pushary 1.9.8 → 1.9.9

package/dist/{chunk-CLOSJ4ES.js → chunk-462EQA6K.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-5QUPKDI5.js";
+} from "./chunk-IRHABAQT.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-7DVNSQWF.js → chunk-5DCDQ5VW.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-I5IJRMNV.js";
+} from "./chunk-5RGA636G.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {

package/dist/{chunk-TCQ43LSG.js → chunk-5N5L6DNN.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-DUZVXBBU.js";
+} from "./chunk-KOWFRUIT.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-5QUPKDI5.js";
+} from "./chunk-IRHABAQT.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-I5IJRMNV.js";
+} from "./chunk-5RGA636G.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-I5IJRMNV.js → chunk-5RGA636G.js}

@@ -2186,7 +2186,9 @@ function agentQuestionStrategy(source, event, toolName) {
   if (source !== null && event === "PreToolUse" && UPDATED_INPUT_QUESTION_SOURCES.has(source)) return AGENT_QUESTION_STRATEGY.updatedInput;
   return AGENT_QUESTION_STRATEGY.native;
 }
-var ASKED_IN_EVERY_MODE_TOOLS = [AGENT_QUESTION_TOOL, "ExitPlanMode"];
+var questionHandedToTheTerminal = (toolName, modeState) => toolName === AGENT_QUESTION_TOOL && modeState.askHandoff === true;
+var EXIT_PLAN_MODE_TOOL = "ExitPlanMode";
+var ASKED_IN_EVERY_MODE_TOOLS = [AGENT_QUESTION_TOOL, EXIT_PLAN_MODE_TOOL];
 var ASKED_IN_EVERY_MODE = new Set(ASKED_IN_EVERY_MODE_TOOLS);
 var isAskedInEveryMode = (toolName) => ASKED_IN_EVERY_MODE.has(toolName);
 var NATIVE_BLOCK_EVENTS = /* @__PURE__ */ new Set(["PermissionDenied"]);
@@ -2267,6 +2269,12 @@ var resolveGate = (input) => {
 };
 var editAsksAtTheAgentsPrompt = (input, verdict) => verdict.kind === "gate" && !verdict.scopeReason && (input.modeState.mode ?? input.config.modeOverride ?? null) === null && !aChosenRuleGoverns(input) && verdict.policy.mode === "push_first" && ACCEPT_EDITS_DEFER_TOOLS.has(input.toolName);
 var claudePromptsBeforeAnEdit = (permissionMode) => permissionMode === "default";
+var runsTheClaudeHook = (source) => source === null || source === "claude" || hookCompatibleProfileBySource(source) !== void 0;
+var agentPromptsBeforeAnEdit = ({ source, event, permissionMode }) => {
+  if (source === "codex") return event === "PermissionRequest";
+  return event === "PreToolUse" && runsTheClaudeHook(source) && claudePromptsBeforeAnEdit(permissionMode);
+};
+var editGoesToTheAgentsPrompt = (call, input, verdict) => agentPromptsBeforeAnEdit(call) && editAsksAtTheAgentsPrompt(input, verdict);
 var MAX_AGENT_PERMISSION_RULES_PER_KIND = 256;
 var MAX_AGENT_PERMISSION_RULE_LENGTH = 512;
 var isAgentPermissionRule = (value) => typeof value === "string" && value.length > 0 && value.length <= MAX_AGENT_PERMISSION_RULE_LENGTH;
@@ -2437,6 +2445,7 @@ var claudePermissionRequestOutput = (decision, reason, updatedInput) => ({
     decision: decision === "allow" ? { behavior: "allow", ...updatedInput ? { updatedInput } : {} } : { behavior: "deny", ...reason ? { message: reason } : {} }
   }
 });
+var DENIED_FROM_PUSHARY_REASON = "Denied from Pushary";
 var gateOutputFor = (source, event, decision, reason) => {
   let output;
   if (source === "claude" || source === "vscode") {
@@ -2452,7 +2461,7 @@ var gateOutputFor = (source, event, decision, reason) => {
       output = {
         hookSpecificOutput: {
           hookEventName: "PermissionRequest",
-          decision: decision === "allow" ? { behavior: "allow" } : { behavior: "deny", message: reason ?? "Denied from Pushary" }
