@pushary/agent-hooks 0.89.12 → 0.90.0

package/dist/{chunk-3MCEES6Z.js → chunk-VNMKIJZB.js}

@@ -91,7 +91,7 @@ var INSTALL_SOURCES = [
 var isInstallSource = (value) => typeof value === "string" && INSTALL_SOURCES.includes(value);
 var normalizeInstallSource = (value) => isInstallSource(value) ? value : "unknown";
 var HOOK_BUDGETS = {
-  claude: { budgetSeconds: 120, guardSeconds: 10 },
+  claude: { budgetSeconds: 600, guardSeconds: 10 },
   codex: { budgetSeconds: 180, guardSeconds: 10 },
   gemini: { budgetSeconds: 180, guardSeconds: 10 },
   // The Cursor gate is a dependency-free .mjs that cannot import this module; it
@@ -1054,6 +1054,8 @@ var resolvePolicyAcross = (config, toolName, modeOverride, toolInputs, cwd, repo
 };
 var isModeStateDegraded = (state) => state?.degraded === true;
 var KILL_REASON = "Stopped by user, this agent was halted from Pushary";
+var PUSHARY_TOOL_PREFIX = "mcp__pushary__";
+var isPusharyOwnTool = (toolName) => toolName.startsWith(PUSHARY_TOOL_PREFIX);
 var strictestScopeVerdict = (scope, paths) => {
   if (paths.length === 0) return evaluateScope(scope, void 0);
   let worst = { outcome: "in_scope" };
@@ -1085,6 +1087,13 @@ var ASKED_IN_EVERY_MODE = new Set(ASKED_IN_EVERY_MODE_TOOLS);
 var isAskedInEveryMode = (toolName) => ASKED_IN_EVERY_MODE.has(toolName);
 var resolveGate = (input) => {
   const { modeState, config, toolName, toolInputs, cwd, repoKey, sessionId } = input;
+  if (isPusharyOwnTool(toolName)) {
+    return {
+      kind: "defer",
+      policy: resolvePolicyAcross(config, toolName, modeState.mode, toolInputs, cwd, repoKey, sessionId),
+      reason: "own_tool"
+    };
+  }
   if (modeState.kill) return { kind: "kill", reason: KILL_REASON };
   const policy = resolvePolicyAcross(config, toolName, modeState.mode, toolInputs, cwd, repoKey, sessionId);
   const verdict = verdictForPolicy(policy);
@@ -1128,9 +1137,11 @@ var modeStateFromResponse = (data) => {
     // Validated rather than cast: a malformed contract must read as no contract,
     // never as one that silently matches nothing.
     scope: isScopeContract(data.scope) ? data.scope : null,
-    degraded: false
+    degraded: false,
+    askHandoff: data.askHandoff === true
   };
 };
+var stoppedOutput = (output, stopReason) => ({ ...output, continue: false, stopReason });
 var claudePreToolUseOutput = (decision, reason, updatedInput) => ({
   hookSpecificOutput: {
     hookEventName: "PreToolUse",
@@ -1362,10 +1373,12 @@ export {
   resolveAutoResolveOrigin,
   resolvePolicy,
   KILL_REASON,
+  isPusharyOwnTool,
   shouldDeferToNativeMode,
   ASKED_IN_EVERY_MODE_TOOLS,
   resolveGate,
   modeStateFromResponse,
+  stoppedOutput,
   claudePreToolUseOutput,
   PENDING_COMMAND_PREFIX,
   pendingCommandEvents,

