pushary 1.9.42 → 1.9.44

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 1.9.44
+
+- Start a managed Codex terminal session with `pushary codex` and route supported command, file-change, and MCP permissions through Pushary. The native terminal remains available for unsupported requests.
+- Preserve repository-specific deny and routing rules, cancel stale questions across delayed or lost responses, and stop owned session processes on shutdown. Existing Codex desktop chats are not attached by this feature.
+
+## 1.9.43
+
+- Agent and fx setup guidance uses Pushary’s durable personal reminders, which persist after the agent exits and deliver privately to their creator.
+
 ## 1.9.42
 
 - Complete Mac cleanup removes the Partner enrollment and device-key slots introduced by the native Partner flow, alongside existing session state.

package/README.md

@@ -205,6 +205,7 @@ failing closed would let one malformed download silence every hook on the machin
 
 ```
 cowork       Set up Claude Desktop and Cowork with the Pushary connector
+codex        Start a managed Codex terminal session with Pushary native approvals
 setup        Configure Claude Code, Codex, Gemini CLI, Hermes, Cursor, VS Code, OpenCode, or fx with Pushary
 claude       Run Claude Code through Pushary, reachable from your phone even when idle
 daemon       Keep this machine reachable so your phone can START a new session

package/data/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pushary
-version: 0.11.3
+version: 0.12.0
 description: Push notifications and human-in-the-loop for AI agents. Use this whenever a running agent needs a human and nobody is at the terminal, such as before an irreversible or destructive action, before spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, when running unattended and you hit a genuine ambiguity, when another skill's workflow says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from their connected devices. Use these tools proactively - do not wait for the user to ask for notifications. Every question and answer is recorded, so an unattended run stays reviewable afterwards. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted, paid service; web and native store checkout have different price and trial terms.
 metadata:
   hermes:
@@ -358,6 +358,12 @@ and every returned field, and it is always current. This section adds only what
 schema cannot say: when to use a tool, what its result means for your next step,
 and the shapes that are easy to get wrong.
 
+### schedule_reminder
+
+When the user asks “remind me later,” set a one-time personal reminder with `body` and either `inMinutes` (from the server clock) or `at` (ISO timestamp with explicit UTC offset or Z). Confirm the returned `fireAt` in their local time. Never guess their timezone. For example, `{"body":"Check the deploy","inMinutes":30}`. Pushary persists it and delivers to the authenticated creator even after the agent exits. It does not schedule agent work.
+
+Call with no arguments to list pending reminders. Pass `cancelReminderId` to cancel a scheduled reminder; `cancelled:false` means it was not cancelled and it may already be dispatching. Limits: 30 days ahead, 25 pending per user/site. Delivery normally follows within about a minute, requires a connected phone, and respects current account access, membership and stop/mute. Test reminders never notify. Do not use `ask_user` for reminders or promise exact delivery time.
+
 ### send_notification
 
 Send a one-way push notification to the user. Optionally include structured context for a rich detail page.

package/data/cowork/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pushary-cowork
-version: 0.5.0
+version: 0.6.0
 description: Use Pushary in Claude Chat, Cowork, or Claude Code when the user asks for phone updates, a missing decision blocks work, an action needs approval outside existing authorization, or meaningful unattended work finishes or fails. Send task updates and confirm, choice, or text questions to the user's connected devices, then read the returned answer and handoff. Requires the Pushary connector and a paid Pushary account. This skill does not install native permission hooks.
 metadata:
   tags: notifications, push, mcp, human-in-the-loop, cowork, claude, alerts, approvals
@@ -18,6 +18,8 @@ Every question costs the user their attention wherever they are. Before a run of
 
 ## When to reach out
 
+For a personal reminder later, call `schedule_reminder` with `body` and `inMinutes`, or `at` with an explicit UTC offset. Never guess the timezone; confirm the returned time. Pushary saves the reminder and delivers after this conversation ends. It does not reopen Claude or perform future agent work. No arguments lists pending reminders; `cancelReminderId` cancels a scheduled one. Delivery can be about a minute late and requires a connected phone. Do not use `ask_user` for reminders.
