pushary 1.9.83 → 1.9.84

package/dist/{chunk-TBU4WXA4.js → chunk-JSZT4Q23.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-2KVELJZX.js";
+} from "./chunk-GGGOFJBL.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-MA6FJ7U3.js → chunk-LUSWC2MV.js}

@@ -1,12 +1,12 @@
 import {
   findNativeClaudeInstall
-} from "./chunk-BG4YJEFE.js";
+} from "./chunk-7ZYVX2KN.js";
 import {
   parseVersion
-} from "./chunk-YIAJOV2X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   isRecord
-} from "./chunk-L4THAI7Q.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-C5EWCNJF.js → chunk-OGTZ7JR7.js}

@@ -1,7 +1,7 @@
 import {
   localRepoKey,
   normalizeRepoRemote
-} from "./chunk-L4THAI7Q.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/repo.ts
 import { existsSync, readFileSync, statSync } from "fs";

package/dist/{chunk-FGWRVOBP.js → chunk-OKWHHDV5.js}

@@ -1,20 +1,20 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-2BDGGE2G.js";
+} from "./chunk-TSCFJJIB.js";
 import {
   nativeClaudeInstallPath
-} from "./chunk-BG4YJEFE.js";
+} from "./chunk-7ZYVX2KN.js";
 import {
   grokHome
-} from "./chunk-GGI6GTBL.js";
+} from "./chunk-VJZGR4N3.js";
 import {
   claudeConfigDir,
   clineDataDirectory,
   codexHomeFrom
-} from "./chunk-B2RDWRKR.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-L4THAI7Q.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";

package/dist/{chunk-XHHX63PY.js → chunk-OSEGZLCO.js}

@@ -9,20 +9,20 @@ import {
   installedCodexApp,
   readCodexAppRuntime,
   shellQuoted
-} from "./chunk-TMBLBDPB.js";
+} from "./chunk-FNC4SPOD.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-6CJ4MSZU.js";
+} from "./chunk-SAPRO7FI.js";
 import {
   CODEX_APP_LAUNCH_AT_LOGIN_VERB,
   CODEX_APP_LAUNCH_VARIABLE
 } from "./chunk-E46NE7FB.js";
 import {
   writeFileAtomic
-} from "./chunk-YIAJOV2X.js";
+} from "./chunk-64XK7DLE.js";
 
 // src/codex-app-cards-switch.ts
 import { execFileSync as execFileSync2 } from "child_process";

package/dist/{chunk-B2RDWRKR.js → chunk-PHBZK4SC.js}

@@ -4,7 +4,7 @@ import {
   quoteIfNeeded,
   shellDoubleQuoted,
   writeFileAtomic
-} from "./chunk-YIAJOV2X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   cmdShimScriptOf
 } from "./chunk-ZVU6WMMU.js";
@@ -15,7 +15,7 @@ import {
   HOOK_LOCATOR_BINARY,
   PRETOOLUSE_GATED_TOOLS,
   withHookHoldBudget
-} from "./chunk-L4THAI7Q.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/setup/paths.ts
 import { createHash as createHash2 } from "crypto";

package/dist/{chunk-S55CXRFD.js → chunk-POKCUYIQ.js}

@@ -7,7 +7,7 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-IUZCERPQ.js";
+} from "./chunk-7GYDMVHV.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-YZVAAY6B.js → chunk-QF6OJUWQ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-2KVELJZX.js";
+} from "./chunk-GGGOFJBL.js";
 import {
   getPackageVersion
 } from "./chunk-ZVU6WMMU.js";

