expandai 0.0.3 → 0.0.4

package/build/esm/Install/Claude/Hook.js

@@ -1,6 +1,5 @@
 import { homedir } from 'node:os';
-import { Array, Config, Console, Effect, Match, Schema } from 'effect';
-import { CLI_VERSION } from '../../Version.js';
+import { Config, Console, Effect, Match, Schema } from 'effect';
 import { ConfigIo, cliShellCommand, DIRECT_CLI } from '../Domain.js';
 /** Claude Code WebFetch hook invocation persisted in harness settings. */
 export const HOOK_INVOCATION = 'expandai hook claude-code';
@@ -41,178 +40,35 @@ export function isExpandaiHookCommand(command) {
     return direct.test(value) || absolute.test(value) || shellFallback.test(value);
 }
 /**
- * `expandaiManagedDeny` records whether *we* added `WebFetch` to
- * `permissions.deny`, so uninstall can tell our entry from an identical one the
- * user set first. A deny entry is a bare string with nowhere to carry that, and
- * "our hook is present" is not the same claim: installing over a settings file
- * that already denied `WebFetch` leaves the hook without us having written the
- * rule, and removing it then revokes a control its owner chose.
- */
-export function makeExpandaiMatcher(profileVersion, cli = DIRECT_CLI, managedDeny = true) {
-    return {
-        matcher: WEBFETCH_MATCHER,
-        hooks: [
-            {
-                type: 'command',
-                command: hookCommandFor(cli),
-                expandaiProfileVersion: profileVersion,
-                expandaiManagedDeny: managedDeny,
-            },
-        ],
-    };
-}
-/** True only when our own hook entry says we wrote the deny rule. */
-export function expandaiOwnsWebFetchDeny(settings) {
-    return (settings.hooks.PreToolUse ?? []).some((entry) => entry.hooks.some((hook) => isExpandaiHookCommand(hook.command) && hook.expandaiManagedDeny === true));
-}
-function webFetchAlreadyDenied(settings) {
-    return (settings.permissions?.deny ?? []).includes(WEBFETCH_MATCHER);
-}
-export const expandaiMatcher = makeExpandaiMatcher(CLI_VERSION);
-function stripExpandaiHooks(entries) {
-    return Array.flatMap(entries, (entry) => {
-        const hooks = Array.filter(entry.hooks, (hook) => !isExpandaiHookCommand(hook.command));
-        return hooks.length === 0 && hooks.length !== entry.hooks.length ? [] : [{ ...entry, hooks }];
-    });
-}
-/**
- * Denying `WebFetch` removes it from the toolset rather than blocking it per call,
- * so the agent reaches for Expand's tool instead of being refused. That difference
- * is the whole point: a hook can only answer a WebFetch call with `deny`, which
- * Claude Code renders to the user as `Error:` on every single fetch.
+ * Nothing here writes to `settings.json`, and nothing here removes from it.
  *
- * The hook stays installed as the fallback. With the deny rule in force WebFetch is
- * never called, so the hook never fires; if the rule is ever absent or overridden,
- * the hook still intercepts — with the red line, but correctly.
+ * A `WebFetch` deny entry is a bare string with nowhere to record who wrote it,
+ * and our hook is not proof either: `hook install` used to write the hook on its
+ * own, so a settings file carrying our hook and a `WebFetch` deny may well hold a
+ * rule the user added afterwards. Removing it would revoke a restriction its
+ * owner chose. Since Claude Code no longer gets a hook or a deny rule from us,
+ * there is nothing of ours left to clean up, and guessing is the only thing a
+ * cleanup pass could do.
  */
-export function planClaudeWebFetchDeny(settings) {
-    const deny = settings.permissions?.deny ?? [];
-    if (deny.includes(WEBFETCH_MATCHER))
-        return { changed: false, settings };
-    return {
-        changed: true,
-        settings: {
-            ...settings,
-            permissions: { ...(settings.permissions ?? {}), deny: [...deny, WEBFETCH_MATCHER] },
