@qduc/term2 0.11.1 → 0.13.0

package/dist/services/approval/background-subagent-approval-queue.js

@@ -0,0 +1,200 @@
+function sameIdentity(left, right) {
+    return (left.runId === right.runId &&
+        left.generation === right.generation &&
+        left.toolCallId === right.toolCallId &&
+        left.toolName === right.toolName &&
+        left.argumentsText === right.argumentsText);
+}
+function cloneAndFreezeMetadataValue(value, ancestors) {
+    if (value === null || typeof value !== 'object')
+        return value;
+    if (ancestors.has(value))
+        throw new TypeError('Background subagent approval metadata must not contain cycles.');
+    ancestors.add(value);
+    try {
+        if (Array.isArray(value)) {
+            return Object.freeze(value.map((item) => cloneAndFreezeMetadataValue(item, ancestors)));
+        }
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null) {
+            throw new TypeError('Background subagent approval metadata must contain only plain data.');
+        }
+        return Object.freeze(Object.fromEntries(Object.entries(value).map(([key, item]) => [key, cloneAndFreezeMetadataValue(item, ancestors)])));
+    }
+    finally {
+        ancestors.delete(value);
+    }
+}
+function freezeEntry(entry) {
+    const metadata = entry.metadata
+        ? cloneAndFreezeMetadataValue(entry.metadata, new Set())
+        : undefined;
+    return Object.freeze({ ...entry, ...(metadata ? { metadata } : {}) });
+}
+function freezeSnapshot(revision, pending, closed) {
+    return Object.freeze({
+        revision,
+        current: pending[0]?.entry ?? null,
+        pendingCount: pending.length,
+        closed,
+    });
+}
+/**
+ * Session-owned FIFO arbitration for approvals emitted by adopted subagent
+ * leases. It owns ordering, immutable external-store snapshots, and stale
+ * action rejection. It deliberately does not know approval policy, Ink, or a
+ * child continuation: callers take a successful claim to the lease that owns
+ * resumption.
+ */
+export class BackgroundSubagentApprovalQueue {
+    #pending = [];
+    /** Last revision each listener was notified about. */
+    #listeners = new Map();
+    #revision = 0;
+    #closed = false;
+    #snapshot = freezeSnapshot(0, [], false);
+    #notifying = false;
+    #resolving;
+    getSnapshot() {
+        return this.#snapshot;
+    }
+    subscribe(listener) {
+        // A subscription begins after the consumer has read the current snapshot.
+        // Using the current revision also prevents unsubscribe/resubscribe inside a
+        // notification from resetting progress and spinning the dispatch loop.
+        this.#listeners.set(listener, this.#revision);
+        return () => this.#listeners.delete(listener);
+    }
+    enqueue(entry, callbacks) {
+        if (this.#closed)
+            return { kind: 'closed' };
+        const immutableEntry = freezeEntry(entry);
+        if (this.#pending.some((pending) => sameIdentity(pending.entry, immutableEntry))) {
+            throw new Error(`Duplicate background subagent approval: ${immutableEntry.runId}:${immutableEntry.generation}:${immutableEntry.toolCallId}`);
+        }
+        this.#pending.push({
+            entry: immutableEntry,
+            callbacks: { onResolve: callbacks.onResolve, ...(callbacks.onRelease ? { onRelease: callbacks.onRelease } : {}) },
+        });
+        this.#changed();
+        return { kind: 'enqueued', revision: this.#revision };
+    }
+    /**
+     * Resolves exactly the visible FIFO head. Its callback applies the raw
+     * decision while the head and snapshot remain authoritative. Only a
+     * successful application promotes and publishes the next entry.
+     */
+    resolve(request) {
+        if (this.#closed)
+            return { kind: 'closed' };
+        if (request.revision !== this.#revision)
+            return { kind: 'stale', reason: 'revision_mismatch' };
+        const current = this.#pending[0];
+        if (!current || !sameIdentity(current.entry, request.entry))
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        if (current === this.#resolving)
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        const decision = Object.freeze({ ...request.decision });
+        this.#resolving = current;
+        let application;
+        try {
+            application = current.callbacks.onResolve(current.entry, decision);
+        }
+        finally {
+            this.#resolving = undefined;
+        }
+        if (application.kind !== 'applied')
+            return { kind: 'apply_rejected', entry: current.entry };
+        this.#pending.shift();
+        this.#changed();
+        return { kind: 'resolved', entry: current.entry, decision };
+    }
+    /**
+     * Replaces opaque presentation metadata for one still-pending pause. The
+     * execution identity may not change; a replacement is not a transfer.
+     */
+    update(request) {
+        if (this.#closed)
+            return { kind: 'closed' };
+        if (request.revision !== this.#revision)
+            return { kind: 'stale', reason: 'revision_mismatch' };
+        if (!sameIdentity(request.expected, request.entry))
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        const index = this.#pending.findIndex((pending) => sameIdentity(pending.entry, request.expected));
+        if (index < 0)
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        if (this.#pending[index] === this.#resolving)
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        this.#pending[index] = { entry: freezeEntry(request.entry), callbacks: this.#pending[index].callbacks };
+        this.#changed();
+        return { kind: 'updated', revision: this.#revision };
+    }
+    /** Removes an exact pause after its owning run settles or is cancelled. */
+    remove(request) {
+        if (this.#closed)
+            return { kind: 'closed' };
+        if (request.revision !== this.#revision)
+            return { kind: 'stale', reason: 'revision_mismatch' };
+        const index = this.#pending.findIndex((pending) => sameIdentity(pending.entry, request.entry));
+        if (index < 0)
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        if (this.#pending[index] === this.#resolving)
+            return { kind: 'stale', reason: 'identity_mismatch' };
+        const [removed] = this.#pending.splice(index, 1);
+        this.#changed();
+        const releaseErrors = this.#release([removed], { kind: 'removed' });
+        return {
+            kind: 'removed',
+            revision: this.#revision,
+            ...(releaseErrors.length > 0 ? { releaseErrors } : {}),
+        };
+    }
+    /**
+     * Terminal and idempotent. Closing never interprets an answer: each run
+     * owner gets an explicit release callback and can cancel its own lease.
+     */
+    close() {
+        if (this.#closed)
+            return Object.freeze([]);
+        this.#closed = true;
+        const pending = this.#pending;
+        this.#pending = [];
+        this.#changed();
+        return this.#release(pending, { kind: 'closed' });
+    }
+    #release(pending, release) {
+        const errors = [];
+        for (const item of pending) {
+            try {
+                item.callbacks.onRelease?.(item.entry, release);
+            }
+            catch (error) {
+                errors.push(error);
+            }
+        }
+        return Object.freeze(errors);
+    }
+    #changed() {
+        this.#revision += 1;
+        this.#snapshot = freezeSnapshot(this.#revision, this.#pending, this.#closed);
+        if (this.#notifying)
+            return;
+        this.#notifying = true;
+        try {
+            while ([...this.#listeners.values()].some((revision) => revision < this.#revision)) {
+                for (const listener of [...this.#listeners.keys()]) {
+                    if (this.#listeners.get(listener) === undefined || this.#listeners.get(listener) >= this.#revision)
+                        continue;
+                    // Mark before invoking so reentrant changes cannot notify this
+                    // listener twice for the same externally visible revision.
+                    this.#listeners.set(listener, this.#revision);
+                    listener();
+                }
+            }
+        }
+        finally {
+            this.#notifying = false;
+        }
+    }
+}
+//# sourceMappingURL=background-subagent-approval-queue.js.map

