pushary 1.9.135 → 1.9.137

package/dist/bin/pushary-disconnect.js

@@ -2,18 +2,18 @@
 import {
   declinedAgentsFile,
   recordDeclinedAgent
-} from "../chunk-UCDPJHZT.js";
+} from "../chunk-ZWLSXECG.js";
 import {
   isCursorPluginLeftover,
   isPusharyCursorPluginManifest,
   releaseSoleGate
-} from "../chunk-QLIG4PMT.js";
+} from "../chunk-ZWIJJYN3.js";
 import {
   planFxRemoval,
   removeClineServer
-} from "../chunk-WPPTHRBO.js";
-import "../chunk-V7KBG7XH.js";
-import "../chunk-WNPZGHHU.js";
+} from "../chunk-2XDVEBHI.js";
+import "../chunk-54TZGPZP.js";
+import "../chunk-NZD6ISCL.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -25,10 +25,10 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-CGROOSWT.js";
+} from "../chunk-VBWJ756P.js";
 import {
   exitOnHelpFlag
-} from "../chunk-4VVDRMVE.js";
+} from "../chunk-K7YJBVR3.js";
 import {
   compatibleConfigFile,
   compatibleDocuments,
@@ -38,28 +38,28 @@ import {
   isEmptiedPusharyOwnedDocument,
   removeCompatibleHooks,
   removeCompatibleMcpServer
-} from "../chunk-7ASHS5VR.js";
+} from "../chunk-43DT3QWZ.js";
 import {
   removeGeminiSettings
-} from "../chunk-ORZ7H3AQ.js";
-import "../chunk-RGRPDJG3.js";
-import "../chunk-UXPRMNH2.js";
-import "../chunk-WVOMK2HW.js";
-import "../chunk-IOUCIJ56.js";
+} from "../chunk-TLK5YLIE.js";
+import "../chunk-D7AAAD6W.js";
+import "../chunk-A2YJ2FBR.js";
+import "../chunk-5XDFQ6E3.js";
+import "../chunk-LAWI6NQK.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";
-import "../chunk-DMK3U7GG.js";
-import "../chunk-XRO6NRBO.js";
-import "../chunk-XB75IJ3G.js";
+import "../chunk-IRIXOH4U.js";
+import "../chunk-L2GADKFL.js";
+import "../chunk-Y47BMZUR.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-ZNST34QH.js";
-import "../chunk-2K7MZRPH.js";
-import "../chunk-SFN72Q7W.js";
-import "../chunk-6UARD3WA.js";
-import "../chunk-RLNJNRYP.js";
-import "../chunk-LTY5DSWT.js";
-import "../chunk-IABPEGAA.js";
+import "../chunk-WXUEOHYY.js";
+import "../chunk-VVN3RPV6.js";
+import "../chunk-Q2VV77IY.js";
+import "../chunk-PHA6AFOR.js";
+import "../chunk-WNT4JHK3.js";
+import "../chunk-PNVTPEO5.js";
+import "../chunk-LNF36PTF.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -89,9 +89,9 @@ import {
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-ZJKWDM3S.js";
-import "../chunk-ACI4PZ5N.js";
-import "../chunk-FP6ZVMF2.js";
+} from "../chunk-R7KC57PC.js";
+import "../chunk-GS5FH3C2.js";
+import "../chunk-IKBTG3OT.js";
 import {
   UsageError
 } from "../chunk-YU2EUD7O.js";
@@ -103,14 +103,14 @@ import {
 } from "../chunk-BG4HHB7E.js";
 import {
   isInvocationOf
-} from "../chunk-BGXXWLS5.js";
+} from "../chunk-MQMVJDII.js";
 import "../chunk-WIIMW5YO.js";
 import {
   DISCONNECTABLE_AGENTS,
   DISCONNECT_AGENT_IDS,
   hookCompatibleProfileBySource,
   normalizeAgentId
-} from "../chunk-H4226UC7.js";
+} from "../chunk-DL67HX3D.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-disconnect.ts

package/dist/bin/pushary-display-hook.js

@@ -687,7 +687,9 @@ var init_agent_wiring = __esm({
       permissionRuleFile: null,
       configDirIsShared: false,
       soleGate: null,
-      taskControl: null
