pushary 1.9.121 → 1.9.123

package/dist/{chunk-7FH6T4EN.js → chunk-ZBKM5V6B.js}

@@ -1,13 +1,13 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-3HZ374VU.js";
+} from "./chunk-27FILS44.js";
 import {
   hermesReceiptPaths,
   hermesSetupPredatesThePluginFolder,
   installHermesPlugin,
   refreshHermesPluginFiles,
   shippedHermesPlugin
-} from "./chunk-F4K2A7DJ.js";
+} from "./chunk-7LZQK7EB.js";
 import {
   fxIgnoresInstructionsFile,
   fxInstructionsBody,
@@ -16,7 +16,7 @@ import {
   macAppFxBridge,
   refreshClineKey,
   switchFxHttpEntryToBridge
-} from "./chunk-F5FMUDD7.js";
+} from "./chunk-SNF3OTPB.js";
 import {
   OPENCODE_HOOK_BINARY,
   agentHookOwner,
@@ -28,16 +28,16 @@ import {
   openCodePluginDir,
   openCodeWired,
   withOpenCodeAskRules
-} from "./chunk-O7VVRTOR.js";
+} from "./chunk-SBPVEVLZ.js";
 import {
   detectClaudeVersion
-} from "./chunk-KRKH26TX.js";
+} from "./chunk-P2WA3YY2.js";
 import {
   addCompatibleHooks,
   compatibleConfigFile,
   compatibleInstructionsFile,
   hasCompatibleHooks
-} from "./chunk-6RME4X3J.js";
+} from "./chunk-ZAYXOSEP.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
@@ -49,7 +49,10 @@ import {
   geminiWired,
   hasGeminiHooks,
   planHooks
-} from "./chunk-XOYPF2BI.js";
+} from "./chunk-Q3KKA5IZ.js";
+import {
+  KEY_FILE_MODE
+} from "./chunk-SZV5SLSD.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -85,6 +88,7 @@ import {
   geminiMd,
   guardBinary,
   hasCodexHooks,
+  namesCliBinary,
   namesOurBinary,
   needsReregistration,
   pusharyDir,
@@ -95,13 +99,13 @@ import {
   renderAgentInstructions,
   supportedClaudeEvents,
   vscodePluginMcp
-} from "./chunk-GZ3D46PV.js";
+} from "./chunk-EUIDFLPM.js";
 import {
   formatVersion,
   hookCommandsUseBareNames,
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "./chunk-IGMI36FA.js";
+} from "./chunk-KQKHSJOM.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -123,6 +127,7 @@ import { parse as parseTOML, stringify as stringifyTOML } from "smol-toml";
 var asRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 var CLAUDE_CLI_BINARIES = new Set(CLAUDE_HOOK_EVENTS.map((hook) => hook.binary));
 var registrationHolder = (settings) => registrationHolderOf(settings, CLAUDE_CLI_BINARIES);
+var holdsCliHooks = (settings) => registeredCommands(settings).some(({ command }) => namesCliBinary(command, CLAUDE_CLI_BINARIES));
 var registeredPusharyEvents = (settings) => new Set(
   registeredCommands(settings).filter(({ command }) => namesOurBinary(command, CLAUDE_CLI_BINARIES)).map(({ event }) => event)
 );
@@ -131,11 +136,13 @@ var reregisterVerdict = ({ settings, stored, version }) => {
   if (holder === "none") return { kind: "not_wired" };
   if (holder === "app") return { kind: "app_owned" };
   const unproven = claudeUnprovenHolds(settings);
-  if (unproven.length === 0 && !needsReregistration(stored, version)) return { kind: "current" };
   const supported = new Set(supportedClaudeEvents(version).map((hook) => hook.event));
   const present = registeredPusharyEvents(settings);
   const missing = [...supported].filter((event) => !present.has(event));
-  const extra = [...present].filter((event) => !supported.has(event));
+  if (unproven.length === 0 && missing.length === 0 && !needsReregistration(stored, version)) {
+    return { kind: "current" };
+  }
+  const extra = version === null ? [] : [...present].filter((event) => !supported.has(event));
   const repairable = unproven.filter((event) => supported.has(event));
   return missing.length > 0 || extra.length > 0 || repairable.length > 0 ? { kind: "stale", version, missing, extra, unproven: repairable } : { kind: "record_only", version };
 };
@@ -161,7 +168,7 @@ var readJson = (filePath) => {