package/dist/{chunk-6GU55AQQ.js → chunk-Y6BWPERV.js}

@@ -1,22 +1,23 @@
 import {
   pusharyDir
-} from "./chunk-OVEGEQSB.js";
+} from "./chunk-KUZWXPUS.js";
 import {
   readJsonSafe
 } from "./chunk-4LL6LG5X.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";
-import { mkdirSync, readdirSync, unlinkSync, writeFileSync } from "fs";
+import { mkdirSync, readdirSync, statSync, unlinkSync, writeFileSync } from "fs";
 import { createConnection, createServer } from "net";
 import { join } from "path";
 var MAX_PROOF_BYTES = 1024;
 var ownershipDir = (options) => options.dir ?? join(pusharyDir(), "processes");
 var proofPath = (dir, sessionId) => join(dir, `${createHash("sha256").update(sessionId).digest("hex")}.json`);
+var isOptionalTimestamp = (value) => value === void 0 || typeof value === "string" && Number.isFinite(Date.parse(value));
 var isProof = (value) => {
   if (!value || typeof value !== "object") return false;
   const proof = value;
-  return typeof proof.sessionId === "string" && Number.isInteger(proof.pid) && proof.pid > 1 && Number.isInteger(proof.port) && proof.port > 0 && proof.port <= 65535 && typeof proof.token === "string" && proof.token.length > 0 && (proof.spawnId === void 0 || typeof proof.spawnId === "string");
+  return typeof proof.sessionId === "string" && Number.isInteger(proof.pid) && proof.pid > 1 && Number.isInteger(proof.port) && proof.port > 0 && proof.port <= 65535 && typeof proof.token === "string" && proof.token.length > 0 && (proof.spawnId === void 0 || typeof proof.spawnId === "string") && isOptionalTimestamp(proof.startedAt) && isOptionalTimestamp(proof.heartbeatAt);
 };
 var removeProof = (path, token) => {
   const current = readJsonSafe(path);
@@ -34,16 +35,74 @@ var processIsAlive = (pid) => {
     return error.code === "EPERM";
   }
 };
-var pruneProofs = (dir) => {
+var fileTimes = (path) => {
+  try {
+    const stat = statSync(path);
+    return { createdAt: stat.birthtimeMs || stat.mtimeMs, modifiedAt: stat.mtimeMs };
+  } catch {
+    return { createdAt: 0, modifiedAt: 0 };
+  }
+};
+var parseTimestamp = (value) => {
+  if (value === void 0) return null;
+  const parsed = Date.parse(value);
+  return Number.isFinite(parsed) ? parsed : null;
+};
+var proofEntry = (proof, path) => {
+  const times = fileTimes(path);
+  const recordedStart = parseTimestamp(proof.startedAt);
+  const startedAt = recordedStart ?? times.createdAt;
+  return {
+    sessionId: proof.sessionId,
+    pid: proof.pid,
+    spawnId: proof.spawnId ?? null,
+    startedAt,
+    lastSeenAt: parseTimestamp(proof.heartbeatAt) ?? recordedStart ?? times.modifiedAt,
+    alive: processIsAlive(proof.pid)
+  };
+};
+var safeUnlink = (path) => {
+  try {
+    unlinkSync(path);
+  } catch {
+  }
+};
+var listProcessProofs = (options = {}) => {
+  const dir = ownershipDir(options);
+  const entries = [];
   try {
     for (const entry of readdirSync(dir, { withFileTypes: true })) {
       if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
       const path = join(dir, entry.name);
       const stored = readJsonSafe(path);
-      if (stored.kind !== "ok" || !isProof(stored.value) || !processIsAlive(stored.value.pid)) unlinkSync(path);
+      if (stored.kind !== "ok" || !isProof(stored.value)) {
+        if (options.reapDead) safeUnlink(path);
+        continue;
+      }
+      const listed = proofEntry(stored.value, path);
+      if (!listed.alive && options.reapDead) safeUnlink(path);
+      entries.push(listed);
     }
   } catch {
   }
+  return entries;
+};
+var pruneProofs = (dir) => {
+  listProcessProofs({ dir, reapDead: true });
+};
+var wasSpawned = (entry) => entry.spawnId !== null;
+var silentSpawnedProofs = (entries, now, silenceMs) => {
+  const freshestByPid = /* @__PURE__ */ new Map();
+  for (const entry of entries) {
+    freshestByPid.set(entry.pid, Math.max(freshestByPid.get(entry.pid) ?? 0, entry.lastSeenAt));
+  }
+  const reported = /* @__PURE__ */ new Set();
+  return entries.filter((entry) => {
+    if (!entry.alive || !wasSpawned(entry) || reported.has(entry.pid)) return false;
+    if (now - (freshestByPid.get(entry.pid) ?? 0) < silenceMs) return false;
+    reported.add(entry.pid);
+    return true;
+  });
 };
 var startProcessOwnership = (identity, options = {}) => {
   const dir = ownershipDir(options);
@@ -88,7 +147,7 @@ var startProcessOwnership = (identity, options = {}) => {
         return;
       }
       try {
-        proof = { ...identity, port: address.port, token };
+        proof = { ...identity, port: address.port, token, startedAt: (/* @__PURE__ */ new Date()).toISOString() };
         mkdirSync(dir, { recursive: true, mode: 448 });
         pruneProofs(dir);
         writeFileSync(path, JSON.stringify(proof), {
@@ -107,6 +166,14 @@ var startProcessOwnership = (identity, options = {}) => {
   process.once("exit", cleanup);
   return {
     ready,
+    touch(at = Date.now()) {
+      if (stopped || !proof) return;
+      proof = { ...proof, heartbeatAt: new Date(at).toISOString() };
+      try {
+        writeFileSync(path, JSON.stringify(proof), { encoding: "utf8", mode: 384 });
+      } catch {
+      }
+    },
     stop() {
       if (stopped) return;
       stopped = true;
@@ -184,9 +251,25 @@ var verifyProof = (proof, options) => new Promise((resolve) => {
   });
 });
 
