@pushary/agent-hooks 0.83.2 → 0.84.1

package/CHANGELOG.md

@@ -1,5 +1,99 @@
 # Changelog
 
+## 0.84.1
+
+### Remote starts survive lost acknowledgements without double-launching
+
+A phone-started agent now claims exclusive process ownership before the provider
+starts. If the daemon restarts or the launch acknowledgement is lost, retrying the
+same request reconnects to the existing process instead of starting a second one.
+
+### Repository approval scopes reach Codex and Gemini
+
+Codex and Gemini sessions now carry their repository identity through approval
+requests, so repository-scoped rules stay inside the repository that created them.
+
+### Encrypted transcripts retry safely
+
+Transcript writers now retry while a session key is temporarily unavailable and
+stop on a real key conflict, preventing undecryptable transcript entries from being
+accepted or silently dropped.
+
+## 0.84.0
+
+### The phone can start an agent on a machine that is not running one
+
+The phone could reach a session that already existed. Starting one meant being at
+the keyboard. `pushary setup` and `pushary claude` now bring up a small background
+process, `pushary-daemon`, which watches for a launch requested from the phone and
+starts a real session with the prompt you sent.
+
+It is a poller over a durable queue, not an open socket. Idle, it asks the server
+for work every 30 seconds and sends one heartbeat a minute, and it carries a
+prompt, never any code. One request is in flight at a time, each bounded by its
+own timeout, with a spawn rate cap so a queue backlog cannot fill a machine with
+agents. Exactly one daemon runs per machine: a second one asks the first to hand
+over rather than racing it, and it declines to take over from a daemon that is
+still healthy.
+
+This is a background process that was not running before. `pushary doctor` reports
+whether it is up, and `pushary daemon` in a terminal shows you what it is doing.
+
+A launch is now acknowledged rather than assumed. The daemon claims a request,
+confirms the session it started, and the phone shows what actually happened,
+including the failure when a launch does not come up.
+
+### Always allowing a tool no longer has to mean everywhere
+
+"Approve and always allow" wrote one kind of rule: this tool, this whole
+workspace, until you delete it. That is the right scope for `Read` and far too
+wide for a push.
+
+The approval now offers the scope alongside it. Workspace is the previous
+behaviour. Repository binds the rule to the repository the ask came from, so a
+rule written in one checkout stops governing another. Session binds it to the run
+you are watching and goes away with it.
+
+An older Pushary never sees the narrower rules. A CLI that does not ask for them
+is sent workspace-wide rules only, so a rule you scoped to one session cannot be
+quietly applied everywhere by something released before the idea existed.
+
+### AskUserQuestion reaches the phone with its descriptions
+
+A Claude Code question carries a header, a description per option, and sometimes
+permission to pick more than one. The phone received the bare labels. It now
+receives the question the way the agent wrote it.
+
+One question goes out as one card carrying the whole shape. Every surface that
+does not know that shape, the web decision page and Slack among them, still sees
+an ordinary choice list and answers with a label, which the server reads back onto
+the question. Two or more questions go out one at a time, which is what every
+surface has always been able to answer: a bare label cannot say which of several
+questions it belongs to, and a half-filled answer is worse for the agent than
+being asked again in the terminal.
+
+### Codex and Gemini sessions started from the phone stay live
+
+A phone-started Codex or Gemini run now goes through a bridge that survives the
+connection dropping and resumes the same session instead of opening a new one.
+The machine advertises only what it can actually do, so a Gemini CLI too old for
+the bridge is not offered as one, and the phone stops showing controls that would
+fail.
+
+Stopping is acknowledged the same way. A stop request names the session and the
+process it belongs to, and the machine proves it owns that process before acting
+on it, so a recycled pid cannot be mistaken for the agent you asked to stop.
+
+
+## 0.83.0 to 0.83.2
+
+Three releases went out without an entry here. In order: `ask_user` became
+idempotent, so a create that gets retried after a timeout resolves to the question
+already asked instead of buzzing a phone twice. The pairing QR stopped encoding a
+code only a browser could resolve. And the gate's two shared pieces, the verdict a
+policy produces and the "most specific rule wins" precedence, moved into the
+package the CLI and the server both read, with no change to what either decides.
+
 ## 0.82.0
 
