@moxxy/sdk 0.39.0 → 0.41.0

package/dist/tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../src/tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,UAAU;IACzB,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,cAAc,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF,mFAAmF;IACnF,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,qEAAqE;IACrE,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,qDAAqD;IACrD,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,CACE,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,EAC5B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE;QACf,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACzD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACxD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACxD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KAC1D,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC/D;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,uBAAuB;IACtC,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE;+EAC2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACnF,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CACxC"}
+{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../src/tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;AAEzD,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,UAAU;IACzB,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,cAAc,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF,mFAAmF;IACnF,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,qEAAqE;IACrE,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,qDAAqD;IACrD,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,CACE,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,EAC5B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE;QACf,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACzD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACxD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACxD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KAC1D,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC/D;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,uBAAuB;IACtC,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE;+EAC2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACnF,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CACxC"}

package/dist/workflow-approval.d.ts

@@ -0,0 +1,135 @@
+export interface WorkflowApprovalScope {
+    readonly workflowId: string;
+    readonly workflowName: string;
+    readonly revision: string;
+    readonly runId: string;
+}
+export type WorkflowApprovalChoice = 'allow_once' | 'allow_always' | 'deny';
+export interface WorkflowApprovalItem extends WorkflowApprovalScope {
+    readonly id: string;
+    readonly tool: string;
+    readonly input: unknown;
+    readonly createdAt: number;
+    readonly status: 'pending' | 'allowed' | 'denied' | 'cancelled' | 'interrupted' | 'revoked';
+    readonly choice?: WorkflowApprovalChoice;
+}
+export interface WorkflowApprovalsView {
+    list(): Promise<ReadonlyArray<WorkflowApprovalItem>>;
+    decide(id: string, choice: WorkflowApprovalChoice): Promise<void>;
+    revoke(id: string): Promise<void>;
+    cancel(id: string): Promise<void>;
+}
+import { z } from 'zod';
+export declare const workflowApprovalItemSchema: z.ZodEffects<z.ZodObject<{
+    id: z.ZodString;
+    workflowId: z.ZodString;
+    workflowName: z.ZodString;
+    revision: z.ZodString;
+    runId: z.ZodString;
+    tool: z.ZodString;
+    input: z.ZodUnknown;
+    createdAt: z.ZodNumber;
+    status: z.ZodEnum<["pending", "allowed", "denied", "cancelled", "interrupted", "revoked"]>;
+    choice: z.ZodOptional<z.ZodEnum<["allow_once", "allow_always", "deny"]>>;
+}, "strict", z.ZodTypeAny, {
+    tool: string;
+    id: string;
+    status: "denied" | "pending" | "allowed" | "cancelled" | "interrupted" | "revoked";
+    workflowId: string;
+    workflowName: string;
+    revision: string;
+    runId: string;
+    createdAt: number;
+    input?: unknown;
+    choice?: "allow_always" | "deny" | "allow_once" | undefined;
+}, {
+    tool: string;
+    id: string;
+    status: "denied" | "pending" | "allowed" | "cancelled" | "interrupted" | "revoked";
+    workflowId: string;
+    workflowName: string;
+    revision: string;
+    runId: string;
+    createdAt: number;
+    input?: unknown;
+    choice?: "allow_always" | "deny" | "allow_once" | undefined;
+}>, {
+    input: unknown;
+    tool: string;
+    id: string;
+    status: "denied" | "pending" | "allowed" | "cancelled" | "interrupted" | "revoked";
+    workflowId: string;
+    workflowName: string;
+    revision: string;
+    runId: string;
+    createdAt: number;
+    choice?: "allow_always" | "deny" | "allow_once" | undefined;
+}, {
+    tool: string;
+    id: string;
+    status: "denied" | "pending" | "allowed" | "cancelled" | "interrupted" | "revoked";
+    workflowId: string;
+    workflowName: string;
+    revision: string;
+    runId: string;
+    createdAt: number;
+    input?: unknown;
+    choice?: "allow_always" | "deny" | "allow_once" | undefined;
+}>;
+export declare const workflowApprovalItemsSchema: z.ZodArray<z.ZodEffects<z.ZodObject<{
+    id: z.ZodString;
+    workflowId: z.ZodString;
+    workflowName: z.ZodString;
+    revision: z.ZodString;
+    runId: z.ZodString;
+    tool: z.ZodString;
+    input: z.ZodUnknown;
+    createdAt: z.ZodNumber;
+    status: z.ZodEnum<["pending", "allowed", "denied", "cancelled", "interrupted", "revoked"]>;
+    choice: z.ZodOptional<z.ZodEnum<["allow_once", "allow_always", "deny"]>>;
+}, "strict", z.ZodTypeAny, {
+    tool: string;
+    id: string;
+    status: "denied" | "pending" | "allowed" | "cancelled" | "interrupted" | "revoked";
+    workflowId: string;
+    workflowName: string;
+    revision: string;
+    runId: string;
+    createdAt: number;
+    input?: unknown;
+    choice?: "allow_always" | "deny" | "allow_once" | undefined;
+}, {
+    tool: string;
+    id: string;
+    status: "denied" | "pending" | "allowed" | "cancelled" | "interrupted" | "revoked";
+    workflowId: string;
+    workflowName: string;
+    revision: string;
+    runId: string;
+    createdAt: number;
+    input?: unknown;
+    choice?: "allow_always" | "deny" | "allow_once" | undefined;
+}>, {
+    input: unknown;
+    tool: string;
+    id: string;
+    status: "denied" | "pending" | "allowed" | "cancelled" | "interrupted" | "revoked";
+    workflowId: string;
+    workflowName: string;
+    revision: string;
+    runId: string;
+    createdAt: number;
+    choice?: "allow_always" | "deny" | "allow_once" | undefined;
+}, {
+    tool: string;
+    id: string;
+    status: "denied" | "pending" | "allowed" | "cancelled" | "interrupted" | "revoked";
+    workflowId: string;
+    workflowName: string;
+    revision: string;
+    runId: string;
+    createdAt: number;
+    input?: unknown;
+    choice?: "allow_always" | "deny" | "allow_once" | undefined;
+}>, "many">;
+//# sourceMappingURL=workflow-approval.d.ts.map

