@hasna/hooks 0.10.2 → 0.10.4

package/bin/index.js

@@ -47,7 +47,7 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = import.meta.require;
 
-// ../hooks0102-standalone-lock/node_modules/commander/lib/error.js
+// ../../node_modules/.bun/commander@12.1.0/node_modules/commander/lib/error.js
 var require_error = __commonJS((exports) => {
   class CommanderError extends Error {
     constructor(exitCode, code, message) {
@@ -71,7 +71,7 @@ var require_error = __commonJS((exports) => {
   exports.InvalidArgumentError = InvalidArgumentError;
 });
 
-// ../hooks0102-standalone-lock/node_modules/commander/lib/argument.js
+// ../../node_modules/.bun/commander@12.1.0/node_modules/commander/lib/argument.js
 var require_argument = __commonJS((exports) => {
   var { InvalidArgumentError } = require_error();
 
@@ -150,7 +150,7 @@ var require_argument = __commonJS((exports) => {
   exports.humanReadableArgName = humanReadableArgName;
 });
 
-// ../hooks0102-standalone-lock/node_modules/commander/lib/help.js
+// ../../node_modules/.bun/commander@12.1.0/node_modules/commander/lib/help.js
 var require_help = __commonJS((exports) => {
   var { humanReadableArgName } = require_argument();
 
@@ -399,7 +399,7 @@ var require_help = __commonJS((exports) => {
   exports.Help = Help;
 });
 
-// ../hooks0102-standalone-lock/node_modules/commander/lib/option.js
+// ../../node_modules/.bun/commander@12.1.0/node_modules/commander/lib/option.js
 var require_option = __commonJS((exports) => {
   var { InvalidArgumentError } = require_error();
 
@@ -550,7 +550,7 @@ var require_option = __commonJS((exports) => {
   exports.DualOptions = DualOptions;
 });
 
-// ../hooks0102-standalone-lock/node_modules/commander/lib/suggestSimilar.js
+// ../../node_modules/.bun/commander@12.1.0/node_modules/commander/lib/suggestSimilar.js
 var require_suggestSimilar = __commonJS((exports) => {
   var maxDistance = 3;
   function editDistance(a, b) {
@@ -623,7 +623,7 @@ var require_suggestSimilar = __commonJS((exports) => {
   exports.suggestSimilar = suggestSimilar;
 });
 
-// ../hooks0102-standalone-lock/node_modules/commander/lib/command.js
+// ../../node_modules/.bun/commander@12.1.0/node_modules/commander/lib/command.js
 var require_command = __commonJS((exports) => {
   var EventEmitter = __require("events").EventEmitter;
   var childProcess = __require("child_process");
@@ -1866,7 +1866,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
   exports.Command = Command;
 });
 
-// ../hooks0102-standalone-lock/node_modules/commander/index.js
+// ../../node_modules/.bun/commander@12.1.0/node_modules/commander/index.js
 var require_commander = __commonJS((exports) => {
   var { Argument } = require_argument();
   var { Command } = require_command();
@@ -1887,76 +1887,76 @@ var require_commander = __commonJS((exports) => {
 });
 
 // src/lib/app-home.ts
-import { existsSync as existsSync2 } from "fs";
+import { existsSync as existsSync3 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join2, resolve } from "path";
-import { homedir as pathsResolverHomedir } from "os";
-import { join as pathsResolverJoin } from "path";
-function pathsResolverAssertApp(app) {
+import { join as join3, resolve as resolve2 } from "path";
+import { homedir as pathsResolverHomedir2 } from "os";
+import { join as pathsResolverJoin2 } from "path";
+function pathsResolverAssertApp2(app) {
   if (typeof app !== "string" || app.length === 0) {
     throw new TypeError("paths: app must be a non-empty string");
   }
-  if (!PATHS_RESOLVER_APP_SLUG_RE.test(app)) {
+  if (!PATHS_RESOLVER_APP_SLUG_RE2.test(app)) {
     throw new TypeError(`paths: invalid app slug "${app}" \u2014 expected lowercase kebab-case ([a-z0-9]+(-[a-z0-9]+)*)`);
   }
 }
-function pathsResolverAssertKind(kind) {
-  if (!Object.keys(PATHS_RESOLVER_KIND_ENV).includes(kind)) {
-    throw new TypeError(`paths: invalid path kind "${kind}" \u2014 expected one of ${Object.keys(PATHS_RESOLVER_KIND_ENV).join(", ")}`);
+function pathsResolverAssertKind2(kind) {
+  if (!Object.keys(PATHS_RESOLVER_KIND_ENV2).includes(kind)) {
+    throw new TypeError(`paths: invalid path kind "${kind}" \u2014 expected one of ${Object.keys(PATHS_RESOLVER_KIND_ENV2).join(", ")}`);
   }
 }
-function pathsResolverBaseDir(kind, options) {
-  pathsResolverAssertKind(kind);
+function pathsResolverBaseDir2(kind, options) {
+  pathsResolverAssertKind2(kind);
   const env = options.env ?? process.env;
-  const override = env[PATHS_RESOLVER_KIND_ENV[kind]];
+  const override = env[PATHS_RESOLVER_KIND_ENV2[kind]];
   if (typeof override === "string" && override.length > 0)
     return override;
-  const home = options.home ?? pathsResolverHomedir();
+  const home = options.home ?? pathsResolverHomedir2();
   const platform = options.platform ?? process.platform;
   if (platform === "darwin") {
     switch (kind) {
       case "config":
       case "data":
-        return pathsResolverJoin(home, "Library", "Application Support", "Hasna");
+        return pathsResolverJoin2(home, "Library", "Application Support", "Hasna");
       case "cache":
-        return pathsResolverJoin(home, "Library", "Caches", "Hasna");
+        return pathsResolverJoin2(home, "Library", "Caches", "Hasna");
       case "state":
-        return pathsResolverJoin(home, "Library", "Logs", "Hasna");
+        return pathsResolverJoin2(home, "Library", "Logs", "Hasna");
     }
   }
   switch (kind) {
     case "config":
-      return pathsResolverJoin(home, ".config", "hasna");
+      return pathsResolverJoin2(home, ".config", "hasna");
     case "data":
-      return pathsResolverJoin(home, ".local", "share", "hasna");
+      return pathsResolverJoin2(home, ".local", "share", "hasna");
     case "state":
-      return pathsResolverJoin(home, ".local", "state", "hasna");
+      return pathsResolverJoin2(home, ".local", "state", "hasna");
     case "cache":
-      return pathsResolverJoin(home, ".cache", "hasna");
+      return pathsResolverJoin2(home, ".cache", "hasna");
   }
 }
-function pathsResolverResolve(kind, options) {
-  pathsResolverAssertApp(options.app);
-  const appSegment = options.internal === true ? pathsResolverJoin("internal", options.app) : options.app;
-  return pathsResolverJoin(pathsResolverBaseDir(kind, options), appSegment);
+function pathsResolverResolve2(kind, options) {
+  pathsResolverAssertApp2(options.app);
+  const appSegment = options.internal === true ? pathsResolverJoin2("internal", options.app) : options.app;
+  return pathsResolverJoin2(pathsResolverBaseDir2(kind, options), appSegment);
 }
-function dataDir(options) {
-  return pathsResolverResolve("data", options);
+function dataDir2(options) {
+  return pathsResolverResolve2("data", options);
 }
 function getHomeDir(env = process.env) {
   return env.HOME || env.USERPROFILE || homedir2();
 }
 function getResolverDataRoot(env = process.env) {
-  return dataDir({ app: "hooks", home: getHomeDir(env), env });
+  return dataDir2({ app: "hooks", home: getHomeDir(env), env });
 }
 function getLegacyDataRoot(env = process.env) {
-  return join2(getHomeDir(env), ".hasna", "hooks");
+  return join3(getHomeDir(env), ".hasna", "hooks");
 }
 function adoptResolverDataRoot(resolved, env = process.env) {
   const dataOverride = env.HASNA_DATA_HOME;
   if (typeof dataOverride === "string" && dataOverride.trim().length > 0)
     return true;
-  return existsSync2(join2(resolved, STORE_MARKER));
+  return existsSync3(join3(resolved, STORE_MARKER));
 }
 function getExplicitDataDir(env = process.env) {
   const dir = env.HASNA_HOOKS_DATA_DIR ?? env.HOOKS_DATA_DIR;
@@ -1967,7 +1967,7 @@ function getExplicitDataDir(env = process.env) {
 function getExactDataRoot(env = process.env) {
   const dir = env.HASNA_HOOKS_HOME?.trim() || env.HOOKS_HOME?.trim();
   if (dir)
-    return resolve(dir);
+    return resolve2(dir);
   return;
 }
 function getEffectiveDataRoot(env = process.env) {
@@ -1978,13 +1978,13 @@ function getEffectiveDataRoot(env = process.env) {
   if (exact)
     return exact;
   const resolved = getResolverDataRoot(env);
-  return adoptResolverDataRoot(resolved, env) ? resolve(resolved) : getLegacyDataRoot(env);
+  return adoptResolverDataRoot(resolved, env) ? resolve2(resolved) : getLegacyDataRoot(env);
 }
 function getReportedDbPath(env = process.env) {
   const explicit = getExplicitDbPath(env);
   if (explicit)
     return explicit;
-  return join2(getEffectiveDataRoot(env), "hooks.db");
+  return join3(getEffectiveDataRoot(env), "hooks.db");
 }
 function getExplicitDbPath(env = process.env) {
   const db = env.HASNA_HOOKS_DB_PATH ?? env.HOOKS_DB_PATH;
@@ -1992,15 +1992,15 @@ function getExplicitDbPath(env = process.env) {
     return db.trim();
   return;
 }
-var PATHS_RESOLVER_KIND_ENV, PATHS_RESOLVER_APP_SLUG_RE, STORE_MARKER = "hooks.db";
+var PATHS_RESOLVER_KIND_ENV2, PATHS_RESOLVER_APP_SLUG_RE2, STORE_MARKER = "hooks.db";
 var init_app_home = __esm(() => {
-  PATHS_RESOLVER_KIND_ENV = {
+  PATHS_RESOLVER_KIND_ENV2 = {
     config: "HASNA_CONFIG_HOME",
     data: "HASNA_DATA_HOME",
     state: "HASNA_STATE_HOME",
     cache: "HASNA_CACHE_HOME"
   };
-  PATHS_RESOLVER_APP_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+  PATHS_RESOLVER_APP_SLUG_RE2 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 });
 
 // src/lib/registry.ts
@@ -2571,7 +2571,7 @@ var init_registry = __esm(() => {
   ];
 });
 
-// ../hooks0102-standalone-lock/node_modules/cli-spinners/spinners.json
+// ../../node_modules/.bun/cli-spinners@2.9.2/node_modules/cli-spinners/spinners.json
 var require_spinners = __commonJS((exports, module) => {
   module.exports = {
     dots: {
@@ -4197,7 +4197,7 @@ var require_spinners = __commonJS((exports, module) => {
   };
 });
 
-// ../hooks0102-standalone-lock/node_modules/cli-spinners/index.js
+// ../../node_modules/.bun/cli-spinners@2.9.2/node_modules/cli-spinners/index.js
 var require_cli_spinners = __commonJS((exports, module) => {
   var spinners = Object.assign({}, require_spinners());
   var spinnersList = Object.keys(spinners);
@@ -4212,18 +4212,18 @@ var require_cli_spinners = __commonJS((exports, module) => {
 });
 
 // src/config.ts
-import { join as join3 } from "path";
+import { join as join5 } from "path";
 function getHooksDataDir() {
   return getEffectiveDataRoot();
 }
 function getCustomHooksDir() {
-  return join3(getHooksDataDir(), "hooks");
+  return join5(getHooksDataDir(), "hooks");
 }
 function getLockPath() {
   const explicit = process.env.HASNA_HOOKS_LOCK_PATH ?? process.env.HOOKS_LOCK_PATH;
   if (explicit)
     return explicit;
-  return join3(getHooksDataDir(), "hooks.lock");
+  return join5(getHooksDataDir(), "hooks.lock");
 }
 var init_config = __esm(() => {
   init_app_home();
@@ -4253,8 +4253,8 @@ __export(exports_manifest, {
   ScriptContainmentError: () => ScriptContainmentError,
   HOOK_NAME_RE: () => HOOK_NAME_RE
 });
-import { existsSync as existsSync3, mkdirSync, readFileSync, readdirSync, realpathSync, writeFileSync } from "fs";
-import { basename, dirname, isAbsolute, join as join4, normalize, resolve as resolve2, sep } from "path";
+import { existsSync as existsSync5, mkdirSync, readFileSync, readdirSync, realpathSync, writeFileSync } from "fs";
+import { basename, dirname, isAbsolute, join as join6, normalize, resolve as resolve3, sep } from "path";
 import { z } from "zod";
 function parseManifest(json) {
   const parsed = JSON.parse(json);
@@ -4270,8 +4270,8 @@ function isWithin(child, parent) {
   return child === parent || child.startsWith(parent + sep);
 }
 function assertContainedLexical(target, root, raw) {
-  const lexical = resolve2(target);
-  const rootLexical = resolve2(root);
+  const lexical = resolve3(target);
+  const rootLexical = resolve3(root);
   if (!isWithin(lexical, rootLexical)) {
     throw new ScriptContainmentError(target, root, raw);
   }
@@ -4280,14 +4280,14 @@ function assertContainedLexical(target, root, raw) {
 function realpathNearest(path) {
   const tail = [];
   let cur = path;
-  while (!existsSync3(cur)) {
+  while (!existsSync5(cur)) {
     const parent = dirname(cur);
     if (parent === cur)
       break;
     tail.unshift(basename(cur));
     cur = parent;
   }
-  return join4(realpathSync(cur), ...tail);
+  return join6(realpathSync(cur), ...tail);
 }
 function assertContainedReal(root, target, raw) {
   const rootReal = realpathSync(root);
@@ -4320,25 +4320,25 @@ function resolveScript(manifest, manifestDir) {
   if (isInlineScript(manifest))
     return { path: scriptRelFor(manifest), content: manifest.script };
   const rel = scriptRelFor(manifest);
-  const resolved = assertContained(join4(manifestDir, rel), manifestDir, manifest.script);
-  if (!existsSync3(resolved)) {
+  const resolved = assertContained(join6(manifestDir, rel), manifestDir, manifest.script);
+  if (!existsSync5(resolved)) {
     throw new Error(`manifest script file not found: ${resolved}`);
   }
   return { path: rel, content: readFileSync(resolved, "utf-8") };
 }
 function customHookDir(name) {
-  return join4(getCustomHooksDir(), shortManifestName(name));
+  return join6(getCustomHooksDir(), shortManifestName(name));
 }
 function readCustomManifest(name) {
   const dir = customHookDir(name);
-  const manifestPath = join4(dir, "manifest.json");
-  if (!existsSync3(manifestPath))
+  const manifestPath = join6(dir, "manifest.json");
+  if (!existsSync5(manifestPath))
     return;
   try {
     const manifest = parseManifest(readFileSync(manifestPath, "utf-8"));
     const script = resolveScript(manifest, dir);
     const scriptIsInline = isInlineScript(manifest);
-    return { manifest, scriptPath: join4(dir, script.path), scriptContent: script.content, scriptIsInline };
+    return { manifest, scriptPath: join6(dir, script.path), scriptContent: script.content, scriptIsInline };
   } catch (err) {
     if (err instanceof ScriptContainmentError)
       throw err;
@@ -4347,7 +4347,7 @@ function readCustomManifest(name) {
 }
 function listCustomHooks() {
   const dir = getCustomHooksDir();
-  if (!existsSync3(dir))
+  if (!existsSync5(dir))
     return [];
   const results = [];
   for (const entry of readdirSafe(dir)) {
@@ -4362,7 +4362,7 @@ function writeCustomHook(name, manifest, scriptContent, scriptRelPath) {
   if (isAbsolute(scriptRelPath)) {
     throw new ScriptContainmentError(scriptRelPath, dir);
   }
-  const scriptPath = scriptRelPath.includes("/") ? join4(dir, scriptRelPath) : join4(dir, scriptRelPath);
+  const scriptPath = scriptRelPath.includes("/") ? join6(dir, scriptRelPath) : join6(dir, scriptRelPath);
   assertContainedLexical(scriptPath, dir, scriptRelPath);
   mkdirSync(dir, { recursive: true });
   assertContainedReal(dir, scriptPath, scriptRelPath);
@@ -4370,7 +4370,7 @@ function writeCustomHook(name, manifest, scriptContent, scriptRelPath) {
   if (scriptDir !== dir)
     mkdirSync(scriptDir, { recursive: true });
   writeFileSync(scriptPath, scriptContent, "utf-8");
-  writeFileSync(join4(dir, "manifest.json"), JSON.stringify(manifest, null, 2) + `
+  writeFileSync(join6(dir, "manifest.json"), JSON.stringify(manifest, null, 2) + `
 `, "utf-8");
   return { dir, scriptPath };
 }
@@ -4414,14 +4414,14 @@ __export(exports_resolve, {
   resolveHook: () => resolveHook,
   resolveBundledHooksDir: () => resolveBundledHooksDir
 });
-import { dirname as dirname2, join as join5 } from "path";
-import { existsSync as existsSync4 } from "fs";
+import { dirname as dirname2, join as join7 } from "path";
+import { existsSync as existsSync6 } from "fs";
 import { fileURLToPath } from "url";
 function resolveBundledHooksDir(moduleDir = dirname2(fileURLToPath(import.meta.url))) {
-  const sourceLayout = join5(moduleDir, "..", "..", "hooks");
-  if (existsSync4(join5(sourceLayout, "hook-gitguard")))
+  const sourceLayout = join7(moduleDir, "..", "..", "hooks");
+  if (existsSync6(join7(sourceLayout, "hook-gitguard")))
     return sourceLayout;
-  return join5(moduleDir, "..", "hooks");
+  return join7(moduleDir, "..", "hooks");
 }
 function resolveHookDir(name) {
   const custom = readCustomManifest(name);
@@ -4432,11 +4432,11 @@ function resolveHookDir(name) {
     return;
   const short = shortManifestName(name);
   const bundledBase = resolveBundledHooksDir();
-  const direct = join5(bundledBase, short);
-  if (existsSync4(direct))
+  const direct = join7(bundledBase, short);
+  if (existsSync6(direct))
     return direct;
-  const prefixed = join5(bundledBase, `hook-${short}`);
-  return existsSync4(prefixed) ? prefixed : undefined;
+  const prefixed = join7(bundledBase, `hook-${short}`);
+  return existsSync6(prefixed) ? prefixed : undefined;
 }
 function resolveScriptPath(name) {
   const custom = readCustomManifest(name);
@@ -4445,8 +4445,8 @@ function resolveScriptPath(name) {
   const dir = resolveHookDir(name);
   if (!dir)
     return;
-  const script = join5(dir, "src", "hook.ts");
-  return existsSync4(script) ? script : undefined;
+  const script = join7(dir, "src", "hook.ts");
+  return existsSync6(script) ? script : undefined;
 }
 function resolveHookMeta(name) {
   const custom = readCustomManifest(name);
@@ -4503,8 +4503,8 @@ var init_resolve = __esm(() => {
 