 ### Setup reads properly when an agent is the one running it

package/dist/bin/pushary-bell-hook.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-7WWZPII5.js";
-import "../chunk-WDRRULBH.js";
-import "../chunk-6MTNS63X.js";
+} from "../chunk-7PZPJSWI.js";
+import "../chunk-K7CSRGKZ.js";
 import "../chunk-BC3VCZ3E.js";
-import "../chunk-SAA3VBDK.js";
-import "../chunk-YWRJGYUH.js";
+import "../chunk-6MTNS63X.js";
+import "../chunk-437T77TY.js";
 import "../chunk-2UMNXADU.js";
+import "../chunk-MQMPG5X4.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,33 +5,34 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-7WWZPII5.js";
+} from "../chunk-7PZPJSWI.js";
 import {
   claudeSettings
-} from "../chunk-EHLTWCDZ.js";
+} from "../chunk-SEAHGHCE.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
-import "../chunk-WDRRULBH.js";
-import {
-  readJsonSafe,
-  writeJsonAtomic
-} from "../chunk-6MTNS63X.js";
+import "../chunk-K7CSRGKZ.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-BC3VCZ3E.js";
-import "../chunk-SAA3VBDK.js";
-import "../chunk-7QLSKOSU.js";
-import "../chunk-YWRJGYUH.js";
 import {
   exitOnHelpFlag
-} from "../chunk-RRZZ7TFJ.js";
-import "../chunk-ZUKH2NPJ.js";
-import "../chunk-2UMNXADU.js";
+} from "../chunk-J4KFVOCQ.js";
+import "../chunk-MGJBC6DD.js";
+import "../chunk-BC3VCZ3E.js";
+import "../chunk-DINDL2CF.js";
+import {
+  readJsonSafe,
+  writeJsonAtomic
+} from "../chunk-6MTNS63X.js";
+import "../chunk-437T77TY.js";
+import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
+import "../chunk-2UMNXADU.js";
+import "../chunk-MQMPG5X4.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/bin/pushary-claude.js

@@ -1,9 +1,30 @@
 #!/usr/bin/env node
+import {
+  ensureDaemonRunning
+} from "../chunk-CCH775Y6.js";
+import {
+  buildTranscriptRecords,
+  decodePublicKey,
+  fetchAccountPublicKey,
+  generateSessionKey,
+  uploadTranscriptRecords,
+  wrapSessionKey
+} from "../chunk-GCKAWHFP.js";
+import {
+  startProcessOwnership,
+  withSpawnProcessOwnership
+} from "../chunk-ILB6UOAF.js";
+import {
+  needsShell,
+  spawnClaude
+} from "../chunk-XHKBHWLX.js";
+import "../chunk-VT4IVERX.js";
+import "../chunk-SEAHGHCE.js";
 import {
   KILL_REASON,
   isDeferAnswer,
   resolveGate
-} from "../chunk-4QQOKEOS.js";
+} from "../chunk-BLDDXHHA.js";
 import {
   askUser,
   cancelQuestion,
@@ -15,26 +36,22 @@ import {
   reportEvent,
   scopePathFor,
   waitForAnswer
-} from "../chunk-7PO2VEA4.js";
-import "../chunk-BSZYIAZL.js";
-import "../chunk-SAF6HGAA.js";
-import "../chunk-SAA3VBDK.js";
-import "../chunk-7QLSKOSU.js";
-import {
-  redactSecrets
-} from "../chunk-YWRJGYUH.js";
-import {
-  needsShell,
-  spawnClaude
-} from "../chunk-XHKBHWLX.js";
+} from "../chunk-CCCJ6BPW.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
+import "../chunk-DINDL2CF.js";
+import "../chunk-6MTNS63X.js";
+import "../chunk-BSZYIAZL.js";
+import "../chunk-SAF6HGAA.js";
+import "../chunk-437T77TY.js";
+import "../chunk-7QLSKOSU.js";
+import "../chunk-KZERVKTD.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-KZERVKTD.js";
+import "../chunk-MQMPG5X4.js";
 