+
 - **You need a decision or a clarifying answer.** Call `ask_user` instead of guessing or stalling. Use type `confirm` for yes or no, `select` for a fixed set of options, and `input` for free text.
 - **An action outside your existing authorization is risky or irreversible.** Deleting or overwriting files, spending money, sending anything external, bulk changes: call `ask_user` with type `confirm` first and wait for approval.
 - **Meaningful work finishes while the user is away, or they requested an alert.** Call `send_notification` with a short summary of what changed, and pass `context.type` as `task_complete`. That is what marks it a task update, and the user's setting for where task updates land can only route one that says so. Keep a reply channel open only for a specific unresolved decision needed to finish, as described below.

package/data/cursor-plugin/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "pushary",
   "displayName": "Pushary — Control Panel for AI Agents",
   "description": "Push notifications, human-in-the-loop questions, and permission gating for your AI coding agent. Get a push when a task finishes, answer the agent from your phone, and approve risky commands before they run.",
-  "version": "0.2.6",
+  "version": "0.2.7",
   "author": { "name": "Pushary", "email": "business@pushary.com" },
   "homepage": "https://pushary.com",
   "repository": "https://github.com/Pushary/cursor-plugin",

package/data/cursor-plugin/skills/pushary/SKILL.md

@@ -351,6 +351,12 @@ and every returned field, and it is always current. This section adds only what
 schema cannot say: when to use a tool, what its result means for your next step,
 and the shapes that are easy to get wrong.
 
+### schedule_reminder
+
+When the user asks “remind me later,” set a one-time personal reminder with `body` and either `inMinutes` (from the server clock) or `at` (ISO timestamp with explicit UTC offset or Z). Confirm the returned `fireAt` in their local time. Never guess their timezone. For example, `{"body":"Check the deploy","inMinutes":30}`. Pushary persists it and delivers to the authenticated creator even after the agent exits. It does not schedule agent work.
+
+Call with no arguments to list pending reminders. Pass `cancelReminderId` to cancel a scheduled reminder; `cancelled:false` means it was not cancelled and it may already be dispatching. Limits: 30 days ahead, 25 pending per user/site. Delivery normally follows within about a minute, requires a connected phone, and respects current account access, membership and stop/mute. Test reminders never notify. Do not use `ask_user` for reminders or promise exact delivery time.
+
 ### send_notification
 
 Send a one-way push notification to the user. Optionally include structured context for a rich detail page.

package/data/vscode-plugin/skills/pushary/SKILL.md

@@ -351,6 +351,12 @@ and every returned field, and it is always current. This section adds only what
 schema cannot say: when to use a tool, what its result means for your next step,
 and the shapes that are easy to get wrong.
 
+### schedule_reminder
+
+When the user asks “remind me later,” set a one-time personal reminder with `body` and either `inMinutes` (from the server clock) or `at` (ISO timestamp with explicit UTC offset or Z). Confirm the returned `fireAt` in their local time. Never guess their timezone. For example, `{"body":"Check the deploy","inMinutes":30}`. Pushary persists it and delivers to the authenticated creator even after the agent exits. It does not schedule agent work.
+
+Call with no arguments to list pending reminders. Pass `cancelReminderId` to cancel a scheduled reminder; `cancelled:false` means it was not cancelled and it may already be dispatching. Limits: 30 days ahead, 25 pending per user/site. Delivery normally follows within about a minute, requires a connected phone, and respects current account access, membership and stop/mute. Test reminders never notify. Do not use `ask_user` for reminders or promise exact delivery time.
+
 ### send_notification
 
 Send a one-way push notification to the user. Optionally include structured context for a rich detail page.

