pushary 1.9.49 → 1.9.51

package/dist/{chunk-AWMMABVB.js → chunk-2QPHUCXU.js}

@@ -5,28 +5,61 @@ import {
 import {
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-LZYJMSOY.js";
+} from "./chunk-3OLEGCMU.js";
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-ABMEBN2R.js";
+} from "./chunk-UR7XX2DV.js";
 import {
   clientReportClaims
-} from "./chunk-ZYYQJSIO.js";
+} from "./chunk-YQDZ7ZIL.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-VUS6QGND.js";
+} from "./chunk-CQ5JGRML.js";
 import {
   ASK_AGENT_NAME_MAX,
   CLIENT_REPORT_PATH,
   DECISION_LINE_MAX,
   GATE_PERMISSION_MODE_MAX_LENGTH,
   degradedLine,
-  localRepoKey,
-  normalizeRepoRemote,
   truncateLine
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
+
+// src/api.ts
+import { randomUUID } from "crypto";
+
+// src/validate.ts
+var isPolicyConfig = (data) => {
+  if (!data || typeof data !== "object") return false;
+  const d = data;
+  return (d.resolvedAgent === void 0 || typeof d.resolvedAgent === "string") && Array.isArray(d.policies) && typeof d.defaultTimeoutSeconds === "number" && typeof d.defaultTimeoutAction === "string";
+};
+var isAskUserResponse = (data) => {
+  if (!data || typeof data !== "object") return false;
+  const d = data;
+  return typeof d.correlationId === "string" && typeof d.status === "string" && (d.answered === void 0 || typeof d.answered === "boolean") && (d.value === void 0 || typeof d.value === "string") && (d.note === void 0 || typeof d.note === "string") && (d.waitEndsAt === void 0 || typeof d.waitEndsAt === "string");
+};
+var isWaitForAnswerResponse = (data) => {
+  if (!data || typeof data !== "object") return false;
+  const d = data;
+  return typeof d.answered === "boolean";
+};
+var GATE_REPLY_KINDS = ["kill", "allow", "deny", "ask", "no_opinion"];
+var isSettlementOutputs = (value) => {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const outputs = value;
+  return (outputs.approve === void 0 || typeof outputs.approve === "string") && (outputs.deny === void 0 || typeof outputs.deny === "string");
+};
+var isGateReply = (data) => {
+  if (!data || typeof data !== "object") return false;
+  const d = data;
+  return GATE_REPLY_KINDS.includes(d.kind) && (d.output === void 0 || typeof d.output === "string") && (d.correlationId === void 0 || typeof d.correlationId === "string") && (d.deadlineSeconds === void 0 || typeof d.deadlineSeconds === "number") && (d.noDevices === void 0 || typeof d.noDevices === "boolean") && (d.suppressed === void 0 || typeof d.suppressed === "boolean") && (d.settlementOutputs === void 0 || isSettlementOutputs(d.settlementOutputs));
+};
+var isBlockedActionClaim = (data) => {
+  if (!data || typeof data !== "object") return false;
+  return typeof data.granted === "boolean";
+};
 
 // src/client-report-claim.ts
 import { createHash } from "crypto";
@@ -145,41 +178,6 @@ var writeDegraded = (subsystem, report) => {
   void reportClientError({ kind: "degraded", code: `${subsystem}:${report.reason}` });
 };
 
