@pushary/agent-hooks 1.9.7 → 1.9.9

package/dist/{chunk-QQ4HBXZC.js → chunk-6W5M3MSE.js}

@@ -1,17 +1,12 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-W2KI5KPD.js";
-import {
-  openCodeConfigDirFrom
-} from "./chunk-X5NXPCIC.js";
+} from "./chunk-H5T27W7M.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-ADSQDYYG.js";
+} from "./chunk-REU2VQPH.js";
 import {
-  NpmMissingError,
-  codexHomeFrom,
-  resolvePathBinary
-} from "./chunk-ZUTU43FT.js";
+  NpmMissingError
+} from "./chunk-Z23ZBYDW.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -19,316 +14,83 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-STQRUH3S.js";
-import {
-  HOOK_COMPATIBLE_PROFILES
-} from "./chunk-QR6VE5ME.js";
-
-// src/hermes-config.ts
-import { execFileSync } from "child_process";
-import { existsSync, readFileSync, rmSync, writeFileSync } from "fs";
-import { homedir, tmpdir } from "os";
-import { join } from "path";
-var isRecord = (value) => Boolean(value) && typeof value === "object" && !Array.isArray(value);
-var isSnapshot = (value) => isRecord(value) && typeof value.present === "boolean" && Object.hasOwn(value, "value");
-var isHermesConfigReceipt = (value) => {
-  if (!isRecord(value)) return false;
-  return ["security", "approval", "transport", "fallback", "plugins", "enabled", "agent", "disabled"].every((key) => isSnapshot(value[key])) && typeof value.pushary_enabled === "boolean" && typeof value.clarify_disabled === "boolean";
-};
-var HERMES_PIP_PACKAGE = "hermes-plugin-pushary";
-var HERMES_PLUGIN_NAME = "pushary";
-var HERMES_CONFIG_SCRIPT = String.raw`
-import copy, importlib.util, json, os, sys
-from hermes_cli.config import load_config, save_config
-
-PUSHARY_TRANSPORT = "pushary"
-PUSHARY_FALLBACK = "builtin"
-PUSHARY_PLUGIN = "pushary"
-PUSHARY_PLUGIN_MODULE = "pushary_plugin"
-QUESTION_TOOLSET = "clarify"
-
-mode = sys.argv[1]
-receipt_path = sys.argv[2] if len(sys.argv) > 2 else None
-c = load_config()
-original = copy.deepcopy(c)
-
-def section(obj, key):
-    value = obj.get(key)
-    return value if isinstance(value, dict) else {}
-
-def members(obj, key):
-    value = obj.get(key)
-    return value if isinstance(value, list) else []
-
-if mode == "status":
-    print(json.dumps({
-        "plugin_installed": importlib.util.find_spec(PUSHARY_PLUGIN_MODULE) is not None,
-        "plugin_enabled": PUSHARY_PLUGIN in members(section(c, "plugins"), "enabled"),
-        "approvals_routed": section(section(c, "security"), "approval").get("transport") == PUSHARY_TRANSPORT,
-        "questions_routed": QUESTION_TOOLSET in members(section(c, "agent"), "disabled_toolsets"),
-    }))
-    sys.exit(0)
-
-def recorded(snapshot, value):
-    return bool(snapshot.get("present")) and snapshot.get("value") == value
-
-def pop_if(obj, key, value):
-    if obj.get(key) == value:
-        obj.pop(key, None)
-
-def snap(obj, key):
-    return {"present": key in obj, "value": obj.get(key)}
-
-restore_conflicts = []
+} from "./chunk-5DCDQ5VW.js";
 
-def restore(obj, key, before, ours):
-    if before.get("present") and before.get("value") == ours:
-        return
-    if before.get("present"):
-        if key in obj and obj.get(key) == before.get("value"):
-            return
-    elif key not in obj:
-        return
-    if obj.get(key) != ours:
-        restore_conflicts.append(key)
-        return
-    if before.get("present"):
-        obj[key] = before.get("value")
-    else:
-        obj.pop(key, None)
-
-def restore_container(obj, key, before, current, changed):
-    raw = obj.get(key)
-    if isinstance(before.get("value"), dict):
-        if not isinstance(raw, dict):
-            if changed:
-                restore_conflicts.append(key)
-            return
-        if current or before.get("present"):
-            obj[key] = current
-        else:
-            obj.pop(key, None)
-    elif isinstance(raw, dict) and current:
-        restore_conflicts.append(key)
-    else:
-        restore(obj, key, before, {})
-
-def restore_list_member(obj, key, before, ours, ours_before):
-    raw = obj.get(key)
-    if isinstance(before.get("value"), list):
-        if ours_before:
-            return
-        if not isinstance(raw, list):
-            restore_conflicts.append(key)
-            return
-        remaining = [item for item in raw if item != ours]
-        if remaining or before.get("present"):
-            obj[key] = remaining
-        else:
-            obj.pop(key, None)
-        return
-    if before.get("present") and raw == before.get("value"):
-        return
-    if not before.get("present") and key not in obj:
-        return
-    if not isinstance(raw, list):
-        restore_conflicts.append(key)
-        return
-    remaining = [item for item in raw if item != ours]
-    if remaining:
-        restore_conflicts.append(key)
-    else:
-        restore(obj, key, before, raw)
-
-def valid_snapshot(value):
-    return isinstance(value, dict) and isinstance(value.get("present"), bool) and "value" in value
-
-def valid_receipt(value):
