@pushary/agent-hooks 0.95.8 → 0.98.0

package/dist/{chunk-XS33QBJA.js → chunk-LGXUGYUH.js}

@@ -4,6 +4,9 @@ import {
 import {
   installProxyDispatcher
 } from "./chunk-SAF6HGAA.js";
+import {
+  getBaseUrl
+} from "./chunk-2UMNXADU.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";
@@ -24,6 +27,21 @@ var isWaitForAnswerResponse = (data) => {
   const d = data;
   return typeof d.answered === "boolean";
 };
+var GATE_REPLY_KINDS = ["kill", "allow", "deny", "ask", "no_opinion"];
+var isSettlementOutputs = (value) => {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const outputs = value;
+  return (outputs.approve === void 0 || typeof outputs.approve === "string") && (outputs.deny === void 0 || typeof outputs.deny === "string");
+};
+var isGateReply = (data) => {
+  if (!data || typeof data !== "object") return false;
+  const d = data;
+  return GATE_REPLY_KINDS.includes(d.kind) && (d.output === void 0 || typeof d.output === "string") && (d.correlationId === void 0 || typeof d.correlationId === "string") && (d.deadlineSeconds === void 0 || typeof d.deadlineSeconds === "number") && (d.noDevices === void 0 || typeof d.noDevices === "boolean") && (d.suppressed === void 0 || typeof d.suppressed === "boolean") && (d.settlementOutputs === void 0 || isSettlementOutputs(d.settlementOutputs));
+};
+var isBlockedActionClaim = (data) => {
+  if (!data || typeof data !== "object") return false;
+  return typeof data.granted === "boolean";
+};
 
 // src/api.ts
 installProxyDispatcher();
@@ -96,6 +114,34 @@ var waitForQuestion = async (apiKey, question, deadlineMs, pollInterval = 2e3) =
 var sendNotification = async (apiKey, params, timeoutMs = 15e3, signal) => {
   await callMcpTool(apiKey, "send_notification", { ...params }, { maxRetries: signal ? 1 : 3, timeoutMs, signal });
 };
+var GATE_PATH = "/api/agent/gate";
+var BLOCKED_ACTION_CLAIM_PATH = "/api/agent/blocked-action/claim";
+var postAgentRequest = async (apiKey, path, body, timeoutMs) => {
+  const response = await fetch(`${getBaseUrl()}${path}`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json", Authorization: `Bearer ${apiKey}` },
+    body: JSON.stringify(body),
+    signal: AbortSignal.timeout(timeoutMs)
+  });
+  if (!response.ok) throw new Error(`${path} rejected (${response.status})`);
+  return response.json();
+};
+var requestGate = async (apiKey, request, timeoutMs = 15e3) => {
+  try {
+    const reply = await postAgentRequest(apiKey, GATE_PATH, request, timeoutMs);
+    return isGateReply(reply) ? reply : null;
+  } catch {
+    return null;
+  }
+};
+var claimBlockedAction = async (apiKey, request, timeoutMs) => {
+  try {
+    const reply = await postAgentRequest(apiKey, BLOCKED_ACTION_CLAIM_PATH, request, timeoutMs);
+    return isBlockedActionClaim(reply) ? reply.granted : null;
+  } catch {
+    return null;
+  }
+};
 
 export {
   isPolicyConfig,
@@ -105,8 +151,11 @@ export {
   askUser,
   waitForAnswer,
   nextLongPollMs,
+  pollForAnswer,
   cancelQuestion,
   withdrawQuestion,
   waitForQuestion,
-  sendNotification
+  sendNotification,
+  requestGate,
+  claimBlockedAction
 };

package/dist/{chunk-XO3JR3OP.js → chunk-LX4NNYII.js}

@@ -15,10 +15,10 @@ import {
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VZD2GEKB.js";
 import {
   isAnswerSource
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-XEVOPOKT.js → chunk-M4TVEMLH.js}

@@ -1,6 +1,6 @@
 import {
   registerTranscript
-} from "./chunk-3YFJGKJQ.js";
+} from "./chunk-5B5QV3KC.js";
 
 // src/admission.ts
 import { readFileSync } from "fs";

package/dist/{chunk-TY6IJY6I.js → chunk-NIXVMMJM.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-VMQU7YEJ.js";
+} from "./chunk-SJLGOVC6.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-VERXHIQF.js → chunk-NQGYPTJQ.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-VMQU7YEJ.js";
+} from "./chunk-SJLGOVC6.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-EMGGUO2Q.js → chunk-OBYC6SN4.js}

