@pushary/agent-hooks 1.9.6 → 1.9.8

package/dist/{chunk-GQHZIBAZ.js → chunk-ZSTSEBG7.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-Q4E56K4X.js";
+} from "./chunk-I5IJRMNV.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-PYZC54KA.js → chunk-ZW3XZLJC.js}

@@ -1,17 +1,20 @@
 import {
   claimUpgradeLock,
   finishWithUpgradeLock,
+  forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-EZAFBC2C.js";
+} from "./chunk-V5HPPF3E.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
-  hasPendingUpgradeFinish,
+  hasRetryableUpgradeFinish,
+  hasSettledUpgradeFinish,
+  nextFinishAttempt,
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-SNJ3BOCP.js";
+} from "./chunk-7PT35RY2.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
@@ -24,10 +27,10 @@ import {
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-HJXZJF6O.js";
+} from "./chunk-ZBHUHJG6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-L6USMDTW.js";
+} from "./chunk-7DVNSQWF.js";
 import {
   commandsPackage,
   globalUpgradeEntry,
@@ -36,7 +39,7 @@ import {
   isSameMajorVersion,
   ownPackageRoot,
   packageVersionAt
-} from "./chunk-Q4E56K4X.js";
+} from "./chunk-I5IJRMNV.js";
 
 // src/global-upgrade.ts
 import { existsSync } from "fs";
@@ -44,6 +47,28 @@ import { existsSync } from "fs";
 // src/auto-update-run.ts
 import { closeSync, mkdirSync, openSync, statSync, writeSync } from "fs";
 import { dirname } from "path";
+
+// src/upgrade-finish.ts
+var FINISHED_UPGRADE = { kind: "finished" };
+var RETRYABLE_UPGRADE_FINISH = { kind: "retryable" };
+var SETTLED_UPGRADE_FINISH = { kind: "settled" };
+var controlWaitsOnThePerson = (readings) => readings.controlPolicy === "legacy" || readings.controlMode === "on" && readings.controlPolicy === "unsupported";
+var upgradeFinishOutcome = (readings) => {
+  if (!readings.daemonReady) return controlWaitsOnThePerson(readings) ? SETTLED_UPGRADE_FINISH : RETRYABLE_UPGRADE_FINISH;
+  return readings.failedRefreshCount > 0 ? SETTLED_UPGRADE_FINISH : FINISHED_UPGRADE;
+};
+var UPGRADE_FINISH_EXIT_CODES = {
+  finished: EXIT.OK,
+  retryable: EXIT.FAILED,
+  settled: EXIT.PROBLEMS_FOUND
+};
+var upgradeFinishExitCode = (outcome) => UPGRADE_FINISH_EXIT_CODES[outcome.kind];
+var upgradeFinishOutcomeOfExit = (code) => {
+  if (code === UPGRADE_FINISH_EXIT_CODES.finished) return FINISHED_UPGRADE;
+  return code === UPGRADE_FINISH_EXIT_CODES.settled ? SETTLED_UPGRADE_FINISH : RETRYABLE_UPGRADE_FINISH;
+};
+
+// src/auto-update-run.ts
 var FINISH_UPGRADE_FLAG = "--finish-upgrade";
 var INSTALL_TIMEOUT_MS = 12e4;
 var LOG_LIMIT_BYTES = 256 * 1024;
@@ -71,29 +96,44 @@ var appendAutoUpdateLog = (logPath, line) => {
 var finishInNewInstall = async (request) => {
   const handle = openAutoUpdateLog(request.logPath);
   try {
-    await finishWithUpgradeLock({
+    const exit = await forkFinishWithUpgradeLock({
       entry: request.entry,
       args: [FINISH_UPGRADE_FLAG],
       lockPath: request.lockPath,
       stdio: ["ignore", handle, handle, "ipc"],
       env: { npm_config_prefix: request.prefix }
     });
+    return upgradeFinishOutcomeOfExit(exit.code);
   } finally {
     closeSync(handle);
   }
 };
 var incompleteFinishDetail = (logPath) => `installed, but refreshing the agent configs did not finish cleanly; see ${logPath}`;
+var blockedFinishDetail = (logPath) => `installed, but refreshing the agent configs needs a change only you can make; see ${logPath}, then run pushary upgrade`;
 var newMajorDetail = (latest) => `${latest} is a new major version; run ${MANUAL_UPGRADE_COMMAND}`;
-var finishInstalledUpgrade = async (context, from, to) => {
-  const pending = { result: "finish_pending", from, to, detail: incompleteFinishDetail(context.logPath) };
-  recordAutoUpdateCheck(context.statePath, pending, new Date(context.now()).toISOString());
+var attemptFinish = async (context) => {
   try {
-    await context.finish({ lockPath: context.lockPath, entry: upgradeEntryFor(context.location), prefix: context.location.prefix, logPath: context.logPath });
-    return { result: "updated", from, to };
+    return await context.finish({ lockPath: context.lockPath, entry: upgradeEntryFor(context.location), prefix: context.location.prefix, logPath: context.logPath });
   } catch {
-    return pending;
+    return RETRYABLE_UPGRADE_FINISH;
+  }
+};
+var checkAfterFinish = (outcome, pending, logPath) => {
+  switch (outcome.kind) {
+    case "finished":
+      return { result: "updated", from: pending.from, to: pending.to };
+    case "retryable":
+      return pending;
+    case "settled":
+      return { result: "finish_blocked", from: pending.from, to: pending.to, detail: blockedFinishDetail(logPath) };
   }
 };
+var finishInstalledUpgrade = async (context, from, to, finishAttempts) => {
+  const pending = { result: "finish_pending", from, to, detail: incompleteFinishDetail(context.logPath), finishAttempts };
+  recordAutoUpdateCheck(context.statePath, pending, new Date(context.now()).toISOString());
+  return checkAfterFinish(await attemptFinish(context), pending, context.logPath);
+};
+var settledFinishCheck = (state) => ({ result: "finish_blocked", from: state.from, to: state.to, detail: state.detail });
 var isInstallableRelease = (latest, installed) => latest !== void 0 && isNewerVersion(latest, installed) && isSameMajorVersion(latest, installed);
 var checkAndInstall = async (context) => {
   const installed = packageVersionAt(context.packageRoot);
@@ -101,9 +141,10 @@ var checkAndInstall = async (context) => {
     return { result: "failed", from: installed, detail: UNREADABLE_INSTALLED_VERSION };
   }
   const previous = readAutoUpdateState(context.statePath);
-  const pendingFinish = hasPendingUpgradeFinish(previous, installed);
+  const pendingFinish = hasRetryableUpgradeFinish(previous, installed);
   const latest = await fetchLatestPublishedVersion({ packageName: context.location.packageName, fetchImpl: context.fetchImpl });
-  if (pendingFinish && !isInstallableRelease(latest, installed)) return finishInstalledUpgrade(context, previous.from, installed);
+  if (pendingFinish && !isInstallableRelease(latest, installed)) return finishInstalledUpgrade(context, previous.from, installed, nextFinishAttempt(previous, installed));
+  if (hasSettledUpgradeFinish(previous, installed) && !isInstallableRelease(latest, installed)) return settledFinishCheck(previous);
   if (latest === void 0) return { result: "failed", from: installed, detail: UNREACHABLE_REGISTRY };
   if (!isNewerVersion(latest, installed)) return { result: "current", from: installed };
   if (!isSameMajorVersion(latest, installed)) {
@@ -120,7 +161,7 @@ var checkAndInstall = async (context) => {
   } catch (error) {
     return { result: "failed", from: installed, to: latest, detail: npmErrorMessage(error) };
   }
-  return finishInstalledUpgrade(context, installed, latest);
+  return finishInstalledUpgrade(context, installed, latest, nextFinishAttempt(previous, latest));
 };
 var recordAutoUpdateCheck = (statePath, check, at) => updateAutoUpdateState(statePath, {
   lastCheckAt: at,
@@ -129,7 +170,8 @@ var recordAutoUpdateCheck = (statePath, check, at) => updateAutoUpdateState(stat
   to: check.to,
   at,
   detail: check.detail,
-  announced: check.result === "updated" ? false : void 0
+  announced: check.result === "updated" ? false : void 0,
+  finishAttempts: check.finishAttempts
 });
 var runAutoUpdate = async (run = {}) => {
   if ((run.platform ?? process.platform) === "linux") return { kind: "linux" };
@@ -231,6 +273,8 @@ var upgradeInstalledPackage = async (subject, effects) => {
 };
 