package/dist/workflow-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-approval.d.ts","sourceRoot":"","sources":["../src/workflow-approval.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,sBAAsB,GAAG,YAAY,GAAG,cAAc,GAAG,MAAM,CAAC;AAC5E,MAAM,WAAW,oBAAqB,SAAQ,qBAAqB;IACjE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;IAC5F,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,IAAI,OAAO,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AACD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAciB,CAAC;AACzD,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAAsC,CAAC"}

package/dist/workflow-approval.js

@@ -0,0 +1,18 @@
+import { z } from 'zod';
+export const workflowApprovalItemSchema = z
+    .object({
+    id: z.string().uuid(),
+    workflowId: z.string().min(1),
+    workflowName: z.string().min(1),
+    revision: z.string().min(1),
+    runId: z.string().min(1),
+    tool: z.string().min(1),
+    input: z.unknown(),
+    createdAt: z.number().finite().positive(),
+    status: z.enum(['pending', 'allowed', 'denied', 'cancelled', 'interrupted', 'revoked']),
+    choice: z.enum(['allow_once', 'allow_always', 'deny']).optional(),
+})
+    .strict()
+    .transform((item) => ({ ...item, input: item.input }));
+export const workflowApprovalItemsSchema = z.array(workflowApprovalItemSchema);
+//# sourceMappingURL=workflow-approval.js.map

package/dist/workflow-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-approval.js","sourceRoot":"","sources":["../src/workflow-approval.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;IACvF,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClE,CAAC;KACD,MAAM,EAAE;KACR,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACzD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC"}

