pushary 1.9.31 → 1.9.34

package/dist/{chunk-TDLEFGAM.js → chunk-7FQL5NWJ.js}

@@ -16,7 +16,7 @@ var COWORK_STANDING_INSTRUCTIONS = `Pushary is connected as a custom connector.
 - Before a risky or irreversible action outside my existing authorization, call ask_user with type "confirm" and wait for approval. Silence is never consent.
 - When a task finishes, call send_notification with context.type "task_complete" and a short summary. For an error you cannot resolve, use context.type "error"; use "info" for other updates.
 - Only keep a reply channel open when a specific unresolved decision is required: call send_notification with context.askQuestion, then poll the returned linkedCorrelationId with wait_for_answer. Do not ask for optional feedback just to keep a finished turn alive.
-- Follow handoffAction when present, otherwise nextAction. If ask_user times out on a live question, poll once with wait_for_answer. If still pending, cancel_question before asking in the current chat. If cancellation returns handoffAction "stop", stop. If cancellation returns false, poll once for 1 second and honor the answer that won the race. Expired, cancelled, missing, and unavailable questions are not new timeouts.
+- Follow handoffAction when present, otherwise nextAction. While pending, keep waiting with the same correlationId. Only for an explicit handoff, cancel_question before asking in the current chat. If cancellation returns handoffAction "stop", stop. If cancellation returns false, poll once for 1 second and honor the answer that won the race. Expired, cancelled, missing, and unavailable questions are not new timeouts.
 - Pass agentName as "Claude Cowork - <task name>" on every call, and reuse one opaque sessionId per task so parallel tasks stay separate. Never include credentials in these identifiers.
 - Cancel a question when it is no longer needed. Once this turn ends, reopen Cowork for follow-up work; this connector cannot restart it.
 - If Pushary tools are missing or disabled, report that once and continue within my authorization. Do not claim a notification or approval was delivered.`;
@@ -1758,6 +1758,8 @@ var STATEMENT_SEPARATOR2 = ";";
 var SINGLE_QUOTE = "'";
 var DOUBLE_QUOTE = '"';
 var BACKTICK = "`";
+var BRACKET_IDENTIFIER_OPEN = "[";
+var BRACKET_IDENTIFIER_CLOSE = "]";
 var BACKSLASH = "\\";
 var DOLLAR = "$";
 var DASH_DASH = "--";
@@ -1877,6 +1879,7 @@ var swallowsABacktick = (source, start, end, lexicon) => {
   return false;
 };
 var unterminatedTextRunsToTheEnd = (reading) => reading.backslashMode === "literal";
+var visibleQuotedText = (content) => `${TOKEN_GAP}${content}${TOKEN_GAP}`;
 var quotedToken = (source, start, reading, inside) => {
   if (opensAUnicodeEscapedQuote(source, start)) return "uncertain";
   const syntax = syntaxOfQuoteAt(source, start, reading.lexicon);
@@ -1888,7 +1891,7 @@ var quotedToken = (source, start, reading, inside) => {
   }
   if (swallowsABacktick(source, start, end, reading.lexicon)) return "uncertain";
   const quote = source.charAt(start);
-  const text = syntax.content === "hidden" ? STRING_PLACEHOLDER : source.slice(start + opener.length, end - opener.length).replaceAll(quote + quote, quote);
+  const text = syntax.content === "hidden" ? STRING_PLACEHOLDER : visibleQuotedText(source.slice(start + opener.length, end - opener.length).replaceAll(quote + quote, quote));
   return { text, end, insideExecutableComment: inside };
 };
 var lineCommentEnd = (source, start, lexicon) => {
@@ -1951,9 +1954,16 @@ var clientCommandToken = (source, start, inside) => {
   const command = source.slice(start, start + CLIENT_COMMAND_LENGTH);
   return STATEMENT_TERMINATOR_CLIENT_COMMAND.test(command) ? { text: STATEMENT_SEPARATOR2, end: start + CLIENT_COMMAND_LENGTH, insideExecutableComment: inside } : "uncertain";
