@myagentroam/node 0.10.24 → 0.10.26

package/NOTICE

@@ -9,3 +9,29 @@ Author and licensing contact: aCHAOS (achaosxyz@gmail.com)
 Licensed under MyAgentRoam Enterprise Source-Available License 1.0; see
 ee/LICENSE and LICENSING.md. Independent core and third-party notices remain
 applicable; this attribution does not transfer any contributor's copyright.
+
+Third-party supplement: http_ece@1.2.0 (Web Push encryption dependency)
+The npm archive omits its license file; the upstream v1.2.0 text follows.
+Source: https://github.com/martinthomson/encrypted-content-encoding/blob/0562510a30819f52424724a6fd5504becacd98a1/LICENSE
+
+The MIT License (MIT)
+
+Copyright (c) 2015 Martin Thomson
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/connector.js

@@ -310,7 +310,10 @@ export class NodeConnector {
             throw new Error('SCHEDULE_SERVICE_UNAVAILABLE');
         return this.sessionScheduleService.createFromMcp(input);
     }, (sessionId) => this.runtime.getAgentSession(sessionId)?.externalSessionId ?? sessionId);
-    mailNotificationMcpServer = new MailNotificationMcpServer((capability) => resolveMailNotificationCapability(this.runtime, capability), (request) => this.mailNotificationControl.request(request));
+    mailNotificationMcpServer = new MailNotificationMcpServer((capability) => resolveMailNotificationCapability(this.runtime, capability), (request) => this.mailNotificationControl.request(request), {
+        supported: () => this.mailNotificationControl.supportsChannels(),
+        send: (request) => this.mailNotificationControl.notification(request)
+    });
     runnerUsageReader;
     terminalManager;
     upgradeCoordinator;
@@ -392,7 +395,7 @@ export class NodeConnector {
         executionStarted: (executionId) => this.continuousRunCoordinator.executionStarted(executionId),
         keepRunActive: (sessionId) => (this.goalRetryTimers.has(sessionId) || this.goalContinuationPending.has(sessionId)) &&
             this.goalRuntime.get(sessionId)?.status === 'active',
-        executionTerminating: (executionId, status) => {
+        executionTerminating: (executionId, status, permissionStop) => {
             this.gitOperationService.executionFinished(executionId);
             const pending = this.continuousRunCoordinator.pending(executionId);
             if (pending?.goal === undefined)
@@ -401,6 +404,11 @@ export class NodeConnector {
             const progressed = this.goalExecutionProgress.delete(executionId);
             if (!this.goalGenerationCurrent(pending.sessionId, pending.goal))
                 return;
+            if (permissionStop !== undefined) {
+                this.retireGoalContinuation(pending.sessionId);
+                this.continuousRunCoordinator.removeGoalQueue(pending.sessionId);
+                return;
+            }
             const disposition = this.goalRuntime.recordExecutionResult(pending.sessionId, {
                 failed: status === 'FAILED',
                 progressed: status !== 'SUCCEEDED' || progressed
@@ -597,6 +605,8 @@ export class NodeConnector {
         });
         this.capabilities = this.projectComputerUseCapability(this.capabilities);
         this.marAgentRunController = new MarAgentManagedRunController(this.marAgentClient, {
+            createApproval: (input) => this.runtime.createApproval(input),
+            publishApproval: (input) => this.publishApprovalForRun(input),
             active: this.runState.active,
             adopt: (input) => this.runtime.adoptRun(input),
             promote: (sessionId, nativeSessionId) => this.sessionIdentityService.promote(sessionId, nativeSessionId),
@@ -910,7 +920,7 @@ export class NodeConnector {
                         targetId: input.workspaceId,
                         catalogEntryId: 'mar-internal-mail',
                         serverName: 'mar_notification',
-                        displayName: 'MAR email notification',
+                        displayName: 'MAR notification',
                         version: '1.0.0',
                         enabled: true,
                         runtime: { transport: 'HTTP', url: 'https://127.0.0.1.invalid/mcp', headers: {} },
@@ -1135,7 +1145,9 @@ export class NodeConnector {
                     return undefined;
                 const current = this.goalRuntime.get(session.id);
                 if (current?.status === 'active') {
-                    if (intent !== 'REPLACE_CURRENT')
+                    const idlePausedGoal = this.runtime.activeSessionRun(session.id) === undefined &&
+                        this.runtime.sessionQueue(session.id).paused;
+                    if (intent !== 'REPLACE_CURRENT' && !idlePausedGoal)
                         return undefined;
                     this.invalidateGoalContinuation(session.id);
                     const resumed = this.goalRuntime.resume(session.id);
@@ -1236,6 +1248,7 @@ export class NodeConnector {
             respondUserInput: (runId, requestId, answers) => this.openCodeRunController.respondUserInput(runId, requestId, answers)
         });
         this.marAgentClient.bindControl({
+            decideApproval: (input) => this.marAgentRunController.decideApproval(input),
             start: (envelope) => this.marAgentRunController.start(envelope),
             cancel: (runId, intent) => this.marAgentRunController.cancel(runId, intent),
             respondUserInput: (runId, requestId, answers) => this.marAgentRunController.respondUserInput(runId, requestId, answers)
@@ -1325,6 +1338,7 @@ export class NodeConnector {
             config: () => this.config,
             register: async (nodeId, credential, payload) => {
                 await this.connectionLifecycle.register(nodeId, credential);
+                this.mailNotificationControl.setFeatures(payload);
                 this.usageOutbox?.connected(payload);
             },
             usageAck: (payload) => this.usageOutbox?.handle(createEnvelope('usage.ack', payload)),
@@ -1340,6 +1354,7 @@ export class NodeConnector {
             connected: (payload) => {
                 this.usageOutbox?.connected(payload);
                 this.connectionLifecycle.connected();
+                this.mailNotificationControl.setFeatures(payload);
             },
             close: (code, reason) => this.controlChannel.close(code, reason),
             inspectWorkspace: (envelope) => this.workspaceCoordinator.inspect(envelope),
@@ -2092,7 +2107,7 @@ export class NodeConnector {
         return goalExit;
     }
     prepareGoalSession(session) {
-        const access = goalUnrestrictedAccess(session.runner);
+        const access = goalUnrestrictedAccess(session.runner, session.access);
         const requiresUpdate = session.access !== access;
         const changed = session.runner !== 'mar-agent' && requiresUpdate;
         const prepared = requiresUpdate

