@pushary/agent-hooks 1.4.0 → 1.4.2

package/dist/bin/pushary-stopfailure-hook.js

@@ -2,42 +2,42 @@
 import {
   activeHookSource,
   activeIdentity
-} from "../chunk-HGN6VZTY.js";
-import "../chunk-5IBVIMWT.js";
+} from "../chunk-VIOL2DJS.js";
+import "../chunk-II7PUMPB.js";
 import {
   readHookInput
-} from "../chunk-ZIGGEKZW.js";
-import "../chunk-ESLLVHDY.js";
+} from "../chunk-JVTOML54.js";
+import "../chunk-UJBZIKSY.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-UTYTPDWN.js";
-import "../chunk-5MSBI6NP.js";
-import "../chunk-YYRZPEMA.js";
-import "../chunk-O6RN46OS.js";
-import "../chunk-RGZY77CD.js";
-import "../chunk-A7XIL2WD.js";
-import "../chunk-7PQZYCEP.js";
-import "../chunk-S3EUZZJB.js";
+import "../chunk-4ZDKSDVW.js";
+import "../chunk-DY4ILT6L.js";
+import "../chunk-ZVY25BMK.js";
+import "../chunk-WPVHRUDT.js";
+import "../chunk-BZ4GDOJX.js";
+import "../chunk-LPYCPFBZ.js";
+import "../chunk-MW6ZPC6R.js";
+import "../chunk-GZ7E6VOB.js";
 import "../chunk-EQRS3SGM.js";
-import "../chunk-BYAXXBNO.js";
+import "../chunk-4BROEAKH.js";
 import "../chunk-XHKBHWLX.js";
 import {
   handleStopFailure
-} from "../chunk-IF46POXX.js";
-import "../chunk-KZIXHLPQ.js";
+} from "../chunk-G653QPTR.js";
+import "../chunk-YXP3WPAI.js";
 import "../chunk-LGXUGYUH.js";
-import "../chunk-RQM5SMMR.js";
-import "../chunk-UCGQEAKZ.js";
+import "../chunk-NHTAHAIS.js";
+import "../chunk-TRLFZKVG.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-NYHNLMQO.js";
+import "../chunk-FU2DFEAZ.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-P4JVVJ2D.js";
+import "../chunk-UM5J3J4V.js";
 import "../chunk-T7E75EKA.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-7IEB2GV4.js";
+import "../chunk-SOUZBGYJ.js";
 
 // bin/pushary-stopfailure-hook.ts
 var AGENT = activeIdentity(process.argv);

package/dist/bin/pushary-transcript-register.js

@@ -1,31 +1,31 @@
 #!/usr/bin/env node
 import {
   registerTranscript
-} from "../chunk-ESLLVHDY.js";
+} from "../chunk-UJBZIKSY.js";
 import "../chunk-SGZJ5LYH.js";
-import "../chunk-UTYTPDWN.js";
-import "../chunk-5MSBI6NP.js";
-import "../chunk-YYRZPEMA.js";
-import "../chunk-O6RN46OS.js";
-import "../chunk-RGZY77CD.js";
-import "../chunk-A7XIL2WD.js";
-import "../chunk-7PQZYCEP.js";
-import "../chunk-S3EUZZJB.js";
+import "../chunk-4ZDKSDVW.js";
+import "../chunk-DY4ILT6L.js";
+import "../chunk-ZVY25BMK.js";
+import "../chunk-WPVHRUDT.js";
+import "../chunk-BZ4GDOJX.js";
+import "../chunk-LPYCPFBZ.js";
+import "../chunk-MW6ZPC6R.js";
+import "../chunk-GZ7E6VOB.js";
 import "../chunk-EQRS3SGM.js";
-import "../chunk-BYAXXBNO.js";
+import "../chunk-4BROEAKH.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-KZIXHLPQ.js";
-import "../chunk-RQM5SMMR.js";
-import "../chunk-UCGQEAKZ.js";
+import "../chunk-YXP3WPAI.js";
+import "../chunk-NHTAHAIS.js";
+import "../chunk-TRLFZKVG.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-NYHNLMQO.js";
+import "../chunk-FU2DFEAZ.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-P4JVVJ2D.js";
+import "../chunk-UM5J3J4V.js";
 import "../chunk-T7E75EKA.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-7IEB2GV4.js";
+import "../chunk-SOUZBGYJ.js";
 
