@pushary/agent-hooks 1.9.59 → 1.9.61

package/dist/{chunk-BMPZ5HVJ.js → chunk-ERK24P76.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-762CDAJJ.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {
@@ -146,6 +146,16 @@ var resolveCommandName = (token) => {
 };
 var isInvocationOf = (token, name) => resolveCommandName(token) === name;
 var COMMAND_OPTIONS = {
+  login: [
+    ["--with-token", "Read an API key from stdin"],
+    ["--no-browser", "Print the sign-in link without opening a browser"],
+    ["--json", "Emit the result as one object instead of the screen"],
+    ["--force", "Start a new sign-in instead of reusing the saved key"]
+  ],
+  pair: [
+    ["--app", "Pair with the Pushary app"],
+    ["--browser", "Pair through a browser (default)"]
+  ],
   cowork: [
     ["--open", "Also open the setup guide in your browser"],
     ["--instructions", "Print standing instructions to paste into Cowork"],

package/dist/{chunk-2WMZDKPM.js → chunk-EUIPTDLX.js}

@@ -6,38 +6,39 @@ import {
 } from "./chunk-QW3FRUFB.js";
 import {
   ensureDaemonRunning
-} from "./chunk-4QF2YLYK.js";
+} from "./chunk-LBHJJEKT.js";
 import {
   hookOwnerOf
-} from "./chunk-X4ES7QBT.js";
+} from "./chunk-BJTSKOH3.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-PVANKDWM.js";
+} from "./chunk-2AELPDMT.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-3N2ZTHZZ.js";
+} from "./chunk-GAMVAORR.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-D6CXQIXO.js";
+} from "./chunk-7JXJJNQ5.js";
 import {
   readTranscriptPreference
-} from "./chunk-KAJDKYUM.js";
+} from "./chunk-WN3RACVD.js";
 import {
+  claudeConfigDir,
   codexHome,
   pusharyDir
-} from "./chunk-KZCYHWDF.js";
+} from "./chunk-MWLTTLPK.js";
 import {
   writeJsonAtomic
 } from "./chunk-QENTGE75.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-4XXZUFWN.js";
+} from "./chunk-BG4Y64FW.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";
@@ -92,7 +93,6 @@ var transcriptLinesSeenLive = (lines, epochStartedAtMs, startedBeforeEpoch) => l
 });
 
 // src/transcript-sync.ts
-import { homedir as homedir2 } from "os";
 import { join as join2, resolve } from "path";
 import { closeSync, existsSync as existsSync2, fstatSync, openSync, readFileSync as readFileSync2, readSync, statSync as statSync2 } from "fs";
 
@@ -165,7 +165,7 @@ var sweepStaleSessionKeys = (now = Date.now(), dir = sessionDir()) => {
 // src/transcript-sync.ts
 var claudeTranscriptPath = (cwd, sessionId) => {
   const projectId = resolve(cwd).replace(/[^a-zA-Z0-9-]/g, "-");
-  const configDir = process.env.CLAUDE_CONFIG_DIR || join2(homedir2(), ".claude");
+  const configDir = claudeConfigDir();
   return join2(configDir, "projects", projectId, `${sessionId}.jsonl`);
 };
 var createSyncState = () => ({
@@ -446,7 +446,7 @@ var startTranscriptSync = (opts) => {
 };
 
