@pushary/agent-hooks 0.21.1 → 0.23.0

package/data/cursor-plugin/README.md

@@ -48,7 +48,7 @@ Add this to `.cursor/mcp.json` in your project, or `~/.cursor/mcp.json` for ever
     "pushary": {
       "type": "http",
       "url": "https://pushary.com/api/mcp/mcp",
-      "headers": { "Authorization": "Bearer ${PUSHARY_API_KEY}" }
+      "headers": { "Authorization": "Bearer ${env:PUSHARY_API_KEY}" }
     }
   }
 }
@@ -67,6 +67,10 @@ source ~/.zshrc
 
 Install the Pushary app on your phone (or turn on web push) so the agent can reach you.
 
+## Troubleshooting
+
+macOS GUI apps do not read `.zshrc`. If Settings > MCP shows pushary in red after you set the env var, launch Cursor from a terminal where `PUSHARY_API_KEY` is exported, or set the variable system-wide so GUI apps see it.
+
 ## What is in the plugin
 
 | Part | File | What it does |

package/data/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "type": "http",
       "url": "https://pushary.com/api/mcp/mcp",
       "headers": {
-        "Authorization": "Bearer ${PUSHARY_API_KEY}"
+        "Authorization": "Bearer ${env:PUSHARY_API_KEY}"
       }
     }
   }

package/data/cursor-plugin/scripts/pushary-gate.mjs

@@ -231,6 +231,25 @@ const fetchModeState = async (apiKey, sessionId) => {
   }
 }
 
+// ── action body capture + redaction (inlined mirror of describe.ts, since this
+// dependency-free hook cannot import the workspace) ──────────────────────────────
+const ACTION_BODY_MAX = 4000
+const ACTION_BODY_TRUNCATION_MARKER = '\n… [truncated]'
+const REDACTION_RULES = [
+  [/\bsk-[A-Za-z0-9]{20,}\b/g, '[redacted]'],
+  [/\bpk_(?:live|test)_[A-Za-z0-9]+\b/g, '[redacted]'],
+  [/\brk_[A-Za-z0-9]+\b/g, '[redacted]'],
+  [/\bAKIA[0-9A-Z]{16}\b/g, '[redacted]'],
+  [/\bbearer\s+[A-Za-z0-9._-]+/gi, 'bearer [redacted]'],
+  [/\bauthorization:\s*\S+/gi, 'authorization: [redacted]'],
+  [/((?:secret|token|password|passwd|api[_-]?key|private[_-]?key)\s*[=:]\s*)(\S+)/gi, '$1[redacted]'],
+  [/[A-Za-z0-9+/]{40,}={0,2}/g, '[redacted]'],
+]
+const redactSecrets = (text) => REDACTION_RULES.reduce((acc, [pattern, replacement]) => acc.replace(pattern, replacement), text)
+const capActionBody = (text) =>
+  text.length <= ACTION_BODY_MAX ? text : `${text.slice(0, ACTION_BODY_MAX - ACTION_BODY_TRUNCATION_MARKER.length)}${ACTION_BODY_TRUNCATION_MARKER}`
+const deriveActionBody = (command) => capActionBody(redactSecrets(command))
+
 // ── ask / wait ───────────────────────────────────────────────────────────────
 const askArgs = (command, project, ident) => ({
   question: `Allow this command?\n\n${command}`,
@@ -240,6 +259,7 @@ const askArgs = (command, project, ident) => ({
   sessionId: ident.sessionId,
   machineId: ident.machineId,
   toolName: 'Bash',
+  actionBody: deriveActionBody(command),
   wait: false,
 })
 
@@ -278,7 +298,10 @@ const handlePushOnly = async (apiKey, command, project, ident, timeoutSeconds, t
   const realMs = Math.max(timeoutSeconds, 1) * 1000
   const cap = Math.min(realMs, MAX_BLOCK_MS)
   const answer = await pollForAnswer(apiKey, asked.correlationId, Date.now() + cap)
-  if (answer.answered) return answer.value === 'yes' ? ALLOW : deny(DENIED)
+  if (answer.answered) {
+    if (answer.value === 'defer') return ask()
+    return answer.value === 'yes' ? ALLOW : deny(DENIED)
+  }
 
