@pushary/agent-hooks 0.95.5 → 0.95.6

package/dist/bin/pushary-upgrade.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import {
   reapplyAllAgents
-} from "../chunk-Z2UWFEJW.js";
-import "../chunk-6AEM5RCS.js";
+} from "../chunk-XJ6CXTSB.js";
+import "../chunk-OIZVYUED.js";
 import {
   waitForMachineReadiness
-} from "../chunk-32RMQO5Z.js";
-import "../chunk-HGUZOUB2.js";
+} from "../chunk-WRK6RAA5.js";
+import "../chunk-HHODMHTH.js";
 import {
   detectProviderLiveCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-IM2A5H33.js";
-import "../chunk-HBHEX3JQ.js";
+} from "../chunk-HKQ6CD32.js";
+import "../chunk-A2M6FGUF.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
@@ -23,8 +23,8 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-XLOELLAS.js";
-import "../chunk-2D7BAOMY.js";
+} from "../chunk-7N3D4GN7.js";
+import "../chunk-CDBTCEKE.js";
 import "../chunk-3AJIK5AO.js";
 import {
   needsShell
@@ -34,31 +34,31 @@ import {
   npmErrorMessage,
   resolveGlobalBinary
 } from "../chunk-L4ZCFMWW.js";
-import "../chunk-IVQMNLSA.js";
-import "../chunk-N4VNLISN.js";
+import "../chunk-32WWVRXN.js";
+import "../chunk-C7BFOC35.js";
 import {
   claudeJson,
   codexConfigToml,
   cursorPluginDir,
   geminiSettings,
   vscodePluginDir
-} from "../chunk-OW6AZDY2.js";
+} from "../chunk-FBO5WS3D.js";
 import {
   exitOnHelpFlag
-} from "../chunk-DLLAWCQB.js";
-import "../chunk-D6PRC3YQ.js";
+} from "../chunk-GOQHN2UH.js";
+import "../chunk-LZQVAEWP.js";
 import {
   isNewerVersion
 } from "../chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "../chunk-S5CMLR35.js";
+} from "../chunk-6MRPTYYH.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-KAVDAZ7A.js";
+import "../chunk-KAWLZTRJ.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
-import "../chunk-WDKHZRAS.js";
+import "../chunk-VZADMT7R.js";
 
 // bin/pushary-upgrade.ts
 import { existsSync } from "fs";

package/dist/bin/pushary-wait.js

@@ -4,15 +4,15 @@ import {
 } from "../chunk-IIENZE2J.js";
 import {
   exitOnFailedResponse
-} from "../chunk-RLXVW4AM.js";
-import "../chunk-I6GZX3FT.js";
+} from "../chunk-ZQREURP6.js";
+import "../chunk-6II5RBAS.js";
 import {
   createIo
 } from "../chunk-5RUIFDTP.js";
 import {
   exitOnHelpFlag
-} from "../chunk-DLLAWCQB.js";
-import "../chunk-D6PRC3YQ.js";
+} from "../chunk-GOQHN2UH.js";
+import "../chunk-LZQVAEWP.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
@@ -28,7 +28,7 @@ import {
   getApiKey,
   getBaseUrl
 } from "../chunk-2UMNXADU.js";
-import "../chunk-WDKHZRAS.js";
+import "../chunk-VZADMT7R.js";
 
 // bin/pushary-wait.ts
 exitOnHelpFlag("wait");

package/dist/bin/pushary.js

@@ -3,7 +3,7 @@ import {
   COMMANDS,
   isCommandName,
   renderHelp
-} from "../chunk-D6PRC3YQ.js";
+} from "../chunk-LZQVAEWP.js";
 import {
   getPackageVersion
 } from "../chunk-DINDL2CF.js";

package/dist/{chunk-UCS65VVR.js → chunk-32WFHA77.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-IVQMNLSA.js → chunk-32WWVRXN.js}