package/dist/services/approval/background-subagent-approval-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"background-subagent-approval-queue.js","sourceRoot":"","sources":["../../../source/services/approval/background-subagent-approval-queue.ts"],"names":[],"mappings":"AA0GA,SAAS,YAAY,CAAC,IAAqC,EAAE,KAAsC;IACjG,OAAO,CACL,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC1B,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAChC,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,KAA8C,EAC9C,SAAsB;IAEtB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IAChH,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CAAC,qEAAqE,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,2BAA2B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAChG,CACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAsC;IACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ;QAC7B,CAAC,CAAE,2BAA2B,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,GAAG,EAAE,CAEpD;QACJ,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,cAAc,CACrB,QAAgB,EAChB,OAA2B,EAC3B,MAAe;IAEf,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI;QAClC,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,+BAA+B;IAC1C,QAAQ,GAAc,EAAE,CAAC;IACzB,sDAAsD;IACtD,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IACzC,SAAS,GAAG,CAAC,CAAC;IACd,OAAO,GAAG,KAAK,CAAC;IAChB,SAAS,GAAuC,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7E,UAAU,GAAG,KAAK,CAAC;IACnB,UAAU,CAAsB;IAEhC,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,SAAS,CAAC,QAAkB;QAC1B,0EAA0E;QAC1E,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CACL,KAAsC,EACtC,SAA8C;QAE9C,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5C,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CACb,2CAA2C,cAAc,CAAC,KAAK,IAAI,cAAc,CAAC,UAAU,IAAI,cAAc,CAAC,UAAU,EAAE,CAC5H,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,KAAK,EAAE,cAAc;YACrB,SAAS,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAClH,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IACxD,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,OAAoD;QAC1D,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC/F,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACnH,IAAI,OAAO,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAEvF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;QAC1B,IAAI,WAAkD,CAAC;QACvD,IAAI,CAAC;YACH,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACrE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC9B,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC5F,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC9D,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,OAAgD;QACrD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC/F,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC1G,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClG,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACrE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAEpG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC,SAAS,EAAE,CAAC;QACzG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IACvD,CAAC;IAED,2EAA2E;IAC3E,MAAM,CAAC,OAAiD;QACtD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC/F,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/F,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACrE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAEpG,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACrE,OAAO;YACL,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,QAAQ,CAAC,OAA2B,EAAE,OAA0C;QAC9E,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QAE5B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnF,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;oBACnD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAE,IAAI,IAAI,CAAC,SAAS;wBAAE,SAAS;oBAC9G,+DAA+D;oBAC/D,2DAA2D;oBAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC9C,QAAQ,EAAE,CAAC;gBACb,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;CACF"}