 // src/transcript-registration.ts
-import { homedir as homedir3 } from "os";
+import { homedir as homedir2 } from "os";
 var defaultRegistryDirectory = () => process.env.PUSHARY_TRANSCRIPT_REGISTRY_DIR || join3(pusharyDir(), "transcript-capture");
 var cliRegistry = (apiKey = getApiKey()) => ({ apiKey, baseUrl: getBaseUrl(), directory: defaultRegistryDirectory() });
 var accountFor = (registry) => createHash("sha256").update(`${registry.baseUrl}\0${registry.apiKey}`).digest("hex");
@@ -466,7 +466,7 @@ var registeredTranscriptEnabled = (apiKey, sessionId) => {
   }
 };
 var macOwnsClaudeHooks = (cwd) => [
-  join3(process.env.CLAUDE_CONFIG_DIR || join3(homedir3(), ".claude"), "settings.json"),
+  join3(claudeConfigDir(), "settings.json"),
   join3(cwd, ".claude", "settings.json"),
   join3(cwd, ".claude", "settings.local.json")
 ].some((path) => {
@@ -478,7 +478,7 @@ var macOwnsClaudeHooks = (cwd) => [
 });
 var TRANSCRIPT_ROOT_NAME = { claude: "projects", codex: "sessions" };
 var transcriptRoots = (source) => {
-  const home = homedir3();
+  const home = homedir2();
   if (source === "codex") return [join3(codexHome(), TRANSCRIPT_ROOT_NAME.codex)];
   const configured = process.env.CLAUDE_CONFIG_DIR;
   return [join3(configured || join3(home, ".claude"), TRANSCRIPT_ROOT_NAME.claude), join3(home, ".claude", TRANSCRIPT_ROOT_NAME.claude)];

package/dist/{chunk-RQDP2SJY.js → chunk-FUZ5VYWD.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-4XXZUFWN.js";
+} from "./chunk-BG4Y64FW.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-5PP4455M.js → chunk-G36T5LAP.js}

@@ -1,6 +1,6 @@
 import {
   realpath
-} from "./chunk-M6MOQBR5.js";
+} from "./chunk-USE5IEEW.js";
 import {
   findNativeClaudeInstall
 } from "./chunk-VUFHYMSP.js";
@@ -13,10 +13,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-US3IT6ZC.js";
+} from "./chunk-CJ5TCFD4.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-762CDAJJ.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/live-capabilities.ts
 import { homedir } from "os";

package/dist/{chunk-3N2ZTHZZ.js → chunk-GAMVAORR.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-4XXZUFWN.js";
+} from "./chunk-BG4Y64FW.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-YQVKG5MC.js → chunk-GDKQUB52.js}

@@ -1,21 +1,22 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-JBCMXSBO.js";
+} from "./chunk-ZGU3NXL2.js";
 import {
   nativeClaudeInstallPath
 } from "./chunk-VUFHYMSP.js";
 import {
   grokHome
-} from "./chunk-KQWN7C5C.js";
+} from "./chunk-GKFO5JLN.js";
 import {
+  claudeConfigDir,
   codexHomeFrom
-} from "./chunk-KZCYHWDF.js";
+} from "./chunk-MWLTTLPK.js";
 import {
   resolvePathBinary
-} from "./chunk-US3IT6ZC.js";
+} from "./chunk-CJ5TCFD4.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-762CDAJJ.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";
@@ -510,7 +511,7 @@ var agentProbes = (home = homedir3(), platform = process.platform) => ({
     binary: "claude",
     // The native installer puts it here, outside a default non-login PATH.
     paths: [nativeClaudeInstallPath(home, platform)],
-    configMarkers: [join3(home, ".claude")]
+    configMarkers: [claudeConfigDir(home)]
   },
   codex: {
     binary: "codex",

package/dist/{chunk-KQWN7C5C.js → chunk-GKFO5JLN.js}

@@ -3,18 +3,18 @@ import {
   addGeminiMcpServer,
   removeGeminiMcpServer,
   supportedClaudeEvents
-} from "./chunk-TDOKDCFH.js";
+} from "./chunk-RGSW36XH.js";
 import {
   CLAUDE_CODE_AGENT,
   compatibleToolLookup
-} from "./chunk-5JWCWALO.js";
+} from "./chunk-DQLCFGHK.js";
 import {
   guardBinary,
   guardBinaryRefusing,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-KZCYHWDF.js";
+} from "./chunk-MWLTTLPK.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   HOOK_LOCATOR_BINARY,
@@ -26,7 +26,7 @@ import {
   pusharyMissingReason,
   refusalOutput,
   withHookHoldBudget
-} from "./chunk-762CDAJJ.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-MYU5D5VH.js → chunk-GZCSWDAS.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-KQWN7C5C.js";
+} from "./chunk-GKFO5JLN.js";
 import {
   pusharyHookExecutable
-} from "./chunk-X4ES7QBT.js";
+} from "./chunk-BJTSKOH3.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-KZCYHWDF.js";
+} from "./chunk-MWLTTLPK.js";
 import {
   isRecord
-} from "./chunk-762CDAJJ.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-2FVP7WRP.js → chunk-HUI4OE43.js}

