@dexto/core 1.6.0 → 1.6.2

package/dist/approval/manager.d.ts

@@ -76,7 +76,7 @@ export declare class ApprovalManager {
      * Check if a pattern key is covered by any approved pattern for a tool.
      *
      * Note: This expects a pattern key (e.g. "git push *"), not raw arguments.
-     * Tools are responsible for generating the key via Tool.getApprovalPatternKey().
+     * Tools are responsible for generating the key via `tool.approval.patternKey()`.
      */
     matchesPattern(toolName: string, patternKey: string): boolean;
     /**
@@ -91,6 +91,15 @@ export declare class ApprovalManager {
      * Get all tool patterns (for debugging/display).
      */
     getAllToolPatterns(): ReadonlyMap<string, Set<string>>;
+    /**
+     * Resolve a directory path for use as an approval key.
+     *
+     * We store BOTH the resolved path and (when available) its realpath, so approvals
+     * continue to work even when other subsystems canonicalize paths via realpath
+     * (e.g. macOS /tmp -> /private/tmp or custom symlinked directories).
+     */
+    private getDirectoryApprovalKeys;
+    private getFileApprovalKeys;
     /**
      * Initialize the working directory as a session-approved directory.
      * This should be called once during setup to ensure the working directory

package/dist/approval/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/approval/manager.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACR,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,uBAAuB,EAC1B,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAIpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE;QACT,IAAI,EAAE,eAAe,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,WAAW,EAAE;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACL;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBAAa,eAAe;IACxB,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,MAAM,CAAS;IAEvB;;;;;OAKG;IACH,OAAO,CAAC,YAAY,CAAuC;IAE3D;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB,CAA8C;gBAE7D,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM;IAWzD,OAAO,CAAC,yBAAyB;IAQjC;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAKnD;;;;;OAKG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAe7D;;OAEG;IACH,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAsBtC;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAItD;;OAEG;IACH,kBAAkB,IAAI,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAMtD;;;;;;OAMG;IACH,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAMpD;;;;;;;;;;;;;;;;OAgBG;IACH,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,SAAS,GAAG,MAAkB,GAAG,IAAI;IAgBnF;;;;;;;OAOG;IACH,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAkBrD;;;;;;;OAOG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAe9C;;;OAGG;IACH,wBAAwB,IAAI,IAAI;IAQhC;;OAEG;IACH,sBAAsB,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;IAIjE;;OAEG;IACH,yBAAyB,IAAI,MAAM,EAAE;IAIrC;;;OAGG;IACH,qBAAqB,IAAI,IAAI;IAM7B;;;;;;;;;;;;;;OAcG;IACG,sBAAsB,CACxB,QAAQ,EAAE,uBAAuB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7E,OAAO,CAAC,gBAAgB,CAAC;IAiB5B;;OAEG;IACG,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAcjF;;;OAGG;YACW,cAAc;IAqD5B;;;;;;OAMG;IACG,mBAAmB,CACrB,QAAQ,EAAE,oBAAoB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1E,OAAO,CAAC,gBAAgB,CAAC;IAiB5B;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,0BAA0B,CAC5B,QAAQ,EAAE,2BAA2B,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACjF,OAAO,CAAC,gBAAgB,CAAC;IAiB5B;;;;;;OAMG;IACG,kBAAkB,CACpB,QAAQ,EAAE,mBAAmB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACzE,OAAO,CAAC,gBAAgB,CAAC;IAiB5B;;;OAGG;IACG,iBAAiB,CACnB,QAAQ,EAAE,oBAAoB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1E,OAAO,CAAC,OAAO,CAAC;IAqBnB;;;OAGG;IACG,kBAAkB,CACpB,QAAQ,EAAE,mBAAmB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACzE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAgCnC;;OAEG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIxC;;OAEG;IACH,kBAAkB,IAAI,IAAI;IAI1B;;OAEG;IACH,mBAAmB,IAAI,MAAM,EAAE;IAI/B;;OAEG;IACH,0BAA0B,IAAI,eAAe,EAAE;IAI/C;;;;;;;;OAQG;IACH,0BAA0B,CACtB,SAAS,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,EAChD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvC,MAAM;IAQT;;OAEG;IACH,SAAS,IAAI,qBAAqB;IAIlC;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI;IASjD;;OAEG;IACH,YAAY,IAAI,IAAI;IAKpB;;OAEG;IACI,UAAU,IAAI,OAAO;IAI5B;;;OAGG;IACH,OAAO,CAAC,aAAa;CAgBxB"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/approval/manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACR,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,uBAAuB,EAC1B,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAIpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AA8B3D;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE;QACT,IAAI,EAAE,eAAe,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,WAAW,EAAE;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACL;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBAAa,eAAe;IACxB,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,MAAM,CAAS;IAEvB;;;;;OAKG;IACH,OAAO,CAAC,YAAY,CAAuC;IAE3D;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB,CAA8C;gBAE7D,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM;IAWzD,OAAO,CAAC,yBAAyB;IAQjC;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAKnD;;;;;OAKG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAe7D;;OAEG;IACH,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAsBtC;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAItD;;OAEG;IACH,kBAAkB,IAAI,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAMtD;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB;IAShC,OAAO,CAAC,mBAAmB;IAS3B;;;;;;OAMG;IACH,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIpD;;;;;;;;;;;;;;;;OAgBG;IACH,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,SAAS,GAAG,MAAkB,GAAG,IAAI;IAoCnF;;;;;;;OAOG;IACH,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAkBrD;;;;;;;OAOG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAe9C;;;OAGG;IACH,wBAAwB,IAAI,IAAI;IAQhC;;OAEG;IACH,sBAAsB,IAAI,WAAW,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;IAIjE;;OAEG;IACH,yBAAyB,IAAI,MAAM,EAAE;IAIrC;;;OAGG;IACH,qBAAqB,IAAI,IAAI;IAM7B;;;;;;;;;;;;;;OAcG;IACG,sBAAsB,CACxB,QAAQ,EAAE,uBAAuB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7E,OAAO,CAAC,gBAAgB,CAAC;IAiB5B;;OAEG;IACG,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAcjF;;;OAGG;YACW,cAAc;IAqD5B;;;;;;OAMG;IACG,mBAAmB,CACrB,QAAQ,EAAE,oBAAoB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1E,OAAO,CAAC,gBAAgB,CAAC;IAiB5B;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,0BAA0B,CAC5B,QAAQ,EAAE,2BAA2B,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACjF,OAAO,CAAC,gBAAgB,CAAC;IAiB5B;;;;;;OAMG;IACG,kBAAkB,CACpB,QAAQ,EAAE,mBAAmB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACzE,OAAO,CAAC,gBAAgB,CAAC;IAiB5B;;;OAGG;IACG,iBAAiB,CACnB,QAAQ,EAAE,oBAAoB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1E,OAAO,CAAC,OAAO,CAAC;IAqBnB;;;OAGG;IACG,kBAAkB,CACpB,QAAQ,EAAE,mBAAmB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACzE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAgCnC;;OAEG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIxC;;OAEG;IACH,kBAAkB,IAAI,IAAI;IAI1B;;OAEG;IACH,mBAAmB,IAAI,MAAM,EAAE;IAI/B;;OAEG;IACH,0BAA0B,IAAI,eAAe,EAAE;IAI/C;;;;;;;;OAQG;IACH,0BAA0B,CACtB,SAAS,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,EAChD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvC,MAAM;IAQT;;OAEG;IACH,SAAS,IAAI,qBAAqB;IAIlC;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI;IASjD;;OAEG;IACH,YAAY,IAAI,IAAI;IAKpB;;OAEG;IACI,UAAU,IAAI,OAAO;IAI5B;;;OAGG;IACH,OAAO,CAAC,aAAa;CAgBxB"}

