@pushary/agent-hooks 1.9.73 → 1.9.75

package/dist/{chunk-TFDMJHAB.js → chunk-R7V6BPEV.js}

@@ -1,6 +1,6 @@
 import {
   isFile
-} from "./chunk-RZVWEDIS.js";
+} from "./chunk-AUDYAVNM.js";
 
 // src/claude-native-install.ts
 import { accessSync, constants } from "fs";

package/dist/{chunk-S63VIM7E.js → chunk-RPKFXNOJ.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-NGNBX3YH.js";
+} from "./chunk-LIDUPDEY.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-56GK65Z6.js → chunk-SFJOGZQV.js}

@@ -1,10 +1,10 @@
 import {
   pusharyDir
-} from "./chunk-7S46LCKD.js";
+} from "./chunk-2J4IVUEA.js";
 import {
   readJsonSafe,
   writeFileAtomic
-} from "./chunk-RZVWEDIS.js";
+} from "./chunk-AUDYAVNM.js";
 import {
   DECLINED_AGENTS_FILE,
   DISCONNECT_AGENT_IDS,
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-AVHL2ZTS.js";
+} from "./chunk-QRS7FQHE.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-VJUDBZGC.js → chunk-SHW6KK2K.js}

@@ -7,10 +7,10 @@ import {
   codexHome,
   codexHooksJsonIn,
   isPusharyCodexCommand
-} from "./chunk-7S46LCKD.js";
+} from "./chunk-2J4IVUEA.js";
 import {
   resolvePathBinary
-} from "./chunk-RZVWEDIS.js";
+} from "./chunk-AUDYAVNM.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";

package/dist/{chunk-S7VMHSJW.js → chunk-SIJHPGUW.js}

@@ -1,19 +1,19 @@
 import {
   pusharyFetch
-} from "./chunk-O4EAMVSC.js";
+} from "./chunk-SOHJ37NA.js";
+import {
+  getBaseUrl
+} from "./chunk-53D6FFVE.js";
 import {
   NetworkError
 } from "./chunk-PPY5N2E6.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
-import {
-  getBaseUrl
-} from "./chunk-R5PZPROX.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-AVHL2ZTS.js";
+} from "./chunk-QRS7FQHE.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-7RX5TOU3.js → chunk-SNUHX5GQ.js}

@@ -1,24 +1,24 @@
 import {
   APPROVAL_RULES_PATH,
   canChangeApprovalSettings
-} from "./chunk-TQ2L3ECX.js";
+} from "./chunk-2DB7TBA7.js";
 import {
   callMcpTool
-} from "./chunk-7M4AA7QF.js";
+} from "./chunk-32JJ5KV3.js";
 import {
   absoluteUrl
-} from "./chunk-S7VMHSJW.js";
+} from "./chunk-SIJHPGUW.js";
 import {
   getBaseUrl
-} from "./chunk-R5PZPROX.js";
+} from "./chunk-53D6FFVE.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PPKIL4EL.js";
+} from "./chunk-UIS332AZ.js";
 import {
   APPROVAL_MODE_META,
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-AVHL2ZTS.js";
+} from "./chunk-QRS7FQHE.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-O4EAMVSC.js → chunk-SOHJ37NA.js}

@@ -1,19 +1,19 @@
 import {
   readExistingMachineId
-} from "./chunk-UUCRWEEU.js";
+} from "./chunk-BGEUAJYL.js";
+import {
+  getBaseUrl
+} from "./chunk-53D6FFVE.js";
 import {
   NetworkError
 } from "./chunk-PPY5N2E6.js";
-import {
-  getBaseUrl
-} from "./chunk-R5PZPROX.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";
 import {
   clientContextHeaders,
   redactSecretsFromContent
-} from "./chunk-AVHL2ZTS.js";
+} from "./chunk-QRS7FQHE.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-JC7XUZST.js → chunk-SONZCJY5.js}

@@ -1,10 +1,11 @@
 import {
   getBaseUrl
-} from "./chunk-R5PZPROX.js";
+} from "./chunk-53D6FFVE.js";
 import {
   compressTranscriptRecord,
-  redactSecretsFromContent
-} from "./chunk-AVHL2ZTS.js";
+  redactSecretsFromContent,
+  transcriptRecordPlaintext
+} from "./chunk-QRS7FQHE.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {
@@ -65,6 +66,13 @@ import nacl from "tweetnacl";
 // ../contracts/src/transcript-record-node.ts
 import { deflateRawSync, inflateRawSync } from "zlib";
 var deflateRaw = (raw) => new Uint8Array(deflateRawSync(raw));
+var inflateRawWithin = (deflated, maxBytes) => {
+  try {
+    return new Uint8Array(inflateRawSync(deflated, { maxOutputLength: maxBytes }));
+  } catch {
+    return null;
+  }
+};
 
