@pushary/agent-hooks 1.6.4 → 1.7.1

package/dist/bin/pushary-clean.js

@@ -6,25 +6,40 @@ import {
   PUSHARY_SKILL_SOURCE,
   createGuards,
   resolveHermesPython,
-  runHermesPythonScript
-} from "../chunk-N62KAMMY.js";
-import "../chunk-P32LPT2L.js";
+  runHermesPythonScript,
+  withoutPusharyCursorHooks
+} from "../chunk-JMBG47WV.js";
 import {
+  FX_PROFILE_REFUSALS,
+  FX_QUESTION_TOOL,
+  FX_SETTINGS_REFUSALS,
+  fxProfileText,
+  fxSettingsText,
+  isFxQuestionRuleReceipt,
+  readFxFile,
+  readFxProfile,
+  readFxSettings,
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
-  vscodeSettingsTargets
-} from "../chunk-NFH73H5B.js";
+  vscodeSettingsTargets,
+  withoutFxPusharyServer,
+  withoutPusharyToolsAllowed,
+  withoutQuestionsRoutedToPushary
+} from "../chunk-NAAZCNKI.js";
+import "../chunk-2FU43B5Q.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
   hasForeignPlugins,
   isOpenCodePluginOurs,
+  openCodeConfigDir,
   openCodeConfigFile,
+  openCodeInstructionsFile,
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-3VZX4NSP.js";
+} from "../chunk-NID4UZDN.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -32,44 +47,42 @@ import {
   compatiblePermissionRuleFile,
   removeCompatibleHooks,
   removeCompatibleMcpServer
-} from "../chunk-LJEL7IB5.js";
+} from "../chunk-KBLIVEFJ.js";
 import {
   isClaudeMcpSnapshot,
   removeClaudeMcpServers,
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-ZA5UXRNE.js";
+} from "../chunk-WSC53O7I.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-5SWQZ6HY.js";
-import "../chunk-I2YUMZLE.js";
+} from "../chunk-SVEMF2VO.js";
+import "../chunk-XMN37YJH.js";
 import {
   liveBridgeProbe,
   resolveBridgeStub
-} from "../chunk-I3XJATMR.js";
-import {
-  pusharyHookExecutable
-} from "../chunk-YXPGFRRW.js";
+} from "../chunk-MWVCDP64.js";
+import "../chunk-XDASEYRS.js";
 import {
   disableDaemonService
-} from "../chunk-OZE2TQX5.js";
+} from "../chunk-AAGLDXH4.js";
 import {
   removeGeminiSettings
-} from "../chunk-7CLTSZOL.js";
-import "../chunk-LQI7W4RG.js";
+} from "../chunk-WZWXBTRF.js";
+import "../chunk-XPMOCJHN.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-H6XU22TN.js";
-import "../chunk-YUGGNZSF.js";
-import "../chunk-EREBZHN2.js";
-import "../chunk-VOCZHOXV.js";
+import "../chunk-WM3U2RUK.js";
+import "../chunk-4C4NRDIC.js";
+import "../chunk-ZIIYTQHC.js";
+import "../chunk-KSNAAMU5.js";
 import "../chunk-POFBE6ZY.js";
 import {
   exitOnHelpFlag
-} from "../chunk-P4BNYJ5Q.js";
+} from "../chunk-6PV2JQ64.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -77,15 +90,15 @@ import {
   CANDIDATE_RCS,
   isDisabledExport,
   removeClaudeAlias
-} from "../chunk-R4HVHTNA.js";
-import "../chunk-BJENQBMH.js";
-import "../chunk-DESAUCH2.js";
-import "../chunk-DZTKLE7Q.js";
+} from "../chunk-YZKS3ME3.js";
+import "../chunk-NQFGVAT6.js";
+import "../chunk-JTQDP4ZL.js";
+import "../chunk-P5CBNSYL.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-VHNDE3ZD.js";
+import "../chunk-UPKP67TA.js";
 import {
   bridgeAgentKey,
   claudeJson,
@@ -102,11 +115,15 @@ import {
   cursorUserHooks,
   cursorUserMcp,
   execNpm,
+  fxAgentsMd,
+  fxConfigDir,
+  fxMcpProfile,
+  fxQuestionRuleReceipt,
+  fxSettings,
   geminiMd,
   geminiSettings,
   hermesConfigReceipt,
   hookTakeoverReceipt,
-  isProtectedByScope,
   pusharyDir,
   readCodexMcpAuth,
   removeCodexHookTrust,
@@ -114,24 +131,22 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-K32C2RGK.js";
+} from "../chunk-454KMJHF.js";
 import "../chunk-T7E75EKA.js";
-import "../chunk-OSJEMXSR.js";
+import "../chunk-OAL44FM2.js";
