airlock-bot 0.2.36 → 0.2.38

package/dist/configure-web/cli.js

@@ -1,4 +1,6 @@
+import { randomBytes } from 'crypto';
 import { existsSync, readFileSync, writeFileSync, copyFileSync } from 'fs';
+import { isIP } from 'net';
 import { parseArgs } from 'util';
 import Fastify from 'fastify';
 import { parse as parseYaml, stringify as stringifyYaml } from 'yaml';
@@ -7,8 +9,10 @@ import { buildAdapters } from '../backend/factory.js';
 import { AuditConfig, GatewayConfig, McpServerConfig, ProviderConfig, getMcpConfigs, } from '../config/schema.js';
 import { rememberAllow } from '../config/mutator.js';
 import { validateConfig } from '../config/loader.js';
+import { applyProfiles } from '../config/profiles.js';
 import { ClientPool } from '../pool/pool.js';
 import { checkSuspiciousPatterns } from '../registry/sanitizer.js';
+import { bestSpecificity } from '../allowlist/pattern.js';
 import { VERSION } from '../version.js';
 const LATEST_VERSION_CACHE_TTL_MS = 60 * 60 * 1000;
 let latestVersionCache = null;
@@ -22,6 +26,8 @@ Options:
   -c, --config <path>   Airlock config file (default: ./airlock.yaml)
   -p, --port <port>     Web UI port (default: 4177)
       --host <host>     Bind host (default: 127.0.0.1)
+      --insecure-remote-bind
+                         Allow binding the unauthenticated UI beyond loopback
   -h, --help            Show this help
 `;
 const RUN_HELP = `
@@ -34,6 +40,8 @@ Options:
   -c, --config <path>   Airlock config file (default: ./airlock.yaml)
   -p, --port <port>     Web UI port (default: 4177)
       --host <host>     Bind host (default: 127.0.0.1)
+      --insecure-remote-bind
+                         Allow binding the unauthenticated UI beyond loopback
   -h, --help            Show this help
 `;
 const DASHBOARD_HELP = `
@@ -46,7 +54,8 @@ Options:
   -c, --config <path>             Airlock config file (default: ./airlock.yaml)
   -p, --port <port>               Web UI port (default: 4177)
       --host <host>               Bind host (default: 127.0.0.1)
-      --gateway-url <url>         Gateway URL (default: http://127.0.0.1:4111)
+      --insecure-remote-bind      Allow binding the unauthenticated dashboard beyond loopback
+      --gateway-url <url>         Gateway management API URL (default: http://127.0.0.1:4113)
       --gateway-secret <secret>   Gateway admin bearer token (default: AIRLOCK_GATEWAY_SECRET or AIRLOCK_API_SECRET)
   -h, --help                      Show this help
 `;
@@ -60,8 +69,9 @@ export async function runDashboard(argv) {
             config: { type: 'string', short: 'c', default: './airlock.yaml' },
             port: { type: 'string', short: 'p', default: '4177' },
             host: { type: 'string', default: '127.0.0.1' },
-            'gateway-url': { type: 'string', default: 'http://127.0.0.1:4111' },
+            'gateway-url': { type: 'string', default: 'http://127.0.0.1:4113' },
             'gateway-secret': { type: 'string' },
+            'insecure-remote-bind': { type: 'boolean', default: false },
             help: { type: 'boolean', short: 'h', default: false },
         },
         allowPositionals: false,
@@ -73,11 +83,14 @@ export async function runDashboard(argv) {
     const configPath = values.config ?? './airlock.yaml';
     const port = Number(values.port ?? '4177');
     const host = values.host ?? '127.0.0.1';
-    const gatewayUrl = values['gateway-url'] ?? 'http://127.0.0.1:4111';
-    const gatewaySecret = values['gateway-secret'] ?? process.env['AIRLOCK_GATEWAY_SECRET'] ?? process.env['AIRLOCK_API_SECRET'];
+    const gatewayUrl = values['gateway-url'] ?? 'http://127.0.0.1:4113';
+    const gatewaySecret = values['gateway-secret'] ??
+        process.env['AIRLOCK_GATEWAY_SECRET'] ??
+        process.env['AIRLOCK_API_SECRET'];
     if (!Number.isInteger(port) || port < 1 || port > 65535) {
         throw new Error(`Invalid --port: ${values.port}`);
     }
+    assertSafeWebBindHost(host, values['insecure-remote-bind'] === true);
     const app = createConfigureWebApp(configPath, {
         remoteGateway: { url: gatewayUrl, secret: gatewaySecret },
     });
@@ -93,6 +106,7 @@ export async function runConfigureWeb(argv, entrypoint = 'configure-web') {
             config: { type: 'string', short: 'c', default: './airlock.yaml' },
             port: { type: 'string', short: 'p', default: '4177' },
             host: { type: 'string', default: '127.0.0.1' },
+            'insecure-remote-bind': { type: 'boolean', default: false },
             help: { type: 'boolean', short: 'h', default: false },
         },
         allowPositionals: false,
@@ -107,11 +121,28 @@ export async function runConfigureWeb(argv, entrypoint = 'configure-web') {
     if (!Number.isInteger(port) || port < 1 || port > 65535) {
         throw new Error(`Invalid --port: ${values.port}`);
     }
+    assertSafeWebBindHost(host, values['insecure-remote-bind'] === true);
     const app = createConfigureWebApp(configPath);
     await app.listen({ host, port });
     console.log(`Airlock command center running at http://${host}:${port}`);
     console.log(`Editing ${configPath}`);
 }
+export function assertSafeWebBindHost(host, insecureRemoteBind) {
+    if (insecureRemoteBind || isLoopbackBindHost(host))
+        return;
+    throw new Error('--host binds the unauthenticated Airlock web UI beyond loopback. Use --insecure-remote-bind only when the port is protected by a private network, tunnel, or authenticated reverse proxy.');
+}
+function isLoopbackBindHost(host) {
+    const normalized = host.startsWith('[') && host.endsWith(']') ? host.slice(1, -1) : host;
+    if (normalized === 'localhost')
+        return true;
+    const ipVersion = isIP(normalized);
+    if (ipVersion === 6)
+        return normalized === '::1';
+    if (ipVersion !== 4)
+        return false;
+    return Number(normalized.split('.')[0]) === 127;
+}
 export function createConfigureWebApp(configPath, options = {}) {
     const app = Fastify({ logger: false });
     app.get('/', async (_request, reply) => {
@@ -147,6 +178,18 @@ export function createConfigureWebApp(configPath, options = {}) {
             };
         }
     });
+    app.get('/api/activity', async (_request, reply) => {
+        try {
+            if (options.remoteGateway) {
+                return await remoteGatewayJson(options.remoteGateway, '/activity');
+            }
+            return { events: [] };
+        }
+        catch (err) {
+            reply.code(500);
+            return { events: [], error: err instanceof Error ? err.message : String(err) };
+        }
+    });
     app.get('/api/tools', async (_request, reply) => {
         try {
             if (options.remoteGateway) {
@@ -362,7 +405,7 @@ async function readRemoteCommandCenterStatus(configPath, remoteGateway) {
             id,
             type,
             enabled,
-            status: enabled ? runtime ?? 'ok' : 'disabled',
+            status: enabled ? (runtime ?? 'ok') : 'disabled',
             toolCount: 0,
             toolFingerprint: '',
             ...(runtime === 'down' ? { error: 'Provider is down on the gateway' } : {}),
@@ -430,10 +473,11 @@ function registerRemoteGatewayRoutes(app, configPath, remoteGateway) {
             const reader = response.body.getReader();
             try {
                 while (true) {
-                    const { done, value } = await reader.read();
-                    if (done)
+                    const result = await reader.read();
+                    if (result.done)
                         break;
-                    reply.raw.write(Buffer.from(value));
+                    if (result.value)
+                        reply.raw.write(Buffer.from(result.value));
                 }
             }
             catch {
@@ -477,7 +521,7 @@ async function rememberRemoteDecision(configPath, remoteGateway, code, remember,
         return { status: 400, error: 'Invalid remember mode' };
     }
     const pending = await remoteGatewayJson(remoteGateway, '/hitl/pending');
-    const request = pending.find((entry) => entry.code === code || entry.id === code);
+    const request = pending.find((entry) => entry.code === code);
     if (!request)
         return { status: 404, error: 'No pending request found for code' };
     const durationMs = typeof durationMsValue === 'string' && durationMsValue.trim()
@@ -504,7 +548,8 @@ async function rememberRemoteDecision(configPath, remoteGateway, code, remember,
     }
 }
 async function forwardRemoteApproval(remoteGateway, action, code) {
-    const response = await remoteGatewayFetch(remoteGateway, `/${action}?${new URLSearchParams({ code })}`, {
+    const params = new URLSearchParams({ code });
+    const response = await remoteGatewayFetch(remoteGateway, `/${action}?${params.toString()}`, {
         method: 'POST',
     });
     if (!response.ok)
@@ -564,6 +609,7 @@ export function saveRules(configPath, body) {
         existing.deny = parseStringArray(body.deny, 'deny');
     }
     else {
+        existing.extends = parseStringArray(body.extends, 'extends');
         existing.allow = parseStringArray(body.allow, 'allow');
