@sberpay-cli/cli-diagnostic 0.4.0-dev.7 → 0.4.0-dev.9

package/build-info.json

@@ -1,9 +1,9 @@
 {
   "profile": "diagnostic",
-  "version": "0.4.0-dev.7",
-  "sourceCommit": "9a9b74aaa8ed8a80225fe2dd94e6205b2c99352e",
-  "sourceTreeDigest": "82283fdc56d662da1a915e7bf851b0ff37905e04c4b703bddb76216cbffdb784",
+  "version": "0.4.0-dev.9",
+  "sourceCommit": "db0ec0c6594c1d28d55158cde8f6e5d564251e46",
+  "sourceTreeDigest": "5f12d63abb08dee373fbdd3ffd173836b8efbaa8d84886af05d5e85c3401db46",
   "snapshot": false,
-  "buildId": "34d73db3ce021d421ea07a062aff2d25deb6b14bf7f5051235840964f70d646c",
+  "buildId": "81921baa6ca1b7998a4feb445c67515af5251419e7bd514bc95dd70384c32abd",
   "stateFormat": 2
 }

package/dist/npm-entry.mjs

@@ -106,7 +106,7 @@ var require_polyfills = __commonJS({
       }
       if (platform === "win32") {
         fs.rename = typeof fs.rename !== "function" ? fs.rename : (function(fs$rename) {
-          function rename7(from, to, cb) {
+          function rename8(from, to, cb) {
             var start = Date.now();
             var backoff = 0;
             fs$rename(from, to, function CB(er) {
@@ -126,8 +126,8 @@ var require_polyfills = __commonJS({
               if (cb) cb(er);
             });
           }
-          if (Object.setPrototypeOf) Object.setPrototypeOf(rename7, fs$rename);
-          return rename7;
+          if (Object.setPrototypeOf) Object.setPrototypeOf(rename8, fs$rename);
+          return rename8;
         })(fs.rename);
       }
       fs.read = typeof fs.read !== "function" ? fs.read : (function(fs$read) {
@@ -531,8 +531,8 @@ var require_graceful_fs = __commonJS({
       fs2.createReadStream = createReadStream;
       fs2.createWriteStream = createWriteStream;
       var fs$readFile = fs2.readFile;
-      fs2.readFile = readFile4;
-      function readFile4(path, options, cb) {
+      fs2.readFile = readFile5;
+      function readFile5(path, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
         return go$readFile(path, options, cb);
@@ -548,8 +548,8 @@ var require_graceful_fs = __commonJS({
         }
       }
       var fs$writeFile = fs2.writeFile;
-      fs2.writeFile = writeFile4;
-      function writeFile4(path, data, options, cb) {
+      fs2.writeFile = writeFile5;
+      function writeFile5(path, data, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
         return go$writeFile(path, data, options, cb);
@@ -708,7 +708,7 @@ var require_graceful_fs = __commonJS({
       }
       function ReadStream$open() {
         var that = this;
-        open8(that.path, that.flags, that.mode, function(err, fd) {
+        open9(that.path, that.flags, that.mode, function(err, fd) {
           if (err) {
             if (that.autoClose)
               that.destroy();
@@ -728,7 +728,7 @@ var require_graceful_fs = __commonJS({
       }
       function WriteStream$open() {
         var that = this;
-        open8(that.path, that.flags, that.mode, function(err, fd) {
+        open9(that.path, that.flags, that.mode, function(err, fd) {
           if (err) {
             that.destroy();
             that.emit("error", err);
@@ -745,8 +745,8 @@ var require_graceful_fs = __commonJS({
         return new fs2.WriteStream(path, options);
       }
       var fs$open = fs2.open;
-      fs2.open = open8;
-      function open8(path, flags, mode, cb) {
+      fs2.open = open9;
+      function open9(path, flags, mode, cb) {
         if (typeof mode === "function")
           cb = mode, mode = null;
         return go$open(path, flags, mode, cb);
@@ -1617,8 +1617,8 @@ var require_proper_lockfile = __commonJS({
 });
 
 // scripts/diagnostics/npm-entry.mts
-import { readFile as readFile3 } from "node:fs/promises";
-import { dirname as dirname7, join as join11 } from "node:path";
+import { readFile as readFile4 } from "node:fs/promises";
+import { dirname as dirname7, join as join12 } from "node:path";
 import { fileURLToPath as fileURLToPath2, pathToFileURL as pathToFileURL2 } from "node:url";
 import { homedir as homedir4 } from "node:os";
 
@@ -2348,9 +2348,9 @@ function floatSafeRemainder(val, step) {
   return ratio - roundedRatio;
 }
 var EVALUATING = /* @__PURE__ */ Symbol("evaluating");
-function defineLazy(object2, key, getter) {
+function defineLazy(object3, key, getter) {
   let value = void 0;
-  Object.defineProperty(object2, key, {
+  Object.defineProperty(object3, key, {
     get() {
       if (value === EVALUATING) {
         return void 0;
@@ -2362,7 +2362,7 @@ function defineLazy(object2, key, getter) {
       return value;
     },
     set(v) {
-      Object.defineProperty(object2, key, {
+      Object.defineProperty(object3, key, {
         value: v
         // configurable: true,
       });
@@ -17429,8 +17429,8 @@ function foldObjects(members2) {
   }
   const properties = {};
   const required2 = /* @__PURE__ */ new Set();
-  for (const object2 of objects) {
-    for (const key in object2.properties) {
+  for (const object3 of objects) {
+    for (const key in object3.properties) {
       if (Object.prototype.hasOwnProperty.call(properties, key))