 export {
+  upgradeFinishOutcome,
+  upgradeFinishExitCode,
   FINISH_UPGRADE_FLAG,
   runAutoUpdate,
   globalUpgradeSubject,

package/dist/{global-upgrade-7F5RP45B.js → global-upgrade-I56HNM23.js}

@@ -5,15 +5,15 @@ import {
   readGlobalUpgradeSubject,
   upgradeInstalledPackage,
   withUpgradeLock
-} from "./chunk-PYZC54KA.js";
-import "./chunk-EZAFBC2C.js";
-import "./chunk-SNJ3BOCP.js";
+} from "./chunk-ZW3XZLJC.js";
+import "./chunk-V5HPPF3E.js";
+import "./chunk-7PT35RY2.js";
 import "./chunk-POFBE6ZY.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-HJXZJF6O.js";
+import "./chunk-ZBHUHJG6.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-L6USMDTW.js";
-import "./chunk-Q4E56K4X.js";
+import "./chunk-7DVNSQWF.js";
+import "./chunk-I5IJRMNV.js";
 export {
   finishGlobalUpgrade,
   finishUpgradeWithLock,

package/dist/{paths-MELXIVBO.js → paths-AGY43CXS.js}

@@ -32,8 +32,8 @@ import {
   pusharyDir,
   vscodePluginDir,
   vscodePluginMcp
-} from "./chunk-HJXZJF6O.js";
-import "./chunk-Q4E56K4X.js";
+} from "./chunk-ZBHUHJG6.js";
+import "./chunk-I5IJRMNV.js";
 export {
   autoUpdateLock,
   autoUpdateLog,

package/dist/reapply-IA5XUKWW.js

@@ -0,0 +1,57 @@
+import {
+  ensureCodexTrustAfterReapply,
+  inspectConfiguredManagedProviders,
+  reapplyAllAgents,
+  reapplyClaudeForVersion,
+  reapplyClaudeSettings,
+  reapplyCodexSettings,
+  reapplyCursorPlugin,
+  reapplyGeminiSettings,
+  reapplyOpenCodePlugin,
+  reapplyVsCodePlugin,
+  repairCodexHolds
+} from "./chunk-MXHTGVFZ.js";
+import "./chunk-3Z3A37WD.js";
+import "./chunk-MGRFDGWU.js";
+import "./chunk-MFF3ONG5.js";
+import "./chunk-KHNFLYJO.js";
+import "./chunk-RIVNNBEK.js";
+import "./chunk-YIG2R3BJ.js";
+import "./chunk-DL7XWKYV.js";
+import "./chunk-2QGYMY7A.js";
+import "./chunk-3I6IVOZV.js";
+import "./chunk-WG3K4TCH.js";
+import "./chunk-XHKBHWLX.js";
+import "./chunk-6ICPEJY5.js";
+import "./chunk-KRCR2CRQ.js";
+import "./chunk-N6IOSZOE.js";
+import "./chunk-CD47ZFFZ.js";
+import "./chunk-2VZAALEJ.js";
+import "./chunk-DKMD6AWR.js";
+import "./chunk-POFBE6ZY.js";
+import "./chunk-GMXKITVA.js";
+import "./chunk-MKTJEXZ3.js";
+import "./chunk-LWOO567I.js";
+import "./chunk-TCQ43LSG.js";
+import "./chunk-DUZVXBBU.js";
+import "./chunk-7QLSKOSU.js";
+import "./chunk-KZERVKTD.js";
+import "./chunk-FQ2GORVG.js";
+import "./chunk-ZBHUHJG6.js";
+import "./chunk-T7E75EKA.js";
+import "./chunk-5QUPKDI5.js";
+import "./chunk-7DVNSQWF.js";
+import "./chunk-I5IJRMNV.js";
+export {
+  ensureCodexTrustAfterReapply,
+  inspectConfiguredManagedProviders,
+  reapplyAllAgents,
+  reapplyClaudeForVersion,
+  reapplyClaudeSettings,
+  reapplyCodexSettings,
+  reapplyCursorPlugin,
+  reapplyGeminiSettings,
+  reapplyOpenCodePlugin,
+  reapplyVsCodePlugin,
+  repairCodexHolds
+};