package/dist/runner/abstract-runner.js

@@ -219,7 +219,12 @@ function resolvedMcpServers(raw, secrets) {
                             mar_create_scheduled_task: ['direct', 'programmatic'],
                             mar_update_scheduled_task: ['direct', 'programmatic']
                         }
-                        : { mar_send_email_notification: ['direct', 'programmatic'] },
+                        : {
+                            mar_send_email_notification: ['direct', 'programmatic'],
+                            ...(record['notificationChannels'] === true
+                                ? { mar_send_notification: ['direct', 'programmatic'] }
+                                : {})
+                        },
                 transport: 'STDIO',
                 command: record['command'],
                 args: record['args'],
@@ -236,7 +241,8 @@ function resolvedMcpServers(raw, secrets) {
                         }
                         : {
                             MAR_MAIL_MCP_ENDPOINT: record['endpoint'],
-                            MAR_MAIL_MCP_TOKEN: secrets[record['secretName']]
+                            MAR_MAIL_MCP_TOKEN: secrets[record['secretName']],
+                            MAR_NOTIFICATION_CHANNELS: record['notificationChannels'] === true ? '1' : '0'
                         })
             });
             continue;

package/dist/runner/mar-agent/conversation-normalizer.js

@@ -77,9 +77,12 @@ export class MarAgentConversationNormalizer {
                 return [];
             if (event.type === 'tool.started')
                 return this.#toolStarted(event);
-            if (event.type === 'tool.completed')
-                return [...this.#toolCompleted(event), ...this.#codeModeToolResults(event)];
-            return [...this.#toolFailed(event), ...this.#codeModeToolResults(event)];
+            const permissionStop = permissionStopForToolEvent(event);
+            const outerItems = event.type === 'tool.completed' ? this.#toolCompleted(event) : this.#toolFailed(event);
+            return [
+                ...withPermissionStop(outerItems, permissionStop),
+                ...this.#codeModeToolResults(event)
+            ];
         }
         if (event.type === 'todo.updated')
             return [
@@ -351,6 +354,14 @@ export class MarAgentConversationNormalizer {
         return [];
     }
 }
+function permissionStopForToolEvent(event) {
+    const direct = record(event)?.permissionStop;
+    const cell = record(record(event)?.data)?.permissionStop;
+    return (direct ?? cell);
+}
+function withPermissionStop(items, permissionStop) {
+    return permissionStop === undefined ? items : items.map((item) => ({ ...item, permissionStop }));
+}
 function codeModeToolResults(event) {
     if ((event.type !== 'tool.completed' && event.type !== 'tool.failed') ||
         (event.toolName !== 'code_exec' && event.toolName !== 'code_exec_wait'))

