@tulex-cli/tulex-code 0.1.1

package/dist/src/nonInteractive/control/controllers/permissionController.js

@@ -0,0 +1,361 @@
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { InputFormat, ToolConfirmationOutcome, } from '@tulex-cli/tulex-cli-core';
+import { BaseController } from './baseController.js';
+const DEFAULT_CAN_USE_TOOL_TIMEOUT_MS = 60_000;
+export class PermissionController extends BaseController {
+    pendingOutgoingRequests = new Set();
+    /**
+     * Handle permission control requests
+     */
+    async handleRequestPayload(payload, signal) {
+        if (signal.aborted) {
+            throw new Error('Request aborted');
+        }
+        switch (payload.subtype) {
+            case 'can_use_tool':
+                return this.handleCanUseTool(payload, signal);
+            case 'set_permission_mode':
+                return this.handleSetPermissionMode(payload, signal);
+            default:
+                throw new Error(`Unsupported request subtype in PermissionController`);
+        }
+    }
+    /**
+     * Handle can_use_tool request
+     *
+     * Comprehensive permission evaluation based on:
+     * - Permission mode (approval level)
+     * - Tool registry validation
+     * - Error handling with safe defaults
+     */
+    async handleCanUseTool(payload, signal) {
+        if (signal.aborted) {
+            throw new Error('Request aborted');
+        }
+        const toolName = payload.tool_name;
+        if (!toolName ||
+            typeof toolName !== 'string' ||
+            toolName.trim().length === 0) {
+            return {
+                subtype: 'can_use_tool',
+                behavior: 'deny',
+                message: 'Missing or invalid tool_name in can_use_tool request',
+            };
+        }
+        let behavior = 'allow';
+        let message;
+        try {
+            // Check permission mode first
+            const permissionResult = this.checkPermissionMode();
+            if (!permissionResult.allowed) {
+                behavior = 'deny';
+                message = permissionResult.message;
+            }
+            // Check tool registry if permission mode allows
+            if (behavior === 'allow') {
+                const registryResult = this.checkToolRegistry(toolName);
+                if (!registryResult.allowed) {
+                    behavior = 'deny';
+                    message = registryResult.message;
+                }
+            }
+        }
+        catch (error) {
+            behavior = 'deny';
+            message =
+                error instanceof Error
+                    ? `Failed to evaluate tool permission: ${error.message}`
+                    : 'Failed to evaluate tool permission';
+        }
+        const response = {
+            subtype: 'can_use_tool',
+            behavior,
+        };
+        if (message) {
+            response['message'] = message;
+        }
+        return response;
+    }
+    /**
+     * Check permission mode for tool execution
+     */
+    checkPermissionMode() {
+        const mode = this.context.permissionMode;
+        // Map permission modes to approval logic (aligned with VALID_APPROVAL_MODE_VALUES)
+        switch (mode) {
+            case 'yolo': // Allow all tools
+            case 'auto-edit': // Auto-approve edit operations
+            case 'auto': // Auto-approve via LLM classifier — coreToolScheduler enforces the gate
+            case 'plan': // Auto-approve planning operations
+                return { allowed: true };
+            case 'default': // TODO: allow all tools for test
+            default:
+                return {
+                    allowed: false,
+                    message: 'Tool execution requires manual approval. Update permission mode or approve via host.',
+                };
+        }
+    }
+    /**
+     * Check if tool exists in registry
+     */
+    checkToolRegistry(toolName) {
+        try {
+            // Access tool registry through config
+            const config = this.context.config;
+            const registryProvider = config;
+            if (typeof registryProvider.getToolRegistry === 'function') {
+                const registry = registryProvider.getToolRegistry();
+                if (registry &&
+                    typeof registry.getTool === 'function' &&
+                    !registry.getTool(toolName)) {
+                    return {
+                        allowed: false,
+                        message: `Tool "${toolName}" is not registered.`,
+                    };
+                }
+            }
+            return { allowed: true };
+        }
+        catch (error) {
+            return {
+                allowed: false,
+                message: `Failed to check tool registry: ${error instanceof Error ? error.message : 'Unknown error'}`,
+            };
+        }
+    }
+    /**
+     * Handle set_permission_mode request
+     *
+     * Updates the permission mode in the context
+     */
+    async handleSetPermissionMode(payload, signal) {
+        if (signal.aborted) {
+            throw new Error('Request aborted');
+        }
+        const mode = payload.mode;
+        const validModes = [
+            'default',
+            'plan',
+            'auto-edit',
+            'auto',
+            'yolo',
+        ];
+        if (!validModes.includes(mode)) {
+            throw new Error(`Invalid permission mode: ${mode}. Valid values are: ${validModes.join(', ')}`);
+        }
+        this.context.permissionMode = mode;
+        this.context.config.setApprovalMode(mode);
+        this.debugLogger.info(`[PermissionController] Permission mode updated to: ${mode}`);
+        return { status: 'updated', mode };
+    }
+    /**
+     * Build permission suggestions for tool confirmation UI
+     *
+     * This method creates UI suggestions based on tool confirmation details,
+     * helping the host application present appropriate permission options.