+// src/session-idle.ts
+var SESSION_IDLE_TIMEOUT_MS = 10 * 6e4;
+var SESSION_REAP_GRACE_MS = 5 * 6e4;
+var SESSION_REAP_SILENCE_MS = SESSION_IDLE_TIMEOUT_MS + SESSION_REAP_GRACE_MS;
+var idleDeadlinePassed = (idleSince, now, timeoutMs = SESSION_IDLE_TIMEOUT_MS) => idleSince !== null && now - idleSince >= timeoutMs;
+var describeIdleWindow = (timeoutMs) => {
+  const minutes = Math.round(timeoutMs / 6e4);
+  return minutes >= 1 ? `${minutes} minute${minutes === 1 ? "" : "s"}` : `${Math.round(timeoutMs / 1e3)}s`;
+};
+
 export {
+  listProcessProofs,
+  silentSpawnedProofs,
   startProcessOwnership,
   withSpawnProcessOwnership,
   ownsLiveProcess,
-  findLiveProcessBySpawnId
+  findLiveProcessBySpawnId,
+  SESSION_IDLE_TIMEOUT_MS,
+  SESSION_REAP_SILENCE_MS,
+  idleDeadlinePassed,
+  describeIdleWindow
 };

package/dist/chunk-YKLCWWEI.js

@@ -0,0 +1,76 @@
+import {
+  writeJsonAtomicDurable
+} from "./chunk-4LL6LG5X.js";
+
+// src/transcript-recipient-pin.ts
+import { existsSync, mkdirSync, readFileSync, rmSync } from "fs";
+import { homedir } from "os";
+import { dirname, join } from "path";
+var pinFile = () => process.env.PUSHARY_RECIPIENT_PIN_FILE?.trim() || join(homedir(), ".pushary", "recipients.json");
+var asPin = (offer) => ({
+  phonePublicKey: offer.phonePublicKey,
+  providerKeyId: offer.provider?.keyId ?? null,
+  providerPublicKey: offer.provider?.publicKey ?? null
+});
+var loadPin = () => {
+  const path = pinFile();
+  if (!existsSync(path)) return null;
+  try {
+    const raw = JSON.parse(readFileSync(path, "utf-8"));
+    if (typeof raw.phonePublicKey !== "string" || raw.phonePublicKey.length === 0) return null;
+    return {
+      phonePublicKey: raw.phonePublicKey,
+      providerKeyId: typeof raw.providerKeyId === "string" ? raw.providerKeyId : null,
+      providerPublicKey: typeof raw.providerPublicKey === "string" ? raw.providerPublicKey : null
+    };
+  } catch {
+    return null;
+  }
+};
+var savePin = (pin) => {
+  const path = pinFile();
+  try {
+    mkdirSync(dirname(path), { recursive: true, mode: 448 });
+    writeJsonAtomicDurable(path, pin, 384);
+    return true;
+  } catch {
+    return false;
+  }
+};
+var clearPin = () => {
+  try {
+    rmSync(pinFile(), { force: true });
+  } catch {
+  }
+};
+var verifyRecipients = (offer, pinned) => {
+  if (!pinned) return { kind: "first-use", pin: asPin(offer) };
+  const next = asPin(offer);
+  const changed = [];
+  if (next.phonePublicKey !== pinned.phonePublicKey) changed.push("the phone key this machine seals to");
+  if (next.providerKeyId !== pinned.providerKeyId) changed.push("the compliance recovery key id");
+  if (next.providerPublicKey !== pinned.providerPublicKey) changed.push("the compliance recovery key");
+  return changed.length === 0 ? { kind: "match" } : { kind: "changed", changed };
+};
+var fingerprint = (publicKey) => {
+  const hex = Buffer.from(publicKey, "base64").toString("hex").toUpperCase();
+  return (hex.slice(0, 8).match(/.{2}/g) ?? []).join(" ");
+};
+var changedRecipientsMessage = (verdict, offer) => [
+  "[pushary] Transcript sync stopped: the keys this machine seals transcripts to have changed.",
+  ...verdict.changed.map((what) => `[pushary]   changed: ${what}`),
