@pushary/agent-hooks 1.6.3 → 1.7.0

package/dist/{chunk-P35IUFFR.js → chunk-L4H2Q2S4.js}

@@ -1,12 +1,244 @@
+import {
+  MCP_BRIDGE_BINARY
+} from "./chunk-YYINL576.js";
 import {
   openCodeConfigDirFrom
-} from "./chunk-STOMNX4S.js";
+} from "./chunk-B3YQANFN.js";
 import {
   codexHomeFrom
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-DNJUSFBL.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-YROGUPOZ.js";
+
+// src/fx-config.ts
+var FX_SERVER_NAME = "pushary";
+var FX_OPERATION_TIMEOUT_MS = 75e3;
+var FX_PROFILE_MAX_BYTES = 1024 * 1024 - 1;
+var FX_SETTINGS_MAX_BYTES = 64 * 1024;
+var FX_PUSHARY_TOOLS_RULE = "mcp_pushary_*";
+var FX_TOOL_DISCOVERY_NOTE = 'In fx, these tools are named mcp_pushary_ask_user, mcp_pushary_send_notification, mcp_pushary_wait_for_answer and mcp_pushary_cancel_question. They are not loaded at the start of a turn: find them with capability_search (query "pushary") or select one with mcp_select_tool. When the user may be away from this terminal, use mcp_pushary_ask_user rather than your built-in question prompt.';
+var ALLOW_ACTION = "allow";
+var PERMISSION_KEY = "permission";
+var WORKSPACES_KEY = "workspaces";
+var CANONICAL_SERVERS_KEY = "mcp";
+var ALIAS_SERVERS_KEY = "mcpServers";
+var LOCAL_TRANSPORT = "local";
+var SERVER_TRANSPORTS = /* @__PURE__ */ new Set(["local", "stdio", "http", "sse"]);
+var STDIO_TRANSPORTS = /* @__PURE__ */ new Set(["local", "stdio"]);
+var AMBIGUOUS_SERVER_KEYS = /* @__PURE__ */ new Set([
+  "mcpserver",
+  "mcpservers",
+  "modelcontextprotocol",
+  "modelcontextprotocolserver",
+  "modelcontextprotocolservers",
+  "servers"
+]);
+var PROFILE_SCAN_LIMIT = 64;
+var PROFILE_KEY_BYTES_LIMIT = 128;
+var FX_JSON_REFUSALS = {
+  "too-large": "is larger than fx reads",
+  "unparseable": "is not strict JSON (fx rejects comments, trailing commas and a byte-order mark)",
+  "duplicate-key": "repeats a key, which fx rejects",
+  "root-not-object": "is not a JSON object"
+};
+var FX_PROFILE_REFUSALS = {
+  ...FX_JSON_REFUSALS,
+  "servers-not-object": 'has an "mcp" or "mcpServers" value that is not an object',
+  "ambiguous-server-key": "holds servers under a key fx does not read, so fx refuses to edit it too",
+  "too-many-keys": "has more top-level keys than fx checks for misplaced servers, so fx refuses to edit it too"
+};
+var FX_SETTINGS_REFUSALS = {
+  ...FX_JSON_REFUSALS,
+  "permission-not-object": 'has a "permission" value that is not an object'
+};
+var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+var stringTokenEnd = (text, start) => {
+  let index = start + 1;
+  while (index < text.length && text[index] !== '"') index += text[index] === "\\" ? 2 : 1;
+  return index;
+};
+var hasDuplicateObjectKeys = (json) => {
+  const scopes = [];
+  let expectingKey = false;
+  for (let index = 0; index < json.length; index += 1) {
+    const char = json[index];
+    if (char === '"') {
+      const end = stringTokenEnd(json, index);
+      const scope = scopes.at(-1);
+      if (expectingKey && scope) {
+        const key = JSON.parse(json.slice(index, end + 1));
+        if (typeof key === "string" && scope.has(key)) return true;
+        if (typeof key === "string") scope.add(key);
+        expectingKey = false;
+      }
+      index = end;
+    } else if (char === "{") {
+      scopes.push(/* @__PURE__ */ new Set());
+      expectingKey = true;
+    } else if (char === "[") {
+      scopes.push(null);
+      expectingKey = false;
+    } else if (char === "}" || char === "]") {
+      scopes.pop();
+      expectingKey = false;
+    } else if (char === ",") {
+      expectingKey = scopes.at(-1) instanceof Set;
+    }
+  }
+  return false;
+};
+var normalizedServerKey = (key) => key.replace(/[^A-Za-z0-9]/g, "").toLowerCase();
+var looksLikeServerEntry = (value) => {
+  const entry = asRecord(value);
+  if (!entry) return false;
+  return typeof entry.command === "string" || Array.isArray(entry.command) || typeof entry.url === "string" || typeof entry.type === "string" && SERVER_TRANSPORTS.has(entry.type);
+};
+var holdsServerEntries = (value) => Object.values(asRecord(value) ?? {}).some(looksLikeServerEntry);
+var isServerMapKey = (key) => key === CANONICAL_SERVERS_KEY || key === ALIAS_SERVERS_KEY;
+var exceedsScanLimit = (value) => Object.keys(asRecord(value) ?? {}).length > PROFILE_SCAN_LIMIT;
+var isAmbiguousServerKey = (key, value) => {
+  if (isServerMapKey(key)) return false;
+  const scanned = Buffer.byteLength(key) > PROFILE_KEY_BYTES_LIMIT || AMBIGUOUS_SERVER_KEYS.has(normalizedServerKey(key));
+  return scanned && (exceedsScanLimit(value) || holdsServerEntries(value));
+};
+var misplacedServersRefusal = (profile) => {
+  if (exceedsScanLimit(profile)) return "too-many-keys";
+  return Object.keys(profile).some((key) => isAmbiguousServerKey(key, profile[key])) ? "ambiguous-server-key" : null;
+};
+var fxServersKeyOf = (profile) => !(CANONICAL_SERVERS_KEY in profile) && ALIAS_SERVERS_KEY in profile ? ALIAS_SERVERS_KEY : CANONICAL_SERVERS_KEY;
+var refused = (reason) => ({ kind: "refused", reason });
+var parseJson = (text) => {
+  try {
+    return { ok: true, value: JSON.parse(text) };
+  } catch {
+    return { ok: false };
+  }
+};
+var readFxJsonObject = (text, maxBytes) => {
+  if (Buffer.byteLength(text) > maxBytes) return { kind: "refused", reason: "too-large" };
+  if (!text.trim()) return { kind: "object", value: {} };
+  const parsed = parseJson(text);
+  if (!parsed.ok) return { kind: "refused", reason: "unparseable" };
+  if (hasDuplicateObjectKeys(text)) return { kind: "refused", reason: "duplicate-key" };
+  const value = asRecord(parsed.value);