 // bin/pushary-transcript-register.ts
 var raw = "";

package/dist/bin/pushary-transcripts.js

@@ -6,18 +6,18 @@ import {
 } from "../chunk-SGZJ5LYH.js";
 import {
   transcriptsEnabled
-} from "../chunk-BYAXXBNO.js";
+} from "../chunk-4BROEAKH.js";
 import {
   exitOnHelpFlag
 } from "../chunk-TWWLVOPB.js";
 import "../chunk-FAH3D74E.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-NYHNLMQO.js";
+import "../chunk-FU2DFEAZ.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-P4JVVJ2D.js";
+import "../chunk-UM5J3J4V.js";
 import "../chunk-T7E75EKA.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-7IEB2GV4.js";
+import "../chunk-SOUZBGYJ.js";
 
 // bin/pushary-transcripts.ts
 exitOnHelpFlag("transcripts");

package/dist/bin/pushary-upgrade.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import {
   reapplyAllAgents
-} from "../chunk-S3CLZSV3.js";
-import "../chunk-SGZ3IAWF.js";
+} from "../chunk-ACYIZ3KH.js";
+import "../chunk-PC6DU5C4.js";
 import {
   waitForMachineReadiness
-} from "../chunk-UIN3RD2U.js";
-import "../chunk-5IBVIMWT.js";
+} from "../chunk-VW66JEGU.js";
+import "../chunk-II7PUMPB.js";
 import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-GLPWCQ6V.js";
-import "../chunk-O6RN46OS.js";
+} from "../chunk-TYEO6T5J.js";
+import "../chunk-WPVHRUDT.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
@@ -23,13 +23,13 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-RGZY77CD.js";
-import "../chunk-A7XIL2WD.js";
+} from "../chunk-BZ4GDOJX.js";
+import "../chunk-LPYCPFBZ.js";
 import {
   needsShell
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-KZIXHLPQ.js";
-import "../chunk-RQM5SMMR.js";
+import "../chunk-YXP3WPAI.js";
+import "../chunk-NHTAHAIS.js";
 import {
   claudeJson,
   codexConfigToml,
@@ -39,7 +39,7 @@ import {
   npmErrorMessage,
   resolveGlobalBinary,
   vscodePluginDir
-} from "../chunk-UCGQEAKZ.js";
+} from "../chunk-TRLFZKVG.js";
 import {
   exitOnHelpFlag
 } from "../chunk-TWWLVOPB.js";
@@ -49,14 +49,14 @@ import {
 } from "../chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "../chunk-NYHNLMQO.js";
+} from "../chunk-FU2DFEAZ.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-P4JVVJ2D.js";
+import "../chunk-UM5J3J4V.js";
 import "../chunk-T7E75EKA.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
-import "../chunk-7IEB2GV4.js";
+import "../chunk-SOUZBGYJ.js";
 
 // bin/pushary-upgrade.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-wait.js

@@ -4,8 +4,8 @@ import {
 } from "../chunk-CVWG2N3Y.js";
 import {
   exitOnFailedResponse
-} from "../chunk-GS5EI2YL.js";
-import "../chunk-D4TNSUDY.js";
+} from "../chunk-NOWZUGZW.js";
+import "../chunk-NY6XQ6CA.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -28,7 +28,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-7IEB2GV4.js";
+import "../chunk-SOUZBGYJ.js";
 
 // bin/pushary-wait.ts
 exitOnHelpFlag("wait");

package/dist/{chunk-VENQSVKA.js → chunk-25RTLTQD.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-NYHNLMQO.js";
+} from "./chunk-FU2DFEAZ.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-H25UB3CG.js → chunk-2V2IKOGJ.js}

@@ -3,7 +3,7 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-S3EUZZJB.js";
+} from "./chunk-GZ7E6VOB.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords

package/dist/{chunk-BYAXXBNO.js → chunk-4BROEAKH.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-NYHNLMQO.js";
+} from "./chunk-FU2DFEAZ.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-UTYTPDWN.js → chunk-4ZDKSDVW.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-5MSBI6NP.js";
+} from "./chunk-DY4ILT6L.js";
 import {
   isBridgeLocator
-} from "./chunk-YYRZPEMA.js";
+} from "./chunk-ZVY25BMK.js";
 import {
   pusharyHookExecutable
-} from "./chunk-O6RN46OS.js";
+} from "./chunk-WPVHRUDT.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-7PQZYCEP.js";
+} from "./chunk-MW6ZPC6R.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-2TOTCUJC.js → chunk-55KW4FLG.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-5MSBI6NP.js";
+} from "./chunk-DY4ILT6L.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-S3CLZSV3.js → chunk-ACYIZ3KH.js}

