@pushary/agent-hooks 0.89.12 → 0.90.0

package/dist/bin/pushary-setup.js

@@ -4,16 +4,22 @@ import {
 } from "../chunk-Z3Z4VK5F.js";
 import {
   detectClaudeVersion
-} from "../chunk-NBRM3FMD.js";
+} from "../chunk-H2QZRQR2.js";
+import {
+  describeVersionManagerPin,
+  isBridgeLocator,
+  versionManagerOf
+} from "../chunk-S6LYP7QA.js";
 import {
   waitForMachineReadiness
-} from "../chunk-DHR4F2CR.js";
+} from "../chunk-7TPQEWUZ.js";
 import {
   HERMES_CONFIG_SCRIPT,
+  describeSetupSideEffects,
   isHermesConfigReceipt,
   resolveHermesPython,
   runHermesPythonScript
-} from "../chunk-QFJZHVVL.js";
+} from "../chunk-AZPIQG4G.js";
 import {
   describeDetection,
   detectAllAgents,
@@ -25,13 +31,13 @@ import {
   shortenHome,
   vscodeSettingsTargets,
   writeInstructionBlock
-} from "../chunk-3XSP5SML.js";
+} from "../chunk-FQL5E6NG.js";
 import {
   claudeWired,
   codexWired,
   geminiWired,
   pusharyHookExecutable
-} from "../chunk-NESKLV6R.js";
+} from "../chunk-DZDI62LY.js";
 import {
   OPENCODE_HOOK_BINARY,
   addOpenCodeMcpServer,
@@ -42,7 +48,7 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   openCodeWired
-} from "../chunk-7DK3ZH3N.js";
+} from "../chunk-CELX75MW.js";
 import {
   GEMINI_HOOK_BINARY,
   addClaudeMcpServer,
@@ -55,15 +61,17 @@ import {
   isClaudeMcpSnapshot,
   parseVersion,
   updateClaudeMcpSnapshot
-} from "../chunk-6V7ZDH3A.js";
-import "../chunk-KVHP5ZME.js";
+} from "../chunk-GL3FFM7A.js";
+import "../chunk-2LAHXHBR.js";
 import {
   guardBinary,
-  guardNodeScript,
+  guardCursorGate,
   guardedArgv
-} from "../chunk-VF3RTVWY.js";
+} from "../chunk-EZIEXHYM.js";
 import {
+  clearDaemonNeedsLogin,
   daemonHasRemoteProof,
+  daemonServiceDefinitionPath,
   daemonServiceManagerAvailable,
   disableDaemonService,
   ensureDaemonRunning,
@@ -72,7 +80,7 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-PS7DQ2SU.js";
+} from "../chunk-F2ICEWZL.js";
 import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
@@ -80,7 +88,7 @@ import {
 } from "../chunk-3OXHYPZG.js";
 import {
   transcriptPreferenceForSetup
-} from "../chunk-JJV5Q4KG.js";
+} from "../chunk-UZNKVRLE.js";
 import "../chunk-XHKBHWLX.js";
 import {
   installGlobally,
@@ -90,10 +98,10 @@ import {
 } from "../chunk-L4ZCFMWW.js";
 import {
   reportEvent
-} from "../chunk-OADGBOP7.js";
-import "../chunk-JHJHCMAF.js";
-import "../chunk-JVZX5YRJ.js";
-import "../chunk-5NDB3YOE.js";
+} from "../chunk-TDZFPMSZ.js";
+import "../chunk-FXEVRLHC.js";
+import "../chunk-L4E2BIJ2.js";
+import "../chunk-54ELC7D7.js";
 import {
   addCodexHookTrust,
   addCodexHooks,
@@ -115,21 +123,24 @@ import {
   hermesConfigReceipt,
   pusharyConfigFile,
   vscodePluginDir
-} from "../chunk-OVEGEQSB.js";
+} from "../chunk-KUZWXPUS.js";
 import {
   confirmAppConnection,
   connectDevice,
   connectViaAppPairing,
   describeRoundTrip,
+  pairingEscapeApplies,
   printConnectInstructions,
-  setHumanStream,
   verifyRoundTrip
-} from "../chunk-MFNQ5IMW.js";
+} from "../chunk-PYA4FLKI.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-Y4WVZIEI.js";
+} from "../chunk-AJYV3VGU.js";
+import {
+  setHumanStream
+} from "../chunk-QCGNGEGE.js";
 import {
   useColor
 } from "../chunk-5RUIFDTP.js";
@@ -138,7 +149,7 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   renderCommandHelp
-} from "../chunk-RLQWNEPM.js";
+} from "../chunk-43GMYSS4.js";
 import {
   getPackageVersion,
   isNewerVersion
@@ -151,7 +162,7 @@ import {
   readControlMode,
   readKeySource,
   writeKey
-} from "../chunk-RNKPLUWC.js";
+} from "../chunk-OSALSIUF.js";
 import {
   installClaudeAlias,
   resolveShellRc
@@ -164,7 +175,7 @@ import {
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-XREW7RQ3.js";
+import "../chunk-JW4KO5AF.js";
 import {
   backupFile,
   readJsonSafe,
@@ -175,7 +186,7 @@ import "../chunk-2UMNXADU.js";
 import {
   CURSOR_GATE_EVENTS,
   isValidApiKey
-} from "../chunk-3MCEES6Z.js";
+} from "../chunk-VNMKIJZB.js";
 
