@yu_robotics/remote-cli 1.6.53 → 1.6.66

package/README.md

@@ -5,15 +5,16 @@ Remote control Claude Code, AGY CLI, Codex CLI, OpenCode CLI, Kimi Code CLI, ZCo
 ## Features
 
 - **Remote Control**: Control your local development environment from anywhere via mobile
-- **Secure**: Directory whitelisting, command filtering, and device authentication
+- **Access Controls**: Working-directory allowlist and user-device binding
 - **Mobile-Optimized**: Simplified commands and rich text formatting for Feishu
 - **Readable Code Changes**: Edit operations show collapsible, line-aware diff previews inside the existing progress card
 - **Multi-Backend Support**: Supports Claude Code, AGY CLI (Antigravity), Codex CLI (OpenAI), OpenCode CLI, Kimi Code CLI, ZCode, and Pi
-- **Image Input and Output**: Forward standalone images and mixed text-image Feishu posts to Claude Persistent, Codex App Server, OpenCode ACP, Kimi Code ACP, ZCode, and Pi backends, and forward Codex App Server generated images back through Router
+- **Image Input and Output**: Forward Feishu images to supported backends and return Codex native image output. All backends can return local images through file paths or Markdown image links; files must be inside an allowed directory and no larger than 2 MiB. AGY does not accept image input.
 - **Multi-session (Threads)**: Create independent chat threads to parallelize tasks
 - **Remote Machine Management**: Control remote servers or Docker via SSH
 - **Persistent Process**: Long-running AI process with bidirectional streaming
-- **Non-Interactive Auto-Update**: Reconnect to a newer Router, wait for idle work, install its exact version, and exit for the process supervisor to restart
+- **Automatic Updates**: Install the newer Router's exact version when idle. Manual clients keep running and use the update on their next start; supervised non-interactive clients exit for an immediate restart.
+- **Task Recovery**: With a compatible Router, running tasks resume output on a usable surviving card or a new card with an output-gap notice. Recovery retries use bounded backoff; disconnected output is not buffered or replayed, even after recovery is paused.
 
 ## Prerequisites
 
@@ -63,6 +64,8 @@ remote-cli start
 Help me fix TypeScript errors in ~/projects/my-app
 ```
 
+Manual starts automatically install updates when tasks and queues are idle, without exiting the running client. Updates take effect on the next start. Use `remote-cli service install` for automatic startup and supervised restarts after updates. If the Router rejects the running protocol, restart the manual client after installation to reconnect. See [Automatic Client Startup](../../README.md#automatic-client-startup) for update behavior and recovery.
+
 ## Commands
 
 | Command | Description |
@@ -98,12 +101,13 @@ Linux users upgrading from version 1.6.23 or earlier should run `remote-cli serv
 | `/compact` | Compress history to save tokens |
 | `/cd <dir>` | Change working directory for this thread |
 | `/model [name]` | List models for the active backend or set this thread's model |
-| `/effort [auto|level]` | Show or set Codex/AGY/OpenCode/Kimi reasoning effort |
+| `/effort [auto|level]` | Show or set Codex/AGY/OpenCode/Kimi/ZCode/Pi reasoning effort |
+| `/sandbox [on/off/read-only/default]` | Configure the current Codex or Claude Code thread sandbox, directory grants, and networking |
 | `/backend` | List backends and show the current thread's effective backend |
 | `/backend <index>` | Switch all threads and clear per-thread backend overrides |
 | `/backend <index> @` | Switch only the current thread |
 | `/backend default @` | Clear the current thread override and follow the global backend |
-| `/bind <码>` | Bind a new device |
+| `/bind <code>` | Bind a new device |
 | `/unbind` | Unbind all devices |
 | `/device` | List and switch between bound devices |
 
@@ -153,14 +157,20 @@ When diagnosing a task, check `/status`, then `/context`, then `/queue`. Use `/a
 
 ## Security
 
-- **Directory whitelisting**: Only explicitly allowed directories are accessible
-- **Command filtering**: Dangerous commands are automatically blocked
+Codex permission requests use interactive cards when both CLI and Router support them. Choose Allow, Deny, or (for explicit directory grants) Allow and remember directory. Buttons stay bound to the original request and are invalidated when it finishes. Pending approvals get new cards after reconnecting; older routers and card delivery failures retain text replies.
