pushary 1.9.76 → 1.9.77

package/dist/bin/pushary-codex-session.js

@@ -8,8 +8,8 @@ import "../chunk-MLKGABMK.js";
 var args = process.argv.slice(2);
 if (args[0] === "codex") args.shift();
 var appBehindTheProxy = args[0] === "--desktop-proxy" && args[2] === "--" ? args[1] : void 0;
-if (args[0] !== "--desktop-proxy") (await import("../usage-C53NVWC2.js")).exitOnHelpFlag("codex");
-var loadWhatReadsTheAccount = () => Promise.all([import("../config-R43UFHX7.js"), import("../identity-CA7CZGDL.js")]);
+if (args[0] !== "--desktop-proxy") (await import("../usage-UNEATRXG.js")).exitOnHelpFlag("codex");
+var loadWhatReadsTheAccount = () => Promise.all([import("../config-YREUMA6Z.js"), import("../identity-WIM6NVLP.js")]);
 var loadedWhenThePassThroughStarted = appBehindTheProxy === void 0 ? null : loadWhatReadsTheAccount().catch(() => null);
 var desktopAccount = async () => {
   try {
@@ -19,7 +19,7 @@ var desktopAccount = async () => {
     return null;
   }
 };
-var desktopLaunch = await import("../codex-desktop-launch-JH3E2CIA.js").catch(() => null);
+var desktopLaunch = await import("../codex-desktop-launch-DBJBV66U.js").catch(() => null);
 if (desktopLaunch === null && appBehindTheProxy !== void 0) {
   process.exitCode = await letCodexRunWithoutPushary(appBehindTheProxy, args.slice(3));
 } else {
@@ -27,15 +27,15 @@ if (desktopLaunch === null && appBehindTheProxy !== void 0) {
   const stop = () => abort.abort();
   if (!args[0]?.startsWith("--desktop")) for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) process.on(signal, stop);
   try {
-    const { codexDesktopCommand } = desktopLaunch ?? await import("../codex-desktop-launch-JH3E2CIA.js");
+    const { codexDesktopCommand } = desktopLaunch ?? await import("../codex-desktop-launch-DBJBV66U.js");
     const desktop = await codexDesktopCommand(args, [process.execPath, ...process.execArgv, process.argv[1], "codex"], desktopAccount);
     if (desktop !== null) process.exitCode = desktop;
     else {
       const [{ getApiKey, getBaseUrl }, { getMachineId }, { resolveProviderBinary }, { codexSessionDirectory, launchCodexSession }] = await Promise.all([
-        import("../config-R43UFHX7.js"),
-        import("../identity-CA7CZGDL.js"),
-        import("../live-capabilities-RCGMQIIZ.js"),
-        import("../codex-session-launch-GR363OQN.js")
+        import("../config-YREUMA6Z.js"),
+        import("../identity-WIM6NVLP.js"),
+        import("../live-capabilities-SU3BEP2Z.js"),
+        import("../codex-session-launch-6RTU73OP.js")
       ]);
       const binary = resolveProviderBinary("codex");
       if (!binary) throw new Error("Install Codex first, then run pushary codex");

package/dist/bin/pushary-codex.js

@@ -1,33 +1,33 @@
 #!/usr/bin/env node
 import {
   reportEvent
-} from "../chunk-NVLKH5FS.js";
-import "../chunk-ZY25SNFQ.js";
+} from "../chunk-KUI2KGRZ.js";
+import "../chunk-XYNQA6YC.js";
 import {
   askUser,
   isDecisionStopped,
   waitForAnswer
-} from "../chunk-7ZOWQBHQ.js";
+} from "../chunk-ESHMWZXX.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-JNV5LOZH.js";
-import "../chunk-E7U4YM4A.js";
-import "../chunk-KWGOKO4E.js";
+import "../chunk-GV7FB5L3.js";
+import "../chunk-CKUFXQUJ.js";
+import "../chunk-7AQEWD2J.js";
 import {
   getMachineId
-} from "../chunk-BUR2LYQI.js";
-import "../chunk-5NW7VM35.js";
-import "../chunk-7KYQ24FI.js";
-import "../chunk-T2EJ3H6Y.js";
+} from "../chunk-LD5LSJ2B.js";
+import "../chunk-K2MW33DG.js";
+import "../chunk-PZXQUV3P.js";
+import "../chunk-ABAWD6QM.js";
 import {
   getApiKey
-} from "../chunk-M7JFGDGP.js";
+} from "../chunk-IHT33GZN.js";
 import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-R3HXGHRQ.js";
+} from "../chunk-2OWG667E.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-Y4OBAK4I.js";
+import "../chunk-INBG473K.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-codex.ts