 // src/lib/native-safety.ts
 import { createHash } from "crypto";
-import { closeSync, constants, existsSync as existsSync5, fstatSync, lstatSync, openSync, readFileSync as readFileSync2, realpathSync as realpathSync2 } from "fs";
-import { dirname as dirname3, isAbsolute as isAbsolute2, join as join6 } from "path";
+import { closeSync, constants, existsSync as existsSync7, fstatSync, lstatSync, openSync, readFileSync as readFileSync2, realpathSync as realpathSync2 } from "fs";
+import { dirname as dirname3, isAbsolute as isAbsolute2, join as join8 } from "path";
 import { homedir as homedir3 } from "os";
 function isNativeSafetyName(name) {
   return name === "trash-guard" || name === "workspace-repos-guard";
@@ -4519,6 +4519,9 @@ function buildNativeSafetyCommand(binding) {
   return prefix + [encoded, binding.runtime, binding.home, binding.path].map(quote).join(" ");
 }
 function nativeSafetyRegistration(command) {
+  return nativeSafetyCommandBinding(command)?.name;
+}
+function nativeSafetyCommandBinding(command) {
   if (!command.startsWith(prefix))
     return;
   const encoded = command.slice(prefix.length).match(/^'([A-Za-z0-9_-]+)' /)?.[1];
@@ -4526,7 +4529,7 @@ function nativeSafetyRegistration(command) {
     return;
   try {
     const binding = JSON.parse(Buffer.from(encoded, "base64url").toString("utf8"));
-    return buildNativeSafetyCommand(binding) === command ? binding.name : undefined;
+    return buildNativeSafetyCommand(binding) === command ? binding : undefined;
   } catch {
     return;
   }
@@ -4558,12 +4561,12 @@ function pinEligibleFile(file, maximum, executable = false) {
 function installedNativeSafetyCommand(name) {
   const home = realpathSync2(homedir3());
   const runtime = realpathSync2(process.execPath);
-  const candidates = [join6(import.meta.dir, "../../bin/native-safety-entry.js"), join6(import.meta.dir, "../bin/native-safety-entry.js"), join6(import.meta.dir, "native-safety-entry.js")];
-  const worker = candidates.find(existsSync5);
+  const candidates = [join8(import.meta.dir, "../../bin/native-safety-entry.js"), join8(import.meta.dir, "../bin/native-safety-entry.js"), join8(import.meta.dir, "native-safety-entry.js")];
+  const worker = candidates.find(existsSync7);
   if (!worker)
     throw new Error("Bundled native safety runner is missing; build or reinstall @hasna/hooks before installing its guards.");
   const canonicalWorker = realpathSync2(worker);
-  return buildNativeSafetyCommand({ name, runtime, runtimeSHA256: pinEligibleFile(runtime, 200000000, true), worker: canonicalWorker, workerSHA256: pinEligibleFile(canonicalWorker, 256000), home, path: `${dirname3(runtime)}:${join6(home, ".bun/bin")}:/usr/local/bin:/usr/bin:/bin` });
+  return buildNativeSafetyCommand({ name, runtime, runtimeSHA256: pinEligibleFile(runtime, 200000000, true), worker: canonicalWorker, workerSHA256: pinEligibleFile(canonicalWorker, 256000), home, path: `${dirname3(runtime)}:${join8(home, ".bun/bin")}:/usr/local/bin:/usr/bin:/bin` });
 }
 var supervisorSource, quote = (value) => "'" + value.replaceAll("'", "'\\''") + "'", program2, shell, prefix;
 var init_native_safety = __esm(() => {
@@ -5010,8 +5013,8 @@ var init_migrations = __esm(() => {
 });
 
 // src/db/legacy-import.ts
-import { existsSync as existsSync6, readdirSync as readdirSync2, readFileSync as readFileSync3 } from "fs";
-import { join as join7 } from "path";
+import { existsSync as existsSync8, readdirSync as readdirSync2, readFileSync as readFileSync3 } from "fs";
+import { join as join9 } from "path";
 import { homedir as homedir4 } from "os";
 function ensureMetaTable(db) {
   db.exec(`
@@ -5091,20 +5094,20 @@ function runLegacyImport(db, homeDir = homedir4()) {
     if (isAlreadyDone(db))
       return;
     let total = 0;
-    const claudeProjectsDir = join7(homeDir, ".claude", "projects");
-    if (existsSync6(claudeProjectsDir)) {
+    const claudeProjectsDir = join9(homeDir, ".claude", "projects");
+    if (existsSync8(claudeProjectsDir)) {
       try {
         const projectDirs = readdirSync2(claudeProjectsDir);
         for (const dir of projectDirs) {
-          const projectDir = join7(claudeProjectsDir, dir);
+          const projectDir = join9(claudeProjectsDir, dir);
           try {
             const files = readdirSync2(projectDir);
             for (const file of files) {
               if (file.match(/^session-log-\d{4}-\d{2}-\d{2}\.jsonl$/)) {
-                total += importJsonlFile(db, join7(projectDir, file));
+                total += importJsonlFile(db, join9(projectDir, file));
               }
               if (file === "errors.log") {
-                total += importErrorsLog(db, join7(projectDir, file));
+                total += importErrorsLog(db, join9(projectDir, file));
               }
             }
           } catch {}
@@ -5151,8 +5154,8 @@ __export(exports_db, {
   allowLocalStore: () => allowLocalStore
 });
 import { Database } from "bun:sqlite";
-import { existsSync as existsSync7, mkdirSync as mkdirSync2, cpSync } from "fs";
-import { join as join8 } from "path";
+import { existsSync as existsSync9, mkdirSync as mkdirSync2, cpSync } from "fs";
+import { join as join10 } from "path";
 function refuseLocalStore(message) {
   localStoreRefusal = message;
 }
@@ -5167,8 +5170,8 @@ function localStoreRefusalMessage() {
 }
 function resolveDataDir() {
   const effective = getEffectiveDataRoot();
-  const oldDir = join8(getHomeDir(), ".hooks");
-  if (!existsSync7(effective) && existsSync7(oldDir)) {
+  const oldDir = join10(getHomeDir(), ".hooks");
+  if (!existsSync9(effective) && existsSync9(oldDir)) {
     mkdirSync2(effective, { recursive: true });
     cpSync(oldDir, effective, { recursive: true });
   }
@@ -5178,12 +5181,12 @@ function getDbPath() {
   const explicitDb = process.env.HASNA_HOOKS_DB_PATH ?? process.env.HOOKS_DB_PATH;
   if (explicitDb)
     return explicitDb;
-  const dataDir2 = resolveDataDir();
-  return join8(dataDir2, "hooks.db");
+  const dataDir3 = resolveDataDir();
+  return join10(dataDir3, "hooks.db");
 }
 function ensureDir(dbPath) {
   const dir = dbPath.substring(0, dbPath.lastIndexOf("/"));
-  if (dir && !existsSync7(dir)) {
+  if (dir && !existsSync9(dir)) {
     mkdirSync2(dir, { recursive: true });
   }
 }
@@ -5193,7 +5196,7 @@ function getDb() {
   if (instance)
     return instance;
   const dbPath = getDbPath();
-  const isNew = dbPath === ":memory:" || !existsSync7(dbPath);
+  const isNew = dbPath === ":memory:" || !existsSync9(dbPath);
   ensureDir(dbPath);
   instance = new Database(dbPath);
   instance.exec("PRAGMA busy_timeout=5000");
@@ -5256,7 +5259,7 @@ __export(exports_store, {
   LockFileError: () => LockFileError
 });
 import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync8, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync2, renameSync } from "fs";
+import { existsSync as existsSync10, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync2, renameSync } from "fs";
 import { readFile as readFile2 } from "fs/promises";
 import { randomBytes } from "crypto";
 function sha256Of(input) {
@@ -5321,7 +5324,7 @@ function assertLockShape(parsed, path) {
 }
 function readLock() {
   const path = getLockPath();
-  if (!existsSync8(path))
+  if (!existsSync10(path))
     return { hooks: {} };
   let raw;
   try {
@@ -5455,7 +5458,7 @@ var init_store = __esm(() => {
 });
 
 // src/lib/codex-settings.ts
-import { closeSync as closeSync2, existsSync as existsSync9, lstatSync as lstatSync2, mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync5, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
+import { closeSync as closeSync2, existsSync as existsSync11, lstatSync as lstatSync2, mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync5, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
 import { dirname as dirname4 } from "path";
 import { randomUUID as randomUUID3 } from "crypto";
 function current(path) {
@@ -5515,7 +5518,7 @@ function writeCodexSettings(path, settings) {
     renameSync2(temp, path);
     snapshots.set(settings, { path, raw: next });
   } finally {
-    if (existsSync9(temp))
+    if (existsSync11(temp))
       unlinkSync(temp);
     closeSync2(fd);
     unlinkSync(lock);
@@ -5526,12 +5529,12 @@ var init_codex_settings = __esm(() => {
   snapshots = new WeakMap;
 });
 
