pushary 1.9.105 → 1.9.107

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 1.9.107
+
+- On Windows, the hook now reads Claude Code's managed settings from `C:\Program Files\ClaudeCode\managed-settings.json`, where Claude Code reads them. It read `C:\ProgramData\ClaudeCode\managed-settings.json`, which Claude Code no longer reads, so an organization's managed allow, ask and deny rules were missing when Pushary checked whether Claude Code's own rules already cover a tool call, and from the hook wiring report. macOS and Linux are unchanged. Nothing else in the CLI or the hooks changed.
+
+## 1.9.106
+
+- The test approval at the end of `pushary setup`, and the one `pushary doctor` sends, now wait the full 55 seconds for your tap. Since the server began ending each wait after at most 48 seconds, so that agents' tool calls stay inside their hosts' time limits, the check made one wait, read the early "still pending" as nobody answering, and cancelled the question on your phone. A tap between 48 and 55 seconds was reported as "nothing came back". The check now keeps waiting while the question is pending, up to its own 55 second window, and still cancels the question if nobody answers in time. Pressing Ctrl-C while it waits stops the waiting at once. The bundled Pushary skill now says one call waits at most 48 seconds. Nothing else in the CLI or the hooks changed.
+
 ## 1.9.105
 
 - The background daemon now reports, on the heartbeat it already sends each minute, whether Pushary's hooks are still in place for each agent on the computer: wired, untrusted, weakened, missing, unreadable or disconnected. A hook counts only when it really runs Pushary's own binary for that event. Each agent is named with a short hash of the computer's id and its config file's path, never the path itself. If building the report fails, the heartbeat goes out without it, as before. Nothing else in the CLI or the hooks changed.

package/data/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pushary
-version: 0.13.1
+version: 0.13.2
 description: Push notifications and human-in-the-loop for AI agents. Use this whenever a running agent needs a person who may not be at the terminal, such as before an irreversible or destructive action, before spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, when running unattended and you hit a genuine ambiguity, when another skill's workflow says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, or do not wait for me, or wants a long task to run unattended. Ask yes/no, multiple choice or free-text questions on their phone and get the answer back, and send an update when a task finishes or fails. Use these tools proactively, without waiting to be asked. Every question and answer is recorded, so an unattended run stays reviewable afterwards. Works with Claude Code, Codex, Cursor, VS Code, Gemini CLI, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted, paid service; web and native store checkout have different price and trial terms.
 metadata:
   hermes:
@@ -200,7 +200,7 @@ Your client already holds each tool's schema, with every parameter and returned
 
 ### ask_user
 
-Asks a question and waits. Use `confirm` for yes or no, `select` for 2 to 6 known options, and `input` when the options cannot be listed. A question stays open until it is answered or cancelled, except one asked through a connector, by signing in or with a connector key, which closes 10 minutes after it is sent: Claude.ai, Claude Desktop, Cowork, ChatGPT, Grok Bot, signed-in Cline, and the Pushary for Claude and Pushary for Cowork plugins. One call waits at most 55 seconds and may return at once. The user's delivery mode decides how long:
+Asks a question and waits. Use `confirm` for yes or no, `select` for 2 to 6 known options, and `input` when the options cannot be listed. A question stays open until it is answered or cancelled, except one asked through a connector, by signing in or with a connector key, which closes 10 minutes after it is sent: Claude.ai, Claude Desktop, Cowork, ChatGPT, Grok Bot, signed-in Cline, and the Pushary for Claude and Pushary for Cowork plugins. One call waits at most 48 seconds and may return at once. The user's delivery mode decides how long:
 
 | Mode | The phone | The call |
 |---|---|---|
@@ -265,7 +265,7 @@ Ask with `ask_user`, not with `context.askQuestion`. That field remains for olde
 
 ### wait_for_answer
 
-Waits up to 55 seconds for the answer to a question that is still pending. Keep calling it with the same `correlationId` while the status is `pending`.
+Waits up to 48 seconds for the answer to a question that is still pending. Keep calling it with the same `correlationId` while the status is `pending`.
 
 ### cancel_question
 

package/data/cursor-plugin/skills/pushary/SKILL.md

@@ -193,7 +193,7 @@ Your client already holds each tool's schema, with every parameter and returned
 