+import "../chunk-EIZW73P5.js";
 import {
-  CURSOR_GATE_EVENTS,
   HOOK_COMPATIBLE_PROFILES,
   HOOK_LOCATOR_BINARY,
   SUPPORT_DISCORD,
   SUPPORT_EMAIL,
   isValidApiKey,
   redactSecrets
-} from "../chunk-CAS7GFWI.js";
-import "../chunk-EA3IELHP.js";
-import "../chunk-HWJW3CPO.js";
+} from "../chunk-XFNVG3OV.js";
 
 // bin/pushary-clean.ts
-import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync3 } from "fs";
-import { dirname, join as join5 } from "path";
+import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";
+import { dirname, join as join6 } from "path";
 import { homedir as homedir5, tmpdir } from "os";
 import { confirm } from "@inquirer/prompts";
 import { parse as parseTOML, stringify as stringifyTOML } from "smol-toml";
@@ -413,6 +428,26 @@ var claudeBackupRewrites = (receipt, home = homedir4()) => claudeJsonBackups(hom
 ` }] : [];
 });
 
+// src/cli/config-temp-leftovers.ts
+import { lstatSync, readdirSync as readdirSync3 } from "fs";
+import { join as join5 } from "path";
+var MAC_APP_WRITE_TEMP = /^\..+\.pushary-[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}$/;
+var PID_STAMPED_WRITE_TEMP = /^\.\d+-[^/]+\.pushary-tmp$/;
+var CONFIG_TEMP_MIN_AGE_MS = 6e4;
+var isLeakedConfigTempName = (name) => MAC_APP_WRITE_TEMP.test(name) || PID_STAMPED_WRITE_TEMP.test(name);
+var leakedConfigTemps = (entries, nowMs) => entries.filter((entry) => entry.isFile && isLeakedConfigTempName(entry.name) && nowMs - entry.modifiedAtMs >= CONFIG_TEMP_MIN_AGE_MS).map((entry) => entry.name);
+var directoryEntries = (directory) => {
+  try {
+    return readdirSync3(directory).flatMap((name) => {
+      const stats = lstatSync(join5(directory, name), { throwIfNoEntry: false });
+      return stats ? [{ name, isFile: stats.isFile(), modifiedAtMs: stats.mtimeMs }] : [];
+    });
+  } catch {
+    return [];
+  }
+};
+var configTempLeftovers = (directories, nowMs) => [...new Set(directories)].flatMap((directory) => leakedConfigTemps(directoryEntries(directory), nowMs).map((name) => join5(directory, name)));
+
 // src/app-owned-paths.ts
 var APP_OWNED_ENTRIES = [
   // PusharyPaths.bin: bridgeStub, bridgeCache
@@ -465,13 +500,13 @@ var CURSOR_PLUGIN_DIR = cursorPluginDir();
 var CURSOR_USER_HOOKS = cursorUserHooks();
 var VSCODE_PLUGIN_DIR = vscodePluginDir();
 var PUSHARY_DIR = pusharyDir();
-var SHELL_FILES = [".zshrc", ".zprofile", ".bashrc", ".bash_profile"].map((f) => join5(homedir5(), f));
+var SHELL_FILES = [".zshrc", ".zprofile", ".bashrc", ".bash_profile"].map((f) => join6(homedir5(), f));
 var PRESENCE_BY_RESOLUTION = {
   bundle: "present",
   missing: "gone",
   "no-stub": "absent"
 };
-var macAppPresence = () => PRESENCE_BY_RESOLUTION[resolveBridgeStub(join5(PUSHARY_DIR, "bin", HOOK_LOCATOR_BINARY), liveBridgeProbe()).kind];
+var macAppPresence = () => PRESENCE_BY_RESOLUTION[resolveBridgeStub(join6(PUSHARY_DIR, "bin", HOOK_LOCATOR_BINARY), liveBridgeProbe()).kind];
 var removalScope = (keepMcpServer, keepAppWiring) => ({
   keepAppWiring,
   keepMcpServer
@@ -500,7 +535,7 @@ var cursorPluginLeftovers = () => {
   const parent = dirname(CURSOR_PLUGIN_DIR);
   const backupPrefix = `${CURSOR_PLUGIN_DIR.split("/").pop()}.pushary-backup-`;
   try {
-    return readdirSync3(parent).filter((name) => name.startsWith(backupPrefix) || name.startsWith(CURSOR_PLUGIN_STAGING)).map((name) => join5(parent, name));
+    return readdirSync4(parent).filter((name) => name.startsWith(backupPrefix) || name.startsWith(CURSOR_PLUGIN_STAGING)).map((name) => join6(parent, name));
   } catch {
     return [];
   }