+  return value ? { kind: "object", value } : { kind: "refused", reason: "root-not-object" };
+};
+var readFxProfile = (text) => {
+  const read = readFxJsonObject(text, FX_PROFILE_MAX_BYTES);
+  if (read.kind === "refused") return refused(read.reason);
+  const profile = read.value;
+  const serversKey = fxServersKeyOf(profile);
+  if (serversKey in profile && !asRecord(profile[serversKey])) return refused("servers-not-object");
+  const misplaced = misplacedServersRefusal(profile);
+  return misplaced ? refused(misplaced) : { kind: "profile", profile };
+};
+var fxPusharyEntry = (command) => ({
+  type: LOCAL_TRANSPORT,
+  command,
+  operation_timeout_ms: FX_OPERATION_TIMEOUT_MS
+});
+var withFxPusharyServer = (profile, entry) => {
+  const serversKey = fxServersKeyOf(profile);
+  return {
+    ...profile,
+    [serversKey]: { ...asRecord(profile[serversKey]), [FX_SERVER_NAME]: { ...entry, command: [...entry.command] } }
+  };
+};
+var emptiedMapCanGo = (profile, serversKey) => serversKey === ALIAS_SERVERS_KEY || !(ALIAS_SERVERS_KEY in profile);
+var withoutFxPusharyServer = (profile) => {
+  const serversKey = fxServersKeyOf(profile);
+  const servers = asRecord(profile[serversKey]);
+  if (!servers || !(FX_SERVER_NAME in servers)) return { profile, removed: false };
+  const remaining = Object.fromEntries(Object.entries(servers).filter(([name]) => name !== FX_SERVER_NAME));
+  const withoutServers = Object.fromEntries(Object.entries(profile).filter(([key]) => key !== serversKey));
+  const dropsMap = Object.keys(remaining).length === 0 && emptiedMapCanGo(profile, serversKey);
+  return {
+    profile: dropsMap ? withoutServers : { ...profile, [serversKey]: remaining },
+    removed: true
+  };
+};
+var namesBridge = (part) => typeof part === "string" && part.includes(MCP_BRIDGE_BINARY);
+var commandNamesBridge = (command) => Array.isArray(command) ? command.some(namesBridge) : namesBridge(command);
+var isFxPusharyEntry = (value) => {
+  const entry = asRecord(value);
+  if (!entry || entry.enabled === false) return false;
+  const transport = typeof entry.type === "string" ? entry.type : LOCAL_TRANSPORT;
+  return STDIO_TRANSPORTS.has(transport) && (commandNamesBridge(entry.command) || commandNamesBridge(entry.args));
+};
+var fxPusharyEntryOf = (profile) => asRecord(profile[fxServersKeyOf(profile)])?.[FX_SERVER_NAME];
+var isBridgeTarget = (part) => namesBridge(part);
+var fxBridgeTargetOf = (value) => {
+  const entry = asRecord(value);
+  const parts = [entry?.command, entry?.args].flatMap((part) => Array.isArray(part) ? part : [part]);
+  return parts.find(isBridgeTarget);
+};
+var fxFileText = (value, maxBytes) => {
+  const text = JSON.stringify(value);
+  return Buffer.byteLength(text) > maxBytes ? { kind: "refused", reason: "too-large" } : { kind: "text", text };
+};
+var fxProfileText = (profile) => fxFileText(profile, FX_PROFILE_MAX_BYTES);
+var fxSettingsText = (settings) => fxFileText(settings, FX_SETTINGS_MAX_BYTES);
+var readFxSettings = (text) => {
+  const read = readFxJsonObject(text, FX_SETTINGS_MAX_BYTES);
+  if (read.kind === "refused") return read;
+  const permission = read.value[PERMISSION_KEY];
+  if (permission !== void 0 && !asRecord(permission)) return { kind: "refused", reason: "permission-not-object" };
+  return { kind: "settings", settings: read.value };
+};
+var withPusharyToolsAllowed = (settings) => {
+  const permission = asRecord(settings[PERMISSION_KEY]) ?? {};
+  const existing = permission[FX_PUSHARY_TOOLS_RULE];
+  if (existing === ALLOW_ACTION) return { settings, change: "present" };
+  if (existing !== void 0) return { settings, change: "user-rule-kept" };
+  return {
+    settings: { ...settings, [PERMISSION_KEY]: { ...permission, [FX_PUSHARY_TOOLS_RULE]: ALLOW_ACTION } },
+    change: "added"
+  };
+};
+var withoutPusharyToolsAllowed = (settings) => {
+  const permission = asRecord(settings[PERMISSION_KEY]);
+  if (permission?.[FX_PUSHARY_TOOLS_RULE] !== ALLOW_ACTION) return { settings, removed: false };
+  const remaining = Object.fromEntries(Object.entries(permission).filter(([rule]) => rule !== FX_PUSHARY_TOOLS_RULE));
+  const withoutPermission = Object.fromEntries(Object.entries(settings).filter(([key]) => key !== PERMISSION_KEY));
+  return {
+    settings: Object.keys(remaining).length === 0 ? withoutPermission : { ...settings, [PERMISSION_KEY]: remaining },
+    removed: true
+  };
+};
+var pusharyToolsAllowed = (settings) => asRecord(settings[PERMISSION_KEY])?.[FX_PUSHARY_TOOLS_RULE] === ALLOW_ACTION;
+var overridesPusharyRule = (workspace) => {
+  const permission = asRecord(asRecord(workspace)?.[PERMISSION_KEY]);
+  return permission !== void 0 && !(FX_PUSHARY_TOOLS_RULE in permission);
+};
+var workspacesOverridingPusharyRule = (settings) => Object.entries(asRecord(settings[WORKSPACES_KEY]) ?? {}).filter(([, workspace]) => overridesPusharyRule(workspace)).map(([path]) => path);
+
+// src/fx-files.ts
+import { existsSync, lstatSync, readFileSync, realpathSync } from "fs";
+import { relative, isAbsolute } from "path";
+var readFxFile = (path, read) => {
+  if (!existsSync(path)) return { kind: "missing" };
+  let text;
+  try {
+    text = readFileSync(path, "utf-8");
+  } catch {
+    return { kind: "unreadable" };
+  }
+  return read(text);
+};
+var isInside = (child, parent) => {
+  const path = relative(parent, child);
+  return path !== "" && !path.startsWith("..") && !isAbsolute(path);
+};
+var fxIgnoresInstructionsFile = (path, fxDir) => {
+  const link = lstatSync(path, { throwIfNoEntry: false });
+  if (!link?.isSymbolicLink()) return false;
+  try {
+    return !isInside(realpathSync(path), realpathSync(fxDir));
+  } catch {
+    return true;
+  }
+};
 
