@pushary/agent-hooks 0.25.0 → 0.27.0

package/data/cursor-plugin/scripts/pushary-gate.mjs

@@ -295,7 +295,19 @@ const handlePushOnly = async (apiKey, command, project, ident, timeoutSeconds, t
   }
   if (!asked?.correlationId) return ask()
 
-  const realMs = Math.max(timeoutSeconds, 1) * 1000
+  // Keyboard bypass: at the keyboard, so Cursor's own prompt handles it now.
+  if (asked.suppressed) {
+    await callTool(apiKey, 'cancel_question', { correlationId: asked.correlationId }).catch(() => {})
+    return ask('You are at the keyboard — approve here.')
+  }
+  // No reachable device: apply the configured fallback immediately.
+  if (asked.noDevices) {
+    return fromTimeoutAction(timeoutAction, 'No device connected to approve on; denied per your Pushary policy.')
+  }
+
+  // `wait` holds the full block window for the phone (fromTimeoutAction maps it
+  // to ask, so on timeout it hands to Cursor's prompt, never auto-denies).
+  const realMs = timeoutAction === 'wait' ? MAX_BLOCK_MS : Math.max(timeoutSeconds, 1) * 1000
   const cap = Math.min(realMs, MAX_BLOCK_MS)
   const answer = await pollForAnswer(apiKey, asked.correlationId, Date.now() + cap)
   if (answer.answered) {
@@ -319,6 +331,14 @@ const handlePushFirst = async (apiKey, command, project, ident, pushFirstSeconds
   }
   if (!asked?.correlationId) return ask()
 
+  // Keyboard bypass / no reachable device: push_first already falls to Cursor's
+  // prompt, so do it now rather than racing a push nobody will see.
+  if (asked.suppressed) {
+    await callTool(apiKey, 'cancel_question', { correlationId: asked.correlationId }).catch(() => {})
+    return ask('You are at the keyboard — approve here.')
+  }
+  if (asked.noDevices) return ask('No device connected — approve here.')
+
   const cap = Math.min(Math.max(pushFirstSeconds, 1) * 1000, MAX_BLOCK_MS)
   const answer = await pollForAnswer(apiKey, asked.correlationId, Date.now() + cap)
   if (answer.answered) {

package/dist/bin/pushary-clean.js

@@ -2,13 +2,14 @@
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-5MA3CPZB.js";
+} from "../chunk-MVNOP5IZ.js";
 import {
   execNpm,
   removeCodexHooks,
   removeGeminiSettings,
   removeInstructionBlock
-} from "../chunk-JPRRYC5X.js";
+} from "../chunk-WXWHRXDK.js";
+import "../chunk-FDR5WYT7.js";
 
 // bin/pushary-clean.ts
 import { existsSync, readFileSync, writeFileSync, rmSync } from "fs";