         existing.ask = parseStringArray(body.ask, 'ask');
         existing.deny = parseStringArray(body.deny, 'deny');
@@ -584,15 +630,32 @@ export function createEntity(configPath, body) {
     const section = asMutableRecord(doc[sectionName]);
     if (section[id])
         throw new Error(`${kind} "${id}" already exists`);
-    if (body.baseId && section[body.baseId]) {
-        section[id] = structuredClone(section[body.baseId]);
+    const baseId = parseOptionalId(body.baseId);
+    const base = baseId && section[baseId] ? structuredClone(section[baseId]) : undefined;
+    const createdToken = kind === 'agent' ? createAgentToken() : undefined;
+    if (kind === 'agent') {
+        const agent = asMutableRecord(base);
+        const profileIds = parseOptionalStringArray(body.profileIds, 'profileIds');
+        delete agent.token;
+        agent.extends = profileIds ?? stringArray(agent.extends);
+        agent.allow = stringArray(agent.allow);
+        agent.ask = stringArray(agent.ask);
+        agent.deny = stringArray(agent.deny);
+        agent.token = createdToken;
+        section[id] = agent;
+    }
+    else if (base) {
+        section[id] = structuredClone(base);
     }
     else {
-        section[id] = { allow: [], ask: [], deny: [] };
+        section[id] = { extends: [], allow: [], ask: [], deny: [] };
     }
     doc[sectionName] = section;
     writeValidatedConfig(configPath, doc);
-    return readState(configPath);
+    return {
+        ...readState(configPath),
+        ...(createdToken ? { createdToken: { agentId: id, token: createdToken } } : {}),
+    };
 }
 export function deleteEntity(configPath, kind, id) {
     const parsedKind = parseKind(kind);
@@ -685,6 +748,44 @@ export function annotationTags(annotations, suspiciousPatterns = []) {
         tags.push('injection');
     return tags;
 }
+export function resolveEditableRuleDecision(rules, toolName) {
+    return resolveEditableRuleMatch(rules, toolName).decision;
+}
+export function resolveEditableRuleMatch(rules, toolName) {
+    const deny = bestRuleMatch(rules.deny, toolName);
+    const ask = bestRuleMatch(rules.ask, toolName);
+    const allow = bestRuleMatch(rules.allow, toolName);
+    const denySpec = deny?.specificity ?? -1;
+    const askSpec = ask?.specificity ?? -1;
+    const allowSpec = allow?.specificity ?? -1;
+    const best = Math.max(denySpec, askSpec, allowSpec);
+    if (best < 0)
+        return { decision: 'unset', source: 'none' };
+    if (denySpec === best)
+        return editableRuleMatch('deny', deny, toolName);
+    if (askSpec === best)
+        return editableRuleMatch('ask', ask, toolName);
+    return editableRuleMatch('allow', allow, toolName);
+}
+function editableRuleMatch(decision, match, toolName) {
+    if (!match)
+        return { decision, source: 'none' };
+    return {
+        decision,
+        source: match.pattern === toolName ? 'exact' : 'pattern',
+        pattern: match.pattern,
+    };
+}
+function bestRuleMatch(patterns, toolName) {
+    let best;
+    for (const pattern of patterns) {
+        const specificity = bestSpecificity([pattern], toolName);
+        if (specificity >= 0 && (!best || specificity > best.specificity)) {
+            best = { pattern, specificity };
+        }
+    }
+    return best;
+}
 export async function discoverTools(configPath) {
     const raw = readConfigObject(configPath);
     const parsed = GatewayConfig.parse(withoutDisabledProviders(raw));
@@ -820,6 +921,7 @@ function parseGatewayConfig(doc) {
                 ],
             };
         }
+        applyProfiles(result.data);
         return { config: result.data, diagnostics: validateConfig(result.data) };
     }
     catch (err) {
@@ -838,6 +940,7 @@ function toEditableAgents(input) {
                 allow: stringArray(agent.allow),
                 ask: stringArray(agent.ask),
                 deny: stringArray(agent.deny),
+                hasToken: typeof agent.token === 'string' && agent.token.trim().length > 0,
             },
         ];
     }));
@@ -868,6 +971,7 @@ function toEditableProfiles(input) {
         return [
             id,
             {
+                extends: stringArray(profile.extends),
                 allow: stringArray(profile.allow),
                 ask: stringArray(profile.ask),
                 deny: stringArray(profile.deny),
@@ -895,6 +999,14 @@ function parseId(value) {
     }
     return id;
 }
+function parseOptionalId(value) {
+    if (value === undefined || value === null || value === '')
+        return undefined;
+    return parseId(value);
+}
+function createAgentToken() {
+    return `airlock_agent_${randomBytes(32).toString('base64url')}`;
+}
 function parseBoolean(value) {
     if (typeof value === 'boolean')
         return value;
@@ -1236,6 +1348,17 @@ const INDEX_HTML = `<!doctype html>
       border-color: #f1d99a;
       background: #fffaf0;
     }
+    .log-row.question {
+      border-color: #c8d7ef;
+      background: #f3f7ff;
+    }
+    .log-row.notification {
+      border-color: #c8d7ef;
+      background: #f7fbff;
+    }
+    .log-row.log {
+      background: #fbfcfe;
+    }
     .log-cell {
       min-width: 0;
       overflow-wrap: anywhere;
@@ -1479,6 +1602,25 @@ const INDEX_HTML = `<!doctype html>
       color: var(--red);
       font-weight: 700;
     }
+    .rule-actions button.active.pattern-match {
+      border-style: dashed;
+      font-weight: 650;
+    }
+    .rule-actions button.active.pattern-match[data-decision="allow"] {
+      border-color: #b8dfca;
+      background: #f6fbf8;
+      color: #4d7f63;
+    }
+    .rule-actions button.active.pattern-match[data-decision="ask"] {
+      border-color: #f1d99a;
+      background: #fffaf0;
+      color: #8a6a19;
+    }
+    .rule-actions button.active.pattern-match[data-decision="deny"] {
+      border-color: #f2c0bb;
+      background: #fff8f7;
+      color: #9b4a43;
+    }
     .pill {
       display: inline-flex;
       align-items: center;
@@ -1571,6 +1713,43 @@ const INDEX_HTML = `<!doctype html>
       overflow: auto;
       padding: 14px;
     }
+    .form-grid {
+      display: grid;
+      gap: 12px;
+    }
+    .field {
+      display: grid;
+      gap: 6px;
+    }
+    .field label {
+      color: var(--muted);
+      font-size: 12px;
+      font-weight: 700;
+      text-transform: uppercase;
+      letter-spacing: 0.08em;
+    }
+    .field input, .field select {
+      min-height: 36px;
+      min-width: 0;
+      border: 1px solid var(--line);
+      border-radius: 7px;
+      padding: 0 10px;
+      background: #fff;
+      color: var(--ink);
+    }
+    .profile-select-list {
+      display: grid;
+      gap: 6px;
+      padding: 8px;
+      border: 1px solid var(--line);
+      border-radius: 7px;
+      background: #fbfcfe;
+    }
+    .token-value {
+      width: 100%;
+      font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+      font-size: 12px;
+    }
     .modal-title {
       min-width: 0;
       overflow-wrap: anywhere;
@@ -1725,13 +1904,27 @@ const INDEX_HTML = `<!doctype html>
       <div id="approvalModalFooter" class="modal-footer"></div>
     </div>
   </div>
+  <div id="entityModal" class="modal-backdrop">
+    <div class="modal" role="dialog" aria-modal="true" aria-labelledby="entityModalTitle">
+      <div class="modal-header">
+        <div>
+          <div id="entityModalTitle" class="modal-title"></div>
+          <div id="entityModalMeta" class="subtle"></div>
+        </div>
+        <button id="entityModalClose" title="Close">Close</button>
+      </div>
+      <div id="entityModalBody" class="modal-body"></div>
+      <div id="entityModalFooter" class="modal-footer"></div>
+    </div>
+  </div>
   <script>
     const state = {
       config: null,
       status: null,
       audit: { dbPath: '', entries: [], pending: [] },
-      livePending: {},
-      currentApprovalCode: '',
+      activityEvents: [],
+      livePendingById: {},
+      currentApprovalId: '',
       activityAgentId: '',
       auditFilters: { agent: '', tool: '', since: '', limit: '50' },
       tools: [],
@@ -1739,6 +1932,7 @@ const INDEX_HTML = `<!doctype html>
       errors: [],
       activeKind: 'agent',
       activeId: '',
+      createKind: '',
       drafts: {},
       descriptionExpanded: {},
       search: '',
@@ -1815,7 +2009,13 @@ const INDEX_HTML = `<!doctype html>
         for (const [key, value] of Object.entries(state.auditFilters)) {
           if (String(value || '').trim()) params.set(key, String(value).trim());
         }
-        state.audit = await api('/api/logs' + (params.toString() ? '?' + params.toString() : ''));
+        const [audit, activity] = await Promise.all([
+          api('/api/logs' + (params.toString() ? '?' + params.toString() : '')),
+          api('/api/activity')
+        ]);
+        state.audit = audit;
+        state.activityEvents = Array.isArray(activity.events) ? activity.events : [];
+        reconcileLivePendingWithSnapshot();
         render();
       } catch (error) {
         alert(error.message);
@@ -1902,26 +2102,41 @@ const INDEX_HTML = `<!doctype html>
     }
 
