@pushary/agent-hooks 0.89.8 → 0.89.10

package/dist/bin/pushary-logout.js

@@ -4,14 +4,14 @@ import {
   codexConfigToml,
   cursorUserMcp,
   geminiSettings
-} from "../chunk-GMI5QZLG.js";
+} from "../chunk-QA72MKIT.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   clearKey,
   readKeySource
-} from "../chunk-V6N4Q223.js";
+} from "../chunk-3CUDMTL4.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -21,7 +21,7 @@ import {
 import "../chunk-3XTFX4CL.js";
 import "../chunk-BC3VCZ3E.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-OFRNZWC4.js";
+import "../chunk-IUWRVTQK.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
@@ -32,7 +32,7 @@ import "../chunk-XX2V4QS5.js";
 import {
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-L4C2JXJS.js";
+import "../chunk-X6RXX2NF.js";
 
 // bin/pushary-logout.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-mode.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   exitOnFailedResponse
-} from "../chunk-SS72Z7FV.js";
-import "../chunk-I5L6SK5V.js";
+} from "../chunk-253WC6O5.js";
+import "../chunk-BLODMQKJ.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
@@ -25,7 +25,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-L4C2JXJS.js";
+import "../chunk-X6RXX2NF.js";
 
 // bin/pushary-mode.ts
 exitOnHelpFlag("mode");

package/dist/bin/pushary-notification-hook.js

@@ -4,19 +4,19 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleNotification
-} from "../chunk-4XZCDSNG.js";
-import "../chunk-GKAKAOKC.js";
-import "../chunk-KOPUTJQC.js";
-import "../chunk-DKDDLF5P.js";
-import "../chunk-GMI5QZLG.js";
+} from "../chunk-GTZLL7F4.js";
+import "../chunk-UXHMWF4H.js";
+import "../chunk-TG3T3M4K.js";
+import "../chunk-DKWM5T3P.js";
+import "../chunk-QA72MKIT.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-OFRNZWC4.js";
+import "../chunk-IUWRVTQK.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-XX2V4QS5.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-L4C2JXJS.js";
+import "../chunk-X6RXX2NF.js";
 
 // bin/pushary-notification-hook.ts
 var main = async () => {

package/dist/bin/pushary-opencode-hook.js

@@ -2,7 +2,7 @@
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-VZKXBFUA.js";
+} from "../chunk-3HFK3UXM.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
@@ -19,7 +19,7 @@ import {
   policyRequestFor,
   readLastPrompt,
   repoKeyFor
-} from "../chunk-4XZCDSNG.js";
+} from "../chunk-GTZLL7F4.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -27,7 +27,7 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-GKAKAOKC.js";
+} from "../chunk-UXHMWF4H.js";
 import {
   HOOK_FALLBACK_MAX,
   OPENCODE_TOOL_NAMES,
@@ -36,14 +36,14 @@ import {
   deriveToolTarget,
   describeToolCall,
   scopePathFor
-} from "../chunk-KOPUTJQC.js";
+} from "../chunk-TG3T3M4K.js";
 import {
   getMachineId
-} from "../chunk-DKDDLF5P.js";
-import "../chunk-GMI5QZLG.js";
+} from "../chunk-DKWM5T3P.js";
+import "../chunk-QA72MKIT.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-OFRNZWC4.js";
+import "../chunk-IUWRVTQK.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-XX2V4QS5.js";
@@ -60,7 +60,7 @@ import {
   hookWaitDeadline,
   redactSecrets,
   resolveGate
-} from "../chunk-L4C2JXJS.js";
+} from "../chunk-X6RXX2NF.js";
 
 // bin/pushary-opencode-hook.ts
 import { basename } from "path";