+          decision: decision === "allow" ? { behavior: "allow" } : { behavior: "deny", message: reason ?? DENIED_FROM_PUSHARY_REASON }
         }
       };
     } else if (event === "PreToolUse" && decision === "deny") {
@@ -2460,19 +2469,19 @@ var gateOutputFor = (source, event, decision, reason) => {
         hookSpecificOutput: {
           hookEventName: "PreToolUse",
           permissionDecision: "deny",
-          permissionDecisionReason: reason ?? "Denied from Pushary"
+          permissionDecisionReason: reason ?? DENIED_FROM_PUSHARY_REASON
         }
       };
     }
   } else if (source === "gemini" && event === "BeforeTool" && decision !== "ask") {
-    output = decision === "allow" ? { decision: "allow" } : { decision: "deny", reason: reason ?? "Denied from Pushary" };
+    output = decision === "allow" ? { decision: "allow" } : { decision: "deny", reason: reason ?? DENIED_FROM_PUSHARY_REASON };
   } else if (source === "opencode" && event === OPENCODE_APPROVAL_EVENT) {
-    output = decision === "deny" ? { status: "deny", reason: reason ?? "Denied from Pushary" } : { status: decision };
+    output = decision === "deny" ? { status: "deny", reason: reason ?? DENIED_FROM_PUSHARY_REASON } : { status: decision };
   } else if (source === "cursor" && CURSOR_GATE_EVENTS.includes(event)) {
     output = decision === "allow" ? { permission: "allow" } : decision === "ask" && event !== "preToolUse" ? { permission: "ask" } : {
       permission: "deny",
       user_message: "Command denied via Pushary.",
-      agent_message: reason ?? "Denied from Pushary"
+      agent_message: reason ?? DENIED_FROM_PUSHARY_REASON
     };
   } else {
     const profile = hookCompatibleProfileBySource(source);
@@ -2500,7 +2509,9 @@ var renderElicitationOutput = (event, action, content) => ELICITATION_EVENTS.inc
 var UNVERIFIABLE_APPROVAL_REASON = "Pushary could not create a verifiable approval. Retry the action.";
 var DECISION_STOP_REASON = "Approval was cancelled or became unavailable. Retry only after resolving it.";
 var WITHDRAWN_APPROVAL_REASON = "The phone question was withdrawn. Approve in the current client.";
+var PLAN_DECLINED_REASON = "Plan declined from the phone. Ask what to change before coding.";
 var claudeStoppedPreToolUseOutput = (reason) => stoppedOutput(claudePreToolUseOutput("deny", reason), reason);
+var claudeStoppedPermissionRequestOutput = (reason) => stoppedOutput(claudePermissionRequestOutput("deny", reason), reason);
 var ELICITATION_ANSWERABLE_MODE = "form";
 var ELICITATION_MIN_OPTIONS = 2;
 var ELICITATION_MAX_MULTI_QUESTIONS = 4;
@@ -2866,6 +2877,7 @@ export {
   shouldDeferToNativeMode,
   AGENT_QUESTION_STRATEGY,
   agentQuestionStrategy,
+  questionHandedToTheTerminal,
   CODEX_RESCUE_TOOL_NAME,
   isBlockedActionRequest,
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
@@ -2874,8 +2886,7 @@ export {
   isPermissionRequestOwnedByPreToolUse,
   CLAUDE_PRETOOLUSE_MATCHER,
   resolveGate,
-  editAsksAtTheAgentsPrompt,
-  claudePromptsBeforeAnEdit,
+  editGoesToTheAgentsPrompt,
   claudePermissionRulesFromSettings,
   claudeConsultsItsAllowlist,
   agentRulesAllowEveryInput,
@@ -2888,7 +2899,6 @@ export {
   machineDecisionFor,
   claudePermissionDeniedOutput,
   codexStopRescueOutput,
-  stoppedOutput,
   claudePreToolUseOutput,
   PENDING_COMMAND_PREFIX,
   pendingCommandEvents,
@@ -2898,7 +2908,9 @@ export {
   UNVERIFIABLE_APPROVAL_REASON,
   DECISION_STOP_REASON,
   WITHDRAWN_APPROVAL_REASON,
+  PLAN_DECLINED_REASON,
   claudeStoppedPreToolUseOutput,
+  claudeStoppedPermissionRequestOutput,
   ELICITATION_ANSWERABLE_MODE,
   readElicitationFields,
   planElicitationAsk,

