pushary 1.9.58 → 1.9.60

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 1.9.60
+
+- Ships the CLI audit fixes merged after 1.9.59. `pushary mode terminal_only --for=30m` now expires after 30 minutes, just like `--for 30m`, instead of making the mode permanent.
+- Setup, repair and disconnect respect the active Claude configuration directory. Hook commands safely quote paths containing apostrophes, dollar signs or shell substitutions.
+- Commands reject unsupported preview flags and conflicting or surplus arguments before changing configuration. Transcript recovery works through both command entrypoints, and settings requests have a 15-second deadline with validated responses.
+- JSON failures carry the same exit code as the process. Unexpected hook failures report a stable error code while preserving native fallback, and transient error reports get one bounded retry. Network errors and support bundles redact proxy credentials.
+
+## 1.9.59
+
+- Codex app cards now also carry three questions from Codex's browser: access to a site, a download and an upload. They used to show only in Codex, because the browser raises them itself and no hook sees them. With the switch on, each reaches Pushary as a yes or no question that names the site, and the first answer wins. A download or upload question carries the address up to the end of its path. Nothing after a `?` or `#` is in that question, and the address ends in … when something was left out; the path itself is sent.
+- For a download or an upload, Yes allows that one transfer. For a site, Yes allows the site for the rest of the conversation, or for the turn if Codex is set to ask each turn, and No blocks it for the conversation, because that is what Codex does with the answer its own Allow button sends. The question's details say which. Pushary never sends "always", "for this site" or "for all sites"; those stay in Codex.
+- `pushary codex --app-cards on`, `pushary codex --desktop` and the command's help now say that the browser's questions are carried too.
+- Other Browser use questions stay in Codex for now: Developer Tools access, browsing history, verification codes and sign-in.
+
 ## 1.9.58
 
 - `pushary clean` no longer removes the Codex app cards launcher when it could not turn the switch off. It keeps the folder and prints the reason. Before, a failed turn-off could leave the Codex app starting through a launcher that was gone, and Codex would not start its engine until the next logout. The same now holds when the setting that starts the Codex app cannot be read while a launcher or login item is on disk: clean and `pushary codex --app-cards off` change nothing and say so, where they used to read it as not set.

package/data/cursor-plugin/.cursor-plugin/plugin.json

@@ -2,7 +2,11 @@
   "name": "pushary",
   "displayName": "Pushary — Control Panel for AI Agents",
   "description": "Push notifications, human-in-the-loop questions, and permission gating for your AI coding agent. Get a push when a task finishes, answer the agent from your phone, and approve risky commands before they run.",
-  "version": "0.2.7",
+  "version": "0.2.8",
+  "minClientVersions": {
+    "grokbot": "never",
+    "sand": "never"
+  },
   "author": { "name": "Pushary", "email": "business@pushary.com" },
   "homepage": "https://pushary.com",
   "repository": "https://github.com/Pushary/cursor-plugin",

package/data/cursor-plugin/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.2.8
+
+- Hidden from Grok Bot. This plugin needs an API key and command hooks on your own computer, which a Bot's cloud computer does not have. Grok Bot users install [Pushary for Grok Bot](https://github.com/Pushary/grok-bot-plugin) instead.
+
 ## 0.2.6
 
 - Under When I'm out, a file change nobody answers is refused, even when your rule approves on timeout. Cursor's file hooks have no prompt of their own, so the change used to run once the wait ended. Under Every time a rule that approves on timeout still runs the change, as before.

