@pushary/agent-hooks 1.9.62 → 1.9.64

package/dist/chunk-6YSEOXP5.js

@@ -1,615 +0,0 @@
-import {
-  quoteIfNeeded,
-  shellDoubleQuoted
-} from "./chunk-CFIQ3252.js";
-import {
-  CODEX_QUESTION_TOOLS,
-  HOOK_BUDGETS,
-  HOOK_LOCATOR_BINARY,
-  withHookHoldBudget
-} from "./chunk-FXECTHAG.js";
-
-// src/setup/paths.ts
-import { createHash as createHash2 } from "crypto";
-
-// src/claude-config-paths.ts
-import { homedir } from "os";
-import { join, resolve } from "path";
-var claudeConfigDir = (home = homedir(), environment = process.env) => resolve(environment.CLAUDE_CONFIG_DIR || join(home, ".claude"));
-var claudeUserConfigFile = (home = homedir(), environment = process.env) => join(environment.CLAUDE_CONFIG_DIR ? claudeConfigDir(home, environment) : home, ".claude.json");
-
-// src/setup/paths.ts
-import { homedir as homedir3 } from "os";
-import { join as join3 } from "path";
-
-// src/codex-config.ts
-import { createHash } from "crypto";
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
-
-// src/registration-holder.ts
-var asRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
-var registeredCommands = (document) => {
-  const hooks = asRecord(document?.hooks);
-  if (!hooks) return [];
-  const found = [];
-  for (const [event, value] of Object.entries(hooks)) {
-    if (!Array.isArray(value)) continue;
-    for (const item of value) {
-      const inner = asRecord(item)?.hooks;
-      if (!Array.isArray(inner)) continue;
-      for (const hook of inner) {
-        const command = asRecord(hook)?.command;
-        if (typeof command === "string") found.push({ event, command });
-      }
-    }
-  }
-  return found;
-};
-var wholeSegments = (command) => command.split(/[\s/\\"']+/).map((segment) => segment.replace(/\.(cmd|exe)$/i, ""));
-var namesLocator = (command) => wholeSegments(command).includes(HOOK_LOCATOR_BINARY);
-var namesCliBinary = (command, cliBinaries) => wholeSegments(command).some((segment) => cliBinaries.has(segment));
-var namesOurBinary = (command, cliBinaries) => namesLocator(command) || namesCliBinary(command, cliBinaries);
-var registrationHolderOf = (document, cliBinaries) => {
-  const commands = registeredCommands(document);
-  if (commands.some(({ command }) => namesLocator(command))) return "app";
-  return commands.some(({ command }) => namesCliBinary(command, cliBinaries)) ? "cli" : "none";
-};
-
-// src/hook-command.ts
-var HOOK_SHELL = "/bin/sh -c";
-var holdBudgetOf = (hook) => hook.holds ? hook.timeout : void 0;
-var LOCATE = 'B=$(command -v "$0") || exit 0; [ -f "$B" ] || exit 0; [ -x "$B" ] || exit 0';
-var NODE_PRESENT = "command -v node >/dev/null 2>&1 || exit 0";
-var CURSOR_NO_OPINION = { permission: "deny", user_message: "Command denied via Pushary.", agent_message: "Pushary hook is unavailable. Repair the integration before retrying." };
-var CURSOR_NATIVE_PROMPT = { permission: "ask" };
-var CURSOR_NATIVE_PROMPT_EVENTS = ["beforeShellExecution", "beforeMCPExecution"];
-var hookEventIsOneOf = (events) => events.flatMap((event) => [`*\\"hook_event_name\\":\\"${event}\\"*`, `*\\"hook_event_name\\":\\ \\"${event}\\"*`]).join("|");
-var CURSOR_MISS = `{ E=$(cat); case "$E" in ${hookEventIsOneOf(CURSOR_NATIVE_PROMPT_EVENTS)}) printf %s ${shellDoubleQuoted(JSON.stringify(CURSOR_NATIVE_PROMPT))} ;; *) printf %s ${shellDoubleQuoted(JSON.stringify(CURSOR_NO_OPINION))} ;; esac; exit 0; }`;
-var HOOK_GUARD_SCRIPTS = {
-  native_binary: `${LOCATE}; exec "$B" "$@"`,
-  node_binary: `${LOCATE}; ${NODE_PRESENT}; exec "$B" "$@"`,
-  node_script: `[ -f "$0" ] || exit 0; ${NODE_PRESENT}; exec node "$0" "$@"`,
-  cursor_gate_script: `[ -f "$0" ] || ${CURSOR_MISS}; command -v node >/dev/null 2>&1 || ${CURSOR_MISS}; exec node "$0" "$@"`
-};
-var BINARY_GUARDS = {
-  native: "native_binary",
-  node: "node_binary"
-};
-var guardKindOf = (target) => {
-  switch (target.kind) {
-    case "node":
-      return "node_script";
-    case "cursor_gate":
-      return "cursor_gate_script";
-    case "binary":
-      return BINARY_GUARDS[target.runtime];
-  }
-};