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,26 +1,27 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-EJT2ER6G.js";
-import "../chunk-ATBKJNWS.js";
-import "../chunk-VZKXBFUA.js";
+} from "../chunk-GSSFSVAQ.js";
+import "../chunk-6EKQZA6R.js";
+import "../chunk-NCVIWGVA.js";
+import "../chunk-3HFK3UXM.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-4XZCDSNG.js";
-import "../chunk-GKAKAOKC.js";
-import "../chunk-KOPUTJQC.js";
-import "../chunk-DKDDLF5P.js";
-import "../chunk-GMI5QZLG.js";
+import "../chunk-GTZLL7F4.js";
+import "../chunk-UXHMWF4H.js";
+import "../chunk-TG3T3M4K.js";
+import "../chunk-DKWM5T3P.js";
+import "../chunk-QA72MKIT.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-OFRNZWC4.js";
+import "../chunk-IUWRVTQK.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-XX2V4QS5.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-L4C2JXJS.js";
+import "../chunk-X6RXX2NF.js";
 
 // bin/pushary-permission-denied-hook.ts
 var main = async () => {

package/dist/bin/pushary-permission-hook.js

@@ -1,26 +1,27 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-EJT2ER6G.js";
-import "../chunk-ATBKJNWS.js";
-import "../chunk-VZKXBFUA.js";
+} from "../chunk-GSSFSVAQ.js";
+import "../chunk-6EKQZA6R.js";
+import "../chunk-NCVIWGVA.js";
+import "../chunk-3HFK3UXM.js";
 import {
   readHookInput
 } from "../chunk-6CUUA7HO.js";
 import "../chunk-YHG74UFF.js";
-import "../chunk-4XZCDSNG.js";
-import "../chunk-GKAKAOKC.js";
-import "../chunk-KOPUTJQC.js";
-import "../chunk-DKDDLF5P.js";
-import "../chunk-GMI5QZLG.js";
+import "../chunk-GTZLL7F4.js";
+import "../chunk-UXHMWF4H.js";
+import "../chunk-TG3T3M4K.js";
+import "../chunk-DKWM5T3P.js";
+import "../chunk-QA72MKIT.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-OFRNZWC4.js";
+import "../chunk-IUWRVTQK.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-XX2V4QS5.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-L4C2JXJS.js";
+import "../chunk-X6RXX2NF.js";
 
 // bin/pushary-permission-hook.ts
 var main = async () => {

package/dist/bin/pushary-post-hook.js

@@ -4,19 +4,19 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handlePostToolUse
-} from "../chunk-4XZCDSNG.js";
-import "../chunk-GKAKAOKC.js";
-import "../chunk-KOPUTJQC.js";
-import "../chunk-DKDDLF5P.js";
-import "../chunk-GMI5QZLG.js";
+} from "../chunk-GTZLL7F4.js";
+import "../chunk-UXHMWF4H.js";
+import "../chunk-TG3T3M4K.js";
+import "../chunk-DKWM5T3P.js";
+import "../chunk-QA72MKIT.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-OFRNZWC4.js";
+import "../chunk-IUWRVTQK.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-XX2V4QS5.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-L4C2JXJS.js";
+import "../chunk-X6RXX2NF.js";
 
 // bin/pushary-post-hook.ts
 var main = async () => {

package/dist/bin/pushary-prompt-hook.js

@@ -4,19 +4,19 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleUserPrompt
-} from "../chunk-4XZCDSNG.js";
-import "../chunk-GKAKAOKC.js";
-import "../chunk-KOPUTJQC.js";
-import "../chunk-DKDDLF5P.js";
-import "../chunk-GMI5QZLG.js";
+} from "../chunk-GTZLL7F4.js";
+import "../chunk-UXHMWF4H.js";
+import "../chunk-TG3T3M4K.js";
+import "../chunk-DKWM5T3P.js";
+import "../chunk-QA72MKIT.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-OFRNZWC4.js";
+import "../chunk-IUWRVTQK.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-XX2V4QS5.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-L4C2JXJS.js";
+import "../chunk-X6RXX2NF.js";
 
 // bin/pushary-prompt-hook.ts
 var main = async () => {

package/dist/bin/pushary-session-end-hook.js

@@ -4,19 +4,19 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleSessionEnd
-} from "../chunk-4XZCDSNG.js";
-import "../chunk-GKAKAOKC.js";
-import "../chunk-KOPUTJQC.js";
-import "../chunk-DKDDLF5P.js";
-import "../chunk-GMI5QZLG.js";
+} from "../chunk-GTZLL7F4.js";
+import "../chunk-UXHMWF4H.js";
+import "../chunk-TG3T3M4K.js";
+import "../chunk-DKWM5T3P.js";
+import "../chunk-QA72MKIT.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-OFRNZWC4.js";
+import "../chunk-IUWRVTQK.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-XX2V4QS5.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-L4C2JXJS.js";
+import "../chunk-X6RXX2NF.js";
 
