@pushary/agent-hooks 0.95.4 → 0.95.6

package/dist/bin/pushary-codex.js

@@ -1,27 +1,27 @@
 #!/usr/bin/env node
 import {
   reportEvent
-} from "../chunk-MQO7J2OJ.js";
+} from "../chunk-ZJ6QXXBC.js";
 import {
   askUser,
   isDecisionStopped,
   waitForAnswer
-} from "../chunk-2BE7ZVWP.js";
-import "../chunk-LVU3Q43J.js";
-import "../chunk-YE37HYN3.js";
+} from "../chunk-XS33QBJA.js";
+import "../chunk-HBBQO77U.js";
+import "../chunk-32WWVRXN.js";
 import {
   getMachineId
-} from "../chunk-O7ODXFII.js";
-import "../chunk-W5GH5GTX.js";
+} from "../chunk-C7BFOC35.js";
+import "../chunk-FBO5WS3D.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-MNWDOXX6.js";
+import "../chunk-KAWLZTRJ.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
-import "../chunk-7VVX6HQG.js";
+import "../chunk-VZADMT7R.js";
 
 // bin/pushary-codex.ts
 import { basename } from "path";

package/dist/bin/pushary-connect.js

@@ -1,31 +1,31 @@
 #!/usr/bin/env node
 import {
   printKeyCheck
-} from "../chunk-XIVPHGV4.js";
+} from "../chunk-ZQREURP6.js";
 import {
   connectDevice,
   connectExistingApp,
   printConnectInstructions
-} from "../chunk-JAKWHALW.js";
+} from "../chunk-O5RQ7RYJ.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey
-} from "../chunk-KT2CGUOE.js";
+} from "../chunk-6II5RBAS.js";
 import "../chunk-QCGNGEGE.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   exitOnHelpFlag
-} from "../chunk-DLLAWCQB.js";
-import "../chunk-D6PRC3YQ.js";
+} from "../chunk-GOQHN2UH.js";
+import "../chunk-LZQVAEWP.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
 import {
   readKeySource
-} from "../chunk-3N4FT4WQ.js";
+} from "../chunk-6MRPTYYH.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import {
@@ -34,9 +34,9 @@ import {
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-MNWDOXX6.js";
+import "../chunk-KAWLZTRJ.js";
 import "../chunk-2UMNXADU.js";
-import "../chunk-7VVX6HQG.js";
+import "../chunk-VZADMT7R.js";
 
 // bin/pushary-connect.ts
 exitOnHelpFlag("connect");

package/dist/bin/pushary-cowork.js

@@ -2,16 +2,16 @@
 import {
   coworkOutput,
   parseCoworkOptions
-} from "../chunk-HPM47TEO.js";
+} from "../chunk-AXECWTTZ.js";
 import {
   canOpenBrowser,
   openInBrowser
 } from "../chunk-PUZZELE6.js";
-import "../chunk-MDDKA4QM.js";
+import "../chunk-4XFBO3GW.js";
 import {
   exitOnHelpFlag
-} from "../chunk-DLLAWCQB.js";
-import "../chunk-D6PRC3YQ.js";
+} from "../chunk-GOQHN2UH.js";
+import "../chunk-LZQVAEWP.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
 import {
@@ -22,7 +22,7 @@ import {
 } from "../chunk-KZERVKTD.js";
 import {
   CLAUDE_CONNECTOR_GUIDE
-} from "../chunk-7VVX6HQG.js";
+} from "../chunk-VZADMT7R.js";
 
