pushary 1.9.132 → 1.9.134

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 1.9.134
+
+- Linux: on a machine you reach over SSH, phone-start keeps running after you log out, and starts again after a reboot. Setup, `pushary upgrade` and `pushary daemon install` now turn on systemd lingering for your user unless you are signed in to a desktop session there, and say so. Where the system refuses, they print the `sudo loginctl enable-linger` command instead. Before, systemd stopped the daemon when your last SSH session closed, while setup still reported phone-start as working. `pushary doctor` has a new row, "Remote-control service survives logout".
+
+## 1.9.133
+
+- The background daemon starts again by itself after its lock file was left empty or cut off, for example when the disk filled up or the computer lost power while it was starting, and, on macOS and Linux, after a power cut or forced restart left a lock that names a process number another program now uses. Before, it exited at once and was restarted again and again, writing an error each time, and even `pushary daemon restart` could not clear the second case.
+- Linux: setup, `pushary upgrade` and `pushary daemon install` can replace a daemon that systemd keeps restarting after a crash. Before, they stopped with "Could not inspect whether the native service is running: activating" and left the crash loop in place.
+
 ## 1.9.132
 
 - Windows: your phone shows Claude's reply as it streams, as it does on macOS and Linux. Before, a file check that only fits macOS and Linux refused the live preview on Windows, so the phone showed only the finished reply.

package/dist/bin/pushary-bell-hook.js

@@ -4,13 +4,13 @@ import {
 } from "../chunk-GQPXW6BL.js";
 import {
   readHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import "../chunk-MRHGK3Q3.js";
 import "../chunk-JYCAAQUW.js";

package/dist/bin/pushary-claude.js

@@ -24,12 +24,12 @@ import {
   registerTranscript,
   registeredTranscriptEnabled,
   startDraftPublisher
-} from "../chunk-U5AZKJ5O.js";
+} from "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import {
   ensureDaemonRunning
-} from "../chunk-KBOANW7J.js";
+} from "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import {
   DEFAULT_SESSION,

package/dist/bin/pushary-clean.js

@@ -15,13 +15,13 @@ import {
   storedMacAppState,
   storedPusharyKeychainServices,
   waitForMacAppExit
-} from "../chunk-J6WO5ZR5.js";
+} from "../chunk-PHKCTMAV.js";
 import {
   PUSHARY_SKILL_NAME,
   PUSHARY_SKILL_SOURCE,
   createGuards
 } from "../chunk-J42EAEX3.js";
-import "../chunk-FP4WRSWE.js";
+import "../chunk-VME5NXCM.js";
 import "../chunk-XCEN33UP.js";
 import {
   describeCliKeyRevocation,
@@ -98,7 +98,7 @@ import {
 } from "../chunk-RZBV5KTF.js";
 import {
   disableDaemonService
-} from "../chunk-KBOANW7J.js";
+} from "../chunk-3DCCMO23.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,

package/dist/bin/pushary-codex-hook.js

@@ -23,17 +23,17 @@ import {
 } from "../chunk-UZUDMZES.js";
 import {
   readHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
 } from "../chunk-EA5EASYT.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import {
   CODEX_AGENT,

package/dist/bin/pushary-codex-session.js

@@ -19,7 +19,7 @@ var desktopAccount = async () => {
     return null;
   }
 };
-var desktopLaunch = await import("../codex-desktop-launch-EQ4VH6QV.js").catch(() => null);
+var desktopLaunch = await import("../codex-desktop-launch-CFKIJZVB.js").catch(() => null);
 if (desktopLaunch === null && appBehindTheProxy !== void 0) {
   process.exitCode = await letCodexRunWithoutPushary(appBehindTheProxy, args.slice(3));
 } else {
@@ -27,7 +27,7 @@ if (desktopLaunch === null && appBehindTheProxy !== void 0) {
   const stop = () => abort.abort();
   if (!args[0]?.startsWith("--desktop")) for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) process.on(signal, stop);
   try {
-    const { codexDesktopCommand } = desktopLaunch ?? await import("../codex-desktop-launch-EQ4VH6QV.js");
+    const { codexDesktopCommand } = desktopLaunch ?? await import("../codex-desktop-launch-CFKIJZVB.js");
     const desktop = await codexDesktopCommand(args, [process.execPath, ...process.execArgv, process.argv[1], "codex"], desktopAccount);
     if (desktop !== null) process.exitCode = desktop;
     else {

