pushary 1.9.139 → 1.9.140

package/dist/bin/pushary-daemon.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   inspectConfiguredManagedProviders
-} from "../chunk-ZAZQHOBS.js";
+} from "../chunk-MFRNEOCN.js";
 import {
   readHookWiring,
   readHookWiringSafely
-} from "../chunk-M6TJWXST.js";
-import "../chunk-LYLADUYE.js";
-import "../chunk-4NLZUCPG.js";
+} from "../chunk-BAT4TJOE.js";
+import "../chunk-HJFTPNP6.js";
+import "../chunk-TJX25WUQ.js";
 import {
   keepLinuxDaemonAfterLogout,
   lingerReportOf
@@ -15,26 +15,26 @@ import {
 import {
   HEARTBEAT_INTERVAL_MS,
   sendHeartbeat
-} from "../chunk-LVL7XAXK.js";
-import "../chunk-KXHGEJVW.js";
+} from "../chunk-NBJ7N7KL.js";
+import "../chunk-QDQHIQWH.js";
 import {
   readSignedOutDiagnosis
-} from "../chunk-ZNMLL2WN.js";
+} from "../chunk-ULRZGJSL.js";
 import {
   HERMES_INSTALL_MARKER_FILE,
   defaultHermesHome,
   parseHermesInstallMarker
-} from "../chunk-Q5H5AFS7.js";
+} from "../chunk-N346VCKX.js";
 import {
   writeHuman
 } from "../chunk-QCGNGEGE.js";
-import "../chunk-H4O4IPWY.js";
-import "../chunk-7Q6YKZY2.js";
-import "../chunk-UTUR6WEA.js";
-import "../chunk-RBPAUX6C.js";
+import "../chunk-YIIGX653.js";
+import "../chunk-3TQ4NPFC.js";
+import "../chunk-SSAGWDBN.js";
+import "../chunk-GUVTHNCX.js";
 import {
   exitOnHelpFlag
-} from "../chunk-3FNBN4JQ.js";
+} from "../chunk-S7DTAH7Q.js";
 import {
   codexBinaryIsBroken,
   detectProviderLiveCapabilities,
@@ -43,8 +43,8 @@ import {
   launchableProviders,
   resolveControlPolicy,
   trackProviderInventory
-} from "../chunk-OLJTUTD2.js";
-import "../chunk-MAPC5KKZ.js";
+} from "../chunk-YD3PTYOT.js";
+import "../chunk-JYOC6N7C.js";
 import {
   SESSION_REAP_SILENCE_MS,
   describeIdleWindow,
@@ -52,18 +52,18 @@ import {
   listProcessProofs,
   ownsLiveProcess,
   silentSpawnedProofs
-} from "../chunk-LSABM2ES.js";
+} from "../chunk-E67Y7DSA.js";
 import "../chunk-CYTPQDQY.js";
 import {
   readLocalAutoUpdateReport
-} from "../chunk-LHYBHWCK.js";
-import "../chunk-GGTLV67J.js";
+} from "../chunk-3HORJAQX.js";
+import "../chunk-AQVXXXFZ.js";
 import {
   startRegisteredTranscripts
-} from "../chunk-SKVPWXNK.js";
+} from "../chunk-7TXUHOQW.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-FIQ7ND7P.js";
+import "../chunk-6Z7VJ65F.js";
 import {
   DAEMON_LEASE_RENEW_INTERVAL_MS,
   DAEMON_YIELD_CHECK_INTERVAL_MS,
@@ -81,62 +81,62 @@ import {
   requestDaemonHandoff,
   stopDaemonRunning,
   writeDaemonNeedsLogin
-} from "../chunk-AEC72YC3.js";
+} from "../chunk-RVKCG7DK.js";
 import {
   hookOwnerOf
-} from "../chunk-OBKHLKKB.js";
+} from "../chunk-SQB57AJR.js";
 import {
   markPendingCommandRefused,
   pendingCommandReceipts,
   removePendingCommand
-} from "../chunk-2YMVIBFT.js";
-import "../chunk-QTR6KQEU.js";
-import "../chunk-IOWB43KY.js";
-import "../chunk-BRXKVYTV.js";
+} from "../chunk-S6LB3SZE.js";
+import "../chunk-6WBHYQ2P.js";
+import "../chunk-7W4XA2WF.js";
+import "../chunk-MEFTOIUI.js";
 import "../chunk-YPY4YCIZ.js";
-import "../chunk-INGRSQVC.js";
+import "../chunk-7OBROSQL.js";
 import "../chunk-XMSDA5WA.js";
-import "../chunk-XQYBTRVW.js";
-import "../chunk-6A6OSNC2.js";
-import "../chunk-P3UCAWUP.js";
+import "../chunk-YB7V6V6O.js";
+import "../chunk-MDRNNK3L.js";
+import "../chunk-UGU566AU.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-UZZRSCFR.js";
-import "../chunk-LHUA6ADC.js";
-import "../chunk-KYWH4XUR.js";
+import "../chunk-T5GZUMBP.js";
+import "../chunk-4SMS5DND.js";
+import "../chunk-3FJO3HIA.js";
 import {
   spawnClaude
 } from "../chunk-H6CL3T2S.js";
 import {
   readCommandAck,
   refusedReceiptMessage
-} from "../chunk-3PQEUSPK.js";
-import "../chunk-IAWFSD4Q.js";
+} from "../chunk-7AXEKUXY.js";
+import "../chunk-6LK6I62M.js";
 import {
   getMachineId
-} from "../chunk-J6CNQ5UK.js";
+} from "../chunk-L7BWJD25.js";
 import "../chunk-YU2EUD7O.js";
 import {
   readControlMode
-} from "../chunk-XKXOT2ZU.js";
-import "../chunk-GVJWHTN2.js";
+} from "../chunk-RQPVEBKR.js";
+import "../chunk-RACM64B6.js";
 import {
   claudeConfigDir,
   codexHome
-} from "../chunk-CZH3JDVB.js";
+} from "../chunk-IJMWFHZZ.js";
 import {
   resolveBinary
-} from "../chunk-CQLQFN6B.js";
+} from "../chunk-AXAO3JF5.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-IEHI64ZN.js";
+} from "../chunk-Y7LBB6YM.js";
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
 import {
   writeJsonAtomicDurable
 } from "../chunk-TODDEIYG.js";
-import "../chunk-ZYLZCNOJ.js";
+import "../chunk-MGBYRHT3.js";
 import "../chunk-WIIMW5YO.js";
 import {
   CLAUDE_INBOX,
@@ -157,6 +157,7 @@ import {
   isCodexInputReceipt,
   isCodexQueuedReceipt,
   isCommandAcknowledgementReceipt,
+  isRecord,
   nativeIdentifier,
   nativeInputAction,
   nativeRecord,
@@ -166,9 +167,71 @@ import {
   parseHermesAdmission,
   parseHermesReplayCursor,
   qualifyHermesReceiptMode
-} from "../chunk-KQVURVAP.js";
+} from "../chunk-QCIZDJSU.js";
 import "../chunk-MLKGABMK.js";
 
+// src/spawn-claim.ts
+var parseSpawnClaim = (value) => {
+  if (!isRecord(value)) return null;
+  const request = value;
+  if (request.attemptCount !== void 0 && (typeof request.attemptCount !== "number" || !Number.isSafeInteger(request.attemptCount) || request.attemptCount < 1)) return null;
+  if (typeof request.id !== "string" || typeof request.prompt !== "string") return null;
+  return {
+    id: request.id,
+    prompt: request.prompt,
+    ...typeof request.claimId === "string" ? { claimId: request.claimId } : {},
+    ...typeof request.attemptCount === "number" ? { attemptCount: request.attemptCount } : {},
+    ...typeof request.cwd === "string" ? { cwd: request.cwd } : {},
+    ...typeof request.agent === "string" ? { agent: request.agent } : {},
+    ...typeof request.model === "string" ? { model: request.model } : {},
+    ...typeof request.resumeSessionId === "string" ? { resumeSessionId: request.resumeSessionId } : {}
+  };
+};
+var spawnAcknowledgement = (request, machineId, outcome) => {
+  if (!request.claimId) return null;
+  return outcome.state === "started" ? {
+    spawnId: request.id,
+    claimId: request.claimId,
+    machineId,
+    state: "started",
+    pid: outcome.pid ?? null
+  } : {
+    spawnId: request.id,
+    claimId: request.claimId,
+    machineId,
+    state: "failed",
+    failure: {
+      code: "launch_failed",
+      message: outcome.message.slice(0, 240),
+      retryable: false
+    }
+  };
+};
+var launchSpawnClaim = async (request, runtime) => {
+  const existingPid = await runtime.findExistingPid(request.id);
+  if (existingPid !== null) {
+    await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "started", pid: existingPid }));
+    return;
+  }
+  if ((request.attemptCount ?? 1) > 1) {
+    await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, {
+      state: "failed",
+      message: "The previous launch could not be confirmed. Check your sessions before starting another."
+    }));
+    return;
+  }
+  let pid;
+  try {
+    pid = await runtime.launch(request);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    runtime.reportLaunchError(message);
+    await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "failed", message }));
+    return;
+  }
+  await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "started", pid }));
+};
+
 // src/native-host-receiver.ts
 import { join as join2 } from "path";
 import { homedir } from "os";
@@ -1585,59 +1648,7 @@ var parseControlProbe = (value) => {
   return typeof id === "string" && id.length > 0 && id.length <= 128 ? id : null;
 };
 var daemonSignals = (platform = process.platform) => platform === "win32" ? ["SIGINT", "SIGTERM"] : ["SIGINT", "SIGTERM", "SIGHUP"];
-var parseSpawnClaim = (value) => {
-  if (typeof value !== "object" || value === null) return null;
-  const request = value;
-  if (typeof request.id !== "string" || typeof request.prompt !== "string") return null;
-  return {
-    id: request.id,
-    prompt: request.prompt,
-    ...typeof request.claimId === "string" ? { claimId: request.claimId } : {},
-    ...Number.isInteger(request.attemptCount) ? { attemptCount: request.attemptCount } : {},
-    ...typeof request.cwd === "string" ? { cwd: request.cwd } : {},
-    ...typeof request.agent === "string" ? { agent: request.agent } : {},
-    ...typeof request.model === "string" ? { model: request.model } : {},
-    ...typeof request.resumeSessionId === "string" ? { resumeSessionId: request.resumeSessionId } : {}
-  };
-};
 var stopAcknowledgement = (request, machineId, state) => request.id ? { stopId: request.id, machineId, state } : null;
-var spawnAcknowledgement = (request, machineId, outcome) => {
-  if (!request.claimId) return null;
-  return outcome.state === "started" ? {
-    spawnId: request.id,
-    claimId: request.claimId,
-    machineId,
-    state: "started",
-    pid: outcome.pid ?? null
-  } : {
-    spawnId: request.id,
-    claimId: request.claimId,
-    machineId,
-    state: "failed",
-    failure: {
-      code: "launch_failed",
-      message: outcome.message.slice(0, 240),
-      retryable: false
-    }
-  };
-};
-var launchSpawnClaim = async (request, runtime) => {
-  const existingPid = await runtime.findExistingPid(request.id);
-  if (existingPid !== null) {
-    await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "started", pid: existingPid }));
-    return;
-  }
-  let pid;
-  try {
-    pid = await runtime.launch(request);
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    runtime.reportLaunchError(message);
-    await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "failed", message }));
-    return;
-  }
-  await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "started", pid }));
-};
 var DrainError = class extends Error {
   constructor(status) {
     super(`drain ${status}`);

