approval-box 0.1.8 → 0.1.10

package/README.md

@@ -14,8 +14,8 @@ npx -y approval-box@latest setup
 
 1. `setup` finds the agents on this machine and registers Approval Box (MCP server and hooks). It shows the files it will change and keeps a backup (`*.approval-box-backup`) before writing.
    PCにあるAIを見つけて登録します。書き換えるファイルを先に見せ、控えを残してから書き換えます。
-   It also offers to add one short paragraph to each agent's global instructions (`~/.claude/CLAUDE.md`, `$CODEX_HOME/AGENTS.md`, `~/.grok/AGENTS.md`) so the agent also files decisions, approvals and actions with `request_decision`. Cursor does not read a global file, so setup passes the same text through a `sessionStart` hook in `~/.cursor/hooks.json`. Skip with `--no-instructions`.
-   AIが毎回読む全体の指示に「判断・承認・操作が要る時は request_decision でも申請する」という一節を足すかを聞きます。Cursor はファイルから読まないので、会話の始まりのhook（`~/.cursor/hooks.json` の sessionStart）で渡します。足さない時は `--no-instructions`。
+   It also offers to add one short paragraph to each agent's global instructions (`~/.claude/CLAUDE.md`, `$CODEX_HOME/AGENTS.md`, `~/.grok/AGENTS.md`) so the agent also files decisions, approvals and actions with `request_decision`. Cursor does not read a global file, so setup passes the same text through a `sessionStart` hook in `~/.cursor/hooks.json`. If an instructions file is a symlink (for example, generated by a dotfiles repo), setup leaves it alone and asks you to add the paragraph to the source instead. Skip with `--no-instructions`.
+   AIが毎回読む全体の指示に「判断・承認・操作が要る時は request_decision でも申請する」という一節を足すかを聞きます。Cursor はファイルから読まないので、会話の始まりのhook（`~/.cursor/hooks.json` の sessionStart）で渡します。指示ファイルが別の所への参照（symlink、dotfilesの生成物など）の時は書かず、管理元の規範に足すよう案内します。足さない時は `--no-instructions`。
 2. Scan the QR code or enter the code in “Add device” in the app or web.
    画面のQRコードかコードを、アプリかWeb版の「端末を追加」で読み取ります。
 3. Tell your agent: `Approval Boxのsetup_testを実行して` (or “run Approval Box setup_test”). Answer the test request; when the answer reaches the agent, you are ready.

package/dist/cli.mjs

@@ -4435,10 +4435,10 @@ var require_browser = __commonJS({
           text2 = canvas;
           canvas = void 0;
         }
-        return new Promise(function(resolve, reject) {
+        return new Promise(function(resolve2, reject) {
           try {
             const data = QRCode2.create(text2, opts);
-            resolve(renderFunc(data, canvas, opts));
+            resolve2(renderFunc(data, canvas, opts));
           } catch (e) {
             reject(e);
           }
@@ -4519,11 +4519,11 @@ var require_server = __commonJS({
     }
     function render(renderFunc, text2, params) {
       if (!params.cb) {
-        return new Promise(function(resolve, reject) {
+        return new Promise(function(resolve2, reject) {
           try {
             const data = QRCode2.create(text2, params.opts);
             return renderFunc(data, params.opts, function(err, data2) {
-              return err ? reject(err) : resolve(data2);
+              return err ? reject(err) : resolve2(data2);
             });
           } catch (e) {
             reject(e);
@@ -7538,7 +7538,7 @@ var require_compile = __commonJS({
       const schOrFunc = root.refs[ref];
       if (schOrFunc)
         return schOrFunc;
-      let _sch = resolve.call(this, root, ref);
+      let _sch = resolve2.call(this, root, ref);
       if (_sch === void 0) {
         const schema = (_a = root.localRefs) === null || _a === void 0 ? void 0 : _a[ref];
         const { schemaId } = this.opts;
@@ -7565,7 +7565,7 @@ var require_compile = __commonJS({
     function sameSchemaEnv(s1, s2) {
       return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
     }
-    function resolve(root, ref) {
+    function resolve2(root, ref) {
       let sch;
       while (typeof (sch = this.refs[ref]) == "string")
         ref = sch;
@@ -8395,7 +8395,7 @@ var require_fast_uri = __commonJS({
       }
       return uri;
     }
-    function resolve(baseURI, relativeURI, options) {
+    function resolve2(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
       const {
         parsed: baseParsed,
@@ -8764,7 +8764,7 @@ var require_fast_uri = __commonJS({
     var fastUri = {
       SCHEMES,
       normalize,
-      resolve,
+      resolve: resolve2,
       resolveComponent,
       equal,
       serialize,
@@ -11755,9 +11755,9 @@ var require_dist = __commonJS({
 
 // src/cli.ts
 var import_qrcode = __toESM(require_lib(), 1);
-import { cpSync, existsSync as existsSync6, mkdirSync as mkdirSync4, rmSync as rmSync2 } from "node:fs";
+import { cpSync, existsSync as existsSync7, mkdirSync as mkdirSync5, rmSync as rmSync3 } from "node:fs";
 import { hostname } from "node:os";
-import { join as join6 } from "node:path";
+import { join as join7 } from "node:path";
 import { createInterface } from "node:readline/promises";
 
 // src/api.ts
@@ -11810,6 +11810,18 @@ var Api = class {
     }
     return json;
   }
+  /** ファイルを取る（添付）。誤りはJSONの本文から読む。 */
+  async download(path) {
+    let response;
+    try {
+      response = await fetch(this.url(path), { headers: this.token ? { authorization: `Bearer ${this.token}` } : {} });
+    } catch (error) {
+      throw new ServerError(0, "network", `Approval Box\u30B5\u30FC\u30D0\u30FC\uFF08${this.server}\uFF09\u306B\u3064\u306A\u304C\u308A\u307E\u305B\u3093: ${error.message}`, {});
+    }
+    if (response.ok) return Buffer.from(await response.arrayBuffer());
+    const json = await response.json().catch(() => ({}));
+    throw new ServerError(response.status, json.error?.code ?? "internal", json.error?.message ?? `HTTP ${response.status}`, json.error ?? {});
+  }
   /** コネクタ用SSE。届いたイベント名ごとに onEvent を呼ぶ。切れたら戻る。 */
   async stream(onEvent, signal) {
     const response = await fetch(this.url("/stream"), { headers: { authorization: `Bearer ${this.token}`, accept: "text/event-stream" }, signal });
@@ -11856,23 +11868,68 @@ function writeConfig(config) {
 
