pushary 1.8.0

package/dist/bin/pushary-stats.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-stats.js

@@ -0,0 +1,44 @@
+#!/usr/bin/env node
+import {
+  readLedgerSummary
+} from "../chunk-JU6W3XAU.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-HZVVNGEW.js";
+import "../chunk-KZERVKTD.js";
+import {
+  getApiKey
+} from "../chunk-GPEGOGRJ.js";
+import "../chunk-E4FJTUH4.js";
+import "../chunk-NQTHFF4W.js";
+
+// bin/pushary-stats.ts
+exitOnHelpFlag("stats");
+var DAYS = 7;
+var summary = readLedgerSummary(DAYS);
+var connected = true;
+try {
+  getApiKey();
+} catch {
+  connected = false;
+}
+var plural = (count, word) => count === 1 ? word : `${word}s`;
+if (summary.count === 0) {
+  if (connected) {
+    console.log("No locally counted approval moments in the last 7 days. Connected sessions land in your dashboard: https://pushary.com/dashboard/agent/activity");
+  } else {
+    console.log("No approval moments counted yet. Run your agent with the Pushary hooks installed and check back after a session or two.");
+  }
+  process.exit(0);
+}
+var toolLines = Object.entries(summary.byTool).sort((a, b) => b[1] - a[1]).map(([tool, count]) => `  ${tool}: ${count}`).join("\n");
+console.log(`In the last ${DAYS} days, your agents hit ${summary.count} approval ${plural(summary.count, "moment")} across ${summary.sessions} ${plural(summary.sessions, "session")} while Pushary was not connected:
+`);
+console.log(toolLines);
+console.log();
+if (connected) {
+  console.log("A key is configured now, so new moments reach your phone instead of waiting in the terminal.");
+} else {
+  console.log("Each of those sat in the terminal until you noticed. With Pushary they land on your lock screen as a yes or no.");
+  console.log("3-day trial: https://pushary.com/sign-up?utm_source=cli&utm_medium=stats");
+}

package/dist/bin/pushary-status.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-status.js

