@myagentroam/node 0.10.23 → 0.10.25

package/dist/connector.js

@@ -310,7 +310,10 @@ export class NodeConnector {
             throw new Error('SCHEDULE_SERVICE_UNAVAILABLE');
         return this.sessionScheduleService.createFromMcp(input);
     }, (sessionId) => this.runtime.getAgentSession(sessionId)?.externalSessionId ?? sessionId);
-    mailNotificationMcpServer = new MailNotificationMcpServer((capability) => resolveMailNotificationCapability(this.runtime, capability), (request) => this.mailNotificationControl.request(request));
+    mailNotificationMcpServer = new MailNotificationMcpServer((capability) => resolveMailNotificationCapability(this.runtime, capability), (request) => this.mailNotificationControl.request(request), {
+        supported: () => this.mailNotificationControl.supportsChannels(),
+        send: (request) => this.mailNotificationControl.notification(request)
+    });
     runnerUsageReader;
     terminalManager;
     upgradeCoordinator;
@@ -392,7 +395,7 @@ export class NodeConnector {
         executionStarted: (executionId) => this.continuousRunCoordinator.executionStarted(executionId),
         keepRunActive: (sessionId) => (this.goalRetryTimers.has(sessionId) || this.goalContinuationPending.has(sessionId)) &&
             this.goalRuntime.get(sessionId)?.status === 'active',
-        executionTerminating: (executionId, status) => {
+        executionTerminating: (executionId, status, permissionStop) => {
             this.gitOperationService.executionFinished(executionId);
             const pending = this.continuousRunCoordinator.pending(executionId);
             if (pending?.goal === undefined)
@@ -401,6 +404,11 @@ export class NodeConnector {
             const progressed = this.goalExecutionProgress.delete(executionId);
             if (!this.goalGenerationCurrent(pending.sessionId, pending.goal))
                 return;
+            if (permissionStop !== undefined) {
+                this.retireGoalContinuation(pending.sessionId);
+                this.continuousRunCoordinator.removeGoalQueue(pending.sessionId);
+                return;
+            }
             const disposition = this.goalRuntime.recordExecutionResult(pending.sessionId, {
                 failed: status === 'FAILED',
                 progressed: status !== 'SUCCEEDED' || progressed
@@ -910,7 +918,7 @@ export class NodeConnector {
                         targetId: input.workspaceId,
                         catalogEntryId: 'mar-internal-mail',
                         serverName: 'mar_notification',
-                        displayName: 'MAR email notification',
+                        displayName: 'MAR notification',
                         version: '1.0.0',
                         enabled: true,
                         runtime: { transport: 'HTTP', url: 'https://127.0.0.1.invalid/mcp', headers: {} },
@@ -1135,7 +1143,9 @@ export class NodeConnector {
                     return undefined;
                 const current = this.goalRuntime.get(session.id);
                 if (current?.status === 'active') {
-                    if (intent !== 'REPLACE_CURRENT')
+                    const idlePausedGoal = this.runtime.activeSessionRun(session.id) === undefined &&
+                        this.runtime.sessionQueue(session.id).paused;
+                    if (intent !== 'REPLACE_CURRENT' && !idlePausedGoal)
                         return undefined;
                     this.invalidateGoalContinuation(session.id);
                     const resumed = this.goalRuntime.resume(session.id);
@@ -1325,6 +1335,7 @@ export class NodeConnector {
             config: () => this.config,
             register: async (nodeId, credential, payload) => {
                 await this.connectionLifecycle.register(nodeId, credential);
+                this.mailNotificationControl.setFeatures(payload);
                 this.usageOutbox?.connected(payload);
             },
             usageAck: (payload) => this.usageOutbox?.handle(createEnvelope('usage.ack', payload)),
@@ -1340,6 +1351,7 @@ export class NodeConnector {
             connected: (payload) => {
                 this.usageOutbox?.connected(payload);
                 this.connectionLifecycle.connected();
+                this.mailNotificationControl.setFeatures(payload);
             },
             close: (code, reason) => this.controlChannel.close(code, reason),
             inspectWorkspace: (envelope) => this.workspaceCoordinator.inspect(envelope),
@@ -2092,7 +2104,7 @@ export class NodeConnector {
         return goalExit;
     }
     prepareGoalSession(session) {
-        const access = goalUnrestrictedAccess(session.runner);
+        const access = goalUnrestrictedAccess(session.runner, session.access);
         const requiresUpdate = session.access !== access;
         const changed = session.runner !== 'mar-agent' && requiresUpdate;
         const prepared = requiresUpdate