 // src/crypto.ts
 var EPH_PUB_LEN = nacl.box.publicKeyLength;
@@ -74,6 +82,7 @@ var SESSION_KEY_LEN = nacl.secretbox.keyLength;
 var toBase64 = (bytes) => Buffer.from(bytes).toString("base64");
 var fromBase64 = (value) => new Uint8Array(Buffer.from(value, "base64"));
 var utf8Encode = (text) => new Uint8Array(Buffer.from(text, "utf-8"));
+var utf8Decode = (bytes) => Buffer.from(bytes).toString("utf-8");
 var decodePublicKey = (value) => fromBase64(value);
 var generateSessionKey = () => nacl.randomBytes(SESSION_KEY_LEN);
 var wrapSessionKey = (sessionKey, accountPublicKey) => {
@@ -97,6 +106,15 @@ var sealRecordBytes = (plaintext, sessionKey) => {
 var encryptRecord = (plaintext, sessionKey) => sealRecordBytes(utf8Encode(plaintext), sessionKey);
 var encryptCompressedRecord = (plaintext, sessionKey) => sealRecordBytes(compressTranscriptRecord(utf8Encode(plaintext), deflateRaw), sessionKey);
 var recordSealerFor = (compressRecords) => compressRecords ? encryptCompressedRecord : encryptRecord;
+var decryptRecord = (ciphertext, sessionKey) => {
+  const bundle = fromBase64(ciphertext);
+  if (bundle.length < SECRETBOX_NONCE_LEN) return null;
+  const nonce = bundle.slice(0, SECRETBOX_NONCE_LEN);
+  const box = bundle.slice(SECRETBOX_NONCE_LEN);
+  const opened = nacl.secretbox.open(box, nonce, sessionKey);
+  const plaintext = opened ? transcriptRecordPlaintext(opened, inflateRawWithin) : null;
+  return plaintext ? utf8Decode(plaintext) : null;
+};
 
 // src/transcript-capture.ts
 import { createHmac } from "crypto";
@@ -223,6 +241,7 @@ export {
   wrapSessionKey,
   encryptRecord,
   recordSealerFor,
+  decryptRecord,
   buildTranscriptRecords,
   fetchTranscriptRecipients,
   fetchAccountPublicKey,

package/dist/{chunk-FB262EOM.js → chunk-T6RWREWU.js}

@@ -1,6 +1,6 @@
 import {
   writeJsonAtomicDurable
-} from "./chunk-RZVWEDIS.js";
+} from "./chunk-AUDYAVNM.js";
 
 // src/transcript-recipient-pin.ts
 import { existsSync, mkdirSync, readFileSync, rmSync } from "fs";

package/dist/{chunk-QAWWTRDD.js → chunk-TPYZFYQ5.js}

@@ -1,9 +1,9 @@
 import {
   AGENT_CHOICES
-} from "./chunk-2HFC4W6J.js";
+} from "./chunk-NCTABQMC.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-BLX6KRK5.js";
+} from "./chunk-4DH54LS7.js";
 import {
   CLAUDE_HOOK_EVENTS,
   CODEX_HOOK_EVENTS,
@@ -12,13 +12,13 @@ import {
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-7S46LCKD.js";
+} from "./chunk-2J4IVUEA.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-AVHL2ZTS.js";
+} from "./chunk-QRS7FQHE.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-FK3JSDH5.js → chunk-UBANQ4EZ.js}

@@ -4,24 +4,24 @@ import {
   outcomeOfFailedAsk,
   reportMachineDenial,
   storedWaitDeadline
-} from "./chunk-2JFEMKDG.js";
+} from "./chunk-WL3V2UV4.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-3JJI5O5N.js";
+} from "./chunk-GAAN3Y7V.js";
 import {
   isAdmitted,
   readAdmissionRules
-} from "./chunk-F3WI32HG.js";
+} from "./chunk-CI6MDBQB.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-AXZ67XVN.js";
+} from "./chunk-I73UQU7K.js";
 import {
   activeHookSource,
   activeIdentity,
   namedSource
-} from "./chunk-UIF7HWHX.js";
+} from "./chunk-3SAF4QXU.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -45,10 +45,10 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-AJWGZJFS.js";
+} from "./chunk-JFVLMWKY.js";
 import {
   repoKeyFor
-} from "./chunk-QMPM3CAN.js";
+} from "./chunk-DUOBFECC.js";
 import {
   askUser,
   cancelQuestion,
@@ -65,20 +65,20 @@ import {
   waitForQuestion,
   waitsForThePhone,
   withdrawQuestion
-} from "./chunk-CMYFV3VC.js";
+} from "./chunk-EOGVWCLF.js";
 import {
   getMachineId
-} from "./chunk-UUCRWEEU.js";
+} from "./chunk-BGEUAJYL.js";
 import {
   claudeConfigDir
-} from "./chunk-7S46LCKD.js";
+} from "./chunk-2J4IVUEA.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-R5PZPROX.js";
+} from "./chunk-53D6FFVE.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PPKIL4EL.js";
+} from "./chunk-UIS332AZ.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -133,7 +133,7 @@ import {
   terminalStaysLiveForTheCall,
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason
-} from "./chunk-AVHL2ZTS.js";
+} from "./chunk-QRS7FQHE.js";
 
