@pushary/agent-hooks 0.77.0 → 0.79.0

package/CHANGELOG.md

@@ -1,5 +1,85 @@
 # Changelog
 
+## 0.79.0
+
+### Your agent now says what kind of update it is sending, so you can route it
+
+Pushary can now send task updates somewhere different from questions: approvals
+can wait at your keyboard while completions still buzz your phone, or the other
+way round. That only works if the agent says which one it is sending.
+
+The instructions setup writes now tell your agent to pass a context type when a
+task finishes. Without it a completion looks like any other notification, and
+the setting you chose for task updates has nothing to act on.
+
+Nothing changes for questions and approvals, and nothing you have configured
+needs revisiting. Re-run `npx @pushary/agent-hooks setup` to update the
+instructions your agents already have.
+
+## 0.78.0
+
+### Your agent can ask you several things at once, and reach your phone for all of them
+
+An agent that stops to ask you something often asks more than one thing in the
+same breath. Until this release the hook only recognised a single question, so
+two or more meant nothing arrived on your phone at all and the whole exchange
+waited at the terminal. That is exactly the moment this product exists for.
+
+Up to four questions now come through in turn. The notification says which one
+you are on, "(2 of 3)", so the first does not look like the last.
+
+If any question goes unanswered, whether you deferred it, it timed out, or no
+device was reachable, the entire exchange goes back to the terminal, including
+anything you already answered. A partly filled answer sheet would leave your
+agent guessing at questions it never put to you, and being asked twice is better
+than being answered wrongly.
+
+The whole exchange shares one wait budget. Four questions do not cost four times
+the wait you agreed to.
+
+Questions that let you tick several options at once still go to the terminal.
+Those answers travel as a single piece of text and the packing is not something
+this release can verify, so it is left alone rather than guessed at.
+
+## 0.77.0
+
+### Stop ends the process
+
+Until this release Stop was a gate verdict. Every pending and new tool call was
+denied, which is the guarantee and has not changed, but the agent kept running,
+kept thinking and kept spending tokens. For someone who hits Stop because
+something is going wrong, "it can no longer act" and "it stopped" are different
+promises.
+
+- every session event reports its own pid, so the server can name the process
+- the daemon advertises a `stop` capability, which is how the server knows a
+  machine can act on one at all
+- the daemon applies stops from the drain with SIGTERM, and refuses to signal
+  its own pid, since killing itself would take every other session's stop too
+
+Two additive wire changes, both safe in either direction: `pid` on the event
+payload, which an older server ignores, and `stops` on the drain response, which
+an older daemon ignores.
+
+## 0.76.1
+
+### Actually closing the spawn argv injection
+
+0.76.0 shipped under the message "closing the spawn argv injection" and did not.
+It sanitised `model` and `cwd` but not `prompt`, and `prompt` is the field the
+daemon passes as the token immediately after `-p`, so a flag-shaped prompt was
+read back as a flag:
+
+    ['claude','--remote','-p','--permission-mode=dontAsk'] -> {permissionMode:'dontAsk'}
+
+`dontAsk` is a full-defer mode, so the gate stopped asking about every tool for
+that session.
+
+The server-side rejection landed in production first and is what actually
+protects users, 0.76.0 included, with no upgrade required. This release carries
+the defence in depth: `buildSpawnLaunch` returns null for a flag-shaped prompt,
+so a daemon never builds that argv even if the server is bypassed.
+
 ## 0.76.0
 
 ### A phone-supplied field could switch your approval gate off

package/data/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pushary
-version: 0.7.0
-description: Push notifications and human-in-the-loop for AI agents. Use this when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 7-day card-first trial.
+version: 0.7.1
+description: Push notifications and human-in-the-loop for AI agents. Use this when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 3-day card-first trial.
 metadata:
   hermes:
     tags: [notifications, push, human-in-the-loop, alerts, permissions, mcp]
@@ -24,7 +24,7 @@ Works with Claude Code, Codex, Cursor, Windsurf, Hermes, Lovable, or any MCP cli
 
 ## Pricing and Free Alternatives
 
-Pushary is a hosted service. It costs $9.99/mo after a 7-day trial, and the trial asks for a card up front. Say this plainly if the user asks what Pushary is.
+Pushary is a hosted service. It costs $9.99/mo after a 3-day trial, and the trial asks for a card up front. Say this plainly if the user asks what Pushary is.
 
