pushary 1.9.88 → 1.9.90

package/dist/{chunk-JQMOQLM2.js → chunk-53YQO4HL.js}

@@ -1,13 +1,14 @@
 import {
   SESSION_HISTORY_RETENTION_DAYS,
+  readOwnerOnlyJson,
   savedTranscriptReadPositions
-} from "./chunk-I6MNMAS7.js";
+} from "./chunk-7MN3KPHM.js";
 import {
   ensureDaemonRunning
-} from "./chunk-FUVVGIXZ.js";
+} from "./chunk-HT5WOP2M.js";
 import {
   hookOwnerOf
-} from "./chunk-DM5LNEGJ.js";
+} from "./chunk-LJFITB6T.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
@@ -18,33 +19,33 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-4PS27SCG.js";
+} from "./chunk-XO3UJDJE.js";
 import {
   external_exports
 } from "./chunk-XMSDA5WA.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-JOULYVW6.js";
+} from "./chunk-72UCLJJW.js";
 import {
   readTranscriptPreference
-} from "./chunk-2HTE4ECJ.js";
+} from "./chunk-LGQQUQDZ.js";
 import {
   hookMeaning
-} from "./chunk-TXJ65MIV.js";
+} from "./chunk-FAM2TLFC.js";
 import {
   claudeConfigDir,
   codexHome,
   pusharyDir
-} from "./chunk-NOGDU4XS.js";
+} from "./chunk-7EGNVZLK.js";
 import {
   writeJsonAtomic,
   writeJsonAtomicDurable
-} from "./chunk-QOMIFKQL.js";
+} from "./chunk-I7UZODYO.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-NP65LEAY.js";
+} from "./chunk-32F3BWRY.js";
 import {
   PENDING_COMMAND_PREFIX,
   SESSION_HISTORY_BACKFILL_LIMIT_BYTES,
@@ -52,33 +53,33 @@ import {
   isHookSource,
   isRecord,
   redactSecretsFromContent
-} from "./chunk-5TLDFPW6.js";
+} from "./chunk-VE333PL5.js";
 
 // src/transcript-recipient-pin.ts
-import { existsSync, mkdirSync, readFileSync, rmSync } from "fs";
+import { createHash } from "crypto";
+import { mkdirSync, rmSync } from "fs";
 import { homedir } from "os";
 import { dirname, join } from "path";
-var pinFile = () => process.env.PUSHARY_RECIPIENT_PIN_FILE?.trim() || join(homedir(), ".pushary", "recipients.json");
+var recipientPinFile = () => process.env.PUSHARY_RECIPIENT_PIN_FILE?.trim() || join(homedir(), ".pushary", "recipients.json");
 var asPin = (offer) => ({
   phonePublicKey: offer.phonePublicKey,
   providerKeyId: offer.provider?.keyId ?? null,
   providerPublicKey: offer.provider?.publicKey ?? null
 });
-var loadPin = (path = pinFile()) => {
-  if (!existsSync(path)) return null;
+var pinnedRecipientsSchema = external_exports.object({
+  phonePublicKey: external_exports.string().min(1).max(256),
+  providerKeyId: external_exports.string().min(1).max(256).nullable().default(null),
+  providerPublicKey: external_exports.string().min(1).max(256).nullable().default(null)
+});
+var loadPin = (path = recipientPinFile()) => {
   try {
-    const raw = JSON.parse(readFileSync(path, "utf-8"));
-    if (typeof raw.phonePublicKey !== "string" || raw.phonePublicKey.length === 0) return null;
-    return {
-      phonePublicKey: raw.phonePublicKey,
-      providerKeyId: typeof raw.providerKeyId === "string" ? raw.providerKeyId : null,
-      providerPublicKey: typeof raw.providerPublicKey === "string" ? raw.providerPublicKey : null
-    };
-  } catch {
-    return null;
+    return pinnedRecipientsSchema.parse(readOwnerOnlyJson(path, 16384));
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") return null;
+    throw new Error("Existing history trust could not be read. Nothing was replaced.");
   }
 };
-var savePin = (pin, path = pinFile()) => {
+var savePin = (pin, path = recipientPinFile()) => {
   try {
     mkdirSync(dirname(path), { recursive: true, mode: 448 });
     writeJsonAtomicDurable(path, pin, 384);
@@ -89,7 +90,7 @@ var savePin = (pin, path = pinFile()) => {
 };
 var clearPin = () => {
   try {
-    rmSync(pinFile(), { force: true });
+    rmSync(recipientPinFile(), { force: true });
   } catch {
   }
 };
@@ -102,28 +103,78 @@ var verifyRecipients = (offer, pinned) => {
   if (next.providerPublicKey !== pinned.providerPublicKey) changed.push("the compliance recovery key");
   return changed.length === 0 ? { kind: "match" } : { kind: "changed", changed };
 };
-var fingerprint = (publicKey) => {
-  const hex = Buffer.from(publicKey, "base64").toString("hex").toUpperCase();
-  return (hex.slice(0, 8).match(/.{2}/g) ?? []).join(" ");
-};
+var fingerprint = (publicKey) => createHash("sha256").update(publicKey).digest("hex");
 var changedRecipientsMessage = (verdict, offer) => [
   "[pushary] Transcript sync stopped: the keys this machine seals transcripts to have changed.",
   ...verdict.changed.map((what) => `[pushary]   changed: ${what}`),
   `[pushary]   now offered: phone ${fingerprint(offer.phonePublicKey)}${offer.provider ? `, recovery ${offer.provider.keyId.slice(0, 8)}` : ", no recovery key"}`,
   "[pushary] If you reinstalled the app or rotated a key, this is expected. Compare the",
   "[pushary] fingerprint above with the one in the app under Settings, then run:",
-  "[pushary]   pushary transcripts trust --rotate",
+  "[pushary]   pushary transcripts trust --fingerprint <fingerprint-from-phone-settings>",
   "[pushary] Until then nothing is uploaded, so no turn is sealed to a key you have not seen."
 ].join("\n");
 