package/dist/runner/abstract-runner.js

@@ -209,14 +209,22 @@ function resolvedMcpServers(raw, secrets) {
                 lifecycle: 'EXECUTION',
                 origin: 'BUILTIN',
                 allowedToolCallers: record['__marGoal'] === true
-                    ? { mar_get_goal: ['direct', 'programmatic'], mar_update_goal: ['direct'] }
+                    ? {
+                        mar_get_goal: ['direct', 'programmatic'],
+                        mar_update_goal: ['direct', 'programmatic']
+                    }
                     : record['__marScheduled'] === true
                         ? {
                             mar_get_scheduled_task: ['direct', 'programmatic'],
-                            mar_create_scheduled_task: ['direct'],
-                            mar_update_scheduled_task: ['direct']
+                            mar_create_scheduled_task: ['direct', 'programmatic'],
+                            mar_update_scheduled_task: ['direct', 'programmatic']
                         }
-                        : { mar_send_email_notification: ['direct'] },
+                        : {
+                            mar_send_email_notification: ['direct', 'programmatic'],
+                            ...(record['notificationChannels'] === true
+                                ? { mar_send_notification: ['direct', 'programmatic'] }
+                                : {})
+                        },
                 transport: 'STDIO',
                 command: record['command'],
                 args: record['args'],
@@ -233,7 +241,8 @@ function resolvedMcpServers(raw, secrets) {
                         }
                         : {
                             MAR_MAIL_MCP_ENDPOINT: record['endpoint'],
-                            MAR_MAIL_MCP_TOKEN: secrets[record['secretName']]
+                            MAR_MAIL_MCP_TOKEN: secrets[record['secretName']],
+                            MAR_NOTIFICATION_CHANNELS: record['notificationChannels'] === true ? '1' : '0'
                         })
             });
             continue;

package/dist/runner/mar-agent/conversation-normalizer.js

@@ -77,9 +77,12 @@ export class MarAgentConversationNormalizer {
                 return [];
             if (event.type === 'tool.started')
                 return this.#toolStarted(event);
-            if (event.type === 'tool.completed')
-                return [...this.#toolCompleted(event), ...this.#codeModeToolResults(event)];
-            return [...this.#toolFailed(event), ...this.#codeModeToolResults(event)];
+            const permissionStop = permissionStopForToolEvent(event);
+            const outerItems = event.type === 'tool.completed' ? this.#toolCompleted(event) : this.#toolFailed(event);
+            return [
+                ...withPermissionStop(outerItems, permissionStop),
+                ...this.#codeModeToolResults(event)
+            ];
         }
         if (event.type === 'todo.updated')
             return [
@@ -351,6 +354,14 @@ export class MarAgentConversationNormalizer {
         return [];
     }
 }
+function permissionStopForToolEvent(event) {
+    const direct = record(event)?.permissionStop;
+    const cell = record(record(event)?.data)?.permissionStop;
+    return (direct ?? cell);
+}
+function withPermissionStop(items, permissionStop) {
+    return permissionStop === undefined ? items : items.map((item) => ({ ...item, permissionStop }));
+}
 function codeModeToolResults(event) {
     if ((event.type !== 'tool.completed' && event.type !== 'tool.failed') ||
         (event.toolName !== 'code_exec' && event.toolName !== 'code_exec_wait'))