package/dist/runner/mar-agent/history-projection.js

@@ -76,7 +76,9 @@ export function projectMarAgentHistory(session, entries, options = {}) {
             turns.set(event.turnId, {
                 ...turn,
                 status: event.type === 'execution.completed'
-                    ? 'SUCCEEDED'
+                    ? event.permissionStop === undefined
+                        ? 'SUCCEEDED'
+                        : 'INTERRUPTED'
                     : event.type === 'execution.failed'
                         ? 'FAILED'
                         : 'INTERRUPTED',
@@ -90,12 +92,12 @@ export function projectMarAgentHistory(session, entries, options = {}) {
             const attachments = projected.generatedImages === undefined
                 ? []
                 : (options.registerGeneratedImages?.(event.sessionId, projected.generatedImages) ?? []);
-            replace(projectionTurn, historyItem(session, projectionTurn, projected.itemId, projected.kind, projected.status, attachments.length === 0 ? projected.payload : { ...projected.payload, attachments }, at));
+            replace(projectionTurn, historyItem(session, projectionTurn, projected.itemId, projected.kind, projected.status, attachments.length === 0 ? projected.payload : { ...projected.payload, attachments }, at, projected.permissionStop));
         }
     }
     return [...turns.values()];
 }
-function historyItem(session, turn, id, kind, status, payload, at) {
+function historyItem(session, turn, id, kind, status, payload, at, permissionStop) {
     return {
         id,
         sessionId: session.id,
@@ -107,6 +109,7 @@ function historyItem(session, turn, id, kind, status, payload, at) {
         kind,
         status,
         payload,
+        ...(permissionStop === undefined ? {} : { permissionStop }),
         startedAt: at,
         completedAt: status === 'IN_PROGRESS' ? null : at
     };

package/dist/runner/mar-agent/hosted-conversation-runtime.js

@@ -140,6 +140,7 @@ export class MarAgentHostedConversationRuntime {
                 prompt: input.prompt,
                 clientMessageId: input.clientMessageId,
                 modelId: input.modelId,
+                permissionMode: 'full-access',
                 images: []
             });
         }

