@xrkseek/harness 0.4.0-rc.4 → 0.4.1

package/node_modules/@xrkseek/server-face/dist/agent-team-tasks.js

@@ -0,0 +1,230 @@
+/**
+ * Thin Agent Teams task board — delivery / result / pause-takeover beside the
+ * collaboration graph. Not a DSH Cordis TeamService port: in-memory + optional
+ * JSON sidecar, keyed by root (parent) session.
+ */
+import { readFileSync } from "node:fs";
+import { tryWriteJsonSidecar } from "./json-sidecar.js";
+function newTaskId() {
+    return `task_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 8)}`;
+}
+export class AgentTeamTaskBoard {
+    tasks = new Map();
+    /** In-memory only — schemas are large and session-scoped. */
+    schemas = new Map();
+    persistPath;
+    constructor(persistPath) {
+        this.persistPath = persistPath;
+        if (persistPath)
+            this.load();
+    }
+    get(taskId) {
+        return this.tasks.get(taskId.trim());
+    }
+    list(parentSessionId) {
+        const parent = parentSessionId.trim();
+        return [...this.tasks.values()]
+            .filter((t) => t.parentSessionId === parent)
+            .sort((a, b) => b.updatedAt - a.updatedAt);
+    }
+    /** Create a pending/in_progress task when spawning a teammate. */
+    open(input) {
+        const now = input.now ?? Date.now();
+        const id = (input.taskId?.trim() || newTaskId()).slice(0, 80);
+        const existing = this.tasks.get(id);
+        if (existing) {
+            const next = {
+                ...existing,
+                title: input.title.trim() || existing.title,
+                status: "in_progress",
+                revision: existing.revision + 1,
+                updatedAt: now,
+                ...(input.childSessionId
+                    ? { childSessionId: input.childSessionId }
+                    : {}),
+                ...(input.role ? { role: input.role } : {}),
+                humanOwned: false,
+            };
+            this.tasks.set(id, next);
+            this.save();
+            return next;
+        }
+        const task = {
+            id,
+            parentSessionId: input.parentSessionId.trim(),
+            title: input.title.trim() || id,
+            status: input.childSessionId ? "in_progress" : "pending",
+            revision: 1,
+            createdAt: now,
+            updatedAt: now,
+            ...(input.childSessionId
+                ? { childSessionId: input.childSessionId }
+                : {}),
+            ...(input.role ? { role: input.role } : {}),
+        };
+        this.tasks.set(id, task);
+        this.save();
+        return task;
+    }
+    /** Bind a child session after create (when id was known before spawn). */
+    bindChild(taskId, childSessionId, now = Date.now()) {
+        const prev = this.tasks.get(taskId.trim());
+        if (!prev)
+            return undefined;
+        const next = {
+            ...prev,
+            childSessionId,
+            status: prev.status === "pending" ? "in_progress" : prev.status,
+            revision: prev.revision + 1,
+            updatedAt: now,
+            humanOwned: false,
+        };
+        this.tasks.set(prev.id, next);
+        this.save();
+        return next;
+    }
+    findByChild(childSessionId) {
+        const id = childSessionId.trim();
+        for (const task of this.tasks.values()) {
+            if (task.childSessionId === id)
+                return task;
+        }
+        return undefined;
+    }
+    /** Attach managed worktree lease fields to a Teams task. */
+    bindWorktree(taskId, worktree, now = Date.now()) {
+        const prev = this.tasks.get(taskId.trim());
+        if (!prev)
+            return undefined;
+        const next = {
+            ...prev,
+            worktreePath: worktree.path,
+            worktreeBranch: worktree.branch,
+            ...(worktree.id ? { worktreeId: worktree.id } : {}),
+            revision: prev.revision + 1,
+            updatedAt: now,
+        };
+        this.tasks.set(prev.id, next);
+        this.save();
+        return next;
+    }
+    /** Attach an output_schema for later validation (not persisted). */
+    setOutputSchema(taskId, schema) {
+        this.schemas.set(taskId.trim(), schema);
+    }
+    outputSchemaOf(taskId) {
+        return this.schemas.get(taskId.trim());
+    }
+    outputSchemaForChild(childSessionId) {
+        const task = this.findByChild(childSessionId);
+        if (!task)
+            return undefined;
+        return this.schemas.get(task.id);
+    }
+    /**
+     * Soft-pause / human takeover after interrupt.
+     * Marks the task paused + humanOwned (completion steer already suppressed).
+     */
+    markTakeover(childSessionId, now = Date.now()) {
+        const prev = this.findByChild(childSessionId);
+        if (!prev)
+            return undefined;
+        const next = {
+            ...prev,
+            status: "paused",
+            humanOwned: true,
+            revision: prev.revision + 1,
+            updatedAt: now,
+        };
+        this.tasks.set(prev.id, next);
+        this.save();
+        return next;
+    }
+    /** Resume after send_message — clear humanOwned, back to in_progress. */
+    markResumed(childSessionId, now = Date.now()) {
+        const prev = this.findByChild(childSessionId);
+        if (!prev)
+            return undefined;
+        if (!prev.humanOwned && prev.status === "in_progress")
+            return prev;
+        const next = {
+            ...prev,
+            status: "in_progress",
+            humanOwned: false,
+            revision: prev.revision + 1,
+            updatedAt: now,
+        };
+        this.tasks.set(prev.id, next);
+        this.save();
+        return next;
+    }
+    complete(taskId, input) {
+        const prev = this.tasks.get(taskId.trim());
+        if (!prev)
+            return undefined;
+        const now = input.now ?? Date.now();
+        const preview = input.preview?.trim();
+        const next = {
+            ...prev,
+            status: input.ok ? "completed" : "failed",
+            revision: prev.revision + 1,
+            updatedAt: now,
+            humanOwned: false,
+            ...(preview
+                ? {
+                    resultPreview: preview.length > 500 ? `${preview.slice(0, 500)}…` : preview,
+                }
+                : {}),
+            ...(input.schemaValid !== undefined
+                ? { schemaValid: input.schemaValid }
+                : {}),
+            ...(input.schemaErrors && input.schemaErrors.length > 0
+                ? { schemaErrors: input.schemaErrors.slice(0, 8) }
+                : {}),
+        };
+        this.tasks.set(prev.id, next);
+        this.save();
+        return next;
+    }
+    /** Complete by child session id (foreground wait / idle notice). */
+    completeByChild(childSessionId, input) {
+        const prev = this.findByChild(childSessionId);
+        if (!prev)
+            return undefined;
+        return this.complete(prev.id, input);
+    }
+    load() {
+        const file = this.persistPath;
+        if (!file)
+            return;
+        try {
+            const raw = JSON.parse(readFileSync(file, "utf8"));
+            if (!Array.isArray(raw.tasks))
+                return;
+            for (const row of raw.tasks) {
+                if (!row || typeof row !== "object")
+                    continue;
+                if (typeof row.id !== "string" || !row.id.trim())
+                    continue;
+                if (typeof row.parentSessionId !== "string")
+                    continue;
+                this.tasks.set(row.id, row);
+            }
+        }
+        catch {
+            /* missing / corrupt → empty */
+        }
+    }
+    save() {
+        const file = this.persistPath;
+        if (!file)
+            return;
+        tryWriteJsonSidecar(file, { tasks: [...this.tasks.values()] });
+    }
+}
+export function agentTeamTasksPath(subagentPersistPath) {
+    if (!subagentPersistPath?.trim())
+        return undefined;
+    return subagentPersistPath.replace(/[^/\\]+$/, "agent-team-tasks.json");
+}
+//# sourceMappingURL=agent-team-tasks.js.map

