@dexto/core 1.7.1 → 1.8.0

package/dist/approval/manager.d.ts

@@ -1,7 +1,30 @@
-import type { ApprovalHandler, ApprovalRequest, ApprovalResponse, ApprovalRequestDetails, ToolApprovalMetadata, CommandConfirmationMetadata, ElicitationMetadata, DirectoryAccessMetadata } from './types.js';
+import type { ApprovalHandler, ApprovalRequest, ApprovalResponse, ApprovalRequestDetails, ToolApprovalMetadata, CommandApprovalMetadata, ElicitationMetadata, DirectoryAccessMetadata } from './types.js';
+import { ApprovalStatus } from './types.js';
 import type { Logger } from '../logger/v2/types.js';
 import type { PermissionsMode } from '../tools/schemas.js';
-import { SessionApprovalStore } from './session-approval-store.js';
+import type { ApprovalStore } from '../storage/approvals/types.js';
+export type ApprovalRecordIdentity = {
+    runId: string;
+    turnId: string;
+    modelStepId: string;
+    toolCallId: string;
+};
+export type ApprovalDecisionInput = {
+    approvalId: ApprovalRequest['approvalId'];
+    status: typeof ApprovalStatus.APPROVED;
+    data?: ApprovalResponse['data'];
+} | {
+    approvalId: ApprovalRequest['approvalId'];
+    status: typeof ApprovalStatus.DENIED | typeof ApprovalStatus.CANCELLED;
+    reason?: ApprovalResponse['reason'];
+    message?: string;
+    timeoutMs?: number;
+    data?: ApprovalResponse['data'];
+};
+export type ApprovalResponseRecord = {
+    response: ApprovalResponse;
+    status: 'created' | 'replayed';
+};
 /**
  * Configuration for the approval manager
  */
@@ -27,7 +50,7 @@ export interface ApprovalManagerConfig {
  * - Route approvals to appropriate providers
  * - Provide convenience methods for specific approval types
  * - Handle approval responses and errors
- * - Support multiple approval modes (manual, auto-approve, auto-deny)
+ * - Support multiple approval modes (manual, auto-approve)
  *
  * @example
  * ```typescript
@@ -49,22 +72,25 @@ export interface ApprovalManagerConfig {
  * ```
  */
 export declare class ApprovalManager {
-    private readonly sessionApprovalStore;
+    private readonly approvalStore;
     private handler;
     private config;
     private logger;
     private readonly loadedScopes;
     private readonly scopeLocks;
+    private readonly approvalRecordLocks;
     private readonly scopes;
-    constructor(config: ApprovalManagerConfig, logger: Logger, sessionApprovalStore: SessionApprovalStore);
+    constructor(config: ApprovalManagerConfig, logger: Logger, approvalStore: ApprovalStore);
     private getScopeKey;
     private getScopeLabel;
+    private sessionScope;
     private getApprovalTimeout;
     private getDefaultTimeout;
     private createEmptyScopeState;
     private getOrCreateScope;
     private getScope;
     private runWithScopeLock;
+    private runWithApprovalRecordLock;
     private snapshotToolPatterns;
     private snapshotApprovedDirectories;
     private persistScope;
@@ -168,7 +194,11 @@ export declare class ApprovalManager {
      */
     clearSessionApprovals(sessionId?: string): Promise<void>;
     private createApprovalDetails;
+    private withDefaultTimeout;
+    private approvalIdentityKey;
+    private assertMatchingRecordedRequest;
     private createResponse;
+    private parseResponseForRequest;
     private getElicitationFormData;
     /**
      * Request directory access approval.
@@ -194,8 +224,12 @@ export declare class ApprovalManager {
      * Request a generic approval
      */
     requestApproval(details: ApprovalRequestDetails): Promise<ApprovalResponse>;
+    recordApprovalRequest(details: ApprovalRequestDetails, identity: ApprovalRecordIdentity): Promise<ApprovalRequest>;
+    recordApprovalResponse(decision: ApprovalDecisionInput): Promise<ApprovalResponse>;
+    recordApprovalResponseRecord(decision: ApprovalDecisionInput, expectedRequest?: ApprovalRequest): Promise<ApprovalResponseRecord>;
+    requestApprovalDecision(request: ApprovalRequest): Promise<ApprovalResponse>;
     /**
-     * Handle approval requests (tool approval, elicitation, command confirmation, directory access, custom)
+     * Handle approval requests (tool approval, elicitation, command approval, directory access, custom)
      * @private
      */
     private handleApproval;
@@ -204,7 +238,7 @@ export declare class ApprovalManager {
      * Convenience method for tool execution approval
      *
      * TODO: Make sessionId required once all callers are updated to pass it
-     * Tool confirmations always happen in session context during LLM execution
+     * Tool approvals always happen in session context during LLM execution
      */
     requestToolApproval(metadata: ToolApprovalMetadata & {
         sessionId?: string;
@@ -212,19 +246,19 @@ export declare class ApprovalManager {
         timeout?: number;
     }): Promise<ApprovalResponse>;
     /**
-     * Request command confirmation approval
+     * Request command approval
      * Convenience method for dangerous command execution within an already-approved tool
      *
      * This is different from tool approval - it's for per-command approval
      * of dangerous operations (like rm, git push) within tools that are already approved.