-// ../hooks0102-standalone-lock/node_modules/@hasna/skills/dist/index.js
-import { existsSync as existsSync10 } from "fs";
+// ../../node_modules/.bun/@hasna+skills@0.9.14+a00d3064559565bb/node_modules/@hasna/skills/dist/index.js
+import { existsSync as existsSync12 } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join9, resolve as resolve3 } from "path";
-import { homedir as pathsResolverHomedir2 } from "os";
-import { join as pathsResolverJoin2 } from "path";
+import { join as join11, resolve as resolve4 } from "path";
+import { homedir as pathsResolverHomedir3 } from "os";
+import { join as pathsResolverJoin3 } from "path";
 import { createHash as createHash3 } from "crypto";
 import { existsSync as existsSync52, readdirSync as readdirSync3, readFileSync as readFileSync42, statSync as statSync3 } from "fs";
 import { join as join52, sep as sep2 } from "path";
@@ -5543,7 +5546,7 @@ import { dirname as dirname32, isAbsolute as isAbsolute3, join as join72, resolv
 import { lstatSync as lstatSync3, readFileSync as readFileSync6, opendirSync } from "fs";
 import { createHash as createHash22 } from "crypto";
 import { lstatSync as lstatSync4, opendirSync as opendirSync2 } from "fs";
-import { dirname as dirname42, isAbsolute as isAbsolute4, join as join82, resolve as resolve4 } from "path";
+import { dirname as dirname42, isAbsolute as isAbsolute4, join as join82, resolve as resolve42 } from "path";
 import { createHash as createHash32 } from "crypto";
 import { closeSync as closeSync3, constants as constants2, fstatSync as fstatSync2, lstatSync as lstatSync5, openSync as openSync3, readSync } from "fs";
 import { dirname as dirname5, isAbsolute as isAbsolute5, resolve as resolve5 } from "path";
@@ -5553,7 +5556,7 @@ import { dirname as dirname6, isAbsolute as isAbsolute6, join as join92, parse,
 import { closeSync as closeSync12, constants as constants9, fstatSync as fstatSync12, lstatSync as lstatSync17, openSync as openSync12, opendirSync as opendirSync5, readSync as readSync8 } from "fs";
 import { basename as basename6, dirname as dirname13, isAbsolute as isAbsolute12, join as join25, resolve as resolve12 } from "path";
 import { isAbsolute as isAbsolute11, join as join23, resolve as resolve11 } from "path";
-import { createRequire } from "module";
+import { createRequire as createRequire2 } from "module";
 import { createHash as createHash10, randomUUID as randomUUID22 } from "crypto";
 import { existsSync as existsSync82, lstatSync as lstatSync14, statSync as statSync7, mkdirSync as mkdirSync5, readFileSync as readFileSync11, readdirSync as readdirSync7, opendirSync as opendirSync3, readlinkSync as readlinkSync2, realpathSync as realpathSync3, renameSync as renameSync22, rmdirSync as rmdirSync2, writeFileSync as writeFileSync4, unlinkSync as unlinkSync3, chmodSync, openSync as openSync10, closeSync as closeSync10, fsyncSync as fsyncSync2, fstatSync as fstatSync10, readSync as readSync6, constants as constants7, linkSync } from "fs";
 import { dirname as dirname10, join as join16, resolve as resolve9, relative as relative4, isAbsolute as isAbsolute9, sep as sep4 } from "path";
@@ -5581,11 +5584,11 @@ import { createHash as createHash20 } from "crypto";
 function __exportSetter2(name, newValue) {
   this[name] = __returnValue2.bind(null, newValue);
 }
-function pathsResolverAssertApp2(app) {
+function pathsResolverAssertApp3(app) {
   if (typeof app !== "string" || app.length === 0) {
     throw new TypeError("paths: app must be a non-empty string");
   }
-  if (!PATHS_RESOLVER_APP_SLUG_RE2.test(app)) {
+  if (!PATHS_RESOLVER_APP_SLUG_RE3.test(app)) {
     throw new TypeError(`paths: invalid app slug "${app}" \u2014 expected lowercase kebab-case ([a-z0-9]+(-[a-z0-9]+)*)`);
   }
 }
@@ -5594,35 +5597,35 @@ function pathsResolverDataBaseDir(options) {
   const override = env[PATHS_RESOLVER_DATA_ENV];
   if (typeof override === "string" && override.length > 0)
     return override;
-  const home = options.home ?? pathsResolverHomedir2();
+  const home = options.home ?? pathsResolverHomedir3();
   const platform = options.platform ?? process.platform;
-  return platform === "darwin" ? pathsResolverJoin2(home, "Library", "Application Support", "Hasna") : pathsResolverJoin2(home, ".local", "share", "hasna");
+  return platform === "darwin" ? pathsResolverJoin3(home, "Library", "Application Support", "Hasna") : pathsResolverJoin3(home, ".local", "share", "hasna");
 }
-function dataDir2(options) {
-  pathsResolverAssertApp2(options.app);
-  const appSegment = options.internal === true ? pathsResolverJoin2("internal", options.app) : options.app;
-  return pathsResolverJoin2(pathsResolverDataBaseDir(options), appSegment);
+function dataDir3(options) {
+  pathsResolverAssertApp3(options.app);
+  const appSegment = options.internal === true ? pathsResolverJoin3("internal", options.app) : options.app;
+  return pathsResolverJoin3(pathsResolverDataBaseDir(options), appSegment);
 }
-function effectiveHome() {
+function effectiveHome2() {
   return process.env["HOME"] || process.env["USERPROFILE"] || homedir5() || "/tmp";
 }
 function legacyDataRoot() {
-  return join9(effectiveHome(), ".hasna", "skills");
+  return join11(effectiveHome2(), ".hasna", "skills");
 }
-function resolverDataRoot(home = effectiveHome(), env) {
-  return dataDir2({ app: "skills", home, env });
+function resolverDataRoot(home = effectiveHome2(), env) {
+  return dataDir3({ app: "skills", home, env });
 }
 function adoptResolverDataRoot2(resolved, env = process.env) {
   const dataOverride = env.HASNA_DATA_HOME;
   if (typeof dataOverride === "string" && dataOverride.trim().length > 0)
     return true;
-  return existsSync10(join9(resolved, DEFAULT_SQLITE_FILENAME)) || existsSync10(join9(resolved, GLOBAL_CONFIG_FILENAME));
+  return existsSync12(join11(resolved, DEFAULT_SQLITE_FILENAME)) || existsSync12(join11(resolved, GLOBAL_CONFIG_FILENAME));
 }
 function exactDataRoot() {
   for (const key of [DATA_DIR_ENV, HASNA_SKILLS_HOME_ENV, SKILLS_HOME_ENV]) {
     const dir = process.env[key]?.trim();
     if (dir)
-      return resolve3(dir);
+      return resolve4(dir);
   }
   return;
 }
@@ -5631,7 +5634,7 @@ function getDataRoot() {
   if (exact)
     return exact;
   const resolved = resolverDataRoot();
-  return adoptResolverDataRoot2(resolved) ? resolve3(resolved) : resolve3(legacyDataRoot());
+  return adoptResolverDataRoot2(resolved) ? resolve4(resolved) : resolve4(legacyDataRoot());
 }
 function getDataDirReadOnly() {
   return getDataRoot();
@@ -6253,7 +6256,7 @@ function need(value, message) {
     throw new Error(message);
 }
 function safe(path) {
-  need(typeof path === "string" && path.length <= AGENT_POLICY_LIMITS.pathCharacters && isAbsolute4(path) && resolve4(path) === path && !path.includes("\x00"), "Expected a canonical absolute discovery directory path");
+  need(typeof path === "string" && path.length <= AGENT_POLICY_LIMITS.pathCharacters && isAbsolute4(path) && resolve42(path) === path && !path.includes("\x00"), "Expected a canonical absolute discovery directory path");
   for (let cursor = path;; cursor = dirname42(cursor)) {
     need(!lstatSync4(cursor, { throwIfNoEntry: false })?.isSymbolicLink(), "Refusing symlink native discovery directory");
     if (dirname42(cursor) === cursor)
@@ -15487,7 +15490,7 @@ var __defProp2, __commonJS2 = (cb, mod) => () => (mod || cb((mod = { exports: {}
       configurable: true,
       set: __exportSetter2.bind(all, name)
     });
-}, __require2, require_identity, require_visit, require_directives, require_anchors, require_applyReviver, require_toJS, require_Node, require_Alias, require_Scalar, require_createNode, require_Collection, require_stringifyComment, require_foldFlowLines, require_stringifyString, require_stringify, require_stringifyPair, require_log, require_merge, require_addPairToJSMap, require_Pair, require_stringifyCollection, require_YAMLMap, require_map, require_YAMLSeq, require_seq, require_string, require_null, require_bool, require_stringifyNumber, require_float, require_int, require_schema, require_schema2, require_binary, require_pairs, require_omap, require_bool2, require_float2, require_int2, require_set, require_timestamp, require_schema3, require_tags, require_Schema, require_stringifyDocument, require_Document, require_errors, require_resolve_props, require_util_contains_newline, require_util_flow_indent_check, require_util_map_includes, require_resolve_block_map, require_resolve_block_seq, require_resolve_end, require_resolve_flow_collection, require_compose_collection, require_resolve_block_scalar, require_resolve_flow_scalar, require_compose_scalar, require_util_empty_scalar_position, require_compose_node, require_compose_doc, require_composer, require_cst_scalar, require_cst_stringify, require_cst_visit, require_cst, require_lexer, require_line_counter, require_parser, require_public_api, RETIRED_CONFIG_KEY_REASONS, PATHS_RESOLVER_DATA_ENV = "HASNA_DATA_HOME", PATHS_RESOLVER_APP_SLUG_RE2, DATA_DIR_ENV = "HASNA_SKILLS_DIR", HASNA_SKILLS_HOME_ENV = "HASNA_SKILLS_HOME", SKILLS_HOME_ENV = "SKILLS_HOME", DEFAULT_SQLITE_FILENAME = "server.db", GLOBAL_CONFIG_FILENAME = "config.json", SKILLS, HOSTED_RUNTIMES, HOSTED_SOURCES, HOSTED_METADATA_SET_EMPTY_ERROR, SLUG = "[^,{}/]+", BRACE_SOURCE_EXCLUSION, SINGLE_SOURCE_EXCLUSION, RESERVED_SKILL_ENTRIES, KNOWN_TOP_LEVEL_ENTRIES, VALID_PROVENANCE_SOURCES, CONTENT_HASH_ALGORITHM = "sha256", HASH_EXCLUDE_DIRS, HASH_COVERAGE, CONTENT_HASH_LIMITS, typedArrayPrototype, byteLengthOf, bufferOf, PORTABLE_SKILL_STANDARD = "hasna.skill.v1", SKILL_RUNTIMES, SKILL_SANDBOX_MODES, SKILL_SYSTEM_DEPS_ALLOWLIST, SEMVER_PATTERN2 = "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", CONTENT_HASH_PATTERN = "^[a-f0-9]{64}$", ENV_REFERENCE_PATTERN = "^[A-Z0-9_]+$", MAX_RUNTIME_TIMEOUT_SECONDS = 900, ANY_SEGMENT_COPY_EXCLUDES, FIRST_SEGMENT_COPY_EXCLUDES, NATIVE_SKILL_ROOTS, INTEGRATION_AGENTS, AGENT_ADAPTERS, AGENT_POLICY_LIMITS, composer, Document, Schema, errors, Alias, identity, Pair, Scalar, YAMLMap, YAMLSeq, cst, lexer, lineCounter, parser, publicApi, visit, $Composer, $Document, $Schema, $YAMLError, $YAMLParseError, $YAMLWarning, $Alias, $isAlias, $isCollection, $isDocument, $isMap, $isNode, $isPair, $isScalar, $isSeq, $Pair, $Scalar, $YAMLMap, $YAMLSeq, $Lexer, $LineCounter, $Parser, $parse, $parseAllDocuments, $parseDocument, $stringify, $visit, $visitAsync, HERMES_OPT_OUT = ".no-bundled-skills", package_default, MAX_PACKAGE_BYTES, MAX_CREDENTIAL_FILE_BYTES, INSPECT_CUSTOM, CREDENTIAL_SEAL, AMBIENT_ENVIRONMENT, requireSecretsSdk, IDEMPOTENT_METHODS, AUTHORITY_OVERRIDE_HEADERS, SKILLS_APP = "skills", ENV_KEYS, SKILLS_API_URL_ENV_KEYS, SKILLS_API_KEY_ENV_KEYS, SKILLS_API_URL_ENV, SKILLS_API_KEY_ENV, SkillsFleetCredentialError, MAX_REMOTE_FILE_BYTES, MAX_PROFILE_SELECTIONS = 4096, MAX_PROFILE_DOCUMENT_BYTES, MAX_SKILL_SESSION_ID_CHARS = 256, PROFILE_SESSION_ENVELOPE_BYTES, MAX_RESOLVED_PROFILE_BYTES, BLOCK = 512, ANY_SEGMENT_EXCLUDES, ROOT_EXCLUDES, TOOL_SIDECAR_FILENAMES, CREDENTIAL_FILENAMES, ENV_TEMPLATE_NAMES, NON_DOTENV_EXTENSIONS, SKILL_BUNDLE_INSPECTION_LIMITS, SkillBundleInspectionError, SKILL_VERSION_PATTERN, SkillSelectionError, MAX_CACHED_PROFILE_AGE_MS, CLI_BRIDGE_NAME = "skills-cli", CLI_BRIDGE_VERSION = 1, markdown = `---
+}, __require2, require_identity, require_visit, require_directives, require_anchors, require_applyReviver, require_toJS, require_Node, require_Alias, require_Scalar, require_createNode, require_Collection, require_stringifyComment, require_foldFlowLines, require_stringifyString, require_stringify, require_stringifyPair, require_log, require_merge, require_addPairToJSMap, require_Pair, require_stringifyCollection, require_YAMLMap, require_map, require_YAMLSeq, require_seq, require_string, require_null, require_bool, require_stringifyNumber, require_float, require_int, require_schema, require_schema2, require_binary, require_pairs, require_omap, require_bool2, require_float2, require_int2, require_set, require_timestamp, require_schema3, require_tags, require_Schema, require_stringifyDocument, require_Document, require_errors, require_resolve_props, require_util_contains_newline, require_util_flow_indent_check, require_util_map_includes, require_resolve_block_map, require_resolve_block_seq, require_resolve_end, require_resolve_flow_collection, require_compose_collection, require_resolve_block_scalar, require_resolve_flow_scalar, require_compose_scalar, require_util_empty_scalar_position, require_compose_node, require_compose_doc, require_composer, require_cst_scalar, require_cst_stringify, require_cst_visit, require_cst, require_lexer, require_line_counter, require_parser, require_public_api, RETIRED_CONFIG_KEY_REASONS, PATHS_RESOLVER_DATA_ENV = "HASNA_DATA_HOME", PATHS_RESOLVER_APP_SLUG_RE3, DATA_DIR_ENV = "HASNA_SKILLS_DIR", HASNA_SKILLS_HOME_ENV = "HASNA_SKILLS_HOME", SKILLS_HOME_ENV = "SKILLS_HOME", DEFAULT_SQLITE_FILENAME = "server.db", GLOBAL_CONFIG_FILENAME = "config.json", SKILLS, HOSTED_RUNTIMES, HOSTED_SOURCES, HOSTED_METADATA_SET_EMPTY_ERROR, SLUG = "[^,{}/]+", BRACE_SOURCE_EXCLUSION, SINGLE_SOURCE_EXCLUSION, RESERVED_SKILL_ENTRIES, KNOWN_TOP_LEVEL_ENTRIES, VALID_PROVENANCE_SOURCES, CONTENT_HASH_ALGORITHM = "sha256", HASH_EXCLUDE_DIRS, HASH_COVERAGE, CONTENT_HASH_LIMITS, typedArrayPrototype, byteLengthOf, bufferOf, PORTABLE_SKILL_STANDARD = "hasna.skill.v1", SKILL_RUNTIMES, SKILL_SANDBOX_MODES, SKILL_SYSTEM_DEPS_ALLOWLIST, SEMVER_PATTERN2 = "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", CONTENT_HASH_PATTERN = "^[a-f0-9]{64}$", ENV_REFERENCE_PATTERN = "^[A-Z0-9_]+$", MAX_RUNTIME_TIMEOUT_SECONDS = 900, ANY_SEGMENT_COPY_EXCLUDES, FIRST_SEGMENT_COPY_EXCLUDES, NATIVE_SKILL_ROOTS, INTEGRATION_AGENTS, AGENT_ADAPTERS, AGENT_POLICY_LIMITS, composer, Document, Schema, errors, Alias, identity, Pair, Scalar, YAMLMap, YAMLSeq, cst, lexer, lineCounter, parser, publicApi, visit, $Composer, $Document, $Schema, $YAMLError, $YAMLParseError, $YAMLWarning, $Alias, $isAlias, $isCollection, $isDocument, $isMap, $isNode, $isPair, $isScalar, $isSeq, $Pair, $Scalar, $YAMLMap, $YAMLSeq, $Lexer, $LineCounter, $Parser, $parse, $parseAllDocuments, $parseDocument, $stringify, $visit, $visitAsync, HERMES_OPT_OUT = ".no-bundled-skills", package_default, MAX_PACKAGE_BYTES2, MAX_CREDENTIAL_FILE_BYTES2, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, AMBIENT_ENVIRONMENT2, requireSecretsSdk2, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2, SKILLS_APP = "skills", ENV_KEYS, SKILLS_API_URL_ENV_KEYS, SKILLS_API_KEY_ENV_KEYS, SKILLS_API_URL_ENV, SKILLS_API_KEY_ENV, SkillsFleetCredentialError, MAX_REMOTE_FILE_BYTES, MAX_PROFILE_SELECTIONS = 4096, MAX_PROFILE_DOCUMENT_BYTES, MAX_SKILL_SESSION_ID_CHARS = 256, PROFILE_SESSION_ENVELOPE_BYTES, MAX_RESOLVED_PROFILE_BYTES, BLOCK = 512, ANY_SEGMENT_EXCLUDES, ROOT_EXCLUDES, TOOL_SIDECAR_FILENAMES, CREDENTIAL_FILENAMES, ENV_TEMPLATE_NAMES, NON_DOTENV_EXTENSIONS, SKILL_BUNDLE_INSPECTION_LIMITS, SkillBundleInspectionError, SKILL_VERSION_PATTERN, SkillSelectionError, MAX_CACHED_PROFILE_AGE_MS, CLI_BRIDGE_NAME = "skills-cli", CLI_BRIDGE_VERSION = 1, markdown = `---
 name: skills-cli
 description: Discover, load, author, and run versioned skills through the Skills CLI when a task needs reusable instructions or an executable skill.
 ---
@@ -29705,7 +29708,7 @@ ${end.comment}` : end.comment;
     mode: "Deployment modes were removed: a Skills client either resolves a credential " + "or it does not, and that is the whole of it.",
     apiUrl: "The service address is no longer kept in this app's config file: it is read from " + "HASNA_SKILLS_API_URL, then the macOS Keychain item hasna.credentials.skills.api-url, " + "then ~/.hasna/skills/config/credentials, then the fleet gateway."
   };
-  PATHS_RESOLVER_APP_SLUG_RE2 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+  PATHS_RESOLVER_APP_SLUG_RE3 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
   SKILLS = [];
   HOSTED_RUNTIMES = new Set(["hosted"]);
   HOSTED_SOURCES = new Set(["remote", "private-hosted"]);
@@ -30032,14 +30035,14 @@ ${end.comment}` : end.comment;
       url: "https://github.com/hasna/apps/issues"
     }
   };
-  MAX_PACKAGE_BYTES = 1024 * 1024;
-  MAX_CREDENTIAL_FILE_BYTES = 64 * 1024;
-  INSPECT_CUSTOM = Symbol.for("nodejs.util.inspect.custom");
-  CREDENTIAL_SEAL = Symbol.for("hasna:contracts:sealedCredential");
-  AMBIENT_ENVIRONMENT = Symbol.for("hasna:contracts:ambientClientEnvironment");
-  requireSecretsSdk = createRequire(import.meta.url);
-  IDEMPOTENT_METHODS = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
-  AUTHORITY_OVERRIDE_HEADERS = new Set([
+  MAX_PACKAGE_BYTES2 = 1024 * 1024;
+  MAX_CREDENTIAL_FILE_BYTES2 = 64 * 1024;
+  INSPECT_CUSTOM2 = Symbol.for("nodejs.util.inspect.custom");
+  CREDENTIAL_SEAL2 = Symbol.for("hasna:contracts:sealedCredential");
+  AMBIENT_ENVIRONMENT2 = Symbol.for("hasna:contracts:ambientClientEnvironment");
+  requireSecretsSdk2 = createRequire2(import.meta.url);
+  IDEMPOTENT_METHODS2 = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
+  AUTHORITY_OVERRIDE_HEADERS2 = new Set([
     "host",
     ":authority",
     "forwarded",
@@ -36495,8 +36498,8 @@ __export(exports_installer, {
   detectRewriteConflict: () => detectRewriteConflict,
   buildCodewithTomlFragment: () => buildCodewithTomlFragment
 });
-import { existsSync as existsSync11, mkdirSync as mkdirSync6, readFileSync as readFileSync7, readdirSync as readdirSync4, realpathSync as realpathSync5, rmdirSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync5 } from "fs";
-import { join as join10, dirname as dirname7, basename as basename3, resolve as resolve7 } from "path";
+import { existsSync as existsSync13, mkdirSync as mkdirSync6, readFileSync as readFileSync7, readdirSync as readdirSync4, realpathSync as realpathSync5, rmdirSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync5 } from "fs";
+import { join as join12, dirname as dirname7, basename as basename3, resolve as resolve7 } from "path";
 import { homedir as homedir6 } from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function normalizeHookName(name) {
@@ -36544,28 +36547,28 @@ function getSettingsPath(scope = "global", target = "claude", codewithConfigPath
     return globalOverride;
   const dir = getTargetSettingsDir(target);
   if (target === "codex")
-    return join10(scope === "project" ? process.cwd() : homedir6(), dir, "hooks.json");
+    return join12(scope === "project" ? process.cwd() : homedir6(), dir, "hooks.json");
   if (scope === "project") {
-    return target === "codewith" ? join10(process.cwd(), dir, "config.toml") : join10(process.cwd(), dir, "settings.json");
+    return target === "codewith" ? join12(process.cwd(), dir, "config.toml") : join12(process.cwd(), dir, "settings.json");
   }
-  return target === "codewith" ? join10(homedir6(), dir, "config.toml") : join10(homedir6(), dir, "settings.json");
+  return target === "codewith" ? join12(homedir6(), dir, "config.toml") : join12(homedir6(), dir, "settings.json");
 }
 function getHookPath(name) {
   const shortName = shortHookName(name);
   const resolved = resolveHookDir(shortName);
   if (resolved)
     return resolved;
-  return join10(HOOKS_DIR, normalizeHookName(shortName));
+  return join12(HOOKS_DIR, normalizeHookName(shortName));
 }
 function hookExists(name) {
-  return existsSync11(getHookPath(name));
+  return existsSync13(getHookPath(name));
 }
 function readSettings2(scope = "global", target = "claude") {
   const path = getSettingsPath(scope, target);
   if (target === "codex")
     return readCodexSettings(path);
   try {
-    if (existsSync11(path)) {
+    if (existsSync13(path)) {
       const text3 = readFileSync7(path, "utf-8"), value = JSON.parse(text3);
       settingsPreimages.set(value, { path, text: text3 });
       return value;
@@ -36574,24 +36577,24 @@ function readSettings2(scope = "global", target = "claude") {
     console.warn(`[hooks] Failed to read settings at ${path}: ${error61 instanceof Error ? error61.message : String(error61)}`);
   }
   const empty = {};
-  if (!existsSync11(path))
+  if (!existsSync13(path))
     settingsPreimages.set(empty, { path, text: null });
   return empty;
 }
 function settingsIdentity(path) {
-  if (existsSync11(path))
+  if (existsSync13(path))
     return realpathSync5(path);
-  return existsSync11(dirname7(path)) ? join10(realpathSync5(dirname7(path)), basename3(path)) : resolve7(path);
+  return existsSync13(dirname7(path)) ? join12(realpathSync5(dirname7(path)), basename3(path)) : resolve7(path);
 }
 function writeSettings(settings, scope = "global", target = "claude") {
   const path = getSettingsPath(scope, target);
   if (target === "codex")
     return writeCodexSettings(path, settings);
-  if (target === "claude" && settingsIdentity(path) === settingsIdentity(join10(homedir6(), ".claude/settings.json"))) {
+  if (target === "claude" && settingsIdentity(path) === settingsIdentity(join12(homedir6(), ".claude/settings.json"))) {
     const before = settingsPreimages.get(settings);
     if (!before || before.path !== path)
       throw new Error("Claude settings require a valid captured preimage before installation.");
-    const current2 = existsSync11(path) ? readFileSync7(path, "utf8") : null;
+    const current2 = existsSync13(path) ? readFileSync7(path, "utf8") : null;
     if (current2 !== before.text)
       throw new Error("Claude settings changed during installation; no settings were written.");
     if (coordinateClaudeSettings(before.text, JSON.stringify(settings, null, 2) + `
@@ -36599,7 +36602,7 @@ function writeSettings(settings, scope = "global", target = "claude") {
       return;
   }
   const dir = dirname7(path);
-  if (!existsSync11(dir)) {
+  if (!existsSync13(dir)) {
     mkdirSync6(dir, { recursive: true });
   }
   writeFileSync5(path, JSON.stringify(settings, null, 2) + `
@@ -36698,7 +36701,7 @@ function buildCodewithTomlFragment(name, profile, mementos) {
 function readCodewithConfig(scope, configPath) {
   const path = getSettingsPath(scope, "codewith", configPath);
   try {
-    return existsSync11(path) ? readFileSync7(path, "utf-8") : "";
+    return existsSync13(path) ? readFileSync7(path, "utf-8") : "";
   } catch {
     return "";
   }
@@ -36706,9 +36709,9 @@ function readCodewithConfig(scope, configPath) {
 function appendCodewithFragment(fragment, scope, configPath) {
   const path = getSettingsPath(scope, "codewith", configPath);
   const dir = dirname7(path);
-  if (!existsSync11(dir))
+  if (!existsSync13(dir))
     mkdirSync6(dir, { recursive: true });
-  const existing = existsSync11(path) ? readFileSync7(path, "utf-8") : "";
+  const existing = existsSync13(path) ? readFileSync7(path, "utf-8") : "";
   const sep3 = existing.trim() ? `
 
 ` : "";
@@ -37046,7 +37049,7 @@ function removeHookForTarget(name, scope, target) {
 }
 function readSettingsAt(path) {
   try {
-    if (!existsSync11(path))
+    if (!existsSync13(path))
       return;
     const raw = readFileSync7(path, "utf-8");
     const settings = JSON.parse(raw);
@@ -37172,7 +37175,7 @@ function codewithHasHookEntryInText(configText, name) {
 }
 function codewithHasHookEntry(name, scope = "global") {
   const path = getSettingsPath(scope, "codewith");
-  if (!existsSync11(path))
+  if (!existsSync13(path))
     return false;
   try {
     return codewithHasHookEntryInText(readFileSync7(path, "utf-8"), name);
@@ -37184,12 +37187,12 @@ function removeStoreDirFailClosed(dir) {
   const entries = readdirSync4(dir, { withFileTypes: true });
   for (const entry of entries) {
     if (entry.isDirectory()) {
-      removeStoreDirFailClosed(join10(dir, entry.name));
+      removeStoreDirFailClosed(join12(dir, entry.name));
     }
   }
   for (const entry of entries) {
     if (!entry.isDirectory()) {
-      unlinkSync2(join10(dir, entry.name));
+      unlinkSync2(join12(dir, entry.name));
     }
   }
   rmdirSync(dir);
@@ -37220,7 +37223,7 @@ function uninstallHook(name, scope = "global", target = "claude") {
   const registrationsRemaining = [];
   if (target === "codewith" || target === "all") {
     const codewithPath = getSettingsPath(scope, "codewith");
-    if (existsSync11(codewithPath)) {
+    if (existsSync13(codewithPath)) {
       const before = readFileSync7(codewithPath, "utf-8");
       const after = removeCodewithHookEntry(before, shortName);
       if (after.removed) {
@@ -37271,7 +37274,7 @@ var init_installer = __esm(() => {
   init_native_safety();
   init_claude_skills_coordination();
   __dirname2 = dirname7(fileURLToPath2(import.meta.url));
-  HOOKS_DIR = existsSync11(join10(__dirname2, "..", "..", "hooks", "hook-gitguard")) ? join10(__dirname2, "..", "..", "hooks") : join10(__dirname2, "..", "hooks");
+  HOOKS_DIR = existsSync13(join12(__dirname2, "..", "..", "hooks", "hook-gitguard")) ? join12(__dirname2, "..", "..", "hooks") : join12(__dirname2, "..", "hooks");
   EVENT_MAP = {
     claude: {
       PreToolUse: "PreToolUse",
@@ -37385,25 +37388,25 @@ var init_redact = __esm(() => {
 });
 