package/dist/runner/mar-agent/history-projection.js

@@ -76,7 +76,9 @@ export function projectMarAgentHistory(session, entries, options = {}) {
             turns.set(event.turnId, {
                 ...turn,
                 status: event.type === 'execution.completed'
-                    ? 'SUCCEEDED'
+                    ? event.permissionStop === undefined
+                        ? 'SUCCEEDED'
+                        : 'INTERRUPTED'
                     : event.type === 'execution.failed'
                         ? 'FAILED'
                         : 'INTERRUPTED',
@@ -90,12 +92,12 @@ export function projectMarAgentHistory(session, entries, options = {}) {
             const attachments = projected.generatedImages === undefined
                 ? []
                 : (options.registerGeneratedImages?.(event.sessionId, projected.generatedImages) ?? []);
-            replace(projectionTurn, historyItem(session, projectionTurn, projected.itemId, projected.kind, projected.status, attachments.length === 0 ? projected.payload : { ...projected.payload, attachments }, at));
+            replace(projectionTurn, historyItem(session, projectionTurn, projected.itemId, projected.kind, projected.status, attachments.length === 0 ? projected.payload : { ...projected.payload, attachments }, at, projected.permissionStop));
         }
     }
     return [...turns.values()];
 }
-function historyItem(session, turn, id, kind, status, payload, at) {
+function historyItem(session, turn, id, kind, status, payload, at, permissionStop) {
     return {
         id,
         sessionId: session.id,
@@ -107,6 +109,7 @@ function historyItem(session, turn, id, kind, status, payload, at) {
         kind,
         status,
         payload,
+        ...(permissionStop === undefined ? {} : { permissionStop }),
         startedAt: at,
         completedAt: status === 'IN_PROGRESS' ? null : at
     };

package/dist/runner/mar-agent/hosted-conversation-runtime.js

@@ -140,6 +140,7 @@ export class MarAgentHostedConversationRuntime {
                 prompt: input.prompt,
                 clientMessageId: input.clientMessageId,
                 modelId: input.modelId,
+                permissionMode: 'full-access',
                 images: []
             });
         }

package/dist/runner/mar-agent/managed-run-controller.js

@@ -202,6 +202,7 @@ export class MarAgentManagedRunController {
                 ? { runtimeScopeId: payload.marAgentRuntimeScopeId }
                 : {}),
             effort: typeof payload.effort === 'string' ? payload.effort : '',
+            ...(payload.access === undefined ? {} : { access: payload.access }),
             mode: payload.collaborationMode === 'plan' ? 'plan' : 'run',
             mcpServers,
             images: images.map((image) => ({
@@ -414,6 +415,9 @@ export class MarAgentManagedRunController {
                 ...(input.clientMessageId ? { clientMessageId: input.clientMessageId } : {}),
                 modelId: input.model.id,
                 ...(reasoningEffort === undefined ? {} : { reasoningEffort }),
+                ...(input.mode === 'compact' || input.access === undefined || input.access === null
+                    ? {}
+                    : { permissionMode: input.access }),
                 images: input.images
             };
             const metadata = input.mode === 'compact' || !runtime.automaticTitleEnabled
@@ -475,20 +479,34 @@ export class MarAgentManagedRunController {
                     });
                 });
             await this.host.syncTitle(session.id, input.cwd);
-            const status = result.status === 'completed'
-                ? 'SUCCEEDED'
-                : result.status === 'cancelled'
-                    ? 'CANCELLED'
-                    : 'FAILED';
+            const permissionStop = result.status === 'completed' ? result.permissionStop : undefined;
+            const status = permissionStop !== undefined
+                ? 'INTERRUPTED'
+                : result.status === 'completed'
+                    ? 'SUCCEEDED'
+                    : result.status === 'cancelled'
+                        ? 'CANCELLED'
+                        : 'FAILED';
             this.#prepareRuntimeForTerminal(input.runId, runtime);
             this.host.emit(input.runId, status === 'SUCCEEDED'
                 ? 'run.completed'
                 : status === 'CANCELLED'
                     ? 'run.cancelled'
-                    : 'run.failed', {
+                    : status === 'FAILED'
+                        ? 'run.failed'
+                        : 'run.completed', {
                 status,
                 ...(result.errorCode ? { code: result.errorCode } : {}),
-                ...(result.errorMessage ? { message: result.errorMessage } : {})
+                ...(result.errorMessage ? { message: result.errorMessage } : {}),
+                ...(permissionStop === undefined
+                    ? {}
+                    : {
+                        permissionStop,
+                        code: permissionStop.action === 'ask'
+                            ? 'MAR_AGENT_PERMISSION_ASK'
+                            : 'MAR_AGENT_PERMISSION_DENIED',
+                        message: permissionStop.reason
+                    })
             }, status);
         }
         catch (error) {
@@ -869,6 +887,7 @@ export class MarAgentManagedRunController {
                     kind: item.kind,
                     status: item.status,
                     payload: attachments.length === 0 ? item.payload : { ...item.payload, attachments },
+                    ...(item.permissionStop === undefined ? {} : { permissionStop: item.permissionStop }),
                     ...(item.merge === undefined ? {} : { merge: item.merge })
                 });
             }

