pushary 1.9.75 → 1.9.77

package/dist/{chunk-UU3CDLIX.js → chunk-3UYMJZXV.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-32JJ5KV3.js";
+} from "./chunk-GV7FB5L3.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-UIS332AZ.js";
+} from "./chunk-2OWG667E.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-HXV2SY2V.js → chunk-4ZXFOT44.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-LIDUPDEY.js";
+} from "./chunk-DYDA77FS.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-UIS332AZ.js";
+} from "./chunk-2OWG667E.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-L2FQBHIR.js → chunk-6WOG2SCC.js}

@@ -19,7 +19,7 @@ var credentialSchema = external_exports.object({
   baseURL: external_exports.string().url(),
   keyScope: external_exports.literal("agent")
 });
-var consentSchema = credentialSchema.pick({ siteID: true, machineID: true, baseURL: true }).extend({ enabled: external_exports.literal(true), grantedAtMs: external_exports.number().int().positive() });
+var consentSchema = credentialSchema.pick({ siteID: true, machineID: true, baseURL: true }).extend({ enabled: external_exports.literal(true), grantedAtMs: external_exports.number().int().positive(), includesEarlierConversation: external_exports.boolean().optional() });
 var readPositionSchema = external_exports.object({
   identity: external_exports.string().nullable(),
   offset: external_exports.number().int().nonnegative(),
@@ -58,7 +58,7 @@ var nativeTranscriptGrant = (home = homedir()) => {
     if (!account) return null;
     const consent = consentSchema.parse(ownerDocument(nativeConsentFile(home)));
     if (account.siteID !== consent.siteID || account.machineID !== consent.machineID || account.baseURL !== consent.baseURL) return null;
-    return { account, grantedAtMs: consent.grantedAtMs };
+    return { account, grantedAtMs: consent.grantedAtMs, includesEarlierConversation: consent.includesEarlierConversation === true };
   } catch {
     return null;
   }
@@ -70,5 +70,6 @@ var macAppHistoryDecision = (home = homedir()) => {
 
 export {
   nativeBridgeAccount,
+  nativeTranscriptGrant,
   macAppHistoryDecision
 };

package/dist/{chunk-6BFLDHPM.js → chunk-6XOEYBWJ.js}

@@ -1,12 +1,12 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-SHW6KK2K.js";
+} from "./chunk-UU2CQFSJ.js";
 import {
   retryAgentCommand
-} from "./chunk-7O54GE5C.js";
+} from "./chunk-QBCV27CM.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-UIS332AZ.js";
+} from "./chunk-2OWG667E.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-SOHJ37NA.js → chunk-7AQEWD2J.js}

@@ -1,9 +1,9 @@
 import {
   readExistingMachineId
-} from "./chunk-BGEUAJYL.js";
+} from "./chunk-LD5LSJ2B.js";
 import {
   getBaseUrl
-} from "./chunk-53D6FFVE.js";
+} from "./chunk-IHT33GZN.js";
 import {
   NetworkError
 } from "./chunk-PPY5N2E6.js";
@@ -13,7 +13,7 @@ import {
 import {
   clientContextHeaders,
   redactSecretsFromContent
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-INBG473K.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-VGHWK5Z2.js → chunk-7CU7OGWP.js}

@@ -5,19 +5,19 @@ import {
   hermesAppWiringRecord,
   hermesConfigReceipt,
   hermesSetupReceipt
-} from "./chunk-2J4IVUEA.js";
+} from "./chunk-PZXQUV3P.js";
 import {
   readJsonSafe,
   resolvePathBinary,
   writeJsonAtomic
-} from "./chunk-AUDYAVNM.js";
+} from "./chunk-ABAWD6QM.js";
 import {
   isNewerVersion,
   isReleaseVersion
 } from "./chunk-QTOLNRET.js";
 import {
   isRecord
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-INBG473K.js";
 
 // src/hermes/plugin-payload.ts
 import { createHash } from "crypto";
@@ -30,7 +30,7 @@ import os
 import threading
 from pathlib import Path
 
-from . import api, approval, host, identity, installation, schemas, tools
+from . import api, approval, history, host, identity, installation, schemas, tools
 
 logger = logging.getLogger(__name__)
 
