pushary 1.9.65 → 1.9.67

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 1.9.67
+
+- Hermes: setup installs the Pushary plugin as a folder in `~/.hermes/plugins/pushary`, where Hermes keeps your own plugins, instead of pip-installing it into Hermes's old virtualenv. Hermes v0.21.6 and later run from a Python they manage and rebuild on every `hermes update`, which left the pip copy behind and silently unloaded Pushary. The folder survives updates. Setup turns the plugin on with `hermes plugins enable pushary` and `hermes config set`, and never restarts Hermes for you.
+- `pushary upgrade` moves a Hermes setup from before this release over to the folder, removes the old pip copy Hermes would otherwise load, and tells you to run `hermes gateway restart`.
+- Setup no longer turns off Hermes's `clarify` tool. While the plugin is loaded it sends Hermes's questions to your phone through `pushary_ask`; without the plugin Hermes asks in its own prompt. Setups from before this release get `clarify` back.
+- `pushary doctor` reports Hermes as connected only when the running Hermes loaded the plugin, and says when Hermes needs a restart, runs an older copy, or has the plugin switched off. It no longer asks for the global package when Pushary for Mac saved the key.
+- Setup finds the `hermes` command in `~/.local/bin` and Homebrew when it is not on your PATH, and follows Hermes profiles (`HERMES_HOME` and `active_profile`).
+- `pushary clean` removes the plugin folder only if Pushary installed it, and leaves a Hermes that Pushary for Mac connected, and the key the app saved for it, to the app. Neither setup nor the Mac app writes an older plugin over a newer one.
+
+## 1.9.66
+
+- In Claude Code, an approval stays answerable from your phone and from the terminal at the same time, and whichever answers first wins. Before, Pushary held the call for its window (60 seconds by default) while the terminal showed only a spinner, then withdrew the phone question and left only the terminal. Now Claude Code shows its own prompt straight away, Pushary sends the same question to your phone, and the phone keeps it for up to 10 minutes. Answer at the terminal and Pushary withdraws the phone question. This applies in an interactive Claude Code session in default or accept-edits mode, when only Pushary's defaults ask about the call. In bypass mode, and in `claude -p` and other headless runs, there is no prompt to answer, so Pushary still holds the call as before.
+- Claude Code always shows its prompt for these calls, even where its own allow rules, a "don't ask again" choice or accept-edits would have run them without asking.
+- A phone-only rule that approves or denies after a set time still does that when nobody answers in time. Other rules, including the built-in ones, never decide a call nobody answered: the prompt stays open. If Pushary cannot reach your phone, the terminal prompt stays and you answer there.
+- A rule you wrote, a preset you picked or a mode you switched to for now keeps the old behaviour, as you set it up. So does a Team approval route, which its approver answers, not the terminal.
+- Setup, upgrade and the daily update add a proof of the 10 minute hold to the Claude Code permission hook. Until then, an older registration keeps the window your rule had before, with the terminal answerable from the start.
+- With Pushary for Mac, approvals work as before for now.
+
 ## 1.9.65
 
 - OpenCode now asks before shell commands, edits and web fetches, so those approvals reach Pushary. Out of the box OpenCode runs all three without asking anybody, and Pushary's plugin can only answer what OpenCode asks, so until now an OpenCode set up by Pushary approved nothing. Setup sets `bash`, `edit` and `webfetch` to `ask` under `permission` in `opencode.json`, but only for a tool no rule of yours names. A rule for every tool (`"*"`), another name for the same tool (`shell`, `write`, `patch`), a switch under `tools`, a list of patterns and a single `permission` value all count as yours and stay as they are. Pushary's rules go before yours, and OpenCode follows the last rule that matches, so yours still decide.

package/data/SKILL.md

@@ -272,7 +272,7 @@ brew install --cask pushary/tap/pushary
 
 They can also download it from https://pushary.com/download. It needs macOS 14 or later. It is not in the App Store.
 
-The command line works on macOS too. Offer it if the user prefers the terminal, or if the user runs Hermes, because Hermes needs a Python the app cannot install.
+The command line works on macOS too. Offer it if the user prefers the terminal. The app connects Hermes as well.
 
 ### Branch 3. `Linux` or `Windows_NT`
 

package/data/cursor-plugin/skills/pushary/SKILL.md

@@ -265,7 +265,7 @@ brew install --cask pushary/tap/pushary
 
 They can also download it from https://pushary.com/download. It needs macOS 14 or later. It is not in the App Store.
 