package/dist/runner/mar-agent-runner.js

@@ -106,6 +106,11 @@ export class MarAgentRunner extends AbstractRunner {
                 ...(index === 0 ? { isDefault: true } : {})
             })),
             accessOptions: [
+                {
+                    id: 'auto',
+                    label: 'Auto',
+                    description: 'MAR Agent may stop before a tool call and request confirmation. Host validation remains active and no Agent sandbox is provided.'
+                },
                 {
                     id: 'full-access',
                     label: 'Full access',
@@ -188,7 +193,7 @@ export class MarAgentRunner extends AbstractRunner {
             runner: 'mar-agent',
             model: model?.id ?? '',
             effort: model?.defaultEffort ?? '',
-            access: 'full-access'
+            access: 'auto'
         };
     }
     presentSession(session, capabilities, context) {

package/dist/runtime-state.js

@@ -1,4 +1,5 @@
 import { randomUUID } from 'node:crypto';
+import { permissionStopSchema } from '@myagentroam/protocol';
 /**
  * Deliberately process-local runtime domain.  No method in this class writes
  * into Node SQLite: a Node restart loses active runs, approvals, leases and
@@ -1329,6 +1330,9 @@ export class NodeRuntimeState {
                     kind: projected.kind,
                     status,
                     payload: mergeConversationItemPayload(existing?.payload, projected),
+                    ...(projected.permissionStop === undefined
+                        ? {}
+                        : { permissionStop: projected.permissionStop }),
                     startedAt: existing?.startedAt ?? event.createdAt,
                     completedAt: completedConversationItem(status) ? event.createdAt : null
                 };
@@ -1442,11 +1446,13 @@ function conversationItemFromEvent(event) {
         !isRecord(payload))
         return undefined;
     const append = event.payload.append;
+    const permissionStop = permissionStopSchema.safeParse(event.payload.permissionStop);
     return {
         itemId,
         kind,
         status,
         payload,
+        ...(permissionStop.success ? { permissionStop: permissionStop.data } : {}),
         merge: event.payload.merge === true,
         ...(append === 'sections' || append === 'outputPreview' || append === 'outputSummary'
             ? { append }

package/dist/service/goal-runtime.js

@@ -1,7 +1,9 @@
 import { randomUUID } from 'node:crypto';
 import { parseComposerTags, serializeComposerTag } from '@myagentroam/protocol';
-export function goalUnrestrictedAccess(runner) {
-    if (runner === 'codex' || runner === 'mar-agent')
+export function goalUnrestrictedAccess(runner, currentAccess) {
+    if (runner === 'mar-agent')
+        return currentAccess ?? 'full-access';
+    if (runner === 'codex')
         return 'full-access';
     if (runner === 'claude-code')
         return 'bypass';

