@pushary/agent-hooks 0.84.0 → 0.84.1

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 0.84.1
+
+### Remote starts survive lost acknowledgements without double-launching
+
+A phone-started agent now claims exclusive process ownership before the provider
+starts. If the daemon restarts or the launch acknowledgement is lost, retrying the
+same request reconnects to the existing process instead of starting a second one.
+
+### Repository approval scopes reach Codex and Gemini
+
+Codex and Gemini sessions now carry their repository identity through approval
+requests, so repository-scoped rules stay inside the repository that created them.
+
+### Encrypted transcripts retry safely
+
+Transcript writers now retry while a session key is temporarily unavailable and
+stop on a real key conflict, preventing undecryptable transcript entries from being
+accepted or silently dropped.
+
 ## 0.84.0
 
 ### The phone can start an agent on a machine that is not running one

package/dist/bin/pushary-claude.js

@@ -9,10 +9,11 @@ import {
   generateSessionKey,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "../chunk-NWYGW7HY.js";
+} from "../chunk-GCKAWHFP.js";
 import {
-  startProcessOwnership
-} from "../chunk-EVJ6ULHN.js";
+  startProcessOwnership,
+  withSpawnProcessOwnership
+} from "../chunk-ILB6UOAF.js";
 import {
   needsShell,
   spawnClaude
@@ -23,7 +24,7 @@ import {
   KILL_REASON,
   isDeferAnswer,
   resolveGate
-} from "../chunk-37AD5K7W.js";
+} from "../chunk-BLDDXHHA.js";
 import {
   askUser,
   cancelQuestion,
@@ -35,7 +36,7 @@ import {
   reportEvent,
   scopePathFor,
   waitForAnswer
-} from "../chunk-OPMSMF5R.js";
+} from "../chunk-CCCJ6BPW.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -113,9 +114,9 @@ var runLocalPassthrough = (binary, args2) => {
       cleanup();
       resolve2(127);
     });
-    child.on("exit", (code, signal) => {
+    child.on("exit", (code2, signal) => {
       cleanup();
-      if (typeof code === "number") resolve2(code);
+      if (typeof code2 === "number") resolve2(code2);
       else if (signal) resolve2(128 + (SIGNAL_NUMBERS[signal] ?? 0));
       else resolve2(0);
     });
@@ -139,9 +140,11 @@ var createSyncState = () => ({
   sessionKey: null,
   wrappedKey: null,
   seen: /* @__PURE__ */ new Set(),
-  keyUploaded: false
+  keyUploaded: false,
+  keyRejected: false
 });
 var syncTick = async (lines, state, uploader, sessionId, machineId) => {
+  if (state.keyRejected) return state;
   let sessionKey = state.sessionKey;
   let wrappedKey = state.wrappedKey;
   if (!sessionKey) {
@@ -152,9 +155,9 @@ var syncTick = async (lines, state, uploader, sessionId, machineId) => {
   }
   const built = buildTranscriptRecords(lines, sessionKey, state.seen);
   if (built.records.length === 0) {
-    return { sessionKey, wrappedKey, seen: built.seen, keyUploaded: state.keyUploaded };
+    return { ...state, sessionKey, wrappedKey, seen: built.seen };
   }
-  const ok = await uploader.uploadRecords({
+  const result = await uploader.uploadRecords({
     sessionId,
     machineId,
     dataEncryptionKey: state.keyUploaded ? void 0 : wrappedKey ?? void 0,
@@ -163,8 +166,9 @@ var syncTick = async (lines, state, uploader, sessionId, machineId) => {
   return {
     sessionKey,
     wrappedKey,
-    seen: ok ? built.seen : state.seen,
-    keyUploaded: state.keyUploaded || ok
+    seen: result.ok ? built.seen : state.seen,
+    keyUploaded: state.keyUploaded || result.keyRegistered,
+    keyRejected: result.keyConflict
   };
 };
 var readLines = (path) => {
@@ -258,7 +262,7 @@ var ensureClaudeSdk = async (log) => {
       { cwd: dir, stdio: "ignore", shell: process.platform === "win32" }
     );
     child.on("error", () => resolve2(false));
-    child.on("close", (code) => resolve2(code === 0));
+    child.on("close", (code2) => resolve2(code2 === 0));
   });
   if (!installed) {
     log?.(`[pushary] could not auto-install the SDK. Install it manually: npm i -g ${SDK_SPEC}`);
@@ -1039,13 +1043,13 @@ var runLocalLeg = (session, deps = {}) => {
       }
       finish();
     });
-    child.on("exit", (code, signal) => {
+    child.on("exit", (code2, signal) => {
       if (signal === "SIGTERM" && legAbort.signal.aborted) {
       } else if (!exitReason) {
         if (session.input.bufferedCount > 0) {
           exitReason = "switch";
-        } else if (typeof code === "number") {
-          exitReason = { type: "exit", code };
+        } else if (typeof code2 === "number") {
+          exitReason = { type: "exit", code: code2 };
         } else if (signal) {
           exitReason = { type: "exit", code: SIGNAL_EXIT_BASE + (SIGNAL_NUMBERS2[signal] ?? 0) };
         } else {
@@ -1492,10 +1496,15 @@ var runClaudeWrapper = async (args2) => {
 