     function pendingApprovals(agentId = '') {
-      const byCode = new Map();
-      for (const request of Object.values(state.livePending || {})) {
-        const pending = normalizePending(request, true);
-        if (pending.code && (!agentId || pending.agentId === agentId)) byCode.set(pending.code, pending);
-      }
+      const byId = new Map();
       for (const request of state.audit.pending || []) {
         const pending = normalizePending(request, false);
-        if (pending.code && (!agentId || pending.agentId === agentId) && !byCode.has(pending.code)) byCode.set(pending.code, pending);
+        if (pending.id && (!agentId || pending.agentId === agentId)) byId.set(pending.id, pending);
+      }
+      for (const request of Object.values(state.livePendingById || {})) {
+        const pending = normalizePending(request, true);
+        if (pending.id && (!agentId || pending.agentId === agentId) && !byId.has(pending.id)) {
+          byId.set(pending.id, pending);
+        }
+      }
+      return Array.from(byId.values());
+    }
+
+    function reconcileLivePendingWithSnapshot() {
+      const snapshotIds = new Set(
+        (state.audit.pending || [])
+          .map((request) => normalizePending(request, false).id)
+          .filter(Boolean)
+      );
+      for (const id of Object.keys(state.livePendingById || {})) {
+        if (!snapshotIds.has(id)) delete state.livePendingById[id];
       }
-      return Array.from(byCode.values());
     }
 