package/dist/bin/pushary-daemon.js

@@ -8,10 +8,14 @@ import {
 } from "../chunk-6JY44IZI.js";
 import "../chunk-FT5MTCKU.js";
 import "../chunk-PG23ENSN.js";
+import {
+  keepLinuxDaemonAfterLogout,
+  lingerReportOf
+} from "../chunk-AIZYJJGD.js";
 import {
   HEARTBEAT_INTERVAL_MS,
   sendHeartbeat
-} from "../chunk-NJH6EGZN.js";
+} from "../chunk-FJST6ZXC.js";
 import "../chunk-RLQDVWZ4.js";
 import {
   readSignedOutDiagnosis
@@ -56,7 +60,7 @@ import {
 import "../chunk-EPPH5RMJ.js";
 import {
   startRegisteredTranscripts
-} from "../chunk-U5AZKJ5O.js";
+} from "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-RZBV5KTF.js";
@@ -77,7 +81,7 @@ import {
   requestDaemonHandoff,
   stopDaemonRunning,
   writeDaemonNeedsLogin
-} from "../chunk-KBOANW7J.js";
+} from "../chunk-3DCCMO23.js";
 import {
   hookOwnerOf
 } from "../chunk-237FYIVC.js";
@@ -2305,6 +2309,9 @@ var main = async () => {
       return EXIT.UNREACHABLE;
     }
     process.stdout.write("[pushary] daemon service installed and online\n");
+    const linger = lingerReportOf(keepLinuxDaemonAfterLogout());
+    if (linger) (linger.tone === "warning" ? process.stderr : process.stdout).write(`[pushary] ${linger.text}
+`);
     return EXIT.OK;
   }
   if (action === "start") {

package/dist/bin/pushary-display-hook.js

@@ -2884,7 +2884,7 @@ import { join as join3 } from "path";
 init_fsx();
 init_paths();
 import { createHash as createHash10 } from "crypto";
-import { lstatSync as lstatSync5, readFileSync as readFileSync18, readdirSync as readdirSync2, realpathSync as realpathSync4, statSync as statSync4, unlinkSync as unlinkSync5 } from "fs";
+import { lstatSync as lstatSync5, readFileSync as readFileSync18, readdirSync as readdirSync2, realpathSync as realpathSync4, statSync as statSync5, unlinkSync as unlinkSync5 } from "fs";
 import { basename as basename2, dirname as dirname8, isAbsolute, join as join19, relative, resolve as resolve3, sep } from "path";
 
 // src/transcript-phone-trust.ts
@@ -7597,9 +7597,9 @@ var hookOwnerOfCommands = (commands, appAvailable = true) => {
 // src/daemon-lifecycle.ts
 init_src();
 import { dirname as dirname7, join as join18, win32 as win32Path } from "path";
-import { existsSync as existsSync6, mkdirSync as mkdirSync6, readFileSync as readFileSync17, realpathSync as realpathSync3, renameSync as renameSync3, unlinkSync as unlinkSync4, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync6, readFileSync as readFileSync17, realpathSync as realpathSync3, renameSync as renameSync3, statSync as statSync4, unlinkSync as unlinkSync4, writeFileSync as writeFileSync5 } from "fs";
 import { createHash as createHash9, randomUUID as randomUUID3 } from "crypto";
-import { homedir as homedir8, userInfo } from "os";
+import { homedir as homedir8, uptime, userInfo } from "os";
 
 // src/identity.ts
 init_fsx();
@@ -7802,7 +7802,7 @@ var cliRegistry = (apiKey = getApiKey()) => ({ apiKey, baseUrl: getBaseUrl(), di
 var accountFor = (registry) => createHash10("sha256").update(`${registry.baseUrl}\0${registry.apiKey}`).digest("hex");
 var TTL = 48 * 60 * 60 * 1e3;
 var read = (path) => {
-  if (statSync4(path).size > 16384) throw new Error("History registration exceeds its size limit");
+  if (statSync5(path).size > 16384) throw new Error("History registration exceeds its size limit");
   return storedRegistrationSchema.parse(JSON.parse(readFileSync18(path, "utf8")));
 };
 var consent = (record) => record.consentOverride ?? readTranscriptPreference() ?? true;

