pushary 1.9.54 → 1.9.56

package/dist/{chunk-MTKV4RUQ.js → chunk-GWQ6T6JV.js}

@@ -1,25 +1,25 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-46TC24ET.js";
+} from "./chunk-LTCNAIY2.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-VYBH6D4X.js";
+} from "./chunk-YBE2KH2U.js";
 import {
   NpmInstallError,
   NpmMissingError,
   NpmPermissionError
-} from "./chunk-XUW2DRAQ.js";
+} from "./chunk-T6GEEMVC.js";
 import {
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-AQFEP65J.js";
+} from "./chunk-QENTGE75.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-MC4VY5LK.js";
+} from "./chunk-T4IAMIX4.js";
 import {
   readSetupAgentFailures
-} from "./chunk-LF3TLC7B.js";
+} from "./chunk-WACFIQYA.js";
 
 // src/instruction-file.ts
 import { accessSync, constants, existsSync, readFileSync, statSync, writeFileSync, mkdirSync, rmSync } from "fs";

package/dist/{chunk-NHVEQLQC.js → chunk-HR3DJWP2.js}

@@ -1,9 +1,9 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-FCMWUYIE.js";
+} from "./chunk-6U3L4K57.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-MC4VY5LK.js";
+} from "./chunk-T4IAMIX4.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-ZWOWEXCV.js → chunk-HTN7SMKB.js}

@@ -1,31 +1,32 @@
 import {
   codexAppOnThisMac,
+  codexEngineBehindLauncher,
   codexPassThroughScript,
   desktopEngine,
   desktopProxyScript,
   everyProgramFileIsThere,
   installedCodexApp,
   shellQuoted
-} from "./chunk-T5L5NWT3.js";
+} from "./chunk-RZF2GIPI.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-BL3WAGIK.js";
+} from "./chunk-DUACX6E3.js";
 import {
   CODEX_APP_LAUNCH_AT_LOGIN_VERB,
   CODEX_APP_LAUNCH_VARIABLE
 } from "./chunk-E46NE7FB.js";
 import {
   writeFileAtomic
-} from "./chunk-AQFEP65J.js";
+} from "./chunk-QENTGE75.js";
 
 // src/codex-app-cards-switch.ts
 import { execFileSync as execFileSync2 } from "child_process";
 import { existsSync as existsSync2, mkdirSync, readFileSync, rmSync } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { isAbsolute as isAbsolute2, join as join2 } from "path";
 
 // src/cli/mac-leftovers.ts
 import { execSync, execFileSync } from "child_process";
@@ -273,7 +274,7 @@ var codexAppCardsReceiptFrom = (contents) => {
   }
   if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return null;
   const { entry, app, engine } = parsed;
-  return Array.isArray(entry) && entry.length > 0 && entry.every(isAString) && isAString(app) && isAString(engine) ? { entry, app, engine } : null;
+  return Array.isArray(entry) && entry.length > 0 && entry.every(isAString) && isAString(app) && isAString(engine) && isAbsolute2(engine) ? { entry, app, engine } : null;
 };
 var codexAppCardsInstallation = (input) => {
   const paths = codexAppCardsPaths(input.homeDir, input.uid);
@@ -327,8 +328,10 @@ var setCodexAppLaunchAtLogin = (paths, machine) => {
 var leaveOnlyThePathToTheEngine = (paths, machine) => {
   const receipt = codexAppCardsReceiptFrom(machine.readFile(paths.receiptPath));
   const launcher = machine.readFile(paths.launcherPath);
-  if (receipt === null || launcher === null) return;
-  const onlyThePathToTheEngine = codexPassThroughScript(receipt.engine);
+  if (launcher === null) return;
+  const engine = receipt?.engine ?? codexEngineBehindLauncher(launcher);
+  if (engine === null) return;
+  const onlyThePathToTheEngine = codexPassThroughScript(engine);
   if (launcher !== onlyThePathToTheEngine) machine.writeFile(paths.launcherPath, onlyThePathToTheEngine, PRIVATE_PROGRAM_MODE);
 };
 var turnCodexAppCardsOff = (paths, machine) => {

