@pushary/agent-hooks 1.9.75 → 1.9.76

package/dist/{chunk-PV5XEBFI.js → chunk-E2VJ7B7D.js}

@@ -3,10 +3,10 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-Z7ORL6SC.js";
+} from "./chunk-TFYFQM5C.js";
 import {
   phoneStartIsRequired
-} from "./chunk-KDUWFGY2.js";
+} from "./chunk-74ONBRPF.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -18,25 +18,25 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-M7BXAWUC.js";
+} from "./chunk-CMNB4IZO.js";
 import {
   autoUpdateLock,
   autoUpdateLog,
   autoUpdateState
-} from "./chunk-2J4IVUEA.js";
+} from "./chunk-7KYQ24FI.js";
 import {
   execNpm,
   fetchLatestPublishedVersion,
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-AUDYAVNM.js";
+} from "./chunk-T2EJ3H6Y.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-UIS332AZ.js";
+} from "./chunk-R3HXGHRQ.js";
 import {
   commandsPackage,
   globalUpgradeEntry,

package/dist/{chunk-SIJHPGUW.js → chunk-E7U4YM4A.js}

@@ -1,9 +1,9 @@
 import {
   pusharyFetch
-} from "./chunk-SOHJ37NA.js";
+} from "./chunk-KWGOKO4E.js";
 import {
   getBaseUrl
-} from "./chunk-53D6FFVE.js";
+} from "./chunk-M7JFGDGP.js";
 import {
   NetworkError
 } from "./chunk-PPY5N2E6.js";
@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-Y4OBAK4I.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-PGLNE556.js → chunk-F7R7M5MG.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-53D6FFVE.js";
+} from "./chunk-M7JFGDGP.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-VGHWK5Z2.js → chunk-FAGQAR6I.js}

@@ -5,19 +5,19 @@ import {
   hermesAppWiringRecord,
   hermesConfigReceipt,
   hermesSetupReceipt
-} from "./chunk-2J4IVUEA.js";
+} from "./chunk-7KYQ24FI.js";
 import {
   readJsonSafe,
   resolvePathBinary,
   writeJsonAtomic
-} from "./chunk-AUDYAVNM.js";
+} from "./chunk-T2EJ3H6Y.js";
 import {
   isNewerVersion,
   isReleaseVersion
 } from "./chunk-QTOLNRET.js";
 import {
   isRecord
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-Y4OBAK4I.js";
 
 // src/hermes/plugin-payload.ts
 import { createHash } from "crypto";

package/dist/{chunk-GAAN3Y7V.js → chunk-GII565PB.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-Y4OBAK4I.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-6BFLDHPM.js → chunk-GJVV2EUC.js}

@@ -1,12 +1,12 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-SHW6KK2K.js";
+} from "./chunk-USZJJWZL.js";
 import {
   retryAgentCommand
-} from "./chunk-7O54GE5C.js";
+} from "./chunk-SWRNJ3BP.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-UIS332AZ.js";
+} from "./chunk-R3HXGHRQ.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-EH5OLIP2.js → chunk-IRLHN5UP.js}

@@ -15,16 +15,20 @@ import {
 } from "./chunk-E46NE7FB.js";
 
 // src/codex-desktop-launch.ts
-import { spawn as spawn2, execFileSync } from "child_process";
+import { spawn as spawn2, execFileSync as execFileSync2 } from "child_process";
 import { existsSync } from "fs";
 import { mkdtemp, readFile, rm, writeFile, access } from "fs/promises";
 import { constants } from "fs";
 import { tmpdir } from "os";
-import { join, resolve } from "path";
+import { join as join2, resolve } from "path";
 
-// src/codex-desktop-proxy.ts
-import { spawn } from "child_process";
-import { Transform } from "stream";
+// src/codex-app-runtime.ts
+import { execFileSync } from "child_process";
+import { createHash, randomUUID } from "crypto";
+import { chmodSync, lstatSync, mkdirSync, readdirSync, rmdirSync, unlinkSync } from "fs";
+import { createConnection, createServer } from "net";
+import { homedir } from "os";
+import { join } from "path";
 
 // src/codex-permission-form.ts
 var CODEX_APP_CARD_METHOD = "mcpServer/elicitation/request";
@@ -51,6 +55,163 @@ var codexPermissionFormOf = (message) => {
 };
 var codexFormCameFrom = (message, servers) => isRecord(message) && message.method === CODEX_APP_CARD_METHOD && isRecord(message.params) && typeof message.params.serverName === "string" && servers.includes(message.params.serverName);
 