 // bin/pushary-claude.ts
 var args = resolveClaudeArgs(process.argv);
-ensureDaemonRunning().then(() => runClaudeWrapper(args)).then((code) => process.exit(code)).catch((err) => {
+var spawnId = process.env.PUSHARY_SPAWN_ID?.trim() || void 0;
+var code = await withSpawnProcessOwnership(spawnId, async () => {
+  await ensureDaemonRunning();
+  return runClaudeWrapper(args);
+}).catch((err) => {
   process.stderr.write(
     `[pushary] wrapper error: ${err instanceof Error ? err.message : String(err)}
 `
   );
-  process.exit(1);
+  return 1;
 });
+process.exit(code);

package/dist/bin/pushary-codex-bridge.js

@@ -6,11 +6,12 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-YJCMI5GF.js";
-import "../chunk-NWYGW7HY.js";
+} from "../chunk-ERYKGH4J.js";
+import "../chunk-GCKAWHFP.js";
 import {
-  startProcessOwnership
-} from "../chunk-EVJ6ULHN.js";
+  startProcessOwnership,
+  withSpawnProcessOwnership
+} from "../chunk-ILB6UOAF.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -327,7 +328,7 @@ var abort = new AbortController();
 var signals = process.platform === "win32" ? ["SIGINT", "SIGTERM"] : ["SIGINT", "SIGTERM", "SIGHUP"];
 var stop = () => abort.abort();
 for (const signal of signals) process.on(signal, stop);
-var outcome = await runCodexBridge({
+var outcome = await withSpawnProcessOwnership(spawnId, () => runCodexBridge({
   apiKey: getApiKey(),
   baseUrl: getBaseUrl(),
   machineId: getMachineId(),
@@ -343,6 +344,6 @@ var outcome = await runCodexBridge({
   },
   signal: abort.signal,
   transcripts: process.env.PUSHARY_TRANSCRIPTS === "1"
-});
+}));
 for (const signal of signals) process.off(signal, stop);
 process.exit(outcome === "stopped" ? 0 : 1);

package/dist/bin/pushary-codex-hook.js

@@ -8,7 +8,7 @@ import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-37AD5K7W.js";
+} from "../chunk-BLDDXHHA.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -28,6 +28,7 @@ import {
   handleStop,
   handleUserPrompt,
   permissionTimeoutDecision,
+  policyRequestFor,
   preToolUseTimeoutDecision,
   readLastPrompt,
   repoKeyFor,
@@ -39,7 +40,7 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   waitForAnswer
-} from "../chunk-OPMSMF5R.js";
+} from "../chunk-CCCJ6BPW.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -143,6 +144,7 @@ var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode) => {
     action: description.slice(0, DECISION_LINE_MAX),
     blocker: deriveBlocker(mode),
     actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {}),
+    repoKey: repoKeyFor(input.cwd),
     // Codex has always sent this; it is what claimNotify and markApproved already
     // key on locally. Passing it through lets the server collapse a retried create
     // the same way, instead of putting the same approval on the phone twice.
@@ -177,9 +179,10 @@ var notifyApprovalNeeded = async (apiKey, input, lookup) => {
 };
 var codexGate = async (apiKey, input) => {
   const modeState = await fetchModeState(apiKey, input.session_id);
+  const policyRequest = policyRequestFor("codex");
   const lookup = toPolicyLookup(input.tool_name ?? "", input.tool_input ?? {}, input.cwd);
   const lookups = toPolicyLookups(input.tool_name ?? "", input.tool_input ?? {}, input.cwd);
-  const config = await getPolicy(apiKey, modeState.policyVersion, "codex", false, input.session_id);
+  const config = await getPolicy(apiKey, modeState.policyVersion, policyRequest.agent, policyRequest.repoAware, input.session_id);
   const verdict = resolveGate({
     modeState,
     config,

package/dist/bin/pushary-codex.js

@@ -3,7 +3,7 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-OPMSMF5R.js";
+} from "../chunk-CCCJ6BPW.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-daemon.js