package/dist/bin/pushary-doctor.js

@@ -32,10 +32,15 @@ import {
   roundTripEvidence,
   verifyRoundTrip
 } from "../chunk-L5RSLIBQ.js";
+import {
+  daemonStopsAtLogout,
+  lingerDoctorDetail,
+  readLinuxLinger
+} from "../chunk-AIZYJJGD.js";
 import {
   readMachineReadiness,
   readManagedControlEvidence
-} from "../chunk-NJH6EGZN.js";
+} from "../chunk-FJST6ZXC.js";
 import {
   assessCodexHookTrust,
   readCodexTrustForPusharyHooks
@@ -143,7 +148,7 @@ import {
   readDaemonNeedsLogin,
   readDaemonStatus,
   readInstalledDaemonService
-} from "../chunk-KBOANW7J.js";
+} from "../chunk-3DCCMO23.js";
 import {
   GEMINI_HOOK_BINARY,
   claudeOtherHolders,
@@ -1198,6 +1203,8 @@ var main = async () => {
   } else if (serviceFile) {
     console.log(`  ${warn} Remote-control service runtime ${dim(`(could not read the node path out of ${serviceFile.path})`)}`);
   }
+  const linger = serviceFile && controlPolicy === "enabled" ? readLinuxLinger() : null;
+  if (linger) check(!daemonStopsAtLogout(linger), "Remote-control service survives logout", lingerDoctorDetail(linger));
   let serverProof = null;
   if (controlPolicy === "enabled" && apiKey && daemon.machineId) {
     serverProof = await readMachineReadiness(apiKey, expectedLaunchCapabilities(configuredManagedProviders), {

package/dist/bin/pushary-elicitation-hook.js

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
 } from "../chunk-EA5EASYT.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import "../chunk-MRHGK3Q3.js";
 import "../chunk-JYCAAQUW.js";

package/dist/bin/pushary-gemini-hook.js

@@ -16,17 +16,17 @@ import {
 } from "../chunk-UZUDMZES.js";
 import {
   readHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
 } from "../chunk-EA5EASYT.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import {
   DEFAULT_SESSION,

package/dist/bin/pushary-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-4EGRD5RS.js";
+} from "../chunk-QVIDOVT6.js";
 import "../chunk-FT5MTCKU.js";
 import {
   exitOnHelpFlag
@@ -11,10 +11,10 @@ import "../chunk-HW63OEVM.js";
 import "../chunk-2U4MCUVZ.js";
 import {
   readToolHookCall
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
 import "../chunk-EA5EASYT.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -22,7 +22,7 @@ import {
   normalizeToolCall,
   profileFromArgv
 } from "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import "../chunk-MRHGK3Q3.js";
 import {

package/dist/bin/pushary-login.js

@@ -25,7 +25,7 @@ import {
 import "../chunk-G66WIAST.js";
 import {
   recoverDaemonAfterLogin
-} from "../chunk-KBOANW7J.js";
+} from "../chunk-3DCCMO23.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";

package/dist/bin/pushary-notification-hook.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import {
   activeHookSource,
   activeIdentity
 } from "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import {
   handleNotification

package/dist/bin/pushary-opencode-hook.js

@@ -13,17 +13,17 @@ import {
 } from "../chunk-2U4MCUVZ.js";
 import {
   readHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
 } from "../chunk-EA5EASYT.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import {
   DEFAULT_SESSION,

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-4EGRD5RS.js";
+} from "../chunk-QVIDOVT6.js";
 import "../chunk-FT5MTCKU.js";
 import {
   takeHookHoldBudget
@@ -11,14 +11,14 @@ import "../chunk-HW63OEVM.js";
 import "../chunk-2U4MCUVZ.js";
 import {
   readHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
 import "../chunk-EA5EASYT.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import "../chunk-MRHGK3Q3.js";
 import "../chunk-JYCAAQUW.js";