package/dist/services/approval/non-interactive-approval-policy.d.ts

@@ -0,0 +1,33 @@
+import type { ApprovalDescriptor } from '../../contracts/conversation.js';
+import type { ConversationAgentClient } from '../conversation-agent-client.js';
+import type { ILoggingService, ISettingsService, ISessionContextService } from '../service-interfaces.js';
+export declare const NON_INTERACTIVE_REJECTION_REASON = "Non-interactive mode: use --auto-approve to allow tool execution";
+export type NonInteractiveApprovalDecision = {
+    answer: 'y';
+} | {
+    answer: 'n';
+    rejectionReason: string;
+    /** Whether the non-interactive presenter should print the rejection. */
+    reportRejection: boolean;
+};
+export interface NonInteractiveApprovalPolicyDeps {
+    settingsService?: ISettingsService;
+    agentClient?: ConversationAgentClient;
+    logger?: ILoggingService;
+    sessionContextService: ISessionContextService;
+}
+/**
+ * Decides whether a tool approval paused in a non-interactive session can be
+ * resumed. This is deliberately policy-only: callers retain the continuation
+ * loop and their own output handling.
+ */
+export declare class NonInteractiveApprovalPolicy {
+    private readonly deps;
+    constructor(deps: NonInteractiveApprovalPolicyDeps);
+    decide(input: {
+        autoApprove: boolean;
+        approval: ApprovalDescriptor;
+        getHistory?: () => unknown[];
+    }): Promise<NonInteractiveApprovalDecision>;
+}
+//# sourceMappingURL=non-interactive-approval-policy.d.ts.map