-        },
-    };
-}
-/**
- * Drops the `WebFetch` entry; anything else the user denied is left alone.
- *
- * A deny entry is a bare string with nowhere to record who wrote it, so this
- * cannot tell our rule from an identical one the user added themselves. The
- * caller supplies that evidence — see `uninstall`.
- */
-export function planClaudeWebFetchDenyRemoval(settings) {
-    const deny = settings.permissions?.deny;
-    if (deny === undefined || !deny.includes(WEBFETCH_MATCHER))
-        return { changed: false, settings };
-    const remaining = deny.filter((entry) => entry !== WEBFETCH_MATCHER);
-    const permissions = { ...settings.permissions, deny: remaining };
-    return { changed: true, settings: { ...settings, permissions } };
-}
-export function planClaudeHook(settings, profileVersion = CLI_VERSION, cli = DIRECT_CLI) {
-    const preToolUse = settings.hooks.PreToolUse ?? [];
-    const owned = preToolUse.flatMap((entry) => entry.hooks.filter((hook) => isExpandaiHookCommand(hook.command)).map((hook) => ({ entry, hook })));
-    // The marker records history — did *this* install add the rule — so once it is
-    // written it must be preserved, not recomputed. Recomputing it from present
-    // state makes the plan disagree with what it just wrote: after we add the deny
-    // rule, `webFetchAlreadyDenied` is true, so a second plan would decide the rule
-    // was never ours and rewrite the hook forever.
-    const existingMarker = owned[0]?.hook.expandaiManagedDeny;
-    const managedDeny = existingMarker ?? !webFetchAlreadyDenied(settings);
-    const current = owned.length === 1 &&
-        owned[0]?.entry.matcher === WEBFETCH_MATCHER &&
-        owned[0]?.hook.command === hookCommandFor(cli) &&
-        owned[0]?.hook.expandaiProfileVersion === profileVersion &&
-        owned[0]?.hook.expandaiManagedDeny === managedDeny;
-    if (current)
-        return { changed: false, settings };
-    return {
-        changed: true,
-        settings: {
-            ...settings,
-            hooks: {
-                ...settings.hooks,
-                PreToolUse: [...stripExpandaiHooks(preToolUse), makeExpandaiMatcher(profileVersion, cli, managedDeny)],
-            },
-        },
-    };
-}
-export function planClaudeHookRemoval(settings) {
-    const preToolUse = settings.hooks.PreToolUse ?? [];
-    const changed = preToolUse.some((entry) => entry.hooks.some((hook) => isExpandaiHookCommand(hook.command)));
-    return changed
-        ? {
-            changed,
-            settings: {
-                ...settings,
-                hooks: { ...settings.hooks, PreToolUse: stripExpandaiHooks(preToolUse) },
-            },
-        }
-        : { changed, settings };
-}
 export class ClaudeHook extends Effect.Service()('@expandai/cli/Install/Claude/Hook', {
     dependencies: [ConfigIo.Default],
     effect: Effect.gen(function* () {
-        const io = yield* ConfigIo;
         const home = yield* Config.string('HOME').pipe(Config.withDefault(homedir()));
         const cwd = yield* Config.string('PWD').pipe(Config.withDefault(process.cwd()));
         const pathFor = Effect.fn(function* (scope) {
             return yield* Match.value(scope).pipe(Match.when('global', () => Effect.succeed(`${home}/.claude/settings.json`)), Match.when('project', () => Effect.succeed(`${cwd}/.claude/settings.json`)), Match.exhaustive);
         });
-        const install = Effect.fn('ClaudeHook.install')(function* (scope) {
-            const target = yield* pathFor(scope);
-            const settings = yield* io.read(target, SettingsSchema);
-            // Both halves, exactly as `init` writes them. This used to install the hook
-            // alone, which left the deny rule to `init` only — and made `uninstall`'s