package/node_modules/@xrkseek/server-face/dist/agent-team-tasks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-team-tasks.js","sourceRoot":"","sources":["../src/agent-team-tasks.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAmCxD,SAAS,SAAS;IAChB,OAAO,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,OAAO,kBAAkB;IACZ,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC1D,6DAA6D;IAC5C,OAAO,GAAG,IAAI,GAAG,EAA6C,CAAC;IAC/D,WAAW,CAAqB;IAEjD,YAAY,WAAoB;QAC9B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,WAAW;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,GAAG,CAAC,MAAc;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,eAAuB;QAC1B,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,MAAM,CAAC;aAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,kEAAkE;IAClE,IAAI,CAAC,KAOJ;QACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,GAAkB;gBAC1B,GAAG,QAAQ;gBACX,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,KAAK;gBAC3C,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC;gBAC/B,SAAS,EAAE,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,cAAc;oBACtB,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;oBAC1C,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,UAAU,EAAE,KAAK;aAClB,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAkB;YAC1B,EAAE;YACF,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE;YAC7C,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE;YAC/B,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;YACxD,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,GAAG,CAAC,KAAK,CAAC,cAAc;gBACtB,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,SAAS,CAAC,MAAc,EAAE,cAAsB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,IAAI,GAAkB;YAC1B,GAAG,IAAI;YACP,cAAc;YACd,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM;YAC/D,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC;YAC3B,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,KAAK;SAClB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,WAAW,CAAC,cAAsB;QAChC,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,cAAc,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,4DAA4D;IAC5D,YAAY,CACV,MAAc,EACd,QAIC,EACD,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,IAAI,GAAkB;YAC1B,GAAG,IAAI;YACP,YAAY,EAAE,QAAQ,CAAC,IAAI;YAC3B,cAAc,EAAE,QAAQ,CAAC,MAAM;YAC/B,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC;YAC3B,SAAS,EAAE,GAAG;SACf,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oEAAoE;IACpE,eAAe,CACb,MAAc,EACd,MAAyC;QAEzC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,oBAAoB,CAClB,cAAsB;QAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,cAAsB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,IAAI,GAAkB;YAC1B,GAAG,IAAI;YACP,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC;YAC3B,SAAS,EAAE,GAAG;SACf,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yEAAyE;IACzE,WAAW,CAAC,cAAsB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;QACnE,MAAM,IAAI,GAAkB;YAC1B,GAAG,IAAI;YACP,MAAM,EAAE,aAAa;YACrB,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC;YAC3B,SAAS,EAAE,GAAG;SACf,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,CACN,MAAc,EACd,KAMC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,GAAkB;YAC1B,GAAG,IAAI;YACP,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;YACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC;YAC3B,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,KAAK;YACjB,GAAG,CAAC,OAAO;gBACT,CAAC,CAAC;oBACE,aAAa,EACX,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO;iBAC/D;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;gBACjC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;gBACpC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;gBACrD,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oEAAoE;IACpE,eAAe,CACb,cAAsB,EACtB,KAMC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAEO,IAAI;QACV,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO;YACtC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,SAAS;gBAC9C,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE;oBAAE,SAAS;gBAC3D,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ;oBAAE,SAAS;gBACtD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;IAEO,IAAI;QACV,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAChC,mBAA4B;IAE5B,IAAI,CAAC,mBAAmB,EAAE,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,mBAAmB,CAAC,OAAO,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;AAC1E,CAAC"}