      *
      * TODO: Make sessionId required once all callers are updated to pass it
-     * Command confirmations always happen during tool execution which has session context
+     * Command approvals always happen during tool execution which has session context
      *
      * @example
      * ```typescript
      * // bash_exec tool is approved, but dangerous commands still require approval
-     * const response = await manager.requestCommandConfirmation({
+     * const response = await manager.requestCommandApproval({
      *   toolName: 'bash_exec',
      *   command: 'rm -rf /important',
      *   originalCommand: 'rm -rf /important',
@@ -232,7 +266,7 @@ export declare class ApprovalManager {
      * });
      * ```
      */
-    requestCommandConfirmation(metadata: CommandConfirmationMetadata & {
+    requestCommandApproval(metadata: CommandApprovalMetadata & {
         sessionId?: string;
         hostRuntime?: ApprovalRequestDetails['hostRuntime'];
         timeout?: number;
@@ -301,7 +335,7 @@ export declare class ApprovalManager {
      * Set the approval handler for manual approval mode.
      *
      * The handler will be called for:
-     * - Tool confirmation requests when permissions.mode is 'manual'
+     * - Tool approval requests when permissions.mode is 'manual'
      * - All elicitation requests (when elicitation is enabled, regardless of permissions.mode)
      *
      * A handler must be set before processing requests if:

package/dist/approval/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/approval/manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACR,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,uBAAuB,EAC1B,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAIpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACH,oBAAoB,EAGvB,MAAM,6BAA6B,CAAC;AAqCrC;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE;QACT,IAAI,EAAE,eAAe,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,WAAW,EAAE;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACL;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBAAa,eAAe;IAWpB,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAVzC,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;gBAG5D,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,MAAM,EACG,oBAAoB,EAAE,oBAAoB;IAU/D,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,qBAAqB;IAO7B,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,QAAQ;YAIF,gBAAgB;IAmB9B,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,2BAA2B;YASrB,YAAY;IAS1B,OAAO,CAAC,YAAY;IAmBd,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB5D,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAMrC,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU3D,OAAO,CAAC,yBAAyB;IASjC;;OAEG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IActF;;;;;OAKG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;IAgBjF;;OAEG;IACG,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BzE;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAK1E;;OAEG;IACH,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAOxE;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,6BAA6B;IA0BrC;;;;;;OAMG;IACG,0BAA0B,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvF;;;;;;;;;;;;;;;;OAgBG;IACG,oBAAoB,CACtB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,SAAS,GAAG,MAAkB,EACpC,SAAS,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IA4ChB;;;;;;;OAOG;IACH,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;IAIzE;;;;;;;OAOG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;IAQlE;;;OAGG;IACG,wBAAwB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjE;;OAEG;IACH,sBAAsB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;IAKnF;;OAEG;IACH,yBAAyB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE;IAIvD;;;OAGG;IACG,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB9D,OAAO,CAAC,qBAAqB;IAuB7B,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,sBAAsB;IA2B9B;;;;;;;;;;;;;;OAcG;IACG,sBAAsB,CACxB,QAAQ,EAAE,uBAAuB,GAAG;QAChC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,GACF,OAAO,CAAC,gBAAgB,CAAC;IAa5B;;OAEG;IACG,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAcjF;;;OAGG;YACW,cAAc;IA2C5B;;;;;;OAMG;IACG,mBAAmB,CACrB,QAAQ,EAAE,oBAAoB,GAAG;QAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,GACF,OAAO,CAAC,gBAAgB,CAAC;IAa5B;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,0BAA0B,CAC5B,QAAQ,EAAE,2BAA2B,GAAG;QACpC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,GACF,OAAO,CAAC,gBAAgB,CAAC;IAa5B;;;;;;OAMG;IACG,kBAAkB,CACpB,QAAQ,EAAE,mBAAmB,GAAG;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,GACF,OAAO,CAAC,gBAAgB,CAAC;IAa5B;;;OAGG;IACG,iBAAiB,CACnB,QAAQ,EAAE,oBAAoB,GAAG;QAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,GACF,OAAO,CAAC,OAAO,CAAC;IAqBnB;;;OAGG;IACG,kBAAkB,CACpB,QAAQ,EAAE,mBAAmB,GAAG;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,GACF,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAqBnC;;OAEG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIxC;;OAEG;IACH,kBAAkB,IAAI,IAAI;IAI1B;;OAEG;IACH,mBAAmB,IAAI,MAAM,EAAE;IAI/B;;OAEG;IACH,0BAA0B,IAAI,eAAe,EAAE;IAI/C;;;;;;;;OAQG;IACH,0BAA0B,CACtB,SAAS,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,EAChD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvC,MAAM;IAQT;;OAEG;IACH,SAAS,IAAI,qBAAqB;IAIlC;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI;IASjD;;OAEG;IACH,YAAY,IAAI,IAAI;IAKpB;;OAEG;IACI,UAAU,IAAI,OAAO;IAI5B;;;OAGG;IACH,OAAO,CAAC,aAAa;CAgBxB"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/approval/manager.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACR,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAgB,cAAc,EAAE,MAAM,YAAY,CAAC;AAS1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAIpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EACR,aAAa,EAGhB,MAAM,+BAA+B,CAAC;AASvC,MAAM,MAAM,sBAAsB,GAAG;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC3B;IACI,UAAU,EAAE,eAAe,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,EAAE,OAAO,cAAc,CAAC,QAAQ,CAAC;IACvC,IAAI,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;CACnC,GACD;IACI,UAAU,EAAE,eAAe,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,EAAE,OAAO,cAAc,CAAC,MAAM,GAAG,OAAO,cAAc,CAAC,SAAS,CAAC;IACvE,MAAM,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;CACnC,CAAC;AAER,MAAM,MAAM,sBAAsB,GAAG;IACjC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC;CAClC,CAAC;AA8BF;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE;QACT,IAAI,EAAE,eAAe,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,WAAW,EAAE;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACL;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBAAa,eAAe;IAYpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAXlC,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;gBAG5D,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,MAAM,EACG,aAAa,EAAE,aAAa;IAUjD,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,qBAAqB;IAO7B,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,QAAQ;YAIF,gBAAgB;YAmBhB,yBAAyB;IAsBvC,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,2BAA2B;YASrB,YAAY;IAY1B,OAAO,CAAC,YAAY;IAmBd,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB5D,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAMrC,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU3D,OAAO,CAAC,yBAAyB;IASjC;;OAEG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IActF;;;;;OAKG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;IAgBjF;;OAEG;IACG,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BzE;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAK1E;;OAEG;IACH,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAOxE;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,6BAA6B;IA0BrC;;;;;;OAMG;IACG,0BAA0B,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvF;;;;;;;;;;;;;;;;OAgBG;IACG,oBAAoB,CACtB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,SAAS,GAAG,MAAkB,EACpC,SAAS,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IA4ChB;;;;;;;OAOG;IACH,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;IAIzE;;;;;;;OAOG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;IAQlE;;;OAGG;IACG,wBAAwB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjE;;OAEG;IACH,sBAAsB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;IAKnF;;OAEG;IACH,yBAAyB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE;IAIvD;;;OAGG;IACG,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB9D,OAAO,CAAC,qBAAqB;IAuB7B,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,6BAA6B;IA8BrC,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,uBAAuB;IAkB/B,OAAO,CAAC,sBAAsB;IA2B9B;;;;;;;;;;;;;;OAcG;IACG,sBAAsB,CACxB,QAAQ,EAAE,uBAAuB,GAAG;QAChC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,GACF,OAAO,CAAC,gBAAgB,CAAC;IAa5B;;OAEG;IACG,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAc3E,qBAAqB,CACvB,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,EAAE,sBAAsB,GACjC,OAAO,CAAC,eAAe,CAAC;IAsBrB,sBAAsB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAKlF,4BAA4B,CAC9B,QAAQ,EAAE,qBAAqB,EAC/B,eAAe,CAAC,