@pushary/agent-hooks 0.95.2 → 0.95.5

package/dist/{chunk-QF4RI5CD.js → chunk-OI3DJA7N.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-GUVCYYDK.js";
+} from "./chunk-S5CMLR35.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-WB2C7VPF.js → chunk-OW6AZDY2.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-6FAHPGCZ.js";
+} from "./chunk-WDKHZRAS.js";
 
 // src/removal-scope.ts
 var namesAppLocator = (command) => command.includes(HOOK_LOCATOR_BINARY);
@@ -30,8 +30,8 @@ var codexAgentsMd = () => join(codexHome(), "AGENTS.md");
 var codexSkillDir = () => join(codexHome(), "skills", "pushary");
 var CODEX_HOOK_EVENTS = [
   { event: "PermissionRequest", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Waiting for your phone" },
-  { event: "PreToolUse", matcher: "Bash|apply_patch", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Checking Pushary policy" },
-  { event: "PostToolUse", matcher: "Bash|apply_patch", delivery: "telemetry", timeout: 10 },
+  { event: "PreToolUse", matcher: "Bash|apply_patch|mcp__.*", delivery: "approval", timeout: HOOK_BUDGETS.codex.budgetSeconds, statusMessage: "Checking Pushary policy" },
+  { event: "PostToolUse", matcher: "Bash|apply_patch|mcp__.*", delivery: "telemetry", timeout: 10 },
   { event: "UserPromptSubmit", delivery: "telemetry", timeout: 10 },
   { event: "Stop", delivery: "telemetry", timeout: 10 },
   // `clear` alongside startup and resume, matching what we already do on Claude

package/dist/{chunk-4XXUHWIK.js → chunk-QHWXUNMN.js}

@@ -3,7 +3,7 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-IPHOUBTU.js";
+} from "./chunk-4PX4QK2Z.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords

package/dist/{chunk-M7WWEFG6.js → chunk-QQGNFHIK.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-WB2C7VPF.js";
+} from "./chunk-OW6AZDY2.js";
 import {
   readJsonSafe
-} from "./chunk-4LL6LG5X.js";
+} from "./chunk-KAVDAZ7A.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-YJAQRKH5.js → chunk-RLXVW4AM.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-JDFB3YKG.js";
+} from "./chunk-I6GZX3FT.js";
 import {
   createIo
 } from "./chunk-5RUIFDTP.js";

package/dist/{chunk-GUVCYYDK.js → chunk-S5CMLR35.js}

@@ -1,23 +1,99 @@
-import {
-  resolveShellRc
-} from "./chunk-BC3VCZ3E.js";
-import {
-  resolveInstallSourceFor
-} from "./chunk-X7YWD6IS.js";
 import {
   backupFile,
   readJsonSafe,
+  resolveInstallSourceFor,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-4LL6LG5X.js";
+} from "./chunk-KAVDAZ7A.js";
 import {
   configFilePath
 } from "./chunk-2UMNXADU.js";
 