 // src/daemon.ts
 import { spawn } from "node:child_process";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync2, rmSync } from "node:fs";
-import { join as join3 } from "node:path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, openSync, readFileSync as readFileSync3, rmSync as rmSync2 } from "node:fs";
+import { join as join4 } from "node:path";
+
+// src/attachments.ts
+import { createHash } from "node:crypto";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync2, rmSync, statSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join2 } from "node:path";
+var KEEP_DAYS = 30;
+var attachmentsRoot = () => join2(home(), "attachments");
+function safeFileName(name) {
+  const cleaned = name.replace(/[<>:"/\\|?*\u0000-\u001f]/g, "_").replace(/[. ]+$/, "").trim();
+  return cleaned.slice(0, 150) || "file";
+}
+async function saveAttachment(api, decisionId, meta, index) {
+  const dir = join2(attachmentsRoot(), safeFileName(decisionId));
+  const file = join2(dir, `${index + 1}_${safeFileName(meta.name)}`);
+  if (existsSync2(file) && sha256(readFileSync2(file)) === meta.sha256) return file;
+  const data = await api.download(`/decisions/${encodeURIComponent(decisionId)}/attachments/${encodeURIComponent(meta.id)}`);
+  if (sha256(data) !== meta.sha256) throw new Error(`${meta.name} \u306E\u4E2D\u8EAB\u304C\u30B5\u30FC\u30D0\u30FC\u306E\u8A18\u9332\u3068\u5408\u3044\u307E\u305B\u3093\uFF08\u53D6\u308A\u76F4\u3057\u3066\u304F\u3060\u3055\u3044\uFF09`);
+  mkdirSync2(dir, { recursive: true, mode: 448 });
+  writeFileSync2(file, data, { mode: 384 });
+  return file;
+}
+async function saveAll(api, decisionId, items) {
+  const lines = ["", "\u6DFB\u4ED8\u306F\u3053\u306E\u7AEF\u672B\u306B\u4FDD\u5B58\u3057\u307E\u3057\u305F:"];
+  for (const [i, meta] of items.entries()) {
+    try {
+      lines.push(`${i + 1}. ${await saveAttachment(api, decisionId, meta, i)}`);
+    } catch (error) {
+      lines.push(`${i + 1}. ${meta.name}: \u4FDD\u5B58\u3067\u304D\u307E\u305B\u3093\u3067\u3057\u305F\uFF08${error.message}\uFF09\u3002get_attachment \u3067\u53D6\u3063\u3066\u304F\u3060\u3055\u3044\u3002`);
+    }
+  }
+  return lines.join("\n");
+}
+function pruneAttachments() {
+  const root = attachmentsRoot();
+  if (!existsSync2(root)) return;
+  const before = Date.now() - KEEP_DAYS * 864e5;
+  for (const name of readdirSync(root)) {
+    const dir = join2(root, name);
+    try {
+      if (statSync(dir).mtimeMs < before) rmSync(dir, { recursive: true, force: true });
+    } catch {
+    }
+  }
+}
+var sha256 = (data) => createHash("sha256").update(data).digest("hex");
 
 // src/runtime.ts
-import { basename, dirname as dirname2, join as join2 } from "node:path";
+import { basename, dirname as dirname2, join as join3 } from "node:path";
 import { fileURLToPath } from "node:url";
 var runtimeDir = () => {
   const dir = dirname2(fileURLToPath(import.meta.url));
   return basename(dir) === "chunks" ? dirname2(dir) : dir;
 };
 function runtimeEntry(kind) {
-  return join2(runtimeDir(), kind === "cli" ? "cli.mjs" : HOOK_FILES[kind]);
+  return join3(runtimeDir(), kind === "cli" ? "cli.mjs" : HOOK_FILES[kind]);
 }
 
 // src/daemon.ts
-var lockFile = () => join3(stateRoot(), "daemon.json");
-var journalFile = () => join3(stateRoot(), "deliveries.json");
+var lockFile = () => join4(stateRoot(), "daemon.json");
+var journalFile = () => join4(stateRoot(), "deliveries.json");
 var IDLE_EXIT_MS = 30 * 6e4;
 function alive(pid) {
   try {
@@ -11883,9 +11940,9 @@ function alive(pid) {
   }
 }
 function daemonStatus() {
-  if (!existsSync2(lockFile())) return { running: false };
+  if (!existsSync3(lockFile())) return { running: false };
   try {
-    const lock = JSON.parse(readFileSync2(lockFile(), "utf8"));
+    const lock = JSON.parse(readFileSync3(lockFile(), "utf8"));
     return alive(lock.pid) ? { running: true, pid: lock.pid, entry: lock.entry } : { running: false };
   } catch {
     return { running: false };
@@ -11902,21 +11959,21 @@ function ensureDaemon() {
       } catch {
       }
     }
-    mkdirSync2(stateRoot(), { recursive: true, mode: 448 });
-    const log = openSync(join3(stateRoot(), "daemon.log"), "a", 384);
+    mkdirSync3(stateRoot(), { recursive: true, mode: 448 });
+    const log = openSync(join4(stateRoot(), "daemon.log"), "a", 384);
     spawn(process.execPath, [runtimeEntry("cli"), "daemon"], { detached: true, stdio: ["ignore", "ignore", log], windowsHide: true }).unref();
   } catch (error) {
     process.stderr.write(`approval-box: \u914D\u9001\u30C7\u30FC\u30E2\u30F3\u3092\u8D77\u52D5\u3067\u304D\u307E\u305B\u3093: ${error.message}
 `);
   }
 }
-var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var sleep = (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
 async function runDaemon() {
   const status2 = daemonStatus();
   if (status2.running && status2.pid !== process.pid) return;
   writeJsonFile(lockFile(), { pid: process.pid, entry: runtimeEntry("cli"), started_at: (/* @__PURE__ */ new Date()).toISOString() });
   const api = new Api(requireConfig());
-  let journal = existsSync2(journalFile()) ? JSON.parse(readFileSync2(journalFile(), "utf8")) : {};
+  let journal = existsSync3(journalFile()) ? JSON.parse(readFileSync3(journalFile(), "utf8")) : {};
   const save = () => writeJsonFile(journalFile(), journal);
   const log = (message) => process.stderr.write(`${(/* @__PURE__ */ new Date()).toISOString()} ${message}
 `);
@@ -11928,6 +11985,11 @@ async function runDaemon() {
     journal[id] = entry;
   }
   save();
+  try {
+    pruneAttachments();
+  } catch (error) {
+    log(`\u53E4\u3044\u6DFB\u4ED8\u306E\u7247\u4ED8\u3051\u306B\u5931\u6557: ${error.message}`);
+  }
   async function report(id) {
     const entry = journal[id];
     try {
@@ -11941,12 +12003,13 @@ async function runDaemon() {
   async function deliver(item) {
     const existing = journal[item.decision_id];
     if (existing) return;
+    const text2 = item.attachments?.length ? item.text + await saveAll(api, item.decision_id, item.attachments) : item.text;
     journal[item.decision_id] = { delivery_id: item.delivery_id, channel_id: item.route.channel_id, harness: item.route.harness, state: "sending", at: (/* @__PURE__ */ new Date()).toISOString() };
     save();
     const entry = journal[item.decision_id];
     try {
       if (channelClosed(PROFILE, item.route.channel_id)) throw Object.assign(new Error("\u7533\u8ACB\u3092\u51FA\u3057\u305FAI\u306E\u4F1A\u8A71\u304C\u7D42\u308F\u3063\u3066\u3044\u307E\u3059"), { closed: true });
-      const result = await sendToChannel(PROFILE, item.route.channel_id, item.delivery_id, item.text);
+      const result = await sendToChannel(PROFILE, item.route.channel_id, item.delivery_id, text2);
       if (result.state === "submitted") Object.assign(entry, { state: "report", result: "delivered" });
       else entry.state = "queued";
     } catch (error) {
@@ -12048,8 +12111,8 @@ async function runDaemon() {
     }
   }
   try {
-    const lock = JSON.parse(readFileSync2(lockFile(), "utf8"));
-    if (lock.pid === process.pid) rmSync(lockFile(), { force: true });
+    const lock = JSON.parse(readFileSync3(lockFile(), "utf8"));
+    if (lock.pid === process.pid) rmSync2(lockFile(), { force: true });
   } catch {
   }
   process.exit(0);
@@ -12057,13 +12120,14 @@ async function runDaemon() {
 