@@ -15,8 +15,9 @@ import {
   geminiLiveCapabilities
 } from "../chunk-NRGRUOAR.js";
 import {
+  findLiveProcessBySpawnId,
   ownsLiveProcess
-} from "../chunk-EVJ6ULHN.js";
+} from "../chunk-ILB6UOAF.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -135,6 +136,23 @@ var spawnAcknowledgement = (request, machineId, outcome) => {
     }
   };
 };
+var launchSpawnClaim = async (request, runtime) => {
+  const existingPid = await runtime.findExistingPid(request.id);
+  if (existingPid !== null) {
+    await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "started", pid: existingPid }));
+    return;
+  }
+  let pid;
+  try {
+    pid = await runtime.launch(request);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    runtime.reportLaunchError(message);
+    await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "failed", message }));
+    return;
+  }
+  await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "started", pid }));
+};
 var DrainError = class extends Error {
   constructor(status) {
     super(`drain ${status}`);
@@ -397,19 +415,19 @@ var runSpawnDaemon = async () => {
     }
     throw lastError ?? new Error("spawn acknowledgement stopped");
   };
-  const launchClaim = async (request) => {
-    let pid;
-    try {
-      pid = await launch(request);
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      stderr(`[pushary] could not launch session: ${message}
-`);
-      await acknowledge(spawnAcknowledgement(request, machineId, { state: "failed", message }));
-      return;
-    }
-    await acknowledge(spawnAcknowledgement(request, machineId, { state: "started", pid }));
-  };
+  const launchClaim = (request) => launchSpawnClaim(request, {
+    machineId,
+    findExistingPid: async (spawnId) => {
+      for (const [pid, launchedSpawnId] of launchedProcesses) {
+        if (launchedSpawnId === spawnId) return pid;
+      }
+      return findLiveProcessBySpawnId(spawnId);
+    },
+    launch,
+    acknowledge,
+    reportLaunchError: (message) => stderr(`[pushary] could not launch session: ${message}
+`)
+  });
   const nextDelay = () => {
     if (errorStreak > 0) return Math.min(SLOW_POLL_MS * 2 ** (errorStreak - 1), MAX_ERROR_BACKOFF_MS);
     return idleTicks >= FAST_DECAY_TICKS ? SLOW_POLL_MS : FAST_POLL_MS;

package/dist/bin/pushary-gemini-bridge.js

@@ -5,11 +5,12 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "../chunk-YJCMI5GF.js";
-import "../chunk-NWYGW7HY.js";
+} from "../chunk-ERYKGH4J.js";
+import "../chunk-GCKAWHFP.js";
 import {
-  startProcessOwnership
-} from "../chunk-EVJ6ULHN.js";
+  startProcessOwnership,
+  withSpawnProcessOwnership
+} from "../chunk-ILB6UOAF.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
@@ -280,7 +281,7 @@ var abort = new AbortController();
 var signals = process.platform === "win32" ? ["SIGINT", "SIGTERM"] : ["SIGINT", "SIGTERM", "SIGHUP"];
 var stop = () => abort.abort();
 for (const signal of signals) process.on(signal, stop);
-var outcome = await runGeminiBridge({
+var outcome = await withSpawnProcessOwnership(spawnId, () => runGeminiBridge({
   apiKey: getApiKey(),
   baseUrl: getBaseUrl(),
   machineId: getMachineId(),
@@ -293,6 +294,6 @@ var outcome = await runGeminiBridge({
   command: { command: process.env.PUSHARY_GEMINI_COMMAND?.trim() || resolveBinary("gemini") || "gemini" },
   signal: abort.signal,
   transcripts: process.env.PUSHARY_TRANSCRIPTS === "1"
-});
+}));
 for (const signal of signals) process.off(signal, stop);
 process.exit(outcome === "stopped" ? 0 : 1);