-    snapshots = ["security", "approval", "transport", "fallback", "plugins", "enabled", "agent", "disabled"]
-    return (isinstance(value, dict)
-        and all(valid_snapshot(value.get(key)) for key in snapshots)
-        and isinstance(value.get("pushary_enabled"), bool)
-        and isinstance(value.get("clarify_disabled"), bool))
-
-if mode == "setup":
-    security_before = snap(c, "security")
-    s = section(c, "security")
-    approval_before = snap(s, "approval")
-    ap = section(s, "approval")
-    plugins_before = snap(c, "plugins")
-    p = section(c, "plugins")
-    agent_before = snap(c, "agent")
-    a = section(c, "agent")
-    enabled = members(p, "enabled")
-    disabled = members(a, "disabled_toolsets")
-    receipt = {
-        "security": security_before,
-        "approval": approval_before,
-        "transport": snap(ap, "transport"),
-        "fallback": snap(ap, "transport_fallback"),
-        "plugins": plugins_before,
-        "enabled": snap(p, "enabled"),
-        "pushary_enabled": PUSHARY_PLUGIN in enabled,
-        "agent": agent_before,
-        "disabled": snap(a, "disabled_toolsets"),
-        "clarify_disabled": QUESTION_TOOLSET in disabled,
-    }
-    if os.path.exists(receipt_path):
-        with open(receipt_path, encoding="utf-8") as handle:
-            existing_receipt = json.load(handle)
-        if not valid_receipt(existing_receipt):
-            raise ValueError("invalid Pushary Hermes setup receipt")
-    else:
-        os.makedirs(os.path.dirname(receipt_path), exist_ok=True)
-        temp = receipt_path + ".tmp"
-        with open(temp, "x", encoding="utf-8") as handle:
-            json.dump(receipt, handle)
-        os.chmod(temp, 0o600)
-        os.replace(temp, receipt_path)
-    ap["transport"] = PUSHARY_TRANSPORT
-    ap["transport_fallback"] = PUSHARY_FALLBACK
-    s["approval"] = ap
-    c["security"] = s
-    p["enabled"] = enabled if PUSHARY_PLUGIN in enabled else enabled + [PUSHARY_PLUGIN]
-    c["plugins"] = p
-    a["disabled_toolsets"] = disabled if QUESTION_TOOLSET in disabled else disabled + [QUESTION_TOOLSET]
-    c["agent"] = a
-else:
-    receipt_exists = os.path.exists(receipt_path)
-    try:
-        with open(receipt_path, encoding="utf-8") as handle:
-            receipt = json.load(handle)
-    except (OSError, ValueError):
-        if receipt_exists:
-            raise
-        receipt = None
-    s = section(c, "security")
-    ap = section(s, "approval")
-    if receipt:
-        if not valid_receipt(receipt):
-            raise ValueError("invalid Pushary Hermes setup receipt")
-        approval_changed = (not receipt["transport"].get("present")
-            or receipt["transport"].get("value") != PUSHARY_TRANSPORT
-            or not receipt["fallback"].get("present")
-            or receipt["fallback"].get("value") != PUSHARY_FALLBACK)
-        plugins_changed = not (isinstance(receipt["enabled"].get("value"), list)
-            and receipt["pushary_enabled"])
-        agent_changed = not (isinstance(receipt["disabled"].get("value"), list)
-            and receipt["clarify_disabled"])
-        transport_left_over = recorded(receipt["transport"], PUSHARY_TRANSPORT)
-        if transport_left_over:
-            pop_if(ap, "transport", PUSHARY_TRANSPORT)
-        else:
-            restore(ap, "transport", receipt["transport"], PUSHARY_TRANSPORT)
-        if transport_left_over and recorded(receipt["fallback"], PUSHARY_FALLBACK):
-            pop_if(ap, "transport_fallback", PUSHARY_FALLBACK)
-        else:
-            restore(ap, "transport_fallback", receipt["fallback"], PUSHARY_FALLBACK)
-    else:
-        pop_if(ap, "transport", PUSHARY_TRANSPORT)
-        pop_if(ap, "transport_fallback", PUSHARY_FALLBACK)
-    if receipt:
-        restore_container(s, "approval", receipt["approval"], ap, approval_changed)
-        restore_container(c, "security", receipt["security"], s, approval_changed)
-    else:
-        if ap: s["approval"] = ap
-        else: s.pop("approval", None)
-        if s: c["security"] = s
-        else: c.pop("security", None)
+// src/instruction-file.ts
+import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";
+import { dirname } from "path";
+var PUSHARY_BEGIN = "<!-- BEGIN PUSHARY (managed by @pushary/agent-hooks; do not edit this block) -->";
+var PUSHARY_END = "<!-- END PUSHARY -->";
+var instructionBody = (label) => `## Pushary notifications and approvals
 
-    p = section(c, "plugins")
-    if receipt:
-        restore_list_member(p, "enabled", receipt["enabled"], PUSHARY_PLUGIN, False)
-        restore_container(c, "plugins", receipt["plugins"], p, plugins_changed)
-    else:
-        enabled = [item for item in members(p, "enabled") if item != PUSHARY_PLUGIN]
-        if enabled: p["enabled"] = enabled
-        else: p.pop("enabled", None)
-        if p: c["plugins"] = p
-        else: c.pop("plugins", None)
+You have Pushary MCP tools that reach the user on their phone. Use them proactively. Do not wait for the user to ask.