package/dist/{chunk-MKTJEXZ3.js → chunk-6AYSKVLL.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-LWOO567I.js";
+} from "./chunk-QRXPWW3M.js";
 import {
   installNetworkDefaults
-} from "./chunk-TCQ43LSG.js";
+} from "./chunk-5N5L6DNN.js";
 import {
   getBaseUrl
-} from "./chunk-5QUPKDI5.js";
+} from "./chunk-IRHABAQT.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-MXHTGVFZ.js → chunk-6EBGOHDJ.js}

@@ -1,36 +1,31 @@
-import {
-  agentHookOwner,
-  macAppBridgeAvailable,
-  openCodePluginOwner
-} from "./chunk-3Z3A37WD.js";
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-MGRFDGWU.js";
+} from "./chunk-NGKUXZID.js";
+import {
+  detectClaudeVersion
+} from "./chunk-RIVNNBEK.js";
 import {
   OPENCODE_HOOK_BINARY,
+  agentHookOwner,
   installOpenCodePlugin,
+  macAppBridgeAvailable,
   openCodeHookArgv,
   openCodePluginDir,
   openCodeWired
-} from "./chunk-MFF3ONG5.js";
+} from "./chunk-BZLHTMT6.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-KHNFLYJO.js";
-import {
-  detectClaudeVersion
-} from "./chunk-RIVNNBEK.js";
-import {
-  planHooks
-} from "./chunk-YIG2R3BJ.js";
+} from "./chunk-UF6RBP5V.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
   codexUnprovenHolds,
   codexWired,
-  geminiWired
-} from "./chunk-2QGYMY7A.js";
+  geminiWired,
+  planHooks
+} from "./chunk-BYLKCZ2G.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -41,7 +36,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-3I6IVOZV.js";
+} from "./chunk-M3STIAGU.js";
 import {
   formatVersion
 } from "./chunk-6ICPEJY5.js";
@@ -64,7 +59,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-ZBHUHJG6.js";
+} from "./chunk-Z23ZBYDW.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -335,9 +330,10 @@ var SETUP_CHOICE_BY_REAPPLY_ID = {
   codex: "codex",
   gemini: "gemini_cli",
   cursor: "cursor",
-  vscode: "vscode"
+  vscode: "vscode",
+  opencode: "opencode"
 };
-var reapplyHookOwner = (id, appAvailable) => id === "opencode" ? openCodePluginOwner(appAvailable) : agentHookOwner(SETUP_CHOICE_BY_REAPPLY_ID[id], appAvailable);
+var reapplyHookOwner = (id, appAvailable) => agentHookOwner(SETUP_CHOICE_BY_REAPPLY_ID[id], appAvailable);
 var reapplyHolder = (id, appAvailable) => planHooks({ owner: reapplyHookOwner(id, appAvailable), takeOverHooks: false, nonInteractive: true }) === "keep" ? "app" : "cli";
 var KEPT_FOR_APP = { configured: true, reapplied: false, hooks: false, mcp: false };
 var FAILED_REAPPLY = { configured: false, reapplied: false, hooks: false, mcp: false, failed: true };

