@frontera-sdk/cli 1.50.47 → 1.50.48

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontera-sdk/cli",
-  "version": "1.50.47",
+  "version": "1.50.48",
   "description": "The frontera CLI — scaffold, pull, save and deploy Frontera apps and automations.",
   "keywords": [
     "frontera",
@@ -39,14 +39,14 @@
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.251",
-    "@frontera-sdk/functions": "1.50.47",
-    "@frontera-sdk/core": "1.50.47",
+    "@frontera-sdk/functions": "1.50.48",
+    "@frontera-sdk/core": "1.50.48",
     "ai": "^6.0.116",
     "gray-matter": "^4.0.3",
     "yaml": "^2.9.0"
   },
   "devDependencies": {
-    "@frontera-sdk/forge-contracts": "1.50.47",
+    "@frontera-sdk/forge-contracts": "1.50.48",
     "@types/bun": "^1.3.14",
     "typescript": "^5.9.3"
   }

package/src/forge/adapter.ts

@@ -1,4 +1,4 @@
-import type { ForgeHostId, ForgeProject, ForgeThread, ForgeThreadStatus } from '@frontera-sdk/forge-contracts'
+import type { ForgeHostId, ForgePendingApproval, ForgeProject, ForgeThread, ForgeThreadStatus } from '@frontera-sdk/forge-contracts'
 import type { UIMessageChunk } from 'ai'
 
 /**
@@ -44,6 +44,8 @@ export interface HostAdapter {
   interrupt(): Promise<void>
   /** Answer a pending approval; false when the id is unknown to this adapter. */
   respondApproval(approvalId: string, decision: ApprovalDecision): boolean
+  /** The prompts still waiting on this adapter, oldest first. */
+  pendingApprovals(): ForgePendingApproval[]
 }
 
 export type AdapterFactory = (host: ForgeHostId) => HostAdapter
@@ -54,6 +56,27 @@ export const APPROVAL_TIMEOUT_MS = 10 * 60 * 1000
 interface PendingApproval {
   resolve(decision: ApprovalDecision): void
   timer: ReturnType<typeof setTimeout>
+  card: ForgePendingApproval
+}
+
+/** How much of the tool's input the card shows, and how far each value runs. */
+const PREVIEW_ITEMS = 6
+const PREVIEW_LENGTH = 160
+
+/**
+ * The tool's arguments as card rows. Unlike the platform's own builder this
+ * does not redact secret-looking keys: the daemon is loopback-only and the
+ * reader is the person whose machine is about to run the call with exactly
+ * these arguments, so hiding them would only hide what is being approved.
+ */
+function approvalPreview(input: unknown): Array<{ label: string; value: string }> {
+  if (!input || typeof input !== 'object' || Array.isArray(input)) return []
+  return Object.entries(input as Record<string, unknown>)
+    .slice(0, PREVIEW_ITEMS)
+    .map(([label, value]) => {
+      const text = typeof value === 'string' ? value : JSON.stringify(value) ?? String(value)
+      return { label, value: text.length > PREVIEW_LENGTH ? `${text.slice(0, PREVIEW_LENGTH)}...` : text }
+    })
 }
 
 /**
@@ -68,9 +91,28 @@ export class ApprovalBroker {
     ctx: Pick<TurnContext, 'setThreadStatus' | 'signal'>,
     emit: Emit,
     toolCallId: string,
+    toolName: string,
+    input: unknown,
     timeoutMs = APPROVAL_TIMEOUT_MS,
   ): Promise<ApprovalDecision> {
     const approvalId = crypto.randomUUID()
+    const preview = approvalPreview(input)
+    const card: ForgePendingApproval = {
+      id: approvalId,
+      status: 'pending',
+      pauseReason: 'needs_approval',
+      installId: null,
+      toolCallId,
+      toolName,
+      toolSource: 'forge',
+      risk: null,
+      actionSummary: {
+        title: toolName.replaceAll('__', ' / ').replaceAll('_', ' '),
+        ...(preview.length ? { preview } : {}),
+      },
+      policyReason: null,
+      expiresAt: new Date(Date.now() + timeoutMs).toISOString(),
+    }
     return new Promise<ApprovalDecision>((resolve) => {
       const settle = (decision: ApprovalDecision) => {
         const entry = this.pending.get(approvalId)
@@ -83,7 +125,7 @@ export class ApprovalBroker {
       }
       const onAbort = () => settle('deny')
       const timer = setTimeout(() => settle('deny'), timeoutMs)
-      this.pending.set(approvalId, { resolve: settle, timer })
+      this.pending.set(approvalId, { resolve: settle, timer, card })
       ctx.signal.addEventListener('abort', onAbort, { once: true })
       ctx.setThreadStatus('awaiting_approval')
       emit({ type: 'tool-approval-request', approvalId, toolCallId } as UIMessageChunk)
@@ -98,6 +140,10 @@ export class ApprovalBroker {
     return true
   }
 