 // bin/pushary-session-end-hook.ts
 var main = async () => {

package/dist/bin/pushary-session-start-hook.js

@@ -4,19 +4,19 @@ import {
 } from "../chunk-6CUUA7HO.js";
 import {
   handleSessionStart
-} from "../chunk-4XZCDSNG.js";
-import "../chunk-GKAKAOKC.js";
-import "../chunk-KOPUTJQC.js";
-import "../chunk-DKDDLF5P.js";
-import "../chunk-GMI5QZLG.js";
+} from "../chunk-GTZLL7F4.js";
+import "../chunk-UXHMWF4H.js";
+import "../chunk-TG3T3M4K.js";
+import "../chunk-DKWM5T3P.js";
+import "../chunk-QA72MKIT.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-OFRNZWC4.js";
+import "../chunk-IUWRVTQK.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
 import "../chunk-XX2V4QS5.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-L4C2JXJS.js";
+import "../chunk-X6RXX2NF.js";
 
 // bin/pushary-session-start-hook.ts
 var main = async () => {

package/dist/bin/pushary-setup.js

@@ -1,15 +1,24 @@
 #!/usr/bin/env node
 import {
   detectClaudeVersion
-} from "../chunk-J2JZJZKB.js";
+} from "../chunk-KVE5RCQL.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "../chunk-BAE45YLP.js";
+} from "../chunk-FZ73G2RO.js";
+import {
+  waitForMachineReadiness
+} from "../chunk-TY5HVMXT.js";
 import {
   runBrowserLogin
 } from "../chunk-Z3Z4VK5F.js";
+import {
+  HERMES_CONFIG_SCRIPT,
+  isHermesConfigReceipt,
+  resolveHermesPython,
+  runHermesPythonScript
+} from "../chunk-UDBJHQMG.js";
 import {
   describeDetection,
   detectAllAgents,
@@ -21,7 +30,7 @@ import {
   shortenHome,
   vscodeSettingsTargets,
   writeInstructionBlock
-} from "../chunk-A4O5ROZK.js";
+} from "../chunk-MZGWKIUZ.js";
 import {
   OPENCODE_HOOK_BINARY,
   addOpenCodeMcpServer,
@@ -32,7 +41,7 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   openCodeWired
-} from "../chunk-O5B7EK5U.js";
+} from "../chunk-34GN3IPX.js";
 import {
   GEMINI_HOOK_BINARY,
   addClaudeMcpServer,
@@ -40,47 +49,53 @@ import {
   addGeminiMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions,
+  captureClaudeMcpServer,
   compareVersion,
-  parseVersion
-} from "../chunk-VA7VUNRD.js";
-import "../chunk-ATBKJNWS.js";
+  isClaudeMcpSnapshot,
+  parseVersion,
+  updateClaudeMcpSnapshot
+} from "../chunk-Q223OM5J.js";
+import "../chunk-6EKQZA6R.js";
 import {
   guardBinary,
   guardNodeScript,
   guardedArgv
-} from "../chunk-AIGDBRIJ.js";
+} from "../chunk-SYUIXXQW.js";
 import {
+  daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   disableDaemonService,
   ensureDaemonRunning,
   hasDaemonServiceDefinition,
   readDaemonStatus,
   replaceDaemonService,
-  stopDaemonService
-} from "../chunk-R2AGKCXL.js";
+  stopDaemonService,
+  waitForDaemonRemoteProof
+} from "../chunk-3SQYKLBW.js";
 import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-NKHEHEUM.js";
+} from "../chunk-6XUABEX2.js";
 import "../chunk-XHKBHWLX.js";
 import {
   installGlobally,
   npmErrorMessage,
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "../chunk-PZA7G4CN.js";
+} from "../chunk-X4ZUUFKV.js";
 import {
   reportEvent
-} from "../chunk-4XZCDSNG.js";
-import "../chunk-GKAKAOKC.js";
-import "../chunk-KOPUTJQC.js";
-import "../chunk-DKDDLF5P.js";
+} from "../chunk-GTZLL7F4.js";
+import "../chunk-UXHMWF4H.js";
+import "../chunk-TG3T3M4K.js";
+import "../chunk-DKWM5T3P.js";
 import {
   addCodexHookTrust,
   addCodexHooks,
   addCodexMcpServer,
   claudeJson,
+  claudeMcpReceipt,
   claudeSettings,
   claudeSkillDir,
   codexAgentsMd2 as codexAgentsMd,
@@ -93,9 +108,10 @@ import {
   cursorUserHooks,
   geminiMd,
   geminiSettings,
+  hermesConfigReceipt,
   pusharyConfigFile,
   vscodePluginDir
-} from "../chunk-GMI5QZLG.js";
+} from "../chunk-QA72MKIT.js";
 import {
   confirmAppConnection,
   connectDevice,
@@ -104,12 +120,12 @@ import {
   printConnectInstructions,
   setHumanStream,
   verifyRoundTrip
-} from "../chunk-T3LRWZKI.js";
+} from "../chunk-2LPEZYMC.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-I5L6SK5V.js";
+} from "../chunk-BLODMQKJ.js";
 import {
   useColor
 } from "../chunk-5RUIFDTP.js";
@@ -121,7 +137,7 @@ import {
   readControlMode,
   readKeySource,
   writeKey
-} from "../chunk-V6N4Q223.js";
+} from "../chunk-3CUDMTL4.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -138,7 +154,7 @@ import {
 } from "../chunk-DINDL2CF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-OFRNZWC4.js";
+import "../chunk-IUWRVTQK.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
@@ -155,12 +171,12 @@ import "../chunk-2UMNXADU.js";
 import {
   CURSOR_GATE_EVENTS,
   isValidApiKey
-} from "../chunk-L4C2JXJS.js";
+} from "../chunk-X6RXX2NF.js";
 