-The command line works on macOS too. Offer it if the user prefers the terminal, or if the user runs Hermes, because Hermes needs a Python the app cannot install.
+The command line works on macOS too. Offer it if the user prefers the terminal. The app connects Hermes as well.
 
 ### Branch 3. `Linux` or `Windows_NT`
 

package/data/vscode-plugin/skills/pushary/SKILL.md

@@ -265,7 +265,7 @@ brew install --cask pushary/tap/pushary
 
 They can also download it from https://pushary.com/download. It needs macOS 14 or later. It is not in the App Store.
 
-The command line works on macOS too. Offer it if the user prefers the terminal, or if the user runs Hermes, because Hermes needs a Python the app cannot install.
+The command line works on macOS too. Offer it if the user prefers the terminal. The app connects Hermes as well.
 
 ### Branch 3. `Linux` or `Windows_NT`
 

package/dist/{api-32B3XLJR.js → api-3WIPD5GC.js}

@@ -1,4 +1,5 @@
 import {
+  ABANDONED_WAIT,
   WAIT_RESPONSE_GRACE_MS,
   askUser,
   cancelQuestion,
@@ -16,25 +17,26 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-DTVHZDYM.js";
+} from "./chunk-D3U6CN7T.js";
 import "./chunk-POFBE6ZY.js";
-import "./chunk-BKCI53W6.js";
-import "./chunk-UHS5MMAI.js";
-import "./chunk-7ILQX47W.js";
-import "./chunk-FWS2KLV2.js";
+import "./chunk-KNUYUQBP.js";
+import "./chunk-3THDNNVL.js";
+import "./chunk-P4RXSZDT.js";
+import "./chunk-PIBWX3EF.js";
 import "./chunk-PPY5N2E6.js";
 import "./chunk-KZERVKTD.js";
-import "./chunk-ATPJGHUP.js";
-import "./chunk-SCMEVDAR.js";
-import "./chunk-Y64JGYTB.js";
-import "./chunk-BAGBCSXA.js";
+import "./chunk-TI4JYPGQ.js";
+import "./chunk-WJLHZ6E6.js";
+import "./chunk-32OSSYGZ.js";
+import "./chunk-X2MTVD4W.js";
 import "./chunk-QTOLNRET.js";
 import {
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON
-} from "./chunk-MNKIR2ZB.js";
+} from "./chunk-RQOT6QL3.js";
 import "./chunk-MLKGABMK.js";
 export {
+  ABANDONED_WAIT,
   DECISION_STOP_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
   WAIT_RESPONSE_GRACE_MS,

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,39 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-I2UBF2SS.js";
+} from "../chunk-RO2B4YBF.js";
 import {
   readHookInput
-} from "../chunk-PP7FC3Y7.js";
-import "../chunk-Q2BD4IBX.js";
-import "../chunk-SZBMTOUZ.js";
-import "../chunk-WY6YAMZW.js";
-import "../chunk-ADXHPGBZ.js";
-import "../chunk-GTBWWCCM.js";
-import "../chunk-ANP3DIST.js";
-import "../chunk-SROWUG5W.js";
-import "../chunk-Z3M627TQ.js";
+} from "../chunk-EQR6JSFE.js";
+import "../chunk-SB6TYV4M.js";
+import "../chunk-Y6ZN454E.js";
+import "../chunk-ICQCQAUO.js";
+import "../chunk-LJHDUKBB.js";
+import "../chunk-BFF3ABFV.js";
+import "../chunk-ZK5WYAMI.js";
+import "../chunk-FONWVVDD.js";
 import "../chunk-NMUI3ZWG.js";
-import "../chunk-QSW3HAKI.js";
-import "../chunk-TJUJAK5L.js";
-import "../chunk-TK4JU2F7.js";
+import "../chunk-NWN6GGJL.js";
+import "../chunk-YSD4SMHE.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-ED2SWTPC.js";
-import "../chunk-3UNAPXED.js";
-import "../chunk-3KXBRSL3.js";
-import "../chunk-DTVHZDYM.js";
+import "../chunk-JOBSKQ2Z.js";
+import "../chunk-XFDWLDHG.js";
+import "../chunk-GMHQYX3D.js";
+import "../chunk-D3U6CN7T.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-BKCI53W6.js";
-import "../chunk-UHS5MMAI.js";
-import "../chunk-7ILQX47W.js";
-import "../chunk-FWS2KLV2.js";
+import "../chunk-KNUYUQBP.js";
+import "../chunk-3THDNNVL.js";
+import "../chunk-P4RXSZDT.js";
+import "../chunk-PIBWX3EF.js";
 import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-2VADJ6JH.js";
-import "../chunk-ATPJGHUP.js";
-import "../chunk-SCMEVDAR.js";
-import "../chunk-Y64JGYTB.js";
-import "../chunk-BAGBCSXA.js";
+import "../chunk-METUT7V4.js";
+import "../chunk-TI4JYPGQ.js";
+import "../chunk-WJLHZ6E6.js";
+import "../chunk-32OSSYGZ.js";
+import "../chunk-X2MTVD4W.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-MNKIR2ZB.js";
+import "../chunk-RQOT6QL3.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-bell-hook.ts