@@ -0,0 +1,262 @@
+#!/usr/bin/env node
+import {
+  describeLastSeen,
+  listMachines
+} from "../chunk-DE4Y6TCC.js";
+import "../chunk-HQ6G3B5R.js";
+import "../chunk-WE2J62NC.js";
+import "../chunk-XHKBHWLX.js";
+import {
+  describeReach,
+  fetchChannels,
+  reachVerdict
+} from "../chunk-M5JDZ45W.js";
+import "../chunk-3EGEA4KH.js";
+import "../chunk-QCGNGEGE.js";
+import {
+  createIo
+} from "../chunk-U4TMAANR.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-HZVVNGEW.js";
+import {
+  rejectUnknownFlags
+} from "../chunk-GMXKITVA.js";
+import {
+  readKeySource
+} from "../chunk-P7WQEVWA.js";
+import "../chunk-M5ICYGHT.js";
+import {
+  checkApiKey,
+  describeKeyCheck
+} from "../chunk-2ABTSGFT.js";
+import "../chunk-2OY3ZZ5N.js";
+import "../chunk-LXQ5FBBD.js";
+import {
+  UsageError
+} from "../chunk-7QLSKOSU.js";
+import {
+  EXIT
+} from "../chunk-KZERVKTD.js";
+import "../chunk-DB3ONZB4.js";
+import "../chunk-A2A2YTMG.js";
+import "../chunk-T7E75EKA.js";
+import "../chunk-GPEGOGRJ.js";
+import "../chunk-E4FJTUH4.js";
+import "../chunk-NQTHFF4W.js";
+
+// src/status.ts
+var keySourceLine = (source) => {
+  if (source.kind === "none") {
+    return { label: "Key", value: "none found", ok: false };
+  }
+  const prefix = source.key ? source.key.split(".")[0] : "unknown";
+  const where = source.kind === "env" ? "$PUSHARY_API_KEY" : source.origin ?? "config file";
+  return { label: "Key", value: `${prefix} from ${where}`, ok: true };
+};
+var reachLine = (channels) => {
+  const verdict = reachVerdict(channels);
+  const line = describeReach(channels);
+  if (verdict.kind === "nobody") return { label: "Reachable", value: line, ok: false };
+  if (verdict.kind === "yours") {
+    const inPocket = (channels.yours?.phoneReachable ?? channels.phoneReachable) || channels.webPhone > 0;
+    return { label: "Reachable", value: line, ok: inPocket };
+  }
+  return { label: "Reachable", value: line, ok: false };
+};
+var siteLine = (channels) => {
+  const site = channels.site;
+  if (site === null || site.otherMembers === 0) return null;
+  const devices2 = site.appDevices + site.webActive;
+  return {
+    label: "Team",
+    value: `${devices2} device${devices2 === 1 ? "" : "s"} across ${site.otherMembers + 1} members`,
+    ok: null
+  };
+};
+var buildStatusReport = (facts) => {
+  const lines = [keySourceLine(facts.source)];
+  if (facts.source.drift) {
+    lines.push({
+      label: "Key drift",
+      value: `$PUSHARY_API_KEY (${facts.source.drift.envPrefix}) differs from ${facts.source.drift.configPath} (${facts.source.drift.configPrefix}); the environment wins`,
+      ok: false
+    });
+  }
+  if (facts.source.kind === "none") {
+    return {
+      lines,
+      headline: "Not set up on this machine.",
+      next: ["Run `pushary setup` to connect an agent."],
+      exitCode: EXIT.NOT_CONFIGURED
+    };
+  }
+  const check = facts.keyCheck;
+  if (check && check.kind !== "ok") {
+    const report = describeKeyCheck(check);
+    lines.push({ label: "Server", value: report.message, ok: check.kind === "unreachable" ? null : false });
+    return { lines, headline: report.message, next: [...report.next], exitCode: report.exitCode };
+  }
+  if (check?.kind === "ok") {
+    const id = check.identity;
+    lines.push({ label: "Site", value: `${id.siteName || id.siteSlug} (${id.siteSlug})`, ok: true });
+    lines.push({
+      label: "Plan",
+      value: id.plan === id.surfacePlan ? `${id.plan} \xB7 ${id.subscriptionStatus}` : `${id.plan} (from ${id.surfacePlan}) \xB7 ${id.subscriptionStatus}`,
+      ok: true
+    });
+    if (id.workspaceMembers > 1) {
+      lines.push({
+        label: "Workspace",
+        value: `${id.workspaceMembers} members \u2014 some devices below may not be yours`,
+        ok: null
+      });
+    }
+  }
+  const channels = facts.channels?.kind === "ok" ? facts.channels.status : null;
+  if (channels) {
+    lines.push(reachLine(channels));
+    const site = siteLine(channels);
+    if (site) lines.push(site);
+  } else if (facts.channels && facts.channels.kind === "unreachable") {
+    lines.push({ label: "Reachable", value: `could not check (${facts.channels.detail})`, ok: null });
+  }
+  if (facts.source.drift) {
+    return {
+      lines,
+      headline: "Working, but two different keys are configured.",
+      next: [
+        "The shell export wins over the config file, and it may be the older one.",
+        "Run `pushary setup` to line them up, or open a new terminal."
+      ],
+      exitCode: EXIT.PROBLEMS_FOUND
+    };
+  }
+  if (facts.channels && facts.channels.kind === "unreachable") {
+    return {
+      lines,
+      headline: "Key is fine; could not read which devices are connected.",
+      next: ["Run `pushary status` again in a minute."],
+      exitCode: EXIT.UNREACHABLE
+    };
+  }
+  if (channels) {