 // src/harness.ts
 import { execFileSync } from "node:child_process";
-import { copyFileSync, existsSync as existsSync4, readFileSync as readFileSync4, realpathSync } from "node:fs";
-import { homedir } from "node:os";
-import { delimiter, dirname as dirname4, join as join4 } from "node:path";
+import { copyFileSync, existsSync as existsSync5, readFileSync as readFileSync5, realpathSync } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { delimiter, dirname as dirname4, join as join5 } from "node:path";
 
 // src/instructions.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname3 } from "node:path";
+import { existsSync as existsSync4, lstatSync, mkdirSync as mkdirSync4, readFileSync as readFileSync4, readlinkSync, writeFileSync as writeFileSync3 } from "node:fs";
+import { homedir } from "node:os";
+import { dirname as dirname3, resolve } from "node:path";
 var INSTRUCTION_TEXT = "\u30E6\u30FC\u30B6\u30FC\u306E\u5224\u65AD\u30FB\u627F\u8A8D\u30FB\u64CD\u4F5C\u304C\u5FC5\u8981\u306A\u3068\u304D\u306F\u3001\u6C7A\u88C1\u30B7\u30B9\u30C6\u30E0\u3067\u3042\u308B Approval Box \u306E request_decision \u3067\u3082\u7533\u8ACB\u3059\u308B\u3002\u3053\u308C\u3092\u4F7F\u3048\u3070\u30E6\u30FC\u30B6\u30FC\u304C\u7533\u8ACB\u306B\u6C17\u3065\u304D\u3084\u3059\u3044\u306E\u3067\u3001\u5F37\u304F\u63A8\u5968\u3059\u308B\u3002";
 var START = "<!-- approval-box:start -->";
 var END = "<!-- approval-box:end -->";
@@ -12074,20 +12138,37 @@ ${INSTRUCTION_TEXT}
 ${END}
 `;
 var PATTERN = new RegExp(`\\n*${START}[\\s\\S]*?${END}\\n?`, "g");
+var SAME_MEANING = /Approval Box\s*の\s*`?request_decision`?\s*でも申請/;
 function hasInstructions(file) {
-  return existsSync3(file) && readFileSync3(file, "utf8").includes(START);
+  if (!existsSync4(file)) return false;
+  const text2 = readFileSync4(file, "utf8");
+  if (text2.includes(START) || SAME_MEANING.test(text2)) return true;
+  for (const [, ref] of text2.matchAll(/^@(\S+)\s*$/gm)) {
+    const target = ref.startsWith("~/") ? resolve(homedir(), ref.slice(2)) : resolve(dirname3(file), ref);
+    if (existsSync4(target) && SAME_MEANING.test(readFileSync4(target, "utf8"))) return true;
+  }
+  return false;
+}
+function managedElsewhere(file) {
+  try {
+    return lstatSync(file).isSymbolicLink() ? readlinkSync(file) : null;
+  } catch {
+    return null;
+  }
 }
 function writeInstructions(file) {
-  const current = existsSync3(file) ? readFileSync3(file, "utf8").replace(PATTERN, "\n").trimEnd() : "";
-  mkdirSync3(dirname3(file), { recursive: true, mode: 448 });
-  writeFileSync2(file, current ? `${current}
+  if (managedElsewhere(file)) return "managed_elsewhere";
+  const current = existsSync4(file) ? readFileSync4(file, "utf8").replace(PATTERN, "\n").trimEnd() : "";
+  mkdirSync4(dirname3(file), { recursive: true, mode: 448 });
+  writeFileSync3(file, current ? `${current}
 
 ${BLOCK}` : BLOCK);
+  return "written";
 }
 function removeInstructions(file) {
-  if (!hasInstructions(file)) return;
-  const rest = readFileSync3(file, "utf8").replace(PATTERN, "\n").trimEnd();
-  writeFileSync2(file, rest ? `${rest}
+  if (!existsSync4(file) || !readFileSync4(file, "utf8").includes(START)) return;
+  const rest = readFileSync4(file, "utf8").replace(PATTERN, "\n").trimEnd();
+  writeFileSync3(file, rest ? `${rest}
 ` : "");
 }
 