 ### ask_user
 
-Asks a question and waits. Use `confirm` for yes or no, `select` for 2 to 6 known options, and `input` when the options cannot be listed. A question stays open until it is answered or cancelled, except one asked through a connector, by signing in or with a connector key, which closes 10 minutes after it is sent: Claude.ai, Claude Desktop, Cowork, ChatGPT, Grok Bot, signed-in Cline, and the Pushary for Claude and Pushary for Cowork plugins. One call waits at most 55 seconds and may return at once. The user's delivery mode decides how long:
+Asks a question and waits. Use `confirm` for yes or no, `select` for 2 to 6 known options, and `input` when the options cannot be listed. A question stays open until it is answered or cancelled, except one asked through a connector, by signing in or with a connector key, which closes 10 minutes after it is sent: Claude.ai, Claude Desktop, Cowork, ChatGPT, Grok Bot, signed-in Cline, and the Pushary for Claude and Pushary for Cowork plugins. One call waits at most 48 seconds and may return at once. The user's delivery mode decides how long:
 
 | Mode | The phone | The call |
 |---|---|---|
@@ -258,7 +258,7 @@ Ask with `ask_user`, not with `context.askQuestion`. That field remains for olde
 
 ### wait_for_answer
 
-Waits up to 55 seconds for the answer to a question that is still pending. Keep calling it with the same `correlationId` while the status is `pending`.
+Waits up to 48 seconds for the answer to a question that is still pending. Keep calling it with the same `correlationId` while the status is `pending`.
 
 ### cancel_question
 

package/data/vscode-plugin/skills/pushary/SKILL.md

@@ -193,7 +193,7 @@ Your client already holds each tool's schema, with every parameter and returned
 
 ### ask_user
 
-Asks a question and waits. Use `confirm` for yes or no, `select` for 2 to 6 known options, and `input` when the options cannot be listed. A question stays open until it is answered or cancelled, except one asked through a connector, by signing in or with a connector key, which closes 10 minutes after it is sent: Claude.ai, Claude Desktop, Cowork, ChatGPT, Grok Bot, signed-in Cline, and the Pushary for Claude and Pushary for Cowork plugins. One call waits at most 55 seconds and may return at once. The user's delivery mode decides how long:
+Asks a question and waits. Use `confirm` for yes or no, `select` for 2 to 6 known options, and `input` when the options cannot be listed. A question stays open until it is answered or cancelled, except one asked through a connector, by signing in or with a connector key, which closes 10 minutes after it is sent: Claude.ai, Claude Desktop, Cowork, ChatGPT, Grok Bot, signed-in Cline, and the Pushary for Claude and Pushary for Cowork plugins. One call waits at most 48 seconds and may return at once. The user's delivery mode decides how long:
 
 | Mode | The phone | The call |
 |---|---|---|
@@ -258,7 +258,7 @@ Ask with `ask_user`, not with `context.askQuestion`. That field remains for olde
 
 ### wait_for_answer
 
-Waits up to 55 seconds for the answer to a question that is still pending. Keep calling it with the same `correlationId` while the status is `pending`.
+Waits up to 48 seconds for the answer to a question that is still pending. Keep calling it with the same `correlationId` while the status is `pending`.
 
 ### cancel_question
 

package/dist/bin/pushary-connect.js

@@ -6,9 +6,9 @@ import {
   connectDevice,
   connectExistingApp,
   printConnectInstructions
-} from "../chunk-WTREXZGS.js";
+} from "../chunk-ZB2WNJXZ.js";
 import "../chunk-3EGEA4KH.js";
-import "../chunk-X4TZN52V.js";
+import "../chunk-VK4PPVWB.js";
 import "../chunk-772NHSQB.js";
 import {
   CONNECTED_THROUGH_MAC_APP,

package/dist/bin/pushary-daemon.js

@@ -4,7 +4,7 @@ import {
 } from "../chunk-P3H6I656.js";
 import {
   MANAGED_CLAUDE_SETTINGS_BY_PLATFORM
-} from "../chunk-WUIWHGKF.js";
+} from "../chunk-LIPMEFRA.js";
 import {
   declinedAgentsFile,
   readDeclinedAgents

package/dist/bin/pushary-doctor.js

@@ -21,7 +21,7 @@ import {
 } from "../chunk-6DKMZBRK.js";
 import {
   fetchChannels
-} from "../chunk-WTREXZGS.js";
+} from "../chunk-ZB2WNJXZ.js";
 import "../chunk-3EGEA4KH.js";
 import {
   describeAnswerTestPrompt,
@@ -31,7 +31,7 @@ import {
   reachVerdict,
   roundTripEvidence,
   verifyRoundTrip
-} from "../chunk-X4TZN52V.js";
+} from "../chunk-VK4PPVWB.js";
 import {
   readMachineReadiness,
   readManagedControlEvidence

package/dist/bin/pushary-hook.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   handlePreToolUse
-} from "../chunk-MLLL2ET6.js";
-import "../chunk-WUIWHGKF.js";
+} from "../chunk-2BILLNZ4.js";
+import "../chunk-LIPMEFRA.js";
 import {
   exitOnHelpFlag
 } from "../chunk-B5Q44HKN.js";

