@pushary/agent-hooks 1.4.2 → 1.5.0

package/dist/{chunk-VIOL2DJS.js → chunk-JF736N4C.js}

@@ -3,28 +3,28 @@ import {
   addPusharyToolPermissions,
   isPusharyHook,
   removeClaudeMcpServers
-} from "./chunk-II7PUMPB.js";
+} from "./chunk-J4J45VPZ.js";
 import {
   CLAUDE_HOOK_EVENTS,
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-LPYCPFBZ.js";
+} from "./chunk-EADZPVYW.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-G653QPTR.js";
+} from "./chunk-FDHMNT24.js";
 import {
   guardBinary,
   holdBudgetOf,
   registerHookEntry
-} from "./chunk-TRLFZKVG.js";
+} from "./chunk-DYHXOXUF.js";
 import {
   PHONE_ANSWERED_TOOLS,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/compatible-config.ts
 import { homedir } from "os";

package/dist/{chunk-ZVY25BMK.js → chunk-K3QVDAZW.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-TYEO6T5J.js → chunk-KEOLNHR3.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-TRLFZKVG.js";
+} from "./chunk-DYHXOXUF.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-T5SZ4PML.js → chunk-KJRALILH.js}

@@ -12,14 +12,17 @@ import {
 } from "./chunk-5RUIFDTP.js";
 import {
   callMcpTool
-} from "./chunk-EYRGBYZG.js";
+} from "./chunk-HETOKNIL.js";
 import {
   reportedInstallSource
-} from "./chunk-UM5J3J4V.js";
+} from "./chunk-HU5LSYL2.js";
 import {
   PAIR_TTL_SECONDS,
   isAnswerSource
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
+import {
+  NPX_LATEST_COMMAND
+} from "./chunk-EA3IELHP.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {
@@ -752,7 +755,7 @@ var PAIR_STOP_BEFORE_EXPIRY_MS = 1e4;
 var PAIR_TIMEOUT_MS = PAIR_TTL_SECONDS * 1e3 - PAIR_STOP_BEFORE_EXPIRY_MS;
 var PAIR_HINT_AFTER_MS = 45e3;
 var PAIR_BROWSER_FALLBACK_AFTER_MS = 6e4;
-var BROWSER_CONNECT_COMMAND = "npx @pushary/agent-hooks setup --connect browser";
+var BROWSER_CONNECT_COMMAND = `${NPX_LATEST_COMMAND} setup --connect browser`;
 var PAIR_BROWSER_FALLBACK_LINE = `Still waiting? Sign in with a browser instead: Ctrl-C, then ${BROWSER_CONNECT_COMMAND}`;
 var SYSTEM_PAIR_CLOCK = { now: () => Date.now(), sleep };
 var startPairing = async (cliPublicKey) => {

package/dist/{chunk-VOMOZ4D5.js → chunk-MYP4UUFH.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-TRLFZKVG.js";
+} from "./chunk-DYHXOXUF.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-UJBZIKSY.js → chunk-NFKVRMTM.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-SGZJ5LYH.js";
 import {
   hookOwnerOf
-} from "./chunk-4ZDKSDVW.js";
+} from "./chunk-PCGZXWGQ.js";
 import {
   ensureDaemonRunning
-} from "./chunk-BZ4GDOJX.js";
+} from "./chunk-7XT76LWT.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-GZ7E6VOB.js";
+} from "./chunk-TIWURSLS.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-EQRS3SGM.js";
+} from "./chunk-66H2QQAK.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-4BROEAKH.js";
+} from "./chunk-2QT3GCU4.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-TRLFZKVG.js";
+} from "./chunk-DYHXOXUF.js";
 import {
   readTranscriptPreference
-} from "./chunk-FU2DFEAZ.js";
+} from "./chunk-USQDVBEV.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-2UMNXADU.js";
+} from "./chunk-OSJEMXSR.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-WPVHRUDT.js → chunk-NTQSICPJ.js}

@@ -2,17 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-LPYCPFBZ.js";
+} from "./chunk-EADZPVYW.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-TRLFZKVG.js";
+} from "./chunk-DYHXOXUF.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-JVTOML54.js → chunk-ORLJNJEO.js}