@@ -332,6 +332,7 @@ def _on_post_tool_call(tool_name, args, result, duration_ms=0, status=None, **kw
 
 def _on_session_start(session_id=None, **kwargs):
     identity.remember_session(session_id)
+    history.start_history(session_id, kwargs.get("parent_session_id"))
     _session_totals.update(tools=0, errors=0)
     _last_turn.update(completed=False, interrupted=False)
     _report_session_event("session_start", session_id, can_drain=True)
@@ -358,6 +359,7 @@ def _report_plugin_active_once(session_id):
 
 def _on_pre_llm_call(session_id=None, **kwargs):
     identity.remember_session(session_id)
+    history.start_history(session_id, kwargs.get("parent_session_id"))
     if not api.is_configured() or not identity.session_id():
         return None
     result = api.agent_event("user_prompt", identity.session_id(), can_drain=True)
@@ -402,6 +404,7 @@ def _on_session_end(session_id=None, completed=False, interrupted=False, failed=
 
 
 def _on_session_finalize(session_id=None, **kwargs):
+    history.stop_history(session_id or identity.session_id())
     _report_session_event("session_closed", session_id or identity.session_id())
     tool_count = _session_totals["tools"]
     error_count = _session_totals["errors"]
@@ -932,6 +935,261 @@ def get_end_user_decision(decision_id, wait_seconds=45):
     return _rest_call("GET", f"/decisions/{seg}", params={"wait": wait_seconds})
 ` },
   { path: "approval.py", contents: 'import time\n\nfrom . import api, identity\n\nHERMES_SHELL_TOOL = "terminal"\nDECISION_LINE_MAX = 500\nACTION_BODY_MAX = 4000\n\nPOLL_CEILING_SECONDS = 50.0\n\nCHOICE_LABELS = (\n    ("once", "Allow once"),\n    ("session", "Allow for this session"),\n    ("always", "Always allow"),\n    ("deny", "Deny"),\n)\n\n\nclass TransportUnavailable(Exception):\n    pass\n\n\nQUESTION_COMMAND_MAX = 160\n\nPLUGIN_RULE_MARKER = "(plugin approval rule)"\n\n\ndef _offered(allowed):\n    return [pair for pair in CHOICE_LABELS if pair[0] in set(allowed or ())]\n\n\ndef _command_head(command):\n    return " ".join(str(command or "").split()[:2])[:80]\n\n\ndef _command_summary(command):\n    collapsed = " ".join(str(command or "").split())\n    if len(collapsed) <= QUESTION_COMMAND_MAX:\n        return collapsed\n    return collapsed[:QUESTION_COMMAND_MAX - 1] + "\u2026"\n\n\ndef _choice_from_answer(value, offered, uses_select):\n    answer = str(value or "").strip()\n    if uses_select:\n        for choice, label in offered:\n            if answer.lower() == label.lower():\n                return choice\n        return "deny"\n    return "once" if api.is_affirmative(answer) else "deny"\n\n\ndef _subject(request):\n    """What to put in the question.\n\n    A dangerous-command approval carries the real command. A plugin rule\n    escalated from pre_tool_call carries a synthetic display label instead, and\n    the plugin\'s own message is the part worth reading, so use that.\n    """\n    command = str(request.command or "")\n    if PLUGIN_RULE_MARKER in command:\n        lines = str(request.description or "").strip().splitlines()\n        if lines and lines[0].strip():\n            return _command_summary(lines[0])\n    return _command_summary(command)\n\n\ndef _open_question(request, offered, uses_select):\n    command = str(request.command or "")\n    return api.ask_user(\n        question=f"Allow Hermes to run `{_subject(request)}`?",\n        question_type="select" if uses_select else "confirm",\n        options=[label for _, label in offered] if uses_select else None,\n        context=str(request.description or "")[:500] or None,\n        agent_name=identity.agent_name(),\n        session_id=identity.session_id(),\n        machine_id=identity.machine_id(),\n        tool_name=HERMES_SHELL_TOOL,\n        tool_target=_command_head(command),\n        action=command[:DECISION_LINE_MAX] or None,\n        action_body=command[:ACTION_BODY_MAX] or None,\n        blocker=(\n            f"Hermes flagged this command as {request.pattern_key}"[:DECISION_LINE_MAX]\n            if request.pattern_key\n            else None\n        ),\n        wait=False,\n    )\n\n\ndef _stopped(result):\n    return result.get("handoffAction") == "stop" or result.get("status") in ("cancelled", "unavailable", "stopped")\n\n\ndef _withdraw(correlation_id):\n    try:\n        cancelled = api.cancel_question(correlation_id)\n        if _stopped(cancelled) or cancelled.get("error"):\n            return {"handoffAction": "stop"}\n        if cancelled.get("cancelled") is True:\n            return {}\n        answer = api.wait_for_answer(correlation_id, 1000)\n        if answer.get("answered") or answer.get("status") in ("expired", "missing"):\n            return answer\n    except Exception:\n        pass\n    return {"handoffAction": "stop"}\n\n\ndef present(request):\n    offered = _offered(request.allowed_choices)\n    if not offered:\n        return request.respond("deny")\n    uses_select = [choice for choice, _ in offered] != ["once", "deny"]\n    # Reserve time for withdrawal before the host discards a late decision.