 
-    a = section(c, "agent")
-    if receipt:
-        clarify_was_users = receipt["clarify_disabled"] and not recorded(receipt["transport"], PUSHARY_TRANSPORT)
-        restore_list_member(a, "disabled_toolsets", receipt["disabled"], QUESTION_TOOLSET, clarify_was_users)
-        restore_container(c, "agent", receipt["agent"], a, agent_changed)
-    else:
-        disabled = [item for item in members(a, "disabled_toolsets") if item != QUESTION_TOOLSET]
-        if disabled: a["disabled_toolsets"] = disabled
-        else: a.pop("disabled_toolsets", None)
-        if a: c["agent"] = a
-        else: c.pop("agent", None)
+- When you need the user to make a decision or answer a clarifying question, call \`ask_user\` instead of guessing or stalling. Use type "confirm" for yes/no, "select" for a fixed set of options, and "input" for free text. Read \`answered\`, \`status\` and the returned handoff instead of assuming the tool blocked. Silence is not consent; choice/text answers do not authorize a separate action.
+- Ask once, on one channel. If you also have a built-in way to prompt the user, use that or \`ask_user\` for a given question, never both. \`ask_user\` is the one that reaches the user when they are away from this machine, so prefer it. Raising both strands the user in whichever prompt you are not waiting on.
+- Honor authorization already granted in this session. Ask before a risky or irreversible action outside that authorization, or when an enforced host policy requires it. Do not ask again for an already authorized step, and never bypass an enforced gate. When a Pushary hook result says the user approved a specific command after a denial, rerunning that exact command is the approved path and not a bypass of that gate.
+- Call \`propose_scope\` only for an unresolved or requested file boundary. A ratified scope narrows what may proceed; it does not bypass other approval rules. Do not add a plan approval merely because work spans several files, and do not propose a new scope mid-run just to widen it. Let the installed gate request any scope expansion before the edit executes. Only file paths are checked, and only on tool calls that carry one, so put a boundary that is not a path (recipients, channels, spend, systems you will not open) in \`promises\` and never in \`allowedPaths\`. Read the \`enforces\` field that comes back: an empty array means nothing in that contract is checked automatically, and you must say so rather than report that a scope is in force. \`hookSeen: false\` means no hook has reported that sessionId, so the gate will never find the contract: fix the session id rather than proceeding as if a scope were in force.
+- Before a task of more than two steps, break it into steps and find the forks. Settle by yourself every fork that a file, a command or a tool call can answer, then ask the rest as one numbered round with your recommended answer against each. A question in the terminal is free; a push is not. When the user is at the terminal, ask the whole round there. When the user is away, send only the fork that stops the run, and decide the rest on your recommendation.
+- When you are blocked, stuck, or hit an error you cannot resolve on your own, call \`send_notification\` so the user knows, and call \`ask_user\` if you need a decision to continue.
+- When meaningful work finishes while the user is away, or they requested an alert, call \`send_notification\` so the user knows it is done. Skip trivial completions and duplicate reports to someone already reading. Always pass \`context\` with a \`type\` of "task_complete", "error" or "info": it is what tells Pushary this is a task update, so the user's own setting for where updates land can route it.
+- Confirm notifications can offer lock-screen actions; arbitrary choices and text open the app. The Mac notch handles personal account questions, not Partner customer enrollment.
+- Use \`cancel_question\` to retract a pending question once it is no longer needed.
+- Respect the user's Pushary delivery mode: it decides where an approval is surfaced (phone, terminal, or awareness only), not whether it is required. In Terminal mode do not expect a phone answer; the approval waits in the terminal. If the Pushary hook already gated an action, a single approval is enough, do not ask again.
 
-    if receipt and restore_conflicts:
-        raise ValueError("Hermes config changed after Pushary setup")
+Pass \`agentName\` as "${label} - <project folder name>" so the user knows which session is asking. If a question times out, follow \`handoffAction\` when present, otherwise \`nextAction\`: poll once, then cancel a live phone question before asking in the current client. If cancellation returns \`handoffAction: "stop"\`, stop. Otherwise, if cancellation returns false, poll once for 1 second and honor the answer that won the race.`;
+var SHARED_AGENTS_MD_LABEL = "<your agent's name, such as Codex or Hermes>";
+var renderAgentInstructions = (label) => instructionBody(label);
