pushary 1.9.46 → 1.9.48

package/dist/{chunk-BKJP2MQN.js → chunk-CIJV7IQU.js}

@@ -4,26 +4,26 @@ import {
   hasDaemonServiceDefinition,
   readDaemonNeedsLogin,
   readDaemonStatus
-} from "./chunk-CA6F44OF.js";
+} from "./chunk-DR2L7VV4.js";
 import {
   readControlMode,
   readKeySource
-} from "./chunk-LA4S2KIM.js";
+} from "./chunk-A45ILEPI.js";
 import {
   detectProviderLiveCapabilities,
   expectedLaunchCapabilities,
   hasSpawnProvider,
   resolveControlPolicy
-} from "./chunk-2PTJHEX4.js";
+} from "./chunk-OJSWXJRB.js";
 import {
   getMachineId
-} from "./chunk-ULEX43F7.js";
+} from "./chunk-GLM263DW.js";
 import {
   getBaseUrl
-} from "./chunk-7XSIUY5F.js";
+} from "./chunk-W4H427YD.js";
 import {
   getPackageVersion
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/machines.ts
 import { hostname } from "os";

package/dist/{chunk-35TUEZ5E.js → chunk-CQ4VDI27.js}

@@ -5,16 +5,16 @@ import {
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-NWZZTHWF.js";
+} from "./chunk-JN64AI53.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-EW52AGOV.js";
+} from "./chunk-B2DU67G6.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-UCRG5QGN.js → chunk-CQWXMLHZ.js}

@@ -1,6 +1,6 @@
 import {
   guardBinary
-} from "./chunk-EW52AGOV.js";
+} from "./chunk-B2DU67G6.js";
 
 // src/bell/install.ts
 import { join } from "path";

package/dist/{chunk-FQWI6XQG.js → chunk-DQPFQGIN.js}

@@ -2,7 +2,7 @@ import {
   autoUpdateLock,
   installPackageGlobally,
   npmErrorMessage
-} from "./chunk-EW52AGOV.js";
+} from "./chunk-B2DU67G6.js";
 import {
   writeJsonAtomic
 } from "./chunk-AQFEP65J.js";

package/dist/{chunk-CA6F44OF.js → chunk-DR2L7VV4.js}

@@ -1,17 +1,17 @@
 import {
   readControlMode
-} from "./chunk-LA4S2KIM.js";
+} from "./chunk-A45ILEPI.js";
 import {
   needsShell,
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "./chunk-ULEX43F7.js";
+} from "./chunk-GLM263DW.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-EW52AGOV.js";
+} from "./chunk-B2DU67G6.js";
 import {
   readJsonSafe,
   writeFileAtomic,
@@ -20,7 +20,7 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey
-} from "./chunk-7XSIUY5F.js";
+} from "./chunk-W4H427YD.js";
 import {
   CLI_PACKAGE_NAMES,
   cmdShimTarget,
@@ -28,7 +28,7 @@ import {
   globalPackageFolder,
   globalRootFor,
   isRecord
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/daemon-lifecycle.ts
 import { dirname, join, win32 as win32Path } from "path";

package/dist/{chunk-XAMFOUXA.js → chunk-EGARDTA5.js}

@@ -1,9 +1,9 @@
 import {
   parseSseMessages
-} from "./chunk-FQW7AV6U.js";
+} from "./chunk-JRB4U3S6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-WN3MDHAM.js";
+} from "./chunk-WNEEQ7GJ.js";
 
 // src/mcp-stdio-bridge.ts
 var MCP_BRIDGE_BINARY = "pushary-mcp";

package/dist/{chunk-P2FHZ65U.js → chunk-EOT33AJN.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3EGEA4KH.js";
 import {
   getBaseUrl
-} from "./chunk-7XSIUY5F.js";
+} from "./chunk-W4H427YD.js";
 
