@pushary/agent-hooks 0.89.6 → 0.89.8

package/dist/{chunk-WQGMUIDW.js → chunk-FX5QSMPY.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-L3YUHEB6.js";
+} from "./chunk-V6N4Q223.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-V37ZXMH3.js → chunk-GMI5QZLG.js}

@@ -8,6 +8,10 @@ import { createHash } from "crypto";
 import { homedir } from "os";
 import { join } from "path";
 
+// src/removal-scope.ts
+var namesAppLocator = (command) => command.includes(HOOK_LOCATOR_BINARY);
+var isProtectedByScope = (command, scope) => scope?.keepAppWiring === true && namesAppLocator(command);
+
 // src/canonical-json.ts
 var canonicalJson = (value) => {
   if (value === null || typeof value !== "object") return JSON.stringify(value);
@@ -77,13 +81,14 @@ var readCodexMcpAuth = (config) => {
   if (typeof pushary.bearer_token === "string") return { method: "legacy-bearer" };
   return void 0;
 };
-var isPusharyCommand = (hook) => {
+var isPusharyCommand = (hook, scope) => {
   const command = String(asRecord(hook)?.command ?? "");
+  if (isProtectedByScope(command, scope)) return false;
   return command.includes(CODEX_HOOK_BINARY) || command.includes(HOOK_LOCATOR_BINARY);
 };
-var isPusharyCodexHook = (entry) => {
+var isPusharyCodexHook = (entry, scope) => {
   const hooks = asRecord(entry)?.hooks;
-  return Array.isArray(hooks) && hooks.some(isPusharyCommand);
+  return Array.isArray(hooks) && hooks.some((hook) => isPusharyCommand(hook, scope));
 };
 var addCodexHooks = (config, command) => {
   const hooks = ensureRecord(config, "hooks");
@@ -102,14 +107,14 @@ var addCodexHooks = (config, command) => {
     hooks[definition.event] = entries;
   }
 };
-var removeCodexHooks = (config) => {
+var removeCodexHooks = (config, scope) => {
   const hooks = asRecord(config.hooks);
   if (!hooks) return false;
   let changed = false;
   for (const definition of CODEX_HOOK_EVENTS) {
     const entries = hooks[definition.event];
     if (!Array.isArray(entries)) continue;
-    const filtered = entries.filter((entry) => !isPusharyCodexHook(entry));
+    const filtered = entries.filter((entry) => !isPusharyCodexHook(entry, scope));
     if (filtered.length !== entries.length) {
       if (filtered.length === 0) {
         delete hooks[definition.event];
@@ -127,14 +132,14 @@ var hasCodexHooks = (config) => {
   if (!hooks) return false;
   return CODEX_HOOK_EVENTS.some((definition) => {
     const entries = hooks[definition.event];
-    return Array.isArray(entries) && entries.some(isPusharyCodexHook);
+    return Array.isArray(entries) && entries.some((entry) => isPusharyCodexHook(entry));
   });
 };
 var missingCodexHookEvents = (config) => {
   const hooks = asRecord(config.hooks);
   return CODEX_HOOK_EVENTS.filter((definition) => {
     const entries = hooks?.[definition.event];
-    return !Array.isArray(entries) || !entries.some(isPusharyCodexHook);
+    return !Array.isArray(entries) || !entries.some((entry) => isPusharyCodexHook(entry));
   }).map((definition) => definition.event);
 };
 var codexHookTrustHash = (definition, command) => {
@@ -176,10 +181,10 @@ var codexHookPositions = (hooksConfig) => {
   for (const definition of CODEX_HOOK_EVENTS) {
     const entries = hooks?.[definition.event];
     if (!Array.isArray(entries)) continue;
-    const entryIndex = entries.findIndex(isPusharyCodexHook);
+    const entryIndex = entries.findIndex((entry) => isPusharyCodexHook(entry));
     if (entryIndex < 0) continue;
     const inner = asRecord(entries[entryIndex])?.hooks;
-    const hookIndex = Array.isArray(inner) ? inner.findIndex(isPusharyCommand) : -1;
+    const hookIndex = Array.isArray(inner) ? inner.findIndex((hook) => isPusharyCommand(hook)) : -1;
     positions[definition.event] = [entryIndex, Math.max(hookIndex, 0)];
   }
   return positions;
@@ -270,6 +275,7 @@ var geminiMd = () => join2(homedir2(), ".gemini", "GEMINI.md");
 var pusharyConfigFile = () => join2(homedir2(), ".pushary", "config.json");
 
 export {
+  isProtectedByScope,
   canonicalJson,
   CODEX_HOOK_BINARY,
   codexHome,

package/dist/{chunk-475T3XIO.js → chunk-J2JZJZKB.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-7TS2G4QG.js";