+var KEYLESS_FALLBACK_LINE = "This repo uses Pushary phone approvals. Your teammates get agent questions on their lock screens; you do not have a key yet, so questions will fall back to the terminal. Get your own key (3-day trial): https://pushary.com/sign-up?utm_source=agents-md&utm_medium=teammate";
+var renderProjectAgentInstructions = (label) => `${instructionBody(label)}
 
-changed = c != original
-if changed and mode != "clean-preview":
-    save_config(c)
-print(json.dumps({"changed": changed}))
-`;
-var resolveHermesPython = () => {
-  const launcher = resolvePathBinary("hermes");
-  if (launcher && process.platform !== "win32") {
-    try {
-      const shebang = readFileSync(launcher, "utf-8").split("\n", 1)[0];
-      const interpreter = shebang?.startsWith("#!") ? shebang.slice(2).trim().split(/\s+/)[0] : void 0;
-      if (interpreter && /python/i.test(interpreter) && existsSync(interpreter)) return interpreter;
-    } catch {
-    }
+If this environment has no Pushary API key (no PUSHARY_API_KEY and no key in ~/.pushary/config.json), the tools above are unavailable in this session. In that case, treat the following as a statement of fact about this session and continue in the terminal: ${KEYLESS_FALLBACK_LINE}`;
+var wrap = (body) => `${PUSHARY_BEGIN}
+${body}
+${PUSHARY_END}`;
+var writeInstructionBlock = (filePath, body) => {
+  const dir = dirname(filePath);
+  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+  let existing = "";
+  try {
+    existing = readFileSync(filePath, "utf-8");
+  } catch {
   }
-  const root = join(homedir(), ".hermes", "hermes-agent", "venv");
-  const candidates = process.platform === "win32" ? [join(root, "Scripts", "python.exe"), join(root, "Scripts", "python3.exe")] : [join(root, "bin", "python3"), join(root, "bin", "python")];
-  return candidates.find(existsSync) ?? null;
+  const block = wrap(body);
+  const start = existing.indexOf(PUSHARY_BEGIN);
+  const end = existing.indexOf(PUSHARY_END);
+  let next;
+  if (start !== -1 && end !== -1 && end > start) {
+    next = existing.slice(0, start) + block + existing.slice(end + PUSHARY_END.length);
+  } else {
+    const prefix = existing.trim() ? existing.replace(/\s*$/, "") + "\n\n" : "";
+    next = prefix + block + "\n";
+  }
+  writeFileSync(filePath, next, "utf-8");
 };
-var HERMES_SCRIPT_TIMEOUT_MS = 15e3;
-var runPythonScript = (python, script, args) => {
-  const path = join(tmpdir(), `pushary-hermes-${process.pid}-${Date.now()}.py`);
+var removeInstructionBlock = (filePath) => {
+  let existing = "";
   try {
-    writeFileSync(path, script, { encoding: "utf-8", mode: 384 });
-    return execFileSync(python, [path, ...args], {
-      env: { ...process.env },
-      encoding: "utf-8",
-      stdio: "pipe",
-      timeout: HERMES_SCRIPT_TIMEOUT_MS
-    });
+    existing = readFileSync(filePath, "utf-8");
   } catch {
-    return null;
-  } finally {
-    try {
-      rmSync(path, { force: true });
-    } catch {
-    }
+    return false;
   }
+  const start = existing.indexOf(PUSHARY_BEGIN);
+  const end = existing.indexOf(PUSHARY_END);
+  if (start === -1 || end === -1 || end < start) return false;
+  const remaining = (existing.slice(0, start) + existing.slice(end + PUSHARY_END.length)).trim();
+  if (remaining === "") {
+    rmSync(filePath, { force: true });
+  } else {
+    writeFileSync(filePath, remaining + "\n", "utf-8");
+  }
+  return true;
 };
-var lastReport = (stdout) => {
-  const line = stdout.trim().split("\n").at(-1) ?? "";
+var hasInstructionBlock = (filePath) => {
   try {
-    return JSON.parse(line);
+    return readFileSync(filePath, "utf-8").includes(PUSHARY_BEGIN);
   } catch {
-    return void 0;
+    return false;
   }
 };
-var configRunFrom = (stdout) => {
-  const report = stdout === null ? void 0 : lastReport(stdout);
-  if (!isRecord(report) || typeof report.changed !== "boolean") return "failed";
-  return report.changed ? "changed" : "unchanged";
-};
-var runHermesConfigScript = (python, mode, receiptPath) => configRunFrom(runPythonScript(python, HERMES_CONFIG_SCRIPT, [mode, receiptPath]));
-var HERMES_STATUS_FIELDS = ["plugin_installed", "plugin_enabled", "approvals_routed", "questions_routed"];
-var isHermesStatusReport = (value) => isRecord(value) && HERMES_STATUS_FIELDS.every((field) => typeof value[field] === "boolean");
-var hermesWiredByPushary = (status, setupRecorded) => setupRecorded || status.pluginEnabled || status.approvalsRouted;
-var readHermesStatus = (python) => {
-  const stdout = runPythonScript(python, HERMES_CONFIG_SCRIPT, ["status"]);
-  const report = stdout === null ? void 0 : lastReport(stdout);
-  if (!isHermesStatusReport(report)) return null;
-  return {
-    pluginInstalled: report.plugin_installed,
-    pluginEnabled: report.plugin_enabled,
-    approvalsRouted: report.approvals_routed,
-    questionsRouted: report.questions_routed
-  };
-};
 
 // src/fx-config.ts
 var FX_SERVER_NAME = "pushary";
@@ -337,6 +99,10 @@ var FX_PROFILE_MAX_BYTES = 1024 * 1024 - 1;
 var FX_SETTINGS_MAX_BYTES = 64 * 1024;
 var FX_PUSHARY_TOOLS_RULE = "mcp_pushary_*";
