@myagentroam/node 0.10.25 → 0.10.27

package/NOTICE

@@ -9,3 +9,29 @@ Author and licensing contact: aCHAOS (achaosxyz@gmail.com)
 Licensed under MyAgentRoam Enterprise Source-Available License 1.0; see
 ee/LICENSE and LICENSING.md. Independent core and third-party notices remain
 applicable; this attribution does not transfer any contributor's copyright.
+
+Third-party supplement: http_ece@1.2.0 (Web Push encryption dependency)
+The npm archive omits its license file; the upstream v1.2.0 text follows.
+Source: https://github.com/martinthomson/encrypted-content-encoding/blob/0562510a30819f52424724a6fd5504becacd98a1/LICENSE
+
+The MIT License (MIT)
+
+Copyright (c) 2015 Martin Thomson
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/connector.js

@@ -605,6 +605,8 @@ export class NodeConnector {
         });
         this.capabilities = this.projectComputerUseCapability(this.capabilities);
         this.marAgentRunController = new MarAgentManagedRunController(this.marAgentClient, {
+            createApproval: (input) => this.runtime.createApproval(input),
+            publishApproval: (input) => this.publishApprovalForRun(input),
             active: this.runState.active,
             adopt: (input) => this.runtime.adoptRun(input),
             promote: (sessionId, nativeSessionId) => this.sessionIdentityService.promote(sessionId, nativeSessionId),
@@ -1246,6 +1248,7 @@ export class NodeConnector {
             respondUserInput: (runId, requestId, answers) => this.openCodeRunController.respondUserInput(runId, requestId, answers)
         });
         this.marAgentClient.bindControl({
+            decideApproval: (input) => this.marAgentRunController.decideApproval(input),
             start: (envelope) => this.marAgentRunController.start(envelope),
             cancel: (runId, intent) => this.marAgentRunController.cancel(runId, intent),
             respondUserInput: (runId, requestId, answers) => this.marAgentRunController.respondUserInput(runId, requestId, answers)

package/dist/runner/mar-agent/managed-run-controller.js

@@ -29,6 +29,7 @@ export class MarAgentManagedRunController {
     #runtimeCreations = new Map();
     #sessionReleases = new Map();
     #questions = new Map();
+    #approvals = new Map();
     #normalizers = new Map();
     #resourceIdleTtlMs;
     #retainEnvironment;
@@ -674,6 +675,14 @@ export class MarAgentManagedRunController {
                     const runId = runtime?.activeRunId;
                     return runId === undefined ? {} : this.requestQuestion(runId, request, signal);
                 },
+                approval: this.host.createApproval && this.host.publishApproval
+                    ? (request, signal) => {
+                        const runId = runtime?.activeRunId;
+                        if (runId === undefined)
+                            return Promise.resolve('REJECTED');
+                        return this.requestApproval(runId, request, signal);
+                    }
+                    : undefined,
                 mcpCatalog: () => mcp.catalog(),
                 callMcp: async (call, signal, context) => mcp.call(call.name, call.arguments, signal, context?.expectedTool),
                 resourceIdleTtlMs: this.#resourceIdleTtlMs
@@ -847,7 +856,62 @@ export class MarAgentManagedRunController {
                 cancel();
         });
     }
+    decideApproval(input) {
+        const pending = this.#approvals.get(input.approvalId);
+        if (!pending || pending.runId !== input.runId)
+            return false;
+        pending.cleanup();
+        pending.resolve(input.decision);
+        return true;
+    }
+    requestApproval(runId, request, signal) {
+        signal.throwIfAborted();
+        return new Promise((resolve, reject) => {
+            const cleanup = () => {
+                signal.removeEventListener('abort', cancel);
+                this.#approvals.delete(request.approvalId);
+            };
+            const cancel = () => {
+                cleanup();
+                if (signal.reason instanceof Error &&
+                    'code' in signal.reason &&
+                    signal.reason.code === 'MAR_AGENT_APPROVAL_EXPIRED')
+                    this.host.emit(runId, 'approval.expired', { approvalId: request.approvalId });
+                reject(signal.reason);
+            };
+            const input = {
+                runId,
+                approvalId: request.approvalId,
+                expiresAt: request.expiresAt,
+                payload: {
+                    toolName: request.source.toolName,
+                    input: request.input,
+                    reason: request.reason,
+                    source: request.source
+                }
+            };
+            try {
+                this.host.createApproval(input);
+                this.#approvals.set(request.approvalId, { runId, resolve, cleanup });
+                signal.addEventListener('abort', cancel, { once: true });
+                if (signal.aborted)
+                    cancel();
+                else
+                    this.host.publishApproval(input);
+            }
+            catch (error) {
+                cleanup();
+                reject(error);
+            }
+        });
+    }
     clearInteractions(runId) {
+        for (const pending of this.#approvals.values()) {
+            if (pending.runId !== runId)
+                continue;
+            pending.cleanup();
+            pending.resolve('REJECTED');
+        }
         for (const [requestId, pending] of this.#questions) {
             if (pending.runId !== runId)
                 continue;

package/dist/service/runner-service.js

@@ -52,7 +52,9 @@ export class RunnerService {
         const defaults = this.database()
             .getRunnerDefaults()
             .map((configuration) => {
-            if (configuration.runner !== 'mar-agent' || configuration.access === 'full-access')
+            if (configuration.runner !== 'mar-agent' ||
+                configuration.access === 'auto' ||
+                configuration.access === 'full-access')
                 return configuration;
             const normalized = {
                 ...configuration,
@@ -80,7 +82,9 @@ export class RunnerService {
         const parsed = runnerDefaultConfigurationSchema.safeParse(data);
         if (!parsed.success)
             throw new Error('RUNNER_DEFAULT_INVALID');
-        if (parsed.data.runner === 'mar-agent' && parsed.data.access !== 'full-access')
+        if (parsed.data.runner === 'mar-agent' &&
+            parsed.data.access !== 'auto' &&
+            parsed.data.access !== 'full-access')
             throw new Error('RUNNER_DEFAULT_INVALID');
         return { defaults: this.database().saveRunnerDefaults(parsed.data) };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@myagentroam/node",
-  "version": "0.10.25",
+  "version": "0.10.27",
   "description": "MyAgentRoam Node runtime CLI.",
   "license": "Apache-2.0 AND GPL-2.0-or-later",
   "type": "module",
@@ -37,10 +37,10 @@
     "playwright": "1.62.1",
     "ws": "^8.21.3",
     "zod": "4.4.3",
-    "@myagentroam/agent": "0.10.25",
-    "@myagentroam/marctl": "0.10.3",
     "@myagentroam/code-navigation": "0.10.1",
-    "@myagentroam/protocol": "0.10.25"
+    "@myagentroam/protocol": "0.10.27",
+    "@myagentroam/marctl": "0.10.3",
+    "@myagentroam/agent": "0.10.27"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1"