pushary 1.9.57 → 1.9.59

package/dist/{chunk-OZSP4RIQ.js → chunk-CPRA7IEK.js}

@@ -26,30 +26,46 @@ import { join, resolve } from "path";
 import { spawn } from "child_process";
 import { Transform } from "stream";
 
-// src/codex-app-card.ts
+// src/codex-permission-form.ts
 var CODEX_APP_CARD_METHOD = "mcpServer/elicitation/request";
+var TOOL_CALL_APPROVAL = "mcp_tool_call";
+var MAX_IDENTIFIER_LENGTH = 200;
+var CODEX_COMPUTER_USE_SERVER = "cua_repl";
+var CODEX_BROWSER_SERVER = "node_repl";
+var CODEX_SHOWS_THE_SAME_QUESTION = "Codex is showing the same question on your Mac.";
+var ONE_PRINTABLE_LINE = /^[^\p{Cc}\p{Cf}\p{Zl}\p{Zp}]+$/u;
+var CODEX_FORM_DECLINED = { action: "decline", content: null, _meta: null };
+var isRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var isRequestId = (value) => typeof value === "string" && value.length > 0 && value.length <= MAX_IDENTIFIER_LENGTH || typeof value === "number" && Number.isSafeInteger(value);
+var isIdentifier = (value) => typeof value === "string" && value.length > 0 && value.length <= MAX_IDENTIFIER_LENGTH;
+var asksForNothingToFillIn = (schema) => isRecord(schema) && isRecord(schema.properties) && Object.keys(schema.properties).length === 0;
+var codexPermissionFormOf = (message) => {
+  if (!isRecord(message) || message.method !== CODEX_APP_CARD_METHOD || !isRequestId(message.id)) return null;
+  const params = message.params;
+  if (!isRecord(params) || !isIdentifier(params.threadId)) return null;
+  if (typeof params.serverName !== "string" || typeof params.mode !== "string" || typeof params.message !== "string") return null;
+  if (!asksForNothingToFillIn(params.requestedSchema)) return null;
+  const meta = params._meta;
+  if (!isRecord(meta) || meta.codex_approval_kind !== TOOL_CALL_APPROVAL) return null;
+  return { requestId: message.id, threadId: params.threadId, serverName: params.serverName, mode: params.mode, sentence: params.message, meta };
+};
+var codexFormCameFrom = (message, servers) => isRecord(message) && message.method === CODEX_APP_CARD_METHOD && isRecord(message.params) && typeof message.params.serverName === "string" && servers.includes(message.params.serverName);
+
+// src/codex-app-card.ts
 var CODEX_REQUEST_RESOLVED_METHOD = "serverRequest/resolved";
-var COMPUTER_USE_SERVER = "cua_repl";
 var COMPUTER_USE_CONNECTOR = "computer-use";
-var TOOL_CALL_APPROVAL = "mcp_tool_call";
 var CONVERSATION_GRANT = "session";
 var FORM_MODES = ["form", "openai/form", "openaiForm"];
 var APP_PARAMETER = "app";
-var MAX_IDENTIFIER_LENGTH = 200;
 var MAX_APP_NAME_LENGTH = 100;
 var MAX_CARDS_ANSWERED_ON_THE_PHONE = 64;
 var APP_LINES_A_LATE_REPLY_CAN_FOLLOW = 256;
-var ONE_PRINTABLE_LINE = /^[^\p{Cc}\p{Cf}\p{Zl}\p{Zp}]+$/u;
 var APP_IDENTIFIER = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 var RISK_LEVELS = ["low", "medium", "high"];
 var PHONE_ANSWER_YES = "yes";
 var PHONE_ANSWER_NO = "no";
 var ALLOW_THIS_CONVERSATION = { action: "accept", content: {}, _meta: { persist: CONVERSATION_GRANT } };
-var DENY = { action: "decline", content: null, _meta: null };
-var isRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var isRequestId = (value) => typeof value === "string" && value.length > 0 && value.length <= MAX_IDENTIFIER_LENGTH || typeof value === "number" && Number.isSafeInteger(value);
-var isIdentifier = (value) => typeof value === "string" && value.length > 0 && value.length <= MAX_IDENTIFIER_LENGTH;