@@ -1,6 +1,6 @@
 import {
   writeJsonAtomicDurable
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VZD2GEKB.js";
 
 // src/transcript-recipient-pin.ts
 import { existsSync, mkdirSync, readFileSync, rmSync } from "fs";

package/dist/{chunk-XUTSZYYJ.js → chunk-OPR2BPD4.js}

@@ -1,10 +1,8 @@
 import {
-  ASKED_IN_EVERY_MODE_TOOLS,
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/claude-tools.ts
-var PRETOOLUSE_PHONE_ANSWERED_TOOLS = ASKED_IN_EVERY_MODE_TOOLS;
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];
 var POSTTOOLUSE_MIRRORED_TOOLS = [...PRETOOLUSE_GATED_TOOLS, ...POSTTOOLUSE_MIRROR_ONLY_TOOLS];
 
@@ -34,7 +32,6 @@ var NOTIFICATION_PUSH_TYPES = /* @__PURE__ */ new Set([
 ]);
 
 export {
-  PRETOOLUSE_PHONE_ANSWERED_TOOLS,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS,
   POSTTOOLUSE_MIRRORED_TOOLS,
   NOTIFICATION_MATCHED_TYPES,

package/dist/{chunk-MC5WUOJJ.js → chunk-OUAE3GKO.js}

@@ -293,6 +293,26 @@ var HOOK_BUDGETS = {
   opencode: { budgetSeconds: 120, guardSeconds: 10 }
 };
 var hookMaxWaitSeconds = (agent) => Math.max(HOOK_BUDGETS[agent].budgetSeconds - HOOK_BUDGETS[agent].guardSeconds, 1);
+var HOOK_HOLD_BUDGET_FLAG = "--hold-budget";
+var HOOK_HOLD_BUDGET_ENV = "PUSHARY_HOLD_BUDGET_SECONDS";
+var HOOK_BRIDGE_SOURCE_FLAG = "--source";
+var HOOK_HOLD_BUDGET_SECONDS = /^[1-9]\d{0,5}$/;
+var hookHoldBudgetSeconds = (text) => text !== void 0 && HOOK_HOLD_BUDGET_SECONDS.test(text) ? Number(text) : void 0;
+var hookHoldBudgetArgument = (seconds) => `${HOOK_HOLD_BUDGET_FLAG}=${seconds}`;
+var withHookHoldBudget = (command, holdBudgetSeconds) => holdBudgetSeconds === void 0 ? command : `${command} ${hookHoldBudgetArgument(holdBudgetSeconds)}`;
+var registeredHookHoldBudget = (args) => {
+  const prefix = `${HOOK_HOLD_BUDGET_FLAG}=`;
+  const proofs = args.filter((arg) => arg.startsWith(prefix));
+  return proofs.length === 1 ? hookHoldBudgetSeconds(proofs[0].slice(prefix.length)) : void 0;
+};
+var hookCommandHoldBudget = (command) => registeredHookHoldBudget(command.trim().split(/\s+/));
+var hookHoldBudgetProof = (args, env) => {
+  const handedDown = hookHoldBudgetSeconds(env[HOOK_HOLD_BUDGET_ENV]);
+  const registered = args.includes(HOOK_BRIDGE_SOURCE_FLAG) ? void 0 : registeredHookHoldBudget(args);
+  if (handedDown === void 0) return registered;
+  return registered === void 0 ? handedDown : Math.min(handedDown, registered);
+};
+var hookHoldWindowMs = (agent, holdBudgetSeconds) => holdBudgetSeconds === void 0 ? 0 : Math.max((Math.min(holdBudgetSeconds, HOOK_BUDGETS[agent].budgetSeconds) - HOOK_BUDGETS[agent].guardSeconds) * 1e3, 0);
 var hookWaitDeadline = (startMs, policyWaitSeconds, agent, nowMs) => {
   const maxWait = hookMaxWaitSeconds(agent);
   return Math.min(
@@ -1275,6 +1295,30 @@ var shouldDeferToNativeMode = (permissionMode, toolName, options = {}) => {
 var ASKED_IN_EVERY_MODE_TOOLS = ["AskUserQuestion", "ExitPlanMode"];
 var ASKED_IN_EVERY_MODE = new Set(ASKED_IN_EVERY_MODE_TOOLS);
 var isAskedInEveryMode = (toolName) => ASKED_IN_EVERY_MODE.has(toolName);
+var NATIVE_BLOCK_EVENTS = /* @__PURE__ */ new Set(["PermissionDenied"]);
+var isNativeBlockEvent = (event) => typeof event === "string" && NATIVE_BLOCK_EVENTS.has(event);
+var CODEX_RESCUE_TOOL_NAME = "Bash";
+var isBlockedActionEvent = ({ source, event, blockedBy }) => isNativeBlockEvent(event) || source === "codex" && event === "Stop" && blockedBy === "auto_review";
+var blockedActionRetryReachesGate = (source, toolName) => source === "claude" ? PRETOOLUSE_HANDLED_TOOLS.has(toolName) && !isAskedInEveryMode(toolName) : source === "codex" && toolName === CODEX_RESCUE_TOOL_NAME;
+var isBlockedActionRequest = (request) => isBlockedActionEvent(request) && blockedActionRetryReachesGate(request.source, request.toolName);
+var canonicalJsonText = (value) => {
+  if (Array.isArray(value)) return `[${value.map(canonicalJsonText).join(",")}]`;
+  if (value !== null && typeof value === "object") {
+    const record = value;
+    return `{${Object.keys(record).filter((key) => record[key] !== void 0).sort().map((key) => `${JSON.stringify(key)}:${canonicalJsonText(record[key])}`).join(",")}}`;
+  }
+  return JSON.stringify(value) ?? "null";