 // src/wrapper/claudeBinary.ts
 import { statSync } from "fs";
@@ -97,9 +114,9 @@ var runLocalPassthrough = (binary, args2) => {
       cleanup();
       resolve2(127);
     });
-    child.on("exit", (code, signal) => {
+    child.on("exit", (code2, signal) => {
       cleanup();
-      if (typeof code === "number") resolve2(code);
+      if (typeof code2 === "number") resolve2(code2);
       else if (signal) resolve2(128 + (SIGNAL_NUMBERS[signal] ?? 0));
       else resolve2(0);
     });
@@ -113,112 +130,6 @@ import { basename } from "path";
 import { homedir } from "os";
 import { join as join2, resolve } from "path";
 import { existsSync, readFileSync } from "fs";
-
-// src/transcript-capture.ts
-import { createHash } from "crypto";
-
-// src/crypto.ts
-import nacl from "tweetnacl";
-var EPH_PUB_LEN = nacl.box.publicKeyLength;
-var BOX_NONCE_LEN = nacl.box.nonceLength;
-var SECRETBOX_NONCE_LEN = nacl.secretbox.nonceLength;
-var SESSION_KEY_LEN = nacl.secretbox.keyLength;
-var toBase64 = (bytes) => Buffer.from(bytes).toString("base64");
-var fromBase64 = (value) => new Uint8Array(Buffer.from(value, "base64"));
-var utf8Encode = (text) => new Uint8Array(Buffer.from(text, "utf-8"));
-var decodePublicKey = (value) => fromBase64(value);
-var generateSessionKey = () => nacl.randomBytes(SESSION_KEY_LEN);
-var wrapSessionKey = (sessionKey, accountPublicKey) => {
-  const ephemeral = nacl.box.keyPair();
-  const nonce = nacl.randomBytes(BOX_NONCE_LEN);
-  const box = nacl.box(sessionKey, nonce, accountPublicKey, ephemeral.secretKey);
-  const bundle = new Uint8Array(EPH_PUB_LEN + BOX_NONCE_LEN + box.length);
-  bundle.set(ephemeral.publicKey, 0);
-  bundle.set(nonce, EPH_PUB_LEN);
-  bundle.set(box, EPH_PUB_LEN + BOX_NONCE_LEN);
-  return toBase64(bundle);
-};
-var encryptRecord = (plaintext, sessionKey) => {
-  const nonce = nacl.randomBytes(SECRETBOX_NONCE_LEN);
-  const box = nacl.secretbox(utf8Encode(plaintext), nonce, sessionKey);
-  const bundle = new Uint8Array(SECRETBOX_NONCE_LEN + box.length);
-  bundle.set(nonce, 0);
-  bundle.set(box, SECRETBOX_NONCE_LEN);
-  return toBase64(bundle);
-};
-
-// src/transcript-capture.ts
-var INTERNAL_TYPES = /* @__PURE__ */ new Set([
-  "file-history-snapshot",
-  "change",
-  "queue-operation",
-  "summary"
-]);
-var redactDeep = (value) => {
-  if (typeof value === "string") return redactSecrets(value);
-  if (Array.isArray(value)) return value.map(redactDeep);
-  if (value && typeof value === "object") {
-    const out = {};
-    for (const [key, inner] of Object.entries(value)) {
-      out[key] = redactDeep(inner);
-    }
-    return out;
-  }
-  return value;
-};
-var localIdFor = (parsed, rawLine) => typeof parsed.uuid === "string" && parsed.uuid.length > 0 ? parsed.uuid : createHash("sha256").update(rawLine).digest("hex").slice(0, 32);
-var buildTranscriptRecords = (lines, sessionKey, seen = /* @__PURE__ */ new Set()) => {
-  const records = [];
-  const nextSeen = new Set(seen);
-  for (const line of lines) {
-    const trimmed = line.trim();
-    if (!trimmed) continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(trimmed);
-    } catch {
-      continue;
-    }
-    const type = typeof parsed.type === "string" ? parsed.type : "";
-    if (INTERNAL_TYPES.has(type)) continue;
-    const localId = localIdFor(parsed, trimmed);
-    if (nextSeen.has(localId)) continue;
-    nextSeen.add(localId);
-    const content = encryptRecord(JSON.stringify(redactDeep(parsed)), sessionKey);
-    records.push({ localId, content });
-  }
-  return { records, seen: nextSeen };
-};
-
-// src/transcript-api.ts
-var fetchAccountPublicKey = async (apiKey) => {
-  try {
-    const res = await fetch(`${getBaseUrl()}/api/agent/encryption-account`, {
-      headers: { Authorization: `Bearer ${apiKey}` },
-      signal: AbortSignal.timeout(5e3)
-    });
-    if (!res.ok) return null;
-    const data = await res.json();
-    return typeof data.publicKey === "string" && data.publicKey.length > 0 ? data.publicKey : null;
-  } catch {
-    return null;