package/dist/runner/mar-agent/managed-run-controller.js

@@ -29,6 +29,7 @@ export class MarAgentManagedRunController {
     #runtimeCreations = new Map();
     #sessionReleases = new Map();
     #questions = new Map();
+    #approvals = new Map();
     #normalizers = new Map();
     #resourceIdleTtlMs;
     #retainEnvironment;
@@ -202,6 +203,7 @@ export class MarAgentManagedRunController {
                 ? { runtimeScopeId: payload.marAgentRuntimeScopeId }
                 : {}),
             effort: typeof payload.effort === 'string' ? payload.effort : '',
+            ...(payload.access === undefined ? {} : { access: payload.access }),
             mode: payload.collaborationMode === 'plan' ? 'plan' : 'run',
             mcpServers,
             images: images.map((image) => ({
@@ -414,6 +416,9 @@ export class MarAgentManagedRunController {
                 ...(input.clientMessageId ? { clientMessageId: input.clientMessageId } : {}),
                 modelId: input.model.id,
                 ...(reasoningEffort === undefined ? {} : { reasoningEffort }),
+                ...(input.mode === 'compact' || input.access === undefined || input.access === null
+                    ? {}
+                    : { permissionMode: input.access }),
                 images: input.images
             };
             const metadata = input.mode === 'compact' || !runtime.automaticTitleEnabled
@@ -475,20 +480,34 @@ export class MarAgentManagedRunController {
                     });
                 });
             await this.host.syncTitle(session.id, input.cwd);
-            const status = result.status === 'completed'
-                ? 'SUCCEEDED'
-                : result.status === 'cancelled'
-                    ? 'CANCELLED'
-                    : 'FAILED';
+            const permissionStop = result.status === 'completed' ? result.permissionStop : undefined;
+            const status = permissionStop !== undefined
+                ? 'INTERRUPTED'
+                : result.status === 'completed'
+                    ? 'SUCCEEDED'
+                    : result.status === 'cancelled'
+                        ? 'CANCELLED'
+                        : 'FAILED';
             this.#prepareRuntimeForTerminal(input.runId, runtime);
             this.host.emit(input.runId, status === 'SUCCEEDED'
                 ? 'run.completed'
                 : status === 'CANCELLED'
                     ? 'run.cancelled'
-                    : 'run.failed', {
+                    : status === 'FAILED'
+                        ? 'run.failed'
+                        : 'run.completed', {
                 status,
                 ...(result.errorCode ? { code: result.errorCode } : {}),
-                ...(result.errorMessage ? { message: result.errorMessage } : {})
+                ...(result.errorMessage ? { message: result.errorMessage } : {}),
+                ...(permissionStop === undefined
+                    ? {}
+                    : {
+                        permissionStop,
+                        code: permissionStop.action === 'ask'
+                            ? 'MAR_AGENT_PERMISSION_ASK'
+                            : 'MAR_AGENT_PERMISSION_DENIED',
+                        message: permissionStop.reason
+                    })
             }, status);
         }
         catch (error) {
@@ -656,6 +675,14 @@ export class MarAgentManagedRunController {
                     const runId = runtime?.activeRunId;
                     return runId === undefined ? {} : this.requestQuestion(runId, request, signal);
                 },
+                approval: this.host.createApproval && this.host.publishApproval
+                    ? (request, signal) => {
+                        const runId = runtime?.activeRunId;
+                        if (runId === undefined)
+                            return Promise.resolve('REJECTED');
+                        return this.requestApproval(runId, request, signal);
+                    }
+                    : undefined,
                 mcpCatalog: () => mcp.catalog(),
                 callMcp: async (call, signal, context) => mcp.call(call.name, call.arguments, signal, context?.expectedTool),
                 resourceIdleTtlMs: this.#resourceIdleTtlMs
@@ -829,7 +856,62 @@ export class MarAgentManagedRunController {
                 cancel();
         });
     }
+    decideApproval(input) {
+        const pending = this.#approvals.get(input.approvalId);
+        if (!pending || pending.runId !== input.runId)
+            return false;
+        pending.cleanup();
+        pending.resolve(input.decision);
+        return true;
+    }
+    requestApproval(runId, request, signal) {
+        signal.throwIfAborted();
+        return new Promise((resolve, reject) => {
+            const cleanup = () => {
+                signal.removeEventListener('abort', cancel);
+                this.#approvals.delete(request.approvalId);
+            };
+            const cancel = () => {
+                cleanup();
+                if (signal.reason instanceof Error &&
+                    'code' in signal.reason &&
+                    signal.reason.code === 'MAR_AGENT_APPROVAL_EXPIRED')
+                    this.host.emit(runId, 'approval.expired', { approvalId: request.approvalId });
+                reject(signal.reason);
+            };
+            const input = {
+                runId,
+                approvalId: request.approvalId,
+                expiresAt: request.expiresAt,
+                payload: {
+                    toolName: request.source.toolName,
+                    input: request.input,
+                    reason: request.reason,
+                    source: request.source
+                }
+            };
+            try {
+                this.host.createApproval(input);
+                this.#approvals.set(request.approvalId, { runId, resolve, cleanup });
+                signal.addEventListener('abort', cancel, { once: true });
+                if (signal.aborted)
+                    cancel();
+                else
+                    this.host.publishApproval(input);
+            }
+            catch (error) {
+                cleanup();
+                reject(error);
+            }
+        });
+    }
     clearInteractions(runId) {
+        for (const pending of this.#approvals.values()) {
+            if (pending.runId !== runId)
+                continue;
+            pending.cleanup();
+            pending.resolve('REJECTED');
+        }
         for (const [requestId, pending] of this.#questions) {
             if (pending.runId !== runId)
                 continue;
@@ -869,6 +951,7 @@ export class MarAgentManagedRunController {
                     kind: item.kind,
                     status: item.status,
                     payload: attachments.length === 0 ? item.payload : { ...item.payload, attachments },
+                    ...(item.permissionStop === undefined ? {} : { permissionStop: item.permissionStop }),
                     ...(item.merge === undefined ? {} : { merge: item.merge })
                 });
             }