 // bin/pushary-cowork.ts
 exitOnHelpFlag("cowork");

package/dist/bin/pushary-daemon.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import {
   inspectConfiguredManagedProviders
-} from "../chunk-57NOPUBK.js";
-import "../chunk-TR6DBXO3.js";
+} from "../chunk-XJ6CXTSB.js";
+import "../chunk-OIZVYUED.js";
 import {
   HEARTBEAT_INTERVAL_MS,
   sendHeartbeat
-} from "../chunk-J6NAWJTQ.js";
-import "../chunk-CVZP67ST.js";
+} from "../chunk-WRK6RAA5.js";
+import "../chunk-HHODMHTH.js";
 import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-3OXHYPZG.js";
+} from "../chunk-HKQ6CD32.js";
 import {
   SESSION_REAP_SILENCE_MS,
   describeIdleWindow,
@@ -20,15 +20,15 @@ import {
   listProcessProofs,
   ownsLiveProcess,
   silentSpawnedProofs
-} from "../chunk-6BNBW3M2.js";
+} from "../chunk-DSCGKZO5.js";
 import {
   startRegisteredTranscripts
-} from "../chunk-4NJURLRP.js";
-import "../chunk-ZKDQ3QRP.js";
-import "../chunk-MZOTKCNZ.js";
-import "../chunk-MDDKA4QM.js";
-import "../chunk-HTWQH3VI.js";
-import "../chunk-TMOCSYJK.js";
+} from "../chunk-XKIB2FQY.js";
+import "../chunk-WZ63WTAZ.js";
+import "../chunk-BS5XR4J7.js";
+import "../chunk-4XFBO3GW.js";
+import "../chunk-FVTFSYKB.js";
+import "../chunk-A2M6FGUF.js";
 import {
   DAEMON_LEASE_RENEW_INTERVAL_MS,
   acquireDaemonLease,
@@ -45,46 +45,46 @@ import {
   requestDaemonHandoff,
   stopDaemonRunning,
   writeDaemonNeedsLogin
-} from "../chunk-ND52YE7L.js";
-import "../chunk-TKA2L2BU.js";
-import "../chunk-HJYGC7IR.js";
-import "../chunk-GGX5QTBG.js";
-import "../chunk-JDNW6FTV.js";
+} from "../chunk-7N3D4GN7.js";
+import "../chunk-CDBTCEKE.js";
+import "../chunk-GOPIMNVC.js";
+import "../chunk-3AJIK5AO.js";
+import "../chunk-DH4INZW3.js";
 import "../chunk-EQRS3SGM.js";
-import "../chunk-TGORRMOU.js";
+import "../chunk-JZSWA3VT.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
 import {
   resolveBinary
 } from "../chunk-L4ZCFMWW.js";
-import "../chunk-YE37HYN3.js";
+import "../chunk-32WWVRXN.js";
 import {
   getMachineId
-} from "../chunk-O7ODXFII.js";
-import "../chunk-W5GH5GTX.js";
+} from "../chunk-C7BFOC35.js";
+import "../chunk-FBO5WS3D.js";
 import {
   writeHuman
 } from "../chunk-QCGNGEGE.js";
 import {
   exitOnHelpFlag
-} from "../chunk-DLLAWCQB.js";
-import "../chunk-D6PRC3YQ.js";
+} from "../chunk-GOQHN2UH.js";
+import "../chunk-LZQVAEWP.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "../chunk-3N4FT4WQ.js";
+} from "../chunk-6MRPTYYH.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-MNWDOXX6.js";
+import "../chunk-KAWLZTRJ.js";
 import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-7VVX6HQG.js";
+import "../chunk-VZADMT7R.js";
 
 // src/spawn-daemon.ts
 import { execFileSync, spawn } from "child_process";

package/dist/bin/pushary-disconnect.js

@@ -8,19 +8,19 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-PFRLYYF6.js";
+} from "../chunk-43TFQOAT.js";
 import {
   isClaudeMcpSnapshot,
   removeClaudeMcpServers,
   removePusharySettings,
   restoreClaudeMcpServer
-} from "../chunk-CVZP67ST.js";
+} from "../chunk-HHODMHTH.js";
 import {
   removeGeminiSettings
-} from "../chunk-TKA2L2BU.js";
-import "../chunk-GGX5QTBG.js";
+} from "../chunk-CDBTCEKE.js";
+import "../chunk-3AJIK5AO.js";
 import "../chunk-L4ZCFMWW.js";
-import "../chunk-YE37HYN3.js";
+import "../chunk-32WWVRXN.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -34,14 +34,16 @@ import {
   geminiSettings,
   removeCodexHooks,
   removeCodexSettings
-} from "../chunk-W5GH5GTX.js";
+} from "../chunk-FBO5WS3D.js";
 import {
   exitOnHelpFlag
-} from "../chunk-DLLAWCQB.js";
-import "../chunk-D6PRC3YQ.js";
+} from "../chunk-GOQHN2UH.js";
+import "../chunk-LZQVAEWP.js";
 import "../chunk-DINDL2CF.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-7VVX6HQG.js";
+import {
+  DISCONNECTABLE_AGENTS
+} from "../chunk-VZADMT7R.js";
 
