forgebadger 0.1.1 → 0.1.3

package/dist/gateway/src/services/opencode-notification-settings.d.ts

@@ -1,5 +1,5 @@
 export declare const FORGEBADGER_OPENCODE_PLUGIN_RELATIVE = ".opencode/plugins/forgebadger-permission-notify.js";
-export declare const FORGEBADGER_OPENCODE_PLUGIN_TEMPLATE = "// ForgeBadger managed plugin \u2014 do not edit by hand\nconst GATEWAY_URL = process.env.FORGEBADGER_GATEWAY_URL || \"\";\nconst SESSION_ID = process.env.FORGEBADGER_SESSION_ID || \"\";\nconst ATTACH_TOKEN = process.env.FORGEBADGER_ATTACH_TOKEN || \"\";\n\nfunction permissionText(props) {\n  if (!props || typeof props !== \"object\") return \"OpenCode permission request\";\n  const name = typeof props.permission === \"string\" ? props.permission : \"permission\";\n  const paths = Array.isArray(props.patterns) && props.patterns.length > 0\n    ? \" \" + props.patterns.join(\", \")\n    : \"\";\n  return `${name}${paths}`;\n}\n\nfunction toolName(props) {\n  if (!props || typeof props !== \"object\") return \"OpenCode\";\n  if (typeof props.tool === \"string\") return props.tool;\n  if (props.metadata && typeof props.metadata.tool === \"string\") return props.metadata.tool;\n  return \"OpenCode\";\n}\n\nfunction lifecyclePayload(event) {\n  if (event.type === \"permission.asked\") {\n    return {\n      hook_event_name: \"PermissionRequest\",\n      notification_type: \"permission_prompt\",\n      message: permissionText(event.properties),\n      tool_name: toolName(event.properties)\n    };\n  }\n  if (event.type === \"session.idle\") {\n    return {\n      hook_event_name: \"Stop\",\n      notification_type: \"task_completed\",\n      message: \"OpenCode task completed\"\n    };\n  }\n  if (event.type === \"session.error\") {\n    return {\n      hook_event_name: \"StopFailure\",\n      notification_type: \"task_failed\",\n      message: \"OpenCode task failed\"\n    };\n  }\n  return null;\n}\n\nasync function notify(event) {\n  if (!GATEWAY_URL || !SESSION_ID || !ATTACH_TOKEN) return;\n  const lifecycle = event ? lifecyclePayload(event) : null;\n  if (!lifecycle) return;\n  try {\n    await fetch(\n      `${GATEWAY_URL.replace(/\\/+$/u, \"\")}/api/v1/session-hooks/claude-notification/${encodeURIComponent(SESSION_ID)}`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n          \"x-forgebadger-session-id\": SESSION_ID,\n          \"x-forgebadger-session-token\": ATTACH_TOKEN\n        },\n        body: JSON.stringify({ ...lifecycle, adapter: \"opencode\" }),\n        signal: AbortSignal.timeout(4500)\n      }\n    );\n  } catch {\n    // non-fatal; must never break OpenCode\n  }\n}\n\nexport const ForgeBadgerPermissionNotify = async () => ({\n  event: async ({ event }) => {\n    if (\n      event &&\n      (event.type === \"permission.asked\" || event.type === \"session.idle\" || event.type === \"session.error\")\n    ) await notify(event);\n  }\n});\n";
+export declare const FORGEBADGER_OPENCODE_PLUGIN_TEMPLATE = "// ForgeBadger managed plugin \u2014 do not edit by hand\nconst GATEWAY_URL = process.env.FORGEBADGER_GATEWAY_URL || \"\";\nconst SESSION_ID = process.env.FORGEBADGER_SESSION_ID || \"\";\nconst ATTACH_TOKEN = process.env.FORGEBADGER_ATTACH_TOKEN || \"\";\n\nfunction permissionText(props) {\n  if (!props || typeof props !== \"object\") return \"OpenCode permission request\";\n  const name = typeof props.permission === \"string\" ? props.permission : \"permission\";\n  const paths = Array.isArray(props.patterns) && props.patterns.length > 0\n    ? \" \" + props.patterns.join(\", \")\n    : \"\";\n  return `${name}${paths}`;\n}\n\nfunction toolName(props) {\n  if (!props || typeof props !