@senpi/runtime 3.0.173 → 3.0.181

package/dist/approvals/approval-store.d.ts

@@ -14,21 +14,51 @@ export declare const TOOL_APPROVALS_STATE_FILE = "tool-approvals.json";
  * redeploys, and plugin auto-updates.
  *
  * To make a tool prompt again, delete its entry from `tool-approvals.json`
- * (or the whole file) in the state dir.
+ * (or the whole file) in the state dir. That takes effect at the next gated
+ * call, with no restart.
  *
- * Load is synchronous (once, at plugin register()); writes are synchronous
- * atomic temp → rename, and only happen on an explicit user decision.
+ * The file is the source of truth, shared by every registry the host builds
+ * (chat, cron, …), each with its own store (RT566-02, RT566-10):
+ * - before every decision the store `stat`s the file and re-reads it only when
+ *   its mtime, size or inode changed since the last read;
+ * - a missing file, or one that cannot be read or parsed, means no grants
+ *   (every gated tool prompts); a bad file is logged once per version;
+ * - a write is read-modify-write: re-read the file, add this one grant, write
+ *   atomically (temp → rename). It never drops a grant another registry wrote
+ *   and never brings back one the user revoked.
  */
 export declare class ToolApprovalStore {
     private readonly logger?;
     private readonly filePath;
-    private readonly allowAlways;
+    private allowAlways;
+    /** Signature of the file version `allowAlways` was read from (undefined: never read). */
+    private loadedSignature;
+    /** File version a grant was last refused a write for (warn once per version). */
+    private unwritableWarnedSignature;
     constructor(stateDir: string, logger?: LoggerLike | undefined);
-    private load;
+    private signature;
+    /** One `stat`; re-read only when the file changed since the last read. */
+    private refresh;
+    /**
+     * Read and parse the file; any failure is no grants. `ok` is false when the
+     * file exists but cannot be read or parsed (a missing file is ok and empty).
+     */
+    private readFile;
     isAllowedAlways(tool: string): boolean;
     get size(): number;
-    /** Record a user's allow-always decision and persist it immediately. */
-    rememberAllowAlways(tool: string): void;
+    /**
+     * Record a user's allow-always decision and persist it immediately.
+     *
+     * @returns true when the grant is in the state file, false when it is kept in
+     *   memory only (the file could not be read or written; a warn names why).
+     */
+    rememberAllowAlways(tool: string): boolean;
+    /**
+     * Write atomically. Returns the written file's signature, taken from the temp
+     * file before the rename (rename keeps inode, mtime and size), so a write by
+     * someone else right after the rename is seen at the next decision; undefined
+     * when the write failed.
+     */
     private persist;
 }
 export {};

package/dist/approvals/approval-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval-store.d.ts","sourceRoot":"","sources":["../../src/approvals/approval-store.ts"],"names":[],"mappings":"AAGA,iFAAiF;AACjF,UAAU,UAAU;IAClB,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAChC;AAED,qEAAqE;AACrE,eAAO,MAAM,yBAAyB,wBAAwB,CAAC;AAU/D;;;;;;;;;;;;;;GAcG;AACH,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAL1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;gBAGjE,QAAQ,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,UAAU,YAAA;IAMtC,OAAO,CAAC,IAAI;IAiCZ,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAItC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,wEAAwE;IACxE,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAQvC,OAAO,CAAC,OAAO;CAehB"}
+{"version":3,"file":"approval-store.d.ts","sourceRoot":"","sources":["../../src/approvals/approval-store.ts"],"names":[],"mappings":"AAGA,iFAAiF;AACjF,UAAU,UAAU;IAClB,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAChC;AAED,qEAAqE;AACrE,eAAO,MAAM,yBAAyB,wBAAwB,CAAC;AAc/D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,iBAAiB;IAU1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAT1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,WAAW,CAAuC;IAC1D,yFAAyF;IACzF,OAAO,CAAC,eAAe,CAA4B;IACnD,iFAAiF;IACjF,OAAO,CAAC,yBAAyB,CAA4B;gBAG3D,QAAQ,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,UAAU,YAAA;IAMtC,OAAO,CAAC,SAAS;IAcjB,0EAA0E;IAC1E,OAAO,CAAC,OAAO;IAWf;;;OAGG;IACH,OAAO,CAAC,QAAQ;IAuChB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAKtC,IAAI,IAAI,IAAI,MAAM,CAGjB;IAED;;;;;OAKG;IACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAuC1C;;;;;OAKG;IACH,OAAO,CAAC,OAAO;CAqBhB"}