-// src/keystore.ts
-import { chmodSync, existsSync, readFileSync, realpathSync, writeFileSync } from "fs";
+// src/shell-alias.ts
 import { homedir } from "os";
+import { existsSync, readFileSync, appendFileSync, writeFileSync } from "fs";
 import { join } from "path";
+var MARKER_START = "# >>> pushary >>>";
+var MARKER_END = "# <<< pushary <<<";
+var CANDIDATE_RCS = [".zshrc", ".zprofile", ".bashrc", ".bash_profile"];
+var aliasBlock = () => `${MARKER_START}
+# Make \`claude\` reachable from your phone when idle (runs it through Pushary).
+# Remove this block, or run \`pushary clean\`, to undo.
+alias claude='pushary claude'
+${MARKER_END}
+`;
+var hasClaudeAlias = (content) => content.includes(MARKER_START) || /alias\s+claude=['"]?pushary claude/.test(content);
+var stripPusharyBlock = (content) => {
+  const lines = content.split("\n");
+  const out = [];
+  let inBlock = false;
+  for (const line of lines) {
+    const trimmed = line.trim();
+    if (trimmed === MARKER_START) {
+      inBlock = true;
+      continue;
+    }
+    if (trimmed === MARKER_END) {
+      inBlock = false;
+      continue;
+    }
+    if (!inBlock) out.push(line);
+  }
+  return out.join("\n").replace(/\n{3,}/g, "\n\n");
+};
+var resolveShellRc = () => {
+  if (process.platform === "win32") return null;
+  const shell = (process.env.SHELL ?? "").split("/").pop() ?? "";
+  const home = homedir();
+  if (shell === "zsh") return { path: join(home, ".zshrc"), shell };
+  if (shell === "bash") {
+    const bashrc = join(home, ".bashrc");
+    const profile = join(home, ".bash_profile");
+    if (process.platform === "darwin") return { path: profile, shell };
+    return { path: existsSync(bashrc) ? bashrc : profile, shell };
+  }
+  return null;
+};
+var installClaudeAlias = () => {
+  const rc = resolveShellRc();
+  if (!rc) return { installed: false, reason: "unsupported-shell" };
+  let content = "";
+  try {
+    content = readFileSync(rc.path, "utf-8");
+  } catch {
+  }
+  if (hasClaudeAlias(content)) return { installed: false, path: rc.path, reason: "exists" };
+  const gap = content.length > 0 && !content.endsWith("\n") ? "\n\n" : content.length > 0 ? "\n" : "";
+  appendFileSync(rc.path, `${gap}${aliasBlock()}`, "utf-8");
+  return { installed: true, path: rc.path };
+};
+var removeClaudeAlias = () => {
+  const removed = [];
+  for (const name of CANDIDATE_RCS) {
+    const path = join(homedir(), name);
+    if (!existsSync(path)) continue;
+    let content;
+    try {
+      content = readFileSync(path, "utf-8");
+    } catch {
+      continue;
+    }
+    const stripped = stripPusharyBlock(content);
+    if (stripped !== content) {
+      try {
+        writeFileSync(path, stripped, "utf-8");
+        removed.push(path);
+      } catch {
+      }
+    }
+  }
+  return removed;
+};
+
+// src/keystore.ts
+import { chmodSync, existsSync as existsSync2, readFileSync as readFileSync2, realpathSync, writeFileSync as writeFileSync2 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join2 } from "path";
 var KEY_FILE_MODE = 384;
 var FALLBACK_RCS = [".zshrc", ".zprofile", ".bashrc", ".bash_profile"];
 var OUR_EXPORT = /^[ \t]*export[ \t]+PUSHARY_API_KEY=(['"]?)(pk_[a-f0-9]+\.[a-f0-9]+)\1[ \t]*$/;
@@ -46,7 +122,7 @@ var rewriteRcExport = (rcPath, apiKey, shell = null) => {
   const target = realPathOf(rcPath);
   let content = "";
   try {
-    content = readFileSync(target, "utf-8");
+    content = readFileSync2(target, "utf-8");
   } catch (err) {
     const error = err;
     if (error.code !== "ENOENT") {
@@ -101,7 +177,7 @@ var rewriteRcExport = (rcPath, apiKey, shell = null) => {
 var resolveRcTarget = () => {
   const resolved = resolveShellRc();
   if (resolved) return { path: resolved.path, shell: resolved.shell };
-  const fallback = FALLBACK_RCS.map((name) => join(homedir(), name)).find(existsSync);
+  const fallback = FALLBACK_RCS.map((name) => join2(homedir2(), name)).find(existsSync2);
   return fallback ? { path: fallback, shell: null } : null;
 };
 var writeKey = (apiKey, options = {}) => {
@@ -151,13 +227,13 @@ var clearKey = (options = {}) => {
   if (target) {
     try {
       const real = realpathSync(target.path);
-      const lines = readFileSync(real, "utf8").split("\n");
+      const lines = readFileSync2(real, "utf8").split("\n");
       const next = lines.map((line) => {
         if (!OUR_EXPORT.test(line)) return line;
         rcLinesDisabled += 1;
         return `# ${line.trim()}   # removed by pushary logout`;
       });
-      if (rcLinesDisabled > 0) writeFileSync(real, next.join("\n"));
+      if (rcLinesDisabled > 0) writeFileSync2(real, next.join("\n"));
     } catch {
       rcLinesDisabled = 0;
     }
@@ -183,8 +259,8 @@ var readConfigKey = (configPath) => {
   return key || null;
 };
 var readConfigFileKey = () => readConfigKey(configFilePath());
-var readControlMode = () => {
-  const result = readJsonSafe(configFilePath());
+var readControlMode = (configPath = configFilePath()) => {
+  const result = readJsonSafe(configPath);
   if (result.kind !== "ok") return null;
   const value = result.value.controlMode;
   return value === "auto" || value === "on" || value === "off" ? value : null;
@@ -205,6 +281,9 @@ var readKeySource = () => {
 };
 