   // If Cursor's hook limit cut us off before the configured timeout, hand off to
   // Cursor's own prompt rather than misapplying the policy's timeout action.
@@ -298,7 +321,10 @@ const handlePushFirst = async (apiKey, command, project, ident, pushFirstSeconds
 
   const cap = Math.min(Math.max(pushFirstSeconds, 1) * 1000, MAX_BLOCK_MS)
   const answer = await pollForAnswer(apiKey, asked.correlationId, Date.now() + cap)
-  if (answer.answered) return answer.value === 'yes' ? ALLOW : deny(DENIED)
+  if (answer.answered) {
+    if (answer.value === 'defer') return ask()
+    return answer.value === 'yes' ? ALLOW : deny(DENIED)
+  }
   return ask('Sent to your phone via Pushary — you can also approve here.')
 }
 

package/dist/bin/pushary-clean.js

@@ -8,7 +8,7 @@ import {
   removeCodexHooks,
   removeGeminiSettings,
   removeInstructionBlock
-} from "../chunk-BHAMEPOP.js";
+} from "../chunk-JPRRYC5X.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, writeFileSync, rmSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -1,36 +1,40 @@
 #!/usr/bin/env node
 import {
-  denyReasonFrom
-} from "../chunk-N7VXDBQU.js";
+  denyReasonFrom,
+  isDeferAnswer
+} from "../chunk-KQYIHZ5E.js";
 import {
   CODEX_AGENT,
+  DEFAULT_SESSION,
+  askUser,
   codexAllow,
   codexDeny,
   codexPass,
+  deriveActionBody,
+  deriveBlocker,
+  deriveToolTarget,
   describeApplyPatch,
+  describeToolCall,
+  fetchModeState,
+  getMachineId,
+  getPolicy,
   handlePostToolUse,
   handleStop,
   handleUserPrompt,
   permissionTimeoutDecision,
   preToolUseTimeoutDecision,
+  readLastPrompt,
   reportEvent,
-  toCodexWire,
-  toPolicyLookup
-} from "../chunk-BYNYYZWW.js";
-import {
-  DEFAULT_SESSION,
-  askUser,
-  deriveToolTarget,
-  describeToolCall,
-  fetchModeState,
-  getMachineId,
-  getPolicy,
   resolvePolicy,
   savePendingQuestion,
   sendNotification,
+  toCodexWire,
+  toPolicyLookup,
   waitForAnswer
-} from "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-M4GDBGXF.js";
+import {
+  DECISION_LINE_MAX
+} from "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import {
   getApiKey
@@ -107,7 +111,7 @@ var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3
 };
 var agentNameFor = (input) => `Codex - ${basename(input.cwd ?? process.cwd())}`;
 var describeFor = (input, lookup) => input.tool_name === "apply_patch" ? describeApplyPatch(input.tool_input?.command) ?? describeToolCall(lookup.tool, lookup.input, "hook") : describeToolCall(lookup.tool, lookup.input, "hook");
-var pushQuestion = async (apiKey, input, lookup, waitSeconds) => {
+var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode) => {
   const projectName = basename(input.cwd ?? process.cwd());
   const description = describeFor(input, lookup);
   const result = await askUser(apiKey, {
@@ -118,7 +122,11 @@ var pushQuestion = async (apiKey, input, lookup, waitSeconds) => {
     sessionId: input.session_id,
     machineId: getMachineId(),
     toolName: lookup.tool,
-    toolTarget: deriveToolTarget(lookup.tool, lookup.input)
+    toolTarget: deriveToolTarget(lookup.tool, lookup.input),
+    intent: readLastPrompt(input.session_id || DEFAULT_SESSION),
+    action: description.slice(0, DECISION_LINE_MAX),
+    blocker: deriveBlocker(mode),
+    actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {})
   });
   const deadline = Math.min(
     Date.now() + Math.min(waitSeconds, MAX_WAIT_SECONDS) * 1e3,
@@ -157,8 +165,9 @@ var decidePermissionRequest = async (input) => {
       return codexPass();
     }
     const waitSeconds = toolPolicy.mode === "push_first" ? toolPolicy.pushFirstSeconds : toolPolicy.timeoutSeconds;
-    const { answer, correlationId } = await pushQuestion(apiKey, input, lookup, waitSeconds);
+    const { answer, correlationId } = await pushQuestion(apiKey, input, lookup, waitSeconds, toolPolicy.mode);
     if (answer.answered) {
+      if (isDeferAnswer(answer.value)) return codexPass();
       if (answer.value === "yes") {
         if (toolPolicy.mode === "push_only") markApproved(input.tool_use_id);
         return codexAllow();
@@ -190,12 +199,13 @@ var decidePreToolUse = async (input) => {
       if (consumeApproval(input.tool_use_id)) return codexPass();
       let pushed;
       try {
-        pushed = await pushQuestion(apiKey, input, lookup, toolPolicy.timeoutSeconds);
+        pushed = await pushQuestion(apiKey, input, lookup, toolPolicy.timeoutSeconds, "push_only");
       } catch {
         return preToolUseTimeoutDecision(toolPolicy.timeoutAction, "Push notification failed, denying per policy");
       }
       const { answer, correlationId } = pushed;
       if (answer.answered) {
+        if (isDeferAnswer(answer.value)) return codexPass();
         return answer.value === "yes" ? codexPass() : codexDeny(denyReasonFrom(answer.value));
       }
       savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);

