pushary 1.9.57 → 1.9.59

package/dist/{chunk-LVWXRXT7.js → chunk-M6MOQBR5.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-6ICPEJY5.js";
 import {
   isRecord
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-FBKVCODG.js → chunk-MA37WNVS.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-HCIB4YNB.js";
+} from "./chunk-JAKBCKEB.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-LVDC3RUE.js";
+} from "./chunk-4XXZUFWN.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-XTZHUIGJ.js → chunk-MMLIQDTG.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-IRZ5FVWG.js";
+} from "./chunk-KAJDKYUM.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-CB565EVO.js → chunk-MSU3VKGJ.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-TWLWDIFB.js";
+} from "./chunk-KZCYHWDF.js";
 import {
   readJsonSafe
 } from "./chunk-QENTGE75.js";
 import {
   isRecord
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-ZU6L34DQ.js → chunk-MYU5D5VH.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-UPFFO4F6.js";
+} from "./chunk-KQWN7C5C.js";
 import {
   pusharyHookExecutable
-} from "./chunk-CUEUANIU.js";
+} from "./chunk-X4ES7QBT.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-TWLWDIFB.js";
+} from "./chunk-KZCYHWDF.js";
 import {
   isRecord
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-WXZN5CS3.js → chunk-OZIXBN3O.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-QENTGE75.js";
 import {
   configFilePath
-} from "./chunk-LVDC3RUE.js";
+} from "./chunk-4XXZUFWN.js";
 import {
   readSetupOutcomeProperties
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/hooks-spec.ts
 var CURSOR_GATE_SCRIPT = "pushary-gate.mjs";

package/dist/{chunk-JSQOHMNJ.js → chunk-PVANKDWM.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-JYXIARGW.js → chunk-RAMQBSVZ.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-S5LX25XE.js → chunk-RQDP2SJY.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-LVDC3RUE.js";
+} from "./chunk-4XXZUFWN.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-DS6OR5OS.js → chunk-SIU6OWA6.js}

@@ -4,30 +4,30 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "./chunk-IUOUNRLH.js";
+} from "./chunk-V3PDUDPB.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership
-} from "./chunk-CB565EVO.js";
+} from "./chunk-MSU3VKGJ.js";
 import {
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
 import {
   repoKeyFor
-} from "./chunk-XXNT4FGA.js";
+} from "./chunk-XGP5VSQG.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "./chunk-6QM54CSJ.js";
+} from "./chunk-WW24SG27.js";
 import {
   callMcpTool,
   isRetryable
-} from "./chunk-A54W5A74.js";
+} from "./chunk-5EFNBL6V.js";
 import {
   AGENT_QUESTION_DESCRIPTION_MAX,
   AGENT_QUESTION_HEADER_MAX,
@@ -48,7 +48,7 @@ import {
   parseCodexQuestions,
   planElicitationAsk,
   readElicitationFields
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/codex-question-owner.ts
 import { createHash } from "crypto";

package/dist/{chunk-QLDTBZBP.js → chunk-T65RIQK2.js}

@@ -1,7 +1,7 @@
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "./chunk-LVZYIUSR.js";
+} from "./chunk-LAEW5QQD.js";
 import {
   AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
@@ -10,18 +10,18 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-4YTFYILS.js";
+} from "./chunk-5JWCWALO.js";
 import {
   askUser,
   isDecisionStopped,
   waitForQuestion
-} from "./chunk-6QM54CSJ.js";
+} from "./chunk-WW24SG27.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-A54W5A74.js";
+} from "./chunk-5EFNBL6V.js";
 import {
   getMachineId
-} from "./chunk-SQ5G6A6K.js";
+} from "./chunk-M46WDK64.js";
 import {
   ASK_CONTEXT_MAX,
   agentQuestionContext,
@@ -33,7 +33,7 @@ import {
   questionsShownAsASet,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-2PJENKRJ.js → chunk-TCH5UCPR.js}