 // bin/pushary-setup.ts
 import { existsSync, readFileSync, writeFileSync, mkdirSync, cpSync, rmSync, renameSync, realpathSync, readdirSync, statSync, openSync, readSync, closeSync } from "fs";
@@ -189,6 +200,17 @@ import { parse as parseTOML, stringify as stringifyTOML } from "smol-toml";
 // src/cli/exit.ts
 var isExitPromptError = (err) => err instanceof Error && (err.name === "ExitPromptError" || err.message.includes("User force closed") || /force closed the prompt/i.test(err.message));
 
+// src/setup/phone-check.ts
+var planPhoneCheck = (context) => {
+  if (context.locked) return "locked";
+  if (context.skipPhone) return "skip-phone";
+  if (context.verify === "none") return "verify-none";
+  if (!context.stdoutIsTty) return "instructions";
+  if (context.paired) return "confirm-pairing";
+  if (context.connectMode === "app") return "reuse-app";
+  return "connect";
+};
+
 // src/setup/closing.ts
 var ACTIVITY_URL = "pushary.com/dashboard/agent/activity";
 var COMMAND_SURFACE = [
@@ -540,7 +562,7 @@ var effectiveVerify = (options, context) => {
   return context.paired ? "roundtrip" : options.verify;
 };
 var SETUP_FLAGS = {
-  bools: ["key-stdin", "skip-phone", "yes", "y", "json", "dry-run", "help", "h"],
+  bools: ["key-stdin", "skip-phone", "yes", "y", "json", "dry-run", "take-over-hooks", "help", "h"],
   values: ["key", "connect", "agents", "verify", "control", "transcripts"]
 };
 var effectiveControlMode = (options, stored, configPresent) => options.controlExplicit ? options.control : stored ?? (configPresent ? null : options.control);
@@ -623,10 +645,43 @@ var parseSetupOptions = (input2) => {
     verifyExplicit: verifyRaw !== void 0,
     control: controlRaw === void 0 ? "auto" : parseControlMode(controlRaw),
     controlExplicit: controlRaw !== void 0,
-    transcripts: transcriptsRaw === void 0 ? null : transcriptsRaw === "on"
+    transcripts: transcriptsRaw === void 0 ? null : transcriptsRaw === "on",
+    takeOverHooks: flags.bools.has("take-over-hooks")
   };
 };
 
