chainlesschain 0.163.8 → 0.165.1

package/src/gateways/ws/ws-agent-handler.js

@@ -20,6 +20,7 @@ import {
   persistSideEffectLedger,
 } from "../../lib/side-effect-ledger-store.js";
 import { operationIdempotencyKey } from "../../lib/idempotency.js";
+import { collectToolResourceIdentifiers } from "../../lib/permission-side-effect-center.js";
 import {
   detectTaskType,
   selectModelForTask,
@@ -1289,6 +1290,12 @@ export class WSAgentHandler {
                       key: se.key,
                       meta: {
                         tool: event.tool,
+                        toolUseId: event.tool_use_id || null,
+                        turnId: event.turn_id || null,
+                        resources: collectToolResourceIdentifiers(
+                          event.tool,
+                          event.args,
+                        ),
                         idempotencyKey: operationIdempotencyKey({
                           tool: event.tool,
                           args: event.args,
@@ -1329,6 +1336,11 @@ export class WSAgentHandler {
               currentTodoWrite = null;
               if (currentSideEffectOpId) {
                 const err = event.error || event.result?.error || null;
+                if (event.permission_decision) {
+                  sideEffectLedger.annotate(currentSideEffectOpId, {
+                    permissionDecision: event.permission_decision,
+                  });
+                }
                 if (event.result?._diffReviewAudit) {
                   diffReviewFollowUps.observe(
                     sideEffectLedger,

package/src/gateways/ws/ws-approval-gate.js

@@ -121,6 +121,11 @@ export async function createWsApprovalGate({
         }),
       hasConfirmer: () => gate.hasConfirmer(),
       setConfirmer: (fn) => gate.setConfirmer(fn),
+      setAuthorizationConsumer: (fn) => gate.setAuthorizationConsumer?.(fn),
+      hasAuthorizationConsumer: () =>
+        gate.hasAuthorizationConsumer?.() === true,
+      consumeAuthorization: (authorization, ctx) =>
+        gate.consumeAuthorization(authorization, ctx),
       getSessionPolicy: (sid) => inner.getSessionPolicy(sid || sessionId),
       setSessionPolicy: (sid, policy) =>
         inner.setSessionPolicy(sid || sessionId, policy),