pushary 1.9.87 → 1.9.89

package/dist/{chunk-JILOKJ3W.js → chunk-IBYD6P5T.js}

@@ -1,13 +1,14 @@
 import {
   SESSION_HISTORY_RETENTION_DAYS,
+  readOwnerOnlyJson,
   savedTranscriptReadPositions
-} from "./chunk-VU5PKE2N.js";
+} from "./chunk-UYVCRG3J.js";
 import {
   ensureDaemonRunning
-} from "./chunk-FE3I7SCA.js";
+} from "./chunk-XZYUFVUW.js";
 import {
   hookOwnerOf
-} from "./chunk-K4I2LESS.js";
+} from "./chunk-54RUDSDE.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
@@ -18,17 +19,17 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-4PS27SCG.js";
+} from "./chunk-VHO3HV7P.js";
 import {
   external_exports
 } from "./chunk-XMSDA5WA.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-IOJZPPDB.js";
+} from "./chunk-ILBVL464.js";
 import {
   readTranscriptPreference
-} from "./chunk-TQ43EX2E.js";
+} from "./chunk-P6EUHG5X.js";
 import {
   hookMeaning
 } from "./chunk-TXJ65MIV.js";
@@ -36,15 +37,15 @@ import {
   claudeConfigDir,
   codexHome,
   pusharyDir
-} from "./chunk-YLWPJ2MP.js";
+} from "./chunk-JBR2FQKG.js";
 import {
   writeJsonAtomic,
   writeJsonAtomicDurable
-} from "./chunk-5YDIHB67.js";
+} from "./chunk-UEWTZZY4.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-NP65LEAY.js";
+} from "./chunk-L4FQ3I7N.js";
 import {
   PENDING_COMMAND_PREFIX,
   SESSION_HISTORY_BACKFILL_LIMIT_BYTES,
@@ -55,30 +56,30 @@ import {
 } from "./chunk-5TLDFPW6.js";
 
 // src/transcript-recipient-pin.ts
-import { existsSync, mkdirSync, readFileSync, rmSync } from "fs";
+import { createHash } from "crypto";
+import { mkdirSync, rmSync } from "fs";
 import { homedir } from "os";
 import { dirname, join } from "path";
-var pinFile = () => process.env.PUSHARY_RECIPIENT_PIN_FILE?.trim() || join(homedir(), ".pushary", "recipients.json");
+var recipientPinFile = () => process.env.PUSHARY_RECIPIENT_PIN_FILE?.trim() || join(homedir(), ".pushary", "recipients.json");
 var asPin = (offer) => ({
   phonePublicKey: offer.phonePublicKey,
   providerKeyId: offer.provider?.keyId ?? null,
   providerPublicKey: offer.provider?.publicKey ?? null
 });
-var loadPin = (path = pinFile()) => {
-  if (!existsSync(path)) return null;
+var pinnedRecipientsSchema = external_exports.object({
+  phonePublicKey: external_exports.string().min(1).max(256),
+  providerKeyId: external_exports.string().min(1).max(256).nullable().default(null),
+  providerPublicKey: external_exports.string().min(1).max(256).nullable().default(null)
+});
+var loadPin = (path = recipientPinFile()) => {
   try {
-    const raw = JSON.parse(readFileSync(path, "utf-8"));
-    if (typeof raw.phonePublicKey !== "string" || raw.phonePublicKey.length === 0) return null;
-    return {
-      phonePublicKey: raw.phonePublicKey,
-      providerKeyId: typeof raw.providerKeyId === "string" ? raw.providerKeyId : null,
-      providerPublicKey: typeof raw.providerPublicKey === "string" ? raw.providerPublicKey : null
-    };
-  } catch {
-    return null;
+    return pinnedRecipientsSchema.parse(readOwnerOnlyJson(path, 16384));
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") return null;
+    throw new Error("Existing history trust could not be read. Nothing was replaced.");
   }
 };
-var savePin = (pin, path = pinFile()) => {
+var savePin = (pin, path = recipientPinFile()) => {
   try {
     mkdirSync(dirname(path), { recursive: true, mode: 448 });
     writeJsonAtomicDurable(path, pin, 384);
@@ -89,7 +90,7 @@ var savePin = (pin, path = pinFile()) => {
 };
 var clearPin = () => {
   try {
-    rmSync(pinFile(), { force: true });
+    rmSync(recipientPinFile(), { force: true });
   } catch {
   }
 };
@@ -102,28 +103,72 @@ var verifyRecipients = (offer, pinned) => {
   if (next.providerPublicKey !== pinned.providerPublicKey) changed.push("the compliance recovery key");
   return changed.length === 0 ? { kind: "match" } : { kind: "changed", changed };
 };
-var fingerprint = (publicKey) => {
-  const hex = Buffer.from(publicKey, "base64").toString("hex").toUpperCase();
-  return (hex.slice(0, 8).match(/.{2}/g) ?? []).join(" ");
-};
+var fingerprint = (publicKey) => createHash("sha256").update(publicKey).digest("hex");
 var changedRecipientsMessage = (verdict, offer) => [
   "[pushary] Transcript sync stopped: the keys this machine seals transcripts to have changed.",
   ...verdict.changed.map((what) => `[pushary]   changed: ${what}`),
   `[pushary]   now offered: phone ${fingerprint(offer.phonePublicKey)}${offer.provider ? `, recovery ${offer.provider.keyId.slice(0, 8)}` : ", no recovery key"}`,
   "[pushary] If you reinstalled the app or rotated a key, this is expected. Compare the",
   "[pushary] fingerprint above with the one in the app under Settings, then run:",
-  "[pushary]   pushary transcripts trust --rotate",
+  "[pushary]   pushary transcripts trust --fingerprint <fingerprint-from-phone-settings>",
   "[pushary] Until then nothing is uploaded, so no turn is sealed to a key you have not seen."
 ].join("\n");
 
