pushary 1.9.139 → 1.9.140

package/dist/{chunk-KQVURVAP.js → chunk-QCIZDJSU.js}

@@ -118,9 +118,9 @@ var isAgentQuestionSet = (value) => {
     const labels = /* @__PURE__ */ new Set();
     for (const option of question.options) {
       if (!option || typeof option !== "object" || Array.isArray(option)) return false;
-      const record4 = option;
-      const label = record4.label;
-      if (typeof label !== "string" || label.length === 0 || labels.has(label) || record4.description !== void 0 && typeof record4.description !== "string") return false;
+      const record5 = option;
+      const label = record5.label;
+      if (typeof label !== "string" || label.length === 0 || labels.has(label) || record5.description !== void 0 && typeof record5.description !== "string") return false;
       labels.add(label);
     }
     questions.add(question.question);
@@ -191,6 +191,42 @@ var codexQuestionAnswerReason = (answers) => {
   return `${CODEX_QUESTION_ANSWERED_IN_PUSHARY}. ${answered}. ${CODEX_QUESTION_CONTINUE}`;
 };
 
+// ../contracts/src/session-runtime.ts
+var SPAWN_CAPABILITY = "spawn";
+var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";
+var CLAUDE_RESUME_CAPABILITY = "claude-resume";
+var CODEX_BRIDGE_CAPABILITY = "codex-bridge";
+var CODEX_RESUME_CAPABILITY = "codex-resume";
+var GEMINI_BRIDGE_CAPABILITY = "gemini-bridge";
+var GEMINI_RESUME_CAPABILITY = "gemini-resume";
+var SESSION_RUNTIMES = {
+  claude: {
+    provider: "claude",
+    label: "Claude",
+    protocol: "claude-stream-json",
+    bridgeCapability: CLAUDE_BRIDGE_CAPABILITY,
+    resumeCapability: CLAUDE_RESUME_CAPABILITY,
+    phoneResume: false
+  },
+  codex: {
+    provider: "codex",
+    label: "Codex",
+    protocol: "codex-app-server",
+    bridgeCapability: CODEX_BRIDGE_CAPABILITY,
+    resumeCapability: CODEX_RESUME_CAPABILITY,
+    phoneResume: true
+  },
+  gemini: {
+    provider: "gemini",
+    label: "Gemini",
+    protocol: "gemini-stream-json",
+    bridgeCapability: GEMINI_BRIDGE_CAPABILITY,
+    resumeCapability: GEMINI_RESUME_CAPABILITY,
+    phoneResume: true
+  }
+};
+var sessionProvidersAdvertisedBy = (capabilities) => Object.values(SESSION_RUNTIMES).filter((runtime) => capabilities.includes(runtime.bridgeCapability)).map((runtime) => runtime.provider);
+
 // ../contracts/src/claude-connector.ts
 var CLAUDE_DIRECTORY_URL = "https://claude.ai/directory/pushary";
 var CLAUDE_CONNECTOR_URL = "https://pushary.com/api/mcp/mcp";
@@ -236,7 +272,7 @@ var defaults = {
   policyAgent: null,
   repoAware: false,
   disconnectable: false,
-  managedProvider: false,
+  sessionRuntime: null,
   bridged: false,
   enforcement: "cooperative",
   connectVia: "Plain MCP",
@@ -259,7 +295,7 @@ var AGENTS = {
     policyAgent: "claude_code",
     repoAware: true,
     disconnectable: true,
-    managedProvider: true,
+    sessionRuntime: SESSION_RUNTIMES.claude,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
     setupCommand: PUSHARY_SETUP_COMMAND,
@@ -287,7 +323,7 @@ var AGENTS = {
     policyAgent: "codex",
     repoAware: true,
     disconnectable: true,
-    managedProvider: true,
+    sessionRuntime: SESSION_RUNTIMES.codex,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
     setupCommand: PUSHARY_SETUP_COMMAND,
@@ -308,7 +344,7 @@ var AGENTS = {
     policyAgent: "gemini_cli",
     repoAware: true,
     disconnectable: true,
-    managedProvider: true,
+    sessionRuntime: SESSION_RUNTIMES.gemini,
     enforcement: "enforced",
     connectVia: "Native hooks + MCP",
     setupCommand: PUSHARY_SETUP_COMMAND,
@@ -524,7 +560,7 @@ var SESSION_HISTORY_AGENT_TYPES = Object.freeze(
 );
 var DISCONNECTABLE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.disconnectable && agent.hookSource !== null ? [agent.hookSource] : []));
 var REPO_AWARE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.repoAware ? [agent.policyAgent] : []));
-var MANAGED_PROVIDERS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.managedProvider ? [agent.hookSource] : []));
+var MANAGED_PROVIDERS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.sessionRuntime ? [agent.sessionRuntime.provider] : []));
 var BRIDGE_HOOK_SOURCES = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.bridged ? [agent.hookSource] : []));
 var isAgentId = (value) => Object.keys(AGENTS).includes(value);
 var isHooklessDisconnectableAgent = (value) => isAgentId(value) && AGENTS[value].disconnectable && AGENTS[value].hookSource === null;
@@ -616,18 +652,18 @@ var CANONICAL_COMMAND_KEYS = ["command"];
 var SHELL_TOOLS = /* @__PURE__ */ new Set([SHELL_TOOL, POWERSHELL_TOOL]);
 var PATH_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit", "NotebookEdit", "Read"]);
 var PHONE_ANSWERED_TOOLS = /* @__PURE__ */ new Set(["AskUserQuestion", "ExitPlanMode"]);
-var firstString = (record4, keys2) => {
-  for (const key of keys2) {
-    const value = record4[key];
+var firstString = (record5, keys3) => {
+  for (const key of keys3) {
+    const value = record5[key];
     if (typeof value === "string" && value.length > 0) return value;
   }
   return void 0;
 };
-var pathsNamedIn = (record4, keys2) => keys2.flatMap((key) => {
-  const value = record4[key];
+var pathsNamedIn = (record5, keys3) => keys3.flatMap((key) => {
+  const value = record5[key];
   return typeof value === "string" && value.length > 0 ? [value] : [];
 });
-var namesOneFile = (paths, resolvePath) => new Set(paths.map(resolvePath)).size === 1;
+var namesOneFile = (paths2, resolvePath) => new Set(paths2.map(resolvePath)).size === 1;
 var filePathKeysOf = (profile) => [...profile.pathInputKeys, ...CANONICAL_PATH_KEYS];