package/dist/service/mail-notification-control.js

@@ -1,10 +1,18 @@
-import { createEnvelope, mailNotificationRequestSchema, mailNotificationResponseSchema } from '@myagentroam/protocol';
+import { createEnvelope, notificationChannelsRequestSchema, notificationChannelsResponseSchema, mailNotificationRequestSchema, mailNotificationResponseSchema } from '@myagentroam/protocol';
 export class MailNotificationControl {
     sendEnvelope;
     pending = new Map();
     generation = 0;
     connectedToServer = false;
     closed = false;
+    channelsAvailable = false;
+    supportsChannels() {
+        return this.channelsAvailable && this.connectedToServer && !this.closed;
+    }
+    setFeatures(payload) {
+        const features = payload;
+        this.channelsAvailable = features?.notificationChannels?.apiVersion === 1;
+    }
     constructor(sendEnvelope) {
         this.sendEnvelope = sendEnvelope;
     }
@@ -14,6 +22,7 @@ export class MailNotificationControl {
     }
     disconnected() {
         this.connectedToServer = false;
+        this.channelsAvailable = false;
         this.generation++;
         for (const pending of [...this.pending.values()])
             pending.reject(new Error('MAIL_DELIVERY_UNCERTAIN'));
@@ -23,11 +32,23 @@ export class MailNotificationControl {
         this.disconnected();
     }
     handle(envelope) {
-        if (envelope.type !== 'mail.notification.response')
+        if (!['mail.notification.response', 'notification.channels.response'].includes(envelope.type))
             return false;
         const pending = envelope.replyTo === undefined ? undefined : this.pending.get(envelope.replyTo);
-        if (pending === undefined || pending.generation !== this.generation)
+        if (pending === undefined ||
+            pending.generation !== this.generation ||
+            pending.channel !== envelope.type)
+            return true;
+        if (envelope.type === 'notification.channels.response') {
+            const result = notificationChannelsResponseSchema.safeParse(envelope.payload);
+            if (!result.success)
+                pending.reject(new Error('NOTIFICATION_RESPONSE_INVALID'));
+            else if ('error' in result.data)
+                pending.reject(new Error(result.data.error.code));
+            else
+                pending.resolve(result.data);
             return true;
+        }
         const parsed = mailNotificationResponseSchema.safeParse(envelope.payload);
         if (!parsed.success)
             pending.reject(new Error('MAIL_RESPONSE_INVALID'));
@@ -38,9 +59,22 @@ export class MailNotificationControl {
         return true;
     }
     request(input) {
+        return this.requestEnvelope(createEnvelope('mail.notification.send', mailNotificationRequestSchema.parse(input))).then(() => undefined);
+    }
+    notification(input) {
+        if (!this.supportsChannels())
+            return Promise.reject(new Error('NOTIFICATION_UNSUPPORTED'));
+        return this.requestEnvelope(createEnvelope('notification.channels.send', notificationChannelsRequestSchema.parse(input))).then((result) => {
+            if (result === undefined)
+                throw new Error('NOTIFICATION_RESPONSE_INVALID');
+            if (result.callId !== input.callId)
+                throw new Error('NOTIFICATION_RESPONSE_INVALID');
+            return result;
+        });
+    }
+    requestEnvelope(envelope) {
         if (!this.connectedToServer || this.closed)
             return Promise.reject(new Error('MAIL_SERVER_UNAVAILABLE'));
-        const envelope = createEnvelope('mail.notification.send', mailNotificationRequestSchema.parse(input));
         return new Promise((resolve, reject) => {
             const settle = (action) => {
                 const pending = this.pending.get(envelope.id);
@@ -54,7 +88,10 @@ export class MailNotificationControl {
             timer.unref();
             this.pending.set(envelope.id, {
                 generation: this.generation,
-                resolve: () => settle(resolve),
+                channel: envelope.type === 'mail.notification.send'
+                    ? 'mail.notification.response'
+                    : 'notification.channels.response',
+                resolve: (result) => settle(() => resolve(result)),
                 reject: (error) => settle(() => reject(error)),
                 timer
             });

