@pushary/agent-hooks 0.89.10 → 0.89.12

package/dist/{chunk-GSSFSVAQ.js → chunk-OCMOTJTW.js}

@@ -1,14 +1,14 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS,
   PRETOOLUSE_PHONE_ANSWERED_TOOLS
-} from "./chunk-6EKQZA6R.js";
+} from "./chunk-KVHP5ZME.js";
 import {
   defersToNativeMode
-} from "./chunk-NCVIWGVA.js";
+} from "./chunk-GKPURU7P.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-3HFK3UXM.js";
+} from "./chunk-FCUUVHTS.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -20,7 +20,7 @@ import {
   readLastUserPrompt,
   repoKeyFor,
   throttlePass
-} from "./chunk-GTZLL7F4.js";
+} from "./chunk-OADGBOP7.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -28,18 +28,19 @@ import {
   pollForAnswer,
   savePendingQuestion,
   sendNotification
-} from "./chunk-UXHMWF4H.js";
+} from "./chunk-JHJHCMAF.js";
 import {
+  UNNAMED_ACTION,
   deriveAction,
   deriveActionBody,
   deriveBlocker,
   deriveToolTarget,
   describeToolCall,
   scopePathFor
-} from "./chunk-TG3T3M4K.js";
+} from "./chunk-JVZX5YRJ.js";
 import {
   getMachineId
-} from "./chunk-DKWM5T3P.js";
+} from "./chunk-5NDB3YOE.js";
 import {
   getApiKey,
   getBaseUrl
@@ -54,7 +55,7 @@ import {
   parseAgentQuestionAnswers,
   parseAgentQuestions,
   resolveGate
-} from "./chunk-X6RXX2NF.js";
+} from "./chunk-3MCEES6Z.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
@@ -87,11 +88,20 @@ var allow = () => claudePreToolUseOutput("allow");
 var deny = (reason) => claudePreToolUseOutput("deny", reason);
 var allowWithInput = (updatedInput) => claudePreToolUseOutput("allow", void 0, updatedInput);
 var ask = (reason) => claudePreToolUseOutput("ask", reason);
+var storedWaitDeadline = (result, requestedDeadline) => {
+  const stored = result.waitEndsAt ? Date.parse(result.waitEndsAt) : Number.NaN;
+  return Number.isFinite(stored) ? Math.min(stored, requestedDeadline) : requestedDeadline;
+};
+var returnedAnswer = (result) => result.answered === true ? { answered: true, value: result.value, note: result.note } : null;
 var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget, decision, signals) => {
+  const effectiveWait = effectiveWaitSeconds(timeoutAction, timeoutSeconds, "claude");
+  const now = Date.now();
+  const requestedDeadline = hookWaitDeadline(START_MS, effectiveWait, "claude", now);
+  const clampCut = hookWaitClamped(START_MS, effectiveWait, "claude", now);
   let result;
   try {
     result = await askUser(apiKey, {
-      question: `Allow ${description}?`,
+      question: `Allow ${description || UNNAMED_ACTION}?`,
       type: "confirm",
       context: `Agent wants to run this in ${projectName}`,
       agentName: `Claude Code - ${projectName}`,
@@ -99,6 +109,7 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
       machineId,
       toolName,
       toolTarget,
+      waitEndsAt: timeoutAction !== "approve" && timeoutAction !== "deny" || clampCut ? new Date(requestedDeadline).toISOString() : void 0,
       ...decision
     });
   } catch {
@@ -117,6 +128,8 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
     return ask(result.suppressed ? "You are at the keyboard, approve here." : "Delivery mode is Terminal, approve here.");
   }
   if (result.noDevices) {
+    await cancelQuestion(apiKey, result.correlationId).catch(() => {
