pushary 1.9.122 → 1.9.123

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 1.9.123
+
+- The background daemon keeps running after your computer wakes from sleep. Before, a transcript hook that ran in the first 30 seconds after a long sleep could stop it, and phone start, transcript upload and the Claude wake inbox stayed off until a later hook started it again.
+- `pushary upgrade` keeps the Gemini CLI settings file and the Cursor and VS Code plugin `mcp.json` files, which hold your Pushary key, readable only by you, as setup writes them. Before, upgrade left them at your default permissions.
+
 ## 1.9.122
 
 - Claude Code: a hook event removed from your settings now comes back at the next session start, whenever Pushary can find its installed hooks. Before, it stayed gone until Claude Code shipped a new version or you ran `pushary upgrade`. Newer events are not added back while the Claude Code version cannot be read.

package/dist/bin/pushary-bell-hook.js

@@ -4,14 +4,14 @@ import {
 } from "../chunk-BVI2N7QA.js";
 import {
   readHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-ZAYXOSEP.js";
 import "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-claude.js

@@ -24,7 +24,7 @@ import {
   registerTranscript,
   registeredTranscriptEnabled,
   startDraftPublisher
-} from "../chunk-O2UMQKR4.js";
+} from "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -43,7 +43,7 @@ import {
 } from "../chunk-WLC3AX6F.js";
 import {
   ensureDaemonRunning
-} from "../chunk-XWFYR52C.js";
+} from "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import {
   UNNAMED_ACTION,

package/dist/bin/pushary-clean.js

@@ -15,13 +15,13 @@ import {
   storedMacAppState,
   storedPusharyKeychainServices,
   waitForMacAppExit
-} from "../chunk-E3LX6DEF.js";
+} from "../chunk-6YSUPE5Z.js";
 import {
   PUSHARY_SKILL_NAME,
   PUSHARY_SKILL_SOURCE,
   createGuards
 } from "../chunk-J42EAEX3.js";
-import "../chunk-ABYRJP4R.js";
+import "../chunk-SPEUUVMN.js";
 import "../chunk-XCEN33UP.js";
 import {
   describeCliKeyRevocation,
@@ -99,7 +99,7 @@ import {
 import "../chunk-WLC3AX6F.js";
 import {
   disableDaemonService
-} from "../chunk-XWFYR52C.js";
+} from "../chunk-AHB2CUJZ.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,

package/dist/bin/pushary-codex-hook.js

@@ -23,13 +23,13 @@ import {
 } from "../chunk-STGEWWFW.js";
 import {
   readHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
 } from "../chunk-OJPHNITI.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-ZAYXOSEP.js";
@@ -65,7 +65,7 @@ import {
   toPolicyLookups,
   userScope
 } from "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import {
   codexReviewerDenialsSince,
@@ -806,7 +806,7 @@ var decidePreToolUse = async (input) => {
 };
 var repairCodexHoldsQuietly = async () => {
   try {
-    const { repairCodexHolds } = await import("../reapply-LMTBF3XQ.js");
+    const { repairCodexHolds } = await import("../reapply-H6ETJ2QP.js");
     repairCodexHolds();
   } catch {
     return;

package/dist/bin/pushary-codex-session.js

@@ -19,7 +19,7 @@ var desktopAccount = async () => {
     return null;
   }
 };
-var desktopLaunch = await import("../codex-desktop-launch-QJOCWURE.js").catch(() => null);
+var desktopLaunch = await import("../codex-desktop-launch-F5SP75ED.js").catch(() => null);
 if (desktopLaunch === null && appBehindTheProxy !== void 0) {
   process.exitCode = await letCodexRunWithoutPushary(appBehindTheProxy, args.slice(3));
 } else {
@@ -27,7 +27,7 @@ if (desktopLaunch === null && appBehindTheProxy !== void 0) {
   const stop = () => abort.abort();
   if (!args[0]?.startsWith("--desktop")) for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) process.on(signal, stop);
   try {
-    const { codexDesktopCommand } = desktopLaunch ?? await import("../codex-desktop-launch-QJOCWURE.js");
+    const { codexDesktopCommand } = desktopLaunch ?? await import("../codex-desktop-launch-F5SP75ED.js");
     const desktop = await codexDesktopCommand(args, [process.execPath, ...process.execArgv, process.argv[1], "codex"], desktopAccount);
     if (desktop !== null) process.exitCode = desktop;
     else {