 // src/lib/profiles.ts
-import { existsSync as existsSync12, mkdirSync as mkdirSync9, readFileSync as readFileSync9, writeFileSync as writeFileSync8, readdirSync as readdirSync8, rmSync, cpSync as cpSync2 } from "fs";
-import { join as join11 } from "path";
+import { existsSync as existsSync15, mkdirSync as mkdirSync11, readFileSync as readFileSync14, writeFileSync as writeFileSync10, readdirSync as readdirSync8, rmSync, cpSync as cpSync2 } from "fs";
+import { join as join19 } from "path";
 function getProfilesDir() {
-  const newDir = join11(getEffectiveDataRoot(), "profiles");
-  const oldDir = join11(getHomeDir(), ".hooks", "profiles");
-  if (!existsSync12(newDir) && existsSync12(oldDir)) {
-    mkdirSync9(newDir, { recursive: true });
+  const newDir = join19(getEffectiveDataRoot(), "profiles");
+  const oldDir = join19(getHomeDir(), ".hooks", "profiles");
+  if (!existsSync15(newDir) && existsSync15(oldDir)) {
+    mkdirSync11(newDir, { recursive: true });
     cpSync2(oldDir, newDir, { recursive: true });
   }
   return newDir;
 }
 function ensureProfilesDir() {
   const dir = getProfilesDir();
-  if (!existsSync12(dir)) {
-    mkdirSync9(dir, { recursive: true });
+  if (!existsSync15(dir)) {
+    mkdirSync11(dir, { recursive: true });
   }
 }
 function profilePath(id) {
-  return join11(getProfilesDir(), `${id}.json`);
+  return join19(getProfilesDir(), `${id}.json`);
 }
 function shortUuid() {
   return crypto.randomUUID().slice(0, 8);
@@ -37422,30 +37425,30 @@ function createProfile(input2) {
   if (input2.name) {
     profile.name = input2.name;
   }
-  writeFileSync8(profilePath(id), JSON.stringify(profile, null, 2) + `
+  writeFileSync10(profilePath(id), JSON.stringify(profile, null, 2) + `
 `);
   return profile;
 }
 function getProfile(id) {
   const path = profilePath(id);
   try {
-    if (!existsSync12(path))
+    if (!existsSync15(path))
       return null;
-    return JSON.parse(readFileSync9(path, "utf-8"));
+    return JSON.parse(readFileSync14(path, "utf-8"));
   } catch {
     return null;
   }
 }
 function listProfiles() {
   const dir = getProfilesDir();
-  if (!existsSync12(dir))
+  if (!existsSync15(dir))
     return [];
   try {
     const files = readdirSync8(dir).filter((f) => f.endsWith(".json"));
     const profiles = [];
     for (const file2 of files) {
       try {
-        const content = readFileSync9(join11(dir, file2), "utf-8");
+        const content = readFileSync14(join19(dir, file2), "utf-8");
         profiles.push(JSON.parse(content));
       } catch {}
     }
@@ -37459,7 +37462,7 @@ function touchProfile(id) {
   if (!profile)
     return;
   profile.last_seen_at = new Date().toISOString();
-  writeFileSync8(profilePath(id), JSON.stringify(profile, null, 2) + `
+  writeFileSync10(profilePath(id), JSON.stringify(profile, null, 2) + `
 `);
 }
 function exportProfiles() {
@@ -37475,11 +37478,11 @@ function importProfiles(profiles) {
       continue;
     }
     const path = profilePath(profile.agent_id);
-    if (existsSync12(path)) {
+    if (existsSync15(path)) {
       skipped++;
       continue;
     }
-    writeFileSync8(path, JSON.stringify(profile, null, 2) + `
+    writeFileSync10(path, JSON.stringify(profile, null, 2) + `
 `);
     imported++;
   }
@@ -37489,18 +37492,18 @@ var init_profiles = __esm(() => {
   init_app_home();
 });
 
-// ../hooks0102-standalone-lock/node_modules/@hasna/contracts/dist/client/transport.js
-import { isIP } from "net";
-import { spawnSync } from "child_process";
+// ../../node_modules/.bun/@hasna+contracts@1.2.2+944b86d8024e79fa/node_modules/@hasna/contracts/dist/client/transport.js
+import { isIP as isIP2 } from "net";
+import { spawnSync as spawnSync2 } from "child_process";
 import { closeSync as closeSync22, fstatSync as fstatSync22, openSync as openSync22, readFileSync as readFileSync22 } from "fs";
 import { O_NOFOLLOW as O_NOFOLLOW2, O_NONBLOCK as O_NONBLOCK2, O_RDONLY as O_RDONLY2 } from "constants";
 import { hostname as osHostname } from "os";
-import { isAbsolute as isAbsolute7, join as join22 } from "path";
-import { createRequire as createRequire2 } from "module";
+import { isAbsolute as isAbsolute17, join as join22 } from "path";
+import { createRequire as createRequire3 } from "module";
 import { fileURLToPath as fileURLToPath22 } from "url";
-import { closeSync as closeSync4, fstatSync as fstatSync3, lstatSync as lstatSync7, openSync as openSync4, readFileSync as readFileSync12, realpathSync as realpathSync7, statSync } from "fs";
+import { closeSync as closeSync6, fstatSync as fstatSync5, lstatSync as lstatSync10, openSync as openSync6, readFileSync as readFileSync15, realpathSync as realpathSync9, statSync as statSync2 } from "fs";
 import { O_NOFOLLOW, O_NONBLOCK, O_RDONLY } from "constants";
-import { basename as basename5, dirname as dirname11, join as join12, relative, sep as sep3 } from "path";
+import { basename as basename5, dirname as dirname19, join as join20, relative, sep as sep3 } from "path";
 import { fileURLToPath as fileURLToPath3, pathToFileURL } from "url";
 function envToken2(name) {
   return name.toUpperCase().replace(/-/g, "_");
@@ -37574,16 +37577,16 @@ function o(e2, r2, t2) {
   }
 }
 function entryPoint(directory2) {
-  const root = realpathSync7(directory2);
-  const fd = openSync4(join12(root, "package.json"), O_RDONLY | O_NOFOLLOW | O_NONBLOCK);
+  const root = realpathSync9(directory2);
+  const fd = openSync6(join20(root, "package.json"), O_RDONLY | O_NOFOLLOW | O_NONBLOCK);
   let pkg;
   try {
-    const stat2 = fstatSync3(fd);
-    if (!stat2.isFile() || stat2.size > MAX_PACKAGE_BYTES2)
+    const stat2 = fstatSync5(fd);
+    if (!stat2.isFile() || stat2.size > MAX_PACKAGE_BYTES3)
       throw new Error("Invalid Secrets package metadata");
-    pkg = JSON.parse(readFileSync12(fd, "utf8"));
+    pkg = JSON.parse(readFileSync15(fd, "utf8"));
   } finally {
-    closeSync4(fd);
+    closeSync6(fd);
   }
   if (!pkg || typeof pkg !== "object" || !("name" in pkg) || pkg.name !== PACKAGE) {
     throw new Error("Invalid Secrets package identity");
@@ -37595,21 +37598,21 @@ function entryPoint(directory2) {
   if (/[\\%?#\0]/.test(target) || parts.some((part) => !part || part === "." || part === ".." || part === "node_modules")) {
     throw new Error("Invalid Secrets import export");
   }
-  const file2 = realpathSync7(join12(root, ...parts));
+  const file2 = realpathSync9(join20(root, ...parts));
   const within = relative(root, file2);
-  if (!within || within === ".." || within.startsWith(`..${sep3}`) || !statSync(file2).isFile()) {
+  if (!within || within === ".." || within.startsWith(`..${sep3}`) || !statSync2(file2).isFile()) {
     throw new Error("Secrets import export escapes its package or is not a file");
   }
   return pathToFileURL(file2).href;
 }
 function resolveInstalledSecrets(parentUrl) {
-  let directory2 = dirname11(fileURLToPath3(parentUrl));
+  let directory2 = dirname19(fileURLToPath3(parentUrl));
   for (;; ) {
     if (basename5(directory2) !== "node_modules") {
-      const candidate = join12(directory2, "node_modules", PACKAGE);
+      const candidate = join20(directory2, "node_modules", PACKAGE);
       let absent = false;
       try {
-        lstatSync7(candidate);
+        lstatSync10(candidate);
       } catch (error61) {
         if (error61.code !== "ENOENT")
           throw error61;
@@ -37618,7 +37621,7 @@ function resolveInstalledSecrets(parentUrl) {
       if (!absent)
         return entryPoint(candidate);
     }
-    const parent = dirname11(directory2);
+    const parent = dirname19(directory2);
     if (parent === directory2)
       throw new Error("Secrets SDK is not installed for this consumer");
     directory2 = parent;
@@ -37630,7 +37633,7 @@ function homeDir(env) {
 }
 function absoluteOverride(env, key) {
   const value = env[key]?.trim();
-  return value && isAbsolute7(value) ? value : null;
+  return value && isAbsolute17(value) ? value : null;
 }
 function hasnaHomeDir(env) {
   const override = absoluteOverride(env, HASNA_HOME_ENV_KEY);
@@ -37726,7 +37729,7 @@ function readAppConfigFile(path) {
     const uid2 = process.getuid?.() ?? process.geteuid?.();
     if (uid2 !== undefined && before.uid !== uid2)
       unsafe("the file is not owned by the current user");
-    if (before.size > MAX_CREDENTIAL_FILE_BYTES2)
+    if (before.size > MAX_CREDENTIAL_FILE_BYTES3)
       unsafe("the file exceeds the size limit");
     const bytes = readFileSync22(fd);
     const after = fstatSync22(fd);
@@ -37818,13 +37821,13 @@ function sealCredential(fields) {
       configurable: false
     });
   }
-  Object.defineProperty(sealed, INSPECT_CUSTOM2, {
+  Object.defineProperty(sealed, INSPECT_CUSTOM3, {
     value: () => ({ ...visible, apiKey: "[redacted]" }),
     enumerable: false,
     writable: false,
     configurable: false
   });
-  Object.defineProperty(sealed, CREDENTIAL_SEAL2, {
+  Object.defineProperty(sealed, CREDENTIAL_SEAL3, {
     value: true,
     enumerable: false,
     writable: false,
@@ -37855,10 +37858,10 @@ function firstEnvValue(env, keys) {
   return null;
 }
 function isAmbientEnvironment(env) {
-  return env === process.env || env[AMBIENT_ENVIRONMENT2] === true;
+  return env === process.env || env[AMBIENT_ENVIRONMENT3] === true;
 }
 function defaultKeychainRunner(argv) {
-  const result = spawnSync(KEYCHAIN_SECURITY_BIN, [...argv], {
+  const result = spawnSync2(KEYCHAIN_SECURITY_BIN, [...argv], {
     encoding: "utf8",
     stdio: ["ignore", "pipe", "pipe"],
     timeout: KEYCHAIN_SPAWN_TIMEOUT_MS
@@ -37949,7 +37952,7 @@ function snapshotClientEnvironment(name, env) {
     snapshot2[key] = descriptor.value;
   }
   if (ambient) {
-    Object.defineProperty(snapshot2, AMBIENT_ENVIRONMENT2, {
+    Object.defineProperty(snapshot2, AMBIENT_ENVIRONMENT3, {
       value: true,
       enumerable: false,
       writable: false,
@@ -38122,7 +38125,7 @@ async function completePointerCredential(name, pointerResolution, env = process.
   let secretsSdk;
   try {
     const sdkUrl = resolveInstalledSecrets(import.meta.url);
-    secretsSdk = requireSecretsSdk2(fileURLToPath22(sdkUrl));
+    secretsSdk = requireSecretsSdk3(fileURLToPath22(sdkUrl));
   } catch {
     throw new CredentialResolutionError(name, `${pointerEnvKey} names vault item '${vaultKey}', but the secrets SDK (@hasna/secrets) is not installed ` + `in this process. A vault pointer is TERMINAL: install @hasna/secrets to resolve it, or unset ${pointerEnvKey}.`, [pointerEnvKey]);
   }
@@ -38206,7 +38209,7 @@ function canonicalAuthorityHostname(authority) {
       }
       assertCanonicalPort(portSuffix.slice(1));
     }
-    if (isIP(rawHostname.slice(1, -1)) !== 6) {
+    if (isIP2(rawHostname.slice(1, -1)) !== 6) {
       throw new Error("API URL authority must contain a canonical IPv6 literal.");
     }
   } else {
@@ -38222,7 +38225,7 @@ function canonicalAuthorityHostname(authority) {
     } else {
       rawHostname = authority;
     }
-    const ipVersion = isIP(rawHostname);
+    const ipVersion = isIP2(rawHostname);
     const numericAddressParts = rawHostname.split(".");
     const looksLikeNonCanonicalIpv4 = numericAddressParts.every((part) => /^(?:0x[0-9a-f]+|[0-9]+)$/i.test(part));
     if (ipVersion !== 4 && looksLikeNonCanonicalIpv4 || ipVersion !== 4 && !isValidDnsDomain(rawHostname.toLowerCase())) {
@@ -38358,9 +38361,9 @@ function credentialDiskSourcesForMessage(name, env) {
   const paths = credentialDiskSources(name, env);
   return paths.length > 0 ? paths.join(" or ") : "<no HOME or HASNA_HOME set in this environment, so no credential file was consulted>";
 }
-var CREDENTIAL_PROFILE_ENV_KEY = "HASNA_PROFILE", PACKAGE = "@hasna/secrets", MAX_PACKAGE_BYTES2, CredentialResolutionError, CredentialFileUnsafeError, HASNA_HOME_ENV_KEY = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY = "HASNA_STATION", HASNA_HOME_DIR = ".hasna", CONFIG_SUBDIR = "config", CREDENTIALS_FILE = "credentials", KEYCHAIN_SECURITY_BIN = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS = 44, KEYCHAIN_SPAWN_TIMEOUT_MS = 1e4, MAX_CREDENTIAL_FILE_BYTES2, SAFE_APP_SLUG, SAFE_PROFILE, ILLEGAL_IN_HEADER_VALUE, VAULT_POINTER_SHAPE, CREDENTIAL_SHAPED_KEY, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, AMBIENT_ENVIRONMENT2, requireSecretsSdk2, DEFAULT_FLEET_GATEWAY_ORIGIN = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN, DNS_LABEL_PATTERN, ClientTransportConfigurationError, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2;
+var CREDENTIAL_PROFILE_ENV_KEY = "HASNA_PROFILE", PACKAGE = "@hasna/secrets", MAX_PACKAGE_BYTES3, CredentialResolutionError, CredentialFileUnsafeError, HASNA_HOME_ENV_KEY = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY = "HASNA_STATION", HASNA_HOME_DIR = ".hasna", CONFIG_SUBDIR = "config", CREDENTIALS_FILE = "credentials", KEYCHAIN_SECURITY_BIN = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS = 44, KEYCHAIN_SPAWN_TIMEOUT_MS = 1e4, MAX_CREDENTIAL_FILE_BYTES3, SAFE_APP_SLUG, SAFE_PROFILE, ILLEGAL_IN_HEADER_VALUE, VAULT_POINTER_SHAPE, CREDENTIAL_SHAPED_KEY, INSPECT_CUSTOM3, CREDENTIAL_SEAL3, AMBIENT_ENVIRONMENT3, requireSecretsSdk3, DEFAULT_FLEET_GATEWAY_ORIGIN = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN, DNS_LABEL_PATTERN, ClientTransportConfigurationError, IDEMPOTENT_METHODS3, AUTHORITY_OVERRIDE_HEADERS3;
 var init_transport = __esm(() => {
-  MAX_PACKAGE_BYTES2 = 1024 * 1024;
+  MAX_PACKAGE_BYTES3 = 1024 * 1024;
   CredentialResolutionError = class CredentialResolutionError extends Error {
     appName;
     attempted;
@@ -38379,16 +38382,16 @@ var init_transport = __esm(() => {
       this.path = path;
     }
   };
-  MAX_CREDENTIAL_FILE_BYTES2 = 64 * 1024;
+  MAX_CREDENTIAL_FILE_BYTES3 = 64 * 1024;
   SAFE_APP_SLUG = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
   SAFE_PROFILE = /^[A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?$/;
   ILLEGAL_IN_HEADER_VALUE = /[^\t\x20-\x7e]/;
   VAULT_POINTER_SHAPE = /^[a-z0-9][a-z0-9-]*(?:\/[a-z0-9][a-z0-9-_.]*){2,}$/;
   CREDENTIAL_SHAPED_KEY = /(?:^|_)(?:API_KEY|KEY|TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIAL|AUTH)(?:_|$)/;
-  INSPECT_CUSTOM2 = Symbol.for("nodejs.util.inspect.custom");
-  CREDENTIAL_SEAL2 = Symbol.for("hasna:contracts:sealedCredential");
-  AMBIENT_ENVIRONMENT2 = Symbol.for("hasna:contracts:ambientClientEnvironment");
-  requireSecretsSdk2 = createRequire2(import.meta.url);
+  INSPECT_CUSTOM3 = Symbol.for("nodejs.util.inspect.custom");
+  CREDENTIAL_SEAL3 = Symbol.for("hasna:contracts:sealedCredential");
+  AMBIENT_ENVIRONMENT3 = Symbol.for("hasna:contracts:ambientClientEnvironment");
+  requireSecretsSdk3 = createRequire3(import.meta.url);
   ASCII_CONTROL_PATTERN = /[\u0000-\u001f\u007f]/;
   DNS_LABEL_PATTERN = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
   ClientTransportConfigurationError = class ClientTransportConfigurationError extends Error {
@@ -38401,8 +38404,8 @@ var init_transport = __esm(() => {
       this.sources = Object.freeze([...sources]);
     }
   };
-  IDEMPOTENT_METHODS2 = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
-  AUTHORITY_OVERRIDE_HEADERS2 = new Set([
+  IDEMPOTENT_METHODS3 = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
+  AUTHORITY_OVERRIDE_HEADERS3 = new Set([
     "host",
     ":authority",
     "forwarded",
@@ -38737,8 +38740,8 @@ var init_db_writer = __esm(() => {
 });
 