package/dist/{chunk-RH6KR6EH.js → chunk-I6OGFHJT.js}

@@ -1,9 +1,9 @@
 import {
   APPROVAL_SETTINGS_PATH
-} from "./chunk-JOWF4Y4P.js";
+} from "./chunk-DFZTZRKL.js";
 import {
   readMacAppAgentKey
-} from "./chunk-MHQB62K5.js";
+} from "./chunk-VRPDHJGB.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -13,13 +13,13 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-VYBH6D4X.js";
+} from "./chunk-YBE2KH2U.js";
 import {
   absoluteUrl
-} from "./chunk-L5YTS2BP.js";
+} from "./chunk-5HRXOANL.js";
 import {
   isValidApiKey
-} from "./chunk-LF3TLC7B.js";
+} from "./chunk-WACFIQYA.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";

package/dist/{chunk-XDCXTDHH.js → chunk-ILQARYXK.js}

@@ -3,24 +3,24 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-2LEH5IGX.js";
+} from "./chunk-DWV3LTUH.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-BL3WAGIK.js";
+} from "./chunk-DUACX6E3.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-VYBH6D4X.js";
+} from "./chunk-YBE2KH2U.js";
 import {
   getMachineId
-} from "./chunk-T6RIKJUO.js";
+} from "./chunk-SMMDQXI2.js";
 import {
   getBaseUrl
-} from "./chunk-CQ5JGRML.js";
+} from "./chunk-MWBFB7WA.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";

package/dist/{chunk-ZMPR436Z.js → chunk-J5HQNZXQ.js}

@@ -1,7 +1,7 @@
 import {
   SubscriptionRequiredError,
   callMcpTool
-} from "./chunk-P2546BBI.js";
+} from "./chunk-WCPN3GVW.js";
 import {
   CLIENT_REPORT_DISABLE_ENV,
   isDisabledByEnv
@@ -9,14 +9,14 @@ import {
 import {
   installNetworkDefaults,
   isNetworkFailure
-} from "./chunk-EK7SZJ4K.js";
+} from "./chunk-32MSOGMD.js";
 import {
   clientReportClaims
-} from "./chunk-OML4YFBN.js";
+} from "./chunk-57EOP757.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-CQ5JGRML.js";
+} from "./chunk-MWBFB7WA.js";
 import {
   ASK_AGENT_NAME_MAX,
   CLIENT_REPORT_PATH,
@@ -24,7 +24,7 @@ import {
   GATE_PERMISSION_MODE_MAX_LENGTH,
   degradedLine,
   truncateLine
-} from "./chunk-LF3TLC7B.js";
+} from "./chunk-WACFIQYA.js";
 
 // src/api.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-NELH25J7.js → chunk-JPTFFZWY.js}

@@ -4,19 +4,19 @@ import {
   outcomeOfFailedAsk,
   reportMachineDenial,
   storedWaitDeadline
-} from "./chunk-JPABKXK6.js";
+} from "./chunk-MVW5WS6F.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-7CLLWDCP.js";
+} from "./chunk-FLUKEZMH.js";
 import {
   isDeferAnswer,
   oncePerSession
-} from "./chunk-DHJSBK63.js";
+} from "./chunk-SM2DT5KP.js";
 import {
   activeHookSource,
   activeIdentity
-} from "./chunk-N77BH7H2.js";
+} from "./chunk-WNVQPGLH.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -40,10 +40,10 @@ import {
   reportEvent,
   scopePathFor,
   settleQuestionsForToolUse
-} from "./chunk-U2L42GVI.js";
+} from "./chunk-724266XT.js";
 import {
   repoKeyFor
-} from "./chunk-JBT3ZSJS.js";
+} from "./chunk-S3CQBNUU.js";
 import {
   askUser,
   cancelQuestion,
@@ -56,17 +56,17 @@ import {
   sendNotification,
   waitForQuestion,
   waitsForThePhone
-} from "./chunk-ZMPR436Z.js";
+} from "./chunk-J5HQNZXQ.js";
 import {
   getMachineId
-} from "./chunk-T6RIKJUO.js";
+} from "./chunk-SMMDQXI2.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-CQ5JGRML.js";
+} from "./chunk-MWBFB7WA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-MC4VY5LK.js";
+} from "./chunk-T4IAMIX4.js";
 import {
   AGENT_QUESTION_STRATEGY,
   AGENT_QUESTION_TOOL,
@@ -111,7 +111,7 @@ import {
   resolveGate,
   timeoutActionWithoutLocalPrompt,
   unansweredRefusalReason
-} from "./chunk-LF3TLC7B.js";
+} from "./chunk-WACFIQYA.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";