@@ -1,7 +1,7 @@
 import {
   ASKED_IN_EVERY_MODE_TOOLS,
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/claude-tools.ts
 var PRETOOLUSE_PHONE_ANSWERED_TOOLS = ASKED_IN_EVERY_MODE_TOOLS;

package/dist/{chunk-HQIVR7MM.js → chunk-43TFQOAT.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-2ZTL3PGN.js → chunk-4XFBO3GW.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/setup/options.ts
 var AGENT_CHOICES = ["claude_code", "codex", "gemini_cli", "hermes", "cursor", "vscode", "opencode", "custom"];

package/dist/{chunk-I6GZX3FT.js → chunk-6II5RBAS.js}

@@ -13,7 +13,7 @@ import {
 import {
   isValidApiKey,
   normalizeKeyScope
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/session.ts
 var samePusharyAccount = (left, right) => left.kind === "ok" && right.kind === "ok" && left.identity.workspaceId !== "" && left.identity.workspaceId === right.identity.workspaceId && left.identity.siteId === right.identity.siteId;

package/dist/{chunk-S5CMLR35.js → chunk-6MRPTYYH.js}

@@ -4,7 +4,7 @@ import {
   resolveInstallSourceFor,
   writeFileAtomic,
   writeJsonAtomic
-} from "./chunk-KAVDAZ7A.js";
+} from "./chunk-KAWLZTRJ.js";
 import {
   configFilePath
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-XLOELLAS.js → chunk-7N3D4GN7.js}

@@ -7,22 +7,22 @@ import {
 } from "./chunk-L4ZCFMWW.js";
 import {
   getMachineId
-} from "./chunk-N4VNLISN.js";
+} from "./chunk-C7BFOC35.js";
 import {
   pusharyDir
-} from "./chunk-OW6AZDY2.js";
+} from "./chunk-FBO5WS3D.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "./chunk-S5CMLR35.js";
+} from "./chunk-6MRPTYYH.js";
 import {
   readJsonSafe,
   writeFileAtomic,
   writeJsonAtomic,
   writeJsonAtomicDurable
-} from "./chunk-KAVDAZ7A.js";
+} from "./chunk-KAWLZTRJ.js";
 import {
   getApiKey
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-HBHEX3JQ.js → chunk-A2M6FGUF.js}

@@ -2,15 +2,15 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-2D7BAOMY.js";
+} from "./chunk-CDBTCEKE.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks
-} from "./chunk-OW6AZDY2.js";
+} from "./chunk-FBO5WS3D.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-WRDLHR2F.js → chunk-AXECWTTZ.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-2ZTL3PGN.js";
+} from "./chunk-4XFBO3GW.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-VOSGZ6PH.js → chunk-BS5XR4J7.js}

@@ -1,12 +1,12 @@
 import {
   AGENT_CHOICES
-} from "./chunk-2ZTL3PGN.js";
+} from "./chunk-4XFBO3GW.js";
 import {
   isBridgeLocator
-} from "./chunk-CUEZMPLJ.js";
+} from "./chunk-FVTFSYKB.js";
 import {
   pusharyHookExecutable
-} from "./chunk-HBHEX3JQ.js";
+} from "./chunk-A2M6FGUF.js";
 import {
   BELL_HOOK_BINARY
 } from "./chunk-GOPIMNVC.js";

package/dist/{chunk-N4VNLISN.js → chunk-C7BFOC35.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-OW6AZDY2.js";
+} from "./chunk-FBO5WS3D.js";
 import {
   writeFileAtomic
-} from "./chunk-KAVDAZ7A.js";
+} from "./chunk-KAWLZTRJ.js";
 
 // src/identity.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-2D7BAOMY.js → chunk-CDBTCEKE.js}

@@ -2,15 +2,15 @@ import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS,
   PRETOOLUSE_PHONE_ANSWERED_TOOLS
-} from "./chunk-IVQMNLSA.js";
+} from "./chunk-32WWVRXN.js";
 import {
   isProtectedByScope
-} from "./chunk-OW6AZDY2.js";
+} from "./chunk-FBO5WS3D.js";
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-4PX4QK2Z.js → chunk-DH4INZW3.js}

@@ -1,6 +1,6 @@
 import {
   redactSecrets
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-QQGNFHIK.js → chunk-DSCGKZO5.js}