+} from "./chunk-VA7VUNRD.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-NQNCSPEH.js → chunk-R2AGKCXL.js}

@@ -7,34 +7,49 @@ import {
 } from "./chunk-PZA7G4CN.js";
 import {
   getMachineId
-} from "./chunk-2HYPZLYY.js";
+} from "./chunk-DKDDLF5P.js";
 import {
   pusharyDir
-} from "./chunk-V37ZXMH3.js";
+} from "./chunk-GMI5QZLG.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readJsonSafe,
   writeFileAtomic,
-  writeJsonAtomic
-} from "./chunk-6MTNS63X.js";
+  writeJsonAtomic,
+  writeJsonAtomicDurable
+} from "./chunk-XX2V4QS5.js";
 import {
   getApiKey
 } from "./chunk-2UMNXADU.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";
-import { existsSync, mkdirSync, realpathSync, renameSync, unlinkSync, writeFileSync } from "fs";
+import { existsSync, mkdirSync, readFileSync, realpathSync, renameSync, unlinkSync, writeFileSync } from "fs";
 import { createHash, randomUUID } from "crypto";
 import { homedir } from "os";
 import { execFileSync } from "child_process";
 var daemonNeedsHandoff = (status) => status.kind === "version-mismatch" || status.kind === "configuration-mismatch" || status.kind === "unresponsive" && status.processAlive === true;
+var runDaemonServiceCommand = (command, args) => execFileSync(command, [...args], {
+  encoding: "utf-8",
+  stdio: ["ignore", "pipe", "ignore"],
+  windowsHide: true
+});
+var commandFailureOutput = (error) => {
+  const failure = error;
+  return [failure.stdout, failure.stderr, failure.message].map((value) => Buffer.isBuffer(value) ? value.toString("utf-8") : typeof value === "string" ? value : "").filter(Boolean).join("\n");
+};
+var isExpectedProbeFailure = (probe, error) => {
+  const failure = error;
+  const status = typeof failure.status === "number" ? failure.status : typeof failure.code === "number" ? failure.code : null;
+  const exitMatches = probe.negativeExitCodes === void 0 || status !== null && probe.negativeExitCodes.includes(status);
+  const outputMatches = probe.negativeOutputPattern === void 0 || probe.negativeOutputPattern.test(commandFailureOutput(error));
+  return (probe.negativeExitCodes !== void 0 || probe.negativeOutputPattern !== void 0) && exitMatches && outputMatches;
+};
 var daemonServiceManagerAvailable = (options = {}) => {
   const platform = options.platform ?? process.platform;
-  const run = options.run ?? ((command, args) => {
-    execFileSync(command, [...args], { stdio: "ignore", windowsHide: true });
-  });
+  const run = options.run ?? runDaemonServiceCommand;
   try {
     if (platform === "darwin") {
       const uid = options.uid ?? process.getuid?.();
@@ -48,6 +63,12 @@ var daemonServiceManagerAvailable = (options = {}) => {
     }
     if (platform === "win32") {
       run("sc.exe", ["query", "Schedule"]);
+      run("powershell.exe", [
+        "-NoProfile",
+        "-NonInteractive",
+        "-Command",
+        "Get-Command Get-ScheduledTask -ErrorAction Stop | Out-Null"
+      ]);
       return true;
     }
     return false;
@@ -103,8 +124,25 @@ var buildDaemonService = (input) => {
       ],
       start: [{ command: "launchctl", args: ["kickstart", "-k", target] }],
       stop: [{ command: "launchctl", args: ["kill", "SIGTERM", target], ignoreFailure: true }],
+      disable: [{ command: "launchctl", args: ["disable", target] }],
+      canDisableWhenUnregistered: true,
       uninstall: [{ command: "launchctl", args: ["bootout", domain, definitionPath], ignoreFailure: true }],
-      registrationProbe: { command: "launchctl", args: ["print", target] }
+      registrationProbe: {
+        command: "launchctl",
+        args: ["print", target],
+        negativeExitCodes: [113]
+      },
+      enabledProbe: {
+        command: "launchctl",
+        args: ["print-disabled", domain],
+        disabledOutputPattern: new RegExp(`"${label}"\\s*=>\\s*disabled`)
+      },
+      runningProbe: {
+        command: "launchctl",
+        args: ["print", target],
+        outputPattern: /\bstate = running\b/,
+        negativeExitCodes: [113]
+      }
     };
   }
   if (input.platform === "linux") {
@@ -134,10 +172,20 @@ WantedBy=default.target
       ],
       start: [{ command: "systemctl", args: ["--user", "start", unit] }],