package/dist/bin/pushary-daemon.js

@@ -5,13 +5,13 @@ import {
 } from "../chunk-MIO2IWCZ.js";
 import {
   inspectConfiguredManagedProviders
-} from "../chunk-WZWZ7UCN.js";
+} from "../chunk-ZBKM5V6B.js";
 import "../chunk-PO6ECYXG.js";
 import "../chunk-EBJ5QUVE.js";
 import {
   HEARTBEAT_INTERVAL_MS,
   sendHeartbeat
-} from "../chunk-P6H2DI6T.js";
+} from "../chunk-GLFY52O2.js";
 import "../chunk-27FILS44.js";
 import {
   readSignedOutDiagnosis
@@ -56,7 +56,7 @@ import {
 import "../chunk-C2L477NM.js";
 import {
   startRegisteredTranscripts
-} from "../chunk-O2UMQKR4.js";
+} from "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-ZAYXOSEP.js";
@@ -66,6 +66,7 @@ import {
 } from "../chunk-WLC3AX6F.js";
 import {
   DAEMON_LEASE_RENEW_INTERVAL_MS,
+  DAEMON_YIELD_CHECK_INTERVAL_MS,
   acquireDaemonLease,
   clearDaemonNeedsLogin,
   daemonServiceManagerAvailable,
@@ -80,7 +81,7 @@ import {
   requestDaemonHandoff,
   stopDaemonRunning,
   writeDaemonNeedsLogin
-} from "../chunk-XWFYR52C.js";
+} from "../chunk-AHB2CUJZ.js";
 import {
   hookOwnerOf
 } from "../chunk-Q3KKA5IZ.js";
@@ -1482,7 +1483,6 @@ var REQUEST_TIMEOUT_MS = 1e4;
 var STOP_PROTOCOL_VERSION = 2;
 var MAX_SPAWNS_PER_WINDOW = 5;
 var SPAWN_WINDOW_MS = 6e4;
-var VERSION_CHECK_INTERVAL_MS = 2e3;
 var CONTROL_PROBE_INTERVAL_MS = 6e4;
 var FLAG_SHAPED_PROMPT_MESSAGE = "The prompt looks like a command-line flag";
 var MAX_TRACKED_PROCESSES = 100;
@@ -2123,7 +2123,7 @@ var runSpawnDaemon = async () => {
   leaseRenewal = setInterval(() => daemonLease.renew(), DAEMON_LEASE_RENEW_INTERVAL_MS);
   versionWatch = setInterval(() => {
     if (daemonLease.shouldYield()) finish();
-  }, VERSION_CHECK_INTERVAL_MS);
+  }, DAEMON_YIELD_CHECK_INTERVAL_MS);
   sessionReaper = setInterval(() => void reapSilentSessions(), SESSION_REAP_INTERVAL_MS);
   log(hasSpawnProvider(inventory.current.capabilities) ? `daemon online (pid ${process.pid}): this machine (${machineId}) can now be sent a new session from your phone. Ctrl-C to stop.` : `daemon online (pid ${process.pid}): no supported Claude, Codex, or Gemini CLI was found, so phone-start is unavailable. Ctrl-C to stop.`);
   timer = setTimeout(tick, 0);

package/dist/bin/pushary-display-hook.js

@@ -5,10 +5,10 @@ import {
   loadSessionKey,
   registeredTranscriptEnabled,
   sessionKeyDirectory
-} from "../chunk-O2UMQKR4.js";
+} from "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-doctor.js

@@ -35,7 +35,7 @@ import {
 import {
   readMachineReadiness,
   readManagedControlEvidence
-} from "../chunk-P6H2DI6T.js";
+} from "../chunk-GLFY52O2.js";
 import {
   assessCodexHookTrust,
   readCodexTrustForPusharyHooks
@@ -144,7 +144,7 @@ import {
   readDaemonNeedsLogin,
   readDaemonStatus,
   readInstalledDaemonService
-} from "../chunk-XWFYR52C.js";
+} from "../chunk-AHB2CUJZ.js";
 import {
   GEMINI_HOOK_BINARY,
   claudeOtherHolders,

package/dist/bin/pushary-elicitation-hook.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
 } from "../chunk-OJPHNITI.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-ZAYXOSEP.js";
 import "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-gemini-hook.js

