@pushary/agent-hooks 1.9.82 → 1.9.84

package/dist/{chunk-ONUAAXAW.js → chunk-JSZT4Q23.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-TTTK44RK.js";
+} from "./chunk-GGGOFJBL.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-UB7VUSSX.js → chunk-LUSWC2MV.js}

@@ -1,12 +1,12 @@
 import {
   findNativeClaudeInstall
-} from "./chunk-TO77OYLM.js";
+} from "./chunk-7ZYVX2KN.js";
 import {
   parseVersion
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   isRecord
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-M5XNFUXN.js → chunk-OGTZ7JR7.js}

@@ -1,7 +1,7 @@
 import {
   localRepoKey,
   normalizeRepoRemote
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/repo.ts
 import { existsSync, readFileSync, statSync } from "fs";

package/dist/{chunk-QJJJENT2.js → chunk-OKWHHDV5.js}

@@ -1,20 +1,20 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-CV56MBIZ.js";
+} from "./chunk-TSCFJJIB.js";
 import {
   nativeClaudeInstallPath
-} from "./chunk-TO77OYLM.js";
+} from "./chunk-7ZYVX2KN.js";
 import {
   grokHome
-} from "./chunk-5TMGEQAC.js";
+} from "./chunk-VJZGR4N3.js";
 import {
   claudeConfigDir,
   clineDataDirectory,
   codexHomeFrom
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-5LLZSX7I.js → chunk-OSEGZLCO.js}

@@ -9,20 +9,20 @@ import {
   installedCodexApp,
   readCodexAppRuntime,
   shellQuoted
-} from "./chunk-6355HHSR.js";
+} from "./chunk-FNC4SPOD.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-6L2U3TP3.js";
+} from "./chunk-SAPRO7FI.js";
 import {
   CODEX_APP_LAUNCH_AT_LOGIN_VERB,
   CODEX_APP_LAUNCH_VARIABLE
 } from "./chunk-E46NE7FB.js";
 import {
   writeFileAtomic
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 
 // src/codex-app-cards-switch.ts
 import { execFileSync as execFileSync2 } from "child_process";

package/dist/{chunk-UOUUTDWF.js → chunk-PHBZK4SC.js}

@@ -4,7 +4,7 @@ import {
   quoteIfNeeded,
   shellDoubleQuoted,
   writeFileAtomic
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   cmdShimScriptOf
 } from "./chunk-ZVU6WMMU.js";
@@ -15,7 +15,7 @@ import {
   HOOK_LOCATOR_BINARY,
   PRETOOLUSE_GATED_TOOLS,
   withHookHoldBudget
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/setup/paths.ts
 import { createHash as createHash2 } from "crypto";
@@ -795,7 +795,7 @@ You have Pushary MCP tools that reach the user on their phone. Use them proactiv
 - Ask once, on one channel. If you also have a built-in way to prompt the user, use that or \`ask_user\` for a given question, never both. \`ask_user\` is the one that reaches the user when they are away from this machine, so prefer it. Raising both strands the user in whichever prompt you are not waiting on.
 - Honor authorization already granted in this session. Ask before a risky or irreversible action outside that authorization, or when an enforced host policy requires it. Do not ask again for an already authorized step, and never bypass an enforced gate. When a Pushary hook result says the user approved a specific command after a denial, rerunning that exact command is the approved path and not a bypass of that gate.
 - Call \`propose_scope\` only for an unresolved or requested file boundary. A ratified scope narrows what may proceed; it does not bypass other approval rules. Do not add a plan approval merely because work spans several files, and do not propose a new scope mid-run just to widen it. Let the installed gate request any scope expansion before the edit executes. Only file paths are checked, and only on tool calls that carry one, so put a boundary that is not a path (recipients, channels, spend, systems you will not open) in \`promises\` and never in \`allowedPaths\`. Read the \`enforces\` field that comes back: an empty array means nothing in that contract is checked automatically, and you must say so rather than report that a scope is in force. \`hookSeen: false\` means no hook has reported that sessionId, so the gate will never find the contract: fix the session id rather than proceeding as if a scope were in force.
-- Before a task of more than two steps, break it into steps and find the forks. Settle by yourself every fork that a file, a command or a tool call can answer, then ask the rest as one numbered round with your recommended answer against each. A question in the terminal is free; a push is not. When the user is at the terminal, ask the whole round there. When the user is away, send only the fork that stops the run, and decide the rest on your recommendation.
+- Before a task of more than two steps, break it into steps and find the forks. Settle by yourself every fork that a file, a command or a tool call can answer, then ask the rest as one numbered round with your recommended answer against each. A question in the terminal is free; a push is not. When the user is at the terminal, ask the whole round there. When the user is away, send only the fork that stops the run. Decide another fork on your recommendation only if it is reversible, spends nothing and stays inside the task, and list it in your final message; ask the rest once the first answer is back.
 - When you are blocked, stuck, or hit an error you cannot resolve on your own, call \`send_notification\` so the user knows, and call \`ask_user\` if you need a decision to continue.
 - When meaningful work finishes while the user is away, or they requested an alert, call \`send_notification\` so the user knows it is done. Skip trivial completions and duplicate reports to someone already reading. Always pass \`context\` with a \`type\` of "task_complete", "error" or "info": it is what tells Pushary this is a task update, so the user's own setting for where updates land can route it.
 - Confirm notifications can offer lock-screen actions; arbitrary choices and text open the app. The Mac notch handles personal account questions, not Partner customer enrollment.