-var targetPath = (target) => target.kind === "binary" ? target.path : target.script;
-var runsThroughNode = (target) => target.kind !== "binary";
-var guardHookCommand = (target, platform = process.platform) => {
-  const path = quoteIfNeeded(targetPath(target), platform);
-  if (platform === "win32") return runsThroughNode(target) ? `node ${path}` : path;
-  return `${HOOK_SHELL} '${HOOK_GUARD_SCRIPTS[guardKindOf(target)]}' ${path}`;
-};
-var guardBinary = (path, platform) => guardHookCommand({ kind: "binary", path, runtime: "node" }, platform);
-var SILENT_MISS = "exit 0";
-var REFUSE = "R";
-var definesRefusal = (refusal) => `${REFUSE}() { printf %s ${shellDoubleQuoted(refusal)}; exit 0; }`;
-var guardBinaryRefusing = (path, refusal, platform = process.platform) => {
-  if (platform === "win32") return guardBinary(path, platform);
-  const script = `${definesRefusal(refusal)}; ${HOOK_GUARD_SCRIPTS.node_binary.replaceAll(SILENT_MISS, REFUSE)}`;
-  return `${HOOK_SHELL} '${script}' ${quoteIfNeeded(path)}`;
-};
-var guardNodeScript = (script, platform) => guardHookCommand({ kind: "node", script }, platform);
-var guardCursorGate = (script, platform) => guardHookCommand({ kind: "cursor_gate", script }, platform);
-var guardedArgv = (target, args = [], platform = process.platform) => {
-  const path = targetPath(target);
-  if (platform === "win32") {
-    return runsThroughNode(target) ? ["node", path, ...args] : [path, ...args];
-  }
-  const [shell, ...shellArgs] = HOOK_SHELL.split(/\s+/);
-  return [shell, ...shellArgs, HOOK_GUARD_SCRIPTS[guardKindOf(target)], path, ...args];
-};
-
-// src/hook-entries.ts
-var registerHookEntry = (existing, isOurs, entry) => {
-  const rewritten = [];
-  let placed = false;
-  for (const item of existing) {
-    if (!isOurs(item)) {
-      rewritten.push(item);
-      continue;
-    }
-    if (placed) continue;
-    rewritten.push(entry);
-    placed = true;
-  }
-  if (!placed) rewritten.push(entry);
-  return rewritten;
-};
-
-// src/removal-scope.ts
-var namesAppLocator = (command) => command.includes(HOOK_LOCATOR_BINARY);
-var isProtectedByScope = (command, scope) => scope?.keepAppWiring === true && namesAppLocator(command);
-
-// src/canonical-json.ts
-var canonicalJson = (value) => {
-  if (value === null || typeof value !== "object") return JSON.stringify(value);
-  if (Array.isArray(value)) return "[" + value.map(canonicalJson).join(",") + "]";
-  const record = value;
-  return "{" + Object.keys(record).sort().map((key) => JSON.stringify(key) + ":" + canonicalJson(record[key])).join(",") + "}";
-};
-
-// src/codex-config.ts
-var CODEX_HOOK_BINARY = "pushary-codex-hook";
-var codexHome = () => codexHomeFrom(homedir2());
-var codexHomeFrom = (home) => process.env.CODEX_HOME?.trim() || join2(home, ".codex");
-var codexConfigToml = () => join2(codexHome(), "config.toml");
-var codexHooksJsonIn = (home) => join2(home, "hooks.json");
-var codexHooksJson = () => codexHooksJsonIn(codexHome());
-var codexAgentsMd = () => join2(codexHome(), "AGENTS.md");
-var codexSkillDir = () => join2(codexHome(), "skills", "pushary");
-var CODEX_TOOL_CALL_MATCHER = "Bash|apply_patch|mcp__.*";
-var CODEX_PRE_TOOL_USE_MATCHER = [CODEX_TOOL_CALL_MATCHER, ...CODEX_QUESTION_TOOLS].join("|");
-var CODEX_HOOK_EVENTS = [
-  { event: "PermissionRequest", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Waiting for your phone" },
-  { event: "PreToolUse", matcher: CODEX_PRE_TOOL_USE_MATCHER, delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Checking Pushary policy" },
-  { event: "PostToolUse", matcher: CODEX_TOOL_CALL_MATCHER, delivery: "telemetry", timeout: 10 },
-  { event: "UserPromptSubmit", delivery: "telemetry", timeout: 10 },
-  { event: "Stop", delivery: "rescue", timeout: HOOK_BUDGETS.codex.budgetSeconds, holds: true },
-  // `clear` alongside startup and resume, matching what we already do on Claude
-  // Code. Codex names all three in its own SessionStart sources, and without it a
-  // session the person started by clearing is one we never see begin.