 // bin/pushary-disconnect.ts
 import { readdirSync, readFileSync, rmSync, writeFileSync } from "fs";
@@ -49,7 +51,6 @@ import { parse as parseTOML, stringify as stringifyTOML } from "smol-toml";
 
 // src/disconnect.ts
 import { dirname } from "path";
-var DISCONNECTABLE_AGENTS = ["claude", "codex", "gemini", "cursor", "opencode"];
 var isDisconnectableAgent = (value) => DISCONNECTABLE_AGENTS.includes(value);
 var removeCursorHooks = (config) => {
   const hooks = config.hooks;

package/dist/bin/pushary-doctor.js

@@ -7,8 +7,9 @@ import {
   versionManagerOf
 } from "../chunk-GU3EJCVV.js";
 import {
-  readMachineReadiness
-} from "../chunk-J6NAWJTQ.js";
+  readMachineReadiness,
+  readManagedControlEvidence
+} from "../chunk-WRK6RAA5.js";
 import {
   CURSOR_GATE_SCRIPT
 } from "../chunk-KBITFQST.js";
@@ -20,28 +21,28 @@ import {
   isDetected,
   isPluginRegistered,
   vscodeSettingsTargets
-} from "../chunk-XDHJ4KZJ.js";
+} from "../chunk-RPHXG4HI.js";
 import {
   OPENCODE_PLUGIN_PLACEHOLDER,
   openCodePluginDir,
   openCodePluginFile,
   openCodeWired
-} from "../chunk-PFRLYYF6.js";
-import "../chunk-CVZP67ST.js";
+} from "../chunk-43TFQOAT.js";
+import "../chunk-HHODMHTH.js";
 import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-3OXHYPZG.js";
+} from "../chunk-HKQ6CD32.js";
 import {
   readLedgerSummary
-} from "../chunk-EEJ6EQMI.js";
+} from "../chunk-32WFHA77.js";
 import {
   describeBridgeResolution,
   isBridgeLocator,
   liveBridgeProbe,
   resolveBridgeStub
-} from "../chunk-HTWQH3VI.js";
+} from "../chunk-FVTFSYKB.js";
 import {
   claudeOtherHolders,
   claudeWired,
@@ -56,7 +57,7 @@ import {
   geminiWired,
   holdsLong,
   pusharyHookExecutable
-} from "../chunk-TMOCSYJK.js";
+} from "../chunk-A2M6FGUF.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
@@ -65,22 +66,22 @@ import {
   readDaemonNeedsLogin,
   readDaemonStatus,
   readInstalledDaemonService
-} from "../chunk-ND52YE7L.js";
+} from "../chunk-7N3D4GN7.js";
 import {
   GEMINI_HOOK_BINARY,
   hasGeminiHooks,
   missingGeminiHookEvents
-} from "../chunk-TKA2L2BU.js";
-import "../chunk-GGX5QTBG.js";
+} from "../chunk-CDBTCEKE.js";
+import "../chunk-3AJIK5AO.js";
 import "../chunk-XHKBHWLX.js";
 import {
   execNpm
 } from "../chunk-L4ZCFMWW.js";
-import "../chunk-LVU3Q43J.js";
-import "../chunk-YE37HYN3.js";
+import "../chunk-HBBQO77U.js";
+import "../chunk-32WWVRXN.js";
 import {
   getMachineId
-} from "../chunk-O7ODXFII.js";
+} from "../chunk-C7BFOC35.js";
 import {
   CODEX_HOOK_EVENTS,
   claudeJson,
@@ -102,27 +103,28 @@ import {
   pusharyConfigFile,
   readCodexMcpAuth,
   vscodePluginDir
-} from "../chunk-W5GH5GTX.js";
+} from "../chunk-FBO5WS3D.js";
 import {
   describeReach,
   describeRoundTrip,
   fetchChannels,
   reachVerdict,
+  roundTripEvidence,
   verifyRoundTrip
-} from "../chunk-JAKWHALW.js";
+} from "../chunk-O5RQ7RYJ.js";
 import "../chunk-3EGEA4KH.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-KT2CGUOE.js";
+} from "../chunk-6II5RBAS.js";
 import "../chunk-QCGNGEGE.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   exitOnHelpFlag
-} from "../chunk-DLLAWCQB.js";
-import "../chunk-D6PRC3YQ.js";
+} from "../chunk-GOQHN2UH.js";
+import "../chunk-LZQVAEWP.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
@@ -133,7 +135,7 @@ import {
   keyPrefix,
   readControlMode,
   readKeySource
-} from "../chunk-3N4FT4WQ.js";
+} from "../chunk-6MRPTYYH.js";
 import {
   callMcpTool,
   sendMcpRequest
@@ -145,18 +147,21 @@ import {
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-MNWDOXX6.js";
+import "../chunk-KAWLZTRJ.js";
 import {
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
 import {
+  AGENTS,
   CURSOR_GATE_EVENTS,
-  HOOK_LOCATOR_BINARY
-} from "../chunk-7VVX6HQG.js";
+  HOOK_LOCATOR_BINARY,
+  hookActivationResult,
+  isHookActivationReport
+} from "../chunk-VZADMT7R.js";
 
