@pushary/agent-hooks 1.7.1 → 1.7.3

package/dist/{chunk-JTQDP4ZL.js → chunk-DUQO4C4I.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-P5CBNSYL.js";
+} from "./chunk-OVC5QXN5.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-OAL44FM2.js";
+} from "./chunk-R6OYCUNK.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-G4GLCLKK.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-3QE3BHBW.js → chunk-EADXTSHE.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-XMN37YJH.js";
+} from "./chunk-BGBLLHZ4.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-G4GLCLKK.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-43SSQCWO.js → chunk-EEEJ2JIL.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-JTQDP4ZL.js";
+} from "./chunk-DUQO4C4I.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-OAL44FM2.js";
+} from "./chunk-R6OYCUNK.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-G4GLCLKK.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-4C4NRDIC.js → chunk-EUGNVLMG.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-G4GLCLKK.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-WSC53O7I.js → chunk-G3OMOTJ4.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-WZWXBTRF.js";
+} from "./chunk-MIXWMA73.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-454KMJHF.js";
+} from "./chunk-MZBRL5H5.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-G4GLCLKK.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-XFNVG3OV.js → chunk-G4GLCLKK.js}

@@ -455,9 +455,42 @@ var compatibleTargetFiles = (profile) => {
 };
 
 // ../contracts/src/redaction.ts
-var SECRET_REDACTION_RULES = [
+var CREDENTIAL_NAME = String.raw`(?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)["']?`;
+var CREDENTIAL_KEY = String.raw`${CREDENTIAL_NAME}\s*[=:]\s*`;
+var DISPLAYED_CREDENTIAL_KEY = String.raw`${CREDENTIAL_NAME}(?:[ \t]*:[ \t]*|[ \t]+=[ \t]*|=)`;
+var SHELL_INERT_UNIT = String.raw`(?:[A-Za-z0-9_\-./+=:@%^!#]|\\[^\s'"])`;
+var SHELL_INERT_SINGLE_QUOTED_UNIT = String.raw`[A-Za-z0-9_\-./+=:@%^!#\\]`;
+var SHELL_INERT_URL_PASSWORD_UNIT = String.raw`(?:[A-Za-z0-9_\-.+=:%^!#]|\\[^\s'"@/])`;
+var PEM_LINE_BREAK = String.raw`(?:\r?\n|(?:\\r)?\\n)`;
+var credentialAssignmentRule = (key, doubleQuoted, singleQuoted, bare) => ({
+  pattern: new RegExp(String.raw`(${key})(?:(")${doubleQuoted}|(')${singleQuoted}|(["']?)${bare})`, "gi"),
+  replacement: "$1$2$3$4[redacted]$2$3"
+});
+var DISPLAYED_SECRET_SHAPES = {
+  privateKeyBody: String.raw`${PEM_LINE_BREAK}?(?:(?:Proc-Type|DEK-Info): [A-Za-z0-9,-]+${PEM_LINE_BREAK})*(?:[A-Za-z0-9+/=\r\n]|\\[rn])*?`,
+  urlPassword: `${SHELL_INERT_URL_PASSWORD_UNIT}+`,
+  authorizationValue: `${SHELL_INERT_UNIT}+`,
+  credentialAssignment: credentialAssignmentRule(
+    DISPLAYED_CREDENTIAL_KEY,
+    `${SHELL_INERT_UNIT}*"`,
+    `${SHELL_INERT_SINGLE_QUOTED_UNIT}*'`,
+    `${SHELL_INERT_UNIT}+`
+  )
+};
+var CUT_OFF_SECRET_SHAPES = {
+  privateKeyBody: String.raw`[\s\S]*?`,
+  urlPassword: String.raw`[^\s@/]+`,
+  authorizationValue: String.raw`\S+`,
+  credentialAssignment: credentialAssignmentRule(
+    CREDENTIAL_KEY,
+    String.raw`(?:\\[\s\S]|[^"\\])*(?:"|\\?$)`,
+    "[^']*(?:'|$)",
+    String.raw`\S+`
+  )
+};
+var secretRedactionRules = (shapes) => [
   { pattern: /\bpk_[A-Za-z0-9_]+\.[A-Za-z0-9_]+/g, replacement: "[redacted]" },
-  { pattern: /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g, replacement: "[redacted key]" },
+  { pattern: new RegExp(String.raw`-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----${shapes.privateKeyBody}-----END[A-Z0-9 ]*PRIVATE KEY-----`, "g"), replacement: "[redacted key]" },
   { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, replacement: "[redacted]" },
   { pattern: /\b[spr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g, replacement: "[redacted]" },
   { pattern: /\bwhsec_[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
@@ -470,16 +503,17 @@ var SECRET_REDACTION_RULES = [
   { pattern: /\bnpm_[A-Za-z0-9]{36}\b/g, replacement: "[redacted]" },
   { pattern: /\bxai-[A-Za-z0-9]{16,}\b/g, replacement: "[redacted]" },
   { pattern: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, replacement: "[redacted]" },
-  { pattern: /\b([a-z][a-z0-9+.-]*:\/\/[^\s:/@]+:)[^\s@/]+@/gi, replacement: "$1[redacted]@" },
+  { pattern: new RegExp(String.raw`\b([a-z][a-z0-9+.-]*:\/\/[^\s:/@]+:)${shapes.urlPassword}@`, "gi"), replacement: "$1[redacted]@" },
   { pattern: /\bbearer\s+[A-Za-z0-9._~+/=-]+/gi, replacement: "bearer [redacted]" },
-  { pattern: /\bauthorization:\s*\S+/gi, replacement: "authorization: [redacted]" },
-  {
-    pattern: /((?:secret|token|password|passwd|api[_-]?key|access[_-]?key|client[_-]?secret|private[_-]?key)["']?\s*[=:]\s*)(?:(")(?:\\[\s\S]|[^"\\])*(?:"|\\?$)|(')[^']*(?:'|$)|\S+)/gi,
-    replacement: "$1$2$3[redacted]$2$3"
-  }
+  { pattern: new RegExp(String.raw`\bauthorization:\s*${shapes.authorizationValue}`, "gi"), replacement: "authorization: [redacted]" },
+  shapes.credentialAssignment
 ];
+var SECRET_REDACTION_RULES = secretRedactionRules(DISPLAYED_SECRET_SHAPES);
+var CUT_OFF_TEXT_REDACTION_RULES = secretRedactionRules(CUT_OFF_SECRET_SHAPES);
 var HIGH_ENTROPY_RULE = { pattern: /[A-Za-z0-9+/]{40,}={0,2}/g, replacement: "[redacted]" };
-var redactSecrets = (text) => SECRET_REDACTION_RULES.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
+var applyRedactionRules = (rules, text) => rules.reduce((acc, rule) => acc.replace(rule.pattern, rule.replacement), text);
+var redactSecrets = (text) => applyRedactionRules(SECRET_REDACTION_RULES, text);
+var redactSecretsFromContent = (text) => applyRedactionRules(CUT_OFF_TEXT_REDACTION_RULES, text);
 var redactSecretsDeep = (text) => redactSecrets(text).replace(HIGH_ENTROPY_RULE.pattern, HIGH_ENTROPY_RULE.replacement);
 