package/dist/{api-WVXBM4MR.js → api-ASQA5PZM.js}

@@ -15,24 +15,24 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-DQ565WFA.js";
-import "./chunk-ZL3UR6M5.js";
+} from "./chunk-EZHY65QA.js";
+import "./chunk-SEILUNWB.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-S54YLXWW.js";
-import "./chunk-5DZHKNBU.js";
-import "./chunk-IJ6XKKQW.js";
-import "./chunk-7QLSKOSU.js";
+import "./chunk-METMK3L4.js";
+import "./chunk-4MWRR5IT.js";
+import "./chunk-O6IUZGWV.js";
+import "./chunk-PPY5N2E6.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-MYBCXDIL.js";
-import "./chunk-WVP6UQG3.js";
+import "./chunk-6MJWYYAS.js";
+import "./chunk-2QREHU4O.js";
 import "./chunk-QENTGE75.js";
-import "./chunk-LVDC3RUE.js";
-import "./chunk-5SFM6XB4.js";
+import "./chunk-BG4Y64FW.js";
+import "./chunk-ERK24P76.js";
 import "./chunk-QTOLNRET.js";
 import {
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON
-} from "./chunk-GZL3KEPC.js";
+} from "./chunk-AXJLJJ3M.js";
 export {
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON,

