@praxis.guard/auditor-cli 0.0.62 → 0.0.64

package/dist/adapters/remove-helpers.js

@@ -0,0 +1,40 @@
+import { rm } from "node:fs/promises";
+/**
+ * Shared teardown helpers for adapter `remove*` methods.
+ *
+ * These are the surgical inverse of the `upsert*` writers: they touch ONLY the
+ * Praxis-owned keys and prune now-empty parent containers, so a shared
+ * `~/.claude.json` or `settings.json` keeps every non-Praxis key untouched.
+ */
+/**
+ * Delete `config.mcpServers[key]` in place; prune the `mcpServers` object itself
+ * when it becomes empty. No-op when the key (or the container) is absent.
+ */
+export function deleteMcpServerKey(config, key) {
+    const servers = config.mcpServers;
+    if (!servers || typeof servers !== "object" || Array.isArray(servers))
+        return;
+    const map = servers;
+    if (!(key in map))
+        return;
+    delete map[key];
+    if (Object.keys(map).length === 0)
+        delete config.mcpServers;
+}
+/**
+ * True when a config object is "Praxis-owned empty": either `{}` or only a
+ * leftover `{ version: <n> }` marker. Used to decide whether a Praxis-owned
+ * file (e.g. Copilot's `hooks/praxis.json`) should be deleted outright rather
+ * than left as an inert stub. Shared files (`~/.claude.json`) never use this.
+ */
+export function isOwnedEmpty(config) {
+    const keys = Object.keys(config);
+    if (keys.length === 0)
+        return true;
+    return keys.length === 1 && keys[0] === "version";
+}
+/** Force-remove a file or directory if present; never throws on ENOENT. */
+export async function removeFileIfPresent(pathname) {
+    await rm(pathname, { force: true, recursive: true });
+}
+//# sourceMappingURL=remove-helpers.js.map

package/dist/adapters/remove-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-helpers.js","sourceRoot":"","sources":["../../src/adapters/remove-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAItC;;;;;;GAMG;AAEH;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe,EAAE,GAAW;IAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC;IAClC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO;IAC9E,MAAM,GAAG,GAAG,OAAkB,CAAC;IAC/B,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;QAAE,OAAO;IAC1B,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAe;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;AACpD,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACxD,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/adapters/select-targets.d.ts

@@ -19,4 +19,14 @@ export declare function parseForFlag(args: string[]): {
  *   Falls back to Cursor only when nothing is detected (preserves legacy default).
  */
 export declare function selectTargetAdapters(explicit: AgentId[]): AgentAdapter[];
+/**
+ * Resolve the adapters `auditor uninstall` should clean.
+ *
+ * Deliberately NOT `selectTargetAdapters`: teardown must not gate on
+ * `detectInstalled()` (you uninstall agents you no longer "have") and must not
+ * fall back to Cursor on an otherwise-empty machine (that would wrongly target
+ * Cursor). Explicit `--for` wins; otherwise every known adapter is attempted —
+ * each `remove*` is idempotent and a no-op when nothing is present.
+ */
+export declare function selectUninstallTargets(explicit: AgentId[]): AgentAdapter[];
 //# sourceMappingURL=select-targets.d.ts.map

package/dist/adapters/select-targets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"select-targets.d.ts","sourceRoot":"","sources":["../../src/adapters/select-targets.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAMxD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG;IAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAuBlF;AAQD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAaxE"}
+{"version":3,"file":"select-targets.d.ts","sourceRoot":"","sources":["../../src/adapters/select-targets.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAaxD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG;IAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAuBlF;AAQD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAaxE;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAK1E"}

package/dist/adapters/select-targets.js

@@ -1,5 +1,12 @@
 import { ALL_ADAPTERS, getAdapter } from "./registry.js";
-const VALID_IDS = ["cursor", "claude-desktop", "claude-code", "codex", "copilot-cli"];
+const VALID_IDS = [
+    "cursor",
+    "claude-desktop",
+    "claude-code",
+    "codex",
+    "copilot-cli",
+    "vscode",
+];
 const EXPECTED_IDS = VALID_IDS.join(" | ");
 /**
  * Parse repeated `--for=<agent>` flags from a setup command's argv tail.
@@ -63,4 +70,19 @@ export function selectTargetAdapters(explicit) {
         return [...detected];
     return [getAdapter("cursor")];
 }
+/**
+ * Resolve the adapters `auditor uninstall` should clean.
+ *
+ * Deliberately NOT `selectTargetAdapters`: teardown must not gate on
+ * `detectInstalled()` (you uninstall agents you no longer "have") and must not
+ * fall back to Cursor on an otherwise-empty machine (that would wrongly target
+ * Cursor). Explicit `--for` wins; otherwise every known adapter is attempted —
+ * each `remove*` is idempotent and a no-op when nothing is present.
+ */
+export function selectUninstallTargets(explicit) {
+    if (explicit.length > 0) {
+        return explicit.map((id) => getAdapter(id));
+    }
+    return [...ALL_ADAPTERS];
+}
 //# sourceMappingURL=select-targets.js.map