     function normalizePending(request, live) {
       const args = live ? request.args : parseArgs(request.args);
+      const context = request.context || airlockContext(args);
       return {
         id: request.id || '',
         code: request.code || '',
         agentId: request.agentId || request.agent_id || '',
         tool: request.tool || '',
-        args,
+        args: stripAirlockContext(args),
+        context,
         status: request.status || 'pending',
         createdAt: request.createdAt || request.created_at || '',
         timeoutMs: request.timeoutMs || 0,
@@ -1940,19 +2155,37 @@ const INDEX_HTML = `<!doctype html>
       }
     }
 
+    function airlockContext(args) {
+      const raw = args && typeof args === 'object' ? args._airlock : undefined;
+      if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return undefined;
+      const context = {};
+      if (typeof raw.reason === 'string' && raw.reason.trim()) context.reason = raw.reason.trim();
+      if (typeof raw.note === 'string' && raw.note.trim()) context.note = raw.note.trim();
+      return context.reason || context.note ? context : undefined;
+    }
+
+    function stripAirlockContext(args) {
+      if (!args || typeof args !== 'object' || Array.isArray(args) || !('_airlock' in args)) return args;
+      const clean = { ...args };
+      delete clean._airlock;
+      return clean;
+    }
+
     function renderActivity() {
       el('activitySurface').hidden = state.activeKind !== 'activity';
       renderActivityAgentFilter();
       const agentId = state.auditFilters.agent || state.activityAgentId || '';
       const pending = pendingApprovals(agentId);
       const entries = state.audit.entries || [];
+      const activity = activityEvents(agentId);
       const rows = [
         ...pending.map(pendingRow),
+        ...activity.map(activityRow),
         ...entries.map(auditRow)
       ];
       el('pendingBadge').textContent = 'pending ' + pending.length;
       el('activityMeta').textContent = state.audit.dbPath
-        ? 'Audit log: ' + state.audit.dbPath + (agentId ? ' · agent ' + agentId : '')
+        ? 'Activity events ' + activity.length + ' · Audit log: ' + state.audit.dbPath + (agentId ? ' · agent ' + agentId : '')
         : 'Audit log not loaded yet';
       el('activityList').innerHTML = rows.length
         ? rows.join('')
@@ -1960,7 +2193,7 @@ const INDEX_HTML = `<!doctype html>
       document.querySelectorAll('[data-pending-row]').forEach((row) => {
         row.addEventListener('click', (event) => {
           if (event.target.closest('[data-approval-action]')) return;
-          openApprovalModal(row.dataset.code);
+          openApprovalModal(row.dataset.id);
         });
       });
       document.querySelectorAll('[data-approval-action]').forEach((button) => {
@@ -1976,6 +2209,10 @@ const INDEX_HTML = `<!doctype html>
       });
     }
 
+    function activityEvents(agentId = '') {
+      return (state.activityEvents || []).filter((event) => !agentId || event.agentId === agentId);
+    }
+
     function renderActivityAgentFilter() {
       const agents = Object.keys(state.config.agents);
       if (!state.activityAgentId) state.activityAgentId = agents[0] || '';
@@ -1987,25 +2224,29 @@ const INDEX_HTML = `<!doctype html>
     }
 
     function pendingRow(entry) {
-      return '<div class="log-row pending" data-pending-row data-code="' + escapeHtml(entry.code) + '">' +
-        '<div class="log-cell"><strong>pending approval</strong><br>' + escapeHtml(formatTime(entry.createdAt)) + '</div>' +
+      const question = isUserQuestion(entry);
+      return '<div class="log-row pending' + (question ? ' question' : '') + '" data-pending-row data-id="' + escapeHtml(entry.id) + '" data-code="' + escapeHtml(entry.code) + '">' +
+        '<div class="log-cell"><strong>' + escapeHtml(question ? 'pending question' : 'pending approval') + '</strong><br>' + escapeHtml(formatTime(entry.createdAt)) + '</div>' +
         '<div class="log-cell">' + escapeHtml(entry.agentId) + '</div>' +
-        '<div class="log-cell">' + escapeHtml(entry.tool) + '<br><span class="subtle">code ' + escapeHtml(entry.code) + '</span></div>' +
-        '<div class="log-cell"><span class="tag tag-warn">' + escapeHtml(entry.status) + '</span></div>' +
-        '<pre class="log-args">' + escapeHtml(prettyJson(entry.args)) + '</pre>' +
-        '<div class="approval-actions">' + approvalButtons(entry.code) + '</div>' +
+        '<div class="log-cell">' + escapeHtml(question ? questionText(entry) : entry.tool) + '<br><span class="subtle">' + escapeHtml(question ? entry.tool : 'code ' + entry.code) + '</span></div>' +
+        '<div class="log-cell"><span class="tag tag-warn">' + escapeHtml(question ? 'question' : entry.status) + '</span></div>' +
+        '<pre class="log-args">' + escapeHtml(question ? questionPreview(entry) : approvalPreview(entry)) + '</pre>' +
+        '<div class="approval-actions">' + approvalButtons(entry.code, { remember: !question, approveLabel: question ? 'Confirm' : 'Approve' }) + '</div>' +
       '</div>';
     }
 