 var FX_TOOL_DISCOVERY_NOTE = 'In fx, these tools are named mcp_pushary_ask_user, mcp_pushary_send_notification, mcp_pushary_wait_for_answer, mcp_pushary_cancel_question and mcp_pushary_propose_scope. fx does not load them at the start of a turn: call mcp_select_tool with the exact name, for example {"name": "mcp_pushary_ask_user"}, then call the tool. For fx this replaces the guidance above to ask the whole round in the terminal while the user is there: ask every question through mcp_pushary_ask_user, even while the user is at this terminal, rather than through ask_user_question. fx cannot show its own question prompt in the Mac notch or on the phone, so a question asked there waits unseen once the user steps away. Ask in your reply instead only when a Pushary handoffAction tells you to ask here, or when mcp_pushary_ask_user is unavailable or fails without one.';
+var FX_AGENT_LABEL = "fx";
+var fxInstructionsBody = () => `${renderAgentInstructions(FX_AGENT_LABEL)}
+
+${FX_TOOL_DISCOVERY_NOTE}`;
 var ALLOW_ACTION = "allow";
 var PERMISSION_KEY = "permission";
 var WORKSPACES_KEY = "workspaces";
@@ -812,12 +578,13 @@ var planFxRemoval = (profilePath, settingsPath, receiptPath) => {
   const profile = readFxFile(profilePath, readFxProfile);
   if (profile.kind === "profile") {
     const result = withoutFxPusharyServer(profile.profile);
-    actions.push(result.removed ? removalWrite(profilePath, fxProfileText(result.profile), "fx MCP") : { kind: "kept", label: "fx MCP", detail: "no pushary entry" });
+    actions.push(result.removed ? removalWrite(profilePath, fxProfileText(result.profile), "fx MCP") : { kind: "absent", label: "fx MCP", detail: "no pushary entry" });
+  } else if (profile.kind === "unreadable") {
+    actions.push({ kind: "kept", label: "fx MCP", detail: `${profilePath} could not be read; left untouched` });
+  } else if (profile.kind === "refused") {
+    actions.push({ kind: "kept", label: "fx MCP", detail: `${profilePath} ${FX_PROFILE_REFUSALS[profile.reason]}; left untouched` });
   } else {
-    let detail = "not found";
-    if (profile.kind === "unreadable") detail = `${profilePath} could not be read; left untouched`;
-    if (profile.kind === "refused") detail = `${profilePath} ${FX_PROFILE_REFUSALS[profile.reason]}; left untouched`;
-    actions.push({ kind: "kept", label: "fx MCP", detail });
+    actions.push({ kind: "absent", label: "fx MCP", detail: "not found" });
   }
   const read = readFxFile(settingsPath, readFxSettings);
   const problem = fxSettingsReadRefusal(settingsPath, read);
@@ -840,354 +607,15 @@ var planFxRemoval = (profilePath, settingsPath, receiptPath) => {
   return actions;
 };
 
-// src/vscode-config.ts
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
-var PLUGIN_LOCATIONS_KEY = "chat.pluginLocations";
-var blankJsonComments = (text) => {
-  let out = "";
-  let i = 0;
-  let inString = false;
-  let escaped = false;
-  while (i < text.length) {
-    const ch = text[i];
-    if (inString) {
-      out += ch;
-      if (escaped) escaped = false;
-      else if (ch === "\\") escaped = true;
-      else if (ch === '"') inString = false;
-      i += 1;
-      continue;
-    }
-    if (ch === '"') {
-      inString = true;
-      out += ch;
-      i += 1;
-      continue;
-    }
-    if (ch === "/" && text[i + 1] === "/") {
-      while (i < text.length && text[i] !== "\n") {
-        out += " ";
-        i += 1;
-      }
-      continue;
-    }
-    if (ch === "/" && text[i + 1] === "*") {
-      const end = text.indexOf("*/", i + 2);
-      const stop = end === -1 ? text.length : end + 2;
-      while (i < stop) {
-        out += text[i] === "\n" ? "\n" : " ";
-        i += 1;
-      }
-      continue;
-    }
-    out += ch;
-    i += 1;
-  }
-  return out;
-};
-var asRecord2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
-var parseJsonc = (text) => {
-  const blanked = blankJsonComments(text);
-  const withoutTrailingCommas = blanked.replace(/,(\s*[}\]])/g, "$1");
-  try {
-    return asRecord2(JSON.parse(withoutTrailingCommas));
-  } catch {
-    return void 0;
-  }
-};
-var rootBraceIndex = (text) => blankJsonComments(text).indexOf("{");
-var detectIndent = (text) => {
-  const match = /\n([ \t]+)"/.exec(text);
-  return match?.[1] ?? "  ";
-};
-var freshDocument = (pluginDir, indent = "  ") => `${JSON.stringify({ [PLUGIN_LOCATIONS_KEY]: { [pluginDir]: true } }, null, indent)}
-`;
-var registerPluginLocation = (existing, pluginDir) => {
-  if (existing === null || existing.trim() === "") {
-    return { kind: "created", content: freshDocument(pluginDir) };
-  }
-  const indent = detectIndent(existing);
-  try {
-    const parsed2 = asRecord2(JSON.parse(existing));
-    if (parsed2) {
-      const locations2 = asRecord2(parsed2[PLUGIN_LOCATIONS_KEY]) ?? {};
-      if (locations2[pluginDir] === true) return { kind: "already" };
-      parsed2[PLUGIN_LOCATIONS_KEY] = { ...locations2, [pluginDir]: true };
-      return { kind: "merged", content: `${JSON.stringify(parsed2, null, indent)}
-` };
-    }
-  } catch {
-  }
-  const parsed = parseJsonc(existing);
-  if (!parsed) return { kind: "manual" };
-  const locations = asRecord2(parsed[PLUGIN_LOCATIONS_KEY]);