package/dist/bin/pushary-login.js

@@ -6,14 +6,14 @@ import {
 } from "../chunk-4EMPELDR.js";
 import {
   TRANSCRIPT_SYNC_NOTICE
-} from "../chunk-QCFWJZGT.js";
+} from "../chunk-4OUPD4KA.js";
 import "../chunk-PUZZELE6.js";
 import {
   writeJsonError,
   writeStdoutFully
 } from "../chunk-6DKMZBRK.js";
 import "../chunk-3EGEA4KH.js";
-import "../chunk-X4TZN52V.js";
+import "../chunk-VK4PPVWB.js";
 import "../chunk-2HC5ISDW.js";
 import "../chunk-FJYUB3ZK.js";
 import {

package/dist/bin/pushary-permission-denied-hook.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   handlePermissionDenied
-} from "../chunk-MLLL2ET6.js";
-import "../chunk-WUIWHGKF.js";
+} from "../chunk-2BILLNZ4.js";
+import "../chunk-LIPMEFRA.js";
 import {
   takeHookHoldBudget
 } from "../chunk-XN527J4W.js";

package/dist/bin/pushary-permission-hook.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   handlePermissionRequest
-} from "../chunk-MLLL2ET6.js";
-import "../chunk-WUIWHGKF.js";
+} from "../chunk-2BILLNZ4.js";
+import "../chunk-LIPMEFRA.js";
 import {
   takeHookHoldBudget
 } from "../chunk-XN527J4W.js";

package/dist/bin/pushary-setup.js

@@ -35,7 +35,7 @@ import {
   phoneStartServiceState,
   renderCommandSurface,
   unverifiedKeyClosingReason
-} from "../chunk-QCFWJZGT.js";
+} from "../chunk-4OUPD4KA.js";
 import {
   coworkOutput,
   coworkSelection
@@ -73,7 +73,7 @@ import {
   pairingEscapeApplies,
   printConnectInstructions,
   waitForYourPhone
-} from "../chunk-WTREXZGS.js";
+} from "../chunk-ZB2WNJXZ.js";
 import "../chunk-3EGEA4KH.js";
 import {
   SETUP_AGENT_NAME,
@@ -82,7 +82,7 @@ import {
   roundTripEvidence,
   roundTripWasAnswered,
   verifyRoundTrip
-} from "../chunk-X4TZN52V.js";
+} from "../chunk-VK4PPVWB.js";
 import {
   readManagedControlEvidence,
   waitForMachineReadiness

package/dist/bin/pushary-status.js

@@ -4,12 +4,12 @@ import {
 } from "../chunk-6DKMZBRK.js";
 import {
   fetchChannels
-} from "../chunk-WTREXZGS.js";
+} from "../chunk-ZB2WNJXZ.js";
 import "../chunk-3EGEA4KH.js";
 import {
   describeReach,
   reachVerdict
-} from "../chunk-X4TZN52V.js";
+} from "../chunk-VK4PPVWB.js";
 import {
   describeLastSeen,
   listMachines

package/dist/bin/pushary-transcripts.js

@@ -4,8 +4,8 @@ import {
 } from "../chunk-P3VVRBBI.js";
 import {
   TRANSCRIPT_SYNC_NOTICE
-} from "../chunk-QCFWJZGT.js";
-import "../chunk-X4TZN52V.js";
+} from "../chunk-4OUPD4KA.js";
+import "../chunk-VK4PPVWB.js";
 import "../chunk-2HC5ISDW.js";
 import "../chunk-FJYUB3ZK.js";
 import {

package/dist/bin/pushary-upgrade.js

@@ -24,7 +24,7 @@ import {
 } from "../chunk-VCWLGM77.js";
 import {
   phoneStartFellShortLine
-} from "../chunk-QCFWJZGT.js";
+} from "../chunk-4OUPD4KA.js";
 import {
   ensureCodexTrustAfterReapply,
   reapplyAllAgents
@@ -33,7 +33,7 @@ import {
   HERMES_RESTART_COMMAND,
   describeCodexTrustConfirmation
 } from "../chunk-TXMYET7E.js";
-import "../chunk-X4TZN52V.js";
+import "../chunk-VK4PPVWB.js";
 import {
   waitForMachineReadiness
 } from "../chunk-J5PUKKCT.js";

package/dist/{chunk-MLLL2ET6.js → chunk-2BILLNZ4.js}

@@ -1,7 +1,7 @@
 import {
   claudeSettingsLocationFor,
   readClaudePermissionRules
-} from "./chunk-WUIWHGKF.js";
+} from "./chunk-LIPMEFRA.js";
 import {
   askAgentQuestions,
   defersToNativeMode,

package/dist/{chunk-QCFWJZGT.js → chunk-4OUPD4KA.js}

@@ -1,6 +1,6 @@
 import {
   notificationAnswerStep
-} from "./chunk-X4TZN52V.js";
+} from "./chunk-VK4PPVWB.js";
 import {
   canChangeApprovalSettings
 } from "./chunk-2HC5ISDW.js";