package/dist/{chunk-ZN3C6GBG.js → chunk-6W5M3MSE.js}

@@ -1,12 +1,12 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-HRULIYDU.js";
+} from "./chunk-H5T27W7M.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-N4QSPI3B.js";
+} from "./chunk-REU2VQPH.js";
 import {
   NpmMissingError
-} from "./chunk-ZBHUHJG6.js";
+} from "./chunk-Z23ZBYDW.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -14,7 +14,7 @@ import {
 } from "./chunk-T7E75EKA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-7DVNSQWF.js";
+} from "./chunk-5DCDQ5VW.js";
 
 // src/instruction-file.ts
 import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";

package/dist/{chunk-2A53H4S6.js → chunk-AI7RMFVV.js}

@@ -1,21 +1,21 @@
-import {
-  activeHookSource,
-  activeIdentity
-} from "./chunk-KHNFLYJO.js";
 import {
   defersToNativeMode,
   reportMachineDenial
-} from "./chunk-IHO3YQAN.js";
+} from "./chunk-B5NMSP3V.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-ZSTSEBG7.js";
+} from "./chunk-IIVZZMSO.js";
 import {
   announceSubscriptionRequired,
   denyReasonFrom,
   isDeferAnswer,
   oncePerSession
 } from "./chunk-5OP5MQI7.js";
+import {
+  activeHookSource,
+  activeIdentity
+} from "./chunk-UF6RBP5V.js";
 import {
   UNNAMED_ACTION,
   approvalAwaitingRetry,
@@ -39,7 +39,7 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-KRCR2CRQ.js";
+} from "./chunk-KQFTBQ66.js";
 import {
   DEFAULT_SESSION
 } from "./chunk-N6IOSZOE.js";
@@ -53,25 +53,26 @@ import {
   requestGate,
   sendNotification,
   waitForQuestion
-} from "./chunk-2VZAALEJ.js";
+} from "./chunk-WRPYCIV2.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-MKTJEXZ3.js";
+} from "./chunk-6AYSKVLL.js";
 import {
   getMachineId
-} from "./chunk-DUZVXBBU.js";
+} from "./chunk-KOWFRUIT.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-5QUPKDI5.js";
+} from "./chunk-IRHABAQT.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-7DVNSQWF.js";
+} from "./chunk-5DCDQ5VW.js";
 import {
   AGENT_QUESTION_STRATEGY,
   DECISION_STOP_REASON,
   GATE_BLOCK_REASON_MAX_LENGTH,
   GATE_WIRE,
+  PLAN_DECLINED_REASON,
   UNVERIFIABLE_APPROVAL_REASON,
   WITHDRAWN_APPROVAL_REASON,
   agentQuestionStrategy,
@@ -83,9 +84,9 @@ import {
   claudePermissionRequestOutput,
   claudePermissionRulesFromSettings,
   claudePreToolUseOutput,
-  claudePromptsBeforeAnEdit,
+  claudeStoppedPermissionRequestOutput,
   claudeStoppedPreToolUseOutput,
-  editAsksAtTheAgentsPrompt,
+  editGoesToTheAgentsPrompt,
   effectiveWaitSeconds,
   hookHoldWindowMs,
   hookWaitClamped,
@@ -96,9 +97,9 @@ import {
   isPusharyOwnTool,
   parseAgentQuestionAnswers,
   parseAgentQuestions,
-  resolveGate,
-  stoppedOutput
-} from "./chunk-I5IJRMNV.js";
+  questionHandedToTheTerminal,
+  resolveGate
+} from "./chunk-5RGA636G.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";
@@ -450,7 +451,7 @@ var askQuestionByQuestion = async (apiKey, input, parsed, projectName, deadline)
   return answers;
 };
 var handleAskUserQuestion = async (apiKey, input, modeState) => {
-  if (modeState.askHandoff) return void 0;
+  if (questionHandedToTheTerminal(input.tool_name, modeState)) return void 0;
   const parsed = parseQuestions(input.tool_input ?? {});
   if (!parsed) return void 0;
   const projectName = basename(input.cwd ?? process.cwd());
@@ -496,7 +497,7 @@ var handleExitPlanMode = async (apiKey, input) => {
     return void 0;
   }
   if (value === PLAN_APPROVE) return allow();
-  return deny("Plan declined from the phone. Ask what to change before coding.");
+  return deny(PLAN_DECLINED_REASON);
 };
 var handleKeyless = (input) => {
   try {
@@ -617,7 +618,7 @@ var handlePreToolUse = async (input, canonical) => {
       return void 0;
     }
     if (claudeAllowlistOwnsCall(gateInput, verdict, input.permission_mode, claudePermissionRulesFor(input))) return void 0;
-    if (claudePromptsBeforeAnEdit(input.permission_mode) && editAsksAtTheAgentsPrompt(gateInput, verdict)) return handleTerminalOnly();
+    if (editGoesToTheAgentsPrompt({ source: ACTIVE_SOURCE, event: "PreToolUse", permissionMode: input.permission_mode }, gateInput, verdict)) return handleTerminalOnly();
     switch (verdict.kind) {
       case "allow":
         return allow();
@@ -637,7 +638,7 @@ var handlePreToolUse = async (input, canonical) => {
 };
 var permReqAllow = (updatedInput) => claudePermissionRequestOutput("allow", void 0, updatedInput);
 var permReqDeny = (message) => claudePermissionRequestOutput("deny", message);
-var permReqHalted = (reason) => stoppedOutput(permReqDeny(reason), reason);
+var permReqHalted = (reason) => claudeStoppedPermissionRequestOutput(reason);
 var toPermissionRequestOutput = (hookOutput) => {
   if (!hookOutput) return void 0;
   const d = hookOutput.hookSpecificOutput;

