@pushary/agent-hooks 1.9.65 → 1.9.67

package/dist/{chunk-GTBWWCCM.js → chunk-BFF3ABFV.js}

@@ -1,25 +1,24 @@
-import {
-  GEMINI_HOOK_EVENTS,
-  hasGeminiHooks
-} from "./chunk-ANP3DIST.js";
 import {
   AGENT_CHOICES
-} from "./chunk-SROWUG5W.js";
+} from "./chunk-ZK5WYAMI.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-Z3M627TQ.js";
+} from "./chunk-FONWVVDD.js";
 import {
   CLAUDE_HOOK_EVENTS,
   CODEX_HOOK_EVENTS,
   HOOK_SHELL,
   hasCodexHooks,
-  holdBudgetOf
-} from "./chunk-ATPJGHUP.js";
+  holdBudgetOf,
+  isProtectedByScope,
+  registerHookEntry
+} from "./chunk-TI4JYPGQ.js";
 import {
   CURSOR_GATE_EVENTS,
+  HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-RQOT6QL3.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";
@@ -97,6 +96,105 @@ var liveBridgeProbe = () => ({
   home: homedir()
 });
 
+// src/gemini-config.ts
+var GEMINI_HOOK_BINARY = "pushary-gemini-hook";
+var GEMINI_MCP_URL = "https://pushary.com/api/mcp/mcp";
+var GEMINI_HOOK_EVENTS = [
+  { event: "BeforeTool", matcher: "run_shell_command|write_file|replace|mcp_.*", delivery: "approval", timeoutMs: HOOK_BUDGETS.gemini.budgetSeconds * 1e3 },
+  { event: "AfterTool", matcher: "run_shell_command|write_file|replace|mcp_.*", delivery: "telemetry", timeoutMs: 1e4 },
+  { event: "BeforeAgent", delivery: "telemetry", timeoutMs: 1e4 },
+  { event: "AfterAgent", delivery: "telemetry", timeoutMs: 1e4 },
+  { event: "SessionStart", delivery: "telemetry", timeoutMs: 1e4 },
+  { event: "SessionEnd", delivery: "telemetry", timeoutMs: 1e4 }
+];
+var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+var ensureRecord = (target, key) => {
+  const existing = asRecord(target[key]);
+  if (existing) return existing;
+  const created = {};
+  target[key] = created;
+  return created;
+};
+var isPusharyGeminiHook = (entry, scope) => {
+  const hooks = asRecord(entry)?.hooks;
+  if (!Array.isArray(hooks)) return false;
+  return hooks.some((hook) => {
+    const command = String(asRecord(hook)?.command ?? "");
+    if (isProtectedByScope(command, scope)) return false;
+    return command.includes(GEMINI_HOOK_BINARY) || command.includes(HOOK_LOCATOR_BINARY);
+  });
+};
+var addGeminiMcpServer = (settings, apiKey) => {
+  const mcpServers = ensureRecord(settings, "mcpServers");
+  mcpServers.pushary = {
+    httpUrl: GEMINI_MCP_URL,
+    headers: { Authorization: `Bearer ${apiKey}` },
+    trust: true
+  };
+};
+var addGeminiHooks = (settings, command) => {
+  const hooks = ensureRecord(settings, "hooks");
+  for (const definition of GEMINI_HOOK_EVENTS) {
+    const existing = Array.isArray(hooks[definition.event]) ? hooks[definition.event] : [];