+// src/transcript-phone-trust.ts
+import { createHash as createHash2 } from "crypto";
+import { mkdirSync as mkdirSync2 } from "fs";
+import { dirname as dirname2, join as join2 } from "path";
+var approvedPhoneSchema = external_exports.object({ version: external_exports.literal(1), sourcePinHash: external_exports.string().regex(/^[a-f0-9]{64}$/), phonePublicKey: external_exports.string().min(1).max(256) });
+var pinHash = (pin) => createHash2("sha256").update(JSON.stringify(pin)).digest("hex");
+var approvalFile = (path, pin, publicKey) => join2(`${path}.trusted-phones`, `${pinHash(pin)}-${fingerprint(publicKey)}.json`);
+var sameRecoveryRecipient = (offer, pin) => (offer.provider?.keyId ?? null) === pin.providerKeyId && (offer.provider?.publicKey ?? null) === pin.providerPublicKey;
+var canonicalPublicKey = (key) => {
+  const bytes = Buffer.from(key, "base64");
+  return bytes.length === 32 && bytes.toString("base64") === key;
+};
+var phoneWasApproved = (offer, pin, path) => {
+  try {
+    const approval = approvedPhoneSchema.parse(readOwnerOnlyJson(approvalFile(path, pin, offer.phonePublicKey), 16384));
+    if (approval.sourcePinHash !== pinHash(pin) || approval.phonePublicKey !== offer.phonePublicKey) throw new Error("Mismatched approval");
+    return true;
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") return false;
+    throw new Error("Saved phone verification could not be read. Nothing was replaced.");
+  }
+};
+var verifyTrustedRecipients = (offer, path = recipientPinFile()) => {
+  const pin = loadPin(path);
+  const verdict = verifyRecipients(offer, pin);
+  if (verdict.kind !== "changed" || !pin || !sameRecoveryRecipient(offer, pin)) return verdict;
+  return phoneWasApproved(offer, pin, path) ? { kind: "match" } : verdict;
+};
+var assertVerifiedPhone = (offer, pin, expectedFingerprint) => {
+  if (!canonicalPublicKey(offer.phonePublicKey) || fingerprint(offer.phonePublicKey) !== expectedFingerprint.trim().toLowerCase()) {
+    throw new Error("The fingerprint does not match this phone. Nothing was changed.");
+  }
+  if (!pin) throw new Error("No existing history trust was found. Nothing was changed.");
+  if (!sameRecoveryRecipient(offer, pin)) throw new Error("The recovery recipient also changed. Phone verification cannot approve that change.");
+};
+var trustPhoneRecipient = (request) => {
+  const { offer, pinFile } = request;
+  const pin = loadPin(pinFile);
+  assertVerifiedPhone(offer, pin, request.expectedFingerprint);
+  if (!pin) throw new Error("No existing history trust was found.");
+  if (verifyTrustedRecipients(offer, pinFile).kind === "match") return "already_trusted";
+  const path = approvalFile(pinFile, pin, offer.phonePublicKey);
+  mkdirSync2(dirname2(path), { recursive: true, mode: 448 });
+  writeJsonAtomicDurable(path, { version: 1, sourcePinHash: pinHash(pin), phonePublicKey: offer.phonePublicKey }, 384);
+  return "trusted";
+};
+
 // src/transcript-registration.ts
-import { createHash as createHash4 } from "crypto";
-import { lstatSync as lstatSync3, readFileSync as readFileSync7, readdirSync as readdirSync2, realpathSync, statSync as statSync3, unlinkSync as unlinkSync2 } from "fs";
-import { basename, dirname as dirname3, isAbsolute, join as join6, relative, resolve as resolve2, sep } from "path";
+import { createHash as createHash6 } from "crypto";
+import { lstatSync as lstatSync3, readFileSync as readFileSync6, readdirSync as readdirSync2, realpathSync, statSync as statSync3, unlinkSync as unlinkSync2 } from "fs";
+import { basename, dirname as dirname4, isAbsolute, join as join7, relative, resolve as resolve2, sep } from "path";
 