package/dist/approvals/approval-store.js

@@ -1,7 +1,8 @@
-import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { mkdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 /** File name inside the plugin state dir (volume-backed in prod). */
 export const TOOL_APPROVALS_STATE_FILE = "tool-approvals.json";
+const MISSING = "missing";
 /**
  * Persistent per-tool "always allow" decisions for the MCP tool approval gate.
  *
@@ -12,31 +13,75 @@ export const TOOL_APPROVALS_STATE_FILE = "tool-approvals.json";
  * redeploys, and plugin auto-updates.
  *
  * To make a tool prompt again, delete its entry from `tool-approvals.json`
- * (or the whole file) in the state dir.
+ * (or the whole file) in the state dir. That takes effect at the next gated
+ * call, with no restart.
  *
- * Load is synchronous (once, at plugin register()); writes are synchronous
- * atomic temp → rename, and only happen on an explicit user decision.
+ * The file is the source of truth, shared by every registry the host builds
+ * (chat, cron, …), each with its own store (RT566-02, RT566-10):
+ * - before every decision the store `stat`s the file and re-reads it only when
+ *   its mtime, size or inode changed since the last read;
+ * - a missing file, or one that cannot be read or parsed, means no grants
+ *   (every gated tool prompts); a bad file is logged once per version;
+ * - a write is read-modify-write: re-read the file, add this one grant, write
+ *   atomically (temp → rename). It never drops a grant another registry wrote
+ *   and never brings back one the user revoked.
  */
 export class ToolApprovalStore {
     logger;
     filePath;
     allowAlways = new Map();
+    /** Signature of the file version `allowAlways` was read from (undefined: never read). */
+    loadedSignature;
+    /** File version a grant was last refused a write for (warn once per version). */
+    unwritableWarnedSignature;
     constructor(stateDir, logger) {
         this.logger = logger;
         this.filePath = join(stateDir, TOOL_APPROVALS_STATE_FILE);
-        this.load();
+        this.refresh();
     }
-    load() {
+    signature(path = this.filePath) {
+        try {
+            const st = statSync(path);
+            return `${st.mtimeMs}:${st.size}:${st.ino}`;
+        }
+        catch (err) {
+            if (isNotFound(err)) {
+                return MISSING;
+            }
+            // Unknown state: a fresh signature forces a read, which fails the same
+            // way and reads as no grants (fail closed: the tool prompts).
+            return `stat-error:${errMessage(err)}`;
+        }
+    }
+    /** One `stat`; re-read only when the file changed since the last read. */
+    refresh() {
+        const sig = this.signature();
+        if (sig === this.loadedSignature) {
+            return;
+        }
+        // Taken before the read: if the file changes in between, the next call's
+        // signature differs and it reads again.
+        this.loadedSignature = sig;
+        this.allowAlways = sig === MISSING ? new Map() : this.readFile(true).grants;
+    }
+    /**
+     * Read and parse the file; any failure is no grants. `ok` is false when the
+     * file exists but cannot be read or parsed (a missing file is ok and empty).
+     */
+    readFile(warn) {
+        const grants = new Map();
         let raw;
         try {
             raw = readFileSync(this.filePath, "utf8");
         }
         catch (err) {
-            const isNotFound = err instanceof Error && "code" in err && err.code === "ENOENT";
-            if (!isNotFound) {
-                this.logger?.warn(`[senpi-tool-approvals] failed to read state file, starting empty | path=${this.filePath} err=${err instanceof Error ? err.message : String(err)}`);
+            if (isNotFound(err)) {
+                return { grants, ok: true };
             }
-            return;
+            if (warn) {
+                this.logger?.warn(`[senpi-tool-approvals] failed to read state file, treating it as no grants (all gated tools will prompt) | path=${this.filePath} err=${errMessage(err)}`);
+            }
+            return { grants, ok: false };
         }
         try {
             const parsed = JSON.parse(raw);
@@ -44,7 +89,7 @@ export class ToolApprovalStore {
             if (entries && typeof entries === "object" && !Array.isArray(entries)) {
                 for (const [tool, entry] of Object.entries(entries)) {
                     if (typeof tool === "string" && tool.length > 0) {
-                        this.allowAlways.set(tool, {
+                        grants.set(tool, {
                             decidedAt: typeof entry?.decidedAt === "string" ? entry.decidedAt : "",
                         });
                     }
@@ -52,36 +97,95 @@ export class ToolApprovalStore {
             }
         }
         catch (err) {