@@ -1,13 +1,13 @@
 import {
   callMcpTool
-} from "./chunk-5EFNBL6V.js";
+} from "./chunk-XAO6EYGM.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BMPZ5HVJ.js";
+} from "./chunk-ERK24P76.js";
 import {
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-762CDAJJ.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-AS4Z6KS4.js → chunk-IFPOHFDJ.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-KZCYHWDF.js";
+} from "./chunk-MWLTTLPK.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-L3NVHPBU.js → chunk-JGQV4MDQ.js}

@@ -3,10 +3,10 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-BRUHVTFB.js";
+} from "./chunk-4N5E4JNF.js";
 import {
   phoneStartIsRequired
-} from "./chunk-5PP4455M.js";
+} from "./chunk-G36T5LAP.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -18,7 +18,7 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-5BNXJTOZ.js";
+} from "./chunk-7HDGH3Z2.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
@@ -26,17 +26,17 @@ import {
   autoUpdateLock,
   autoUpdateLog,
   autoUpdateState
-} from "./chunk-KZCYHWDF.js";
+} from "./chunk-MWLTTLPK.js";
 import {
   execNpm,
   fetchLatestPublishedVersion,
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-US3IT6ZC.js";
+} from "./chunk-CJ5TCFD4.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BMPZ5HVJ.js";
+} from "./chunk-ERK24P76.js";
 import {
   commandsPackage,
   globalUpgradeEntry,

package/dist/{chunk-UVZK5LIK.js → chunk-K4MBKXAE.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-BMPZ5HVJ.js";
+} from "./chunk-ERK24P76.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";

package/dist/{chunk-EHCIQA5D.js → chunk-KPNZ7JUL.js}

@@ -1,18 +1,18 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-JBCMXSBO.js";
+} from "./chunk-ZGU3NXL2.js";
 import {
   keyPrefix
-} from "./chunk-KAJDKYUM.js";
+} from "./chunk-WN3RACVD.js";
 import {
   bridgeAgentKey
-} from "./chunk-KZCYHWDF.js";
+} from "./chunk-MWLTTLPK.js";
 import {
   readJsonSafe
 } from "./chunk-QENTGE75.js";
 import {
   isValidApiKey
-} from "./chunk-762CDAJJ.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-4QF2YLYK.js → chunk-LBHJJEKT.js}

@@ -4,16 +4,16 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-KAJDKYUM.js";
+} from "./chunk-WN3RACVD.js";
 import {
   getMachineId
-} from "./chunk-M46WDK64.js";
+} from "./chunk-SFAP4AJY.js";
 import {
   pusharyDir
-} from "./chunk-KZCYHWDF.js";
+} from "./chunk-MWLTTLPK.js";
 import {
   resolveGlobalBinary
-} from "./chunk-US3IT6ZC.js";
+} from "./chunk-CJ5TCFD4.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -22,7 +22,7 @@ import {
 } from "./chunk-QENTGE75.js";
 import {
   getApiKey
-} from "./chunk-4XXZUFWN.js";
+} from "./chunk-BG4Y64FW.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
@@ -32,7 +32,7 @@ import {
 } from "./chunk-QTOLNRET.js";
 import {
   isRecord
-} from "./chunk-762CDAJJ.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-5O6D4J2K.js → chunk-LN7DE5LY.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-KZCYHWDF.js";
+} from "./chunk-MWLTTLPK.js";
 import {
   readJsonSafe,
   writeFileAtomic
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-762CDAJJ.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/chunk-MLKGABMK.js

