@pushary/agent-hooks 0.89.11 → 0.89.13

package/dist/{chunk-3SQYKLBW.js → chunk-7JZCADBR.js}

@@ -4,13 +4,13 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   resolveGlobalBinary
-} from "./chunk-X4ZUUFKV.js";
+} from "./chunk-L4ZCFMWW.js";
 import {
   getMachineId
-} from "./chunk-DKWM5T3P.js";
+} from "./chunk-JTBDBKHU.js";
 import {
   pusharyDir
-} from "./chunk-QA72MKIT.js";
+} from "./chunk-3YGGEDJK.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
@@ -19,7 +19,7 @@ import {
   writeFileAtomic,
   writeJsonAtomic,
   writeJsonAtomicDurable
-} from "./chunk-XX2V4QS5.js";
+} from "./chunk-4LL6LG5X.js";
 import {
   getApiKey
 } from "./chunk-2UMNXADU.js";
@@ -28,7 +28,7 @@ import {
 import { dirname, join, win32 as win32Path } from "path";
 import { existsSync, mkdirSync, readFileSync, realpathSync, renameSync, unlinkSync, writeFileSync } from "fs";
 import { createHash, randomUUID } from "crypto";
-import { homedir } from "os";
+import { homedir, userInfo } from "os";
 import { execFileSync } from "child_process";
 var daemonNeedsHandoff = (status) => status.kind === "version-mismatch" || status.kind === "configuration-mismatch" || status.kind === "unresponsive" && status.processAlive === true;
 var DAEMON_REMOTE_PROOF_MAX_AGE_MS = 18e4;
@@ -39,9 +39,14 @@ var remoteProofIsFresh = (timestamp, now) => {
   return Number.isFinite(age) && age >= -DAEMON_REMOTE_PROOF_CLOCK_SKEW_MS && age < DAEMON_REMOTE_PROOF_MAX_AGE_MS;
 };
 var daemonHasRemoteProof = (status, now = Date.now()) => status.kind === "running" && remoteProofIsFresh(status.lastSuccessfulHeartbeatAt, now) && remoteProofIsFresh(status.lastSuccessfulControlAt, now);
+var readServiceDefinitionFile = (path) => {
+  const bytes = readFileSync(path);
+  const encoding = bytes.length >= 2 && bytes[0] === 255 && bytes[1] === 254 ? "utf16le" : "utf-8";
+  return { contents: bytes.toString(encoding), encoding };
+};
 var runDaemonServiceCommand = (command, args) => execFileSync(command, [...args], {
   encoding: "utf-8",
-  stdio: ["ignore", "pipe", "ignore"],
+  stdio: ["ignore", "pipe", "pipe"],
   windowsHide: true
 });
 var commandFailureOutput = (error) => {
@@ -163,7 +168,6 @@ After=network-online.target
 [Service]
 Type=simple
 ExecStart=${systemdQuote(input.execPath)} ${systemdQuote(input.daemonEntry)}
-WorkingDirectory=${systemdQuote(input.homeDir)}
 Environment=${systemdQuote(`PATH=${input.pathEnv}`)}
 Restart=on-failure
 RestartSec=10
@@ -199,12 +203,18 @@ WantedBy=default.target
   }
   if (input.platform === "win32") {
     const taskName = "Pushary Daemon";
+    const username = process.env.USERNAME?.trim() || userInfo().username;
+    const domain = process.env.USERDOMAIN?.trim();
+    const userId = input.userId?.trim() || (domain ? `${domain}\\${username}` : username);
     const definitionPath = win32Path.join(input.stateDir, "pushary-daemon-task.xml");
-    const contents = `<?xml version="1.0" encoding="UTF-8"?>
+    const supervisorPath = win32Path.join(win32Path.dirname(input.daemonEntry), "pushary-daemon-supervisor.js");
+    const supervised = (input.entryExists ?? existsSync)(supervisorPath);
+    const args = supervised ? `&quot;${xml(supervisorPath)}&quot; &quot;${xml(input.daemonEntry)}&quot;` : `&quot;${xml(input.daemonEntry)}&quot;`;
+    const contents = `\uFEFF<?xml version="1.0" encoding="UTF-16"?>
 <Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
   <RegistrationInfo><Description>Pushary phone-to-agent daemon</Description></RegistrationInfo>