-            this.logger?.warn(`[senpi-tool-approvals] corrupt state file, starting empty (all gated tools will prompt again) | path=${this.filePath} err=${err instanceof Error ? err.message : String(err)}`);
+            if (warn) {
+                this.logger?.warn(`[senpi-tool-approvals] corrupt state file, treating it as no grants (all gated tools will prompt) | path=${this.filePath} err=${errMessage(err)}`);
+            }
+            return { grants: new Map(), ok: false };
         }
+        return { grants, ok: true };
     }
     isAllowedAlways(tool) {
+        this.refresh();
         return this.allowAlways.has(tool);
     }
     get size() {
+        this.refresh();
         return this.allowAlways.size;
     }
-    /** Record a user's allow-always decision and persist it immediately. */
+    /**
+     * Record a user's allow-always decision and persist it immediately.
+     *
+     * @returns true when the grant is in the state file, false when it is kept in
+     *   memory only (the file could not be read or written; a warn names why).
+     */
     rememberAllowAlways(tool) {
-        if (!tool || this.allowAlways.has(tool)) {
-            return;
+        if (!tool) {
+            return false;
+        }
+        if (this.isAllowedAlways(tool)) {
+            // Already granted: in the file unless an earlier grant was kept in memory only.
+            const { grants, ok } = this.readFile(false);
+            return ok && grants.has(tool);
+        }
+        const entry = { decidedAt: new Date().toISOString() };
+        // Read-modify-write against the file as it is now, not this store's copy.
+        // The signature is taken before the read, so a write landing after it makes
+        // the next decision re-read.
+        const before = this.signature();
+        const { grants: merged, ok } = this.readFile(false);
+        if (!ok) {
+            // Writing now would replace the user's other grants with this one. Keep
+            // it in memory until the file next changes; the file stays as it is.
+            if (this.unwritableWarnedSignature !== before) {
+                this.unwritableWarnedSignature = before;
+                this.logger?.warn(`[senpi-tool-approvals] state file unreadable, allow-always not written (kept in memory until the file changes) | path=${this.filePath} tool=${tool}`);
+            }
+            // Add to what this store holds for this file version (earlier
+            // in-memory-only grants included), not to the empty failed read.
+            // loadedSignature stays the one from the refresh above, so a change since
+            // then is re-read at the next decision.
+            this.allowAlways.set(tool, entry);
+            return false;
         }
-        this.allowAlways.set(tool, { decidedAt: new Date().toISOString() });
-        this.persist();
+        merged.set(tool, entry);
+        // On a failed write the grant stays in memory until the file next changes.
+        this.allowAlways = merged;
+        const written = this.persist(merged);
+        this.loadedSignature = written ?? before;
+        return written !== undefined;
     }
-    persist() {
+    /**
+     * Write atomically. Returns the written file's signature, taken from the temp
+     * file before the rename (rename keeps inode, mtime and size), so a write by
+     * someone else right after the rename is seen at the next decision; undefined
+     * when the write failed.
+     */
+    persist(grants) {
+        const tmpPath = `${this.filePath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
         try {
             mkdirSync(dirname(this.filePath), { recursive: true });
-            const shape = {
-                allowAlways: Object.fromEntries(this.allowAlways),
-            };
-            const tmpPath = `${this.filePath}.tmp`;
+            const shape = { allowAlways: Object.fromEntries(grants) };
             writeFileSync(tmpPath, JSON.stringify(shape, null, 2), "utf8");
+            const written = this.signature(tmpPath);
             renameSync(tmpPath, this.filePath);
+            return written;
         }
         catch (err) {
-            this.logger?.warn(`[senpi-tool-approvals] failed to persist state (decision kept in memory only) | path=${this.filePath} err=${err instanceof Error ? err.message : String(err)}`);
+            try {
+                unlinkSync(tmpPath);
+            }
+            catch {
+                // Nothing to clean up.
+            }
+            this.logger?.warn(`[senpi-tool-approvals] failed to persist state (decision kept in memory only) | path=${this.filePath} err=${errMessage(err)}`);
+            return undefined;
         }
     }
 }
+function isNotFound(err) {
+    return err instanceof Error && "code" in err && err.code === "ENOENT";
+}
+function errMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
 //# sourceMappingURL=approval-store.js.map

