@senpi/runtime 3.0.180 → 3.0.181

package/dist/approvals/tool-approval-gate.js

@@ -57,6 +57,15 @@ function str(value) {
         return String(value);
     return undefined;
 }
+/** One `create_position` order as a sentence: "Open a LONG position on BTC · margin $50 · 5x". */
+function describeOpen(asset, direction, margin, leverage) {
+    const parts = [`Open a ${direction ?? ""} position on ${asset ?? "?"}`.replace(/\s+/g, " ")];
+    if (margin)
+        parts.push(`margin $${margin}`);
+    if (leverage)
+        parts.push(`${leverage}x`);
+    return parts.join(" · ");
+}
 /**
  * Human sentence for a senpi trade tool call, mirroring senpi-web's own
  * per-tool phrasing (its `getDescription` registry).
@@ -74,18 +83,23 @@ export function describeSenpiToolCall(tool, params) {
     const p = (params ?? {});
     const asset = str(p.asset) ?? str(p.coin) ?? str(p.symbol);
     const strategyId = str(p.strategyId) ?? str(p.strategy_id);
-    const amount = str(p.amount) ?? str(p.usdAmount) ?? str(p.margin);
+    const amount = str(p.amount) ?? str(p.usdAmount) ?? str(p.margin) ?? str(p.marginAmount);
     const leverage = str(p.leverage);
     const direction = str(p.direction) ?? str(p.side);
     const parts = [];
     switch (tool) {
         case "create_position": {
-            parts.push(`Open a ${direction ?? ""} position on ${asset ?? "?"}`.replace(/\s+/g, " "));
-            if (amount)
-                parts.push(`margin $${amount}`);
-            if (leverage)
-                parts.push(`${leverage}x`);
-            break;
+            // The MCP's shape is `orders: [{ coin, direction, leverage, marginAmount }]`; top-level
+            // fields are the fallback for an older or hand-built call.
+            const orders = Array.isArray(p.orders)
+                ? p.orders.filter((o) => Boolean(o) && typeof o === "object")
+                : [];
+            if (orders.length > 0) {
+                return orders
+                    .map((o) => describeOpen(str(o.coin) ?? str(o.asset) ?? asset, str(o.direction) ?? str(o.side) ?? direction, str(o.marginAmount) ?? str(o.margin) ?? amount, str(o.leverage) ?? leverage))
+                    .join("; ");
+            }
+            return describeOpen(asset, direction, amount, leverage);
         }
         case "close_position":
             parts.push(`Close position ${str(p.positionId) ?? asset ?? ""}`.trim());
@@ -144,6 +158,93 @@ export function buildApprovalDescription(tool, params) {
     const base = hasArgs ? `${head} — ${args}` : head;
     return truncate(base, DESCRIPTION_MAX_LENGTH);
 }
+/**
+ * Counts approval prompts the gate has asked for and not yet seen resolved
+ * (trade tools, and in `all` mode every gated Senpi tool).
+ *
+ * Read by the self-update idle gate (`runtime/auto-update/idle-gate.ts`): a
+ * restart while a user is looking at an approval prompt would cancel it. An
+ * entry ends on any `onResolution` decision (including `cancelled`), or
+ * expires `timeoutMs + slackMs` after it began, so a prompt the gateway never
+ * resolved cannot keep the box busy forever.
+ */
+export class PendingApprovalTracker {
+    slackMs;
+    now;
+    open = new Map();
+    nextId = 1;
+    /**
+     * @param slackMs - Grace past the prompt's own timeout before an unresolved entry is dropped.
+     * @param now - Clock, for tests.
+     */
+    constructor(slackMs = 60_000, now = Date.now) {
+        this.slackMs = slackMs;
+        this.now = now;
+    }
+    /**
+     * Records a prompt that will time out after `timeoutMs`.
+     *
+     * @returns A handle for {@link end}.
+     */
+    begin(timeoutMs) {
+        const id = this.nextId++;
+        const ttl = Number.isFinite(timeoutMs) && timeoutMs > 0 ? timeoutMs : 0;
+        this.open.set(id, this.now() + ttl + this.slackMs);
+        return id;
+    }
+    /** Marks a prompt resolved. Unknown or repeated handles are ignored. */
+    end(id) {
+        this.open.delete(id);
+    }
+    /** Prompts still waiting for an answer. */
+    count() {
+        const now = this.now();
+        for (const [id, expiresAt] of this.open) {
+            if (now >= expiresAt)
+                this.open.delete(id);
+        }
+        return this.open.size;
+    }
+}
+/**
+ * The text the model reads when the gate stops a gated call in a scheduled
+ * turn (D13). On 10.10-beta.3 the host's own outcome for such an approval is
+ * a sentence the plugin cannot change and the model cannot act on: for a tool
+ * whose hook context carries the run trigger it cancels with "Plugin approval
+ * unavailable: cron runs have no approval-capable initiating surface."
+ * (`openclaw-worktrees/v2026.10.10-beta.3/src/agents/agent-tools.before-tool-call.approval.ts:161-189,310-320`);
+ * the `senpi__` MCP tools are wrapped without the trigger
+ * (`src/agents/embedded-agent-runner/run/attempt-tool-prepare.ts:468-485`), so
+ * the host asks the gateway instead, which fails with "Plugin approval
+ * unavailable (no approval route)" (`:371`) when no approval client is
+ * connected. The gate blocks first, in every scheduled turn. This text says
+ * what happened and the one step that works: the user asks in chat, where the
+ * approval prompt can be shown. It names no other route.