 // ../contracts/src/degraded.ts
@@ -2584,6 +2618,7 @@ export {
   hookCompatibleProfileBySource,
   compatibleTargetFiles,
   redactSecrets,
+  redactSecretsFromContent,
   redactSecretsDeep,
   degradedLine,
   hookWritePath,

package/dist/{chunk-62TEPRWQ.js → chunk-G62JL2NT.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-OAL44FM2.js";
+} from "./chunk-R6OYCUNK.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-QPR33SHS.js → chunk-G6RRVJOG.js}

@@ -1,21 +1,21 @@
 import {
   detectClaudeVersion
-} from "./chunk-Y6GKOZBT.js";
+} from "./chunk-IPSRMLCJ.js";
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-6SJQ442W.js";
+} from "./chunk-RLW3JWDY.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-WSC53O7I.js";
+} from "./chunk-G3OMOTJ4.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
   codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-XDASEYRS.js";
+} from "./chunk-WTJM7PSL.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -27,7 +27,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-WZWXBTRF.js";
+} from "./chunk-MIXWMA73.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -47,7 +47,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-454KMJHF.js";
+} from "./chunk-MZBRL5H5.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-Y6GKOZBT.js → chunk-IPSRMLCJ.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-WZWXBTRF.js";
+} from "./chunk-MIXWMA73.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-MCNS4725.js → chunk-IRZG3HEU.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-G4GLCLKK.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-55RO62FV.js → chunk-IWJKSIB4.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-YZKS3ME3.js";
+} from "./chunk-D6OODZCM.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-NID4UZDN.js → chunk-KEL5MXRL.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-G4GLCLKK.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-BYVB3RX3.js → chunk-KJXUIPS4.js}