package/dist/approvals/approval-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-store.js","sourceRoot":"","sources":["../../src/approvals/approval-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAO1C,qEAAqE;AACrE,MAAM,CAAC,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AAU/D;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,iBAAiB;IAMT;IALF,QAAQ,CAAS;IACjB,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEnE,YACE,QAAgB,EACC,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;QAEpC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAEO,IAAI;QACV,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,UAAU,GACd,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC;YAC5F,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,2EAA2E,IAAI,CAAC,QAAQ,QAAQ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACnJ,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,EAAE,WAAW,CAAC;YACpC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAChD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE;4BACzB,SAAS,EAAE,OAAO,KAAK,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;yBACvE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wGAAwG,IAAI,CAAC,QAAQ,QAAQ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChL,CAAC;QACJ,CAAC;IACH,CAAC;IAED,eAAe,CAAC,IAAY;QAC1B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED,wEAAwE;IACxE,mBAAmB,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,KAAK,GAA2B;gBACpC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;aAClD,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,QAAQ,MAAM,CAAC;YACvC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/D,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wFAAwF,IAAI,CAAC,QAAQ,QAAQ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChK,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"approval-store.js","sourceRoot":"","sources":["../../src/approvals/approval-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAO1C,qEAAqE;AACrE,MAAM,CAAC,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AAY/D,MAAM,OAAO,GAAkB,SAAS,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,iBAAiB;IAUT;IATF,QAAQ,CAAS;IAC1B,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC1D,yFAAyF;IACjF,eAAe,CAA4B;IACnD,iFAAiF;IACzE,yBAAyB,CAA4B;IAE7D,YACE,QAAgB,EACC,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;QAEpC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,SAAS,CAAC,OAAe,IAAI,CAAC,QAAQ;QAC5C,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO,GAAG,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,uEAAuE;YACvE,8DAA8D;YAC9D,OAAO,cAAc,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED,0EAA0E;IAClE,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,IAAI,GAAG,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,yEAAyE;QACzE,wCAAwC;QACxC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAC9E,CAAC;IAED;;;OAGG;IACK,QAAQ,CAAC,IAAa;QAC5B,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;QACnD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC9B,CAAC;YACD,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,mHAAmH,IAAI,CAAC,QAAQ,QAAQ,UAAU,CAAC,GAAG,CAAC,EAAE,CAC1J,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,EAAE,WAAW,CAAC;YACpC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAChD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;4BACf,SAAS,EAAE,OAAO,KAAK,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;yBACvE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,4GAA4G,IAAI,CAAC,QAAQ,QAAQ,UAAU,CAAC,GAAG,CAAC,EAAE,CACnJ,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,eAAe,CAAC,IAAY;QAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,IAAI;QACN,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,gFAAgF;YAChF,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,KAAK,GAAqB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACxE,0EAA0E;QAC1E,4EAA4E;QAC5E,6BAA6B;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,wEAAwE;YACxE,qEAAqE;YACrE,IAAI,IAAI,CAAC,yBAAyB,KAAK,MAAM,EAAE,CAAC;gBAC9C,IAAI,CAAC,yBAAyB,GAAG,MAAM,CAAC;gBACxC,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,yHAAyH,IAAI,CAAC,QAAQ,SAAS,IAAI,EAAE,CACtJ,CAAC;YACJ,CAAC;YACD,8DAA8D;YAC9D,iEAAiE;YACjE,0EAA0E;YAC1E,wCAAwC;YACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxB,2EAA2E;QAC3E,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,OAAO,IAAI,MAAM,CAAC;QACzC,OAAO,OAAO,KAAK,SAAS,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACK,OAAO,CAAC,MAAqC;QACnD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7F,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,KAAK,GAA2B,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAClF,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACxC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,UAAU,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wFAAwF,IAAI,CAAC,QAAQ,QAAQ,UAAU,CAAC,GAAG,CAAC,EAAE,CAC/H,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAO,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC;AACnG,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/approvals/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/approvals/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEzD,yCAAyC;AACzC,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE;QACR,IAAI,EAAE,iBAAiB,CAAC;QACxB,yEAAyE;QACzE,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,8EAA8E;IAC9E,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAWD;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,EAAE,qBA0B9C,CAAC;AAIF;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,IAAI,qBAAqB,CAcjE;AAED,2CAA2C;AAC3C,wBAAgB,uCAAuC,IAAI,IAAI,CAE9D"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/approvals/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEzD,yCAAyC;AACzC,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE;QACR,IAAI,EAAE,iBAAiB,CAAC;QACxB,yEAAyE;QACzE,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,8EAA8E;IAC9E,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAWD;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,EAAE,qBAqB9C,CAAC;AAIF;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,IAAI,qBAAqB,CAcjE;AAED,2CAA2C;AAC3C,wBAAgB,uCAAuC,IAAI,IAAI,CAE9D"}