+  cards(): ForgePendingApproval[] {
+    return [...this.pending.values()].map((entry) => entry.card)
+  }
+
   denyAll(): void {
     for (const id of [...this.pending.keys()]) this.respond(id, 'deny')
   }

package/src/forge/claude-adapter.ts

@@ -1,4 +1,5 @@
 import type { CanUseTool, Options, PermissionMode, Query } from '@anthropic-ai/claude-agent-sdk'
+import type { ForgePendingApproval } from '@frontera-sdk/forge-contracts'
 
 import { resolveCredential } from '../config'
 import { ApprovalBroker, type ApprovalDecision, type Emit, type HostAdapter, type TurnContext, type TurnOutcome } from './adapter'
@@ -97,7 +98,7 @@ export class ClaudeAdapter implements HostAdapter {
       if (autoAllows(mode, toolName)) return { behavior: 'allow', updatedInput: input }
       const toolCallId = options.toolUseID ?? crypto.randomUUID()
       flush(translator.ensureToolCall(toolCallId, toolName, input))
-      const decision = await this.approvals.request(ctx, emit, toolCallId)
+      const decision = await this.approvals.request(ctx, emit, toolCallId, toolName, input)
       if (decision === 'approve') return { behavior: 'allow', updatedInput: input }
       return { behavior: 'deny', message: DENIED_MESSAGE }
     }
@@ -175,6 +176,10 @@ export class ClaudeAdapter implements HostAdapter {
     return this.approvals.respond(approvalId, decision)
   }
 
+  pendingApprovals(): ForgePendingApproval[] {
+    return this.approvals.cards()
+  }
+
   /**
    * The platform's MCP server, with the key the project directory selects.
    * No profile bound, or a profile for another deployment: the host still

package/src/forge/codex-adapter.ts

@@ -1,3 +1,4 @@
+import type { ForgePendingApproval } from '@frontera-sdk/forge-contracts'
 import type { UIMessageChunk } from 'ai'
 
 import type { ApprovalDecision, Emit, HostAdapter, TurnContext, TurnOutcome } from './adapter'
@@ -25,4 +26,8 @@ export class CodexAdapter implements HostAdapter {
   respondApproval(_approvalId: string, _decision: ApprovalDecision): boolean {
     return false
   }
+
+  pendingApprovals(): ForgePendingApproval[] {
+    return []
+  }
 }

package/src/forge/runs.ts

@@ -1,4 +1,4 @@
-import type { ForgeProject } from '@frontera-sdk/forge-contracts'
+import type { ForgePendingApproval, ForgeProject } from '@frontera-sdk/forge-contracts'
 
 import { FORGE_RUN_ID_PREFIX } from './protocol'
 import { readUIMessageStream, type UIMessage, type UIMessageChunk } from 'ai'
@@ -141,6 +141,16 @@ export class RunManager {
     return true
   }
 
+  /** Everything this thread's live run is parked on, for the approval rail. */
+  pendingApprovals(threadId: string): ForgePendingApproval[] {
+    const cards: ForgePendingApproval[] = []
+    for (const run of this.live.values()) {
+      if (run.threadId !== threadId || run.finished) continue
+      cards.push(...run.adapter.pendingApprovals())
+    }
+    return cards
+  }
+
   respondApproval(threadId: string, approvalId: string, decision: ApprovalDecision): boolean {
     for (const run of this.live.values()) {
       if (run.threadId !== threadId || run.finished) continue

package/src/forge/server.ts

@@ -513,7 +513,7 @@ export function startForgeServer(opts: ForgeServerOptions): ForgeServer {
     return sseResponse(stream, {
       [FORGE_HEADERS.conversationId]: thread.id,
       [FORGE_HEADERS.runId]: runId,
-      [FORGE_HEADERS.agentRuntime]: 'wdk',
+      [FORGE_HEADERS.agentRuntime]: 'pi',
     })
   })
 
@@ -531,7 +531,7 @@ export function startForgeServer(opts: ForgeServerOptions): ForgeServer {
     return sseResponse(stream, {
       ...(run ? { [FORGE_HEADERS.conversationId]: run.threadId } : {}),
       [FORGE_HEADERS.runId]: runId,
-      [FORGE_HEADERS.agentRuntime]: 'wdk',
+      [FORGE_HEADERS.agentRuntime]: 'pi',
     })
   })
 
@@ -584,7 +584,7 @@ export function startForgeServer(opts: ForgeServerOptions): ForgeServer {
 
   route('GET', '/v1/sessions/:id/pending', (_req, params) => {
     requireThread(params.id!)
-    return ok([])
+    return ok(runs.pendingApprovals(params.id!))
   })
 
   route('POST', '/v1/sessions/:id/approvals/:approvalId', async (req, params) => {