 };
+var squareBracketToken = (source, start, lexicon, inside) => {
+  if (lexicon.squareBrackets === "uncertain") return "uncertain";
+  if (lexicon.squareBrackets === "text") return { text: BRACKET_IDENTIFIER_OPEN, end: start + 1, insideExecutableComment: inside };
+  const closing = source.indexOf(BRACKET_IDENTIFIER_CLOSE, start + 1);
+  return closing === -1 ? "uncertain" : { text: visibleQuotedText(source.slice(start + 1, closing)), end: closing + 1, insideExecutableComment: inside };
+};
 var nextSqlToken = (source, start, reading, inside) => {
   const { lexicon } = reading;
   const character = source.charAt(start);
+  if (character === BRACKET_IDENTIFIER_OPEN) return squareBracketToken(source, start, lexicon, inside);
   if (isQuote(character)) return quotedToken(source, start, reading, inside);
   if (source.startsWith(DASH_DASH, start)) return dashDashToken(source, start, lexicon, inside);
   if (character === HASH) return hashToken(source, start, lexicon, inside);
@@ -1993,6 +2003,107 @@ var sqlOutsideLiterals = (source, lexicon) => {
   return { kind: "readable", texts: [...new Set(readings.map((reading) => reading.text))] };
 };
 
+// ../contracts/src/command-analysis/sql-clients.ts
+var STRING_WITH_DOUBLED_QUOTES = { backslashes: "uncertain-before-the-quote", content: "hidden" };
+var IDENTIFIER_WITH_DOUBLED_QUOTES = { backslashes: "uncertain-before-the-quote", content: "shown" };
+var MYSQL_STRING = { backslashes: "escape-unless-the-sql-mode-disables-it", content: "hidden" };
+var STRING_WITH_BACKSLASH_ESCAPES = { backslashes: "escape", content: "hidden" };
+var SHOWN_TEXT_WITH_BACKSLASH_ESCAPES = { backslashes: "escape", content: "shown" };
+var POSTGRES_LEXICON = {
+  squareBrackets: "text",
+  singleQuotes: STRING_WITH_DOUBLED_QUOTES,
+  doubleQuotes: IDENTIFIER_WITH_DOUBLED_QUOTES,
+  backticks: IDENTIFIER_WITH_DOUBLED_QUOTES,
+  tripleQuotes: "absent",
+  escapeStringPrefix: "backslash-escapes",
+  dollarQuotes: "string",
+  dashDash: "comment",
+  carriageReturnInLineComment: "ends-the-comment",
+  hash: "text",
+  executableComments: "uncertain",
+  nestedBlockComments: "nest",
+  backslashOutsideLiterals: "text",
+  clientCharsets: "may-be-multibyte"
+};
+var MYSQL_LEXICON = {
+  squareBrackets: "uncertain",
+  singleQuotes: MYSQL_STRING,
+  doubleQuotes: STRING_WITH_DOUBLED_QUOTES,
+  backticks: IDENTIFIER_WITH_DOUBLED_QUOTES,
+  tripleQuotes: "absent",
+  escapeStringPrefix: "absent",
+  dollarQuotes: "uncertain",
+  dashDash: "comment-before-whitespace",
+  carriageReturnInLineComment: "stays-in-the-comment",
+  hash: "comment",
+  executableComments: "executed",
+  nestedBlockComments: "uncertain",
+  backslashOutsideLiterals: "client-command",
+  clientCharsets: "may-be-multibyte"
+};
+var SQLITE_LEXICON = {
+  squareBrackets: "identifier",
+  singleQuotes: STRING_WITH_DOUBLED_QUOTES,
+  doubleQuotes: IDENTIFIER_WITH_DOUBLED_QUOTES,
+  backticks: IDENTIFIER_WITH_DOUBLED_QUOTES,
+  tripleQuotes: "absent",
+  escapeStringPrefix: "absent",
+  dollarQuotes: "uncertain",
+  dashDash: "comment",
+  carriageReturnInLineComment: "stays-in-the-comment",
+  hash: "text",
+  executableComments: "uncertain",
+  nestedBlockComments: "uncertain",
+  backslashOutsideLiterals: "text",
+  clientCharsets: "unicode"
+};
+var GOOGLE_SQL_LEXICON = {
+  squareBrackets: "text",
+  singleQuotes: STRING_WITH_BACKSLASH_ESCAPES,
+  doubleQuotes: SHOWN_TEXT_WITH_BACKSLASH_ESCAPES,
+  backticks: SHOWN_TEXT_WITH_BACKSLASH_ESCAPES,
+  tripleQuotes: "quote",
+  escapeStringPrefix: "absent",
+  dollarQuotes: "uncertain",
+  dashDash: "comment",
+  carriageReturnInLineComment: "uncertain",
+  hash: "comment",
+  executableComments: "uncertain",
+  nestedBlockComments: "uncertain",
+  backslashOutsideLiterals: "text",
+  clientCharsets: "unicode"
+};