package/dist/approvals/manifest.js

@@ -47,12 +47,7 @@ export const FALLBACK_TOOL_APPROVALS_MANIFEST = {
         "strategy_pause",
         "strategy_top_up",
         "strategy_withdraw_funds",
-        "strategy_bridge_funds_from_hyperliquid_to_evm",
         "transfer_spot_to_perps",
-        // Not currently exposed by the senpi MCP server, but senpi-web's permission
-        // registry lists it — gating a tool that does not exist is a no-op, and it
-        // must not slip through unapproved if it ever ships.
-        "send_usdc",
         "ratchet_stop_add",
         "ratchet_stop_edit",
         "ratchet_stop_delete",

package/dist/approvals/manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/approvals/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAgBlD,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;KACpD,CAAC;IACF,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9C,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA0B;IACrE,aAAa,EAAE,CAAC;IAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE;IAChD,UAAU,EAAE;QACV,iBAAiB;QACjB,gBAAgB;QAChB,eAAe;QACf,cAAc;QACd,iBAAiB;QACjB,iCAAiC;QACjC,gBAAgB;QAChB,0BAA0B;QAC1B,iBAAiB;QACjB,gBAAgB;QAChB,iBAAiB;QACjB,yBAAyB;QACzB,+CAA+C;QAC/C,wBAAwB;QACxB,4EAA4E;QAC5E,2EAA2E;QAC3E,qDAAqD;QACrD,WAAW;QACX,kBAAkB;QAClB,mBAAmB;QACnB,qBAAqB;KACtB;CACF,CAAC;AAEF,IAAI,MAAM,GAAiC,IAAI,CAAC;AAEhD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB;IACvC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,gCAAgC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,YAAY,CAAC,kCAAkC,CAAC,CAAC,IAAI,CACnD,yEAAyE,OAAO,EAAE,CACnF,CAAC;QACF,MAAM,GAAG,gCAAgC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,uCAAuC;IACrD,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC"}
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/approvals/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAgBlD,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;KACpD,CAAC;IACF,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9C,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA0B;IACrE,aAAa,EAAE,CAAC;IAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE;IAChD,UAAU,EAAE;QACV,iBAAiB;QACjB,gBAAgB;QAChB,eAAe;QACf,cAAc;QACd,iBAAiB;QACjB,iCAAiC;QACjC,gBAAgB;QAChB,0BAA0B;QAC1B,iBAAiB;QACjB,gBAAgB;QAChB,iBAAiB;QACjB,yBAAyB;QACzB,wBAAwB;QACxB,kBAAkB;QAClB,mBAAmB;QACnB,qBAAqB;KACtB;CACF,CAAC;AAEF,IAAI,MAAM,GAAiC,IAAI,CAAC;AAEhD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB;IACvC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,gCAAgC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,YAAY,CAAC,kCAAkC,CAAC,CAAC,IAAI,CACnD,yEAAyE,OAAO,EAAE,CACnF,CAAC;QACF,MAAM,GAAG,gCAAgC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,uCAAuC;IACrD,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC"}

package/dist/approvals/telemetry.d.ts

@@ -1,5 +1,25 @@
-/** Terminal user choice at the approval gate. */
-export type ApprovalDecision = "allow-once" | "allow-always" | "deny" | "timeout";
+import type { TurnKind } from "./turn-context.js";
+/**
+ * How an approval ended: a user choice (`allow-once`, `allow-always`,
+ * `deny`), a missed prompt (`timeout`), or `cancelled`: the run was aborted
+ * while the prompt was open, the host had no route or surface to ask (on
+ * 10.x, before any tool runs), or the gate itself stopped a gated call in a
+ * scheduled turn (`cancelReason: "scheduled_turn"`) or in another run that is
+ * not a direct chat turn (`"not_chat_turn"`, D15). The wait time tells a user
+ * abort (long) from a no-route cancellation (milliseconds). `granted` is not a
+ * prompt outcome: the call ran under a stored "Always allow" grant with no
+ * prompt (D16), recorded with its run kind.
+ */
+export type ApprovalDecision = "allow-once" | "allow-always" | "deny" | "timeout" | "cancelled" | "granted";
+/** Where an approval happened, for O7's per-turn-kind queries. Every field is optional. */
+export interface ApprovalResolutionContext {
+    /** The turn's session key; stamped as `gen_ai.conversation.id` (the span convention). */
+    sessionKey?: string;
+    /** `chat` | `cron` | `heartbeat` | `other` | `unknown`; stamped as `senpi.turn.kind`. */
+    turnKind?: TurnKind;
+    /** Why the gate cancelled the call itself; stamped as `senpi.tool_approval.cancel_reason`. */
+    cancelReason?: "scheduled_turn" | "not_chat_turn";
+}
 /**
  * Telemetry seam for the MCP tool approval gate.
  *
@@ -17,8 +37,12 @@ export interface GateTelemetry {
      * deny path, `deny` vs `timeout`). Emits the `tool_approval.resolved` event
      * (info for allows, warn for deny/timeout) + `tool_approval.decisions` metric,
      * so allow-always adoption and deny/timeout rates per tool are chartable.
+     *
+     * @param waitMs - From the gate's `requireApproval` to the resolution (0 when
+     *   the gate cancelled the call itself); `senpi.tool_approval.wait_ms`.
+     * @param context - The turn's session key and kind (see {@link ApprovalResolutionContext}).
      */
-    resolved(toolName: string, decision: ApprovalDecision, isTrade: boolean): void;
+    resolved(toolName: string, decision: ApprovalDecision, isTrade: boolean, waitMs?: number, context?: ApprovalResolutionContext): void;
     /**
      * A user deny or a 10-minute timeout — a state-changing tool the user did NOT
      * authorize, so it did not run. Recorded on the origin-uniform `tool.called`