 // src/terminal-answer-watch.ts
 import { closeSync, openSync, readSync, statSync } from "fs";

package/dist/{chunk-EUHTC7K5.js → chunk-UEJTWQVF.js}

@@ -2,7 +2,7 @@ import {
   isApprovalMode,
   isRecord,
   isTimeoutAction
-} from "./chunk-AVHL2ZTS.js";
+} from "./chunk-QRS7FQHE.js";
 
 // src/cli/settings-response.ts
 var isFiniteNumber = (value) => typeof value === "number" && Number.isFinite(value);

package/dist/{chunk-PPKIL4EL.js → chunk-UIS332AZ.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-AVHL2ZTS.js";
+} from "./chunk-QRS7FQHE.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {

package/dist/{chunk-W47XZJSH.js → chunk-UU3CDLIX.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-7M4AA7QF.js";
+} from "./chunk-32JJ5KV3.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-PPKIL4EL.js";
+} from "./chunk-UIS332AZ.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-FAKEKFCI.js → chunk-VGHWK5Z2.js}

@@ -5,19 +5,19 @@ import {
   hermesAppWiringRecord,
   hermesConfigReceipt,
   hermesSetupReceipt
-} from "./chunk-7S46LCKD.js";
+} from "./chunk-2J4IVUEA.js";
 import {
   readJsonSafe,
   resolvePathBinary,
   writeJsonAtomic
-} from "./chunk-RZVWEDIS.js";
+} from "./chunk-AUDYAVNM.js";
 import {
   isNewerVersion,
   isReleaseVersion
 } from "./chunk-QTOLNRET.js";
 import {
   isRecord
-} from "./chunk-AVHL2ZTS.js";
+} from "./chunk-QRS7FQHE.js";
 
 // src/hermes/plugin-payload.ts
 import { createHash } from "crypto";
@@ -2267,11 +2267,13 @@ var removeHermesWiring = (request) => {
 };
 
 export {
+  HERMES_INSTALL_MARKER_FILE,
   shippedHermesPlugin,
   findHermesLauncher,
   hermesPluginDirectory,
   HERMES_CONFIG_FILE,
   defaultHermesHome,
+  parseHermesInstallMarker,
   hermesWiringOwner,
   routesHermesApprovals,
   routesHermesQuestions,

package/dist/{chunk-2JFEMKDG.js → chunk-WL3V2UV4.js}

@@ -1,7 +1,7 @@
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "./chunk-AXZ67XVN.js";
+} from "./chunk-I73UQU7K.js";
 import {
   AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
@@ -10,19 +10,19 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-AJWGZJFS.js";
+} from "./chunk-JFVLMWKY.js";
 import {
   askUser,
   isDecisionStopped,
   isQuestionLimitRefusal,
   waitForQuestion
-} from "./chunk-CMYFV3VC.js";
+} from "./chunk-EOGVWCLF.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-7M4AA7QF.js";
+} from "./chunk-32JJ5KV3.js";
 import {
   getMachineId
-} from "./chunk-UUCRWEEU.js";
+} from "./chunk-BGEUAJYL.js";
 import {
   ASK_CONTEXT_MAX,
   agentQuestionContext,
@@ -34,7 +34,7 @@ import {
   questionsShownAsASet,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-AVHL2ZTS.js";
+} from "./chunk-QRS7FQHE.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-OJ3ZD5VX.js → chunk-XO7LP3JC.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-PPKIL4EL.js";
+} from "./chunk-UIS332AZ.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";

package/dist/{chunk-DT6VCMXS.js → chunk-Z7ORL6SC.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-7S46LCKD.js";
+} from "./chunk-2J4IVUEA.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   writeJsonAtomic
-} from "./chunk-RZVWEDIS.js";
+} from "./chunk-AUDYAVNM.js";
 
 // src/upgrade-lock.ts
 import { fork } from "child_process";