@pushary/agent-hooks 0.70.0 → 0.72.0

package/CHANGELOG.md

@@ -1,5 +1,49 @@
 # Changelog
 
+## 0.72.0
+
+### Setup tells you when Codex was already quarantined
+
+0.71.0 stopped setup from getting your Codex binary deleted. This handles the
+machines where it already happened. What macOS leaves behind passes every check
+setup made: the `codex` on your PATH is a small JavaScript launcher and it
+survives, `which codex` still answers, only the binary it launches is gone. So
+setup wired up an agent that could not start and reported success.
+
+It now says so before writing anything, and only when it can prove it: a vendor
+directory that exists and holds nothing the size of a native binary. A layout it
+does not recognise stays quiet, because telling somebody their working install is
+broken is the worse mistake. Reinstall with `npm install -g @openai/codex` or
+`brew install --cask codex`.
+
+### Setup no longer runs the Hermes binary either
+
+The same hazard, one agent over. When the config edit that enables the plugin
+failed, setup fell back to running `hermes plugins enable pushary` — executing a
+third-party agent binary, which is exactly what cost people their Codex install.
+The fallback also did not work, because `hermes plugins enable` does not see a
+pip install. It is gone, and a failed config edit now tells you the one line to
+add by hand.
+
+Executing an agent binary is now a build failure rather than a habit: every
+source file in this package is scanned on every CI run, and the check knows the
+difference between running `codex` and asking `which` where it is.
+
+## 0.71.0
+
+### Setting up Codex no longer gets Codex deleted by macOS
+
+Setup ran `codex --version` to decide whether your Codex was new enough for
+native hooks. On macOS, executing a binary hands it to XProtect, and current
+definitions false-positive on the Codex CLI: macOS killed it and moved it to the
+Trash. Reading a version number destroyed the tool it was asking, mid-setup, and
+the only thing you saw was "codex was not opened because it contains malware".
+
+Setup no longer runs Codex, or any other agent's binary, to learn something about
+it. The version now comes from the package manifest next to the binary, which
+covers npm, bun, pnpm and yarn installs, and from `brew list` for the Homebrew
+cask, which ships no manifest. Same result, nothing launched.
+
 ## 0.70.0
 
 ### A key you name is the key you get

package/dist/bin/pushary-setup.js

@@ -110,8 +110,8 @@ import {
 } from "../chunk-KZERVKTD.js";
 
 // bin/pushary-setup.ts
-import { existsSync, readFileSync, writeFileSync, mkdirSync, cpSync, rmSync, renameSync } from "fs";
-import { join, dirname, basename } from "path";
+import { existsSync, readFileSync, writeFileSync, mkdirSync, cpSync, rmSync, renameSync, realpathSync, readdirSync, statSync } from "fs";
+import { join as join2, dirname as dirname2, basename } from "path";
 import { homedir, tmpdir } from "os";
 import { execSync as execSync2 } from "child_process";
 import { checkbox, input, confirm } from "@inquirer/prompts";
@@ -198,6 +198,89 @@ var describeClosing = (facts) => {
   };
 };
 
+// src/setup/codex-version.ts
+import { dirname, join } from "path";
+var parseCodexVersion = (raw) => {
+  const match = raw.match(/(\d+)\.(\d+)\.(\d+)/);
+  if (!match) return null;
+  return [Number(match[1]), Number(match[2]), Number(match[3])];
+};
+var compareCodexVersion = (a, b) => {
+  for (let i = 0; i < 3; i++) {
+    if (a[i] !== b[i]) return a[i] < b[i] ? -1 : 1;
+  }
+  return 0;
+};
+var versionFromManifest = (probe, binPath) => {
+  let dir = dirname(binPath);
+  for (let depth = 0; depth < 4; depth++) {
+    const raw = probe.readFile(join(dir, "package.json"));
+    if (raw) {
+      try {
+        const { version } = JSON.parse(raw);