 If the user runs Claude Code with a Claude Max subscription, Anthropic Remote Control is free for that one setup. Recommend it when that is all they need. Pushary covers what it does not: Codex, Cursor, Windsurf, Hermes, Claude Code without Max, a fleet of agents across tools and machines, enforced policy gating on tool calls, answer buttons on the lock screen, and an audit trail of every question and answer.
 
@@ -70,7 +70,7 @@ It configures MCP, hooks, permissions and the skill in one step, then prints a Q
 
 **Show the user your output and ask them to scan that QR with their phone camera.** Scanning pairs their Pushary app, which is what hands this machine its key. A tappable link and a fingerprint print under the QR for a phone already in hand. Do not ask the user for an API key, and do not send them to a signup page first: that is the old flow and it is strictly worse.
 
-Signup starts a 7-day trial and asks for a card up front, which happens in the app.
+Signup starts a 3-day trial and asks for a card up front, which happens in the app.
 
 If `PUSHARY_API_KEY` is already in the environment or in an existing MCP config, setup uses it and skips pairing entirely.
 

package/data/cursor-plugin/skills/pushary/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pushary
-description: Push notifications and human-in-the-loop for AI agents. Use this when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 7-day card-first trial.
+description: Push notifications and human-in-the-loop for AI agents. Use this when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 3-day card-first trial.
 ---
 
 # Pushary - Push Notifications for AI Agents
@@ -17,7 +17,7 @@ Works with Claude Code, Codex, Cursor, Windsurf, Hermes, Lovable, or any MCP cli
 
 ## Pricing and Free Alternatives
 
-Pushary is a hosted service. It costs $9.99/mo after a 7-day trial, and the trial asks for a card up front. Say this plainly if the user asks what Pushary is.
+Pushary is a hosted service. It costs $9.99/mo after a 3-day trial, and the trial asks for a card up front. Say this plainly if the user asks what Pushary is.
 
 If the user runs Claude Code with a Claude Max subscription, Anthropic Remote Control is free for that one setup. Recommend it when that is all they need. Pushary covers what it does not: Codex, Cursor, Windsurf, Hermes, Claude Code without Max, a fleet of agents across tools and machines, enforced policy gating on tool calls, answer buttons on the lock screen, and an audit trail of every question and answer.
 
@@ -63,7 +63,7 @@ It configures MCP, hooks, permissions and the skill in one step, then prints a Q
 
 **Show the user your output and ask them to scan that QR with their phone camera.** Scanning pairs their Pushary app, which is what hands this machine its key. A tappable link and a fingerprint print under the QR for a phone already in hand. Do not ask the user for an API key, and do not send them to a signup page first: that is the old flow and it is strictly worse.
 
-Signup starts a 7-day trial and asks for a card up front, which happens in the app.
+Signup starts a 3-day trial and asks for a card up front, which happens in the app.
 
 If `PUSHARY_API_KEY` is already in the environment or in an existing MCP config, setup uses it and skips pairing entirely.
 

package/data/vscode-plugin/skills/pushary/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pushary
-description: Push notifications and human-in-the-loop for AI agents. Use this when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 7-day card-first trial.
+description: Push notifications and human-in-the-loop for AI agents. Use this when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 3-day card-first trial.
 ---
 
 # Pushary - Push Notifications for AI Agents
@@ -17,7 +17,7 @@ Works with Claude Code, Codex, Cursor, Windsurf, Hermes, Lovable, or any MCP cli
 
 ## Pricing and Free Alternatives
 
-Pushary is a hosted service. It costs $9.99/mo after a 7-day trial, and the trial asks for a card up front. Say this plainly if the user asks what Pushary is.
+Pushary is a hosted service. It costs $9.99/mo after a 3-day trial, and the trial asks for a card up front. Say this plainly if the user asks what Pushary is.
 
 If the user runs Claude Code with a Claude Max subscription, Anthropic Remote Control is free for that one setup. Recommend it when that is all they need. Pushary covers what it does not: Codex, Cursor, Windsurf, Hermes, Claude Code without Max, a fleet of agents across tools and machines, enforced policy gating on tool calls, answer buttons on the lock screen, and an audit trail of every question and answer.
 
@@ -63,7 +63,7 @@ It configures MCP, hooks, permissions and the skill in one step, then prints a Q
 
 **Show the user your output and ask them to scan that QR with their phone camera.** Scanning pairs their Pushary app, which is what hands this machine its key. A tappable link and a fingerprint print under the QR for a phone already in hand. Do not ask the user for an API key, and do not send them to a signup page first: that is the old flow and it is strictly worse.
 
