pushary 1.9.56 → 1.9.58

package/dist/{chunk-JPTFFZWY.js → chunk-RGQEULXD.js}

@@ -4,19 +4,19 @@ import {
   outcomeOfFailedAsk,
   reportMachineDenial,
   storedWaitDeadline
-} from "./chunk-MVW5WS6F.js";
+} from "./chunk-HRHAZ3GE.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-FLUKEZMH.js";
+} from "./chunk-JYXIARGW.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-SM2DT5KP.js";
+} from "./chunk-VPZ5K72D.js";
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-WNVQPGLH.js";
+} from "./chunk-XWY4UW62.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -40,10 +40,10 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-724266XT.js";
+} from "./chunk-RF74KBF5.js";
 import {
   repoKeyFor
-} from "./chunk-S3CQBNUU.js";
+} from "./chunk-XXNT4FGA.js";
 import {
   askUser,
   cancelQuestion,
@@ -56,17 +56,17 @@ import {
   sendNotification,
   waitForQuestion,
   waitsForThePhone
-} from "./chunk-J5HQNZXQ.js";
+} from "./chunk-DQ565WFA.js";
 import {
   getMachineId
-} from "./chunk-SMMDQXI2.js";
+} from "./chunk-IJ6XKKQW.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-MWBFB7WA.js";
+} from "./chunk-LVDC3RUE.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-T4IAMIX4.js";
+} from "./chunk-5SFM6XB4.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -111,7 +111,7 @@ import {
   resolveGate,
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason
-} from "./chunk-WACFIQYA.js";
+} from "./chunk-GZL3KEPC.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";

package/dist/{chunk-5HRXOANL.js → chunk-S54YLXWW.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-32MSOGMD.js";
+} from "./chunk-5DZHKNBU.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-MWBFB7WA.js";
+} from "./chunk-LVDC3RUE.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-WACFIQYA.js";
+} from "./chunk-GZL3KEPC.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-M7ZXKMVX.js → chunk-S5LX25XE.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-MWBFB7WA.js";
+} from "./chunk-LVDC3RUE.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-JTQHC3RV.js → chunk-T2AC5VFQ.js}

@@ -1,15 +1,15 @@
 import {
   compatibleConfigFile
-} from "./chunk-WNVQPGLH.js";
+} from "./chunk-XWY4UW62.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-74DKFWU2.js";
+} from "./chunk-KSVCCSAO.js";
 import {
   AGENT_CHOICES
-} from "./chunk-ZMRO6ESW.js";
+} from "./chunk-ECJJKDP7.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -18,7 +18,7 @@ import {
   guardedArgv,
   pusharyDir,
   vscodePluginDir
-} from "./chunk-57EOP757.js";
+} from "./chunk-MYBCXDIL.js";
 import {
   readJsonSafe
 } from "./chunk-QENTGE75.js";
@@ -29,7 +29,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-WACFIQYA.js";
+} from "./chunk-GZL3KEPC.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-VRPDHJGB.js → chunk-T2BEIPK2.js}

@@ -1,18 +1,18 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-JTQHC3RV.js";
+} from "./chunk-T2AC5VFQ.js";
 import {
   keyPrefix
-} from "./chunk-YBE2KH2U.js";
+} from "./chunk-IRZ5FVWG.js";
 import {
   bridgeAgentKey
-} from "./chunk-57EOP757.js";
+} from "./chunk-MYBCXDIL.js";
 import {
   readJsonSafe
 } from "./chunk-QENTGE75.js";
 import {
   isValidApiKey
-} from "./chunk-WACFIQYA.js";
+} from "./chunk-GZL3KEPC.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-FFGW45DJ.js → chunk-TN74MUMB.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-QW3FRUFB.js";
 import {
   ensureDaemonRunning
-} from "./chunk-DUACX6E3.js";
+} from "./chunk-QP3XPS5U.js";
 import {
   hookOwnerOf
-} from "./chunk-74DKFWU2.js";
+} from "./chunk-KSVCCSAO.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-FXW3FW4A.js";
+} from "./chunk-JSQOHMNJ.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-LW4ZEC3A.js";
+} from "./chunk-N3NSWWNU.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-4US3BCQJ.js";
+} from "./chunk-C3IWX6KU.js";
 import {
   readTranscriptPreference
-} from "./chunk-YBE2KH2U.js";
+} from "./chunk-IRZ5FVWG.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-57EOP757.js";
+} from "./chunk-MYBCXDIL.js";
 import {
   writeJsonAtomic
 } from "./chunk-QENTGE75.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-MWBFB7WA.js";
+} from "./chunk-LVDC3RUE.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-6U3L4K57.js → chunk-UMVVQXAC.js}

