@senpi/runtime 3.0.180 → 3.0.182

package/dist/actions/llm-decision/openclaw-llm-decision.d.ts

@@ -34,6 +34,14 @@ export declare function splitProviderModel(raw: string | undefined): {
     provider?: string;
     model?: string;
 };
+/**
+ * Whether the host's llm-task plugin accepts a `provider`/`model` in the call:
+ * `plugins.entries["llm-task"].llm.allowModelOverride === true` in a whole
+ * OpenClaw config. OpenClaw 10.x refuses any override without it
+ * (`openclaw-worktrees/v2026.10.10-beta.3/src/plugins/runtime/runtime-llm.runtime.ts:414-463`,
+ * policy owner = the calling plugin, `llm-task`). senpi-agent sets it (A7).
+ */
+export declare function llmTaskModelOverrideAllowed(config: unknown): boolean;
 export declare class OpenClawLlmDecision implements LlmDecision {
     private readonly gatewayUrl;
     private readonly gatewayToken?;

package/dist/actions/llm-decision/openclaw-llm-decision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openclaw-llm-decision.d.ts","sourceRoot":"","sources":["../../../src/actions/llm-decision/openclaw-llm-decision.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAuBxF,MAAM,WAAW,0BAA0B;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CASjG;AAED,qBAAa,mBAAoB,YAAW,WAAW;IACrD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;gBAE3B,OAAO,CAAC,EAAE,0BAA0B;IAM1C,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;CAyF9E"}
+{"version":3,"file":"openclaw-llm-decision.d.ts","sourceRoot":"","sources":["../../../src/actions/llm-decision/openclaw-llm-decision.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAwBxF,MAAM,WAAW,0BAA0B;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CASjG;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAUpE;AAoCD,qBAAa,mBAAoB,YAAW,WAAW;IACrD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;gBAE3B,OAAO,CAAC,EAAE,0BAA0B;IAM1C,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;CA2F9E"}

package/dist/actions/llm-decision/openclaw-llm-decision.js

@@ -5,6 +5,7 @@ import { HEADER_ADDRESS, HEADER_CORRELATION_ID, HEADER_RECIPE_NAME, HEADER_RUNTI
 import { withRetry } from '../../utils/retry.js';
 import { isRetryableDecisionError } from '../../runtime/decision-errors.js';
 import { context as otelContext, propagation } from '@opentelemetry/api';
+import { getOpenClawHost } from '../../host/openclaw-host.js';
 /** Max retries (total attempts = MAX_DECISION_RETRIES + 1) for transient llm-task failures. */
 const MAX_DECISION_RETRIES = 2;
 /** Fixed delay between retry attempts (ms). Backoff is intentionally simple for now. */
@@ -47,6 +48,57 @@ export function splitProviderModel(raw) {
     }
     return { provider: trimmed.slice(0, idx), model: trimmed.slice(idx + 1) };
 }
+/**
+ * Whether the host's llm-task plugin accepts a `provider`/`model` in the call:
+ * `plugins.entries["llm-task"].llm.allowModelOverride === true` in a whole
+ * OpenClaw config. OpenClaw 10.x refuses any override without it
+ * (`openclaw-worktrees/v2026.10.10-beta.3/src/plugins/runtime/runtime-llm.runtime.ts:414-463`,
+ * policy owner = the calling plugin, `llm-task`). senpi-agent sets it (A7).
+ */
+export function llmTaskModelOverrideAllowed(config) {
+    const rec = (v) => v && typeof v === 'object' && !Array.isArray(v) ? v : undefined;
+    const entries = rec(rec(rec(config)?.plugins)?.entries);
+    if (!entries)
+        return false;
+    // The host trims and lowercases plugin entry keys (`normalizePluginPolicyId`,
+    // 10.10 `src/plugins/plugin-policy-id.ts:11-13`), so ` LLM-Task ` is the same entry.
+    return Object.entries(entries).some(([key, entry]) => key.trim().toLowerCase() === 'llm-task' && rec(rec(entry)?.llm)?.allowModelOverride === true);
+}
+/**
+ * The 10.x preflight: throws when a model override is about to be sent to a
+ * modern host whose live config does not allow one. 10.x masks the host's
+ * refusal as a generic retryable 500, so without this every decision of such
+ * a strategy would retry twice and then report a transient hiccup. The thrown
+ * text classifies as the non-retryable {@link DecisionErrorCode} MODEL_OVERRIDE_NOT_ALLOWED.
+ *
+ * No-op on a legacy host, with no host record, or when no config can be read
+ * (neither `runtime.config.current()` nor the registration snapshot); the host
+ * still enforces its own policy then.
+ */
+function assertModelOverrideAllowed(rawModel) {
+    const host = getOpenClawHost();
+    if (!host?.modern)
+        return;
+    let config;
+    try {
+        config = host.currentConfig();
+    }
+    catch {
+        return;
+    }
+    // Neither the live config nor the registration snapshot could be read.
+    if (!config || typeof config !== 'object')
+        return;
+    if (llmTaskModelOverrideAllowed(config))
+        return;
+    // Read by the agent and the user (raw cause in status and logs). It names the
+    // fix that works, a box update or Senpi support, and no config path: the
+    // flag is part of the box setup the Senpi agent image writes at boot, and a
+    // hand edit of the gateway config is not a fix the agent should make.
+    throw new Error(`llm-task model override not allowed: decision_model "${rawModel}" was not used because ` +
+        "this box's OpenClaw setup does not allow llm-task model overrides, a setting the Senpi agent image applies at boot. " +
+        'This is a box setup problem, not a strategy problem: a box update from Senpi support fixes it; it cannot be fixed from inside the agent.');
+}
 export class OpenClawLlmDecision {
     gatewayUrl;
     gatewayToken;
@@ -73,7 +125,10 @@ export class OpenClawLlmDecision {
             // (extensions/llm-task/src/llm-task-tool.ts).
             timeoutMs: 90_000,
         };
-        const { provider, model } = splitProviderModel(request.model ?? this.defaultModel);
+        const rawModel = request.model ?? this.defaultModel;
+        const { provider, model } = splitProviderModel(rawModel);
+        if (provider || model)
+            assertModelOverrideAllowed(rawModel?.trim() ?? '');
         if (provider)
             args.provider = provider;
         if (model)