package/dist/bin/pushary-bell.js

@@ -5,40 +5,40 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-I2UBF2SS.js";
+} from "../chunk-RO2B4YBF.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-AN7C3CHH.js";
+} from "../chunk-77L2TNJW.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-Z3M627TQ.js";
+} from "../chunk-FONWVVDD.js";
 import {
   parseFlags
 } from "../chunk-NMUI3ZWG.js";
-import "../chunk-ED2SWTPC.js";
+import "../chunk-JOBSKQ2Z.js";
 import "../chunk-PPY5N2E6.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-2VADJ6JH.js";
+import "../chunk-METUT7V4.js";
 import {
   claudeSettings
-} from "../chunk-ATPJGHUP.js";
+} from "../chunk-TI4JYPGQ.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "../chunk-SCMEVDAR.js";
-import "../chunk-Y64JGYTB.js";
-import "../chunk-BAGBCSXA.js";
+} from "../chunk-WJLHZ6E6.js";
+import "../chunk-32OSSYGZ.js";
+import "../chunk-X2MTVD4W.js";
 import "../chunk-QTOLNRET.js";
 import {
   isRecord
-} from "../chunk-MNKIR2ZB.js";
+} from "../chunk-RQOT6QL3.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-bell.ts

package/dist/bin/pushary-claude.js

@@ -2,45 +2,43 @@
 import {
   WRAPPER_ACTIVE_ENV,
   findClaudeBinary
-} from "../chunk-CZ65D6Q5.js";
+} from "../chunk-IPG3RS23.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-6CZX6YOE.js";
-import "../chunk-RABLE5R6.js";
+} from "../chunk-XNUWKKGS.js";
+import "../chunk-BBFGDYYI.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-UMTMFDL2.js";
+} from "../chunk-CPLQ5OHX.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-Q2BD4IBX.js";
-import "../chunk-SZBMTOUZ.js";
+} from "../chunk-SB6TYV4M.js";
+import "../chunk-Y6ZN454E.js";
 import {
   ensureDaemonRunning
-} from "../chunk-ADXHPGBZ.js";
-import "../chunk-GTBWWCCM.js";
-import "../chunk-ANP3DIST.js";
-import "../chunk-SROWUG5W.js";
-import "../chunk-Z3M627TQ.js";
+} from "../chunk-LJHDUKBB.js";
+import "../chunk-BFF3ABFV.js";
+import "../chunk-ZK5WYAMI.js";
+import "../chunk-FONWVVDD.js";
 import "../chunk-NMUI3ZWG.js";
 import {
   encryptRecord
-} from "../chunk-QSW3HAKI.js";
-import "../chunk-TJUJAK5L.js";
+} from "../chunk-NWN6GGJL.js";
 import {
   transcriptsEnabled
-} from "../chunk-TK4JU2F7.js";
+} from "../chunk-YSD4SMHE.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-ED2SWTPC.js";
+import "../chunk-JOBSKQ2Z.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -57,10 +55,10 @@ import {
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-3UNAPXED.js";
+} from "../chunk-XFDWLDHG.js";
 import {
   repoKeyFor
-} from "../chunk-3KXBRSL3.js";
+} from "../chunk-GMHQYX3D.js";
 import {
   askUser,
   cancelQuestion,
@@ -72,30 +70,30 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-DTVHZDYM.js";
+} from "../chunk-D3U6CN7T.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-BKCI53W6.js";
-import "../chunk-UHS5MMAI.js";
-import "../chunk-7ILQX47W.js";
+} from "../chunk-KNUYUQBP.js";
+import "../chunk-3THDNNVL.js";
+import "../chunk-P4RXSZDT.js";
 import {
   getMachineId
-} from "../chunk-FWS2KLV2.js";
+} from "../chunk-PIBWX3EF.js";
 import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-2VADJ6JH.js";
+import "../chunk-METUT7V4.js";
 import {
   claudeConfigDir
-} from "../chunk-ATPJGHUP.js";
-import "../chunk-SCMEVDAR.js";
+} from "../chunk-TI4JYPGQ.js";
+import "../chunk-WJLHZ6E6.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-Y64JGYTB.js";
+} from "../chunk-32OSSYGZ.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-BAGBCSXA.js";
+} from "../chunk-X2MTVD4W.js";
 import "../chunk-QTOLNRET.js";
 import {
   DECISION_STOP_REASON,
@@ -108,7 +106,7 @@ import {
   refusesWhenUnanswered,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-MNKIR2ZB.js";
+} from "../chunk-RQOT6QL3.js";
 import "../chunk-MLKGABMK.js";
 