-Signup starts a 7-day trial and asks for a card up front, which happens in the app.
+Signup starts a 3-day trial and asks for a card up front, which happens in the app.
 
 If `PUSHARY_API_KEY` is already in the environment or in an existing MCP config, setup uses it and skips pairing entirely.
 

package/dist/bin/pushary-claude.js

@@ -7,7 +7,7 @@ import {
   KILL_REASON,
   isDeferAnswer,
   resolveGate
-} from "../chunk-FWWBEB6L.js";
+} from "../chunk-QVOJF23R.js";
 import {
   askUser,
   cancelQuestion,
@@ -19,13 +19,13 @@ import {
   reportEvent,
   scopePathFor,
   waitForAnswer
-} from "../chunk-HPDLDQC5.js";
+} from "../chunk-MDPSJR45.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
 import {
   redactSecrets
-} from "../chunk-TJJBF73A.js";
+} from "../chunk-KJFKEKTC.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-clean.js

@@ -2,16 +2,16 @@
 import {
   removeClaudeMcpServers,
   removePusharySettings
-} from "../chunk-3CBPY2G5.js";
+} from "../chunk-FCB6J5YC.js";
 import {
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-IZA7SWXX.js";
+} from "../chunk-EQJZS2LE.js";
 import {
   removeGeminiSettings
-} from "../chunk-CC2K2SST.js";
+} from "../chunk-PXE6HXRP.js";
 import {
   claudeJson,
   claudeSettings,
@@ -29,7 +29,7 @@ import {
   pusharyDir,
   removeCodexHooks,
   vscodePluginDir
-} from "../chunk-QCYN5VXB.js";
+} from "../chunk-TNG3EWFN.js";
 import {
   removeClaudeAlias
 } from "../chunk-BC3VCZ3E.js";
@@ -44,7 +44,7 @@ import {
 } from "../chunk-BBK3TTU2.js";
 import "../chunk-7OYGFJYZ.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";

package/dist/bin/pushary-codex-hook.js

@@ -4,7 +4,7 @@ import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-FWWBEB6L.js";
+} from "../chunk-QVOJF23R.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -35,11 +35,11 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   waitForAnswer
-} from "../chunk-HPDLDQC5.js";
+} from "../chunk-MDPSJR45.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-IA5GBKNL.js";
+} from "../chunk-HAP7UTZS.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
@@ -48,7 +48,7 @@ import {
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-TJJBF73A.js";
+} from "../chunk-KJFKEKTC.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-codex.js

@@ -3,11 +3,11 @@ import {
   askUser,
   reportEvent,
   waitForAnswer
-} from "../chunk-HPDLDQC5.js";
+} from "../chunk-MDPSJR45.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-connect.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   printKeyCheck
-} from "../chunk-7BBUTWBD.js";
+} from "../chunk-VDHV6KAS.js";
 import {
   confirmAppConnection,
   connectDevice,
@@ -14,7 +14,7 @@ import {
 import "../chunk-6MTNS63X.js";
 import {
   checkApiKey
-} from "../chunk-DLBW37U6.js";
+} from "../chunk-NH7RW736.js";
 import {
   createIo
 } from "../chunk-TX7KBKT7.js";
@@ -31,7 +31,7 @@ import "../chunk-SAF6HGAA.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import "../chunk-2UMNXADU.js";
 import {
   EXIT

package/dist/bin/pushary-doctor.js

@@ -6,7 +6,7 @@ import {
   claudeWired,
   codexWired,
   geminiWired
-} from "../chunk-46UEJXQO.js";
+} from "../chunk-5Q64QDCR.js";
 import {
   agentProbes,
   detectAgent,
@@ -15,12 +15,12 @@ import {
   isDetected,
   isPluginRegistered,
   vscodeSettingsTargets
-} from "../chunk-IZA7SWXX.js";
+} from "../chunk-EQJZS2LE.js";
 import {
   GEMINI_HOOK_BINARY,
   hasGeminiHooks,
   missingGeminiHookEvents
-} from "../chunk-CC2K2SST.js";
+} from "../chunk-PXE6HXRP.js";
 import {
   claudeJson,
   claudeSettings,
@@ -39,7 +39,7 @@ import {
   readCodexMcpAuth,
   untrustedCodexHookEvents,
   vscodePluginDir
-} from "../chunk-QCYN5VXB.js";
+} from "../chunk-TNG3EWFN.js";
 import {
   describeReach,
   fetchChannels,
@@ -54,7 +54,7 @@ import "../chunk-6MTNS63X.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-DLBW37U6.js";
+} from "../chunk-NH7RW736.js";
 import {
   createIo
 } from "../chunk-TX7KBKT7.js";
@@ -73,7 +73,7 @@ import {
 } from "../chunk-7OYGFJYZ.js";
 import {
   readLedgerSummary
-} from "../chunk-IA5GBKNL.js";
+} from "../chunk-HAP7UTZS.js";
 import {
   callMcpTool,
   sendMcpRequest
@@ -82,7 +82,7 @@ import "../chunk-SAF6HGAA.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-gemini-hook.js