== \"object\") return \"OpenCode\";\n  if (typeof props.tool === \"string\") return props.tool;\n  if (props.metadata && typeof props.metadata.tool === \"string\") return props.metadata.tool;\n  return \"OpenCode\";\n}\n\nfunction lifecyclePayload(event) {\n  if (event.type === \"session.status\") {\n    return { hook_event_name: \"TaskStarted\" };\n  }\n  if (event.type === \"permission.asked\") {\n    return {\n      hook_event_name: \"PermissionRequest\",\n      notification_type: \"permission_prompt\",\n      message: permissionText(event.properties),\n      tool_name: toolName(event.properties)\n    };\n  }\n  if (event.type === \"session.idle\") {\n    return {\n      hook_event_name: \"Stop\",\n      notification_type: \"task_completed\",\n      message: \"OpenCode task completed\"\n    };\n  }\n  if (event.type === \"session.error\") {\n    return {\n      hook_event_name: \"StopFailure\",\n      notification_type: \"task_failed\",\n      message: \"OpenCode task failed\",\n      ...(typeof event.properties?.error?.name === \"string\" ? { error_type: event.properties.error.name } : {}),\n      ...(typeof event.properties?.error?.data?.message === \"string\" ? { error_message: event.properties.error.data.message } : {})\n    };\n  }\n  return null;\n}\n\nasync function notify(event) {\n  if (!GATEWAY_URL || !SESSION_ID || !ATTACH_TOKEN) return;\n  const lifecycle = event ? event.hookPayload || lifecyclePayload(event) : null;\n  if (!lifecycle) return;\n  try {\n    const response = await fetch(\n      `${GATEWAY_URL.replace(/\\/+$/u, \"\")}/api/v1/session-hooks/claude-notification/${encodeURIComponent(SESSION_ID)}`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n          \"x-forgebadger-session-id\": SESSION_ID,\n          \"x-forgebadger-session-token\": ATTACH_TOKEN\n        },\n        body: JSON.stringify({ ...lifecycle, adapter: \"opencode\", session_id: event.session_id, ...event.summaryFields }),\n        signal: AbortSignal.timeout(4500)\n      }\n    );\n    if (!response.ok) {\n      const hint = response.status === 401\n        ? \" Restart this CLI session from ForgeBadger to refresh its notification identity.\"\n        : \" Check that the ForgeBadger Gateway is available.\";\n      console.warn(\"[ForgeBadger notifications] Delivery failed (HTTP \" + response.status + \").\" + hint);\n    }\n  } catch {\n    // Fail-open; never print credentials, response bodies, or exception messages.\n    console.warn(\"[ForgeBadger notifications] Delivery failed: could not reach Gateway.\");\n  }\n}\n\n// Pending UI state, not approval policy names, decides whether a person is needed.\nexport const ForgeBadgerPermissionNotify = async ({ client } = {}) => {\n  const active = new Set();\n  const pending = new Map();\n  const messages = new Map();\n  const latestUser = new Map();\n  const rounds = new Map();\n  const generations = new Map();\n  const omittedMessages = new Set();\n  let detailsDisabled = false;\n  const boundedSet = (map, key, value, max = 128) => {\n    map.set(key, value);\n    if (map.size > max) map.delete(map.keys().next().value);\n  };\n  const messageText = (message) => message && !message.omitted ? [...message.parts.values()].join(\"\\n\") : \"\";\n  const capture = (event) => {\n    if (detailsDisabled) return;\n    const info = event.properties?.info;\n    const part = event.properties?.part;\n    const value = info || part;\n    const id = info?.id || part?.messageID;\n    if (!value || typeof id !== \"string\" || typeof value.sessionID !== \"string\") return;\n    const key = value.sessionID + \":\" + id;\n    const cached = messages.get(key) || { parts: new Map(), id, sessionID: value.sessionID };\n    if (omittedMessages.has(key)) { cached.omitted = true; cached.parts.clear(); }\n    if (event.type === \"message.updated\" && info) {\n      // Copy identity/finality only; never cache the full message or reasoning.\n      Object.assign(cached, { role: info.role, parentID: info.parentID, finish: info.finish,\n        completed: info.time?.completed, error: Boolean(info.error) });\n      if (info.role === \"user\") boundedSet(latestUser, info.sessionID, id);\n    } else if (event.type === \"message.part.updated\" && part?.type === \"text\") {\n      // Oversized fields are omitted whole, before any Gateway-side redaction.