package/dist/services/approval/non-interactive-approval-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"non-interactive-approval-policy.d.ts","sourceRoot":"","sources":["../../../source/services/approval/non-interactive-approval-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAE1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAK1G,eAAO,MAAM,gCAAgC,qEAAqE,CAAC;AAEnH,MAAM,MAAM,8BAA8B,GACtC;IAAE,MAAM,EAAE,GAAG,CAAA;CAAE,GACf;IACE,MAAM,EAAE,GAAG,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,gCAAgC;IAC/C,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,qBAAqB,EAAE,sBAAsB,CAAC;CAC/C;AAaD;;;;GAIG;AACH,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,gCAAgC,EAAI;IAEjE,MAAM,CAAC,KAAK,EAAE;QAClB,WAAW,EAAE,OAAO,CAAC;QACrB,QAAQ,EAAE,kBAAkB,CAAC;QAC7B,UAAU,CAAC,EAAE,MAAM,OAAO,EAAE,CAAC;KAC9B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAiE1C;CACF"}

package/dist/services/approval/non-interactive-approval-policy.js

@@ -0,0 +1,85 @@
+import { classifyCommandDetailed } from '../../utils/shell/command-safety/index.js';
+import { SafetyStatus } from '../../utils/shell/command-safety/constants.js';
+import { evaluateShellAutoApprovalAdvisories } from './shell-auto-approval-evaluator.js';
+export const NON_INTERACTIVE_REJECTION_REASON = 'Non-interactive mode: use --auto-approve to allow tool execution';
+const noOpLogger = {
+    debug: () => { },
+    info: () => { },
+    warn: () => { },
+    error: () => { },
+    security: () => { },
+    setCorrelationId: () => { },
+    getCorrelationId: () => undefined,
+    clearCorrelationId: () => { },
+};
+/**
+ * Decides whether a tool approval paused in a non-interactive session can be
+ * resumed. This is deliberately policy-only: callers retain the continuation
+ * loop and their own output handling.
+ */
+export class NonInteractiveApprovalPolicy {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async decide(input) {
+        if (!input.autoApprove) {
+            return { answer: 'n', rejectionReason: NON_INTERACTIVE_REJECTION_REASON, reportRejection: false };
+        }
+        const { approval } = input;
+        if (approval.toolName !== 'shell' && approval.toolName !== 'bash') {
+            return { answer: 'y' };
+        }
+        const command = approval.argumentsText;
+        const classification = classifyCommandDetailed(command, this.deps.logger);
+        if (classification.status === SafetyStatus.RED) {
+            return {
+                answer: 'n',
+                rejectionReason: `Heuristic validation failed: command is RED (dangerous) and cannot be executed automatically: ${command}`,
+                reportRejection: true,
+            };
+        }
+        if (classification.status !== SafetyStatus.YELLOW) {
+            return { answer: 'y' };
+        }
+        const autoApproveModel = this.deps.settingsService && this.deps.agentClient
+            ? this.deps.settingsService.get('agent.choreModel') ?? this.deps.settingsService.get('agent.autoApproveModel')
+            : undefined;
+        if (!autoApproveModel) {
+            return {
+                answer: 'n',
+                rejectionReason: `Heuristic validation failed: command is YELLOW (suspicious) and no auto-approve model is configured: ${command}`,
+                reportRejection: true,
+            };
+        }
+        const history = (input.getHistory?.() ?? []);
+        try {
+            const callId = approval.callId || '__single__';
+            const advisories = await evaluateShellAutoApprovalAdvisories({
+                commands: [{ id: callId, command }],
+                history,
+                settingsService: this.deps.settingsService,
+                agentClient: this.deps.agentClient,
+                logger: this.deps.logger ?? noOpLogger,
+                sessionContextService: this.deps.sessionContextService,
+            });
+            const advisory = advisories.get(callId);
+            if (advisory?.approved) {
+                return { answer: 'y' };
+            }
+            return {
+                answer: 'n',
+                rejectionReason: `LLM evaluation rejected the command: ${advisory?.reasoning ?? 'No reasoning provided'}`,
+                reportRejection: true,
+            };
+        }
+        catch (error) {
+            return {
+                answer: 'n',
+                rejectionReason: `LLM auto-approval evaluation failed: ${error instanceof Error ? error.message : String(error)}`,
+                reportRejection: true,
+            };
+        }
+    }
+}
+//# sourceMappingURL=non-interactive-approval-policy.js.map