+     */
+    buildPermissionSuggestions(confirmationDetails) {
+        if (!confirmationDetails ||
+            typeof confirmationDetails !== 'object' ||
+            !('type' in confirmationDetails)) {
+            return null;
+        }
+        const details = confirmationDetails;
+        const type = String(details['type'] ?? '');
+        const title = typeof details['title'] === 'string' ? details['title'] : undefined;
+        // Ensure type matches ToolCallConfirmationDetails union
+        const confirmationType = type;
+        switch (confirmationType) {
+            case 'exec': // ToolExecuteConfirmationDetails
+                return [
+                    {
+                        type: 'allow',
+                        label: 'Allow Command',
+                        description: `Execute: ${details['command']}`,
+                    },
+                    {
+                        type: 'deny',
+                        label: 'Deny',
+                        description: 'Block this command execution',
+                    },
+                ];
+            case 'edit': // ToolEditConfirmationDetails
+                return [
+                    {
+                        type: 'allow',
+                        label: 'Allow Edit',
+                        description: `Edit file: ${details['fileName']}`,
+                    },
+                    {
+                        type: 'deny',
+                        label: 'Deny',
+                        description: 'Block this file edit',
+                    },
+                    {
+                        type: 'modify',
+                        label: 'Review Changes',
+                        description: 'Review the proposed changes before applying',
+                    },
+                ];
+            case 'plan': // ToolPlanConfirmationDetails
+                return [
+                    {
+                        type: 'allow',
+                        label: 'Approve Plan',
+                        description: title || 'Execute the proposed plan',
+                    },
+                    {
+                        type: 'deny',
+                        label: 'Reject Plan',
+                        description: 'Do not execute this plan',
+                    },
+                ];
+            case 'mcp': // ToolMcpConfirmationDetails
+                return [
+                    {
+                        type: 'allow',
+                        label: 'Allow MCP Call',
+                        description: `${details['serverName']}: ${details['toolName']}`,
+                    },
+                    {
+                        type: 'deny',
+                        label: 'Deny',
+                        description: 'Block this MCP server call',
+                    },
+                ];
+            case 'info': // ToolInfoConfirmationDetails
+                return [
+                    {
+                        type: 'allow',
+                        label: 'Allow Info Request',
+                        description: title || 'Allow information request',
+                    },
+                    {
+                        type: 'deny',
+                        label: 'Deny',
+                        description: 'Block this information request',
+                    },
+                ];
+            default:
+                // Fallback for unknown types
+                return [
+                    {
+                        type: 'allow',
+                        label: 'Allow',
+                        description: title || `Allow ${type} operation`,
+                    },
+                    {
+                        type: 'deny',
+                        label: 'Deny',
+                        description: `Block ${type} operation`,
+                    },
+                ];
+        }
+    }
+    /**
+     * Get callback for monitoring tool calls and handling outgoing permission requests
+     * This is passed to executeToolCall to hook into CoreToolScheduler updates
+     */
+    getToolCallUpdateCallback() {
+        return (toolCalls) => {
+            for (const call of toolCalls) {
+                if (call &&
+                    typeof call === 'object' &&
+                    call.status === 'awaiting_approval') {
+                    const awaiting = call;
+                    if (typeof awaiting.confirmationDetails?.onConfirm === 'function' &&
+                        !this.pendingOutgoingRequests.has(awaiting.request.callId)) {
+                        this.pendingOutgoingRequests.add(awaiting.request.callId);
+                        void this.handleOutgoingPermissionRequest(awaiting);
+                    }
+                }
+            }
+        };
+    }
+    /**