\n      if (part.synthetic || typeof part.text !== \"string\" || typeof part.id !== \"string\"\n        || Buffer.byteLength(part.text, \"utf8\") > 32 * 1024 || (!cached.parts.has(part.id) && cached.parts.size >= 8)) {\n        cached.omitted = true; cached.parts.clear();\n      } else if (!cached.omitted) cached.parts.set(part.id, part.text);\n    }\n    messages.set(key, cached);\n    if (messages.size > 32) {\n      const evicted = messages.keys().next().value;\n      messages.delete(evicted); omittedMessages.add(evicted);\n      // Tombstones prevent an evicted first part from being reconstructed as\n      // a tail-only reply. If even tombstones fill, disable details fail-closed.\n      if (omittedMessages.size > 128) { detailsDisabled = true; messages.clear(); omittedMessages.clear(); }\n    }\n  };\n  const remember = (id) => {\n    active.add(id);\n    if (active.size > 256) active.delete(active.values().next().value);\n  };\n  const rootSession = async (id) => {\n    try {\n      // v1 SDK uses path.id; v2 uses sessionID. Each ignores the other key.\n      const response = await client.session.get({ path: { id }, sessionID: id }, { signal: AbortSignal.timeout(1500) });\n      return response.data?.id === id && !response.data.parentID;\n    } catch { return false; }\n  };\n  return { event: async ({ event }) => {\n    if ([\"message.updated\", \"message.part.updated\"].includes(event?.type)) { capture(event); return; }\n    const props = event?.properties;\n    const id = props?.sessionID;\n    if (!event || !props || typeof id !== \"string\") return;\n    if (event.type === \"session.status\" && [\"busy\", \"retry\"].includes(props.status?.type)) {\n      const first = !active.has(id);\n      const turn = first ? latestUser.get(id) : rounds.get(id);\n      const generation = first ? {} : generations.get(id);\n      if (first) { boundedSet(generations, id, generation); if (turn) boundedSet(rounds, id, turn); }\n      const fields = turn ? { turn_id: turn } : {};\n      const prompt = first && turn ? messageText(messages.get(id + \":\" + turn)) : \"\";\n      remember(id);\n      if (await rootSession(id)) {\n        if (!active.has(id) || generations.get(id) !== generation) return;\n        if (prompt) {\n          await notify({ session_id: id, summaryFields: fields,\n            hookPayload: { hook_event_name: \"UserPromptSubmit\", prompt } });\n        }\n        if (!active.has(id) || generations.get(id) !== generation) return;\n        await notify({ ...event, session_id: id, summaryFields: fields });\n      }\n      return;\n    }\n    if (event.type === \"permission.replied\") {\n      const timer = pending.get(props.requestID);\n      if (timer) clearTimeout(timer);\n      pending.delete(props.requestID);\n      return;\n    }\n    if (event.type === \"permission.asked\") {\n      if (typeof props.id !== \"string\" || pending.has(props.id) || pending.size >= 128) return;\n      const timer = setTimeout(async () => {\n        try {\n          const response = await client.permission.list({}, { signal: AbortSignal.timeout(1500) });\n          // An auto responder may have consumed the request without a reply\n          // event reaching this plugin. Check the current server pending list.\n          if (pending.get(props.id) !== timer || !Array.isArray(response.data)\n            || !response.data.some(request => request.id === props.id && request.sessionID === id)) return;\n          await notify({ ...event, properties: props, session_id: id });\n        } catch { /* No confirmed pending request: do not invent an approval. */ }\n        finally { if (pending.get(props.id) === timer) pending.delete(props.id); }\n      }, 1000);\n      timer.unref?.