package/dist/services/approval/non-interactive-approval-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"non-interactive-approval-policy.js","sourceRoot":"","sources":["../../../source/services/approval/non-interactive-approval-policy.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,+CAA+C,CAAC;AAC7E,OAAO,EAAE,mCAAmC,EAAE,MAAM,oCAAoC,CAAC;AAEzF,MAAM,CAAC,MAAM,gCAAgC,GAAG,kEAAkE,CAAC;AAkBnH,MAAM,UAAU,GAAoB;IAClC,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;IAClB,gBAAgB,EAAE,GAAG,EAAE,GAAE,CAAC;IAC1B,gBAAgB,EAAE,GAAG,EAAE,CAAC,SAAS;IACjC,kBAAkB,EAAE,GAAG,EAAE,GAAE,CAAC;CAC7B,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,4BAA4B;IACV,IAAI;IAAjC,YAA6B,IAAsC;oBAAtC,IAAI;IAAqC,CAAC;IAEvE,KAAK,CAAC,MAAM,CAAC,KAIZ;QACC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,gCAAgC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QACpG,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAC3B,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAClE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC;QACvC,MAAM,cAAc,GAAG,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,GAAG,EAAE,CAAC;YAC/C,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,iGAAiG,OAAO,EAAE;gBAC3H,eAAe,EAAE,IAAI;aACtB,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;YAClD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,gBAAgB,GACpB,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW;YAChD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,wBAAwB,CAAC;YAC9G,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,wGAAwG,OAAO,EAAE;gBAClI,eAAe,EAAE,IAAI;aACtB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAwB,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC;YAC/C,MAAM,UAAU,GAAG,MAAM,mCAAmC,CAAC;gBAC3D,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBACnC,OAAO;gBACP,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe;gBAC1C,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAY;gBACnC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,UAAU;gBACtC,qBAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,qBAAqB;aACvD,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,QAAQ,EAAE,QAAQ,EAAE,CAAC;gBACvB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YACzB,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,wCAAwC,QAAQ,EAAE,SAAS,IAAI,uBAAuB,EAAE;gBACzG,eAAe,EAAE,IAAI;aACtB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,wCACf,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;gBACF,eAAe,EAAE,IAAI;aACtB,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/services/approval/session-read-access.d.ts

@@ -1,3 +1,5 @@
+import type { SessionAccessState } from '../session/session-access-state.js';
+import type { NestedToolCompatibilityState } from '../session/nested-tool-compatibility-state.js';
 /** Session-scoped allowlist for read-only access outside the workspace. */
 export declare class SessionReadAccess {
     #private;
@@ -6,5 +8,13 @@ export declare class SessionReadAccess {
     clear(sessionId: string): void;
 }
 export declare const sessionReadAccess: SessionReadAccess;
+/**
+ * Shared read-approval bypass for the read-only file tools. Root clients own a
+ * SessionAccessState; nested tools fall back to the session-keyed legacy state.
+ */
+export declare function isSessionReadGranted(resolvedPath: string, cwd: string, context: unknown, deps: {
+    sessionAccess?: SessionAccessState;
+    nestedCompatibility?: NestedToolCompatibilityState;
+}): boolean;
 export declare function getSessionIdFromToolContext(context: unknown): string | null;
 //# sourceMappingURL=session-read-access.d.ts.map