-  }
-};
-var uploadTranscriptRecords = async (apiKey, params) => {
-  try {
-    const res = await fetch(`${getBaseUrl()}/api/agent/transcript`, {
-      method: "POST",
-      headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
-      body: JSON.stringify(params),
-      signal: AbortSignal.timeout(15e3)
-    });
-    return res.ok;
-  } catch {
-    return false;
-  }
-};
-
-// src/transcript-sync.ts
 var transcriptsEnabled = () => process.env.PUSHARY_TRANSCRIPTS === "1";
 var claudeTranscriptPath = (cwd, sessionId) => {
   const projectId = resolve(cwd).replace(/[^a-zA-Z0-9-]/g, "-");
@@ -229,9 +140,11 @@ var createSyncState = () => ({
   sessionKey: null,
   wrappedKey: null,
   seen: /* @__PURE__ */ new Set(),
-  keyUploaded: false
+  keyUploaded: false,
+  keyRejected: false
 });
 var syncTick = async (lines, state, uploader, sessionId, machineId) => {
+  if (state.keyRejected) return state;
   let sessionKey = state.sessionKey;
   let wrappedKey = state.wrappedKey;
   if (!sessionKey) {
@@ -242,9 +155,9 @@ var syncTick = async (lines, state, uploader, sessionId, machineId) => {
   }
   const built = buildTranscriptRecords(lines, sessionKey, state.seen);
   if (built.records.length === 0) {
-    return { sessionKey, wrappedKey, seen: built.seen, keyUploaded: state.keyUploaded };
+    return { ...state, sessionKey, wrappedKey, seen: built.seen };
   }
-  const ok = await uploader.uploadRecords({
+  const result = await uploader.uploadRecords({
     sessionId,
     machineId,
     dataEncryptionKey: state.keyUploaded ? void 0 : wrappedKey ?? void 0,
@@ -253,8 +166,9 @@ var syncTick = async (lines, state, uploader, sessionId, machineId) => {
   return {
     sessionKey,
     wrappedKey,
-    seen: ok ? built.seen : state.seen,
-    keyUploaded: state.keyUploaded || ok
+    seen: result.ok ? built.seen : state.seen,
+    keyUploaded: state.keyUploaded || result.keyRegistered,
+    keyRejected: result.keyConflict
   };
 };
 var readLines = (path) => {
@@ -348,7 +262,7 @@ var ensureClaudeSdk = async (log) => {
       { cwd: dir, stdio: "ignore", shell: process.platform === "win32" }
     );
     child.on("error", () => resolve2(false));
-    child.on("close", (code) => resolve2(code === 0));
+    child.on("close", (code2) => resolve2(code2 === 0));
   });
   if (!installed) {
     log?.(`[pushary] could not auto-install the SDK. Install it manually: npm i -g ${SDK_SPEC}`);
@@ -533,7 +447,7 @@ var createRemoteApprover = (deps) => {
     try {
       const sessionId = deps.getSessionId?.();
       const modeState = await fetchModeState2(deps.apiKey, sessionId);
-      const policyConfig = await getPolicy2(deps.apiKey, modeState.policyVersion, "claude_code", true);
+      const policyConfig = await getPolicy2(deps.apiKey, modeState.policyVersion, "claude_code", true, sessionId);
       const scopePath = modeState.scope ? scopePathFor(toolName, input, deps.cwd) : void 0;
       const verdict = resolveGate({
         modeState,
@@ -542,7 +456,8 @@ var createRemoteApprover = (deps) => {
         toolInputs: [input],
         scopePaths: scopePath ? [scopePath] : [],
         cwd: deps.cwd,
-        repoKey: repoKeyFor(deps.cwd)
+        repoKey: repoKeyFor(deps.cwd),
+        sessionId
       });
       if (verdict.kind === "kill") return deny(KILL_REASON);
       if (verdict.kind === "allow") return allow(input);
@@ -561,7 +476,8 @@ var createRemoteApprover = (deps) => {
           sessionId,
           machineId: deps.machineId,
           toolName,
-          toolTarget
+          toolTarget,
+          repoKey: repoKeyFor(deps.cwd)
         });
       } catch {
         return applyTimeout(policy, input);
@@ -1127,13 +1043,13 @@ var runLocalLeg = (session, deps = {}) => {
       }
       finish();
     });
-    child.on("exit", (code, signal) => {
+    child.on("exit", (code2, signal) => {
       if (signal === "SIGTERM" && legAbort.signal.aborted) {
       } else if (!exitReason) {
         if (session.input.bufferedCount > 0) {
           exitReason = "switch";