+    const verdict = reachVerdict(channels);
+    if (verdict.kind !== "yours") {
+      return {
+        lines,
+        headline: verdict.kind === "nobody" ? "Configured, but no device can receive an approval." : verdict.kind === "others" ? "Configured, but the only devices here are your teammates'." : "Configured, and nothing proves an approval reaches you.",
+        next: verdict.kind === "nobody" ? ["Run `pushary connect` to add your phone, or install the Pushary app."] : ["Run `pushary connect` to add your own phone.", "Or `pushary doctor --roundtrip` to prove one of these is yours."],
+        exitCode: EXIT.NO_DEVICE
+      };
+    }
+    if (!(channels.yours?.phoneReachable ?? channels.phoneReachable) && channels.webPhone === 0) {
+      return {
+        lines,
+        headline: "Configured, but nothing in your pocket can receive an approval.",
+        next: ["Run `pushary connect` and connect your phone, or install the Pushary app."],
+        exitCode: EXIT.NO_DEVICE
+      };
+    }
+  }
+  return {
+    lines,
+    headline: "Ready.",
+    next: [],
+    exitCode: EXIT.OK
+  };
+};
+var statusJson = (facts, report) => ({
+  ok: report.exitCode === EXIT.OK,
+  headline: report.headline,
+  exitCode: report.exitCode,
+  keySource: facts.source.kind,
+  keyOrigin: facts.source.origin,
+  keyPrefix: facts.source.key ? facts.source.key.split(".")[0] : null,
+  drift: facts.source.drift ? {
+    env: facts.source.drift.envPrefix,
+    config: facts.source.drift.configPrefix,
+    configPath: facts.source.drift.configPath
+  } : null,
+  keyCheck: facts.keyCheck?.kind ?? null,
+  identity: facts.keyCheck?.kind === "ok" ? facts.keyCheck.identity : null,
+  channels: facts.channels?.kind === "ok" ? facts.channels.status : null,
+  channelsProbe: facts.channels?.kind ?? null
+});
+
+// bin/pushary-status.ts
+exitOnHelpFlag("status");
+var { bold, dim, green, red, yellow } = createIo();
+var args = process.argv.slice(2);
+try {
+  rejectUnknownFlags(args.filter((a) => a !== "status"), ["--json", "--devices"]);
+} catch (err) {
+  process.stderr.write(`  ! ${err instanceof Error ? err.message : String(err)}
+`);
+  process.exit(EXIT.USAGE);
+}
+var json = args.includes("--json");
+var devices = args.includes("--devices");
+var main = async () => {
+  const source = readKeySource();
+  let keyCheck = null;
+  let channels = null;
+  if (source.key) {
+    keyCheck = await checkApiKey(source.key);
+    if (keyCheck.kind === "ok") channels = await fetchChannels(source.key);
+  }
+  const machines = devices && keyCheck?.kind === "ok" ? await listMachines(source.key) : null;
+  const facts = { source, keyCheck, channels };
+  const report = buildStatusReport(facts);
+  if (json) {
+    const payload = statusJson(facts, report);
+    if (machines) {
+      payload.machines = machines.kind === "ok" ? machines.machines : [];
+      if (machines.kind !== "ok") payload.machinesUnavailable = machines.kind;
+    }
+    process.stdout.write(`${JSON.stringify(payload, null, 2)}
+`);
+    process.exit(report.exitCode);
+  }
+  const width = Math.max(...report.lines.map((line) => line.label.length)) + 2;
+  console.log();
+  console.log(`  ${bold("Pushary")}`);
+  console.log();
+  for (const line of report.lines) {
+    const icon = line.ok === true ? green("\u2713") : line.ok === false ? red("\u2717") : dim("\xB7");
+    console.log(`  ${icon} ${line.label.padEnd(width)}${line.value}`);
+  }
+  if (machines) {
+    console.log();
+    console.log(`  ${bold("Machines")}`);
+    if (machines.kind === "unsupported") {
+      console.log(`  ${dim("This server does not report machines yet.")}`);
+    } else if (machines.kind === "failed") {
+      console.log(`  ${dim(`Could not read the machine list (${machines.detail}).`)}`);
+    } else if (machines.machines.length === 0) {
+      console.log(`  ${dim("None registered. Run")} pushary daemon ${dim("to keep a machine reachable.")}`);
+    } else {
+      const hostWidth = Math.max(...machines.machines.map((m) => m.hostname.length)) + 2;
+      for (const machine of machines.machines) {
+        const mark = machine.online ? green("\u25CF") : dim("\u25CB");
+        console.log(
+          `  ${mark} ${machine.hostname.padEnd(hostWidth)}${dim(`${machine.cliVersion}  ${describeLastSeen(machine.lastSeenAt)}`)}`
+        );
+      }
+    }
+  }
+  console.log();
+  console.log(`  ${report.exitCode === 0 ? green(bold(report.headline)) : yellow(bold(report.headline))}`);
+  for (const next of report.next) console.log(`  ${dim(next)}`);
+  console.log();
+  process.exit(report.exitCode);
+};
+main().catch((err) => {
+  if (err instanceof UsageError) {
+    process.stderr.write(`  ! ${err.message}
+`);
+    process.exit(EXIT.USAGE);
+  }
+  console.error(`  ${yellow("!")} status failed: ${err instanceof Error ? err.message : String(err)}`);
+  process.exit(1);
+});