EAAE,eAAe,GAClC,OAAO,CAAC,sBAAsB,CAAC;IA8C5B,uBAAuB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIlF;;;OAGG;YACW,cAAc;IA+B5B;;;;;;OAMG;IACG,mBAAmB,CACrB,QAAQ,EAAE,oBAAoB,GAAG;QAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,GACF,OAAO,CAAC,gBAAgB,CAAC;IAa5B;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,sBAAsB,CACxB,QAAQ,EAAE,uBAAuB,GAAG;QAChC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,GACF,OAAO,CAAC,gBAAgB,CAAC;IAa5B;;;;;;OAMG;IACG,kBAAkB,CACpB,QAAQ,EAAE,mBAAmB,GAAG;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,GACF,OAAO,CAAC,gBAAgB,CAAC;IAa5B;;;OAGG;IACG,iBAAiB,CACnB,QAAQ,EAAE,oBAAoB,GAAG;QAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,GACF,OAAO,CAAC,OAAO,CAAC;IAqBnB;;;OAGG;IACG,kBAAkB,CACpB,QAAQ,EAAE,mBAAmB,GAAG;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,MAAM,CAAC;KACpB,GACF,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAqBnC;;OAEG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAIxC;;OAEG;IACH,kBAAkB,IAAI,IAAI;IAI1B;;OAEG;IACH,mBAAmB,IAAI,MAAM,EAAE;IAI/B;;OAEG;IACH,0BAA0B,IAAI,eAAe,EAAE;IAI/C;;;;;;;;OAQG;IACH,0BAA0B,CACtB,SAAS,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,EAChD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvC,MAAM;IAQT;;OAEG;IACH,SAAS,IAAI,qBAAqB;IAIlC;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI;IASjD;;OAEG;IACH,YAAY,IAAI,IAAI;IAKpB;;OAEG;IACI,UAAU,IAAI,OAAO;IAI5B;;;OAGG;IACH,OAAO,CAAC,aAAa;CAgBxB"}

package/dist/approval/manager.js

@@ -1,8 +1,16 @@
-import "../chunk-PTJYTZNU.js";
+import "../chunk-C6A6W6XS.js";
 import path from "node:path";
 import { realpathSync } from "node:fs";
-import { ApprovalType, ApprovalStatus, DenialReason } from "./types.js";
-import { createApprovalRequest } from "./factory.js";
+import { isDeepStrictEqual } from "node:util";
+import { ApprovalType, ApprovalStatus } from "./types.js";
+import {
+  CommandApprovalResponseSchema,
+  CustomApprovalResponseSchema,
+  DirectoryAccessResponseSchema,
+  ElicitationResponseSchema,
+  ToolApprovalResponseSchema
+} from "./schemas.js";
+import { createApprovalRequest, createDeterministicApprovalId } from "./factory.js";
 import { DextoLogComponent } from "../logger/v2/types.js";
 import { ApprovalError } from "./errors.js";
 import { patternCovers } from "../tools/pattern-utils.js";
@@ -32,8 +40,8 @@ function tryRealpathSyncWithExistingParent(resolvedPath) {
   }
 }
 class ApprovalManager {
-  constructor(config, logger, sessionApprovalStore) {
-    this.sessionApprovalStore = sessionApprovalStore;
+  constructor(config, logger, approvalStore) {
+    this.approvalStore = approvalStore;
     this.config = config;
     this.logger = logger.createChild(DextoLogComponent.APPROVAL);
     this.logger.debug(
@@ -45,6 +53,7 @@ class ApprovalManager {
   logger;
   loadedScopes = /* @__PURE__ */ new Set();
   scopeLocks = /* @__PURE__ */ new Map();
+  approvalRecordLocks = /* @__PURE__ */ new Map();
   scopes = /* @__PURE__ */ new Map();
   getScopeKey(sessionId) {
     return sessionId ?? GLOBAL_APPROVAL_SCOPE;
@@ -52,6 +61,9 @@ class ApprovalManager {
   getScopeLabel(sessionId) {
     return sessionId ?? "global";
   }
+  sessionScope(sessionId) {
+    return sessionId === void 0 ? {} : { sessionId };
+  }
   getApprovalTimeout(type, timeout) {
     return timeout ?? this.getDefaultTimeout(type);
   }
@@ -91,6 +103,23 @@ class ApprovalManager {
       }
     }
   }
+  async runWithApprovalRecordLock(approvalId, fn) {
+    const previousLock = this.approvalRecordLocks.get(approvalId) ?? Promise.resolve();
+    const currentResult = previousLock.catch(() => {
+    }).then(() => fn());
+    const currentLock = currentResult.then(
+      () => void 0,
+      () => void 0
+    );
+    this.approvalRecordLocks.set(approvalId, currentLock);
+    try {
+      return await currentResult;
+    } finally {
+      if (this.approvalRecordLocks.get(approvalId) === currentLock) {
+        this.approvalRecordLocks.delete(approvalId);
+      }
+    }
+  }
   snapshotToolPatterns(scopeKey) {
     const snapshot = {};
     for (const [toolName, patterns] of this.getScope(scopeKey).toolPatterns) {
@@ -112,7 +141,10 @@ class ApprovalManager {
       toolPatterns: this.snapshotToolPatterns(scopeKey),
       approvedDirectories: this.snapshotApprovedDirectories(scopeKey)
     };
-    await this.sessionApprovalStore.save(sessionId, state);
+    await this.approvalStore.saveSessionState({
+      ...this.sessionScope(sessionId),
+      state
+    });
   }
   hydrateScope(sessionId, state) {
