pushary 1.9.82 → 1.9.84

package/dist/{chunk-CV56MBIZ.js → chunk-TSCFJJIB.js}

@@ -1,15 +1,15 @@
 import {
   compatibleConfigFile
-} from "./chunk-5TMGEQAC.js";
+} from "./chunk-VJZGR4N3.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-IEAABGST.js";
+} from "./chunk-YU5ACKJP.js";
 import {
   AGENT_CHOICES
-} from "./chunk-JXE4UQFJ.js";
+} from "./chunk-HARHFDZM.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -19,10 +19,10 @@ import {
   pusharyDir,
   vscodePluginDir,
   windowsNodeLauncherFor
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   readJsonSafe
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   HOOK_BUDGETS,
   HOOK_COMPATIBLE_PROFILES,
@@ -30,7 +30,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-ER4UCECJ.js → chunk-TZDEHPYZ.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   redactSecretsFromContent
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/cli/json.ts
 var writeStdoutFully = (text) => new Promise((resolve, reject) => {

package/dist/{chunk-NPBPH7KI.js → chunk-UGELL4RB.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-ONUAAXAW.js";
+} from "./chunk-JSZT4Q23.js";
 import {
   normalizeInstallSource
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-6WOG2SCC.js → chunk-UIDWJ24H.js}

@@ -1,3 +1,7 @@
+import {
+  readOwnerOnlyJson,
+  transcriptReadPositionSchema
+} from "./chunk-4TMKTLQX.js";
 import {
   external_exports
 } from "./chunk-XMSDA5WA.js";
@@ -8,8 +12,6 @@ import { existsSync, lstatSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
 var MAXIMUM_OWNER_DOCUMENT_BYTES = 16384;
-var MAXIMUM_READ_POSITIONS_BYTES = 4 * 1024 * 1024;
-var OWNER_ONLY_FILE_MODE = 384;
 var OWNER_ONLY_DIRECTORY_MODE = 448;
 var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]"]);
 var credentialSchema = external_exports.object({
@@ -20,20 +22,11 @@ var credentialSchema = external_exports.object({
   keyScope: external_exports.literal("agent")
 });
 var consentSchema = credentialSchema.pick({ siteID: true, machineID: true, baseURL: true }).extend({ enabled: external_exports.literal(true), grantedAtMs: external_exports.number().int().positive(), includesEarlierConversation: external_exports.boolean().optional() });
-var readPositionSchema = external_exports.object({
-  identity: external_exports.string().nullable(),
-  offset: external_exports.number().int().nonnegative(),
-  startedBeforeEpoch: external_exports.boolean()
-});
 var readPositionsSchema = external_exports.object({
   epochStartedAtMs: external_exports.number().int().positive(),
-  positions: external_exports.record(external_exports.string(), readPositionSchema)
+  positions: external_exports.record(external_exports.string(), transcriptReadPositionSchema)
 });
-var ownerDocument = (path, maximumBytes = MAXIMUM_OWNER_DOCUMENT_BYTES) => {
-  const info = lstatSync(path);
-  if (!info.isFile() || info.nlink !== 1 || info.uid !== process.getuid?.() || (info.mode & 511) !== OWNER_ONLY_FILE_MODE || info.size > maximumBytes) return null;
-  return JSON.parse(readFileSync(path, "utf8"));
-};
+var ownerDocument = (path, maximumBytes = MAXIMUM_OWNER_DOCUMENT_BYTES) => readOwnerOnlyJson(path, maximumBytes);
 var acceptsServer = (baseURL) => {
   const url = new URL(baseURL);
   return url.protocol === "https:" || url.protocol === "http:" && LOOPBACK_HOSTS.has(url.hostname);

package/dist/{chunk-N3C3D4AV.js → chunk-UWL6VVE3.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-5TMGEQAC.js";
+} from "./chunk-VJZGR4N3.js";
 import {
   pusharyHookExecutable
-} from "./chunk-IEAABGST.js";
+} from "./chunk-YU5ACKJP.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   isRecord
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-YAMNJXCD.js → chunk-V4JZHAOY.js}