-            // ownership rule false: it treats our hook as evidence that we wrote the
-            // deny entry, so a rule the user added after a bare `hook install` was
-            // deleted as if it were ours.
-            const hookPlan = planClaudeHook(settings);
-            const plan = planClaudeWebFetchDeny(hookPlan.settings);
-            if (!hookPlan.changed && !plan.changed) {
-                yield* Console.log(`expandai WebFetch hook already installed at ${target}`);
-                return;
-            }
-            yield* io.write(target, plan.settings, SettingsSchema);
-            yield* Console.log(`Installed expandai WebFetch hook and deny rule at ${target}`);
+        const NOTICE = 'expandai does not install a WebFetch hook for Claude Code — the MCP server and runtime skill replace it, and neither can disable a built-in tool.';
+        /**
+         * Kept as a no-op rather than deleted so `hook install|uninstall claude-code`
+         * still resolves. Both say what the profile is instead of touching
+         * `settings.json`, which expandai no longer writes for Claude Code.
+         */
+        const install = Effect.fn('ClaudeHook.install')(function* (_scope) {
+            yield* Console.log(NOTICE);
         });
-        const uninstall = Effect.fn('ClaudeHook.uninstall')(function* (scope) {
-            const target = yield* pathFor(scope);
-            if (!(yield* io.exists(target)))
-                return;
-            const settings = yield* io.read(target, SettingsSchema);
-            // Uninstall has to undo both halves, or `WebFetch` stays denied with nothing
-            // left to serve the fetch — worse than never having installed us.
-            //
-            // But only the halves we wrote. `expandaiManagedDeny` on our hook records
-            // whether this install added the deny rule; without it, the rule is either
-            // the user's own or from an install predating the marker, and those are
-            // indistinguishable. Guessing "ours" revokes a control its owner chose;
-            // guessing "theirs" leaves `WebFetch` denied with nothing serving fetches.
-            // So leave it and say so — `uninstall` also fans out over both scopes, and
-            // would otherwise reach into a global settings file a project-scoped
-            // install never touched.
-            const hookPlan = planClaudeHookRemoval(settings);
-            if (!hookPlan.changed)
-                return;
-            // Read the marker off the hook before it is stripped.
-            const owned = expandaiOwnsWebFetchDeny(settings);
-            const denyPlan = owned ? planClaudeWebFetchDenyRemoval(hookPlan.settings) : hookPlan;
-            const strandedDeny = !owned && (settings.permissions?.deny ?? []).includes(WEBFETCH_MATCHER);
-            yield* io.write(target, denyPlan.settings, SettingsSchema);
-            // `denyPlan` is the hook plan itself when we do not own the rule, so its
-            // `changed` flag reports the hook removal — not a deny removal that never
-            // happened.
-            const removedDeny = owned && denyPlan.changed;
-            yield* Console.log(removedDeny
-                ? `Removed expandai WebFetch hook and deny rule from ${target}`
-                : `Removed expandai WebFetch hook from ${target}`);
-            if (strandedDeny) {
-                yield* Console.log(`Left "WebFetch" in permissions.deny at ${target} — expandai could not confirm it added that rule. Remove it by hand if you want Claude Code's built-in WebFetch back.`);
-            }
+        const uninstall = Effect.fn('ClaudeHook.uninstall')(function* (_scope) {
+            yield* Console.log(NOTICE);
         });
         return { install, uninstall, pathFor };
     }),