       stop: [{ command: "systemctl", args: ["--user", "stop", unit], ignoreFailure: true }],
+      disable: [{ command: "systemctl", args: ["--user", "disable", unit] }],
       uninstall: [
         { command: "systemctl", args: ["--user", "disable", "--now", unit], ignoreFailure: true }
       ],
-      registrationProbe: { command: "systemctl", args: ["--user", "is-enabled", unit] },
+      registrationProbe: {
+        command: "systemctl",
+        args: ["--user", "is-enabled", unit],
+        negativeOutputPattern: /^(?:disabled|not-found)\s*$/m
+      },
+      runningProbe: {
+        command: "systemctl",
+        args: ["--user", "is-active", unit],
+        negativeOutputPattern: /^(?:inactive|failed|unknown)\s*$/m
+      },
       reloadAfterUninstall: { command: "systemctl", args: ["--user", "daemon-reload"] }
     };
   }
@@ -175,8 +223,38 @@ WantedBy=default.target
       ],
       start: [{ command: "schtasks.exe", args: ["/Run", "/TN", taskName] }],
       stop: [{ command: "schtasks.exe", args: ["/End", "/TN", taskName], ignoreFailure: true }],
+      disable: [{ command: "schtasks.exe", args: ["/Change", "/TN", taskName, "/Disable"] }],
       uninstall: [{ command: "schtasks.exe", args: ["/Delete", "/TN", taskName, "/F"], ignoreFailure: true }],
-      registrationProbe: { command: "schtasks.exe", args: ["/Query", "/TN", taskName] }
+      registrationProbe: {
+        command: "powershell.exe",
+        args: [
+          "-NoProfile",
+          "-NonInteractive",
+          "-Command",
+          "$task = @(Get-ScheduledTask -ErrorAction Stop) | Where-Object { $_.TaskName -eq 'Pushary Daemon' -and $_.TaskPath -eq '\\' } | Select-Object -First 1; if ($null -eq $task) { exit 3 }"
+        ],
+        negativeExitCodes: [3]
+      },
+      enabledProbe: {
+        command: "powershell.exe",
+        args: [
+          "-NoProfile",
+          "-NonInteractive",
+          "-Command",
+          "$task = @(Get-ScheduledTask -ErrorAction Stop) | Where-Object { $_.TaskName -eq 'Pushary Daemon' -and $_.TaskPath -eq '\\' } | Select-Object -First 1; if ($null -eq $task) { exit 3 }; if ($task.State -eq 'Disabled') { exit 4 }"
+        ],
+        negativeExitCodes: [3, 4]
+      },
+      runningProbe: {
+        command: "powershell.exe",
+        args: [
+          "-NoProfile",
+          "-NonInteractive",
+          "-Command",
+          "$task = @(Get-ScheduledTask -ErrorAction Stop) | Where-Object { $_.TaskName -eq 'Pushary Daemon' -and $_.TaskPath -eq '\\' } | Select-Object -First 1; if ($null -eq $task) { exit 3 }; if ($task.State -ne 'Running') { exit 4 }"
+        ],
+        negativeExitCodes: [3, 4]
+      }
     };
   }
   return null;
@@ -219,26 +297,30 @@ var resolveDaemonServiceDefinition = (options = {}) => {
     uid: options.uid ?? process.getuid?.()
   });
 };
+var runDaemonServiceSteps = (steps, run) => {
+  for (const step of steps) {
+    try {
+      run(step.command, step.args);
+    } catch (err) {
+      if (!step.ignoreFailure) throw err;
+    }
+  }
+};
 var applyDaemonService = (action, definition, options = {}) => {
-  const run = options.run ?? ((command, args) => {
-    execFileSync(command, [...args], { stdio: "ignore", windowsHide: true });
-  });
+  const run = options.run ?? runDaemonServiceCommand;
   try {
     if (action === "install") writeFileAtomic(definition.definitionPath, definition.contents, 384);
     const steps = action === "uninstall" ? [...definition.stop, ...definition.uninstall] : definition[action];
-    for (const step of steps) {
-      try {
-        run(step.command, step.args);
-      } catch (err) {
-        if (!step.ignoreFailure) throw err;
-      }
-    }
+    runDaemonServiceSteps(steps, run);
     if (action === "uninstall") {
-      let registered = false;
+      let registered = true;
       try {
         run(definition.registrationProbe.command, definition.registrationProbe.args);
-        registered = true;
-      } catch {
+      } catch (err) {
+        if (!isExpectedProbeFailure(definition.registrationProbe, err)) {
+          throw new Error(`Could not verify native background service is absent: ${commandFailureOutput(err) || String(err)}`);