@@ -7,10 +7,10 @@ import {
   codexHome,
   codexHooksJsonIn,
   isPusharyCodexCommand
-} from "./chunk-57EOP757.js";
+} from "./chunk-MYBCXDIL.js";
 import {
   resolvePathBinary
-} from "./chunk-T6GEEMVC.js";
+} from "./chunk-WVP6UQG3.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";

package/dist/{chunk-DFZTZRKL.js → chunk-VLJ5C6IT.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-V2AMLVMD.js";
+} from "./chunk-4YNNAF53.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
 import {
   readKeySource
-} from "./chunk-YBE2KH2U.js";
+} from "./chunk-IRZ5FVWG.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-5HRXOANL.js";
+} from "./chunk-S54YLXWW.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-MWBFB7WA.js";
+} from "./chunk-LVDC3RUE.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-SM2DT5KP.js → chunk-VPZ5K72D.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-724266XT.js";
+} from "./chunk-RF74KBF5.js";
 
 // src/answer.ts
 var isDeferAnswer = (value) => value === "defer";

package/dist/{chunk-T6GEEMVC.js → chunk-WVP6UQG3.js}

@@ -360,9 +360,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-6M2UXUUL.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-G2ZPV7ZO.js");
-    const { autoUpdateLock } = await import("./paths-5PWAQF63.js");
+    const { withUpgradeLock } = await import("./global-upgrade-IPWV5PTM.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-ML73QXIG.js");
+    const { autoUpdateLock } = await import("./paths-IZTNMJAQ.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;

package/dist/{chunk-JSS5RG65.js → chunk-WXZN5CS3.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-QENTGE75.js";
 import {
   configFilePath
-} from "./chunk-MWBFB7WA.js";
+} from "./chunk-LVDC3RUE.js";
 import {
   readSetupOutcomeProperties
-} from "./chunk-WACFIQYA.js";
+} from "./chunk-GZL3KEPC.js";
 
 // src/hooks-spec.ts
 var CURSOR_GATE_SCRIPT = "pushary-gate.mjs";

package/dist/{chunk-I6OGFHJT.js → chunk-X6F4BQEE.js}

@@ -1,9 +1,9 @@
 import {
   APPROVAL_SETTINGS_PATH
-} from "./chunk-DFZTZRKL.js";
+} from "./chunk-VLJ5C6IT.js";
 import {
   readMacAppAgentKey
-} from "./chunk-VRPDHJGB.js";
+} from "./chunk-T2BEIPK2.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -13,13 +13,13 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-YBE2KH2U.js";
+} from "./chunk-IRZ5FVWG.js";
 import {
   absoluteUrl
-} from "./chunk-5HRXOANL.js";
+} from "./chunk-S54YLXWW.js";
 import {
   isValidApiKey
-} from "./chunk-WACFIQYA.js";
+} from "./chunk-GZL3KEPC.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";