 // src/claude-display-draft.ts
-import { closeSync, fstatSync, lstatSync, openSync, readFileSync as readFileSync2, readSync, unlinkSync } from "fs";
-import { join as join2 } from "path";
+import { closeSync, fstatSync, lstatSync, openSync, readFileSync, readSync, unlinkSync } from "fs";
+import { join as join3 } from "path";
 
 // src/transcript-redaction.ts
 var redactDraft = (text, complete = false) => {
@@ -176,14 +221,14 @@ var stateSchema = external_exports.object({
   startedAt: external_exports.number().int().positive(),
   updatedAt: external_exports.number().int().positive()
 });
-var fileFor = (id, directory) => join2(directory, `${id}.display`);
+var fileFor = (id, directory) => join3(directory, `${id}.display`);
 var readState = (sessionId, runtime) => {
   if (!identifier.safeParse(sessionId).success) return null;
   try {
     const path = fileFor(sessionId, runtime.directory);
     const info = lstatSync(path);
     if (!info.isFile() || info.nlink !== 1 || info.size > MAX_TAIL || (info.mode & 511) !== 384) return null;
-    const envelope = external_exports.object({ content: external_exports.string() }).parse(JSON.parse(readFileSync2(path, "utf8")));
+    const envelope = external_exports.object({ content: external_exports.string() }).parse(JSON.parse(readFileSync(path, "utf8")));
     const plain = decryptRecord(envelope.content, runtime.sessionKey);
     if (!plain) return null;
     const state = stateSchema.parse(JSON.parse(plain));
@@ -266,18 +311,18 @@ var readDisplayDraft = (sessionId, runtime) => {
 };
 
 // src/transcript-session-key.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, readdirSync, rmSync as rmSync2, statSync } from "fs";
+import { existsSync, mkdirSync as mkdirSync3, readFileSync as readFileSync2, readdirSync, rmSync as rmSync2, statSync } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join3 } from "path";
-var sessionKeyDirectory = () => process.env.PUSHARY_SESSION_KEY_DIR?.trim() || join3(homedir2(), ".pushary", "sessions");
+import { join as join4 } from "path";
+var sessionKeyDirectory = () => process.env.PUSHARY_SESSION_KEY_DIR?.trim() || join4(homedir2(), ".pushary", "sessions");
 var SESSION_DISPLAY_TTL_MS = 48 * 60 * 60 * 1e3;
 var SAFE_SESSION_ID = /^[A-Za-z0-9._-]{1,128}$/;
-var fileFor2 = (sessionId, directory) => SAFE_SESSION_ID.test(sessionId) ? join3(directory, `${sessionId}.json`) : null;
+var fileFor2 = (sessionId, directory) => SAFE_SESSION_ID.test(sessionId) ? join4(directory, `${sessionId}.json`) : null;
 var loadSessionKey = (sessionId, directory = sessionKeyDirectory()) => {
   const path = fileFor2(sessionId, directory);
-  if (!path || !existsSync2(path)) return null;
+  if (!path || !existsSync(path)) return null;
   try {
-    const raw = JSON.parse(readFileSync3(path, "utf-8"));
+    const raw = JSON.parse(readFileSync2(path, "utf-8"));
     const key = typeof raw.sessionKey === "string" ? Buffer.from(raw.sessionKey, "base64") : null;
     if (!key || key.length !== 32) return null;
     return {
@@ -296,7 +341,7 @@ var saveSessionKey = (sessionId, value, directory = sessionKeyDirectory()) => {
   const path = fileFor2(sessionId, directory);
   if (!path) return false;
   try {
-    mkdirSync2(directory, { recursive: true, mode: 448 });
+    mkdirSync3(directory, { recursive: true, mode: 448 });
     writeJsonAtomicDurable(path, {
       sessionKey: Buffer.from(value.sessionKey).toString("base64"),
       wrappedKey: value.wrappedKey,
@@ -311,12 +356,12 @@ var saveSessionKey = (sessionId, value, directory = sessionKeyDirectory()) => {
   }
 };
 var sweepStaleSessionDisplays = (now = Date.now(), dir = sessionKeyDirectory()) => {
-  if (!existsSync2(dir)) return 0;
+  if (!existsSync(dir)) return 0;
   let removed = 0;
   try {
     for (const name of readdirSync(dir)) {
       if (!name.endsWith(".display")) continue;
-      const path = join3(dir, name);
+      const path = join4(dir, name);
       try {
         if (now - statSync(path).mtimeMs <= SESSION_DISPLAY_TTL_MS) continue;
         rmSync2(path, { force: true });
@@ -426,9 +471,9 @@ var startDisplayPublisher = (options) => {
 };
 