package/dist/runner/mar-agent-runner.js

@@ -106,6 +106,11 @@ export class MarAgentRunner extends AbstractRunner {
                 ...(index === 0 ? { isDefault: true } : {})
             })),
             accessOptions: [
+                {
+                    id: 'auto',
+                    label: 'Auto',
+                    description: 'MAR Agent may stop before a tool call and request confirmation. Host validation remains active and no Agent sandbox is provided.'
+                },
                 {
                     id: 'full-access',
                     label: 'Full access',
@@ -188,7 +193,7 @@ export class MarAgentRunner extends AbstractRunner {
             runner: 'mar-agent',
             model: model?.id ?? '',
             effort: model?.defaultEffort ?? '',
-            access: 'full-access'
+            access: 'auto'
         };
     }
     presentSession(session, capabilities, context) {

package/dist/runtime-state.js

@@ -1,4 +1,5 @@
 import { randomUUID } from 'node:crypto';
+import { permissionStopSchema } from '@myagentroam/protocol';
 /**
  * Deliberately process-local runtime domain.  No method in this class writes
  * into Node SQLite: a Node restart loses active runs, approvals, leases and
@@ -1329,6 +1330,9 @@ export class NodeRuntimeState {
                     kind: projected.kind,
                     status,
                     payload: mergeConversationItemPayload(existing?.payload, projected),
+                    ...(projected.permissionStop === undefined
+                        ? {}
+                        : { permissionStop: projected.permissionStop }),
                     startedAt: existing?.startedAt ?? event.createdAt,
                     completedAt: completedConversationItem(status) ? event.createdAt : null
                 };
@@ -1442,11 +1446,13 @@ function conversationItemFromEvent(event) {
         !isRecord(payload))
         return undefined;
     const append = event.payload.append;
+    const permissionStop = permissionStopSchema.safeParse(event.payload.permissionStop);
     return {
         itemId,
         kind,
         status,
         payload,
+        ...(permissionStop.success ? { permissionStop: permissionStop.data } : {}),
         merge: event.payload.merge === true,
         ...(append === 'sections' || append === 'outputPreview' || append === 'outputSummary'
             ? { append }

package/dist/service/goal-runtime.js

@@ -1,7 +1,9 @@
 import { randomUUID } from 'node:crypto';
 import { parseComposerTags, serializeComposerTag } from '@myagentroam/protocol';
-export function goalUnrestrictedAccess(runner) {
-    if (runner === 'codex' || runner === 'mar-agent')
+export function goalUnrestrictedAccess(runner, currentAccess) {
+    if (runner === 'mar-agent')
+        return currentAccess ?? 'full-access';
+    if (runner === 'codex')
         return 'full-access';
     if (runner === 'claude-code')
         return 'bypass';

