pushary 1.9.140 → 1.9.142

package/dist/{chunk-QCIZDJSU.js → chunk-C5LIS3XM.js}

@@ -1799,6 +1799,7 @@ var A_SHELL_RUNNING_A_SUBSTITUTION = new RegExp(
   String.raw`${COMMAND_POSITION}${COMMAND_PREFIXES}(?:[^\s;&|()<>` + "`" + String.raw`]*/)?(?:sh|bash|zsh|dash|ksh|source|\.)(?:[ \t]+-[^\s<]*){0,8}[ \t]+(?:<[ \t]*)?[<=](?=\()`,
   "g"
 );
+var AN_EVAL_THAT_RUNS = new RegExp(String.raw`${COMMAND_POSITION}${COMMAND_PREFIXES}eval[ \t]+`, "g");
 var CASE_HEAD = /(^|[\s;&|(])case[ \t]+(?:"[^"\n]*"|'[^'\n]*'|\S+)[ \t\n]+in(?=[\s;])/g;
 var CASE_ARM_OPENING = /;[;&]{0,2}[ \t\n]*\(?[^()\s;][^()\n;]*\)[ \t\n]*/g;
 var CASE_ARM_ENDING = /;;&?|;&/g;
@@ -1861,8 +1862,70 @@ var readingWithShellFormsSpelledOut = (text3) => {
   const reading = SHELL_FORM_REWRITES.reduce((current, rewrite) => rewrite(current), text3);
   return reading === text3 ? null : reading;
 };
+var SHELLS_THAT_RUN_A_SCRIPT_ARGUMENT = /* @__PURE__ */ new Set(["sh", "bash", "zsh", "dash", "ksh"]);
+var SHORT_FLAGS_WITH_THE_COMMAND_FLAG = /^-[A-Za-z]*c[A-Za-z]*$/;
+var SHELL_LONG_OPTIONS_WITH_A_VALUE = /* @__PURE__ */ new Set(["--rcfile", "--init-file"]);
+var SHELL_SHORT_FLAGS_ENDING_IN_AN_OPTION_NAME = /^[-+][A-Za-z]*[oO]$/;
+var SHELL_OPTION_WORD = /^[-+]/;
+var COMMAND_SEPARATOR_INSIDE_A_WORD = /[;&|()`]/;
 var DEEPEST_NESTED_SCRIPT_READ = 3;
 var MOST_SCRIPTS_READ_FROM_ONE_COMMAND = 16;
+var programNamedBy = (word) => basenameOf(word.split(COMMAND_SEPARATOR_INSIDE_A_WORD).filter((piece) => piece !== "").pop() ?? "");
+var scriptArgumentOfAShellAt = (words, index) => {
+  if (!SHELLS_THAT_RUN_A_SCRIPT_ARGUMENT.has(programNamedBy(words[index]?.text ?? ""))) return void 0;
+  for (let next = index + 1; SHELL_OPTION_WORD.test(words[next]?.text ?? ""); next += 1) {
+    const option = words[next]?.text ?? "";
+    if (SHORT_FLAGS_WITH_THE_COMMAND_FLAG.test(option)) return words[next + 1]?.text;
+    if (SHELL_LONG_OPTIONS_WITH_A_VALUE.has(option) || SHELL_SHORT_FLAGS_ENDING_IN_AN_OPTION_NAME.test(option)) next += 1;
+  }
+  return void 0;
+};
+var scriptsOfShellsIn = (text3) => {
+  const words = shellWordsOf(text3);
+  return words === null ? [] : words.flatMap((_, index) => scriptArgumentOfAShellAt(words, index) ?? []);
+};
+var endsTheCommandAsAControlOperator = (text3, index) => {
+  const char = text3.charAt(index);
+  const before = text3.charAt(index - 1);
+  if (char === "|") return before !== ">";
+  return char === "&" && before !== ">" && before !== "<" && text3.charAt(index + 1) !== ">";
+};
+var endOfTheSimpleCommandAt = (text3, from) => {
+  let depth = 0;
+  let quote = null;
+  let inBackticks = false;
+  for (let index = from; index < text3.length; index += 1) {
+    const char = text3.charAt(index);
+    if (quote === "'") {
+      if (char === "'") quote = null;
+    } else if (char === "\\") {
+      index += 1;
+    } else if (quote === '"') {
+      if (char === '"') quote = null;
+    } else if (char === "'" || char === '"') {
+      quote = char;
+    } else if (char === "`") {
+      inBackticks = !inBackticks;
+    } else if (inBackticks) {
+      continue;
+    } else if (char === "(") {
+      depth += 1;
+    } else if (char === ")" && depth > 0) {
+      depth -= 1;
+    } else if (depth === 0 && (char === "\n" || char === ";" || char === ")" || endsTheCommandAsAControlOperator(text3, index))) {
+      return index;
+    }
+  }
+  return text3.length;
+};
+var scriptOfAnEvalEndingAt = (text3, end) => {
+  const words = shellWordsOf(text3.slice(end, endOfTheSimpleCommandAt(text3, end)));
+  if (words === null) return [];
+  const firstComment = words.findIndex((word) => word.comment);
+  return [(firstComment === -1 ? words : words.slice(0, firstComment)).map((word) => word.text).join(" ")];
+};
+var scriptsOfEvalsIn = (text3) => [...text3.matchAll(AN_EVAL_THAT_RUNS)].slice(0, MOST_SCRIPTS_READ_FROM_ONE_COMMAND + 1).flatMap((match) => scriptOfAnEvalEndingAt(text3, match.index + match[0].length));
+var scriptsWrittenForAShellOrAnEval = (text3) => [...scriptsOfEvalsIn(text3), ...scriptsOfShellsIn(text3)];
 var READING_OF_SCRIPTS_TOO_MANY_TO_READ = ": | sh";
 var readingsOfNestedShellScripts = (text3, scriptsDirectlyInside) => {
   const readings = [];
@@ -3853,6 +3916,310 @@ var codexPermissionPaths = (profile, access) => [
   ...profile.fileSystem?.[access] ?? [],
   ...(profile.fileSystem?.entries ?? []).filter((entry2) => entry2.access === access).map((entry2) => entry2.path.path)
 ];
+var CODEX_PERMISSION_QUESTION_MAX_UNITS = 180;
+var CODEX_PERMISSION_QUESTION_WITHOUT_A_GRANT = "Allow a Codex permission request that names no network access and no file paths?";
+var BROAD_ROOT_LABELS = {
+  computer: "the whole computer",
+  drive: "the whole drive",
+  volume: "a whole volume",
+  share: "a network share",
+  everyHome: "every home folder",
+  home: "a home folder",
+  topLevel: "a top-level folder"
+};
+var BROAD_ROOTS_IN_NAMING_ORDER = ["computer", "drive", "volume", "share", "everyHome", "home", "topLevel"];
+var RANK_IN_A_SENSITIVE_PLACE = BROAD_ROOTS_IN_NAMING_ORDER.length;
+var RANK_OUTSIDE_THE_WORKING_DIRECTORY = RANK_IN_A_SENSITIVE_PLACE + 1;
+var RANK_INSIDE_THE_WORKING_DIRECTORY = RANK_OUTSIDE_THE_WORKING_DIRECTORY + 1;
+var DRIVE_PREFIX = /^[a-z]:/i;
+var PATH_SEPARATOR = /[\\/]/;
+var TWO_SEPARATORS_THEN_A_NAME = /^[\\/]{2}[^\\/]/;
+var DOTS_AND_SPACES_WINDOWS_DROPS = /[. ]+$/;
+var PROCESS_WHOSE_ROOT_IS_LINKED = /^(?:self|thread-self|\d+)$/;
+var MACOS_DATA_VOLUME_FOLDERS = ["system", "volumes", "data"];
+var PROCESS_FOLDER = "proc";
+var PROCESS_ROOT_LINK = "root";
