pushary 1.9.43 → 1.9.44

package/dist/{chunk-Y4VZYKSW.js → chunk-CEZTYTBN.js}

@@ -4,19 +4,19 @@ import {
   outcomeOfFailedAsk,
   reportMachineDenial,
   storedWaitDeadline
-} from "./chunk-FPJHS6PA.js";
+} from "./chunk-UC4PNLMK.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-Y3N3SYBX.js";
+} from "./chunk-GRAPJKDK.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-ZJXEQV3A.js";
+} from "./chunk-2NVXFWQY.js";
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-V5SUKRRI.js";
+} from "./chunk-FKDZU6YX.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -37,11 +37,10 @@ import {
   readLastPrompt,
   readLastUserPrompt,
   recordBlockedActionHint,
-  repoKeyFor,
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-YRE6GUFZ.js";
+} from "./chunk-BKK3JCTD.js";
 import {
   askUser,
   cancelQuestion,
@@ -54,17 +53,20 @@ import {
   sendNotification,
   waitForQuestion,
   waitsForThePhone
-} from "./chunk-4T2TGP4T.js";
+} from "./chunk-5ZSBQHCM.js";
+import {
+  repoKeyFor
+} from "./chunk-GOEIW2VH.js";
 import {
   getMachineId
-} from "./chunk-W3BO56VE.js";
+} from "./chunk-WMO2XVG4.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-GTOBOC6M.js";
+} from "./chunk-OWQOMGBF.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LDCRV6HG.js";
+} from "./chunk-T3KMJI4W.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -109,7 +111,7 @@ import {
   resolveGate,
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason
-} from "./chunk-RXXKFM22.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";

package/dist/{chunk-CIERFMQT.js → chunk-DD6IBKEJ.js}

@@ -1,18 +1,18 @@
 import {
   registerTranscript
-} from "./chunk-S4QT3YFG.js";
+} from "./chunk-OZ7MLVDM.js";
 import {
   namedEvent
-} from "./chunk-V5SUKRRI.js";
+} from "./chunk-FKDZU6YX.js";
 import {
   writeDegraded
-} from "./chunk-4T2TGP4T.js";
+} from "./chunk-GOEIW2VH.js";
 import {
   claudeShapedHookInput,
   hookCompatibleProfileBySource,
   isGrokHookPayload,
   isGrokSessionEndStop
-} from "./chunk-RXXKFM22.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/tool-hook-input.ts
 var OPTIONAL_TEXT_FIELDS = ["hook_event_name", "session_id", "cwd", "transcript_path", "tool_use_id", "permission_mode"];

package/dist/{chunk-TH74SUVV.js → chunk-E76QCZIA.js}

@@ -8,10 +8,10 @@ import {
   codexHooksJsonIn,
   isPusharyCodexCommand,
   resolvePathBinary
-} from "./chunk-S3OWTQ6Z.js";
+} from "./chunk-4JHEZ2PV.js";
 import {
   getPackageVersion
-} from "./chunk-RXXKFM22.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/codex-app-server.ts
 import { existsSync, realpathSync } from "fs";

package/dist/{chunk-ENGASUEL.js → chunk-FI2F5KZJ.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-V5SUKRRI.js";
+} from "./chunk-FKDZU6YX.js";
 import {
   pusharyHookExecutable
-} from "./chunk-PIZ65U3D.js";
+} from "./chunk-T4CKP47U.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-S3OWTQ6Z.js";
+} from "./chunk-4JHEZ2PV.js";
 import {
   isRecord
-} from "./chunk-RXXKFM22.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-V5SUKRRI.js → chunk-FKDZU6YX.js}

