pushary 1.9.103 → 1.9.105

package/dist/{chunk-PM34Z5WX.js → chunk-IHQRLJEP.js}

@@ -1,36 +1,35 @@
 import {
   compatibleConfigFile
-} from "./chunk-UOE26LPT.js";
+} from "./chunk-JLJJRBTD.js";
 import {
   hookOwnerOf,
-  hookOwnerOfCommands,
-  liveBridgeProbe,
-  resolveBridgeStub
-} from "./chunk-VD6CAELE.js";
+  hookOwnerOfCommands
+} from "./chunk-MFJHLVIZ.js";
 import {
   AGENT_CHOICES
-} from "./chunk-WVAJSBI2.js";
+} from "./chunk-DH22FQAS.js";
 import {
+  bridgeStub,
   claudeSettings,
   codexHooksJson,
   cursorUserHooks,
   geminiSettings,
   guardedArgv,
-  pusharyDir,
+  liveBridgeProbe,
+  resolveBridgeStub,
   vscodePluginDir,
   windowsNodeLauncherFor
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-JCSJEMTA.js";
 import {
   readJsonSafe
-} from "./chunk-BQHZRH6S.js";
+} from "./chunk-T5I4PKOQ.js";
 import {
   HOOK_BUDGETS,
   HOOK_COMPATIBLE_PROFILES,
-  HOOK_LOCATOR_BINARY,
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-O5TB2LMQ.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";
@@ -553,12 +552,13 @@ var agentHookOwner = (agent, appAvailable) => {
   return hookOwnerOf(document.kind === "ok" && isRecord(document.value) ? document.value : null, appAvailable, agentHooksKeyPath(agent));
 };
 var cliOwnsAnyAgentHooks = (appAvailable) => AGENT_CHOICES.some((agent) => agentHookOwner(agent, appAvailable) === "cli");
-var macAppBridgeAvailable = () => resolveBridgeStub(join2(pusharyDir(), "bin", HOOK_LOCATOR_BINARY), liveBridgeProbe()).kind === "bundle";
+var macAppBridgeAvailable = () => resolveBridgeStub(bridgeStub(), liveBridgeProbe()).kind === "bundle";
 
 export {
   OPENCODE_PLUGIN_PLACEHOLDER,
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
+  openCodePluginArgv,
   isOpenCodePluginOurs,
   OPENCODE_HOOK_BINARY,
   openCodeHookArgv,

package/dist/{chunk-X3HBR57D.js → chunk-J2HIFUAT.js}

@@ -1,30 +1,30 @@
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "./chunk-CQ7QE4W2.js";
+} from "./chunk-UUJQK7DJ.js";
 import {
   AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
   claimThrottle,
   releaseThrottle,
   reportEvent
-} from "./chunk-Z2TX7DVU.js";
+} from "./chunk-KHZCJP7P.js";
 import {
   deriveToolTarget,
   permissionDeniedAction
-} from "./chunk-MP3SEXXJ.js";
+} from "./chunk-76JOLPST.js";
 import {
   askUser,
   isDecisionStopped,
   isQuestionLimitRefusal,
   waitForQuestion
-} from "./chunk-ZCYLCD6L.js";
+} from "./chunk-IAASPG5B.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-V5DV7XZN.js";
+} from "./chunk-PFZCLG55.js";
 import {
   getMachineId
-} from "./chunk-6N5DQG5F.js";
+} from "./chunk-I3IUS4SR.js";
 import {
   ASK_CONTEXT_MAX,
   agentQuestionContext,
@@ -36,7 +36,7 @@ import {
   questionsShownAsASet,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-O5TB2LMQ.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-7OZOFTTB.js → chunk-J5PUKKCT.js}

@@ -3,24 +3,24 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-J6SSLXSU.js";
+} from "./chunk-GESW4OSZ.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-NZQEABRO.js";
+} from "./chunk-HONSMBF2.js";
+import {
+  getMachineId
+} from "./chunk-I3IUS4SR.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-HYAQIKYB.js";
-import {
-  getMachineId
-} from "./chunk-6N5DQG5F.js";
+} from "./chunk-B7O4CXFX.js";
 import {
   getBaseUrl
-} from "./chunk-KOUB4ZLX.js";
+} from "./chunk-GKCDMAUM.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";
@@ -37,12 +37,13 @@ var sendHeartbeat = async (apiKey, input = {}, deps = {}) => {
       method: "POST",
       headers: { "Content-Type": "application/json", Authorization: `Bearer ${apiKey}` },
       body: JSON.stringify({
-        machineId: getMachineId(),
+        machineId: input.machineId ?? getMachineId(),
         hostname: hostname(),
         cliVersion: getPackageVersion(),
         repoKey: input.repoKey ?? null,
         capabilities: input.capabilities ?? [],
-        autoUpdate: input.autoUpdate ?? null
+        autoUpdate: input.autoUpdate ?? null,
+        ...input.hookWiring ? { hookWiring: input.hookWiring } : {}
       }),
       signal: AbortSignal.timeout(1e4)
     });