+var PROCESS_ROOT_FOLDERS = 3;
+var MOUNT_PARENT_FOLDERS = ["volumes", "mnt"];
+var MOUNT_FOLDERS = 2;
+var MACOS_PRIVATE_FOLDER = "private";
+var MACOS_PRIVATE_FOLDERS = 1;
+var FOLDERS_MACOS_KEEPS_UNDER_PRIVATE = ["etc", "var", "tmp"];
+var HOME_PARENT_FOLDERS = ["users", "home"];
+var FOLDERS_EVERY_HOME_SHARES = ["shared", "public"];
+var SUPERUSER_HOME_FOLDER = "root";
+var MACOS_SUPERUSER_HOME_PARENT = "var";
+var HIDDEN_ENTRY_PREFIX = ".";
+var HOME_APP_DATA_FOLDERS = ["library", "appdata"];
+var HOME_APP_DATA_FOLDERS_HOLDING_NOTHING_KEPT = ["caches", "logs"];
+var SYSTEM_FOLDERS_OF_A_COMPUTER = ["etc", "library", "system", "usr", "bin", "sbin", "dev", "boot", "lib", "lib64", "var", "applications", "opt", "proc", "sys"];
+var ENTRIES_OF_A_SYSTEM_FOLDER_HOLDING_NOTHING_KEPT = {
+  dev: ["null", "zero", "tty", "stdin", "stdout", "stderr", "fd", "random", "urandom"],
+  var: ["folders", "tmp", "log"]
+};
+var SYSTEM_FOLDERS_OF_A_DRIVE = ["windows", "program files", "program files (x86)", "programdata"];
+var SENSITIVE_PLACE_LABELS = {
+  hiddenInAHome: "hidden in a home folder",
+  appDataOfAHome: "app data in a home folder",
+  system: "a system folder"
+};
+var SEPARATOR_RUN = /[\\/]{2,}/g;
+var NETWORK_GRANT = "use the network";
+var WRITABLE_LEAD = "read and write ";
+var READ_ONLY_LEAD = "read ";
+var LIST_SEPARATOR = ", ";
+var QUOTE_UNITS = 2;
+var DETAILS_NOTE = " The details list every path.";
+var PERMISSIONS_HEADING = "Requested permissions:";
+var ELISION_MARK = "\u2026";
+var PATH_NO_REDACTION_SETTLES = "[redacted]";
+var SETTLING_PASSES = 4;
+var NAMED_PATH_FLOOR_UNITS = 32;
+var ONLY_NAMED_PATH_FLOOR_UNITS = 12;
+var NEVER_DRAWN_OR_BLANK = /^(?:[\p{C}\p{Zl}\p{Zp}\p{Default_Ignorable_Code_Point}\u2800]|(?! )\p{Zs})$/u;
+var COMBINING_MARK = /^\p{M}$/u;
+var LETTER_OR_DIGIT = /^[\p{L}\p{N}]$/u;
+var DISPLAY_UNIT = /\\ud[89ab][0-9a-f]{2}\\ud[c-f][0-9a-f]{2}|\\u[0-9a-f]{4}|\\["\\]|\[redacted(?: key)?\]|[\s\S]/gu;
+var PATH_IN_A_QUESTION = { backslashed: '"\\', reserved: ELISION_MARK };
+var PROSE_IN_QUOTES = { backslashed: '"\\', reserved: "" };
+var TEXT_ALREADY_ESCAPED = { backslashed: "", reserved: "" };
+var unitEscapes = (text3) => Array.from({ length: text3.length }, (_, index) => `\\u${text3.charCodeAt(index).toString(16).padStart(4, "0")}`).join("");
+var withCodePointVisible = (rules) => (shown, codePoint) => {
+  if (rules.backslashed.includes(codePoint)) return { text: `${shown.text}\\${codePoint}`, marksHaveABase: false };
+  if (rules.reserved.includes(codePoint) || NEVER_DRAWN_OR_BLANK.test(codePoint)) return { text: `${shown.text}${unitEscapes(codePoint)}`, marksHaveABase: false };
+  if (COMBINING_MARK.test(codePoint)) return { text: `${shown.text}${shown.marksHaveABase ? codePoint : unitEscapes(codePoint)}`, marksHaveABase: shown.marksHaveABase };
+  return { text: `${shown.text}${codePoint}`, marksHaveABase: LETTER_OR_DIGIT.test(codePoint) };
+};
+var visibleText = (text3, rules) => Array.from(text3).reduce(withCodePointVisible(rules), { text: "", marksHaveABase: false }).text;
+var inQuotes = (inside) => `"${inside}"`;
+var leadingUnitsWithin = (displayUnits, maxUnits) => {
+  const kept = [];
+  let units = 0;
+  for (const displayUnit of displayUnits) {
+    if (units + displayUnit.length > maxUnits) break;
+    kept.push(displayUnit);
+    units += displayUnit.length;
+  }
+  return kept;
+};
+var shortenedInTheMiddle = (text3, maxUnits) => {
+  if (text3.length <= maxUnits) return text3;
+  const displayUnits = text3.match(DISPLAY_UNIT) ?? [];
+  const keptUnits = maxUnits - ELISION_MARK.length;
+  const headUnits = Math.ceil(keptUnits / 2);
+  const head = leadingUnitsWithin(displayUnits, headUnits);
+  const tail = [...leadingUnitsWithin([...displayUnits].reverse(), keptUnits - headUnits)].reverse();
+  return `${head.join("")}${ELISION_MARK}${tail.join("")}`;
+};
+var isStillInQuotes = (text3) => text3.length >= QUOTE_UNITS && text3.startsWith('"') && text3.endsWith('"');
+var settledWithin = (inside, maxUnits, passesLeft = SETTLING_PASSES) => {
+  const shortened = shortenedInTheMiddle(inside, maxUnits);
+  const redacted = redactSecrets(inQuotes(shortened));
+  if (redacted === inQuotes(shortened)) return shortened;
+  if (passesLeft === 0 || !isStillInQuotes(redacted)) return PATH_NO_REDACTION_SETTLES;
+  return settledWithin(visibleText(redacted.slice(1, -1), TEXT_ALREADY_ESCAPED), maxUnits, passesLeft - 1);
+};
+var isNamedSegment = (segment) => segment.length > 0;
+var withoutWhatWindowsDrops = (segment) => segment.replace(DOTS_AND_SPACES_WINDOWS_DROPS, "");
+var pathShape = (path) => {
+  const drive = DRIVE_PREFIX.exec(path)?.[0].toLowerCase() ?? null;
+  const segments = path.slice(drive?.length ?? 0).split(PATH_SEPARATOR);
+  return {
+    drive,
+    doubleSlashed: drive === null && TWO_SEPARATORS_THEN_A_NAME.test(path),
+    segments: (drive === null ? segments : segments.map(withoutWhatWindowsDrops)).filter(isNamedSegment)
+  };
+};
+var spellingOf = ({ drive, doubleSlashed, segments }) => `${drive ?? ""}${doubleSlashed ? "//" : "/"}${segments.join("/")}`;
+var startsWithTheDataVolume = (folders) => MACOS_DATA_VOLUME_FOLDERS.every((folder, index) => folders[index] === folder);
+var startsWithAProcessRoot = ([first, second, third]) => first === PROCESS_FOLDER && second !== void 0 && PROCESS_WHOSE_ROOT_IS_LINKED.test(second) && third === PROCESS_ROOT_LINK;
+var startsWithAMount = ([first, second]) => first !== void 0 && second !== void 0 && MOUNT_PARENT_FOLDERS.includes(first);
