@qduc/term2 0.11.1 → 0.12.0

package/dist/services/approval/background-subagent-approval-controller.js

@@ -0,0 +1,65 @@
+import { getCallIdFromObject, getToolInfoFromInterruption } from '../interruption-info.js';
+import { ApprovalDecisionExecutor } from './approval-decision-executor.js';
+import { BackgroundSubagentApprovalQueue, } from './background-subagent-approval-queue.js';
+/**
+ * Session-owned policy/control boundary for approvals paused by adopted child
+ * leases. Root ApprovalState is deliberately not involved: its continuation
+ * belongs to the foreground turn, while this controller only touches the
+ * continuation retained by the matching lease.
+ */
+export class BackgroundSubagentApprovalController {
+    #queue = new BackgroundSubagentApprovalQueue();
+    #executor;
+    constructor({ logger, sessionId, nestedCompatibility, }) {
+        this.#executor = new ApprovalDecisionExecutor({ logger, sessionId, nestedCompatibility });
+    }
+    getSnapshot() {
+        return this.#queue.getSnapshot();
+    }
+    subscribe(listener) {
+        return this.#queue.subscribe(listener);
+    }
+    close() {
+        return this.#queue.close();
+    }
+    resolve(request) {
+        return this.#queue.resolve(request);
+    }
+    /** Sink installed on the subagent runtime for pauses after a successful move. */
+    publish = (pause) => {
+        const { toolName, rawArguments } = getToolInfoFromInterruption(pause.interruption);
+        const toolCallId = getCallIdFromObject(pause.interruption) ?? `${pause.runId}:${pause.generation}`;
+        const entry = {
+            runId: pause.runId,
+            generation: pause.generation,
+            toolCallId,
+            toolName,
+            argumentsText: typeof rawArguments === 'string' ? rawArguments : JSON.stringify(rawArguments ?? null),
+        };
+        this.#queue.enqueue(entry, {
+            onResolve: (_entry, decision) => pause.apply((application) => this.#apply(application, pause.role, decision))
+                ? { kind: 'applied' }
+                : { kind: 'rejected' },
+            onRelease: () => {
+                // Queue closure/removal is a terminal ownership event. The lease owns
+                // cancellation and will release its own pending continuation.
+            },
+        });
+    };
+    #apply(application, role, decision) {
+        const pending = {
+            state: application.handle,
+            interruption: application.interruption,
+            emittedCommandIds: new Set(),
+            toolCallArgumentsById: new Map(),
+            owner: { kind: 'subagent', agentId: application.runId, role },
+        };
+        this.#executor.resolve({
+            pendingApprovalContext: pending,
+            answer: decision.answer,
+            rejectionReason: decision.rejectionReason,
+        });
+        return true;
+    }
+}
+//# sourceMappingURL=background-subagent-approval-controller.js.map

package/dist/services/approval/background-subagent-approval-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"background-subagent-approval-controller.js","sourceRoot":"","sources":["../../../source/services/approval/background-subagent-approval-controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAG3F,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EACL,+BAA+B,GAIhC,MAAM,yCAAyC,CAAC;AAIjD;;;;;GAKG;AACH,MAAM,OAAO,oCAAoC;IACtC,MAAM,GAAG,IAAI,+BAA+B,EAAE,CAAC;IAC/C,SAAS,CAA2B;IAE7C,YAAY,EACV,MAAM,EACN,SAAS,EACT,mBAAmB,GAKpB;QACC,IAAI,CAAC,SAAS,GAAG,IAAI,wBAAwB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;IAED,SAAS,CAAC,QAAoB;QAC5B,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,OAAoD;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,iFAAiF;IACjF,OAAO,GAAG,CAAC,KAAsC,EAAQ,EAAE;QACzD,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,2BAA2B,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACnF,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACnG,MAAM,KAAK,GAAG;YACZ,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU;YACV,QAAQ;YACR,aAAa,EAAE,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,IAAI,IAAI,CAAC;SACtG,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE;YACzB,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAC9B,KAAK,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC1E,CAAC,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE;gBAC9B,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE;YACnC,SAAS,EAAE,GAAG,EAAE;gBACd,sEAAsE;gBACtE,8DAA8D;YAChE,CAAC;SACF,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,CACJ,WAES,EACT,IAAY,EACZ,QAA4C;QAE5C,MAAM,OAAO,GAA2B;YACtC,KAAK,EAAE,WAAW,CAAC,MAAM;YACzB,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,iBAAiB,EAAE,IAAI,GAAG,EAAE;YAC5B,qBAAqB,EAAE,IAAI,GAAG,EAAE;YAChC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE;SAC9D,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACrB,sBAAsB,EAAE,OAAO;YAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,eAAe,EAAE,QAAQ,CAAC,eAAe;SAC1C,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/services/approval/background-subagent-approval-queue.d.ts