+// src/transcript-phone-trust.ts
+import { createHash as createHash2 } from "crypto";
+import { mkdirSync as mkdirSync2 } from "fs";
+import { dirname as dirname2, join as join2 } from "path";
+var approvedPhoneSchema = external_exports.object({ version: external_exports.literal(1), sourcePinHash: external_exports.string().regex(/^[a-f0-9]{64}$/), phonePublicKey: external_exports.string().min(1).max(256) });
+var pinHash = (pin) => createHash2("sha256").update(JSON.stringify(pin)).digest("hex");
+var approvalFile = (path, pin, publicKey) => join2(`${path}.trusted-phones`, `${pinHash(pin)}-${fingerprint(publicKey)}.json`);
+var sameRecoveryRecipient = (offer, pin) => (offer.provider?.keyId ?? null) === pin.providerKeyId && (offer.provider?.publicKey ?? null) === pin.providerPublicKey;
+var canonicalPublicKey = (key) => {
+  const bytes = Buffer.from(key, "base64");
+  return bytes.length === 32 && bytes.toString("base64") === key;
+};
+var phoneWasApproved = (offer, pin, path) => {
+  try {
+    const approval = approvedPhoneSchema.parse(readOwnerOnlyJson(approvalFile(path, pin, offer.phonePublicKey), 16384));
+    if (approval.sourcePinHash !== pinHash(pin) || approval.phonePublicKey !== offer.phonePublicKey) throw new Error("Mismatched approval");
+    return true;
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") return false;
+    throw new Error("Saved phone verification could not be read. Nothing was replaced.");
+  }
+};
+var verifyTrustedRecipients = (offer, path = recipientPinFile()) => {
+  const pin = loadPin(path);
+  const verdict = verifyRecipients(offer, pin);
+  if (verdict.kind !== "changed" || !pin || !sameRecoveryRecipient(offer, pin)) return verdict;
+  return phoneWasApproved(offer, pin, path) ? { kind: "match" } : verdict;
+};
+var verifyAnchoredRecipients = (offer, path = recipientPinFile(), anchorPath) => {
+  const verdict = verifyTrustedRecipients(offer, path);
+  if (verdict.kind !== "first-use" || anchorPath === void 0 || loadPin(anchorPath) === null) return verdict;
+  const anchored = verifyTrustedRecipients(offer, anchorPath);
+  return anchored.kind === "match" ? verdict : anchored;
+};
+var assertVerifiedPhone = (offer, pin, expectedFingerprint) => {
+  if (!canonicalPublicKey(offer.phonePublicKey) || fingerprint(offer.phonePublicKey) !== expectedFingerprint.trim().toLowerCase()) {
+    throw new Error("The fingerprint does not match this phone. Nothing was changed.");
+  }
+  if (!pin) throw new Error("No existing history trust was found. Nothing was changed.");
+  if (!sameRecoveryRecipient(offer, pin)) throw new Error("The recovery recipient also changed. Phone verification cannot approve that change.");
+};
+var trustPhoneRecipient = (request) => {
+  const { offer, pinFile } = request;
+  const pin = loadPin(pinFile);
+  assertVerifiedPhone(offer, pin, request.expectedFingerprint);
+  if (!pin) throw new Error("No existing history trust was found.");
+  if (verifyTrustedRecipients(offer, pinFile).kind === "match") return "already_trusted";
+  const path = approvalFile(pinFile, pin, offer.phonePublicKey);
+  mkdirSync2(dirname2(path), { recursive: true, mode: 448 });
+  writeJsonAtomicDurable(path, { version: 1, sourcePinHash: pinHash(pin), phonePublicKey: offer.phonePublicKey }, 384);
+  return "trusted";
+};
+
 // src/transcript-registration.ts
-import { createHash as createHash4 } from "crypto";
-import { lstatSync as lstatSync3, readFileSync as readFileSync7, readdirSync as readdirSync2, realpathSync, statSync as statSync3, unlinkSync as unlinkSync2 } from "fs";
-import { basename, dirname as dirname3, isAbsolute, join as join6, relative, resolve as resolve2, sep } from "path";
+import { createHash as createHash6 } from "crypto";
+import { lstatSync as lstatSync3, readFileSync as readFileSync6, readdirSync as readdirSync2, realpathSync, statSync as statSync3, unlinkSync as unlinkSync2 } from "fs";
+import { basename, dirname as dirname4, isAbsolute, join as join7, relative, resolve as resolve2, sep } from "path";
 
