pushary 1.9.139 → 1.9.141

package/dist/bin/pushary-daemon.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   inspectConfiguredManagedProviders
-} from "../chunk-ZAZQHOBS.js";
+} from "../chunk-O2CW5IFD.js";
 import {
   readHookWiring,
   readHookWiringSafely
-} from "../chunk-M6TJWXST.js";
-import "../chunk-LYLADUYE.js";
-import "../chunk-4NLZUCPG.js";
+} from "../chunk-ARIJUXCG.js";
+import "../chunk-D35XQMWO.js";
+import "../chunk-4Y2LO2WB.js";
 import {
   keepLinuxDaemonAfterLogout,
   lingerReportOf
@@ -15,26 +15,26 @@ import {
 import {
   HEARTBEAT_INTERVAL_MS,
   sendHeartbeat
-} from "../chunk-LVL7XAXK.js";
-import "../chunk-KXHGEJVW.js";
+} from "../chunk-RO36S2KY.js";
+import "../chunk-7TKF7IFS.js";
 import {
   readSignedOutDiagnosis
-} from "../chunk-ZNMLL2WN.js";
+} from "../chunk-QNEF5JII.js";
 import {
   HERMES_INSTALL_MARKER_FILE,
   defaultHermesHome,
   parseHermesInstallMarker
-} from "../chunk-Q5H5AFS7.js";
+} from "../chunk-TIX4DZ2J.js";
 import {
   writeHuman
 } from "../chunk-QCGNGEGE.js";
-import "../chunk-H4O4IPWY.js";
-import "../chunk-7Q6YKZY2.js";
-import "../chunk-UTUR6WEA.js";
-import "../chunk-RBPAUX6C.js";
+import "../chunk-CVGVWUNE.js";
+import "../chunk-VBYWBGIJ.js";
+import "../chunk-3MMOB5TM.js";
+import "../chunk-4KHBN7LI.js";
 import {
   exitOnHelpFlag
-} from "../chunk-3FNBN4JQ.js";
+} from "../chunk-CWCJFCAY.js";
 import {
   codexBinaryIsBroken,
   detectProviderLiveCapabilities,
@@ -43,8 +43,8 @@ import {
   launchableProviders,
   resolveControlPolicy,
   trackProviderInventory
-} from "../chunk-OLJTUTD2.js";
-import "../chunk-MAPC5KKZ.js";
+} from "../chunk-UQ352C7S.js";
+import "../chunk-XBPBYSNM.js";
 import {
   SESSION_REAP_SILENCE_MS,
   describeIdleWindow,
@@ -52,18 +52,18 @@ import {
   listProcessProofs,
   ownsLiveProcess,
   silentSpawnedProofs
-} from "../chunk-LSABM2ES.js";
+} from "../chunk-Q4XW5FWF.js";
 import "../chunk-CYTPQDQY.js";
 import {
   readLocalAutoUpdateReport
-} from "../chunk-LHYBHWCK.js";
-import "../chunk-GGTLV67J.js";
+} from "../chunk-CUJ2MGG5.js";
+import "../chunk-4JR6PPIY.js";
 import {
   startRegisteredTranscripts
-} from "../chunk-SKVPWXNK.js";
+} from "../chunk-3MFJDZ2L.js";
 import "../chunk-VAE5JBR5.js";
 import "../chunk-G66WIAST.js";
-import "../chunk-FIQ7ND7P.js";
+import "../chunk-LCYHJQGQ.js";
 import {
   DAEMON_LEASE_RENEW_INTERVAL_MS,
   DAEMON_YIELD_CHECK_INTERVAL_MS,
@@ -81,62 +81,62 @@ import {
   requestDaemonHandoff,
   stopDaemonRunning,
   writeDaemonNeedsLogin
-} from "../chunk-AEC72YC3.js";
+} from "../chunk-PNKFGNJF.js";
 import {
   hookOwnerOf
-} from "../chunk-OBKHLKKB.js";
+} from "../chunk-PY2JHBNC.js";
 import {
   markPendingCommandRefused,
   pendingCommandReceipts,
   removePendingCommand
-} from "../chunk-2YMVIBFT.js";
-import "../chunk-QTR6KQEU.js";
-import "../chunk-IOWB43KY.js";
-import "../chunk-BRXKVYTV.js";
+} from "../chunk-ME2ZKG6Y.js";
+import "../chunk-BFXIQGWS.js";
+import "../chunk-CAUSBRTJ.js";
+import "../chunk-ALJL6GDD.js";
 import "../chunk-YPY4YCIZ.js";
-import "../chunk-INGRSQVC.js";
+import "../chunk-KAYK66B3.js";