+var startsWithAFolderMacosKeepsUnderPrivate = ([first, second]) => first === MACOS_PRIVATE_FOLDER && second !== void 0 && FOLDERS_MACOS_KEEPS_UNDER_PRIVATE.includes(second);
+var beyondRootAliases = ({ root, folders }) => {
+  if (startsWithTheDataVolume(folders)) return beyondRootAliases({ root: "volume", folders: folders.slice(MACOS_DATA_VOLUME_FOLDERS.length) });
+  if (startsWithAProcessRoot(folders)) return beyondRootAliases({ root: "computer", folders: folders.slice(PROCESS_ROOT_FOLDERS) });
+  if (startsWithAMount(folders)) return beyondRootAliases({ root: "volume", folders: folders.slice(MOUNT_FOLDERS) });
+  if (startsWithAFolderMacosKeepsUnderPrivate(folders)) return beyondRootAliases({ root, folders: folders.slice(MACOS_PRIVATE_FOLDERS) });
+  return { root, folders };
+};
+var placeOf = ({ drive, segments }) => {
+  const folders = segments.map((segment) => segment.toLowerCase());
+  return drive === null ? beyondRootAliases({ root: "computer", folders }) : { root: "drive", folders };
+};
+var namesAHome = (parent, folder) => HOME_PARENT_FOLDERS.includes(parent) && !FOLDERS_EVERY_HOME_SHARES.includes(folder) || parent === MACOS_SUPERUSER_HOME_PARENT && folder === SUPERUSER_HOME_FOLDER;
+var homeRelativePlace = ({ root, folders }) => {
+  const [first, second] = folders;
+  if (first === SUPERUSER_HOME_FOLDER) return { home: `${root}/${first}`, inside: folders.slice(1) };
+  if (first === void 0 || second === void 0 || !namesAHome(first, second)) return null;
+  return { home: `${root}/${first}/${second}`, inside: folders.slice(2) };
+};
+var sensitivePlaceInAHome = ({ home, inside }) => {
+  const [entry2, kept] = inside;
+  if (entry2 === void 0) return null;
+  if (entry2.startsWith(HIDDEN_ENTRY_PREFIX)) return { kind: "hiddenInAHome", folder: `${home}/${entry2}`, isTheFolderItself: kept === void 0 };
+  if (!HOME_APP_DATA_FOLDERS.includes(entry2) || kept !== void 0 && HOME_APP_DATA_FOLDERS_HOLDING_NOTHING_KEPT.includes(kept)) return null;
+  return { kind: "appDataOfAHome", folder: `${home}/${entry2}`, isTheFolderItself: kept === void 0 };
+};
+var holdsNothingKept = (systemFolder, entry2) => entry2 !== void 0 && (ENTRIES_OF_A_SYSTEM_FOLDER_HOLDING_NOTHING_KEPT[systemFolder] ?? []).includes(entry2);
+var systemFoldersOf = (root) => root === "drive" ? SYSTEM_FOLDERS_OF_A_DRIVE : SYSTEM_FOLDERS_OF_A_COMPUTER;
+var sensitivePlaceOf = (place) => {
+  const home = homeRelativePlace(place);
+  if (home !== null) return sensitivePlaceInAHome(home);
+  const [first, entry2] = place.folders;
+  if (first === void 0 || !systemFoldersOf(place.root).includes(first) || holdsNothingKept(first, entry2)) return null;
+  return { kind: "system", folder: `${place.root}/${first}`, isTheFolderItself: entry2 === void 0 };
+};
+var broadRootOf = (shape, place, sensitivePlace) => {
+  const [first, second] = place.folders;
+  if (first === void 0) return place.root;
+  if (homeRelativePlace(place)?.inside.length === 0) return "home";
+  if (second === void 0) return HOME_PARENT_FOLDERS.includes(first) ? "everyHome" : "topLevel";
+  return shape.doubleSlashed && shape.segments.length === 2 && sensitivePlace === null ? "share" : null;
+};
+var isInside = (path, folder) => folder.segments.length > 0 && path.drive === folder.drive && path.doubleSlashed === folder.doubleSlashed && folder.segments.every((segment, index) => path.segments[index] === segment);
+var FITTING_PLANS = [
+  { pointsToTheDetails: false, onlyWhenNothingIsLeftOut: true },
+  { pointsToTheDetails: true, onlyWhenNothingIsLeftOut: false },
+  { pointsToTheDetails: false, onlyWhenNothingIsLeftOut: false }
+];
+var workingDirectory = (cwd) => {
+  const shape = pathShape(cwd);
+  const placed = sensitivePlaceOf(placeOf(shape));
+  return { shape, sensitiveFolder: placed === null || placed.isTheFolderItself ? null : placed.folder };
+};
+var namingRank = (broadRoot, sensitivePlace, insideTheWorkingDirectory) => {
+  if (broadRoot !== null) return BROAD_ROOTS_IN_NAMING_ORDER.indexOf(broadRoot);
+  if (sensitivePlace !== null) return RANK_IN_A_SENSITIVE_PLACE;
+  return insideTheWorkingDirectory ? RANK_INSIDE_THE_WORKING_DIRECTORY : RANK_OUTSIDE_THE_WORKING_DIRECTORY;
+};
+var firstSeparatorOfARun = (run) => run.slice(0, 1);
+var withSeparatorRunsCollapsed = (path, { doubleSlashed }) => {
+  const collapsed = path.replace(SEPARATOR_RUN, firstSeparatorOfARun);
+  return doubleSlashed ? `${collapsed.slice(0, 1)}${collapsed}` : collapsed;
+};
+var isAWholeSystemFolder = (broadRoot, sensitivePlace) => broadRoot === "topLevel" && sensitivePlace?.kind === "system";
+var placeLabel = (broadRoot, sensitivePlace) => {
+  if (broadRoot !== null && !isAWholeSystemFolder(broadRoot, sensitivePlace)) return ` (${BROAD_ROOT_LABELS[broadRoot]})`;
+  return sensitivePlace === null ? "" : ` (${SENSITIVE_PLACE_LABELS[sensitivePlace.kind]})`;
+};
+var grantedPath = (path, cwd) => {
+  const shape = pathShape(path);
+  const place = placeOf(shape);
+  const placed = sensitivePlaceOf(place);
+  const insideTheWorkingDirectory = isInside(shape, cwd.shape);
+  const sensitivePlace = placed !== null && insideTheWorkingDirectory && placed.folder === cwd.sensitiveFolder ? null : placed;
+  const broadRoot = broadRootOf(shape, place, sensitivePlace);
+  return {
+    shown: settledWithin(visibleText(redactSecrets(withSeparatorRunsCollapsed(path, shape)), PATH_IN_A_QUESTION), Number.POSITIVE_INFINITY),
+    label: placeLabel(broadRoot, sensitivePlace),
+    sensitive: broadRoot !== null || sensitivePlace !== null,