package/dist/actions/llm-decision/openclaw-llm-decision.js.map

@@ -1 +1 @@
-{"version":3,"file":"openclaw-llm-decision.js","sourceRoot":"","sources":["../../../src/actions/llm-decision/openclaw-llm-decision.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEzE,+FAA+F;AAC/F,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,wFAAwF;AACxF,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAEtC,MAAM,MAAM,GAAG,YAAY,CAAC,0BAA0B,CAAC,CAAC;AAQxD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAuB;IACxD,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,4EAA4E;IAC5E,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,OAAO,mBAAmB;IACb,UAAU,CAAS;IACnB,YAAY,CAAU;IACtB,YAAY,CAAU;IAEvC,YAAY,OAAoC;QAC9C,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,wBAAwB,CAAC;QAClE,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAI,OAA2B;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,IAAI,GAA4B;YACpC,MAAM,EAAE,GAAG,aAAa,gBAAgB,OAAO,CAAC,MAAM,EAAE;YACxD,KAAK,EAAE,OAAO,CAAC,OAAO;YACtB,MAAM,EAAE,sBAAsB;YAC9B,sEAAsE;YACtE,qEAAqE;YACrE,gEAAgE;YAChE,kFAAkF;YAClF,8CAA8C;YAC9C,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;QACnF,IAAI,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACvC,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAC9B,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI;YAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QAClE,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI;YAAE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAExE,2EAA2E;QAC3E,4EAA4E;QAC5E,8EAA8E;QAC9E,yEAAyE;QACzE,4EAA4E;QAC5E,mCAAmC;QACnC,EAAE;QACF,oEAAoE;QACpE,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,KAAK,IAAI,EAAE;YACT,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,eAAe,EAAE;gBACzD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,KAAK,EAAE;oBAClC,cAAc,EAAE,kBAAkB;oBAClC,GAAG,yBAAyB,EAAE;oBAC9B,qEAAqE;oBACrE,mEAAmE;oBACnE,oDAAoD;oBACpD,GAAG,uBAAuB,EAAE;iBAC7B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;aACjD,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAuD,CAAC;YACrF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,EACD;YACE,OAAO,EAAE,oBAAoB;YAC7B,OAAO,EAAE,uBAAuB;YAChC,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,wBAAwB;YACrC,OAAO,EAAE,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE;gBAC5C,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE;oBAC9C,OAAO;oBACP,gBAAgB;iBACjB,CAAC,CAAC;YACL,CAAC;SACF,CACF,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAErC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAE9I,MAAM,MAAM,GAAG,eAAe,CAAI,IAAI,CAAC,MAAM,CAAC,CAAC;QAE/C,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;YACxC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS;SACV,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,yBAAyB;IAChC,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,GAAG,CAAC,KAAK;QAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;IAC1D,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;IACvD,IAAI,GAAG,CAAC,UAAU;QAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC;IACjE,IAAI,GAAG,CAAC,SAAS;QAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC;IAC9D,IAAI,GAAG,CAAC,cAAc;QAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC;IAC7E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB;IAC9B,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"openclaw-llm-decision.js","sourceRoot":"","sources":["../../../src/actions/llm-decision/openclaw-llm-decision.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,+FAA+F;AAC/F,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,wFAAwF;AACxF,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAEtC,MAAM,MAAM,GAAG,YAAY,CAAC,0BAA0B,CAAC,CAAC;AAQxD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAuB;IACxD,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,4EAA4E;IAC5E,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAe;IACzD,MAAM,GAAG,GAAG,CAAC,CAAU,EAAuC,EAAE,CAC9D,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,8EAA8E;IAC9E,qFAAqF;IACrF,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CACjC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,UAAU,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,kBAAkB,KAAK,IAAI,CAC/G,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,0BAA0B,CAAC,QAAgB;IAClD,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,OAAO;IAC1B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,uEAAuE;IACvE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO;IAClD,IAAI,2BAA2B,CAAC,MAAM,CAAC;QAAE,OAAO;IAChD,8EAA8E;IAC9E,yEAAyE;IACzE,4EAA4E;IAC5E,sEAAsE;IACtE,MAAM,IAAI,KAAK,CACb,wDAAwD,QAAQ,yBAAyB;QACvF,sHAAsH;QACtH,0IAA0I,CAC7I,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,mBAAmB;IACb,UAAU,CAAS;IACnB,YAAY,CAAU;IACtB,YAAY,CAAU;IAEvC,YAAY,OAAoC;QAC9C,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,wBAAwB,CAAC;QAClE,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAI,OAA2B;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,IAAI,GAA4B;YACpC,MAAM,EAAE,GAAG,aAAa,gBAAgB,OAAO,CAAC,MAAM,EAAE;YACxD,KAAK,EAAE,OAAO,CAAC,OAAO;YACtB,MAAM,EAAE,sBAAsB;YAC9B,sEAAsE;YACtE,qEAAqE;YACrE,gEAAgE;YAChE,kFAAkF;YAClF,8CAA8C;YAC9C,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC;QACpD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,QAAQ,IAAI,KAAK;YAAE,0BAA0B,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACvC,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAC9B,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI;YAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QAClE,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI;YAAE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAExE,2EAA2E;QAC3E,4EAA4E;QAC5E,8EAA8E;QAC9E,yEAAyE;QACzE,4EAA4E;QAC5E,mCAAmC;QACnC,EAAE;QACF,oEAAoE;QACpE,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,KAAK,IAAI,EAAE;YACT,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,eAAe,EAAE;gBACzD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU,KAAK,EAAE;oBAClC,cAAc,EAAE,kBAAkB;oBAClC,GAAG,yBAAyB,EAAE;oBAC9B,qEAAqE;oBACrE,mEAAmE;oBACnE,oDAAoD;oBACpD,GAAG,uBAAuB,EAAE;iBAC7B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;aACjD,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAuD,CAAC;YACrF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,EACD;YACE,OAAO,EAAE,oBAAoB;YAC7B,OAAO,EAAE,uBAAuB;YAChC,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,wBAAwB;YACrC,OAAO,EAAE,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE;gBAC5C,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE;oBAC9C,OAAO;oBACP,gBAAgB;iBACjB,CAAC,CAAC;YACL,CAAC;SACF,CACF,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAErC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAE9I,MAAM,MAAM,GAAG,eAAe,CAAI,IAAI,CAAC,MAAM,CAAC,CAAC;QAE/C,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;YACxC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS;SACV,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,yBAAyB;IAChC,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,GAAG,CAAC,KAAK;QAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;IAC1D,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;IACvD,IAAI,GAAG,CAAC,UAAU;QAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC;IACjE,IAAI,GAAG,CAAC,SAAS;QAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC;IAC9D,IAAI,GAAG,CAAC,cAAc;QAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC;IAC7E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB;IAC9B,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/approvals/approval-store.d.ts