package/dist/{chunk-HTN7SMKB.js → chunk-XEJV3QSS.js}

@@ -1,4 +1,5 @@
 import {
+  LAUNCHCTL,
   codexAppOnThisMac,
   codexEngineBehindLauncher,
   codexPassThroughScript,
@@ -7,13 +8,13 @@ import {
   everyProgramFileIsThere,
   installedCodexApp,
   shellQuoted
-} from "./chunk-RZF2GIPI.js";
+} from "./chunk-ZJNU32VE.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-DUACX6E3.js";
+} from "./chunk-QP3XPS5U.js";
 import {
   CODEX_APP_LAUNCH_AT_LOGIN_VERB,
   CODEX_APP_LAUNCH_VARIABLE
@@ -211,7 +212,6 @@ var waitForMacAppExit = (attempts = 20, everyMs = 250) => {
 // src/codex-app-cards-switch.ts
 var CODEX_APP_CARDS_LOGIN_ITEM = "com.pushary.codex-app-cards";
 var CODEX_APP_CARDS_DIRECTORY = "codex-app";
-var LAUNCHCTL = "/bin/launchctl";
 var LAUNCHER_NAME = "codex";
 var RECEIPT_NAME = "turned-on.json";
 var TURNED_OFF_NAME = "turned-off";
@@ -276,14 +276,14 @@ var codexAppCardsReceiptFrom = (contents) => {
   const { entry, app, engine } = parsed;
   return Array.isArray(entry) && entry.length > 0 && entry.every(isAString) && isAString(app) && isAString(engine) && isAbsolute2(engine) ? { entry, app, engine } : null;
 };
+var filesThisVersionWrites = (paths, receipt) => ({
+  launcherScript: desktopProxyScript(receipt.entry, receipt.app, receipt.engine, { turnsItselfOffWithoutTheEngine: true }),
+  loginItem: codexAppCardsLoginItem(paths.launcherPath, receipt.engine, receipt.entry)
+});
 var codexAppCardsInstallation = (input) => {
   const paths = codexAppCardsPaths(input.homeDir, input.uid);
-  return {
-    paths,
-    launcherScript: desktopProxyScript(input.entry, input.app, input.engine, { turnsItselfOffWithoutTheEngine: true }),
-    loginItem: codexAppCardsLoginItem(paths.launcherPath, input.engine, input.entry),
-    receipt: { entry: input.entry, app: input.app, engine: input.engine }
-  };
+  const receipt = { entry: input.entry, app: input.app, engine: input.engine };
+  return { paths, ...filesThisVersionWrites(paths, receipt), receipt };
 };
 var isAbsolutePath = (value) => value.startsWith("/");
 var whatTheLauncherCannotRun = (receipt, machine) => {
@@ -292,8 +292,10 @@ var whatTheLauncherCannotRun = (receipt, machine) => {
   const missing = receipt.entry.filter(isAbsolutePath).find((path) => !machine.exists(path));
   return missing === void 0 ? null : { kind: "on_but_pushary_is_missing", missing };
 };
+var LAUNCH_SETTING_NOT_READ = "The setting that starts the Codex app could not be read, so nothing was changed";
+var launchVariableOrNoneWhenNotRead = (machine) => machine.launchVariable() ?? "";
 var codexAppCardsStatus = (paths, machine) => {
-  const value = machine.launchVariable();
+  const value = launchVariableOrNoneWhenNotRead(machine);
   if (value.length > 0 && value !== paths.launcherPath) return { kind: "another_program_owns_the_launch", value };
   const launcherIsThere = machine.exists(paths.launcherPath);
   const setForThisLogin = value === paths.launcherPath && launcherIsThere;
@@ -306,7 +308,7 @@ var codexAppCardsStatus = (paths, machine) => {
 };
 var turnCodexAppCardsOn = (installation, machine) => {
   const { paths } = installation;
-  const value = machine.launchVariable();
+  const value = launchVariableOrNoneWhenNotRead(machine);
   if (value.length > 0 && value !== paths.launcherPath) return { kind: "another_program_owns_the_launch", value };
   machine.makeDirectory(paths.launcherDirectory, PRIVATE_DIRECTORY_MODE);
   machine.writeFile(paths.launcherPath, installation.launcherScript, PRIVATE_PROGRAM_MODE);
@@ -321,7 +323,7 @@ var turnCodexAppCardsOn = (installation, machine) => {
 var setCodexAppLaunchAtLogin = (paths, machine) => {
   const isTurnedOn = machine.exists(paths.launcherPath) && machine.exists(paths.loginItemPath);