package/dist/bin/pushary-bell-hook.js

@@ -1,41 +1,42 @@
 #!/usr/bin/env node
 import {
   handleBell
-} from "../chunk-ASXBYX2N.js";
+} from "../chunk-UJXLVH66.js";
 import {
   readHookInput
-} from "../chunk-6PABNQVH.js";
-import "../chunk-RTM5GVRZ.js";
+} from "../chunk-DD6IBKEJ.js";
+import "../chunk-OZ7MLVDM.js";
 import "../chunk-DWQYCOPI.js";
-import "../chunk-STETTN4K.js";
-import "../chunk-X7TNLYNZ.js";
-import "../chunk-MAB6CGL5.js";
-import "../chunk-QRNNIDGY.js";
-import "../chunk-XHKBHWLX.js";
-import "../chunk-IVUP2EE4.js";
-import "../chunk-NRSTNZYJ.js";
-import "../chunk-3U3FU6ZX.js";
-import "../chunk-KYFWYPHN.js";
-import "../chunk-Y3HTWB5S.js";
+import "../chunk-FKDZU6YX.js";
+import "../chunk-W2TA4EVZ.js";
+import "../chunk-T4CKP47U.js";
+import "../chunk-SI2NC6UU.js";
+import "../chunk-6EV3B5CD.js";
+import "../chunk-OSMNLNPF.js";
 import "../chunk-GMXKITVA.js";
+import "../chunk-WBD7HZEZ.js";
+import "../chunk-XHKBHWLX.js";
+import "../chunk-TJZUQRMH.js";
+import "../chunk-75M7NFFC.js";
+import "../chunk-MRQJCIFO.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-M7VKFAAK.js";
-import "../chunk-CGRVIUKE.js";
-import "../chunk-K2SSNAUW.js";
-import "../chunk-I7EZMNKI.js";
+import "../chunk-BKK3JCTD.js";
+import "../chunk-CAJCCQ7N.js";
+import "../chunk-5ZSBQHCM.js";
+import "../chunk-M2L7625S.js";
+import "../chunk-GOEIW2VH.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-AW4TDBUJ.js";
-import "../chunk-ZV56INA6.js";
-import "../chunk-4UCTKLHY.js";
-import "../chunk-QPT4PTUG.js";
+import "../chunk-53UZN7JW.js";
+import "../chunk-TKTS3SIM.js";
+import "../chunk-S2ALW446.js";
+import "../chunk-WMO2XVG4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ODPULZZG.js";
-import "../chunk-EBZK2SJ2.js";
+import "../chunk-4JHEZ2PV.js";
 import "../chunk-AQFEP65J.js";
-import "../chunk-CHD6IUNM.js";
-import "../chunk-DIJ532S7.js";
-import "../chunk-ORLTWJ2O.js";
+import "../chunk-OWQOMGBF.js";
+import "../chunk-T3KMJI4W.js";
+import "../chunk-JNU3LV47.js";
 
 // bin/pushary-bell-hook.ts
 var main = async () => {

package/dist/bin/pushary-bell.js

@@ -5,39 +5,39 @@ import {
   liveAgentCount,
   ring,
   upgradeThreshold
-} from "../chunk-ASXBYX2N.js";
+} from "../chunk-UJXLVH66.js";
 import {
   createIo
 } from "../chunk-FO3MDD26.js";
-import {
-  exitOnHelpFlag
-} from "../chunk-F43LAKAK.js";
 import {
   addBellHooks,
   bellInstalled,
   removeBellHooks
-} from "../chunk-Y3HTWB5S.js";
+} from "../chunk-OSMNLNPF.js";
 import {
   parseFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-M7VKFAAK.js";
+import "../chunk-TJZUQRMH.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-OR6KJOHE.js";
+import "../chunk-M2L7625S.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-ODPULZZG.js";
 import {
   claudeSettings
-} from "../chunk-EBZK2SJ2.js";
+} from "../chunk-4JHEZ2PV.js";
 import {
   readJsonSafe,
   writeJsonAtomic
 } from "../chunk-AQFEP65J.js";