package/dist/bin/pushary-bell-hook.js

@@ -1,44 +1,44 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-XTZHUIGJ.js";
+} from "../chunk-ATKN4BJT.js";
 import {
   readHookInput
-} from "../chunk-K5CAURU5.js";
-import "../chunk-TN74MUMB.js";
+} from "../chunk-6MC2XXFD.js";
+import "../chunk-CEQ2AZH4.js";
 import "../chunk-QW3FRUFB.js";
-import "../chunk-XWY4UW62.js";
-import "../chunk-QP3XPS5U.js";
-import "../chunk-KSVCCSAO.js";
-import "../chunk-ATUZX4K7.js";
-import "../chunk-ECJJKDP7.js";
-import "../chunk-QDFLBTUP.js";
-import "../chunk-GMXKITVA.js";
-import "../chunk-JSQOHMNJ.js";
-import "../chunk-N3NSWWNU.js";
-import "../chunk-C3IWX6KU.js";
+import "../chunk-PUHP4IBA.js";
+import "../chunk-HC3FHDKB.js";
+import "../chunk-CDQHQAS7.js";
+import "../chunk-IF26ZGZ7.js";
+import "../chunk-XV6S5PWW.js";
+import "../chunk-4MUFZU2G.js";
+import "../chunk-NMUI3ZWG.js";
+import "../chunk-2AELPDMT.js";
+import "../chunk-GAMVAORR.js";
+import "../chunk-7JXJJNQ5.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-IRZ5FVWG.js";
-import "../chunk-RF74KBF5.js";
-import "../chunk-QTCFEKLJ.js";
-import "../chunk-XXNT4FGA.js";
-import "../chunk-DQ565WFA.js";
-import "../chunk-ZL3UR6M5.js";
+import "../chunk-WN3RACVD.js";
+import "../chunk-W2IVTHIG.js";
+import "../chunk-33OOEVPG.js";
+import "../chunk-YPD3MTFU.js";
+import "../chunk-EZHY65QA.js";
+import "../chunk-SEILUNWB.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-S54YLXWW.js";
-import "../chunk-5DZHKNBU.js";
-import "../chunk-IJ6XKKQW.js";
-import "../chunk-7QLSKOSU.js";
+import "../chunk-METMK3L4.js";
+import "../chunk-4MWRR5IT.js";
+import "../chunk-O6IUZGWV.js";
+import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-7RZO6VWD.js";
-import "../chunk-MYBCXDIL.js";
-import "../chunk-WVP6UQG3.js";
+import "../chunk-Y5VKZNFN.js";
+import "../chunk-6MJWYYAS.js";
+import "../chunk-2QREHU4O.js";
 import "../chunk-QENTGE75.js";
-import "../chunk-LVDC3RUE.js";
-import "../chunk-5SFM6XB4.js";
+import "../chunk-BG4Y64FW.js";
+import "../chunk-ERK24P76.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-GZL3KEPC.js";
+import "../chunk-AXJLJJ3M.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,41 +5,41 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-XTZHUIGJ.js";
+} from "../chunk-ATKN4BJT.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-M7NX25ZA.js";
+} from "../chunk-K4MBKXAE.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-QDFLBTUP.js";
+} from "../chunk-4MUFZU2G.js";
 import {
   parseFlags
-} from "../chunk-GMXKITVA.js";
-import "../chunk-IRZ5FVWG.js";
-import "../chunk-7QLSKOSU.js";
+} from "../chunk-NMUI3ZWG.js";
+import "../chunk-WN3RACVD.js";
+import "../chunk-PPY5N2E6.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-7RZO6VWD.js";
+import "../chunk-Y5VKZNFN.js";
 import {
   claudeSettings
-} from "../chunk-MYBCXDIL.js";
-import "../chunk-WVP6UQG3.js";
+} from "../chunk-6MJWYYAS.js";
+import "../chunk-2QREHU4O.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-QENTGE75.js";
-import "../chunk-LVDC3RUE.js";
-import "../chunk-5SFM6XB4.js";
+import "../chunk-BG4Y64FW.js";
+import "../chunk-ERK24P76.js";
 import "../chunk-QTOLNRET.js";
 import {
   isRecord
-} from "../chunk-GZL3KEPC.js";
+} from "../chunk-AXJLJJ3M.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,40 +8,40 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-CK5BCFQF.js";
+} from "../chunk-7WFRY6OL.js";
 import "../chunk-VUFHYMSP.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-VPZ5K72D.js";
+} from "../chunk-RPPXQNIA.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-TN74MUMB.js";
+} from "../chunk-CEQ2AZH4.js";
 import "../chunk-QW3FRUFB.js";
 import {
   ensureDaemonRunning
-} from "../chunk-QP3XPS5U.js";
-import "../chunk-KSVCCSAO.js";
-import "../chunk-ATUZX4K7.js";
-import "../chunk-ECJJKDP7.js";
-import "../chunk-QDFLBTUP.js";
-import "../chunk-GMXKITVA.js";
+} from "../chunk-HC3FHDKB.js";
+import "../chunk-CDQHQAS7.js";
+import "../chunk-IF26ZGZ7.js";
+import "../chunk-XV6S5PWW.js";
+import "../chunk-4MUFZU2G.js";
+import "../chunk-NMUI3ZWG.js";
 import {
   encryptRecord
-} from "../chunk-JSQOHMNJ.js";
-import "../chunk-N3NSWWNU.js";
+} from "../chunk-2AELPDMT.js";
+import "../chunk-GAMVAORR.js";
 import {
   transcriptsEnabled
-} from "../chunk-C3IWX6KU.js";
+} from "../chunk-7JXJJNQ5.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-IRZ5FVWG.js";
+import "../chunk-WN3RACVD.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -58,11 +58,11 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-RF74KBF5.js";
-import "../chunk-QTCFEKLJ.js";
+} from "../chunk-W2IVTHIG.js";
+import "../chunk-33OOEVPG.js";
 import {
   repoKeyFor
-} from "../chunk-XXNT4FGA.js";
+} from "../chunk-YPD3MTFU.js";
 import {
   askUser,
   cancelQuestion,
@@ -73,29 +73,31 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-DQ565WFA.js";
+} from "../chunk-EZHY65QA.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-ZL3UR6M5.js";
+} from "../chunk-SEILUNWB.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-S54YLXWW.js";
-import "../chunk-5DZHKNBU.js";
+import "../chunk-METMK3L4.js";
+import "../chunk-4MWRR5IT.js";
 import {
   getMachineId
-} from "../chunk-IJ6XKKQW.js";
-import "../chunk-7QLSKOSU.js";
+} from "../chunk-O6IUZGWV.js";
+import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-7RZO6VWD.js";
-import "../chunk-MYBCXDIL.js";
-import "../chunk-WVP6UQG3.js";
+import "../chunk-Y5VKZNFN.js";
+import {
+  claudeConfigDir
+} from "../chunk-6MJWYYAS.js";
+import "../chunk-2QREHU4O.js";
 import "../chunk-QENTGE75.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-LVDC3RUE.js";
+} from "../chunk-BG4Y64FW.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-5SFM6XB4.js";
+} from "../chunk-ERK24P76.js";
 import "../chunk-QTOLNRET.js";
 import {
   DECISION_STOP_REASON,
@@ -106,7 +108,7 @@ import {
   redactSecretsFromContent,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-GZL3KEPC.js";
+} from "../chunk-AXJLJJ3M.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {
@@ -1228,7 +1230,6 @@ var remoteCompatibilityIssue = (args2) => {
 