package/dist/{chunk-ZBK6E2OR.js → chunk-APP43AW7.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-I5IJRMNV.js";
+} from "./chunk-5RGA636G.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-V5HPPF3E.js → chunk-AZOKPWVI.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-ZBHUHJG6.js";
+} from "./chunk-Z23ZBYDW.js";
 import {
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-IHO3YQAN.js → chunk-B5NMSP3V.js}

@@ -5,7 +5,7 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-KRCR2CRQ.js";
+} from "./chunk-KQFTBQ66.js";
 import {
   DEFAULT_SESSION
 } from "./chunk-N6IOSZOE.js";
@@ -13,7 +13,7 @@ import {
   machineDecisionFor,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-I5IJRMNV.js";
+} from "./chunk-5RGA636G.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-FQ2GORVG.js → chunk-BNSKVIAW.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-5QUPKDI5.js";
+} from "./chunk-IRHABAQT.js";
 import {
   normalizeInstallSource
-} from "./chunk-I5IJRMNV.js";
+} from "./chunk-5RGA636G.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-2QGYMY7A.js → chunk-BYLKCZ2G.js}

@@ -2,17 +2,23 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-3I6IVOZV.js";
+} from "./chunk-M3STIAGU.js";
+import {
+  AGENT_CHOICES
+} from "./chunk-ZGADIZDS.js";
+import {
+  BELL_HOOK_BINARY
+} from "./chunk-MLGIVVSG.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-ZBHUHJG6.js";
+} from "./chunk-Z23ZBYDW.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-I5IJRMNV.js";
+} from "./chunk-5RGA636G.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";
@@ -206,6 +212,126 @@ var describeHoldTimeout = (holder) => {
 var describeOtherHolder = (holder) => `another hook also registered on ${holder.event}: ${holderExecutable(holder.command)} (${describeHoldTimeout(holder)})`;
 var describeHoldSentence = (agentLabel) => `${agentLabel} waits for every hook on an event, so the terminal cannot move until that one returns, however fast your phone answered.`;
 