@@ -0,0 +1,9 @@
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+
+export {
+  __export
+};

package/dist/{chunk-KZCYHWDF.js → chunk-MWLTTLPK.js}

@@ -1,21 +1,31 @@
 import {
-  quoteIfNeeded
-} from "./chunk-US3IT6ZC.js";
+  quoteIfNeeded,
+  shellDoubleQuoted
+} from "./chunk-CJ5TCFD4.js";
 import {
   CODEX_QUESTION_TOOLS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-762CDAJJ.js";
+} from "./chunk-AXJLJJ3M.js";
 
 // src/setup/paths.ts
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { createHash as createHash2 } from "crypto";
+
+// src/claude-config-paths.ts
+import { homedir } from "os";
+import { join, resolve } from "path";
+var claudeConfigDir = (home = homedir(), environment = process.env) => resolve(environment.CLAUDE_CONFIG_DIR || join(home, ".claude"));
+var claudeUserConfigFile = (home = homedir(), environment = process.env) => join(environment.CLAUDE_CONFIG_DIR ? claudeConfigDir(home, environment) : home, ".claude.json");
+
+// src/setup/paths.ts
+import { homedir as homedir3 } from "os";
+import { join as join3 } from "path";
 
 // src/codex-config.ts
 import { createHash } from "crypto";
-import { homedir } from "os";
-import { join } from "path";
+import { homedir as homedir2 } from "os";
+import { join as join2 } from "path";
 
 // src/registration-holder.ts
 var asRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
@@ -52,7 +62,6 @@ var holdBudgetOf = (hook) => hook.holds ? hook.timeout : void 0;
 var LOCATE = 'B=$(command -v "$0") || exit 0; [ -f "$B" ] || exit 0; [ -x "$B" ] || exit 0';
 var NODE_PRESENT = "command -v node >/dev/null 2>&1 || exit 0";
 var CURSOR_NO_OPINION = { permission: "deny", user_message: "Command denied via Pushary.", agent_message: "Pushary hook is unavailable. Repair the integration before retrying." };
-var shellDoubleQuoted = (text) => `"${text.replace(/(["\\$`])/g, "\\$1")}"`;
 var CURSOR_NATIVE_PROMPT = { permission: "ask" };
 var CURSOR_NATIVE_PROMPT_EVENTS = ["beforeShellExecution", "beforeMCPExecution"];
 var hookEventIsOneOf = (events) => events.flatMap((event) => [`*\\"hook_event_name\\":\\"${event}\\"*`, `*\\"hook_event_name\\":\\ \\"${event}\\"*`]).join("|");
@@ -80,7 +89,7 @@ var guardKindOf = (target) => {
 var targetPath = (target) => target.kind === "binary" ? target.path : target.script;
 var runsThroughNode = (target) => target.kind !== "binary";
 var guardHookCommand = (target, platform = process.platform) => {
-  const path = quoteIfNeeded(targetPath(target));
+  const path = quoteIfNeeded(targetPath(target), platform);
   if (platform === "win32") return runsThroughNode(target) ? `node ${path}` : path;
   return `${HOOK_SHELL} '${HOOK_GUARD_SCRIPTS[guardKindOf(target)]}' ${path}`;
 };
@@ -135,13 +144,13 @@ var canonicalJson = (value) => {
 