@@ -1,9 +1,9 @@
 import {
   registerTranscript
-} from "./chunk-UJBZIKSY.js";
+} from "./chunk-NFKVRMTM.js";
 import {
   degradedLine
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-2UMNXADU.js → chunk-OSJEMXSR.js}

@@ -1,3 +1,7 @@
+import {
+  NPX_LATEST_COMMAND
+} from "./chunk-EA3IELHP.js";
+
 // src/config.ts
 import { readFileSync } from "fs";
 import { join } from "path";
@@ -33,7 +37,7 @@ var getApiKey = () => {
   const fileKey = readKeyFromConfigFile();
   if (fileKey) return fileKey;
   throw new Error(
-    "PUSHARY_API_KEY is not set and no key was found in ~/.pushary/config.json. Run `npx @pushary/agent-hooks setup`, or get your API key at https://pushary.com/sign-up?from=ai-coding"
+    `PUSHARY_API_KEY is not set and no key was found in ~/.pushary/config.json. Run \`${NPX_LATEST_COMMAND} setup\`, or get your API key at https://pushary.com/sign-up?from=ai-coding`
   );
 };
 var getBaseUrl = () => process.env.PUSHARY_BASE_URL?.trim() || process.env.PUSHARY_API_URL?.trim() || "https://pushary.com";