+    rank: namingRank(broadRoot, sensitivePlace, insideTheWorkingDirectory)
+  };
+};
+var firstSpellings = (paths2) => {
+  const spelled = /* @__PURE__ */ new Map();
+  for (const path of paths2) {
+    const spelling = spellingOf(pathShape(path));
+    if (!spelled.has(spelling)) spelled.set(spelling, path);
+  }
+  return spelled;
+};
+var mostImportantFirst = (first, second) => first.rank - second.rank;
+var hasPaths = (list) => list.paths.length > 0;
+var permissionGrant = (profile, cwd) => {
+  const from = workingDirectory(cwd);
+  const writable = firstSpellings(codexPermissionPaths(profile, "write"));
+  const isNotAlsoWritable = ([spelling]) => !writable.has(spelling);
+  const readOnly = [...firstSpellings(codexPermissionPaths(profile, "read"))].filter(isNotAlsoWritable).map(([, path]) => path);
+  const listOf = (lead, listed) => ({ lead, paths: listed.map((path) => grantedPath(path, from)).sort(mostImportantFirst) });
+  return { network: profile.network?.enabled === true, lists: [listOf(WRITABLE_LEAD, [...writable.values()]), listOf(READ_ONLY_LEAD, readOnly)].filter(hasPaths) };
+};
+var isSensitive = (path) => path.sensitive;
+var sensitiveNote = (counted) => {
+  const sensitive = counted.filter(isSensitive).length;
+  if (sensitive === 0) return "";
+  return sensitive === counted.length ? ", all sensitive" : `, ${sensitive} of them sensitive`;
+};
+var restOf = (unnamed) => unnamed.length === 0 ? "" : ` and ${unnamed.length} more${sensitiveNote(unnamed)}`;
+var countedOnly = ({ lead, paths: paths2 }) => ({
+  text: `${lead}${paths2.length} ${paths2.length === 1 ? "path" : "paths"}${sensitiveNote(paths2)}`,
+  named: 0,
+  complete: false
+});
+var leastNamedUnits = ({ lead, paths: paths2 }) => {
+  const [first, ...rest] = paths2;
+  if (first === void 0) return 0;
+  return lead.length + QUOTE_UNITS + Math.min(first.shown.length, ONLY_NAMED_PATH_FLOOR_UNITS) + first.label.length + restOf(rest).length;
+};
+var fairShareOf = (lengths, units) => {
+  const shortestFirst = [...lengths].sort((first, second) => first - second);
+  let unitsLeft = units;
+  for (const [position, length] of shortestFirst.entries()) {
+    const share = Math.floor(unitsLeft / (shortestFirst.length - position));
+    if (length > share) return share;
+    unitsLeft -= length;
+  }
+  return Number.POSITIVE_INFINITY;
+};
+var namingTheFirst = ({ lead, paths: paths2 }, count, units) => {
+  const named = paths2.slice(0, count);
+  const rest = restOf(paths2.slice(count));
+  const lengths = named.map((path) => path.shown.length);
+  const floor = count === 1 ? ONLY_NAMED_PATH_FLOOR_UNITS : NAMED_PATH_FLOOR_UNITS;
+  const pathUnits = units - lead.length - rest.length - LIST_SEPARATOR.length * (count - 1) - named.reduce((sum, path) => sum + QUOTE_UNITS + path.label.length, 0);
+  if (pathUnits < lengths.reduce((sum, length) => sum + Math.min(length, floor), 0)) return null;
+  const share = fairShareOf(lengths, pathUnits);
+  const fitted = named.map((path) => ({ path, shown: settledWithin(path.shown, share) }));
+  return {
+    text: `${lead}${fitted.map(({ path, shown }) => `${inQuotes(shown)}${path.label}`).join(LIST_SEPARATOR)}${rest}`,
+    named: count,
+    complete: count === paths2.length && fitted.every(({ path, shown }) => shown === path.shown)
+  };
+};
+var namedWithin = (list, units) => {
+  for (let count = list.paths.length; count > 0; count -= 1) {
+    const fitted = namingTheFirst(list, count, units);
+    if (fitted !== null) return fitted;
+  }
+  return null;
+};
+var namesAsMany = (shared, unshared) => shared !== null && shared.named === unshared.named;
+var fittedAlone = (list, units) => {
+  const named = namedWithin(list, units);
+  return named === null ? null : [named];
+};
+var fittedLists = ([first, second], units) => {
+  if (first === void 0) return [];
+  if (second === void 0) return fittedAlone(first, units);
+  const counted = countedOnly(second);
+  const unshared = namedWithin(first, units - counted.text.length);
+  if (unshared === null) return null;
+  const shared = namedWithin(first, units - leastNamedUnits(second));
+  const leading = namesAsMany(shared, unshared) ? shared : unshared;
+  return [leading, namedWithin(second, units - leading.text.length) ?? counted];
+};
+var asAQuestion = (network, lists, pointsToTheDetails) => {
+  const grants = [...network ? [NETWORK_GRANT] : [], ...lists];
+  const inAList = grants.length < 2 ? grants.join("") : `${grants.slice(0, -1).join(", ")}, and ${grants.slice(-1).join("")}`;
+  return `Allow Codex to ${inAList}?${pointsToTheDetails ? DETAILS_NOTE : ""}`;
+};
+var questionUnder = ({ network, lists }, plan) => {
+  const frameUnits = asAQuestion(network, lists.map(() => ""), plan.pointsToTheDetails).length;
+  const fitted = fittedLists(lists, CODEX_PERMISSION_QUESTION_MAX_UNITS - frameUnits);
+  if (fitted === null) return null;
+  const nothingIsLeftOut = fitted.every((list) => list.complete);
+  if (plan.onlyWhenNothingIsLeftOut && !nothingIsLeftOut) return null;
+  return asAQuestion(network, fitted.map((list) => list.text), plan.pointsToTheDetails && !nothingIsLeftOut);
+};
+var isAskable = (question) => question !== null && question.length <= CODEX_PERMISSION_QUESTION_MAX_UNITS && redactSecrets(question) === question;
+var codexPermissionProfileQuestion = (profile, cwd) => {
+  const grant = permissionGrant(profile, cwd);
+  if (!grant.network && grant.lists.length === 0) return CODEX_PERMISSION_QUESTION_WITHOUT_A_GRANT;
+  return FITTING_PLANS.map((plan) => questionUnder(grant, plan)).find(isAskable) ?? asAQuestion(grant.network, grant.lists.map((list) => countedOnly(list).text), true);