 import "../chunk-XMSDA5WA.js";
-import "../chunk-XQYBTRVW.js";
-import "../chunk-6A6OSNC2.js";
-import "../chunk-P3UCAWUP.js";
+import "../chunk-NDAJSNIZ.js";
+import "../chunk-JBQFVXDK.js";
+import "../chunk-3RBUCAO7.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-UZZRSCFR.js";
-import "../chunk-LHUA6ADC.js";
-import "../chunk-KYWH4XUR.js";
+import "../chunk-EADQYNLU.js";
+import "../chunk-62V26PAL.js";
+import "../chunk-3YV26XPH.js";
 import {
   spawnClaude
 } from "../chunk-H6CL3T2S.js";
 import {
   readCommandAck,
   refusedReceiptMessage
-} from "../chunk-3PQEUSPK.js";
-import "../chunk-IAWFSD4Q.js";
+} from "../chunk-J2ELAXGI.js";
+import "../chunk-6DAXKHVX.js";
 import {
   getMachineId
-} from "../chunk-J6CNQ5UK.js";
+} from "../chunk-XYRPLFMD.js";
 import "../chunk-YU2EUD7O.js";
 import {
   readControlMode
-} from "../chunk-XKXOT2ZU.js";
-import "../chunk-GVJWHTN2.js";
+} from "../chunk-QVXNSVBS.js";
+import "../chunk-OR47JOLE.js";
 import {
   claudeConfigDir,
   codexHome
-} from "../chunk-CZH3JDVB.js";
+} from "../chunk-GGXAZTSW.js";
 import {
   resolveBinary
-} from "../chunk-CQLQFN6B.js";
+} from "../chunk-FKKS4ZC5.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-IEHI64ZN.js";
+} from "../chunk-PDES33BK.js";
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
 import {
   writeJsonAtomicDurable
 } from "../chunk-TODDEIYG.js";
-import "../chunk-ZYLZCNOJ.js";
+import "../chunk-BKWDG5QV.js";
 import "../chunk-WIIMW5YO.js";
 import {
   CLAUDE_INBOX,
@@ -148,6 +148,8 @@ import {
   COMMAND_RECOVERY,
   NATIVE_INPUT,
   NativeInputAgent,
+  SPAWN_LAUNCH_FAILED_CODE,
+  SPAWN_UNCONFIRMED_ATTEMPT_FAILURE,
   claudeInboxAction,
   claudeWakeDecision,
   claudeWakeWaitingOn,
@@ -157,6 +159,7 @@ import {
   isCodexInputReceipt,
   isCodexQueuedReceipt,
   isCommandAcknowledgementReceipt,
+  isRecord,
   nativeIdentifier,
   nativeInputAction,
   nativeRecord,
@@ -166,9 +169,56 @@ import {
   parseHermesAdmission,
   parseHermesReplayCursor,
   qualifyHermesReceiptMode
-} from "../chunk-KQVURVAP.js";
+} from "../chunk-A6KNDKO5.js";
 import "../chunk-MLKGABMK.js";
 
+// src/spawn-claim.ts
+var parseSpawnClaim = (value) => {
+  if (!isRecord(value)) return null;
+  const request = value;
+  if (request.attemptCount !== void 0 && (typeof request.attemptCount !== "number" || !Number.isSafeInteger(request.attemptCount) || request.attemptCount < 1)) return null;
+  if (typeof request.id !== "string" || typeof request.prompt !== "string") return null;
+  return {
+    id: request.id,
+    prompt: request.prompt,
+    ...typeof request.claimId === "string" ? { claimId: request.claimId } : {},
+    ...typeof request.attemptCount === "number" ? { attemptCount: request.attemptCount } : {},
+    ...typeof request.cwd === "string" ? { cwd: request.cwd } : {},
+    ...typeof request.agent === "string" ? { agent: request.agent } : {},
+    ...typeof request.model === "string" ? { model: request.model } : {},
+    ...typeof request.resumeSessionId === "string" ? { resumeSessionId: request.resumeSessionId } : {}
+  };
+};
