@pushary/agent-hooks 1.9.63 → 1.9.65

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 1.9.65
+
+- OpenCode now asks before shell commands, edits and web fetches, so those approvals reach Pushary. Out of the box OpenCode runs all three without asking anybody, and Pushary's plugin can only answer what OpenCode asks, so until now an OpenCode set up by Pushary approved nothing. Setup sets `bash`, `edit` and `webfetch` to `ask` under `permission` in `opencode.json`, but only for a tool no rule of yours names. A rule for every tool (`"*"`), another name for the same tool (`shell`, `write`, `patch`), a switch under `tools`, a list of patterns and a single `permission` value all count as yours and stay as they are. Pushary's rules go before yours, and OpenCode follows the last rule that matches, so yours still decide.
+- `pushary upgrade` and the daily update add the same rules to an OpenCode Pushary already set up, again only where you have set nothing, and list them as approval rules. They create no `opencode.json` and leave one they cannot read untouched.
+- Setup and `pushary doctor` say which of the three OpenCode would still run without asking, and whether that is because no rule names it or because a rule of yours allows it. Doctor reports this as a warning, so it does not fail `pushary doctor`.
+- `pushary clean` and `pushary disconnect opencode` leave these rules in place, because a rule may be one you set yourself. OpenCode then keeps asking in its own prompt.
+- Pushary for Mac does not add these rules yet, and setup and upgrade leave an OpenCode the app set up to the app. On such a Mac, add `"bash": "ask"`, `"edit": "ask"` and `"webfetch": "ask"` under `permission` in `opencode.json` yourself.
+
+## 1.9.64
+
+- Setup can connect Cline. Pick Cline, or run `npx pushary@latest setup --agents cline`. Setup adds the Pushary server, with your key, to `~/.cline/data/settings/cline_mcp_settings.json`, the file Cline 4 reads for both the VS Code extension and the Cline CLI. It honours `CLINE_DIR`, `CLINE_DATA_DIR` and `CLINE_MCP_SETTINGS_PATH` as Cline does, keeps every other server in the file, and waits for Cline's own lock on that file so it never writes over a change Cline is making. A file Cline cannot read either is left untouched.
+- Setup also writes `~/.cline/rules/pushary.md`, a global rule that tells Cline to ask through Pushary when you may be away, because Cline's own question tool waits in VS Code, and to tell you when a task of several steps finishes.
+- Cline's own approval prompts stay in VS Code; Pushary cannot answer them. Setup says to reload VS Code, and that ticking Use MCP servers in Cline's Auto-approve menu lets Pushary calls run without a click, for every MCP server Cline has, not only Pushary.
+- Running setup again keeps what you set on the Pushary server in Cline, such as its timeout, auto-approve list and extra headers, and switches it back on. A pushary server that reaches Pushary through a local command such as `mcp-remote` is replaced with the direct connection, and the command's own settings go with it. Setup leaves a server someone else named pushary untouched and says so.
+- `pushary upgrade` and the daily update replace only the key in Cline's settings after it changes, and refresh the rule. A server you switched off stays off. An entry that signs in through Cline, reads the key from an environment variable, or runs a local command such as `mcp-remote` is left as it is; setup replaces the last kind. On a computer without Cline they create nothing.
+- `pushary doctor` checks Cline's entry, says when its key is not the one hooks use, when the server is switched off, and when another server already has the name pushary. A key kept in a variable is reported as one doctor cannot check, not as a stale key.
+- `pushary disconnect cline` and `pushary clean` remove the Pushary server and the rule, and leave a server someone else named pushary. Like setup, they write the settings file readable only by you; Cline's own saves to that file do not keep it that way. If Cline holds the file locked, the file cannot be written, or it cannot be read while it may still hold Pushary, clean finishes its other steps and reports Cline as left behind, and disconnect exits with an error.
+- Setup warns when Cline has another server pointing at Pushary, so Cline does not see Pushary's tools twice.
+
 ## 1.9.63
 
 - `pushary transcripts on` and `pushary transcripts off` turn encrypted transcript sync on or off for this machine, so your phone can show the conversation of a session instead of only its summary. Only that one setting in `~/.pushary/config.json` changes; the key and every other setting stay as they are.
@@ -11,7 +30,7 @@
 