package/dist/{chunk-5FM4BQOM.js → chunk-QG5Y5A36.js}

@@ -1,13 +1,13 @@
 import {
   ensureCodexTrustsPusharyHooks
-} from "./chunk-2B7YU4EK.js";
+} from "./chunk-5Z43EFX2.js";
 import {
   hermesReceiptPaths,
   hermesSetupPredatesThePluginFolder,
   installHermesPlugin,
   refreshHermesPluginFiles,
   shippedHermesPlugin
-} from "./chunk-OKZC4FHN.js";
+} from "./chunk-TNPKYKXU.js";
 import {
   fxIgnoresInstructionsFile,
   fxInstructionsBody,
@@ -16,7 +16,7 @@ import {
   macAppFxBridge,
   refreshClineKey,
   switchFxHttpEntryToBridge
-} from "./chunk-ZGZ2L3QN.js";
+} from "./chunk-4OP5GWHQ.js";
 import {
   OPENCODE_HOOK_BINARY,
   agentHookOwner,
@@ -28,16 +28,16 @@ import {
   openCodePluginDir,
   openCodeWired,
   withOpenCodeAskRules
-} from "./chunk-2BDGGE2G.js";
+} from "./chunk-TSCFJJIB.js";
 import {
   detectClaudeVersion
-} from "./chunk-MA6FJ7U3.js";
+} from "./chunk-LUSWC2MV.js";
 import {
   addCompatibleHooks,
   compatibleConfigFile,
   compatibleInstructionsFile,
   hasCompatibleHooks
-} from "./chunk-GGI6GTBL.js";
+} from "./chunk-VJZGR4N3.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
@@ -49,7 +49,7 @@ import {
   geminiWired,
   hasGeminiHooks,
   planHooks
-} from "./chunk-42RQG2VG.js";
+} from "./chunk-YU5ACKJP.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -95,7 +95,7 @@ import {
   renderAgentInstructions,
   supportedClaudeEvents,
   vscodePluginMcp
-} from "./chunk-B2RDWRKR.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   formatVersion,
   hookCommandsUseBareNames,
@@ -104,12 +104,12 @@ import {
   resolveGlobalBinary,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-YIAJOV2X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   HOOK_COMPATIBLE_PROFILES,
   isCompatibleAgentType,
   isRecord
-} from "./chunk-L4THAI7Q.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/reapply.ts
 import { dirname, join } from "path";

package/dist/{chunk-UNEJNC6X.js → chunk-QSDZE2B7.js}

@@ -1,19 +1,19 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-2BDGGE2G.js";
+} from "./chunk-TSCFJJIB.js";
 import {
   keyPrefix
-} from "./chunk-IBULUTHA.js";
+} from "./chunk-FRPR4OTH.js";
 import {
   bridgeAgentKey
-} from "./chunk-B2RDWRKR.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   readJsonSafe
-} from "./chunk-YIAJOV2X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   isRecord,
   isValidApiKey
-} from "./chunk-L4THAI7Q.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-Y32CL7XZ.js → chunk-RPNT4D3K.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-B2RDWRKR.js";
+} from "./chunk-PHBZK4SC.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-6CJ4MSZU.js → chunk-SAPRO7FI.js}

@@ -4,23 +4,23 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   readControlMode
-} from "./chunk-IBULUTHA.js";
+} from "./chunk-FRPR4OTH.js";
 import {
   getMachineId
-} from "./chunk-JIC5PGNI.js";
+} from "./chunk-V4JZHAOY.js";
 import {
   pusharyDir
-} from "./chunk-B2RDWRKR.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   readJsonSafe,
   resolveGlobalBinary,
   writeFileAtomic,
   writeJsonAtomic,
   writeJsonAtomicDurable
-} from "./chunk-YIAJOV2X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   getApiKey
-} from "./chunk-TBU4WXA4.js";
+} from "./chunk-JSZT4Q23.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimScriptOf,
@@ -30,7 +30,7 @@ import {
 } from "./chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "./chunk-L4THAI7Q.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-LLQBPDFQ.js → chunk-SBK7WGSE.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-B2RDWRKR.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   writeJsonAtomic
-} from "./chunk-YIAJOV2X.js";
+} from "./chunk-64XK7DLE.js";
 