+    });
     switch (timeoutAction) {
       case "approve":
         return allow();
@@ -126,12 +139,9 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
         return void 0;
     }
   }
-  const effectiveWait = effectiveWaitSeconds(timeoutAction, timeoutSeconds, "claude");
-  const now = Date.now();
-  const deadline = hookWaitDeadline(START_MS, effectiveWait, "claude", now);
-  const clampCut = hookWaitClamped(START_MS, effectiveWait, "claude", now);
+  const deadline = storedWaitDeadline(result, requestedDeadline);
   announceWait(effectiveWait, result.answerUrl, sessionId);
-  const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
+  const answer = returnedAnswer(result) ?? await pollForAnswer(apiKey, result.correlationId, deadline);
   if (answer.answered) {
     if (isDeferAnswer(answer.value)) return ask("Handling on your machine");
     signals.humanDecision = true;
@@ -147,6 +157,7 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
     case "deny":
       return deny("No response within timeout");
     default:
+      savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId);
       return ask("No push response, asking in terminal");
   }
 };
@@ -154,10 +165,11 @@ var handleTerminalOnly = () => {
   return ask();
 };
 var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds, sessionId, machineId, toolName, toolTarget, decision, signals) => {
+  const requestedDeadline = hookWaitDeadline(START_MS, pushFirstSeconds, "claude", Date.now());
   let result;
   try {
     result = await askUser(apiKey, {
-      question: `Allow ${description}?`,
+      question: `Allow ${description || UNNAMED_ACTION}?`,
       type: "confirm",
       context: `Agent wants to run this in ${projectName}`,
       agentName: `Claude Code - ${projectName}`,
@@ -165,6 +177,7 @@ var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds,
       machineId,
       toolName,
       toolTarget,
+      waitEndsAt: new Date(requestedDeadline).toISOString(),
       ...decision
     });
   } catch {
@@ -176,11 +189,13 @@ var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds,
     return ask("You are at the keyboard, approve here.");
   }
   if (result.noDevices) {
+    await cancelQuestion(apiKey, result.correlationId).catch(() => {
+    });
     return void 0;
   }
   announceWait(pushFirstSeconds, result.answerUrl, sessionId);
-  const deadline = hookWaitDeadline(START_MS, pushFirstSeconds, "claude", Date.now());
-  const answer = await pollForAnswer(apiKey, result.correlationId, deadline, 1500);
+  const deadline = storedWaitDeadline(result, requestedDeadline);
+  const answer = returnedAnswer(result) ?? await pollForAnswer(apiKey, result.correlationId, deadline, 1500);
   if (answer.answered) {
     if (isDeferAnswer(answer.value)) return ask("Handling on your machine");
     signals.humanDecision = true;
@@ -330,7 +345,8 @@ var askAsOneCard = async (apiKey, input, parsed, projectName, deadline) => {
       sessionId: input.session_id,
       machineId: getMachineId(),
       toolName: "AskUserQuestion",
-      toolUseId: input.tool_use_id
+      toolUseId: input.tool_use_id,
+      waitEndsAt: new Date(deadline).toISOString()
     });
   } catch {
     return void 0;
@@ -340,7 +356,7 @@ var askAsOneCard = async (apiKey, input, parsed, projectName, deadline) => {