+        if (typeof version === "string") {
+          const parsed = parseCodexVersion(version);
+          if (parsed) return parsed;
+        }
+      } catch {
+      }
+    }
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return null;
+};
+var readCodexVersion = (probe) => {
+  const onPath = probe.resolveOnPath();
+  if (onPath) {
+    const fromManifest = versionFromManifest(probe, probe.realpath(onPath) ?? onPath);
+    if (fromManifest) return fromManifest;
+  }
+  const brew = probe.brewVersions();
+  return brew ? parseCodexVersion(brew) : null;
+};
+
+// src/setup/codex-install.ts
+var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;
+var packageRootFor = (probe, binPath) => {
+  let dir = probe.dirname(binPath);
+  for (let depth = 0; depth < 4; depth++) {
+    if (probe.exists(probe.join(dir, "package.json"))) return dir;
+    const parent = probe.dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+  return null;
+};
+var holdsNativeBinary = (probe, dir, depth = 0) => {
+  if (depth > 4) return false;
+  const entries = probe.listDir(dir);
+  if (!entries) return false;
+  return entries.some((entry) => {
+    const path = probe.join(dir, entry);
+    const size = probe.fileSize(path);
+    if (size !== null) return size >= NATIVE_BINARY_MIN_BYTES;
+    return holdsNativeBinary(probe, path, depth + 1);
+  });
+};
+var platformPackages = (probe, packageRoot) => {
+  const scopes = [probe.join(packageRoot, "node_modules", "@openai"), probe.dirname(packageRoot)];
+  return scopes.flatMap(
+    (scope) => (probe.listDir(scope) ?? []).filter((entry) => entry.startsWith("codex-")).map((entry) => probe.join(scope, entry))
+  );
+};
+var checkCodexInstall = (probe) => {
+  const onPath = probe.resolveOnPath();
+  if (!onPath) return { kind: "unknown" };
+  const packageRoot = packageRootFor(probe, probe.realpath(onPath) ?? onPath);
+  if (!packageRoot) return { kind: "unknown" };
+  const vendors = platformPackages(probe, packageRoot).map((pkg) => probe.join(pkg, "vendor")).filter((vendor) => probe.exists(vendor));
+  if (vendors.length === 0) return { kind: "unknown" };
+  if (vendors.some((vendor) => holdsNativeBinary(probe, vendor))) return { kind: "ok" };
+  return { kind: "binary-missing", vendorDir: vendors[0] };
+};
+
 // src/skills-cli.ts
 import { execSync } from "child_process";
 var installSkillViaSkillsCli = (agent) => {
@@ -435,7 +518,7 @@ var readAgentJson = (filePath) => {
   );
 };
 var writeJson = (filePath, data) => {
-  const dir = dirname(filePath);
+  const dir = dirname2(filePath);
   if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
   writeFileSync(filePath, JSON.stringify(data, null, 2) + "\n", "utf-8");
 };
@@ -514,23 +597,23 @@ var installGlobally2 = async () => {
 var _cachedSkillContent = null;
 var fetchSkillContent = async () => {
   if (_cachedSkillContent) return _cachedSkillContent;
-  const __dirname = dirname(fileURLToPath(import.meta.url));
+  const __dirname = dirname2(fileURLToPath(import.meta.url));
   const candidates = [
-    join(__dirname, "..", "..", "data", "SKILL.md"),
-    join(__dirname, "..", "data", "SKILL.md")
+    join2(__dirname, "..", "..", "data", "SKILL.md"),
+    join2(__dirname, "..", "data", "SKILL.md")
   ];
   const source = candidates.find((path) => existsSync(path));
   if (!source) throw new Error("packaged skill not found");
   _cachedSkillContent = readFileSync(source, "utf-8");
   return _cachedSkillContent;
 };
-var skillsCliInUse = () => isInstalled("skills") || existsSync(join(homedir(), ".agents", "skills"));
+var skillsCliInUse = () => isInstalled("skills") || existsSync(join2(homedir(), ".agents", "skills"));
 var installSkill = async (agent, fallbackDir) => {
   await spinner("Installing Pushary skill", async () => {