package/dist/bin/pushary-connect.js

@@ -1,53 +1,53 @@
 #!/usr/bin/env node
 import {
   printKeyCheck
-} from "../chunk-DZF2M3LM.js";
+} from "../chunk-CS5PJXL7.js";
 import {
   connectDevice,
   connectExistingApp,
   printConnectInstructions
-} from "../chunk-XJ5DYPTM.js";
+} from "../chunk-RYDT6Y32.js";
 import "../chunk-3EGEA4KH.js";
-import "../chunk-Y2CYSVWU.js";
-import "../chunk-B2PFCS72.js";
+import "../chunk-QGOY3HNV.js";
+import "../chunk-4ZXFOT44.js";
 import {
   CONNECTED_THROUGH_MAC_APP,
   PAIR_FROM_MAC_APP,
   readMacAppConnection
-} from "../chunk-YDPGBBV7.js";
-import "../chunk-USMUW3LI.js";
+} from "../chunk-MQBQRXTN.js";
+import "../chunk-ZZFYV26G.js";
 import "../chunk-QCGNGEGE.js";
-import "../chunk-QUGP76DQ.js";
+import "../chunk-J2NPFRDI.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-WK2L3XVQ.js";
-import "../chunk-3YU6NIIL.js";
-import "../chunk-KGWLDNNT.js";
-import "../chunk-PPD64MZW.js";
-import "../chunk-5FV472Q2.js";
+} from "../chunk-UBQ3TG3B.js";
+import "../chunk-H4GOJIOK.js";
+import "../chunk-TK3XMPG2.js";
+import "../chunk-PUF3BL6C.js";
+import "../chunk-EFHCTIFT.js";
 import {
   parseFlags
 } from "../chunk-NMUI3ZWG.js";
 import {
   readKeySource
-} from "../chunk-7LLC4R66.js";
-import "../chunk-NVLKH5FS.js";
-import "../chunk-ZY25SNFQ.js";
-import "../chunk-7ZOWQBHQ.js";
+} from "../chunk-DYDA77FS.js";
+import "../chunk-KUI2KGRZ.js";
+import "../chunk-XYNQA6YC.js";
+import "../chunk-ESHMWZXX.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-JNV5LOZH.js";
+import "../chunk-GV7FB5L3.js";
 import {
   checkApiKey
-} from "../chunk-E7U4YM4A.js";
-import "../chunk-KWGOKO4E.js";
-import "../chunk-BUR2LYQI.js";
-import "../chunk-5NW7VM35.js";
-import "../chunk-7KYQ24FI.js";
-import "../chunk-T2EJ3H6Y.js";
-import "../chunk-M7JFGDGP.js";
+} from "../chunk-CKUFXQUJ.js";
+import "../chunk-7AQEWD2J.js";
+import "../chunk-LD5LSJ2B.js";
+import "../chunk-K2MW33DG.js";
+import "../chunk-PZXQUV3P.js";
+import "../chunk-ABAWD6QM.js";
+import "../chunk-IHT33GZN.js";
 import {
   UsageError
 } from "../chunk-PPY5N2E6.js";
@@ -56,9 +56,9 @@ import {
 } from "../chunk-KZERVKTD.js";
 import {
   isInvocationOf
-} from "../chunk-R3HXGHRQ.js";
+} from "../chunk-2OWG667E.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-Y4OBAK4I.js";
+import "../chunk-INBG473K.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-connect.ts