-  { event: "SessionStart", matcher: "startup|resume|clear", delivery: "telemetry", timeout: 10 },
-  // Codex caps SessionEnd at 3s and defaults it to 1s, unlike every other event
-  // here. It also runs synchronously whatever `async` says, so the handler must
-  // fit the window rather than assume the 10s Claude Code allows.
-  { event: "SessionEnd", delivery: "telemetry", timeout: 3 },
-  // Observability only, and the four Codex names we were not registering at all.
-  // Every one is in codex-cli 0.151.0's own `HookEventName` enum
-  // (subagent_start, subagent_stop, pre_compact, post_compact), and we already
-  // carry all four on Claude Code, so the island showed subagent and compaction
-  // shape for one agent and not the other. None of them decides anything.
-  { event: "SubagentStart", delivery: "telemetry", timeout: 5 },
-  { event: "SubagentStop", delivery: "telemetry", timeout: 5 },
-  { event: "PreCompact", matcher: "manual|auto", delivery: "telemetry", timeout: 5 },
-  { event: "PostCompact", matcher: "manual|auto", delivery: "telemetry", timeout: 5 }
-];
-var CODEX_REQUIRED_APPROVAL_EVENTS = CODEX_HOOK_EVENTS.filter((event) => event.delivery === "approval").map((event) => event.event);
-var CODEX_EVENT_KEY = {
-  PermissionRequest: "permission_request",
-  PreToolUse: "pre_tool_use",
-  PostToolUse: "post_tool_use",
-  UserPromptSubmit: "user_prompt_submit",
-  Stop: "stop",
-  SessionStart: "session_start",
-  SessionEnd: "session_end",
-  SubagentStart: "subagent_start",
-  SubagentStop: "subagent_stop",
-  PreCompact: "pre_compact",
-  PostCompact: "post_compact"
-};
-var codexEventKeyOf = (event) => event.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toLowerCase();
-var asRecord2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
-var ensureRecord = (target, key) => {
-  const existing = asRecord2(target[key]);
-  if (existing) return existing;
-  const created = {};
-  target[key] = created;
-  return created;
-};
-var CODEX_MCP_URL = "https://pushary.com/api/mcp/mcp";
-var CODEX_HTTP_ONLY_FIELDS = ["url", "http_headers", "env_http_headers", "http_headers_helper", "bearer_token", "bearer_token_env_var", "auth", "oauth", "oauth_resource"];
-var NATIVE_MCP_TRANSPORT_FIELDS = [...CODEX_HTTP_ONLY_FIELDS, "args", "env", "env_vars", "cwd"];
-var OLD_CLI_HTTP_FIELDS = /* @__PURE__ */ new Set(["url", "http_headers"]);
-var nativeCodexMcpCommand = () => join2(homedir2(), ".pushary", "bin", "pushary-mcp");
-var isNativeCodexMcpEntry = (entry, command) => {
-  const server = asRecord2(entry);
-  return server?.command === command && NATIVE_MCP_TRANSPORT_FIELDS.every((field) => !(field in server));
-};
-var carriesOnlyAnAuthorizationHeader = (headers) => {
-  const record = asRecord2(headers);
-  return record !== void 0 && Object.keys(record).length === 1 && typeof record.Authorization === "string";
-};
-var isOldCliMixedCodexMcpEntry = (entry, command) => {
-  const server = asRecord2(entry);
-  return server?.command === command && server.url === CODEX_MCP_URL && carriesOnlyAnAuthorizationHeader(server.http_headers) && NATIVE_MCP_TRANSPORT_FIELDS.every((field) => OLD_CLI_HTTP_FIELDS.has(field) || !(field in server));
-};
-var codexMcpMixesCommandWithHttp = (entry) => {
-  const server = asRecord2(entry);
-  return server !== void 0 && "command" in server && CODEX_HTTP_ONLY_FIELDS.some((field) => field in server);
-};
-var CODEX_RESTART_AFTER_TRANSPORT_CHANGE = "Fully quit and reopen Codex to load the updated Pushary configuration.";
-var codexMcpStartsCommand = (config) => {
-  const pushary = asRecord2(asRecord2(config.mcp_servers)?.pushary);
