agent-relay-runner 0.127.9 → 0.127.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-relay-runner",
-  "version": "0.127.9",
+  "version": "0.127.10",
   "description": "Unified provider lifecycle runner for Agent Relay",
   "type": "module",
   "bin": {
@@ -23,7 +23,7 @@
   },
   "dependencies": {
     "agent-relay-providers": "0.104.4",
-    "agent-relay-sdk": "0.2.122",
+    "agent-relay-sdk": "0.2.123",
     "callmux": "0.23.0"
   },
   "devDependencies": {

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-relay-runner",
   "description": "Thin Agent Relay runner bridge for Claude Code",
-  "version": "0.127.9",
+  "version": "0.127.10",
   "agentRelayContracts": {
     "providerPluginProtocol": 1
   }

package/src/control-server.ts

@@ -323,34 +323,19 @@ async function handlePermissionRequest(
   const toolInput = isRecord(body.tool_input) ? body.tool_input : undefined;
   const approvalId = crypto.randomUUID();
 
-  // #1173: a PreToolUse "questions" prompt (the provider's AskUserQuestion) used to block this hook
-  // response for up to ~15 minutes waiting on the human — which meant the turn's reasoning that
-  // led to the question stayed buffered in the provider's process (never flushed to the transcript
-  // JSONL) for exactly as long as the human took to answer, so the dashboard could only ever
-  // show the question AFTER the reasoning that motivated it. Denying the tool call immediately
-  // is the ordinary, already-supported "rejected tool call" hook contract: the provider persists the
-  // buffered turn + a rejected tool_result right away, on its own, same as any other denied tool
-  // — so the settle-poll harvest below (previously doomed to time out for this one case) now
-  // finds the freshly-flushed anchor within moments. The human's eventual answer is delivered
-  // afterward as a normal injected prompt (see the `.then` below), not as this hook's response.
   const probeView = handler.buildView(approvalId, body, true);
-  if (body.hook_event_name === "PreToolUse" && probeView.kind === "questions" && handler.buildAnswerInjectionPrompt) {
-    const response = Response.json(handler.buildHookResponse(
-      { approvalId, decision: "deny", reason: PENDING_QUESTION_DENY_REASON },
-      body,
-    ));
-    void awaitPermissionDecision({
+  const answerInput = permissionRequestQuestionAnswers(body);
+  if (body.hook_event_name === "PermissionRequest" && probeView.kind === "questions" && answerInput) {
+    return Response.json(handler.buildHookResponse({ approvalId, decision: "answer", answers: answerInput }, body));
+  }
+  if (
+    (body.hook_event_name === "PreToolUse" || body.hook_event_name === "PermissionRequest")
+    && probeView.kind === "questions"
+    && handler.buildAnswerInjectionPrompt
+  ) {
+    return holdQuestionWithImmediateDeny({
       options, pendingPermissionRequests, handler, approvalId, body, occurredAt, transcriptPath, toolName, toolInput,
-      blockedReason: "pendingQuestion",
-      recommendedAction: "Answer the question in Agent Relay.",
-      suppressResolvedStatus: true,
-    }).then(({ decision, view }) => {
-      const text = decision.decision === "answer" && decision.answers && Object.keys(decision.answers).length
-        ? handler.buildAnswerInjectionPrompt!(view, decision, body)
-        : pendingQuestionDismissalPrompt(decision);
-      return options.onAnswerInject?.({ approvalId, text });
-    }).catch(() => {});
-    return response;
+    });
   }
 
   const { decision } = await awaitPermissionDecision({
@@ -361,6 +346,51 @@ async function handlePermissionRequest(
   return Response.json(handler.buildHookResponse(decision, body));
 }
 
+function permissionRequestQuestionAnswers(body: Record<string, unknown>): Record<string, string> | undefined {
+  if (body.hook_event_name !== "PermissionRequest") return undefined;
+  const toolInput = isRecord(body.tool_input) ? body.tool_input : {};
+  if (!isRecord(toolInput.answers)) return undefined;
+  const answers = Object.fromEntries(
+    Object.entries(toolInput.answers)
+      .filter((entry): entry is [string, string] => typeof entry[1] === "string" && entry[1].trim().length > 0),
+  );
+  return Object.keys(answers).length ? answers : undefined;
+}
+
+function holdQuestionWithImmediateDeny(params: {
+  options: ControlServerOptions;
+  pendingPermissionRequests: Map<string, PendingPermissionWaiter>;
+  handler: ProviderPermissionPromptHandler;
+  approvalId: string;
+  body: Record<string, unknown>;
+  occurredAt: number;
+  transcriptPath: string;
+  toolName?: string;
+  toolInput?: unknown;
+}): Response {
+  const { options, pendingPermissionRequests, handler, approvalId, body, occurredAt, transcriptPath, toolName, toolInput } = params;
+  // #1173/#1194: a fresh "questions" prompt (the provider's AskUserQuestion) must not block
+  // its own hook response while the human answers. Denying immediately makes the provider persist
+  // the buffered turn plus rejected tool_result, so the pre-flush harvest below can publish the
+  // reasoning before the dashboard form appears. The eventual answer is injected as a normal prompt.
+  const response = Response.json(handler.buildHookResponse(
+    { approvalId, decision: "deny", reason: PENDING_QUESTION_DENY_REASON },
+    body,
+  ));
+  void awaitPermissionDecision({
+    options, pendingPermissionRequests, handler, approvalId, body, occurredAt, transcriptPath, toolName, toolInput,
+    blockedReason: "pendingQuestion",
+    recommendedAction: "Answer the question in Agent Relay.",
+    suppressResolvedStatus: true,
+  }).then(({ decision, view }) => {
+    const text = decision.decision === "answer" && decision.answers && Object.keys(decision.answers).length
+      ? handler.buildAnswerInjectionPrompt!(view, decision, body)
+      : pendingQuestionDismissalPrompt(decision);
+    return options.onAnswerInject?.({ approvalId, text });
+  }).catch(() => {});
+  return response;
+}
+
 // Shared by both the traditional block-until-decided flow and the #1173 deny-then-hold flow:
 // pre-flushes narrative (#435/#1116), builds+persists the interactive view, publishes the
 // blocked providerState, and resolves once a decision arrives (or the wait times out). Callers