package/dist/bin/pushary-permission-hook.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-4EGRD5RS.js";
+} from "../chunk-QVIDOVT6.js";
 import "../chunk-FT5MTCKU.js";
 import {
   takeHookHoldBudget
@@ -11,10 +11,10 @@ import "../chunk-HW63OEVM.js";
 import "../chunk-2U4MCUVZ.js";
 import {
   readToolHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
 import "../chunk-EA5EASYT.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -22,7 +22,7 @@ import {
   normalizeToolCall,
   profileFromArgv
 } from "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import "../chunk-MRHGK3Q3.js";
 import {

package/dist/bin/pushary-post-hook.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import {
@@ -12,7 +12,7 @@ import {
   normalizeToolCall,
   profileFromArgv
 } from "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import {
   emitHookOutput,

package/dist/bin/pushary-prompt-hook.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import {
   activeHookSource,
   activeIdentity
 } from "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import {
   emitHookOutput,

package/dist/bin/pushary-session-end-hook.js

@@ -5,16 +5,16 @@ import {
 import "../chunk-CYTPQDQY.js";
 import {
   readHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import {
   activeHookSource,
   activeIdentity
 } from "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import {
   handleSessionEnd

package/dist/bin/pushary-session-start-hook.js

@@ -15,16 +15,16 @@ import {
 } from "../chunk-UZUDMZES.js";
 import {
   readHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import {
   activeHookSource,
   activeIdentity
 } from "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import {
   CLAUDE_CODE_AGENT,

package/dist/bin/pushary-setup.js

@@ -91,10 +91,14 @@ import {
   roundTripWasAnswered,
   verifyRoundTrip
 } from "../chunk-L5RSLIBQ.js";
+import {
+  keepLinuxDaemonAfterLogout,
+  lingerReportOf
+} from "../chunk-AIZYJJGD.js";
 import {
   readManagedControlEvidence,
   waitForMachineReadiness
-} from "../chunk-NJH6EGZN.js";
+} from "../chunk-FJST6ZXC.js";
 import {
   ensureCodexTrustsPusharyHooks
 } from "../chunk-RLQDVWZ4.js";
@@ -105,7 +109,7 @@ import {
 } from "../chunk-J42EAEX3.js";
 import {
   codexEngineBehindLauncher
-} from "../chunk-FP4WRSWE.js";
+} from "../chunk-VME5NXCM.js";
 import "../chunk-XCEN33UP.js";
 import {
   CURSOR_PLUGIN_BACKUP_INFIX,
@@ -254,7 +258,7 @@ import {
   serviceNodeFor,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-KBOANW7J.js";
+} from "../chunk-3DCCMO23.js";
 import {
   GEMINI_HOOK_BINARY,
   GEMINI_HOOK_EVENTS,
@@ -894,6 +898,15 @@ var warnVersionManagerPin = (execPath) => {
   const manager = versionManagerOf(execPath);
   if (manager) console.log(`  ${yellow("!")} ${describeVersionManagerPin(execPath, manager)}`);
 };
+var reportLinger = (report) => {
+  if (!report) return;
+  if (report.tone === "note") {
+    console.log(`  ${dim(report.text)}`);
+    return;
+  }
+  console.log(`  ${yellow("!")} ${report.text}`);
+  noteManual(report.text);
+};
 var installGlobally2 = async () => {
   if (globalInstallReady) return;
   const version = getPackageVersion();
@@ -2810,6 +2823,7 @@ var main = async () => {
       const service = await replaceDaemonService();
       if (service.kind === "ok") {
         warnVersionManagerPin(serviceNodeFor(process.execPath, existsSync));
+        reportLinger(lingerReportOf(keepLinuxDaemonAfterLogout()));
         controlFailureStage = "daemon-start";
         daemon = await ensureDaemonRunning({ spawnDaemon: () => {
         }, waitTimeoutMs: DAEMON_COLD_START_TIMEOUT_MS });

package/dist/bin/pushary-status.js

@@ -13,7 +13,7 @@ import {
 import {
   describeLastSeen,
   listMachines
-} from "../chunk-NJH6EGZN.js";
+} from "../chunk-FJST6ZXC.js";
 import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   activeKeyVerdictOf,
@@ -38,7 +38,7 @@ import "../chunk-X23GSBOH.js";
 import "../chunk-UJZ5YHSR.js";
 import "../chunk-CYTPQDQY.js";
 import "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import "../chunk-MRHGK3Q3.js";
 import "../chunk-JYCAAQUW.js";

package/dist/bin/pushary-stop-hook.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import {
   activeHookSource,
   activeIdentity
 } from "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import {
   emitHookOutput,

