approval-box 0.1.7 → 0.1.9

package/dist/cli.mjs

@@ -11755,9 +11755,9 @@ var require_dist = __commonJS({
 
 // src/cli.ts
 var import_qrcode = __toESM(require_lib(), 1);
-import { cpSync, existsSync as existsSync6, mkdirSync as mkdirSync4, rmSync as rmSync2 } from "node:fs";
+import { cpSync, existsSync as existsSync7, mkdirSync as mkdirSync5, rmSync as rmSync3 } from "node:fs";
 import { hostname } from "node:os";
-import { join as join6 } from "node:path";
+import { join as join7 } from "node:path";
 import { createInterface } from "node:readline/promises";
 
 // src/api.ts
@@ -11795,13 +11795,33 @@ var Api = class {
       throw new ServerError(0, "network", `Approval Box\u30B5\u30FC\u30D0\u30FC\uFF08${this.server}\uFF09\u306B\u3064\u306A\u304C\u308A\u307E\u305B\u3093: ${error.message}`, {});
     }
     const text2 = await response.text();
-    const json = text2 ? JSON.parse(text2) : {};
+    let json;
+    try {
+      json = text2 ? JSON.parse(text2) : {};
+    } catch {
+      const contentType = response.headers.get("content-type") ?? "";
+      const head = `Approval Box\u30B5\u30FC\u30D0\u30FC\u304B\u3089\u3001JSON\u3067\u306A\u3044\u5FDC\u7B54\u304C\u8FD4\u308A\u307E\u3057\u305F\uFF08HTTP ${response.status}\u3001Content-Type: ${contentType || "\u306A\u3057"}\uFF09\u3002\u524D\u6BB5\uFF08Cloudflare\u306A\u3069\uFF09\u306E\u30A8\u30E9\u30FC\u30DA\u30FC\u30B8\u3067\u3001\u30B5\u30FC\u30D0\u30FC\u304C\u4E00\u6642\u7684\u306B\u6B62\u307E\u3063\u3066\u3044\u305F\u53EF\u80FD\u6027\u304C\u3042\u308A\u307E\u3059\u3002`;
+      const tail = method === "GET" ? "\u5C11\u3057\u5F85\u3063\u3066\u304B\u3089\u3001\u540C\u3058\u64CD\u4F5C\u3092\u3084\u308A\u76F4\u3057\u3066\u304F\u3060\u3055\u3044\u3002" : "\u3053\u306E\u64CD\u4F5C\u304C\u30B5\u30FC\u30D0\u30FC\u3067\u884C\u308F\u308C\u305F\u304B\u306F\u5206\u304B\u308A\u307E\u305B\u3093\u3002\u3084\u308A\u76F4\u3059\u524D\u306B list_my_decisions \u3067\u78BA\u304B\u3081\u3066\u304F\u3060\u3055\u3044\u3002\u7533\u8ACB\u306A\u3089\u3001\u4E00\u89A7\u306B\u7121\u3051\u308C\u3070\u51FA\u3057\u76F4\u3057\u3001\u3042\u308C\u3070\u305D\u308C\u3092\u4F7F\u3063\u3066\u304F\u3060\u3055\u3044\u3002";
+      throw new ServerError(response.status, "non_json_response", `${head}${tail}`, { http_status: response.status, content_type: contentType, outcome: method === "GET" ? "not_applied" : "unknown" });
+    }
     if (!response.ok) {
       const error = json.error ?? {};
       throw new ServerError(response.status, error.code ?? "internal", error.message ?? `HTTP ${response.status}`, error);
     }
     return json;
   }
+  /** ファイルを取る（添付）。誤りはJSONの本文から読む。 */
+  async download(path) {
+    let response;
+    try {
+      response = await fetch(this.url(path), { headers: this.token ? { authorization: `Bearer ${this.token}` } : {} });
+    } catch (error) {
+      throw new ServerError(0, "network", `Approval Box\u30B5\u30FC\u30D0\u30FC\uFF08${this.server}\uFF09\u306B\u3064\u306A\u304C\u308A\u307E\u305B\u3093: ${error.message}`, {});
+    }
+    if (response.ok) return Buffer.from(await response.arrayBuffer());
+    const json = await response.json().catch(() => ({}));
+    throw new ServerError(response.status, json.error?.code ?? "internal", json.error?.message ?? `HTTP ${response.status}`, json.error ?? {});
+  }
   /** コネクタ用SSE。届いたイベント名ごとに onEvent を呼ぶ。切れたら戻る。 */
   async stream(onEvent, signal) {
     const response = await fetch(this.url("/stream"), { headers: { authorization: `Bearer ${this.token}`, accept: "text/event-stream" }, signal });
@@ -11848,23 +11868,68 @@ function writeConfig(config) {
 