\n    started_at = time.monotonic()\n    deadline = started_at + max(float(request.timeout_seconds or 0) - 10, 0.0)\n    created = _open_question(request, offered, uses_select)\n    if created.get("answered"):\n        return request.respond(_choice_from_answer(created.get("value"), offered, uses_select))\n    if _stopped(created):\n        return request.respond("deny")\n    correlation_id = created.get("correlationId")\n    if not correlation_id:\n        raise TransportUnavailable("Pushary did not create an approval")\n\n    policy_deadline = None\n    window_ms = created.get("policyTimeoutMs")\n    if created.get("deliveryMode") == "push_first" and isinstance(window_ms, (int, float)) and window_ms >= 0:\n        policy_deadline = started_at + window_ms / 1000\n        deadline = min(deadline, policy_deadline)\n    handoff = created.get("noDevices") or created.get("suppressed") or created.get("status") in ("terminal", "notified")\n    answer = created\n    try:\n        while not handoff and time.monotonic() < deadline:\n            remaining = deadline - time.monotonic()\n            answer = api.wait_for_answer(correlation_id, int(min(POLL_CEILING_SECONDS, max(1.0, remaining)) * 1000))\n            if answer.get("answered"):\n                return request.respond(_choice_from_answer(answer.get("value"), offered, uses_select))\n            if _stopped(answer) or answer.get("error") or answer.get("status") in ("expired", "missing"):\n                break\n            # Some hosts/proxies return pending immediately instead of long-polling.\n            time.sleep(min(0.1, max(0, deadline - time.monotonic())))\n    except Exception:\n        answer = {"handoffAction": "stop"}\n\n    late = _withdraw(correlation_id)\n    if _stopped(answer) or _stopped(late):\n        return request.respond("deny")\n    if late.get("answered"):\n        return request.respond(_choice_from_answer(late.get("value"), offered, uses_select))\n    if handoff or (policy_deadline is not None and time.monotonic() >= policy_deadline):\n        # Only a fenced question may reach Hermes\'s configured builtin fallback.\n        raise TransportUnavailable("Approval handed back to Hermes")\n    return request.respond("deny")\n' },
+  { path: "history.py", contents: `from __future__ import annotations
+
+import hashlib
+import contextvars
+import json
+import logging
+import math
+import os
+import re
+import shutil
+import subprocess
+import tempfile
+import threading
+import time
+from datetime import datetime, timezone
+from pathlib import Path
+
+from . import api
+
+logger = logging.getLogger(__name__)
+MAX_MESSAGES = 5000
+MAX_SOURCE_BYTES = 20_000_000
+POLL_SECONDS = 5
+_workers: dict[tuple[str, str], tuple[threading.Event, threading.Thread]] = {}
+_lock = threading.Lock()
+
+
+def _text_blocks(content: object) -> list[dict[str, object]]:
+    if isinstance(content, str):
+        return [{"type": "text", "text": content}]
+    if not isinstance(content, list):
+        return []
+    return [{"type": "text", "text": block["text"]} for block in content
+            if isinstance(block, dict) and block.get("type") in ("text", "input_text", "output_text")
+            and isinstance(block.get("text"), str)]
+
+
+def _tool_blocks(calls: object) -> list[dict[str, object]]:
+    blocks = []
+    if not isinstance(calls, list):
+        return blocks
+    for call in calls:
+        if not isinstance(call, dict) or not isinstance(call.get("id"), str):
+            continue
+        function = call.get("function")
+        if not isinstance(function, dict) or not isinstance(function.get("name"), str):
+            continue
+        arguments = function.get("arguments", {})
+        if isinstance(arguments, str):
+            arguments = json.loads(arguments)
+        if not isinstance(arguments, dict):
+            raise ValueError("Invalid Hermes tool arguments")
+        blocks.append({"type": "tool_use", "id": call["id"], "name": function["name"], "input": arguments})
+    return blocks
+
+
+def normalize_messages(rows: list[object]) -> list[dict[str, object]]:
+    messages = []
+    for row in rows:
+        if not isinstance(row, dict):
+            raise ValueError("Invalid Hermes message")
+        if not (row.get("active") or row.get("compacted")) or row.get("display_kind") in ("hidden", "model_only"):
+            continue
+        role = row.get("role")
+        if role not in ("user", "assistant", "tool") or row.get("_compressed_summary"):
+            continue
+        identity = row.get("id")
+        stamp = row.get("timestamp")
+        if not isinstance(identity, int) or isinstance(identity, bool) or identity <= 0:
+            raise ValueError("Invalid Hermes message identity")
+        if not isinstance(stamp, (int, float)) or not math.isfinite(stamp) or stamp <= 0:
+            raise ValueError("Invalid Hermes message timestamp")
+        content = _text_blocks(row.get("content"))
+        if role == "assistant":
+            content.extend(_tool_blocks(row.get("tool_calls")))
+        elif role == "tool":
+            call_id = row.get("tool_call_id")
+            if not isinstance(call_id, str) or not call_id:
+                continue
+            content = [{"type": "tool_result", "tool_use_id": call_id, "content": content}]
+        messages.append({
+            "id": f"hermes:{identity}", "role": "user" if role == "tool" else role,
+            "timestamp": datetime.fromtimestamp(stamp, timezone.utc).isoformat().replace("+00:00", "Z"),
+            "content": content,
+        })
+    return messages
+
+
+def read_display_history(database_path: Path, session_id: str) -> list[dict[str, object]]:
+    from hermes_state import SessionDB