 // bin/pushary-doctor.ts
 import { existsSync, readFileSync, writeFileSync } from "fs";
-import { join } from "path";
+import { join, resolve } from "path";
 import { homedir as homedir2 } from "os";
 import { execFileSync } from "child_process";
 import { confirm } from "@inquirer/prompts";
@@ -215,6 +220,29 @@ var resolveDoctorExit = ({ keyExit, failures }) => {
   return EXIT.PROBLEMS_FOUND;
 };
 
+// src/diagnostics/activation.ts
+var readHookActivation = async (apiKey, agentType, target, deps = {}) => {
+  const machineId = deps.machineId ?? getMachineId();
+  const url = new URL("/api/agent/onboarding/activation", deps.baseUrl ?? getBaseUrl());
+  url.searchParams.set("machineId", machineId);
+  url.searchParams.set("agent", agentType);
+  url.searchParams.set("target", target);
+  try {
+    const response = await (deps.fetchImpl ?? fetch)(url, {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!response.ok) return { kind: "unavailable", detail: response.status === 404 ? "This server does not report hook activation yet." : `Evidence request returned HTTP ${response.status}.` };
+    const body = await response.json();
+    if (!isHookActivationReport(body) || body.machineId !== machineId || body.agentType !== agentType || body.target !== target) {
+      return { kind: "unavailable", detail: "The server returned invalid or mismatched activation evidence." };
+    }
+    return { kind: "ok", report: body };
+  } catch {
+    return { kind: "unavailable", detail: "Activation evidence could not be read. Retry when the connection is available." };
+  }
+};
+
 // src/diagnostics/roundtrip-plan.ts
 var planRoundTrip = (context) => {
   if (context.roundtrip) return { kind: "always" };
@@ -238,17 +266,25 @@ var firstToken = (command) => {
 // bin/pushary-doctor.ts
 exitOnHelpFlag("doctor");
 var parseDoctorOptions = (argv) => {
-  const flags = parseFlags(argv, { bools: ["json", "roundtrip", "no-push", "bundle", "help", "h"], values: [] });
+  const flags = parseFlags(argv, { bools: ["json", "roundtrip", "no-push", "bundle", "help", "h"], values: ["activation", "activation-target"] });
   if (flags.command !== void 0 && flags.command !== "doctor") {
     throw new UsageError(`doctor takes no positional arguments (got ${flags.command})`);
   }
   const roundtrip = flags.bools.has("roundtrip");
-  const noPush = flags.bools.has("no-push");
+  const activation2 = flags.values.get("activation") ?? null;
+  if (activation2 && (!Object.hasOwn(AGENTS, activation2) || !AGENTS[activation2].activationGuide)) throw new UsageError("This build supports --activation claude_code. Other integrations remain unverified.");
+  const rawTarget = flags.values.get("activation-target");
+  if (Boolean(activation2) !== Boolean(rawTarget)) throw new UsageError("--activation requires --activation-target with the unique scratch-file path used for this check.");
+  const activationTarget = rawTarget ? resolve(rawTarget) : null;
+  const noPush = flags.bools.has("no-push") || activation2 !== null && !roundtrip;
   if (roundtrip && noPush) {
     throw new UsageError("--roundtrip needs to send a push, so it cannot be combined with --no-push");
   }
-  return { json: flags.bools.has("json"), roundtrip, noPush, bundle: flags.bools.has("bundle") };
+  return { activationTarget, activation: activation2, json: flags.bools.has("json"), roundtrip, noPush, bundle: flags.bools.has("bundle") };
 };
+var activation = null;
+var hookActivation = "unverified";
+var roundTrip = null;
 var options;
 try {
   options = parseDoctorOptions(process.argv.slice(2));
@@ -642,8 +678,8 @@ var main = async () => {
   const controlUnsupported = controlMode === "on" && controlPolicy !== "enabled";
   const daemonOk = controlUnsupported ? false : controlPolicy === "disabled" ? daemon.kind === "absent" && !serviceDefined : controlPolicy === "enabled" ? daemonHasRemoteProof(daemon) : controlPolicy === "legacy" ? false : daemon.kind === "absent" && !serviceDefined;
