pushary 1.9.133 → 1.9.135

package/dist/{chunk-FTH4TSJ2.js → chunk-GLAGHQPB.js}

@@ -1,19 +1,19 @@
 import {
   macAppBridgeAvailable
-} from "./chunk-NSBWFX7H.js";
+} from "./chunk-CGROOSWT.js";
 import {
   keyPrefix
-} from "./chunk-CVBSETPW.js";
+} from "./chunk-LTY5DSWT.js";
 import {
   bridgeAgentKey
-} from "./chunk-W4FJR57E.js";
+} from "./chunk-ZJKWDM3S.js";
 import {
   readJsonSafe
 } from "./chunk-TODDEIYG.js";
 import {
   isRecord,
   isValidApiKey
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/shared-mcp-key.ts
 var asRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;

package/dist/{chunk-NYFUU23B.js → chunk-GRCX2FGD.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-M65LPNIO.js → chunk-H4226UC7.js}

@@ -1538,6 +1538,25 @@ var COMMAND_ACKNOWLEDGEMENT_STATES = [
   ...COMMAND_SETTLEMENT_STATES
 ];
 var isCommandAcknowledgementReceipt = (value) => typeof value === "object" && value !== null && "ok" in value && value.ok === true;
+var COMMAND_ACK_ERRORS = {
+  unauthorized: { status: 401, error: "Unauthorized", final: false },
+  forbiddenKeyScope: { status: 403, error: "Forbidden key scope", final: true },
+  invalidAck: { status: 400, error: "invalid_ack", final: true },
+  invalidMachineId: { status: 400, error: "invalid_machine_id", final: true },
+  invalidDispatch: { status: 400, error: "invalid_dispatch", final: true },
+  machineRequired: { status: 400, error: "machine_required", final: true },
+  ackUnavailable: { status: 503, error: "ack_unavailable", final: false },
+  claimMismatch: { status: 409, error: "claim_mismatch", final: true },
+  staleCommand: { status: 409, error: "stale_command", final: true }
+};
+var COMMAND_ACK_ERROR_RESPONSES = Object.values(COMMAND_ACK_ERRORS);
+var commandAckErrorOf = (body) => isRecord(body) && typeof body.error === "string" ? body.error : null;
+var isFinalCommandAckRefusal = (status, body) => {
+  const error = commandAckErrorOf(body);
+  return COMMAND_ACK_ERROR_RESPONSES.some(
+    (response) => response.final && response.status === status && response.error === error
+  );
+};
 
 // ../contracts/src/claude-wake.ts
 var CLAUDE_WAKE = {
@@ -9468,14 +9487,15 @@ export {
   parseHermesReplayCursor,
   hermesPendingAdmissionId,
   hermesReplayAdmissionId,
+  isRecord,
   COMMAND_RECOVERY,
   isCommandAcknowledgementReceipt,
+  isFinalCommandAckRefusal,
   CLAUDE_WAKE,
   isClaudeWakePrompt,
   claudeWakeDecision,
   CLAUDE_WAKE_API,
   claudeWakeWaitingOn,
-  isRecord,
   AGENT_QUESTION_HEADER_MAX,
   AGENT_QUESTION_OPTION_MAX,
   AGENT_QUESTION_DESCRIPTION_MAX,

package/dist/{chunk-BKH4LQJC.js → chunk-IABPEGAA.js}

@@ -1,9 +1,9 @@
 import {
   configFilePath
-} from "./chunk-T6HX6OTY.js";
+} from "./chunk-FP6ZVMF2.js";
 import {
   normalizeInstallSource
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/install-source.ts
 import { readFileSync } from "fs";

package/dist/{chunk-MJVDFNP2.js → chunk-IOUCIJ56.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-W4FJR57E.js";
+} from "./chunk-ZJKWDM3S.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-KIWFCW7M.js → chunk-JDAX2HVS.js}