+
+    database = SessionDB(db_path=database_path, read_only=True)
+    try:
+        connection = database._conn
+        deadline = time.monotonic() + 2
+        connection.set_progress_handler(lambda: int(time.monotonic() > deadline), 1000)
+        connection.execute("BEGIN")
+        if database.get_session(session_id) is None:
+            raise ValueError("Hermes session is not in this profile")
+        lineage = database._resume_lineage_ids(session_id)
+        if not lineage or len(lineage) > 100:
+            raise ValueError("Unsupported Hermes compression lineage")
+        columns = [row[1] for row in connection.execute("PRAGMA table_info(messages)")]
+        required = {"id", "session_id", "role", "content", "timestamp", "active", "compacted", "display_kind", "message_uid"}
+        if not required.issubset(columns):
+            raise ValueError("Unsupported Hermes history schema")
+        identifiers = ['"' + column.replace('"', '""') + '"' for column in columns]
+        row_bytes = " + ".join(f"COALESCE(length(CAST({column} AS BLOB)), 0)" for column in identifiers)
+        placeholders = ",".join("?" for _ in lineage)
+        count, size = connection.execute(
+            f"SELECT COUNT(*), SUM({row_bytes}) FROM messages WHERE session_id IN ({placeholders})", lineage
+        ).fetchone()
+        if count > MAX_MESSAGES or (size or 0) > MAX_SOURCE_BYTES:
+            raise ValueError("Hermes history exceeds the bounded reader limit")
+        rows = database.get_messages(session_id, include_compacted=True, include_ancestors=True, limit=MAX_MESSAGES)
+        return normalize_messages(rows)
+    finally:
+        database.close()
+
+
+def write_snapshot(path: Path, session_id: str, messages: list[dict[str, object]], error: str | None = None, completed: bool = False) -> None:
+    value = {"version": 1, "sessionId": session_id, "updatedAtMs": int(time.time() * 1000), "messages": messages, "completed": completed}
+    if error:
+        value["error"] = error
+    encoded = json.dumps(value, ensure_ascii=True, allow_nan=False).encode("utf-8")
+    if len(encoded) > MAX_SOURCE_BYTES:
+        raise ValueError("Hermes history export exceeds its size limit")
+    path.parent.mkdir(mode=0o700, parents=True, exist_ok=True)
+    descriptor, temporary = tempfile.mkstemp(dir=path.parent, prefix=".history-")
+    try:
+        with os.fdopen(descriptor, "wb") as handle:
+            handle.write(encoded)
+            handle.flush()
+            os.fsync(handle.fileno())
+        os.replace(temporary, path)
+    finally:
+        Path(temporary).unlink(missing_ok=True)
+
+
+def _registration_command(key: str) -> list[str] | None:
+    root = Path.home() / ".pushary"
+    try:
+        if (root / "native-transcript-consent.json").exists():
+            bridge = (root / "bin" / "pushary-bridge").resolve(strict=True)
+            helper = str(bridge.parent / "pushary-native-transcripts")
+            command = [helper, "register", "hermes"]
+        else:
+            helper = shutil.which("pushary-transcript-register")
+            if helper is None:
+                return None
+            command = [helper, "hermes"]
+        result = subprocess.run([helper, "authorize-export"],
+                                input=json.dumps({"apiKey": key, "baseUrl": api.BASE_URL}), text=True,
+                                stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, timeout=5, check=False,
+                                env={**os.environ, "PUSHARY_API_KEY": key, "PUSHARY_BASE_URL": api.BASE_URL})
+        if result.returncode != 0:
+            return None
+        authorization = json.loads(result.stdout)
+        if not isinstance(authorization, dict) or type(authorization.get("version")) is not int or authorization.get("version") != 1 or authorization.get("authorized") is not True:
+            return None
+        return command
+    except (OSError, ValueError, subprocess.TimeoutExpired):
+        return None
+
+
+def _export_loop(database_path: Path, session_id: str, key: str, command: list[str], stop: threading.Event) -> None:
+    binding = hashlib.sha256((api.BASE_URL.rstrip("/") + "\\0" + key + "\\0" + str(database_path)).encode()).hexdigest()
+    path = Path.home() / ".pushary" / "hermes-history" / binding / f"{session_id}.json"
+    next_registration = 0
+    warned = False
+    revoked = False
+    try:
+        while True:
+            if api._get_api_key() != key or _registration_command(key) != command:
+                revoked = True
+                break
+            ending = stop.is_set()
+            try:
+                messages = read_display_history(database_path, session_id)
+                write_snapshot(path, session_id, messages, completed=ending)
+                warned = False
+            except Exception:
+                if not warned:
+                    logger.warning("[pushary] Hermes history source is unavailable; existing phone history is preserved")
+                warned = True
+                write_snapshot(path, session_id, [], error="source_unavailable")
+            if ending or time.monotonic() >= next_registration:
+                payload = {"session_id": session_id, "cwd": str(database_path.parent), "transcript_path": str(path),
+                           "hook_event_name": "SessionEnd" if ending else "SessionStart"}
