@hasna/hooks 0.9.0 → 0.9.2

package/bin/index.js

@@ -2087,10 +2087,10 @@ var init_registry = __esm(() => {
       name: "trash-guard",
       displayName: "Trash Guard",
       description: "Rewrites rm issued through Bash into `trash guard`, so the delete lands in a recoverable trash store; refuses the delete when there is nothing to redirect to (trash absent, a delete verb it cannot rewrite, or the protected class: /, ~, ~/.hasna, ~/.ssh, ~/.aws)",
-      version: "0.1.0",
+      version: "0.1.1",
       category: "Git Safety",
       event: "PreToolUse",
-      matcher: "Bash",
+      matcher: "^(Bash|apply_patch|ApplyPatch|functions\\.apply_patch)$",
       tags: ["rm", "delete", "trash", "recoverable", "guard", "safety", "bash"],
       rewritesInput: true,
       timeoutSeconds: 5
@@ -2246,6 +2246,17 @@ var init_registry = __esm(() => {
       matcher: "",
       tags: ["knowledge", "context", "codewith", "deterministic", "session-start", "prompt", "subagent"]
     },
+    {
+      name: "mementos-context",
+      displayName: "Mementos Prompt Context",
+      description: "Retrieves scoped memories for a user prompt, with optional relevance judgments",
+      version: "0.1.0",
+      category: "Context Management",
+      event: "UserPromptSubmit",
+      matcher: "",
+      timeoutSeconds: 12,
+      tags: ["mementos", "memory", "prompt", "codex", "claude", "codewith", "opt-in"]
+    },
     {
       name: "autoformat",
       displayName: "Auto Format",
@@ -4919,14 +4930,30 @@ function runRetention(db, days) {
 // src/db/index.ts
 var exports_db = {};
 __export(exports_db, {
+  refuseLocalStore: () => refuseLocalStore,
+  localStoreRefusalMessage: () => localStoreRefusalMessage,
+  isLocalStoreRefused: () => isLocalStoreRefused,
   getDbPath: () => getDbPath,
   getDb: () => getDb,
   createTestDb: () => createTestDb,
-  closeDb: () => closeDb
+  closeDb: () => closeDb,
+  allowLocalStore: () => allowLocalStore
 });
 import { Database } from "bun:sqlite";
 import { existsSync as existsSync8, mkdirSync as mkdirSync2, cpSync } from "fs";
 import { join as join9 } from "path";
+function refuseLocalStore(message) {
+  localStoreRefusal = message;
+}
+function allowLocalStore() {
+  localStoreRefusal = null;
+}
+function isLocalStoreRefused() {
+  return localStoreRefusal !== null;
+}
+function localStoreRefusalMessage() {
+  return localStoreRefusal;
+}
 function resolveDataDir() {
   const effective = getEffectiveDataRoot();
   const oldDir = join9(getHomeDir(), ".hooks");
@@ -4950,6 +4977,8 @@ function ensureDir(dbPath) {
   }
 }
 function getDb() {
+  if (localStoreRefusal !== null)
+    throw new Error(localStoreRefusal);
   if (instance)
     return instance;
   const dbPath = getDbPath();
@@ -4987,7 +5016,7 @@ function createTestDb() {
   db.exec("PRAGMA foreign_keys=ON");
   return db;
 }
-var instance = null;
+var instance = null, localStoreRefusal = null;
 var init_db = __esm(() => {
   init_app_home();
   init_migrations();
@@ -5026,6 +5055,9 @@ async function sha256File(path) {
   const buf = await readFile2(path);
   return sha256Of(buf);
 }
+function storeDb() {
+  return isLocalStoreRefused() ? null : getDb();
+}
 function getHookRecord(db, name) {
   return db.query("SELECT * FROM hooks WHERE name = ?").get(name);
 }
@@ -5126,26 +5158,28 @@ function removePinnedHook(name) {
 }
 function pinInstalledHook(name, version, sha256, source, sourceRef) {
   const now2 = new Date().toISOString();
-  const db = getDb();
-  upsertHookRecord(db, {
-    name,
-    version,
-    sha256,
-    source_type: source,
-    source_ref: sourceRef ?? null,
-    last_verified_at: now2
-  });
+  const db = storeDb();
+  if (db) {
+    upsertHookRecord(db, {
+      name,
+      version,
+      sha256,
+      source_type: source,
+      source_ref: sourceRef ?? null,
+      last_verified_at: now2
+    });
+  }
   setPinnedHook(name, { version, sha256, source });
 }
 function removeHookFromStore(name) {
   const removedPin = removePinnedHook(name);
-  const db = getDb();
-  const removedRecord = removeHookRecord(db, name);
+  const db = storeDb();
+  const removedRecord = db ? removeHookRecord(db, name) : false;
   return { removedPin, removedRecord };
 }
 function checkScriptHash(name, actual) {
-  const db = getDb();
-  const record = getHookRecord(db, name);
+  const db = storeDb();
+  const record = db ? getHookRecord(db, name) : null;
   const pin = getPinnedHook(name);
   const expected = record?.sha256 ?? pin?.sha256 ?? null;
   if (expected !== null && expected !== actual) {
@@ -5155,24 +5189,28 @@ function checkScriptHash(name, actual) {
     const now3 = new Date().toISOString();
     const version = pin?.version ?? record?.version ?? "0.0.0";
     const source = pin?.source ?? record?.source_type ?? "local";
-    upsertHookRecord(db, {
-      name,
-      version,
-      sha256: actual,
-      source_type: source,
-      last_verified_at: now3
-    });
+    if (db) {
+      upsertHookRecord(db, {
+        name,
+        version,
+        sha256: actual,
+        source_type: source,
+        last_verified_at: now3
+      });
+    }
     setPinnedHook(name, { version, sha256: actual, source });
     return { ok: true, pinned: false, expected: null, actual, name };
   }
   const now2 = new Date().toISOString();
-  upsertHookRecord(db, {
-    name,
-    version: record?.version ?? pin?.version ?? "0.0.0",
-    sha256: expected,
-    source_type: record?.source_type ?? pin?.source ?? "local",
-    last_verified_at: now2
-  });
+  if (db) {
+    upsertHookRecord(db, {
+      name,
+      version: record?.version ?? pin?.version ?? "0.0.0",
+      sha256: expected,
+      source_type: record?.source_type ?? pin?.source ?? "local",
+      last_verified_at: now2
+    });
+  }
   return { ok: true, pinned: true, expected, actual, name };
 }
 async function verifyScriptHash(name, scriptPath) {
@@ -5180,14 +5218,16 @@ async function verifyScriptHash(name, scriptPath) {
 }
 function retrustHook(name, scriptPath, version, source) {
   const actual = sha256Of(readFileSync3(scriptPath));
-  const db = getDb();
-  upsertHookRecord(db, {
-    name,
-    version,
-    sha256: actual,
-    source_type: source,
-    last_verified_at: new Date().toISOString()
-  });
+  const db = storeDb();
+  if (db) {
+    upsertHookRecord(db, {
+      name,
+      version,
+      sha256: actual,
+      source_type: source,
+      last_verified_at: new Date().toISOString()
+    });
+  }
   setPinnedHook(name, { version, sha256: actual, source });
   return { ok: true, pinned: true, expected: actual, actual, name };
 }
@@ -5203,6 +5243,78 @@ var init_store = __esm(() => {
   };
 });
 
+// src/lib/codex-settings.ts
+import { closeSync, existsSync as existsSync10, lstatSync, mkdirSync as mkdirSync4, openSync, readFileSync as readFileSync4, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
+import { dirname as dirname3 } from "path";
+import { randomUUID as randomUUID3 } from "crypto";
+function current(path) {
+  try {
+    const stat = lstatSync(path);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 1048576)
+      throw new Error("invalid_file");
+    return readFileSync4(path, "utf8");
+  } catch (error) {
+    if (error.code === "ENOENT")
+      return null;
+    throw new Error("Cannot safely read Codex hooks.json; no settings were changed.");
+  }
+}
+function readCodexSettings(path) {
+  const raw = current(path);
+  let settings;
+  try {
+    settings = raw === null ? {} : JSON.parse(raw);
+    if (!settings || typeof settings !== "object" || Array.isArray(settings))
+      throw new Error;
+    if (settings.hooks !== undefined) {
+      if (!settings.hooks || typeof settings.hooks !== "object" || Array.isArray(settings.hooks))
+        throw new Error;
+      for (const entries of Object.values(settings.hooks)) {
+        if (!Array.isArray(entries) || entries.some((entry) => !entry || !Array.isArray(entry.hooks) || entry.hooks.some((hook) => !hook || typeof hook !== "object")))
+          throw new Error;
+      }
+    }
+  } catch {
+    throw new Error("Invalid Codex hooks.json; repair it before installing or removing hooks.");
+  }
+  snapshots.set(settings, { path, raw });
+  return settings;
+}
+function writeCodexSettings(path, settings) {
+  const snapshot = snapshots.get(settings);
+  if (!snapshot || snapshot.path !== path)
+    throw new Error("Codex settings require a complete current read before writing.");
+  mkdirSync4(dirname3(path), { recursive: true });
+  const lock = `${path}.hooks-write.lock`;
+  let fd;
+  try {
+    fd = openSync(lock, "wx", 384);
+  } catch {
+    throw new Error("Codex settings are being edited; retry after the active writer finishes.");
+  }
+  const temp = `${path}.${randomUUID3()}.tmp`;
+  try {
+    if (current(path) !== snapshot.raw)
+      throw new Error("Codex settings changed since reading; re-read before retrying.");
+    const next = JSON.stringify(settings, null, 2) + `
+`;
+    writeFileSync3(temp, next, { flag: "wx", mode: 384 });
+    if (current(path) !== snapshot.raw)
+      throw new Error("Codex settings changed since reading; re-read before retrying.");
+    renameSync2(temp, path);
+    snapshots.set(settings, { path, raw: next });
+  } finally {
+    if (existsSync10(temp))
+      unlinkSync(temp);
+    closeSync(fd);
+    unlinkSync(lock);
+  }
+}
+var snapshots;
+var init_codex_settings = __esm(() => {
+  snapshots = new WeakMap;
+});
+
 // src/lib/installer.ts
 var exports_installer = {};
 __export(exports_installer, {
@@ -5223,8 +5335,8 @@ __export(exports_installer, {
   detectRewriteConflict: () => detectRewriteConflict,
   buildCodewithTomlFragment: () => buildCodewithTomlFragment
 });
-import { existsSync as existsSync10, mkdirSync as mkdirSync4, readFileSync as readFileSync4, readdirSync as readdirSync3, rmdirSync, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
-import { join as join10, dirname as dirname3 } from "path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync5, readFileSync as readFileSync5, readdirSync as readdirSync3, rmdirSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync4 } from "fs";
+import { join as join10, dirname as dirname4 } from "path";
 import { homedir as homedir4 } from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function normalizeHookName(name) {
@@ -5234,12 +5346,19 @@ function shortHookName(name) {
   return name.startsWith("hook-") ? name.slice("hook-".length) : name;
 }
 function removeHookEntriesByName(entries, hookName) {
-  return entries.filter((entry) => !entry.hooks?.some((h) => {
-    const match = h.command?.match(/^hooks run ([\w-]+)/);
-    return match && match[1] === hookName;
-  }));
+  return entries.flatMap((entry) => {
+    if (!Array.isArray(entry.hooks))
+      return [entry];
+    const kept = entry.hooks.filter((h) => {
+      const match = h.command?.match(/^hooks run ([\w-]+)/);
+      return !(match && match[1] === hookName);
+    });
+    return kept.length === entry.hooks.length ? [entry] : kept.length ? [{ ...entry, hooks: kept }] : [];
+  });
 }
 function getTargetSettingsDir(target) {
+  if (target === "codex")
+    return ".codex";
   if (target === "codewith")
     return ".codewith";
   if (target === "gemini")
