@pushary/agent-hooks 0.90.1 → 0.91.0

package/dist/{chunk-FQL5E6NG.js → chunk-CRVJCKIN.js}

@@ -3,7 +3,10 @@ import {
 } from "./chunk-CELX75MW.js";
 import {
   codexHomeFrom
-} from "./chunk-KUZWXPUS.js";
+} from "./chunk-BVNYTQ5I.js";
+import {
+  HOOK_LOCATOR_BINARY
+} from "./chunk-VNMKIJZB.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";
@@ -329,6 +332,82 @@ var hasInstructionBlock = (filePath) => {
 // src/hooks-spec.ts
 var CURSOR_GATE_SCRIPT = "pushary-gate.mjs";
 
+// src/diagnostics/bridge.ts
+import { execFileSync } from "child_process";
+import { existsSync as existsSync3, readFileSync as readFileSync2 } from "fs";
+import { homedir as homedir3 } from "os";
+import { dirname as dirname3, join as join3 } from "path";
+var BRIDGE_BUNDLE_IDENTIFIER = "com.pushary.app";
+var BRIDGE_HELPER_SUFFIX = "/Contents/Helpers/pushary-bridge";
+var BRIDGE_BUNDLE_ROOTS = ["/Applications/Pushary.app", "$HOME/Applications/Pushary.app"];
+var expandHome = (path, home) => path.replaceAll("$HOME", home);
+var parseBridgeStub = (contents, stubPath) => {
+  const helperSuffix = contents.match(/^H=(\S+)$/m)?.[1] ?? BRIDGE_HELPER_SUFFIX;
+  const cachePath = contents.match(/^C="([^"\n]+)"$/m)?.[1] ?? join3(dirname3(stubPath), ".bridge-cache");
+  const rootsLine = contents.match(/^for P in ((?:"[^"\n]*"\s*)+); do$/m)?.[1];
+  const bundleRoots = rootsLine ? [...rootsLine.matchAll(/"([^"]*)"/g)].map((match) => match[1]) : BRIDGE_BUNDLE_ROOTS;
+  const bundleIdentifier = contents.match(/kMDItemCFBundleIdentifier == "([^"]+)"/)?.[1] ?? BRIDGE_BUNDLE_IDENTIFIER;
+  return { helperSuffix, cachePath, bundleRoots, bundleIdentifier };
+};
+var resolveBridgeStub = (stubPath, probe) => {
+  const contents = probe.readFile(stubPath);
+  if (contents === null) return { kind: "no-stub", stub: stubPath };
+  const shape = parseBridgeStub(contents, stubPath);
+  const helperIn = (bundle) => `${bundle}${shape.helperSuffix}`;
+  const looked = [];
+  for (const root of shape.bundleRoots.map((root2) => expandHome(root2, probe.home))) {
+    looked.push(root);
+    if (probe.exists(helperIn(root))) return { kind: "bundle", helper: helperIn(root), via: "root" };
+  }
+  const cached = shape.cachePath ? probe.readFile(shape.cachePath)?.split("\n")[0]?.trim() : void 0;
+  if (cached) {
+    looked.push(cached);
+    if (probe.exists(helperIn(cached))) return { kind: "bundle", helper: helperIn(cached), via: "cache" };
+  }
+  for (const found of probe.mdfind(shape.bundleIdentifier)) {
+    looked.push(found);
+    if (probe.exists(helperIn(found))) return { kind: "bundle", helper: helperIn(found), via: "spotlight" };
+  }
+  return { kind: "missing", stub: stubPath, looked };
+};
+var BRIDGE_GONE_MESSAGE = "the Mac app is gone but its hooks remain; run pushary setup or reinstall the app";
+var describeBridgeResolution = (resolution) => {
+  switch (resolution.kind) {
+    case "bundle":
+      return `${resolution.helper} (${resolution.via === "root" ? "installed" : resolution.via === "cache" ? "cached path" : "found by Spotlight"})`;
+    case "missing":
+      return BRIDGE_GONE_MESSAGE;
+    case "no-stub":
+      return `${resolution.stub} is not there; ${BRIDGE_GONE_MESSAGE}`;
+  }
+};
+var isBridgeLocator = (executable) => executable !== null && executable.split(/[/\\]/).pop() === HOOK_LOCATOR_BINARY;
+var spotlight = (bundleIdentifier) => {
+  if (process.platform !== "darwin") return [];
+  try {
+    return execFileSync("/usr/bin/mdfind", [`kMDItemCFBundleIdentifier == "${bundleIdentifier}"`], {
+      encoding: "utf-8",
+      timeout: 5e3,
+      stdio: ["ignore", "pipe", "ignore"]
+    }).split("\n").map((line) => line.trim()).filter((line) => line !== "");
+  } catch {
+    return [];
+  }
+};
+var readOrNull = (path) => {
+  try {
+    return readFileSync2(path, "utf-8");
+  } catch {
+    return null;
+  }
+};
+var liveBridgeProbe = () => ({
+  exists: existsSync3,
+  readFile: readOrNull,
+  mdfind: spotlight,
+  home: homedir3()
+});
+
 export {
   registerPluginLocation,
   unregisterPluginLocation,
@@ -346,5 +425,9 @@ export {
   writeInstructionBlock,
   removeInstructionBlock,
   hasInstructionBlock,
-  CURSOR_GATE_SCRIPT
+  CURSOR_GATE_SCRIPT,
+  resolveBridgeStub,
+  describeBridgeResolution,
+  isBridgeLocator,
+  liveBridgeProbe
 };

