feat: use pty-first agent detection

1 files changed, 13 insertions, 9 deletions

diff --git a/src/detect/agents/hermes.rs b/src/detect/agents/hermes.rs
index d6c4c97e..474dda5c 100644
--- a/src/detect/agents/hermes.rs
+++ b/src/detect/agents/hermes.rs
@@ -6,21 +6,25 @@ use super::super::AgentState;
 /// dialogs for dangerous terminal commands. Prefer the modal controls for
 /// blocked detection, then the live interrupt/status controls for working.
 pub(super) fn detect(content: &str) -> AgentState {
-    let lower = content.to_lowercase();
-
-    let has_approval_options = lower.contains("allow once")
-        && lower.contains("allow for this session")
-        && lower.contains("deny");
-    let has_approval_controls = lower.contains("enter to confirm")
-        || lower.contains("↑/↓ to select")
-        || lower.contains("show full command");
-    if (lower.contains("dangerous command") || has_approval_options) && has_approval_controls {
+    if has_visible_blocker(content) {
         return AgentState::Blocked;
     }
 
+    let lower = content.to_lowercase();
     if lower.contains("msg=interrupt") || lower.contains("ctrl+c cancel") {
         return AgentState::Working;
     }
 
     AgentState::Idle
 }
+
+pub(super) fn has_visible_blocker(content: &str) -> bool {
+    let lower = content.to_lowercase();
+    let has_approval_options = lower.contains("allow once")
+        && lower.contains("allow for this session")
+        && lower.contains("deny");
+    let has_approval_controls = lower.contains("enter to confirm")
+        || lower.contains("↑/↓ to select")
+        || lower.contains("show full command");
+    (lower.contains("dangerous command") || has_approval_options) && has_approval_controls
+}