 // src/claude-display-draft.ts
-import { closeSync, fstatSync, lstatSync, openSync, readFileSync as readFileSync2, readSync, unlinkSync } from "fs";
-import { join as join2 } from "path";
+import { closeSync, fstatSync, lstatSync, openSync, readFileSync, readSync, unlinkSync } from "fs";
+import { join as join3 } from "path";
 
 // src/transcript-redaction.ts
 var redactDraft = (text, complete = false) => {
@@ -176,14 +227,14 @@ var stateSchema = external_exports.object({
   startedAt: external_exports.number().int().positive(),
   updatedAt: external_exports.number().int().positive()
 });
-var fileFor = (id, directory) => join2(directory, `${id}.display`);
+var fileFor = (id, directory) => join3(directory, `${id}.display`);
 var readState = (sessionId, runtime) => {
   if (!identifier.safeParse(sessionId).success) return null;
   try {
     const path = fileFor(sessionId, runtime.directory);
     const info = lstatSync(path);
     if (!info.isFile() || info.nlink !== 1 || info.size > MAX_TAIL || (info.mode & 511) !== 384) return null;
-    const envelope = external_exports.object({ content: external_exports.string() }).parse(JSON.parse(readFileSync2(path, "utf8")));
+    const envelope = external_exports.object({ content: external_exports.string() }).parse(JSON.parse(readFileSync(path, "utf8")));
     const plain = decryptRecord(envelope.content, runtime.sessionKey);
     if (!plain) return null;
     const state = stateSchema.parse(JSON.parse(plain));
@@ -266,18 +317,18 @@ var readDisplayDraft = (sessionId, runtime) => {
 };
 
 // src/transcript-session-key.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, readdirSync, rmSync as rmSync2, statSync } from "fs";
+import { existsSync, mkdirSync as mkdirSync3, readFileSync as readFileSync2, readdirSync, rmSync as rmSync2, statSync } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join3 } from "path";
-var sessionKeyDirectory = () => process.env.PUSHARY_SESSION_KEY_DIR?.trim() || join3(homedir2(), ".pushary", "sessions");
+import { join as join4 } from "path";
+var sessionKeyDirectory = () => process.env.PUSHARY_SESSION_KEY_DIR?.trim() || join4(homedir2(), ".pushary", "sessions");
 var SESSION_DISPLAY_TTL_MS = 48 * 60 * 60 * 1e3;
 var SAFE_SESSION_ID = /^[A-Za-z0-9._-]{1,128}$/;
-var fileFor2 = (sessionId, directory) => SAFE_SESSION_ID.test(sessionId) ? join3(directory, `${sessionId}.json`) : null;
+var fileFor2 = (sessionId, directory) => SAFE_SESSION_ID.test(sessionId) ? join4(directory, `${sessionId}.json`) : null;
 var loadSessionKey = (sessionId, directory = sessionKeyDirectory()) => {
   const path = fileFor2(sessionId, directory);
-  if (!path || !existsSync2(path)) return null;
+  if (!path || !existsSync(path)) return null;
   try {
-    const raw = JSON.parse(readFileSync3(path, "utf-8"));
+    const raw = JSON.parse(readFileSync2(path, "utf-8"));
     const key = typeof raw.sessionKey === "string" ? Buffer.from(raw.sessionKey, "base64") : null;
     if (!key || key.length !== 32) return null;
     return {
@@ -296,7 +347,7 @@ var saveSessionKey = (sessionId, value, directory = sessionKeyDirectory()) => {
   const path = fileFor2(sessionId, directory);
   if (!path) return false;
   try {
-    mkdirSync2(directory, { recursive: true, mode: 448 });
+    mkdirSync3(directory, { recursive: true, mode: 448 });
     writeJsonAtomicDurable(path, {
       sessionKey: Buffer.from(value.sessionKey).toString("base64"),
       wrappedKey: value.wrappedKey,
@@ -311,12 +362,12 @@ var saveSessionKey = (sessionId, value, directory = sessionKeyDirectory()) => {
   }
 };
 var sweepStaleSessionDisplays = (now = Date.now(), dir = sessionKeyDirectory()) => {
-  if (!existsSync2(dir)) return 0;
+  if (!existsSync(dir)) return 0;
   let removed = 0;
   try {
     for (const name of readdirSync(dir)) {
       if (!name.endsWith(".display")) continue;
-      const path = join3(dir, name);
+      const path = join4(dir, name);
       try {
         if (now - statSync(path).mtimeMs <= SESSION_DISPLAY_TTL_MS) continue;
         rmSync2(path, { force: true });
@@ -426,9 +477,9 @@ var startDisplayPublisher = (options) => {
 };
 
