linkshell-cli 0.2.85 → 0.2.87

package/src/runtime/acp/agent-session.ts

@@ -169,11 +169,55 @@ function toolInputFromItem(item: Record<string, unknown>): string | undefined {
   }
   if (itemType === "fileChange") {
     const changes = Array.isArray(item.changes) ? item.changes : [];
-    return summarizeFileChanges(changes);
+    return summarizeFileChanges(changes) ?? firstString(item, ["path", "file", "filePath", "absolutePath", "relativePath"]);
   }
   return stringifyDefined(item.arguments ?? item.input ?? item.toolInput);
 }
 
+function looksLikeDiff(text: string): boolean {
+  const value = text.trim();
+  return (
+    value.startsWith("diff --git ") ||
+    value.startsWith("@@ ") ||
+    value.includes("\n@@ ") ||
+    (value.includes("\n--- ") && value.includes("\n+++ "))
+  );
+}
+
+function collectDiffStrings(value: unknown, depth = 0): string[] {
+  if (depth > 6 || value === undefined || value === null) return [];
+  if (typeof value === "string") return looksLikeDiff(value) ? [value] : [];
+  if (Array.isArray(value)) return value.flatMap((entry) => collectDiffStrings(entry, depth + 1));
+  const raw = asRecord(value);
+  if (!raw) return [];
+  const direct: string[] = [];
+  const nested: string[] = [];
+  for (const [key, entry] of Object.entries(raw)) {
+    const lowerKey = key.toLowerCase();
+    const isDiffField =
+      lowerKey.includes("diff") ||
+      lowerKey.includes("patch") ||
+      lowerKey.includes("unified");
+    if (typeof entry === "string" && isDiffField && entry.trim()) {
+      direct.push(entry);
+    } else if (typeof entry === "object" && entry) {
+      nested.push(...collectDiffStrings(entry, depth + 1));
+    }
+  }
+  return [...direct, ...nested].filter((entry) => looksLikeDiff(entry));
+}
+
+function extractDiffText(value: unknown): string | undefined {
+  const diffs = collectDiffStrings(value)
+    .map((entry) => entry.trim())
+    .filter(Boolean);
+  if (diffs.length === 0) return undefined;
+  return diffs
+    .filter((entry, index, array) => array.indexOf(entry) === index)
+    .join("\n\n")
+    .slice(0, 24_000);
+}
+
 function summarizeFileChanges(changes: unknown[]): string | undefined {
   const lines = changes
     .map((change) => {
@@ -183,7 +227,7 @@ function summarizeFileChanges(changes: unknown[]): string | undefined {
         firstString(raw, ["path", "file", "filePath", "absolutePath", "relativePath"]) ??
         firstString(asRecord(raw.update) ?? {}, ["path", "file", "filePath"]);
       const kind = firstString(raw, ["kind", "type", "operation", "action"]);
-      return [kind, path].filter(Boolean).join(" ");
+      return [kind, path].filter(Boolean).join(" ") || path;
     })
     .filter((line): line is string => Boolean(line));
   return lines.length > 0 ? lines.slice(0, 8).join("\n") : undefined;
@@ -449,7 +493,6 @@ export class AgentSessionProxy {
       method.startsWith("mcpServer/startupStatus/") ||
       method === "thread/status/changed" ||
       method === "thread/tokenUsage/updated" ||
-      method === "turn/diff/updated" ||
       method === "serverRequest/resolved" ||
       method === "mcpServer/oauthLogin/completed"
     ) {
@@ -502,6 +545,9 @@ export class AgentSessionProxy {
       case "item/fileChange/patchUpdated":
         this.handleFilePatchUpdated(params);
         return;
+      case "turn/diff/updated":
+        this.handleTurnDiffUpdated(params);
+        return;
       case "command/exec/outputDelta":
         this.handleCommandExecDelta(params);
         return;
@@ -700,7 +746,7 @@ export class AgentSessionProxy {
     if (!raw) return;
     const itemId = firstString(raw, ["itemId", "id"]) ?? id("file");
     const changes = Array.isArray(raw.changes) ? raw.changes : [];
-    const output = summarizeFileChanges(changes);
+    const output = extractDiffText(raw) ?? summarizeFileChanges(changes);
     const existing = this.toolCalls.get(itemId);
     const toolCall: AgentToolCall = {
       id: itemId,
@@ -714,6 +760,26 @@ export class AgentSessionProxy {
     this.sendUpdate({ kind: "tool_call", toolCall, status: "running" });
   }
 