@@ -3,14 +3,14 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-454KMJHF.js";
+} from "./chunk-MZBRL5H5.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "./chunk-T7E75EKA.js";
 import {
   ownPackageRoot
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-G4GLCLKK.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-SNWNA3MQ.js → chunk-LHC45YUC.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-454KMJHF.js";
+} from "./chunk-MZBRL5H5.js";
 import {
   readJsonSafe
 } from "./chunk-T7E75EKA.js";

package/dist/{chunk-XPTCPU6V.js → chunk-LPNJLKBQ.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-YZKS3ME3.js";
+} from "./chunk-D6OODZCM.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-WZWXBTRF.js → chunk-MIXWMA73.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-4C4NRDIC.js";
+} from "./chunk-EUGNVLMG.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-454KMJHF.js";
+} from "./chunk-MZBRL5H5.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-G4GLCLKK.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-454KMJHF.js → chunk-MZBRL5H5.js}

@@ -3,7 +3,7 @@ import {
   HOOK_LOCATOR_BINARY,
   isReleaseVersion,
   withHookHoldBudget
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-G4GLCLKK.js";
 
 // src/npm.ts
 import { execFileSync, execSync } from "child_process";
@@ -56,6 +56,32 @@ var resolvePathBinary = (name, platform = process.platform) => {
     return void 0;
   }
 };
+var NPM_MISSING_MESSAGE = "npm is not on PATH, and the hooks run from a global npm install.";
+var NPM_LOOKUP = process.platform === "win32" ? "where npm" : "command -v npm";
+var npmIsOnPath = () => {
+  try {
+    execSync(NPM_LOOKUP, { env: cleanNpmEnv(), stdio: "ignore", timeout: 5e3 });
+    return true;
+  } catch {
+    return false;
+  }
+};
+var GLOBAL_LIST_TIMEOUT_MS = 3e4;
+var globalPackageState = (name) => {
+  try {
+    const listing = JSON.parse(execNpm("list -g --depth=0 --json --no-workspaces", { timeout: GLOBAL_LIST_TIMEOUT_MS }).toString());
+    const dependencies = typeof listing === "object" && listing !== null && "dependencies" in listing ? listing.dependencies : void 0;
+    return typeof dependencies === "object" && dependencies !== null && name in dependencies ? "installed" : "absent";
+  } catch {
+    return "unknown";
+  }
+};
+var NpmMissingError = class extends Error {
+  constructor() {
+    super(NPM_MISSING_MESSAGE);
+    this.name = "NpmMissingError";
+  }
+};
 var resolveBinary = (name) => resolveGlobalBinary(name) ?? resolvePathBinary(name);
 var resolvePackageVersionFromBinary = (binary, packageName) => {
   try {
@@ -176,6 +202,7 @@ var installGlobally = (options) => {
     return installState.then((result) => result === "installed" ? "cached" : result);
   }
   const started = (async () => {
+    if (!npmIsOnPath()) throw new NpmMissingError();
     const pinned = process.env.PUSHARY_PIN_GLOBAL_VERSION !== "0";
     if (pinned && !needsGlobalInstall(
       options.version,
@@ -625,6 +652,7 @@ var autoUpdateLock = () => join3(pusharyDir(), "auto-update.lock");
 var autoUpdateLog = () => join3(pusharyDir(), "logs", "auto-update.log");
 var clientReportClaims = () => join3(pusharyDir(), "client-reports");
 var claudeRegistrationReceipt = () => join3(pusharyDir(), "setup", "claude-registration.json");
+var hermesConfig = () => join3(homedir2(), ".hermes", "config.yaml");
 var hermesConfigReceipt = () => join3(pusharyDir(), "setup", "hermes-config.json");
 var fxQuestionRuleReceipt = () => join3(pusharyDir(), "setup", "fx-question-rule.json");
 var hookTakeoverReceipt = (agent) => join3(pusharyDir(), "setup", `hook-takeover-${agent}.json`);
@@ -642,11 +670,15 @@ export {
   registeredCommands,
   namesOurBinary,
   registrationHolderOf,
+  AGENT_HOOKS_PACKAGE,
   LATEST_TAG,
   npmErrorMessage,
   execNpm,
   resolveGlobalBinary,
   resolvePathBinary,
+  npmIsOnPath,
+  globalPackageState,
+  NpmMissingError,
   resolveBinary,
   resolvePackageVersionFromBinary,
   resolveGlobalPackageVersion,
@@ -704,6 +736,7 @@ export {
   autoUpdateLog,
   clientReportClaims,
   claudeRegistrationReceipt,
+  hermesConfig,
   hermesConfigReceipt,
   fxQuestionRuleReceipt,
   hookTakeoverReceipt,