-  if (locations?.[pluginDir] === true) return { kind: "already" };
-  if (parsed[PLUGIN_LOCATIONS_KEY] !== void 0) return { kind: "manual" };
-  const brace = rootBraceIndex(existing);
-  if (brace === -1) return { kind: "manual" };
-  const needsComma = Object.keys(parsed).length > 0;
-  const line = `
-${indent}${JSON.stringify(PLUGIN_LOCATIONS_KEY)}: { ${JSON.stringify(pluginDir)}: true }${needsComma ? "," : ""}`;
-  return {
-    kind: "inserted",
-    content: `${existing.slice(0, brace + 1)}${line}${existing.slice(brace + 1)}`
-  };
-};
-var unregisterPluginLocation = (existing, pluginDir) => {
-  if (existing === null || existing.trim() === "") return { kind: "absent" };
-  const indent = detectIndent(existing);
-  try {
-    const parsed2 = asRecord2(JSON.parse(existing));
-    if (parsed2) {
-      const locations2 = asRecord2(parsed2[PLUGIN_LOCATIONS_KEY]);
-      if (!locations2 || !(pluginDir in locations2)) return { kind: "absent" };
-      const remaining = { ...locations2 };
-      delete remaining[pluginDir];
-      if (Object.keys(remaining).length === 0) delete parsed2[PLUGIN_LOCATIONS_KEY];
-      else parsed2[PLUGIN_LOCATIONS_KEY] = remaining;
-      return { kind: "removed", content: `${JSON.stringify(parsed2, null, indent)}
-` };
-    }
-  } catch {
-  }
-  const parsed = parseJsonc(existing);
-  if (!parsed) return { kind: "manual" };
-  const locations = asRecord2(parsed[PLUGIN_LOCATIONS_KEY]);
-  if (!locations || !(pluginDir in locations)) return { kind: "absent" };
-  const line = new RegExp(
-    `\\n[ \\t]*${escapeRegExp(JSON.stringify(PLUGIN_LOCATIONS_KEY))}\\s*:\\s*\\{\\s*${escapeRegExp(JSON.stringify(pluginDir))}\\s*:\\s*true\\s*\\},?`
-  );
-  if (!line.test(existing)) return { kind: "manual" };
-  return { kind: "removed", content: existing.replace(line, "") };
-};
-var escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-var isPluginRegistered = (existing, pluginDir) => {
-  if (!existing) return false;
-  const parsed = parseJsonc(existing);
-  return asRecord2(parsed?.[PLUGIN_LOCATIONS_KEY])?.[pluginDir] === true;
-};
-var pluginLocationSnippet = (pluginDir) => `"${PLUGIN_LOCATIONS_KEY}": {
-  ${JSON.stringify(pluginDir)}: true
-}`;
-var VSCODE_PRODUCTS = ["Code", "Code - Insiders"];
-var settingsRoot = (home, platform) => {
-  if (platform === "darwin") return join2(home, "Library", "Application Support");
-  if (platform === "win32") return process.env.APPDATA?.trim() || join2(home, "AppData", "Roaming");
-  return process.env.XDG_CONFIG_HOME?.trim() || join2(home, ".config");
-};
-var vscodeSettingsCandidates = (home = homedir2(), platform = process.platform) => {
-  const root = settingsRoot(home, platform);
-  return VSCODE_PRODUCTS.map((product) => join2(root, product, "User", "settings.json"));
-};
-var vscodeSettingsTargets = (exists, home, platform) => {
-  const candidates = vscodeSettingsCandidates(home, platform);
-  const present = candidates.filter((path) => exists(path));
-  return present.length > 0 ? present : candidates.slice(0, 1);
-};
-
-// src/setup/detect.ts
-import { execSync } from "child_process";
-import { existsSync as existsSync4 } from "fs";
-import { homedir as homedir3 } from "os";
-import { dirname, join as join3 } from "path";
-var whichCommand = () => process.platform === "win32" ? "where" : "which";
-var binaryOnPath = (binary) => {
-  try {
-    execSync(`${whichCommand()} ${binary}`, { stdio: "ignore", timeout: 5e3 });
-    return true;
-  } catch {
-    return false;
-  }
-};
-var defaultDeps = { onPath: binaryOnPath, exists: existsSync4 };
-var detectAgent = (probe, deps = defaultDeps) => {
-  const checked = [];
-  if (probe.binary) {
-    checked.push(`${whichCommand()} ${probe.binary}`);
-    if (deps.onPath(probe.binary)) {
-      return { kind: "installed", evidence: `${probe.binary} on PATH`, strong: true };
-    }
-  }
-  for (const path of probe.paths) {
-    checked.push(path);
-    if (deps.exists(path)) return { kind: "installed", evidence: path, strong: true };
-  }
-  for (const marker of probe.configMarkers) {
-    checked.push(marker);
-    if (deps.exists(marker)) return { kind: "installed", evidence: marker, strong: false };
-  }
-  if (probe.binary === null && probe.paths.length === 0 && probe.configMarkers.length === 0) {
-    return { kind: "unknown" };
-  }
-  return { kind: "not-found", checked };
-};
-var agentProbes = (home = homedir3()) => ({
-  claude_code: {
-    binary: "claude",
-    // The native installer puts it here, outside a default non-login PATH.
-    paths: [join3(home, ".local", "bin", "claude")],
-    configMarkers: [join3(home, ".claude")]
-  },
-  codex: {
-    binary: "codex",
-    paths: [],
-    configMarkers: [codexHomeFrom(home)]
-  },
-  gemini_cli: {
-    binary: "gemini",
-    paths: [],
-    configMarkers: [join3(home, ".gemini")]
-  },
-  hermes: {
-    binary: "hermes",
-    paths: [],
-    configMarkers: [join3(home, ".hermes")]
-  },
-  cursor: {
-    // GUI editor. `cursor` on PATH only exists if the user ran "Install 'cursor'
-    // command in PATH" from the command palette, which most never do.