@@ -1,11 +1,11 @@
 import {
   autoUpdateLock
-} from "./chunk-W4FJR57E.js";
+} from "./chunk-ZJKWDM3S.js";
 import {
   installPackageGlobally,
   npmErrorMessage,
   npmExitedOnPermissionDenied
-} from "./chunk-A44MRVWG.js";
+} from "./chunk-ACI4PZ5N.js";
 import {
   writeJsonAtomic
 } from "./chunk-TODDEIYG.js";

package/dist/{chunk-FJST6ZXC.js → chunk-KUAS2DGZ.js}

@@ -3,24 +3,24 @@ import {
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-X23GSBOH.js";
+} from "./chunk-6RSAOA2P.js";
 import {
   daemonHasRemoteProof,
   daemonServiceManagerAvailable,
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-3DCCMO23.js";
+} from "./chunk-RCZ5ZER4.js";
 import {
   getMachineId
-} from "./chunk-DS7XMYUB.js";
+} from "./chunk-RLNJNRYP.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-CVBSETPW.js";
+} from "./chunk-LTY5DSWT.js";
 import {
   getBaseUrl
-} from "./chunk-T6HX6OTY.js";
+} from "./chunk-FP6ZVMF2.js";
 import {
   getPackageVersion
 } from "./chunk-WIIMW5YO.js";

package/dist/{chunk-ZJPBTJED.js → chunk-LIXCHEDJ.js}

@@ -2,10 +2,10 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-2YS7YEUW.js";
+} from "./chunk-NBMK6T6R.js";
 import {
   APPROVAL_RULES_PATH
-} from "./chunk-GKZMBU6T.js";
+} from "./chunk-VND6LN6X.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
@@ -14,19 +14,19 @@ import {
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-LR3PIGRS.js";
+} from "./chunk-SFN72Q7W.js";
 import {
   readKeySource
-} from "./chunk-CVBSETPW.js";
+} from "./chunk-LTY5DSWT.js";
 import {
   getBaseUrl
-} from "./chunk-T6HX6OTY.js";
+} from "./chunk-FP6ZVMF2.js";
 import {
   EXIT
 } from "./chunk-BG4HHB7E.js";
 import {
   KEY_SCOPE
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-CVBSETPW.js → chunk-LTY5DSWT.js}

@@ -1,9 +1,9 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-BKH4LQJC.js";
+} from "./chunk-IABPEGAA.js";
 import {
   configFilePath
-} from "./chunk-T6HX6OTY.js";
+} from "./chunk-FP6ZVMF2.js";
 import {
   backupFile,
   readJsonSafe,
@@ -14,7 +14,7 @@ import {
   API_KEY_PREFIX_PATTERN,
   isRecord,
   isValidApiKey
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/shell-alias.ts
 import { homedir } from "os";

package/dist/{chunk-7MIT5C7B.js → chunk-MGTMXF3T.js}

@@ -5,10 +5,10 @@ import {
   hermesAppWiringRecord,
   hermesConfigReceipt,
   hermesSetupReceipt
-} from "./chunk-W4FJR57E.js";
+} from "./chunk-ZJKWDM3S.js";
 import {
   resolvePathBinary
-} from "./chunk-A44MRVWG.js";
+} from "./chunk-ACI4PZ5N.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -19,7 +19,7 @@ import {
 } from "./chunk-WIIMW5YO.js";
 import {
   isRecord
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/hermes/plugin-payload.ts
 import { createHash } from "crypto";

package/dist/{chunk-PHKCTMAV.js → chunk-MYMADZRU.js}

@@ -9,13 +9,13 @@ import {
   installedCodexApp,
   readCodexAppRuntime,
   shellQuoted
-} from "./chunk-VME5NXCM.js";
+} from "./chunk-UCGWTMQD.js";
 import {
   writeHuman
 } from "./chunk-QCGNGEGE.js";
 import {
   xml
-} from "./chunk-3DCCMO23.js";
+} from "./chunk-RCZ5ZER4.js";
 import {
   writeFileAtomic
 } from "./chunk-TODDEIYG.js";

package/dist/{chunk-QBJVECFY.js → chunk-N2DYYXQI.js}

@@ -1,13 +1,13 @@
 import {
   configFilePath
-} from "./chunk-T6HX6OTY.js";
+} from "./chunk-FP6ZVMF2.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "./chunk-TODDEIYG.js";
 import {
   readSetupOutcomeProperties
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/diagnostics/service-runtime.ts
 var unescapeXml = (value) => value.replaceAll("&quot;", '"').replaceAll("&apos;", "'").replaceAll("&lt;", "<").replaceAll("&gt;", ">").replaceAll("&amp;", "&");

package/dist/{chunk-2YS7YEUW.js → chunk-NBMK6T6R.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-CVBSETPW.js";
+} from "./chunk-LTY5DSWT.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-SZYKS433.js";
+} from "./chunk-BGXXWLS5.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-C4UH6YPD.js → chunk-NWNUS2ET.js}