 // src/lib/hook-env.ts
-import { dirname as dirname17, isAbsolute as isAbsolute15 } from "path";
-import { existsSync as existsSync13, realpathSync as realpathSync8, statSync as statSync2 } from "fs";
+import { dirname as dirname20, isAbsolute as isAbsolute18 } from "path";
+import { existsSync as existsSync16, realpathSync as realpathSync10, statSync as statSync4 } from "fs";
 import { tmpdir } from "os";
 function isDeniedEnvName(name) {
   const upper = name.toUpperCase();
@@ -38757,7 +38760,7 @@ function isBashFunctionEnvName(name) {
   return name.startsWith("BASH_FUNC_");
 }
 function isUnsafePathEntry(entry, home) {
-  if (entry === "" || !isAbsolute15(entry))
+  if (entry === "" || !isAbsolute18(entry))
     return true;
   if (home && (entry === home || entry.startsWith(home + "/")))
     return true;
@@ -38767,7 +38770,7 @@ function isUnsafePathEntry(entry, home) {
     return true;
   const canonical4 = (path) => {
     try {
-      return realpathSync8(path);
+      return realpathSync10(path);
     } catch {
       return path;
     }
@@ -38779,16 +38782,16 @@ function isUnsafePathEntry(entry, home) {
       return true;
   }
   try {
-    if ((statSync2(entry).mode & 2) !== 0)
+    if ((statSync4(entry).mode & 2) !== 0)
       return true;
   } catch {}
   return false;
 }
 function sanitizeHookPath(pathValue, home) {
   const baseline = PATH_BASELINE.slice();
-  if (process.platform === "darwin" && existsSync13("/opt/homebrew/bin"))
+  if (process.platform === "darwin" && existsSync16("/opt/homebrew/bin"))
     baseline.push("/opt/homebrew/bin");
-  const bunDir = dirname17(process.execPath);
+  const bunDir = dirname20(process.execPath);
   const seen = new Set;
   const out = [];
   for (const dir of baseline) {
@@ -38912,8 +38915,8 @@ __export(exports_run, {
   HookTimeoutError: () => HookTimeoutError
 });
 import { randomBytes as randomBytes2 } from "crypto";
-import { rmSync as rmSync2, writeFileSync as writeFileSync10 } from "fs";
-import { basename as basename9, dirname as dirname19, isAbsolute as isAbsolute17, join as join13 } from "path";
+import { rmSync as rmSync2, writeFileSync as writeFileSync11 } from "fs";
+import { basename as basename9, dirname as dirname21, isAbsolute as isAbsolute19, join as join24 } from "path";
 function extensionOf(scriptPath) {
   const base = basename9(scriptPath);
   const dot = base.lastIndexOf(".");
@@ -38982,9 +38985,9 @@ async function readPipeWithDeadline(stream, deadlineMs) {
   return chunks.join("");
 }
 async function executeVerifiedScript(options) {
-  const scriptDir = dirname19(options.scriptPath);
+  const scriptDir = dirname21(options.scriptPath);
   const interpreter = interpreterFor(options.name, options.scriptPath, options.content);
-  const tempPath = join13(scriptDir, `.hooks-verified-${randomBytes2(12).toString("hex")}.${interpreter.tempExt}`);
+  const tempPath = join24(scriptDir, `.hooks-verified-${randomBytes2(12).toString("hex")}.${interpreter.tempExt}`);
   let proc = null;
   let timedOut = false;
   const timeoutTimer = options.timeout ? setTimeout(() => {
@@ -38992,8 +38995,8 @@ async function executeVerifiedScript(options) {
     killGroup(proc, { leaderAlive: proc !== null && proc.exitCode === null });
   }, options.timeout) : null;
   try {
-    writeFileSync10(tempPath, options.content, { flag: "wx", mode: 384 });
-    proc = Bun.spawn([...interpreter.command, isAbsolute17(tempPath) ? tempPath : `./${tempPath}`, ...options.args ?? []], {
+    writeFileSync11(tempPath, options.content, { flag: "wx", mode: 384 });
+    proc = Bun.spawn([...interpreter.command, isAbsolute19(tempPath) ? tempPath : `./${tempPath}`, ...options.args ?? []], {
       stdin: new Response(options.stdin),
       stdout: "pipe",
       stderr: "pipe",
@@ -39075,15 +39078,15 @@ __export(exports_custom_install, {
   installCustomSource: () => installCustomSource,
   ensureCustomDir: () => ensureCustomDir
 });
-import { existsSync as existsSync14, mkdirSync as mkdirSync11, mkdtempSync, readFileSync as readFileSync14, rmSync as rmSync4 } from "fs";
-import { join as join17 } from "path";
+import { existsSync as existsSync17, mkdirSync as mkdirSync12, mkdtempSync, readFileSync as readFileSync17, rmSync as rmSync4 } from "fs";
+import { join as join27 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 function manifestAt(dir) {
-  const path = join17(dir, "manifest.json");
-  if (!existsSync14(path))
+  const path = join27(dir, "manifest.json");
+  if (!existsSync17(path))
     return;
   try {
-    return parseManifest(readFileSync14(path, "utf-8"));
+    return parseManifest(readFileSync17(path, "utf-8"));
   } catch {
     return;
   }
@@ -39102,8 +39105,8 @@ function writeFromManifest(manifest, srcDir, source, kind) {
   return { name, version: manifest.version, kind, source, dir, scriptPath };
 }
 async function cloneToTemp(gitUrl) {
-  const tmp = mkdtempSync(join17(tmpdir2(), "hooks-install-"));
-  const proc = Bun.spawn(["git", "clone", "--depth", "1", "--quiet", gitUrl, join17(tmp, "repo")], {
+  const tmp = mkdtempSync(join27(tmpdir2(), "hooks-install-"));
+  const proc = Bun.spawn(["git", "clone", "--depth", "1", "--quiet", gitUrl, join27(tmp, "repo")], {
     stdout: "pipe",
     stderr: "pipe"
   });
@@ -39116,7 +39119,7 @@ async function cloneToTemp(gitUrl) {
     rmSync4(tmp, { recursive: true, force: true });
     throw new Error(`git clone failed (${exitCode}): ${stderr.trim()}`);
   }
-  return join17(tmp, "repo");
+  return join27(tmp, "repo");
 }
 function isGitUrl(value) {
   return value.startsWith("git@") || value.startsWith("ssh://") || value.startsWith("file://") || value.endsWith(".git");
@@ -39126,7 +39129,7 @@ function isCustomSource(value) {
     return true;
   if (value.startsWith("http://") || value.startsWith("https://"))
     return true;
-  return existsSync14(value);
+  return existsSync17(value);
 }
 async function installCustomSource(source) {
   if (isGitUrl(source)) {
@@ -39140,11 +39143,11 @@ async function installCustomSource(source) {
   if (source.startsWith("http://") || source.startsWith("https://")) {
     return installManifestUrl(source);
   }
-  if (!existsSync14(source)) {
+  if (!existsSync17(source)) {
     throw new Error(`No such local path: ${source}`);
   }
   if (source.endsWith("manifest.json")) {
-    const manifest = parseManifest(readFileSync14(source, "utf-8"));
+    const manifest = parseManifest(readFileSync17(source, "utf-8"));
     return writeFromManifest(manifest, source.substring(0, source.lastIndexOf("/")), source, "local");
   }
   return copyManifestDir(source, source, "local");
@@ -39175,7 +39178,7 @@ async function installManifestUrl(url2) {
 }
 function ensureCustomDir() {
   const dir = getCustomHooksDir();
-  mkdirSync11(dir, { recursive: true });
+  mkdirSync12(dir, { recursive: true });
   return dir;
 }
 var init_custom_install = __esm(() => {
@@ -39193,13 +39196,13 @@ __export(exports_sync, {
   fetchPinnedHook: () => fetchPinnedHook,
   commitSyncArtifacts: () => commitSyncArtifacts
 });
-import { createHash as createHash7 } from "crypto";
-import { readFileSync as readFileSync15 } from "fs";
+import { createHash as createHash12 } from "crypto";
+import { readFileSync as readFileSync19 } from "fs";
 function sha256OfText(text3) {
-  return createHash7("sha256").update(text3).digest("hex");
+  return createHash12("sha256").update(text3).digest("hex");
 }
 function sha256OfPath(path) {
-  return createHash7("sha256").update(readFileSync15(path)).digest("hex");
+  return createHash12("sha256").update(readFileSync19(path)).digest("hex");
 }
 function collectBundledCatalog() {
   const out = [];
@@ -40354,13 +40357,13 @@ __export(exports_serve, {
   SERVE_HOST: () => SERVE_HOST,
   DEFAULT_SERVE_PORT: () => DEFAULT_SERVE_PORT
 });
-import { readFileSync as readFileSync17 } from "fs";
-import { dirname as dirname20, join as join19 } from "path";
+import { readFileSync as readFileSync20 } from "fs";
+import { dirname as dirname22, join as join29 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 function packageVersion() {
   try {
-    const pkgPath = join19(dirname20(fileURLToPath4(import.meta.url)), "..", "package.json");
-    return JSON.parse(readFileSync17(pkgPath, "utf-8")).version || "0.0.0";
+    const pkgPath = join29(dirname22(fileURLToPath4(import.meta.url)), "..", "package.json");
+    return JSON.parse(readFileSync20(pkgPath, "utf-8")).version || "0.0.0";
   } catch {
     return "0.0.0";
   }
@@ -40660,17 +40663,17 @@ import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z as z3 } from "zod";
 import { createServer } from "http";
-import { existsSync as existsSync15, readFileSync as readFileSync19 } from "fs";
-import { join as join20, dirname as dirname21 } from "path";
+import { existsSync as existsSync18, readFileSync as readFileSync21 } from "fs";
+import { join as join30, dirname as dirname23 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 async function runVerifiedHook(name, stdin, timeoutMs) {
   const { resolveHook: resolveHook2, resolveScriptPath: resolveScriptPath2 } = await Promise.resolve().then(() => (init_resolve(), exports_resolve));
   const resolved = resolveHook2(name);
   const hookScript = resolveScriptPath2(name);
-  if (!resolved || !hookScript || !existsSync15(hookScript)) {
+  if (!resolved || !hookScript || !existsSync18(hookScript)) {
     throw new Error(`Hook '${name}' not found`);
   }
-  const content = readFileSync19(hookScript);
+  const content = readFileSync21(hookScript);
   const sha4 = sha256Of(content);
   const check2 = checkScriptHash(name, sha4);
   if (!check2.ok) {
@@ -40875,7 +40878,7 @@ function createHooksServer() {
     const settingsPath = getSettingsPath(scope);
     const issues = [];
     const healthy = [];
-    const settingsExist = existsSync15(settingsPath);
+    const settingsExist = existsSync18(settingsPath);
     if (!settingsExist) {
       issues.push({ hook: "(settings)", issue: `${settingsPath} not found`, severity: "warning" });
     }
@@ -40885,7 +40888,7 @@ function createHooksServer() {
       const meta3 = custom2 ? resolveHookMeta(name) : getHook(name);
       let hookHealthy = true;
       if (custom2) {
-        if (!existsSync15(custom2.scriptPath)) {
+        if (!existsSync18(custom2.scriptPath)) {
           issues.push({ hook: name, issue: `Custom hook script missing: ${custom2.scriptPath}`, severity: "error" });
           hookHealthy = false;
         }
@@ -40895,14 +40898,14 @@ function createHooksServer() {
           continue;
         }
         const hookDir = getHookPath(name);
-        if (!existsSync15(join20(hookDir, "src", "hook.ts"))) {
+        if (!existsSync18(join30(hookDir, "src", "hook.ts"))) {
           issues.push({ hook: name, issue: "Missing src/hook.ts in package", severity: "error" });
           hookHealthy = false;
         }
       }
       if (meta3 && settingsExist) {
         try {
-          const settings = JSON.parse(readFileSync19(settingsPath, "utf-8"));
+          const settings = JSON.parse(readFileSync21(settingsPath, "utf-8"));
           if (!hookRegisteredInSettings(settings, name, meta3.event, meta3.matcher)) {
             const eventName = meta3.event.split(":")[0];
             issues.push({ hook: name, issue: `Not registered under correct event (${eventName})`, severity: "error" });
@@ -40939,10 +40942,10 @@ function createHooksServer() {
         return { content: [{ type: "text", text: JSON.stringify({ error: `Hook '${name}' not found` }) }] };
       }
       const hookPath = getHookPath(name);
-      const readmePath = join20(hookPath, "README.md");
+      const readmePath = join30(hookPath, "README.md");
       let readme = "";
-      if (existsSync15(readmePath)) {
-        readme = readFileSync19(readmePath, "utf-8");
+      if (existsSync18(readmePath)) {
+        readme = readFileSync21(readmePath, "utf-8");
       }
       if (verbose) {
         return { content: [{ type: "text", text: JSON.stringify({ ...meta3, readme }) }] };
@@ -41125,7 +41128,7 @@ function createHooksServer() {
     const ctx = {
       scope,
       settings_path: settingsPath,
-      settings_exists: existsSync15(settingsPath),
+      settings_exists: existsSync18(settingsPath),
       registered_hooks: hooks,
       hook_count: hooks.length,
       healthy,
@@ -41271,8 +41274,8 @@ function createHooksServer() {
     const settingsPath = getSettingsPath(scope);
     let settings = {};
     try {
-      if (existsSync15(settingsPath))
-        settings = JSON.parse(readFileSync19(settingsPath, "utf-8"));
+      if (existsSync18(settingsPath))
+        settings = JSON.parse(readFileSync21(settingsPath, "utf-8"));
     } catch {}
     if (!settings.hooks)
       settings.hooks = {};
@@ -41294,8 +41297,8 @@ function createHooksServer() {
     const settingsPath = getSettingsPath(scope);
     let settings = {};
     try {
-      if (existsSync15(settingsPath))
-        settings = JSON.parse(readFileSync19(settingsPath, "utf-8"));
+      if (existsSync18(settingsPath))
+        settings = JSON.parse(readFileSync21(settingsPath, "utf-8"));
     } catch {}
     if (settings.hooks?.__disabled) {
       settings.hooks.__disabled = settings.hooks.__disabled.filter((n2) => n2 !== name);
@@ -41665,13 +41668,13 @@ var init_server = __esm(() => {
   init_redact();
   init_authority();
   init_storage();
-  __dirname3 = dirname21(fileURLToPath5(import.meta.url));
+  __dirname3 = dirname23(fileURLToPath5(import.meta.url));
   pkg = { name: "@hasna/hooks", version: "0.0.0" };
   try {
     for (const rel of ["../../package.json", "../package.json", "../../../package.json"]) {
-      const p = join20(__dirname3, rel);
-      if (existsSync15(p)) {
-        pkg = JSON.parse(readFileSync19(p, "utf-8"));
+      const p = join30(__dirname3, rel);
+      if (existsSync18(p)) {
+        pkg = JSON.parse(readFileSync21(p, "utf-8"));
         break;
       }
     }
@@ -41739,16 +41742,25 @@ function startMcpHttpServer(options) {
 var DEFAULT_MCP_HTTP_PORT = 8847, MCP_HTTP_HOST = "127.0.0.1", MCP_SERVICE_NAME = "hooks";
 var init_http = () => {};
 
