@pushary/agent-hooks 1.9.1 → 1.9.3

package/dist/{chunk-XW2B4QV2.js → chunk-NGD7H3GZ.js}

@@ -1,10 +1,10 @@
 import {
   pusharyHookExecutable
-} from "./chunk-5K43TBK4.js";
+} from "./chunk-VRYOALHQ.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 
 // src/skills-cli.ts
 import { execSync } from "child_process";

package/dist/{chunk-UYHLMBPQ.js → chunk-NP5RJL34.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-IJXJW2VH.js → chunk-NZJ5LFMX.js}

@@ -1,15 +1,15 @@
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-NVLXK2I6.js";
+} from "./chunk-VRPNTJX3.js";
 import {
   defersToNativeMode,
   reportMachineDenial
-} from "./chunk-GHKNUQYU.js";
+} from "./chunk-HIQNUBWO.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-P7YDVWLL.js";
+} from "./chunk-552AGATI.js";
 import {
   announceSubscriptionRequired,
   denyReasonFrom,
@@ -39,7 +39,7 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-JCER3Q6P.js";
+} from "./chunk-CJFVYYKM.js";
 import {
   DEFAULT_SESSION
 } from "./chunk-N6IOSZOE.js";
@@ -55,20 +55,20 @@ import {
   requestGate,
   sendNotification,
   waitForQuestion
-} from "./chunk-JHZAZAI3.js";
+} from "./chunk-UWMEY4RS.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-VH6763OR.js";
+} from "./chunk-SJC5TXK7.js";
 import {
   getMachineId
-} from "./chunk-J7JXA2LX.js";
+} from "./chunk-FSFI2PQL.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-FVOCQSBG.js";
+} from "./chunk-EZFE4PC3.js";
 import {
   AGENT_QUESTION_STRATEGY,
   GATE_BLOCK_REASON_MAX_LENGTH,
@@ -96,7 +96,7 @@ import {
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";

package/dist/{chunk-QQJCDRD3.js → chunk-OEMF3KJ3.js}

@@ -3,7 +3,7 @@ import {
   finishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-QXL27RY6.js";
+} from "./chunk-HPXFPXW7.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -11,7 +11,7 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-CE4UH4AP.js";
+} from "./chunk-GOWCPJTP.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
@@ -24,10 +24,10 @@ import {
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-FVOCQSBG.js";
+} from "./chunk-EZFE4PC3.js";
 import {
   commandsPackage,
   globalUpgradeEntry,
@@ -36,7 +36,7 @@ import {
   isSameMajorVersion,
   ownPackageRoot,
   packageVersionAt
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/global-upgrade.ts
 import { existsSync } from "fs";

package/dist/{chunk-6L7TNZ43.js → chunk-OXJRUMZT.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-C6PPDKVI.js → chunk-P3REVSM5.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-HU2LWGEE.js";
+} from "./chunk-MH6SJHUE.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-FVOCQSBG.js";
+} from "./chunk-EZFE4PC3.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-SPB3QRE7.js → chunk-PPC4FZKJ.js}

@@ -4,18 +4,18 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   isNetworkFailure
-} from "./chunk-6JTTJIKJ.js";
+} from "./chunk-WRDMCP4G.js";
 import {
   clientReportClaims
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 import {
   CLIENT_REPORT_PATH,
   degradedLine
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/client-report-claim.ts
 import { createHash } from "crypto";

package/dist/{chunk-FJPC35OW.js → chunk-Q4RF7EEP.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-4XT4JXMG.js → chunk-Q7FLA4N3.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-RJ7ECJSZ.js";
+} from "./chunk-ZPTSEJMD.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-LKKYRNJT.js → chunk-Q7KSRRQ4.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-KR5JASA4.js → chunk-QVUOPB32.js}

