@atlasharness/atlascode 0.1.51 → 0.1.53

package/dist/cli.js

@@ -27939,7 +27939,14 @@ This tool's schema was not sent to the API — it was not in the discovered-tool
 }
 
 // src/engine/pipeline/toolExecution.ts
-function mergeHookPermission(hookBehavior, gate) {
+function mergeHookPermission(hookBehavior, gate, hookReason) {
+  if (hookBehavior === "defer") {
+    return {
+      allowed: false,
+      deferred: true,
+      reason: hookReason ?? "deferred by hook"
+    };
+  }
   if (hookBehavior === "deny") {
     return { allowed: false, reason: "blocked by hook" };
   }
@@ -28022,7 +28029,10 @@ async function executeToolUse(tu, assistantMsg, deps) {
     toolUseId: tu.id,
     assistantMessage: assistantMsg
   }) : { allowed: true };
-  const verdict = mergeHookPermission(preOutcome?.hookBehavior, gateVerdict);
+  const verdict = mergeHookPermission(preOutcome?.hookBehavior, gateVerdict, preOutcome?.hookPermissionDecisionReason);
+  if (verdict.deferred) {
+    return { deferred: true, deferReason: verdict.reason, isError: false };
+  }
   if (!verdict.allowed) {
     const content = verdict.ask ? `<tool_use_error>permission confirmation required (prompt 面残留守): ${verdict.reason ?? tu.name}</tool_use_error>` : `<tool_use_error>permission denied: ${verdict.reason ?? tu.name}</tool_use_error>`;
     return {
@@ -28087,8 +28097,13 @@ async function runToolBatch(toolUses, assistantMsg, deps) {
         name: tu.name,
         block: r.block,
         isError: r.isError,
-        toolUseResult: r.toolUseResult
+        toolUseResult: r.toolUseResult,
+        deferred: r.deferred,
+        deferReason: r.deferReason
       });
+      if (r.deferred) {
+        return outcomes;
+      }
     }
   }
   return outcomes;
@@ -28371,6 +28386,14 @@ function interpretHookOutput(p) {
         };
       } else if (specific?.permissionDecision === "ask") {
         result.permissionBehavior = "ask";
+        if (specific.permissionDecisionReason) {
+          result.permissionDecisionReason = specific.permissionDecisionReason;
+        }
+      } else if (specific?.permissionDecision === "defer") {
+        result.permissionBehavior = "defer";
+        if (specific.permissionDecisionReason) {
+          result.permissionDecisionReason = specific.permissionDecisionReason;
+        }
       }
       if (specific?.additionalContext)
         result.additionalContext = specific.additionalContext;
@@ -28410,6 +28433,7 @@ ${r.additionalContext}` : r.additionalContext;
   if (r.permissionBehavior) {
     if (!acc.permissionBehavior || PERMISSION_RANK[r.permissionBehavior] > PERMISSION_RANK[acc.permissionBehavior]) {
       acc.permissionBehavior = r.permissionBehavior;
+      acc.permissionDecisionReason = r.permissionDecisionReason;
     }
   }
 }
@@ -28483,6 +28507,7 @@ var init_runHooks = __esm(() => {
   init_shouldSkipHookDueToTrust();
   HOOK_EXECUTION_TIMEOUT_MS = 10 * 60 * 1000;
   PERMISSION_RANK = {
+    defer: 4,
     deny: 3,
     ask: 2,
     allow: 1,
@@ -81436,6 +81461,19 @@ var init_reactiveCompactError = __esm(() => {
 
 // src/engine/query/loop.ts
 import { randomUUID as randomUUID18 } from "crypto";
+function makeDeferredToolUseMarker(payload) {
+  return {
+    type: "system",
+    subtype: "deferred_tool_use",
+    role: "system",
+    tool_use_id: payload.toolUseId,
+    tool_name: payload.toolName,
+    defer_reason: payload.deferReason,
+    isMeta: false,