+ *
+ * D14 (ruled 2026-10-24): the block is outright. When an approval client is
+ * connected, 10.10 would route a `senpi__` approval from a scheduled run to
+ * it; scheduled runs still never get a prompt, even with the user online.
+ * D15: the same block covers every run not positively classified as a direct
+ * chat turn (`other`, `unknown`, a call with no run id), with the
+ * not-a-chat-turn wording. D16: a stored "Always allow" grant is checked
+ * first and wins in every run kind; this block only stops prompts.
+ */
+export function scheduledTurnBlockReason(params) {
+    const what = params.isTrade ? "trade" : "action";
+    const What = params.isTrade ? "Trades" : "Actions";
+    const about = params.summary ? `what you were about to do (${params.summary})` : "what you were about to do";
+    const scheduled = params.kind === "cron" || params.kind === "heartbeat";
+    const why = scheduled
+        ? `this scheduled run (${params.kind}) has no way to ask for it`
+        : "only a direct chat turn can ask for it; this run is not one";
+    return (`The ${what} was not executed: ${params.wireName} needs the user's approval, and ${why}. ` +
+        (scheduled ? `${What} from scheduled runs need the user's approval in chat. ` : `${What} need the user's approval in chat. `) +
+        `Tell the user ${about} and that they can ask for it in chat, where they will be asked to approve it. ` +
+        // Not "do not call this tool again": that leaves every other route open
+        // (another trade tool, a raw MCP call from a skill script), and the agent
+        // takes the route a refusal leaves. The only path is the user, in chat.
+        "Do not try to do this another way from this run; only the user's approval in chat can make it happen.");
+}
 /**
  * Register the `before_tool_call` approval gate. No-op in `off` mode.
  * Returns the store (for tests/introspection) when registered.
@@ -159,8 +260,13 @@ export function registerToolApprovalGate(options) {
     const tradeTools = new Set(manifest.tradeTools);
     const timeoutMs = manifest.defaults.timeoutMs;
     const store = new ToolApprovalStore(stateDir, logger);
+    const now = options.now ?? Date.now;
+    const resolutionContext = (turn) => ({
+        ...(turn.sessionKey ? { sessionKey: turn.sessionKey } : {}),
+        turnKind: turn.kind,
+    });
     logger?.info(`[senpi-tool-approvals] enabled | mode=${mode} tradeTools=${tradeTools.size} allowAlways=${store.size} timeoutMs=${timeoutMs}`);
-    api.on("before_tool_call", (event) => {
+    api.on("before_tool_call", (event, ctx) => {
         // The registry name openclaw uses on the wire (e.g. `senpi__create_position`).
         // Telemetry keys on it for consistency with the span/tool.called stream,
         // which use the prefixed name too. Set inside the try so a hostile event
@@ -177,9 +283,62 @@ export function registerToolApprovalGate(options) {
             if (mode === "trades" && !isTrade) {
                 return undefined;
             }
+            const c = ctx && typeof ctx === "object" ? ctx : undefined;
+            const runId = ev?.runId ?? c?.runId;
+            const turn = options.turnContext?.lookup({
+                runId,
+                sessionKey: c?.sessionKey,
+            }) ?? { ...(typeof c?.sessionKey === "string" && c.sessionKey ? { sessionKey: c.sessionKey } : {}), kind: "unknown" };
+            // D16: an "Always allow" grant wins in every run kind, scheduled and
+            // unknown included; the block below only stops prompts. Recorded with
+            // the run kind so grant-path calls from scheduled runs stay visible.
             if (store.isAllowedAlways(tool)) {
+                try {
+                    telemetry.resolved(wireName ?? `senpi__${tool}`, "granted", isTrade, 0, resolutionContext(turn));
+                }
+                catch {
+                    // Telemetry must never decide whether a tool runs.
+                }
                 return undefined;
             }
+            // The block decision uses the call's own run only (a lookup with a run id
+            // reads that run). The session's-latest-run fallback, used when there is
+            // no run id, is for telemetry only: it could take a chat for a heartbeat
+            // on the shared main session. Both hosts always pass the run id.
+            // D15: only a run positively classified as a direct chat turn may ask;
+            // an unknown run or a call with no run id is not one (fail closed).
+            const runKind = typeof runId === "string" && runId.length > 0 ? turn.kind : "unknown";
+            if (options.turnClassification === true && runKind !== "chat") {
+                const scheduled = runKind === "cron" || runKind === "heartbeat";
+                const name = wireName ?? `senpi__${tool}`;
+                let summary;
+                try {
+                    summary = describeSenpiToolCall(tool, ev?.params);
+                }
+                catch {
+                    summary = undefined;
+                }
+                // Built before any telemetry, so an exporter failure can't reach the
+                // fail-open catch below and let a scheduled trade run unapproved.
+                const blocked = {
+                    block: true,
+                    blockReason: scheduledTurnBlockReason({ wireName: name, kind: runKind, isTrade, summary }),
+                };
+                try {
+                    telemetry.resolved(name, "cancelled", isTrade, 0, {
+                        ...resolutionContext(turn),
+                        turnKind: runKind,
+                        cancelReason: scheduled ? "scheduled_turn" : "not_chat_turn",
+                    });
+                    logger?.info(`[senpi-tool-approvals] gated call outside a chat turn blocked | tool=${tool} turn=${runKind}`);
+                }
+                catch {
+                    // Telemetry must never decide whether a trade runs.