+    hooks[definition.event] = registerHookEntry(existing, isPusharyGeminiHook, {
+      ...definition.matcher ? { matcher: definition.matcher } : {},
+      hooks: [{
+        name: "pushary",
+        type: "command",
+        command,
+        timeout: definition.timeoutMs
+      }]
+    });
+  }
+};
+var removeGeminiHooks = (settings, scope) => {
+  const hooks = asRecord(settings.hooks);
+  if (!hooks) return false;
+  let changed = false;
+  for (const definition of GEMINI_HOOK_EVENTS) {
+    const entries = hooks[definition.event];
+    if (!Array.isArray(entries)) continue;
+    const filtered = entries.filter((entry) => !isPusharyGeminiHook(entry, scope));
+    if (filtered.length !== entries.length) {
+      if (filtered.length === 0) {
+        delete hooks[definition.event];
+      } else {
+        hooks[definition.event] = filtered;
+      }
+      changed = true;
+    }
+  }
+  if (Object.keys(hooks).length === 0) delete settings.hooks;
+  return changed;
+};
+var removeGeminiMcpServer = (settings) => {
+  const mcpServers = asRecord(settings.mcpServers);
+  if (!mcpServers?.pushary) return false;
+  delete mcpServers.pushary;
+  if (Object.keys(mcpServers).length === 0) delete settings.mcpServers;
+  return true;
+};
+var removeGeminiSettings = (settings, scope) => {
+  const mcpRemoved = scope?.keepMcpServer === true ? false : removeGeminiMcpServer(settings);
+  const hooksRemoved = removeGeminiHooks(settings, scope);
+  return mcpRemoved || hooksRemoved;
+};
+var hasGeminiHooks = (settings) => {
+  const hooks = asRecord(settings.hooks);
+  if (!hooks) return false;
+  return GEMINI_HOOK_EVENTS.some((definition) => {
+    const entries = hooks[definition.event];
+    return Array.isArray(entries) && entries.some((entry) => isPusharyGeminiHook(entry));
+  });
+};
+var missingGeminiHookEvents = (settings) => {
+  const hooks = asRecord(settings.hooks);
+  return GEMINI_HOOK_EVENTS.filter((definition) => {
+    const entries = hooks?.[definition.event];
+    return !Array.isArray(entries) || !entries.some((entry) => isPusharyGeminiHook(entry));
+  }).map((definition) => definition.event);
+};
+
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
 var CLAUDE_HOOK_BINARY = /pushary-[a-z-]*hook/;
@@ -326,6 +424,14 @@ export {
   describeBridgeResolution,
   isBridgeLocator,
   liveBridgeProbe,
+  GEMINI_HOOK_BINARY,
+  GEMINI_HOOK_EVENTS,
+  addGeminiMcpServer,
+  addGeminiHooks,
+  removeGeminiMcpServer,
+  removeGeminiSettings,
+  hasGeminiHooks,
+  missingGeminiHookEvents,
   pusharyHookExecutable,
   claudeWired,
   codexWired,