+// src/codex-app-runtime.ts
+var PROBE_TIMEOUT_MS = 400;
+var MAX_PROBE_BYTES = 1024;
+var MAX_PROXIES = 64;
+var SOCKET_SUFFIX = ".sock";
+var codexRuntimeDirectory = (home = homedir()) => join("/tmp", `pushary-codex-${process.getuid?.() ?? "unknown"}-${createHash("sha256").update(home).digest("hex").slice(0, 16)}`);
+var privateDirectory = (directory) => {
+  try {
+    const stat = lstatSync(directory);
+    return stat.isDirectory() && !stat.isSymbolicLink() && stat.uid === process.getuid?.() && (stat.mode & 63) === 0;
+  } catch {
+    return false;
+  }
+};
+var serveCodexRuntime = (enginePid, forwarding, report, directory = codexRuntimeDirectory()) => {
+  let close = () => {
+  };
+  try {
+    mkdirSync(directory, { recursive: true, mode: 448 });
+    if (!privateDirectory(directory)) throw new Error("runtime directory is not private");
+    const path = join(directory, `${process.pid}-${randomUUID().slice(0, 8)}${SOCKET_SUFFIX}`);
+    const server = createServer((socket) => {
+      socket.setTimeout(PROBE_TIMEOUT_MS, () => socket.destroy());
+      socket.on("error", () => socket.destroy());
+      let input = "";
+      socket.on("data", (chunk) => {
+        input += chunk.toString();
+        if (input.length > MAX_PROBE_BYTES) {
+          socket.destroy();
+          return;
+        }
+        if (!input.endsWith("\n")) return;
+        const nonce = input.trim();
+        if (!/^[a-f0-9-]{36}$/.test(nonce)) {
+          socket.destroy();
+          return;
+        }
+        socket.end(JSON.stringify({ nonce, pid: process.pid, enginePid, forwarding: forwarding() }) + "\n");
+      });
+    });
+    server.on("error", () => report("Codex connection status is unavailable; permission forwarding is unchanged."));
+    server.listen(path, () => {
+      try {
+        chmodSync(path, 384);
+      } catch {
+        server.close();
+      }
+    });
+    server.unref();
+    close = () => {
+      server.close();
+      try {
+        unlinkSync(path);
+      } catch {
+      }
+      try {
+        rmdirSync(directory);
+      } catch {
+      }
+    };
+  } catch {
+    report("Codex connection status is unavailable; permission forwarding is unchanged.");
+  }
+  return close;
+};
+var probeCodexRuntime = (path) => new Promise((resolve2) => {
+  const nonce = randomUUID();
+  const socket = createConnection(path);
+  let output = "";
+  let finished = false;
+  const finish = (reply) => {
+    if (finished) return;
+    finished = true;
+    socket.destroy();
+    resolve2(reply);
+  };
+  socket.setTimeout(PROBE_TIMEOUT_MS, () => finish(null));
+  socket.on("error", () => finish(null));
+  socket.on("connect", () => socket.write(nonce + "\n"));
+  socket.on("data", (chunk) => {
+    output += chunk.toString();
+    if (output.length > MAX_PROBE_BYTES) {
+      finish(null);
+      return;
+    }
+    if (!output.endsWith("\n")) return;
+    try {
+      const reply = JSON.parse(output);
+      if (!isRecord(reply) || reply.nonce !== nonce || !Number.isSafeInteger(reply.pid) || !Number.isSafeInteger(reply.enginePid) || typeof reply.pid !== "number" || reply.pid <= 0 || typeof reply.enginePid !== "number" || reply.enginePid <= 0 || typeof reply.forwarding !== "boolean") {
+        finish(null);
+        return;
+      }
+      finish({ pid: reply.pid, enginePid: reply.enginePid, forwarding: reply.forwarding });
+    } catch {