 // src/cli/login-ui.ts
 import { hostname } from "os";

package/dist/{chunk-FMDGUCER.js → chunk-FFIITUQJ.js}

@@ -4,13 +4,13 @@ import {
   postLiveSession,
   postLiveSessionUntilAccepted,
   startLiveSessionHeartbeat
-} from "./chunk-ELLN4XAF.js";
+} from "./chunk-Q7GNNQZ2.js";
 import {
   SESSION_IDLE_TIMEOUT_MS,
   describeIdleWindow,
   idleDeadlinePassed,
   startProcessOwnership
-} from "./chunk-UI3WDOV3.js";
+} from "./chunk-IXWXGQRX.js";
 import {
   spawnClaude
 } from "./chunk-XHKBHWLX.js";
@@ -21,11 +21,11 @@ import {
   repoKeyFor,
   withdrawQuestion,
   writeDegraded
-} from "./chunk-UGXRDY3O.js";
+} from "./chunk-XOHT5UCY.js";
 import {
   callMcpTool,
   isRetryable
-} from "./chunk-FQW7AV6U.js";
+} from "./chunk-JRB4U3S6.js";
 import {
   AGENT_QUESTION_DESCRIPTION_MAX,
   AGENT_QUESTION_HEADER_MAX,
@@ -33,7 +33,9 @@ import {
   ASK_CONTEXT_MAX,
   ASK_QUESTION_MAX,
   CODEX_NATIVE_APPROVAL_CAPABILITY,
+  CODEX_NATIVE_APPROVAL_CHOICES,
   CODEX_NATIVE_APPROVAL_METHODS,
+  CODEX_NATIVE_APPROVAL_REPLIES,
   PERSONAL_QUESTION_CAPABILITY,
   canonicalJsonText,
   codexNativeApprovalResponse,
@@ -44,7 +46,7 @@ import {
   parseCodexQuestions,
   planElicitationAsk,
   readElicitationFields
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/codex-question-owner.ts
 import { createHash } from "crypto";
@@ -164,7 +166,7 @@ var CodexNativeApprovals = class {
     this.pending.delete(id);
     this.retired.add(id);
     if (!nativeClosed && !this.closed && !pending.replied && !this.options.shared) {
-      this.options.reply(id, codexNativeApprovalResponse(pending.approval, "Deny"));
+      this.options.reply(id, codexNativeApprovalResponse(pending.approval, CODEX_NATIVE_APPROVAL_CHOICES.deny));
       pending.replied = true;
     }
     const task = this.cleanup(pending, nativeClosed).finally(() => {
@@ -181,6 +183,7 @@ var CodexNativeApprovals = class {
       correlationId: pending.correlationId,
       claimId: pending.claimId,
       localSurfaceAvailable: this.options.shared,
+      acceptsAllowReply: true,
       cwd: pending.cwd,
       repoKey: pending.repoKey
     });
@@ -213,12 +216,18 @@ var CodexNativeApprovals = class {
         pending.creating = false;
       }
       if (signal.aborted) return;
-      if (created.kind === "deny") {
-        this.options.reply(pending.owner.requestId, codexNativeApprovalResponse(pending.approval, "Deny"));
+      if (created.kind === CODEX_NATIVE_APPROVAL_REPLIES.deny) {
+        this.options.reply(pending.owner.requestId, codexNativeApprovalResponse(pending.approval, CODEX_NATIVE_APPROVAL_CHOICES.deny));
         pending.replied = true;
         return;
       }
-      if (created.kind !== "ask" || !pending.correlationId) throw new Error("Native approval unavailable");
+      if (created.kind === CODEX_NATIVE_APPROVAL_REPLIES.allow && pending.approval.options.includes(CODEX_NATIVE_APPROVAL_CHOICES.once)) {
+        this.options.reply(pending.owner.requestId, codexNativeApprovalResponse(pending.approval, CODEX_NATIVE_APPROVAL_CHOICES.once));
+        pending.replied = true;
+        return;
+      }
+      if (created.kind === CODEX_NATIVE_APPROVAL_REPLIES.native && this.options.shared) return;
+      if (created.kind !== CODEX_NATIVE_APPROVAL_REPLIES.ask || !pending.correlationId) throw new Error("Native approval unavailable");
       let answer = null;
       while (!signal.aborted) {
         const result = await callMcpTool(
@@ -245,7 +254,7 @@ var CodexNativeApprovals = class {
       await this.post(pending, "reply_queued", AbortSignal.timeout(3e3));
     } catch {
       if (!pending.controller.signal.aborted && !this.options.signal.aborted && !this.closed && !this.options.shared && !pending.replied) {
-        this.options.reply(pending.owner.requestId, codexNativeApprovalResponse(pending.approval, "Deny"));
+        this.options.reply(pending.owner.requestId, codexNativeApprovalResponse(pending.approval, CODEX_NATIVE_APPROVAL_CHOICES.deny));
         pending.replied = true;
       }
       if (!pending.controller.signal.aborted && !this.options.signal.aborted) writeDegraded("questions", { reason: "native_approval_unavailable", fallback: this.options.shared ? "native client" : "refused", event: pending.owner.method });

package/dist/{chunk-5O6GB64K.js → chunk-GFQT4KJO.js}

@@ -4,10 +4,10 @@ import {
   keyPrefix,
   readConfigFileKey,
   readMacAppKeyPrefix
-} from "./chunk-LA4S2KIM.js";
+} from "./chunk-A45ILEPI.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-WN3MDHAM.js";
+} from "./chunk-WNEEQ7GJ.js";
 