@@ -3,18 +3,18 @@ import {
   addGeminiMcpServer,
   removeGeminiMcpServer,
   supportedClaudeEvents
-} from "./chunk-IMD5FN6Y.js";
+} from "./chunk-SI2NC6UU.js";
 import {
   CLAUDE_CODE_AGENT,
   compatibleToolLookup
-} from "./chunk-YRE6GUFZ.js";
+} from "./chunk-BKK3JCTD.js";
 import {
   guardBinary,
   guardBinaryRefusing,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-S3OWTQ6Z.js";
+} from "./chunk-4JHEZ2PV.js";
 import {
   HOOK_LOCATOR_BINARY,
   PHONE_ANSWERED_TOOLS,
@@ -25,7 +25,7 @@ import {
   pusharyMissingReason,
   refusalOutput,
   withHookHoldBudget
-} from "./chunk-RXXKFM22.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-EA5NWDK7.js → chunk-FYNMFSIZ.js}

@@ -1,3 +1,14 @@
+import {
+  readJsonSafe,
+  writeJsonAtomic
+} from "./chunk-AQFEP65J.js";
+import {
+  configFilePath
+} from "./chunk-OWQOMGBF.js";
+import {
+  readSetupOutcomeProperties
+} from "./chunk-JNU3LV47.js";
+
 // src/hooks-spec.ts
 var CURSOR_GATE_SCRIPT = "pushary-gate.mjs";
 
@@ -39,7 +50,25 @@ var versionManagerOf = (execPath) => {
 };
 var describeVersionManagerPin = (execPath, manager) => `The background service is pinned to ${execPath}, which ${manager} manages. Switching Node versions strands it; run pushary daemon install afterwards.`;
 
+// src/setup/failure-record.ts
+import { dirname, join } from "path";
+var failurePath = () => join(dirname(configFilePath()), "last-setup-failure.json");
+var saveSetupFailure = (body, path = failurePath()) => {
+  const properties = readSetupOutcomeProperties(body);
+  if (properties.exitCode === null || properties.exitCode === 0) return;
+  writeJsonAtomic(path, { ...properties, recordedAt: (/* @__PURE__ */ new Date()).toISOString() }, 384);
+};
+var readSetupFailure = (path = failurePath()) => {
+  const result = readJsonSafe(path);
+  if (result.kind !== "ok" || typeof result.value !== "object" || result.value === null || Array.isArray(result.value)) return null;
+  const body = result.value;
+  if (!("recordedAt" in body) || typeof body.recordedAt !== "string" || body.recordedAt.length > 30 || !Number.isFinite(Date.parse(body.recordedAt))) return null;
+  return { ...readSetupOutcomeProperties({ ...body }), recordedAt: body.recordedAt };
+};
+
 export {
+  saveSetupFailure,
+  readSetupFailure,
   CURSOR_GATE_SCRIPT,
   readServiceExecPath,
   versionManagerOf,

package/dist/{chunk-JJWG7CBT.js → chunk-GBCR2FH2.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-Q7CUTGT4.js";
+} from "./chunk-6EV3B5CD.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-LDCRV6HG.js";
+} from "./chunk-T3KMJI4W.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-RXXKFM22.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/chunk-GOEIW2VH.js