package/dist/{chunk-WUIWHGKF.js → chunk-LIPMEFRA.js}

@@ -12,7 +12,7 @@ import { join } from "path";
 var MANAGED_CLAUDE_SETTINGS_BY_PLATFORM = {
   darwin: "/Library/Application Support/ClaudeCode/managed-settings.json",
   linux: "/etc/claude-code/managed-settings.json",
-  win32: "C:\\ProgramData\\ClaudeCode\\managed-settings.json"
+  win32: "C:\\Program Files\\ClaudeCode\\managed-settings.json"
 };
 var MAX_CLAUDE_SETTINGS_BYTES = 1048576;
 var claudeSettingsLocationFor = (cwd, environment = process.env, home = homedir(), platform = process.platform) => ({

package/dist/{chunk-X4TZN52V.js → chunk-VK4PPVWB.js}

@@ -187,10 +187,24 @@ var defaultAsk = (apiKey, agentName) => (
   // reporting "unanswered" after three seconds would be a lie about the product.
   callMcpTool(apiKey, "ask_user", roundTripAsk(agentName), { timeoutMs: 15e3 })
 );
-var defaultWait = (apiKey, correlationId) => callMcpTool(apiKey, "wait_for_answer", {
+var ROUND_TRIP_WAIT_REQUEST_SLACK_MS = 5e3;
+var ROUND_TRIP_MIN_WAIT_MS = 1e3;
+var ROUND_TRIP_MAX_WAITS = 4;
+var defaultWait = (apiKey, correlationId, timeoutMs) => callMcpTool(apiKey, "wait_for_answer", {
   correlationId,
-  timeoutMs: ROUND_TRIP_TIMEOUT_MS
-}, { timeoutMs: ROUND_TRIP_TIMEOUT_MS + 5e3 });
+  timeoutMs
+}, { timeoutMs: timeoutMs + ROUND_TRIP_WAIT_REQUEST_SLACK_MS });
+var isStillPending = (answer) => answer.answered !== true && answer.status === "pending";
+var waitUntilDeadline = async (wait, apiKey, correlationId, deadline, now, interruptRequested) => {
+  let answer = { answered: false, status: "pending" };
+  for (let attempt = 0; attempt < ROUND_TRIP_MAX_WAITS; attempt++) {
+    const remaining = deadline - now();
+    if (interruptRequested() || remaining < ROUND_TRIP_MIN_WAIT_MS) return answer;
+    answer = await wait(apiKey, correlationId, remaining);
+    if (!isStillPending(answer)) return answer;
+  }
+  return answer;
+};
 var defaultCancel = async (apiKey, correlationId) => {
   await callMcpTool(apiKey, "cancel_question", { correlationId }, { timeoutMs: 1e4 }).catch(() => {
   });
@@ -257,7 +271,7 @@ var verifyRoundTrip = async (apiKey, agentName = SETUP_AGENT_NAME, deps = {}) =>
     if (asked.noDevices || asked.warning) return { kind: "no-recipients" };
     if (asked.mode === "notify_only" || asked.status === "notified") return { kind: "notify-only" };
     if (!asked.correlationId) return { kind: "error", detail: "no correlationId returned" };
-    const answer = asked.answered === true ? asked : await wait(apiKey, asked.correlationId);
+    const answer = asked.answered === true ? asked : await waitUntilDeadline(wait, apiKey, asked.correlationId, now() + ROUND_TRIP_TIMEOUT_MS, now, () => shutdown !== void 0);
     if (answer.answered === true) {
       const outcome = answeredRoundTrip(answer, asked.correlationId, now() - started);
       answerObserved = outcome.kind === "answered";

package/dist/{chunk-WTREXZGS.js → chunk-ZB2WNJXZ.js}

@@ -12,7 +12,7 @@ import {
   reachVerdict,
   reachesYou,
   verifyDelivery
-} from "./chunk-X4TZN52V.js";
+} from "./chunk-VK4PPVWB.js";
 import {
   humanIsTty,
   writeHuman

package/dist/src/index.js

@@ -1,7 +1,7 @@
 import {
   handlePreToolUse
-} from "../chunk-MLLL2ET6.js";
-import "../chunk-WUIWHGKF.js";
+} from "../chunk-2BILLNZ4.js";
+import "../chunk-LIPMEFRA.js";
 import "../chunk-J2HIFUAT.js";
 import "../chunk-FUTFQSRA.js";
 import "../chunk-RKQVMFHN.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pushary",
-  "version": "1.9.105",
+  "version": "1.9.107",
   "description": "Human-in-the-loop (HITL) for AI agents: ask a person for approvals or answers by push notification. One command connects Claude Code, Codex, Cursor, Gemini CLI and more.",
   "keywords": [
     "pushary",