pushary 1.9.138 → 1.9.140

package/dist/{chunk-DL67HX3D.js → chunk-QCIZDJSU.js}

@@ -118,9 +118,9 @@ var isAgentQuestionSet = (value) => {
     const labels = /* @__PURE__ */ new Set();
     for (const option of question.options) {
       if (!option || typeof option !== "object" || Array.isArray(option)) return false;
-      const record4 = option;
-      const label = record4.label;
-      if (typeof label !== "string" || label.length === 0 || labels.has(label) || record4.description !== void 0 && typeof record4.description !== "string") return false;
+      const record5 = option;
+      const label = record5.label;
+      if (typeof label !== "string" || label.length === 0 || labels.has(label) || record5.description !== void 0 && typeof record5.description !== "string") return false;
       labels.add(label);
     }
     questions.add(question.question);
@@ -191,6 +191,42 @@ var codexQuestionAnswerReason = (answers) => {
   return `${CODEX_QUESTION_ANSWERED_IN_PUSHARY}. ${answered}. ${CODEX_QUESTION_CONTINUE}`;
 };
 
+// ../contracts/src/session-runtime.ts
+var SPAWN_CAPABILITY = "spawn";
+var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";
+var CLAUDE_RESUME_CAPABILITY = "claude-resume";
+var CODEX_BRIDGE_CAPABILITY = "codex-bridge";
+var CODEX_RESUME_CAPABILITY = "codex-resume";
+var GEMINI_BRIDGE_CAPABILITY = "gemini-bridge";
+var GEMINI_RESUME_CAPABILITY = "gemini-resume";
+var SESSION_RUNTIMES = {
+  claude: {
+    provider: "claude",
+    label: "Claude",
+    protocol: "claude-stream-json",
+    bridgeCapability: CLAUDE_BRIDGE_CAPABILITY,
+    resumeCapability: CLAUDE_RESUME_CAPABILITY,
+    phoneResume: false
+  },
+  codex: {
+    provider: "codex",
+    label: "Codex",
+    protocol: "codex-app-server",
+    bridgeCapability: CODEX_BRIDGE_CAPABILITY,
+    resumeCapability: CODEX_RESUME_CAPABILITY,
+    phoneResume: true
+  },
+  gemini: {
+    provider: "gemini",
+    label: "Gemini",
+    protocol: "gemini-stream-json",
+    bridgeCapability: GEMINI_BRIDGE_CAPABILITY,
+    resumeCapability: GEMINI_RESUME_CAPABILITY,
+    phoneResume: true
+  }
+};
+var sessionProvidersAdvertisedBy = (capabilities) => Object.values(SESSION_RUNTIMES).filter((runtime) => capabilities.includes(runtime.bridgeCapability)).map((runtime) => runtime.provider);
+
 // ../contracts/src/claude-connector.ts
 var CLAUDE_DIRECTORY_URL = "https://claude.ai/directory/pushary";
 var CLAUDE_CONNECTOR_URL = "https://pushary.com/api/mcp/mcp";
@@ -236,7 +272,7 @@ var defaults = {
   policyAgent: null,
   repoAware: false,
   disconnectable: false,
-  managedProvider: false,
+  sessionRuntime: null,
   bridged: false,
   enforcement: "cooperative",
   connectVia: "Plain MCP",
@@ -259,7 +295,7 @@ var AGENTS = {
     policyAgent: "claude_code",
     repoAware: true,
     disconnectable: true,
-    managedProvider: true,
+    sessionRuntime: SESSION_RUNTIMES.claude,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
     setupCommand: PUSHARY_SETUP_COMMAND,
@@ -287,7 +323,7 @@ var AGENTS = {
     policyAgent: "codex",
     repoAware: true,
     disconnectable: true,
-    managedProvider: true,
+    sessionRuntime: SESSION_RUNTIMES.codex,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
     setupCommand: PUSHARY_SETUP_COMMAND,
@@ -308,7 +344,7 @@ var AGENTS = {
     policyAgent: "gemini_cli",
     repoAware: true,
     disconnectable: true,
-    managedProvider: true,
+    sessionRuntime: SESSION_RUNTIMES.gemini,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
     setupCommand: PUSHARY_SETUP_COMMAND,
@@ -524,7 +560,7 @@ var SESSION_HISTORY_AGENT_TYPES = Object.freeze(
 );
 var DISCONNECTABLE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.disconnectable && agent.hookSource !== null ? [agent.hookSource] : []));
 var REPO_AWARE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.repoAware ? [agent.policyAgent] : []));
-var MANAGED_PROVIDERS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.managedProvider ? [agent.hookSource] : []));
+var MANAGED_PROVIDERS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.sessionRuntime ? [agent.sessionRuntime.provider] : []));
 var BRIDGE_HOOK_SOURCES = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.bridged ? [agent.hookSource] : []));
 var isAgentId = (value) => Object.keys(AGENTS).includes(value);
 var isHooklessDisconnectableAgent = (value) => isAgentId(value) && AGENTS[value].disconnectable && AGENTS[value].hookSource === null;
@@ -616,18 +652,18 @@ var CANONICAL_COMMAND_KEYS = ["command"];
 var SHELL_TOOLS = /* @__PURE__ */ new Set([SHELL_TOOL, POWERSHELL_TOOL]);
 var PATH_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit", "NotebookEdit", "Read"]);
 var PHONE_ANSWERED_TOOLS = /* @__PURE__ */ new Set(["AskUserQuestion", "ExitPlanMode"]);
-var firstString = (record4, keys2) => {
-  for (const key of keys2) {
-    const value = record4[key];
+var firstString = (record5, keys3) => {
+  for (const key of keys3) {
+    const value = record5[key];
     if (typeof value === "string" && value.length > 0) return value;
   }
   return void 0;
 };
-var pathsNamedIn = (record4, keys2) => keys2.flatMap((key) => {
-  const value = record4[key];
+var pathsNamedIn = (record5, keys3) => keys3.flatMap((key) => {
+  const value = record5[key];
   return typeof value === "string" && value.length > 0 ? [value] : [];
 });
-var namesOneFile = (paths, resolvePath) => new Set(paths.map(resolvePath)).size === 1;
+var namesOneFile = (paths2, resolvePath) => new Set(paths2.map(resolvePath)).size === 1;
 var filePathKeysOf = (profile) => [...profile.pathInputKeys, ...CANONICAL_PATH_KEYS];
 var namesAFilePath = (profile, toolInput) => pathsNamedIn(toolInput, filePathKeysOf(profile)).length > 0;
 var withCanonicalInputKeys = (profile, toolInput) => {
@@ -673,9 +709,9 @@ var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path)
     return { tool, input: { command, ...context }, unreadable: false };
   }
   if (!PATH_TOOLS.has(tool)) return { tool, input: toolInput, unreadable: false };
-  const paths = pathsNamedIn(toolInput, filePathKeysOf(profile));
-  const [filePath] = paths;
-  if (!filePath || !namesOneFile(paths, resolvePath)) return { tool, input: toolInput, unreadable: true };
+  const paths2 = pathsNamedIn(toolInput, filePathKeysOf(profile));
+  const [filePath] = paths2;
+  if (!filePath || !namesOneFile(paths2, resolvePath)) return { tool, input: toolInput, unreadable: true };
   return { tool, input: { ...withCanonicalInputKeys(profile, toolInput), file_path: resolvePath(filePath) }, unreadable: false };
 };
 var NO_AGENT_PROMPT_REASON = "Pushary needs an answer from the phone before this can run, and this agent has no approval prompt of its own here, so nothing ran. Ask the user, then try again.";
@@ -1148,7 +1184,7 @@ var readNullableText = (value, field) => {
 var ASKED_TEXT_FIELDS = ["id", "siteId", "type", "content", "createdAt"];