 // bin/pushary-setup.ts
 import { existsSync, readFileSync, writeFileSync, mkdirSync, cpSync, rmSync, renameSync, realpathSync, readdirSync, statSync, openSync, readSync, closeSync } from "fs";
 import { join as join3, dirname as dirname2, basename } from "path";
-import { homedir, tmpdir } from "os";
+import { homedir } from "os";
 import { execSync as execSync2 } from "child_process";
 import { checkbox, input, confirm } from "@inquirer/prompts";
 import { fileURLToPath } from "url";
@@ -595,6 +611,8 @@ var parseSetupOptions = (input2) => {
 // bin/pushary-setup.ts
 var CLAUDE_SETTINGS = claudeSettings();
 var CLAUDE_JSON = claudeJson();
+var CLAUDE_MCP_RECEIPT = claudeMcpReceipt();
+var HERMES_CONFIG_RECEIPT = hermesConfigReceipt();
 var CURSOR_PLUGIN_DIR = cursorPluginDir();
 var CURSOR_USER_HOOKS = cursorUserHooks();
 var VSCODE_PLUGIN_DIR = vscodePluginDir();
@@ -790,6 +808,17 @@ var setupClaudeCode = async (apiKey) => {
   await installGlobally2();
   const claudeJson2 = readAgentJson(CLAUDE_JSON);
   const settings = readAgentJson(CLAUDE_SETTINGS);
+  const mcpReceipt = readJsonSafe(CLAUDE_MCP_RECEIPT);
+  let mcpSnapshot;
+  if (mcpReceipt.kind === "missing") {
+    mcpSnapshot = captureClaudeMcpServer(claudeJson2, apiKey);
+  } else {
+    if (mcpReceipt.kind !== "ok" || !isClaudeMcpSnapshot(mcpReceipt.value)) {
+      throw new Error(`Cannot safely replace Claude's Pushary MCP entry: ${CLAUDE_MCP_RECEIPT} is unreadable or invalid.`);
+    }
+    mcpSnapshot = updateClaudeMcpSnapshot(mcpReceipt.value, apiKey);
+  }
+  writeJsonAtomic(CLAUDE_MCP_RECEIPT, mcpSnapshot, 384);
   await spinner("Adding MCP server (type: http)", async () => {
     addClaudeMcpServer(claudeJson2, apiKey);
   });
@@ -814,23 +843,6 @@ var setupClaudeCode = async (apiKey) => {
   console.log(`  ${dim("\u2022")} Auto-allowed tools: no permission prompts for Pushary MCP calls`);
 };
 var IS_WINDOWS = process.platform === "win32";
-var resolveHermesPython = () => {
-  try {
-    const probe = IS_WINDOWS ? "where hermes" : "command -v hermes";
-    const launcher = execSync2(probe, { encoding: "utf-8", stdio: "pipe", timeout: 5e3 }).split("\n")[0].trim();
-    if (launcher && !IS_WINDOWS) {
-      const shebang = readFileSync(launcher, "utf-8").split("\n", 1)[0];
-      if (shebang.startsWith("#!")) {
-        const interpreter = shebang.slice(2).trim().split(/\s+/)[0];
-        if (interpreter && /python/i.test(interpreter) && existsSync(interpreter)) return interpreter;
-      }
-    }
-  } catch {
-  }
-  const venvRoot = join3(homedir(), ".hermes", "hermes-agent", "venv");
-  const candidates = IS_WINDOWS ? [join3(venvRoot, "Scripts", "python.exe"), join3(venvRoot, "Scripts", "python3.exe")] : [join3(venvRoot, "bin", "python3"), join3(venvRoot, "bin", "python")];
-  return candidates.find(existsSync) ?? null;
-};
 var ensurePip = (python) => {
   try {
     execSync2(`"${python}" -m pip --version`, { stdio: "ignore", timeout: 15e3 });
@@ -843,20 +855,7 @@ var ensurePip = (python) => {
   }
 };
 var enablePusharyPlugin = (python) => {
-  const snippet = 'from hermes_cli.config import load_config, save_config; c = load_config(); s = c.get("security") if isinstance(c.get("security"), dict) else {}; ap = s.get("approval") if isinstance(s.get("approval"), dict) else {}; ap["transport"] = "pushary"; ap["transport_fallback"] = "builtin"; s["approval"] = ap; c["security"] = s; p = c.get("plugins") if isinstance(c.get("plugins"), dict) else {}; e = p.get("enabled") if isinstance(p.get("enabled"), list) else []; p["enabled"] = (e + ["pushary"]) if "pushary" not in e else e; c["plugins"] = p; a = c.get("agent") if isinstance(c.get("agent"), dict) else {}; d = a.get("disabled_toolsets") if isinstance(a.get("disabled_toolsets"), list) else []; a["disabled_toolsets"] = (d + ["clarify"]) if "clarify" not in d else d; c["agent"] = a; save_config(c)';