package/dist/workflow.d.ts

@@ -176,7 +176,7 @@ export interface WorkflowLookup {
     workflow(name: string): Workflow | undefined;
 }
 /** Lifecycle subtypes an executor emits as `plugin_event`s (mirrors plan_*). */
-export type WorkflowEventSubtype = 'workflow_started' | 'workflow_step_started' | 'workflow_step_completed' | 'workflow_step_skipped' | 'workflow_step_failed' | 'workflow_step_awaiting_input' | 'workflow_paused' | 'workflow_resumed' | 'workflow_completed' | 'workflow_failed';
+export type WorkflowEventSubtype = 'workflow_started' | 'workflow_step_started' | 'workflow_step_completed' | 'workflow_step_skipped' | 'workflow_step_failed' | 'workflow_step_cancelled' | 'workflow_step_awaiting_input' | 'workflow_paused' | 'workflow_resumed' | 'workflow_completed' | 'workflow_failed' | 'workflow_cancelled';
 /**
  * Everything an executor needs to run a workflow, supplied by the caller.
  * The in-turn `workflow_run` tool wires `spawner` from `ctx.subagents`; the
@@ -203,8 +203,8 @@ export interface WorkflowRunDeps {
     /** Nested-workflow recursion depth; executors guard against runaway nesting. */
     readonly depth?: number;
 }
-export type WorkflowStepStatus = 'completed' | 'skipped' | 'failed' | 'awaiting_input';
-export type WorkflowRunStatus = 'completed' | 'paused' | 'failed';
+export type WorkflowStepStatus = 'completed' | 'skipped' | 'failed' | 'awaiting_input' | 'cancelled';
+export type WorkflowRunStatus = 'completed' | 'paused' | 'failed' | 'cancelled';
 export interface WorkflowStepResult {
     readonly id: string;
     readonly status: WorkflowStepStatus;

package/dist/workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../src/workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACxD,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACtD,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,gFAAgF;AAChF,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC;AAElE,uEAAuE;AACvE,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEvD;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,oEAAoE;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,qEAAqE;IACrE,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,iFAAiF;IACjF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,wEAAwE;AACxE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;CACpC;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACnD,QAAQ,CAAC,EAAE,CAAC,EAAE,eAAe,CAAC;IAC9B;;;;;;;;;;;;;;;;;;OAkBG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IACrC,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;CAC7C;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IACvC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9E;AAED,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;CAC9C;AAED,gFAAgF;AAChF,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,uBAAuB,GACvB,yBAAyB,GACzB,uBAAuB,GACvB,sBAAsB,GACtB,8BAA8B,GAC9B,iBAAiB,GACjB,kBAAkB,GAClB,oBAAoB,GACpB,iBAAiB,CAAC;AAEtB;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1F,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACzD,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KAC1D,CAAC;IACF,gFAAgF;IAChF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAEvF,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAElE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAClD,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,qEAAqE;IACrE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC5E"}
+{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../src/workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACxD,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACtD,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,gFAAgF;AAChF,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC;AAElE,uEAAuE;AACvE,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEvD;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,oEAAoE;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,qEAAqE;IACrE,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,iFAAiF;IACjF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,wEAAwE;AACxE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;CACpC;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACnD,QAAQ,CAAC,EAAE,CAAC,EAAE,eAAe,CAAC;IAC9B;;;;;;;;;;;;;;;;;;OAkBG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IACrC,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;CAC7C;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IACvC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9E;AAED,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;CAC9C;AAED,gFAAgF;AAChF,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,uBAAuB,GACvB,yBAAyB,GACzB,uBAAuB,GACvB,sBAAsB,GACtB,yBAAyB,GACzB,8BAA8B,GAC9B,iBAAiB,GACjB,kBAAkB,GAClB,oBAAoB,GACpB,iBAAiB,GACjB,oBAAoB,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1F,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACzD,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KAC1D,CAAC;IACF,gFAAgF;IAChF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,gBAAgB,GAAG,WAAW,CAAC;AAErG,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEhF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAClD,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,qEAAqE;IACrE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC5E"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moxxy/sdk",
-  "version": "0.39.0",
+  "version": "0.41.0",
   "description": "Typed public surface for the moxxy framework: event types, define* factories, lifecycle hook signatures.",
   "keywords": [
     "moxxy",
@@ -34,7 +34,7 @@
   "author": "Michal Makowski <michal.makowski97@gmail.com>",
   "license": "MIT",
   "engines": {
-    "node": ">=20.10.0"
+    "node": ">=20.19.0"
   },
   "sideEffects": false,
   "type": "module",
@@ -53,6 +53,10 @@
       "types": "./dist/tool-display.d.ts",
       "import": "./dist/tool-display.js"
     },
+    "./workflow-approval": {
+      "types": "./dist/workflow-approval.d.ts",
+      "import": "./dist/workflow-approval.js"
+    },
     "./transcriber": {
       "types": "./dist/transcriber.d.ts",
       "import": "./dist/transcriber.js"