 var ASKED_NULLABLE_FIELDS = ["questionType", "context", "contextPayloadSha256", "correlationId", "externalId", "sessionId", "agentType", "agentName", "machineId", "toolName", "toolTarget", "requestedByUserId"];
 var DECISION_NULLABLE_FIELDS = ["response", "responseSource", "note", "decisionOutcome", "decisionOrigin", "decidedByUserId", "decidedByActor", "riskClass", "answeredAt"];
-var isComplete = (record4, fields) => fields.every((field) => field in record4);
+var isComplete = (record5, fields) => fields.every((field) => field in record5);
 var readFields = (value, fields, read) => {
   const result = {};
   for (const field of fields) {
@@ -1160,7 +1196,7 @@ var readFields = (value, fields, read) => {
 };
 var ASKED_PAYLOAD_KEYS = /* @__PURE__ */ new Set(["event", ...ASKED_TEXT_FIELDS, ...ASKED_NULLABLE_FIELDS]);
 var DECISION_PAYLOAD_KEYS = /* @__PURE__ */ new Set(["event", "id", "autoResolved", "decisionLatencyMs", ...DECISION_NULLABLE_FIELDS]);
-var hasOnlyKeys = (value, keys2) => Object.keys(value).every((key) => keys2.has(key));
+var hasOnlyKeys = (value, keys3) => Object.keys(value).every((key) => keys3.has(key));
 var parseAskedPayload = (value) => {
   const text3 = readFields(value, ASKED_TEXT_FIELDS, readText);
   const nullable = readFields(value, ASKED_NULLABLE_FIELDS, readNullableText);
@@ -1205,7 +1241,7 @@ var parseAllOrNothing = (values, parse) => {
   }
   return parsed;
 };
-var entriesFitPage = (entries, beforeSeq) => beforeSeq === null || entries.every((entry) => entry.seq < beforeSeq);
+var entriesFitPage = (entries, beforeSeq) => beforeSeq === null || entries.every((entry2) => entry2.seq < beforeSeq);
 var parseSite = (value) => {
   if (!isPlainObject(value)) return null;
   const { siteId, siteName, beforeSeq, retentionFloor } = value;
@@ -1230,68 +1266,68 @@ var boundaryGapFindings = (entries, beforeSeq) => {
 };
 var linkFindings = (entries) => {
   const findings = [];
-  entries.forEach((entry, index) => {
+  entries.forEach((entry2, index) => {
     const previous = entries[index - 1];
     if (!previous) {
-      if (entry.seq === 1 && entry.prevHash !== AUDIT_CHAIN_GENESIS_HASH) findings.push({ kind: "genesis_mismatch", seq: entry.seq });
+      if (entry2.seq === 1 && entry2.prevHash !== AUDIT_CHAIN_GENESIS_HASH) findings.push({ kind: "genesis_mismatch", seq: entry2.seq });
       return;
     }
-    if (entry.seq !== previous.seq + 1) findings.push({ kind: "sequence_gap", afterSeq: previous.seq, seq: entry.seq });
-    if (entry.prevHash !== previous.entryHash) findings.push({ kind: "broken_link", seq: entry.seq });
+    if (entry2.seq !== previous.seq + 1) findings.push({ kind: "sequence_gap", afterSeq: previous.seq, seq: entry2.seq });
+    if (entry2.prevHash !== previous.entryHash) findings.push({ kind: "broken_link", seq: entry2.seq });
   });
   return findings;
 };
-var entryHashFindings = (entries, crypto) => entries.flatMap((entry) => crypto.sha256Hex(auditEntryMessage(entry)) === entry.entryHash ? [] : [{ kind: "entry_altered", seq: entry.seq }]);
-var payloadMatchesEntry = (payload, entry, siteId, crypto) => {
-  if (payload.id !== entry.interactionId || auditPayloadHash(payload, crypto.sha256Hex) !== entry.payloadHash) return false;
-  return payload.event === "asked" ? payload.siteId === siteId && payload.createdAt === entry.interactionCreatedAt : isFinalAuditDecision(payload) === entry.decisionFinal;
+var entryHashFindings = (entries, crypto) => entries.flatMap((entry2) => crypto.sha256Hex(auditEntryMessage(entry2)) === entry2.entryHash ? [] : [{ kind: "entry_altered", seq: entry2.seq }]);
+var payloadMatchesEntry = (payload, entry2, siteId, crypto) => {
+  if (payload.id !== entry2.interactionId || auditPayloadHash(payload, crypto.sha256Hex) !== entry2.payloadHash) return false;
+  return payload.event === "asked" ? payload.siteId === siteId && payload.createdAt === entry2.interactionCreatedAt : isFinalAuditDecision(payload) === entry2.decisionFinal;
 };
 var lastDecisionSeqByInteraction = (entries) => {
   const lastSeq = /* @__PURE__ */ new Map();
-  for (const entry of entries) {
-    if (entry.event === "decision") lastSeq.set(entry.interactionId, Math.max(entry.seq, lastSeq.get(entry.interactionId) ?? 0));
+  for (const entry2 of entries) {
+    if (entry2.event === "decision") lastSeq.set(entry2.interactionId, Math.max(entry2.seq, lastSeq.get(entry2.interactionId) ?? 0));
   }
   return lastSeq;
 };
-var goneBeforeRetentionEnded = (entry, retentionFloor) => retentionFloor === null || entry.interactionCreatedAt >= retentionFloor;
+var goneBeforeRetentionEnded = (entry2, retentionFloor) => retentionFloor === null || entry2.interactionCreatedAt >= retentionFloor;
 var payloadFindings = (site, entries, crypto) => {
   const lastDecisionSeq = lastDecisionSeqByInteraction(entries);
-  return entries.flatMap((entry) => {
-    const invalid = { kind: "invalid_status", seq: entry.seq, status: entry.payloadStatus };
-    const hasLaterDecision = entry.event === "decision" && (lastDecisionSeq.get(entry.interactionId) ?? 0) > entry.seq;
-    switch (entry.payloadStatus) {
+  return entries.flatMap((entry2) => {
+    const invalid = { kind: "invalid_status", seq: entry2.seq, status: entry2.payloadStatus };
+    const hasLaterDecision = entry2.event === "decision" && (lastDecisionSeq.get(entry2.interactionId) ?? 0) > entry2.seq;
+    switch (entry2.payloadStatus) {
       case "included":
         if (hasLaterDecision) return [invalid];
-        return entry.payload && payloadMatchesEntry(entry.payload, entry, site.siteId, crypto) ? [] : [{ kind: "entry_changed", seq: entry.seq }];
+        return entry2.payload && payloadMatchesEntry(entry2.payload, entry2, site.siteId, crypto) ? [] : [{ kind: "entry_changed", seq: entry2.seq }];
       case "changed_since_recorded":
-        if (entry.event === "asked" || hasLaterDecision) return [invalid];
-        return [{ kind: entry.decisionFinal ? "entry_changed" : "unrecorded_change", seq: entry.seq }];
+        if (entry2.event === "asked" || hasLaterDecision) return [invalid];
+        return [{ kind: entry2.decisionFinal ? "entry_changed" : "unrecorded_change", seq: entry2.seq }];
       case "superseded":
-        return entry.event === "asked" || entry.decisionFinal || !hasLaterDecision && site.beforeSeq === null ? [invalid] : [];
+        return entry2.event === "asked" || entry2.decisionFinal || !hasLaterDecision && site.beforeSeq === null ? [invalid] : [];
       case "aged_out":
-        return goneBeforeRetentionEnded(entry, site.retentionFloor) ? [{ kind: "row_missing", seq: entry.seq }] : [];
+        return goneBeforeRetentionEnded(entry2, site.retentionFloor) ? [{ kind: "row_missing", seq: entry2.seq }] : [];
     }
   });
 };
 var decisionSequenceFindings = (entries) => {
   const asked = /* @__PURE__ */ new Set();
   const decidedFinally = /* @__PURE__ */ new Set();
-  return entries.flatMap((entry) => {
-    if (entry.event === "asked") {
-      const repeated = asked.has(entry.interactionId);
-      asked.add(entry.interactionId);
-      return repeated ? [{ kind: "asked_twice", seq: entry.seq }] : [];
+  return entries.flatMap((entry2) => {
+    if (entry2.event === "asked") {
+      const repeated = asked.has(entry2.interactionId);
+      asked.add(entry2.interactionId);
+      return repeated ? [{ kind: "asked_twice", seq: entry2.seq }] : [];
     }
-    const afterFinal = decidedFinally.has(entry.interactionId);
-    if (entry.decisionFinal) decidedFinally.add(entry.interactionId);
-    return afterFinal ? [{ kind: "decision_rewritten", seq: entry.seq }] : [];
+    const afterFinal = decidedFinally.has(entry2.interactionId);
+    if (entry2.decisionFinal) decidedFinally.add(entry2.interactionId);
+    return afterFinal ? [{ kind: "decision_rewritten", seq: entry2.seq }] : [];
   });
 };
 var payloadCountsOf = (entries) => ({
-  included: entries.filter((entry) => entry.payloadStatus === "included").length,
-  aged_out: entries.filter((entry) => entry.payloadStatus === "aged_out").length,
-  superseded: entries.filter((entry) => entry.payloadStatus === "superseded").length,
-  changed_since_recorded: entries.filter((entry) => entry.payloadStatus === "changed_since_recorded").length
+  included: entries.filter((entry2) => entry2.payloadStatus === "included").length,
+  aged_out: entries.filter((entry2) => entry2.payloadStatus === "aged_out").length,
+  superseded: entries.filter((entry2) => entry2.payloadStatus === "superseded").length,
+  changed_since_recorded: entries.filter((entry2) => entry2.payloadStatus === "changed_since_recorded").length
 });
 var findingsForCheckpoint = (checkpoint, siteId, hashBySeq, crypto, pinnedKeyIds) => {
   const findings = [];
@@ -1338,7 +1374,7 @@ var knownHeadFindings = (site, hashBySeq, lastSeq, exportedAt, known) => {
 };
 var verifyAuditChainSite = (site, crypto, options) => {
   const entries = [...site.entries].sort((left, right) => left.seq - right.seq);
-  const hashBySeq = new Map(entries.map((entry) => [entry.seq, entry.entryHash]));
+  const hashBySeq = new Map(entries.map((entry2) => [entry2.seq, entry2.entryHash]));
   const firstSeq = entries[0]?.seq ?? null;
   const lastSeq = entries[entries.length - 1]?.seq ?? null;
   const checkpointResults = site.checkpoints.map((checkpoint) => ({
@@ -1763,7 +1799,6 @@ var A_SHELL_RUNNING_A_SUBSTITUTION = new RegExp(
   String.raw`${COMMAND_POSITION}${COMMAND_PREFIXES}(?:[^\s;&|()<>` + "`" + String.raw`]*/)?(?:sh|bash|zsh|dash|ksh|source|\.)(?:[ \t]+-[^\s<]*){0,8}[ \t]+(?:<[ \t]*)?[<=](?=\()`,
   "g"
 );
-var AN_EVAL_THAT_RUNS = new RegExp(String.raw`${COMMAND_POSITION}${COMMAND_PREFIXES}eval[ \t]+`, "g");
 var CASE_HEAD = /(^|[\s;&|(])case[ \t]+(?:"[^"\n]*"|'[^'\n]*'|\S+)[ \t\n]+in(?=[\s;])/g;
 var CASE_ARM_OPENING = /;[;&]{0,2}[ \t\n]*\(?[^()\s;][^()\n;]*\)[ \t\n]*/g;
 var CASE_ARM_ENDING = /;;&?|;&/g;
@@ -1826,72 +1861,10 @@ var readingWithShellFormsSpelledOut = (text3) => {
   const reading = SHELL_FORM_REWRITES.reduce((current, rewrite) => rewrite(current), text3);
   return reading === text3 ? null : reading;
 };
-var SHELLS_THAT_RUN_A_SCRIPT_ARGUMENT = /* @__PURE__ */ new Set(["sh", "bash", "zsh", "dash", "ksh"]);
-var SHORT_FLAGS_WITH_THE_COMMAND_FLAG = /^-[A-Za-z]*c[A-Za-z]*$/;
-var SHELL_LONG_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set(["--rcfile", "--init-file"]);
-var SHELL_SHORT_FLAGS_ENDING_IN_AN_OPTION_NAME = /^[-+][A-Za-z]*[oO]$/;
-var SHELL_OPTION_WORD = /^[-+]/;
-var COMMAND_SEPARATOR_INSIDE_A_WORD = /[;&|()`]/;
 var DEEPEST_NESTED_SCRIPT_READ = 3;
 var MOST_SCRIPTS_READ_FROM_ONE_COMMAND = 16;
-var programNamedBy = (word) => basenameOf(word.split(COMMAND_SEPARATOR_INSIDE_A_WORD).filter((piece) => piece !== "").pop() ?? "");
-var scriptArgumentOfAShellAt = (words, index) => {
-  if (!SHELLS_THAT_RUN_A_SCRIPT_ARGUMENT.has(programNamedBy(words[index]?.text ?? ""))) return void 0;
-  for (let next = index + 1; SHELL_OPTION_WORD.test(words[next]?.text ?? ""); next += 1) {
-    const option = words[next]?.text ?? "";
-    if (SHORT_FLAGS_WITH_THE_COMMAND_FLAG.test(option)) return words[next + 1]?.text;
-    if (SHELL_LONG_OPTIONS_WITH_A_VALUE.has(option) || SHELL_SHORT_FLAGS_ENDING_IN_AN_OPTION_NAME.test(option)) next += 1;
-  }
-  return void 0;
-};
-var scriptsOfShellsIn = (text3) => {
-  const words = shellWordsOf(text3);
-  return words === null ? [] : words.flatMap((_, index) => scriptArgumentOfAShellAt(words, index) ?? []);
-};
-var endsTheCommandAsAControlOperator = (text3, index) => {
-  const char = text3.charAt(index);
-  const before = text3.charAt(index - 1);
-  if (char === "|") return before !== ">";
-  return char === "&" && before !== ">" && before !== "<" && text3.charAt(index + 1) !== ">";
-};
-var endOfTheSimpleCommandAt = (text3, from) => {
-  let depth = 0;
-  let quote = null;
-  let inBackticks = false;
-  for (let index = from; index < text3.length; index += 1) {
-    const char = text3.charAt(index);
-    if (quote === "'") {
-      if (char === "'") quote = null;
-    } else if (char === "\\") {
-      index += 1;
-    } else if (quote === '"') {
-      if (char === '"') quote = null;
-    } else if (char === "'" || char === '"') {
-      quote = char;
-    } else if (char === "`") {
-      inBackticks = !inBackticks;
-    } else if (inBackticks) {
-      continue;
-    } else if (char === "(") {
-      depth += 1;
-    } else if (char === ")" && depth > 0) {
-      depth -= 1;
-    } else if (depth === 0 && (char === "\n" || char === ";" || char === ")" || endsTheCommandAsAControlOperator(text3, index))) {
-      return index;
-    }
-  }
-  return text3.length;
-};
-var scriptOfAnEvalEndingAt = (text3, end) => {
-  const words = shellWordsOf(text3.slice(end, endOfTheSimpleCommandAt(text3, end)));
-  if (words === null) return [];
-  const firstComment = words.findIndex((word) => word.comment);
-  return [(firstComment === -1 ? words : words.slice(0, firstComment)).map((word) => word.text).join(" ")];
-};
-var scriptsOfEvalsIn = (text3) => [...text3.matchAll(AN_EVAL_THAT_RUNS)].slice(0, MOST_SCRIPTS_READ_FROM_ONE_COMMAND + 1).flatMap((match) => scriptOfAnEvalEndingAt(text3, match.index + match[0].length));
-var scriptsDirectlyInside = (text3) => [...scriptsOfEvalsIn(text3), ...scriptsOfShellsIn(text3)];
 var READING_OF_SCRIPTS_TOO_MANY_TO_READ = ": | sh";
-var readingsOfScriptsPassedToAShell = (text3) => {
+var readingsOfNestedShellScripts = (text3, scriptsDirectlyInside) => {
   const readings = [];
   let scriptsRead = 0;
   let level = [text3];
@@ -3860,16 +3833,41 @@ var scriptACodexShellCommandRuns = (command) => {
   return script.trim().length === 0 ? null : script;
 };
 
+// ../contracts/src/codex-permission-profile.ts
+var CODEX_PERMISSION_PROFILE_METHOD = "item/permissions/requestApproval";
+var CODEX_PERMISSION_PROFILE_CHOICES = { turn: "Allow this turn", session: "Allow this session", deny: "Deny" };
+var record2 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var keys = (value, allowed) => Object.keys(value).every((key) => allowed.includes(key));
+var literalAbsolutePath = (value) => typeof value === "string" && value.length > 0 && value.length <= 4096 && /^(\/|[a-z]:[\\/])/i.test(value) && !/[\u0000-\u001f*?\[\]{}]/.test(value) && !value.split(/[\\/]/).some((part) => part === ".." || part === ".");
+var paths = (value) => value == null || Array.isArray(value) && value.length <= 32 && value.every(literalAbsolutePath);
+var entry = (value) => record2(value) && keys(value, ["path", "access"]) && (value.access === "read" || value.access === "write" || value.access === "deny") && record2(value.path) && keys(value.path, ["type", "path"]) && value.path.type === "path" && literalAbsolutePath(value.path.path);
+var isCodexPermissionProfile = (value) => {
+  if (!record2(value) || !keys(value, ["network", "fileSystem"])) return false;
+  const network = value.network;
+  if (network != null && (!record2(network) || !keys(network, ["enabled"]) || network.enabled != null && typeof network.enabled !== "boolean")) return false;
+  const files = value.fileSystem;
+  if (files == null) return true;
+  return record2(files) && keys(files, ["read", "write", "entries", "globScanMaxDepth"]) && paths(files.read) && paths(files.write) && (files.globScanMaxDepth == null || typeof files.globScanMaxDepth === "number" && Number.isSafeInteger(files.globScanMaxDepth) && files.globScanMaxDepth > 0) && (files.entries == null || Array.isArray(files.entries) && files.entries.length <= 32 && files.entries.every(entry));
+};
+var codexPermissionPaths = (profile, access) => [
+  ...profile.fileSystem?.[access] ?? [],
+  ...(profile.fileSystem?.entries ?? []).filter((entry2) => entry2.access === access).map((entry2) => entry2.path.path)
+];
+var codexPermissionProfileResponse = (permissions, answer) => ({
+  permissions: answer === CODEX_PERMISSION_PROFILE_CHOICES.turn || answer === CODEX_PERMISSION_PROFILE_CHOICES.session ? permissions : {},
+  scope: answer === CODEX_PERMISSION_PROFILE_CHOICES.session ? "session" : "turn"
+});
+
 // ../contracts/src/codex-native-approval.ts
 var CODEX_NATIVE_APPROVAL_CAPABILITY = "codex-native-approval-v1";
-var CODEX_NATIVE_APPROVAL_METHODS = ["item/commandExecution/requestApproval", "item/fileChange/requestApproval", "mcpServer/elicitation/request"];
+var CODEX_NATIVE_APPROVAL_METHODS = ["item/commandExecution/requestApproval", "item/fileChange/requestApproval", "mcpServer/elicitation/request", CODEX_PERMISSION_PROFILE_METHOD];
 var CODEX_NATIVE_APPROVAL_CHOICES = { once: "Allow once", session: "Allow this conversation", deny: "Deny" };
 var CODEX_NATIVE_APPROVAL_REPLIES = { ask: "ask", deny: "deny", native: "native", allow: "allow" };
-var record2 = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+var record3 = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
 var identifier2 = (v) => typeof v === "string" && v.length > 0 && v.length <= 200;
 var text = (v) => typeof v === "string" && v.trim().length > 0 && v.length <= 16384;
 var optionalIdentifier = (v) => v == null || identifier2(v);
-var keys = (v, allowed) => Object.keys(v).every((key) => allowed.includes(key));
+var keys2 = (v, allowed) => Object.keys(v).every((key) => allowed.includes(key));
 var isMethod = (v) => typeof v === "string" && CODEX_NATIVE_APPROVAL_METHODS.some((method) => method === v);
 var boundedJson = (value) => {
   try {
@@ -3882,12 +3880,12 @@ var BASE_KEYS = ["threadId", "turnId", "itemId", "startedAtMs", "reason"];
 var MCP_META_KEYS = ["codex_approval_kind", "codex_requires_user_input", "codex_request_type", "codex_strict_auto_review", "codex_sensitive_action", "approvals_reviewer", "persist", "source", "connector_id", "connector_name", "connector_description", "tool_name", "tool_title", "tool_description", "tool_params", "tool_params_display"];
 var MCP_FLAGS_THAT_ASK_FOR_A_PERSON = ["codex_requires_user_input", "codex_strict_auto_review", "codex_sensitive_action"];
 var COMPUTER_USE_META_KEYS = [...MCP_META_KEYS, "riskLevel", "subtitle", "tool_call_id"];
-var computerUseDisplay = (value) => Array.isArray(value) && value.length <= 16 && value.every((item) => record2(item) && keys(item, ["name", "display_name", "value"]) && text(item.name) && text(item.display_name) && text(item.value));
+var computerUseDisplay = (value) => Array.isArray(value) && value.length <= 16 && value.every((item) => record3(item) && keys2(item, ["name", "display_name", "value"]) && text(item.name) && text(item.display_name) && text(item.value));
 var isExecpolicyAmendment = (value) => Array.isArray(value) && value.length > 0 && value.length <= 128 && value.every((token) => typeof token === "string" && token.length <= 16384);
 var isCommandDecision = (value) => {
   if (typeof value === "string") return ["accept", "acceptForSession", "decline", "cancel"].includes(value);
-  if (!record2(value) || !keys(value, ["acceptWithExecpolicyAmendment"]) || !record2(value.acceptWithExecpolicyAmendment)) return false;
-  return keys(value.acceptWithExecpolicyAmendment, ["execpolicy_amendment"]) && isExecpolicyAmendment(value.acceptWithExecpolicyAmendment.execpolicy_amendment);
+  if (!record3(value) || !keys2(value, ["acceptWithExecpolicyAmendment"]) || !record3(value.acceptWithExecpolicyAmendment)) return false;
+  return keys2(value.acceptWithExecpolicyAmendment, ["execpolicy_amendment"]) && isExecpolicyAmendment(value.acceptWithExecpolicyAmendment.execpolicy_amendment);
 };
 var FILE_CHANGE_KINDS = ["add", "delete", "update"];
 var FILE_CHANGE_VERB = { add: "adding", delete: "deleting", update: "editing" };
@@ -3907,7 +3905,7 @@ var withCodexReason = (detail, reason) => text(reason) ? `${detail}
 
 Codex's reason: ${redactSecrets(reason)}` : detail;
 var parseCodexNativeApproval = (value) => {
-  if (!record2(value) || !keys(value, ["method", "params", "changes"]) || !isMethod(value.method) || !record2(value.params) || !boundedJson(value)) return null;
+  if (!record3(value) || !keys2(value, ["method", "params", "changes"]) || !isMethod(value.method) || !record3(value.params) || !boundedJson(value)) return null;
   const p = value.params;
   if (!identifier2(p.threadId) || !optionalIdentifier(p.turnId) || !optionalIdentifier(p.itemId)) return null;
   const request = { method: value.method, params: p, ...Array.isArray(value.changes) ? { changes: value.changes } : {} };
@@ -3922,9 +3920,9 @@ var parseCodexNativeApproval = (value) => {
   };
   if (value.method === "mcpServer/elicitation/request") {
     const meta = p._meta;
-    const computerUse = record2(meta) && meta.connector_id === "computer-use";
-    if (value.changes !== void 0 || !keys(p, ["threadId", "turnId", "serverName", "mode", "message", "requestedSchema", "_meta"]) || !(p.mode === "form" || computerUse && (p.mode === "openai/form" || p.mode === "openaiForm")) || !identifier2(p.serverName) || !text(p.message) || p.message.length > 500 || !record2(p.requestedSchema) || !keys(p.requestedSchema, ["type", "properties", "required", "$schema"]) || p.requestedSchema.type !== "object" || !record2(p.requestedSchema.properties) || Object.keys(p.requestedSchema.properties).length !== 0 || p.requestedSchema.required != null && (!Array.isArray(p.requestedSchema.required) || p.requestedSchema.required.length !== 0)) return null;
-    if (!record2(meta) || !keys(meta, computerUse ? COMPUTER_USE_META_KEYS : MCP_META_KEYS) || meta.codex_approval_kind !== "mcp_tool_call" || !identifier2(meta.tool_name) || !record2(meta.tool_params) || meta.tool_params_display != null && !(computerUse ? computerUseDisplay(meta.tool_params_display) : record2(meta.tool_params_display))) return null;
+    const computerUse = record3(meta) && meta.connector_id === "computer-use";
+    if (value.changes !== void 0 || !keys2(p, ["threadId", "turnId", "serverName", "mode", "message", "requestedSchema", "_meta"]) || !(p.mode === "form" || computerUse && (p.mode === "openai/form" || p.mode === "openaiForm")) || !identifier2(p.serverName) || !text(p.message) || p.message.length > 500 || !record3(p.requestedSchema) || !keys2(p.requestedSchema, ["type", "properties", "required", "$schema"]) || p.requestedSchema.type !== "object" || !record3(p.requestedSchema.properties) || Object.keys(p.requestedSchema.properties).length !== 0 || p.requestedSchema.required != null && (!Array.isArray(p.requestedSchema.required) || p.requestedSchema.required.length !== 0)) return null;
+    if (!record3(meta) || !keys2(meta, computerUse ? COMPUTER_USE_META_KEYS : MCP_META_KEYS) || meta.codex_approval_kind !== "mcp_tool_call" || !identifier2(meta.tool_name) || !record3(meta.tool_params) || meta.tool_params_display != null && !(computerUse ? computerUseDisplay(meta.tool_params_display) : record3(meta.tool_params_display))) return null;
     if (computerUse && (meta.riskLevel !== "low" && meta.riskLevel !== "high" || meta.subtitle != null && !text(meta.subtitle) || !optionalIdentifier(meta.tool_call_id))) return null;
     if (MCP_FLAGS_THAT_ASK_FOR_A_PERSON.some((key) => meta[key] != null && typeof meta[key] !== "boolean")) return null;
     if (meta.approvals_reviewer != null && meta.approvals_reviewer !== "user") return null;
@@ -3956,8 +3954,23 @@ var parseCodexNativeApproval = (value) => {
     };
   }
   if (!identifier2(p.turnId) || !identifier2(p.itemId) || !Number.isSafeInteger(p.startedAtMs) || p.reason != null && !text(p.reason)) return null;
+  if (value.method === CODEX_PERMISSION_PROFILE_METHOD) {
+    if (value.changes !== void 0 || !keys2(p, [...BASE_KEYS, "cwd", "environmentId", "permissions"]) || !text(p.cwd) || p.environmentId != null && p.environmentId !== "local" || !isCodexPermissionProfile(p.permissions)) return null;
+    return {
+      ...base,
+      permissionProfile: p.permissions,
+      codexAsksForAPerson: true,
+      cwd: p.cwd,
+      toolName: "request_permissions",
+      toolInputs: [{ permissions: p.permissions }],
+      scopePaths: [...codexPermissionPaths(p.permissions, "read"), ...codexPermissionPaths(p.permissions, "write")],
+      question: "Allow these permissions for this turn or session?",
+      detail: withCodexReason(JSON.stringify(p.permissions, null, 2), p.reason),
+      options: [CODEX_PERMISSION_PROFILE_CHOICES.turn, CODEX_PERMISSION_PROFILE_CHOICES.session, CODEX_PERMISSION_PROFILE_CHOICES.deny]
+    };
+  }
   if (value.method === "item/commandExecution/requestApproval") {
-    if (value.changes !== void 0 || !keys(p, [...BASE_KEYS, "approvalId", "kind", "environmentId", "command", "cwd", "commandActions", "networkApprovalContext", "proposedExecpolicyAmendment", "proposedNetworkPolicyAmendments", "availableDecisions"]) || !optionalIdentifier(p.approvalId) || p.kind != null && p.kind !== "command" || p.environmentId != null && p.environmentId !== "local" || p.networkApprovalContext != null || p.proposedNetworkPolicyAmendments != null || p.proposedExecpolicyAmendment != null && !isExecpolicyAmendment(p.proposedExecpolicyAmendment) || !text(p.command) || !text(p.cwd)) return null;
+    if (value.changes !== void 0 || !keys2(p, [...BASE_KEYS, "approvalId", "kind", "environmentId", "command", "cwd", "commandActions", "networkApprovalContext", "proposedExecpolicyAmendment", "proposedNetworkPolicyAmendments", "availableDecisions"]) || !optionalIdentifier(p.approvalId) || p.kind != null && p.kind !== "command" || p.environmentId != null && p.environmentId !== "local" || p.networkApprovalContext != null || p.proposedNetworkPolicyAmendments != null || p.proposedExecpolicyAmendment != null && !isExecpolicyAmendment(p.proposedExecpolicyAmendment) || !text(p.command) || !text(p.cwd)) return null;
     const decisions = p.availableDecisions ?? ["accept", "decline", "cancel"];
     if (!Array.isArray(decisions) || !decisions.includes("accept") || !decisions.some((v) => v === "decline" || v === "cancel") || !decisions.every(isCommandDecision)) return null;
     const command = scriptACodexShellCommandRuns(p.command) ?? p.command;
@@ -3973,24 +3986,25 @@ Directory: ${redactSecrets(p.cwd)}`, p.reason),
       negativeDecision: decisions.includes("decline") ? "decline" : "cancel"
     };
   }
-  if (!keys(p, [...BASE_KEYS, "grantRoot"]) || p.grantRoot != null || !Array.isArray(value.changes) || value.changes.length === 0 || value.changes.length > 32) return null;
+  if (!keys2(p, [...BASE_KEYS, "grantRoot"]) || p.grantRoot != null || !Array.isArray(value.changes) || value.changes.length === 0 || value.changes.length > 32) return null;
   const changes = [];
   for (const change of value.changes) {
-    if (!record2(change) || !keys(change, ["path", "kind", "diff"]) || !text(change.path) || typeof change.diff !== "string" || !record2(change.kind) || !keys(change.kind, ["type", "move_path"]) || !isFileChangeKind(change.kind.type) || change.kind.move_path != null) return null;
+    if (!record3(change) || !keys2(change, ["path", "kind", "diff"]) || !text(change.path) || typeof change.diff !== "string" || !record3(change.kind) || !keys2(change.kind, ["type", "move_path"]) || !isFileChangeKind(change.kind.type) || change.kind.move_path != null) return null;
     changes.push({ kind: change.kind.type, path: change.path, diff: change.diff });
   }
-  const paths = changes.map((change) => change.path);
+  const paths2 = changes.map((change) => change.path);
   return {
     ...base,
     toolName: "Edit",
-    toolInputs: paths.map((file_path) => ({ file_path })),
-    scopePaths: paths,
+    toolInputs: paths2.map((file_path) => ({ file_path })),
+    scopePaths: paths2,
     question: fileChangeQuestion(changes),
     detail: withCodexReason(changes.map((change) => `${redactSecrets(labelledFileChange(change))}
 ${redactSecretsDeep(change.diff)}`).join("\n\n"), p.reason)
   };
 };
 var codexNativeApprovalResponse = (approval, answer) => {
+  if (approval.permissionProfile) return codexPermissionProfileResponse(approval.permissionProfile, answer);
   const accepted = approval.options.includes(answer) && (answer === CODEX_NATIVE_APPROVAL_CHOICES.once || answer === CODEX_NATIVE_APPROVAL_CHOICES.session);
   if (approval.request.method === "mcpServer/elicitation/request") return {
     action: accepted ? "accept" : "decline",
@@ -4014,10 +4028,16 @@ var compressTranscriptRecord = (raw, deflateRaw) => {
   if (raw.length > TRANSCRIPT_RECORD_MAX_INFLATED_BYTES) return raw;
   const deflated = deflateRaw(raw);
   if (!compressionShrinks(raw, deflated)) return raw;
-  const record4 = new Uint8Array(deflated.length + 1);
-  record4[0] = COMPRESSED_TRANSCRIPT_RECORD_MARKER;
-  record4.set(deflated, 1);
-  return record4;
+  const record5 = new Uint8Array(deflated.length + 1);
+  record5[0] = COMPRESSED_TRANSCRIPT_RECORD_MARKER;
+  record5.set(deflated, 1);
+  return record5;
+};
+
+// ../contracts/src/spawn-delivery.ts
+var SPAWN_RECOVERY = {
+  receiptRetentionMs: 7 * 24 * 60 * 60 * 1e3,
+  retrySendWindowMs: 60 * 60 * 1e3
 };
 
 // ../contracts/src/claude-inbox.ts
@@ -4034,11 +4054,11 @@ var CLAUDE_INBOX = {
   sender: "pushary",
   carrier: "native"
 };
-var record3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var record4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var text2 = (value) => typeof value === "string" && value.length > 0;
 var sessionIdPattern = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var parseClaudeInboxSession = (value, platform = "darwin") => {
-  if (!record3(value) || !Number.isSafeInteger(value.pid) || typeof value.pid !== "number" || value.pid <= 0 || !text2(value.sessionId) || !sessionIdPattern.test(value.sessionId) || !text2(value.cwd) || !text2(value.procStart) || platform === "linux" && !text2(value.pidDomain) || !text2(value.messagingSocketPath) || value.peerProtocol !== CLAUDE_INBOX.protocol || !text2(value.version) || !supportsClaudeInbox(value.version, platform))
+  if (!record4(value) || !Number.isSafeInteger(value.pid) || typeof value.pid !== "number" || value.pid <= 0 || !text2(value.sessionId) || !sessionIdPattern.test(value.sessionId) || !text2(value.cwd) || !text2(value.procStart) || platform === "linux" && !text2(value.pidDomain) || !text2(value.messagingSocketPath) || value.peerProtocol !== CLAUDE_INBOX.protocol || !text2(value.version) || !supportsClaudeInbox(value.version, platform))
     return null;
   return {
     pid: value.pid,
@@ -4059,19 +4079,19 @@ var claudeInboxAction = (progress) => {
   }
   return progress.attempted ? "observe" /* observe */ : "submit" /* submit */;
 };
-var isClaudeInboxReceipt = (value, sessionId, commandId) => record3(value) && value.type === "user" && value.sessionId === sessionId && value.uuid === commandId && record3(value.origin) && value.origin.kind === "peer" && value.origin.msg_id === commandId;
+var isClaudeInboxReceipt = (value, sessionId, commandId) => record4(value) && value.type === "user" && value.sessionId === sessionId && value.uuid === commandId && record4(value.origin) && value.origin.kind === "peer" && value.origin.msg_id === commandId;
 var CLAUDE_INBOX_MAX_SESSIONS = 128;
 var parseClaudeInboxCommand = (value) => {
-  if (!record3(value) || !text2(value.id) || !sessionIdPattern.test(value.id) || !text2(value.text) || typeof value.expiresAtMs !== "number" || !Number.isSafeInteger(value.expiresAtMs))
+  if (!record4(value) || !text2(value.id) || !sessionIdPattern.test(value.id) || !text2(value.text) || typeof value.expiresAtMs !== "number" || !Number.isSafeInteger(value.expiresAtMs))
     return null;
   return { id: value.id, text: value.text, expiresAtMs: value.expiresAtMs };
 };
 var parseClaudeInboxPoll = (value) => {
-  if (!record3(value) || value.protocol !== CLAUDE_INBOX.protocol || !Array.isArray(value.sessionIds) || value.sessionIds.length > CLAUDE_INBOX_MAX_SESSIONS || !value.sessionIds.every((id) => nativeIdentifier(id)))
+  if (!record4(value) || value.protocol !== CLAUDE_INBOX.protocol || !Array.isArray(value.sessionIds) || value.sessionIds.length > CLAUDE_INBOX_MAX_SESSIONS || !value.sessionIds.every((id) => nativeIdentifier(id)))
     return null;
   return value.sessionIds;
 };
-var parseClaudeInboxClaim = (value) => record3(value) && value.protocol === CLAUDE_INBOX.protocol ? parseClaudeInboxCommand(value.command) : null;
+var parseClaudeInboxClaim = (value) => record4(value) && value.protocol === CLAUDE_INBOX.protocol ? parseClaudeInboxCommand(value.command) : null;
 var CLAUDE_INBOX_RECEIVER = {
   pollMs: 3e3,
   heartbeatMs: 6e4,
@@ -4388,13 +4408,7 @@ var patternToolName = (pattern) => {
   const open = argumentOpenIndex(pattern);
   return open === -1 ? pattern : pattern.slice(0, open);
 };
-var matchToolPattern = (pattern, toolName, arg, intent = PATTERN_INTENT.grant) => {
-  const open = argumentOpenIndex(pattern);
-  if (open === -1) {
-    return pattern === toolName ? "tool" : "none";
-  }
-  if (patternToolName(pattern) !== toolName || arg === void 0) return "none";
-  const inner = pattern.slice(open + 1, -1);
+var rankOfArgument = (toolName, inner, arg, intent) => {
   if (inner.endsWith(":*")) {
     const prefix = inner.slice(0, -2);
     return rankWholeOrSegments(toolName, arg, intent, (segment) => segment.startsWith(prefix));
@@ -4407,6 +4421,17 @@ var matchToolPattern = (pattern, toolName, arg, intent = PATTERN_INTENT.grant) =
   }
   return arg === inner ? "exact" : "none";
 };
+var bestRankOf = (ranks) => ranks.reduce((best, rank) => matchRankWeight(rank) > matchRankWeight(best) ? rank : best, "none");
+var argumentSpellingsFor = (toolName, arg, intent) => toolName in POLICY_PATH_KEYS ? pathSpellingsFor(arg, intent) : [arg];
+var matchToolPattern = (pattern, toolName, arg, intent = PATTERN_INTENT.grant) => {
+  const open = argumentOpenIndex(pattern);
+  if (open === -1) {
+    return pattern === toolName ? "tool" : "none";
+  }
+  if (patternToolName(pattern) !== toolName || arg === void 0) return "none";
+  const inner = pattern.slice(open + 1, -1);
+  return bestRankOf(argumentSpellingsFor(toolName, arg, intent).map((spelling) => rankOfArgument(toolName, inner, spelling, intent)));
+};
 var POLICY_PATH_KEYS = {
   Read: "file_path",
   Edit: "file_path",
@@ -4426,7 +4451,8 @@ var extractPolicyArg = (toolName, toolInput) => {
   return typeof value === "string" ? value : void 0;
 };
 var normalizeSeparators = (value) => value.replace(/\\/g, "/");
-var isAbsolutePath = (value) => value.startsWith("/") || /^[A-Za-z]:\//.test(value);
+var DRIVE_ROOT = /^[A-Za-z]:\//;
+var isAbsolutePath = (value) => value.startsWith("/") || DRIVE_ROOT.test(value);
 var relativeToCwd = (path, cwd) => {
   const base = normalizeSeparators(cwd).replace(/\/+$/, "");
   if (!base) return void 0;
@@ -4435,10 +4461,86 @@ var relativeToCwd = (path, cwd) => {
   const rest = path.slice(prefix.length);
   return rest.length > 0 ? rest : void 0;
 };
-var policyArgForms = (toolName, toolInput, cwd) => {
-  const raw = extractPolicyArg(toolName, toolInput);
-  if (raw === void 0) return [];
-  if (!(toolName in POLICY_PATH_KEYS)) return [raw];
+var CURRENT_SEGMENT = ".";
+var PARENT_SEGMENT = "..";
+var BACKSLASH2 = "\\";
+var NETWORK_SHARE_PREFIX = "//";
+var DOT_SEGMENT = /(?:^|[\\/])\.{1,2}(?=[\\/]|$)/;
+var WINDOWS_PATH = /^(?:[A-Za-z]:[\\/]|\\\\)/;
+var FIRST_SEGMENT_WITH_AN_UNKNOWN_BASE = /^(?:~|\$|%|[A-Za-z]:)/;
+var hasDotSegment = (path) => DOT_SEGMENT.test(path);
+var PATH_SPELLINGS_CACHE_MAX = 64;
+var anchorOf = (path) => {
+  const drive = DRIVE_ROOT.exec(path)?.[0];
+  if (drive !== void 0) return { base: "root", prefix: drive, segments: path.slice(drive.length).split("/") };
+  if (path.startsWith("/")) return { base: "root", prefix: "/", segments: path.slice(1).split("/") };
+  const [first = "", ...rest] = path.split("/");
+  return FIRST_SEGMENT_WITH_AN_UNKNOWN_BASE.test(first) ? { base: "unknown", prefix: `${first}/`, segments: rest } : { base: "relative", prefix: "", segments: path.split("/") };
+};
+var joinedToDirectory = (directory, path) => directory.endsWith("/") ? `${directory}${path}` : `${directory}/${path}`;
+var standingOf = (base, climbs) => {
+  if (climbs === 0) return "placed";
+  return base === "relative" ? "above_its_start" : "unplaceable";
+};
+var readingOf = (path, directory) => {
+  if (path.startsWith(NETWORK_SHARE_PREFIX)) return { spelling: path, standing: "unplaceable" };
+  const anchor = anchorOf(path);
+  if (anchor.base === "relative" && directory !== void 0) return readingOf(joinedToDirectory(directory, path), void 0);
+  const kept = [];
+  let climbs = 0;
+  for (const segment of anchor.segments) {
+    if (segment === "" || segment === CURRENT_SEGMENT) continue;
+    if (segment !== PARENT_SEGMENT) kept.push(segment);
+    else if (kept.length > 0) kept.pop();
+    else if (anchor.base !== "root") climbs += 1;
+  }
+  const spelling = `${anchor.prefix}${[...Array(climbs).fill(PARENT_SEGMENT), ...kept].join("/")}`;
+  return { spelling: spelling.length > 0 ? spelling : CURRENT_SEGMENT, standing: standingOf(anchor.base, climbs) };
+};
+var hasOneSeparatorReading = (path, directory) => !path.includes(BACKSLASH2) || WINDOWS_PATH.test(path) || directory !== void 0 && DRIVE_ROOT.test(directory);
+var separatorReadingsOf = (path, directory) => hasOneSeparatorReading(path, directory) ? [normalizeSeparators(path)] : [path, normalizeSeparators(path)];
+var spellingsOfReadings = (readings) => [...new Set(readings.map((reading) => reading.spelling))];
+var isPlaced = (reading) => reading.standing === "placed";
+var isUnplaceable = (reading) => reading.standing === "unplaceable";
+var locatePath = (path, directory) => {
+  const readings = separatorReadingsOf(path, directory).map((reading) => readingOf(reading, directory));
+  const [only, ...others] = spellingsOfReadings(readings);
+  return only !== void 0 && others.length === 0 && readings.every(isPlaced) ? { kind: "located", path: only } : { kind: "unlocated", readings };
+};
+var isTooLongToMatch = (path) => path.length > GLOB_MAX_ARG_LENGTH;
+var locatedDirectoryOf = (cwd) => {
+  if (!cwd) return void 0;
+  const location = locatePath(cwd);
+  return location.kind === "located" && isAbsolutePath(location.path) ? location.path : void 0;
+};
+var unlocatedPathSpellings = (path, readings) => [.../* @__PURE__ */ new Set([path, normalizeSeparators(path), ...spellingsOfReadings(readings)])];
+var matchSpellingsOf = (path) => {
+  const location = locatePath(path);
+  return location.kind === "located" ? { grant: [location.path], restrict: [location.path] } : { grant: [], restrict: unlocatedPathSpellings(path, location.readings) };
+};
+var pathSpellingsCache = /* @__PURE__ */ new Map();
+var cachedMatchSpellingsOf = (path) => {
+  const cached = pathSpellingsCache.get(path);
+  if (cached !== void 0) return cached;
+  const spellings = matchSpellingsOf(path);
+  if (pathSpellingsCache.size >= PATH_SPELLINGS_CACHE_MAX) pathSpellingsCache.clear();
+  pathSpellingsCache.set(path, spellings);
+  return spellings;
+};
+var pathSpellingsFor = (path, intent) => {
+  if (isTooLongToMatch(path)) return intent === PATTERN_INTENT.restrict ? [path] : [];
+  if (!hasDotSegment(path)) return [path];
+  const spellings = cachedMatchSpellingsOf(path);
+  return intent === PATTERN_INTENT.restrict ? spellings.restrict : spellings.grant;
+};
+var scopeSpellingsOf = (path) => {
+  if (!hasDotSegment(path)) return [path];
+  if (isTooLongToMatch(path)) return void 0;
+  const location = locatePath(path);
+  if (location.kind === "located") return [location.path];
+  return location.readings.some(isUnplaceable) ? void 0 : spellingsOfReadings(location.readings);
+};
+var writtenPathForms = (raw, cwd) => {
   const forms = [raw];
   const normalized = normalizeSeparators(raw);
   if (normalized !== raw) forms.push(normalized);
@@ -4448,14 +4550,24 @@ var policyArgForms = (toolName, toolInput, cwd) => {
   }
   return forms;
 };
+var locatedPathForms = (path, directory) => {
+  const relative = directory !== void 0 && isAbsolutePath(path) ? relativeToCwd(path, directory) : void 0;
+  return relative === void 0 ? [path] : [path, relative];
+};
+var resolvedPathForms = (raw, cwd) => {
+  const directory = locatedDirectoryOf(cwd);
+  const location = locatePath(raw, directory);
+  return location.kind === "located" ? locatedPathForms(location.path, directory) : [raw];
+};
+var policyArgForms = (toolName, toolInput, cwd) => {
+  const raw = extractPolicyArg(toolName, toolInput);
+  if (raw === void 0) return [];
+  if (!(toolName in POLICY_PATH_KEYS)) return [raw];
+  return !isTooLongToMatch(raw) && hasDotSegment(raw) ? resolvedPathForms(raw, cwd) : writtenPathForms(raw, cwd);
+};
 var matchToolPatternAny = (pattern, toolName, args, intent = PATTERN_INTENT.grant) => {
   if (args.length === 0) return matchToolPattern(pattern, toolName);
-  let best = "none";
-  for (const arg of args) {
-    const rank = matchToolPattern(pattern, toolName, arg, intent);
-    if (matchRankWeight(rank) > matchRankWeight(best)) best = rank;
-  }
-  return best;
+  return bestRankOf(args.map((arg) => matchToolPattern(pattern, toolName, arg, intent)));
 };
 var SAFE_SHELL_COMMANDS = /* @__PURE__ */ new Set([
   "ls",
@@ -6811,9 +6923,17 @@ var substitutionFedTo = (pieces, index) => {
   const next = pieces[index + 1];
   return next !== void 0 && SUBSTITUTION_OPENERS.has(next.before) ? next.text : null;
 };
+var withoutOutputRedirectionTargets = (text3) => {
+  const visible = shellVisibleText(text3);
+  const removeVisibleRedirection = (match, _target, offset) => {
+    const operator = offset + match.search(REDIRECTION_OPERATOR_CHARACTER);
+    return visible === null || REDIRECTION_OPERATOR_CHARACTER.test(visible.charAt(operator)) ? " " : match;
+  };
+  return text3.replace(OUTPUT_REDIRECTION, removeVisibleRedirection);
+};
 var roughSegmentsOf = (command) => {
   const { text: text3, bodies } = withHeredocBodiesSetAside(commandForReading(command));
-  const pieces = roughPiecesOf(text3.replace(INPUT_REDIRECTION, ` ${REDIRECTED_INPUT_MARK} `).replace(OUTPUT_REDIRECTION, " "));