-    function approvalButtons(code) {
-      return '<button class="approve" data-approval-action="approve" data-code="' + escapeHtml(code) + '">Approve</button>' +
-        '<button class="approve" data-approval-action="approve" data-code="' + escapeHtml(code) + '" data-remember="temporary" data-duration="3600000">Allow 1h</button>' +
-        '<button class="approve" data-approval-action="approve" data-code="' + escapeHtml(code) + '" data-remember="always">Always Allow</button>' +
+    function approvalButtons(code, options = {}) {
+      const approveLabel = options.approveLabel || 'Approve';
+      const remember = options.remember !== false;
+      return '<button class="approve" data-approval-action="approve" data-code="' + escapeHtml(code) + '">' + escapeHtml(approveLabel) + '</button>' +
+        (remember ? '<button class="approve" data-approval-action="approve" data-code="' + escapeHtml(code) + '" data-remember="temporary" data-duration="3600000">Allow 1h</button>' : '') +
+        (remember ? '<button class="approve" data-approval-action="approve" data-code="' + escapeHtml(code) + '" data-remember="always">Always Allow</button>' : '') +
         '<button class="deny" data-approval-action="deny" data-code="' + escapeHtml(code) + '">Deny</button>';
     }
 
     async function actApproval(action, code, remember, durationMs) {
       if (!code) return;
+      const pending = findPendingApproval(code);
       const params = new URLSearchParams({ code });
       if (remember) params.set('remember', remember);
       if (durationMs) params.set('duration_ms', durationMs);
@@ -2020,7 +2261,7 @@ const INDEX_HTML = `<!doctype html>
         }
         throw new Error(message);
       }
-      delete state.livePending[code];
+      if (pending?.id) delete state.livePendingById[pending.id];
       closeApprovalModal();
       await Promise.all([refreshLogs(), refreshStatus()]);
       render();
@@ -2028,21 +2269,26 @@ const INDEX_HTML = `<!doctype html>
 
     function findPendingApproval(code) {
       const agentId = state.activeKind === 'activity' ? state.auditFilters.agent || '' : '';
-      return pendingApprovals(agentId).find((entry) => entry.code === code);
+      return pendingApprovals(agentId).find((entry) => entry.id === code || entry.code === code);
     }
 
-    function openApprovalModal(code) {
-      const pending = findPendingApproval(code);
+    function openApprovalModal(id) {
+      const pending = findPendingApproval(id);
       if (!pending) return;
-      state.currentApprovalCode = code;
-      el('approvalModalTitle').textContent = pending.tool;
+      state.currentApprovalId = pending.id;
+      const question = isUserQuestion(pending);
+      el('approvalModalTitle').textContent = question ? questionText(pending) : pending.tool;
       el('approvalModalMeta').textContent = 'agent ' + pending.agentId + ' · code ' + pending.code;
       el('approvalModalBody').innerHTML =
         '<div class="detail-label">Status</div><div>' + escapeHtml(pending.status) + '</div>' +
         '<div class="detail-label">Created</div><div>' + escapeHtml(formatTime(pending.createdAt)) + '</div>' +
         (pending.timeoutMs ? '<div class="detail-label">Timeout</div><div>' + Math.round(pending.timeoutMs / 1000) + 's</div>' : '') +
+        (requestReason(pending) ? '<div class="detail-label">Request reason</div><div>' + escapeHtml(requestReason(pending)) + '</div>' : '') +
+        (requestNote(pending) ? '<div class="detail-label">Request note</div><div>' + escapeHtml(requestNote(pending)) + '</div>' : '') +
+        (question ? '<div class="detail-label">Question</div><div>' + escapeHtml(questionText(pending)) + '</div>' : '') +
+        (question && questionContext(pending) ? '<div class="detail-label">Context</div><div>' + escapeHtml(questionContext(pending)) + '</div>' : '') +
         '<div class="detail-label">Arguments</div><pre class="log-args">' + escapeHtml(prettyJson(pending.args)) + '</pre>';
-      el('approvalModalFooter').innerHTML = approvalButtons(pending.code);
+      el('approvalModalFooter').innerHTML = approvalButtons(pending.code, { remember: !question, approveLabel: question ? 'Confirm' : 'Approve' });
       el('approvalModal').classList.add('open');
       el('approvalModalFooter').querySelectorAll('[data-approval-action]').forEach((button) => {
         button.addEventListener('click', () => {
@@ -2058,7 +2304,58 @@ const INDEX_HTML = `<!doctype html>
 
     function closeApprovalModal() {
       el('approvalModal').classList.remove('open');
-      state.currentApprovalCode = '';
+      state.currentApprovalId = '';
+    }
+
+    function isUserQuestion(entry) {
+      return entry.tool === 'airlock/ask_user';
+    }
+
+    function questionText(entry) {
+      const value = entry.args?.question ?? entry.args?.title ?? entry.args?.message;
+      return typeof value === 'string' && value.trim() ? value.trim() : 'Question from agent';
+    }
+
+    function questionContext(entry) {
+      const value = entry.args?.context ?? entry.args?.reason;
+      return typeof value === 'string' && value.trim() ? value.trim() : '';
+    }
+
+    function questionPreview(entry) {
+      const lines = ['question: ' + questionText(entry)];
+      const context = questionContext(entry);
+      if (context) lines.push('context: ' + context);
+      return lines.join('\\n');
+    }
+
+    function requestReason(entry) {
+      const value = entry.context?.reason;
+      return typeof value === 'string' && value.trim() ? value.trim() : '';
+    }
+
+    function requestNote(entry) {
+      const value = entry.context?.note;
+      return typeof value === 'string' && value.trim() ? value.trim() : '';
+    }
+
+    function approvalPreview(entry) {
+      const lines = [];
+      const reason = requestReason(entry);
+      const note = requestNote(entry);
+      if (reason) lines.push('request reason: ' + reason);
+      if (note) lines.push('request note: ' + note);
+      lines.push(prettyJson(entry.args));
+      return lines.join('\\n');
+    }
+
+    function activityRow(event) {
+      const tag = event.kind === 'notification' ? 'tag-warn' : resultTagClass(event.severity || 'info');
+      return '<div class="log-row ' + escapeHtml(event.kind) + '">' +
+        '<div class="log-cell"><strong>' + escapeHtml(event.kind) + '</strong><br>' + escapeHtml(formatTime(event.createdAt)) + '</div>' +
+        '<div class="log-cell">' + escapeHtml(event.agentId || '') + '</div>' +
+        '<div class="log-cell">' + escapeHtml(event.title || '') + '<br><span class="subtle">' + escapeHtml(event.body || '') + '</span></div>' +
+        '<div class="log-cell"><span class="tag ' + tag + '">' + escapeHtml(event.severity || 'info') + '</span></div>' +
+      '</div>';
     }
 