@@ -2,14 +2,16 @@ import {
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
 import {
+  CODEX_HOOK_EVENTS,
+  CODEX_REQUIRED_APPROVAL_EVENTS,
   codexHome,
   codexHooksJsonIn,
   isPusharyCodexCommand,
   resolvePathBinary
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   getPackageVersion
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/codex-app-server.ts
 import { existsSync, realpathSync } from "fs";
@@ -20,6 +22,7 @@ var CODEX_HOOK_STATUS = {
   modified: "modified",
   managed: "managed",
   disabled: "disabled",
+  asynchronous: "asynchronous",
   notListed: "not listed"
 };
 var CODEX_APP_SERVER_ARGS = ["app-server"];
@@ -42,11 +45,19 @@ var CODEX_NOT_ASKED = {
 };
 var UNRECOGNISED_LISTING = "Codex answered hooks/list in a shape Pushary does not recognise";
 var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-var isCodexListedHook = (value) => isRecord(value) && typeof value.key === "string" && typeof value.eventName === "string" && typeof value.command === "string" && typeof value.sourcePath === "string" && typeof value.enabled === "boolean" && typeof value.isManaged === "boolean" && typeof value.currentHash === "string" && typeof value.trustStatus === "string";
+var hasCodexHookIdentity = (value) => isRecord(value) && typeof value.key === "string" && value.key.length > 0 && typeof value.eventName === "string" && value.eventName.length > 0 && typeof value.sourcePath === "string" && value.sourcePath.length > 0 && typeof value.enabled === "boolean" && typeof value.isManaged === "boolean" && typeof value.currentHash === "string" && value.currentHash.length > 0 && typeof value.trustStatus === "string" && value.trustStatus.length > 0;
+var isCodexListedHook = (value) => hasCodexHookIdentity(value) && (value.handlerType === void 0 || value.handlerType === "command") && typeof value.command === "string" && value.command.length > 0 && (value.async === void 0 || typeof value.async === "boolean");
+var isCodexHookMetadata = (value) => {
+  if (isCodexListedHook(value)) return true;
+  if (!hasCodexHookIdentity(value)) return false;
+  if (value.handlerType === "prompt" || value.handlerType === "agent") return true;
+  return value.handlerType === "mcpTool" && typeof value.server === "string" && value.server.length > 0 && typeof value.tool === "string" && value.tool.length > 0;
+};
 var listedHookFields = (hook) => ({
   key: hook.key,
   eventName: hook.eventName,
   command: hook.command,
+  async: hook.async ?? false,
   sourcePath: hook.sourcePath,
   enabled: hook.enabled,
   isManaged: hook.isManaged,
@@ -67,20 +78,17 @@ var hooksListingOf = (result) => {
   const warnings = [];
   for (const layer of result.data) {
     if (!isRecord(layer) || !Array.isArray(layer.hooks)) return null;
+    if (!layer.hooks.every(isCodexHookMetadata)) return null;
     hooks.push(...layer.hooks.filter(isCodexListedHook).map(listedHookFields));
     warnings.push(...diagnosticMessages(layer.warnings), ...diagnosticMessages(layer.errors));
   }
   return { hooks, warnings };
 };
 var isPusharyHookIn = (hooksJsonPath, hook) => hook.sourcePath === hooksJsonPath && isPusharyCodexCommand(hook.command);
-var isTrustableByPushary = (hook) => hook.enabled && !hook.isManaged && hook.trustStatus !== CODEX_HOOK_STATUS.managed;
+var isTrustableByPushary = (hook) => hook.enabled && !hook.isManaged && hook.trustStatus !== CODEX_HOOK_STATUS.managed && !(CODEX_REQUIRED_APPROVAL_EVENTS.includes(hookEventOf(hook.eventName)) && hook.async === true);
 var pusharyHooksIn = (hooks, hooksJsonPath) => hooks.filter((hook) => isPusharyHookIn(hooksJsonPath, hook));
 var selectPusharyCodexHooks = (hooks, hooksJsonPath) => pusharyHooksIn(hooks, hooksJsonPath).filter(isTrustableByPushary);
-var codexTrustVerdict = (hooks, hooksJsonPath) => {
-  if (pusharyHooksIn(hooks, hooksJsonPath).length === 0) return { kind: "unlisted" };
-  const untrusted = selectPusharyCodexHooks(hooks, hooksJsonPath).filter((hook) => hook.trustStatus !== CODEX_HOOK_STATUS.trusted);
-  return untrusted.length === 0 ? { kind: "trusted" } : { kind: "untrusted", hooks: untrusted };
-};