-  <Triggers><LogonTrigger><Enabled>true</Enabled></LogonTrigger></Triggers>
-  <Principals><Principal id="Author"><LogonType>InteractiveToken</LogonType><RunLevel>LeastPrivilege</RunLevel></Principal></Principals>
+  <Triggers><LogonTrigger><UserId>${xml(userId)}</UserId><Enabled>true</Enabled></LogonTrigger></Triggers>
+  <Principals><Principal id="Author"><UserId>${xml(userId)}</UserId><LogonType>InteractiveToken</LogonType><RunLevel>LeastPrivilege</RunLevel></Principal></Principals>
   <Settings>
     <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
     <StartWhenAvailable>true</StartWhenAvailable>
@@ -216,7 +226,7 @@ WantedBy=default.target
   <Actions Context="Author">
     <Exec>
       <Command>${xml(input.execPath)}</Command>
-      <Arguments>&quot;${xml(input.daemonEntry)}&quot;</Arguments>
+      <Arguments>${args}</Arguments>
       <WorkingDirectory>${xml(input.homeDir)}</WorkingDirectory>
     </Exec>
   </Actions>
@@ -225,6 +235,7 @@ WantedBy=default.target
     return {
       definitionPath,
       contents,
+      encoding: "utf16le",
       install: [
         { command: "schtasks.exe", args: ["/Create", "/TN", taskName, "/XML", definitionPath, "/F"] },
         { command: "schtasks.exe", args: ["/Run", "/TN", taskName] }
@@ -302,7 +313,8 @@ var resolveDaemonServiceDefinition = (options = {}) => {
     execPath: options.execPath ?? process.execPath,
     daemonEntry,
     pathEnv: options.pathEnv ?? process.env.PATH ?? "",
-    uid: options.uid ?? process.getuid?.()
+    uid: options.uid ?? process.getuid?.(),
+    entryExists: exists
   });
 };
 var runDaemonServiceSteps = (steps, run) => {
@@ -317,7 +329,9 @@ var runDaemonServiceSteps = (steps, run) => {
 var applyDaemonService = (action, definition, options = {}) => {
   const run = options.run ?? runDaemonServiceCommand;
   try {
-    if (action === "install") writeFileAtomic(definition.definitionPath, definition.contents, 384);
+    if (action === "install") {
+      writeFileAtomic(definition.definitionPath, definition.contents, 384, definition.encoding);
+    }
     const steps = action === "uninstall" ? [...definition.stop, ...definition.uninstall] : definition[action];
     runDaemonServiceSteps(steps, run);
     if (action === "uninstall") {
@@ -674,7 +688,7 @@ var disableDaemonService = async (options = {}) => deactivateDaemonService("unin
 var parseDaemonServiceTransaction = (value) => {
   if (typeof value !== "object" || value === null) return null;
   const transaction = value;
-  if (transaction.version !== 1 || transaction.phase !== "prepared" && transaction.phase !== "committed" || typeof transaction.definitionPath !== "string" || !(transaction.previousContents === null || typeof transaction.previousContents === "string") || typeof transaction.previousRegistered !== "boolean" || !(transaction.previousEnabled === void 0 || typeof transaction.previousEnabled === "boolean") || typeof transaction.previousRunning !== "boolean") return null;
+  if (transaction.version !== 1 || transaction.phase !== "prepared" && transaction.phase !== "committed" || typeof transaction.definitionPath !== "string" || !(transaction.previousContents === null || typeof transaction.previousContents === "string") || !(transaction.previousEncoding === void 0 || typeof transaction.previousEncoding === "string") || typeof transaction.previousRegistered !== "boolean" || !(transaction.previousEnabled === void 0 || typeof transaction.previousEnabled === "boolean") || typeof transaction.previousRunning !== "boolean") return null;