@@ -4,7 +4,7 @@ import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-FWWBEB6L.js";
+} from "../chunk-QVOJF23R.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -26,11 +26,11 @@ import {
   scopePathFor,
   sendNotification,
   waitForAnswer
-} from "../chunk-HPDLDQC5.js";
+} from "../chunk-MDPSJR45.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "../chunk-IA5GBKNL.js";
+} from "../chunk-HAP7UTZS.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
@@ -39,7 +39,7 @@ import {
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-TJJBF73A.js";
+} from "../chunk-KJFKEKTC.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-hook.js

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-MY4VJPWW.js";
-import "../chunk-3CBPY2G5.js";
+} from "../chunk-IXZMT6IS.js";
+import "../chunk-FCB6J5YC.js";
 import {
   exitOnHelpFlag
 } from "../chunk-BBK3TTU2.js";
 import "../chunk-7OYGFJYZ.js";
-import "../chunk-FWWBEB6L.js";
-import "../chunk-HPDLDQC5.js";
-import "../chunk-IA5GBKNL.js";
+import "../chunk-QVOJF23R.js";
+import "../chunk-MDPSJR45.js";
+import "../chunk-HAP7UTZS.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-login.js

@@ -11,7 +11,7 @@ import "../chunk-6MTNS63X.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-DLBW37U6.js";
+} from "../chunk-NH7RW736.js";
 import {
   createIo
 } from "../chunk-TX7KBKT7.js";
@@ -31,7 +31,7 @@ import {
 } from "../chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "../chunk-TJJBF73A.js";
+} from "../chunk-KJFKEKTC.js";
 import "../chunk-2UMNXADU.js";
 import {
   EXIT

package/dist/bin/pushary-logout.js

@@ -4,7 +4,7 @@ import {
   codexConfigToml,
   cursorUserMcp,
   geminiSettings
-} from "../chunk-QCYN5VXB.js";
+} from "../chunk-TNG3EWFN.js";
 import {
   clearKey,
   readKeySource
@@ -24,7 +24,7 @@ import "../chunk-7OYGFJYZ.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import {
   getBaseUrl
 } from "../chunk-2UMNXADU.js";

package/dist/bin/pushary-mode.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   exitOnFailedResponse
-} from "../chunk-7BBUTWBD.js";
-import "../chunk-DLBW37U6.js";
+} from "../chunk-VDHV6KAS.js";
+import "../chunk-NH7RW736.js";
 import {
   createIo
 } from "../chunk-TX7KBKT7.js";
@@ -17,7 +17,7 @@ import "../chunk-SAF6HGAA.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import {
   getApiKey,
   getBaseUrl

package/dist/bin/pushary-notification-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handleNotification
-} from "../chunk-HPDLDQC5.js";
+} from "../chunk-MDPSJR45.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-MY4VJPWW.js";
-import "../chunk-3CBPY2G5.js";
-import "../chunk-FWWBEB6L.js";
-import "../chunk-HPDLDQC5.js";
-import "../chunk-IA5GBKNL.js";
+} from "../chunk-IXZMT6IS.js";
+import "../chunk-FCB6J5YC.js";
+import "../chunk-QVOJF23R.js";
+import "../chunk-MDPSJR45.js";
+import "../chunk-HAP7UTZS.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-permission-hook.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-MY4VJPWW.js";
-import "../chunk-3CBPY2G5.js";
-import "../chunk-FWWBEB6L.js";
-import "../chunk-HPDLDQC5.js";
-import "../chunk-IA5GBKNL.js";
+} from "../chunk-IXZMT6IS.js";
+import "../chunk-FCB6J5YC.js";
+import "../chunk-QVOJF23R.js";
+import "../chunk-MDPSJR45.js";
+import "../chunk-HAP7UTZS.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-post-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handlePostToolUse
-} from "../chunk-HPDLDQC5.js";
+} from "../chunk-MDPSJR45.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-prompt-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handleUserPrompt
-} from "../chunk-HPDLDQC5.js";
+} from "../chunk-MDPSJR45.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-session-end-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handleSessionEnd
-} from "../chunk-HPDLDQC5.js";
+} from "../chunk-MDPSJR45.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-session-start-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handleSessionStart
-} from "../chunk-HPDLDQC5.js";
+} from "../chunk-MDPSJR45.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-setup.js