     const scopeKey = this.getScopeKey(sessionId);
@@ -138,7 +170,7 @@ class ApprovalManager {
       if (this.loadedScopes.has(scopeKey)) {
         return;
       }
-      const state = await this.sessionApprovalStore.load(sessionId);
+      const state = await this.approvalStore.loadSessionState(this.sessionScope(sessionId));
       this.hydrateScope(sessionId, state);
       this.loadedScopes.add(scopeKey);
       this.logger.debug("Restored persisted approval state", {
@@ -157,7 +189,7 @@ class ApprovalManager {
     const scopeKey = this.getScopeKey(sessionId);
     await this.runWithScopeLock(scopeKey, async () => {
       this.evictSessionState(sessionId);
-      await this.sessionApprovalStore.delete(sessionId);
+      await this.approvalStore.deleteSessionState(this.sessionScope(sessionId));
     });
   }
   // ==================== Pattern Methods ====================
@@ -436,14 +468,71 @@ class ApprovalManager {
     }
     return details;
   }
+  withDefaultTimeout(details) {
+    return {
+      ...details,
+      timeout: this.getApprovalTimeout(details.type, details.timeout)
+    };
+  }
+  approvalIdentityKey(identity) {
+    return JSON.stringify([
+      identity.runId,
+      identity.turnId,
+      identity.modelStepId,
+      identity.toolCallId
+    ]);
+  }
+  assertMatchingRecordedRequest(existing, candidate) {
+    const existingComparable = {
+      type: existing.type,
+      sessionId: existing.sessionId,
+      hostRuntime: existing.hostRuntime,
+      timeout: existing.timeout,
+      metadata: existing.metadata
+    };
+    const candidateComparable = {
+      type: candidate.type,
+      sessionId: candidate.sessionId,
+      hostRuntime: candidate.hostRuntime,
+      timeout: candidate.timeout,
+      metadata: candidate.metadata
+    };
+    if (!isDeepStrictEqual(existingComparable, candidateComparable)) {
+      throw ApprovalError.invalidRequest(
+        "Approval request conflicts with existing approval request",
+        {
+          approvalId: existing.approvalId,
+          type: existing.type
+        }
+      );
+    }
+  }
   createResponse(request, response) {
     return {
+      status: response.status,
       approvalId: request.approvalId,
       ...request.sessionId !== void 0 ? { sessionId: request.sessionId } : {},
       ...request.hostRuntime !== void 0 ? { hostRuntime: request.hostRuntime } : {},
-      ...response
+      ...response.reason !== void 0 ? { reason: response.reason } : {},
+      ...response.message !== void 0 ? { message: response.message } : {},
+      ...response.timeoutMs !== void 0 ? { timeoutMs: response.timeoutMs } : {},
+      ...response.data !== void 0 ? { data: response.data } : {}
     };
   }
+  parseResponseForRequest(request, response) {
+    switch (request.type) {
+      case ApprovalType.TOOL_APPROVAL:
+        return ToolApprovalResponseSchema.parse(response);
+      case ApprovalType.COMMAND_APPROVAL:
+        return CommandApprovalResponseSchema.parse(response);
+      case ApprovalType.ELICITATION:
+        return ElicitationResponseSchema.parse(response);
+      case ApprovalType.CUSTOM:
+        return CustomApprovalResponseSchema.parse(response);
+      case ApprovalType.DIRECTORY_ACCESS:
+        return DirectoryAccessResponseSchema.parse(response);
+    }
+  }
   getElicitationFormData(response) {
     if (response.data && typeof response.data === "object" && "formData" in response.data && typeof response.data.formData === "object" && response.data.formData !== null) {
       return response.data.formData;
@@ -488,7 +577,7 @@ class ApprovalManager {
    * Request a generic approval
    */
   async requestApproval(details) {
-    const request = createApprovalRequest(details);
+    const request = createApprovalRequest(this.withDefaultTimeout(details));
     if (request.type === ApprovalType.ELICITATION && !this.config.elicitation.enabled) {
       throw ApprovalError.invalidConfig(
         "Elicitation is disabled. Enable elicitation in your agent configuration to use the ask_user tool or MCP server elicitations."
@@ -496,8 +585,77 @@ class ApprovalManager {
     }
     return this.handleApproval(request);
   }
+  async recordApprovalRequest(details, identity) {
+    if (details.type === ApprovalType.ELICITATION && !this.config.elicitation.enabled) {
+      throw ApprovalError.invalidConfig(
+        "Elicitation is disabled. Enable elicitation in your agent configuration to use the ask_user tool or MCP server elicitations."