+    uuid: randomUUID18(),
+    timestamp: new Date().toISOString()
+  };
+}
 async function queryOneRound(deps, tools, messages) {
   const chatArgs = {
     messages,
@@ -81495,13 +81533,20 @@ async function queryOneRound(deps, tools, messages) {
     hooks: deps.hooks?.toolHooks,
     toolContext: deps.toolContext
   });
-  const toolResults = outcomes.map((o) => ({
+  const deferredOutcome = outcomes.find((o) => o.deferred);
+  const deferredPayload = deferredOutcome ? {
+    toolUseId: deferredOutcome.toolUseId,
+    toolName: deferredOutcome.name,
+    deferReason: deferredOutcome.deferReason
+  } : undefined;
+  const marker = deferredPayload ? makeDeferredToolUseMarker(deferredPayload) : undefined;
+  const toolResults = outcomes.filter((o) => !o.deferred).map((o) => ({
     toolUseId: o.toolUseId,
     name: o.name,
     block: o.block
   }));
   const now = new Date().toISOString();
-  const resultMessages = outcomes.map((o) => ({
+  const resultMessages = outcomes.filter((o) => !o.deferred).map((o) => ({
     type: "user",
     role: "user",
     uuid: randomUUID18(),
@@ -81509,15 +81554,17 @@ async function queryOneRound(deps, tools, messages) {
     message: { role: "user", content: [o.block] },
     toolUseResult: o.toolUseResult
   }));
+  const roundMessages = marker ? [...messages, assistantMsg, ...resultMessages, marker] : [...messages, assistantMsg, ...resultMessages];
   if (deps.transcript) {
-    deps.transcript.record([...messages, assistantMsg, ...resultMessages]);
+    deps.transcript.record(roundMessages);
   }
   return {
-    messages: [...messages, assistantMsg, ...resultMessages],
+    messages: roundMessages,
     toolResults,
     assistantContent,
     stopReason: resp.message.stop_reason,
-    empty
+    empty,
+    deferred: deferredPayload
   };
 }
 async function queryAgentLoop(deps, args) {
@@ -81532,6 +81579,7 @@ async function queryAgentLoop(deps, args) {
   let turns = 0;
   let terminated = false;
   let lastRound;
+  let deferredToolUse;
   if (deps.transcript) {
     await deps.transcript.record(messages);
   }
@@ -81606,6 +81654,10 @@ async function queryAgentLoop(deps, args) {
       });
       break;
     }
+    if (lastRound.deferred) {
+      deferredToolUse = lastRound.deferred;
+      break;
+    }
     if (lastRound.toolResults.length === 0) {
       const stop = deps.hooks?.stopHooks;
       const preventStop = stop ? (await stop(deps.signal)).preventContinuation : false;
@@ -81625,7 +81677,8 @@ async function queryAgentLoop(deps, args) {
     terminated,
     tracking,
     lastRound,
-    emptyTerminated
+    emptyTerminated,
+    deferred: deferredToolUse
   };
   deps.emit?.({ type: "loop_end", result });
   return result;
@@ -81683,6 +81736,7 @@ function createToolHooks(opts = {}) {
         blockingError: r.blockingError?.blockingError,
         updatedInput: r.updatedInput,
         hookBehavior: r.permissionBehavior,
+        hookPermissionDecisionReason: r.permissionDecisionReason,
         preventContinuation: r.preventContinuation,
         stopReason: r.stopReason
       };
@@ -85526,6 +85580,100 @@ function extractFinalAssistantText(loopResult) {
   }
   return "";
 }
+function findDeferredToolUseState(conversation) {
+  let markerIdx = -1;
+  let marker;
+  for (let i = conversation.length - 1;i >= 0; i--) {
+    const m = conversation[i];
+    if (m.type === "system" && m.subtype === "deferred_tool_use") {