     function auditRow(entry) {
@@ -2208,7 +2505,8 @@ const INDEX_HTML = `<!doctype html>
       el('addProvider').style.display = state.activeKind === 'providers' ? 'inline-flex' : 'none';
       el('deleteEntity').style.display = state.activeKind === 'activity' ? 'none' : el('deleteEntity').style.display;
       el('deleteEntity').disabled = !state.activeId || state.activeKind === 'activity';
-      el('profilePanel').style.display = state.activeKind === 'agent' ? 'block' : 'none';
+      el('profilePanel').style.display =
+        state.activeKind === 'agent' || state.activeKind === 'profile' ? 'block' : 'none';
 
       if (!draft) {
         if (state.activeKind === 'providers') {
@@ -2236,12 +2534,18 @@ const INDEX_HTML = `<!doctype html>
       }
 
       const denyCount = draft.deny.length;
+      const tokenPill = state.activeKind === 'agent'
+        ? '<span class="pill ' + (state.config.agents[state.activeId]?.hasToken ? 'tag-good' : 'tag-danger') + '">' + (state.config.agents[state.activeId]?.hasToken ? 'token set' : 'token missing') + '</span>'
+        : '';
       el('summary').innerHTML =
         '<span class="pill">allow ' + draft.allow.length + '</span>' +
         '<span class="pill">ask ' + draft.ask.length + '</span>' +
-        '<span class="pill">deny ' + denyCount + '</span>';
+        '<span class="pill">deny ' + denyCount + '</span>' +
+        tokenPill;
 
-      const profiles = Object.keys(state.config.profiles);
+      const profiles = Object.keys(state.config.profiles).filter(
+        (id) => state.activeKind !== 'profile' || id !== state.activeId
+      );
       el('profileChecks').innerHTML = profiles.length
         ? profiles.map((id) => {
             const checked = (draft.extends || []).includes(id) ? ' checked' : '';
@@ -2292,7 +2596,7 @@ const INDEX_HTML = `<!doctype html>
 
       const visible = filteredTools();
       el('tools').innerHTML = visible.length
-        ? visible.map((tool) => toolRow(tool, getDecision(draft, tool.name))).join('')
+        ? visible.map((tool) => toolRow(tool, getDecisionMatch(draft, tool.name))).join('')
         : '<div class="empty">No tools match the current filters.</div>';
 
       document.querySelectorAll('[data-rule]').forEach((button) => {
@@ -2321,7 +2625,8 @@ const INDEX_HTML = `<!doctype html>
       });
     }
 
-    function toolRow(tool, decision) {
+    function toolRow(tool, match) {
+      const decision = match.decision;
       const tags = tool.tags && tool.tags.length ? tool.tags : ['untagged'];
       const tagHtml = tags.map((tag) => '<span class="tag ' + tagClass(tag) + '">' + escapeHtml(tag) + '</span>').join('');
       const recommended = '<span class="tag tag-recommended ' + recommendedClass(tool.recommended) + '">recommended ' + escapeHtml(tool.recommended) + '</span>';
@@ -2336,10 +2641,10 @@ const INDEX_HTML = `<!doctype html>
         '<div class="tool-name"><span class="provider">' + escapeHtml(tool.provider) + '</span><br>' + escapeHtml(tool.shortName || tool.name) + '</div>' +
         '<div class="description"><div class="description-content' + descriptionClass + '">' + formatDescription(description) + '</div>' + toggle + '<div class="tag-list">' + tagHtml + recommended + '</div></div>' +
         '<div class="rule-actions">' +
-          ruleButton(tool.name, 'allow', decision) +
-          ruleButton(tool.name, 'ask', decision) +
-          ruleButton(tool.name, 'deny', decision) +
-          ruleButton(tool.name, 'unset', decision) +
+          ruleButton(tool.name, 'allow', match) +
+          ruleButton(tool.name, 'ask', match) +
+          ruleButton(tool.name, 'deny', match) +
+          ruleButton(tool.name, 'unset', match) +
         '</div>' +
       '</div>';
     }
@@ -2394,17 +2699,67 @@ const INDEX_HTML = `<!doctype html>
       return 'tag-good';
     }
 
-    function ruleButton(tool, decision, activeDecision) {
-      const active = decision === activeDecision ? ' active' : '';
+    function ruleButton(tool, decision, activeMatch) {
+      const active = decision === activeMatch.decision ? ' active' : '';
+      const patternMatch = active && activeMatch.source === 'pattern' ? ' pattern-match' : '';
       const label = decision === 'unset' ? 'Clear' : decision;
-      return '<button class="' + active + '" data-rule data-tool="' + escapeHtml(tool) + '" data-decision="' + decision + '">' + label + '</button>';
+      const title = activeMatch.source === 'pattern' && decision === activeMatch.decision
+        ? decision + ' by ' + activeMatch.pattern + '. Click to add an exact rule.'
+        : decision === activeMatch.decision && activeMatch.source === 'exact'
+          ? decision + ' by exact rule.'
+          : decision === 'unset'
+            ? 'Clear exact rule for this tool.'
+            : 'Set exact ' + decision + ' rule for this tool.';
+      return '<button class="' + active + patternMatch + '" title="' + escapeHtml(title) + '" data-rule data-tool="' + escapeHtml(tool) + '" data-decision="' + decision + '">' + label + '</button>';
     }
 