@@ -5247,6 +5366,8 @@ function getTargetSettingsDir(target) {
   return ".claude";
 }
 function getGlobalSettingsPathOverride(target) {
+  if (target === "codex")
+    return process.env.HASNA_HOOKS_CODEX_SETTINGS_PATH;
   if (target === "claude")
     return process.env.HASNA_HOOKS_CLAUDE_SETTINGS_PATH;
   if (target === "gemini")
@@ -5263,6 +5384,8 @@ function getSettingsPath(scope = "global", target = "claude", codewithConfigPath
   if (globalOverride)
     return globalOverride;
   const dir = getTargetSettingsDir(target);
+  if (target === "codex")
+    return join10(scope === "project" ? process.cwd() : homedir4(), dir, "hooks.json");
   if (scope === "project") {
     return target === "codewith" ? join10(process.cwd(), dir, "config.toml") : join10(process.cwd(), dir, "settings.json");
   }
@@ -5276,13 +5399,15 @@ function getHookPath(name) {
   return join10(HOOKS_DIR, normalizeHookName(shortName));
 }
 function hookExists(name) {
-  return existsSync10(getHookPath(name));
+  return existsSync11(getHookPath(name));
 }
 function readSettings(scope = "global", target = "claude") {
   const path = getSettingsPath(scope, target);
+  if (target === "codex")
+    return readCodexSettings(path);
   try {
-    if (existsSync10(path)) {
-      return JSON.parse(readFileSync4(path, "utf-8"));
+    if (existsSync11(path)) {
+      return JSON.parse(readFileSync5(path, "utf-8"));
     }
   } catch (error) {
     console.warn(`[hooks] Failed to read settings at ${path}: ${error instanceof Error ? error.message : String(error)}`);
@@ -5291,11 +5416,13 @@ function readSettings(scope = "global", target = "claude") {
 }
 function writeSettings(settings, scope = "global", target = "claude") {
   const path = getSettingsPath(scope, target);
-  const dir = dirname3(path);
-  if (!existsSync10(dir)) {
-    mkdirSync4(dir, { recursive: true });
+  if (target === "codex")
+    return writeCodexSettings(path, settings);
+  const dir = dirname4(path);
+  if (!existsSync11(dir)) {
+    mkdirSync5(dir, { recursive: true });
   }
-  writeFileSync3(path, JSON.stringify(settings, null, 2) + `
+  writeFileSync4(path, JSON.stringify(settings, null, 2) + `
 `);
 }
 function getTargetEventName(internalEvent, target) {
@@ -5318,6 +5445,8 @@ function codewithMatcher(matcher) {
 }
 function codewithTimeout(name) {
   switch (name) {
+    case "mementos-context":
+      return 12;
     case "knowledge-context":
       return 6;
     case "session-start":
@@ -5384,21 +5513,21 @@ function buildCodewithTomlFragment(name, profile) {
 function readCodewithConfig(scope, configPath) {
   const path = getSettingsPath(scope, "codewith", configPath);
   try {
-    return existsSync10(path) ? readFileSync4(path, "utf-8") : "";
+    return existsSync11(path) ? readFileSync5(path, "utf-8") : "";
   } catch {
     return "";
   }
 }
 function appendCodewithFragment(fragment, scope, configPath) {
   const path = getSettingsPath(scope, "codewith", configPath);
-  const dir = dirname3(path);
-  if (!existsSync10(dir))
-    mkdirSync4(dir, { recursive: true });
-  const existing = existsSync10(path) ? readFileSync4(path, "utf-8") : "";
+  const dir = dirname4(path);
+  if (!existsSync11(dir))
+    mkdirSync5(dir, { recursive: true });
+  const existing = existsSync11(path) ? readFileSync5(path, "utf-8") : "";
   const sep2 = existing.trim() ? `
 
 ` : "";
-  writeFileSync3(path, `${existing.replace(/\s*$/, "")}${sep2}${fragment}`);
+  writeFileSync4(path, `${existing.replace(/\s*$/, "")}${sep2}${fragment}`);
   return path;
 }
 function detectConflict(name, scope, target) {
@@ -5495,18 +5624,25 @@ function installForTarget(name, scope, overwrite, target, profile, codewithMode
       };
     }
   }
-  const registered = getRegisteredHooksForTarget(scope, target);
-  if (registered.includes(shortName) && !overwrite) {
-    return { hook: shortName, success: false, error: "Already installed. Use --overwrite to replace.", scope, target };
-  }
-  const conflict = detectConflict(shortName, scope, target);
-  const rewriteConflict = detectRewriteConflict(shortName, scope, target);
-  if (rewriteConflict) {
-    return { hook: shortName, success: false, error: `Refused: ${rewriteConflict}`, scope, target };
-  }
   try {
+    const registered = getRegisteredHooksForTarget(scope, target);
+    if (registered.includes(shortName) && !overwrite) {
+      return { hook: shortName, success: false, error: "Already installed. Use --overwrite to replace.", scope, target };
+    }
+    const conflict = detectConflict(shortName, scope, target);
+    const rewriteConflict = detectRewriteConflict(shortName, scope, target);
+    if (rewriteConflict) {
+      return { hook: shortName, success: false, error: `Refused: ${rewriteConflict}`, scope, target };
+    }
     registerHook(shortName, scope, target, profile);
-    return { hook: shortName, success: true, scope, target, ...conflict ? { conflict } : {} };
+    return {
+      hook: shortName,
+      success: true,
+      scope,
+      target,
+      ...conflict ? { conflict } : {},
+      ...target === "codex" ? { applied: true, configPath: getSettingsPath(scope, target), note: "Registered in Codex hooks.json. Review and trust the exact definition in Codex /hooks; project hooks also require a trusted project. Registration alone does not prove execution." } : {}
+    };
   } catch (error) {
     return {
       hook: shortName,
@@ -5518,6 +5654,9 @@ function installForTarget(name, scope, overwrite, target, profile, codewithMode
 }
 function installHook(name, options = {}) {
   const { scope = "global", overwrite = false, target = "claude", profile, codewithMode = "fragment", codewithConfigPath } = options;
+  if (!/^[\w-]+$/.test(name) || profile !== undefined && !/^[\w-]+$/.test(profile)) {
+    return { hook: name, success: false, error: "Hook and profile names must contain only letters, digits, underscores or hyphens.", target };
+  }
   if (target === "all") {
     const shortName = shortHookName(name);
     const meta = resolveHookMeta(shortName);
@@ -5649,7 +5788,8 @@ function removeHook(name, scope = "global", target = "claude") {
   if (target === "all") {
     const claudeRemoved = removeHookForTarget(shortName, scope, "claude");
     const geminiRemoved = removeHookForTarget(shortName, scope, "gemini");
-    return claudeRemoved || geminiRemoved;
+    const codexRemoved = removeHookForTarget(shortName, scope, "codex");
+    return claudeRemoved || geminiRemoved || codexRemoved;
   }
   if (target === "codewith") {
     return false;
@@ -5666,9 +5806,9 @@ function removeHookForTarget(name, scope, target) {
 }
 function readSettingsAt(path) {
   try {
-    if (!existsSync10(path))
+    if (!existsSync11(path))
       return;
-    const raw = readFileSync4(path, "utf-8");
+    const raw = readFileSync5(path, "utf-8");
     return { raw, settings: JSON.parse(raw) };
   } catch {
     return;
@@ -5701,7 +5841,9 @@ function pruneStaleRegistrations(scope = "global") {
       commands.add(finding.command);
       staleCommandsByEvent.set(finding.event, commands);
     }
-    const settings = parsed.settings;
+    const settings = target === "codex" ? readCodexSettings(path) : parsed.settings;
+    if (target === "codex" && readFileSync5(path, "utf8") !== parsed.raw)
+      throw new Error("Codex settings changed before pruning; retry.");
     for (const [eventKey, commands] of staleCommandsByEvent) {
       const entries = settings.hooks?.[eventKey];
       if (!Array.isArray(entries))
@@ -5726,7 +5868,7 @@ function pruneStaleRegistrations(scope = "global") {
     if (settings.hooks && Object.keys(settings.hooks).length === 0)
       delete settings.hooks;
     const backupPath = `${path}.bak`;
-    writeFileSync3(backupPath, parsed.raw);
+    writeFileSync4(backupPath, parsed.raw);
     writeSettings(settings, scope, target);
     results.push({ file: path, removed: stale, backupPath });
   }
@@ -5788,10 +5930,10 @@ function codewithHasHookEntryInText(configText, name) {
 }
 function codewithHasHookEntry(name, scope = "global") {
   const path = getSettingsPath(scope, "codewith");
-  if (!existsSync10(path))
+  if (!existsSync11(path))
     return false;
   try {
-    return codewithHasHookEntryInText(readFileSync4(path, "utf-8"), name);
+    return codewithHasHookEntryInText(readFileSync5(path, "utf-8"), name);
   } catch {
     return false;
   }
@@ -5805,7 +5947,7 @@ function removeStoreDirFailClosed(dir) {
   }
   for (const entry of entries) {
     if (!entry.isDirectory()) {
-      unlinkSync(join10(dir, entry.name));
+      unlinkSync2(join10(dir, entry.name));
     }
   }
   rmdirSync(dir);
@@ -5815,14 +5957,14 @@ function uninstallHook(name, scope = "global", target = "claude") {
   const custom = readCustomManifest(shortName);
   const bundledMeta = custom ? undefined : getHook(shortName);
   const existsInTarget = (t) => getRegisteredHooksForTarget("global", t).includes(shortName) || getRegisteredHooksForTarget("project", t).includes(shortName);
-  const registeredClaudeOrGemini = target === "all" ? existsInTarget("claude") || existsInTarget("gemini") : false;
+  const registeredClaudeOrGemini = target === "all" ? JSON_SETTINGS_TARGETS.some(existsInTarget) : false;
   const registeredGlobal = registeredClaudeOrGemini || getRegisteredHooksForTarget("global", target === "all" ? "claude" : target).includes(shortName);
   const registeredProject = registeredClaudeOrGemini || getRegisteredHooksForTarget("project", target === "all" ? "claude" : target).includes(shortName);
   const codewithOnly = (target === "codewith" || target === "all") && codewithHasHookEntry(shortName, scope);
   if (!custom && !bundledMeta && !registeredGlobal && !registeredProject && !codewithOnly) {
     return { name: shortName, removed: false, source: null, settingsScopes: [], storeDirRemoved: false, pinRemoved: false, dbRecordRemoved: false, registrationsRemaining: [], error: `Hook '${shortName}' not found` };
   }
-  const writableTargets = target === "all" ? ["claude", "gemini"] : target === "codewith" ? [] : [target];
+  const writableTargets = target === "all" ? JSON_SETTINGS_TARGETS : target === "codewith" ? [] : [target];
   const scopes = [];
   for (const s of ["global", "project"]) {
     for (const t of writableTargets) {
@@ -5836,11 +5978,11 @@ function uninstallHook(name, scope = "global", target = "claude") {
   const registrationsRemaining = [];
   if (target === "codewith" || target === "all") {
     const codewithPath = getSettingsPath(scope, "codewith");
-    if (existsSync10(codewithPath)) {
-      const before = readFileSync4(codewithPath, "utf-8");
+    if (existsSync11(codewithPath)) {
+      const before = readFileSync5(codewithPath, "utf-8");
       const after = removeCodewithHookEntry(before, shortName);
       if (after.removed) {
-        writeFileSync3(codewithPath, after.text, "utf-8");
+        writeFileSync4(codewithPath, after.text, "utf-8");
       }
       if (codewithHasHookEntryInText(after.removed ? after.text : before, shortName)) {
         registrationsRemaining.push("codewith");
@@ -5883,8 +6025,9 @@ var init_installer = __esm(() => {
   init_manifest();
   init_registration();
   init_store();
-  __dirname2 = dirname3(fileURLToPath2(import.meta.url));