package/src/computer-control.test.ts

@@ -0,0 +1,17 @@
+import { expect, it } from 'vitest';
+import { computerControlCommandSchema, computerControlSnapshotSchema } from './computer-control.js';
+
+it('requires exact session and turn ownership for human control commands', () => {
+  const command={sessionId:'session-a',turnId:'turn-a',command:'stop'};
+  expect(computerControlCommandSchema.safeParse(command).success).toBe(true);
+  expect(computerControlCommandSchema.safeParse({turnId:'turn-a',command:'stop'}).success).toBe(false);
+  expect(computerControlCommandSchema.safeParse({...command,command:'restart'}).success).toBe(false);
+  expect(computerControlCommandSchema.safeParse({...command,workspaceId:'unexpected'}).success).toBe(false);
+});
+
+it('validates bounded control-state snapshots, never executable commands', () => {
+  const snapshot={sessionId:'s',turnId:'t',state:'waiting_for_focus',windowId:null};
+  expect(computerControlSnapshotSchema.safeParse(snapshot).success).toBe(true);
+  expect(computerControlSnapshotSchema.safeParse({...snapshot,state:'running arbitrary code'}).success).toBe(false);
+  expect(computerControlSnapshotSchema.safeParse({...snapshot,windowId:'x'.repeat(200)}).success).toBe(false);
+});

package/src/computer-control.ts

@@ -0,0 +1,31 @@
+import { z } from 'zod';
+
+export const computerControlStateSchema = z.enum([
+  'idle', 'background', 'foreground', 'waiting_for_focus',
+  'paused_by_user', 'recovering', 'stopped', 'failed',
+]);
+const identity = z.string().min(1).max(160);
+export const computerControlOwnerSchema = z.object({ sessionId: identity, turnId: identity }).strict();
+export const computerControlCommandSchema = computerControlOwnerSchema.extend({
+  command: z.enum(['pause', 'resume', 'stop']),
+}).strict();
+export const computerControlSnapshotSchema = computerControlOwnerSchema.extend({
+  state: computerControlStateSchema,
+  windowId: identity.nullable(),
+}).strict();
+
+export type ComputerControlState = z.infer<typeof computerControlStateSchema>;
+export const computerApprovalFocusSchema = computerControlOwnerSchema.extend({
+  windowId: identity, callId: identity, hostPid: z.number().int().min(1).max(2147483647),
+  stage: z.enum(['begin', 'finish']), approved: z.boolean(),
+}).strict();
+export type ComputerApprovalFocus = z.infer<typeof computerApprovalFocusSchema>;
+export type ComputerControlCommand = z.infer<typeof computerControlCommandSchema>;
+export type ComputerControlSnapshot = z.infer<typeof computerControlSnapshotSchema>;
+export interface ComputerControlService {
+  approvalFocus?(command: ComputerApprovalFocus): Promise<void>;
+  /** Empty when this session has no live Computer Use turn. */
+  snapshot(): Promise<ReadonlyArray<ComputerControlSnapshot>>;
+  /** Human control only: never starts a helper or grants tool permission. */
+  control(command: ComputerControlCommand): Promise<void>;
+}