package/dist/chunk-DSTLA2TC.js

@@ -0,0 +1,68 @@
+import {
+  guardBinary
+} from "./chunk-EZIEXHYM.js";
+
+// src/bell/install.ts
+import { join } from "path";
+var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+var ensureRecord = (parent, key) => {
+  const existing = asRecord(parent[key]);
+  if (existing) return existing;
+  const created = {};
+  parent[key] = created;
+  return created;
+};
+var BELL_HOOK_BINARY = "pushary-bell-hook";
+var isBellHook = (entry) => {
+  const hooks = asRecord(entry)?.hooks;
+  if (!Array.isArray(hooks)) return false;
+  return hooks.some((hook) => String(asRecord(hook)?.command ?? "").includes(BELL_HOOK_BINARY));
+};
+var BELL_TIMEOUT_SECONDS = 5;
+var BELL_NOTIFICATION_MATCHER = "idle_prompt|agent_needs_input|agent_completed";
+var addBellHooks = (settings, binDir) => {
+  const resolve = (name) => guardBinary(binDir ? join(binDir, name) : name);
+  const hooks = ensureRecord(settings, "hooks");
+  const notification = (Array.isArray(hooks.Notification) ? hooks.Notification : []).filter((entry) => !isBellHook(entry));
+  notification.push({
+    matcher: BELL_NOTIFICATION_MATCHER,
+    hooks: [{ type: "command", command: resolve(BELL_HOOK_BINARY), timeout: BELL_TIMEOUT_SECONDS }]
+  });
+  hooks.Notification = notification;
+  const stop = Array.isArray(hooks.Stop) ? hooks.Stop.filter((entry) => !isBellHook(entry)) : [];
+  if (Array.isArray(hooks.Stop)) {
+    if (stop.length === 0) delete hooks.Stop;
+    else hooks.Stop = stop;
+  }
+};
+var removeBellHooks = (settings) => {
+  const hooks = asRecord(settings.hooks);
+  if (!hooks) return false;
+  let changed = false;
+  for (const key of ["Stop", "Notification"]) {
+    const entries = hooks[key];
+    if (!Array.isArray(entries)) continue;
+    const filtered = entries.filter((entry) => !isBellHook(entry));
+    if (filtered.length === entries.length) continue;
+    if (filtered.length === 0) delete hooks[key];
+    else hooks[key] = filtered;
+    changed = true;
+  }
+  if (Object.keys(hooks).length === 0) delete settings.hooks;
+  return changed;
+};
+var bellInstalled = (settings) => {
+  const hooks = asRecord(settings.hooks);
+  if (!hooks) return false;
+  return ["Stop", "Notification"].some((key) => {
+    const entries = hooks[key];
+    return Array.isArray(entries) && entries.some(isBellHook);
+  });
+};
+
+export {
+  BELL_HOOK_BINARY,
+  addBellHooks,
+  removeBellHooks,
+  bellInstalled
+};

package/dist/{chunk-GL3FFM7A.js → chunk-ELHCIEMM.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-EZIEXHYM.js";
 import {
   isProtectedByScope
-} from "./chunk-KUZWXPUS.js";
+} from "./chunk-BVNYTQ5I.js";
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY

package/dist/{chunk-Y6BWPERV.js → chunk-GQ5ZC2QY.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-KUZWXPUS.js";
+} from "./chunk-BVNYTQ5I.js";
 import {
   readJsonSafe
 } from "./chunk-4LL6LG5X.js";

