@hasna/hooks 0.8.0 → 0.9.1

package/bin/index.js

@@ -2083,6 +2083,18 @@ var init_registry = __esm(() => {
       matcher: "^(Bash|Write|Edit|MultiEdit|NotebookEdit|apply_patch|ApplyPatch|functions\\.apply_patch)$",
       tags: ["workspace", "repos", "structure", "guard", "safety", "orgs", "multi-agent"]
     },
+    {
+      name: "trash-guard",
+      displayName: "Trash Guard",
+      description: "Rewrites rm issued through Bash into `trash guard`, so the delete lands in a recoverable trash store; refuses the delete when there is nothing to redirect to (trash absent, a delete verb it cannot rewrite, or the protected class: /, ~, ~/.hasna, ~/.ssh, ~/.aws)",
+      version: "0.1.1",
+      category: "Git Safety",
+      event: "PreToolUse",
+      matcher: "^(Bash|apply_patch|ApplyPatch|functions\\.apply_patch)$",
+      tags: ["rm", "delete", "trash", "recoverable", "guard", "safety", "bash"],
+      rewritesInput: true,
+      timeoutSeconds: 5
+    },
     {
       name: "checktests",
       displayName: "Check Tests",
@@ -4477,6 +4489,111 @@ var init_resolve = __esm(() => {
   init_manifest();
 });
 
+// src/lib/registration.ts
+function registrationName(command) {
+  if (typeof command !== "string")
+    return;
+  const match = command.trim().match(REGISTRATION_COMMAND_RE);
+  return match ? match[1] ?? match[2] : undefined;
+}
+function findStaleRegistrations(settings, file, resolves = (name) => resolveHook(name) !== undefined) {
+  const hooks = settings.hooks;
+  if (!hooks || typeof hooks !== "object")
+    return [];
+  const stale = [];
+  for (const eventKey of Object.keys(hooks)) {
+    const entries = hooks[eventKey];
+    if (!Array.isArray(entries))
+      continue;
+    for (const entry of entries) {
+      if (!Array.isArray(entry?.hooks))
+        continue;
+      for (const hook of entry.hooks) {
+        const name = registrationName(hook?.command);
+        if (name === undefined || resolves(name))
+          continue;
+        stale.push({ file, event: eventKey, hook: name, command: hook.command });
+      }
+    }
+  }
+  return stale;
+}
+function matchersOverlap(a, b) {
+  return a === b || a.includes(b) || b.includes(a);
+}
+function hookEventsOf(info) {
+  return info.events?.length ? info.events : info.event ? [info.event] : [];
+}
+function findRewriteOverlaps(names, lookup) {
+  const rewriting = names.map((name) => ({ name, info: lookup(name) })).filter((row) => Boolean(row.info?.rewritesInput && row.info.matcher));
+  const overlaps = [];
+  for (let i = 0;i < rewriting.length; i++) {
+    for (let j = i + 1;j < rewriting.length; j++) {
+      const a = rewriting[i];
+      const b = rewriting[j];
+      const aEvents = hookEventsOf(a.info);
+      const bEvents = hookEventsOf(b.info);
+      const event = aEvents.find((name) => name === "PreToolUse" && bEvents.includes(name));
+      if (!event)
+        continue;
+      const aMatcher = a.info.matcher;
+      const bMatcher = b.info.matcher;
+      if (!matchersOverlap(aMatcher.toLowerCase(), bMatcher.toLowerCase()))
+        continue;
+      overlaps.push({ hooks: [a.name, b.name], event, matchers: [aMatcher, bMatcher] });
+    }
+  }
+  return overlaps;
+}
+function safeMatcherTest(pattern, value) {
+  try {
+    return new RegExp(pattern).test(value);
+  } catch {
+    return false;
+  }
+}
+function countSettingsWiring(settings) {
+  const hooks = settings.hooks;
+  if (!hooks || typeof hooks !== "object")
+    return 0;
+  let count = 0;
+  for (const eventKey of Object.keys(hooks)) {
+    const entries = hooks[eventKey];
+    if (!Array.isArray(entries))
+      continue;
+    for (const entry of entries) {
+      if (Array.isArray(entry?.hooks))
+        count += entry.hooks.length;
+    }
+  }
+  return count;
+}
+function hookRegisteredInSettings(settings, name, eventSpec, hookMatcher) {
+  const separator = eventSpec.indexOf(":");
+  const eventName = separator === -1 ? eventSpec : eventSpec.slice(0, separator);
+  const specMatcher = separator === -1 ? "" : eventSpec.slice(separator + 1);
+  const matcher = specMatcher || hookMatcher || "";
+  const hooks = settings.hooks?.[eventName];
+  if (!Array.isArray(hooks))
+    return false;
+  return hooks.some((entry) => entry?.hooks?.some((h) => {
+    const match = h?.command?.match(/^hooks run ([\w-]+)/);
+    if (!match || match[1] !== name)
+      return false;
+    if (!matcher)
+      return true;
+    const entryMatcher = typeof entry.matcher === "string" ? entry.matcher : "";
+    if (!entryMatcher)
+      return true;
+    return entryMatcher === matcher || safeMatcherTest(entryMatcher, matcher) || safeMatcherTest(matcher, entryMatcher);
+  }));
+}
+var REGISTRATION_COMMAND_RE;
+var init_registration = __esm(() => {
+  init_resolve();
+  REGISTRATION_COMMAND_RE = /^(?:hooks run ([\w-]+)(?:\s+--profile\s+[\w-]+)?|hook-([\w-]+))$/;
+});
+
 // src/db/schema.ts
 var CREATE_HOOK_EVENTS_TABLE = `
   CREATE TABLE IF NOT EXISTS hook_events (
@@ -4802,14 +4919,30 @@ function runRetention(db, days) {
 // src/db/index.ts
 var exports_db = {};
 __export(exports_db, {
+  refuseLocalStore: () => refuseLocalStore,
+  localStoreRefusalMessage: () => localStoreRefusalMessage,
+  isLocalStoreRefused: () => isLocalStoreRefused,
   getDbPath: () => getDbPath,
   getDb: () => getDb,
   createTestDb: () => createTestDb,
-  closeDb: () => closeDb
+  closeDb: () => closeDb,
+  allowLocalStore: () => allowLocalStore
 });
 import { Database } from "bun:sqlite";
 import { existsSync as existsSync8, mkdirSync as mkdirSync2, cpSync } from "fs";
 import { join as join9 } from "path";
+function refuseLocalStore(message) {
+  localStoreRefusal = message;
+}
+function allowLocalStore() {
+  localStoreRefusal = null;
+}
+function isLocalStoreRefused() {
+  return localStoreRefusal !== null;
+}
+function localStoreRefusalMessage() {
+  return localStoreRefusal;
+}
 function resolveDataDir() {
   const effective = getEffectiveDataRoot();
   const oldDir = join9(getHomeDir(), ".hooks");
@@ -4833,6 +4966,8 @@ function ensureDir(dbPath) {
   }
 }
 function getDb() {
+  if (localStoreRefusal !== null)
+    throw new Error(localStoreRefusal);
   if (instance)
     return instance;
   const dbPath = getDbPath();
@@ -4870,7 +5005,7 @@ function createTestDb() {
   db.exec("PRAGMA foreign_keys=ON");
   return db;
 }
-var instance = null;
+var instance = null, localStoreRefusal = null;
 var init_db = __esm(() => {
   init_app_home();
   init_migrations();
@@ -4909,6 +5044,9 @@ async function sha256File(path) {
   const buf = await readFile2(path);
   return sha256Of(buf);
 }
+function storeDb() {
+  return isLocalStoreRefused() ? null : getDb();
+}
 function getHookRecord(db, name) {
   return db.query("SELECT * FROM hooks WHERE name = ?").get(name);
 }
@@ -5009,26 +5147,28 @@ function removePinnedHook(name) {
 }
 function pinInstalledHook(name, version, sha256, source, sourceRef) {
   const now2 = new Date().toISOString();
-  const db = getDb();
-  upsertHookRecord(db, {
-    name,
-    version,
-    sha256,
-    source_type: source,
-    source_ref: sourceRef ?? null,
-    last_verified_at: now2
-  });
+  const db = storeDb();
+  if (db) {
+    upsertHookRecord(db, {
+      name,
+      version,
+      sha256,
+      source_type: source,
+      source_ref: sourceRef ?? null,
+      last_verified_at: now2
+    });
+  }
   setPinnedHook(name, { version, sha256, source });
 }
 function removeHookFromStore(name) {
   const removedPin = removePinnedHook(name);
-  const db = getDb();
-  const removedRecord = removeHookRecord(db, name);
+  const db = storeDb();
+  const removedRecord = db ? removeHookRecord(db, name) : false;
   return { removedPin, removedRecord };