package/dist/bin/pushary-cowork.js

@@ -2,15 +2,15 @@
 import {
   coworkOutput,
   parseCoworkOptions
-} from "../chunk-MTRZQR2R.js";
+} from "../chunk-A3BF7SGM.js";
 import {
   canOpenBrowser,
   openInBrowser
 } from "../chunk-PUZZELE6.js";
 import {
   exitOnHelpFlag
-} from "../chunk-WK2L3XVQ.js";
-import "../chunk-PPD64MZW.js";
+} from "../chunk-UBQ3TG3B.js";
+import "../chunk-PUF3BL6C.js";
 import "../chunk-NMUI3ZWG.js";
 import {
   UsageError
@@ -18,11 +18,11 @@ import {
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-R3HXGHRQ.js";
+import "../chunk-2OWG667E.js";
 import "../chunk-QTOLNRET.js";
 import {
   CLAUDE_CONNECTOR_GUIDE
-} from "../chunk-Y4OBAK4I.js";
+} from "../chunk-INBG473K.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-cowork.ts

package/dist/bin/pushary-daemon.js

@@ -1,30 +1,30 @@
 #!/usr/bin/env node
 import {
   inspectConfiguredManagedProviders
-} from "../chunk-VZSSL6US.js";
+} from "../chunk-OXA2P5NJ.js";
 import {
   HEARTBEAT_INTERVAL_MS,
   sendHeartbeat
-} from "../chunk-2QFYEB3P.js";
-import "../chunk-USZJJWZL.js";
+} from "../chunk-2IOQHB3C.js";
+import "../chunk-UU2CQFSJ.js";
 import {
   readSignedOutDiagnosis
-} from "../chunk-B2PFCS72.js";
+} from "../chunk-4ZXFOT44.js";
 import {
   HERMES_INSTALL_MARKER_FILE,
   defaultHermesHome,
   parseHermesInstallMarker
-} from "../chunk-FAGQAR6I.js";
+} from "../chunk-7CU7OGWP.js";
 import {
   writeHuman
 } from "../chunk-QCGNGEGE.js";
-import "../chunk-W5AUTVVL.js";
-import "../chunk-SWRNJ3BP.js";
-import "../chunk-C2AR7QXU.js";
-import "../chunk-QUGP76DQ.js";
+import "../chunk-P7CGVHH5.js";
+import "../chunk-QBCV27CM.js";
+import "../chunk-3UYMJZXV.js";
+import "../chunk-J2NPFRDI.js";
 import {
   exitOnHelpFlag
-} from "../chunk-WK2L3XVQ.js";
+} from "../chunk-UBQ3TG3B.js";
 import {
   codexBinaryIsBroken,
   detectProviderLiveCapabilities,
@@ -33,8 +33,8 @@ import {
   launchableProviders,
   resolveControlPolicy,
   trackProviderInventory
-} from "../chunk-74ONBRPF.js";
-import "../chunk-NFUV25JZ.js";
+} from "../chunk-Y5YJLBML.js";
+import "../chunk-HGVUTO67.js";
 import {
   SESSION_REAP_SILENCE_MS,
   describeIdleWindow,
@@ -42,17 +42,17 @@ import {
   listProcessProofs,
   ownsLiveProcess,
   silentSpawnedProofs
-} from "../chunk-XLGD5LDG.js";
-import "../chunk-UMBVIFP5.js";
+} from "../chunk-FXQCSU4L.js";
+import "../chunk-SNHAXVCJ.js";
 import {
   readLocalAutoUpdateReport