@@ -14,21 +14,51 @@ export declare const TOOL_APPROVALS_STATE_FILE = "tool-approvals.json";
  * redeploys, and plugin auto-updates.
  *
  * To make a tool prompt again, delete its entry from `tool-approvals.json`
- * (or the whole file) in the state dir.
+ * (or the whole file) in the state dir. That takes effect at the next gated
+ * call, with no restart.
  *
- * Load is synchronous (once, at plugin register()); writes are synchronous
- * atomic temp → rename, and only happen on an explicit user decision.
+ * The file is the source of truth, shared by every registry the host builds
+ * (chat, cron, …), each with its own store (RT566-02, RT566-10):
+ * - before every decision the store `stat`s the file and re-reads it only when
+ *   its mtime, size or inode changed since the last read;
+ * - a missing file, or one that cannot be read or parsed, means no grants
+ *   (every gated tool prompts); a bad file is logged once per version;
+ * - a write is read-modify-write: re-read the file, add this one grant, write
+ *   atomically (temp → rename). It never drops a grant another registry wrote
+ *   and never brings back one the user revoked.
  */
 export declare class ToolApprovalStore {
     private readonly logger?;
     private readonly filePath;
-    private readonly allowAlways;
+    private allowAlways;
+    /** Signature of the file version `allowAlways` was read from (undefined: never read). */
+    private loadedSignature;
+    /** File version a grant was last refused a write for (warn once per version). */
+    private unwritableWarnedSignature;
     constructor(stateDir: string, logger?: LoggerLike | undefined);
-    private load;
+    private signature;
+    /** One `stat`; re-read only when the file changed since the last read. */
+    private refresh;
+    /**
+     * Read and parse the file; any failure is no grants. `ok` is false when the
+     * file exists but cannot be read or parsed (a missing file is ok and empty).
+     */
+    private readFile;
     isAllowedAlways(tool: string): boolean;
     get size(): number;
-    /** Record a user's allow-always decision and persist it immediately. */
-    rememberAllowAlways(tool: string): void;
+    /**
+     * Record a user's allow-always decision and persist it immediately.
+     *
+     * @returns true when the grant is in the state file, false when it is kept in
+     *   memory only (the file could not be read or written; a warn names why).
+     */
+    rememberAllowAlways(tool: string): boolean;
+    /**
+     * Write atomically. Returns the written file's signature, taken from the temp
+     * file before the rename (rename keeps inode, mtime and size), so a write by
+     * someone else right after the rename is seen at the next decision; undefined
+     * when the write failed.
+     */
     private persist;
 }
 export {};

package/dist/approvals/approval-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval-store.d.ts","sourceRoot":"","sources":["../../src/approvals/approval-store.ts"],"names":[],"mappings":"AAGA,iFAAiF;AACjF,UAAU,UAAU;IAClB,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAChC;AAED,qEAAqE;AACrE,eAAO,MAAM,yBAAyB,wBAAwB,CAAC;AAU/D;;;;;;;;;;;;;;GAcG;AACH,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAL1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;gBAGjE,QAAQ,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,UAAU,YAAA;IAMtC,OAAO,CAAC,IAAI;IAiCZ,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAItC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,wEAAwE;IACxE,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAQvC,OAAO,CAAC,OAAO;CAehB"}
+{"version":3,"file":"approval-store.d.ts","sourceRoot":"","sources":["../../src/approvals/approval-store.ts"],"names":[],"mappings":"AAGA,iFAAiF;AACjF,UAAU,UAAU;IAClB,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAChC;AAED,qEAAqE;AACrE,eAAO,MAAM,yBAAyB,wBAAwB,CAAC;AAc/D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,iBAAiB;IAU1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAT1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,WAAW,CAAuC;IAC1D,yFAAyF;IACzF,OAAO,CAAC,eAAe,CAA4B;IACnD,iFAAiF;IACjF,OAAO,CAAC,yBAAyB,CAA4B;gBAG3D,QAAQ,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,UAAU,YAAA;IAMtC,OAAO,CAAC,SAAS;IAcjB,0EAA0E;IAC1E,OAAO,CAAC,OAAO;IAWf;;;OAGG;IACH,OAAO,CAAC,QAAQ;IAuChB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAKtC,IAAI,IAAI,IAAI,MAAM,CAGjB;IAED;;;;;OAKG;IACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAuC1C;;;;;OAKG;IACH,OAAO,CAAC,OAAO;CAqBhB"}