 ## 1.9.62
 
-- In Cursor, each shell command and file change reaches your phone once. Cursor also runs Claude Code's hooks, so with Pushary's Cursor gate installed every gated call was asked about twice, once by each hook. The Claude Code hook now leaves a call from Cursor to the Cursor gate when `~/.cursor/hooks.json` registers that gate for that kind of call and the gate can answer it: its script is present and new enough to handle that kind of call, or the Pushary app is installed. Anything the Cursor gate does not cover is still asked about by the Claude Code hook. Commands the Cursor gate lets run without asking, such as ones that only read, no longer reach your phone through the Claude Code hook. This applies where this CLI runs Claude Code's hooks; while the Pushary Mac app runs them, calls from Cursor are still asked about twice until an app update.
+- In Cursor, each shell command and file change reaches your phone once. Cursor also runs Claude Code's hooks, so with Pushary's Cursor gate installed every gated call was asked about twice, once by each hook. The Claude Code hook now leaves a call from Cursor to the Cursor gate when `~/.cursor/hooks.json` registers that gate for that kind of call and the gate can answer it: its script is present and new enough to handle that kind of call, or the Pushary app is installed. Anything the Cursor gate does not cover is still asked about by the Claude Code hook. Commands the Cursor gate lets run without asking, such as ones that only read, no longer reach your phone through the Claude Code hook. Pushary for Mac was never affected: it does not ask about the calls Cursor passes to Claude Code's hooks.
 - When a session already has as many open questions as Pushary allows, a new approval is never approved and nobody is asked again. Before, the hook stopped the agent and told it to retry, and every retry was refused again. Now the call goes to a prompt only where one is sure to follow: Claude Code's own prompt or permission dialog, the prompt of an agent that runs Claude Code's hooks and has one of its own, such as Grok, and Codex's own confirmation for a call Codex itself asked about. Everywhere else it is refused, with a message that says why: under a rule that refuses when nobody answers, in Codex before a tool runs, in Gemini CLI and OpenCode, in Antigravity CLI, in sessions started from your phone, and for a call from Cursor, because Cursor does not hold a call for a prompt. Gemini CLI under When I'm out hands the call to Gemini, as it did before. A question your agent asks you ends as an unanswered question, so its own picker, plan dialog or MCP form shows.
 
 ## 1.9.61

package/README.md

@@ -214,7 +214,7 @@ sign-out     Sign out: remove the key this machine stores, and say what it does
 pair         Pair a phone without re-running setup (--app for the Pushary app; also: connect)
 bell         Free local bell when an agent finishes or needs you. No account, no key, no network
 doctor       Verify your Pushary installation is working
-disconnect   Turn off one agent (claude|codex|gemini|cursor|opencode|qwen|codebuddy|qoder|droid|devin|antigravity|grok|fx)
+disconnect   Turn off one agent (claude|codex|gemini|cursor|opencode|qwen|codebuddy|qoder|droid|devin|antigravity|grok|fx|cline)
 clean        Remove Pushary from this machine (--everything: the Mac app's setup too, --dry-run: preview)
 mode         Choose where approval requests appear
 wait         Show or set the "wait for your phone" ladder (pushary wait 45)

package/dist/{api-UHUUAONF.js → api-32B3XLJR.js}

@@ -16,24 +16,23 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-TBKHQWIH.js";
+} from "./chunk-DTVHZDYM.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-ELAK46NR.js";
-import "./chunk-AB3VAQ25.js";
-import "./chunk-VFJSVPNL.js";
-import "./chunk-L5CDGXPO.js";
+import "./chunk-BKCI53W6.js";
+import "./chunk-UHS5MMAI.js";
+import "./chunk-7ILQX47W.js";
+import "./chunk-FWS2KLV2.js";
 import "./chunk-PPY5N2E6.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-QENTGE75.js";
-import "./chunk-MK4USZYQ.js";
-import "./chunk-5LOP4AVD.js";
-import "./chunk-BUQU3OPX.js";
-import "./chunk-6Z2VR3BA.js";
+import "./chunk-ATPJGHUP.js";
+import "./chunk-SCMEVDAR.js";
+import "./chunk-Y64JGYTB.js";
+import "./chunk-BAGBCSXA.js";
 import "./chunk-QTOLNRET.js";
 import {
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON
-} from "./chunk-7NCLUA65.js";
+} from "./chunk-MNKIR2ZB.js";
 import "./chunk-MLKGABMK.js";
 export {
   DECISION_STOP_REASON,