+        }
+        registered = false;
       }
       if (registered) throw new Error("Native background service remains registered");
       safeUnlink(definition.definitionPath);
@@ -563,8 +645,7 @@ var deactivateDaemonService = async (action, options) => {
   const platform = options.platform ?? process.platform;
   const supported = ["darwin", "linux", "win32"].includes(platform);
   const managerAvailable = supported && daemonServiceManagerAvailable(options);
-  const definitionPresent = supported && hasDaemonServiceDefinition(options);
-  const service = definitionPresent && !managerAvailable ? { kind: "failed", detail: "Native background-service manager is unavailable" } : managerAvailable ? manageDaemonService(action, options) : { kind: "ok" };
+  const service = supported && !managerAvailable ? { kind: "failed", detail: "Native background-service manager is unavailable" } : managerAvailable ? manageDaemonService(action, options) : { kind: "ok" };
   const stopped = await stopDaemonRunning(options);
   const failures = [
     service.kind === "ok" ? null : service.detail,
@@ -574,9 +655,251 @@ var deactivateDaemonService = async (action, options) => {
 };
 var stopDaemonService = async (options = {}) => deactivateDaemonService("stop", options);
 var disableDaemonService = async (options = {}) => deactivateDaemonService("uninstall", options);
+var parseDaemonServiceTransaction = (value) => {
+  if (typeof value !== "object" || value === null) return null;
+  const transaction = value;
+  if (transaction.version !== 1 || transaction.phase !== "prepared" && transaction.phase !== "committed" || typeof transaction.definitionPath !== "string" || !(transaction.previousContents === null || typeof transaction.previousContents === "string") || typeof transaction.previousRegistered !== "boolean" || !(transaction.previousEnabled === void 0 || typeof transaction.previousEnabled === "boolean") || typeof transaction.previousRunning !== "boolean") return null;
+  return {
+    ...transaction,
+    previousEnabled: typeof transaction.previousEnabled === "boolean" ? transaction.previousEnabled : transaction.previousRegistered
+  };
+};
+var probeDaemonServiceState = (definition, run) => {
+  let registered = true;
+  try {
+    run(definition.registrationProbe.command, definition.registrationProbe.args);
+  } catch (err) {
+    if (!isExpectedProbeFailure(definition.registrationProbe, err)) {
+      return {
+        kind: "failed",
+        detail: `Could not inspect native service registration: ${commandFailureOutput(err) || String(err)}`
+      };
+    }
+    registered = false;
+  }
+  let enabled = registered;
+  const enabledProbe = definition.enabledProbe;
+  if (enabledProbe) {
+    try {
+      const output = run(enabledProbe.command, enabledProbe.args);
+      enabled = !(enabledProbe.disabledOutputPattern && typeof output === "string" && enabledProbe.disabledOutputPattern.test(output));
+    } catch (err) {
+      if (!isExpectedProbeFailure(enabledProbe, err)) {
+        return {
+          kind: "failed",
+          detail: `Could not inspect whether the native service is enabled: ${commandFailureOutput(err) || String(err)}`
+        };
+      }
+      enabled = false;
+    }
+  }
+  try {
+    const output = run(definition.runningProbe.command, definition.runningProbe.args);
+    const running = definition.runningProbe.outputPattern ? typeof output === "string" && definition.runningProbe.outputPattern.test(output) : true;
+    return { kind: "ok", registered, enabled, running };
+  } catch (err) {
+    if (!isExpectedProbeFailure(definition.runningProbe, err)) {
+      return {
+        kind: "failed",
+        detail: `Could not inspect whether the native service is running: ${commandFailureOutput(err) || String(err)}`
+      };
+    }
+    return { kind: "ok", registered, enabled, running: false };
+  }
+};
+var restoreDaemonServiceSnapshot = (definition, snapshot, run) => {
+  const removed = applyDaemonService("uninstall", definition, { run });
+  if (removed.kind !== "ok") return removed;
+  try {
+    if (snapshot.previousContents === null) safeUnlink(definition.definitionPath);