-var asksForNothingToFillIn = (schema) => isRecord(schema) && isRecord(schema.properties) && Object.keys(schema.properties).length === 0;
+var DENY = CODEX_FORM_DECLINED;
 var offersAConversationGrant = (persist) => Array.isArray(persist) && persist.includes(CONVERSATION_GRANT);
 var isTheAppParameter = (entry) => isRecord(entry) && entry.name === APP_PARAMETER;
 var appNameShownBy = (meta) => {
@@ -64,25 +80,20 @@ var appIdentifierIn = (meta) => {
 var riskIn = (meta) => RISK_LEVELS.find((level) => level === meta.riskLevel) ?? null;
 var wordingCodexShowsFor = (appName) => `Allow Computer Use to use "${appName}"?`;
 var codexAppCardOf = (message) => {
-  if (!isRecord(message) || message.method !== CODEX_APP_CARD_METHOD || !isRequestId(message.id)) return null;
-  const params = message.params;
-  if (!isRecord(params) || !isIdentifier(params.threadId) || params.serverName !== COMPUTER_USE_SERVER) return null;
-  if (typeof params.mode !== "string" || !FORM_MODES.includes(params.mode)) return null;
-  if (!asksForNothingToFillIn(params.requestedSchema)) return null;
-  const meta = params._meta;
-  if (!isRecord(meta) || meta.connector_id !== COMPUTER_USE_CONNECTOR || meta.codex_approval_kind !== TOOL_CALL_APPROVAL) return null;
-  if (!offersAConversationGrant(meta.persist)) return null;
-  const appName = appNameShownBy(meta);
-  if (appName === null || params.message !== wordingCodexShowsFor(appName)) return null;
+  const form = codexPermissionFormOf(message);
+  if (!form || form.serverName !== CODEX_COMPUTER_USE_SERVER || !FORM_MODES.includes(form.mode)) return null;
+  if (form.meta.connector_id !== COMPUTER_USE_CONNECTOR || !offersAConversationGrant(form.meta.persist)) return null;
+  const appName = appNameShownBy(form.meta);
+  if (appName === null || form.sentence !== wordingCodexShowsFor(appName)) return null;
   return {
-    requestId: message.id,
-    threadId: params.threadId,
+    requestId: form.requestId,
+    threadId: form.threadId,
     appName,
-    appIdentifier: appIdentifierIn(meta),
-    risk: riskIn(meta)
+    appIdentifier: appIdentifierIn(form.meta),
+    risk: riskIn(form.meta)
   };
 };
-var comesFromComputerUse = (message) => isRecord(message) && message.method === CODEX_APP_CARD_METHOD && isRecord(message.params) && message.params.serverName === COMPUTER_USE_SERVER;
+var comesFromComputerUse = (message) => codexFormCameFrom(message, [CODEX_COMPUTER_USE_SERVER]);
 var codexRequestResolvedBy = (message) => {
   if (!isRecord(message) || message.method !== CODEX_REQUEST_RESOLVED_METHOD || !isRecord(message.params)) return null;
   return isRequestId(message.params.requestId) ? message.params.requestId : null;
@@ -92,7 +103,7 @@ var codexAppCardQuestion = (card) => `Allow Codex to use ${card.appName} for thi
 var codexAppCardContext = (card) => [
   card.appIdentifier ? `App: ${card.appName} (${card.appIdentifier})` : `App: ${card.appName}`,
   ...card.risk ? [`Risk Codex reports: ${card.risk}`] : [],
-  "Codex is showing the same question on your Mac. Yes allows this app for this conversation only."
+  `${CODEX_SHOWS_THE_SAME_QUESTION} Yes allows this app for this conversation only.`
 ].join("\n");
 var codexAppCardDecisionOf = (phoneAnswer) => {
   if (phoneAnswer === PHONE_ANSWER_YES) return "allow";
@@ -165,7 +176,127 @@ var CodexAppCardLedger = class {
   }
 };
 