package/dist/adapters/select-targets.js.map

@@ -1 +1 @@
-{"version":3,"file":"select-targets.js","sourceRoot":"","sources":["../../src/adapters/select-targets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAGzD,MAAM,SAAS,GAAuB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AAE1G,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,YAAY,GAAG,CAAC,CAAC;YACnF,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,YAAY,GAAG,CAAC,CAAC;YACpF,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,CAAE,SAA+B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,gBAAgB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAmB;IACtD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACzC,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,eAAe,EAAE,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC9C,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AAChC,CAAC"}
+{"version":3,"file":"select-targets.js","sourceRoot":"","sources":["../../src/adapters/select-targets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAGzD,MAAM,SAAS,GAAuB;IACpC,QAAQ;IACR,gBAAgB;IAChB,aAAa;IACb,OAAO;IACP,aAAa;IACb,QAAQ;CACT,CAAC;AAEF,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,YAAY,GAAG,CAAC,CAAC;YACnF,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,YAAY,GAAG,CAAC,CAAC;YACpF,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,CAAE,SAA+B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,gBAAgB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAmB;IACtD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACzC,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,eAAe,EAAE,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC9C,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAmB;IACxD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC;AAC3B,CAAC"}

package/dist/adapters/types.d.ts

@@ -67,6 +67,25 @@ export type UpsertCloudOpts = {
     projectDir: string;
     dryRun?: boolean;
 };
+/** Inverse of UpsertHookOpts — remove a Praxis hook entry. */
+export type RemoveHookOpts = {
+    /** Which scope's hook config to clean. Defaults to "global" when omitted. */
+    scope?: HookScope;
+    projectDir?: string;
+    explicitPath?: string;
+    dryRun?: boolean;
+};
+/** Inverse of UpsertMcpOpts — remove the Praxis MCP server registration. */
+export type RemoveMcpOpts = {
+    projectDir?: string;
+    explicitPath?: string;
+    dryRun?: boolean;
+};
+/** Inverse of UpsertCloudOpts — remove the Praxis cloud-agent install config. */
+export type RemoveCloudOpts = {
+    projectDir: string;
+    dryRun?: boolean;
+};
 export type StatusOpts = {
     projectDir?: string;
     /** Override path for the MCP config file (Cursor: ~/.cursor/mcp.json). */
@@ -90,6 +109,16 @@ export interface AgentAdapter {
     upsertHook?(opts: UpsertHookOpts): Promise<SetupResult>;
     /** Upsert cloud-agent install config. Optional — Cursor Cloud only today. */
     upsertCloud?(opts: UpsertCloudOpts): Promise<SetupResult>;
+    /**
+     * Remove the Praxis MCP server registration (inverse of upsertMcp).
+     * Surgical: strips only the Praxis key, leaving other servers intact.
+     * Idempotent — `changed: false` when nothing was present to remove.
+     */
+    removeMcp(opts: RemoveMcpOpts): Promise<SetupResult>;
+    /** Remove the Praxis hook config (inverse of upsertHook). */
+    removeHook?(opts: RemoveHookOpts): Promise<SetupResult>;
+    /** Remove the Praxis cloud-agent install config (inverse of upsertCloud). */
+    removeCloud?(opts: RemoveCloudOpts): Promise<SetupResult>;
     /** Read current configuration state for doctor / setup-doctor. */
     status(opts?: StatusOpts): Promise<AgentStatus>;
 }