+      markerIdx = i;
+      marker = m;
+      break;
+    }
+  }
+  if (!marker)
+    return;
+  const toolUseId = marker.tool_use_id;
+  const toolName = marker.tool_name;
+  if (typeof toolUseId !== "string" || typeof toolName !== "string") {
+    return;
+  }
+  const deferReason = typeof marker.defer_reason === "string" ? marker.defer_reason : undefined;
+  const resolved = conversation.slice(markerIdx + 1).some((m) => {
+    const content = m.message?.content;
+    return Array.isArray(content) && content.some((b) => b?.type === "tool_result" && b?.tool_use_id === toolUseId);
+  });
+  if (resolved)
+    return;
+  return { toolUseId, toolName, deferReason };
+}
+async function reEvaluateDeferredToolCalls(params) {
+  const { conversation, toolUseId, tools, toolHooks, checkPermission, signal, toolContext } = params;
+  let tu;
+  let assistantMsg;
+  for (let i = conversation.length - 1;i >= 0; i--) {
+    const m = conversation[i];
+    if (m.role !== "assistant")
+      continue;
+    const content = m.message?.content;
+    if (!Array.isArray(content))
+      continue;
+    const block = content.find((b) => b?.type === "tool_use" && b?.id === toolUseId);
+    if (block) {
+      tu = block;
+      assistantMsg = m;
+      break;
+    }
+  }
+  if (!tu) {
+    const marker = conversation.find((m) => m.type === "system" && m.subtype === "deferred_tool_use" && m.tool_use_id === toolUseId);
+    tu = {
+      type: "tool_use",
+      id: toolUseId,
+      name: typeof marker?.tool_name === "string" ? marker?.tool_name : "unknown",
+      input: {}
+    };
+  }
+  if (!assistantMsg) {
+    assistantMsg = {
+      type: "assistant",
+      role: "assistant",
+      uuid: randomUUID21(),
+      timestamp: new Date().toISOString(),
+      message: { role: "assistant", content: [tu] }
+    };
+  }
+  const outcome = await executeToolUse(tu, assistantMsg, {
+    tools,
+    hooks: toolHooks,
+    checkPermission,
+    signal,
+    toolContext
+  });
+  if (outcome.deferred) {
+    const payload = {
+      toolUseId,
+      toolName: tu.name,
+      deferReason: outcome.deferReason
+    };
+    const marker = makeDeferredToolUseMarker(payload);
+    return {
+      suspended: true,
+      deferred: payload,
+      messages: [...conversation, marker]
+    };
+  }
+  const now = new Date().toISOString();
+  const resultMsg = {
+    type: "user",
+    role: "user",
+    uuid: randomUUID21(),
+    timestamp: now,
+    message: { role: "user", content: [outcome.block] },
+    toolUseResult: outcome.toolUseResult
+  };
+  return { suspended: false, messages: [...conversation, resultMsg] };
+}
 function resolveHeadlessTpc(tpc) {
   if (tpc)
     return tpc;
@@ -85682,7 +85830,8 @@ async function runHeadless(inputPrompt, options) {
   const loopDeps = {
     ...bundle.deps,
     signal: abortController.signal,
-    checkPermission
+    checkPermission,
+    toolContext: makeCtx()
   };
   const autoCompact = {
     contextWindow: (roleModel ? getProviderContextWindow(roleModel) : undefined) ?? 200000,
@@ -85751,6 +85900,34 @@ async function runHeadless(inputPrompt, options) {
     await writeMessage(resultMessage);
     return resultMessage;
   };
+  const writeDeferredSuspendResult = async (p, numTurns, conversationMessages) => {
+    await drainToOutput();
+    for (const m of conversationMessages) {
+      if (m.role !== "assistant")
+        continue;