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-BTDEBPPR.js";
+} from "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import {
   activeHookSource,
   activeIdentity
 } from "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import {
   handleStopFailure

package/dist/bin/pushary-transcript-register.js

@@ -5,10 +5,10 @@ import {
 } from "../chunk-S4HS6VTI.js";
 import {
   registerTranscript
-} from "../chunk-U5AZKJ5O.js";
+} from "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import "../chunk-JYCAAQUW.js";
 import "../chunk-XHC3UNOK.js";

package/dist/bin/pushary-transcripts.js

@@ -21,10 +21,10 @@ import {
   snapshotRecipientPinFile,
   trustPhoneRecipient,
   verifyTrustedRecipients
-} from "../chunk-U5AZKJ5O.js";
+} from "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import "../chunk-JYCAAQUW.js";
 import "../chunk-XHC3UNOK.js";

package/dist/bin/pushary-upgrade.js

@@ -34,9 +34,13 @@ import {
   describeCodexTrustConfirmation
 } from "../chunk-RVGYXUOC.js";
 import "../chunk-L5RSLIBQ.js";
+import {
+  keepLinuxDaemonAfterLogout,
+  lingerReportOf
+} from "../chunk-AIZYJJGD.js";
 import {
   waitForMachineReadiness
-} from "../chunk-NJH6EGZN.js";
+} from "../chunk-FJST6ZXC.js";
 import "../chunk-RLQDVWZ4.js";
 import {
   readMacAppAgentKey
@@ -90,7 +94,7 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-KBOANW7J.js";
+} from "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import "../chunk-MRHGK3Q3.js";
 import "../chunk-JYCAAQUW.js";
@@ -347,6 +351,8 @@ var finishUpgrade = async () => {
 var startBackgroundService = async (apiKey, providers) => {
   const service = await replaceDaemonService();
   if (service.kind !== "ok") return "did_not_start";
+  const linger = lingerReportOf(keepLinuxDaemonAfterLogout());
+  if (linger) console.log(linger.tone === "warning" ? `! ${linger.text}` : linger.text);
   const daemon = await ensureDaemonRunning({ spawnDaemon: () => {
   }, waitTimeoutMs: DAEMON_COLD_START_TIMEOUT_MS });
   if (daemon.kind !== "running" && daemon.kind !== "started") return "did_not_start";