@@ -0,0 +1,266 @@
+import {
+  CLIENT_REPORT_DISABLE_ENV,
+  isDisabledByEnv
+} from "./chunk-POFBE6ZY.js";
+import {
+  isNetworkFailure
+} from "./chunk-S2ALW446.js";
+import {
+  clientReportClaims
+} from "./chunk-4JHEZ2PV.js";
+import {
+  getApiKey,
+  getBaseUrl
+} from "./chunk-OWQOMGBF.js";
+import {
+  CLIENT_REPORT_PATH,
+  degradedLine,
+  localRepoKey,
+  normalizeRepoRemote
+} from "./chunk-JNU3LV47.js";
+
+// src/client-report-claim.ts
+import { createHash } from "crypto";
+import { closeSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";
+import { join } from "path";
+var CLIENT_REPORT_WINDOW_MS = 6e4;
+var CLAIM_DIRECTORY_MODE = 448;
+var CLAIM_FILE_MODE = 384;
+var CLAIM_KEY_HASH_LENGTH = 16;
+var CLAIM_FILE_PATTERN = /^[0-9a-f]{16}-(\d+)$/;
+var EXCLUSIVE_CREATE = "wx";
+var ALREADY_EXISTS = "EEXIST";
+var WINDOWS_KEPT_BEHIND = 1;
+var reportWindowOf = (now) => Math.floor(now / CLIENT_REPORT_WINDOW_MS);
+var claimFileName = (key, window) => `${createHash("sha256").update(key).digest("hex").slice(0, CLAIM_KEY_HASH_LENGTH)}-${window}`;
+var errorCodeOf = (error) => typeof error === "object" && error !== null && "code" in error && typeof error.code === "string" ? error.code : null;
+var claimWindowOf = (fileName) => {
+  const match = CLAIM_FILE_PATTERN.exec(fileName);
+  return match ? Number(match[1]) : null;
+};
+var isStaleClaim = (fileName, window) => {
+  const claimedWindow = claimWindowOf(fileName);
+  return claimedWindow !== null && claimedWindow < window - WINDOWS_KEPT_BEHIND;
+};
+var removeQuietly = (filePath) => {
+  try {
+    unlinkSync(filePath);
+  } catch {
+    return;
+  }
+};
+var removeStaleClaims = (claimsDir, window) => {
+  try {
+    for (const fileName of readdirSync(claimsDir)) {
+      if (isStaleClaim(fileName, window)) removeQuietly(join(claimsDir, fileName));
+    }
+  } catch {
+    return;
+  }
+};
+var claimReportWindow = (claimsDir, key, now) => {
+  const window = reportWindowOf(now);
+  try {
+    mkdirSync(claimsDir, { recursive: true, mode: CLAIM_DIRECTORY_MODE });
+    closeSync(openSync(join(claimsDir, claimFileName(key, window)), EXCLUSIVE_CREATE, CLAIM_FILE_MODE));
+  } catch (error) {
+    return errorCodeOf(error) === ALREADY_EXISTS ? "already_claimed" : "unavailable";
+  }
+  removeStaleClaims(claimsDir, window);
+  return "claimed";
+};
+
+// src/client-report.ts
+var CLIENT_REPORT_TIMEOUT_MS = 1e3;
+var readApiKey = () => {
+  try {
+    return getApiKey();
+  } catch {
+    return null;
+  }
+};
+var defaultDeps = () => ({
+  disabled: () => isDisabledByEnv(process.env, CLIENT_REPORT_DISABLE_ENV),
+  fetchImpl: fetch,
+  apiKey: readApiKey,
+  baseUrl: getBaseUrl,
+  now: Date.now,
+  claimsDir: clientReportClaims()
+});
+var reportKey = (event) => `${event.kind}:${event.code}`;
+var createClientErrorReporter = (deps) => {
+  const windowClaimedInProcess = /* @__PURE__ */ new Map();
+  const claimInProcess = (key, now) => {
+    if (windowClaimedInProcess.get(key) === reportWindowOf(now)) return false;
+    windowClaimedInProcess.set(key, reportWindowOf(now));
+    return true;
+  };
+  const claimReport = (key, now) => {
+    const claim = claimReportWindow(deps.claimsDir, key, now);
+    return claim === "unavailable" ? claimInProcess(key, now) : claim === "claimed";
+  };
+  return async (event) => {
+    try {
+      if (deps.disabled()) return;
+      const apiKey = deps.apiKey();
+      const now = deps.now();
+      if (!apiKey || !claimReport(reportKey(event), now)) return;
+      await deps.fetchImpl(`${deps.baseUrl()}${CLIENT_REPORT_PATH}`, {
+        method: "POST",
+        headers: { "Authorization": `Bearer ${apiKey}`, "Content-Type": "application/json" },
+        body: JSON.stringify({ ...event, occurredAt: new Date(now).toISOString() }),
+        signal: AbortSignal.timeout(CLIENT_REPORT_TIMEOUT_MS)
+      });
+    } catch {
+      return;
+    }
+  };
+};
+var processReporter = null;
+var inFlightReports = /* @__PURE__ */ new Set();
+var reportClientError = (event) => {
+  processReporter ??= createClientErrorReporter(defaultDeps());
+  const report = processReporter(event);
+  inFlightReports.add(report);
+  void report.finally(() => inFlightReports.delete(report));
+  return report;
+};
+var exitAfterClientReports = async (code) => {
+  await Promise.all(inFlightReports);
+  return process.exit(code);
+};
+var clientErrorKindOf = (error) => isNetworkFailure(error) ? "network" : "unexpected";
+var writeDegraded = (subsystem, report) => {
+  process.stderr.write(`${degradedLine(subsystem, report)}
+`);
+  void reportClientError({ kind: "degraded", code: `${subsystem}:${report.reason}` });
+};
+
+// src/repo.ts
+import { existsSync, readFileSync, statSync } from "fs";
+import { basename, dirname, isAbsolute, join as join2, resolve } from "path";
+var MAX_PARENT_WALK = 64;
+var GIT_FILE_PREFIX = "gitdir:";