package/dist/bin/pushary-codex-hook.js

@@ -5,9 +5,9 @@ import {
 } from "../chunk-KQYIHZ5E.js";
 import {
   CODEX_AGENT,
-  DECISION_LINE_MAX,
   DEFAULT_SESSION,
   askUser,
+  cancelQuestion,
   codexAllow,
   codexDeny,
   codexPass,
@@ -32,8 +32,14 @@ import {
   toCodexWire,
   toPolicyLookup,
   waitForAnswer
-} from "../chunk-GYPPVD3P.js";
+} from "../chunk-TUILTFLS.js";
 import "../chunk-DWED7BS3.js";
+import {
+  DECISION_LINE_MAX,
+  effectiveWaitSeconds,
+  hookWaitClamped,
+  hookWaitDeadline
+} from "../chunk-FDR5WYT7.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";
@@ -43,7 +49,6 @@ import { basename, join } from "path";
 import { tmpdir, userInfo } from "os";
 import { existsSync, mkdirSync, statSync, unlinkSync, writeFileSync } from "fs";
 var KILL_REASON = "Stopped by user: this agent was halted from Pushary";
-var MAX_WAIT_SECONDS = 170;
 var START_MS = Date.now();
 var APPROVAL_TTL_MS = 10 * 60 * 1e3;
 var sanitizeId = (value) => value.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128);
@@ -126,12 +131,20 @@ var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode) => {
     blocker: deriveBlocker(mode),
     actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {})
   });
-  const deadline = Math.min(
-    Date.now() + Math.min(waitSeconds, MAX_WAIT_SECONDS) * 1e3,
-    START_MS + MAX_WAIT_SECONDS * 1e3
-  );
+  if (result.suppressed || result.noDevices) {
+    return {
+      answer: { answered: false },
+      correlationId: result.correlationId,
+      suppressed: !!result.suppressed,
+      noDevices: !!result.noDevices,
+      clampCut: false
+    };
+  }
+  const now = Date.now();
+  const deadline = hookWaitDeadline(START_MS, waitSeconds, "codex", now);
+  const clampCut = hookWaitClamped(START_MS, waitSeconds, "codex", now);
   const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
-  return { answer, correlationId: result.correlationId };
+  return { answer, correlationId: result.correlationId, suppressed: false, noDevices: false, clampCut };
 };
 var notifyApprovalNeeded = async (apiKey, input, lookup) => {
   try {
@@ -162,8 +175,13 @@ var decidePermissionRequest = async (input) => {
       if (claimNotify(input.tool_use_id)) await notifyApprovalNeeded(apiKey, input, lookup);
       return codexPass();
     }
-    const waitSeconds = toolPolicy.mode === "push_first" ? toolPolicy.pushFirstSeconds : toolPolicy.timeoutSeconds;
-    const { answer, correlationId } = await pushQuestion(apiKey, input, lookup, waitSeconds, toolPolicy.mode);
+    const waitSeconds = toolPolicy.mode === "push_first" ? toolPolicy.pushFirstSeconds : effectiveWaitSeconds(toolPolicy.timeoutAction, toolPolicy.timeoutSeconds, "codex");
+    const { answer, correlationId, suppressed, clampCut } = await pushQuestion(apiKey, input, lookup, waitSeconds, toolPolicy.mode);
+    if (suppressed) {
+      await cancelQuestion(apiKey, correlationId).catch(() => {
+      });
+      return codexPass();
+    }
     if (answer.answered) {
       if (isDeferAnswer(answer.value)) return codexPass();
       if (answer.value === "yes") {
@@ -174,6 +192,7 @@ var decidePermissionRequest = async (input) => {
     }
     savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);
     if (toolPolicy.mode === "push_first") return codexPass();
+    if (clampCut) return codexPass();
     const decision = permissionTimeoutDecision(toolPolicy.timeoutAction);
     if (decision.kind === "allow") markApproved(input.tool_use_id);
     return decision;
@@ -197,16 +216,22 @@ var decidePreToolUse = async (input) => {
       if (consumeApproval(input.tool_use_id)) return codexPass();
       let pushed;
       try {
-        pushed = await pushQuestion(apiKey, input, lookup, toolPolicy.timeoutSeconds, "push_only");
+        pushed = await pushQuestion(apiKey, input, lookup, effectiveWaitSeconds(toolPolicy.timeoutAction, toolPolicy.timeoutSeconds, "codex"), "push_only");
       } catch {
         return preToolUseTimeoutDecision(toolPolicy.timeoutAction, "Push notification failed, denying per policy");
       }
-      const { answer, correlationId } = pushed;
+      const { answer, correlationId, suppressed, clampCut } = pushed;
+      if (suppressed) {
+        await cancelQuestion(apiKey, correlationId).catch(() => {
+        });
+        return codexPass();
+      }
       if (answer.answered) {
         if (isDeferAnswer(answer.value)) return codexPass();
         return answer.value === "yes" ? codexPass() : codexDeny(denyReasonFrom(answer.value));
       }
       savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);
+      if (clampCut) return codexPass();
       return preToolUseTimeoutDecision(toolPolicy.timeoutAction);
     }
     if (toolPolicy.mode === "notify_only") {