 export {
+  resolveShellRc,
+  installClaudeAlias,
+  removeClaudeAlias,
   KEY_FILE_MODE,
   exportLine,
   keyPrefix,

package/dist/{chunk-EUAQ4YAN.js → chunk-UCS65VVR.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-6FAHPGCZ.js";
+} from "./chunk-WDKHZRAS.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-WM5XMCID.js → chunk-VOSGZ6PH.js}

@@ -1,15 +1,15 @@
 import {
   AGENT_CHOICES
-} from "./chunk-3ZUTNTZA.js";
+} from "./chunk-2ZTL3PGN.js";
 import {
   isBridgeLocator
-} from "./chunk-2XUPP4WM.js";
+} from "./chunk-CUEZMPLJ.js";
 import {
   pusharyHookExecutable
-} from "./chunk-CH6DTGQR.js";
+} from "./chunk-HBHEX3JQ.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-DSTLA2TC.js";
+} from "./chunk-GOPIMNVC.js";
 
 // src/setup/hook-ownership.ts
 var commandsIn = (value) => {

package/dist/{chunk-QUE76J4H.js → chunk-VTO3TNIB.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-GUVCYYDK.js";
+} from "./chunk-S5CMLR35.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-6FAHPGCZ.js → chunk-WDKHZRAS.js}

@@ -21,6 +21,166 @@ var COWORK_STANDING_INSTRUCTIONS = `Pushary is connected as a custom connector.
 - Cancel a question when it is no longer needed. Once this turn ends, reopen Cowork for follow-up work; this connector cannot restart it.
 - If Pushary tools are missing or disabled, report that once and continue within my authorization. Do not claim a notification or approval was delivered.`;
 
