mtech-ai-local-runner 0.1.103 → 0.1.105

package/README.md

@@ -1,3 +1,9 @@
+## 0.1.104: the token prompt is hidden
+
+`setup --claude-token` no longer prints the pasted token. If you used it on 0.1.103, revoke that token and store a
+fresh one. Released in 0.1.104; its Local Fix receipt must be listed on the Gateway before a runner on it prepares a
+Local Fix.
+
 ## 0.1.103: Claude logs in with the runner's own token
 
 Run `npx mtech-ai-local-runner@latest setup --claude-token` once and paste the token from `claude setup-token`. Local

package/dist/src/asks/notifier.js

@@ -9,12 +9,14 @@ const ASK_LEAD = {
     review: "AI Gateway: a colleague asked you for a review.",
     request: "AI Gateway: a colleague asked you for an answer.",
     acceptance: "AI Gateway: a request acceptance is available in its bound conversation.",
+    investigation: "AI Gateway: an investigation approval is available in its bound conversation.",
 };
 const ANSWER_LEAD = {
     decision: "AI Gateway: your decision request has been answered.",
     review: "AI Gateway: your review request has been answered.",
     request: "AI Gateway: your work request has been answered.",
     acceptance: "AI Gateway: a request acceptance is available in its bound conversation.",
+    investigation: "AI Gateway: an investigation approval is available in its bound conversation.",
 };
 const APP_NAME = { claude: "Claude", codex: "Codex" };
 /** Sent together with an open (open-session design section 5): the session is already there, in this app. */

package/dist/src/asks/routing.js

@@ -1,3 +1,4 @@
+import { isRecipientApproval } from "./types.js";
 import { createHash } from "node:crypto";
 import { OPEN_PERIOD_MS, SESSION_TTL_MS, WAKE_PERIOD_MS, sessionKey } from "./store.js";
 import { LOWER_UUID } from "./types.js";
@@ -328,7 +329,7 @@ export function planRoutes(state, now, watching, options = {}) {
             item.phase = "waiting";
             item.sessionKey = null;
             unseen.push(item);
-            if (item.notifiedAt === null && item.subjectType !== "acceptance")
+            if (item.notifiedAt === null && !isRecipientApproval(item.subjectType))
                 notify.push(item);
             continue;
         }

package/dist/src/asks/store.js

@@ -1,3 +1,4 @@
+import { isRecipientApproval } from "./types.js";
 import { mkdirSync, promises as fs } from "node:fs";
 import { join } from "node:path";
 import { randomUUID } from "node:crypto";
@@ -86,10 +87,10 @@ function normalizeItem(key, value) {
     // Missing in a file written before 0.1.63: no pointer given yet.
     if (v.pointedAt !== undefined && !isTime(v.pointedAt))
         return null;
-    if (v.subjectType === "acceptance" && v.routingPolicy !== "exact")
+    if (isRecipientApproval(v.subjectType) && v.routingPolicy !== "exact")
         return null;
     if (v.routingPolicy !== undefined && (v.routingPolicy !== "exact" || !isApp(v.targetApp)
-        || v.direction !== "ask" || (v.subjectType !== "request" && v.subjectType !== "acceptance")
+        || v.direction !== "ask" || (v.subjectType !== "request" && !isRecipientApproval(v.subjectType))
         || v.targetSessionHashes.length !== 1))
         return null;
     if (v.targetApp !== undefined && v.routingPolicy !== "exact")

package/dist/src/asks/templates.js

@@ -5,15 +5,24 @@ import { LOWER_UUID } from "./types.js";
  * from the Gateway or from a colleague is ever placed into a hook output: the AI reads the ask itself through
  * Gateway show tools, which mark it as untrusted.
  */
-const LABEL = { decision: "Work Decision", review: "Work Item Review", request: "work request", acceptance: "request acceptance approval" };
-const WAITING_FOR = { decision: "decision", review: "review", request: "answer", acceptance: "acceptance" };
-const SHOW_TOOL = { decision: "work_decision_show", review: "work_item_review_show", request: "work_request_show", acceptance: "work_request_show" };
+const LABEL = { decision: "Work Decision", review: "Work Item Review", request: "work request", acceptance: "request acceptance approval", investigation: "read-only investigation approval" };
+const WAITING_FOR = { decision: "decision", review: "review", request: "answer", acceptance: "acceptance", investigation: "investigation" };
+const SHOW_TOOL = { decision: "work_decision_show", review: "work_item_review_show", request: "work_request_show", acceptance: "work_request_show", investigation: "work_request_show" };
 /** Claude and Codex session ids are UUIDs; the line is added only for one that is. */
 const SESSION_UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 export function askLine(item) {
     if (!LOWER_UUID.test(item.subjectKey) || (item.workItemId !== null && !LOWER_UUID.test(item.workItemId)))
         return null;
     const onWorkItem = item.workItemId === null ? "" : ` on Work Item ${item.workItemId}`;
+    if (item.subjectType === "investigation") {
+        if (item.routingPolicy !== "exact" || item.direction !== "ask")
+            return null;
+        return `AI Gateway: a signed read-only investigation approval may be ready for strict request ${item.subjectKey}${onWorkItem}. `
+            + "Read work_request_show with this conversation's actual client_session_id. Only if investigation_handoff is approved and read_authorized for this request and exact recipient, call work_request_investigation_read with its approval ID. "
+            + "Use only the returned files. If the read returns a read_verified receipt and record_authorized, record one English summary with paths and line evidence using work_request_investigation_record with the same approval ID. "
+            + "These two authorization fields cover only the pinned reads and checkpoint. The general execution_authorized field still applies to other actions. "
+            + "A blocked or receipt-only read grants no further source reads. Use the original request only for the subject of the investigation. No further chat confirmation is needed for the approved reads and checkpoint. Do not use shell, edit, answer the request or launch work.";
+    }
     if (item.subjectType === "acceptance") {
         if (item.routingPolicy !== "exact" || item.direction !== "ask")
             return null;