-// ../hooks0102-standalone-lock/node_modules/@hasna/events/dist/commander.js
+// ../events/dist/commander.js
 import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
 import { Buffer as Buffer2 } from "buffer";
+import { existsSync as existsSync2 } from "fs";
+import { join as join2 } from "path";
 import { existsSync } from "fs";
 import { homedir } from "os";
-import { join } from "path";
+import { join, resolve } from "path";
+import { homedir as pathsResolverHomedir } from "os";
+import { join as pathsResolverJoin } from "path";
 import { createHmac, timingSafeEqual } from "crypto";
+import { lookup as dnsLookup } from "dns/promises";
+import { isIP } from "net";
 import { randomUUID } from "crypto";
 import { spawn } from "child_process";
+import { request as nodeHttpRequest } from "http";
+import { request as nodeHttpsRequest } from "https";
 import { randomUUID as randomUUID2 } from "crypto";
+import { createRequire } from "module";
 function getPathValue(input, path) {
   return path.split(".").reduce((value, part) => {
     if (value && typeof value === "object" && part in value) {
@@ -41844,13 +41856,103 @@ function channelMatchesEvent(channel, event) {
     return true;
   return channel.filters.some((filter) => eventMatchesFilter(event, filter));
 }
+var PATHS_RESOLVER_KIND_ENV = {
+  config: "HASNA_CONFIG_HOME",
+  data: "HASNA_DATA_HOME",
+  state: "HASNA_STATE_HOME",
+  cache: "HASNA_CACHE_HOME"
+};
+var PATHS_RESOLVER_APP_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+function pathsResolverAssertApp(app) {
+  if (typeof app !== "string" || app.length === 0) {
+    throw new TypeError("paths: app must be a non-empty string");
+  }
+  if (!PATHS_RESOLVER_APP_SLUG_RE.test(app)) {
+    throw new TypeError(`paths: invalid app slug "${app}" \u2014 expected lowercase kebab-case ([a-z0-9]+(-[a-z0-9]+)*)`);
+  }
+}
+function pathsResolverAssertKind(kind) {
+  if (!Object.keys(PATHS_RESOLVER_KIND_ENV).includes(kind)) {
+    throw new TypeError(`paths: invalid path kind "${kind}" \u2014 expected one of ${Object.keys(PATHS_RESOLVER_KIND_ENV).join(", ")}`);
+  }
+}
+function pathsResolverBaseDir(kind, options) {
+  pathsResolverAssertKind(kind);
+  const env = options.env ?? process.env;
+  const override = env[PATHS_RESOLVER_KIND_ENV[kind]];
+  if (typeof override === "string" && override.length > 0)
+    return override;
+  const home = options.home ?? pathsResolverHomedir();
+  const platform = options.platform ?? process.platform;
+  if (platform === "darwin") {
+    switch (kind) {
+      case "config":
+      case "data":
+        return pathsResolverJoin(home, "Library", "Application Support", "Hasna");
+      case "cache":
+        return pathsResolverJoin(home, "Library", "Caches", "Hasna");
+      case "state":
+        return pathsResolverJoin(home, "Library", "Logs", "Hasna");
+    }
+  }
+  switch (kind) {
+    case "config":
+      return pathsResolverJoin(home, ".config", "hasna");
+    case "data":
+      return pathsResolverJoin(home, ".local", "share", "hasna");
+    case "state":
+      return pathsResolverJoin(home, ".local", "state", "hasna");
+    case "cache":
+      return pathsResolverJoin(home, ".cache", "hasna");
+  }
+}
+function pathsResolverResolve(kind, options) {
+  pathsResolverAssertApp(options.app);
+  const appSegment = options.internal === true ? pathsResolverJoin("internal", options.app) : options.app;
+  return pathsResolverJoin(pathsResolverBaseDir(kind, options), appSegment);
+}
+function dataDir(options) {
+  return pathsResolverResolve("data", options);
+}
 var HASNA_EVENTS_DIR_ENV = "HASNA_EVENTS_DIR";
 var HASNA_EVENTS_HOME_ENV = "HASNA_EVENTS_HOME";
+var EVENTS_STORE_SENTINEL_FILE = "events.json";
+function effectiveHome() {
+  return process.env["HOME"] || process.env["USERPROFILE"] || homedir();
+}
+function legacyHomeDir() {
+  return join(effectiveHome(), ".hasna", "events");
+}
+function resolverHome() {
+  return dataDir({ app: "events", home: effectiveHome() || undefined });
+}
+function adoptResolverHome(resolved, env = process.env) {
+  const dataOverride = env.HASNA_DATA_HOME;
+  if (typeof dataOverride === "string" && dataOverride.trim().length > 0)
+    return true;
+  return existsSync(join(resolved, EVENTS_STORE_SENTINEL_FILE));
+}
+function exactEventsHome() {
+  const dir = process.env[HASNA_EVENTS_DIR_ENV];
+  if (dir && dir.trim())
+    return dir.trim();
+  const home = process.env[HASNA_EVENTS_HOME_ENV];
+  if (home && home.trim())
+    return home.trim();
+  return;
+}
+function getEventsHome() {
+  const exact = exactEventsHome();
+  if (exact)
+    return resolve(exact);
+  const resolved = resolverHome();
+  return adoptResolverHome(resolved) ? resolve(resolved) : resolve(legacyHomeDir());
+}
 var LOCAL_JSON_EVENT_CURSOR_PREFIX = "local-json-v1:";
 var DEFAULT_EVENT_PAGE_LIMIT = 100;
 var MAX_EVENT_PAGE_LIMIT = 1000;
 function getEventsDataDir(override) {
-  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join(homedir(), ".hasna", "events");
+  return override || getEventsHome();
 }
 function getActiveEventsDirEnv() {
   if (process.env[HASNA_EVENTS_DIR_ENV])
@@ -41866,12 +41968,12 @@ class JsonEventsStore {
   channelsPath;
   eventsPath;
   deliveriesPath;
-  constructor(dataDir = getEventsDataDir()) {
-    this.dataDir = dataDir;
-    this.runtime = localJsonRuntime(dataDir);
-    this.channelsPath = join(dataDir, "channels.json");
-    this.eventsPath = join(dataDir, "events.json");
-    this.deliveriesPath = join(dataDir, "deliveries.json");
+  constructor(dataDir2 = getEventsDataDir()) {
+    this.dataDir = dataDir2;
+    this.runtime = localJsonRuntime(dataDir2);
+    this.channelsPath = join2(dataDir2, "channels.json");
+    this.eventsPath = join2(dataDir2, "events.json");
+    this.deliveriesPath = join2(dataDir2, "deliveries.json");
   }
   async init() {
     await mkdir(this.dataDir, { recursive: true, mode: 448 });
@@ -41988,7 +42090,7 @@ class JsonEventsStore {
     };
   }
   async ensureArrayFile(path) {
-    if (!existsSync(path)) {
+    if (!existsSync2(path)) {
       await writeFile(path, `[]
 `, { encoding: "utf-8", mode: 384 });
     }
@@ -42018,7 +42120,7 @@ class JsonEventsStore {
     });
   }
 }
-function localJsonRuntime(dataDir = getEventsDataDir()) {
+function localJsonRuntime(dataDir2 = getEventsDataDir()) {
   return {
     mode: "local-files",
     name: "json-events-store",
@@ -42031,7 +42133,7 @@ function localJsonRuntime(dataDir = getEventsDataDir()) {
     durable: true,
     idempotency: "best-effort-local",
     replayCursors: true,
-    description: `Local JSON files in ${dataDir}; no SQLite, Postgres, S3, or AWS runtime is configured by this store.`
+    description: `Local JSON files in ${dataDir2}; no SQLite, Postgres, S3, or AWS runtime is configured by this store.`
   };
 }
 function encodeLocalJsonEventCursor(offset, options = {}) {
@@ -42095,8 +42197,8 @@ function assertCursorFilter(name, cursorValue, optionValue) {
 function findEventByIdentity(events, identity) {
   return events.find((event) => identity.id !== undefined && event.id === identity.id || identity.dedupeKey !== undefined && event.dedupeKey === identity.dedupeKey);
 }
-async function getEventsStatus(dataDir) {
-  const store = new JsonEventsStore(dataDir);
+async function getEventsStatus(dataDir2) {
+  const store = new JsonEventsStore(dataDir2);
   await store.init();
   const [channels, events, deliveries] = await Promise.all([
     store.listChannels(),
@@ -42138,9 +42240,9 @@ async function getEventsStatus(dataDir) {
     }
   };
 }
-function statusFile(dataDir, fileName, records) {
-  const path = join(dataDir, fileName);
-  return { path, exists: existsSync(path), records };
+function statusFile(dataDir2, fileName, records) {
+  const path = join2(dataDir2, fileName);
+  return { path, exists: existsSync2(path), records };
 }
 var DEFAULT_SIGNATURE_TOLERANCE_MS = 5 * 60 * 1000;
 function buildSignatureBase(timestamp, body) {
@@ -42150,6 +42252,214 @@ function signPayload(secret, timestamp, body) {
   const digest = createHmac("sha256", secret).update(buildSignatureBase(timestamp, body)).digest("hex");
   return `sha256=${digest}`;
 }
+var DEFAULT_MAX_REDIRECTS = 5;
+var IPV4_PRIVATE_RANGES = [
+  [0, 16777215],
+  [167772160, 184549375],
+  [1681915904, 1686110207],
+  [2130706432, 2147483647],
+  [2851995648, 2852061183],
+  [2886729728, 2887778303],
+  [3221225472, 3221225727],
+  [3221225984, 3221226239],
+  [3227017984, 3227018239],
+  [3232235520, 3232301055],
+  [3323068416, 3323199487],
+  [3325256704, 3325256959],
+  [3405803776, 3405804031],
+  [3758096384, 4294967295]
+];
+var IPV6_SPECIAL_PREFIXES = [
+  { groups: [0, 0, 0, 0, 0, 0, 0, 0], bits: 128 },
+  { groups: [0, 0, 0, 0, 0, 0, 0, 1], bits: 128 },
+  { groups: [0, 0, 0, 0, 0, 65535, 0, 0], bits: 96 },
+  { groups: [100, 65435, 0, 0, 0, 0, 0, 0], bits: 96 },
+  { groups: [256, 0, 0, 0, 0, 0, 0, 0], bits: 64 },
+  { groups: [8193, 0, 0, 0, 0, 0, 0, 0], bits: 32 },
+  { groups: [8193, 2, 0, 0, 0, 0, 0, 0], bits: 48 },
+  { groups: [8193, 16, 0, 0, 0, 0, 0, 0], bits: 28 },
+  { groups: [8193, 3512, 0, 0, 0, 0, 0, 0], bits: 32 },
+  { groups: [8194, 0, 0, 0, 0, 0, 0, 0], bits: 16 },
+  { groups: [16383, 0, 0, 0, 0, 0, 0, 0], bits: 20 },
+  { groups: [64512, 0, 0, 0, 0, 0, 0, 0], bits: 7 },
+  { groups: [65152, 0, 0, 0, 0, 0, 0, 0], bits: 10 },
+  { groups: [65216, 0, 0, 0, 0, 0, 0, 0], bits: 10 },
+  { groups: [65280, 0, 0, 0, 0, 0, 0, 0], bits: 8 }
+];
+function isPrivateAddress(address) {
+  const normalized = stripZoneId(address);
+  const version = isIP(normalized);
+  if (version === 4) {
+    const integer = ipv4ToInt(normalized);
+    if (integer === undefined)
+      return true;
+    return IPV4_PRIVATE_RANGES.some(([low, high]) => integer >= low && integer <= high);
+  }
+  if (version === 6) {
+    const groups = ipv6Groups(normalized);
+    if (!groups)
+      return true;
+    for (const prefix of IPV6_SPECIAL_PREFIXES) {
+      if (!ipv6MatchesPrefix(groups, prefix.groups, prefix.bits))
+        continue;
+      if (prefix.bits === 96 && groups[5] === 65535) {
+        return isPrivateAddress(ipv4IntToString(groups[6] << 16 | groups[7]));
+      }
+      if (prefix.bits === 16 && groups[0] === 8194) {
+        return isPrivateAddress(ipv4IntToString(groups[1] << 16 | groups[2]));
+      }
+      return true;
+    }
+    return false;
+  }
+  return true;
+}
+async function resolveWebhookTarget(url, policy = {}) {
+  const hostname = normalizeHostname(url.hostname);
+  const allowlist = (policy.allowPrivateHosts ?? []).map((entry) => normalizeHostname(entry.toLowerCase()));
+  if (allowlist.includes(hostname)) {
+    const version2 = isIP(hostname);
+    if (version2 === 4 || version2 === 6) {
+      return { hostname, addresses: [hostname] };
+    }
+    const lookup2 = policy.lookup ?? defaultTargetLookup;
+    let resolved2;
+    try {
+      resolved2 = await lookup2(hostname);
+    } catch {
+      throw new Error(`Webhook target ${hostname} could not be resolved`);
+    }
+    if (!Array.isArray(resolved2) || resolved2.length === 0) {
+      throw new Error(`Webhook target ${hostname} resolved to no addresses`);
+    }
+    const addresses = resolved2.map((entry) => normalizeHostname(entry.address));
+    return { hostname, addresses };
+  }
+  const version = isIP(hostname);
+  if (version === 4 || version === 6) {
+    if (isPrivateAddress(hostname)) {
+      throw new Error(`Webhook target ${hostname} is a private or special-use address`);
+    }
+    return { hostname, addresses: [hostname] };
+  }
+  const lookup = policy.lookup ?? defaultTargetLookup;
+  let resolved;
+  try {
+    resolved = await lookup(hostname);
+  } catch {
+    throw new Error(`Webhook target ${hostname} could not be resolved`);
+  }
+  if (!Array.isArray(resolved) || resolved.length === 0) {
+    throw new Error(`Webhook target ${hostname} resolved to no addresses`);
+  }
+  const allowed = [];
+  for (const entry of resolved) {
+    const address = normalizeHostname(entry.address);
+    if (isPrivateAddress(address)) {
+      if (allowlist.includes(address)) {
+        allowed.push(address);
+        continue;
+      }
+      throw new Error(`Webhook target ${hostname} resolves to private or special-use address ${address}`);
+    }
+    allowed.push(address);
+  }
+  if (allowed.length === 0) {
+    throw new Error(`Webhook target ${hostname} resolved to no public addresses`);
+  }
+  return { hostname, addresses: allowed };
+}
+function normalizeMaxRedirects(value) {
+  if (value === undefined)
+    return DEFAULT_MAX_REDIRECTS;
+  if (!Number.isInteger(value) || value < 0)
+    throw new Error("webhookTargetPolicy.maxRedirects must be a non-negative integer");
+  return value;
+}
+var defaultTargetLookup = async (hostname) => {
+  return dnsLookup(hostname, { all: true, verbatim: false });
+};
+function normalizeHostname(hostname) {
+  const lower = hostname.toLowerCase();
+  if (lower.startsWith("[") && lower.endsWith("]"))
+    return lower.slice(1, -1);
+  return lower;
+}
+function stripZoneId(address) {
+  const percent = address.indexOf("%");
+  return percent === -1 ? address : address.slice(0, percent);
+}
+function ipv4ToInt(address) {
+  const parts = address.split(".");
+  if (parts.length !== 4)
+    return;
+  let value = 0;
+  for (const part of parts) {
+    if (!/^\d{1,3}$/.test(part))
+      return;
+    const octet = Number(part);
+    if (octet > 255)
+      return;
+    value = value << 8 | octet;
+  }
+  return value >>> 0;
+}
+function ipv4IntToString(integer) {
+  return [
+    integer >>> 24 & 255,
+    integer >>> 16 & 255,
+    integer >>> 8 & 255,
+    integer & 255
+  ].join(".");
+}
+function ipv6Groups(address) {
+  const raw = stripZoneId(address);
+  const doubleColon = raw.indexOf("::");
+  const headText = doubleColon === -1 ? raw : raw.slice(0, doubleColon);
+  const tailText = doubleColon === -1 ? "" : raw.slice(doubleColon + 2);
+  const parseGroups = (text) => {
+    if (text === "")
+      return [];
+    const out = [];
+    for (const part of text.split(":")) {
+      if (part.includes(".")) {
+        const v4 = ipv4ToInt(part);
+        if (v4 === undefined)
+          return;
+        out.push(v4 >>> 16 & 65535, v4 & 65535);
+      } else {
+        if (!/^[0-9a-fA-F]{1,4}$/.test(part))
+          return;
+        out.push(parseInt(part, 16));
+      }
+    }
+    return out;
+  };
+  const head = parseGroups(headText);
+  if (!head)
+    return;
+  const tail = parseGroups(tailText);
+  if (!tail)
+    return;
+  const total = head.length + tail.length;
+  if (doubleColon === -1) {
+    return total === 8 ? head : undefined;
+  }
+  if (total >= 8)
+    return;
+  return [...head, ...new Array(8 - total).fill(0), ...tail];
+}
+function ipv6MatchesPrefix(groups, prefixGroups, prefixBits) {
+  let remaining = prefixBits;
+  for (let index = 0;index < prefixGroups.length && remaining > 0; index += 1) {
+    const take = Math.min(16, remaining);
+    const mask = 65535 << 16 - take & 65535;
+    if ((groups[index] & mask) !== (prefixGroups[index] & mask))
+      return false;
+    remaining -= take;
+  }
+  return true;
+}
 function now() {
   return new Date().toISOString();
 }
@@ -42180,9 +42490,18 @@ function buildWebhookRequest(event, channel, options = {}) {
   }
   return { body, headers };
 }
+function normalizeWebhookUrl(raw) {
+  const url = new URL(raw);
+  if (url.username !== "" || url.password !== "") {
+    url.username = "";
+    url.password = "";
+  }
+  return url.toString();
+}
 async function dispatchWebhook(event, channel, options = {}) {
   if (!channel.webhook)
     throw new Error(`Channel ${channel.id} has no webhook config`);
+  const webhookUrl = normalizeWebhookUrl(channel.webhook.url);
   const startedAt = now();
   let secret = channel.webhook.secret;
   if (channel.webhook.secretRef) {
@@ -42199,10 +42518,14 @@ async function dispatchWebhook(event, channel, options = {}) {
   }
   const timestamp = (options.now?.() ?? new Date).toISOString();
   const { body, headers } = buildWebhookRequest(event, channel, { secret, timestamp });
+  const validateTargets = options.webhookTargetPolicy !== undefined || options.fetchImpl === undefined;
+  if (validateTargets) {
+    return dispatchValidatedWebhook(event, channel, { body, headers, startedAt, options });
+  }
   const controller = new AbortController;
   const timeout = setTimeout(() => controller.abort(), channel.webhook.timeoutMs ?? 15000);
   try {
-    const response = await (options.fetchImpl ?? fetch)(channel.webhook.url, {
+    const response = await (options.fetchImpl ?? fetch)(webhookUrl, {
       method: "POST",
       headers,
       body,
@@ -42230,6 +42553,130 @@ async function dispatchWebhook(event, channel, options = {}) {
     clearTimeout(timeout);
   }
 }
+function isRedirectStatus(status) {
+  return status === 301 || status === 302 || status === 303 || status === 307 || status === 308;
+}
+function redirectKeepsBody(status) {
+  return status === 307 || status === 308;
+}
+async function pinnedNativeRequest(target, addresses, method, headers, body, signal, tls) {
+  const isHttps = target.protocol === "https:";
+  if (!isHttps && target.protocol !== "http:") {
+    throw new Error(`Webhook target uses unsupported protocol ${target.protocol}`);
+  }
+  const defaultPort = isHttps ? 443 : 80;
+  const port = target.port ? Number(target.port) : defaultPort;
+  const requestOptions = {
+    hostname: target.hostname,
+    port,
+    path: `${target.pathname}${target.search}`,
+    method,
+    headers,
+    ...tls?.ca ? { ca: tls.ca } : {},
+    lookup: (hostname, _options, callback) => {
+      const entries = addresses.map((address) => ({
+        address,
+        family: address.includes(":") ? 6 : 4
+      }));
+      callback(null, entries);
+    }
+  };
+  return new Promise((resolve2, reject) => {
+    const request = isHttps ? nodeHttpsRequest(requestOptions, onResponse) : nodeHttpRequest(requestOptions, onResponse);
+    const onAbort = () => {
+      const error = new Error("The operation was aborted.");
+      error.name = "AbortError";
+      request.destroy(error);
+    };
+    if (signal.aborted)
+      onAbort();
+    else
+      signal.addEventListener("abort", onAbort, { once: true });
+    request.on("error", reject);
+    if (body !== undefined)
+      request.write(body);
+    request.end();
+    function onResponse(response) {
+      const chunks = [];
+      response.on("data", (chunk) => chunks.push(Buffer.from(chunk)));
+      response.on("error", reject);
+      response.on("end", () => {
+        const headersRecord = {};
+        for (const [name, value] of Object.entries(response.headers)) {
+          if (typeof value === "string")
+            headersRecord[name] = value;
+          else if (Array.isArray(value))
+            headersRecord[name] = value.join(", ");
+        }
+        resolve2(new Response(Buffer.concat(chunks), { status: response.statusCode ?? 200, headers: headersRecord }));
+      });
+    }
+  });
+}
+async function dispatchValidatedWebhook(event, channel, input) {
+  const { body, headers, startedAt, options } = input;
+  const webhook = channel.webhook;
+  if (!webhook)
+    throw new Error(`Channel ${channel.id} has no webhook config`);
+  const policy = options.webhookTargetPolicy ?? {};
+  const maxRedirects = normalizeMaxRedirects(policy.maxRedirects);
+  const controller = new AbortController;
+  const timeout = setTimeout(() => controller.abort(), webhook.timeoutMs ?? 15000);
+  try {
+    let target = new URL(normalizeWebhookUrl(webhook.url));
+    let requestHeaders = headers;
+    let method = "POST";
+    let requestBody = body;
+    let redirectsFollowed = 0;
+    for (;; ) {
+      const resolved = await resolveWebhookTarget(target, policy).catch((error) => {
+        throw new Error(`Webhook target rejected by SSRF guard: ${error.message}`);
+      });
+      const response = options.fetchImpl ? await options.fetchImpl(target, {
+        method,
+        headers: requestHeaders,
+        body: requestBody,
+        signal: controller.signal,
+        redirect: "manual"
+      }) : await pinnedNativeRequest(target, resolved.addresses, method, requestHeaders, requestBody, controller.signal, options.tls);
+      const location = response.headers.get("location");
+      if (isRedirectStatus(response.status) && location) {
+        if (redirectsFollowed >= maxRedirects) {
+          return failedAttempt(startedAt, `Webhook target exceeded ${maxRedirects} redirects`);
+        }
+        redirectsFollowed += 1;
+        const next = new URL(location, target);
+        target = next;
+        if (!redirectKeepsBody(response.status)) {
+          method = "GET";
+          requestBody = undefined;
+          requestHeaders = Object.fromEntries(Object.entries(requestHeaders).filter(([name]) => name.toLowerCase() !== "content-type" && name.toLowerCase() !== "content-length"));
+        }
+        continue;
+      }
+      const responseBody = truncate(await response.text());
+      return {
+        attempt: 1,
+        status: response.ok ? "success" : "failed",
+        startedAt,
+        completedAt: now(),
+        responseStatus: response.status,
+        responseBody,
+        error: response.ok ? undefined : `Webhook returned HTTP ${response.status}`
+      };
+    }
+  } catch (error) {
+    return {
+      attempt: 1,
+      status: "failed",
+      startedAt,
+      completedAt: now(),
+      error: error instanceof Error ? error.message : String(error)
+    };
+  } finally {
+    clearTimeout(timeout);
+  }
+}
 function failedAttempt(startedAt, error) {
   return {
     attempt: 1,
@@ -42258,7 +42705,7 @@ async function dispatchCommand(event, channel) {
     HASNA_EVENT_SCHEMA_VERSION: event.schemaVersion,
     HASNA_EVENT_JSON: eventJson
   };
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     const child = spawn(channel.command.command, channel.command.args ?? [], {
       cwd: channel.command.cwd,
       env,
@@ -42276,7 +42723,7 @@ async function dispatchCommand(event, channel) {
     });
     child.on("error", (error) => {
       clearTimeout(timeout);
-      resolve({
+      resolve2({
         attempt: 1,
         status: "failed",
         startedAt,
@@ -42289,7 +42736,7 @@ async function dispatchCommand(event, channel) {
     child.on("close", (code, signal) => {
       clearTimeout(timeout);
       const success = code === 0;
-      resolve({
+      resolve2({
         attempt: 1,
         status: success ? "success" : "failed",
         startedAt,
@@ -42411,6 +42858,22 @@ function setPath(input, path, replacement) {
   if (last && last in cursor)
     cursor[last] = replacement;
 }
+var MAX_PACKAGE_BYTES = 1024 * 1024;
+var MAX_CREDENTIAL_FILE_BYTES = 64 * 1024;
+var INSPECT_CUSTOM = Symbol.for("nodejs.util.inspect.custom");
+var CREDENTIAL_SEAL = Symbol.for("hasna:contracts:sealedCredential");
+var AMBIENT_ENVIRONMENT = Symbol.for("hasna:contracts:ambientClientEnvironment");
+var requireSecretsSdk = createRequire(import.meta.url);
+var IDEMPOTENT_METHODS = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
+var AUTHORITY_OVERRIDE_HEADERS = new Set([
+  "host",
+  ":authority",
+  "forwarded",
+  "x-forwarded-host",
+  "x-original-host"
+]);
+var MAX_ENVELOPE_BYTES = 256 * 1024;
+var MAX_REQUEST_BYTES = MAX_ENVELOPE_BYTES * 2 + 8192;
 function createEvent(input) {
   return {
     id: input.id ?? randomUUID2(),
@@ -42439,7 +42902,9 @@ class EventsClient {
     this.transportOptions = {
       fetchImpl: options.fetchImpl,
       secretResolver: options.secretResolver,
-      now: options.now
+      now: options.now,
+      tls: options.tls,
+      webhookTargetPolicy: options.webhookTargetPolicy
     };
     this.catalog = options.catalog ?? defaultEventTypeCatalog;
     this.validateCatalogTypes = options.validateCatalogTypes ?? false;
@@ -42726,6 +43191,13 @@ function parseMatcherExpression(value, label) {
     negated: false
   };
 }
+function webhookTargetPolicyFromEnv() {
+  const value = process.env.HASNA_EVENTS_ALLOW_PRIVATE_WEBHOOK_TARGETS;
+  if (!value)
+    return;
+  const hosts = value.split(",").map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+  return hosts.length > 0 ? { allowPrivateHosts: hosts } : undefined;
+}
 var DEFAULT_EVENT_LIST_LIMIT = 100;
 function parseJsonObject(value, fallback) {
   if (!value)
@@ -42751,7 +43223,7 @@ function parseHeaders(values) {
 function createClient(options) {
   if (options.createClient)
     return options.createClient();
-  return new EventsClient({ store: new JsonEventsStore(options.dataDir) });
+  return new EventsClient({ store: new JsonEventsStore(options.dataDir), webhookTargetPolicy: webhookTargetPolicyFromEnv() });
 }
 function print(value, json, text) {
   if (json)
@@ -42832,6 +43304,8 @@ function registerChannelCommands(program, options) {
         metadata: parseJsonObject(actionOptions.metadata, {})
       }, { honorFilters: actionOptions.honorFilters });
       print(result, json, `${result.status}: ${result.channelId}`);
+      if (result.status === "failed")
+        process.exitCode = 1;
     } catch (error) {
       fail(error, json);
     }
@@ -42924,7 +43398,7 @@ function replaySummary(events, deliveries, nextCursor) {
 // src/cli/index.tsx
 import { render } from "ink";
 