   const needsLogin = loginBlock.kind === "blocked" ? `needs login: ${describeDaemonLoginBlock(loginBlock.record)}` : null;
-  const daemonFailure = daemonOk ? null : needsLogin ?? (controlUnsupported ? "control is required but no usable provider/service-manager pair is available" : controlPolicy === "enabled" && daemon.kind === "running" ? "the daemon has not completed an authenticated heartbeat and control poll" : controlPolicy === "disabled" ? `control is disabled but ${serviceDefined ? "the service definition remains" : `local state is ${daemon.kind}`}` : controlPolicy === "legacy" ? "a legacy service exists without a usable provider/service-manager pair" : `local state is ${daemon.kind}`);
-  const daemonDetail = daemonFailure ? needsLogin ? daemonFailure : controlUnsupported ? `${daemonFailure}; re-run setup with \`--control off\`, or restore both requirements` : controlPolicy === "disabled" ? `${daemonFailure}; re-run setup with \`--control off\`` : controlPolicy === "legacy" ? `${daemonFailure}; run setup with \`--control off\`, or restore both requirements` : `${daemonFailure}; run \`pushary daemon install\` to install or repair the background service` : controlPolicy === "disabled" ? "disabled by setup" : controlPolicy === "preserve-absent" ? "legacy absence preserved" : !controlRequired && daemon.kind === "absent" ? "managed control is unsupported on this provider or operating-system session" : null;
+  const daemonFailure = daemonOk ? null : needsLogin ?? (controlUnsupported ? !controlSupported ? "install and configure a supported Claude Code, Codex or Gemini provider" : "no native background-service manager is available in this OS session" : controlPolicy === "enabled" && daemon.kind === "running" ? "the daemon has not completed an authenticated heartbeat and control poll" : controlPolicy === "disabled" ? `control is disabled but ${serviceDefined ? "the service definition remains" : `local state is ${daemon.kind}`}` : controlPolicy === "legacy" ? "a legacy service exists without a usable provider/service-manager pair" : `local state is ${daemon.kind}`);
+  const daemonDetail = daemonFailure ? needsLogin ? daemonFailure : controlUnsupported ? `${daemonFailure}; re-run setup with \`--control off\`, or repair the missing prerequisite` : controlPolicy === "disabled" ? `${daemonFailure}; re-run setup with \`--control off\`` : controlPolicy === "legacy" ? `${daemonFailure}; run setup with \`--control off\`, or repair the missing prerequisite` : `${daemonFailure}; run \`pushary daemon install\` to install or repair the background service` : controlPolicy === "disabled" ? "disabled by setup" : controlPolicy === "preserve-absent" ? "legacy absence preserved" : !controlRequired && daemon.kind === "absent" ? "managed control is unsupported on this provider or operating-system session" : null;
   check(
     daemonOk,
     "Remote-control daemon",
@@ -672,8 +708,9 @@ var main = async () => {
   } else if (serviceFile) {
     console.log(`  ${warn} Remote-control service runtime ${dim(`(could not read the node path out of ${serviceFile.path})`)}`);
   }
+  let serverProof = null;
   if (controlPolicy === "enabled" && apiKey && daemon.machineId) {
-    const serverProof = await readMachineReadiness(apiKey, ["spawn", ...controlCapabilities], {
+    serverProof = await readMachineReadiness(apiKey, ["spawn", ...controlCapabilities], {
       machineId: daemon.machineId
     });
     if (serverProof.kind === "unsupported") {
@@ -975,7 +1012,7 @@ var main = async () => {
       stdinIsTty: process.stdin.isTTY === true
     });
     const testQuestion = roundTripPlan.kind === "always" ? true : roundTripPlan.kind === "never" ? false : await confirm({
-      message: "Test question roundtrip? (sends a push notification; the only check that proves you can answer one)",