package/node_modules/@xrkseek/server-face/dist/approval-category.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Classify human-approval asks for UX (Codex network vs escalation vs tool).
+ * Heuristic only — never a security boundary by itself.
+ */
+export type ApprovalCategory = "tool" | "network" | "escalation";
+export type NetworkApprovalProtocol = "http" | "https" | "ws" | "wss" | "other";
+export interface NetworkApprovalContext {
+    readonly host: string;
+    readonly protocol: NetworkApprovalProtocol;
+}
+export interface ApprovalClassification {
+    readonly category: ApprovalCategory;
+    readonly network?: NetworkApprovalContext;
+}
+/** Best-effort URL/host extraction from tool args or summaries. */
+export declare function extractNetworkContext(args: unknown): NetworkApprovalContext | undefined;
+/**
+ * Map tool / host-gate name + args onto an approval UX category.
+ */
+export declare function classifyApproval(input: {
+    readonly toolName: string;
+    readonly args?: unknown;
+    readonly reason?: string;
+}): ApprovalClassification;
+//# sourceMappingURL=approval-category.d.ts.map

package/node_modules/@xrkseek/server-face/dist/approval-category.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-category.d.ts","sourceRoot":"","sources":["../src/approval-category.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;AAEjE,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,OAAO,CAAC;AAEhF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAC3C;AAwBD,mEAAmE;AACnE,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,OAAO,GACZ,sBAAsB,GAAG,SAAS,CA6BpC;AAcD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,sBAAsB,CAuCzB"}