+var UNVERIFIED_SQL_LEXICON = {
+  squareBrackets: "uncertain",
+  singleQuotes: STRING_WITH_DOUBLED_QUOTES,
+  doubleQuotes: IDENTIFIER_WITH_DOUBLED_QUOTES,
+  backticks: IDENTIFIER_WITH_DOUBLED_QUOTES,
+  tripleQuotes: "absent",
+  escapeStringPrefix: "absent",
+  dollarQuotes: "uncertain",
+  dashDash: "uncertain-before-text",
+  carriageReturnInLineComment: "uncertain",
+  hash: "uncertain",
+  executableComments: "uncertain",
+  nestedBlockComments: "uncertain",
+  backslashOutsideLiterals: "text",
+  clientCharsets: "may-be-multibyte"
+};
+var MYSQL_SYNTAX = { inlineFlags: /* @__PURE__ */ new Set(["-e", "--execute"]), scriptFlags: /* @__PURE__ */ new Set(), positionalSql: false, lexicon: MYSQL_LEXICON };
+var SQLITE_SYNTAX = { inlineFlags: /* @__PURE__ */ new Set(["-cmd"]), scriptFlags: /* @__PURE__ */ new Set(["-init"]), positionalSql: true, lexicon: SQLITE_LEXICON };
+var SQL_CLIENT_SYNTAX = /* @__PURE__ */ new Map([
+  ["psql", { inlineFlags: /* @__PURE__ */ new Set(["-c", "--command"]), scriptFlags: /* @__PURE__ */ new Set(["-f", "--file"]), positionalSql: false, lexicon: POSTGRES_LEXICON }],
+  ["mysql", MYSQL_SYNTAX],
+  ["mariadb", MYSQL_SYNTAX],
+  ["sqlite3", SQLITE_SYNTAX],
+  ["sqlite", SQLITE_SYNTAX],
+  ["duckdb", { inlineFlags: /* @__PURE__ */ new Set(["-c", "-s", "-cmd"]), scriptFlags: /* @__PURE__ */ new Set(["-f", "-init"]), positionalSql: true, lexicon: UNVERIFIED_SQL_LEXICON }],
+  ["clickhouse-client", { inlineFlags: /* @__PURE__ */ new Set(["-q", "--query"]), scriptFlags: /* @__PURE__ */ new Set(["--queries-file"]), positionalSql: false, lexicon: UNVERIFIED_SQL_LEXICON }],
+  ["bq", { inlineFlags: /* @__PURE__ */ new Set(), scriptFlags: /* @__PURE__ */ new Set(), positionalSql: true, lexicon: GOOGLE_SQL_LEXICON }],
+  ["mongosh", { inlineFlags: /* @__PURE__ */ new Set(["--eval"]), scriptFlags: /* @__PURE__ */ new Set(["-f", "--file"]), positionalSql: false, lexicon: UNVERIFIED_SQL_LEXICON }],
+  ["mongo", { inlineFlags: /* @__PURE__ */ new Set(["--eval"]), scriptFlags: /* @__PURE__ */ new Set(), positionalSql: false, lexicon: UNVERIFIED_SQL_LEXICON }]
+]);
+
 // ../contracts/src/command-analysis/env-invocation.ts
 var GNU_ENV = {
   shortOptions: { switches: /* @__PURE__ */ new Set(["i", "v", "0"]), withAValue: /* @__PURE__ */ new Set(["a", "C", "S", "u"]) },
@@ -2291,6 +2402,9 @@ var MIN_SAFE_CLI_VERSION = formatReleaseVersion(MIN_SAFE_RELEASE);
 var AUTO_UPDATE_RESULTS = ["updated", "current", "needs_manual", "failed", "finish_pending", "finish_blocked"];
 var isAutoUpdateResult = (value) => typeof value === "string" && AUTO_UPDATE_RESULTS.includes(value);
 
+// ../contracts/src/answer-drafts.ts
+var ANSWER_DRAFT_TTL_MS = 24 * 60 * 60 * 1e3;
+
 // ../contracts/src/index.ts
 var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
@@ -3315,100 +3429,6 @@ var changesProduction = (invocation) => {
   const words = wordsOfInvocation(invocation);
   return words.some((word, index) => wordSelectsProduction(word, words[index - 1])) && (deployCliChangesSomething(words) || SCHEMA_CHANGE_WORD.test(normalizedInvocation(invocation)));
 };
-var STRING_WITH_DOUBLED_QUOTES = { backslashes: "uncertain-before-the-quote", content: "hidden" };
-var IDENTIFIER_WITH_DOUBLED_QUOTES = { backslashes: "uncertain-before-the-quote", content: "shown" };
-var MYSQL_STRING = { backslashes: "escape-unless-the-sql-mode-disables-it", content: "hidden" };
-var STRING_WITH_BACKSLASH_ESCAPES = { backslashes: "escape", content: "hidden" };
-var SHOWN_TEXT_WITH_BACKSLASH_ESCAPES = { backslashes: "escape", content: "shown" };
-var POSTGRES_LEXICON = {
-  singleQuotes: STRING_WITH_DOUBLED_QUOTES,
-  doubleQuotes: IDENTIFIER_WITH_DOUBLED_QUOTES,
-  backticks: IDENTIFIER_WITH_DOUBLED_QUOTES,
-  tripleQuotes: "absent",
-  escapeStringPrefix: "backslash-escapes",
-  dollarQuotes: "string",