package/dist/services/approval/session-read-access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-read-access.d.ts","sourceRoot":"","sources":["../../../source/services/approval/session-read-access.ts"],"names":[],"mappings":"AAEA,2EAA2E;AAC3E,qBAAa,iBAAiB;;IAG5B,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAInD;IAED,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,MAAsB,GAAG,OAAO,CAStF;IAED,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE7B;CACF;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAC;AAEzD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAM3E"}
+{"version":3,"file":"session-read-access.d.ts","sourceRoot":"","sources":["../../../source/services/approval/session-read-access.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAElG,2EAA2E;AAC3E,qBAAa,iBAAiB;;IAG5B,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAInD;IAED,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,MAAiC,GAAG,OAAO,CASjG;IAED,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE7B;CACF;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAC;AAEzD;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE;IACJ,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;CACpD,GACA,OAAO,CAOT;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAM3E"}

package/dist/services/approval/session-read-access.js

@@ -1,4 +1,5 @@
 import path from 'node:path';
+import { getActiveWorkspaceRoot } from '../workspace/active-workspace-root.js';
 /** Session-scoped allowlist for read-only access outside the workspace. */
 export class SessionReadAccess {
     #foldersBySession = new Map();
@@ -7,7 +8,7 @@ export class SessionReadAccess {
         folders.add(folder);
         this.#foldersBySession.set(sessionId, folders);
     }
-    allows(sessionId, targetPath, baseDir = process.cwd()) {
+    allows(sessionId, targetPath, baseDir = getActiveWorkspaceRoot()) {
         const folders = this.#foldersBySession.get(sessionId);
         if (!folders)
             return false;
@@ -22,6 +23,18 @@ export class SessionReadAccess {
     }
 }
 export const sessionReadAccess = new SessionReadAccess();
+/**
+ * Shared read-approval bypass for the read-only file tools. Root clients own a
+ * SessionAccessState; nested tools fall back to the session-keyed legacy state.
+ */
+export function isSessionReadGranted(resolvedPath, cwd, context, deps) {
+    const { sessionAccess, nestedCompatibility } = deps;
+    if (sessionAccess) {
+        return sessionAccess.allowsRead(resolvedPath, cwd);
+    }
+    const sessionId = getSessionIdFromToolContext(context);
+    return !!sessionId && !!nestedCompatibility?.allowsRead(sessionId, resolvedPath, cwd);
+}
 export function getSessionIdFromToolContext(context) {
     if (!context || typeof context !== 'object')
         return null;

package/dist/services/approval/session-read-access.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-read-access.js","sourceRoot":"","sources":["../../../source/services/approval/session-read-access.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,2EAA2E;AAC3E,MAAM,OAAO,iBAAiB;IACnB,iBAAiB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE5D,WAAW,CAAC,SAAiB,EAAE,MAAc;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,UAAkB,EAAE,OAAO,GAAW,OAAO,CAAC,GAAG,EAAE;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAClC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,OAAO,MAAM,KAAK,cAAc,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAiB;QACrB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;CACF;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC;AAEzD,MAAM,UAAU,2BAA2B,CAAC,OAAgB;IAC1D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,UAAU,GAAG,OAAgC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/E,MAAM,SAAS,GAAI,UAAU,CAAC,OAAmC,CAAC,SAAS,CAAC;IAC5E,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAClF,CAAC"}
+{"version":3,"file":"session-read-access.js","sourceRoot":"","sources":["../../../source/services/approval/session-read-access.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAI/E,2EAA2E;AAC3E,MAAM,OAAO,iBAAiB;IACnB,iBAAiB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE5D,WAAW,CAAC,SAAiB,EAAE,MAAc;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,UAAkB,EAAE,OAAO,GAAW,sBAAsB,EAAE;QACtF,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAClC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,OAAO,MAAM,KAAK,cAAc,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAiB;QACrB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;CACF;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC;AAEzD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAoB,EACpB,GAAW,EACX,OAAgB,EAChB,IAGC;IAED,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC;IACpD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,SAAS,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,mBAAmB,EAAE,UAAU,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAgB;IAC1D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,UAAU,GAAG,OAAgC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/E,MAAM,SAAS,GAAI,UAAU,CAAC,OAAmC,CAAC,SAAS,CAAC;IAC5E,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAClF,CAAC"}