package/dist/approvals/approval-store.js

@@ -1,7 +1,8 @@
-import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { mkdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 /** File name inside the plugin state dir (volume-backed in prod). */
 export const TOOL_APPROVALS_STATE_FILE = "tool-approvals.json";
+const MISSING = "missing";
 /**
  * Persistent per-tool "always allow" decisions for the MCP tool approval gate.
  *
@@ -12,31 +13,75 @@ export const TOOL_APPROVALS_STATE_FILE = "tool-approvals.json";
  * redeploys, and plugin auto-updates.
  *
  * To make a tool prompt again, delete its entry from `tool-approvals.json`
- * (or the whole file) in the state dir.
+ * (or the whole file) in the state dir. That takes effect at the next gated
+ * call, with no restart.
  *
- * Load is synchronous (once, at plugin register()); writes are synchronous
- * atomic temp → rename, and only happen on an explicit user decision.
+ * The file is the source of truth, shared by every registry the host builds
+ * (chat, cron, …), each with its own store (RT566-02, RT566-10):
+ * - before every decision the store `stat`s the file and re-reads it only when
+ *   its mtime, size or inode changed since the last read;
+ * - a missing file, or one that cannot be read or parsed, means no grants
+ *   (every gated tool prompts); a bad file is logged once per version;
+ * - a write is read-modify-write: re-read the file, add this one grant, write
+ *   atomically (temp → rename). It never drops a grant another registry wrote
+ *   and never brings back one the user revoked.
  */
 export class ToolApprovalStore {
     logger;
     filePath;
     allowAlways = new Map();
+    /** Signature of the file version `allowAlways` was read from (undefined: never read). */
+    loadedSignature;
+    /** File version a grant was last refused a write for (warn once per version). */
+    unwritableWarnedSignature;
     constructor(stateDir, logger) {
         this.logger = logger;
         this.filePath = join(stateDir, TOOL_APPROVALS_STATE_FILE);
-        this.load();
+        this.refresh();
     }
-    load() {
+    signature(path = this.filePath) {
+        try {
+            const st = statSync(path);
+            return `${st.mtimeMs}:${st.size}:${st.ino}`;
+        }
+        catch (err) {
+            if (isNotFound(err)) {
+                return MISSING;
+            }
+            // Unknown state: a fresh signature forces a read, which fails the same
+            // way and reads as no grants (fail closed: the tool prompts).
+            return `stat-error:${errMessage(err)}`;
+        }
+    }
+    /** One `stat`; re-read only when the file changed since the last read. */
+    refresh() {
+        const sig = this.signature();
+        if (sig === this.loadedSignature) {
+            return;
+        }
+        // Taken before the read: if the file changes in between, the next call's
+        // signature differs and it reads again.
+        this.loadedSignature = sig;
+        this.allowAlways = sig === MISSING ? new Map() : this.readFile(true).grants;
+    }
+    /**
+     * Read and parse the file; any failure is no grants. `ok` is false when the
+     * file exists but cannot be read or parsed (a missing file is ok and empty).
+     */
+    readFile(warn) {
+        const grants = new Map();
         let raw;
         try {
             raw = readFileSync(this.filePath, "utf8");
         }
         catch (err) {
-            const isNotFound = err instanceof Error && "code" in err && err.code === "ENOENT";
-            if (!isNotFound) {
-                this.logger?.warn(`[senpi-tool-approvals] failed to read state file, starting empty | path=${this.filePath} err=${err instanceof Error ? err.message : String(err)}`);
+            if (isNotFound(err)) {
+                return { grants, ok: true };
             }
-            return;
+            if (warn) {
+                this.logger?.warn(`[senpi-tool-approvals] failed to read state file, treating it as no grants (all gated tools will prompt) | path=${this.filePath} err=${errMessage(err)}`);
+            }
+            return { grants, ok: false };
         }
         try {
             const parsed = JSON.parse(raw);
@@ -44,7 +89,7 @@ export class ToolApprovalStore {
             if (entries && typeof entries === "object" && !Array.isArray(entries)) {
                 for (const [tool, entry] of Object.entries(entries)) {
                     if (typeof tool === "string" && tool.length > 0) {
-                        this.allowAlways.set(tool, {
+                        grants.set(tool, {
                             decidedAt: typeof entry?.decidedAt === "string" ? entry.decidedAt : "",
                         });
                     }
@@ -52,36 +97,95 @@ export class ToolApprovalStore {
             }
         }
         catch (err) {
-            this.logger?.warn(`[senpi-tool-approvals] corrupt state file, starting empty (all gated tools will prompt again) | path=${this.filePath} err=${err instanceof Error ? err.message : String(err)}`);
+            if (warn) {
+                this.logger?.warn(`[senpi-tool-approvals] corrupt state file, treating it as no grants (all gated tools will prompt) | path=${this.filePath} err=${errMessage(err)}`);
+            }
+            return { grants: new Map(), ok: false };
         }
+        return { grants, ok: true };
     }
     isAllowedAlways(tool) {
+        this.refresh();
         return this.allowAlways.has(tool);
     }
     get size() {
+        this.refresh();
         return this.allowAlways.size;
     }
-    /** Record a user's allow-always decision and persist it immediately. */
+    /**
+     * Record a user's allow-always decision and persist it immediately.
+     *
+     * @returns true when the grant is in the state file, false when it is kept in
+     *   memory only (the file could not be read or written; a warn names why).
+     */
     rememberAllowAlways(tool) {
-        if (!tool || this.allowAlways.has(tool)) {
-            return;
+        if (!tool) {
+            return false;
+        }
+        if (this.isAllowedAlways(tool)) {
+            // Already granted: in the file unless an earlier grant was kept in memory only.
+            const { grants, ok } = this.readFile(false);
+            return ok && grants.has(tool);
+        }
+        const entry = { decidedAt: new Date().toISOString() };
+        // Read-modify-write against the file as it is now, not this store's copy.
+        // The signature is taken before the read, so a write landing after it makes
+        // the next decision re-read.
+        const before = this.signature();
+        const { grants: merged, ok } = this.readFile(false);
+        if (!ok) {
+            // Writing now would replace the user's other grants with this one. Keep
+            // it in memory until the file next changes; the file stays as it is.
+            if (this.unwritableWarnedSignature !== before) {
+                this.unwritableWarnedSignature = before;
+                this.logger?.warn(`[senpi-tool-approvals] state file unreadable, allow-always not written (kept in memory until the file changes) | path=${this.filePath} tool=${tool}`);
+            }
+            // Add to what this store holds for this file version (earlier
+            // in-memory-only grants included), not to the empty failed read.
+            // loadedSignature stays the one from the refresh above, so a change since
+            // then is re-read at the next decision.
+            this.allowAlways.set(tool, entry);
+            return false;
         }
-        this.allowAlways.set(tool, { decidedAt: new Date().toISOString() });
-        this.persist();
+        merged.set(tool, entry);
+        // On a failed write the grant stays in memory until the file next changes.
+        this.allowAlways = merged;
+        const written = this.persist(merged);
+        this.loadedSignature = written ?? before;
+        return written !== undefined;
     }
-    persist() {
+    /**
+     * Write atomically. Returns the written file's signature, taken from the temp
+     * file before the rename (rename keeps inode, mtime and size), so a write by
+     * someone else right after the rename is seen at the next decision; undefined
+     * when the write failed.
+     */
+    persist(grants) {
+        const tmpPath = `${this.filePath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
         try {
             mkdirSync(dirname(this.filePath), { recursive: true });
-            const shape = {
-                allowAlways: Object.fromEntries(this.allowAlways),
-            };
-            const tmpPath = `${this.filePath}.tmp`;
+            const shape = { allowAlways: Object.fromEntries(grants) };
             writeFileSync(tmpPath, JSON.stringify(shape, null, 2), "utf8");
+            const written = this.signature(tmpPath);
             renameSync(tmpPath, this.filePath);
+            return written;
         }
         catch (err) {
-            this.logger?.warn(`[senpi-tool-approvals] failed to persist state (decision kept in memory only) | path=${this.filePath} err=${err instanceof Error ? err.message : String(err)}`);
+            try {
+                unlinkSync(tmpPath);
+            }
+            catch {
+                // Nothing to clean up.
+            }
+            this.logger?.warn(`[senpi-tool-approvals] failed to persist state (decision kept in memory only) | path=${this.filePath} err=${errMessage(err)}`);
+            return undefined;
         }
     }
 }
+function isNotFound(err) {
+    return err instanceof Error && "code" in err && err.code === "ENOENT";
+}
+function errMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
 //# sourceMappingURL=approval-store.js.map