     if (skillsCliInUse() && installSkillViaSkillsCli(agent)) return;
     const content = await fetchSkillContent();
     if (!existsSync(fallbackDir)) mkdirSync(fallbackDir, { recursive: true });
-    writeFileSync(join(fallbackDir, "SKILL.md"), content, "utf-8");
+    writeFileSync(join2(fallbackDir, "SKILL.md"), content, "utf-8");
   });
 };
 var setupClaudeCode = async (apiKey) => {
@@ -577,8 +660,8 @@ var resolveHermesPython = () => {
     }
   } catch {
   }
-  const venvRoot = join(homedir(), ".hermes", "hermes-agent", "venv");
-  const candidates = IS_WINDOWS ? [join(venvRoot, "Scripts", "python.exe"), join(venvRoot, "Scripts", "python3.exe")] : [join(venvRoot, "bin", "python3"), join(venvRoot, "bin", "python")];
+  const venvRoot = join2(homedir(), ".hermes", "hermes-agent", "venv");
+  const candidates = IS_WINDOWS ? [join2(venvRoot, "Scripts", "python.exe"), join2(venvRoot, "Scripts", "python3.exe")] : [join2(venvRoot, "bin", "python3"), join2(venvRoot, "bin", "python")];
   return candidates.find(existsSync) ?? null;
 };
 var ensurePip = (python) => {
@@ -594,13 +677,13 @@ var ensurePip = (python) => {
 };
 var enablePusharyPlugin = (python) => {
   const snippet = 'from hermes_cli.config import load_config, save_config; c = load_config(); p = c.get("plugins") if isinstance(c.get("plugins"), dict) else {}; e = p.get("enabled") if isinstance(p.get("enabled"), list) else []; p["enabled"] = (e + ["pushary"]) if "pushary" not in e else e; c["plugins"] = p; a = c.get("agent") if isinstance(c.get("agent"), dict) else {}; d = a.get("disabled_toolsets") if isinstance(a.get("disabled_toolsets"), list) else []; a["disabled_toolsets"] = (d + ["clarify"]) if "clarify" not in d else d; c["agent"] = a; save_config(c)';
-  const scriptPath = join(tmpdir(), `pushary-hermes-${process.pid}.py`);
+  const scriptPath = join2(tmpdir(), `pushary-hermes-${process.pid}.py`);
   try {
     writeFileSync(scriptPath, snippet.split("; ").join("\n"), "utf-8");
     execSync2(`"${python}" "${scriptPath}"`, { stdio: "pipe", timeout: 15e3 });
-    return;
+    return true;
   } catch {
-    execSync2("hermes plugins enable pushary", { stdio: "ignore", timeout: 1e4 });
+    return false;
   } finally {
     try {
       rmSync(scriptPath, { force: true });
@@ -627,9 +710,14 @@ var setupHermes = async (_apiKey) => {
     ensurePip(python);
     execSync2(`"${python}" -m pip install --upgrade hermes-plugin-pushary`, { stdio: "pipe", timeout: 18e4 });
   });
+  let pluginEnabled = false;
   await spinner("Enabling plugin + routing questions to push", async () => {
-    enablePusharyPlugin(python);
+    pluginEnabled = enablePusharyPlugin(python);
   });
+  if (!pluginEnabled) {
+    console.log(`  ${yellow("!")} Installed the plugin, but could not edit Hermes' config.`);
+    noteManual('Add "pushary" to plugins.enabled in ~/.hermes/config.yaml, and "clarify" to agent.disabled_toolsets');
+  }
   console.log();
   console.log(`  ${dim("What this configured:")}`);
   console.log(`  ${dim("\u2022")} Native tools: pushary_notify, pushary_ask, pushary_wait, pushary_cancel`);
@@ -638,27 +726,69 @@ var setupHermes = async (_apiKey) => {
   console.log(`  ${dim("\u2022")} Permission gating: set ${bold("PUSHARY_GATE_TOOLS")} to require lock-screen approval for risky tools`);
   console.log(`  ${dim("To re-enable terminal prompts:")} remove ${bold("clarify")} from ${dim("agent.disabled_toolsets")} in ~/.hermes/config.yaml`);
 };
-var CODEX_HOOKS_JSON = join(CODEX_HOME, "hooks.json");
+var CODEX_HOOKS_JSON = join2(CODEX_HOME, "hooks.json");
 var CODEX_HOOKS_MIN_VERSION = [0, 122, 0];
 var CODEX_TRUST_VERIFIED_MAX = [0, 142, 2];
-var parseCodexVersion = (raw) => {
-  const match = raw.match(/(\d+)\.(\d+)\.(\d+)/);
-  if (!match) return null;