         continue;
       const parts = [];
@@ -17444,18 +17444,18 @@ function foldObjects(members2) {
       const merged = parts.length === 1 ? parts[0] : foldObjects(parts) ?? { allOf: parts };
       assignProp(properties, key, merged);
     }
-    for (const key of object2.required ?? [])
+    for (const key of object3.required ?? [])
       required2.add(key);
   }
   const folded = { type: "object", properties };
   if (required2.size)
     folded.required = [...required2];
-  if (objects.every((object2) => object2.additionalProperties === false)) {
+  if (objects.every((object3) => object3.additionalProperties === false)) {
     folded.additionalProperties = false;
   } else {
     const constraints = [];
-    for (const object2 of objects) {
-      const constraint = undeclaredConstraint(object2);
+    for (const object3 of objects) {
+      const constraint = undeclaredConstraint(object3);
       if (constraint && !constraints.some((seen) => JSON.stringify(seen) === JSON.stringify(constraint)))
         constraints.push(constraint);
     }
@@ -21374,7 +21374,7 @@ function skillFileHashes(skill, files, platform = process.platform) {
 }
 function renderDiagnosticSkill(source2, platform, launcher, node2) {
   if (platform === "win32") source2 = source2.replace(/(\{\{diagnosticLauncher\}\} auth complete --json) <<'TOKEN'\n([\s\S]*?)\nTOKEN/g, "@'\n$2\n'@ | $1").replace(/\\\r?\n\s*/g, " ");
-  return source2.replaceAll("{{diagnosticLauncher}}", diagnosticLauncherCommand(platform, launcher, node2)) + (platform === "win32" ? "\n\u041D\u0430 Windows \u043A\u043E\u043C\u0430\u043D\u0434\u044B \u0432\u044B\u0448\u0435 \u0432\u044B\u043F\u043E\u043B\u043D\u044F\u044E\u0442\u0441\u044F \u0432 PowerShell. \u0414\u043B\u044F Claude Code SessionStart hook \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044F Git Bash; CLAUDE_ENV_FILE \u0441\u043E\u0434\u0435\u0440\u0436\u0438\u0442 Bash export, \u0430 \u043D\u0435 PowerShell.\n" : "");
+  return source2.replaceAll("{{diagnosticLauncher}}", diagnosticLauncherCommand(platform, launcher, node2)) + (platform === "win32" ? "\n\u041D\u0430 Windows \u043A\u043E\u043C\u0430\u043D\u0434\u044B \u0432\u044B\u0448\u0435 \u0432\u044B\u043F\u043E\u043B\u043D\u044F\u044E\u0442\u0441\u044F \u0432 PowerShell. \u041F\u0440\u0438\u0432\u044F\u0437\u043A\u0435 \u043A \u0447\u0430\u0442\u0443 Claude Code \u0445\u0443\u043A SessionStart \u0438 Git Bash \u043D\u0435 \u043D\u0443\u0436\u043D\u044B.\n" : "");
 }
 
 // packages/cli/src/core/paths.ts
@@ -21418,7 +21418,7 @@ import { join as join2 } from "node:path";
 import { mkdirSync, existsSync, openSync, writeFileSync, fsyncSync, closeSync, renameSync, rmSync } from "node:fs";
 import { dirname as dirname2 } from "node:path";
 import { randomUUID } from "node:crypto";
-function atomicJson(path, value) {
+function atomicJson(path, value, options = {}) {
   if (process.platform === "win32") {
     ensureWindowsPrivateDirectory(dirname2(path));
     if (existsSync(path)) assertWindowsPrivatePath(path);
@@ -21427,7 +21427,7 @@ function atomicJson(path, value) {
   try {
     const fd = openSync(temp, "wx", 384);
     try {
-      writeFileSync(fd, JSON.stringify(value, null, 2) + "\n");
+      writeFileSync(fd, (options.compact ? JSON.stringify(value) : JSON.stringify(value, null, 2)) + "\n");
       fsyncSync(fd);
     } finally {
       closeSync(fd);
@@ -21876,7 +21876,7 @@ async function exclusive(paths, recover, fn, installing2 = false) {
         JSON.stringify({ pid: process.pid }),
         { mode: 384, flag: "wx" }
       );
-    const fd = openSync4(join5(lock, "owner.json"), "r");
+    const fd = openSync4(join5(lock, "owner.json"), "r+");
     try {
       fsyncSync3(fd);
     } finally {
@@ -22220,13 +22220,23 @@ import { createHash as createHash4 } from "node:crypto";
 var windowsArgument = (s) => '"' + s.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\+)$/, "$1$1") + '"';
 function windowsSenderConfig(home, launcher, node2) {
   if (!win323.isAbsolute(launcher) || !win323.isAbsolute(node2) || /[\0\r\n]/.test(launcher + node2)) throw Error("INVALID_SENDER_PATH");
-  return { path: win323.join(home, ".local", "share", "sberpay-diagnostic", "sender-task.json"), text: JSON.stringify({ name: "SberPay.Diagnostic." + createHash4("sha256").update(launcher.toLowerCase()).digest("hex").slice(0, 24), node: node2, launcher, arguments: windowsArgument(launcher) + " report flush --json" }) };
+  return { path: win323.join(home, ".local", "share", "sberpay-diagnostic", "sender-task.json"), text: JSON.stringify({
+    name: "SberPay.Diagnostic." + createHash4("sha256").update(launcher.toLowerCase()).digest("hex").slice(0, 24),
+    node: node2,
+    launcher,
+    arguments: windowsArgument(launcher) + " report flush --json",
+    // node.exe is a console program: started by Task Scheduler in the user's session it opens a console window every
+    // 5 minutes. conhost.exe --headless hosts the same process without a window; same user, token and arguments.