 // src/vscode-config.ts
 import { homedir } from "os";
@@ -54,12 +286,12 @@ var blankJsonComments = (text) => {
   }
   return out;
 };
-var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+var asRecord2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 var parseJsonc = (text) => {
   const blanked = blankJsonComments(text);
   const withoutTrailingCommas = blanked.replace(/,(\s*[}\]])/g, "$1");
   try {
-    return asRecord(JSON.parse(withoutTrailingCommas));
+    return asRecord2(JSON.parse(withoutTrailingCommas));
   } catch {
     return void 0;
   }
@@ -77,9 +309,9 @@ var registerPluginLocation = (existing, pluginDir) => {
   }
   const indent = detectIndent(existing);
   try {
-    const parsed2 = asRecord(JSON.parse(existing));
+    const parsed2 = asRecord2(JSON.parse(existing));
     if (parsed2) {
-      const locations2 = asRecord(parsed2[PLUGIN_LOCATIONS_KEY]) ?? {};
+      const locations2 = asRecord2(parsed2[PLUGIN_LOCATIONS_KEY]) ?? {};
       if (locations2[pluginDir] === true) return { kind: "already" };
       parsed2[PLUGIN_LOCATIONS_KEY] = { ...locations2, [pluginDir]: true };
       return { kind: "merged", content: `${JSON.stringify(parsed2, null, indent)}
@@ -89,7 +321,7 @@ var registerPluginLocation = (existing, pluginDir) => {
   }
   const parsed = parseJsonc(existing);
   if (!parsed) return { kind: "manual" };
-  const locations = asRecord(parsed[PLUGIN_LOCATIONS_KEY]);
+  const locations = asRecord2(parsed[PLUGIN_LOCATIONS_KEY]);
   if (locations?.[pluginDir] === true) return { kind: "already" };
   if (parsed[PLUGIN_LOCATIONS_KEY] !== void 0) return { kind: "manual" };
   const brace = rootBraceIndex(existing);
@@ -106,9 +338,9 @@ var unregisterPluginLocation = (existing, pluginDir) => {
   if (existing === null || existing.trim() === "") return { kind: "absent" };
   const indent = detectIndent(existing);
   try {
-    const parsed2 = asRecord(JSON.parse(existing));
+    const parsed2 = asRecord2(JSON.parse(existing));
     if (parsed2) {
-      const locations2 = asRecord(parsed2[PLUGIN_LOCATIONS_KEY]);
+      const locations2 = asRecord2(parsed2[PLUGIN_LOCATIONS_KEY]);
       if (!locations2 || !(pluginDir in locations2)) return { kind: "absent" };
       const remaining = { ...locations2 };
       delete remaining[pluginDir];
@@ -121,7 +353,7 @@ var unregisterPluginLocation = (existing, pluginDir) => {
   }
   const parsed = parseJsonc(existing);
   if (!parsed) return { kind: "manual" };
-  const locations = asRecord(parsed[PLUGIN_LOCATIONS_KEY]);
+  const locations = asRecord2(parsed[PLUGIN_LOCATIONS_KEY]);
   if (!locations || !(pluginDir in locations)) return { kind: "absent" };
   const line = new RegExp(
     `\\n[ \\t]*${escapeRegExp(JSON.stringify(PLUGIN_LOCATIONS_KEY))}\\s*:\\s*\\{\\s*${escapeRegExp(JSON.stringify(pluginDir))}\\s*:\\s*true\\s*\\},?`
@@ -133,7 +365,7 @@ var escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 var isPluginRegistered = (existing, pluginDir) => {
   if (!existing) return false;
   const parsed = parseJsonc(existing);
-  return asRecord(parsed?.[PLUGIN_LOCATIONS_KEY])?.[pluginDir] === true;
+  return asRecord2(parsed?.[PLUGIN_LOCATIONS_KEY])?.[pluginDir] === true;
 };
 var pluginLocationSnippet = (pluginDir) => `"${PLUGIN_LOCATIONS_KEY}": {
   ${JSON.stringify(pluginDir)}: true
@@ -156,7 +388,7 @@ var vscodeSettingsTargets = (exists, home, platform) => {
 