package/dist/chunk-OSSDK5RS.js

@@ -0,0 +1,162 @@
+import {
+  autoUpdateState
+} from "./chunk-DYHXOXUF.js";
+import {
+  readJsonSafe,
+  writeJsonAtomic
+} from "./chunk-T7E75EKA.js";
+import {
+  ownPackageRoot
+} from "./chunk-HWJW3CPO.js";
+
+// src/auto-update.ts
+import { spawn } from "child_process";
+import { dirname, join } from "path";
+var AUTO_UPDATE_DISABLE_ENV = "PUSHARY_DISABLE_AUTOUPDATE";
+var AUTO_UPDATE_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+var AUTO_UPDATE_FLAG = "--auto";
+var GLOBAL_PACKAGE_SUBPATH = "/lib/node_modules/@pushary/agent-hooks";
+var UPGRADE_ENTRY_SUBPATH = ["dist", "bin", "pushary-upgrade.js"];
+var NON_GLOBAL_INSTALL_SEGMENTS = ["/_npx/", "/.volta/"];
+var NOT_DISABLED_VALUES = /* @__PURE__ */ new Set(["", "0"]);
+var AUTO_UPDATE_RESULTS = ["updated", "current", "needs_manual", "failed"];
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isAutoUpdateResult = (value) => typeof value === "string" && AUTO_UPDATE_RESULTS.some((result) => result === value);
+var stringField = (record, key) => {
+  const value = record[key];
+  return typeof value === "string" ? value : void 0;
+};
+var booleanField = (record, key) => {
+  const value = record[key];
+  return typeof value === "boolean" ? value : void 0;
+};
+var parseAutoUpdateState = (value) => {
+  if (!isRecord(value)) return {};
+  return {
+    disabled: booleanField(value, "disabled"),
+    lastCheckAt: stringField(value, "lastCheckAt"),
+    lastResult: isAutoUpdateResult(value.lastResult) ? value.lastResult : void 0,
+    from: stringField(value, "from"),
+    to: stringField(value, "to"),
+    at: stringField(value, "at"),
+    detail: stringField(value, "detail"),
+    announced: booleanField(value, "announced")
+  };
+};
+var isAutoUpdateDisabledByEnv = (env) => {
+  const value = env[AUTO_UPDATE_DISABLE_ENV];
+  return value !== void 0 && !NOT_DISABLED_VALUES.has(value.trim());
+};
+var isContinuousIntegration = (env) => Boolean(env.CI);
+var autoUpdateOffReason = (input) => {
+  if (isAutoUpdateDisabledByEnv(input.env)) return "disabled_by_env";
+  if (input.state.disabled === true) return "disabled_by_user";
+  if (isContinuousIntegration(input.env)) return "ci";
+  if (input.platform === "win32") return "windows";
+  return null;
+};
+var globalInstallPrefix = (packageRoot) => {
+  const root = packageRoot.replace(/\/+$/, "");
+  if (!root.endsWith(GLOBAL_PACKAGE_SUBPATH)) return null;
+  if (NON_GLOBAL_INSTALL_SEGMENTS.some((segment) => root.includes(segment))) return null;
+  const prefix = root.slice(0, -GLOBAL_PACKAGE_SUBPATH.length);
+  return prefix.startsWith("/") ? prefix : null;
+};
+var upgradeEntryFor = (prefix) => join(prefix, GLOBAL_PACKAGE_SUBPATH, ...UPGRADE_ENTRY_SUBPATH);
+var checkedWithinInterval = (lastCheckAt, now) => {
+  const last = lastCheckAt === void 0 ? Number.NaN : Date.parse(lastCheckAt);
+  if (Number.isNaN(last)) return false;
+  const elapsed = now - last;
+  return elapsed >= 0 && elapsed < AUTO_UPDATE_INTERVAL_MS;
+};
+var autoUpdateDecision = (input) => {
+  if (input.isSubagentStart) return { kind: "skip", reason: "subagent_start" };
+  const offReason = autoUpdateOffReason(input);
+  if (offReason !== null) return { kind: "skip", reason: offReason };
+  const prefix = input.packageRoot === void 0 ? null : globalInstallPrefix(input.packageRoot);
+  if (prefix === null) return { kind: "skip", reason: "not_global_install" };
+  if (checkedWithinInterval(input.state.lastCheckAt, input.now)) return { kind: "skip", reason: "checked_recently" };
+  return { kind: "check", prefix };
+};
+var parseAutoUpdateFlag = (args) => {
+  const token = args.find((arg) => arg === AUTO_UPDATE_FLAG || arg.startsWith(`${AUTO_UPDATE_FLAG}=`));
+  if (token === void 0) return { kind: "absent" };
+  if (token === AUTO_UPDATE_FLAG) return { kind: "run" };
+  const value = token.slice(AUTO_UPDATE_FLAG.length + 1);
+  if (value === "on") return { kind: "set", enabled: true };
+  if (value === "off") return { kind: "set", enabled: false };
+  return { kind: "invalid", value };
+};
+var AUTO_UPDATE_RESULT_LABELS = {
+  updated: "updated",
+  current: "up to date",
+  needs_manual: "needs a manual upgrade",
+  failed: "failed"
+};
+var versionsOf = (state) => state.from && state.to ? `${state.from} to ${state.to}` : state.from;
+var describeAutoUpdateCheck = (state) => {
+  const label = state.lastResult ? AUTO_UPDATE_RESULT_LABELS[state.lastResult] : "no result recorded";
+  return [label, versionsOf(state), state.detail].filter(Boolean).join(", ");
+};
+var pendingAutoUpdateAnnouncement = (state) => state.lastResult === "updated" && state.announced !== true && state.from && state.to ? { from: state.from, to: state.to } : null;
+var describeAutoUpdateAnnouncement = (announcement) => `Pushary updated itself from ${announcement.from} to ${announcement.to}.`;
+var takeAutoUpdateAnnouncement = (statePath, markAnnounced) => {
+  try {
+    const announcement = pendingAutoUpdateAnnouncement(readAutoUpdateState(statePath));
+    if (announcement && markAnnounced) updateAutoUpdateState(statePath, { announced: true });
+    return announcement;
+  } catch {
+    return null;
+  }
+};
+var readAutoUpdateState = (statePath) => {
+  const read = readJsonSafe(statePath);
+  return read.kind === "ok" ? parseAutoUpdateState(read.value) : {};
+};
+var updateAutoUpdateState = (statePath, patch) => {
+  const next = { ...readAutoUpdateState(statePath), ...patch };
+  writeJsonAtomic(statePath, next);
+  return next;
+};
+var ignoreSpawnFailure = () => void 0;
+var spawnDetached = (command, args, cwd) => {
+  const child = spawn(command, [...args], { cwd, detached: true, stdio: "ignore" });
+  child.on("error", ignoreSpawnFailure);
+  child.unref();
+};
+var triggerAutoUpdate = (trigger) => {
+  try {
+    const statePath = trigger.statePath ?? autoUpdateState();
+    const now = trigger.now ?? Date.now();
+    const decision = autoUpdateDecision({
+      env: trigger.env ?? process.env,
+      state: readAutoUpdateState(statePath),
+      now,
+      platform: trigger.platform ?? process.platform,
+      packageRoot: trigger.packageRoot ?? ownPackageRoot(),
+      isSubagentStart: trigger.isSubagentStart
+    });
+    if (decision.kind === "skip") return decision;
+    updateAutoUpdateState(statePath, { lastCheckAt: new Date(now).toISOString() });
+    const spawnUpgrade = trigger.spawn ?? spawnDetached;
+    spawnUpgrade(trigger.execPath ?? process.execPath, [upgradeEntryFor(decision.prefix), AUTO_UPDATE_FLAG], dirname(statePath));
+    return decision;
+  } catch {
+    return null;
+  }
+};
+
+export {
+  AUTO_UPDATE_DISABLE_ENV,
+  isAutoUpdateDisabledByEnv,
+  autoUpdateOffReason,
+  globalInstallPrefix,
+  upgradeEntryFor,
+  parseAutoUpdateFlag,
+  describeAutoUpdateCheck,
+  describeAutoUpdateAnnouncement,
+  takeAutoUpdateAnnouncement,
+  readAutoUpdateState,
+  updateAutoUpdateState,
+  triggerAutoUpdate
+};