package/dist/{chunk-JTYZEP4Q.js → chunk-POKCUYIQ.js}

@@ -7,7 +7,7 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-W3VRQEL3.js";
+} from "./chunk-7GYDMVHV.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-D3QGBMO3.js → chunk-QF6OJUWQ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-TTTK44RK.js";
+} from "./chunk-GGGOFJBL.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";

package/dist/{chunk-APSYBSMG.js → chunk-QG5Y5A36.js}

@@ -1,13 +1,13 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-O6T3CLWT.js";
+} from "./chunk-5Z43EFX2.js";
 import {
   hermesReceiptPaths,
   hermesSetupPredatesThePluginFolder,
   installHermesPlugin,
   refreshHermesPluginFiles,
   shippedHermesPlugin
-} from "./chunk-I4RNLK5G.js";
+} from "./chunk-TNPKYKXU.js";
 import {
   fxIgnoresInstructionsFile,
   fxInstructionsBody,
@@ -16,7 +16,7 @@ import {
   macAppFxBridge,
   refreshClineKey,
   switchFxHttpEntryToBridge
-} from "./chunk-2TEX3APZ.js";
+} from "./chunk-4OP5GWHQ.js";
 import {
   OPENCODE_HOOK_BINARY,
   agentHookOwner,
@@ -28,16 +28,16 @@ import {
   openCodePluginDir,
   openCodeWired,
   withOpenCodeAskRules
-} from "./chunk-CV56MBIZ.js";
+} from "./chunk-TSCFJJIB.js";
 import {
   detectClaudeVersion
-} from "./chunk-UB7VUSSX.js";
+} from "./chunk-LUSWC2MV.js";
 import {
   addCompatibleHooks,
   compatibleConfigFile,
   compatibleInstructionsFile,
   hasCompatibleHooks
-} from "./chunk-5TMGEQAC.js";
+} from "./chunk-VJZGR4N3.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
@@ -49,7 +49,7 @@ import {
   geminiWired,
   hasGeminiHooks,
   planHooks
-} from "./chunk-IEAABGST.js";
+} from "./chunk-YU5ACKJP.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -95,7 +95,7 @@ import {
   renderAgentInstructions,
   supportedClaudeEvents,
   vscodePluginMcp
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   formatVersion,
   hookCommandsUseBareNames,
@@ -104,12 +104,12 @@ import {
   resolveGlobalBinary,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   isCompatibleAgentType,
   isRecord
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-J4TQYGHU.js → chunk-QSDZE2B7.js}