+      finish(null);
+    }
+  });
+  socket.on("close", () => finish(null));
+});
+var codexRuntimeProcesses = (output) => {
+  const processes = [];
+  for (const line of output.trim().split("\n")) {
+    const match = /^\s*(\d+)\s+(\d+)\s+(.+)$/.exec(line);
+    if (!match) return null;
+    const pid = Number(match[1]), parent = Number(match[2]);
+    if (!Number.isSafeInteger(pid) || pid <= 0 || !Number.isSafeInteger(parent) || parent < 0 || processes.some((process2) => process2.pid === pid)) return null;
+    processes.push({ pid, parent, executable: match[3] });
+  }
+  return processes;
+};
+var codexRuntimeStatus = (app, processes, replies) => {
+  const byPid = new Map(processes.map((process2) => [process2.pid, process2]));
+  const desktops = new Set(processes.filter((process2) => process2.executable.startsWith(`${app}/Contents/MacOS/`)).map((process2) => process2.pid));
+  if (desktops.size === 0) return "closed";
+  const isEngine = (process2) => process2.executable.startsWith(`${app}/Contents/Resources/codex-cli/`) && process2.executable.endsWith("/codex");
+  const owningDesktop = (engine) => {
+    const visited = /* @__PURE__ */ new Set([engine.pid]);
+    let parent = byPid.get(engine.parent);
+    while (parent && !visited.has(parent.pid)) {
+      if (desktops.has(parent.pid)) return parent.pid;
+      if (isEngine(parent)) return null;
+      visited.add(parent.pid);
+      parent = byPid.get(parent.parent);
+    }
+    return null;
+  };
+  const engines = processes.filter((process2) => isEngine(process2) && owningDesktop(process2) !== null);
+  const owners = new Set(engines.map(owningDesktop));
+  if ([...desktops].some((pid) => !owners.has(pid))) return "unknown";
+  const observed = engines.map((engine) => replies.find((reply) => reply.enginePid === engine.pid && reply.pid === engine.parent));
+  if (observed.some((reply) => reply === void 0)) return "restart_required";
+  return observed.every((reply) => reply?.forwarding) ? "connected" : "unsupported";
+};
+var readCodexAppRuntime = async (app, directory = codexRuntimeDirectory()) => {
+  const uid = process.getuid?.();
+  if (app === null || process.platform !== "darwin" || uid === void 0) return "unknown";
+  try {
+    const snapshot = execFileSync("/bin/ps", ["-U", String(uid), "-o", "pid=,ppid=,comm="], { encoding: "utf8", timeout: 1e3, maxBuffer: 2 * 1024 * 1024 });
+    const processes = codexRuntimeProcesses(snapshot);
+    if (processes === null) return "unknown";
+    const livePids = new Set(processes.map((process2) => process2.pid));
+    const names = privateDirectory(directory) ? readdirSync(directory).filter((name) => {
+      const match = /^(\d+)-[a-f0-9]{8}\.sock$/.exec(name);
+      return match !== null && livePids.has(Number(match[1]));
+    }) : [];
+    if (names.length > MAX_PROXIES) return "unknown";
+    const replies = await Promise.all(names.map((name) => probeCodexRuntime(join(directory, name))));
+    return codexRuntimeStatus(app, processes, replies.filter((reply) => reply !== null));
+  } catch {
+    return "unknown";
+  }
+};
+
+// src/codex-desktop-proxy.ts
+import { spawn } from "child_process";
+import { Transform } from "stream";
+
 // src/codex-app-card.ts
 var CODEX_REQUEST_RESOLVED_METHOD = "serverRequest/resolved";
 var COMPUTER_USE_CONNECTOR = "computer-use";
@@ -176,6 +337,17 @@ var CodexAppCardLedger = class {
   }
 };
 