 var namesAFilePath = (profile, toolInput) => pathsNamedIn(toolInput, filePathKeysOf(profile)).length > 0;
 var withCanonicalInputKeys = (profile, toolInput) => {
@@ -673,9 +709,9 @@ var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path)
     return { tool, input: { command, ...context }, unreadable: false };
   }
   if (!PATH_TOOLS.has(tool)) return { tool, input: toolInput, unreadable: false };
-  const paths = pathsNamedIn(toolInput, filePathKeysOf(profile));
-  const [filePath] = paths;
-  if (!filePath || !namesOneFile(paths, resolvePath)) return { tool, input: toolInput, unreadable: true };
+  const paths2 = pathsNamedIn(toolInput, filePathKeysOf(profile));
+  const [filePath] = paths2;
+  if (!filePath || !namesOneFile(paths2, resolvePath)) return { tool, input: toolInput, unreadable: true };
   return { tool, input: { ...withCanonicalInputKeys(profile, toolInput), file_path: resolvePath(filePath) }, unreadable: false };
 };
 var NO_AGENT_PROMPT_REASON = "Pushary needs an answer from the phone before this can run, and this agent has no approval prompt of its own here, so nothing ran. Ask the user, then try again.";
@@ -1148,7 +1184,7 @@ var readNullableText = (value, field) => {
 var ASKED_TEXT_FIELDS = ["id", "siteId", "type", "content", "createdAt"];
 var ASKED_NULLABLE_FIELDS = ["questionType", "context", "contextPayloadSha256", "correlationId", "externalId", "sessionId", "agentType", "agentName", "machineId", "toolName", "toolTarget", "requestedByUserId"];
 var DECISION_NULLABLE_FIELDS = ["response", "responseSource", "note", "decisionOutcome", "decisionOrigin", "decidedByUserId", "decidedByActor", "riskClass", "answeredAt"];
-var isComplete = (record4, fields) => fields.every((field) => field in record4);
+var isComplete = (record5, fields) => fields.every((field) => field in record5);
 var readFields = (value, fields, read) => {
   const result = {};
   for (const field of fields) {
@@ -1160,7 +1196,7 @@ var readFields = (value, fields, read) => {
 };
 var ASKED_PAYLOAD_KEYS = /* @__PURE__ */ new Set(["event", ...ASKED_TEXT_FIELDS, ...ASKED_NULLABLE_FIELDS]);
 var DECISION_PAYLOAD_KEYS = /* @__PURE__ */ new Set(["event", "id", "autoResolved", "decisionLatencyMs", ...DECISION_NULLABLE_FIELDS]);
-var hasOnlyKeys = (value, keys2) => Object.keys(value).every((key) => keys2.has(key));
+var hasOnlyKeys = (value, keys3) => Object.keys(value).every((key) => keys3.has(key));
 var parseAskedPayload = (value) => {
   const text3 = readFields(value, ASKED_TEXT_FIELDS, readText);
   const nullable = readFields(value, ASKED_NULLABLE_FIELDS, readNullableText);
@@ -1205,7 +1241,7 @@ var parseAllOrNothing = (values, parse) => {
   }
   return parsed;
 };
-var entriesFitPage = (entries, beforeSeq) => beforeSeq === null || entries.every((entry) => entry.seq < beforeSeq);
+var entriesFitPage = (entries, beforeSeq) => beforeSeq === null || entries.every((entry2) => entry2.seq < beforeSeq);
 var parseSite = (value) => {
   if (!isPlainObject(value)) return null;
   const { siteId, siteName, beforeSeq, retentionFloor } = value;
@@ -1230,68 +1266,68 @@ var boundaryGapFindings = (entries, beforeSeq) => {
 };
 var linkFindings = (entries) => {
   const findings = [];
-  entries.forEach((entry, index) => {
+  entries.forEach((entry2, index) => {
     const previous = entries[index - 1];
     if (!previous) {
-      if (entry.seq === 1 && entry.prevHash !== AUDIT_CHAIN_GENESIS_HASH) findings.push({ kind: "genesis_mismatch", seq: entry.seq });
+      if (entry2.seq === 1 && entry2.prevHash !== AUDIT_CHAIN_GENESIS_HASH) findings.push({ kind: "genesis_mismatch", seq: entry2.seq });
       return;
     }
-    if (entry.seq !== previous.seq + 1) findings.push({ kind: "sequence_gap", afterSeq: previous.seq, seq: entry.seq });
-    if (entry.prevHash !== previous.entryHash) findings.push({ kind: "broken_link", seq: entry.seq });
+    if (entry2.seq !== previous.seq + 1) findings.push({ kind: "sequence_gap", afterSeq: previous.seq, seq: entry2.seq });
+    if (entry2.prevHash !== previous.entryHash) findings.push({ kind: "broken_link", seq: entry2.seq });
   });
   return findings;
 };
-var entryHashFindings = (entries, crypto) => entries.flatMap((entry) => crypto.sha256Hex(auditEntryMessage(entry)) === entry.entryHash ? [] : [{ kind: "entry_altered", seq: entry.seq }]);
-var payloadMatchesEntry = (payload, entry, siteId, crypto) => {
-  if (payload.id !== entry.interactionId || auditPayloadHash(payload, crypto.sha256Hex) !== entry.payloadHash) return false;
-  return payload.event === "asked" ? payload.siteId === siteId && payload.createdAt === entry.interactionCreatedAt : isFinalAuditDecision(payload) === entry.decisionFinal;
+var entryHashFindings = (entries, crypto) => entries.flatMap((entry2) => crypto.sha256Hex(auditEntryMessage(entry2)) === entry2.entryHash ? [] : [{ kind: "entry_altered", seq: entry2.seq }]);
+var payloadMatchesEntry = (payload, entry2, siteId, crypto) => {
+  if (payload.id !== entry2.interactionId || auditPayloadHash(payload, crypto.sha256Hex) !== entry2.payloadHash) return false;
+  return payload.event === "asked" ? payload.siteId === siteId && payload.createdAt === entry2.interactionCreatedAt : isFinalAuditDecision(payload) === entry2.decisionFinal;
 };
 var lastDecisionSeqByInteraction = (entries) => {
   const lastSeq = /* @__PURE__ */ new Map();
-  for (const entry of entries) {
-    if (entry.event === "decision") lastSeq.set(entry.interactionId, Math.max(entry.seq, lastSeq.get(entry.interactionId) ?? 0));
+  for (const entry2 of entries) {
+    if (entry2.event === "decision") lastSeq.set(entry2.interactionId, Math.max(entry2.seq, lastSeq.get(entry2.interactionId) ?? 0));
   }
   return lastSeq;
 };
-var goneBeforeRetentionEnded = (entry, retentionFloor) => retentionFloor === null || entry.interactionCreatedAt >= retentionFloor;
+var goneBeforeRetentionEnded = (entry2, retentionFloor) => retentionFloor === null || entry2.interactionCreatedAt >= retentionFloor;
 var payloadFindings = (site, entries, crypto) => {
   const lastDecisionSeq = lastDecisionSeqByInteraction(entries);
-  return entries.flatMap((entry) => {
-    const invalid = { kind: "invalid_status", seq: entry.seq, status: entry.payloadStatus };
-    const hasLaterDecision = entry.event === "decision" && (lastDecisionSeq.get(entry.interactionId) ?? 0) > entry.seq;
-    switch (entry.payloadStatus) {
+  return entries.flatMap((entry2) => {
+    const invalid = { kind: "invalid_status", seq: entry2.seq, status: entry2.payloadStatus };
+    const hasLaterDecision = entry2.event === "decision" && (lastDecisionSeq.get(entry2.interactionId) ?? 0) > entry2.seq;
+    switch (entry2.payloadStatus) {
       case "included":
         if (hasLaterDecision) return [invalid];
-        return entry.payload && payloadMatchesEntry(entry.payload, entry, site.siteId, crypto) ? [] : [{ kind: "entry_changed", seq: entry.seq }];
+        return entry2.payload && payloadMatchesEntry(entry2.payload, entry2, site.siteId, crypto) ? [] : [{ kind: "entry_changed", seq: entry2.seq }];
       case "changed_since_recorded":
-        if (entry.event === "asked" || hasLaterDecision) return [invalid];
-        return [{ kind: entry.decisionFinal ? "entry_changed" : "unrecorded_change", seq: entry.seq }];
+        if (entry2.event === "asked" || hasLaterDecision) return [invalid];
+        return [{ kind: entry2.decisionFinal ? "entry_changed" : "unrecorded_change", seq: entry2.seq }];
       case "superseded":
-        return entry.event === "asked" || entry.decisionFinal || !hasLaterDecision && site.beforeSeq === null ? [invalid] : [];
+        return entry2.event === "asked" || entry2.decisionFinal || !hasLaterDecision && site.beforeSeq === null ? [invalid] : [];
       case "aged_out":
-        return goneBeforeRetentionEnded(entry, site.retentionFloor) ? [{ kind: "row_missing", seq: entry.seq }] : [];
+        return goneBeforeRetentionEnded(entry2, site.retentionFloor) ? [{ kind: "row_missing", seq: entry2.seq }] : [];
     }
   });
 };
 var decisionSequenceFindings = (entries) => {
   const asked = /* @__PURE__ */ new Set();
   const decidedFinally = /* @__PURE__ */ new Set();
-  return entries.flatMap((entry) => {
-    if (entry.event === "asked") {
-      const repeated = asked.has(entry.interactionId);
-      asked.add(entry.interactionId);
-      return repeated ? [{ kind: "asked_twice", seq: entry.seq }] : [];
+  return entries.flatMap((entry2) => {
+    if (entry2.event === "asked") {
+      const repeated = asked.has(entry2.interactionId);
+      asked.add(entry2.interactionId);
+      return repeated ? [{ kind: "asked_twice", seq: entry2.seq }] : [];
     }
-    const afterFinal = decidedFinally.has(entry.interactionId);
-    if (entry.decisionFinal) decidedFinally.add(entry.interactionId);
-    return afterFinal ? [{ kind: "decision_rewritten", seq: entry.seq }] : [];
+    const afterFinal = decidedFinally.has(entry2.interactionId);
+    if (entry2.decisionFinal) decidedFinally.add(entry2.interactionId);
+    return afterFinal ? [{ kind: "decision_rewritten", seq: entry2.seq }] : [];
   });
 };
 var payloadCountsOf = (entries) => ({
-  included: entries.filter((entry) => entry.payloadStatus === "included").length,
-  aged_out: entries.filter((entry) => entry.payloadStatus === "aged_out").length,
-  superseded: entries.filter((entry) => entry.payloadStatus === "superseded").length,
-  changed_since_recorded: entries.filter((entry) => entry.payloadStatus === "changed_since_recorded").length
+  included: entries.filter((entry2) => entry2.payloadStatus === "included").length,
+  aged_out: entries.filter((entry2) => entry2.payloadStatus === "aged_out").length,
+  superseded: entries.filter((entry2) => entry2.payloadStatus === "superseded").length,
+  changed_since_recorded: entries.filter((entry2) => entry2.payloadStatus === "changed_since_recorded").length
 });
 var findingsForCheckpoint = (checkpoint, siteId, hashBySeq, crypto, pinnedKeyIds) => {
   const findings = [];
@@ -1338,7 +1374,7 @@ var knownHeadFindings = (site, hashBySeq, lastSeq, exportedAt, known) => {
 };
 var verifyAuditChainSite = (site, crypto, options) => {
   const entries = [...site.entries].sort((left, right) => left.seq - right.seq);
-  const hashBySeq = new Map(entries.map((entry) => [entry.seq, entry.entryHash]));
+  const hashBySeq = new Map(entries.map((entry2) => [entry2.seq, entry2.entryHash]));
   const firstSeq = entries[0]?.seq ?? null;
   const lastSeq = entries[entries.length - 1]?.seq ?? null;
   const checkpointResults = site.checkpoints.map((checkpoint) => ({
@@ -1763,7 +1799,6 @@ var A_SHELL_RUNNING_A_SUBSTITUTION = new RegExp(
   String.raw`${COMMAND_POSITION}${COMMAND_PREFIXES}(?:[^\s;&|()<>` + "`" + String.raw`]*/)?(?:sh|bash|zsh|dash|ksh|source|\.)(?:[ \t]+-[^\s<]*){0,8}[ \t]+(?:<[ \t]*)?[<=](?=\()`,
   "g"
 );
-var AN_EVAL_THAT_RUNS = new RegExp(String.raw`${COMMAND_POSITION}${COMMAND_PREFIXES}eval[ \t]+`, "g");
 var CASE_HEAD = /(^|[\s;&|(])case[ \t]+(?:"[^"\n]*"|'[^'\n]*'|\S+)[ \t\n]+in(?=[\s;])/g;
 var CASE_ARM_OPENING = /;[;&]{0,2}[ \t\n]*\(?[^()\s;][^()\n;]*\)[ \t\n]*/g;
 var CASE_ARM_ENDING = /;;&?|;&/g;
@@ -1826,72 +1861,10 @@ var readingWithShellFormsSpelledOut = (text3) => {
   const reading = SHELL_FORM_REWRITES.reduce((current, rewrite) => rewrite(current), text3);
   return reading === text3 ? null : reading;
 };
-var SHELLS_THAT_RUN_A_SCRIPT_ARGUMENT = /* @__PURE__ */ new Set(["sh", "bash", "zsh", "dash", "ksh"]);
-var SHORT_FLAGS_WITH_THE_COMMAND_FLAG = /^-[A-Za-z]*c[A-Za-z]*$/;
-var SHELL_LONG_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set(["--rcfile", "--init-file"]);
-var SHELL_SHORT_FLAGS_ENDING_IN_AN_OPTION_NAME = /^[-+][A-Za-z]*[oO]$/;
-var SHELL_OPTION_WORD = /^[-+]/;
-var COMMAND_SEPARATOR_INSIDE_A_WORD = /[;&|()`]/;
 var DEEPEST_NESTED_SCRIPT_READ = 3;
 var MOST_SCRIPTS_READ_FROM_ONE_COMMAND = 16;
-var programNamedBy = (word) => basenameOf(word.split(COMMAND_SEPARATOR_INSIDE_A_WORD).filter((piece) => piece !== "").pop() ?? "");
-var scriptArgumentOfAShellAt = (words, index) => {
-  if (!SHELLS_THAT_RUN_A_SCRIPT_ARGUMENT.has(programNamedBy(words[index]?.text ?? ""))) return void 0;
-  for (let next = index + 1; SHELL_OPTION_WORD.test(words[next]?.text ?? ""); next += 1) {
-    const option = words[next]?.text ?? "";
-    if (SHORT_FLAGS_WITH_THE_COMMAND_FLAG.test(option)) return words[next + 1]?.text;
-    if (SHELL_LONG_OPTIONS_WITH_A_VALUE.has(option) || SHELL_SHORT_FLAGS_ENDING_IN_AN_OPTION_NAME.test(option)) next += 1;
-  }
-  return void 0;
-};
-var scriptsOfShellsIn = (text3) => {
-  const words = shellWordsOf(text3);
-  return words === null ? [] : words.flatMap((_, index) => scriptArgumentOfAShellAt(words, index) ?? []);
-};
-var endsTheCommandAsAControlOperator = (text3, index) => {
-  const char = text3.charAt(index);
-  const before = text3.charAt(index - 1);
-  if (char === "|") return before !== ">";
-  return char === "&" && before !== ">" && before !== "<" && text3.charAt(index + 1) !== ">";
-};
-var endOfTheSimpleCommandAt = (text3, from) => {
-  let depth = 0;
-  let quote = null;
-  let inBackticks = false;
-  for (let index = from; index < text3.length; index += 1) {
-    const char = text3.charAt(index);
-    if (quote === "'") {
-      if (char === "'") quote = null;
-    } else if (char === "\\") {
-      index += 1;
-    } else if (quote === '"') {
-      if (char === '"') quote = null;
-    } else if (char === "'" || char === '"') {
-      quote = char;
-    } else if (char === "`") {
-      inBackticks = !inBackticks;
-    } else if (inBackticks) {
-      continue;
-    } else if (char === "(") {
-      depth += 1;
-    } else if (char === ")" && depth > 0) {
-      depth -= 1;
-    } else if (depth === 0 && (char === "\n" || char === ";" || char === ")" || endsTheCommandAsAControlOperator(text3, index))) {
-      return index;
-    }
-  }
-  return text3.length;
-};
-var scriptOfAnEvalEndingAt = (text3, end) => {
-  const words = shellWordsOf(text3.slice(end, endOfTheSimpleCommandAt(text3, end)));
-  if (words === null) return [];
-  const firstComment = words.findIndex((word) => word.comment);
-  return [(firstComment === -1 ? words : words.slice(0, firstComment)).map((word) => word.text).join(" ")];
-};
-var scriptsOfEvalsIn = (text3) => [...text3.matchAll(AN_EVAL_THAT_RUNS)].slice(0, MOST_SCRIPTS_READ_FROM_ONE_COMMAND + 1).flatMap((match) => scriptOfAnEvalEndingAt(text3, match.index + match[0].length));
-var scriptsDirectlyInside = (text3) => [...scriptsOfEvalsIn(text3), ...scriptsOfShellsIn(text3)];
 var READING_OF_SCRIPTS_TOO_MANY_TO_READ = ": | sh";
-var readingsOfScriptsPassedToAShell = (text3) => {
+var readingsOfNestedShellScripts = (text3, scriptsDirectlyInside) => {
   const readings = [];
   let scriptsRead = 0;
   let level = [text3];
@@ -3860,16 +3833,41 @@ var scriptACodexShellCommandRuns = (command) => {
   return script.trim().length === 0 ? null : script;
 };
 
+// ../contracts/src/codex-permission-profile.ts
+var CODEX_PERMISSION_PROFILE_METHOD = "item/permissions/requestApproval";
+var CODEX_PERMISSION_PROFILE_CHOICES = { turn: "Allow this turn", session: "Allow this session", deny: "Deny" };
+var record2 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var keys = (value, allowed) => Object.keys(value).every((key) => allowed.includes(key));
+var literalAbsolutePath = (value) => typeof value === "string" && value.length > 0 && value.length <= 4096 && /^(\/|[a-z]:[\\/])/i.test(value) && !/[\u0000-\u001f*?\[\]{}]/.test(value) && !value.split(/[\\/]/).some((part) => part === ".." || part === ".");
+var paths = (value) => value == null || Array.isArray(value) && value.length <= 32 && value.every(literalAbsolutePath);
+var entry = (value) => record2(value) && keys(value, ["path", "access"]) && (value.access === "read" || value.access === "write" || value.access === "deny") && record2(value.path) && keys(value.path, ["type", "path"]) && value.path.type === "path" && literalAbsolutePath(value.path.path);
+var isCodexPermissionProfile = (value) => {
+  if (!record2(value) || !keys(value, ["network", "fileSystem"])) return false;
+  const network = value.network;
+  if (network != null && (!record2(network) || !keys(network, ["enabled"]) || network.enabled != null && typeof network.enabled !== "boolean")) return false;
+  const files = value.fileSystem;
+  if (files == null) return true;
+  return record2(files) && keys(files, ["read", "write", "entries", "globScanMaxDepth"]) && paths(files.read) && paths(files.write) && (files.globScanMaxDepth == null || typeof files.globScanMaxDepth === "number" && Number.isSafeInteger(files.globScanMaxDepth) && files.globScanMaxDepth > 0) && (files.entries == null || Array.isArray(files.entries) && files.entries.length <= 32 && files.entries.every(entry));
+};
+var codexPermissionPaths = (profile, access) => [
+  ...profile.fileSystem?.[access] ?? [],
+  ...(profile.fileSystem?.entries ?? []).filter((entry2) => entry2.access === access).map((entry2) => entry2.path.path)
+];
+var codexPermissionProfileResponse = (permissions, answer) => ({
+  permissions: answer === CODEX_PERMISSION_PROFILE_CHOICES.turn || answer === CODEX_PERMISSION_PROFILE_CHOICES.session ? permissions : {},
+  scope: answer === CODEX_PERMISSION_PROFILE_CHOICES.session ? "session" : "turn"
+});
+
 // ../contracts/src/codex-native-approval.ts
 var CODEX_NATIVE_APPROVAL_CAPABILITY = "codex-native-approval-v1";
-var CODEX_NATIVE_APPROVAL_METHODS = ["item/commandExecution/requestApproval", "item/fileChange/requestApproval", "mcpServer/elicitation/request"];
+var CODEX_NATIVE_APPROVAL_METHODS = ["item/commandExecution/requestApproval", "item/fileChange/requestApproval", "mcpServer/elicitation/request", CODEX_PERMISSION_PROFILE_METHOD];
 var CODEX_NATIVE_APPROVAL_CHOICES = { once: "Allow once", session: "Allow this conversation", deny: "Deny" };
 var CODEX_NATIVE_APPROVAL_REPLIES = { ask: "ask", deny: "deny", native: "native", allow: "allow" };
-var record2 = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+var record3 = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
 var identifier2 = (v) => typeof v === "string" && v.length > 0 && v.length <= 200;
 var text = (v) => typeof v === "string" && v.trim().length > 0 && v.length <= 16384;
 var optionalIdentifier = (v) => v == null || identifier2(v);
-var keys = (v, allowed) => Object.keys(v).every((key) => allowed.includes(key));
+var keys2 = (v, allowed) => Object.keys(v).every((key) => allowed.includes(key));
 var isMethod = (v) => typeof v === "string" && CODEX_NATIVE_APPROVAL_METHODS.some((method) => method === v);
 var boundedJson = (value) => {
   try {
@@ -3882,12 +3880,12 @@ var BASE_KEYS = ["threadId", "turnId", "itemId", "startedAtMs", "reason"];
 var MCP_META_KEYS = ["codex_approval_kind", "codex_requires_user_input", "codex_request_type", "codex_strict_auto_review", "codex_sensitive_action", "approvals_reviewer", "persist", "source", "connector_id", "connector_name", "connector_description", "tool_name", "tool_title", "tool_description", "tool_params", "tool_params_display"];
 var MCP_FLAGS_THAT_ASK_FOR_A_PERSON = ["codex_requires_user_input", "codex_strict_auto_review", "codex_sensitive_action"];
 var COMPUTER_USE_META_KEYS = [...MCP_META_KEYS, "riskLevel", "subtitle", "tool_call_id"];
-var computerUseDisplay = (value) => Array.isArray(value) && value.length <= 16 && value.every((item) => record2(item) && keys(item, ["name", "display_name", "value"]) && text(item.name) && text(item.display_name) && text(item.value));
+var computerUseDisplay = (value) => Array.isArray(value) && value.length <= 16 && value.every((item) => record3(item) && keys2(item, ["name", "display_name", "value"]) && text(item.name) && text(item.display_name) && text(item.value));
 var isExecpolicyAmendment = (value) => Array.isArray(value) && value.length > 0 && value.length <= 128 && value.every((token) => typeof token === "string" && token.length <= 16384);
 var isCommandDecision = (value) => {
   if (typeof value === "string") return ["accept", "acceptForSession", "decline", "cancel"].includes(value);
-  if (!record2(value) || !keys(value, ["acceptWithExecpolicyAmendment"]) || !record2(value.acceptWithExecpolicyAmendment)) return false;
-  return keys(value.acceptWithExecpolicyAmendment, ["execpolicy_amendment"]) && isExecpolicyAmendment(value.acceptWithExecpolicyAmendment.execpolicy_amendment);
+  if (!record3(value) || !keys2(value, ["acceptWithExecpolicyAmendment"]) || !record3(value.acceptWithExecpolicyAmendment)) return false;
+  return keys2(value.acceptWithExecpolicyAmendment, ["execpolicy_amendment"]) && isExecpolicyAmendment(value.acceptWithExecpolicyAmendment.execpolicy_amendment);
 };
 var FILE_CHANGE_KINDS = ["add", "delete", "update"];
 var FILE_CHANGE_VERB = { add: "adding", delete: "deleting", update: "editing" };
@@ -3907,7 +3905,7 @@ var withCodexReason = (detail, reason) => text(reason) ? `${detail}
 
 Codex's reason: ${redactSecrets(reason)}` : detail;
 var parseCodexNativeApproval = (value) => {
-  if (!record2(value) || !keys(value, ["method", "params", "changes"]) || !isMethod(value.method) || !record2(value.params) || !boundedJson(value)) return null;
+  if (!record3(value) || !keys2(value, ["method", "params", "changes"]) || !isMethod(value.method) || !record3(value.params) || !boundedJson(value)) return null;
   const p = value.params;
   if (!identifier2(p.threadId) || !optionalIdentifier(p.turnId) || !optionalIdentifier(p.itemId)) return null;
   const request = { method: value.method, params: p, ...Array.isArray(value.changes) ? { changes: value.changes } : {} };
@@ -3922,9 +3920,9 @@ var parseCodexNativeApproval = (value) => {
   };
   if (value.method === "mcpServer/elicitation/request") {
     const meta = p._meta;
-    const computerUse = record2(meta) && meta.connector_id === "computer-use";
-    if (value.changes !== void 0 || !keys(p, ["threadId", "turnId", "serverName", "mode", "message", "requestedSchema", "_meta"]) || !(p.mode === "form" || computerUse && (p.mode === "openai/form" || p.mode === "openaiForm")) || !identifier2(p.serverName) || !text(p.message) || p.message.length > 500 || !record2(p.requestedSchema) || !keys(p.requestedSchema, ["type", "properties", "required", "$schema"]) || p.requestedSchema.type !== "object" || !record2(p.requestedSchema.properties) || Object.keys(p.requestedSchema.properties).length !== 0 || p.requestedSchema.required != null && (!Array.isArray(p.requestedSchema.required) || p.requestedSchema.required.length !== 0)) return null;
-    if (!record2(meta) || !keys(meta, computerUse ? COMPUTER_USE_META_KEYS : MCP_META_KEYS) || meta.codex_approval_kind !== "mcp_tool_call" || !identifier2(meta.tool_name) || !record2(meta.tool_params) || meta.tool_params_display != null && !(computerUse ? computerUseDisplay(meta.tool_params_display) : record2(meta.tool_params_display))) return null;
+    const computerUse = record3(meta) && meta.connector_id === "computer-use";
+    if (value.changes !== void 0 || !keys2(p, ["threadId", "turnId", "serverName", "mode", "message", "requestedSchema", "_meta"]) || !(p.mode === "form" || computerUse && (p.mode === "openai/form" || p.mode === "openaiForm")) || !identifier2(p.serverName) || !text(p.message) || p.message.length > 500 || !record3(p.requestedSchema) || !keys2(p.requestedSchema, ["type", "properties", "required", "$schema"]) || p.requestedSchema.type !== "object" || !record3(p.requestedSchema.properties) || Object.keys(p.requestedSchema.properties).length !== 0 || p.requestedSchema.required != null && (!Array.isArray(p.requestedSchema.required) || p.requestedSchema.required.length !== 0)) return null;
+    if (!record3(meta) || !keys2(meta, computerUse ? COMPUTER_USE_META_KEYS : MCP_META_KEYS) || meta.codex_approval_kind !== "mcp_tool_call" || !identifier2(meta.tool_name) || !record3(meta.tool_params) || meta.tool_params_display != null && !(computerUse ? computerUseDisplay(meta.tool_params_display) : record3(meta.tool_params_display))) return null;
     if (computerUse && (meta.riskLevel !== "low" && meta.riskLevel !== "high" || meta.subtitle != null && !text(meta.subtitle) || !optionalIdentifier(meta.tool_call_id))) return null;
     if (MCP_FLAGS_THAT_ASK_FOR_A_PERSON.some((key) => meta[key] != null && typeof meta[key] !== "boolean")) return null;
     if (meta.approvals_reviewer != null && meta.approvals_reviewer !== "user") return null;
@@ -3956,8 +3954,23 @@ var parseCodexNativeApproval = (value) => {
     };
   }
   if (!identifier2(p.turnId) || !identifier2(p.itemId) || !Number.isSafeInteger(p.startedAtMs) || p.reason != null && !text(p.reason)) return null;
+  if (value.method === CODEX_PERMISSION_PROFILE_METHOD) {
+    if (value.changes !== void 0 || !keys2(p, [...BASE_KEYS, "cwd", "environmentId", "permissions"]) || !text(p.cwd) || p.environmentId != null && p.environmentId !== "local" || !isCodexPermissionProfile(p.permissions)) return null;
+    return {
+      ...base,
+      permissionProfile: p.permissions,
+      codexAsksForAPerson: true,
+      cwd: p.cwd,
+      toolName: "request_permissions",
+      toolInputs: [{ permissions: p.permissions }],
+      scopePaths: [...codexPermissionPaths(p.permissions, "read"), ...codexPermissionPaths(p.permissions, "write")],
+      question: "Allow these permissions for this turn or session?",
+      detail: withCodexReason(JSON.stringify(p.permissions, null, 2), p.reason),
+      options: [CODEX_PERMISSION_PROFILE_CHOICES.turn, CODEX_PERMISSION_PROFILE_CHOICES.session, CODEX_PERMISSION_PROFILE_CHOICES.deny]
+    };
+  }
   if (value.method === "item/commandExecution/requestApproval") {
-    if (value.changes !== void 0 || !keys(p, [...BASE_KEYS, "approvalId", "kind", "environmentId", "command", "cwd", "commandActions", "networkApprovalContext", "proposedExecpolicyAmendment", "proposedNetworkPolicyAmendments", "availableDecisions"]) || !optionalIdentifier(p.approvalId) || p.kind != null && p.kind !== "command" || p.environmentId != null && p.environmentId !== "local" || p.networkApprovalContext != null || p.proposedNetworkPolicyAmendments != null || p.proposedExecpolicyAmendment != null && !isExecpolicyAmendment(p.proposedExecpolicyAmendment) || !text(p.command) || !text(p.cwd)) return null;
+    if (value.changes !== void 0 || !keys2(p, [...BASE_KEYS, "approvalId", "kind", "environmentId", "command", "cwd", "commandActions", "networkApprovalContext", "proposedExecpolicyAmendment", "proposedNetworkPolicyAmendments", "availableDecisions"]) || !optionalIdentifier(p.approvalId) || p.kind != null && p.kind !== "command" || p.environmentId != null && p.environmentId !== "local" || p.networkApprovalContext != null || p.proposedNetworkPolicyAmendments != null || p.proposedExecpolicyAmendment != null && !isExecpolicyAmendment(p.proposedExecpolicyAmendment) || !text(p.command) || !text(p.cwd)) return null;
     const decisions = p.availableDecisions ?? ["accept", "decline", "cancel"];
     if (!Array.isArray(decisions) || !decisions.includes("accept") || !decisions.some((v) => v === "decline" || v === "cancel") || !decisions.every(isCommandDecision)) return null;
     const command = scriptACodexShellCommandRuns(p.command) ?? p.command;
@@ -3973,24 +3986,25 @@ Directory: ${redactSecrets(p.cwd)}`, p.reason),
       negativeDecision: decisions.includes("decline") ? "decline" : "cancel"
     };
   }
-  if (!keys(p, [...BASE_KEYS, "grantRoot"]) || p.grantRoot != null || !Array.isArray(value.changes) || value.changes.length === 0 || value.changes.length > 32) return null;
+  if (!keys2(p, [...BASE_KEYS, "grantRoot"]) || p.grantRoot != null || !Array.isArray(value.changes) || value.changes.length === 0 || value.changes.length > 32) return null;
   const changes = [];
   for (const change of value.changes) {
-    if (!record2(change) || !keys(change, ["path", "kind", "diff"]) || !text(change.path) || typeof change.diff !== "string" || !record2(change.kind) || !keys(change.kind, ["type", "move_path"]) || !isFileChangeKind(change.kind.type) || change.kind.move_path != null) return null;
+    if (!record3(change) || !keys2(change, ["path", "kind", "diff"]) || !text(change.path) || typeof change.diff !== "string" || !record3(change.kind) || !keys2(change.kind, ["type", "move_path"]) || !isFileChangeKind(change.kind.type) || change.kind.move_path != null) return null;
     changes.push({ kind: change.kind.type, path: change.path, diff: change.diff });
   }
-  const paths = changes.map((change) => change.path);
+  const paths2 = changes.map((change) => change.path);
   return {
     ...base,
     toolName: "Edit",
-    toolInputs: paths.map((file_path) => ({ file_path })),
-    scopePaths: paths,
+    toolInputs: paths2.map((file_path) => ({ file_path })),
+    scopePaths: paths2,
     question: fileChangeQuestion(changes),
     detail: withCodexReason(changes.map((change) => `${redactSecrets(labelledFileChange(change))}
 ${redactSecretsDeep(change.diff)}`).join("\n\n"), p.reason)
   };
 };
 var codexNativeApprovalResponse = (approval, answer) => {
+  if (approval.permissionProfile) return codexPermissionProfileResponse(approval.permissionProfile, answer);
   const accepted = approval.options.includes(answer) && (answer === CODEX_NATIVE_APPROVAL_CHOICES.once || answer === CODEX_NATIVE_APPROVAL_CHOICES.session);
   if (approval.request.method === "mcpServer/elicitation/request") return {
     action: accepted ? "accept" : "decline",
@@ -4014,10 +4028,16 @@ var compressTranscriptRecord = (raw, deflateRaw) => {
   if (raw.length > TRANSCRIPT_RECORD_MAX_INFLATED_BYTES) return raw;
   const deflated = deflateRaw(raw);
   if (!compressionShrinks(raw, deflated)) return raw;
-  const record4 = new Uint8Array(deflated.length + 1);
-  record4[0] = COMPRESSED_TRANSCRIPT_RECORD_MARKER;
-  record4.set(deflated, 1);
-  return record4;
+  const record5 = new Uint8Array(deflated.length + 1);
+  record5[0] = COMPRESSED_TRANSCRIPT_RECORD_MARKER;
+  record5.set(deflated, 1);
+  return record5;
+};
+
+// ../contracts/src/spawn-delivery.ts
+var SPAWN_RECOVERY = {
+  receiptRetentionMs: 7 * 24 * 60 * 60 * 1e3,
+  retrySendWindowMs: 60 * 60 * 1e3
 };
 
 // ../contracts/src/claude-inbox.ts
@@ -4034,11 +4054,11 @@ var CLAUDE_INBOX = {
   sender: "pushary",
   carrier: "native"
 };
-var record3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var record4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var text2 = (value) => typeof value === "string" && value.length > 0;
 var sessionIdPattern = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var parseClaudeInboxSession = (value, platform = "darwin") => {
-  if (!record3(value) || !Number.isSafeInteger(value.pid) || typeof value.pid !== "number" || value.pid <= 0 || !text2(value.sessionId) || !sessionIdPattern.test(value.sessionId) || !text2(value.cwd) || !text2(value.procStart) || platform === "linux" && !text2(value.pidDomain) || !text2(value.messagingSocketPath) || value.peerProtocol !== CLAUDE_INBOX.protocol || !text2(value.version) || !supportsClaudeInbox(value.version, platform))
+  if (!record4(value) || !Number.isSafeInteger(value.pid) || typeof value.pid !== "number" || value.pid <= 0 || !text2(value.sessionId) || !sessionIdPattern.test(value.sessionId) || !text2(value.cwd) || !text2(value.procStart) || platform === "linux" && !text2(value.pidDomain) || !text2(value.messagingSocketPath) || value.peerProtocol !== CLAUDE_INBOX.protocol || !text2(value.version) || !supportsClaudeInbox(value.version, platform))
     return null;
   return {
     pid: value.pid,
@@ -4059,19 +4079,19 @@ var claudeInboxAction = (progress) => {
   }
   return progress.attempted ? "observe" /* observe */ : "submit" /* submit */;
 };
-var isClaudeInboxReceipt = (value, sessionId, commandId) => record3(value) && value.type === "user" && value.sessionId === sessionId && value.uuid === commandId && record3(value.origin) && value.origin.kind === "peer" && value.origin.msg_id === commandId;
+var isClaudeInboxReceipt = (value, sessionId, commandId) => record4(value) && value.type === "user" && value.sessionId === sessionId && value.uuid === commandId && record4(value.origin) && value.origin.kind === "peer" && value.origin.msg_id === commandId;
 var CLAUDE_INBOX_MAX_SESSIONS = 128;
 var parseClaudeInboxCommand = (value) => {
-  if (!record3(value) || !text2(value.id) || !sessionIdPattern.test(value.id) || !text2(value.text) || typeof value.expiresAtMs !== "number" || !Number.isSafeInteger(value.expiresAtMs))
+  if (!record4(value) || !text2(value.id) || !sessionIdPattern.test(value.id) || !text2(value.text) || typeof value.expiresAtMs !== "number" || !Number.isSafeInteger(value.expiresAtMs))
     return null;
   return { id: value.id, text: value.text, expiresAtMs: value.expiresAtMs };
 };
 var parseClaudeInboxPoll = (value) => {
-  if (!record3(value) || value.protocol !== CLAUDE_INBOX.protocol || !Array.isArray(value.sessionIds) || value.sessionIds.length > CLAUDE_INBOX_MAX_SESSIONS || !value.sessionIds.every((id) => nativeIdentifier(id)))
+  if (!record4(value) || value.protocol !== CLAUDE_INBOX.protocol || !Array.isArray(value.sessionIds) || value.sessionIds.length > CLAUDE_INBOX_MAX_SESSIONS || !value.sessionIds.every((id) => nativeIdentifier(id)))
     return null;
   return value.sessionIds;
 };
-var parseClaudeInboxClaim = (value) => record3(value) && value.protocol === CLAUDE_INBOX.protocol ? parseClaudeInboxCommand(value.command) : null;
+var parseClaudeInboxClaim = (value) => record4(value) && value.protocol === CLAUDE_INBOX.protocol ? parseClaudeInboxCommand(value.command) : null;