@@ -1,19 +1,19 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-CV56MBIZ.js";
+} from "./chunk-TSCFJJIB.js";
 import {
   keyPrefix
-} from "./chunk-CXZAKS7S.js";
+} from "./chunk-FRPR4OTH.js";
 import {
   bridgeAgentKey
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   readJsonSafe
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   isRecord,
   isValidApiKey
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-4S5XVFDV.js → chunk-RPNT4D3K.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-6L2U3TP3.js → chunk-SAPRO7FI.js}

@@ -4,23 +4,23 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-CXZAKS7S.js";
+} from "./chunk-FRPR4OTH.js";
 import {
   getMachineId
-} from "./chunk-YAMNJXCD.js";
+} from "./chunk-V4JZHAOY.js";
 import {
   pusharyDir
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   readJsonSafe,
   resolveGlobalBinary,
   writeFileAtomic,
   writeJsonAtomic,
   writeJsonAtomicDurable
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   getApiKey
-} from "./chunk-ONUAAXAW.js";
+} from "./chunk-JSZT4Q23.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimScriptOf,
@@ -30,7 +30,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-ESRKYHWE.js → chunk-SBK7WGSE.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   writeJsonAtomic
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 
 // src/upgrade-lock.ts
 import { fork } from "child_process";

package/dist/{chunk-L77YWBMK.js → chunk-TD5PW2VI.js}

@@ -3,10 +3,10 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-ESRKYHWE.js";
+} from "./chunk-SBK7WGSE.js";
 import {
   phoneStartIsRequired
-} from "./chunk-UYTPCZ4M.js";
+} from "./chunk-4QGV3II7.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -18,25 +18,25 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-S2DLTWFG.js";
+} from "./chunk-ZHL6F2KC.js";
 import {
   autoUpdateLock,
   autoUpdateLog,
   autoUpdateState
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   execNpm,
   fetchLatestPublishedVersion,
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-TTTK44RK.js";
+} from "./chunk-GGGOFJBL.js";
 import {
   commandsPackage,
   globalUpgradeEntry,

package/dist/{chunk-WLOVGZ7R.js → chunk-TFJQAPIA.js}

@@ -1,9 +1,9 @@
 import {
   findNativeClaudeInstall
-} from "./chunk-TO77OYLM.js";
+} from "./chunk-7ZYVX2KN.js";
 import {
   isFile
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 
 // src/wrapper/claudeBinary.ts
 import { homedir } from "os";

package/dist/{chunk-I4RNLK5G.js → chunk-TNPKYKXU.js}

@@ -5,19 +5,19 @@ import {
   hermesAppWiringRecord,
   hermesConfigReceipt,
   hermesSetupReceipt
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   readJsonSafe,
   resolvePathBinary,
   writeJsonAtomic
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   isNewerVersion,
   isReleaseVersion
 } from "./chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/hermes/plugin-payload.ts
 import { createHash } from "crypto";
@@ -571,11 +571,14 @@ def _configured_key():
     return _key_in_pushary_config()
 
 
+def pushary_config_path():
+    configured = os.environ.get("PUSHARY_CONFIG_FILE")
+    return Path(configured).expanduser() if configured else Path.home() / ".pushary" / "config.json"
+
+
 def _key_in_pushary_config():
-    path = Path(os.environ.get("PUSHARY_CONFIG_FILE", "")).expanduser() \\
-        if os.environ.get("PUSHARY_CONFIG_FILE") else Path.home() / ".pushary" / "config.json"
     try:
-        value = json.loads(path.read_text(encoding="utf-8")).get("apiKey")
+        value = json.loads(pushary_config_path().read_text(encoding="utf-8")).get("apiKey")
         return value if isinstance(value, str) and value else None
     except Exception:
         return None
@@ -951,6 +954,7 @@ import threading
 import time
 from datetime import datetime, timezone
 from pathlib import Path
+from typing import NamedTuple
 