-  return [Number(match[1]), Number(match[2]), Number(match[3])];
-};
-var compareCodexVersion = (a, b) => {
-  for (let i = 0; i < 3; i++) {
-    if (a[i] !== b[i]) return a[i] < b[i] ? -1 : 1;
+var codexOnPath = () => {
+  const whichCmd = IS_WINDOWS ? "where" : "which";
+  try {
+    const found = execSync2(`${whichCmd} codex`, { encoding: "utf-8", stdio: "pipe", timeout: 5e3 }).split("\n")[0].trim();
+    return found || null;
+  } catch {
+    return null;
   }
-  return 0;
 };
-var readCodexVersion = () => {
+var codexRealpath = (path) => {
   try {
-    return parseCodexVersion(execSync2("codex --version", { encoding: "utf-8", stdio: "pipe", timeout: 1e4 }));
+    return realpathSync(path);
   } catch {
     return null;
   }
 };
+var detectCodexVersion = () => readCodexVersion({
+  resolveOnPath: codexOnPath,
+  realpath: codexRealpath,
+  readFile: (path) => {
+    try {
+      return readFileSync(path, "utf-8");
+    } catch {
+      return null;
+    }
+  },
+  brewVersions: () => {
+    try {
+      return execSync2("brew list --versions codex", {
+        encoding: "utf-8",
+        stdio: "pipe",
+        timeout: 1e4
+      }).trim() || null;
+    } catch {
+      return null;
+    }
+  }
+});
+var detectCodexInstall = () => checkCodexInstall({
+  resolveOnPath: codexOnPath,
+  realpath: codexRealpath,
+  exists: existsSync,
+  listDir: (path) => {
+    try {
+      return readdirSync(path);
+    } catch {
+      return null;
+    }
+  },
+  fileSize: (path) => {
+    try {
+      const stat = statSync(path);
+      return stat.isFile() ? stat.size : null;
+    } catch {
+      return null;
+    }
+  },
+  join: join2,
+  dirname: dirname2
+});
 var codexSupportsHooks = (version) => version !== null && compareCodexVersion(version, CODEX_HOOKS_MIN_VERSION) >= 0;
 var codexTrustAutoSupported = (version) => version !== null && codexSupportsHooks(version) && compareCodexVersion(version, CODEX_TRUST_VERIFIED_MAX) <= 0;
 var removeCodexNotifyEntry = (codexConfig) => {
@@ -704,6 +834,16 @@ var setupCodex = async (apiKey) => {
     console.log(`  ${dim("Install Codex and re-run setup to configure.")}`);
     return "skipped";
   }
+  if (detectCodexInstall().kind === "binary-missing") {
+    console.log(`  ${yellow("!")} Your Codex install is missing the binary it runs.`);
+    console.log(`  ${dim("A Pushary setup before 0.71.0 asked Codex its version. On macOS that hands")}`);
+    console.log(`  ${dim("the binary to XProtect, which quarantines the Codex CLI and moves it to the")}`);
+    console.log(`  ${dim("Trash. Setup no longer runs it. Reinstall Codex to get it back:")}`);
+    console.log(`  ${cyan("npm install -g @openai/codex")}`);
+    console.log(`  ${dim("Configuring anyway, so it is ready when Codex is.")}`);
+    console.log();
+    noteManual("Reinstall Codex: a Pushary setup before 0.71.0 got its binary quarantined by macOS");
+  }
   await installGlobally2();
   const codexConfig = codexConfigToml();
   await spinner("Adding Pushary MCP server (key embedded, auto-allowed)", async () => {
@@ -711,7 +851,7 @@ var setupCodex = async (apiKey) => {
     addCodexMcpServer(config, apiKey);
     writeFileAtomic(codexConfig, stringifyTOML(config), KEY_FILE_MODE);
   });
-  const codexVersion = readCodexVersion();
+  const codexVersion = detectCodexVersion();
   const hooksSupported = codexSupportsHooks(codexVersion);
   const trustAuto = codexTrustAutoSupported(codexVersion);
   let trusted = false;
@@ -739,9 +879,16 @@ var setupCodex = async (apiKey) => {
       removeCodexNotifyEntry(codexConfig);
     });
   } else {
-    console.log(`  ${yellow("!")} This Codex version predates native hooks (needs ${CODEX_HOOKS_MIN_VERSION.join(".")}+).`);
-    console.log(`  ${dim("Installing the deprecated notify handler instead. Upgrade Codex and re-run setup")}`);