@@ -0,0 +1,137 @@
+/**
+ * Stable identity for one approval pause in an adopted subagent run.
+ *
+ * A generation is necessary because one live run can pause again after its
+ * earlier continuation resumes. Tool name and arguments are included in the
+ * identity checked against UI requests, so a delayed action cannot approve a
+ * different tool call that happens to share a call id.
+ */
+export type BackgroundSubagentApprovalMetadataValue = string | number | boolean | null | readonly BackgroundSubagentApprovalMetadataValue[] | {
+    readonly [key: string]: BackgroundSubagentApprovalMetadataValue;
+};
+export type BackgroundSubagentApprovalEntry = {
+    readonly runId: string;
+    readonly generation: number;
+    readonly toolCallId: string;
+    readonly toolName: string;
+    readonly argumentsText: string;
+    /** Presentation or policy data retained without interpretation by this queue. */
+    readonly metadata?: Readonly<Record<string, BackgroundSubagentApprovalMetadataValue>>;
+};
+/** Raw UI input; approval policy and lease resumption interpret it elsewhere. */
+export type BackgroundSubagentApprovalDecision = {
+    readonly answer: string;
+    readonly rejectionReason?: string;
+    readonly approvalAnswer?: string;
+};
+export type BackgroundSubagentApprovalSnapshot = {
+    /** Monotonic. A notification is only a hint to read this authoritative state. */
+    readonly revision: number;
+    /** Only this FIFO head may be resolved. Later entries intentionally stay hidden. */
+    readonly current: BackgroundSubagentApprovalEntry | null;
+    readonly pendingCount: number;
+    readonly closed: boolean;
+};
+export type BackgroundSubagentApprovalResolutionRequest = {
+    readonly revision: number;
+    readonly entry: BackgroundSubagentApprovalEntry;
+    readonly decision: BackgroundSubagentApprovalDecision;
+};
+export type BackgroundSubagentApprovalUpdateRequest = {
+    readonly revision: number;
+    readonly expected: BackgroundSubagentApprovalEntry;
+    readonly entry: BackgroundSubagentApprovalEntry;
+};
+export type BackgroundSubagentApprovalRemovalRequest = {
+    readonly revision: number;
+    readonly entry: BackgroundSubagentApprovalEntry;
+};
+export type BackgroundSubagentApprovalRelease = {
+    readonly kind: 'removed' | 'closed';
+};
+export type BackgroundSubagentApprovalApplyResult = {
+    readonly kind: 'applied';
+} | {
+    readonly kind: 'rejected';
+};
+export type BackgroundSubagentApprovalCallbacks = {
+    /** Applies the raw answer while this entry still owns the visible head. */
+    readonly onResolve: (entry: BackgroundSubagentApprovalEntry, decision: BackgroundSubagentApprovalDecision) => BackgroundSubagentApprovalApplyResult;
+    /**
+     * The run owner is told that this queue no longer owns its pause. It decides
+     * how to release the lease; this primitive never manufactures a rejection.
+     */
+    readonly onRelease?: (entry: BackgroundSubagentApprovalEntry, release: BackgroundSubagentApprovalRelease) => void;
+};
+export type BackgroundSubagentApprovalEnqueueResult = {
+    readonly kind: 'enqueued';
+    readonly revision: number;
+} | {
+    readonly kind: 'closed';
+};
+export type BackgroundSubagentApprovalResolveResult = {
+    readonly kind: 'resolved';
+    readonly entry: BackgroundSubagentApprovalEntry;
+    readonly decision: BackgroundSubagentApprovalDecision;
+} | {
+    readonly kind: 'apply_rejected';
+    readonly entry: BackgroundSubagentApprovalEntry;
+} | {
+    readonly kind: 'stale';
+    readonly reason: 'revision_mismatch' | 'identity_mismatch';
+} | {
+    readonly kind: 'closed';
+};
+export type BackgroundSubagentApprovalUpdateResult = {
+    readonly kind: 'updated';
+    readonly revision: number;
+} | {
+    readonly kind: 'stale';
+    readonly reason: 'revision_mismatch' | 'identity_mismatch';
+} | {
+    readonly kind: 'closed';
+};
+export type BackgroundSubagentApprovalRemoveResult = {
+    readonly kind: 'removed';
+    readonly revision: number;
+    readonly releaseErrors?: readonly unknown[];
+} | {
+    readonly kind: 'stale';
+    readonly reason: 'revision_mismatch' | 'identity_mismatch';
+} | {
+    readonly kind: 'closed';
+};
+type Listener = () => void;
+/**
+ * Session-owned FIFO arbitration for approvals emitted by adopted subagent
+ * leases. It owns ordering, immutable external-store snapshots, and stale
+ * action rejection. It deliberately does not know approval policy, Ink, or a
+ * child continuation: callers take a successful claim to the lease that owns
+ * resumption.
+ */
+export declare class BackgroundSubagentApprovalQueue {
+    #private;
+    getSnapshot(): BackgroundSubagentApprovalSnapshot;
+    subscribe(listener: Listener): () => void;
+    enqueue(entry: BackgroundSubagentApprovalEntry, callbacks: BackgroundSubagentApprovalCallbacks): BackgroundSubagentApprovalEnqueueResult;
+    /**
+     * Resolves exactly the visible FIFO head. Its callback applies the raw
+     * decision while the head and snapshot remain authoritative. Only a
+     * successful application promotes and publishes the next entry.
+     */
+    resolve(request: BackgroundSubagentApprovalResolutionRequest): BackgroundSubagentApprovalResolveResult;
+    /**
+     * Replaces opaque presentation metadata for one still-pending pause. The
+     * execution identity may not change; a replacement is not a transfer.
+     */
+    update(request: BackgroundSubagentApprovalUpdateRequest): BackgroundSubagentApprovalUpdateResult;
+    /** Removes an exact pause after its owning run settles or is cancelled. */
+    remove(request: BackgroundSubagentApprovalRemovalRequest): BackgroundSubagentApprovalRemoveResult;
+    /**
+     * Terminal and idempotent. Closing never interprets an answer: each run
+     * owner gets an explicit release callback and can cancel its own lease.
+     */
+    close(): readonly unknown[];
+}
+export {};
+//# sourceMappingURL=background-subagent-approval-queue.d.ts.map