package/node_modules/@xrkseek/server-face/dist/approval-category.js

@@ -0,0 +1,108 @@
+/**
+ * Classify human-approval asks for UX (Codex network vs escalation vs tool).
+ * Heuristic only — never a security boundary by itself.
+ */
+const NETWORK_TOOLS = new Set([
+    "web_fetch",
+    "web_search",
+    "browser_open",
+    "browser_act",
+    "browser_snapshot",
+    "browser_vision",
+    "browser_scroll",
+]);
+function asObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function protocolOf(raw) {
+    const p = raw.toLowerCase();
+    if (p === "http" || p === "https" || p === "ws" || p === "wss")
+        return p;
+    return "other";
+}
+/** Best-effort URL/host extraction from tool args or summaries. */
+export function extractNetworkContext(args) {
+    const obj = asObject(args);
+    const candidates = [];
+    if (obj) {
+        for (const key of ["url", "href", "uri", "endpoint", "host", "cdpUrl"]) {
+            const v = obj[key];
+            if (typeof v === "string" && v.trim())
+                candidates.push(v.trim());
+        }
+        const summary = obj.summary;
+        if (typeof summary === "string" && summary.trim())
+            candidates.push(summary.trim());
+    }
+    else if (typeof args === "string" && args.trim()) {
+        candidates.push(args.trim());
+    }
+    for (const raw of candidates) {
+        try {
+            const withScheme = /^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(raw)
+                ? raw
+                : `https://${raw}`;
+            const u = new URL(withScheme);
+            if (!u.hostname)
+                continue;
+            return {
+                host: u.hostname,
+                protocol: protocolOf(u.protocol.replace(/:$/, "")),
+            };
+        }
+        catch {
+            // try next
+        }
+    }
+    return undefined;
+}
+function hasSandboxEscalationArgs(args) {
+    const obj = asObject(args);
+    if (!obj)
+        return false;
+    if (obj.sandbox_permissions !== undefined && obj.sandbox_permissions !== null) {
+        return true;
+    }
+    if (typeof obj.sandbox === "string" && /danger|full-access|escalat/i.test(obj.sandbox)) {
+        return true;
+    }
+    return false;
+}
+/**
+ * Map tool / host-gate name + args onto an approval UX category.
+ */
+export function classifyApproval(input) {
+    const name = input.toolName.trim();
+    const reason = input.reason ?? "";
+    const network = extractNetworkContext(input.args);
+    if (name === "mcp.connect" ||
+        name === "office.connect" ||
+        name === "host.open" ||
+        NETWORK_TOOLS.has(name) ||
+        name.startsWith("browser_")) {
+        const action = asObject(input.args)?.action ??
+            asObject(input.args)?.kind;
+        if (name === "host.open" && action === "path") {
+            // Local path open is not network.
+        }
+        else {
+            return {
+                category: "network",
+                ...(network !== undefined ? { network } : {}),
+            };
+        }
+    }
+    if (hasSandboxEscalationArgs(input.args) ||
+        /^(sandbox\.|escalat)/i.test(name) ||
+        /^danger[-_.]/i.test(name) ||
+        /escalat|sandbox\s*upgrade|danger-full-access|privileged/i.test(reason)) {
+        return { category: "escalation" };
+    }
+    if (network) {
+        return { category: "network", network };
+    }
+    return { category: "tool" };
+}
+//# sourceMappingURL=approval-category.js.map

package/node_modules/@xrkseek/server-face/dist/approval-category.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-category.js","sourceRoot":"","sources":["../src/approval-category.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgBH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,WAAW;IACX,YAAY;IACZ,cAAc;IACd,aAAa;IACb,kBAAkB;IAClB,gBAAgB;IAChB,gBAAgB;CACjB,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IACzE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,qBAAqB,CACnC,IAAa;IAEb,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE;gBAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;YAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;SAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACnD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC;gBACtD,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,SAAS;YAC1B,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,QAAQ;gBAChB,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;aACnD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAa;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,GAAG,CAAC,mBAAmB,KAAK,SAAS,IAAI,GAAG,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAIhC;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElD,IACE,IAAI,KAAK,aAAa;QACtB,IAAI,KAAK,gBAAgB;QACzB,IAAI,KAAK,WAAW;QACpB,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAC3B,CAAC;QACD,MAAM,MAAM,GACV,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM;YAC5B,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;QAC7B,IAAI,IAAI,KAAK,WAAW,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9C,kCAAkC;QACpC,CAAC;aAAM,CAAC;YACN,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IACE,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC;QACpC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;QAClC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,0DAA0D,CAAC,IAAI,CAAC,MAAM,CAAC,EACvE,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACpC,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC"}

package/node_modules/@xrkseek/server-face/dist/approvals.d.ts

@@ -2,9 +2,13 @@
  * Face human-approval broker — session events are the durable truth;
  * mux pushes DSH `approval/requested` (stable rpcId) settled by POST /api/respond
  * or `session.respondApproval`.
+ *
+ * Precedence (Codex-aligned): PermissionRequest hooks → human UI.
  */
 import { type SessionStore } from "@xrkseek/core-session";
 import type { ApprovalHandler, ToolPipelineContext } from "@xrkseek/core-tools";
+import type { PermissionRequestDecision } from "@xrkseek/server-loader";
+import { type ApprovalCategory, type NetworkApprovalContext } from "./approval-category.js";
 import type { FaceRpcReceipt, MuxFrame } from "./types.js";
 export type ApprovalOutcomeWire = "allowed-once" | "rejected" | "cancelled" | "unavailable";
 export interface PendingApprovalItem {
@@ -17,17 +21,30 @@ export interface PendingApprovalItem {
     readonly reason: string;
     readonly askedAt: number;
     readonly argsSummary?: string;
+    /** UX category: ordinary tool · network · sandbox escalation. */
+    readonly category: ApprovalCategory;
+    readonly network?: NetworkApprovalContext;
 }
 export interface FaceApprovalHooks {
     onRequested(item: PendingApprovalItem): void;
     onResolved(sessionId: string, approvalId: string, outcome: ApprovalOutcomeWire): void;
 }
+export type PermissionRequestGate = (args: {
+    readonly toolName: string;
+    readonly toolInput?: unknown;
+    readonly toolUseId?: string;
+    readonly category?: string;
+    readonly signal?: AbortSignal;
+}) => Promise<PermissionRequestDecision | undefined>;
 export declare class FaceApprovalBroker {
     private readonly store;
     private readonly hooks;
     private readonly waiters;
     private readonly byRpcId;
+    private permissionGate;
     constructor(store: SessionStore, hooks: FaceApprovalHooks);
+    /** Optional Claude/Codex PermissionRequest hooks (run before the human UI). */
+    setPermissionRequestGate(gate: PermissionRequestGate | undefined): void;
     listPending(sessionId?: string): readonly PendingApprovalItem[];
     /**
      * Host sidebar / Office policy `ask` — synthetic tool name so the existing