@@ -1,21 +1,21 @@
 import {
   UNNAMED_ACTION
-} from "./chunk-JYCAAQUW.js";
+} from "./chunk-UXPRMNH2.js";
 import {
   askUser,
   isAwayPaused,
   isLocalQuestionHandoff,
   unavailableQuestionUnlessRefused,
   waitForQuestion
-} from "./chunk-J4UNR655.js";
+} from "./chunk-XRO6NRBO.js";
 import {
   getMachineId
-} from "./chunk-DS7XMYUB.js";
+} from "./chunk-RLNJNRYP.js";
 import {
   hookWaitClamped,
   hookWaitDeadline,
   scopeBreachReasonOf
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/pushed-question.ts
 var scopeQuestionOf = (verdict) => {

package/dist/{chunk-3PGANQ4K.js → chunk-OEIU6BNH.js}

@@ -3,10 +3,10 @@ import {
   forkFinishWithUpgradeLock,
   installWithUpgradeLock,
   releaseAutoUpdateLock
-} from "./chunk-KIWFCW7M.js";
+} from "./chunk-JDAX2HVS.js";
 import {
   phoneStartIsRequired
-} from "./chunk-X23GSBOH.js";
+} from "./chunk-6RSAOA2P.js";
 import {
   describeAutoUpdateCheck,
   globalInstallLocation,
@@ -18,25 +18,25 @@ import {
   readAutoUpdateState,
   updateAutoUpdateState,
   upgradeEntryFor
-} from "./chunk-UZUDMZES.js";
+} from "./chunk-UDSJKRRI.js";
 import {
   autoUpdateLock,
   autoUpdateLog,
   autoUpdateState
-} from "./chunk-W4FJR57E.js";
+} from "./chunk-ZJKWDM3S.js";
 import {
   execNpm,
   fetchLatestPublishedVersion,
   npmErrorMessage,
   readGlobalCliInstallAt,
   readGlobalPrefix
-} from "./chunk-A44MRVWG.js";
+} from "./chunk-ACI4PZ5N.js";
 import {
   EXIT
 } from "./chunk-BG4HHB7E.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-SZYKS433.js";
+} from "./chunk-BGXXWLS5.js";
 import {
   commandsPackage,
   globalUpgradeEntry,

package/dist/{chunk-237FYIVC.js → chunk-ORZ7H3AQ.js}

@@ -1,9 +1,9 @@
 import {
   AGENT_CHOICES
-} from "./chunk-XHC3UNOK.js";
+} from "./chunk-WVOMK2HW.js";
 import {
   BELL_HOOK_BINARY
-} from "./chunk-MJVDFNP2.js";
+} from "./chunk-IOUCIJ56.js";
 import {
   CLAUDE_HOOK_EVENTS,
   CODEX_HOOK_EVENTS,
@@ -16,13 +16,13 @@ import {
   isBridgeLocator,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-W4FJR57E.js";
+} from "./chunk-ZJKWDM3S.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-FT5MTCKU.js → chunk-OUMH4UTT.js}