package/dist/approval/manager.js

@@ -1,10 +1,35 @@
 import "../chunk-PTJYTZNU.js";
 import path from "node:path";
+import { realpathSync } from "node:fs";
 import { ApprovalType, ApprovalStatus, DenialReason } from "./types.js";
 import { createApprovalRequest } from "./factory.js";
 import { DextoLogComponent } from "../logger/v2/types.js";
 import { ApprovalError } from "./errors.js";
 import { patternCovers } from "../tools/pattern-utils.js";
+function tryRealpathSync(targetPath) {
+  try {
+    return realpathSync(targetPath);
+  } catch {
+    return null;
+  }
+}
+function tryRealpathSyncWithExistingParent(resolvedPath) {
+  const direct = tryRealpathSync(resolvedPath);
+  if (direct) return direct;
+  let currentDir = path.dirname(resolvedPath);
+  while (true) {
+    const realDir = tryRealpathSync(currentDir);
+    if (realDir) {
+      const suffix = path.relative(currentDir, resolvedPath);
+      return path.join(realDir, suffix);
+    }
+    const parent = path.dirname(currentDir);
+    if (parent === currentDir) {
+      return null;
+    }
+    currentDir = parent;
+  }
+}
 class ApprovalManager {
   handler;
   config;
@@ -50,7 +75,7 @@ class ApprovalManager {
    * Check if a pattern key is covered by any approved pattern for a tool.
    *
    * Note: This expects a pattern key (e.g. "git push *"), not raw arguments.
-   * Tools are responsible for generating the key via Tool.getApprovalPatternKey().
+   * Tools are responsible for generating the key via `tool.approval.patternKey()`.
    */
   matchesPattern(toolName, patternKey) {
     const patterns = this.toolPatterns.get(toolName);
@@ -101,6 +126,29 @@ class ApprovalManager {
     return this.toolPatterns;
   }
   // ==================== Directory Access Methods ====================
+  /**
+   * Resolve a directory path for use as an approval key.
+   *
+   * We store BOTH the resolved path and (when available) its realpath, so approvals
+   * continue to work even when other subsystems canonicalize paths via realpath
+   * (e.g. macOS /tmp -> /private/tmp or custom symlinked directories).
+   */
+  getDirectoryApprovalKeys(directory) {
+    const resolved = path.resolve(directory);
+    const real = tryRealpathSyncWithExistingParent(resolved);
+    if (real && real !== resolved) {
+      return [resolved, real];
+    }
+    return [resolved];
+  }
+  getFileApprovalKeys(filePath) {
+    const resolved = path.resolve(filePath);
+    const real = tryRealpathSyncWithExistingParent(resolved);
+    if (real && real !== resolved) {
+      return [resolved, real];
+    }
+    return [resolved];
+  }
   /**
    * Initialize the working directory as a session-approved directory.
    * This should be called once during setup to ensure the working directory
@@ -109,9 +157,7 @@ class ApprovalManager {
    * @param workingDir The working directory path
    */
   initializeWorkingDirectory(workingDir) {
-    const normalized = path.resolve(workingDir);
-    this.approvedDirectories.set(normalized, "session");
-    this.logger.debug(`Initialized working directory as session-approved: "${normalized}"`);
+    this.addApprovedDirectory(workingDir, "session");
   }
   /**
    * Add a directory to the approved list for this session.
@@ -131,16 +177,28 @@ class ApprovalManager {
    * ```
    */
   addApprovedDirectory(directory, type = "session") {
-    const normalized = path.resolve(directory);
-    const existing = this.approvedDirectories.get(normalized);
-    if (existing === "session") {
+    const keys = this.getDirectoryApprovalKeys(directory);
+    const existingTypes = keys.map((key) => this.approvedDirectories.get(key)).filter((value) => value !== void 0);
+    const hasSessionApproval = existingTypes.includes("session");
+    const effectiveType = type === "session" || hasSessionApproval ? "session" : "once";
+    for (const key of keys) {
+      const existing = this.approvedDirectories.get(key);
+      if (existing === "session") {
+        continue;
+      }
+      this.approvedDirectories.set(key, effectiveType);
+    }
+    const resolvedKey = keys[0];
+    if (effectiveType === "session" && type === "once" && hasSessionApproval) {
       this.logger.debug(
-        `Directory "${normalized}" already approved as 'session', not downgrading to '${type}'`
+        `Directory "${resolvedKey}" already approved as 'session', not downgrading to 'once'`
       );
       return;
     }
-    this.approvedDirectories.set(normalized, type);
-    this.logger.debug(`Added approved directory: "${normalized}" (type: ${type})`);
+    const realKey = keys.length > 1 ? keys[1] : null;
+    this.logger.debug(
+      `Added approved directory: "${resolvedKey}" (type: ${effectiveType})${realKey ? `, realpath: "${realKey}"` : ""}`
+    );
   }
   /**
    * Check if a file path is within any session-approved directory.
@@ -151,15 +209,16 @@ class ApprovalManager {
    * @returns true if the path is within a session-approved directory
    */
   isDirectorySessionApproved(filePath) {
-    const normalized = path.resolve(filePath);
-    for (const [approvedDir, type] of this.approvedDirectories) {
-      if (type !== "session") continue;
-      const relative = path.relative(approvedDir, normalized);
-      if (!relative.startsWith("..") && !path.isAbsolute(relative)) {
-        this.logger.debug(
-          `Path "${normalized}" is within session-approved directory "${approvedDir}"`
-        );
-        return true;
+    for (const normalized of this.getFileApprovalKeys(filePath)) {
+      for (const [approvedDir, type] of this.approvedDirectories) {
+        if (type !== "session") continue;
+        const relative = path.relative(approvedDir, normalized);
+        if (!relative.startsWith("..") && !path.isAbsolute(relative)) {
+          this.logger.debug(
+            `Path "${normalized}" is within session-approved directory "${approvedDir}"`
+          );
+          return true;
+        }
       }
     }
     return false;
@@ -173,14 +232,15 @@ class ApprovalManager {
    * @returns true if the path is within any approved directory
    */
   isDirectoryApproved(filePath) {
-    const normalized = path.resolve(filePath);
-    for (const [approvedDir] of this.approvedDirectories) {
-      const relative = path.relative(approvedDir, normalized);
-      if (!relative.startsWith("..") && !path.isAbsolute(relative)) {
-        this.logger.debug(
-          `Path "${normalized}" is within approved directory "${approvedDir}"`
-        );
-        return true;
+    for (const normalized of this.getFileApprovalKeys(filePath)) {
+      for (const [approvedDir] of this.approvedDirectories) {
+        const relative = path.relative(approvedDir, normalized);
+        if (!relative.startsWith("..") && !path.isAbsolute(relative)) {
+          this.logger.debug(
+            `Path "${normalized}" is within approved directory "${approvedDir}"`
+          );
+          return true;
+        }
       }
     }
     return false;