+      const content = m.message?.content;
+      if (!content || content.length === 0)
+        continue;
+      await writeMessage({
+        type: "assistant",
+        session_id: sessionId,
+        message: { role: "assistant", content },
+        uuid: randomUUID21()
+      });
+    }
+    await drainToOutput();
+    const resultMessage = {
+      type: "result",
+      subtype: "deferred",
+      session_id: sessionId,
+      is_error: false,
+      num_turns: numTurns,
+      result: `Deferred tool call ${p.toolName} (${p.toolUseId}) by PreToolUse hook` + (p.deferReason ? `: ${p.deferReason}` : "") + `. Session suspended — resume with: atlas -p --resume ${sessionId}`,
+      uuid: randomUUID21()
+    };
+    await writeMessage(resultMessage);
+    return resultMessage;
+  };
   const queuedUserTurns = [];
   let stdinClosed = false;
   const drainPump = (async () => {
@@ -85783,38 +85960,92 @@ async function runHeadless(inputPrompt, options) {
   });
   cronScheduler.start();
   try {
-    let loopResult = await runTurn(conversation);
-    conversation = loopResult.messages;
-    const firstResult = await writeTurnOutputs(loopResult);
-    switch (options.outputFormat) {
-      case "json": {
-        if (options.verbose) {
-          process.stdout.write(JSON.stringify(conversation) + `
-`);
-        } else {
-          process.stdout.write(JSON.stringify(firstResult) + `
-`);
-        }
-        break;
+    const deferredState = findDeferredToolUseState(conversation);
+    let reSuspended = false;
+    if (deferredState) {
+      const re = await reEvaluateDeferredToolCalls({
+        conversation,
+        toolUseId: deferredState.toolUseId,
+        tools,
+        toolHooks: loopDeps.hooks?.toolHooks,
+        checkPermission,
+        signal: loopDeps.signal,
+        toolContext: loopDeps.toolContext
+      });
+      conversation = re.messages;
+      if (loopDeps.transcript) {
+        loopDeps.transcript.record(conversation);
       }
-      case "stream-json":
-        break;
-      default: {
-        const result = firstResult;
-        switch (result.subtype) {
-          case "success":
-            process.stdout.write(result.result?.endsWith(`
-`) ? result.result : (result.result ?? "") + `
+      if (re.suspended && re.deferred) {
+        await writeDeferredSuspendResult(re.deferred, 0, conversation);
+        reSuspended = true;
+      }
+    }
+    let loopResult;
+    if (reSuspended) {
+      queuedUserTurns.length = 0;
+      stdinClosed = true;
+      cronScheduler.stop();
+      await drainToOutput();
+    } else {
+      loopResult = await runTurn(conversation);
+      conversation = loopResult.messages;
+      if (loopResult.deferred) {
+        const firstResult = await writeDeferredSuspendResult(loopResult.deferred, loopResult.turns, conversation);
+        switch (options.outputFormat) {
+          case "json": {
+            if (options.verbose) {
+              process.stdout.write(JSON.stringify(conversation) + `
 `);
+            } else {
+              process.stdout.write(JSON.stringify(firstResult) + `
+`);
+            }
             break;
-          case "error_during_execution":
-            process.stdout.write(`Execution error`);
+          }
+          case "stream-json":
             break;
-          case "error_max_turns":
-            process.stdout.write(`Error: Reached max turns (${String(options.maxTurns)})`);