package/dist/src/index.d.ts

@@ -183,6 +183,7 @@ interface AnswerResult {
     value?: string;
     note?: string;
 }
+
 declare const askUser: (apiKey: string, params: AskUserParams, timeoutMs?: number) => Promise<AskUserResponse>;
 declare const waitForAnswer: (apiKey: string, correlationId: string, timeoutMs?: number, signal?: AbortSignal) => Promise<AnswerResult>;
 declare const cancelQuestion: (apiKey: string, correlationId: string, signal?: AbortSignal) => Promise<{

package/dist/src/index.js

@@ -1,15 +1,14 @@
 import {
   handlePreToolUse
-} from "../chunk-BSZ7VBVT.js";
-import "../chunk-TE5M6GGK.js";
-import "../chunk-IR5FRUPQ.js";
-import "../chunk-BVCHY4OY.js";
-import "../chunk-GQHZIBAZ.js";
+} from "../chunk-2A53H4S6.js";
+import "../chunk-KHNFLYJO.js";
+import "../chunk-IHO3YQAN.js";
+import "../chunk-ZSTSEBG7.js";
 import "../chunk-5OP5MQI7.js";
-import "../chunk-UKNKYTTY.js";
+import "../chunk-3I6IVOZV.js";
 import {
   fetchAccountPublicKey
-} from "../chunk-7JTVYR5B.js";
+} from "../chunk-CLOSJ4ES.js";
 import "../chunk-6ICPEJY5.js";
 import {
   fetchModeOverride,
@@ -19,33 +18,33 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-CCDVL63C.js";
+} from "../chunk-KRCR2CRQ.js";
 import "../chunk-N6IOSZOE.js";
-import "../chunk-DJ4BB264.js";
+import "../chunk-CD47ZFFZ.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
-} from "../chunk-WN6WYUCV.js";
-import "../chunk-DA4FTGTK.js";
+} from "../chunk-2VZAALEJ.js";
+import "../chunk-DKMD6AWR.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-ZPW4MJOV.js";
-import "../chunk-4QKM44N6.js";
-import "../chunk-W4Q7NFXU.js";
-import "../chunk-3BUAEQCY.js";
+import "../chunk-MKTJEXZ3.js";
+import "../chunk-LWOO567I.js";
+import "../chunk-TCQ43LSG.js";
+import "../chunk-DUZVXBBU.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-75CA37FZ.js";
-import "../chunk-HJXZJF6O.js";
+import "../chunk-FQ2GORVG.js";
+import "../chunk-ZBHUHJG6.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-2QRE6QH2.js";
-import "../chunk-L6USMDTW.js";
+} from "../chunk-5QUPKDI5.js";
+import "../chunk-7DVNSQWF.js";
 import {
   resolvePolicy
-} from "../chunk-Q4E56K4X.js";
+} from "../chunk-I5IJRMNV.js";
 export {
   askUser,
   cancelQuestion,

package/dist/{upgrade-lock-AHRBA66K.js → upgrade-lock-B34TAUKV.js}

@@ -1,16 +1,18 @@
 import {
   claimUpgradeLock,
   finishWithUpgradeLock,
+  forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   ownsUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-EZAFBC2C.js";
-import "./chunk-HJXZJF6O.js";
+} from "./chunk-V5HPPF3E.js";
+import "./chunk-ZBHUHJG6.js";
 import "./chunk-T7E75EKA.js";
-import "./chunk-Q4E56K4X.js";
+import "./chunk-I5IJRMNV.js";
 export {
   claimUpgradeLock,
   finishWithUpgradeLock,
+  forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   ownsUpgradeLock,
   releaseAutoUpdateLock