+// src/codex-browser-use-card.ts
+var BROWSER_USE_SERVERS = [CODEX_COMPUTER_USE_SERVER, CODEX_BROWSER_SERVER];
+var BROWSER_USE_CONNECTOR = "browser-use";
+var PLAIN_FORM = "form";
+var SITE_ACCESS_TOOL = "access_browser_origin";
+var TRANSFER_TOOLS = { download: "download_browser_files", upload: "upload_browser_files" };
+var TRANSFER_WORDING = {
+  download: { before: "Allow download from ", after: "?" },
+  upload: { before: "Allow upload to ", after: "?" }
+};
+var WEB_PROTOCOLS = ["http:", "https:"];
+var BROWSER_NAMES = ["Browser use", "Cloud browser"];
+var MAX_ORIGIN_LENGTH = 100;
+var MAX_PAGE_LENGTH = 2e3;
+var MAX_ADDRESS_SHOWN = 240;
+var CUT_SHORT = "\u2026";
+var WHAT_AN_ANSWER_DOES = {
+  site_access: `${CODEX_SHOWS_THE_SAME_QUESTION} Yes allows this site for the rest of this conversation, or only this turn if Codex is set to ask each turn. No blocks it for this conversation.`,
+  file_transfer: `${CODEX_SHOWS_THE_SAME_QUESTION} It shows the whole address. Yes allows it once and saves nothing.`
+};
+var ACCEPTED_WITH_NO_SAVED_CHOICE = { action: "accept", content: {}, _meta: null };
+var webAddressOf = (text, longest) => {
+  if (text.length === 0 || text.length > longest || !ONE_PRINTABLE_LINE.test(text) || !URL.canParse(text)) return null;
+  const address = new URL(text);
+  return WEB_PROTOCOLS.includes(address.protocol) ? address : null;
+};
+var isOneWebOrigin = (value) => typeof value === "string" && webAddressOf(value, MAX_ORIGIN_LENGTH)?.origin === value;
+var originAskedAbout = (meta) => {
+  const origin = meta.origin;
+  if (!isOneWebOrigin(origin)) return null;
+  return isRecord(meta.tool_params) && meta.tool_params.origin === origin ? origin : null;
+};
+var cleanAddressOn = (origin, page) => {
+  const address = webAddressOf(page, MAX_PAGE_LENGTH);
+  if (address === null || address.origin !== origin || address.username !== "" || address.password !== "") return null;
+  return address.href === page || address.origin === page ? address : null;
+};
+var addressToShow = (address) => {
+  const upToThePath = `${address.origin}${address.pathname}`;
+  const isWhole = address.href === upToThePath && upToThePath.length <= MAX_ADDRESS_SHOWN;
+  return isWhole ? upToThePath : `${upToThePath.slice(0, MAX_ADDRESS_SHOWN - CUT_SHORT.length)}${CUT_SHORT}`;
+};
+var isAKnownBrowserName = (value) => typeof value === "string" && BROWSER_NAMES.includes(value);
+var siteAccessSentence = (browserName, origin) => `Allow ${browserName} to access ${origin}?`;
+var siteAccessCardOf = (form, browserName, origin) => {
+  if (form.meta.tool_name !== SITE_ACCESS_TOOL || form.sentence !== siteAccessSentence(browserName, origin)) return null;
+  return { kind: "site_access", requestId: form.requestId, threadId: form.threadId, origin };
+};
+var isAFileTransfer = (value) => typeof value === "string" && Object.hasOwn(TRANSFER_TOOLS, value);
+var pageNamedIn = (sentence, transfer) => {
+  const { before, after } = TRANSFER_WORDING[transfer];
+  if (!sentence.startsWith(before) || !sentence.endsWith(after)) return null;
+  return sentence.slice(before.length, sentence.length - after.length);
+};
+var fileTransferCardOf = (form, origin) => {
+  const transfer = form.meta.file_transfer;
+  if (!isAFileTransfer(transfer) || form.meta.tool_name !== TRANSFER_TOOLS[transfer]) return null;
+  const page = pageNamedIn(form.sentence, transfer);
+  const address = page === null ? null : cleanAddressOn(origin, page);
+  if (address === null) return null;
+  return { kind: "file_transfer", requestId: form.requestId, threadId: form.threadId, transfer, origin, addressShown: addressToShow(address) };
+};
+var codexBrowserUseCardOf = (message) => {
+  const form = codexPermissionFormOf(message);
+  if (!form || !BROWSER_USE_SERVERS.includes(form.serverName) || form.mode !== PLAIN_FORM) return null;
+  if (form.meta.connector_id !== BROWSER_USE_CONNECTOR) return null;
+  const browserName = form.meta.connector_name;