package/dist/services/approval/background-subagent-approval-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"background-subagent-approval-queue.d.ts","sourceRoot":"","sources":["../../../source/services/approval/background-subagent-approval-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,MAAM,uCAAuC,GAC/C,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,uCAAuC,EAAE,GAClD;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,uCAAuC,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,+BAA+B,GAAG;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,uCAAuC,CAAC,CAAC,CAAC;CACvF,CAAC;AAEF,iFAAiF;AACjF,MAAM,MAAM,kCAAkC,GAAG;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC/C,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,oFAAoF;IACpF,QAAQ,CAAC,OAAO,EAAE,+BAA+B,GAAG,IAAI,CAAC;IACzD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,2CAA2C,GAAG;IACxD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,kCAAkC,CAAC;CACvD,CAAC;AAEF,MAAM,MAAM,uCAAuC,GAAG;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,wCAAwC,GAAG;IACrD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAA;CAAE,CAAC;AACxF,MAAM,MAAM,qCAAqC,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAEjH,MAAM,MAAM,mCAAmC,GAAG;IAChD,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,CAClB,KAAK,EAAE,+BAA+B,EACtC,QAAQ,EAAE,kCAAkC,KACzC,qCAAqC,CAAC;IAC3C;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,+BAA+B,EAAE,OAAO,EAAE,iCAAiC,KAAK,IAAI,CAAC;CACnH,CAAC;AAEF,MAAM,MAAM,uCAAuC,GAC/C;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEhC,MAAM,MAAM,uCAAuC,GAC/C;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,kCAAkC,CAAC;CACvD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAA;CAAE,GACpF;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,mBAAmB,CAAA;CAAE,GACtF;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEhC,MAAM,MAAM,sCAAsC,GAC9C;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,mBAAmB,CAAA;CAAE,GACtF;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEhC,MAAM,MAAM,sCAAsC,GAC9C;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;CAAE,GACpG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,mBAAmB,CAAA;CAAE,GACtF;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAOhC,KAAK,QAAQ,GAAG,MAAM,IAAI,CAAC;AA2D3B;;;;;;GAMG;AACH,qBAAa,+BAA+B;;IAU1C,WAAW,IAAI,kCAAkC,CAEhD;IAED,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,IAAI,CAMxC;IAED,OAAO,CACL,KAAK,EAAE,+BAA+B,EACtC,SAAS,EAAE,mCAAmC,GAC7C,uCAAuC,CAczC;IAED;;;;OAIG;IACH,OAAO,CAAC,OAAO,EAAE,2CAA2C,GAAG,uCAAuC,CAmBrG;IAED;;;OAGG;IACH,MAAM,CAAC,OAAO,EAAE,uCAAuC,GAAG,sCAAsC,CAW/F;IAED,2EAA2E;IAC3E,MAAM,CAAC,OAAO,EAAE,wCAAwC,GAAG,sCAAsC,CAehG;IAED;;;OAGG;IACH,KAAK,IAAI,SAAS,OAAO,EAAE,CAO1B;CAkCF"}