+  private handleTurnDiffUpdated(params: unknown): void {
+    const raw = asRecord(params);
+    if (!raw) return;
+    const diff = extractDiffText(raw);
+    if (!diff) return;
+    const itemId = firstString(raw, ["itemId", "id", "turnId"]) ?? "workspace-diff";
+    const changes = Array.isArray(raw.changes) ? raw.changes : [];
+    const existing = this.toolCalls.get(itemId);
+    const toolCall: AgentToolCall = {
+      id: itemId,
+      name: existing?.name ?? "文件修改",
+      input: existing?.input ?? summarizeFileChanges(changes),
+      output: diff,
+      createdAt: existing?.createdAt ?? Date.now(),
+      status: existing?.status ?? "running",
+    };
+    this.toolCalls.set(itemId, toolCall);
+    this.sendUpdate({ kind: "tool_call", toolCall, status: "running" });
+  }
+
   private handleCommandExecDelta(params: unknown): void {
     const raw = asRecord(params);
     if (!raw) return;
@@ -766,15 +832,18 @@ export class AgentSessionProxy {
     const itemType = firstString(item, ["type"]);
     const name = toolNameFromItem(item);
     if (!name && !isToolItemType(itemType)) return undefined;
-    const output =
+    const bufferedOutput = this.toolOutputBuffers.get(itemId);
+    const rawOutput =
       firstString(item, ["aggregatedOutput", "output", "stdout", "stderr"]) ??
       stringifyDefined(item.result ?? item.error ?? item.contentItems);
-    const bufferedOutput = this.toolOutputBuffers.get(itemId);
+    const output = itemType === "fileChange"
+      ? extractDiffText(item) ?? bufferedOutput ?? rawOutput
+      : rawOutput ?? bufferedOutput;
     return {
       id: itemId,
       name: name ?? "工具",
       input: toolInputFromItem(item),
-      output: output ?? bufferedOutput,
+      output,
       createdAt: Date.now(),
       status: normalizeToolStatus(item.status, fallbackStatus === "completed"),
     };

package/src/runtime/acp/agent-workspace.ts

@@ -195,12 +195,56 @@ function summarizeFileChanges(changes: unknown[]): string | undefined {
         firstString(raw, ["path", "file", "filePath", "absolutePath", "relativePath"]) ??
         firstString(asRecord(raw.update), ["path", "file", "filePath"]);
       const kind = firstString(raw, ["kind", "type", "operation", "action"]);
-      return [kind, path].filter(Boolean).join(" ");
+      return [kind, path].filter(Boolean).join(" ") || path;
     })
     .filter((line): line is string => Boolean(line));
   return lines.length > 0 ? lines.slice(0, 8).join("\n") : undefined;
 }
 
+function looksLikeDiff(text: string): boolean {
+  const value = text.trim();
+  return (
+    value.startsWith("diff --git ") ||
+    value.startsWith("@@ ") ||
+    value.includes("\n@@ ") ||
+    (value.includes("\n--- ") && value.includes("\n+++ "))
+  );
+}
+
+function collectDiffStrings(value: unknown, depth = 0): string[] {
+  if (depth > 6 || value === undefined || value === null) return [];
+  if (typeof value === "string") return looksLikeDiff(value) ? [value] : [];
+  if (Array.isArray(value)) return value.flatMap((entry) => collectDiffStrings(entry, depth + 1));
+  const raw = asRecord(value);
+  if (!raw) return [];
+  const direct: string[] = [];
+  const nested: string[] = [];
+  for (const [key, entry] of Object.entries(raw)) {
+    const lowerKey = key.toLowerCase();
+    const isDiffField =
+      lowerKey.includes("diff") ||
+      lowerKey.includes("patch") ||
+      lowerKey.includes("unified");
+    if (typeof entry === "string" && isDiffField && entry.trim()) {
+      direct.push(entry);
+    } else if (typeof entry === "object" && entry) {
+      nested.push(...collectDiffStrings(entry, depth + 1));
+    }
+  }
+  return [...direct, ...nested].filter((entry) => looksLikeDiff(entry));
+}
+
+function extractDiffText(value: unknown): string | undefined {
+  const diffs = collectDiffStrings(value)
+    .map((entry) => entry.trim())
+    .filter(Boolean);
+  if (diffs.length === 0) return undefined;
+  return diffs
+    .filter((entry, index, array) => array.indexOf(entry) === index)
+    .join("\n\n")
+    .slice(0, 24_000);
+}
+
 function toolInputFromItem(item: Record<string, unknown>): string | undefined {
   const itemType = firstString(item, ["type"]);
   if (itemType === "commandExecution") {
@@ -211,7 +255,7 @@ function toolInputFromItem(item: Record<string, unknown>): string | undefined {
   }
   if (itemType === "fileChange") {
     const changes = Array.isArray(item.changes) ? item.changes : [];
-    return summarizeFileChanges(changes);
+    return summarizeFileChanges(changes) ?? firstString(item, ["path", "file", "filePath", "absolutePath", "relativePath"]);
   }
   return stringifyDefined(item.arguments ?? item.input ?? item.toolInput);
 }
@@ -645,7 +689,6 @@ export class AgentWorkspaceProxy {
       method.startsWith("mcpServer/startupStatus/") ||
       method === "thread/status/changed" ||
       method === "thread/tokenUsage/updated" ||
-      method === "turn/diff/updated" ||
       method === "serverRequest/resolved" ||
       method === "mcpServer/oauthLogin/completed"
     ) {
@@ -705,6 +748,9 @@ export class AgentWorkspaceProxy {
       case "item/fileChange/patchUpdated":
         this.handleFilePatchUpdated(params);
         return;
+      case "turn/diff/updated":
+        this.handleTurnDiffUpdated(params);
+        return;
       case "command/exec/outputDelta":
         this.handleCommandExecDelta(params);
         return;
@@ -863,7 +909,9 @@ export class AgentWorkspaceProxy {
       this.toolConversationIds.get(itemId) ??
       this.activeConversationId;
     if (!conversationId) return;
-    const output = summarizeFileChanges(Array.isArray(raw.changes) ? raw.changes : []);
+    const output =
+      extractDiffText(raw) ??
+      summarizeFileChanges(Array.isArray(raw.changes) ? raw.changes : []);
     const existing = this.findTool(conversationId, itemId);
     this.upsertTool(conversationId, {
       id: itemId,
@@ -875,6 +923,28 @@ export class AgentWorkspaceProxy {
     });
   }
 
+  private handleTurnDiffUpdated(params: unknown): void {
+    const raw = asRecord(params);
+    if (!raw) return;
+    const conversationId = this.conversationIdFromParams(raw) ?? this.activeConversationId;
+    if (!conversationId) return;
+    const diff = extractDiffText(raw);
+    if (!diff) return;
+    const itemId =
+      firstString(raw, ["itemId", "id", "turnId"]) ??
+      `workspace-diff:${conversationId}`;
+    const existing = this.findTool(conversationId, itemId);
+    const changes = Array.isArray(raw.changes) ? raw.changes : [];
+    this.upsertTool(conversationId, {
+      id: itemId,
+      name: existing?.name ?? "文件修改",
+      input: existing?.input ?? summarizeFileChanges(changes),
+      output: diff,
+      createdAt: existing?.createdAt ?? Date.now(),
+      status: existing?.status ?? "running",
+    });
+  }
+
   private handleCommandExecDelta(params: unknown): void {
     const raw = asRecord(params);
     if (!raw) return;
@@ -968,14 +1038,18 @@ export class AgentWorkspaceProxy {
     const itemType = firstString(item, ["type"]);
     const name = toolNameFromItem(item);
     if (!name && !isToolItemType(itemType)) return undefined;
-    const output =
+    const bufferedOutput = this.toolOutputBuffers.get(itemId);
+    const rawOutput =
       firstString(item, ["aggregatedOutput", "output", "stdout", "stderr"]) ??
       stringifyDefined(item.result ?? item.error ?? item.contentItems);
+    const output = itemType === "fileChange"
+      ? extractDiffText(item) ?? bufferedOutput ?? rawOutput
+      : rawOutput ?? bufferedOutput;
     return {
       id: itemId,
       name: name ?? "工具",
       input: toolInputFromItem(item),
-      output: output ?? this.toolOutputBuffers.get(itemId),
+      output,
       createdAt: Date.now(),
       status: normalizeToolStatus(item.status, fallbackStatus === "completed"),
     };

package/src/runtime/bridge-session.ts

@@ -51,6 +51,7 @@ const HOOK_BODY_LIMIT = 256 * 1024;
 const PERMISSION_REQUEST_TIMEOUT_MS = Number(
   process.env.LINKSHELL_PERMISSION_TIMEOUT_MS ?? 5 * 60_000,
 );
+const LINKSHELL_PERMISSION_GUARD_MARKER = "LINKSHELL_PERMISSION_GUARD";
 
 interface TerminalInstance {
   id: string;
@@ -90,9 +91,81 @@ type HookPermissionChoice =
       optionId?: string;
     };
 
-function isLinkShellHookEntry(entry: unknown, marker: string): boolean {
-  const raw = JSON.stringify(entry);
-  return raw.includes(`/hook?m=${marker}`);
+function isLinkShellHookEntry(entry: unknown, marker?: string): boolean {
+  let raw = "";
+  try {
+    raw = JSON.stringify(entry);
+  } catch {
+    raw = String(entry);
+  }
+  return (
+    (marker ? raw.includes(`/hook?m=${marker}`) : false) ||
+    raw.includes("/hook?m=lsh-") ||
+    (raw.includes("/hook?m=") && raw.includes("LINKSHELL_ID"))
+  );
+}
+
+function withLinkShellHookEntry<T>(
+  entries: unknown[] | undefined,
+  entry: T,
+  priority: "first" | "last",
+): unknown[] {
+  const cleaned = (Array.isArray(entries) ? entries : []).filter((item) => !isLinkShellHookEntry(item));
+  return priority === "first" ? [entry, ...cleaned] : [...cleaned, entry];
+}
+
+function guardPermissionCommandForLinkShell(command: unknown): unknown {
+  if (typeof command !== "string") return command;
+  if (command.includes(LINKSHELL_PERMISSION_GUARD_MARKER)) return command;
+  return [
+    `case "\${LINKSHELL_ID:-}" in lsh-*) exit 0 ;; esac`,
+    `# ${LINKSHELL_PERMISSION_GUARD_MARKER}`,
+    command,
+  ].join("\n");
+}
+
+function guardPermissionHookObjectForLinkShell(
+  hook: Record<string, unknown>,
+): Record<string, unknown> {
+  if (isLinkShellHookEntry(hook)) return hook;
+  const next: Record<string, unknown> = { ...hook };
+  if (typeof next.command === "string") {
+    next.command = guardPermissionCommandForLinkShell(next.command);
+  }
+  if (typeof next.bash === "string") {
+    next.bash = guardPermissionCommandForLinkShell(next.bash);
+  }
+  return next;
+}
+
+function guardPermissionHookEntryForLinkShell(entry: unknown): unknown {
+  if (isLinkShellHookEntry(entry)) return entry;
+  if (typeof entry === "string") return guardPermissionCommandForLinkShell(entry);
+  if (Array.isArray(entry)) return entry.map(guardPermissionHookEntryForLinkShell);
+  if (!entry || typeof entry !== "object") return entry;
+
+  const next = { ...(entry as Record<string, unknown>) };
+  if (Array.isArray(next.hooks)) {
+    next.hooks = next.hooks.map((hook) =>
+      hook && typeof hook === "object" && !Array.isArray(hook)
+        ? guardPermissionHookObjectForLinkShell(hook as Record<string, unknown>)
+        : guardPermissionHookEntryForLinkShell(hook),
+    );
+  }
+  if (typeof next.command === "string" || typeof next.bash === "string") {
+    return guardPermissionHookObjectForLinkShell(next);
+  }
+  return next;
+}
+
+function withBlockingLinkShellPermissionEntry<T>(
+  entries: unknown[] | undefined,
+  entry: T,
+): unknown[] {
+  const cleaned = (Array.isArray(entries) ? entries : [])
+    .filter((item) => !isLinkShellHookEntry(item))
+    .map(guardPermissionHookEntryForLinkShell);
+  return [entry, ...cleaned];
 }
 