 // src/setup/detect.ts
 import { execSync } from "child_process";
-import { existsSync } from "fs";
+import { existsSync as existsSync2 } from "fs";
 import { homedir as homedir2 } from "os";
 import { dirname, join as join2 } from "path";
 var whichCommand = () => process.platform === "win32" ? "where" : "which";
@@ -168,7 +400,7 @@ var binaryOnPath = (binary) => {
     return false;
   }
 };
-var defaultDeps = { onPath: binaryOnPath, exists: existsSync };
+var defaultDeps = { onPath: binaryOnPath, exists: existsSync2 };
 var detectAgent = (probe, deps = defaultDeps) => {
   const checked = [];
   if (probe.binary) {
@@ -237,6 +469,11 @@ var agentProbes = (home = homedir2()) => ({
     // never used.
     configMarkers: [openCodeConfigDirFrom(home)]
   },
+  fx: {
+    binary: null,
+    paths: [join2(home, ".fx", "settings.json"), join2(home, ".fx", "sessions"), join2(home, ".fx", "history.jsonl")],
+    configMarkers: []
+  },
   ...compatibleProbes(),
   // "Other" is a set of printed instructions for any MCP or HTTP client. There is
   // nothing to detect, and it must never be auto-selected.
@@ -266,7 +503,7 @@ var describeDetection = (result, home) => {
 };
 