+var codexTrustVerdict = (hooks, hooksJsonPath) => assessCodexHookTrust(CODEX_HOOK_EVENTS.map((event) => event.event), pusharyHooksIn(hooks, hooksJsonPath));
 var codexTrustEdit = (hooks) => ({
   edits: [{
     keyPath: HOOKS_STATE_KEY_PATH,
@@ -94,16 +102,34 @@ var initializeParams = (clientVersion) => ({
 });
 var hooksListParams = (cwd) => ({ cwds: [cwd] });
 var hookEventOf = (eventName) => eventName.charAt(0).toUpperCase() + eventName.slice(1);
+var trustStatusOf = (hook) => {
+  if (!hook.enabled) return CODEX_HOOK_STATUS.disabled;
+  if (CODEX_REQUIRED_APPROVAL_EVENTS.includes(hookEventOf(hook.eventName)) && hook.async === true) return CODEX_HOOK_STATUS.asynchronous;
+  return hook.trustStatus;
+};
 var readingOf = (hook) => ({
   event: hookEventOf(hook.eventName),
-  status: hook.enabled ? hook.trustStatus : CODEX_HOOK_STATUS.disabled
+  status: trustStatusOf(hook)
 });
-var codexHookTrustByEvent = (events, hooks) => events.map((event) => hooks.map(readingOf).find((reading) => reading.event === event) ?? { event, status: CODEX_HOOK_STATUS.notListed });
-var CODEX_TRUST_FAILURES = /* @__PURE__ */ new Set([CODEX_HOOK_STATUS.untrusted, CODEX_HOOK_STATUS.modified]);
-var isCodexTrustFailure = (reading) => CODEX_TRUST_FAILURES.has(reading.status);
+var codexHookTrustByEvent = (events, hooks) => {
+  const readings = hooks.map(readingOf);
+  const result = [];
+  for (const event of events) {
+    const matching = readings.filter((reading) => reading.event === event);
+    result.push(...matching.length > 0 ? matching : [{ event, status: CODEX_HOOK_STATUS.notListed }]);
+  }
+  return result;
+};
+var isCodexTrustFailure = (reading) => {
+  if (reading.status === CODEX_HOOK_STATUS.trusted || reading.status === CODEX_HOOK_STATUS.managed) return false;
+  if (reading.status === CODEX_HOOK_STATUS.disabled || reading.status === CODEX_HOOK_STATUS.notListed) {
+    return CODEX_REQUIRED_APPROVAL_EVENTS.includes(reading.event);
+  }
+  return true;
+};
 var eventsWithStatus = (readings, status) => readings.filter((reading) => reading.status === status).map((reading) => reading.event);
 var assessCodexHookTrust = (events, hooks) => {
-  const readings = codexHookTrustByEvent(events, hooks);
+  const readings = codexHookTrustByEvent([.../* @__PURE__ */ new Set([...events, ...CODEX_REQUIRED_APPROVAL_EVENTS])], hooks);
   const notListed = eventsWithStatus(readings, CODEX_HOOK_STATUS.notListed);
   if (readings.length > 0 && notListed.length === readings.length) return { kind: "unlisted" };
   const disabled = eventsWithStatus(readings, CODEX_HOOK_STATUS.disabled);
@@ -265,7 +291,7 @@ var confirmationAfterWrite = (listing, hooksJsonPath, writeError) => {
   const verdict = codexTrustVerdict(listing.hooks, hooksJsonPath);
   if (verdict.kind === "trusted") return { kind: "verified", wrote: true };
   if (verdict.kind === "unlisted") return { kind: "unlisted", warnings: listing.warnings };
-  return { kind: "refused", hooks: verdict.hooks.map(readingOf), writeError };
+  return { kind: "refused", hooks: verdict.failures, writeError };
 };
 var trustConversation = (launch, hooksJsonPath) => async (session) => {
   const unavailable = await openSession(session);
@@ -275,7 +301,9 @@ var trustConversation = (launch, hooksJsonPath) => async (session) => {
   const verdict = codexTrustVerdict(before.hooks, hooksJsonPath);
   if (verdict.kind === "trusted") return { kind: "verified", wrote: false };
   if (verdict.kind === "unlisted") return { kind: "unlisted", warnings: before.warnings };
-  const written = await session.request(METHOD_CONFIG_BATCH_WRITE, codexTrustEdit(verdict.hooks));
+  const trustable = selectPusharyCodexHooks(before.hooks, hooksJsonPath).filter((hook) => hook.trustStatus === CODEX_HOOK_STATUS.untrusted || hook.trustStatus === CODEX_HOOK_STATUS.modified);
+  if (trustable.length === 0) return { kind: "refused", hooks: verdict.failures, writeError: null };
+  const written = await session.request(METHOD_CONFIG_BATCH_WRITE, codexTrustEdit(trustable));
   const after = await listHooks(session, launch);
   if (!isListing(after)) return after;
   return confirmationAfterWrite(after, hooksJsonPath, written.kind === "error" ? written.message : null);