 // src/transcript-reader.ts
-import { createHash as createHash3 } from "crypto";
-import { join as join4 } from "path";
-import { closeSync as closeSync3, fstatSync as fstatSync3, openSync as openSync3, readFileSync as readFileSync6, readSync as readSync2, statSync as statSync2 } from "fs";
+import { createHash as createHash5 } from "crypto";
+import { join as join5 } from "path";
+import { closeSync as closeSync3, fstatSync as fstatSync3, openSync as openSync3, readFileSync as readFileSync5, readSync as readSync2, statSync as statSync2 } from "fs";
 
 // src/transcript-source.ts
 var normalizeTranscriptLines = (lines, source) => {
@@ -483,10 +528,10 @@ var transcriptLinesSince = (lines, oldestLineMs, dropCompactionSummaries) => lin
 });
 
 // src/transcript-snapshot-file.ts
-import { closeSync as closeSync2, fstatSync as fstatSync2, openSync as openSync2, readFileSync as readFileSync4 } from "fs";
+import { closeSync as closeSync2, fstatSync as fstatSync2, openSync as openSync2, readFileSync as readFileSync3 } from "fs";
 
 // src/transcript-snapshot-source.ts
-import { createHash } from "crypto";
+import { createHash as createHash3 } from "crypto";
 var identity = external_exports.string().min(1).max(256);
 var timestamp = external_exports.string().refine((value) => Number.isFinite(Date.parse(value)));
 var geminiTool = external_exports.object({ id: identity, name: external_exports.string(), args: external_exports.record(external_exports.string(), external_exports.unknown()), result: external_exports.unknown().optional(), status: external_exports.string() });
@@ -612,7 +657,7 @@ var parseCursorSnapshot = (text) => {
     const record = JSON.parse(line);
     if (isRecord(record) && (record.type === "metadata" || record.type === "turn_ended")) continue;
     const message = cursorMessage.parse(record);
-    const fingerprint2 = createHash("sha256").update(canonicalJsonText(message)).digest("hex");
+    const fingerprint2 = createHash3("sha256").update(canonicalJsonText(message)).digest("hex");
     const occurrence = occurrences.get(fingerprint2) ?? 0;
     occurrences.set(fingerprint2, occurrence + 1);
     messages.push({ id: `cursor:${fingerprint2}:${occurrence}`, role: message.role, content: message.message.content });
@@ -648,7 +693,7 @@ var readTranscriptSnapshot = (path, source, sessionId) => {
   try {
     const before = fstatSync2(descriptor);
     if (!before.isFile() || before.size === 0 || before.size > MAXIMUM_SNAPSHOT_FILE_BYTES) throw new Error("History snapshot is empty or exceeds its size limit");
-    const text = readFileSync4(descriptor, "utf8");
+    const text = readFileSync3(descriptor, "utf8");
     const after = fstatSync2(descriptor);
     if (before.size !== after.size || before.mtimeMs !== after.mtimeMs) throw new Error("History snapshot changed while reading");
     let messages;
@@ -670,11 +715,11 @@ var readTranscriptSnapshot = (path, source, sessionId) => {
 };
 
 // src/transcript-snapshot-journal.ts
-import { lstatSync as lstatSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync5 } from "fs";
-import { dirname as dirname2 } from "path";
+import { lstatSync as lstatSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync4 } from "fs";
+import { dirname as dirname3 } from "path";
 