package/dist/bin/pushary-codex.js

@@ -4,8 +4,9 @@ import {
   getMachineId,
   reportEvent,
   waitForAnswer
-} from "../chunk-GYPPVD3P.js";
+} from "../chunk-TUILTFLS.js";
 import "../chunk-DWED7BS3.js";
+import "../chunk-FDR5WYT7.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";

package/dist/bin/pushary-doctor.js

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import {
+  describeWaitLadder
+} from "../chunk-IIENZE2J.js";
 import {
   GEMINI_HOOK_BINARY,
   execNpm,
@@ -7,13 +10,17 @@ import {
   hasInstructionBlock,
   missingCodexHookEvents,
   missingGeminiHookEvents,
+  readCodexMcpAuth,
   untrustedCodexHookEvents
-} from "../chunk-JPRRYC5X.js";
+} from "../chunk-WXWHRXDK.js";
 import {
   callMcpTool,
   sendMcpRequest
 } from "../chunk-DWED7BS3.js";
-import "../chunk-NKXSILEW.js";
+import "../chunk-FDR5WYT7.js";
+import {
+  getBaseUrl
+} from "../chunk-NKXSILEW.js";
 
 // bin/pushary-doctor.ts
 import { existsSync, readFileSync } from "fs";
@@ -171,22 +178,33 @@ var main = async () => {
     }
     const codexMcp = codexParsed.mcp_servers?.pushary;
     const codexTransport = !!codexMcp && (typeof codexMcp.url === "string" || typeof codexMcp.command === "string");
-    const codexEnvVar = codexMcp && typeof codexMcp.bearer_token_env_var === "string" ? codexMcp.bearer_token_env_var : void 0;
-    const codexHasCred = !!codexEnvVar || !!codexMcp && typeof codexMcp.bearer_token === "string";
-    const codexMcpOk = !!codexMcp && codexTransport && codexHasCred;
-    check(codexMcpOk, "Codex: MCP server configured", codexMcpOk ? void 0 : !codexMcp ? "no [mcp_servers.pushary] \u2014 re-run setup" : !codexTransport ? "entry has no url \u2014 `codex mcp add` likely failed, re-run setup" : "entry has no bearer_token/_env_var \u2014 re-run setup");
+    const codexAuth = readCodexMcpAuth(codexParsed);
+    const codexMcpOk = !!codexMcp && codexTransport && !!codexAuth;
+    check(codexMcpOk, "Codex: MCP server configured", codexMcpOk ? void 0 : !codexMcp ? "no [mcp_servers.pushary] \u2014 re-run setup" : !codexTransport ? "entry has no url \u2014 re-run setup" : "entry has no Authorization header or bearer token \u2014 re-run setup");
     if (codexMcp) {
       const hasAutoApprove = codexMcp.default_tools_approval_mode === "approve";
       check(hasAutoApprove, "Codex: tools auto-allowed", hasAutoApprove ? "default_tools_approval_mode = approve" : "missing \u2014 MCP calls will prompt for approval");
       if (codexMcp.tools && typeof codexMcp.tools === "object") {
         console.log(`  ${warn} Codex: per-tool approval overrides detected ${dim("(redundant with default_tools_approval_mode)")}`);
       }
-      if (codexEnvVar) {
-        const envValue = process.env[codexEnvVar]?.trim();
-        check(!!envValue, `Codex: MCP key available in shell ($${codexEnvVar})`, envValue ? "set" : `not set \u2014 Codex reads its key from your shell; the ~/.pushary/config.json fallback only covers hooks. Add the export to your profile or re-run setup`);
+      if (codexAuth?.method === "embedded") {
+        const keyMatches = !apiKey || codexAuth.key === apiKey;
+        check(keyMatches, "Codex: MCP key embedded (config.toml)", keyMatches ? "no shell export needed" : "differs from your active key \u2014 re-run setup");
+      } else if (codexAuth?.method === "env") {
+        const envValue = process.env[codexAuth.envVar]?.trim();
+        const exportedInProfile = SHELL_FILES.some((f) => {