+      );
+    }
+    const approvalId = createDeterministicApprovalId(this.approvalIdentityKey(identity));
+    const request = createApprovalRequest(this.withDefaultTimeout(details), approvalId);
+    return this.runWithApprovalRecordLock(approvalId, async () => {
+      const existing = await this.approvalStore.getRequest({ approvalId });
+      if (existing) {
+        this.assertMatchingRecordedRequest(existing, request);
+        return existing;
+      }
+      const recorded = await this.approvalStore.createRequest({ request });
+      this.assertMatchingRecordedRequest(recorded, request);
+      return recorded;
+    });
+  }
+  async recordApprovalResponse(decision) {
+    const record = await this.recordApprovalResponseRecord(decision);
+    return record.response;
+  }
+  async recordApprovalResponseRecord(decision, expectedRequest) {
+    return this.runWithApprovalRecordLock(decision.approvalId, async () => {
+      const request = await this.approvalStore.getRequest({
+        approvalId: decision.approvalId
+      });
+      if (!request) {
+        throw ApprovalError.invalidResponse("Approval response has no recorded request", {
+          approvalId: decision.approvalId
+        });
+      }
+      if (expectedRequest !== void 0) {
+        this.assertMatchingRecordedRequest(request, expectedRequest);
+      }
+      const response = this.parseResponseForRequest(
+        request,
+        this.createResponse(request, decision)
+      );
+      const existing = await this.approvalStore.getResponse({
+        approvalId: decision.approvalId
+      });
+      if (existing) {
+        if (!isDeepStrictEqual(existing, response)) {
+          throw ApprovalError.invalidResponse(
+            "Approval response conflicts with existing approval response",
+            {
+              approvalId: decision.approvalId
+            }
+          );
+        }
+        return { response: existing, status: "replayed" };
+      }
+      const record = await this.approvalStore.saveResponse({ response });
+      if (!isDeepStrictEqual(record.response, response)) {
+        throw ApprovalError.invalidResponse(
+          "Approval response conflicts with existing approval response",
+          {
+            approvalId: decision.approvalId
+          }
+        );
+      }
+      return record;
+    });
+  }
+  async requestApprovalDecision(request) {
+    return this.handleApproval(request);
+  }
   /**
-   * Handle approval requests (tool approval, elicitation, command confirmation, directory access, custom)
+   * Handle approval requests (tool approval, elicitation, command approval, directory access, custom)
    * @private
    */
   async handleApproval(request) {
@@ -517,16 +675,6 @@ class ApprovalManager {
         status: ApprovalStatus.APPROVED
       });
     }
-    if (mode === "auto-deny") {
-      this.logger.info(
-        `Auto-deny approval '${request.type}', approvalId: ${request.approvalId}`
-      );
-      return this.createResponse(request, {
-        status: ApprovalStatus.DENIED,
-        reason: DenialReason.SYSTEM_DENIED,
-        message: `Approval automatically denied by system policy (auto-deny mode)`
-      });
-    }
     const handler = this.ensureHandler();
     this.logger.info(
       `Manual approval '${request.type}' requested, approvalId: ${request.approvalId}, sessionId: ${request.sessionId ?? "global"}`
@@ -538,7 +686,7 @@ class ApprovalManager {
    * Convenience method for tool execution approval
    *
    * TODO: Make sessionId required once all callers are updated to pass it
-   * Tool confirmations always happen in session context during LLM execution
+   * Tool approvals always happen in session context during LLM execution
    */
   async requestToolApproval(metadata) {
     const { sessionId, hostRuntime, timeout, ...toolMetadata } = metadata;
@@ -553,19 +701,19 @@ class ApprovalManager {
     );
   }
   /**
-   * Request command confirmation approval
+   * Request command approval
    * Convenience method for dangerous command execution within an already-approved tool
    *
    * This is different from tool approval - it's for per-command approval
    * of dangerous operations (like rm, git push) within tools that are already approved.
    *
    * TODO: Make sessionId required once all callers are updated to pass it
-   * Command confirmations always happen during tool execution which has session context
+   * Command approvals always happen during tool execution which has session context
    *
    * @example
    * ```typescript
    * // bash_exec tool is approved, but dangerous commands still require approval
-   * const response = await manager.requestCommandConfirmation({
+   * const response = await manager.requestCommandApproval({
    *   toolName: 'bash_exec',
    *   command: 'rm -rf /important',
    *   originalCommand: 'rm -rf /important',
@@ -573,11 +721,11 @@ class ApprovalManager {
    * });
    * ```
    */
-  async requestCommandConfirmation(metadata) {
+  async requestCommandApproval(metadata) {
     const { sessionId, hostRuntime, timeout, ...commandMetadata } = metadata;
     return this.requestApproval(
       this.createApprovalDetails(
-        ApprovalType.COMMAND_CONFIRMATION,
+        ApprovalType.COMMAND_APPROVAL,
         commandMetadata,
         sessionId,
         hostRuntime,
@@ -700,7 +848,7 @@ class ApprovalManager {
    * Set the approval handler for manual approval mode.
    *
    * The handler will be called for:
-   * - Tool confirmation requests when permissions.mode is 'manual'
+   * - Tool approval requests when permissions.mode is 'manual'
    * - All elicitation requests (when elicitation is enabled, regardless of permissions.mode)
    *
    * A handler must be set before processing requests if:
@@ -737,7 +885,7 @@ class ApprovalManager {
   ensureHandler() {
     if (!this.handler) {
       throw ApprovalError.invalidConfig(
-        'An approval handler is required but not configured.\nHandlers are required for:\n  \u2022 manual tool approval mode\n  \u2022 all elicitation requests (when elicitation is enabled)\nEither:\n  \u2022 set permissions.mode to "auto-approve" or "auto-deny", or\n  \u2022 disable elicitation (set elicitation.enabled: false), or\n  \u2022 call agent.setApprovalHandler(...) before processing requests.'