 // src/transcript-reader.ts
-import { createHash as createHash3 } from "crypto";
-import { join as join4 } from "path";
-import { closeSync as closeSync3, fstatSync as fstatSync3, openSync as openSync3, readFileSync as readFileSync6, readSync as readSync2, statSync as statSync2 } from "fs";
+import { createHash as createHash5 } from "crypto";
+import { join as join5 } from "path";
+import { closeSync as closeSync3, fstatSync as fstatSync3, openSync as openSync3, readFileSync as readFileSync5, readSync as readSync2, statSync as statSync2 } from "fs";
 
 // src/transcript-source.ts
 var normalizeTranscriptLines = (lines, source) => {
@@ -483,10 +534,10 @@ var transcriptLinesSince = (lines, oldestLineMs, dropCompactionSummaries) => lin
 });
 
 // src/transcript-snapshot-file.ts
-import { closeSync as closeSync2, fstatSync as fstatSync2, openSync as openSync2, readFileSync as readFileSync4 } from "fs";
+import { closeSync as closeSync2, fstatSync as fstatSync2, openSync as openSync2, readFileSync as readFileSync3 } from "fs";
 
 // src/transcript-snapshot-source.ts
-import { createHash } from "crypto";
+import { createHash as createHash3 } from "crypto";
 var identity = external_exports.string().min(1).max(256);
 var timestamp = external_exports.string().refine((value) => Number.isFinite(Date.parse(value)));
 var geminiTool = external_exports.object({ id: identity, name: external_exports.string(), args: external_exports.record(external_exports.string(), external_exports.unknown()), result: external_exports.unknown().optional(), status: external_exports.string() });
@@ -612,7 +663,7 @@ var parseCursorSnapshot = (text) => {
     const record = JSON.parse(line);
     if (isRecord(record) && (record.type === "metadata" || record.type === "turn_ended")) continue;
     const message = cursorMessage.parse(record);
-    const fingerprint2 = createHash("sha256").update(canonicalJsonText(message)).digest("hex");
+    const fingerprint2 = createHash3("sha256").update(canonicalJsonText(message)).digest("hex");
     const occurrence = occurrences.get(fingerprint2) ?? 0;
     occurrences.set(fingerprint2, occurrence + 1);
     messages.push({ id: `cursor:${fingerprint2}:${occurrence}`, role: message.role, content: message.message.content });
@@ -648,7 +699,7 @@ var readTranscriptSnapshot = (path, source, sessionId) => {
   try {
     const before = fstatSync2(descriptor);
     if (!before.isFile() || before.size === 0 || before.size > MAXIMUM_SNAPSHOT_FILE_BYTES) throw new Error("History snapshot is empty or exceeds its size limit");
-    const text = readFileSync4(descriptor, "utf8");
+    const text = readFileSync3(descriptor, "utf8");
     const after = fstatSync2(descriptor);
     if (before.size !== after.size || before.mtimeMs !== after.mtimeMs) throw new Error("History snapshot changed while reading");
     let messages;
@@ -670,11 +721,11 @@ var readTranscriptSnapshot = (path, source, sessionId) => {
 };
 
 // src/transcript-snapshot-journal.ts
-import { lstatSync as lstatSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync5 } from "fs";
-import { dirname as dirname2 } from "path";
+import { lstatSync as lstatSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync4 } from "fs";
+import { dirname as dirname3 } from "path";
 