package/dist/{chunk-O7ITTNDD.js → chunk-JCSJEMTA.js}

@@ -2,9 +2,11 @@ import {
   atLeast,
   formatVersion,
   quoteIfNeeded,
-  shellDoubleQuoted,
+  shellDoubleQuoted
+} from "./chunk-ZCBTCW3T.js";
+import {
   writeFileAtomic
-} from "./chunk-BQHZRH6S.js";
+} from "./chunk-T5I4PKOQ.js";
 import {
   cmdShimScriptOf
 } from "./chunk-ZVU6WMMU.js";
@@ -15,7 +17,7 @@ import {
   HOOK_LOCATOR_BINARY,
   PRETOOLUSE_GATED_TOOLS,
   withHookHoldBudget
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-O5TB2LMQ.js";
 
 // src/setup/paths.ts
 import { createHash as createHash2 } from "crypto";
@@ -27,8 +29,8 @@ var claudeConfigDir = (home = homedir(), environment = { CLAUDE_CONFIG_DIR: proc
 var claudeUserConfigFile = (home = homedir(), environment = { CLAUDE_CONFIG_DIR: process.env.CLAUDE_CONFIG_DIR }) => join(environment.CLAUDE_CONFIG_DIR ? claudeConfigDir(home, environment) : home, ".claude.json");
 
 // src/setup/paths.ts
-import { homedir as homedir3 } from "os";
-import { join as join5 } from "path";
+import { homedir as homedir4 } from "os";
+import { join as join6 } from "path";
 