package/build/esm/Install/Claude/Hook.js.map

@@ -1 +1 @@
-{"version":3,"file":"Hook.js","sourceRoot":"","sources":["../../../../src/Install/Claude/Hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAmB,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAGrF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAA;AAC1D,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAA;AAC3C,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,aAAa,CAAU,CAAA;AAElD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAG,GAAe,UAAU;IAC1D,OAAO,eAAe,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;AACvC,CAAC;AACD,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAA;AAE1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAC5C;IACC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,sBAAsB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACtD,uFAAuF;IACvF,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;CACpD,EACD,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC5D,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CACvC;IACC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACrC,EACD,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC5D,CAAA;AAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CACjC,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,EAC1D,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC5D,CAAA;AAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CACvC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EACtD,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC5D,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAC7C,MAAM,CAAC,MAAM,CACZ;IACC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAA6B,EAAE,CAAC;IAC7F,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC;CAChD,EACD,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC5D,EACD,EAAE,KAAK,EAAE,CAAC,EAAE,CACZ,CAAA;AAOD,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;IAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA,oDAAoD,CAAA;IACjF,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,oBAAoB,UAAU,GAAG,EAAE,GAAG,CAAC,CAAA;IAC3E,MAAM,QAAQ,GAAG,IAAI,MAAM,CAC1B,MAAM,CAAC,GAAG,CAAA,sLAAsL,EAChM,GAAG,CACH,CAAA;IACD,MAAM,aAAa,GAClB,8KAA8K,CAAA;IAC/K,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC/E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAClC,cAAsB,EACtB,GAAG,GAAe,UAAU,EAC5B,WAAW,GAAG,IAAI;IAElB,OAAO;QACN,OAAO,EAAE,gBAAgB;QACzB,KAAK,EAAE;YACN;gBACC,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC;gBAC5B,sBAAsB,EAAE,cAAc;gBACtC,mBAAmB,EAAE,WAAW;aAChC;SACD;KACD,CAAA;AACF,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,wBAAwB,CAAC,QAAoC;IAC5E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI,CAAC,CACpG,CAAA;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAoC;IAClE,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;AACrE,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAA;AAE/D,SAAS,kBAAkB,CAAC,OAA+C;IAC1E,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QACvF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAoC;IAC1E,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAA;IAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;IACxE,OAAO;QACN,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE;YACT,GAAG,QAAQ;YACX,WAAW,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC,EAAE;SACnF;KACD,CAAA;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,QAAoC;IACjF,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAA;IACvC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;IAC/F,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,gBAAgB,CAAC,CAAA;IACpE,MAAM,WAAW,GAAG,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAA;AACjE,CAAC;AAED,MAAM,UAAU,cAAc,CAC7B,QAAoC,EACpC,cAAc,GAAW,WAAW,EACpC,GAAG,GAAe,UAAU;IAE5B,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAA;IAClD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAClG,CAAA;IACD,+EAA+E;IAC/E,4EAA4E;IAC5E,+EAA+E;IAC/E,gFAAgF;IAChF,+CAA+C;IAC/C,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,mBAAmB,CAAA;IACzD,MAAM,WAAW,GAAG,cAAc,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAA;IACtE,MAAM,OAAO,GACZ,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,KAAK,gBAAgB;QAC5C,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,KAAK,cAAc,CAAC,GAAG,CAAC;QAC9C,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,sBAAsB,KAAK,cAAc;QACxD,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,mBAAmB,KAAK,WAAW,CAAA;IACnD,IAAI,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;IAEhD,OAAO;QACN,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE;YACT,GAAG,QAAQ;YACX,KAAK,EAAE;gBACN,GAAG,QAAQ,CAAC,KAAK;gBACjB,UAAU,EAAE,CAAC,GAAG,kBAAkB,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC,cAAc,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;aACtG;SACD;KACD,CAAA;AACF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAoC;IACzE,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAA;IAClD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC3G,OAAO,OAAO;QACb,CAAC,CAAC;YACA,OAAO;YACP,QAAQ,EAAE;gBACT,GAAG,QAAQ;gBACX,KAAK,EAAE,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE;aACxE;SACD;QACF,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;AACzB,CAAC;AAED,MAAM,OAAO,UAAW,SAAQ,MAAM,CAAC,OAAO,EAAc,CAAC,mCAAmC,EAAE;IACjG,YAAY,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3B,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAA;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QAE/E,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAmB;YACvD,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CACpC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,wBAAwB,CAAC,CAAC,EAC3E,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,wBAAwB,CAAC,CAAC,EAC3E,KAAK,CAAC,UAAU,CAChB,CAAA;QACF,CAAC,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAmB;YAC7E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;YACvD,4EAA4E;YAC5E,0EAA0E;YAC1E,yEAAyE;YACzE,uEAAuE;YACvE,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;YACzC,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;YACtD,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,+CAA+C,MAAM,EAAE,CAAC,CAAA;gBAC3E,OAAM;YACP,CAAC;YACD,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAA;YACtD,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,qDAAqD,MAAM,EAAE,CAAC,CAAA;QAClF,CAAC,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAmB;YACjF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACpC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAM;YACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;YACvD,6EAA6E;YAC7E,kEAAkE;YAClE,EAAE;YACF,0EAA0E;YAC1E,2EAA2E;YAC3E,wEAAwE;YACxE,wEAAwE;YACxE,2EAA2E;YAC3E,2EAA2E;YAC3E,qEAAqE;YACrE,yBAAyB;YACzB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;YAChD,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAM;YAC7B,sDAAsD;YACtD,MAAM,KAAK,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAA;YAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,6BAA6B,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;YACpF,MAAM,YAAY,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;YAC5F,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAA;YAC1D,yEAAyE;YACzE,0EAA0E;YAC1E,YAAY;YACZ,MAAM,WAAW,GAAG,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAA;YAC7C,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CACjB,WAAW;gBACV,CAAC,CAAC,qDAAqD,MAAM,EAAE;gBAC/D,CAAC,CAAC,uCAAuC,MAAM,EAAE,CAClD,CAAA;YACD,IAAI,YAAY,EAAE,CAAC;gBAClB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CACjB,0CAA0C,MAAM,uHAAuH,CACvK,CAAA;YACF,CAAC;QACF,CAAC,CAAC,CAAA;QAEF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAW,CAAA;IAChD,CAAC,CAAC;CACF,CAAC;CAAG"}
+{"version":3,"file":"Hook.js","sourceRoot":"","sources":["../../../../src/Install/Claude/Hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/D,OAAO,EAAmB,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAGrF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAA;AAC1D,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAA;AAC3C,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,aAAa,CAAU,CAAA;AAElD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAG,GAAe,UAAU;IAC1D,OAAO,eAAe,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;AACvC,CAAC;AACD,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAA;AAE1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAC5C;IACC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,sBAAsB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACtD,uFAAuF;IACvF,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;CACpD,EACD,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC5D,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CACvC;IACC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACrC,EACD,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC5D,CAAA;AAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CACjC,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,EAC1D,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC5D,CAAA;AAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CACvC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EACtD,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC5D,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAC7C,MAAM,CAAC,MAAM,CACZ;IACC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAA6B,EAAE,CAAC;IAC7F,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC;CAChD,EACD,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC5D,EACD,EAAE,KAAK,EAAE,CAAC,EAAE,CACZ,CAAA;AAOD,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;IAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA,oDAAoD,CAAA;IACjF,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,oBAAoB,UAAU,GAAG,EAAE,GAAG,CAAC,CAAA;IAC3E,MAAM,QAAQ,GAAG,IAAI,MAAM,CAC1B,MAAM,CAAC,GAAG,CAAA,sLAAsL,EAChM,GAAG,CACH,CAAA;IACD,MAAM,aAAa,GAClB,8KAA8K,CAAA;IAC/K,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC/E,CAAC;AAED;;;;;;;;;;GAUG;AAEH,MAAM,OAAO,UAAW,SAAQ,MAAM,CAAC,OAAO,EAAc,CAAC,mCAAmC,EAAE;IACjG,YAAY,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QAE/E,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAmB;YACvD,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CACpC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,wBAAwB,CAAC,CAAC,EAC3E,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,wBAAwB,CAAC,CAAC,EAC3E,KAAK,CAAC,UAAU,CAChB,CAAA;QACF,CAAC,CAAC,CAAA;QAEF,MAAM,MAAM,GACX,mJAAmJ,CAAA;QAEpJ;;;;WAIG;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAoB;YAC9E,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC3B,CAAC,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAoB;YAClF,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC3B,CAAC,CAAC,CAAA;QAEF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAW,CAAA;IAChD,CAAC,CAAC;CACF,CAAC;CAAG"}