+        'An approval handler is required but not configured.\nHandlers are required for:\n  \u2022 manual tool approval mode\n  \u2022 all elicitation requests (when elicitation is enabled)\nEither:\n  \u2022 set permissions.mode to "auto-approve", or\n  \u2022 disable elicitation (set elicitation.enabled: false), or\n  \u2022 call agent.setApprovalHandler(...) before processing requests.'
       );
     }
     return this.handler;

package/dist/approval/schemas.cjs

@@ -25,10 +25,10 @@ __export(schemas_exports, {
   ApprovalTypeSchema: () => ApprovalTypeSchema,
   BaseApprovalRequestSchema: () => BaseApprovalRequestSchema,
   BaseApprovalResponseSchema: () => BaseApprovalResponseSchema,
-  CommandConfirmationMetadataSchema: () => CommandConfirmationMetadataSchema,
-  CommandConfirmationRequestSchema: () => CommandConfirmationRequestSchema,
-  CommandConfirmationResponseDataSchema: () => CommandConfirmationResponseDataSchema,
-  CommandConfirmationResponseSchema: () => CommandConfirmationResponseSchema,
+  CommandApprovalMetadataSchema: () => CommandApprovalMetadataSchema,
+  CommandApprovalRequestSchema: () => CommandApprovalRequestSchema,
+  CommandApprovalResponseDataSchema: () => CommandApprovalResponseDataSchema,
+  CommandApprovalResponseSchema: () => CommandApprovalResponseSchema,
   CustomApprovalMetadataSchema: () => CustomApprovalMetadataSchema,
   CustomApprovalRequestSchema: () => CustomApprovalRequestSchema,
   CustomApprovalResponseDataSchema: () => CustomApprovalResponseDataSchema,
@@ -72,7 +72,7 @@ const DirectoryAccessMetadataSchema = import_zod.z.object({
   toolName: import_zod.z.string().describe("Name of the tool requesting access")
 }).strict().describe("Directory access metadata");
 const ToolApprovalMetadataSchema = import_zod.z.object({
-  toolName: import_zod.z.string().describe("Name of the tool to confirm"),
+  toolName: import_zod.z.string().describe("Name of the tool to approve"),
   presentationSnapshot: ToolPresentationSnapshotV1Schema.optional().describe(
     "Optional UI-agnostic presentation snapshot for the tool call. Clients MUST ignore unknown fields."
   ),
@@ -89,11 +89,11 @@ const ToolApprovalMetadataSchema = import_zod.z.object({
     'Suggested patterns for session approval. Tools may provide patterns to allow approving a broader subset of future calls (e.g., ["git push *", "git *"]).'
   )
 }).strict().describe("Tool approval metadata");
-const CommandConfirmationMetadataSchema = import_zod.z.object({
+const CommandApprovalMetadataSchema = import_zod.z.object({
   toolName: import_zod.z.string().describe("Name of the tool executing the command"),
   command: import_zod.z.string().describe("The normalized command to execute"),
   originalCommand: import_zod.z.string().optional().describe("The original command before normalization")
-}).strict().describe("Command confirmation metadata");
+}).strict().describe("Command approval metadata");
 const ElicitationMetadataSchema = import_zod.z.object({
   schema: JsonSchema7Schema.describe("JSON Schema for the form"),
   prompt: import_zod.z.string().describe("High-level prompt/context for the form (clients may show it)"),
@@ -109,15 +109,15 @@ const BaseApprovalRequestSchema = import_zod.z.object({
     "Optional host-owned runtime IDs for correlating the approval flow to a single execution."