+// ../contracts/src/agent-manifest.ts
+var defaults = {
+  hasStoredIdentity: true,
+  hookSource: null,
+  policyAgent: null,
+  repoAware: false,
+  disconnectable: false,
+  managedProvider: false,
+  enforcement: "cooperative",
+  connectVia: "Plain MCP",
+  setupCommand: null,
+  setupChoice: null,
+  setupGuide: "",
+  enforcementDetail: "Cooperative. The agent chooses when to ask; no native permission interception.",
+  capabilityNote: "",
+  documented: true
+};
+var AGENTS = {
+  claude_code: {
+    ...defaults,
+    label: "Claude Code",
+    hookSource: "claude",
+    policyAgent: "claude_code",
+    repoAware: true,
+    disconnectable: true,
+    managedProvider: true,
+    enforcement: "enforced",
+    connectVia: "Native hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Shell, writes and edits, subject to Claude Code permission mode and explicit policy."
+  },
+  claude_chat: {
+    ...defaults,
+    label: "Claude Chat",
+    connectVia: "Custom MCP connector",
+    setupGuide: "[Claude.ai and Claude Desktop setup](/docs/agents/guides/claude-desktop)"
+  },
+  claude_cowork: {
+    ...defaults,
+    label: "Claude Cowork",
+    connectVia: "Custom MCP connector + optional Cowork skill",
+    setupGuide: "[Cowork setup](/docs/agents/guides/claude-desktop#use-it-in-cowork)",
+    enforcementDetail: COWORK_CONNECTOR_LIMIT
+  },
+  codex: {
+    ...defaults,
+    label: "Codex",
+    hookSource: "codex",
+    policyAgent: "codex",
+    repoAware: true,
+    disconnectable: true,
+    managedProvider: true,
+    enforcement: "enforced",
+    connectVia: "Native hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Shell and apply_patch edits through native permission hooks; requires a compatible Codex runtime."
+  },
+  chatgpt: {
+    ...defaults,
+    label: "ChatGPT",
+    connectVia: "Custom MCP connector",
+    setupGuide: "[ChatGPT setup](/docs/agents/guides/chatgpt)"
+  },
+  gemini_cli: {
+    ...defaults,
+    label: "Gemini CLI",
+    hookSource: "gemini",
+    policyAgent: "gemini_cli",
+    repoAware: true,
+    disconnectable: true,
+    managedProvider: true,
+    enforcement: "enforced",
+    connectVia: "Native hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Shell, writes and edits through native BeforeTool hooks."
+  },
+  hermes: {
+    ...defaults,
+    label: "Hermes",
+    policyAgent: "hermes",
+    enforcement: "enforced",
+    connectVia: "Native Python plugin + approval transport",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Hermes dangerous-command approvals when the Pushary transport is selected; optional PUSHARY_GATE_TOOLS gates named tools.",
+    capabilityNote: "Uses the Python plugin, not a macOS bridge HookSource. CLI disconnect and managed-provider controls are not implemented for Hermes."
+  },
+  cursor: {
+    ...defaults,
+    label: "Cursor",
+    hookSource: "cursor",
+    policyAgent: "cursor",
+    disconnectable: true,
+    enforcement: "enforced",
+    connectVia: "Editor plugin hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "With installed hooks: shell, MCP execution and Write/Delete/Edit tool calls. Plain MCP remains cooperative."
+  },
+  vscode: {
+    ...defaults,
+    label: "VS Code",
+    hookSource: "vscode",
+    policyAgent: "vscode",
+    enforcement: "enforced",
+    connectVia: "Agent plugin hooks + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "PreToolUse approval hooks from the installed agent plugin; the host decides which events it exposes.",
+    capabilityNote: "Has both a bridge HookSource and a per-agent policy profile. CLI disconnect and managed-provider controls are not implemented for VS Code."
+  },
+  opencode: {
+    ...defaults,
+    label: "OpenCode",
+    hookSource: "opencode",
+    policyAgent: "opencode",
+    repoAware: true,
+    disconnectable: true,
+    enforcement: "enforced",
+    connectVia: "Generated plugin + MCP",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    enforcementDetail: "Shell, writes, edits and web fetches when OpenCode itself asks for permission."
+  },
+  windsurf: {
+    ...defaults,
+    label: "Windsurf",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    setupChoice: "Other"
+  },
+  unknown: {
+    ...defaults,
+    label: "Agent",
+    documented: false
+  },
+  lovable: {
+    ...defaults,
+    label: "Lovable",
+    setupGuide: "[Lovable setup](/docs/agents/guides/lovable)"
+  },
+  mcp: {
+    ...defaults,
+    hasStoredIdentity: false,
+    label: "Any MCP client",
+    setupCommand: "npx @pushary/agent-hooks setup",
+    setupChoice: "Other"
+  },
+  http: {
+    ...defaults,
+    hasStoredIdentity: false,
+    label: "No-code and HTTP",
+    connectVia: "REST with a Bearer token",
+    setupGuide: "[Connect any agent](/docs/agents/connect-any-agent)"
+  }
+};
+var HOOK_SOURCES = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.hookSource === null ? [] : [agent.hookSource]));
+var POLICY_AGENTS = [...Object.values(AGENTS).flatMap((agent) => agent.policyAgent === null ? [] : [agent.policyAgent]), "*"];
+var AGENT_LABELS_BY_TYPE = Object.fromEntries(