package/src/events.ts

@@ -284,6 +284,21 @@ export interface ProviderResponseEvent extends EventBase {
   readonly outputTokens?: number;
   readonly cacheReadTokens?: number;
   readonly cacheCreationTokens?: number;
+  readonly timing?: ProviderCallTiming;
+}
+
+/** Local monotonic measurements, not a claim about server-side model compute. */
+export interface ProviderCallTiming {
+  readonly contextProjectionMs: number;
+  readonly preparationMs: number;
+  readonly hooksMs: number;
+  readonly firstEventMs: number | null;
+  /** Iterator waiting includes the provider adapter, network and remote work. */
+  readonly providerWaitMs: number;
+  /** Local processing of stream events, including event-log subscribers. */
+  readonly consumerMs: number;
+  /** Sum of measured stages; excludes tools, permissions and focus waits. */
+  readonly totalMs: number;
 }
 
 export interface ErrorEvent extends EventBase {

package/src/index.ts

@@ -35,12 +35,21 @@ export type {
   ElisionEvent,
   ProviderRequestEvent,
   ProviderResponseEvent,
+  ProviderCallTiming,
   ErrorEvent,
   AbortEvent,
   PluginEvent,
 } from './events.js';
 
 export type { EventLogReader } from './log.js';
+export {
+  computerControlStateSchema, computerControlOwnerSchema,
+  computerControlCommandSchema, computerControlSnapshotSchema,
+  computerApprovalFocusSchema, type ComputerApprovalFocus,
+} from './computer-control.js';
+export type {
+  ComputerControlState, ComputerControlCommand, ComputerControlSnapshot, ComputerControlService,
+} from './computer-control.js';
 
 // Identity. The type + pure helpers ride the main barrel; the OS resolver needs
 // `node:os` and is exported from `@moxxy/sdk/server`.
@@ -149,6 +158,7 @@ export type {
   ToolContext,
   ToolDef,
   HostedTool,
+  ToolImageResult,
   ToolCompactPresentation,
   BrokeredFs,
   BrokeredStat,
@@ -344,6 +354,7 @@ export {
   type CheckpointResult,
   type TurnCheckpoint,
 } from './mode-helpers.js';
+export type { WorkflowApprovalScope, WorkflowApprovalChoice, WorkflowApprovalItem, WorkflowApprovalsView } from './workflow-approval.js';
 export {
   dispatchToolCall,
   executeToolUses,
@@ -595,3 +606,4 @@ export {
 } from './install-hints.js';
 
 export { z } from 'zod';
+export { workflowApprovalItemSchema, workflowApprovalItemsSchema } from './workflow-approval.js';

package/src/loop-helpers.test.ts

@@ -222,6 +222,21 @@ describe('projectMessagesFromLog', () => {
     }
   });
 
+  it.each([
+    { mediaType: 'image/png', base64: 'AAAABBBB', forModel: 'capture=c1; window=w1; source=(-1920,0,1920,1080)' },
+    { type: 'image', mediaType: 'image/png', data: 'AAAABBBB', forModel: 'capture=c1; window=w1; source=(-1920,0,1920,1080)' },
+  ])('preserves image metadata as model-facing text without stringifying pixels', (output) => {
+    const log = reader([
+      event(0, { type: 'tool_call_requested', turnId: t1, source: 'model', callId: 'c1', name: 'computer_screenshot', input: {} }),
+      event(1, { type: 'tool_result', turnId: t1, source: 'tool', callId: 'c1', ok: true, output }),
+    ]);
+    const result = projectMessagesFromLog({ log }).find((message) => message.role === 'tool_result');
+    expect(result?.content).toEqual([
+      { type: 'tool_result', toolUseId: 'c1', content: output.forModel, isError: false },
+      { type: 'image', mediaType: 'image/png', data: 'AAAABBBB' },
+    ]);
+  });
+
   it('accepts the provider-native image shape { type:image, mediaType, data }', () => {
     const log = reader([
       event(0, { type: 'user_prompt', turnId: t1, source: 'user', text: 'grab' }),