   const cannotRun = whatTheLauncherCannotRun(codexAppCardsReceiptFrom(machine.readFile(paths.receiptPath)), machine);
-  if (!isTurnedOn || cannotRun !== null || machine.launchVariable().length > 0) return "left_as_it_is";
+  if (!isTurnedOn || cannotRun !== null || launchVariableOrNoneWhenNotRead(machine).length > 0) return "left_as_it_is";
   machine.setLaunchVariable(paths.launcherPath);
   return "set";
 };
@@ -336,6 +338,7 @@ var leaveOnlyThePathToTheEngine = (paths, machine) => {
 };
 var turnCodexAppCardsOff = (paths, machine) => {
   const value = machine.launchVariable();
+  if (value === null) throw new Error(LAUNCH_SETTING_NOT_READ);
   const ours = value === paths.launcherPath;
   const loginItemIsThere = machine.exists(paths.loginItemPath);
   leaveOnlyThePathToTheEngine(paths, machine);
@@ -352,18 +355,28 @@ var rememberCodexAppCardsWereTurnedOff = (paths, machine) => {
   machine.writeFile(paths.turnedOffPath, "", PRIVATE_FILE_MODE);
 };
 var turnedOnByTheMacApp = (receipt) => receipt !== null && isTheMacAppsHelper(receipt.entry);
-var codexAppCardsReport = (paths, machine) => ({
-  status: codexAppCardsStatus(paths, machine),
-  codexApp: machine.codexApp(),
-  turnedOnByTheMacApp: turnedOnByTheMacApp(codexAppCardsReceiptFrom(machine.readFile(paths.receiptPath))),
-  turnedOffOnPurpose: machine.exists(paths.turnedOffPath)
-});
+var isWhatThisVersionWrites = (receipt, paths, machine) => {
+  if (receipt === null) return false;
+  const written = filesThisVersionWrites(paths, receipt);
+  return machine.readFile(paths.launcherPath) === written.launcherScript && machine.readFile(paths.loginItemPath) === written.loginItem;
+};
+var launchesOrStartsAtLogin = (paths, machine) => machine.launchVariable() === paths.launcherPath || machine.exists(paths.loginItemPath);
+var offButStillLaunchedOrStartedAtLogin = (status, paths, machine) => status.kind === "off" && launchesOrStartsAtLogin(paths, machine);
+var codexAppCardsReport = (paths, machine) => {
+  const status = codexAppCardsStatus(paths, machine);
+  const receipt = codexAppCardsReceiptFrom(machine.readFile(paths.receiptPath));
+  return {
+    status,
+    codexApp: machine.codexApp(),
+    turnedOnByTheMacApp: turnedOnByTheMacApp(receipt),
+    turnedOffOnPurpose: machine.exists(paths.turnedOffPath),
+    launcher: paths.launcherPath,
+    launcherIsCurrent: isWhatThisVersionWrites(receipt, paths, machine),
+    leavesALaunchBehind: offButStillLaunchedOrStartedAtLogin(status, paths, machine)
+  };
+};
 var isKeptOnForTheMacApp = (request, paths, machine) => request.keepWhatTheMacAppTurnedOn && turnedOnByTheMacApp(codexAppCardsReceiptFrom(machine.readFile(paths.receiptPath))) && codexAppCardsStatus(paths, machine).kind !== "off";
 var isKeptOffForTheMacApp = (request, paths, machine) => request.keepWhatTheMacAppTurnedOn && machine.exists(paths.turnedOffPath);
-var codexAppCardsFolderStays = (request, machine) => {
-  const paths = codexAppCardsPaths(request.homeDir, request.uid);
-  return isKeptOnForTheMacApp(request, paths, machine) || isKeptOffForTheMacApp(request, paths, machine);
-};
 var nothingIsTurnedOn = (paths, machine) => !machine.exists(paths.launcherPath) && !machine.exists(paths.loginItemPath) && machine.launchVariable() !== paths.launcherPath;
 var removeCodexAppCards = (request, machine) => {
   const paths = codexAppCardsPaths(request.homeDir, request.uid);
@@ -373,13 +386,40 @@ var removeCodexAppCards = (request, machine) => {
     return "absent";
   }
   if (isKeptOnForTheMacApp(request, paths, machine)) return "kept_for_the_mac_app";
+  if (machine.launchVariable() === null) throw new Error(LAUNCH_SETTING_NOT_READ);
   if (request.dryRun) return "removed";