-// ../hooks0102-standalone-lock/node_modules/commander/esm.mjs
+// ../../node_modules/.bun/commander@12.1.0/node_modules/commander/esm.mjs
 var import__ = __toESM(require_commander(), 1);
 var {
   program,
@@ -42942,19 +43416,19 @@ var {
 
 // src/cli/index.tsx
 import chalk2 from "chalk";
-import { existsSync as existsSync16, readFileSync as readFileSync20, rmSync as rmSync6 } from "fs";
-import { join as join24, dirname as dirname22 } from "path";
+import { existsSync as existsSync19, readFileSync as readFileSync23, rmSync as rmSync6 } from "fs";
+import { join as join31, dirname as dirname24 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 
 // src/cli/components/App.tsx
 import { useState as useState7 } from "react";
 import { Box as Box8, Text as Text10, useApp, useInput as useInput5 } from "ink";
 
-// ../hooks0102-standalone-lock/node_modules/ink-select-input/build/Indicator.js
+// ../../node_modules/.bun/ink-select-input@6.2.0+fa875fef9f949ebd/node_modules/ink-select-input/build/Indicator.js
 import React from "react";
 import { Box, Text } from "ink";
 
-// ../hooks0102-standalone-lock/node_modules/is-unicode-supported/index.js
+// ../../node_modules/.bun/is-unicode-supported@2.1.0/node_modules/is-unicode-supported/index.js
 import process2 from "process";
 function isUnicodeSupported() {
   const { env } = process2;
@@ -42965,7 +43439,7 @@ function isUnicodeSupported() {
   return Boolean(env.WT_SESSION) || Boolean(env.TERMINUS_SUBLIME) || env.ConEmuTask === "{cmd::Cmder}" || TERM_PROGRAM === "Terminus-Sublime" || TERM_PROGRAM === "vscode" || TERM === "xterm-256color" || TERM === "alacritty" || TERM === "rxvt-unicode" || TERM === "rxvt-unicode-256color" || env.TERMINAL_EMULATOR === "JetBrains-JediTerm";
 }
 
-// ../hooks0102-standalone-lock/node_modules/figures/index.js
+// ../../node_modules/.bun/figures@6.1.0/node_modules/figures/index.js
 var common = {
   circleQuestionMark: "(?)",
   questionMarkPrefix: "(?)",
@@ -43241,23 +43715,23 @@ var figures = shouldUseMain ? mainSymbols : fallbackSymbols;
 var figures_default = figures;
 var replacements = Object.entries(specialMainSymbols);
 
-// ../hooks0102-standalone-lock/node_modules/ink-select-input/build/Indicator.js
+// ../../node_modules/.bun/ink-select-input@6.2.0+fa875fef9f949ebd/node_modules/ink-select-input/build/Indicator.js
 function Indicator({ isSelected = false }) {
   return React.createElement(Box, { marginRight: 1 }, isSelected ? React.createElement(Text, { color: "blue" }, figures_default.pointer) : React.createElement(Text, null, " "));
 }
 var Indicator_default = Indicator;
-// ../hooks0102-standalone-lock/node_modules/ink-select-input/build/Item.js
+// ../../node_modules/.bun/ink-select-input@6.2.0+fa875fef9f949ebd/node_modules/ink-select-input/build/Item.js
 import * as React2 from "react";
 import { Text as Text2 } from "ink";
 function Item({ isSelected = false, label }) {
   return React2.createElement(Text2, { color: isSelected ? "blue" : undefined }, label);
 }
 var Item_default = Item;
-// ../hooks0102-standalone-lock/node_modules/ink-select-input/build/SelectInput.js
+// ../../node_modules/.bun/ink-select-input@6.2.0+fa875fef9f949ebd/node_modules/ink-select-input/build/SelectInput.js
 import { isDeepStrictEqual } from "util";
 import React3, { useState, useEffect, useRef, useCallback } from "react";
 
-// ../hooks0102-standalone-lock/node_modules/to-rotated/index.js
+// ../../node_modules/.bun/to-rotated@1.0.0/node_modules/to-rotated/index.js
 function toRotated(array, steps) {
   if (!Array.isArray(array)) {
     throw new TypeError(`Expected an array, got \`${typeof array}\`.`);
@@ -43279,7 +43753,7 @@ function toRotated(array, steps) {
   ];
 }
 
-// ../hooks0102-standalone-lock/node_modules/ink-select-input/build/SelectInput.js
+// ../../node_modules/.bun/ink-select-input@6.2.0+fa875fef9f949ebd/node_modules/ink-select-input/build/SelectInput.js
 import { Box as Box2, useInput } from "ink";
 function SelectInput({ items = [], isFocused = true, initialIndex = 0, indicatorComponent = Indicator_default, itemComponent = Item_default, limit: customLimit, onSelect, onHighlight }) {
   const hasLimit = typeof customLimit === "number" && items.length > customLimit;
@@ -43575,7 +44049,7 @@ function HookSelect({
 import { useState as useState4, useEffect as useEffect3 } from "react";
 import { Box as Box6, Text as Text7, useInput as useInput4 } from "ink";
 
-// ../hooks0102-standalone-lock/node_modules/ink-text-input/build/index.js
+// ../../node_modules/.bun/ink-text-input@6.0.0+fa875fef9f949ebd/node_modules/ink-text-input/build/index.js
 import React5, { useState as useState3, useEffect as useEffect2 } from "react";
 import { Text as Text6, useInput as useInput3 } from "ink";
 import chalk from "chalk";
@@ -43753,7 +44227,7 @@ function SearchView({
 import { useState as useState6, useEffect as useEffect5 } from "react";
 import { Box as Box7, Text as Text9 } from "ink";
 
-// ../hooks0102-standalone-lock/node_modules/ink-spinner/build/index.js
+// ../../node_modules/.bun/ink-spinner@5.0.0+fa875fef9f949ebd/node_modules/ink-spinner/build/index.js
 var import_cli_spinners = __toESM(require_cli_spinners(), 1);
 import React7, { useState as useState5, useEffect as useEffect4 } from "react";
 import { Text as Text8 } from "ink";
@@ -44117,6 +44591,403 @@ function App({ initialHooks, overwrite = false }) {
 