+  const pieces = roughPiecesOf(withoutOutputRedirectionTargets(text3.replace(INPUT_REDIRECTION, ` ${REDIRECTED_INPUT_MARK} `)));
   let heredocsSeen = 0;
   return pieces.map((piece, index) => {
     const heredocCount = occurrencesOf(piece.text, HEREDOC_MARK);
@@ -7385,6 +7505,20 @@ var runnerReadingOf = (innermost) => {
   const commands = [.../* @__PURE__ */ new Set([...fromScript, ...named.map(verbatimInvocationText), ...afterEndOfOptions.map(verbatimInvocationText)])];
   return commands.length === 0 ? NO_INLINE_SCRIPT : { kind: "readable", scripts: commands };
 };
+var scriptsOfExecutablePiece = (piece) => {
+  const invocation = innermostInvocation(invocationOfRoughPiece(piece.text));
+  const scripts = inlineScriptsOf(invocation, []);
+  const runner = runnerReadingOf(invocation);
+  return [
+    ...scripts.kind === "readable" ? scripts.scripts : [],
+    ...runner.kind === "readable" ? runner.scripts : []
+  ];
+};
+var scriptsExecutedBy = (command) => {
+  const readable = readingWithoutCommentsOrAnsiEscapes(command) ?? command;
+  return roughPiecesOf(withoutOutputRedirectionTargets(readable)).flatMap(scriptsOfExecutablePiece);
+};
+var readingsOfScriptsPassedToAShell = (command) => readingsOfNestedShellScripts(command, scriptsExecutedBy);
 var MAX_SPELLED_FORMS = 4096;
 var markTruncated = (accumulator) => {
   accumulator.hidesWhatItRuns = true;
@@ -8399,17 +8533,16 @@ var matchesGlobPath = (glob, path) => {
   return compiled ? matchGlobTokens(compiled, path) : false;
 };
 var SCOPE_PATH_MAX_LENGTH = 200;
+var allowedPathsCover = (allowedPaths, path) => scopeSpellingsOf(path)?.every((spelling) => allowedPaths.some((rule) => matchesGlobPath(rule, spelling))) ?? false;
 var evaluateScope = (contract, path) => {
   if (!contract) return { outcome: "no_contract" };
   if (typeof path !== "string" || path.length === 0) return { outcome: "in_scope" };
+  const offLimitsSpellings = pathSpellingsFor(path, PATTERN_INTENT.restrict);
   for (const rule of contract.offLimitsPaths) {
-    if (matchesGlobPath(rule, path)) return { outcome: "off_limits", path, rule };
+    if (offLimitsSpellings.some((spelling) => matchesGlobPath(rule, spelling))) return { outcome: "off_limits", path, rule };
   }
   if (contract.allowedPaths.length === 0) return { outcome: "in_scope" };
-  for (const rule of contract.allowedPaths) {
-    if (matchesGlobPath(rule, path)) return { outcome: "in_scope" };
-  }
-  return { outcome: "out_of_scope", path };
+  return allowedPathsCover(contract.allowedPaths, path) ? { outcome: "in_scope" } : { outcome: "out_of_scope", path };
 };
 var scopeRequiresHuman = (verdict) => verdict.outcome === "out_of_scope" || verdict.outcome === "off_limits";
 var widenablePath = (path) => path.length > 0 && path.length <= SCOPE_PATH_MAX_LENGTH ? path : void 0;
@@ -8622,10 +8755,10 @@ var namesOneToolAfterPrefix = (toolName, prefix) => {
   return tool.length > 0 && !tool.includes(SERVER_AND_TOOL_SEPARATOR);
 };
 var isPusharyConnectorTool = (toolName) => PUSHARY_CONNECTOR_TOOL_PREFIXES.some((prefix) => namesOneToolAfterPrefix(toolName, prefix));
-var strictestScopeVerdict = (scope, paths) => {
-  if (paths.length === 0) return evaluateScope(scope, void 0);
+var strictestScopeVerdict = (scope, paths2) => {
+  if (paths2.length === 0) return evaluateScope(scope, void 0);
   let worst = { outcome: "in_scope" };
-  for (const path of paths) {
+  for (const path of paths2) {
     const verdict = evaluateScope(scope, path);
     if (verdict.outcome === "off_limits") return verdict;
     if (verdict.outcome === "out_of_scope") worst = verdict;
@@ -8704,8 +8837,8 @@ var isBlockedActionRequest = (request) => isBlockedActionEvent(request) && block
 var canonicalJsonText = (value) => {
   if (Array.isArray(value)) return `[${value.map(canonicalJsonText).join(",")}]`;
   if (value !== null && typeof value === "object") {
-    const record4 = value;
-    return `{${Object.keys(record4).filter((key) => record4[key] !== void 0).sort().map((key) => `${JSON.stringify(key)}:${canonicalJsonText(record4[key])}`).join(",")}}`;
+    const record5 = value;
+    return `{${Object.keys(record5).filter((key) => record5[key] !== void 0).sort().map((key) => `${JSON.stringify(key)}:${canonicalJsonText(record5[key])}`).join(",")}}`;
   }
   return JSON.stringify(value) ?? "null";
 };
@@ -8908,7 +9041,10 @@ var runsACommandThatNeedsAPerson = ({ toolName, toolInputs }) => SHELL_DIALECT_B
   const command = extractPolicyArg(toolName, toolInput);
   return command !== void 0 && (commandNeedsAPerson(toolName, command) || commandWritesThroughARemoteApi(command));
 });
-var namesASecretOrWorkflowFile = (path) => SECRET_FILE_NAME.test(basenameOf(path)) || CI_WORKFLOW_FILE.test(normalizeSeparators(path));
+var namesASecretOrWorkflowFile = (path) => {
+  const written = withoutDotSegments(normalizeSeparators(path));
+  return SECRET_FILE_NAME.test(basenameOf(written)) || CI_WORKFLOW_FILE.test(written);
+};
 var fileEditNeedsAPerson = (toolName, path) => FILE_EDIT_TOOLS.has(toolName) && namesASecretOrWorkflowFile(path);
 var fileEditNeedsAPersonWithPermissionsOff = (toolName, path) => FILE_EDIT_TOOLS.has(toolName) && pathNeedsAPersonToChange(path);
 var editsAFileThatNeedsAPerson = ({ toolName, toolInputs }) => toolInputs.some((toolInput) => {
@@ -9354,11 +9490,11 @@ var elicitationEnum = (property) => {
   return members.length === property.enum.length && members.length >= ELICITATION_MIN_OPTIONS ? members : null;
 };
 var readElicitationFields = (schema) => {
-  const record4 = elicitationRecord(schema);
-  const properties = elicitationRecord(record4?.properties);
-  if (!properties || record4?.type !== "object") return null;
-  if (Object.keys(record4).some((key) => !["type", "properties", "required", "$schema"].includes(key))) return null;
-  if (record4.required !== void 0 && (!Array.isArray(record4.required) || !record4.required.every((name) => typeof name === "string" && Object.hasOwn(properties, name)))) return null;
+  const record5 = elicitationRecord(schema);
+  const properties = elicitationRecord(record5?.properties);
+  if (!properties || record5?.type !== "object") return null;
+  if (Object.keys(record5).some((key) => !["type", "properties", "required", "$schema"].includes(key))) return null;
+  if (record5.required !== void 0 && (!Array.isArray(record5.required) || !record5.required.every((name) => typeof name === "string" && Object.hasOwn(properties, name)))) return null;
   const entries = Object.entries(properties);
   if (entries.length === 0) return null;
   const fields = [];
@@ -9528,6 +9664,14 @@ export {
   isCodexQuestionTool,
   parseCodexQuestions,
   codexQuestionAnswerReason,
+  SPAWN_CAPABILITY,
+  CLAUDE_BRIDGE_CAPABILITY,
+  CLAUDE_RESUME_CAPABILITY,
+  CODEX_BRIDGE_CAPABILITY,
+  CODEX_RESUME_CAPABILITY,
+  GEMINI_BRIDGE_CAPABILITY,
+  GEMINI_RESUME_CAPABILITY,
+  sessionProvidersAdvertisedBy,
   CLAUDE_CONNECTOR_URL,
   CLAUDE_CONNECTOR_GUIDE,
   COWORK_CONNECTOR_LIMIT,