 // src/instruction-file.ts
-import { existsSync as existsSync2, readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";
+import { existsSync as existsSync3, readFileSync as readFileSync2, writeFileSync, mkdirSync, rmSync } from "fs";
 import { dirname as dirname2 } from "path";
 var PUSHARY_BEGIN = "<!-- BEGIN PUSHARY (managed by @pushary/agent-hooks; do not edit this block) -->";
 var PUSHARY_END = "<!-- END PUSHARY -->";
@@ -296,10 +533,10 @@ ${body}
 ${PUSHARY_END}`;
 var writeInstructionBlock = (filePath, body) => {
   const dir = dirname2(filePath);
-  if (!existsSync2(dir)) mkdirSync(dir, { recursive: true });
+  if (!existsSync3(dir)) mkdirSync(dir, { recursive: true });
   let existing = "";
   try {
-    existing = readFileSync(filePath, "utf-8");
+    existing = readFileSync2(filePath, "utf-8");
   } catch {
   }
   const block = wrap(body);
@@ -317,7 +554,7 @@ var writeInstructionBlock = (filePath, body) => {
 var removeInstructionBlock = (filePath) => {
   let existing = "";
   try {
-    existing = readFileSync(filePath, "utf-8");
+    existing = readFileSync2(filePath, "utf-8");
   } catch {
     return false;
   }
@@ -334,13 +571,33 @@ var removeInstructionBlock = (filePath) => {
 };
 var hasInstructionBlock = (filePath) => {
   try {
-    return readFileSync(filePath, "utf-8").includes(PUSHARY_BEGIN);
+    return readFileSync2(filePath, "utf-8").includes(PUSHARY_BEGIN);
   } catch {
     return false;
   }
 };
 