package/src/mode/collect-stream.ts

@@ -2,6 +2,8 @@ import type { ProviderEvent, ProviderMessage, TokenUsage } from '../provider.js'
 import type { ModeContext } from '../mode.js';
 import type { StopReason } from '../provider-utils.js';
 import { applyLazyTools } from '../tool-gating.js';
+import type { ProviderCallTiming } from '../events.js';
+import { providerTiming } from './provider-timing.js';
 
 /**
  * Shared bits used by every loop strategy: a typed tool-use struct and a
@@ -38,6 +40,7 @@ function addUsage(a: TokenUsage, b: TokenUsage): TokenUsage {
 }
 
 export interface StreamResult {
+  readonly timing?: ProviderCallTiming;
   readonly text: string;
   readonly toolUses: ReadonlyArray<CollectedToolUse>;
   readonly stopReason: StopReason;
@@ -67,6 +70,7 @@ export async function collectProviderStream(
   ctx: ModeContext,
   messages: ReadonlyArray<ProviderMessage>,
   opts: {
+    projectionMs?: number;
     iteration?: number;
     includeTools?: boolean;
     maxTokens?: number;
@@ -89,6 +93,7 @@ export async function collectProviderStream(
     volatileTailCount?: number;
   } = {},
 ): Promise<StreamResult> {
+  const start=performance.now();
   const descriptor = ctx.provider.models.find((model) => model.id === ctx.model);
 
   // Tool schemas are useful only when both the caller requests them and the
@@ -148,6 +153,7 @@ export async function collectProviderStream(
     ...(reqReasoning ? { reasoning: reqReasoning } : {}),
     signal: ctx.signal,
   };
+  const prepared=performance.now();
   const transformed = await ctx.hooks.dispatchBeforeProviderCall(req, {
     sessionId: ctx.sessionId,
     // Thread the session's real cwd/env (mirrored on ModeContext) so path-based
@@ -160,6 +166,10 @@ export async function collectProviderStream(
     turnId: ctx.turnId,
     iteration: opts.iteration ?? 0,
   });
+  const hooked=performance.now();
+  let firstEvent:number|null=null;
+  let consumerMs=0;
+  const timing=() => providerTiming({start,prepared,hooked,end:performance.now(),firstEvent,consumerMs,projectionMs:opts.projectionMs ?? 0});
 
   let text = '';
   const toolUses = new Map<string, { name?: string; input?: unknown }>();
@@ -180,6 +190,7 @@ export async function collectProviderStream(
     stream = ctx.provider.stream(transformed);
   } catch (err) {
     return {
+      timing:timing(),
       text: '',
       toolUses: [],
       stopReason: 'error',
@@ -189,6 +200,9 @@ export async function collectProviderStream(
 
   try {
     for await (const event of stream) {
+      const processingStarted=performance.now();
+      if (firstEvent===null) firstEvent=processingStarted;
+      try {
       switch (event.type) {
         case 'text_delta': {
           text += event.delta;
@@ -247,6 +261,7 @@ export async function collectProviderStream(
         default:
           break;
       }
+      } finally { consumerMs+=performance.now()-processingStarted; }
     }
   } catch (err) {
     // A stream-level `error` event is the more authoritative classification —
@@ -260,6 +275,8 @@ export async function collectProviderStream(
     }
   }
 