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "1.9.6",
+  "version": "1.9.8",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",

package/dist/chunk-HT3WMM6Q.js

@@ -1,44 +0,0 @@
-import {
-  createIo
-} from "./chunk-U4TMAANR.js";
-import {
-  describeKeyCheck,
-  keyCheckFromResponse
-} from "./chunk-4QKM44N6.js";
-import {
-  EXIT
-} from "./chunk-KZERVKTD.js";
-
-// src/cli/report-key.ts
-var { dim, yellow } = createIo();
-var printKeyCheck = (check, baseUrl) => {
-  const report = describeKeyCheck(check, baseUrl);
-  console.log(`  ${yellow("!")} ${report.message}`);
-  for (const line of report.next) console.log(`  ${dim(line)}`);
-  return report;
-};
-var exitIfKeyFailure = async (response, baseUrl) => {
-  const check = await keyCheckFromResponse(response, baseUrl);
-  if (!check) return;
-  const report = printKeyCheck(check, baseUrl);
-  process.exit(report.exitCode);
-};
-var responseDetail = async (response) => {
-  try {
-    const body = await response.json();
-    const text = [body.error, body.message].find((part) => typeof part === "string" && part);
-    if (typeof text === "string") return text;
-  } catch {
-  }
-  return response.statusText || `HTTP ${response.status}`;
-};
-var exitOnFailedResponse = async (response, baseUrl) => {
-  await exitIfKeyFailure(response, baseUrl);
-  console.log(`  ${yellow("!")} Failed: ${await responseDetail(response)}`);
-  process.exit(EXIT.FAILED);
-};
-
-export {
-  printKeyCheck,
-  exitOnFailedResponse
-};