package/dist/chunk-GU3EJCVV.js

@@ -0,0 +1,43 @@
+// src/diagnostics/service-runtime.ts
+var unescapeXml = (value) => value.replaceAll("&quot;", '"').replaceAll("&apos;", "'").replaceAll("&lt;", "<").replaceAll("&gt;", ">").replaceAll("&amp;", "&");
+var unquoteSystemd = (value) => value.replaceAll('\\"', '"').replaceAll("\\\\", "\\").replaceAll("%%", "%");
+var readServiceExecPath = (contents, platform) => {
+  if (platform === "darwin") {
+    const program = contents.match(/<key>ProgramArguments<\/key>\s*<array>\s*<string>([^<]*)<\/string>/)?.[1];
+    return program ? unescapeXml(program) : null;
+  }
+  if (platform === "linux") {
+    const exec = contents.match(/^ExecStart="((?:[^"\\]|\\.)*)"/m)?.[1];
+    return exec ? unquoteSystemd(exec) : null;
+  }
+  if (platform === "win32") {
+    const command = contents.match(/<Command>([^<]*)<\/Command>/)?.[1];
+    return command ? unescapeXml(command) : null;
+  }
+  return null;
+};
+var MANAGER_SEGMENTS = [
+  [".nvm", "nvm"],
+  ["nvm", "nvm"],
+  ["fnm", "fnm"],
+  [".fnm", "fnm"],
+  [".volta", "volta"],
+  ["volta", "volta"],
+  [".asdf", "asdf"],
+  ["asdf", "asdf"]
+];
+var versionManagerOf = (execPath) => {
+  const segments = execPath.split(/[/\\]/);
+  for (const segment of segments) {
+    const hit = MANAGER_SEGMENTS.find(([name]) => name === segment);
+    if (hit) return hit[1];
+  }
+  return null;
+};
+var describeVersionManagerPin = (execPath, manager) => `The background service is pinned to ${execPath}, which ${manager} manages. Switching Node versions strands it; run pushary daemon install afterwards.`;
+
+export {
+  readServiceExecPath,
+  versionManagerOf,
+  describeVersionManagerPin
+};

package/dist/{chunk-4LOPSGLP.js → chunk-TVZQMPB7.js}

@@ -33,7 +33,7 @@ import {
 } from "./chunk-L4E2BIJ2.js";
 import {
   getMachineId
-} from "./chunk-54ELC7D7.js";
+} from "./chunk-AWHCZOZO.js";
 import {
   withRetry
 } from "./chunk-BSZYIAZL.js";

package/dist/{chunk-BQBEH6TV.js → chunk-VAMBUKXH.js}

@@ -1,11 +1,11 @@
 import {
   detectClaudeVersion
-} from "./chunk-H2QZRQR2.js";
+} from "./chunk-YTDH3XCE.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "./chunk-DZDI62LY.js";
+} from "./chunk-WGKC6PU2.js";
 import {
   GEMINI_HOOK_BINARY,
   addClaudeMcpServer,
@@ -14,7 +14,7 @@ import {
   addPusharyHooks,
   addPusharyToolPermissions,
   hasGeminiHooks
-} from "./chunk-GL3FFM7A.js";
+} from "./chunk-ELHCIEMM.js";
 import {
   guardBinary
 } from "./chunk-EZIEXHYM.js";
@@ -32,7 +32,7 @@ import {
   codexHooksJson,
   hasCodexHooks,
   vscodePluginMcp
-} from "./chunk-KUZWXPUS.js";
+} from "./chunk-BVNYTQ5I.js";
 import {
   readJsonSafe
 } from "./chunk-4LL6LG5X.js";

package/dist/{chunk-DZDI62LY.js → chunk-WGKC6PU2.js}

@@ -2,11 +2,11 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-GL3FFM7A.js";
+} from "./chunk-ELHCIEMM.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks
-} from "./chunk-KUZWXPUS.js";
+} from "./chunk-BVNYTQ5I.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY

package/dist/{chunk-7TPQEWUZ.js → chunk-YTD6PJM7.js}

@@ -1,6 +1,6 @@
 import {
   getMachineId
-} from "./chunk-54ELC7D7.js";
+} from "./chunk-AWHCZOZO.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";

package/dist/{chunk-H2QZRQR2.js → chunk-YTDH3XCE.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-GL3FFM7A.js";
+} from "./chunk-ELHCIEMM.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-F2ICEWZL.js → chunk-Z4XCN2HH.js}