+var MAX_FAILURE_MESSAGE_LENGTH = 240;
+var launchFailureOf = (outcome) => outcome.state === "unconfirmed" ? SPAWN_UNCONFIRMED_ATTEMPT_FAILURE : { code: SPAWN_LAUNCH_FAILED_CODE, message: outcome.message.slice(0, MAX_FAILURE_MESSAGE_LENGTH), retryable: false };
+var spawnAcknowledgement = (request, machineId, outcome) => {
+  if (!request.claimId) return null;
+  const claim = { spawnId: request.id, claimId: request.claimId, machineId };
+  return outcome.state === "started" ? { ...claim, state: "started", pid: outcome.pid ?? null } : { ...claim, state: "failed", failure: launchFailureOf(outcome) };
+};
+var isRedelivered = (request) => (request.attemptCount ?? 1) > 1;
+var launchSpawnClaim = async (request, runtime) => {
+  const existingPid = await runtime.findExistingPid(request.id);
+  if (existingPid !== null) {
+    await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "started", pid: existingPid }));
+    return;
+  }
+  if (isRedelivered(request)) {
+    await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "unconfirmed" }));
+    return;
+  }
+  let pid;
+  try {
+    pid = await runtime.launch(request);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    runtime.reportLaunchError(message);
+    await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "failed", message }));
+    return;
+  }
+  await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "started", pid }));
+};
+
 // src/native-host-receiver.ts
 import { join as join2 } from "path";
 import { homedir } from "os";
@@ -1585,59 +1635,7 @@ var parseControlProbe = (value) => {
   return typeof id === "string" && id.length > 0 && id.length <= 128 ? id : null;
 };
 var daemonSignals = (platform = process.platform) => platform === "win32" ? ["SIGINT", "SIGTERM"] : ["SIGINT", "SIGTERM", "SIGHUP"];
-var parseSpawnClaim = (value) => {
-  if (typeof value !== "object" || value === null) return null;
-  const request = value;
-  if (typeof request.id !== "string" || typeof request.prompt !== "string") return null;
-  return {
-    id: request.id,
-    prompt: request.prompt,
-    ...typeof request.claimId === "string" ? { claimId: request.claimId } : {},
-    ...Number.isInteger(request.attemptCount) ? { attemptCount: request.attemptCount } : {},
-    ...typeof request.cwd === "string" ? { cwd: request.cwd } : {},
-    ...typeof request.agent === "string" ? { agent: request.agent } : {},
-    ...typeof request.model === "string" ? { model: request.model } : {},
-    ...typeof request.resumeSessionId === "string" ? { resumeSessionId: request.resumeSessionId } : {}
-  };
-};
 var stopAcknowledgement = (request, machineId, state) => request.id ? { stopId: request.id, machineId, state } : null;
-var spawnAcknowledgement = (request, machineId, outcome) => {
-  if (!request.claimId) return null;
-  return outcome.state === "started" ? {
-    spawnId: request.id,
-    claimId: request.claimId,
-    machineId,
-    state: "started",
-    pid: outcome.pid ?? null
-  } : {
-    spawnId: request.id,
-    claimId: request.claimId,
-    machineId,
-    state: "failed",
-    failure: {