@@ -1,18 +1,18 @@
 import {
   detectClaudeVersion
-} from "./chunk-SGZ3IAWF.js";
+} from "./chunk-PC6DU5C4.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-5IBVIMWT.js";
+} from "./chunk-II7PUMPB.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
   codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-O6RN46OS.js";
+} from "./chunk-WPVHRUDT.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -24,7 +24,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-A7XIL2WD.js";
+} from "./chunk-LPYCPFBZ.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -44,7 +44,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-RGZY77CD.js → chunk-BZ4GDOJX.js}

@@ -4,17 +4,17 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "./chunk-RQM5SMMR.js";
+} from "./chunk-NHTAHAIS.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "./chunk-NYHNLMQO.js";
+} from "./chunk-FU2DFEAZ.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-5MSBI6NP.js → chunk-DY4ILT6L.js}

@@ -7,7 +7,7 @@ import {
 import {
   COMPATIBLE_AGENT_TYPES,
   isValidApiKey
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", ...COMPATIBLE_AGENT_TYPES, "custom"];

package/dist/{chunk-Q4UAMWXK.js → chunk-F4UWL4NY.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-NYHNLMQO.js → chunk-FU2DFEAZ.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-P4JVVJ2D.js";
+} from "./chunk-UM5J3J4V.js";
 import {
   backupFile,
   readJsonSafe,

package/dist/{chunk-IF46POXX.js → chunk-G653QPTR.js}

@@ -1,7 +1,7 @@
 import {
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS
-} from "./chunk-KZIXHLPQ.js";
+} from "./chunk-YXP3WPAI.js";
 import {
   cancelQuestion,
   isPolicyConfig,
@@ -10,13 +10,13 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-RQM5SMMR.js";
+} from "./chunk-NHTAHAIS.js";
 import {
   withRetry
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-P4JVVJ2D.js";
+} from "./chunk-UM5J3J4V.js";
 import {
   getApiKey,
   getBaseUrl
@@ -44,7 +44,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   toToolLookup
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/policy.ts
 import { createHash } from "crypto";
@@ -1368,20 +1368,23 @@ var phoneDrivenEnv = (base) => ({
 import { join as join5 } from "path";
 import { tmpdir as tmpdir4 } from "os";
 import { createHash as createHash4 } from "crypto";
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, statSync as statSync4, writeFileSync as writeFileSync4, rmSync as rmSync2 } from "fs";
 var THROTTLE_DIR = join5(tmpdir4(), "pushary-throttle");
 var markerPath = (key) => join5(THROTTLE_DIR, createHash4("sha256").update(key).digest("hex").slice(0, 16));
-var throttlePass = (key, windowMs) => {
+var claimThrottle = (key, windowMs) => {
   try {
     const path = markerPath(key);
-    if (existsSync4(path) && Date.now() - statSync4(path).mtimeMs < windowMs) return false;
+    if (existsSync4(path) && Date.now() - statSync4(path).mtimeMs < windowMs) return "throttled";
     mkdirSync3(THROTTLE_DIR, { recursive: true });
     writeFileSync4(path, "", "utf-8");
-    return true;
+    return "passed";
   } catch {
-    return false;
+    return "unavailable";
   }
 };
+var releaseThrottle = (key) => {
+  rmSync2(markerPath(key), { force: true });
+};
 