 // src/transcript-projection.ts
-import { createHash as createHash2 } from "crypto";
+import { createHash as createHash4 } from "crypto";
 var newestWithinUploadLimits = (messages, limits) => {
   let start = messages.length;
   let contentBytes = 0;
@@ -703,7 +748,7 @@ var projectTranscriptSnapshot = (previous, messages, older) => {
     const order = message.sourcePosition;
     if (!message.id || message.id.length > 256 || Object.hasOwn(entries, message.id)) throw new Error("Invalid or duplicate history message identity");
     const record = { timestamp: message.timestamp, observedAtMs: message.observedAtMs, historyMessage: { role: message.role, content: message.content } };
-    const digest = createHash2("sha256").update(JSON.stringify(record)).digest("hex");
+    const digest = createHash4("sha256").update(JSON.stringify(record)).digest("hex");
     entries[message.id] = { digest, order };
     const earlier = previous?.entries[message.id];
     if (earlier?.digest === digest && earlier.order === order) continue;
@@ -748,7 +793,7 @@ var TranscriptSnapshotJournal = class {
       return;
     }
     if (!info.isFile() || info.nlink !== 1 || info.size > MAXIMUM_JOURNAL_BYTES || process.getuid && (info.uid !== process.getuid() || (info.mode & 511) !== 384)) throw new Error("Unsafe history checkpoint");
-    const saved = journalSchema.parse(JSON.parse(readFileSync5(path, "utf8")));
+    const saved = journalSchema.parse(JSON.parse(readFileSync4(path, "utf8")));
     if (saved.binding !== binding) throw new Error("History checkpoint belongs to another source");
     this.current = saved.epochStartedAtMs === epochStartedAtMs ? saved : { ...saved, epochStartedAtMs, initialized: false, observedAtMs: {}, pending: null, excludedIds: [], projection: { revision: Math.max(saved.projection?.revision ?? 0, saved.pending?.next.revision ?? 0), entries: {} } };
   }
@@ -799,7 +844,7 @@ var TranscriptSnapshotJournal = class {
   }
   store(next) {
     if (Buffer.byteLength(JSON.stringify(next)) > MAXIMUM_JOURNAL_BYTES) throw new Error("History checkpoint exceeds its size limit");
-    mkdirSync3(dirname2(this.path), { recursive: true, mode: 448 });
+    mkdirSync4(dirname3(this.path), { recursive: true, mode: 448 });
     writeJsonAtomicDurable(this.path, next, 384);
     this.current = journalSchema.parse(next);
   }
@@ -895,7 +940,7 @@ var appendOnlyReader = (path, source, epoch) => ({
   read(retentionDays, nowMs) {
     const version = sourceVersion(path);
     const read2 = epoch ? linesSeenDuringEpoch(epoch, path, source, nowMs, retentionDays) : null;
-    const lines = read2?.lines ?? normalizeTranscriptLines(readFileSync6(path, "utf8").split("\n"), source);
+    const lines = read2?.lines ?? normalizeTranscriptLines(readFileSync5(path, "utf8").split("\n"), source);
     return {
       lines,
       acknowledge() {
@@ -911,8 +956,8 @@ var caughtUpReadStillCurrent = (caughtUp, version, nowMs) => caughtUp !== null &
 var UNCHANGED_SNAPSHOT_READ = { lines: [], acknowledge: () => "unchanged" };
 var snapshotReader = (options, source) => {
   const { path, epoch } = options;
-  const binding = createHash3("sha256").update(JSON.stringify([options.baseUrl, options.apiKey, options.machineId, options.sessionId, source, path])).digest("hex");
-  const journalPath = join4(options.keyDirectory, "snapshots", binding + ".json");
+  const binding = createHash5("sha256").update(JSON.stringify([options.baseUrl, options.apiKey, options.machineId, options.sessionId, source, path])).digest("hex");
+  const journalPath = join5(options.keyDirectory, "snapshots", binding + ".json");
   const epochStart = epoch?.startedAtMs ?? 0;
   const backfill = epoch ? epoch.backfill : SESSION_HISTORY_BACKFILL;
   let journal;
@@ -967,11 +1012,11 @@ var transcriptHealthReporter = (target) => {
 };
 