+};
+var BLOCKED_ACTION_IDENTITY_VERSION = "blocked-action/v1";
+var CLAUDE_BLOCKED_ACTION_IDENTITY_VERSION = "blocked-action/v2";
+var BLOCKED_ACTION_GRANT_TTL_SECONDS = 120;
+var BLOCKED_ACTION_PRESENTATION_ONLY_KEYS = ["description"];
+var isPresentationOnlyInputKey = (key) => BLOCKED_ACTION_PRESENTATION_ONLY_KEYS.includes(key);
+var identifyingBlockedActionInput = (toolInput) => Object.fromEntries(Object.entries(toolInput).filter(([key]) => !isPresentationOnlyInputKey(key)));
+var blockedActionIdentity = (subject) => {
+  const { sessionId, toolName, toolInput } = subject;
+  return subject.source === "claude" ? canonicalJsonText([CLAUDE_BLOCKED_ACTION_IDENTITY_VERSION, sessionId, subject.cwd, toolName, identifyingBlockedActionInput(toolInput)]) : canonicalJsonText([BLOCKED_ACTION_IDENTITY_VERSION, sessionId, toolName, identifyingBlockedActionInput(toolInput)]);
+};
 var PRETOOLUSE_GATED_TOOLS = [
   "Bash",
   "Write",
@@ -1286,6 +1330,7 @@ var PRETOOLUSE_GATED_TOOLS = [
 ];
 var PRETOOLUSE_HANDLED_TOOLS = /* @__PURE__ */ new Set([...PRETOOLUSE_GATED_TOOLS, ...ASKED_IN_EVERY_MODE_TOOLS]);
 var isPermissionRequestOwnedByPreToolUse = (toolName, permissionMode, defers = shouldDeferToNativeMode) => PRETOOLUSE_HANDLED_TOOLS.has(toolName) && (isAskedInEveryMode(toolName) || !defers(permissionMode, toolName));
+var CLAUDE_PRETOOLUSE_MATCHER = [...PRETOOLUSE_HANDLED_TOOLS].join("|");
 var resolveGate = (input) => {
   const { modeState, config, toolName, toolInputs, cwd, repoKey, sessionId } = input;
   if (isPusharyOwnTool(toolName)) {
@@ -1342,6 +1387,19 @@ var modeStateFromResponse = (data) => {
     askHandoff: data.askHandoff === true
   };
 };
+var GATE_WIRE = 1;
+var GATE_MAX_TOOL_INPUTS = 32;
+var GATE_BLOCK_REASON_MAX_LENGTH = 200;
+var claudePermissionDeniedOutput = (decision) => ({
+  hookSpecificOutput: {
+    hookEventName: "PermissionDenied",
+    retry: decision === "allow"
+  }
+});
+var CODEX_RESCUE_COMMAND_MAX_LENGTH = 2e3;
+var CODEX_RESCUE_APPROVED = "I approved this command in Pushary after the auto-reviewer denied it. If it is denied again, stop and tell me.";
+var codexRescueRetryInstruction = (command) => command.length <= CODEX_RESCUE_COMMAND_MAX_LENGTH ? `Run it again now, exactly as before: ${command}` : `Run it again now, exactly as before. It is too long to repeat in full here and begins: ${command.slice(0, CODEX_RESCUE_COMMAND_MAX_LENGTH)}`;
+var codexStopRescueOutput = (decision, command) => decision === "allow" ? { decision: "block", reason: `${CODEX_RESCUE_APPROVED} ${codexRescueRetryInstruction(command)}` } : { continue: true };
 var stoppedOutput = (output, stopReason) => ({ ...output, continue: false, stopReason });
 var claudePreToolUseOutput = (decision, reason, updatedInput) => ({
   hookSpecificOutput: {
@@ -1387,6 +1445,8 @@ var gateOutputFor = (source, event, decision, reason) => {
       output = claudePreToolUseOutput(decision, reason);
     } else if (event === "PermissionRequest" && decision !== "ask") {
       output = claudePermissionRequestOutput(decision, reason);
+    } else if (source === "claude" && event === "PermissionDenied" && decision !== "ask") {
+      output = claudePermissionDeniedOutput(decision);
     }
   } else if (source === "codex") {
     if (event === "PermissionRequest" && decision !== "ask") {
@@ -1582,6 +1642,11 @@ export {
   parseAgentQuestionAnswers,
   normalizeInstallSource,
   HOOK_BUDGETS,
+  HOOK_HOLD_BUDGET_ENV,
+  withHookHoldBudget,
+  hookCommandHoldBudget,
+  hookHoldBudgetProof,
+  hookHoldWindowMs,
   hookWaitDeadline,
   hookWaitClamped,
   effectiveWaitSeconds,
@@ -1605,11 +1670,20 @@ export {
   KILL_REASON,
   isPusharyOwnTool,
   shouldDeferToNativeMode,
-  ASKED_IN_EVERY_MODE_TOOLS,
+  CODEX_RESCUE_TOOL_NAME,
+  isBlockedActionRequest,
+  BLOCKED_ACTION_GRANT_TTL_SECONDS,
+  blockedActionIdentity,
   PRETOOLUSE_GATED_TOOLS,
   isPermissionRequestOwnedByPreToolUse,
+  CLAUDE_PRETOOLUSE_MATCHER,
   resolveGate,
   modeStateFromResponse,
+  GATE_WIRE,
+  GATE_MAX_TOOL_INPUTS,
+  GATE_BLOCK_REASON_MAX_LENGTH,
+  claudePermissionDeniedOutput,
+  codexStopRescueOutput,
   stoppedOutput,
   claudePreToolUseOutput,
   PENDING_COMMAND_PREFIX,