();\n      pending.set(props.id, timer);\n      return;\n    }\n    if (event.type !== \"session.idle\" && event.type !== \"session.error\") return;\n    if (!active.delete(id)) return;\n    const generation = generations.get(id);\n    const turn = rounds.get(id);\n    const final = turn && [...messages.values()].filter(message => message.sessionID === id && message.parentID === turn\n      && message.role === \"assistant\" && message.finish === \"stop\" && typeof message.completed === \"number\" && !message.error)\n      .sort((a, b) => b.completed - a.completed)[0];\n    const text = messageText(final);\n    const summaryFields = { ...(turn ? { turn_id: turn } : {}),\n      ...(event.type === \"session.idle\" && text ? { last_assistant_message: text } : {}) };\n    // Freeze before awaiting network I/O. A new round cannot change this card.\n    rounds.delete(id);\n    if (latestUser.get(id) === turn) latestUser.delete(id);\n    for (const [key, message] of messages) if (message.sessionID === id && (message.id === turn || message.parentID === turn)) messages.delete(key);\n    if (!(await rootSession(id))) return;\n    // Preserve an old identified result only when the new round is identified\n    // too: the Gateway can then reject its stale work-state transition.\n    if (generations.get(id) !== generation && (!turn || !rounds.get(id))) return;\n    await notify({ ...event, session_id: id, summaryFields });\n  } };\n};\n\n";
 export declare function ensureForgeBadgerOpenCodePlugin(projectRoot: string): Promise<{
     path: string;
     changed: boolean;

package/dist/gateway/src/services/opencode-notification-settings.js

@@ -24,6 +24,9 @@ function toolName(props) {
 }
 
 function lifecyclePayload(event) {
+  if (event.type === "session.status") {
+    return { hook_event_name: "TaskStarted" };
+  }
   if (event.type === "permission.asked") {
     return {
       hook_event_name: "PermissionRequest",
@@ -43,7 +46,9 @@ function lifecyclePayload(event) {
     return {
       hook_event_name: "StopFailure",
       notification_type: "task_failed",
-      message: "OpenCode task failed"
+      message: "OpenCode task failed",
+      ...(typeof event.properties?.error?.name === "string" ? { error_type: event.properties.error.name } : {}),
+      ...(typeof event.properties?.error?.data?.message === "string" ? { error_message: event.properties.error.data.message } : {})
     };
   }
   return null;
@@ -51,10 +56,10 @@ function lifecyclePayload(event) {
 
 async function notify(event) {
   if (!GATEWAY_URL || !SESSION_ID || !ATTACH_TOKEN) return;
-  const lifecycle = event ? lifecyclePayload(event) : null;
+  const lifecycle = event ? event.hookPayload || lifecyclePayload(event) : null;
   if (!lifecycle) return;
   try {
-    await fetch(
+    const response = await fetch(
       \`\${GATEWAY_URL.replace(/\\/+$/u, "")}/api/v1/session-hooks/claude-notification/\${encodeURIComponent(SESSION_ID)}\`,
       {
         method: "POST",
@@ -63,23 +68,148 @@ async function notify(event) {
           "x-forgebadger-session-id": SESSION_ID,
           "x-forgebadger-session-token": ATTACH_TOKEN
         },
-        body: JSON.stringify({ ...lifecycle, adapter: "opencode" }),
+        body: JSON.stringify({ ...lifecycle, adapter: "opencode", session_id: event.session_id, ...event.summaryFields }),
         signal: AbortSignal.timeout(4500)
       }
     );
+    if (!response.ok) {
+      const hint = response.status === 401
+        ? " Restart this CLI session from ForgeBadger to refresh its notification identity."
+        : " Check that the ForgeBadger Gateway is available.";
+      console.warn("[ForgeBadger notifications] Delivery failed (HTTP " + response.status + ")." + hint);
+    }
   } catch {
-    // non-fatal; must never break OpenCode
+    // Fail-open; never print credentials, response bodies, or exception messages.