+    else writeFileAtomic(definition.definitionPath, snapshot.previousContents, 384);
+  } catch (err) {
+    return {
+      kind: "failed",
+      detail: `could not restore the previous definition: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  if (!snapshot.previousRegistered) {
+    const reload = definition.reloadAfterUninstall;
+    if (snapshot.previousContents !== null && reload) {
+      try {
+        run(reload.command, reload.args);
+      } catch (err) {
+        return { kind: "failed", detail: `could not reload the previous definition: ${commandFailureOutput(err) || String(err)}` };
+      }
+    }
+    if (snapshot.previousRunning) {
+      const started = applyDaemonService("start", definition, { run });
+      if (started.kind !== "ok") return started;
+    }
+    if (!snapshot.previousEnabled && definition.canDisableWhenUnregistered) {
+      try {
+        runDaemonServiceSteps(definition.disable, run);
+      } catch (err) {
+        return { kind: "failed", detail: `could not restore the previous disabled state: ${commandFailureOutput(err) || String(err)}` };
+      }
+    }
+    const state2 = probeDaemonServiceState(definition, run);
+    if (state2.kind !== "ok") return { kind: "failed", detail: state2.detail };
+    if (state2.registered || state2.enabled !== snapshot.previousEnabled || state2.running !== snapshot.previousRunning) {
+      return { kind: "failed", detail: "could not restore the previous unregistered service state" };
+    }
+    return { kind: "ok" };
+  }
+  if (snapshot.previousContents === null) {
+    return { kind: "failed", detail: "the previous registered service had no recoverable definition" };
+  }
+  const restored = applyDaemonService("install", {
+    ...definition,
+    contents: snapshot.previousContents
+  }, { run });
+  if (restored.kind !== "ok") return restored;
+  if (!snapshot.previousRunning) applyDaemonService("stop", definition, { run });
+  if (!snapshot.previousEnabled) {
+    try {
+      runDaemonServiceSteps(definition.disable, run);
+    } catch (err) {
+      return { kind: "failed", detail: `could not restore the previous disabled state: ${commandFailureOutput(err) || String(err)}` };
+    }
+  }
+  const state = probeDaemonServiceState(definition, run);
+  if (state.kind !== "ok") return { kind: "failed", detail: state.detail };
+  if (!state.registered) return { kind: "failed", detail: "the previous service is no longer registered" };
+  if (state.enabled !== snapshot.previousEnabled) {
+    return { kind: "failed", detail: "could not restore whether the previous service was enabled" };
+  }
+  if (state.running !== snapshot.previousRunning) {
+    return {
+      kind: "failed",
+      detail: snapshot.previousRunning ? "the previous service did not restart" : "could not restore the previous stopped state"
+    };
+  }
+  return { kind: "ok" };
+};
+var recoverDaemonServiceTransaction = (definition, path, run) => {
+  const stored = readJsonSafe(path);
+  if (stored.kind === "missing") return { kind: "ok" };
+  if (stored.kind !== "ok") {
+    return { kind: "failed", detail: `transaction receipt is ${stored.kind}` };
+  }
+  const transaction = parseDaemonServiceTransaction(stored.value);
+  if (!transaction) return { kind: "failed", detail: "transaction receipt is invalid" };
+  if (transaction.definitionPath !== definition.definitionPath) {
+    return { kind: "failed", detail: "transaction receipt belongs to a different service definition" };
+  }
+  if (transaction.phase === "prepared") {
+    const restored = restoreDaemonServiceSnapshot(definition, transaction, run);
+    if (restored.kind !== "ok") return restored;
+  }
+  try {
+    safeUnlink(path);
+  } catch (err) {
+    return { kind: "failed", detail: `could not clear transaction receipt: ${err instanceof Error ? err.message : String(err)}` };
+  }
+  return { kind: "ok" };
+};
 var replaceDaemonService = async (options = {}) => {
+  const definition = resolveDaemonServiceDefinition(options);
+  if (!definition) {
+    return {
+      kind: "unavailable",
+      detail: "Could not find the globally installed daemon entry. Run Pushary setup again."
