@pushary/agent-hooks 0.85.0 → 0.85.2

package/data/vscode-plugin/scripts/pushary-gate.mjs

@@ -40,20 +40,17 @@
 // 60s timeout fires.
 
 import { createHash } from 'node:crypto'
-import { homedir, hostname, tmpdir } from 'node:os'
-import { existsSync, readFileSync, writeFileSync } from 'node:fs'
+import { homedir, hostname } from 'node:os'
+import { existsSync, readFileSync } from 'node:fs'
 import { basename, dirname, join } from 'node:path'
 import { fileURLToPath } from 'node:url'
 
 const BASE_URL = process.env.PUSHARY_BASE_URL?.trim() || process.env.PUSHARY_API_URL?.trim() || 'https://pushary.com'
 const MCP_URL = `${BASE_URL}/api/mcp/mcp`
-const POLICY_CACHE_TTL_MS = 5 * 60 * 1000
 const MAX_BLOCK_MS = 45_000 // longest we can wait inside VS Code's hook timeout
 const WAIT_CHUNK_MS = 20_000 // per wait_for_answer long-poll
 const POLL_GAP_MS = 1_500 // pause between polls after a transient error
 const NET_TIMEOUT_MS = 27_000 // abort a single MCP request
-const POLICY_TIMEOUT_MS = 10_000
-const MODE_TIMEOUT_MS = 3_000
 const HARD_GUARD_MS = 55_000 // force a graceful "ask" before the 60s hook timeout
 
 // Which commands are worth a phone approval. This is the only place the set is
@@ -217,73 +214,63 @@ const callTool = async (apiKey, name, args) => {
   return JSON.parse(payload)
 }
 