package/dist/bin/pushary-disconnect.js

@@ -2,18 +2,18 @@
 import {
   declinedAgentsFile,
   recordDeclinedAgent
-} from "../chunk-4NLZUCPG.js";
+} from "../chunk-TJX25WUQ.js";
 import {
   isCursorPluginLeftover,
   isPusharyCursorPluginManifest,
   releaseSoleGate
-} from "../chunk-2X2JHX77.js";
+} from "../chunk-E4MC6B6U.js";
 import {
   planFxRemoval,
   removeClineServer
-} from "../chunk-H4O4IPWY.js";
-import "../chunk-7Q6YKZY2.js";
-import "../chunk-UTUR6WEA.js";
+} from "../chunk-YIIGX653.js";
+import "../chunk-3TQ4NPFC.js";
+import "../chunk-SSAGWDBN.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -25,10 +25,10 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-RBPAUX6C.js";
+} from "../chunk-GUVTHNCX.js";
 import {
   exitOnHelpFlag
-} from "../chunk-3FNBN4JQ.js";
+} from "../chunk-S7DTAH7Q.js";
 import {
   compatibleConfigFile,
   compatibleDocuments,
@@ -38,31 +38,31 @@ import {
   isEmptiedPusharyOwnedDocument,
   removeCompatibleHooks,
   removeCompatibleMcpServer
-} from "../chunk-FIQ7ND7P.js";
+} from "../chunk-6Z7VJ65F.js";
 import {
   removeGeminiSettings
-} from "../chunk-OBKHLKKB.js";
-import "../chunk-2YMVIBFT.js";
-import "../chunk-QTR6KQEU.js";
-import "../chunk-IOWB43KY.js";
-import "../chunk-BRXKVYTV.js";
+} from "../chunk-SQB57AJR.js";
+import "../chunk-S6LB3SZE.js";
+import "../chunk-6WBHYQ2P.js";
+import "../chunk-7W4XA2WF.js";
+import "../chunk-MEFTOIUI.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";
-import "../chunk-6A6OSNC2.js";
-import "../chunk-P3UCAWUP.js";
+import "../chunk-MDRNNK3L.js";
+import "../chunk-UGU566AU.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-UZZRSCFR.js";
-import "../chunk-LHUA6ADC.js";
-import "../chunk-KYWH4XUR.js";
-import "../chunk-3PQEUSPK.js";
-import "../chunk-IAWFSD4Q.js";
-import "../chunk-J6CNQ5UK.js";
+import "../chunk-T5GZUMBP.js";
+import "../chunk-4SMS5DND.js";
+import "../chunk-3FJO3HIA.js";
+import "../chunk-7AXEKUXY.js";
+import "../chunk-6LK6I62M.js";
+import "../chunk-L7BWJD25.js";
 import {
   UsageError
 } from "../chunk-YU2EUD7O.js";
-import "../chunk-XKXOT2ZU.js";
-import "../chunk-GVJWHTN2.js";
+import "../chunk-RQPVEBKR.js";
+import "../chunk-RACM64B6.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -92,9 +92,9 @@ import {
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-CZH3JDVB.js";
-import "../chunk-CQLQFN6B.js";
-import "../chunk-IEHI64ZN.js";
+} from "../chunk-IJMWFHZZ.js";
+import "../chunk-AXAO3JF5.js";
+import "../chunk-Y7LBB6YM.js";
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
@@ -103,14 +103,14 @@ import {
 } from "../chunk-TODDEIYG.js";
 import {
   isInvocationOf
-} from "../chunk-ZYLZCNOJ.js";
+} from "../chunk-MGBYRHT3.js";
 import "../chunk-WIIMW5YO.js";
 import {
   DISCONNECTABLE_AGENTS,
   DISCONNECT_AGENT_IDS,
   hookCompatibleProfileBySource,
   normalizeAgentId
-} from "../chunk-KQVURVAP.js";
+} from "../chunk-QCIZDJSU.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-disconnect.ts

package/dist/bin/pushary-display-hook.js

@@ -9,6 +9,13 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// ../contracts/src/settlement-render.ts
+var init_settlement_render = __esm({
+  "../contracts/src/settlement-render.ts"() {
+    "use strict";
+  }
+});
+
 // ../contracts/src/audit-chain.ts
 var AUDIT_CHAIN_GENESIS_HASH, AUDIT_CHECKPOINT_INTERVAL_MS, AUDIT_CHECKPOINT_SWEEP_MS, AUDIT_CHAIN_PASS_INTERVAL_MS, AUDIT_CHECKPOINT_MAX_AGE_MS, ASKED_TEXT_FIELDS, ASKED_NULLABLE_FIELDS, DECISION_NULLABLE_FIELDS, ASKED_PAYLOAD_KEYS, DECISION_PAYLOAD_KEYS;
 var init_audit_chain = __esm({
@@ -27,6 +34,14 @@ var init_audit_chain = __esm({
   }
 });
 
+// ../contracts/src/permission-grant-routing.ts
+var init_permission_grant_routing = __esm({
+  "../contracts/src/permission-grant-routing.ts"() {
+    "use strict";
+    init_src();
+  }
+});
+
 // ../contracts/src/redaction.ts
 var CREDENTIAL_NAME, CREDENTIAL_KEY, DISPLAYED_CREDENTIAL_KEY, SHELL_INERT_UNIT, SHELL_INERT_SINGLE_QUOTED_UNIT, SHELL_INERT_URL_PASSWORD_UNIT, PEM_LINE_BREAK, credentialAssignmentRule, DISPLAYED_SECRET_SHAPES, CUT_OFF_SECRET_SHAPES, secretRedactionRules, SECRET_REDACTION_RULES, CUT_OFF_TEXT_REDACTION_RULES;
 var init_redaction = __esm({
@@ -226,7 +241,7 @@ var init_codex_question = __esm({
 });
 