+     * Handle outgoing permission request
+     *
+     * Behavior depends on input format:
+     * - stream-json mode: Send can_use_tool to SDK and await response
+     * - Other modes: Check local approval mode and decide immediately
+     */
+    async handleOutgoingPermissionRequest(toolCall) {
+        try {
+            // Check if already aborted
+            if (this.context.abortSignal?.aborted) {
+                await toolCall.confirmationDetails.onConfirm(ToolConfirmationOutcome.Cancel);
+                return;
+            }
+            const inputFormat = this.context.config.getInputFormat?.();
+            const isStreamJsonMode = inputFormat === InputFormat.STREAM_JSON;
+            if (!isStreamJsonMode) {
+                // No SDK available - use local permission check
+                const modeCheck = this.checkPermissionMode();
+                const outcome = modeCheck.allowed
+                    ? ToolConfirmationOutcome.ProceedOnce
+                    : ToolConfirmationOutcome.Cancel;
+                await toolCall.confirmationDetails.onConfirm(outcome);
+                return;
+            }
+            // Stream-json mode: ask SDK for permission
+            const permissionSuggestions = this.buildPermissionSuggestions(toolCall.confirmationDetails);
+            const response = await this.sendControlRequest({
+                subtype: 'can_use_tool',
+                tool_name: toolCall.request.name,
+                tool_use_id: toolCall.request.callId,
+                input: toolCall.request.args,
+                permission_suggestions: permissionSuggestions,
+                blocked_path: null,
+            }, this.context.sdkCanUseToolTimeoutMs ?? DEFAULT_CAN_USE_TOOL_TIMEOUT_MS, this.context.abortSignal);
+            if (response.subtype !== 'success') {
+                await toolCall.confirmationDetails.onConfirm(ToolConfirmationOutcome.Cancel);
+                return;
+            }
+            const payload = (response.response || {});
+            const behavior = String(payload['behavior'] || '').toLowerCase();
+            if (behavior === 'allow') {
+                // Handle updated input if provided
+                const updatedInput = payload['updatedInput'];
+                if (updatedInput && typeof updatedInput === 'object') {
+                    toolCall.request.args = updatedInput;
+                }
+                await toolCall.confirmationDetails.onConfirm(ToolConfirmationOutcome.ProceedOnce);
+            }
+            else {
+                // Extract cancel message from response if available
+                const cancelMessage = typeof payload['message'] === 'string'
+                    ? payload['message']
+                    : undefined;
+                await toolCall.confirmationDetails.onConfirm(ToolConfirmationOutcome.Cancel, cancelMessage ? { cancelMessage } : undefined);
+            }
+        }
+        catch (error) {
+            this.debugLogger.error('[PermissionController] Outgoing permission failed:', error);
+            // Extract error message
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            // On error, pass error message as cancel message
+            // Only pass payload for exec and mcp types that support it
+            const confirmationType = toolCall.confirmationDetails.type;
+            if (['edit', 'exec', 'mcp'].includes(confirmationType)) {
+                const execOrMcpDetails = toolCall.confirmationDetails;
+                await execOrMcpDetails.onConfirm(ToolConfirmationOutcome.Cancel, {
+                    cancelMessage: `Error: ${errorMessage}`,
+                });
+            }
+            else {
+                await toolCall.confirmationDetails.onConfirm(ToolConfirmationOutcome.Cancel, {
+                    cancelMessage: `Error: ${errorMessage}`,
+                });
+            }
+        }
+        finally {
+            this.pendingOutgoingRequests.delete(toolCall.request.callId);
+        }
+    }
+}
+//# sourceMappingURL=permissionController.js.map

package/dist/src/nonInteractive/control/controllers/permissionController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionController.js","sourceRoot":"","sources":["../../../../../src/nonInteractive/control/controllers/permissionController.