package/dist/chunk-IR5FRUPQ.js

@@ -1,197 +0,0 @@
-import {
-  CLAUDE_HOOK_EVENTS,
-  supportedClaudeEvents
-} from "./chunk-UKNKYTTY.js";
-import {
-  guardBinary,
-  holdBudgetOf,
-  isProtectedByScope,
-  registerHookEntry
-} from "./chunk-HJXZJF6O.js";
-import {
-  HOOK_LOCATOR_BINARY,
-  withHookHoldBudget
-} from "./chunk-Q4E56K4X.js";
-
-// src/claude-config.ts
-import { join } from "path";
-import { isDeepStrictEqual } from "util";
-var PUSHARY_MCP_URL = "https://pushary.com/api/mcp/mcp";
-var PUSHARY_PERMISSION_RULE = "mcp__pushary__*";
-var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
-var ensureRecord = (target, key) => {
-  const existing = asRecord(target[key]);
-  if (existing) return existing;
-  const created = {};
-  target[key] = created;
-  return created;
-};
-var isPusharyPermission = (rule) => typeof rule === "string" && (rule.includes("pushary") || rule.includes("MCP(pushary"));
-var HOOK_BINARIES = /* @__PURE__ */ new Set([
-  ...CLAUDE_HOOK_EVENTS.map((hook) => hook.binary),
-  HOOK_LOCATOR_BINARY
-]);
-var namesPusharyBinary = (command) => command.split(/[\s/\\"']+/).some((segment) => HOOK_BINARIES.has(segment.replace(/\.(cmd|exe)$/i, "")));
-var isPusharyHook = (entry2, scope) => {
-  const hooks = asRecord(entry2)?.hooks;
-  if (!Array.isArray(hooks)) return false;
-  return hooks.some((hook) => {
-    const command = String(asRecord(hook)?.command ?? "");
-    if (isProtectedByScope(command, scope)) return false;
-    return namesPusharyBinary(command);
-  });
-};
-var pusharyMcpServer = (apiKey) => ({
-  type: "http",
-  url: PUSHARY_MCP_URL,
-  headers: { Authorization: `Bearer ${apiKey}` }
-});
-var addClaudeMcpServer = (config, apiKey) => {
-  const mcpServers = ensureRecord(config, "mcpServers");
-  mcpServers.pushary = pusharyMcpServer(apiKey);
-};
-var isClaudeMcpSnapshot = (value) => {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const snapshot = value;
-  return typeof snapshot.hadMcpServers === "boolean" && typeof snapshot.mcpServersWasRecord === "boolean" && (!snapshot.hadMcpServers || snapshot.mcpServersWasRecord || Object.hasOwn(snapshot, "mcpServers")) && typeof snapshot.hadPushary === "boolean" && (!snapshot.hadPushary || Object.hasOwn(snapshot, "pushary")) && (!Object.hasOwn(snapshot, "installedPushary") || asRecord(snapshot.installedPushary)?.type === "http" && asRecord(snapshot.installedPushary)?.url === PUSHARY_MCP_URL);
-};
-var captureClaudeMcpServer = (config, apiKey) => {
-  const mcpServers = asRecord(config.mcpServers);
-  const hadMcpServers = Object.hasOwn(config, "mcpServers");
-  return {
-    hadMcpServers,
-    mcpServersWasRecord: Boolean(mcpServers),
-    ...hadMcpServers && !mcpServers ? { mcpServers: structuredClone(config.mcpServers) } : {},
-    hadPushary: Boolean(mcpServers && Object.hasOwn(mcpServers, "pushary")),
-    ...mcpServers && Object.hasOwn(mcpServers, "pushary") ? { pushary: structuredClone(mcpServers.pushary) } : {},
-    ...apiKey ? { installedPushary: pusharyMcpServer(apiKey) } : {}
-  };
-};
-var updateClaudeMcpSnapshot = (snapshot, apiKey) => ({
-  ...snapshot,
-  installedPushary: pusharyMcpServer(apiKey)
-});
-var restoreClaudeMcpServer = (config, snapshot) => {
-  const mcpServers = asRecord(config.mcpServers);
-  const current = asRecord(mcpServers?.pushary);
-  if (Object.hasOwn(snapshot, "installedPushary")) {
-    if (!isDeepStrictEqual(mcpServers?.pushary, snapshot.installedPushary)) return false;
-  } else if (current?.type !== "http" || current.url !== PUSHARY_MCP_URL) {
-    return false;
-  }
-  if (!snapshot.mcpServersWasRecord) {
-    if (Object.keys(mcpServers).length === 1) {
-      if (snapshot.hadMcpServers) config.mcpServers = structuredClone(snapshot.mcpServers);
-      else delete config.mcpServers;
-    } else {
-      delete mcpServers.pushary;
-    }
-  } else if (snapshot.hadPushary) {
-    mcpServers.pushary = structuredClone(snapshot.pushary);