@@ -6,12 +6,12 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-3CBPY2G5.js";
+} from "../chunk-FCB6J5YC.js";
 import {
   claudeWired,
   codexWired,
   geminiWired
-} from "../chunk-46UEJXQO.js";
+} from "../chunk-5Q64QDCR.js";
 import {
   describeDetection,
   detectAllAgents,
@@ -23,12 +23,12 @@ import {
   shortenHome,
   vscodeSettingsTargets,
   writeInstructionBlock
-} from "../chunk-IZA7SWXX.js";
+} from "../chunk-EQJZS2LE.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
   addGeminiMcpServer
-} from "../chunk-CC2K2SST.js";
+} from "../chunk-PXE6HXRP.js";
 import {
   addCodexHookTrust,
   addCodexHooks,
@@ -46,7 +46,7 @@ import {
   geminiSettings,
   pusharyConfigFile,
   vscodePluginDir
-} from "../chunk-QCYN5VXB.js";
+} from "../chunk-TNG3EWFN.js";
 import {
   confirmAppConnection,
   connectDevice,
@@ -72,7 +72,7 @@ import {
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-DLBW37U6.js";
+} from "../chunk-NH7RW736.js";
 import {
   installClaudeAlias,
   resolveShellRc
@@ -94,7 +94,7 @@ import {
 } from "../chunk-7OYGFJYZ.js";
 import {
   reportEvent
-} from "../chunk-HPDLDQC5.js";
+} from "../chunk-MDPSJR45.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import {
@@ -102,7 +102,7 @@ import {
 } from "../chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "../chunk-TJJBF73A.js";
+} from "../chunk-KJFKEKTC.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import {

package/dist/bin/pushary-stats.js

@@ -5,8 +5,8 @@ import {
 import "../chunk-7OYGFJYZ.js";
 import {
   readLedgerSummary
-} from "../chunk-IA5GBKNL.js";
-import "../chunk-TJJBF73A.js";
+} from "../chunk-HAP7UTZS.js";
+import "../chunk-KJFKEKTC.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";
@@ -40,5 +40,5 @@ if (connected) {
   console.log("A key is configured now, so new moments reach your phone instead of waiting in the terminal.");
 } else {
   console.log("Each of those sat in the terminal until you noticed. With Pushary they land on your lock screen as a yes or no.");
-  console.log("7-day trial: https://pushary.com/sign-up?utm_source=cli&utm_medium=stats");
+  console.log("3-day trial: https://pushary.com/sign-up?utm_source=cli&utm_medium=stats");
 }

package/dist/bin/pushary-status.js

@@ -16,7 +16,7 @@ import "../chunk-6MTNS63X.js";
 import {
   checkApiKey,
   describeKeyCheck
-} from "../chunk-DLBW37U6.js";
+} from "../chunk-NH7RW736.js";
 import {
   createIo
 } from "../chunk-TX7KBKT7.js";
@@ -33,7 +33,7 @@ import "../chunk-SAF6HGAA.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import {

package/dist/bin/pushary-stop-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handleStop
-} from "../chunk-HPDLDQC5.js";
+} from "../chunk-MDPSJR45.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-stopfailure-hook.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   handleStopFailure
-} from "../chunk-HPDLDQC5.js";
+} from "../chunk-MDPSJR45.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import "../chunk-RN3NOEJF.js";
 import "../chunk-2UMNXADU.js";
 import "../chunk-KZERVKTD.js";