 }
 function checkScriptHash(name, actual) {
-  const db = getDb();
-  const record = getHookRecord(db, name);
+  const db = storeDb();
+  const record = db ? getHookRecord(db, name) : null;
   const pin = getPinnedHook(name);
   const expected = record?.sha256 ?? pin?.sha256 ?? null;
   if (expected !== null && expected !== actual) {
@@ -5038,24 +5178,28 @@ function checkScriptHash(name, actual) {
     const now3 = new Date().toISOString();
     const version = pin?.version ?? record?.version ?? "0.0.0";
     const source = pin?.source ?? record?.source_type ?? "local";
-    upsertHookRecord(db, {
-      name,
-      version,
-      sha256: actual,
-      source_type: source,
-      last_verified_at: now3
-    });
+    if (db) {
+      upsertHookRecord(db, {
+        name,
+        version,
+        sha256: actual,
+        source_type: source,
+        last_verified_at: now3
+      });
+    }
     setPinnedHook(name, { version, sha256: actual, source });
     return { ok: true, pinned: false, expected: null, actual, name };
   }
   const now2 = new Date().toISOString();
-  upsertHookRecord(db, {
-    name,
-    version: record?.version ?? pin?.version ?? "0.0.0",
-    sha256: expected,
-    source_type: record?.source_type ?? pin?.source ?? "local",
-    last_verified_at: now2
-  });
+  if (db) {
+    upsertHookRecord(db, {
+      name,
+      version: record?.version ?? pin?.version ?? "0.0.0",
+      sha256: expected,
+      source_type: record?.source_type ?? pin?.source ?? "local",
+      last_verified_at: now2
+    });
+  }
   return { ok: true, pinned: true, expected, actual, name };
 }
 async function verifyScriptHash(name, scriptPath) {
@@ -5063,14 +5207,16 @@ async function verifyScriptHash(name, scriptPath) {
 }
 function retrustHook(name, scriptPath, version, source) {
   const actual = sha256Of(readFileSync3(scriptPath));
-  const db = getDb();
-  upsertHookRecord(db, {
-    name,
-    version,
-    sha256: actual,
-    source_type: source,
-    last_verified_at: new Date().toISOString()
-  });
+  const db = storeDb();
+  if (db) {
+    upsertHookRecord(db, {
+      name,
+      version,
+      sha256: actual,
+      source_type: source,
+      last_verified_at: new Date().toISOString()
+    });
+  }
   setPinnedHook(name, { version, sha256: actual, source });
   return { ok: true, pinned: true, expected: actual, actual, name };
 }
@@ -5090,8 +5236,10 @@ var init_store = __esm(() => {
 var exports_installer = {};
 __export(exports_installer, {
   uninstallHook: () => uninstallHook,
+  scanStaleRegistrations: () => scanStaleRegistrations,
   removeHook: () => removeHook,
   removeCodewithHookEntry: () => removeCodewithHookEntry,
+  pruneStaleRegistrations: () => pruneStaleRegistrations,
   isEventSupported: () => isEventSupported,
   installHooks: () => installHooks,
   installHook: () => installHook,
@@ -5101,6 +5249,7 @@ __export(exports_installer, {
   getRegisteredHooks: () => getRegisteredHooks,
   getInstalledHooks: () => getInstalledHooks,
   getHookPath: () => getHookPath,
+  detectRewriteConflict: () => detectRewriteConflict,
   buildCodewithTomlFragment: () => buildCodewithTomlFragment
 });
 import { existsSync as existsSync10, mkdirSync as mkdirSync4, readFileSync as readFileSync4, readdirSync as readdirSync3, rmdirSync, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
@@ -5207,6 +5356,7 @@ function codewithTimeout(name) {
     case "prompt-guard":
       return 3;
     case "worktree-guard":
+    case "trash-guard":
     case "stop-sync":
       return 5;
     default:
@@ -5225,6 +5375,8 @@ function codewithStatusMessage(name) {
       return "Checking prompt safety";
     case "worktree-guard":
       return "Checking worktree safety";
+    case "trash-guard":
+      return "Redirecting rm into trash";
     case "stop-sync":
       return "Syncing turn-end heartbeat";
     default:
@@ -5292,14 +5444,32 @@ function detectConflict(name, scope, target) {
       continue;
     if (!getHookEvents(existing).some((event) => events.has(event)))
       continue;
-    const a = meta.matcher.toLowerCase();
-    const b = existing.matcher.toLowerCase();
-    if (a === b || a.includes(b) || b.includes(a)) {
+    if (matchersOverlap(meta.matcher.toLowerCase(), existing.matcher.toLowerCase())) {
       return `conflicts with '${existingName}' (same event ${meta.event}, overlapping matcher '${existing.matcher}')`;
     }
   }
   return;
 }
+function detectRewriteConflict(name, scope, target, lookup = getHook) {
+  const meta = resolveHookMeta(name);
+  if (!meta?.matcher || !meta.rewritesInput)
+    return;
+  if (!getHookEvents(meta).includes("PreToolUse"))
+    return;
+  for (const existingName of getRegisteredHooksForTarget(scope, target)) {
+    if (existingName === name)
+      continue;
+    const existing = lookup(existingName);
+    if (!existing?.matcher || !existing.rewritesInput)
+      continue;
+    if (!getHookEvents(existing).includes("PreToolUse"))
+      continue;
+    if (!matchersOverlap(meta.matcher.toLowerCase(), existing.matcher.toLowerCase()))
+      continue;
+    return `both '${name}' and '${existingName}' rewrite the tool input on overlapping PreToolUse matchers ('${meta.matcher}' / '${existing.matcher}'). Only one rewrite per tool call is applied, so one guard would silently disappear \u2014 install one of them, or narrow a matcher so they no longer overlap.`;
+  }
+  return;
+}
 function installForTarget(name, scope, overwrite, target, profile, codewithMode = "fragment", codewithConfigPath) {
   const shortName = shortHookName(name);
   if (!hookExists(shortName)) {
@@ -5359,6 +5529,10 @@ function installForTarget(name, scope, overwrite, target, profile, codewithMode
     return { hook: shortName, success: false, error: "Already installed. Use --overwrite to replace.", scope, target };
   }
   const conflict = detectConflict(shortName, scope, target);
+  const rewriteConflict = detectRewriteConflict(shortName, scope, target);
+  if (rewriteConflict) {
+    return { hook: shortName, success: false, error: `Refused: ${rewriteConflict}`, scope, target };
+  }
   try {
     registerHook(shortName, scope, target, profile);
     return { hook: shortName, success: true, scope, target, ...conflict ? { conflict } : {} };
@@ -5430,8 +5604,12 @@ function registerHook(name, scope = "global", target = "claude", profile) {
   for (const eventKey of uniqueEventKeys) {
     if (!settings.hooks[eventKey])
       settings.hooks[eventKey] = [];
+    const hookEntry = { type: "command", command: hookCommand };
+    if (typeof meta.timeoutSeconds === "number" && meta.timeoutSeconds > 0) {
+      hookEntry.timeout = meta.timeoutSeconds;
+    }
     const entry = {
-      hooks: [{ type: "command", command: hookCommand }]
+      hooks: [hookEntry]
     };
     if (meta.matcher) {
       entry.matcher = meta.matcher;
@@ -5515,6 +5693,74 @@ function removeHookForTarget(name, scope, target) {
   unregisterHook(name, scope, target);
   return true;
 }
+function readSettingsAt(path) {
+  try {
+    if (!existsSync10(path))
+      return;
+    const raw = readFileSync4(path, "utf-8");
+    return { raw, settings: JSON.parse(raw) };
+  } catch {
+    return;
+  }
+}
+function scanStaleRegistrations(scope = "global") {
+  const stale = [];
+  for (const target of JSON_SETTINGS_TARGETS) {
+    const path = getSettingsPath(scope, target);
+    const parsed = readSettingsAt(path);
+    if (!parsed)
+      continue;
+    stale.push(...findStaleRegistrations(parsed.settings, path));
+  }
+  return stale;
+}
+function pruneStaleRegistrations(scope = "global") {
+  const results = [];
+  for (const target of JSON_SETTINGS_TARGETS) {