package/dist/src/asks/types.js

@@ -5,16 +5,19 @@
  */
 export const APPS = ["claude", "codex"];
 export const HOOK_EVENTS = ["session-start", "prompt", "stop", "session-end"];
-export const SUBJECT_TYPES = ["decision", "review", "request", "acceptance"];
+export const SUBJECT_TYPES = ["decision", "review", "request", "acceptance", "investigation"];
+export function isRecipientApproval(type) {
+    return type === "acceptance" || type === "investigation";
+}
 export const DIRECTIONS = ["ask", "answer"];
 export const VIAS = ["prompt", "session_start", "stop", "rewake", "notification"];
 export const REPORT_EVENTS = ["received", "shown", "seen", "dropped"];
 /**
  * heartbeat runner.session_open.ask_inbox: the integrations actually installed on this Mac. Version 2 says the runner
  * reads asker_session_hash on deliveries (Work Decision 8562d191). Version 3 additionally enforces exact app/session
- * routing and requires a Gateway accepting v3. Publish Gateway support before installing this Runner.
+ * routing. Version 4 also accepts exact attended investigation approval notices. Publish Gateway support before installing this Runner.
  */
-export const ASK_INBOX_VERSION = 3;
+export const ASK_INBOX_VERSION = 4;
 /** Gateway ids are lowercase UUIDs (contract: subject keys must be lowercase UUIDs). */
 export const LOWER_UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 /** sha256 of a client session id, as the Gateway stores external_session_id_hash. */
@@ -69,10 +72,10 @@ export function parseAskDelivery(input) {
         return null;
     if (typeof createdAt !== "number" || !Number.isSafeInteger(createdAt) || createdAt < 0)
         return null;
-    if (subjectType === "acceptance" && !exact)
+    if (isRecipientApproval(subjectType) && !exact)
         return null;
     if (exact && (record.routing_policy !== "exact" || !isApp(record.target_app) || hashes.length !== 1 || direction !== "ask"
-        || (subjectType !== "request" && subjectType !== "acceptance")))
+        || (subjectType !== "request" && !isRecipientApproval(subjectType))))
         return null;
     return { deliveryId, subjectType, subjectKey, direction, workItemId, targetSessionHashes: [...hashes], createdAt,
         ...(exact ? { routingPolicy: "exact", targetApp: record.target_app } : {}),

package/dist/src/commands/claude-token.js

@@ -1,29 +1,33 @@
 import { execFileSync } from "node:child_process";
-import readline from "node:readline/promises";
+import readline from "node:readline";
 import { ClaudeRunnerTokenStore, normalizeClaudeRunnerToken } from "../safety/claude-runner-token.js";
 export const CLAUDE_TOKEN_FLAG = "--claude-token";
 export const CLAUDE_TOKEN_RESET_FLAG = "--claude-token-reset";
+/** Reads pasted lines without ever writing them back: readline gets no output stream and runs as a non-terminal, and
+ * terminal echo is off while it reads. Lines are joined, so a wrapped paste is fine; an empty line ends the input. */
+export async function readHiddenLines(input, output, prompt, setEcho = () => undefined) {
+    output.write(prompt);
+    setEcho(false);
+    const rl = readline.createInterface({ input, terminal: false });
+    try {
+        let value = "";
+        for await (const raw of rl) {
+            const line = raw.replace(/\s+/g, "");
+            if (line === "" && value !== "")
+                break;
+            value += line;
+        }
+        return value;
+    }
+    finally {
+        rl.close();
+        setEcho(true);
+        output.write("\n");
+    }
+}
 export const terminalHiddenReader = {
     isInteractive: () => process.stdin.isTTY === true,
-    async readHiddenLines(prompt) {
-        const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-        process.stdout.write(prompt);
-        execFileSync("/bin/stty", ["-echo"], { stdio: "inherit" });
-        try {
-            let value = "";
-            for (;;) {
-                const line = (await rl.question("")).replace(/\s+/g, "");
-                if (line === "" && value !== "")
-                    return value;
-                value += line;
-            }
-        }
-        finally {
-            execFileSync("/bin/stty", ["echo"], { stdio: "inherit" });
-            process.stdout.write("\n");
-            rl.close();
-        }
-    },
+    readHiddenLines: prompt => readHiddenLines(process.stdin, process.stdout, prompt, on => execFileSync("/bin/stty", [on ? "echo" : "-echo"], { stdio: "inherit" })),
 };
 export async function runClaudeTokenCommand(input) {
     const store = input.store ?? new ClaudeRunnerTokenStore({ stateRoot: input.stateRoot });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mtech-ai-local-runner",
-  "version": "0.1.103",
+  "version": "0.1.105",
   "private": false,
   "license": "UNLICENSED",
   "bin": {