+var findGitDir = (startDir) => {
+  let current = resolve(startDir);
+  for (let depth = 0; depth < MAX_PARENT_WALK; depth += 1) {
+    const candidate = join2(current, ".git");
+    try {
+      if (existsSync(candidate)) {
+        if (statSync(candidate).isDirectory()) return candidate;
+        const pointer = readFileSync(candidate, "utf-8").trim();
+        if (pointer.startsWith(GIT_FILE_PREFIX)) {
+          const target = pointer.slice(GIT_FILE_PREFIX.length).trim();
+          return isAbsolute(target) ? target : resolve(current, target);
+        }
+      }
+    } catch {
+    }
+    const parent = dirname(current);
+    if (parent === current) return void 0;
+    current = parent;
+  }
+  return void 0;
+};
+var configPathFor = (gitDir) => {
+  const index = gitDir.replace(/\\/g, "/").indexOf("/worktrees/");
+  return index === -1 ? join2(gitDir, "config") : join2(gitDir.slice(0, index), "config");
+};
+var ORIGIN_SECTION = /^\[remote "origin"\]/;
+var SECTION_HEADER = /^\[/;
+var URL_LINE = /^url\s*=\s*(.+)$/;
+var readOriginRemote = (gitDir) => {
+  try {
+    const configPath = configPathFor(gitDir);
+    if (!existsSync(configPath)) return void 0;
+    let inOrigin = false;
+    for (const rawLine of readFileSync(configPath, "utf-8").split("\n")) {
+      const line = rawLine.trim();
+      if (SECTION_HEADER.test(line)) {
+        inOrigin = ORIGIN_SECTION.test(line);
+        continue;
+      }
+      if (!inOrigin) continue;
+      const url = URL_LINE.exec(line);
+      if (url) return url[1]?.trim();
+    }
+  } catch {
+  }
+  return void 0;
+};
+var deriveRepoKey = (cwd) => {
+  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
+  try {
+    const gitDir = findGitDir(dir);
+    if (gitDir) {
+      const remote = readOriginRemote(gitDir);
+      const normalized = remote ? normalizeRepoRemote(remote) : void 0;
+      if (normalized) return normalized;
+      const root = gitDir.endsWith(".git") ? dirname(gitDir) : dir;
+      return localRepoKey(basename(root));
+    }
+    return localRepoKey(basename(resolve(dir)));
+  } catch {
+    return void 0;
+  }
+};
+var repoKeyCache = /* @__PURE__ */ new Map();
+var REPO_KEY_ENV = "PUSHARY_REPO_KEY";
+var repoKeyFor = (cwd) => {
+  const override = process.env[REPO_KEY_ENV];
+  if (typeof override === "string") {
+    const trimmed = override.trim();
+    if (trimmed.toLowerCase() === "off") return void 0;
+    if (trimmed.length > 0) return trimmed.toLowerCase();
+  }
+  const dir = cwd && cwd.length > 0 ? cwd : process.cwd();
+  if (repoKeyCache.has(dir)) return repoKeyCache.get(dir);
+  const derived = deriveRepoKey(dir);
+  repoKeyCache.set(dir, derived);
+  return derived;
+};
+
+// src/validate.ts
+var isPolicyConfig = (data) => {
+  if (!data || typeof data !== "object") return false;
+  const d = data;
+  return (d.resolvedAgent === void 0 || typeof d.resolvedAgent === "string") && Array.isArray(d.policies) && typeof d.defaultTimeoutSeconds === "number" && typeof d.defaultTimeoutAction === "string";
+};
+var isAskUserResponse = (data) => {
+  if (!data || typeof data !== "object") return false;
+  const d = data;
+  return typeof d.correlationId === "string" && typeof d.status === "string" && (d.answered === void 0 || typeof d.answered === "boolean") && (d.value === void 0 || typeof d.value === "string") && (d.note === void 0 || typeof d.note === "string") && (d.waitEndsAt === void 0 || typeof d.waitEndsAt === "string");
+};
+var isWaitForAnswerResponse = (data) => {
+  if (!data || typeof data !== "object") return false;
+  const d = data;
+  return typeof d.answered === "boolean";
+};
+var GATE_REPLY_KINDS = ["kill", "allow", "deny", "ask", "no_opinion"];
+var isSettlementOutputs = (value) => {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const outputs = value;
+  return (outputs.approve === void 0 || typeof outputs.approve === "string") && (outputs.deny === void 0 || typeof outputs.deny === "string");
+};
+var isGateReply = (data) => {
+  if (!data || typeof data !== "object") return false;
+  const d = data;
+  return GATE_REPLY_KINDS.includes(d.kind) && (d.output === void 0 || typeof d.output === "string") && (d.correlationId === void 0 || typeof d.correlationId === "string") && (d.deadlineSeconds === void 0 || typeof d.deadlineSeconds === "number") && (d.noDevices === void 0 || typeof d.noDevices === "boolean") && (d.suppressed === void 0 || typeof d.suppressed === "boolean") && (d.settlementOutputs === void 0 || isSettlementOutputs(d.settlementOutputs));
+};
+var isBlockedActionClaim = (data) => {
+  if (!data || typeof data !== "object") return false;
+  return typeof data.granted === "boolean";
+};
+
+export {
+  reportClientError,
+  exitAfterClientReports,
+  clientErrorKindOf,
+  writeDegraded,
+  isPolicyConfig,
+  isAskUserResponse,
+  isWaitForAnswerResponse,
+  isGateReply,
+  isBlockedActionClaim,
+  repoKeyFor
+};