 // src/upgrade-lock.ts
 import { fork } from "child_process";

package/dist/{chunk-GMZTABMV.js → chunk-TD5PW2VI.js}

@@ -3,10 +3,10 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-LLQBPDFQ.js";
+} from "./chunk-SBK7WGSE.js";
 import {
   phoneStartIsRequired
-} from "./chunk-5UPZR3C3.js";
+} from "./chunk-4QGV3II7.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -18,25 +18,25 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-6PWU2LBT.js";
+} from "./chunk-ZHL6F2KC.js";
 import {
   autoUpdateLock,
   autoUpdateLog,
   autoUpdateState
-} from "./chunk-B2RDWRKR.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   execNpm,
   fetchLatestPublishedVersion,
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-YIAJOV2X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-2KVELJZX.js";
+} from "./chunk-GGGOFJBL.js";
 import {
   commandsPackage,
   globalUpgradeEntry,

package/dist/{chunk-VUI4HK5O.js → chunk-TFJQAPIA.js}

@@ -1,9 +1,9 @@
 import {
   findNativeClaudeInstall
-} from "./chunk-BG4YJEFE.js";
+} from "./chunk-7ZYVX2KN.js";
 import {
   isFile
-} from "./chunk-YIAJOV2X.js";
+} from "./chunk-64XK7DLE.js";
 
 // src/wrapper/claudeBinary.ts
 import { homedir } from "os";

package/dist/{chunk-OKZC4FHN.js → chunk-TNPKYKXU.js}

@@ -5,19 +5,19 @@ import {
   hermesAppWiringRecord,
   hermesConfigReceipt,
   hermesSetupReceipt
-} from "./chunk-B2RDWRKR.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   readJsonSafe,
   resolvePathBinary,
   writeJsonAtomic
-} from "./chunk-YIAJOV2X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   isNewerVersion,
   isReleaseVersion
 } from "./chunk-ZVU6WMMU.js";
 import {
   isRecord
-} from "./chunk-L4THAI7Q.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/hermes/plugin-payload.ts
 import { createHash } from "crypto";
@@ -571,11 +571,14 @@ def _configured_key():
     return _key_in_pushary_config()
 
 
+def pushary_config_path():
+    configured = os.environ.get("PUSHARY_CONFIG_FILE")
+    return Path(configured).expanduser() if configured else Path.home() / ".pushary" / "config.json"
+
+
 def _key_in_pushary_config():
-    path = Path(os.environ.get("PUSHARY_CONFIG_FILE", "")).expanduser() \\
-        if os.environ.get("PUSHARY_CONFIG_FILE") else Path.home() / ".pushary" / "config.json"
     try:
-        value = json.loads(path.read_text(encoding="utf-8")).get("apiKey")
+        value = json.loads(pushary_config_path().read_text(encoding="utf-8")).get("apiKey")
         return value if isinstance(value, str) and value else None
     except Exception:
         return None
@@ -951,6 +954,7 @@ import threading
 import time
 from datetime import datetime, timezone
 from pathlib import Path
+from typing import NamedTuple
 
 from . import api
 
@@ -958,8 +962,26 @@ logger = logging.getLogger(__name__)
 MAX_MESSAGES = 5000
 MAX_SOURCE_BYTES = 20_000_000
 POLL_SECONDS = 5
+SNAPSHOT_REFRESH_SECONDS = 60
+AUTHORIZATION_LIFETIME_SECONDS = 60
+SNAPSHOT_RETENTION_SECONDS = 48 * 60 * 60
+SNAPSHOT_PRUNE_INTERVAL_SECONDS = 60 * 60
+SOURCE_UNAVAILABLE = "source_unavailable"
+HISTORY_NOT_ALLOWED_WARNING = ("[pushary] Hermes session history is not saved on this computer; it needs "
+                               "\`npx pushary@latest setup\` with the key Hermes uses, or Session history turned on in the Pushary Mac app")
+
+
+class _Authorization(NamedTuple):
+    inputs: tuple[object, ...]
+    expires_at: float
+    command: list[str] | None
+
+
 _workers: dict[tuple[str, str], tuple[threading.Event, threading.Thread]] = {}
+_authorizations: dict[str, _Authorization] = {}
 _lock = threading.Lock()
+_next_prune_at = 0.0
+_history_not_allowed_reported = False
 