+    headlessArguments: "--headless " + windowsArgument(node2) + " " + windowsArgument(launcher) + " report flush --json"
+  }) };
 }
 var SCRIPT2 = String.raw`
 $ErrorActionPreference='Stop'
 [Console]::OutputEncoding=New-Object System.Text.UTF8Encoding($false)
 $c=Get-Content -LiteralPath $env:SBERPAY_SENDER_CONFIG -Raw -Encoding UTF8|ConvertFrom-Json
 $sid=[Security.Principal.WindowsIdentity]::GetCurrent().User.Value
+# Task Scheduler reads Principal.UserId back as an account name ("julia"), not the SID it was registered with.
+function SidOf($u){if(!$u){return $null};if($u -match '^S-1-'){return $u};try{return (New-Object Security.Principal.NTAccount($u)).Translate([Security.Principal.SecurityIdentifier]).Value}catch{return $null}}
 $service=New-Object -ComObject 'Schedule.Service'
 $service.Connect()
 $folder=$service.GetFolder('\')
@@ -22234,7 +22244,7 @@ $source='sberpay-diagnostic:'+ $c.launcher
 $existing=$null
 try{$existing=$folder.GetTask($c.name)}catch{$e=$_.Exception;while($e.InnerException){$e=$e.InnerException};if($e.HResult -ne -2147024894){throw}}
 if($existing){
- if($existing.Definition.RegistrationInfo.Source -cne $source -or $existing.Definition.Principal.UserId -ne $sid){throw 'SENDER_TASK_CONFLICT'}
+ if($existing.Definition.RegistrationInfo.Source -cne $source -or (SidOf $existing.Definition.Principal.UserId) -ne $sid){throw 'SENDER_TASK_CONFLICT'}
 }
 $task=$service.NewTask(0)
 $task.RegistrationInfo.Source=$source
@@ -22256,15 +22266,18 @@ $timer.Enabled=$true
 $logon=$task.Triggers.Create(9)
 $logon.UserId=$sid
 $logon.Enabled=$true
+# Hidden console: the system conhost.exe hosts node without a window. Without it, fall back to node itself.
+$conhost=[IO.Path]::Combine($env:SystemRoot,'System32','conhost.exe')
+if($c.headlessArguments -and (Test-Path -LiteralPath $conhost -PathType Leaf)){$program=$conhost;$programArguments=$c.headlessArguments}else{$program=$c.node;$programArguments=$c.arguments}
 $action=$task.Actions.Create(0)
-$action.Path=$c.node
-$action.Arguments=$c.arguments
+$action.Path=$program
+$action.Arguments=$programArguments
 $action.WorkingDirectory=[IO.Path]::GetDirectoryName($c.launcher)
 $registered=$folder.RegisterTaskDefinition($c.name,$task,6,$sid,$null,3,$null)
 $read=$folder.GetTask($c.name)
 $d=$read.Definition
-if($d.Settings.ExecutionTimeLimit -ne 'PT0S' -or $d.Settings.MultipleInstances -ne 2 -or !$read.Enabled -or $d.Principal.UserId -ne $sid -or $d.Principal.LogonType -ne 3 -or $d.Principal.RunLevel -ne 0 -or $d.Actions.Count -ne 1 -or $d.Actions.Item(1).Path -cne $c.node -or $d.Actions.Item(1).Arguments -cne $c.arguments -or $d.Triggers.Count -ne 2 -or $d.Triggers.Item(1).Repetition.Interval -ne 'PT5M'){throw 'SENDER_TASK_NOT_ACTIVE'}
-@{status='active';taskName=$c.name}|ConvertTo-Json -Compress
+if($d.Settings.ExecutionTimeLimit -ne 'PT0S' -or $d.Settings.MultipleInstances -ne 2 -or !$read.Enabled -or (SidOf $d.Principal.UserId) -ne $sid -or $d.Principal.LogonType -ne 3 -or $d.Principal.RunLevel -ne 0 -or $d.Actions.Count -ne 1 -or $d.Actions.Item(1).Path -cne $program -or $d.Actions.Item(1).Arguments -cne $programArguments -or $d.Triggers.Count -ne 2 -or $d.Triggers.Item(1).Repetition.Interval -ne 'PT5M'){throw 'SENDER_TASK_NOT_ACTIVE'}
+@{status='active';taskName=$c.name;hidden=($program -ceq $conhost)}|ConvertTo-Json -Compress
 `;
 function windowsSenderCommand(path, env = process.env) {
   if (!env.SystemRoot || !win323.isAbsolute(env.SystemRoot)) throw Error("WINDOWS_SYSTEM_ROOT_MISSING");
@@ -22345,6 +22358,81 @@ async function installSender(home, launcher) {
   }
 }
 
+// packages/cli/src/report/claudeHook.ts
+import { open as open7, chmod, lstat as lstat5, mkdir as mkdir4, readFile as readFile2, realpath, rename as rename6, writeFile as writeFile3 } from "node:fs/promises";
+import { join as join10 } from "node:path";
+import { randomUUID as randomUUID7 } from "node:crypto";
+
+// packages/cli/src/report/adapters/types.ts
+function object2(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+
+// packages/cli/src/report/claudeHook.ts
+var shellQuote = (text) => `'${text.replace(/'/g, "'\\''")}'`;
+var claudeHookCommandFor = (args) => [...args, "report", "claude-hook"].map((s) => shellQuote(process.platform === "win32" ? s.replaceAll("\\", "/") : s)).join(" ");
+var HOOK_SUFFIX = " 'report' 'claude-hook'";
+async function readSettings(configDir, create) {
+  if (create) {