+
+Codex supports an opt-in native sandbox through `/sandbox on`, `/sandbox read-only`, and `/sandbox off`. Use `/sandbox allow <directory>` to save extra writable directories for the current thread, `remove <directory>` to revoke them, and `network on|off` to control networking. The workspace-write default allows cross-project reads, networking, and writes to the current project, dedicated temporary/download directories, and common package caches. Grants survive conversation resets and backend switches. See [Codex sandbox configuration](../../README.md#optional-codex-sandbox) for boundaries, approval choices, and configuration defaults. Other backends retain their existing behavior.
+
+Claude Code also supports opt-in `/sandbox` policies. Workspace-write mode automatically permits ordinary file edits inside the workspace and explicitly authorized writable directories through a process-scoped native hook. Real file destinations are checked, and native deny/ask rules remain effective. Outside writes, protected files, and all read-only-mode file modifications still require approval. Startup verifies the hook before sending a task and fails if native hook restrictions prevent it from running. Missing Linux dependencies (`bubblewrap` and `socat` on `PATH`) stop execution instead of falling back to full access. Permission cards use text replies (`yes` / `no`, or a request ID when several approvals are pending) if cards are unavailable. Pending approvals expire when the task ends or the process stops. Sandboxed commands can access network domains without per-domain approval by default; `/sandbox network on` restores this behavior while preserving filesystem isolation, native domain deny rules, and administrator-managed restrictions. Previously saved network-off settings remain disabled until explicitly changed. `/sandbox network off` overrides saved domain allowlists for sandboxed commands; it does not block Claude API traffic or in-process web tools. See [Claude sandbox configuration](../../README.md#optional-claude-code-sandbox).
+
+- **Directory whitelisting**: Controls which working directory a thread can select; it is not a process sandbox
+- **Backend permissions**: AI processes inherit the operating-system user's permissions. remote-cli does not install a global Claude security hook or automatically filter backend shell commands.
 - **Device authentication**: Each device has a unique hardware-based ID
 - **Binding codes**: Expire after 5 minutes
 
 ## Documentation
 
-For full documentation including router server deployment, see the [project README](https://github.com/xiaoyu/remote-cli#readme).
+For full documentation including router server deployment, see the [project README](https://github.com/Yu-Robotics/remote-cli#readme).
 
 ## License
 

package/dist/client/MessageHandler.d.ts

@@ -36,6 +36,8 @@ export declare class MessageHandler {
     private readonly activeThreadOperations;
     private readonly abortOperations;
     private automaticUpdateInProgress;
+    private approvalCardsSupported;
+    private readonly pendingApprovalCards;
     constructor(wsClient: WebSocketClient, threadPool: ThreadExecutorPool, threadManager: ThreadManager, directoryGuard: DirectoryGuard, config: ConfigManager);
     /**
      * Handle message (supports new IncomingMessage format)
@@ -153,6 +155,11 @@ export declare class MessageHandler {
     private isUnavailableCodexModelError;
     private getMessageOpenId;
     private trackTask;
+    private forwardApproval;
+    private sendApprovalMessage;
+    private showApprovalFallback;
+    private resolveApprovalCard;
+    private handleApprovalResponse;
     private sendStreamChunk;
     private sendToolUse;
     private sendToolResult;