-// src/api.ts
-import { randomUUID } from "crypto";
-
-// src/validate.ts
-var isPolicyConfig = (data) => {
-  if (!data || typeof data !== "object") return false;
-  const d = data;
-  return (d.resolvedAgent === void 0 || typeof d.resolvedAgent === "string") && Array.isArray(d.policies) && typeof d.defaultTimeoutSeconds === "number" && typeof d.defaultTimeoutAction === "string";
-};
-var isAskUserResponse = (data) => {
-  if (!data || typeof data !== "object") return false;
-  const d = data;
-  return typeof d.correlationId === "string" && typeof d.status === "string" && (d.answered === void 0 || typeof d.answered === "boolean") && (d.value === void 0 || typeof d.value === "string") && (d.note === void 0 || typeof d.note === "string") && (d.waitEndsAt === void 0 || typeof d.waitEndsAt === "string");
-};
-var isWaitForAnswerResponse = (data) => {
-  if (!data || typeof data !== "object") return false;
-  const d = data;
-  return typeof d.answered === "boolean";
-};
-var GATE_REPLY_KINDS = ["kill", "allow", "deny", "ask", "no_opinion"];
-var isSettlementOutputs = (value) => {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const outputs = value;
-  return (outputs.approve === void 0 || typeof outputs.approve === "string") && (outputs.deny === void 0 || typeof outputs.deny === "string");
-};
-var isGateReply = (data) => {
-  if (!data || typeof data !== "object") return false;
-  const d = data;
-  return GATE_REPLY_KINDS.includes(d.kind) && (d.output === void 0 || typeof d.output === "string") && (d.correlationId === void 0 || typeof d.correlationId === "string") && (d.deadlineSeconds === void 0 || typeof d.deadlineSeconds === "number") && (d.noDevices === void 0 || typeof d.noDevices === "boolean") && (d.suppressed === void 0 || typeof d.suppressed === "boolean") && (d.settlementOutputs === void 0 || isSettlementOutputs(d.settlementOutputs));
-};
-var isBlockedActionClaim = (data) => {
-  if (!data || typeof data !== "object") return false;
-  return typeof data.granted === "boolean";
-};
-
 // src/api.ts
 installNetworkDefaults();
 var isDecisionStopped = (result) => result.handoffAction === "stop" || ["cancelled", "unavailable", "stopped", "missing"].includes(result.status ?? "");
@@ -202,17 +200,17 @@ var withinAskUserLimits = (params) => ({
   blocker: truncateOptional(params.blocker, DECISION_LINE_MAX),
   permissionMode: boundedPermissionMode(params.permissionMode)
 });
-var askUser = async (apiKey, params, timeoutMs = 15e3) => {
+var askUser = async (apiKey, params, timeoutMs = 15e3, baseUrl) => {
   const identified = params.toolUseId || params.requestId ? params : { ...params, requestId: randomUUID() };
-  const result = await callMcpTool(apiKey, "ask_user", { ...withinAskUserLimits(identified), pausedAware: true, wait: false }, { maxRetries: 3, timeoutMs });
+  const result = await callMcpTool(apiKey, "ask_user", { ...withinAskUserLimits(identified), pausedAware: true, wait: false }, { maxRetries: 3, timeoutMs, baseUrl });
   if (!isAskUserResponse(result)) throw new Error("Invalid ask_user response");
   return result;
 };
-var waitForAnswer = async (apiKey, correlationId, timeoutMs = 3e4, signal) => {
+var waitForAnswer = async (apiKey, correlationId, timeoutMs = 3e4, signal, baseUrl) => {
   const result = await callMcpTool(apiKey, "wait_for_answer", {
     correlationId,
     timeoutMs
-  }, { timeoutMs: timeoutMs + 1e4, signal });
+  }, { timeoutMs: timeoutMs + 1e4, signal, baseUrl });
   if (!isWaitForAnswerResponse(result)) throw new Error("Invalid wait_for_answer response");
   return result;
 };
@@ -224,7 +222,7 @@ var nextLongPollMs = (deadlineMs, nowMs) => {
   return hold >= MIN_LONG_POLL_MS ? hold : null;
 };
 var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
-  const sleep = (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
+  const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
   while (Date.now() < deadlineMs) {
     const hold = nextLongPollMs(deadlineMs, Date.now());
     if (hold === null) {
@@ -244,8 +242,8 @@ var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3
   }
   return withdrawQuestion(apiKey, correlationId);
 };
-var cancelQuestion = async (apiKey, correlationId, signal) => {
-  return callMcpTool(apiKey, "cancel_question", { correlationId }, { signal, timeoutMs: 4e3, maxRetries: 1 });
+var cancelQuestion = async (apiKey, correlationId, signal, baseUrl) => {
+  return callMcpTool(apiKey, "cancel_question", { correlationId }, { signal, timeoutMs: 4e3, maxRetries: 1, baseUrl });
 };
 var withdrawQuestion = async (apiKey, correlationId, transport = { cancelQuestion, waitForAnswer }) => {
   try {
@@ -298,90 +296,6 @@ var claimBlockedAction = async (apiKey, request, timeoutMs) => {
   }
 };
 
