@saadnvd1/agent-os 0.3.550 → 0.3.552

package/lib/security/network-state.ts

@@ -2,7 +2,7 @@ import { tailscaleStatus, type TailscaleState } from "@/lib/tailscale";
 import { networkSetting, networkSettingLocked } from "./network-settings";
 import { reachableAt, type Reach } from "./reach";
 import { connectStatus, type ConnectStatus } from "@/lib/connect/serve";
-import { mergeApprovalsOn } from "@/lib/orchestrator/merge-approvals";
+import { mergeApprovalsSetting } from "@/lib/orchestrator/merge-approvals";
 
 export interface NetworkState {
   lan: { on: boolean; locked: boolean };
@@ -24,7 +24,7 @@ export async function networkState(): Promise<NetworkState> {
     tailscale: await tailscaleStatus(),
     reach: await reachableAt(),
     connect: connectStatus(),
-    mergeApprovals: { on: mergeApprovalsOn(), locked: false },
+    mergeApprovals: { on: mergeApprovalsSetting(), locked: false },
   };
 }
 

package/lib/security/presence.ts

@@ -42,6 +42,7 @@ export type PresencePurpose =
   | "enroll"
   | "revoke"
   | "approvals-off"
+  | "no-approvals-on"
   | "rules";
 
 export class PresenceError extends Error {

package/lib/settings-url.ts

@@ -6,6 +6,7 @@ export const SETTINGS_PARAM = "settings";
 
 export const SETTINGS_SECTIONS = [
   "merging",
+  "approvals",
   "workspaces",
   "models",
   "devices",

package/lib/sidebar/shelves.ts

@@ -107,6 +107,9 @@ export function needOf(
 ): SessionNeed | null {
   const live = status?.need ?? null;
   if (live === "approve" || live === "answer" || live === "signin") return live;
+  // Finished work has no agent left to wait on you: text typed or queued
+  // for one that's been stopped is stale, not a reason to need you.
+  if (task && isFinished(task)) return null;
   return (
     taskNeed(task) ??
     live ??

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saadnvd1/agent-os",
-  "version": "0.3.550",
+  "version": "0.3.552",
   "description": "Self-hosted web UI for managing Claude Code sessions",
   "bin": {
     "agent-os": "scripts/agent-os"

package/scripts/claude-status-hook.sh

@@ -82,6 +82,25 @@ EOF
   case "$out" in '{"hookSpecificOutput"'*) printf '%s\n' "$out" ;; esac
 }
 
+# No approvals mode: AgentOS answers a permission request with Claude's own
+# allow decision, and says nothing when the mode is off. Prints the decision
+# and returns 0 only when it was given.
+autoallow() {
+  where="${AGENTOS_URL:-http://127.0.0.1:3011}/api/approvals/hook?session=$AGENTOS_SESSION_ID"
+  auth=
+  [ -z "$AGENTOS_TOKEN" ] ||
+    auth="header = \"Authorization: Bearer $AGENTOS_TOKEN\""
+  out=$(printf '%s' "$input" | curl -s --max-time 2 -K /dev/fd/3 \
+    -H 'Content-Type: application/json' --data-binary @- "$where" 2>/dev/null 3<<EOF
+$auth
+EOF
+)
+  case "$out" in
+    '{"hookSpecificOutput"'*) printf '%s\n' "$out"; return 0 ;;
+  esac
+  return 1
+}
+
 # Commands that take down every session on the machine, the agent's own
 # included. Inside tmux, $TMUX names the real server and wins over
 # TMUX_TMPDIR, so `tmux kill-server` there kills it; only an explicit -S or -L
@@ -126,7 +145,12 @@ case "$event" in
     esac
     ;;
   # Claude asks permission for its own questions too: still a question.
-  PermissionRequest) asking ;;
+  PermissionRequest)
+    case "$(field tool_name)" in
+      AskUserQuestion) asking ;;
+      *) autoallow && report "state=working" || asking ;;
+    esac
+    ;;
   Notification)
     message=$(field message)
     # PermissionRequest already said which tool; older Claude Code versions