package/dist/approvals/approval-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-store.js","sourceRoot":"","sources":["../../src/approvals/approval-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAO1C,qEAAqE;AACrE,MAAM,CAAC,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AAU/D;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,iBAAiB;IAMT;IALF,QAAQ,CAAS;IACjB,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEnE,YACE,QAAgB,EACC,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;QAEpC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAEO,IAAI;QACV,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,UAAU,GACd,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC;YAC5F,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,2EAA2E,IAAI,CAAC,QAAQ,QAAQ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACnJ,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,EAAE,WAAW,CAAC;YACpC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAChD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE;4BACzB,SAAS,EAAE,OAAO,KAAK,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;yBACvE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wGAAwG,IAAI,CAAC,QAAQ,QAAQ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChL,CAAC;QACJ,CAAC;IACH,CAAC;IAED,eAAe,CAAC,IAAY;QAC1B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED,wEAAwE;IACxE,mBAAmB,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,KAAK,GAA2B;gBACpC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;aAClD,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,QAAQ,MAAM,CAAC;YACvC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/D,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wFAAwF,IAAI,CAAC,QAAQ,QAAQ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChK,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"approval-store.js","sourceRoot":"","sources":["../../src/approvals/approval-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAO1C,qEAAqE;AACrE,MAAM,CAAC,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AAY/D,MAAM,OAAO,GAAkB,SAAS,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,iBAAiB;IAUT;IATF,QAAQ,CAAS;IAC1B,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC1D,yFAAyF;IACjF,eAAe,CAA4B;IACnD,iFAAiF;IACzE,yBAAyB,CAA4B;IAE7D,YACE,QAAgB,EACC,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;QAEpC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,SAAS,CAAC,OAAe,IAAI,CAAC,QAAQ;QAC5C,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO,GAAG,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,uEAAuE;YACvE,8DAA8D;YAC9D,OAAO,cAAc,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED,0EAA0E;IAClE,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,IAAI,GAAG,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,yEAAyE;QACzE,wCAAwC;QACxC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAC9E,CAAC;IAED;;;OAGG;IACK,QAAQ,CAAC,IAAa;QAC5B,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;QACnD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC9B,CAAC;YACD,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,mHAAmH,IAAI,CAAC,QAAQ,QAAQ,UAAU,CAAC,GAAG,CAAC,EAAE,CAC1J,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,EAAE,WAAW,CAAC;YACpC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAChD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;4BACf,SAAS,EAAE,OAAO,KAAK,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;yBACvE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,4GAA4G,IAAI,CAAC,QAAQ,QAAQ,UAAU,CAAC,GAAG,CAAC,EAAE,CACnJ,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,eAAe,CAAC,IAAY;QAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,IAAI;QACN,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,gFAAgF;YAChF,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,KAAK,GAAqB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACxE,0EAA0E;QAC1E,4EAA4E;QAC5E,6BAA6B;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,wEAAwE;YACxE,qEAAqE;YACrE,IAAI,IAAI,CAAC,yBAAyB,KAAK,MAAM,EAAE,CAAC;gBAC9C,IAAI,CAAC,yBAAyB,GAAG,MAAM,CAAC;gBACxC,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,yHAAyH,IAAI,CAAC,QAAQ,SAAS,IAAI,EAAE,CACtJ,CAAC;YACJ,CAAC;YACD,8DAA8D;YAC9D,iEAAiE;YACjE,0EAA0E;YAC1E,wCAAwC;YACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxB,2EAA2E;QAC3E,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,OAAO,IAAI,MAAM,CAAC;QACzC,OAAO,OAAO,KAAK,SAAS,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACK,OAAO,CAAC,MAAqC;QACnD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7F,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,KAAK,GAA2B,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAClF,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACxC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,UAAU,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wFAAwF,IAAI,CAAC,QAAQ,QAAQ,UAAU,CAAC,GAAG,CAAC,EAAE,CAC/H,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAO,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC;AACnG,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/approvals/telemetry.d.ts