-  HOOKS_DIR = existsSync10(join10(__dirname2, "..", "..", "hooks", "hook-gitguard")) ? join10(__dirname2, "..", "..", "hooks") : join10(__dirname2, "..", "hooks");
+  init_codex_settings();
+  __dirname2 = dirname4(fileURLToPath2(import.meta.url));
+  HOOKS_DIR = existsSync11(join10(__dirname2, "..", "..", "hooks", "hook-gitguard")) ? join10(__dirname2, "..", "..", "hooks") : join10(__dirname2, "..", "hooks");
   EVENT_MAP = {
     claude: {
       PreToolUse: "PreToolUse",
@@ -5893,7 +6036,7 @@ var init_installer = __esm(() => {
       Notification: "Notification",
       SessionStart: "SessionStart",
       SessionEnd: "SessionEnd",
-      UserPromptSubmit: null,
+      UserPromptSubmit: "UserPromptSubmit",
       SubagentStart: null
     },
     gemini: {
@@ -5915,10 +6058,20 @@ var init_installer = __esm(() => {
       SessionEnd: null,
       UserPromptSubmit: "UserPromptSubmit",
       SubagentStart: "SubagentStart"
+    },
+    codex: {
+      PreToolUse: "PreToolUse",
+      PostToolUse: "PostToolUse",
+      Stop: "Stop",
+      Notification: null,
+      SessionStart: "SessionStart",
+      SessionEnd: "SessionEnd",
+      UserPromptSubmit: "UserPromptSubmit",
+      SubagentStart: "SubagentStart"
     }
   };
   getInstalledHooks = getRegisteredHooks;
-  JSON_SETTINGS_TARGETS = ["claude", "gemini"];
+  JSON_SETTINGS_TARGETS = ["claude", "gemini", "codex"];
 });
 
 // src/lib/redact.ts
@@ -5987,21 +6140,21 @@ var init_redact = __esm(() => {
 });
 
 // src/lib/profiles.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync5, readFileSync as readFileSync5, writeFileSync as writeFileSync4, readdirSync as readdirSync4, rmSync, cpSync as cpSync2 } from "fs";
+import { existsSync as existsSync12, mkdirSync as mkdirSync6, readFileSync as readFileSync6, writeFileSync as writeFileSync5, readdirSync as readdirSync4, rmSync, cpSync as cpSync2 } from "fs";
 import { join as join11 } from "path";
 function getProfilesDir() {
   const newDir = join11(getEffectiveDataRoot(), "profiles");
   const oldDir = join11(getHomeDir(), ".hooks", "profiles");
-  if (!existsSync11(newDir) && existsSync11(oldDir)) {
-    mkdirSync5(newDir, { recursive: true });
+  if (!existsSync12(newDir) && existsSync12(oldDir)) {
+    mkdirSync6(newDir, { recursive: true });
     cpSync2(oldDir, newDir, { recursive: true });
   }
   return newDir;
 }
 function ensureProfilesDir() {
   const dir = getProfilesDir();
-  if (!existsSync11(dir)) {
-    mkdirSync5(dir, { recursive: true });
+  if (!existsSync12(dir)) {
+    mkdirSync6(dir, { recursive: true });
   }
 }
 function profilePath(id) {
@@ -6024,30 +6177,30 @@ function createProfile(input) {
   if (input.name) {
     profile.name = input.name;
   }
-  writeFileSync4(profilePath(id), JSON.stringify(profile, null, 2) + `
+  writeFileSync5(profilePath(id), JSON.stringify(profile, null, 2) + `
 `);
   return profile;
 }
 function getProfile(id) {
   const path = profilePath(id);
   try {
-    if (!existsSync11(path))
+    if (!existsSync12(path))
       return null;
-    return JSON.parse(readFileSync5(path, "utf-8"));
+    return JSON.parse(readFileSync6(path, "utf-8"));
   } catch {
     return null;
   }
 }
 function listProfiles() {
   const dir = getProfilesDir();
-  if (!existsSync11(dir))
+  if (!existsSync12(dir))
     return [];
   try {
     const files = readdirSync4(dir).filter((f) => f.endsWith(".json"));
     const profiles = [];
     for (const file of files) {
       try {
-        const content = readFileSync5(join11(dir, file), "utf-8");
+        const content = readFileSync6(join11(dir, file), "utf-8");
         profiles.push(JSON.parse(content));
       } catch {}
     }
@@ -6061,7 +6214,7 @@ function touchProfile(id) {
   if (!profile)
     return;
   profile.last_seen_at = new Date().toISOString();
-  writeFileSync4(profilePath(id), JSON.stringify(profile, null, 2) + `
+  writeFileSync5(profilePath(id), JSON.stringify(profile, null, 2) + `
 `);
 }
 function exportProfiles() {
@@ -6077,11 +6230,11 @@ function importProfiles(profiles) {
       continue;
     }
     const path = profilePath(profile.agent_id);
-    if (existsSync11(path)) {
+    if (existsSync12(path)) {
       skipped++;
       continue;
     }
-    writeFileSync4(path, JSON.stringify(profile, null, 2) + `
+    writeFileSync5(path, JSON.stringify(profile, null, 2) + `
 `);
     imported++;
   }
@@ -6091,10 +6244,10 @@ var init_profiles = __esm(() => {
   init_app_home();
 });
 
-// ../contracts/dist/client/transport.js
+// ../../node_modules/.bun/@hasna+contracts@1.0.2+e0db24ae03127387/node_modules/@hasna/contracts/dist/client/transport.js
 import { isIP as isIP2 } from "net";
 import { spawnSync } from "child_process";
-import { closeSync, fstatSync, openSync, readFileSync as readFileSync6 } from "fs";
+import { closeSync as closeSync2, fstatSync, openSync as openSync2, readFileSync as readFileSync7 } from "fs";
 import { O_NOFOLLOW, O_NONBLOCK, O_RDONLY } from "constants";
 import { createRequire as createRequire2 } from "module";
 import { hostname as osHostname } from "os";
@@ -6198,7 +6351,7 @@ function readAppConfigFile(path) {
   };
   let fd = -1;
   try {
-    fd = openSync(path, O_RDONLY | O_NOFOLLOW | O_NONBLOCK);
+    fd = openSync2(path, O_RDONLY | O_NOFOLLOW | O_NONBLOCK);
   } catch (error) {
     const code = error.code;
     if (code === "ENOENT" || code === "ENOTDIR")
@@ -6219,7 +6372,7 @@ function readAppConfigFile(path) {
       unsafe("the file is not owned by the current user");
     if (before.size > MAX_CREDENTIAL_FILE_BYTES2)
       unsafe("the file exceeds the size limit");
-    const bytes = readFileSync6(fd);
+    const bytes = readFileSync7(fd);
     const after = fstatSync(fd);
     if (!configFileReadsCoherent(before, after)) {
       unsafe("the file changed while being read");
@@ -6227,7 +6380,7 @@ function readAppConfigFile(path) {
     return parseEnvFile(bytes.toString("utf8"));
   } finally {
     if (fd !== -1)
-      closeSync(fd);
+      closeSync2(fd);
   }
 }
 function readCredentialFile(path, apiKeyKeys) {
@@ -6771,7 +6924,7 @@ function credentialDiskSourcesForMessage(name, env) {
   const paths = credentialDiskSources(name, env);
   return paths.length > 0 ? paths.join(" or ") : "<no HOME or HASNA_HOME set in this environment, so no credential file was consulted>";
 }
-var CREDENTIAL_PROFILE_ENV_KEY = "HASNA_PROFILE", CredentialResolutionError, CredentialFileUnsafeError, HASNA_HOME_ENV_KEY = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY = "HASNA_STATION", HASNA_HOME_DIR = ".hasna", CONFIG_SUBDIR = "config", CREDENTIALS_FILE = "credentials", KEYCHAIN_SECURITY_BIN = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS = 44, KEYCHAIN_SPAWN_TIMEOUT_MS = 1e4, MAX_CREDENTIAL_FILE_BYTES2, SAFE_APP_SLUG, SAFE_PROFILE, ILLEGAL_IN_HEADER_VALUE, VAULT_POINTER_SHAPE, CREDENTIAL_SHAPED_KEY, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, AMBIENT_ENVIRONMENT2, SECRETS_PACKAGE_SPECIFIER2, requireSecretsSdk2, DEFAULT_FLEET_GATEWAY_ORIGIN = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN, DNS_LABEL_PATTERN, ClientTransportConfigurationError, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2;
+var CREDENTIAL_PROFILE_ENV_KEY = "HASNA_PROFILE", CredentialResolutionError, CredentialFileUnsafeError, HASNA_HOME_ENV_KEY = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY = "HASNA_STATION", HASNA_HOME_DIR = ".hasna", CONFIG_SUBDIR = "config", CREDENTIALS_FILE = "credentials", KEYCHAIN_SECURITY_BIN = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS = 44, KEYCHAIN_SPAWN_TIMEOUT_MS = 1e4, MAX_CREDENTIAL_FILE_BYTES2, SAFE_APP_SLUG, SAFE_PROFILE, ILLEGAL_IN_HEADER_VALUE, VAULT_POINTER_SHAPE, CREDENTIAL_SHAPED_KEY, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, AMBIENT_ENVIRONMENT2, SECRETS_PACKAGE_SPECIFIER, requireSecretsSdk2, DEFAULT_FLEET_GATEWAY_ORIGIN = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN, DNS_LABEL_PATTERN, ClientTransportConfigurationError, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2;
 var init_transport = __esm(() => {
   CredentialResolutionError = class CredentialResolutionError extends Error {
     appName;
@@ -6800,7 +6953,7 @@ var init_transport = __esm(() => {
   INSPECT_CUSTOM2 = Symbol.for("nodejs.util.inspect.custom");
   CREDENTIAL_SEAL2 = Symbol.for("hasna:contracts:sealedCredential");
   AMBIENT_ENVIRONMENT2 = Symbol.for("hasna:contracts:ambientClientEnvironment");
-  SECRETS_PACKAGE_SPECIFIER2 = "@hasna/" + "secrets";
+  SECRETS_PACKAGE_SPECIFIER = "@hasna/" + "secrets";
   requireSecretsSdk2 = createRequire2(import.meta.url);
   ASCII_CONTROL_PATTERN = /[\u0000-\u001f\u007f]/;
   DNS_LABEL_PATTERN = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
@@ -6844,6 +6997,15 @@ function hasHooksEnvAuthorityIntent(env = process.env) {
 function selectsHooksLocalStore(env = process.env) {
   return !hasHooksEnvAuthorityIntent(env) && isHooksLocalOptIn(env);
 }
+function hooksFailClosedLine(detail) {
+  return `REMOTE_API_CONFIG_MISSING: hooks: no registry credential resolved from ${HOOKS_CREDENTIAL_TIERS} ` + `(with HASNA_HOOKS_API_URL or the fleet gateway default), and local mode is not enabled ` + `(${HOOKS_LOCAL_OPT_IN_HINT}) \u2014 refusing to silently fall back to local storage.` + (detail ? ` ${detail}` : "");
+}
+function hooksHostedRouteLocalStoreRefusal(authority) {
+  return "REMOTE_COMMAND_UNSUPPORTED: this command is local-only \u2014 it reads the on-box SQLite store " + `(hooks.db), which the hosted hooks registry authority (${authority}) does not serve; local SQLite ` + `is opt-in only (${HOOKS_LOCAL_OPT_IN_HINT}) and is disabled by default \u2014 refusing to open a local ` + "store on the hosted route.";
+}
+function hooksEventSinkRefusal() {
+  return "REMOTE_COMMAND_UNSUPPORTED: hook event not recorded \u2014 the hook event log is local-only (on-box " + "SQLite hooks.db) and the hosted hooks registry has no event route; local SQLite is opt-in only " + `(${HOOKS_LOCAL_OPT_IN_HINT}) and is disabled by default. Nothing was written.`;
+}
 function hooksResolverEnv(env) {
   const blanks = hooksAuthorityEnvKeys().filter((key) => (key in env) && (env[key] ?? "").trim() === "");
   if (blanks.length === 0)
@@ -6868,7 +7030,7 @@ function hooksResolverInputs(env, credentials = {}) {
   }
   return { env: normalised, credentials: { ...credentials, keychain } };
 }
-var HOOKS_LOCAL_OPT_IN_ENV_KEYS, CONTRACTS_AMBIENT_ENVIRONMENT;
+var HOOKS_LOCAL_OPT_IN_ENV_KEYS, HOOKS_CREDENTIAL_TIERS = "the Keychain item hasna.credentials.hooks.api-key, ~/.hasna/hooks/config/credentials, or HASNA_HOOKS_API_KEY", HOOKS_LOCAL_OPT_IN_HINT = "HASNA_HOOKS_LOCAL=1 (alias HOOKS_LOCAL=1)", CONTRACTS_AMBIENT_ENVIRONMENT;
 var init_local_opt_in = __esm(() => {
   init_transport();
   HOOKS_LOCAL_OPT_IN_ENV_KEYS = ["HASNA_HOOKS_LOCAL", "HOOKS_LOCAL"];
@@ -6971,14 +7133,35 @@ var init_transport2 = __esm(() => {
 var exports_db_writer = {};
 __export(exports_db_writer, {
   writeHookEvent: () => writeHookEvent,
+  resolveHookEventSink: () => resolveHookEventSink,
   resolveEventType: () => resolveEventType,
   recordHookRun: () => recordHookRun,
-  normalizeEventType: () => normalizeEventType
+  normalizeEventType: () => normalizeEventType,