-} from "../chunk-CMNB4IZO.js";
+} from "../chunk-D5NLXF72.js";
 import {
   startRegisteredTranscripts
-} from "../chunk-7SFP6Y5U.js";
-import "../chunk-YLB4AGZJ.js";
+} from "../chunk-PAPUUZOP.js";
+import "../chunk-EV47UGDK.js";
 import "../chunk-MHUKYYYR.js";
-import "../chunk-3YU6NIIL.js";
+import "../chunk-H4GOJIOK.js";
 import {
   DAEMON_LEASE_RENEW_INTERVAL_MS,
   acquireDaemonLease,
@@ -69,53 +69,53 @@ import {
   requestDaemonHandoff,
   stopDaemonRunning,
   writeDaemonNeedsLogin
-} from "../chunk-DB3NOEDW.js";
+} from "../chunk-JJPBWBAF.js";
 import {
   hookOwnerOf
-} from "../chunk-KGWLDNNT.js";
-import "../chunk-PPD64MZW.js";
-import "../chunk-5FV472Q2.js";
+} from "../chunk-TK3XMPG2.js";
+import "../chunk-PUF3BL6C.js";
+import "../chunk-EFHCTIFT.js";
 import "../chunk-NMUI3ZWG.js";
-import "../chunk-ITLWEGLE.js";
+import "../chunk-WFSE7NRM.js";
 import "../chunk-XMSDA5WA.js";
-import "../chunk-5M5F4IWR.js";
+import "../chunk-CIMFZIGP.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "../chunk-7LLC4R66.js";
+} from "../chunk-DYDA77FS.js";
 import {
   pendingCommandReceipts,
   removePendingCommand
-} from "../chunk-NVLKH5FS.js";
-import "../chunk-ZY25SNFQ.js";
-import "../chunk-7ZOWQBHQ.js";
+} from "../chunk-KUI2KGRZ.js";
+import "../chunk-XYNQA6YC.js";
+import "../chunk-ESHMWZXX.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-JNV5LOZH.js";
-import "../chunk-E7U4YM4A.js";
-import "../chunk-KWGOKO4E.js";
+import "../chunk-GV7FB5L3.js";
+import "../chunk-CKUFXQUJ.js";
+import "../chunk-7AQEWD2J.js";
 import {
   getMachineId
-} from "../chunk-BUR2LYQI.js";
-import "../chunk-5NW7VM35.js";
+} from "../chunk-LD5LSJ2B.js";
+import "../chunk-K2MW33DG.js";
 import {
   claudeConfigDir,
   codexHome
-} from "../chunk-7KYQ24FI.js";
+} from "../chunk-PZXQUV3P.js";
 import {
   resolveBinary,
   writeJsonAtomicDurable
-} from "../chunk-T2EJ3H6Y.js";
+} from "../chunk-ABAWD6QM.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-M7JFGDGP.js";
+} from "../chunk-IHT33GZN.js";
 import "../chunk-PPY5N2E6.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-R3HXGHRQ.js";
+import "../chunk-2OWG667E.js";
 import "../chunk-QTOLNRET.js";
 import {
   CLAUDE_INBOX,
@@ -145,13 +145,14 @@ import {
   parseHermesAdmission,
   parseHermesReplayCursor,
   qualifyHermesReceiptMode
-} from "../chunk-Y4OBAK4I.js";
+} from "../chunk-INBG473K.js";
 import "../chunk-MLKGABMK.js";
 