 export {
+  FX_PUSHARY_TOOLS_RULE,
+  FX_TOOL_DISCOVERY_NOTE,
+  FX_PROFILE_REFUSALS,
+  FX_SETTINGS_REFUSALS,
+  readFxProfile,
+  fxPusharyEntry,
+  withFxPusharyServer,
+  withoutFxPusharyServer,
+  isFxPusharyEntry,
+  fxPusharyEntryOf,
+  fxBridgeTargetOf,
+  fxProfileText,
+  fxSettingsText,
+  readFxSettings,
+  withPusharyToolsAllowed,
+  withoutPusharyToolsAllowed,
+  pusharyToolsAllowed,
+  workspacesOverridingPusharyRule,
+  readFxFile,
+  fxIgnoresInstructionsFile,
   registerPluginLocation,
   unregisterPluginLocation,
   isPluginRegistered,

package/dist/{chunk-NKR4YDRP.js → chunk-LEZFOTMI.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-DNJUSFBL.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-WD6W7QDI.js → chunk-O2LEPIU6.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-57DDP4TB.js";
+} from "./chunk-ZQ7IDOKY.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/chunk-POFBE6ZY.js

@@ -0,0 +1,12 @@
+// src/cli/env-switch.ts
+var CLIENT_REPORT_DISABLE_ENV = "PUSHARY_DISABLE_CLIENT_REPORTS";
+var NOT_DISABLED_VALUES = /* @__PURE__ */ new Set(["", "0"]);
+var isDisabledByEnv = (env, name) => {
+  const value = env[name];
+  return value !== void 0 && !NOT_DISABLED_VALUES.has(value.trim());
+};
+
+export {
+  CLIENT_REPORT_DISABLE_ENV,
+  isDisabledByEnv
+};

package/dist/{chunk-SND3C2AV.js → chunk-PQ4F64M2.js}

@@ -2,17 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-57DDP4TB.js";
+} from "./chunk-ZQ7IDOKY.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-3BJQYXTL.js";
+} from "./chunk-DNJUSFBL.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-3UOC3GRO.js → chunk-PUDBG3GM.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-TZ4KUNZG.js";
+} from "./chunk-X6KDKOV5.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-YQMFGWBD.js → chunk-QXAK5RFU.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-OSJEMXSR.js";
+} from "./chunk-V4AQBAVG.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-REYWOCQJ.js → chunk-R2XCLT6I.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-HCVAMXHT.js";
+} from "./chunk-CVALVGA7.js";
 import {
   isBridgeLocator
-} from "./chunk-GQPCPEG2.js";
+} from "./chunk-5HLTWFJ6.js";
 import {
   pusharyHookExecutable
-} from "./chunk-SND3C2AV.js";
+} from "./chunk-PQ4F64M2.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-VDMX5EMU.js";
+} from "./chunk-VKVIAZQO.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-NPGOQQCV.js → chunk-ROQK7IN3.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-OSJEMXSR.js";
+} from "./chunk-V4AQBAVG.js";
 import {
   normalizeInstallSource
-} from "./chunk-GHOB245Q.js";
+} from "./chunk-YROGUPOZ.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-GU3EJCVV.js → chunk-S3UD4V6W.js}