package/dist/{chunk-NOH3EJFH.js → chunk-C4EDAHXI.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-Y64JGYTB.js";
+} from "./chunk-32OSSYGZ.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-ITYKN2K3.js → chunk-CHYBOTQN.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-ED2SWTPC.js";
+} from "./chunk-JOBSKQ2Z.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BAGBCSXA.js";
+} from "./chunk-X2MTVD4W.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-FFSIYBBU.js → chunk-CJZLIAJF.js}

@@ -2,25 +2,31 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-ITYKN2K3.js";
+} from "./chunk-CHYBOTQN.js";
+import {
+  APPROVAL_RULES_PATH
+} from "./chunk-5MOJCOCF.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
 import {
   readKeySource
-} from "./chunk-ED2SWTPC.js";
+} from "./chunk-JOBSKQ2Z.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-UHS5MMAI.js";
+} from "./chunk-3THDNNVL.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-Y64JGYTB.js";
+} from "./chunk-32OSSYGZ.js";
+import {
+  KEY_SCOPE
+} from "./chunk-RQOT6QL3.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();
@@ -61,16 +67,28 @@ var exitOnFailedResponse = async (response, baseUrl) => {
 };
 var REFUSED_SETTINGS_ACTION = {
   mode: "change the approval mode",
+  mode_clear: "end a temporary approval mode",
   wait: "change how long approvals wait for you",
   suggestions: "read or accept rule suggestions"
 };
-var APPROVAL_SETTINGS_PATH = "/dashboard/agent/settings";
-var AGENT_KEY_SCOPE = "agent";
-var isAgentKeyRefusal = (status, check) => status === 401 && check.kind === "ok" && check.identity.keyScope === AGENT_KEY_SCOPE;
+var settingsChangeStep = (request, baseUrl) => {
+  const approvalRules = absoluteUrl(baseUrl, APPROVAL_RULES_PATH);
+  switch (request) {
+    case "mode":
+      return `Change it in the Pushary app, or on the dashboard: ${approvalRules}`;
+    case "mode_clear":
+      return "A temporary mode ends on its own. To end it now, pick a mode in the Pushary app.";
+    case "wait":
+      return `Change it on the dashboard: ${approvalRules}`;
+    case "suggestions":
+      return `Review them on the dashboard: ${approvalRules}`;
+  }
+};
+var isAgentKeyRefusal = (status, check) => status === 401 && check.kind === "ok" && check.identity.keyScope === KEY_SCOPE.agent;
 var describeAgentKeyRefusal = (request, baseUrl = getBaseUrl()) => ({
-  message: `This computer's key cannot ${REFUSED_SETTINGS_ACTION[request]}. Keys from pushary login, phone pairing and the Mac app run approvals and notifications, not account settings.`,
+  message: `This computer's key cannot ${REFUSED_SETTINGS_ACTION[request]}. It runs approvals and notifications, not account settings.`,
   next: [
-    `Change it from the Pushary app, your phone, or the dashboard: ${absoluteUrl(baseUrl, APPROVAL_SETTINGS_PATH)}`,
+    settingsChangeStep(request, baseUrl),
     "The key itself is valid. Nothing on this computer needs fixing."
   ],
   exitCode: EXIT.USAGE,
@@ -90,6 +108,5 @@ var exitOnFailedSettingsRequest = async (response, settings) => {
 
 export {
   printKeyCheck,
-  APPROVAL_SETTINGS_PATH,
   exitOnFailedSettingsRequest
 };

package/dist/{chunk-UMTMFDL2.js → chunk-CPLQ5OHX.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-3UNAPXED.js";
+} from "./chunk-XFDWLDHG.js";
 
 // src/answer.ts
 var isDeferAnswer = (value) => value === "defer";