-        } else if (typeof code === "number") {
-          exitReason = { type: "exit", code };
+        } else if (typeof code2 === "number") {
+          exitReason = { type: "exit", code: code2 };
         } else if (signal) {
           exitReason = { type: "exit", code: SIGNAL_EXIT_BASE + (SIGNAL_NUMBERS2[signal] ?? 0) };
         } else {
@@ -1294,6 +1210,7 @@ var driveModeLoop = async (deps) => {
 var INPUT_QUEUE_CAP = 32;
 var MIN_MODE_DWELL_MS = 300;
 var RELAY_FALLBACK_POLL_MS = 6e4;
+var PRESENCE_HEARTBEAT_MS = 6e4;
 var SESSION_FLAG_RE = /^(-r|--resume|-c|--continue|--session-id)(=.*)?$/;
 var extractAssistantText = (message) => {
   const content = message.message?.content;
@@ -1378,28 +1295,53 @@ var runDualMode = async (binary, args2, startingMode) => {
     });
     relay.start();
   }
-  const announcePresence = (event, action) => {
-    if (!sessionId) return Promise.resolve();
-    return reportEvent(
-      { event, agentType: "claude_code", agentName, action, sessionId, machineId },
-      { maxAttempts: 2, timeoutMs: 4e3 }
-    ).then(() => {
-    }).catch(() => {
+  let ownership;
+  let ownershipSessionId;
+  const ensureOwnership = async () => {
+    if (!sessionId || ownershipSessionId === sessionId) return ownership?.ready;
+    ownership?.stop();
+    ownershipSessionId = sessionId;
+    ownership = startProcessOwnership({
+      sessionId,
+      pid: process.pid,
+      ...process.env.PUSHARY_SPAWN_ID ? { spawnId: process.env.PUSHARY_SPAWN_ID } : {}
     });
+    await ownership.ready;
+  };
+  const announcePresence = async (event, action) => {
+    if (!sessionId) return Promise.resolve();
+    try {
+      await ensureOwnership();
+      await reportEvent(
+        { event, agentType: "claude_code", agentName, action, sessionId, machineId, pid: process.pid },
+        { maxAttempts: event === "session_start" ? 4 : 2, timeoutMs: 4e3, requireOk: event === "session_start" }
+      );
+    } catch {
+    }
   };
   let stopTranscript;
+  let presenceHeartbeat;
   let transcriptStarted = false;
   const ensureTranscriptSync = () => {
     if (transcriptStarted || !transcriptsEnabled() || !sessionId) return;
     transcriptStarted = true;
     stopTranscript = startTranscriptSync({ apiKey, sessionId, cwd: process.cwd(), machineId });
   };
+  const ensurePresenceHeartbeat = () => {
+    if (presenceHeartbeat || !sessionId) return;
+    presenceHeartbeat = setInterval(
+      () => void announcePresence("heartbeat", "Session online"),
+      PRESENCE_HEARTBEAT_MS
+    );
+    presenceHeartbeat.unref();
+  };
   const setSessionId = (id) => {
     const isNew = sessionId !== id;
     sessionId = id;
     sessionCreated = true;
     relay?.reannounce();
     if (isNew) void announcePresence("session_start", "Remote session ready \u2014 reachable from your phone");
+    ensurePresenceHeartbeat();
     ensureTranscriptSync();
   };
   const onPhoneCommand = (command) => {
@@ -1483,6 +1425,7 @@ var runDualMode = async (binary, args2, startingMode) => {
         "[pushary] reachable from your phone \u2014 send an instruction from the app when this goes idle (Ctrl-] keeps the terminal).\n"
       );
       void announcePresence("session_start", "Session ready \u2014 reachable from your phone");
+      ensurePresenceHeartbeat();
       ensureTranscriptSync();
     }
     if (startingMode === "remote" && initialPrompt) input.push(userMessage(initialPrompt));
@@ -1513,11 +1456,13 @@ var runDualMode = async (binary, args2, startingMode) => {
     process.removeListener("exit", restoreStdin);
     relay?.stop();
     poller.stop();
+    if (presenceHeartbeat) clearInterval(presenceHeartbeat);
     stopTranscript?.();
     approver.teardown();
     input.close();
     stdin.dispose();
     await announcePresence("session_closed", "Session ended");
+    ownership?.stop();
     if (totalCostUsd > 0) {
       process.stderr.write(`[pushary] session cost: $${totalCostUsd.toFixed(4)}
 `);
@@ -1551,10 +1496,15 @@ var runClaudeWrapper = async (args2) => {
 