+                environment = {**os.environ, "PUSHARY_API_KEY": key, "PUSHARY_BASE_URL": api.BASE_URL}
+                result = subprocess.run(command, input=json.dumps(payload), text=True, env=environment,
+                                        stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL, timeout=5, check=False)
+                if result.returncode != 0:
+                    logger.warning("[pushary] Hermes history reader could not register")
+                next_registration = time.monotonic() + 60
+            if ending:
+                break
+            stop.wait(POLL_SECONDS)
+    except Exception:
+        logger.warning("[pushary] Hermes history reader stopped; reopen the session to retry")
+    finally:
+        if revoked:
+            path.unlink(missing_ok=True)
+        with _lock:
+            _workers.pop((str(database_path), session_id), None)
+
+
+def start_history(session_id: object, parent_session_id: object = None) -> None:
+    if parent_session_id or not isinstance(session_id, str) or not re.fullmatch(r"[A-Za-z0-9_-]{1,128}", session_id):
+        return
+    try:
+        from hermes_constants import get_hermes_home
+
+        key = api._get_api_key()
+        command = _registration_command(key)
+        if command is None:
+            return
+        database_path = (get_hermes_home() / "state.db").resolve()
+        identity = (str(database_path), session_id)
+        with _lock:
+            if identity in _workers or len(_workers) >= 32:
+                return
+            stop = threading.Event()
+        context = contextvars.copy_context()
+        thread = threading.Thread(target=context.run, args=(_export_loop, database_path, session_id, key, command, stop),
+                                  name="pushary-history", daemon=True)
+        with _lock:
+            if identity in _workers or len(_workers) >= 32:
+                return
+            _workers[identity] = (stop, thread)
+        try:
+            thread.start()
+        except Exception:
+            with _lock:
+                _workers.pop(identity, None)
+            raise
+    except Exception:
+        logger.warning("[pushary] Hermes history reader could not start")
+
+
+def stop_history(session_id: str) -> None:
+    try:
+        from hermes_constants import get_hermes_home
+        database_path = str((get_hermes_home() / "state.db").resolve())
+    except Exception:
+        return
+    with _lock:
+        worker = _workers.get((database_path, session_id))
+    if worker:
+        stop, thread = worker
+        stop.set()
+        thread.join(timeout=8)
+        if thread.is_alive():
+            logger.warning("[pushary] Hermes final history export is still pending")
+` },
   { path: "host.py", contents: 'import os\n\nTRANSPORT_NAME = "pushary"\n\nHOOK_TIMEOUT_DEFAULT_SECONDS = 30.0\nHOOK_TIMEOUT_MAX_SECONDS = 600.0\n\nGATE_HEADROOM_SECONDS = 5.0\nGATE_MIN_SECONDS = 5.0\nGATE_MAX_SECONDS = 55.0\n\n# The last Hermes that runs a pre_tool_call callback to completion. Anything\n# after this abandons one that outlives plugins.hook_callback_timeout.\nUNBOUNDED_THROUGH_VERSION = (0, 20, 5)\n\n\ndef _config():\n    try:\n        from hermes_cli.config import load_config_readonly\n\n        loaded = load_config_readonly()\n    except Exception:\n        return {}\n    return loaded if isinstance(loaded, dict) else {}\n\n\ndef _section(node, *path):\n    for key in path:\n        node = node.get(key) if isinstance(node, dict) else None\n        if node is None:\n            return {}\n    return node if isinstance(node, dict) else {}\n\n\ndef profile_secret(name):\n    try:\n        from agent.secret_scope import get_secret\n    except Exception:\n        return os.environ.get(name) or None\n    try:\n        return get_secret(name) or None\n    except Exception:\n        return None\n\n\ndef hermes_version_label():\n    try:\n        from importlib.metadata import version\n\n        return version("hermes-cli")\n    except Exception:\n        try:\n            import hermes_cli\n\n            label = getattr(hermes_cli, "__version__", None)\n        except Exception:\n            return None\n    return str(label) if label else None\n\n\ndef _hermes_version():\n    """This Hermes as a comparable tuple, or None when it will not say."""\n    raw = hermes_version_label()\n    if not raw:\n        return None\n    parts = []\n    for piece in str(raw).split(".")[:3]:\n        digits = ""\n        for char in piece:\n            if not char.isdigit():\n                break\n            digits += char\n        if not digits:\n            return None\n        parts.append(int(digits))\n    while len(parts) < 3:\n        parts.append(0)\n    return tuple(parts)\n\n\ndef bounds_pre_tool_call():\n    """Whether this Hermes abandons a slow pre_tool_call callback.\n\n    The timeout was added after 0.20.5, which runs plugin hooks to completion.\n    Clamping the wait on a host that would never have cut it off just shortens\n    the window the user has to answer, for nothing.\n\n    Unreadable means assume bounded. A wait that is shorter than it had to be\n    costs the user seconds; a wait longer than the host allows costs them the\n    answer they already gave.