package/dist/adapters/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,gBAAgB,GAAG,aAAa,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEvG,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,mEAAmE;IACnE,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,GAAG,CAAC,EAAE;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,KAAK,CAAC,EAAE;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,yEAAyE;IACzE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,gEAAgE;IAChE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mFAAmF;IACnF,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,uFAAuF;IACvF,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,OAAO,CAAC;QACf,GAAG,EAAE,OAAO,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,gEAAgE;IAChE,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,OAAO,CAAC;QACf,GAAG,EAAE,OAAO,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE7C,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,SAAS,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IAErB,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,iFAAiF;IACjF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,CAAC;IAExC;;;OAGG;IACH,eAAe,IAAI,OAAO,CAAC;IAE3B,mEAAmE;IACnE,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAErD,gFAAgF;IAChF,UAAU,CAAC,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAExD,6EAA6E;IAC7E,WAAW,CAAC,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAE1D,kEAAkE;IAClE,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACjD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,gBAAgB,GAAG,aAAa,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEvG,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,mEAAmE;IACnE,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,GAAG,CAAC,EAAE;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,KAAK,CAAC,EAAE;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,yEAAyE;IACzE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,gEAAgE;IAChE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mFAAmF;IACnF,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,uFAAuF;IACvF,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,OAAO,CAAC;QACf,GAAG,EAAE,OAAO,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,gEAAgE;IAChE,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,OAAO,CAAC;QACf,GAAG,EAAE,OAAO,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE7C,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,SAAS,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,8DAA8D;AAC9D,MAAM,MAAM,cAAc,GAAG;IAC3B,6EAA6E;IAC7E,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,4EAA4E;AAC5E,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,iFAAiF;AACjF,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IAErB,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,iFAAiF;IACjF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,CAAC;IAExC;;;OAGG;IACH,eAAe,IAAI,OAAO,CAAC;IAE3B,mEAAmE;IACnE,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAErD,gFAAgF;IAChF,UAAU,CAAC,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAExD,6EAA6E;IAC7E,WAAW,CAAC,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAE1D;;;;OAIG;IACH,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAErD,6DAA6D;IAC7D,UAAU,CAAC,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAExD,6EAA6E;IAC7E,WAAW,CAAC,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAE1D,kEAAkE;IAClE,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACjD"}

package/dist/adapters/vscode.d.ts

@@ -1,9 +1,10 @@
-import type { AgentAdapter, AgentStatus, SetupResult, StatusOpts, UpsertMcpOpts } from "./types.js";
+import type { AgentAdapter, AgentStatus, RemoveMcpOpts, SetupResult, StatusOpts, UpsertMcpOpts } from "./types.js";
 export declare class VscodeAdapter implements AgentAdapter {
     readonly id: "vscode";
     readonly label = "Visual Studio Code";
     detectInstalled(): boolean;
     upsertMcp(opts: UpsertMcpOpts): Promise<SetupResult>;
+    removeMcp(opts: RemoveMcpOpts): Promise<SetupResult>;
     status(opts?: StatusOpts): Promise<AgentStatus>;
 }
 //# sourceMappingURL=vscode.d.ts.map

package/dist/adapters/vscode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vscode.d.ts","sourceRoot":"","sources":["../../src/adapters/vscode.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,UAAU,EACV,aAAa,EACd,MAAM,YAAY,CAAC;AAoCpB,qBAAa,aAAc,YAAW,YAAY;IAChD,QAAQ,CAAC,EAAE,EAAG,QAAQ,CAAU;IAChC,QAAQ,CAAC,KAAK,wBAAwB;IAEtC,eAAe,IAAI,OAAO;IAKpB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;IAsBpD,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;CAiBtD"}
+{"version":3,"file":"vscode.d.ts","sourceRoot":"","sources":["../../src/adapters/vscode.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,aAAa,EACb,WAAW,EACX,UAAU,EACV,aAAa,EACd,MAAM,YAAY,CAAC;AA4CpB,qBAAa,aAAc,YAAW,YAAY;IAChD,QAAQ,CAAC,EAAE,EAAG,QAAQ,CAAU;IAChC,QAAQ,CAAC,KAAK,wBAAwB;IAEtC,eAAe,IAAI,OAAO;IAKpB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;IAoBpD,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;IA4BpD,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;CAetD"}