+    const path = getSettingsPath(scope, target);
+    const parsed = readSettingsAt(path);
+    if (!parsed)
+      continue;
+    const stale = findStaleRegistrations(parsed.settings, path);
+    if (stale.length === 0)
+      continue;
+    const staleCommandsByEvent = new Map;
+    for (const finding of stale) {
+      const commands = staleCommandsByEvent.get(finding.event) ?? new Set;
+      commands.add(finding.command);
+      staleCommandsByEvent.set(finding.event, commands);
+    }
+    const settings = parsed.settings;
+    for (const [eventKey, commands] of staleCommandsByEvent) {
+      const entries = settings.hooks?.[eventKey];
+      if (!Array.isArray(entries))
+        continue;
+      const keptEntries = [];
+      for (const entry of entries) {
+        if (!Array.isArray(entry?.hooks)) {
+          keptEntries.push(entry);
+          continue;
+        }
+        const keptHooks = entry.hooks.filter((hook) => !(typeof hook?.command === "string" && commands.has(hook.command)));
+        if (keptHooks.length === entry.hooks.length)
+          keptEntries.push(entry);
+        else if (keptHooks.length > 0)
+          keptEntries.push({ ...entry, hooks: keptHooks });
+      }
+      if (keptEntries.length > 0)
+        settings.hooks[eventKey] = keptEntries;
+      else
+        delete settings.hooks[eventKey];
+    }
+    if (settings.hooks && Object.keys(settings.hooks).length === 0)
+      delete settings.hooks;
+    const backupPath = `${path}.bak`;
+    writeFileSync3(backupPath, parsed.raw);
+    writeSettings(settings, scope, target);
+    results.push({ file: path, removed: stale, backupPath });
+  }
+  return results;
+}
 function removeCodewithHookEntry(configText, name) {
   const sections = configText.split(/\n\s*\n/);
   const nameRe = new RegExp(`^command\\s*=\\s*"hooks run ${escapeRegExp(name)}(?:\\s+--profile\\s+[\\w-]+)?"$`);
@@ -5659,11 +5905,12 @@ function uninstallHook(name, scope = "global", target = "claude") {
     registrationsRemaining
   };
 }
-var __dirname2, HOOKS_DIR, EVENT_MAP, getInstalledHooks;
+var __dirname2, HOOKS_DIR, EVENT_MAP, getInstalledHooks, JSON_SETTINGS_TARGETS;
 var init_installer = __esm(() => {
   init_registry();
   init_resolve();
   init_manifest();
+  init_registration();
   init_store();
   __dirname2 = dirname3(fileURLToPath2(import.meta.url));
   HOOKS_DIR = existsSync10(join10(__dirname2, "..", "..", "hooks", "hook-gitguard")) ? join10(__dirname2, "..", "..", "hooks") : join10(__dirname2, "..", "hooks");
@@ -5700,53 +5947,9 @@ var init_installer = __esm(() => {
     }
   };
   getInstalledHooks = getRegisteredHooks;
+  JSON_SETTINGS_TARGETS = ["claude", "gemini"];
 });
 
-// src/lib/registration.ts
-function safeMatcherTest(pattern, value) {
-  try {
-    return new RegExp(pattern).test(value);
-  } catch {
-    return false;
-  }
-}
-function countSettingsWiring(settings) {
-  const hooks = settings.hooks;
-  if (!hooks || typeof hooks !== "object")
-    return 0;
-  let count = 0;
-  for (const eventKey of Object.keys(hooks)) {
-    const entries = hooks[eventKey];
-    if (!Array.isArray(entries))
-      continue;
-    for (const entry of entries) {
-      if (Array.isArray(entry?.hooks))
-        count += entry.hooks.length;
-    }
-  }
-  return count;
-}
-function hookRegisteredInSettings(settings, name, eventSpec, hookMatcher) {
-  const separator = eventSpec.indexOf(":");
-  const eventName = separator === -1 ? eventSpec : eventSpec.slice(0, separator);
-  const specMatcher = separator === -1 ? "" : eventSpec.slice(separator + 1);
-  const matcher = specMatcher || hookMatcher || "";
-  const hooks = settings.hooks?.[eventName];
-  if (!Array.isArray(hooks))
-    return false;
-  return hooks.some((entry) => entry?.hooks?.some((h) => {
-    const match = h?.command?.match(/^hooks run ([\w-]+)/);
-    if (!match || match[1] !== name)
-      return false;
-    if (!matcher)
-      return true;
-    const entryMatcher = typeof entry.matcher === "string" ? entry.matcher : "";
-    if (!entryMatcher)
-      return true;
-    return entryMatcher === matcher || safeMatcherTest(entryMatcher, matcher) || safeMatcherTest(matcher, entryMatcher);
-  }));
-}
-
 // src/lib/redact.ts
 function redactText(value) {
   let out = value;
@@ -5917,12 +6120,12 @@ var init_profiles = __esm(() => {
   init_app_home();
 });
 
-// ../contracts/dist/client/transport.js
+// ../../node_modules/.bun/@hasna+contracts@1.0.2+e0db24ae03127387/node_modules/@hasna/contracts/dist/client/transport.js
 import { isIP as isIP2 } from "net";
 import { spawnSync } from "child_process";
 import { closeSync, fstatSync, openSync, readFileSync as readFileSync6 } from "fs";
 import { O_NOFOLLOW, O_NONBLOCK, O_RDONLY } from "constants";
-import { createRequire } from "module";
+import { createRequire as createRequire2 } from "module";
 import { hostname as osHostname } from "os";
 import { isAbsolute as isAbsolute2, join as join12 } from "path";
 function envToken(name) {
@@ -6043,7 +6246,7 @@ function readAppConfigFile(path) {
     const uid = process.getuid?.() ?? process.geteuid?.();
     if (uid !== undefined && before.uid !== uid)
       unsafe("the file is not owned by the current user");
-    if (before.size > MAX_CREDENTIAL_FILE_BYTES)
+    if (before.size > MAX_CREDENTIAL_FILE_BYTES2)
       unsafe("the file exceeds the size limit");
     const bytes = readFileSync6(fd);
     const after = fstatSync(fd);
@@ -6127,13 +6330,13 @@ function sealCredential(fields) {
       configurable: false
     });
   }
-  Object.defineProperty(sealed, INSPECT_CUSTOM, {
+  Object.defineProperty(sealed, INSPECT_CUSTOM2, {
     value: () => ({ ...visible, apiKey: "[redacted]" }),
     enumerable: false,
     writable: false,
     configurable: false
   });
-  Object.defineProperty(sealed, CREDENTIAL_SEAL, {
+  Object.defineProperty(sealed, CREDENTIAL_SEAL2, {
     value: true,
     enumerable: false,
     writable: false,
@@ -6152,7 +6355,7 @@ function firstEnvValue(env, keys) {
   return null;
 }
 function isAmbientEnvironment(env) {
-  return env === process.env || env[AMBIENT_ENVIRONMENT] === true;
+  return env === process.env || env[AMBIENT_ENVIRONMENT2] === true;
 }
 function defaultKeychainRunner(argv) {
   const result = spawnSync(KEYCHAIN_SECURITY_BIN, [...argv], {
@@ -6246,7 +6449,7 @@ function snapshotClientEnvironment(name, env) {
     snapshot[key] = descriptor.value;
   }
   if (ambient) {
-    Object.defineProperty(snapshot, AMBIENT_ENVIRONMENT, {
+    Object.defineProperty(snapshot, AMBIENT_ENVIRONMENT2, {
       value: true,
       enumerable: false,
       writable: false,
@@ -6597,7 +6800,7 @@ function credentialDiskSourcesForMessage(name, env) {
   const paths = credentialDiskSources(name, env);
   return paths.length > 0 ? paths.join(" or ") : "<no HOME or HASNA_HOME set in this environment, so no credential file was consulted>";
 }
-var CREDENTIAL_PROFILE_ENV_KEY = "HASNA_PROFILE", CredentialResolutionError, CredentialFileUnsafeError, HASNA_HOME_ENV_KEY = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY = "HASNA_STATION", HASNA_HOME_DIR = ".hasna", CONFIG_SUBDIR = "config", CREDENTIALS_FILE = "credentials", KEYCHAIN_SECURITY_BIN = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS = 44, KEYCHAIN_SPAWN_TIMEOUT_MS = 1e4, MAX_CREDENTIAL_FILE_BYTES, SAFE_APP_SLUG, SAFE_PROFILE, ILLEGAL_IN_HEADER_VALUE, VAULT_POINTER_SHAPE, CREDENTIAL_SHAPED_KEY, INSPECT_CUSTOM, CREDENTIAL_SEAL, AMBIENT_ENVIRONMENT, SECRETS_PACKAGE_SPECIFIER, requireSecretsSdk, DEFAULT_FLEET_GATEWAY_ORIGIN = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN, DNS_LABEL_PATTERN, ClientTransportConfigurationError, IDEMPOTENT_METHODS, AUTHORITY_OVERRIDE_HEADERS;