 // src/wrapper/localLeg.ts
 import { readFileSync } from "fs";
-import { homedir as homedir2 } from "os";
 import { join as join2 } from "path";
 var SIGNAL_EXIT_BASE = 128;
 var SIGNAL_NUMBERS2 = { SIGHUP: 1, SIGINT: 2, SIGTERM: 15 };
@@ -1299,7 +1300,7 @@ var runLocalLeg = (session, deps = {}) => {
     const readIdentity = () => {
       if (!child.pid) return;
       try {
-        const root = process.env.CLAUDE_CONFIG_DIR || join2(homedir2(), ".claude");
+        const root = claudeConfigDir();
         const record = JSON.parse(readFileSync(join2(root, "sessions", `${child.pid}.json`), "utf8"));
         if (record.pid !== child.pid || record.cwd !== process.cwd() || record.startedAt < spawnedAt - 5e3 || typeof record.startedAt !== "number" || !/^[a-f0-9-]{36}$/i.test(record.sessionId)) return;
         if (record.sessionId !== session.getSessionId()) session.setSessionId(record.sessionId);

package/dist/bin/pushary-clean.js

@@ -15,26 +15,26 @@ import {
   storedMacAppState,
   storedPusharyKeychainServices,
   waitForMacAppExit
-} from "../chunk-XEJV3QSS.js";
+} from "../chunk-4PZXI7WU.js";
 import {
   PUSHARY_SKILL_NAME,
   PUSHARY_SKILL_SOURCE,
   createGuards
 } from "../chunk-EUW7JL2K.js";
-import "../chunk-ZJNU32VE.js";
+import "../chunk-Y5V4PA2Z.js";
 import "../chunk-XCEN33UP.js";
 import {
   describeCliKeyRevocation,
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-X6F4BQEE.js";
-import "../chunk-VLJ5C6IT.js";
+} from "../chunk-CSOROFJY.js";
+import "../chunk-YGE6ML3O.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-3WNOO7BM.js";
+} from "../chunk-WXPVVXBU.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -43,21 +43,21 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-MCHOBQHE.js";
+} from "../chunk-S54C6TQC.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-T2BEIPK2.js";
+} from "../chunk-U7NR4JVD.js";
 import "../chunk-QCGNGEGE.js";
-import "../chunk-4YNNAF53.js";
+import "../chunk-ADR3KHOC.js";
 import {
   planFxRemoval,
   removeInstructionBlock
-} from "../chunk-HUWLEVL2.js";
-import "../chunk-4LUPZ347.js";
+} from "../chunk-WXZHQ3TT.js";
+import "../chunk-FDWMG6NY.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -69,14 +69,14 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-T2AC5VFQ.js";
+} from "../chunk-QGSHV3WO.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-M7NX25ZA.js";
+} from "../chunk-K4MBKXAE.js";
 import "../chunk-VUFHYMSP.js";
 import {
   compatibleConfigFile,
@@ -94,10 +94,10 @@ import {
   removePusharyToolPermissions,
   restoreClaudeMcpServer,
   serializeConfigDocument
-} from "../chunk-XWY4UW62.js";
+} from "../chunk-PUHP4IBA.js";
 import {
   disableDaemonService
-} from "../chunk-QP3XPS5U.js";
+} from "../chunk-HC3FHDKB.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -105,15 +105,15 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-KSVCCSAO.js";
+} from "../chunk-CDQHQAS7.js";
 import {
   removeGeminiSettings
-} from "../chunk-ATUZX4K7.js";
-import "../chunk-ECJJKDP7.js";
-import "../chunk-QDFLBTUP.js";
+} from "../chunk-IF26ZGZ7.js";
+import "../chunk-XV6S5PWW.js";
+import "../chunk-4MUFZU2G.js";
 import {
-  rejectUnknownFlags
-} from "../chunk-GMXKITVA.js";
+  parseFlags