@@ -1,4 +1,5 @@
 import {
+  LAUNCHCTL,
   codexAppOnThisMac,
   codexEngineBehindLauncher,
   codexPassThroughScript,
@@ -7,13 +8,13 @@ import {
   everyProgramFileIsThere,
   installedCodexApp,
   shellQuoted
-} from "./chunk-OZSP4RIQ.js";
+} from "./chunk-CPRA7IEK.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-Z7Q36I4K.js";
+} from "./chunk-4QF2YLYK.js";
 import {
   CODEX_APP_LAUNCH_AT_LOGIN_VERB,
   CODEX_APP_LAUNCH_VARIABLE
@@ -211,7 +212,6 @@ var waitForMacAppExit = (attempts = 20, everyMs = 250) => {
 // src/codex-app-cards-switch.ts
 var CODEX_APP_CARDS_LOGIN_ITEM = "com.pushary.codex-app-cards";
 var CODEX_APP_CARDS_DIRECTORY = "codex-app";
-var LAUNCHCTL = "/bin/launchctl";
 var LAUNCHER_NAME = "codex";
 var RECEIPT_NAME = "turned-on.json";
 var TURNED_OFF_NAME = "turned-off";
@@ -276,14 +276,14 @@ var codexAppCardsReceiptFrom = (contents) => {
   const { entry, app, engine } = parsed;
   return Array.isArray(entry) && entry.length > 0 && entry.every(isAString) && isAString(app) && isAString(engine) && isAbsolute2(engine) ? { entry, app, engine } : null;
 };
+var filesThisVersionWrites = (paths, receipt) => ({
+  launcherScript: desktopProxyScript(receipt.entry, receipt.app, receipt.engine, { turnsItselfOffWithoutTheEngine: true }),
+  loginItem: codexAppCardsLoginItem(paths.launcherPath, receipt.engine, receipt.entry)
+});
 var codexAppCardsInstallation = (input) => {
   const paths = codexAppCardsPaths(input.homeDir, input.uid);
-  return {
-    paths,
-    launcherScript: desktopProxyScript(input.entry, input.app, input.engine, { turnsItselfOffWithoutTheEngine: true }),
-    loginItem: codexAppCardsLoginItem(paths.launcherPath, input.engine, input.entry),
-    receipt: { entry: input.entry, app: input.app, engine: input.engine }
-  };
+  const receipt = { entry: input.entry, app: input.app, engine: input.engine };
+  return { paths, ...filesThisVersionWrites(paths, receipt), receipt };
 };
 var isAbsolutePath = (value) => value.startsWith("/");
 var whatTheLauncherCannotRun = (receipt, machine) => {
@@ -292,8 +292,10 @@ var whatTheLauncherCannotRun = (receipt, machine) => {
   const missing = receipt.entry.filter(isAbsolutePath).find((path) => !machine.exists(path));
   return missing === void 0 ? null : { kind: "on_but_pushary_is_missing", missing };
 };
+var LAUNCH_SETTING_NOT_READ = "The setting that starts the Codex app could not be read, so nothing was changed";
+var launchVariableOrNoneWhenNotRead = (machine) => machine.launchVariable() ?? "";
 var codexAppCardsStatus = (paths, machine) => {
-  const value = machine.launchVariable();
+  const value = launchVariableOrNoneWhenNotRead(machine);
   if (value.length > 0 && value !== paths.launcherPath) return { kind: "another_program_owns_the_launch", value };
   const launcherIsThere = machine.exists(paths.launcherPath);
   const setForThisLogin = value === paths.launcherPath && launcherIsThere;
@@ -306,7 +308,7 @@ var codexAppCardsStatus = (paths, machine) => {
 };
 var turnCodexAppCardsOn = (installation, machine) => {
   const { paths } = installation;
-  const value = machine.launchVariable();
+  const value = launchVariableOrNoneWhenNotRead(machine);
   if (value.length > 0 && value !== paths.launcherPath) return { kind: "another_program_owns_the_launch", value };
   machine.makeDirectory(paths.launcherDirectory, PRIVATE_DIRECTORY_MODE);
   machine.writeFile(paths.launcherPath, installation.launcherScript, PRIVATE_PROGRAM_MODE);
@@ -321,7 +323,7 @@ var turnCodexAppCardsOn = (installation, machine) => {
 var setCodexAppLaunchAtLogin = (paths, machine) => {
   const isTurnedOn = machine.exists(paths.launcherPath) && machine.exists(paths.loginItemPath);
   const cannotRun = whatTheLauncherCannotRun(codexAppCardsReceiptFrom(machine.readFile(paths.receiptPath)), machine);
-  if (!isTurnedOn || cannotRun !== null || machine.launchVariable().length > 0) return "left_as_it_is";
+  if (!isTurnedOn || cannotRun !== null || launchVariableOrNoneWhenNotRead(machine).length > 0) return "left_as_it_is";
   machine.setLaunchVariable(paths.launcherPath);
   return "set";
 };