package/dist/{chunk-KBOANW7J.js → chunk-3DCCMO23.js}

@@ -36,9 +36,9 @@ import {
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";
-import { existsSync, mkdirSync, readFileSync, realpathSync, renameSync, unlinkSync, writeFileSync } from "fs";
+import { existsSync, mkdirSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync } from "fs";
 import { createHash, randomUUID } from "crypto";
-import { homedir, userInfo } from "os";
+import { homedir, uptime, userInfo } from "os";
 import { execFileSync } from "child_process";
 var daemonIsServing = (status) => status.kind === "running" || status.kind === "version-mismatch" || status.kind === "configuration-mismatch";
 var isAliveWithStaleLease = (status) => status.kind === "unresponsive" && status.processAlive === true;
@@ -214,7 +214,7 @@ WantedBy=default.target
       runningProbe: {
         command: "systemctl",
         args: ["--user", "is-active", unit],
-        negativeOutputPattern: /^(?:inactive|failed|unknown)\s*$/m
+        negativeOutputPattern: /^(?:inactive|failed|unknown|activating|deactivating)\s*$/m
       },
       reloadAfterUninstall: { command: "systemctl", args: ["--user", "daemon-reload"] }
     };
@@ -450,6 +450,24 @@ var spawnDetachedDaemon = (plan, options = {}) => {
   child.unref();
   return typeof child.pid === "number" ? child.pid : null;
 };
+var BOOT_CLOCK_SLACK_MS = 6e4;
+var uptimeIncludingSleepMs = () => {
+  if (process.platform !== "darwin" && process.platform !== "linux") return null;
+  try {
+    return uptime() * 1e3;
+  } catch {
+    return null;
+  }
+};
+var uptimeOnTheSameClock = (options) => {
+  if (options.uptimeMs) return options.uptimeMs();
+  return options.now ? null : uptimeIncludingSleepMs();
+};
+var writtenBeforeThisBoot = (writtenAtMs, options) => {
+  const uptimeMs = uptimeOnTheSameClock(options);
+  if (uptimeMs === null || !Number.isFinite(writtenAtMs)) return false;
+  return writtenAtMs < (options.now ?? Date.now)() - uptimeMs - BOOT_CLOCK_SLACK_MS;
+};
 var processIsAlive = (pid) => {
   try {
     process.kill(pid, 0);
@@ -516,7 +534,7 @@ var readDaemonStatus = (options = {}) => {
   }
   const value = state.kind === "ok" ? parseDaemonState(state.value) : null;
   if (value) {
-    const alive = (options.isProcessAlive ?? processIsAlive)(value.pid);
+    const alive = !writtenBeforeThisBoot(Date.parse(value.updatedAt), options) && (options.isProcessAlive ?? processIsAlive)(value.pid);
     const fresh = (options.now ?? Date.now)() - Date.parse(value.updatedAt) <= LOCAL_LEASE_TIMEOUT_MS;
     const expectedConfigurationId2 = options.configurationId === void 0 ? currentConfigurationId() : options.configurationId;
     return {
@@ -554,6 +572,15 @@ var safeUnlink = (path) => {
     if (err.code !== "ENOENT") throw err;
   }
 };
+var OWNERLESS_LOCK_WRITE_GRACE_MS = 5e3;
+var lockWrittenAtMs = (path) => {
+  try {
+    return statSync(path).mtimeMs;
+  } catch {
+    return null;
+  }
+};
+var ownerlessLockIsAbandoned = (writtenAtMs, nowMs) => writtenAtMs !== null && Math.abs(nowMs - writtenAtMs) >= OWNERLESS_LOCK_WRITE_GRACE_MS;
 var requestDaemonVersion = (version, options = {}) => {
   const dir = options.dir ?? pusharyDir();
   const now = options.now ?? Date.now;
@@ -583,8 +610,13 @@ var acquireDaemonLease = (options = {}) => {
     }
     const lock = readJsonSafe(lockPath(dir));
     const owner = lock.kind === "ok" ? parseLockOwner(lock.value) : null;
-    if (!owner) return { kind: "unavailable", detail: "daemon lock is invalid" };
-    if ((options.isProcessAlive ?? processIsAlive)(owner.pid)) {
+    const writtenAtMs = lockWrittenAtMs(lockPath(dir));
+    const lockIsReadable = lock.kind === "ok" || lock.kind === "unparseable";
+    if (!owner && !(lockIsReadable && ownerlessLockIsAbandoned(writtenAtMs, now()))) {
+      return { kind: "unavailable", detail: "daemon lock is invalid" };
+    }
+    const ownerIsFromThisBoot = writtenAtMs === null || !writtenBeforeThisBoot(writtenAtMs, options);
+    if (owner && ownerIsFromThisBoot && (options.isProcessAlive ?? processIsAlive)(owner.pid)) {
       return { kind: "unavailable", detail: "daemon owner is still running or starting" };
     }
     const stale = join(dir, `daemon.lock.${instanceId}.stale`);

