder(globalRootFor(prefix, platform), name, platform), ...UPGRADE_ENTRY_SEGMENTS);
-var isInsideFolder = (target, folder, platform) => {
-  const pathApi = pathApiFor(platform);
-  const relativePath = pathApi.relative(folder, target);
-  return relativePath !== "" && !relativePath.startsWith("..") && !pathApi.isAbsolute(relativePath);
-};
-var linkPointsInto = (evidence, targets, name) => evidence.globalRoots.some((root) => {
-  const folder = globalPackageFolder(root, name, evidence.platform);
-  return targets.some((target) => isInsideFolder(target, folder, evidence.platform));
-});
-var ownerFromInstalled = (installed, whenNone) => {
-  const [only, ...others] = installed;
-  if (only === void 0) return whenNone;
-  if (others.length > 0) return { kind: "unknown", reason: "both_installed" };
-  return { kind: "owned", name: only };
-};
-var decideCommandOwner = (evidence) => {
-  const { link } = evidence;
-  if (link.kind === "resolved") {
-    const name = CLI_PACKAGE_NAMES.find((candidate) => linkPointsInto(evidence, link.targets, candidate));
-    return name === void 0 ? { kind: "unknown", reason: "foreign_command" } : { kind: "owned", name };
-  }
-  const whenNone = link.kind === "absent" ? { kind: "none" } : { kind: "unknown", reason: "unreadable_command" };
-  return ownerFromInstalled(evidence.installed, whenNone);
-};
-var CMD_SHIM_TARGET = /"%(?:~dp0|dp0%)\\([^"]+?)"\s+%[*]/;
-var cmdShimTarget = (shimDir, contents) => {
-  const relativeTarget = CMD_SHIM_TARGET.exec(contents)?.[1];
-  return relativeTarget === void 0 ? void 0 : win32.resolve(shimDir, relativeTarget);
-};
-var launchedPackage = (ownName) => ownName ?? LEGACY_PACKAGE;
-var globalInstallTarget = (owner, ownName) => {
-  switch (owner.kind) {
-    case "owned":
-      return owner.name;
-    case "none":
-      return launchedPackage(ownName);
-    case "unknown":
-      return LEGACY_PACKAGE;
-  }
-};
-var isRecord2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-var declaresOwnershipProbe = (bin) => isRecord2(bin) && typeof bin[OWNERSHIP_PROBE_COMMAND] === "string";
-var cliManifestName = (manifest) => {
-  if (!isRecord2(manifest) || !isCliPackageName(manifest.name) || !declaresOwnershipProbe(manifest.bin)) return void 0;
-  return manifest.name;
-};
-var classifyGlobalFolder = (name, read) => {
-  if (read.kind === "unreadable") return { kind: "unseen" };
-  const { manifest } = read;
-  if (!isRecord2(manifest) || cliManifestName(manifest) !== name) return { kind: "foreign" };
-  return { kind: "ours", installed: { name, version: typeof manifest.version === "string" ? manifest.version : void 0 } };
-};
-var classifyGlobalInstall = (installed, owner) => {
-  const [only, ...others] = installed;
-  if (only === void 0) return { kind: "absent" };
-  if (others.length === 0) return { kind: "single", installed: only };
-  return { kind: "both", installed, owner };
-};
-var isUninstallable = (evidence) => evidence.listing !== "absent" && evidence.folder !== "foreign";
-var globalPackagesToUninstall = (evidence) => evidence.filter(isUninstallable).map((entry) => entry.name);
-var commandsPackage = (install) => {