package/dist/services/approval/background-subagent-approval-queue.js

@@ -0,0 +1,200 @@
+function sameIdentity(left, right) {
+    return (left.runId === right.runId &&
+        left.generation === right.generation &&
+        left.toolCallId === right.toolCallId &&
+        left.toolName === right.toolName &&
+        left.argumentsText === right.argumentsText);
+}
+function cloneAndFreezeMetadataValue(value, ancestors) {
+    if (value === null || typeof value !== 'object')
+        return value;
+    if (ancestors.has(value))
+        throw new TypeError('Background subagent approval metadata must not contain cycles.');
+    ancestors.add(value);
+    try {
+        if (Array.isArray(value)) {
+            return Object.freeze(value.map((item) => cloneAndFreezeMetadataValue(item, ancestors)));
+        }
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null) {
+            throw new TypeError('Background subagent approval metadata must contain only plain data.');
+        }
+        return Object.freeze(Object.fromEntries(Object.entries(value).map(([key, item]) => [key, cloneAndFreezeMetadataValue(item, ancestors)])));
+    }
+    finally {
+        ancestors.delete(value);
+    }
+}
+function freezeEntry(entry) {
+    const metadata = entry.metadata
+        ? cloneAndFreezeMetadataValue(entry.metadata, new Set())
+        : undefined;
+    return Object.freeze({ ...entry, ...(metadata ? { metadata } : {}) });
+}
+function freezeSnapshot(revision, pending, closed) {
+    return Object.freeze({
+        revision,
+        current: pending[0]?.entry ?? null,
+        pendingCount: pending.length,
+        closed,
+    });
+}
+/**
+ * Session-owned FIFO arbitration for approvals emitted by adopted subagent
+ * leases. It owns ordering, immutable external-store snapshots, and stale
+ * action rejection. It deliberately does not know approval policy, Ink, or a
+ * child continuation: callers take a successful claim to the lease that owns
+ * resumption.
+ */
+export class BackgroundSubagentApprovalQueue {
+    #pending = [];
+    /** Last revision each listener was notified about. */
+    #listeners = new Map();
+    #revision = 0;
+    #closed = false;
+    #snapshot = freezeSnapshot(0, [], false);
+    #notifying = false;
+    #resolving;
+    getSnapshot() {
+        return this.#snapshot;
+    }
+    subscribe(listener) {
+        // A subscription begins after the consumer has read the current snapshot.
+        // Using the current revision also prevents unsubscribe/resubscribe inside a
+        // notification from resetting progress and spinning the dispatch loop.
+        this.#listeners.set(listener, this.#revision);
+        return () => this.#listeners.delete(listener);
+    }
+    enqueue(entry, callbacks) {
+        if (this.#closed)
+            return { kind: 'closed' };
+        const immutableEntry = freezeEntry(entry);
+        if (this.#pending.some((pending) => sameIdentity(pending.entry, immutableEntry))) {
+            throw new Error(`Duplicate background subagent approval: ${immutableEntry.runId}:${immutableEntry.generation}:${immutableEntry.toolCallId}`);
+        }
+        this.#pending.push({
+            entry: immutableEntry,
+            callbacks: { onResolve: callbacks.onResolve, ...(callbacks.onRelease ? { onRelease: callbacks.onRelease } : {}) },
+        });
+        this.#changed();
+        return { kind: 'enqueued', revision: this.#revision };
+    }
+    /**
+     * Resolves exactly the visible FIFO head. Its callback applies the raw
+     * decision while the head and snapshot remain authoritative. Only a
+     * successful application promotes and publishes the next entry.
+     */
+    resolve(request) {
+        if (this.#closed)
+            return { kind: 'closed' };
+        if (request.revision !== this.#revision)
+            return { kind: 'stale', reason: 'revision_mismatch' };
+        const current = this.#pending[0];
+        if (!current || !sameIdentity(current.entry, request.entry))
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        if (current === this.#resolving)
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        const decision = Object.freeze({ ...request.decision });
+        this.#resolving = current;
+        let application;
+        try {
+            application = current.callbacks.onResolve(current.entry, decision);
+        }
+        finally {
+            this.#resolving = undefined;
+        }
+        if (application.kind !== 'applied')
+            return { kind: 'apply_rejected', entry: current.entry };
+        this.#pending.shift();
+        this.#changed();
+        return { kind: 'resolved', entry: current.entry, decision };
+    }
+    /**
+     * Replaces opaque presentation metadata for one still-pending pause. The
+     * execution identity may not change; a replacement is not a transfer.
+     */
+    update(request) {
+        if (this.#closed)
+            return { kind: 'closed' };
+        if (request.revision !== this.#revision)
+            return { kind: 'stale', reason: 'revision_mismatch' };
+        if (!sameIdentity(request.expected, request.entry))
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        const index = this.#pending.findIndex((pending) => sameIdentity(pending.entry, request.expected));
+        if (index < 0)
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        if (this.#pending[index] === this.#resolving)
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        this.#pending[index] = { entry: freezeEntry(request.entry), callbacks: this.#pending[index].callbacks };
+        this.#changed();
+        return { kind: 'updated', revision: this.#revision };
+    }
+    /** Removes an exact pause after its owning run settles or is cancelled. */
+    remove(request) {
+        if (this.#closed)
+            return { kind: 'closed' };
+        if (request.revision !== this.#revision)
+            return { kind: 'stale', reason: 'revision_mismatch' };
+        const index = this.#pending.findIndex((pending) => sameIdentity(pending.entry, request.entry));
+        if (index < 0)
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        if (this.#pending[index] === this.#resolving)
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        const [removed] = this.#pending.splice(index, 1);
+        this.#changed();
+        const releaseErrors = this.#release([removed], { kind: 'removed' });
+        return {
+            kind: 'removed',
+            revision: this.#revision,
+            ...(releaseErrors.length > 0 ? { releaseErrors } : {}),
+        };
+    }
+    /**
+     * Terminal and idempotent. Closing never interprets an answer: each run
+     * owner gets an explicit release callback and can cancel its own lease.
+     */
+    close() {
+        if (this.#closed)
+            return Object.freeze([]);
+        this.#closed = true;
+        const pending = this.#pending;
+        this.#pending = [];
+        this.#changed();
+        return this.#release(pending, { kind: 'closed' });
+    }
+    #release(pending, release) {
+        const errors = [];
+        for (const item of pending) {
+            try {
+                item.callbacks.onRelease?.(item.entry, release);
+            }
+            catch (error) {
+                errors.push(error);
+            }
+        }
+        return Object.freeze(errors);
+    }
+    #changed() {
+        this.#revision += 1;
+        this.#snapshot = freezeSnapshot(this.#revision, this.#pending, this.#closed);
+        if (this.#notifying)
+            return;
+        this.#notifying = true;
+        try {
+            while ([...this.#listeners.values()].some((revision) => revision < this.#revision)) {
+                for (const listener of [...this.#listeners.keys()]) {
+                    if (this.#listeners.get(listener) === undefined || this.#listeners.get(listener) >= this.#revision)
+                        continue;
+                    // Mark before invoking so reentrant changes cannot notify this
+                    // listener twice for the same externally visible revision.
+                    this.#listeners.set(listener, this.#revision);
+                    listener();
+                }
+            }
+        }
+        finally {
+            this.#notifying = false;
+        }
+    }
+}
+//# sourceMappingURL=background-subagent-approval-queue.js.map