   return null;
 };
 var writeJson = (filePath, data) => writeJsonAtomic(filePath, data);
-var hasPusharyClaudeHooks = (settings) => JSON.stringify(settings.hooks ?? {}).includes(CLAUDE_HOOK_BINARY);
+var hasPusharyClaudeHooks = (settings) => holdsCliHooks(settings);
 var hasPusharyMcp = (claudeJson2) => !!claudeJson2.mcpServers?.pushary;
 var PRIVATE_TO_OWNER = 384;
 var modeToPreserve = (filePath) => {
@@ -171,6 +178,9 @@ var modeToPreserve = (filePath) => {
     return PRIVATE_TO_OWNER;
   }
 };
+var OWNER_WRITE = 128;
+var isReadOnly = (filePath) => (modeToPreserve(filePath) & OWNER_WRITE) === 0;
+var writableModeToPreserve = (filePath) => isReadOnly(filePath) ? void 0 : modeToPreserve(filePath);
 var wouldWriteBareNames = (resolve, probe) => resolve(probe) === void 0;
 var reapplyClaudeSettings = (apiKey, paths = {}) => {
   const settingsPath = paths.settingsPath ?? claudeSettings();
@@ -190,7 +200,7 @@ var reapplyClaudeSettings = (apiKey, paths = {}) => {
     addPusharyToolPermissions(s);
     const binary = hookCommandsUseBareNames(paths.platform ?? process.platform) ? void 0 : (paths.resolveBinary ?? resolveGlobalBinary)(CLAUDE_HOOK_BINARY);
     addPusharyHooks(s, binary ? dirname(binary) : void 0, (paths.detectVersion ?? detectClaudeVersion)());
-    writeJson(settingsPath, s);
+    writeJsonAtomic(settingsPath, s, writableModeToPreserve(settingsPath));
     hooks = true;
   } catch {
     failed = true;
@@ -200,7 +210,7 @@ var reapplyClaudeSettings = (apiKey, paths = {}) => {
       if (!claudeJsonWritable) throw new Error(".claude.json could not be parsed");
       const cj = claudeJson2;
       addClaudeMcpServer(cj, apiKey);
-      writeJson(claudeJsonPath, cj);
+      writeJsonAtomic(claudeJsonPath, cj, KEY_FILE_MODE);
       mcp = true;
     } catch {
       failed = true;
@@ -224,10 +234,10 @@ var reapplyClaudeForVersion = (apiKey, paths = {}) => {
       return { verdict: verdict.kind, rewrote: false, missing: [] };
     }
     const resolveBinary = paths.resolveBinary ?? resolveGlobalBinary;
-    if (verdict.kind === "stale" && wouldWriteBareNames(resolveBinary, CLAUDE_HOOK_BINARY)) {
+    if (verdict.kind === "stale" && (wouldWriteBareNames(resolveBinary, CLAUDE_HOOK_BINARY) || isReadOnly(settingsPath))) {
       return { verdict: "stale", rewrote: false, missing: verdict.missing };
     }
-    const rewrote = verdict.kind === "stale" ? reapplyClaudeSettings(apiKey, { ...paths, settingsPath }).hooks : false;
+    const rewrote = verdict.kind === "stale" ? reapplyClaudeSettings(apiKey, { ...paths, settingsPath, detectVersion: () => version }).hooks : false;
     if (verdict.kind === "stale" && !rewrote) return { verdict: "stale", rewrote: false, missing: verdict.missing };
     writeJsonAtomic(receiptPath, receiptFor(version));
     return {
@@ -340,7 +350,7 @@ var reapplyGeminiSettings = (apiKey, paths = {}) => {
     if (apiKey) {
       addGeminiMcpServer(settings, apiKey);
     }
-    writeJson(settingsPath, settings);
+    writeJsonAtomic(settingsPath, settings, KEY_FILE_MODE);
     hooks = true;
     mcp = Boolean(apiKey);
   } catch {
@@ -356,7 +366,7 @@ var reapplyPluginMcp = (mcpPath, apiKey) => {
   if (!apiKey) return { configured: true, reapplied: false, hooks: false, mcp: false };
   try {
     addClaudeMcpServer(mcpConfig, apiKey);
-    writeJson(mcpPath, mcpConfig);
+    writeJsonAtomic(mcpPath, mcpConfig, KEY_FILE_MODE);
     return { configured: true, reapplied: true, hooks: false, mcp: true };
   } catch {
     return { configured: true, reapplied: false, hooks: false, mcp: false, failed: true };

package/dist/{codex-app-cards-switch-MEVTS3QV.js → codex-app-cards-switch-TGECJSVW.js}