     });
     return void 0;
   }
-  const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
+  const answer = returnedAnswer(result) ?? await pollForAnswer(apiKey, result.correlationId, storedWaitDeadline(result, deadline));
   const values = answer.answered && answer.value ? parseAgentQuestionAnswers(parsed, answer.value) : null;
   if (!values || isDeferAnswer(answer.value)) {
     savePendingQuestion(input.session_id || DEFAULT_SESSION, result.correlationId);
@@ -366,7 +382,8 @@ var askQuestionByQuestion = async (apiKey, input, parsed, projectName, deadline)
         // One AskUserQuestion call raises several questions, and their payload
         // fingerprints are identical (same tool, no target, no body). Without the
         // index they would all collapse onto the first decision.
-        toolUseId: input.tool_use_id ? `${input.tool_use_id}#q${index}` : void 0
+        toolUseId: input.tool_use_id ? `${input.tool_use_id}#q${index}` : void 0,
+        waitEndsAt: new Date(deadline).toISOString()
       });
     } catch {
       return void 0;
@@ -376,7 +393,7 @@ var askQuestionByQuestion = async (apiKey, input, parsed, projectName, deadline)
       });
       return void 0;
     }
-    const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
+    const answer = returnedAnswer(result) ?? await pollForAnswer(apiKey, result.correlationId, storedWaitDeadline(result, deadline));
     const legacyValue = answer.answered ? answer.value?.trim() : void 0;
     const values = legacyValue ? parseAgentQuestionAnswers([question], legacyValue) ?? parseAgentQuestionAnswers([question], JSON.stringify({
       [question.question]: question.multiSelect ? JSON.stringify([legacyValue]) : legacyValue
@@ -404,6 +421,7 @@ var PLAN_KEEP_PLANNING = "Keep planning";
 var handleExitPlanMode = async (apiKey, input) => {
   const toolInput = input.tool_input ?? {};
   const projectName = basename(input.cwd ?? process.cwd());
+  const deadline = hookWaitDeadline(START_MS, effectiveWaitSeconds("wait", 0, "claude"), "claude", Date.now());
   let result;
   try {
     result = await askUser(apiKey, {
@@ -420,7 +438,8 @@ var handleExitPlanMode = async (apiKey, input) => {
       // so approving from a lock screen is a real decision and not a blind yes.
       actionBody: deriveActionBody("ExitPlanMode", toolInput),
       intent: readLastPrompt(input.session_id ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0),
-      blocker: "Waiting for you to approve the plan"
+      blocker: "Waiting for you to approve the plan",
+      waitEndsAt: new Date(deadline).toISOString()
     });
   } catch {
     return void 0;
@@ -430,8 +449,7 @@ var handleExitPlanMode = async (apiKey, input) => {
     });
     return void 0;
   }
-  const deadline = hookWaitDeadline(START_MS, effectiveWaitSeconds("wait", 0, "claude"), "claude", Date.now());
-  const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
+  const answer = returnedAnswer(result) ?? await pollForAnswer(apiKey, result.correlationId, storedWaitDeadline(result, deadline));
   const value = answer.answered ? (answer.value ?? "").trim() : "";
   if (!value || isDeferAnswer(answer.value)) {
     savePendingQuestion(input.session_id || DEFAULT_SESSION, result.correlationId);