package/dist/services/approval/background-subagent-approval-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"background-subagent-approval-queue.js","sourceRoot":"","sources":["../../../source/services/approval/background-subagent-approval-queue.ts"],"names":[],"mappings":"AA0GA,SAAS,YAAY,CAAC,IAAqC,EAAE,KAAsC;IACjG,OAAO,CACL,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC1B,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAChC,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,KAA8C,EAC9C,SAAsB;IAEtB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IAChH,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CAAC,qEAAqE,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,2BAA2B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAChG,CACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAsC;IACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ;QAC7B,CAAC,CAAE,2BAA2B,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,GAAG,EAAE,CAEpD;QACJ,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,cAAc,CACrB,QAAgB,EAChB,OAA2B,EAC3B,MAAe;IAEf,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI;QAClC,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,+BAA+B;IAC1C,QAAQ,GAAc,EAAE,CAAC;IACzB,sDAAsD;IACtD,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IACzC,SAAS,GAAG,CAAC,CAAC;IACd,OAAO,GAAG,KAAK,CAAC;IAChB,SAAS,GAAuC,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7E,UAAU,GAAG,KAAK,CAAC;IACnB,UAAU,CAAsB;IAEhC,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,SAAS,CAAC,QAAkB;QAC1B,0EAA0E;QAC1E,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CACL,KAAsC,EACtC,SAA8C;QAE9C,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5C,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CACb,2CAA2C,cAAc,CAAC,KAAK,IAAI,cAAc,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,EAAE,CAC5H,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,KAAK,EAAE,cAAc;YACrB,SAAS,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAClH,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IACxD,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,OAAoD;QAC1D,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC/F,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACnH,IAAI,OAAO,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAEvF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;QAC1B,IAAI,WAAkD,CAAC;QACvD,IAAI,CAAC;YACH,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACrE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC9B,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC5F,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC9D,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,OAAgD;QACrD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC/F,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC1G,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClG,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACrE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAEpG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC,SAAS,EAAE,CAAC;QACzG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IACvD,CAAC;IAED,2EAA2E;IAC3E,MAAM,CAAC,OAAiD;QACtD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC/F,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/F,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACrE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAEpG,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACrE,OAAO;YACL,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,QAAQ,CAAC,OAA2B,EAAE,OAA0C;QAC9E,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QAE5B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnF,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;oBACnD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAE,IAAI,IAAI,CAAC,SAAS;wBAAE,SAAS;oBAC9G,+DAA+D;oBAC/D,2DAA2D;oBAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC9C,QAAQ,EAAE,CAAC;gBACb,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;CACF"}