package/dist/service/mail-notification-control.js

@@ -1,10 +1,18 @@
-import { createEnvelope, mailNotificationRequestSchema, mailNotificationResponseSchema } from '@myagentroam/protocol';
+import { createEnvelope, notificationChannelsRequestSchema, notificationChannelsResponseSchema, mailNotificationRequestSchema, mailNotificationResponseSchema } from '@myagentroam/protocol';
 export class MailNotificationControl {
     sendEnvelope;
     pending = new Map();
     generation = 0;
     connectedToServer = false;
     closed = false;
+    channelsAvailable = false;
+    supportsChannels() {
+        return this.channelsAvailable && this.connectedToServer && !this.closed;
+    }
+    setFeatures(payload) {
+        const features = payload;
+        this.channelsAvailable = features?.notificationChannels?.apiVersion === 1;
+    }
     constructor(sendEnvelope) {
         this.sendEnvelope = sendEnvelope;
     }
@@ -14,6 +22,7 @@ export class MailNotificationControl {
     }
     disconnected() {
         this.connectedToServer = false;
+        this.channelsAvailable = false;
         this.generation++;
         for (const pending of [...this.pending.values()])
             pending.reject(new Error('MAIL_DELIVERY_UNCERTAIN'));
@@ -23,11 +32,23 @@ export class MailNotificationControl {
         this.disconnected();
     }
     handle(envelope) {
-        if (envelope.type !== 'mail.notification.response')
+        if (!['mail.notification.response', 'notification.channels.response'].includes(envelope.type))
             return false;
         const pending = envelope.replyTo === undefined ? undefined : this.pending.get(envelope.replyTo);
-        if (pending === undefined || pending.generation !== this.generation)
+        if (pending === undefined ||
+            pending.generation !== this.generation ||
+            pending.channel !== envelope.type)
+            return true;
+        if (envelope.type === 'notification.channels.response') {
+            const result = notificationChannelsResponseSchema.safeParse(envelope.payload);
+            if (!result.success)
+                pending.reject(new Error('NOTIFICATION_RESPONSE_INVALID'));
+            else if ('error' in result.data)
+                pending.reject(new Error(result.data.error.code));
+            else
+                pending.resolve(result.data);
             return true;
+        }
         const parsed = mailNotificationResponseSchema.safeParse(envelope.payload);
         if (!parsed.success)
             pending.reject(new Error('MAIL_RESPONSE_INVALID'));
@@ -38,9 +59,22 @@ export class MailNotificationControl {
         return true;
     }
     request(input) {
+        return this.requestEnvelope(createEnvelope('mail.notification.send', mailNotificationRequestSchema.parse(input))).then(() => undefined);
+    }
+    notification(input) {
+        if (!this.supportsChannels())
+            return Promise.reject(new Error('NOTIFICATION_UNSUPPORTED'));
+        return this.requestEnvelope(createEnvelope('notification.channels.send', notificationChannelsRequestSchema.parse(input))).then((result) => {
+            if (result === undefined)
+                throw new Error('NOTIFICATION_RESPONSE_INVALID');
+            if (result.callId !== input.callId)
+                throw new Error('NOTIFICATION_RESPONSE_INVALID');
+            return result;
+        });
+    }
+    requestEnvelope(envelope) {
         if (!this.connectedToServer || this.closed)
             return Promise.reject(new Error('MAIL_SERVER_UNAVAILABLE'));
-        const envelope = createEnvelope('mail.notification.send', mailNotificationRequestSchema.parse(input));
         return new Promise((resolve, reject) => {
             const settle = (action) => {
                 const pending = this.pending.get(envelope.id);
@@ -54,7 +88,10 @@ export class MailNotificationControl {
             timer.unref();
             this.pending.set(envelope.id, {
                 generation: this.generation,
-                resolve: () => settle(resolve),
+                channel: envelope.type === 'mail.notification.send'
+                    ? 'mail.notification.response'
+                    : 'notification.channels.response',
+                resolve: (result) => settle(() => resolve(result)),
                 reject: (error) => settle(() => reject(error)),
                 timer
             });

package/dist/service/mail-notification-mcp-server.js

@@ -5,19 +5,21 @@ import { createServer } from 'node:net';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { mailNotificationRequestSchema } from '@myagentroam/protocol';
+import { notificationInputSchema, notificationChannelsRequestSchema, mailNotificationRequestSchema } from '@myagentroam/protocol';
 export class MailNotificationMcpServer {
     resolve;
     send;
+    channels;
     capabilities = new Map();
     sockets = new Set();
     endpoint = process.platform === 'win32'
         ? `\\\\.\\pipe\\mar-mail-${process.pid}-${randomUUID()}`
         : join(tmpdir(), `mar-mail-${process.pid}-${randomUUID()}.sock`);
     listening;
-    constructor(resolve, send) {
+    constructor(resolve, send, channels) {
         this.resolve = resolve;
         this.send = send;
+        this.channels = channels;
     }
     async installation(capability) {
         await this.listen();
@@ -27,6 +29,7 @@ export class MailNotificationMcpServer {
         return {
             installation: {
                 __marMail: true,
+                notificationChannels: this.channels?.supported() === true,
                 serverName: 'mar_notification',
                 enabled: true,
                 command: process.execPath,
@@ -94,6 +97,32 @@ export class MailNotificationMcpServer {
             const current = this.resolve(capability);
             if (current === undefined)
                 throw new Error('MAIL_CAPABILITY_STALE');
+            if (request['tool'] === 'mar_send_notification') {
+                if (this.channels?.supported() !== true)
+                    throw new Error('NOTIFICATION_UNSUPPORTED');
+                const args = request['arguments'];
+                if (args === null || typeof args !== 'object' || Array.isArray(args))
+                    throw new Error('NOTIFICATION_INPUT_INVALID');
+                const { callId, ...input } = args;
+                const parsed = notificationInputSchema.safeParse(input);
+                if (!parsed.success)
+                    throw new Error('NOTIFICATION_INPUT_INVALID');
+                const value = notificationChannelsRequestSchema.safeParse({
+                    ...parsed.data,
+                    ...current,
+                    callId,
+                    apiVersion: 1,
+                    eventType: 'notification',
+                    kind: 'AGENT_MESSAGE',
+                    occurredAt: Date.now(),
+                    sessionTitle: current.sessionId
+                });
+                if (!value.success)
+                    throw new Error('NOTIFICATION_INPUT_INVALID');
+                const result = await this.channels.send(value.data);
+                socket.end(`${JSON.stringify({ result })}\n`);
+                return;
+            }
             if (request['tool'] !== 'mar_send_email_notification')
                 throw new Error('MAIL_TOOL_INVALID');
             const args = request['arguments'];
@@ -121,7 +150,7 @@ export class MailNotificationMcpServer {
             socket.end(`${JSON.stringify({ result: { accepted: true } })}\n`);
         }
         catch (error) {
-            const code = error instanceof Error && /^MAIL_[A-Z0-9_]+$/u.test(error.message)
+            const code = error instanceof Error && /^(MAIL|NOTIFICATION)_[A-Z0-9_]+$/u.test(error.message)
                 ? error.message
                 : 'MAIL_DELIVERY_UNCERTAIN';
             socket.end(`${JSON.stringify({ error: code })}\n`);

package/dist/service/mail-notification-mcp-stdio.js

@@ -3,6 +3,7 @@ import { connect } from 'node:net';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { z } from 'zod';
+import { notificationInputSchema } from '@myagentroam/protocol';
 const endpoint = process.env['MAR_MAIL_MCP_ENDPOINT'];
 const token = process.env['MAR_MAIL_MCP_TOKEN'];
 if (endpoint === undefined || token === undefined)
@@ -29,13 +30,38 @@ server.registerTool('mar_send_email_notification', {
     const value = await request({ ...args, callId: randomUUID() });
     return { content: [{ type: 'text', text: JSON.stringify(value) }] };
 });
+if (process.env['MAR_NOTIFICATION_CHANNELS'] === '1') {
+    server.registerTool('mar_send_notification', {
+        description: 'Send a real notification from the current authorized Workspace execution. Defaults to push to the initiating user; email requires an explicitly authorized recipientEmail. Channels and registered Push clients are independent. Push may be suppressed while any workbench connection is open or unavailable due to system, browser, or OS settings. Acceptance is not delivery. Do not disclose secrets or send to unauthorized recipients. Each invocation is a new side effect; do not retry after an uncertain or partial result.',
+        inputSchema: {
+            channels: z
+                .array(z.enum(['push', 'email']))
+                .min(1)
+                .max(2)
+                .optional(),
+            title: z
+                .string()
+                .max(160)
+                .regex(/^[^\r\n]*$/u)
+                .optional(),
+            message: z.string().min(1).max(4000),
+            recipientEmail: z.string().email().max(320).optional(),
+            templateId: z.enum(['', 'notification-en-US', 'notification-zh-CN']).optional()
+        }
+    }, async (args) => {
+        const input = notificationInputSchema.parse(args);
+        const value = await request({ ...input, callId: randomUUID() }, 'mar_send_notification');
+        return { content: [{ type: 'text', text: JSON.stringify(value) }] };
+    });
+}
 await server.connect(new StdioServerTransport());
-function request(args) {
+function request(args, tool = 'mar_send_email_notification') {
     return new Promise((resolve, reject) => {
         const socket = connect(endpoint);
+        socket.setTimeout(35_000, () => socket.destroy(new Error('MAIL_DELIVERY_UNCERTAIN')));
         let body = '';
         socket.setEncoding('utf8');
-        socket.once('connect', () => socket.write(`${JSON.stringify({ token, tool: 'mar_send_email_notification', arguments: args })}\n`));
+        socket.once('connect', () => socket.write(`${JSON.stringify({ token, tool, arguments: args })}\n`));
         socket.on('data', (chunk) => {
             body += chunk;
             if (body.length > 16_000)

package/dist/service/native-session-projection-service.js

@@ -130,9 +130,13 @@ export class NativeSessionProjectionService {
             effort: typeof session.effort === 'string' ? session.effort : fallback.effort,
             access: typeof session.access === 'string' && session.access.trim().length > 0
                 ? session.access
-                : fallback.access
+                : session.runner === 'mar-agent'
+                    ? 'full-access'
+                    : fallback.access
         };
-        return session.runner === 'mar-agent'
+        return session.runner === 'mar-agent' &&
+            configuration.access !== 'auto' &&
+            configuration.access !== 'full-access'
             ? { ...configuration, access: 'full-access' }
             : configuration;
     }