   turnCodexAppCardsOff(paths, machine);
   machine.remove(paths.launcherDirectory);
   if (keepsTheOff) rememberCodexAppCardsWereTurnedOff(paths, machine);
   return "removed";
 };
-var launchctl = (args) => execFileSync2(LAUNCHCTL, [...args], { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
+var firstLineOf = (error) => (error instanceof Error ? error.message : String(error)).split("\n", 1)[0] ?? "";
+var whatTheCleanUpLeft = (paths, machine) => machine.launchVariable() === null || launchesOrStartsAtLogin(paths, machine) ? "could_not_turn_off" : "off_but_not_tidied";
+var cleanUpCodexAppCards = (request, machine) => {
+  const paths = codexAppCardsPaths(request.homeDir, request.uid);
+  try {
+    const outcome = removeCodexAppCards(request, machine);
+    return { outcome, keepsTheFolder: outcome === "kept_for_the_mac_app" || isKeptOffForTheMacApp(request, paths, machine) };
+  } catch (error) {
+    return { outcome: whatTheCleanUpLeft(paths, machine), keepsTheFolder: true, reason: firstLineOf(error) };
+  }
+};
+var codexAppCardsFolderInTheLastSweep = (cleanedUpOnThisMac) => {
+  if (cleanedUpOnThisMac === null) return "swept_with_the_rest";
+  return cleanedUpOnThisMac.keepsTheFolder ? "kept" : "left_to_the_switch";
+};
+var hasWhatTheCommandSaid = (error) => typeof error === "object" && error !== null && "stderr" in error;
+var whyLaunchctlFailed = (error, verb) => {
+  const said = hasWhatTheCommandSaid(error) && typeof error.stderr === "string" ? error.stderr.split("\n").map((line) => line.trim()).find((line) => line.length > 0) : void 0;
+  return said ?? `launchctl ${verb} failed`;
+};
+var launchctl = (args) => {
+  try {
+    return execFileSync2(LAUNCHCTL, [...args], { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
+  } catch (error) {
+    throw new Error(whyLaunchctlFailed(error, args[0] ?? ""));
+  }
+};
 var launchctlIgnoringFailure = (args) => {
   try {
     return launchctl(args);
@@ -387,6 +427,13 @@ var launchctlIgnoringFailure = (args) => {
     return "";
   }
 };
+var launchVariableOnThisMac = () => {
+  try {
+    return launchctl(["getenv", CODEX_APP_LAUNCH_VARIABLE]).trim();
+  } catch {
+    return null;
+  }
+};
 var fileContents = (path) => {
   try {
     return readFileSync(path, "utf8");
@@ -396,7 +443,7 @@ var fileContents = (path) => {
 };
 var thisMacsCodexAppCardsMachine = () => ({
   codexApp: codexAppOnThisMac,
-  launchVariable: () => launchctlIgnoringFailure(["getenv", CODEX_APP_LAUNCH_VARIABLE]).trim(),
+  launchVariable: launchVariableOnThisMac,
   setLaunchVariable: (value) => {
     launchctl(["setenv", CODEX_APP_LAUNCH_VARIABLE, value]);
   },
@@ -418,8 +465,7 @@ var thisMacsCodexAppCardsMachine = () => ({
     rmSync(path, { recursive: true, force: true });
   }
 });
-var removeCodexAppCardsFromThisMac = (request) => removeCodexAppCards(request, thisMacsCodexAppCardsMachine());
-var codexAppCardsFolderStaysOnThisMac = (request) => codexAppCardsFolderStays(request, thisMacsCodexAppCardsMachine());
+var cleanUpCodexAppCardsOnThisMac = (request) => cleanUpCodexAppCards(request, thisMacsCodexAppCardsMachine());
 var setCodexAppLaunchAtLoginOnThisMac = () => {
   const uid = process.getuid?.();
   if (uid === void 0) return;
@@ -516,10 +562,11 @@ export {
   turnCodexAppCardsOff,
   rememberCodexAppCardsWereTurnedOff,
   codexAppCardsReport,
-  codexAppCardsFolderStays,
   removeCodexAppCards,
-  removeCodexAppCardsFromThisMac,
-  codexAppCardsFolderStaysOnThisMac,
+  cleanUpCodexAppCards,
+  codexAppCardsFolderInTheLastSweep,
+  whyLaunchctlFailed,
+  cleanUpCodexAppCardsOnThisMac,
   setCodexAppLaunchAtLoginOnThisMac,
   runsFromATemporaryFolder,
   codexAppCardsStatusLine,