 // bin/pushary-claude.ts
 var args = resolveClaudeArgs(process.argv);
-runClaudeWrapper(args).then((code) => process.exit(code)).catch((err) => {
+var spawnId = process.env.PUSHARY_SPAWN_ID?.trim() || void 0;
+var code = await withSpawnProcessOwnership(spawnId, async () => {
+  await ensureDaemonRunning();
+  return runClaudeWrapper(args);
+}).catch((err) => {
   process.stderr.write(
     `[pushary] wrapper error: ${err instanceof Error ? err.message : String(err)}
 `
   );
-  process.exit(1);
+  return 1;
 });
+process.exit(code);

package/dist/bin/pushary-clean.js

@@ -4,14 +4,17 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-UVAC2KHH.js";
+} from "../chunk-UXWEE3QI.js";
 import {
   removeGeminiSettings
-} from "../chunk-TXF4QZSQ.js";
+} from "../chunk-DOXSWT4Q.js";
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-NDC3TBHI.js";
+} from "../chunk-UKSQWTBH.js";
+import {
+  execNpm
+} from "../chunk-VT4IVERX.js";
 import {
   claudeJson,
   claudeSettings,
@@ -29,25 +32,23 @@ import {
   pusharyDir,
   removeCodexHooks,
   vscodePluginDir
-} from "../chunk-EHLTWCDZ.js";
+} from "../chunk-SEAHGHCE.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-J4KFVOCQ.js";
+import "../chunk-MGJBC6DD.js";
 import {
   removeClaudeAlias
 } from "../chunk-BC3VCZ3E.js";
+import "../chunk-DINDL2CF.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-YWRJGYUH.js";
-import {
-  execNpm
-} from "../chunk-MUEW424A.js";
-import {
-  exitOnHelpFlag
-} from "../chunk-RRZZ7TFJ.js";
-import "../chunk-ZUKH2NPJ.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
+import "../chunk-MQMPG5X4.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, copyFileSync, readdirSync } from "fs";

package/dist/bin/pushary-codex-bridge.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node