+var CREDENTIAL_PROFILE_ENV_KEY = "HASNA_PROFILE", CredentialResolutionError, CredentialFileUnsafeError, HASNA_HOME_ENV_KEY = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY = "HASNA_STATION", HASNA_HOME_DIR = ".hasna", CONFIG_SUBDIR = "config", CREDENTIALS_FILE = "credentials", KEYCHAIN_SECURITY_BIN = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS = 44, KEYCHAIN_SPAWN_TIMEOUT_MS = 1e4, MAX_CREDENTIAL_FILE_BYTES2, SAFE_APP_SLUG, SAFE_PROFILE, ILLEGAL_IN_HEADER_VALUE, VAULT_POINTER_SHAPE, CREDENTIAL_SHAPED_KEY, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, AMBIENT_ENVIRONMENT2, SECRETS_PACKAGE_SPECIFIER, requireSecretsSdk2, DEFAULT_FLEET_GATEWAY_ORIGIN = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN, DNS_LABEL_PATTERN, ClientTransportConfigurationError, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2;
 var init_transport = __esm(() => {
   CredentialResolutionError = class CredentialResolutionError extends Error {
     appName;
@@ -6617,17 +6820,17 @@ var init_transport = __esm(() => {
       this.path = path;
     }
   };
-  MAX_CREDENTIAL_FILE_BYTES = 64 * 1024;
+  MAX_CREDENTIAL_FILE_BYTES2 = 64 * 1024;
   SAFE_APP_SLUG = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
   SAFE_PROFILE = /^[A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?$/;
   ILLEGAL_IN_HEADER_VALUE = /[^\t\x20-\x7e]/;
   VAULT_POINTER_SHAPE = /^[a-z0-9][a-z0-9-]*(?:\/[a-z0-9][a-z0-9-_.]*){2,}$/;
   CREDENTIAL_SHAPED_KEY = /(?:^|_)(?:API_KEY|KEY|TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIAL|AUTH)(?:_|$)/;
-  INSPECT_CUSTOM = Symbol.for("nodejs.util.inspect.custom");
-  CREDENTIAL_SEAL = Symbol.for("hasna:contracts:sealedCredential");
-  AMBIENT_ENVIRONMENT = Symbol.for("hasna:contracts:ambientClientEnvironment");
+  INSPECT_CUSTOM2 = Symbol.for("nodejs.util.inspect.custom");
+  CREDENTIAL_SEAL2 = Symbol.for("hasna:contracts:sealedCredential");
+  AMBIENT_ENVIRONMENT2 = Symbol.for("hasna:contracts:ambientClientEnvironment");
   SECRETS_PACKAGE_SPECIFIER = "@hasna/" + "secrets";
-  requireSecretsSdk = createRequire(import.meta.url);
+  requireSecretsSdk2 = createRequire2(import.meta.url);
   ASCII_CONTROL_PATTERN = /[\u0000-\u001f\u007f]/;
   DNS_LABEL_PATTERN = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
   ClientTransportConfigurationError = class ClientTransportConfigurationError extends Error {
@@ -6640,8 +6843,8 @@ var init_transport = __esm(() => {
       this.sources = Object.freeze([...sources]);
     }
   };
-  IDEMPOTENT_METHODS = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
-  AUTHORITY_OVERRIDE_HEADERS = new Set([
+  IDEMPOTENT_METHODS2 = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
+  AUTHORITY_OVERRIDE_HEADERS2 = new Set([
     "host",
     ":authority",
     "forwarded",
@@ -6670,6 +6873,15 @@ function hasHooksEnvAuthorityIntent(env = process.env) {
 function selectsHooksLocalStore(env = process.env) {
   return !hasHooksEnvAuthorityIntent(env) && isHooksLocalOptIn(env);
 }
+function hooksFailClosedLine(detail) {
+  return `REMOTE_API_CONFIG_MISSING: hooks: no registry credential resolved from ${HOOKS_CREDENTIAL_TIERS} ` + `(with HASNA_HOOKS_API_URL or the fleet gateway default), and local mode is not enabled ` + `(${HOOKS_LOCAL_OPT_IN_HINT}) \u2014 refusing to silently fall back to local storage.` + (detail ? ` ${detail}` : "");
+}
+function hooksHostedRouteLocalStoreRefusal(authority) {
+  return "REMOTE_COMMAND_UNSUPPORTED: this command is local-only \u2014 it reads the on-box SQLite store " + `(hooks.db), which the hosted hooks registry authority (${authority}) does not serve; local SQLite ` + `is opt-in only (${HOOKS_LOCAL_OPT_IN_HINT}) and is disabled by default \u2014 refusing to open a local ` + "store on the hosted route.";
+}
+function hooksEventSinkRefusal() {
+  return "REMOTE_COMMAND_UNSUPPORTED: hook event not recorded \u2014 the hook event log is local-only (on-box " + "SQLite hooks.db) and the hosted hooks registry has no event route; local SQLite is opt-in only " + `(${HOOKS_LOCAL_OPT_IN_HINT}) and is disabled by default. Nothing was written.`;
+}
 function hooksResolverEnv(env) {
   const blanks = hooksAuthorityEnvKeys().filter((key) => (key in env) && (env[key] ?? "").trim() === "");
   if (blanks.length === 0)
@@ -6694,7 +6906,7 @@ function hooksResolverInputs(env, credentials = {}) {
   }
   return { env: normalised, credentials: { ...credentials, keychain } };
 }
-var HOOKS_LOCAL_OPT_IN_ENV_KEYS, CONTRACTS_AMBIENT_ENVIRONMENT;
+var HOOKS_LOCAL_OPT_IN_ENV_KEYS, HOOKS_CREDENTIAL_TIERS = "the Keychain item hasna.credentials.hooks.api-key, ~/.hasna/hooks/config/credentials, or HASNA_HOOKS_API_KEY", HOOKS_LOCAL_OPT_IN_HINT = "HASNA_HOOKS_LOCAL=1 (alias HOOKS_LOCAL=1)", CONTRACTS_AMBIENT_ENVIRONMENT;
 var init_local_opt_in = __esm(() => {
   init_transport();
   HOOKS_LOCAL_OPT_IN_ENV_KEYS = ["HASNA_HOOKS_LOCAL", "HOOKS_LOCAL"];
@@ -6797,14 +7009,35 @@ var init_transport2 = __esm(() => {
 var exports_db_writer = {};
 __export(exports_db_writer, {
   writeHookEvent: () => writeHookEvent,
+  resolveHookEventSink: () => resolveHookEventSink,
   resolveEventType: () => resolveEventType,
   recordHookRun: () => recordHookRun,
-  normalizeEventType: () => normalizeEventType
+  normalizeEventType: () => normalizeEventType,
+  __resetHookEventSinkNotice: () => __resetHookEventSinkNotice
 });
+function resolveHookEventSink(env = process.env) {
+  if (isLocalStoreRefused())
+    return { kind: "refused", reason: localStoreRefusalMessage() ?? hooksEventSinkRefusal() };
+  if (selectsHooksLocalStore(env))
+    return { kind: "local" };
+  return { kind: "refused", reason: hooksEventSinkRefusal() };
+}
+function __resetHookEventSinkNotice() {
+  sinkRefusalPrinted = false;
+}
 function nanoid2() {
   return crypto.randomUUID().replace(/-/g, "").slice(0, 21);
 }
 function writeHookEvent(event) {
+  const sink = resolveHookEventSink();
+  if (sink.kind !== "local") {
+    if (!sinkRefusalPrinted) {
+      sinkRefusalPrinted = true;
+      process.stderr.write(`[hooks db-writer] ${sink.reason}
+`);
+    }
+    return;
+  }
   try {
     const db = getDb();
     const id = nanoid2();
@@ -6873,9 +7106,10 @@ function recordHookRun(record) {
     metadata: JSON.stringify(metadata)
   });
 }
-var ALLOWED_EVENT_TYPES;
+var sinkRefusalPrinted = false, ALLOWED_EVENT_TYPES;
 var init_db_writer = __esm(() => {
   init_db();
+  init_local_opt_in();
   init_redact();
   ALLOWED_EVENT_TYPES = new Set([
     "PreToolUse",
@@ -6891,7 +7125,8 @@ var init_db_writer = __esm(() => {
 
 // src/lib/hook-env.ts
 import { dirname as dirname4, isAbsolute as isAbsolute3 } from "path";
-import { existsSync as existsSync12, statSync } from "fs";
+import { existsSync as existsSync12, realpathSync as realpathSync2, statSync } from "fs";
+import { tmpdir } from "os";
 function isDeniedEnvName(name) {
   const upper = name.toUpperCase();
   if (DENY_PREFIXES.some((prefix) => upper.startsWith(prefix)))
@@ -6917,6 +7152,19 @@ function isUnsafePathEntry(entry, home) {
     return true;
   if (entry === "/var/tmp" || entry.startsWith("/var/tmp/"))
     return true;
+  const canonical = (path) => {
+    try {
+      return realpathSync2(path);
+    } catch {
+      return path;
+    }
+  };
+  const resolved = canonical(entry);
+  for (const root of [home, tmpdir(), "/tmp", "/var/tmp"].filter((value) => Boolean(value))) {
+    const blocked = canonical(root);
+    if (resolved === blocked || resolved.startsWith(blocked + "/"))
+      return true;
+  }
   try {
     if ((statSync(entry).mode & 2) !== 0)
       return true;
@@ -7036,6 +7284,7 @@ var init_hook_env = __esm(() => {
   DENY_CONTAINS = ["DATABASE_URL"];