-import "../chunk-CHD6IUNM.js";
-import "../chunk-DIJ532S7.js";
+import "../chunk-OWQOMGBF.js";
+import "../chunk-T3KMJI4W.js";
 import {
   isRecord
-} from "../chunk-ORLTWJ2O.js";
+} from "../chunk-JNU3LV47.js";
 
 // bin/pushary-bell.ts
 exitOnHelpFlag("bell");

package/dist/bin/pushary-claude.js

@@ -8,39 +8,39 @@ import {
   describeIdleWindow,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-4WM7IVVQ.js";
+} from "../chunk-PGHN5D4N.js";
 import {
   announceSubscriptionRequired,
   isDeferAnswer
-} from "../chunk-ZX3PFROQ.js";
+} from "../chunk-2NVXFWQY.js";
 import {
   claudeTranscriptPath,
   loadSessionKey,
   registerTranscript,
   registeredTranscriptEnabled
-} from "../chunk-RTM5GVRZ.js";
+} from "../chunk-OZ7MLVDM.js";
 import "../chunk-DWQYCOPI.js";
 import {
   ensureDaemonRunning
-} from "../chunk-STETTN4K.js";
-import {
-  encryptRecord
-} from "../chunk-X7TNLYNZ.js";
-import "../chunk-MAB6CGL5.js";
+} from "../chunk-W2TA4EVZ.js";
+import "../chunk-T4CKP47U.js";
+import "../chunk-SI2NC6UU.js";
+import "../chunk-6EV3B5CD.js";
+import "../chunk-OSMNLNPF.js";
+import "../chunk-GMXKITVA.js";
 import {
   transcriptsEnabled
-} from "../chunk-QRNNIDGY.js";
+} from "../chunk-WBD7HZEZ.js";
 import {
   needsShell,
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
-import "../chunk-NRSTNZYJ.js";
-import "../chunk-3U3FU6ZX.js";
-import "../chunk-KYFWYPHN.js";
-import "../chunk-Y3HTWB5S.js";
-import "../chunk-GMXKITVA.js";
+import "../chunk-TJZUQRMH.js";
+import {
+  encryptRecord
+} from "../chunk-75M7NFFC.js";
+import "../chunk-MRQJCIFO.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-M7VKFAAK.js";
 import {
   DEFAULT_SESSION,
   UNNAMED_ACTION,
@@ -54,12 +54,11 @@ import {
   readPendingCommand,
   readPendingCommandById,
   removePendingCommand,
-  repoKeyFor,
   reportEvent,
   savePendingCommand,
   scopePathFor
-} from "../chunk-CGRVIUKE.js";
-import "../chunk-K2SSNAUW.js";
+} from "../chunk-BKK3JCTD.js";
+import "../chunk-CAJCCQ7N.js";
 import {
   askUser,
   cancelQuestion,
@@ -70,28 +69,31 @@ import {
   waitForAnswer,
   waitsForThePhone,
   withdrawQuestion
-} from "../chunk-I7EZMNKI.js";
+} from "../chunk-5ZSBQHCM.js";
+import "../chunk-M2L7625S.js";
+import {
+  repoKeyFor
+} from "../chunk-GOEIW2VH.js";
 import "../chunk-POFBE6ZY.js";
 import {
   SubscriptionRequiredError
-} from "../chunk-AW4TDBUJ.js";
-import "../chunk-ZV56INA6.js";
-import "../chunk-4UCTKLHY.js";
+} from "../chunk-53UZN7JW.js";
+import "../chunk-TKTS3SIM.js";
+import "../chunk-S2ALW446.js";
 import {
   getMachineId
-} from "../chunk-QPT4PTUG.js";
+} from "../chunk-WMO2XVG4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ODPULZZG.js";
-import "../chunk-EBZK2SJ2.js";
+import "../chunk-4JHEZ2PV.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-CHD6IUNM.js";
+} from "../chunk-OWQOMGBF.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-DIJ532S7.js";
