@myagentroam/node 0.9.92 → 0.9.94

package/dist/connector.js

@@ -505,8 +505,6 @@ export class NodeConnector {
                 if (sessionId !== undefined)
                     this.sessionContextService.schedule(sessionId);
             },
-            createApproval: (input) => this.runtime.createApproval(input),
-            publishApproval: (input) => this.runEventBridge.publishApproval(input),
             run: (runId) => this.runtime.getRun(runId),
             commandState: (sessionId, commandId) => this.commandStates.get(sessionId, commandId),
             setCommandState: (sessionId, state) => this.commandStates.set(sessionId, state),
@@ -1036,7 +1034,6 @@ export class NodeConnector {
         this.marAgentClient.bindControl({
             start: (envelope) => this.marAgentRunController.start(envelope),
             cancel: (runId, intent) => this.marAgentRunController.cancel(runId, intent),
-            decideApproval: (input) => this.marAgentRunController.decideApproval(input),
             respondUserInput: (runId, requestId, answers) => this.marAgentRunController.respondUserInput(runId, requestId, answers)
         });
         this.codexClient.bindCommandControl({
@@ -1665,8 +1662,11 @@ export class NodeConnector {
     }
     prepareMissionSession(session) {
         const access = missionUnrestrictedAccess(session.runner);
-        const changed = session.access !== access;
-        const prepared = changed ? this.runtime.updateAgentSessionAccess(session.id, access) : session;
+        const requiresUpdate = session.access !== access;
+        const changed = session.runner !== 'mar-agent' && requiresUpdate;
+        const prepared = requiresUpdate
+            ? this.runtime.updateAgentSessionAccess(session.id, access)
+            : session;
         if (changed &&
             prepared.externalSessionId !== null &&
             prepared.model !== null &&

package/dist/runner/mar-agent/hosted-conversation-runtime.js

@@ -119,7 +119,6 @@ export class MarAgentHostedConversationRuntime {
                 prompt: input.prompt,
                 clientMessageId: input.clientMessageId,
                 modelId: input.modelId,
-                access: 'full-access',
                 images: []
             });
         }

