@pushary/agent-hooks 0.89.2 → 0.89.4

package/dist/bin/pushary-notification-hook.js

@@ -4,15 +4,17 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleNotification
-} from "../chunk-6XSC6Z2K.js";
-import "../chunk-J3YDT4HM.js";
-import "../chunk-LGXTBUT4.js";
-import "../chunk-RN3NOEJF.js";
+} from "../chunk-NFI2K2ZQ.js";
+import "../chunk-GKAKAOKC.js";
+import "../chunk-KOPUTJQC.js";
+import "../chunk-2HYPZLYY.js";
+import "../chunk-V37ZXMH3.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
+import "../chunk-6MTNS63X.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-L4C2JXJS.js";
 

package/dist/bin/pushary-opencode-hook.js

@@ -19,7 +19,7 @@ import {
   policyRequestFor,
   readLastPrompt,
   repoKeyFor
-} from "../chunk-6XSC6Z2K.js";
+} from "../chunk-NFI2K2ZQ.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -27,23 +27,26 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-J3YDT4HM.js";
+} from "../chunk-GKAKAOKC.js";
 import {
+  HOOK_FALLBACK_MAX,
   OPENCODE_TOOL_NAMES,
   deriveActionBody,
   deriveBlocker,
   deriveToolTarget,
   describeToolCall,
   scopePathFor
-} from "../chunk-LGXTBUT4.js";
+} from "../chunk-KOPUTJQC.js";
 import {
   getMachineId
-} from "../chunk-RN3NOEJF.js";
+} from "../chunk-2HYPZLYY.js";
+import "../chunk-V37ZXMH3.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
+import "../chunk-6MTNS63X.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
@@ -55,6 +58,7 @@ import {
   gateOutputFor,
   hookWaitClamped,
   hookWaitDeadline,
+  redactSecrets,
   resolveGate
 } from "../chunk-L4C2JXJS.js";
 
@@ -108,9 +112,13 @@ var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3
   return { answered: false };
 };
 var agentNameFor = (input) => `${OPENCODE_AGENT.label} - ${basename(input.cwd ?? process.cwd())}`;
+var describeFor = (input, lookup) => {
+  if (lookup.tool) return describeToolCall(lookup.tool, lookup.input, "hook");
+  return redactSecrets(input.title ?? "").trim().slice(0, HOOK_FALLBACK_MAX) || "this request";
+};
 var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode, pollInterval = 2e3) => {
   const projectName = basename(input.cwd ?? process.cwd());
-  const description = describeToolCall(lookup.tool, lookup.input, "hook");
+  const description = describeFor(input, lookup);
   const result = await askUser(apiKey, {
     question: `Allow ${description}?`,
     type: "confirm",
@@ -147,7 +155,7 @@ var notifyApprovalNeeded = async (apiKey, input, lookup) => {
   try {
     await sendNotification(apiKey, {
       title: "Agent needs approval",
-      body: describeToolCall(lookup.tool, lookup.input, "hook"),
+      body: describeFor(input, lookup),
       agentName: agentNameFor(input),
       sessionId: input.session_id,
       machineId: getMachineId()

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,22 +1,24 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-HEQVIIBN.js";
+} from "../chunk-MZBT2LXW.js";
 import "../chunk-ATBKJNWS.js";
 import "../chunk-VZKXBFUA.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-6XSC6Z2K.js";
-import "../chunk-J3YDT4HM.js";
-import "../chunk-LGXTBUT4.js";
-import "../chunk-RN3NOEJF.js";
+import "../chunk-NFI2K2ZQ.js";
+import "../chunk-GKAKAOKC.js";
+import "../chunk-KOPUTJQC.js";
+import "../chunk-2HYPZLYY.js";
+import "../chunk-V37ZXMH3.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
+import "../chunk-6MTNS63X.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-L4C2JXJS.js";
 

package/dist/bin/pushary-permission-hook.js

@@ -1,22 +1,24 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-HEQVIIBN.js";
+} from "../chunk-MZBT2LXW.js";
 import "../chunk-ATBKJNWS.js";
 import "../chunk-VZKXBFUA.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-6XSC6Z2K.js";
-import "../chunk-J3YDT4HM.js";
-import "../chunk-LGXTBUT4.js";
-import "../chunk-RN3NOEJF.js";
+import "../chunk-NFI2K2ZQ.js";
+import "../chunk-GKAKAOKC.js";
+import "../chunk-KOPUTJQC.js";
+import "../chunk-2HYPZLYY.js";
+import "../chunk-V37ZXMH3.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
+import "../chunk-6MTNS63X.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-L4C2JXJS.js";
 