 from . import api
 
@@ -958,8 +962,26 @@ logger = logging.getLogger(__name__)
 MAX_MESSAGES = 5000
 MAX_SOURCE_BYTES = 20_000_000
 POLL_SECONDS = 5
+SNAPSHOT_REFRESH_SECONDS = 60
+AUTHORIZATION_LIFETIME_SECONDS = 60
+SNAPSHOT_RETENTION_SECONDS = 48 * 60 * 60
+SNAPSHOT_PRUNE_INTERVAL_SECONDS = 60 * 60
+SOURCE_UNAVAILABLE = "source_unavailable"
+HISTORY_NOT_ALLOWED_WARNING = ("[pushary] Hermes session history is not saved on this computer; it needs "
+                               "\`npx pushary@latest setup\` with the key Hermes uses, or Session history turned on in the Pushary Mac app")
+
+
+class _Authorization(NamedTuple):
+    inputs: tuple[object, ...]
+    expires_at: float
+    command: list[str] | None
+
+
 _workers: dict[tuple[str, str], tuple[threading.Event, threading.Thread]] = {}
+_authorizations: dict[str, _Authorization] = {}
 _lock = threading.Lock()
+_next_prune_at = 0.0
+_history_not_allowed_reported = False
 
 
 def _text_blocks(content: object) -> list[dict[str, object]]:
@@ -1088,8 +1110,7 @@ def _registration_command(key: str) -> list[str] | None:
             command = [helper, "hermes"]
         result = subprocess.run([helper, "authorize-export"],
                                 input=json.dumps({"apiKey": key, "baseUrl": api.BASE_URL}), text=True,
-                                stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, timeout=5, check=False,
-                                env={**os.environ, "PUSHARY_API_KEY": key, "PUSHARY_BASE_URL": api.BASE_URL})
+                                stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, timeout=5, check=False)
         if result.returncode != 0:
             return None
         authorization = json.loads(result.stdout)
@@ -1100,27 +1121,146 @@ def _registration_command(key: str) -> list[str] | None:
         return None
 