 // src/codex-config.ts
 import { createHash } from "crypto";
@@ -51,6 +53,39 @@ var HOOK_GUARD_SCRIPTS = {
   node_script: `[ -f "$0" ] || exit 0; ${NODE_PRESENT}; exec node "$0" "$@"`,
   cursor_gate_script: `[ -f "$0" ] || ${CURSOR_MISS}; command -v node >/dev/null 2>&1 || ${CURSOR_MISS}; exec node "$0" "$@"`
 };
+var COMMAND_TOKEN = /"(?:\\.|[^"\\])*"|'[^']*'|\S+/g;
+var DOUBLE_QUOTED_ESCAPE = /\\(["\\$`])/g;
+var [GUARD_SHELL, GUARD_SHELL_FLAG] = HOOK_SHELL.split(/\s+/);
+var NODE_LAUNCHERS = /* @__PURE__ */ new Set(["node", "node.exe"]);
+var GUARD_STATEMENT_SEPARATOR = "; ";
+var guardExecStatement = (script) => script.slice(script.lastIndexOf(GUARD_STATEMENT_SEPARATOR) + GUARD_STATEMENT_SEPARATOR.length);
+var GUARDS_WITHOUT_ARGUMENTS_EXEC_STATEMENT = 'exec "$B"';
+var GUARD_EXEC_STATEMENTS = [
+  .../* @__PURE__ */ new Set([...Object.values(HOOK_GUARD_SCRIPTS).map(guardExecStatement), GUARDS_WITHOUT_ARGUMENTS_EXEC_STATEMENT])
+];
+var guardRunsItsTarget = (script) => GUARD_EXEC_STATEMENTS.some((statement) => script.endsWith(statement));
+var NODE_GUARD_EXEC_STATEMENT = guardExecStatement(HOOK_GUARD_SCRIPTS.node_script);
+var guardRunsThroughNode = (script) => script.endsWith(NODE_GUARD_EXEC_STATEMENT);
+var isWrappedIn = (token, quote) => token[0] === quote && token.at(-1) === quote;
+var unquotedToken = (raw, unescapesDoubleQuotes) => {
+  const unquoted = isWrappedIn(raw, '"') || isWrappedIn(raw, "'") ? raw.slice(1, -1) : raw;
+  return unescapesDoubleQuotes && raw[0] === '"' ? unquoted.replace(DOUBLE_QUOTED_ESCAPE, "$1") : unquoted;
+};
+var hookCommandTokens = (command) => {
+  const unescapesDoubleQuotes = command.startsWith(`${HOOK_SHELL} `);
+  return (command.match(COMMAND_TOKEN) ?? []).map((raw) => unquotedToken(raw, unescapesDoubleQuotes));
+};
+var executableFileName = (executable) => executable.split(/[/\\]/).pop() ?? "";
+var isNodeLauncher = (executable) => NODE_LAUNCHERS.has(executableFileName(executable).toLowerCase());
+var guardedExecutable = (script, target) => script === void 0 || target === void 0 ? null : { executable: target, runsExecutable: guardRunsItsTarget(script), runsThroughNode: guardRunsThroughNode(script) };
+var parseHookArgv = (argv) => {
+  const [first, second, script, target] = argv;
+  if (first === void 0) return null;
+  if (first === GUARD_SHELL && second === GUARD_SHELL_FLAG) return guardedExecutable(script, target);
+  if (isNodeLauncher(first)) return second === void 0 ? null : { executable: second, runsExecutable: true, runsThroughNode: true };
+  return { executable: first, runsExecutable: true, runsThroughNode: false };
+};
+var parseHookCommand = (command) => parseHookArgv(hookCommandTokens(command));
 var BINARY_GUARDS = {
   native: "native_binary",
   node: "node_binary"
@@ -69,6 +104,7 @@ var targetPath = (target) => target.kind === "binary" ? target.path : target.scr
 var runsThroughNode = (target) => target.kind !== "binary";
 var LAUNCHABLE_EXTENSION = /\.(cmd|exe|js|mjs)$/i;
 var hookBinaryNameOf = (fileName) => fileName.replace(LAUNCHABLE_EXTENSION, "");
+var hookExecutableName = (executable) => hookBinaryNameOf(executableFileName(executable));
 var windowsNodeLaunchOf = (target, launcher) => {
   if (launcher === null) return null;
   if (target.kind !== "binary") return { node: launcher.node, script: target.script };
@@ -219,6 +255,9 @@ var CODEX_HOOK_EVENTS = [
   { event: "PreCompact", matcher: "manual|auto", delivery: "telemetry", timeout: 5 },
   { event: "PostCompact", matcher: "manual|auto", delivery: "telemetry", timeout: 5 }
 ];
+var CODEX_EARLIER_APPROVAL_MATCHERS = {
+  PermissionRequest: ["Bash|apply_patch"]
+};
 var CODEX_REQUIRED_APPROVAL_EVENTS = CODEX_HOOK_EVENTS.filter((event) => event.delivery === "approval").map((event) => event.event);
 var CODEX_EVENT_KEY = {
   PermissionRequest: "permission_request",
@@ -353,6 +392,7 @@ var removeCodexHooks = (config, scope) => {
   if (Object.keys(hooks).length === 0) delete config.hooks;
   return changed;
 };
+var codexHooksFeatureDisabled = (config) => asRecord2(config.features)?.hooks === false;
 var hasCodexHooks = (config) => {
   const hooks = asRecord2(config.hooks);
   if (!hooks) return false;
@@ -537,11 +577,103 @@ var staleTrustKeys = (state, hooksJsonPath, event, currentKey, ourHash) => {
   );
 };
 