package/dist/{chunk-VH6763OR.js → chunk-SJC5TXK7.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-DMA3QUOB.js";
+} from "./chunk-7MO3CNBX.js";
 import {
   installNetworkDefaults
-} from "./chunk-6JTTJIKJ.js";
+} from "./chunk-WRDMCP4G.js";
 import {
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-6QSDNXGM.js → chunk-U3DBAX7P.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 import {
   normalizeInstallSource
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-JHZAZAI3.js → chunk-UWMEY4RS.js}

@@ -1,23 +1,23 @@
 import {
   clientErrorKindOf,
   reportClientError
-} from "./chunk-SPB3QRE7.js";
+} from "./chunk-PPC4FZKJ.js";
 import {
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-VH6763OR.js";
+} from "./chunk-SJC5TXK7.js";
 import {
   installNetworkDefaults
-} from "./chunk-6JTTJIKJ.js";
+} from "./chunk-WRDMCP4G.js";
 import {
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 import {
   ASK_AGENT_NAME_MAX,
   ASK_QUESTION_MAX,
   DECISION_LINE_MAX,
   truncateLine
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-NVLXK2I6.js → chunk-VRPNTJX3.js}

@@ -3,28 +3,28 @@ import {
   addPusharyToolPermissions,
   isPusharyHook,
   removeClaudeMcpServers
-} from "./chunk-6Q4NM2LW.js";
+} from "./chunk-ZUZKHTPJ.js";
 import {
   CLAUDE_HOOK_EVENTS,
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-D3RS57MN.js";
+} from "./chunk-CVVPUVBD.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-JCER3Q6P.js";
+} from "./chunk-CJFVYYKM.js";
 import {
   guardBinary,
   holdBudgetOf,
   registerHookEntry
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   PHONE_ANSWERED_TOOLS,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/compatible-config.ts
 import { homedir } from "os";