@@ -521,13 +556,74 @@ var guardedInstructionBlockRemoval = (path) => {
 };
 var guardedAliasRemoval = () => {
   if (!dryRun) return removeClaudeAlias();
-  const shells = CANDIDATE_RCS.map((name) => join5(homedir5(), name)).filter((path) => existsSync6(path) && readFileSync4(path, "utf-8").includes("pushary claude"));
+  const shells = CANDIDATE_RCS.map((name) => join6(homedir5(), name)).filter((path) => existsSync6(path) && readFileSync4(path, "utf-8").includes("pushary claude"));
   for (const path of shells) wouldNote("rewrite", path);
   return shells;
 };
 var writeJson = (path, data) => {
   guardedWrite(path, JSON.stringify(data, null, 2) + "\n");
 };
+var writeFxText = (path, rendered, label) => {
+  if (rendered.kind === "refused") {
+    console.log(`  ${skip} ${label} ${dim(`(${path} would grow past the size fx reads; left untouched)`)}`);
+    return;
+  }
+  guardedWrite(path, rendered.text);
+  console.log(`  ${check} ${label} ${dim(did("removed"))}`);
+};
+var removeFxMcpServer = () => {
+  const path = fxMcpProfile();
+  const read = readFxFile(path, readFxProfile);
+  if (read.kind === "missing") {
+    console.log(`  ${skip} fx MCP ${dim("(not found)")}`);
+  } else if (read.kind === "unreadable") {
+    console.log(`  ${skip} fx MCP ${dim(`(${path} could not be read; left untouched)`)}`);
+  } else if (read.kind === "refused") {
+    console.log(`  ${skip} fx MCP ${dim(`(${path} ${FX_PROFILE_REFUSALS[read.reason]}; left untouched)`)}`);
+  } else {
+    const { profile, removed } = withoutFxPusharyServer(read.profile);
+    if (removed) {
+      writeFxText(path, fxProfileText(profile), "fx MCP");
+    } else {
+      console.log(`  ${skip} fx MCP ${dim("(no pushary entry)")}`);
+    }
+  }
+};
+var removeFxToolsRule = () => {
+  const path = fxSettings();
+  const read = readFxFile(path, readFxSettings);
+  if (read.kind === "refused") {
+    console.log(`  ${skip} fx settings ${dim(`(${path} ${FX_SETTINGS_REFUSALS[read.reason]}; left untouched)`)}`);
+    return;
+  }
+  if (read.kind !== "settings") return;
+  const { settings, removed } = withoutPusharyToolsAllowed(read.settings);
+  if (removed) writeFxText(path, fxSettingsText(settings), "fx auto-allowed Pushary tools");
+};
+var FX_QUESTION_RULE_KEPT = {
+  "not-ours": "no setup record says Pushary added it, so it may be yours; left as it is",
+  "changed-after-setup": "changed after setup; left as it is"
+};
+var readFxQuestionRuleReceipt = () => {
+  const receipt = readJson(fxQuestionRuleReceipt());
+  return isFxQuestionRuleReceipt(receipt) ? receipt : null;
+};
+var removeFxQuestionRule = () => {
+  const path = fxSettings();
+  const read = readFxFile(path, readFxSettings);
+  if (read.kind === "refused" || read.kind === "unreadable") return;
+  if (read.kind === "settings") {
+    const { settings, outcome } = withoutQuestionsRoutedToPushary(read.settings, readFxQuestionRuleReceipt());
+    if (outcome === "removed") writeFxText(path, fxSettingsText(settings), "fx question rule");
+    else if (outcome !== "absent") console.log(`  ${skip} fx question rule ${dim(`(${FX_QUESTION_TOOL} in ${path}: ${FX_QUESTION_RULE_KEPT[outcome]})`)}`);
+  }
+  guardedRemove(fxQuestionRuleReceipt(), { force: true });
+};
+var removeFxInstructions = () => {
+  if (guardedInstructionBlockRemoval(fxAgentsMd())) {
+    console.log(`  ${check} fx instructions ${dim(did("removed"))}`);
+  }
+};
 var removeCursorUserHook = (scope) => {
   if (!existsSync6(CURSOR_USER_HOOKS)) return "absent";
   let parsed2;
@@ -537,21 +633,9 @@ var removeCursorUserHook = (scope) => {
     return "failed";