+  Object.entries(AGENTS).flatMap(([id, agent]) => agent.hasStoredIdentity ? [[id, agent.label]] : [])
+);
+var DISCONNECTABLE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.disconnectable ? [agent.hookSource] : []));
+var REPO_AWARE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.repoAware ? [agent.policyAgent] : []));
+var MANAGED_PROVIDERS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.managedProvider ? [agent.hookSource] : []));
+
 // ../contracts/src/index.ts
 var KEY_SCOPES = ["full_access", "agent", "connector", "bound"];
 var normalizeKeyScope = (value) => typeof value === "string" && KEY_SCOPES.includes(value) ? value : null;
@@ -140,23 +300,8 @@ var hookWaitDeadline = (startMs, policyWaitSeconds, agent, nowMs) => {
 };
 var hookWaitClamped = (startMs, policyWaitSeconds, agent, nowMs) => startMs + hookMaxWaitSeconds(agent) * 1e3 < nowMs + Math.max(policyWaitSeconds, 0) * 1e3;
 var effectiveWaitSeconds = (timeoutAction, policySeconds, agent) => timeoutAction === "wait" ? hookMaxWaitSeconds(agent) : policySeconds;
-var HOOK_SOURCES = ["claude", "codex", "gemini", "cursor", "vscode", "opencode"];
-var AGENT_LABELS_BY_TYPE = {
-  claude_code: "Claude Code",
-  claude_chat: "Claude Chat",
-  claude_cowork: "Claude Cowork",
-  codex: "Codex",
-  chatgpt: "ChatGPT",
-  gemini_cli: "Gemini CLI",
-  hermes: "Hermes",
-  cursor: "Cursor",
-  vscode: "VS Code",
-  opencode: "OpenCode",
-  windsurf: "Windsurf",
-  unknown: "Agent"
-};
 var OPENCODE_APPROVAL_EVENT = "permission.ask";
-var CURSOR_GATE_EVENTS = ["beforeShellExecution", "beforeMCPExecution"];
+var CURSOR_GATE_EVENTS = ["beforeShellExecution", "beforeMCPExecution", "preToolUse"];
 var HOOK_LOCATOR_BINARY = "pushary-bridge";
 var HOOK_BATCH_MAX_BYTES = 4 * 1024 * 1024;
 var REPO_KEY_MAX_LENGTH = 200;
@@ -1111,6 +1256,17 @@ var shouldDeferToNativeMode = (permissionMode, toolName, options = {}) => {
 var ASKED_IN_EVERY_MODE_TOOLS = ["AskUserQuestion", "ExitPlanMode"];
 var ASKED_IN_EVERY_MODE = new Set(ASKED_IN_EVERY_MODE_TOOLS);
 var isAskedInEveryMode = (toolName) => ASKED_IN_EVERY_MODE.has(toolName);
+var PRETOOLUSE_GATED_TOOLS = [
+  "Bash",
+  "Write",
+  "Edit",
+  "MultiEdit",
+  "NotebookEdit",
+  "PowerShell",
+  "Monitor"
+];
+var PRETOOLUSE_HANDLED_TOOLS = /* @__PURE__ */ new Set([...PRETOOLUSE_GATED_TOOLS, ...ASKED_IN_EVERY_MODE_TOOLS]);
+var isPermissionRequestOwnedByPreToolUse = (toolName, permissionMode, defers = shouldDeferToNativeMode) => PRETOOLUSE_HANDLED_TOOLS.has(toolName) && (isAskedInEveryMode(toolName) || !defers(permissionMode, toolName));
 var resolveGate = (input) => {
   const { modeState, config, toolName, toolInputs, cwd, repoKey, sessionId } = input;
   if (isPusharyOwnTool(toolName)) {
@@ -1189,14 +1345,10 @@ var pendingCommandEvents = (source) => {
       return ["PostToolUse", "PreToolUse", "UserPromptSubmit"];
     case "gemini":
       return ["AfterTool", "BeforeTool", "BeforeAgent"];
-    // Registered events only. Cursor's carriers are `postToolUse` and `stop`,
-    // which this build does not write into the config; the ones it does write
-    // (`afterShellExecution`, `afterFileEdit`, `afterAgentResponse`) are
-    // observational and discard whatever they print.
     case "cursor":
-      return [];
+      return ["postToolUse"];
     case "vscode":
-      return [];
+      return ["PostToolUse", "UserPromptSubmit"];
     // The prompt is appended through the TUI rather than through a hook return,
     // so there is nothing for this to print.
     case "opencode":
@@ -1239,7 +1391,7 @@ var gateOutputFor = (source, event, decision, reason) => {
   } else if (source === "opencode" && event === OPENCODE_APPROVAL_EVENT) {
     output = decision === "deny" ? { status: "deny", reason: reason ?? "Denied from Pushary" } : { status: decision };
   } else if (source === "cursor" && CURSOR_GATE_EVENTS.includes(event)) {
-    output = decision === "allow" ? { permission: "allow" } : decision === "ask" ? { permission: "ask" } : {
+    output = decision === "allow" ? { permission: "allow" } : decision === "ask" && event !== "preToolUse" ? { permission: "ask" } : {
       permission: "deny",
       user_message: "Command denied via Pushary.",
       agent_message: reason ?? "Denied from Pushary"
@@ -1379,7 +1531,13 @@ export {
   CLAUDE_CONNECTOR_STEPS,
   CLAUDE_CONNECTOR_TEST,
   COWORK_STANDING_INSTRUCTIONS,
+  HOOK_SOURCES,
+  AGENT_LABELS_BY_TYPE,
+  DISCONNECTABLE_AGENTS,
+  REPO_AWARE_AGENTS,
+  MANAGED_PROVIDERS,
   normalizeKeyScope,
+  parseAgentQuestion,
   parseAgentQuestions,
   parseAgentQuestionAnswers,
   normalizeInstallSource,
@@ -1387,8 +1545,6 @@ export {
   hookWaitDeadline,
   hookWaitClamped,
   effectiveWaitSeconds,
-  HOOK_SOURCES,
-  AGENT_LABELS_BY_TYPE,
   OPENCODE_APPROVAL_EVENT,
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
@@ -1409,6 +1565,8 @@ export {
   isPusharyOwnTool,
   shouldDeferToNativeMode,
   ASKED_IN_EVERY_MODE_TOOLS,
+  PRETOOLUSE_GATED_TOOLS,
+  isPermissionRequestOwnedByPreToolUse,
   resolveGate,
   modeStateFromResponse,
   stoppedOutput,