package/build/esm/Version.js

@@ -1,4 +1,4 @@
 // Single source of truth for the CLI version. Keep in sync with package.json —
 // the compiled binary cannot read package.json at runtime.
-export const CLI_VERSION = '0.0.3';
+export const CLI_VERSION = '0.0.4';
 //# sourceMappingURL=Version.js.map

package/build/skills/expandai/SKILL.md

@@ -1,12 +1,14 @@
 ---
 name: expandai
-description: Fetch any URL as clean markdown using the `expandai` CLI. Use when reading documentation, articles, GitHub READMEs, blog posts, or any web page — the output is rendered from the live page so it handles SPAs and bot-protected sites that plain `curl` does not.
+description: Use when any public http(s) URL needs to be read — documentation, articles, GitHub pages, blog posts, release notes, or a link the user pasted — and before calling WebFetch or curl on it. WebFetch does not execute JavaScript, so also use this whenever a fetch came back empty, truncated, 403, paywalled, or asking you to enable JavaScript. Quoting a captured page requires the citation protocol below. Not for localhost, private or internal hosts, or JSON API endpoints.
 metadata:
   expandai-profile-version: 0.0.2
 ---
 
 # expandai
 
+**Before answering from a page you fetched, read the Citations section below.**
+
 Fetch any URL as clean markdown.
 
 ```bash
@@ -15,7 +17,12 @@ expandai fetch <url>
 
 ## When to use
 
-Use `expandai fetch` instead of `curl` or `WebFetch` when you need to read web content. It renders the live page (handles JavaScript, SPAs, bot protection) and returns markdown rather than raw HTML.
+Reach for `expandai fetch` before `curl` or `WebFetch`. It renders the live page in a browser —
+JavaScript, SPAs, bot protection — and returns markdown rather than raw HTML. `WebFetch` has no
+JavaScript engine, so on a client-rendered page it returns the empty shell and nothing else.
+
+Skip it for localhost, private or internal hosts, and JSON API endpoints; `curl` is the right
+tool there.
 
 ## Usage
 
@@ -33,9 +40,8 @@ expandai fetch https://example.com --format json  # object-mode { meta, markdown
 
 ## Search a page you already fetched
 
-Every fetch produces a snapshot handle (`meta.snapshotId`). When the WebFetch hook serves a
-page, it injects that handle as a note at the top of the markdown. Once a page is captured,
-extract specific passages by **searching the snapshot by handle** — don't fetch the URL again:
+Every fetch produces a snapshot handle (`meta.snapshotId`). Once a page is captured, extract
+specific passages by **searching the snapshot by handle** — don't fetch the URL again:
 
 ```bash
 expandai search <snapshotId> "your query"            # snippets from the stored snapshot
@@ -52,7 +58,7 @@ prefer `expandai search` (or `fetch_search`), which reuses the existing capture.
 ## Citations
 
 Cite every claim you take from a fetched page. This is not optional, and it applies however
-the page arrived — `expandai fetch`, `expandai search`, the MCP tools, or the WebFetch hook.
+the page arrived — `expandai fetch`, `expandai search`, or the MCP tools.
 
 Captured markdown stamps an evidence id next to the text it belongs to, written as `{1199}`.
 For each sentence you use, take the id nearest that text and end your answer with:

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "expandai",
 	"type": "module",
-	"version": "0.0.3",
+	"version": "0.0.4",
 	"private": false,
 	"description": "Unified CLI and MCP server for ExpandAI",
 	"author": "ExpandAI",

package/src/Init/ClaudeProfile.ts

@@ -2,14 +2,7 @@ import { homedir } from 'node:os'
 import { FileSystem, Path } from '@effect/platform'
 import { NodeFileSystem, NodePath } from '@effect/platform-node'
 import { Array, Config, Effect, Either, Layer, Option, Schema } from 'effect'
-import {
-	hookCommandFor,
-	isExpandaiHookCommand,
-	planClaudeHook,
-	planClaudeWebFetchDeny,
-	SettingsSchema,
-	WEBFETCH_MATCHER,
-} from '../Install/Claude/Hook.js'
+import { SettingsSchema } from '../Install/Claude/Hook.js'
 import { planClaudeMcp } from '../Install/Claude/Mcp.js'
 import { planClaudeSkill, SKILL_FILE_NAME, SKILL_NAME } from '../Install/Claude/Skill.js'
 import { type CliCommand, CliInvocation, McpServersConfigSchema, SERVER_KEY } from '../Install/Domain.js'
@@ -19,7 +12,6 @@ import type { MutationExpectedState, MutationOperation } from './MutationTransac
 
 export const CLAUDE_PROFILE_VERSION = CLI_VERSION
 
-export const CLAUDE_POLICY_MANAGED_HOOKS = 'managed_hooks_only'
 export const CLAUDE_POLICY_MANAGED_MCP = 'managed_mcp_only'
 export const CLAUDE_POLICY_MCP_DENIED = 'managed_mcp_denied'
 export const CLAUDE_POLICY_MCP_NOT_ALLOWED = 'managed_mcp_not_allowed'
@@ -145,8 +137,10 @@ function managedPolicyBlocks(settings: ReadonlyArray<Record<string, unknown>>):
 	const managedMcpOnly = settings.some((value) => value.allowManagedMcpServersOnly === true)
 	const allowedMcpConfigured = settings.some((value) => Array.isArray(value.allowedMcpServers))
 	const expandaiAllowed = settings.some((value) => listContainsExpandai(value.allowedMcpServers))
+	// `allowManagedHooksOnly` is deliberately not consulted. It restricts which hooks
+	// may be installed, and this profile installs none — blocking on it would refuse
+	// a skill-plus-MCP setup the policy has no objection to.
 	for (const value of settings) {
-		if (value.allowManagedHooksOnly === true) blocks.add(CLAUDE_POLICY_MANAGED_HOOKS)
 		if (listContainsExpandai(value.deniedMcpServers)) blocks.add(CLAUDE_POLICY_MCP_DENIED)
 	}
 	if (managedMcpOnly && !expandaiAllowed) blocks.add(CLAUDE_POLICY_MANAGED_MCP)
@@ -170,30 +164,7 @@ function mcpLegacyVariant(value: unknown): string[] {
 	return ['owned-entry']
 }
 