-  dashDash: "comment",
-  carriageReturnInLineComment: "ends-the-comment",
-  hash: "text",
-  executableComments: "uncertain",
-  nestedBlockComments: "nest",
-  backslashOutsideLiterals: "text",
-  clientCharsets: "may-be-multibyte"
-};
-var MYSQL_LEXICON = {
-  singleQuotes: MYSQL_STRING,
-  doubleQuotes: STRING_WITH_DOUBLED_QUOTES,
-  backticks: IDENTIFIER_WITH_DOUBLED_QUOTES,
-  tripleQuotes: "absent",
-  escapeStringPrefix: "absent",
-  dollarQuotes: "uncertain",
-  dashDash: "comment-before-whitespace",
-  carriageReturnInLineComment: "stays-in-the-comment",
-  hash: "comment",
-  executableComments: "executed",
-  nestedBlockComments: "uncertain",
-  backslashOutsideLiterals: "client-command",
-  clientCharsets: "may-be-multibyte"
-};
-var SQLITE_LEXICON = {
-  singleQuotes: STRING_WITH_DOUBLED_QUOTES,
-  doubleQuotes: IDENTIFIER_WITH_DOUBLED_QUOTES,
-  backticks: IDENTIFIER_WITH_DOUBLED_QUOTES,
-  tripleQuotes: "absent",
-  escapeStringPrefix: "absent",
-  dollarQuotes: "uncertain",
-  dashDash: "comment",
-  carriageReturnInLineComment: "stays-in-the-comment",
-  hash: "text",
-  executableComments: "uncertain",
-  nestedBlockComments: "uncertain",
-  backslashOutsideLiterals: "text",
-  clientCharsets: "unicode"
-};
-var GOOGLE_SQL_LEXICON = {
-  singleQuotes: STRING_WITH_BACKSLASH_ESCAPES,
-  doubleQuotes: SHOWN_TEXT_WITH_BACKSLASH_ESCAPES,
-  backticks: SHOWN_TEXT_WITH_BACKSLASH_ESCAPES,
-  tripleQuotes: "quote",
-  escapeStringPrefix: "absent",
-  dollarQuotes: "uncertain",
-  dashDash: "comment",
-  carriageReturnInLineComment: "uncertain",
-  hash: "comment",
-  executableComments: "uncertain",
-  nestedBlockComments: "uncertain",
-  backslashOutsideLiterals: "text",
-  clientCharsets: "unicode"
-};
-var UNVERIFIED_SQL_LEXICON = {
-  singleQuotes: STRING_WITH_DOUBLED_QUOTES,
-  doubleQuotes: IDENTIFIER_WITH_DOUBLED_QUOTES,
-  backticks: IDENTIFIER_WITH_DOUBLED_QUOTES,
-  tripleQuotes: "absent",
-  escapeStringPrefix: "absent",
-  dollarQuotes: "uncertain",
-  dashDash: "uncertain-before-text",
-  carriageReturnInLineComment: "uncertain",
-  hash: "uncertain",
-  executableComments: "uncertain",
-  nestedBlockComments: "uncertain",
-  backslashOutsideLiterals: "text",
-  clientCharsets: "may-be-multibyte"
-};
-var MYSQL_SYNTAX = { inlineFlags: /* @__PURE__ */ new Set(["-e", "--execute"]), scriptFlags: /* @__PURE__ */ new Set(), positionalSql: false, lexicon: MYSQL_LEXICON };
-var SQLITE_SYNTAX = { inlineFlags: /* @__PURE__ */ new Set(["-cmd"]), scriptFlags: /* @__PURE__ */ new Set(["-init"]), positionalSql: true, lexicon: SQLITE_LEXICON };
-var SQL_CLIENT_SYNTAX = /* @__PURE__ */ new Map([
-  ["psql", { inlineFlags: /* @__PURE__ */ new Set(["-c", "--command"]), scriptFlags: /* @__PURE__ */ new Set(["-f", "--file"]), positionalSql: false, lexicon: POSTGRES_LEXICON }],
-  ["mysql", MYSQL_SYNTAX],
-  ["mariadb", MYSQL_SYNTAX],
-  ["sqlite3", SQLITE_SYNTAX],
-  ["sqlite", SQLITE_SYNTAX],
-  ["duckdb", { inlineFlags: /* @__PURE__ */ new Set(["-c", "-s", "-cmd"]), scriptFlags: /* @__PURE__ */ new Set(["-f", "-init"]), positionalSql: true, lexicon: UNVERIFIED_SQL_LEXICON }],
-  ["clickhouse-client", { inlineFlags: /* @__PURE__ */ new Set(["-q", "--query"]), scriptFlags: /* @__PURE__ */ new Set(["--queries-file"]), positionalSql: false, lexicon: UNVERIFIED_SQL_LEXICON }],
-  ["bq", { inlineFlags: /* @__PURE__ */ new Set(), scriptFlags: /* @__PURE__ */ new Set(), positionalSql: true, lexicon: GOOGLE_SQL_LEXICON }],
-  ["mongosh", { inlineFlags: /* @__PURE__ */ new Set(["--eval"]), scriptFlags: /* @__PURE__ */ new Set(["-f", "--file"]), positionalSql: false, lexicon: UNVERIFIED_SQL_LEXICON }],
-  ["mongo", { inlineFlags: /* @__PURE__ */ new Set(["--eval"]), scriptFlags: /* @__PURE__ */ new Set(), positionalSql: false, lexicon: UNVERIFIED_SQL_LEXICON }]