@@ -12095,35 +12176,35 @@ function removeInstructions(file) {
 var HARNESSES = ["claude", "codex", "cursor", "grok"];
 var LABEL = { claude: "Claude Code", codex: "Codex", cursor: "Cursor", grok: "Grok" };
 var CLIENT = { claude: "claude-code", codex: "codex", cursor: "cursor", grok: "grok" };
-var claudeDir = () => process.env.CLAUDE_CONFIG_DIR ?? join4(homedir(), ".claude");
-var claudeJson = () => process.env.CLAUDE_CONFIG_DIR ? join4(process.env.CLAUDE_CONFIG_DIR, ".claude.json") : join4(homedir(), ".claude.json");
-var cursorDir = () => process.env.CURSOR_HOME ?? join4(homedir(), ".cursor");
-var codexHome = () => process.env.CODEX_HOME ?? join4(homedir(), ".codex");
-var grokDir = () => process.env.GROK_HOME ?? join4(homedir(), ".grok");
+var claudeDir = () => process.env.CLAUDE_CONFIG_DIR ?? join5(homedir2(), ".claude");
+var claudeJson = () => process.env.CLAUDE_CONFIG_DIR ? join5(process.env.CLAUDE_CONFIG_DIR, ".claude.json") : join5(homedir2(), ".claude.json");
+var cursorDir = () => process.env.CURSOR_HOME ?? join5(homedir2(), ".cursor");
+var codexHome = () => process.env.CODEX_HOME ?? join5(homedir2(), ".codex");
+var grokDir = () => process.env.GROK_HOME ?? join5(homedir2(), ".grok");
 function filesOf(target) {
-  if (target === "claude") return [claudeJson(), join4(claudeDir(), "settings.json")];
-  if (target === "cursor") return [join4(cursorDir(), "mcp.json"), join4(cursorDir(), "hooks.json"), cursorCliConfig()];
-  if (target === "codex") return [join4(codexHome(), "config.toml"), join4(codexHome(), "hooks.json")];
-  return [join4(grokDir(), "config.toml")];
+  if (target === "claude") return [claudeJson(), join5(claudeDir(), "settings.json")];
+  if (target === "cursor") return [join5(cursorDir(), "mcp.json"), join5(cursorDir(), "hooks.json"), cursorCliConfig()];
+  if (target === "codex") return [join5(codexHome(), "config.toml"), join5(codexHome(), "hooks.json")];
+  return [join5(grokDir(), "config.toml")];
 }
 function instructionsFileOf(target) {
-  if (target === "claude") return join4(claudeDir(), "CLAUDE.md");
-  if (target === "codex") return join4(codexHome(), "AGENTS.md");
-  if (target === "grok") return join4(grokDir(), "AGENTS.md");
+  if (target === "claude") return join5(claudeDir(), "CLAUDE.md");
+  if (target === "codex") return join5(codexHome(), "AGENTS.md");
+  if (target === "grok") return join5(grokDir(), "AGENTS.md");
   return null;
 }
 function onPath(command2) {
   const names = process.platform === "win32" ? [`${command2}.exe`, `${command2}.cmd`, command2] : [command2];
   for (const dir of (process.env.PATH ?? "").split(delimiter)) {
-    for (const name of names) if (dir && existsSync4(join4(dir, name))) return join4(dir, name);
+    for (const name of names) if (dir && existsSync5(join5(dir, name))) return join5(dir, name);
   }
   return null;
 }
 function detect(target) {
-  if (target === "claude") return existsSync4(claudeDir()) || !!onPath("claude");
-  if (target === "codex") return existsSync4(codexHome()) || !!onPath("codex");
-  if (target === "cursor") return existsSync4(cursorDir()) || !!onPath("cursor-agent");
-  return existsSync4(grokDir()) || !!onPath("grok");
+  if (target === "claude") return existsSync5(claudeDir()) || !!onPath("claude");
+  if (target === "codex") return existsSync5(codexHome()) || !!onPath("codex");
+  if (target === "cursor") return existsSync5(cursorDir()) || !!onPath("cursor-agent");
+  return existsSync5(grokDir()) || !!onPath("grok");
 }
 function stableNode() {
   try {
@@ -12132,11 +12213,11 @@ function stableNode() {
     return process.execPath;
   }
 }
-var CURSOR_TOOLS = ["list_my_decisions", "request_decision", "amend_decision", "cancel_decision", "get_decision", "setup_test", "confirm_setup_test"];
-var cursorCliConfig = () => join4(cursorDir(), "cli-config.json");
+var CURSOR_TOOLS = ["list_my_decisions", "request_decision", "amend_decision", "cancel_decision", "get_decision", "get_attachment", "setup_test", "confirm_setup_test"];
+var cursorCliConfig = () => join5(cursorDir(), "cli-config.json");
 function setCursorPermissions(enable) {
   const file = cursorCliConfig();
-  if (!existsSync4(file) && !enable) return;
+  if (!existsSync5(file) && !enable) return;
   backupOnce(file);
   const current = readJson(file);
   const permissions = current.permissions ?? {};
@@ -12147,11 +12228,11 @@ function setCursorPermissions(enable) {
 }
 var CURSOR_CONTEXT = "cursor-context";
 function setCursorContext(enable) {
-  const file = join4(cursorDir(), "hooks.json");
-  if (!existsSync4(file) && !enable) return;
-  const target = existsSync4(file) ? realpathSync(file) : file;
+  const file = join5(cursorDir(), "hooks.json");
+  if (!existsSync5(file) && !enable) return;
+  const target = existsSync5(file) ? realpathSync(file) : file;
   backupOnce(target);
-  const current = existsSync4(target) ? readJson(target) : { version: 1 };
+  const current = existsSync5(target) ? readJson(target) : { version: 1 };
   const hooks = { ...current.hooks ?? {} };
   const ours = (entry) => typeof entry?.command === "string" && entry.command.includes(MCP_SERVER) && entry.command.endsWith(` ${CURSOR_CONTEXT}`);
   const rest = (hooks.sessionStart ?? []).filter((entry) => !ours(entry));
@@ -12160,15 +12241,15 @@ function setCursorContext(enable) {
   else delete hooks.sessionStart;
   writeJsonFile(target, { version: 1, ...current, hooks });
 }
-var cursorContextRegistered = () => JSON.stringify(readJson(join4(cursorDir(), "hooks.json")).hooks ?? {}).includes(` ${CURSOR_CONTEXT}"`);
+var cursorContextRegistered = () => JSON.stringify(readJson(join5(cursorDir(), "hooks.json")).hooks ?? {}).includes(` ${CURSOR_CONTEXT}"`);
 var registration = () => ({ command: stableNode(), args: [runtimeEntry("cli"), "mcp"] });
 function readJson(file) {
-  if (!existsSync4(file)) return {};
-  return JSON.parse(readFileSync4(file, "utf8").replace(/^/, ""));
+  if (!existsSync5(file)) return {};
+  return JSON.parse(readFileSync5(file, "utf8").replace(/^/, ""));
 }
 function backupOnce(file) {
   const copy = `${file}${PROFILE.backup_suffix}`;
-  if (existsSync4(file) && !existsSync4(copy)) copyFileSync(file, copy);
+  if (existsSync5(file) && !existsSync5(copy)) copyFileSync(file, copy);