@@ -1,9 +1,9 @@
 import {
   claudeConfigDir
-} from "./chunk-W4FJR57E.js";
+} from "./chunk-ZJKWDM3S.js";
 import {
   claudePermissionRulesFromSettings
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/claude-permission-rules.ts
 import { readFileSync, statSync } from "fs";

package/dist/{chunk-WZ4SIRMH.js → chunk-Q5GPXYDG.js}

@@ -2,7 +2,7 @@ import {
   isApprovalMode,
   isRecord,
   isTimeoutAction
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/cli/settings-response.ts
 var isFiniteNumber = (value) => typeof value === "number" && Number.isFinite(value);

package/dist/{chunk-D2KJKAYM.js → chunk-QLIG4PMT.js}

@@ -1,17 +1,17 @@
 import {
   compatibleConfigFile,
   hasCompatibleHooks
-} from "./chunk-RZBV5KTF.js";
+} from "./chunk-7ASHS5VR.js";
 import {
   pusharyHookExecutable
-} from "./chunk-237FYIVC.js";
+} from "./chunk-ORZ7H3AQ.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-W4FJR57E.js";
+} from "./chunk-ZJKWDM3S.js";
 import {
   isRecord
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/cursor-config.ts
 var hookCommandOf = (entry) => {

package/dist/{chunk-RVGYXUOC.js → chunk-QUMPSMZN.js}

@@ -1,12 +1,12 @@
 import {
   CODEX_HOOK_STATUS
-} from "./chunk-RLQDVWZ4.js";
+} from "./chunk-VCMJLNEP.js";
 import {
   retryAgentCommand
-} from "./chunk-3TKTZOKG.js";
+} from "./chunk-V7KBG7XH.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-SZYKS433.js";
+} from "./chunk-BGXXWLS5.js";
 
 // src/setup/codex-trust.ts
 var CODEX_TRUST_TELEMETRY = {

package/dist/{chunk-3DCCMO23.js → chunk-RCZ5ZER4.js}

@@ -4,19 +4,19 @@ import {
 } from "./chunk-H6CL3T2S.js";
 import {
   getMachineId
-} from "./chunk-DS7XMYUB.js";
+} from "./chunk-RLNJNRYP.js";
 import {
   readControlMode
-} from "./chunk-CVBSETPW.js";
+} from "./chunk-LTY5DSWT.js";
 import {
   pusharyDir
-} from "./chunk-W4FJR57E.js";
+} from "./chunk-ZJKWDM3S.js";
 import {
   resolveGlobalBinary
-} from "./chunk-A44MRVWG.js";
+} from "./chunk-ACI4PZ5N.js";
 import {
   getApiKey
-} from "./chunk-T6HX6OTY.js";
+} from "./chunk-FP6ZVMF2.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -32,7 +32,7 @@ import {
 } from "./chunk-WIIMW5YO.js";
 import {
   isRecord
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-MRHGK3Q3.js → chunk-RGRPDJG3.js}

@@ -27,11 +27,11 @@ import {
   toolResultErrorText,
   transcriptTokensIn,
   transcriptUsageRequest
-} from "./chunk-JYCAAQUW.js";
+} from "./chunk-UXPRMNH2.js";
 import {
   branchFor,
   repoKeyFor
-} from "./chunk-RGVQOOGD.js";
+} from "./chunk-DMK3U7GG.js";
 import {
   cancelQuestion,
   clientErrorKindOf,
@@ -39,35 +39,40 @@ import {
   reportClientError,
   sendNotification,
   waitForAnswer
-} from "./chunk-J4UNR655.js";
+} from "./chunk-XRO6NRBO.js";
+import {
+  RETRY_ACK,
+  readCommandAck,
+  refusedReceiptMessage
+} from "./chunk-XB75IJ3G.js";
 import {
   isRetryable,
   withRetry
-} from "./chunk-2KN53MPE.js";
+} from "./chunk-ZNST34QH.js";
 import {
   fetchAsCredential
-} from "./chunk-42PVKPHM.js";
+} from "./chunk-2K7MZRPH.js";
 import {
   getMachineId
-} from "./chunk-DS7XMYUB.js";
+} from "./chunk-RLNJNRYP.js";
 import {
   reportedInstallSource
-} from "./chunk-BKH4LQJC.js";
+} from "./chunk-IABPEGAA.js";
 import {
   IDLE_PROMPT_NOTIFICATION,
   NOTIFICATION_PUSH_TYPES,
   POSTTOOLUSE_MIRROR_ONLY_TOOLS,
   canonicalJson,
   claudeConfigDir
-} from "./chunk-W4FJR57E.js";
+} from "./chunk-ZJKWDM3S.js";
 import {
   compareVersion,
   parseVersion
-} from "./chunk-A44MRVWG.js";
+} from "./chunk-ACI4PZ5N.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-T6HX6OTY.js";
+} from "./chunk-FP6ZVMF2.js";
 import {
   writeFileAtomic,
   writeJsonAtomicDurable
@@ -96,7 +101,7 @@ import {
   resolveAutoResolveOrigin,
   resolvePolicy,
   unansweredRefusalReason
-} from "./chunk-M65LPNIO.js";
+} from "./chunk-H4226UC7.js";
 
 // src/pending.ts
 import { join } from "path";
@@ -116,6 +121,7 @@ var commandDirFor = (sessionId, namespace = "") => join(
 );
 var legacyCommandFile = (sessionId, namespace = "") => join(commandDirFor(sessionId, namespace), "command.json");
 var commandFile = (sessionId, id, namespace = "") => join(commandDirFor(sessionId, namespace), `${createHash("sha256").update(id).digest("hex")}.json`);
+var wasRefusedByTheServer = (command) => command.refused === true;
 var readCommandFile = (file) => {
   try {
     if (!lstatSync(file).isFile()) return null;
@@ -132,6 +138,7 @@ var readCommandFile = (file) => {
       expiresAtMs: value.expiresAtMs,
       ...value.attempted === true ? { attempted: true } : {},
       ...typeof value.attemptedAtMs === "number" ? { attemptedAtMs: value.attemptedAtMs } : {},
+      ...value.refused === true ? { refused: true } : {},
       ...typeof value.sessionId === "string" ? { sessionId: value.sessionId } : {},
       delivered: value.delivered === true,
       ...value.failed === true || !value.delivered && !value.attempted && value.expiresAtMs <= Date.now() ? { failed: true } : {}
@@ -179,7 +186,7 @@ var pruneExpiredCommandStore = () => {
   }
 };
 var readPendingCommand = (sessionId, namespace = "") => {
-  const commands = pruneExpiredCommands(commandDirFor(sessionId, namespace));
+  const commands = pruneExpiredCommands(commandDirFor(sessionId, namespace)).filter((command) => !wasRefusedByTheServer(command));
   return commands.find((command) => !command.delivered && !command.failed && !command.attempted) ?? commands[0] ?? null;
 };
 var writeNewCommandFile = (file, contents) => {
@@ -228,7 +235,7 @@ var updatePendingCommand = (sessionId, id, update, namespace = "") => {
 };
 var markPendingCommandAttempted = (sessionId, id, namespace = "") => {
   const command = readPendingCommandById(sessionId, id, namespace);
-  if (!command || command.attempted || command.delivered || command.failed) return false;
+  if (!command || command.attempted || command.delivered || command.failed || wasRefusedByTheServer(command)) return false;
   try {
     const descriptor = openSync(`${commandFile(sessionId, id, namespace)}.emission`, "wx", 384);
     try {
@@ -244,13 +251,17 @@ var markPendingCommandAttempted = (sessionId, id, namespace = "") => {
 var pendingCommandReceipts = (namespace) => {
   const root = join(commandRoot(), createHash("sha256").update(namespace).digest("hex").slice(0, 16));
   try {
-    return readdirSync(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).flatMap((entry) => pruneExpiredCommands(join(root, entry.name)).filter((command) => command.delivered || command.failed || command.attempted && Date.now() - (command.attemptedAtMs ?? 0) >= COMMAND_RECOVERY.emissionRecoveryGraceMs).map((command) => ({ sessionId: command.sessionId ?? entry.name, command })));
+    return readdirSync(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).flatMap((entry) => pruneExpiredCommands(join(root, entry.name)).filter((command) => !wasRefusedByTheServer(command) && (command.delivered || command.failed || command.attempted && Date.now() - (command.attemptedAtMs ?? 0) >= COMMAND_RECOVERY.emissionRecoveryGraceMs)).map((command) => ({ sessionId: command.sessionId ?? entry.name, command })));
   } catch {
     return [];
   }
 };
 var markPendingCommandDelivered = (sessionId, id, namespace = "") => updatePendingCommand(sessionId, id, { delivered: true, failed: void 0 }, namespace);
 var markPendingCommandFailed = (sessionId, id, namespace = "") => updatePendingCommand(sessionId, id, { delivered: false, failed: true }, namespace);
+var REFUSED_AFTER_DELIVERY = { refused: true };
+var REFUSED_BEFORE_CONFIRMED_DELIVERY = { refused: true, failed: true };
+var refusalTombstoneFor = (command) => command?.delivered ? REFUSED_AFTER_DELIVERY : REFUSED_BEFORE_CONFIRMED_DELIVERY;
+var markPendingCommandRefused = (sessionId, id, namespace = "") => updatePendingCommand(sessionId, id, refusalTombstoneFor(readPendingCommandById(sessionId, id, namespace)), namespace);
 var removePendingCommand = (sessionId, id, namespace = "") => {
   if (!readPendingCommandById(sessionId, id, namespace)) return;
   try {
@@ -350,12 +361,9 @@ var emitHookOutput = async (render, write = writeOutput) => {
       command.namespace
     ))
       continue;
-    if (await command.acknowledge())
-      removePendingCommand(
-        command.sessionId,
-        command.commandId,
-        command.namespace
-      );
+    const ack = await command.acknowledge();
+    if (ack.outcome === "settled") removePendingCommand(command.sessionId, command.commandId, command.namespace);
+    if (ack.outcome === "refused") markPendingCommandRefused(command.sessionId, command.commandId, command.namespace);
   }
 };
 