     function getDecision(draft, tool) {
-      if (draft.deny.includes(tool)) return 'deny';
-      if (draft.ask.includes(tool)) return 'ask';
-      if (draft.allow.includes(tool)) return 'allow';
-      return 'unset';
+      return getDecisionMatch(draft, tool).decision;
+    }
+
+    function getDecisionMatch(draft, tool) {
+      const deny = bestRuleMatch(draft.deny, tool);
+      const ask = bestRuleMatch(draft.ask, tool);
+      const allow = bestRuleMatch(draft.allow, tool);
+      const denySpec = deny ? deny.specificity : -1;
+      const askSpec = ask ? ask.specificity : -1;
+      const allowSpec = allow ? allow.specificity : -1;
+      const best = Math.max(denySpec, askSpec, allowSpec);
+      if (best < 0) return { decision: 'unset', source: 'none' };
+      if (denySpec === best) return decisionMatch('deny', deny, tool);
+      if (askSpec === best) return decisionMatch('ask', ask, tool);
+      return decisionMatch('allow', allow, tool);
+    }
+
+    function decisionMatch(decision, match, tool) {
+      if (!match) return { decision, source: 'none' };
+      return {
+        decision,
+        source: match.pattern === tool ? 'exact' : 'pattern',
+        pattern: match.pattern
+      };
+    }
+
+    function bestRuleMatch(patterns, tool) {
+      let best = null;
+      for (const pattern of patterns || []) {
+        const score = ruleSpecificity(pattern, tool);
+        if (score >= 0 && (!best || score > best.specificity)) best = { pattern, specificity: score };
+      }
+      return best;
+    }
+
+    function ruleSpecificity(pattern, tool) {
+      if (pattern === tool) return pattern.length + 1;
+      if (pattern.endsWith('/*')) {
+        const prefix = pattern.slice(0, -1);
+        return tool.startsWith(prefix) && !tool.slice(prefix.length).includes('/') ? prefix.length : -1;
+      }
+      if (pattern.endsWith('*')) {
+        const prefix = pattern.slice(0, -1);
+        return tool.startsWith(prefix) ? prefix.length : -1;
+      }
+      return -1;
     }
 
     function setDecision(draft, tool, decision) {
@@ -2473,12 +2828,104 @@ const INDEX_HTML = `<!doctype html>
       render();
     }
 
-    async function addEntity(kind) {
-      const id = prompt('New ' + kind + ' id');
-      if (!id) return;
-      state.config = await api('/api/entities', { method: 'POST', body: JSON.stringify({ kind, id }) });
+    function openCreateModal(kind) {
+      state.createKind = kind;
+      renderCreateModal();
+      el('entityModal').classList.add('open');
+      setTimeout(() => el('entityId')?.focus(), 0);
+    }
+
+    function closeEntityModal() {
+      el('entityModal').classList.remove('open');
+      state.createKind = '';
+    }
+
+    function renderCreateModal() {
+      const kind = state.createKind;
+      const isAgent = kind === 'agent';
+      const section = isAgent ? state.config.agents : state.config.profiles;
+      const baseOptions = ['<option value="">Blank</option>'].concat(
+        Object.keys(section).map((id) => '<option value="' + escapeHtml(id) + '">' + escapeHtml(id) + '</option>')
+      ).join('');
+      el('entityModalTitle').textContent = isAgent ? 'New agent' : 'New profile';
+      el('entityModalMeta').textContent = isAgent ? 'Creates a bearer token and permission policy' : 'Creates a reusable permission policy';
+      el('entityModalBody').innerHTML =
+        '<div class="form-grid">' +
+          '<div class="field"><label for="entityId">Id</label><input id="entityId" autocomplete="off" placeholder="' + (isAgent ? 'claude-code' : 'readonly') + '"></div>' +
+          '<div class="field"><label for="entityBase">Start from</label><select id="entityBase">' + baseOptions + '</select></div>' +
+          (isAgent ? profilePicker() : '') +
+        '</div>';
+      el('entityModalFooter').innerHTML =
+        '<button id="entityCreate" class="primary">Create</button>' +
+        '<button id="entityCancel">Cancel</button>';
+      el('entityCreate').addEventListener('click', () => submitCreateEntity().catch((error) => alert(error.message)));
+      el('entityCancel').addEventListener('click', closeEntityModal);
+      el('entityId').addEventListener('keydown', (event) => {
+        if (event.key === 'Enter') submitCreateEntity().catch((error) => alert(error.message));
+      });
+    }
+
+    function profilePicker() {
+      const profiles = Object.keys(state.config.profiles);
+      if (profiles.length === 0) {
+        return '<div class="field"><label>Profiles</label><div class="subtle">No profiles yet.</div></div>';
+      }
+      return '<div class="field"><label>Profiles</label><div class="profile-select-list">' +
+        profiles.map((id) => '<label class="check"><input type="checkbox" data-create-profile="' + escapeHtml(id) + '"> ' + escapeHtml(id) + '</label>').join('') +
+        '</div></div>';
+    }
+
+    async function submitCreateEntity() {
+      const kind = state.createKind;
+      const id = el('entityId').value.trim();
+      if (!id) throw new Error('Id is required');
+      const profileIds = Array.from(document.querySelectorAll('[data-create-profile]:checked')).map((box) => box.dataset.createProfile);
+      const body = {
+        kind,
+        id,
+        baseId: el('entityBase').value,
+        profileIds
+      };
+      const result = await api('/api/entities', { method: 'POST', body: JSON.stringify(body) });
+      state.config = result;
       state.drafts = {};
-      setActive(kind, id.trim());
+      setActive(kind, id);
+      if (result.createdToken?.token) {
+        showCreatedToken(result.createdToken.agentId, result.createdToken.token);
+      } else {
+        closeEntityModal();
+      }
+    }
+
+    function showCreatedToken(agentId, token) {
+      el('entityModalTitle').textContent = 'Agent token';
+      el('entityModalMeta').textContent = agentId;
+      el('entityModalBody').innerHTML =
+        '<div class="form-grid">' +
+          '<div class="field"><label for="createdToken">Bearer token</label><input id="createdToken" class="token-value" readonly value="' + escapeHtml(token) + '"></div>' +
+          '<div class="field"><label>Header</label><input class="token-value" readonly value="Authorization: Bearer ' + escapeHtml(token) + '"></div>' +
+        '</div>';
+      el('entityModalFooter').innerHTML =
+        '<button id="copyCreatedToken" class="primary">Copy Token</button>' +
+        '<button id="copyCreatedHeader">Copy Header</button>' +
+        '<button id="entityDone">Done</button>';
+      el('copyCreatedToken').addEventListener('click', () => copyText(token));
+      el('copyCreatedHeader').addEventListener('click', () => copyText('Authorization: Bearer ' + token));
+      el('entityDone').addEventListener('click', closeEntityModal);
+      el('createdToken').select();
+    }
+
+    async function copyText(value) {
+      if (navigator.clipboard?.writeText) {
+        await navigator.clipboard.writeText(value);
+        return;
+      }
+      const textarea = document.createElement('textarea');
+      textarea.value = value;
+      document.body.appendChild(textarea);
+      textarea.select();
+      document.execCommand('copy');
+      textarea.remove();
     }
 