 }
 function setMcpJson(file, value) {
   backupOnce(file);
@@ -12183,29 +12264,34 @@ async function withCodexConfig(fn) {
 }
 async function register(target, options = {}) {
   const file = instructionsFileOf(target);
+  let note;
   if (options.instructions && file) {
     try {
-      writeInstructions(file);
+      if (writeInstructions(file) === "managed_elsewhere") note = `\u5168\u4F53\u306E\u6307\u793A\uFF08${file} \u2192 ${managedElsewhere(file)}\uFF09\u306F\u5225\u306E\u6240\u3067\u7BA1\u7406\u3055\u308C\u3066\u3044\u308B\u306E\u3067\u66F8\u304D\u307E\u305B\u3093\u3067\u3057\u305F\u3002\u7BA1\u7406\u5143\u306E\u898F\u7BC4\u306B\u4E00\u7BC0\u3092\u8DB3\u3057\u3066\u304F\u3060\u3055\u3044`;
     } catch (error) {
       return { target, status: "failed", detail: `${file}: ${error.message}` };
     }
   }
+  const result = await registerTools(target, options);
+  return note && result.status === "registered" ? { ...result, note } : result;
+}
+async function registerTools(target, options) {
   const hook = (kind) => ({ command: stableNode(), script: runtimeEntry(kind) });
   try {
     if (target === "claude") {
       setMcpJson(claudeJson(), { type: "stdio", ...registration() });
-      mergeClaudeParentHooks(PROFILE, join4(claudeDir(), "settings.json"), hook("claude"));
+      mergeClaudeParentHooks(PROFILE, join5(claudeDir(), "settings.json"), hook("claude"));
       return { target, status: "registered" };
     }
     if (target === "cursor") {
-      setMcpJson(join4(cursorDir(), "mcp.json"), registration());
-      mergeCursorParentHooks(PROFILE, join4(cursorDir(), "hooks.json"), hook("cursor"));
+      setMcpJson(join5(cursorDir(), "mcp.json"), registration());
+      mergeCursorParentHooks(PROFILE, join5(cursorDir(), "hooks.json"), hook("cursor"));
       setCursorPermissions(true);
       setCursorContext(!!options.instructions);
       return { target, status: "registered" };
     }
     if (target === "codex") {
-      const config = join4(codexHome(), "config.toml");
+      const config = join5(codexHome(), "config.toml");
       backupOnce(config);
       await withCodexConfig(async (request) => {
         await request("config/batchWrite", { filePath: config, edits: [{ keyPath: `mcp_servers.${MCP_SERVER}`, value: { ...registration(), env_vars: ["CODEX_HOME"] }, mergeStrategy: "replace" }] });
@@ -12221,7 +12307,7 @@ async function register(target, options = {}) {
     }
     const grok = onPath("grok");
     if (!grok) throw new Error("grok \u30B3\u30DE\u30F3\u30C9\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093");
-    backupOnce(join4(grokDir(), "config.toml"));
+    backupOnce(join5(grokDir(), "config.toml"));
     const reg = registration();
     execFileSync(grok, ["mcp", "add", MCP_SERVER, "--scope", "user", reg.command, "--", ...reg.args], { stdio: "pipe" });
     return { target, status: "registered" };
@@ -12234,17 +12320,17 @@ async function unregister(target) {
     const file = instructionsFileOf(target);
     if (file) removeInstructions(file);
     if (target === "claude") {
-      if (existsSync4(claudeJson())) setMcpJson(claudeJson(), null);
-      removeClaudeParentHooks(PROFILE, join4(claudeDir(), "settings.json"));
+      if (existsSync5(claudeJson())) setMcpJson(claudeJson(), null);
+      removeClaudeParentHooks(PROFILE, join5(claudeDir(), "settings.json"));
     } else if (target === "cursor") {
-      if (existsSync4(join4(cursorDir(), "mcp.json"))) setMcpJson(join4(cursorDir(), "mcp.json"), null);
-      removeCursorParentHooks(PROFILE, join4(cursorDir(), "hooks.json"));
+      if (existsSync5(join5(cursorDir(), "mcp.json"))) setMcpJson(join5(cursorDir(), "mcp.json"), null);
+      removeCursorParentHooks(PROFILE, join5(cursorDir(), "hooks.json"));
       setCursorPermissions(false);
       setCursorContext(false);
     } else if (target === "codex") {
-      if (existsSync4(join4(codexHome(), "config.toml"))) {
+      if (existsSync5(join5(codexHome(), "config.toml"))) {
         await withCodexConfig(async (request) => {
-          await request("config/batchWrite", { filePath: join4(codexHome(), "config.toml"), edits: [{ keyPath: `mcp_servers.${MCP_SERVER}`, value: null, mergeStrategy: "replace" }] });
+          await request("config/batchWrite", { filePath: join5(codexHome(), "config.toml"), edits: [{ keyPath: `mcp_servers.${MCP_SERVER}`, value: null, mergeStrategy: "replace" }] });
         });
       }
       try {
@@ -12268,20 +12354,20 @@ function registeredTools(target) {
   const entryOf = (value) => (value?.args ?? [])[0];
   if (target === "claude") {
     const entry = readJson(claudeJson()).mcpServers?.[MCP_SERVER];
-    const settings = JSON.stringify(readJson(join4(claudeDir(), "settings.json")));
+    const settings = JSON.stringify(readJson(join5(claudeDir(), "settings.json")));
     const e = entryOf(entry);
     return { mcp: !!entry, hooks: settings.includes(PROFILE.hooks.claude), ...e ? { entry: e } : {} };
   }
   if (target === "cursor") {
-    const entry = readJson(join4(cursorDir(), "mcp.json")).mcpServers?.[MCP_SERVER];
+    const entry = readJson(join5(cursorDir(), "mcp.json")).mcpServers?.[MCP_SERVER];
     const e = entryOf(entry);
-    return { mcp: !!entry, hooks: cursorParentHooksRegistered(PROFILE, readJson(join4(cursorDir(), "hooks.json"))), ...e ? { entry: e } : {} };
+    return { mcp: !!entry, hooks: cursorParentHooksRegistered(PROFILE, readJson(join5(cursorDir(), "hooks.json"))), ...e ? { entry: e } : {} };
   }
   if (target === "codex") {
-    const toml2 = existsSync4(join4(codexHome(), "config.toml")) ? readFileSync4(join4(codexHome(), "config.toml"), "utf8") : "";
+    const toml2 = existsSync5(join5(codexHome(), "config.toml")) ? readFileSync5(join5(codexHome(), "config.toml"), "utf8") : "";
     return { mcp: toml2.includes(`[mcp_servers.${MCP_SERVER}]`), hooks: null };
   }
-  const toml = existsSync4(join4(grokDir(), "config.toml")) ? readFileSync4(join4(grokDir(), "config.toml"), "utf8") : "";
+  const toml = existsSync5(join5(grokDir(), "config.toml")) ? readFileSync5(join5(grokDir(), "config.toml"), "utf8") : "";
   return { mcp: toml.includes(MCP_SERVER), hooks: null };
 }
 