package/dist/{chunk-XSUJ2PQY.js → chunk-JSS5RG65.js}

@@ -1,13 +1,13 @@
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "./chunk-AQFEP65J.js";
+} from "./chunk-QENTGE75.js";
 import {
   configFilePath
-} from "./chunk-CQ5JGRML.js";
+} from "./chunk-MWBFB7WA.js";
 import {
   readSetupOutcomeProperties
-} from "./chunk-LF3TLC7B.js";
+} from "./chunk-WACFIQYA.js";
 
 // src/hooks-spec.ts
 var CURSOR_GATE_SCRIPT = "pushary-gate.mjs";

package/dist/{chunk-K23WMLPY.js → chunk-JTQHC3RV.js}

@@ -1,15 +1,15 @@
 import {
   compatibleConfigFile
-} from "./chunk-N77BH7H2.js";
+} from "./chunk-WNVQPGLH.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-Q7OXI6VS.js";
+} from "./chunk-74DKFWU2.js";
 import {
   AGENT_CHOICES
-} from "./chunk-BUXDR6US.js";
+} from "./chunk-ZMRO6ESW.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -18,10 +18,10 @@ import {
   guardedArgv,
   pusharyDir,
   vscodePluginDir
-} from "./chunk-OML4YFBN.js";
+} from "./chunk-57EOP757.js";
 import {
   readJsonSafe
-} from "./chunk-AQFEP65J.js";
+} from "./chunk-QENTGE75.js";
 import {
   HOOK_BUDGETS,
   HOOK_COMPATIBLE_PROFILES,
@@ -29,7 +29,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-LF3TLC7B.js";
+} from "./chunk-WACFIQYA.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-EPOD7QHT.js → chunk-KWAOOXSD.js}

@@ -1,18 +1,21 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-K23WMLPY.js";
+} from "./chunk-JTQHC3RV.js";
+import {
+  nativeClaudeInstallPath
+} from "./chunk-VUFHYMSP.js";
 import {
   grokHome
-} from "./chunk-N77BH7H2.js";
+} from "./chunk-WNVQPGLH.js";
 import {
   codexHomeFrom
-} from "./chunk-OML4YFBN.js";
+} from "./chunk-57EOP757.js";
 import {
   resolvePathBinary
-} from "./chunk-XUW2DRAQ.js";
+} from "./chunk-T6GEEMVC.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-LF3TLC7B.js";
+} from "./chunk-WACFIQYA.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";
@@ -502,11 +505,11 @@ var detectAgent = (probe, deps = defaultDeps) => {
   }
   return { kind: "not-found", checked };
 };
-var agentProbes = (home = homedir3()) => ({
+var agentProbes = (home = homedir3(), platform = process.platform) => ({
   claude_code: {
     binary: "claude",
     // The native installer puts it here, outside a default non-login PATH.
-    paths: [join3(home, ".local", "bin", "claude")],
+    paths: [nativeClaudeInstallPath(home, platform)],
     configMarkers: [join3(home, ".claude")]
   },
   codex: {
@@ -528,14 +531,14 @@ var agentProbes = (home = homedir3()) => ({
     // GUI editor. `cursor` on PATH only exists if the user ran "Install 'cursor'
     // command in PATH" from the command palette, which most never do.
     binary: "cursor",
-    paths: process.platform === "darwin" ? ["/Applications/Cursor.app"] : process.platform === "win32" ? [join3(process.env.LOCALAPPDATA ?? join3(home, "AppData", "Local"), "Programs", "cursor")] : ["/usr/share/cursor", join3(home, ".local", "share", "cursor")],
+    paths: platform === "darwin" ? ["/Applications/Cursor.app"] : platform === "win32" ? [join3(process.env.LOCALAPPDATA ?? join3(home, "AppData", "Local"), "Programs", "cursor")] : ["/usr/share/cursor", join3(home, ".local", "share", "cursor")],
     configMarkers: [join3(home, ".cursor")]
   },
   vscode: {
     // Like Cursor, a GUI editor: `code` on PATH only exists if the user ran
     // "Shell Command: Install 'code' command in PATH", which on macOS is opt-in.
     binary: "code",
-    paths: process.platform === "darwin" ? ["/Applications/Visual Studio Code.app"] : process.platform === "win32" ? [join3(process.env.LOCALAPPDATA ?? join3(home, "AppData", "Local"), "Programs", "Microsoft VS Code")] : ["/usr/share/code", join3(home, ".local", "share", "code")],
+    paths: platform === "darwin" ? ["/Applications/Visual Studio Code.app"] : platform === "win32" ? [join3(process.env.LOCALAPPDATA ?? join3(home, "AppData", "Local"), "Programs", "Microsoft VS Code")] : ["/usr/share/code", join3(home, ".local", "share", "code")],
     // The settings directory rather than ~/.vscode, because the settings
     // directory is what this installer actually writes to. Insiders counts:
     // someone running only Insiders still has VS Code.