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH,OAAO,EACL,WAAW,EACX,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AAQnC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAKrD,MAAM,+BAA+B,GAAG,MAAM,CAAC;AAE/C,MAAM,OAAO,oBAAqB,SAAQ,cAAc;IAC9C,uBAAuB,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpD;;OAEG;IACO,KAAK,CAAC,oBAAoB,CAClC,OAA8B,EAC9B,MAAmB;QAEnB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QAED,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,KAAK,cAAc;gBACjB,OAAO,IAAI,CAAC,gBAAgB,CAC1B,OAAsC,EACtC,MAAM,CACP,CAAC;YAEJ,KAAK,qBAAqB;gBACxB,OAAO,IAAI,CAAC,uBAAuB,CACjC,OAA6C,EAC7C,MAAM,CACP,CAAC;YAEJ;gBACE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,gBAAgB,CAC5B,OAAoC,EACpC,MAAmB;QAEnB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IACE,CAAC,QAAQ;YACT,OAAO,QAAQ,KAAK,QAAQ;YAC5B,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAC5B,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,cAAc;gBACvB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,sDAAsD;aAChE,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,GAAqB,OAAO,CAAC;QACzC,IAAI,OAA2B,CAAC;QAEhC,IAAI,CAAC;YACH,8BAA8B;YAC9B,MAAM,gBAAgB,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACpD,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;gBAC9B,QAAQ,GAAG,MAAM,CAAC;gBAClB,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC;YACrC,CAAC;YAED,gDAAgD;YAChD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBACxD,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;oBAC5B,QAAQ,GAAG,MAAM,CAAC;oBAClB,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,GAAG,MAAM,CAAC;YAClB,OAAO;gBACL,KAAK,YAAY,KAAK;oBACpB,CAAC,CAAC,uCAAuC,KAAK,CAAC,OAAO,EAAE;oBACxD,CAAC,CAAC,oCAAoC,CAAC;QAC7C,CAAC;QAED,MAAM,QAAQ,GAA4B;YACxC,OAAO,EAAE,cAAc;YACvB,QAAQ;SACT,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;QAChC,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,mBAAmB;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;QAEzC,mFAAmF;QACnF,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,CAAC,kBAAkB;YAC/B,KAAK,WAAW,CAAC,CAAC,+BAA+B;YACjD,KAAK,MAAM,CAAC,CAAC,wEAAwE;YACrF,KAAK,MAAM,EAAE,mCAAmC;gBAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAE3B,KAAK,SAAS,CAAC,CAAC,iCAAiC;YACjD;gBACE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EACL,sFAAsF;iBACzF,CAAC;QACN,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,QAAgB;QAIxC,IAAI,CAAC;YACH,sCAAsC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,MAAM,gBAAgB,GAAG,MAIxB,CAAC;YAEF,IAAI,OAAO,gBAAgB,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;gBAC3D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,eAAe,EAAE,CAAC;gBACpD,IACE,QAAQ;oBACR,OAAO,QAAQ,CAAC,OAAO,KAAK,UAAU;oBACtC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAC3B,CAAC;oBACD,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,OAAO,EAAE,SAAS,QAAQ,sBAAsB;qBACjD,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,kCAAkC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;aACtG,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,uBAAuB,CACnC,OAA2C,EAC3C,MAAmB;QAEnB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAqB;YACnC,SAAS;YACT,MAAM;YACN,WAAW;YACX,MAAM;YACN,MAAM;SACP,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,uBAAuB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/E,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,IAAoB,CAAC,CAAC;QAE1D,IAAI,CAAC,WAAW,CAAC,IAAI,CACnB,sDAAsD,IAAI,EAAE,CAC7D,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IAED;;;;;OAKG;IACH,0BAA0B,CACxB,mBAA4B;QAE5B,IACE,CAAC,mBAAmB;YACpB,OAAO,mBAAmB,KAAK,QAAQ;YACvC,CAAC,CAAC,MAAM,IAAI,mBAAmB,CAAC,EAChC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,mBAA8C,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,KAAK,GACT,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEtE,wDAAwD;QACxD,MAAM,gBAAgB,GAAG,IAA4B,CAAC;QAEtD,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,MAAM,EAAE,iCAAiC;gBAC5C,OAAO;oBACL;wBACE,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,eAAe;wBACtB,WAAW,EAAE,YAAY,OAAO,CAAC,SAAS,CAAC,EAAE;qBAC9C;oBACD;wBACE,IAAI,EAAE,MAAM;wBACZ,KAAK,EAAE,MAAM;wBACb,WAAW,EAAE,8BAA8B;qBAC5C;iBACF,CAAC;YAEJ,KAAK,MAAM,EAAE,8BAA8B;gBACzC,OAAO;oBACL;wBACE,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,YAAY;wBACnB,WAAW,EAAE,cAAc,OAAO,CAAC,UAAU,CAAC,EAAE;qBACjD;oBACD;wBACE,IAAI,EAAE,MAAM;wBACZ,KAAK,EAAE,MAAM;wBACb,WAAW,EAAE,sBAAsB;qBACpC;oBACD;wBACE,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,gBAAgB;wBACvB,WAAW,EAAE,6CAA6C;qBAC3D;iBACF,CAAC;YAEJ,KAAK,MAAM,EAAE,8BAA8B;gBACzC,OAAO;oBACL;wBACE,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,cAAc;wBACrB,WAAW,EAAE,KAAK,IAAI,2BAA2B;qBAClD;oBACD;wBACE,IAAI,EAAE,MAAM;wBACZ,KAAK,EAAE,aAAa;wBACpB,WAAW,EAAE,0BAA0B;qBACxC;iBACF,CAAC;YAEJ,KAAK,KAAK,EAAE,6BAA6B;gBACvC,OAAO;oBACL;wBACE,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,gBAAgB;wBACvB,WAAW,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,EAAE;qBAChE;oBACD;wBACE,IAAI,EAAE,MAAM;wBACZ,KAAK,EAAE,MAAM;wBACb,WAAW,EAAE,4BAA4B;qBAC1C;iBACF,CAAC;YAEJ,KAAK,MAAM,EAAE,8BAA8B;gBACzC,OAAO;oBACL;wBACE,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,oBAAoB;wBAC3B,WAAW,EAAE,KAAK,IAAI,2BAA2B;qBAClD;oBACD;wBACE,IAAI,EAAE,MAAM;wBACZ,KAAK,EAAE,MAAM;wBACb,WAAW,EAAE,gCAAgC;qBAC9C;iBACF,CAAC;YAEJ;gBACE,6BAA6B;gBAC7B,OAAO;oBACL;wBACE,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,OAAO;wBACd,WAAW,EAAE,KAAK,IAAI,SAAS,IAAI,YAAY;qBAChD;oBACD;wBACE,IAAI,EAAE,MAAM;wBACZ,KAAK,EAAE,MAAM;wBACb,WAAW,EAAE,SAAS,IAAI,YAAY;qBACvC;iBACF,CAAC;QACN,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,yBAAyB;QACvB,OAAO,CAAC,SAAoB,EAAE,EAAE;YAC9B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,IACE,IAAI;oBACJ,OAAO,IAAI,KAAK,QAAQ;oBACvB,IAA4B,CAAC,MAAM,KAAK,mBAAmB,EAC5D,CAAC;oBACD,MAAM,QAAQ,GAAG,IAAuB,CAAC;oBACzC,IACE,OAAO,QAAQ,CAAC,mBAAmB,EAAE,SAAS,KAAK,UAAU;wBAC7D,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAC1D,CAAC;wBACD,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;wBAC1D,KAAK,IAAI,CAAC,+BAA+B,CAAC,QAAQ,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,+BAA+B,CAC3C,QAAyB;QAEzB,IAAI,CAAC;YACH,2BAA2B;YAC3B,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;gBACtC,MAAM,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAC1C,uBAAuB,CAAC,MAAM,CAC/B,CAAC;gBACF,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3D,MAAM,gBAAgB,GAAG,WAAW,KAAK,WAAW,CAAC,WAAW,CAAC;YAEjE,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,gDAAgD;gBAChD,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO;oBAC/B,CAAC,CAAC,uBAAuB,CAAC,WAAW;oBACrC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC;gBAEnC,MAAM,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,2CAA2C;YAC3C,MAAM,qBAAqB,GAAG,IAAI,CAAC,0BAA0B,CAC3D,QAAQ,CAAC,mBAAmB,CAC7B,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC5C;gBACE,OAAO,EAAE,cAAc;gBACvB,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI;gBAChC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;gBACpC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI;gBAC5B,sBAAsB,EAAE,qBAAqB;gBAC7C,YAAY,EAAE,IAAI;aACY,EAChC,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,+BAA+B,EACtE,IAAI,CAAC,OAAO,CAAC,WAAW,CACzB,CAAC;YAEF,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAC1C,uBAAuB,CAAC,MAAM,CAC/B,CAAC;gBACF,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;YACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAEjE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,mCAAmC;gBACnC,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC7C,IAAI,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;oBACrD,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,YAAuC,CAAC;gBAClE,CAAC;gBACD,MAAM,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAC1C,uBAAuB,CAAC,WAAW,CACpC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,oDAAoD;gBACpD,MAAM,aAAa,GACjB,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ;oBACpC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;oBACpB,CAAC,CAAC,SAAS,CAAC;gBAEhB,MAAM,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAC1C,uBAAuB,CAAC,MAAM,EAC9B,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAC9C,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,KAAK,CACpB,oDAAoD,EACpD,KAAK,CACN,CAAC;YAEF,wBAAwB;YACxB,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEzD,iDAAiD;YACjD,2DAA2D;YAC3D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAC3D,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACvD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,mBAEJ,CAAC;gBAC/B,MAAM,gBAAgB,CAAC,SAAS,CAAC,uBAAuB,CAAC,MAAM,EAAE;oBAC/D,aAAa,EAAE,UAAU,YAAY,EAAE;iBACxC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAC1C,uBAAuB,CAAC,MAAM,EAC9B;oBACE,aAAa,EAAE,UAAU,YAAY,EAAE;iBACxC,CACF,CAAC;YACJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;CACF"}

package/dist/src/nonInteractive/control/controllers/permissionController.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/nonInteractive/control/controllers/permissionController.test.js

@@ -0,0 +1,140 @@
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, expect, it, vi } from 'vitest';
+import { InputFormat, ToolConfirmationOutcome, } from '@tulex-cli/tulex-cli-core';
+import { createMinimalSettings } from '../../../config/settings.js';
+import { PermissionController } from './permissionController.js';
+function createContext(canUseToolTimeoutMs) {
+    const abortController = new AbortController();
+    return {
+        config: {
+            getDebugMode: vi.fn().mockReturnValue(false),
+            getInputFormat: vi.fn().mockReturnValue(InputFormat.STREAM_JSON),
+        },
+        streamJson: {
+            send: vi.fn(),
+        },
+        sessionId: 'test-session-id',
+        abortSignal: abortController.signal,
+        debugMode: false,
+        settings: createMinimalSettings(),
+        permissionMode: 'default',
+        sdkCanUseToolTimeoutMs: canUseToolTimeoutMs,
+        sdkMcpServers: new Set(),
+        mcpClients: new Map(),
+        inputClosed: false,
+    };
+}
+function createRegistry() {
+    return {
+        registerIncomingRequest: vi.fn(),