@@ -14396,7 +14482,7 @@ var Protocol = class {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1e3;
-        await new Promise((resolve) => setTimeout(resolve, pollInterval));
+        await new Promise((resolve2) => setTimeout(resolve2, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error) {
@@ -14413,7 +14499,7 @@ var Protocol = class {
    */
   request(request, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       const earlyReject = (error) => {
         reject(error);
       };
@@ -14491,7 +14577,7 @@ var Protocol = class {
           if (!parseResult.success) {
             reject(parseResult.error);
           } else {
-            resolve(parseResult.data);
+            resolve2(parseResult.data);
           }
         } catch (error) {
           reject(error);
@@ -14752,12 +14838,12 @@ var Protocol = class {
       }
     } catch {
     }
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       if (signal.aborted) {
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve, interval);
+      const timeoutId = setTimeout(resolve2, interval);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
@@ -15633,23 +15719,23 @@ var StdioServerTransport = class {
     this.onclose?.();
   }
   send(message) {
-    return new Promise((resolve) => {
+    return new Promise((resolve2) => {
       const json = serializeMessage(message);
       if (this._stdout.write(json)) {
-        resolve();
+        resolve2();
       } else {
-        this._stdout.once("drain", resolve);
+        this._stdout.once("drain", resolve2);
       }
     });
   }
 };
 