package/dist/chunk-AIZYJJGD.js

@@ -0,0 +1,95 @@
+// src/linux-linger.ts
+import { execFileSync } from "child_process";
+import { userInfo } from "os";
+var LOGINCTL_TIMEOUT_MS = 5e3;
+var DESKTOP_SESSION_TYPES = /* @__PURE__ */ new Set(["x11", "wayland", "mir"]);
+var STOPS_AT_LOGOUT = "stops when your last SSH session closes, and does not start after a reboot until you log in";
+var NOT_NEEDED = { kind: "not-needed" };
+var runLoginctl = (args) => execFileSync("loginctl", [...args], {
+  encoding: "utf8",
+  timeout: LOGINCTL_TIMEOUT_MS,
+  stdio: ["ignore", "pipe", "ignore"]
+});
+var propertyOf = (line) => {
+  const separator = line.indexOf("=");
+  return separator < 0 ? [line.trim(), ""] : [line.slice(0, separator).trim(), line.slice(separator + 1).trim()];
+};
+var propertiesOf = (output) => new Map(output.split("\n").map(propertyOf));
+var lingerMayMatter = (platform, env) => platform === "linux" && !env.WSL_DISTRO_NAME;
+var CLOSING_SESSION_STATE = "closing";
+var sessionIsDesktop = (session, run) => {
+  if (session === "") return false;
+  try {
+    const properties = propertiesOf(run(["show-session", session, "--property=Type", "--property=State"]));
+    return DESKTOP_SESSION_TYPES.has(properties.get("Type") ?? "") && properties.get("State") !== CLOSING_SESSION_STATE;
+  } catch {
+    return false;
+  }
+};
+var daemonStopsAtLogout = (facts) => !facts.linger && !facts.desktopSession;
+var readLingerFacts = (user, run) => {
+  try {
+    const properties = propertiesOf(run(["show-user", user, "--property=Linger", "--property=Display"]));
+    const linger = properties.get("Linger");
+    if (linger !== "yes" && linger !== "no") return null;
+    return { linger: linger === "yes", desktopSession: sessionIsDesktop(properties.get("Display") ?? "", run) };
+  } catch {
+    return null;
+  }
+};
+var userOf = (options) => {
+  try {
+    return options.user ?? userInfo().username;
+  } catch {
+    return null;
+  }
+};
+var readLinuxLinger = (options = {}) => {
+  if (!lingerMayMatter(options.platform ?? process.platform, options.env ?? process.env)) return null;
+  const user = userOf(options);
+  return user === null ? null : readLingerFacts(user, options.run ?? runLoginctl);
+};
+var keepLinuxDaemonAfterLogout = (options = {}) => {
+  if (!lingerMayMatter(options.platform ?? process.platform, options.env ?? process.env)) return NOT_NEEDED;
+  const user = userOf(options);
+  if (user === null) return NOT_NEEDED;
+  const run = options.run ?? runLoginctl;
+  const facts = readLingerFacts(user, run);
+  if (!facts || !daemonStopsAtLogout(facts)) return NOT_NEEDED;
+  try {
+    run(["--no-ask-password", "enable-linger", user]);
+  } catch {
+    return { kind: "needs-admin", user };
+  }
+  return readLingerFacts(user, run)?.linger === true ? { kind: "enabled", user } : { kind: "needs-admin", user };
+};
+var lingerReportOf = (outcome) => {
+  if (outcome.kind === "enabled") {
+    return {
+      tone: "note",
+      text: `Phone-start keeps running after you log out of this machine: turned on systemd lingering for ${outcome.user}. Undo with \`loginctl disable-linger\`.`
+    };
+  }
+  if (outcome.kind === "needs-admin") {
+    return {
+      tone: "warning",
+      text: `Phone-start ${STOPS_AT_LOGOUT}. To keep it running: \`sudo loginctl enable-linger ${outcome.user}\``
+    };
+  }
+  return null;
+};
+var lingerDoctorDetail = (facts) => {
+  if (daemonStopsAtLogout(facts)) {
+    return `no: it ${STOPS_AT_LOGOUT}; run \`pushary daemon install\`, or \`sudo loginctl enable-linger $USER\``;
+  }
+  if (facts.linger) return "systemd lingering is on";
+  return "while you are signed in to the desktop";
+};
+
+export {
+  daemonStopsAtLogout,
+  readLinuxLinger,
+  keepLinuxDaemonAfterLogout,
+  lingerReportOf,
+  lingerDoctorDetail
+};

package/dist/{chunk-NJH6EGZN.js → chunk-FJST6ZXC.js}

@@ -10,7 +10,7 @@ import {
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-KBOANW7J.js";
+} from "./chunk-3DCCMO23.js";
 import {
   getMachineId
 } from "./chunk-DS7XMYUB.js";

package/dist/{chunk-U5AZKJ5O.js → chunk-I6MI4NWX.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-G66WIAST.js";
 import {
   ensureDaemonRunning
-} from "./chunk-KBOANW7J.js";
+} from "./chunk-3DCCMO23.js";
 import {
   hookOwnerOf
 } from "./chunk-237FYIVC.js";