-  return pushary !== void 0 && "command" in pushary && pushary.enabled !== false;
-};
-var addCodexMcpServer = (config, apiKey, nativeOwnership = "preserve") => {
-  const existing = asRecord2(asRecord2(config.mcp_servers)?.pushary);
-  if (existing !== void 0 && "command" in existing) {
-    const command = nativeCodexMcpCommand();
-    if (!isOldCliMixedCodexMcpEntry(existing, command) && !isNativeCodexMcpEntry(existing, command)) {
-      throw new Error("Pushary MCP has an unrecognized or mixed transport. Its configuration was left unchanged.");
-    }
-    if (nativeOwnership === "preserve") {
-      for (const field of OLD_CLI_HTTP_FIELDS) delete existing[field];
-      return "kept-native";
-    }
-  }
-  const servers = ensureRecord(config, "mcp_servers");
-  const pushary = ensureRecord(servers, "pushary");
-  delete pushary.command;
-  pushary.url = CODEX_MCP_URL;
-  ensureRecord(pushary, "http_headers").Authorization = `Bearer ${apiKey}`;
-  pushary.default_tools_approval_mode = "approve";
-  delete pushary.bearer_token_env_var;
-  delete pushary.tools;
-  return "wrote-key";
-};
-var readCodexMcpAuth = (config) => {
-  const pushary = asRecord2(asRecord2(config.mcp_servers)?.pushary);
-  if (!pushary) return void 0;
-  if ("command" in pushary) {
-    return isNativeCodexMcpEntry(pushary, nativeCodexMcpCommand()) ? { method: "native" } : void 0;
-  }
-  const authorization = asRecord2(pushary.http_headers)?.Authorization;
-  if (typeof authorization === "string" && authorization.startsWith("Bearer ")) {
-    return { method: "embedded", key: authorization.slice("Bearer ".length).trim() };
-  }
-  if (typeof pushary.bearer_token_env_var === "string") {
-    return { method: "env", envVar: pushary.bearer_token_env_var };
-  }
-  if (typeof pushary.bearer_token === "string") return { method: "legacy-bearer" };
-  return void 0;
-};
-var isPusharyCodexCommand = (command) => command.includes(CODEX_HOOK_BINARY) || command.includes(HOOK_LOCATOR_BINARY);
-var isPusharyCommand = (hook, scope) => {
-  const command = String(asRecord2(hook)?.command ?? "");
-  if (isProtectedByScope(command, scope)) return false;
-  return isPusharyCodexCommand(command);
-};
-var isPusharyCodexHook = (entry, scope) => {
-  const hooks = asRecord2(entry)?.hooks;
-  return Array.isArray(hooks) && hooks.some((hook) => isPusharyCommand(hook, scope));
-};
-var CODEX_CLI_BINARIES = /* @__PURE__ */ new Set([CODEX_HOOK_BINARY]);
-var codexRegistrationHolder = (hooksConfig) => registrationHolderOf(hooksConfig, CODEX_CLI_BINARIES);
-var addCodexHooks = (config, command) => {
-  const hooks = ensureRecord(config, "hooks");
-  for (const definition of CODEX_HOOK_EVENTS) {
-    const existing = Array.isArray(hooks[definition.event]) ? hooks[definition.event] : [];
-    hooks[definition.event] = registerHookEntry(existing, isPusharyCodexHook, {
-      ...definition.matcher ? { matcher: definition.matcher } : {},
-      hooks: [{
-        type: "command",
-        command: withHookHoldBudget(command, holdBudgetOf(definition)),
-        timeout: definition.timeout,
-        ...definition.statusMessage ? { statusMessage: definition.statusMessage } : {}
-      }]
-    });
-  }
-};
-var removeCodexHooks = (config, scope) => {
-  const hooks = asRecord2(config.hooks);
-  if (!hooks) return false;
-  let changed = false;
-  for (const definition of CODEX_HOOK_EVENTS) {
-    const entries = hooks[definition.event];
-    if (!Array.isArray(entries)) continue;
-    const filtered = entries.filter((entry) => !isPusharyCodexHook(entry, scope));