+  const measuredTiming=timing();
+
   const finalToolUses: CollectedToolUse[] = [];
   for (const [id, partial] of toolUses) {
     if (!partial.name) continue;
@@ -277,6 +294,7 @@ export async function collectProviderStream(
         }
       : undefined;
   return {
+    timing:measuredTiming,
     text,
     toolUses: finalToolUses,
     stopReason,

package/src/mode/project-messages.ts

@@ -420,7 +420,10 @@ export function projectMessages(
         } else if (e.ok && (image = imageBlockFromOutput(e.output))) {
           // Short marker satisfies the tool_use→tool_result pairing; the image
           // block (appended below) carries the actual pixels.
-          text = '[image returned by tool — see attached image]';
+          const description = (e.output as { forModel?: unknown }).forModel;
+          text = typeof description === 'string'
+            ? description
+            : '[image returned by tool — see attached image]';
         } else {
           text = safeStringifyOutput(e.output);
         }

package/src/mode/provider-timing.test.ts

@@ -0,0 +1,16 @@
+import { expect, it } from 'vitest';
+import { providerTiming } from './provider-timing.js';
+
+it('separates preparation, hooks, provider waiting and local stream handling without double counting', () => {
+  expect(providerTiming({start:100,prepared:110,hooked:140,end:240,firstEvent:180,consumerMs:25,projectionMs:7})).toEqual({
+    contextProjectionMs:7,preparationMs:10,hooksMs:30,firstEventMs:40,
+    providerWaitMs:75,consumerMs:25,totalMs:147,
+  });
+});
+
+it('keeps a missing first event distinct from an immediate response', () => {
+  const timing=providerTiming({start:0,prepared:0,hooked:1,end:5,firstEvent:null,consumerMs:0,projectionMs:0});
+  expect(timing.firstEventMs).toBeNull();
+  expect(timing.providerWaitMs).toBe(4);
+  expect(timing.totalMs).toBe(5);
+});

package/src/mode/provider-timing.ts

@@ -0,0 +1,19 @@
+import type { ProviderCallTiming } from '../events.js';
+
+export function providerTiming(sample: {
+  start:number; prepared:number; hooked:number; end:number;
+  firstEvent:number|null; consumerMs:number; projectionMs:number;
+}): ProviderCallTiming {
+  const duration=(end:number,start:number) => Math.max(0,end-start);
+  const streamMs=duration(sample.end,sample.hooked);
+  const consumerMs=Math.min(streamMs,Math.max(0,sample.consumerMs));
+  return {
+    contextProjectionMs:sample.projectionMs,
+    preparationMs:duration(sample.prepared,sample.start),
+    hooksMs:duration(sample.hooked,sample.prepared),
+    firstEventMs:sample.firstEvent===null ? null : duration(sample.firstEvent,sample.hooked),
+    providerWaitMs:streamMs-consumerMs,
+    consumerMs,
+    totalMs:duration(sample.end,sample.start)+sample.projectionMs,
+  };
+}

package/src/mode/react-loop.ts

@@ -267,6 +267,7 @@ export async function* runReactLoop(
     // selected model can actually execute the loader. Unknown/dynamic model ids
     // retain the historical tool-capable behavior, matching collect-stream's
     // conservative capability fallback.
+    const projectionStarted=performance.now();
     const descriptor = ctx.provider.models.find((candidate) => candidate.id === ctx.model);
     const availableSkills = descriptor?.supportsTools === false ? [] : ctx.skills.list();
     const systemPrompt = buildSystemPromptWithSkills(ctx.systemPrompt, availableSkills);
@@ -275,6 +276,7 @@ export async function* runReactLoop(
       ...(volatileText ? { trailingUserText: volatileText } : {}),
     });
 
+    const projectionMs=performance.now()-projectionStarted;
     yield await ctx.emit({
       type: 'provider_request',
       sessionId: ctx.sessionId,
@@ -284,11 +286,12 @@ export async function* runReactLoop(
       model: ctx.model,
     });
 