   PATH_BASELINE = ["/usr/bin", "/bin", "/usr/local/bin", "/sbin", "/usr/sbin"];
   CONFIG_PROJECTIONS = [
+    ["HASNA_HOOKS_LOCAL", "HOOKS_LOCAL"],
     ["HASNA_HOOKS_DATA_DIR", "HOOKS_DATA_DIR"],
     ["HASNA_HOOKS_DB_PATH", "HOOKS_DB_PATH"],
     ["HASNA_HOOKS_LOCK_PATH", "HOOKS_LOCK_PATH"],
@@ -7215,7 +7464,7 @@ __export(exports_custom_install, {
 });
 import { existsSync as existsSync13, mkdirSync as mkdirSync6, mkdtempSync, readFileSync as readFileSync7, rmSync as rmSync3 } from "fs";
 import { join as join14 } from "path";
-import { tmpdir } from "os";
+import { tmpdir as tmpdir2 } from "os";
 function manifestAt(dir) {
   const path = join14(dir, "manifest.json");
   if (!existsSync13(path))
@@ -7240,7 +7489,7 @@ function writeFromManifest(manifest, srcDir, source, kind) {
   return { name, version: manifest.version, kind, source, dir, scriptPath };
 }
 async function cloneToTemp(gitUrl) {
-  const tmp = mkdtempSync(join14(tmpdir(), "hooks-install-"));
+  const tmp = mkdtempSync(join14(tmpdir2(), "hooks-install-"));
   const proc = Bun.spawn(["git", "clone", "--depth", "1", "--quiet", gitUrl, join14(tmp, "repo")], {
     stdout: "pipe",
     stderr: "pipe"
@@ -7327,6 +7576,7 @@ __export(exports_sync, {
   syncHooks: () => syncHooks,
   stageSyncArtifacts: () => stageSyncArtifacts,
   planSync: () => planSync,
+  installPinnedFromBundled: () => installPinnedFromBundled,
   fetchPinnedHook: () => fetchPinnedHook,
   commitSyncArtifacts: () => commitSyncArtifacts
 });
@@ -7490,7 +7740,7 @@ async function stageSyncArtifacts(apiUrl, apiKey, names, remoteLock) {
   return staged;
 }
 async function commitSyncArtifacts(staged, apiUrl, remoteLock) {
-  const db = getDb();
+  const db = isLocalStoreRefused() ? null : getDb();
   for (const item of staged) {
     const entry = remoteLock.hooks[item.name];
     if (!entry)
@@ -7510,6 +7760,8 @@ async function commitSyncArtifacts(staged, apiUrl, remoteLock) {
     lock.hooks[item.name] = { version: entry.version, sha256: entry.sha256, source: entry.source ?? "remote" };
   }
   writeLock(lock);
+  if (!db)
+    return;
   db.exec("BEGIN");
   try {
     for (const item of staged) {
@@ -7572,23 +7824,56 @@ async function fetchPinnedHook(name, version, apiUrl, apiKey) {
   if (actual !== expectedSha) {
     throw new Error(`sha256 mismatch after write for '${name}@${version}': expected ${expectedSha}, on disk ${actual}`);
   }
-  const db = getDb();
   setPinnedHook(name, { version, sha256: expectedSha, source: entry.source ?? "remote", pinned: true });
-  upsertHookRecord(db, {
+  if (!isLocalStoreRefused()) {
+    upsertHookRecord(getDb(), {
+      name,
+      version,
+      sha256: expectedSha,
+      source_type: entry.source ?? "remote",
+      source_ref: apiUrl,
+      last_verified_at: new Date().toISOString()
+    });
+  }
+  return {
     name,
     version,
     sha256: expectedSha,
-    source_type: entry.source ?? "remote",
+    source: entry.source ?? "remote",
     source_ref: apiUrl,
+    artifact,
+    scriptPath
+  };
+}
+async function installPinnedFromBundled(name, version) {
+  const bundled = collectBundledCatalog().find((entry) => entry.name === name);
+  if (!bundled) {
+    throw new Error(`Hook '${name}' is not in the bundled registry`);
+  }
+  if (bundled.version !== version) {
+    throw new Error(`Hook '${name}' version ${version} is not in the bundled registry (available: ${bundled.version})`);
+  }
+  const scriptPath = resolveScriptPath(name);
+  if (!scriptPath) {
+    throw new Error(`Hook '${name}' has no script in the bundled registry`);
+  }
+  const db = getDb();
+  setPinnedHook(name, { version, sha256: bundled.sha256, source: "bundled", pinned: true });
+  upsertHookRecord(db, {
+    name,
+    version,
+    sha256: bundled.sha256,
+    source_type: "bundled",
+    source_ref: "bundled registry",
     last_verified_at: new Date().toISOString()
   });
   return {
     name,
     version,
-    sha256: expectedSha,
-    source: entry.source ?? "remote",
-    source_ref: apiUrl,
-    artifact,
+    sha256: bundled.sha256,
+    source: "bundled",
+    source_ref: "bundled registry",
+    artifact: null,
     scriptPath
   };
 }
@@ -8421,7 +8706,7 @@ function startServeServer(options) {
       return handleServeRequest(req, resolveHooksServePublishKey());
     }
   });
-  console.error(`hooks registry listening on http://${host}:${port} (publish requires an API key)`);
+  console.error(`hooks registry listening on http://${host}:${server.port} (publish requires an API key)`);
   return server;
 }
 var DEFAULT_SERVE_PORT = 39428, SERVE_HOST = "127.0.0.1", SERVE_SERVICE_NAME = "hooks-registry";
@@ -8517,6 +8802,32 @@ async function provisionCloudflareResources(options) {
 }
 var CF_API = "https://api.cloudflare.com/client/v4";
 
+// src/mcp/authority.ts
+var exports_authority = {};
+__export(exports_authority, {
+  resolveHooksMcpAuthority: () => resolveHooksMcpAuthority,
+  decideHooksMcpAuthority: () => decideHooksMcpAuthority
+});
+function resolveHooksMcpAuthority(env = process.env) {
+  const transport = resolveHooksTransport(env);
+  if (transport.mode === "local" || !transport.authority) {
+    return { route: "local", source: "local-opt-in" };
+  }
+  return { route: "hosted", v1BaseUrl: transport.authority.v1BaseUrl, source: transport.source };
+}
+function decideHooksMcpAuthority(env = process.env) {
+  const authority = resolveHooksMcpAuthority(env);
+  if (authority.route === "hosted") {
+    refuseLocalStore(hooksHostedRouteLocalStoreRefusal(authority.v1BaseUrl));
+  }
+  return authority;
+}
+var init_authority = __esm(() => {
+  init_db();
+  init_local_opt_in();
+  init_transport2();
+});
+
 // src/mcp/server.ts
 var exports_server = {};
 __export(exports_server, {
@@ -8785,6 +9096,13 @@ function createHooksServer() {
       if (hookHealthy)
         healthy.push(name);
     }
+    for (const overlap of findRewriteOverlaps(registered, (name) => getHook(name))) {
+      issues.push({
+        hook: overlap.hooks.join(" + "),
+        issue: `Both rewrite the tool input on overlapping ${overlap.event} matchers ('${overlap.matchers[0]}' / '${overlap.matchers[1]}'); only one rewrite is applied per tool call, so one of these guards is silently disarmed. Remove one, or narrow a matcher so they no longer overlap.`,
+        severity: "error"
+      });
+    }
     return { content: [{ type: "text", text: JSON.stringify({ healthy: issues.length === 0, healthy_hooks: healthy, issues, registered, scope }) }] };
   });
   defineTool("hooks_categories", "List all hook categories with counts", {}, async () => {
@@ -9451,6 +9769,7 @@ async function startSSEServer(options = {}) {
   if (!loopback && !authToken) {
     throw new Error(`Refusing to serve MCP SSE on non-loopback host '${host}' without an auth token. Set HASNA_HOOKS_MCP_TOKEN (or HOOKS_MCP_TOKEN) to authorize a non-loopback bind.`);
   }
+  decideHooksMcpAuthority();
   const server = createHooksServer();
   const transports = new Map;
   function authorized2(headers) {
@@ -9500,6 +9819,13 @@ async function startSSEServer(options = {}) {
   });
 }
 async function startStdioServer() {
+  try {
+    decideHooksMcpAuthority();
+  } catch (err) {
+    process.stderr.write(`${err instanceof Error ? err.message : String(err)}
+`);
+    process.exit(1);
+  }
   try {
     const server = createHooksServer();
     const transport = new StdioServerTransport;
@@ -9517,8 +9843,10 @@ var init_server = __esm(() => {
   init_profiles();
   init_manifest();
   init_resolve();
+  init_registration();
   init_store();
   init_redact();
+  init_authority();
   init_storage();
   __dirname3 = dirname7(fileURLToPath4(import.meta.url));
   pkg = { name: "@hasna/hooks", version: "0.0.0" };