package/dist/{chunk-KSNAAMU5.js → chunk-N5MZH5A6.js}

@@ -4,18 +4,18 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   isNetworkFailure
-} from "./chunk-JTQDP4ZL.js";
+} from "./chunk-DUQO4C4I.js";
 import {
   clientReportClaims
-} from "./chunk-454KMJHF.js";
+} from "./chunk-MZBRL5H5.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-OAL44FM2.js";
+} from "./chunk-R6OYCUNK.js";
 import {
   CLIENT_REPORT_PATH,
   degradedLine
-} from "./chunk-XFNVG3OV.js";
+} from "./chunk-G4GLCLKK.js";
 
 // src/client-report-claim.ts
 import { createHash } from "crypto";

package/dist/chunk-N6IOSZOE.js

@@ -0,0 +1,185 @@
+// src/pending.ts
+import { join } from "path";
+import { homedir, tmpdir } from "os";
+import { createHash } from "crypto";
+import { existsSync, mkdirSync, writeFileSync, readFileSync, readdirSync, renameSync, unlinkSync, rmSync, statSync } from "fs";
+var PENDING_DIR = join(tmpdir(), "pushary-pending");
+var commandRoot = () => process.env.PUSHARY_COMMAND_DIR?.trim() || join(homedir(), ".pushary", "run", "commands");
+var DEFAULT_SESSION = "_no_session";
+var GRACE_MS = 10 * 60 * 1e3;
+var sanitize = (sessionId) => sessionId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || DEFAULT_SESSION;
+var dirFor = (sessionId) => join(PENDING_DIR, sanitize(sessionId));
+var commandDirFor = (sessionId, namespace = "") => join(
+  commandRoot(),
+  createHash("sha256").update(namespace).digest("hex").slice(0, 16),
+  sanitize(sessionId)
+);
+var legacyCommandFile = (sessionId, namespace = "") => join(commandDirFor(sessionId, namespace), "command.json");
+var commandFile = (sessionId, id, namespace = "") => join(commandDirFor(sessionId, namespace), `${createHash("sha256").update(id).digest("hex")}.json`);
+var readCommandFile = (file) => {
+  try {
+    const value = JSON.parse(readFileSync(file, "utf-8"));
+    if (typeof value.id !== "string" || typeof value.text !== "string" || typeof value.expiresAtMs !== "number") return null;
+    if (value.expiresAtMs <= Date.now()) {
+      unlinkSync(file);
+      return null;
+    }
+    return {
+      ...value,
+      delivered: value.delivered === true,
+      ...value.failed === true ? { failed: true } : {}
+    };
+  } catch {
+    return null;
+  }
+};
+var readPendingCommandById = (sessionId, id, namespace = "") => {
+  const current = readCommandFile(commandFile(sessionId, id, namespace));
+  if (current?.id === id) return current;
+  const legacy = readCommandFile(legacyCommandFile(sessionId, namespace));
+  return legacy?.id === id ? legacy : null;
+};
+var pruneExpiredCommands = (dir) => {
+  let files;
+  try {
+    files = readdirSync(dir).filter((file) => file.endsWith(".json"));
+  } catch {
+    return [];
+  }
+  return files.flatMap((file) => {
+    const command = readCommandFile(join(dir, file));
+    return command ? [command] : [];
+  });
+};
+var pruneExpiredCommandStore = () => {
+  let namespaces;
+  try {
+    namespaces = readdirSync(commandRoot(), { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const namespace of namespaces.filter((entry) => entry.isDirectory())) {
+    const namespaceDir = join(commandRoot(), namespace.name);
+    let sessions;
+    try {
+      sessions = readdirSync(namespaceDir, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const session of sessions.filter((entry) => entry.isDirectory())) {
+      pruneExpiredCommands(join(namespaceDir, session.name));
+    }
+  }
+};
+var readPendingCommand = (sessionId, namespace = "") => {
+  const commands = pruneExpiredCommands(commandDirFor(sessionId, namespace));