-const getJson = async (path, apiKey, timeoutMs) => {
-  const response = await fetch(`${BASE_URL}${path}`, {
-    headers: { Authorization: `Bearer ${apiKey}` },
-    signal: AbortSignal.timeout(timeoutMs),
-  })
-  if (!response.ok) throw new Error(`GET ${path} ${response.status}`)
-  return response.json()
-}
-
-// ── Policy (mirrors @pushary/agent-hooks policy.ts) ───────────────────────────
-const isPolicyConfig = (d) =>
-  !!d && typeof d === 'object' && Array.isArray(d.policies) && typeof d.defaultTimeoutSeconds === 'number' && typeof d.defaultTimeoutAction === 'string'
-
-const policyCacheFile = (apiKey) => join(tmpdir(), `pushary-policy-vscode-${createHash('sha256').update(apiKey).digest('hex').slice(0, 12)}.json`)
-
-const getPolicy = async (apiKey) => {
-  const path = policyCacheFile(apiKey)
-  let stale = null
-  if (existsSync(path)) {
-    try {
-      const cached = JSON.parse(readFileSync(path, 'utf-8'))
-      if (isPolicyConfig(cached)) {
-        if (!cached._cachedAt || Date.now() - cached._cachedAt < POLICY_CACHE_TTL_MS) return cached
-        stale = cached
-      }
-    } catch {}
-  }
-  try {
-    const fresh = await withRetry(async () => {
-      const raw = await getJson('/api/mcp/policy', apiKey, POLICY_TIMEOUT_MS)
-      if (!isPolicyConfig(raw)) throw new Error('invalid policy')
-      return raw
-    }, 2)
-    try {
-      writeFileSync(path, JSON.stringify({ ...fresh, _cachedAt: Date.now() }), 'utf-8')
-    } catch {}
-    return fresh
-  } catch (error) {
-    if (stale) return stale
-    throw error
-  }
-}
-
-const resolvePolicy = (config, toolName, modeOverride) => {
-  const base =
-    config.policies.find((p) => p.tool === toolName) ??
-    config.policies.find((p) => p.tool === '*') ??
-    {
-      tool: toolName,
-      timeoutSeconds: config.defaultTimeoutSeconds,
-      timeoutAction: config.defaultTimeoutAction,
-      mode: config.defaultMode ?? 'push_first',
-      pushFirstSeconds: config.defaultPushFirstSeconds ?? 20,
-    }
-  const effective = modeOverride ?? config.modeOverride
-  return effective ? { ...base, mode: effective } : base
-}
-
-const APPROVAL_MODES = ['push_only', 'terminal_only', 'push_first', 'notify_only']
-const fetchModeState = async (apiKey, sessionId) => {
+// ── The verdict ─────────────────────────────────────────────────────────────
+// Asked for, not worked out here.
+//
+// The copy this replaces matched on tool NAME alone: it looked for a rule whose
+// `tool` equalled "Bash", so every argument-scoped rule a user had written --
+// `Bash(rm:*)`, `Bash(git push)` -- was skipped entirely and the broad rule or
+// the default applied instead. A deny written to stop `rm -rf` did nothing here
+// while it worked in Claude Code and Cursor, and it never gained
+// `isSafeReadOnlyCommand` either, so `git status` reached the phone.
+//
+// Its mode fetch also read an unreachable server as `kill: false`, which is not
+// "you are not halted" but "we could not ask". A remote stop nobody could fetch
+// looked like a clean bill of health.
+//
+// The server now answers with the same `resolveGate` the CLI runs, over the same
+// state, and it distinguishes state it could not establish from state that says
+// no. This asks it.
+
+const GATE_TIMEOUT_MS = 5000
+
+/**
+ * The verdict for one command, or null if we could not get one.
+ *
+ * Null is not a denial and not an approval: every failure hands the call back to
+ * VS Code's own prompt, exactly as if this gate were not installed.
+ *
+ * Sent as `cursor`, which is the wire's identity for an editor gate: a caller
+ * with a hard block budget and no hook config of its own. The only consequence
+ * is which policy profile answers, and a site without an explicit Cursor profile
+ * falls back to the all-agents one, which is what this gate already received.
+ *
+ * No `repoKey` is sent, because deriving one means walking parent directories
+ * for a `.git` and parsing its config, and a second implementation of that rule
+ * is how the last drift started. Without one the server correctly declines to
+ * apply repo-scoped rules, since an unknown repository is not evidence of a
+ * match -- which is what this gate already got, by being filtered server-side.
+ */
+const decide = async (apiKey, command, cwd, sessionId) => {
   try {
-    const path = sessionId ? `/api/mcp/mode?session=${encodeURIComponent(sessionId)}` : '/api/mcp/mode'
-    const data = await getJson(path, apiKey, MODE_TIMEOUT_MS)
-    const mode = data?.override?.mode
-    return { mode: APPROVAL_MODES.includes(mode) ? mode : null, kill: data?.kill === true }
+    const response = await fetch(`${BASE_URL}/api/agent/gate`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${apiKey}` },
+      body: JSON.stringify({
+        v: 1,
+        source: 'cursor',
+        toolName: 'Bash',
+        toolInputs: [{ command }],
+        cwd,
+        sessionId,
+      }),
+      signal: AbortSignal.timeout(GATE_TIMEOUT_MS),
+    })
+    if (!response.ok) return null
+    const verdict = await response.json()
+    return verdict && typeof verdict.kind === 'string' ? verdict : null
   } catch {
-    return { mode: null, kill: false }
+    return null
   }
 }
 
@@ -523,12 +510,17 @@ const main = async () => {
   const ident = { agentName: `VS Code - ${project}`, sessionId, machineId: getMachineId() }
 
   try {
-    const [policy, modeState] = await Promise.all([getPolicy(apiKey), fetchModeState(apiKey, sessionId)])
+    const verdict = await decide(apiKey, command, input.cwd, sessionId)
 