 // src/key-signed-out.ts
 var VERDICT_BY_CHECK = {

package/dist/{chunk-ULEX43F7.js → chunk-GLM263DW.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-EW52AGOV.js";
+} from "./chunk-B2DU67G6.js";
 import {
   writeFileAtomic
 } from "./chunk-AQFEP65J.js";

package/dist/{chunk-ZYS4UHEC.js → chunk-GMK24GEO.js}

@@ -1,16 +1,16 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-VTF7LKDB.js";
+} from "./chunk-LVA2RJNM.js";
 import {
   grokHome
-} from "./chunk-OI6YNNI5.js";
+} from "./chunk-ZRQPJHNJ.js";
 import {
   codexHomeFrom,
   resolvePathBinary
-} from "./chunk-EW52AGOV.js";
+} from "./chunk-B2DU67G6.js";
 import {
   HOOK_COMPATIBLE_PROFILES
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-I5EQ5NJD.js → chunk-GOSHI63C.js}

@@ -6,38 +6,38 @@ import {
 } from "./chunk-DWQYCOPI.js";
 import {
   ensureDaemonRunning
-} from "./chunk-CA6F44OF.js";
+} from "./chunk-DR2L7VV4.js";
 import {
   hookOwnerOf
-} from "./chunk-EP4MD6TH.js";
+} from "./chunk-C3HH6VQP.js";
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-ZGGSQTCO.js";
+} from "./chunk-WSSBT75T.js";
 import {
   readTranscriptPreference
-} from "./chunk-LA4S2KIM.js";
+} from "./chunk-A45ILEPI.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-EKDSF3IX.js";
+} from "./chunk-LMFKL76J.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-2VNHP2OE.js";
+} from "./chunk-YUBWJHWE.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-EW52AGOV.js";
+} from "./chunk-B2DU67G6.js";
 import {
   writeJsonAtomic
 } from "./chunk-AQFEP65J.js";
 import {
   getApiKey,
   getBaseUrl
-} from "./chunk-7XSIUY5F.js";
+} from "./chunk-W4H427YD.js";
 
 // src/transcript-registration.ts
 import { createHash } from "crypto";

package/dist/{chunk-HX34VBPE.js → chunk-GYHX4NIW.js}

@@ -2,25 +2,25 @@ import {
   SIGNED_OUT_ON_MAC_MESSAGE,
   describeSignedOutKey,
   readSignedOutDiagnosis
-} from "./chunk-5O6GB64K.js";
+} from "./chunk-GFQT4KJO.js";
 import {
   createIo
 } from "./chunk-FO3MDD26.js";
 import {
   readKeySource
-} from "./chunk-LA4S2KIM.js";
+} from "./chunk-A45ILEPI.js";
 import {
   absoluteUrl,
   checkApiKey,
   describeKeyCheck,
   keyCheckFromResponse
-} from "./chunk-2X3PPRNC.js";
+} from "./chunk-TVBQTGM7.js";
 import {
   EXIT
 } from "./chunk-KZERVKTD.js";
 import {
   getBaseUrl
-} from "./chunk-7XSIUY5F.js";
+} from "./chunk-W4H427YD.js";
 
 // src/cli/report-key.ts
 var { dim, yellow } = createIo();

package/dist/{chunk-2UABJ75E.js → chunk-HF66SU3D.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-POFBE6ZY.js";
 import {
   autoUpdateState
-} from "./chunk-EW52AGOV.js";
+} from "./chunk-B2DU67G6.js";
 import {
   readJsonSafe,
   writeJsonAtomic
@@ -15,7 +15,7 @@ import {
   globalUpgradeEntry,
   isAutoUpdateResult,
   ownPackageRoot
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/auto-update.ts
 import { spawn } from "child_process";

package/dist/{chunk-GG6C4CHH.js → chunk-I7B4X232.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-KZERVKTD.js";
 import {
   renderCommandHelp
-} from "./chunk-WN3MDHAM.js";
+} from "./chunk-WNEEQ7GJ.js";
 import {
   getPackageVersion
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/cli/usage.ts
 var exitOnHelpFlag = (command) => {

package/dist/{chunk-MOUUDZOZ.js → chunk-ICSA7SWY.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-LA4S2KIM.js";
+} from "./chunk-A45ILEPI.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-KJNWVAS6.js → chunk-IRTPMVIS.js}