package/dist/{chunk-ATKGKAP6.js → chunk-QXIF6R4P.js}

@@ -1,16 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-QV266EGS.js";
+} from "./chunk-HFQ7WSHZ.js";
 import {
-  guardBinary
-} from "./chunk-3AJIK5AO.js";
+  guardBinary,
+  holdBudgetOf,
+  isProtectedByScope,
+  registerHookEntry
+} from "./chunk-XL3RKJYQ.js";
 import {
-  isProtectedByScope
-} from "./chunk-NOVA7KZ2.js";
-import {
-  HOOK_LOCATOR_BINARY
-} from "./chunk-MC5WUOJJ.js";
+  HOOK_LOCATOR_BINARY,
+  withHookHoldBudget
+} from "./chunk-OUAE3GKO.js";
 
 // src/claude-config.ts
 import { join } from "path";
@@ -126,12 +127,14 @@ var addPusharyHooks = (settings, binDir, version = null) => {
   const hooks = ensureRecord(settings, "hooks");
   const supported = new Map(supportedClaudeEvents(version).map((hook) => [hook.event, hook]));
   for (const known of CLAUDE_HOOK_EVENTS) {
-    const current = hooks[known.event];
-    const others = (Array.isArray(current) ? current : []).filter((item) => !isPusharyHook(item));
+    const current = Array.isArray(hooks[known.event]) ? hooks[known.event] : [];
     const definition = supported.get(known.event);
     if (definition) {
-      hooks[known.event] = [...others, entry(definition, resolve)];
-    } else if (others.length > 0) {
+      hooks[known.event] = registerHookEntry(current, isPusharyHook, entry(definition, resolve));
+      continue;
+    }
+    const others = current.filter((item) => !isPusharyHook(item));
+    if (others.length > 0) {
       hooks[known.event] = others;
     } else {
       delete hooks[known.event];
@@ -142,7 +145,7 @@ var entry = (definition, resolve) => ({
   ...definition.matcher ? { matcher: definition.matcher } : {},
   hooks: [{
     type: "command",
-    command: resolve(definition.binary),
+    command: withHookHoldBudget(resolve(definition.binary), holdBudgetOf(definition)),
     timeout: definition.timeout
   }]
 });