-    if (modeState.kill) return respond(deny('Stopped by user. This agent was halted from Pushary. Do not run this command.'))
+    // No verdict, or one that says nothing: VS Code's own prompt decides, exactly
+    // as if this gate were not installed. Never a forced denial on an outage.
+    if (!verdict || verdict.kind === 'no_opinion') return respond(ask())
+    if (verdict.kind === 'kill') return respond(deny(verdict.reason))
+    if (verdict.kind === 'allow') return respond(ALLOW)
+    if (verdict.kind === 'deny') return respond(deny(verdict.reason))
+    if (verdict.kind !== 'ask') return respond(ask())
 
-    const tool = resolvePolicy(policy, 'Bash', modeState.mode)
-    if (tool.timeoutSeconds === 0 && tool.timeoutAction === 'approve') return respond(ALLOW)
+    const tool = verdict.policy
 
     switch (tool.mode) {
       case 'terminal_only':

package/dist/bin/pushary-bell-hook.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-7PZPJSWI.js";
+} from "../chunk-GM74DUMS.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
-import "../chunk-K7CSRGKZ.js";
+import "../chunk-KZIGJLOX.js";
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-6MTNS63X.js";
-import "../chunk-437T77TY.js";
+import "../chunk-CWV4CMB6.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-MQMPG5X4.js";
+import "../chunk-K337LIBD.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,18 +5,18 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-7PZPJSWI.js";
+} from "../chunk-GM74DUMS.js";
 import {
   guardBinary
-} from "../chunk-PWTKKQQI.js";
+} from "../chunk-HSGEEBBL.js";
 import "../chunk-VT4IVERX.js";
 import {
   claudeSettings
-} from "../chunk-HVZIHTOO.js";
+} from "../chunk-KJW6NKF7.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
-import "../chunk-K7CSRGKZ.js";
+import "../chunk-KZIGJLOX.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -30,13 +30,13 @@ import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-6MTNS63X.js";
-import "../chunk-437T77TY.js";
+import "../chunk-CWV4CMB6.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-MQMPG5X4.js";
+import "../chunk-K337LIBD.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/bin/pushary-claude.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   ensureDaemonRunning
-} from "../chunk-WEAQQSHQ.js";
+} from "../chunk-4YMWLMAP.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
@@ -9,22 +9,20 @@ import {
   generateSessionKey,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "../chunk-GCKAWHFP.js";
+} from "../chunk-T54OT7IY.js";
 import {
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-YKW6JCWI.js";
+} from "../chunk-LXWISFF3.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-VT4IVERX.js";
-import "../chunk-HVZIHTOO.js";
+import "../chunk-KJW6NKF7.js";
 import {
-  KILL_REASON,
-  isDeferAnswer,
-  resolveGate
-} from "../chunk-GXIFADGD.js";
+  isDeferAnswer
+} from "../chunk-YHG74UFF.js";
 import {
   askUser,
   cancelQuestion,
@@ -36,7 +34,7 @@ import {
   reportEvent,
   scopePathFor,
   waitForAnswer
-} from "../chunk-EXMUM226.js";
+} from "../chunk-DPDUB4XF.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -44,14 +42,17 @@ import "../chunk-DINDL2CF.js";
 import "../chunk-6MTNS63X.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-437T77TY.js";
+import "../chunk-CWV4CMB6.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-MQMPG5X4.js";
+import {
+  KILL_REASON,
+  resolveGate
+} from "../chunk-K337LIBD.js";
 
 // src/wrapper/claudeBinary.ts
 import { statSync } from "fs";