package/dist/{chunk-DTVHZDYM.js → chunk-D3U6CN7T.js}

@@ -6,18 +6,18 @@ import {
   McpToolError,
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-BKCI53W6.js";
+} from "./chunk-KNUYUQBP.js";
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-7ILQX47W.js";
+} from "./chunk-P4RXSZDT.js";
 import {
   clientReportClaims
-} from "./chunk-ATPJGHUP.js";
+} from "./chunk-TI4JYPGQ.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-Y64JGYTB.js";
+} from "./chunk-32OSSYGZ.js";
 import {
   ASK_AGENT_NAME_MAX,
   CLIENT_REPORT_PATH,
@@ -26,7 +26,7 @@ import {
   TOOL_FAILURE_CODES,
   degradedLine,
   truncateLine
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-RQOT6QL3.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";
@@ -235,25 +235,38 @@ var nextLongPollMs = (deadlineMs, nowMs) => {
   const hold = Math.min(deadlineMs - nowMs - WAIT_RESPONSE_GRACE_MS, MAX_LONG_POLL_MS);
   return hold >= MIN_LONG_POLL_MS ? hold : null;
 };
-var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
-  const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var ABANDONED_WAIT = { answered: false, status: "abandoned" };
+var sleepUnlessAborted = (ms, signal) => new Promise((resolve) => {
+  const wake = () => {
+    clearTimeout(timer);
+    signal?.removeEventListener("abort", wake);
+    resolve();
+  };
+  const timer = setTimeout(wake, ms);
+  signal?.addEventListener("abort", wake, { once: true });
+});
+var boundedBy = (timeoutMs, signal) => signal ? AbortSignal.any([AbortSignal.timeout(timeoutMs), signal]) : AbortSignal.timeout(timeoutMs);
+var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3, signal) => {
   while (Date.now() < deadlineMs) {
+    if (signal?.aborted) return ABANDONED_WAIT;
     const hold = nextLongPollMs(deadlineMs, Date.now());
     if (hold === null) {
-      await sleep(Math.max(0, deadlineMs - Date.now()));
+      await sleepUnlessAborted(Math.max(0, deadlineMs - Date.now()), signal);
       continue;
     }
     let answer;
     try {
-      answer = await waitForAnswer(apiKey, correlationId, hold, AbortSignal.timeout(Math.max(1, deadlineMs - Date.now())));
+      answer = await waitForAnswer(apiKey, correlationId, hold, boundedBy(Math.max(1, deadlineMs - Date.now()), signal));
     } catch {
+      if (signal?.aborted) return ABANDONED_WAIT;
       const late = await withdrawQuestion(apiKey, correlationId);
       return late.answered ? late : STOPPED;
     }
     if (isDecisionStopped(answer) || answer.answered) return answer;
     if (answer.status === "expired") return STOPPED;
-    await sleep(Math.min(pollInterval, Math.max(0, deadlineMs - Date.now())));
+    await sleepUnlessAborted(Math.min(pollInterval, Math.max(0, deadlineMs - Date.now())), signal);
   }
+  if (signal?.aborted) return ABANDONED_WAIT;
   return withdrawQuestion(apiKey, correlationId);
 };
 var cancelQuestion = async (apiKey, correlationId, signal, baseUrl) => {
@@ -271,10 +284,10 @@ var withdrawQuestion = async (apiKey, correlationId, transport = { cancelQuestio
     return STOPPED;
   }
 };
-var waitForQuestion = async (apiKey, question, deadlineMs, pollInterval = 2e3) => {
+var waitForQuestion = async (apiKey, question, deadlineMs, pollInterval = 2e3, signal) => {
   if (isDecisionStopped(question) || question.answered) return { ...question, answered: !!question.answered };
   if (question.status === "expired") return STOPPED;
-  return isAwayPaused(question) || isLocalQuestionHandoff(question) ? withdrawQuestion(apiKey, question.correlationId) : pollForAnswer(apiKey, question.correlationId, deadlineMs, pollInterval);
+  return isAwayPaused(question) || isLocalQuestionHandoff(question) ? withdrawQuestion(apiKey, question.correlationId) : pollForAnswer(apiKey, question.correlationId, deadlineMs, pollInterval, signal);
 };
 var sendNotification = async (apiKey, params, timeoutMs = 15e3, signal) => {
   await callMcpTool(apiKey, "send_notification", { ...params }, { maxRetries: signal ? 1 : 3, timeoutMs, signal });
@@ -328,6 +341,7 @@ export {
   waitForAnswer,
   WAIT_RESPONSE_GRACE_MS,
   nextLongPollMs,
+  ABANDONED_WAIT,
   pollForAnswer,
   cancelQuestion,
   withdrawQuestion,

