commandmate 0.47.0 → 0.48.0

package/dist/server/src/lib/polling/antigravity-permission-receipts.js

@@ -24,7 +24,8 @@
  * ## What is kept
  *
  * ONE entry per instance: the tool name and the arrival time of the most recent
- * question. A second question replaces the first, because the only thing asked
+ * question, and the call it asked about (`callId`, Issue #3820) when the body
+ * named one. A second question replaces the first, because the only thing asked
  * of this record is "was there one lately".
  *
  * The screen carries no tool name (only the option labels), so the caller that
@@ -42,6 +43,7 @@ exports.ANTIGRAVITY_PERMISSION_RECEIPT_WINDOW_MS = void 0;
 exports.recordAntigravityPermissionReceipt = recordAntigravityPermissionReceipt;
 exports.hasRecentAntigravityPermissionReceipt = hasRecentAntigravityPermissionReceipt;
 exports.getAntigravityPermissionReceiptAt = getAntigravityPermissionReceiptAt;
+exports.getAntigravityPermissionReceiptCallId = getAntigravityPermissionReceiptCallId;
 exports.resetAntigravityPermissionReceiptsForTests = resetAntigravityPermissionReceiptsForTests;
 const auto_yes_state_1 = require("../../lib/auto-yes-state");
 const global_state_1 = require("../global-state");
@@ -87,12 +89,14 @@ const observations = (0, global_state_1.getOrInitGlobal)('__antigravityReceiptOb
  * @param instanceId - Agent instance id (the tool id itself for the primary)
  * @param toolName - Tool the request named, or null when the payload had none
  * @param at - Epoch ms the request arrived
+ * @param callId - Issue #3820: the call the request asked about
+ *   (`PermissionRequestPayload.callId`), null when it named none
  */
-function recordAntigravityPermissionReceipt(worktreeId, cliToolId, instanceId, toolName, at = Date.now()) {
+function recordAntigravityPermissionReceipt(worktreeId, cliToolId, instanceId, toolName, at = Date.now(), callId = null) {
     if (toolName === null)
         return;
     pruneExpiredReceipts(at);
-    receipts.set((0, auto_yes_state_1.buildCompositeKey)(worktreeId, cliToolId, instanceId), { toolName, at });
+    receipts.set((0, auto_yes_state_1.buildCompositeKey)(worktreeId, cliToolId, instanceId), { toolName, at, callId });
 }
 /**
  * Did agy ask CommandMate about a tool call, for this instance, within
@@ -121,6 +125,13 @@ function hasRecentAntigravityPermissionReceipt(worktreeId, cliToolId, instanceId
 function getAntigravityPermissionReceiptAt(worktreeId, cliToolId, instanceId) {
     return receipts.get((0, auto_yes_state_1.buildCompositeKey)(worktreeId, cliToolId, instanceId))?.at ?? null;
 }
+/**
+ * The call the latest question asked about (Issue #3820), or null when it
+ * named none or none was received. For the ledger only.
+ */
+function getAntigravityPermissionReceiptCallId(worktreeId, cliToolId, instanceId) {
+    return receipts.get((0, auto_yes_state_1.buildCompositeKey)(worktreeId, cliToolId, instanceId))?.callId ?? null;
+}
 /** Empty the record. Tests only: production entries age out on their own. */
 function resetAntigravityPermissionReceiptsForTests() {
     receipts.clear();