+  __resetHookEventSinkNotice: () => __resetHookEventSinkNotice
 });
+function resolveHookEventSink(env = process.env) {
+  if (isLocalStoreRefused())
+    return { kind: "refused", reason: localStoreRefusalMessage() ?? hooksEventSinkRefusal() };
+  if (selectsHooksLocalStore(env))
+    return { kind: "local" };
+  return { kind: "refused", reason: hooksEventSinkRefusal() };
+}
+function __resetHookEventSinkNotice() {
+  sinkRefusalPrinted = false;
+}
 function nanoid2() {
   return crypto.randomUUID().replace(/-/g, "").slice(0, 21);
 }
 function writeHookEvent(event) {
+  const sink = resolveHookEventSink();
+  if (sink.kind !== "local") {
+    if (!sinkRefusalPrinted) {
+      sinkRefusalPrinted = true;
+      process.stderr.write(`[hooks db-writer] ${sink.reason}
+`);
+    }
+    return;
+  }
   try {
     const db = getDb();
     const id = nanoid2();
@@ -7047,9 +7230,10 @@ function recordHookRun(record) {
     metadata: JSON.stringify(metadata)
   });
 }
-var ALLOWED_EVENT_TYPES;
+var sinkRefusalPrinted = false, ALLOWED_EVENT_TYPES;
 var init_db_writer = __esm(() => {
   init_db();
+  init_local_opt_in();
   init_redact();
   ALLOWED_EVENT_TYPES = new Set([
     "PreToolUse",
@@ -7064,8 +7248,9 @@ var init_db_writer = __esm(() => {
 });
 
 // src/lib/hook-env.ts
-import { dirname as dirname4, isAbsolute as isAbsolute3 } from "path";
-import { existsSync as existsSync12, statSync } from "fs";
+import { dirname as dirname5, isAbsolute as isAbsolute3 } from "path";
+import { existsSync as existsSync13, realpathSync as realpathSync2, statSync } from "fs";
+import { tmpdir } from "os";
 function isDeniedEnvName(name) {
   const upper = name.toUpperCase();
   if (DENY_PREFIXES.some((prefix) => upper.startsWith(prefix)))
@@ -7091,6 +7276,19 @@ function isUnsafePathEntry(entry, home) {
     return true;
   if (entry === "/var/tmp" || entry.startsWith("/var/tmp/"))
     return true;
+  const canonical = (path) => {
+    try {
+      return realpathSync2(path);
+    } catch {
+      return path;
+    }
+  };
+  const resolved = canonical(entry);
+  for (const root of [home, tmpdir(), "/tmp", "/var/tmp"].filter((value) => Boolean(value))) {
+    const blocked = canonical(root);
+    if (resolved === blocked || resolved.startsWith(blocked + "/"))
+      return true;
+  }
   try {
     if ((statSync(entry).mode & 2) !== 0)
       return true;
@@ -7099,9 +7297,9 @@ function isUnsafePathEntry(entry, home) {
 }
 function sanitizeHookPath(pathValue, home) {
   const baseline = PATH_BASELINE.slice();
-  if (process.platform === "darwin" && existsSync12("/opt/homebrew/bin"))
+  if (process.platform === "darwin" && existsSync13("/opt/homebrew/bin"))
     baseline.push("/opt/homebrew/bin");
-  const bunDir = dirname4(process.execPath);
+  const bunDir = dirname5(process.execPath);
   const seen = new Set;
   const out = [];
   for (const dir of baseline) {
@@ -7210,6 +7408,7 @@ var init_hook_env = __esm(() => {
   DENY_CONTAINS = ["DATABASE_URL"];
   PATH_BASELINE = ["/usr/bin", "/bin", "/usr/local/bin", "/sbin", "/usr/sbin"];
   CONFIG_PROJECTIONS = [
+    ["HASNA_HOOKS_LOCAL", "HOOKS_LOCAL"],
     ["HASNA_HOOKS_DATA_DIR", "HOOKS_DATA_DIR"],
     ["HASNA_HOOKS_DB_PATH", "HOOKS_DB_PATH"],
     ["HASNA_HOOKS_LOCK_PATH", "HOOKS_LOCK_PATH"],
@@ -7224,8 +7423,8 @@ __export(exports_run, {
   HookTimeoutError: () => HookTimeoutError
 });
 import { randomBytes as randomBytes2 } from "crypto";
-import { rmSync as rmSync2, writeFileSync as writeFileSync5 } from "fs";
-import { basename as basename2, dirname as dirname5, isAbsolute as isAbsolute4, join as join13 } from "path";
+import { rmSync as rmSync2, writeFileSync as writeFileSync6 } from "fs";
+import { basename as basename2, dirname as dirname6, isAbsolute as isAbsolute4, join as join13 } from "path";
 function extensionOf(scriptPath) {
   const base = basename2(scriptPath);
   const dot = base.lastIndexOf(".");
@@ -7294,7 +7493,7 @@ async function readPipeWithDeadline(stream, deadlineMs) {
   return chunks.join("");
 }
 async function executeVerifiedScript(options) {
-  const scriptDir = dirname5(options.scriptPath);
+  const scriptDir = dirname6(options.scriptPath);
   const interpreter = interpreterFor(options.name, options.scriptPath, options.content);
   const tempPath = join13(scriptDir, `.hooks-verified-${randomBytes2(12).toString("hex")}.${interpreter.tempExt}`);
   let proc = null;
@@ -7304,7 +7503,7 @@ async function executeVerifiedScript(options) {
     killGroup(proc, { leaderAlive: proc !== null && proc.exitCode === null });
   }, options.timeout) : null;
   try {
-    writeFileSync5(tempPath, options.content, { flag: "wx", mode: 384 });
+    writeFileSync6(tempPath, options.content, { flag: "wx", mode: 384 });
     proc = Bun.spawn([...interpreter.command, isAbsolute4(tempPath) ? tempPath : `./${tempPath}`, ...options.args ?? []], {
       stdin: new Response(options.stdin),
       stdout: "pipe",
@@ -7387,15 +7586,15 @@ __export(exports_custom_install, {
   installCustomSource: () => installCustomSource,
   ensureCustomDir: () => ensureCustomDir
 });
-import { existsSync as existsSync13, mkdirSync as mkdirSync6, mkdtempSync, readFileSync as readFileSync7, rmSync as rmSync3 } from "fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync7, mkdtempSync, readFileSync as readFileSync8, rmSync as rmSync3 } from "fs";
 import { join as join14 } from "path";
-import { tmpdir } from "os";
+import { tmpdir as tmpdir2 } from "os";
 function manifestAt(dir) {
   const path = join14(dir, "manifest.json");
-  if (!existsSync13(path))
+  if (!existsSync14(path))
     return;
   try {
-    return parseManifest(readFileSync7(path, "utf-8"));
+    return parseManifest(readFileSync8(path, "utf-8"));
   } catch {
     return;
   }
@@ -7414,7 +7613,7 @@ function writeFromManifest(manifest, srcDir, source, kind) {
   return { name, version: manifest.version, kind, source, dir, scriptPath };
 }
 async function cloneToTemp(gitUrl) {
-  const tmp = mkdtempSync(join14(tmpdir(), "hooks-install-"));
+  const tmp = mkdtempSync(join14(tmpdir2(), "hooks-install-"));
   const proc = Bun.spawn(["git", "clone", "--depth", "1", "--quiet", gitUrl, join14(tmp, "repo")], {
     stdout: "pipe",
     stderr: "pipe"
@@ -7438,7 +7637,7 @@ function isCustomSource(value) {
     return true;
   if (value.startsWith("http://") || value.startsWith("https://"))
     return true;
-  return existsSync13(value);
+  return existsSync14(value);
 }
 async function installCustomSource(source) {
   if (isGitUrl(source)) {
@@ -7452,11 +7651,11 @@ async function installCustomSource(source) {
   if (source.startsWith("http://") || source.startsWith("https://")) {
     return installManifestUrl(source);
   }
-  if (!existsSync13(source)) {
+  if (!existsSync14(source)) {
     throw new Error(`No such local path: ${source}`);
   }
   if (source.endsWith("manifest.json")) {
-    const manifest = parseManifest(readFileSync7(source, "utf-8"));
+    const manifest = parseManifest(readFileSync8(source, "utf-8"));
     return writeFromManifest(manifest, source.substring(0, source.lastIndexOf("/")), source, "local");
   }
   return copyManifestDir(source, source, "local");
@@ -7487,7 +7686,7 @@ async function installManifestUrl(url) {
 }
 function ensureCustomDir() {
   const dir = getCustomHooksDir();
-  mkdirSync6(dir, { recursive: true });
+  mkdirSync7(dir, { recursive: true });
   return dir;
 }
 var init_custom_install = __esm(() => {
@@ -7501,16 +7700,17 @@ __export(exports_sync, {
   syncHooks: () => syncHooks,
   stageSyncArtifacts: () => stageSyncArtifacts,
   planSync: () => planSync,
+  installPinnedFromBundled: () => installPinnedFromBundled,
   fetchPinnedHook: () => fetchPinnedHook,
   commitSyncArtifacts: () => commitSyncArtifacts
 });
 import { createHash as createHash2 } from "crypto";
-import { readFileSync as readFileSync8 } from "fs";
+import { readFileSync as readFileSync9 } from "fs";
 function sha256OfText(text) {
   return createHash2("sha256").update(text).digest("hex");
 }
 function sha256OfPath(path) {
-  return createHash2("sha256").update(readFileSync8(path)).digest("hex");
+  return createHash2("sha256").update(readFileSync9(path)).digest("hex");
 }
 function collectBundledCatalog() {
   const out = [];
@@ -7664,7 +7864,7 @@ async function stageSyncArtifacts(apiUrl, apiKey, names, remoteLock) {
   return staged;
 }
 async function commitSyncArtifacts(staged, apiUrl, remoteLock) {
-  const db = getDb();
+  const db = isLocalStoreRefused() ? null : getDb();
   for (const item of staged) {
     const entry = remoteLock.hooks[item.name];
     if (!entry)
@@ -7684,6 +7884,8 @@ async function commitSyncArtifacts(staged, apiUrl, remoteLock) {
     lock.hooks[item.name] = { version: entry.version, sha256: entry.sha256, source: entry.source ?? "remote" };
   }
   writeLock(lock);
+  if (!db)
+    return;
   db.exec("BEGIN");
   try {
     for (const item of staged) {
@@ -7746,23 +7948,56 @@ async function fetchPinnedHook(name, version, apiUrl, apiKey) {
   if (actual !== expectedSha) {
     throw new Error(`sha256 mismatch after write for '${name}@${version}': expected ${expectedSha}, on disk ${actual}`);
   }
-  const db = getDb();
   setPinnedHook(name, { version, sha256: expectedSha, source: entry.source ?? "remote", pinned: true });
-  upsertHookRecord(db, {
+  if (!isLocalStoreRefused()) {
+    upsertHookRecord(getDb(), {
+      name,
+      version,
+      sha256: expectedSha,
+      source_type: entry.source ?? "remote",
+      source_ref: apiUrl,
+      last_verified_at: new Date().toISOString()
+    });
+  }
+  return {
     name,
     version,
     sha256: expectedSha,
-    source_type: entry.source ?? "remote",
+    source: entry.source ?? "remote",
     source_ref: apiUrl,
+    artifact,
+    scriptPath
+  };
+}
+async function installPinnedFromBundled(name, version) {
+  const bundled = collectBundledCatalog().find((entry) => entry.name === name);
+  if (!bundled) {
+    throw new Error(`Hook '${name}' is not in the bundled registry`);
+  }
+  if (bundled.version !== version) {
+    throw new Error(`Hook '${name}' version ${version} is not in the bundled registry (available: ${bundled.version})`);
+  }
+  const scriptPath = resolveScriptPath(name);
+  if (!scriptPath) {
+    throw new Error(`Hook '${name}' has no script in the bundled registry`);
+  }
+  const db = getDb();
+  setPinnedHook(name, { version, sha256: bundled.sha256, source: "bundled", pinned: true });
+  upsertHookRecord(db, {
+    name,
+    version,
+    sha256: bundled.sha256,
+    source_type: "bundled",
+    source_ref: "bundled registry",
     last_verified_at: new Date().toISOString()
   });
   return {
     name,
     version,
-    sha256: expectedSha,
-    source: entry.source ?? "remote",
-    source_ref: apiUrl,
-    artifact,
+    sha256: bundled.sha256,
+    source: "bundled",
+    source_ref: "bundled registry",
+    artifact: null,
     scriptPath
   };
 }
@@ -8425,13 +8660,13 @@ __export(exports_serve, {
   SERVE_HOST: () => SERVE_HOST,
   DEFAULT_SERVE_PORT: () => DEFAULT_SERVE_PORT
 });
-import { readFileSync as readFileSync9 } from "fs";
-import { dirname as dirname6, join as join15 } from "path";
+import { readFileSync as readFileSync10 } from "fs";