package/dist/{chunk-LURY4WNF.js → chunk-OTPJ4FUR.js}

@@ -1,6 +1,6 @@
 import {
   renderCommandHelp
-} from "./chunk-3XTFX4CL.js";
+} from "./chunk-RLQWNEPM.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";

package/dist/{chunk-QA72MKIT.js → chunk-OVEGEQSB.js}

@@ -1,17 +1,17 @@
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-X6RXX2NF.js";
+} from "./chunk-3MCEES6Z.js";
+
+// src/removal-scope.ts
+var namesAppLocator = (command) => command.includes(HOOK_LOCATOR_BINARY);
+var isProtectedByScope = (command, scope) => scope?.keepAppWiring === true && namesAppLocator(command);
 
 // src/codex-config.ts
 import { createHash } from "crypto";
 import { homedir } from "os";
 import { join } from "path";
 
-// src/removal-scope.ts
-var namesAppLocator = (command) => command.includes(HOOK_LOCATOR_BINARY);
-var isProtectedByScope = (command, scope) => scope?.keepAppWiring === true && namesAppLocator(command);
-
 // src/canonical-json.ts
 var canonicalJson = (value) => {
   if (value === null || typeof value !== "object") return JSON.stringify(value);

package/dist/{chunk-3SQYKLBW.js → chunk-PS7DQ2SU.js}

@@ -4,13 +4,13 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   resolveGlobalBinary
-} from "./chunk-X4ZUUFKV.js";
+} from "./chunk-L4ZCFMWW.js";
 import {
   getMachineId
-} from "./chunk-DKWM5T3P.js";
+} from "./chunk-5NDB3YOE.js";
 import {
   pusharyDir
-} from "./chunk-QA72MKIT.js";
+} from "./chunk-OVEGEQSB.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
@@ -19,7 +19,7 @@ import {
   writeFileAtomic,
   writeJsonAtomic,
   writeJsonAtomicDurable
-} from "./chunk-XX2V4QS5.js";
+} from "./chunk-4LL6LG5X.js";
 import {
   getApiKey
 } from "./chunk-2UMNXADU.js";
@@ -28,7 +28,7 @@ import {
 import { dirname, join, win32 as win32Path } from "path";
 import { existsSync, mkdirSync, readFileSync, realpathSync, renameSync, unlinkSync, writeFileSync } from "fs";
 import { createHash, randomUUID } from "crypto";
-import { homedir } from "os";
+import { homedir, userInfo } from "os";
 import { execFileSync } from "child_process";
 var daemonNeedsHandoff = (status) => status.kind === "version-mismatch" || status.kind === "configuration-mismatch" || status.kind === "unresponsive" && status.processAlive === true;
 var DAEMON_REMOTE_PROOF_MAX_AGE_MS = 18e4;
@@ -39,9 +39,14 @@ var remoteProofIsFresh = (timestamp, now) => {
   return Number.isFinite(age) && age >= -DAEMON_REMOTE_PROOF_CLOCK_SKEW_MS && age < DAEMON_REMOTE_PROOF_MAX_AGE_MS;
 };
 var daemonHasRemoteProof = (status, now = Date.now()) => status.kind === "running" && remoteProofIsFresh(status.lastSuccessfulHeartbeatAt, now) && remoteProofIsFresh(status.lastSuccessfulControlAt, now);
+var readServiceDefinitionFile = (path) => {
+  const bytes = readFileSync(path);
+  const encoding = bytes.length >= 2 && bytes[0] === 255 && bytes[1] === 254 ? "utf16le" : "utf-8";
+  return { contents: bytes.toString(encoding), encoding };
+};
 var runDaemonServiceCommand = (command, args) => execFileSync(command, [...args], {
   encoding: "utf-8",
-  stdio: ["ignore", "pipe", "ignore"],
+  stdio: ["ignore", "pipe", "pipe"],
   windowsHide: true
 });
 var commandFailureOutput = (error) => {
@@ -163,7 +168,6 @@ After=network-online.target
 [Service]
 Type=simple
 ExecStart=${systemdQuote(input.execPath)} ${systemdQuote(input.daemonEntry)}
-WorkingDirectory=${systemdQuote(input.homeDir)}
 Environment=${systemdQuote(`PATH=${input.pathEnv}`)}
 Restart=on-failure
 RestartSec=10
@@ -199,12 +203,18 @@ WantedBy=default.target
   }
   if (input.platform === "win32") {
     const taskName = "Pushary Daemon";
+    const username = process.env.USERNAME?.trim() || userInfo().username;
+    const domain = process.env.USERDOMAIN?.trim();
+    const userId = input.userId?.trim() || (domain ? `${domain}\\${username}` : username);