package/dist/service/mail-notification-mcp-server.js

@@ -5,19 +5,21 @@ import { createServer } from 'node:net';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { mailNotificationRequestSchema } from '@myagentroam/protocol';
+import { notificationInputSchema, notificationChannelsRequestSchema, mailNotificationRequestSchema } from '@myagentroam/protocol';
 export class MailNotificationMcpServer {
     resolve;
     send;
+    channels;
     capabilities = new Map();
     sockets = new Set();
     endpoint = process.platform === 'win32'
         ? `\\\\.\\pipe\\mar-mail-${process.pid}-${randomUUID()}`
         : join(tmpdir(), `mar-mail-${process.pid}-${randomUUID()}.sock`);
     listening;
-    constructor(resolve, send) {
+    constructor(resolve, send, channels) {
         this.resolve = resolve;
         this.send = send;
+        this.channels = channels;
     }
     async installation(capability) {
         await this.listen();
@@ -27,6 +29,7 @@ export class MailNotificationMcpServer {
         return {
             installation: {
                 __marMail: true,
+                notificationChannels: this.channels?.supported() === true,
                 serverName: 'mar_notification',
                 enabled: true,
                 command: process.execPath,
@@ -94,6 +97,32 @@ export class MailNotificationMcpServer {
             const current = this.resolve(capability);
             if (current === undefined)
                 throw new Error('MAIL_CAPABILITY_STALE');
+            if (request['tool'] === 'mar_send_notification') {
+                if (this.channels?.supported() !== true)
+                    throw new Error('NOTIFICATION_UNSUPPORTED');
+                const args = request['arguments'];
+                if (args === null || typeof args !== 'object' || Array.isArray(args))
+                    throw new Error('NOTIFICATION_INPUT_INVALID');
+                const { callId, ...input } = args;
+                const parsed = notificationInputSchema.safeParse(input);
+                if (!parsed.success)
+                    throw new Error('NOTIFICATION_INPUT_INVALID');
+                const value = notificationChannelsRequestSchema.safeParse({
+                    ...parsed.data,
+                    ...current,
+                    callId,
+                    apiVersion: 1,
+                    eventType: 'notification',
+                    kind: 'AGENT_MESSAGE',
+                    occurredAt: Date.now(),
+                    sessionTitle: current.sessionId
+                });
+                if (!value.success)
+                    throw new Error('NOTIFICATION_INPUT_INVALID');
+                const result = await this.channels.send(value.data);
+                socket.end(`${JSON.stringify({ result })}\n`);
+                return;
+            }
             if (request['tool'] !== 'mar_send_email_notification')
                 throw new Error('MAIL_TOOL_INVALID');
             const args = request['arguments'];
@@ -121,7 +150,7 @@ export class MailNotificationMcpServer {
             socket.end(`${JSON.stringify({ result: { accepted: true } })}\n`);
         }
         catch (error) {
-            const code = error instanceof Error && /^MAIL_[A-Z0-9_]+$/u.test(error.message)
+            const code = error instanceof Error && /^(MAIL|NOTIFICATION)_[A-Z0-9_]+$/u.test(error.message)
                 ? error.message
                 : 'MAIL_DELIVERY_UNCERTAIN';
             socket.end(`${JSON.stringify({ error: code })}\n`);

package/dist/service/mail-notification-mcp-stdio.js

@@ -3,6 +3,7 @@ import { connect } from 'node:net';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { z } from 'zod';
+import { notificationInputSchema } from '@myagentroam/protocol';
 const endpoint = process.env['MAR_MAIL_MCP_ENDPOINT'];
 const token = process.env['MAR_MAIL_MCP_TOKEN'];
 if (endpoint === undefined || token === undefined)
@@ -29,13 +30,38 @@ server.registerTool('mar_send_email_notification', {
     const value = await request({ ...args, callId: randomUUID() });
     return { content: [{ type: 'text', text: JSON.stringify(value) }] };
 });
+if (process.env['MAR_NOTIFICATION_CHANNELS'] === '1') {
+    server.registerTool('mar_send_notification', {
+        description: 'Send a real notification from the current authorized Workspace execution. Defaults to push to the initiating user; email requires an explicitly authorized recipientEmail. Channels and registered Push clients are independent. Push may be suppressed while any workbench connection is open or unavailable due to system, browser, or OS settings. Acceptance is not delivery. Do not disclose secrets or send to unauthorized recipients. Each invocation is a new side effect; do not retry after an uncertain or partial result.',
+        inputSchema: {
+            channels: z
+                .array(z.enum(['push', 'email']))
+                .min(1)
+                .max(2)
+                .optional(),
+            title: z
+                .string()
+                .max(160)
+                .regex(/^[^\r\n]*$/u)
+                .optional(),
+            message: z.string().min(1).max(4000),
+            recipientEmail: z.string().email().max(320).optional(),
+            templateId: z.enum(['', 'notification-en-US', 'notification-zh-CN']).optional()
+        }
+    }, async (args) => {
+        const input = notificationInputSchema.parse(args);
+        const value = await request({ ...input, callId: randomUUID() }, 'mar_send_notification');
+        return { content: [{ type: 'text', text: JSON.stringify(value) }] };
+    });
+}
 await server.connect(new StdioServerTransport());
-function request(args) {
+function request(args, tool = 'mar_send_email_notification') {
     return new Promise((resolve, reject) => {
         const socket = connect(endpoint);
+        socket.setTimeout(35_000, () => socket.destroy(new Error('MAIL_DELIVERY_UNCERTAIN')));
         let body = '';
         socket.setEncoding('utf8');
-        socket.once('connect', () => socket.write(`${JSON.stringify({ token, tool: 'mar_send_email_notification', arguments: args })}\n`));
+        socket.once('connect', () => socket.write(`${JSON.stringify({ token, tool, arguments: args })}\n`));
         socket.on('data', (chunk) => {
             body += chunk;
             if (body.length > 16_000)