package/dist/adapters/vscode.js

@@ -3,6 +3,13 @@ import os from "node:os";
 import path from "node:path";
 import { readJson, writeJsonAtomic } from "./claude-code/config-io.js";
 const AGENT_HOST = "vscode";
+function terminalEnvKey() {
+    return process.platform === "darwin"
+        ? "terminal.integrated.env.osx"
+        : process.platform === "win32"
+            ? "terminal.integrated.env.windows"
+            : "terminal.integrated.env.linux";
+}
 function codeUserSettingsCandidates() {
     const home = os.homedir();
     const candidates = [];
@@ -48,9 +55,7 @@ export class VscodeAdapter {
         const cfgPath = (opts.explicitPath?.trim() || candidates[0]);
         const existing = await readJson(cfgPath).catch(() => null);
         const config = existing ? JSON.parse(JSON.stringify(existing)) : {};
-        const platformKey = process.platform === "darwin" ? "terminal.integrated.env.osx"
-            : process.platform === "win32" ? "terminal.integrated.env.windows"
-                : "terminal.integrated.env.linux";
+        const platformKey = terminalEnvKey();
         const envBlock = (config[platformKey] && typeof config[platformKey] === "object") ? { ...config[platformKey] } : {};
         envBlock.PRAXIS_AGENT_HOST = AGENT_HOST;
         config[platformKey] = envBlock;
@@ -65,14 +70,41 @@ export class VscodeAdapter {
                 : "VS Code user settings already contain PRAXIS_AGENT_HOST",
         };
     }
+    async removeMcp(opts) {
+        const candidates = codeUserSettingsCandidates();
+        const cfgPath = opts.explicitPath?.trim() || candidates[0];
+        const existing = await readJson(cfgPath).catch(() => null);
+        if (!existing) {
+            return { path: cfgPath, changed: false, message: "no VS Code PRAXIS_AGENT_HOST to remove" };
+        }
+        const before = JSON.stringify(existing);
+        const config = JSON.parse(before);
+        const platformKey = terminalEnvKey();
+        const envBlock = config[platformKey];
+        if (envBlock && typeof envBlock === "object" && !Array.isArray(envBlock)) {
+            delete envBlock.PRAXIS_AGENT_HOST;
+            if (Object.keys(envBlock).length === 0)
+                delete config[platformKey];
+        }
+        const changed = before !== JSON.stringify(config);
+        if (changed && !opts.dryRun)
+            await writeJsonAtomic(cfgPath, config);
+        return {
+            path: cfgPath,
+            changed,
+            message: changed
+                ? opts.dryRun
+                    ? "would remove PRAXIS_AGENT_HOST from VS Code user settings"
+                    : "removed PRAXIS_AGENT_HOST from VS Code user settings"
+                : "no VS Code PRAXIS_AGENT_HOST to remove",
+        };
+    }
     async status(opts) {
         const candidates = codeUserSettingsCandidates();
         const cfgPath = (opts?.mcpConfigPath?.trim() || candidates[0]);
         const warnings = [];
         const cfg = await readJson(cfgPath).catch(() => null);
-        const platformKey = process.platform === "darwin" ? "terminal.integrated.env.osx"
-            : process.platform === "win32" ? "terminal.integrated.env.windows"
-                : "terminal.integrated.env.linux";
+        const platformKey = terminalEnvKey();
         const hasEnv = !!(cfg && cfg[platformKey] && typeof cfg[platformKey] === "object" && cfg[platformKey].PRAXIS_AGENT_HOST === AGENT_HOST);
         if (!hasEnv)
             warnings.push(`VS Code does not have PRAXIS_AGENT_HOST=${AGENT_HOST} in ${cfgPath}; run: auditor setup mcp --for=vscode`);

package/dist/adapters/vscode.js.map

@@ -1 +1 @@
-{"version":3,"file":"vscode.js","sourceRoot":"","sources":["../../src/adapters/vscode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AASvE,MAAM,UAAU,GAAG,QAAQ,CAAC;AAE5B,SAAS,0BAA0B;IACjC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QACpG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IACjH,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7E,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QACrE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IAClF,CAAC;SAAM,CAAC;QACN,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QAC7E,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC7C,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QACtD,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACT,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,EAAE,GAAG,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,OAAO,aAAa;IACf,EAAE,GAAG,QAAiB,CAAC;IACvB,KAAK,GAAG,oBAAoB,CAAC;IAEtC,eAAe;QACb,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAChD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAmB;QACjC,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,6BAA6B;YAC/E,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,iCAAiC;gBAClE,CAAC,CAAC,+BAA+B,CAAC;QACpC,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpH,QAAQ,CAAC,iBAAiB,GAAG,UAAU,CAAC;QACxC,MAAM,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO;YACP,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,2DAA2D,CAAC,CAAC,CAAC,sDAAsD;gBACpI,CAAC,CAAC,yDAAyD;SAC9D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAiB;QAC5B,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,6BAA6B;YAC/E,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,iCAAiC;gBAClE,CAAC,CAAC,+BAA+B,CAAC;QACpC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAK,GAAG,CAAC,WAAW,CAAS,CAAC,iBAAiB,KAAK,UAAU,CAAC,CAAC;QACjJ,IAAI,CAAC,MAAM;YAAE,QAAQ,CAAC,IAAI,CAAC,2CAA2C,UAAU,OAAO,OAAO,uCAAuC,CAAC,CAAC;QACvI,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,eAAe,EAAE;YACjC,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;YAC1C,QAAQ;YACR,KAAK,EAAE,MAAM;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"vscode.js","sourceRoot":"","sources":["../../src/adapters/vscode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAUvE,MAAM,UAAU,GAAG,QAAQ,CAAC;AAE5B,SAAS,cAAc;IACrB,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,CAAC,6BAA6B;QAC/B,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,iCAAiC;YACnC,CAAC,CAAC,+BAA+B,CAAC;AACxC,CAAC;AAED,SAAS,0BAA0B;IACjC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QACpG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IACjH,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7E,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QACrE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IAClF,CAAC;SAAM,CAAC;QACN,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QAC7E,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC7C,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QACtD,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACT,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,EAAE,GAAG,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,OAAO,aAAa;IACf,EAAE,GAAG,QAAiB,CAAC;IACvB,KAAK,GAAG,oBAAoB,CAAC;IAEtC,eAAe;QACb,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAChD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAmB;QACjC,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpH,QAAQ,CAAC,iBAAiB,GAAG,UAAU,CAAC;QACxC,MAAM,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO;YACP,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,2DAA2D,CAAC,CAAC,CAAC,sDAAsD;gBACpI,CAAC,CAAC,yDAAyD;SAC9D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAmB;QACjC,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;QAC9F,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QACrC,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,OAAQ,QAAoC,CAAC,iBAAiB,CAAC;YAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,QAAmC,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO;YACP,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,IAAI,CAAC,MAAM;oBACX,CAAC,CAAC,2DAA2D;oBAC7D,CAAC,CAAC,sDAAsD;gBAC1D,CAAC,CAAC,wCAAwC;SAC7C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAiB;QAC5B,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAK,GAAG,CAAC,WAAW,CAAS,CAAC,iBAAiB,KAAK,UAAU,CAAC,CAAC;QACjJ,IAAI,CAAC,MAAM;YAAE,QAAQ,CAAC,IAAI,CAAC,2CAA2C,UAAU,OAAO,OAAO,uCAAuC,CAAC,CAAC;QACvI,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,eAAe,EAAE;YACjC,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;YAC1C,QAAQ;YACR,KAAK,EAAE,MAAM;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/approval/mcp-flow-create.d.ts