+// src/setup/hook-ownership.ts
+var commandsIn = (value) => {
+  if (Array.isArray(value)) return value.flatMap(commandsIn);
+  if (!value || typeof value !== "object") return [];
+  return Object.entries(value).flatMap(([key, item]) => key === "command" && typeof item === "string" ? [item] : commandsIn(item));
+};
+var hookOwnerOf = (document) => {
+  const hooks = document && typeof document === "object" ? document.hooks : void 0;
+  const executables = commandsIn(hooks).map(pusharyHookExecutable).filter((executable) => executable !== null);
+  if (executables.some(isBridgeLocator)) return "app";
+  if (executables.length > 0) return "cli";
+  return "none";
+};
+var planHooks = (context) => {
+  if (context.owner !== "app") return "install";
+  if (context.takeOverHooks) return "install";
+  return context.nonInteractive ? "keep" : "ask";
+};
+var describeAppOwnership = (agentName) => `The Pushary Mac app owns ${agentName}'s hooks.`;
+var takeoverQuestion = (agentName) => `Replace them with the CLI's? The app stops answering for ${agentName} and the notch loses its terminal jump there.`;
+var KEEP_HINT = "Left as they are. Pass --take-over-hooks to have the CLI own them instead.";
+var OWNER_LABELS = {
+  app: "the Pushary Mac app",
+  cli: "the CLI"
+};
+var describeHookOwnership = (entries, names) => {
+  const owned = entries.filter((entry) => entry.owner !== "none");
+  if (owned.length === 0) return null;
+  const parts = owned.map((entry) => `${names[entry.agent]} by ${OWNER_LABELS[entry.owner]}${entry.kept ? " (kept)" : ""}`);
+  return `Hooks: ${parts.join(", ")}.`;
+};
+
 // bin/pushary-setup.ts
 var CLAUDE_SETTINGS = claudeSettings();
 var CLAUDE_JSON = claudeJson();
@@ -778,6 +833,10 @@ var checkForUpdates = async (current) => {
   }
 };
 var globalInstallReady = false;
+var warnVersionManagerPin = (execPath) => {
+  const manager = versionManagerOf(execPath);
+  if (manager) console.log(`  ${yellow("!")} ${describeVersionManagerPin(execPath, manager)}`);
+};
 var installGlobally2 = async () => {
   if (globalInstallReady) return;
   const version = getPackageVersion();
@@ -1210,7 +1269,7 @@ var installCursorUserHooks = (gateScript) => {
     if (!template) throw new Error(`bundled Cursor hooks.json missing a ${event} entry`);
     const existing = Array.isArray(hooks[event]) ? hooks[event] : [];
     const others = existing.filter((h) => pusharyHookExecutable(String(h.command ?? "")) === null);
-    hooks[event] = [...others, { ...template, command: guardNodeScript(gateScript) }];
+    hooks[event] = [...others, { ...template, command: guardCursorGate(gateScript) }];
   }
   writeJson(CURSOR_USER_HOOKS, { ...userHooks, version: userHooks.version ?? 1, hooks });
 };
@@ -1399,6 +1458,7 @@ var saveApiKey = async (apiKey, controlMode, transcriptSync) => {
       ...controlMode === null ? {} : { controlMode },
       transcriptsEnabled: transcriptSync
     });
+    clearDaemonNeedsLogin();
   });
   if (!result) throw new Error("Could not save the API key");
   if (result.configBackupPath) {
@@ -1518,6 +1578,24 @@ var setupOpenCode = async (apiKey) => {
   noteManual("Restart OpenCode to load the plugin.");
   return "configured";
 };
+var HOOK_FILES = {
+  claude_code: () => CLAUDE_SETTINGS,
+  codex: () => CODEX_HOOKS_JSON,
+  gemini_cli: () => GEMINI_SETTINGS,
+  cursor: () => CURSOR_USER_HOOKS,
+  vscode: () => join3(VSCODE_PLUGIN_DIR, "hooks", "hooks.json")
+};
+var hookOwnerFor = (agent) => {
+  const file = HOOK_FILES[agent]?.();
+  if (!file) return "none";
+  const document = readJsonSafe(file);