+} from "../chunk-NMUI3ZWG.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-6ICPEJY5.js";
 import {
@@ -121,28 +121,30 @@ import {
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-IRZ5FVWG.js";
+} from "../chunk-WN3RACVD.js";
 import "../chunk-E46NE7FB.js";
-import "../chunk-RF74KBF5.js";
-import "../chunk-QTCFEKLJ.js";
-import "../chunk-XXNT4FGA.js";
-import "../chunk-DQ565WFA.js";
-import "../chunk-ZL3UR6M5.js";
+import "../chunk-W2IVTHIG.js";
+import "../chunk-33OOEVPG.js";
+import "../chunk-YPD3MTFU.js";
+import "../chunk-EZHY65QA.js";
+import "../chunk-SEILUNWB.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-S54YLXWW.js";
-import "../chunk-5DZHKNBU.js";
-import "../chunk-IJ6XKKQW.js";
-import "../chunk-7QLSKOSU.js";
+import "../chunk-METMK3L4.js";
+import "../chunk-4MWRR5IT.js";
+import "../chunk-O6IUZGWV.js";
+import "../chunk-PPY5N2E6.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-7RZO6VWD.js";
+import "../chunk-Y5VKZNFN.js";
 import {
+  claudeConfigDir,
   claudeJson,
   claudeMcpReceipt,
   claudeSettings,
   claudeSettingsLocal,
   claudeSkillDir,
+  claudeUserConfigFile,
   codexAgentsMd,
   codexConfigToml,
   codexHookPositions,
@@ -168,21 +170,21 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-MYBCXDIL.js";
+} from "../chunk-6MJWYYAS.js";
 import {
   cleanNpmEnv,
   globalPackageState,
   npmIsOnPath,
   readGlobalFolder,
   readGlobalPrefix
-} from "../chunk-WVP6UQG3.js";
+} from "../chunk-2QREHU4O.js";
 import "../chunk-QENTGE75.js";
 import {
   getBaseUrl
-} from "../chunk-LVDC3RUE.js";
+} from "../chunk-BG4Y64FW.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-5SFM6XB4.js";
+} from "../chunk-ERK24P76.js";
 import {
   CLI_PACKAGE_NAMES,
   globalPackageFolder,
@@ -196,11 +198,11 @@ import {
   SUPPORT_EMAIL,
   isValidApiKey,
   redactSecrets
-} from "../chunk-GZL3KEPC.js";
+} from "../chunk-AXJLJJ3M.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync5, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";
-import { dirname, join as join5 } from "path";
+import { dirname as dirname2, join as join5 } from "path";
 import { homedir as homedir4, tmpdir } from "os";
 import { confirm } from "@inquirer/prompts";
 import { parse as parseTOML, stringify as stringifyTOML } from "smol-toml";
@@ -357,11 +359,11 @@ var skillsStoreRemoval = (home = homedir2()) => {
 // src/cli/claude-backups.ts
 import { existsSync as existsSync4, readFileSync as readFileSync3, readdirSync as readdirSync2 } from "fs";
 import { homedir as homedir3 } from "os";
-import { join as join3 } from "path";
+import { dirname, join as join3 } from "path";
 var BACKUP_PREFIX = ".claude.json.backup";
 var claudeJsonBackups = (home = homedir3()) => {
-  const rollingDir = join3(home, ".claude", "backups");
-  const legacy = join3(home, BACKUP_PREFIX);
+  const rollingDir = join3(claudeConfigDir(home), "backups");
+  const legacy = join3(dirname(claudeUserConfigFile(home)), BACKUP_PREFIX);
   const rolling = existsSync4(rollingDir) ? readdirSync2(rollingDir).filter((name) => name.startsWith(BACKUP_PREFIX)).sort().map((name) => join3(rollingDir, name)) : [];
   return existsSync4(legacy) ? [...rolling, legacy] : rolling;
 };
@@ -572,7 +574,7 @@ var guards = createGuards(() => dryRun, wouldNote);