package/dist/bin/pushary-bell-hook.js

@@ -1,44 +1,41 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-KUCL7ETL.js";
+} from "../chunk-I2UBF2SS.js";
 import {
   readHookInput
-} from "../chunk-YMZOM6BD.js";
-import "../chunk-T6XQNOZV.js";
-import "../chunk-QW3FRUFB.js";
-import "../chunk-3QLFB2EY.js";
-import "../chunk-4WFAP6QN.js";
-import "../chunk-SKUSGWFK.js";
-import "../chunk-BQFL2ECS.js";
-import "../chunk-XE5N352V.js";
-import "../chunk-KLZZI5TU.js";
+} from "../chunk-PP7FC3Y7.js";
+import "../chunk-Q2BD4IBX.js";
+import "../chunk-SZBMTOUZ.js";
+import "../chunk-WY6YAMZW.js";
+import "../chunk-ADXHPGBZ.js";
+import "../chunk-GTBWWCCM.js";
+import "../chunk-ANP3DIST.js";
+import "../chunk-SROWUG5W.js";
+import "../chunk-Z3M627TQ.js";
 import "../chunk-NMUI3ZWG.js";
-import "../chunk-BCVCUDFI.js";
-import "../chunk-V7N5NOZV.js";
-import "../chunk-OJEIS5L2.js";
+import "../chunk-QSW3HAKI.js";
+import "../chunk-TJUJAK5L.js";
+import "../chunk-TK4JU2F7.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-6ICPEJY5.js";
-import "../chunk-IOH2T3CB.js";
-import "../chunk-PXAOEFJZ.js";
-import "../chunk-VC3HFFMQ.js";
-import "../chunk-7GRQGXF4.js";
-import "../chunk-TBKHQWIH.js";
+import "../chunk-ED2SWTPC.js";
+import "../chunk-3UNAPXED.js";
+import "../chunk-3KXBRSL3.js";
+import "../chunk-DTVHZDYM.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-ELAK46NR.js";
-import "../chunk-AB3VAQ25.js";
-import "../chunk-VFJSVPNL.js";
-import "../chunk-L5CDGXPO.js";
+import "../chunk-BKCI53W6.js";
+import "../chunk-UHS5MMAI.js";
+import "../chunk-7ILQX47W.js";
+import "../chunk-FWS2KLV2.js";
 import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-V5W3CK7F.js";
-import "../chunk-QENTGE75.js";
-import "../chunk-MK4USZYQ.js";
-import "../chunk-5LOP4AVD.js";
-import "../chunk-BUQU3OPX.js";
-import "../chunk-6Z2VR3BA.js";
+import "../chunk-2VADJ6JH.js";
+import "../chunk-ATPJGHUP.js";
+import "../chunk-SCMEVDAR.js";
+import "../chunk-Y64JGYTB.js";
+import "../chunk-BAGBCSXA.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-7NCLUA65.js";
+import "../chunk-MNKIR2ZB.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-bell-hook.ts

package/dist/bin/pushary-bell.js

@@ -5,41 +5,40 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-KUCL7ETL.js";
+} from "../chunk-I2UBF2SS.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-75ODMNOM.js";
+} from "../chunk-AN7C3CHH.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-KLZZI5TU.js";
+} from "../chunk-Z3M627TQ.js";
 import {
   parseFlags
 } from "../chunk-NMUI3ZWG.js";
-import "../chunk-IOH2T3CB.js";
+import "../chunk-ED2SWTPC.js";
 import "../chunk-PPY5N2E6.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-V5W3CK7F.js";
+import "../chunk-2VADJ6JH.js";
+import {
+  claudeSettings
+} from "../chunk-ATPJGHUP.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "../chunk-QENTGE75.js";
-import {
-  claudeSettings
-} from "../chunk-MK4USZYQ.js";
-import "../chunk-5LOP4AVD.js";
-import "../chunk-BUQU3OPX.js";
-import "../chunk-6Z2VR3BA.js";
+} from "../chunk-SCMEVDAR.js";
+import "../chunk-Y64JGYTB.js";
+import "../chunk-BAGBCSXA.js";
 import "../chunk-QTOLNRET.js";
 import {
   isRecord
-} from "../chunk-7NCLUA65.js";
+} from "../chunk-MNKIR2ZB.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-bell.ts