@@ -1,13 +1,13 @@
 import {
   pusharyDir
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   writeFileAtomic
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 
 // src/identity.ts
 import { randomUUID } from "crypto";
-import { mkdirSync, readFileSync, writeFileSync } from "fs";
+import { linkSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
 import { dirname, join } from "path";
 var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var readMachineId = (filePath) => {
@@ -26,18 +26,24 @@ var getOrCreateMachineId = (options = {}) => {
   const id = (options.randomId ?? randomUUID)();
   if (!UUID.test(id)) throw new Error("machine id generator returned an invalid UUID");
   mkdirSync(dirname(filePath), { recursive: true });
+  const candidate = join(dirname(filePath), `.machine-id-${randomUUID()}.tmp`);
   try {
-    writeFileSync(filePath, `${id}
+    writeFileSync(candidate, `${id}
 `, { flag: "wx", mode: 384 });
+    try {
+      linkSync(candidate, filePath);
+      return id;
+    } catch (error) {
+      if (!(error instanceof Error) || !("code" in error) || error.code !== "EEXIST") throw error;
+    }
+    const winner = readMachineId(filePath);
+    if (winner) return winner;
+    writeFileAtomic(filePath, `${id}
+`, 384);
     return id;
-  } catch (err) {
-    if (err.code !== "EEXIST") throw err;
+  } finally {
+    rmSync(candidate, { force: true });
   }
-  const winner = readMachineId(filePath);
-  if (winner) return winner;
-  writeFileAtomic(filePath, `${id}
-`, 384);
-  return id;
 };
 var getMachineId = (options = {}) => getOrCreateMachineId(options);
 

package/dist/{chunk-4TR4G7A4.js → chunk-VD24OIWR.js}

@@ -2,7 +2,7 @@ import {
   isApprovalMode,
   isRecord,
   isTimeoutAction
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/cli/settings-response.ts
 var isFiniteNumber = (value) => typeof value === "number" && Number.isFinite(value);

package/dist/{chunk-5TMGEQAC.js → chunk-VJZGR4N3.js}

@@ -1,11 +1,13 @@
 import {
   addGeminiMcpServer,
   removeGeminiMcpServer
-} from "./chunk-IEAABGST.js";
+} from "./chunk-YU5ACKJP.js";
+import {
+  CLAUDE_CODE_AGENT
+} from "./chunk-JLJWVKMJ.js";
 import {
-  CLAUDE_CODE_AGENT,
   compatibleToolLookup
-} from "./chunk-FHPSVTS5.js";
+} from "./chunk-3MWQZKIO.js";
 import {
   CLAUDE_HOOK_EVENTS,
   PUSHARY_MCP_URL,
@@ -17,7 +19,7 @@ import {
   isPusharyHook,
   registerHookEntry,
   removeClaudeMcpServers
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   PHONE_ANSWERED_TOOLS,
@@ -28,7 +30,7 @@ import {
   pusharyMissingReason,
   refusalOutput,
   withHookHoldBudget
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/config-document.ts
 import { parse, stringify } from "smol-toml";

package/dist/{chunk-GUI2NYCX.js → chunk-VVWL6AB4.js}

@@ -1,9 +1,9 @@
 import {
   readMacAppAgentKey
-} from "./chunk-J4TQYGHU.js";
+} from "./chunk-QSDZE2B7.js";
 import {
   API_KEYS_PATH
-} from "./chunk-C6FQ4YST.js";
+} from "./chunk-BS5MTP34.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -13,13 +13,13 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-CXZAKS7S.js";
+} from "./chunk-FRPR4OTH.js";
 import {
   absoluteUrl
-} from "./chunk-LNSCANYY.js";
+} from "./chunk-BUS7MXEE.js";
 import {
   isValidApiKey
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";