+  const origin = originAskedAbout(form.meta);
+  if (!isAKnownBrowserName(browserName) || origin === null) return null;
+  return siteAccessCardOf(form, browserName, origin) ?? fileTransferCardOf(form, origin);
+};
+var comesFromBrowserUse = (message) => codexFormCameFrom(message, BROWSER_USE_SERVERS);
+var siteNameOf = (origin) => new URL(origin).host;
+var TRANSFER_QUESTIONS = {
+  download: (site) => `Allow Codex to download from ${site}?`,
+  upload: (site) => `Allow Codex to upload files to ${site}?`
+};
+var codexBrowserUseCardQuestion = (card) => {
+  const site = siteNameOf(card.origin);
+  if (card.kind === "site_access") return `Allow Codex to access ${site} for this conversation?`;
+  return TRANSFER_QUESTIONS[card.transfer](site);
+};
+var codexBrowserUseCardContext = (card) => [
+  card.kind === "file_transfer" ? `Address: ${card.addressShown}` : `Site: ${card.origin}`,
+  WHAT_AN_ANSWER_DOES[card.kind]
+].join("\n");
+var codexBrowserUseCardSubject = (card) => siteNameOf(card.origin);
+var codexBrowserUseCardReply = (requestId, decision) => ({
+  id: requestId,
+  result: decision === "allow" ? ACCEPTED_WITH_NO_SAVED_CHOICE : CODEX_FORM_DECLINED
+});
+
+// src/codex-card.ts
+var codexCardOf = (message) => {
+  const app = codexAppCardOf(message);
+  return app ? { kind: "app", ...app } : codexBrowserUseCardOf(message);
+};
+var comesFromCodexOwnTools = (message) => comesFromComputerUse(message) || comesFromBrowserUse(message);
+var codexAppMayAnswerItself = (card) => card.kind === "site_access";
+var codexCardQuestion = (card) => card.kind === "app" ? codexAppCardQuestion(card) : codexBrowserUseCardQuestion(card);
+var codexCardContext = (card) => card.kind === "app" ? codexAppCardContext(card) : codexBrowserUseCardContext(card);
+var codexCardSubject = (card) => card.kind === "app" ? card.appName : codexBrowserUseCardSubject(card);
+var codexCardReply = (card, decision) => card.kind === "app" ? codexAppCardReply(card.requestId, decision) : codexBrowserUseCardReply(card.requestId, decision);
+
+// src/load-once.ts
+var loadedOnce = (load) => {
+  let loading;
+  const forgetAFailedLoad = (error) => {
+    loading = void 0;
+    throw error;
+  };
+  return () => {
+    loading ??= load().catch(forgetAFailedLoad);
+    return loading;
+  };
+};
+
 // src/codex-desktop-proxy.ts
+var loadThePhone = () => import("./api-UVJGNZIF.js");
+var theFirstCardLoadsAgain = () => {
+};
 var APP_SERVER_COMMAND = "app-server";
 var CONFIG_FLAGS = ["-c", "--config"];
 var CONFIG_FLAG_PREFIXES = ["-c=", "--config="];
@@ -184,9 +315,10 @@ var WITHDRAW_TIMEOUT_MS = 4e3;
 var CLOSE_GRACE_MS = 1500;
 var ENGINE_KILL_GRACE_MS = 2e3;
 var ENGINE_EXIT_GRACE_MS = 5e3;
-var QUESTION_IN_AN_UNKNOWN_SHAPE = "Codex asked about Computer Use in a way this version of Pushary does not know, so the question stays in Codex.";
+var QUESTION_IN_AN_UNKNOWN_SHAPE = "Codex asked for a permission in a way this version of Pushary does not know, so the question stays in Codex.";
 var LAUNCHER_CHECK_MS = 2e3;
-var USUAL_TIMING = { answerWindowMs: 10 * 6e4, longPollMs: 25e3, pauseBetweenPollsMs: 2e3 };
+var WAIT_FOR_CODEX_TO_ANSWER_SITE_ACCESS_ITSELF_MS = 500;
+var USUAL_TIMING = { answerWindowMs: 10 * 6e4, longPollMs: 25e3, pauseBetweenPollsMs: 2e3, letCodexAnswerFirstMs: WAIT_FOR_CODEX_TO_ANSWER_SITE_ACCESS_ITSELF_MS };
 var subcommandIndexOf = (args) => {
   let index = 0;
   while (index < args.length) {
@@ -332,10 +464,12 @@ var CodexAppCards = class {
   constructor(options) {
     this.options = options;
     this.timing = options.timing ?? USUAL_TIMING;
+    this.thePhone = loadedOnce(options.loadPhone ?? loadThePhone);
+    void this.thePhone().catch(theFirstCardLoadsAgain);
   }
   ledger = new CodexAppCardLedger();
   questions = /* @__PURE__ */ new Map();
-  phone;
+  thePhone;
   stoodDown = false;
   saidAQuestionWasUnknown = false;
   timing;
@@ -376,17 +510,13 @@ var CodexAppCards = class {