@@ -0,0 +1,3 @@
+import type { CreateMutateApprovalInput, McpApprovalOutcome } from "./mcp-flow.types.js";
+export declare function createMutateApproval(input: CreateMutateApprovalInput): Promise<McpApprovalOutcome>;
+//# sourceMappingURL=mcp-flow-create.d.ts.map

package/dist/approval/mcp-flow-create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-flow-create.d.ts","sourceRoot":"","sources":["../../src/approval/mcp-flow-create.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAmCzF,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CAgD7B"}

package/dist/approval/mcp-flow-create.js

@@ -0,0 +1,76 @@
+import { isReliableWorkspaceRoot, resolveGuardStorageRoot, } from "../bridge/guard-storage-root.js";
+import { recordRequestBinding } from "../bridge/request-binding-write.js";
+import { writePendingApprovalIndex } from "../bridge/pending-approval-index.js";
+import { resolveShellApprovalHash } from "./argv-fingerprint.js";
+import { createApprovalRequest } from "./client.js";
+import { redeemAfterApprovalWait } from "./mcp-flow-redeem.js";
+async function stagePendingApproval(input, created, storageRoot) {
+    const hash = resolveShellApprovalHash({
+        kind: input.proposalKind,
+        argv: input.argv,
+        approval_fingerprint: input.approval_fingerprint,
+    });
+    await writePendingApprovalIndex({
+        request_id: created.request_id,
+        argv_sha256: hash,
+        argv: [...input.argv],
+        install_id: input.installId,
+        open_url: created.open_url,
+        expires_at: created.expires_at,
+        event_id: input.eventId,
+        tool_input_sha256: input.tool_input_sha256 ?? null,
+        kind: input.proposalKind,
+        created_at: new Date().toISOString(),
+    }, { storageRoot });
+    return {
+        kind: "require_approval",
+        request_id: created.request_id,
+        open_url: created.open_url,
+        expires_at: created.expires_at,
+    };
+}
+export async function createMutateApproval(input) {
+    const storageRoot = resolveGuardStorageRoot(input.storageRoot);
+    if (!isReliableWorkspaceRoot(storageRoot)) {
+        return {
+            kind: "backend_unavailable",
+            message: "Cannot bind approval to a workspace root. Set proposal.cwd or context.workspace_root to the repo root where hooks run (must contain .git, .praxis, or .cursor/hooks.json).",
+        };
+    }
+    const created = await createApprovalRequest({
+        kind: input.proposalKind,
+        tier: "MUTATE",
+        argv: [...input.argv],
+        install_id: input.installId,
+        session_id: input.sessionId ?? null,
+        environment: input.environment ?? null,
+        raw_display: input.rawDisplay ?? input.argv.join(" "),
+        event_id: input.eventId,
+        policy_revision: input.policyRevision,
+        reasons: input.reasons,
+        tool_input_sha256: input.tool_input_sha256 ?? null,
+        approval_scope: "exact",
+    });
+    recordRequestBinding({
+        request_id: created.request_id,
+        storage_root: storageRoot,
+        argv: input.argv,
+        kind: input.proposalKind,
+        expires_at: created.expires_at,
+        approval_fingerprint: input.approval_fingerprint,
+    });
+    if (input.waitMs && input.waitMs > 0) {
+        return redeemAfterApprovalWait({
+            requestId: created.request_id,
+            argv: input.argv,
+            proposalKind: input.proposalKind,
+            storageRoot,
+            waitMs: input.waitMs,
+            sessionId: input.sessionId,
+            environment: input.environment,
+            approval_fingerprint: input.approval_fingerprint,
+        });
+    }
+    return stagePendingApproval(input, created, storageRoot);
+}
+//# sourceMappingURL=mcp-flow-create.js.map