 // src/transcript-projection.ts
-import { createHash as createHash2 } from "crypto";
+import { createHash as createHash4 } from "crypto";
 var newestWithinUploadLimits = (messages, limits) => {
   let start = messages.length;
   let contentBytes = 0;
@@ -703,7 +754,7 @@ var projectTranscriptSnapshot = (previous, messages, older) => {
     const order = message.sourcePosition;
     if (!message.id || message.id.length > 256 || Object.hasOwn(entries, message.id)) throw new Error("Invalid or duplicate history message identity");
     const record = { timestamp: message.timestamp, observedAtMs: message.observedAtMs, historyMessage: { role: message.role, content: message.content } };
-    const digest = createHash2("sha256").update(JSON.stringify(record)).digest("hex");
+    const digest = createHash4("sha256").update(JSON.stringify(record)).digest("hex");
     entries[message.id] = { digest, order };
     const earlier = previous?.entries[message.id];
     if (earlier?.digest === digest && earlier.order === order) continue;
@@ -748,7 +799,7 @@ var TranscriptSnapshotJournal = class {
       return;
     }
     if (!info.isFile() || info.nlink !== 1 || info.size > MAXIMUM_JOURNAL_BYTES || process.getuid && (info.uid !== process.getuid() || (info.mode & 511) !== 384)) throw new Error("Unsafe history checkpoint");
-    const saved = journalSchema.parse(JSON.parse(readFileSync5(path, "utf8")));
+    const saved = journalSchema.parse(JSON.parse(readFileSync4(path, "utf8")));
     if (saved.binding !== binding) throw new Error("History checkpoint belongs to another source");
     this.current = saved.epochStartedAtMs === epochStartedAtMs ? saved : { ...saved, epochStartedAtMs, initialized: false, observedAtMs: {}, pending: null, excludedIds: [], projection: { revision: Math.max(saved.projection?.revision ?? 0, saved.pending?.next.revision ?? 0), entries: {} } };
   }
@@ -799,7 +850,7 @@ var TranscriptSnapshotJournal = class {
   }
   store(next) {
     if (Buffer.byteLength(JSON.stringify(next)) > MAXIMUM_JOURNAL_BYTES) throw new Error("History checkpoint exceeds its size limit");
-    mkdirSync3(dirname2(this.path), { recursive: true, mode: 448 });
+    mkdirSync4(dirname3(this.path), { recursive: true, mode: 448 });
     writeJsonAtomicDurable(this.path, next, 384);
     this.current = journalSchema.parse(next);
   }
@@ -895,7 +946,7 @@ var appendOnlyReader = (path, source, epoch) => ({
   read(retentionDays, nowMs) {
     const version = sourceVersion(path);
     const read2 = epoch ? linesSeenDuringEpoch(epoch, path, source, nowMs, retentionDays) : null;
-    const lines = read2?.lines ?? normalizeTranscriptLines(readFileSync6(path, "utf8").split("\n"), source);
+    const lines = read2?.lines ?? normalizeTranscriptLines(readFileSync5(path, "utf8").split("\n"), source);
     return {
       lines,
       acknowledge() {
@@ -911,8 +962,8 @@ var caughtUpReadStillCurrent = (caughtUp, version, nowMs) => caughtUp !== null &
 var UNCHANGED_SNAPSHOT_READ = { lines: [], acknowledge: () => "unchanged" };
 var snapshotReader = (options, source) => {
   const { path, epoch } = options;
-  const binding = createHash3("sha256").update(JSON.stringify([options.baseUrl, options.apiKey, options.machineId, options.sessionId, source, path])).digest("hex");
-  const journalPath = join4(options.keyDirectory, "snapshots", binding + ".json");
+  const binding = createHash5("sha256").update(JSON.stringify([options.baseUrl, options.apiKey, options.machineId, options.sessionId, source, path])).digest("hex");
+  const journalPath = join5(options.keyDirectory, "snapshots", binding + ".json");
   const epochStart = epoch?.startedAtMs ?? 0;
   const backfill = epoch ? epoch.backfill : SESSION_HISTORY_BACKFILL;
   let journal;
@@ -967,11 +1018,11 @@ var transcriptHealthReporter = (target) => {
 };
 