-      code: "launch_failed",
-      message: outcome.message.slice(0, 240),
-      retryable: false
-    }
-  };
-};
-var launchSpawnClaim = async (request, runtime) => {
-  const existingPid = await runtime.findExistingPid(request.id);
-  if (existingPid !== null) {
-    await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "started", pid: existingPid }));
-    return;
-  }
-  let pid;
-  try {
-    pid = await runtime.launch(request);
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    runtime.reportLaunchError(message);
-    await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "failed", message }));
-    return;
-  }
-  await runtime.acknowledge(spawnAcknowledgement(request, runtime.machineId, { state: "started", pid }));
-};
 var DrainError = class extends Error {
   constructor(status) {
     super(`drain ${status}`);

package/dist/bin/pushary-disconnect.js

@@ -2,18 +2,18 @@
 import {
   declinedAgentsFile,
   recordDeclinedAgent
-} from "../chunk-4NLZUCPG.js";
+} from "../chunk-4Y2LO2WB.js";
 import {
   isCursorPluginLeftover,
   isPusharyCursorPluginManifest,
   releaseSoleGate
-} from "../chunk-2X2JHX77.js";
+} from "../chunk-FOPV3VQD.js";
 import {
   planFxRemoval,
   removeClineServer
-} from "../chunk-H4O4IPWY.js";
-import "../chunk-7Q6YKZY2.js";
-import "../chunk-UTUR6WEA.js";
+} from "../chunk-CVGVWUNE.js";
+import "../chunk-VBYWBGIJ.js";
+import "../chunk-3MMOB5TM.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -25,10 +25,10 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-RBPAUX6C.js";
+} from "../chunk-4KHBN7LI.js";
 import {
   exitOnHelpFlag
-} from "../chunk-3FNBN4JQ.js";
+} from "../chunk-CWCJFCAY.js";
 import {
   compatibleConfigFile,
   compatibleDocuments,
@@ -38,31 +38,31 @@ import {
   isEmptiedPusharyOwnedDocument,
   removeCompatibleHooks,
   removeCompatibleMcpServer
-} from "../chunk-FIQ7ND7P.js";
+} from "../chunk-LCYHJQGQ.js";
 import {
   removeGeminiSettings
-} from "../chunk-OBKHLKKB.js";
-import "../chunk-2YMVIBFT.js";
-import "../chunk-QTR6KQEU.js";
-import "../chunk-IOWB43KY.js";
-import "../chunk-BRXKVYTV.js";
+} from "../chunk-PY2JHBNC.js";
+import "../chunk-ME2ZKG6Y.js";
+import "../chunk-BFXIQGWS.js";
+import "../chunk-CAUSBRTJ.js";
+import "../chunk-ALJL6GDD.js";
 import {
   parseFlags
 } from "../chunk-YPY4YCIZ.js";
-import "../chunk-6A6OSNC2.js";
-import "../chunk-P3UCAWUP.js";
+import "../chunk-JBQFVXDK.js";
+import "../chunk-3RBUCAO7.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-UZZRSCFR.js";
-import "../chunk-LHUA6ADC.js";
-import "../chunk-KYWH4XUR.js";
-import "../chunk-3PQEUSPK.js";
-import "../chunk-IAWFSD4Q.js";
-import "../chunk-J6CNQ5UK.js";
+import "../chunk-EADQYNLU.js";
+import "../chunk-62V26PAL.js";
+import "../chunk-3YV26XPH.js";
+import "../chunk-J2ELAXGI.js";
+import "../chunk-6DAXKHVX.js";
+import "../chunk-XYRPLFMD.js";
 import {
   UsageError
 } from "../chunk-YU2EUD7O.js";
-import "../chunk-XKXOT2ZU.js";
-import "../chunk-GVJWHTN2.js";
+import "../chunk-QVXNSVBS.js";
+import "../chunk-OR47JOLE.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -92,9 +92,9 @@ import {