 // src/daemon.ts
 import { spawn } from "node:child_process";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync2, rmSync } from "node:fs";
-import { join as join3 } from "node:path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, openSync, readFileSync as readFileSync3, rmSync as rmSync2 } from "node:fs";
+import { join as join4 } from "node:path";
+
+// src/attachments.ts
+import { createHash } from "node:crypto";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync2, rmSync, statSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join2 } from "node:path";
+var KEEP_DAYS = 30;
+var attachmentsRoot = () => join2(home(), "attachments");
+function safeFileName(name) {
+  const cleaned = name.replace(/[<>:"/\\|?*\u0000-\u001f]/g, "_").replace(/[. ]+$/, "").trim();
+  return cleaned.slice(0, 150) || "file";
+}
+async function saveAttachment(api, decisionId, meta, index) {
+  const dir = join2(attachmentsRoot(), safeFileName(decisionId));
+  const file = join2(dir, `${index + 1}_${safeFileName(meta.name)}`);
+  if (existsSync2(file) && sha256(readFileSync2(file)) === meta.sha256) return file;
+  const data = await api.download(`/decisions/${encodeURIComponent(decisionId)}/attachments/${encodeURIComponent(meta.id)}`);
+  if (sha256(data) !== meta.sha256) throw new Error(`${meta.name} \u306E\u4E2D\u8EAB\u304C\u30B5\u30FC\u30D0\u30FC\u306E\u8A18\u9332\u3068\u5408\u3044\u307E\u305B\u3093\uFF08\u53D6\u308A\u76F4\u3057\u3066\u304F\u3060\u3055\u3044\uFF09`);
+  mkdirSync2(dir, { recursive: true, mode: 448 });
+  writeFileSync2(file, data, { mode: 384 });
+  return file;
+}
+async function saveAll(api, decisionId, items) {
+  const lines = ["", "\u6DFB\u4ED8\u306F\u3053\u306E\u7AEF\u672B\u306B\u4FDD\u5B58\u3057\u307E\u3057\u305F:"];
+  for (const [i, meta] of items.entries()) {
+    try {
+      lines.push(`${i + 1}. ${await saveAttachment(api, decisionId, meta, i)}`);
+    } catch (error) {
+      lines.push(`${i + 1}. ${meta.name}: \u4FDD\u5B58\u3067\u304D\u307E\u305B\u3093\u3067\u3057\u305F\uFF08${error.message}\uFF09\u3002get_attachment \u3067\u53D6\u3063\u3066\u304F\u3060\u3055\u3044\u3002`);
+    }
+  }
+  return lines.join("\n");
+}
+function pruneAttachments() {
+  const root = attachmentsRoot();
+  if (!existsSync2(root)) return;
+  const before = Date.now() - KEEP_DAYS * 864e5;
+  for (const name of readdirSync(root)) {
+    const dir = join2(root, name);
+    try {
+      if (statSync(dir).mtimeMs < before) rmSync(dir, { recursive: true, force: true });
+    } catch {
+    }
+  }
+}
+var sha256 = (data) => createHash("sha256").update(data).digest("hex");
 
 // src/runtime.ts
-import { basename, dirname as dirname2, join as join2 } from "node:path";
+import { basename, dirname as dirname2, join as join3 } from "node:path";
 import { fileURLToPath } from "node:url";
 var runtimeDir = () => {
   const dir = dirname2(fileURLToPath(import.meta.url));
   return basename(dir) === "chunks" ? dirname2(dir) : dir;
 };
 function runtimeEntry(kind) {
-  return join2(runtimeDir(), kind === "cli" ? "cli.mjs" : HOOK_FILES[kind]);
+  return join3(runtimeDir(), kind === "cli" ? "cli.mjs" : HOOK_FILES[kind]);
 }
 