 // src/native-host-receiver.ts
 import { join as join2 } from "path";
 import { homedir } from "os";
 import { readFileSync as readFileSync3 } from "fs";
+import { createHash as createHash2 } from "crypto";
 
 // src/native-host.ts
 import WebSocket from "ws";
@@ -525,7 +526,7 @@ var NativeHostClient = class {
       if (!node.isFile() || node.uid !== process.getuid?.() || node.size > 4096 || (node.mode & 63) !== 0)
         throw new Error("unsafe intent");
       const v = JSON.parse(readFileSync(file, "utf8"));
-      if (!nativeRecord(v) || v.version !== NATIVE_INPUT.journalVersion || v.agent !== this.options.agent || v.sessionId !== sessionId || v.commandId !== commandId || v.home !== resolve(this.options.home) || typeof v.submittedAtMs !== "number" || !Number.isSafeInteger(v.submittedAtMs) || typeof v.accepted !== "boolean" || v.hermesCursor !== void 0 && !parseHermesReplayCursor(v.hermesCursor))
+      if (!nativeRecord(v) || v.version !== NATIVE_INPUT.journalVersion || v.agent !== this.options.agent || v.sessionId !== sessionId || v.commandId !== commandId || v.home !== resolve(this.options.home) || typeof v.submittedAtMs !== "number" || !Number.isSafeInteger(v.submittedAtMs) || typeof v.accepted !== "boolean" || v.settlementScope !== void 0 && typeof v.settlementScope !== "string" || v.hermesCursor !== void 0 && !parseHermesReplayCursor(v.hermesCursor))
         throw new Error("invalid intent");
       const hermesCursor = parseHermesReplayCursor(v.hermesCursor);
       return {
@@ -537,6 +538,7 @@ var NativeHostClient = class {
         submittedAtMs: v.submittedAtMs,
         accepted: v.accepted,
         settled: v.settled === true,
+        settlementScope: v.settlementScope,
         ...hermesCursor ? { hermesCursor } : {}
       };
     } catch (e) {
@@ -554,7 +556,7 @@ var NativeHostClient = class {
           if (!nativeRecord(raw) || !nativeIdentifier(raw.sessionId) || !nativeIdentifier(raw.commandId))
             return [];
           const intent = this.readIntent(raw.sessionId, raw.commandId);
-          return intent?.accepted && !intent.settled ? [{ sessionId: intent.sessionId, commandId: intent.commandId }] : [];
+          return intent?.accepted && !intent.settled && intent.settlementScope === this.options.settlementScope ? [{ sessionId: intent.sessionId, commandId: intent.commandId }] : [];
         } catch {
           return [];
         }
@@ -586,6 +588,7 @@ var NativeHostClient = class {
           home: resolve(this.options.home),
           submittedAtMs: Date.now(),
           accepted: false,
+          settlementScope: this.options.settlementScope,
           ...hermesCursor ? { hermesCursor } : {}
         })
       );
@@ -724,6 +727,7 @@ var startNativeInputReceiver = (apiKey, machineId, options) => {
   const baseUrl = options.baseUrl ?? getBaseUrl();
   const abort = new AbortController();
   const busy = /* @__PURE__ */ new Set();
+  const settling = /* @__PURE__ */ new Set();
   const heartbeats = /* @__PURE__ */ new Map();
   const settlements = /* @__PURE__ */ new Map();
   let scanning = false;
@@ -746,7 +750,8 @@ var startNativeInputReceiver = (apiKey, machineId, options) => {
   };
   const settle = async (commandId) => {
     const pending = settlements.get(commandId);
-    if (!pending) return false;