package/dist/server/src/lib/polling/antigravity-receipt-episodes.js

@@ -21,6 +21,7 @@ exports.beginAntigravityFrameRead = beginAntigravityFrameRead;
 exports.endAntigravityFrameRead = endAntigravityFrameRead;
 exports.markAntigravityAnswerSent = markAntigravityAnswerSent;
 exports.getAntigravityAcceptedReceiptAt = getAntigravityAcceptedReceiptAt;
+exports.getAntigravityAcceptedReceiptCallId = getAntigravityAcceptedReceiptCallId;
 exports.getAntigravityReceiptVerdict = getAntigravityReceiptVerdict;
 exports.judgeAntigravityPermissionReceipt = judgeAntigravityPermissionReceipt;
 const auto_yes_state_1 = require("../../lib/auto-yes-state");
@@ -73,7 +74,8 @@ function isObservation(v) {
         typeof o.candidateSeen === 'boolean' &&
         ['firstSeenAt', 'clearAt', 'prevReadAt', 'lastReadAt', 'acceptedReceiptAt', 'answerSentAt', 'usedReceiptAt'].every(k => isTimeOrNull(o[k])) &&
         (o.verdict === null || typeof o.verdict === 'object') &&
-        (o.answerInterrupted === undefined || typeof o.answerInterrupted === 'boolean'));
+        (o.answerInterrupted === undefined || typeof o.answerInterrupted === 'boolean') &&
+        (o.acceptedCallId === undefined || o.acceptedCallId === null || typeof o.acceptedCallId === 'string'));
 }
 function existingObservation(key) {
     const o = observations.get(key);
@@ -95,6 +97,7 @@ function observationOf(key) {
             prevReadAt: null,
             lastReadAt: null,
             acceptedReceiptAt: null,
+            acceptedCallId: null,
             answerSentAt: null,
             answerInterrupted: false,
             usedReceiptAt: null,
@@ -117,6 +120,7 @@ function beginAntigravityFrameRead(worktreeId, instanceId, now = Date.now()) {
         o.firstSeenAt = null;
         o.clearAt = null;
         o.acceptedReceiptAt = null;
+        o.acceptedCallId = null;
         o.answerSentAt = null;
         o.answerInterrupted = false;
         o.verdict = null;
@@ -136,6 +140,7 @@ function endAntigravityFrameRead(worktreeId, instanceId, now = Date.now()) {
         return;
     o.firstSeenAt = null;
     o.acceptedReceiptAt = null;
+    o.acceptedCallId = null;
     o.answerSentAt = null;
     o.answerInterrupted = false;
     o.verdict = null;
@@ -177,6 +182,19 @@ function markAntigravityAnswerSent(worktreeId, instanceId, now = Date.now(), opt
 function getAntigravityAcceptedReceiptAt(worktreeId, instanceId) {
     return existingObservation((0, auto_yes_state_1.buildCompositeKey)(worktreeId, 'antigravity', instanceId))?.acceptedReceiptAt ?? null;
 }
+/**
+ * The call the current episode was accepted for (Issue #3820, design
+ * `docs/design/auto-yes-measurement-3820.md` §2.4): what the Auto-Yes ledger
+ * ties the screen's confirmation to, so the hook request and the `PostToolUse`
+ * of that call find it. Null when nothing is accepted or the receipt named no
+ * call. Read only to record; the gate never consults it.
+ */
+function getAntigravityAcceptedReceiptCallId(worktreeId, instanceId) {
+    const o = existingObservation((0, auto_yes_state_1.buildCompositeKey)(worktreeId, 'antigravity', instanceId));
+    if (!o || o.acceptedReceiptAt === null)
+        return null;
+    return o.acceptedCallId ?? null;
+}
 /**
  * The verdict of the current episode's latest consultation, or null when no
  * candidate dialog was read in the last tick (Issue #3767).
@@ -236,6 +254,7 @@ function judgeAntigravityPermissionReceipt(worktreeId, instanceId, nowOverride)
         o.firstSeenAt = now;
         o.clearAt = o.prevReadAt;
         o.acceptedReceiptAt = null;
+        o.acceptedCallId = null;
         o.answerSentAt = null;
         o.answerInterrupted = false;
         return judgeAntigravityPermissionReceipt(worktreeId, instanceId, now);
@@ -276,6 +295,7 @@ function judgeAntigravityPermissionReceipt(worktreeId, instanceId, nowOverride)
         return verdict(causeFor(ageMs));
     }
     o.acceptedReceiptAt = lastReceiptAt;
+    o.acceptedCallId = (0, antigravity_permission_receipts_1.getAntigravityPermissionReceiptCallId)(worktreeId, 'antigravity', instanceId);
     o.usedReceiptAt = lastReceiptAt;
     return verdict(null);
 }

package/dist/server/src/lib/polling/auto-yes-confirm-page.js

@@ -7,8 +7,8 @@
  * answers. On Kewton/Musunest#283 that was the worker's own proposal, which the
  * worker then implemented as though a human had approved it. So neither the
  * server's poller (`suppressIfNotOursToAnswer`, step 3.3) nor the browser's
- * fallback (`useAutoYes`, which answers only while no server poller runs) sends
- * a key to them.
+ * fallback (`useAutoYes`, which answered only while no server poller ran, and
+ * since Issue #3821 answers nothing) sends a key to them.
  *
  * Server-only: `normalizeFrame` and the tools' detectors reach `logger` → `env`
  * → `fs`. The browser judges by the prompt's options instead