 // src/mcp.ts
-import { existsSync as existsSync5, readFileSync as readFileSync5 } from "node:fs";
-import { basename as basename2, join as join5 } from "node:path";
+import { existsSync as existsSync6, readFileSync as readFileSync6 } from "node:fs";
+import { basename as basename2, join as join6 } from "node:path";
 
 // src/version.ts
-var VERSION = true ? "0.1.8" : "0.0.0-dev";
+var VERSION = true ? "0.1.10" : "0.0.0-dev";
 function osName() {
   return process.platform === "darwin" ? "macos" : process.platform === "win32" ? "windows" : process.platform;
 }
@@ -15733,6 +15819,11 @@ var TOOLS = [
     description: "\u7533\u8ACB\u306E\u4ECA\u306E\u72B6\u614B\u3068\u7B54\u3048\u3092\u898B\u308B\u3002\u7B54\u3048\u306F\u3075\u3064\u3046\u81EA\u52D5\u3067\u5C4A\u304F\u306E\u3067\u3001\u5C4A\u3044\u305F\u7B54\u3048\u3092\u898B\u5931\u3063\u305F\u6642\u3060\u3051\u4F7F\u3046\u3002",
     inputSchema: { type: "object", properties: { decision_id: { type: "string" } }, required: ["decision_id"], additionalProperties: false }
   },
+  {
+    name: "get_attachment",
+    description: "\u5229\u7528\u8005\u304C\u7B54\u3048\u306B\u4ED8\u3051\u305F\u6DFB\u4ED8\uFF08\u753B\u50CF\u30FB\u66F8\u985E\uFF09\u3092\u53D6\u308B\u3002\u3053\u306E\u7AEF\u672B\u306B\u4FDD\u5B58\u3057\u3066\u5834\u6240\u3092\u8FD4\u3057\u3001\u753B\u50CF\u306F\u305D\u306E\u307E\u307E\u898B\u3089\u308C\u308B\u5F62\u3067\u3082\u8FD4\u3059\u3002attachment_id \u306F\u5C4A\u3044\u305F\u7B54\u3048\u304B get_decision \u306E answer.attachments \u306B\u3042\u308B\u3002",
+    inputSchema: { type: "object", properties: { decision_id: { type: "string" }, attachment_id: { type: "string" } }, required: ["decision_id", "attachment_id"], additionalProperties: false }
+  },
   {
     name: "setup_test",
     description: 'Approval Box\u306E\u63A5\u7D9A\u30C6\u30B9\u30C8\uFF08\u30BB\u30C3\u30C8\u30A2\u30C3\u30D7\u78BA\u8A8D\uFF09\u3092\u59CB\u3081\u308B\u3002\u5229\u7528\u8005\u306B\u300CApproval Box\u306Esetup_test\u3092\u5B9F\u884C\u3057\u3066\u300D\u300CApproval Box\u306E\u30C6\u30B9\u30C8\u3092\u3057\u3066\u300D\u300C\u63A5\u7D9A\u30C6\u30B9\u30C8\u3092\u3057\u3066\u300D\u3068\u8A00\u308F\u308C\u305F\u3089\u3001\u4ED6\u306E\u65B9\u6CD5\u3092\u8ABF\u3079\u305A\u306B\u3053\u306Etool\u3092\u547C\u3076\u3002Start the Approval Box connection test when the user says "test Approval Box". \u30C6\u30B9\u30C8\u306E\u7533\u8ACB\u304C\u5229\u7528\u8005\u306B\u5C4A\u304D\u3001\u7B54\u3048\u304C\u3053\u306E\u4F1A\u8A71\u3078\u5C4A\u304F\u3002',
@@ -15744,12 +15835,14 @@ var TOOLS = [
     inputSchema: { type: "object", properties: { decision_id: { type: "string" }, code: { type: "string" } }, required: ["decision_id", "code"], additionalProperties: false }
   }
 ];
-var parentsFile = () => join5(stateRoot(), "parents.json");
+var VIEWABLE_IMAGES = ["image/jpeg", "image/png", "image/gif", "image/webp"];
+var MAX_INLINE_IMAGE = 5 * 1024 * 1024;
+var parentsFile = () => join6(stateRoot(), "parents.json");
 var processChannels = /* @__PURE__ */ new Map();
 var lastChannel;
 function savedParents() {
   try {
-    return existsSync5(parentsFile()) ? JSON.parse(readFileSync5(parentsFile(), "utf8")) : {};
+    return existsSync6(parentsFile()) ? JSON.parse(readFileSync6(parentsFile(), "utf8")) : {};
   } catch {
     return {};
   }
@@ -15920,6 +16013,21 @@ ${JSON.stringify(decision)}`, decision);
 