 // src/codex-config.ts
 var CODEX_HOOK_BINARY = "pushary-codex-hook";
-var codexHome = () => codexHomeFrom(homedir());
-var codexHomeFrom = (home) => process.env.CODEX_HOME?.trim() || join(home, ".codex");
-var codexConfigToml = () => join(codexHome(), "config.toml");
-var codexHooksJsonIn = (home) => join(home, "hooks.json");
+var codexHome = () => codexHomeFrom(homedir2());
+var codexHomeFrom = (home) => process.env.CODEX_HOME?.trim() || join2(home, ".codex");
+var codexConfigToml = () => join2(codexHome(), "config.toml");
+var codexHooksJsonIn = (home) => join2(home, "hooks.json");
 var codexHooksJson = () => codexHooksJsonIn(codexHome());
-var codexAgentsMd = () => join(codexHome(), "AGENTS.md");
-var codexSkillDir = () => join(codexHome(), "skills", "pushary");
+var codexAgentsMd = () => join2(codexHome(), "AGENTS.md");
+var codexSkillDir = () => join2(codexHome(), "skills", "pushary");
 var CODEX_TOOL_CALL_MATCHER = "Bash|apply_patch|mcp__.*";
 var CODEX_PRE_TOOL_USE_MATCHER = [CODEX_TOOL_CALL_MATCHER, ...CODEX_QUESTION_TOOLS].join("|");
 var CODEX_HOOK_EVENTS = [
@@ -192,18 +201,59 @@ var ensureRecord = (target, key) => {
   return created;
 };
 var CODEX_MCP_URL = "https://pushary.com/api/mcp/mcp";
-var addCodexMcpServer = (config, apiKey) => {
+var CODEX_HTTP_ONLY_FIELDS = ["url", "http_headers", "env_http_headers", "http_headers_helper", "bearer_token", "bearer_token_env_var", "auth", "oauth", "oauth_resource"];
+var NATIVE_MCP_TRANSPORT_FIELDS = [...CODEX_HTTP_ONLY_FIELDS, "args", "env", "env_vars", "cwd"];
+var OLD_CLI_HTTP_FIELDS = /* @__PURE__ */ new Set(["url", "http_headers"]);
+var nativeCodexMcpCommand = () => join2(homedir2(), ".pushary", "bin", "pushary-mcp");
+var isNativeCodexMcpEntry = (entry, command) => {
+  const server = asRecord2(entry);
+  return server?.command === command && NATIVE_MCP_TRANSPORT_FIELDS.every((field) => !(field in server));
+};
+var carriesOnlyAnAuthorizationHeader = (headers) => {
+  const record = asRecord2(headers);
+  return record !== void 0 && Object.keys(record).length === 1 && typeof record.Authorization === "string";
+};
+var isOldCliMixedCodexMcpEntry = (entry, command) => {
+  const server = asRecord2(entry);
+  return server?.command === command && server.url === CODEX_MCP_URL && carriesOnlyAnAuthorizationHeader(server.http_headers) && NATIVE_MCP_TRANSPORT_FIELDS.every((field) => OLD_CLI_HTTP_FIELDS.has(field) || !(field in server));
+};
+var codexMcpMixesCommandWithHttp = (entry) => {
+  const server = asRecord2(entry);
+  return server !== void 0 && "command" in server && CODEX_HTTP_ONLY_FIELDS.some((field) => field in server);
+};
+var CODEX_RESTART_AFTER_TRANSPORT_CHANGE = "Fully quit and reopen Codex to load the updated Pushary configuration.";
+var codexMcpStartsCommand = (config) => {
+  const pushary = asRecord2(asRecord2(config.mcp_servers)?.pushary);
+  return pushary !== void 0 && "command" in pushary && pushary.enabled !== false;
+};
+var addCodexMcpServer = (config, apiKey, nativeOwnership = "preserve") => {
+  const existing = asRecord2(asRecord2(config.mcp_servers)?.pushary);
+  if (existing !== void 0 && "command" in existing) {
+    const command = nativeCodexMcpCommand();
+    if (!isOldCliMixedCodexMcpEntry(existing, command) && !isNativeCodexMcpEntry(existing, command)) {
+      throw new Error("Pushary MCP has an unrecognized or mixed transport. Its configuration was left unchanged.");
+    }
+    if (nativeOwnership === "preserve") {
+      for (const field of OLD_CLI_HTTP_FIELDS) delete existing[field];
+      return "kept-native";
+    }
+  }
   const servers = ensureRecord(config, "mcp_servers");
   const pushary = ensureRecord(servers, "pushary");
+  delete pushary.command;
   pushary.url = CODEX_MCP_URL;
   ensureRecord(pushary, "http_headers").Authorization = `Bearer ${apiKey}`;
   pushary.default_tools_approval_mode = "approve";
   delete pushary.bearer_token_env_var;
   delete pushary.tools;
+  return "wrote-key";
 };
 var readCodexMcpAuth = (config) => {
   const pushary = asRecord2(asRecord2(config.mcp_servers)?.pushary);
   if (!pushary) return void 0;
+  if ("command" in pushary) {
+    return isNativeCodexMcpEntry(pushary, nativeCodexMcpCommand()) ? { method: "native" } : void 0;
+  }
   const authorization = asRecord2(pushary.http_headers)?.Authorization;
   if (typeof authorization === "string" && authorization.startsWith("Bearer ")) {
     return { method: "embedded", key: authorization.slice("Bearer ".length).trim() };
@@ -446,45 +496,49 @@ var staleTrustKeys = (state, hooksJsonPath, event, currentKey, ourHash) => {
 };
 