package/dist/{chunk-ICFHMJTW.js → chunk-D7Z4USSB.js}

@@ -1,13 +1,24 @@
+import {
+  APPROVAL_RULES_PATH,
+  canChangeApprovalSettings
+} from "./chunk-5MOJCOCF.js";
 import {
   callMcpTool
-} from "./chunk-BKCI53W6.js";
+} from "./chunk-KNUYUQBP.js";
+import {
+  absoluteUrl
+} from "./chunk-3THDNNVL.js";
+import {
+  getBaseUrl
+} from "./chunk-32OSSYGZ.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BAGBCSXA.js";
+} from "./chunk-X2MTVD4W.js";
 import {
+  APPROVAL_MODE_META,
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-RQOT6QL3.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {
@@ -304,7 +315,15 @@ var unansweredNextStep = (appPlatforms) => {
   const step = notificationAnswerStep(appPlatforms);
   return step === null ? CHECK_THE_NOTIFICATION_OPENED : `To send another one, run pushary doctor --roundtrip. ${step}`;
 };
-var describeRoundTripOutcome = (outcome, appPlatforms = []) => {
+var PHONE_APPROVAL_MODES = ["push_only", "push_first"];
+var NOTIFY_ONLY_SENT = `Sent. This site is set to ${APPROVAL_MODE_META.notify_only.label}, so questions never wait for an answer.`;
+var phoneApprovalModeLabels = PHONE_APPROVAL_MODES.map((mode) => APPROVAL_MODE_META[mode].label).join(" or ");
+var phoneApprovalModeCommands = PHONE_APPROVAL_MODES.map((mode) => `pushary mode ${mode}`).join(" or ");
+var answerFromYourPhoneSteps = (baseUrl, keyScope) => {
+  const inTheAppOrDashboard = `To answer approvals from your phone, choose ${phoneApprovalModeLabels} in the Pushary app, or on the dashboard: ${absoluteUrl(baseUrl, APPROVAL_RULES_PATH)}`;
+  return canChangeApprovalSettings(keyScope) ? [inTheAppOrDashboard, `With this key you can also run ${phoneApprovalModeCommands}.`] : [inTheAppOrDashboard];
+};
+var describeRoundTripOutcome = (outcome, { appPlatforms = [], baseUrl = getBaseUrl(), keyScope = null } = {}) => {
   switch (outcome.kind) {
     case "answered":
       return {
@@ -324,8 +343,8 @@ var describeRoundTripOutcome = (outcome, appPlatforms = []) => {
     case "notify-only":
       return {
         ok: true,
-        message: "Sent. This site is in notify-only mode, so questions never wait for an answer.",
-        next: ["Switch with pushary mode push_first if you want approvals to hold for your phone."]
+        message: NOTIFY_ONLY_SENT,
+        next: [...answerFromYourPhoneSteps(baseUrl, keyScope)]
       };
     case "no-recipients":
       return {
@@ -344,8 +363,8 @@ var describeRoundTripOutcome = (outcome, appPlatforms = []) => {
       };
   }
 };
-var describeRoundTrip = (outcome, appPlatforms = []) => {
-  const report = describeRoundTripOutcome(outcome, appPlatforms);
+var describeRoundTrip = (outcome, context = {}) => {
+  const report = describeRoundTripOutcome(outcome, context);
   return { ...report, next: [...report.next, "Agent hook activation remains unverified. Restart your agent and check one real approval."] };
 };
 var roundTripEvidence = (outcome) => ({

package/dist/{chunk-DXMUJTYF.js → chunk-DP6LU6BB.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-ATPJGHUP.js";
+} from "./chunk-TI4JYPGQ.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   writeJsonAtomic
-} from "./chunk-SCMEVDAR.js";
+} from "./chunk-WJLHZ6E6.js";
 
 // src/upgrade-lock.ts
 import { fork } from "child_process";

package/dist/{chunk-GA257T2E.js → chunk-DXCHIKAN.js}

@@ -1,9 +1,9 @@
-import {
-  APPROVAL_SETTINGS_PATH
-} from "./chunk-FFSIYBBU.js";
 import {
   readMacAppAgentKey
-} from "./chunk-U2P2LQ5B.js";
+} from "./chunk-LS42NV6E.js";
+import {
+  API_KEYS_PATH
+} from "./chunk-5MOJCOCF.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -13,13 +13,13 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-ED2SWTPC.js";
+} from "./chunk-JOBSKQ2Z.js";
 import {
   absoluteUrl
-} from "./chunk-UHS5MMAI.js";
+} from "./chunk-3THDNNVL.js";
 import {
   isValidApiKey
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-RQOT6QL3.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";
@@ -128,7 +128,7 @@ var SPARED_KEY_WHY = {
   no_creation_record: "This CLI has no record of creating it, so it may be in use by the Mac app or on another machine."
 };
 var localRemovalOf = (dryRun) => dryRun ? "would be removed here" : "removed here";
-var settingsUrlOf = (baseUrl) => absoluteUrl(baseUrl, APPROVAL_SETTINGS_PATH);
+var settingsUrlOf = (baseUrl) => absoluteUrl(baseUrl, API_KEYS_PATH);
 var revokeYourselfHint = (reason, baseUrl) => reason === "no_creation_record" ? `Revoke it at ${settingsUrlOf(baseUrl)} if nothing else uses it.` : null;
 var describeCliKeyRevocation = (outcome, run) => {
   const label = `API key ${outcome.keyPrefix}`;