package/dist/approvals/telemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/approvals/telemetry.ts"],"names":[],"mappings":"AAKA,iDAAiD;AACjD,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC;AAElF;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/E;;;;;;;;OAQG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,kBAAkB,GAAG,IAAI,CAAC;IAC3E;;;;OAIG;IACH,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;CAC7D;AAID,qDAAqD;AACrD,eAAO,MAAM,oBAAoB,EAAE,aA2BlC,CAAC"}
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/approvals/telemetry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAE5G,2FAA2F;AAC3F,MAAM,WAAW,yBAAyB;IACxC,yFAAyF;IACzF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yFAAyF;IACzF,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,8FAA8F;IAC9F,YAAY,CAAC,EAAE,gBAAgB,GAAG,eAAe,CAAC;CACnD;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;;;;;;OAUG;IACH,QAAQ,CACN,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,OAAO,EAChB,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,yBAAyB,GAClC,IAAI,CAAC;IACR;;;;;;;;OAQG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,kBAAkB,GAAG,IAAI,CAAC;IAC3E;;;;OAIG;IACH,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;CAC7D;AAID,qDAAqD;AACrD,eAAO,MAAM,oBAAoB,EAAE,aAgClC,CAAC"}

package/dist/approvals/telemetry.js

@@ -5,17 +5,21 @@ import { createLogger } from "../utils/logger.js";
 const eventLogger = createLogger("[senpi-tool-approvals]");
 /** Production wiring: real event + metric planes. */
 export const defaultGateTelemetry = {
-    resolved(toolName, decision, isTrade) {
-        const denyish = decision === "deny" || decision === "timeout";
-        eventLogger.event(EVENT_NAME.toolApprovalResolved, denyish ? "warn" : "info", {
+    resolved(toolName, decision, isTrade, waitMs, context) {
+        const notRun = decision === "deny" || decision === "timeout" || decision === "cancelled";
+        eventLogger.event(EVENT_NAME.toolApprovalResolved, notRun ? "warn" : "info", {
             body: `tool approval ${decision} for ${toolName}`,
             attributes: eventAttrs({
                 "gen_ai.tool.name": toolName,
                 "senpi.tool_approval.decision": decision,
                 "senpi.tool.is_trade": String(isTrade),
+                "senpi.tool_approval.wait_ms": typeof waitMs === "number" && Number.isFinite(waitMs) ? Math.max(0, Math.round(waitMs)) : undefined,
+                "gen_ai.conversation.id": context?.sessionKey,
+                "senpi.turn.kind": context?.turnKind,
+                "senpi.tool_approval.cancel_reason": context?.cancelReason,
             }),
         });
-        recordApprovalDecision({ toolName, decision, isTrade });
+        recordApprovalDecision({ toolName, decision, isTrade, turnKind: context?.turnKind });
     },
     denied(toolName, reason) {
         emitToolCalled({ name: toolName, origin: "agent", outcome: "denied", errorType: reason });