     const definitionPath = win32Path.join(input.stateDir, "pushary-daemon-task.xml");
-    const contents = `<?xml version="1.0" encoding="UTF-8"?>
+    const supervisorPath = win32Path.join(win32Path.dirname(input.daemonEntry), "pushary-daemon-supervisor.js");
+    const supervised = (input.entryExists ?? existsSync)(supervisorPath);
+    const args = supervised ? `&quot;${xml(supervisorPath)}&quot; &quot;${xml(input.daemonEntry)}&quot;` : `&quot;${xml(input.daemonEntry)}&quot;`;
+    const contents = `\uFEFF<?xml version="1.0" encoding="UTF-16"?>
 <Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
   <RegistrationInfo><Description>Pushary phone-to-agent daemon</Description></RegistrationInfo>
-  <Triggers><LogonTrigger><Enabled>true</Enabled></LogonTrigger></Triggers>
-  <Principals><Principal id="Author"><LogonType>InteractiveToken</LogonType><RunLevel>LeastPrivilege</RunLevel></Principal></Principals>
+  <Triggers><LogonTrigger><UserId>${xml(userId)}</UserId><Enabled>true</Enabled></LogonTrigger></Triggers>
+  <Principals><Principal id="Author"><UserId>${xml(userId)}</UserId><LogonType>InteractiveToken</LogonType><RunLevel>LeastPrivilege</RunLevel></Principal></Principals>
   <Settings>
     <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
     <StartWhenAvailable>true</StartWhenAvailable>
@@ -216,7 +226,7 @@ WantedBy=default.target
   <Actions Context="Author">
     <Exec>
       <Command>${xml(input.execPath)}</Command>
-      <Arguments>&quot;${xml(input.daemonEntry)}&quot;</Arguments>
+      <Arguments>${args}</Arguments>
       <WorkingDirectory>${xml(input.homeDir)}</WorkingDirectory>
     </Exec>
   </Actions>
@@ -225,6 +235,7 @@ WantedBy=default.target
     return {
       definitionPath,
       contents,
+      encoding: "utf16le",
       install: [
         { command: "schtasks.exe", args: ["/Create", "/TN", taskName, "/XML", definitionPath, "/F"] },
         { command: "schtasks.exe", args: ["/Run", "/TN", taskName] }
@@ -302,7 +313,8 @@ var resolveDaemonServiceDefinition = (options = {}) => {
     execPath: options.execPath ?? process.execPath,
     daemonEntry,
     pathEnv: options.pathEnv ?? process.env.PATH ?? "",
-    uid: options.uid ?? process.getuid?.()
+    uid: options.uid ?? process.getuid?.(),
+    entryExists: exists
   });
 };
 var runDaemonServiceSteps = (steps, run) => {
@@ -317,7 +329,9 @@ var runDaemonServiceSteps = (steps, run) => {
 var applyDaemonService = (action, definition, options = {}) => {
   const run = options.run ?? runDaemonServiceCommand;
   try {
-    if (action === "install") writeFileAtomic(definition.definitionPath, definition.contents, 384);
+    if (action === "install") {
+      writeFileAtomic(definition.definitionPath, definition.contents, 384, definition.encoding);
+    }
     const steps = action === "uninstall" ? [...definition.stop, ...definition.uninstall] : definition[action];
     runDaemonServiceSteps(steps, run);
     if (action === "uninstall") {
@@ -674,7 +688,7 @@ var disableDaemonService = async (options = {}) => deactivateDaemonService("unin
 var parseDaemonServiceTransaction = (value) => {
   if (typeof value !== "object" || value === null) return null;
   const transaction = value;
-  if (transaction.version !== 1 || transaction.phase !== "prepared" && transaction.phase !== "committed" || typeof transaction.definitionPath !== "string" || !(transaction.previousContents === null || typeof transaction.previousContents === "string") || typeof transaction.previousRegistered !== "boolean" || !(transaction.previousEnabled === void 0 || typeof transaction.previousEnabled === "boolean") || typeof transaction.previousRunning !== "boolean") return null;