package/dist/{chunk-PP7FC3Y7.js → chunk-EQR6JSFE.js}

@@ -1,25 +1,25 @@
 import {
   registerTranscript
-} from "./chunk-Q2BD4IBX.js";
+} from "./chunk-SB6TYV4M.js";
 import {
   namedEvent
-} from "./chunk-WY6YAMZW.js";
+} from "./chunk-ICQCQAUO.js";
 import {
   isBridgeLocator,
   liveBridgeProbe,
   pusharyHookExecutable,
   resolveBridgeStub
-} from "./chunk-GTBWWCCM.js";
+} from "./chunk-BFF3ABFV.js";
 import {
   writeDegraded
-} from "./chunk-DTVHZDYM.js";
+} from "./chunk-D3U6CN7T.js";
 import {
   cursorUserHooks
-} from "./chunk-ATPJGHUP.js";
+} from "./chunk-TI4JYPGQ.js";
 import {
   atLeast,
   parseVersion
-} from "./chunk-SCMEVDAR.js";
+} from "./chunk-WJLHZ6E6.js";
 import {
   CURSOR_GATE_COVERAGE,
   CURSOR_GATE_SCRIPT,
@@ -33,7 +33,7 @@ import {
   isGrokSessionEndStop,
   isRecord,
   toolsCoveredByGateEntry
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-RQOT6QL3.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode", "cursor_version"];
@@ -210,6 +210,8 @@ function readToolHookCall(source, event, stdin = process.stdin, { readCursorGate
 }
 
 export {
+  readAdmissionRules,
+  isAdmitted,
   readHookInput,
   readToolHookInput,
   readToolHookCall

package/dist/{chunk-Z3M627TQ.js → chunk-FONWVVDD.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-ATPJGHUP.js";
+} from "./chunk-TI4JYPGQ.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-3KXBRSL3.js → chunk-GMHQYX3D.js}

@@ -1,7 +1,7 @@
 import {
   localRepoKey,
   normalizeRepoRemote
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-RQOT6QL3.js";
 
 // src/repo.ts
 import { existsSync, readFileSync, statSync } from "fs";

package/dist/{chunk-WY6YAMZW.js → chunk-ICQCQAUO.js}

@@ -1,11 +1,11 @@
 import {
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-ANP3DIST.js";
+} from "./chunk-BFF3ABFV.js";
 import {
   CLAUDE_CODE_AGENT,
   compatibleToolLookup
-} from "./chunk-3UNAPXED.js";
+} from "./chunk-XFDWLDHG.js";
 import {
   CLAUDE_HOOK_EVENTS,
   PUSHARY_MCP_URL,
@@ -17,7 +17,7 @@ import {
   isPusharyHook,
   registerHookEntry,
   removeClaudeMcpServers
-} from "./chunk-ATPJGHUP.js";
+} from "./chunk-TI4JYPGQ.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   PHONE_ANSWERED_TOOLS,
@@ -28,7 +28,7 @@ import {
   pusharyMissingReason,
   refusalOutput,
   withHookHoldBudget
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-RQOT6QL3.js";
 