+                }
+                return blocked;
+            }
+            const pendingId = options.pendingApprovals?.begin(timeoutMs);
+            const askedAt = now();
             return {
                 requireApproval: {
                     title: truncate(`Senpi trade approval: ${tool}`, TITLE_MAX_LENGTH),
@@ -188,10 +347,17 @@ export function registerToolApprovalGate(options) {
                     timeoutMs,
                     timeoutBehavior: "deny",
                     onResolution: (decision) => {
+                        if (pendingId !== undefined)
+                            options.pendingApprovals?.end(pendingId);
                         const name = wireName ?? `senpi__${tool}`;
                         if (decision === "allow-always") {
-                            store.rememberAllowAlways(tool);
-                            logger?.info(`[senpi-tool-approvals] allow-always persisted | tool=${tool}`);
+                            if (store.rememberAllowAlways(tool)) {
+                                logger?.info(`[senpi-tool-approvals] allow-always persisted | tool=${tool}`);
+                            }
+                            else {
+                                logger?.info("[senpi-tool-approvals] allow-always kept in memory only (the state file could not be read or " +
+                                    `written; the store's warn names the cause and path, and a restart drops the grant) | tool=${tool}`);
+                            }
                         }
                         else if (decision === "deny") {
                             telemetry.denied(name, "user_denied");
@@ -201,14 +367,17 @@ export function registerToolApprovalGate(options) {
                             // fails closed. A real product signal, and otherwise invisible.
                             telemetry.denied(name, "approval_timeout");
                         }
-                        // Audit every terminal decision — the only record of the approve
-                        // path (allow-once vs allow-always). `cancelled` (run aborted) is
-                        // not a user decision, so it's excluded.
+                        // Audit every terminal decision: the only record of the approve
+                        // path (allow-once vs allow-always), and of `cancelled` (a run
+                        // abort, or on 10.x no route or surface to ask). A cancellation is
+                        // not a deny: no tool.called{denied}, nothing persisted. The wait
+                        // time tells a user abort from a no-route cancellation.
                         if (decision === "allow-once" ||
                             decision === "allow-always" ||
                             decision === "deny" ||
-                            decision === "timeout") {
-                            telemetry.resolved(name, decision, isTrade);
+                            decision === "timeout" ||
+                            decision === "cancelled") {
+                            telemetry.resolved(name, decision, isTrade, Math.max(0, now() - askedAt), resolutionContext(turn));
                         }
                     },
                 },

package/dist/approvals/tool-approval-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-approval-gate.js","sourceRoot":"","sources":["../../src/approvals/tool-approval-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,yBAAyB,GAG1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAsB,MAAM,gBAAgB,CAAC;AA0C1E,yFAAyF;AACzF,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAE7D,8EAA8E;AAC9E,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAKxC;IACC,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,yBAAyB,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IACvF,MAAM,UAAU,GAA8C;QAC5D,EAAE,MAAM,EAAE,OAAO,sBAAsB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,EAAE;QACxF,EAAE,MAAM,EAAE,+BAA+B,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE;KACvF,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;YACxF,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GACd,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;QAC/F,IAAI,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,IAAI,CACjB,uCAAuC,SAAS,CAAC,MAAM,UAAU,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,6BAA6B,eAAe,6BAA6B,CAC1K,CAAC;QACF,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,SAAiB;IAChD,OAAO,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC;AACjF,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,MAAe;IACjE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,UAAU,SAAS,IAAI,EAAE,gBAAgB,KAAK,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YACzF,IAAI,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;YAC5C,IAAI,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC;YACzC,MAAM;QACR,CAAC;QACD,KAAK,gBAAgB;YACnB,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,MAAM;QACR,KAAK,eAAe;YAClB,KAAK,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACvE,MAAM;QACR,KAAK,cAAc;YACjB,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM;QACR,KAAK,iBAAiB,CAAC;QACvB,KAAK,iCAAiC;YACpC,KAAK,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM;QACR,KAAK,gBAAgB,CAAC;QACtB,KAAK,0BAA0B;YAC7B,KAAK,CAAC,IAAI,CAAC,kBAAkB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM;QACR,KAAK,iBAAiB;YACpB,KAAK,CAAC,IAAI,CAAC,mBAAmB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACzD,MAAM;QACR,KAAK,gBAAgB;YACnB,KAAK,CAAC,IAAI,CAAC,kBAAkB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM;QACR,KAAK,iBAAiB;YACpB,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,qBAAqB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7F,MAAM;QACR,KAAK,yBAAyB;YAC5B,KAAK,CAAC,IAAI,CACR,YAAY,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