@@ -1,9 +1,9 @@
 import {
   pusharyDir
-} from "./chunk-OW6AZDY2.js";
+} from "./chunk-FBO5WS3D.js";
 import {
   readJsonSafe
-} from "./chunk-KAVDAZ7A.js";
+} from "./chunk-KAWLZTRJ.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-OW6AZDY2.js → chunk-FBO5WS3D.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/removal-scope.ts
 var namesAppLocator = (command) => command.includes(HOOK_LOCATOR_BINARY);

package/dist/{chunk-67YNQ3QA.js → chunk-FHIVWF4B.js}

@@ -1,10 +1,10 @@
 import {
   defersToNativeMode
-} from "./chunk-D62EONG3.js";
+} from "./chunk-SRFA5BOO.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-UCS65VVR.js";
+} from "./chunk-32WFHA77.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -20,7 +20,7 @@ import {
   reportEvent,
   settleQuestionsForToolUse,
   throttlePass
-} from "./chunk-HCMM3BOW.js";
+} from "./chunk-ZJ6QXXBC.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -38,10 +38,10 @@ import {
   describeToolCall,
   permissionDeniedAction,
   scopePathFor
-} from "./chunk-BDI2MXTT.js";
+} from "./chunk-HBBQO77U.js";
 import {
   getMachineId
-} from "./chunk-N4VNLISN.js";
+} from "./chunk-C7BFOC35.js";
 import {
   getApiKey,
   getBaseUrl
@@ -53,13 +53,14 @@ import {
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline,
+  hookWritePath,
   isPermissionRequestOwnedByPreToolUse,
   isPusharyOwnTool,
   parseAgentQuestionAnswers,
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";
@@ -225,6 +226,7 @@ var dispatchModeHandler = async (apiKey, input, toolPolicy, machineId, trainingC
   const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
   const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
   const decision = {
+    toolPath: hookWritePath(input.tool_name, input.tool_input),
     intent,
     action: deriveAction(input.tool_name, input.tool_input),
     blocker: scopeReason ?? deriveBlocker(toolPolicy.mode),
@@ -537,6 +539,8 @@ var automodeRetryEnabled = () => {
 };
 var reportPermissionDenied = (input) => reportEvent({
   event: "permission_denied",
+  occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
+  toolUseId: input.tool_use_id,
   agentType: CLAUDE_CODE_AGENT.type,
   agentName: `${CLAUDE_CODE_AGENT.label} - ${basename(input.cwd ?? process.cwd())}`,
   action: permissionDeniedAction(input.tool_name),

package/dist/{chunk-CUEZMPLJ.js → chunk-FVTFSYKB.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/diagnostics/bridge.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-DLLAWCQB.js → chunk-GOQHN2UH.js}

@@ -1,6 +1,6 @@
 import {
   renderCommandHelp
-} from "./chunk-D6PRC3YQ.js";
+} from "./chunk-LZQVAEWP.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";

package/dist/{chunk-BDI2MXTT.js → chunk-HBBQO77U.js}

@@ -5,7 +5,7 @@ import {
   FILE_TARGET_TOOLS,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // ../hook-mapping/src/describe.ts
 import { isAbsolute, relative, resolve } from "path";

package/dist/{chunk-HGUZOUB2.js → chunk-HHODMHTH.js}

@@ -1,16 +1,16 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-2D7BAOMY.js";
+} from "./chunk-CDBTCEKE.js";
 import {
   guardBinary
 } from "./chunk-3AJIK5AO.js";
 import {
   isProtectedByScope
-} from "./chunk-OW6AZDY2.js";
+} from "./chunk-FBO5WS3D.js";
 import {
   HOOK_LOCATOR_BINARY
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-IM2A5H33.js → chunk-HKQ6CD32.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-L4ZCFMWW.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-OI3DJA7N.js → chunk-JZSWA3VT.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-S5CMLR35.js";
+} from "./chunk-6MRPTYYH.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-KAVDAZ7A.js → chunk-KAWLZTRJ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2UMNXADU.js";
 import {
   normalizeInstallSource
-} from "./chunk-WDKHZRAS.js";
+} from "./chunk-VZADMT7R.js";
 