+// src/setup/hook-ownership.ts
+var commandsIn = (value) => {
+  if (Array.isArray(value)) return value.flatMap(commandsIn);
+  if (!value || typeof value !== "object") return [];
+  return Object.entries(value).flatMap(([key, item]) => key === "command" && typeof item === "string" ? [item] : commandsIn(item));
+};
+var isRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var hasPaidPusharyCommand = (value) => commandsIn(value).some((command) => {
+  const executable = pusharyHookExecutable(command);
+  const name = executable?.split(/[/\\]/).pop()?.replace(/\.(cmd|exe|mjs)$/i, "");
+  return executable !== null && !isBridgeLocator(executable) && name !== BELL_HOOK_BINARY;
+});
+var hasAppCommand = (value) => commandsIn(value).some((command) => {
+  const executable = pusharyHookExecutable(command);
+  return executable !== null && isBridgeLocator(executable);
+});
+var mcpBearerKey = (document, containerKey, headersKey) => {
+  const servers = isRecord(document?.[containerKey]) ? document[containerKey] : null;
+  const pushary = isRecord(servers?.pushary) ? servers.pushary : null;
+  const headers = isRecord(pushary?.[headersKey]) ? pushary[headersKey] : null;
+  const authorization = headers?.Authorization;
+  const match = typeof authorization === "string" ? authorization.trim().match(/^Bearer\s+(\S+)$/) : null;
+  return match?.[1] ?? null;
+};
+var captureMcpServer = (document, containerKey) => {
+  const container = document[containerKey];
+  const servers = isRecord(container) ? container : null;
+  if (!servers && Object.hasOwn(document, containerKey)) {
+    return { present: false, containerValue: structuredClone(container) };
+  }
+  return servers && Object.hasOwn(servers, "pushary") ? { present: true, value: structuredClone(servers.pushary) } : { present: false };
+};
+var restoreMcpServer = (document, containerKey, snapshot) => {
+  const before = JSON.stringify(document);
+  const existing = isRecord(document[containerKey]) ? document[containerKey] : null;
+  if (snapshot.present) {
+    const servers = existing ?? {};
+    servers.pushary = structuredClone(snapshot.value);
+    document[containerKey] = servers;
+  } else if (Object.hasOwn(snapshot, "containerValue")) {
+    document[containerKey] = structuredClone(snapshot.containerValue);
+  } else if (existing && Object.hasOwn(existing, "pushary")) {
+    delete existing.pushary;
+    if (Object.keys(existing).length === 0) delete document[containerKey];
+  }
+  return JSON.stringify(document) !== before;
+};
+var captureHookTakeover = (agent, document) => {
+  const hooks = isRecord(document?.hooks) ? document.hooks : null;
+  if (!hooks) return null;
+  const captured = {};
+  for (const [event, entries] of Object.entries(hooks)) {
+    if (!Array.isArray(entries)) continue;
+    const appEntries = entries.flatMap((value, index) => isRecord(value) && hasAppCommand(value) ? [{ index, value: structuredClone(value) }] : []);
+    if (appEntries.length > 0) captured[event] = appEntries;
+  }
+  return Object.keys(captured).length > 0 ? { version: 1, agent, hooks: captured } : null;
+};
+var isHookTakeoverReceipt = (value) => {
+  if (!isRecord(value) || value.version !== 1 || typeof value.agent !== "string" || !AGENT_CHOICES.includes(value.agent) || !isRecord(value.hooks)) return false;
+  const expectsMcp = ["claude_code", "codex", "gemini_cli", "vscode"].includes(value.agent);