 // src/wrapper/localPassthrough.ts

package/dist/bin/pushary-clean.js

@@ -15,51 +15,53 @@ import {
   storedMacAppState,
   storedPusharyKeychainServices,
   waitForMacAppExit
-} from "../chunk-OA6EADFT.js";
+} from "../chunk-564IPPBL.js";
 import {
   PUSHARY_SKILL_NAME,
   PUSHARY_SKILL_SOURCE,
   createGuards
 } from "../chunk-EUW7JL2K.js";
-import "../chunk-JFKMPLNF.js";
+import "../chunk-ZPIYJLQ3.js";
 import "../chunk-XCEN33UP.js";
 import {
   describeCliKeyRevocation,
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-GA257T2E.js";
-import "../chunk-FFSIYBBU.js";
+} from "../chunk-DXCHIKAN.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-CU2PXLZ6.js";
+} from "../chunk-JHB5SR5B.js";
 import {
-  HERMES_PIP_PACKAGE,
-  readHermesStatus,
-  resolveHermesPython,
-  runHermesConfigScript,
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-ONBL2GCU.js";
+} from "../chunk-76SWHCAR.js";
 import {
+  configFileHoldsMacAppKey,
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-U2P2LQ5B.js";
+} from "../chunk-LS42NV6E.js";
+import "../chunk-5MOJCOCF.js";
+import {
+  HERMES_CONFIG_FILE,
+  defaultHermesHome,
+  hermesReceiptPaths,
+  removeHermesWiring
+} from "../chunk-VVIQWGS7.js";
 import "../chunk-QCGNGEGE.js";
-import "../chunk-ITYKN2K3.js";
 import {
   planClineRemoval,
   planFxRemoval,
   removeClineServer
-} from "../chunk-QNZ6G3LY.js";
-import "../chunk-W5L2ZLHE.js";
-import "../chunk-BEQ3MEE3.js";
+} from "../chunk-LYTWK5TF.js";
+import "../chunk-JOD2325S.js";
+import "../chunk-JBRMIADM.js";
 import {
   OPENCODE_ASKED_PERMISSIONS,
   OPENCODE_PLUGIN_SIBLING,
@@ -73,15 +75,15 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-P5HZEGT7.js";
+} from "../chunk-NSS2AIGI.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-AN7C3CHH.js";
-import "../chunk-RABLE5R6.js";
+} from "../chunk-77L2TNJW.js";
+import "../chunk-BBFGDYYI.js";
 import {
   compatibleConfigFile,
   compatibleDocuments,
@@ -93,23 +95,21 @@ import {
   removeCompatibleHooks,
   removeCompatibleMcpServer,
   serializeConfigDocument
-} from "../chunk-WY6YAMZW.js";
+} from "../chunk-ICQCQAUO.js";
 import {
   disableDaemonService
-} from "../chunk-ADXHPGBZ.js";
+} from "../chunk-LJHDUKBB.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
   liveBridgeProbe,
+  removeGeminiSettings,
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-GTBWWCCM.js";
-import {
-  removeGeminiSettings
-} from "../chunk-ANP3DIST.js";
-import "../chunk-SROWUG5W.js";
-import "../chunk-Z3M627TQ.js";
+} from "../chunk-BFF3ABFV.js";
+import "../chunk-ZK5WYAMI.js";
+import "../chunk-FONWVVDD.js";
 import {
   parseFlags
 } from "../chunk-NMUI3ZWG.js";
@@ -119,21 +119,21 @@ import {
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-ED2SWTPC.js";
+} from "../chunk-JOBSKQ2Z.js";
 import "../chunk-E46NE7FB.js";
-import "../chunk-3UNAPXED.js";
-import "../chunk-3KXBRSL3.js";
-import "../chunk-DTVHZDYM.js";
+import "../chunk-XFDWLDHG.js";
+import "../chunk-GMHQYX3D.js";
+import "../chunk-D3U6CN7T.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-BKCI53W6.js";
-import "../chunk-UHS5MMAI.js";
-import "../chunk-7ILQX47W.js";
-import "../chunk-FWS2KLV2.js";
+import "../chunk-KNUYUQBP.js";
+import "../chunk-3THDNNVL.js";
+import "../chunk-P4RXSZDT.js";