@@ -16,13 +16,13 @@ import {
 } from "../chunk-STGEWWFW.js";
 import {
   readHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
 } from "../chunk-OJPHNITI.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-ZAYXOSEP.js";
@@ -39,7 +39,7 @@ import {
   readLastUserPrompt,
   reportEvent
 } from "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import {
   deriveActionBody,

package/dist/bin/pushary-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-BHQYJFPY.js";
+} from "../chunk-WP2AHPRO.js";
 import "../chunk-PO6ECYXG.js";
 import {
   exitOnHelpFlag
@@ -11,10 +11,10 @@ import "../chunk-2WGP6QE7.js";
 import "../chunk-7EYXAM63.js";
 import {
   readToolHookCall
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
 import "../chunk-OJPHNITI.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -23,7 +23,7 @@ import {
   profileFromArgv
 } from "../chunk-ZAYXOSEP.js";
 import "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import {
   canonicalGateInputs

package/dist/bin/pushary-login.js

@@ -25,7 +25,7 @@ import {
 import "../chunk-G66WIAST.js";
 import {
   recoverDaemonAfterLogin
-} from "../chunk-XWFYR52C.js";
+} from "../chunk-AHB2CUJZ.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";

package/dist/bin/pushary-notification-hook.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -13,7 +13,7 @@ import {
 import {
   handleNotification
 } from "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-opencode-hook.js

@@ -13,13 +13,13 @@ import {
 } from "../chunk-7EYXAM63.js";
 import {
   readHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
 } from "../chunk-OJPHNITI.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-ZAYXOSEP.js";
@@ -33,7 +33,7 @@ import {
   policyRequestFor,
   readLastPrompt
 } from "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import {
   HOOK_FALLBACK_MAX,

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-BHQYJFPY.js";
+} from "../chunk-WP2AHPRO.js";
 import "../chunk-PO6ECYXG.js";
 import {
   takeHookHoldBudget
@@ -11,15 +11,15 @@ import "../chunk-2WGP6QE7.js";
 import "../chunk-7EYXAM63.js";
 import {
   readHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
 import "../chunk-OJPHNITI.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-ZAYXOSEP.js";
 import "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-permission-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-BHQYJFPY.js";
+} from "../chunk-WP2AHPRO.js";
 import "../chunk-PO6ECYXG.js";
 import {
   takeHookHoldBudget
@@ -11,10 +11,10 @@ import "../chunk-2WGP6QE7.js";
 import "../chunk-7EYXAM63.js";
 import {
   readToolHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
 import "../chunk-OJPHNITI.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -23,7 +23,7 @@ import {
   profileFromArgv
 } from "../chunk-ZAYXOSEP.js";
 import "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import {
   canonicalGateInputs

package/dist/bin/pushary-post-hook.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -18,7 +18,7 @@ import {
   handlePostToolUse,
   isCompactionEvent
 } from "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-prompt-hook.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -14,7 +14,7 @@ import {
   emitHookOutput,
   handleUserPrompt
 } from "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-session-end-hook.js

@@ -5,9 +5,9 @@ import {
 import "../chunk-ROVLRXBI.js";
 import {
   readHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -17,7 +17,7 @@ import {
 import {
   handleSessionEnd
 } from "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-session-start-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   reapplyClaudeForVersion
-} from "../chunk-WZWZ7UCN.js";
+} from "../chunk-ZBKM5V6B.js";
 import "../chunk-27FILS44.js";
 import "../chunk-7LZQK7EB.js";
 import "../chunk-SNF3OTPB.js";
@@ -15,9 +15,9 @@ import {
 } from "../chunk-STGEWWFW.js";
 import {
   readHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -28,7 +28,7 @@ import {
   CLAUDE_CODE_AGENT,
   handleSessionStart
 } from "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-setup.js