package/node_modules/@xrkseek/server-face/dist/approvals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE7E,OAAO,KAAK,EACV,eAAe,EACf,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3D,MAAM,MAAM,mBAAmB,GAC3B,cAAc,GACd,UAAU,GACV,WAAW,GACX,aAAa,CAAC;AAElB,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC7C,UAAU,CACR,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,mBAAmB,GAC3B,IAAI,CAAC;CACT;AAyBD,qBAAa,kBAAkB;IAK3B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IALxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;gBAGlC,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,iBAAiB;IAG3C,WAAW,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,mBAAmB,EAAE;IAU/D;;;OAGG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;QACJ,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,EACD,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,OAAO,CAAC;IAgBnB,qDAAqD;IACrD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe;IASxC,OAAO,CACX,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,IAAI,CAAC,mBAAmB,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC,EAC1D,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC;IAmEnB,OAAO,CACL,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAExB;QAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;KAAE,GACrB;QAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE;IAU3E;;;OAGG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,cAAc;IAsC7D,OAAO,CAAC,MAAM;CAsCf;AAED,gEAAgE;AAChE,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,QAAQ,EAAE;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC,CASnD;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,QAAQ,EAAE;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAC,CAOlD"}
+{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE7E,OAAO,KAAK,EACV,eAAe,EACf,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3D,MAAM,MAAM,mBAAmB,GAC3B,cAAc,GACd,UAAU,GACV,WAAW,GACX,aAAa,CAAC;AAElB,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC7C,UAAU,CACR,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,mBAAmB,GAC3B,IAAI,CAAC;CACT;AAED,MAAM,MAAM,qBAAqB,GAAG,CAAC,IAAI,EAAE;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B,KAAK,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;AAyBrD,qBAAa,kBAAkB;IAM3B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IANxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,cAAc,CAAoC;gBAGvC,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,iBAAiB;IAG3C,+EAA+E;IAC/E,wBAAwB,CAAC,IAAI,EAAE,qBAAqB,GAAG,SAAS,GAAG,IAAI;IAIvE,WAAW,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,mBAAmB,EAAE;IAU/D;;;OAGG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;QACJ,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,EACD,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,OAAO,CAAC;IAgBnB,qDAAqD;IACrD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe;IASxC,OAAO,CACX,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,IAAI,CAAC,mBAAmB,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC,EAC1D,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC;IAsGnB,OAAO,CACL,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAExB;QAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;KAAE,GACrB;QAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE;IAU3E;;;OAGG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,cAAc;IAsC7D,OAAO,CAAC,MAAM;CAsCf;AAED,gEAAgE;AAChE,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,QAAQ,EAAE;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC,CAgBnD;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,QAAQ,EAAE;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAC,CAOlD"}