   return {
     ...transaction,
     previousEnabled: typeof transaction.previousEnabled === "boolean" ? transaction.previousEnabled : transaction.previousRegistered
@@ -723,12 +737,13 @@ var probeDaemonServiceState = (definition, run) => {
     return { kind: "ok", registered, enabled, running: false };
   }
 };
+var previousEncoding = (snapshot) => snapshot.previousEncoding ?? "utf-8";
 var restoreDaemonServiceSnapshot = (definition, snapshot, run) => {
   const removed = applyDaemonService("uninstall", definition, { run });
   if (removed.kind !== "ok") return removed;
   try {
     if (snapshot.previousContents === null) safeUnlink(definition.definitionPath);
-    else writeFileAtomic(definition.definitionPath, snapshot.previousContents, 384);
+    else writeFileAtomic(definition.definitionPath, snapshot.previousContents, 384, previousEncoding(snapshot));
   } catch (err) {
     return {
       kind: "failed",
@@ -767,7 +782,8 @@ var restoreDaemonServiceSnapshot = (definition, snapshot, run) => {
   }
   const restored = applyDaemonService("install", {
     ...definition,
-    contents: snapshot.previousContents
+    contents: snapshot.previousContents,
+    encoding: previousEncoding(snapshot)
   }, { run });
   if (restored.kind !== "ok") return restored;
   if (!snapshot.previousRunning) applyDaemonService("stop", definition, { run });
@@ -829,9 +845,12 @@ var replaceDaemonService = async (options = {}) => {
     return { kind: "failed", detail: `Could not recover interrupted service replacement: ${recovered.detail}` };
   }
   let previousContents = null;
+  let previousDefinitionEncoding = "utf-8";
   try {
     if (existsSync(definition.definitionPath)) {
-      previousContents = readFileSync(definition.definitionPath, "utf-8");
+      const previous = readServiceDefinitionFile(definition.definitionPath);
+      previousContents = previous.contents;
+      previousDefinitionEncoding = previous.encoding;
     }
   } catch (err) {
     return { kind: "failed", detail: `Could not snapshot the existing service: ${err instanceof Error ? err.message : String(err)}` };
@@ -846,6 +865,7 @@ var replaceDaemonService = async (options = {}) => {
     phase: "prepared",
     definitionPath: definition.definitionPath,
     previousContents,
+    previousEncoding: previousDefinitionEncoding,
     previousRegistered: previousState.registered,
     previousEnabled: previousState.enabled,
     previousRunning: previousState.running
@@ -869,7 +889,15 @@ var replaceDaemonService = async (options = {}) => {
   }
   let installed = applyDaemonService("install", definition, { run });
   if (installed.kind === "ok") {
-    const state = probeDaemonServiceState(definition, run);
+    const sleep = options.sleep ?? wait;
+    const pollIntervalMs = Math.max(1, options.pollIntervalMs ?? 50);
+    const now = options.now ?? Date.now;
+    const deadline = now() + Math.max(0, options.waitTimeoutMs ?? 5e3);
+    let state = probeDaemonServiceState(definition, run);
+    while (state.kind === "ok" && (!state.registered || !state.enabled || !state.running) && now() < deadline) {
+      await sleep(pollIntervalMs);
+      state = probeDaemonServiceState(definition, run);
+    }
     if (state.kind !== "ok") {
       installed = { kind: "failed", detail: state.detail };
     } else if (!state.registered || !state.enabled || !state.running) {