+  `[pushary]   now offered: phone ${fingerprint(offer.phonePublicKey)}${offer.provider ? `, recovery ${offer.provider.keyId.slice(0, 8)}` : ", no recovery key"}`,
+  "[pushary] If you reinstalled the app or rotated a key, this is expected. Compare the",
+  "[pushary] fingerprint above with the one in the app under Settings, then run:",
+  "[pushary]   pushary transcripts trust --rotate",
+  "[pushary] Until then nothing is uploaded, so no turn is sealed to a key you have not seen."
+].join("\n");
+
+export {
+  loadPin,
+  savePin,
+  clearPin,
+  verifyRecipients,
+  fingerprint,
+  changedRecipientsMessage
+};

package/dist/src/index.d.ts

@@ -39,6 +39,7 @@ interface AgentEvent {
     machineId?: string;
     repoKey?: string;
     sessionId?: string;
+    parentSessionId?: string;
     error?: string;
     taskTitle?: string;
     decisionSource?: DecisionSource;
@@ -80,6 +81,7 @@ declare const handlePostToolUse: (input: {
     cwd?: string;
     session_id?: string;
     transcript_path?: string;
+    tool_use_id?: string;
 }, agent?: AgentIdentity) => Promise<string | undefined>;
 interface StopHookOutput {
     readonly decision: 'block';
@@ -88,6 +90,7 @@ interface StopHookOutput {
 declare const handleStop: (input: {
     cwd?: string;
     session_id?: string;
+    agent_id?: string;
     stop_hook_active?: boolean;
     transcript_path?: string;
     last_assistant_message?: string;

package/dist/src/index.js

@@ -1,12 +1,12 @@
 import {
   handlePreToolUse
-} from "../chunk-OCMOTJTW.js";
-import "../chunk-KVHP5ZME.js";
+} from "../chunk-B7UZHEBL.js";
+import "../chunk-2LAHXHBR.js";
 import {
   fetchAccountPublicKey
 } from "../chunk-QZCFVWA7.js";
-import "../chunk-GKPURU7P.js";
-import "../chunk-FCUUVHTS.js";
+import "../chunk-I463AEG3.js";
+import "../chunk-VHWCVD42.js";
 import "../chunk-YHG74UFF.js";
 import {
   fetchModeOverride,
@@ -16,20 +16,20 @@ import {
   handlePostToolUse,
   handleStop,
   reportEvent
-} from "../chunk-OADGBOP7.js";
+} from "../chunk-TDZFPMSZ.js";
 import {
   askUser,
   cancelQuestion,
   waitForAnswer
-} from "../chunk-JHJHCMAF.js";
-import "../chunk-JVZX5YRJ.js";
-import "../chunk-5NDB3YOE.js";
-import "../chunk-OVEGEQSB.js";
+} from "../chunk-FXEVRLHC.js";
+import "../chunk-L4E2BIJ2.js";
+import "../chunk-54ELC7D7.js";
+import "../chunk-KUZWXPUS.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-XREW7RQ3.js";
+import "../chunk-JW4KO5AF.js";
 import "../chunk-4LL6LG5X.js";
 import {
   getApiKey,
@@ -37,7 +37,7 @@ import {
 } from "../chunk-2UMNXADU.js";
 import {
   resolvePolicy
-} from "../chunk-3MCEES6Z.js";
+} from "../chunk-VNMKIJZB.js";
 export {
   askUser,
   cancelQuestion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.89.12",
+  "version": "0.90.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",
@@ -72,7 +72,8 @@
     "pushary-upgrade": "./dist/bin/pushary-upgrade.js",
     "pushary-bell": "./dist/bin/pushary-bell.js",
     "pushary-bell-hook": "./dist/bin/pushary-bell-hook.js",
-    "pushary-disconnect": "./dist/bin/pushary-disconnect.js"
+    "pushary-disconnect": "./dist/bin/pushary-disconnect.js",
+    "pushary-transcripts": "./dist/bin/pushary-transcripts.js"
   },
   "files": [
     "dist",