+    if (process.platform === "win32") ensureWindowsPrivateDirectory(configDir);
+    else await mkdir4(configDir, { recursive: true, mode: 448 });
+  }
+  const path = join10(configDir, "settings.json");
+  let original;
+  try {
+    const info = await lstat5(path);
+    if (!info.isFile() || info.isSymbolicLink()) throw new BindingError("UNSAFE_SETTINGS");
+    if (process.platform === "win32") assertWindowsPrivatePath(path);
+    original = await readFile2(path, "utf8");
+  } catch (error62) {
+    if (error62.code !== "ENOENT") throw error62;
+  }
+  const settings = original === void 0 ? {} : object2(JSON.parse(original));
+  if (!settings) throw new BindingError("INVALID_SETTINGS");
+  const hooks = settings.hooks === void 0 ? {} : object2(settings.hooks);
+  if (!hooks) throw new BindingError("INVALID_HOOK_SETTINGS");
+  const start = hooks.SessionStart === void 0 ? [] : hooks.SessionStart;
+  if (!Array.isArray(start)) throw new BindingError("INVALID_HOOK_SETTINGS");
+  return { path, original, settings, hooks, start };
+}
+async function writeSettings(path, original, settings) {
+  const suffix = randomUUID7();
+  if (original !== void 0) await writeFile3(`${path}.sberpay-${suffix}.bak`, original, { flag: "wx", mode: 384 });
+  const temp = `${path}.sberpay-${suffix}.tmp`;
+  await writeFile3(temp, JSON.stringify(settings, null, 2) + "\n", { flag: "wx", mode: 384 });
+  await rename6(temp, path);
+  await chmod(path, 384);
+}
+async function updateClaudeHook(configDir, command) {
+  let read;
+  try {
+    read = await readSettings(configDir, false);
+  } catch (error62) {
+    if (error62.code === "ENOENT") return "absent";
+    throw error62;
+  }
+  const { path, original, settings, start } = read;
+  if (original === void 0) return "absent";
+  let found = false, changed = false;
+  for (const entry of start) {
+    const group = object2(entry);
+    if (!group || !Array.isArray(group.hooks)) continue;
+    for (const value of group.hooks) {
+      const hook = object2(value);
+      if (hook?.type !== "command" || typeof hook.command !== "string" || !hook.command.endsWith(HOOK_SUFFIX) || !hook.command.includes("sberpay-diagnostic")) continue;
+      found = true;
+      if (hook.command !== command) {
+        hook.command = command;
+        changed = true;
+      }
+    }
+  }
+  if (!found) return "absent";
+  if (!changed) return "current";
+  await writeSettings(path, original, settings);
+  return "updated";
+}
+
 // packages/cli/src/setup/steps.ts
 var MIN_NODE_MINOR = { 22: 19, 24: 5 };
 var LAST_LISTED_MAJOR = 24;
@@ -22353,27 +22441,27 @@ var LAST_LISTED_MAJOR = 24;
 import { constants as constants4 } from "node:fs";
 import { pathToFileURL } from "node:url";
 import { homedir as homedir3 } from "node:os";
-import { join as join10, resolve, dirname as dirname6 } from "node:path";
-import { mkdir as mkdir4, readFile as readFile2, writeFile as writeFile3, lstat as lstat5, rename as rename6, rm as rm6, cp, open as open7, chmod } from "node:fs/promises";
-import { createHash as createHash5, randomUUID as randomUUID7 } from "node:crypto";
+import { join as join11, resolve, dirname as dirname6 } from "node:path";
+import { mkdir as mkdir5, readFile as readFile3, writeFile as writeFile4, lstat as lstat6, rename as rename7, rm as rm6, cp, open as open8, chmod as chmod2 } from "node:fs/promises";
+import { createHash as createHash5, randomUUID as randomUUID8 } from "node:crypto";
 var hash3 = (text) => createHash5("sha256").update(text).digest("hex");
 var Manifest2 = external_exports.object({ schemaVersion: external_exports.literal(1), buildId: external_exports.string().regex(/^[a-f0-9]{64}$/), setupHash: external_exports.string().regex(/^[a-f0-9]{64}$/).optional(), files: external_exports.record(external_exports.string(), external_exports.string().regex(/^[a-f0-9]{64}$/)) }).strict();
 async function regular(path) {
-  const s = await lstat5(path);
+  const s = await lstat6(path);
   if (!s.isFile() || s.isSymbolicLink()) throw Error("UNSAFE_PACKAGE");
 }
 async function atomic(path, text, mode = 384) {
-  const temp = path + "." + randomUUID7() + ".tmp";
+  const temp = path + "." + randomUUID8() + ".tmp";
   try {
-    await writeFile3(temp, text, { flag: "wx", mode });
-    await rename6(temp, path);
+    await writeFile4(temp, text, { flag: "wx", mode });
+    await rename7(temp, path);
   } finally {
     await rm6(temp, { force: true });
   }
 }
 async function installDiagnostic(source2, home = homedir3(), options = {}) {