package/dist/services/approval/session-read-grant-target.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The folder a "allow for this session" answer should grant, or null when the
+ * arguments carry no usable target. read_file names a file, so its folder is the
+ * parent; grep and glob name a directory unless the target is an existing file.
+ */
+export declare function resolveSessionReadFolder(toolName: string | undefined, args: unknown): string | null;
+//# sourceMappingURL=session-read-grant-target.d.ts.map

package/dist/services/approval/session-read-grant-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-read-grant-target.d.ts","sourceRoot":"","sources":["../../../source/services/approval/session-read-grant-target.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmBnG"}

package/dist/services/approval/session-read-grant-target.js

@@ -0,0 +1,36 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { resolveGlobSearchTarget } from '../../tools/file/glob-target.js';
+/**
+ * The folder a "allow for this session" answer should grant, or null when the
+ * arguments carry no usable target. read_file names a file, so its folder is the
+ * parent; grep and glob name a directory unless the target is an existing file.
+ */
+export function resolveSessionReadFolder(toolName, args) {
+    const record = args && typeof args === 'object' ? args : null;
+    const rawPath = typeof record?.path === 'string' ? record.path.trim() : '';
+    if (toolName === 'read_file') {
+        return rawPath ? path.dirname(rawPath) : null;
+    }
+    if (toolName === 'grep') {
+        return rawPath ? folderOf(rawPath) : null;
+    }
+    if (toolName === 'glob') {
+        const rawPattern = typeof record?.pattern === 'string' ? record.pattern : undefined;
+        const { targetPath } = resolveGlobSearchTarget(rawPattern, rawPath || undefined);
+        return targetPath && targetPath !== '.' ? folderOf(targetPath) : null;
+    }
+    return null;
+}
+/** A path that is an existing file grants its parent; anything else grants itself. */
+function folderOf(target) {
+    try {
+        if (fs.statSync(target).isFile())
+            return path.dirname(target);
+    }
+    catch {
+        // Unreadable or non-existent: treat it as the directory the user approved.
+    }
+    return target;
+}
+//# sourceMappingURL=session-read-grant-target.js.map

package/dist/services/approval/session-read-grant-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-read-grant-target.js","sourceRoot":"","sources":["../../../source/services/approval/session-read-grant-target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE1E;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAA4B,EAAE,IAAa;IAClF,MAAM,MAAM,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,MAAM,OAAO,GAAG,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3E,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACpF,MAAM,EAAE,UAAU,EAAE,GAAG,uBAAuB,CAAC,UAAU,EAAE,OAAO,IAAI,SAAS,CAAC,CAAC;QACjF,OAAO,UAAU,IAAI,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sFAAsF;AACtF,SAAS,QAAQ,CAAC,MAAc;IAC9B,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/services/approval/shell-auto-approval-evaluator.d.ts