 // src/cli/fsx.ts
 import { copyFileSync, existsSync, fsyncSync, mkdirSync, openSync, closeSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";

package/dist/{chunk-QHWXUNMN.js → chunk-KNIVXEW4.js}

@@ -3,7 +3,7 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-4PX4QK2Z.js";
+} from "./chunk-DH4INZW3.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords

package/dist/{chunk-D6PRC3YQ.js → chunk-LZQVAEWP.js}

@@ -125,7 +125,8 @@ var COMMAND_OPTIONS = {
   ],
   doctor: [
     ["--json", "Emit every check as one object instead of the screen"],
-    ["--roundtrip", "Also send a real question and wait for you to answer it on your phone"],
+    ["--roundtrip", "Send a synthetic question and report the returned answer; does not test hooks"],
+    ["--activation claude_code --activation-target <path>", "Read correlated evidence for one unique scratch file; sends no test question"],
     ["--no-push", "Run every check without waking a device"],
     ["--bundle", "Write a redacted diagnostics file you can attach to a support thread"]
   ],

package/dist/{chunk-KI4PA7MQ.js → chunk-O5RQ7RYJ.js}

@@ -15,7 +15,10 @@ import {
 } from "./chunk-EYRGBYZG.js";
 import {
   reportedInstallSource
-} from "./chunk-KAVDAZ7A.js";
+} from "./chunk-KAWLZTRJ.js";
+import {
+  isAnswerSource
+} from "./chunk-VZADMT7R.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {
@@ -119,7 +122,7 @@ var classifyDelivery = (channels, push) => {
 var sendTestNotification = async (apiKey) => {
   const result = await callMcpTool(apiKey, "send_notification", {
     title: "Pushary is connected",
-    body: "Your AI agent can now reach you right here.",
+    body: "This setup notification reached you. Agent hooks still need a real-agent check.",
     agentName: "Pushary setup"
   }, { timeoutMs: 2e4 });
   const toCount = (value) => typeof value === "number" && Number.isFinite(value) ? value : 0;
@@ -145,7 +148,7 @@ var describeVerifyOutcome = (outcome) => {
         message: "Nothing to deliver to. Agents are configured; approvals will fall back to the terminal.",
         next: [
           "Run pushary connect to add your phone.",
-          "Then pushary doctor --roundtrip to test a real approval."
+          "Then pushary doctor --roundtrip to test a synthetic question and answer."
         ]
       };
     case "others-only":
@@ -174,7 +177,7 @@ var describeVerifyOutcome = (outcome) => {
       };
   }
 };
-var ROUND_TRIP_QUESTION = "Setup is nearly done. Tap Yes and this machine is connected.";
+var ROUND_TRIP_QUESTION = "Pushary delivery test. Tap Yes or No to test returning an answer. This does not test your agent hooks.";
 var ROUND_TRIP_TIMEOUT_MS = 55e3;
 var defaultAsk = (apiKey, agentName) => (
   // wait:false so the poll is ours: the blocking form returns on the SITE's
@@ -195,6 +198,18 @@ var defaultCancel = async (apiKey, correlationId) => {
   await callMcpTool(apiKey, "cancel_question", { correlationId }, { timeoutMs: 1e4 }).catch(() => {
   });
 };
+var answeredRoundTrip = (answer, correlationId, latencyMs) => {
+  if (answer.value !== "yes" && answer.value !== "no") {
+    return { kind: "error", detail: "the server reported an answer without a valid Yes or No value" };
+  }
+  return {
+    kind: "answered",
+    value: answer.value,
+    latencyMs,
+    correlationId,
+    ...isAnswerSource(answer.answerSource) ? { answerSource: answer.answerSource } : {}
+  };
+};
 var verifyRoundTrip = async (apiKey, agentName = "Pushary setup", deps = {}) => {
   const ask = deps.ask ?? defaultAsk;
   const wait = deps.wait ?? defaultWait;
@@ -207,31 +222,73 @@ var verifyRoundTrip = async (apiKey, agentName = "Pushary setup", deps = {}) =>
   } catch (err) {
     return { kind: "error", detail: err instanceof Error ? err.message : "ask failed" };
   }
-  if (asked.noDevices || asked.warning) return { kind: "no-recipients" };
-  if (asked.mode === "notify_only" || asked.status === "notified") return { kind: "notify-only" };
-  if (!asked.correlationId) return { kind: "error", detail: "no correlationId returned" };
-  if (asked.answered === true) {