package/dist/{chunk-S6RNS4UL.js → chunk-L66VPBS5.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-MC4VY5LK.js";
+} from "./chunk-T4IAMIX4.js";
 import {
   getPackageVersion
 } from "./chunk-QTOLNRET.js";

package/dist/{chunk-46TC24ET.js → chunk-LTCNAIY2.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-P2546BBI.js";
+} from "./chunk-WCPN3GVW.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-MC4VY5LK.js";
+} from "./chunk-T4IAMIX4.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-GCN73COS.js → chunk-LW4ZEC3A.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-CQ5JGRML.js";
+} from "./chunk-MWBFB7WA.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-UVT6B6XN.js → chunk-M6DTXZQK.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-5463UUO2.js";
+} from "./chunk-FXW3FW4A.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-GCN73COS.js";
+} from "./chunk-LW4ZEC3A.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-FI73DGNB.js → chunk-M7ZXKMVX.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-CQ5JGRML.js";
+} from "./chunk-MWBFB7WA.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-JPABKXK6.js → chunk-MVW5WS6F.js}

@@ -1,7 +1,7 @@
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "./chunk-DHJSBK63.js";
+} from "./chunk-SM2DT5KP.js";
 import {
   AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
@@ -10,24 +10,24 @@ import {
   permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-U2L42GVI.js";
+} from "./chunk-724266XT.js";
 import {
   askUser,
   isDecisionStopped,
   waitForQuestion
-} from "./chunk-ZMPR436Z.js";
+} from "./chunk-J5HQNZXQ.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-P2546BBI.js";
+} from "./chunk-WCPN3GVW.js";
 import {
   getMachineId
-} from "./chunk-T6RIKJUO.js";
+} from "./chunk-SMMDQXI2.js";
 import {
   machineDecisionFor,
   parseAgentQuestionAnswers,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-LF3TLC7B.js";
+} from "./chunk-WACFIQYA.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-LD4MWJMD.js → chunk-MW3DD3S5.js}

@@ -4,30 +4,30 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "./chunk-UVT6B6XN.js";
+} from "./chunk-M6DTXZQK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership
-} from "./chunk-56ZTIY6D.js";
+} from "./chunk-AKFTQT7P.js";
 import {
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
 import {
   repoKeyFor
-} from "./chunk-JBT3ZSJS.js";
+} from "./chunk-S3CQBNUU.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "./chunk-ZMPR436Z.js";
+} from "./chunk-J5HQNZXQ.js";
 import {
   callMcpTool,
   isRetryable
-} from "./chunk-P2546BBI.js";
+} from "./chunk-WCPN3GVW.js";
 import {
   AGENT_QUESTION_DESCRIPTION_MAX,
   AGENT_QUESTION_HEADER_MAX,
@@ -48,7 +48,7 @@ import {
   parseCodexQuestions,
   planElicitationAsk,
   readElicitationFields
-} from "./chunk-LF3TLC7B.js";
+} from "./chunk-WACFIQYA.js";
 