package/dist/{chunk-IUWRVTQK.js → chunk-ANMHIZZY.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-X6RXX2NF.js";
+} from "./chunk-QINYXLA5.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-6EKQZA6R.js → chunk-B2HND22S.js}

@@ -1,6 +1,6 @@
 import {
   ASKED_IN_EVERY_MODE_TOOLS
-} from "./chunk-X6RXX2NF.js";
+} from "./chunk-QINYXLA5.js";
 
 // src/claude-tools.ts
 var PRETOOLUSE_GATED_TOOLS = [

package/dist/{chunk-TRVIRETT.js → chunk-C56VHSXU.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-3CUDMTL4.js";
+} from "./chunk-NBDU3R3G.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-TEZ2FZD6.js → chunk-CBGGUEKE.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-QA72MKIT.js";
+} from "./chunk-3YGGEDJK.js";
 import {
   readJsonSafe
-} from "./chunk-XX2V4QS5.js";
+} from "./chunk-4LL6LG5X.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-3HFK3UXM.js → chunk-FOGW6O2Y.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-X6RXX2NF.js";
+} from "./chunk-QINYXLA5.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-3XTFX4CL.js → chunk-GMJDQDXU.js}

@@ -3,7 +3,7 @@ var COMMAND_LIST = [
   {
     name: "setup",
     module: "pushary-setup",
-    summary: "Configure Claude Code, Codex, Gemini CLI, Hermes, Cursor, or VS Code with Pushary"
+    summary: "Configure Claude Code, Codex, Gemini CLI, Hermes, Cursor, VS Code, or OpenCode with Pushary"
   },
   {
     name: "claude",
@@ -69,6 +69,16 @@ var COMMAND_LIST = [
     name: "hook",
     module: "pushary-hook",
     summary: "Run as a PreToolUse hook (reads stdin, writes stdout)"
+  },
+  {
+    name: "transcripts",
+    module: "pushary-transcripts",
+    summary: "Show or re-trust the keys this machine seals transcripts to",
+    detail: [
+      "Sync stops if the phone key or the compliance recovery key changes, because a",
+      "change is either your reinstall or a server handing itself a copy. Compare the",
+      "fingerprint with the app under Settings, then accept it with --rotate."
+    ]
   }
 ];
 var COMMANDS = COMMAND_LIST;
@@ -79,6 +89,10 @@ var COMMAND_OPTIONS = {
     ["--dry-run", "List everything it would remove and change nothing"],
     ["--yes", "Remove everything without asking"]
   ],
+  transcripts: [
+    ["status", "Show the pinned keys and their fingerprints (default)"],
+    ["trust --rotate", "Accept the keys the server is offering now and resume syncing"]
+  ],
   mode: [
     ["<mode>", "One of: push_only, push_first, terminal_only, notify_only"],
     ["status", "Show the current override"],
@@ -133,6 +147,7 @@ var SETUP_OPTIONS = [
   ["--connect web", "Legacy browser subscribe page"],
   ["--connect none", "Skip the phone connect step, same as --skip-phone"],
   ["--control auto|on|off", "Manage phone-start automatically (default), require it, or disable its background service"],
+  ["--transcripts on|off", "Enable or disable encrypted transcript sync on this machine"],
   ["--skip-phone", "Skip the phone connect step"],
   ["--verify roundtrip", "Send a real question and wait for you to answer it (default when a human is present)"],
   ["--verify push", "Only prove a notification was delivered. Automatic when nobody is at the terminal"],
@@ -140,7 +155,7 @@ var SETUP_OPTIONS = [
   ["--dry-run", "Print what would be written and change nothing"],
   ["--json", "Emit one machine-readable object instead of the human report"]
 ];
-var AGENT_IDS = "claude_code, codex, gemini_cli, hermes, cursor, custom";
+var AGENT_IDS = "claude_code, codex, gemini_cli, hermes, cursor, vscode, opencode, custom";
 var USAGE_EXAMPLES = [
   "npx @pushary/agent-hooks@latest setup",
   "npx @pushary/agent-hooks@latest setup --agents auto --yes --skip-phone",

package/dist/{chunk-DKWM5T3P.js → chunk-JTBDBKHU.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-QA72MKIT.js";
+} from "./chunk-3YGGEDJK.js";
 import {
   writeFileAtomic
-} from "./chunk-XX2V4QS5.js";
+} from "./chunk-4LL6LG5X.js";
 