+      taskControl: null,
+      promptFollowsPreToolUseAllow: true,
+      permissionRequestPaths: "shell_escaped"
     };
     CODEBUDDY = {
       agentType: "codebuddy",
@@ -711,7 +713,9 @@ var init_agent_wiring = __esm({
       permissionRuleFile: homeJson(".codebuddy", "settings.json"),
       configDirIsShared: false,
       soleGate: null,
-      taskControl: null
+      taskControl: null,
+      promptFollowsPreToolUseAllow: false,
+      permissionRequestPaths: "as_pre_tool_use"
     };
     QODER = {
       agentType: "qoder",
@@ -735,7 +739,9 @@ var init_agent_wiring = __esm({
       permissionRuleFile: null,
       configDirIsShared: false,
       soleGate: null,
-      taskControl: null
+      taskControl: null,
+      promptFollowsPreToolUseAllow: false,
+      permissionRequestPaths: "as_pre_tool_use"
     };
     DROID = {
       agentType: "droid",
@@ -764,7 +770,9 @@ var init_agent_wiring = __esm({
       permissionRuleFile: null,
       configDirIsShared: false,
       soleGate: null,
-      taskControl: null
+      taskControl: null,
+      promptFollowsPreToolUseAllow: false,
+      permissionRequestPaths: "as_pre_tool_use"
     };
     DEVIN = {
       agentType: "devin",
@@ -798,7 +806,9 @@ var init_agent_wiring = __esm({
       permissionRuleFile: null,
       configDirIsShared: false,
       soleGate: null,
-      taskControl: null
+      taskControl: null,
+      promptFollowsPreToolUseAllow: false,
+      permissionRequestPaths: "as_pre_tool_use"
     };
     ANTIGRAVITY_TASK_CONTROL = {
       name: "manage_task",
@@ -849,7 +859,9 @@ var init_agent_wiring = __esm({
         receipt: [".pushary", "setup", "antigravity-tool-permission.json"],
         coveredTools: [ANTIGRAVITY_TASK_CONTROL.name]
       },
-      taskControl: ANTIGRAVITY_TASK_CONTROL
+      taskControl: ANTIGRAVITY_TASK_CONTROL,
+      promptFollowsPreToolUseAllow: false,
+      permissionRequestPaths: "as_pre_tool_use"
     };
     GROK = {
       agentType: "grok",
@@ -883,7 +895,9 @@ var init_agent_wiring = __esm({
       permissionRuleFile: null,
       configDirIsShared: false,
       soleGate: null,
-      taskControl: null
+      taskControl: null,
+      promptFollowsPreToolUseAllow: false,
+      permissionRequestPaths: "as_pre_tool_use"
     };
     HOOK_COMPATIBLE_PROFILES = Object.freeze([QWEN_CODE, CODEBUDDY, QODER, DROID, DEVIN, ANTIGRAVITY_CLI, GROK]);
   }
@@ -2897,8 +2911,8 @@ import { join as join3 } from "path";
 init_fsx();
 init_paths();
 import { createHash as createHash10 } from "crypto";
-import { lstatSync as lstatSync5, readFileSync as readFileSync18, readdirSync as readdirSync2, realpathSync as realpathSync4, statSync as statSync5, unlinkSync as unlinkSync5 } from "fs";
-import { basename as basename2, dirname as dirname8, isAbsolute, join as join19, relative, resolve as resolve3, sep } from "path";
+import { lstatSync as lstatSync5, readFileSync as readFileSync19, readdirSync as readdirSync2, realpathSync as realpathSync4, statSync as statSync5, unlinkSync as unlinkSync5 } from "fs";
+import { basename as basename3, dirname as dirname9, isAbsolute, join as join20, relative, resolve as resolve3, sep } from "path";
 