+  return hookOwnerOf(document.kind === "ok" ? document.value : null);
+};
+var confirmTakeover = async (agent) => {
+  console.log();
+  console.log(`  ${yellow("!")} ${describeAppOwnership(AGENT_NAMES[agent])}`);
+  return confirm({ message: takeoverQuestion(AGENT_NAMES[agent]), default: false });
+};
 var agentIsWired = (agent) => {
   const readJson2 = (path) => {
     try {
@@ -1763,6 +1841,15 @@ var reportDryRun = (apiKey, agents, keyCheck, controlMode) => {
   const rc = resolveShellRc();
   console.log(`  ${dim("Shell rc:")}   ${rc ? rc.path : dim("none for this shell; the export line would be printed instead")}`);
   console.log();
+  console.log(`  ${bold("Also, on a real run")}`);
+  for (const line of describeSetupSideEffects({
+    version: getPackageVersion(),
+    configFile: PUSHARY_CONFIG_FILE,
+    rcPath: rc?.path ?? null,
+    controlMode,
+    serviceDefinitionPath: daemonServiceDefinitionPath()
+  })) console.log(`    ${dim(line)}`);
+  console.log();
   if (agents.length === 0) {
     console.log(`  ${dim("Agents:")}     ${dim("none")}`);
   } else {
@@ -1873,9 +1960,9 @@ var main = async () => {
         await reportSetupAbort("pairing-cancelled", 130);
       }
     });
-    if (!paired) {
-      printPairingEscape();
-      process.exit(await abortWith("pairing-cancelled", EXIT.NOT_CONFIGURED));
+    if (paired.kind === "failed") {
+      if (pairingEscapeApplies(paired)) printPairingEscape();
+      process.exit(await abortWith(paired.reason === "cancelled" ? "pairing-cancelled" : "pairing-failed", EXIT.NOT_CONFIGURED));
     }
     trimmedKey = paired.apiKey;
     keyFromPairing = true;
@@ -1965,6 +2052,7 @@ var main = async () => {
   const failed = [];
   const completed = [];
   const skipped = [];
+  const hookOwners = [];
   let controlLifecycleFailure = null;
   if (agents.length === 0) {
     console.log(`
@@ -1974,11 +2062,22 @@ var main = async () => {
     for (const agent of agents) {
       markStep(`configure:${agent}`);
       try {
+        const ownerBefore = hookOwnerFor(agent);
+        const plan = planHooks({ owner: ownerBefore, takeOverHooks: options.takeOverHooks, nonInteractive: options.nonInteractive });
+        const keepAppWiring = plan === "keep" || plan === "ask" && !await confirmTakeover(agent);
+        if (keepAppWiring) {
+          console.log(`
+  ${check} ${AGENT_NAMES[agent]}: ${describeAppOwnership(AGENT_NAMES[agent])} ${dim(KEEP_HINT)}`);
+          hookOwners.push({ agent, owner: "app", kept: true });
+          completed.push(agent);
+          continue;
+        }
         const outcome = await AGENT_SETUP[agent](trimmedKey, context);
         if (outcome === "skipped") {
           skipped.push(agent);
         } else if (agentIsWired(agent)) {
           completed.push(agent);
+          hookOwners.push({ agent, owner: hookOwnerFor(agent), kept: false });
         } else {
           failed.push(agent.replace("_", " "));
           console.log(`  ${yellow("!")} ${agent.replace("_", " ")} reported success but its config is not there.`);
@@ -2017,23 +2116,42 @@ var main = async () => {
   markStep("connect-phone");
   const skipPhone = options.skipPhone;
   let phone = null;
-  if (keyCheck?.kind === "locked") {
-    console.log();
-    console.log(`  ${dim("Skipping the delivery check: no approval can be delivered until the plan is active.")}`);
-  } else if (skipPhone) {
-    console.log();
-    console.log(`  ${dim("Skipping the phone check (--skip-phone).")}`);
-  } else if (!process.stdout.isTTY) {
-    phone = await printConnectInstructions(trimmedKey);
-  } else if (keyFromPairing) {