 function stringifyHookInput(value: unknown): string {
@@ -645,6 +718,7 @@ export class BridgeSession {
           );
           break;
         }
+        if (envelope.type === "agent.prompt") this.refreshAgentPermissionHooks();
         await this.agentSession.handleEnvelope(envelope);
         break;
       }
@@ -653,8 +727,7 @@ export class BridgeSession {
         if (this.resolvePendingPermission(p.requestId, {
           outcome: p.outcome,
           optionId: p.optionId,
-        })) {
-          this.log(`agent permission response for hook ${p.requestId}: ${p.outcome}:${p.optionId ?? "default"}`);
+        }, "agent.permission.response")) {
           break;
         }
         if (!this.agentSession) {
@@ -714,6 +787,7 @@ export class BridgeSession {
           );
           break;
         }
+        if (envelope.type === "agent.v2.prompt") this.refreshAgentPermissionHooks();
         await this.agentWorkspace.handleEnvelope(envelope);
         break;
       }
@@ -731,11 +805,7 @@ export class BridgeSession {
       }
       case "permission.decision": {
         const p = envelope.payload as { requestId: string; decision: "allow" | "deny" };
-        if (this.resolvePendingPermission(p.requestId, p.decision)) {
-          this.log(`permission decision for ${p.requestId}: ${p.decision}`);
-        } else {
-          this.log(`no pending permission for ${p.requestId}`);
-        }
+        this.resolvePendingPermission(p.requestId, p.decision, "permission.decision");
         break;
       }
       case "tunnel.request": {
@@ -1134,7 +1204,7 @@ export class BridgeSession {
             const requestId = `pr-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
             const permissionSuggestions = hookPermissionSuggestions(event);
             const timeout = setTimeout(() => {
-              if (this.resolvePendingPermission(requestId, "deny")) {
+              if (this.resolvePendingPermission(requestId, "deny", "permission.timeout")) {
                 this.log(`permission request ${requestId} timed out`);
                 this.sendPermissionSnapshot(terminalId, "thinking", "permission timed out");
               }
@@ -1199,6 +1269,26 @@ export class BridgeSession {
     return { server, port, configPath };
   }
 
+  private refreshAgentPermissionHooks(): void {
+    const term = this.terminals.get(DEFAULT_TERMINAL_ID);
+    if (!term?.hookPort) return;
+    const marker = term.hookMarker;
+    const curlCmd = `curl -s -X POST "http://127.0.0.1:${term.hookPort}/hook?m=${marker}&lid=$LINKSHELL_ID" -H 'Content-Type: application/json' --data-binary @-`;
+    const agentProvider = normalizeAgentProvider(this.options.agentProvider ?? "codex");
+    try {
+      if (agentProvider === "claude") {
+        this.setupClaudeHooks(DEFAULT_TERMINAL_ID, curlCmd, [], marker);
+      } else {
+        this.setupCodexHooks(DEFAULT_TERMINAL_ID, curlCmd, marker);
+        if (agentProvider === "custom") {
+          this.setupClaudeHooks(DEFAULT_TERMINAL_ID, curlCmd, [], marker);
+        }
+      }
+    } catch (error) {
+      this.log(`failed to refresh agent permission hooks: ${error instanceof Error ? error.message : String(error)}`);
+    }
+  }
+
   private setupClaudeHooks(terminalId: string, curlCmd: string, args: string[], marker: string): string {
     // Write hooks to ~/.claude/settings.json — Claude Code reads hooks from here
     const claudeDir = join(homedir(), ".claude");
@@ -1233,11 +1323,9 @@ export class BridgeSession {
     // Append our entries to existing hooks (first remove stale linkshell entries)
     const existingHooks = (existing.hooks ?? {}) as Record<string, unknown[]>;
     for (const [eventName, entry] of Object.entries(hookEvents)) {
-      let arr = Array.isArray(existingHooks[eventName]) ? existingHooks[eventName] : [];
-      // Remove any dead linkshell hook entries (from previous instances)
-      arr = arr.filter((e) => !isLinkShellHookEntry(e, marker));
-      arr.push(entry);
-      existingHooks[eventName] = arr;
+      existingHooks[eventName] = eventName === "PermissionRequest"
+        ? withBlockingLinkShellPermissionEntry(existingHooks[eventName], entry)
+        : withLinkShellHookEntry(existingHooks[eventName], entry, "last");
     }
 