package/dist/server/src/lib/polling/auto-yes-confirmation-ledger-types.js

@@ -0,0 +1,117 @@
+"use strict";
+/**
+ * The vocabulary of the Auto-Yes confirmation ledger's log lines, for every
+ * path (Issue #3820, design `docs/design/auto-yes-measurement-3820.md` §3.3).
+ *
+ * Fixed here, in PR 1, for all of them: the poller (screen) writes its lines
+ * now; the hook route, the API adjudication and `/prompt-response` (PR 2) and
+ * the agy link (PR 3) write theirs through the same ledger later, and the daily
+ * aggregation (PR 4) reads all of them. A line is fixed-size on purpose: codes
+ * and ids only — never a question, a command or a path — and no arrays except
+ * `segments`, whose length is bounded by the number of paths.
+ *
+ * Types and constants only, so a reader (the aggregation, tests) can import it
+ * without the ledger's state or its logger.
+ *
+ * @module lib/polling/auto-yes-confirmation-ledger-types
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CLI_PERMISSION_MODES = exports.HOOK_ABSTAIN_REASONS = exports.CONFIRMATION_RESOLVED_BY = exports.CONFIRMATION_RESOLUTIONS = exports.ATTEMPT_RESULTS = exports.LEDGER_WITHHOLD_REASONS = exports.ANSWER_BASES = exports.AUTO_YES_LEDGER_PATHS = exports.AUTO_YES_LEDGER_EVENTS = exports.AUTO_YES_LEDGER_LOG_MODULE = exports.AUTO_YES_LEDGER_VERSION = void 0;
+/** The version of this vocabulary, on every line (`ledgerVersion`). */
+exports.AUTO_YES_LEDGER_VERSION = 1;
+/** The log module every ledger line is written under (`[time] [INFO] [<module>] <event> {json}`). */
+exports.AUTO_YES_LEDGER_LOG_MODULE = 'auto-yes-confirmation-ledger';
+/** The ledger's log line names (design §3.3). */
+exports.AUTO_YES_LEDGER_EVENTS = {
+    started: 'auto-yes-ledger-started',
+    alive: 'auto-yes-ledger-alive',
+    opened: 'auto-yes-confirmation-opened',
+    withholdStarted: 'auto-yes-withhold-started',
+    withholdReasonChanged: 'auto-yes-withhold-reason-changed',
+    withholdEnded: 'auto-yes-withhold-ended',
+    attemptSettled: 'auto-yes-confirmation-attempt-settled',
+    presenceChanged: 'auto-yes-confirmation-presence-changed',
+    checkpoint: 'auto-yes-confirmation-checkpoint',
+    closed: 'auto-yes-confirmation-closed',
+    /** PR 2: written by the hook route only — the API adjudication never makes a hook request. */
+    hookRequestClosed: 'auto-yes-hook-request-closed',
+    /**
+     * PR 3: the call a hook request asked about ended (agy's `PostToolUse`) and
+     * no confirmation on screen was ever tied to it. Written after the request's
+     * own line, which closed when its reply was written (design §2.6).
+     */
+    hookRequestDialogUnobserved: 'auto-yes-hook-request-dialog-unobserved',
+    /** PR 2. */
+    cliModeObserved: 'auto-yes-cli-mode-observed',
+};
+// =============================================================================
+// The vocabulary as values, for a reader that must tell a known code from
+// anything else (the daily aggregation, PR 4, folds the rest into `(other)`).
+// Each list is the keys of a `Record` over its union, so the compiler fails
+// when a member is added to the union and not here, or the other way round.
+// =============================================================================
+const PATHS = {
+    screen: true,
+    hook: true,
+    api: true,
+    'prompt-response': true,
+    'agy-link': true,
+};
+/** Every {@link AutoYesLedgerPath}, in the order the PRs add them (design §6.4). */
+exports.AUTO_YES_LEDGER_PATHS = Object.keys(PATHS);
+const BASES = { L1: true, L2: true, L3: true, L4: true, 'enter-fallback': true, browser: true, human: true };
+exports.ANSWER_BASES = Object.keys(BASES);
+const WITHHOLD_REASONS = {
+    'mode-off': true,
+    'deny-pattern': true,
+    'deny-pattern-unusable': true,
+    'type-not-allowed': true,
+    'policy-lookup-failed': true,
+    'agent-launch-dialog': true,
+    'unclassified-frame': true,
+    'partial-answer': true,
+    'startup-trust-unhandled': true,
+    'question-confirm-page': true,
+    'question-left-to-human': true,
+    'allow-once-unidentified': true,
+    'recommended-option-unidentified': true,
+    'no-hook-receipt': true,
+    'send-failed': true,
+    'send-no-keys': true,
+    'foreign-session': true,
+    'moved-send-in-flight': true,
+    'answered-recently': true,
+};
+exports.LEDGER_WITHHOLD_REASONS = Object.keys(WITHHOLD_REASONS);
+const RESULTS = { ok: true, partial: true, 'no-keys-sent': true, failed: true };
+exports.ATTEMPT_RESULTS = Object.keys(RESULTS);
+const RESOLUTIONS = {
+    'resolved-after-answer': true,
+    'resolved-while-withheld': true,
+    'resolved-by-reply': true,
+    'resolved-before-decision': true,
+    'unresolved-after-send': true,
+    'gone-while-unobservable': true,
+    abandoned: true,
+};
+exports.CONFIRMATION_RESOLUTIONS = Object.keys(RESOLUTIONS);
+const RESOLVED_BY = { auto: true, 'human-ui': true, unknown: true };
+exports.CONFIRMATION_RESOLVED_BY = Object.keys(RESOLVED_BY);
+/**
+ * Why the hook route answered a request with no decision (PR 2's
+ * `abstainReason`): `PermissionDecisionReason` (`hooks/permission-decision-service.ts`)
+ * less `auto-yes`, the one reason that is a decision (design §2.3).
+ */
+exports.HOOK_ABSTAIN_REASONS = [
+    'unknown-payload',
+    'ask-user-question',
+    'auto-yes-disabled',
+    'policy-suppressed',
+    'worktree-unresolved',
+];
+/**
+ * The `permission_mode` values claude's `PermissionRequest` is known to carry
+ * (PR 2's `cli-mode-observed`). Another value is still logged as it came; the
+ * daily aggregation counts it as `(other)` (design §6.1).
+ */
+exports.CLI_PERMISSION_MODES = ['default', 'acceptEdits', 'plan', 'bypassPermissions'];