 
 def _text_blocks(content: object) -> list[dict[str, object]]:
@@ -1088,8 +1110,7 @@ def _registration_command(key: str) -> list[str] | None:
             command = [helper, "hermes"]
         result = subprocess.run([helper, "authorize-export"],
                                 input=json.dumps({"apiKey": key, "baseUrl": api.BASE_URL}), text=True,
-                                stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, timeout=5, check=False,
-                                env={**os.environ, "PUSHARY_API_KEY": key, "PUSHARY_BASE_URL": api.BASE_URL})
+                                stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, timeout=5, check=False)
         if result.returncode != 0:
             return None
         authorization = json.loads(result.stdout)
@@ -1100,27 +1121,146 @@ def _registration_command(key: str) -> list[str] | None:
         return None
 
 
+def _file_state(path: Path | None) -> tuple[int, ...] | None:
+    if path is None:
+        return None
+    try:
+        info = os.lstat(path)
+    except OSError:
+        return None
+    return (info.st_ino, info.st_mode, info.st_nlink, info.st_uid, info.st_size, info.st_mtime_ns, info.st_ctime_ns)
+
+
+def _authorization_inputs(key: str) -> tuple[object, ...]:
+    root = Path.home() / ".pushary"
+    helper = shutil.which("pushary-transcript-register")
+    sources = (root / "native-transcript-consent.json", root / "bridge-auth", root / "bridge-auth" / "agent-key.json",
+               root / "machine-id", root / "bin" / "pushary-bridge", api.pushary_config_path(),
+               Path(helper) if helper else None)
+    return (key, api.BASE_URL, os.environ.get("PUSHARY_TRANSCRIPTS"), helper, *(_file_state(source) for source in sources))
+
+
+def _authorized_command(key: str) -> list[str] | None:
+    inputs = _authorization_inputs(key)
+    now = time.monotonic()
+    with _lock:
+        cached = _authorizations.get(key)
+    if cached is not None and cached.inputs == inputs and now < cached.expires_at:
+        return cached.command
+    command = _registration_command(key)
+    with _lock:
+        _authorizations[key] = _Authorization(inputs, now + AUTHORIZATION_LIFETIME_SECONDS, command)
+    return command
+
+
+def _report_history_not_allowed_once() -> None:
+    global _history_not_allowed_reported
+    with _lock:
+        if _history_not_allowed_reported:
+            return
+        _history_not_allowed_reported = True
+    logger.warning(HISTORY_NOT_ALLOWED_WARNING)
+
+
+def _history_root() -> Path:
+    return Path.home() / ".pushary" / "hermes-history"
+
+
+def _snapshot_expired(path: Path, now: float) -> bool:
+    return now - path.lstat().st_mtime > SNAPSHOT_RETENTION_SECONDS
+
+
+def _prune_expired_snapshots(root: Path, now: float) -> None:
+    try:
+        bindings = [entry for entry in root.iterdir() if not entry.is_symlink() and entry.is_dir()]
+    except OSError:
+        return
+    for binding in bindings:
+        try:
+            snapshots = list(binding.iterdir())
+        except OSError:
+            continue
+        for snapshot in snapshots:
+            try:
+                if _snapshot_expired(snapshot, now):
+                    snapshot.unlink()
+            except OSError:
+                continue
+
+
+def _prune_expired_snapshots_periodically() -> None:
+    global _next_prune_at
+    now = time.monotonic()
+    with _lock:
+        if now < _next_prune_at:
+            return
+        _next_prune_at = now + SNAPSHOT_PRUNE_INTERVAL_SECONDS
+    _prune_expired_snapshots(_history_root(), time.time())
+
+
+def _source_state(database_path: Path) -> tuple[object, ...]:
+    return (_file_state(database_path), _file_state(database_path.with_name(database_path.name + "-wal")))
+
+
+def _snapshot_refresh_due(written_at: float | None, now: float) -> bool:
+    return written_at is None or not 0 <= now - written_at < SNAPSHOT_REFRESH_SECONDS
+
+
+def _is_permanent_source_failure(failure: Exception) -> bool:
+    return isinstance(failure, ValueError)
+
+
+def _snapshot_digest(messages: list[dict[str, object]], error: str | None, completed: bool) -> str:
+    encoded = json.dumps([messages, error, completed], ensure_ascii=True, allow_nan=False).encode("utf-8")
+    return hashlib.sha256(encoded).hexdigest()
+
+
+def _write_changed_snapshot(path: Path, session_id: str, messages: list[dict[str, object]], error: str | None,
+                            completed: bool, written: str | None, refresh_due: bool) -> str | None:
+    digest = _snapshot_digest(messages, error, completed)
+    if not refresh_due and digest == written:
+        return None
+    write_snapshot(path, session_id, messages, error=error, completed=completed)
+    return digest
+
+
 def _export_loop(database_path: Path, session_id: str, key: str, command: list[str], stop: threading.Event) -> None:
     binding = hashlib.sha256((api.BASE_URL.rstrip("/") + "\\0" + key + "\\0" + str(database_path)).encode()).hexdigest()
-    path = Path.home() / ".pushary" / "hermes-history" / binding / f"{session_id}.json"
+    path = _history_root() / binding / f"{session_id}.json"
     next_registration = 0
+    written_at = None
+    source_state = None
+    written = None
     warned = False
     revoked = False
     try:
         while True:
-            if api._get_api_key() != key or _registration_command(key) != command:
+            if api._get_api_key() != key or _authorized_command(key) != command:
                 revoked = True
                 break
             ending = stop.is_set()
-            try:
-                messages = read_display_history(database_path, session_id)
-                write_snapshot(path, session_id, messages, completed=ending)
-                warned = False
-            except Exception:
-                if not warned:
+            now = time.time()
+            refresh_due = ending or _snapshot_refresh_due(written_at, now)
+            current_state = _source_state(database_path)
+            if refresh_due or current_state != source_state:
+                source_state = current_state
+                error = None
+                try:
+                    messages = read_display_history(database_path, session_id)
+                except Exception as failure:
+                    messages, error = [], SOURCE_UNAVAILABLE
+                    if not _is_permanent_source_failure(failure):
+                        source_state = None
+                try:
+                    digest = _write_changed_snapshot(path, session_id, messages, error, ending and error is None, written, refresh_due)
+                except ValueError:
+                    messages, error = [], SOURCE_UNAVAILABLE
+                    digest = _write_changed_snapshot(path, session_id, messages, error, False, written, refresh_due)
+                if digest is not None:
+                    written, written_at = digest, now
+                if error is not None and not warned:
                     logger.warning("[pushary] Hermes history source is unavailable; existing phone history is preserved")
-                warned = True
-                write_snapshot(path, session_id, [], error="source_unavailable")
+                warned = error is not None
             if ending or time.monotonic() >= next_registration:
                 payload = {"session_id": session_id, "cwd": str(database_path.parent), "transcript_path": str(path),
                            "hook_event_name": "SessionEnd" if ending else "SessionStart"}
@@ -1148,16 +1288,18 @@ def start_history(session_id: object, parent_session_id: object = None) -> None:
     try:
         from hermes_constants import get_hermes_home
 