package/dist/bin/pushary-post-hook.js

@@ -4,15 +4,17 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handlePostToolUse
-} from "../chunk-6XSC6Z2K.js";
-import "../chunk-J3YDT4HM.js";
-import "../chunk-LGXTBUT4.js";
-import "../chunk-RN3NOEJF.js";
+} from "../chunk-NFI2K2ZQ.js";
+import "../chunk-GKAKAOKC.js";
+import "../chunk-KOPUTJQC.js";
+import "../chunk-2HYPZLYY.js";
+import "../chunk-V37ZXMH3.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
+import "../chunk-6MTNS63X.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-L4C2JXJS.js";
 

package/dist/bin/pushary-prompt-hook.js

@@ -4,15 +4,17 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleUserPrompt
-} from "../chunk-6XSC6Z2K.js";
-import "../chunk-J3YDT4HM.js";
-import "../chunk-LGXTBUT4.js";
-import "../chunk-RN3NOEJF.js";
+} from "../chunk-NFI2K2ZQ.js";
+import "../chunk-GKAKAOKC.js";
+import "../chunk-KOPUTJQC.js";
+import "../chunk-2HYPZLYY.js";
+import "../chunk-V37ZXMH3.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
+import "../chunk-6MTNS63X.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-L4C2JXJS.js";
 

package/dist/bin/pushary-session-end-hook.js

@@ -4,15 +4,17 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleSessionEnd
-} from "../chunk-6XSC6Z2K.js";
-import "../chunk-J3YDT4HM.js";
-import "../chunk-LGXTBUT4.js";
-import "../chunk-RN3NOEJF.js";
+} from "../chunk-NFI2K2ZQ.js";
+import "../chunk-GKAKAOKC.js";
+import "../chunk-KOPUTJQC.js";
+import "../chunk-2HYPZLYY.js";
+import "../chunk-V37ZXMH3.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
+import "../chunk-6MTNS63X.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-L4C2JXJS.js";
 

package/dist/bin/pushary-session-start-hook.js

@@ -4,15 +4,17 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleSessionStart
-} from "../chunk-6XSC6Z2K.js";
-import "../chunk-J3YDT4HM.js";
-import "../chunk-LGXTBUT4.js";
-import "../chunk-RN3NOEJF.js";
+} from "../chunk-NFI2K2ZQ.js";
+import "../chunk-GKAKAOKC.js";
+import "../chunk-KOPUTJQC.js";
+import "../chunk-2HYPZLYY.js";
+import "../chunk-V37ZXMH3.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
+import "../chunk-6MTNS63X.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-L4C2JXJS.js";
 