 // src/daemon.ts
-var lockFile = () => join3(stateRoot(), "daemon.json");
-var journalFile = () => join3(stateRoot(), "deliveries.json");
+var lockFile = () => join4(stateRoot(), "daemon.json");
+var journalFile = () => join4(stateRoot(), "deliveries.json");
 var IDLE_EXIT_MS = 30 * 6e4;
 function alive(pid) {
   try {
@@ -11875,9 +11940,9 @@ function alive(pid) {
   }
 }
 function daemonStatus() {
-  if (!existsSync2(lockFile())) return { running: false };
+  if (!existsSync3(lockFile())) return { running: false };
   try {
-    const lock = JSON.parse(readFileSync2(lockFile(), "utf8"));
+    const lock = JSON.parse(readFileSync3(lockFile(), "utf8"));
     return alive(lock.pid) ? { running: true, pid: lock.pid, entry: lock.entry } : { running: false };
   } catch {
     return { running: false };
@@ -11894,8 +11959,8 @@ function ensureDaemon() {
       } catch {
       }
     }
-    mkdirSync2(stateRoot(), { recursive: true, mode: 448 });
-    const log = openSync(join3(stateRoot(), "daemon.log"), "a", 384);
+    mkdirSync3(stateRoot(), { recursive: true, mode: 448 });
+    const log = openSync(join4(stateRoot(), "daemon.log"), "a", 384);
     spawn(process.execPath, [runtimeEntry("cli"), "daemon"], { detached: true, stdio: ["ignore", "ignore", log], windowsHide: true }).unref();
   } catch (error) {
     process.stderr.write(`approval-box: \u914D\u9001\u30C7\u30FC\u30E2\u30F3\u3092\u8D77\u52D5\u3067\u304D\u307E\u305B\u3093: ${error.message}
@@ -11908,7 +11973,7 @@ async function runDaemon() {
   if (status2.running && status2.pid !== process.pid) return;
   writeJsonFile(lockFile(), { pid: process.pid, entry: runtimeEntry("cli"), started_at: (/* @__PURE__ */ new Date()).toISOString() });
   const api = new Api(requireConfig());
-  let journal = existsSync2(journalFile()) ? JSON.parse(readFileSync2(journalFile(), "utf8")) : {};
+  let journal = existsSync3(journalFile()) ? JSON.parse(readFileSync3(journalFile(), "utf8")) : {};
   const save = () => writeJsonFile(journalFile(), journal);
   const log = (message) => process.stderr.write(`${(/* @__PURE__ */ new Date()).toISOString()} ${message}
 `);
@@ -11920,6 +11985,11 @@ async function runDaemon() {
     journal[id] = entry;
   }
   save();
+  try {
+    pruneAttachments();
+  } catch (error) {
+    log(`\u53E4\u3044\u6DFB\u4ED8\u306E\u7247\u4ED8\u3051\u306B\u5931\u6557: ${error.message}`);
+  }
   async function report(id) {
     const entry = journal[id];
     try {
@@ -11933,12 +12003,13 @@ async function runDaemon() {
   async function deliver(item) {
     const existing = journal[item.decision_id];
     if (existing) return;
+    const text2 = item.attachments?.length ? item.text + await saveAll(api, item.decision_id, item.attachments) : item.text;
     journal[item.decision_id] = { delivery_id: item.delivery_id, channel_id: item.route.channel_id, harness: item.route.harness, state: "sending", at: (/* @__PURE__ */ new Date()).toISOString() };
     save();
     const entry = journal[item.decision_id];
     try {
       if (channelClosed(PROFILE, item.route.channel_id)) throw Object.assign(new Error("\u7533\u8ACB\u3092\u51FA\u3057\u305FAI\u306E\u4F1A\u8A71\u304C\u7D42\u308F\u3063\u3066\u3044\u307E\u3059"), { closed: true });
-      const result = await sendToChannel(PROFILE, item.route.channel_id, item.delivery_id, item.text);
+      const result = await sendToChannel(PROFILE, item.route.channel_id, item.delivery_id, text2);
       if (result.state === "submitted") Object.assign(entry, { state: "report", result: "delivered" });
       else entry.state = "queued";
     } catch (error) {
@@ -12040,8 +12111,8 @@ async function runDaemon() {
     }
   }
   try {
-    const lock = JSON.parse(readFileSync2(lockFile(), "utf8"));
-    if (lock.pid === process.pid) rmSync(lockFile(), { force: true });
+    const lock = JSON.parse(readFileSync3(lockFile(), "utf8"));
+    if (lock.pid === process.pid) rmSync2(lockFile(), { force: true });
   } catch {
   }
   process.exit(0);
@@ -12049,12 +12120,12 @@ async function runDaemon() {
 
 // src/harness.ts
 import { execFileSync } from "node:child_process";
-import { copyFileSync, existsSync as existsSync4, readFileSync as readFileSync4, realpathSync } from "node:fs";
+import { copyFileSync, existsSync as existsSync5, readFileSync as readFileSync5, realpathSync } from "node:fs";
 import { homedir } from "node:os";
-import { delimiter, dirname as dirname4, join as join4 } from "node:path";
+import { delimiter, dirname as dirname4, join as join5 } from "node:path";
 
 // src/instructions.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "node:fs";
 import { dirname as dirname3 } from "node:path";
 var INSTRUCTION_TEXT = "\u30E6\u30FC\u30B6\u30FC\u306E\u5224\u65AD\u30FB\u627F\u8A8D\u30FB\u64CD\u4F5C\u304C\u5FC5\u8981\u306A\u3068\u304D\u306F\u3001\u6C7A\u88C1\u30B7\u30B9\u30C6\u30E0\u3067\u3042\u308B Approval Box \u306E request_decision \u3067\u3082\u7533\u8ACB\u3059\u308B\u3002\u3053\u308C\u3092\u4F7F\u3048\u3070\u30E6\u30FC\u30B6\u30FC\u304C\u7533\u8ACB\u306B\u6C17\u3065\u304D\u3084\u3059\u3044\u306E\u3067\u3001\u5F37\u304F\u63A8\u5968\u3059\u308B\u3002";
 var START = "<!-- approval-box:start -->";
@@ -12067,19 +12138,19 @@ ${END}
 `;
 var PATTERN = new RegExp(`\\n*${START}[\\s\\S]*?${END}\\n?`, "g");
 function hasInstructions(file) {
-  return existsSync3(file) && readFileSync3(file, "utf8").includes(START);
+  return existsSync4(file) && readFileSync4(file, "utf8").includes(START);
 }
 function writeInstructions(file) {
-  const current = existsSync3(file) ? readFileSync3(file, "utf8").replace(PATTERN, "\n").trimEnd() : "";
-  mkdirSync3(dirname3(file), { recursive: true, mode: 448 });
-  writeFileSync2(file, current ? `${current}
+  const current = existsSync4(file) ? readFileSync4(file, "utf8").replace(PATTERN, "\n").trimEnd() : "";
+  mkdirSync4(dirname3(file), { recursive: true, mode: 448 });
+  writeFileSync3(file, current ? `${current}
 