package/dist/bin/pushary-clean.js

@@ -4,15 +4,15 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-ADISVXZL.js";
+} from "../chunk-4U2YRHNF.js";
 import {
   removeGeminiSettings
-} from "../chunk-DOXSWT4Q.js";
+} from "../chunk-GY3I353G.js";
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-64PXDATC.js";
-import "../chunk-PWTKKQQI.js";
+} from "../chunk-XJDL3MUE.js";
+import "../chunk-HSGEEBBL.js";
 import {
   execNpm
 } from "../chunk-VT4IVERX.js";
@@ -33,7 +33,7 @@ import {
   pusharyDir,
   removeCodexHooks,
   vscodePluginDir
-} from "../chunk-HVZIHTOO.js";
+} from "../chunk-KJW6NKF7.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -49,7 +49,7 @@ import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-MQMPG5X4.js";
+import "../chunk-K337LIBD.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, copyFileSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -6,19 +6,19 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-ERYKGH4J.js";
-import "../chunk-GCKAWHFP.js";
+} from "../chunk-JBLRZGTT.js";
+import "../chunk-T54OT7IY.js";
 import {
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-YKW6JCWI.js";
+} from "../chunk-LXWISFF3.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import {
   resolveBinary
 } from "../chunk-VT4IVERX.js";
-import "../chunk-HVZIHTOO.js";
+import "../chunk-KJW6NKF7.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -27,7 +27,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-MQMPG5X4.js";
+import "../chunk-K337LIBD.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -2,16 +2,14 @@
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-NJ7JT26G.js";
+} from "../chunk-PKUNB3SN.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
 import {
-  KILL_REASON,
   denyReasonFrom,
-  isDeferAnswer,
-  resolveGate
-} from "../chunk-GXIFADGD.js";
+  isDeferAnswer
+} from "../chunk-YHG74UFF.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -43,13 +41,13 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   waitForAnswer
-} from "../chunk-EXMUM226.js";
+} from "../chunk-DPDUB4XF.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-437T77TY.js";
+import "../chunk-CWV4CMB6.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import {
@@ -57,10 +55,12 @@ import {
 } from "../chunk-2UMNXADU.js";
 import {
   DECISION_LINE_MAX,
+  KILL_REASON,
   effectiveWaitSeconds,
   hookWaitClamped,
-  hookWaitDeadline
-} from "../chunk-MQMPG5X4.js";
+  hookWaitDeadline,
+  resolveGate
+} from "../chunk-K337LIBD.js";
 
 // bin/pushary-codex-hook.ts
 import { basename, join } from "path";

package/dist/bin/pushary-codex.js

@@ -3,19 +3,19 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-EXMUM226.js";
+} from "../chunk-DPDUB4XF.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-437T77TY.js";
+import "../chunk-CWV4CMB6.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
-import "../chunk-MQMPG5X4.js";
+import "../chunk-K337LIBD.js";
 
 // bin/pushary-codex.ts
 import { basename } from "path";

package/dist/bin/pushary-connect.js

@@ -1,22 +1,22 @@
 #!/usr/bin/env node
 import {
   printKeyCheck
-} from "../chunk-FBGBJXVC.js";
+} from "../chunk-NTIUQB3E.js";
 import {
   confirmAppConnection,
   connectDevice,
   printConnectInstructions
-} from "../chunk-6LC4WSCL.js";
+} from "../chunk-LCA2EQTK.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey
-} from "../chunk-F52SIIDG.js";
+} from "../chunk-LSB6PFLN.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   readKeySource
-} from "../chunk-K7CSRGKZ.js";
+} from "../chunk-KZIGJLOX.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -29,7 +29,7 @@ import "../chunk-DINDL2CF.js";
 import "../chunk-6MTNS63X.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-437T77TY.js";
+import "../chunk-CWV4CMB6.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
@@ -37,7 +37,7 @@ import {
   EXIT
 } from "../chunk-KZERVKTD.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-MQMPG5X4.js";
+import "../chunk-K337LIBD.js";
 