-]);
 var SQL_WRITE_STATEMENT = new RegExp([
   String.raw`\b(?:insert|update|delete|merge|upsert|alter|create|drop|truncate|grant|revoke|copy|vacuum|reindex|rename|attach|detach)\b`,
   String.raw`\breplace\s+into\b`,
@@ -3781,7 +3801,7 @@ var segmentWritesThroughARemoteApi = (segment, depth) => {
   const innermost = innermostInvocation(segment.invocation);
   return invocationWritesThroughARemoteApi(innermost) || commandsNestedIn(innermost, inlineScriptsOf(innermost, segment.heredocs)).some((nested) => commandWritesThroughARemoteApiAt(nested, depth + 1));
 };
-var commandWritesThroughARemoteApiAt = (command, depth) => depth <= MAX_SPELLING_DEPTH && spelledSegmentsOf(command).some((segment) => segmentWritesThroughARemoteApi(segment, depth));
+var commandWritesThroughARemoteApiAt = (command, depth) => depth > MAX_SPELLING_DEPTH || spelledSegmentsOf(command).some((segment) => segmentWritesThroughARemoteApi(segment, depth));
 var commandWritesThroughARemoteApi = (command) => commandWritesThroughARemoteApiAt(command, 0);
 var segmentNeedsAPerson = (toolName, segment) => {
   const invocation = invocationOf(segment);
@@ -4463,7 +4483,6 @@ var API_KEY_PATTERN = new RegExp(`^${API_KEY_PREFIX_SHAPE}\\.[a-f0-9]+$`);
 var isValidApiKey = (value) => API_KEY_PATTERN.test(value);
 var ACTION_BODY_MAX = 4e3;
 var DECISION_LINE_MAX = 500;
-var ASK_QUESTION_MAX = 500;
 var ASK_AGENT_NAME_MAX = 100;
 var TRUNCATION_MARK = "\u2026";
 var isHighSurrogate = (code) => code >= 55296 && code <= 56319;
@@ -5846,7 +5865,6 @@ export {
   isValidApiKey,
   ACTION_BODY_MAX,
   DECISION_LINE_MAX,
-  ASK_QUESTION_MAX,
   ASK_AGENT_NAME_MAX,
   truncateLine,
   isAnswerSource,

package/dist/{chunk-SYUHM6V3.js → chunk-7IVV4LLF.js}

@@ -1,6 +1,6 @@
 import {
   pusharyFetch
-} from "./chunk-4WGKAGIU.js";
+} from "./chunk-22YSHBTI.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
@@ -9,11 +9,11 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-5EX2SD5N.js";
+} from "./chunk-3LS3GFJW.js";
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-TDLEFGAM.js";
+} from "./chunk-7FQL5NWJ.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-SAHD5DYW.js → chunk-7S7H7V5V.js}

@@ -3,18 +3,18 @@ import {
   addGeminiMcpServer,
   removeGeminiMcpServer,
   supportedClaudeEvents
-} from "./chunk-OS6AE2MR.js";
+} from "./chunk-QJ3ENGBT.js";
 import {
   CLAUDE_CODE_AGENT,
   parseApplyPatchFiles
-} from "./chunk-X427XA76.js";
+} from "./chunk-SMRMWDFE.js";
 import {
   guardBinary,
   guardBinaryRefusing,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-SRRJLA24.js";
+} from "./chunk-UPRNSD2T.js";
 import {
   HOOK_LOCATOR_BINARY,
   PHONE_ANSWERED_TOOLS,
@@ -24,7 +24,7 @@ import {
   refusalOutput,
   toToolLookup,
   withHookHoldBudget
-} from "./chunk-TDLEFGAM.js";
+} from "./chunk-7FQL5NWJ.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-SJJA2GPD.js → chunk-7UGGCTTW.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-SRRJLA24.js";
+} from "./chunk-UPRNSD2T.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -15,7 +15,7 @@ import {
   globalUpgradeEntry,
   isAutoUpdateResult,
   ownPackageRoot
-} from "./chunk-TDLEFGAM.js";
+} from "./chunk-7FQL5NWJ.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-Q2GSTQ3R.js → chunk-A455TSHF.js}

@@ -8,10 +8,10 @@ import {
   codexHooksJsonIn,
   isPusharyCodexCommand,
   resolvePathBinary
-} from "./chunk-SRRJLA24.js";
+} from "./chunk-UPRNSD2T.js";
 import {
   getPackageVersion
-} from "./chunk-TDLEFGAM.js";
+} from "./chunk-7FQL5NWJ.js";
 
 // src/codex-app-server.ts
 import { existsSync, realpathSync } from "fs";

package/dist/{chunk-CJCVPCOB.js → chunk-A5FFSXZE.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-2ROXUEZV.js";
+} from "./chunk-45OXG3VR.js";
 import {
   getPackageVersion
-} from "./chunk-TDLEFGAM.js";