package/dist/{chunk-TWWLVOPB.js → chunk-P4BNYJ5Q.js}

@@ -1,12 +1,12 @@
+import {
+  EXIT
+} from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-FAH3D74E.js";
+} from "./chunk-EA3IELHP.js";
 import {
   getPackageVersion
-} from "./chunk-DINDL2CF.js";
-import {
-  EXIT
-} from "./chunk-KZERVKTD.js";
+} from "./chunk-HWJW3CPO.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-4ZDKSDVW.js → chunk-PCGZXWGQ.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-DY4ILT6L.js";
+} from "./chunk-TFKBFQCE.js";
 import {
   isBridgeLocator
-} from "./chunk-ZVY25BMK.js";
+} from "./chunk-K3QVDAZW.js";
 import {
   pusharyHookExecutable
-} from "./chunk-WPVHRUDT.js";
+} from "./chunk-NTQSICPJ.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-MW6ZPC6R.js";
+} from "./chunk-SOCEY746.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-ACYIZ3KH.js → chunk-PNNBMH4E.js}

@@ -1,18 +1,18 @@
 import {
   detectClaudeVersion
-} from "./chunk-PC6DU5C4.js";
+} from "./chunk-3NBODGQS.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-II7PUMPB.js";
+} from "./chunk-J4J45VPZ.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
   codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-WPVHRUDT.js";
+} from "./chunk-NTQSICPJ.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -24,7 +24,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-LPYCPFBZ.js";
+} from "./chunk-EADZPVYW.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -44,7 +44,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-TRLFZKVG.js";
+} from "./chunk-DYHXOXUF.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-LGXUGYUH.js → chunk-PYCQXCI5.js}

@@ -1,12 +1,12 @@
 import {
   callMcpTool
-} from "./chunk-EYRGBYZG.js";
+} from "./chunk-HETOKNIL.js";
 import {
   installProxyDispatcher
 } from "./chunk-SAF6HGAA.js";
 import {
   getBaseUrl
-} from "./chunk-2UMNXADU.js";
+} from "./chunk-OSJEMXSR.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-MW6ZPC6R.js → chunk-SOCEY746.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-TRLFZKVG.js";
+} from "./chunk-DYHXOXUF.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-SOUZBGYJ.js → chunk-T4QY64OR.js}

@@ -22,6 +22,7 @@ var COWORK_STANDING_INSTRUCTIONS = `Pushary is connected as a custom connector.
 - If Pushary tools are missing or disabled, report that once and continue within my authorization. Do not claim a notification or approval was delivered.`;
 