-    if (filtered.length !== entries.length) {
-      if (filtered.length === 0) {
-        delete hooks[definition.event];
-      } else {
-        hooks[definition.event] = filtered;
-      }
-      changed = true;
-    }
-  }
-  if (Object.keys(hooks).length === 0) delete config.hooks;
-  return changed;
-};
-var hasCodexHooks = (config) => {
-  const hooks = asRecord2(config.hooks);
-  if (!hooks) return false;
-  return CODEX_HOOK_EVENTS.some((definition) => {
-    const entries = hooks[definition.event];
-    return Array.isArray(entries) && entries.some((entry) => isPusharyCodexHook(entry));
-  });
-};
-var missingCodexHookEvents = (config) => {
-  const hooks = asRecord2(config.hooks);
-  return CODEX_HOOK_EVENTS.filter((definition) => {
-    const entries = hooks?.[definition.event];
-    return !Array.isArray(entries) || !entries.some((entry) => isPusharyCodexHook(entry));
-  }).map((definition) => definition.event);
-};
-var codexHookTrustHash = (definition, command) => {
-  const hook = { command: withHookHoldBudget(command, holdBudgetOf(definition)), timeout: definition.timeout, type: "command" };
-  if (definition.statusMessage) hook.statusMessage = definition.statusMessage;
-  const entry = { hooks: [hook] };
-  if (definition.matcher) entry.matcher = definition.matcher;
-  return codexEntryTrustHash(CODEX_EVENT_KEY[definition.event], entry);
-};
-var codexEntryTrustHash = (eventKey, entry) => {
-  const hooks = Array.isArray(entry.hooks) ? entry.hooks : [];
-  const identity = {
-    event_name: eventKey,
-    hooks: hooks.map((hook) => ({ async: false, ...asRecord2(hook) }))
-  };
-  if (typeof entry.matcher === "string") identity.matcher = entry.matcher;
-  return "sha256:" + createHash("sha256").update(canonicalJson(identity), "utf8").digest("hex");
-};
-var codexHookPositions = (hooksConfig) => {
-  const hooks = asRecord2(hooksConfig?.hooks);
-  const positions = {};
-  for (const definition of CODEX_HOOK_EVENTS) {
-    const entries = hooks?.[definition.event];
-    if (!Array.isArray(entries)) continue;
-    const entryIndex = entries.findIndex((entry) => isPusharyCodexHook(entry));
-    if (entryIndex < 0) continue;
-    const inner = asRecord2(entries[entryIndex])?.hooks;
-    const hookIndex = Array.isArray(inner) ? inner.findIndex((hook) => isPusharyCommand(hook)) : -1;
-    positions[definition.event] = [entryIndex, Math.max(hookIndex, 0)];
-  }
-  return positions;
-};
-var codexHookStateKey = (hooksJsonPath, event, position) => `${hooksJsonPath}:${CODEX_EVENT_KEY[event]}:${position[0]}:${position[1]}`;
-var codexVacatedIndexes = (hooksConfig) => {
-  const hooks = asRecord2(hooksConfig?.hooks);
-  const vacated = {};
-  for (const definition of CODEX_HOOK_EVENTS) {
-    const entries = hooks?.[definition.event];
-    if (!Array.isArray(entries)) continue;
-    const ours = entries.flatMap((entry, index) => isPusharyCodexHook(entry) ? [index] : []);
-    if (ours.length > 1) vacated[definition.event] = ours[1];
-  }
-  return vacated;
-};
-var dropVacatedCodexHookTrust = (config, hooksJsonPath, vacated) => {
-  const state = asRecord2(asRecord2(config.hooks)?.state);
-  if (!state) return false;
-  let changed = false;
-  for (const [event, from] of Object.entries(vacated)) {
-    const prefix = `${hooksJsonPath}:${CODEX_EVENT_KEY[event] ?? codexEventKeyOf(event)}:`;
-    for (const key of Object.keys(state)) {
-      if (!key.startsWith(prefix)) continue;
-      const entryIndex = Number(key.slice(prefix.length).split(":")[0]);
-      if (!Number.isInteger(entryIndex) || entryIndex < from) continue;
-      delete state[key];