-function hookLegacyVariant(command: string): string {
-	if (/^npx\s+-y\s+/u.test(command.trim())) return 'npx-y'
-	if (/\shook\s+claude\s*$/u.test(command)) return 'old-command-spelling'
-	if (/^(?:"|'|\/|[A-Za-z]:\\)/u.test(command.trim())) return 'absolute-path'
-	if (/^if\s+command\s+-v\s+expandai/u.test(command.trim())) return 'npx-shell-fallback'
-	return 'unversioned'
-}
-
 function makeInspection(scope: InitScope, loaded: LoadedClaudeProfile, cli: CliCommand): ClaudeProfileInspection {
-	const hookPlan = planClaudeHook(loaded.settings, CLAUDE_PROFILE_VERSION, cli)
-	const denyPlan = planClaudeWebFetchDeny(hookPlan.settings)
-	const hookEntries = (loaded.settings.hooks.PreToolUse ?? []).flatMap((entry) =>
-		entry.hooks.filter((hook) => isExpandaiHookCommand(hook.command)).map((hook) => ({ entry, hook })),
-	)
-	const hookVersion = hookEntries.length === 1 ? hookEntries[0]?.hook.expandaiProfileVersion : undefined
-	const hookCurrent = !hookPlan.changed && !denyPlan.changed
-	const hookLegacy = hookCurrent
-		? []
-		: hookEntries.map(({ entry, hook }) =>
-				entry.matcher === WEBFETCH_MATCHER && hook.command === hookCommandFor(cli)
-					? 'unversioned'
-					: hookLegacyVariant(hook.command),
-			)
-
 	const plannedSkill = planClaudeSkill(loaded.skillText, loaded.bundledSkillText, CLAUDE_PROFILE_VERSION)
 	const currentSkillVersion = skillVersion(loaded.skillText)
 	const skillCurrent = loaded.skillText !== undefined && !plannedSkill.changed
@@ -201,7 +172,6 @@ function makeInspection(scope: InitScope, loaded: LoadedClaudeProfile, cli: CliC
 	const mcpValue = loaded.mcp.mcpServers[SERVER_KEY]
 	const mcpCurrent = !planClaudeMcp(loaded.mcp, cli).changed
 	const components: InitComponent[] = []
-	if (hookCurrent) components.push('webfetch-hook')
 	if (skillCurrent) components.push('runtime-skill')
 	if (mcpCurrent) components.push('mcp')
 
@@ -211,12 +181,9 @@ function makeInspection(scope: InitScope, loaded: LoadedClaudeProfile, cli: CliC
 	return {
 		scope,
 		targets: loaded.targets,
-		hook: {
-			current: hookCurrent,
-			installed: hookEntries.length > 0,
-			legacyVariants: hookLegacy,
-			...(hookVersion === undefined ? {} : { version: hookVersion }),
-		},
+		// Claude Code has no hook component. Reported as absent-and-current so a
+		// caller that still reads this field cannot conclude something is missing.
+		hook: { current: true, installed: false, legacyVariants: [] },
 		skill: {
 			current: skillCurrent,
 			installed: loaded.skillText !== undefined,
@@ -229,16 +196,15 @@ function makeInspection(scope: InitScope, loaded: LoadedClaudeProfile, cli: CliC
 			legacyVariants: mcpCurrent ? [] : mcpLegacyVariant(mcpValue),
 		},
 		components,
-		configured: components.length === 3,
+		configured: components.length === 2,
 		profileVersion: CLAUDE_PROFILE_VERSION,
 		componentVersions: {
-			...(hookVersion === undefined ? {} : { hook: hookVersion }),
 			...(currentSkillVersion === undefined ? {} : { skill: currentSkillVersion }),
 			...(mcpCurrent ? { mcp: CLAUDE_PROFILE_VERSION } : {}),
 		},
 		policyBlocks: [...new Set(policyBlocks)].sort(),
 		remotePolicyMayApply: true,
-		reloadMayBeRequired: !hookCurrent || !mcpCurrent,
+		reloadMayBeRequired: !mcpCurrent,
 		consentMayBeRequired: scope === 'project',
 	}
 }
@@ -383,7 +349,10 @@ const makeClaudeProfile = Effect.gen(function* () {
 				),
 			),
 		)
-		const readOnlyTargets = yield* Effect.filter([targets.settingsFile, targets.skillFile, targets.mcpFile], (target) =>
+		// Only the files this profile writes. `settings.json` is left alone, so its
+		// being read-only says nothing about whether setup can succeed — checking it
+		// would refuse an install that never touches it.
+		const readOnlyTargets = yield* Effect.filter([targets.skillFile, targets.mcpFile], (target) =>
 			writableAncestor(target).pipe(Effect.map((writable) => !writable)),
 		)
 