package/dist/bin/pushary-setup.js

@@ -6,13 +6,10 @@ import {
   claudeWired,
   codexWired,
   geminiWired
-} from "../chunk-4VYUMYWD.js";
+} from "../chunk-OBI4YMCT.js";
 import {
   runBrowserLogin
 } from "../chunk-Z3Z4VK5F.js";
-import {
-  ensureDaemonRunning
-} from "../chunk-K42SZKYF.js";
 import {
   describeDetection,
   detectAllAgents,
@@ -24,7 +21,7 @@ import {
   shortenHome,
   vscodeSettingsTargets,
   writeInstructionBlock
-} from "../chunk-LUCFN47K.js";
+} from "../chunk-QH4AA7QV.js";
 import {
   OPENCODE_HOOK_BINARY,
   addOpenCodeMcpServer,
@@ -52,6 +49,10 @@ import {
   guardNodeScript,
   guardedArgv
 } from "../chunk-AIGDBRIJ.js";
+import {
+  ensureDaemonRunning,
+  replaceDaemonService
+} from "../chunk-NLMSSKES.js";
 import "../chunk-XHKBHWLX.js";
 import {
   installGlobally,
@@ -59,6 +60,12 @@ import {
   resolveGlobalBinDir,
   resolveGlobalBinary
 } from "../chunk-PZA7G4CN.js";
+import {
+  reportEvent
+} from "../chunk-NFI2K2ZQ.js";
+import "../chunk-GKAKAOKC.js";
+import "../chunk-KOPUTJQC.js";
+import "../chunk-2HYPZLYY.js";
 import {
   addCodexHookTrust,
   addCodexHooks,
@@ -78,14 +85,7 @@ import {
   geminiSettings,
   pusharyConfigFile,
   vscodePluginDir
-} from "../chunk-VKVHY5HD.js";
-import "../chunk-GIRT7677.js";
-import {
-  reportEvent
-} from "../chunk-6XSC6Z2K.js";
-import "../chunk-J3YDT4HM.js";
-import "../chunk-LGXTBUT4.js";
-import "../chunk-RN3NOEJF.js";
+} from "../chunk-V37ZXMH3.js";
 import {
   confirmAppConnection,
   connectDevice,
@@ -110,13 +110,13 @@ import {
   readConfigFileKey,
   readKeySource,
   writeKey
-} from "../chunk-LALHWDWL.js";
+} from "../chunk-W6NPWHBJ.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import {
   renderCommandHelp
-} from "../chunk-GOEXZ5QJ.js";
+} from "../chunk-GPNOHKFO.js";
 import {
   installClaudeAlias,
   resolveShellRc
@@ -125,12 +125,6 @@ import {
   getPackageVersion,
   isNewerVersion
 } from "../chunk-DINDL2CF.js";
-import {
-  backupFile,
-  readJsonSafe,
-  writeFileAtomic,
-  writeJsonAtomic
-} from "../chunk-6MTNS63X.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-OFRNZWC4.js";
@@ -140,6 +134,12 @@ import {
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
+import {
+  backupFile,
+  readJsonSafe,
+  writeFileAtomic,
+  writeJsonAtomic
+} from "../chunk-6MTNS63X.js";
 import "../chunk-2UMNXADU.js";
 import {
   CURSOR_GATE_EVENTS,
@@ -204,6 +204,18 @@ var describeClosing = (facts) => {
       exitCode: EXIT.PROBLEMS_FOUND
     };
   }
+  if (facts.daemonReady === false) {
+    return {
+      ok: false,
+      headline: "Setup finished with 1 problem.",
+      next: [
+        "Approvals are configured, but this machine cannot start an agent from your phone.",
+        "pushary daemon install   install or repair the background service",
+        "pushary doctor           verify it became reachable"
+      ],
+      exitCode: EXIT.PROBLEMS_FOUND
+    };
+  }
   if (facts.roundTripAnswered === true) {
     return {
       ok: true,
@@ -1133,14 +1145,17 @@ var installCursorUserHooks = (gateScript) => {
   const bundled = readJson(join3(CURSOR_PLUGIN_DIR, "hooks", "hooks.json")).hooks ?? {};
   let userHooks = {};
   if (existsSync(CURSOR_USER_HOOKS)) {
-    try {
-      userHooks = JSON.parse(readFileSync(CURSOR_USER_HOOKS, "utf-8"));
-    } catch {
+    const result = readJsonSafe(CURSOR_USER_HOOKS);
+    if (result.kind === "ok") userHooks = result.value;
+    else {
+      let backup = "";
       try {
-        cpSync(CURSOR_USER_HOOKS, `${CURSOR_USER_HOOKS}.bak`);
+        backup = backupFile(CURSOR_USER_HOOKS);
       } catch {
       }
-      userHooks = {};
+      throw new Error(
+        `Could not parse or read Cursor hooks.json; left it untouched${backup ? ` and backed it up at ${backup}` : ""}. Fix the file, then re-run setup.`
+      );
     }
   }
   const hooks = userHooks.hooks ?? {};
@@ -1796,6 +1811,7 @@ var main = async () => {
     process.exit(EXIT.OK);
   } else if (connectMode === "app" && canShowPairingQr() && !options.skipPhone) {
     console.log(`  ${dim("Pairing with your Pushary app.")}`);
+    console.log(`  ${dim("Agent control requires a paid plan after the trial. Current pricing:")} ${cyan("https://pushary.com/pricing")}`);
     console.log(`  ${dim("No app yet? Get it at")} ${cyan("https://pushary.com/download")}${dim(", this keeps waiting.")}`);
     console.log(`  ${dim("No phone? Ctrl-C, then:")} ${cyan("npx @pushary/agent-hooks setup --connect browser")}`);
     markStep("pair");
@@ -2011,6 +2027,12 @@ var main = async () => {
   const reachChecked = phone !== null;
   const reachesYou = phone?.reachesYou ?? true;
   markStep("closing");
+  const keyIsTrusted = keyFromPairing || keyCheck?.kind === "ok";
+  const daemon = keyIsTrusted && completed.length > 0 ? await (async () => {
+    const service = await replaceDaemonService();
+    return service.kind === "ok" ? ensureDaemonRunning({ spawnDaemon: () => {
+    } }) : { kind: "unavailable", detail: service.detail };
+  })() : null;
   const closing = describeClosing({
     agentsOk,
     configuredNothing,
@@ -2018,12 +2040,11 @@ var main = async () => {
     failed,
     reachChecked,
     reachesYou,
+    daemonReady: daemon === null ? null : daemon.kind === "running" || daemon.kind === "started",
     // null when the check did not run, so it changes nothing. Only an outright
     // `false` is allowed to hold back "Setup complete.".
     roundTripAnswered: roundTrip === null ? null : roundTrip.kind === "answered" ? true : roundTrip.kind === "unanswered" ? false : null
   });
-  const keyIsTrusted = keyFromPairing || keyCheck?.kind === "ok";
-  const daemon = keyIsTrusted && completed.length > 0 ? await ensureDaemonRunning() : null;
   console.log(`  ${closing.ok ? green(bold(closing.headline)) : yellow(bold(closing.headline))}`);
   if (failed.length > 0) {
     console.log();