,iBAAiB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAClF,CAAC;YACF,MAAM;QACR,KAAK,wBAAwB;YAC3B,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/E,MAAM;QACR;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,MAAe;IACpE,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,yBAAyB,CAAC;IACnC,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC;IAC/C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,OAAO,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;AAChD,CAAC;AAcD;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAwC;IAExC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAChD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,EAAE,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,yBAAyB,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,oBAAoB,CAAC;IAC5D,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,EAAE,IAAI,CACV,yCAAyC,IAAI,eAAe,UAAU,CAAC,IAAI,gBAAgB,KAAK,CAAC,IAAI,cAAc,SAAS,EAAE,CAC/H,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,KAAc,EAAE,EAAE;QAC5C,+EAA+E;QAC/E,yEAAyE;QACzE,yEAAyE;QACzE,0CAA0C;QAC1C,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,KAA6D,CAAC;YACzE,QAAQ,GAAG,OAAO,EAAE,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IAAI,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,eAAe,EAAE;oBACf,KAAK,EAAE,QAAQ,CAAC,yBAAyB,IAAI,EAAE,EAAE,gBAAgB,CAAC;oBAClE,WAAW,EAAE,wBAAwB,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC;oBACvD,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAE,UAAoB,CAAC,CAAC,CAAE,SAAmB;oBAChE,SAAS;oBACT,eAAe,EAAE,MAAe;oBAChC,YAAY,EAAE,CAAC,QAAiB,EAAE,EAAE;wBAClC,MAAM,IAAI,GAAG,QAAQ,IAAI,UAAU,IAAI,EAAE,CAAC;wBAC1C,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;4BAChC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;4BAChC,MAAM,EAAE,IAAI,CAAC,wDAAwD,IAAI,EAAE,CAAC,CAAC;wBAC/E,CAAC;6BAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;4BAC/B,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;wBACxC,CAAC;6BAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;4BAClC,gEAAgE;4BAChE,gEAAgE;4BAChE,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;wBAC7C,CAAC;wBACD,iEAAiE;wBACjE,kEAAkE;wBAClE,yCAAyC;wBACzC,IACE,QAAQ,KAAK,YAAY;4BACzB,QAAQ,KAAK,cAAc;4BAC3B,QAAQ,KAAK,MAAM;4BACnB,QAAQ,KAAK,SAAS,EACtB,CAAC;4BACD,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAC9C,CAAC;oBACH,CAAC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,oEAAoE;YACpE,MAAM,EAAE,IAAI,CACV,2EAA2E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9H,CAAC;YACF,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"tool-approval-gate.js","sourceRoot":"","sources":["../../src/approvals/tool-approval-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,yBAAyB,GAG1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAsD,MAAM,gBAAgB,CAAC;AA2C1G,yFAAyF;AACzF,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAE7D,8EAA8E;AAC9E,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAKxC;IACC,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,yBAAyB,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IACvF,MAAM,UAAU,GAA8C;QAC5D,EAAE,MAAM,EAAE,OAAO,sBAAsB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,EAAE;QACxF,EAAE,MAAM,EAAE,+BAA+B,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE;KACvF,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;YACxF,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GACd,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;QAC/F,IAAI,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,IAAI,CACjB,uCAAuC,SAAS,CAAC,MAAM,UAAU,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,6BAA6B,eAAe,6BAA6B,CAC1K,CAAC;QACF,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,SAAiB;IAChD,OAAO,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC;AACjF,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kGAAkG;AAClG,SAAS,YAAY,CACnB,KAAyB,EACzB,SAA6B,EAC7B,MAA0B,EAC1B,QAA4B;IAE5B,MAAM,KAAK,GAAG,CAAC,UAAU,SAAS,IAAI,EAAE,gBAAgB,KAAK,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7F,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IAC5C,IAAI,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,MAAe;IACjE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,wFAAwF;YACxF,2DAA2D;YAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBACpC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;gBAC3F,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,MAAM;qBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACT,YAAY,CACV,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,EACpC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,SAAS,EAC5C,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,MAAM,EAC9C,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAC5B,CACF;qBACA,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;YACD,OAAO,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,gBAAgB;YACnB,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,MAAM;QACR,KAAK,eAAe;YAClB,KAAK,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACvE,MAAM;QACR,KAAK,cAAc;YACjB,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM;QACR,KAAK,iBAAiB,CAAC;QACvB,KAAK,iCAAiC;YACpC,KAAK,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM;QACR,KAAK,gBAAgB,CAAC;QACtB,KAAK,0BAA0B;YAC7B,KAAK,CAAC,IAAI,CAAC,kBAAkB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM;QACR,KAAK,iBAAiB;YACpB,KAAK,CAAC,IAAI,CAAC,mBAAmB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACzD,MAAM;QACR,KAAK,gBAAgB;YACnB,KAAK,CAAC,IAAI,CAAC,kBAAkB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM;QACR,KAAK,iBAAiB;YACpB,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,qBAAqB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7F,MAAM;QACR,KAAK,yBAAyB;YAC5B,KAAK,CAAC,IAAI,CACR,YAAY,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,iBAAiB