+// src/diagnostics/bridge.ts
+import { execFileSync } from "child_process";
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { homedir as homedir3 } from "os";
+import { dirname, join as join3 } from "path";
+var BRIDGE_BUNDLE_IDENTIFIER = "com.pushary.app";
+var BRIDGE_HELPER_SUFFIX = "/Contents/Helpers/pushary-bridge";
+var BRIDGE_BUNDLE_ROOTS = ["/Applications/Pushary.app", "$HOME/Applications/Pushary.app"];
+var BRIDGE_CACHE_FILE = ".bridge-cache";
+var BRIDGE_STUB_HELPER_LINE = `H=${BRIDGE_HELPER_SUFFIX}`;
+var BRIDGE_STUB_RUNS_THE_HELPER = 'exec "$P$H"';
+var expandHome = (path, home) => path.replaceAll("$HOME", home);
+var parseBridgeStub = (contents, stubPath) => {
+  const helperSuffix = contents.match(/^H=(\S+)$/m)?.[1] ?? BRIDGE_HELPER_SUFFIX;
+  const cachePath = contents.match(/^C="([^"\n]+)"$/m)?.[1] ?? join3(dirname(stubPath), BRIDGE_CACHE_FILE);
+  const rootsLine = contents.match(/^for P in ((?:"[^"\n]*"\s*)+); do$/m)?.[1];
+  const bundleRoots = rootsLine ? [...rootsLine.matchAll(/"([^"]*)"/g)].map((match) => match[1]) : BRIDGE_BUNDLE_ROOTS;
+  const bundleIdentifier = contents.match(/kMDItemCFBundleIdentifier == "([^"]+)"/)?.[1] ?? BRIDGE_BUNDLE_IDENTIFIER;
+  return { helperSuffix, cachePath, bundleRoots, bundleIdentifier };
+};
+var resolveBridgeStub = (stubPath, probe) => {
+  const contents = probe.readFile(stubPath);
+  if (contents === null) return { kind: "no-stub", stub: stubPath };
+  const shape = parseBridgeStub(contents, stubPath);
+  const helperIn = (bundle) => `${bundle}${shape.helperSuffix}`;
+  const looked = [];
+  for (const root of shape.bundleRoots.map((root2) => expandHome(root2, probe.home))) {
+    looked.push(root);
+    if (probe.exists(helperIn(root))) return { kind: "bundle", helper: helperIn(root), via: "root" };
+  }
+  const cached = shape.cachePath ? probe.readFile(shape.cachePath)?.split("\n")[0]?.trim() : void 0;
+  if (cached) {
+    looked.push(cached);
+    if (probe.exists(helperIn(cached))) return { kind: "bundle", helper: helperIn(cached), via: "cache" };
+  }
+  for (const found of probe.mdfind(shape.bundleIdentifier)) {
+    looked.push(found);
+    if (probe.exists(helperIn(found))) return { kind: "bundle", helper: helperIn(found), via: "spotlight" };
+  }
+  return { kind: "missing", stub: stubPath, looked };
+};
+var NO_SPOTLIGHT = () => [];
+var bridgeResolvesToApp = (locator, probe) => resolveBridgeStub(locator, { ...probe, mdfind: NO_SPOTLIGHT }).kind === "bundle";
+var installedBridgeBundleRoots = (home) => BRIDGE_BUNDLE_ROOTS.map((root) => expandHome(root, home));
+var isMacAppBridgeStub = (contents) => contents.split("\n").includes(BRIDGE_STUB_HELPER_LINE) && contents.includes(BRIDGE_STUB_RUNS_THE_HELPER);
+var cachedBundleRoot = (location, probe) => {
+  const cached = probe.readFile(location.cache)?.split("\n")[0]?.trim();
+  return cached ? [cached] : [];
+};
+var macAppBridgeIsInstalled = (location, probe) => {
+  const stub = probe.readFile(location.stub);
+  if (stub === null || !isMacAppBridgeStub(stub)) return false;
+  return [...location.bundleRoots, ...cachedBundleRoot(location, probe)].some((root) => probe.exists(`${root}${BRIDGE_HELPER_SUFFIX}`));
+};
+var BRIDGE_GONE_MESSAGE = "the Mac app is gone but its hooks remain; run pushary setup or reinstall the app";
+var describeBridgeResolution = (resolution) => {
+  switch (resolution.kind) {
+    case "bundle":
+      return `${resolution.helper} (${resolution.via === "root" ? "installed" : resolution.via === "cache" ? "cached path" : "found by Spotlight"})`;
+    case "missing":
+      return BRIDGE_GONE_MESSAGE;
+    case "no-stub":
+      return `${resolution.stub} is not there; ${BRIDGE_GONE_MESSAGE}`;
+  }
+};
+var isBridgeLocator = (executable) => executable !== null && executable.split(/[/\\]/).pop() === HOOK_LOCATOR_BINARY;
+var spotlight = (bundleIdentifier) => {
+  if (process.platform !== "darwin") return [];
+  try {
+    return execFileSync("/usr/bin/mdfind", [`kMDItemCFBundleIdentifier == "${bundleIdentifier}"`], {
+      encoding: "utf-8",
+      timeout: 5e3,
+      stdio: ["ignore", "pipe", "ignore"]
+    }).split("\n").map((line) => line.trim()).filter((line) => line !== "");
+  } catch {
+    return [];
+  }
+};
+var readOrNull = (path) => {
+  try {
+    return readFileSync2(path, "utf-8");
+  } catch {
+    return null;
+  }
+};
+var liveBridgeProbe = () => ({
+  exists: existsSync2,
+  readFile: readOrNull,
+  mdfind: spotlight,
+  home: homedir3()
+});
+
 // src/cline-config.ts
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 
 // src/claude-config.ts
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];
@@ -733,7 +865,7 @@ var addPusharyToolPermissions = (settings) => {
   permissions.allow = filtered;
 };
 var addPusharyHooks = (settings, binDir, version = null) => {
-  const resolve2 = (name) => guardBinary(binDir ? join3(binDir, name) : name);
+  const resolve2 = (name) => guardBinary(binDir ? join4(binDir, name) : name);
   const hooks = ensureRecord2(settings, "hooks");
   const supported = new Map(supportedClaudeEvents(version).map((hook) => [hook.event, hook]));
   for (const known of CLAUDE_HOOK_EVENTS) {
@@ -783,8 +915,8 @@ var removePusharySettings = (settings, scope) => {
 };
 