   ),
   timeout: import_zod.z.number().int().positive().optional().describe("Timeout in milliseconds (optional - no timeout if not specified)"),
-  timestamp: import_zod.z.date().describe("When the request was created")
+  timestamp: import_zod.z.coerce.date().describe("When the request was created")
 }).describe("Base approval request");
 const ToolApprovalRequestSchema = BaseApprovalRequestSchema.extend({
   type: import_zod.z.literal(import_types.ApprovalType.TOOL_APPROVAL),
   metadata: ToolApprovalMetadataSchema
 }).strict();
-const CommandConfirmationRequestSchema = BaseApprovalRequestSchema.extend({
-  type: import_zod.z.literal(import_types.ApprovalType.COMMAND_CONFIRMATION),
-  metadata: CommandConfirmationMetadataSchema
+const CommandApprovalRequestSchema = BaseApprovalRequestSchema.extend({
+  type: import_zod.z.literal(import_types.ApprovalType.COMMAND_APPROVAL),
+  metadata: CommandApprovalMetadataSchema
 }).strict();
 const ElicitationRequestSchema = BaseApprovalRequestSchema.extend({
   type: import_zod.z.literal(import_types.ApprovalType.ELICITATION),
@@ -133,7 +133,7 @@ const DirectoryAccessRequestSchema = BaseApprovalRequestSchema.extend({
 }).strict();
 const ApprovalRequestSchema = import_zod.z.discriminatedUnion("type", [
   ToolApprovalRequestSchema,
-  CommandConfirmationRequestSchema,
+  CommandApprovalRequestSchema,
   ElicitationRequestSchema,
   CustomApprovalRequestSchema,
   DirectoryAccessRequestSchema
@@ -147,10 +147,10 @@ const ToolApprovalResponseDataSchema = import_zod.z.object({
     "Remember this directory for the session (allows future access without prompting again)"
   )
 }).strict().describe("Tool approval response data");
-const CommandConfirmationResponseDataSchema = import_zod.z.object({
-  // Command confirmations don't have remember choice - they're per-command
+const CommandApprovalResponseDataSchema = import_zod.z.object({
+  // Command approvals don't have remember choice - they're per-command
   // Could add command pattern remembering in future (e.g., "remember git push *")
-}).strict().describe("Command confirmation response data");
+}).strict().describe("Command approval response data");
 const ElicitationResponseDataSchema = import_zod.z.object({
   formData: import_zod.z.record(import_zod.z.string(), import_zod.z.unknown()).describe("Form data matching schema")
 }).strict().describe("Elicitation response data");
@@ -174,8 +174,8 @@ const BaseApprovalResponseSchema = import_zod.z.object({
 const ToolApprovalResponseSchema = BaseApprovalResponseSchema.extend({
   data: ToolApprovalResponseDataSchema.optional()
 }).strict();
-const CommandConfirmationResponseSchema = BaseApprovalResponseSchema.extend({
-  data: CommandConfirmationResponseDataSchema.optional()
+const CommandApprovalResponseSchema = BaseApprovalResponseSchema.extend({
+  data: CommandApprovalResponseDataSchema.optional()
 }).strict();
 const ElicitationResponseSchema = BaseApprovalResponseSchema.extend({
   data: ElicitationResponseDataSchema.optional()
@@ -188,7 +188,7 @@ const DirectoryAccessResponseSchema = BaseApprovalResponseSchema.extend({
 }).strict();
 const ApprovalResponseSchema = import_zod.z.union([
   ToolApprovalResponseSchema,
-  CommandConfirmationResponseSchema,
+  CommandApprovalResponseSchema,
   ElicitationResponseSchema,
   CustomApprovalResponseSchema,
   DirectoryAccessResponseSchema
@@ -202,7 +202,7 @@ const ApprovalRequestDetailsSchema = import_zod.z.object({
   timeout: import_zod.z.number().int().positive().optional().describe("Timeout in milliseconds (optional - no timeout if not specified)"),
   metadata: import_zod.z.union([
     ToolApprovalMetadataSchema,
-    CommandConfirmationMetadataSchema,
+    CommandApprovalMetadataSchema,
     ElicitationMetadataSchema,
     CustomApprovalMetadataSchema,
     DirectoryAccessMetadataSchema
@@ -217,12 +217,12 @@ const ApprovalRequestDetailsSchema = import_zod.z.object({
         path: ["metadata"]
       });
     }
-  } else if (data.type === import_types.ApprovalType.COMMAND_CONFIRMATION) {
-    const result = CommandConfirmationMetadataSchema.safeParse(data.metadata);
+  } else if (data.type === import_types.ApprovalType.COMMAND_APPROVAL) {
+    const result = CommandApprovalMetadataSchema.safeParse(data.metadata);
     if (!result.success) {
       ctx.addIssue({
         code: import_zod.z.ZodIssueCode.custom,
-        message: "Metadata must match CommandConfirmationMetadataSchema for COMMAND_CONFIRMATION type",
+        message: "Metadata must match CommandApprovalMetadataSchema for COMMAND_APPROVAL type",
         path: ["metadata"]
       });
     }
@@ -264,10 +264,10 @@ const ApprovalRequestDetailsSchema = import_zod.z.object({
   ApprovalTypeSchema,
   BaseApprovalRequestSchema,
   BaseApprovalResponseSchema,
-  CommandConfirmationMetadataSchema,
-  CommandConfirmationRequestSchema,
-  CommandConfirmationResponseDataSchema,
-  CommandConfirmationResponseSchema,
+  CommandApprovalMetadataSchema,
+  CommandApprovalRequestSchema,
+  CommandApprovalResponseDataSchema,
+  CommandApprovalResponseSchema,
   CustomApprovalMetadataSchema,
   CustomApprovalRequestSchema,
   CustomApprovalResponseDataSchema,