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAClF,CAAC;YACF,MAAM;QACR,KAAK,wBAAwB;YAC3B,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/E,MAAM;QACR;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,MAAe;IACpE,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,yBAAyB,CAAC;IACnC,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC;IAC/C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,OAAO,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,sBAAsB;IASd;IACA;IATF,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,GAAG,CAAC,CAAC;IAEnB;;;OAGG;IACH,YACmB,UAAU,MAAM,EAChB,MAAoB,IAAI,CAAC,GAAG;QAD5B,YAAO,GAAP,OAAO,CAAS;QAChB,QAAG,GAAH,GAAG,CAAyB;IAC5C,CAAC;IAEJ;;;;OAIG;IACH,KAAK,CAAC,SAAiB;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,wEAAwE;IACxE,GAAG,CAAC,EAAU;QACZ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAED,2CAA2C;IAC3C,KAAK;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,GAAG,IAAI,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF;AAgCD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAKxC;IACC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAC7G,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC;IACxE,MAAM,GAAG,GAAG,SAAS;QACnB,CAAC,CAAC,uBAAuB,MAAM,CAAC,IAAI,4BAA4B;QAChE,CAAC,CAAC,6DAA6D,CAAC;IAClE,OAAO,CACL,OAAO,IAAI,sBAAsB,MAAM,CAAC,QAAQ,mCAAmC,GAAG,IAAI;QAC1F,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,yDAAyD,CAAC,CAAC,CAAC,GAAG,IAAI,qCAAqC,CAAC;QAC7H,iBAAiB,KAAK,iFAAiF;QACvG,wEAAwE;QACxE,0EAA0E;QAC1E,wEAAwE;QACxE,uGAAuG,CACxG,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAwC;IAExC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAChD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,EAAE,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,yBAAyB,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,oBAAoB,CAAC;IAC5D,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,iBAAiB,GAAG,CAAC,IAAiB,EAA6B,EAAE,CAAC,CAAC;QAC3E,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,QAAQ,EAAE,IAAI,CAAC,IAAI;KACpB,CAAC,CAAC;IACH,MAAM,EAAE,IAAI,CACV,yCAAyC,IAAI,eAAe,UAAU,CAAC,IAAI,gBAAgB,KAAK,CAAC,IAAI,cAAc,SAAS,EAAE,CAC/H,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,KAAc,EAAE,GAAY,EAAE,EAAE;QAC1D,+EAA+E;QAC/E,yEAAyE;QACzE,yEAAyE;QACzE,0CAA0C;QAC1C,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,KAA8E,CAAC;YAC1F,QAAQ,GAAG,OAAO,EAAE,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,CAAC,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAiD,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1G,MAAM,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,CAAC;YACpC,MAAM,IAAI,GAAgB,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;gBACpD,KAAK;gBACL,UAAU,EAAE,CAAC,EAAE,UAAU;aAC1B,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACtH,qEAAqE;YACrE,sEAAsE;YACtE,qEAAqE;YACrE,IAAI,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACH,SAAS,CAAC,QAAQ,CAAC,QAAQ,IAAI,UAAU,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnG,CAAC;gBAAC,MAAM,CAAC;oBACP,mDAAmD;gBACrD,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,0EAA0E;YAC1E,yEAAyE;YACzE,yEAAyE;YACzE,iEAAiE;YACjE,uEAAuE;YACvE,oEAAoE;YACpE,MAAM,OAAO,GAAa,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC9D,MAAM,SAAS,GAAG,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,WAAW,CAAC;gBAChE,MAAM,IAAI,GAAG,QAAQ,IAAI,UAAU,IAAI,EAAE,CAAC;gBAC1C,IAAI,OAA2B,CAAC;gBAChC,IAAI,CAAC;oBACH,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;gBACpD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,GAAG,SAAS,CAAC;gBACtB,CAAC;gBACD,qEAAqE;gBACrE,kEAAkE;gBAClE,MAAM,OAAO,GAAG;oBACd,KAAK,EAAE,IAAa;oBACpB,WAAW,EAAE,wBAAwB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;iBAC3F,CAAC;gBACF,IAAI,CAAC;oBACH,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE;wBAChD,GAAG,iBAAiB,CAAC,IAAI,CAAC;wBAC1B,QAAQ,EAAE,OAAO;wBACjB,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe;qBAC7D,CAAC,CAAC;oBACH,MAAM,EAAE,IAAI,CAAC,wEAAwE,IAAI,SAAS,OAAO,EAAE,CAAC,CAAC;gBAC/G,CAAC;gBAAC,MAAM,CAAC;oBACP,oDAAoD;gBACtD,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;YACtB,OAAO;gBACL,eAAe,EAAE;oBACf,KAAK,EAAE,QAAQ,CAAC,yBAAyB,IAAI,EAAE,EAAE,gBAAgB,CAAC;oBAClE,WAAW,EAAE,wBAAwB,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC;oBACvD,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAE,UAAoB,CAAC,CAAC,CAAE,SAAmB;oBAChE,SAAS;oBACT,eAAe,EAAE,MAAe;oBAChC,YAAY,EAAE,CAAC,QAAiB,EAAE,EAAE;wBAClC,IAAI,SAAS,KAAK,SAAS;4BAAE,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;wBACtE,MAAM,IAAI,GAAG,QAAQ,IAAI,UAAU,IAAI,EAAE,CAAC;wBAC1C,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;4BAChC,IAAI,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;gCACpC,MAAM,EAAE,IAAI,CAAC,wDAAwD,IAAI,EAAE,CAAC,CAAC;4BAC/E,CAAC;iCAAM,CAAC;gCACN,MAAM,EAAE,IAAI,CACV,+FAA+F;oCAC7F,6FAA6F,IAAI,EAAE,CACtG,CAAC;4BACJ,CAAC;wBACH,CAAC;6BAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;4BAC/B,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;wBACxC,CAAC;6BAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;4BAClC,gEAAgE;4BAChE,gEAAgE;4BAChE,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;wBAC7C,CAAC;wBACD,gEAAgE;wBAChE,+DAA+D;wBAC/D,mEAAmE;wBACnE,kEAAkE;wBAClE,wDAAwD;wBACxD,IACE,QAAQ,KAAK,YAAY;4BACzB,QAAQ,KAAK,cAAc;4BAC3B,QAAQ,KAAK,MAAM;4BACnB,QAAQ,KAAK,SAAS;4BACtB,QAAQ,KAAK,WAAW,EACxB,CAAC;4BACD,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;wBACrG,CAAC;oBACH,CAAC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,oEAAoE;YACpE,MAAM,EAAE,IAAI,CACV,2EAA2E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9H,CAAC;YACF,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/approvals/turn-context.d.ts

@@ -0,0 +1,271 @@
+/**
+ * Which kind of turn a tool call belongs to: a direct user chat, a cron run, a
+ * heartbeat, or another run (R6, D13, D15).