 // ../contracts/src/shell-analysis.ts
-var COMMAND_POSITION, COMMAND_PREFIXES, A_SHELL_RUNNING_A_SUBSTITUTION, AN_EVAL_THAT_RUNS;
+var COMMAND_POSITION, COMMAND_PREFIXES, A_SHELL_RUNNING_A_SUBSTITUTION;
 var init_shell_analysis = __esm({
   "../contracts/src/shell-analysis.ts"() {
     "use strict";
@@ -236,7 +251,6 @@ var init_shell_analysis = __esm({
       String.raw`${COMMAND_POSITION}${COMMAND_PREFIXES}(?:[^\s;&|()<>` + "`" + String.raw`]*/)?(?:sh|bash|zsh|dash|ksh|source|\.)(?:[ \t]+-[^\s<]*){0,8}[ \t]+(?:<[ \t]*)?[<=](?=\()`,
       "g"
     );
-    AN_EVAL_THAT_RUNS = new RegExp(String.raw`${COMMAND_POSITION}${COMMAND_PREFIXES}eval[ \t]+`, "g");
   }
 });
 
@@ -274,6 +288,46 @@ var init_shell_tools = __esm({
   }
 });
 
+// ../contracts/src/session-runtime.ts
+var CLAUDE_BRIDGE_CAPABILITY, CLAUDE_RESUME_CAPABILITY, CODEX_BRIDGE_CAPABILITY, CODEX_RESUME_CAPABILITY, GEMINI_BRIDGE_CAPABILITY, GEMINI_RESUME_CAPABILITY, SESSION_RUNTIMES;
+var init_session_runtime = __esm({
+  "../contracts/src/session-runtime.ts"() {
+    "use strict";
+    CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";
+    CLAUDE_RESUME_CAPABILITY = "claude-resume";
+    CODEX_BRIDGE_CAPABILITY = "codex-bridge";
+    CODEX_RESUME_CAPABILITY = "codex-resume";
+    GEMINI_BRIDGE_CAPABILITY = "gemini-bridge";
+    GEMINI_RESUME_CAPABILITY = "gemini-resume";
+    SESSION_RUNTIMES = {
+      claude: {
+        provider: "claude",
+        label: "Claude",
+        protocol: "claude-stream-json",
+        bridgeCapability: CLAUDE_BRIDGE_CAPABILITY,
+        resumeCapability: CLAUDE_RESUME_CAPABILITY,
+        phoneResume: false
+      },
+      codex: {
+        provider: "codex",
+        label: "Codex",
+        protocol: "codex-app-server",
+        bridgeCapability: CODEX_BRIDGE_CAPABILITY,
+        resumeCapability: CODEX_RESUME_CAPABILITY,
+        phoneResume: true
+      },
+      gemini: {
+        provider: "gemini",
+        label: "Gemini",
+        protocol: "gemini-stream-json",
+        bridgeCapability: GEMINI_BRIDGE_CAPABILITY,
+        resumeCapability: GEMINI_RESUME_CAPABILITY,
+        phoneResume: true
+      }
+    };
+  }
+});
+
 // ../contracts/src/claude-connector.ts
 var CLAUDE_DIRECTORY_URL, COWORK_CONNECTOR_LIMIT, CLAUDE_CONNECTOR_STEPS, CONNECTOR_SETUP_QUESTION, CLAUDE_CONNECTOR_TEST, connectorStarterPrompt, CLAUDE_CONNECTOR_STARTER;
 var init_claude_connector = __esm({
@@ -310,6 +364,7 @@ var PUSHARY_SETUP_COMMAND, defaults, AGENTS, HOOK_SOURCES, POLICY_AGENTS, AGENT_
 var init_agent_manifest = __esm({
   "../contracts/src/agent-manifest.ts"() {
     "use strict";
+    init_session_runtime();
     init_claude_connector();
     PUSHARY_SETUP_COMMAND = "npx pushary@latest setup";
     defaults = {
@@ -318,7 +373,7 @@ var init_agent_manifest = __esm({
       policyAgent: null,
       repoAware: false,
       disconnectable: false,
-      managedProvider: false,
+      sessionRuntime: null,
       bridged: false,
       enforcement: "cooperative",
       connectVia: "Plain MCP",
@@ -341,7 +396,7 @@ var init_agent_manifest = __esm({
         policyAgent: "claude_code",
         repoAware: true,
         disconnectable: true,
-        managedProvider: true,
+        sessionRuntime: SESSION_RUNTIMES.claude,
         enforcement: "enforced",
         connectVia: "Native hooks + MCP",
         setupCommand: PUSHARY_SETUP_COMMAND,
@@ -369,7 +424,7 @@ var init_agent_manifest = __esm({
         policyAgent: "codex",
         repoAware: true,
         disconnectable: true,
-        managedProvider: true,
+        sessionRuntime: SESSION_RUNTIMES.codex,
         enforcement: "enforced",
         connectVia: "Native hooks + MCP",
         setupCommand: PUSHARY_SETUP_COMMAND,
@@ -390,7 +445,7 @@ var init_agent_manifest = __esm({
         policyAgent: "gemini_cli",
         repoAware: true,
         disconnectable: true,
-        managedProvider: true,
+        sessionRuntime: SESSION_RUNTIMES.gemini,
         enforcement: "enforced",
         connectVia: "Native hooks + MCP",
         setupCommand: PUSHARY_SETUP_COMMAND,
@@ -606,7 +661,7 @@ var init_agent_manifest = __esm({
     );
     DISCONNECTABLE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.disconnectable && agent.hookSource !== null ? [agent.hookSource] : []));
     REPO_AWARE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.repoAware ? [agent.policyAgent] : []));
-    MANAGED_PROVIDERS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.managedProvider ? [agent.hookSource] : []));
+    MANAGED_PROVIDERS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.sessionRuntime ? [agent.sessionRuntime.provider] : []));
     BRIDGE_HOOK_SOURCES = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.bridged ? [agent.hookSource] : []));
     isAgentId = (value) => Object.keys(AGENTS).includes(value);
     isHooklessDisconnectableAgent = (value) => isAgentId(value) && AGENTS[value].disconnectable && AGENTS[value].hookSource === null;
@@ -1228,6 +1283,13 @@ var init_codex_shell_script = __esm({
   }
 });
 