 var guardedWrite = (path, contents) => guards.write(path, contents);
 var guardedRemove = (path, options) => guards.remove(path, options);
 var cursorPluginLeftovers = () => {
-  const parent = dirname(CURSOR_PLUGIN_DIR);
+  const parent = dirname2(CURSOR_PLUGIN_DIR);
   try {
     return readdirSync4(parent).filter(isCursorPluginLeftover).map((name) => join5(parent, name));
   } catch {
@@ -666,13 +668,13 @@ var cleanSettingsFile = (path, label, scope) => {
 };
 var agentConfigDirectories = () => [
   homedir4(),
-  dirname(CLAUDE_SETTINGS),
-  dirname(codexConfigToml()),
-  dirname(geminiSettings()),
-  dirname(CURSOR_USER_HOOKS),
+  dirname2(CLAUDE_SETTINGS),
+  dirname2(codexConfigToml()),
+  dirname2(geminiSettings()),
+  dirname2(CURSOR_USER_HOOKS),
   openCodeConfigDir(),
   fxConfigDir(),
-  ...vscodeSettingsTargets(existsSync5).map((settings) => dirname(settings))
+  ...vscodeSettingsTargets(existsSync5).map((settings) => dirname2(settings))
 ];
 var restoreTakeoverReceipts = () => {
   const targets = [
@@ -754,23 +756,26 @@ var main = async () => {
   console.log(`  ${bold("Pushary Clean")}`);
   console.log(`  ${dim("Removes all Pushary configuration")}`);
   console.log();
+  let flags;
   try {
-    rejectUnknownFlags(
-      process.argv.slice(2).filter((a) => a !== "clean"),
-      ["--dry-run", "--everything", "--yes", "-y", "--help", "-h"]
+    const args = process.argv.slice(2);
+    flags = parseFlags(
+      args[0] === "clean" ? args.slice(1) : args,
+      { bools: ["dry-run", "everything", "yes", "y"], values: [] }
     );
+    if (flags.command !== void 0 || flags.rest.length > 0) throw new Error("clean takes no positional arguments");
   } catch (err) {
     process.stderr.write(`  ! ${err instanceof Error ? err.message : String(err)}
 `);
     process.exit(EXIT.USAGE);
   }
-  dryRun = process.argv.includes("--dry-run");
-  const everything = process.argv.includes("--everything");
+  dryRun = flags.bools.has("dry-run");
+  const everything = flags.bools.has("everything");
   if (dryRun) {
     console.log(`  ${bold("Dry run")} ${dim("- nothing will be changed")}`);
     console.log();
   }
-  const assumeYes = dryRun || process.argv.includes("--yes") || process.argv.includes("-y");
+  const assumeYes = dryRun || flags.bools.has("yes") || flags.bools.has("y");
   if (!assumeYes && !process.stdin.isTTY) {
     console.log(`  ${yellow("!")} Non-interactive shell. Re-run with --yes to confirm removal.`);
     process.exit(1);
@@ -858,7 +863,7 @@ var main = async () => {
       console.log(`  ${skip} Claude Code MCP servers ${dim("(setup receipt is unreadable; left unchanged)")}`);
     } else if (receipt && restoreClaudeMcpServer(claudeJson2, receipt) || !receipt && removeClaudeMcpServers(claudeJson2)) {
       writeJson(CLAUDE_JSON, claudeJson2);
-      console.log(`  ${check} Claude Code MCP servers ${dim(receipt ? "(previous entry restored)" : "(removed from ~/.claude.json)")}`);
+      console.log(`  ${check} Claude Code MCP servers ${dim(receipt ? "(previous entry restored)" : `(removed from ${shortenHome(CLAUDE_JSON)})`)}`);
       if (keepShared && receipt) guardedRemove(CLAUDE_MCP_RECEIPT, { force: true });
     } else {
       if (receipt && !keepShared) incompleteClean = true;