+import { dirname as dirname7, join as join15 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 function packageVersion() {
   try {
-    const pkgPath = join15(dirname6(fileURLToPath3(import.meta.url)), "..", "package.json");
-    return JSON.parse(readFileSync9(pkgPath, "utf-8")).version || "0.0.0";
+    const pkgPath = join15(dirname7(fileURLToPath3(import.meta.url)), "..", "package.json");
+    return JSON.parse(readFileSync10(pkgPath, "utf-8")).version || "0.0.0";
   } catch {
     return "0.0.0";
   }
@@ -8595,7 +8830,7 @@ function startServeServer(options) {
       return handleServeRequest(req, resolveHooksServePublishKey());
     }
   });
-  console.error(`hooks registry listening on http://${host}:${port} (publish requires an API key)`);
+  console.error(`hooks registry listening on http://${host}:${server.port} (publish requires an API key)`);
   return server;
 }
 var DEFAULT_SERVE_PORT = 39428, SERVE_HOST = "127.0.0.1", SERVE_SERVICE_NAME = "hooks-registry";
@@ -8691,6 +8926,32 @@ async function provisionCloudflareResources(options) {
 }
 var CF_API = "https://api.cloudflare.com/client/v4";
 
+// src/mcp/authority.ts
+var exports_authority = {};
+__export(exports_authority, {
+  resolveHooksMcpAuthority: () => resolveHooksMcpAuthority,
+  decideHooksMcpAuthority: () => decideHooksMcpAuthority
+});
+function resolveHooksMcpAuthority(env = process.env) {
+  const transport = resolveHooksTransport(env);
+  if (transport.mode === "local" || !transport.authority) {
+    return { route: "local", source: "local-opt-in" };
+  }
+  return { route: "hosted", v1BaseUrl: transport.authority.v1BaseUrl, source: transport.source };
+}
+function decideHooksMcpAuthority(env = process.env) {
+  const authority = resolveHooksMcpAuthority(env);
+  if (authority.route === "hosted") {
+    refuseLocalStore(hooksHostedRouteLocalStoreRefusal(authority.v1BaseUrl));
+  }
+  return authority;
+}
+var init_authority = __esm(() => {
+  init_db();
+  init_local_opt_in();
+  init_transport2();
+});
+
 // src/mcp/server.ts
 var exports_server = {};
 __export(exports_server, {
@@ -8706,17 +8967,17 @@ import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z as z2 } from "zod";
 import { createServer } from "http";
-import { existsSync as existsSync14, readFileSync as readFileSync10 } from "fs";
-import { join as join16, dirname as dirname7 } from "path";
+import { existsSync as existsSync15, readFileSync as readFileSync11 } from "fs";
+import { join as join16, dirname as dirname8 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 async function runVerifiedHook(name, stdin, timeoutMs) {
   const { resolveHook: resolveHook2, resolveScriptPath: resolveScriptPath2 } = await Promise.resolve().then(() => (init_resolve(), exports_resolve));
   const resolved = resolveHook2(name);
   const hookScript = resolveScriptPath2(name);
-  if (!resolved || !hookScript || !existsSync14(hookScript)) {
+  if (!resolved || !hookScript || !existsSync15(hookScript)) {
     throw new Error(`Hook '${name}' not found`);
   }
-  const content = readFileSync10(hookScript);
+  const content = readFileSync11(hookScript);
   const sha = sha256Of(content);
   const check = checkScriptHash(name, sha);
   if (!check.ok) {
@@ -8921,7 +9182,7 @@ function createHooksServer() {
     const settingsPath = getSettingsPath(scope);
     const issues = [];
     const healthy = [];
-    const settingsExist = existsSync14(settingsPath);
+    const settingsExist = existsSync15(settingsPath);
     if (!settingsExist) {
       issues.push({ hook: "(settings)", issue: `${settingsPath} not found`, severity: "warning" });
     }
@@ -8931,7 +9192,7 @@ function createHooksServer() {
       const meta = custom ? resolveHookMeta(name) : getHook(name);
       let hookHealthy = true;
       if (custom) {
-        if (!existsSync14(custom.scriptPath)) {
+        if (!existsSync15(custom.scriptPath)) {
           issues.push({ hook: name, issue: `Custom hook script missing: ${custom.scriptPath}`, severity: "error" });
           hookHealthy = false;
         }
@@ -8941,14 +9202,14 @@ function createHooksServer() {
           continue;
         }
         const hookDir = getHookPath(name);
-        if (!existsSync14(join16(hookDir, "src", "hook.ts"))) {
+        if (!existsSync15(join16(hookDir, "src", "hook.ts"))) {
           issues.push({ hook: name, issue: "Missing src/hook.ts in package", severity: "error" });
           hookHealthy = false;
         }
       }
       if (meta && settingsExist) {
         try {
-          const settings = JSON.parse(readFileSync10(settingsPath, "utf-8"));
+          const settings = JSON.parse(readFileSync11(settingsPath, "utf-8"));
           if (!hookRegisteredInSettings(settings, name, meta.event, meta.matcher)) {
             const eventName = meta.event.split(":")[0];
             issues.push({ hook: name, issue: `Not registered under correct event (${eventName})`, severity: "error" });
@@ -8987,8 +9248,8 @@ function createHooksServer() {
       const hookPath = getHookPath(name);
       const readmePath = join16(hookPath, "README.md");
       let readme = "";
-      if (existsSync14(readmePath)) {
-        readme = readFileSync10(readmePath, "utf-8");
+      if (existsSync15(readmePath)) {
+        readme = readFileSync11(readmePath, "utf-8");
       }
       if (verbose) {
         return { content: [{ type: "text", text: JSON.stringify({ ...meta, readme }) }] };
@@ -9171,7 +9432,7 @@ function createHooksServer() {
     const ctx = {
       scope,
       settings_path: settingsPath,
-      settings_exists: existsSync14(settingsPath),
+      settings_exists: existsSync15(settingsPath),
       registered_hooks: hooks,
       hook_count: hooks.length,
       healthy,
@@ -9317,8 +9578,8 @@ function createHooksServer() {
     const settingsPath = getSettingsPath(scope);
     let settings = {};
     try {
-      if (existsSync14(settingsPath))
-        settings = JSON.parse(readFileSync10(settingsPath, "utf-8"));
+      if (existsSync15(settingsPath))
+        settings = JSON.parse(readFileSync11(settingsPath, "utf-8"));
     } catch {}
     if (!settings.hooks)
       settings.hooks = {};
@@ -9326,10 +9587,10 @@ function createHooksServer() {
     if (!disabled.includes(name))
       disabled.push(name);
     settings.hooks.__disabled = disabled;
-    const { writeFileSync: writeFileSync6, mkdirSync: mkdirSync7 } = await import("fs");
-    const { dirname: dirname8 } = await import("path");
-    mkdirSync7(dirname8(settingsPath), { recursive: true });
-    writeFileSync6(settingsPath, JSON.stringify(settings, null, 2) + `
+    const { writeFileSync: writeFileSync7, mkdirSync: mkdirSync8 } = await import("fs");
+    const { dirname: dirname9 } = await import("path");
+    mkdirSync8(dirname9(settingsPath), { recursive: true });
+    writeFileSync7(settingsPath, JSON.stringify(settings, null, 2) + `
 `);
     return { content: [{ type: "text", text: JSON.stringify({ hook: name, disabled: true, scope }) }] };
   });
@@ -9340,15 +9601,15 @@ function createHooksServer() {
     const settingsPath = getSettingsPath(scope);
     let settings = {};
     try {
-      if (existsSync14(settingsPath))
-        settings = JSON.parse(readFileSync10(settingsPath, "utf-8"));
+      if (existsSync15(settingsPath))
+        settings = JSON.parse(readFileSync11(settingsPath, "utf-8"));
     } catch {}
     if (settings.hooks?.__disabled) {
       settings.hooks.__disabled = settings.hooks.__disabled.filter((n) => n !== name);
       if (settings.hooks.__disabled.length === 0)
         delete settings.hooks.__disabled;
-      const { writeFileSync: writeFileSync6 } = await import("fs");
-      writeFileSync6(settingsPath, JSON.stringify(settings, null, 2) + `
+      const { writeFileSync: writeFileSync7 } = await import("fs");
+      writeFileSync7(settingsPath, JSON.stringify(settings, null, 2) + `
 `);
     }
     return { content: [{ type: "text", text: JSON.stringify({ hook: name, disabled: false, scope }) }] };
@@ -9632,6 +9893,7 @@ async function startSSEServer(options = {}) {
   if (!loopback && !authToken) {
     throw new Error(`Refusing to serve MCP SSE on non-loopback host '${host}' without an auth token. Set HASNA_HOOKS_MCP_TOKEN (or HOOKS_MCP_TOKEN) to authorize a non-loopback bind.`);
   }
+  decideHooksMcpAuthority();
   const server = createHooksServer();
   const transports = new Map;
   function authorized2(headers) {
@@ -9681,6 +9943,13 @@ async function startSSEServer(options = {}) {
   });
 }
 async function startStdioServer() {
+  try {
+    decideHooksMcpAuthority();
+  } catch (err) {
+    process.stderr.write(`${err instanceof Error ? err.message : String(err)}
+`);
+    process.exit(1);
+  }
   try {
     const server = createHooksServer();
     const transport = new StdioServerTransport;
@@ -9701,14 +9970,15 @@ var init_server = __esm(() => {
   init_registration();
   init_store();
   init_redact();
+  init_authority();
   init_storage();
-  __dirname3 = dirname7(fileURLToPath4(import.meta.url));
+  __dirname3 = dirname8(fileURLToPath4(import.meta.url));
   pkg = { name: "@hasna/hooks", version: "0.0.0" };
   try {
     for (const rel of ["../../package.json", "../package.json", "../../../package.json"]) {
       const p = join16(__dirname3, rel);
-      if (existsSync14(p)) {
-        pkg = JSON.parse(readFileSync10(p, "utf-8"));
+      if (existsSync15(p)) {
+        pkg = JSON.parse(readFileSync11(p, "utf-8"));
         break;
       }
     }
@@ -10892,11 +11162,11 @@ function setPath(input, path, replacement) {
   if (last && last in cursor)
     cursor[last] = replacement;
 }
+var MAX_PACKAGE_BYTES = 1024 * 1024;
 var MAX_CREDENTIAL_FILE_BYTES = 64 * 1024;
 var INSPECT_CUSTOM = Symbol.for("nodejs.util.inspect.custom");
 var CREDENTIAL_SEAL = Symbol.for("hasna:contracts:sealedCredential");
 var AMBIENT_ENVIRONMENT = Symbol.for("hasna:contracts:ambientClientEnvironment");
-var SECRETS_PACKAGE_SPECIFIER = "@hasna/" + "secrets";
 var requireSecretsSdk = createRequire(import.meta.url);
 var IDEMPOTENT_METHODS = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
 var AUTHORITY_OVERRIDE_HEADERS = new Set([
@@ -11450,8 +11720,8 @@ var {
 
 // src/cli/index.tsx
 import chalk2 from "chalk";
-import { existsSync as existsSync15, readFileSync as readFileSync11, rmSync as rmSync4 } from "fs";
-import { join as join17, dirname as dirname8 } from "path";
+import { existsSync as existsSync16, readFileSync as readFileSync12, rmSync as rmSync4 } from "fs";
+import { join as join17, dirname as dirname9 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 
 // src/cli/components/App.tsx
@@ -12293,7 +12563,7 @@ function InstallProgress({
   onComplete
 }) {
   const [results, setResults] = useState6([]);
-  const [current, setCurrent] = useState6(0);
+  const [current2, setCurrent] = useState6(0);
   const [installing, setInstalling] = useState6(true);
   useEffect5(() => {
     const install = async () => {
@@ -12317,12 +12587,12 @@ function InstallProgress({
         marginBottom: 1,
         children: /* @__PURE__ */ jsxDEV6(Text9, {
           bold: true,
-          children: installing ? `Installing hooks (${current + 1}/${hooks.length})...` : "Installation complete!"