@@ -1,3 +1,36 @@
+import {
+  NPX_LATEST_COMMAND
+} from "./chunk-B3UXMSMW.js";
+
+// src/setup/agent-failure.ts
+var AgentConfigError = class extends Error {
+  kind;
+  filePath;
+  constructor(kind, filePath, message) {
+    super(message);
+    this.name = "AgentConfigError";
+    this.kind = kind;
+    this.filePath = filePath;
+  }
+};
+var configFailureKind = (readFailure) => readFailure === "unparseable" ? "config-unparseable" : "config-unreadable";
+var AGENT_FAILURE_DETAILS = {
+  "not-wired": "reported success but its config is not there.",
+  "app-account-mismatch": "Mac app hooks kept, but their Pushary account could not be matched to this setup."
+};
+var describedAgentFailure = (agent, kind) => ({
+  agent,
+  kind,
+  detail: AGENT_FAILURE_DETAILS[kind]
+});
+var agentFailureFromError = (agent, error, describeError) => ({
+  agent,
+  kind: error instanceof AgentConfigError ? error.kind : "installer-error",
+  detail: describeError(error)
+});
+var retryAgentCommand = (agent) => `${NPX_LATEST_COMMAND} setup --agents ${agent}`;
+var agentFailureWire = (failures) => failures.map(({ agent, kind }) => ({ agent, kind }));
+
 // src/diagnostics/service-runtime.ts
 var unescapeXml = (value) => value.replaceAll("&quot;", '"').replaceAll("&apos;", "'").replaceAll("&lt;", "<").replaceAll("&gt;", ">").replaceAll("&amp;", "&");
 var unquoteSystemd = (value) => value.replaceAll('\\"', '"').replaceAll("\\\\", "\\").replaceAll("%%", "%");
@@ -37,6 +70,12 @@ var versionManagerOf = (execPath) => {
 var describeVersionManagerPin = (execPath, manager) => `The background service is pinned to ${execPath}, which ${manager} manages. Switching Node versions strands it; run pushary daemon install afterwards.`;
 
 export {
+  AgentConfigError,
+  configFailureKind,
+  describedAgentFailure,
+  agentFailureFromError,
+  retryAgentCommand,
+  agentFailureWire,
   readServiceExecPath,
   versionManagerOf,
   describeVersionManagerPin

package/dist/{chunk-ICGAIM2R.js → chunk-SQRWHALT.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-KNIIFNNQ.js";
+} from "./chunk-BH2SKSSK.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-66H2QQAK.js";
+} from "./chunk-KXMZMZD3.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-JX67DVMY.js → chunk-UC65FJJT.js}

@@ -1,9 +1,9 @@
 import {
   registerTranscript
-} from "./chunk-LDS4ERW4.js";
+} from "./chunk-EAQMWJPG.js";
 import {
-  degradedLine
-} from "./chunk-GHOB245Q.js";
+  writeDegraded
+} from "./chunk-V6QRSU2G.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];
@@ -63,12 +63,11 @@ var matches = (rule, source, event) => {
 var isAdmitted = (rules, source, event) => !rules.disabled.some((rule) => matches(rule, source, event));
 var readHookInput = async (source, fallbackEvent = "", stdin = process.stdin, parseInput) => {
   if (source === null) {
-    process.stderr.write(`${degradedLine("hook", {
+    writeDegraded("hook", {
       reason: "unknown_agent",
       fallback: "stood aside, so nothing is gated or reported for this call",
       event: fallbackEvent
-    })}
-`);
+    });
     return null;
   }
   let raw = "";

package/dist/{chunk-CWIARY6F.js → chunk-UOAQ6QMP.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-NPGOQQCV.js";
+} from "./chunk-ROQK7IN3.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,7 +9,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   configFilePath
-} from "./chunk-OSJEMXSR.js";
+} from "./chunk-V4AQBAVG.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-OSJEMXSR.js → chunk-V4AQBAVG.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-EA3IELHP.js";
+} from "./chunk-B3UXMSMW.js";
 
 // src/config.ts
 import { readFileSync } from "fs";