-      changed = true;
-    }
-  }
-  return changed;
-};
-var captureCodexHookTrust = (config, hooksJsonPath, positions) => {
-  const state = asRecord2(asRecord2(config.hooks)?.state);
-  if (!state) return {};
-  const snapshot = {};
-  for (const [event, position] of Object.entries(positions)) {
-    const value = state[codexHookStateKey(hooksJsonPath, event, position)];
-    if (value !== void 0) snapshot[event] = structuredClone(value);
-  }
-  return snapshot;
-};
-var restoreCodexHookTrust = (config, hooksJsonPath, positions, snapshot) => {
-  const restorable = Object.entries(snapshot).filter(([event]) => positions[event] !== void 0);
-  if (restorable.length === 0) return false;
-  const state = ensureRecord(ensureRecord(config, "hooks"), "state");
-  for (const [event, value] of restorable) {
-    state[codexHookStateKey(hooksJsonPath, event, positions[event])] = structuredClone(value);
-  }
-  return true;
-};
-var codexTrustGaps = (config, hooksConfig, hooksJsonPath, command, positions) => {
-  const state = asRecord2(asRecord2(config.hooks)?.state);
-  const hooks = asRecord2(hooksConfig?.hooks);
-  const gaps = [];
-  for (const definition of CODEX_HOOK_EVENTS) {
-    const position = positions[definition.event];
-    if (!position) continue;
-    const hookState = asRecord2(state?.[codexHookStateKey(hooksJsonPath, definition.event, position)]);
-    if (definition.delivery === "approval" && hookState?.enabled === false) {
-      gaps.push({ event: definition.event, kind: "disabled" });
-      continue;
-    }
-    const stored = hookState?.trusted_hash;
-    const eventKey = CODEX_EVENT_KEY[definition.event] ?? definition.event;
-    const onDisk = asRecord2(
-      asRecord2(hooks?.[definition.event]) ?? (Array.isArray(hooks?.[definition.event]) ? hooks[definition.event][position[0]] : void 0)
-    );
-    const handlers = onDisk?.hooks;
-    const handler = Array.isArray(handlers) ? asRecord2(handlers[position[1]]) : void 0;
-    if (definition.delivery === "approval" && handler?.async === true) {
-      gaps.push({ event: definition.event, kind: "asynchronous" });
-      continue;
-    }
-    const diskHash = onDisk ? codexEntryTrustHash(eventKey, onDisk) : void 0;
-    if (stored !== void 0 && diskHash !== void 0 && stored === diskHash) {
-      if (diskHash !== codexHookTrustHash(definition, command)) {
-        gaps.push({ event: definition.event, kind: "stale" });
-      }
-      continue;
-    }
-    if (stored !== (diskHash ?? codexHookTrustHash(definition, command))) {
-      gaps.push({ event: definition.event, kind: "untrusted" });
-    }
-  }
-  return gaps;
-};
-var removeCodexMcpServer = (config) => {
-  const servers = asRecord2(config.mcp_servers);
-  if (!servers?.pushary) return false;
-  delete servers.pushary;
-  if (Object.keys(servers).length === 0) delete config.mcp_servers;
-  return true;
-};
-var removeCodexHookTrust = (config, hooksJsonPath, positions) => {
-  const state = asRecord2(asRecord2(config.hooks)?.state);
-  if (!state) return false;
-  let changed = false;
-  for (const definition of CODEX_HOOK_EVENTS) {
-    const position = positions[definition.event];
-    if (!position) continue;
-    const key = codexHookStateKey(hooksJsonPath, definition.event, position);
-    if (key in state) {
-      delete state[key];
-      changed = true;
-    }
-  }
-  if (changed && Object.keys(state).length === 0) {
-    const hooks = asRecord2(config.hooks);
-    if (hooks) {
-      delete hooks.state;
-      if (Object.keys(hooks).length === 0) delete config.hooks;
-    }
-  }
-  return changed;