@@ -1,4 +1,4 @@
-import type { AgentInputItem } from '@openai/agents';
+import type { ProviderInputItem } from '../../contracts/provider-input.js';
 import type { LLMAdvisory } from '../../contracts/conversation.js';
 import type { ILoggingService, ISettingsService, ISessionContextService } from '../service-interfaces.js';
 import { SHELL_AUTO_APPROVAL_PROMPT_VERSION } from '../../prompts/shell-auto-approval.js';
@@ -6,12 +6,20 @@ import type { ShellAutoApprovalAgentClient } from '../conversation-agent-client.
 export type ShellAutoApprovalCommand = {
     id: string;
     command: string;
+    /** True when the command will run outside the sandbox with host access. */
+    unsandboxed?: boolean;
+};
+export type ShellAutoApprovalManualDecision = {
+    command: string;
+    decision: 'approved' | 'rejected';
 };
 export type ShellAutoApprovalAdvisory = LLMAdvisory;
 export { SHELL_AUTO_APPROVAL_PROMPT_VERSION };
-export declare function evaluateShellAutoApprovalAdvisories({ commands, history, settingsService, agentClient, logger, sessionContextService, throwOnError, retryOptions, }: {
+export declare function evaluateShellAutoApprovalAdvisories({ commands, history, manualDecisions, settingsService, agentClient, logger, sessionContextService, throwOnError, retryOptions, }: {
     commands: ShellAutoApprovalCommand[];
-    history: AgentInputItem[];
+    history: ProviderInputItem[];
+    /** Recent manual approve/reject decisions this session, offered as precedent. */
+    manualDecisions?: ShellAutoApprovalManualDecision[];
     settingsService?: ISettingsService;
     agentClient: ShellAutoApprovalAgentClient;
     logger: ILoggingService;

package/dist/services/approval/shell-auto-approval-evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shell-auto-approval-evaluator.d.ts","sourceRoot":"","sources":["../../../source/services/approval/shell-auto-approval-evaluator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAwB,MAAM,gBAAgB,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAEnE,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAC1G,OAAO,EAEL,kCAAkC,EACnC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAGpF,MAAM,MAAM,wBAAwB,GAAG;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,WAAW,CAAC;AAEpD,OAAO,EAAE,kCAAkC,EAAE,CAAC;AAsQ9C,wBAAsB,mCAAmC,CAAC,EACxD,QAAQ,EACR,OAAO,EACP,eAAe,EACf,WAAW,EACX,MAAM,EACN,qBAAqB,EACrB,YAAoB,EACpB,YAAY,GACb,EAAE;IACD,QAAQ,EAAE,wBAAwB,EAAE,CAAC;IACrC,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,WAAW,EAAE,4BAA4B,CAAC;IAC1C,MAAM,EAAE,eAAe,CAAC;IACxB,qBAAqB,EAAE,sBAAsB,CAAC;IAC9C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE;QACb,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;KACvB,CAAC;CACH,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAiOlD"}
+{"version":3,"file":"shell-auto-approval-evaluator.d.ts","sourceRoot":"","sources":["../../../source/services/approval/shell-auto-approval-evaluator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,KAAK,EACV,WAAW,EAKZ,MAAM,iCAAiC,CAAC;AAEzC,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAC1G,OAAO,EAEL,kCAAkC,EACnC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAIpF,MAAM,MAAM,wBAAwB,GAAG;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,UAAU,GAAG,UAAU,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,WAAW,CAAC;AAEpD,OAAO,EAAE,kCAAkC,EAAE,CAAC;AAgX9C,wBAAsB,mCAAmC,CAAC,EACxD,QAAQ,EACR,OAAO,EACP,eAAe,EACf,eAAe,EACf,WAAW,EACX,MAAM,EACN,qBAAqB,EACrB,YAAoB,EACpB,YAAY,GACb,EAAE;IACD,QAAQ,EAAE,wBAAwB,EAAE,CAAC;IACrC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,iFAAiF;IACjF,eAAe,CAAC,EAAE,+BAA+B,EAAE,CAAC;IACpD,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,WAAW,EAAE,4BAA4B,CAAC;IAC1C,MAAM,EAAE,eAAe,CAAC;IACxB,qBAAqB,EAAE,sBAAsB,CAAC;IAC9C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE;QACb,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;KACvB,CAAC;CACH,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAqOlD"}