-  if (install.kind === "single") return install.installed;
-  if (install.kind !== "both" || install.owner.kind !== "owned") return void 0;
-  const ownerName = install.owner.name;
-  return install.installed.find((installed) => installed.name === ownerName);
-};
-
-// src/cli/version.ts
-import { readFileSync } from "fs";
-import { dirname, join, parse } from "path";
-import { fileURLToPath } from "url";
-var UNKNOWN_VERSION = "0.0.0";
-var cliManifestNameAt = (manifestPath) => {
-  try {
-    return cliManifestName(JSON.parse(readFileSync(manifestPath, "utf-8")));
-  } catch {
-    return void 0;
-  }
-};
-var findOwnPackage = (start) => {
-  const { root } = parse(start);
-  let dir = start;
-  while (true) {
-    const name = cliManifestNameAt(join(dir, "package.json"));
-    if (name !== void 0) return { root: dir, name };
-    if (dir === root) return void 0;
-    const parent = dirname(dir);
-    if (parent === dir) return void 0;
-    dir = parent;
-  }
-};
-var runningPackage = () => {
-  try {
-    return findOwnPackage(dirname(fileURLToPath(import.meta.url)));
-  } catch {
-    return void 0;
-  }
-};
-var getPackageVersion = () => {
-  const root = ownPackageRoot();
-  return (root === void 0 ? void 0 : packageVersionAt(root)) ?? UNKNOWN_VERSION;
-};
-var ownPackageRoot = () => runningPackage()?.root;
-var ownPackageName = () => runningPackage()?.name;
-var packageVersionAt = (packageRoot) => {
-  try {
-    const manifest = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf-8"));
-    const version = manifest && typeof manifest === "object" && "version" in manifest ? manifest.version : void 0;
-    return typeof version === "string" ? version : void 0;
-  } catch {
-    return void 0;
-  }
-};
-var isNewerVersion = (candidate, current) => {
-  const a = candidate.split(".").map((part) => parseInt(part, 10) || 0);
-  const b = current.split(".").map((part) => parseInt(part, 10) || 0);
-  for (let i = 0; i < 3; i++) {
-    if ((a[i] ?? 0) > (b[i] ?? 0)) return true;
-    if ((a[i] ?? 0) < (b[i] ?? 0)) return false;
-  }
-  return false;
-};
-var RELEASE_VERSION = /^\d+\.\d+\.\d+$/;
-var isReleaseVersion = (value) => RELEASE_VERSION.test(value);
-var majorOf = (version) => parseInt(version.split(".")[0] ?? "", 10) || 0;
-var isSameMajorVersion = (candidate, current) => majorOf(candidate) === majorOf(current);
-
 export {
   CLAUDE_CONNECTOR_URL,
   CLAUDE_CONNECTOR_GUIDE,
@@ -6481,29 +6339,5 @@ export {
   readElicitationFields,
   planElicitationAsk,
   elicitationContent,
-  elicitationContentFromAnswers,
-  CANONICAL_PACKAGE,
-  LEGACY_PACKAGE,
-  CLI_PACKAGE_NAMES,
-  cliPackagePathSegments,
-  OWNERSHIP_PROBE_COMMAND,
-  POSIX_GLOBAL_ROOT_SEGMENTS,
-  globalRootFor,
-  globalPackageFolder,
-  globalUpgradeEntry,
-  decideCommandOwner,
-  cmdShimTarget,
-  launchedPackage,
-  globalInstallTarget,
-  classifyGlobalFolder,
-  classifyGlobalInstall,
-  globalPackagesToUninstall,
-  commandsPackage,
-  getPackageVersion,
-  ownPackageRoot,
-  ownPackageName,
-  packageVersionAt,
-  isNewerVersion,
-  isReleaseVersion,
-  isSameMajorVersion
+  elicitationContentFromAnswers
 };