 // src/transcript-phone-trust.ts
 import { createHash as createHash5 } from "crypto";
@@ -7609,8 +7623,8 @@ var hookOwnerOfCommands = (commands, appAvailable = true) => {
 
 // src/daemon-lifecycle.ts
 init_src();
-import { dirname as dirname7, join as join18, win32 as win32Path } from "path";
-import { existsSync as existsSync6, mkdirSync as mkdirSync6, readFileSync as readFileSync17, realpathSync as realpathSync3, renameSync as renameSync3, statSync as statSync4, unlinkSync as unlinkSync4, writeFileSync as writeFileSync5 } from "fs";
+import { dirname as dirname8, join as join19, win32 as win32Path } from "path";
+import { existsSync as existsSync6, mkdirSync as mkdirSync7, readFileSync as readFileSync18, realpathSync as realpathSync3, renameSync as renameSync3, statSync as statSync4, unlinkSync as unlinkSync4, writeFileSync as writeFileSync5 } from "fs";
 import { createHash as createHash9, randomUUID as randomUUID3 } from "crypto";
 import { homedir as homedir8, uptime, userInfo } from "os";
 
@@ -7635,8 +7649,20 @@ import { win32 as win323 } from "path";
 // src/daemon-lifecycle.ts
 init_npm();
 init_cli_package_name();
-init_global_package();
 import { execFileSync as execFileSync3 } from "child_process";
+
+// src/daemon-entry-guard.ts
+init_fsx();
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync17 } from "fs";
+import { basename, dirname as dirname7, join as join18 } from "path";
+var DAEMON_ENTRY_GUARD_SOURCE = [
+  "const { existsSync } = require('node:fs')",
+  "if (process.argv[1] && !existsSync(process.argv[1])) process.exit(0)",
+  ""
+].join("\n");
+
+// src/daemon-lifecycle.ts
+init_global_package();
 var DAEMON_LEASE_RENEW_INTERVAL_MS = 3e4;
 var LOCAL_LEASE_TIMEOUT_MS = DAEMON_LEASE_RENEW_INTERVAL_MS * 3;
 var DAEMON_YIELD_CHECK_INTERVAL_MS = 2e3;
@@ -7687,7 +7713,7 @@ var firstString = (...values) => values.find((v) => typeof v === "string" && v.l
 // ../hook-mapping/src/map.ts
 init_src();
 init_src();
-import { basename } from "path";
+import { basename as basename2 } from "path";
 var AGENT_IDENTITIES = {
   claude: { type: "claude_code", label: AGENT_LABELS_BY_TYPE.claude_code },
   codex: { type: "codex", label: AGENT_LABELS_BY_TYPE.codex },
@@ -7810,18 +7836,18 @@ var storedRegistrationSchema = external_exports.object({
   endedAt: external_exports.number().positive().optional(),
   drained: external_exports.boolean().optional()
 });
-var defaultRegistryDirectory = () => process.env.PUSHARY_TRANSCRIPT_REGISTRY_DIR || join19(pusharyDir(), "transcript-capture");
+var defaultRegistryDirectory = () => process.env.PUSHARY_TRANSCRIPT_REGISTRY_DIR || join20(pusharyDir(), "transcript-capture");
 var cliRegistry = (apiKey = getApiKey()) => ({ apiKey, baseUrl: getBaseUrl(), directory: defaultRegistryDirectory() });
 var accountFor = (registry) => createHash10("sha256").update(`${registry.baseUrl}\0${registry.apiKey}`).digest("hex");
 var TTL = 48 * 60 * 60 * 1e3;
 var read = (path) => {
   if (statSync5(path).size > 16384) throw new Error("History registration exceeds its size limit");
-  return storedRegistrationSchema.parse(JSON.parse(readFileSync18(path, "utf8")));