package/dist/{chunk-5GLPYGKS.js → chunk-WRDLHR2F.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-3ZUTNTZA.js";
+} from "./chunk-2ZTL3PGN.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-6FAHPGCZ.js";
+} from "./chunk-WDKHZRAS.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-RVSEGFPD.js → chunk-XLOELLAS.js}

@@ -7,19 +7,22 @@ import {
 } from "./chunk-L4ZCFMWW.js";
 import {
   getMachineId
-} from "./chunk-IAEXPTXA.js";
+} from "./chunk-N4VNLISN.js";
 import {
   pusharyDir
-} from "./chunk-WB2C7VPF.js";
+} from "./chunk-OW6AZDY2.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
+import {
+  readControlMode
+} from "./chunk-S5CMLR35.js";
 import {
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic,
   writeJsonAtomicDurable
-} from "./chunk-4LL6LG5X.js";
+} from "./chunk-KAVDAZ7A.js";
 import {
   getApiKey
 } from "./chunk-2UMNXADU.js";
@@ -737,7 +740,9 @@ var clearDaemonNeedsLogin = (options = {}) => {
 var describeDaemonLoginBlock = (record) => record.reason === "key_rejected" ? `this machine's key was rejected at ${record.at}; run \`pushary login\` to sign in again` : `this workspace had no active plan at ${record.at}; pick one at pushary.com/dashboard/settings?tab=billing, then run \`pushary login\``;
 var recoverDaemonAfterLogin = (options = {}) => {
   const cleared = clearDaemonNeedsLogin(options);
-  if (!cleared || !hasDaemonServiceDefinition(options)) return { cleared, restarted: false, detail: null };
+  if (!cleared || readControlMode(join(options.dir ?? pusharyDir(), "config.json")) === "off" || !hasDaemonServiceDefinition(options)) {
+    return { cleared, restarted: false, detail: null };
+  }
   const started = manageDaemonService("start", options);
   return started.kind === "ok" ? { cleared, restarted: true, detail: null } : { cleared, restarted: false, detail: started.detail };
 };