+// ../contracts/src/codex-permission-profile.ts
+var init_codex_permission_profile = __esm({
+  "../contracts/src/codex-permission-profile.ts"() {
+    "use strict";
+  }
+});
+
 // ../contracts/src/codex-native-approval.ts
 var MCP_META_KEYS, COMPUTER_USE_META_KEYS;
 var init_codex_native_approval = __esm({
@@ -1235,6 +1297,7 @@ var init_codex_native_approval = __esm({
     "use strict";
     init_codex_shell_script();
     init_redaction();
+    init_codex_permission_profile();
     MCP_META_KEYS = ["codex_approval_kind", "codex_requires_user_input", "codex_request_type", "codex_strict_auto_review", "codex_sensitive_action", "approvals_reviewer", "persist", "source", "connector_id", "connector_name", "connector_description", "tool_name", "tool_title", "tool_description", "tool_params", "tool_params_display"];
     COMPUTER_USE_META_KEYS = [...MCP_META_KEYS, "riskLevel", "subtitle", "tool_call_id"];
   }
@@ -1263,6 +1326,18 @@ var init_encryption_account = __esm({
   }
 });
 
+// ../contracts/src/spawn-delivery.ts
+var SPAWN_RECOVERY;
+var init_spawn_delivery = __esm({
+  "../contracts/src/spawn-delivery.ts"() {
+    "use strict";
+    SPAWN_RECOVERY = {
+      receiptRetentionMs: 7 * 24 * 60 * 60 * 1e3,
+      retrySendWindowMs: 60 * 60 * 1e3
+    };
+  }
+});
+
 // ../contracts/src/claude-inbox.ts
 var CLAUDE_INBOX_SETTLEMENTS;
 var init_claude_inbox = __esm({
@@ -1289,7 +1364,10 @@ var SETUP_VERIFICATION_SENDER, DOCTOR_VERIFICATION_SENDER, SETUP_VERIFICATION_SE
 var init_src = __esm({
   "../contracts/src/index.ts"() {
     "use strict";
+    init_settlement_render();
+    init_settlement_render();
     init_audit_chain();
+    init_permission_grant_routing();
     init_receipt_evidence();
     init_team_context();
     init_team_phone_link();
@@ -1316,6 +1394,7 @@ var init_src = __esm({
     init_env_invocation();
     init_shell_command_string();
     init_agent_manifest();
+    init_session_runtime();
     init_claude_connector();
     init_chatgpt_plugin();
     init_partner_developer_guide();
@@ -1346,8 +1425,10 @@ var init_src = __esm({
     init_decision_lifetime();
     init_question_continuation();
     init_codex_native_approval();
+    init_codex_permission_profile();
     init_transcript_record();
     init_encryption_account();
+    init_spawn_delivery();
     init_codex_shell_script();
     init_claude_inbox();
     init_command_delivery();