   removePusharySettings,
   removePusharyToolPermissions,
   restoreClaudeMcpServer
-} from "../chunk-CZH3JDVB.js";
-import "../chunk-CQLQFN6B.js";
-import "../chunk-IEHI64ZN.js";
+} from "../chunk-GGXAZTSW.js";
+import "../chunk-FKKS4ZC5.js";
+import "../chunk-PDES33BK.js";
 import {
   EXIT
 } from "../chunk-BG4HHB7E.js";
@@ -103,14 +103,14 @@ import {
 } from "../chunk-TODDEIYG.js";
 import {
   isInvocationOf
-} from "../chunk-ZYLZCNOJ.js";
+} from "../chunk-BKWDG5QV.js";
 import "../chunk-WIIMW5YO.js";
 import {
   DISCONNECTABLE_AGENTS,
   DISCONNECT_AGENT_IDS,
   hookCompatibleProfileBySource,
   normalizeAgentId
-} from "../chunk-KQVURVAP.js";
+} from "../chunk-A6KNDKO5.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-disconnect.ts

package/dist/bin/pushary-display-hook.js

@@ -9,6 +9,13 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// ../contracts/src/settlement-render.ts
+var init_settlement_render = __esm({
+  "../contracts/src/settlement-render.ts"() {
+    "use strict";
+  }
+});
+
 // ../contracts/src/audit-chain.ts
 var AUDIT_CHAIN_GENESIS_HASH, AUDIT_CHECKPOINT_INTERVAL_MS, AUDIT_CHECKPOINT_SWEEP_MS, AUDIT_CHAIN_PASS_INTERVAL_MS, AUDIT_CHECKPOINT_MAX_AGE_MS, ASKED_TEXT_FIELDS, ASKED_NULLABLE_FIELDS, DECISION_NULLABLE_FIELDS, ASKED_PAYLOAD_KEYS, DECISION_PAYLOAD_KEYS;
 var init_audit_chain = __esm({
@@ -27,6 +34,14 @@ var init_audit_chain = __esm({
   }
 });
 
+// ../contracts/src/permission-grant-routing.ts
+var init_permission_grant_routing = __esm({
+  "../contracts/src/permission-grant-routing.ts"() {
+    "use strict";
+    init_src();
+  }
+});
+
 // ../contracts/src/redaction.ts
 var CREDENTIAL_NAME, CREDENTIAL_KEY, DISPLAYED_CREDENTIAL_KEY, SHELL_INERT_UNIT, SHELL_INERT_SINGLE_QUOTED_UNIT, SHELL_INERT_URL_PASSWORD_UNIT, PEM_LINE_BREAK, credentialAssignmentRule, DISPLAYED_SECRET_SHAPES, CUT_OFF_SECRET_SHAPES, secretRedactionRules, SECRET_REDACTION_RULES, CUT_OFF_TEXT_REDACTION_RULES;
 var init_redaction = __esm({
@@ -274,6 +289,46 @@ var init_shell_tools = __esm({
   }
 });
 
+// ../contracts/src/session-runtime.ts
+var CLAUDE_BRIDGE_CAPABILITY, CLAUDE_RESUME_CAPABILITY, CODEX_BRIDGE_CAPABILITY, CODEX_RESUME_CAPABILITY, GEMINI_BRIDGE_CAPABILITY, GEMINI_RESUME_CAPABILITY, SESSION_RUNTIMES;
+var init_session_runtime = __esm({
+  "../contracts/src/session-runtime.ts"() {
+    "use strict";
+    CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";
+    CLAUDE_RESUME_CAPABILITY = "claude-resume";
+    CODEX_BRIDGE_CAPABILITY = "codex-bridge";
+    CODEX_RESUME_CAPABILITY = "codex-resume";
+    GEMINI_BRIDGE_CAPABILITY = "gemini-bridge";
+    GEMINI_RESUME_CAPABILITY = "gemini-resume";
+    SESSION_RUNTIMES = {
+      claude: {
+        provider: "claude",
+        label: "Claude",
+        protocol: "claude-stream-json",
+        bridgeCapability: CLAUDE_BRIDGE_CAPABILITY,
+        resumeCapability: CLAUDE_RESUME_CAPABILITY,
+        phoneResume: false
+      },
+      codex: {
+        provider: "codex",
+        label: "Codex",
+        protocol: "codex-app-server",