+} from "./chunk-7FQL5NWJ.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-ALSIMOFS.js → chunk-B5RLJ6QD.js}

@@ -1,16 +1,16 @@
 import {
   registerTranscript
-} from "./chunk-GSBOLJZ4.js";
+} from "./chunk-CPYOJRDN.js";
 import {
   namedEvent
-} from "./chunk-SAHD5DYW.js";
+} from "./chunk-7S7H7V5V.js";
 import {
   writeDegraded
-} from "./chunk-464FX6W5.js";
+} from "./chunk-OZMGO4WF.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource
-} from "./chunk-TDLEFGAM.js";
+} from "./chunk-7FQL5NWJ.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-7447DYNW.js → chunk-CK3W7Q5S.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-TDLEFGAM.js";
+} from "./chunk-7FQL5NWJ.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-GSBOLJZ4.js → chunk-CPYOJRDN.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-DWQYCOPI.js";
 import {
   ensureDaemonRunning
-} from "./chunk-VFNYTVTJ.js";
+} from "./chunk-FPYBX36E.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-7447DYNW.js";
+} from "./chunk-CK3W7Q5S.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-EPVY3JU3.js";
+} from "./chunk-4PIAOJAW.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-MRR4NQ3H.js";
+} from "./chunk-SMSX4TCC.js";
 import {
   hookOwnerOf
-} from "./chunk-FXJ5SEQT.js";
+} from "./chunk-6OGDGQTT.js";
 import {
   readTranscriptPreference
-} from "./chunk-IKJJB4QG.js";
+} from "./chunk-DCBSD22V.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-SRRJLA24.js";
+} from "./chunk-UPRNSD2T.js";
 import {
   writeJsonAtomic
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-5EX2SD5N.js";
+} from "./chunk-3LS3GFJW.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";
@@ -176,27 +176,30 @@ var createSyncState = () => ({
   seen: /* @__PURE__ */ new Set(),
   keyUploaded: false,
   keyRejected: false,
-  keyUnavailable: false
+  keyUnavailable: false,
+  unsettled: 0
 });
+var withSessionKey = async (state, uploader) => {
+  if (state.sessionKey || state.keyRejected) return state;
+  const recipients = await uploader.fetchTranscriptRecipients();
+  if (!recipients) return state;
+  const sessionKey = generateSessionKey();
+  return {
+    ...state,
+    sessionKey,
+    wrappedKey: wrapSessionKey(sessionKey, decodePublicKey(recipients.phonePublicKey)),
+    providerWrappedKey: recipients.provider ? wrapSessionKey(sessionKey, decodePublicKey(recipients.provider.publicKey)) : state.providerWrappedKey,
+    providerKeyId: recipients.provider ? recipients.provider.keyId : state.providerKeyId
+  };
+};
 var syncTick = async (lines, state, uploader, sessionId, machineId) => {
   if (state.keyRejected) return state;
-  let sessionKey = state.sessionKey;
-  let wrappedKey = state.wrappedKey;
-  let providerWrappedKey = state.providerWrappedKey;
-  let providerKeyId = state.providerKeyId;
-  if (!sessionKey) {
-    const recipients = await uploader.fetchTranscriptRecipients();
-    if (!recipients) return state;
-    sessionKey = generateSessionKey();
-    wrappedKey = wrapSessionKey(sessionKey, decodePublicKey(recipients.phonePublicKey));
-    if (recipients.provider) {
-      providerWrappedKey = wrapSessionKey(sessionKey, decodePublicKey(recipients.provider.publicKey));
-      providerKeyId = recipients.provider.keyId;
-    }
-  }
+  const keyed = await withSessionKey(state, uploader);
+  const { sessionKey, wrappedKey, providerWrappedKey, providerKeyId } = keyed;
+  if (!sessionKey) return state;
   const built = buildTranscriptRecords(lines, sessionKey, state.seen);
   if (built.records.length === 0) {
-    return { ...state, sessionKey, wrappedKey, providerWrappedKey, providerKeyId, seen: built.seen };
+    return { ...state, sessionKey, wrappedKey, providerWrappedKey, providerKeyId, seen: built.seen, unsettled: 0 };
   }
   const seen = new Set(state.seen);