     async function addProvider() {
@@ -2580,17 +3027,31 @@ const INDEX_HTML = `<!doctype html>
       events.onmessage = (event) => {
         const message = JSON.parse(event.data);
         if (message.type === 'new') {
-          state.livePending[message.request.code] = message.request;
-          notifyApproval(message.request);
-          refreshLogs().catch(() => {});
-          render();
+          const request = message.request || {};
+          if (request.id) {
+            state.livePendingById[request.id] = request;
+            notifyApproval(request);
+            refreshLogs().catch(() => {});
+            render();
+          }
         }
         if (message.type === 'resolved') {
-          delete state.livePending[message.code];
+          if (message.id) {
+            delete state.livePendingById[message.id];
+          } else if (message.code) {
+            for (const [id, request] of Object.entries(state.livePendingById || {})) {
+              if (request && request.code === message.code) delete state.livePendingById[id];
+            }
+          }
           refreshLogs().catch(() => {});
           refreshStatus().catch(() => {});
           render();
         }
+        if (message.type === 'activity') {
+          upsertActivityEvent(message.event);
+          notifyActivity(message.event);
+          render();
+        }
       };
       events.onerror = () => {
         events.close();
@@ -2600,13 +3061,36 @@ const INDEX_HTML = `<!doctype html>
     function notifyApproval(request) {
       if (!el('approvalNotifs').checked) return;
       if (!('Notification' in window) || Notification.permission !== 'granted') return;
+      const pending = normalizePending(request, true);
+      const lines = ['agent: ' + pending.agentId, pending.code];
+      const reason = requestReason(pending);
+      if (reason) lines.push('request reason: ' + reason);
       new Notification('Airlock: ' + request.tool, {
-        body: 'agent: ' + request.agentId + '\\n' + request.code,
-        tag: request.code,
+        body: lines.join('\\n'),
+        tag: request.id || request.code,
         silent: !el('approvalSound').checked
       });
     }
 
+    function notifyActivity(event) {
+      if (!event || event.kind !== 'notification') return;
+      if (!el('approvalNotifs').checked) return;
+      if (!('Notification' in window) || Notification.permission !== 'granted') return;
+      new Notification(event.title || 'Airlock notification', {
+        body: event.body || '',
+        tag: event.id,
+        silent: !el('approvalSound').checked
+      });
+    }
+
+    function upsertActivityEvent(event) {
+      if (!event || !event.id) return;
+      state.activityEvents = [
+        event,
+        ...(state.activityEvents || []).filter((existing) => existing.id !== event.id)
+      ].slice(0, 200);
+    }
+
     async function checkVersion() {
       try {
         const current = await fetch('/version').then((response) => response.json());
@@ -2629,10 +3113,10 @@ const INDEX_HTML = `<!doctype html>
       return false;
     }
 
-    function firstPendingCode() {
+    function firstPendingApprovalId() {
       const agentId = state.activeKind === 'activity' ? state.auditFilters.agent || '' : '';
       const first = pendingApprovals(agentId)[0];
-      return first ? first.code : '';
+      return first ? first.id : '';
     }
 
     el('refreshTools').addEventListener('click', refreshTools);
@@ -2642,8 +3126,8 @@ const INDEX_HTML = `<!doctype html>
     el('manageProviders').addEventListener('click', () => setActive('providers'));
     el('viewActivity').addEventListener('click', () => setActive('activity'));
     el('addProvider').addEventListener('click', () => addProvider().catch((error) => alert(error.message)));
-    el('addAgent').addEventListener('click', () => addEntity('agent').catch((error) => alert(error.message)));
-    el('addProfile').addEventListener('click', () => addEntity('profile').catch((error) => alert(error.message)));
+    el('addAgent').addEventListener('click', () => openCreateModal('agent'));
+    el('addProfile').addEventListener('click', () => openCreateModal('profile'));
     el('deleteEntity').addEventListener('click', () => deleteCurrent().catch((error) => alert(error.message)));
     el('search').addEventListener('input', (event) => { state.search = event.target.value; renderTools(); });
     el('providerFilter').addEventListener('change', (event) => { state.provider = event.target.value; renderTools(); });
@@ -2669,11 +3153,16 @@ const INDEX_HTML = `<!doctype html>
     el('resetAllRules').addEventListener('click', resetAllToCurrentConfig);
     el('recommendedRules').addEventListener('click', setRecommended);
     el('approvalModalClose').addEventListener('click', closeApprovalModal);
+    el('entityModalClose').addEventListener('click', closeEntityModal);
     el('approvalModal').addEventListener('click', (event) => {
       if (event.target === el('approvalModal')) closeApprovalModal();
     });
+    el('entityModal').addEventListener('click', (event) => {
+      if (event.target === el('entityModal')) closeEntityModal();
+    });
     document.addEventListener('keydown', (event) => {
       if (event.key === 'Escape') {
+        closeEntityModal();
         closeApprovalModal();
         return;
       }
@@ -2682,9 +3171,10 @@ const INDEX_HTML = `<!doctype html>
       if (target && ['INPUT', 'TEXTAREA', 'SELECT'].includes(target.tagName)) return;
       const key = event.key.toLowerCase();
       if (key !== 'a' && key !== 'd') return;
-      const code = state.currentApprovalCode || firstPendingCode();
-      if (!code) return;
-      actApproval(key === 'a' ? 'approve' : 'deny', code).catch((error) => alert(error.message));
+      const id = state.currentApprovalId || firstPendingApprovalId();
+      const pending = findPendingApproval(id);
+      if (!pending?.code) return;
+      actApproval(key === 'a' ? 'approve' : 'deny', pending.code).catch((error) => alert(error.message));
     });
 
     initApprovalSettings();