 // src/instruction-file.ts
-import { accessSync, constants, existsSync as existsSync2, readFileSync as readFileSync2, statSync, writeFileSync, mkdirSync, rmSync } from "fs";
-import { dirname } from "path";
+import { accessSync, constants, existsSync as existsSync3, readFileSync as readFileSync3, statSync, writeFileSync, mkdirSync, rmSync } from "fs";
+import { dirname as dirname2 } from "path";
 var PUSHARY_BEGIN = "<!-- BEGIN PUSHARY (managed by @pushary/agent-hooks; do not edit this block) -->";
 var PUSHARY_END = "<!-- END PUSHARY -->";
 var instructionBody = (label) => `## Pushary notifications and approvals
@@ -830,11 +962,11 @@ var withInstructionBlockReplaced = (existing, body) => {
   return range ? existing.slice(0, range.start) + wrap(body) + existing.slice(range.end) : null;
 };
 var writeInstructionBlock = (filePath, body) => {
-  const dir = dirname(filePath);
-  if (!existsSync2(dir)) mkdirSync(dir, { recursive: true });
+  const dir = dirname2(filePath);
+  if (!existsSync3(dir)) mkdirSync(dir, { recursive: true });
   let existing = "";
   try {
-    existing = readFileSync2(filePath, "utf-8");
+    existing = readFileSync3(filePath, "utf-8");
   } catch {
   }
   writeFileSync(filePath, withInstructionBlockReplaced(existing, body) ?? withInstructionBlockAppended(existing, body), "utf-8");
@@ -851,7 +983,7 @@ var CRLF = "\r\n";
 var withLineEndingsOf = (sample, block) => sample.includes(CRLF) ? block.replaceAll("\n", CRLF) : block;
 var readUtf8 = (filePath) => {
   try {
-    const bytes = readFileSync2(filePath);
+    const bytes = readFileSync3(filePath);
     const text = bytes.toString("utf-8");
     return Buffer.from(text, "utf-8").equals(bytes) ? { kind: "text", text } : { kind: "not_utf8" };
   } catch {
@@ -867,7 +999,7 @@ var isWritable = (filePath) => {
   }
 };
 var refreshInstructionBlock = (filePath, body) => {
-  if (!existsSync2(filePath)) return "absent";
+  if (!existsSync3(filePath)) return "absent";
   const read = readUtf8(filePath);
   if (read.kind !== "text") return read.kind;
   const block = soleManagedBlock(read.text);
@@ -888,7 +1020,7 @@ var refreshInstructionBlock = (filePath, body) => {
 var removeInstructionBlock = (filePath) => {
   let existing = "";
   try {
-    existing = readFileSync2(filePath, "utf-8");
+    existing = readFileSync3(filePath, "utf-8");
   } catch {
     return false;
   }
@@ -905,7 +1037,7 @@ var removeInstructionBlock = (filePath) => {
 };
 var hasInstructionBlock = (filePath) => {
   try {
-    return readFileSync2(filePath, "utf-8").includes(PUSHARY_BEGIN);
+    return readFileSync3(filePath, "utf-8").includes(PUSHARY_BEGIN);
   } catch {
     return false;
   }
@@ -965,10 +1097,10 @@ var environmentValue = (environment, name) => {
   const value = environment[name]?.trim();
   return value ? value : void 0;
 };
-var clineDirectory = (location) => environmentValue(location.environment, CLINE_DIR_ENV) ?? join4(location.home, CLINE_DIRECTORY_NAME);
-var clineDataDirectory = (location) => environmentValue(location.environment, CLINE_DATA_DIR_ENV) ?? join4(clineDirectory(location), CLINE_DATA_DIRECTORY_NAME);
-var clineMcpSettingsPath = (location) => environmentValue(location.environment, CLINE_MCP_SETTINGS_PATH_ENV) ?? join4(clineDataDirectory(location), CLINE_SETTINGS_DIRECTORY_NAME, CLINE_SETTINGS_FILE_NAME);
-var clineRulesFile = (location) => join4(clineDirectory(location), CLINE_RULES_DIRECTORY_NAME, CLINE_RULES_FILE_NAME);
+var clineDirectory = (location) => environmentValue(location.environment, CLINE_DIR_ENV) ?? join5(location.home, CLINE_DIRECTORY_NAME);
+var clineDataDirectory = (location) => environmentValue(location.environment, CLINE_DATA_DIR_ENV) ?? join5(clineDirectory(location), CLINE_DATA_DIRECTORY_NAME);
+var clineMcpSettingsPath = (location) => environmentValue(location.environment, CLINE_MCP_SETTINGS_PATH_ENV) ?? join5(clineDataDirectory(location), CLINE_SETTINGS_DIRECTORY_NAME, CLINE_SETTINGS_FILE_NAME);
+var clineRulesFile = (location) => join5(clineDirectory(location), CLINE_RULES_DIRECTORY_NAME, CLINE_RULES_FILE_NAME);
 var parsedJson = (text) => {
   try {
     return { ok: true, value: JSON.parse(text) };
@@ -1072,53 +1204,59 @@ var clineInstructionsBody = () => `${renderAgentInstructions(CLINE_LABEL)}
 ${CLINE_TOOL_NOTE}`;
 