\n\n    That rule is why the private symbol is not asked on its own. `hasattr` on\n    `_HOOK_TIMEOUT_FAIL_CLOSED_HOOKS` cannot tell "this host runs hooks to\n    completion" apart from "the private name moved", and those two answers want\n    opposite behaviour: the first earns the full window, the second spends 55\n    seconds against a budget of 30 and loses an answer the user already gave.\n    A rename is the likelier of the two, because a private name is the one thing\n    a host is free to change. So the symbol is taken as proof of bounded, and\n    only a version this side of the timeout landing is taken as proof of the\n    other. Anything unreadable falls to bounded.\n    """\n    try:\n        from hermes_cli import plugins\n    except Exception:\n        return True\n    if hasattr(plugins, "_HOOK_TIMEOUT_FAIL_CLOSED_HOOKS"):\n        return True\n    version = _hermes_version()\n    if version is None:\n        return True\n    return version > UNBOUNDED_THROUGH_VERSION\n\n\ndef hook_callback_timeout_seconds():\n    raw = _section(_config(), "plugins").get("hook_callback_timeout")\n    if raw is None:\n        return HOOK_TIMEOUT_DEFAULT_SECONDS\n    try:\n        timeout = float(raw)\n    except (TypeError, ValueError):\n        return HOOK_TIMEOUT_DEFAULT_SECONDS\n    if timeout < 0:\n        return HOOK_TIMEOUT_DEFAULT_SECONDS\n    return min(timeout, HOOK_TIMEOUT_MAX_SECONDS)\n\n\ndef gate_budget_seconds(requested_seconds):\n    if not bounds_pre_tool_call():\n        return max(1.0, min(float(requested_seconds), GATE_MAX_SECONDS))\n    timeout = hook_callback_timeout_seconds()\n    ceiling = (\n        GATE_MAX_SECONDS\n        if timeout <= 0\n        else max(GATE_MIN_SECONDS, timeout - GATE_HEADROOM_SECONDS)\n    )\n    return max(1.0, min(float(requested_seconds), ceiling, GATE_MAX_SECONDS))\n\n\ndef pushary_is_selected_transport():\n    selected = _section(_config(), "security", "approval").get("transport")\n    return str(selected or "").strip().lower() == TRANSPORT_NAME\n' },
   { path: "identity.py", contents: 'import hashlib\nimport os\nimport re\nimport socket\nfrom pathlib import Path\n\nDEFAULT_AGENT_NAME = "Hermes"\nMAX_ID_LENGTH = 128\nSHARED_MACHINE_ID_FILE = Path.home() / ".pushary" / "machine-id"\nSHARED_MACHINE_ID_PATTERN = re.compile(r"^[A-Za-z0-9-]{1,128}$")\n\n_session_id = None\n\n\ndef agent_name():\n    return os.environ.get("PUSHARY_AGENT_NAME", DEFAULT_AGENT_NAME)\n\n\ndef labelled_agent_name(requested):\n    project = str(requested or "").partition(" - ")[2].strip()\n    return f"{agent_name()} - {project}" if project else agent_name()\n\n\ndef shared_machine_id(path=None):\n    try:\n        value = (path or SHARED_MACHINE_ID_FILE).read_text(encoding="utf-8").strip()\n    except OSError:\n        return None\n    return value if SHARED_MACHINE_ID_PATTERN.match(value) else None\n\n\ndef hostname_machine_id():\n    try:\n        host = socket.gethostname()\n    except Exception:\n        return None\n    if not host:\n        return None\n    return hashlib.sha256(host.encode("utf-8")).hexdigest()[:8]\n\n\ndef machine_id():\n    return shared_machine_id() or hostname_machine_id()\n\n\ndef remember_session(value):\n    global _session_id\n    if value:\n        _session_id = str(value)[:MAX_ID_LENGTH]\n\n\ndef forget_session():\n    global _session_id\n    _session_id = None\n\n\ndef session_id():\n    return _session_id\n' },
   { path: "installation.py", contents: `import json
@@ -1063,7 +1321,7 @@ def record_plugin_load(approval_transport_registered, home=None, pid=None, now=N
         logger.debug("[pushary] could not record the plugin load: %s", exc)
         return None
 ` },
-  { path: "plugin.yaml", contents: "name: pushary\nversion: 0.8.1\ndescription: Push notifications and human-in-the-loop for Hermes Agent via Pushary\nauthor: RalphNex OU\nrequires_env:\n  - name: PUSHARY_API_KEY\n    description: Your Pushary API key\n    url: https://pushary.com/sign-up?from=hermes\n    secret: true\nprovides_tools:\n  - pushary_remind\n  - pushary_notify\n  - pushary_ask\n  - pushary_wait\n  - pushary_cancel\n  - pushary_propose_scope\n  - pushary_enroll\n  - pushary_ask_end_user\nprovides_hooks:\n  - pre_llm_call\n  - pre_tool_call\n  - post_tool_call\n  - on_session_start\n  - on_session_end\n  - on_session_finalize\nprovides_approval_transports:\n  - pushary\n" },
+  { path: "plugin.yaml", contents: "name: pushary\nversion: 0.9.0\ndescription: Push notifications and human-in-the-loop for Hermes Agent via Pushary\nauthor: RalphNex OU\nrequires_env:\n  - name: PUSHARY_API_KEY\n    description: Your Pushary API key\n    url: https://pushary.com/sign-up?from=hermes\n    secret: true\nprovides_tools:\n  - pushary_remind\n  - pushary_notify\n  - pushary_ask\n  - pushary_wait\n  - pushary_cancel\n  - pushary_propose_scope\n  - pushary_enroll\n  - pushary_ask_end_user\nprovides_hooks:\n  - pre_llm_call\n  - pre_tool_call\n  - post_tool_call\n  - on_session_start\n  - on_session_end\n  - on_session_finalize\nprovides_approval_transports:\n  - pushary\n" },
   { path: "schemas.py", contents: `PUSHARY_REMIND = {
     "name": "pushary_remind",
     "description": "Schedule a one-time personal reminder on Pushary, even after Hermes exits. Use body plus in_minutes or at (ISO timestamp with explicit UTC offset, within 30 days). Never guess the user's timezone. Confirm the returned time. No arguments lists pending reminders; cancel_reminder_id cancels a scheduled one. Use Hermes cron for agent work; use this for reminding the operator.",

