patchwork-os 1.2.0-beta.2.canary.660 → 1.2.0-beta.2.canary.662

package/dist/commands/approve.js

@@ -0,0 +1,228 @@
+/**
+ * `patchwork approve <callId>` / `patchwork reject <callId>`.
+ *
+ * ## Why this exists
+ *
+ * The dashboard has two buttons that copy `patchwork approve <callId>` and
+ * `patchwork approve --edit <callId>` to the clipboard
+ * (dashboard/src/app/approvals/page.tsx). Neither command existed: running the
+ * copied string printed `Unknown command: 'approve'. Did you mean: approvals?`
+ * — `approvals` being an unrelated read-only KPI report. So the product told
+ * the operator to run something that has never worked.
+ *
+ * It also matters beyond the broken button. Every approval today is decided
+ * through the dashboard or a phone notification. If either becomes unavailable
+ * — the dashboard is down, the push relay is unreachable, or a future change
+ * starts REFUSING approvals — there is no other way to decide a queued action,
+ * and a queued action blocks the recipe waiting on it. A terminal path is the
+ * fallback that has to exist before anything can ever refuse.
+ *
+ * ## A shim, and nothing more
+ *
+ * No new approval logic lives here. Each verb maps to one route the bridge
+ * already serves (src/approvalHttp.ts):
+ *   - approve → POST /approve/:callId
+ *   - reject  → POST /reject/:callId   (optional `{ reason }` body)
+ *   - --review reads GET /approvals first, purely to show the operator what
+ *     they are about to decide.
+ *
+ * Bridge discovery and Bearer auth mirror src/commands/connect.ts. Every side
+ * effect is injected so this is testable without a live bridge.
+ *
+ * ## `--edit` cannot do what its name promises
+ *
+ * The dashboard advertises "Edit & approve". There is NO param-editing
+ * capability anywhere in the bridge: `POST /approve/:callId` ignores the
+ * request body entirely, and nothing in the tree patches a pending approval's
+ * params. The flag was aspirational.
+ *
+ * It is accepted here anyway, because the copied command must work rather than
+ * error. But it does NOT silently pretend: it prints that parameters cannot be
+ * modified and then behaves as `--review`. Quietly treating `--edit` as a
+ * successful edit would be the worse failure — the operator would believe they
+ * had changed an action's parameters and approve the original.
+ */
+/**
+ * The route patterns are `/^\/(approve|reject)\/([A-Za-z0-9-]+)$/`. An id
+ * outside that set cannot match, so the bridge would answer 404 — technically
+ * correct and useless to read, because "unknown callId" and "you pasted
+ * something that is not a callId" are different problems with different fixes.
+ * Checked here so the message names the real one.
+ */
+const CALL_ID_RE = /^[A-Za-z0-9-]+$/;
+function usage(action) {
+    const extra = action === "reject" ? "\n  --reason <text>  record why (audit trail)" : "";
+    return (`usage: patchwork ${action} <callId> [--review] [--json]${extra}\n\n` +
+        `  --review   print the queued action and confirm before deciding\n` +
+        `  --json     machine-readable result\n\n` +
+        `List what is pending with: patchwork approvals\n`);
+}
+function flagValue(argv, flag) {
+    const i = argv.indexOf(flag);
+    if (i === -1)
+        return undefined;
+    const v = argv[i + 1];
+    // A flag whose value is missing or is itself a flag was almost certainly a
+    // typo. Returning undefined would silently drop it.
+    if (v === undefined || v.startsWith("--"))
+        return undefined;
+    return v;
+}
+/** Render one pending entry for the review prompt. */
+function describeEntry(e) {
+    const lines = [];
+    lines.push(`  tool:    ${e.toolName ?? "(unknown)"}`);
+    if (e.tier)
+        lines.push(`  tier:    ${e.tier}`);
+    if (e.recipeName)
+        lines.push(`  recipe:  ${e.recipeName}`);
+    if (e.summary)
+        lines.push(`  summary: ${e.summary}`);
+    if (e.params !== undefined) {
+        let rendered;
+        try {
+            rendered = JSON.stringify(e.params, null, 2) ?? String(e.params);
+        }
+        catch {
+            rendered = "(unserialisable)";
+        }
+        // Indent every line so the params block cannot be mistaken for the
+        // surrounding prose when it spans many lines.
+        lines.push("  params:");
+        for (const l of rendered.split("\n"))
+            lines.push(`    ${l}`);
+    }
+    return lines.join("\n");
+}
+export async function runApproveCommand(action, argv, deps) {
+    const wantJson = argv.includes("--json");
+    const wantEdit = argv.includes("--edit");
+    const wantReview = argv.includes("--review") || wantEdit;
+    const reason = action === "reject" ? flagValue(argv, "--reason") : undefined;
+    const positional = argv.filter((a, i) => {
+        if (a.startsWith("--"))
+            return false;
+        // Drop the value that belongs to --reason.
+        const prev = argv[i - 1];
+        if (prev === "--reason")
+            return false;
+        return true;
+    });
+    const callId = positional[0];
+    if (!callId) {
+        deps.writeErr(usage(action));
+        deps.exit(1);
+        return;
+    }
+    if (!CALL_ID_RE.test(callId)) {
+        deps.writeErr(`[${action}] '${callId}' is not a callId (expected letters, digits and hyphens).\n` +
+            `  Copy one from the dashboard, or run: patchwork approvals\n`);
+        deps.exit(1);
+        return;
+    }
+    const lock = deps.findBridgeLock();
+    if (!lock) {
+        deps.writeErr(`[${action}] no running bridge found in ~/.claude/ide/.\n` +
+            `  An approval is held in the bridge's memory, so there is nothing to decide\n` +
+            `  while it is stopped. Start it with: patchwork start\n`);
+        deps.exit(1);
+        return;
+    }
+    const base = `http://127.0.0.1:${lock.port}`;
+    const auth = { Authorization: `Bearer ${lock.authToken}` };
+    if (wantEdit) {
+        // