@pushary/agent-hooks 1.9.42 → 1.9.44

package/dist/{chunk-ZJY4KON3.js → chunk-KILK6SWZ.js}

@@ -12,21 +12,21 @@ import {
   terminalColumns,
   useColor
 } from "./chunk-FO3MDD26.js";
-import {
-  callMcpTool
-} from "./chunk-AW4TDBUJ.js";
 import {
   reportedInstallSource
-} from "./chunk-ODPULZZG.js";
+} from "./chunk-M2L7625S.js";
+import {
+  callMcpTool
+} from "./chunk-53UZN7JW.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-DIJ532S7.js";
+} from "./chunk-T3KMJI4W.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS,
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-ORLTWJ2O.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {
@@ -972,7 +972,7 @@ var watchSkip = (listener) => {
   });
   return { skipped: () => skipped, woken, stop };
 };
-var PHONE_WAIT_REPAIR_LINE = `Open the Pushary app, sign in with the same account, and allow notifications. Then run ${NPX_LATEST_COMMAND} doctor.`;
+var PHONE_WAIT_REPAIR_LINE = `Open the Pushary app, sign in with the same account, and allow notifications. Then run ${NPX_LATEST_COMMAND} doctor --roundtrip. Your agent configuration is saved; no reinstall is needed.`;
 var phoneWaitRepair = (verdict) => verdict.kind === "nobody" ? [PHONE_WAIT_REPAIR_LINE] : describeAppRepair(verdict) ?? [];
 var pollForYourPhone = async (apiKey, firstSeen, options) => {
   const clock = options.clock ?? SYSTEM_PAIR_CLOCK;

package/dist/{chunk-J7OBJZ5S.js → chunk-KYLY6UMN.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-ORLTWJ2O.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-T3Q4B6WV.js → chunk-L2ZM7LXN.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-EBZK2SJ2.js";
+} from "./chunk-4JHEZ2PV.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-ORLTWJ2O.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;

package/dist/{chunk-PJ3C6IID.js → chunk-LEHBWBCG.js}

@@ -1,18 +1,18 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-FP2ZJK3T.js";
+} from "./chunk-UZVF6MP2.js";
 import {
   keyPrefix
-} from "./chunk-M7VKFAAK.js";
+} from "./chunk-TJZUQRMH.js";
 import {
   bridgeAgentKey
-} from "./chunk-EBZK2SJ2.js";
+} from "./chunk-4JHEZ2PV.js";
 import {
   readJsonSafe
 } from "./chunk-AQFEP65J.js";
 import {
   isValidApiKey
-} from "./chunk-ORLTWJ2O.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-ODPULZZG.js → chunk-M2L7625S.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-CHD6IUNM.js";
+} from "./chunk-OWQOMGBF.js";
 import {
   normalizeInstallSource
-} from "./chunk-ORLTWJ2O.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-BDSIE2MT.js → chunk-MIBCRQWK.js}

@@ -1,9 +1,9 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-Z4RM54LU.js";
+} from "./chunk-E76QCZIA.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-DIJ532S7.js";
+} from "./chunk-T3KMJI4W.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-MAB6CGL5.js → chunk-MRQJCIFO.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-CHD6IUNM.js";
+} from "./chunk-OWQOMGBF.js";
 
 // src/transcript-api.ts
 var fetchTranscriptRecipients = async (apiKey, baseUrl = getBaseUrl()) => {

package/dist/{chunk-F43LAKAK.js → chunk-OR6KJOHE.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-DIJ532S7.js";
+} from "./chunk-T3KMJI4W.js";
 import {
   getPackageVersion
-} from "./chunk-ORLTWJ2O.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-Y3HTWB5S.js → chunk-OSMNLNPF.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-EBZK2SJ2.js";
+} from "./chunk-4JHEZ2PV.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-CHD6IUNM.js → chunk-OWQOMGBF.js}

@@ -1,6 +1,6 @@
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-DIJ532S7.js";
+} from "./chunk-T3KMJI4W.js";
 