+} from "../chunk-T3KMJI4W.js";
 import {
   DECISION_STOP_REASON,
   HAND_BACK_WITHOUT_A_PROMPT,
@@ -101,7 +103,7 @@ import {
   redactSecretsFromContent,
   resolveGate,
   timeoutActionWithoutLocalPrompt
-} from "../chunk-ORLTWJ2O.js";
+} from "../chunk-JNU3LV47.js";
 
 // src/wrapper/localPassthrough.ts
 var SIGNAL_NUMBERS = {

package/dist/bin/pushary-clean.js

@@ -9,12 +9,13 @@ import {
   planCliKeyRevocations,
   readCliHeldKeys,
   revokeCliKeys
-} from "../chunk-FMYXPJYS.js";
+} from "../chunk-IWHDNMM3.js";
+import "../chunk-SWDPCDLT.js";
 import {
   isCursorPluginLeftover,
   releaseSoleGate,
   withoutPusharyCursorHooks
-} from "../chunk-RBUCXUT7.js";
+} from "../chunk-FI2F5KZJ.js";
 import {
   HERMES_PIP_PACKAGE,
   readHermesStatus,
@@ -23,25 +24,20 @@ import {
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-DPISXMLL.js";
-import {
-  planFxRemoval,
-  removeInstructionBlock
-} from "../chunk-E47JEBUR.js";
-import "../chunk-RETRVO47.js";
-import {
-  disableDaemonService
-} from "../chunk-STETTN4K.js";
-import "../chunk-XHKBHWLX.js";
-import "../chunk-ZVMFRUBD.js";
+} from "../chunk-HV4TEKNP.js";
 import {
   macAppKeepsMcpEntry,
   mcpServerBearer,
   pusharyKey,
   readMacAppAgentKey,
   setupReceiptKey
-} from "../chunk-PJ3C6IID.js";
-import "../chunk-IXNVIWNN.js";
+} from "../chunk-LEHBWBCG.js";
+import "../chunk-42CVAOC5.js";
+import {
+  planFxRemoval,
+  removeInstructionBlock
+} from "../chunk-RGBTKOCC.js";
+import "../chunk-TWATOPHK.js";
 import {
   OPENCODE_PLUGIN_SIBLING,
   OPENCODE_PLUGIN_SIBLING_CONTENTS,
@@ -53,14 +49,11 @@ import {
   openCodePluginDir,
   openCodePluginFile,
   removeOpenCodeMcpServer
-} from "../chunk-FP2ZJK3T.js";
+} from "../chunk-UZVF6MP2.js";
 import {
   ansiPainter,
   useColor
 } from "../chunk-FO3MDD26.js";
-import {
-  exitOnHelpFlag
-} from "../chunk-F43LAKAK.js";
 import {
   compatibleConfigFile,
   compatibleDocuments,
@@ -76,7 +69,10 @@ import {
   removePusharyToolPermissions,
   restoreClaudeMcpServer,
   serializeConfigDocument
-} from "../chunk-IVUP2EE4.js";
+} from "../chunk-FKDZU6YX.js";
+import {
+  disableDaemonService
+} from "../chunk-W2TA4EVZ.js";
 import {
   hookOwnerOf,
   isHookTakeoverReceipt,
@@ -84,35 +80,40 @@ import {
   resolveBridgeStub,
   restoreHookTakeover,
   restoreMcpServer
-} from "../chunk-NRSTNZYJ.js";
+} from "../chunk-T4CKP47U.js";
 import {
   removeGeminiSettings
-} from "../chunk-3U3FU6ZX.js";
-import "../chunk-KYFWYPHN.js";
-import "../chunk-Y3HTWB5S.js";
+} from "../chunk-SI2NC6UU.js";
+import "../chunk-6EV3B5CD.js";
+import "../chunk-OSMNLNPF.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
-import "../chunk-6ICPEJY5.js";
+import "../chunk-XHKBHWLX.js";
 import {
   CANDIDATE_RCS,
   isDisabledExport,
   removeClaudeAlias,
   shellProfileCandidates
-} from "../chunk-M7VKFAAK.js";
-import "../chunk-CGRVIUKE.js";
-import "../chunk-K2SSNAUW.js";
-import "../chunk-I7EZMNKI.js";