-  } else {
-    delete mcpServers.pushary;
-    if (!snapshot.hadMcpServers && Object.keys(mcpServers).length === 0) delete config.mcpServers;
-  }
-  return true;
-};
-var removeClaudeMcpServers = (config) => {
-  let changed = false;
-  const removeFrom = (target) => {
-    const mcpServers = asRecord(target.mcpServers);
-    if (!mcpServers?.pushary) return;
-    delete mcpServers.pushary;
-    if (Object.keys(mcpServers).length === 0) delete target.mcpServers;
-    changed = true;
-  };
-  removeFrom(config);
-  const projects = asRecord(config.projects);
-  if (projects) {
-    for (const project of Object.values(projects)) {
-      const projectConfig = asRecord(project);
-      if (projectConfig) removeFrom(projectConfig);
-    }
-  }
-  return changed;
-};
-var removePusharyToolPermissions = (settings) => {
-  const permissions = asRecord(settings.permissions);
-  if (!permissions || !Array.isArray(permissions.allow)) return false;
-  const filtered = permissions.allow.filter((rule) => !isPusharyPermission(rule));
-  if (filtered.length === permissions.allow.length) return false;
-  if (filtered.length === 0) delete permissions.allow;
-  else permissions.allow = filtered;
-  if (Object.keys(permissions).length === 0) delete settings.permissions;
-  return true;
-};
-var addPusharyToolPermissions = (settings) => {
-  const permissions = ensureRecord(settings, "permissions");
-  const allow = Array.isArray(permissions.allow) ? permissions.allow : [];
-  const filtered = allow.filter((rule) => !isPusharyPermission(rule));
-  if (!filtered.includes(PUSHARY_PERMISSION_RULE)) {
-    filtered.push(PUSHARY_PERMISSION_RULE);
-  }
-  permissions.allow = filtered;
-};
-var addPusharyHooks = (settings, binDir, version = null) => {
-  const resolve = (name) => guardBinary(binDir ? join(binDir, name) : name);
-  const hooks = ensureRecord(settings, "hooks");
-  const supported = new Map(supportedClaudeEvents(version).map((hook) => [hook.event, hook]));
-  for (const known of CLAUDE_HOOK_EVENTS) {
-    const current = Array.isArray(hooks[known.event]) ? hooks[known.event] : [];
-    const definition = supported.get(known.event);
-    if (definition) {
-      hooks[known.event] = registerHookEntry(current, isPusharyHook, entry(definition, resolve));
-      continue;
-    }
-    const others = current.filter((item) => !isPusharyHook(item));
-    if (others.length > 0) {
-      hooks[known.event] = others;
-    } else {
-      delete hooks[known.event];
-    }
-  }
-};
-var entry = (definition, resolve) => ({
-  ...definition.matcher ? { matcher: definition.matcher } : {},
-  hooks: [{
-    type: "command",
-    command: withHookHoldBudget(resolve(definition.binary), holdBudgetOf(definition)),
-    timeout: definition.timeout
-  }]
-});
-var removePusharySettings = (settings, scope) => {
-  let changed = scope?.keepMcpServer === true ? false : removeClaudeMcpServers(settings);
-  if (scope?.keepMcpServer !== true && removePusharyToolPermissions(settings)) changed = true;
-  const hooks = asRecord(settings.hooks);
-  if (hooks) {
-    for (const { event: key } of CLAUDE_HOOK_EVENTS) {
-      const entries = hooks[key];
-      if (!Array.isArray(entries)) continue;
-      const filtered = entries.filter((entry2) => !isPusharyHook(entry2, scope));
-      if (filtered.length !== entries.length) {
-        if (filtered.length === 0) {
-          delete hooks[key];
-        } else {
-          hooks[key] = filtered;
-        }
-        changed = true;
-      }
-    }
-    if (Object.keys(hooks).length === 0) delete settings.hooks;
-  }
-  return changed;
-};
-
-export {
-  isPusharyHook,
-  addClaudeMcpServer,
-  isClaudeMcpSnapshot,
-  captureClaudeMcpServer,
-  updateClaudeMcpSnapshot,
-  restoreClaudeMcpServer,
-  removeClaudeMcpServers,
-  removePusharyToolPermissions,
-  addPusharyToolPermissions,
-  addPusharyHooks,
-  removePusharySettings
-};