package/dist/chunk-SI7GYBQP.js

@@ -0,0 +1,15 @@
+import {
+  HOOK_HOLD_BUDGET_ENV,
+  hookHoldBudgetProof
+} from "./chunk-OUAE3GKO.js";
+
+// src/hold-budget.ts
+var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {
+  const proof = hookHoldBudgetProof(args, env);
+  delete env[HOOK_HOLD_BUDGET_ENV];
+  return proof;
+};
+
+export {
+  takeHookHoldBudget
+};

package/dist/{chunk-VMQU7YEJ.js → chunk-SJLGOVC6.js}

@@ -4,7 +4,7 @@ import {
   resolveInstallSourceFor,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VZD2GEKB.js";
 import {
   configFilePath
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-54W7ELDQ.js → chunk-TZHDKRMG.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-L4ZCFMWW.js";
+} from "./chunk-XL3RKJYQ.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-F4TMY6XI.js → chunk-V47GITZV.js}

@@ -1,9 +1,9 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-U5RIXR7I.js";
+} from "./chunk-HB2KB7QL.js";
 import {
   codexHomeFrom
-} from "./chunk-NOVA7KZ2.js";
+} from "./chunk-XL3RKJYQ.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";
@@ -264,7 +264,7 @@ You have Pushary MCP tools that reach the user on their phone. Use them proactiv
 
 - When you need the user to make a decision or answer a clarifying question, call \`ask_user\` instead of guessing or stalling. Use type "confirm" for yes/no, "select" for a fixed set of options, and "input" for free text. Read \`answered\`, \`status\` and the returned handoff instead of assuming the tool blocked. Silence is not consent; choice/text answers do not authorize a separate action.
 - Ask once, on one channel. If you also have a built-in way to prompt the user, use that or \`ask_user\` for a given question, never both. \`ask_user\` is the one that reaches the user when they are away from this machine, so prefer it. Raising both strands the user in whichever prompt you are not waiting on.
-- Honor authorization already granted in this session. Ask before a risky or irreversible action outside that authorization, or when an enforced host policy requires it. Do not ask again for an already authorized step, and never bypass an enforced gate.
+- Honor authorization already granted in this session. Ask before a risky or irreversible action outside that authorization, or when an enforced host policy requires it. Do not ask again for an already authorized step, and never bypass an enforced gate. When a Pushary hook result says the user approved a specific command after a denial, rerunning that exact command is the approved path and not a bypass of that gate.
 - Call \`propose_scope\` only for an unresolved or requested file boundary. A ratified scope narrows what may proceed; it does not bypass other approval rules. Do not add a plan approval merely because work spans several files, and do not propose a new scope mid-run just to widen it. Let the installed gate request any scope expansion before the edit executes.
 - When you are blocked, stuck, or hit an error you cannot resolve on your own, call \`send_notification\` so the user knows, and call \`ask_user\` if you need a decision to continue.
 - When meaningful work finishes while the user is away, or they requested an alert, call \`send_notification\` so the user knows it is done. Skip trivial completions and duplicate reports to someone already reading. Always pass \`context\` with a \`type\` of "task_complete", "error" or "info": it is what tells Pushary this is a task update, so the user's own setting for where updates land can route it.

package/dist/{chunk-L7NOG547.js → chunk-VZD2GEKB.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-MC5WUOJJ.js";
+} from "./chunk-OUAE3GKO.js";
 
 // src/cli/fsx.ts
 import { copyFileSync, existsSync, fsyncSync, mkdirSync, openSync, closeSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";

package/dist/{chunk-R3OZ5ISU.js → chunk-W2MG2P46.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-XZWUOCJZ.js";
+} from "./chunk-LBNAGGLV.js";
 import {
   isBridgeLocator
-} from "./chunk-QJPYJVL3.js";
+} from "./chunk-IRLTW6KF.js";
 import {
   pusharyHookExecutable
-} from "./chunk-QD73WATQ.js";
+} from "./chunk-6LRGZJFB.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-GOPIMNVC.js";
+} from "./chunk-2GLOHBYB.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-E47WV7BJ.js → chunk-WU6LSXJ6.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-NOVA7KZ2.js";
+} from "./chunk-XL3RKJYQ.js";
 import {
   writeFileAtomic
-} from "./chunk-L7NOG547.js";
+} from "./chunk-VZD2GEKB.js";
 
 // src/identity.ts
 import { randomUUID } from "crypto";