package/dist/approval/mcp-flow-create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-flow-create.js","sourceRoot":"","sources":["../../src/approval/mcp-flow-create.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAG/D,KAAK,UAAU,oBAAoB,CACjC,KAAgC,EAChC,OAA0D,EAC1D,WAAmB;IAEnB,MAAM,IAAI,GAAG,wBAAwB,CAAC;QACpC,IAAI,EAAE,KAAK,CAAC,YAAY;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;KACjD,CAAC,CAAC;IACH,MAAM,yBAAyB,CAC7B;QACE,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;QACrB,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,KAAK,CAAC,OAAO;QACvB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;QAClD,IAAI,EAAE,KAAK,CAAC,YAAY;QACxB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,EACD,EAAE,WAAW,EAAE,CAChB,CAAC;IACF,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAgC;IAEhC,MAAM,WAAW,GAAG,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/D,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EACL,4KAA4K;SAC/K,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;QAC1C,IAAI,EAAE,KAAK,CAAC,YAAY;QACxB,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;QACrB,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,UAAU,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QACnC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;QACtC,WAAW,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACrD,QAAQ,EAAE,KAAK,CAAC,OAAO;QACvB,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;QAClD,cAAc,EAAE,OAAO;KACxB,CAAC,CAAC;IAEH,oBAAoB,CAAC;QACnB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,YAAY,EAAE,WAAW;QACzB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,YAAY;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;KACjD,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,uBAAuB,CAAC;YAC7B,SAAS,EAAE,OAAO,CAAC,UAAU;YAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW;YACX,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;SACjD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAC3D,CAAC"}

package/dist/approval/mcp-flow-existing.d.ts

@@ -0,0 +1,14 @@
+import type { ShellApprovalFingerprintPayload } from "../shell/analyze-command.js";
+import type { McpApprovalOutcome } from "./mcp-flow.types.js";
+export declare function resolveExistingMutateApproval(input: {
+    requestId: string;
+    grant: string | null;
+    argv: string[];
+    proposalKind: "shell" | "mcp";
+    storageRoot: string;
+    sessionId?: string | null;
+    environment?: string | null;
+    waitMs?: number | null;
+    approval_fingerprint?: ShellApprovalFingerprintPayload | null;
+}): Promise<McpApprovalOutcome>;
+//# sourceMappingURL=mcp-flow-existing.d.ts.map

package/dist/approval/mcp-flow-existing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-flow-existing.d.ts","sourceRoot":"","sources":["../../src/approval/mcp-flow-existing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AASnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,YAAY,EAAE,OAAO,GAAG,KAAK,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,oBAAoB,CAAC,EAAE,+BAA+B,GAAG,IAAI,CAAC;CAC/D,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAuC9B"}

package/dist/approval/mcp-flow-existing.js

@@ -0,0 +1,43 @@
+import { redeemApprovalAndRecordBridge } from "./redeem.js";
+import { verifyApprovalGrant } from "./grant.js";
+import { allowOutcomeFromRedeem, credentialNotRecordedOutcome, } from "./mcp-flow-outcome.js";
+import { pendingExistingApprovalOutcome } from "./mcp-flow-pending.js";
+import { redeemAfterApprovalWait } from "./mcp-flow-redeem.js";
+export async function resolveExistingMutateApproval(input) {
+    if (input.grant) {
+        const claims = verifyApprovalGrant(input.grant);
+        if (!claims || claims.request_id !== input.requestId) {
+            return { kind: "backend_unavailable", message: "invalid_grant" };
+        }
+    }
+    const pending = await pendingExistingApprovalOutcome(input);
+    if (pending)
+        return pending;
+    if (input.waitMs && input.waitMs > 0) {
+        return redeemAfterApprovalWait({
+            requestId: input.requestId,
+            argv: input.argv,
+            proposalKind: input.proposalKind,
+            storageRoot: input.storageRoot,
+            waitMs: input.waitMs,
+            sessionId: input.sessionId,
+            environment: input.environment,
+            approval_fingerprint: input.approval_fingerprint,
+        });
+    }
+    const redeem = await redeemApprovalAndRecordBridge({
+        request_id: input.requestId,
+        argv: input.argv,
+        kind: input.proposalKind,
+        storageRoot: input.storageRoot,
+        grant: input.grant,
+        environment: input.environment,
+        session_id: input.sessionId,
+        approval_fingerprint: input.approval_fingerprint,
+    });
+    if (!redeem.ticketRecorded) {
+        return credentialNotRecordedOutcome(input.requestId);
+    }
+    return allowOutcomeFromRedeem(redeem, input.requestId);
+}
+//# sourceMappingURL=mcp-flow-existing.js.map