+ *
+ * The tool hooks' context carries no run trigger on any host
+ * (`PluginHookToolContext`, `openclaw-worktrees/v2026.10.10-beta.3/src/plugins/hook-types.ts:526-548`),
+ * but `before_prompt_build`'s agent context does (`trigger`, same field on
+ * 5.7, 5.12 and 10.x), and both carry the run id. The tracker records
+ * `runId → {sessionKey, trigger}` at prompt build and forgets the run at
+ * `agent_end`, so the approval gate can read the turn kind of the call it is
+ * gating.
+ *
+ * On 10.x `before_prompt_build` is a conversation hook: without
+ * `plugins.entries.runtime.hooks.allowConversationAccess` nothing is recorded
+ * and every lookup reads `unknown` ({@link turnClassificationAvailable} says so
+ * at boot).
+ */
+/** Low-cardinality turn kind, as stamped on approval telemetry (`senpi.turn.kind`). */
+export type TurnKind = "chat" | "cron" | "heartbeat" | "other" | "unknown";
+/** What the gate learns about the turn of one tool call. */
+export interface TurnContext {
+    /** The run's session key (the tool context's, when the run is unknown). */
+    sessionKey?: string;
+    kind: TurnKind;
+}
+/** The read side the approval gate takes. */
+export interface TurnContextReader {
+    lookup(params: {
+        runId?: unknown;
+        sessionKey?: unknown;
+    }): TurnContext;
+}
+/**
+ * Maps a bare host run trigger to a {@link TurnKind}: `user` is a chat;
+ * `cron` and `heartbeat` are scheduled runs; any other trigger (`event`,
+ * `memory`, `manual`, `overflow`) is `other`; a missing one is `unknown`. The
+ * tracker uses it only after the run's provenance has been checked: a
+ * `user` trigger alone does not make a run a chat (see {@link TurnContextTracker}).
+ */
+export declare function turnKindOf(trigger: unknown): TurnKind;
+/**
+ * A session the host creates for a spawned child: `agent:<id>:subagent:<uuid>`
+ * (10.10 `src/agents/subagents/spawn-plan.ts:64-65`, `:subagent:incognito-…`
+ * at `subagent-spawn-child-plan.ts:95`; 5.12/5.7 `subagent-spawn.ts:829/821`)
+ * or an ACP child `agent:<id>:acp:<uuid>`.
+ */
+export declare function isChildSession(sessionKey: string | undefined): boolean;
+/**
+ * How long a `sessions_send` / `sessions_spawn` call stays matchable to the
+ * run it starts (the send's target run, the spawned child). That run normally
+ * starts within seconds; a target busy with another run queues the message,
+ * so the window is generous. Past it, the origin run is unidentified and the
+ * started run is not chat.
+ */
+export declare const SESSIONS_SEND_MATCH_WINDOW_MS: number;
+/**
+ * Recent runs by id, bounded, plus what each session's last run was and which
+ * kind each spawned child session inherited.
+ *
+ * Classification (D15: only a run positively identified as a direct chat turn
+ * is `chat`; anything not resolvable is not chat), from the
+ * `before_prompt_build` context (10.10 `attempt-prompt-build.ts:150-159`:
+ * `runId`, `jobId`, `sessionKey`, `trigger`, `inputProvenance`; 5.7/5.12 carry
+ * `runId`, `sessionKey`, `trigger` only, `attempt.ts:2563-2574` / `:2948-2959`):
+ *
+ * 1. `trigger` `cron` / `heartbeat` → that kind.
+ * 2. A `sessions_send` target (`inputProvenance` `inter_session` with
+ *    `sourceTool: "sessions_send"`, 10.10 `sessions-send-tool.ts:477-483`) →
+ *    the kind of the run that SENT it. The provenance names only the source
+ *    session, not the sending run, so the sending run is identified from the
+ *    `sessions_send` call itself: {@link onToolCall} records the calling run's
+ *    kind with its source session and its named target at `before_tool_call`.
+ *    A target run consumes the oldest pending send from `sourceSessionKey`
+ *    whose target is the run's own session, inside
+ *    {@link SESSIONS_SEND_MATCH_WINDOW_MS}. {@link onToolResult} drops a send
+ *    whose result says no run was started for it (an error, a `steered` or
+ *    unstarted `queued` delivery) or that it already finished, and gives a
+ *    send addressed by `label` / `agentId` its resolved target. Until that
+ *    result arrives (in wait mode the target run starts while the call is
+ *    still open), such a send matches a run in any session of the named
+ *    agent (any agent for a bare label), and only when no send with an exact
+ *    target matches; candidates of different kinds still read `other`.
+ *    The reply-back run is recognised too (10.10 `sessions-send-tool.a2a.ts:100,201-208`).
+ *    It runs in the REQUESTER session, with the target as `sourceSessionKey`
+ *    and `sourceTool: "sessions_send"`. It takes the kind of the send whose
+ *    target run started (an open exchange, requester → target). It never
+ *    takes the requester session's own pending sends.
+ *    No match, an unclassified sender, or several candidates of different
+ *    kinds (two runs sending at once; a forward send and a reply-back that
+ *    could both explain the run) leave the origin unidentified → `other`. A
+ *    later run on the source session (a chat starting after a heartbeat sent)
+ *    never changes the answer.
+ *    Other `inter_session` sources (subagent announce, exec-approval
+ *    follow-up, `bash-tools.exec-approval-followup.ts:338-342`) → the kind of
+ *    the `sourceSessionKey` session's last run; `other` when that is unknown.
+ * 3. A child session (`subagent:` / `acp:`) → the kind of the run that
+ *    spawned it. `subagent_spawned` names only the requester session (10.10
+ *    `subagent-spawn-lifecycle.ts:67-71`: ctx `requesterSessionKey`,
+ *    `childSessionKey`), so the spawning run is identified the same way as a
+ *    `sessions_send` sender: {@link onToolCall} records the run's kind at its
+ *    `sessions_spawn` call (`sessions-spawn-tool.ts:355`), and
+ *    `subagent_spawned` consumes the oldest pending spawn from the requester
+ *    session, with the same window and ambiguity rules. Unmatched → `other`.
+ *    10.10 hard-codes `trigger: "user"` for these runs
+ *    (`attempt-execution.ts:349`), and fires `subagent_spawned` after the
+ *    gateway accepted the child (`subagent-spawn.ts:667`), so a child
+ *    classified first reads `other` until its origin arrives.
+ * 4. `trigger` `event` or `inputProvenance.kind === "internal_system"` (a
+ *    continuation after background work, `session-event-handoff.ts:509`;
+ *    neither carries the originating run) → `other`.
+ * 5. A `jobId`, or a `cron:` session, with a non-cron trigger → `other`.
+ * 6. `trigger` `user` with no provenance or `external_user` provenance (a
+ *    webchat `chat.send` turn: `reply-turn-kind.ts:18-22`,
+ *    `chat-send-user-turn.ts:206`) → `chat`.
+ * 7. Any other trigger → `other`; none → `unknown`.
+ *
+ * Known limit: a gateway `agent` call with no provenance on a main session
+ * key (an operator `openclaw agent` run) reads as chat; nothing in the
+ * context tells it apart from a webchat turn.
+ */
+export declare class TurnContextTracker implements TurnContextReader {
+    private readonly maxRuns;
+    private readonly now;
+    private readonly runs;
+    private readonly latestBySession;
+    /** The kind of each session's last classified run; kept past `agent_end`, for inheritance. */
+    private readonly lastKindBySession;
+    /** Child session key → the kind it inherited from its requester. */
+    private readonly childOrigins;
+    /** `sessions_send` / `sessions_spawn` calls waiting for the run they start, oldest first. */
+    private origins;
+    /** Sends whose target run started, waiting for their reply-back run, oldest first. */
+    private exchanges;
+    /**
+     * @param maxRuns - Runs kept at once; the oldest is dropped past it (a missed `agent_end`).
+     * @param now - Clock for the `sessions_send` match window.
+     */
+    constructor(maxRuns?: number, now?: () => number);
+    /**
+     * Records a `sessions_send` or `sessions_spawn` call from a `before_tool_call`
+     * event/context: the calling run's kind (`unknown` when that run was never
+     * classified), its session keys (the call's and the run's own), and for a
+     * send the target it names (`params.sessionKey`; a `label` or `agentId`
+     * marks it unresolved until the result names it). Any other tool, or
+     * malformed input, is ignored.
+     */
+    onToolCall(event: unknown, ctx: unknown): void;
+    /**
+     * Reads a `sessions_send` / `sessions_spawn` result from an `after_tool_call`
+     * event: drops the pending call when the result says it started no run to
+     * match (a failed spawn; for a send, {@link sendStartedNoRunToMatch}), and
+     * gives a send its resolved target session. Unknown calls, other tools and
+     * unreadable results are ignored.
+     */
+    onToolResult(event: unknown, ctx: unknown): void;
+    /**
+     * Records a run from a `before_prompt_build` agent context. Malformed input
+     * is ignored. A run is classified once: 10.x fires the hook again for each
+     * retry attempt of the same run (after compaction, a model or auth
+     * failover), and by then the origin call or exchange that classified it is
+     * consumed, so re-classifying would turn a chat-originated run into `other`.
+     * The first answer stands, whatever it was; a scheduled run stays scheduled.
+     */
+    onPromptBuild(ctx: unknown): void;
+    /**
+     * Records a spawned child's origin from a `subagent_spawned` context/event:
+     * the kind of the run whose `sessions_spawn` call is pending in the requester
+     * session (consumed), or `other` when none matches. Malformed input is ignored.
+     */
+    onSubagentSpawned(ctx: unknown, event?: unknown): void;
+    /** Forgets a run (its `agent_end`). */
+    onRunEnd(runId: unknown): void;
+    /**
+     * The turn of a tool call: by run id, else by the session's latest recorded
+     * run, else `unknown` with the given session key.
+     */
+    lookup(params: {
+        runId?: unknown;
+        sessionKey?: unknown;
+    }): TurnContext;
+    private classify;
+    /** Drops origin calls and exchanges older than the match window. */
+    private prune;
+    /** One kind from several candidates: theirs when all agree and it is known, else `other`. */
+    private static agreed;
+    /**
+     * The pending `tool` call from `source` (for a send: aimed at `target`)
+     * that started this run, consumed, with the kind the candidates agree on;
+     * `undefined` when none matches.
+     */
+    private takeOrigin;
+    /**
+     * The kind of a run whose provenance says `sessions_send` from `source`, in
+     * `sessionKey`: either a target run (a pending send from `source` aimed at
+     * this session) or a reply-back run (an open exchange from this session to
+     * `source`). Both possible with different kinds, or neither → `other`.
+     */
+    private sendOriginKind;
+    /** A session's last classified run kind, or `other` when it is unknown (not resolvable is not chat). */
+    private kindOfSession;
+    private forget;
+}
+/**
+ * Whether this host lets the runtime classify the run a gated call belongs to:
+ * one boot-time fact, never decided per run (D15). Both halves must hold.
+ *
+ * 1. **The host links a tool call to its run.** The gate reads the run id that
+ *    `before_tool_call` carries. 5.12 and 5.7 add the bundle-MCP tools (every
+ *    `senpi__` tool) unwrapped and split them with no hook context (5.12
+ *    `pi-embedded-runner/run/attempt.ts:1228-1235,1275,1737`; 5.7
+ *    `attempt.ts:1035,1081`), so `pi-tool-definition-adapter.ts:240-244` runs the
+ *    hook with no ctx and the call arrives with no run id or session key
+ *    (`pi-tools.before-tool-call.ts:525-534,594-600`). Every `senpi__` call would
+ *    read `unknown`, so a 5.x host is never available, whatever its config.
+ *    The first tag that links is 2026.6.1 (`splitSdkTools` passes
+ *    `catalogToolHookContext`, which carries `runId`). Since 9.5 the bundle
+ *    tools are also wrapped up front (`attempt-bundle-tools.ts:204` on 10.10).
+ *    The runtime gates on the modern host (>= 2026.8.1), which includes that.
+ * 2. **The conversation hooks register.** The tracker is fed by
+ *    `before_prompt_build`, a conversation hook on 10.x. A non-bundled plugin's
+ *    registration is dropped with only a warn diagnostic unless
+ *    `plugins.entries.<id>.hooks.allowConversationAccess` is `true` (10.10
+ *    `registry-registrars-tools-hooks.ts:53-63,404-417`,
+ *    `hook-policy-decisions.ts:10-16`). `allowPromptInjection: false` drops it
+ *    too (5.12 `registry.ts:2288-2296`).
+ *
+ * @param config - The whole OpenClaw config the plugin was registered with (`api.config`).
+ * @returns `reason` for status surfaces. `configFix` only when a config change
+ *   would make it available; a host-version limit has none.
+ */
+export declare function turnClassificationAvailable(params: {
+    modernHost: boolean;
+    config: unknown;
+    pluginId: string;
+}): {
+    available: boolean;
+    reason?: string;
+    configFix?: string;
+};
+/**
+ * The approval gate's host fact as status surfaces show it (`senpi.getHealthStatus` →
+ * `approvals`, `openclaw senpi status`). `unavailable` means every run is asked as before
+ * this release, scheduled runs included: a box config to fix, or (on 5.x) a host limit.
+ * `hostLimit` marks the 5.x case: nothing on the box can change it, so `senpi status`
+ * does not print it as a warning.
+ */
+export type ApprovalsHostStatus = {
+    turnClassification: "available";
+} | {
+    turnClassification: "unavailable";
+    reason?: string;
+    hostLimit?: true;
+};
+/**
+ * Feeds `tracker` from `before_prompt_build` (records; returns nothing, so the
+ * prompt is untouched), `subagent_spawned` (a child's origin; not a
+ * conversation hook on any host), `before_tool_call` / `after_tool_call`
+ * (observe `sessions_send` and `sessions_spawn` calls and their results only,
+ * to identify the run that started a target or a child; return nothing, so
+ * they decide nothing) and `agent_end` (forgets; refused without conversation access, then
+ * the tracker's bound applies). Handlers never throw.
+ */
+export declare function registerTurnContextHooks(params: {
+    api: {
+        on(hookName: string, handler: (...args: unknown[]) => unknown, opts?: {
+            priority?: number;
+        }): void;
+    };
+    tracker: TurnContextTracker;
+}): void;
+//# sourceMappingURL=turn-context.d.ts.map

package/dist/approvals/turn-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-context.d.ts","sourceRoot":"","sources":["../../src/approvals/turn-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,uFAAuF;AACvF,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;AAE3E,4DAA4D;AAC5D,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,6CAA6C;AAC7C,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,WAAW,CAAC;CACxE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,CAMrD;AAiBD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGtE;AAsBD;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,QAAc,CAAC;AA4EzD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,qBAAa,kBAAmB,YAAW,iBAAiB;IAiBxD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAjBtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA+B;IACpD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;IAC7D,8FAA8F;IAC9F,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA+B;IACjE,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA+B;IAC5D,6FAA6F;IAC7F,OAAO,CAAC,OAAO,CAAoB;IACnC,sFAAsF;IACtF,OAAO,CAAC,SAAS,CAAsB;IAEvC;;;OAGG;gBAEgB,OAAO,SAAM,EACb,GAAG,GAAE,MAAM,MAAiB;IAG/C;;;;;;;OAOG;IACH,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI;IA+B9C;;;;;;OAMG;IACH,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI;IAsBhD;;;;;;;OAOG;IACH,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI;IAkBjC;;;;OAIG;IACH,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI;IAWtD,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAK9B;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,WAAW;IAUtE,OAAO,CAAC,QAAQ;IAwBhB,oEAAoE;IACpE,OAAO,CAAC,KAAK;IAMb,6FAA6F;IAC7F,OAAO,CAAC,MAAM,CAAC,MAAM;IAMrB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAmBlB;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAkBtB,wGAAwG;IACxG,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,MAAM;CAOf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAwB9D;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,kBAAkB,EAAE,WAAW,CAAA;CAAE,GACnC;IAAE,kBAAkB,EAAE,aAAa,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AAE7E;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,GAAG,EAAE;QAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,IAAI,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,CAAC;IAC5G,OAAO,EAAE,kBAAkB,CAAC;CAC7B,GAAG,IAAI,CAyCP"}