 // src/setup/paths.ts
-var claudeSettings = (environment = process.env) => join5(claudeConfigDir(homedir3(), environment), "settings.json");
-var claudeJson = (environment = process.env) => claudeUserConfigFile(homedir3(), environment);
-var claudeSkillDir = (environment = process.env) => join5(claudeConfigDir(homedir3(), environment), "skills", "pushary");
-var cursorPluginDir = () => join5(homedir3(), ".cursor", "plugins", "local", "pushary");
-var cursorUserHooks = () => join5(homedir3(), ".cursor", "hooks.json");
-var cursorPluginMcp = () => join5(cursorPluginDir(), "mcp.json");
-var cursorPluginManifest = () => join5(cursorPluginDir(), ".cursor-plugin", "plugin.json");
-var cursorPluginRule = () => join5(cursorPluginDir(), "rules", "pushary.mdc");
-var cursorUserMcp = () => join5(homedir3(), ".cursor", "mcp.json");
-var vscodePluginDir = () => join5(homedir3(), ".pushary", "plugins", "vscode");
-var vscodePluginMcp = () => join5(vscodePluginDir(), ".mcp.json");
-var claudeSettingsLocal = () => join5(claudeConfigDir(), "settings.local.json");
-var pusharyDir = () => join5(homedir3(), ".pushary");
-var claudeSetupDir = () => process.env.CLAUDE_CONFIG_DIR ? join5(pusharyDir(), "setup", "claude-profiles", createHash2("sha256").update(claudeUserConfigFile()).digest("hex").slice(0, 32)) : join5(pusharyDir(), "setup");
-var claudeMcpReceipt = () => join5(claudeSetupDir(), "claude-mcp.json");
-var bridgeAgentKey = () => join5(pusharyDir(), "bridge-auth", "agent-key.json");
-var autoUpdateState = () => join5(pusharyDir(), "auto-update.json");
-var autoUpdateLock = () => join5(pusharyDir(), "auto-update.lock");
-var serviceOwedBackMark = () => join5(pusharyDir(), "service-owed-back");
-var autoUpdateLog = () => join5(pusharyDir(), "logs", "auto-update.log");
-var clientReportClaims = () => join5(pusharyDir(), "client-reports");
-var claudeRegistrationReceipt = () => join5(claudeSetupDir(), "claude-registration.json");
-var hermesConfig = () => join5(homedir3(), ".hermes", "config.yaml");
-var hermesConfigReceipt = () => join5(pusharyDir(), "setup", "hermes-config.json");
-var hermesSetupReceipt = () => join5(pusharyDir(), "setup", "hermes-plugin.json");
-var hermesAppWiringRecord = () => join5(pusharyDir(), "setup", "hermes-wired-by-mac-app");
-var fxQuestionRuleReceipt = () => join5(pusharyDir(), "setup", "fx-question-rule.json");
-var hookTakeoverReceipt = (agent) => join5(agent === "claude_code" ? claudeSetupDir() : join5(pusharyDir(), "setup"), `hook-takeover-${agent}.json`);
-var codexSkillDir2 = () => join5(codexHome(), "skills", "pushary");
-var codexAgentsMd2 = () => join5(codexHome(), "AGENTS.md");
-var geminiSettings = () => join5(homedir3(), ".gemini", "settings.json");
-var geminiMd = () => join5(homedir3(), ".gemini", "GEMINI.md");
-var pusharyConfigFile = () => join5(homedir3(), ".pushary", "config.json");
-var fxConfigDir = () => join5(homedir3(), ".fx");
-var fxMcpProfile = () => join5(fxConfigDir(), "mcp.json");
-var fxSettings = () => join5(fxConfigDir(), "settings.json");
-var fxAgentsMd = () => join5(fxConfigDir(), "AGENTS.md");
-var clineLocation = () => ({ home: homedir3(), environment: process.env });
+var claudeSettings = (environment = process.env) => join6(claudeConfigDir(homedir4(), environment), "settings.json");
+var claudeJson = (environment = process.env) => claudeUserConfigFile(homedir4(), environment);
+var claudeSkillDir = (environment = process.env) => join6(claudeConfigDir(homedir4(), environment), "skills", "pushary");
+var cursorPluginDir = () => join6(homedir4(), ".cursor", "plugins", "local", "pushary");
+var cursorUserHooks = () => join6(homedir4(), ".cursor", "hooks.json");
+var cursorPluginMcp = () => join6(cursorPluginDir(), "mcp.json");
+var cursorPluginManifest = () => join6(cursorPluginDir(), ".cursor-plugin", "plugin.json");
+var cursorPluginRule = () => join6(cursorPluginDir(), "rules", "pushary.mdc");
+var cursorUserMcp = () => join6(homedir4(), ".cursor", "mcp.json");
+var vscodePluginDir = () => join6(homedir4(), ".pushary", "plugins", "vscode");
+var vscodePluginMcp = () => join6(vscodePluginDir(), ".mcp.json");
+var claudeSettingsLocal = () => join6(claudeConfigDir(), "settings.local.json");
+var pusharyDir = () => join6(homedir4(), ".pushary");
+var bridgeStub = () => join6(pusharyDir(), "bin", HOOK_LOCATOR_BINARY);
+var bridgeCache = () => join6(pusharyDir(), "bin", BRIDGE_CACHE_FILE);
+var claudeSetupDir = () => process.env.CLAUDE_CONFIG_DIR ? join6(pusharyDir(), "setup", "claude-profiles", createHash2("sha256").update(claudeUserConfigFile()).digest("hex").slice(0, 32)) : join6(pusharyDir(), "setup");
+var claudeMcpReceipt = () => join6(claudeSetupDir(), "claude-mcp.json");
+var bridgeAgentKey = () => join6(pusharyDir(), "bridge-auth", "agent-key.json");
+var autoUpdateState = () => join6(pusharyDir(), "auto-update.json");
+var autoUpdateLock = () => join6(pusharyDir(), "auto-update.lock");
+var serviceOwedBackMark = () => join6(pusharyDir(), "service-owed-back");
+var autoUpdateLog = () => join6(pusharyDir(), "logs", "auto-update.log");
+var clientReportClaims = () => join6(pusharyDir(), "client-reports");
+var claudeRegistrationReceipt = () => join6(claudeSetupDir(), "claude-registration.json");
+var hermesConfig = () => join6(homedir4(), ".hermes", "config.yaml");
+var hermesConfigReceipt = () => join6(pusharyDir(), "setup", "hermes-config.json");
+var hermesSetupReceipt = () => join6(pusharyDir(), "setup", "hermes-plugin.json");
+var hermesAppWiringRecord = () => join6(pusharyDir(), "setup", "hermes-wired-by-mac-app");
+var fxQuestionRuleReceipt = () => join6(pusharyDir(), "setup", "fx-question-rule.json");
+var hookTakeoverReceipt = (agent) => join6(agent === "claude_code" ? claudeSetupDir() : join6(pusharyDir(), "setup"), `hook-takeover-${agent}.json`);
+var codexSkillDir2 = () => join6(codexHome(), "skills", "pushary");
+var codexAgentsMd2 = () => join6(codexHome(), "AGENTS.md");
+var geminiSettings = () => join6(homedir4(), ".gemini", "settings.json");
+var geminiMd = () => join6(homedir4(), ".gemini", "GEMINI.md");
+var pusharyConfigFile = () => join6(homedir4(), ".pushary", "config.json");
+var fxConfigDir = () => join6(homedir4(), ".fx");
+var fxMcpProfile = () => join6(fxConfigDir(), "mcp.json");
+var fxSettings = () => join6(fxConfigDir(), "settings.json");
+var fxAgentsMd = () => join6(fxConfigDir(), "AGENTS.md");
+var clineLocation = () => ({ home: homedir4(), environment: process.env });
 var clineMcpSettings = () => clineMcpSettingsPath(clineLocation());
 var clineRules = () => clineRulesFile(clineLocation());
 