-// src/repo.ts
-import { existsSync, readFileSync, statSync } from "fs";
-import { basename, dirname, isAbsolute, join as join2, resolve } from "path";
-var MAX_PARENT_WALK = 64;
-var GIT_FILE_PREFIX = "gitdir:";
-var findGitDir = (startDir) => {
-  let current = resolve(startDir);
-  for (let depth = 0; depth < MAX_PARENT_WALK; depth += 1) {
-    const candidate = join2(current, ".git");
-    try {
-      if (existsSync(candidate)) {
-        if (statSync(candidate).isDirectory()) return candidate;
-        const pointer = readFileSync(candidate, "utf-8").trim();
-        if (pointer.startsWith(GIT_FILE_PREFIX)) {
-          const target = pointer.slice(GIT_FILE_PREFIX.length).trim();
-          return isAbsolute(target) ? target : resolve(current, target);
-        }
-      }
-    } catch {
-    }
-    const parent = dirname(current);
-    if (parent === current) return void 0;
-    current = parent;
-  }
-  return void 0;
-};
-var configPathFor = (gitDir) => {
-  const index = gitDir.replace(/\\/g, "/").indexOf("/worktrees/");
-  return index === -1 ? join2(gitDir, "config") : join2(gitDir.slice(0, index), "config");
-};
-var ORIGIN_SECTION = /^\[remote "origin"\]/;
-var SECTION_HEADER = /^\[/;
-var URL_LINE = /^url\s*=\s*(.+)$/;
-var readOriginRemote = (gitDir) => {
-  try {
-    const configPath = configPathFor(gitDir);
-    if (!existsSync(configPath)) return void 0;
-    let inOrigin = false;
-    for (const rawLine of readFileSync(configPath, "utf-8").split("\n")) {
-      const line = rawLine.trim();
-      if (SECTION_HEADER.test(line)) {
-        inOrigin = ORIGIN_SECTION.test(line);
-        continue;
-      }
-      if (!inOrigin) continue;
-      const url = URL_LINE.exec(line);
-      if (url) return url[1]?.trim();
-    }
-  } catch {
-  }
-  return void 0;
-};
-var deriveRepoKey = (cwd) => {
-  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
-  try {
-    const gitDir = findGitDir(dir);
-    if (gitDir) {
-      const remote = readOriginRemote(gitDir);
-      const normalized = remote ? normalizeRepoRemote(remote) : void 0;
-      if (normalized) return normalized;
-      const root = gitDir.endsWith(".git") ? dirname(gitDir) : dir;
-      return localRepoKey(basename(root));
-    }
-    return localRepoKey(basename(resolve(dir)));
-  } catch {
-    return void 0;
-  }
-};
-var repoKeyCache = /* @__PURE__ */ new Map();
-var REPO_KEY_ENV = "PUSHARY_REPO_KEY";
-var repoKeyFor = (cwd) => {
-  const override = process.env[REPO_KEY_ENV];
-  if (typeof override === "string") {
-    const trimmed = override.trim();
-    if (trimmed.toLowerCase() === "off") return void 0;
-    if (trimmed.length > 0) return trimmed.toLowerCase();
-  }
-  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
-  if (repoKeyCache.has(dir)) return repoKeyCache.get(dir);
-  const derived = deriveRepoKey(dir);
-  repoKeyCache.set(dir, derived);
-  return derived;
-};
-
 export {
   reportClientError,
   exitAfterClientReports,
@@ -397,6 +311,7 @@ export {
   unavailableQuestionUnlessSubscriptionRequired,
   askUser,
   waitForAnswer,
+  WAIT_RESPONSE_GRACE_MS,
   nextLongPollMs,
   pollForAnswer,
   cancelQuestion,
@@ -404,6 +319,5 @@ export {
   waitForQuestion,
   sendNotification,
   requestGate,
-  claimBlockedAction,
-  repoKeyFor
+  claimBlockedAction
 };

package/dist/{chunk-WEY5ZHDB.js → chunk-2YSCVT6Q.js}

@@ -2,23 +2,23 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-25SYEAW4.js";
+} from "./chunk-3ICRY72Q.js";
 import {
   AGENT_CHOICES
-} from "./chunk-PA54A437.js";
+} from "./chunk-BUXDR6US.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-XTVEW2NG.js";
+} from "./chunk-EGKD4S5H.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-ZYYQJSIO.js";
+} from "./chunk-YQDZ7ZIL.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/chunk-36NGFHE4.js