+          default: {
+            process.stdout.write(String(firstResult.result ?? "") + `
+`);
             break;
-          default:
+          }
+        }
+        queuedUserTurns.length = 0;
+        stdinClosed = true;
+      } else {
+        const firstResult = await writeTurnOutputs(loopResult);
+        switch (options.outputFormat) {
+          case "json": {
+            if (options.verbose) {
+              process.stdout.write(JSON.stringify(conversation) + `
+`);
+            } else {
+              process.stdout.write(JSON.stringify(firstResult) + `
+`);
+            }
+            break;
+          }
+          case "stream-json":
             break;
+          default: {
+            const result = firstResult;
+            switch (result.subtype) {
+              case "success":
+                process.stdout.write(result.result?.endsWith(`
+`) ? result.result : (result.result ?? "") + `
+`);
+                break;
+              case "error_during_execution":
+                process.stdout.write(`Execution error`);
+                break;
+              case "error_max_turns":
+                process.stdout.write(`Error: Reached max turns (${String(options.maxTurns)})`);
+                break;
+              default:
+                break;
+            }
+          }
         }
       }
     }
@@ -165199,7 +165430,7 @@ var init_addDirPluginSettings = __esm(() => {
 });
 
 // src/tui/entrypoints/sdk/coreSchemas.ts
-var ModelUsageSchema, OutputFormatTypeSchema, BaseOutputFormatSchema, JsonSchemaOutputFormatSchema, OutputFormatSchema, ApiKeySourceSchema, ConfigScopeSchema2, SdkBetaSchema, ThinkingAdaptiveSchema, ThinkingEnabledSchema, ThinkingDisabledSchema, ThinkingConfigSchema, McpStdioServerConfigSchema2, McpSSEServerConfigSchema2, McpHttpServerConfigSchema, McpSdkServerConfigSchema, McpServerConfigForProcessTransportSchema, McpClaudeAIProxyServerConfigSchema, McpServerStatusConfigSchema, McpServerStatusSchema, McpSetServersResultSchema, PermissionUpdateDestinationSchema, PermissionBehaviorSchema, PermissionRuleValueSchema, PermissionUpdateSchema, PermissionDecisionClassificationSchema, PermissionResultSchema, PermissionModeSchema2, HOOK_EVENTS2, HookEventSchema, BaseHookInputSchema, PreToolUseHookInputSchema, PermissionRequestHookInputSchema, PostToolUseHookInputSchema, PostToolUseFailureHookInputSchema, PermissionDeniedHookInputSchema, NotificationHookInputSchema, UserPromptSubmitHookInputSchema, SessionStartHookInputSchema, SetupHookInputSchema, StopHookInputSchema, StopFailureHookInputSchema, SubagentStartHookInputSchema, SubagentStopHookInputSchema, PreCompactHookInputSchema, PostCompactHookInputSchema, TeammateIdleHookInputSchema, TaskCreatedHookInputSchema, TaskCompletedHookInputSchema, ElicitationHookInputSchema, ElicitationResultHookInputSchema, CONFIG_CHANGE_SOURCES, ConfigChangeHookInputSchema, INSTRUCTIONS_LOAD_REASONS, INSTRUCTIONS_MEMORY_TYPES, InstructionsLoadedHookInputSchema, WorktreeCreateHookInputSchema, WorktreeRemoveHookInputSchema, CwdChangedHookInputSchema, FileChangedHookInputSchema, EXIT_REASONS, ExitReasonSchema, SessionEndHookInputSchema, HookInputSchema, AsyncHookJSONOutputSchema, PreToolUseHookSpecificOutputSchema, UserPromptSubmitHookSpecificOutputSchema, SessionStartHookSpecificOutputSchema, SetupHookSpecificOutputSchema, SubagentStartHookSpecificOutputSchema, PostToolUseHookSpecificOutputSchema, PostToolUseFailureHookSpecificOutputSchema, PermissionDeniedHookSpecificOutputSchema, NotificationHookSpecificOutputSchema, PermissionRequestHookSpecificOutputSchema, CwdChangedHookSpecificOutputSchema, FileChangedHookSpecificOutputSchema, SyncHookJSONOutputSchema, ElicitationHookSpecificOutputSchema, ElicitationResultHookSpecificOutputSchema, WorktreeCreateHookSpecificOutputSchema, HookJSONOutputSchema, PromptRequestOptionSchema, PromptRequestSchema, PromptResponseSchema, SlashCommandSchema, AgentInfoSchema, ModelInfoSchema, AccountInfoSchema, AgentMcpServerSpecSchema, AgentDefinitionSchema, SettingSourceSchema, SdkPluginConfigSchema, RewindFilesResultSchema, APIUserMessagePlaceholder, APIAssistantMessagePlaceholder, RawMessageStreamEventPlaceholder, UUIDPlaceholder, NonNullableUsagePlaceholder, SDKAssistantMessageErrorSchema, SDKStatusSchema, SDKUserMessageContentSchema, SDKUserMessageSchema, SDKUserMessageReplaySchema, SDKRateLimitInfoSchema, SDKAssistantMessageSchema, SDKRateLimitEventSchema, SDKStreamlinedTextMessageSchema, SDKStreamlinedToolUseSummaryMessageSchema, SDKPermissionDenialSchema, SDKResultSuccessSchema, SDKResultErrorSchema, SDKResultMessageSchema, SDKSystemMessageSchema, SDKPartialAssistantMessageSchema, SDKCompactBoundaryMessageSchema, SDKStatusMessageSchema, SDKPostTurnSummaryMessageSchema, SDKAPIRetryMessageSchema, SDKLocalCommandOutputMessageSchema, SDKHookStartedMessageSchema, SDKHookProgressMessageSchema, SDKHookResponseMessageSchema, SDKToolProgressMessageSchema, SDKAuthStatusMessageSchema, SDKFilesPersistedEventSchema, SDKTaskNotificationMessageSchema, SDKTaskStartedMessageSchema, SDKSessionStateChangedMessageSchema, SDKTaskProgressMessageSchema, SDKToolUseSummaryMessageSchema, SDKElicitationCompleteMessageSchema, SDKPromptSuggestionMessageSchema, SDKSessionInfoSchema, SDKMessageSchema, FastModeStateSchema;
+var ModelUsageSchema, OutputFormatTypeSchema, BaseOutputFormatSchema, JsonSchemaOutputFormatSchema, OutputFormatSchema, ApiKeySourceSchema, ConfigScopeSchema2, SdkBetaSchema, ThinkingAdaptiveSchema, ThinkingEnabledSchema, ThinkingDisabledSchema, ThinkingConfigSchema, McpStdioServerConfigSchema2, McpSSEServerConfigSchema2, McpHttpServerConfigSchema, McpSdkServerConfigSchema, McpServerConfigForProcessTransportSchema, McpClaudeAIProxyServerConfigSchema, McpServerStatusConfigSchema, McpServerStatusSchema, McpSetServersResultSchema, PermissionUpdateDestinationSchema, PermissionBehaviorSchema, PreToolUsePermissionDecisionSchema, PermissionRuleValueSchema, PermissionUpdateSchema, PermissionDecisionClassificationSchema, PermissionResultSchema, PermissionModeSchema2, HOOK_EVENTS2, HookEventSchema, BaseHookInputSchema, PreToolUseHookInputSchema, PermissionRequestHookInputSchema, PostToolUseHookInputSchema, PostToolUseFailureHookInputSchema, PermissionDeniedHookInputSchema, NotificationHookInputSchema, UserPromptSubmitHookInputSchema, SessionStartHookInputSchema, SetupHookInputSchema, StopHookInputSchema, StopFailureHookInputSchema, SubagentStartHookInputSchema, SubagentStopHookInputSchema, PreCompactHookInputSchema, PostCompactHookInputSchema, TeammateIdleHookInputSchema, TaskCreatedHookInputSchema, TaskCompletedHookInputSchema, ElicitationHookInputSchema, ElicitationResultHookInputSchema, CONFIG_CHANGE_SOURCES, ConfigChangeHookInputSchema, INSTRUCTIONS_LOAD_REASONS, INSTRUCTIONS_MEMORY_TYPES, InstructionsLoadedHookInputSchema, WorktreeCreateHookInputSchema, WorktreeRemoveHookInputSchema, CwdChangedHookInputSchema, FileChangedHookInputSchema, EXIT_REASONS, ExitReasonSchema, SessionEndHookInputSchema, HookInputSchema, AsyncHookJSONOutputSchema, PreToolUseHookSpecificOutputSchema, UserPromptSubmitHookSpecificOutputSchema, SessionStartHookSpecificOutputSchema, SetupHookSpecificOutputSchema, SubagentStartHookSpecificOutputSchema, PostToolUseHookSpecificOutputSchema, PostToolUseFailureHookSpecificOutputSchema, PermissionDeniedHookSpecificOutputSchema, NotificationHookSpecificOutputSchema, PermissionRequestHookSpecificOutputSchema, CwdChangedHookSpecificOutputSchema, FileChangedHookSpecificOutputSchema, SyncHookJSONOutputSchema, ElicitationHookSpecificOutputSchema, ElicitationResultHookSpecificOutputSchema, WorktreeCreateHookSpecificOutputSchema, HookJSONOutputSchema, PromptRequestOptionSchema, PromptRequestSchema, PromptResponseSchema, SlashCommandSchema, AgentInfoSchema, ModelInfoSchema, AccountInfoSchema, AgentMcpServerSpecSchema, AgentDefinitionSchema, SettingSourceSchema, SdkPluginConfigSchema, RewindFilesResultSchema, APIUserMessagePlaceholder, APIAssistantMessagePlaceholder, RawMessageStreamEventPlaceholder, UUIDPlaceholder, NonNullableUsagePlaceholder, SDKAssistantMessageErrorSchema, SDKStatusSchema, SDKUserMessageContentSchema, SDKUserMessageSchema, SDKUserMessageReplaySchema, SDKRateLimitInfoSchema, SDKAssistantMessageSchema, SDKRateLimitEventSchema, SDKStreamlinedTextMessageSchema, SDKStreamlinedToolUseSummaryMessageSchema, SDKPermissionDenialSchema, SDKResultSuccessSchema, SDKResultErrorSchema, SDKResultMessageSchema, SDKSystemMessageSchema, SDKPartialAssistantMessageSchema, SDKCompactBoundaryMessageSchema, SDKStatusMessageSchema, SDKPostTurnSummaryMessageSchema, SDKAPIRetryMessageSchema, SDKLocalCommandOutputMessageSchema, SDKHookStartedMessageSchema, SDKHookProgressMessageSchema, SDKHookResponseMessageSchema, SDKToolProgressMessageSchema, SDKAuthStatusMessageSchema, SDKFilesPersistedEventSchema, SDKTaskNotificationMessageSchema, SDKTaskStartedMessageSchema, SDKSessionStateChangedMessageSchema, SDKTaskProgressMessageSchema, SDKToolUseSummaryMessageSchema, SDKElicitationCompleteMessageSchema, SDKPromptSuggestionMessageSchema, SDKSessionInfoSchema, SDKMessageSchema, FastModeStateSchema;
 var init_coreSchemas = __esm(() => {
   init_v4();
   ModelUsageSchema = lazySchema2(() => object({
@@ -165309,6 +165540,7 @@ var init_coreSchemas = __esm(() => {
     "cliArg"
   ]));
   PermissionBehaviorSchema = lazySchema2(() => _enum(["allow", "deny", "ask"]));
+  PreToolUsePermissionDecisionSchema = lazySchema2(() => _enum(["allow", "deny", "ask", "defer"]));
   PermissionRuleValueSchema = lazySchema2(() => object({
     toolName: string2(),
     ruleContent: string2().optional()
@@ -165630,7 +165862,7 @@ var init_coreSchemas = __esm(() => {
   }));
   PreToolUseHookSpecificOutputSchema = lazySchema2(() => object({
     hookEventName: literal("PreToolUse"),
-    permissionDecision: PermissionBehaviorSchema().optional(),
+    permissionDecision: PreToolUsePermissionDecisionSchema().optional(),
     permissionDecisionReason: string2().optional(),
     updatedInput: record(string2(), unknown()).optional(),
     additionalContext: string2().optional()
@@ -179440,6 +179672,7 @@ __export(exports_engineCompat, {
   lock: () => lock,
   lockSync: () => lockSync,
   looksLikePrompt: () => looksLikePrompt,