+          children: installing ? `Installing hooks (${current2 + 1}/${hooks.length})...` : "Installation complete!"
         }, undefined, false, undefined, this)
       }, undefined, false, undefined, this),
       hooks.map((name, i) => {
         const result = results[i];
-        const isCurrent = i === current && installing;
+        const isCurrent = i === current2 && installing;
         const meta = getHook(name);
         return /* @__PURE__ */ jsxDEV6(Box7, {
           flexDirection: "column",
@@ -12637,10 +12907,11 @@ init_app_home();
 init_config();
 init_local_opt_in();
 init_transport2();
+init_db();
 import { jsxDEV as jsxDEV8 } from "react/jsx-dev-runtime";
-var __dirname4 = dirname8(fileURLToPath5(import.meta.url));
-var pkgPath = existsSync15(join17(__dirname4, "..", "package.json")) ? join17(__dirname4, "..", "package.json") : join17(__dirname4, "..", "..", "package.json");
-var pkg2 = JSON.parse(readFileSync11(pkgPath, "utf-8"));
+var __dirname4 = dirname9(fileURLToPath5(import.meta.url));
+var pkgPath = existsSync16(join17(__dirname4, "..", "package.json")) ? join17(__dirname4, "..", "package.json") : join17(__dirname4, "..", "..", "package.json");
+var pkg2 = JSON.parse(readFileSync12(pkgPath, "utf-8"));
 var program2 = new Command;
 function resolveScope(options) {
   if (options.project)
@@ -12650,12 +12921,45 @@ function resolveScope(options) {
 function resolveTarget(options) {
   if (options.target === "gemini")
     return "gemini";
+  if (options.target === "codex")
+    return "codex";
   if (options.target === "codewith")
     return "codewith";
   if (options.target === "all")
     return "all";
   return "claude";
 }
+function resolveConcreteTarget(options) {
+  if (options.target === "gemini")
+    return "gemini";
+  if (options.target === "codex")
+    return "codex";
+  if (options.target === "codewith")
+    return "codewith";
+  return "claude";
+}
+function formatSettingsPath(scope, target) {
+  if (target === "all")
+    return "target-specific settings";
+  const actual = getSettingsPath(scope, target);
+  if (scope === "project") {
+    if (target === "codewith")
+      return ".codewith/config.toml";
+    if (target === "gemini")
+      return ".gemini/settings.json";
+    if (target === "codex")
+      return ".codex/hooks.json";
+    return ".claude/settings.json";
+  }
+  if (target === "codewith") {
+    return process.env.HASNA_HOOKS_CODEWITH_CONFIG_PATH ? "$HASNA_HOOKS_CODEWITH_CONFIG_PATH" : "~/.codewith/config.toml";
+  }
+  if (target === "gemini")
+    return "~/.gemini/settings.json";
+  if (target === "codex")
+    return "~/.codex/hooks.json";
+  return actual === getSettingsPath("global", "claude") ? "~/.claude/settings.json" : actual;
+}
 function parseLimit(value, fallback, max) {
   const parsed = value ? parseInt(value, 10) : fallback;
   if (!Number.isFinite(parsed) || parsed <= 0)
@@ -12671,10 +12975,23 @@ function truncateText2(value, max = 96) {
 function projectLogRows2(rows) {
   return rows.map((row) => projectEventRowForRead({ ...row }));
 }
+async function openLocalStoreOrExit(json2) {
+  try {
+    const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
+    return getDb2();
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (json2)
+      console.log(JSON.stringify({ error: message }));
+    else
+      console.error(chalk2.red(`\u2717 ${message}`));
+    process.exit(1);
+  }
+}
 function readToken(tokenFile) {
   if (tokenFile) {
     try {
-      return readFileSync11(tokenFile, "utf-8").trim();
+      return readFileSync12(tokenFile, "utf-8").trim();
     } catch {
       return;
     }
@@ -12735,6 +13052,11 @@ function suggestHooks(name, max = 3) {
 }
 program2.name("hooks").description("Install hooks for AI coding agents").version(pkg2.version);
 program2.command("interactive", { isDefault: true }).alias("i").description("Interactive hook browser").action(() => {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) {
+    console.error(chalk2.red("The interactive hook browser requires a TTY terminal.") + `
+` + chalk2.dim("Use `hooks search <query>`, `hooks list`, or `hooks categories` for non-interactive use."));
+    process.exit(1);
+  }
   render(/* @__PURE__ */ jsxDEV8(App, {}, undefined, false, undefined, this));
 });
 program2.command("init").description("Register a new agent profile with a unique ID").option("-a, --agent <type>", "Agent type: claude, gemini, custom", "claude").option("-n, --name <name>", "Optional display name for the agent").option("-j, --json", "Output as JSON", false).option("--cloudflare", "Configure a remote registry (Cloudflare worker)", false).option("--api-url <url>", "Remote registry API URL (with --cloudflare)").option("--api-key <ref>", "Vault key NAME for the registry API key (never the value; with --cloudflare)").action(async (options) => {
@@ -12823,11 +13145,11 @@ program2.command("run").argument("<hook>", "Hook to run").option("--profile <id>
     process.exit(1);
   }
   const hookScript = resolveScriptPath2(hook);
-  if (!hookScript || !existsSync15(hookScript)) {
+  if (!hookScript || !existsSync16(hookScript)) {
     console.error(JSON.stringify({ error: `Hook script not found: ${hookScript ?? hook}` }));
     process.exit(1);
   }
-  const content = readFileSync11(hookScript);
+  const content = readFileSync12(hookScript);
   const sha = sha256Of2(content);
   const check = checkScriptHash2(hook, sha);
   if (!check.ok) {
@@ -12933,7 +13255,7 @@ program2.command("run").argument("<hook>", "Hook to run").option("--profile <id>
     process.stderr.write(stderr);
   process.exit(exitCode);
 });
-program2.command("install").alias("add").argument("[hooks...]", "Hooks to install").option("-o, --overwrite", "Overwrite existing hooks", false).option("-a, --all", "Install all available hooks", false).option("-c, --category <category>", "Install all hooks in a category").option("-g, --global", "Install globally (~/.claude/settings.json)", false).option("-p, --project", "Install for current project (.claude/settings.json)", false).option("-t, --target <target>", "Agent target: claude, gemini, codewith, all (default: claude)", "claude").option("--profile <id>", "Agent profile ID to scope hooks to").option("--dry-run", "Preview what would be installed without writing to settings", false).option("--apply-codewith", "Explicitly append Codewith TOML to a config file (prefer configs for managed configs)", false).option("--codewith-config <path>", "Explicit Codewith config path required with --apply-codewith").option("-j, --json", "Output as JSON", false).description("Install one or more hooks (registry names, local paths, git URLs, manifest URLs, or <name>@<version> pinned installs)").action(async (hooks, options) => {
+program2.command("install").alias("add").argument("[hooks...]", "Hooks to install").option("-o, --overwrite", "Overwrite existing hooks", false).option("-a, --all", "Install all available hooks", false).option("-c, --category <category>", "Install all hooks in a category").option("-g, --global", "Install globally (~/.claude/settings.json)", false).option("-p, --project", "Install for current project (.claude/settings.json)", false).option("-t, --target <target>", "Agent target: claude, gemini, codewith, codex, all (default: claude)", "claude").option("--profile <id>", "Agent profile ID to scope hooks to").option("--dry-run", "Preview what would be installed without writing to settings", false).option("--apply-codewith", "Explicitly append Codewith TOML to a config file (prefer configs for managed configs)", false).option("--codewith-config <path>", "Explicit Codewith config path required with --apply-codewith").option("-j, --json", "Output as JSON", false).description("Install one or more hooks (registry names, local paths, git URLs, manifest URLs, or <name>@<version> pinned installs)").action(async (hooks, options) => {
   const scope = resolveScope(options);
   const target = resolveTarget(options);
   let toInstall = hooks;
@@ -12970,6 +13292,7 @@ program2.command("install").alias("add").argument("[hooks...]", "Hooks to instal
   const { readCustomManifest: readCustomManifest2, HOOK_NAME_RE: HOOK_NAME_RE2 } = await Promise.resolve().then(() => (init_manifest(), exports_manifest));
   const { resolveHooksTransport: resolveHooksTransport2 } = await Promise.resolve().then(() => (init_transport2(), exports_transport));
   const { sha256Of: sha256Of2, pinInstalledHook: pinInstalledHook2 } = await Promise.resolve().then(() => (init_store(), exports_store));
+  const { installPinnedFromBundled: installPinnedFromBundled2, fetchPinnedHook: fetchPinnedHook2 } = await Promise.resolve().then(() => (init_sync(), exports_sync));
   const { readFileSync: readFileSyncFs } = await import("fs");
   function parseNameVersion(arg) {
     if (isCustomSource2(arg))
@@ -13062,17 +13385,13 @@ Dry run \u2014 would install (${scope}, ${target}):
   for (const { arg, pinned } of pinnedRequests) {
     try {
       const transport = resolveHooksTransport2();
-      if (transport.mode !== "remote" || !transport.authority) {
-        throw new Error(`Cannot install '${arg}': no remote registry configured (set HASNA_HOOKS_API_URL and HASNA_HOOKS_API_KEY, or opt into local mode with HASNA_HOOKS_LOCAL=1)`);
-      }
-      const { origin, apiKey } = transport.authority;
-      const { fetchPinnedHook: fetchPinnedHook2 } = await Promise.resolve().then(() => (init_sync(), exports_sync));
-      const pinnedInstall = await fetchPinnedHook2(pinned.name, pinned.version, origin, apiKey);
+      const pinnedInstall = transport.mode === "remote" && transport.authority ? await fetchPinnedHook2(pinned.name, pinned.version, transport.authority.origin, transport.authority.apiKey) : await installPinnedFromBundled2(pinned.name, pinned.version);
       installedPinned.push(pinnedInstall.name);
       if (options.json) {
         console.log(JSON.stringify({ pinned: { request: arg, name: pinnedInstall.name, version: pinnedInstall.version, sha256: pinnedInstall.sha256, source: pinnedInstall.source } }));
       } else {
-        console.log(chalk2.green(`\u2713 Installed '${pinnedInstall.name}' v${pinnedInstall.version} from registry (sha256 ${pinnedInstall.sha256.slice(0, 12)}\u2026)`));
+        const registryLabel = transport.mode === "remote" ? "registry" : "bundled registry";
+        console.log(chalk2.green(`\u2713 Installed '${pinnedInstall.name}' v${pinnedInstall.version} from ${registryLabel} (sha256 ${pinnedInstall.sha256.slice(0, 12)}\u2026)`));
       }
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);
@@ -13115,7 +13434,8 @@ Dry run \u2014 would install (${scope}, ${target}):
       success: results.filter((r) => r.success).length,
       scope,
       target,
-      applied: results.some((r) => r.applied)
+      applied: results.some((r) => r.applied),
+      ...target === "codex" ? { notes: results.filter((r) => r.success && r.note).map((r) => r.note) } : {}
     }));
     if (results.some((r) => !r.success)) {
       process.exitCode = 1;
@@ -13123,7 +13443,7 @@ Dry run \u2014 would install (${scope}, ${target}):
     return;
   }
   const successCount = results.filter((r) => r.success).length;
-  const settingsFile = target === "codewith" ? options.applyCodewith ? options.codewithConfig : "TOML fragment only (configs should apply)" : scope === "project" ? ".claude/settings.json" : "~/.claude/settings.json";
+  const settingsFile = target === "codewith" ? options.applyCodewith ? options.codewithConfig : "TOML fragment only (configs should apply)" : formatSettingsPath(scope, target);
   console.log(chalk2.bold(`
 Installing hooks (${scope}, ${target})...