 // src/setup/paths.ts
-var claudeSettings = () => join2(homedir2(), ".claude", "settings.json");
-var claudeJson = () => join2(homedir2(), ".claude.json");
-var claudeSkillDir = () => join2(homedir2(), ".claude", "skills", "pushary");
-var cursorPluginDir = () => join2(homedir2(), ".cursor", "plugins", "local", "pushary");
-var cursorUserHooks = () => join2(homedir2(), ".cursor", "hooks.json");
-var cursorPluginMcp = () => join2(cursorPluginDir(), "mcp.json");
-var cursorPluginManifest = () => join2(cursorPluginDir(), ".cursor-plugin", "plugin.json");
-var cursorPluginRule = () => join2(cursorPluginDir(), "rules", "pushary.mdc");
-var cursorUserMcp = () => join2(homedir2(), ".cursor", "mcp.json");
-var vscodePluginDir = () => join2(homedir2(), ".pushary", "plugins", "vscode");
-var vscodePluginMcp = () => join2(vscodePluginDir(), ".mcp.json");
-var claudeSettingsLocal = () => join2(homedir2(), ".claude", "settings.local.json");
-var pusharyDir = () => join2(homedir2(), ".pushary");
-var claudeMcpReceipt = () => join2(pusharyDir(), "setup", "claude-mcp.json");
-var bridgeAgentKey = () => join2(pusharyDir(), "bridge-auth", "agent-key.json");
-var autoUpdateState = () => join2(pusharyDir(), "auto-update.json");
-var autoUpdateLock = () => join2(pusharyDir(), "auto-update.lock");
-var serviceOwedBackMark = () => join2(pusharyDir(), "service-owed-back");
-var autoUpdateLog = () => join2(pusharyDir(), "logs", "auto-update.log");
-var clientReportClaims = () => join2(pusharyDir(), "client-reports");
-var claudeRegistrationReceipt = () => join2(pusharyDir(), "setup", "claude-registration.json");
-var hermesConfig = () => join2(homedir2(), ".hermes", "config.yaml");
-var hermesConfigReceipt = () => join2(pusharyDir(), "setup", "hermes-config.json");
-var fxQuestionRuleReceipt = () => join2(pusharyDir(), "setup", "fx-question-rule.json");
-var hookTakeoverReceipt = (agent) => join2(pusharyDir(), "setup", `hook-takeover-${agent}.json`);
-var codexSkillDir2 = () => join2(codexHome(), "skills", "pushary");
-var codexAgentsMd2 = () => join2(codexHome(), "AGENTS.md");
-var geminiSettings = () => join2(homedir2(), ".gemini", "settings.json");
-var geminiMd = () => join2(homedir2(), ".gemini", "GEMINI.md");
-var pusharyConfigFile = () => join2(homedir2(), ".pushary", "config.json");
-var fxConfigDir = () => join2(homedir2(), ".fx");
-var fxMcpProfile = () => join2(fxConfigDir(), "mcp.json");
-var fxSettings = () => join2(fxConfigDir(), "settings.json");
-var fxAgentsMd = () => join2(fxConfigDir(), "AGENTS.md");
+var claudeSettings = (environment = process.env) => join3(claudeConfigDir(homedir3(), environment), "settings.json");
+var claudeJson = (environment = process.env) => claudeUserConfigFile(homedir3(), environment);
+var claudeSkillDir = (environment = process.env) => join3(claudeConfigDir(homedir3(), environment), "skills", "pushary");
+var cursorPluginDir = () => join3(homedir3(), ".cursor", "plugins", "local", "pushary");