@@ -7,10 +7,10 @@ import {
 } from "./chunk-L4ZCFMWW.js";
 import {
   getMachineId
-} from "./chunk-54ELC7D7.js";
+} from "./chunk-AWHCZOZO.js";
 import {
   pusharyDir
-} from "./chunk-KUZWXPUS.js";
+} from "./chunk-BVNYTQ5I.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";

package/dist/{chunk-DYP6SMOR.js → chunk-Z6RFZKY4.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-AJYV3VGU.js";
+} from "./chunk-BXTJVM7O.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/src/index.js

@@ -1,6 +1,6 @@
 import {
   handlePreToolUse
-} from "../chunk-B6H2KAQC.js";
+} from "../chunk-4IEW4ZRF.js";
 import "../chunk-2LAHXHBR.js";
 import {
   fetchAccountPublicKey
@@ -16,15 +16,15 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-4LOPSGLP.js";
+} from "../chunk-TVZQMPB7.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
 } from "../chunk-F7OURW3C.js";
 import "../chunk-L4E2BIJ2.js";
-import "../chunk-54ELC7D7.js";
-import "../chunk-KUZWXPUS.js";
+import "../chunk-AWHCZOZO.js";
+import "../chunk-BVNYTQ5I.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.90.1",
+  "version": "0.91.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",