-  const scriptPath = join3(tmpdir(), `pushary-hermes-${process.pid}.py`);
-  try {
-    writeFileSync(scriptPath, snippet.split("; ").join("\n"), "utf-8");
-    execSync2(`"${python}" "${scriptPath}"`, { stdio: "pipe", timeout: 15e3 });
-    return true;
-  } catch {
-    return false;
-  } finally {
-    try {
-      rmSync(scriptPath, { force: true });
-    } catch {
-    }
-  }
+  return runHermesPythonScript(python, HERMES_CONFIG_SCRIPT, "setup", HERMES_CONFIG_RECEIPT);
 };
 var setupHermes = async (_apiKey) => {
   console.log(`
@@ -873,6 +872,10 @@ var setupHermes = async (_apiKey) => {
     noteManual("Install the Hermes plugin by hand: <hermes-python> -m pip install hermes-plugin-pushary");
     return "skipped";
   }
+  const existingReceipt = readJsonSafe(HERMES_CONFIG_RECEIPT);
+  if (existingReceipt.kind !== "missing" && (existingReceipt.kind !== "ok" || !isHermesConfigReceipt(existingReceipt.value))) {
+    throw new Error(`Cannot safely configure Hermes: ${HERMES_CONFIG_RECEIPT} is unreadable or invalid.`);
+  }
   await spinner("Installing hermes-plugin-pushary into Hermes\u2019 environment", async () => {
     ensurePip(python);
     execSync2(`"${python}" -m pip install --upgrade hermes-plugin-pushary`, { stdio: "pipe", timeout: 18e4 });
@@ -2125,6 +2128,14 @@ var main = async () => {
       return { kind: "unavailable", detail: formatError(err) };
     }
   })() : controlMode === "on" || controlPolicy === "legacy" ? { kind: "unavailable", detail: "Managed control is required but no usable provider/service-manager pair is available" } : null;
+  const localControlProof = daemon?.kind === "running" || daemon?.kind === "started" ? await waitForDaemonRemoteProof() : null;
+  const serverControlProof = localControlProof && daemonHasRemoteProof(localControlProof) ? await waitForMachineReadiness(trimmedKey, ["spawn", ...controlCapabilities]) : null;
+  const daemonReady = daemon === null ? null : localControlProof !== null && daemonHasRemoteProof(localControlProof) && (serverControlProof?.kind === "ready" || serverControlProof?.kind === "unsupported");
+  if (serverControlProof?.kind === "unsupported") {
+    console.log(`  ${yellow("!")} This server predates control-readiness reporting; local heartbeat and queue checks passed.`);
+  } else if (serverControlProof && serverControlProof.kind !== "ready") {
+    console.log(`  ${yellow("!")} Managed control could not be verified by the server: ${serverControlProof.detail}`);
+  }
   const closing = describeClosing({
     agentsOk,
     configuredNothing,
@@ -2132,7 +2143,7 @@ var main = async () => {
     failed,
     reachChecked,
     reachesYou,
-    daemonReady: controlLifecycleFailure ? false : daemon === null ? null : daemon.kind === "running" || daemon.kind === "started",
+    daemonReady: controlLifecycleFailure ? false : daemonReady,
     // null when the check did not run, so it changes nothing. Only an outright
     // `false` is allowed to hold back "Setup complete.".
     roundTripAnswered: roundTrip === null ? null : roundTrip.kind === "answered" ? true : roundTrip.kind === "unanswered" ? false : null