package/dist/{chunk-AKBFNTJF.js → chunk-XFUKCBPU.js}

@@ -1,6 +1,6 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-6U3L4K57.js";
+} from "./chunk-UMVVQXAC.js";
 import {
   CODEX_INSTRUCTIONS_LABEL,
   GEMINI_INSTRUCTIONS_LABEL,
@@ -11,7 +11,7 @@ import {
   macAppFxBridge,
   refreshInstructionBlock,
   renderAgentInstructions
-} from "./chunk-GWQ6T6JV.js";
+} from "./chunk-HUWLEVL2.js";
 import {
   OPENCODE_HOOK_BINARY,
   agentHookOwner,
@@ -21,10 +21,10 @@ import {
   openCodeInstructionsFile,
   openCodePluginDir,
   openCodeWired
-} from "./chunk-JTQHC3RV.js";
+} from "./chunk-T2AC5VFQ.js";
 import {
   detectClaudeVersion
-} from "./chunk-7QAL23TB.js";
+} from "./chunk-LVWXRXT7.js";
 import {
   addClaudeMcpServer,
   addCompatibleHooks,
@@ -33,7 +33,7 @@ import {
   compatibleConfigFile,
   compatibleInstructionsFile,
   hasCompatibleHooks
-} from "./chunk-WNVQPGLH.js";
+} from "./chunk-XWY4UW62.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
@@ -41,7 +41,7 @@ import {
   codexWired,
   geminiWired,
   planHooks
-} from "./chunk-74DKFWU2.js";
+} from "./chunk-KSVCCSAO.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -52,7 +52,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-VZ3YPEMG.js";
+} from "./chunk-ATUZX4K7.js";
 import {
   formatVersion
 } from "./chunk-6ICPEJY5.js";
@@ -80,11 +80,11 @@ import {
   registeredCommands,
   registrationHolderOf,
   vscodePluginMcp
-} from "./chunk-57EOP757.js";
+} from "./chunk-MYBCXDIL.js";
 import {
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "./chunk-T6GEEMVC.js";
+} from "./chunk-WVP6UQG3.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -94,7 +94,7 @@ import {
   HOOK_COMPATIBLE_PROFILES,
   isCompatibleAgentType,
   isRecord
-} from "./chunk-WACFIQYA.js";
+} from "./chunk-GZL3KEPC.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-OX5EYBOC.js → chunk-XTZHUIGJ.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-YBE2KH2U.js";
+} from "./chunk-IRZ5FVWG.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-WNVQPGLH.js → chunk-XWY4UW62.js}

@@ -3,18 +3,18 @@ import {
   addGeminiMcpServer,
   removeGeminiMcpServer,
   supportedClaudeEvents
-} from "./chunk-VZ3YPEMG.js";
+} from "./chunk-ATUZX4K7.js";
 import {
   CLAUDE_CODE_AGENT,
   compatibleToolLookup
-} from "./chunk-724266XT.js";
+} from "./chunk-RF74KBF5.js";
 import {
   guardBinary,
   guardBinaryRefusing,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-57EOP757.js";
+} from "./chunk-MYBCXDIL.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   HOOK_LOCATOR_BINARY,
@@ -26,7 +26,7 @@ import {
   pusharyMissingReason,
   refusalOutput,
   withHookHoldBudget
-} from "./chunk-WACFIQYA.js";
+} from "./chunk-GZL3KEPC.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-S3CQBNUU.js → chunk-XXNT4FGA.js}

@@ -1,7 +1,7 @@
 import {
   localRepoKey,
   normalizeRepoRemote
-} from "./chunk-WACFIQYA.js";
+} from "./chunk-GZL3KEPC.js";
 
 // src/repo.ts
 import { existsSync, readFileSync, statSync } from "fs";