 // src/config.ts
 import { readFileSync } from "fs";

package/dist/{chunk-RTM5GVRZ.js → chunk-OZ7MLVDM.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-DWQYCOPI.js";
 import {
   ensureDaemonRunning
-} from "./chunk-STETTN4K.js";
+} from "./chunk-W2TA4EVZ.js";
+import {
+  hookOwnerOf
+} from "./chunk-T4CKP47U.js";
+import {
+  transcriptEnvironmentPreference,
+  transcriptsEnabled
+} from "./chunk-WBD7HZEZ.js";
+import {
+  readTranscriptPreference
+} from "./chunk-TJZUQRMH.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-X7TNLYNZ.js";
+} from "./chunk-75M7NFFC.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-MAB6CGL5.js";
-import {
-  transcriptEnvironmentPreference,
-  transcriptsEnabled
-} from "./chunk-QRNNIDGY.js";
-import {
-  hookOwnerOf
-} from "./chunk-NRSTNZYJ.js";
-import {
-  readTranscriptPreference
-} from "./chunk-M7VKFAAK.js";
+} from "./chunk-MRQJCIFO.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-EBZK2SJ2.js";
+} from "./chunk-4JHEZ2PV.js";
 import {
   writeJsonAtomic
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-CHD6IUNM.js";
+} from "./chunk-OWQOMGBF.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-4WM7IVVQ.js → chunk-PGHN5D4N.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-EBZK2SJ2.js";
+} from "./chunk-4JHEZ2PV.js";
 import {
   readJsonSafe
 } from "./chunk-AQFEP65J.js";
 import {
   isRecord
-} from "./chunk-ORLTWJ2O.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-OLLWYLQX.js → chunk-PQAFH4DF.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-X7TNLYNZ.js";
+} from "./chunk-75M7NFFC.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-MAB6CGL5.js";
+} from "./chunk-MRQJCIFO.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;
@@ -24,19 +24,11 @@ var liveSessionSleep = (ms, signal) => new Promise((resolve) => {
   signal.addEventListener("abort", done, { once: true });
 });
 var postLiveSession = (options, path, body) => {
-  const controller = new AbortController();
-  const abort = () => controller.abort();
-  const timeout = setTimeout(abort, options.requestTimeoutMs ?? 1e4);
-  if (options.signal.aborted) abort();
-  else options.signal.addEventListener("abort", abort, { once: true });
   return fetch(`${options.baseUrl}${path}`, {
     method: "POST",
     headers: { Authorization: `Bearer ${options.apiKey}`, "Content-Type": "application/json" },
     body: JSON.stringify(body),
-    signal: controller.signal
-  }).finally(() => {
-    clearTimeout(timeout);
-    options.signal.removeEventListener("abort", abort);
+    signal: AbortSignal.any([options.signal, AbortSignal.timeout(options.requestTimeoutMs ?? 1e4)])
   });
 };
 var postLiveSessionUntilAccepted = async (options, path, body) => {

package/dist/{chunk-E47JEBUR.js → chunk-RGBTKOCC.js}

@@ -1,13 +1,14 @@
 import {
   MCP_BRIDGE_BINARY
-} from "./chunk-RETRVO47.js";
+} from "./chunk-TWATOPHK.js";
 import {
   KEY_FILE_MODE
-} from "./chunk-M7VKFAAK.js";
+} from "./chunk-TJZUQRMH.js";
 import {
+  NpmInstallError,
   NpmMissingError,
   NpmPermissionError
-} from "./chunk-EBZK2SJ2.js";
+} from "./chunk-4JHEZ2PV.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -15,7 +16,10 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-DIJ532S7.js";
+} from "./chunk-T3KMJI4W.js";
+import {
+  readSetupAgentFailures
+} from "./chunk-JNU3LV47.js";
 
 // src/instruction-file.ts
 import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";
@@ -35,6 +39,7 @@ You have Pushary MCP tools that reach the user on their phone. Use them proactiv
 - When meaningful work finishes while the user is away, or they requested an alert, call \`send_notification\` so the user knows it is done. Skip trivial completions and duplicate reports to someone already reading. Always pass \`context\` with a \`type\` of "task_complete", "error" or "info": it is what tells Pushary this is a task update, so the user's own setting for where updates land can route it.
 - Confirm notifications can offer lock-screen actions; arbitrary choices and text open the app. The Mac notch handles personal account questions, not Partner customer enrollment.
 - Use \`cancel_question\` to retract a pending question once it is no longer needed.
+- When the user asks to be reminded later, call \`schedule_reminder\` with \`body\` and either \`inMinutes\` or \`at\` with an explicit UTC offset. Confirm the returned time, never guess their timezone, and do not use \`ask_user\` as a reminder. Pushary saves it and delivers after this agent exits. Call with no arguments to list pending reminders or \`cancelReminderId\` to cancel one before dispatch starts.
 - Respect the user's Pushary delivery mode: it decides where an approval is surfaced (phone, terminal, or awareness only), not whether it is required. In Terminal mode do not expect a phone answer; the approval waits in the terminal. If the Pushary hook already gated an action, a single approval is enough, do not ask again.
 