 // src/events.ts
 import { basename as basename3, join as join6 } from "path";
@@ -1688,7 +1691,7 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
     }
     const isMirrorOnly = NON_GATED_MIRROR_TOOLS.has(input.tool_name);
     const decisionSource = isMirrorOnly ? void 0 : deriveDecisionSource(lookup.tool, lookup.input, liveMode, agent.type, input.cwd, input.session_id);
-    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && throttlePass(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, agent.type, input.cwd, input.session_id) : void 0;
+    const beacon = !isMirrorOnly && decisionSource === "policy_auto" && claimThrottle(`autodecision:${sessionKey}:${lookup.tool}`, AUTO_DECISION_WINDOW_MS) === "passed" ? deriveAutoDecisionBeacon(lookup.tool, lookup.input, liveMode, agent.type, input.cwd, input.session_id) : void 0;
     const toolReport = reportEvent({
       event: isError ? "tool_error" : "tool_complete",
       occurredAt,
@@ -1704,7 +1707,7 @@ var handlePostToolUse = async (input, agent = CLAUDE_CODE_AGENT) => {
       usage: deriveUsage(input.transcript_path, input.session_id)
     }, { maxAttempts: 1, budgetMs: Math.min(DRAINING_REPORT_BUDGET_MS, Math.max(0, deadline - Date.now())), signal });
     const extraReports = [];
-    if (throttlePass(`hookactive:${sessionKey}`, HOOK_ACTIVE_WINDOW_MS)) {
+    if (claimThrottle(`hookactive:${sessionKey}`, HOOK_ACTIVE_WINDOW_MS) === "passed") {
       extraReports.push(
         reportEvent(
           {
@@ -1898,7 +1901,7 @@ var handleNotification = async (input, agent = CLAUDE_CODE_AGENT) => {
     }, { maxAttempts: 1, timeoutMs: 2500, signal }).catch(() => {
     });
     if (!teammateIdle && NOTIFICATION_PUSH_TYPES.has(notifType)) {
-      if (!throttlePass(`notify:${sessionKey}:${notifType}`, NOTIFICATION_THROTTLE_MS)) return;
+      if (claimThrottle(`notify:${sessionKey}:${notifType}`, NOTIFICATION_THROTTLE_MS) !== "passed") return;
       let apiKey;
       try {
         apiKey = getApiKey();
@@ -1990,7 +1993,8 @@ export {
   markPendingCommandFailed,
   removePendingCommand,
   repoKeyFor,
-  throttlePass,
+  claimThrottle,
+  releaseThrottle,
   readLastUserPrompt,
   CODEX_AGENT,
   codexAllow,

package/dist/{chunk-S3EUZZJB.js → chunk-GZ7E6VOB.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-5IBVIMWT.js → chunk-II7PUMPB.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-A7XIL2WD.js";
+} from "./chunk-LPYCPFBZ.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-ZIGGEKZW.js → chunk-JVTOML54.js}

@@ -1,9 +1,9 @@
 import {
   registerTranscript
-} from "./chunk-ESLLVHDY.js";
+} from "./chunk-UJBZIKSY.js";
 import {
   degradedLine
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-5F5QQMCA.js → chunk-LEAAERSQ.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-A7XIL2WD.js → chunk-LPYCPFBZ.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-KZIXHLPQ.js";
+} from "./chunk-YXP3WPAI.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-XJWMPQ6X.js → chunk-M5CTUFF3.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-O5L2OJBB.js → chunk-MUVTZNJW.js}

@@ -1,12 +1,12 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-Q4UAMWXK.js";
+} from "./chunk-F4UWL4NY.js";
 import {
   codexHomeFrom
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-7PQZYCEP.js → chunk-MW6ZPC6R.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-RQM5SMMR.js → chunk-NHTAHAIS.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-UCGQEAKZ.js";
+} from "./chunk-TRLFZKVG.js";
 import {
   writeFileAtomic
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-GS5EI2YL.js → chunk-NOWZUGZW.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-D4TNSUDY.js";
+} from "./chunk-NY6XQ6CA.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-D4TNSUDY.js → chunk-NY6XQ6CA.js}

@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-7IEB2GV4.js";
+} from "./chunk-SOUZBGYJ.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-SGZ3IAWF.js → chunk-PC6DU5C4.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-A7XIL2WD.js";
+} from "./chunk-LPYCPFBZ.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-7IEB2GV4.js → chunk-SOUZBGYJ.js}

@@ -458,6 +458,9 @@ var degradedPayload = (subsystem, report) => ({
 });
 var degradedLine = (subsystem, report) => `${DEGRADED_PREFIX} ${JSON.stringify(degradedPayload(subsystem, report))}`;
 
+// ../contracts/src/setup-wire.ts
+var PAIR_TTL_SECONDS = 900;
+
 // ../contracts/src/index.ts
 var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
@@ -1228,6 +1231,7 @@ var computeDeltaSignal = (input) => {
   return { deltaSignal: "match", deltaScore: 0, remoteApprove: !destructive };
 };
 var SECRET_REDACTION_RULES = [
+  { pattern: /\bpk_[A-Za-z0-9_]+\.[A-Za-z0-9_]+/g, replacement: "[redacted]" },
   { pattern: /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, replacement: "[redacted key]" },
   { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, replacement: "[redacted]" },
   { pattern: /\b[spr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g, replacement: "[redacted]" },
@@ -2085,6 +2089,7 @@ export {
   hookWritePath,
   isHookActivationReport,
   hookActivationResult,
+  PAIR_TTL_SECONDS,
   normalizeKeyScope,
   parseAgentQuestion,
   parseAgentQuestions,