@@ -9612,6 +9940,7 @@ import { spawn } from "child_process";
 import { request as nodeHttpRequest } from "http";
 import { request as nodeHttpsRequest } from "https";
 import { randomUUID as randomUUID2 } from "crypto";
+import { createRequire } from "module";
 function getPathValue(input, path) {
   return path.split(".").reduce((value, part) => {
     if (value && typeof value === "object" && part in value) {
@@ -10709,6 +11038,22 @@ function setPath(input, path, replacement) {
   if (last && last in cursor)
     cursor[last] = replacement;
 }
+var MAX_PACKAGE_BYTES = 1024 * 1024;
+var MAX_CREDENTIAL_FILE_BYTES = 64 * 1024;
+var INSPECT_CUSTOM = Symbol.for("nodejs.util.inspect.custom");
+var CREDENTIAL_SEAL = Symbol.for("hasna:contracts:sealedCredential");
+var AMBIENT_ENVIRONMENT = Symbol.for("hasna:contracts:ambientClientEnvironment");
+var requireSecretsSdk = createRequire(import.meta.url);
+var IDEMPOTENT_METHODS = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
+var AUTHORITY_OVERRIDE_HEADERS = new Set([
+  "host",
+  ":authority",
+  "forwarded",
+  "x-forwarded-host",
+  "x-original-host"
+]);
+var MAX_ENVELOPE_BYTES = 256 * 1024;
+var MAX_REQUEST_BYTES = MAX_ENVELOPE_BYTES * 2 + 8192;
 function createEvent(input) {
   return {
     id: input.id ?? randomUUID2(),
@@ -12427,6 +12772,7 @@ function App({ initialHooks, overwrite = false }) {
 // src/cli/index.tsx
 init_registry();
 init_installer();
+init_registration();
 init_redact();
 init_profiles();
 init_manifest();
@@ -12437,6 +12783,7 @@ init_app_home();
 init_config();
 init_local_opt_in();
 init_transport2();
+init_db();
 import { jsxDEV as jsxDEV8 } from "react/jsx-dev-runtime";
 var __dirname4 = dirname8(fileURLToPath5(import.meta.url));
 var pkgPath = existsSync15(join17(__dirname4, "..", "package.json")) ? join17(__dirname4, "..", "package.json") : join17(__dirname4, "..", "..", "package.json");
@@ -12471,6 +12818,19 @@ function truncateText2(value, max = 96) {
 function projectLogRows2(rows) {
   return rows.map((row) => projectEventRowForRead({ ...row }));
 }
+async function openLocalStoreOrExit(json2) {
+  try {
+    const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
+    return getDb2();
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (json2)
+      console.log(JSON.stringify({ error: message }));
+    else
+      console.error(chalk2.red(`\u2717 ${message}`));
+    process.exit(1);
+  }
+}
 function readToken(tokenFile) {
   if (tokenFile) {
     try {
@@ -12535,6 +12895,11 @@ function suggestHooks(name, max = 3) {
 }
 program2.name("hooks").description("Install hooks for AI coding agents").version(pkg2.version);
 program2.command("interactive", { isDefault: true }).alias("i").description("Interactive hook browser").action(() => {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) {
+    console.error(chalk2.red("The interactive hook browser requires a TTY terminal.") + `
+` + chalk2.dim("Use `hooks search <query>`, `hooks list`, or `hooks categories` for non-interactive use."));
+    process.exit(1);
+  }
   render(/* @__PURE__ */ jsxDEV8(App, {}, undefined, false, undefined, this));
 });
 program2.command("init").description("Register a new agent profile with a unique ID").option("-a, --agent <type>", "Agent type: claude, gemini, custom", "claude").option("-n, --name <name>", "Optional display name for the agent").option("-j, --json", "Output as JSON", false).option("--cloudflare", "Configure a remote registry (Cloudflare worker)", false).option("--api-url <url>", "Remote registry API URL (with --cloudflare)").option("--api-key <ref>", "Vault key NAME for the registry API key (never the value; with --cloudflare)").action(async (options) => {
@@ -12770,6 +13135,7 @@ program2.command("install").alias("add").argument("[hooks...]", "Hooks to instal
   const { readCustomManifest: readCustomManifest2, HOOK_NAME_RE: HOOK_NAME_RE2 } = await Promise.resolve().then(() => (init_manifest(), exports_manifest));
   const { resolveHooksTransport: resolveHooksTransport2 } = await Promise.resolve().then(() => (init_transport2(), exports_transport));
   const { sha256Of: sha256Of2, pinInstalledHook: pinInstalledHook2 } = await Promise.resolve().then(() => (init_store(), exports_store));
+  const { installPinnedFromBundled: installPinnedFromBundled2, fetchPinnedHook: fetchPinnedHook2 } = await Promise.resolve().then(() => (init_sync(), exports_sync));
   const { readFileSync: readFileSyncFs } = await import("fs");
   function parseNameVersion(arg) {
     if (isCustomSource2(arg))
@@ -12862,17 +13228,13 @@ Dry run \u2014 would install (${scope}, ${target}):
   for (const { arg, pinned } of pinnedRequests) {
     try {
       const transport = resolveHooksTransport2();
-      if (transport.mode !== "remote" || !transport.authority) {
-        throw new Error(`Cannot install '${arg}': no remote registry configured (set HASNA_HOOKS_API_URL and HASNA_HOOKS_API_KEY, or opt into local mode with HASNA_HOOKS_LOCAL=1)`);
-      }
-      const { origin, apiKey } = transport.authority;
-      const { fetchPinnedHook: fetchPinnedHook2 } = await Promise.resolve().then(() => (init_sync(), exports_sync));
-      const pinnedInstall = await fetchPinnedHook2(pinned.name, pinned.version, origin, apiKey);
+      const pinnedInstall = transport.mode === "remote" && transport.authority ? await fetchPinnedHook2(pinned.name, pinned.version, transport.authority.origin, transport.authority.apiKey) : await installPinnedFromBundled2(pinned.name, pinned.version);
       installedPinned.push(pinnedInstall.name);
       if (options.json) {
         console.log(JSON.stringify({ pinned: { request: arg, name: pinnedInstall.name, version: pinnedInstall.version, sha256: pinnedInstall.sha256, source: pinnedInstall.source } }));
       } else {
-        console.log(chalk2.green(`\u2713 Installed '${pinnedInstall.name}' v${pinnedInstall.version} from registry (sha256 ${pinnedInstall.sha256.slice(0, 12)}\u2026)`));
+        const registryLabel = transport.mode === "remote" ? "registry" : "bundled registry";
+        console.log(chalk2.green(`\u2713 Installed '${pinnedInstall.name}' v${pinnedInstall.version} from ${registryLabel} (sha256 ${pinnedInstall.sha256.slice(0, 12)}\u2026)`));
       }
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);
@@ -13192,11 +13554,21 @@ ${meta.displayName}
     console.log(chalk2.dim("  \u25CB Not installed in project"));
   }
 });
-program2.command("doctor").option("-g, --global", "Check global settings", false).option("-p, --project", "Check project settings", false).option("-j, --json", "Output as JSON", false).description("Check health of installed hooks").action((options) => {
+program2.command("doctor").option("-g, --global", "Check global settings", false).option("-p, --project", "Check project settings", false).option("-f, --fix", "Remove stale registrations (a .bak is written beside each settings file)", false).option("-j, --json", "Output as JSON", false).description("Check health of installed hooks; --fix removes registrations whose hook cannot resolve").action((options) => {
   const scope = resolveScope(options);
   const settingsPath = getSettingsPath(scope);
   const issues = [];
   const healthy = [];
+  const fixed = options.fix ? pruneStaleRegistrations(scope) : [];
+  const stale = scanStaleRegistrations(scope);
+  for (const finding of stale) {
+    issues.push({
+      hook: finding.hook,
+      issue: `Stale registration in ${finding.file} (${finding.event}): \`${finding.command}\` does not resolve to a hook`,
+      severity: "error"
+    });
+  }
+  const staleNames = new Set(stale.map((finding) => finding.hook));