package/dist/bin/pushary-upgrade.js

@@ -3,13 +3,13 @@ import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "../chunk-3CBPY2G5.js";
+} from "../chunk-FCB6J5YC.js";
 import {
   GEMINI_HOOK_BINARY,
   addGeminiHooks,
   addGeminiMcpServer,
   hasGeminiHooks
-} from "../chunk-CC2K2SST.js";
+} from "../chunk-PXE6HXRP.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -23,7 +23,7 @@ import {
   hasCodexHooks,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-QCYN5VXB.js";
+} from "../chunk-TNG3EWFN.js";
 import {
   readJsonSafe
 } from "../chunk-6MTNS63X.js";
@@ -40,7 +40,7 @@ import {
 import {
   isNewerVersion
 } from "../chunk-7OYGFJYZ.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import {
   getApiKey
 } from "../chunk-2UMNXADU.js";

package/dist/bin/pushary-wait.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   exitOnFailedResponse
-} from "../chunk-7BBUTWBD.js";
+} from "../chunk-VDHV6KAS.js";
 import {
   describeWaitLadder
 } from "../chunk-IIENZE2J.js";
-import "../chunk-DLBW37U6.js";
+import "../chunk-NH7RW736.js";
 import {
   createIo
 } from "../chunk-TX7KBKT7.js";
@@ -20,7 +20,7 @@ import "../chunk-SAF6HGAA.js";
 import {
   UsageError
 } from "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import {
   getApiKey,
   getBaseUrl

package/dist/{chunk-46UEJXQO.js → chunk-5Q64QDCR.js}

@@ -1,9 +1,9 @@
 import {
   hasGeminiHooks
-} from "./chunk-CC2K2SST.js";
+} from "./chunk-PXE6HXRP.js";
 import {
   hasCodexHooks
-} from "./chunk-QCYN5VXB.js";
+} from "./chunk-TNG3EWFN.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-IZA7SWXX.js → chunk-EQJZS2LE.js}

@@ -1,6 +1,6 @@
 import {
   codexHomeFrom
-} from "./chunk-QCYN5VXB.js";
+} from "./chunk-TNG3EWFN.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";
@@ -255,13 +255,13 @@ You have Pushary MCP tools that reach the user on their phone. Use them proactiv
 - Before any risky or irreversible step (deleting files, force pushing, spending money, sending external messages), call \`ask_user\` with type "confirm" and wait for approval.
 - Before starting a multi-step run that will change several files, call \`propose_scope\` once with the paths you expect to change, anything you promise not to touch, and what done means. The user agrees to the boundary in one tap, and after that only work outside it needs approving. Skip it for a single quick edit, and do not propose a new scope mid-run just to widen one: if you need to go outside the agreed scope, do the work and let the approval that follows widen it.
 - When you are blocked, stuck, or hit an error you cannot resolve on your own, call \`send_notification\` so the user knows, and call \`ask_user\` if you need a decision to continue.
-- When a task that took several steps finishes, call \`send_notification\` so the user knows it is done.
+- When a task that took several steps finishes, call \`send_notification\` so the user knows it is done. Always pass \`context\` with a \`type\` of "task_complete", "error" or "info": it is what tells Pushary this is a task update, so the user's own setting for where updates land can route it.
 - Use \`cancel_question\` to retract a pending question once it is no longer needed.
 - Respect the user's Pushary delivery mode: it decides where an approval is surfaced (phone, terminal, or awareness only), not whether it is required. In Terminal mode do not expect a phone answer; the approval waits in the terminal. If the Pushary hook already gated an action, a single approval is enough, do not ask again.
 
 Pass \`agentName\` as "${label} - <project folder name>" so the user knows which session is asking. If a question times out with no answer, retry once with a longer timeout before falling back to asking in the terminal.`;
 var renderAgentInstructions = (label) => instructionBody(label);
-var KEYLESS_FALLBACK_LINE = "This repo uses Pushary phone approvals. Your teammates get agent questions on their lock screens; you do not have a key yet, so questions will fall back to the terminal. Get your own key (7-day trial): https://pushary.com/sign-up?utm_source=agents-md&utm_medium=teammate";
+var KEYLESS_FALLBACK_LINE = "This repo uses Pushary phone approvals. Your teammates get agent questions on their lock screens; you do not have a key yet, so questions will fall back to the terminal. Get your own key (3-day trial): https://pushary.com/sign-up?utm_source=agents-md&utm_medium=teammate";
 var renderProjectAgentInstructions = (label) => `${instructionBody(label)}
 