package/dist/chunk-AZPIQG4G.js

@@ -1,274 +0,0 @@
-import {
-  resolvePathBinary
-} from "./chunk-L4ZCFMWW.js";
-
-// src/hermes-config.ts
-import { execFileSync } from "child_process";
-import { existsSync, readFileSync, rmSync, writeFileSync } from "fs";
-import { homedir, tmpdir } from "os";
-import { join } from "path";
-var isRecord = (value) => Boolean(value) && typeof value === "object" && !Array.isArray(value);
-var isSnapshot = (value) => isRecord(value) && typeof value.present === "boolean" && Object.hasOwn(value, "value");
-var isHermesConfigReceipt = (value) => {
-  if (!isRecord(value)) return false;
-  return ["security", "approval", "transport", "fallback", "plugins", "enabled", "agent", "disabled"].every((key) => isSnapshot(value[key])) && typeof value.pushary_enabled === "boolean" && typeof value.clarify_disabled === "boolean";
-};
-var HERMES_CONFIG_SCRIPT = String.raw`
-import json, os, sys
-from hermes_cli.config import load_config, save_config
-
-mode, receipt_path = sys.argv[1], sys.argv[2]
-c = load_config()
-
-def snap(obj, key):
-    return {"present": key in obj, "value": obj.get(key)}
-
-restore_conflicts = []
-
-def restore(obj, key, before, ours):
-    if before.get("present") and before.get("value") == ours:
-        return
-    if before.get("present"):
-        if key in obj and obj.get(key) == before.get("value"):
-            return
-    elif key not in obj:
-        return
-    if obj.get(key) != ours:
-        restore_conflicts.append(key)
-        return
-    if before.get("present"):
-        obj[key] = before.get("value")
-    else:
-        obj.pop(key, None)
-
-def restore_container(obj, key, before, current, changed):
-    raw = obj.get(key)
-    if isinstance(before.get("value"), dict):
-        if not isinstance(raw, dict):
-            if changed:
-                restore_conflicts.append(key)
-            return
-        if current or before.get("present"):
-            obj[key] = current
-        else:
-            obj.pop(key, None)
-    elif isinstance(raw, dict) and current:
-        restore_conflicts.append(key)
-    else:
-        restore(obj, key, before, {})
-
-def restore_list_member(obj, key, before, ours, ours_before):
-    raw = obj.get(key)
-    if isinstance(before.get("value"), list):
-        if ours_before:
-            return
-        if not isinstance(raw, list):
-            restore_conflicts.append(key)
-            return
-        remaining = [item for item in raw if item != ours]
-        if remaining or before.get("present"):
-            obj[key] = remaining
-        else:
-            obj.pop(key, None)
-        return
-    if before.get("present") and raw == before.get("value"):
-        return
-    if not before.get("present") and key not in obj:
-        return
-    if not isinstance(raw, list):
-        restore_conflicts.append(key)
-        return
-    remaining = [item for item in raw if item != ours]
-    if remaining:
-        restore_conflicts.append(key)
-    else:
-        restore(obj, key, before, raw)
-
-def valid_snapshot(value):
-    return isinstance(value, dict) and isinstance(value.get("present"), bool) and "value" in value
-
-def valid_receipt(value):
-    snapshots = ["security", "approval", "transport", "fallback", "plugins", "enabled", "agent", "disabled"]
-    return (isinstance(value, dict)
-        and all(valid_snapshot(value.get(key)) for key in snapshots)
-        and isinstance(value.get("pushary_enabled"), bool)
-        and isinstance(value.get("clarify_disabled"), bool))
-
-if mode == "setup":
-    security_before = snap(c, "security")
-    s = c.get("security") if isinstance(c.get("security"), dict) else {}
-    approval_before = snap(s, "approval")
-    ap = s.get("approval") if isinstance(s.get("approval"), dict) else {}
-    plugins_before = snap(c, "plugins")
-    p = c.get("plugins") if isinstance(c.get("plugins"), dict) else {}
-    agent_before = snap(c, "agent")
-    a = c.get("agent") if isinstance(c.get("agent"), dict) else {}
-    enabled = p.get("enabled") if isinstance(p.get("enabled"), list) else []
-    disabled = a.get("disabled_toolsets") if isinstance(a.get("disabled_toolsets"), list) else []
-    receipt = {
-        "security": security_before,
-        "approval": approval_before,
-        "transport": snap(ap, "transport"),
-        "fallback": snap(ap, "transport_fallback"),
-        "plugins": plugins_before,
-        "enabled": snap(p, "enabled"),
-        "pushary_enabled": "pushary" in enabled,
-        "agent": agent_before,
-        "disabled": snap(a, "disabled_toolsets"),
-        "clarify_disabled": "clarify" in disabled,
-    }
-    if os.path.exists(receipt_path):
-        with open(receipt_path, encoding="utf-8") as handle:
-            existing_receipt = json.load(handle)
-        if not valid_receipt(existing_receipt):
-            raise ValueError("invalid Pushary Hermes setup receipt")
-    else:
-        os.makedirs(os.path.dirname(receipt_path), exist_ok=True)
-        temp = receipt_path + ".tmp"
-        with open(temp, "x", encoding="utf-8") as handle:
-            json.dump(receipt, handle)
-        os.chmod(temp, 0o600)
-        os.replace(temp, receipt_path)
-    ap["transport"] = "pushary"
-    ap["transport_fallback"] = "builtin"
-    s["approval"] = ap
-    c["security"] = s
-    p["enabled"] = enabled if "pushary" in enabled else enabled + ["pushary"]
-    c["plugins"] = p
-    a["disabled_toolsets"] = disabled if "clarify" in disabled else disabled + ["clarify"]
-    c["agent"] = a
-else:
-    receipt_exists = os.path.exists(receipt_path)
-    try:
-        with open(receipt_path, encoding="utf-8") as handle:
-            receipt = json.load(handle)
-    except (OSError, ValueError):
-        if receipt_exists:
-            raise
-        receipt = None