+  if (transaction.version !== 1 || transaction.phase !== "prepared" && transaction.phase !== "committed" || typeof transaction.definitionPath !== "string" || !(transaction.previousContents === null || typeof transaction.previousContents === "string") || !(transaction.previousEncoding === void 0 || typeof transaction.previousEncoding === "string") || typeof transaction.previousRegistered !== "boolean" || !(transaction.previousEnabled === void 0 || typeof transaction.previousEnabled === "boolean") || typeof transaction.previousRunning !== "boolean") return null;
   return {
     ...transaction,
     previousEnabled: typeof transaction.previousEnabled === "boolean" ? transaction.previousEnabled : transaction.previousRegistered
@@ -723,12 +737,13 @@ var probeDaemonServiceState = (definition, run) => {
     return { kind: "ok", registered, enabled, running: false };
   }
 };
+var previousEncoding = (snapshot) => snapshot.previousEncoding ?? "utf-8";
 var restoreDaemonServiceSnapshot = (definition, snapshot, run) => {
   const removed = applyDaemonService("uninstall", definition, { run });
   if (removed.kind !== "ok") return removed;
   try {
     if (snapshot.previousContents === null) safeUnlink(definition.definitionPath);
-    else writeFileAtomic(definition.definitionPath, snapshot.previousContents, 384);
+    else writeFileAtomic(definition.definitionPath, snapshot.previousContents, 384, previousEncoding(snapshot));
   } catch (err) {
     return {
       kind: "failed",
@@ -767,7 +782,8 @@ var restoreDaemonServiceSnapshot = (definition, snapshot, run) => {
   }
   const restored = applyDaemonService("install", {
     ...definition,
-    contents: snapshot.previousContents
+    contents: snapshot.previousContents,
+    encoding: previousEncoding(snapshot)
   }, { run });
   if (restored.kind !== "ok") return restored;
   if (!snapshot.previousRunning) applyDaemonService("stop", definition, { run });
@@ -829,9 +845,12 @@ var replaceDaemonService = async (options = {}) => {
     return { kind: "failed", detail: `Could not recover interrupted service replacement: ${recovered.detail}` };
   }
   let previousContents = null;
+  let previousDefinitionEncoding = "utf-8";
   try {
     if (existsSync(definition.definitionPath)) {
-      previousContents = readFileSync(definition.definitionPath, "utf-8");
+      const previous = readServiceDefinitionFile(definition.definitionPath);
+      previousContents = previous.contents;
+      previousDefinitionEncoding = previous.encoding;
     }
   } catch (err) {
     return { kind: "failed", detail: `Could not snapshot the existing service: ${err instanceof Error ? err.message : String(err)}` };
@@ -846,6 +865,7 @@ var replaceDaemonService = async (options = {}) => {
     phase: "prepared",
     definitionPath: definition.definitionPath,
     previousContents,
+    previousEncoding: previousDefinitionEncoding,
     previousRegistered: previousState.registered,
     previousEnabled: previousState.enabled,
     previousRunning: previousState.running
@@ -869,7 +889,15 @@ var replaceDaemonService = async (options = {}) => {
   }
   let installed = applyDaemonService("install", definition, { run });
   if (installed.kind === "ok") {
-    const state = probeDaemonServiceState(definition, run);
+    const sleep = options.sleep ?? wait;
+    const pollIntervalMs = Math.max(1, options.pollIntervalMs ?? 50);
+    const now = options.now ?? Date.now;
+    const deadline = now() + Math.max(0, options.waitTimeoutMs ?? 5e3);
+    let state = probeDaemonServiceState(definition, run);
+    while (state.kind === "ok" && (!state.registered || !state.enabled || !state.running) && now() < deadline) {
+      await sleep(pollIntervalMs);
+      state = probeDaemonServiceState(definition, run);
+    }
     if (state.kind !== "ok") {
       installed = { kind: "failed", detail: state.detail };
     } else if (!state.registered || !state.enabled || !state.running) {