+import "../chunk-PIBWX3EF.js";
 import "../chunk-PPY5N2E6.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-2VADJ6JH.js";
+import "../chunk-METUT7V4.js";
 import {
   claudeConfigDir,
   claudeJson,
@@ -160,10 +160,10 @@ import {
   fxSettings,
   geminiMd,
   geminiSettings,
-  hermesConfig,
-  hermesConfigReceipt,
+  hermesAppWiringRecord,
   hookTakeoverReceipt,
   isClaudeMcpSnapshot,
+  pusharyConfigFile,
   pusharyDir,
   readCodexMcpAuth,
   removeClaudeMcpServers,
@@ -176,20 +176,20 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-ATPJGHUP.js";
+} from "../chunk-TI4JYPGQ.js";
 import {
   cleanNpmEnv,
   globalPackageState,
   npmIsOnPath,
   readGlobalFolder,
   readGlobalPrefix
-} from "../chunk-SCMEVDAR.js";
+} from "../chunk-WJLHZ6E6.js";
 import {
   getBaseUrl
-} from "../chunk-Y64JGYTB.js";
+} from "../chunk-32OSSYGZ.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-BAGBCSXA.js";
+} from "../chunk-X2MTVD4W.js";
 import {
   CLI_PACKAGE_NAMES,
   globalPackageFolder,
@@ -203,12 +203,12 @@ import {
   SUPPORT_EMAIL,
   isValidApiKey,
   redactSecrets
-} from "../chunk-MNKIR2ZB.js";
+} from "../chunk-RQOT6QL3.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync5, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";
-import { dirname as dirname2, join as join5 } from "path";
+import { basename, dirname as dirname2, join as join5 } from "path";
 import { homedir as homedir4, tmpdir } from "os";
 import { confirm } from "@inquirer/prompts";
 import { parse as parseTOML, stringify as stringifyTOML } from "smol-toml";
@@ -533,8 +533,6 @@ var CLAUDE_SETTINGS = claudeSettings();
 var CLAUDE_SETTINGS_LOCAL = claudeSettingsLocal();
 var CLAUDE_JSON = claudeJson();
 var CLAUDE_MCP_RECEIPT = claudeMcpReceipt();
-var HERMES_CONFIG_RECEIPT = hermesConfigReceipt();
-var HERMES_CONFIG_FILE = hermesConfig();
 var SKILL_DIR = claudeSkillDir();
 var CURSOR_MCP = cursorUserMcp();
 var CURSOR_PLUGIN_DIR = cursorPluginDir();
@@ -573,6 +571,33 @@ var readJson = (path) => {
 };
 var dryRun = false;
 var did = (past) => dryRun ? `(would ${past === "cleaned" ? "clean" : past === "removed" ? "remove" : past === "uninstalled" ? "uninstall" : past})` : `(${past})`;
+var HERMES_REMOVAL_FAILURES = {
+  receipt_invalid: "setup receipt is unreadable; left unchanged",
+  home_unknown: "Hermes would not report its settings; left unchanged",
+  plugin: "could not remove the plugin; setup receipt kept for retry",
+  settings: "could not restore config.yaml; setup receipt kept for retry"
+};
+var reportHermesRemoval = (outcome) => {
+  switch (outcome.kind) {
+    case "not_found":
+      console.log(`  ${skip} Hermes ${dim("(not found)")}`);
+      return false;
+    case "kept_for_mac_app":
+      console.log(`  ${skip} Hermes ${dim("(kept: the Mac app connected it)")}`);
+      return false;
+    case "runtime_missing":
+      console.log(`  ${skip} Hermes ${dim("(hermes command not found; setup receipt kept for retry)")}`);
+      return true;
+    case "failed":
+      console.log(`  ${skip} Hermes ${dim(`(${HERMES_REMOVAL_FAILURES[outcome.step]})`)}`);
+      return true;
+    case "removed":
+      if (outcome.pluginRemoved) console.log(`  ${check} Hermes plugin ${dim(did("removed"))}`);