+  return storedRegistrationSchema.parse(JSON.parse(readFileSync19(path, "utf8")));
 };
 var consent = (record) => record.consentOverride ?? readTranscriptPreference() ?? true;
 var withoutTrailingSlash = (url) => url.replace(/\/+$/, "");
 var sameServer = (url, registry) => withoutTrailingSlash(url) === withoutTrailingSlash(registry.baseUrl);
-var fileFor3 = (registry, sessionId) => join19(registry.directory, `${createHash10("sha256").update(accountFor(registry) + sessionId).digest("hex")}.json`);
+var fileFor3 = (registry, sessionId) => join20(registry.directory, `${createHash10("sha256").update(accountFor(registry) + sessionId).digest("hex")}.json`);
 var permitted = (registry, raw2) => raw2.account === accountFor(registry) && consent(raw2) && !raw2.drained && (raw2.source !== "claude" || !!raw2.expectedSiteId || !macOwnsClaudeHooks(raw2.cwd)) && (!raw2.expectedSiteId || raw2.expectedSiteId === raw2.verifiedSiteId && !!raw2.expectedBaseUrl && sameServer(raw2.expectedBaseUrl, registry));
 var registeredTranscriptEnabled = (apiKey, sessionId, registry = cliRegistry(apiKey)) => {
   try {
@@ -7831,12 +7857,12 @@ var registeredTranscriptEnabled = (apiKey, sessionId, registry = cliRegistry(api
   }
 };
 var macOwnsClaudeHooks = (cwd) => [
-  join19(claudeConfigDir(), "settings.json"),
-  join19(cwd, ".claude", "settings.json"),
-  join19(cwd, ".claude", "settings.local.json")
+  join20(claudeConfigDir(), "settings.json"),
+  join20(cwd, ".claude", "settings.json"),
+  join20(cwd, ".claude", "settings.local.json")
 ].some((path) => {
   try {
-    return hookOwnerOf(JSON.parse(readFileSync18(path, "utf8"))) === "app";
+    return hookOwnerOf(JSON.parse(readFileSync19(path, "utf8"))) === "app";
   } catch {
     return false;
   }
@@ -7844,22 +7870,22 @@ var macOwnsClaudeHooks = (cwd) => [
 var TRANSCRIPT_ROOT_NAME = { claude: "projects", codex: "sessions", gemini: "tmp", cursor: "projects", hermes: "hermes-history" };
 var transcriptRoots = (source) => {
   const home = homedir9();
-  if (source === "codex") return [join19(codexHome(), TRANSCRIPT_ROOT_NAME.codex)];
-  if (source === "cursor") return [join19(home, ".cursor", TRANSCRIPT_ROOT_NAME.cursor)];
-  if (source === "hermes") return [join19(home, ".pushary", TRANSCRIPT_ROOT_NAME.hermes)];
-  if (source === "gemini") return [join19(process.env.GEMINI_CLI_HOME || home, ".gemini", "tmp"), join19(home, ".cache", ".gemini", "tmp")];
+  if (source === "codex") return [join20(codexHome(), TRANSCRIPT_ROOT_NAME.codex)];
+  if (source === "cursor") return [join20(home, ".cursor", TRANSCRIPT_ROOT_NAME.cursor)];
+  if (source === "hermes") return [join20(home, ".pushary", TRANSCRIPT_ROOT_NAME.hermes)];
+  if (source === "gemini") return [join20(process.env.GEMINI_CLI_HOME || home, ".gemini", "tmp"), join20(home, ".cache", ".gemini", "tmp")];
   const configured = process.env.CLAUDE_CONFIG_DIR;
-  return [join19(configured || join19(home, ".claude"), TRANSCRIPT_ROOT_NAME.claude), join19(home, ".claude", TRANSCRIPT_ROOT_NAME.claude)];
+  return [join20(configured || join20(home, ".claude"), TRANSCRIPT_ROOT_NAME.claude), join20(home, ".claude", TRANSCRIPT_ROOT_NAME.claude)];