 // bin/pushary-connect.ts
 exitOnHelpFlag("connect");

package/dist/bin/pushary-daemon.js

@@ -8,7 +8,7 @@ import {
   acquireDaemonLease,
   readDaemonStatus,
   requestDaemonHandoff
-} from "../chunk-WEAQQSHQ.js";
+} from "../chunk-4YMWLMAP.js";
 import {
   CODEX_BRIDGE_CAPABILITY,
   CODEX_RESUME_CAPABILITY,
@@ -17,7 +17,7 @@ import {
 import {
   findLiveProcessBySpawnId,
   ownsLiveProcess
-} from "../chunk-YKW6JCWI.js";
+} from "../chunk-LXWISFF3.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -26,7 +26,7 @@ import {
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
 } from "../chunk-VT4IVERX.js";
-import "../chunk-HVZIHTOO.js";
+import "../chunk-KJW6NKF7.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -43,7 +43,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-MQMPG5X4.js";
+import "../chunk-K337LIBD.js";
 
 // src/spawn-daemon.ts
 import { execFileSync, spawn } from "child_process";

package/dist/bin/pushary-disconnect.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   removeGeminiSettings
-} from "../chunk-DOXSWT4Q.js";
+} from "../chunk-GY3I353G.js";
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-64PXDATC.js";
-import "../chunk-PWTKKQQI.js";
+} from "../chunk-XJDL3MUE.js";
+import "../chunk-HSGEEBBL.js";
 import "../chunk-VT4IVERX.js";
 import {
   claudeJson,
@@ -19,14 +19,14 @@ import {
   geminiSettings,
   removeCodexHooks,
   removeCodexSettings
-} from "../chunk-HVZIHTOO.js";
+} from "../chunk-KJW6NKF7.js";
 import {
   exitOnHelpFlag
 } from "../chunk-SQOFGPNX.js";
 import "../chunk-GOEXZ5QJ.js";
 import "../chunk-DINDL2CF.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-MQMPG5X4.js";
+import "../chunk-K337LIBD.js";
 
 // bin/pushary-disconnect.ts
 import { readFileSync, writeFileSync } from "fs";

package/dist/bin/pushary-doctor.js

@@ -3,13 +3,13 @@ import {
   claudeWired,
   codexWired,
   geminiWired
-} from "../chunk-4QPOMJUB.js";
+} from "../chunk-JT5NQQCE.js";
 import {
   describeWaitLadder
 } from "../chunk-IIENZE2J.js";
 import {
   readDaemonStatus
-} from "../chunk-WEAQQSHQ.js";
+} from "../chunk-4YMWLMAP.js";
 import {
   agentProbes,
   detectAgent,
@@ -18,12 +18,12 @@ import {
   isDetected,
   isPluginRegistered,
   vscodeSettingsTargets
-} from "../chunk-ADISVXZL.js";
+} from "../chunk-4U2YRHNF.js";
 import {
   GEMINI_HOOK_BINARY,
   hasGeminiHooks,
   missingGeminiHookEvents
-} from "../chunk-DOXSWT4Q.js";
+} from "../chunk-GY3I353G.js";
 import "../chunk-XHKBHWLX.js";
 import {
   execNpm
@@ -46,10 +46,10 @@ import {
   readCodexMcpAuth,
   untrustedCodexHookEvents,
   vscodePluginDir
-} from "../chunk-HVZIHTOO.js";
+} from "../chunk-KJW6NKF7.js";
 import {
   readLedgerSummary
-} from "../chunk-NJ7JT26G.js";
+} from "../chunk-PKUNB3SN.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -59,19 +59,19 @@ import {
   fetchChannels,
   reachVerdict,
   verifyRoundTrip
-} from "../chunk-6LC4WSCL.js";
+} from "../chunk-LCA2EQTK.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-F52SIIDG.js";
+} from "../chunk-LSB6PFLN.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   keyPrefix,
   readKeySource
-} from "../chunk-K7CSRGKZ.js";
+} from "../chunk-KZIGJLOX.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -89,7 +89,7 @@ import {
   sendMcpRequest
 } from "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-437T77TY.js";
+import "../chunk-CWV4CMB6.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
@@ -99,7 +99,7 @@ import {
 import {
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-MQMPG5X4.js";
+import "../chunk-K337LIBD.js";
 
 // bin/pushary-doctor.ts
 import { existsSync, readFileSync, writeFileSync } from "fs";