+          try {
+            return readFileSync(f, "utf-8").includes(`export ${codexAuth.envVar}=`);
+          } catch {
+            return false;
+          }
+        });
+        check(!!envValue, `Codex: MCP key available in shell ($${codexAuth.envVar})`, envValue ? "set \u2014 re-run setup to embed the key and drop the shell dependency" : exportedInProfile ? "exported in your profile but not in this shell \u2014 restart the terminal, or re-run setup to embed the key in config.toml" : "not set \u2014 Codex reads its key from your shell; re-run setup to embed the key in config.toml");
         if (envValue && apiKey && envValue !== apiKey) {
-          console.log(`  ${warn} Codex: $${codexEnvVar} differs from your active key ${dim("(rotate or re-run setup so hooks and MCP match)")}`);
+          console.log(`  ${warn} Codex: $${codexAuth.envVar} differs from your active key ${dim("(rotate or re-run setup so hooks and MCP match)")}`);
         }
+      } else if (codexAuth?.method === "legacy-bearer") {
+        console.log(`  ${warn} Codex: legacy bearer_token entry ${dim("(re-run setup to embed the key as an Authorization header)")}`);
       }
     }
     const codexNotifyPath = codexConfig.match(/["']([^"']*pushary-codex[^"']*)["']/)?.[1] ?? null;
@@ -395,6 +413,30 @@ var main = async () => {
       }
     }
   }
+  if (apiKey) {
+    try {
+      const res = await fetch(`${getBaseUrl()}/api/mcp/policy`, {
+        headers: { Authorization: `Bearer ${apiKey}` }
+      });
+      if (res.ok) {
+        const policy = await res.json();
+        console.log();
+        console.log(`  ${dim("Wait Ladder")} ${dim("(what happens when you don't answer)")}`);
+        const wildcard = policy.policies?.find((p) => p.tool === "*");
+        const defaultWindow = policy.defaultPushFirstSeconds ?? 20;
+        console.log(`  ${dim("\xB7")} default: ${cyan(`${defaultWindow}s`)} ${dim("\u2014")} ${wildcard ? describeWaitLadder(wildcard) : `ping your phone ${defaultWindow}s, then ask in the terminal`}`);
+        if (policy.modeOverride) {
+          console.log(`  ${warn} mode override active: ${cyan(policy.modeOverride)} ${dim("(pushary mode status)")}`);
+        }
+        const overrides = (policy.policies ?? []).filter((p) => p.tool !== "*").slice(0, 4);
+        for (const p of overrides) {
+          console.log(`  ${dim("\xB7")} ${p.tool}: ${describeWaitLadder(p)}`);
+        }
+        console.log(`  ${dim("Tune it:")} ${cyan("pushary wait <seconds>")} ${dim("\xB7 full ladder:")} ${cyan("pushary wait status")}`);
+      }
+    } catch {
+    }
+  }
   console.log();
   const failed = results.filter((r) => !r.passed);
   if (failed.length === 0) {

package/dist/bin/pushary-gemini-hook.js

@@ -4,9 +4,9 @@ import {
   isDeferAnswer
 } from "../chunk-KQYIHZ5E.js";
 import {
-  DECISION_LINE_MAX,
   DEFAULT_SESSION,
   askUser,
+  cancelQuestion,
   deriveActionBody,
   deriveBlocker,
   deriveToolTarget,
@@ -24,8 +24,14 @@ import {
   savePendingQuestion,
   sendNotification,
   waitForAnswer
-} from "../chunk-GYPPVD3P.js";
+} from "../chunk-TUILTFLS.js";
 import "../chunk-DWED7BS3.js";
+import {
+  DECISION_LINE_MAX,
+  effectiveWaitSeconds,
+  hookWaitClamped,
+  hookWaitDeadline
+} from "../chunk-FDR5WYT7.js";
 import {
   getApiKey
 } from "../chunk-NKXSILEW.js";
@@ -68,7 +74,6 @@ var geminiTimeoutDecision = (timeoutAction, denyReason = "No response within tim
 