+        deregisterIncomingRequest: vi.fn(),
+        registerOutgoingRequest: vi.fn(),
+        deregisterOutgoingRequest: vi.fn(),
+    };
+}
+describe('PermissionController', () => {
+    it('uses SDK canUseTool timeout for outgoing permission requests', async () => {
+        const context = createContext(120_000);
+        const controller = new PermissionController(context, createRegistry(), 'PermissionController');
+        const sendControlRequest = vi
+            .spyOn(controller, 'sendControlRequest')
+            .mockResolvedValue({
+            subtype: 'success',
+            request_id: 'request-1',
+            response: { behavior: 'allow' },
+        });
+        const onConfirm = vi.fn();
+        controller.getToolCallUpdateCallback()([
+            {
+                status: 'awaiting_approval',
+                request: {
+                    callId: 'tool-call-1',
+                    name: 'ask_user_question',
+                    args: { questions: [] },
+                },
+                confirmationDetails: {
+                    type: 'ask_user_question',
+                    title: 'Please answer',
+                    onConfirm,
+                },
+            },
+        ]);
+        await vi.waitFor(() => {
+            expect(sendControlRequest).toHaveBeenCalledWith(expect.objectContaining({
+                subtype: 'can_use_tool',
+                tool_name: 'ask_user_question',
+            }), 120_000, context.abortSignal);
+        });
+        await vi.waitFor(() => {
+            expect(onConfirm).toHaveBeenCalledWith(ToolConfirmationOutcome.ProceedOnce);
+        });
+    });
+    it('uses default timeout when SDK canUseTool timeout is undefined', async () => {
+        const context = createContext(); // undefined timeout
+        const controller = new PermissionController(context, createRegistry(), 'PermissionController');
+        const sendControlRequest = vi
+            .spyOn(controller, 'sendControlRequest')
+            .mockResolvedValue({
+            subtype: 'success',
+            request_id: 'request-2',
+            response: { behavior: 'allow' },
+        });
+        const onConfirm = vi.fn();
+        controller.getToolCallUpdateCallback()([
+            {
+                status: 'awaiting_approval',
+                request: {
+                    callId: 'tool-call-2',
+                    name: 'ask_user_question',
+                    args: { questions: [] },
+                },
+                confirmationDetails: {
+                    type: 'ask_user_question',
+                    title: 'Please answer',
+                    onConfirm,
+                },
+            },
+        ]);
+        await vi.waitFor(() => {
+            expect(sendControlRequest).toHaveBeenCalledWith(expect.objectContaining({
+                subtype: 'can_use_tool',
+                tool_name: 'ask_user_question',
+            }), 60_000, // DEFAULT_CAN_USE_TOOL_TIMEOUT_MS
+            context.abortSignal);
+        });
+        await vi.waitFor(() => {
+            expect(onConfirm).toHaveBeenCalledWith(ToolConfirmationOutcome.ProceedOnce);
+        });
+    });
+    it('calls onConfirm with Cancel when sendControlRequest rejects', async () => {
+        const context = createContext(120_000);
+        const controller = new PermissionController(context, createRegistry(), 'PermissionController');
+        vi.spyOn(controller, 'sendControlRequest').mockRejectedValue(new Error('Request timeout'));
+        const onConfirm = vi.fn();
+        controller.getToolCallUpdateCallback()([
+            {
+                status: 'awaiting_approval',
+                request: {
+                    callId: 'tool-call-3',
+                    name: 'ask_user_question',
+                    args: { questions: [] },
+                },
+                confirmationDetails: {
+                    type: 'ask_user_question',
+                    title: 'Please answer',
+                    onConfirm,
+                },
+            },
+        ]);
+        await vi.waitFor(() => {
+            expect(onConfirm).toHaveBeenCalledWith(ToolConfirmationOutcome.Cancel, expect.objectContaining({
+                cancelMessage: expect.stringContaining('Request timeout'),
+            }));
+        });
+    });
+});
+//# sourceMappingURL=permissionController.test.js.map