package/dist/client/MessageHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MessageHandler.d.ts","sourceRoot":"","sources":["../../src/client/MessageHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAwI,MAAM,UAAU,CAAC;AACjL,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAKxD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAkGxD;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,mBAAmB,CAA4B;IACvD,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,eAAe,CAA0C;IACjE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsC;IACnE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA+C;IACzF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyC;IACxE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA4C;IACnF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAoC;IACpE,OAAO,CAAC,yBAAyB,CAAS;gBAGxC,QAAQ,EAAE,eAAe,EACzB,UAAU,EAAE,kBAAkB,EAC9B,aAAa,EAAE,aAAa,EAC5B,cAAc,EAAE,cAAc,EAC9B,MAAM,EAAE,aAAa;IAgBvB;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCtE,uBAAuB,IAAI,OAAO;IAoBlC,kBAAkB,IAAI,IAAI;IAI1B;;OAEG;YACW,oBAAoB;IA8NlC;;OAEG;YACW,kBAAkB;IAsDhC;;OAEG;YACW,iBAAiB;IAiB/B,OAAO,CAAC,cAAc;IAOtB;;;OAGG;YACW,oBAAoB;IAgUlC,OAAO,CAAC,uBAAuB;IAgC/B,OAAO,CAAC,+BAA+B;IAOvC,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,cAAc;YASR,kBAAkB;YA0ElB,sBAAsB;IAkDpC,OAAO,CAAC,sBAAsB;IAU9B,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,qBAAqB;IAS7B,OAAO,CAAC,mBAAmB;IAK3B;;;;;;;;;OASG;YACW,eAAe;IA+C7B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAkCzB;;OAEG;YACW,mBAAmB;IAoGjC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAS1B;;;OAGG;YACW,oBAAoB;IA6MlC;;OAEG;YACW,qBAAqB;IAiBnC;;OAEG;IACH,OAAO,CAAC,UAAU;IAuBlB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAO9B;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAG7C;YAEW,eAAe;IAgC7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAI3B;;;;;;;;;;;;;OAaG;YACW,mBAAmB;IAyDjC;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IA2D/B;;OAEG;YACW,cAAc;YAgHd,sBAAsB;IAoBpC,OAAO,CAAC,4BAA4B;IAOpC,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,WAAW;IAgBnB,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,SAAS;IAgBjB,OAAO,CAAC,qBAAqB;IAmB7B,OAAO,CAAC,YAAY;IA6CpB,OAAO,CAAC,YAAY;YAMN,cAAc;YAqBd,oBAAoB;IAkHlC;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAS/B"}
+{"version":3,"file":"MessageHandler.d.ts","sourceRoot":"","sources":["../../src/client/MessageHandler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAwI,MAAM,UAAU,CAAC;AACjL,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAKxD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAkGxD;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,mBAAmB,CAA4B;IACvD,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,eAAe,CAA0C;IACjE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsC;IACnE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA+C;IACzF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyC;IACxE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA4C;IACnF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAoC;IACpE,OAAO,CAAC,yBAAyB,CAAS;IAC1C,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA+E;gBAGlH,QAAQ,EAAE,eAAe,EACzB,UAAU,EAAE,kBAAkB,EAC9B,aAAa,EAAE,aAAa,EAC5B,cAAc,EAAE,cAAc,EAC9B,MAAM,EAAE,aAAa;IAgBvB;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAgDtE,uBAAuB,IAAI,OAAO;IAoBlC,kBAAkB,IAAI,IAAI;IAI1B;;OAEG;YACW,oBAAoB;IAgOlC;;OAEG;YACW,kBAAkB;IAsDhC;;OAEG;YACW,iBAAiB;IAiB/B,OAAO,CAAC,cAAc;IAOtB;;;OAGG;YACW,oBAAoB;IAiVlC,OAAO,CAAC,uBAAuB;IAgC/B,OAAO,CAAC,+BAA+B;IAOvC,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,cAAc;YASR,kBAAkB;YA0ElB,sBAAsB;IAkDpC,OAAO,CAAC,sBAAsB;IAU9B,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,qBAAqB;IAS7B,OAAO,CAAC,mBAAmB;IAK3B;;;;;;;;;OASG;YACW,eAAe;IA+C7B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAkCzB;;OAEG;YACW,mBAAmB;IAoGjC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAS1B;;;OAGG;YACW,oBAAoB;IA6MlC;;OAEG;YACW,qBAAqB;IAiBnC;;OAEG;IACH,OAAO,CAAC,UAAU;IAuBlB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAO9B;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAG7C;YAEW,eAAe;IAgC7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAI3B;;;;;;;;;;;;;OAaG;YACW,mBAAmB;IAyDjC;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IA2D/B;;OAEG;YACW,cAAc;YAkHd,sBAAsB;IAoBpC,OAAO,CAAC,4BAA4B;IAOpC,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,mBAAmB;IAQ3B,OAAO,CAAC,sBAAsB;IAmB9B,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,WAAW;IAgBnB,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,SAAS;IAgBjB,OAAO,CAAC,qBAAqB;IAmB7B,OAAO,CAAC,YAAY;IA6CpB,OAAO,CAAC,YAAY;YAMN,cAAc;YAqBd,oBAAoB;IAkHlC;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAU/B"}

package/dist/client/MessageHandler.js

@@ -87,6 +87,8 @@ class MessageHandler {
     activeThreadOperations = new Map();
     abortOperations = new Map();
     automaticUpdateInProgress = false;
+    approvalCardsSupported = false;
+    pendingApprovalCards = new Map();
