Cool to see more people building phone-first agent control. I've been working on the permission layer side of this same problem. One thing I learned: session management and permission approval have very different latency requirements. Sessions you check every few minutes. Permission requests need sub-second response or your agent sits idle burning tokens. Push notifications > browser polling for that reason.