 export {
   claudeConfigDir,
   claudeUserConfigFile,
-  HOOK_SHELL,
   holdBudgetOf,
+  hookCommandTokens,
+  executableFileName,
+  parseHookArgv,
+  parseHookCommand,
   hookBinaryNameOf,
+  hookExecutableName,
   guardBinary,
   guardBinaryRefusing,
   guardNodeScript,
@@ -1141,6 +1279,7 @@ export {
   codexAgentsMd,
   codexSkillDir,
   CODEX_HOOK_EVENTS,
+  CODEX_EARLIER_APPROVAL_MATCHERS,
   CODEX_REQUIRED_APPROVAL_EVENTS,
   codexMcpMixesCommandWithHttp,
   CODEX_RESTART_AFTER_TRANSPORT_CHANGE,
@@ -1151,6 +1290,7 @@ export {
   codexRegistrationHolder,
   addCodexHooks,
   removeCodexHooks,
+  codexHooksFeatureDisabled,
   hasCodexHooks,
   missingCodexHookEvents,
   codexHookPositions,
@@ -1162,6 +1302,14 @@ export {
   removeCodexHookTrust,
   removeCodexSettings,
   addCodexHookTrust,
+  resolveBridgeStub,
+  NO_SPOTLIGHT,
+  bridgeResolvesToApp,
+  installedBridgeBundleRoots,
+  macAppBridgeIsInstalled,
+  describeBridgeResolution,
+  isBridgeLocator,
+  liveBridgeProbe,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS,
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
@@ -1228,6 +1376,8 @@ export {
   vscodePluginMcp,
   claudeSettingsLocal,
   pusharyDir,
+  bridgeStub,
+  bridgeCache,
   claudeMcpReceipt,
   bridgeAgentKey,
   autoUpdateState,