+    console.warn("[ForgeBadger notifications] Delivery failed: could not reach Gateway.");
   }
 }
 
-export const ForgeBadgerPermissionNotify = async () => ({
-  event: async ({ event }) => {
-    if (
-      event &&
-      (event.type === "permission.asked" || event.type === "session.idle" || event.type === "session.error")
-    ) await notify(event);
-  }
-});
+// Pending UI state, not approval policy names, decides whether a person is needed.
+export const ForgeBadgerPermissionNotify = async ({ client } = {}) => {
+  const active = new Set();
+  const pending = new Map();
+  const messages = new Map();
+  const latestUser = new Map();
+  const rounds = new Map();
+  const generations = new Map();
+  const omittedMessages = new Set();
+  let detailsDisabled = false;
+  const boundedSet = (map, key, value, max = 128) => {
+    map.set(key, value);
+    if (map.size > max) map.delete(map.keys().next().value);
+  };
+  const messageText = (message) => message && !message.omitted ? [...message.parts.values()].join("\\n") : "";
+  const capture = (event) => {
+    if (detailsDisabled) return;
+    const info = event.properties?.info;
+    const part = event.properties?.part;
+    const value = info || part;
+    const id = info?.id || part?.messageID;
+    if (!value || typeof id !== "string" || typeof value.sessionID !== "string") return;
+    const key = value.sessionID + ":" + id;
+    const cached = messages.get(key) || { parts: new Map(), id, sessionID: value.sessionID };
+    if (omittedMessages.has(key)) { cached.omitted = true; cached.parts.clear(); }
+    if (event.type === "message.updated" && info) {
+      // Copy identity/finality only; never cache the full message or reasoning.
+      Object.assign(cached, { role: info.role, parentID: info.parentID, finish: info.finish,
+        completed: info.time?.completed, error: Boolean(info.error) });
+      if (info.role === "user") boundedSet(latestUser, info.sessionID, id);
+    } else if (event.type === "message.part.updated" && part?.type === "text") {
+      // Oversized fields are omitted whole, before any Gateway-side redaction.
+      if (part.synthetic || typeof part.text !== "string" || typeof part.id !== "string"
+        || Buffer.byteLength(part.text, "utf8") > 32 * 1024 || (!cached.parts.has(part.id) && cached.parts.size >= 8)) {
+        cached.omitted = true; cached.parts.clear();
+      } else if (!cached.omitted) cached.parts.set(part.id, part.text);
+    }
+    messages.set(key, cached);
+    if (messages.size > 32) {
+      const evicted = messages.keys().next().value;
+      messages.delete(evicted); omittedMessages.add(evicted);
+      // Tombstones prevent an evicted first part from being reconstructed as
+      // a tail-only reply. If even tombstones fill, disable details fail-closed.
+      if (omittedMessages.size > 128) { detailsDisabled = true; messages.clear(); omittedMessages.clear(); }
+    }
+  };
+  const remember = (id) => {
+    active.add(id);
+    if (active.size > 256) active.delete(active.values().next().value);
+  };
+  const rootSession = async (id) => {
+    try {
+      // v1 SDK uses path.id; v2 uses sessionID. Each ignores the other key.
+      const response = await client.session.get({ path: { id }, sessionID: id }, { signal: AbortSignal.timeout(1500) });
+      return response.data?.id === id && !response.data.parentID;
+    } catch { return false; }
+  };
+  return { event: async ({ event }) => {
+    if (["message.updated", "message.part.updated"].includes(event?.type)) { capture(event); return; }
+    const props = event?.properties;
+    const id = props?.sessionID;
+    if (!event || !props || typeof id !== "string") return;
+    if (event.type === "session.status" && ["busy", "retry"].includes(props.status?.type)) {
+      const first = !active.has(id);
+      const turn = first ? latestUser.get(id) : rounds.get(id);
+      const generation = first ? {} : generations.get(id);
+      if (first) { boundedSet(generations, id, generation); if (turn) boundedSet(rounds, id, turn); }
+      const fields = turn ? { turn_id: turn } : {};
+      const prompt = first && turn ? messageText(messages.get(id + ":" + turn)) : "";
+      remember(id);
+      if (await rootSession(id)) {
+        if (!active.has(id) || generations.get(id) !== generation) return;
+        if (prompt) {
+          await notify({ session_id: id, summaryFields: fields,
+            hookPayload: { hook_event_name: "UserPromptSubmit", prompt } });
+        }
+        if (!active.has(id) || generations.get(id) !== generation) return;
+        await notify({ ...event, session_id: id, summaryFields: fields });
+      }
+      return;
+    }
+    if (event.type === "permission.replied") {
+      const timer = pending.get(props.requestID);
+      if (timer) clearTimeout(timer);
+      pending.delete(props.requestID);
+      return;
+    }
+    if (event.type === "permission.asked") {
+      if (typeof props.id !== "string" || pending.has(props.id) || pending.size >= 128) return;
+      const timer = setTimeout(async () => {
+        try {
+          const response = await client.permission.list({}, { signal: AbortSignal.timeout(1500) });
+          // An auto responder may have consumed the request without a reply
+          // event reaching this plugin. Check the current server pending list.