+// src/codex-audio-card.ts
+var codexAudioCardOf = (message) => {
+  const form = codexPermissionFormOf(message);
+  if (!form || form.serverName !== CODEX_COMPUTER_USE_SERVER || !["form", "openai/form", "openaiForm"].includes(form.mode)) return null;
+  const meta = form.meta;
+  if (meta.connector_id !== "computer-use" || meta.tool_name !== "start_audio_recording" || form.sentence !== "Allow Computer Use to record computer audio?" || !Array.isArray(meta.persist) || !meta.persist.includes("session") || !isRecord(meta.tool_params) || Object.keys(meta.tool_params).length !== 0) return null;
+  return { kind: "audio", requestId: form.requestId, threadId: form.threadId };
+};
+var CODEX_AUDIO_QUESTION = "Allow Codex to record computer audio for this conversation?";
+var CODEX_AUDIO_CONTEXT = `${CODEX_SHOWS_THE_SAME_QUESTION} Yes permits computer audio recording for this conversation. Audio may include other apps and calls. No declines recording.`;
+
 // src/codex-browser-use-card.ts
 var BROWSER_USE_SERVERS = [CODEX_COMPUTER_USE_SERVER, CODEX_BROWSER_SERVER];
 var BROWSER_USE_CONNECTOR = "browser-use";
@@ -271,14 +443,49 @@ var codexBrowserUseCardReply = (requestId, decision) => ({
 // src/codex-card.ts
 var codexCardOf = (message) => {
   const app = codexAppCardOf(message);
-  return app ? { kind: "app", ...app } : codexBrowserUseCardOf(message);
+  return app ? { kind: "app", ...app } : codexBrowserUseCardOf(message) ?? codexAudioCardOf(message);
 };
 var comesFromCodexOwnTools = (message) => comesFromComputerUse(message) || comesFromBrowserUse(message);
 var codexAppMayAnswerItself = (card) => card.kind === "site_access";
-var codexCardQuestion = (card) => card.kind === "app" ? codexAppCardQuestion(card) : codexBrowserUseCardQuestion(card);
-var codexCardContext = (card) => card.kind === "app" ? codexAppCardContext(card) : codexBrowserUseCardContext(card);
-var codexCardSubject = (card) => card.kind === "app" ? card.appName : codexBrowserUseCardSubject(card);
-var codexCardReply = (card, decision) => card.kind === "app" ? codexAppCardReply(card.requestId, decision) : codexBrowserUseCardReply(card.requestId, decision);
+var codexCardQuestion = (card) => {
+  switch (card.kind) {
+    case "app":
+      return codexAppCardQuestion(card);
+    case "audio":
+      return CODEX_AUDIO_QUESTION;
+    default:
+      return codexBrowserUseCardQuestion(card);
+  }
+};
+var codexCardContext = (card) => {
+  switch (card.kind) {
+    case "app":
+      return codexAppCardContext(card);
+    case "audio":
+      return CODEX_AUDIO_CONTEXT;
+    default:
+      return codexBrowserUseCardContext(card);
+  }
+};
+var codexCardSubject = (card) => {
+  switch (card.kind) {
+    case "app":
+      return card.appName;
+    case "audio":
+      return "computer audio";
+    default:
+      return codexBrowserUseCardSubject(card);
+  }
+};
+var codexCardReply = (card, decision) => {
+  switch (card.kind) {
+    case "app":
+    case "audio":
+      return codexAppCardReply(card.requestId, decision);
+    default:
+      return codexBrowserUseCardReply(card.requestId, decision);
+  }
+};
 