package/dist/{chunk-J6WO5ZR5.js → chunk-PHKCTMAV.js}

@@ -9,13 +9,13 @@ import {
   installedCodexApp,
   readCodexAppRuntime,
   shellQuoted
-} from "./chunk-FP4WRSWE.js";
+} from "./chunk-VME5NXCM.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-KBOANW7J.js";
+} from "./chunk-3DCCMO23.js";
 import {
   writeFileAtomic
 } from "./chunk-TODDEIYG.js";

package/dist/{chunk-4EGRD5RS.js → chunk-QVIDOVT6.js}

@@ -18,7 +18,7 @@ import {
 import {
   isAdmitted,
   readAdmissionRules
-} from "./chunk-BTDEBPPR.js";
+} from "./chunk-UDAXXR43.js";
 import {
   isDeferAnswer,
   oncePerSession

package/dist/{chunk-BTDEBPPR.js → chunk-UDAXXR43.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-EPPH5RMJ.js";
 import {
   registerTranscript
-} from "./chunk-U5AZKJ5O.js";
+} from "./chunk-I6MI4NWX.js";
 import {
   namedEvent
 } from "./chunk-RZBV5KTF.js";

package/dist/{chunk-FP4WRSWE.js → chunk-VME5NXCM.js}

@@ -1085,7 +1085,7 @@ var codexDesktopCommand = async (args, entry, readAccount) => {
     return runCodexDesktopProxy(engine2, args.slice(3), readAccount, { watchesForCards: layoutIsKnown });
   }
   if (args[0] === APP_CARDS_FLAG) {
-    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-WDQBUF7K.js");
+    const { codexAppCardsCommandOnThisMac } = await import("./codex-app-cards-switch-D2SODMQN.js");
     return codexAppCardsCommandOnThisMac(args.slice(1), entry, readAccount);
   }
   if (args.length > 2) throw new Error("Usage: pushary codex --desktop [path/to/Codex.app]");

package/dist/{codex-app-cards-switch-WDQBUF7K.js → codex-app-cards-switch-D2SODMQN.js}

@@ -22,11 +22,11 @@ import {
   turnCodexAppCardsOff,
   turnCodexAppCardsOn,
   whyLaunchctlFailed
-} from "./chunk-J6WO5ZR5.js";
-import "./chunk-FP4WRSWE.js";
+} from "./chunk-PHKCTMAV.js";
+import "./chunk-VME5NXCM.js";
 import "./chunk-XCEN33UP.js";
 import "./chunk-QCGNGEGE.js";
-import "./chunk-KBOANW7J.js";
+import "./chunk-3DCCMO23.js";
 import "./chunk-H6CL3T2S.js";
 import "./chunk-DS7XMYUB.js";
 import "./chunk-CVBSETPW.js";

package/dist/{codex-desktop-launch-EQ4VH6QV.js → codex-desktop-launch-CFKIJZVB.js}

@@ -11,7 +11,7 @@ import {
   installedCodexApp,
   shellQuoted,
   writeDesktopProxy
-} from "./chunk-FP4WRSWE.js";
+} from "./chunk-VME5NXCM.js";
 import "./chunk-XCEN33UP.js";
 import {
   CODEX_APP_LAUNCH_VARIABLE

package/dist/src/index.js

@@ -1,18 +1,18 @@
 import {
   handlePreToolUse
-} from "../chunk-4EGRD5RS.js";
+} from "../chunk-QVIDOVT6.js";
 import "../chunk-FT5MTCKU.js";
 import "../chunk-XWUPOTJV.js";
 import "../chunk-HW63OEVM.js";
 import "../chunk-2U4MCUVZ.js";
-import "../chunk-BTDEBPPR.js";
+import "../chunk-UDAXXR43.js";
 import "../chunk-EPPH5RMJ.js";
 import "../chunk-EA5EASYT.js";
-import "../chunk-U5AZKJ5O.js";
+import "../chunk-I6MI4NWX.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
 import "../chunk-RZBV5KTF.js";
-import "../chunk-KBOANW7J.js";
+import "../chunk-3DCCMO23.js";
 import "../chunk-237FYIVC.js";
 import {
   fetchModeOverride,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pushary",
-  "version": "1.9.132",
+  "version": "1.9.134",
   "description": "Human-in-the-loop (HITL) for AI agents: ask a person for approvals or answers by push notification. One command connects Claude Code, Codex, Cursor, Gemini CLI and more.",
   "keywords": [
     "pushary",