+  makeDeferredToolUseMarker: () => makeDeferredToolUseMarker,
   markAgentsNotified: () => markAgentsNotified,
   markCronTasksFired: () => markCronTasksFired,
   markExtractionCompleted: () => markExtractionCompleted,
@@ -301156,10 +301389,11 @@ var init_InProcessTeammateTask = __esm(() => {
 });
 
 // src/tui/utils/permissions/PermissionRule.ts
-var permissionBehaviorSchema2, permissionRuleValueSchema2;
+var permissionBehaviorSchema2, preToolUsePermissionDecisionSchema, permissionRuleValueSchema2;
 var init_PermissionRule2 = __esm(() => {
   init_v4();
   permissionBehaviorSchema2 = lazySchema2(() => _enum(["allow", "deny", "ask"]));
+  preToolUsePermissionDecisionSchema = lazySchema2(() => _enum(["allow", "deny", "ask", "defer"]));
   permissionRuleValueSchema2 = lazySchema2(() => object({
     toolName: string2(),
     ruleContent: string2().optional()
@@ -425482,7 +425716,7 @@ var init_hooks6 = __esm(() => {
     hookSpecificOutput: union([
       object({
         hookEventName: literal("PreToolUse"),
-        permissionDecision: permissionBehaviorSchema2().optional(),
+        permissionDecision: preToolUsePermissionDecisionSchema().optional(),
         permissionDecisionReason: string2().optional(),
         updatedInput: record(string2(), unknown()).optional(),
         additionalContext: string2().optional()
@@ -426396,11 +426630,11 @@ ${jsonStringify5({
       decision: '"approve" | "block" (optional)',
       reason: "string (optional)",
       systemMessage: "string (optional)",
-      permissionDecision: '"allow" | "deny" | "ask" (optional)',
+      permissionDecision: '"allow" | "deny" | "ask" | "defer" (optional; defer = 挂起重评, TUI 车道确认等价)',
       hookSpecificOutput: {
         "for PreToolUse": {
           hookEventName: '"PreToolUse"',
-          permissionDecision: '"allow" | "deny" | "ask" (optional)',
+          permissionDecision: '"allow" | "deny" | "ask" | "defer" (optional; defer = 挂起重评, TUI 车道确认等价)',
           permissionDecisionReason: "string (optional)",
           updatedInput: "object (optional) - Modified tool input to use"
         },
@@ -426502,8 +426736,11 @@ function processHookJSONOutput({
       case "ask":
         result.permissionBehavior = "ask";
         break;
+      case "defer":
+        result.permissionBehavior = "ask";
+        break;
       default:
-        throw new Error(`Unknown hook permissionDecision type: ${json.hookSpecificOutput.permissionDecision}. Valid types are: allow, deny, ask`);
+        throw new Error(`Unknown hook permissionDecision type: ${json.hookSpecificOutput.permissionDecision}. Valid types are: allow, deny, ask, defer`);
     }
   }
   if (result.permissionBehavior !== undefined && json.reason !== undefined) {
@@ -426530,6 +426767,9 @@ function processHookJSONOutput({
             case "ask":
               result.permissionBehavior = "ask";
               break;
+            case "defer":
+              result.permissionBehavior = "ask";
+              break;
           }
         }
         result.hookPermissionDecisionReason = json.hookSpecificOutput.permissionDecisionReason;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasharness/atlascode",
-  "version": "0.1.51",
+  "version": "0.1.53",
   "description": "AtlasCode \u2014 Coding Agent for the domestic computing ecosystem (Ascend NPU + domestic LLM backends)",
   "bin": {
     "atlas": "dist/cli.js",