   const settingsExist = existsSync15(settingsPath);
   if (!settingsExist) {
     issues.push({ hook: "(settings)", issue: `${settingsPath} not found`, severity: "warning" });
@@ -13210,6 +13582,8 @@ program2.command("doctor").option("-g, --global", "Check global settings", false
     } catch {}
   }
   for (const name of registered) {
+    if (staleNames.has(name))
+      continue;
     const custom = readCustomManifest(name);
     const meta = custom ? resolveHookMeta(name) : getHook(name);
     let hookHealthy = true;
@@ -13245,17 +13619,53 @@ program2.command("doctor").option("-g, --global", "Check global settings", false
       healthy.push(name);
     }
   }
+  for (const overlap of findRewriteOverlaps(registered, (name) => getHook(name))) {
+    issues.push({
+      hook: overlap.hooks.join(" + "),
+      issue: `Both rewrite the tool input on overlapping ${overlap.event} matchers ('${overlap.matchers[0]}' / '${overlap.matchers[1]}'); only one rewrite is applied per tool call, so one of these guards is silently disarmed. Remove one, or narrow a matcher so they no longer overlap.`,
+      severity: "error"
+    });
+  }
   if (options.json) {
-    console.log(JSON.stringify({ healthy: issues.length === 0, healthy_hooks: healthy, issues, registered, wiring_count: wiringCount, scope }));
+    console.log(JSON.stringify({
+      healthy: issues.length === 0,
+      healthy_hooks: healthy,
+      issues,
+      stale,
+      fixed: fixed.flatMap((result) => result.removed),
+      backups: fixed.map((result) => result.backupPath),
+      registered,
+      wiring_count: wiringCount,
+      scope
+    }));
+    if (issues.some((issue) => issue.severity === "error"))
+      process.exitCode = 1;
     return;
   }
   console.log(chalk2.bold(`
 Hook Health Check (${scope})
 `));
+  if (fixed.length > 0) {
+    for (const result of fixed) {
+      console.log(chalk2.green(`  \u2713 removed ${result.removed.length} stale registration(s) from ${result.file}`));
+      for (const finding of result.removed) {
+        console.log(chalk2.dim(`      ${finding.hook} (${finding.event}: ${finding.command})`));
+      }
+      console.log(chalk2.dim(`      backup: ${result.backupPath}`));
+    }
+    console.log();
+  }
   if (registered.length === 0) {
     console.log(chalk2.dim("  No hooks registered."));
     console.log(chalk2.dim("  Run: hooks install gitguard"));
     console.log(chalk2.dim(`  (checked 0 registered \`hooks run\` entries of ${wiringCount} settings wiring entries; direct-path wiring outside the registered surface is not covered by this check)`));
+    if (issues.length > 0) {
+      console.log();
+      for (const issue of issues) {
+        const icon = issue.severity === "error" ? chalk2.red("\u2717") : chalk2.yellow("!");
+        console.log(`  ${icon} ${chalk2.cyan(issue.hook)}: ${issue.issue}`);
+      }
+    }
     if (issues.length > 0)
       process.exitCode = 1;
     return;
@@ -13299,8 +13709,9 @@ program2.command("update").argument("[hooks...]", "Hooks to update (defaults to
   }
   const { resolveHook: resolveHook2 } = await Promise.resolve().then(() => (init_resolve(), exports_resolve));
   const { sha256File: sha256File2, setPinnedHook: setPinnedHook2, upsertHookRecord: upsertHookRecord2 } = await Promise.resolve().then(() => (init_store(), exports_store));
-  const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
+  const { getDb: getDb2, isLocalStoreRefused: isLocalStoreRefused2 } = await Promise.resolve().then(() => (init_db(), exports_db));
   const { resolveHooksTransport: resolveHooksTransport2 } = await Promise.resolve().then(() => (init_transport2(), exports_transport));
+  const { installPinnedFromBundled: installPinnedFromBundled2, fetchPinnedHook: fetchPinnedHook2 } = await Promise.resolve().then(() => (init_sync(), exports_sync));
   const { isCustomSource: isCustomSource2 } = await Promise.resolve().then(() => (init_custom_install(), exports_custom_install));
   const { HOOK_NAME_RE: HOOK_NAME_RE2 } = await Promise.resolve().then(() => (init_manifest(), exports_manifest));
   function parseNameVersion(arg) {
@@ -13323,12 +13734,7 @@ program2.command("update").argument("[hooks...]", "Hooks to update (defaults to
     if (pinned) {
       try {
         const transport = resolveHooksTransport2();
-        if (transport.mode !== "remote" || !transport.authority) {
-          throw new Error(`Cannot update '${arg}': no remote registry configured (set HASNA_HOOKS_API_URL and HASNA_HOOKS_API_KEY, or opt into local mode with HASNA_HOOKS_LOCAL=1)`);
-        }
-        const { origin, apiKey } = transport.authority;
-        const { fetchPinnedHook: fetchPinnedHook2 } = await Promise.resolve().then(() => (init_sync(), exports_sync));
-        const pinnedInstall = await fetchPinnedHook2(pinned.name, pinned.version, origin, apiKey);
+        const pinnedInstall = transport.mode === "remote" && transport.authority ? await fetchPinnedHook2(pinned.name, pinned.version, transport.authority.origin, transport.authority.apiKey) : await installPinnedFromBundled2(pinned.name, pinned.version);
         const registered = installHook(pinnedInstall.name, { scope, overwrite: true });
         if (!registered.success) {
           results.push({ hook: arg, success: false, error: registered.error ?? "registration failed" });
@@ -13353,13 +13759,15 @@ program2.command("update").argument("[hooks...]", "Hooks to update (defaults to
     if (result.success && resolved) {
       const hash = await sha256File2(resolved.scriptPath);
       setPinnedHook2(resolved.name, { version: resolved.version, sha256: hash, source: resolved.source });
-      upsertHookRecord2(getDb2(), {
-        name: resolved.name,
-        version: resolved.version,
-        sha256: hash,
-        source_type: resolved.source,
-        last_verified_at: new Date().toISOString()
-      });
+      if (!isLocalStoreRefused2()) {
+        upsertHookRecord2(getDb2(), {
+          name: resolved.name,
+          version: resolved.version,
+          sha256: hash,
+          source_type: resolved.source,
+          last_verified_at: new Date().toISOString()
+        });
+      }
       results.push({ ...result, pinned: { version: resolved.version, sha256: hash } });
       continue;
     }
@@ -13637,8 +14045,7 @@ program2.command("profile-import").argument("<file>", "JSON file to import profi
 });
 var logCmd = program2.command("log").description(`Query hook event logs from SQLite (${getReportedDbPath()})`);
 logCmd.command("list").description("List hook events").option("--hook <name>", "Filter by hook name").option("--session <id>", "Filter by session ID").option("-n, --limit <n>", "Number of rows to show", "50").option("-j, --json", "Output as JSON", false).action(async (options) => {
-  const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
-  const db = getDb2();
+  const db = await openLocalStoreOrExit(options.json);
   const limit = parseInt(options.limit) || 50;
   let sql = "SELECT * FROM hook_events WHERE 1=1";
   const params = [];
@@ -13675,8 +14082,7 @@ logCmd.command("list").description("List hook events").option("--hook <name>", "
   Compact rows shown. Use --json for full event records or --limit <n> to change row count.`));
 });
 logCmd.command("search <text>").description("Search hook events by tool_input or error text").option("-n, --limit <n>", "Number of rows to show", "50").option("-j, --json", "Output as JSON", false).action(async (text, options) => {
-  const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
-  const db = getDb2();
+  const db = await openLocalStoreOrExit(options.json);
   const limit = parseInt(options.limit) || 50;