@@ -1266,7 +1274,7 @@ var detectInstallMode = () => (process.argv[1] ?? "").includes("_npx") ? "npx" :
 var acknowledgePendingCommand = async (apiKey, baseUrl, commandId, sessionId, machineId, timeoutMs, state = "delivered", signal) => {
   try {
     signal?.throwIfAborted();
-    if (timeoutMs <= 0) return false;
+    if (timeoutMs <= 0) return RETRY_ACK;
     const response = await fetchAsCredential(apiKey, `${baseUrl}/api/agent/command/ack`, {
       method: "POST",
       headers: {
@@ -1282,9 +1290,12 @@ var acknowledgePendingCommand = async (apiKey, baseUrl, commandId, sessionId, ma
       }),
       signal: AbortSignal.any([AbortSignal.timeout(timeoutMs), ...signal ? [signal] : []])
     });
-    return response.ok;
+    const ack = await readCommandAck(response);
+    if (ack.outcome === "refused") process.stderr.write(`${refusedReceiptMessage(commandId, ack.status)}
+`);
+    return ack;
   } catch {
-    return false;
+    return RETRY_ACK;
   }
 };
 var ACK_RESERVE_MS = 1500;
@@ -1358,7 +1369,11 @@ var reportEvent = async (event, options = {}) => {
           failed ? "failed" : storedCommand.attempted && !storedCommand.delivered ? "uncertain" : "delivered",
           options.signal
         );
-        if (!acknowledged) return withoutPending();
+        if (acknowledged.outcome === "retry") return withoutPending();
+        if (acknowledged.outcome === "refused") {
+          markPendingCommandRefused(sessionKey, storedCommand.id, receiptNamespace);
+          return withoutPending();
+        }
         if (storedCommand.delivered || storedCommand.attempted || failed) {
           removePendingCommand(sessionKey, storedCommand.id, receiptNamespace);
           return withoutPending();
@@ -1391,7 +1406,8 @@ var reportEvent = async (event, options = {}) => {
           "delivered",
           options.signal
         );
-        if (!acknowledged || !markPendingCommandDelivered(sessionKey, result.pendingCommandId, receiptNamespace)) {
+        if (acknowledged.outcome === "refused") markPendingCommandRefused(sessionKey, result.pendingCommandId, receiptNamespace);
+        if (acknowledged.outcome !== "settled" || !markPendingCommandDelivered(sessionKey, result.pendingCommandId, receiptNamespace)) {
           return withoutPending();
         }
       }
@@ -1734,6 +1750,7 @@ export {
   pendingCommandReceipts,
   markPendingCommandDelivered,
   markPendingCommandFailed,
+  markPendingCommandRefused,
   removePendingCommand,
   emitHookOutput,
   PHONE_DRIVER,