+        bridgeCapability: CODEX_BRIDGE_CAPABILITY,
+        resumeCapability: CODEX_RESUME_CAPABILITY,
+        phoneResume: true
+      },
+      gemini: {
+        provider: "gemini",
+        label: "Gemini",
+        protocol: "gemini-stream-json",
+        bridgeCapability: GEMINI_BRIDGE_CAPABILITY,
+        resumeCapability: GEMINI_RESUME_CAPABILITY,
+        phoneResume: true
+      }
+    };
+  }
+});
+
 // ../contracts/src/claude-connector.ts
 var CLAUDE_DIRECTORY_URL, COWORK_CONNECTOR_LIMIT, CLAUDE_CONNECTOR_STEPS, CONNECTOR_SETUP_QUESTION, CLAUDE_CONNECTOR_TEST, connectorStarterPrompt, CLAUDE_CONNECTOR_STARTER;
 var init_claude_connector = __esm({
@@ -310,6 +365,7 @@ var PUSHARY_SETUP_COMMAND, defaults, AGENTS, HOOK_SOURCES, POLICY_AGENTS, AGENT_
 var init_agent_manifest = __esm({
   "../contracts/src/agent-manifest.ts"() {
     "use strict";
+    init_session_runtime();
     init_claude_connector();
     PUSHARY_SETUP_COMMAND = "npx pushary@latest setup";
     defaults = {
@@ -318,7 +374,7 @@ var init_agent_manifest = __esm({
       policyAgent: null,
       repoAware: false,
       disconnectable: false,
-      managedProvider: false,
+      sessionRuntime: null,
       bridged: false,
       enforcement: "cooperative",
       connectVia: "Plain MCP",
@@ -341,7 +397,7 @@ var init_agent_manifest = __esm({
         policyAgent: "claude_code",
         repoAware: true,
         disconnectable: true,
-        managedProvider: true,
+        sessionRuntime: SESSION_RUNTIMES.claude,
         enforcement: "enforced",
         connectVia: "Native hooks + MCP",
         setupCommand: PUSHARY_SETUP_COMMAND,
@@ -369,7 +425,7 @@ var init_agent_manifest = __esm({
         policyAgent: "codex",
         repoAware: true,
         disconnectable: true,
-        managedProvider: true,
+        sessionRuntime: SESSION_RUNTIMES.codex,
         enforcement: "enforced",
         connectVia: "Native hooks + MCP",
         setupCommand: PUSHARY_SETUP_COMMAND,
@@ -390,7 +446,7 @@ var init_agent_manifest = __esm({
         policyAgent: "gemini_cli",
         repoAware: true,
         disconnectable: true,
-        managedProvider: true,
+        sessionRuntime: SESSION_RUNTIMES.gemini,
         enforcement: "enforced",
         connectVia: "Native hooks + MCP",
         setupCommand: PUSHARY_SETUP_COMMAND,
@@ -606,7 +662,7 @@ var init_agent_manifest = __esm({
     );
     DISCONNECTABLE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.disconnectable && agent.hookSource !== null ? [agent.hookSource] : []));
     REPO_AWARE_AGENTS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.repoAware ? [agent.policyAgent] : []));
-    MANAGED_PROVIDERS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.managedProvider ? [agent.hookSource] : []));
+    MANAGED_PROVIDERS = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.sessionRuntime ? [agent.sessionRuntime.provider] : []));
     BRIDGE_HOOK_SOURCES = Object.freeze(Object.values(AGENTS).flatMap((agent) => agent.bridged ? [agent.hookSource] : []));
     isAgentId = (value) => Object.keys(AGENTS).includes(value);