 // src/config-document.ts
 import { parse, stringify } from "smol-toml";
@@ -312,6 +312,7 @@ export {
   profileFromArgv,
   activeIdentity,
   namedEvent,
+  namedSource,
   activeHookSource,
   normalizeToolCall,
   grokHome,

package/dist/{chunk-CZ65D6Q5.js → chunk-IPG3RS23.js}

@@ -1,9 +1,9 @@
 import {
   findNativeClaudeInstall
-} from "./chunk-RABLE5R6.js";
+} from "./chunk-BBFGDYYI.js";
 import {
   isFile
-} from "./chunk-SCMEVDAR.js";
+} from "./chunk-WJLHZ6E6.js";
 
 // src/wrapper/claudeBinary.ts
 import { homedir } from "os";

package/dist/{chunk-JCWHOB36.js → chunk-IRV2MNMA.js}

@@ -1,9 +1,12 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-HDGB6SQ4.js";
+} from "./chunk-Y4MRHAE5.js";
+import {
+  retryAgentCommand
+} from "./chunk-JOD2325S.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-BAGBCSXA.js";
+} from "./chunk-X2MTVD4W.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {
@@ -61,9 +64,56 @@ var describeCodexTrustConfirmation = (confirmation) => {
   }
 };
 
+// src/hermes/messages.ts
+var HERMES_RESTART_COMMAND = "hermes gateway restart";
+var HERMES_MAC_APP_REPAIR = "open Pushary on this Mac and connect Hermes again";
+var describeHermesInstallFailure = (reason, pluginDirectory, receiptPath) => {
+  switch (reason) {
+    case "home_unknown":
+      return "Hermes did not say where its settings live. Check that `hermes config path` works, then run setup again.";
+    case "receipt_invalid":
+      return `${receiptPath} is unreadable, so setup cannot record what it changes. Move it aside, then run setup again.`;
+    case "settings_unreadable":
+      return "Hermes would not report its settings through `hermes config get`. Run `hermes update`, then run setup again.";
+    case "plugin_folder_not_ours":
+      return `${pluginDirectory} holds a pushary plugin that Pushary did not install. Remove that folder, then run setup again.`;
+    case "plugin_write_failed":
+      return `Could not write the Pushary plugin to ${pluginDirectory}.`;
+    case "settings_failed":
+      return "The plugin is in place, but Hermes refused a settings change. Run `hermes plugins enable pushary`, then run setup again.";
+  }
+};
+var PROBLEM_DESCRIPTIONS = {
+  plugin_missing: "the Pushary plugin folder is missing",
+  plugin_not_enabled: "pushary is not in plugins.enabled",
+  plugin_disabled: "pushary is in plugins.disabled"
+};
+var describeHermesProblems = (problems) => problems.map((problem) => PROBLEM_DESCRIPTIONS[problem]).join(", ");
+var hermesRepairStep = (installer) => installer === "mac_app" ? HERMES_MAC_APP_REPAIR : `run ${retryAgentCommand("hermes")}`;
+var describeHermesState = (state) => {
+  switch (state.kind) {
+    case "not_wired":
+      return "Pushary is not set up for Hermes";
+    case "needs_repair":
+      return `Hermes needs repair: ${describeHermesProblems(state.problems)}`;
+    case "restart_needed":
+      return `Restart Hermes to load Pushary ${state.installedVersion ?? ""}`.trim();
+    case "connected":
+      if (!state.live) {
+        return state.gatewayRunning ? "Hermes is running, and this plugin copy does not report whether it loaded" : "Hermes loads Pushary the next time it starts";
+      }
+      return state.runningVersion === state.version ? "Hermes loaded Pushary" : `Hermes runs Pushary ${state.runningVersion ?? "from an older copy"}; restart it to load ${state.version ?? "the new copy"}`;
+  }
+};
+
 export {
   codexTrustOutcome,
   CODEX_HOOK_REMEDY,
   needsCodexTrustStep,
-  describeCodexTrustConfirmation
+  describeCodexTrustConfirmation,
+  HERMES_RESTART_COMMAND,
+  describeHermesInstallFailure,
+  describeHermesProblems,
+  hermesRepairStep,
+  describeHermesState
 };