evolcore 0.0.20 → 0.0.21

package/dist/core/message/send-receipt.js

@@ -11,6 +11,7 @@ export function sentReceipt(envelope, messageIds, threadId) {
     return {
         status: 'sent',
         operationId: sendOperationId(envelope),
+        messageId: messages[0].messageId,
         messages: messages,
     };
 }

package/dist/core/message/stream-debouncer.js

@@ -27,6 +27,13 @@ export class StreamDebouncer {
      * 否则新建窗口。timer 到期后自动 flush。
      */
     submit(key, message, enqueue) {
+        // A per-call permission override is an authorization boundary. Flush any
+        // earlier ordinary input first, then enqueue the authorized call on its
+        // own so neither side can inherit or erase the override during merging.
+        if (message.executionPermissionOverride) {
+            const preceding = this.flush(key, enqueue);
+            return preceding ? preceding.then(() => enqueue(message)) : enqueue(message);
+        }
         const { content, images, mentions, messageId, sourceMessageIds, replyContext, ...rest } = message;
         return new Promise((resolve, reject) => {
             const entry = { messageId, sourceMessageIds, content, images, mentions, replyContext, rest, resolve, reject };
@@ -79,7 +86,7 @@ export class StreamDebouncer {
     flush(key, enqueue) {
         const win = this.pending.get(key);
         if (!win)
-            return;
+            return undefined;
         this.pending.delete(key);
         clearTimeout(win.timer);
         clearTimeout(win.maxWaitTimer);
@@ -130,7 +137,7 @@ export class StreamDebouncer {
         };
         const resolves = entries.map(e => e.resolve);
         const rejects = entries.map(e => e.reject);
-        enqueue(merged).then(() => resolves.forEach(r => r()), (e) => rejects.forEach(r => r(e)));
+        return enqueue(merged).then(() => resolves.forEach(r => r()), (e) => rejects.forEach(r => r(e)));
     }
     /** 当前挂起的 key 数量（用于测试/调试） */
     get pendingCount() {

package/dist/core/model/model-catalog.js

@@ -12,6 +12,7 @@
  */
 import { resolveAnthropicConfig, resolveEcagentConfig, resolveOpenaiConfig } from '../../agents/baseagent.js';
 import { buildModelRequestHeaders } from '../../agents/request-identity.js';
+import { appendRequestPath, appendV1RequestPath } from '../../agents/request-identity.js';
 import { activeBaseagent } from './config-scope.js';
 import { resolveEffective } from '../../config/config-manager.js';
 import { loadDefaults } from '../../config-store.js';
@@ -33,6 +34,7 @@ function resolveCreds(self, ba) {
                 apiKey: r.apiKey,
                 agentAid: self,
                 headers: buildModelRequestHeaders({ baseagent: 'codex', baseUrl: r.baseUrl, agentAid: self, configuredHeaders: r.headers }),
+                queryParams: r.queryParams,
             };
         }
         if (baseagent === 'ecagent') {
@@ -43,6 +45,7 @@ function resolveCreds(self, ba) {
                 apiKey: r.apiKey,
                 agentAid: self,
                 headers: buildModelRequestHeaders({ baseagent: 'ecagent', baseUrl: r.baseUrl, agentAid: self, configuredHeaders: r.headers }),
+                queryParams: r.queryParams,
             };
         }
         if (baseagent === 'gemini')
@@ -56,6 +59,7 @@ function resolveCreds(self, ba) {
             apiKey: r.apiKey,
             agentAid: self,
             headers: buildModelRequestHeaders({ baseagent: 'claude', baseUrl: r.baseUrl, agentAid: self, configuredHeaders: r.headers }),
+            queryParams: r.queryParams,
         };
     }
     catch {
@@ -275,22 +279,26 @@ async function loadCatalog(self, baseagent) {
         if (cliModels)
             return { models: cliModels, source: 'codex-cli' };
     }
-    const { baseUrl, apiKey, headers } = resolveCreds(self, baseagent);
+    const { baseUrl, apiKey, headers, queryParams } = resolveCreds(self, baseagent);
     if (baseUrl) {
-        const base = baseUrl.replace(/\/+$/, '');
-        const urls = [...new Set([
-                base.endsWith('/v1') ? `${base}/models` : `${base}/v1/models`,
-                `${base}/models`,
-            ])];
-        // Probe compatible routes concurrently so a dead route does not add
-        // another full timeout before the other route is attempted.
-        const results = await Promise.all(urls.map(url => fetchModelList(url, apiKey, headers)));
-        const hitIndex = results.findIndex((models) => !!models);
-        if (hitIndex >= 0) {
-            return {
-                models: withAliases(results[hitIndex], baseagent),
-                source: hitIndex === 0 ? 'v1/models' : 'models',
-            };
+        try {
+            const urls = [...new Set([
+                    appendV1RequestPath(baseUrl, 'models', queryParams),
+                    appendRequestPath(baseUrl, 'models', queryParams),
+                ])];
+            // Probe compatible routes concurrently so a dead route does not add
+            // another full timeout before the other route is attempted.
+            const results = await Promise.all(urls.map(url => fetchModelList(url, apiKey, headers)));
+            const hitIndex = results.findIndex((models) => !!models);
+            if (hitIndex >= 0) {
+                return {
+                    models: withAliases(results[hitIndex], baseagent),
+                    source: hitIndex === 0 ? 'v1/models' : 'models',
+                };
+            }
+        }
+        catch {
+            // Invalid configured URLs behave like other unavailable gateways.
         }
     }
     // This remote directory is Claude-only. Never use it for Codex or Gemini.

package/dist/core/model/model-diagnostics.js

@@ -1,5 +1,6 @@
 import { resolveAnthropicConfig, resolveEcagentConfig, resolveOpenaiConfig } from '../../agents/baseagent.js';
 import { buildModelRequestHeaders } from '../../agents/request-identity.js';
+import { appendV1RequestPath } from '../../agents/request-identity.js';
 import { resolveEffective, resolveEffectiveFieldWithSource } from '../../config/config-manager.js';
 import { constrainResolvedModelForRole } from './model-permission.js';
 import { getCatalog } from './model-catalog.js';
@@ -27,6 +28,7 @@ function resolveGatewayCreds(self, baseagent) {
                 baseUrl: resolved.baseUrl,
                 apiKey: resolved.apiKey,
                 headers: buildModelRequestHeaders({ baseagent: 'codex', baseUrl: resolved.baseUrl, agentAid: self, configuredHeaders: resolved.headers }),
+                queryParams: resolved.queryParams,
             };
         }
         if (baseagent === 'claude') {
@@ -36,6 +38,7 @@ function resolveGatewayCreds(self, baseagent) {
                 baseUrl: resolved.baseUrl,
                 apiKey: resolved.apiKey,
                 headers: buildModelRequestHeaders({ baseagent: 'claude', baseUrl: resolved.baseUrl, agentAid: self, configuredHeaders: resolved.headers }),
+                queryParams: resolved.queryParams,
             };
         }
         if (baseagent === 'ecagent') {
@@ -45,6 +48,7 @@ function resolveGatewayCreds(self, baseagent) {
                 baseUrl: resolved.baseUrl,
                 apiKey: resolved.apiKey,
                 headers: buildModelRequestHeaders({ baseagent: 'ecagent', baseUrl: resolved.baseUrl, agentAid: self, configuredHeaders: resolved.headers }),
+                queryParams: resolved.queryParams,
             };
         }
     }
@@ -64,15 +68,23 @@ async function responseError(resp) {
     }
     return String(message).slice(0, 80);
 }
-export async function probeModel(baseUrl, apiKey, modelId, timeoutMs, requestHeaders) {
-    const base = baseUrl.replace(/\/+$/, '');
+export async function probeModel(baseUrl, apiKey, modelId, timeoutMs, requestHeaders, queryParams) {
+    let anthropicUrl;
+    let openaiUrl;
+    try {
+        anthropicUrl = appendV1RequestPath(baseUrl, 'messages', queryParams);
+        openaiUrl = appendV1RequestPath(baseUrl, 'chat/completions', queryParams);
+    }
+    catch {
+        return { ok: false, ms: 0, error: '网关地址无效', style: 'unknown' };
+    }
     const authHeaders = apiKey
         ? { 'x-api-key': apiKey, Authorization: `Bearer ${apiKey}` }
         : {};
     const deadline = Date.now() + timeoutMs;
     const remainingMs = () => Math.max(0, deadline - Date.now());
     const anthropicStartedAt = Date.now();
-    const anthropic = await fetchWithTimeout(`${base}/v1/messages`, {
+    const anthropic = await fetchWithTimeout(anthropicUrl, {
         method: 'POST',
         headers: { 'Content-Type': 'application/json', 'anthropic-version': '2023-06-01', ...authHeaders, ...requestHeaders },
         body: JSON.stringify({ model: modelId, max_tokens: 5, messages: [{ role: 'user', content: 'ok' }] }),
@@ -90,7 +102,7 @@ export async function probeModel(baseUrl, apiKey, modelId, timeoutMs, requestHea
         return { ok: false, ms: Date.now() - anthropicStartedAt, error: '探测超时', style: 'unknown' };
     }
     const openaiStartedAt = Date.now();
-    const openai = await fetchWithTimeout(`${base}/v1/chat/completions`, {