-    binary: "cursor",
-    paths: process.platform === "darwin" ? ["/Applications/Cursor.app"] : process.platform === "win32" ? [join3(process.env.LOCALAPPDATA ?? join3(home, "AppData", "Local"), "Programs", "cursor")] : ["/usr/share/cursor", join3(home, ".local", "share", "cursor")],
-    configMarkers: [join3(home, ".cursor")]
-  },
-  vscode: {
-    // Like Cursor, a GUI editor: `code` on PATH only exists if the user ran
-    // "Shell Command: Install 'code' command in PATH", which on macOS is opt-in.
-    binary: "code",
-    paths: process.platform === "darwin" ? ["/Applications/Visual Studio Code.app"] : process.platform === "win32" ? [join3(process.env.LOCALAPPDATA ?? join3(home, "AppData", "Local"), "Programs", "Microsoft VS Code")] : ["/usr/share/code", join3(home, ".local", "share", "code")],
-    // The settings directory rather than ~/.vscode, because the settings
-    // directory is what this installer actually writes to. Insiders counts:
-    // someone running only Insiders still has VS Code.
-    configMarkers: vscodeSettingsCandidates(home).map((path) => dirname(path))
-  },
-  opencode: {
-    binary: "opencode",
-    paths: [],
-    // Resolved rather than spelled: OpenCode honours OPENCODE_CONFIG_DIR and then
-    // XDG_CONFIG_HOME, and `~/.opencode` — the obvious guess — is a path it has
-    // never used.
-    configMarkers: [openCodeConfigDirFrom(home)]
-  },
-  fx: {
-    binary: null,
-    paths: [join3(home, ".fx", "settings.json"), join3(home, ".fx", "sessions"), join3(home, ".fx", "history.jsonl")],
-    configMarkers: []
-  },
-  ...compatibleProbes(),
-  // "Other" is a set of printed instructions for any MCP or HTTP client. There is
-  // nothing to detect, and it must never be auto-selected.
-  custom: { binary: null, paths: [], configMarkers: [] }
-});
-var compatibleProbes = () => HOOK_COMPATIBLE_PROFILES.reduce((probes, profile) => ({
-  ...probes,
-  [profile.agentType]: {
-    binary: profile.binary,
-    paths: [],
-    configMarkers: []
-  }
-}), {});
-var detectAllAgents = (deps = defaultDeps, home) => {
-  const probes = agentProbes(home);
-  return Object.keys(probes).map((agent) => ({
-    agent,
-    result: detectAgent(probes[agent], deps)
-  }));
-};
-var isDetected = (result) => result.kind === "installed";
-var shortenHome = (path, home = homedir3()) => home && path.startsWith(home) ? `~${path.slice(home.length)}` : path;
-var describeDetection = (result, home) => {
-  if (result.kind !== "installed") return null;
-  const evidence = shortenHome(result.evidence, home);
-  return result.strong ? evidence : `${evidence}, config only`;
-};
-
-// src/instruction-file.ts
-import { existsSync as existsSync5, readFileSync as readFileSync3, writeFileSync as writeFileSync2, mkdirSync, rmSync as rmSync2 } from "fs";
-import { dirname as dirname2 } from "path";
-var PUSHARY_BEGIN = "<!-- BEGIN PUSHARY (managed by @pushary/agent-hooks; do not edit this block) -->";
-var PUSHARY_END = "<!-- END PUSHARY -->";
-var instructionBody = (label) => `## Pushary notifications and approvals
-
-You have Pushary MCP tools that reach the user on their phone. Use them proactively. Do not wait for the user to ask.
-
-- When you need the user to make a decision or answer a clarifying question, call \`ask_user\` instead of guessing or stalling. Use type "confirm" for yes/no, "select" for a fixed set of options, and "input" for free text. Read \`answered\`, \`status\` and the returned handoff instead of assuming the tool blocked. Silence is not consent; choice/text answers do not authorize a separate action.
-- Ask once, on one channel. If you also have a built-in way to prompt the user, use that or \`ask_user\` for a given question, never both. \`ask_user\` is the one that reaches the user when they are away from this machine, so prefer it. Raising both strands the user in whichever prompt you are not waiting on.
-- Honor authorization already granted in this session. Ask before a risky or irreversible action outside that authorization, or when an enforced host policy requires it. Do not ask again for an already authorized step, and never bypass an enforced gate. When a Pushary hook result says the user approved a specific command after a denial, rerunning that exact command is the approved path and not a bypass of that gate.
-- Call \`propose_scope\` only for an unresolved or requested file boundary. A ratified scope narrows what may proceed; it does not bypass other approval rules. Do not add a plan approval merely because work spans several files, and do not propose a new scope mid-run just to widen it. Let the installed gate request any scope expansion before the edit executes. Only file paths are checked, and only on tool calls that carry one, so put a boundary that is not a path (recipients, channels, spend, systems you will not open) in \`promises\` and never in \`allowedPaths\`. Read the \`enforces\` field that comes back: an empty array means nothing in that contract is checked automatically, and you must say so rather than report that a scope is in force. \`hookSeen: false\` means no hook has reported that sessionId, so the gate will never find the contract: fix the session id rather than proceeding as if a scope were in force.
-- Before a task of more than two steps, break it into steps and find the forks. Settle by yourself every fork that a file, a command or a tool call can answer, then ask the rest as one numbered round with your recommended answer against each. A question in the terminal is free; a push is not. When the user is at the terminal, ask the whole round there. When the user is away, send only the fork that stops the run, and decide the rest on your recommendation.