 // src/identity.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-Q223OM5J.js → chunk-JVLB5CAJ.js}

@@ -1,17 +1,17 @@
 import {
   PRETOOLUSE_GATED_TOOLS,
   PRETOOLUSE_PHONE_ANSWERED_TOOLS
-} from "./chunk-6EKQZA6R.js";
+} from "./chunk-B2HND22S.js";
 import {
   guardBinary
-} from "./chunk-SYUIXXQW.js";
+} from "./chunk-VF3RTVWY.js";
 import {
   isProtectedByScope
-} from "./chunk-QA72MKIT.js";
+} from "./chunk-3YGGEDJK.js";
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-X6RXX2NF.js";
+} from "./chunk-QINYXLA5.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-2LPEZYMC.js → chunk-KNLKHJZR.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-BSZYIAZL.js";
 import {
   reportedInstallSource
-} from "./chunk-IUWRVTQK.js";
+} from "./chunk-ANMHIZZY.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-X4ZUUFKV.js → chunk-L4ZCFMWW.js}

@@ -1,7 +1,7 @@
 // src/npm.ts
 import { execFileSync, execSync } from "child_process";
 import { existsSync, readFileSync, realpathSync } from "fs";
-import { dirname, join } from "path";
+import { dirname, isAbsolute, join, relative, resolve } from "path";
 var cleanNpmEnv = () => {
   const env = {};
   for (const [key, value] of Object.entries(process.env)) {
@@ -77,12 +77,67 @@ var resolveGlobalPackageVersion = (name) => {
     return void 0;
   }
 };
+var localImportsPresent = (entry, packageDir, seen = /* @__PURE__ */ new Set()) => {
+  if (seen.has(entry)) return true;
+  seen.add(entry);
+  try {
+    const source = readFileSync(entry, "utf8");
+    for (const match of source.matchAll(/\b(?:import|export)\s+(?:[^"'()]*?\s+from\s+)?["'](\.{1,2}\/[^"']+)["']|\bimport\s*\(\s*["'](\.{1,2}\/[^"']+)["']/g)) {
+      const dependency = resolve(dirname(entry), match[1] ?? match[2]);
+      const localPath = relative(packageDir, dependency);
+      if (localPath.startsWith("..") || isAbsolute(localPath) || !existsSync(dependency)) return false;
+      if (/\.[cm]?js$/.test(dependency) && !localImportsPresent(dependency, packageDir, seen)) return false;
+    }
+    return true;
+  } catch {
+    return false;
+  }
+};
+var packageBinsPresent = (packageDir, prefix, platform = process.platform, requiredFiles = []) => {
+  try {
+    const manifest = JSON.parse(readFileSync(join(packageDir, "package.json"), "utf8"));
+    if (!manifest.bin || typeof manifest.bin !== "object" || Array.isArray(manifest.bin)) return false;
+    const bins = Object.entries(manifest.bin);
+    if (bins.length === 0) return false;
+    if (!requiredFiles.every((path) => existsSync(join(packageDir, path)))) return false;
+    const seen = /* @__PURE__ */ new Set();
+    return bins.every(([name, target]) => {
+      if (typeof target !== "string") return false;
+      const shims = platform === "win32" ? [join(prefix, `${name}.cmd`), join(prefix, name)] : [join(prefix, "bin", name)];
+      const entry = join(packageDir, target);
+      return existsSync(entry) && shims.some(existsSync) && localImportsPresent(entry, packageDir, seen);
+    });
+  } catch {
+    return false;
+  }
+};
+var AGENT_HOOKS_RUNTIME_FILES = [
+  "data/SKILL.md",
+  "data/cursor-plugin/.cursor-plugin/plugin.json",
+  "data/cursor-plugin/hooks/hooks.json",
+  "data/cursor-plugin/mcp.json",
+  "data/cursor-plugin/scripts/pushary-gate.mjs",
+  "data/vscode-plugin/.claude-plugin/plugin.json",
+  "data/vscode-plugin/hooks/hooks.json",
+  "data/vscode-plugin/.mcp.json",
+  "data/vscode-plugin/scripts/pushary-gate.mjs"
+];
+var globalPackageBinsPresent = (name) => {
+  try {
+    const root = execNpm("root -g --no-workspaces", { timeout: 5e3 }).toString().trim();
+    const prefix = execNpm("prefix -g --no-workspaces", { timeout: 5e3 }).toString().trim();
+    return packageBinsPresent(join(root, ...name.split("/")), prefix, process.platform, AGENT_HOOKS_RUNTIME_FILES);
+  } catch {
+    return false;
+  }
+};
 var resolveGlobalBinDir = (probe) => {
   if (process.platform === "win32") return void 0;
   const resolved = resolveGlobalBinary(probe);
   return resolved ? resolved.slice(0, resolved.length - probe.length - 1) : void 0;
 };
 var quoteIfNeeded = (path) => /\s/.test(path) ? `"${path}"` : path;
+var needsGlobalInstall = (requested, installed, binaryPresent) => requested !== installed || !binaryPresent;
 var installState;
 var installGlobally = (options) => {
   if (installState) {
@@ -90,6 +145,13 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     const pinned = process.env.PUSHARY_PIN_GLOBAL_VERSION !== "0";
+    if (pinned && !needsGlobalInstall(
+      options.version,
+      resolveGlobalPackageVersion("@pushary/agent-hooks"),
+      globalPackageBinsPresent("@pushary/agent-hooks")
+    )) {
+      return "skipped";
+    }
     const spec = pinned && options.version && options.version !== "0.0.0" ? `@pushary/agent-hooks@${options.version}` : "@pushary/agent-hooks@latest";
     execNpm(`install -g --no-workspaces ${spec}`, { timeout: options.timeoutMs ?? 12e4 });
     return "installed";