 Pass \`agentName\` as "${label} - <project folder name>" so the user knows which session is asking. If a question times out, follow \`handoffAction\` when present, otherwise \`nextAction\`: keep waiting with the same correlationId while pending. A poll ending is not question expiry. Cancel only for an explicit handoff or when the answer is no longer needed. If cancellation returns \`handoffAction: "stop"\`, stop. Otherwise, if cancellation returns false, poll once for 1 second and honor the answer that won the race.`;
@@ -103,7 +108,8 @@ var FX_TOOL_DISCOVERY_NOTE = 'In fx, these tools are named mcp_pushary_ask_user,
 var FX_AGENT_LABEL = "fx";
 var fxInstructionsBody = () => `${renderAgentInstructions(FX_AGENT_LABEL)}
 
-${FX_TOOL_DISCOVERY_NOTE}`;
+${FX_TOOL_DISCOVERY_NOTE}
+For a reminder later, select mcp_pushary_schedule_reminder with mcp_select_tool, then call it. Pushary schedules delivery on its server; fx can exit.`;
 var ALLOW_ACTION = "allow";
 var PERMISSION_KEY = "permission";
 var WORKSPACES_KEY = "workspaces";
@@ -459,6 +465,23 @@ var fxIgnoresInstructionsFile = (path, fxDir) => {
   }
 };
 
+// src/setup/config-write.ts
+var AgentConfigWriteError = class extends Error {
+  constructor(error) {
+    super(error instanceof Error ? error.message : String(error), { cause: error });
+    this.name = "AgentConfigWriteError";
+  }
+};
+var writeSetupConfigFile = (path, content, mode = 384) => {
+  try {
+    writeFileAtomic(path, content, mode);
+  } catch (error) {
+    throw new AgentConfigWriteError(error);
+  }
+};
+var writeSetupConfigJson = (path, value, mode) => writeSetupConfigFile(path, `${JSON.stringify(value, null, 2)}
+`, mode);
+
 // src/setup/agent-failure.ts
 var AgentConfigError = class extends Error {
   kind;
@@ -483,7 +506,8 @@ var describedAgentFailure = (agent, kind) => ({
   agent,
   kind,
   detail: AGENT_FAILURE_DETAILS[kind],
-  remedy: DESCRIBED_FAILURE_REMEDIES[kind]
+  remedy: DESCRIBED_FAILURE_REMEDIES[kind],
+  stage: kind === "not-wired" ? "hook-validation" : "account-check"
 });
 var NPM_PERMISSION_REMEDIES = {
   "global-prefix": "fix-npm-prefix",
@@ -494,11 +518,22 @@ var remedyForError = (error) => {
   if (error instanceof NpmPermissionError) return NPM_PERMISSION_REMEDIES[error.kind];
   return "retry-agent";
 };
+var setupFailureDiagnostic = (error) => {
+  if (error instanceof AgentConfigError) return { stage: "config-read" };
+  if (error instanceof AgentConfigWriteError) return { stage: "config-write", diagnosticCode: "config-write-failed" };
+  if (error instanceof NpmMissingError) return { stage: "runtime-install", diagnosticCode: "npm-missing" };
+  if (error instanceof NpmPermissionError) {
+    return { stage: "runtime-install", diagnosticCode: error.kind === "global-prefix" ? "npm-global-prefix-denied" : "npm-file-in-use" };
+  }
+  if (error instanceof NpmInstallError) return { stage: "runtime-install", diagnosticCode: "npm-install-failed" };
+  return { stage: "unknown" };
+};
 var agentFailureFromError = (agent, error, describeError) => ({
   agent,
   kind: error instanceof AgentConfigError ? error.kind : "installer-error",
   detail: describeError(error),
-  remedy: remedyForError(error)
+  remedy: remedyForError(error),
+  ...setupFailureDiagnostic(error)
 });
 var retryAgentCommand = (agent) => `${NPX_LATEST_COMMAND} setup --agents ${agent}`;
 var takeOverHooksCommand = (agent) => `${retryAgentCommand(agent)} --take-over-hooks`;
@@ -511,7 +546,7 @@ var describeMacAccountMismatch = (mismatch) => [
 var REMAINING_AGENTS_CONTINUE = "Other agents will continue. Re-run setup to retry.";
 var afterAgentFailureNote = (agentsStillToSetUp) => agentsStillToSetUp > 0 ? REMAINING_AGENTS_CONTINUE : null;
 var failedAgentsContext = (configuredAgentNames) => configuredAgentNames.length > 0 ? `(configured: ${configuredAgentNames.join(", ")})` : null;
-var agentFailureWire = (failures) => failures.map(({ agent, kind }) => ({ agent, kind }));
+var agentFailureWire = (failures) => readSetupAgentFailures(failures);
 