@@ -1,5 +1,25 @@
-/** Terminal user choice at the approval gate. */
-export type ApprovalDecision = "allow-once" | "allow-always" | "deny" | "timeout";
+import type { TurnKind } from "./turn-context.js";
+/**
+ * How an approval ended: a user choice (`allow-once`, `allow-always`,
+ * `deny`), a missed prompt (`timeout`), or `cancelled`: the run was aborted
+ * while the prompt was open, the host had no route or surface to ask (on
+ * 10.x, before any tool runs), or the gate itself stopped a gated call in a
+ * scheduled turn (`cancelReason: "scheduled_turn"`) or in another run that is
+ * not a direct chat turn (`"not_chat_turn"`, D15). The wait time tells a user
+ * abort (long) from a no-route cancellation (milliseconds). `granted` is not a
+ * prompt outcome: the call ran under a stored "Always allow" grant with no
+ * prompt (D16), recorded with its run kind.
+ */
+export type ApprovalDecision = "allow-once" | "allow-always" | "deny" | "timeout" | "cancelled" | "granted";
+/** Where an approval happened, for O7's per-turn-kind queries. Every field is optional. */
+export interface ApprovalResolutionContext {
+    /** The turn's session key; stamped as `gen_ai.conversation.id` (the span convention). */
+    sessionKey?: string;
+    /** `chat` | `cron` | `heartbeat` | `other` | `unknown`; stamped as `senpi.turn.kind`. */
+    turnKind?: TurnKind;
+    /** Why the gate cancelled the call itself; stamped as `senpi.tool_approval.cancel_reason`. */
+    cancelReason?: "scheduled_turn" | "not_chat_turn";
+}
 /**
  * Telemetry seam for the MCP tool approval gate.
  *
@@ -17,8 +37,12 @@ export interface GateTelemetry {
      * deny path, `deny` vs `timeout`). Emits the `tool_approval.resolved` event
      * (info for allows, warn for deny/timeout) + `tool_approval.decisions` metric,
      * so allow-always adoption and deny/timeout rates per tool are chartable.
+     *
+     * @param waitMs - From the gate's `requireApproval` to the resolution (0 when
+     *   the gate cancelled the call itself); `senpi.tool_approval.wait_ms`.
+     * @param context - The turn's session key and kind (see {@link ApprovalResolutionContext}).
      */
-    resolved(toolName: string, decision: ApprovalDecision, isTrade: boolean): void;
+    resolved(toolName: string, decision: ApprovalDecision, isTrade: boolean, waitMs?: number, context?: ApprovalResolutionContext): void;
     /**
      * A user deny or a 10-minute timeout — a state-changing tool the user did NOT
      * authorize, so it did not run. Recorded on the origin-uniform `tool.called`

package/dist/approvals/telemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/approvals/telemetry.ts"],"names":[],"mappings":"AAKA,iDAAiD;AACjD,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC;AAElF;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/E;;;;;;;;OAQG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,kBAAkB,GAAG,IAAI,CAAC;IAC3E;;;;OAIG;IACH,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;CAC7D;AAID,qDAAqD;AACrD,eAAO,MAAM,oBAAoB,EAAE,aA2BlC,CAAC"}
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/approvals/telemetry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAE5G,2FAA2F;AAC3F,MAAM,WAAW,yBAAyB;IACxC,yFAAyF;IACzF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yFAAyF;IACzF,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,8FAA8F;IAC9F,YAAY,CAAC,EAAE,gBAAgB,GAAG,eAAe,CAAC;CACnD;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;;;;;;OAUG;IACH,QAAQ,CACN,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,OAAO,EAChB,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,yBAAyB,GAClC,IAAI,CAAC;IACR;;;;;;;;OAQG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,kBAAkB,GAAG,IAAI,CAAC;IAC3E;;;;OAIG;IACH,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;CAC7D;AAID,qDAAqD;AACrD,eAAO,MAAM,oBAAoB,EAAE,aAgClC,CAAC"}