package/dist/approvals/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/approvals/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AA0ClD,MAAM,WAAW,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AAE3D,qDAAqD;AACrD,MAAM,CAAC,MAAM,oBAAoB,GAAkB;IACjD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO;QAClC,MAAM,OAAO,GAAG,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,SAAS,CAAC;QAC9D,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;YAC5E,IAAI,EAAE,iBAAiB,QAAQ,QAAQ,QAAQ,EAAE;YACjD,UAAU,EAAE,UAAU,CAAmD;gBACvE,kBAAkB,EAAE,QAAQ;gBAC5B,8BAA8B,EAAE,QAAQ;gBACxC,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC;aACvC,CAAC;SACH,CAAC,CAAC;QACH,sBAAsB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,CAAC,QAAQ,EAAE,MAAM;QACrB,cAAc,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1F,cAAc,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,QAAQ;QACrB,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,qBAAqB,EAAE,OAAO,EAAE;YAC3D,IAAI,EAAE,iCAAiC,QAAQ,CAAC,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3E,UAAU,EAAE,UAAU,CAAoD;gBACxE,kBAAkB,EAAE,QAAQ;gBAC5B,YAAY,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAC1D,CAAC;YACF,MAAM,EAAE,EAAE,aAAa,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC5E,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/approvals/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAyElD,MAAM,WAAW,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AAE3D,qDAAqD;AACrD,MAAM,CAAC,MAAM,oBAAoB,GAAkB;IACjD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO;QACnD,MAAM,MAAM,GAAG,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,WAAW,CAAC;QACzF,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;YAC3E,IAAI,EAAE,iBAAiB,QAAQ,QAAQ,QAAQ,EAAE;YACjD,UAAU,EAAE,UAAU,CAAmD;gBACvE,kBAAkB,EAAE,QAAQ;gBAC5B,8BAA8B,EAAE,QAAQ;gBACxC,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC;gBACtC,6BAA6B,EAC3B,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrG,wBAAwB,EAAE,OAAO,EAAE,UAAU;gBAC7C,iBAAiB,EAAE,OAAO,EAAE,QAAQ;gBACpC,mCAAmC,EAAE,OAAO,EAAE,YAAY;aAC3D,CAAC;SACH,CAAC,CAAC;QACH,sBAAsB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,CAAC,QAAQ,EAAE,MAAM;QACrB,cAAc,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1F,cAAc,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,QAAQ;QACrB,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,qBAAqB,EAAE,OAAO,EAAE;YAC3D,IAAI,EAAE,iCAAiC,QAAQ,CAAC,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3E,UAAU,EAAE,UAAU,CAAoD;gBACxE,kBAAkB,EAAE,QAAQ;gBAC5B,YAAY,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAC1D,CAAC;YACF,MAAM,EAAE,EAAE,aAAa,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC5E,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/approvals/tool-approval-gate.d.ts

@@ -1,6 +1,7 @@
 import { ToolApprovalStore } from "./approval-store.js";
 import { type ToolApprovalsManifest, type ToolApprovalsMode } from "./manifest.js";
 import { type GateTelemetry } from "./telemetry.js";
+import type { TurnContextReader, TurnKind } from "./turn-context.js";
 /**
  * Tool approval gate: requires an interactive user approval before
  * state-changing senpi MCP tools execute.
@@ -77,6 +78,37 @@ export declare function describeSenpiToolCall(tool: string, params: unknown): st
  * gateway's description limit, which rejects (not truncates) anything longer.
  */
 export declare function buildApprovalDescription(tool: string, params: unknown): string;
+/**
+ * Counts approval prompts the gate has asked for and not yet seen resolved
+ * (trade tools, and in `all` mode every gated Senpi tool).
+ *
+ * Read by the self-update idle gate (`runtime/auto-update/idle-gate.ts`): a
+ * restart while a user is looking at an approval prompt would cancel it. An
+ * entry ends on any `onResolution` decision (including `cancelled`), or
+ * expires `timeoutMs + slackMs` after it began, so a prompt the gateway never
+ * resolved cannot keep the box busy forever.
+ */
+export declare class PendingApprovalTracker {
+    private readonly slackMs;
+    private readonly now;
+    private readonly open;
+    private nextId;
+    /**
+     * @param slackMs - Grace past the prompt's own timeout before an unresolved entry is dropped.
+     * @param now - Clock, for tests.
+     */
+    constructor(slackMs?: number, now?: () => number);
+    /**
+     * Records a prompt that will time out after `timeoutMs`.
+     *
+     * @returns A handle for {@link end}.
+     */
+    begin(timeoutMs: number): number;
+    /** Marks a prompt resolved. Unknown or repeated handles are ignored. */
+    end(id: number): void;
+    /** Prompts still waiting for an answer. */
+    count(): number;
+}
 export interface RegisterToolApprovalGateOptions {
     api: ToolApprovalGatePluginApi;
     mode: ToolApprovalsMode;
@@ -87,7 +119,54 @@ export interface RegisterToolApprovalGateOptions {
     manifest?: ToolApprovalsManifest;
     /** Injectable for tests; defaults to the real event/metric planes. */
     telemetry?: GateTelemetry;
+    /** Counts open prompts for the self-update idle gate. Optional; nothing is counted without it. */
+    pendingApprovals?: PendingApprovalTracker;
+    /**
+     * The turn of each gated call (session key, chat / cron / heartbeat), for
+     * approval telemetry and the scheduled-turn block. Without it every call
+     * reads `unknown` and nothing is blocked.
+     */
+    turnContext?: TurnContextReader;
+    /**
+     * The host lets the runtime classify runs (`turnClassificationAvailable`,
+     * one boot-time fact). Only then is a gated call outside a direct chat turn
+     * blocked with {@link scheduledTurnBlockReason}; without it every run reads
+     * `unknown` and keeps the prompt, as before this release, so a box missing
+     * the setting never blocks a chat trade.
+     */
+    turnClassification?: boolean;
+    /** Clock for the approval wait time. Default `Date.now`. */
+    now?: () => number;
 }
+/**
+ * The text the model reads when the gate stops a gated call in a scheduled
+ * turn (D13). On 10.10-beta.3 the host's own outcome for such an approval is
+ * a sentence the plugin cannot change and the model cannot act on: for a tool
+ * whose hook context carries the run trigger it cancels with "Plugin approval
+ * unavailable: cron runs have no approval-capable initiating surface."
+ * (`openclaw-worktrees/v2026.10.10-beta.3/src/agents/agent-tools.before-tool-call.approval.ts:161-189,310-320`);
+ * the `senpi__` MCP tools are wrapped without the trigger
+ * (`src/agents/embedded-agent-runner/run/attempt-tool-prepare.ts:468-485`), so
+ * the host asks the gateway instead, which fails with "Plugin approval
+ * unavailable (no approval route)" (`:371`) when no approval client is
+ * connected. The gate blocks first, in every scheduled turn. This text says
+ * what happened and the one step that works: the user asks in chat, where the
+ * approval prompt can be shown. It names no other route.
+ *
+ * D14 (ruled 2026-10-24): the block is outright. When an approval client is
+ * connected, 10.10 would route a `senpi__` approval from a scheduled run to
+ * it; scheduled runs still never get a prompt, even with the user online.
+ * D15: the same block covers every run not positively classified as a direct
+ * chat turn (`other`, `unknown`, a call with no run id), with the
+ * not-a-chat-turn wording. D16: a stored "Always allow" grant is checked
+ * first and wins in every run kind; this block only stops prompts.
+ */
+export declare function scheduledTurnBlockReason(params: {
+    wireName: string;
+    kind: Exclude<TurnKind, "chat">;
+    isTrade: boolean;
+    summary?: string;
+}): string;
 /**
  * Register the `before_tool_call` approval gate. No-op in `off` mode.
  * Returns the store (for tests/introspection) when registered.