package/dist/services/approval/non-interactive-approval-policy.d.ts

@@ -0,0 +1,33 @@
+import type { ApprovalDescriptor } from '../../contracts/conversation.js';
+import type { ConversationAgentClient } from '../conversation-agent-client.js';
+import type { ILoggingService, ISettingsService, ISessionContextService } from '../service-interfaces.js';
+export declare const NON_INTERACTIVE_REJECTION_REASON = "Non-interactive mode: use --auto-approve to allow tool execution";
+export type NonInteractiveApprovalDecision = {
+    answer: 'y';
+} | {
+    answer: 'n';
+    rejectionReason: string;
+    /** Whether the non-interactive presenter should print the rejection. */
+    reportRejection: boolean;
+};
+export interface NonInteractiveApprovalPolicyDeps {
+    settingsService?: ISettingsService;
+    agentClient?: ConversationAgentClient;
+    logger?: ILoggingService;
+    sessionContextService: ISessionContextService;
+}
+/**
+ * Decides whether a tool approval paused in a non-interactive session can be
+ * resumed. This is deliberately policy-only: callers retain the continuation
+ * loop and their own output handling.
+ */
+export declare class NonInteractiveApprovalPolicy {
+    private readonly deps;
+    constructor(deps: NonInteractiveApprovalPolicyDeps);
+    decide(input: {
+        autoApprove: boolean;
+        approval: ApprovalDescriptor;
+        getHistory?: () => unknown[];
+    }): Promise<NonInteractiveApprovalDecision>;
+}
+//# sourceMappingURL=non-interactive-approval-policy.d.ts.map

package/dist/services/approval/non-interactive-approval-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"non-interactive-approval-policy.d.ts","sourceRoot":"","sources":["../../../source/services/approval/non-interactive-approval-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAE1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAK1G,eAAO,MAAM,gCAAgC,qEAAqE,CAAC;AAEnH,MAAM,MAAM,8BAA8B,GACtC;IAAE,MAAM,EAAE,GAAG,CAAA;CAAE,GACf;IACE,MAAM,EAAE,GAAG,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,gCAAgC;IAC/C,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,qBAAqB,EAAE,sBAAsB,CAAC;CAC/C;AAaD;;;;GAIG;AACH,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,gCAAgC,EAAI;IAEjE,MAAM,CAAC,KAAK,EAAE;QAClB,WAAW,EAAE,OAAO,CAAC;QACrB,QAAQ,EAAE,kBAAkB,CAAC;QAC7B,UAAU,CAAC,EAAE,MAAM,OAAO,EAAE,CAAC;KAC9B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAiE1C;CACF"}