 // bin/pushary-gemini-hook.ts
 var KILL_REASON = "Stopped by user: this agent was halted from Pushary";
-var MAX_WAIT_SECONDS = 170;
 var START_MS = Date.now();
 var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 var pollForAnswer = async (apiKey, correlationId, deadlineMs, pollInterval = 2e3) => {
@@ -106,12 +111,20 @@ var pushQuestion = async (apiKey, input, lookup, waitSeconds, mode, pollInterval
     blocker: deriveBlocker(mode),
     actionBody: deriveActionBody(input.tool_name ?? "", input.tool_input ?? {})
   });
-  const deadline = Math.min(
-    Date.now() + Math.min(waitSeconds, MAX_WAIT_SECONDS) * 1e3,
-    START_MS + MAX_WAIT_SECONDS * 1e3
-  );
+  if (result.suppressed || result.noDevices) {
+    return {
+      answer: { answered: false },
+      correlationId: result.correlationId,
+      suppressed: !!result.suppressed,
+      noDevices: !!result.noDevices,
+      clampCut: false
+    };
+  }
+  const now = Date.now();
+  const deadline = hookWaitDeadline(START_MS, waitSeconds, "gemini", now);
+  const clampCut = hookWaitClamped(START_MS, waitSeconds, "gemini", now);
   const answer = await pollForAnswer(apiKey, result.correlationId, deadline, pollInterval);
-  return { answer, correlationId: result.correlationId };
+  return { answer, correlationId: result.correlationId, suppressed: false, noDevices: false, clampCut };
 };
 var notifyApprovalNeeded = async (apiKey, input, lookup) => {
   try {
@@ -128,16 +141,22 @@ var notifyApprovalNeeded = async (apiKey, input, lookup) => {
 var handlePushOnly = async (apiKey, input, lookup, timeoutSeconds, timeoutAction) => {
   let pushed;
   try {
-    pushed = await pushQuestion(apiKey, input, lookup, timeoutSeconds, "push_only");
+    pushed = await pushQuestion(apiKey, input, lookup, effectiveWaitSeconds(timeoutAction, timeoutSeconds, "gemini"), "push_only");
   } catch {
     return geminiTimeoutDecision(timeoutAction, "Push notification failed, denying per policy");
   }
-  const { answer, correlationId } = pushed;
+  const { answer, correlationId, suppressed, clampCut } = pushed;
+  if (suppressed) {
+    await cancelQuestion(apiKey, correlationId).catch(() => {
+    });
+    return geminiPass();
+  }
   if (answer.answered) {
     if (isDeferAnswer(answer.value)) return geminiPass();
     return answer.value === "yes" ? geminiAllow() : geminiDeny(denyReasonFrom(answer.value));
   }
   savePendingQuestion(input.session_id || DEFAULT_SESSION, correlationId);
+  if (clampCut) return geminiPass();
   return geminiTimeoutDecision(timeoutAction);
 };
 var handlePushFirst = async (apiKey, input, lookup, pushFirstSeconds) => {
@@ -147,7 +166,13 @@ var handlePushFirst = async (apiKey, input, lookup, pushFirstSeconds) => {
   } catch {
     return geminiPass();
   }
-  const { answer, correlationId } = pushed;
+  const { answer, correlationId, suppressed, noDevices } = pushed;
+  if (suppressed) {
+    await cancelQuestion(apiKey, correlationId).catch(() => {
+    });
+    return geminiPass();
+  }
+  if (noDevices) return geminiPass();
   if (answer.answered) {
     if (isDeferAnswer(answer.value)) return geminiPass();
     return answer.value === "yes" ? geminiAllow() : geminiDeny(denyReasonFrom(answer.value));