-        key = api._get_api_key()
-        command = _registration_command(key)
-        if command is None:
-            return
+        _prune_expired_snapshots_periodically()
         database_path = (get_hermes_home() / "state.db").resolve()
         identity = (str(database_path), session_id)
         with _lock:
             if identity in _workers or len(_workers) >= 32:
                 return
-            stop = threading.Event()
+        key = api._get_api_key()
+        command = _authorized_command(key)
+        if command is None:
+            _report_history_not_allowed_once()
+            return
+        stop = threading.Event()
         context = contextvars.copy_context()
         thread = threading.Thread(target=context.run, args=(_export_loop, database_path, session_id, key, command, stop),
                                   name="pushary-history", daemon=True)
@@ -1321,7 +1463,7 @@ def record_plugin_load(approval_transport_registered, home=None, pid=None, now=N
         logger.debug("[pushary] could not record the plugin load: %s", exc)
         return None
 ` },
-  { path: "plugin.yaml", contents: "name: pushary\nversion: 0.9.0\ndescription: Push notifications and human-in-the-loop for Hermes Agent via Pushary\nauthor: RalphNex OU\nrequires_env:\n  - name: PUSHARY_API_KEY\n    description: Your Pushary API key\n    url: https://pushary.com/sign-up?from=hermes\n    secret: true\nprovides_tools:\n  - pushary_remind\n  - pushary_notify\n  - pushary_ask\n  - pushary_wait\n  - pushary_cancel\n  - pushary_propose_scope\n  - pushary_enroll\n  - pushary_ask_end_user\nprovides_hooks:\n  - pre_llm_call\n  - pre_tool_call\n  - post_tool_call\n  - on_session_start\n  - on_session_end\n  - on_session_finalize\nprovides_approval_transports:\n  - pushary\n" },
+  { path: "plugin.yaml", contents: "name: pushary\nversion: 0.9.1\ndescription: Push notifications and human-in-the-loop for Hermes Agent via Pushary\nauthor: RalphNex OU\nrequires_env:\n  - name: PUSHARY_API_KEY\n    description: Your Pushary API key\n    url: https://pushary.com/sign-up?from=hermes\n    secret: true\nprovides_tools:\n  - pushary_remind\n  - pushary_notify\n  - pushary_ask\n  - pushary_wait\n  - pushary_cancel\n  - pushary_propose_scope\n  - pushary_enroll\n  - pushary_ask_end_user\nprovides_hooks:\n  - pre_llm_call\n  - pre_tool_call\n  - post_tool_call\n  - on_session_start\n  - on_session_end\n  - on_session_finalize\nprovides_approval_transports:\n  - pushary\n" },
   { path: "schemas.py", contents: `PUSHARY_REMIND = {
     "name": "pushary_remind",
     "description": "Schedule a one-time personal reminder on Pushary, even after Hermes exits. Use body plus in_minutes or at (ISO timestamp with explicit UTC offset, within 30 days). Never guess the user's timezone. Confirm the returned time. No arguments lists pending reminders; cancel_reminder_id cancels a scheduled one. Use Hermes cron for agent work; use this for reminding the operator.",

package/dist/{chunk-2BDGGE2G.js → chunk-TSCFJJIB.js}

@@ -1,15 +1,15 @@
 import {
   compatibleConfigFile
-} from "./chunk-GGI6GTBL.js";
+} from "./chunk-VJZGR4N3.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-42RQG2VG.js";
+} from "./chunk-YU5ACKJP.js";
 import {
   AGENT_CHOICES
-} from "./chunk-SN22OXY3.js";
+} from "./chunk-HARHFDZM.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -19,10 +19,10 @@ import {
   pusharyDir,
   vscodePluginDir,
   windowsNodeLauncherFor
-} from "./chunk-B2RDWRKR.js";
+} from "./chunk-PHBZK4SC.js";
 import {
   readJsonSafe
-} from "./chunk-YIAJOV2X.js";
+} from "./chunk-64XK7DLE.js";
 import {
   HOOK_BUDGETS,
   HOOK_COMPATIBLE_PROFILES,
@@ -30,7 +30,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-L4THAI7Q.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-MND7HQ4P.js → chunk-TZDEHPYZ.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   redactSecretsFromContent
-} from "./chunk-L4THAI7Q.js";
+} from "./chunk-JHWOM55B.js";
 
 // src/cli/json.ts
 var writeStdoutFully = (text) => new Promise((resolve, reject) => {