+    const openai = await fetchWithTimeout(openaiUrl, {
         method: 'POST',
         headers: { 'Content-Type': 'application/json', ...authHeaders, ...requestHeaders },
         body: JSON.stringify({ model: modelId, max_tokens: 5, messages: [{ role: 'user', content: 'ok' }] }),
@@ -117,16 +129,22 @@ export async function runModelCheck(input) {
         steps.push(step);
         input.onStep?.(step);
     };
-    const { baseUrl, apiKey, headers } = resolveGatewayCreds(input.self, input.baseagent);
+    const { baseUrl, apiKey, headers, queryParams } = resolveGatewayCreds(input.self, input.baseagent);
     if (!baseUrl) {
         log({ label: '网关地址', ok: false, detail: '未配置受支持的自定义网关，跳过 API 探测' });
     }
     else {
         const startedAt = Date.now();
-        const ping = await fetchWithTimeout(`${baseUrl.replace(/\/+$/, '')}/v1/models`, {
-            method: 'GET',
-            headers: { ...(apiKey ? { Authorization: `Bearer ${apiKey}` } : {}), ...headers },
-        }, 4000);
+        let ping = null;
+        try {
+            ping = await fetchWithTimeout(appendV1RequestPath(baseUrl, 'models', queryParams), {
+                method: 'GET',
+                headers: { ...(apiKey ? { Authorization: `Bearer ${apiKey}` } : {}), ...headers },
+            }, 4000);
+        }
+        catch {
+            // Report malformed URLs through the same failed-connectivity step.
+        }
         const elapsed = Date.now() - startedAt;
         log(ping
             ? { label: '网关连通', ok: true, detail: baseUrl, ms: elapsed }
@@ -169,7 +187,7 @@ export async function runModelCheck(input) {
         ];
         for (let index = 0; index < targets.length; index += 2) {
             const batch = await Promise.all(targets.slice(index, index + 2).map(async (target) => {
-                const result = await probeModel(baseUrl, apiKey, target.probe, 10_000, headers);
+                const result = await probeModel(baseUrl, apiKey, target.probe, 10_000, headers, queryParams);
                 return { id: target.display, ...result };
             }));
             for (const result of batch) {

package/dist/core/permission/approval-gateway.js

@@ -1,13 +1,14 @@
 import { createHash, randomUUID } from 'crypto';
 import { hasTrustedPrincipal } from '../auth/authenticated-actor.js';
 import { renderActionAsText } from '../interaction-router.js';
-import { buildEnvelope, sendInteractionPayload } from '../message/message-utils.js';
+import { buildEnvelope, isInteractionSendAccepted, sendInteractionPayload } from '../message/message-utils.js';
 import { logger } from '../../utils/logger.js';
 import { summarizeToolInput } from '../../utils/tool-summary.js';
 import { createRootCausation, deriveCausation, normalizeCausation } from '../causation/context.js';
 import { recordCausationSpan } from '../causation/audit.js';
 import { checkDangerousCommand } from './tool-policy.js';
-import { resolveProtectedCandidate } from '../protected-paths.js';
+import { resolveProtectedCandidate } from './protected-paths.js';
+import { auditPermissionDecision } from '../auth/authorization-audit.js';
 export async function requestDangerousCommandPermission(gateway, sessionId, toolName, input, sendPrompt, context, grantScope = 'default', mode = 'request') {
     const dangerCheck = checkDangerousCommand(toolName, input);
     if (!dangerCheck.isDangerous) {
@@ -18,6 +19,19 @@ export async function requestDangerousCommandPermission(gateway, sessionId, tool
     }
     if (!gateway || !sendPrompt) {
         logger.warn(`[PermissionGateway] Dangerous operation denied because approval is unavailable: session=${sessionId} tool=${toolName}`);
+        auditPermissionDecision({
+            requestId: `perm-infra-${randomUUID()}`,
+            sessionId,
+            toolName,
+            decisionSource: 'infrastructure',
+            policyCode: 'approval_channel_unavailable',
+            reason: 'dangerous operation approval channel is unavailable',
+            permissionMode: context?.permissionMode,
+            agentAid: context?.selfAid,
+            agentName: context?.agentName,
+            role: context?.role,
+            taskId: context?.taskId,
+        });
         return { matched: true, decision: 'deny' };
     }
     const decision = await gateway.requestPermission(sessionId, dangerCheck.cacheKey, input, sendPrompt, context, `⚠️ ${dangerCheck.command}`, dangerCheck.reason, grantScope, dangerCheck.kind === 'git-destructive' ? 'agent_manager' : undefined);
@@ -432,6 +446,21 @@ export class PermissionGateway {
         if (sessionGrant)
             this.addTemporaryGrant(pending, decisionCausation);
         pending.resolve(decision);
+        if (!approved) {
+            auditPermissionDecision({
+                requestId,