   let keyUploaded = state.keyUploaded;
@@ -237,7 +240,8 @@ var syncTick = async (lines, state, uploader, sessionId, machineId) => {
     seen,
     keyUploaded,
     keyRejected,
-    keyUnavailable
+    keyUnavailable,
+    unsettled: built.records.filter((record) => !seen.has(record.localId)).length
   };
 };
 var MAX_RECORDS_PER_BATCH = 200;
@@ -299,7 +303,19 @@ var statOrNull = (path) => {
 };
 var sightTranscript = (epoch, path, seenAtMs) => recordSighting(epoch, path, sightingOf(statOrNull(path), seenAtMs));
 var LINE_FEED = 10;
-var nothingUnread = (cutoff) => ({ lines: [], cutoff, completeThroughOffset: cutoff.offset });
+var MAXIMUM_TRANSCRIPT_READ_BYTES = 4 * 1024 * 1024;
+var CATCH_UP_DELAY_MS = 50;
+var STALLED_BACKOFF_FACTOR = 4;
+var nothingUnread = (cutoff) => ({ lines: [], cutoff, completeThroughOffset: cutoff.offset, reachedEnd: true });
+var readThroughALineEnd = (descriptor, offset, unread) => {
+  let window = Math.min(unread, MAXIMUM_TRANSCRIPT_READ_BYTES);
+  for (; ; ) {
+    const buffer = Buffer.alloc(window);
+    const received = buffer.subarray(0, readSync(descriptor, buffer, 0, window, offset));
+    if (window >= unread || received.length < window || received.includes(LINE_FEED)) return received;
+    window = Math.min(unread, window * 2);
+  }
+};
 var readLinesSinceCutoff = (epoch, path, seenAtMs) => {
   let descriptor;
   try {
@@ -312,12 +328,14 @@ var readLinesSinceCutoff = (epoch, path, seenAtMs) => {
     const cutoff = recordSighting(epoch, path, sightingOf(info, seenAtMs));
     const unread = info.size - cutoff.offset;
     if (unread <= 0) return nothingUnread(cutoff);
-    const buffer = Buffer.alloc(unread);
-    const received = buffer.subarray(0, readSync(descriptor, buffer, 0, unread, cutoff.offset));
+    const received = readThroughALineEnd(descriptor, cutoff.offset, unread);
+    const completeBytes = received.lastIndexOf(LINE_FEED) + 1;
+    const reachedEnd = received.length >= unread;
     return {
-      lines: received.toString("utf8").split("\n"),
+      lines: (reachedEnd ? received : received.subarray(0, completeBytes)).toString("utf8").split("\n"),
       cutoff,
-      completeThroughOffset: cutoff.offset + received.lastIndexOf(LINE_FEED) + 1
+      completeThroughOffset: cutoff.offset + completeBytes,
+      reachedEnd
     };
   } finally {
     closeSync(descriptor);
@@ -327,7 +345,8 @@ var linesSeenDuringEpoch = (epoch, path, source, seenAtMs) => {
   const read2 = readLinesSinceCutoff(epoch, path, seenAtMs);
   return { ...read2, lines: transcriptLinesSeenLive(normalizeTranscriptLines(read2.lines, source), epoch.startedAtMs, read2.cutoff.startedBeforeEpoch) };
 };
-var nothingLeftToUpload = (state, lines) => state.sessionKey !== null && !state.keyRejected && buildTranscriptRecords(lines, state.sessionKey, state.seen).records.length === 0;
+var nothingLeftToUpload = (state) => state.sessionKey !== null && !state.keyRejected && state.unsettled === 0;
+var uploadStalled = (before, after) => after.sessionKey !== null && !after.keyRejected && after.unsettled > 0 && after.seen.size === before.seen.size;
 var nextInterval = (previousMs, idle, baseMs, maxMs) => idle ? Math.min(previousMs * 2, maxMs) : baseMs;
 var startTranscriptSync = (opts) => {
   let warnedAboutRecipients = false;
@@ -354,32 +373,50 @@ var startTranscriptSync = (opts) => {
   const persisted = loadSessionKey(opts.sessionId, opts.storage?.sessionKeyDirectory);
   let state = persisted ? { ...createSyncState(), ...persisted } : createSyncState();
   sweepStaleSessionKeys(Date.now(), opts.storage?.sessionKeyDirectory);
+  let persistedKey = persisted?.sessionKey ?? null;
   let persistedUploaded = persisted?.keyUploaded ?? false;
+  const persistSessionKey = () => {
+    if (!state.sessionKey || state.sessionKey === persistedKey && state.keyUploaded === persistedUploaded) return;