-};
-var removeCodexSettings = (config, hooksJsonPath, positions) => {
-  const mcp = removeCodexMcpServer(config);
-  const trust = removeCodexHookTrust(config, hooksJsonPath, positions);
-  return mcp || trust;
-};
-var addCodexHookTrust = (config, hooksJsonPath, command, positions) => {
-  const hooks = ensureRecord(config, "hooks");
-  const state = ensureRecord(hooks, "state");
-  for (const definition of CODEX_HOOK_EVENTS) {
-    const position = positions[definition.event];
-    if (!position) continue;
-    const key = codexHookStateKey(hooksJsonPath, definition.event, position);
-    const ours = codexHookTrustHash(definition, command);
-    const existing = asRecord2(state[key]) ?? {};
-    state[key] = { ...existing, trusted_hash: ours };
-    for (const stale of staleTrustKeys(state, hooksJsonPath, definition.event, key, ours)) {
-      delete state[stale];
-    }
-  }
-};
-var staleTrustKeys = (state, hooksJsonPath, event, currentKey, ourHash) => {
-  const prefix = `${hooksJsonPath}:${CODEX_EVENT_KEY[event]}:`;
-  return Object.keys(state).filter(
-    (key) => key !== currentKey && key.startsWith(prefix) && asRecord2(state[key])?.trusted_hash === ourHash
-  );
-};
-
-// src/setup/paths.ts
-var claudeSettings = (environment = process.env) => join3(claudeConfigDir(homedir3(), environment), "settings.json");
-var claudeJson = (environment = process.env) => claudeUserConfigFile(homedir3(), environment);
-var claudeSkillDir = (environment = process.env) => join3(claudeConfigDir(homedir3(), environment), "skills", "pushary");
-var cursorPluginDir = () => join3(homedir3(), ".cursor", "plugins", "local", "pushary");
-var cursorUserHooks = () => join3(homedir3(), ".cursor", "hooks.json");
-var cursorPluginMcp = () => join3(cursorPluginDir(), "mcp.json");
-var cursorPluginManifest = () => join3(cursorPluginDir(), ".cursor-plugin", "plugin.json");
-var cursorPluginRule = () => join3(cursorPluginDir(), "rules", "pushary.mdc");
-var cursorUserMcp = () => join3(homedir3(), ".cursor", "mcp.json");
-var vscodePluginDir = () => join3(homedir3(), ".pushary", "plugins", "vscode");
-var vscodePluginMcp = () => join3(vscodePluginDir(), ".mcp.json");
-var claudeSettingsLocal = () => join3(claudeConfigDir(), "settings.local.json");
-var pusharyDir = () => join3(homedir3(), ".pushary");
-var claudeSetupDir = () => process.env.CLAUDE_CONFIG_DIR ? join3(pusharyDir(), "setup", "claude-profiles", createHash2("sha256").update(claudeUserConfigFile()).digest("hex").slice(0, 32)) : join3(pusharyDir(), "setup");
-var claudeMcpReceipt = () => join3(claudeSetupDir(), "claude-mcp.json");
-var bridgeAgentKey = () => join3(pusharyDir(), "bridge-auth", "agent-key.json");
-var autoUpdateState = () => join3(pusharyDir(), "auto-update.json");
-var autoUpdateLock = () => join3(pusharyDir(), "auto-update.lock");
-var serviceOwedBackMark = () => join3(pusharyDir(), "service-owed-back");
-var autoUpdateLog = () => join3(pusharyDir(), "logs", "auto-update.log");
-var clientReportClaims = () => join3(pusharyDir(), "client-reports");
-var claudeRegistrationReceipt = () => join3(claudeSetupDir(), "claude-registration.json");
-var hermesConfig = () => join3(homedir3(), ".hermes", "config.yaml");
-var hermesConfigReceipt = () => join3(pusharyDir(), "setup", "hermes-config.json");
-var fxQuestionRuleReceipt = () => join3(pusharyDir(), "setup", "fx-question-rule.json");
-var hookTakeoverReceipt = (agent) => join3(agent === "claude_code" ? claudeSetupDir() : join3(pusharyDir(), "setup"), `hook-takeover-${agent}.json`);
-var codexSkillDir2 = () => join3(codexHome(), "skills", "pushary");