+                sessionId,
+                toolName: pending.toolName,
+                decisionSource: 'approval',
+                policyCode: 'user_approval_denied',
+                reason: 'owner approval denied',
+                permissionMode: pending.permissionMode,
+                agentAid: pending.selfAid,
+                agentName: pending.agentName,
+                role: pending.role,
+                taskId: pending.taskId,
+            });
+        }
         void this.notifyPermissionState(pending, approved
             ? { state: 'approved', requestId, toolName: pending.toolName }
             : {
@@ -446,7 +475,17 @@ export class PermissionGateway {
             refs: { permissionRequestId: requestId, sessionId },
             reason: approved ? undefined : 'denied',
         });
-        this.eventBus?.publish({ type: 'permission:resolved', sessionId, requestId, approved, causation: decisionCausation });
+        this.eventBus?.publish({
+            type: 'permission:resolved',
+            sessionId,
+            requestId,
+            toolName: pending.toolName,
+            approved,
+            ...(approved
+                ? { decisionSource: 'approval' }
+                : { decisionSource: 'approval', policyCode: 'user_approval_denied' }),
+            causation: decisionCausation,
+        });
         return true;
     }
     expireCrossSessionPermission(sessionId, requestId, reason, notifyState = true, cancelled = reason === 'cancelled') {
@@ -458,6 +497,21 @@ export class PermissionGateway {
         this.crossSessionPending.delete(requestId);
         this.syncManagementRevalidationTimer();
         pending.resolve('deny');
+        const decisionSource = 'infrastructure';
+        const policyCode = cancelled ? 'approval_cancelled' : `approval_${reason}`;
+        auditPermissionDecision({
+            requestId,
+            sessionId,
+            toolName: pending.toolName,
+            decisionSource,
+            policyCode,
+            reason,
+            permissionMode: pending.permissionMode,
+            agentAid: pending.selfAid,
+            agentName: pending.agentName,
+            role: pending.role,
+            taskId: pending.taskId,
+        });
         if (notifyState) {
             const failure = permissionFailure(reason);
             void this.notifyPermissionState(pending, {
@@ -481,6 +535,8 @@ export class PermissionGateway {
                 requestId,
                 toolName: pending.toolName,
                 reason,
+                decisionSource: 'infrastructure',
+                policyCode: `approval_${reason}`,
                 causation: decisionCausation,
             });
         }
@@ -492,6 +548,8 @@ export class PermissionGateway {
                 toolName: pending.toolName,
                 reason,
                 approved: false,
+                decisionSource: 'infrastructure',
+                policyCode: `approval_${reason}`,
                 causation: decisionCausation,
             });
         }
@@ -502,6 +560,18 @@ export class PermissionGateway {
         const interactionRouter = context.interactionRouter;
         if (!approval || !interactionRouter) {
             await sendPrompt('当前会话权限不足，且没有可用的 owner 审批通道。');
+            auditPermissionDecision({
+                sessionId,
+                toolName: challenge.toolName,
+                decisionSource: 'infrastructure',
+                policyCode: 'approval_route_unavailable',
+                reason: 'owner approval routing context is unavailable',
+                permissionMode: context.permissionMode,
+                agentAid: context.selfAid,
+                agentName: context.agentName,
+                role: context.role,
+                taskId: context.taskId,
+            });
             return 'deny';
         }
         const { id: requestId, toolName, toolInput, summary: displaySummary, reason } = challenge;
@@ -593,6 +663,10 @@ export class PermissionGateway {
                 approverChannelKey: route.approverChannelKey,
                 approverPrincipalId: route.approverPrincipalId,
                 selfAid: approval.selfAid,
+                agentName: context.agentName,
+                permissionMode: context.permissionMode,
+                role: context.role,
+                taskId: context.taskId,
                 originPrincipalId: approval.originPrincipalId,
                 originAuthRevision: approval.originAuthRevision,
                 reauthorizeApproval: approval.reauthorizeApproval,
@@ -661,7 +735,8 @@ export class PermissionGateway {
         });
         let sent = false;
         try {
-            sent = !!await sendInteractionPayload(route.adapter, envelope, interaction, renderActionAsText(interaction), ownerReplyContext);