 // src/codex-question-owner.ts
 import { createHash } from "crypto";

package/dist/{chunk-CQ5JGRML.js → chunk-MWBFB7WA.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-MC4VY5LK.js";
+} from "./chunk-T4IAMIX4.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-63IQRYVP.js → chunk-OCYOOGXW.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-N77BH7H2.js";
+} from "./chunk-WNVQPGLH.js";
 import {
   pusharyHookExecutable
-} from "./chunk-Q7OXI6VS.js";
+} from "./chunk-74DKFWU2.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-OML4YFBN.js";
+} from "./chunk-57EOP757.js";
 import {
   isRecord
-} from "./chunk-LF3TLC7B.js";
+} from "./chunk-WACFIQYA.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-ONCWYACA.js → chunk-OX5EYBOC.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-VYBH6D4X.js";
+} from "./chunk-YBE2KH2U.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-ALZZVC3E.js → chunk-PI2WWZQQ.js}

@@ -1,10 +1,10 @@
 import {
   pusharyDir
-} from "./chunk-OML4YFBN.js";
+} from "./chunk-57EOP757.js";
 import {
   readJsonSafe,
   writeFileAtomic
-} from "./chunk-AQFEP65J.js";
+} from "./chunk-QENTGE75.js";
 import {
   DECLINED_AGENTS_FILE,
   DISCONNECT_AGENT_IDS,
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-LF3TLC7B.js";
+} from "./chunk-WACFIQYA.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-AQFEP65J.js → chunk-QENTGE75.js}

@@ -1,5 +1,5 @@
 // src/cli/fsx.ts
-import { copyFileSync, lstatSync, realpathSync, existsSync, fsyncSync, mkdirSync, openSync, closeSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";
+import { copyFileSync, lstatSync, realpathSync, existsSync, fchmodSync, fsyncSync, mkdirSync, openSync, closeSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "fs";
 import { dirname, join } from "path";
 var readJsonSafe = (filePath) => {
   let raw;
@@ -18,6 +18,13 @@ var readJsonSafe = (filePath) => {
     return { kind: "unparseable", error: err, raw };
   }
 };
+var isFile = (path) => {
+  try {
+    return statSync(path).isFile();
+  } catch {
+    return false;
+  }
+};
 var readFileOrMissing = (path) => {
   try {
     return readFileSync(path, "utf-8");
@@ -41,6 +48,7 @@ var writeFileAtomic = (filePath, contents, mode, encoding = "utf-8") => {
     writeFileSync(temp, contents, mode === void 0 ? encoding : { encoding, mode });
     const handle = openSync(temp, "r+");
     try {
+      if (mode !== void 0) fchmodSync(handle, mode);
       fsyncSync(handle);
     } finally {
       closeSync(handle);
@@ -69,6 +77,7 @@ var writeJsonAtomicDurable = (filePath, data, mode) => {
 
 export {
   readJsonSafe,
+  isFile,
   readFileOrMissing,
   backupFile,
   writeFileAtomic,

package/dist/{chunk-DWQYCOPI.js → chunk-QW3FRUFB.js}

@@ -1,6 +1,6 @@
 import {
   writeJsonAtomicDurable
-} from "./chunk-AQFEP65J.js";
+} from "./chunk-QENTGE75.js";
 
 // src/transcript-recipient-pin.ts
 import { existsSync, mkdirSync, readFileSync, rmSync } from "fs";

package/dist/{chunk-QKU46TK5.js → chunk-QWUWQBIJ.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-OML4YFBN.js";
+} from "./chunk-57EOP757.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "./chunk-AQFEP65J.js";
+} from "./chunk-QENTGE75.js";
 import {
   CLI_PACKAGE_NAMES,
   POSIX_GLOBAL_ROOT_SEGMENTS,
@@ -17,7 +17,7 @@ import {
 } from "./chunk-QTOLNRET.js";
 import {
   isAutoUpdateResult
-} from "./chunk-LF3TLC7B.js";
+} from "./chunk-WACFIQYA.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";