@@ -336,6 +338,7 @@ var leaveOnlyThePathToTheEngine = (paths, machine) => {
 };
 var turnCodexAppCardsOff = (paths, machine) => {
   const value = machine.launchVariable();
+  if (value === null) throw new Error(LAUNCH_SETTING_NOT_READ);
   const ours = value === paths.launcherPath;
   const loginItemIsThere = machine.exists(paths.loginItemPath);
   leaveOnlyThePathToTheEngine(paths, machine);
@@ -352,18 +355,28 @@ var rememberCodexAppCardsWereTurnedOff = (paths, machine) => {
   machine.writeFile(paths.turnedOffPath, "", PRIVATE_FILE_MODE);
 };
 var turnedOnByTheMacApp = (receipt) => receipt !== null && isTheMacAppsHelper(receipt.entry);
-var codexAppCardsReport = (paths, machine) => ({
-  status: codexAppCardsStatus(paths, machine),
-  codexApp: machine.codexApp(),
-  turnedOnByTheMacApp: turnedOnByTheMacApp(codexAppCardsReceiptFrom(machine.readFile(paths.receiptPath))),
-  turnedOffOnPurpose: machine.exists(paths.turnedOffPath)
-});
+var isWhatThisVersionWrites = (receipt, paths, machine) => {
+  if (receipt === null) return false;
+  const written = filesThisVersionWrites(paths, receipt);
+  return machine.readFile(paths.launcherPath) === written.launcherScript && machine.readFile(paths.loginItemPath) === written.loginItem;
+};
+var launchesOrStartsAtLogin = (paths, machine) => machine.launchVariable() === paths.launcherPath || machine.exists(paths.loginItemPath);
+var offButStillLaunchedOrStartedAtLogin = (status, paths, machine) => status.kind === "off" && launchesOrStartsAtLogin(paths, machine);
+var codexAppCardsReport = (paths, machine) => {
+  const status = codexAppCardsStatus(paths, machine);
+  const receipt = codexAppCardsReceiptFrom(machine.readFile(paths.receiptPath));
+  return {
+    status,
+    codexApp: machine.codexApp(),
+    turnedOnByTheMacApp: turnedOnByTheMacApp(receipt),
+    turnedOffOnPurpose: machine.exists(paths.turnedOffPath),
+    launcher: paths.launcherPath,
+    launcherIsCurrent: isWhatThisVersionWrites(receipt, paths, machine),
+    leavesALaunchBehind: offButStillLaunchedOrStartedAtLogin(status, paths, machine)
+  };
+};
 var isKeptOnForTheMacApp = (request, paths, machine) => request.keepWhatTheMacAppTurnedOn && turnedOnByTheMacApp(codexAppCardsReceiptFrom(machine.readFile(paths.receiptPath))) && codexAppCardsStatus(paths, machine).kind !== "off";
 var isKeptOffForTheMacApp = (request, paths, machine) => request.keepWhatTheMacAppTurnedOn && machine.exists(paths.turnedOffPath);
-var codexAppCardsFolderStays = (request, machine) => {
-  const paths = codexAppCardsPaths(request.homeDir, request.uid);
-  return isKeptOnForTheMacApp(request, paths, machine) || isKeptOffForTheMacApp(request, paths, machine);
-};
 var nothingIsTurnedOn = (paths, machine) => !machine.exists(paths.launcherPath) && !machine.exists(paths.loginItemPath) && machine.launchVariable() !== paths.launcherPath;
 var removeCodexAppCards = (request, machine) => {
   const paths = codexAppCardsPaths(request.homeDir, request.uid);
@@ -373,13 +386,40 @@ var removeCodexAppCards = (request, machine) => {
     return "absent";
   }
   if (isKeptOnForTheMacApp(request, paths, machine)) return "kept_for_the_mac_app";
+  if (machine.launchVariable() === null) throw new Error(LAUNCH_SETTING_NOT_READ);
   if (request.dryRun) return "removed";
   turnCodexAppCardsOff(paths, machine);
   machine.remove(paths.launcherDirectory);
   if (keepsTheOff) rememberCodexAppCardsWereTurnedOff(paths, machine);
   return "removed";
 };
-var launchctl = (args) => execFileSync2(LAUNCHCTL, [...args], { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
+var firstLineOf = (error) => (error instanceof Error ? error.message : String(error)).split("\n", 1)[0] ?? "";
+var whatTheCleanUpLeft = (paths, machine) => machine.launchVariable() === null || launchesOrStartsAtLogin(paths, machine) ? "could_not_turn_off" : "off_but_not_tidied";
+var cleanUpCodexAppCards = (request, machine) => {
+  const paths = codexAppCardsPaths(request.homeDir, request.uid);
+  try {
+    const outcome = removeCodexAppCards(request, machine);