+      message: "Test a synthetic question and answer? (sends a notification; does not test agent hooks)",
       default: roundTripPlan.defaultAnswer
     });
     if (testQuestion) {
@@ -983,8 +1020,9 @@ var main = async () => {
       console.log(`  ${dim("Question Roundtrip")}`);
       console.log(`  ${dim("\u2192")} Question sent, waiting for your answer...`);
       const outcome = await verifyRoundTrip(apiKey, "Pushary Doctor");
+      roundTrip = outcome;
       const report = describeRoundTrip(outcome);
-      check(report.ok, "Answer received", outcome.kind === "answered" ? `"${outcome.value}" (${(outcome.latencyMs / 1e3).toFixed(1)}s roundtrip)` : report.message);
+      check(report.ok, "Synthetic answer test", report.message);
       for (const line of report.next) console.log(`    ${dim(line)}`);
     }
   }
@@ -1013,7 +1051,19 @@ var main = async () => {
     } catch {
     }
   }
+  if (options.activation) {
+    activation = apiKey ? await readHookActivation(apiKey, options.activation, options.activationTarget) : { kind: "unavailable", detail: "Sign in before reading this workspace\u2019s hook evidence." };
+    const latest = activation.kind === "ok" ? activation.report.evidence[0] : void 0;
+    hookActivation = hookActivationResult(activation.kind === "ok" ? activation.report : null);
+    const observed = hookActivation === "approved_executed" || hookActivation === "denied_observed";
+    check(observed, "Approval for the selected scratch file (last 10 minutes)", activation.kind !== "ok" ? activation.detail : activation.report.truncated ? "Too many recent decisions to establish a unique correlation. Start a quiet test session and retry." : activation.report.evidence.length > 1 ? `${hookActivation}: multiple decisions for this target. Use a new scratch file for each attempt; inspect hookActivationEvidence for all results.` : latest ? `${latest.result}; answer source: ${latest.answerSource ?? "unknown"}; decision ${latest.correlationId}; session ${latest.sessionId}; tool call ${latest.toolUseId}` : "Unverified: no recent runtime-tagged Write approval for this scratch file on this machine.");
+    const guide = AGENTS[options.activation].activationGuide;
+    console.log(`  ${dim(`Real-agent check: https://pushary.com${guide}`)}`);
+  }
+  const managedControl = readManagedControlEvidence(apiKey, configuredManagedProviders, serverProof);
+  console.log(`  ${dim(`Phone-start and steering: ${managedControl.ready ? "local and server checks passed for this run" : "unverified; hook approvals are a separate capability"}.`)}`);
   console.log();
+  if (!options.activation) console.log(`  ${dim("Agent hook activation is unverified by these checks. Use --activation claude_code --activation-target <unique scratch file> after one real approval.")}`);
   const failed = results.filter((r) => !r.passed);
   if (failed.length === 0) {
     console.log(`  ${green(bold("All checks passed."))}`);
@@ -1050,18 +1100,22 @@ var main = async () => {
     }
   }
   if (options.json) {
-    process.stdout.write(`${JSON.stringify({
+    await new Promise((resolve2, reject) => process.stdout.write(`${JSON.stringify({
       ok: exitCode === EXIT.OK,
       exitCode,
       keyCheck: keyVerdict?.kind ?? null,
+      roundTripEvidence: roundTripEvidence(roundTrip),
+      hookActivation,
+      hookActivationEvidence: activation,
       daemon,
+      managedControl,
       daemonNeedsLogin: loginBlock.kind === "blocked" ? loginBlock.record : null,
       passed: results.filter((r) => r.passed).length,
       failed: failed.length,
       checks: results.map((r) => ({ label: r.label, passed: r.passed, detail: r.detail ?? null })),
       otherHolders: otherHoldersByAgent
     }, null, 2)}
-`);
+`, (error) => error ? reject(error) : resolve2()));
   }
   process.exit(exitCode);
 };