package/dist/bin/pushary-stop-hook.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-stop-hook.js

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+import {
+  activeHookSource,
+  activeIdentity
+} from "../chunk-J5TIV3J6.js";
+import "../chunk-AXPCESYO.js";
+import {
+  readHookInput
+} from "../chunk-KGDWDSNL.js";
+import "../chunk-JZTHGAPA.js";
+import "../chunk-SGZJ5LYH.js";
+import "../chunk-EYK3GSRH.js";
+import "../chunk-ZVSKMPBZ.js";
+import "../chunk-C2WCPBF7.js";
+import "../chunk-6J2JC2RT.js";
+import "../chunk-WE2J62NC.js";
+import "../chunk-3EVPNIBE.js";
+import "../chunk-OKXS7WDZ.js";
+import "../chunk-MPWXGONV.js";
+import "../chunk-SAXBC4AZ.js";
+import "../chunk-OLQRRFBX.js";
+import "../chunk-XHKBHWLX.js";
+import {
+  handleStop,
+  handleSubagentStop,
+  isSubagentStop
+} from "../chunk-CULUZTWQ.js";
+import "../chunk-N6IOSZOE.js";
+import "../chunk-EPCXUP3P.js";
+import "../chunk-NGDD6TXY.js";
+import "../chunk-CVQYGMSR.js";
+import "../chunk-POFBE6ZY.js";
+import "../chunk-GMXKITVA.js";
+import "../chunk-P7WQEVWA.js";
+import "../chunk-M5ICYGHT.js";
+import "../chunk-2ABTSGFT.js";
+import "../chunk-2OY3ZZ5N.js";
+import "../chunk-LXQ5FBBD.js";
+import "../chunk-7QLSKOSU.js";
+import "../chunk-KZERVKTD.js";
+import "../chunk-DB3ONZB4.js";
+import "../chunk-A2A2YTMG.js";
+import "../chunk-T7E75EKA.js";
+import "../chunk-GPEGOGRJ.js";
+import "../chunk-E4FJTUH4.js";
+import "../chunk-NQTHFF4W.js";
+
+// bin/pushary-stop-hook.ts
+var AGENT = activeIdentity(process.argv);
+var main = async () => {
+  const input = await readHookInput(activeHookSource(process.argv), "Stop");
+  if (!input) return;
+  try {
+    if (isSubagentStop(input)) {
+      await handleSubagentStop(input, AGENT);
+      return;
+    }
+    const output = await handleStop(input, AGENT);
+    if (output) process.stdout.write(JSON.stringify(output));
+  } catch {
+  }
+};
+main();

package/dist/bin/pushary-stopfailure-hook.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-stopfailure-hook.js