+    persistedKey = state.sessionKey;
+    persistedUploaded = state.keyUploaded;
+    saveSessionKey(opts.sessionId, {
+      sessionKey: state.sessionKey,
+      wrappedKey: state.wrappedKey,
+      providerWrappedKey: state.providerWrappedKey,
+      providerKeyId: state.providerKeyId,
+      keyUploaded: state.keyUploaded
+    }, opts.storage?.sessionKeyDirectory);
+  };
   let running = true;
   let inFlight = false;
+  let stalled = false;
+  let catchingUp = false;
   const tick = async () => {
+    catchingUp = false;
     if (!running || inFlight || !(opts.enabled ? opts.enabled() : transcriptsEnabled())) return;
     inFlight = true;
     try {
-      const before = state.sessionKey;
       const ending = opts.ending?.() === true;
+      if (state.keyRejected) {
+        if (ending) opts.onDrained?.();
+        return;
+      }
+      state = await withSessionKey(state, uploader);
+      if (!state.sessionKey) return;
+      persistSessionKey();
+      const previous = state;
       const modified = existsSync2(path) ? statSync2(path).mtimeMs : null;
       const source = opts.source ?? "claude";
       const read2 = opts.epoch ? linesSeenDuringEpoch(opts.epoch, path, source, Date.now()) : null;
       const lines = read2?.lines ?? normalizeTranscriptLines(readLines(path), source);
       state = await syncTick(lines, state, uploader, opts.sessionId, opts.machineId);
-      if (state.sessionKey && (before !== state.sessionKey || state.keyUploaded !== persistedUploaded)) {
-        persistedUploaded = state.keyUploaded;
-        saveSessionKey(opts.sessionId, {
-          sessionKey: state.sessionKey,
-          wrappedKey: state.wrappedKey,
-          providerWrappedKey: state.providerWrappedKey,
-          providerKeyId: state.providerKeyId,
-          keyUploaded: state.keyUploaded
-        }, opts.storage?.sessionKeyDirectory);
-      }
-      if (opts.epoch && read2 && nothingLeftToUpload(state, lines)) recordSettledPosition(opts.epoch, path, read2.cutoff, read2.completeThroughOffset);
-      if (ending && opts.ending?.() && existsSync2(path) && statSync2(path).mtimeMs === modified && state.keyUploaded && nothingLeftToUpload(state, lines)) opts.onDrained?.();
+      stalled = uploadStalled(previous, state);
+      persistSessionKey();
+      const settled = nothingLeftToUpload(state);
+      if (opts.epoch && read2 && settled) recordSettledPosition(opts.epoch, path, read2.cutoff, read2.completeThroughOffset);
+      catchingUp = settled && read2 !== null && !read2.reachedEnd && read2.completeThroughOffset > read2.cutoff.offset;
+      const readEverything = read2?.reachedEnd ?? true;
+      if (ending && opts.ending?.() && existsSync2(path) && statSync2(path).mtimeMs === modified && settled && readEverything) opts.onDrained?.();
     } catch {
     } finally {
       inFlight = false;
@@ -394,14 +431,14 @@ var startTranscriptSync = (opts) => {
       void (async () => {
         const before = state.sessionKey;
         await tick();
-        const idle = state.sessionKey === null && before === null || state.keyUnavailable;
-        schedule(nextInterval(delayMs, idle, baseIntervalMs, maxIntervalMs));
+        const waiting = state.sessionKey === null && before === null || state.keyUnavailable || state.keyRejected;
+        const ceilingMs = waiting ? maxIntervalMs : Math.min(maxIntervalMs, baseIntervalMs * STALLED_BACKOFF_FACTOR);
+        schedule(catchingUp ? CATCH_UP_DELAY_MS : nextInterval(Math.max(delayMs, baseIntervalMs), waiting || stalled, baseIntervalMs, ceilingMs));
       })();
     }, delayMs);
     if (typeof timer.unref === "function") timer.unref();
   };
-  void tick();
-  schedule(baseIntervalMs);
+  schedule(0);
   return () => {
     running = false;
     if (timer) clearTimeout(timer);