package/dist/{chunk-OXKVR2FP.js → chunk-W2IRYDG5.js}

@@ -12,7 +12,7 @@ import {
   reachVerdict,
   reachesYou,
   verifyDelivery
-} from "./chunk-RRMRP62I.js";
+} from "./chunk-G2GOVKBU.js";
 import {
   humanIsTty,
   writeHuman
@@ -24,14 +24,14 @@ import {
 } from "./chunk-FO3MDD26.js";
 import {
   reportedInstallSource
-} from "./chunk-NPBPH7KI.js";
+} from "./chunk-UGELL4RB.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-TTTK44RK.js";
+} from "./chunk-GGGOFJBL.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/onboarding.ts
 import qrcodeTerminal from "qrcode-terminal";

package/dist/{chunk-3UBYG4G7.js → chunk-WRKRZJCW.js}

@@ -1,28 +1,30 @@
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "./chunk-AM3H6HWG.js";
+} from "./chunk-CZ7C5AJT.js";
 import {
   AUTO_DECISION_WINDOW_MS,
   DEFAULT_SESSION,
   claimThrottle,
-  deriveToolTarget,
-  permissionDeniedAction,
   releaseThrottle,
   reportEvent
-} from "./chunk-FHPSVTS5.js";
+} from "./chunk-JLJWVKMJ.js";
+import {
+  deriveToolTarget,
+  permissionDeniedAction
+} from "./chunk-3MWQZKIO.js";
 import {
   askUser,
   isDecisionStopped,
   isQuestionLimitRefusal,
   waitForQuestion
-} from "./chunk-OIW3JAWH.js";
+} from "./chunk-HWT42Z4O.js";
 import {
   SubscriptionRequiredError
-} from "./chunk-Z5HLACZT.js";
+} from "./chunk-ZWKF7WE4.js";
 import {
   getMachineId
-} from "./chunk-YAMNJXCD.js";
+} from "./chunk-V4JZHAOY.js";
 import {
   ASK_CONTEXT_MAX,
   agentQuestionContext,
@@ -34,7 +36,7 @@ import {
   questionsShownAsASet,
   shouldDeferToNativeMode,
   wireVerdictFor
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/machine-decision-audit.ts
 import { basename } from "path";

package/dist/{chunk-DJILSCSU.js → chunk-YQCCJ6U5.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   readJsonSafe
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   isRecord
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-IEAABGST.js → chunk-YU5ACKJP.js}

@@ -1,9 +1,9 @@
 import {
   AGENT_CHOICES
-} from "./chunk-JXE4UQFJ.js";
+} from "./chunk-HARHFDZM.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-4S5XVFDV.js";
+} from "./chunk-RPNT4D3K.js";
 import {
   CLAUDE_HOOK_EVENTS,
   CODEX_HOOK_EVENTS,
@@ -13,13 +13,13 @@ import {
   hookBinaryNameOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-DX45XQ36.js → chunk-Z75D2NJN.js}

@@ -1,10 +1,10 @@
 import {
   pusharyDir
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   readJsonSafe,
   writeFileAtomic
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   DECLINED_AGENTS_FILE,
   DISCONNECT_AGENT_IDS,
@@ -13,7 +13,7 @@ import {
   serializeDeclinedAgents,
   withDeclinedAgent,
   withoutDeclinedAgent
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/declined-agents-file.ts
 import { join } from "path";

package/dist/{chunk-S2DLTWFG.js → chunk-ZHL6F2KC.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-UOUUTDWF.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   readJsonSafe,
   writeJsonAtomic
-} from "./chunk-2BJZFA7X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   CLI_PACKAGE_NAMES,
   POSIX_GLOBAL_ROOT_SEGMENTS,
@@ -17,7 +17,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isAutoUpdateResult
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-X2P3O4PX.js → chunk-ZNFAF74M.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-WG67W43Y.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";