+    if (!pending || settling.has(commandId) || settling.size >= CLAUDE_INBOX_RECEIVER.maxConcurrent) return false;
+    settling.add(commandId);
     try {
       const receipt = await post("/api/agent/command/ack", {
         ...pending,
@@ -755,7 +760,9 @@ var startNativeInputReceiver = (apiKey, machineId, options) => {
       });
       if (!isCommandAcknowledgementReceipt(receipt))
         throw new Error("native acknowledgement missing receipt");
-      client.confirmSettlement(pending.sessionId, commandId);
+      const current = settlements.get(commandId);
+      if (current?.state !== pending.state || current.failureCode !== pending.failureCode || current.sessionId !== pending.sessionId) return false;
+      if (pending.state === "delivered") client.confirmSettlement(pending.sessionId, commandId);
       settlements.delete(commandId);
       return true;
     } catch (error) {
@@ -764,15 +771,13 @@ var startNativeInputReceiver = (apiKey, machineId, options) => {
           error instanceof Error ? error.message : "native receipt recovery failed"
         );
       return false;
+    } finally {
+      settling.delete(commandId);
     }
   };
   const receive = async (sessionId) => {
     busy.add(sessionId);
     try {
-      if ([...settlements.values()].some(
-        (receipt) => receipt.sessionId === sessionId
-      ))
-        return;
       const raw = await post("/api/agent/command/native", {
         operation: "claim" /* claim */,
         sessionId,
@@ -804,7 +809,13 @@ var startNativeInputReceiver = (apiKey, machineId, options) => {
           state: "delivered"
         });
       }
-      for (const commandId of [...settlements.keys()]) await settle(commandId);
+      for (const [commandId, receipt] of [...settlements]) {
+        if (settling.size >= CLAUDE_INBOX_RECEIVER.maxConcurrent) break;
+        if (settling.has(commandId)) continue;
+        settlements.delete(commandId);
+        settlements.set(commandId, receipt);
+        void settle(commandId);
+      }
       const sessions = (await client.sessions()).filter(options.ownsSession).slice(0, CLAUDE_INBOX_MAX_SESSIONS);
       if (!sessions.length) return;
       for (const session of sessions) {
@@ -871,6 +882,8 @@ var ownsHermes = (home) => {
   }
 };
 var startNativeHostReceivers = (apiKey, machineId, report) => {
+  const baseUrl = getBaseUrl().replace(/\/+$/, "");
+  const settlementScope = createHash2("sha256").update(`${baseUrl}\0${apiKey}\0${machineId}`).digest("hex");
   const homes = {
     ["codex" /* codex */]: codexHome(),
     ["hermes" /* hermes */]: defaultHermesHome()
@@ -878,11 +891,13 @@ var startNativeHostReceivers = (apiKey, machineId, report) => {
   const stops = Object.values(NativeInputAgent).map((agent) => {
     const home = homes[agent];
     return startNativeInputReceiver(apiKey, machineId, {
+      baseUrl,
       client: new NativeHostClient({
         agent,
         home,
         report,
-        journalDir: join2(homedir(), ".pushary", NATIVE_INPUT.journalDirectory)
+        journalDir: join2(homedir(), ".pushary", NATIVE_INPUT.journalDirectory),
+        settlementScope
       }),
       agentType: agent,
       agentName: agent === "codex" /* codex */ ? "Codex" : "Hermes",
@@ -928,15 +943,14 @@ import { join as join4, basename as basename2 } from "path";
 import { homedir as homedir2 } from "os";
 