 // src/transcript-sync.ts
-import { join as join5, resolve } from "path";
+import { join as join6, resolve } from "path";
 var claudeTranscriptPath = (cwd, sessionId) => {
   const projectId = resolve(cwd).replace(/[^a-zA-Z0-9-]/g, "-");
   const configDir = claudeConfigDir();
-  return join5(configDir, "projects", projectId, `${sessionId}.jsonl`);
+  return join6(configDir, "projects", projectId, `${sessionId}.jsonl`);
 };
 var createSyncState = () => ({
   sessionKey: null,
@@ -1102,7 +1147,7 @@ var startTranscriptSync = (opts) => {
       recipientFailure = reason;
     });
     if (!offer) return null;
-    const verdict = verifyRecipients(offer, loadPin(opts.storage?.recipientPinFile));
+    const verdict = verifyTrustedRecipients(offer, opts.storage?.recipientPinFile);
     if (verdict.kind === "first-use" && !savePin(verdict.pin, opts.storage?.recipientPinFile)) return null;
     if (verdict.kind === "changed") {
       recipientFailure = "phone_key_changed";
@@ -1168,13 +1213,14 @@ var startTranscriptSync = (opts) => {
         if (ending) opts.onDrained?.();
         return;
       }
+      waitingForRecipients = true;
       const recipients = await fetchPinnedRecipients();
       if (!recipients) {
-        waitingForRecipients = true;
         if (recipientFailure === "off_for_workspace") passOverConversationWhileHistoryIsOff();
         await reportHealth(recipientFailure);
         return;
       }
+      waitingForRecipients = false;
       if (reader.requiresRevisions && recipients.phoneReadsTranscriptRevisions !== true) {
         await reportHealth("phone_upgrade_required");
         return;
@@ -1253,15 +1299,15 @@ var storedRegistrationSchema = external_exports.object({
   endedAt: external_exports.number().positive().optional(),
   drained: external_exports.boolean().optional()
 });
-var defaultRegistryDirectory = () => process.env.PUSHARY_TRANSCRIPT_REGISTRY_DIR || join6(pusharyDir(), "transcript-capture");
+var defaultRegistryDirectory = () => process.env.PUSHARY_TRANSCRIPT_REGISTRY_DIR || join7(pusharyDir(), "transcript-capture");
 var cliRegistry = (apiKey = getApiKey()) => ({ apiKey, baseUrl: getBaseUrl(), directory: defaultRegistryDirectory() });
-var accountFor = (registry) => createHash4("sha256").update(`${registry.baseUrl}\0${registry.apiKey}`).digest("hex");
+var accountFor = (registry) => createHash6("sha256").update(`${registry.baseUrl}\0${registry.apiKey}`).digest("hex");
 var TTL = 48 * 60 * 60 * 1e3;
-var registeredReadPositionsFile = (registry) => join6(registry.directory, "read-positions", `${accountFor(registry)}.json`);
+var registeredReadPositionsFile = (registry) => join7(registry.directory, "read-positions", `${accountFor(registry)}.json`);
 var SNAPSHOT_KEYS_DIRECTORY_NAME = "snapshot-keys";
 var SNAPSHOT_RECIPIENT_PIN_FILE_NAME = "recipients.json";
-var snapshotKeyDirectory = (registry) => join6(registry.directory, SNAPSHOT_KEYS_DIRECTORY_NAME, accountFor(registry));
-var snapshotRecipientPinFile = (registry) => join6(snapshotKeyDirectory(registry), SNAPSHOT_RECIPIENT_PIN_FILE_NAME);
+var snapshotKeyDirectory = (registry) => join7(registry.directory, SNAPSHOT_KEYS_DIRECTORY_NAME, accountFor(registry));
+var snapshotRecipientPinFile = (registry = cliRegistry()) => join7(snapshotKeyDirectory(registry), SNAPSHOT_RECIPIENT_PIN_FILE_NAME);
 var entryAt = (path) => {
   try {
     return lstatSync3(path);
@@ -1276,18 +1322,18 @@ var removedPinFile = (path) => {
   return true;
 };
 var clearSnapshotRecipientPins = (registryDirectory = defaultRegistryDirectory()) => {
-  const accounts = join6(registryDirectory, SNAPSHOT_KEYS_DIRECTORY_NAME);
+  const accounts = join7(registryDirectory, SNAPSHOT_KEYS_DIRECTORY_NAME);
   if (!entryAt(accounts)?.isDirectory()) return false;
-  return readdirSync2(accounts, { withFileTypes: true }).filter((account) => account.isDirectory()).map((account) => removedPinFile(join6(accounts, account.name, SNAPSHOT_RECIPIENT_PIN_FILE_NAME))).includes(true);
+  return readdirSync2(accounts, { withFileTypes: true }).filter((account) => account.isDirectory()).map((account) => removedPinFile(join7(accounts, account.name, SNAPSHOT_RECIPIENT_PIN_FILE_NAME))).includes(true);
 };
 var read = (path) => {
   if (statSync3(path).size > 16384) throw new Error("History registration exceeds its size limit");
-  return storedRegistrationSchema.parse(JSON.parse(readFileSync7(path, "utf8")));
+  return storedRegistrationSchema.parse(JSON.parse(readFileSync6(path, "utf8")));
 };
 var consent = (record) => record.consentOverride ?? readTranscriptPreference() ?? true;
 var withoutTrailingSlash = (url) => url.replace(/\/+$/, "");
 var sameServer = (url, registry) => withoutTrailingSlash(url) === withoutTrailingSlash(registry.baseUrl);
-var fileFor3 = (registry, sessionId) => join6(registry.directory, `${createHash4("sha256").update(accountFor(registry) + sessionId).digest("hex")}.json`);