-    phone = await confirmAppConnection(trimmedKey);
-  } else if (connectMode === "app") {
-    phone = await printConnectInstructions(trimmedKey);
-  } else {
-    phone = await connectDevice(trimmedKey, { showCapabilities: !options.connectExplicit });
+  const verifyMode = effectiveVerify(options, { paired: keyFromPairing });
+  const phoneCheck = planPhoneCheck({
+    locked: keyCheck?.kind === "locked",
+    skipPhone,
+    verify: verifyMode,
+    stdoutIsTty: process.stdout.isTTY === true,
+    paired: keyFromPairing,
+    connectMode
+  });
+  switch (phoneCheck) {
+    case "locked":
+      console.log();
+      console.log(`  ${dim("Skipping the delivery check: no approval can be delivered until the plan is active.")}`);
+      break;
+    case "skip-phone":
+      console.log();
+      console.log(`  ${dim("Skipping the phone check (--skip-phone).")}`);
+      break;
+    case "verify-none":
+      console.log();
+      console.log(`  ${dim("Skipping the delivery check (--verify none). Nothing here proves an approval reaches you.")}`);
+      break;
+    case "instructions":
+      phone = await printConnectInstructions(trimmedKey);
+      break;
+    case "confirm-pairing":
+      phone = await confirmAppConnection(trimmedKey);
+      break;
+    case "reuse-app":
+      phone = await printConnectInstructions(trimmedKey);
+      break;
+    case "connect":
+      phone = await connectDevice(trimmedKey, { showCapabilities: !options.connectExplicit });
+      break;
   }
   let roundTrip = null;
-  const verifyMode = effectiveVerify(options, { paired: keyFromPairing });
   if (verifyMode === "roundtrip" && keyCheck?.kind !== "locked" && !skipPhone && // Reaching nobody is already reported by the delivery check above, in copy
   // that names the fix. Asking a question nobody can receive would repeat it
   // 55 seconds later and add nothing.
@@ -2139,6 +2257,7 @@ var main = async () => {
       });
       console.log(`  ${yellow("!")} Retired the legacy phone-start service because it could not be safely repinned: ${legacyRuntimeFailure}`);
     }
+    if (!retired && stopped.kind === "ok") warnVersionManagerPin(process.execPath);
   }
   if (controlMode === "on" && controlPolicy !== "enabled") {
     console.log(`  ${yellow("!")} Phone-start was required, but this machine has no supported provider or native background-service manager.`);
@@ -2149,6 +2268,7 @@ var main = async () => {
     try {
       await installGlobally2();
       const service = await replaceDaemonService();
+      if (service.kind === "ok") warnVersionManagerPin(process.execPath);
       return service.kind === "ok" ? ensureDaemonRunning({ spawnDaemon: () => {
       } }) : { kind: "unavailable", detail: service.detail };
     } catch (err) {
@@ -2182,6 +2302,8 @@ var main = async () => {
     for (const agent of completed) console.log(`  ${check} ${AGENT_NAMES[agent] ?? agent}`);
     for (const item of failed) console.log(`  ${yellow("!")} ${item}`);
   }
+  const ownershipLine = describeHookOwnership(hookOwners, AGENT_NAMES);
+  if (ownershipLine) console.log(`  ${dim(ownershipLine)}`);
   console.log();
   for (const line of closing.next) console.log(`  ${line}`);
   console.log();
@@ -2208,6 +2330,7 @@ var main = async () => {
     skipped,
     manualSteps,
     failed,
+    hookOwners,
     keyCheck: keyCheck?.kind ?? "skipped",
     reach: phone === null ? "skipped" : phone.reachesYou ? "yours" : phone.outcome?.kind ?? phone.detail ?? "unreachable",
     // Named separately from `reach` so a caller can tell "a push landed" from