-    console.log(`  ${dim("to get policy enforcement, phone approvals, and session tracking.")}`);
+    if (codexVersion !== null) {
+      console.log(`  ${yellow("!")} This Codex version predates native hooks (needs ${CODEX_HOOKS_MIN_VERSION.join(".")}+).`);
+      console.log(`  ${dim("Installing the deprecated notify handler instead. Upgrade Codex and re-run setup")}`);
+      console.log(`  ${dim("to get policy enforcement, phone approvals, and session tracking.")}`);
+    } else {
+      console.log(`  ${yellow("!")} Could not read your Codex version from its install, so hooks were skipped.`);
+      console.log(`  ${dim("Deliberately not run: asking the binary its version is what macOS quarantines.")}`);
+      console.log(`  ${dim(`Installing the notify handler, which works on every version. If Codex is ${CODEX_HOOKS_MIN_VERSION.join(".")}+,`)}`);
+      console.log(`  ${dim("re-run setup after installing it through npm or Homebrew to get native hooks.")}`);
+    }
     await spinner("Adding notify handler for Codex events (deprecated)", async () => {
       addCodexNotifyEntry(codexConfig);
     });
@@ -779,17 +926,17 @@ var setupCodex = async (apiKey) => {
   }
 };
 var resolveBundledPlugin = () => {
-  const dir = dirname(fileURLToPath(import.meta.url));
+  const dir = dirname2(fileURLToPath(import.meta.url));
   const candidates = [
-    join(dir, "..", "..", "data", "cursor-plugin"),
-    join(dir, "..", "data", "cursor-plugin"),
-    join(dir, "..", "..", "..", "cursor-plugin"),
-    join(dir, "..", "..", "cursor-plugin")
+    join2(dir, "..", "..", "data", "cursor-plugin"),
+    join2(dir, "..", "data", "cursor-plugin"),
+    join2(dir, "..", "..", "..", "cursor-plugin"),
+    join2(dir, "..", "..", "cursor-plugin")
   ];
-  return candidates.find((p) => existsSync(join(p, ".cursor-plugin", "plugin.json"))) ?? null;
+  return candidates.find((p) => existsSync(join2(p, ".cursor-plugin", "plugin.json"))) ?? null;
 };
 var installCursorUserHooks = (gateScript) => {
-  const template = readJson(join(CURSOR_PLUGIN_DIR, "hooks", "hooks.json")).hooks?.beforeShellExecution?.[0];
+  const template = readJson(join2(CURSOR_PLUGIN_DIR, "hooks", "hooks.json")).hooks?.beforeShellExecution?.[0];
   if (!template) throw new Error("bundled Cursor hooks.json missing a beforeShellExecution entry");
   const entry = { ...template, command: `node "${gateScript}"` };
   let userHooks = {};
@@ -811,7 +958,7 @@ var installCursorUserHooks = (gateScript) => {
   writeJson(CURSOR_USER_HOOKS, { ...userHooks, version: userHooks.version ?? 1, hooks });
 };
 var neutralizePluginGate = () => {
-  const path = join(CURSOR_PLUGIN_DIR, "hooks", "hooks.json");
+  const path = join2(CURSOR_PLUGIN_DIR, "hooks", "hooks.json");
   if (!existsSync(path)) return;
   const data = readJson(path);
   if (data.hooks && "beforeShellExecution" in data.hooks) {
@@ -826,7 +973,7 @@ var setupCursor = async (apiKey) => {
   const source = resolveBundledPlugin();
   if (!source) throw new Error("bundled Cursor plugin not found in this package");
   await spinner("Installing Pushary plugin", async () => {
-    const staging = join(dirname(CURSOR_PLUGIN_DIR), `.pushary-staging-${process.pid}`);
+    const staging = join2(dirname2(CURSOR_PLUGIN_DIR), `.pushary-staging-${process.pid}`);
     const backup = `${CURSOR_PLUGIN_DIR}.pushary-backup-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`;
     rmSync(staging, { recursive: true, force: true });
     try {
@@ -834,7 +981,7 @@ var setupCursor = async (apiKey) => {
         recursive: true,
         filter: (p) => !["tools", "node_modules", ".git", ".DS_Store"].includes(basename(p))
       });
-      const staged = readJsonSafe(join(staging, ".cursor-plugin", "plugin.json"));