package/node_modules/@xrkseek/server-face/dist/approvals.js

@@ -2,10 +2,13 @@
  * Face human-approval broker — session events are the durable truth;
  * mux pushes DSH `approval/requested` (stable rpcId) settled by POST /api/respond
  * or `session.respondApproval`.
+ *
+ * Precedence (Codex-aligned): PermissionRequest hooks → human UI.
  */
 import { readSessionEvents } from "@xrkseek/core-session";
 import { randomUUID } from "node:crypto";
 import { effectiveApprovalPolicy } from "@xrkseek/protocol";
+import { classifyApproval, } from "./approval-category.js";
 const ARGS_SUMMARY_MAX = 480;
 function summarizeArgs(args) {
     try {
@@ -28,10 +31,15 @@ export class FaceApprovalBroker {
     hooks;
     waiters = new Map();
     byRpcId = new Map();
+    permissionGate;
     constructor(store, hooks) {
         this.store = store;
         this.hooks = hooks;
     }
+    /** Optional Claude/Codex PermissionRequest hooks (run before the human UI). */
+    setPermissionRequestGate(gate) {
+        this.permissionGate = gate;
+    }
     listPending(sessionId) {
         const out = [];
         for (const w of this.waiters.values()) {
@@ -75,6 +83,30 @@ export class FaceApprovalBroker {
         if (effectiveApprovalPolicy(readSessionEvents(this.store, sessionId)) === "never") {
             return true;
         }
+        const classified = classifyApproval({
+            toolName: ctx.call.name,
+            args: ctx.args,
+            reason,
+        });
+        // Codex precedence: PermissionRequest hooks before the human reviewer.
+        if (this.permissionGate) {
+            try {
+                const hooked = await this.permissionGate({
+                    toolName: ctx.call.name,
+                    toolInput: ctx.args,
+                    toolUseId: ctx.call.id,
+                    category: classified.category,
+                    ...(ctx.signal ? { signal: ctx.signal } : {}),
+                });
+                if (hooked?.action === "allow")
+                    return true;
+                if (hooked?.action === "deny")
+                    return false;
+            }
+            catch {
+                // fail-open to human UI
+            }
+        }
         const approvalId = `apr_${randomUUID()}`;
         const rpcId = mintRpcId();
         const argsSummary = summarizeArgs(ctx.args);
@@ -87,6 +119,10 @@ export class FaceApprovalBroker {
             toolName: ctx.call.name,
             reason,
             askedAt,
+            category: classified.category,
+            ...(classified.network !== undefined
+                ? { network: classified.network }
+                : {}),
             ...(argsSummary !== undefined ? { argsSummary } : {}),
         };
         this.store.append(sessionId, {
@@ -96,6 +132,13 @@ export class FaceApprovalBroker {
             toolCallId: ctx.call.id,
             toolName: ctx.call.name,
             reason,
+            category: classified.category,
+            ...(classified.network
+                ? {
+                    networkHost: classified.network.host,
+                    networkProtocol: classified.network.protocol,
+                }
+                : {}),
             ...(argsSummary !== undefined ? { argsSummary } : {}),
         });
         return await new Promise((resolve) => {
@@ -206,6 +249,13 @@ export function approvalRequestedFrame(item) {
         toolName: item.toolName,
         callId: item.toolCallId,
         reason: item.reason,
+        category: item.category,
+        ...(item.network
+            ? {
+                networkHost: item.network.host,
+                networkProtocol: item.network.protocol,
+            }
+            : {}),
     };
 }
 export function approvalResolvedFrame(sessionId, approvalId, outcome) {