+    return { outcome, keepsTheFolder: outcome === "kept_for_the_mac_app" || isKeptOffForTheMacApp(request, paths, machine) };
+  } catch (error) {
+    return { outcome: whatTheCleanUpLeft(paths, machine), keepsTheFolder: true, reason: firstLineOf(error) };
+  }
+};
+var codexAppCardsFolderInTheLastSweep = (cleanedUpOnThisMac) => {
+  if (cleanedUpOnThisMac === null) return "swept_with_the_rest";
+  return cleanedUpOnThisMac.keepsTheFolder ? "kept" : "left_to_the_switch";
+};
+var hasWhatTheCommandSaid = (error) => typeof error === "object" && error !== null && "stderr" in error;
+var whyLaunchctlFailed = (error, verb) => {
+  const said = hasWhatTheCommandSaid(error) && typeof error.stderr === "string" ? error.stderr.split("\n").map((line) => line.trim()).find((line) => line.length > 0) : void 0;
+  return said ?? `launchctl ${verb} failed`;
+};
+var launchctl = (args) => {
+  try {
+    return execFileSync2(LAUNCHCTL, [...args], { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
+  } catch (error) {
+    throw new Error(whyLaunchctlFailed(error, args[0] ?? ""));
+  }
+};
 var launchctlIgnoringFailure = (args) => {
   try {
     return launchctl(args);
@@ -387,6 +427,13 @@ var launchctlIgnoringFailure = (args) => {
     return "";
   }
 };
+var launchVariableOnThisMac = () => {
+  try {
+    return launchctl(["getenv", CODEX_APP_LAUNCH_VARIABLE]).trim();
+  } catch {
+    return null;
+  }
+};
 var fileContents = (path) => {
   try {
     return readFileSync(path, "utf8");
@@ -396,7 +443,7 @@ var fileContents = (path) => {
 };
 var thisMacsCodexAppCardsMachine = () => ({
   codexApp: codexAppOnThisMac,
-  launchVariable: () => launchctlIgnoringFailure(["getenv", CODEX_APP_LAUNCH_VARIABLE]).trim(),
+  launchVariable: launchVariableOnThisMac,
   setLaunchVariable: (value) => {
     launchctl(["setenv", CODEX_APP_LAUNCH_VARIABLE, value]);
   },
@@ -418,8 +465,7 @@ var thisMacsCodexAppCardsMachine = () => ({
     rmSync(path, { recursive: true, force: true });
   }
 });
-var removeCodexAppCardsFromThisMac = (request) => removeCodexAppCards(request, thisMacsCodexAppCardsMachine());
-var codexAppCardsFolderStaysOnThisMac = (request) => codexAppCardsFolderStays(request, thisMacsCodexAppCardsMachine());
+var cleanUpCodexAppCardsOnThisMac = (request) => cleanUpCodexAppCards(request, thisMacsCodexAppCardsMachine());
 var setCodexAppLaunchAtLoginOnThisMac = () => {
   const uid = process.getuid?.();
   if (uid === void 0) return;
@@ -479,7 +525,7 @@ var codexAppCardsCommand = async (args, entry, readAccount, machine, say) => {
     return 1;
   }
   say(`Codex app cards are on. ${TAKES_EFFECT_AFTER_REOPENING}`);
-  say("From then on, when Codex asks to use an app on this Mac, the question also reaches Pushary. Everything else in Codex stays as it is.");
+  say("From then on, when Codex asks to use an app on this Mac, or its browser asks to open a site, download or upload, the question also reaches Pushary. Everything else in Codex stays as it is.");
   say("Turn them off by running the same command with off.");
   if (runsFromATemporaryFolder(entry)) say("This copy of Pushary runs from a temporary npx folder. If that folder is cleared, the cards stop reaching Pushary and Codex keeps working. Install Pushary with npm install -g pushary and turn them on again to make it last.");
   return 0;
@@ -516,10 +562,11 @@ export {
   turnCodexAppCardsOff,
   rememberCodexAppCardsWereTurnedOff,
   codexAppCardsReport,
-  codexAppCardsFolderStays,
   removeCodexAppCards,
-  removeCodexAppCardsFromThisMac,
-  codexAppCardsFolderStaysOnThisMac,
+  cleanUpCodexAppCards,
+  codexAppCardsFolderInTheLastSweep,
+  whyLaunchctlFailed,
+  cleanUpCodexAppCardsOnThisMac,
   setCodexAppLaunchAtLoginOnThisMac,
   runsFromATemporaryFolder,
   codexAppCardsStatusLine,

package/dist/{chunk-QQYUWTYS.js → chunk-TDOKDCFH.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-QTCFEKLJ.js";
+} from "./chunk-W47WL6JY.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-TWLWDIFB.js";
+} from "./chunk-KZCYHWDF.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-762CDAJJ.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";