package/dist/approval/mcp-flow-existing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-flow-existing.js","sourceRoot":"","sources":["../../src/approval/mcp-flow-existing.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAG/D,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAUnD;IACC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YACrD,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;QACnE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,uBAAuB,CAAC;YAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;SACjD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC;QACjD,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,YAAY;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;KACjD,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3B,OAAO,4BAA4B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;AACzD,CAAC"}

package/dist/approval/mcp-flow-outcome.d.ts

@@ -0,0 +1,5 @@
+import type { redeemApprovalAndRecordBridge } from "./redeem.js";
+import type { McpApprovalOutcome } from "./mcp-flow.types.js";
+export declare function allowOutcomeFromRedeem(redeem: Awaited<ReturnType<typeof redeemApprovalAndRecordBridge>>, requestId: string): McpApprovalOutcome;
+export declare function credentialNotRecordedOutcome(requestId: string): McpApprovalOutcome;
+//# sourceMappingURL=mcp-flow-outcome.d.ts.map

package/dist/approval/mcp-flow-outcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-flow-outcome.d.ts","sourceRoot":"","sources":["../../src/approval/mcp-flow-outcome.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAK9D,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,6BAA6B,CAAC,CAAC,EACjE,SAAS,EAAE,MAAM,GAChB,kBAAkB,CASpB;AAED,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,CAMlF"}

package/dist/approval/mcp-flow-outcome.js

@@ -0,0 +1,19 @@
+const CREDENTIAL_NOT_RECORDED_MSG = "Approval redeemed but no execution ticket was written for hooks. Check workspace permissions under .praxis/guard/tickets.";
+export function allowOutcomeFromRedeem(redeem, requestId) {
+    return {
+        kind: "allow",
+        redeemed: redeem.redeemed,
+        approved_by: redeem.approved_by,
+        bridgeRecorded: false,
+        ticketRecorded: redeem.ticketRecorded,
+        request_id: requestId,
+    };
+}
+export function credentialNotRecordedOutcome(requestId) {
+    return {
+        kind: "credential_not_recorded",
+        request_id: requestId,
+        message: CREDENTIAL_NOT_RECORDED_MSG,
+    };
+}
+//# sourceMappingURL=mcp-flow-outcome.js.map

package/dist/approval/mcp-flow-outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-flow-outcome.js","sourceRoot":"","sources":["../../src/approval/mcp-flow-outcome.ts"],"names":[],"mappings":"AAGA,MAAM,2BAA2B,GAC/B,2HAA2H,CAAC;AAE9H,MAAM,UAAU,sBAAsB,CACpC,MAAiE,EACjE,SAAiB;IAEjB,OAAO;QACL,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,SAAiB;IAC5D,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,2BAA2B;KACrC,CAAC;AACJ,CAAC"}

package/dist/approval/mcp-flow-pending.d.ts

@@ -0,0 +1,7 @@
+import type { McpApprovalOutcome } from "./mcp-flow.types.js";
+export declare function pendingExistingApprovalOutcome(input: {
+    requestId: string;
+    grant: string | null;
+    waitMs?: number | null;
+}): Promise<McpApprovalOutcome | null>;
+//# sourceMappingURL=mcp-flow-pending.d.ts.map

package/dist/approval/mcp-flow-pending.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-flow-pending.d.ts","sourceRoot":"","sources":["../../src/approval/mcp-flow-pending.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAM9D,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAmBrC"}

package/dist/approval/mcp-flow-pending.js

@@ -0,0 +1,25 @@
+import { DEFAULT_APP_URL } from "../config/default-endpoints.js";
+import { getApprovalRequest } from "./client.js";
+function defaultAppUrl() {
+    return process.env.PRAXIS_APP_URL?.trim() || DEFAULT_APP_URL;
+}
+export async function pendingExistingApprovalOutcome(input) {
+    const row = input.grant ? null : await getApprovalRequest(input.requestId);
+    const status = input.grant ? "approved" : row?.status;
+    if (status === "pending" && input.waitMs && input.waitMs > 0) {
+        return null;
+    }
+    if (status === "pending") {
+        return {
+            kind: "require_approval",
+            request_id: input.requestId,
+            open_url: row?.open_url ?? `${defaultAppUrl().replace(/\/$/, "")}/app/approvals/${input.requestId}`,
+            expires_at: row?.expires_at ?? new Date(Date.now() + 30 * 60 * 1000).toISOString(),
+        };
+    }
+    if (status === "denied") {
+        return { kind: "backend_unavailable", message: "approval_denied" };
+    }
+    return null;
+}
+//# sourceMappingURL=mcp-flow-pending.js.map

package/dist/approval/mcp-flow-pending.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-flow-pending.js","sourceRoot":"","sources":["../../src/approval/mcp-flow-pending.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGjD,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,eAAe,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAIpD;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC;IAEtD,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,GAAG,aAAa,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,KAAK,CAAC,SAAS,EAAE;YACnG,UAAU,EAAE,GAAG,EAAE,UAAU,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SACnF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/approval/mcp-flow-redeem.d.ts