 If this environment has no Pushary API key (no PUSHARY_API_KEY and no key in ~/.pushary/config.json), the tools above are unavailable in this session. In that case, treat the following as a statement of fact about this session and continue in the terminal: ${KEYLESS_FALLBACK_LINE}`;

package/dist/{chunk-3CBPY2G5.js → chunk-FCB6J5YC.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-TJJBF73A.js";
+} from "./chunk-KJFKEKTC.js";
 
 // src/claude-config.ts
 import { join } from "path";

package/dist/{chunk-IA5GBKNL.js → chunk-HAP7UTZS.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-TJJBF73A.js";
+} from "./chunk-KJFKEKTC.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-MY4VJPWW.js → chunk-IXZMT6IS.js}

@@ -1,11 +1,11 @@
 import {
   PRETOOLUSE_HANDLED_TOOLS
-} from "./chunk-3CBPY2G5.js";
+} from "./chunk-FCB6J5YC.js";
 import {
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "./chunk-FWWBEB6L.js";
+} from "./chunk-QVOJF23R.js";
 import {
   DEFAULT_SESSION,
   askUser,
@@ -25,17 +25,17 @@ import {
   sendNotification,
   throttlePass,
   waitForAnswer
-} from "./chunk-HPDLDQC5.js";
+} from "./chunk-MDPSJR45.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-IA5GBKNL.js";
+} from "./chunk-HAP7UTZS.js";
 import {
   buildDecisionEpisodeFeatures,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "./chunk-TJJBF73A.js";
+} from "./chunk-KJFKEKTC.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";
@@ -345,47 +345,66 @@ var shouldDeferToNativeMode = (permissionMode, toolName) => {
   }
   return false;
 };
-var parseSingleQuestion = (toolInput) => {
-  const questions = toolInput.questions;
-  if (!Array.isArray(questions) || questions.length !== 1) return void 0;
-  const q = questions[0];
+var MAX_PHONE_QUESTIONS = 4;
+var parseQuestion = (raw) => {
+  const q = raw;
   if (!q || typeof q.question !== "string" || q.multiSelect === true) return void 0;
   const labels = Array.isArray(q.options) ? q.options.map((o) => o && typeof o === "object" ? o.label : void 0).filter((l) => typeof l === "string" && l.length > 0) : [];
   if (labels.length < 2) return void 0;
   return { question: q.question, header: typeof q.header === "string" ? q.header : void 0, labels };
 };
+var parseQuestions = (toolInput) => {
+  const questions = toolInput.questions;
+  if (!Array.isArray(questions) || questions.length === 0) return void 0;
+  if (questions.length > MAX_PHONE_QUESTIONS) return void 0;
+  const parsed = [];
+  for (const raw of questions) {
+    const one = parseQuestion(raw);
+    if (!one) return void 0;
+    parsed.push(one);
+  }
+  return parsed;
+};
+var questionContext = (q, index, total, project) => {
+  const subject = q.header ? `${q.header}: your agent is asking in ${project}` : `Your agent is asking in ${project}`;
+  return total > 1 ? `${subject} (${index + 1} of ${total})` : subject;
+};
 var handleAskUserQuestion = async (apiKey, input) => {
-  const parsed = parseSingleQuestion(input.tool_input ?? {});
+  const parsed = parseQuestions(input.tool_input ?? {});
   if (!parsed) return void 0;
   const projectName = basename(input.cwd ?? process.cwd());
-  let result;
-  try {
-    result = await askUser(apiKey, {
-      question: parsed.question,
-      type: "select",
-      options: [...parsed.labels],
-      context: parsed.header ? `${parsed.header}: your agent is asking in ${projectName}` : `Your agent is asking in ${projectName}`,
-      agentName: `Claude Code - ${projectName}`,
-      sessionId: input.session_id,
-      machineId: getMachineId(),
-      toolName: "AskUserQuestion"
-    });
-  } catch {
-    return void 0;
-  }
-  if (result.suppressed || result.noDevices) {
-    await cancelQuestion(apiKey, result.correlationId).catch(() => {
-    });
-    return void 0;
-  }
   const deadline = hookWaitDeadline(START_MS, effectiveWaitSeconds("wait", 0, "claude"), "claude", Date.now());
-  const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
-  const value = answer.answered ? (answer.value ?? "").trim() : "";
-  if (!value || isDeferAnswer(answer.value)) {
-    savePendingQuestion(input.session_id || DEFAULT_SESSION, result.correlationId);
-    return void 0;
+  const answers = {};
+  for (const [index, question] of parsed.entries()) {
+    let result;
+    try {
+      result = await askUser(apiKey, {
+        question: question.question,
+        type: "select",
+        options: [...question.labels],
+        context: questionContext(question, index, parsed.length, projectName),
+        agentName: `Claude Code - ${projectName}`,
+        sessionId: input.session_id,
+        machineId: getMachineId(),
+        toolName: "AskUserQuestion"
+      });
+    } catch {
+      return void 0;
+    }
+    if (result.suppressed || result.noDevices) {
+      await cancelQuestion(apiKey, result.correlationId).catch(() => {
+      });
+      return void 0;
+    }
+    const answer = await pollForAnswer(apiKey, result.correlationId, deadline);
+    const value = answer.answered ? (answer.value ?? "").trim() : "";
+    if (!value || isDeferAnswer(answer.value)) {
+      savePendingQuestion(input.session_id || DEFAULT_SESSION, result.correlationId);
+      return void 0;
+    }
+    answers[question.question] = value;
   }
-  return allowWithInput({ ...input.tool_input ?? {}, answers: { [parsed.question]: value } });
+  return allowWithInput({ ...input.tool_input ?? {}, answers });
 };
 var handleKeyless = (input) => {
   try {