+};
+var codexPermissionProfileDetail = (profile) => `${PERMISSIONS_HEADING}
+${JSON.stringify(profile, null, 2).split("\n").map((line) => visibleText(line, TEXT_ALREADY_ESCAPED)).join("\n")}`;
+var codexProseOnOneQuotedLine = (prose) => inQuotes(visibleText(prose, PROSE_IN_QUOTES));
 var codexPermissionProfileResponse = (permissions, answer) => ({
   permissions: answer === CODEX_PERMISSION_PROFILE_CHOICES.turn || answer === CODEX_PERMISSION_PROFILE_CHOICES.session ? permissions : {},
   scope: answer === CODEX_PERMISSION_PROFILE_CHOICES.session ? "session" : "turn"
@@ -3901,9 +4268,9 @@ var fileChangeQuestion = (changes) => {
   return `Allow these ${changes.length} file changes once? ${named}${unnamed > 0 ? ` and ${unnamed} more` : ""}`;
 };
 var codexElicitationToolName = (serverName, toolName) => `mcp__${serverName}__${toolName}`;
-var withCodexReason = (detail, reason) => text(reason) ? `${detail}
-
-Codex's reason: ${redactSecrets(reason)}` : detail;
+var CODEX_REASON_LEAD = "\n\nCodex's reason: ";
+var withCodexReason = (detail, reason) => text(reason) ? `${detail}${CODEX_REASON_LEAD}${redactSecrets(reason)}` : detail;
+var withCodexReasonOnOneQuotedLine = (detail, reason) => text(reason) ? `${detail}${CODEX_REASON_LEAD}${codexProseOnOneQuotedLine(redactSecrets(reason))}` : detail;
 var parseCodexNativeApproval = (value) => {
   if (!record3(value) || !keys2(value, ["method", "params", "changes"]) || !isMethod(value.method) || !record3(value.params) || !boundedJson(value)) return null;
   const p = value.params;
@@ -3964,8 +4331,8 @@ var parseCodexNativeApproval = (value) => {
       toolName: "request_permissions",
       toolInputs: [{ permissions: p.permissions }],
       scopePaths: [...codexPermissionPaths(p.permissions, "read"), ...codexPermissionPaths(p.permissions, "write")],
-      question: "Allow these permissions for this turn or session?",
-      detail: withCodexReason(JSON.stringify(p.permissions, null, 2), p.reason),
+      question: codexPermissionProfileQuestion(p.permissions, p.cwd),
+      detail: withCodexReasonOnOneQuotedLine(codexPermissionProfileDetail(p.permissions), p.reason),
       options: [CODEX_PERMISSION_PROFILE_CHOICES.turn, CODEX_PERMISSION_PROFILE_CHOICES.session, CODEX_PERMISSION_PROFILE_CHOICES.deny]
     };
   }
@@ -4039,6 +4406,12 @@ var SPAWN_RECOVERY = {
   receiptRetentionMs: 7 * 24 * 60 * 60 * 1e3,
   retrySendWindowMs: 60 * 60 * 1e3
 };
+var SPAWN_LAUNCH_FAILED_CODE = "launch_failed";
+var SPAWN_UNCONFIRMED_ATTEMPT_FAILURE = {
+  code: SPAWN_LAUNCH_FAILED_CODE,
+  message: "The previous launch could not be confirmed. Check your sessions before starting another.",
+  retryable: true
+};
 
 // ../contracts/src/claude-inbox.ts
 var CLAUDE_INBOX = {
@@ -6923,11 +7296,32 @@ var substitutionFedTo = (pieces, index) => {
   const next = pieces[index + 1];
   return next !== void 0 && SUBSTITUTION_OPENERS.has(next.before) ? next.text : null;
 };
+var REDIRECTION_REMOVED = " ";
+var arrowReadingInForce = null;
+var anArrowWasReadAsText = false;
+var underEachArrowReading = (judge) => {
+  if (arrowReadingInForce !== null) return [judge()];
+  try {
+    anArrowWasReadAsText = false;
+    arrowReadingInForce = "arrows_the_shell_sees";
+    const withArrowsTheShellSees = judge();
+    if (!anArrowWasReadAsText) return [withArrowsTheShellSees];
+    arrowReadingInForce = "every_arrow";
+    return [withArrowsTheShellSees, judge()];
+  } finally {
+    arrowReadingInForce = null;
+  }
+};
+var isTrue = (answer) => answer;
+var underEitherArrowReading = (judge) => underEachArrowReading(judge).some(isTrue);
 var withoutOutputRedirectionTargets = (text3) => {
+  if (arrowReadingInForce === "every_arrow") return text3.replace(OUTPUT_REDIRECTION, REDIRECTION_REMOVED);
   const visible = shellVisibleText(text3);
   const removeVisibleRedirection = (match, _target, offset) => {
     const operator = offset + match.search(REDIRECTION_OPERATOR_CHARACTER);
-    return visible === null || REDIRECTION_OPERATOR_CHARACTER.test(visible.charAt(operator)) ? " " : match;
+    if (visible === null || REDIRECTION_OPERATOR_CHARACTER.test(visible.charAt(operator))) return REDIRECTION_REMOVED;
+    anArrowWasReadAsText = true;
+    return match;
   };
   return text3.replace(OUTPUT_REDIRECTION, removeVisibleRedirection);
 };
@@ -8315,6 +8709,7 @@ var ANSWER_SOURCES = [
   "inbox",
   "slack",
   "mac_app",
+  "voice_call",
   // Nobody. A decision opened on a workspace's sandbox site is settled by the
   // simulator instead of being delivered, and the ledger has to say so: a
   // sandbox row that looked like a human answer would be indistinguishable
@@ -8401,6 +8796,7 @@ var CAPABILITY_PATTERNS = {
     "Bash(mkfs:*)"
   ]
 };
+var MAX_PUSH_WINDOW_SECONDS = 300;
 var DECISION_EPISODE_SCHEMA_VERSION = 1;
 var DECISION_FEATURE_EXTRACTOR = `pushary-hooks/schema-${DECISION_EPISODE_SCHEMA_VERSION}`;
 var DECISION_ORIGIN = {
@@ -8562,7 +8958,7 @@ var isScopeContract = (value) => {
   if (c.promises !== void 0 && !strings(c.promises)) return false;
   return strings(c.allowedPaths) && strings(c.offLimitsPaths) && typeof c.doneWhen === "string";
 };
-var findBestRoute = (routes, toolName, args, repoKey) => {
+var routeMatchingBestUnderOneArrowReading = (routes, toolName, args, repoKey) => {
   let best;
   let bestWeight = 0;
   let bestScoped = -1;
@@ -8583,7 +8979,13 @@ var findBestRoute = (routes, toolName, args, repoKey) => {
       bestLength = length;
     }
   }
-  return best ?? routes.find((r) => r.toolPattern === "*");
+  return best;
+};
+var isAMatchedRoute = (route) => route !== void 0;
+var routeWaitsForSomeoneElse = (route) => route.answeredBySomeoneElse === true;
+var findBestRoute = (routes, toolName, args, repoKey) => {
+  const matched = underEachArrowReading(() => routeMatchingBestUnderOneArrowReading(routes, toolName, args, repoKey)).filter(isAMatchedRoute);
+  return matched.find(routeWaitsForSomeoneElse) ?? matched[0] ?? routes.find((r) => r.toolPattern === "*");
 };
 var autoApprove = (tool) => ({
   tool,
@@ -8698,11 +9100,13 @@ var resolvePolicyReading = (reach, config, toolName, modeOverride, toolInput, cw
   }
   return base;
 };
-var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey, sessionId) => {
+var policyUnderOneArrowReading = (config, toolName, modeOverride, toolInput, cwd, repoKey, sessionId) => {
   const withoutRunners = resolvePolicyReading(SPELLS_WITHOUT_COMMAND_RUNNERS, config, toolName, modeOverride, toolInput, cwd, repoKey, sessionId);
   const withRunners = resolvePolicyReading(SPELLS_COMMAND_RUNNERS_TOO, config, toolName, modeOverride, toolInput, cwd, repoKey, sessionId);
   return strictestReadingOf(withRunners, withoutRunners);
 };
+var keepingTheStrictestReading = (strictest, reading) => strictestReadingOf(reading, strictest);
+var resolvePolicy = (config, toolName, modeOverride, toolInput, cwd, repoKey, sessionId) => underEachArrowReading(() => policyUnderOneArrowReading(config, toolName, modeOverride, toolInput, cwd, repoKey, sessionId)).reduce(keepingTheStrictestReading);
 var VERDICT_RESTRAINT = { allow: 0, requires_human: 1, deny: 2 };
 var verdictRestraint = (policy) => VERDICT_RESTRAINT[verdictForPolicy(policy)];
 var asksAtLeastAsHard = (policy, than) => restraintRank(policy) >= restraintRank(than) && TIMEOUT_ACTION_STRICTNESS[policy.timeoutAction] >= TIMEOUT_ACTION_STRICTNESS[than.timeoutAction] && policy.timeoutSeconds >= than.timeoutSeconds && policy.pushFirstSeconds <= than.pushFirstSeconds;
@@ -8927,15 +9331,18 @@ var policyForScopeQuestion = (policy) => policy.timeoutAction === "approve" ? {
   pushFirstSeconds: policy.pushFirstSeconds > 0 ? policy.pushFirstSeconds : SCOPE_QUESTION_FIRST_WAIT_SECONDS
 } : policy;
 var isAReading = (reading) => reading !== null && reading.trim() !== "";
+var readingsOfScriptsWrittenForAShell = (command) => readingsOfNestedShellScripts(command, scriptsWrittenForAShellOrAnEval);
 var extraReadingsOf = (toolInput) => {
   const { command } = toolInput;
   if (typeof command !== "string" || command.length > LONGEST_COMMAND_READ_FOR_A_PUSH) return [];
   const commentFree = readingWithoutCommentsOrAnsiEscapes(command);
   const spelledOut = [command, commentFree].filter(isAReading).map(readingWithShellFormsSpelledOut);
+  const scanned = [command, commentFree, ...spelledOut].filter(isAReading);
   const readings = [
     commentFree,
     ...spelledOut,
-    ...[command, commentFree, ...spelledOut].filter(isAReading).flatMap(readingsOfScriptsPassedToAShell)
+    ...scanned.flatMap(readingsOfScriptsPassedToAShell),
+    ...scanned.flatMap(readingsOfScriptsWrittenForAShell)
   ];
   return readings.filter(isAReading).map((reading) => ({ ...toolInput, command: reading }));
 };
@@ -8948,7 +9355,16 @@ var readingsNotYetJudged = (toolInputs) => {
   });
 };
 var withExtraReadings = (input) => shellDialectOf(input.toolName) !== void 0 ? { ...input, toolInputs: [...input.toolInputs, ...readingsNotYetJudged(input.toolInputs)] } : input;
-var resolveGate = (rawInput) => {
+var GATE_VERDICT_RESTRAINT = { allow: 0, defer: 1, gate: 2, deny: 3, kill: 4 };
+var strictestGateVerdictOf = (strictest, verdict) => {
+  const restraint = GATE_VERDICT_RESTRAINT[verdict.kind] - GATE_VERDICT_RESTRAINT[strictest.kind];
+  if (restraint !== 0) return restraint > 0 ? verdict : strictest;
+  return strictest.kind === "gate" && verdict.kind === "gate" ? { ...strictest, policy: strictestReadingOf(verdict.policy, strictest.policy) } : strictest;
+};
+var policyOfReadings = (readings) => readings.policy;
+var toolInputsOfReadings = (readings) => readings.toolInputs;
+var readingsAreAllowed = (readings) => verdictForPolicy(readings.policy) === "allow";
+var gateVerdictUnderOneArrowReading = (rawInput) => {
   const input = withExtraReadings(rawInput);
   const { modeState, config, toolName, toolInputs, cwd, sessionId } = input;
   const repoKey = input.sharedRepoKey ?? input.repoKey;
@@ -8964,16 +9380,23 @@ var resolveGate = (rawInput) => {
     const legacyPolicy = (toolInputs.length ? toolInputs : [void 0]).map((toolInput) => resolvePolicy(config, toolName, modeState.mode, toolInput, cwd, input.repoKey, sessionId)).find((policy2) => policy2.repoKey === input.repoKey && verdictForPolicy(policy2) === "deny");
     if (legacyPolicy) return { kind: "deny", policy: legacyPolicy, reason: `Denied by policy for ${legacyPolicy.tool}` };
   }
-  const policy = toolInputs.slice(rawInput.toolInputs.length).map((reading) => resolvePolicy(config, toolName, modeState.mode, reading, cwd, repoKey, sessionId)).reduce(
-    (strictest, reading) => strictestReadingOf(reading, strictest),
-    resolvePolicyAcross(config, toolName, modeState.mode, rawInput.toolInputs, cwd, repoKey, sessionId)
-  );
+  const written = {
+    toolInputs: rawInput.toolInputs,
+    policy: resolvePolicyAcross(config, toolName, modeState.mode, rawInput.toolInputs, cwd, repoKey, sessionId)
+  };
+  const extra = toolInputs.slice(rawInput.toolInputs.length).map((reading) => ({
+    toolInputs: [reading],