 // src/fx-lifecycle.ts
 import { existsSync as existsSync3 } from "fs";
@@ -642,6 +677,8 @@ export {
   withFxPusharyServer,
   FX_QUESTION_TOOL,
   fxIgnoresInstructionsFile,
+  writeSetupConfigFile,
+  writeSetupConfigJson,
   AgentConfigError,
   configFailureKind,
   describedAgentFailure,

package/dist/{chunk-4UCTKLHY.js → chunk-S2ALW446.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-QPT4PTUG.js";
+} from "./chunk-WMO2XVG4.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-CHD6IUNM.js";
+} from "./chunk-OWQOMGBF.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-ORLTWJ2O.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-3U3FU6ZX.js → chunk-SI2NC6UU.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-K2SSNAUW.js";
+} from "./chunk-CAJCCQ7N.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-EBZK2SJ2.js";
+} from "./chunk-4JHEZ2PV.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-ORLTWJ2O.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/chunk-SVCT5D7K.js

@@ -0,0 +1,196 @@
+import {
+  liveSessionSleep,
+  postLiveSession
+} from "./chunk-PQAFH4DF.js";
+import {
+  isWaitForAnswerResponse,
+  repoKeyFor,
+  writeDegraded
+} from "./chunk-GOEIW2VH.js";
+import {
+  callMcpTool
+} from "./chunk-53UZN7JW.js";
+import {
+  CODEX_NATIVE_APPROVAL_CAPABILITY,
+  CODEX_NATIVE_APPROVAL_METHODS,
+  canonicalJsonText,
+  codexNativeApprovalResponse,
+  parseCodexNativeApproval
+} from "./chunk-JNU3LV47.js";
+
+// src/codex-native-approvals.ts
+import { createHash, randomUUID } from "crypto";
+var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var validId = (id) => typeof id === "string" && id.length > 0 && id.length <= 200 || typeof id === "number" && Number.isSafeInteger(id);
+var PATCH_LIMIT = 32;
+var WAIT_LIMIT_MS = 3e5;
+var CodexNativeApprovals = class {
+  constructor(options) {
+    this.options = options;
+  }
+  generation = randomUUID();
+  pending = /* @__PURE__ */ new Map();
+  retired = /* @__PURE__ */ new Set();
+  patches = /* @__PURE__ */ new Map();
+  tasks = /* @__PURE__ */ new Set();
+  closed = false;
+  handle(message, threadId) {
+    if (this.closed || !message.method) return false;
+    const p = message.params ?? {};
+    if (message.id === void 0) {
+      this.observe(message.method, p);
+      return false;
+    }
+    if (!validId(message.id) || !CODEX_NATIVE_APPROVAL_METHODS.some((method) => method === message.method)) return false;
+    if (this.retired.has(message.id)) return true;
+    const changes = this.patches.get(this.patchKey(p));
+    const approval = parseCodexNativeApproval({ method: message.method, params: p, ...changes ? { changes } : {} });
+    if (!approval || approval.threadId !== threadId) return false;
+    const repoKey = repoKeyFor(approval.cwd ?? this.options.cwd);
+    const subjectHash = createHash("sha256").update(canonicalJsonText({ request: approval.request, cwd: this.options.cwd, repoKey })).digest("hex");
+    const existing = this.pending.get(message.id);
+    if (existing) {
+      if (existing.owner.subjectHash !== subjectHash) this.retire(message.id, existing, false);
+      return true;
+    }
+    if (this.pending.size >= 8) return false;
+    const owner = {
+      capability: CODEX_NATIVE_APPROVAL_CAPABILITY,
+      machineId: this.options.machineId,
+      generation: this.generation,
+      threadId: approval.threadId,
+      requestId: message.id,
+      subjectHash,
+      method: approval.request.method
+    };
+    const pending = { owner, approval, repoKey, controller: new AbortController(), replied: false, creating: true, correlationId: randomUUID() };
+    this.pending.set(message.id, pending);
+    const task = this.answer(pending).finally(() => {
+      this.tasks.delete(task);
+    });
+    this.tasks.add(task);
+    return true;
+  }
+  async close() {
+    this.closed = true;
+    for (const [id, pending] of this.pending) this.retire(id, pending, false);
+    await Promise.allSettled(this.tasks);
+  }
+  patchKey(params) {
+    return JSON.stringify([params.threadId, params.turnId, params.itemId]);
+  }
+  observe(method, params) {
+    if (method === "item/started" && record(params.item) && params.item.type === "fileChange" && Array.isArray(params.item.changes)) {
+      if (this.patches.size >= PATCH_LIMIT) this.patches.delete(this.patches.keys().next().value ?? "");
+      this.patches.set(this.patchKey({ ...params, itemId: params.item.id }), params.item.changes);
+    }
+    for (const [id, pending] of this.pending) {
+      const a = pending.approval;
+      const resolved = method === "serverRequest/resolved" && params.requestId === id;
+      const sameThread = params.threadId === a.threadId;
+      const closed = sameThread && (method === "thread/closed" || method === "thread/archived" || method === "turn/completed" && record(params.turn) && params.turn.id === a.turnId || method === "item/completed" && params.turnId === a.turnId && record(params.item) && params.item.id === a.itemId);
+      const patchChanged = method === "item/fileChange/patchUpdated" && sameThread && params.turnId === a.turnId && params.itemId === a.itemId;