@@ -1,16 +1,16 @@
 import {
   readExistingMachineId
-} from "./chunk-ULEX43F7.js";
+} from "./chunk-GLM263DW.js";
 import {
   NetworkError
 } from "./chunk-7QLSKOSU.js";
 import {
   getBaseUrl
-} from "./chunk-7XSIUY5F.js";
+} from "./chunk-W4H427YD.js";
 import {
   clientContextHeaders,
   getPackageVersion
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/cli/net.ts
 import { createRequire } from "module";

package/dist/{chunk-JPGY5LSF.js → chunk-IVQA2XWE.js}

@@ -1,9 +1,9 @@
 import {
   APPROVAL_SETTINGS_PATH
-} from "./chunk-HX34VBPE.js";
+} from "./chunk-GYHX4NIW.js";
 import {
   readMacAppAgentKey
-} from "./chunk-UP2RNIHL.js";
+} from "./chunk-TIVYEX3X.js";
 import {
   findExportedKeyLines,
   isAdoptedMacAppKey,
@@ -13,13 +13,13 @@ import {
   readConfigFileKey,
   readKeySource,
   readMacAppKeyPrefix
-} from "./chunk-LA4S2KIM.js";
+} from "./chunk-A45ILEPI.js";
 import {
   absoluteUrl
-} from "./chunk-2X3PPRNC.js";
+} from "./chunk-TVBQTGM7.js";
 import {
   isValidApiKey
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/key-revocation.ts
 var SELF_REVOKE_PATH = "/api/v1/server/keys/self/revoke";

package/dist/{chunk-UI3WDOV3.js → chunk-IXWXGQRX.js}

@@ -1,12 +1,12 @@
 import {
   pusharyDir
-} from "./chunk-EW52AGOV.js";
+} from "./chunk-B2DU67G6.js";
 import {
   readJsonSafe
 } from "./chunk-AQFEP65J.js";
 import {
   isRecord
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/process-ownership.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-NWZZTHWF.js → chunk-JN64AI53.js}

@@ -1,6 +1,6 @@
 import {
   PRETOOLUSE_GATED_TOOLS
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/claude-tools.ts
 var POSTTOOLUSE_MIRROR_ONLY_TOOLS = ["TodoWrite", "Task", "WebFetch", "WebSearch"];

package/dist/{chunk-FQW7AV6U.js → chunk-JRB4U3S6.js}

@@ -1,12 +1,12 @@
 import {
   keyCheckFromResponse
-} from "./chunk-2X3PPRNC.js";
+} from "./chunk-TVBQTGM7.js";
 import {
   installNetworkDefaults
-} from "./chunk-KJNWVAS6.js";
+} from "./chunk-IRTPMVIS.js";
 import {
   getBaseUrl
-} from "./chunk-7XSIUY5F.js";
+} from "./chunk-W4H427YD.js";
 
 // src/retry.ts
 var isRetryable = (err) => {

package/dist/{chunk-T623UG5T.js → chunk-K6X6B76U.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-NO3ADUD4.js";
+} from "./chunk-RZKVGP2P.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-7QLSKOSU.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-WN3MDHAM.js";
+} from "./chunk-WNEEQ7GJ.js";
 import {
   CLAUDE_CONNECTOR_GUIDE,
   CLAUDE_CONNECTOR_STEPS,
@@ -17,7 +17,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-GQZF6DPL.js → chunk-KRIG552M.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SESSION
-} from "./chunk-WYD4PYTL.js";
+} from "./chunk-7S5HYDAO.js";
 