package/dist/chunk-JUFKJCZG.js

@@ -1,38 +0,0 @@
-import {
-  NPX_LATEST_COMMAND
-} from "./chunk-L6USMDTW.js";
-
-// src/setup/codex-trust.ts
-var CODEX_TRUST_TELEMETRY = {
-  verified: "verified",
-  refused: "manual",
-  unlisted: "manual",
-  skipped: "unverified",
-  unavailable: "unverified"
-};
-var isUnanswered = (confirmation) => confirmation.kind === "skipped" || confirmation.kind === "unavailable";
-var codexTrustOutcome = (confirmation, portedTrustWritten) => isUnanswered(confirmation) && !portedTrustWritten ? "manual" : CODEX_TRUST_TELEMETRY[confirmation.kind];
-var CODEX_TRUST_REFUSED = "Codex did not accept the trust Pushary asked for, so its hooks are not trusted yet. Open Codex, run /hooks, and choose Trust for the Pushary hooks.";
-var describeUnlistedCodexHooks = (warnings) => {
-  const said = warnings[0] ? ` Codex said: ${warnings[0]}` : "";
-  return `Codex does not list the Pushary hooks, so it will not run them.${said} Run ${NPX_LATEST_COMMAND} doctor for details.`;
-};
-var describeCodexTrustConfirmation = (confirmation) => {
-  switch (confirmation.kind) {
-    case "verified":
-      return confirmation.wrote ? "Codex trusted the Pushary hooks when asked, and confirmed it." : "Codex confirms the Pushary hooks are trusted.";
-    case "refused":
-      return confirmation.writeError ? `${CODEX_TRUST_REFUSED} Codex said: ${confirmation.writeError}` : CODEX_TRUST_REFUSED;
-    case "unlisted":
-      return describeUnlistedCodexHooks(confirmation.warnings);
-    case "skipped":
-      return `Pushary did not ask Codex to confirm the trust: ${confirmation.reason}.`;
-    case "unavailable":
-      return `Codex could not be asked to confirm the Pushary hooks are trusted (${confirmation.reason}).`;
-  }
-};
-
-export {
-  codexTrustOutcome,
-  describeCodexTrustConfirmation
-};