 // src/transcript-sync.ts
-import { join as join5, resolve } from "path";
+import { join as join6, resolve } from "path";
 var claudeTranscriptPath = (cwd, sessionId) => {
   const projectId = resolve(cwd).replace(/[^a-zA-Z0-9-]/g, "-");
   const configDir = claudeConfigDir();
-  return join5(configDir, "projects", projectId, `${sessionId}.jsonl`);
+  return join6(configDir, "projects", projectId, `${sessionId}.jsonl`);
 };
 var createSyncState = () => ({
   sessionKey: null,
@@ -1102,7 +1153,7 @@ var startTranscriptSync = (opts) => {
       recipientFailure = reason;
     });
     if (!offer) return null;
-    const verdict = verifyRecipients(offer, loadPin(opts.storage?.recipientPinFile));
+    const verdict = verifyAnchoredRecipients(offer, opts.storage?.recipientPinFile, opts.storage?.firstUseAnchorPinFile);
     if (verdict.kind === "first-use" && !savePin(verdict.pin, opts.storage?.recipientPinFile)) return null;
     if (verdict.kind === "changed") {
       recipientFailure = "phone_key_changed";
@@ -1168,13 +1219,14 @@ var startTranscriptSync = (opts) => {
         if (ending) opts.onDrained?.();
         return;
       }
+      waitingForRecipients = true;
       const recipients = await fetchPinnedRecipients();
       if (!recipients) {
-        waitingForRecipients = true;
         if (recipientFailure === "off_for_workspace") passOverConversationWhileHistoryIsOff();
         await reportHealth(recipientFailure);
         return;
       }
+      waitingForRecipients = false;
       if (reader.requiresRevisions && recipients.phoneReadsTranscriptRevisions !== true) {
         await reportHealth("phone_upgrade_required");
         return;
@@ -1253,15 +1305,15 @@ var storedRegistrationSchema = external_exports.object({
   endedAt: external_exports.number().positive().optional(),
   drained: external_exports.boolean().optional()
 });
-var defaultRegistryDirectory = () => process.env.PUSHARY_TRANSCRIPT_REGISTRY_DIR || join6(pusharyDir(), "transcript-capture");
+var defaultRegistryDirectory = () => process.env.PUSHARY_TRANSCRIPT_REGISTRY_DIR || join7(pusharyDir(), "transcript-capture");
 var cliRegistry = (apiKey = getApiKey()) => ({ apiKey, baseUrl: getBaseUrl(), directory: defaultRegistryDirectory() });
-var accountFor = (registry) => createHash4("sha256").update(`${registry.baseUrl}\0${registry.apiKey}`).digest("hex");
+var accountFor = (registry) => createHash6("sha256").update(`${registry.baseUrl}\0${registry.apiKey}`).digest("hex");
 var TTL = 48 * 60 * 60 * 1e3;
-var registeredReadPositionsFile = (registry) => join6(registry.directory, "read-positions", `${accountFor(registry)}.json`);
+var registeredReadPositionsFile = (registry) => join7(registry.directory, "read-positions", `${accountFor(registry)}.json`);
 var SNAPSHOT_KEYS_DIRECTORY_NAME = "snapshot-keys";
 var SNAPSHOT_RECIPIENT_PIN_FILE_NAME = "recipients.json";
-var snapshotKeyDirectory = (registry) => join6(registry.directory, SNAPSHOT_KEYS_DIRECTORY_NAME, accountFor(registry));
-var snapshotRecipientPinFile = (registry) => join6(snapshotKeyDirectory(registry), SNAPSHOT_RECIPIENT_PIN_FILE_NAME);
+var snapshotKeyDirectory = (registry) => join7(registry.directory, SNAPSHOT_KEYS_DIRECTORY_NAME, accountFor(registry));
+var snapshotRecipientPinFile = (registry = cliRegistry()) => join7(snapshotKeyDirectory(registry), SNAPSHOT_RECIPIENT_PIN_FILE_NAME);
 var entryAt = (path) => {
   try {
     return lstatSync3(path);
@@ -1276,18 +1328,18 @@ var removedPinFile = (path) => {
   return true;
 };
 var clearSnapshotRecipientPins = (registryDirectory = defaultRegistryDirectory()) => {
-  const accounts = join6(registryDirectory, SNAPSHOT_KEYS_DIRECTORY_NAME);
+  const accounts = join7(registryDirectory, SNAPSHOT_KEYS_DIRECTORY_NAME);
   if (!entryAt(accounts)?.isDirectory()) return false;
-  return readdirSync2(accounts, { withFileTypes: true }).filter((account) => account.isDirectory()).map((account) => removedPinFile(join6(accounts, account.name, SNAPSHOT_RECIPIENT_PIN_FILE_NAME))).includes(true);
+  return readdirSync2(accounts, { withFileTypes: true }).filter((account) => account.isDirectory()).map((account) => removedPinFile(join7(accounts, account.name, SNAPSHOT_RECIPIENT_PIN_FILE_NAME))).includes(true);
 };
 var read = (path) => {
   if (statSync3(path).size > 16384) throw new Error("History registration exceeds its size limit");
-  return storedRegistrationSchema.parse(JSON.parse(readFileSync7(path, "utf8")));
+  return storedRegistrationSchema.parse(JSON.parse(readFileSync6(path, "utf8")));
 };
 var consent = (record) => record.consentOverride ?? readTranscriptPreference() ?? true;
 var withoutTrailingSlash = (url) => url.replace(/\/+$/, "");
 var sameServer = (url, registry) => withoutTrailingSlash(url) === withoutTrailingSlash(registry.baseUrl);
-var fileFor3 = (registry, sessionId) => join6(registry.directory, `${createHash4("sha256").update(accountFor(registry) + sessionId).digest("hex")}.json`);
+var fileFor3 = (registry, sessionId) => join7(registry.directory, `${createHash6("sha256").update(accountFor(registry) + sessionId).digest("hex")}.json`);
 var permitted = (registry, raw) => raw.account === accountFor(registry) && consent(raw) && !raw.drained && (raw.source !== "claude" || !!raw.expectedSiteId || !macOwnsClaudeHooks(raw.cwd)) && (!raw.expectedSiteId || raw.expectedSiteId === raw.verifiedSiteId && !!raw.expectedBaseUrl && sameServer(raw.expectedBaseUrl, registry));