package/node_modules/@xrkseek/server-face/dist/approvals.js.map

@@ -1 +1 @@
-{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAqB,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAG5D,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAqC7B,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,IAAI,GAAG,CAAC,MAAM,IAAI,gBAAgB;YAAE,OAAO,GAAG,CAAC;QAC/C,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,SAAS,UAAU,EAAE,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,OAAO,kBAAkB;IAKV;IACA;IALF,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAErD,YACmB,KAAmB,EACnB,KAAwB;QADxB,UAAK,GAAL,KAAK,CAAc;QACnB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,WAAW,CAAC,SAAkB;QAC5B,MAAM,GAAG,GAA0B,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACtC,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CACnB,SAAiB,EACjB,IAIC,EACD,MAAoB;QAEpB,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAA0D;YACvE,IAAI,EAAE;gBACJ,EAAE,EAAE,QAAQ,UAAU,EAAE,EAAE;gBAC1B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;aACzD;YACD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;YACnD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,qDAAqD;IACrD,UAAU,CAAC,SAAiB;QAC1B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YAC3B,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;gBAClF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACX,SAAiB,EACjB,GAA0D,EAC1D,MAAc;QAEd,gEAAgE;QAChE,sEAAsE;QACtE,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,UAAU,EAAE,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAwB;YAChC,KAAK;YACL,UAAU;YACV,SAAS;YACT,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACvB,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;YACvB,MAAM;YACN,OAAO;YACP,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;YAC3B,IAAI,EAAE,gBAAgB;YACtB,EAAE,EAAE,OAAO;YACX,UAAU;YACV,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACvB,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;YACvB,MAAM;YACN,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;QAEH,OAAO,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE;gBAChC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBAC1C,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;gBACnE,CAAC;gBACD,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,CAAC;YAEF,MAAM,MAAM,GAAW;gBACrB,SAAS;gBACT,IAAI;gBACJ,OAAO,EAAE,MAAM;aAChB,CAAC;YAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAE7B,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;gBACpE,CAAC,CAAC;gBACF,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC3B,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC;gBAC/B,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACvB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;oBAClE,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CACL,SAAiB,EACjB,UAAkB,EAClB,QAA0B;QAI1B,OAAO,IAAI,CAAC,MAAM,CAChB,SAAS,EACT,UAAU,EACV,QAAQ,EACR,MAAM,EACN,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CACnD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,KAAa,EAAE,KAAc;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACpD,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACrD,CAAC;QACD,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YACxE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACpE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACrD,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QAC1B,IAAI,OAAO,KAAK,cAAc,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YACzD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CACzB,MAAM,CAAC,SAAS,EAChB,UAAU,EACV,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAC7C,MAAM,EACN,OAAO,CACR,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAEO,MAAM,CACZ,SAAiB,EACjB,UAAkB,EAClB,QAA0B,EAC1B,MAA8B,EAC9B,OAA4B;QAI5B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,UAAU;aACpB,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,YAAY,UAAU,eAAe,MAAM,CAAC,SAAS,EAAE;aACjE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;YAC3B,IAAI,EAAE,kBAAkB;YACxB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,UAAU;YACV,QAAQ;YACR,MAAM;SACP,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,UAAU,sBAAsB,CACpC,IAAyB;IAEzB,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,UAAU;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,UAAkB,EAClB,OAA4B;IAE5B,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,SAAS;QACT,UAAU;QACV,OAAO;KACR,CAAC;AACJ,CAAC"}
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAqB,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EACL,gBAAgB,GAGjB,MAAM,wBAAwB,CAAC;AAGhC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAgD7B,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,IAAI,GAAG,CAAC,MAAM,IAAI,gBAAgB;YAAE,OAAO,GAAG,CAAC;QAC/C,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,SAAS,UAAU,EAAE,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,OAAO,kBAAkB;IAMV;IACA;IANF,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,cAAc,CAAoC;IAE1D,YACmB,KAAmB,EACnB,KAAwB;QADxB,UAAK,GAAL,KAAK,CAAc;QACnB,UAAK,GAAL,KAAK,CAAmB;IACxC,CAAC;IAEJ,+EAA+E;IAC/E,wBAAwB,CAAC,IAAuC;QAC9D,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,WAAW,CAAC,SAAkB;QAC5B,MAAM,GAAG,GAA0B,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACtC,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CACnB,SAAiB,EACjB,IAIC,EACD,MAAoB;QAEpB,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAA0D;YACvE,IAAI,EAAE;gBACJ,EAAE,EAAE,QAAQ,UAAU,EAAE,EAAE;gBAC1B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;aACzD;YACD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;YACnD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,qDAAqD;IACrD,UAAU,CAAC,SAAiB;QAC1B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YAC3B,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;gBAClF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACX,SAAiB,EACjB,GAA0D,EAC1D,MAAc;QAEd,gEAAgE;QAChE,sEAAsE;QACtE,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,gBAAgB,CAAC;YAClC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;YACvB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM;SACP,CAAC,CAAC;QAEH,uEAAuE;QACvE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;oBACvC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;oBACvB,SAAS,EAAE,GAAG,CAAC,IAAI;oBACnB,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;oBACtB,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9C,CAAC,CAAC;gBACH,IAAI,MAAM,EAAE,MAAM,KAAK,OAAO;oBAAE,OAAO,IAAI,CAAC;gBAC5C,IAAI,MAAM,EAAE,MAAM,KAAK,MAAM;oBAAE,OAAO,KAAK,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,UAAU,EAAE,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAwB;YAChC,KAAK;YACL,UAAU;YACV,SAAS;YACT,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACvB,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;YACvB,MAAM;YACN,OAAO;YACP,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,GAAG,CAAC,UAAU,CAAC,OAAO,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;gBACjC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;YAC3B,IAAI,EAAE,gBAAgB;YACtB,EAAE,EAAE,OAAO;YACX,UAAU;YACV,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACvB,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;YACvB,MAAM;YACN,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,GAAG,CAAC,UAAU,CAAC,OAAO;gBACpB,CAAC,CAAC;oBACE,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI;oBACpC,eAAe,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ;iBAC7C;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;QAEH,OAAO,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE;gBAChC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBAC1C,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;gBACnE,CAAC;gBACD,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,CAAC;YAEF,MAAM,MAAM,GAAW;gBACrB,SAAS;gBACT,IAAI;gBACJ,OAAO,EAAE,MAAM;aAChB,CAAC;YAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAE7B,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;gBACpE,CAAC,CAAC;gBACF,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC3B,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC;gBAC/B,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACvB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;oBAClE,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CACL,SAAiB,EACjB,UAAkB,EAClB,QAA0B;QAI1B,OAAO,IAAI,CAAC,MAAM,CAChB,SAAS,EACT,UAAU,EACV,QAAQ,EACR,MAAM,EACN,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CACnD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,KAAa,EAAE,KAAc;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACpD,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACrD,CAAC;QACD,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YACxE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACpE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACrD,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QAC1B,IAAI,OAAO,KAAK,cAAc,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YACzD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CACzB,MAAM,CAAC,SAAS,EAChB,UAAU,EACV,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAC7C,MAAM,EACN,OAAO,CACR,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAEO,MAAM,CACZ,SAAiB,EACjB,UAAkB,EAClB,QAA0B,EAC1B,MAA8B,EAC9B,OAA4B;QAI5B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,UAAU;aACpB,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,YAAY,UAAU,eAAe,MAAM,CAAC,SAAS,EAAE;aACjE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;YAC3B,IAAI,EAAE,kBAAkB;YACxB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,UAAU;YACV,QAAQ;YACR,MAAM;SACP,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,UAAU,sBAAsB,CACpC,IAAyB;IAEzB,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,UAAU;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,CAAC,IAAI,CAAC,OAAO;YACd,CAAC,CAAC;gBACE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;gBAC9B,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;aACvC;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,UAAkB,EAClB,OAA4B;IAE5B,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,SAAS;QACT,UAAU;QACV,OAAO;KACR,CAAC;AACJ,CAAC"}