     for (const question of outstanding) question.waiting.abort();
     await Promise.allSettled(outstanding.map((question) => this.cancel(question)));
   }
-  thePhone() {
-    this.phone ??= import("./api-RQAY3A5V.js");
-    return this.phone;
-  }
   questionShown(message) {
-    const card = codexAppCardOf(message);
+    const card = codexCardOf(message);
     if (card) {
       if (this.ledger.open(card.requestId)) void this.askThePhone(card);
       return;
     }
-    if (this.saidAQuestionWasUnknown || !comesFromComputerUse(message)) return;
+    if (this.saidAQuestionWasUnknown || !comesFromCodexOwnTools(message)) return;
     this.saidAQuestionWasUnknown = true;
     this.options.report(QUESTION_IN_AN_UNKNOWN_SHAPE);
   }
@@ -395,6 +525,8 @@ var CodexAppCards = class {
   }
   async askThePhone(card) {
     try {
+      if (codexAppMayAnswerItself(card)) await pauseUnlessStopped(this.timing.letCodexAnswerFirstMs, this.options.signal);
+      if (this.options.signal.aborted || !this.ledger.isWaiting(card.requestId)) return;
       const account = await this.options.readAccount();
       if (!account) {
         this.ledger.leaveWithTheApp(card.requestId);
@@ -404,9 +536,9 @@ var CodexAppCards = class {
       if (!this.ledger.isWaiting(card.requestId)) return;
       const answerableUntil = Date.now() + this.timing.answerWindowMs;
       const asked = await phone.askUser(account.apiKey, {
-        question: codexAppCardQuestion(card),
+        question: codexCardQuestion(card),
         type: "confirm",
-        context: codexAppCardContext(card),
+        context: codexCardContext(card),
         agentName: CODEX_APP_AGENT_NAME,
         sessionId: card.threadId,
         machineId: account.machineId,
@@ -430,7 +562,7 @@ var CodexAppCards = class {
       await this.waitForThePhone(phone, card, question);
     } catch (error) {
       if (this.ledger.leaveWithTheApp(card.requestId)) {
-        this.options.report(`Could not ask about ${card.appName} through Pushary; answer in Codex. ${error instanceof Error ? error.message.split("\n")[0] : ""}`.trim());
+        this.options.report(`Could not ask about ${codexCardSubject(card)} through Pushary; answer in Codex. ${error instanceof Error ? error.message.split("\n")[0] : ""}`.trim());
       }
     }
   }
@@ -472,7 +604,7 @@ var CodexAppCards = class {
       this.ledger.leaveWithTheApp(card.requestId);
       return;
     }
-    if (this.ledger.settleOnThePhone(card.requestId)) this.options.reply(codexAppCardReply(card.requestId, decision));
+    if (this.ledger.settleOnThePhone(card.requestId)) this.options.reply(codexCardReply(card, decision));
   }
   withdraw(requestId) {
     const key = codexRequestKey(requestId);
@@ -695,7 +827,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-SVGTZ2UN.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-N77RWKCO.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");
@@ -706,7 +838,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
   const directory = await mkdtemp(join(tmpdir(), "pushary-codex-desktop-"));
   try {
     const shim = await writeDesktopProxy(entry, app, engine, directory);
-    process.stderr.write("[pushary] Experimental Codex app launch. When Codex asks to use an app on this Mac, the question also reaches Pushary; every other prompt stays as it is. Quit and open Codex normally to turn this off.\n");
+    process.stderr.write("[pushary] Experimental Codex app launch. When Codex asks to use an app on this Mac, or its browser asks to open a site, download or upload, the question also reaches Pushary; every other prompt stays as it is. Quit and open Codex normally to turn this off.\n");
     const child = spawn2(executable, [], { stdio: "ignore", detached: true, env: { ...process.env, [CODEX_APP_LAUNCH_VARIABLE]: shim } });
     return await new Promise((resolve2, reject) => {
       child.once("error", reject);
@@ -719,6 +851,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
 