package/dist/bin/pushary-stats.js

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import {
   readLedgerSummary
-} from "../chunk-FCUUVHTS.js";
+} from "../chunk-VHWCVD42.js";
 import {
   exitOnHelpFlag
-} from "../chunk-OTPJ4FUR.js";
-import "../chunk-RLQWNEPM.js";
+} from "../chunk-BVBEURWJ.js";
+import "../chunk-43GMYSS4.js";
 import "../chunk-DINDL2CF.js";
 import "../chunk-KZERVKTD.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
-import "../chunk-3MCEES6Z.js";
+import "../chunk-VNMKIJZB.js";
 
 // bin/pushary-stats.ts
 exitOnHelpFlag("stats");

package/dist/bin/pushary-status.js

@@ -2,19 +2,20 @@
 import {
   describeLastSeen,
   listMachines
-} from "../chunk-DHR4F2CR.js";
-import "../chunk-5NDB3YOE.js";
-import "../chunk-OVEGEQSB.js";
+} from "../chunk-7TPQEWUZ.js";
+import "../chunk-54ELC7D7.js";
+import "../chunk-KUZWXPUS.js";
 import {
   describeReach,
   fetchChannels,
   reachVerdict
-} from "../chunk-MFNQ5IMW.js";
+} from "../chunk-PYA4FLKI.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-Y4WVZIEI.js";
+} from "../chunk-AJYV3VGU.js";
+import "../chunk-QCGNGEGE.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -23,12 +24,12 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-OTPJ4FUR.js";
-import "../chunk-RLQWNEPM.js";
+} from "../chunk-BVBEURWJ.js";
+import "../chunk-43GMYSS4.js";
 import "../chunk-DINDL2CF.js";
 import {
   readKeySource
-} from "../chunk-RNKPLUWC.js";
+} from "../chunk-OSALSIUF.js";
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
@@ -38,10 +39,10 @@ import {
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-XREW7RQ3.js";
+import "../chunk-JW4KO5AF.js";
 import "../chunk-4LL6LG5X.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-3MCEES6Z.js";
+import "../chunk-VNMKIJZB.js";
 
 // src/status.ts
 var keySourceLine = (source) => {

package/dist/bin/pushary-stop-hook.js

@@ -3,26 +3,32 @@ import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
 import {
-  handleStop
-} from "../chunk-OADGBOP7.js";
-import "../chunk-JHJHCMAF.js";
-import "../chunk-JVZX5YRJ.js";
-import "../chunk-5NDB3YOE.js";
-import "../chunk-OVEGEQSB.js";
+  handleStop,
+  handleSubagentStop,
+  isSubagentStop
+} from "../chunk-TDZFPMSZ.js";
+import "../chunk-FXEVRLHC.js";
+import "../chunk-L4E2BIJ2.js";
+import "../chunk-54ELC7D7.js";
+import "../chunk-KUZWXPUS.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-XREW7RQ3.js";
+import "../chunk-JW4KO5AF.js";
 import "../chunk-4LL6LG5X.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-3MCEES6Z.js";
+import "../chunk-VNMKIJZB.js";
 
 // bin/pushary-stop-hook.ts
 var main = async () => {
   const input = await readHookInput("claude", "Stop");
   if (!input) return;
   try {
+    if (isSubagentStop(input)) {
+      await handleSubagentStop(input);
+      return;
+    }
     const output = await handleStop(input);
     if (output) process.stdout.write(JSON.stringify(output));
   } catch {

package/dist/bin/pushary-stopfailure-hook.js

@@ -4,19 +4,19 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleStopFailure
-} from "../chunk-OADGBOP7.js";
-import "../chunk-JHJHCMAF.js";
-import "../chunk-JVZX5YRJ.js";
-import "../chunk-5NDB3YOE.js";
-import "../chunk-OVEGEQSB.js";
+} from "../chunk-TDZFPMSZ.js";
+import "../chunk-FXEVRLHC.js";
+import "../chunk-L4E2BIJ2.js";
+import "../chunk-54ELC7D7.js";
+import "../chunk-KUZWXPUS.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-XREW7RQ3.js";
+import "../chunk-JW4KO5AF.js";
 import "../chunk-4LL6LG5X.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-3MCEES6Z.js";
+import "../chunk-VNMKIJZB.js";
 