package/dist/{chunk-AWF5WICI.js → chunk-JDGLNYDZ.js}

@@ -1,9 +1,9 @@
 import {
   findNativeClaudeInstall
-} from "./chunk-LURFSDCL.js";
+} from "./chunk-ROVLRXBI.js";
 import {
   isFile
-} from "./chunk-BQHZRH6S.js";
+} from "./chunk-T5I4PKOQ.js";
 
 // src/wrapper/claudeBinary.ts
 import { homedir } from "os";

package/dist/{chunk-UOE26LPT.js → chunk-JLJJRBTD.js}

@@ -1,13 +1,13 @@
+import {
+  CLAUDE_CODE_AGENT
+} from "./chunk-KHZCJP7P.js";
 import {
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-VD6CAELE.js";
-import {
-  CLAUDE_CODE_AGENT
-} from "./chunk-Z2TX7DVU.js";
+} from "./chunk-MFJHLVIZ.js";
 import {
   compatibleToolLookup
-} from "./chunk-MP3SEXXJ.js";
+} from "./chunk-76JOLPST.js";
 import {
   CLAUDE_HOOK_EVENTS,
   PUSHARY_MCP_URL,
@@ -19,7 +19,7 @@ import {
   isPusharyHook,
   registerHookEntry,
   removeClaudeMcpServers
-} from "./chunk-O7ITTNDD.js";
+} from "./chunk-JCSJEMTA.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   PHONE_ANSWERED_TOOLS,
@@ -30,7 +30,7 @@ import {
   pusharyMissingReason,
   refusalOutput,
   withHookHoldBudget
-} from "./chunk-4FAJQPFY.js";
+} from "./chunk-O5TB2LMQ.js";
 
 // src/config-document.ts
 import { parse, stringify } from "smol-toml";
@@ -308,6 +308,7 @@ var removeCompatibleMcpServer = (config, profile) => {
 };
 
 export {
+  parseConfigDocument,
   readConfigDocument,
   serializeConfigDocument,
   hasCompatibleMcpServer,