+            const receipt = await sendInteractionPayload(route.adapter, envelope, interaction, renderActionAsText(interaction), ownerReplyContext);
+            sent = isInteractionSendAccepted(receipt);
         }
         catch (error) {
             logger.warn(`[PermissionGateway] Owner approval delivery failed: session=${sessionId} tool=${toolName} error=${error instanceof Error ? error.message : String(error)}`);
@@ -700,6 +775,20 @@ export class PermissionGateway {
         this.pending.delete(requestId);
         this.syncManagementRevalidationTimer();
         pending.resolve('deny');
+        const decisionSource = reason === 'denied' ? 'approval' : 'infrastructure';
+        auditPermissionDecision({
+            requestId,
+            sessionId,
+            toolName: pending.toolName,
+            decisionSource,
+            policyCode: `approval_${reason}`,
+            reason,
+            permissionMode: pending.permissionMode,
+            agentAid: pending.selfAid,
+            agentName: pending.agentName,
+            role: pending.role,
+            taskId: pending.taskId,
+        });
         const decisionCausation = deriveCausation(pending.causation);
         recordCausationSpan(decisionCausation, 'permission.decision', {
             status: 'failed',
@@ -713,6 +802,8 @@ export class PermissionGateway {
             toolName: pending.toolName,
             reason,
             approved: false,
+            decisionSource,
+            policyCode: `approval_${reason}`,
             causation: decisionCausation,
         });
         return true;
@@ -725,6 +816,7 @@ export class PermissionGateway {
             ?? context?.approvalRouting?.approverPolicy
             ?? 'requester';
         if (context?.approvalInteractionPolicy === 'deny') {
+            const denialRequestId = `perm-policy-${randomUUID()}`;
             const anomaly = {
                 code: 'runtime_permission_denied',
                 severity: 'warning',
@@ -732,6 +824,12 @@ export class PermissionGateway {
                 occurredAt: Date.now(),
                 toolName,
                 policy: effectiveApproverPolicy,
+                policyCode: 'permission_mode_denied',
+                decisionSource: 'policy',
+                agentAid: context.selfAid,
+                sessionId,
+                requestId: denialRequestId,
+                permissionMode: context.permissionMode,
                 summary: structuredApprovalAuditSummary(toolInput),
                 effect: 'operation_skipped',
             };
@@ -742,10 +840,35 @@ export class PermissionGateway {
                 logger.warn(`[PermissionGateway] Failed to record unattended denial: session=${sessionId} tool=${toolName} error=${error instanceof Error ? error.message : String(error)}`);
             }
             logger.info(`[PermissionGateway] Unattended runtime permission denied: session=${sessionId} tool=${toolName} policy=${effectiveApproverPolicy}`);
+            auditPermissionDecision({
+                requestId: denialRequestId,
+                sessionId,
+                toolName,
+                decisionSource: 'policy',
+                policyCode: 'permission_mode_denied',
+                reason: 'permission mode denied runtime approval',
+                permissionMode: context.permissionMode,
+                agentAid: context.selfAid,
+                agentName: context.agentName,
+                role: context.role,
+                taskId: context.taskId,
+            });
             return 'deny';
         }
         if (!context?.userId) {
             await sendPrompt('当前操作需要授权，但无法验证申请人身份。');
+            auditPermissionDecision({
+                sessionId,
+                toolName,
+                decisionSource: 'infrastructure',
+                policyCode: 'approval_identity_missing',
+                reason: 'approval requester identity is unavailable',
+                permissionMode: context?.permissionMode,
+                agentAid: context?.selfAid,
+                agentName: context?.agentName,
+                role: context?.role,
+                taskId: context?.taskId,
+            });
             return 'deny';
         }
         const grantMatch = permissionGrantMatch(toolName, toolInput, matchOptions);
@@ -803,8 +926,23 @@ export class PermissionGateway {
                 toolName,
                 reason: route.reason,
                 approved: false,
+                decisionSource: 'infrastructure',
+                policyCode: 'approval_route_unavailable',
                 causation: decisionCausation,
             });
+            auditPermissionDecision({
+                requestId,
+                sessionId,
+                toolName,
+                decisionSource: 'infrastructure',