 export {
   shellQuoted,
+  LAUNCHCTL,
   desktopEngineFromManifest,
   everyProgramFileIsThere,
   desktopProxyScript,

package/dist/{chunk-C3IWX6KU.js → chunk-D6CXQIXO.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-IRZ5FVWG.js";
+} from "./chunk-KAJDKYUM.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-T45PAPOG.js → chunk-DK35M4TH.js}

@@ -1,9 +1,9 @@
 import {
   APPROVAL_SETTINGS_PATH
-} from "./chunk-K45CFSYV.js";
+} from "./chunk-DS7X36Z3.js";
 import {
   readMacAppAgentKey
-} from "./chunk-OLNBYAPI.js";
+} from "./chunk-EHCIQA5D.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -13,13 +13,13 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-IRZ5FVWG.js";
+} from "./chunk-KAJDKYUM.js";
 import {
   absoluteUrl
-} from "./chunk-FBKVCODG.js";
+} from "./chunk-MA37WNVS.js";
 import {
   isValidApiKey
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";

package/dist/{chunk-K45CFSYV.js → chunk-DS7X36Z3.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-4YNNAF53.js";
+} from "./chunk-AY32RSUC.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
 import {
   readKeySource
-} from "./chunk-IRZ5FVWG.js";
+} from "./chunk-KAJDKYUM.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-FBKVCODG.js";
+} from "./chunk-MA37WNVS.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-LVDC3RUE.js";
+} from "./chunk-4XXZUFWN.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-IBSRULIY.js → chunk-EBQTWH5O.js}

@@ -1,6 +1,6 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-2NIRYGTK.js";
+} from "./chunk-IBXHVYN2.js";
 import {
   CODEX_INSTRUCTIONS_LABEL,
   GEMINI_INSTRUCTIONS_LABEL,
@@ -11,7 +11,7 @@ import {
   macAppFxBridge,
   refreshInstructionBlock,
   renderAgentInstructions
-} from "./chunk-NQDEMRAS.js";
+} from "./chunk-6ONSTCDJ.js";
 import {
   OPENCODE_HOOK_BINARY,
   agentHookOwner,
@@ -21,10 +21,10 @@ import {
   openCodeInstructionsFile,
   openCodePluginDir,
   openCodeWired
-} from "./chunk-PZDMZ7LM.js";
+} from "./chunk-JBCMXSBO.js";
 import {
   detectClaudeVersion
-} from "./chunk-LVWXRXT7.js";
+} from "./chunk-M6MOQBR5.js";
 import {
   addClaudeMcpServer,
   addCompatibleHooks,
@@ -33,7 +33,7 @@ import {
   compatibleConfigFile,
   compatibleInstructionsFile,
   hasCompatibleHooks
-} from "./chunk-UPFFO4F6.js";
+} from "./chunk-KQWN7C5C.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
@@ -41,7 +41,7 @@ import {
   codexWired,
   geminiWired,
   planHooks
-} from "./chunk-CUEUANIU.js";
+} from "./chunk-X4ES7QBT.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -52,7 +52,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-QQYUWTYS.js";
+} from "./chunk-TDOKDCFH.js";
 import {
   formatVersion
 } from "./chunk-6ICPEJY5.js";
@@ -80,11 +80,11 @@ import {
   registeredCommands,
   registrationHolderOf,
   vscodePluginMcp
-} from "./chunk-TWLWDIFB.js";
+} from "./chunk-KZCYHWDF.js";
 import {
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "./chunk-AEXACKDR.js";
+} from "./chunk-US3IT6ZC.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -94,7 +94,7 @@ import {
   HOOK_COMPATIBLE_PROFILES,
   isCompatibleAgentType,
   isRecord
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-OLNBYAPI.js → chunk-EHCIQA5D.js}