package/dist/runner/mar-agent/managed-run-controller.js

@@ -19,7 +19,6 @@ export class MarAgentManagedRunController {
     #runtimeAcquisitions = new Map();
     #runtimeCreations = new Map();
     #sessionReleases = new Map();
-    #approvals = new Map();
     #questions = new Map();
     #normalizers = new Map();
     #resourceIdleTtlMs;
@@ -117,7 +116,6 @@ export class MarAgentManagedRunController {
                 ? { runtimeScopeId: context.marAgentRuntimeScopeId }
                 : {}),
             effort: session.effort ?? '',
-            access: session.access === 'full-access' ? 'full-access' : 'on-request',
             mode: command.id,
             secretEnvironment: context.secretEnvironment,
             externalSessionId: session.externalSessionId,
@@ -177,7 +175,6 @@ export class MarAgentManagedRunController {
                 ? { runtimeScopeId: payload.marAgentRuntimeScopeId }
                 : {}),
             effort: typeof payload.effort === 'string' ? payload.effort : '',
-            access: payload.access === 'full-access' ? 'full-access' : 'on-request',
             mode: payload.collaborationMode === 'plan' ? 'plan' : 'run',
             mcpServers,
             images: images.map((image) => ({
@@ -204,16 +201,6 @@ export class MarAgentManagedRunController {
         this.host.emit(runId, 'run.cancelling', { intent }, 'RUNNING');
         return true;
     }
-    decideApproval(input) {
-        const pending = this.#approvals.get(input.approvalId);
-        if (!pending || pending.runId !== input.runId)
-            return false;
-        clearTimeout(pending.timer);
-        pending.cleanup();
-        this.#approvals.delete(input.approvalId);
-        pending.resolve(input.decision === 'APPROVED' ? 'approved' : 'denied');
-        return true;
-    }
     respondUserInput(runId, requestId, answers) {
         const pending = this.#questions.get(requestId);
         if (!pending || pending.runId !== runId)
@@ -269,7 +256,6 @@ export class MarAgentManagedRunController {
             if (runtime.activeRunId !== undefined)
                 throw new Error('MAR_AGENT_SESSION_RUNTIME_ACTIVE');
             runtime.activeRunId = input.runId;
-            runtime.activeAccess = input.access;
             const executionMcpServers = input.mcpServers.filter((server) => server.lifecycle === 'EXECUTION');
             if (executionMcpServers.length > 0) {
                 executionMcpLease = await this.#mcpClients.acquire(executionMcpServers, input.cwd, {
@@ -290,7 +276,6 @@ export class MarAgentManagedRunController {
                 ...(input.clientMessageId ? { clientMessageId: input.clientMessageId } : {}),
                 modelId: input.model.id,
                 ...(reasoningEffort === undefined ? {} : { reasoningEffort }),
-                access: input.access,
                 images: input.images
             };
             const handle = input.mode === 'plan'
@@ -354,14 +339,12 @@ export class MarAgentManagedRunController {
     #prepareRuntimeForTerminal(runId, runtime) {
         if (runtime.activeRunId === runId) {
             delete runtime.activeRunId;
-            delete runtime.activeAccess;
         }
         this.#scheduleRuntimeRelease(runtime);
     }
     async #finishRuntimeExecution(runId, runtime) {
         if (runtime.activeRunId === runId) {
             delete runtime.activeRunId;
-            delete runtime.activeAccess;
         }
         this.#scheduleRuntimeRelease(runtime);
     }
@@ -445,13 +428,6 @@ export class MarAgentManagedRunController {
                 workspace: input.cwd,
                 environment: hostConfiguration.environment,
                 guaranteedCommands: hostConfiguration.guaranteedCommands,
-                approve: async (call, signal) => {
-                    const runId = runtime?.activeRunId;
-                    const access = runtime?.activeAccess;
-                    if (runId === undefined || access === undefined)
-                        return 'denied';
-                    return access === 'full-access' ? 'approved' : this.requestApproval(runId, call, signal);
-                },
                 question: async (request, signal) => {
                     const runId = runtime?.activeRunId;
                     return runId === undefined ? {} : this.requestQuestion(runId, request, signal);
@@ -546,42 +522,6 @@ export class MarAgentManagedRunController {
         })();
         return runtime.release;
     }
-    requestApproval(runId, call, signal = new AbortController().signal) {
-        const approvalId = randomUUID();
-        const expiresAt = Date.now() + 10 * 60_000;
-        const payload = {
-            category: call.name === 'apply_patch' ? 'FILE_CHANGE' : call.name === 'exec' ? 'COMMAND' : 'TOOL',
-            toolName: call.name,
-            reason: 'MAR Agent requested permission for this tool call.'
-        };
-        this.host.createApproval({ runId, approvalId, payload, expiresAt });
-        this.host.publishApproval({ runId, approvalId, payload, expiresAt });
-        return new Promise((resolve) => {
-            const cancel = () => settle('denied');
-            const settle = (decision) => {
-                const pending = this.#approvals.get(approvalId);
-                if (!pending)
-                    return;
-                clearTimeout(pending.timer);
-                pending.cleanup();
-                this.#approvals.delete(approvalId);
-                resolve(decision);
-            };
-            const timer = setTimeout(() => {
-                settle('denied');
-            }, 10 * 60_000);
-            timer.unref();
-            signal.addEventListener('abort', cancel, { once: true });
-            this.#approvals.set(approvalId, {
-                runId,
-                resolve,
-                timer,
-                cleanup: () => signal.removeEventListener('abort', cancel)
-            });
-            if (signal.aborted)
-                cancel();
-        });
-    }
     requestQuestion(runId, request, signal = new AbortController().signal) {
         const questions = normalizeQuestions(request.questions);
         if (questions.length === 0)
@@ -619,14 +559,6 @@ export class MarAgentManagedRunController {
         });
     }
     clearInteractions(runId) {
-        for (const [approvalId, pending] of this.#approvals) {
-            if (pending.runId !== runId)
-                continue;
-            clearTimeout(pending.timer);
-            pending.cleanup();
-            this.#approvals.delete(approvalId);
-            pending.resolve('denied');
-        }
         for (const [requestId, pending] of this.#questions) {
             if (pending.runId !== runId)
                 continue;

package/dist/runner/mar-agent-runner.js

@@ -87,12 +87,7 @@ export class MarAgentRunner extends AbstractRunner {
                 {
                     id: 'full-access',
                     label: 'Full access',
-                    description: 'Skip Agent approvals. Host validation remains active and no Agent sandbox is provided.'
-                },
-                {
-                    id: 'on-request',
-                    label: 'On-request',
-                    description: 'Ask before tools with side effects. This is not an operating-system sandbox.'
+                    description: 'Tools run without per-call Agent approval. Host validation remains active and no Agent sandbox is provided.'
                 }
             ],
             commands: [
@@ -145,7 +140,6 @@ export class MarAgentRunner extends AbstractRunner {
             capabilities: [
                 'turn.start',
                 'conversation',
-                'approval',
                 'user-input',
                 'plan',
                 'compact',
@@ -192,7 +186,6 @@ export class MarAgentRunner extends AbstractRunner {
             'turn.queue',
             'turn.interrupt',
             'run.cancel',
-            'approval.respond',
             'user-input.respond',
             'session.rename',
             'session.remove',