package/dist/src/nonInteractive/control/controllers/permissionController.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionController.test.js","sourceRoot":"","sources":["../../../../../src/nonInteractive/control/controllers/permissionController.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EACL,WAAW,EACX,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAIpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,SAAS,aAAa,CAAC,mBAA4B;IACjD,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAE9C,OAAO;QACL,MAAM,EAAE;YACN,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;YAC5C,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,WAAW,CAAC;SACzB;QACzC,UAAU,EAAE;YACV,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;SACwB;QACvC,SAAS,EAAE,iBAAiB;QAC5B,WAAW,EAAE,eAAe,CAAC,MAAM;QACnC,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,qBAAqB,EAAE;QACjC,cAAc,EAAE,SAAS;QACzB,sBAAsB,EAAE,mBAAmB;QAC3C,aAAa,EAAE,IAAI,GAAG,EAAU;QAChC,UAAU,EAAE,IAAI,GAAG,EAAE;QACrB,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc;IACrB,OAAO;QACL,uBAAuB,EAAE,EAAE,CAAC,EAAE,EAAE;QAChC,yBAAyB,EAAE,EAAE,CAAC,EAAE,EAAE;QAClC,uBAAuB,EAAE,EAAE,CAAC,EAAE,EAAE;QAChC,yBAAyB,EAAE,EAAE,CAAC,EAAE,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,oBAAoB,CACzC,OAAO,EACP,cAAc,EAAE,EAChB,sBAAsB,CACvB,CAAC;QACF,MAAM,kBAAkB,GAAG,EAAE;aAC1B,KAAK,CAAC,UAAU,EAAE,oBAAoB,CAAC;aACvC,iBAAiB,CAAC;YACjB,OAAO,EAAE,SAAS;YAClB,UAAU,EAAE,WAAW;YACvB,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;SAChC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAE1B,UAAU,CAAC,yBAAyB,EAAE,CAAC;YACrC;gBACE,MAAM,EAAE,mBAAmB;gBAC3B,OAAO,EAAE;oBACP,MAAM,EAAE,aAAa;oBACrB,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;iBACxB;gBACD,mBAAmB,EAAE;oBACnB,IAAI,EAAE,mBAAmB;oBACzB,KAAK,EAAE,eAAe;oBACtB,SAAS;iBACV;aACF;SACF,CAAC,CAAC;QAEH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACpB,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CAC7C,MAAM,CAAC,gBAAgB,CAAC;gBACtB,OAAO,EAAE,cAAc;gBACvB,SAAS,EAAE,mBAAmB;aAC/B,CAAC,EACF,OAAO,EACP,OAAO,CAAC,WAAW,CACpB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACpB,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,uBAAuB,CAAC,WAAW,CACpC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,CAAC,oBAAoB;QACrD,MAAM,UAAU,GAAG,IAAI,oBAAoB,CACzC,OAAO,EACP,cAAc,EAAE,EAChB,sBAAsB,CACvB,CAAC;QACF,MAAM,kBAAkB,GAAG,EAAE;aAC1B,KAAK,CAAC,UAAU,EAAE,oBAAoB,CAAC;aACvC,iBAAiB,CAAC;YACjB,OAAO,EAAE,SAAS;YAClB,UAAU,EAAE,WAAW;YACvB,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;SAChC,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAE1B,UAAU,CAAC,yBAAyB,EAAE,CAAC;YACrC;gBACE,MAAM,EAAE,mBAAmB;gBAC3B,OAAO,EAAE;oBACP,MAAM,EAAE,aAAa;oBACrB,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;iBACxB;gBACD,mBAAmB,EAAE;oBACnB,IAAI,EAAE,mBAAmB;oBACzB,KAAK,EAAE,eAAe;oBACtB,SAAS;iBACV;aACF;SACF,CAAC,CAAC;QAEH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACpB,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CAC7C,MAAM,CAAC,gBAAgB,CAAC;gBACtB,OAAO,EAAE,cAAc;gBACvB,SAAS,EAAE,mBAAmB;aAC/B,CAAC,EACF,MAAM,EAAE,kCAAkC;YAC1C,OAAO,CAAC,WAAW,CACpB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACpB,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,uBAAuB,CAAC,WAAW,CACpC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,oBAAoB,CACzC,OAAO,EACP,cAAc,EAAE,EAChB,sBAAsB,CACvB,CAAC;QACF,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC,iBAAiB,CAC1D,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAC7B,CAAC;QACF,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAE1B,UAAU,CAAC,yBAAyB,EAAE,CAAC;YACrC;gBACE,MAAM,EAAE,mBAAmB;gBAC3B,OAAO,EAAE;oBACP,MAAM,EAAE,aAAa;oBACrB,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;iBACxB;gBACD,mBAAmB,EAAE;oBACnB,IAAI,EAAE,mBAAmB;oBACzB,KAAK,EAAE,eAAe;oBACtB,SAAS;iBACV;aACF;SACF,CAAC,CAAC;QAEH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACpB,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,uBAAuB,CAAC,MAAM,EAC9B,MAAM,CAAC,gBAAgB,CAAC;gBACtB,aAAa,EAAE,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC;aAC1D,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/nonInteractive/control/controllers/sdkMcpController.d.ts

@@ -0,0 +1,54 @@
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * SDK MCP Controller
+ *
+ * Handles MCP communication between CLI MCP clients and SDK MCP servers:
+ * - Provides sendSdkMcpMessage callback for CLI → SDK MCP message routing
+ * - mcp_server_status: Returns status of SDK MCP servers
+ *
+ * Message Flow (CLI MCP Client → SDK MCP Server):
+ * CLI MCP Client → SdkControlClientTransport.send() →
+ * sendSdkMcpMessage callback → control_request (mcp_message) → SDK →
+ * SDK MCP Server processes → control_response → CLI MCP Client
+ */
+import type { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
+import { BaseController } from './baseController.js';
+import type { ControlRequestPayload } from '../../types.js';
+export declare class SdkMcpController extends BaseController {
+    /**
+     * Handle SDK MCP control requests from ControlDispatcher
+     *
+     * Note: mcp_message requests are NOT handled here. CLI MCP clients
+     * send messages via the sendSdkMcpMessage callback directly, not
+     * through the control dispatcher.