@@ -409,33 +378,23 @@ const makeClaudeProfile = Effect.gen(function* () {
 
 	const plan = Effect.fn('ClaudeProfile.plan')(function* (scope: InitScope) {
 		const loaded = yield* load(scope)
-		const hookPlan = planClaudeHook(loaded.settings, CLAUDE_PROFILE_VERSION, cli)
-		// One settings file, one write: the deny rule is layered onto the hook plan's
-		// output so both land together or neither does.
-		const denyPlan = planClaudeWebFetchDeny(hookPlan.settings)
-		const settingsChanged = hookPlan.changed || denyPlan.changed
+		// The Claude Code profile is the MCP server plus the runtime skill, and nothing
+		// else. `settings.json` is not written at all: no `permissions` entry, no
+		// PreToolUse hook. Both of those can disable a built-in tool, and a install
+		// that can disable a built-in tool can also fail leaving it disabled.
 		const skillPlan = planClaudeSkill(loaded.skillText, loaded.bundledSkillText, CLAUDE_PROFILE_VERSION)
 		const mcpPlan = planClaudeMcp(loaded.mcp, cli)
-		const settingsText = `${yield* Schema.encode(SettingsSchema)(denyPlan.settings)}\n`
 		const mcpText = `${yield* Schema.encode(McpServersConfigSchema)(mcpPlan.config)}\n`
 		const settingsDirectory = path.dirname(loaded.targets.settingsFile)
 		const skillsDirectory = path.dirname(loaded.targets.skillDirectory)
 		const operations: MutationOperation[] = []
-		if (settingsChanged || skillPlan.changed) {
+		if (skillPlan.changed) {
 			operations.push({
 				type: 'mkdir',
 				path: settingsDirectory,
 				expected: yield* expectedDirectory(settingsDirectory),
 			})
 		}
-		if (settingsChanged) {
-			operations.push({
-				type: 'write',
-				path: loaded.targets.settingsFile,
-				bytes: textEncoder.encode(settingsText),
-				expected: loaded.settingsExpected,
-			})
-		}
 		if (skillPlan.changed) {
 			operations.push({
 				type: 'mkdir',
@@ -471,8 +430,6 @@ const makeClaudeProfile = Effect.gen(function* () {
 			scope,
 			{
 				...inspectedLoaded,
-				settings: denyPlan.settings,
-				settingsText,
 				skillText: skillPlan.text,
 				mcp: mcpPlan.config,
 				mcpText,
@@ -480,7 +437,7 @@ const makeClaudeProfile = Effect.gen(function* () {
 			cli,
 		)
 		return {
-			changed: settingsChanged || skillPlan.changed || mcpPlan.changed,
+			changed: skillPlan.changed || mcpPlan.changed,
 			inspection,
 			resultInspection,
 			operations,

package/src/Init/Service.ts

@@ -200,7 +200,7 @@ function isCompleteHarnessInspection(
 	if (inspection.integrationVersion === undefined || inspection.integrationVersion.trim().length === 0) return false
 	if (inspection.nextAction.trim().length === 0) return false
 	const components = new Set(inspection.components)
-	const expectsHook = harness === 'claude-code' || harness === 'opencode'
+	const expectsHook = harness === 'opencode'
 	return (
 		components.size === inspection.components.length &&
 		components.has('runtime-skill') &&

package/src/Init/Status.ts

@@ -152,7 +152,7 @@ function validateInspection(
 	// Only the harnesses with a web-fetch hook install three components; cursor
 	// and codex are complete with two. Demanding three of them reported a
 	// correctly configured machine as an invalid result.
-	const expectsHook = harness === 'claude-code' || harness === 'opencode'
+	const expectsHook = harness === 'opencode'
 	const allComponents =
 		componentSet.has('runtime-skill') &&
 		componentSet.has('mcp') &&