     constructor(wsClient, threadPool, threadManager, directoryGuard, config) {
         this.wsClient = wsClient;
         this.threadPool = threadPool;
@@ -121,7 +123,24 @@ class MessageHandler {
                 return;
             case 'heartbeat':
                 return;
-            case 'binding_confirm':
+            case 'binding_confirm': {
+                const data = message.data;
+                if (data?.success !== true)
+                    return;
+                this.approvalCardsSupported = data.capabilities?.approvalCards === true;
+                for (const pending of this.pendingApprovalCards.values()) {
+                    if (this.approvalCardsSupported)
+                        this.sendApprovalMessage(pending.request);
+                    else
+                        this.showApprovalFallback(pending.request.messageId);
+                }
+                return;
+            }
+            case 'approval_response':
+                this.handleApprovalResponse(message);
+                return;
+            case 'approval_unavailable':
+                this.showApprovalFallback(message.messageId);
                 return;
             default:
                 this.sendResponse(message.messageId, undefined, {
@@ -233,7 +252,9 @@ class MessageHandler {
                     this.sendResponse(messageId, resolvedThreadId, {
                         success: sent,
                         output: sent ? `✅ Sent: "${input}"` : undefined,
-                        error: sent ? undefined : '❌ Failed to send input - executor is no longer waiting',
+                        error: sent ? undefined : ex.isWaitingInput()
+                            ? '❌ Input was not accepted. Check the pending request and reply again.'
+                            : '❌ Failed to send input - executor is no longer waiting',
                     });
                 }
                 else {
@@ -286,7 +307,7 @@ class MessageHandler {
             }
             return;
         }
-        const queueSensitiveCommand = /^\/(?:clear|new|compact|cd|model|effort)(?:\s|$)/.test(content?.trim() ?? '')
+        const queueSensitiveCommand = /^\/(?:clear|new|compact|cd|model|effort|sandbox)(?:\s|$)/.test(content?.trim() ?? '')
             || /^\/thread\s+delete(?:\s|$)/.test(content?.trim() ?? '');
         if (queueSensitiveCommand && this.hasThreadQueueState(resolvedThreadId)) {
             this.sendResponse(messageId, resolvedThreadId, {
@@ -432,6 +453,18 @@ class MessageHandler {
      */
     async handleBuiltInCommand(messageId, threadId, content, executor) {
         const trimmed = content.trim();
+        if (trimmed === '/sandbox' || trimmed.startsWith('/sandbox ')) {
+            if (!('getSandboxStatus' in executor) || !('configureSandbox' in executor)) {
+                this.sendResponse(messageId, threadId, { success: false, error: '/sandbox is currently supported by the Codex and Claude Code backends.' });
+                return true;
+            }
+            const control = executor;
+            const result = trimmed === '/sandbox'
+                ? { success: true, output: control.getSandboxStatus() }
+                : await control.configureSandbox(trimmed.slice('/sandbox'.length).trim());
+            this.sendResponse(messageId, threadId, result);
+            return true;
+        }
         if (trimmed === '/status') {
             const cwd = executor.getCurrentWorkingDirectory();
             const allowedDirs = this.directoryGuard.getAllowedDirectories();
@@ -521,6 +554,7 @@ Use /compact to reduce conversation context or /clear to start a fresh context.`
 - /cd <directory> - Change working directory for this thread
 - /model [name] - Show models for the active backend, or set this thread's model
 - /effort [auto|level] - Show or set effort for Codex/AGY/OpenCode/Kimi/ZCode/Pi (Claude Code is unsupported)
+- /sandbox [on|off|read-only|default|allow <directory>|remove <directory>|network on|off] - Configure this thread's sandbox (Codex, Claude Code)
 - /backend - List backends and show the current thread's effective backend
 - /backend <index> - Switch all threads and clear per-thread backend overrides
 - /backend <index> @ - Switch only the current thread
@@ -1554,6 +1588,8 @@ You can also use natural language commands to control Claude Code CLI.`,