 };
-var isAgentTranscriptRoot = (root, source) => isAbsolute(root) && resolve3(root) === root && basename2(root) === TRANSCRIPT_ROOT_NAME[source];
+var isAgentTranscriptRoot = (root, source) => isAbsolute(root) && resolve3(root) === root && basename3(root) === TRANSCRIPT_ROOT_NAME[source];
 var acceptedTranscriptRoots = (source, registeredRoot) => typeof registeredRoot === "string" && isAgentTranscriptRoot(registeredRoot, source) ? [...transcriptRoots(source), registeredRoot] : transcriptRoots(source);
 var resolvedSourcePath = (path) => {
   const absolute = resolve3(path);
   try {
     return realpathSync4(absolute);
   } catch {
-    const parent = dirname8(absolute);
-    return parent === absolute ? absolute : join19(resolvedSourcePath(parent), basename2(absolute));
+    const parent = dirname9(absolute);
+    return parent === absolute ? absolute : join20(resolvedSourcePath(parent), basename3(absolute));
   }
 };
 var transcriptRootContaining = (candidate, roots) => {
@@ -7877,9 +7903,9 @@ var captureRegistration = (source, value, registeredRoot) => {
   const root = transcriptRootContaining(path, acceptedTranscriptRoots(source, registeredRoot));
   if (root === null) return null;
   const segments = relative(root, path).split(sep);
-  if (source === "hermes" && (segments.length !== 2 || !/^[a-f0-9]{64}$/.test(segments[0] ?? "") || basename2(path) !== `${sessionId}.json`)) return null;
-  if (source === "gemini" && (segments.length !== 3 || segments[1] !== "chats" || !basename2(path).startsWith("session-"))) return null;
-  if (source === "cursor" && (segments[1] !== "agent-transcripts" || basename2(path) !== `${sessionId}.jsonl` || !(segments.length === 3 || segments.length === 4 && basename2(dirname8(path)) === sessionId))) return null;
+  if (source === "hermes" && (segments.length !== 2 || !/^[a-f0-9]{64}$/.test(segments[0] ?? "") || basename3(path) !== `${sessionId}.json`)) return null;
+  if (source === "gemini" && (segments.length !== 3 || segments[1] !== "chats" || !basename3(path).startsWith("session-"))) return null;
+  if (source === "cursor" && (segments[1] !== "agent-transcripts" || basename3(path) !== `${sessionId}.jsonl` || !(segments.length === 3 || segments.length === 4 && basename3(dirname9(path)) === sessionId))) return null;
   return { sessionId, cwd: input.cwd, path, source, root };
 };
 

package/dist/bin/pushary-doctor.js

@@ -1,10 +1,7 @@
 #!/usr/bin/env node
 import {
-  describeServiceNodeRisk,
-  readServiceExecPath,
-  readSetupFailure,
-  versionManagerOf
-} from "../chunk-N2DYYXQI.js";
+  readSetupFailure
+} from "../chunk-B4UIRMOE.js";
 import {
   describeWaitLadder
 } from "../chunk-CVWG2N3Y.js";
@@ -14,14 +11,14 @@ import {
   describeHermesProblems,
   describeHermesState,
   hermesRepairStep
-} from "../chunk-QUMPSMZN.js";
+} from "../chunk-A4YOXS24.js";
 import {
   writeJsonError,
   writeStdoutFully
-} from "../chunk-VXYGYCNR.js";
+} from "../chunk-RRUP72V6.js";
 import {
   fetchChannels
-} from "../chunk-AEOITMCS.js";
+} from "../chunk-4T72AHIA.js";
 import "../chunk-3EGEA4KH.js";
 import {
   describeAnswerTestPrompt,