+      if (resolved || closed || patchChanged) this.retire(id, pending, resolved || closed);
+    }
+    if (method === "item/fileChange/patchUpdated") this.patches.delete(this.patchKey(params));
+    if (method === "turn/completed" || method === "thread/closed") this.patches.clear();
+  }
+  retire(id, pending, nativeClosed) {
+    pending.controller.abort();
+    this.pending.delete(id);
+    this.retired.add(id);
+    if (!nativeClosed && !this.closed && !pending.replied && !this.options.shared) {
+      this.options.reply(id, codexNativeApprovalResponse(pending.approval, "Deny"));
+      pending.replied = true;
+    }
+    const task = this.cleanup(pending, nativeClosed).finally(() => {
+      this.tasks.delete(task);
+    });
+    this.tasks.add(task);
+  }
+  async post(pending, operation, signal) {
+    const boundedSignal = AbortSignal.any([signal, AbortSignal.timeout(this.options.requestTimeoutMs ?? 1e4)]);
+    const response = await postLiveSession({ ...this.options, signal: boundedSignal }, "/api/agent/native-approval", {
+      operation,
+      owner: pending.owner,
+      request: pending.approval.request,
+      correlationId: pending.correlationId,
+      claimId: pending.claimId,
+      localSurfaceAvailable: this.options.shared,
+      cwd: this.options.cwd,
+      repoKey: pending.repoKey
+    });
+    const body = await response.json();
+    if (!response.ok || !record(body)) throw new Error("Native approval service unavailable");
+    return body;
+  }
+  async cleanup(pending, nativeClosed) {
+    if (pending.creating || !pending.correlationId) return;
+    try {
+      const signal = AbortSignal.timeout(3e3);
+      while (!signal.aborted) {
+        const result = await this.post(pending, nativeClosed ? "request_closed" : "unavailable", signal);
+        if (result.recorded === true) return;
+        await liveSessionSleep(100, signal);
+      }
+      throw new Error("Native approval cleanup not recorded");
+    } catch {
+      writeDegraded("questions", { reason: "native_approval_cleanup_unconfirmed", fallback: "expiry", event: pending.owner.method });
+    }
+  }
+  async answer(pending) {
+    const signal = AbortSignal.any([this.options.signal, pending.controller.signal, AbortSignal.timeout(WAIT_LIMIT_MS)]);
+    try {
+      let created;
+      try {
+        created = await this.post(pending, "create", AbortSignal.timeout(this.options.requestTimeoutMs ?? 1e4));
+        pending.correlationId = typeof created.correlationId === "string" ? created.correlationId : void 0;
+      } finally {
+        pending.creating = false;
+      }
+      if (signal.aborted) return;
+      if (created.kind === "deny") {
+        this.options.reply(pending.owner.requestId, codexNativeApprovalResponse(pending.approval, "Deny"));
+        pending.replied = true;
+        return;
+      }
+      if (created.kind !== "ask" || !pending.correlationId) throw new Error("Native approval unavailable");
+      let answer = null;
+      while (!signal.aborted) {
+        const result = await callMcpTool(
+          this.options.apiKey,
+          "wait_for_answer",
+          { correlationId: pending.correlationId, timeoutMs: 25e3 },
+          { baseUrl: this.options.baseUrl, signal, timeoutMs: 27e3, maxRetries: 1 }
+        );
+        if (!isWaitForAnswerResponse(result)) throw new Error("Invalid native approval answer");
+        if (result.answered) {
+          answer = typeof result.value === "string" ? result.value : null;
+          break;
+        }
+        if (!("status" in result) || result.status !== "pending") throw new Error("Native approval no longer pending");
+        await liveSessionSleep(100, signal);
+      }
+      if (signal.aborted || !answer || !pending.approval.options.includes(answer)) throw new Error("No supported approval answer");
+      const claim = await this.post(pending, "claim", signal);
+      if (typeof claim.claimId !== "string" || !claim.claimId) throw new Error("Native approval dispatch refused");
+      pending.claimId = claim.claimId;
+      if (signal.aborted || this.pending.get(pending.owner.requestId) !== pending) return;
+      this.options.reply(pending.owner.requestId, codexNativeApprovalResponse(pending.approval, answer));
+      pending.replied = true;
+      await this.post(pending, "reply_queued", AbortSignal.timeout(3e3));
+    } catch {
+      if (!pending.controller.signal.aborted && !this.options.signal.aborted && !this.closed && !this.options.shared && !pending.replied) {
+        this.options.reply(pending.owner.requestId, codexNativeApprovalResponse(pending.approval, "Deny"));
+        pending.replied = true;
+      }
+      if (!pending.controller.signal.aborted && !this.options.signal.aborted) writeDegraded("questions", { reason: "native_approval_unavailable", fallback: this.options.shared ? "native client" : "refused", event: pending.owner.method });
+    } finally {
+      if (!pending.claimId || !pending.replied || signal.aborted) await this.cleanup(pending, false);
+    }
+  }
+};
+
+export {
+  CodexNativeApprovals
+};