 ${BLOCK}` : BLOCK);
 }
 function removeInstructions(file) {
   if (!hasInstructions(file)) return;
-  const rest = readFileSync3(file, "utf8").replace(PATTERN, "\n").trimEnd();
-  writeFileSync2(file, rest ? `${rest}
+  const rest = readFileSync4(file, "utf8").replace(PATTERN, "\n").trimEnd();
+  writeFileSync3(file, rest ? `${rest}
 ` : "");
 }
 
@@ -12087,35 +12158,35 @@ function removeInstructions(file) {
 var HARNESSES = ["claude", "codex", "cursor", "grok"];
 var LABEL = { claude: "Claude Code", codex: "Codex", cursor: "Cursor", grok: "Grok" };
 var CLIENT = { claude: "claude-code", codex: "codex", cursor: "cursor", grok: "grok" };
-var claudeDir = () => process.env.CLAUDE_CONFIG_DIR ?? join4(homedir(), ".claude");
-var claudeJson = () => process.env.CLAUDE_CONFIG_DIR ? join4(process.env.CLAUDE_CONFIG_DIR, ".claude.json") : join4(homedir(), ".claude.json");
-var cursorDir = () => process.env.CURSOR_HOME ?? join4(homedir(), ".cursor");
-var codexHome = () => process.env.CODEX_HOME ?? join4(homedir(), ".codex");
-var grokDir = () => process.env.GROK_HOME ?? join4(homedir(), ".grok");
+var claudeDir = () => process.env.CLAUDE_CONFIG_DIR ?? join5(homedir(), ".claude");
+var claudeJson = () => process.env.CLAUDE_CONFIG_DIR ? join5(process.env.CLAUDE_CONFIG_DIR, ".claude.json") : join5(homedir(), ".claude.json");
+var cursorDir = () => process.env.CURSOR_HOME ?? join5(homedir(), ".cursor");
+var codexHome = () => process.env.CODEX_HOME ?? join5(homedir(), ".codex");
+var grokDir = () => process.env.GROK_HOME ?? join5(homedir(), ".grok");
 function filesOf(target) {
-  if (target === "claude") return [claudeJson(), join4(claudeDir(), "settings.json")];
-  if (target === "cursor") return [join4(cursorDir(), "mcp.json"), join4(cursorDir(), "hooks.json"), cursorCliConfig()];
-  if (target === "codex") return [join4(codexHome(), "config.toml"), join4(codexHome(), "hooks.json")];
-  return [join4(grokDir(), "config.toml")];
+  if (target === "claude") return [claudeJson(), join5(claudeDir(), "settings.json")];
+  if (target === "cursor") return [join5(cursorDir(), "mcp.json"), join5(cursorDir(), "hooks.json"), cursorCliConfig()];
+  if (target === "codex") return [join5(codexHome(), "config.toml"), join5(codexHome(), "hooks.json")];
+  return [join5(grokDir(), "config.toml")];
 }
 function instructionsFileOf(target) {
-  if (target === "claude") return join4(claudeDir(), "CLAUDE.md");
-  if (target === "codex") return join4(codexHome(), "AGENTS.md");
-  if (target === "grok") return join4(grokDir(), "AGENTS.md");
+  if (target === "claude") return join5(claudeDir(), "CLAUDE.md");
+  if (target === "codex") return join5(codexHome(), "AGENTS.md");
+  if (target === "grok") return join5(grokDir(), "AGENTS.md");
   return null;
 }
 function onPath(command2) {
   const names = process.platform === "win32" ? [`${command2}.exe`, `${command2}.cmd`, command2] : [command2];
   for (const dir of (process.env.PATH ?? "").split(delimiter)) {
-    for (const name of names) if (dir && existsSync4(join4(dir, name))) return join4(dir, name);
+    for (const name of names) if (dir && existsSync5(join5(dir, name))) return join5(dir, name);
   }
   return null;
 }
 function detect(target) {
-  if (target === "claude") return existsSync4(claudeDir()) || !!onPath("claude");
-  if (target === "codex") return existsSync4(codexHome()) || !!onPath("codex");
-  if (target === "cursor") return existsSync4(cursorDir()) || !!onPath("cursor-agent");
-  return existsSync4(grokDir()) || !!onPath("grok");
+  if (target === "claude") return existsSync5(claudeDir()) || !!onPath("claude");
+  if (target === "codex") return existsSync5(codexHome()) || !!onPath("codex");
+  if (target === "cursor") return existsSync5(cursorDir()) || !!onPath("cursor-agent");
+  return existsSync5(grokDir()) || !!onPath("grok");
 }
 function stableNode() {
   try {
@@ -12124,11 +12195,11 @@ function stableNode() {
     return process.execPath;