   }
   if (!parsed2 || typeof parsed2 !== "object") return "failed";
-  const hooks = parsed2.hooks ?? {};
-  let removedAny = false;
-  for (const event of CURSOR_GATE_EVENTS) {
-    const existing = Array.isArray(hooks[event]) ? hooks[event] : [];
-    const others = existing.filter((h) => {
-      const command = String(h.command ?? "");
-      return pusharyHookExecutable(command) === null || isProtectedByScope(command, scope);
-    });
-    if (others.length === existing.length) continue;
-    removedAny = true;
-    if (others.length === 0) delete hooks[event];
-    else hooks[event] = others;
-  }
-  if (!removedAny) return "absent";
-  parsed2.hooks = hooks;
+  const removal = withoutPusharyCursorHooks(parsed2.hooks ?? {}, scope);
+  if (removal.removed === 0) return "absent";
+  parsed2.hooks = removal.hooks;
   try {
     writeJson(CURSOR_USER_HOOKS, parsed2);
   } catch {
@@ -560,15 +644,7 @@ var removeCursorUserHook = (scope) => {
   if (dryRun) return "removed";
   try {
     const after = JSON.parse(readFileSync4(CURSOR_USER_HOOKS, "utf-8"));
-    const afterHooks = after?.hooks ?? {};
-    const stillThere = CURSOR_GATE_EVENTS.some((event) => {
-      const entries = afterHooks[event];
-      return Array.isArray(entries) && entries.some((h) => {
-        const command = String(h?.command ?? "");
-        return pusharyHookExecutable(command) !== null && !isProtectedByScope(command, scope);
-      });
-    });
-    if (stillThere) return "failed";
+    if (withoutPusharyCursorHooks(after?.hooks ?? {}, scope).removed > 0) return "failed";
   } catch {
     return "failed";
   }
@@ -593,13 +669,23 @@ var cleanSettingsFile = (path, label, scope) => {
     `  ${skip} ${label} ${dim(wouldHaveChanged ? "(kept: written by the Mac app)" : "(no pushary entries)")}`
   );
 };
+var agentConfigDirectories = () => [
+  homedir5(),
+  dirname(CLAUDE_SETTINGS),
+  dirname(codexConfigToml()),
+  dirname(geminiSettings()),
+  dirname(CURSOR_USER_HOOKS),
+  openCodeConfigDir(),
+  fxConfigDir(),
+  ...vscodeSettingsTargets(existsSync6).map((settings) => dirname(settings))
+];
 var restoreTakeoverReceipts = () => {
   const targets = [
     ["claude_code", CLAUDE_SETTINGS, CLAUDE_JSON, "mcpServers", "json"],
     ["codex", codexHooksJson(), codexConfigToml(), "mcp_servers", "toml"],
     ["gemini_cli", geminiSettings(), geminiSettings(), "mcpServers", "json"],
     ["cursor", CURSOR_USER_HOOKS, null, null, null],
-    ["vscode", join5(VSCODE_PLUGIN_DIR, "hooks", "hooks.json"), vscodePluginMcp(), "mcpServers", "json"]
+    ["vscode", join6(VSCODE_PLUGIN_DIR, "hooks", "hooks.json"), vscodePluginMcp(), "mcpServers", "json"]
   ];
   for (const [agent, hookFile, mcpFile, mcpKey, mcpFormat] of targets) {
     const receiptPath = hookTakeoverReceipt(agent);
@@ -973,10 +1059,10 @@ var main = async () => {
   } else {
     guardedRemove(openCodePlugin, { force: true });
     console.log(`  ${check} OpenCode plugin ${dim(did("removed"))}`);
-    const sibling = join5(openCodePluginDir(), OPENCODE_PLUGIN_SIBLING);
+    const sibling = join6(openCodePluginDir(), OPENCODE_PLUGIN_SIBLING);
     const remaining = (() => {
       try {
-        return readdirSync3(openCodePluginDir()).filter((name) => name !== OPENCODE_PLUGIN_SIBLING);
+        return readdirSync4(openCodePluginDir()).filter((name) => name !== OPENCODE_PLUGIN_SIBLING);
       } catch {
         return [];
       }
@@ -1000,6 +1086,17 @@ var main = async () => {
   } else {
     console.log(`  ${skip} OpenCode MCP ${dim("(not found)")}`);
   }
+  if (keepShared) {