package/dist/chunk-M3UABYRT.js

@@ -0,0 +1,20 @@
+import {
+  readTranscriptPreference
+} from "./chunk-NBDU3R3G.js";
+
+// src/transcript-setting.ts
+var fromEnv = () => {
+  const value = process.env.PUSHARY_TRANSCRIPTS?.trim().toLowerCase();
+  if (!value) return null;
+  if (["0", "false", "off"].includes(value)) return false;
+  if (["1", "true", "on"].includes(value)) return true;
+  return null;
+};
+var configuredPreference = () => fromEnv() ?? readTranscriptPreference();
+var transcriptsEnabled = () => configuredPreference() ?? false;
+var transcriptPreferenceForSetup = (explicit = null) => explicit ?? configuredPreference() ?? true;
+
+export {
+  transcriptsEnabled,
+  transcriptPreferenceForSetup
+};

package/dist/{chunk-PZRWFWSR.js → chunk-MNTZKFZI.js}

@@ -1,11 +1,11 @@
 import {
   detectClaudeVersion
-} from "./chunk-KVE5RCQL.js";
+} from "./chunk-5YEF55AX.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "./chunk-FZ73G2RO.js";
+} from "./chunk-MSTHT2M7.js";
 import {
   GEMINI_HOOK_BINARY,
   addClaudeMcpServer,
@@ -14,14 +14,14 @@ import {
   addPusharyHooks,
   addPusharyToolPermissions,
   hasGeminiHooks
-} from "./chunk-Q223OM5J.js";
+} from "./chunk-JVLB5CAJ.js";
 import {
   guardBinary
-} from "./chunk-SYUIXXQW.js";
+} from "./chunk-VF3RTVWY.js";
 import {
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "./chunk-X4ZUUFKV.js";
+} from "./chunk-L4ZCFMWW.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -32,10 +32,10 @@ import {
   codexHooksJson,
   hasCodexHooks,
   vscodePluginMcp
-} from "./chunk-QA72MKIT.js";
+} from "./chunk-3YGGEDJK.js";
 import {
   readJsonSafe
-} from "./chunk-XX2V4QS5.js";
+} from "./chunk-4LL6LG5X.js";
 