+} from "../chunk-TJZUQRMH.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-OR6KJOHE.js";
+import "../chunk-6ICPEJY5.js";
+import "../chunk-BKK3JCTD.js";
+import "../chunk-CAJCCQ7N.js";
+import "../chunk-5ZSBQHCM.js";
+import "../chunk-M2L7625S.js";
+import "../chunk-GOEIW2VH.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-AW4TDBUJ.js";
-import "../chunk-ZV56INA6.js";
-import "../chunk-4UCTKLHY.js";
-import "../chunk-QPT4PTUG.js";
+import "../chunk-53UZN7JW.js";
+import "../chunk-TKTS3SIM.js";
+import "../chunk-S2ALW446.js";
+import "../chunk-WMO2XVG4.js";
 import "../chunk-7QLSKOSU.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-ODPULZZG.js";
 import {
   claudeJson,
   claudeMcpReceipt,
@@ -149,14 +150,14 @@ import {
   restoreCodexHookTrust,
   vscodePluginDir,
   vscodePluginMcp
-} from "../chunk-EBZK2SJ2.js";
+} from "../chunk-4JHEZ2PV.js";
 import "../chunk-AQFEP65J.js";
 import {
   getBaseUrl
-} from "../chunk-CHD6IUNM.js";
+} from "../chunk-OWQOMGBF.js";
 import {
   NPX_LATEST_COMMAND
-} from "../chunk-DIJ532S7.js";
+} from "../chunk-T3KMJI4W.js";
 import {
   CLI_PACKAGE_NAMES,
   HOOK_COMPATIBLE_PROFILES,
@@ -168,7 +169,7 @@ import {
   globalRootFor,
   isValidApiKey,
   redactSecrets
-} from "../chunk-ORLTWJ2O.js";
+} from "../chunk-JNU3LV47.js";
 
 // bin/pushary-clean.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4, copyFileSync, readdirSync as readdirSync4 } from "fs";

package/dist/bin/pushary-codex-bridge.js

@@ -1,59 +1,64 @@
 #!/usr/bin/env node
-import {
-  LiveTranscriptRelay,
-  liveSessionSleep,
-  postLiveSession,
-  postLiveSessionUntilAccepted,
-  startLiveSessionHeartbeat
-} from "../chunk-OLLWYLQX.js";
-import {
-  resolveProviderBinary
-} from "../chunk-T3Q4B6WV.js";
-import "../chunk-RIVNNBEK.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership,
   withSpawnProcessOwnership
-} from "../chunk-4WM7IVVQ.js";
-import "../chunk-X7TNLYNZ.js";
-import "../chunk-MAB6CGL5.js";
+} from "../chunk-PGHN5D4N.js";
 import {
   transcriptsEnabled
-} from "../chunk-QRNNIDGY.js";
+} from "../chunk-WBD7HZEZ.js";
 import {
   spawnClaude
 } from "../chunk-XHKBHWLX.js";
+import "../chunk-TJZUQRMH.js";
+import {
+  CodexNativeApprovals
+} from "../chunk-SVCT5D7K.js";
+import {
+  LiveTranscriptRelay,
+  liveSessionSleep,
+  postLiveSession,
+  postLiveSessionUntilAccepted,
+  startLiveSessionHeartbeat
+} from "../chunk-PQAFH4DF.js";
+import {
+  resolveProviderBinary
+} from "../chunk-L2ZM7LXN.js";
+import "../chunk-RIVNNBEK.js";
+import "../chunk-75M7NFFC.js";
+import "../chunk-MRQJCIFO.js";
 import "../chunk-6ICPEJY5.js";
-import "../chunk-M7VKFAAK.js";
 import {
-  isAskUserResponse,
   isDecisionStopped,
+  withdrawQuestion
+} from "../chunk-5ZSBQHCM.js";
+import "../chunk-M2L7625S.js";
+import {
+  isAskUserResponse,
   isWaitForAnswerResponse,
-  withdrawQuestion,
   writeDegraded
-} from "../chunk-I7EZMNKI.js";
+} from "../chunk-GOEIW2VH.js";