package/dist/bin/pushary-hook.js

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-O2QL6U6G.js";
+} from "../chunk-VHD3GMZ3.js";
 import "../chunk-KQYIHZ5E.js";
-import "../chunk-GYPPVD3P.js";
+import "../chunk-TUILTFLS.js";
 import "../chunk-DWED7BS3.js";
+import "../chunk-FDR5WYT7.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-hook.ts

package/dist/bin/pushary-mode.js

@@ -19,9 +19,11 @@ var parseDuration = (value) => {
 var main = async () => {
   const apiKey = getApiKey();
   const baseUrl = getBaseUrl();
-  const mode = process.argv[2];
-  const forFlag = process.argv[3];
-  const forValue = process.argv[4];
+  const rest = process.argv.slice(2);
+  const args = rest[0] === "mode" ? rest.slice(1) : rest;
+  const mode = args[0];
+  const forFlag = args[1];
+  const forValue = args[2];
   const headers = {
     "Authorization": `Bearer ${apiKey}`,
     "Content-Type": "application/json"

package/dist/bin/pushary-post-hook.js

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-GYPPVD3P.js";
+} from "../chunk-TUILTFLS.js";
 import "../chunk-DWED7BS3.js";
+import "../chunk-FDR5WYT7.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-post-hook.ts
@@ -16,7 +17,12 @@ var main = async () => {
   }
   try {
     const input = JSON.parse(rawInput);
-    await handlePostToolUse(input);
+    const additionalContext = await handlePostToolUse(input);
+    if (additionalContext) {
+      process.stdout.write(JSON.stringify({
+        hookSpecificOutput: { hookEventName: "PostToolUse", additionalContext }
+      }));
+    }
   } catch {
   }
 };

package/dist/bin/pushary-prompt-hook.js

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-GYPPVD3P.js";
+} from "../chunk-TUILTFLS.js";
 import "../chunk-DWED7BS3.js";
+import "../chunk-FDR5WYT7.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-prompt-hook.ts
@@ -16,7 +17,12 @@ var main = async () => {
   }
   try {
     const input = JSON.parse(rawInput);
-    await handleUserPrompt(input);
+    const additionalContext = await handleUserPrompt(input);
+    if (additionalContext) {
+      process.stdout.write(JSON.stringify({
+        hookSpecificOutput: { hookEventName: "UserPromptSubmit", additionalContext }
+      }));
+    }
   } catch {
   }
 };