-    return { kind: "answered", value: asked.value ?? "yes", latencyMs: now() - started };
+  let shutdown;
+  const stop = (code) => {
+    if (shutdown) return;
+    shutdown = (async () => {
+      let timer;
+      try {
+        await Promise.race([
+          cancel(apiKey, asked.correlationId).catch(() => {
+          }),
+          new Promise((resolve) => {
+            timer = setTimeout(resolve, 4e3);
+          })
+        ]);
+      } finally {
+        clearTimeout(timer);
+        process.stderr.write("Delivery test interrupted. Cleanup was attempted; an unresolved question expires automatically.\n");
+        process.exit(code);
+      }
+    })();
+  };
+  const onInterrupt = () => stop(130);
+  const onTerminate = () => stop(143);
+  if (asked.correlationId) {
+    process.on("SIGINT", onInterrupt);
+    process.on("SIGTERM", onTerminate);
   }
-  let answer;
+  let answerObserved = false;
   try {
-    answer = await wait(apiKey, asked.correlationId);
+    if (asked.noDevices || asked.warning) return { kind: "no-recipients" };
+    if (asked.mode === "notify_only" || asked.status === "notified") return { kind: "notify-only" };
+    if (!asked.correlationId) return { kind: "error", detail: "no correlationId returned" };
+    const answer = asked.answered === true ? asked : await wait(apiKey, asked.correlationId);
+    if (answer.answered === true) {
+      const outcome = answeredRoundTrip(answer, asked.correlationId, now() - started);
+      answerObserved = outcome.kind === "answered";
+      return outcome;
+    }
+    return { kind: "unanswered" };
   } catch (err) {
-    await cancel(apiKey, asked.correlationId);
     return { kind: "error", detail: err instanceof Error ? err.message : "wait failed" };
+  } finally {
+    if (shutdown) await shutdown;
+    process.off("SIGINT", onInterrupt);
+    process.off("SIGTERM", onTerminate);
+    if (!answerObserved && asked.correlationId) await cancel(apiKey, asked.correlationId).catch(() => {
+    });
   }
-  if (answer.answered === true) {
-    return { kind: "answered", value: answer.value ?? "yes", latencyMs: now() - started };
+};
+var describeAnswerSource = (source) => {
+  switch (source) {
+    case "mobile_app":
+    case "mobile_background":
+      return "A phone answered this synthetic test.";
+    case "mac_app":
+      return "A Mac answered this synthetic test.";
+    case "sandbox":
+      return "This was a simulated sandbox answer.";
+    default:
+      return source ? `Answer source: ${source}. This was a synthetic test.` : "The answering surface was not reported. This was a synthetic test.";
   }
-  await cancel(apiKey, asked.correlationId);
-  return { kind: "unanswered" };
 };
-var describeRoundTrip = (outcome) => {
+var describeRoundTripOutcome = (outcome) => {
   switch (outcome.kind) {
     case "answered":
       return {
         ok: true,
-        message: `Answered "${outcome.value}" in ${(outcome.latencyMs / 1e3).toFixed(1)}s. Your agent can reach you and you can answer it.`,
+        message: `Answered "${outcome.value}" in ${(outcome.latencyMs / 1e3).toFixed(1)}s. ${describeAnswerSource(outcome.answerSource)}`,
         next: []
       };
     case "unanswered":
@@ -266,6 +323,20 @@ var describeRoundTrip = (outcome) => {
       };
   }
 };
+var describeRoundTrip = (outcome) => {
+  const report = describeRoundTripOutcome(outcome);
+  return { ...report, next: [...report.next, "Agent hook activation remains unverified. Restart your agent and check one real approval."] };
+};
+var roundTripEvidence = (outcome) => ({
+  kind: outcome?.kind ?? "skipped",
+  ...outcome?.kind === "answered" ? {
+    correlationId: outcome.correlationId ?? null,
+    answerSource: outcome.answerSource ?? null,
+    value: outcome.value,
+    latencyMs: outcome.latencyMs
+  } : {},
+  hookActivation: "unverified"
+});
 
 // src/onboarding.ts
 import qrcodeTerminal from "qrcode-terminal";
@@ -863,6 +934,7 @@ export {
   describeReach,
   verifyRoundTrip,
   describeRoundTrip,
+  roundTripEvidence,
   fetchChannels,
   connectDevice,
   confirmAppConnection,