+                policyCode: 'approval_route_unavailable',
+                reason: route.reason,
+                permissionMode: context.permissionMode,
+                agentAid: context.selfAid,
+                agentName: context.agentName,
+                role: context.role,
+                taskId: context.taskId,
+            });
             return 'deny';
         }
         if (route.kind === 'handoff') {
@@ -857,6 +995,7 @@ export class PermissionGateway {
                 approverChannelKey: route.approverChannelKey,
                 approverPrincipalId: route.approverPrincipalId,
                 selfAid: context?.approvalRouting?.selfAid,
+                agentName: context?.agentName,
                 originPrincipalId: context?.approvalRouting?.originPrincipalId,
                 originAuthRevision: context?.approvalRouting?.originAuthRevision,
                 reauthorizeApproval: context?.approvalRouting?.reauthorizeApproval,
@@ -864,6 +1003,9 @@ export class PermissionGateway {
                 interactionRouter: context?.interactionRouter,
                 causation: requestCausation,
                 permissionStateChanged: context?.permissionStateChanged,
+                permissionMode: context?.permissionMode,
+                role: context?.role,
+                taskId: context?.taskId,
             };
             pending.timeout = setTimeout(() => {
                 this.failPendingPermission(sessionId, requestId, 'expired');
@@ -925,7 +1067,7 @@ export class PermissionGateway {
                     : '同操作授权 30 分钟';
                 const fallbackText = `🔐 权限请求 - ${toolName}\n${displaySummary}${reasonLine}\n回复 /perm ${requestId} allow 允许本次 / /perm ${requestId} always ${temporaryGrantLabel} / /perm ${requestId} deny 拒绝`;
                 const result = await sendInteractionPayload(context.adapter, envelope, interaction, fallbackText, context.replyContext);
-                interactionSent = !!result;
+                interactionSent = isInteractionSendAccepted(result);
             }
             catch (err) {
                 // sendInteractionPayload 已内部捕获，但保险起见再 try/catch
@@ -979,7 +1121,24 @@ export class PermissionGateway {
             refs: { permissionRequestId: requestId, sessionId },
             reason: normalizedDecision,
         });
-        this.eventBus?.publish({ type: 'permission:resolved', sessionId, requestId, approved: normalizedDecision !== 'deny', causation: decisionCausation });
+        const decisionSource = 'approval';
+        const policyCode = normalizedDecision === 'deny' ? 'user_approval_denied' : undefined;
+        if (normalizedDecision === 'deny') {
+            auditPermissionDecision({
+                requestId,
+                sessionId,
+                toolName: pending.toolName,
+                decisionSource,
+                policyCode: 'user_approval_denied',
+                reason: 'user approval denied',
+                permissionMode: pending.permissionMode,
+                agentAid: pending.selfAid,
+                agentName: pending.agentName,
+                role: pending.role,
+                taskId: pending.taskId,
+            });
+        }
+        this.eventBus?.publish({ type: 'permission:resolved', sessionId, requestId, toolName: pending.toolName, approved: normalizedDecision !== 'deny', ...(policyCode ? { decisionSource, policyCode } : { decisionSource }), causation: decisionCausation });
         return true;
     }
     /**
@@ -1042,6 +1201,19 @@ export class PermissionGateway {
                 this.clearPendingResources(pending);
                 pending.interactionRouter?.cancel(requestId, reason);
                 pending.resolve('deny');
+                auditPermissionDecision({
+                    requestId,
+                    sessionId,
+                    toolName: pending.toolName,
+                    decisionSource: 'infrastructure',
+                    policyCode: `approval_${reason}`,
+                    reason,
+                    permissionMode: pending.permissionMode,
+                    agentAid: pending.selfAid,
+                    agentName: pending.agentName,
+                    role: pending.role,
+                    taskId: pending.taskId,
+                });
                 this.pending.delete(requestId);
                 const decisionCausation = deriveCausation(pending.causation);
                 recordCausationSpan(decisionCausation, 'permission.decision', {
@@ -1055,6 +1227,8 @@ export class PermissionGateway {
                     requestId,
                     toolName: pending.toolName,
                     reason,
+                    decisionSource: 'infrastructure',
+                    policyCode: `approval_${reason}`,
                     causation: decisionCausation,
                 });
             }