 import "../chunk-POFBE6ZY.js";
 import {
   callMcpTool,
   isRetryable
-} from "../chunk-AW4TDBUJ.js";
-import "../chunk-ZV56INA6.js";
-import "../chunk-4UCTKLHY.js";
+} from "../chunk-53UZN7JW.js";
+import "../chunk-TKTS3SIM.js";
+import "../chunk-S2ALW446.js";
 import {
   getMachineId
-} from "../chunk-QPT4PTUG.js";
+} from "../chunk-WMO2XVG4.js";
 import "../chunk-7QLSKOSU.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-ODPULZZG.js";
-import "../chunk-EBZK2SJ2.js";
+import "../chunk-4JHEZ2PV.js";
 import "../chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "../chunk-CHD6IUNM.js";
-import "../chunk-DIJ532S7.js";
+} from "../chunk-OWQOMGBF.js";
+import "../chunk-T3KMJI4W.js";
 import {
   AGENT_QUESTION_DESCRIPTION_MAX,
   AGENT_QUESTION_HEADER_MAX,
@@ -68,7 +73,7 @@ import {
   parseCodexQuestions,
   planElicitationAsk,
   readElicitationFields
-} from "../chunk-ORLTWJ2O.js";
+} from "../chunk-JNU3LV47.js";
 
 // bin/pushary-codex-bridge.ts
 import { existsSync } from "fs";
@@ -178,6 +183,7 @@ var MAX_MESSAGE_BUFFERS = 16;
 var JsonRpcClient = class {
   constructor(command, cwd, timeoutMs, bridgeOptions) {
     this.bridgeOptions = bridgeOptions;
+    this.approvals = new CodexNativeApprovals({ ...bridgeOptions, shared: false, reply: (id, result) => this.write({ id, result }) });
     this.threadId = bridgeOptions.resumeThreadId ?? null;
     const options = { cwd, env: { ...process.env, PUSHARY_CODEX_BRIDGE: "1" }, stdio: ["pipe", "pipe", "pipe"] };
     this.child = process.platform === "win32" ? spawnClaude(command.command, command.args ?? [], options) : spawn(command.command, command.args ?? [], options);
@@ -189,6 +195,7 @@ var JsonRpcClient = class {
     this.child.once("exit", (code, signal) => this.fail(new Error(this.exitMessage(code, signal))));
     this.timeoutMs = timeoutMs;
   }
+  approvals;
   child;
   pending = /* @__PURE__ */ new Map();
   notifications = /* @__PURE__ */ new Set();
@@ -239,6 +246,7 @@ var JsonRpcClient = class {
     });
   }
   async close() {
+    await this.approvals.close();
     if (this.closed) return;
     this.closed = true;
     for (const request of this.serverRequests.values()) {
@@ -286,6 +294,7 @@ var JsonRpcClient = class {
     } catch {
       return;
     }
+    if (this.approvals.handle(message, this.threadId)) return;
     if (message.id !== void 0 && (message.method === "item/tool/requestUserInput" || message.method === "mcpServer/elicitation/request")) {
       const id = message.id;
       const owner = message.method === "item/tool/requestUserInput" ? codexQuestionOwner(message.params ?? {}, id, { machineId: this.bridgeOptions.machineId, generation: this.generation, threadId: this.threadId }) : null;
@@ -365,6 +374,7 @@ var JsonRpcClient = class {
     }
   }
   fail(error) {
+    void this.approvals.close();
     if (this.closed) return;
     this.closed = true;
     this.failure = error;