package/dist/bin/pushary-claude.js

@@ -2,46 +2,45 @@
 import {
   WRAPPER_ACTIVE_ENV,
   findClaudeBinary
-} from "../chunk-FVERRWDP.js";
+} from "../chunk-CZ65D6Q5.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-CLABCSZC.js";
-import "../chunk-VUFHYMSP.js";
+} from "../chunk-6CZX6YOE.js";
+import "../chunk-RABLE5R6.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-KL76XWZ7.js";
+} from "../chunk-UMTMFDL2.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-T6XQNOZV.js";
-import "../chunk-QW3FRUFB.js";
+} from "../chunk-Q2BD4IBX.js";
+import "../chunk-SZBMTOUZ.js";
 import {
   ensureDaemonRunning
-} from "../chunk-4WFAP6QN.js";
-import "../chunk-SKUSGWFK.js";
-import "../chunk-BQFL2ECS.js";
-import "../chunk-XE5N352V.js";
-import "../chunk-KLZZI5TU.js";
+} from "../chunk-ADXHPGBZ.js";
+import "../chunk-GTBWWCCM.js";
+import "../chunk-ANP3DIST.js";
+import "../chunk-SROWUG5W.js";
+import "../chunk-Z3M627TQ.js";
 import "../chunk-NMUI3ZWG.js";
 import {
   encryptRecord
-} from "../chunk-BCVCUDFI.js";
-import "../chunk-V7N5NOZV.js";
+} from "../chunk-QSW3HAKI.js";
+import "../chunk-TJUJAK5L.js";
 import {
   transcriptsEnabled
-} from "../chunk-OJEIS5L2.js";
+} from "../chunk-TK4JU2F7.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-6ICPEJY5.js";
-import "../chunk-IOH2T3CB.js";
+import "../chunk-ED2SWTPC.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -58,11 +57,10 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-PXAOEFJZ.js";
-import "../chunk-VC3HFFMQ.js";
+} from "../chunk-3UNAPXED.js";
 import {
   repoKeyFor
-} from "../chunk-7GRQGXF4.js";
+} from "../chunk-3KXBRSL3.js";
 import {
   askUser,
   cancelQuestion,
@@ -74,31 +72,30 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-TBKHQWIH.js";
+} from "../chunk-DTVHZDYM.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-ELAK46NR.js";
-import "../chunk-AB3VAQ25.js";
-import "../chunk-VFJSVPNL.js";
+} from "../chunk-BKCI53W6.js";
+import "../chunk-UHS5MMAI.js";
+import "../chunk-7ILQX47W.js";
 import {
   getMachineId
-} from "../chunk-L5CDGXPO.js";
+} from "../chunk-FWS2KLV2.js";
 import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-V5W3CK7F.js";
-import "../chunk-QENTGE75.js";
+import "../chunk-2VADJ6JH.js";
 import {
   claudeConfigDir
-} from "../chunk-MK4USZYQ.js";
-import "../chunk-5LOP4AVD.js";
+} from "../chunk-ATPJGHUP.js";
+import "../chunk-SCMEVDAR.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-BUQU3OPX.js";
+} from "../chunk-Y64JGYTB.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-6Z2VR3BA.js";
+} from "../chunk-BAGBCSXA.js";
 import "../chunk-QTOLNRET.js";
 import {
   DECISION_STOP_REASON,
@@ -111,7 +108,7 @@ import {
   refusesWhenUnanswered,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-7NCLUA65.js";
+} from "../chunk-MNKIR2ZB.js";
 import "../chunk-MLKGABMK.js";
 