@@ -0,0 +1,72 @@
+// src/codex-engine-fallback.ts
+import { spawn } from "child_process";
+import { rmSync } from "fs";
+import { join } from "path";
+var CODEX_APP_LAUNCH_VARIABLE = "CODEX_CLI_PATH";
+var CODEX_ENGINE_PENDING_VARIABLE = "PUSHARY_CODEX_ENGINE_PENDING";
+var CODEX_ENGINE_DIRECTORY = "Contents/Resources/codex-cli";
+var CODEX_ENGINE_ENTRYPOINT = "bin/codex";
+var CODEX_ENGINE_MANIFEST = "codex-package.json";
+var FORWARDED_SIGNALS = ["SIGINT", "SIGTERM", "SIGHUP"];
+var COULD_NOT_RUN = 1;
+var LEFT_TO_THE_LAUNCHER = 1;
+var RUNS_WITHOUT_PUSHARY = "[pushary] Pushary could not start, so Codex runs without it.\n";
+var NO_SUCH_PROCESS = "ESRCH";
+var ADOPTED_BY_THE_SYSTEM = 1;
+var codexEngineInside = (app) => join(app, CODEX_ENGINE_DIRECTORY, CODEX_ENGINE_ENTRYPOINT);
+var codexEngineEnvironment = (engine) => {
+  const { [CODEX_ENGINE_PENDING_VARIABLE]: _pending, ...inherited } = process.env;
+  return { ...inherited, [CODEX_APP_LAUNCH_VARIABLE]: engine };
+};
+var launcherWaitingOnThisProcess = () => process.env[CODEX_ENGINE_PENDING_VARIABLE] ? process.ppid : null;
+var launcherIsGone = (launcher) => {
+  if (launcher === ADOPTED_BY_THE_SYSTEM) return true;
+  try {
+    process.kill(launcher, 0);
+    return false;
+  } catch (error) {
+    return error instanceof Error && "code" in error && error.code === NO_SUCH_PROCESS;
+  }
+};
+var tellTheLauncherTheEngineStarted = () => {
+  const pending = process.env[CODEX_ENGINE_PENDING_VARIABLE];
+  if (!pending) return;
+  try {
+    rmSync(pending, { force: true });
+  } catch {
+    return;
+  }
+};
+var runTheEngineWithoutPushary = (app, engineArgs) => new Promise((resolve) => {
+  const engine = codexEngineInside(app);
+  const child = spawn(engine, [...engineArgs], { stdio: "inherit", env: codexEngineEnvironment(engine) });
+  const forward = (signal) => {
+    child.kill(signal);
+  };
+  const finish = (code) => {
+    for (const signal of FORWARDED_SIGNALS) process.off(signal, forward);
+    resolve(code);
+  };
+  for (const signal of FORWARDED_SIGNALS) process.on(signal, forward);
+  child.once("error", () => finish(COULD_NOT_RUN));
+  child.once("close", (code) => finish(code ?? COULD_NOT_RUN));
+});
+var letCodexRunWithoutPushary = (app, engineArgs) => {
+  if (launcherWaitingOnThisProcess() !== null) return Promise.resolve(LEFT_TO_THE_LAUNCHER);
+  process.stderr.write(RUNS_WITHOUT_PUSHARY);
+  return runTheEngineWithoutPushary(app, engineArgs);
+};
+
+export {
+  CODEX_APP_LAUNCH_VARIABLE,
+  CODEX_ENGINE_PENDING_VARIABLE,
+  CODEX_ENGINE_DIRECTORY,
+  CODEX_ENGINE_ENTRYPOINT,
+  CODEX_ENGINE_MANIFEST,
+  codexEngineInside,
+  codexEngineEnvironment,
+  launcherWaitingOnThisProcess,
+  launcherIsGone,
+  tellTheLauncherTheEngineStarted,
+  letCodexRunWithoutPushary
+};

package/dist/{chunk-25SYEAW4.js → chunk-3ICRY72Q.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-B7LV6W7U.js";
+} from "./chunk-3RPN7AAT.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-ZYYQJSIO.js";
+} from "./chunk-YQDZ7ZIL.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-LZYJMSOY.js → chunk-3OLEGCMU.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-34RXPM5U.js";
+} from "./chunk-SRXBOMSR.js";
 import {
   installNetworkDefaults
-} from "./chunk-ABMEBN2R.js";
+} from "./chunk-UR7XX2DV.js";
 import {
   getBaseUrl
-} from "./chunk-VUS6QGND.js";
+} from "./chunk-CQ5JGRML.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-B7LV6W7U.js → chunk-3RPN7AAT.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-VCZN7NAB.js → chunk-3YAOJEHG.js}

@@ -1,16 +1,18 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-LLRYP5TR.js";
+} from "./chunk-DT5Y55FI.js";
 import {
   grokHome
-} from "./chunk-Y74IJ2IO.js";
+} from "./chunk-4JM2CK2A.js";
+import {
+  codexHomeFrom
+} from "./chunk-YQDZ7ZIL.js";
 import {
-  codexHomeFrom,
   resolvePathBinary
-} from "./chunk-ZYYQJSIO.js";
+} from "./chunk-JZDRR7BL.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-TGCIFEDE.js → chunk-43NXSBNZ.js}