-    const { text, toolUses, stopReason, error, usage, reasoning } = await collectProviderStream(
+    const { text, toolUses, stopReason, error, usage, reasoning, timing } = await collectProviderStream(
       ctx,
       messages,
       {
         iteration,
+        projectionMs,
         stablePrefixIndex,
         // Volatile text is injected for this call only, never appended to the
         // log — the cache strategy must keep its rolling tail breakpoint
@@ -317,6 +320,7 @@ export async function* runReactLoop(
       provider: ctx.provider.name,
       model: ctx.model,
       ...usageEventFields(usage),
+      ...(timing ? {timing} : {}),
     });
 
     if (error) {

package/src/mode.ts

@@ -194,7 +194,7 @@ export interface ApprovalDecision {
 
 export interface ApprovalResolver {
   readonly name: string;
-  confirm(req: ApprovalRequest): Promise<ApprovalDecision>;
+  confirm(req: ApprovalRequest, context?: { readonly turnId: string }): Promise<ApprovalDecision>;
 }
 
 /**

package/src/permission.ts

@@ -39,6 +39,7 @@ export interface PendingToolCall {
 }
 
 export interface PermissionContext {
+  readonly turnId?: string;
   readonly toolDescription?: string;
   readonly skillContext?: string;
   readonly sessionId: string;
@@ -47,6 +48,8 @@ export interface PermissionContext {
 export interface PermissionResolver {
   readonly name: string;
   check(call: PendingToolCall, ctx: PermissionContext): Promise<PermissionDecision>;
+  /** Host-scoped approval that unattended modes must not bypass. */
+  mandatoryCheck?(call: PendingToolCall, ctx: PermissionContext): Promise<PermissionDecision | null>;
   /**
    * Optional prompt-free policy probe. Returns the decision the persistent
    * policy layer would make for this call (user deny/allow rules from

package/src/provider-schema-constraints.test.ts

@@ -0,0 +1,29 @@
+import { describe, expect, it } from 'vitest';
+import { z } from 'zod';
+import { zodToJsonSchema } from './provider-utils.js';
+
+describe('model-visible validation constraints', () => {
+  it('preserves integer limits including exclusive positive bounds', () => {
+    expect(zodToJsonSchema(z.number().int().min(500).max(8000))).toEqual({ type: 'integer', minimum: 500, maximum: 8000 });
+    expect(zodToJsonSchema(z.number().positive().lt(10))).toEqual({ type: 'number', exclusiveMinimum: 0, exclusiveMaximum: 10 });
+  });
+  it('preserves string lengths and supported key patterns', () => {
+    expect(zodToJsonSchema(z.string().min(1).max(160))).toEqual({ type: 'string', minLength: 1, maxLength: 160 });
+    expect(zodToJsonSchema(z.string().regex(/^(enter|tab)$/))).toEqual({ type: 'string', pattern: '^(enter|tab)$' });
+    expect(zodToJsonSchema(z.string().length(3))).toEqual({ type: 'string', minLength: 3, maxLength: 3 });
+  });
+  it('preserves array bounds', () => {
+    expect(zodToJsonSchema(z.array(z.string()).min(1).max(4))).toEqual({ type: 'array', items: { type: 'string' }, minItems: 1, maxItems: 4 });
+    expect(zodToJsonSchema(z.array(z.number()).length(2))).toEqual({ type: 'array', items: { type: 'number' }, minItems: 2, maxItems: 2 });
+  });
+  it('preserves an explicit null alternative through optional and transform wrappers', () => {
+    const schema = z.object({ root: z.object({ id: z.string().min(1) }).nullable().optional().transform(value => value ?? undefined) });
+    expect(zodToJsonSchema(schema)).toMatchObject({
+      required: [], properties: { root: { anyOf: [
+        { type: 'object', properties: { id: { type: 'string', minLength: 1 } }, required: ['id'] },
+        { type: 'null' },
+      ] } },
+    });
+    expect(schema.parse({ root: null })).toEqual({ root: undefined });
+  });
+});