Updated Edit
Reconcile every managed profile and shared-settings.json to EXACTLY the canonical guardrail model, pruning all drift; deploys missing hook scripts.
#c patch-profiles
reconcile every managed profile and shared-settings.json to EXACTLY the canonical guardrail model (hooks, disallowedTools, permissions deny/ask); prunes drift and user-added extras -- the old additive, extras-preserving behavior is gone. Deploys any missing guardrail hook scripts. The 'default' profile (~/.claude) is never touched. Preview with --dry-run; writing needs a terminal or --approve-consequential.
Effect: mutating ยท consequential (prompts before running; --approve-consequential skips)