 
+def _file_state(path: Path | None) -> tuple[int, ...] | None:
+    if path is None:
+        return None
+    try:
+        info = os.lstat(path)
+    except OSError:
+        return None
+    return (info.st_ino, info.st_mode, info.st_nlink, info.st_uid, info.st_size, info.st_mtime_ns, info.st_ctime_ns)
+
+
+def _authorization_inputs(key: str) -> tuple[object, ...]:
+    root = Path.home() / ".pushary"
+    helper = shutil.which("pushary-transcript-register")
+    sources = (root / "native-transcript-consent.json", root / "bridge-auth", root / "bridge-auth" / "agent-key.json",
+               root / "machine-id", root / "bin" / "pushary-bridge", api.pushary_config_path(),
+               Path(helper) if helper else None)
+    return (key, api.BASE_URL, os.environ.get("PUSHARY_TRANSCRIPTS"), helper, *(_file_state(source) for source in sources))
+
+
+def _authorized_command(key: str) -> list[str] | None:
+    inputs = _authorization_inputs(key)
+    now = time.monotonic()
+    with _lock:
+        cached = _authorizations.get(key)
+    if cached is not None and cached.inputs == inputs and now < cached.expires_at:
+        return cached.command
+    command = _registration_command(key)
+    with _lock:
+        _authorizations[key] = _Authorization(inputs, now + AUTHORIZATION_LIFETIME_SECONDS, command)
+    return command
+
+
+def _report_history_not_allowed_once() -> None:
+    global _history_not_allowed_reported
+    with _lock:
+        if _history_not_allowed_reported:
+            return
+        _history_not_allowed_reported = True
+    logger.warning(HISTORY_NOT_ALLOWED_WARNING)
+
+
+def _history_root() -> Path:
+    return Path.home() / ".pushary" / "hermes-history"
+
+
+def _snapshot_expired(path: Path, now: float) -> bool:
+    return now - path.lstat().st_mtime > SNAPSHOT_RETENTION_SECONDS
+
+
+def _prune_expired_snapshots(root: Path, now: float) -> None:
+    try:
+        bindings = [entry for entry in root.iterdir() if not entry.is_symlink() and entry.is_dir()]
+    except OSError:
+        return
+    for binding in bindings:
+        try:
+            snapshots = list(binding.iterdir())
+        except OSError:
+            continue
+        for snapshot in snapshots:
+            try:
+                if _snapshot_expired(snapshot, now):
+                    snapshot.unlink()
+            except OSError:
+                continue
+
+
+def _prune_expired_snapshots_periodically() -> None:
+    global _next_prune_at
+    now = time.monotonic()
+    with _lock:
+        if now < _next_prune_at:
+            return
+        _next_prune_at = now + SNAPSHOT_PRUNE_INTERVAL_SECONDS
+    _prune_expired_snapshots(_history_root(), time.time())
+
+
+def _source_state(database_path: Path) -> tuple[object, ...]:
+    return (_file_state(database_path), _file_state(database_path.with_name(database_path.name + "-wal")))
+
+
+def _snapshot_refresh_due(written_at: float | None, now: float) -> bool:
+    return written_at is None or not 0 <= now - written_at < SNAPSHOT_REFRESH_SECONDS
+
+
+def _is_permanent_source_failure(failure: Exception) -> bool:
+    return isinstance(failure, ValueError)
+
+
+def _snapshot_digest(messages: list[dict[str, object]], error: str | None, completed: bool) -> str:
+    encoded = json.dumps([messages, error, completed], ensure_ascii=True, allow_nan=False).encode("utf-8")
+    return hashlib.sha256(encoded).hexdigest()
+
+
+def _write_changed_snapshot(path: Path, session_id: str, messages: list[dict[str, object]], error: str | None,
+                            completed: bool, written: str | None, refresh_due: bool) -> str | None:
+    digest = _snapshot_digest(messages, error, completed)
+    if not refresh_due and digest == written:
+        return None
+    write_snapshot(path, session_id, messages, error=error, completed=completed)
+    return digest
+
+
 def _export_loop(database_path: Path, session_id: str, key: str, command: list[str], stop: threading.Event) -> None:
     binding = hashlib.sha256((api.BASE_URL.rstrip("/") + "\\0" + key + "\\0" + str(database_path)).encode()).hexdigest()
-    path = Path.home() / ".pushary" / "hermes-history" / binding / f"{session_id}.json"
+    path = _history_root() / binding / f"{session_id}.json"
     next_registration = 0
+    written_at = None
+    source_state = None
+    written = None
     warned = False
     revoked = False
     try:
         while True:
-            if api._get_api_key() != key or _registration_command(key) != command:
+            if api._get_api_key() != key or _authorized_command(key) != command:
                 revoked = True
                 break
             ending = stop.is_set()
-            try:
-                messages = read_display_history(database_path, session_id)
-                write_snapshot(path, session_id, messages, completed=ending)
-                warned = False
-            except Exception:
-                if not warned:
+            now = time.time()
+            refresh_due = ending or _snapshot_refresh_due(written_at, now)
+            current_state = _source_state(database_path)
+            if refresh_due or current_state != source_state:
+                source_state = current_state
+                error = None
+                try:
+                    messages = read_display_history(database_path, session_id)
+                except Exception as failure:
+                    messages, error = [], SOURCE_UNAVAILABLE
+                    if not _is_permanent_source_failure(failure):
+                        source_state = None
+                try:
+                    digest = _write_changed_snapshot(path, session_id, messages, error, ending and error is None, written, refresh_due)
+                except ValueError:
+                    messages, error = [], SOURCE_UNAVAILABLE
+                    digest = _write_changed_snapshot(path, session_id, messages, error, False, written, refresh_due)
+                if digest is not None:
+                    written, written_at = digest, now
+                if error is not None and not warned:
                     logger.warning("[pushary] Hermes history source is unavailable; existing phone history is preserved")
-                warned = True
-                write_snapshot(path, session_id, [], error="source_unavailable")
+                warned = error is not None
             if ending or time.monotonic() >= next_registration:
                 payload = {"session_id": session_id, "cwd": str(database_path.parent), "transcript_path": str(path),
                            "hook_event_name": "SessionEnd" if ending else "SessionStart"}
@@ -1148,16 +1288,18 @@ def start_history(session_id: object, parent_session_id: object = None) -> None:
     try:
         from hermes_constants import get_hermes_home
 