+var cursorUserHooks = () => join3(homedir3(), ".cursor", "hooks.json");
+var cursorPluginMcp = () => join3(cursorPluginDir(), "mcp.json");
+var cursorPluginManifest = () => join3(cursorPluginDir(), ".cursor-plugin", "plugin.json");
+var cursorPluginRule = () => join3(cursorPluginDir(), "rules", "pushary.mdc");
+var cursorUserMcp = () => join3(homedir3(), ".cursor", "mcp.json");
+var vscodePluginDir = () => join3(homedir3(), ".pushary", "plugins", "vscode");
+var vscodePluginMcp = () => join3(vscodePluginDir(), ".mcp.json");
+var claudeSettingsLocal = () => join3(claudeConfigDir(), "settings.local.json");
+var pusharyDir = () => join3(homedir3(), ".pushary");
+var claudeSetupDir = () => process.env.CLAUDE_CONFIG_DIR ? join3(pusharyDir(), "setup", "claude-profiles", createHash2("sha256").update(claudeUserConfigFile()).digest("hex").slice(0, 32)) : join3(pusharyDir(), "setup");
+var claudeMcpReceipt = () => join3(claudeSetupDir(), "claude-mcp.json");
+var bridgeAgentKey = () => join3(pusharyDir(), "bridge-auth", "agent-key.json");
+var autoUpdateState = () => join3(pusharyDir(), "auto-update.json");
+var autoUpdateLock = () => join3(pusharyDir(), "auto-update.lock");
+var serviceOwedBackMark = () => join3(pusharyDir(), "service-owed-back");
+var autoUpdateLog = () => join3(pusharyDir(), "logs", "auto-update.log");
+var clientReportClaims = () => join3(pusharyDir(), "client-reports");
+var claudeRegistrationReceipt = () => join3(claudeSetupDir(), "claude-registration.json");
+var hermesConfig = () => join3(homedir3(), ".hermes", "config.yaml");
+var hermesConfigReceipt = () => join3(pusharyDir(), "setup", "hermes-config.json");
+var fxQuestionRuleReceipt = () => join3(pusharyDir(), "setup", "fx-question-rule.json");
+var hookTakeoverReceipt = (agent) => join3(agent === "claude_code" ? claudeSetupDir() : join3(pusharyDir(), "setup"), `hook-takeover-${agent}.json`);
+var codexSkillDir2 = () => join3(codexHome(), "skills", "pushary");
+var codexAgentsMd2 = () => join3(codexHome(), "AGENTS.md");
+var geminiSettings = () => join3(homedir3(), ".gemini", "settings.json");
+var geminiMd = () => join3(homedir3(), ".gemini", "GEMINI.md");
+var pusharyConfigFile = () => join3(homedir3(), ".pushary", "config.json");
+var fxConfigDir = () => join3(homedir3(), ".fx");
+var fxMcpProfile = () => join3(fxConfigDir(), "mcp.json");
+var fxSettings = () => join3(fxConfigDir(), "settings.json");
+var fxAgentsMd = () => join3(fxConfigDir(), "AGENTS.md");
 
 export {
+  claudeConfigDir,
+  claudeUserConfigFile,
   registeredCommands,
   namesOurBinary,
   registrationHolderOf,
+  HOOK_SHELL,
   holdBudgetOf,
   guardBinary,
   guardBinaryRefusing,
@@ -504,6 +558,9 @@ export {
   codexSkillDir,
   CODEX_HOOK_EVENTS,
   CODEX_REQUIRED_APPROVAL_EVENTS,
+  codexMcpMixesCommandWithHttp,
+  CODEX_RESTART_AFTER_TRANSPORT_CHANGE,
+  codexMcpStartsCommand,
   addCodexMcpServer,
   readCodexMcpAuth,
   isPusharyCodexCommand,