package/dist/approvals/tool-approval-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-approval-gate.d.ts","sourceRoot":"","sources":["../../src/approvals/tool-approval-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,UAAU,UAAU;IAClB,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAChC;AAED,uEAAuE;AACvE,MAAM,WAAW,yBAAyB;IACxC,EAAE,CACA,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,EACxC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3B,IAAI,CAAC;CACT;AAED,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAElC,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAO7D;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAM/D;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAE9E;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC,GAAG,iBAAiB,CAqBpB;AAYD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CA2DvF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAY9E;AAED,MAAM,WAAW,+BAA+B;IAC9C,GAAG,EAAE,yBAAyB,CAAC;IAC/B,IAAI,EAAE,iBAAiB,CAAC;IACxB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,sEAAsE;IACtE,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,+BAA+B,GACvC,iBAAiB,GAAG,SAAS,CAgF/B"}
+{"version":3,"file":"tool-approval-gate.d.ts","sourceRoot":"","sources":["../../src/approvals/tool-approval-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAwD,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC1G,OAAO,KAAK,EAAe,iBAAiB,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,UAAU,UAAU;IAClB,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAChC;AAED,uEAAuE;AACvE,MAAM,WAAW,yBAAyB;IACxC,EAAE,CACA,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,EACxC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3B,IAAI,CAAC;CACT;AAED,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAElC,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAO7D;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAM/D;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAE9E;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC,GAAG,iBAAiB,CAqBpB;AAyBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAmEvF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAY9E;AAED;;;;;;;;;GASG;AACH,qBAAa,sBAAsB;IAS/B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG;IATtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAClD,OAAO,CAAC,MAAM,CAAK;IAEnB;;;OAGG;gBAEgB,OAAO,SAAS,EAChB,GAAG,GAAE,MAAM,MAAiB;IAG/C;;;;OAIG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAOhC,wEAAwE;IACxE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAIrB,2CAA2C;IAC3C,KAAK,IAAI,MAAM;CAOhB;AAED,MAAM,WAAW,+BAA+B;IAC9C,GAAG,EAAE,yBAAyB,CAAC;IAC/B,IAAI,EAAE,iBAAiB,CAAC;IACxB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,sEAAsE;IACtE,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,kGAAkG;IAClG,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C;;;;OAIG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,4DAA4D;IAC5D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAiBT;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,+BAA+B,GACvC,iBAAiB,GAAG,SAAS,CAiJ/B"}