@@ -22,17 +22,17 @@ import {
   turnCodexAppCardsOff,
   turnCodexAppCardsOn,
   whyLaunchctlFailed
-} from "./chunk-B3KFHR43.js";
-import "./chunk-HLZWEGW3.js";
+} from "./chunk-6YSUPE5Z.js";
+import "./chunk-SPEUUVMN.js";
 import "./chunk-XCEN33UP.js";
 import "./chunk-QCGNGEGE.js";
-import "./chunk-SFMJMQJC.js";
+import "./chunk-AHB2CUJZ.js";
 import "./chunk-XHKBHWLX.js";
-import "./chunk-4LR27PGD.js";
+import "./chunk-RBPPX663.js";
 import "./chunk-SZV5SLSD.js";
 import "./chunk-NCHNITQW.js";
-import "./chunk-GZ3D46PV.js";
-import "./chunk-IGMI36FA.js";
+import "./chunk-EUIDFLPM.js";
+import "./chunk-KQKHSJOM.js";
 import "./chunk-2M7FELUY.js";
 import "./chunk-T5I4PKOQ.js";
 import "./chunk-5S32WI3B.js";

package/dist/{codex-desktop-launch-E5TZ72YZ.js → codex-desktop-launch-F5SP75ED.js}

@@ -11,7 +11,7 @@ import {
   installedCodexApp,
   shellQuoted,
   writeDesktopProxy
-} from "./chunk-HLZWEGW3.js";
+} from "./chunk-SPEUUVMN.js";
 import "./chunk-XCEN33UP.js";
 import {
   CODEX_APP_LAUNCH_VARIABLE

package/dist/{codex-session-launch-UMVQ7FJA.js → codex-session-launch-DANHY5JS.js}

@@ -11,28 +11,28 @@ import {
   isCodexQuestionLeftWithTheLocalClient,
   planCodexElicitation,
   reportOwnedQuestion
-} from "./chunk-RI5APNBY.js";
+} from "./chunk-6VMEUCKP.js";
 import "./chunk-LIIIC27B.js";
-import "./chunk-S6TMCUU7.js";
-import "./chunk-KRKH26TX.js";
+import "./chunk-MXUQJIQS.js";
+import "./chunk-P2WA3YY2.js";
 import "./chunk-N5P2FLOJ.js";
-import "./chunk-FG67GH5B.js";
+import "./chunk-JLUMELYR.js";
 import "./chunk-ROVLRXBI.js";
 import "./chunk-5MITA7MU.js";
 import "./chunk-XMSDA5WA.js";
 import "./chunk-2QWQCU7L.js";
 import {
   writeDegraded
-} from "./chunk-QK4I4CHR.js";
+} from "./chunk-7ZTVBYPE.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-SQPAX33Q.js";
-import "./chunk-HINZZUOB.js";
-import "./chunk-UIHY3ANL.js";
+import "./chunk-SO44USAF.js";
+import "./chunk-B5OX2WCA.js";
+import "./chunk-2M7ZV6NA.js";
 import "./chunk-XHKBHWLX.js";
 import "./chunk-E5LU5MJ2.js";
-import "./chunk-4LR27PGD.js";
-import "./chunk-GZ3D46PV.js";
-import "./chunk-IGMI36FA.js";
+import "./chunk-RBPPX663.js";
+import "./chunk-EUIDFLPM.js";
+import "./chunk-KQKHSJOM.js";
 import "./chunk-2M7FELUY.js";
 import "./chunk-YU2EUD7O.js";
 import "./chunk-T5I4PKOQ.js";