 // ../contracts/src/agent-manifest.ts
+var AGENT_HOOKS_SETUP_COMMAND = "npx @pushary/agent-hooks@latest setup";
 var defaults = {
   hasStoredIdentity: true,
   hookSource: null,
@@ -53,7 +54,7 @@ var AGENTS = {
     managedProvider: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits, subject to Claude Code permission mode and explicit policy."
   },
   claude_chat: {
@@ -80,7 +81,7 @@ var AGENTS = {
     managedProvider: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell and apply_patch edits through native permission hooks; requires a compatible Codex runtime."
   },
   chatgpt: {
@@ -100,7 +101,7 @@ var AGENTS = {
     managedProvider: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native BeforeTool hooks."
   },
   hermes: {
@@ -109,7 +110,7 @@ var AGENTS = {
     policyAgent: "hermes",
     enforcement: "enforced",
     connectVia: "Native Python plugin + approval transport",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Hermes dangerous-command approvals when the Pushary transport is selected; optional PUSHARY_GATE_TOOLS gates named tools.",
     capabilityNote: "Uses the Python plugin, not a macOS bridge HookSource. CLI disconnect and managed-provider controls are not implemented for Hermes."
   },
@@ -122,7 +123,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Editor plugin hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "With installed hooks: shell, MCP execution and Write/Delete/Edit tool calls. Plain MCP remains cooperative."
   },
   vscode: {
@@ -133,7 +134,7 @@ var AGENTS = {
     policyAgent: "vscode",
     enforcement: "enforced",
     connectVia: "Agent plugin hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "PreToolUse approval hooks from the installed agent plugin; the host decides which events it exposes.",
     capabilityNote: "Has both a bridge HookSource and a per-agent policy profile. CLI disconnect and managed-provider controls are not implemented for VS Code."
   },
@@ -147,7 +148,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Generated plugin + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell, writes, edits and web fetches when OpenCode itself asks for permission."
   },
   qwen_code: {
@@ -160,7 +161,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native PreToolUse hooks, matched on Qwen's own tool names and their Claude-shaped aliases."
   },
   codebuddy: {
@@ -173,7 +174,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native PreToolUse hooks, plus PermissionRequest. CodeBuddy implements the Claude Code hook specification."
   },
   qoder: {
@@ -186,7 +187,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Shell, writes and edits through native PreToolUse hooks, plus PermissionRequest, over Qoder's superset of the Claude Code event list.",
     capabilityNote: "Qoder documents no user-level instructions file, so the proactive-ask block is not installed. Hooks and MCP are unaffected. Like every agent in this family, the CLI wires it; the macOS app does not yet."
   },
@@ -200,7 +201,7 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "Execute, Create, Edit and ApplyPatch through native PreToolUse hooks in ~/.factory/hooks.json.",
     capabilityNote: "Droid registers MCP servers through `droid mcp add` rather than a documented remote-server config shape, so setup writes hooks only. Add Pushary's MCP server yourself to let Droid send notifications and ask questions."
   },
@@ -214,14 +215,14 @@ var AGENTS = {
     disconnectable: true,
     enforcement: "enforced",
     connectVia: "Native hooks",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     enforcementDetail: "exec, write and edit through native PreToolUse hooks, answered in Devin's own approve/block schema.",
     capabilityNote: "Devin CLI answers PreToolUse with `{decision}` rather than a permission decision. Pushary blocks an unanswered approval because this adapter cannot request a native prompt reliably. Question and plan dialogs remain with Devin; this adapter does not render their answers. It also fires no Notification event."
   },
   windsurf: {
     ...defaults,
     label: "Windsurf",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     setupChoice: "Other"
   },
   unknown: {
@@ -238,7 +239,7 @@ var AGENTS = {
     ...defaults,
     hasStoredIdentity: false,
     label: "Any MCP client",
-    setupCommand: "npx @pushary/agent-hooks setup",
+    setupCommand: AGENT_HOOKS_SETUP_COMMAND,
     setupChoice: "Other"
   },
   http: {

package/dist/{chunk-DY4ILT6L.js → chunk-TFKBFQCE.js}

@@ -7,7 +7,7 @@ import {
 import {
   COMPATIBLE_AGENT_TYPES,
   isValidApiKey
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", ...COMPATIBLE_AGENT_TYPES, "custom"];

package/dist/{chunk-GZ7E6VOB.js → chunk-TIWURSLS.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-F4UWL4NY.js → chunk-TUXFIVOH.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-NHTAHAIS.js → chunk-UQHUUZ5H.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-TRLFZKVG.js";
+} from "./chunk-DYHXOXUF.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-FU2DFEAZ.js → chunk-USQDVBEV.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-UM5J3J4V.js";
+} from "./chunk-HU5LSYL2.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,7 +9,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   configFilePath
-} from "./chunk-2UMNXADU.js";
+} from "./chunk-OSJEMXSR.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-YXP3WPAI.js → chunk-UYDTFCHW.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-SOUZBGYJ.js";
+} from "./chunk-T4QY64OR.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];