     const merged = { ...existing, hooks: existingHooks };
@@ -1298,10 +1386,9 @@ export class BridgeSession {
     try { existing = JSON.parse(readFileSync(hooksPath, "utf8")); } catch { /* doesn't exist yet */ }
     const existingHooks = existing.hooks ?? {};
     for (const [eventName, entry] of Object.entries(hookEvents)) {
-      let arr = Array.isArray(existingHooks[eventName]) ? existingHooks[eventName] : [];
-      arr = arr.filter((e) => !isLinkShellHookEntry(e, marker));
-      arr.push(entry);
-      existingHooks[eventName] = arr;
+      existingHooks[eventName] = eventName === "PermissionRequest"
+        ? withBlockingLinkShellPermissionEntry(existingHooks[eventName], entry)
+        : withLinkShellHookEntry(existingHooks[eventName], entry, "last");
     }
 
     writeFileSync(hooksPath, JSON.stringify({ ...existing, hooks: existingHooks }, null, 2));
@@ -1331,10 +1418,7 @@ export class BridgeSession {
 
     const existingHooks = (existing.hooks ?? {}) as Record<string, unknown[]>;
     for (const [eventName, entry] of Object.entries(hookEvents)) {
-      let arr = Array.isArray(existingHooks[eventName]) ? existingHooks[eventName] : [];
-      arr = arr.filter((e) => !isLinkShellHookEntry(e, marker));
-      arr.push(entry);
-      existingHooks[eventName] = arr;
+      existingHooks[eventName] = withLinkShellHookEntry(existingHooks[eventName], entry, "last");
     }
 
     existing.hooks = existingHooks;
@@ -1366,10 +1450,7 @@ export class BridgeSession {
     try { existing = JSON.parse(readFileSync(hooksPath, "utf8")); } catch { /* doesn't exist yet */ }
     const existingHooks = existing.hooks ?? {};
     for (const [eventName, entry] of Object.entries(hookEvents)) {
-      let arr = Array.isArray(existingHooks[eventName]) ? existingHooks[eventName] : [];
-      arr = arr.filter((e) => !isLinkShellHookEntry(e, marker));
-      arr.push(entry);
-      existingHooks[eventName] = arr;
+      existingHooks[eventName] = withLinkShellHookEntry(existingHooks[eventName], entry, "last");
     }
 
     writeFileSync(hooksPath, JSON.stringify({ version: 1, hooks: existingHooks }, null, 2));
@@ -1626,7 +1707,7 @@ export class BridgeSession {
 
   /** Auto-resolve a single pending permission (user acted in terminal) */
   private autoResolvePending(requestId: string): void {
-    if (this.resolvePendingPermission(requestId, "allow")) {
+    if (this.resolvePendingPermission(requestId, "allow", "terminal.auto")) {
       this.log(`auto-resolved pending permission ${requestId} (user acted in terminal)`);
     }
   }
@@ -1636,15 +1717,24 @@ export class BridgeSession {
     const stack = this.permissionStacks.get(terminalId);
     if (!stack) return;
     for (const entry of [...stack]) {
-      if (this.resolvePendingPermission(entry.requestId, "deny")) {
+      if (this.resolvePendingPermission(entry.requestId, "deny", "terminal.drain")) {
         this.log(`drained pending permission ${entry.requestId}`);
       }
     }
   }
 
-  private resolvePendingPermission(requestId: string, choice: HookPermissionChoice): boolean {
+  private resolvePendingPermission(
+    requestId: string,
+    choice: HookPermissionChoice,
+    source = "unknown",
+  ): boolean {
     const pending = this.pendingPermissions.get(requestId);
-    if (!pending) return false;
+    const outcome = typeof choice === "string" ? choice : choice.outcome;
+    const optionId = typeof choice === "string" ? undefined : choice.optionId;
+    if (!pending) {
+      this.log(`no pending permission for ${requestId} via ${source}: ${outcome}:${optionId ?? "default"}`);
+      return false;
+    }
     this.pendingPermissions.delete(requestId);
     clearTimeout(pending.timeout);
     pending.resolve(this.formatHookPermissionDecision(pending, choice));
@@ -1655,6 +1745,12 @@ export class BridgeSession {
       if (idx >= 0) stack.splice(idx, 1);
       if (stack.length === 0) this.permissionStacks.delete(pending.terminalId);
     }
+    this.log(`resolved permission ${requestId} via ${source}: ${outcome}:${optionId ?? "default"}`);
+    this.sendPermissionSnapshot(
+      pending.terminalId,
+      "thinking",
+      outcome === "allow" ? "permission allowed" : "permission denied",
+    );
     return true;
   }