+      const staged = readJsonSafe(join2(staging, ".cursor-plugin", "plugin.json"));
       if (staged.kind !== "ok") {
         throw new Error("staged Cursor plugin is missing or has an unreadable plugin.json");
       }
@@ -852,7 +999,7 @@ var setupCursor = async (apiKey) => {
     }
   });
   await spinner("Linking your API key", async () => {
-    const mcpPath = join(CURSOR_PLUGIN_DIR, "mcp.json");
+    const mcpPath = join2(CURSOR_PLUGIN_DIR, "mcp.json");
     const mcp = readAgentJson(mcpPath);
     const servers = mcp.mcpServers ?? {};
     if (servers.pushary) {
@@ -862,7 +1009,7 @@ var setupCursor = async (apiKey) => {
     }
   });
   await spinner("Registering permission gate (~/.cursor/hooks.json)", async () => {
-    installCursorUserHooks(join(CURSOR_PLUGIN_DIR, "scripts", "pushary-gate.mjs"));
+    installCursorUserHooks(join2(CURSOR_PLUGIN_DIR, "scripts", "pushary-gate.mjs"));
     neutralizePluginGate();
   });
   console.log();
@@ -874,23 +1021,23 @@ var setupCursor = async (apiKey) => {
   noteManual("Fully quit and reopen Cursor. A Reload Window may not be enough.");
 };
 var resolveBundledVsCodePlugin = () => {
-  const dir = dirname(fileURLToPath(import.meta.url));
+  const dir = dirname2(fileURLToPath(import.meta.url));
   const candidates = [
-    join(dir, "..", "..", "data", "vscode-plugin"),
-    join(dir, "..", "data", "vscode-plugin"),
-    join(dir, "..", "..", "..", "vscode-plugin"),
-    join(dir, "..", "..", "vscode-plugin")
+    join2(dir, "..", "..", "data", "vscode-plugin"),
+    join2(dir, "..", "data", "vscode-plugin"),
+    join2(dir, "..", "..", "..", "vscode-plugin"),
+    join2(dir, "..", "..", "vscode-plugin")
   ];
-  return candidates.find((p) => existsSync(join(p, ".claude-plugin", "plugin.json"))) ?? null;
+  return candidates.find((p) => existsSync(join2(p, ".claude-plugin", "plugin.json"))) ?? null;
 };
 var pinVsCodeGatePath = (pluginDir) => {
-  const hooksPath = join(pluginDir, "hooks", "hooks.json");
+  const hooksPath = join2(pluginDir, "hooks", "hooks.json");
   const data = readJson(hooksPath);
   const entries = data.hooks?.PreToolUse;
   if (!Array.isArray(entries) || entries.length === 0) {
     throw new Error("bundled VS Code hooks.json is missing a PreToolUse entry");
   }
-  const gate = join(pluginDir, "scripts", "pushary-gate.mjs");
+  const gate = join2(pluginDir, "scripts", "pushary-gate.mjs");
   data.hooks.PreToolUse = entries.map((entry) => ({ ...entry, command: `node "${gate}"` }));
   writeJson(hooksPath, data);
 };
@@ -906,7 +1053,7 @@ var registerVsCodePlugin = (pluginDir) => {
       continue;
     }
     if (current !== null) backupFile(settingsPath);
-    mkdirSync(dirname(settingsPath), { recursive: true });
+    mkdirSync(dirname2(settingsPath), { recursive: true });
     writeFileAtomic(settingsPath, result.content);
     written.push(settingsPath);
   }
@@ -919,16 +1066,16 @@ var setupVsCode = async (apiKey) => {
   const source = resolveBundledVsCodePlugin();
   if (!source) throw new Error("bundled VS Code plugin not found in this package");
   await spinner("Installing Pushary plugin", async () => {
-    const staging = join(dirname(VSCODE_PLUGIN_DIR), `.pushary-staging-vscode-${process.pid}`);
+    const staging = join2(dirname2(VSCODE_PLUGIN_DIR), `.pushary-staging-vscode-${process.pid}`);
     const backup = `${VSCODE_PLUGIN_DIR}.pushary-backup-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`;
-    mkdirSync(dirname(VSCODE_PLUGIN_DIR), { recursive: true });
+    mkdirSync(dirname2(VSCODE_PLUGIN_DIR), { recursive: true });
     rmSync(staging, { recursive: true, force: true });
     try {
       cpSync(source, staging, {
         recursive: true,
         filter: (p) => !["tools", "node_modules", ".git", ".DS_Store"].includes(basename(p))
       });