package/dist/approvals/telemetry.js

@@ -5,17 +5,21 @@ import { createLogger } from "../utils/logger.js";
 const eventLogger = createLogger("[senpi-tool-approvals]");
 /** Production wiring: real event + metric planes. */
 export const defaultGateTelemetry = {
-    resolved(toolName, decision, isTrade) {
-        const denyish = decision === "deny" || decision === "timeout";
-        eventLogger.event(EVENT_NAME.toolApprovalResolved, denyish ? "warn" : "info", {
+    resolved(toolName, decision, isTrade, waitMs, context) {
+        const notRun = decision === "deny" || decision === "timeout" || decision === "cancelled";
+        eventLogger.event(EVENT_NAME.toolApprovalResolved, notRun ? "warn" : "info", {
             body: `tool approval ${decision} for ${toolName}`,
             attributes: eventAttrs({
                 "gen_ai.tool.name": toolName,
                 "senpi.tool_approval.decision": decision,
                 "senpi.tool.is_trade": String(isTrade),
+                "senpi.tool_approval.wait_ms": typeof waitMs === "number" && Number.isFinite(waitMs) ? Math.max(0, Math.round(waitMs)) : undefined,
+                "gen_ai.conversation.id": context?.sessionKey,
+                "senpi.turn.kind": context?.turnKind,
+                "senpi.tool_approval.cancel_reason": context?.cancelReason,
             }),
         });
-        recordApprovalDecision({ toolName, decision, isTrade });
+        recordApprovalDecision({ toolName, decision, isTrade, turnKind: context?.turnKind });
     },
     denied(toolName, reason) {
         emitToolCalled({ name: toolName, origin: "agent", outcome: "denied", errorType: reason });

package/dist/approvals/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/approvals/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AA0ClD,MAAM,WAAW,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AAE3D,qDAAqD;AACrD,MAAM,CAAC,MAAM,oBAAoB,GAAkB;IACjD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO;QAClC,MAAM,OAAO,GAAG,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,SAAS,CAAC;QAC9D,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;YAC5E,IAAI,EAAE,iBAAiB,QAAQ,QAAQ,QAAQ,EAAE;YACjD,UAAU,EAAE,UAAU,CAAmD;gBACvE,kBAAkB,EAAE,QAAQ;gBAC5B,8BAA8B,EAAE,QAAQ;gBACxC,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC;aACvC,CAAC;SACH,CAAC,CAAC;QACH,sBAAsB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,CAAC,QAAQ,EAAE,MAAM;QACrB,cAAc,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1F,cAAc,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,QAAQ;QACrB,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,qBAAqB,EAAE,OAAO,EAAE;YAC3D,IAAI,EAAE,iCAAiC,QAAQ,CAAC,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3E,UAAU,EAAE,UAAU,CAAoD;gBACxE,kBAAkB,EAAE,QAAQ;gBAC5B,YAAY,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAC1D,CAAC;YACF,MAAM,EAAE,EAAE,aAAa,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC5E,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/approvals/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAiB,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAyElD,MAAM,WAAW,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AAE3D,qDAAqD;AACrD,MAAM,CAAC,MAAM,oBAAoB,GAAkB;IACjD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO;QACnD,MAAM,MAAM,GAAG,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,WAAW,CAAC;QACzF,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;YAC3E,IAAI,EAAE,iBAAiB,QAAQ,QAAQ,QAAQ,EAAE;YACjD,UAAU,EAAE,UAAU,CAAmD;gBACvE,kBAAkB,EAAE,QAAQ;gBAC5B,8BAA8B,EAAE,QAAQ;gBACxC,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC;gBACtC,6BAA6B,EAC3B,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrG,wBAAwB,EAAE,OAAO,EAAE,UAAU;gBAC7C,iBAAiB,EAAE,OAAO,EAAE,QAAQ;gBACpC,mCAAmC,EAAE,OAAO,EAAE,YAAY;aAC3D,CAAC;SACH,CAAC,CAAC;QACH,sBAAsB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,CAAC,QAAQ,EAAE,MAAM;QACrB,cAAc,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1F,cAAc,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,QAAQ;QACrB,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,qBAAqB,EAAE,OAAO,EAAE;YAC3D,IAAI,EAAE,iCAAiC,QAAQ,CAAC,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3E,UAAU,EAAE,UAAU,CAAoD;gBACxE,kBAAkB,EAAE,QAAQ;gBAC5B,YAAY,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAC1D,CAAC;YACF,MAAM,EAAE,EAAE,aAAa,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC5E,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/approvals/tool-approval-gate.d.ts