package/dist/{chunk-5K43TBK4.js → chunk-VRYOALHQ.js}

@@ -2,17 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-D3RS57MN.js";
+} from "./chunk-CVVPUVBD.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-VQLWYKX7.js → chunk-WEK6US33.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-FVOCQSBG.js";
+} from "./chunk-EZFE4PC3.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-PEGKBNGN.js → chunk-WL4YO6CO.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-RJ7ECJSZ.js";
+} from "./chunk-ZPTSEJMD.js";
 import {
   getMachineId
-} from "./chunk-J7JXA2LX.js";
+} from "./chunk-FSFI2PQL.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,14 +20,14 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   getApiKey
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
   getPackageVersion,
   globalPackageFolder,
   globalRootFor
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-6JTTJIKJ.js → chunk-WRDMCP4G.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-J7JXA2LX.js";
+} from "./chunk-FSFI2PQL.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-RJ7ECJSZ.js → chunk-ZPTSEJMD.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-6QSDNXGM.js";
+} from "./chunk-U3DBAX7P.js";
 import {
   backupFile,
   readJsonSafe,
@@ -9,7 +9,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   configFilePath
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";
@@ -110,6 +110,7 @@ var isDisabledExport = (line) => {
   return OUR_EXPORT.test(trimmed.slice(1, -LOGOUT_MARK.length).trim());
 };
 var keyPrefix = (key) => key.split(".")[0] ?? key;
+var manualKeyStepFor = (kind, platform) => kind === "no-rc" || platform === "win32" ? "config-only" : "paste-export";
 var rcResult = (kind, over = {}) => ({
   kind,
   path: null,
@@ -298,6 +299,7 @@ export {
   exportLine,
   isDisabledExport,
   keyPrefix,
+  manualKeyStepFor,
   writeKey,
   clearKey,
   readConfigFileKey,

package/dist/{chunk-6Q4NM2LW.js → chunk-ZUZKHTPJ.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-D3RS57MN.js";
+} from "./chunk-CVVPUVBD.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-ZMKEKWNR.js";
+} from "./chunk-5IIAUWEJ.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-XEIV5QOT.js";
+} from "./chunk-JDUWMJDP.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-PMS3EBD2.js → chunk-ZV32QRBR.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-4SB46XLF.js";
+} from "./chunk-4GTXFYQ7.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{global-upgrade-ML2RHV4W.js → global-upgrade-VEQ4KQEW.js}

@@ -5,15 +5,15 @@ import {
   readGlobalUpgradeSubject,
   upgradeInstalledPackage,
   withUpgradeLock
-} from "./chunk-QQJCDRD3.js";
-import "./chunk-QXL27RY6.js";
-import "./chunk-CE4UH4AP.js";
+} from "./chunk-OEMF3KJ3.js";
+import "./chunk-HPXFPXW7.js";
+import "./chunk-GOWCPJTP.js";
 import "./chunk-POFBE6ZY.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-ZMKEKWNR.js";
+import "./chunk-5IIAUWEJ.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-FVOCQSBG.js";
-import "./chunk-XEIV5QOT.js";
+import "./chunk-EZFE4PC3.js";
+import "./chunk-JDUWMJDP.js";
 export {
   finishGlobalUpgrade,
   finishUpgradeWithLock,

package/dist/{paths-LG3IEDDM.js → paths-QTOUBV2V.js}

@@ -32,8 +32,8 @@ import {
   pusharyDir,
   vscodePluginDir,
   vscodePluginMcp
-} from "./chunk-ZMKEKWNR.js";
-import "./chunk-XEIV5QOT.js";
+} from "./chunk-5IIAUWEJ.js";
+import "./chunk-JDUWMJDP.js";
 export {
   autoUpdateLock,
   autoUpdateLog,

package/dist/{reapply-7PFOITE4.js → reapply-T5PLCAGP.js}

@@ -9,18 +9,18 @@ import {
   reapplyGeminiSettings,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-SWGY5WNX.js";
-import "./chunk-KR5JASA4.js";
-import "./chunk-6Q4NM2LW.js";
+} from "./chunk-KO7UOTLD.js";
+import "./chunk-QVUOPB32.js";
+import "./chunk-ZUZKHTPJ.js";
 import "./chunk-RIVNNBEK.js";
-import "./chunk-5K43TBK4.js";
-import "./chunk-D3RS57MN.js";
+import "./chunk-VRYOALHQ.js";
+import "./chunk-CVVPUVBD.js";
 import "./chunk-XHKBHWLX.js";
 import "./chunk-6ICPEJY5.js";
-import "./chunk-RNDFGHSQ.js";
-import "./chunk-ZMKEKWNR.js";
+import "./chunk-HBUQ2EQD.js";
+import "./chunk-5IIAUWEJ.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-XEIV5QOT.js";
+import "./chunk-JDUWMJDP.js";
 export {
   ensureCodexTrustAfterReapply,
   inspectConfiguredManagedProviders,