-      const staged = readJsonSafe(join(staging, ".claude-plugin", "plugin.json"));
+      const staged = readJsonSafe(join2(staging, ".claude-plugin", "plugin.json"));
       if (staged.kind !== "ok") {
         throw new Error("staged VS Code plugin is missing or has an unreadable plugin.json");
       }
@@ -946,7 +1093,7 @@ var setupVsCode = async (apiKey) => {
     }
   });
   await spinner("Linking your API key", async () => {
-    const mcpPath = join(VSCODE_PLUGIN_DIR, ".mcp.json");
+    const mcpPath = join2(VSCODE_PLUGIN_DIR, ".mcp.json");
     const mcp = readAgentJson(mcpPath);
     const servers = mcp.mcpServers ?? {};
     if (servers.pushary) {
@@ -1086,27 +1233,27 @@ var agentIsWired = (agent) => {
       return claudeWired({
         claudeJson: readJson2(CLAUDE_JSON),
         settings: readJson2(CLAUDE_SETTINGS),
-        skillExists: existsSync(join(CLAUDE_SKILL_DIR, "SKILL.md"))
+        skillExists: existsSync(join2(CLAUDE_SKILL_DIR, "SKILL.md"))
       });
     case "codex": {
       let config = null;
       try {
-        config = parseTOML(readFileSync(join(CODEX_HOME, "config.toml"), "utf-8"));
+        config = parseTOML(readFileSync(join2(CODEX_HOME, "config.toml"), "utf-8"));
       } catch {
         config = null;
       }
       return codexWired({
         config,
         hooks: readJson2(CODEX_HOOKS_JSON),
-        skillExists: existsSync(join(CODEX_SKILL_DIR, "SKILL.md"))
+        skillExists: existsSync(join2(CODEX_SKILL_DIR, "SKILL.md"))
       });
     }
     case "gemini_cli":
       return geminiWired({ settings: readJson2(GEMINI_SETTINGS) });
     case "cursor":
-      return existsSync(join(CURSOR_PLUGIN_DIR, "mcp.json"));
+      return existsSync(join2(CURSOR_PLUGIN_DIR, "mcp.json"));
     case "vscode":
-      return existsSync(join(VSCODE_PLUGIN_DIR, ".mcp.json"));
+      return existsSync(join2(VSCODE_PLUGIN_DIR, ".mcp.json"));
     default:
       return true;
   }
@@ -1134,8 +1281,8 @@ var offerProjectInstructions = async (agents, options) => {
   });
   if (!wanted) return;
   for (const target of targets) {
-    await spinner(`Writing managed block to ${join(process.cwd(), target.file)}`, async () => {
-      writeInstructionBlock(join(process.cwd(), target.file), renderProjectAgentInstructions(target.label));
+    await spinner(`Writing managed block to ${join2(process.cwd(), target.file)}`, async () => {
+      writeInstructionBlock(join2(process.cwd(), target.file), renderProjectAgentInstructions(target.label));
     }, { optional: true });
   }
   console.log(`  ${dim("Commit the file to share it. Teammates without a key fall back to the terminal.")}`);
@@ -1286,12 +1433,12 @@ var resolveAgents = async (options) => {
   });
 };
 var AGENT_TARGETS = {
-  claude_code: [CLAUDE_JSON, CLAUDE_SETTINGS, join(CLAUDE_SKILL_DIR, "SKILL.md")],
-  codex: [join(CODEX_HOME, "config.toml"), CODEX_HOOKS_JSON, join(CODEX_SKILL_DIR, "SKILL.md"), CODEX_AGENTS_MD],
+  claude_code: [CLAUDE_JSON, CLAUDE_SETTINGS, join2(CLAUDE_SKILL_DIR, "SKILL.md")],
+  codex: [join2(CODEX_HOME, "config.toml"), CODEX_HOOKS_JSON, join2(CODEX_SKILL_DIR, "SKILL.md"), CODEX_AGENTS_MD],
   gemini_cli: [GEMINI_SETTINGS, GEMINI_MD],
   hermes: ["the Hermes virtualenv (pip install pushary-hermes)"],
-  cursor: [join(CURSOR_PLUGIN_DIR, "mcp.json"), CURSOR_USER_HOOKS],
-  vscode: [join(VSCODE_PLUGIN_DIR, ".mcp.json"), ...vscodeSettingsTargets(existsSync)],
+  cursor: [join2(CURSOR_PLUGIN_DIR, "mcp.json"), CURSOR_USER_HOOKS],
+  vscode: [join2(VSCODE_PLUGIN_DIR, ".mcp.json"), ...vscodeSettingsTargets(existsSync)],
   custom: ["nothing (prints connection details only)"]
 };
 var reportDryRun = (apiKey, agents, keyCheck) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.70.0",
+  "version": "0.72.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",