package/dist/{chunk-UDBJHQMG.js → chunk-QFJZHVVL.js}

@@ -1,6 +1,6 @@
 import {
   resolvePathBinary
-} from "./chunk-X4ZUUFKV.js";
+} from "./chunk-L4ZCFMWW.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/chunk-QZCFVWA7.js

@@ -0,0 +1,58 @@
+import {
+  getBaseUrl
+} from "./chunk-2UMNXADU.js";
+
+// src/transcript-api.ts
+var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {
+  try {
+    const res = await fetch(`${baseUrl}/api/agent/encryption-account`, {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: AbortSignal.timeout(5e3)
+    });
+    if (!res.ok) return null;
+    const data = await res.json();
+    if (typeof data.publicKey !== "string" || data.publicKey.length === 0) return null;
+    if (data.providerRecovery === void 0 || data.providerRecovery === null) {
+      return { phonePublicKey: data.publicKey, provider: null };
+    }
+    if (typeof data.providerRecovery !== "object") return null;
+    const provider = data.providerRecovery;
+    if (typeof provider.required !== "boolean" || typeof provider.keyId !== "string" || provider.keyId.length === 0 || typeof provider.publicKey !== "string" || provider.publicKey.length === 0) return null;
+    return {
+      phonePublicKey: data.publicKey,
+      provider: { required: provider.required, keyId: provider.keyId, publicKey: provider.publicKey }
+    };
+  } catch {
+    return null;
+  }
+};
+var fetchAccountPublicKey = async (apiKey, baseUrl = getBaseUrl()) => (await fetchTranscriptRecipients(apiKey, baseUrl))?.phonePublicKey ?? null;
+var uploadTranscriptRecords = async (apiKey, params, baseUrl = getBaseUrl()) => {
+  try {
+    const res = await fetch(`${baseUrl}/api/agent/transcript`, {
+      method: "POST",
+      headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
+      body: JSON.stringify(params),
+      signal: AbortSignal.timeout(15e3)
+    });
+    const body = await res.json().catch(() => null);
+    const keyRegistered = body?.keyRegistered === true;
+    const keyConflict = body?.keyConflict === true;
+    const ids = (value) => Array.isArray(value) ? value.filter((v) => typeof v === "string") : [];
+    return {
+      ok: res.ok && !keyConflict && (params.dataEncryptionKey === void 0 || keyRegistered),
+      keyRegistered,
+      keyConflict,
+      settledIds: Array.isArray(body?.settledIds) ? ids(body.settledIds) : null,
+      rejectedIds: ids(body?.rejectedIds)
+    };
+  } catch {
+    return { ok: false, keyRegistered: false, keyConflict: false, settledIds: null, rejectedIds: [] };
+  }
+};
+
+export {
+  fetchTranscriptRecipients,
+  fetchAccountPublicKey,
+  uploadTranscriptRecords
+};

package/dist/{chunk-3XTFX4CL.js → chunk-RLQWNEPM.js}

@@ -3,7 +3,7 @@ var COMMAND_LIST = [
   {
     name: "setup",
     module: "pushary-setup",
-    summary: "Configure Claude Code, Codex, Gemini CLI, Hermes, Cursor, or VS Code with Pushary"
+    summary: "Configure Claude Code, Codex, Gemini CLI, Hermes, Cursor, VS Code, or OpenCode with Pushary"
   },
   {
     name: "claude",
@@ -133,6 +133,7 @@ var SETUP_OPTIONS = [
   ["--connect web", "Legacy browser subscribe page"],
   ["--connect none", "Skip the phone connect step, same as --skip-phone"],
   ["--control auto|on|off", "Manage phone-start automatically (default), require it, or disable its background service"],
+  ["--transcripts on|off", "Enable or disable encrypted transcript sync on this machine"],
   ["--skip-phone", "Skip the phone connect step"],
   ["--verify roundtrip", "Send a real question and wait for you to answer it (default when a human is present)"],
   ["--verify push", "Only prove a notification was delivered. Automatic when nobody is at the terminal"],
@@ -140,7 +141,7 @@ var SETUP_OPTIONS = [
   ["--dry-run", "Print what would be written and change nothing"],
   ["--json", "Emit one machine-readable object instead of the human report"]
 ];
-var AGENT_IDS = "claude_code, codex, gemini_cli, hermes, cursor, custom";
+var AGENT_IDS = "claude_code, codex, gemini_cli, hermes, cursor, vscode, opencode, custom";
 var USAGE_EXAMPLES = [
   "npx @pushary/agent-hooks@latest setup",
   "npx @pushary/agent-hooks@latest setup --agents auto --yes --skip-phone",