package/dist/bin/pushary-stats.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   readLedgerSummary
-} from "../chunk-VZKXBFUA.js";
+} from "../chunk-3HFK3UXM.js";
 import {
   exitOnHelpFlag
 } from "../chunk-LURY4WNF.js";
@@ -11,7 +11,7 @@ import "../chunk-KZERVKTD.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
-import "../chunk-L4C2JXJS.js";
+import "../chunk-X6RXX2NF.js";
 
 // bin/pushary-stats.ts
 exitOnHelpFlag("stats");

package/dist/bin/pushary-status.js

@@ -2,25 +2,25 @@
 import {
   describeLastSeen,
   listMachines
-} from "../chunk-ZL7HEF2T.js";
-import "../chunk-DKDDLF5P.js";
-import "../chunk-GMI5QZLG.js";
+} from "../chunk-TY5HVMXT.js";
+import "../chunk-DKWM5T3P.js";
+import "../chunk-QA72MKIT.js";
 import {
   describeReach,
   fetchChannels,
   reachVerdict
-} from "../chunk-T3LRWZKI.js";
+} from "../chunk-2LPEZYMC.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-I5L6SK5V.js";
+} from "../chunk-BLODMQKJ.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   readKeySource
-} from "../chunk-V6N4Q223.js";
+} from "../chunk-3CUDMTL4.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -32,7 +32,7 @@ import "../chunk-BC3VCZ3E.js";
 import "../chunk-DINDL2CF.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
-import "../chunk-OFRNZWC4.js";
+import "../chunk-IUWRVTQK.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
@@ -41,7 +41,7 @@ import {
 } from "../chunk-KZERVKTD.js";
 import "../chunk-XX2V4QS5.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-L4C2JXJS.js";
+import "../chunk-X6RXX2NF.js";
 
 // src/status.ts
 var keySourceLine = (source) => {