package/dist/bin/pushary-codex.js

@@ -1,13 +1,11 @@
 #!/usr/bin/env node
-import {
-  reportEvent
-} from "../chunk-BYNYYZWW.js";
 import {
   askUser,
   getMachineId,
+  reportEvent,
   waitForAnswer
-} from "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-M4GDBGXF.js";
+import "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import {
   getApiKey

package/dist/bin/pushary-doctor.js

@@ -8,7 +8,7 @@ import {
   missingCodexHookEvents,
   missingGeminiHookEvents,
   untrustedCodexHookEvents
-} from "../chunk-BHAMEPOP.js";
+} from "../chunk-JPRRYC5X.js";
 import {
   callMcpTool,
   sendMcpRequest
@@ -283,7 +283,7 @@ var main = async () => {
     const cursorAuth = cursorServers.pushary?.headers?.Authorization;
     if (!cursorAuth) {
       check(false, "Cursor: API key linked", "no Authorization in plugin mcp.json \u2014 re-run setup");
-    } else if (cursorAuth.includes("${PUSHARY_API_KEY}")) {
+    } else if (cursorAuth.includes("PUSHARY_API_KEY")) {
       check(false, "Cursor: API key linked", "plugin relies on $PUSHARY_API_KEY; re-run setup to embed the key so the gate works when Cursor is launched from the GUI");
     } else {
       check(true, "Cursor: API key linked", "embedded in plugin mcp.json");