@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+import {
+  activeHookSource,
+  activeIdentity
+} from "../chunk-J5TIV3J6.js";
+import "../chunk-AXPCESYO.js";
+import {
+  readHookInput
+} from "../chunk-KGDWDSNL.js";
+import "../chunk-JZTHGAPA.js";
+import "../chunk-SGZJ5LYH.js";
+import "../chunk-EYK3GSRH.js";
+import "../chunk-ZVSKMPBZ.js";
+import "../chunk-C2WCPBF7.js";
+import "../chunk-6J2JC2RT.js";
+import "../chunk-WE2J62NC.js";
+import "../chunk-3EVPNIBE.js";
+import "../chunk-OKXS7WDZ.js";
+import "../chunk-MPWXGONV.js";
+import "../chunk-SAXBC4AZ.js";
+import "../chunk-OLQRRFBX.js";
+import "../chunk-XHKBHWLX.js";
+import {
+  handleStopFailure
+} from "../chunk-CULUZTWQ.js";
+import "../chunk-N6IOSZOE.js";
+import "../chunk-EPCXUP3P.js";
+import "../chunk-NGDD6TXY.js";
+import "../chunk-CVQYGMSR.js";
+import "../chunk-POFBE6ZY.js";
+import "../chunk-GMXKITVA.js";
+import "../chunk-P7WQEVWA.js";
+import "../chunk-M5ICYGHT.js";
+import "../chunk-2ABTSGFT.js";
+import "../chunk-2OY3ZZ5N.js";
+import "../chunk-LXQ5FBBD.js";
+import "../chunk-7QLSKOSU.js";
+import "../chunk-KZERVKTD.js";
+import "../chunk-DB3ONZB4.js";
+import "../chunk-A2A2YTMG.js";
+import "../chunk-T7E75EKA.js";
+import "../chunk-GPEGOGRJ.js";
+import "../chunk-E4FJTUH4.js";
+import "../chunk-NQTHFF4W.js";
+
+// bin/pushary-stopfailure-hook.ts
+var AGENT = activeIdentity(process.argv);
+var main = async () => {
+  const input = await readHookInput(activeHookSource(process.argv), "StopFailure");
+  if (!input) return;
+  try {
+    await handleStopFailure(input, AGENT);
+  } catch {
+  }
+};
+main();

package/dist/bin/pushary-suggestions.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-suggestions.js