+var fileFor3 = (registry, sessionId) => join7(registry.directory, `${createHash6("sha256").update(accountFor(registry) + sessionId).digest("hex")}.json`);
 var permitted = (registry, raw) => raw.account === accountFor(registry) && consent(raw) && !raw.drained && (raw.source !== "claude" || !!raw.expectedSiteId || !macOwnsClaudeHooks(raw.cwd)) && (!raw.expectedSiteId || raw.expectedSiteId === raw.verifiedSiteId && !!raw.expectedBaseUrl && sameServer(raw.expectedBaseUrl, registry));
 var registeredTranscriptEnabled = (apiKey, sessionId, registry = cliRegistry(apiKey)) => {
   try {
@@ -1297,12 +1343,12 @@ var registeredTranscriptEnabled = (apiKey, sessionId, registry = cliRegistry(api
   }
 };
 var macOwnsClaudeHooks = (cwd) => [
-  join6(claudeConfigDir(), "settings.json"),
-  join6(cwd, ".claude", "settings.json"),
-  join6(cwd, ".claude", "settings.local.json")
+  join7(claudeConfigDir(), "settings.json"),
+  join7(cwd, ".claude", "settings.json"),
+  join7(cwd, ".claude", "settings.local.json")
 ].some((path) => {
   try {
-    return hookOwnerOf(JSON.parse(readFileSync7(path, "utf8"))) === "app";
+    return hookOwnerOf(JSON.parse(readFileSync6(path, "utf8"))) === "app";
   } catch {
     return false;
   }
@@ -1310,12 +1356,12 @@ var macOwnsClaudeHooks = (cwd) => [
 var TRANSCRIPT_ROOT_NAME = { claude: "projects", codex: "sessions", gemini: "tmp", cursor: "projects", hermes: "hermes-history" };
 var transcriptRoots = (source) => {
   const home = homedir3();
-  if (source === "codex") return [join6(codexHome(), TRANSCRIPT_ROOT_NAME.codex)];
-  if (source === "cursor") return [join6(home, ".cursor", TRANSCRIPT_ROOT_NAME.cursor)];
-  if (source === "hermes") return [join6(home, ".pushary", TRANSCRIPT_ROOT_NAME.hermes)];
-  if (source === "gemini") return [join6(process.env.GEMINI_CLI_HOME || home, ".gemini", "tmp"), join6(home, ".cache", ".gemini", "tmp")];
+  if (source === "codex") return [join7(codexHome(), TRANSCRIPT_ROOT_NAME.codex)];
+  if (source === "cursor") return [join7(home, ".cursor", TRANSCRIPT_ROOT_NAME.cursor)];
+  if (source === "hermes") return [join7(home, ".pushary", TRANSCRIPT_ROOT_NAME.hermes)];
+  if (source === "gemini") return [join7(process.env.GEMINI_CLI_HOME || home, ".gemini", "tmp"), join7(home, ".cache", ".gemini", "tmp")];
   const configured = process.env.CLAUDE_CONFIG_DIR;
-  return [join6(configured || join6(home, ".claude"), TRANSCRIPT_ROOT_NAME.claude), join6(home, ".claude", TRANSCRIPT_ROOT_NAME.claude)];
+  return [join7(configured || join7(home, ".claude"), TRANSCRIPT_ROOT_NAME.claude), join7(home, ".claude", TRANSCRIPT_ROOT_NAME.claude)];
 };
 var isAgentTranscriptRoot = (root, source) => isAbsolute(root) && resolve2(root) === root && basename(root) === TRANSCRIPT_ROOT_NAME[source];
 var acceptedTranscriptRoots = (source, registeredRoot) => typeof registeredRoot === "string" && isAgentTranscriptRoot(registeredRoot, source) ? [...transcriptRoots(source), registeredRoot] : transcriptRoots(source);
@@ -1324,8 +1370,8 @@ var resolvedSourcePath = (path) => {
   try {
     return realpathSync(absolute);
   } catch {
-    const parent = dirname3(absolute);
-    return parent === absolute ? absolute : join6(resolvedSourcePath(parent), basename(absolute));
+    const parent = dirname4(absolute);
+    return parent === absolute ? absolute : join7(resolvedSourcePath(parent), basename(absolute));
   }
 };
 var transcriptRootContaining = (candidate, roots) => {
@@ -1345,7 +1391,7 @@ var captureRegistration = (source, value, registeredRoot) => {
   const segments = relative(root, path).split(sep);
   if (source === "hermes" && (segments.length !== 2 || !/^[a-f0-9]{64}$/.test(segments[0] ?? "") || basename(path) !== `${sessionId}.json`)) return null;
   if (source === "gemini" && (segments.length !== 3 || segments[1] !== "chats" || !basename(path).startsWith("session-"))) return null;
-  if (source === "cursor" && (segments[1] !== "agent-transcripts" || basename(path) !== `${sessionId}.jsonl` || !(segments.length === 3 || segments.length === 4 && basename(dirname3(path)) === sessionId))) return null;
+  if (source === "cursor" && (segments[1] !== "agent-transcripts" || basename(path) !== `${sessionId}.jsonl` || !(segments.length === 3 || segments.length === 4 && basename(dirname4(path)) === sessionId))) return null;
   return { sessionId, cwd: input.cwd, path, source, root };
 };
 var SESSION_END_EVENT = "SessionEnd";
@@ -1419,7 +1465,7 @@ var startRegisteredTranscripts = (apiKey, machineId, options = {}) => {
     try {
       let unreadable = 0;
       const files = readdirSync2(registry.directory).filter((name) => name.endsWith(".json")).flatMap((name) => {
-        const path = join6(registry.directory, name);
+        const path = join7(registry.directory, name);
         try {
           const time = statSync3(path).mtimeMs;
           if (Date.now() - time > TTL) {
@@ -1517,15 +1563,20 @@ var startRegisteredTranscripts = (apiKey, machineId, options = {}) => {
 };
 