package/dist/bin/pushary-gemini-hook.js

@@ -1,27 +1,32 @@
 #!/usr/bin/env node
 import {
-  denyReasonFrom
-} from "../chunk-N7VXDBQU.js";
-import {
-  handlePostToolUse,
-  handleStop,
-  handleUserPrompt,
-  reportEvent
-} from "../chunk-BYNYYZWW.js";
+  denyReasonFrom,
+  isDeferAnswer
+} from "../chunk-KQYIHZ5E.js";
 import {
   DEFAULT_SESSION,
   askUser,
+  deriveActionBody,
+  deriveBlocker,
   deriveToolTarget,
   describeToolCall,
   fetchModeState,
   getMachineId,
   getPolicy,
+  handlePostToolUse,
+  handleStop,
+  handleUserPrompt,
+  readLastPrompt,
+  readLastUserPrompt,
+  reportEvent,
   resolvePolicy,
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-M4GDBGXF.js";
+import {
+  DECISION_LINE_MAX
+} from "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import {
   getApiKey
@@ -86,7 +91,7 @@ var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3
   return { answered: false };
 };
 var agentNameFor = (input) => `${GEMINI_AGENT.label} - ${basename(input.cwd ?? process.cwd())}`;
-var pushQuestion = async (apiKey, input, lookup, waitSeconds, pollInterval = 2e3) => {
+var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode, pollInterval = 2e3) => {
   const projectName = basename(input.cwd ?? process.cwd());
   const description = describeToolCall(lookup.tool, lookup.input, "hook");
   const result = await askUser(apiKey, {
@@ -97,7 +102,11 @@ var pushQuestion = async (apiKey, input, lookup, waitSeconds, pollInterval = 2e3
     sessionId: input.session_id,
     machineId: getMachineId(),
     toolName: lookup.tool,
-    toolTarget: deriveToolTarget(lookup.tool, lookup.input)
+    toolTarget: deriveToolTarget(lookup.tool, lookup.input),
+    intent: readLastPrompt(input.session_id || DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0),
+    action: description.slice(0, DECISION_LINE_MAX),
+    blocker: deriveBlocker(mode),
+    actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {})
   });
   const deadline = Math.min(
     Date.now() + Math.min(waitSeconds, MAX_WAIT_SECONDS) * 1e3,
@@ -121,12 +130,13 @@ var notifyApprovalNeeded = async (apiKey, input, lookup) => {
 var handlePushOnly = async (apiKey, input, lookup, timeoutSeconds, timeoutAction) => {
   let pushed;
   try {
-    pushed = await pushQuestion(apiKey, input, lookup, timeoutSeconds);
+    pushed = await pushQuestion(apiKey, input, lookup, timeoutSeconds, "push_only");
   } catch {
     return geminiTimeoutDecision(timeoutAction, "Push notification failed, denying per policy");
   }
   const { answer, correlationId } = pushed;
   if (answer.answered) {
+    if (isDeferAnswer(answer.value)) return geminiPass();
     return answer.value === "yes" ? geminiAllow() : geminiDeny(denyReasonFrom(answer.value));
   }
   savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);
@@ -135,12 +145,13 @@ var handlePushOnly = async (apiKey, input, lookup, timeoutSeconds, timeoutAction
 var handlePushFirst = async (apiKey, input, lookup, pushFirstSeconds) => {
   let pushed;
   try {
-    pushed = await pushQuestion(apiKey, input, lookup, pushFirstSeconds, 1500);
+    pushed = await pushQuestion(apiKey, input, lookup, pushFirstSeconds, "push_first", 1500);
   } catch {
     return geminiPass();
   }
   const { answer, correlationId } = pushed;
   if (answer.answered) {
+    if (isDeferAnswer(answer.value)) return geminiPass();
     return answer.value === "yes" ? geminiAllow() : geminiDeny(denyReasonFrom(answer.value));
   }
   savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);

package/dist/bin/pushary-hook.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-M5F2L4KF.js";
-import "../chunk-N7VXDBQU.js";
-import "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-FGZZRCOG.js";
+import "../chunk-KQYIHZ5E.js";
+import "../chunk-M4GDBGXF.js";
+import "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-NKXSILEW.js";
 

package/dist/bin/pushary-post-hook.js

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-BYNYYZWW.js";
-import "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-M4GDBGXF.js";
+import "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-NKXSILEW.js";
 

package/dist/bin/pushary-prompt-hook.js

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-BYNYYZWW.js";
-import "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-M4GDBGXF.js";
+import "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-NKXSILEW.js";
 

package/dist/bin/pushary-setup.js

@@ -13,11 +13,12 @@ import {
   execNpm,
   npmErrorMessage,
   renderAgentInstructions,
+  renderProjectAgentInstructions,
   writeInstructionBlock
-} from "../chunk-BHAMEPOP.js";
+} from "../chunk-JPRRYC5X.js";
 import {
   isValidApiKey
-} from "../chunk-USUCPCUC.js";
+} from "../chunk-WPVL6VIT.js";
 