 // src/claude-inbox.ts
-import { createHash as createHash2, randomUUID } from "crypto";
-import { execFileSync } from "child_process";
+import { createHash as createHash3, randomUUID } from "crypto";
 import {
   closeSync as closeSync2,
   fsyncSync as fsyncSync2,
   lstatSync as lstatSync2,
   mkdirSync as mkdirSync2,
   openSync as openSync2,
-  readFileSync as readFileSync4,
+  readFileSync as readFileSync5,
   readdirSync as readdirSync2,
   readSync,
   statSync,
@@ -946,21 +960,35 @@ import {
 import { dirname as dirname2, isAbsolute, join as join3, resolve as resolve2 } from "path";
 import { Socket } from "net";
 import { setTimeout as delay } from "timers/promises";
-var object = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-var digest = (value) => createHash2("sha256").update(value).digest("hex");
-var readObject = (file) => {
-  const stat = lstatSync2(file);
-  if (!stat.isFile() || stat.size > CLAUDE_INBOX.maxRecordBytes || stat.uid !== process.getuid?.())
-    throw new Error("Invalid inbox record");
-  return JSON.parse(readFileSync4(file, "utf8"));
+
+// src/claude-process-identity.ts
+import { execFileSync } from "child_process";
+import { readFileSync as readFileSync4, readlinkSync } from "fs";
+var linuxProcessStart = (stat) => {
+  const closingName = stat.lastIndexOf(")");
+  if (closingName < 0) return null;
+  const fields = stat.slice(closingName + 1).trim().split(/\s+/);
+  if (!/^\d+ \(/.test(stat) || fields[0] === "Z" || fields[0] === "X") return null;
+  const ticks = fields[19];
+  return ticks && /^\d+$/.test(ticks) ? ticks : null;
 };
-var readKey = (file) => {
-  const value = readObject(file);
-  return object(value) && typeof value.peerToken === "string" && /^[0-9a-f]{32}$/.test(value.peerToken) && typeof value.procStart === "string" ? { peerToken: value.peerToken, procStart: value.procStart } : null;
+var linuxProcessDomain = (machineId, namespace) => {
+  const machine = machineId.trim();
+  if (!/^[a-f0-9]{32}$/i.test(machine) || !/^pid:\[\d+\]$/.test(namespace)) return null;
+  return `linux:${machine}:${namespace}`;
+};
+var currentClaudeProcessDomain = () => {
+  if (process.platform !== "linux") return null;
+  try {
+    return linuxProcessDomain(readFileSync4("/etc/machine-id", "utf8"), readlinkSync("/proc/self/ns/pid"));
+  } catch {
+    return null;
+  }
 };
-var processStart = (pid) => {
-  if (process.platform !== "darwin") return null;
+var currentClaudeProcessStart = (pid) => {
   try {
+    if (process.platform === "linux") return linuxProcessStart(readFileSync4(`/proc/${pid}/stat`, "utf8"));
+    if (process.platform !== "darwin") return null;
     return execFileSync("/bin/ps", ["-p", String(pid), "-o", "lstart="], {
       encoding: "utf8",
       env: { ...process.env, TZ: "UTC", LC_ALL: "C" },
@@ -970,6 +998,25 @@ var processStart = (pid) => {
     return null;
   }
 };
+var matchesClaudeProcess = (session, platform, processStart, pidDomain) => {
+  if (!processStart || processStart !== session.procStart) return false;
+  if (platform === "linux") return pidDomain !== null && pidDomain === session.pidDomain;
+  return platform === "darwin";
+};
+
+// src/claude-inbox.ts
+var object = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var digest = (value) => createHash3("sha256").update(value).digest("hex");
+var readObject = (file) => {
+  const stat = lstatSync2(file);
+  if (!stat.isFile() || stat.size > CLAUDE_INBOX.maxRecordBytes || stat.uid !== process.getuid?.())
+    throw new Error("Invalid inbox record");
+  return JSON.parse(readFileSync5(file, "utf8"));
+};
+var readKey = (file) => {
+  const value = readObject(file);
+  return object(value) && typeof value.peerToken === "string" && /^[0-9a-f]{32}$/.test(value.peerToken) && typeof value.procStart === "string" ? { peerToken: value.peerToken, procStart: value.procStart } : null;
+};
 var transcriptPath = (config, session) => join3(
   config,
   "projects",
@@ -1054,11 +1101,12 @@ var ClaudeInboxClient = class {
       return sessions.flatMap((file) => {
         try {
           const session = parseClaudeInboxSession(
-            readObject(join3(this.options.configDir, "sessions", file))
+            readObject(join3(this.options.configDir, "sessions", file)),
+            this.options.platform ?? process.platform
           );
           if (!session || file !== `${session.pid}.json` || !isAbsolute(session.cwd) || !isAbsolute(session.messagingSocketPath))
             return [];
-          if ((this.options.processStart ?? processStart)(session.pid) !== session.procStart)
+          if (!this.processMatches(session))
             return [];
           const socket = lstatSync2(session.messagingSocketPath);
           if (!socket.isSocket() || socket.uid !== process.getuid?.()) return [];
@@ -1071,6 +1119,14 @@ var ClaudeInboxClient = class {
       return [];
     }
   }
+  processMatches(session) {
+    return matchesClaudeProcess(
+      session,
+      this.options.platform ?? process.platform,
+      (this.options.processStart ?? currentClaudeProcessStart)(session.pid),
+      (this.options.pidDomain ?? currentClaudeProcessDomain)()
+    );
+  }
   key(session) {
     const canonicalSocket = session.messagingSocketPath.replace(
       /^\/private(?=\/(?:tmp|var|etc)\/)/,
@@ -1135,7 +1191,7 @@ var ClaudeInboxClient = class {
       if (!key) return "wake_not_sent" /* notSent */;
       const socket = await connectInbox(session.messagingSocketPath);
       if (!socket) return "wake_not_sent" /* notSent */;
-      if (signal?.aborted || (this.options.processStart ?? processStart)(session.pid) !== session.procStart) {
+      if (signal?.aborted || !this.processMatches(session)) {
         socket.destroy();
         return "wake_not_sent" /* notSent */;
       }