package/dist/{chunk-QYBL4EHD.js → chunk-LXRQLDGW.js}

@@ -1,29 +1,29 @@
+import {
+  detectProviderLiveCapabilities,
+  expectedLaunchCapabilities,
+  hasSpawnProvider,
+  resolveControlPolicy
+} from "./chunk-WVSM3G4C.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-ZMYLVFXC.js";
+} from "./chunk-5CRQCIHR.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-XH3F66VD.js";
-import {
-  detectProviderLiveCapabilities,
-  expectedLaunchCapabilities,
-  hasSpawnProvider,
-  resolveControlPolicy
-} from "./chunk-OWQHE2VV.js";
+} from "./chunk-VYBH6D4X.js";
 import {
   getMachineId
-} from "./chunk-LY3OJFBW.js";
+} from "./chunk-KQBXPGXO.js";
 import {
   getBaseUrl
-} from "./chunk-VUS6QGND.js";
+} from "./chunk-CQ5JGRML.js";
 import {
   getPackageVersion
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-QTOLNRET.js";
 
 // src/machines.ts
 import { hostname } from "os";

package/dist/{chunk-ZOKMGBPR.js → chunk-MC4VY5LK.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {
@@ -36,7 +36,17 @@ var describeMode = (mode) => {
 var npxLatestCommandFor = (platform) => `${platform === "win32" ? "npx.cmd" : "npx"} pushary@latest`;
 var NPX_LATEST_COMMAND = npxLatestCommandFor(process.platform);
 var COMMAND_LIST = [
-  { name: "codex", module: "pushary-codex-session", summary: "Start Codex with Pushary native approvals", detail: ["Use --cwd <directory> to choose a terminal project.", "Use --desktop [app path] for an experimental fresh Desktop launch. Quit Desktop first; running apps are not attached."] },
+  {
+    name: "codex",
+    module: "pushary-codex-session",
+    summary: "Experimental Codex extras that ordinary setup does not turn on",
+    detail: [
+      "Use --app-cards on|off|status so the Codex app also asks Pushary before it uses an app on this Mac.",
+      "Use --desktop [app path] to do the same for one launch. Quit Codex first; a running app is not attached.",
+      "Use --cwd <directory> to start a managed Codex terminal session in a project."
+    ],
+    unlisted: true
+  },
   {
     name: "cowork",
     module: "pushary-cowork",
@@ -126,6 +136,7 @@ var COMMAND_LIST = [
   }
 ];
 var COMMANDS = COMMAND_LIST;
+var LISTED_COMMANDS = COMMANDS.filter((command) => !command.unlisted);
 var answersTo = (command, token) => command.name === token || (command.aliases ?? []).includes(token);
 var findCommand = (token) => COMMANDS.find((command) => answersTo(command, token));
 var isCommandName = (name) => COMMANDS.some((command) => command.name === name);
@@ -232,8 +243,8 @@ var USAGE_EXAMPLES = [
 ];
 var pad = (text, width) => text + " ".repeat(Math.max(0, width - text.length));
 var renderHelp = (version) => {
-  const width = Math.max(...COMMANDS.map((command) => command.name.length)) + 2;
-  const commandLines = COMMANDS.flatMap((command) => [
+  const width = Math.max(...LISTED_COMMANDS.map((command) => command.name.length)) + 2;
+  const commandLines = LISTED_COMMANDS.flatMap((command) => [
     `  ${pad(command.name, width)}${command.summary}`,
     ...(command.detail ?? []).map((line) => `  ${" ".repeat(width)}${line}`)
   ]);
@@ -287,7 +298,7 @@ export {
   resolveModeInput,
   describeMode,
   NPX_LATEST_COMMAND,
-  COMMANDS,
+  LISTED_COMMANDS,
   resolveCommandName,
   isInvocationOf,
   renderHelp,

package/dist/{chunk-OW4DNSQ6.js → chunk-NSY2V7XU.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-X3RCIOIH.js → chunk-ONCWYACA.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-XH3F66VD.js";
+} from "./chunk-VYBH6D4X.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-EP6S6VY3.js → chunk-PMJEN6CX.js}

@@ -1,7 +1,7 @@
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "./chunk-IF2UPWD2.js";
+} from "./chunk-26MUPAKS.js";
 import {
   AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
@@ -10,24 +10,24 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-YVO4HIHX.js";
+} from "./chunk-DT5CACWZ.js";
 import {
   askUser,
   isDecisionStopped,
   waitForQuestion
-} from "./chunk-AWMMABVB.js";
+} from "./chunk-2QPHUCXU.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-LZYJMSOY.js";
+} from "./chunk-3OLEGCMU.js";
 import {
   getMachineId
-} from "./chunk-LY3OJFBW.js";
+} from "./chunk-KQBXPGXO.js";
 import {
   machineDecisionFor,
   parseAgentQuestionAnswers,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-K73CBZKW.js → chunk-PTNSIGLB.js}

@@ -1,18 +1,18 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-LLRYP5TR.js";
+} from "./chunk-DT5Y55FI.js";
 import {
   keyPrefix
-} from "./chunk-XH3F66VD.js";
+} from "./chunk-VYBH6D4X.js";
 import {
   bridgeAgentKey
-} from "./chunk-ZYYQJSIO.js";
+} from "./chunk-YQDZ7ZIL.js";
 import {
   readJsonSafe
 } from "./chunk-AQFEP65J.js";
 import {
   isValidApiKey
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;