   }
 }
-var CURSOR_TOOLS = ["list_my_decisions", "request_decision", "amend_decision", "cancel_decision", "get_decision", "setup_test", "confirm_setup_test"];
-var cursorCliConfig = () => join4(cursorDir(), "cli-config.json");
+var CURSOR_TOOLS = ["list_my_decisions", "request_decision", "amend_decision", "cancel_decision", "get_decision", "get_attachment", "setup_test", "confirm_setup_test"];
+var cursorCliConfig = () => join5(cursorDir(), "cli-config.json");
 function setCursorPermissions(enable) {
   const file = cursorCliConfig();
-  if (!existsSync4(file) && !enable) return;
+  if (!existsSync5(file) && !enable) return;
   backupOnce(file);
   const current = readJson(file);
   const permissions = current.permissions ?? {};
@@ -12139,11 +12210,11 @@ function setCursorPermissions(enable) {
 }
 var CURSOR_CONTEXT = "cursor-context";
 function setCursorContext(enable) {
-  const file = join4(cursorDir(), "hooks.json");
-  if (!existsSync4(file) && !enable) return;
-  const target = existsSync4(file) ? realpathSync(file) : file;
+  const file = join5(cursorDir(), "hooks.json");
+  if (!existsSync5(file) && !enable) return;
+  const target = existsSync5(file) ? realpathSync(file) : file;
   backupOnce(target);
-  const current = existsSync4(target) ? readJson(target) : { version: 1 };
+  const current = existsSync5(target) ? readJson(target) : { version: 1 };
   const hooks = { ...current.hooks ?? {} };
   const ours = (entry) => typeof entry?.command === "string" && entry.command.includes(MCP_SERVER) && entry.command.endsWith(` ${CURSOR_CONTEXT}`);
   const rest = (hooks.sessionStart ?? []).filter((entry) => !ours(entry));
@@ -12152,15 +12223,15 @@ function setCursorContext(enable) {
   else delete hooks.sessionStart;
   writeJsonFile(target, { version: 1, ...current, hooks });
 }
-var cursorContextRegistered = () => JSON.stringify(readJson(join4(cursorDir(), "hooks.json")).hooks ?? {}).includes(` ${CURSOR_CONTEXT}"`);
+var cursorContextRegistered = () => JSON.stringify(readJson(join5(cursorDir(), "hooks.json")).hooks ?? {}).includes(` ${CURSOR_CONTEXT}"`);
 var registration = () => ({ command: stableNode(), args: [runtimeEntry("cli"), "mcp"] });
 function readJson(file) {
-  if (!existsSync4(file)) return {};
-  return JSON.parse(readFileSync4(file, "utf8").replace(/^/, ""));
+  if (!existsSync5(file)) return {};
+  return JSON.parse(readFileSync5(file, "utf8").replace(/^/, ""));
 }
 function backupOnce(file) {
   const copy = `${file}${PROFILE.backup_suffix}`;
-  if (existsSync4(file) && !existsSync4(copy)) copyFileSync(file, copy);
+  if (existsSync5(file) && !existsSync5(copy)) copyFileSync(file, copy);
 }
 function setMcpJson(file, value) {
   backupOnce(file);
@@ -12186,18 +12257,18 @@ async function register(target, options = {}) {
   try {
     if (target === "claude") {
       setMcpJson(claudeJson(), { type: "stdio", ...registration() });
-      mergeClaudeParentHooks(PROFILE, join4(claudeDir(), "settings.json"), hook("claude"));
+      mergeClaudeParentHooks(PROFILE, join5(claudeDir(), "settings.json"), hook("claude"));
       return { target, status: "registered" };
     }
     if (target === "cursor") {
-      setMcpJson(join4(cursorDir(), "mcp.json"), registration());
-      mergeCursorParentHooks(PROFILE, join4(cursorDir(), "hooks.json"), hook("cursor"));
+      setMcpJson(join5(cursorDir(), "mcp.json"), registration());
+      mergeCursorParentHooks(PROFILE, join5(cursorDir(), "hooks.json"), hook("cursor"));
       setCursorPermissions(true);
       setCursorContext(!!options.instructions);
       return { target, status: "registered" };
     }
     if (target === "codex") {
-      const config = join4(codexHome(), "config.toml");
+      const config = join5(codexHome(), "config.toml");
       backupOnce(config);
       await withCodexConfig(async (request) => {