 // src/wrapper/localPassthrough.ts

package/dist/bin/pushary-clean.js

@@ -15,26 +15,26 @@ import {
   storedMacAppState,
   storedPusharyKeychainServices,
   waitForMacAppExit
-} from "../chunk-OU3BYBJ3.js";
+} from "../chunk-OA6EADFT.js";
 import {
   PUSHARY_SKILL_NAME,
   PUSHARY_SKILL_SOURCE,
   createGuards
 } from "../chunk-EUW7JL2K.js";
-import "../chunk-5JK3DQGZ.js";
+import "../chunk-JFKMPLNF.js";
 import "../chunk-XCEN33UP.js";
 import {
   describeCliKeyRevocation,
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-T3GHXR6N.js";
-import "../chunk-GZS72NCF.js";
+} from "../chunk-GA257T2E.js";
+import "../chunk-FFSIYBBU.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-GNUARBRZ.js";
+} from "../chunk-CU2PXLZ6.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -43,23 +43,25 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-LGZ545TA.js";
+} from "../chunk-ONBL2GCU.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-VDBXSUXP.js";
+} from "../chunk-U2P2LQ5B.js";
 import "../chunk-QCGNGEGE.js";
-import "../chunk-HZ72EMJE.js";
+import "../chunk-ITYKN2K3.js";
 import {
+  planClineRemoval,
   planFxRemoval,
-  removeInstructionBlock
-} from "../chunk-DMNLFWGY.js";
-import "../chunk-S2Z6VWHH.js";
-import "../chunk-WUOOZE5S.js";
+  removeClineServer
+} from "../chunk-QNZ6G3LY.js";
+import "../chunk-W5L2ZLHE.js";
+import "../chunk-BEQ3MEE3.js";
 import {
+  OPENCODE_ASKED_PERMISSIONS,
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
   hasForeignPlugins,
@@ -67,38 +69,34 @@ import {
   openCodeConfigDir,
   openCodeConfigFile,
   openCodeInstructionsFile,
+  openCodePermissionsLeftOpen,
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-LTT54NOU.js";
+} from "../chunk-P5HZEGT7.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-75ODMNOM.js";
-import "../chunk-VUFHYMSP.js";
+} from "../chunk-AN7C3CHH.js";
+import "../chunk-RABLE5R6.js";
 import {
   compatibleConfigFile,
   compatibleDocuments,
   compatibleInstructionsFile,
   compatibleMcpFile,
   compatiblePermissionRuleFile,
-  isClaudeMcpSnapshot,
   isEmptiedPusharyOwnedDocument,
   readConfigDocument,
-  removeClaudeMcpServers,
   removeCompatibleHooks,
   removeCompatibleMcpServer,
-  removePusharySettings,
-  removePusharyToolPermissions,
-  restoreClaudeMcpServer,
   serializeConfigDocument
-} from "../chunk-3QLFB2EY.js";
+} from "../chunk-WY6YAMZW.js";
 import {
   disableDaemonService
-} from "../chunk-4WFAP6QN.js";
+} from "../chunk-ADXHPGBZ.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -106,39 +104,36 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-SKUSGWFK.js";
+} from "../chunk-GTBWWCCM.js";
 import {
   removeGeminiSettings
-} from "../chunk-BQFL2ECS.js";
-import "../chunk-XE5N352V.js";
-import "../chunk-KLZZI5TU.js";
+} from "../chunk-ANP3DIST.js";
+import "../chunk-SROWUG5W.js";
+import "../chunk-Z3M627TQ.js";
 import {
   parseFlags
 } from "../chunk-NMUI3ZWG.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-6ICPEJY5.js";
 import {
   CANDIDATE_RCS,
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-IOH2T3CB.js";
+} from "../chunk-ED2SWTPC.js";
 import "../chunk-E46NE7FB.js";
-import "../chunk-PXAOEFJZ.js";
-import "../chunk-VC3HFFMQ.js";
-import "../chunk-7GRQGXF4.js";
-import "../chunk-TBKHQWIH.js";
+import "../chunk-3UNAPXED.js";
+import "../chunk-3KXBRSL3.js";
+import "../chunk-DTVHZDYM.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-ELAK46NR.js";
-import "../chunk-AB3VAQ25.js";
-import "../chunk-VFJSVPNL.js";
-import "../chunk-L5CDGXPO.js";
+import "../chunk-BKCI53W6.js";
+import "../chunk-UHS5MMAI.js";
+import "../chunk-7ILQX47W.js";