package/dist/approval/schemas.cjs

@@ -58,15 +58,32 @@ const DenialReasonSchema = import_zod.z.nativeEnum(import_types.DenialReason);
 const ToolDisplayDataSchema = import_zod.z.custom((val) => (0, import_display_types.isValidDisplayData)(val), {
   message: "Invalid ToolDisplayData"
 });
+const ToolPresentationSnapshotV1Schema = import_zod.z.custom(
+  (val) => typeof val === "object" && val !== null && val.version === 1,
+  {
+    message: "Invalid ToolPresentationSnapshotV1"
+  }
+);
+const DirectoryAccessMetadataSchema = import_zod.z.object({
+  path: import_zod.z.string().describe("Full path being accessed"),
+  parentDir: import_zod.z.string().describe("Parent directory (what gets approved for session)"),
+  operation: import_zod.z.enum(["read", "write", "edit"]).describe("Type of file operation"),
+  toolName: import_zod.z.string().describe("Name of the tool requesting access")
+}).strict().describe("Directory access metadata");
 const ToolApprovalMetadataSchema = import_zod.z.object({
   toolName: import_zod.z.string().describe("Name of the tool to confirm"),
-  toolDisplayName: import_zod.z.string().optional().describe("Optional user-facing name for the tool (UI convenience)"),
+  presentationSnapshot: ToolPresentationSnapshotV1Schema.optional().describe(
+    "Optional UI-agnostic presentation snapshot for the tool call. Clients MUST ignore unknown fields."
+  ),
   toolCallId: import_zod.z.string().describe("Unique tool call ID for tracking parallel tool calls"),
   args: import_zod.z.record(import_zod.z.unknown()).describe("Arguments for the tool"),
   description: import_zod.z.string().optional().describe("Description of the tool"),
   displayPreview: ToolDisplayDataSchema.optional().describe(
     "Preview display data for approval UI (e.g., diff preview)"
   ),
+  directoryAccess: DirectoryAccessMetadataSchema.optional().describe(
+    "Optional directory access metadata when the tool targets a path outside config-allowed roots"
+  ),
   suggestedPatterns: import_zod.z.array(import_zod.z.string()).optional().describe(
     'Suggested patterns for session approval. Tools may provide patterns to allow approving a broader subset of future calls (e.g., ["git push *", "git *"]).'
   )
@@ -78,17 +95,11 @@ const CommandConfirmationMetadataSchema = import_zod.z.object({
 }).strict().describe("Command confirmation metadata");
 const ElicitationMetadataSchema = import_zod.z.object({
   schema: JsonSchema7Schema.describe("JSON Schema for the form"),
-  prompt: import_zod.z.string().describe("Prompt to show the user"),
+  prompt: import_zod.z.string().describe("High-level prompt/context for the form (clients may show it)"),
   serverName: import_zod.z.string().describe("MCP server requesting input"),
   context: import_zod.z.record(import_zod.z.unknown()).optional().describe("Additional context")
 }).strict().describe("Elicitation metadata");
 const CustomApprovalMetadataSchema = import_zod.z.record(import_zod.z.unknown()).describe("Custom metadata");
-const DirectoryAccessMetadataSchema = import_zod.z.object({
-  path: import_zod.z.string().describe("Full path being accessed"),
-  parentDir: import_zod.z.string().describe("Parent directory (what gets approved for session)"),
-  operation: import_zod.z.enum(["read", "write", "edit"]).describe("Type of file operation"),
-  toolName: import_zod.z.string().describe("Name of the tool requesting access")
-}).strict().describe("Directory access metadata");
 const BaseApprovalRequestSchema = import_zod.z.object({
   approvalId: import_zod.z.string().uuid().describe("Unique approval identifier"),
   type: ApprovalTypeSchema.describe("Type of approval"),
@@ -127,6 +138,9 @@ const ToolApprovalResponseDataSchema = import_zod.z.object({
   rememberChoice: import_zod.z.boolean().optional().describe("Remember this tool for the session (approves ALL uses of this tool)"),
   rememberPattern: import_zod.z.string().optional().describe(
     'Remember an approval pattern (e.g., "git *"). Only applicable when the tool provides pattern-based approval support.'
+  ),
+  rememberDirectory: import_zod.z.boolean().optional().describe(
+    "Remember this directory for the session (allows future access without prompting again)"
   )
 }).strict().describe("Tool approval response data");
 const CommandConfirmationResponseDataSchema = import_zod.z.object({