-  const root2 = privateDir2(join10(home, ".local", "share", "sberpay-diagnostic"));
-  return withInstallLock(root2, () => withPaymentLock(cliPaths({ SBERPAY_CLI_HOME: join10(root2, "profile") }), () => installLocked(source2, home, options), true));
+  const root2 = privateDir2(join11(home, ".local", "share", "sberpay-diagnostic"));
+  return withInstallLock(root2, () => withPaymentLock(cliPaths({ SBERPAY_CLI_HOME: join11(root2, "profile") }), () => installLocked(source2, home, options), true));
 }
 async function installLocked(source2, home, options) {
   const enroll = typeof options === "function" ? options : options.enrollInvitation ?? enrollInvitation;
@@ -22381,15 +22469,15 @@ async function installLocked(source2, home, options) {
   if (!(major > LAST_LISTED_MAJOR || MIN_NODE_MINOR[major] !== void 0 && minor >= MIN_NODE_MINOR[major])) throw Error("UNSUPPORTED_RUNTIME");
   source2 = resolve(source2);
   try {
-    const info = JSON.parse(await readFile2(join10(source2, "build-info.json"), "utf8"));
+    const info = JSON.parse(await readFile3(join11(source2, "build-info.json"), "utf8"));
     if (info.profile !== "diagnostic" || info.stateFormat !== 2) throw Error();
   } catch {
     throw Error("INCOMPATIBLE_STATE_FORMAT");
   }
-  const packageRoot = join10(source2, "package");
-  await regular(join10(source2, "manifest.json"));
-  const manifest = Manifest2.parse(JSON.parse(await readFile2(join10(source2, "manifest.json"), "utf8")));
-  if (manifest.setupHash && hash3(await readFile2(join10(source2, "dist/npm-entry.mjs"))) !== manifest.setupHash) throw Error("PACKAGE_HASH_MISMATCH");
+  const packageRoot = join11(source2, "package");
+  await regular(join11(source2, "manifest.json"));
+  const manifest = Manifest2.parse(JSON.parse(await readFile3(join11(source2, "manifest.json"), "utf8")));
+  if (manifest.setupHash && hash3(await readFile3(join11(source2, "dist/npm-entry.mjs"))) !== manifest.setupHash) throw Error("PACKAGE_HASH_MISMATCH");
   const entries = Object.entries(manifest.files);
   if (entries.length < 2 || entries.length > 1e3 || !manifest.files["dist/cli.mjs"] || !manifest.files["bin/sberpay-cli.mjs"] || !manifest.files["skill/sberpay/SKILL.md"]) throw Error("INVALID_MANIFEST");
   for (const [path, digest] of entries) {
@@ -22397,17 +22485,17 @@ async function installLocked(source2, home, options) {
     let cursor = packageRoot;
     const parts = path.split("/");
     for (const part of parts.slice(0, -1)) {
-      cursor = join10(cursor, part);
-      const s = await lstat5(cursor);
+      cursor = join11(cursor, part);
+      const s = await lstat6(cursor);
       if (!s.isDirectory() || s.isSymbolicLink()) throw Error("UNSAFE_PACKAGE");
     }
-    await regular(join10(packageRoot, path));
-    if (hash3(await readFile2(join10(packageRoot, path))) !== digest) throw Error("PACKAGE_HASH_MISMATCH");
+    await regular(join11(packageRoot, path));
+    if (hash3(await readFile3(join11(packageRoot, path))) !== digest) throw Error("PACKAGE_HASH_MISMATCH");
   }
   if (process.platform === "win32" && !manifest.files[`helpers/win32-${process.arch}/sberpay-tpm.exe`]) throw Error("WINDOWS_HELPER_NOT_PACKAGED");
-  const root2 = privateDir2(join10(home, ".local", "share", "sberpay-diagnostic"));
-  const skill = join10(home, ".agents", "skills", "sberpay-diagnostic");
-  const markerPath = join10(root2, "installed.json");
+  const root2 = privateDir2(join11(home, ".local", "share", "sberpay-diagnostic"));
+  const skill = join11(home, ".agents", "skills", "sberpay-diagnostic");
+  const markerPath = join11(root2, "installed.json");
   let prior;
   try {
     prior = JSON.parse((await privateRead(markerPath, 8192)).toString());
@@ -22416,20 +22504,20 @@ async function installLocked(source2, home, options) {
   }
   let pending;
   try {
-    pending = JSON.parse((await privateRead(join10(root2, "install-pending.json"), 1024 * 1024)).toString());
+    pending = JSON.parse((await privateRead(join11(root2, "install-pending.json"), 1024 * 1024)).toString());
   } catch (e) {
     if (e.code !== "ENOENT") throw Error("INSTALLATION_STATE_INVALID");
   }
   if (pending && pending.buildId !== manifest.buildId) throw Error("INSTALLATION_CONFLICT");
   if (prior?.stateFormat !== void 0 && ![1, 2].includes(prior.stateFormat)) throw Error("INCOMPATIBLE_STATE_FORMAT");
-  const paymentPaths = cliPaths({ SBERPAY_CLI_HOME: join10(root2, "profile") });