 var CLAUDE_INBOX_RECEIVER = {
   pollMs: 3e3,
   heartbeatMs: 6e4,
@@ -6903,9 +6923,17 @@ var substitutionFedTo = (pieces, index) => {
   const next = pieces[index + 1];
   return next !== void 0 && SUBSTITUTION_OPENERS.has(next.before) ? next.text : null;
 };
+var withoutOutputRedirectionTargets = (text3) => {
+  const visible = shellVisibleText(text3);
+  const removeVisibleRedirection = (match, _target, offset) => {
+    const operator = offset + match.search(REDIRECTION_OPERATOR_CHARACTER);
+    return visible === null || REDIRECTION_OPERATOR_CHARACTER.test(visible.charAt(operator)) ? " " : match;
+  };
+  return text3.replace(OUTPUT_REDIRECTION, removeVisibleRedirection);
+};
 var roughSegmentsOf = (command) => {
   const { text: text3, bodies } = withHeredocBodiesSetAside(commandForReading(command));
-  const pieces = roughPiecesOf(text3.replace(INPUT_REDIRECTION, ` ${REDIRECTED_INPUT_MARK} `).replace(OUTPUT_REDIRECTION, " "));
+  const pieces = roughPiecesOf(withoutOutputRedirectionTargets(text3.replace(INPUT_REDIRECTION, ` ${REDIRECTED_INPUT_MARK} `)));
   let heredocsSeen = 0;
   return pieces.map((piece, index) => {
     const heredocCount = occurrencesOf(piece.text, HEREDOC_MARK);
@@ -7477,6 +7505,20 @@ var runnerReadingOf = (innermost) => {
   const commands = [.../* @__PURE__ */ new Set([...fromScript, ...named.map(verbatimInvocationText), ...afterEndOfOptions.map(verbatimInvocationText)])];
   return commands.length === 0 ? NO_INLINE_SCRIPT : { kind: "readable", scripts: commands };
 };
+var scriptsOfExecutablePiece = (piece) => {
+  const invocation = innermostInvocation(invocationOfRoughPiece(piece.text));
+  const scripts = inlineScriptsOf(invocation, []);
+  const runner = runnerReadingOf(invocation);
+  return [
+    ...scripts.kind === "readable" ? scripts.scripts : [],
+    ...runner.kind === "readable" ? runner.scripts : []
+  ];
+};
+var scriptsExecutedBy = (command) => {
+  const readable = readingWithoutCommentsOrAnsiEscapes(command) ?? command;
+  return roughPiecesOf(withoutOutputRedirectionTargets(readable)).flatMap(scriptsOfExecutablePiece);
+};
+var readingsOfScriptsPassedToAShell = (command) => readingsOfNestedShellScripts(command, scriptsExecutedBy);
 var MAX_SPELLED_FORMS = 4096;
 var markTruncated = (accumulator) => {
   accumulator.hidesWhatItRuns = true;
@@ -8713,10 +8755,10 @@ var namesOneToolAfterPrefix = (toolName, prefix) => {
   return tool.length > 0 && !tool.includes(SERVER_AND_TOOL_SEPARATOR);
 };
 var isPusharyConnectorTool = (toolName) => PUSHARY_CONNECTOR_TOOL_PREFIXES.some((prefix) => namesOneToolAfterPrefix(toolName, prefix));
-var strictestScopeVerdict = (scope, paths) => {
-  if (paths.length === 0) return evaluateScope(scope, void 0);
+var strictestScopeVerdict = (scope, paths2) => {
+  if (paths2.length === 0) return evaluateScope(scope, void 0);
   let worst = { outcome: "in_scope" };
-  for (const path of paths) {
+  for (const path of paths2) {
     const verdict = evaluateScope(scope, path);
     if (verdict.outcome === "off_limits") return verdict;
     if (verdict.outcome === "out_of_scope") worst = verdict;
@@ -8795,8 +8837,8 @@ var isBlockedActionRequest = (request) => isBlockedActionEvent(request) && block
 var canonicalJsonText = (value) => {
   if (Array.isArray(value)) return `[${value.map(canonicalJsonText).join(",")}]`;
   if (value !== null && typeof value === "object") {
-    const record4 = value;
-    return `{${Object.keys(record4).filter((key) => record4[key] !== void 0).sort().map((key) => `${JSON.stringify(key)}:${canonicalJsonText(record4[key])}`).join(",")}}`;
+    const record5 = value;
+    return `{${Object.keys(record5).filter((key) => record5[key] !== void 0).sort().map((key) => `${JSON.stringify(key)}:${canonicalJsonText(record5[key])}`).join(",")}}`;
   }
   return JSON.stringify(value) ?? "null";
 };
@@ -9448,11 +9490,11 @@ var elicitationEnum = (property) => {
   return members.length === property.enum.length && members.length >= ELICITATION_MIN_OPTIONS ? members : null;
 };
 var readElicitationFields = (schema) => {
-  const record4 = elicitationRecord(schema);
-  const properties = elicitationRecord(record4?.properties);
-  if (!properties || record4?.type !== "object") return null;
-  if (Object.keys(record4).some((key) => !["type", "properties", "required", "$schema"].includes(key))) return null;
-  if (record4.required !== void 0 && (!Array.isArray(record4.required) || !record4.required.every((name) => typeof name === "string" && Object.hasOwn(properties, name)))) return null;
+  const record5 = elicitationRecord(schema);
+  const properties = elicitationRecord(record5?.properties);
+  if (!properties || record5?.type !== "object") return null;
+  if (Object.keys(record5).some((key) => !["type", "properties", "required", "$schema"].includes(key))) return null;
+  if (record5.required !== void 0 && (!Array.isArray(record5.required) || !record5.required.every((name) => typeof name === "string" && Object.hasOwn(properties, name)))) return null;
   const entries = Object.entries(properties);
   if (entries.length === 0) return null;
   const fields = [];
@@ -9622,6 +9664,14 @@ export {
   isCodexQuestionTool,
   parseCodexQuestions,
   codexQuestionAnswerReason,
+  SPAWN_CAPABILITY,
+  CLAUDE_BRIDGE_CAPABILITY,
+  CLAUDE_RESUME_CAPABILITY,
+  CODEX_BRIDGE_CAPABILITY,
+  CODEX_RESUME_CAPABILITY,
+  GEMINI_BRIDGE_CAPABILITY,
+  GEMINI_RESUME_CAPABILITY,
+  sessionProvidersAdvertisedBy,
   CLAUDE_CONNECTOR_URL,
   CLAUDE_CONNECTOR_GUIDE,
   COWORK_CONNECTOR_LIMIT,