@@ -0,0 +1,100 @@
+#!/usr/bin/env node
+import {
+  createIo
+} from "../chunk-U4TMAANR.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-HZVVNGEW.js";
+import {
+  rejectUnknownFlags
+} from "../chunk-GMXKITVA.js";
+import {
+  UsageError
+} from "../chunk-7QLSKOSU.js";
+import {
+  EXIT
+} from "../chunk-KZERVKTD.js";
+import {
+  getApiKey,
+  getBaseUrl
+} from "../chunk-GPEGOGRJ.js";
+import "../chunk-E4FJTUH4.js";
+import "../chunk-NQTHFF4W.js";
+
+// bin/pushary-suggestions.ts
+exitOnHelpFlag("suggestions");
+var { dim, green, cyan, red } = createIo();
+var errorMessage = async (res) => {
+  try {
+    const body = await res.json();
+    return body.error ?? `HTTP ${res.status}`;
+  } catch {
+    return `HTTP ${res.status}`;
+  }
+};
+{
+  const raw = process.argv.slice(2);
+  const positional = raw[0] === "suggestions" ? raw.slice(1) : raw;
+  try {
+    rejectUnknownFlags(positional, []);
+  } catch (err) {
+    process.stderr.write(`  ! ${err instanceof Error ? err.message : String(err)}
+`);
+    process.exit(EXIT.USAGE);
+  }
+}
+var main = async () => {
+  const apiKey = getApiKey();
+  const baseUrl = getBaseUrl();
+  const headers = { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" };
+  const rest = process.argv.slice(2);
+  const args = rest[0] === "suggestions" ? rest.slice(1) : rest;
+  const sub = args[0];
+  if (sub === "accept") {
+    const id = args[1];
+    if (!id) {
+      console.error("Usage: pushary suggestions accept <id>");
+      process.exit(1);
+    }
+    const res2 = await fetch(`${baseUrl}/api/mcp/suggestions`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify({ id })
+    });
+    if (!res2.ok) {
+      console.error(`  ${red("\u2717")} ${await errorMessage(res2)}`);
+      process.exit(1);
+    }
+    console.log(`  ${green("\u2713")} Accepted. The rule is live now; your agents will pick it up on their next check.`);
+    return;
+  }
+  const res = await fetch(`${baseUrl}/api/mcp/suggestions`, { headers });
+  if (!res.ok) {
+    console.error(`  ${red("\u2717")} ${await errorMessage(res)}`);
+    process.exit(1);
+  }
+  const { suggestions } = await res.json();
+  if (suggestions.length === 0) {
+    console.log(`  ${dim("No pending suggestions. Keep approving; a rule is offered once a pattern is earned.")}`);
+    return;
+  }
+  console.log(`  ${suggestions.length} pending suggestion${suggestions.length === 1 ? "" : "s"}:
+`);
+  for (const s of suggestions) {
+    const verb = s.kind === "auto_approve" ? "Always allow" : "Always deny";
+    const evidence = s.kind === "auto_approve" ? `approved ${s.evidenceApproved}/${s.evidenceApproved + s.evidenceDenied} over ${s.windowDays}d` : `denied ${s.evidenceDenied}/${s.evidenceApproved + s.evidenceDenied} over ${s.windowDays}d`;
+    console.log(`  ${cyan(s.toolPattern)}  ${dim(s.id)}`);
+    console.log(`    ${verb} \u2014 ${evidence}`);
+    console.log(`    ${dim(`pushary suggestions accept ${s.id}`)}
+`);
+  }
+};
+main().catch((err) => {
+  if (err instanceof UsageError) {
+    process.stderr.write(`  ! ${err.message}
+`);
+    process.exit(EXIT.USAGE);
+  }
+  console.error(err instanceof Error ? err.message : String(err));
+  process.exit(1);
+});

package/dist/bin/pushary-transcript-register.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-transcript-register.js

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+import {
+  registerTranscript
+} from "../chunk-JZTHGAPA.js";
+import "../chunk-SGZJ5LYH.js";
+import "../chunk-EYK3GSRH.js";
+import "../chunk-ZVSKMPBZ.js";
+import "../chunk-C2WCPBF7.js";
+import "../chunk-6J2JC2RT.js";
+import "../chunk-WE2J62NC.js";
+import "../chunk-3EVPNIBE.js";
+import "../chunk-OKXS7WDZ.js";
+import "../chunk-MPWXGONV.js";
+import "../chunk-SAXBC4AZ.js";
+import "../chunk-OLQRRFBX.js";
+import "../chunk-XHKBHWLX.js";
+import "../chunk-EPCXUP3P.js";
+import "../chunk-GMXKITVA.js";
+import "../chunk-P7WQEVWA.js";
+import "../chunk-LXQ5FBBD.js";
+import "../chunk-7QLSKOSU.js";
+import "../chunk-KZERVKTD.js";
+import "../chunk-DB3ONZB4.js";
+import "../chunk-A2A2YTMG.js";
+import "../chunk-T7E75EKA.js";
+import "../chunk-GPEGOGRJ.js";
+import "../chunk-E4FJTUH4.js";
+import "../chunk-NQTHFF4W.js";
+
+// bin/pushary-transcript-register.ts
+var raw = "";
+for await (const chunk of process.stdin) {
+  raw += chunk;
+  if (raw.length > 1024 * 1024) process.exit(0);
+}
+try {
+  const input = JSON.parse(raw);
+  if (input && typeof input === "object" && !Array.isArray(input)) registerTranscript(process.argv[2] ?? "", input, void 0, { siteId: process.argv[3], baseUrl: process.argv[4] });
+} catch {
+}

package/dist/bin/pushary-transcripts.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-transcripts.js