 // src/reapply.ts
 import { join, dirname } from "path";

package/dist/{chunk-FZ73G2RO.js → chunk-MSTHT2M7.js}

@@ -1,22 +1,22 @@
 import {
   hasGeminiHooks
-} from "./chunk-Q223OM5J.js";
+} from "./chunk-JVLB5CAJ.js";
 import {
   hasCodexHooks
-} from "./chunk-QA72MKIT.js";
+} from "./chunk-3YGGEDJK.js";
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-X6RXX2NF.js";
+} from "./chunk-QINYXLA5.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
 var CLAUDE_HOOK_BINARY = /pushary-[a-z-]*hook/;
-var EXACT_HOOK_BINARY = /^pushary-[a-z-]*hook$/;
+var EXACT_HOOK_BINARY = /^pushary-[a-z-]*(hook|gate)$/;
 var pusharyHookExecutable = (command) => {
   const tokens = command.match(/"[^"]*"|'[^']*'|\S+/g) ?? [];
   for (const raw of tokens.reverse()) {
     const token = raw[0] === '"' && raw.at(-1) === '"' || raw[0] === "'" && raw.at(-1) === "'" ? raw.slice(1, -1) : raw;
-    const name = token.split(/[/\\]/).pop()?.replace(/\.(cmd|exe)$/i, "") ?? "";
+    const name = token.split(/[/\\]/).pop()?.replace(/\.(cmd|exe|mjs)$/i, "") ?? "";
     if (name === HOOK_LOCATOR_BINARY || EXACT_HOOK_BINARY.test(name)) return token;
   }
   return null;
@@ -44,10 +44,29 @@ var geminiWired = ({ settings }) => {
   if (record(s.mcpServers)?.pushary) return true;
   return hasGeminiHooks(s);
 };
+var cursorWired = ({ userHooks, mcp, pluginDirExists }) => {
+  if (pluginDirExists) return true;
+  if (record(record(mcp)?.mcpServers)?.pushary) return true;
+  const hooks = record(record(userHooks)?.hooks);
+  if (!hooks) return false;
+  return Object.values(hooks).some((entries) => Array.isArray(entries) && entries.some((entry) => pusharyHookExecutable(String(record(entry)?.command ?? "")) !== null));
+};
+var cursorMcpAuthorization = (pluginMcp, userMcp) => {
+  const pluginServers = record(record(pluginMcp)?.mcpServers);
+  const usePlugin = pluginServers !== null && Object.hasOwn(pluginServers, "pushary");
+  const servers = usePlugin ? pluginServers : record(record(userMcp)?.mcpServers);
+  const headers = record(record(servers?.pushary)?.headers);
+  return {
+    authorization: typeof headers?.Authorization === "string" ? headers.Authorization : null,
+    source: usePlugin ? "plugin mcp.json" : "~/.cursor/mcp.json"
+  };
+};
 
 export {
   pusharyHookExecutable,
   claudeWired,
   codexWired,
-  geminiWired
+  geminiWired,
+  cursorWired,
+  cursorMcpAuthorization
 };