package/dist/services/approval/non-interactive-approval-policy.js

@@ -0,0 +1,85 @@
+import { classifyCommandDetailed } from '../../utils/shell/command-safety/index.js';
+import { SafetyStatus } from '../../utils/shell/command-safety/constants.js';
+import { evaluateShellAutoApprovalAdvisories } from './shell-auto-approval-evaluator.js';
+export const NON_INTERACTIVE_REJECTION_REASON = 'Non-interactive mode: use --auto-approve to allow tool execution';
+const noOpLogger = {
+    debug: () => { },
+    info: () => { },
+    warn: () => { },
+    error: () => { },
+    security: () => { },
+    setCorrelationId: () => { },
+    getCorrelationId: () => undefined,
+    clearCorrelationId: () => { },
+};
+/**
+ * Decides whether a tool approval paused in a non-interactive session can be
+ * resumed. This is deliberately policy-only: callers retain the continuation
+ * loop and their own output handling.
+ */
+export class NonInteractiveApprovalPolicy {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async decide(input) {
+        if (!input.autoApprove) {
+            return { answer: 'n', rejectionReason: NON_INTERACTIVE_REJECTION_REASON, reportRejection: false };
+        }
+        const { approval } = input;
+        if (approval.toolName !== 'shell' && approval.toolName !== 'bash') {
+            return { answer: 'y' };
+        }
+        const command = approval.argumentsText;
+        const classification = classifyCommandDetailed(command, this.deps.logger);
+        if (classification.status === SafetyStatus.RED) {
+            return {
+                answer: 'n',
+                rejectionReason: `Heuristic validation failed: command is RED (dangerous) and cannot be executed automatically: ${command}`,
+                reportRejection: true,
+            };
+        }
+        if (classification.status !== SafetyStatus.YELLOW) {
+            return { answer: 'y' };
+        }
+        const autoApproveModel = this.deps.settingsService && this.deps.agentClient
+            ? this.deps.settingsService.get('agent.choreModel') ?? this.deps.settingsService.get('agent.autoApproveModel')
+            : undefined;
+        if (!autoApproveModel) {
+            return {
+                answer: 'n',
+                rejectionReason: `Heuristic validation failed: command is YELLOW (suspicious) and no auto-approve model is configured: ${command}`,
+                reportRejection: true,
+            };
+        }
+        const history = (input.getHistory?.() ?? []);
+        try {
+            const callId = approval.callId || '__single__';
+            const advisories = await evaluateShellAutoApprovalAdvisories({
+                commands: [{ id: callId, command }],
+                history,
+                settingsService: this.deps.settingsService,
+                agentClient: this.deps.agentClient,
+                logger: this.deps.logger ?? noOpLogger,
+                sessionContextService: this.deps.sessionContextService,
+            });
+            const advisory = advisories.get(callId);
+            if (advisory?.approved) {
+                return { answer: 'y' };
+            }
+            return {
+                answer: 'n',
+                rejectionReason: `LLM evaluation rejected the command: ${advisory?.reasoning ?? 'No reasoning provided'}`,
+                reportRejection: true,
+            };
+        }
+        catch (error) {
+            return {
+                answer: 'n',
+                rejectionReason: `LLM auto-approval evaluation failed: ${error instanceof Error ? error.message : String(error)}`,
+                reportRejection: true,
+            };
+        }
+    }
+}
+//# sourceMappingURL=non-interactive-approval-policy.js.map

package/dist/services/approval/non-interactive-approval-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"non-interactive-approval-policy.js","sourceRoot":"","sources":["../../../source/services/approval/non-interactive-approval-policy.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,+CAA+C,CAAC;AAC7E,OAAO,EAAE,mCAAmC,EAAE,MAAM,oCAAoC,CAAC;AAEzF,MAAM,CAAC,MAAM,gCAAgC,GAAG,kEAAkE,CAAC;AAkBnH,MAAM,UAAU,GAAoB;IAClC,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;IAClB,gBAAgB,EAAE,GAAG,EAAE,GAAE,CAAC;IAC1B,gBAAgB,EAAE,GAAG,EAAE,CAAC,SAAS;IACjC,kBAAkB,EAAE,GAAG,EAAE,GAAE,CAAC;CAC7B,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,4BAA4B;IACV,IAAI;IAAjC,YAA6B,IAAsC;oBAAtC,IAAI;IAAqC,CAAC;IAEvE,KAAK,CAAC,MAAM,CAAC,KAIZ;QACC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,gCAAgC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QACpG,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAC3B,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAClE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC;QACvC,MAAM,cAAc,GAAG,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,GAAG,EAAE,CAAC;YAC/C,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,iGAAiG,OAAO,EAAE;gBAC3H,eAAe,EAAE,IAAI;aACtB,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;YAClD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,gBAAgB,GACpB,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW;YAChD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,wBAAwB,CAAC;YAC9G,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,wGAAwG,OAAO,EAAE;gBAClI,eAAe,EAAE,IAAI;aACtB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAwB,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC;YAC/C,MAAM,UAAU,GAAG,MAAM,mCAAmC,CAAC;gBAC3D,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBACnC,OAAO;gBACP,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe;gBAC1C,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAY;gBACnC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,UAAU;gBACtC,qBAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,qBAAqB;aACvD,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,QAAQ,EAAE,QAAQ,EAAE,CAAC;gBACvB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YACzB,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,wCAAwC,QAAQ,EAAE,SAAS,IAAI,uBAAuB,EAAE;gBACzG,eAAe,EAAE,IAAI;aACtB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,wCACf,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;gBACF,eAAe,EAAE,IAAI;aACtB,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/services/approval/session-read-access.d.ts