@@ -1,6 +1,7 @@
 import { ToolApprovalStore } from "./approval-store.js";
 import { type ToolApprovalsManifest, type ToolApprovalsMode } from "./manifest.js";
 import { type GateTelemetry } from "./telemetry.js";
+import type { TurnContextReader, TurnKind } from "./turn-context.js";
 /**
  * Tool approval gate: requires an interactive user approval before
  * state-changing senpi MCP tools execute.
@@ -77,6 +78,37 @@ export declare function describeSenpiToolCall(tool: string, params: unknown): st
  * gateway's description limit, which rejects (not truncates) anything longer.
  */
 export declare function buildApprovalDescription(tool: string, params: unknown): string;
+/**
+ * Counts approval prompts the gate has asked for and not yet seen resolved
+ * (trade tools, and in `all` mode every gated Senpi tool).
+ *
+ * Read by the self-update idle gate (`runtime/auto-update/idle-gate.ts`): a
+ * restart while a user is looking at an approval prompt would cancel it. An
+ * entry ends on any `onResolution` decision (including `cancelled`), or
+ * expires `timeoutMs + slackMs` after it began, so a prompt the gateway never
+ * resolved cannot keep the box busy forever.
+ */
+export declare class PendingApprovalTracker {
+    private readonly slackMs;
+    private readonly now;
+    private readonly open;
+    private nextId;
+    /**
+     * @param slackMs - Grace past the prompt's own timeout before an unresolved entry is dropped.
+     * @param now - Clock, for tests.
+     */
+    constructor(slackMs?: number, now?: () => number);
+    /**
+     * Records a prompt that will time out after `timeoutMs`.
+     *
+     * @returns A handle for {@link end}.
+     */
+    begin(timeoutMs: number): number;
+    /** Marks a prompt resolved. Unknown or repeated handles are ignored. */
+    end(id: number): void;
+    /** Prompts still waiting for an answer. */
+    count(): number;
+}
 export interface RegisterToolApprovalGateOptions {
     api: ToolApprovalGatePluginApi;
     mode: ToolApprovalsMode;
@@ -87,7 +119,54 @@ export interface RegisterToolApprovalGateOptions {
     manifest?: ToolApprovalsManifest;
     /** Injectable for tests; defaults to the real event/metric planes. */
     telemetry?: GateTelemetry;
+    /** Counts open prompts for the self-update idle gate. Optional; nothing is counted without it. */
+    pendingApprovals?: PendingApprovalTracker;
+    /**
+     * The turn of each gated call (session key, chat / cron / heartbeat), for
+     * approval telemetry and the scheduled-turn block. Without it every call
+     * reads `unknown` and nothing is blocked.
+     */
+    turnContext?: TurnContextReader;
+    /**
+     * The host lets the runtime classify runs (`turnClassificationAvailable`,
+     * one boot-time fact). Only then is a gated call outside a direct chat turn
+     * blocked with {@link scheduledTurnBlockReason}; without it every run reads
+     * `unknown` and keeps the prompt, as before this release, so a box missing
+     * the setting never blocks a chat trade.
+     */
+    turnClassification?: boolean;
+    /** Clock for the approval wait time. Default `Date.now`. */
+    now?: () => number;
 }
+/**
+ * The text the model reads when the gate stops a gated call in a scheduled
+ * turn (D13). On 10.10-beta.3 the host's own outcome for such an approval is
+ * a sentence the plugin cannot change and the model cannot act on: for a tool
+ * whose hook context carries the run trigger it cancels with "Plugin approval
+ * unavailable: cron runs have no approval-capable initiating surface."
+ * (`openclaw-worktrees/v2026.10.10-beta.3/src/agents/agent-tools.before-tool-call.approval.ts:161-189,310-320`);
+ * the `senpi__` MCP tools are wrapped without the trigger
+ * (`src/agents/embedded-agent-runner/run/attempt-tool-prepare.ts:468-485`), so
+ * the host asks the gateway instead, which fails with "Plugin approval
+ * unavailable (no approval route)" (`:371`) when no approval client is
+ * connected. The gate blocks first, in every scheduled turn. This text says
+ * what happened and the one step that works: the user asks in chat, where the
+ * approval prompt can be shown. It names no other route.
+ *
+ * D14 (ruled 2026-10-24): the block is outright. When an approval client is
+ * connected, 10.10 would route a `senpi__` approval from a scheduled run to
+ * it; scheduled runs still never get a prompt, even with the user online.
+ * D15: the same block covers every run not positively classified as a direct
+ * chat turn (`other`, `unknown`, a call with no run id), with the
+ * not-a-chat-turn wording. D16: a stored "Always allow" grant is checked
+ * first and wins in every run kind; this block only stops prompts.
+ */
+export declare function scheduledTurnBlockReason(params: {
+    wireName: string;
+    kind: Exclude<TurnKind, "chat">;
+    isTrade: boolean;
+    summary?: string;
+}): string;
 /**
  * Register the `before_tool_call` approval gate. No-op in `off` mode.
  * Returns the store (for tests/introspection) when registered.

package/dist/approvals/tool-approval-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-approval-gate.d.ts","sourceRoot":"","sources":["../../src/approvals/tool-approval-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,UAAU,UAAU;IAClB,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAChC;AAED,uEAAuE;AACvE,MAAM,WAAW,yBAAyB;IACxC,EAAE,CACA,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,EACxC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3B,IAAI,CAAC;CACT;AAED,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAElC,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAO7D;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAM/D;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAE9E;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC,GAAG,iBAAiB,CAqBpB;AAYD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAqDvF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAY9E;AAED,MAAM,WAAW,+BAA+B;IAC9C,GAAG,EAAE,yBAAyB,CAAC;IAC/B,IAAI,EAAE,iBAAiB,CAAC;IACxB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,sEAAsE;IACtE,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,+BAA+B,GACvC,iBAAiB,GAAG,SAAS,CAgF/B"}
+{"version":3,"file":"tool-approval-gate.d.ts","sourceRoot":"","sources":["../../src/approvals/tool-approval-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAwD,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC1G,OAAO,KAAK,EAAe,iBAAiB,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,UAAU,UAAU;IAClB,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAChC;AAED,uEAAuE;AACvE,MAAM,WAAW,yBAAyB;IACxC,EAAE,CACA,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,EACxC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3B,IAAI,CAAC;CACT;AAED,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAElC,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAO7D;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAM/D;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAE9E;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC,GAAG,iBAAiB,CAqBpB;AAyBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAmEvF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAY9E;AAED;;;;;;;;;GASG;AACH,qBAAa,sBAAsB;IAS/B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG;IATtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAClD,OAAO,CAAC,MAAM,CAAK;IAEnB;;;OAGG;gBAEgB,OAAO,SAAS,EAChB,GAAG,GAAE,MAAM,MAAiB;IAG/C;;;;OAIG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAOhC,wEAAwE;IACxE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAIrB,2CAA2C;IAC3C,KAAK,IAAI,MAAM;CAOhB;AAED,MAAM,WAAW,+BAA+B;IAC9C,GAAG,EAAE,yBAAyB,CAAC;IAC/B,IAAI,EAAE,iBAAiB,CAAC;IACxB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,sEAAsE;IACtE,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,kGAAkG;IAClG,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C;;;;OAIG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,4DAA4D;IAC5D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAiBT;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,+BAA+B,GACvC,iBAAiB,GAAG,SAAS,CAiJ/B"}