         await request("config/batchWrite", { filePath: config, edits: [{ keyPath: `mcp_servers.${MCP_SERVER}`, value: { ...registration(), env_vars: ["CODEX_HOME"] }, mergeStrategy: "replace" }] });
@@ -12213,7 +12284,7 @@ async function register(target, options = {}) {
     }
     const grok = onPath("grok");
     if (!grok) throw new Error("grok \u30B3\u30DE\u30F3\u30C9\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093");
-    backupOnce(join4(grokDir(), "config.toml"));
+    backupOnce(join5(grokDir(), "config.toml"));
     const reg = registration();
     execFileSync(grok, ["mcp", "add", MCP_SERVER, "--scope", "user", reg.command, "--", ...reg.args], { stdio: "pipe" });
     return { target, status: "registered" };
@@ -12226,17 +12297,17 @@ async function unregister(target) {
     const file = instructionsFileOf(target);
     if (file) removeInstructions(file);
     if (target === "claude") {
-      if (existsSync4(claudeJson())) setMcpJson(claudeJson(), null);
-      removeClaudeParentHooks(PROFILE, join4(claudeDir(), "settings.json"));
+      if (existsSync5(claudeJson())) setMcpJson(claudeJson(), null);
+      removeClaudeParentHooks(PROFILE, join5(claudeDir(), "settings.json"));
     } else if (target === "cursor") {
-      if (existsSync4(join4(cursorDir(), "mcp.json"))) setMcpJson(join4(cursorDir(), "mcp.json"), null);
-      removeCursorParentHooks(PROFILE, join4(cursorDir(), "hooks.json"));
+      if (existsSync5(join5(cursorDir(), "mcp.json"))) setMcpJson(join5(cursorDir(), "mcp.json"), null);
+      removeCursorParentHooks(PROFILE, join5(cursorDir(), "hooks.json"));
       setCursorPermissions(false);
       setCursorContext(false);
     } else if (target === "codex") {
-      if (existsSync4(join4(codexHome(), "config.toml"))) {
+      if (existsSync5(join5(codexHome(), "config.toml"))) {
         await withCodexConfig(async (request) => {
-          await request("config/batchWrite", { filePath: join4(codexHome(), "config.toml"), edits: [{ keyPath: `mcp_servers.${MCP_SERVER}`, value: null, mergeStrategy: "replace" }] });
+          await request("config/batchWrite", { filePath: join5(codexHome(), "config.toml"), edits: [{ keyPath: `mcp_servers.${MCP_SERVER}`, value: null, mergeStrategy: "replace" }] });
         });
       }
       try {
@@ -12260,20 +12331,20 @@ function registeredTools(target) {
   const entryOf = (value) => (value?.args ?? [])[0];
   if (target === "claude") {
     const entry = readJson(claudeJson()).mcpServers?.[MCP_SERVER];
-    const settings = JSON.stringify(readJson(join4(claudeDir(), "settings.json")));
+    const settings = JSON.stringify(readJson(join5(claudeDir(), "settings.json")));
     const e = entryOf(entry);
     return { mcp: !!entry, hooks: settings.includes(PROFILE.hooks.claude), ...e ? { entry: e } : {} };
   }
   if (target === "cursor") {
-    const entry = readJson(join4(cursorDir(), "mcp.json")).mcpServers?.[MCP_SERVER];
+    const entry = readJson(join5(cursorDir(), "mcp.json")).mcpServers?.[MCP_SERVER];
     const e = entryOf(entry);
-    return { mcp: !!entry, hooks: cursorParentHooksRegistered(PROFILE, readJson(join4(cursorDir(), "hooks.json"))), ...e ? { entry: e } : {} };
+    return { mcp: !!entry, hooks: cursorParentHooksRegistered(PROFILE, readJson(join5(cursorDir(), "hooks.json"))), ...e ? { entry: e } : {} };
   }
   if (target === "codex") {
-    const toml2 = existsSync4(join4(codexHome(), "config.toml")) ? readFileSync4(join4(codexHome(), "config.toml"), "utf8") : "";
+    const toml2 = existsSync5(join5(codexHome(), "config.toml")) ? readFileSync5(join5(codexHome(), "config.toml"), "utf8") : "";
     return { mcp: toml2.includes(`[mcp_servers.${MCP_SERVER}]`), hooks: null };
   }
-  const toml = existsSync4(join4(grokDir(), "config.toml")) ? readFileSync4(join4(grokDir(), "config.toml"), "utf8") : "";
+  const toml = existsSync5(join5(grokDir(), "config.toml")) ? readFileSync5(join5(grokDir(), "config.toml"), "utf8") : "";
   return { mcp: toml.includes(MCP_SERVER), hooks: null };
 }
 