@@ -0,0 +1,13 @@
+import type { McpApprovalOutcome } from "./mcp-flow.types.js";
+import type { ShellApprovalFingerprintPayload } from "../shell/analyze-command.js";
+export declare function redeemAfterApprovalWait(input: {
+    requestId: string;
+    argv: string[];
+    proposalKind: "shell" | "mcp";
+    storageRoot: string;
+    waitMs: number;
+    sessionId?: string | null;
+    environment?: string | null;
+    approval_fingerprint?: ShellApprovalFingerprintPayload | null;
+}): Promise<McpApprovalOutcome>;
+//# sourceMappingURL=mcp-flow-redeem.d.ts.map

package/dist/approval/mcp-flow-redeem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-flow-redeem.d.ts","sourceRoot":"","sources":["../../src/approval/mcp-flow-redeem.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAEnF,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,YAAY,EAAE,OAAO,GAAG,KAAK,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,oBAAoB,CAAC,EAAE,+BAA+B,GAAG,IAAI,CAAC;CAC/D,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAe9B"}

package/dist/approval/mcp-flow-redeem.js

@@ -0,0 +1,20 @@
+import { pollUntilApproved } from "./client.js";
+import { redeemApprovalAndRecordBridge } from "./redeem.js";
+import { allowOutcomeFromRedeem, credentialNotRecordedOutcome, } from "./mcp-flow-outcome.js";
+export async function redeemAfterApprovalWait(input) {
+    await pollUntilApproved(input.requestId, { timeoutMs: input.waitMs });
+    const redeem = await redeemApprovalAndRecordBridge({
+        request_id: input.requestId,
+        argv: input.argv,
+        kind: input.proposalKind,
+        storageRoot: input.storageRoot,
+        environment: input.environment,
+        session_id: input.sessionId,
+        approval_fingerprint: input.approval_fingerprint,
+    });
+    if (!redeem.ticketRecorded) {
+        return credentialNotRecordedOutcome(input.requestId);
+    }
+    return allowOutcomeFromRedeem(redeem, input.requestId);
+}
+//# sourceMappingURL=mcp-flow-redeem.js.map

package/dist/approval/mcp-flow-redeem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-flow-redeem.js","sourceRoot":"","sources":["../../src/approval/mcp-flow-redeem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAI/B,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAS7C;IACC,MAAM,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC;QACjD,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,YAAY;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;KACjD,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3B,OAAO,4BAA4B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;AACzD,CAAC"}

package/dist/approval/mcp-flow.d.ts

@@ -1,33 +1,10 @@
-import { resolveShellApprovalHash } from "./argv-fingerprint.js";
 import type { ShellApprovalFingerprintPayload } from "../shell/analyze-command.js";
-export type McpApprovalContext = {
-    request_id?: string | null;
-    grant?: string | null;
-};
-export type McpApprovalOutcome = {
-    kind: "require_approval";
-    request_id: string;
-    open_url: string;
-    expires_at: string;
-} | {
-    kind: "allow";
-    redeemed: boolean;
-    approved_by: string | null;
-    bridgeRecorded: boolean;
-    ticketRecorded: boolean;
-    request_id: string;
-} | {
-    kind: "credential_not_recorded";
-    request_id: string;
-    message: string;
-} | {
-    kind: "backend_unavailable";
-    message: string;
-};
-export declare function resolveMutateApproval(input: {
+import { resolveShellApprovalHash } from "./argv-fingerprint.js";
+import type { McpApprovalContext, McpApprovalOutcome } from "./mcp-flow.types.js";
+export type { McpApprovalContext, McpApprovalOutcome } from "./mcp-flow.types.js";
+type MutateApprovalInput = {
     argv: string[];
     proposalKind: "shell" | "mcp";
-    /** Workspace root for hook credentials (resolved if omitted). */
     storageRoot?: string;
     rawDisplay?: string;
     eventId: string;
@@ -39,7 +16,8 @@ export declare function resolveMutateApproval(input: {
     waitMs?: number | null;
     tool_input_sha256?: string | null;
     approval_fingerprint?: ShellApprovalFingerprintPayload | null;
-}): Promise<McpApprovalOutcome>;
+};
+export declare function resolveMutateApproval(input: MutateApprovalInput): Promise<McpApprovalOutcome>;
 export declare function argvFingerprint(argv: readonly string[]): string;
 export { resolveShellApprovalHash };
 //# sourceMappingURL=mcp-flow.d.ts.map