 // src/load-once.ts
 var loadedOnce = (load) => {
@@ -294,7 +501,7 @@ var loadedOnce = (load) => {
 };
 
 // src/codex-desktop-proxy.ts
-var loadThePhone = () => import("./api-L3BIISGS.js");
+var loadThePhone = () => import("./api-YDCHRRA4.js");
 var theFirstCardLoadsAgain = () => {
 };
 var APP_SERVER_COMMAND = "app-server";
@@ -645,6 +852,12 @@ var runCodexDesktopProxy = async (binary, args, readAccount, options = { watches
     env: codexEngineEnvironment(binary)
   });
   child.once("spawn", tellTheLauncherTheEngineStarted);
+  let forwarding = watches;
+  let closeRuntime = () => {
+  };
+  child.once("spawn", () => {
+    if (child.pid && args[subcommandIndexOf(args)] === APP_SERVER_COMMAND) closeRuntime = serveCodexRuntime(child.pid, () => forwarding, reportOnStderr);
+  });
   const abort = new AbortController();
   let killTimer;
   let lingerTimer;
@@ -673,6 +886,7 @@ var runCodexDesktopProxy = async (binary, args, readAccount, options = { watches
   let cards;
   const streams = [];
   const keepCopyingWithoutCards = (error) => {
+    forwarding = false;
     cards?.standDown();
     reportOnStderr(`Codex app cards stopped for this session after an unexpected error; Codex keeps working. ${error instanceof Error ? error.message.split("\n")[0] : ""}`.trim());
   };
@@ -701,6 +915,7 @@ var runCodexDesktopProxy = async (binary, args, readAccount, options = { watches
       child.once("close", (code) => resolve2(code ?? 1));
     });
   } finally {
+    closeRuntime();
     abort.abort();
     clearTimeout(killTimer);
     clearTimeout(lingerTimer);
@@ -783,12 +998,12 @@ var codexEngineBehindLauncher = (script) => {
   return shellUnquoted(assignment.slice(ENGINE_ASSIGNMENT.length));
 };
 var writeDesktopProxy = async (entry, app, engine, directory) => {
-  const shim = join(directory, "codex");
+  const shim = join2(directory, "codex");
   await writeFile(shim, desktopProxyScript(entry, app, engine), { mode: 448, flag: "wx" });
   return shim;
 };
 var desktopEngine = async (app) => {
-  const manifest = JSON.parse(await readFile(join(app, CODEX_ENGINE_DIRECTORY, CODEX_ENGINE_MANIFEST), "utf8"));
+  const manifest = JSON.parse(await readFile(join2(app, CODEX_ENGINE_DIRECTORY, CODEX_ENGINE_MANIFEST), "utf8"));
   const engine = desktopEngineFromManifest(app, manifest);
   await access(engine, constants.X_OK);
   return engine;
@@ -802,18 +1017,18 @@ var engineWhateverTheLayout = async (app) => {
     return { engine, layoutIsKnown: false };
   }
 };
-var codexAppOnThisMac = () => INSTALLED_CODEX_APPS.find((candidate) => existsSync(join(candidate, CODEX_ENGINE_DIRECTORY, CODEX_ENGINE_MANIFEST))) ?? null;
+var codexAppOnThisMac = () => INSTALLED_CODEX_APPS.find((candidate) => existsSync(join2(candidate, CODEX_ENGINE_DIRECTORY, CODEX_ENGINE_MANIFEST))) ?? null;
 var installedCodexApp = (chosen) => resolve(chosen ?? codexAppOnThisMac() ?? INSTALLED_CODEX_APPS[1]);
 var desktopExecutable = (app) => {
-  const plist = join(app, "Contents/Info.plist");
-  const read = (key) => execFileSync("/usr/bin/plutil", ["-extract", key, "raw", plist], { encoding: "utf8" }).trim();
+  const plist = join2(app, "Contents/Info.plist");
+  const read = (key) => execFileSync2("/usr/bin/plutil", ["-extract", key, "raw", plist], { encoding: "utf8" }).trim();
   if (read("CFBundleIdentifier") !== "com.openai.codex") throw new Error("Choose the Codex Desktop application");
   const name = read("CFBundleExecutable");
   if (!name || name.includes("/") || name === "." || name === "..") throw new Error("Invalid Desktop executable");
   try {
-    execFileSync("/usr/bin/pgrep", ["-x", name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")], { stdio: "ignore" });
+    execFileSync2("/usr/bin/pgrep", ["-x", name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")], { stdio: "ignore" });
   } catch (error) {
-    if (record(error) && error.status === 1) return join(app, "Contents/MacOS", name);
+    if (record(error) && error.status === 1) return join2(app, "Contents/MacOS", name);
     throw error;
   }
   throw new Error("Codex Desktop is already running. Finish active work and quit it yourself, then retry. Pushary will not restart it.");
@@ -827,7 +1042,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-CN3G7GZW.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-3OUTABVU.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");
@@ -835,7 +1050,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
   const app = installedCodexApp(args[1]);
   const engine = await desktopEngine(app);
   const executable = desktopExecutable(app);
-  const directory = await mkdtemp(join(tmpdir(), "pushary-codex-desktop-"));
+  const directory = await mkdtemp(join2(tmpdir(), "pushary-codex-desktop-"));
   try {
     const shim = await writeDesktopProxy(entry, app, engine, directory);
     process.stderr.write("[pushary] Experimental Codex app launch. When Codex asks to use an app on this Mac, or its browser asks to open a site, download or upload, the question also reaches Pushary; every other prompt stays as it is. Quit and open Codex normally to turn this off.\n");
@@ -850,6 +1065,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
 };
 
 export {
+  readCodexAppRuntime,
   shellQuoted,
   LAUNCHCTL,
   desktopEngineFromManifest,

package/dist/{chunk-7FNSQMQ2.js → chunk-IRN6JLSM.js}

@@ -1,19 +1,19 @@
 import {
   notificationAnswerStep
-} from "./chunk-SNUHX5GQ.js";
+} from "./chunk-Y2CYSVWU.js";
 import {
   canChangeApprovalSettings
-} from "./chunk-2DB7TBA7.js";
+} from "./chunk-USMUW3LI.js";
 import {
   matchMacAccountStep,
   retryAgentCommand
-} from "./chunk-7O54GE5C.js";
+} from "./chunk-SWRNJ3BP.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-UIS332AZ.js";
+} from "./chunk-R3HXGHRQ.js";
 
