@volter/supercode-frontend-vscode 0.1.57 → 0.1.58

package/README.md

@@ -449,6 +449,13 @@ remains because the native model catalogue and participant identity are provider
 
 ### Native approval cards
 
+A file approval names the harness-supplied path and shows its proposed replacement
+text, new contents or patch before the answer buttons. Other requests show their
+supplied arguments. Preview bounds are labelled, and a request with no supplied
+preview says so. The frontend reads no workspace file to invent missing context
+and never applies the preview. This source correction's real-editor qualification
+is recorded separately in [the first-walk findings](../../docs/evidence/chat-first-walk-approvals-2026-10-09.md).
+
 A host advertising `volter.chat.inTurnApprovalCapability` version 1 presents
 actual approval requests in its native confirmation card. The original offered
 labels, order and response payloads are preserved. Clicking answers the pending

package/dist/extension.js

@@ -255,7 +255,10 @@ function writePart(stream, part, state) {
             }
             // Stable API on purpose: a command button runs INSIDE the live turn,
             // which is when a supercode approval is raised. See `view.ts`.
-            stream.markdown(`\n\n**${part.title}**\n\n${part.message}\n\n`);
+            // Native confirmation titles are plain text; escape only when the same
+            // title is embedded in the Markdown fallback (including Windows paths).
+            const title = new vscode.MarkdownString().appendText(part.title).value;
+            stream.markdown(`\n\n**${title}**\n\n${part.message}\n\n`);
             for (const answer of part.answers) {
                 stream.button({
                     title: answer.label,

package/dist/view.d.ts

@@ -107,7 +107,7 @@ export declare function toolTitles(toolName: string, argumentsText: string): {
 };
 /** The command line of a shell tool call, read from its own arguments; undefined for any other tool. */
 export declare function shellCommand(toolName: string, argumentsText: string): string | undefined;
-/** The summary line this view shows for a request payload. */
+/** The information this view shows for a request payload. */
 export declare function requestSummary(request: FrontendRequest): string;
 /** The answers this view offers for a request, one button each. */
 export declare function requestAnswers(request: FrontendRequest, connectionId: string): ChatAnswer[];

package/dist/view.js

@@ -195,11 +195,75 @@ export function shellCommand(toolName, argumentsText) {
     catch { /* not JSON */ }
     return undefined;
 }
-/** The summary line this view shows for a request payload. */
+/** The harness-supplied arguments of an approval; no files are read to reconstruct an edit. */
+function approvalArguments(fields) {
+    const value = fields.arguments ?? fields.raw_args ?? fields.input;
+    if (typeof value !== 'string')
+        return value;
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        return value;
+    }
+}
+/** An approval preview is display text, never a patch to apply or an answer to the request. */
+function approvalSummary(fields) {
+    const args = approvalArguments(fields);
+    const tool = text(fields.tool ?? fields.tool_name);
+    const values = args && typeof args === 'object' && !Array.isArray(args) ? args : undefined;
+    const path = values ? text(values.file_path ?? values.path ?? values.file ?? values.notebook_path) : '';
+    const heading = [tool, path || text(fields.subject ?? fields.message ?? fields.reason)].filter(Boolean)
+        .map(value => plain(clamp(stripControls(value), VSCODE_CHAT_LIMITS.titleCharacters))).join(' · ');
+    // Bound before adding fences, so truncation cannot leave an open code block.
+    const preview = (value, language = '') => {
+        const cleaned = stripControls(value);
+        const limited = clamp(cleaned, 24 * 1024);
+        return fence(limited, language) + (limited !== cleaned ? '\n\n_Preview truncated; the harness request is unchanged._' : '');
+    };
+    const changes = [];
+    const edits = values && Array.isArray(values.edits) ? values.edits : values ? [values] : [];
+    for (const edit of edits.slice(0, 4)) {
+        if (!edit || typeof edit !== 'object' || Array.isArray(edit))
+            continue;
+        if (typeof edit.old_string === 'string' && typeof edit.new_string === 'string') {
+            changes.push(`**Replace${edit.replace_all === true ? ' every match' : ''}**\n\n${preview(edit.old_string)}\n\n**With**\n\n${preview(edit.new_string)}`);
+        }
+    }
+    if (edits.length > 4)
+        changes.push('_Additional edits omitted from this preview; the harness request is unchanged._');
+    if (!changes.length && values) {
+        const patch = values.patch ?? values.diff;
+        const contents = values.content ?? values.new_source;
+        if (typeof patch === 'string')
+            changes.push(preview(patch, 'diff'));
+        else if (typeof contents === 'string')
+            changes.push(`**Proposed contents**\n\n${preview(contents)}`);
+    }
+    if (!changes.length && args !== undefined && args !== null) {
+        changes.push(preview(typeof args === 'string' ? args : JSON.stringify(args, null, 2), typeof args === 'string' ? '' : 'json'));
+    }
+    if (!changes.length)
+        changes.push('_The harness supplied no change preview._');
+    // Each edit is separately bounded; the overall card is bounded too. Retain
+    // complete fenced sections rather than cutting through their markup.
+    let result = heading;
+    for (const change of changes) {
+        if (result.length + change.length > VSCODE_CHAT_LIMITS.partCharacters - 128) {
+            result += '\n\n_Additional preview omitted; the harness request is unchanged._';
+            break;
+        }
+        result += `\n\n${change}`;
+    }
+    return result;
+}
+/** The information this view shows for a request payload. */
 export function requestSummary(request) {
     const payload = request.payload;
     if (payload && typeof payload === 'object' && !Array.isArray(payload)) {
         const fields = payload;
+        if (request.kind === 'approval')
+            return approvalSummary(fields);
         // `decide_approval` in crates/harness/src/server.rs publishes
         // `{tool, subject, raw_args}` and `ask_elicitation` publishes
         // `{message, requested_schema}`; the contract's own conformance fixture
@@ -348,11 +412,10 @@ export function requestSubject(request) {
     const tool = typeof fields.tool === 'string' ? fields.tool
         : typeof fields.tool_name === 'string' ? fields.tool_name
             : undefined;
+    const args = approvalArguments(fields);
     const subject = typeof fields.subject === 'string' ? fields.subject
-        : typeof fields.raw_args === 'string' ? fields.raw_args
-            : typeof fields.arguments === 'object' && fields.arguments !== null && !Array.isArray(fields.arguments)
-                ? toolSubject(JSON.stringify(fields.arguments))
-                : undefined;
+        : args && typeof args === 'object' ? toolSubject(JSON.stringify(args))
+            : undefined;
     if (tool && subject)
         return `${tool} on ${clamp(stripControls(subject), 120)}`;
     if (tool)
@@ -487,7 +550,7 @@ export function projectEvent(event, context) {
             const answers = requestAnswers(request, context.connectionId);
             const subject = requestSubject(request);
             const title = request.kind === 'approval'
-                ? 'Approval required'
+                ? subject ? `Allow ${stripControls(subject)}?` : 'Approval required'
                 : subject ? `Approve ${subject}` : `Assistant request #${request.id}`;
             // The host capability decides whether these original answers can use
             // a native in-turn confirmation card. Stock confirmation clicks start a

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@volter/supercode-frontend-vscode",
   "displayName": "Volter Harness",
-  "version": "0.1.57",
+  "version": "0.1.58",
   "type": "module",
   "description": "VS Code chat-view frontend for an existing Volter Harness SDK runtime",
   "publisher": "volter-ai-dev",