-    s = c.get("security") if isinstance(c.get("security"), dict) else {}
-    ap = s.get("approval") if isinstance(s.get("approval"), dict) else {}
-    if receipt:
-        if not valid_receipt(receipt):
-            raise ValueError("invalid Pushary Hermes setup receipt")
-        approval_changed = (not receipt["transport"].get("present")
-            or receipt["transport"].get("value") != "pushary"
-            or not receipt["fallback"].get("present")
-            or receipt["fallback"].get("value") != "builtin")
-        plugins_changed = not (isinstance(receipt["enabled"].get("value"), list)
-            and receipt["pushary_enabled"])
-        agent_changed = not (isinstance(receipt["disabled"].get("value"), list)
-            and receipt["clarify_disabled"])
-        restore(ap, "transport", receipt["transport"], "pushary")
-        restore(ap, "transport_fallback", receipt["fallback"], "builtin")
-    else:
-        if ap.get("transport") == "pushary": ap.pop("transport", None)
-        if ap.get("transport_fallback") == "builtin": ap.pop("transport_fallback", None)
-    if receipt:
-        restore_container(s, "approval", receipt["approval"], ap, approval_changed)
-        restore_container(c, "security", receipt["security"], s, approval_changed)
-    else:
-        if ap: s["approval"] = ap
-        else: s.pop("approval", None)
-        if s: c["security"] = s
-        else: c.pop("security", None)
-
-    p = c.get("plugins") if isinstance(c.get("plugins"), dict) else {}
-    if receipt:
-        restore_list_member(p, "enabled", receipt["enabled"], "pushary", receipt["pushary_enabled"])
-        restore_container(c, "plugins", receipt["plugins"], p, plugins_changed)
-    else:
-        enabled = p.get("enabled") if isinstance(p.get("enabled"), list) else []
-        enabled = [item for item in enabled if item != "pushary"]
-        if enabled: p["enabled"] = enabled
-        else: p.pop("enabled", None)
-        if p: c["plugins"] = p
-        else: c.pop("plugins", None)
-
-    a = c.get("agent") if isinstance(c.get("agent"), dict) else {}
-    if receipt:
-        restore_list_member(a, "disabled_toolsets", receipt["disabled"], "clarify", receipt["clarify_disabled"])
-        restore_container(c, "agent", receipt["agent"], a, agent_changed)
-    else:
-        disabled = a.get("disabled_toolsets") if isinstance(a.get("disabled_toolsets"), list) else []
-        disabled = [item for item in disabled if item != "clarify"]
-        if disabled: a["disabled_toolsets"] = disabled
-        else: a.pop("disabled_toolsets", None)
-        if a: c["agent"] = a
-        else: c.pop("agent", None)
-
-    if receipt and restore_conflicts:
-        raise ValueError("Hermes config changed after Pushary setup")
-
-save_config(c)
-`;
-var resolveHermesPython = () => {
-  const launcher = resolvePathBinary("hermes");
-  if (launcher && process.platform !== "win32") {
-    try {
-      const shebang = readFileSync(launcher, "utf-8").split("\n", 1)[0];
-      const interpreter = shebang?.startsWith("#!") ? shebang.slice(2).trim().split(/\s+/)[0] : void 0;
-      if (interpreter && /python/i.test(interpreter) && existsSync(interpreter)) return interpreter;
-    } catch {
-    }
-  }
-  const root = join(homedir(), ".hermes", "hermes-agent", "venv");
-  const candidates = process.platform === "win32" ? [join(root, "Scripts", "python.exe"), join(root, "Scripts", "python3.exe")] : [join(root, "bin", "python3"), join(root, "bin", "python")];
-  return candidates.find(existsSync) ?? null;
-};
-var runHermesPythonScript = (python, script, ...args) => {
-  const path = join(tmpdir(), `pushary-hermes-${process.pid}-${Date.now()}.py`);
-  try {
-    writeFileSync(path, script, { encoding: "utf-8", mode: 384 });
-    execFileSync(python, [path, ...args], { env: { ...process.env }, stdio: "pipe", timeout: 15e3 });
-    return true;
-  } catch {
-    return false;
-  } finally {
-    try {
-      rmSync(path, { force: true });
-    } catch {
-    }
-  }
-};
-
-// src/cli/dry-run.ts
-import { execSync } from "child_process";
-import { rmSync as rmSync2, writeFileSync as writeFileSync2 } from "fs";
-var createGuards = (isDryRun, note) => ({
-  write: (path, contents) => {
-    if (isDryRun()) return note("rewrite", path);
-    writeFileSync2(path, contents, "utf-8");
-  },
-  remove: (path, options = {}) => {
-    if (isDryRun()) return note("remove ", path);
-    rmSync2(path, { recursive: true, force: options.force ?? false });
-  },
-  exec: (command, options, describe) => {
-    if (isDryRun()) return note("run    ", describe);
-    execSync(command, options);
-  }
-});
-var describeService = (effects) => {
-  if (effects.controlMode === "off") return "skip     the phone-start background service (--control off)";
-  const where = effects.serviceDefinitionPath ?? "the phone-start service definition";
-  const condition = effects.controlMode === "on" ? "" : ", when a supported agent and a service manager are present";
-  return `write    ${where} and register it with the OS${condition}`;
-};
-var describeSetupSideEffects = (effects) => [
-  `run      npm install -g @pushary/agent-hooks@${effects.version} (the hooks run from the global copy; up to two minutes)`,
-  `write    ${effects.configFile} (the API key, mode 600)`,
-  effects.rcPath ? `edit     ${effects.rcPath} (export PUSHARY_API_KEY)` : "print    the export line for your shell, since no rc file was found",
-  describeService(effects),
-  "ask      Add Pushary instructions to this project's CLAUDE.md/AGENTS.md? (default no)",
-  "ask      Alias claude to pushary claude? (default no)"
-];
-
-export {
-  isHermesConfigReceipt,
-  HERMES_CONFIG_SCRIPT,
-  resolveHermesPython,
-  runHermesPythonScript,
-  createGuards,
-  describeSetupSideEffects
-};