+  const paymentPaths = cliPaths({ SBERPAY_CLI_HOME: join11(root2, "profile") });
   const paymentModeFile = modeFile(paymentPaths);
   let modeState;
   if (prior?.stateFormat === 2) modeState = readPaymentMode(paymentPaths);
   else {
     let modeExists = false;
     try {
-      await lstat5(paymentModeFile);
+      await lstat6(paymentModeFile);
       modeExists = true;
     } catch (e) {
       if (e.code !== "ENOENT") throw e;
@@ -22441,18 +22529,18 @@ async function installLocked(source2, home, options) {
   }
   const acceptedPending = (path, digest) => pending?.files.some((f) => f.path === path && (f.before === digest || f.after === digest));
   try {
-    const info = await lstat5(skill);
+    const info = await lstat6(skill);
     if (!info.isDirectory() || info.isSymbolicLink()) throw Error("SKILL_MODIFIED");
-    const text2 = await readFile2(join10(skill, "SKILL.md"), "utf8");
-    if (!acceptedPending(join10(skill, "SKILL.md"), hash3(text2)) && (!prior || hash3(text2) !== prior.skillHash && hash3(text2) !== prior.previousSkillHash)) throw Error("SKILL_MODIFIED");
+    const text2 = await readFile3(join11(skill, "SKILL.md"), "utf8");
+    if (!acceptedPending(join11(skill, "SKILL.md"), hash3(text2)) && (!prior || hash3(text2) !== prior.skillHash && hash3(text2) !== prior.previousSkillHash)) throw Error("SKILL_MODIFIED");
   } catch (error62) {
     if (error62.code !== "ENOENT") throw error62;
   }
-  const releases = privateDir2(join10(root2, "releases"));
-  const release = join10(releases, manifest.buildId);
+  const releases = privateDir2(join11(root2, "releases"));
+  const release = join11(releases, manifest.buildId);
   let exists = false;
   try {
-    const info = await lstat5(release);
+    const info = await lstat6(release);
     if (!info.isDirectory() || info.isSymbolicLink()) throw Error("UNSAFE_RELEASE");
     exists = true;
   } catch (error62) {
@@ -22462,64 +22550,64 @@ async function installLocked(source2, home, options) {
     for (const [path, digest] of entries) {
       let cursor = release;
       for (const part of path.split("/").slice(0, -1)) {
-        cursor = join10(cursor, part);
-        const info = await lstat5(cursor);
+        cursor = join11(cursor, part);
+        const info = await lstat6(cursor);
         if (!info.isDirectory() || info.isSymbolicLink()) throw Error("UNSAFE_RELEASE");
       }
-      await regular(join10(release, path));
-      if (hash3(await readFile2(join10(release, path))) !== digest) throw Error("RELEASE_MODIFIED");
+      await regular(join11(release, path));
+      if (hash3(await readFile3(join11(release, path))) !== digest) throw Error("RELEASE_MODIFIED");
     }
   } else {
-    const staged = join10(releases, ".staging-" + randomUUID7());
-    await mkdir4(staged, { mode: 448 });
+    const staged = join11(releases, ".staging-" + randomUUID8());
+    await mkdir5(staged, { mode: 448 });
     try {
       for (const [path] of entries) {
-        const target = join10(staged, path);
-        await mkdir4(dirname6(target), { recursive: true, mode: 448 });
-        await cp(join10(packageRoot, path), target, { force: false, errorOnExist: true });
-        await chmod(target, /^helpers\/[^/]+\/sberpay-(se|tpm)(\.exe)?$/.test(path) ? 448 : 384);
+        const target = join11(staged, path);
+        await mkdir5(dirname6(target), { recursive: true, mode: 448 });
+        await cp(join11(packageRoot, path), target, { force: false, errorOnExist: true });
+        await chmod2(target, /^helpers\/[^/]+\/sberpay-(se|tpm)(\.exe)?$/.test(path) ? 448 : 384);
       }
-      await rename6(staged, release);
+      await rename7(staged, release);
     } finally {
       await rm6(staged, { recursive: true, force: true });
     }
   }
-  const profile = privateDir2(join10(root2, "profile"));
+  const profile = privateDir2(join11(root2, "profile"));
   let hasInvitation = false;
   try {
-    await regular(join10(source2, "invitation.json"));
+    await regular(join11(source2, "invitation.json"));
     hasInvitation = true;
   } catch (error62) {
     if (error62.code !== "ENOENT") throw error62;
   }
   if (hasInvitation) {
-    const invitationFile = await open7(join10(source2, "invitation.json"), constants4.O_RDONLY | constants4.O_NOFOLLOW | constants4.O_NONBLOCK);
+    const invitationFile = await open8(join11(source2, "invitation.json"), constants4.O_RDONLY | constants4.O_NOFOLLOW | constants4.O_NONBLOCK);