+    policy: resolvePolicy(config, toolName, modeState.mode, reading, cwd, repoKey, sessionId)
+  }));
+  const policy = extra.map(policyOfReadings).reduce(keepingTheStrictestReading, written.policy);
   const verdict = verdictForPolicy(policy);
   const autoDenies = verdict === "deny";
   const allowedByBypassMode = !autoDenies && verdict !== "allow" && bypassModeAllows(input);
-  const askBesideARoutedPush = verdict === "allow" ? askAtTheRouteOfAPush(input, repoKey, policy) : void 0;
+  const allowed = [written, ...extra].filter(readingsAreAllowed);
+  const allowedBy = allowed[0]?.policy;
+  const askBesideARoutedPush = autoDenies || allowedBy === void 0 ? void 0 : askAtTheRouteOfAPush({ ...input, toolInputs: allowed.flatMap(toolInputsOfReadings) }, repoKey, allowedBy);
   const autoApproves = (verdict === "allow" || allowedByBypassMode) && askBesideARoutedPush === void 0;
-  const askedPolicy = askBesideARoutedPush ?? policy;
+  const askedPolicy = askBesideARoutedPush === void 0 ? policy : strictestReadingOf(policy, askBesideARoutedPush);
   if (autoDenies) return { kind: "deny", policy, reason: `Denied by policy for ${policy.tool}` };
   if (isAskedInEveryMode(toolName)) return { kind: "gate", policy };
   if (isModeStateDegraded(modeState)) {
@@ -9003,6 +9426,10 @@ var resolveGate = (rawInput) => {
     scopePath: scopeReason && "path" in scopeVerdict ? widenablePath(scopeVerdict.path) : void 0
   };
 };
+var resolveGate = (rawInput) => {
+  const verdict = underEachArrowReading(() => gateVerdictUnderOneArrowReading(rawInput)).reduce(strictestGateVerdictOf);
+  return verdict.kind === "gate" ? { ...verdict, policy: withApprovalRouteWait(rawInput, verdict.policy) } : verdict;
+};
 var noModeOverrideIsActive = (input) => (input.modeState.mode ?? input.config.modeOverride ?? null) === null;
 var editAsksAtTheAgentsPrompt = (input, verdict) => verdict.kind === "gate" && !verdict.scopeReason && noModeOverrideIsActive(input) && !aChosenRuleGoverns(input) && verdict.policy.mode === "push_first" && FILE_EDIT_TOOLS.has(input.toolName);
 var claudePromptsBeforeAnEdit = (permissionMode) => permissionMode === "default";
@@ -9037,10 +9464,11 @@ var codexDeferredPreToolUse = () => ({ kind: "deny", reason: CODEX_PRE_TOOL_USE_
 var isScopeReason = (scopeReason) => typeof scopeReason === "string" && scopeReason.length > 0;
 var scopeBreachReasonOf = (verdict) => verdict.kind === "gate" && isScopeReason(verdict.scopeReason) ? verdict.scopeReason : void 0;
 var onlyCodexPreToolUseCanAsk = (verdict, permissionMode) => verdict.kind === "gate" && (scopeBreachReasonOf(verdict) !== void 0 || !codexRaisesItsOwnPrompts(permissionMode));
-var runsACommandThatNeedsAPerson = ({ toolName, toolInputs }) => SHELL_DIALECT_BY_TOOL.has(toolName) && toolInputs.some((toolInput) => {
+var runsACommandThatNeedsAPersonUnderOneArrowReading = ({ toolName, toolInputs }) => SHELL_DIALECT_BY_TOOL.has(toolName) && toolInputs.some((toolInput) => {
   const command = extractPolicyArg(toolName, toolInput);
   return command !== void 0 && (commandNeedsAPerson(toolName, command) || commandWritesThroughARemoteApi(command));
 });
+var runsACommandThatNeedsAPerson = (input) => underEitherArrowReading(() => runsACommandThatNeedsAPersonUnderOneArrowReading(input));
 var namesASecretOrWorkflowFile = (path) => {
   const written = withoutDotSegments(normalizeSeparators(path));
   return SECRET_FILE_NAME.test(basenameOf(written)) || CI_WORKFLOW_FILE.test(written);
@@ -9051,10 +9479,11 @@ var editsAFileThatNeedsAPerson = ({ toolName, toolInputs }) => toolInputs.some((
   const path = extractPolicyArg(toolName, toolInput);
   return path !== void 0 && fileEditNeedsAPerson(toolName, path);
 });
-var runsADestructiveCommand = ({ toolName, toolInputs }) => SHELL_DIALECT_BY_TOOL.has(toolName) && toolInputs.some((toolInput) => {
+var runsADestructiveCommandUnderOneArrowReading = ({ toolName, toolInputs }) => SHELL_DIALECT_BY_TOOL.has(toolName) && toolInputs.some((toolInput) => {
   const command = extractPolicyArg(toolName, toolInput);
   return command !== void 0 && commandIsDestructive(toolName, command);
 });
+var runsADestructiveCommand = (input) => underEitherArrowReading(() => runsADestructiveCommandUnderOneArrowReading(input));
 var codexCallIsDestructive = (input, call) => call.deletesFiles || runsADestructiveCommand(input);
 var connectorCallOnlyReads = ({ toolName, toolInputs }) => isCodexConnectorTool(toolName) && mcpToolOnlyReads(toolName) && !mcpToolAppNamesADatabase(toolName) && toolInputs.length > 0 && toolInputs.every((toolInput) => mcpToolInputOnlyReads(toolName, toolInput));
 var fullAccessRunsThisConnectorReadUnasked = (input, verdict, call) => !codexRaisesItsOwnPrompts(call.permissionMode) && scopeBreachReasonOf(verdict) === void 0 && noModeOverrideIsActive(input) && connectorCallOnlyReads(input);
@@ -9110,7 +9539,11 @@ var agentRulesAllowEveryInput = (rules, toolName, toolInputs, cwd) => rules.allo
   return allowRulesGrant(rules.allow, toolName, args) && !anyRuleRestrictsReading(rules.ask, toolName, reading) && !anyRuleRestrictsReading(rules.deny, toolName, reading) && !inputNeedsAPerson(toolName, toolInput);
 });
 var isDefaultRule = (policy) => policy.origin === "builtin" || policy.tool === WILDCARD_TOOL_PATTERN;
-var isApprovalRoutePattern = (value) => typeof value === "object" && value !== null && typeof value.toolPattern === "string" && ["string", "undefined"].includes(typeof value.repoKey) && ["boolean", "undefined"].includes(typeof value.answeredBySomeoneElse);