+  if (value.mcpServer !== void 0 !== expectsMcp) return false;
+  if (value.codexTrust !== void 0 !== (value.agent === "codex")) return false;
+  if (value.codexTrust !== void 0 && !isRecord(value.codexTrust)) return false;
+  if (value.mcpServer !== void 0 && (!isRecord(value.mcpServer) || typeof value.mcpServer.present !== "boolean" || value.mcpServer.present && !Object.hasOwn(value.mcpServer, "value"))) return false;
+  return Object.values(value.hooks).every((entries) => Array.isArray(entries) && entries.length > 0 && entries.every((item) => isRecord(item) && Number.isInteger(item.index) && item.index >= 0 && isRecord(item.value)));
+};
+var restoreHookTakeover = (document, receipt) => {
+  const before = JSON.stringify(document);
+  const appOwnsNow = hookOwnerOf(document) === "app";
+  const hooks = isRecord(document.hooks) ? document.hooks : {};
+  for (const [event, value] of Object.entries(hooks)) {
+    if (!Array.isArray(value)) continue;
+    const kept = value.filter((entry) => !hasPaidPusharyCommand(entry));
+    if (kept.length === 0) delete hooks[event];
+    else hooks[event] = kept;
+  }
+  if (!appOwnsNow) {
+    for (const [event, snapshots] of Object.entries(receipt.hooks)) {
+      const entries = Array.isArray(hooks[event]) ? [...hooks[event]] : [];
+      for (const snapshot of snapshots) {
+        entries.splice(Math.min(snapshot.index, entries.length), 0, structuredClone(snapshot.value));
+      }
+      hooks[event] = entries;
+    }
+  }
+  document.hooks = hooks;
+  return JSON.stringify(document) !== before;
+};
+var hookOwnerOf = (document, appAvailable = true, hooksKeyPath = ["hooks"]) => {
+  const hooks = hooksKeyPath.reduce(
+    (node, key) => node && typeof node === "object" ? node[key] : void 0,
+    document
+  );
+  return hookOwnerOfCommands(commandsIn(hooks), appAvailable);
+};
+var hookOwnerOfCommands = (commands, appAvailable = true) => {
+  const executables = commands.map(pusharyHookExecutable).filter((executable) => executable !== null);
+  if (appAvailable && executables.some(isBridgeLocator)) return "app";
+  if (executables.some((executable) => !isBridgeLocator(executable))) return "cli";
+  return "none";
+};
+var planHooks = (context) => {
+  if (context.owner !== "app") return "install";
+  if (context.takeOverHooks) return "install";
+  return "keep";
+};
+var describeAppOwnership = (agentName) => `The Pushary Mac app owns ${agentName}'s hooks.`;
+var KEEP_HINT = "Kept with the app's account. Pass --take-over-hooks to have the CLI own them instead.";
+var OWNER_LABELS = {
+  app: "the Pushary Mac app",
+  cli: "the CLI"
+};
+var describeHookOwnership = (entries, names) => {
+  const owned = entries.filter((entry) => entry.owner !== "none");
+  if (owned.length === 0) return null;
+  const parts = owned.map((entry) => `${names[entry.agent]} by ${OWNER_LABELS[entry.owner]}${entry.kept ? " (kept)" : ""}`);
+  return `Hooks: ${parts.join(", ")}.`;
+};
+
 export {
   resolveBridgeStub,
   describeBridgeResolution,
@@ -225,5 +351,17 @@ export {
   codexUnprovenHolds,
   holdsLong,
   describeOtherHolder,
-  describeHoldSentence
+  describeHoldSentence,
+  mcpBearerKey,
+  captureMcpServer,
+  restoreMcpServer,
+  captureHookTakeover,
+  isHookTakeoverReceipt,
+  restoreHookTakeover,
+  hookOwnerOf,
+  hookOwnerOfCommands,
+  planHooks,
+  describeAppOwnership,
+  KEEP_HINT,
+  describeHookOwnership
 };