package/dist/{chunk-GAAN3Y7V.js → chunk-7HYNAA6B.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-INBG473K.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-EVBG5YUO.js → chunk-A3BF7SGM.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-NCTABQMC.js";
+} from "./chunk-PUF3BL6C.js";
 import {
   parseFlags
 } from "./chunk-NMUI3ZWG.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-PPY5N2E6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-UIS332AZ.js";
+} from "./chunk-2OWG667E.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-INBG473K.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-AUDYAVNM.js → chunk-ABAWD6QM.js}

@@ -443,9 +443,9 @@ var installGlobally = (options) => {
   }
   const started = (async () => {
     if (!npmIsOnPath()) throw new NpmMissingError();
-    const { withUpgradeLock } = await import("./global-upgrade-IZEC22BQ.js");
-    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-FGEZPX56.js");
-    const { autoUpdateLock } = await import("./paths-ROMZUSEX.js");
+    const { withUpgradeLock } = await import("./global-upgrade-EYLSJXXN.js");
+    const { installWithUpgradeLock, ownsUpgradeLock } = await import("./upgrade-lock-A2ALHHUG.js");
+    const { autoUpdateLock } = await import("./paths-XV3FXWOM.js");
     let result = "skipped";
     const install = async () => {
       const platform = process.platform;