@@ -94,7 +94,7 @@ import {
 import {
   readManagedControlEvidence,
   waitForMachineReadiness
-} from "../chunk-P6H2DI6T.js";
+} from "../chunk-GLFY52O2.js";
 import {
   ensureCodexTrustsPusharyHooks
 } from "../chunk-27FILS44.js";
@@ -105,7 +105,7 @@ import {
 } from "../chunk-J42EAEX3.js";
 import {
   codexEngineBehindLauncher
-} from "../chunk-ABYRJP4R.js";
+} from "../chunk-SPEUUVMN.js";
 import "../chunk-XCEN33UP.js";
 import {
   CURSOR_PLUGIN_BACKUP_INFIX,
@@ -257,7 +257,7 @@ import {
   serviceNodeFor,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-XWFYR52C.js";
+} from "../chunk-AHB2CUJZ.js";
 import {
   GEMINI_HOOK_BINARY,
   GEMINI_HOOK_EVENTS,

package/dist/bin/pushary-status.js

@@ -13,7 +13,7 @@ import {
 import {
   describeLastSeen,
   listMachines
-} from "../chunk-P6H2DI6T.js";
+} from "../chunk-GLFY52O2.js";
 import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   activeKeyVerdictOf,
@@ -39,7 +39,7 @@ import "../chunk-P2WA3YY2.js";
 import "../chunk-ROVLRXBI.js";
 import "../chunk-ZAYXOSEP.js";
 import "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-stop-hook.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -16,7 +16,7 @@ import {
   handleSubagentStop,
   isSubagentStop
 } from "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-TJ32WT6M.js";
+} from "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -13,7 +13,7 @@ import {
 import {
   handleStopFailure
 } from "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-transcript-register.js

@@ -5,10 +5,10 @@ import {
 } from "../chunk-P3VVRBBI.js";
 import {
   registerTranscript
-} from "../chunk-O2UMQKR4.js";
+} from "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-transcripts.js

@@ -21,10 +21,10 @@ import {
   snapshotRecipientPinFile,
   trustPhoneRecipient,
   verifyTrustedRecipients
-} from "../chunk-O2UMQKR4.js";
+} from "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/bin/pushary-upgrade.js

@@ -28,7 +28,7 @@ import {
 import {
   ensureCodexTrustAfterReapply,
   reapplyAllAgents
-} from "../chunk-WZWZ7UCN.js";
+} from "../chunk-ZBKM5V6B.js";
 import {
   HERMES_RESTART_COMMAND,
   describeCodexTrustConfirmation
@@ -36,7 +36,7 @@ import {
 import "../chunk-2FOCCDVV.js";
 import {
   waitForMachineReadiness
-} from "../chunk-P6H2DI6T.js";
+} from "../chunk-GLFY52O2.js";
 import "../chunk-27FILS44.js";
 import {
   readMacAppAgentKey
@@ -91,7 +91,7 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-XWFYR52C.js";
+} from "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/dist/{chunk-E3LX6DEF.js → chunk-6YSUPE5Z.js}

@@ -9,13 +9,13 @@ import {
   installedCodexApp,
   readCodexAppRuntime,
   shellQuoted
-} from "./chunk-ABYRJP4R.js";
+} from "./chunk-SPEUUVMN.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-XWFYR52C.js";
+} from "./chunk-AHB2CUJZ.js";
 import {
   writeFileAtomic
 } from "./chunk-T5I4PKOQ.js";