@@ -15637,11 +15708,11 @@ var StdioServerTransport = class {
 };
 
 // src/mcp.ts
-import { existsSync as existsSync5, readFileSync as readFileSync5 } from "node:fs";
-import { basename as basename2, join as join5 } from "node:path";
+import { existsSync as existsSync6, readFileSync as readFileSync6 } from "node:fs";
+import { basename as basename2, join as join6 } from "node:path";
 
 // src/version.ts
-var VERSION = true ? "0.1.7" : "0.0.0-dev";
+var VERSION = true ? "0.1.9" : "0.0.0-dev";
 function osName() {
   return process.platform === "darwin" ? "macos" : process.platform === "win32" ? "windows" : process.platform;
 }
@@ -15725,6 +15796,11 @@ var TOOLS = [
     description: "\u7533\u8ACB\u306E\u4ECA\u306E\u72B6\u614B\u3068\u7B54\u3048\u3092\u898B\u308B\u3002\u7B54\u3048\u306F\u3075\u3064\u3046\u81EA\u52D5\u3067\u5C4A\u304F\u306E\u3067\u3001\u5C4A\u3044\u305F\u7B54\u3048\u3092\u898B\u5931\u3063\u305F\u6642\u3060\u3051\u4F7F\u3046\u3002",
     inputSchema: { type: "object", properties: { decision_id: { type: "string" } }, required: ["decision_id"], additionalProperties: false }
   },
+  {
+    name: "get_attachment",
+    description: "\u5229\u7528\u8005\u304C\u7B54\u3048\u306B\u4ED8\u3051\u305F\u6DFB\u4ED8\uFF08\u753B\u50CF\u30FB\u66F8\u985E\uFF09\u3092\u53D6\u308B\u3002\u3053\u306E\u7AEF\u672B\u306B\u4FDD\u5B58\u3057\u3066\u5834\u6240\u3092\u8FD4\u3057\u3001\u753B\u50CF\u306F\u305D\u306E\u307E\u307E\u898B\u3089\u308C\u308B\u5F62\u3067\u3082\u8FD4\u3059\u3002attachment_id \u306F\u5C4A\u3044\u305F\u7B54\u3048\u304B get_decision \u306E answer.attachments \u306B\u3042\u308B\u3002",
+    inputSchema: { type: "object", properties: { decision_id: { type: "string" }, attachment_id: { type: "string" } }, required: ["decision_id", "attachment_id"], additionalProperties: false }
+  },
   {
     name: "setup_test",
     description: 'Approval Box\u306E\u63A5\u7D9A\u30C6\u30B9\u30C8\uFF08\u30BB\u30C3\u30C8\u30A2\u30C3\u30D7\u78BA\u8A8D\uFF09\u3092\u59CB\u3081\u308B\u3002\u5229\u7528\u8005\u306B\u300CApproval Box\u306Esetup_test\u3092\u5B9F\u884C\u3057\u3066\u300D\u300CApproval Box\u306E\u30C6\u30B9\u30C8\u3092\u3057\u3066\u300D\u300C\u63A5\u7D9A\u30C6\u30B9\u30C8\u3092\u3057\u3066\u300D\u3068\u8A00\u308F\u308C\u305F\u3089\u3001\u4ED6\u306E\u65B9\u6CD5\u3092\u8ABF\u3079\u305A\u306B\u3053\u306Etool\u3092\u547C\u3076\u3002Start the Approval Box connection test when the user says "test Approval Box". \u30C6\u30B9\u30C8\u306E\u7533\u8ACB\u304C\u5229\u7528\u8005\u306B\u5C4A\u304D\u3001\u7B54\u3048\u304C\u3053\u306E\u4F1A\u8A71\u3078\u5C4A\u304F\u3002',
@@ -15736,12 +15812,14 @@ var TOOLS = [
     inputSchema: { type: "object", properties: { decision_id: { type: "string" }, code: { type: "string" } }, required: ["decision_id", "code"], additionalProperties: false }
   }
 ];
-var parentsFile = () => join5(stateRoot(), "parents.json");
+var VIEWABLE_IMAGES = ["image/jpeg", "image/png", "image/gif", "image/webp"];
+var MAX_INLINE_IMAGE = 5 * 1024 * 1024;
+var parentsFile = () => join6(stateRoot(), "parents.json");
 var processChannels = /* @__PURE__ */ new Map();
 var lastChannel;
 function savedParents() {
   try {
-    return existsSync5(parentsFile()) ? JSON.parse(readFileSync5(parentsFile(), "utf8")) : {};
+    return existsSync6(parentsFile()) ? JSON.parse(readFileSync6(parentsFile(), "utf8")) : {};
   } catch {
     return {};
   }
@@ -15912,6 +15990,21 @@ ${JSON.stringify(decision)}`, decision);
 