@@ -1,18 +1,18 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-PZDMZ7LM.js";
+} from "./chunk-JBCMXSBO.js";
 import {
   keyPrefix
-} from "./chunk-IRZ5FVWG.js";
+} from "./chunk-KAJDKYUM.js";
 import {
   bridgeAgentKey
-} from "./chunk-TWLWDIFB.js";
+} from "./chunk-KZCYHWDF.js";
 import {
   readJsonSafe
 } from "./chunk-QENTGE75.js";
 import {
   isValidApiKey
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-2NIRYGTK.js → chunk-IBXHVYN2.js}

@@ -7,10 +7,10 @@ import {
   codexHome,
   codexHooksJsonIn,
   isPusharyCodexCommand
-} from "./chunk-TWLWDIFB.js";
+} from "./chunk-KZCYHWDF.js";
 import {
   resolvePathBinary
-} from "./chunk-AEXACKDR.js";
+} from "./chunk-US3IT6ZC.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";

package/dist/{chunk-HCIB4YNB.js → chunk-JAKBCKEB.js}

@@ -1,18 +1,18 @@
 import {
   readExistingMachineId
-} from "./chunk-SQ5G6A6K.js";
+} from "./chunk-M46WDK64.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-LVDC3RUE.js";
+} from "./chunk-4XXZUFWN.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";
 import {
   clientContextHeaders
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-PZDMZ7LM.js → chunk-JBCMXSBO.js}

@@ -1,15 +1,15 @@
 import {
   compatibleConfigFile
-} from "./chunk-UPFFO4F6.js";
+} from "./chunk-KQWN7C5C.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-CUEUANIU.js";
+} from "./chunk-X4ES7QBT.js";
 import {
   AGENT_CHOICES
-} from "./chunk-ECJJKDP7.js";
+} from "./chunk-75UYYIFJ.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -18,7 +18,7 @@ import {
   guardedArgv,
   pusharyDir,
   vscodePluginDir
-} from "./chunk-TWLWDIFB.js";
+} from "./chunk-KZCYHWDF.js";
 import {
   readJsonSafe
 } from "./chunk-QENTGE75.js";
@@ -29,7 +29,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-IRZ5FVWG.js → chunk-KAJDKYUM.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-7RZO6VWD.js";
+} from "./chunk-3RKIJM26.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,11 +9,11 @@ import {
 } from "./chunk-QENTGE75.js";
 import {
   configFilePath
-} from "./chunk-LVDC3RUE.js";
+} from "./chunk-4XXZUFWN.js";
 import {
   API_KEY_PREFIX_PATTERN,
   isRecord
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-AN6TVB2H.js → chunk-KHDD74MK.js}

@@ -3,24 +3,24 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-DDQRYX2L.js";
+} from "./chunk-5PP4455M.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-Z7Q36I4K.js";
+} from "./chunk-4QF2YLYK.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-IRZ5FVWG.js";
+} from "./chunk-KAJDKYUM.js";
 import {
   getMachineId
-} from "./chunk-SQ5G6A6K.js";
+} from "./chunk-M46WDK64.js";
 import {
   getBaseUrl
-} from "./chunk-LVDC3RUE.js";
+} from "./chunk-4XXZUFWN.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";

package/dist/{chunk-ZZB4J6CX.js → chunk-KQHY6L3X.js}

@@ -1,18 +1,18 @@
 import {
   registerTranscript
-} from "./chunk-W6363YYZ.js";
+} from "./chunk-2WMZDKPM.js";
 import {
   namedEvent
-} from "./chunk-UPFFO4F6.js";
+} from "./chunk-KQWN7C5C.js";
 import {
   writeDegraded
-} from "./chunk-6QM54CSJ.js";
+} from "./chunk-WW24SG27.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource,
   isGrokHookPayload,
   isGrokSessionEndStop
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];