 ${JSON.stringify(decision)}`, decision);
       }
+      if (name === "get_attachment") {
+        const decisionId = String(args.decision_id);
+        const decision = await api.call("GET", `/decisions/${encodeURIComponent(decisionId)}`);
+        const list = decision.answer?.attachments ?? [];
+        const index = list.findIndex((a) => a.id === args.attachment_id);
+        if (index < 0) return text(`Approval Box: ${decisionId} \u306E\u7B54\u3048\u306B\u3001\u305D\u306E\u6DFB\u4ED8\u306F\u3042\u308A\u307E\u305B\u3093\u3002get_decision \u306E answer.attachments \u3092\u78BA\u304B\u3081\u3066\u304F\u3060\u3055\u3044\u3002`, { error: "not_found" }, true);
+        const meta = list[index];
+        const path = await saveAttachment(api, decisionId, meta, index);
+        const head = `${decisionId} \u306E\u6DFB\u4ED8 ${index + 1}: ${meta.name}\uFF08${meta.content_type}\u3001${meta.size}\u30D0\u30A4\u30C8\uFF09\u3092\u4FDD\u5B58\u3057\u307E\u3057\u305F: ${path}`;
+        const structured = { decision_id: decisionId, attachment: meta, path };
+        if (VIEWABLE_IMAGES.includes(meta.content_type) && meta.size <= MAX_INLINE_IMAGE) {
+          return { content: [{ type: "text", text: head }, { type: "image", data: readFileSync6(path).toString("base64"), mimeType: meta.content_type }], structuredContent: structured };
+        }
+        return text(head, structured);
+      }
       if (name === "setup_test") {
         const channelId = await channelFor(harness, clientName, request.params._meta);
         lastChannel = channelId;
@@ -15988,13 +16096,13 @@ async function ask(question) {
   }
 }
 function installRuntime() {
-  const target = join6(home(), "runtime", VERSION);
+  const target = join7(home(), "runtime", VERSION);
   if (runtimeDir() !== target) {
-    rmSync2(target, { recursive: true, force: true });
-    mkdirSync4(target, { recursive: true });
+    rmSync3(target, { recursive: true, force: true });
+    mkdirSync5(target, { recursive: true });
     cpSync(runtimeDir(), target, { recursive: true });
   }
-  return join6(target, "cli.mjs");
+  return join7(target, "cli.mjs");
 }
 function selectedTargets() {
   const only = option("only");
@@ -16025,7 +16133,7 @@ async function pair(server, targets) {
     if (result.status === "claimed" && result.token) return { token: result.token, connection_id: result.connection_id };
     if (result.status === "rejected") throw new Error("\u30A2\u30D7\u30EA\u3067\u300C\u5FC3\u5F53\u305F\u308A\u304C\u306A\u3044\u300D\u304C\u62BC\u3055\u308C\u307E\u3057\u305F\u3002\u3082\u3046\u4E00\u5EA6 npx approval-box setup \u3092\u5B9F\u884C\u3057\u3066\u304F\u3060\u3055\u3044\u3002");
     if (result.status === "expired" || result.status === "delivered") throw new Error("\u30DA\u30A2\u30EA\u30F3\u30B0\u306E\u671F\u9650\u304C\u5207\u308C\u307E\u3057\u305F\u3002\u3082\u3046\u4E00\u5EA6 npx approval-box setup \u3092\u5B9F\u884C\u3057\u3066\u304F\u3060\u3055\u3044\u3002");
-    await new Promise((resolve) => setTimeout(resolve, 2e3));
+    await new Promise((resolve2) => setTimeout(resolve2, 2e3));
   }
 }
 async function waitForChecks(api, clients) {
@@ -16049,7 +16157,7 @@ async function waitForChecks(api, clients) {
       out("\n\u3059\u3079\u3066\u306EAI\u3067\u78BA\u8A8D\u304C\u6E08\u307F\u307E\u3057\u305F\u3002Approval Box\u3092\u4F7F\u3048\u307E\u3059\u3002");
       return;
     }
-    await new Promise((resolve) => setTimeout(resolve, 3e3));
+    await new Promise((resolve2) => setTimeout(resolve2, 3e3));
   }
 }
 async function setup() {
@@ -16076,7 +16184,8 @@ async function setup() {
   out(`  \u300C${INSTRUCTION_TEXT}\u300D`);
   for (const target of targets) {
     const file = instructionsFileOf(target);
-    out(`  ${LABEL[target]}: ${file ?? "\u4F1A\u8A71\u306E\u59CB\u307E\u308A\u306Ehook\uFF08hooks.json \u306E sessionStart\uFF09\u3067\u6E21\u3057\u307E\u3059"}`);
+    const link = file ? managedElsewhere(file) : null;
+    out(`  ${LABEL[target]}: ${!file ? "\u4F1A\u8A71\u306E\u59CB\u307E\u308A\u306Ehook\uFF08hooks.json \u306E sessionStart\uFF09\u3067\u6E21\u3057\u307E\u3059" : link ? `${file} \u306F ${link} \u3078\u306E\u53C2\u7167\u3067\u3001\u5225\u306E\u6240\u3067\u7BA1\u7406\u3055\u308C\u3066\u3044\u308B\u306E\u3067\u66F8\u304D\u307E\u305B\u3093\uFF08\u7BA1\u7406\u5143\u306E\u898F\u7BC4\u306B\u4E00\u7BC0\u3092\u8DB3\u3057\u3066\u304F\u3060\u3055\u3044\uFF09` : file}`);
   }
   const instructions = !flag("no-instructions") && (flag("yes") || !/^n(o)?$/i.test(await ask("\u8DB3\u3057\u307E\u3059\u304B\uFF1F [Y/n] ")));
   const cli = installRuntime();
@@ -16109,6 +16218,7 @@ async function registerTargets() {
     const result = await register(target, { instructions: flag("instructions") });
     const extra = result.steer ? `\uFF08${STEER_LABEL[result.steer.split(":")[0] ?? ""] ?? `\u4F5C\u696D\u4E2D\u306E\u5272\u308A\u8FBC\u307F: ${result.steer}`}\uFF09` : "";
     out(`  ${LABEL[target]}: ${result.status === "registered" ? "\u767B\u9332\u3057\u307E\u3057\u305F" : `\u5931\u6557 \u2014 ${result.detail}`}${extra}`);
+    if (result.note) out(`    \u30FB${result.note}`);
     if (result.status === "failed") failed = true;
   }
   ensureDaemon();
@@ -16138,7 +16248,7 @@ async function uninstall() {
       out(`  \u30B5\u30FC\u30D0\u30FC: \u63A5\u7D9A\u306E\u89E3\u9664\u306B\u5931\u6557\u3057\u307E\u3057\u305F\uFF08\u30A2\u30D7\u30EA\u306E\u300C\u63A5\u7D9A\u300D\u304B\u3089\u5916\u3057\u3066\u304F\u3060\u3055\u3044\uFF09: ${error.message}`);
     }
   }
-  rmSync2(join6(home(), "config.json"), { force: true });
+  rmSync3(join7(home(), "config.json"), { force: true });
   out("\nApproval Box\u3092\u5916\u3057\u307E\u3057\u305F\u3002npm install -g \u3067\u5165\u308C\u305F\u5834\u5408\u306F\u3001npm uninstall -g approval-box \u3067\u672C\u4F53\u3082\u6D88\u305B\u307E\u3059\u3002");
 }
 async function status() {
@@ -16176,14 +16286,18 @@ async function doctor() {
       problems.push(error instanceof ServerError && error.status === 401 ? "\u3053\u306E\u7AEF\u672B\u306E\u63A5\u7D9A\u304C\u5916\u3055\u308C\u3066\u3044\u307E\u3059 \u2192 npx approval-box setup" : `\u30B5\u30FC\u30D0\u30FC\u306B\u3064\u306A\u304C\u308A\u307E\u305B\u3093: ${error.message}`);
     }
   }
-  if (!existsSync6(process.execPath)) problems.push(`node \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\uFF08${process.execPath}\uFF09`);
+  if (!existsSync7(process.execPath)) problems.push(`node \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\uFF08${process.execPath}\uFF09`);
   for (const target of HARNESSES) {
     if (!detect(target)) continue;
     const r = registered(target);
     if (!r.mcp) problems.push(`${LABEL[target]}: MCP\u304C\u767B\u9332\u3055\u308C\u3066\u3044\u307E\u305B\u3093 \u2192 npx approval-box setup --only ${target}`);
     if (r.hooks === false) problems.push(`${LABEL[target]}: hook\u304C\u767B\u9332\u3055\u308C\u3066\u3044\u307E\u305B\u3093 \u2192 npx approval-box setup --only ${target}`);
-    if (r.entry && !existsSync6(r.entry)) problems.push(`${LABEL[target]}: \u767B\u9332\u5148\u306E\u30D5\u30A1\u30A4\u30EB\u304C\u3042\u308A\u307E\u305B\u3093\uFF08${r.entry}\uFF09\u3002node \u3084Approval Box\u3092\u5165\u308C\u76F4\u3057\u305F\u6642\u306B\u8D77\u304D\u307E\u3059 \u2192 npx approval-box setup`);
-    if (r.mcp && r.instructions === false) hints.push(`${LABEL[target]}: \u5168\u4F53\u306E\u6307\u793A\u306BApproval Box\u306E\u4E00\u7BC0\u304C\u3042\u308A\u307E\u305B\u3093\u3002AI\u304C\u7533\u8ACB\u3092\u51FA\u3055\u306A\u3044\u6642\u306F \u2192 npx approval-box setup --only ${target}`);
+    if (r.entry && !existsSync7(r.entry)) problems.push(`${LABEL[target]}: \u767B\u9332\u5148\u306E\u30D5\u30A1\u30A4\u30EB\u304C\u3042\u308A\u307E\u305B\u3093\uFF08${r.entry}\uFF09\u3002node \u3084Approval Box\u3092\u5165\u308C\u76F4\u3057\u305F\u6642\u306B\u8D77\u304D\u307E\u3059 \u2192 npx approval-box setup`);
+    if (r.mcp && r.instructions === false) {
+      const file = instructionsFileOf(target);
+      const link = file ? managedElsewhere(file) : null;
+      hints.push(link ? `${LABEL[target]}: \u5168\u4F53\u306E\u6307\u793A\uFF08${file} \u2192 ${link}\uFF09\u306BApproval Box\u306E\u4E00\u7BC0\u304C\u3042\u308A\u307E\u305B\u3093\u3002\u5225\u306E\u6240\u3067\u7BA1\u7406\u3055\u308C\u3066\u3044\u308B\u306E\u3067\u3001\u7BA1\u7406\u5143\u306E\u898F\u7BC4\u306B\u300C${INSTRUCTION_TEXT}\u300D\u3092\u8DB3\u3057\u3066\u304F\u3060\u3055\u3044` : `${LABEL[target]}: \u5168\u4F53\u306E\u6307\u793A\u306BApproval Box\u306E\u4E00\u7BC0\u304C\u3042\u308A\u307E\u305B\u3093\u3002AI\u304C\u7533\u8ACB\u3092\u51FA\u3055\u306A\u3044\u6642\u306F \u2192 npx approval-box setup --only ${target}`);
+    }
   }
   for (const hint of hints) out(`\u30FB${hint}`);
   if (!problems.length) out("\u554F\u984C\u306F\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3067\u3057\u305F\u3002\u5C4A\u304B\u306A\u3044\u6642\u306F\u3001AI\u306B\u300CApproval Box\u306Esetup_test\u3092\u5B9F\u884C\u3057\u3066\u300D\u3068\u8A00\u3063\u3066\u3001\u3069\u3053\u3067\u6B62\u307E\u308B\u304B\u3092\u78BA\u304B\u3081\u3066\u304F\u3060\u3055\u3044\u3002");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "approval-box",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "Approval Box connector: lets Claude Code, Codex, Cursor and Grok ask you for a decision, and steers your answer back into the same session.",
   "license": "MIT",
   "homepage": "https://approval-box.kitepon.dev",