+var isValidRouteWait = (value) => {
+  if (!("minimumPushWaitSeconds" in value) || value.minimumPushWaitSeconds === void 0) return true;
+  return typeof value.minimumPushWaitSeconds === "number" && Number.isInteger(value.minimumPushWaitSeconds) && value.minimumPushWaitSeconds >= 0 && value.minimumPushWaitSeconds <= MAX_PUSH_WINDOW_SECONDS;
+};
+var isApprovalRoutePattern = (value) => typeof value === "object" && value !== null && typeof value.toolPattern === "string" && ["string", "undefined"].includes(typeof value.repoKey) && ["boolean", "undefined"].includes(typeof value.answeredBySomeoneElse) && isValidRouteWait(value);
 var approvalRoutesOf = (config) => {
   const routes = config.approvalRoutes ?? [];
   return Array.isArray(routes) && routes.every(isApprovalRoutePattern) ? routes : null;
@@ -9232,7 +9665,7 @@ var pushSpellingsBeyondTheWrittenOnesIn = (input, toolInput) => [...pushesOfTheC
 var writtenRouteArgumentsOf = (input, toolInput) => [...policyArgForms(input.toolName, toolInput, input.cwd), ...pushesOfTheCurrentBranchIn(input, toolInput)];
 var routeArgumentsOf = (input, toolInput) => [...writtenRouteArgumentsOf(input, toolInput), ...pushSpellingsBeyondTheWrittenOnesIn(input, toolInput)];
 var everyRule = () => true;
-var aChosenRuleGoverns = (input, counts = everyRule) => {
+var aChosenRuleGovernsUnderOneArrowReading = (input, counts) => {
   const chosen = input.config.policies.filter((policy) => !isDefaultRule(policy));
   const routes = approvalRoutesOf(input.config);
   if (routes === null) return true;
@@ -9243,8 +9676,8 @@ var aChosenRuleGoverns = (input, counts = everyRule) => {
     return governing !== void 0 && counts(governing.policy) || findBestRoute(routes, input.toolName, routeArgumentsOf(input, toolInput), input.repoKey) !== void 0;
   });
 };
+var aChosenRuleGoverns = (input, counts = everyRule) => underEitherArrowReading(() => aChosenRuleGovernsUnderOneArrowReading(input, counts));
 var AUTO_PERMISSION_MODE = "auto";
-var routeWaitsForSomeoneElse = (route) => route.answeredBySomeoneElse === true;
 var routeDeliveredFor = (input, routes, toolInput) => {
   const repoKey = input.sharedRepoKey ?? input.repoKey;
   const written = writtenRouteArgumentsOf(input, toolInput);
@@ -9256,12 +9689,13 @@ var routeDeliveredFor = (input, routes, toolInput) => {
   if (heldSpelledRoute !== void 0 && heldSpelledRoute.toolPattern.length > (writtenRoute?.toolPattern.length ?? -1)) return heldSpelledRoute;
   return writtenRoute ?? findBestRoute(routes, input.toolName, spelled, repoKey);
 };
-var callWaitsForSomeoneElse = (input) => {
+var callWaitsForSomeoneElseUnderOneArrowReading = (input) => {
   const routes = approvalRoutesOf(input.config);
   if (routes === null) return false;
   return withExtraReadings(input).toolInputs.some((toolInput) => routeDeliveredFor(input, routes, toolInput)?.answeredBySomeoneElse === true);
 };
-var namedRouteWaitsForSomeoneElse = (input) => {
+var callWaitsForSomeoneElse = (input) => underEitherArrowReading(() => callWaitsForSomeoneElseUnderOneArrowReading(input));
+var namedRouteWaitsForSomeoneElseUnderOneArrowReading = (input) => {
   const routes = approvalRoutesOf(input.config);
   if (routes === null) return false;
   return withExtraReadings(input).toolInputs.some((toolInput) => {
@@ -9269,11 +9703,24 @@ var namedRouteWaitsForSomeoneElse = (input) => {
     return route?.answeredBySomeoneElse === true && patternToolName(route.toolPattern) === input.toolName;
   });
 };
-var matchedRouteOf = (input) => {
+var namedRouteWaitsForSomeoneElse = (input) => underEitherArrowReading(() => namedRouteWaitsForSomeoneElseUnderOneArrowReading(input));
+var firstRouteHeldForSomeoneElseOrFirstOf = (matched) => matched.find(routeWaitsForSomeoneElse) ?? matched[0];
+var routesMatchedUnderOneArrowReading = (input) => {
   const routes = approvalRoutesOf(input.config);
-  if (routes === null) return void 0;
-  const matched = withExtraReadings(input).toolInputs.flatMap((toolInput) => routeDeliveredFor(input, routes, toolInput) ?? []);
-  const route = matched.find((candidate) => candidate.answeredBySomeoneElse === true) ?? matched[0];
+  if (routes === null) return [];
+  return withExtraReadings(input).toolInputs.flatMap((toolInput) => routeDeliveredFor(input, routes, toolInput) ?? []);
+};
+var withApprovalRouteWait = (input, policy) => {
+  if (verdictForPolicy(policy) !== "requires_human" || policy.timeoutAction === "approve") return policy;
+  const routes = underEachArrowReading(() => routesMatchedUnderOneArrowReading(input)).flat();
+  const minimum = Math.max(0, ...routes.map((route) => route.minimumPushWaitSeconds ?? 0));
+  if (minimum === 0) return policy;
+  if (policy.mode === "push_first") return { ...policy, pushFirstSeconds: Math.max(policy.pushFirstSeconds, minimum) };
+  if (policy.mode === "push_only" && policy.timeoutAction !== "wait") return { ...policy, timeoutSeconds: Math.max(policy.timeoutSeconds, minimum) };
+  return policy;
+};
+var matchedRouteOf = (input) => {
+  const route = firstRouteHeldForSomeoneElseOrFirstOf(underEachArrowReading(() => routesMatchedUnderOneArrowReading(input)).flat());
   if (route === void 0) return void 0;
   return route.repoKey ? { toolPattern: route.toolPattern, repoKey: route.repoKey } : { toolPattern: route.toolPattern };
 };
@@ -9768,6 +10215,8 @@ export {
   codexNativeApprovalResponse,
   transcriptRecordPlaintext,
   compressTranscriptRecord,
+  SPAWN_LAUNCH_FAILED_CODE,
+  SPAWN_UNCONFIRMED_ATTEMPT_FAILURE,
   CLAUDE_INBOX,
   parseClaudeInboxSession,
   claudeInboxAction,