@@ -31,7 +28,7 @@ import {
   reachVerdict,
   roundTripEvidence,
   verifyRoundTrip
-} from "../chunk-X3NYMHLG.js";
+} from "../chunk-V7ZY7P2X.js";
 import {
   daemonStopsAtLogout,
   lingerDoctorDetail,
@@ -40,17 +37,17 @@ import {
 import {
   readMachineReadiness,
   readManagedControlEvidence
-} from "../chunk-KUAS2DGZ.js";
+} from "../chunk-CMAB4KQG.js";
 import {
   assessCodexHookTrust,
   readCodexTrustForPusharyHooks
-} from "../chunk-VCMJLNEP.js";
+} from "../chunk-6SWFS4GU.js";
 import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   activeKeyVerdictOf,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "../chunk-NBMK6T6R.js";
+} from "../chunk-U3OLXV5Z.js";
 import {
   agentProbes,
   detectAgent,
@@ -59,16 +56,16 @@ import {
   isPluginRegistered,
   shortenHome,
   vscodeSettingsTargets
-} from "../chunk-AXQFLLOB.js";
+} from "../chunk-IHAKBLW2.js";
 import {
   CONNECTED_THROUGH_MAC_APP,
   keyWrittenByMacApp,
   readMacAppConnectionWhenKeyless
-} from "../chunk-GLAGHQPB.js";
+} from "../chunk-KLV2NQVT.js";
 import {
   keyScopeOf,
   pushWindowChangeStep
-} from "../chunk-VND6LN6X.js";
+} from "../chunk-3QBI5C6P.js";
 import {
   findHermesLauncher,
   hasUpdateFrom,
@@ -80,7 +77,7 @@ import {
   routesHermesQuestions,
   runsAnOlderPlugin,
   shippedHermesPlugin
-} from "../chunk-MGTMXF3T.js";
+} from "../chunk-A7R43KOX.js";
 import "../chunk-QCGNGEGE.js";
 import {
   FX_PROFILE_REFUSALS,
@@ -91,11 +88,11 @@ import {
   inspectClineInstallation,
   inspectFxInstallation,
   inspectFxPusharyHttpWiring
-} from "../chunk-WPPTHRBO.js";
+} from "../chunk-2XDVEBHI.js";
 import {
   retryAgentCommand
-} from "../chunk-V7KBG7XH.js";
-import "../chunk-WNPZGHHU.js";
+} from "../chunk-54TZGPZP.js";
+import "../chunk-NZD6ISCL.js";
 import {
   OPENCODE_PLUGIN_PLACEHOLDER,
   cliOwnsAnyAgentHooks,
@@ -105,25 +102,25 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   openCodeWired
-} from "../chunk-CGROOSWT.js";
+} from "../chunk-VBWJ756P.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
 import {
   exitOnHelpFlag
-} from "../chunk-4VVDRMVE.js";
+} from "../chunk-K7YJBVR3.js";
 import {
   describeMissingControlPrerequisite,
   detectProviderLiveCapabilities,
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "../chunk-6RSAOA2P.js";
-import "../chunk-SULQKUPJ.js";
+} from "../chunk-DBIPNY7J.js";
+import "../chunk-EJHD44ZN.js";
 import "../chunk-CYTPQDQY.js";
 import {
   readLedgerSummary
-} from "../chunk-7KWOR2T2.js";
+} from "../chunk-YQQGIDBC.js";
 import {
   AUTO_UPDATE_DISABLE_ENV,
   autoUpdateOffReason,
@@ -131,7 +128,7 @@ import {
   describeAutoUpdateCheck,
   readAutoUpdateState,
   takeAutoUpdateAnnouncement
-} from "../chunk-UDSJKRRI.js";
+} from "../chunk-ICCM3DLT.js";
 import {
   compatibleConfigFile,
   compatibleInstructionsFile,
@@ -139,16 +136,20 @@ import {
   hasCompatibleHooks,
   hasCompatibleMcpServer,
   missingCompatibleHookEvents
-} from "../chunk-7ASHS5VR.js";
+} from "../chunk-43DT3QWZ.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   describeDaemonLoginBlock,
+  describeServiceNodeRisk,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus,