package/dist/{chunk-XWFYR52C.js → chunk-AHB2CUJZ.js}

@@ -41,7 +41,8 @@ import { createHash, randomUUID } from "crypto";
 import { homedir, userInfo } from "os";
 import { execFileSync } from "child_process";
 var daemonIsServing = (status) => status.kind === "running" || status.kind === "version-mismatch" || status.kind === "configuration-mismatch";
-var daemonNeedsHandoff = (status) => status.kind === "version-mismatch" || status.kind === "configuration-mismatch" || status.kind === "unresponsive" && status.processAlive === true;
+var isAliveWithStaleLease = (status) => status.kind === "unresponsive" && status.processAlive === true;
+var daemonNeedsHandoff = (status) => status.kind === "version-mismatch" || status.kind === "configuration-mismatch" || isAliveWithStaleLease(status);
 var daemonProcessIsThere = (status) => daemonIsServing(status) || daemonNeedsHandoff(status);
 var DAEMON_REMOTE_PROOF_MAX_AGE_MS = 18e4;
 var DAEMON_REMOTE_PROOF_CLOCK_SKEW_MS = 3e4;
@@ -109,6 +110,7 @@ var lockPath = (dir) => join(dir, "daemon.lock");
 var targetPath = (dir) => join(dir, "daemon-target.json");
 var DAEMON_LEASE_RENEW_INTERVAL_MS = 3e4;
 var LOCAL_LEASE_TIMEOUT_MS = DAEMON_LEASE_RENEW_INTERVAL_MS * 3;
+var DAEMON_YIELD_CHECK_INTERVAL_MS = 2e3;
 var buildDaemonLaunch = (input) => input.siblingEntry ? { command: input.execPath, args: [input.siblingEntry], shell: false } : {
   command: input.daemonBinary,
   args: [],
@@ -1065,6 +1067,8 @@ var launchInstalledDaemon = (options) => {
   });
   spawnDetachedDaemon(plan, { spawnImpl: options.spawnImpl });
 };
+var HANDOFF_WAIT_FLOOR_MS = DAEMON_YIELD_CHECK_INTERVAL_MS * 2;
+var waitsTooLittleForAHandoff = (options) => (options.waitTimeoutMs ?? DAEMON_STARTUP_TIMEOUT_MS) < HANDOFF_WAIT_FLOOR_MS;
 var ensureDaemonRunning = async (options = {}) => {
   const initial = readDaemonStatus(options);
   if (!(options.configured ?? hasConfiguration)()) {
@@ -1075,6 +1079,9 @@ var ensureDaemonRunning = async (options = {}) => {
   if (loginBlock.kind === "blocked") {
     return { kind: "unavailable", status: initial, detail: describeDaemonLoginBlock(loginBlock.record) };
   }
+  if (waitsTooLittleForAHandoff(options) && isAliveWithStaleLease(initial)) {
+    return { kind: "unavailable", status: initial, detail: "daemon lease is stale; left to renew it" };
+  }
   let handoffStatus;
   try {
     handoffStatus = await requestDaemonHandoff(initial, options);
@@ -1129,6 +1136,7 @@ export {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   DAEMON_LEASE_RENEW_INTERVAL_MS,
+  DAEMON_YIELD_CHECK_INTERVAL_MS,
   xml,
   serviceNodeFor,
   parseDaemonAction,

package/dist/{chunk-P6H2DI6T.js → chunk-GLFY52O2.js}

@@ -10,7 +10,7 @@ import {
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-XWFYR52C.js";
+} from "./chunk-AHB2CUJZ.js";
 import {
   getMachineId
 } from "./chunk-RBPPX663.js";

package/dist/{chunk-TJ32WT6M.js → chunk-IICWR257.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-C2L477NM.js";
 import {
   registerTranscript
-} from "./chunk-O2UMQKR4.js";
+} from "./chunk-JNHDKTXI.js";
 import {
   namedEvent
 } from "./chunk-ZAYXOSEP.js";

package/dist/{chunk-O2UMQKR4.js → chunk-JNHDKTXI.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-G66WIAST.js";
 import {
   ensureDaemonRunning
-} from "./chunk-XWFYR52C.js";
+} from "./chunk-AHB2CUJZ.js";
 import {
   hookOwnerOf
 } from "./chunk-Q3KKA5IZ.js";

package/dist/{chunk-ABYRJP4R.js → chunk-SPEUUVMN.js}

@@ -1085,7 +1085,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-HUU5TTBZ.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-TGECJSVW.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");

package/dist/{chunk-BHQYJFPY.js → chunk-WP2AHPRO.js}

@@ -18,7 +18,7 @@ import {
 import {
   isAdmitted,
   readAdmissionRules
-} from "./chunk-TJ32WT6M.js";
+} from "./chunk-IICWR257.js";
 import {
   isDeferAnswer,
   oncePerSession