package/dist/bin/pushary-gemini-hook.js

@@ -8,7 +8,7 @@ import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-37AD5K7W.js";
+} from "../chunk-BLDDXHHA.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -22,6 +22,7 @@ import {
   handlePostToolUse,
   handleStop,
   handleUserPrompt,
+  policyRequestFor,
   readLastPrompt,
   readLastUserPrompt,
   repoKeyFor,
@@ -30,7 +31,7 @@ import {
   scopePathFor,
   sendNotification,
   waitForAnswer
-} from "../chunk-OPMSMF5R.js";
+} from "../chunk-CCCJ6BPW.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";
@@ -127,7 +128,8 @@ var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode, pollInterval
     intent: readLastPrompt(input.session_id || DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0),
     action: description.slice(0, DECISION_LINE_MAX),
     blocker: deriveBlocker(mode),
-    actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {})
+    actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {}),
+    repoKey: repoKeyFor(input.cwd)
   });
   if (result.suppressed || result.noDevices) {
     return {
@@ -219,8 +221,9 @@ var decideBeforeTool = async (input) => {
   }
   try {
     const modeState = await fetchModeState(apiKey, input.session_id);
+    const policyRequest = policyRequestFor("gemini_cli");
     const lookup = toGeminiPolicyLookup(input.tool_name ?? "", input.tool_input ?? {}, input.cwd);
-    const config = await getPolicy(apiKey, modeState.policyVersion, "gemini_cli", false, input.session_id);
+    const config = await getPolicy(apiKey, modeState.policyVersion, policyRequest.agent, policyRequest.repoAware, input.session_id);
     const scopePath = modeState.scope ? scopePathFor(lookup.tool, lookup.input, input.cwd) : void 0;
     const verdict = resolveGate({
       modeState,

package/dist/bin/pushary-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-QNBA5OXQ.js";
+} from "../chunk-YR5TSPXB.js";
 import "../chunk-UKSQWTBH.js";
 import "../chunk-NJ7JT26G.js";
-import "../chunk-37AD5K7W.js";
-import "../chunk-OPMSMF5R.js";
+import "../chunk-BLDDXHHA.js";
+import "../chunk-CCCJ6BPW.js";
 import "../chunk-RN3NOEJF.js";
 import {
   exitOnHelpFlag

package/dist/bin/pushary-notification-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-OPMSMF5R.js";
+} from "../chunk-CCCJ6BPW.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-QNBA5OXQ.js";
+} from "../chunk-YR5TSPXB.js";
 import "../chunk-UKSQWTBH.js";
 import "../chunk-NJ7JT26G.js";
-import "../chunk-37AD5K7W.js";
-import "../chunk-OPMSMF5R.js";
+import "../chunk-BLDDXHHA.js";
+import "../chunk-CCCJ6BPW.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-permission-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-QNBA5OXQ.js";
+} from "../chunk-YR5TSPXB.js";
 import "../chunk-UKSQWTBH.js";
 import "../chunk-NJ7JT26G.js";
-import "../chunk-37AD5K7W.js";
-import "../chunk-OPMSMF5R.js";
+import "../chunk-BLDDXHHA.js";
+import "../chunk-CCCJ6BPW.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-post-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-OPMSMF5R.js";
+} from "../chunk-CCCJ6BPW.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-prompt-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-OPMSMF5R.js";
+} from "../chunk-CCCJ6BPW.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-session-end-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-OPMSMF5R.js";
+} from "../chunk-CCCJ6BPW.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-session-start-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-OPMSMF5R.js";
+} from "../chunk-CCCJ6BPW.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-setup.js

@@ -60,7 +60,7 @@ import {
 } from "../chunk-SEAHGHCE.js";
 import {
   reportEvent
-} from "../chunk-OPMSMF5R.js";
+} from "../chunk-CCCJ6BPW.js";
 import "../chunk-RN3NOEJF.js";
 import {
   confirmAppConnection,

package/dist/bin/pushary-stop-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-OPMSMF5R.js";
+} from "../chunk-CCCJ6BPW.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-OPMSMF5R.js";
+} from "../chunk-CCCJ6BPW.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/dist/{chunk-37AD5K7W.js → chunk-BLDDXHHA.js}