-- When you are blocked, stuck, or hit an error you cannot resolve on your own, call \`send_notification\` so the user knows, and call \`ask_user\` if you need a decision to continue.
-- When meaningful work finishes while the user is away, or they requested an alert, call \`send_notification\` so the user knows it is done. Skip trivial completions and duplicate reports to someone already reading. Always pass \`context\` with a \`type\` of "task_complete", "error" or "info": it is what tells Pushary this is a task update, so the user's own setting for where updates land can route it.
-- Confirm notifications can offer lock-screen actions; arbitrary choices and text open the app. The Mac notch handles personal account questions, not Partner customer enrollment.
-- Use \`cancel_question\` to retract a pending question once it is no longer needed.
-- Respect the user's Pushary delivery mode: it decides where an approval is surfaced (phone, terminal, or awareness only), not whether it is required. In Terminal mode do not expect a phone answer; the approval waits in the terminal. If the Pushary hook already gated an action, a single approval is enough, do not ask again.
-
-Pass \`agentName\` as "${label} - <project folder name>" so the user knows which session is asking. If a question times out, follow \`handoffAction\` when present, otherwise \`nextAction\`: poll once, then cancel a live phone question before asking in the current client. If cancellation returns \`handoffAction: "stop"\`, stop. Otherwise, if cancellation returns false, poll once for 1 second and honor the answer that won the race.`;
-var SHARED_AGENTS_MD_LABEL = "<your agent's name, such as Codex or Hermes>";
-var renderAgentInstructions = (label) => instructionBody(label);
-var KEYLESS_FALLBACK_LINE = "This repo uses Pushary phone approvals. Your teammates get agent questions on their lock screens; you do not have a key yet, so questions will fall back to the terminal. Get your own key (3-day trial): https://pushary.com/sign-up?utm_source=agents-md&utm_medium=teammate";
-var renderProjectAgentInstructions = (label) => `${instructionBody(label)}
-
-If this environment has no Pushary API key (no PUSHARY_API_KEY and no key in ~/.pushary/config.json), the tools above are unavailable in this session. In that case, treat the following as a statement of fact about this session and continue in the terminal: ${KEYLESS_FALLBACK_LINE}`;
-var wrap = (body) => `${PUSHARY_BEGIN}
-${body}
-${PUSHARY_END}`;
-var writeInstructionBlock = (filePath, body) => {
-  const dir = dirname2(filePath);
-  if (!existsSync5(dir)) mkdirSync(dir, { recursive: true });
-  let existing = "";
-  try {
-    existing = readFileSync3(filePath, "utf-8");
-  } catch {
-  }
-  const block = wrap(body);
-  const start = existing.indexOf(PUSHARY_BEGIN);
-  const end = existing.indexOf(PUSHARY_END);
-  let next;
-  if (start !== -1 && end !== -1 && end > start) {
-    next = existing.slice(0, start) + block + existing.slice(end + PUSHARY_END.length);
-  } else {
-    const prefix = existing.trim() ? existing.replace(/\s*$/, "") + "\n\n" : "";
-    next = prefix + block + "\n";
-  }
-  writeFileSync2(filePath, next, "utf-8");
-};
-var removeInstructionBlock = (filePath) => {
-  let existing = "";
-  try {
-    existing = readFileSync3(filePath, "utf-8");
-  } catch {
-    return false;
-  }
-  const start = existing.indexOf(PUSHARY_BEGIN);
-  const end = existing.indexOf(PUSHARY_END);
-  if (start === -1 || end === -1 || end < start) return false;
-  const remaining = (existing.slice(0, start) + existing.slice(end + PUSHARY_END.length)).trim();
-  if (remaining === "") {
-    rmSync2(filePath, { force: true });
-  } else {
-    writeFileSync2(filePath, remaining + "\n", "utf-8");
-  }
-  return true;
-};
-var hasInstructionBlock = (filePath) => {
-  try {
-    return readFileSync3(filePath, "utf-8").includes(PUSHARY_BEGIN);
-  } catch {
-    return false;
-  }
-};
-
 export {
-  isHermesConfigReceipt,
-  HERMES_PIP_PACKAGE,
-  HERMES_PLUGIN_NAME,
-  resolveHermesPython,
-  runHermesConfigScript,
-  hermesWiredByPushary,
-  readHermesStatus,
+  SHARED_AGENTS_MD_LABEL,
+  renderAgentInstructions,
+  renderProjectAgentInstructions,
+  writeInstructionBlock,
+  removeInstructionBlock,
+  hasInstructionBlock,
   FX_PUSHARY_TOOLS_RULE,
-  FX_TOOL_DISCOVERY_NOTE,
+  fxInstructionsBody,
   FX_PROFILE_REFUSALS,
   fxPusharyEntry,
   withFxPusharyServer,
@@ -1205,22 +633,5 @@ export {
   writeFxProfile,
   configureFxSettings,
   inspectFxInstallation,
-  planFxRemoval,
-  registerPluginLocation,
-  unregisterPluginLocation,
-  isPluginRegistered,
-  pluginLocationSnippet,
-  vscodeSettingsTargets,
-  detectAgent,
-  agentProbes,
-  detectAllAgents,
-  isDetected,
-  shortenHome,
-  describeDetection,
-  SHARED_AGENTS_MD_LABEL,
-  renderAgentInstructions,
-  renderProjectAgentInstructions,
-  writeInstructionBlock,
-  removeInstructionBlock,
-  hasInstructionBlock
+  planFxRemoval
 };