-        key = api._get_api_key()
-        command = _registration_command(key)
-        if command is None:
-            return
+        _prune_expired_snapshots_periodically()
         database_path = (get_hermes_home() / "state.db").resolve()
         identity = (str(database_path), session_id)
         with _lock:
             if identity in _workers or len(_workers) >= 32:
                 return
-            stop = threading.Event()
+        key = api._get_api_key()
+        command = _authorized_command(key)
+        if command is None:
+            _report_history_not_allowed_once()
+            return
+        stop = threading.Event()
         context = contextvars.copy_context()
         thread = threading.Thread(target=context.run, args=(_export_loop, database_path, session_id, key, command, stop),
                                   name="pushary-history", daemon=True)
@@ -1321,7 +1463,7 @@ def record_plugin_load(approval_transport_registered, home=None, pid=None, now=N
         logger.debug("[pushary] could not record the plugin load: %s", exc)
         return None
 ` },
-  { path: "plugin.yaml", contents: "name: pushary\nversion: 0.9.0\ndescription: Push notifications and human-in-the-loop for Hermes Agent via Pushary\nauthor: RalphNex OU\nrequires_env:\n  - name: PUSHARY_API_KEY\n    description: Your Pushary API key\n    url: https://pushary.com/sign-up?from=hermes\n    secret: true\nprovides_tools:\n  - pushary_remind\n  - pushary_notify\n  - pushary_ask\n  - pushary_wait\n  - pushary_cancel\n  - pushary_propose_scope\n  - pushary_enroll\n  - pushary_ask_end_user\nprovides_hooks:\n  - pre_llm_call\n  - pre_tool_call\n  - post_tool_call\n  - on_session_start\n  - on_session_end\n  - on_session_finalize\nprovides_approval_transports:\n  - pushary\n" },
+  { path: "plugin.yaml", contents: "name: pushary\nversion: 0.9.1\ndescription: Push notifications and human-in-the-loop for Hermes Agent via Pushary\nauthor: RalphNex OU\nrequires_env:\n  - name: PUSHARY_API_KEY\n    description: Your Pushary API key\n    url: https://pushary.com/sign-up?from=hermes\n    secret: true\nprovides_tools:\n  - pushary_remind\n  - pushary_notify\n  - pushary_ask\n  - pushary_wait\n  - pushary_cancel\n  - pushary_propose_scope\n  - pushary_enroll\n  - pushary_ask_end_user\nprovides_hooks:\n  - pre_llm_call\n  - pre_tool_call\n  - post_tool_call\n  - on_session_start\n  - on_session_end\n  - on_session_finalize\nprovides_approval_transports:\n  - pushary\n" },
   { path: "schemas.py", contents: `PUSHARY_REMIND = {
     "name": "pushary_remind",
     "description": "Schedule a one-time personal reminder on Pushary, even after Hermes exits. Use body plus in_minutes or at (ISO timestamp with explicit UTC offset, within 30 days). Never guess the user's timezone. Confirm the returned time. No arguments lists pending reminders; cancel_reminder_id cancels a scheduled one. Use Hermes cron for agent work; use this for reminding the operator.",