-var codexAgentsMd2 = () => join3(codexHome(), "AGENTS.md");
-var geminiSettings = () => join3(homedir3(), ".gemini", "settings.json");
-var geminiMd = () => join3(homedir3(), ".gemini", "GEMINI.md");
-var pusharyConfigFile = () => join3(homedir3(), ".pushary", "config.json");
-var fxConfigDir = () => join3(homedir3(), ".fx");
-var fxMcpProfile = () => join3(fxConfigDir(), "mcp.json");
-var fxSettings = () => join3(fxConfigDir(), "settings.json");
-var fxAgentsMd = () => join3(fxConfigDir(), "AGENTS.md");
-
-export {
-  claudeConfigDir,
-  claudeUserConfigFile,
-  registeredCommands,
-  namesOurBinary,
-  registrationHolderOf,
-  HOOK_SHELL,
-  holdBudgetOf,
-  guardBinary,
-  guardBinaryRefusing,
-  guardNodeScript,
-  guardCursorGate,
-  guardedArgv,
-  registerHookEntry,
-  isProtectedByScope,
-  canonicalJson,
-  CODEX_HOOK_BINARY,
-  codexHome,
-  codexHomeFrom,
-  codexConfigToml,
-  codexHooksJsonIn,
-  codexHooksJson,
-  codexAgentsMd,
-  codexSkillDir,
-  CODEX_HOOK_EVENTS,
-  CODEX_REQUIRED_APPROVAL_EVENTS,
-  codexMcpMixesCommandWithHttp,
-  CODEX_RESTART_AFTER_TRANSPORT_CHANGE,
-  codexMcpStartsCommand,
-  addCodexMcpServer,
-  readCodexMcpAuth,
-  isPusharyCodexCommand,
-  codexRegistrationHolder,
-  addCodexHooks,
-  removeCodexHooks,
-  hasCodexHooks,
-  missingCodexHookEvents,
-  codexHookPositions,
-  codexVacatedIndexes,
-  dropVacatedCodexHookTrust,
-  captureCodexHookTrust,
-  restoreCodexHookTrust,
-  codexTrustGaps,
-  removeCodexHookTrust,
-  removeCodexSettings,
-  addCodexHookTrust,
-  claudeSettings,
-  claudeJson,
-  claudeSkillDir,
-  cursorPluginDir,
-  cursorUserHooks,
-  cursorPluginMcp,
-  cursorPluginManifest,
-  cursorPluginRule,
-  cursorUserMcp,
-  vscodePluginDir,
-  vscodePluginMcp,
-  claudeSettingsLocal,
-  pusharyDir,
-  claudeMcpReceipt,
-  bridgeAgentKey,
-  autoUpdateState,
-  autoUpdateLock,
-  serviceOwedBackMark,
-  autoUpdateLog,
-  clientReportClaims,
-  claudeRegistrationReceipt,
-  hermesConfig,
-  hermesConfigReceipt,
-  fxQuestionRuleReceipt,
-  hookTakeoverReceipt,
-  codexSkillDir2,
-  codexAgentsMd2,
-  geminiSettings,
-  geminiMd,
-  pusharyConfigFile,
-  fxConfigDir,
-  fxMcpProfile,
-  fxSettings,
-  fxAgentsMd
-};

package/dist/chunk-LL2KHEJH.js

@@ -1,41 +0,0 @@
-import {
-  PRETOOLUSE_GATED_TOOLS
-} from "./chunk-FXECTHAG.js";
-
-// src/claude-tools.ts
-var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];
-var POSTTOOLUSE_MIRRORED_TOOLS = [...PRETOOLUSE_GATED_TOOLS, ...POSTTOOLUSE_MIRROR_ONLY_TOOLS];
-
-// src/claude-notifications.ts
-var IDLE_PROMPT_NOTIFICATION = "idle_prompt";
-var NOTIFICATION_MATCHED_TYPES = [
-  // Blocks. The agent, or one of its workers, is waiting on a person.
-  "permission_prompt",
-  "idle_prompt",
-  "agent_needs_input",
-  "worker_permission_prompt",
-  // An MCP server asking the person for a value. The Elicitation hook answers it;
-  // this is the feed row saying one is open.
-  "elicitation_dialog",
-  "elicitation_url_dialog",
-  // Turn boundary.
-  "agent_completed",
-  // Quota. The island already reads plan usage, and these say when a limit hit,
-  // went stale, or was turned off, which no polling of the usage endpoint reveals.
-  "quota_auto_resume_fired",
-  "quota_auto_resume_stale",
-  "quota_auto_resume_disabled"
-];
-var NOTIFICATION_PUSH_TYPES = /* @__PURE__ */ new Set([
-  "idle_prompt",
-  "agent_needs_input",
-  "worker_permission_prompt"
-]);
-
-export {
-  POSTTOOLUSE_MIRROR_ONLY_TOOLS,
-  POSTTOOLUSE_MIRRORED_TOOLS,
-  IDLE_PROMPT_NOTIFICATION,
-  NOTIFICATION_MATCHED_TYPES,
-  NOTIFICATION_PUSH_TYPES
-};