package/dist/bin/pushary-setup.js

@@ -3,11 +3,12 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-5MA3CPZB.js";
+} from "../chunk-MVNOP5IZ.js";
 import {
   GEMINI_HOOK_BINARY,
   addCodexHookTrust,
   addCodexHooks,
+  addCodexMcpServer,
   addGeminiHooks,
   addGeminiMcpServer,
   execNpm,
@@ -15,12 +16,14 @@ import {
   renderAgentInstructions,
   renderProjectAgentInstructions,
   writeInstructionBlock
-} from "../chunk-JPRRYC5X.js";
+} from "../chunk-WXWHRXDK.js";
 import {
-  isValidApiKey,
   reportEvent
-} from "../chunk-GYPPVD3P.js";
+} from "../chunk-TUILTFLS.js";
 import "../chunk-DWED7BS3.js";
+import {
+  isValidApiKey
+} from "../chunk-FDR5WYT7.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-setup.ts
@@ -602,7 +605,7 @@ var addCodexNotifyEntry = (codexConfig) => {
     writeFileSync(codexConfig, stringifyTOML(config), "utf-8");
   }
 };
-var setupCodex = async (_apiKey) => {
+var setupCodex = async (apiKey) => {
   console.log(`
   ${bold2("Setting up Codex")}
 `);
@@ -613,28 +616,14 @@ var setupCodex = async (_apiKey) => {
   }
   await installGlobally();
   const codexConfig = join(homedir(), ".codex", "config.toml");
-  await spinner("Adding Pushary MCP server to Codex", async () => {
-    try {
-      execSync(
-        "codex mcp add pushary --url https://pushary.com/api/mcp/mcp --bearer-token-env-var PUSHARY_API_KEY",
-        { stdio: "ignore", timeout: 15e3 }
-      );
-    } catch {
-    }
-  });
-  await spinner("Auto-allowing all Pushary tools", async () => {
+  await spinner("Adding Pushary MCP server (key embedded, auto-allowed)", async () => {
     let raw = "";
     try {
       raw = readFileSync(codexConfig, "utf-8");
     } catch {
     }
     const config = raw ? parseTOML(raw) : {};
-    const mcpServers = config.mcp_servers ?? {};
-    const pushary = mcpServers.pushary ?? {};
-    pushary.default_tools_approval_mode = "approve";
-    delete pushary.tools;
-    mcpServers.pushary = pushary;
-    config.mcp_servers = mcpServers;
+    addCodexMcpServer(config, apiKey);
     writeFileSync(codexConfig, stringifyTOML(config), "utf-8");
   });
   const codexVersion = readCodexVersion();
@@ -681,6 +670,7 @@ var setupCodex = async (_apiKey) => {
   console.log();
   console.log(`  ${dim2("What this configured:")}`);
   console.log(`  ${dim2("\u2022")} MCP server: Codex can send notifications and ask questions`);
+  console.log(`  ${dim2("\u2022")} API key embedded in config.toml: works without a shell reload or export`);
   console.log(`  ${dim2("\u2022")} Proactive instructions: ~/.codex/AGENTS.md tells Codex to ask via push, not the terminal`);
   console.log(`  ${dim2("\u2022")} Auto-allowed tools: no permission prompts for Pushary MCP calls`);
   if (hooksSupported) {

package/dist/bin/pushary-stop-hook.js

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-GYPPVD3P.js";
+} from "../chunk-TUILTFLS.js";
 import "../chunk-DWED7BS3.js";
+import "../chunk-FDR5WYT7.js";
 import "../chunk-NKXSILEW.js";
 
 // bin/pushary-stop-hook.ts

package/dist/bin/pushary-wait.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-wait.js