package/dist/{chunk-Z7ORL6SC.js → chunk-BUBC4R5J.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-2J4IVUEA.js";
+} from "./chunk-PZXQUV3P.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   writeJsonAtomic
-} from "./chunk-AUDYAVNM.js";
+} from "./chunk-ABAWD6QM.js";
 
 // src/upgrade-lock.ts
 import { fork } from "child_process";

package/dist/{chunk-RPKFXNOJ.js → chunk-CIMFZIGP.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-LIDUPDEY.js";
+} from "./chunk-DYDA77FS.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {
@@ -11,7 +11,7 @@ var transcriptEnvironmentPreference = () => {
   return null;
 };
 var configuredPreference = () => transcriptEnvironmentPreference() ?? readTranscriptPreference();
-var transcriptsEnabled = () => configuredPreference() ?? false;
+var transcriptsEnabled = () => configuredPreference() ?? true;
 var transcriptPreferenceForSetup = (explicit = null) => explicit ?? configuredPreference() ?? true;
 
 export {

package/dist/{chunk-SIJHPGUW.js → chunk-CKUFXQUJ.js}

@@ -1,9 +1,9 @@
 import {
   pusharyFetch
-} from "./chunk-SOHJ37NA.js";
+} from "./chunk-7AQEWD2J.js";
 import {
   getBaseUrl
-} from "./chunk-53D6FFVE.js";
+} from "./chunk-IHT33GZN.js";
 import {
   NetworkError
 } from "./chunk-PPY5N2E6.js";
@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-INBG473K.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-P4TWTQ6V.js → chunk-CS5PJXL7.js}

@@ -2,31 +2,31 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-HXV2SY2V.js";
+} from "./chunk-4ZXFOT44.js";
 import {
   APPROVAL_RULES_PATH
-} from "./chunk-2DB7TBA7.js";
+} from "./chunk-ZZFYV26G.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
 import {
   readKeySource
-} from "./chunk-LIDUPDEY.js";
+} from "./chunk-DYDA77FS.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-SIJHPGUW.js";
+} from "./chunk-CKUFXQUJ.js";
 import {
   getBaseUrl
-} from "./chunk-53D6FFVE.js";
+} from "./chunk-IHT33GZN.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   KEY_SCOPE
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-INBG473K.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-LRYZXY4V.js → chunk-CU65AFT4.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   redactSecretsFromContent
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-INBG473K.js";
 
 // src/cli/json.ts
 var writeStdoutFully = (text) => new Promise((resolve, reject) => {

package/dist/{chunk-M7BXAWUC.js → chunk-D5NLXF72.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-2J4IVUEA.js";
+} from "./chunk-PZXQUV3P.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "./chunk-AUDYAVNM.js";
+} from "./chunk-ABAWD6QM.js";
 import {
   CLI_PACKAGE_NAMES,
   POSIX_GLOBAL_ROOT_SEGMENTS,
@@ -17,7 +17,7 @@ import {
 } from "./chunk-QTOLNRET.js";
 import {
   isAutoUpdateResult
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-INBG473K.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-LIDUPDEY.js → chunk-DYDA77FS.js}

@@ -1,19 +1,19 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-DARPCQPY.js";
+} from "./chunk-K2MW33DG.js";
 import {
   backupFile,
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-AUDYAVNM.js";
+} from "./chunk-ABAWD6QM.js";
 import {
   configFilePath
-} from "./chunk-53D6FFVE.js";
+} from "./chunk-IHT33GZN.js";
 import {
   API_KEY_PREFIX_PATTERN,
   isRecord
-} from "./chunk-QRS7FQHE.js";
+} from "./chunk-INBG473K.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-4DH54LS7.js → chunk-EFHCTIFT.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-2J4IVUEA.js";
+} from "./chunk-PZXQUV3P.js";
 
 // src/bell/install.ts
 import { join } from "path";