@@ -2,7 +2,7 @@ import {
   isModeStateDegraded,
   resolveAutoResolveOrigin,
   resolvePolicyAcross
-} from "./chunk-OPMSMF5R.js";
+} from "./chunk-CCCJ6BPW.js";
 import {
   evaluateScope,
   scopeChangeReason,

package/dist/{chunk-OPMSMF5R.js → chunk-CCCJ6BPW.js}

@@ -60,7 +60,7 @@ var CACHE_TTL_MS = 60 * 1e3;
 var STALE_CACHE_MAX_MS = 12 * 60 * 60 * 1e3;
 var policyRequestFor = (agentType) => ({
   agent: agentType,
-  repoAware: agentType === "claude_code"
+  repoAware: ["claude_code", "codex", "gemini_cli"].includes(agentType)
 });
 var policyCacheFile = (apiKey, agent, repoAware = false) => {
   const parts = [apiKey, agent, repoAware ? "repoAware" : void 0].filter(Boolean);
@@ -1318,6 +1318,7 @@ var handleStopFailure = async (input, agent = CLAUDE_CODE_AGENT) => {
 };
 
 export {
+  policyRequestFor,
   getPolicy,
   resolveAutoResolveOrigin,
   resolvePolicy,

package/dist/{chunk-YJCMI5GF.js → chunk-ERYKGH4J.js}

@@ -5,7 +5,7 @@ import {
   generateSessionKey,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-NWYGW7HY.js";
+} from "./chunk-GCKAWHFP.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;
@@ -72,8 +72,10 @@ var LiveTranscriptRelay = class {
   sessionKey = null;
   wrappedKey = null;
   keyUploaded = false;
+  keyRejected = false;
   flushing = null;
   add(value) {
+    if (this.keyRejected) return;
     const raw = JSON.stringify(value);
     if (raw.length > MAX_TRANSCRIPT_TEXT) return;
     if (this.queue.length === MAX_TRANSCRIPT_QUEUE) this.queue.shift();
@@ -106,14 +108,19 @@ var LiveTranscriptRelay = class {
         this.queue.splice(0, count);
         return true;
       }
-      const uploaded = await uploadTranscriptRecords(this.options.apiKey, {
+      const result = await uploadTranscriptRecords(this.options.apiKey, {
         sessionId: this.sessionId,
         machineId: this.options.machineId,
         dataEncryptionKey: this.keyUploaded ? void 0 : this.wrappedKey ?? void 0,
         records
       }, this.options.baseUrl);
-      if (uploaded) {
-        this.keyUploaded = true;
+      if (result.keyConflict) {
+        this.keyRejected = true;
+        this.queue.length = 0;
+        return false;
+      }
+      if (result.ok) {
+        this.keyUploaded ||= result.keyRegistered;
         this.queue.splice(0, count);
         return true;
       }

package/dist/{chunk-NWYGW7HY.js → chunk-GCKAWHFP.js}

@@ -101,9 +101,16 @@ var uploadTranscriptRecords = async (apiKey, params, baseUrl = getBaseUrl()) =>
       body: JSON.stringify(params),
       signal: AbortSignal.timeout(15e3)
     });
-    return res.ok;
+    const body = await res.json().catch(() => null);
+    const keyRegistered = body?.keyRegistered === true;
+    const keyConflict = body?.keyConflict === true;
+    return {
+      ok: res.ok && !keyConflict && (params.dataEncryptionKey === void 0 || keyRegistered),
+      keyRegistered,
+      keyConflict
+    };
   } catch {
-    return false;
+    return { ok: false, keyRegistered: false, keyConflict: false };
   }
 };
 