 // bin/pushary-stopfailure-hook.ts
 var main = async () => {

package/dist/bin/pushary-suggestions.js

@@ -7,8 +7,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-OTPJ4FUR.js";
-import "../chunk-RLQWNEPM.js";
+} from "../chunk-BVBEURWJ.js";
+import "../chunk-43GMYSS4.js";
 import "../chunk-DINDL2CF.js";
 import {
   UsageError

package/dist/bin/pushary-transcripts.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-transcripts.js

@@ -0,0 +1,79 @@
+#!/usr/bin/env node
+import {
+  clearPin,
+  fingerprint,
+  loadPin
+} from "../chunk-YKLCWWEI.js";
+import {
+  transcriptsEnabled
+} from "../chunk-UZNKVRLE.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-BVBEURWJ.js";
+import "../chunk-43GMYSS4.js";
+import "../chunk-DINDL2CF.js";
+import "../chunk-OSALSIUF.js";
+import "../chunk-BC3VCZ3E.js";
+import "../chunk-KZERVKTD.js";
+import "../chunk-JW4KO5AF.js";
+import "../chunk-4LL6LG5X.js";
+import "../chunk-2UMNXADU.js";
+import "../chunk-VNMKIJZB.js";
+
+// bin/pushary-transcripts.ts
+exitOnHelpFlag("transcripts");
+var dim = (text) => `\x1B[2m${text}\x1B[0m`;
+var bold = (text) => `\x1B[1m${text}\x1B[0m`;
+var showStatus = () => {
+  const pin = loadPin();
+  console.log();
+  console.log(`  ${bold("Transcript sync")}  ${transcriptsEnabled() ? "on" : dim("off")}`);
+  console.log();
+  if (!pin) {
+    console.log(`  No keys pinned yet. The first sync on this machine records the keys it`);
+    console.log(`  seals to, and every later change has to be accepted here.`);
+    console.log();
+    return;
+  }
+  console.log(`  ${bold("Phone key")}         ${fingerprint(pin.phonePublicKey)}`);
+  console.log(`  ${dim("Compare this with the fingerprint in the app under Settings.")}`);
+  console.log();
+  if (pin.providerKeyId && pin.providerPublicKey) {
+    console.log(`  ${bold("Recovery key")}      ${pin.providerKeyId.slice(0, 16)}`);
+    console.log(`  ${dim("Pushary can recover a session sealed to this key under a documented")}`);
+    console.log(`  ${dim("legal obligation. Sessions sealed before it existed cannot be recovered.")}`);
+  } else {
+    console.log(`  ${bold("Recovery key")}      ${dim("none")}`);
+    console.log(`  ${dim("Only your phone can read these transcripts. Nobody at Pushary can.")}`);
+  }
+  console.log();
+};
+var rotate = () => {
+  const had = loadPin();
+  clearPin();
+  console.log();
+  if (!had) {
+    console.log(`  Nothing was pinned. The next sync records whatever the server offers.`);
+  } else {
+    console.log(`  Dropped the pinned keys. The next sync records what the server offers now`);
+    console.log(`  and resumes uploading.`);
+    console.log();
+    console.log(`  ${dim("If you did not reinstall the app or rotate a key, stop and check with")}`);
+    console.log(`  ${dim("Pushary before running an agent on this machine.")}`);
+  }
+  console.log();
+};
+var args = process.argv.slice(2);
+var wantsRotate = args.includes("--rotate");
+var verb = args.find((arg) => !arg.startsWith("-"));
+if (verb === "trust" && wantsRotate) {
+  rotate();
+} else if (verb === "trust") {
+  console.error(`Run \`pushary transcripts trust --rotate\` to accept the keys the server is offering now.`);
+  process.exit(1);
+} else if (verb === void 0 || verb === "status") {
+  showStatus();
+} else {
+  console.error(`Unknown: ${verb}. Try \`pushary transcripts status\` or \`pushary transcripts trust --rotate\`.`);
+  process.exit(1);
+}