 export {
+  recipientPinFile,
+  loadPin,
+  clearPin,
+  fingerprint,
+  verifyTrustedRecipients,
+  assertVerifiedPhone,
+  trustPhoneRecipient,
   redactDraft,
   captureDisplayDraft,
   sessionKeyDirectory,
   loadSessionKey,
   startDraftPublisher,
-  loadPin,
-  clearPin,
-  fingerprint,
   claudeTranscriptPath,
+  snapshotRecipientPinFile,
   clearSnapshotRecipientPins,
   registeredTranscriptEnabled,
   captureRegistration,

package/dist/{chunk-STQEIEYJ.js → chunk-IJKSZTFR.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-PPY5N2E6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-KWWHFTNJ.js";
+} from "./chunk-RC65MCPA.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,

package/dist/{chunk-IOJZPPDB.js → chunk-ILBVL464.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-TQ43EX2E.js";
+} from "./chunk-P6EUHG5X.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-YLWPJ2MP.js → chunk-JBR2FQKG.js}

@@ -4,7 +4,7 @@ import {
   quoteIfNeeded,
   shellDoubleQuoted,
   writeFileAtomic
-} from "./chunk-5YDIHB67.js";
+} from "./chunk-UEWTZZY4.js";
 import {
   cmdShimScriptOf
 } from "./chunk-ZVU6WMMU.js";
@@ -798,7 +798,7 @@ You have Pushary MCP tools that reach the user on their phone. Use them proactiv
 - Before a task of more than two steps, break it into steps and find the forks. Settle by yourself every fork that a file, a command or a tool call can answer, then ask the rest as one numbered round with your recommended answer against each. A question in the terminal is free; a push is not. When the user is at the terminal, ask the whole round there. When the user is away, send only the fork that stops the run. Decide another fork on your recommendation only if it is reversible, spends nothing and stays inside the task, and list it in your final message; ask the rest once the first answer is back.
 - When you are blocked, stuck, or hit an error you cannot resolve on your own, call \`send_notification\` so the user knows, and call \`ask_user\` if you need a decision to continue.
 - When meaningful work finishes while the user is away, or they requested an alert, call \`send_notification\` so the user knows it is done. Skip trivial completions and duplicate reports to someone already reading. Always pass \`context\` with a \`type\` of "task_complete", "error" or "info": it is what tells Pushary this is a task update, so the user's own setting for where updates land can route it.
-- Confirm notifications can offer lock-screen actions; arbitrary choices and text open the app. The Mac notch handles personal account questions, not Partner customer enrollment.
+- Confirm notifications can offer lock-screen actions; arbitrary choices and text open the app. The Mac notch answers questions too.
 - Use \`cancel_question\` to retract a pending question once it is no longer needed.
 - When the user asks to be reminded later, call \`schedule_reminder\` with \`body\` and either \`inMinutes\` or \`at\` with an explicit UTC offset. Confirm the returned time, never guess their timezone, and do not use \`ask_user\` as a reminder. Pushary saves it and delivers after this agent exits. Call with no arguments to list pending reminders or \`cancelReminderId\` to cancel one before dispatch starts.
 - Respect the user's Pushary delivery mode: it decides where an approval is surfaced (phone, terminal, or awareness only), not whether it is required. In Terminal mode do not expect a phone answer; the approval waits in the terminal. If the Pushary hook already gated an action, a single approval is enough, do not ask again.

package/dist/{chunk-S33CCO4J.js → chunk-JVWD6UWG.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-4RZXECJS.js";
+} from "./chunk-CV3ALIG7.js";
 
 // src/answer.ts
 var isDeferAnswer = (value) => value === "defer";

package/dist/{chunk-NP65LEAY.js → chunk-L4FQ3I7N.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-KWWHFTNJ.js";
+} from "./chunk-RC65MCPA.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-7TZDVGMC.js → chunk-LC4OFGTU.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-YLWPJ2MP.js";
+} from "./chunk-JBR2FQKG.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-P4W5TP2X.js → chunk-LVOBBWSN.js}

@@ -7,7 +7,7 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-4PS27SCG.js";
+} from "./chunk-VHO3HV7P.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;