     try {
       const info = await invitationFile.stat();
       if (!info.isFile() || process.getuid && info.uid !== process.getuid()) throw Error("UNSAFE_INVITATION");
-      if (process.platform === "win32") assertWindowsPrivatePath(join10(source2, "invitation.json"));
+      if (process.platform === "win32") assertWindowsPrivatePath(join11(source2, "invitation.json"));
       else await invitationFile.chmod(384);
     } finally {
       await invitationFile.close();
     }
-    await enroll(join10(source2, "invitation.json"), { ...process.env, SBERPAY_CLI_HOME: profile });
+    await enroll(join11(source2, "invitation.json"), { ...process.env, SBERPAY_CLI_HOME: profile });
   } else {
     let hasCredential = false;
     try {
-      await regular(join10(profile, "config", "report-upload.json"));
+      await regular(join11(profile, "config", "report-upload.json"));
       hasCredential = true;
     } catch (e) {
       if (e.code !== "ENOENT") throw e;
     }
     if (hasCredential) {
       try {
-        external_exports.object({ endpoint: external_exports.literal(DIAGNOSTIC_ENDPOINT), token: external_exports.string().min(32).max(512).regex(/^[A-Za-z0-9_-]+$/) }).strict().parse(JSON.parse((await privateRead(join10(profile, "config", "report-upload.json"), 16384)).toString()));
+        external_exports.object({ endpoint: external_exports.literal(DIAGNOSTIC_ENDPOINT), token: external_exports.string().min(32).max(512).regex(/^[A-Za-z0-9_-]+$/) }).strict().parse(JSON.parse((await privateRead(join11(profile, "config", "report-upload.json"), 16384)).toString()));
       } catch {
         throw Error("ENROLLMENT_REQUIRED");
       }
     } else await (typeof options === "function" ? enrollOpen : options.enrollOpen ?? enrollOpen)({ ...process.env, SBERPAY_CLI_HOME: profile });
   }
-  const configFile = join10(privateDir2(join10(profile, "config")), "config.json");
+  const configFile = join11(privateDir2(join11(profile, "config")), "config.json");
   let config2 = { stand: "prod", stands: {} };
   try {
     config2 = JSON.parse((await privateRead(configFile, 65536)).toString());
@@ -22532,45 +22620,46 @@ async function installLocked(source2, home, options) {
     config2.stands[stand].merchantsUrl ??= "https://aiplatilka.ru/aim/aipay/gw/agent/api/v1";
   }
   await atomic(configFile, JSON.stringify(config2));
-  const launcher = join10(privateDir2(join10(root2, "bin")), "sberpay-cli-diagnostic.mjs");
+  const launcher = join11(privateDir2(join11(root2, "bin")), "sberpay-cli-diagnostic.mjs");
   const launcherText = `#!/usr/bin/env node
 import {existsSync,readFileSync} from "node:fs";
-if(existsSync(${JSON.stringify(join10(root2, "install-pending.json"))})){console.log(JSON.stringify({status:"not_ready",code:"INSTALL_IN_PROGRESS"}));process.exit(4);}
+if(existsSync(${JSON.stringify(join11(root2, "install-pending.json"))})){console.log(JSON.stringify({status:"not_ready",code:"INSTALL_IN_PROGRESS"}));process.exit(4);}
 try{const marker=JSON.parse(readFileSync(${JSON.stringify(markerPath)},"utf8"));if(marker.stateFormat!==2||marker.buildId!==${JSON.stringify(manifest.buildId)})throw Error();}catch{console.log(JSON.stringify({status:"not_ready",code:"SETUP_REQUIRED"}));process.exit(4);}
 process.env.SBERPAY_CLI_HOME=${JSON.stringify(profile)};
 process.env.SBERPAY_DIAGNOSTIC_CAPTURE="1";
-await import(${JSON.stringify(pathToFileURL(join10(release, "bin", "sberpay-cli.mjs")).href)});
+process.env.SBERPAY_DIAGNOSTIC_LAUNCHER=${JSON.stringify(launcher)};
+await import(${JSON.stringify(pathToFileURL(join11(release, "bin", "sberpay-cli.mjs")).href)});
 `;
-  const original = await readFile2(join10(release, "skill", "sberpay", "SKILL.md"), "utf8");
+  const original = await readFile3(join11(release, "skill", "sberpay", "SKILL.md"), "utf8");
   const text = renderDiagnosticSkill(original, process.platform, launcher, process.execPath);
   if (process.platform === "win32") privateDir2(skill);
   else {
-    await mkdir4(dirname6(skill), { recursive: true, mode: 448 });
-    await mkdir4(skill, { mode: 448 }).catch((e) => {
+    await mkdir5(dirname6(skill), { recursive: true, mode: 448 });
+    await mkdir5(skill, { mode: 448 }).catch((e) => {
       if (e.code !== "EEXIST") throw e;
     });
   }
-  const managed = [{ path: paymentModeFile, text: JSON.stringify(modeState), mode: 384 }, { path: launcher, text: launcherText, mode: 448 }, { path: join10(skill, "SKILL.md"), text, mode: 384 }];