+          if (pending.get(props.id) !== timer || !Array.isArray(response.data)
+            || !response.data.some(request => request.id === props.id && request.sessionID === id)) return;
+          await notify({ ...event, properties: props, session_id: id });
+        } catch { /* No confirmed pending request: do not invent an approval. */ }
+        finally { if (pending.get(props.id) === timer) pending.delete(props.id); }
+      }, 1000);
+      timer.unref?.();
+      pending.set(props.id, timer);
+      return;
+    }
+    if (event.type !== "session.idle" && event.type !== "session.error") return;
+    if (!active.delete(id)) return;
+    const generation = generations.get(id);
+    const turn = rounds.get(id);
+    const final = turn && [...messages.values()].filter(message => message.sessionID === id && message.parentID === turn
+      && message.role === "assistant" && message.finish === "stop" && typeof message.completed === "number" && !message.error)
+      .sort((a, b) => b.completed - a.completed)[0];
+    const text = messageText(final);
+    const summaryFields = { ...(turn ? { turn_id: turn } : {}),
+      ...(event.type === "session.idle" && text ? { last_assistant_message: text } : {}) };
+    // Freeze before awaiting network I/O. A new round cannot change this card.
+    rounds.delete(id);
+    if (latestUser.get(id) === turn) latestUser.delete(id);
+    for (const [key, message] of messages) if (message.sessionID === id && (message.id === turn || message.parentID === turn)) messages.delete(key);
+    if (!(await rootSession(id))) return;
+    // Preserve an old identified result only when the new round is identified
+    // too: the Gateway can then reject its stale work-state transition.
+    if (generations.get(id) !== generation && (!turn || !rounds.get(id))) return;
+    await notify({ ...event, session_id: id, summaryFields });
+  } };
+};
+
 `;
 export async function ensureForgeBadgerOpenCodePlugin(projectRoot) {
     // Throws on path traversal / denied roots / symlink escapes. Security

package/dist/gateway/src/services/opencode-notification-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"opencode-notification-settings.js","sourceRoot":"","sources":["../../../src/services/opencode-notification-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,CAAC,MAAM,oCAAoC,GAAG,oDAAoD,CAAC;AAEzG,MAAM,CAAC,MAAM,oCAAoC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8EnD,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,WAAmB;IAEnB,sEAAsE;IACtE,kCAAkC;IAClC,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,oCAAoC,CAAC,CAAC;IAElF,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,6DAA6D,UAAU,GAAG,EAAE,KAAK,CAAC,CAAC;YAChG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,oCAAoC,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,SAAS,CAAC,UAAU,EAAE,oCAAoC,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+DAA+D;QAC/D,OAAO,CAAC,IAAI,CAAC,8DAA8D,UAAU,GAAG,EAAE,KAAK,CAAC,CAAC;QACjG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}
+{"version":3,"file":"opencode-notification-settings.js","sourceRoot":"","sources":["../../../src/services/opencode-notification-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,CAAC,MAAM,oCAAoC,GAAG,oDAAoD,CAAC;AAEzG,MAAM,CAAC,MAAM,oCAAoC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgNnD,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,WAAmB;IAEnB,sEAAsE;IACtE,kCAAkC;IAClC,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,oCAAoC,CAAC,CAAC;IAElF,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,6DAA6D,UAAU,GAAG,EAAE,KAAK,CAAC,CAAC;YAChG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,oCAAoC,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,SAAS,CAAC,UAAU,EAAE,oCAAoC,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+DAA+D;QAC/D,OAAO,CAAC,IAAI,CAAC,8DAA8D,UAAU,GAAG,EAAE,KAAK,CAAC,CAAC;QACjG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/dist/gateway/src/services/platform-commands/actions.d.ts