package/dist/chunk-NESKLV6R.js

@@ -1,72 +0,0 @@
-import {
-  hasGeminiHooks
-} from "./chunk-6V7ZDH3A.js";
-import {
-  hasCodexHooks
-} from "./chunk-OVEGEQSB.js";
-import {
-  HOOK_LOCATOR_BINARY
-} from "./chunk-3MCEES6Z.js";
-
-// src/diagnostics/wiring.ts
-var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
-var CLAUDE_HOOK_BINARY = /pushary-[a-z-]*hook/;
-var EXACT_HOOK_BINARY = /^pushary-[a-z-]*(hook|gate)$/;
-var pusharyHookExecutable = (command) => {
-  const tokens = command.match(/"[^"]*"|'[^']*'|\S+/g) ?? [];
-  for (const raw of tokens.reverse()) {
-    const token = raw[0] === '"' && raw.at(-1) === '"' || raw[0] === "'" && raw.at(-1) === "'" ? raw.slice(1, -1) : raw;
-    const name = token.split(/[/\\]/).pop()?.replace(/\.(cmd|exe|mjs)$/i, "") ?? "";
-    if (name === HOOK_LOCATOR_BINARY || EXACT_HOOK_BINARY.test(name)) return token;
-  }
-  return null;
-};
-var claudeWired = ({ claudeJson, settings, skillExists }) => {
-  if (record(record(claudeJson)?.mcpServers)?.pushary) return true;
-  const s = record(settings);
-  if (s) {
-    const hooks = JSON.stringify(s.hooks ?? {});
-    if (CLAUDE_HOOK_BINARY.test(hooks) || hooks.includes(HOOK_LOCATOR_BINARY)) return true;
-    const allow = record(s.permissions)?.allow;
-    if (Array.isArray(allow) && allow.some((rule) => String(rule).includes("mcp__pushary__"))) return true;
-  }
-  return skillExists;
-};
-var codexWired = ({ config, hooks, skillExists }) => {
-  if (record(record(config)?.mcp_servers)?.pushary) return true;
-  const h = record(hooks);
-  if (h && hasCodexHooks(h)) return true;
-  return skillExists;
-};
-var geminiWired = ({ settings }) => {
-  const s = record(settings);
-  if (!s) return false;
-  if (record(s.mcpServers)?.pushary) return true;
-  return hasGeminiHooks(s);
-};
-var cursorWired = ({ userHooks, mcp, pluginDirExists }) => {
-  if (pluginDirExists) return true;
-  if (record(record(mcp)?.mcpServers)?.pushary) return true;
-  const hooks = record(record(userHooks)?.hooks);
-  if (!hooks) return false;
-  return Object.values(hooks).some((entries) => Array.isArray(entries) && entries.some((entry) => pusharyHookExecutable(String(record(entry)?.command ?? "")) !== null));
-};
-var cursorMcpAuthorization = (pluginMcp, userMcp) => {
-  const pluginServers = record(record(pluginMcp)?.mcpServers);
-  const usePlugin = pluginServers !== null && Object.hasOwn(pluginServers, "pushary");
-  const servers = usePlugin ? pluginServers : record(record(userMcp)?.mcpServers);
-  const headers = record(record(servers?.pushary)?.headers);
-  return {
-    authorization: typeof headers?.Authorization === "string" ? headers.Authorization : null,
-    source: usePlugin ? "plugin mcp.json" : "~/.cursor/mcp.json"
-  };
-};
-
-export {
-  pusharyHookExecutable,
-  claudeWired,
-  codexWired,
-  geminiWired,
-  cursorWired,
-  cursorMcpAuthorization
-};