package/dist/{chunk-TG3T3M4K.js → chunk-N4QJ3CLX.js}

@@ -5,7 +5,7 @@ import {
   FILE_TARGET_TOOLS,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-X6RXX2NF.js";
+} from "./chunk-QINYXLA5.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";
@@ -46,10 +46,13 @@ var eventPrefixes = {
 };
 var EVENT_ACTION_MAX = 120;
 var HOOK_FALLBACK_MAX = 200;
+var UNNAMED_ACTION = "this request";
 var describeToolCall = (toolName, toolInput, format = "hook") => {
+  if (!toolName) return "";
   const prefixes = format === "hook" ? hookPrefixes : eventPrefixes;
   const builder = prefixes[toolName];
-  const raw = builder ? builder(toolInput) : format === "hook" ? `${toolName}: ${JSON.stringify(toolInput)}` : `${toolName}: done`;
+  const detail = JSON.stringify(toolInput ?? {});
+  const raw = builder ? builder(toolInput) : format === "hook" ? detail === "{}" || detail === void 0 ? toolName : `${toolName}: ${detail}` : `${toolName}: done`;
   const redacted = redactSecrets(raw);
   if (format === "event") return redacted.slice(0, EVENT_ACTION_MAX);
   return builder ? redacted : redacted.slice(0, HOOK_FALLBACK_MAX);
@@ -269,6 +272,7 @@ var taskTitleFrom = (prompt) => typeof prompt === "string" ? prompt.replace(/\s+
 
 export {
   HOOK_FALLBACK_MAX,
+  UNNAMED_ACTION,
   describeToolCall,
   deriveToolTarget,
   parseApplyPatchOps,

package/dist/{chunk-3CUDMTL4.js → chunk-NBDU3R3G.js}

@@ -3,13 +3,13 @@ import {
 } from "./chunk-BC3VCZ3E.js";
 import {
   resolveInstallSourceFor
-} from "./chunk-IUWRVTQK.js";
+} from "./chunk-ANMHIZZY.js";
 import {
   backupFile,
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-XX2V4QS5.js";
+} from "./chunk-4LL6LG5X.js";
 import {
   configFilePath
 } from "./chunk-2UMNXADU.js";
@@ -125,7 +125,8 @@ var writeKey = (apiKey, options = {}) => {
       ...current,
       apiKey,
       installSource: resolveInstallSourceFor(current),
-      ...options.controlMode ? { controlMode: options.controlMode } : {}
+      ...options.controlMode ? { controlMode: options.controlMode } : {},
+      ...options.transcriptsEnabled === void 0 ? {} : { transcriptsEnabled: options.transcriptsEnabled }
     },
     KEY_FILE_MODE
   );
@@ -188,6 +189,11 @@ var readControlMode = () => {
   const value = result.value.controlMode;
   return value === "auto" || value === "on" || value === "off" ? value : null;
 };
+var readTranscriptPreference = () => {
+  const result = readJsonSafe(configFilePath());
+  if (result.kind !== "ok") return null;
+  return typeof result.value.transcriptsEnabled === "boolean" ? result.value.transcriptsEnabled : null;
+};
 var readKeySource = () => {
   const configPath = configFilePath();
   const envKey = process.env.PUSHARY_API_KEY?.trim() || null;
@@ -206,5 +212,6 @@ export {
   clearKey,
   readConfigFileKey,
   readControlMode,
+  readTranscriptPreference,
   readKeySource
 };

package/dist/{chunk-FXIL7RCL.js → chunk-OX35BSPV.js}

@@ -26,16 +26,16 @@ import {
   summarizeStop,
   taskTitleFrom,
   toolResultErrorText
-} from "./chunk-TG3T3M4K.js";
+} from "./chunk-N4QJ3CLX.js";
 import {
   getMachineId
-} from "./chunk-DKWM5T3P.js";
+} from "./chunk-JTBDBKHU.js";
 import {
   withRetry
 } from "./chunk-BSZYIAZL.js";
 import {
   reportedInstallSource
-} from "./chunk-IUWRVTQK.js";
+} from "./chunk-ANMHIZZY.js";
 import {
   getApiKey,
   getBaseUrl
@@ -51,7 +51,7 @@ import {
   pendingCommandEvents,
   resolveAutoResolveOrigin,
   resolvePolicy
-} from "./chunk-X6RXX2NF.js";
+} from "./chunk-QINYXLA5.js";
 
 // src/policy.ts
 import { createHash } from "crypto";