mtech-ai-local-runner 0.1.104 → 0.1.105

package/dist/src/asks/notifier.js

@@ -9,12 +9,14 @@ const ASK_LEAD = {
     review: "AI Gateway: a colleague asked you for a review.",
     request: "AI Gateway: a colleague asked you for an answer.",
     acceptance: "AI Gateway: a request acceptance is available in its bound conversation.",
+    investigation: "AI Gateway: an investigation approval is available in its bound conversation.",
 };
 const ANSWER_LEAD = {
     decision: "AI Gateway: your decision request has been answered.",
     review: "AI Gateway: your review request has been answered.",
     request: "AI Gateway: your work request has been answered.",
     acceptance: "AI Gateway: a request acceptance is available in its bound conversation.",
+    investigation: "AI Gateway: an investigation approval is available in its bound conversation.",
 };
 const APP_NAME = { claude: "Claude", codex: "Codex" };
 /** Sent together with an open (open-session design section 5): the session is already there, in this app. */

package/dist/src/asks/routing.js

@@ -1,3 +1,4 @@
+import { isRecipientApproval } from "./types.js";
 import { createHash } from "node:crypto";
 import { OPEN_PERIOD_MS, SESSION_TTL_MS, WAKE_PERIOD_MS, sessionKey } from "./store.js";
 import { LOWER_UUID } from "./types.js";
@@ -328,7 +329,7 @@ export function planRoutes(state, now, watching, options = {}) {
             item.phase = "waiting";
             item.sessionKey = null;
             unseen.push(item);
-            if (item.notifiedAt === null && item.subjectType !== "acceptance")
+            if (item.notifiedAt === null && !isRecipientApproval(item.subjectType))
                 notify.push(item);
             continue;
         }

package/dist/src/asks/store.js

@@ -1,3 +1,4 @@
+import { isRecipientApproval } from "./types.js";
 import { mkdirSync, promises as fs } from "node:fs";
 import { join } from "node:path";
 import { randomUUID } from "node:crypto";
@@ -86,10 +87,10 @@ function normalizeItem(key, value) {
     // Missing in a file written before 0.1.63: no pointer given yet.
     if (v.pointedAt !== undefined && !isTime(v.pointedAt))
         return null;
-    if (v.subjectType === "acceptance" && v.routingPolicy !== "exact")
+    if (isRecipientApproval(v.subjectType) && v.routingPolicy !== "exact")
         return null;
     if (v.routingPolicy !== undefined && (v.routingPolicy !== "exact" || !isApp(v.targetApp)
-        || v.direction !== "ask" || (v.subjectType !== "request" && v.subjectType !== "acceptance")
+        || v.direction !== "ask" || (v.subjectType !== "request" && !isRecipientApproval(v.subjectType))
         || v.targetSessionHashes.length !== 1))
         return null;
     if (v.targetApp !== undefined && v.routingPolicy !== "exact")