 // src/answer.ts
 var isDeferAnswer = (value) => value === "defer";

package/dist/{chunk-EKDSF3IX.js → chunk-LMFKL76J.js}

@@ -1,6 +1,6 @@
 import {
   redactSecretsFromContent
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/crypto.ts
 import nacl from "tweetnacl";

package/dist/{chunk-VTF7LKDB.js → chunk-LVA2RJNM.js}

@@ -1,15 +1,15 @@
 import {
   compatibleConfigFile
-} from "./chunk-OI6YNNI5.js";
+} from "./chunk-ZRQPJHNJ.js";
 import {
   hookOwnerOf,
   hookOwnerOfCommands,
   liveBridgeProbe,
   resolveBridgeStub
-} from "./chunk-EP4MD6TH.js";
+} from "./chunk-C3HH6VQP.js";
 import {
   AGENT_CHOICES
-} from "./chunk-NO3ADUD4.js";
+} from "./chunk-RZKVGP2P.js";
 import {
   claudeSettings,
   codexHooksJson,
@@ -18,7 +18,7 @@ import {
   guardedArgv,
   pusharyDir,
   vscodePluginDir
-} from "./chunk-EW52AGOV.js";
+} from "./chunk-B2DU67G6.js";
 import {
   readJsonSafe
 } from "./chunk-AQFEP65J.js";
@@ -29,7 +29,7 @@ import {
   OPENCODE_APPROVAL_EVENT,
   hookCompatibleProfile,
   isRecord
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-SEKQAYVP.js → chunk-LZW7O3G4.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-AQFEP65J.js";
 import {
   configFilePath
-} from "./chunk-7XSIUY5F.js";
+} from "./chunk-W4H427YD.js";
 import {
   readSetupOutcomeProperties
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/hooks-spec.ts
 var CURSOR_GATE_SCRIPT = "pushary-gate.mjs";

package/dist/{chunk-NULG2ZUG.js → chunk-MVW5KW6R.js}

@@ -14,19 +14,19 @@ import {
 } from "./chunk-FO3MDD26.js";
 import {
   reportedInstallSource
-} from "./chunk-W7MXYDGP.js";
+} from "./chunk-33QBP3M5.js";
 import {
   callMcpTool
-} from "./chunk-FQW7AV6U.js";
+} from "./chunk-JRB4U3S6.js";
 import {
   NPX_LATEST_COMMAND
-} from "./chunk-WN3MDHAM.js";
+} from "./chunk-WNEEQ7GJ.js";
 import {
   NO_PAIRING_COMPUTER,
   PAIR_TTL_SECONDS,
   classifyConfirmResponse,
   isAnswerSource
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/reach.ts
 var reachVerdict = (channels) => {

package/dist/{chunk-PZPYL65I.js → chunk-N3GB5RQH.js}

@@ -1,6 +1,6 @@
 import {
   isSafeReadOnlyCommand
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/ledger.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync } from "fs";

package/dist/{chunk-2PTJHEX4.js → chunk-OJSWXJRB.js}

@@ -10,10 +10,10 @@ import {
   resolvePackageVersionFromBinary,
   resolvePathBinary,
   resolvePathBinaryAsync
-} from "./chunk-EW52AGOV.js";
+} from "./chunk-B2DU67G6.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-EDSXF7NV.js";
+} from "./chunk-YWFL5ANU.js";
 
 // src/setup/codex-install.ts
 var NATIVE_BINARY_MIN_BYTES = 20 * 1024 * 1024;
@@ -118,6 +118,11 @@ var resolveControlPolicy = (input) => {
   if (input.providerAvailable && input.managerAvailable) return "enabled";
   return input.servicePresent ? "legacy" : "unsupported";
 };
+var missingControlPrerequisite = (input) => {
+  if (!input.providerAvailable) return "provider";
+  if (!input.managerAvailable) return "service-manager";
+  return null;
+};
 var preferGlobalProviderBinary = (platform) => platform === "win32";
 var resolveProviderBinary = (provider, platform = process.platform) => preferGlobalProviderBinary(platform) ? resolveGlobalBinary(provider) ?? resolvePathBinary(provider, platform) : resolvePathBinary(provider, platform) ?? resolveGlobalBinary(provider);
 var codexBinaryIsBroken = (binary) => codexInstallHealthAt(binary).kind === "binary-missing";
@@ -189,6 +194,7 @@ export {
   launchableProviders,
   hasSpawnProvider,
   resolveControlPolicy,
+  missingControlPrerequisite,
   resolveProviderBinary,
   codexBinaryIsBroken,
   detectProviderLiveCapabilities,

package/dist/{chunk-ELLN4XAF.js → chunk-Q7GNNQZ2.js}

@@ -3,11 +3,11 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-EKDSF3IX.js";
+} from "./chunk-LMFKL76J.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
-} from "./chunk-2VNHP2OE.js";
+} from "./chunk-YUBWJHWE.js";
 
 // src/live-session.ts
 var MAX_TRANSCRIPT_QUEUE = 100;