@@ -1,71 +1,30 @@
-import { z } from 'zod';
 import { PlatformActionRepository, type ActionIntent } from '../../db/repositories/platform-action-repository.js';
-import { CopilotGrantRepository, type CopilotGrant } from '../../db/repositories/copilot-grant-repository.js';
-import type { CommandContext, PlatformCommand } from './types.js';
+import type { CommandContext, PlatformCommand, CopilotApprovalRevalidation } from './types.js';
 export declare function canonical(value: unknown): string;
 export declare function canonicalRoot(value: string): string;
-export declare const createGrantSchema: z.ZodEffects<z.ZodObject<{
-    name: z.ZodString;
-    projectIds: z.ZodArray<z.ZodString, "many">;
-    allOperations: z.ZodDefault<z.ZodBoolean>;
-    capabilities: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    allowedRoots: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
-    expiresAt: z.ZodNullable<z.ZodNumber>;
-    maxActions: z.ZodNullable<z.ZodNumber>;
-    maxConcurrency: z.ZodDefault<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    name: string;
-    expiresAt: number | null;
-    maxActions: number | null;
-    maxConcurrency: number;
-    projectIds: string[];
-    allOperations: boolean;
-    allowedRoots: string[];
-    capabilities?: string[] | undefined;
-}, {
-    name: string;
-    expiresAt: number | null;
-    maxActions: number | null;
-    projectIds: string[];
-    capabilities?: string[] | undefined;
-    maxConcurrency?: number | undefined;
-    allOperations?: boolean | undefined;
-    allowedRoots?: string[] | undefined;
-}>, {
-    name: string;
-    expiresAt: number | null;
-    maxActions: number | null;
-    maxConcurrency: number;
-    projectIds: string[];
-    allOperations: boolean;
-    allowedRoots: string[];
-    capabilities?: string[] | undefined;
-}, {
-    name: string;
-    expiresAt: number | null;
-    maxActions: number | null;
-    projectIds: string[];
-    capabilities?: string[] | undefined;
-    maxConcurrency?: number | undefined;
-    allOperations?: boolean | undefined;
-    allowedRoots?: string[] | undefined;
-}>;
+/** Loud terminal denial for approval decisions that reached an already-expired
+ * intent the decision origin may not renew. Silence is not consent: the run is
+ * left awaiting an explicit reject, never an approval that can never execute. */
+export declare class PlatformApprovalExpiredError extends Error {
+    constructor(message?: string);
+}
 export declare class PlatformActions {
     readonly context: CommandContext;
     readonly commands: Map<string, PlatformCommand>;
     readonly intents: PlatformActionRepository;
-    readonly grants: CopilotGrantRepository;
     constructor(context: CommandContext, commands: Map<string, PlatformCommand>);
     private activeActor;
-    createGrant(raw: unknown): CopilotGrant;
-    assertGrant(id: string): CopilotGrant;
-    private checkScope;
-    private checkMemoryScope;
     private checkPolicy;
+    private checkCopilotScope;
+    private isOriginSessionMemory;
+    private originKind;
     preview(raw: unknown): ActionIntent;
-    decide(id: string, digest: string, approve: boolean): ActionIntent;
     private checkChannelOrigin;
+    private commandContext;
     private check;
+    /** Exact approval only: caller revalidates, then consumes the pending action in
+     * the same immediate decision transaction. This never creates a replacement intent. */
+    revalidateCopilotApproval(request: CopilotApprovalRevalidation): ActionIntent;
     execute(id: string): Promise<import("../../db/repositories/platform-action-repository.js").ActionReceipt>;
     private claim;
     executeOwner(commandId: string, input: unknown, idempotencyKey: string): Promise<unknown>;