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+import {
+  clearPin,
+  fingerprint,
+  loadPin
+} from "../chunk-SGZJ5LYH.js";
+import {
+  transcriptsEnabled
+} from "../chunk-OLQRRFBX.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-HZVVNGEW.js";
+import "../chunk-P7WQEVWA.js";
+import "../chunk-KZERVKTD.js";
+import "../chunk-DB3ONZB4.js";
+import "../chunk-T7E75EKA.js";
+import "../chunk-GPEGOGRJ.js";
+import "../chunk-E4FJTUH4.js";
+import "../chunk-NQTHFF4W.js";
+
+// bin/pushary-transcripts.ts
+exitOnHelpFlag("transcripts");
+var dim = (text) => `\x1B[2m${text}\x1B[0m`;
+var bold = (text) => `\x1B[1m${text}\x1B[0m`;
+var showStatus = () => {
+  const pin = loadPin();
+  console.log();
+  console.log(`  ${bold("Transcript sync")}  ${transcriptsEnabled() ? "on" : dim("off")}`);
+  console.log();
+  if (!pin) {
+    console.log(`  No keys pinned yet. The first sync on this machine records the keys it`);
+    console.log(`  seals to, and every later change has to be accepted here.`);
+    console.log();
+    return;
+  }
+  console.log(`  ${bold("Phone key")}         ${fingerprint(pin.phonePublicKey)}`);
+  console.log(`  ${dim("Compare this with the fingerprint in the app under Settings.")}`);
+  console.log();
+  if (pin.providerKeyId && pin.providerPublicKey) {
+    console.log(`  ${bold("Recovery key")}      ${pin.providerKeyId.slice(0, 16)}`);
+    console.log(`  ${dim("Pushary can recover a session sealed to this key under a documented")}`);
+    console.log(`  ${dim("legal obligation. Sessions sealed before it existed cannot be recovered.")}`);
+  } else {
+    console.log(`  ${bold("Recovery key")}      ${dim("none")}`);
+    console.log(`  ${dim("Only your phone can read these transcripts. Nobody at Pushary can.")}`);
+  }
+  console.log();
+};
+var rotate = () => {
+  const had = loadPin();
+  clearPin();
+  console.log();
+  if (!had) {
+    console.log(`  Nothing was pinned. The next sync records whatever the server offers.`);
+  } else {
+    console.log(`  Dropped the pinned keys. The next sync records what the server offers now`);
+    console.log(`  and resumes uploading.`);
+    console.log();
+    console.log(`  ${dim("If you did not reinstall the app or rotate a key, stop and check with")}`);
+    console.log(`  ${dim("Pushary before running an agent on this machine.")}`);
+  }
+  console.log();
+};
+var args = process.argv.slice(2);
+var wantsRotate = args.includes("--rotate");
+var verb = args.find((arg) => !arg.startsWith("-"));
+if (verb === "trust" && wantsRotate) {
+  rotate();
+} else if (verb === "trust") {
+  console.error(`Run \`pushary transcripts trust --rotate\` to accept the keys the server is offering now.`);
+  process.exit(1);
+} else if (verb === void 0 || verb === "status") {
+  showStatus();
+} else {
+  console.error(`Unknown: ${verb}. Try \`pushary transcripts status\` or \`pushary transcripts trust --rotate\`.`);
+  process.exit(1);
+}

package/dist/bin/pushary-upgrade.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node