 `));
@@ -13137,6 +13457,8 @@ Installing hooks (${scope}, ${target})...
       if (result.conflict) {
         console.log(chalk2.yellow(`  \u26A0 Warning: ${result.conflict}`));
       }
+      if (result.note && target === "codex")
+        console.log(chalk2.dim(`  ${result.note}`));
       if (result.fragment && target === "codewith") {
         console.log(chalk2.dim("  Codewith TOML fragment:"));
         console.log(chalk2.cyan(result.fragment.trimEnd().split(`
@@ -13163,12 +13485,12 @@ Installing hooks (${scope}, ${target})...
   console.log(chalk2.dim(`
 Registered in ${settingsFile}`));
 });
-program2.command("list").alias("ls").option("-c, --category <category>", "Filter by category").option("-a, --all", "Show all available hooks", false).option("-i, --installed", "Show only installed hooks", false).option("-r, --registered", "Show registered hooks", false).option("-g, --global", "Check global settings", false).option("-p, --project", "Check project settings", false).option("-t, --target <target>", "Agent target: claude, gemini, codewith (default: claude)", "claude").option("-n, --limit <n>", "Max rows to show in compact output", "20").option("--verbose", "Show descriptions and full detail columns", false).option("-j, --json", "Output as JSON", false).description("List available or installed hooks (bundled + custom/registry)").action((options) => {
+program2.command("list").alias("ls").option("-c, --category <category>", "Filter by category").option("-a, --all", "Show all available hooks", false).option("-i, --installed", "Show only installed hooks", false).option("-r, --registered", "Show registered hooks", false).option("-g, --global", "Check global settings", false).option("-p, --project", "Check project settings", false).option("-t, --target <target>", "Agent target: claude, gemini, codewith, codex (default: claude)", "claude").option("-n, --limit <n>", "Max rows to show in compact output", "20").option("--verbose", "Show descriptions and full detail columns", false).option("-j, --json", "Output as JSON", false).description("List available or installed hooks (bundled + custom/registry)").action((options) => {
   const scope = resolveScope(options);
   const limit = options.all ? Number.MAX_SAFE_INTEGER : parseLimit(options.limit, 20, 200);
   const storeHooks = listStoreHooks();
   if (options.registered || options.installed) {
-    const target = options.target === "gemini" ? "gemini" : options.target === "codewith" ? "codewith" : "claude";
+    const target = resolveConcreteTarget(options);
     const registered = getRegisteredHooksForTarget(scope, target);
     const installed = [...new Set([...registered, ...storeHooks.map((s) => s.meta.name)])];
     const shown = options.registered ? registered : installed;
@@ -13291,7 +13613,7 @@ Found ${results.length} hook(s), showing ${visible.length}:
     console.log(hookSummaryLine(h, { verbose: options.verbose }));
   printDisclosureHint(results.length - visible.length, "hooks info <name>");
 });
-program2.command("remove").alias("rm").argument("<hook>", "Hook to remove").option("-g, --global", "Remove from global settings", false).option("-p, --project", "Remove from project settings", false).option("-t, --target <target>", "Agent target: claude, gemini, codewith, all (default: claude)", "claude").option("-j, --json", "Output as JSON", false).description("Remove an installed hook (settings registration + store + lock + DB)").action(async (hook, options) => {
+program2.command("remove").alias("rm").argument("<hook>", "Hook to remove").option("-g, --global", "Remove from global settings", false).option("-p, --project", "Remove from project settings", false).option("-t, --target <target>", "Agent target: claude, gemini, codewith, codex, all (default: claude)", "claude").option("-j, --json", "Output as JSON", false).description("Remove an installed hook (settings registration + store + lock + DB)").action(async (hook, options) => {
   const scope = resolveScope(options);
   const target = resolveTarget(options);
   const { uninstallHook: uninstallHook2 } = await Promise.resolve().then(() => (init_installer(), exports_installer));
@@ -13407,7 +13729,7 @@ program2.command("doctor").option("-g, --global", "Check global settings", false
     });
   }
   const staleNames = new Set(stale.map((finding) => finding.hook));
-  const settingsExist = existsSync15(settingsPath);
+  const settingsExist = existsSync16(settingsPath);
   if (!settingsExist) {
     issues.push({ hook: "(settings)", issue: `${settingsPath} not found`, severity: "warning" });
   }
@@ -13415,7 +13737,7 @@ program2.command("doctor").option("-g, --global", "Check global settings", false
   let wiringCount = 0;
   if (settingsExist) {
     try {
-      const settings = JSON.parse(readFileSync11(settingsPath, "utf-8"));
+      const settings = JSON.parse(readFileSync12(settingsPath, "utf-8"));
       wiringCount = countSettingsWiring(settings);
     } catch {}
   }
@@ -13426,7 +13748,7 @@ program2.command("doctor").option("-g, --global", "Check global settings", false
     const meta = custom ? resolveHookMeta(name) : getHook(name);
     let hookHealthy = true;
     if (custom) {
-      if (!existsSync15(custom.scriptPath)) {
+      if (!existsSync16(custom.scriptPath)) {
         issues.push({ hook: name, issue: `Custom hook script missing: ${custom.scriptPath}`, severity: "error" });
         hookHealthy = false;
       }
@@ -13438,14 +13760,14 @@ program2.command("doctor").option("-g, --global", "Check global settings", false
       }
       const hookDir = getHookPath(name);
       const hookScript = join17(hookDir, "src", "hook.ts");
-      if (!existsSync15(hookScript)) {
+      if (!existsSync16(hookScript)) {
         issues.push({ hook: name, issue: "Missing src/hook.ts in package", severity: "error" });
         hookHealthy = false;
       }
     }
     if (meta && settingsExist) {
       try {
-        const settings = JSON.parse(readFileSync11(settingsPath, "utf-8"));
+        const settings = JSON.parse(readFileSync12(settingsPath, "utf-8"));
         if (!hookRegisteredInSettings(settings, name, meta.event, meta.matcher)) {
           const eventName = meta.event.split(":")[0];
           issues.push({ hook: name, issue: `Not registered under correct event (${eventName})`, severity: "error" });
@@ -13547,8 +13869,9 @@ program2.command("update").argument("[hooks...]", "Hooks to update (defaults to
   }
   const { resolveHook: resolveHook2 } = await Promise.resolve().then(() => (init_resolve(), exports_resolve));
   const { sha256File: sha256File2, setPinnedHook: setPinnedHook2, upsertHookRecord: upsertHookRecord2 } = await Promise.resolve().then(() => (init_store(), exports_store));
-  const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
+  const { getDb: getDb2, isLocalStoreRefused: isLocalStoreRefused2 } = await Promise.resolve().then(() => (init_db(), exports_db));
   const { resolveHooksTransport: resolveHooksTransport2 } = await Promise.resolve().then(() => (init_transport2(), exports_transport));
+  const { installPinnedFromBundled: installPinnedFromBundled2, fetchPinnedHook: fetchPinnedHook2 } = await Promise.resolve().then(() => (init_sync(), exports_sync));
   const { isCustomSource: isCustomSource2 } = await Promise.resolve().then(() => (init_custom_install(), exports_custom_install));
   const { HOOK_NAME_RE: HOOK_NAME_RE2 } = await Promise.resolve().then(() => (init_manifest(), exports_manifest));
   function parseNameVersion(arg) {
@@ -13571,12 +13894,7 @@ program2.command("update").argument("[hooks...]", "Hooks to update (defaults to
     if (pinned) {
       try {
         const transport = resolveHooksTransport2();
-        if (transport.mode !== "remote" || !transport.authority) {
-          throw new Error(`Cannot update '${arg}': no remote registry configured (set HASNA_HOOKS_API_URL and HASNA_HOOKS_API_KEY, or opt into local mode with HASNA_HOOKS_LOCAL=1)`);
-        }
-        const { origin, apiKey } = transport.authority;
-        const { fetchPinnedHook: fetchPinnedHook2 } = await Promise.resolve().then(() => (init_sync(), exports_sync));
-        const pinnedInstall = await fetchPinnedHook2(pinned.name, pinned.version, origin, apiKey);
+        const pinnedInstall = transport.mode === "remote" && transport.authority ? await fetchPinnedHook2(pinned.name, pinned.version, transport.authority.origin, transport.authority.apiKey) : await installPinnedFromBundled2(pinned.name, pinned.version);
         const registered = installHook(pinnedInstall.name, { scope, overwrite: true });
         if (!registered.success) {
           results.push({ hook: arg, success: false, error: registered.error ?? "registration failed" });
@@ -13601,13 +13919,15 @@ program2.command("update").argument("[hooks...]", "Hooks to update (defaults to
     if (result.success && resolved) {
       const hash = await sha256File2(resolved.scriptPath);
       setPinnedHook2(resolved.name, { version: resolved.version, sha256: hash, source: resolved.source });
-      upsertHookRecord2(getDb2(), {
-        name: resolved.name,
-        version: resolved.version,
-        sha256: hash,
-        source_type: resolved.source,
-        last_verified_at: new Date().toISOString()
-      });
+      if (!isLocalStoreRefused2()) {
+        upsertHookRecord2(getDb2(), {
+          name: resolved.name,
+          version: resolved.version,
+          sha256: hash,
+          source_type: resolved.source,
+          last_verified_at: new Date().toISOString()
+        });
+      }
       results.push({ ...result, pinned: { version: resolved.version, sha256: hash } });
       continue;
     }
@@ -13652,8 +13972,8 @@ program2.command("docs").argument("[hook]", "Hook name (shows general docs if om
     const hookPath = getHookPath(hook);
     const readmePath = join17(hookPath, "README.md");
     let readme = "";
-    if (existsSync15(readmePath)) {
-      readme = readFileSync11(readmePath, "utf-8");
+    if (existsSync16(readmePath)) {
+      readme = readFileSync12(readmePath, "utf-8");
     }
     if (options.json) {
       console.log(JSON.stringify({ ...meta, readme }));
@@ -13772,7 +14092,7 @@ ${meta.displayName} v${meta.version}
   console.log();
 });
 program2.command("upgrade").option("-c, --check", "Check for updates without installing", false).option("-j, --json", "Output as JSON", false).description("Update the @hasna/hooks package to the latest version").action(async (options) => {
-  const current = pkg2.version;
+  const current2 = pkg2.version;
   let pm = "npm";
   try {
     const which = Bun.spawnSync(["which", "bun"]);
@@ -13790,13 +14110,13 @@ program2.command("upgrade").option("-c, --check", "Check for updates without ins
       }
       process.exit(1);
     }
-    const upToDate = current === latest2;
+    const upToDate = current2 === latest2;
     if (options.json) {
-      console.log(JSON.stringify({ current, latest: latest2, upToDate }));
+      console.log(JSON.stringify({ current: current2, latest: latest2, upToDate }));
     } else if (upToDate) {
-      console.log(chalk2.green(`\u2713 Already on latest version (${current})`));
+      console.log(chalk2.green(`\u2713 Already on latest version (${current2})`));
     } else {
-      console.log(chalk2.yellow(`Update available: ${current} \u2192 ${latest2}`));
+      console.log(chalk2.yellow(`Update available: ${current2} \u2192 ${latest2}`));
       console.log(chalk2.dim(`  Run: hooks upgrade`));
     }
     return;
@@ -13817,7 +14137,7 @@ Upgrading @hasna/hooks (${pm})...