+     */
+    protected handleRequestPayload(payload: ControlRequestPayload, signal: AbortSignal): Promise<Record<string, unknown>>;
+    /**
+     * Handle mcp_server_status request
+     *
+     * Returns status of all registered SDK MCP servers.
+     * SDK servers are considered "connected" if they are registered.
+     */
+    private handleMcpStatus;
+    /**
+     * Send MCP message to SDK server via control plane
+     *
+     * @param serverName - Name of the SDK MCP server
+     * @param message - MCP JSON-RPC message to send
+     * @returns MCP JSON-RPC response from SDK server
+     */
+    private sendMcpMessageToSdk;
+    /**
+     * Create a callback function for sending MCP messages to SDK servers.
+     *
+     * This callback is used by McpClientManager/SdkControlClientTransport to send
+     * MCP messages from CLI MCP clients to SDK MCP servers via the control plane.
+     *
+     * @returns A function that sends MCP messages to SDK and returns the response
+     */
+    createSendSdkMcpMessage(): (serverName: string, message: JSONRPCMessage) => Promise<JSONRPCMessage>;
+}

package/dist/src/nonInteractive/control/controllers/sdkMcpController.js

@@ -0,0 +1,80 @@
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { BaseController } from './baseController.js';
+const MCP_REQUEST_TIMEOUT = 30_000; // 30 seconds
+export class SdkMcpController extends BaseController {
+    /**
+     * Handle SDK MCP control requests from ControlDispatcher
+     *
+     * Note: mcp_message requests are NOT handled here. CLI MCP clients
+     * send messages via the sendSdkMcpMessage callback directly, not
+     * through the control dispatcher.
+     */
+    async handleRequestPayload(payload, signal) {
+        if (signal.aborted) {
+            throw new Error('Request aborted');
+        }
+        switch (payload.subtype) {
+            case 'mcp_server_status':
+                return this.handleMcpStatus();
+            default:
+                throw new Error(`Unsupported request subtype in SdkMcpController`);
+        }
+    }
+    /**
+     * Handle mcp_server_status request
+     *
+     * Returns status of all registered SDK MCP servers.
+     * SDK servers are considered "connected" if they are registered.
+     */
+    async handleMcpStatus() {
+        const status = {};
+        for (const serverName of this.context.sdkMcpServers) {
+            // SDK MCP servers are "connected" once registered since they run in SDK process
+            status[serverName] = 'connected';
+        }
+        return {
+            subtype: 'mcp_server_status',
+            status,
+        };
+    }
+    /**
+     * Send MCP message to SDK server via control plane
+     *
+     * @param serverName - Name of the SDK MCP server
+     * @param message - MCP JSON-RPC message to send
+     * @returns MCP JSON-RPC response from SDK server
+     */
+    async sendMcpMessageToSdk(serverName, message) {
+        this.debugLogger.debug(`[SdkMcpController] Sending MCP message to SDK server '${serverName}':`, JSON.stringify(message));
+        // Send control request to SDK with the MCP message
+        const response = await this.sendControlRequest({
+            subtype: 'mcp_message',
+            server_name: serverName,
+            message: message,
+        }, MCP_REQUEST_TIMEOUT, this.context.abortSignal);
+        // Extract MCP response from control response
+        const responsePayload = response.response;
+        const mcpResponse = responsePayload?.['mcp_response'];
+        if (!mcpResponse) {
+            throw new Error(`Invalid MCP response from SDK for server '${serverName}'`);
+        }
+        this.debugLogger.debug(`[SdkMcpController] Received MCP response from SDK server '${serverName}':`, JSON.stringify(mcpResponse));
+        return mcpResponse;
+    }
+    /**
+     * Create a callback function for sending MCP messages to SDK servers.
+     *
+     * This callback is used by McpClientManager/SdkControlClientTransport to send
+     * MCP messages from CLI MCP clients to SDK MCP servers via the control plane.
+     *
+     * @returns A function that sends MCP messages to SDK and returns the response
+     */
+    createSendSdkMcpMessage() {
+        return (serverName, message) => this.sendMcpMessageToSdk(serverName, message);
+    }
+}
+//# sourceMappingURL=sdkMcpController.js.map