package/dist/service/native-session-projection-service.js

@@ -130,9 +130,13 @@ export class NativeSessionProjectionService {
             effort: typeof session.effort === 'string' ? session.effort : fallback.effort,
             access: typeof session.access === 'string' && session.access.trim().length > 0
                 ? session.access
-                : fallback.access
+                : session.runner === 'mar-agent'
+                    ? 'full-access'
+                    : fallback.access
         };
-        return session.runner === 'mar-agent'
+        return session.runner === 'mar-agent' &&
+            configuration.access !== 'auto' &&
+            configuration.access !== 'full-access'
             ? { ...configuration, access: 'full-access' }
             : configuration;
     }

package/dist/service/run-event-service.js

@@ -1,4 +1,4 @@
-import { runPerformanceSchema } from '@myagentroam/protocol';
+import { permissionStopSchema, runPerformanceSchema } from '@myagentroam/protocol';
 import { nodeLog } from '../operational.js';
 import { isPlainRecord, isTerminalRunStatus } from '../util/node-operation-parsers.js';
 const COALESCE_MS = 200;
@@ -122,13 +122,20 @@ export class RunEventService {
         let finalStatus;
         let manuallyInterrupted = false;
         if (terminalCurrentExecution) {
-            this.options.executionTerminating?.(executionId, status);
+            const parsedStop = isPlainRecord(payload)
+                ? permissionStopSchema.safeParse(payload.permissionStop)
+                : undefined;
+            const permissionStop = parsedStop?.success ? parsedStop.data : undefined;
+            if (permissionStop !== undefined)
+                this.options.runtime.pauseSessionQueue(run.sessionId);
+            this.options.executionTerminating?.(executionId, status, permissionStop);
             this.options.state.active.delete(executionId);
             const interrupted = this.options.state.interruptRequested.delete(executionId);
             manuallyInterrupted = interrupted;
             const queue = this.options.runtime.sessionQueue(run.sessionId);
-            const continues = (!queue.paused && queue.itemIds.length > 0) ||
-                this.options.keepRunActive?.(run.sessionId) === true;
+            const continues = permissionStop === undefined &&
+                ((!queue.paused && queue.itemIds.length > 0) ||
+                    this.options.keepRunActive?.(run.sessionId) === true);
             if (!continues) {
                 finalStatus =
                     status === 'CANCELLED' || interrupted ? 'INTERRUPTED' : status;

package/dist/service/session-lifecycle-service.js

@@ -95,7 +95,7 @@ export class SessionLifecycleService {
                     ? fallback.access
                     : (saved?.access ?? fallback.access)
         };
-        if (runner.name === 'mar-agent' && configuration.access !== 'full-access')
+        if (runner.name === 'mar-agent' && !['auto', 'full-access'].includes(configuration.access))
             throw new Error('SESSION_INVALID');
         const session = this.options.runtime.createAgentSession({
             workspaceId: input.workspaceId,
@@ -129,7 +129,7 @@ export class SessionLifecycleService {
             (await this.options.projection.createMetadataProjection(input.sessionId));
         if (current === undefined)
             throw new Error('SESSION_NOT_FOUND');
-        if (current.runner === 'mar-agent' && input.access !== 'full-access')
+        if (current.runner === 'mar-agent' && !['auto', 'full-access'].includes(input.access))
             throw new Error('SESSION_INVALID');
         const session = this.options.runtime.updateAgentSessionConfiguration({
             sessionId: current.id,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@myagentroam/node",
-  "version": "0.10.23",
+  "version": "0.10.25",
   "description": "MyAgentRoam Node runtime CLI.",
   "license": "Apache-2.0 AND GPL-2.0-or-later",
   "type": "module",
@@ -37,10 +37,10 @@
     "playwright": "1.62.1",
     "ws": "^8.21.3",
     "zod": "4.4.3",
-    "@myagentroam/agent": "0.10.23",
+    "@myagentroam/agent": "0.10.25",
+    "@myagentroam/marctl": "0.10.3",
     "@myagentroam/code-navigation": "0.10.1",
-    "@myagentroam/marctl": "0.10.2",
-    "@myagentroam/protocol": "0.10.23"
+    "@myagentroam/protocol": "0.10.25"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1"