package/dist/bin/pushary-stats.js

@@ -4,8 +4,8 @@ import {
 } from "../chunk-VZKXBFUA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-SQOFGPNX.js";
-import "../chunk-GOEXZ5QJ.js";
+} from "../chunk-KJ57OPCC.js";
+import "../chunk-GPNOHKFO.js";
 import "../chunk-DINDL2CF.js";
 import "../chunk-KZERVKTD.js";
 import {

package/dist/bin/pushary-status.js

@@ -2,8 +2,9 @@
 import {
   describeLastSeen,
   listMachines
-} from "../chunk-MHBC2XUP.js";
-import "../chunk-RN3NOEJF.js";
+} from "../chunk-VP7SDXYG.js";
+import "../chunk-2HYPZLYY.js";
+import "../chunk-V37ZXMH3.js";
 import {
   describeReach,
   fetchChannels,
@@ -19,17 +20,16 @@ import {
 } from "../chunk-5RUIFDTP.js";
 import {
   readKeySource
-} from "../chunk-LALHWDWL.js";
+} from "../chunk-W6NPWHBJ.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-SQOFGPNX.js";
-import "../chunk-GOEXZ5QJ.js";
+} from "../chunk-KJ57OPCC.js";
+import "../chunk-GPNOHKFO.js";
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-6MTNS63X.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-OFRNZWC4.js";
@@ -39,6 +39,7 @@ import {
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
+import "../chunk-6MTNS63X.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-L4C2JXJS.js";
 

package/dist/bin/pushary-stop-hook.js

@@ -4,15 +4,17 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleStop
-} from "../chunk-6XSC6Z2K.js";
-import "../chunk-J3YDT4HM.js";
-import "../chunk-LGXTBUT4.js";
-import "../chunk-RN3NOEJF.js";
+} from "../chunk-NFI2K2ZQ.js";
+import "../chunk-GKAKAOKC.js";
+import "../chunk-KOPUTJQC.js";
+import "../chunk-2HYPZLYY.js";
+import "../chunk-V37ZXMH3.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
+import "../chunk-6MTNS63X.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-L4C2JXJS.js";
 

package/dist/bin/pushary-stopfailure-hook.js

@@ -4,15 +4,17 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleStopFailure
-} from "../chunk-6XSC6Z2K.js";
-import "../chunk-J3YDT4HM.js";
-import "../chunk-LGXTBUT4.js";
-import "../chunk-RN3NOEJF.js";
+} from "../chunk-NFI2K2ZQ.js";
+import "../chunk-GKAKAOKC.js";
+import "../chunk-KOPUTJQC.js";
+import "../chunk-2HYPZLYY.js";
+import "../chunk-V37ZXMH3.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-OFRNZWC4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
+import "../chunk-6MTNS63X.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-L4C2JXJS.js";
 

package/dist/bin/pushary-suggestions.js

@@ -7,8 +7,8 @@ import {
 } from "../chunk-GMXKITVA.js";
 import {
   exitOnHelpFlag
-} from "../chunk-SQOFGPNX.js";
-import "../chunk-GOEXZ5QJ.js";
+} from "../chunk-KJ57OPCC.js";
+import "../chunk-GPNOHKFO.js";
 import "../chunk-DINDL2CF.js";
 import {
   UsageError