package/dist/chunk-WDVQ6O4C.js

@@ -1,84 +0,0 @@
-import {
-  redactSecrets
-} from "./chunk-3MCEES6Z.js";
-
-// src/crypto.ts
-import nacl from "tweetnacl";
-var EPH_PUB_LEN = nacl.box.publicKeyLength;
-var BOX_NONCE_LEN = nacl.box.nonceLength;
-var SECRETBOX_NONCE_LEN = nacl.secretbox.nonceLength;
-var SESSION_KEY_LEN = nacl.secretbox.keyLength;
-var toBase64 = (bytes) => Buffer.from(bytes).toString("base64");
-var fromBase64 = (value) => new Uint8Array(Buffer.from(value, "base64"));
-var utf8Encode = (text) => new Uint8Array(Buffer.from(text, "utf-8"));
-var decodePublicKey = (value) => fromBase64(value);
-var generateSessionKey = () => nacl.randomBytes(SESSION_KEY_LEN);
-var wrapSessionKey = (sessionKey, accountPublicKey) => {
-  const ephemeral = nacl.box.keyPair();
-  const nonce = nacl.randomBytes(BOX_NONCE_LEN);
-  const box = nacl.box(sessionKey, nonce, accountPublicKey, ephemeral.secretKey);
-  const bundle = new Uint8Array(EPH_PUB_LEN + BOX_NONCE_LEN + box.length);
-  bundle.set(ephemeral.publicKey, 0);
-  bundle.set(nonce, EPH_PUB_LEN);
-  bundle.set(box, EPH_PUB_LEN + BOX_NONCE_LEN);
-  return toBase64(bundle);
-};
-var encryptRecord = (plaintext, sessionKey) => {
-  const nonce = nacl.randomBytes(SECRETBOX_NONCE_LEN);
-  const box = nacl.secretbox(utf8Encode(plaintext), nonce, sessionKey);
-  const bundle = new Uint8Array(SECRETBOX_NONCE_LEN + box.length);
-  bundle.set(nonce, 0);
-  bundle.set(box, SECRETBOX_NONCE_LEN);
-  return toBase64(bundle);
-};
-
-// src/transcript-capture.ts
-import { createHash } from "crypto";
-var INTERNAL_TYPES = /* @__PURE__ */ new Set([
-  "file-history-snapshot",
-  "change",
-  "queue-operation",
-  "summary"
-]);
-var redactDeep = (value) => {
-  if (typeof value === "string") return redactSecrets(value);
-  if (Array.isArray(value)) return value.map(redactDeep);
-  if (value && typeof value === "object") {
-    const out = {};
-    for (const [key, inner] of Object.entries(value)) {
-      out[key] = redactDeep(inner);
-    }
-    return out;
-  }
-  return value;
-};
-var localIdFor = (parsed, rawLine) => typeof parsed.uuid === "string" && parsed.uuid.length > 0 ? parsed.uuid : createHash("sha256").update(rawLine).digest("hex").slice(0, 32);
-var buildTranscriptRecords = (lines, sessionKey, seen = /* @__PURE__ */ new Set()) => {
-  const records = [];
-  const nextSeen = new Set(seen);
-  for (const line of lines) {
-    const trimmed = line.trim();
-    if (!trimmed) continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(trimmed);
-    } catch {
-      continue;
-    }
-    const type = typeof parsed.type === "string" ? parsed.type : "";
-    if (INTERNAL_TYPES.has(type)) continue;
-    const localId = localIdFor(parsed, trimmed);
-    if (nextSeen.has(localId)) continue;
-    nextSeen.add(localId);
-    const content = encryptRecord(JSON.stringify(redactDeep(parsed)), sessionKey);
-    records.push({ localId, content });
-  }
-  return { records, seen: nextSeen };
-};
-
-export {
-  decodePublicKey,
-  generateSessionKey,
-  wrapSessionKey,
-  buildTranscriptRecords
-};