+  return commands.find((command) => !command.delivered && !command.failed) ?? commands[0] ?? null;
+};
+var savePendingCommand = (sessionId, command, namespace = "") => {
+  const dir = commandDirFor(sessionId, namespace);
+  try {
+    mkdirSync(dir, { recursive: true, mode: 448 });
+    pruneExpiredCommandStore();
+    if (readPendingCommandById(sessionId, command.id, namespace)) return false;
+    writeFileSync(commandFile(sessionId, command.id, namespace), JSON.stringify(command), { encoding: "utf-8", mode: 384, flag: "wx" });
+    return true;
+  } catch {
+    return false;
+  }
+};
+var updatePendingCommand = (sessionId, id, update, namespace = "") => {
+  const command = readPendingCommandById(sessionId, id, namespace);
+  if (!command) return false;
+  const currentFile = commandFile(sessionId, id, namespace);
+  const file = existsSync(currentFile) ? currentFile : legacyCommandFile(sessionId, namespace);
+  const temporary = `${file}.${process.pid}.tmp`;
+  try {
+    writeFileSync(temporary, JSON.stringify({ ...command, ...update, text: "" }), { encoding: "utf-8", mode: 384 });
+    renameSync(temporary, file);
+    return true;
+  } catch {
+    try {
+      unlinkSync(temporary);
+    } catch {
+    }
+    return false;
+  }
+};
+var markPendingCommandDelivered = (sessionId, id, namespace = "") => updatePendingCommand(sessionId, id, { delivered: true, failed: void 0 }, namespace);
+var markPendingCommandFailed = (sessionId, id, namespace = "") => updatePendingCommand(sessionId, id, { delivered: false, failed: true }, namespace);
+var removePendingCommand = (sessionId, id, namespace = "") => {
+  if (!readPendingCommandById(sessionId, id, namespace)) return;
+  try {
+    unlinkSync(commandFile(sessionId, id, namespace));
+  } catch {
+  }
+  try {
+    if (readCommandFile(legacyCommandFile(sessionId, namespace))?.id === id) {
+      unlinkSync(legacyCommandFile(sessionId, namespace));
+    }
+  } catch {
+  }
+};
+var isDefaultSession = (sessionId) => sanitize(sessionId) === DEFAULT_SESSION;
+var listPendingQuestionsForToolUse = (sessionId, toolUseId) => {
+  if (!toolUseId) return [];
+  const dir = dirFor(sessionId);
+  let files;
+  try {
+    files = readdirSync(dir);
+  } catch {
+    return [];
+  }
+  return files.filter((name) => {
+    try {
+      return readFileSync(join(dir, name), "utf-8") === toolUseId;
+    } catch {
+      return false;
+    }
+  });
+};
+var listPendingQuestions = (sessionId) => {
+  const dir = dirFor(sessionId);
+  let files;
+  try {
+    files = readdirSync(dir);
+  } catch {
+    return [];
+  }
+  if (!isDefaultSession(sessionId)) return files;
+  const cutoff = Date.now() - GRACE_MS;
+  return files.filter((name) => {
+    try {
+      return statSync(join(dir, name)).mtimeMs < cutoff;
+    } catch {
+      return false;
+    }
+  });
+};
+var removePendingQuestion = (sessionId, correlationId) => {
+  try {
+    unlinkSync(join(dirFor(sessionId), correlationId));
+  } catch {
+  }
+};
+var removePendingSession = (sessionId) => {
+  try {
+    rmSync(dirFor(sessionId), { recursive: true, force: true });
+  } catch {
+  }
+};
+
+export {
+  DEFAULT_SESSION,
+  readPendingCommandById,
+  readPendingCommand,
+  savePendingCommand,
+  markPendingCommandDelivered,
+  markPendingCommandFailed,
+  removePendingCommand,
+  isDefaultSession,
+  listPendingQuestionsForToolUse,
+  listPendingQuestions,
+  removePendingQuestion,
+  removePendingSession
+};

package/dist/{chunk-XPMOCJHN.js → chunk-NOI3XTCY.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-454KMJHF.js";
+} from "./chunk-MZBRL5H5.js";
 
 // src/bell/install.ts
 import { join } from "path";