                 pendingLocalImageEmissions.add(pending);
             };
             const executeOptions = {
+                onApprovalRequest: (approval) => this.forwardApproval(approval, executor, messageId, threadId),
+                onApprovalResolved: (requestId, status) => this.resolveApprovalCard(requestId, status),
                 onTaskNotification,
                 onStream: (chunk) => {
                     streamedOutput += chunk;
@@ -1646,6 +1682,62 @@ You can also use natural language commands to control Claude Code CLI.`,
             backend: this.threadPool.getBackendKey(threadId),
             cwd: this.threadPool.getExecutor(threadId).getCurrentWorkingDirectory(), preview: content });
     }
+    forwardApproval(approval, executor, taskMessageId, threadId) {
+        const openId = this.getMessageOpenId(taskMessageId);
+        if (!openId)
+            return false;
+        const request = { type: 'approval_request', messageId: approval.requestId,
+            taskMessageId, openId, threadId, threadName: this.threadManager.getThread(threadId)?.name ?? threadId,
+            cwd: executor.getCurrentWorkingDirectory(), approval, timestamp: Date.now() };
+        this.pendingApprovalCards.set(approval.requestId, { request, executor });
+        if (this.approvalCardsSupported)
+            this.sendApprovalMessage(request);
+        return this.approvalCardsSupported;
+    }
+    sendApprovalMessage(message) {
+        try {
+            this.wsClient.send(message);
+        }
+        catch { /* Pending approvals are resent after registration. */ }
+    }
+    showApprovalFallback(requestId) {
+        const pending = this.pendingApprovalCards.get(requestId);
+        if (!pending)
+            return;
+        const { request } = pending;
+        this.sendStreamChunk(request.taskMessageId, request.threadId, `\nApproval required: ${request.approval.description}\nReply yes, no${request.approval.canRemember ? ', or remember to save these directories' : ''}.\n`);
+    }
+    resolveApprovalCard(requestId, status) {
+        const pending = this.pendingApprovalCards.get(requestId);
+        if (!pending)
+            return;
+        this.pendingApprovalCards.delete(requestId);
+        if (this.approvalCardsSupported)
+            this.sendApprovalMessage({ type: 'approval_resolved', messageId: requestId,
+                openId: pending.request.openId, threadId: pending.request.threadId, status, timestamp: Date.now() });
+    }
+    handleApprovalResponse(message) {
+        const pending = this.pendingApprovalCards.get(message.messageId);
+        if (!pending || pending.request.threadId !== message.threadId || pending.request.openId !== message.openId
+            || pending.request.taskMessageId !== message.taskMessageId) {
+            this.sendApprovalMessage({ type: 'approval_resolved', messageId: message.messageId,
+                openId: message.openId, threadId: message.threadId, status: 'expired', timestamp: Date.now() });
+            return;
+        }
+        let accepted = false;
+        try {
+            accepted = pending.executor.respondToApproval?.(message.messageId, message.action) === true;
+        }
+        catch { /* Report failure without approving another request. */ }
+        if (accepted) {
+            this.resolveApprovalCard(message.messageId, message.action === 'remember' ? 'remembered' : message.action === 'deny' ? 'denied' : 'approved');
+        }
+        else if (this.pendingApprovalCards.has(message.messageId)) {
+            this.sendApprovalMessage({ type: 'approval_resolved', messageId: message.messageId,
+                openId: message.openId, threadId: message.threadId, status: 'pending',
+                error: 'Approval could not be applied. Check the task output or choose another action.', timestamp: Date.now() });
+        }
+    }
     sendStreamChunk(messageId, threadId, chunk) {
         try {
             this.wsClient.send({
@@ -1922,6 +2014,7 @@ You can also use natural language commands to control Claude Code CLI.`,
         this.notificationAdapter.unregister();
         try {
             await this.threadPool.destroyAll({ deleteData: false });
+            this.pendingApprovalCards.clear();
         }
         catch (err) {
             console.error('Error destroying thread executors:', err);