package/dist/{chunk-Y3N3SYBX.js → chunk-GRAPJKDK.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-RXXKFM22.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-ZORCUL3Z.js → chunk-HV4TEKNP.js}

@@ -1,16 +1,16 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-O4SYJVAF.js";
+} from "./chunk-UZVF6MP2.js";
 import {
   grokHome
-} from "./chunk-V5SUKRRI.js";
+} from "./chunk-FKDZU6YX.js";
 import {
   codexHomeFrom,
   resolvePathBinary
-} from "./chunk-S3OWTQ6Z.js";
+} from "./chunk-4JHEZ2PV.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-RXXKFM22.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-A64UCGX3.js → chunk-IWHDNMM3.js}

@@ -1,9 +1,9 @@
 import {
   APPROVAL_SETTINGS_PATH
-} from "./chunk-JW4S4O4W.js";
+} from "./chunk-SWDPCDLT.js";
 import {
   readMacAppAgentKey
-} from "./chunk-F7SZ2RCK.js";
+} from "./chunk-LEHBWBCG.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -13,13 +13,13 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-C3RVRTHS.js";
+} from "./chunk-TJZUQRMH.js";
 import {
   absoluteUrl
-} from "./chunk-C54VJJ37.js";
+} from "./chunk-TKTS3SIM.js";
 import {
   isValidApiKey
-} from "./chunk-RXXKFM22.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";