package/dist/{global-upgrade-KHVTFNAK.js → global-upgrade-SIAPPAFR.js}

@@ -7,15 +7,15 @@ import {
   recordUnfinishedUpgrade,
   upgradeInstalledPackage,
   withUpgradeLock
-} from "./chunk-BPU6P3DS.js";
-import "./chunk-5CMNZXJV.js";
-import "./chunk-S6TMCUU7.js";
-import "./chunk-KRKH26TX.js";
+} from "./chunk-YANGE5FG.js";
+import "./chunk-I2D23TBS.js";
+import "./chunk-MXUQJIQS.js";
+import "./chunk-P2WA3YY2.js";
 import "./chunk-ROVLRXBI.js";
-import "./chunk-H2OUB5S5.js";
+import "./chunk-STGEWWFW.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-GZ3D46PV.js";
-import "./chunk-IGMI36FA.js";
+import "./chunk-EUIDFLPM.js";
+import "./chunk-KQKHSJOM.js";
 import "./chunk-T5I4PKOQ.js";
 import "./chunk-BG4HHB7E.js";
 import "./chunk-5S32WI3B.js";

package/dist/{identity-DAUTKB5X.js → identity-DCDWOISV.js}

@@ -2,9 +2,9 @@ import {
   getMachineId,
   getOrCreateMachineId,
   readExistingMachineId
-} from "./chunk-4LR27PGD.js";
-import "./chunk-GZ3D46PV.js";
-import "./chunk-IGMI36FA.js";
+} from "./chunk-RBPPX663.js";
+import "./chunk-EUIDFLPM.js";
+import "./chunk-KQKHSJOM.js";
 import "./chunk-T5I4PKOQ.js";
 import "./chunk-ZVU6WMMU.js";
 import "./chunk-HI5YJFKW.js";

package/dist/{live-capabilities-T2FOTXAH.js → live-capabilities-VB7PM2DJ.js}

@@ -22,10 +22,10 @@ import {
   resolveControlPolicy,
   resolveProviderBinary,
   trackProviderInventory
-} from "./chunk-S6TMCUU7.js";
-import "./chunk-KRKH26TX.js";
+} from "./chunk-MXUQJIQS.js";
+import "./chunk-P2WA3YY2.js";
 import "./chunk-ROVLRXBI.js";
-import "./chunk-IGMI36FA.js";
+import "./chunk-KQKHSJOM.js";
 import "./chunk-T5I4PKOQ.js";
 import "./chunk-ZVU6WMMU.js";
 import "./chunk-HI5YJFKW.js";

package/dist/{paths-W5X4C6PA.js → paths-346XNBFK.js}

@@ -39,8 +39,8 @@ import {
   serviceOwedBackMark,
   vscodePluginDir,
   vscodePluginMcp
-} from "./chunk-GZ3D46PV.js";
-import "./chunk-IGMI36FA.js";
+} from "./chunk-EUIDFLPM.js";
+import "./chunk-KQKHSJOM.js";
 import "./chunk-T5I4PKOQ.js";
 import "./chunk-ZVU6WMMU.js";
 import "./chunk-HI5YJFKW.js";

package/dist/{reapply-WW4LJZUD.js → reapply-H6ETJ2QP.js}

@@ -12,35 +12,35 @@ import {
   reapplyOpenCodePlugin,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-7FH6T4EN.js";
-import "./chunk-3HZ374VU.js";
-import "./chunk-F4K2A7DJ.js";
-import "./chunk-F5FMUDD7.js";
-import "./chunk-5UT5EFMH.js";
-import "./chunk-EVWF3A5D.js";
-import "./chunk-O7VVRTOR.js";
-import "./chunk-KRKH26TX.js";
+} from "./chunk-ZBKM5V6B.js";
+import "./chunk-27FILS44.js";
+import "./chunk-7LZQK7EB.js";
+import "./chunk-SNF3OTPB.js";
+import "./chunk-MKUFVNZL.js";
+import "./chunk-PO5Z73HT.js";
+import "./chunk-SBPVEVLZ.js";
+import "./chunk-P2WA3YY2.js";
 import "./chunk-ROVLRXBI.js";
-import "./chunk-6RME4X3J.js";
-import "./chunk-X4CDZLUK.js";
-import "./chunk-XOYPF2BI.js";
+import "./chunk-ZAYXOSEP.js";
+import "./chunk-WLC3AX6F.js";
+import "./chunk-Q3KKA5IZ.js";
 import "./chunk-7OSBFMRV.js";
 import "./chunk-LS3CQ536.js";
-import "./chunk-IZ7MIGO7.js";
+import "./chunk-DRYQ7RLF.js";
 import "./chunk-YPY4YCIZ.js";
 import "./chunk-2QWQCU7L.js";
-import "./chunk-QK4I4CHR.js";
+import "./chunk-7ZTVBYPE.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-SQPAX33Q.js";
-import "./chunk-HINZZUOB.js";
-import "./chunk-UIHY3ANL.js";
+import "./chunk-SO44USAF.js";
+import "./chunk-B5OX2WCA.js";
+import "./chunk-2M7ZV6NA.js";
 import "./chunk-XHKBHWLX.js";
 import "./chunk-E5LU5MJ2.js";
-import "./chunk-4LR27PGD.js";
+import "./chunk-RBPPX663.js";
 import "./chunk-SZV5SLSD.js";
 import "./chunk-NCHNITQW.js";
-import "./chunk-GZ3D46PV.js";
-import "./chunk-IGMI36FA.js";
+import "./chunk-EUIDFLPM.js";
+import "./chunk-KQKHSJOM.js";
 import "./chunk-2M7FELUY.js";
 import "./chunk-YU2EUD7O.js";
 import "./chunk-T5I4PKOQ.js";

