@agent-native/core 0.101.7 → 0.101.11

package/dist/agent/production-agent.js

@@ -1913,7 +1913,7 @@ function stableStringify(value) {
         .map((key) => `${JSON.stringify(key)}:${stableStringify(obj[key])}`)
         .join(",")}}`;
 }
-function toolCallCacheKey(toolName, input) {
+export function toolCallCacheKey(toolName, input) {
     return `${toolName}:${stableStringify(normalizeToolCallInputForHistory(input))}`;
 }
 const INTERRUPTED_TOOL_LEDGER_POLL_MS = process.env.NODE_ENV === "test" ? 0 : 2_000;
@@ -3051,7 +3051,10 @@ export async function runAgentLoop(opts) {
             // instead of executing. The action's side effect never happens until a
             // human re-issues the turn approving this call's stable key.
             const approvalKey = toolCallCacheKey(toolCall.name, toolCall.input);
-            if (actionEntry.needsApproval && !approvedToolCallKeys.has(approvalKey)) {
+            // Consume a grant on its first exact match. A second identical call in
+            // the same continuation must request its own human approval.
+            const wasApproved = approvedToolCallKeys.delete(approvalKey);
+            if (actionEntry.needsApproval && !wasApproved) {
                 let mustApprove = false;
                 try {
                     mustApprove =