@@ -4,19 +4,19 @@ import {
   outcomeOfFailedAsk,
   reportMachineDenial,
   storedWaitDeadline
-} from "./chunk-EP6S6VY3.js";
+} from "./chunk-PMJEN6CX.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-Y7WD72J7.js";
+} from "./chunk-7CLLWDCP.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-IF2UPWD2.js";
+} from "./chunk-26MUPAKS.js";
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-Y74IJ2IO.js";
+} from "./chunk-4JM2CK2A.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -40,7 +40,10 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-YVO4HIHX.js";
+} from "./chunk-DT5CACWZ.js";
+import {
+  repoKeyFor
+} from "./chunk-JBT3ZSJS.js";
 import {
   askUser,
   cancelQuestion,
@@ -49,22 +52,21 @@ import {
   isDecisionStopped,
   isLocalQuestionHandoff,
   pollForAnswer,
-  repoKeyFor,
   requestGate,
   sendNotification,
   waitForQuestion,
   waitsForThePhone
-} from "./chunk-AWMMABVB.js";
+} from "./chunk-2QPHUCXU.js";
 import {
   getMachineId
-} from "./chunk-LY3OJFBW.js";
+} from "./chunk-KQBXPGXO.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-VUS6QGND.js";
+} from "./chunk-CQ5JGRML.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ZOKMGBPR.js";
+} from "./chunk-MC4VY5LK.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -109,7 +111,7 @@ import {
   resolveGate,
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";

package/dist/{chunk-Y74IJ2IO.js → chunk-4JM2CK2A.js}

@@ -3,18 +3,18 @@ import {
   addGeminiMcpServer,
   removeGeminiMcpServer,
   supportedClaudeEvents
-} from "./chunk-25SYEAW4.js";
+} from "./chunk-3ICRY72Q.js";
 import {
   CLAUDE_CODE_AGENT,
   compatibleToolLookup
-} from "./chunk-YVO4HIHX.js";
+} from "./chunk-DT5CACWZ.js";
 import {
   guardBinary,
   guardBinaryRefusing,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-ZYYQJSIO.js";
+} from "./chunk-YQDZ7ZIL.js";
 import {
   HOOK_LOCATOR_BINARY,
   PHONE_ANSWERED_TOOLS,
@@ -25,7 +25,7 @@ import {
   pusharyMissingReason,
   refusalOutput,
   withHookHoldBudget
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-KEAIIVW3.js → chunk-4QQEUJL4.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-VUS6QGND.js";
+} from "./chunk-CQ5JGRML.js";
 import {
   normalizeInstallSource
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-XNZB274I.js → chunk-5463UUO2.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-ZMYLVFXC.js → chunk-5CRQCIHR.js}

@@ -1,17 +1,19 @@
-import {
-  readControlMode
-} from "./chunk-XH3F66VD.js";
 import {
   needsShell,
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
+import {
+  readControlMode
+} from "./chunk-VYBH6D4X.js";
 import {
   getMachineId
-} from "./chunk-LY3OJFBW.js";
+} from "./chunk-KQBXPGXO.js";
+import {
+  pusharyDir
+} from "./chunk-YQDZ7ZIL.js";
 import {
-  pusharyDir,
   resolveGlobalBinary
-} from "./chunk-ZYYQJSIO.js";
+} from "./chunk-JZDRR7BL.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,15 +22,17 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "./chunk-VUS6QGND.js";
+} from "./chunk-CQ5JGRML.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
   getPackageVersion,
   globalPackageFolder,
-  globalRootFor,
+  globalRootFor
+} from "./chunk-QTOLNRET.js";
+import {
   isRecord
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";
@@ -1121,6 +1125,7 @@ export {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   DAEMON_LEASE_RENEW_INTERVAL_MS,
+  xml,
   parseDaemonAction,
   manageDaemonService,
   hasDaemonServiceDefinition,

package/dist/{chunk-KIO2MZQC.js → chunk-6QPRQVQM.js}

@@ -6,12 +6,14 @@ import {
   CODEX_REQUIRED_APPROVAL_EVENTS,
   codexHome,
   codexHooksJsonIn,
-  isPusharyCodexCommand,
+  isPusharyCodexCommand
+} from "./chunk-YQDZ7ZIL.js";
+import {
   resolvePathBinary
-} from "./chunk-ZYYQJSIO.js";
+} from "./chunk-JZDRR7BL.js";
 import {
   getPackageVersion
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-QTOLNRET.js";
 
 // src/codex-app-server.ts
 import { existsSync, realpathSync } from "fs";

package/dist/{chunk-4PCJ6DYK.js → chunk-6SWMKF5E.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-XH3F66VD.js";
+} from "./chunk-VYBH6D4X.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-ZOKMGBPR.js";
+} from "./chunk-MC4VY5LK.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-Y7WD72J7.js → chunk-7CLLWDCP.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-OR5F63C2.js";
+} from "./chunk-LF3TLC7B.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";