     isHooklessDisconnectableAgent = (value) => isAgentId(value) && AGENTS[value].disconnectable && AGENTS[value].hookSource === null;
@@ -1228,6 +1284,19 @@ var init_codex_shell_script = __esm({
   }
 });
 
+// ../contracts/src/codex-permission-profile.ts
+var BROAD_ROOTS_IN_NAMING_ORDER, RANK_IN_A_SENSITIVE_PLACE, RANK_OUTSIDE_THE_WORKING_DIRECTORY, RANK_INSIDE_THE_WORKING_DIRECTORY;
+var init_codex_permission_profile = __esm({
+  "../contracts/src/codex-permission-profile.ts"() {
+    "use strict";
+    init_redaction();
+    BROAD_ROOTS_IN_NAMING_ORDER = ["computer", "drive", "volume", "share", "everyHome", "home", "topLevel"];
+    RANK_IN_A_SENSITIVE_PLACE = BROAD_ROOTS_IN_NAMING_ORDER.length;
+    RANK_OUTSIDE_THE_WORKING_DIRECTORY = RANK_IN_A_SENSITIVE_PLACE + 1;
+    RANK_INSIDE_THE_WORKING_DIRECTORY = RANK_OUTSIDE_THE_WORKING_DIRECTORY + 1;
+  }
+});
+
 // ../contracts/src/codex-native-approval.ts
 var MCP_META_KEYS, COMPUTER_USE_META_KEYS;
 var init_codex_native_approval = __esm({
@@ -1235,6 +1304,7 @@ var init_codex_native_approval = __esm({
     "use strict";
     init_codex_shell_script();
     init_redaction();
+    init_codex_permission_profile();
     MCP_META_KEYS = ["codex_approval_kind", "codex_requires_user_input", "codex_request_type", "codex_strict_auto_review", "codex_sensitive_action", "approvals_reviewer", "persist", "source", "connector_id", "connector_name", "connector_description", "tool_name", "tool_title", "tool_description", "tool_params", "tool_params_display"];
     COMPUTER_USE_META_KEYS = [...MCP_META_KEYS, "riskLevel", "subtitle", "tool_call_id"];
   }
@@ -1263,6 +1333,18 @@ var init_encryption_account = __esm({
   }
 });
 
+// ../contracts/src/spawn-delivery.ts
+var SPAWN_RECOVERY;
+var init_spawn_delivery = __esm({
+  "../contracts/src/spawn-delivery.ts"() {
+    "use strict";
+    SPAWN_RECOVERY = {
+      receiptRetentionMs: 7 * 24 * 60 * 60 * 1e3,
+      retrySendWindowMs: 60 * 60 * 1e3
+    };
+  }
+});
+
 // ../contracts/src/claude-inbox.ts
 var CLAUDE_INBOX_SETTLEMENTS;
 var init_claude_inbox = __esm({
@@ -1289,7 +1371,10 @@ var SETUP_VERIFICATION_SENDER, DOCTOR_VERIFICATION_SENDER, SETUP_VERIFICATION_SE
 var init_src = __esm({
   "../contracts/src/index.ts"() {
     "use strict";
+    init_settlement_render();
+    init_settlement_render();
     init_audit_chain();
+    init_permission_grant_routing();
     init_receipt_evidence();
     init_team_context();
     init_team_phone_link();
@@ -1316,6 +1401,7 @@ var init_src = __esm({
     init_env_invocation();
     init_shell_command_string();
     init_agent_manifest();
+    init_session_runtime();
     init_claude_connector();
     init_chatgpt_plugin();
     init_partner_developer_guide();
@@ -1346,8 +1432,10 @@ var init_src = __esm({
     init_decision_lifetime();
     init_question_continuation();
     init_codex_native_approval();
+    init_codex_permission_profile();
     init_transcript_record();
     init_encryption_account();
+    init_spawn_delivery();
     init_codex_shell_script();
     init_claude_inbox();
     init_command_delivery();