package/dist/{chunk-3CUDMTL4.js → chunk-RNKPLUWC.js}

@@ -3,13 +3,13 @@ import {
 } from "./chunk-BC3VCZ3E.js";
 import {
   resolveInstallSourceFor
-} from "./chunk-IUWRVTQK.js";
+} from "./chunk-XREW7RQ3.js";
 import {
   backupFile,
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-XX2V4QS5.js";
+} from "./chunk-4LL6LG5X.js";
 import {
   configFilePath
 } from "./chunk-2UMNXADU.js";
@@ -125,7 +125,8 @@ var writeKey = (apiKey, options = {}) => {
       ...current,
       apiKey,
       installSource: resolveInstallSourceFor(current),
-      ...options.controlMode ? { controlMode: options.controlMode } : {}
+      ...options.controlMode ? { controlMode: options.controlMode } : {},
+      ...options.transcriptsEnabled === void 0 ? {} : { transcriptsEnabled: options.transcriptsEnabled }
     },
     KEY_FILE_MODE
   );
@@ -188,6 +189,11 @@ var readControlMode = () => {
   const value = result.value.controlMode;
   return value === "auto" || value === "on" || value === "off" ? value : null;
 };
+var readTranscriptPreference = () => {
+  const result = readJsonSafe(configFilePath());
+  if (result.kind !== "ok") return null;
+  return typeof result.value.transcriptsEnabled === "boolean" ? result.value.transcriptsEnabled : null;
+};
 var readKeySource = () => {
   const configPath = configFilePath();
   const envKey = process.env.PUSHARY_API_KEY?.trim() || null;
@@ -206,5 +212,6 @@ export {
   clearKey,
   readConfigFileKey,
   readControlMode,
+  readTranscriptPreference,
   readKeySource
 };

package/dist/{chunk-SYUIXXQW.js → chunk-VF3RTVWY.js}

@@ -1,6 +1,6 @@
 import {
   quoteIfNeeded
-} from "./chunk-X4ZUUFKV.js";
+} from "./chunk-L4ZCFMWW.js";
 
 // src/hook-command.ts
 var HOOK_SHELL = "/bin/sh -c";

package/dist/{chunk-TRVIRETT.js → chunk-VPLQFXCH.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-3CUDMTL4.js";
+} from "./chunk-RNKPLUWC.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-IUN6VOKV.js → chunk-WDVQ6O4C.js}

@@ -1,9 +1,6 @@
-import {
-  getBaseUrl
-} from "./chunk-2UMNXADU.js";
 import {
   redactSecrets
-} from "./chunk-X6RXX2NF.js";
+} from "./chunk-3MCEES6Z.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";
@@ -79,46 +76,9 @@ var buildTranscriptRecords = (lines, sessionKey, seen = /* @__PURE__ */ new Set(
   return { records, seen: nextSeen };
 };
 
-// src/transcript-api.ts
-var fetchAccountPublicKey = async (apiKey, baseUrl = getBaseUrl()) => {
-  try {
-    const res = await fetch(`${baseUrl}/api/agent/encryption-account`, {
-      headers: { Authorization: `Bearer ${apiKey}` },
-      signal: AbortSignal.timeout(5e3)
-    });
-    if (!res.ok) return null;
-    const data = await res.json();
-    return typeof data.publicKey === "string" && data.publicKey.length > 0 ? data.publicKey : null;
-  } catch {
-    return null;
-  }
-};
-var uploadTranscriptRecords = async (apiKey, params, baseUrl = getBaseUrl()) => {
-  try {
-    const res = await fetch(`${baseUrl}/api/agent/transcript`, {
-      method: "POST",
-      headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
-      body: JSON.stringify(params),
-      signal: AbortSignal.timeout(15e3)
-    });
-    const body = await res.json().catch(() => null);
-    const keyRegistered = body?.keyRegistered === true;
-    const keyConflict = body?.keyConflict === true;
-    return {
-      ok: res.ok && !keyConflict && (params.dataEncryptionKey === void 0 || keyRegistered),
-      keyRegistered,
-      keyConflict
-    };
-  } catch {
-    return { ok: false, keyRegistered: false, keyConflict: false };
-  }
-};
-
 export {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey,
-  buildTranscriptRecords,
-  fetchAccountPublicKey,
-  uploadTranscriptRecords
+  buildTranscriptRecords
 };

package/dist/{chunk-IUWRVTQK.js → chunk-XREW7RQ3.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-X6RXX2NF.js";
+} from "./chunk-3MCEES6Z.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";