   const exitCode = await proc.exited;
   if (exitCode !== 0) {
     if (options.json) {
-      console.log(JSON.stringify({ current, updated: false, error: `${pm} exited with code ${exitCode}` }));
+      console.log(JSON.stringify({ current: current2, updated: false, error: `${pm} exited with code ${exitCode}` }));
     } else {
       console.log(chalk2.red(`
 \u2717 Upgrade failed (exit code ${exitCode})`));
@@ -13827,18 +14147,18 @@ Upgrading @hasna/hooks (${pm})...
   const versionProc = Bun.spawnSync(["npm", "view", "@hasna/hooks", "version"]);
   const latest = new TextDecoder().decode(versionProc.stdout).trim() || "unknown";
   if (options.json) {
-    console.log(JSON.stringify({ current, latest, updated: true }));
+    console.log(JSON.stringify({ current: current2, latest, updated: true }));
   } else {
     console.log(chalk2.green(`
-\u2713 Upgraded: ${current} \u2192 ${latest}`));
+\u2713 Upgraded: ${current2} \u2192 ${latest}`));
   }
 });
 program2.command("profile-export").description("Export all agent profiles as JSON (for backup/cross-machine setup)").option("-o, --output <file>", "Write to file instead of stdout").option("-j, --json", "Output as JSON (default: true)", false).action(async (options) => {
   const profiles = exportProfiles();
   const json2 = JSON.stringify(profiles, null, 2);
   if (options.output) {
-    const { writeFileSync: writeFileSync6 } = await import("fs");
-    writeFileSync6(options.output, json2 + `
+    const { writeFileSync: writeFileSync7 } = await import("fs");
+    writeFileSync7(options.output, json2 + `
 `);
     console.log(chalk2.green(`\u2713 Exported ${profiles.length} profile(s) to ${options.output}`));
   } else {
@@ -13850,9 +14170,9 @@ program2.command("profile-import").argument("<file>", "JSON file to import profi
   if (file === "-") {
     raw = await new Response(Bun.stdin.stream()).text();
   } else {
-    const { readFileSync: readFileSync12 } = await import("fs");
+    const { readFileSync: readFileSync13 } = await import("fs");
     try {
-      raw = readFileSync12(file, "utf-8");
+      raw = readFileSync13(file, "utf-8");
     } catch {
       if (options.json) {
         console.log(JSON.stringify({ error: `Cannot read file: ${file}` }));
@@ -13885,8 +14205,7 @@ program2.command("profile-import").argument("<file>", "JSON file to import profi
 });
 var logCmd = program2.command("log").description(`Query hook event logs from SQLite (${getReportedDbPath()})`);
 logCmd.command("list").description("List hook events").option("--hook <name>", "Filter by hook name").option("--session <id>", "Filter by session ID").option("-n, --limit <n>", "Number of rows to show", "50").option("-j, --json", "Output as JSON", false).action(async (options) => {
-  const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
-  const db = getDb2();
+  const db = await openLocalStoreOrExit(options.json);
   const limit = parseInt(options.limit) || 50;
   let sql = "SELECT * FROM hook_events WHERE 1=1";
   const params = [];
@@ -13923,8 +14242,7 @@ logCmd.command("list").description("List hook events").option("--hook <name>", "
   Compact rows shown. Use --json for full event records or --limit <n> to change row count.`));
 });
 logCmd.command("search <text>").description("Search hook events by tool_input or error text").option("-n, --limit <n>", "Number of rows to show", "50").option("-j, --json", "Output as JSON", false).action(async (text, options) => {
-  const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
-  const db = getDb2();
+  const db = await openLocalStoreOrExit(options.json);
   const limit = parseInt(options.limit) || 50;
   const q = `%${text}%`;
   const rows = db.query("SELECT * FROM hook_events WHERE tool_input LIKE ? OR error LIKE ? ORDER BY timestamp DESC LIMIT ?").all(q, q, limit);
@@ -13949,8 +14267,7 @@ logCmd.command("search <text>").description("Search hook events by tool_input or
   Compact rows shown. Use --json for full event records or --limit <n> to change row count.`));
 });
 logCmd.command("tail").description("Show most recent hook events").option("-n <n>", "Number of rows", "20").option("-j, --json", "Output as JSON", false).action(async (options) => {
-  const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
-  const db = getDb2();
+  const db = await openLocalStoreOrExit(options.json);
   const limit = parseInt(options.n) || 20;
   const rows = db.query("SELECT * FROM hook_events ORDER BY timestamp DESC LIMIT ?").all(limit);
   const projected = projectLogRows2(rows);
@@ -13975,8 +14292,7 @@ logCmd.command("tail").description("Show most recent hook events").option("-n <n
   Compact rows shown. Use --json for full event records or -n <n> to change row count.`));
 });
 logCmd.command("errors").description("Show hook events that contain errors").option("--since <duration>", "Only show errors since this duration (e.g. 1h, 30m, 7d)", "24h").option("-n, --limit <n>", "Number of rows to show", "50").option("-j, --json", "Output as JSON", false).action(async (options) => {
-  const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
-  const db = getDb2();
+  const db = await openLocalStoreOrExit(options.json);
   const limit = parseInt(options.limit) || 50;
   function parseDuration(s) {
     const m = s.match(/^(\d+)(s|m|h|d)$/);
@@ -14018,8 +14334,7 @@ logCmd.command("errors").description("Show hook events that contain errors").opt
   Compact rows shown. Use --json for full event records or --limit <n> to change row count.`));
 });
 logCmd.command("clear").description("Delete hook event logs").option("--hook <name>", "Only delete events for this hook").option("-y, --yes", "Skip confirmation prompt", false).action(async (options) => {
-  const { getDb: getDb2 } = await Promise.resolve().then(() => (init_db(), exports_db));
-  const db = getDb2();
+  const db = await openLocalStoreOrExit(false);
   const countRow = options.hook ? db.query("SELECT COUNT(*) as n FROM hook_events WHERE hook_name = ?").get(options.hook) : db.query("SELECT COUNT(*) as n FROM hook_events").get();
   const count = countRow?.n ?? 0;
   if (count === 0) {
@@ -14041,19 +14356,28 @@ logCmd.command("clear").description("Delete hook event logs").option("--hook <na
 });
 var storageCmd = program2.command("storage").description("Sync local hook data with storage PostgreSQL");
 storageCmd.command("status").description("Show storage sync status").option("-j, --json", "Output as JSON", false).action(async (options) => {
-  const { getStorageStatus: getStorageStatus2 } = await Promise.resolve().then(() => (init_storage(), exports_storage));
-  const status = getStorageStatus2();
-  if (options.json) {
-    console.log(JSON.stringify(status, null, 2));
-    return;
-  }
-  console.log(chalk2.bold(`
+  try {
+    const { getStorageStatus: getStorageStatus2 } = await Promise.resolve().then(() => (init_storage(), exports_storage));
+    const status = getStorageStatus2();
+    if (options.json) {
+      console.log(JSON.stringify(status, null, 2));
+      return;
+    }
+    console.log(chalk2.bold(`
   Storage Status
 `));
-  console.log(`  Configured: ${status.configured ? chalk2.green(`yes (${status.activeEnv})`) : chalk2.red("no")}`);
-  console.log(`  Backend:    ${status.backend}`);
-  console.log(`  Tables:     ${status.tables.join(", ")}`);
-  console.log(`  Sync rows:  ${status.sync.length}`);
+    console.log(`  Configured: ${status.configured ? chalk2.green(`yes (${status.activeEnv})`) : chalk2.red("no")}`);
+    console.log(`  Backend:    ${status.backend}`);
+    console.log(`  Tables:     ${status.tables.join(", ")}`);
+    console.log(`  Sync rows:  ${status.sync.length}`);
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (options.json)
+      console.log(JSON.stringify({ error: message }));
+    else
+      console.error(chalk2.red(`\u2717 ${message}`));
+    process.exitCode = 1;
+  }
 });
 storageCmd.command("push").description("Push local hook data to storage PostgreSQL").option("-t, --tables <tables>", "Comma-separated table names").option("-j, --json", "Output as JSON", false).action(async (options) => {
   try {
@@ -14263,6 +14587,13 @@ program2.command("mcp").option("-s, --stdio", "Use stdio transport (one process
     const { startSSEServer: startSSEServer2 } = await Promise.resolve().then(() => (init_server(), exports_server));
     await startSSEServer2({ port: options.port ? parseInt(options.port) : 39427 });
   } else {
+    const { decideHooksMcpAuthority: decideHooksMcpAuthority2 } = await Promise.resolve().then(() => (init_authority(), exports_authority));
+    try {
+      decideHooksMcpAuthority2();
+    } catch (error) {
+      console.error(error instanceof Error ? error.message : String(error));
+      process.exit(1);
+    }
     const { createHooksServer: createHooksServer2 } = await Promise.resolve().then(() => (init_server(), exports_server));
     const { resolveMcpHttpPort: resolveMcpHttpPort2, startMcpHttpServer: startMcpHttpServer2 } = await Promise.resolve().then(() => (init_http(), exports_http));
     const args = options.port ? ["--port", options.port] : [];
@@ -14271,7 +14602,6 @@ program2.command("mcp").option("-s, --stdio", "Use stdio transport (one process
 });
 registerEventsCommands(program2, { source: "hooks" });
 var API_INDEPENDENT_COMMANDS = new Set([
-  "run",
   "serve",
   "mcp",
   "cf",
@@ -14283,11 +14613,11 @@ var API_INDEPENDENT_COMMANDS = new Set([
   "events"
 ]);
 function failClosedForMissingApiEnv(detail) {
-  console.error(chalk2.red(`hooks: no registry credential resolved and local mode is not explicitly enabled.
+  console.error(chalk2.red(hooksFailClosedLine() + `
 ` + `The remote registry requires a STRICT pair \u2014 set HASNA_HOOKS_API_URL and HASNA_HOOKS_API_KEY, or the
 ` + `Keychain items hasna.credentials.hooks.api-url / .api-key, or ~/.hasna/hooks/config/credentials.
-` + `config.json (api_url / api_key_ref) is RETIRED and no longer read. Or set
-` + `HASNA_HOOKS_LOCAL=1 to explicitly opt into local mode (bundled registry + local store).
+config.json (api_url / api_key_ref) is RETIRED and no longer read. Or set
+HASNA_HOOKS_LOCAL=1 to explicitly opt into local mode (bundled registry + local store).
 ` + (detail ? `${detail}
 ` : "") + "Refusing to silently fall back to local storage."));
   process.exit(1);
@@ -14311,21 +14641,25 @@ function enforceTransportGate() {
     return;
   if (token !== null && API_INDEPENDENT_COMMANDS.has(token))
     return;
-  if (hasHooksEnvAuthorityIntent(process.env))
+  if (hasHooksEnvAuthorityIntent(process.env)) {
+    refuseLocalStore(hooksHostedRouteLocalStoreRefusal("configured by HASNA_HOOKS_API_URL / HASNA_HOOKS_API_KEY"));
     return;
+  }
   if (isHooksLocalOptIn(process.env)) {
     announceHooksLocalMode();
     return;
   }
+  let transport;
   try {
-    const transport = resolveHooksTransport(process.env);
-    if (transport.mode !== "remote" || !transport.authority) {
-      failClosedForMissingApiEnv();
-    }
+    transport = resolveHooksTransport(process.env);
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     failClosedForMissingApiEnv(message);
   }
+  if (transport.mode !== "remote" || !transport.authority) {
+    failClosedForMissingApiEnv();
+  }
+  refuseLocalStore(hooksHostedRouteLocalStoreRefusal(transport.authority.v1BaseUrl));
 }
 enforceTransportGate();
 program2.parse();