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+import {
+  describeWaitLadder
+} from "../chunk-IIENZE2J.js";
+import {
+  getApiKey,
+  getBaseUrl
+} from "../chunk-NKXSILEW.js";
+
+// bin/pushary-wait.ts
+var dim = (s) => `\x1B[2m${s}\x1B[0m`;
+var bold = (s) => `\x1B[1m${s}\x1B[0m`;
+var green = (s) => `\x1B[32m${s}\x1B[0m`;
+var cyan = (s) => `\x1B[36m${s}\x1B[0m`;
+var yellow = (s) => `\x1B[33m${s}\x1B[0m`;
+var MAX_WINDOW = 300;
+var printLadder = (data) => {
+  console.log();
+  console.log(`  ${bold("Wait ladder")} ${dim("(what happens when you don't answer)")}`);
+  console.log();
+  console.log(`  Default push window: ${cyan(`${data.defaultPushFirstSeconds}s`)} ${dim("(catch-all tools)")}`);
+  if (data.modeOverride) {
+    console.log(`  ${yellow("!")} Active mode override: ${cyan(data.modeOverride)} ${dim("(pushary mode status)")}`);
+  }
+  console.log();
+  const rows = [...data.policies].sort((a, b) => a.tool === "*" ? -1 : b.tool === "*" ? 1 : a.tool.localeCompare(b.tool));
+  const width = Math.max(...rows.map((p) => p.tool.length), 4);
+  for (const p of rows) {
+    const label = p.tool === "*" ? "default (*)" : p.tool;
+    console.log(`  ${label.padEnd(width + 2)} ${dim("\xB7")} ${describeWaitLadder(p)}`);
+  }
+  console.log();
+  console.log(`  ${dim("Set the default window:")} ${cyan("pushary wait <seconds>")}`);
+  console.log(`  ${dim("Reset it:")}              ${cyan("pushary wait clear")}`);
+  console.log(`  ${dim("Per-tool rules live in the dashboard under Agent \u2192 Policies.")}`);
+};
+var fetchPolicy = async (baseUrl, headers) => {
+  const res = await fetch(`${baseUrl}/api/mcp/policy`, { headers });
+  if (!res.ok) throw new Error(`policy fetch failed (${res.status})`);
+  return res.json();
+};
+var setWindow = async (baseUrl, headers, seconds) => {
+  const res = await fetch(`${baseUrl}/api/mcp/policy`, {
+    method: "PATCH",
+    headers,
+    body: JSON.stringify({ defaultPushFirstSeconds: seconds })
+  });
+  if (!res.ok) {
+    const err = await res.json().catch(() => ({}));
+    throw new Error(err.error ?? res.statusText);
+  }
+  const data = await res.json();
+  return data.defaultPushFirstSeconds;
+};
+var main = async () => {
+  const apiKey = getApiKey();
+  const baseUrl = getBaseUrl();
+  const headers = {
+    "Authorization": `Bearer ${apiKey}`,
+    "Content-Type": "application/json"
+  };
+  const rest = process.argv.slice(2);
+  const args = rest[0] === "wait" ? rest.slice(1) : rest;
+  const arg = args[0];
+  if (!arg || arg === "status") {
+    printLadder(await fetchPolicy(baseUrl, headers));
+    return;
+  }
+  if (arg === "clear" || arg === "reset") {
+    const value2 = await setWindow(baseUrl, headers, 20);
+    console.log(`  ${green("\u2713")} Default push window reset to ${cyan(`${value2}s`)}`);
+    return;
+  }
+  const seconds = Number(arg);
+  if (!Number.isFinite(seconds) || seconds < 0 || seconds > MAX_WINDOW) {
+    console.log(`  ${yellow("!")} Invalid window: ${arg} ${dim(`(use 0-${MAX_WINDOW} seconds, or "status" / "clear")`)}`);
+    console.log(`  ${dim("Usage: pushary wait <seconds> | status | clear")}`);
+    return;
+  }
+  const value = await setWindow(baseUrl, headers, Math.trunc(seconds));
+  console.log(`  ${green("\u2713")} Default push window set to ${cyan(`${value}s`)} ${dim("\u2014 ping your phone that long, then the terminal takes over")}`);
+};
+main().catch((err) => {
+  console.error(`  ${yellow("!")} ${err instanceof Error ? err.message : err}`);
+  process.exit(1);
+});

package/dist/bin/pushary.js

@@ -12,6 +12,8 @@ if (command === "setup") {
   await import("./pushary-doctor.js");
 } else if (command === "mode") {
   await import("./pushary-mode.js");
+} else if (command === "wait") {
+  await import("./pushary-wait.js");
 } else {
   console.log(`
 Pushary Agent Hooks
@@ -21,6 +23,7 @@ Commands:
   doctor   Verify your Pushary installation is working
   clean    Remove all Pushary configuration
   mode     Switch approval mode (push_only, push_first, terminal_only)
+  wait     Show or set the "wait for your phone" ladder (pushary wait 45)
   hook     Run as a PreToolUse hook (reads stdin, writes stdout)
 
 Setup options:
@@ -34,5 +37,6 @@ Usage:
   npx @pushary/agent-hooks@latest setup --key pk_xxx.xxx --skip-phone
   npx @pushary/agent-hooks@latest doctor
   npx @pushary/agent-hooks@latest mode push_only --for 30m
+  npx @pushary/agent-hooks@latest wait 45
 `);
 }