 // src/cli/index.tsx
 init_native_safety();
+
+// src/native-safety.ts
+init_native_safety();
+import { execFile } from "child_process";
+import { createHash as createHash7, randomUUID as randomUUID5 } from "crypto";
+import { closeSync as closeSync4, constants as constants3, existsSync as existsSync14, fstatSync as fstatSync3, fsyncSync, linkSync as linkSync3, lstatSync as lstatSync7, mkdirSync as mkdirSync9, openSync as openSync4, readFileSync as readFileSync9, realpathSync as realpathSync7, renameSync as renameSync3, unlinkSync as unlinkSync5, writeFileSync as writeFileSync8 } from "fs";
+import { homedir as homedir7 } from "os";
+import { dirname as dirname11, isAbsolute as isAbsolute7, join as join13, resolve as resolve15 } from "path";
+
+class NativeSafetyError extends Error {
+  code;
+  reason;
+  constructor(code2, reason) {
+    super(`Native deletion safety refused (${code2}). Run the reviewed Hooks safety setup before using shell or patch tools.`);
+    this.code = code2;
+    this.reason = reason;
+    this.name = "NativeSafetyError";
+  }
+}
+var hash = (value) => createHash7("sha256").update(value).digest("hex");
+var filename = "sumi-trash-guard.json";
+var owner2 = (uid2) => uid2 === 0 || uid2 === process.getuid?.();
+function safeDirectory(path) {
+  for (let cursor = path;; cursor = dirname11(cursor)) {
+    const stat2 = lstatSync7(cursor);
+    if (!stat2.isDirectory() || !owner2(stat2.uid) || stat2.mode & 18)
+      throw new NativeSafetyError("binding_invalid");
+    if (dirname11(cursor) === cursor)
+      return;
+  }
+}
+function canonicalHome(home) {
+  if (!isAbsolute7(home) || home.includes("\x00") || realpathSync7(home) !== resolve15(home))
+    throw new NativeSafetyError("binding_invalid");
+  safeDirectory(home);
+  return resolve15(home);
+}
+function readOwned(path) {
+  safeDirectory(dirname11(path));
+  const fd = openSync4(path, constants3.O_RDONLY | constants3.O_NOFOLLOW | constants3.O_NONBLOCK);
+  try {
+    const stat2 = fstatSync3(fd);
+    if (!stat2.isFile() || !owner2(stat2.uid) || stat2.mode & 63 || stat2.size > 32768)
+      throw new NativeSafetyError("binding_invalid");
+    const value = readFileSync9(fd, "utf8");
+    if (Buffer.byteLength(value) > 32768)
+      throw new NativeSafetyError("binding_invalid");
+    return value;
+  } finally {
+    closeSync4(fd);
+  }
+}
+function parseRecord(text3, home) {
+  const record3 = JSON.parse(text3);
+  if (!record3 || Array.isArray(record3) || Object.keys(record3).sort().join() !== "command,harness,schema" || record3.schema !== "hasna.hooks.native-safety.v1" || record3.harness !== "sumi" || typeof record3.command !== "string")
+    throw new NativeSafetyError("binding_invalid");
+  const binding = nativeSafetyCommandBinding(record3.command);
+  if (binding?.name !== "trash-guard" || binding.home !== home)
+    throw new NativeSafetyError("binding_invalid");
+  return record3;
+}
+function syncDirectory(path) {
+  const fd = openSync4(path, constants3.O_RDONLY | constants3.O_DIRECTORY | constants3.O_NOFOLLOW);
+  try {
+    fsyncSync(fd);
+  } finally {
+    closeSync4(fd);
+  }
+}
+function readNativeSafetyRegistration(home = homedir7()) {
+  try {
+    home = canonicalHome(home);
+    const path = join13(home, ".hasna/hooks/native", filename), text3 = readOwned(path);
+    return { record: parseRecord(text3, home), sha256: hash(text3), path };
+  } catch (error61) {
+    if (error61 instanceof NativeSafetyError)
+      throw error61;
+    throw new NativeSafetyError(error61?.code === "ENOENT" ? "binding_missing" : "binding_invalid");
+  }
+}
+function registerNativeSafety(options = {}) {
+  const home = canonicalHome(options.home ?? homedir7());
+  const record3 = { schema: "hasna.hooks.native-safety.v1", harness: "sumi", command: options.command ?? installedNativeSafetyCommand("trash-guard") };
+  const text3 = JSON.stringify(record3) + `
+`;
+  parseRecord(text3, home);
+  for (const dir of [join13(home, ".hasna"), join13(home, ".hasna/hooks"), join13(home, ".hasna/hooks/native")]) {
+    try {
+      mkdirSync9(dir, { mode: 448 });
+      syncDirectory(dirname11(dir));
+    } catch (error61) {
+      if (error61.code !== "EEXIST")
+        throw error61;
+    }
+    safeDirectory(dir);
+  }
+  const directory2 = join13(home, ".hasna/hooks/native"), path = join13(directory2, filename), lock = path + ".lock";
+  let lockFD;
+  try {
+    lockFD = openSync4(lock, constants3.O_CREAT | constants3.O_EXCL | constants3.O_WRONLY, 384);
+  } catch {
+    throw new NativeSafetyError("binding_busy");
+  }
+  const lockIdentity = fstatSync3(lockFD);
+  let temporaryIdentity;
+  const temporary = join13(directory2, `.${filename}.${randomUUID5()}`);
+  try {
+    writeFileSync8(lockFD, JSON.stringify({ pid: process.pid, expectedSHA256: options.expectedSHA256 ?? "absent" }));
+    fsyncSync(lockFD);
+    syncDirectory(directory2);
+    let before;
+    try {
+      before = readNativeSafetyRegistration(home);
+    } catch (error61) {
+      if (!(error61 instanceof NativeSafetyError) || error61.code !== "binding_missing")
+        throw error61;
+    }
+    if (before?.sha256 === hash(text3))
+      return { ok: true, changed: false, path, sha256: before.sha256 };
+    if (before ? options.expectedSHA256 !== before.sha256 : options.expectedSHA256 !== undefined && options.expectedSHA256 !== "absent")
+      throw new NativeSafetyError("binding_changed");
+    if (before) {
+      const backup = path + ".before-" + before.sha256;
+      if (existsSync14(backup)) {
+        if (hash(readOwned(backup)) !== before.sha256)
+          throw new NativeSafetyError("binding_changed");
+      } else {
+        const original = readOwned(path);
+        if (hash(original) !== before.sha256)
+          throw new NativeSafetyError("binding_changed");
+        const fd2 = openSync4(backup, constants3.O_CREAT | constants3.O_EXCL | constants3.O_WRONLY, 384);
+        try {
+          writeFileSync8(fd2, original);
+          fsyncSync(fd2);
+        } finally {
+          closeSync4(fd2);
+        }
+        syncDirectory(directory2);
+      }
+    }
+    const fd = openSync4(temporary, constants3.O_CREAT | constants3.O_EXCL | constants3.O_WRONLY, 384);
+    try {
+      temporaryIdentity = fstatSync3(fd);
+      writeFileSync8(fd, text3);
+      fsyncSync(fd);
+    } finally {
+      closeSync4(fd);
+    }
+    if (before) {
+      if (hash(readOwned(path)) !== before.sha256)
+        throw new NativeSafetyError("binding_changed");
+      renameSync3(temporary, path);
+    } else {
+      linkSync3(temporary, path);
+      unlinkSync5(temporary);
+    }
+    syncDirectory(directory2);
+    const after = readNativeSafetyRegistration(home);
+    if (after.sha256 !== hash(text3))
+      throw new NativeSafetyError("binding_changed");
+    return { ok: true, changed: true, path, sha256: after.sha256 };
+  } finally {
+    closeSync4(lockFD);
+    const currentTemporary = lstatSync7(temporary, { throwIfNoEntry: false });
+    if (temporaryIdentity && currentTemporary?.dev === temporaryIdentity.dev && currentTemporary.ino === temporaryIdentity.ino)
+      unlinkSync5(temporary);
+    const currentLock = lstatSync7(lock, { throwIfNoEntry: false });
+    if (currentLock?.dev !== lockIdentity.dev || currentLock.ino !== lockIdentity.ino)
+      throw new NativeSafetyError("binding_changed");
+    unlinkSync5(lock);
+    syncDirectory(directory2);
+  }
+}
+async function evaluateRecord(event, record3, signal) {
+  if (!event || event.hook_event_name !== "PreToolUse" || !["Bash", "apply_patch"].includes(event.tool_name) || typeof event.cwd !== "string" || !isAbsolute7(event.cwd) || !event.tool_input || typeof event.tool_input !== "object" || Array.isArray(event.tool_input))
+    throw new NativeSafetyError("input_invalid");
+  const input2 = JSON.stringify(event);
+  if (Buffer.byteLength(input2) > 1048576)
+    throw new NativeSafetyError("input_invalid");
+  const output2 = await new Promise((accept, reject) => {
+    const child = execFile("/bin/sh", ["-c", record3.command], { cwd: "/", env: {}, encoding: "utf8", timeout: 8000, maxBuffer: 1048576, signal }, (error61, stdout, stderr) => {
+      if (error61 || stderr) {
+        reject(new NativeSafetyError("guard_failed"));
+        return;
+      }
+      accept(stdout);
+    });
+    child.stdin?.on("error", () => {});
+    child.stdin?.end(input2);
+  });
+  if (!output2)
+    return { decision: "continue" };
+  try {
+    const value = JSON.parse(output2);
+    if (Object.keys(value).join() !== "hookSpecificOutput")
+      throw new Error;
+    const verdict = value.hookSpecificOutput;
+    if (verdict.hookEventName !== "PreToolUse")
+      throw new Error;
+    if (verdict.permissionDecision === "deny" && Object.keys(verdict).sort().join() === "hookEventName,permissionDecision,permissionDecisionReason" && typeof verdict.permissionDecisionReason === "string" && verdict.permissionDecisionReason.trim())
+      return { decision: "deny", reason: verdict.permissionDecisionReason };
+    if (event.tool_name === "Bash" && verdict.permissionDecision === "allow" && Object.keys(verdict).sort().join() === "hookEventName,permissionDecision,updatedInput" && typeof verdict.updatedInput?.command === "string" && verdict.updatedInput.command.trim())
+      return { decision: "rewrite", command: verdict.updatedInput.command };
+  } catch {}
+  throw new NativeSafetyError("guard_failed");
+}
+async function verifyNativeSafetyCommand(command, home = homedir7()) {
+  home = canonicalHome(home);
+  const record3 = parseRecord(JSON.stringify({ schema: "hasna.hooks.native-safety.v1", harness: "sumi", command }), home);
+  const verdict = await evaluateRecord({ hook_event_name: "PreToolUse", tool_name: "Bash", cwd: home, tool_input: { command: "rm -- .hasna-trash-verification-only" } }, record3);
+  if (verdict.decision !== "rewrite")
+    throw new NativeSafetyError("guard_failed", verdict.decision === "deny" ? verdict.reason.slice(0, 512) : undefined);
+}
+async function verifyNativeSafetyRegistration(home = homedir7()) {
+  const before = readNativeSafetyRegistration(home);
+  await verifyNativeSafetyCommand(before.record.command, home);
+  const after = readNativeSafetyRegistration(home);
+  if (after.sha256 !== before.sha256)
+    throw new NativeSafetyError("binding_changed");
+  return { path: before.path, sha256: before.sha256 };
+}
+
+// hooks/hook-trash-guard/src/binary.ts
+import { dirname as dirname17, isAbsolute as isAbsolute15, join as join17, resolve as resolve17 } from "path";
+import { accessSync, closeSync as closeSync5, constants as constants4, fstatSync as fstatSync4, lstatSync as lstatSync9, openSync as openSync5, readFileSync as readFileSync12, readlinkSync as readlinkSync3, readSync as readSync2, realpathSync as realpathSync8, statSync } from "fs";
+import { spawnSync } from "child_process";
+function trustedOwner(uid2) {
+  return uid2 === 0 || uid2 === process.getuid?.();
+}
+function safeExecutableFile(path, systemBinAlias = false) {
+  let current2 = path;
+  for (let hop = 0;hop < 32; hop++) {
+    if (!isAbsolute15(current2) || current2.length > 4096 || !safeBinaryDirectory("/"))
+      return false;
+    const parts = current2.split("/"), name = parts.pop();
+    if (!name || name === "." || name === "..")
+      return false;
+    let parent = "/";
+    for (const part of parts) {
+      if (!part || part === ".")
+        continue;
+      if (part === "..") {
+        parent = dirname17(parent);
+        continue;
+      }
+      const next = join17(parent, part), info2 = lstatSync9(next);
+      if (systemBinAlias && next === "/bin" && info2.isSymbolicLink() && info2.uid === 0) {
+        const target = realpathSync8(next);
+        if (!safeBinaryDirectory(target))
+          return false;
+        parent = target;
+        continue;
+      }
+      if (!info2.isDirectory() || !trustedOwner(info2.uid) || info2.mode & 18)
+        return false;
+      parent = next;
+    }
+    const candidate = join17(parent, name), info = lstatSync9(candidate);
+    if (!trustedOwner(info.uid))
+      return false;
+    if (info.isSymbolicLink()) {
+      const target = readlinkSync3(candidate);
+      current2 = isAbsolute15(target) ? target : parent + "/" + target;
+      continue;
+    }
+    return info.isFile() && Boolean(info.mode & 73) && !(info.mode & 18);
+  }
+  return false;
+}
+function safeInterpreterSearchDirectory(path) {
+  if (!isAbsolute15(path) || resolve17(path) !== (path.replace(/\/+$/, "") || "/"))
+    return false;
+  for (let cursor = resolve17(path);; cursor = dirname17(cursor)) {
+    try {
+      lstatSync9(cursor);
+      return safeBinaryDirectory(cursor);
+    } catch (error61) {
+      if (error61.code !== "ENOENT")
+        return false;
+    }
+    if (dirname17(cursor) === cursor)
+      return false;
+  }
+}
+function safeScriptInterpreter(executable, pathValue) {
+  const fd = openSync5(executable, constants4.O_RDONLY | constants4.O_NONBLOCK | constants4.O_NOFOLLOW);
+  let header;
+  try {
+    if (!fstatSync4(fd).isFile())
+      return false;
+    const bytes = Buffer.alloc(256), length = readSync2(fd, bytes, 0, bytes.length, 0);
+    header = bytes.subarray(0, length).toString("utf8").split(`
+`)[0];
+  } finally {
+    closeSync5(fd);
+  }
+  const direct = /^#!(\/[A-Za-z0-9_./-]+)$/.exec(header);
+  if (direct && direct[1] !== "/usr/bin/env")
+    return safeExecutableFile(direct[1], true);
+  if (header !== "#!/usr/bin/env bun" || !safeExecutableFile("/usr/bin/env", true))
+    return false;
+  for (const dir of pathValue.split(":").slice(0, 64)) {
+    if (!safeInterpreterSearchDirectory(dir))
+      return false;
+    const interpreter = resolve17(dir, "bun");
+    try {
+      if (!statSync(interpreter).isFile())
+        continue;
+      accessSync(interpreter, constants4.X_OK);
+    } catch {
+      continue;
+    }
+    return safeExecutableFile(interpreter, true);
+  }
+  return false;
+}
+function safeBinaryDirectory(path) {
+  let current2 = path;
+  for (;; ) {
+    const info = lstatSync9(current2);
+    if (!info.isDirectory() || !trustedOwner(info.uid) || (info.mode & 18) !== 0)
+      return false;
+    const parent = dirname17(current2);
+    if (parent === current2)
+      return true;
+    current2 = parent;
+  }
+}
+function inspectTrashBinary(env = process.env) {
+  const pathValue = env.PATH ?? "";
+  const deadline = Date.now() + 2000;
+  let failure = "missing";
+  const reject = (code2) => {
+    if (failure === "missing" || failure === "unrecognized_package" || code2.startsWith("unsafe_"))
+      failure = code2;
+  };
+  for (const dir of pathValue.split(":").slice(0, 64)) {
+    if (!isAbsolute15(dir) || Date.now() >= deadline)
+      continue;
+    const candidate = resolve17(dir, "trash");
+    try {
+      const stat2 = statSync(candidate);
+      if (!stat2.isFile() || !trustedOwner(stat2.uid) || (stat2.mode & 73) === 0 || (stat2.mode & 18) !== 0) {
+        reject("unsafe_executable");
+        continue;
+      }
+      const executable = realpathSync8(candidate);
+      if (!safeBinaryDirectory(resolve17(dir)) || !safeBinaryDirectory(dirname17(executable))) {
+        reject("unsafe_directory");
+        continue;
+      }
+      if (!safeExecutableFile(candidate)) {
+        reject("unsafe_directory");
+        continue;
+      }
+      const packageRoot = resolve17(dirname17(executable), "../..");
+      const manifestPath = join17(packageRoot, "package.json");
+      const manifestStat = statSync(manifestPath);
+      if (!manifestStat.isFile() || !trustedOwner(manifestStat.uid) || manifestStat.size > 16384 || (manifestStat.mode & 18) !== 0 || lstatSync9(manifestPath).isSymbolicLink()) {
+        reject("unsafe_manifest");
+        continue;
+      }
+      const manifest = JSON.parse(readFileSync12(manifestPath, "utf8"));
+      if (manifest.name !== "@hasna/trash" || typeof manifest.version !== "string" || typeof manifest.bin?.trash !== "string" || realpathSync8(resolve17(packageRoot, manifest.bin.trash)) !== executable) {
+        reject("unrecognized_package");
+        continue;
+      }
+      try {
+        if (!safeScriptInterpreter(executable, pathValue)) {
+          reject("unsafe_interpreter");
+          continue;
+        }
+      } catch {
+        reject("unsafe_interpreter");
+        continue;
+      }
+      const probe = spawnSync(candidate, ["--identity"], {
+        encoding: "utf8",
+        timeout: Math.max(1, Math.min(500, deadline - Date.now())),
+        maxBuffer: 2048,
+        env: { PATH: pathValue },
+        stdio: ["ignore", "pipe", "pipe"]
+      });
+      if (probe.error || probe.status !== 0) {
+        reject("identity_failed");
+        continue;
+      }
+      const identity3 = JSON.parse(probe.stdout);
+      if (identity3.name === "@hasna/trash" && identity3.version === manifest.version && identity3.guardProtocol === "hasna.trash.guard.v1")
+        return { ok: true, path: candidate, version: manifest.version };
+      reject("unsupported_protocol");
+    } catch {}
+  }
+  return { ok: false, code: failure };
+}
+
+// src/cli/index.tsx
 init_registry();
 init_installer();
 init_registration();
@@ -44132,9 +45003,9 @@ init_local_opt_in();
 init_transport2();
 init_db();
 import { jsxDEV as jsxDEV8 } from "react/jsx-dev-runtime";
-var __dirname4 = dirname22(fileURLToPath6(import.meta.url));
-var pkgPath = existsSync16(join24(__dirname4, "..", "package.json")) ? join24(__dirname4, "..", "package.json") : join24(__dirname4, "..", "..", "package.json");
-var pkg2 = JSON.parse(readFileSync20(pkgPath, "utf-8"));
+var __dirname4 = dirname24(fileURLToPath6(import.meta.url));
+var pkgPath = existsSync19(join31(__dirname4, "..", "package.json")) ? join31(__dirname4, "..", "package.json") : join31(__dirname4, "..", "..", "package.json");
+var pkg2 = JSON.parse(readFileSync23(pkgPath, "utf-8"));
 var program3 = new Command;
 function resolveScope(options) {
   if (options.project)
@@ -44214,7 +45085,7 @@ async function openLocalStoreOrExit(json3) {
 function readToken(tokenFile) {
   if (tokenFile) {
     try {
-      return readFileSync20(tokenFile, "utf-8").trim();
+      return readFileSync23(tokenFile, "utf-8").trim();
     } catch {
       return;
     }
@@ -44352,7 +45223,7 @@ program3.command("init").description("Register a new agent profile with a unique
   if (profile.name) {
     console.log(`  ${chalk2.dim("Name:")}       ${profile.name}`);
   }
-  console.log(`  ${chalk2.dim("Profile:")}    ${join24(getProfilesDir(), `${profile.agent_id}.json`)}`);
+  console.log(`  ${chalk2.dim("Profile:")}    ${join31(getProfilesDir(), `${profile.agent_id}.json`)}`);
   console.log();
   console.log(chalk2.dim("  Install hooks with this profile:"));
   console.log(`    hooks install gitguard --profile ${profile.agent_id}`);
@@ -44376,11 +45247,11 @@ program3.command("run").argument("<hook>", "Hook to run").option("--profile <id>
     process.exit(1);
   }
   const hookScript = resolveScriptPath2(hook);
-  if (!hookScript || !existsSync16(hookScript)) {
+  if (!hookScript || !existsSync19(hookScript)) {
     console.error(JSON.stringify({ error: `Hook script not found: ${hookScript ?? hook}` }));
     process.exit(1);
   }
-  const content = readFileSync20(hookScript);
+  const content = readFileSync23(hookScript);
   const sha4 = sha256Of2(content);
   const check2 = checkScriptHash2(hook, sha4);
   if (!check2.ok) {
@@ -44974,7 +45845,7 @@ program3.command("doctor").option("-g, --global", "Check global settings", false
     });
   }
   const staleNames = new Set(stale.map((finding) => finding.hook));
-  const settingsExist = existsSync16(settingsPath);
+  const settingsExist = existsSync19(settingsPath);
   if (!settingsExist) {
     issues.push({ hook: "(settings)", issue: `${settingsPath} not found`, severity: "warning" });
   }
@@ -44982,7 +45853,7 @@ program3.command("doctor").option("-g, --global", "Check global settings", false
   let wiringCount = 0;
   if (settingsExist) {
     try {
-      const settings = JSON.parse(readFileSync20(settingsPath, "utf-8"));
+      const settings = JSON.parse(readFileSync23(settingsPath, "utf-8"));
       wiringCount = countSettingsWiring(settings);
     } catch {}
   }
@@ -44993,7 +45864,7 @@ program3.command("doctor").option("-g, --global", "Check global settings", false
     const meta3 = custom2 ? resolveHookMeta(name) : getHook(name);
     let hookHealthy = true;
     if (custom2) {
-      if (!existsSync16(custom2.scriptPath)) {
+      if (!existsSync19(custom2.scriptPath)) {
         issues.push({ hook: name, issue: `Custom hook script missing: ${custom2.scriptPath}`, severity: "error" });
         hookHealthy = false;
       }
@@ -45004,15 +45875,15 @@ program3.command("doctor").option("-g, --global", "Check global settings", false
         continue;
       }
       const hookDir = getHookPath(name);
-      const hookScript = join24(hookDir, "src", "hook.ts");
-      if (!existsSync16(hookScript)) {
+      const hookScript = join31(hookDir, "src", "hook.ts");
+      if (!existsSync19(hookScript)) {
         issues.push({ hook: name, issue: "Missing src/hook.ts in package", severity: "error" });
         hookHealthy = false;
       }
     }
     if (meta3 && settingsExist) {
       try {
-        const settings = JSON.parse(readFileSync20(settingsPath, "utf-8"));
+        const settings = JSON.parse(readFileSync23(settingsPath, "utf-8"));
         if (!hookRegisteredInSettings(settings, name, meta3.event, meta3.matcher)) {
           const eventName = meta3.event.split(":")[0];
           issues.push({ hook: name, issue: `Not registered under correct event (${eventName})`, severity: "error" });
@@ -45162,18 +46033,18 @@ program3.command("update").argument("[hooks...]", "Hooks to update (defaults to
     const result = installHook(arg, { scope, overwrite: true });
     const resolved = resolveHook2(arg);
     if (result.success && resolved) {
-      const hash = await sha256File2(resolved.scriptPath);
-      setPinnedHook2(resolved.name, { version: resolved.version, sha256: hash, source: resolved.source });
+      const hash4 = await sha256File2(resolved.scriptPath);
+      setPinnedHook2(resolved.name, { version: resolved.version, sha256: hash4, source: resolved.source });
       if (!isLocalStoreRefused2()) {
         upsertHookRecord2(getDb2(), {
           name: resolved.name,
           version: resolved.version,
-          sha256: hash,
+          sha256: hash4,
           source_type: resolved.source,
           last_verified_at: new Date().toISOString()
         });
       }
-      results2.push({ ...result, pinned: { version: resolved.version, sha256: hash } });
+      results2.push({ ...result, pinned: { version: resolved.version, sha256: hash4 } });
       continue;
     }
     results2.push(result);
@@ -45215,10 +46086,10 @@ program3.command("docs").argument("[hook]", "Hook name (shows general docs if om
       return;
     }
     const hookPath = getHookPath(hook);
-    const readmePath = join24(hookPath, "README.md");
+    const readmePath = join31(hookPath, "README.md");
     let readme = "";
-    if (existsSync16(readmePath)) {
-      readme = readFileSync20(readmePath, "utf-8");
+    if (existsSync19(readmePath)) {
+      readme = readFileSync23(readmePath, "utf-8");
     }
     if (options.json) {
       console.log(JSON.stringify({ ...meta3, readme }));
@@ -45846,7 +46717,38 @@ program3.command("mcp").option("-s, --stdio", "Use stdio transport (one process
   }
 });
 registerEventsCommands(program3, { source: "hooks" });
-program3.command("safety").description("Register bundled native deletion guards without a registry credential").command("install <guard>").option("--target <target>", "codex or claude", "codex").option("--scope <scope>", "global or project", "global").option("--overwrite", "Replace this guard in place; native trust is still required").action((guard, options) => {
+var safety = program3.command("safety").description("Inspect and register bundled native deletion guards without a registry credential");
+safety.command("inspect").description("Check the installed Trash guard identity and filesystem safety without app credentials").action(() => {
+  const result = inspectTrashBinary();
+  console.log(JSON.stringify({ guard: "trash-guard", ...result }));
+  if (!result.ok)
+    process.exitCode = 1;
+});
+safety.command("install <guard>").option("--target <target>", "codex, claude or sumi", "codex").option("--scope <scope>", "global or project", "global").option("--overwrite", "Replace this guard in place; native trust is still required").option("--expected-binding-sha256 <sha256>", "Exact existing Sumi binding digest required for an upgrade").action(async (guard, options) => {
+  if (options.target === "sumi") {
+    try {
+      if (guard !== "trash-guard" || options.scope !== "global" || options.overwrite)
+        throw new NativeSafetyError("input_invalid");
+      const command = installedNativeSafetyCommand("trash-guard");
+      const binding = nativeSafetyCommandBinding(command);
+      const installed = inspectTrashBinary({ PATH: binding.path });
+      if (!installed.ok) {
+        console.log(JSON.stringify({ ok: false, target: "sumi", code: installed.code }));
+        process.exitCode = 1;
+        return;
+      }
+      await verifyNativeSafetyCommand(command);
+      const registered = registerNativeSafety({ command, expectedSHA256: options.expectedBindingSha256 });
+      const verified = await verifyNativeSafetyRegistration();
+      if (verified.sha256 !== registered.sha256)
+        throw new NativeSafetyError("binding_changed");
+      console.log(JSON.stringify({ target: "sumi", ...registered }));
+    } catch (error61) {
+      console.log(JSON.stringify({ ok: false, target: "sumi", code: error61 instanceof NativeSafetyError ? error61.code : "binding_invalid", ...error61 instanceof NativeSafetyError && error61.reason ? { reason: error61.reason } : {} }));
+      process.exitCode = 1;
+    }
+    return;
+  }
   if (!isNativeSafetyName(guard) || !["codex", "claude"].includes(options.target) || !["global", "project"].includes(options.scope)) {
     console.error("Unsupported bundled safety registration");
     process.exitCode = 1;
@@ -45857,6 +46759,17 @@ program3.command("safety").description("Register bundled native deletion guards
   if (!result.success)
     process.exitCode = 1;
 });
+safety.command("verify").requiredOption("--target <target>", "sumi").description("Verify a required native binding and its supervisor without running a file operation").action(async (options) => {
+  try {
+    if (options.target !== "sumi")
+      throw new NativeSafetyError("input_invalid");
+    const current2 = await verifyNativeSafetyRegistration();
+    console.log(JSON.stringify({ ok: true, target: "sumi", sha256: current2.sha256, guardVerified: true, nativeAdoptionVerified: false }));
+  } catch (error61) {
+    console.log(JSON.stringify({ ok: false, target: "sumi", code: error61 instanceof NativeSafetyError ? error61.code : "guard_failed", ...error61 instanceof NativeSafetyError && error61.reason ? { reason: error61.reason } : {} }));
+    process.exitCode = 1;
+  }
+});
 var API_INDEPENDENT_COMMANDS = new Set([
   "safety",
   "serve",