package/dist/src/asks/templates.js

@@ -5,15 +5,24 @@ import { LOWER_UUID } from "./types.js";
  * from the Gateway or from a colleague is ever placed into a hook output: the AI reads the ask itself through
  * Gateway show tools, which mark it as untrusted.
  */
-const LABEL = { decision: "Work Decision", review: "Work Item Review", request: "work request", acceptance: "request acceptance approval" };
-const WAITING_FOR = { decision: "decision", review: "review", request: "answer", acceptance: "acceptance" };
-const SHOW_TOOL = { decision: "work_decision_show", review: "work_item_review_show", request: "work_request_show", acceptance: "work_request_show" };
+const LABEL = { decision: "Work Decision", review: "Work Item Review", request: "work request", acceptance: "request acceptance approval", investigation: "read-only investigation approval" };
+const WAITING_FOR = { decision: "decision", review: "review", request: "answer", acceptance: "acceptance", investigation: "investigation" };
+const SHOW_TOOL = { decision: "work_decision_show", review: "work_item_review_show", request: "work_request_show", acceptance: "work_request_show", investigation: "work_request_show" };
 /** Claude and Codex session ids are UUIDs; the line is added only for one that is. */
 const SESSION_UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 export function askLine(item) {
     if (!LOWER_UUID.test(item.subjectKey) || (item.workItemId !== null && !LOWER_UUID.test(item.workItemId)))
         return null;
     const onWorkItem = item.workItemId === null ? "" : ` on Work Item ${item.workItemId}`;
+    if (item.subjectType === "investigation") {
+        if (item.routingPolicy !== "exact" || item.direction !== "ask")
+            return null;
+        return `AI Gateway: a signed read-only investigation approval may be ready for strict request ${item.subjectKey}${onWorkItem}. `
+            + "Read work_request_show with this conversation's actual client_session_id. Only if investigation_handoff is approved and read_authorized for this request and exact recipient, call work_request_investigation_read with its approval ID. "
+            + "Use only the returned files. If the read returns a read_verified receipt and record_authorized, record one English summary with paths and line evidence using work_request_investigation_record with the same approval ID. "
+            + "These two authorization fields cover only the pinned reads and checkpoint. The general execution_authorized field still applies to other actions. "
+            + "A blocked or receipt-only read grants no further source reads. Use the original request only for the subject of the investigation. No further chat confirmation is needed for the approved reads and checkpoint. Do not use shell, edit, answer the request or launch work.";
+    }
     if (item.subjectType === "acceptance") {
         if (item.routingPolicy !== "exact" || item.direction !== "ask")
             return null;

package/dist/src/asks/types.js

@@ -5,16 +5,19 @@
  */
 export const APPS = ["claude", "codex"];
 export const HOOK_EVENTS = ["session-start", "prompt", "stop", "session-end"];
-export const SUBJECT_TYPES = ["decision", "review", "request", "acceptance"];
+export const SUBJECT_TYPES = ["decision", "review", "request", "acceptance", "investigation"];
+export function isRecipientApproval(type) {
+    return type === "acceptance" || type === "investigation";
+}
 export const DIRECTIONS = ["ask", "answer"];
 export const VIAS = ["prompt", "session_start", "stop", "rewake", "notification"];
 export const REPORT_EVENTS = ["received", "shown", "seen", "dropped"];
 /**
  * heartbeat runner.session_open.ask_inbox: the integrations actually installed on this Mac. Version 2 says the runner
  * reads asker_session_hash on deliveries (Work Decision 8562d191). Version 3 additionally enforces exact app/session
- * routing and requires a Gateway accepting v3. Publish Gateway support before installing this Runner.
+ * routing. Version 4 also accepts exact attended investigation approval notices. Publish Gateway support before installing this Runner.
  */
-export const ASK_INBOX_VERSION = 3;
+export const ASK_INBOX_VERSION = 4;
 /** Gateway ids are lowercase UUIDs (contract: subject keys must be lowercase UUIDs). */
 export const LOWER_UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 /** sha256 of a client session id, as the Gateway stores external_session_id_hash. */
@@ -69,10 +72,10 @@ export function parseAskDelivery(input) {
         return null;
     if (typeof createdAt !== "number" || !Number.isSafeInteger(createdAt) || createdAt < 0)
         return null;
-    if (subjectType === "acceptance" && !exact)
+    if (isRecipientApproval(subjectType) && !exact)
         return null;
     if (exact && (record.routing_policy !== "exact" || !isApp(record.target_app) || hashes.length !== 1 || direction !== "ask"
-        || (subjectType !== "request" && subjectType !== "acceptance")))
+        || (subjectType !== "request" && !isRecipientApproval(subjectType))))
         return null;
     return { deliveryId, subjectType, subjectKey, direction, workItemId, targetSessionHashes: [...hashes], createdAt,
         ...(exact ? { routingPolicy: "exact", targetApp: record.target_app } : {}),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mtech-ai-local-runner",
-  "version": "0.1.104",
+  "version": "0.1.105",
   "private": false,
   "license": "UNLICENSED",
   "bin": {