 // src/setup/closing.ts
 var ACTIVITY_URL = "pushary.com/dashboard/agent/activity";

package/dist/{chunk-SONZCJY5.js → chunk-ITLWEGLE.js}

@@ -1,13 +1,18 @@
 import {
   getBaseUrl
-} from "./chunk-53D6FFVE.js";
+} from "./chunk-M7JFGDGP.js";
 import {
   compressTranscriptRecord,
   redactSecretsFromContent,
   transcriptRecordPlaintext
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-Y4OBAK4I.js";
 
 // src/transcript-api.ts
+var retentionDaysOf = (sessionHistory) => {
+  if (sessionHistory === null || typeof sessionHistory !== "object") return null;
+  const days = sessionHistory.retentionDays;
+  return typeof days === "number" && Number.isInteger(days) && days > 0 ? days : null;
+};
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {
   try {
     const res = await fetch(`${baseUrl}/api/agent/encryption-account`, {
@@ -18,8 +23,9 @@ var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {
     const data = await res.json();
     if (typeof data.publicKey !== "string" || data.publicKey.length === 0) return null;
     const phoneReadsCompressedRecords = data.readsCompressedRecords === true;
+    const retentionDays = retentionDaysOf(data.sessionHistory);
     if (data.providerRecovery === void 0 || data.providerRecovery === null) {
-      return { phonePublicKey: data.publicKey, phoneReadsCompressedRecords, provider: null };
+      return { phonePublicKey: data.publicKey, phoneReadsCompressedRecords, provider: null, retentionDays };
     }
     if (typeof data.providerRecovery !== "object") return null;
     const provider = data.providerRecovery;
@@ -27,7 +33,8 @@ var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {
     return {
       phonePublicKey: data.publicKey,
       phoneReadsCompressedRecords,
-      provider: { required: provider.required, keyId: provider.keyId, publicKey: provider.publicKey }
+      provider: { required: provider.required, keyId: provider.keyId, publicKey: provider.publicKey },
+      retentionDays
     };
   } catch {
     return null;

package/dist/{chunk-32JJ5KV3.js → chunk-JNV5LOZH.js}

@@ -1,17 +1,17 @@
 import {
   keyCheckFromResponse
-} from "./chunk-SIJHPGUW.js";
+} from "./chunk-E7U4YM4A.js";
 import {
   installNetworkDefaults
-} from "./chunk-SOHJ37NA.js";
+} from "./chunk-KWGOKO4E.js";
 import {
   getBaseUrl
-} from "./chunk-53D6FFVE.js";
+} from "./chunk-M7JFGDGP.js";
 import {
   isRecord,
   isToolErrorResult,
   toolFailureCodeOfResult
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-Y4OBAK4I.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-EM2RSWDA.js → chunk-JZ5KV2FK.js}

@@ -1,20 +1,20 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-E5XYFIYL.js";
+} from "./chunk-QUGP76DQ.js";
 import {
   nativeClaudeInstallPath
-} from "./chunk-R7V6BPEV.js";
+} from "./chunk-UMBVIFP5.js";
 import {
   grokHome
-} from "./chunk-3SAF4QXU.js";
+} from "./chunk-3YU6NIIL.js";
 import {
   claudeConfigDir,
   clineDataDirectory,
   codexHomeFrom
-} from "./chunk-2J4IVUEA.js";
+} from "./chunk-7KYQ24FI.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-Y4OBAK4I.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-TPYZFYQ5.js → chunk-KGWLDNNT.js}

@@ -1,9 +1,9 @@
 import {
   AGENT_CHOICES
-} from "./chunk-NCTABQMC.js";
+} from "./chunk-PPD64MZW.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-4DH54LS7.js";
+} from "./chunk-5FV472Q2.js";
 import {
   CLAUDE_HOOK_EVENTS,
   CODEX_HOOK_EVENTS,
@@ -12,13 +12,13 @@ import {
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-2J4IVUEA.js";
+} from "./chunk-7KYQ24FI.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-Y4OBAK4I.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-SOHJ37NA.js → chunk-KWGOKO4E.js}

@@ -1,9 +1,9 @@
 import {
   readExistingMachineId
-} from "./chunk-BGEUAJYL.js";
+} from "./chunk-BUR2LYQI.js";
 import {
   getBaseUrl
-} from "./chunk-53D6FFVE.js";
+} from "./chunk-M7JFGDGP.js";
 import {
   NetworkError
 } from "./chunk-PPY5N2E6.js";
@@ -13,7 +13,7 @@ import {
 import {
   clientContextHeaders,
   redactSecretsFromContent
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-Y4OBAK4I.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";