+    console.log(`  ${skip} OpenCode AGENTS.md ${dim("(kept: the Mac app uses it)")}`);
+  } else if (guardedInstructionBlockRemoval(openCodeInstructionsFile())) {
+    console.log(`  ${check} OpenCode AGENTS.md ${dim("(removed Pushary block)")}`);
+  } else {
+    console.log(`  ${skip} OpenCode AGENTS.md ${dim("(no pushary block)")}`);
+  }
+  removeFxMcpServer();
+  removeFxToolsRule();
+  removeFxQuestionRule();
+  removeFxInstructions();
   const hermesPython = resolveHermesPython();
   if (hermesPython) {
     const configUpdated = dryRun ? (wouldNote("run    ", "hermes plugin config restore"), true) : runHermesPythonScript(hermesPython, HERMES_CONFIG_SCRIPT, "clean", HERMES_CONFIG_RECEIPT);
@@ -1060,15 +1157,20 @@ var main = async () => {
   } else {
     console.log(`  ${skip} claude alias ${dim("(not set)")}`);
   }
+  const leakedTemps = configTempLeftovers(agentConfigDirectories(), Date.now());
+  for (const temp of leakedTemps) guardedRemove(temp, { force: true });
+  if (leakedTemps.length > 0) {
+    console.log(`  ${check} Leftover temp files ${dim(`(${dryRun ? "would remove" : "removed"} ${leakedTemps.length} left by an interrupted config write)`)}`);
+  }
   if (existsSync6(PUSHARY_DIR)) {
     let removed = 0;
     const kept = [];
-    for (const entry of readdirSync3(PUSHARY_DIR)) {
+    for (const entry of readdirSync4(PUSHARY_DIR)) {
       if (keepShared && isAppOwned(entry) || entry === "setup" && (keepShared || incompleteClean)) {
         kept.push(entry);
         continue;
       }
-      guardedRemove(join5(PUSHARY_DIR, entry), { force: true });
+      guardedRemove(join6(PUSHARY_DIR, entry), { force: true });
       removed++;
     }
     if (removed > 0) {
@@ -1085,10 +1187,10 @@ var main = async () => {
   }
   try {
     let swept = 0;
-    for (const f of readdirSync3(tmpdir())) {
+    for (const f of readdirSync4(tmpdir())) {
       if (!f.startsWith("pushary-")) continue;
       try {
-        guardedRemove(join5(tmpdir(), f), { force: true });
+        guardedRemove(join6(tmpdir(), f), { force: true });
         swept++;
       } catch {
       }

package/dist/bin/pushary-codex-bridge.js

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
-import "../chunk-GBL4BTG3.js";
+import "../chunk-Q7QRR6YL.js";
 import {
   LiveTranscriptRelay,
   liveSessionSleep,
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-PJF7L7AA.js";
+} from "../chunk-VCMFKZON.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-LDRGVXLR.js";
-import "../chunk-XOMH53NB.js";
-import "../chunk-66H2QQAK.js";
+} from "../chunk-SNWNA3MQ.js";
+import "../chunk-O5JD7UI5.js";
+import "../chunk-OTZHT34O.js";
 import {
   transcriptsEnabled
-} from "../chunk-VA2R64I7.js";
+} from "../chunk-XPTCPU6V.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -27,39 +27,38 @@ import {
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion
-} from "../chunk-EREBZHN2.js";
+} from "../chunk-ZIIYTQHC.js";
 import {
   writeDegraded
-} from "../chunk-VOCZHOXV.js";
+} from "../chunk-KSNAAMU5.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-R4HVHTNA.js";
+import "../chunk-YZKS3ME3.js";
 import {
   callMcpTool
-} from "../chunk-BJENQBMH.js";
-import "../chunk-DESAUCH2.js";
+} from "../chunk-NQFGVAT6.js";
+import "../chunk-JTQDP4ZL.js";
 import {
   getMachineId
-} from "../chunk-DZTKLE7Q.js";
+} from "../chunk-P5CBNSYL.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-VHNDE3ZD.js";
+import "../chunk-UPKP67TA.js";
 import {
   resolveBinary
-} from "../chunk-K32C2RGK.js";
+} from "../chunk-454KMJHF.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-OSJEMXSR.js";