 // bin/pushary-setup.ts
 import { existsSync, readFileSync, writeFileSync, appendFileSync, mkdirSync, cpSync, rmSync, chmodSync } from "fs";
@@ -857,6 +858,26 @@ var AGENT_SETUP = {
   cursor: setupCursor,
   custom: setupCustom
 };
+var PROJECT_INSTRUCTION_TARGETS = {
+  claude_code: { file: "CLAUDE.md", label: "Claude Code" },
+  codex: { file: "AGENTS.md", label: "Codex" }
+};
+var offerProjectInstructions = async (agents) => {
+  const targets = agents.map((agent) => PROJECT_INSTRUCTION_TARGETS[agent]).filter((target) => target !== void 0);
+  if (targets.length === 0 || !process.stdout.isTTY) return;
+  console.log();
+  const wanted = await confirm({
+    message: "Add Pushary instructions to this project's CLAUDE.md/AGENTS.md so your whole team's agents can use phone approvals?",
+    default: false
+  });
+  if (!wanted) return;
+  for (const target of targets) {
+    await spinner(`Writing managed block to ${join(process.cwd(), target.file)}`, async () => {
+      writeInstructionBlock(join(process.cwd(), target.file), renderProjectAgentInstructions(target.label));
+    }, { optional: true });
+  }
+  console.log(`  ${dim2("Commit the file to share it. Teammates without a key fall back to the terminal.")}`);
+};
 var main = async () => {
   const version = getPackageVersion();
   console.log();
@@ -952,6 +973,7 @@ var main = async () => {
       console.log();
       console.log(`  ${yellow2("!")} Failed: ${failed.join(", ")} ${dim2("(others completed successfully)")}`);
     }
+    await offerProjectInstructions(agents);
   }
   if (connectMode !== "app") {
     const skipPhone = process.argv.includes("--skip-phone");

package/dist/bin/pushary-stop-hook.js

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-BYNYYZWW.js";
-import "../chunk-6QWFMVCD.js";
-import "../chunk-USUCPCUC.js";
+} from "../chunk-M4GDBGXF.js";
+import "../chunk-WPVL6VIT.js";
 import "../chunk-DWED7BS3.js";
 import "../chunk-NKXSILEW.js";
 