 var registeredTranscriptEnabled = (apiKey, sessionId, registry = cliRegistry(apiKey)) => {
   try {
@@ -1297,12 +1349,12 @@ var registeredTranscriptEnabled = (apiKey, sessionId, registry = cliRegistry(api
   }
 };
 var macOwnsClaudeHooks = (cwd) => [
-  join6(claudeConfigDir(), "settings.json"),
-  join6(cwd, ".claude", "settings.json"),
-  join6(cwd, ".claude", "settings.local.json")
+  join7(claudeConfigDir(), "settings.json"),
+  join7(cwd, ".claude", "settings.json"),
+  join7(cwd, ".claude", "settings.local.json")
 ].some((path) => {
   try {
-    return hookOwnerOf(JSON.parse(readFileSync7(path, "utf8"))) === "app";
+    return hookOwnerOf(JSON.parse(readFileSync6(path, "utf8"))) === "app";
   } catch {
     return false;
   }
@@ -1310,12 +1362,12 @@ var macOwnsClaudeHooks = (cwd) => [
 var TRANSCRIPT_ROOT_NAME = { claude: "projects", codex: "sessions", gemini: "tmp", cursor: "projects", hermes: "hermes-history" };
 var transcriptRoots = (source) => {
   const home = homedir3();
-  if (source === "codex") return [join6(codexHome(), TRANSCRIPT_ROOT_NAME.codex)];
-  if (source === "cursor") return [join6(home, ".cursor", TRANSCRIPT_ROOT_NAME.cursor)];
-  if (source === "hermes") return [join6(home, ".pushary", TRANSCRIPT_ROOT_NAME.hermes)];
-  if (source === "gemini") return [join6(process.env.GEMINI_CLI_HOME || home, ".gemini", "tmp"), join6(home, ".cache", ".gemini", "tmp")];
+  if (source === "codex") return [join7(codexHome(), TRANSCRIPT_ROOT_NAME.codex)];
+  if (source === "cursor") return [join7(home, ".cursor", TRANSCRIPT_ROOT_NAME.cursor)];
+  if (source === "hermes") return [join7(home, ".pushary", TRANSCRIPT_ROOT_NAME.hermes)];
+  if (source === "gemini") return [join7(process.env.GEMINI_CLI_HOME || home, ".gemini", "tmp"), join7(home, ".cache", ".gemini", "tmp")];
   const configured = process.env.CLAUDE_CONFIG_DIR;
-  return [join6(configured || join6(home, ".claude"), TRANSCRIPT_ROOT_NAME.claude), join6(home, ".claude", TRANSCRIPT_ROOT_NAME.claude)];
+  return [join7(configured || join7(home, ".claude"), TRANSCRIPT_ROOT_NAME.claude), join7(home, ".claude", TRANSCRIPT_ROOT_NAME.claude)];
 };
 var isAgentTranscriptRoot = (root, source) => isAbsolute(root) && resolve2(root) === root && basename(root) === TRANSCRIPT_ROOT_NAME[source];
 var acceptedTranscriptRoots = (source, registeredRoot) => typeof registeredRoot === "string" && isAgentTranscriptRoot(registeredRoot, source) ? [...transcriptRoots(source), registeredRoot] : transcriptRoots(source);
@@ -1324,8 +1376,8 @@ var resolvedSourcePath = (path) => {
   try {
     return realpathSync(absolute);
   } catch {
-    const parent = dirname3(absolute);
-    return parent === absolute ? absolute : join6(resolvedSourcePath(parent), basename(absolute));
+    const parent = dirname4(absolute);
+    return parent === absolute ? absolute : join7(resolvedSourcePath(parent), basename(absolute));
   }
 };
 var transcriptRootContaining = (candidate, roots) => {
@@ -1345,7 +1397,7 @@ var captureRegistration = (source, value, registeredRoot) => {
   const segments = relative(root, path).split(sep);
   if (source === "hermes" && (segments.length !== 2 || !/^[a-f0-9]{64}$/.test(segments[0] ?? "") || basename(path) !== `${sessionId}.json`)) return null;
   if (source === "gemini" && (segments.length !== 3 || segments[1] !== "chats" || !basename(path).startsWith("session-"))) return null;
-  if (source === "cursor" && (segments[1] !== "agent-transcripts" || basename(path) !== `${sessionId}.jsonl` || !(segments.length === 3 || segments.length === 4 && basename(dirname3(path)) === sessionId))) return null;
+  if (source === "cursor" && (segments[1] !== "agent-transcripts" || basename(path) !== `${sessionId}.jsonl` || !(segments.length === 3 || segments.length === 4 && basename(dirname4(path)) === sessionId))) return null;
   return { sessionId, cwd: input.cwd, path, source, root };
 };
 var SESSION_END_EVENT = "SessionEnd";
@@ -1419,7 +1471,7 @@ var startRegisteredTranscripts = (apiKey, machineId, options = {}) => {
     try {
       let unreadable = 0;
       const files = readdirSync2(registry.directory).filter((name) => name.endsWith(".json")).flatMap((name) => {
-        const path = join6(registry.directory, name);
+        const path = join7(registry.directory, name);
         try {
           const time = statSync3(path).mtimeMs;
           if (Date.now() - time > TTL) {
@@ -1470,7 +1522,8 @@ var startRegisteredTranscripts = (apiKey, machineId, options = {}) => {
         const current = () => read(registration.registrationPath);
         const keyStorage = storage ?? (registration.source === "claude" || registration.source === "codex" ? void 0 : {
           sessionKeyDirectory: snapshotKeyDirectory(registry),
-          recipientPinFile: snapshotRecipientPinFile(registry)
+          recipientPinFile: snapshotRecipientPinFile(registry),
+          firstUseAnchorPinFile: recipientPinFile()
         });
         active.set(id, { path: registration.path, stop: startTranscriptSync({
           apiKey,
@@ -1517,15 +1570,20 @@ var startRegisteredTranscripts = (apiKey, machineId, options = {}) => {
 };
 