+  const managed = [{ path: paymentModeFile, text: JSON.stringify(modeState), mode: 384 }, { path: launcher, text: launcherText, mode: 448 }, { path: join11(skill, "SKILL.md"), text, mode: 384 }];
   for (const [path] of entries) {
     if (!path.startsWith("skill/sberpay/") || path === "skill/sberpay/SKILL.md") continue;
     const rel = path.slice("skill/sberpay/".length);
     let cursor = skill;
     for (const part of rel.split("/").slice(0, -1)) {
-      cursor = join10(cursor, part);
-      await mkdir4(cursor, { mode: 448 }).catch((e) => {
+      cursor = join11(cursor, part);
+      await mkdir5(cursor, { mode: 448 }).catch((e) => {
         if (e.code !== "EEXIST") throw e;
       });
-      const info = await lstat5(cursor);
+      const info = await lstat6(cursor);
       if (!info.isDirectory() || info.isSymbolicLink()) throw Error("UNSAFE_SKILL_PATH");
     }
-    const target = join10(skill, rel);
+    const target = join11(skill, rel);
     try {
       await regular(target);
-      const current = hash3(await readFile2(target, "utf8"));
+      const current = hash3(await readFile3(target, "utf8"));
       let expected = prior?.skillFiles?.[rel];
       if (!expected && prior?.buildId) {
         try {
-          expected = hash3(await readFile2(join10(releases, prior.buildId, "skill/sberpay", rel), "utf8"));
+          expected = hash3(await readFile3(join11(releases, prior.buildId, "skill/sberpay", rel), "utf8"));
         } catch {
         }
       }
@@ -22578,7 +22667,7 @@ await import(${JSON.stringify(pathToFileURL(join10(release, "bin", "sberpay-cli.
     } catch (e) {
       if (e.code !== "ENOENT") throw e;
     }
-    managed.push({ path: target, text: await readFile2(join10(release, path), "utf8"), mode: 384 });
+    managed.push({ path: target, text: await readFile3(join11(release, path), "utf8"), mode: 384 });
   }
   const skillFiles = skillFileHashes(skill, managed);
   const marker = { buildId: manifest.buildId, stateFormat: 2, skillHash: hash3(text), skillFiles, launcher, profile };
@@ -22588,27 +22677,29 @@ await import(${JSON.stringify(pathToFileURL(join10(release, "bin", "sberpay-cli.
     if (sender.status === "needs_activation") throw Error("SENDER_ACTIVATION_REQUIRED");
     await durableWrite(markerPath, JSON.stringify(marker));
   });
-  return { status: "ready", profile: "diagnostic", buildId: manifest.buildId, launcher, skill, sender };
+  const claudeConfig = home === homedir3() && process.env.CLAUDE_CONFIG_DIR ? process.env.CLAUDE_CONFIG_DIR : join11(home, ".claude");
+  const claudeHook = await updateClaudeHook(claudeConfig, claudeHookCommandFor([process.execPath, launcher])).catch(() => "skipped");
+  return { status: "ready", profile: "diagnostic", buildId: manifest.buildId, launcher, skill, sender, claudeHook };
 }
 
 // scripts/diagnostics/npm-entry.mts
 var source = dirname7(dirname7(fileURLToPath2(import.meta.url)));
-var root = join11(homedir4(), ".local/share/sberpay-diagnostic");
+var root = join12(homedir4(), ".local/share/sberpay-diagnostic");
 try {
   if (process.argv[2] === "setup") {
     if (process.argv.slice(3).some((x) => x !== "--json")) throw Error("INVALID_SETUP_ARGUMENT");
     const result = await installDiagnostic(source);
     console.log(JSON.stringify(result));
   } else {
-    const manifest = JSON.parse(await readFile3(join11(source, "manifest.json"), "utf8"));
+    const manifest = JSON.parse(await readFile4(join12(source, "manifest.json"), "utf8"));
     let marker;
     try {
-      marker = JSON.parse(await readFile3(join11(root, "installed.json"), "utf8"));
+      marker = JSON.parse(await readFile4(join12(root, "installed.json"), "utf8"));
     } catch {
       throw Error("SETUP_REQUIRED");
     }
     if (marker.stateFormat !== 2 || marker.buildId !== manifest.buildId) throw Error("SETUP_REQUIRED");
-    await import(pathToFileURL2(join11(root, "bin/sberpay-cli-diagnostic.mjs")).href);
+    await import(pathToFileURL2(join12(root, "bin/sberpay-cli-diagnostic.mjs")).href);
   }
 } catch (e) {
   console.log(JSON.stringify({ status: "not_ready", code: e.message, hint: "\u0412\u044B\u043F\u043E\u043B\u043D\u0438\u0442\u0435 sberpay-cli-diagnostic setup --json; \u043F\u0440\u0438 \u043F\u043E\u0432\u0442\u043E\u0440\u043D\u043E\u043C \u043E\u0442\u043A\u0430\u0437\u0435 \u0441\u043E\u0445\u0440\u0430\u043D\u0438\u0442\u0435 \u043A\u043E\u0434 \u043E\u0448\u0438\u0431\u043A\u0438." }));