package/dist/{chunk-FXYTRZHC.js → chunk-FGZZRCOG.js}

@@ -1,19 +1,25 @@
 import {
-  denyReasonFrom
-} from "./chunk-N7VXDBQU.js";
+  denyReasonFrom,
+  isDeferAnswer
+} from "./chunk-KQYIHZ5E.js";
 import {
   DEFAULT_SESSION,
   askUser,
+  deriveAction,
+  deriveActionBody,
+  deriveBlocker,
   deriveToolTarget,
   describeToolCall,
   fetchModeState,
   getMachineId,
   getPolicy,
+  readLastPrompt,
+  readLastUserPrompt,
   resolvePolicy,
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "./chunk-ACE77TKQ.js";
+} from "./chunk-M4GDBGXF.js";
 import {
   getApiKey
 } from "./chunk-NKXSILEW.js";
@@ -58,7 +64,7 @@ var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3
   }
   return { answered: false };
 };
-var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget) => {
+var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, timeoutAction, sessionId, machineId, toolName, toolTarget, decision) => {
   let result;
   try {
     result = await askUser(apiKey, {
@@ -69,7 +75,8 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
       sessionId,
       machineId,
       toolName,
-      toolTarget
+      toolTarget,
+      ...decision
     });
   } catch {
     switch (timeoutAction) {
@@ -84,6 +91,7 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
   const deadline = Date.now() + timeoutSeconds * 1e3;
   const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
   if (answer.answered) {
+    if (isDeferAnswer(answer.value)) return ask("Handling on your machine");
     return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value));
   }
   switch (timeoutAction) {
@@ -98,7 +106,7 @@ var handlePushOnly = async (apiKey, description, projectName, timeoutSeconds, ti
 var handleTerminalOnly = () => {
   return ask();
 };
-var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds, sessionId, machineId, toolName, toolTarget) => {
+var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds, sessionId, machineId, toolName, toolTarget, decision) => {
   let result;
   try {
     result = await askUser(apiKey, {
@@ -109,7 +117,8 @@ var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds,
       sessionId,
       machineId,
       toolName,
-      toolTarget
+      toolTarget,
+      ...decision
     });
   } catch {
     return ask("Push notification failed, asking in terminal");
@@ -117,6 +126,7 @@ var handlePushFirst = async (apiKey, description, projectName, pushFirstSeconds,
   const deadline = Date.now() + pushFirstSeconds * 1e3;
   const answer = await pollForAnswer(apiKey, result.correlationId, deadline, 1500);
   if (answer.answered) {
+    if (isDeferAnswer(answer.value)) return ask("Handling on your machine");
     return answer.value === "yes" ? allow() : deny(denyReasonFrom(answer.value));
   }
   savePendingQuestion(sessionId || DEFAULT_SESSION, result.correlationId);
@@ -155,17 +165,24 @@ var handlePreToolUse = async (input) => {
     const sessionId = input.session_id;
     const machineId = getMachineId();
     const toolTarget = deriveToolTarget(input.tool_name, input.tool_input);
+    const intent = readLastPrompt(sessionId ?? DEFAULT_SESSION) ?? (input.transcript_path ? readLastUserPrompt(input.transcript_path) : void 0);
+    const decision = {
+      intent,
+      action: deriveAction(input.tool_name, input.tool_input),
+      blocker: deriveBlocker(toolPolicy.mode),
+      actionBody: deriveActionBody(input.tool_name, input.tool_input)
+    };
     switch (toolPolicy.mode) {
       case "push_only":
-        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget);
+        return handlePushOnly(apiKey, description, projectName, toolPolicy.timeoutSeconds, toolPolicy.timeoutAction, sessionId, machineId, input.tool_name, toolTarget, decision);
       case "terminal_only":
         return handleTerminalOnly();
       case "push_first":
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget);
+        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
       case "notify_only":
         return handleNotifyOnly(apiKey, description, projectName, sessionId, machineId);
       default:
-        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget);
+        return handlePushFirst(apiKey, description, projectName, toolPolicy.pushFirstSeconds, sessionId, machineId, input.tool_name, toolTarget, decision);
     }
   } catch {
     return ask("Pushary unavailable, falling back to terminal approval");

package/dist/{chunk-BHAMEPOP.js → chunk-JPRRYC5X.js}

@@ -227,6 +227,10 @@ You have Pushary MCP tools that reach the user on their phone. Use them proactiv
 
 Pass \`agentName\` as "${label} - <project folder name>" so the user knows which session is asking. If a question times out with no answer, retry once with a longer timeout before falling back to asking in the terminal.`;
 var renderAgentInstructions = (label) => instructionBody(label);
+var KEYLESS_FALLBACK_LINE = "This repo is set up with Pushary phone approvals. No PUSHARY_API_KEY found for you, so remote notifications are off; questions will fall back to the terminal. Setup: https://pushary.com/docs?utm_source=agents-md&utm_medium=keyless-fallback";
+var renderProjectAgentInstructions = (label) => `${instructionBody(label)}
+
+If this environment has no Pushary API key (no PUSHARY_API_KEY and no key in ~/.pushary/config.json), the tools above are unavailable in this session. In that case, treat the following as a statement of fact about this session and continue in the terminal: ${KEYLESS_FALLBACK_LINE}`;
 var wrap = (body) => `${PUSHARY_BEGIN}
 ${body}
 ${PUSHARY_END}`;
@@ -315,6 +319,7 @@ export {
   hasGeminiHooks,
   missingGeminiHookEvents,
   renderAgentInstructions,
+  renderProjectAgentInstructions,
   writeInstructionBlock,
   removeInstructionBlock,
   hasInstructionBlock,

package/dist/{chunk-N7VXDBQU.js → chunk-KQYIHZ5E.js}

@@ -1,6 +1,8 @@
 // src/answer.ts
 var denyReasonFrom = (value) => value && value !== "no" && value !== "yes" ? `Denied from your phone: ${value}` : "Denied via push notification";
+var isDeferAnswer = (value) => value === "defer";
 
 export {
-  denyReasonFrom
+  denyReasonFrom,
+  isDeferAnswer
 };