 export {
+  recipientPinFile,
+  loadPin,
+  clearPin,
+  fingerprint,
+  verifyTrustedRecipients,
+  assertVerifiedPhone,
+  trustPhoneRecipient,
   redactDraft,
   captureDisplayDraft,
   sessionKeyDirectory,
   loadSessionKey,
   startDraftPublisher,
-  loadPin,
-  clearPin,
-  fingerprint,
   claudeTranscriptPath,
+  snapshotRecipientPinFile,
   clearSnapshotRecipientPins,
   registeredTranscriptEnabled,
   captureRegistration,

package/dist/{chunk-6RFDH4JU.js → chunk-5DTOMJVD.js}

@@ -1,9 +1,9 @@
 import {
   absoluteUrl
-} from "./chunk-4TT2ZFWZ.js";
+} from "./chunk-JJNO3ACZ.js";
 import {
   KEY_SCOPE
-} from "./chunk-5TLDFPW6.js";
+} from "./chunk-VE333PL5.js";
 
 // src/cli/approval-settings-pages.ts
 var API_KEYS_PATH = "/dashboard/agent/settings";

package/dist/{chunk-3ZE7VQOU.js → chunk-6B4O7XNC.js}

@@ -4,7 +4,7 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "./chunk-P4W5TP2X.js";
+} from "./chunk-6LJOCQBB.js";
 import {
   CommandReceipts,
   controllerCommandSchema
@@ -14,24 +14,24 @@ import {
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership
-} from "./chunk-OBS7O22Q.js";
+} from "./chunk-NMDWW3EY.js";
 import {
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
 import {
   repoKeyFor
-} from "./chunk-OUIUIJV4.js";
+} from "./chunk-K6QLKUCT.js";
 import {
   isAskUserResponse,
   isDecisionStopped,
   isWaitForAnswerResponse,
   withdrawQuestion,
   writeDegraded
-} from "./chunk-3XJL2M7H.js";
+} from "./chunk-FSJYYZ3G.js";
 import {
   callMcpTool,
   isRetryable
-} from "./chunk-ZEPS4KIK.js";
+} from "./chunk-NWSGMYX7.js";
 import {
   AGENT_QUESTION_DESCRIPTION_MAX,
   AGENT_QUESTION_HEADER_MAX,
@@ -52,7 +52,7 @@ import {
   parseCodexQuestions,
   planElicitationAsk,
   readElicitationFields
-} from "./chunk-5TLDFPW6.js";
+} from "./chunk-VE333PL5.js";
 
 // src/codex-question-owner.ts
 import { createHash } from "crypto";

package/dist/{chunk-P4W5TP2X.js → chunk-6LJOCQBB.js}

@@ -7,7 +7,7 @@ import {
   recordSealerFor,
   uploadTranscriptRecords,
   wrapSessionKey
-} from "./chunk-4PS27SCG.js";
+} from "./chunk-XO3UJDJE.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;

package/dist/{chunk-CAXE3TYX.js → chunk-6P4II3ZL.js}

@@ -4,13 +4,13 @@ import {
   configFailureKind,
   retryAgentCommand,
   writeSetupConfigFile
-} from "./chunk-N7OMDSXK.js";
+} from "./chunk-2EOTXWFK.js";
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-QQCGYHYG.js";
+} from "./chunk-3N4GETIW.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-2HTE4ECJ.js";
+} from "./chunk-LGQQUQDZ.js";
 import {
   CLINE_SERVER_NAME_TAKEN,
   CLINE_SETTINGS_REFUSALS,
@@ -32,13 +32,13 @@ import {
   withClinePusharyServer,
   withRefreshedClineKey,
   withoutClinePusharyServer
-} from "./chunk-NOGDU4XS.js";
+} from "./chunk-7EGNVZLK.js";
 import {
   readJsonSafe,
   resolveGlobalBinary,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-QOMIFKQL.js";
+} from "./chunk-I7UZODYO.js";
 
 // src/fx-config.ts
 var FX_SERVER_NAME = "pushary";