@@ -1,3 +1,5 @@
+import type { SessionAccessState } from '../session/session-access-state.js';
+import type { NestedToolCompatibilityState } from '../session/nested-tool-compatibility-state.js';
 /** Session-scoped allowlist for read-only access outside the workspace. */
 export declare class SessionReadAccess {
     #private;
@@ -6,5 +8,13 @@ export declare class SessionReadAccess {
     clear(sessionId: string): void;
 }
 export declare const sessionReadAccess: SessionReadAccess;
+/**
+ * Shared read-approval bypass for the read-only file tools. Root clients own a
+ * SessionAccessState; nested tools fall back to the session-keyed legacy state.
+ */
+export declare function isSessionReadGranted(resolvedPath: string, cwd: string, context: unknown, deps: {
+    sessionAccess?: SessionAccessState;
+    nestedCompatibility?: NestedToolCompatibilityState;
+}): boolean;
 export declare function getSessionIdFromToolContext(context: unknown): string | null;
 //# sourceMappingURL=session-read-access.d.ts.map

package/dist/services/approval/session-read-access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-read-access.d.ts","sourceRoot":"","sources":["../../../source/services/approval/session-read-access.ts"],"names":[],"mappings":"AAEA,2EAA2E;AAC3E,qBAAa,iBAAiB;;IAG5B,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAInD;IAED,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,MAAsB,GAAG,OAAO,CAStF;IAED,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE7B;CACF;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAC;AAEzD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAM3E"}
+{"version":3,"file":"session-read-access.d.ts","sourceRoot":"","sources":["../../../source/services/approval/session-read-access.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAElG,2EAA2E;AAC3E,qBAAa,iBAAiB;;IAG5B,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAInD;IAED,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,MAAsB,GAAG,OAAO,CAStF;IAED,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE7B;CACF;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAC;AAEzD;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE;IACJ,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;CACpD,GACA,OAAO,CAOT;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAM3E"}

package/dist/services/approval/session-read-access.js

@@ -22,6 +22,18 @@ export class SessionReadAccess {
     }
 }
 export const sessionReadAccess = new SessionReadAccess();
+/**
+ * Shared read-approval bypass for the read-only file tools. Root clients own a
+ * SessionAccessState; nested tools fall back to the session-keyed legacy state.
+ */
+export function isSessionReadGranted(resolvedPath, cwd, context, deps) {
+    const { sessionAccess, nestedCompatibility } = deps;
+    if (sessionAccess) {
+        return sessionAccess.allowsRead(resolvedPath, cwd);
+    }
+    const sessionId = getSessionIdFromToolContext(context);
+    return !!sessionId && !!nestedCompatibility?.allowsRead(sessionId, resolvedPath, cwd);
+}
 export function getSessionIdFromToolContext(context) {
     if (!context || typeof context !== 'object')
         return null;

package/dist/services/approval/session-read-access.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-read-access.js","sourceRoot":"","sources":["../../../source/services/approval/session-read-access.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,2EAA2E;AAC3E,MAAM,OAAO,iBAAiB;IACnB,iBAAiB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE5D,WAAW,CAAC,SAAiB,EAAE,MAAc;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,UAAkB,EAAE,OAAO,GAAW,OAAO,CAAC,GAAG,EAAE;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAClC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,OAAO,MAAM,KAAK,cAAc,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAiB;QACrB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;CACF;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC;AAEzD,MAAM,UAAU,2BAA2B,CAAC,OAAgB;IAC1D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,UAAU,GAAG,OAAgC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/E,MAAM,SAAS,GAAI,UAAU,CAAC,OAAmC,CAAC,SAAS,CAAC;IAC5E,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAClF,CAAC"}
+{"version":3,"file":"session-read-access.js","sourceRoot":"","sources":["../../../source/services/approval/session-read-access.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,2EAA2E;AAC3E,MAAM,OAAO,iBAAiB;IACnB,iBAAiB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE5D,WAAW,CAAC,SAAiB,EAAE,MAAc;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,UAAkB,EAAE,OAAO,GAAW,OAAO,CAAC,GAAG,EAAE;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAClC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,OAAO,MAAM,KAAK,cAAc,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAiB;QACrB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;CACF;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC;AAEzD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAoB,EACpB,GAAW,EACX,OAAgB,EAChB,IAGC;IAED,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC;IACpD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,SAAS,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,mBAAmB,EAAE,UAAU,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAgB;IAC1D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,UAAU,GAAG,OAAgC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/E,MAAM,SAAS,GAAI,UAAU,CAAC,OAAmC,CAAC,SAAS,CAAC;IAC5E,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAClF,CAAC"}

package/dist/services/approval/session-read-grant-target.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The folder a "allow for this session" answer should grant, or null when the
+ * arguments carry no usable target. read_file names a file, so its folder is the
+ * parent; grep and glob name a directory unless the target is an existing file.
+ */
+export declare function resolveSessionReadFolder(toolName: string | undefined, args: unknown): string | null;
+//# sourceMappingURL=session-read-grant-target.d.ts.map

package/dist/services/approval/session-read-grant-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-read-grant-target.d.ts","sourceRoot":"","sources":["../../../source/services/approval/session-read-grant-target.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmBnG"}