package/dist/{chunk-WZWZ7UCN.js → chunk-ZBKM5V6B.js}

@@ -50,6 +50,9 @@ import {
   hasGeminiHooks,
   planHooks
 } from "./chunk-Q3KKA5IZ.js";
+import {
+  KEY_FILE_MODE
+} from "./chunk-SZV5SLSD.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -207,7 +210,7 @@ var reapplyClaudeSettings = (apiKey, paths = {}) => {
       if (!claudeJsonWritable) throw new Error(".claude.json could not be parsed");
       const cj = claudeJson2;
       addClaudeMcpServer(cj, apiKey);
-      writeJsonAtomic(claudeJsonPath, cj, PRIVATE_TO_OWNER);
+      writeJsonAtomic(claudeJsonPath, cj, KEY_FILE_MODE);
       mcp = true;
     } catch {
       failed = true;
@@ -347,7 +350,7 @@ var reapplyGeminiSettings = (apiKey, paths = {}) => {
     if (apiKey) {
       addGeminiMcpServer(settings, apiKey);
     }
-    writeJson(settingsPath, settings);
+    writeJsonAtomic(settingsPath, settings, KEY_FILE_MODE);
     hooks = true;
     mcp = Boolean(apiKey);
   } catch {
@@ -363,7 +366,7 @@ var reapplyPluginMcp = (mcpPath, apiKey) => {
   if (!apiKey) return { configured: true, reapplied: false, hooks: false, mcp: false };
   try {
     addClaudeMcpServer(mcpConfig, apiKey);
-    writeJson(mcpPath, mcpConfig);
+    writeJsonAtomic(mcpPath, mcpConfig, KEY_FILE_MODE);
     return { configured: true, reapplied: true, hooks: false, mcp: true };
   } catch {
     return { configured: true, reapplied: false, hooks: false, mcp: false, failed: true };

package/dist/{codex-app-cards-switch-HUU5TTBZ.js → codex-app-cards-switch-TGECJSVW.js}

@@ -22,11 +22,11 @@ import {
   turnCodexAppCardsOff,
   turnCodexAppCardsOn,
   whyLaunchctlFailed
-} from "./chunk-E3LX6DEF.js";
-import "./chunk-ABYRJP4R.js";
+} from "./chunk-6YSUPE5Z.js";
+import "./chunk-SPEUUVMN.js";
 import "./chunk-XCEN33UP.js";
 import "./chunk-QCGNGEGE.js";
-import "./chunk-XWFYR52C.js";
+import "./chunk-AHB2CUJZ.js";
 import "./chunk-XHKBHWLX.js";
 import "./chunk-RBPPX663.js";
 import "./chunk-SZV5SLSD.js";

package/dist/{codex-desktop-launch-QJOCWURE.js → codex-desktop-launch-F5SP75ED.js}

@@ -11,7 +11,7 @@ import {
   installedCodexApp,
   shellQuoted,
   writeDesktopProxy
-} from "./chunk-ABYRJP4R.js";
+} from "./chunk-SPEUUVMN.js";
 import "./chunk-XCEN33UP.js";
 import {
   CODEX_APP_LAUNCH_VARIABLE

package/dist/{reapply-LMTBF3XQ.js → reapply-H6ETJ2QP.js}

@@ -12,7 +12,7 @@ import {
   reapplyOpenCodePlugin,
   reapplyVsCodePlugin,
   repairCodexHolds
-} from "./chunk-WZWZ7UCN.js";
+} from "./chunk-ZBKM5V6B.js";
 import "./chunk-27FILS44.js";
 import "./chunk-7LZQK7EB.js";
 import "./chunk-SNF3OTPB.js";

package/dist/src/index.js

@@ -1,14 +1,14 @@
 import {
   handlePreToolUse
-} from "../chunk-BHQYJFPY.js";
+} from "../chunk-WP2AHPRO.js";
 import "../chunk-PO6ECYXG.js";
 import "../chunk-X6WYICTL.js";
 import "../chunk-2WGP6QE7.js";
 import "../chunk-7EYXAM63.js";
-import "../chunk-TJ32WT6M.js";
+import "../chunk-IICWR257.js";
 import "../chunk-C2L477NM.js";
 import "../chunk-OJPHNITI.js";
-import "../chunk-O2UMQKR4.js";
+import "../chunk-JNHDKTXI.js";
 import "../chunk-HXBQTPKC.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-ZAYXOSEP.js";
@@ -21,7 +21,7 @@ import {
   handleStop,
   reportEvent
 } from "../chunk-WLC3AX6F.js";
-import "../chunk-XWFYR52C.js";
+import "../chunk-AHB2CUJZ.js";
 import "../chunk-Q3KKA5IZ.js";
 import "../chunk-7OSBFMRV.js";
 import "../chunk-LS3CQ536.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pushary",
-  "version": "1.9.122",
+  "version": "1.9.123",
   "description": "Human-in-the-loop (HITL) for AI agents: ask a person for approvals or answers by push notification. One command connects Claude Code, Codex, Cursor, Gemini CLI and more.",
   "keywords": [
     "pushary",