package/node_modules/@xrkseek/server-face/dist/context.d.ts

@@ -17,7 +17,10 @@ import type { FaceApprovalBroker } from "./approvals.js";
 import type { FaceQuestionBroker } from "./questions.js";
 import type { FaceWorkspaceRegistry } from "./workspace-registry.js";
 import type { FaceSubagentRegistry } from "./subagent-registry.js";
+import type { ExternalAgentSessionRegistry } from "./external-agent-runtime.js";
 import type { AgentTeamGraph } from "./agent-team-graph.js";
+import type { AgentTeamTaskBoard } from "./agent-team-tasks.js";
+import type { ManagedWorktreeManager } from "./managed-worktree.js";
 import type { FaceMessageFeedbackStore } from "./message-feedback.js";
 import type { FaceGoalStore } from "./goal-store.js";
 import type { FaceWireIdMaps } from "./adapt/wire-ids.js";
@@ -106,8 +109,17 @@ export interface FaceRuntime {
     readonly workspaces: FaceWorkspaceRegistry;
     /** Direct subagent children (fork / create-with-parent). */
     readonly subagents: FaceSubagentRegistry;
+    /**
+     * Live ACP / app-server subprocesses keyed by Face child session id.
+     * Same list / send / interrupt / wait surface as in-process continuable.
+     */
+    readonly externalAgents: ExternalAgentSessionRegistry;
     /** Delegation + peer team graph (persisted next to the subagent sidecar). */
     readonly agentTeams: AgentTeamGraph;
+    /** Thin task board (delivery · result · pause/takeover) beside the graph. */
+    readonly agentTeamTasks: AgentTeamTaskBoard;
+    /** Managed git worktree leases (allocate / reclaim / Teams bind). */
+    readonly managedWorktrees: ManagedWorktreeManager;
     /** Per-session assistant-message ratings (process-local CAS). */
     readonly messageFeedback: FaceMessageFeedbackStore;
     /**
@@ -161,6 +173,11 @@ export interface FaceRuntime {
     readonly cordisHostBridge?: FaceCordisHostBridge;
     /** In-memory credential overrides — never session-logged. */
     readonly credentials: FaceCredentialVault;
+    /**
+     * Optional OS keyring / memory SecretStore overlay (`XRK_SECRETS_BACKEND`).
+     * Face `.credentials.yaml` remains the default durable SoT.
+     */
+    readonly secretStore?: import("@xrkseek/secrets").SecretStore;
     /** Face settings namespaces (welcome notice, etc.). */
     readonly settingsNamespaces: FaceSettingsNamespaces;
     /** Bootstrap Host API key from env/config (before vault override). */
@@ -204,6 +221,11 @@ export interface FaceRuntime {
     readonly questions: FaceQuestionBroker;
     /** Drop cached agent when preset changes (host wires). May be async (compose dispose). */
     invalidateAgent?(sessionId: string): void | Promise<void>;
+    /**
+     * Session leaving the live set (archive / Host stop). Host may run curated-memory
+     * Phase1 consolidate. Best-effort; failures must not block Face.
+     */
+    onSessionFinalize?(sessionId: string): void | Promise<void>;
     /** When true, `/permission` refuses sandbox mode changes while **Agent**
      * `terminal_*` PTY sessions are open or spawning (CV DSH terminal-bash
      * sandbox fence). Sidebar user terminals must not be reported here.