package/dist/service/native-session-projection-service.js

@@ -113,12 +113,16 @@ export class NativeSessionProjectionService {
         if (typeof current.model === 'string' &&
             typeof current.effort === 'string' &&
             typeof current.access === 'string')
-            return current;
+            return session.runner === 'mar-agent'
+                ? { ...current, access: 'full-access' }
+                : current;
         const saved = this.options
             .database()
             ?.getRunnerDefaults()
             .find((value) => value.runner === session.runner);
-        return saved ?? this.options.runners.require(session.runner).defaultConfiguration(workspace);
+        if (saved !== undefined)
+            return session.runner === 'mar-agent' ? { ...saved, access: 'full-access' } : saved;
+        return this.options.runners.require(session.runner).defaultConfiguration(workspace);
     }
     ensureResumedConfiguration(session) {
         const configuration = this.resumedConfiguration(session);

package/dist/service/runner-service.js

@@ -55,15 +55,29 @@ export class RunnerService {
             ? input.workspaceId
             : undefined;
         const environment = parseSecretEnvironment(input.secretEnvironment);
+        const defaults = this.database()
+            .getRunnerDefaults()
+            .map((configuration) => {
+            if (configuration.runner !== 'mar-agent' || configuration.access === 'full-access')
+                return configuration;
+            const normalized = {
+                ...configuration,
+                access: 'full-access'
+            };
+            this.database().saveRunnerDefaults(normalized);
+            return normalized;
+        });
         return {
             profiles: await this.refreshProfiles(workspaceId, environment),
-            defaults: this.database().getRunnerDefaults()
+            defaults
         };
     }
     saveDefaults(data) {
         const parsed = runnerDefaultConfigurationSchema.safeParse(data);
         if (!parsed.success)
             throw new Error('RUNNER_DEFAULT_INVALID');
+        if (parsed.data.runner === 'mar-agent' && parsed.data.access !== 'full-access')
+            throw new Error('RUNNER_DEFAULT_INVALID');
         return { defaults: this.database().saveRunnerDefaults(parsed.data) };
     }
 }

package/dist/service/session-lifecycle-service.js

@@ -83,8 +83,14 @@ export class SessionLifecycleService {
             runner: runner.name,
             model: typeof input.model === 'string' ? input.model : (saved?.model ?? fallback.model),
             effort: typeof input.effort === 'string' ? input.effort : (saved?.effort ?? fallback.effort),
-            access: typeof input.access === 'string' ? input.access : (saved?.access ?? fallback.access)
+            access: typeof input.access === 'string'
+                ? input.access
+                : runner.name === 'mar-agent'
+                    ? fallback.access
+                    : (saved?.access ?? fallback.access)
         };
+        if (runner.name === 'mar-agent' && configuration.access !== 'full-access')
+            throw new Error('SESSION_INVALID');
         const session = this.options.runtime.createAgentSession({
             workspaceId: input.workspaceId,
             runner: runner.name,
@@ -117,6 +123,8 @@ export class SessionLifecycleService {
             (await this.options.projection.createMetadataProjection(input.sessionId));
         if (current === undefined)
             throw new Error('SESSION_NOT_FOUND');
+        if (current.runner === 'mar-agent' && input.access !== 'full-access')
+            throw new Error('SESSION_INVALID');
         const session = this.options.runtime.updateAgentSessionConfiguration({
             sessionId: current.id,
             model: input.model,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@myagentroam/node",
-  "version": "0.9.92",
+  "version": "0.9.94",
   "description": "MyAgentRoam Node runtime CLI.",
   "license": "Apache-2.0",
   "type": "module",
@@ -28,8 +28,8 @@
     "node-pty": "1.1.0",
     "ws": "^8.21.3",
     "zod": "4.4.3",
-    "@myagentroam/agent": "0.9.92",
-    "@myagentroam/protocol": "0.9.92"
+    "@myagentroam/agent": "0.9.94",
+    "@myagentroam/protocol": "0.9.94"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1"