+import "../chunk-FWS2KLV2.js";
 import "../chunk-PPY5N2E6.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-V5W3CK7F.js";
-import "../chunk-QENTGE75.js";
+import "../chunk-2VADJ6JH.js";
 import {
   claudeConfigDir,
   claudeJson,
@@ -147,6 +142,8 @@ import {
   claudeSettingsLocal,
   claudeSkillDir,
   claudeUserConfigFile,
+  clineMcpSettings,
+  clineRules,
   codexAgentsMd,
   codexConfigToml,
   codexHookPositions,
@@ -166,27 +163,33 @@ import {
   hermesConfig,
   hermesConfigReceipt,
   hookTakeoverReceipt,
+  isClaudeMcpSnapshot,
   pusharyDir,
   readCodexMcpAuth,
+  removeClaudeMcpServers,
   removeCodexHookTrust,
   removeCodexHooks,
+  removeInstructionBlock,
+  removePusharySettings,
+  removePusharyToolPermissions,
+  restoreClaudeMcpServer,
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-MK4USZYQ.js";
+} from "../chunk-ATPJGHUP.js";
 import {
   cleanNpmEnv,
   globalPackageState,
   npmIsOnPath,
   readGlobalFolder,
   readGlobalPrefix
-} from "../chunk-5LOP4AVD.js";
+} from "../chunk-SCMEVDAR.js";
 import {
   getBaseUrl
-} from "../chunk-BUQU3OPX.js";
+} from "../chunk-Y64JGYTB.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-6Z2VR3BA.js";
+} from "../chunk-BAGBCSXA.js";
 import {
   CLI_PACKAGE_NAMES,
   globalPackageFolder,
@@ -200,7 +203,7 @@ import {
   SUPPORT_EMAIL,
   isValidApiKey,
   redactSecrets
-} from "../chunk-7NCLUA65.js";
+} from "../chunk-MNKIR2ZB.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-clean.ts
@@ -624,6 +627,23 @@ var removeFxInstructions = () => {
     console.log(`  ${check} fx instructions ${dim(did("removed"))}`);
   }
 };
+var removeClineServerEntry = () => {
+  if (!dryRun) return removeClineServer(clineMcpSettings());
+  const plan = planClineRemoval(clineMcpSettings());
+  if (plan.kind === "write") guardedWrite(plan.path, plan.text);
+  return plan;
+};
+var removeClineConfiguration = () => {
+  const removal = removeClineServerEntry();
+  if (removal.kind === "write") console.log(`  ${check} Cline MCP ${dim(did("removed"))}`);
+  if (removal.kind === "kept" || removal.kind === "failed") {
+    incompleteClean = true;
+    console.log(`  ${cross} Cline MCP ${dim(`(${removal.detail})`)}`);
+  }
+  if (guardedInstructionBlockRemoval(clineRules())) {
+    console.log(`  ${check} Cline rule ${dim(did("removed"))}`);
+  }
+};
 var removeCursorUserHook = (scope) => {
   if (!existsSync5(CURSOR_USER_HOOKS)) return "absent";
   let parsed2;
@@ -677,6 +697,7 @@ var agentConfigDirectories = () => [
   dirname2(CURSOR_USER_HOOKS),
   openCodeConfigDir(),
   fxConfigDir(),
+  dirname2(clineMcpSettings()),
   ...vscodeSettingsTargets(existsSync5).map((settings) => dirname2(settings))
 ];
 var restoreTakeoverReceipts = () => {
@@ -1117,6 +1138,9 @@ var main = async () => {
   } else {
     console.log(`  ${skip} OpenCode MCP ${dim("(not found)")}`);
   }
+  if (openCodeConfig && openCodePermissionsLeftOpen(openCodeConfig).length < OPENCODE_ASKED_PERMISSIONS.length) {
+    console.log(`  ${skip} OpenCode permission rules ${dim("(kept: they may be yours, and OpenCode keeps asking in its own prompt)")}`);
+  }
   if (keepShared) {
     console.log(`  ${skip} OpenCode AGENTS.md ${dim("(kept: the Mac app uses it)")}`);
   } else if (guardedInstructionBlockRemoval(openCodeInstructionsFile())) {
@@ -1126,6 +1150,7 @@ var main = async () => {
   }
   removeFxConfiguration();
   removeFxInstructions();
+  removeClineConfiguration();
   const hermesPython = resolveHermesPython();
   if (hermesPython) {
     const configRun = runHermesConfigScript(hermesPython, dryRun ? "clean-preview" : "clean", HERMES_CONFIG_RECEIPT);