+} from "../chunk-OAL44FM2.js";
+import "../chunk-EIZW73P5.js";
 import {
   elicitationContent,
   parseAgentQuestion,
   parseAgentQuestionAnswers,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-CAS7GFWI.js";
-import "../chunk-EA3IELHP.js";
-import "../chunk-HWJW3CPO.js";
+} from "../chunk-XFNVG3OV.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   takeHookHoldBudget
-} from "../chunk-3LU74H52.js";
+} from "../chunk-IGBDOZUO.js";
 import {
   blockedActionFingerprint,
   codexCallKey,
@@ -13,33 +13,33 @@ import {
   recordCodexCallDecision,
   reportMachineDenial,
   userScope
-} from "../chunk-NYMPLNV3.js";
+} from "../chunk-3QORH5EJ.js";
 import {
   triggerAutoUpdate
-} from "../chunk-P4UYILQK.js";
+} from "../chunk-BYVB3RX3.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-5UWV5GHM.js";
+} from "../chunk-MCNS4725.js";
 import {
   readHookInput
-} from "../chunk-UAP556WK.js";
+} from "../chunk-7GI6QC3M.js";
 import {
   denyReasonFrom,
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
-import "../chunk-D3K2FPPJ.js";
+import "../chunk-7GYGVQBU.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-5SWQZ6HY.js";
-import "../chunk-I2YUMZLE.js";
-import "../chunk-I3XJATMR.js";
-import "../chunk-YXPGFRRW.js";
-import "../chunk-OZE2TQX5.js";
-import "../chunk-7CLTSZOL.js";
-import "../chunk-LQI7W4RG.js";
-import "../chunk-XOMH53NB.js";
-import "../chunk-66H2QQAK.js";
-import "../chunk-VA2R64I7.js";
+import "../chunk-SVEMF2VO.js";
+import "../chunk-XMN37YJH.js";
+import "../chunk-MWVCDP64.js";
+import "../chunk-XDASEYRS.js";
+import "../chunk-AAGLDXH4.js";
+import "../chunk-WZWXBTRF.js";
+import "../chunk-XPMOCJHN.js";
+import "../chunk-O5JD7UI5.js";
+import "../chunk-OTZHT34O.js";
+import "../chunk-XPTCPU6V.js";
 import "../chunk-XHKBHWLX.js";
 import {
   CODEX_AGENT,
@@ -76,8 +76,8 @@ import {
   toCodexWire,
   toPolicyLookup,
   toPolicyLookups
-} from "../chunk-H6XU22TN.js";
-import "../chunk-YUGGNZSF.js";
+} from "../chunk-WM3U2RUK.js";
+import "../chunk-4C4NRDIC.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -89,32 +89,33 @@ import {
   requestGate,
   sendNotification,
   waitForQuestion
-} from "../chunk-EREBZHN2.js";
+} from "../chunk-ZIIYTQHC.js";
 import {
   exitAfterClientReports
-} from "../chunk-VOCZHOXV.js";
+} from "../chunk-KSNAAMU5.js";
 import "../chunk-POFBE6ZY.js";
 import "../chunk-GMXKITVA.js";
-import "../chunk-R4HVHTNA.js";
-import "../chunk-BJENQBMH.js";
-import "../chunk-DESAUCH2.js";
+import "../chunk-YZKS3ME3.js";
+import "../chunk-NQFGVAT6.js";
+import "../chunk-JTQDP4ZL.js";
 import {
   getMachineId
-} from "../chunk-DZTKLE7Q.js";
+} from "../chunk-P5CBNSYL.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-VHNDE3ZD.js";
+import "../chunk-UPKP67TA.js";
 import {
   canonicalJson
-} from "../chunk-K32C2RGK.js";
+} from "../chunk-454KMJHF.js";
 import {
   writeFileAtomic
 } from "../chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "../chunk-OSJEMXSR.js";
+} from "../chunk-OAL44FM2.js";
+import "../chunk-EIZW73P5.js";
 import {
   CODEX_RESCUE_TOOL_NAME,
   DECISION_LINE_MAX,
@@ -128,9 +129,7 @@ import {
   hookWaitClamped,
   hookWaitDeadline,
   resolveGate
-} from "../chunk-CAS7GFWI.js";
-import "../chunk-EA3IELHP.js";
-import "../chunk-HWJW3CPO.js";
+} from "../chunk-XFNVG3OV.js";
 
 // bin/pushary-codex-hook.ts
 import { basename } from "path";
@@ -751,7 +750,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-4DAJKNVP.js");
+    const { repairCodexHolds } = await import("../reapply-66GQIBXN.js");
     repairCodexHolds();
   } catch {
     return;