package/dist/{chunk-EVJ6ULHN.js → chunk-ILB6UOAF.js}

@@ -91,7 +91,11 @@ var startProcessOwnership = (identity, options = {}) => {
         proof = { ...identity, port: address.port, token };
         mkdirSync(dir, { recursive: true, mode: 448 });
         pruneProofs(dir);
-        writeFileSync(path, JSON.stringify(proof), { encoding: "utf8", mode: 384 });
+        writeFileSync(path, JSON.stringify(proof), {
+          encoding: "utf8",
+          mode: 384,
+          flag: options.exclusive ? "wx" : "w"
+        });
         resolve();
       } catch {
         server.close();
@@ -113,41 +117,76 @@ var startProcessOwnership = (identity, options = {}) => {
     }
   };
 };
+var withSpawnProcessOwnership = async (spawnId, run, options = {}) => {
+  if (!spawnId) return run();
+  const sessionId = `spawn:${spawnId}`;
+  const ownership = startProcessOwnership({
+    sessionId,
+    pid: process.pid,
+    spawnId
+  }, { ...options, exclusive: true });
+  await ownership.ready;
+  if (!await ownsLiveProcess({ sessionId, pid: process.pid, spawnId }, options)) {
+    ownership.stop();
+    throw new Error("Could not establish spawned process ownership");
+  }
+  try {
+    return await run();
+  } finally {
+    ownership.stop();
+  }
+};
 var ownsLiveProcess = async (request, options = {}) => {
   const stored = readJsonSafe(proofPath(ownershipDir(options), request.sessionId));
   if (stored.kind !== "ok" || !isProof(stored.value)) return false;
   const proof = stored.value;
   if (proof.sessionId !== request.sessionId || proof.pid !== request.pid) return false;
   if (request.spawnId && proof.spawnId !== request.spawnId) return false;
-  return new Promise((resolve) => {
-    let settled = false;
-    let raw = "";
-    const socket = createConnection({ host: "127.0.0.1", port: proof.port });
-    const finish = (owned) => {
-      if (settled) return;
-      settled = true;
-      socket.destroy();
-      resolve(owned);
-    };
-    socket.setTimeout(options.connectTimeoutMs ?? 500, () => finish(false));
-    socket.on("error", () => finish(false));
-    socket.on("connect", () => socket.write(proof.token));
-    socket.on("data", (chunk) => {
-      raw += String(chunk);
-      if (raw.length > MAX_PROOF_BYTES) finish(false);
-    });
-    socket.on("end", () => {
-      try {
-        const live = JSON.parse(raw);
-        finish(isProof(live) && live.token === proof.token && live.sessionId === proof.sessionId && live.pid === proof.pid && live.spawnId === proof.spawnId);
-      } catch {
-        finish(false);
-      }
-    });
-  });
+  return verifyProof(proof, options);
 };
+var findLiveProcessBySpawnId = async (spawnId, options = {}) => {
+  try {
+    const dir = ownershipDir(options);
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+      if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
+      const stored = readJsonSafe(join(dir, entry.name));
+      if (stored.kind !== "ok" || !isProof(stored.value) || stored.value.spawnId !== spawnId) continue;
+      if (await verifyProof(stored.value, options)) return stored.value.pid;
+    }
+  } catch {
+  }
+  return null;
+};
+var verifyProof = (proof, options) => new Promise((resolve) => {
+  let settled = false;
+  let raw = "";
+  const socket = createConnection({ host: "127.0.0.1", port: proof.port });
+  const finish = (owned) => {
+    if (settled) return;
+    settled = true;
+    socket.destroy();
+    resolve(owned);
+  };
+  socket.setTimeout(options.connectTimeoutMs ?? 500, () => finish(false));
+  socket.on("error", () => finish(false));
+  socket.on("connect", () => socket.write(proof.token));
+  socket.on("data", (chunk) => {
+    raw += String(chunk);
+    if (raw.length > MAX_PROOF_BYTES) finish(false);
+  });
+  socket.on("end", () => {
+    try {
+      const live = JSON.parse(raw);
+      finish(isProof(live) && live.token === proof.token && live.sessionId === proof.sessionId && live.pid === proof.pid && live.spawnId === proof.spawnId);
+    } catch {
+      finish(false);
+    }
+  });
+});
 
 export {
   startProcessOwnership,
-  ownsLiveProcess
+  withSpawnProcessOwnership,
+  ownsLiveProcess,
+  findLiveProcessBySpawnId
 };

package/dist/{chunk-QNBA5OXQ.js → chunk-YR5TSPXB.js}

@@ -9,7 +9,7 @@ import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "./chunk-37AD5K7W.js";
+} from "./chunk-BLDDXHHA.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -29,7 +29,7 @@ import {
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-OPMSMF5R.js";
+} from "./chunk-CCCJ6BPW.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";

package/dist/src/index.js

@@ -1,9 +1,9 @@
 import {
   handlePreToolUse
-} from "../chunk-QNBA5OXQ.js";
+} from "../chunk-YR5TSPXB.js";
 import "../chunk-UKSQWTBH.js";
 import "../chunk-NJ7JT26G.js";
-import "../chunk-37AD5K7W.js";
+import "../chunk-BLDDXHHA.js";
 import {
   askUser,
   cancelQuestion,
@@ -16,7 +16,7 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-OPMSMF5R.js";
+} from "../chunk-CCCJ6BPW.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.84.0",
+  "version": "0.84.1",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",