package/dist/src/index.js

@@ -1,17 +1,17 @@
 import {
   handlePreToolUse
-} from "../chunk-TZHTLLXJ.js";
-import "../chunk-D2LPVOG5.js";
-import "../chunk-IEZXEY7L.js";
-import "../chunk-N47MAVYX.js";
+} from "../chunk-WP2AHPRO.js";
+import "../chunk-PO6ECYXG.js";
+import "../chunk-X6WYICTL.js";
+import "../chunk-2WGP6QE7.js";
 import "../chunk-7EYXAM63.js";
-import "../chunk-FEJP2I44.js";
-import "../chunk-WJUFRGJS.js";
-import "../chunk-7FDDOT2A.js";
-import "../chunk-NDOT226I.js";
+import "../chunk-IICWR257.js";
+import "../chunk-C2L477NM.js";
+import "../chunk-OJPHNITI.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-6RME4X3J.js";
+import "../chunk-ZAYXOSEP.js";
 import {
   fetchModeOverride,
   fetchModeState,
@@ -20,12 +20,12 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-X4CDZLUK.js";
-import "../chunk-SFMJMQJC.js";
-import "../chunk-XOYPF2BI.js";
+} from "../chunk-WLC3AX6F.js";
+import "../chunk-AHB2CUJZ.js";
+import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";
-import "../chunk-IZ7MIGO7.js";
+import "../chunk-DRYQ7RLF.js";
 import "../chunk-YPY4YCIZ.js";
 import {
   fetchAccountPublicKey
@@ -37,18 +37,18 @@ import {
   askUser,
   cancelQuestion,
   waitForAnswer
-} from "../chunk-QK4I4CHR.js";
+} from "../chunk-7ZTVBYPE.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-SQPAX33Q.js";
-import "../chunk-HINZZUOB.js";
-import "../chunk-UIHY3ANL.js";
+import "../chunk-SO44USAF.js";
+import "../chunk-B5OX2WCA.js";
+import "../chunk-2M7ZV6NA.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-E5LU5MJ2.js";
-import "../chunk-4LR27PGD.js";
+import "../chunk-RBPPX663.js";
 import "../chunk-SZV5SLSD.js";
 import "../chunk-NCHNITQW.js";
-import "../chunk-GZ3D46PV.js";
-import "../chunk-IGMI36FA.js";
+import "../chunk-EUIDFLPM.js";
+import "../chunk-KQKHSJOM.js";
 import {
   getApiKey,
   getBaseUrl

package/dist/{upgrade-lock-TJBGZLH6.js → upgrade-lock-YT4O5QW6.js}

@@ -4,9 +4,9 @@ import {
   installWithUpgradeLock,
   ownsUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-5CMNZXJV.js";
-import "./chunk-GZ3D46PV.js";
-import "./chunk-IGMI36FA.js";
+} from "./chunk-I2D23TBS.js";
+import "./chunk-EUIDFLPM.js";
+import "./chunk-KQKHSJOM.js";
 import "./chunk-T5I4PKOQ.js";
 import "./chunk-ZVU6WMMU.js";
 import "./chunk-HI5YJFKW.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pushary",
-  "version": "1.9.121",
+  "version": "1.9.123",
   "description": "Human-in-the-loop (HITL) for AI agents: ask a person for approvals or answers by push notification. One command connects Claude Code, Codex, Cursor, Gemini CLI and more.",
   "keywords": [
     "pushary",