-  readInstalledDaemonService
-} from "../chunk-RCZ5ZER4.js";
+  readInstalledDaemonService,
+  readServiceExecPath,
+  serviceStartFileChecks,
+  versionManagerOf
+} from "../chunk-MD63J3T7.js";
 import {
   GEMINI_HOOK_BINARY,
   claudeOtherHolders,
@@ -168,38 +169,38 @@ import {
   holdsLong,
   missingGeminiHookEvents,
   pusharyHookExecutable
-} from "../chunk-ORZ7H3AQ.js";
-import "../chunk-RGRPDJG3.js";
-import "../chunk-UXPRMNH2.js";
-import "../chunk-WVOMK2HW.js";
-import "../chunk-IOUCIJ56.js";
+} from "../chunk-TLK5YLIE.js";
+import "../chunk-D7AAAD6W.js";
+import "../chunk-A2YJ2FBR.js";
+import "../chunk-5XDFQ6E3.js";
+import "../chunk-LAWI6NQK.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";
 import "../chunk-H6CL3T2S.js";
-import "../chunk-DMK3U7GG.js";
-import "../chunk-XRO6NRBO.js";
-import "../chunk-XB75IJ3G.js";
+import "../chunk-IRIXOH4U.js";
+import "../chunk-L2GADKFL.js";
+import "../chunk-Y47BMZUR.js";
 import "../chunk-POFBE6ZY.js";
 import {
   callMcpTool,
   sendMcpRequest
-} from "../chunk-ZNST34QH.js";
-import "../chunk-2K7MZRPH.js";
+} from "../chunk-WXUEOHYY.js";
+import "../chunk-VVN3RPV6.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-SFN72Q7W.js";
-import "../chunk-6UARD3WA.js";
+} from "../chunk-Q2VV77IY.js";
+import "../chunk-PHA6AFOR.js";
 import {
   getMachineId
-} from "../chunk-RLNJNRYP.js";
+} from "../chunk-WNT4JHK3.js";
 import {
   keyPrefix,
   readControlMode,
   readKeySource
-} from "../chunk-LTY5DSWT.js";
-import "../chunk-IABPEGAA.js";
+} from "../chunk-PNVTPEO5.js";
+import "../chunk-LNF36PTF.js";
 import {
   CLINE_AUTO_APPROVE_STEP,
   CLINE_LABEL,
@@ -237,15 +238,15 @@ import {
   readCodexMcpAuth,
   resolveBridgeStub,
   vscodePluginDir
-} from "../chunk-ZJKWDM3S.js";
+} from "../chunk-R7KC57PC.js";
 import {
   fetchLatestPublishedVersion,
   readGlobalCliInstall,
   resolvePathBinary
-} from "../chunk-ACI4PZ5N.js";
+} from "../chunk-GS5FH3C2.js";
 import {
   getBaseUrl
-} from "../chunk-FP6ZVMF2.js";
+} from "../chunk-IKBTG3OT.js";
 import {
   UsageError
 } from "../chunk-YU2EUD7O.js";
@@ -257,7 +258,7 @@ import {
 } from "../chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-BGXXWLS5.js";
+} from "../chunk-MQMVJDII.js";
 import {
   commandsPackage,
   getPackageVersion,
@@ -278,7 +279,7 @@ import {
   hookCompatibleProfile,
   isHookActivationReport,
   redactSecretsFromContent
-} from "../chunk-H4226UC7.js";
+} from "../chunk-DL67HX3D.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-doctor.ts
@@ -1201,6 +1202,9 @@ var main = async () => {
       "Remote-control service runtime",
       present ? `${serviceNode}${manager ? ` (${describeServiceNodeRisk(manager)})` : ""}` : `${serviceNode} is gone${manager ? ` (${manager} switched Node since setup)` : ""}; run \`pushary daemon install\` to repin the service`
     );
+    for (const start of serviceStartFileChecks(serviceFile.contents, process.platform, existsSync)) {
+      check(start.passed, start.label, start.detail);
+    }
   } else if (serviceFile) {
     console.log(`  ${warn} Remote-control service runtime ${dim(`(could not read the node path out of ${serviceFile.path})`)}`);
   }