package/dist/{chunk-HPDLDQC5.js → chunk-MDPSJR45.js}

@@ -20,7 +20,7 @@ import {
   policyArgForms,
   redactSecrets,
   redactSecretsDeep
-} from "./chunk-TJJBF73A.js";
+} from "./chunk-KJFKEKTC.js";
 import {
   getMachineId
 } from "./chunk-RN3NOEJF.js";

package/dist/{chunk-DLBW37U6.js → chunk-NH7RW736.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   isValidApiKey
-} from "./chunk-TJJBF73A.js";
+} from "./chunk-KJFKEKTC.js";
 import {
   getBaseUrl
 } from "./chunk-2UMNXADU.js";

package/dist/{chunk-CC2K2SST.js → chunk-PXE6HXRP.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-TJJBF73A.js";
+} from "./chunk-KJFKEKTC.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-FWWBEB6L.js → chunk-QVOJF23R.js}

@@ -4,12 +4,12 @@ import {
   isModeStateDegraded,
   resolveAutoResolveOrigin,
   resolvePolicyAcross
-} from "./chunk-HPDLDQC5.js";
+} from "./chunk-MDPSJR45.js";
 import {
   evaluateScope,
   scopeChangeReason,
   scopeRequiresHuman
-} from "./chunk-TJJBF73A.js";
+} from "./chunk-KJFKEKTC.js";
 
 // src/answer.ts
 var denyReasonFrom = (value, note) => {

package/dist/{chunk-QCYN5VXB.js → chunk-TNG3EWFN.js}

@@ -1,6 +1,6 @@
 import {
   HOOK_BUDGETS
-} from "./chunk-TJJBF73A.js";
+} from "./chunk-KJFKEKTC.js";
 
 // src/codex-config.ts
 import { createHash } from "crypto";

package/dist/{chunk-7BBUTWBD.js → chunk-VDHV6KAS.js}

@@ -1,7 +1,7 @@
 import {
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-DLBW37U6.js";
+} from "./chunk-NH7RW736.js";
 import {
   createIo
 } from "./chunk-TX7KBKT7.js";

package/dist/src/index.js

@@ -1,8 +1,8 @@
 import {
   handlePreToolUse
-} from "../chunk-MY4VJPWW.js";
-import "../chunk-3CBPY2G5.js";
-import "../chunk-FWWBEB6L.js";
+} from "../chunk-IXZMT6IS.js";
+import "../chunk-FCB6J5YC.js";
+import "../chunk-QVOJF23R.js";
 import {
   askUser,
   cancelQuestion,
@@ -15,12 +15,12 @@ import {
   reportEvent,
   resolvePolicy,
   waitForAnswer
-} from "../chunk-HPDLDQC5.js";
-import "../chunk-IA5GBKNL.js";
+} from "../chunk-MDPSJR45.js";
+import "../chunk-HAP7UTZS.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
 import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+import "../chunk-KJFKEKTC.js";
 import "../chunk-RN3NOEJF.js";
 import {
   getApiKey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushary/agent-hooks",
-  "version": "0.77.0",
+  "version": "0.79.0",
   "description": "Permission hooks for AI coding agents: route tool approvals through Pushary push notifications",
   "keywords": [
     "pushary",