   const q = `%${text}%`;
   const rows = db.query("SELECT * FROM hook_events WHERE tool_input LIKE ? OR error LIKE ? ORDER BY timestamp DESC LIMIT ?").all(q, q, limit);
@@ -13701,8 +14107,7 @@ logCmd.command("search <text>").description("Search hook events by tool_input or
   Compact rows shown. Use --json for full event records or --limit <n> to change row count.`));
 });
 logCmd.command("tail").description("Show most recent hook events").option("-n <n>", "Number of rows", "20").option("-j, --json", "Output as JSON", false).action(async (options) => {
-  const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
-  const db = getDb2();
+  const db = await openLocalStoreOrExit(options.json);
   const limit = parseInt(options.n) || 20;
   const rows = db.query("SELECT * FROM hook_events ORDER BY timestamp DESC LIMIT ?").all(limit);
   const projected = projectLogRows2(rows);
@@ -13727,8 +14132,7 @@ logCmd.command("tail").description("Show most recent hook events").option("-n <n
   Compact rows shown. Use --json for full event records or -n <n> to change row count.`));
 });
 logCmd.command("errors").description("Show hook events that contain errors").option("--since <duration>", "Only show errors since this duration (e.g. 1h, 30m, 7d)", "24h").option("-n, --limit <n>", "Number of rows to show", "50").option("-j, --json", "Output as JSON", false).action(async (options) => {
-  const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
-  const db = getDb2();
+  const db = await openLocalStoreOrExit(options.json);
   const limit = parseInt(options.limit) || 50;
   function parseDuration(s) {
     const m = s.match(/^(\d+)(s|m|h|d)$/);
@@ -13770,8 +14174,7 @@ logCmd.command("errors").description("Show hook events that contain errors").opt
   Compact rows shown. Use --json for full event records or --limit <n> to change row count.`));
 });
 logCmd.command("clear").description("Delete hook event logs").option("--hook <name>", "Only delete events for this hook").option("-y, --yes", "Skip confirmation prompt", false).action(async (options) => {
-  const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
-  const db = getDb2();
+  const db = await openLocalStoreOrExit(false);
   const countRow = options.hook ? db.query("SELECT COUNT(*) as n FROM hook_events WHERE hook_name = ?").get(options.hook) : db.query("SELECT COUNT(*) as n FROM hook_events").get();
   const count = countRow?.n ?? 0;
   if (count === 0) {
@@ -13793,19 +14196,28 @@ logCmd.command("clear").description("Delete hook event logs").option("--hook <na
 });
 var storageCmd = program2.command("storage").description("Sync local hook data with storage PostgreSQL");
 storageCmd.command("status").description("Show storage sync status").option("-j, --json", "Output as JSON", false).action(async (options) => {
-  const { getStorageStatus: getStorageStatus2 } = await Promise.resolve().then(() => (init_storage(), exports_storage));
-  const status = getStorageStatus2();
-  if (options.json) {
-    console.log(JSON.stringify(status, null, 2));
-    return;
-  }
-  console.log(chalk2.bold(`
+  try {
+    const { getStorageStatus: getStorageStatus2 } = await Promise.resolve().then(() => (init_storage(), exports_storage));
+    const status = getStorageStatus2();
+    if (options.json) {
+      console.log(JSON.stringify(status, null, 2));
+      return;
+    }
+    console.log(chalk2.bold(`
   Storage Status
 `));
-  console.log(`  Configured: ${status.configured ? chalk2.green(`yes (${status.activeEnv})`) : chalk2.red("no")}`);
-  console.log(`  Backend:    ${status.backend}`);
-  console.log(`  Tables:     ${status.tables.join(", ")}`);
-  console.log(`  Sync rows:  ${status.sync.length}`);
+    console.log(`  Configured: ${status.configured ? chalk2.green(`yes (${status.activeEnv})`) : chalk2.red("no")}`);
+    console.log(`  Backend:    ${status.backend}`);
+    console.log(`  Tables:     ${status.tables.join(", ")}`);
+    console.log(`  Sync rows:  ${status.sync.length}`);
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (options.json)
+      console.log(JSON.stringify({ error: message }));
+    else
+      console.error(chalk2.red(`\u2717 ${message}`));
+    process.exitCode = 1;
+  }
 });
 storageCmd.command("push").description("Push local hook data to storage PostgreSQL").option("-t, --tables <tables>", "Comma-separated table names").option("-j, --json", "Output as JSON", false).action(async (options) => {
   try {
@@ -14015,6 +14427,13 @@ program2.command("mcp").option("-s, --stdio", "Use stdio transport (one process
     const { startSSEServer: startSSEServer2 } = await Promise.resolve().then(() => (init_server(), exports_server));
     await startSSEServer2({ port: options.port ? parseInt(options.port) : 39427 });
   } else {
+    const { decideHooksMcpAuthority: decideHooksMcpAuthority2 } = await Promise.resolve().then(() => (init_authority(), exports_authority));
+    try {
+      decideHooksMcpAuthority2();
+    } catch (error) {
+      console.error(error instanceof Error ? error.message : String(error));
+      process.exit(1);
+    }
     const { createHooksServer: createHooksServer2 } = await Promise.resolve().then(() => (init_server(), exports_server));
     const { resolveMcpHttpPort: resolveMcpHttpPort2, startMcpHttpServer: startMcpHttpServer2 } = await Promise.resolve().then(() => (init_http(), exports_http));
     const args = options.port ? ["--port", options.port] : [];
@@ -14023,7 +14442,6 @@ program2.command("mcp").option("-s, --stdio", "Use stdio transport (one process
 });
 registerEventsCommands(program2, { source: "hooks" });
 var API_INDEPENDENT_COMMANDS = new Set([
-  "run",
   "serve",
   "mcp",
   "cf",
@@ -14035,11 +14453,11 @@ var API_INDEPENDENT_COMMANDS = new Set([
   "events"
 ]);
 function failClosedForMissingApiEnv(detail) {
-  console.error(chalk2.red(`hooks: no registry credential resolved and local mode is not explicitly enabled.
+  console.error(chalk2.red(hooksFailClosedLine() + `
 ` + `The remote registry requires a STRICT pair \u2014 set HASNA_HOOKS_API_URL and HASNA_HOOKS_API_KEY, or the
 ` + `Keychain items hasna.credentials.hooks.api-url / .api-key, or ~/.hasna/hooks/config/credentials.
-` + `config.json (api_url / api_key_ref) is RETIRED and no longer read. Or set
-` + `HASNA_HOOKS_LOCAL=1 to explicitly opt into local mode (bundled registry + local store).
+config.json (api_url / api_key_ref) is RETIRED and no longer read. Or set
+HASNA_HOOKS_LOCAL=1 to explicitly opt into local mode (bundled registry + local store).
 ` + (detail ? `${detail}
 ` : "") + "Refusing to silently fall back to local storage."));
   process.exit(1);
@@ -14063,21 +14481,25 @@ function enforceTransportGate() {
     return;
   if (token !== null && API_INDEPENDENT_COMMANDS.has(token))
     return;
-  if (hasHooksEnvAuthorityIntent(process.env))
+  if (hasHooksEnvAuthorityIntent(process.env)) {
+    refuseLocalStore(hooksHostedRouteLocalStoreRefusal("configured by HASNA_HOOKS_API_URL / HASNA_HOOKS_API_KEY"));
     return;
+  }
   if (isHooksLocalOptIn(process.env)) {
     announceHooksLocalMode();
     return;
   }
+  let transport;
   try {
-    const transport = resolveHooksTransport(process.env);
-    if (transport.mode !== "remote" || !transport.authority) {
-      failClosedForMissingApiEnv();
-    }
+    transport = resolveHooksTransport(process.env);
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     failClosedForMissingApiEnv(message);
   }
+  if (transport.mode !== "remote" || !transport.authority) {
+    failClosedForMissingApiEnv();
+  }
+  refuseLocalStore(hooksHostedRouteLocalStoreRefusal(transport.authority.v1BaseUrl));
 }
 enforceTransportGate();
 program2.parse();