+      if (outcome.dryRun) wouldNote("rewrite", join5(defaultHermesHome(), HERMES_CONFIG_FILE));
+      console.log(`  ${check} Hermes config ${dim(outcome.dryRun ? "(would restore)" : "(restored)")} ${dim("(Pushary settings)")}`);
+      return false;
+  }
+};
 var wouldNote = (action, path) => {
   console.log(`  ${dim("would")} ${action} ${path}`);
 };
@@ -1151,37 +1176,8 @@ var main = async () => {
   removeFxConfiguration();
   removeFxInstructions();
   removeClineConfiguration();
-  const hermesPython = resolveHermesPython();
-  if (hermesPython) {
-    const configRun = runHermesConfigScript(hermesPython, dryRun ? "clean-preview" : "clean", HERMES_CONFIG_RECEIPT);
-    if (configRun === "failed") {
-      incompleteClean = true;
-      console.log(`  ${skip} Hermes config ${dim("(could not update config.yaml)")}`);
-    } else {
-      if (configRun === "changed") {
-        if (dryRun) wouldNote("rewrite", HERMES_CONFIG_FILE);
-        console.log(`  ${check} Hermes config ${dim(did("removed"))} ${dim("(Pushary settings)")}`);
-      } else {
-        console.log(`  ${skip} Hermes config ${dim("(no Pushary settings)")}`);
-      }
-      if (readHermesStatus(hermesPython)?.pluginInstalled === false) {
-        console.log(`  ${skip} Hermes plugin ${dim("(not installed)")}`);
-      } else {
-        try {
-          guards.execFile(hermesPython, ["-m", "pip", "uninstall", "-y", HERMES_PIP_PACKAGE], { stdio: "pipe", timeout: 6e4 }, `pip uninstall ${HERMES_PIP_PACKAGE}`);
-          console.log(`  ${check} Hermes plugin ${dim(did("uninstalled"))}`);
-        } catch {
-          incompleteClean = true;
-          console.log(`  ${skip} Hermes plugin ${dim("(could not uninstall; setup receipt kept for retry)")}`);
-        }
-      }
-    }
-  } else if (existsSync5(HERMES_CONFIG_RECEIPT)) {
-    incompleteClean = true;
-    console.log(`  ${skip} Hermes ${dim("(runtime not found; setup receipt kept for retry)")}`);
-  } else {
-    console.log(`  ${skip} Hermes ${dim("(not found)")}`);
-  }
+  const hermesRemoval = removeHermesWiring({ dryRun, receipts: hermesReceiptPaths(), keepMacAppWiring: keepShared, macAppWiringRecord: hermesAppWiringRecord() });
+  if (reportHermesRemoval(hermesRemoval)) incompleteClean = true;
   for (const shellFile of SHELL_FILES) {
     try {
       const content = readFileSync4(shellFile, "utf-8");
@@ -1228,10 +1224,11 @@ var main = async () => {
   if (existsSync5(PUSHARY_DIR)) {
     let removed = 0;
     const kept = [];
+    const macAppsHermesKey = hermesRemoval.kind === "kept_for_mac_app" && configFileHoldsMacAppKey(pusharyConfigFile()) ? basename(pusharyConfigFile()) : null;
     for (const entry of readdirSync4(PUSHARY_DIR)) {
       const appCardsFolder = entry === CODEX_APP_CARDS_DIRECTORY ? codexAppCardsFolderInTheLastSweep(appCardsCleanUp) : "swept_with_the_rest";
       if (appCardsFolder === "left_to_the_switch") continue;
-      if (keepShared && isAppOwned(entry) || entry === "setup" && (keepShared || incompleteClean) || appCardsFolder === "kept") {
+      if (keepShared && isAppOwned(entry) || entry === "setup" && (keepShared || incompleteClean) || entry === macAppsHermesKey || appCardsFolder === "kept") {
         kept.push(entry);
         continue;
       }