package/dist/{chunk-ZVMFRUBD.js → chunk-SWDPCDLT.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-IXNVIWNN.js";
+} from "./chunk-42CVAOC5.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
 import {
   readKeySource
-} from "./chunk-M7VKFAAK.js";
+} from "./chunk-TJZUQRMH.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-ZV56INA6.js";
+} from "./chunk-TKTS3SIM.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-CHD6IUNM.js";
+} from "./chunk-OWQOMGBF.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-DIJ532S7.js → chunk-T3KMJI4W.js}

@@ -2,7 +2,7 @@ import {
   DISCONNECT_AGENT_IDS,
   SETUP_AGENT_CHOICES,
   isApprovalMode
-} from "./chunk-ORLTWJ2O.js";
+} from "./chunk-JNU3LV47.js";
 
 // src/cli/mode-request.ts
 var parseDuration = (value) => {
@@ -36,6 +36,7 @@ var describeMode = (mode) => {
 var npxLatestCommandFor = (platform) => `${platform === "win32" ? "npx.cmd" : "npx"} pushary@latest`;
 var NPX_LATEST_COMMAND = npxLatestCommandFor(process.platform);
 var COMMAND_LIST = [
+  { name: "codex", module: "pushary-codex-session", summary: "Start a managed Codex terminal session with Pushary native approvals", detail: ["Use --cwd <directory> to choose a project. Existing desktop chats are not attached."] },
   {
     name: "cowork",
     module: "pushary-cowork",