package/dist/service/run-event-service.js

@@ -1,4 +1,4 @@
-import { runPerformanceSchema } from '@myagentroam/protocol';
+import { permissionStopSchema, runPerformanceSchema } from '@myagentroam/protocol';
 import { nodeLog } from '../operational.js';
 import { isPlainRecord, isTerminalRunStatus } from '../util/node-operation-parsers.js';
 const COALESCE_MS = 200;
@@ -122,13 +122,20 @@ export class RunEventService {
         let finalStatus;
         let manuallyInterrupted = false;
         if (terminalCurrentExecution) {
-            this.options.executionTerminating?.(executionId, status);
+            const parsedStop = isPlainRecord(payload)
+                ? permissionStopSchema.safeParse(payload.permissionStop)
+                : undefined;
+            const permissionStop = parsedStop?.success ? parsedStop.data : undefined;
+            if (permissionStop !== undefined)
+                this.options.runtime.pauseSessionQueue(run.sessionId);
+            this.options.executionTerminating?.(executionId, status, permissionStop);
             this.options.state.active.delete(executionId);
             const interrupted = this.options.state.interruptRequested.delete(executionId);
             manuallyInterrupted = interrupted;
             const queue = this.options.runtime.sessionQueue(run.sessionId);
-            const continues = (!queue.paused && queue.itemIds.length > 0) ||
-                this.options.keepRunActive?.(run.sessionId) === true;
+            const continues = permissionStop === undefined &&
+                ((!queue.paused && queue.itemIds.length > 0) ||
+                    this.options.keepRunActive?.(run.sessionId) === true);
             if (!continues) {
                 finalStatus =
                     status === 'CANCELLED' || interrupted ? 'INTERRUPTED' : status;

package/dist/service/runner-service.js

@@ -52,7 +52,9 @@ export class RunnerService {
         const defaults = this.database()
             .getRunnerDefaults()
             .map((configuration) => {
-            if (configuration.runner !== 'mar-agent' || configuration.access === 'full-access')
+            if (configuration.runner !== 'mar-agent' ||
+                configuration.access === 'auto' ||
+                configuration.access === 'full-access')
                 return configuration;
             const normalized = {
                 ...configuration,
@@ -80,7 +82,9 @@ export class RunnerService {
         const parsed = runnerDefaultConfigurationSchema.safeParse(data);
         if (!parsed.success)
             throw new Error('RUNNER_DEFAULT_INVALID');
-        if (parsed.data.runner === 'mar-agent' && parsed.data.access !== 'full-access')
+        if (parsed.data.runner === 'mar-agent' &&
+            parsed.data.access !== 'auto' &&
+            parsed.data.access !== 'full-access')
             throw new Error('RUNNER_DEFAULT_INVALID');
         return { defaults: this.database().saveRunnerDefaults(parsed.data) };
     }

package/dist/service/session-lifecycle-service.js

@@ -95,7 +95,7 @@ export class SessionLifecycleService {
                     ? fallback.access
                     : (saved?.access ?? fallback.access)
         };
-        if (runner.name === 'mar-agent' && configuration.access !== 'full-access')
+        if (runner.name === 'mar-agent' && !['auto', 'full-access'].includes(configuration.access))
             throw new Error('SESSION_INVALID');
         const session = this.options.runtime.createAgentSession({
             workspaceId: input.workspaceId,
@@ -129,7 +129,7 @@ export class SessionLifecycleService {
             (await this.options.projection.createMetadataProjection(input.sessionId));
         if (current === undefined)
             throw new Error('SESSION_NOT_FOUND');
-        if (current.runner === 'mar-agent' && input.access !== 'full-access')
+        if (current.runner === 'mar-agent' && !['auto', 'full-access'].includes(input.access))
             throw new Error('SESSION_INVALID');
         const session = this.options.runtime.updateAgentSessionConfiguration({
             sessionId: current.id,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@myagentroam/node",
-  "version": "0.10.24",
+  "version": "0.10.26",
   "description": "MyAgentRoam Node runtime CLI.",
   "license": "Apache-2.0 AND GPL-2.0-or-later",
   "type": "module",
@@ -37,10 +37,10 @@
     "playwright": "1.62.1",
     "ws": "^8.21.3",
     "zod": "4.4.3",
-    "@myagentroam/agent": "0.10.24",
+    "@myagentroam/agent": "0.10.26",
     "@myagentroam/code-navigation": "0.10.1",
-    "@myagentroam/marctl": "0.10.3",
-    "@myagentroam/protocol": "0.10.24"
+    "@myagentroam/protocol": "0.10.26",
+    "@myagentroam/marctl": "0.10.3"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1"