+    };
+  }
+  const run = options.run ?? runDaemonServiceCommand;
+  const transactionPath = join(options.stateDir ?? options.dir ?? pusharyDir(), "daemon-service-transaction.json");
+  const recovered = recoverDaemonServiceTransaction(definition, transactionPath, run);
+  if (recovered.kind !== "ok") {
+    return { kind: "failed", detail: `Could not recover interrupted service replacement: ${recovered.detail}` };
+  }
+  let previousContents = null;
+  try {
+    if (existsSync(definition.definitionPath)) {
+      previousContents = readFileSync(definition.definitionPath, "utf-8");
+    }
+  } catch (err) {
+    return { kind: "failed", detail: `Could not snapshot the existing service: ${err instanceof Error ? err.message : String(err)}` };
+  }
+  const previousState = probeDaemonServiceState(definition, run);
+  if (previousState.kind !== "ok") return { kind: "failed", detail: previousState.detail };
+  if ((previousState.registered || previousState.running) && previousContents === null) {
+    return { kind: "failed", detail: "Could not replace an active native service with no recoverable definition" };
+  }
+  const transaction = {
+    version: 1,
+    phase: "prepared",
+    definitionPath: definition.definitionPath,
+    previousContents,
+    previousRegistered: previousState.registered,
+    previousEnabled: previousState.enabled,
+    previousRunning: previousState.running
+  };
+  try {
+    writeJsonAtomicDurable(transactionPath, transaction, 384);
+  } catch (err) {
+    return { kind: "failed", detail: `Could not persist the service rollback snapshot: ${err instanceof Error ? err.message : String(err)}` };
+  }
   const stopped = await stopDaemonRunning(options);
-  return stopped.kind === "unavailable" ? stopped : manageDaemonService("install", options);
+  if (stopped.kind === "unavailable") {
+    try {
+      safeUnlink(transactionPath);
+    } catch (err) {
+      return {
+        kind: "failed",
+        detail: `${stopped.detail}; could not clear unused rollback evidence: ${err instanceof Error ? err.message : String(err)}`
+      };
+    }
+    return stopped;
+  }
+  let installed = applyDaemonService("install", definition, { run });
+  if (installed.kind === "ok") {
+    const state = probeDaemonServiceState(definition, run);
+    if (state.kind !== "ok") {
+      installed = { kind: "failed", detail: state.detail };
+    } else if (!state.registered || !state.enabled || !state.running) {
+      installed = {
+        kind: "failed",
+        detail: !state.registered ? "Service registration verification failed" : !state.enabled ? "Service enable verification failed" : "Service start verification failed"
+      };
+    }
+  }
+  if (installed.kind === "ok") {
+    try {
+      writeJsonAtomicDurable(transactionPath, { ...transaction, phase: "committed" }, 384);
+    } catch (err) {
+      const detail = `Could not commit the service replacement: ${err instanceof Error ? err.message : String(err)}`;
+      const recovered2 = recoverDaemonServiceTransaction(definition, transactionPath, run);
+      return recovered2.kind === "ok" ? { kind: "failed", detail } : {
+        kind: "failed",
+        detail: `${detail}; recovery failed: ${recovered2.detail}`
+      };
+    }
+    try {
+      safeUnlink(transactionPath);
+      return installed;
+    } catch (err) {
+      return {
+        kind: "failed",
+        detail: `Service replacement committed but its receipt could not be cleared: ${err instanceof Error ? err.message : String(err)}`
+      };
+    }
+  }
+  const restored = restoreDaemonServiceSnapshot(definition, transaction, run);
+  if (restored.kind !== "ok") {
+    return { kind: "failed", detail: `${installed.detail}; rollback failed: ${restored.detail}` };
+  }
+  try {
+    safeUnlink(transactionPath);
+  } catch (err) {
+    return {
+      kind: "failed",
+      detail: `${installed.detail}; previous service restored but recovery evidence could not be cleared: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  return {
+    kind: "failed",
+    detail: `${installed.detail}; ${transaction.previousRegistered ? "previous service restored" : "previous service state restored"}`
+  };
 };
 var launchInstalledDaemon = (options) => {
   const entryExists = options.entryExists ?? existsSync;

package/dist/{chunk-4ZHQNBDP.js → chunk-TF247BET.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-V37ZXMH3.js";
+} from "./chunk-GMI5QZLG.js";
 import {
   readJsonSafe
-} from "./chunk-6MTNS63X.js";
+} from "./chunk-XX2V4QS5.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-L3YUHEB6.js → chunk-V6N4Q223.js}

@@ -9,7 +9,7 @@ import {
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-6MTNS63X.js";
+} from "./chunk-XX2V4QS5.js";
 import {
   configFilePath
 } from "./chunk-2UMNXADU.js";