 ${JSON.stringify(decision)}`, decision);
       }
+      if (name === "get_attachment") {
+        const decisionId = String(args.decision_id);
+        const decision = await api.call("GET", `/decisions/${encodeURIComponent(decisionId)}`);
+        const list = decision.answer?.attachments ?? [];
+        const index = list.findIndex((a) => a.id === args.attachment_id);
+        if (index < 0) return text(`Approval Box: ${decisionId} \u306E\u7B54\u3048\u306B\u3001\u305D\u306E\u6DFB\u4ED8\u306F\u3042\u308A\u307E\u305B\u3093\u3002get_decision \u306E answer.attachments \u3092\u78BA\u304B\u3081\u3066\u304F\u3060\u3055\u3044\u3002`, { error: "not_found" }, true);
+        const meta = list[index];
+        const path = await saveAttachment(api, decisionId, meta, index);
+        const head = `${decisionId} \u306E\u6DFB\u4ED8 ${index + 1}: ${meta.name}\uFF08${meta.content_type}\u3001${meta.size}\u30D0\u30A4\u30C8\uFF09\u3092\u4FDD\u5B58\u3057\u307E\u3057\u305F: ${path}`;
+        const structured = { decision_id: decisionId, attachment: meta, path };
+        if (VIEWABLE_IMAGES.includes(meta.content_type) && meta.size <= MAX_INLINE_IMAGE) {
+          return { content: [{ type: "text", text: head }, { type: "image", data: readFileSync6(path).toString("base64"), mimeType: meta.content_type }], structuredContent: structured };
+        }
+        return text(head, structured);
+      }
       if (name === "setup_test") {
         const channelId = await channelFor(harness, clientName, request.params._meta);
         lastChannel = channelId;
@@ -15980,13 +16073,13 @@ async function ask(question) {
   }
 }
 function installRuntime() {
-  const target = join6(home(), "runtime", VERSION);
+  const target = join7(home(), "runtime", VERSION);
   if (runtimeDir() !== target) {
-    rmSync2(target, { recursive: true, force: true });
-    mkdirSync4(target, { recursive: true });
+    rmSync3(target, { recursive: true, force: true });
+    mkdirSync5(target, { recursive: true });
     cpSync(runtimeDir(), target, { recursive: true });
   }
-  return join6(target, "cli.mjs");
+  return join7(target, "cli.mjs");
 }
 function selectedTargets() {
   const only = option("only");
@@ -16130,7 +16223,7 @@ async function uninstall() {
       out(`  \u30B5\u30FC\u30D0\u30FC: \u63A5\u7D9A\u306E\u89E3\u9664\u306B\u5931\u6557\u3057\u307E\u3057\u305F\uFF08\u30A2\u30D7\u30EA\u306E\u300C\u63A5\u7D9A\u300D\u304B\u3089\u5916\u3057\u3066\u304F\u3060\u3055\u3044\uFF09: ${error.message}`);
     }
   }
-  rmSync2(join6(home(), "config.json"), { force: true });
+  rmSync3(join7(home(), "config.json"), { force: true });
   out("\nApproval Box\u3092\u5916\u3057\u307E\u3057\u305F\u3002npm install -g \u3067\u5165\u308C\u305F\u5834\u5408\u306F\u3001npm uninstall -g approval-box \u3067\u672C\u4F53\u3082\u6D88\u305B\u307E\u3059\u3002");
 }
 async function status() {
@@ -16168,13 +16261,13 @@ async function doctor() {
       problems.push(error instanceof ServerError && error.status === 401 ? "\u3053\u306E\u7AEF\u672B\u306E\u63A5\u7D9A\u304C\u5916\u3055\u308C\u3066\u3044\u307E\u3059 \u2192 npx approval-box setup" : `\u30B5\u30FC\u30D0\u30FC\u306B\u3064\u306A\u304C\u308A\u307E\u305B\u3093: ${error.message}`);
     }
   }
-  if (!existsSync6(process.execPath)) problems.push(`node \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\uFF08${process.execPath}\uFF09`);
+  if (!existsSync7(process.execPath)) problems.push(`node \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\uFF08${process.execPath}\uFF09`);
   for (const target of HARNESSES) {
     if (!detect(target)) continue;
     const r = registered(target);
     if (!r.mcp) problems.push(`${LABEL[target]}: MCP\u304C\u767B\u9332\u3055\u308C\u3066\u3044\u307E\u305B\u3093 \u2192 npx approval-box setup --only ${target}`);
     if (r.hooks === false) problems.push(`${LABEL[target]}: hook\u304C\u767B\u9332\u3055\u308C\u3066\u3044\u307E\u305B\u3093 \u2192 npx approval-box setup --only ${target}`);
-    if (r.entry && !existsSync6(r.entry)) problems.push(`${LABEL[target]}: \u767B\u9332\u5148\u306E\u30D5\u30A1\u30A4\u30EB\u304C\u3042\u308A\u307E\u305B\u3093\uFF08${r.entry}\uFF09\u3002node \u3084Approval Box\u3092\u5165\u308C\u76F4\u3057\u305F\u6642\u306B\u8D77\u304D\u307E\u3059 \u2192 npx approval-box setup`);
+    if (r.entry && !existsSync7(r.entry)) problems.push(`${LABEL[target]}: \u767B\u9332\u5148\u306E\u30D5\u30A1\u30A4\u30EB\u304C\u3042\u308A\u307E\u305B\u3093\uFF08${r.entry}\uFF09\u3002node \u3084Approval Box\u3092\u5165\u308C\u76F4\u3057\u305F\u6642\u306B\u8D77\u304D\u307E\u3059 \u2192 npx approval-box setup`);
     if (r.mcp && r.instructions === false) hints.push(`${LABEL[target]}: \u5168\u4F53\u306E\u6307\u793A\u306BApproval Box\u306E\u4E00\u7BC0\u304C\u3042\u308A\u307E\u305B\u3093\u3002AI\u304C\u7533\u8ACB\u3092\u51FA\u3055\u306A\u3044\u6642\u306F \u2192 npx approval-box setup --only ${target}`);
   }
   for (const hint of hints) out(`\u30FB${hint}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "approval-box",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "Approval Box connector: lets Claude Code, Codex, Cursor and Grok ask you for a decision, and steers your answer back into the same session.",
   "license": "MIT",
   "homepage": "https://approval-box.kitepon.dev",