package/dist/bin/pushary-upgrade.js

@@ -15,12 +15,20 @@ import "../chunk-ATBKJNWS.js";
 import {
   guardBinary
 } from "../chunk-AIGDBRIJ.js";
+import {
+  ensureDaemonRunning,
+  replaceDaemonService
+} from "../chunk-NLMSSKES.js";
+import {
+  needsShell
+} from "../chunk-XHKBHWLX.js";
 import {
   execNpm,
   npmErrorMessage,
   resolveGlobalBinDir,
   resolveGlobalBinary
 } from "../chunk-PZA7G4CN.js";
+import "../chunk-2HYPZLYY.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -35,19 +43,18 @@ import {
   hasCodexHooks,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-VKVHY5HD.js";
-import "../chunk-GIRT7677.js";
+} from "../chunk-V37ZXMH3.js";
 import {
   exitOnHelpFlag
-} from "../chunk-SQOFGPNX.js";
-import "../chunk-GOEXZ5QJ.js";
+} from "../chunk-KJ57OPCC.js";
+import "../chunk-GPNOHKFO.js";
 import {
   isNewerVersion
 } from "../chunk-DINDL2CF.js";
+import "../chunk-KZERVKTD.js";
 import {
   readJsonSafe
 } from "../chunk-6MTNS63X.js";
-import "../chunk-KZERVKTD.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
@@ -57,6 +64,7 @@ import "../chunk-L4C2JXJS.js";
 import { existsSync as existsSync2 } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join2 } from "path";
+import { execFileSync } from "child_process";
 
 // src/reapply.ts
 import { join, dirname } from "path";
@@ -263,7 +271,49 @@ var fetchLatestVersion = async () => {
     return void 0;
   }
 };
+var finishUpgrade = async () => {
+  let apiKey;
+  try {
+    apiKey = getApiKey();
+  } catch {
+    apiKey = void 0;
+  }
+  const refreshed = reapplyAllAgents(apiKey);
+  let daemonReady = true;
+  if (apiKey) {
+    const service = await replaceDaemonService();
+    const daemon = service.kind === "ok" ? await ensureDaemonRunning({ spawnDaemon: () => {
+    } }) : null;
+    daemonReady = service.kind === "ok" && (daemon?.kind === "running" || daemon?.kind === "started");
+  }
+  console.log();
+  if (refreshed.length > 0) {
+    console.log("Refreshed so the new hook set is active now:");
+    for (const agent of refreshed) {
+      const parts = [agent.result.hooks ? "hooks" : null, agent.result.mcp ? "MCP key" : null].filter(Boolean).join(" + ");
+      console.log(`  ${agent.label.padEnd(14)} ${parts}`);
+    }
+    if (!apiKey) {
+      console.log();
+      console.log("No key was readable here, so MCP entries kept the key they already had.");
+    }
+  } else {
+    console.log("No agent config on this machine needed refreshing.");
+  }
+  console.log();
+  if (!daemonReady) {
+    console.error("Upgrade installed, but the background service did not start. Run: pushary daemon install");
+    process.exitCode = 1;
+    return;
+  }
+  console.log("Done. Your hooks and background service use the new global install.");
+  console.log("Verify with: pushary doctor");
+};
 var main = async () => {
+  if (process.argv.includes("--finish-upgrade")) {
+    await finishUpgrade();
+    return;
+  }
   const installed = getInstalledVersion();
   if (!installed) {
     const found = detectInstallModes();
@@ -294,29 +344,14 @@ var main = async () => {
     console.error(`Upgrade failed: ${npmErrorMessage(err)}`);
     process.exit(1);
   }
-  let apiKey;
-  try {
-    apiKey = getApiKey();
-  } catch {
-    apiKey = void 0;
-  }
-  const refreshed = reapplyAllAgents(apiKey);
-  console.log();
-  if (refreshed.length > 0) {
-    console.log("Refreshed so the new hook set is active now:");
-    for (const agent of refreshed) {
-      const parts = [agent.result.hooks ? "hooks" : null, agent.result.mcp ? "MCP key" : null].filter(Boolean).join(" + ");
-      console.log(`  ${agent.label.padEnd(14)} ${parts}`);
-    }
-    if (!apiKey) {
-      console.log();
-      console.log("No key was readable here, so MCP entries kept the key they already had.");
-    }
-  } else {
-    console.log("No agent config on this machine needed refreshing.");
+  const upgradedBinary = resolveGlobalBinary("pushary-upgrade");
+  if (!upgradedBinary) {
+    console.error("Upgrade installed, but the new pushary-upgrade binary could not be found on PATH.");
+    process.exit(1);
   }
-  console.log();
-  console.log("Done. Your hooks point at the global install.");
-  console.log("Verify with: pushary doctor");
+  execFileSync(upgradedBinary, ["--finish-upgrade"], {
+    stdio: "inherit",
+    shell: needsShell(upgradedBinary)
+  });
 };
 main();