package/dist/bin/pushary-elicitation-hook.js

@@ -1,43 +1,43 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-V4G7BQZ6.js";
+} from "../chunk-R4MBUCPQ.js";
 import {
   isDeferAnswer
 } from "../chunk-YHG74UFF.js";
-import "../chunk-4NJURLRP.js";
-import "../chunk-ZKDQ3QRP.js";
-import "../chunk-MZOTKCNZ.js";
-import "../chunk-MDDKA4QM.js";
-import "../chunk-HTWQH3VI.js";
-import "../chunk-TMOCSYJK.js";
-import "../chunk-ND52YE7L.js";
-import "../chunk-TKA2L2BU.js";
-import "../chunk-HJYGC7IR.js";
-import "../chunk-GGX5QTBG.js";
-import "../chunk-JDNW6FTV.js";
+import "../chunk-XKIB2FQY.js";
+import "../chunk-WZ63WTAZ.js";
+import "../chunk-BS5XR4J7.js";
+import "../chunk-4XFBO3GW.js";
+import "../chunk-FVTFSYKB.js";
+import "../chunk-A2M6FGUF.js";
+import "../chunk-7N3D4GN7.js";
+import "../chunk-CDBTCEKE.js";
+import "../chunk-GOPIMNVC.js";
+import "../chunk-3AJIK5AO.js";
+import "../chunk-DH4INZW3.js";
 import "../chunk-EQRS3SGM.js";
-import "../chunk-TGORRMOU.js";
+import "../chunk-JZSWA3VT.js";
 import "../chunk-XHKBHWLX.js";
 import "../chunk-L4ZCFMWW.js";
 import {
   askUser,
   isDecisionStopped,
   waitForQuestion
-} from "../chunk-2BE7ZVWP.js";
-import "../chunk-YE37HYN3.js";
+} from "../chunk-XS33QBJA.js";
+import "../chunk-32WWVRXN.js";
 import {
   getMachineId
-} from "../chunk-O7ODXFII.js";
-import "../chunk-W5GH5GTX.js";
+} from "../chunk-C7BFOC35.js";
+import "../chunk-FBO5WS3D.js";
 import "../chunk-GMXKITVA.js";
 import "../chunk-DINDL2CF.js";
-import "../chunk-3N4FT4WQ.js";
+import "../chunk-6MRPTYYH.js";
 import "../chunk-EYRGBYZG.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-MNWDOXX6.js";
+import "../chunk-KAWLZTRJ.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
@@ -51,7 +51,7 @@ import {
   planElicitationAsk,
   readElicitationFields,
   renderElicitationOutput
-} from "../chunk-7VVX6HQG.js";
+} from "../chunk-VZADMT7R.js";
 
 // bin/pushary-elicitation-hook.ts
 import { basename } from "path";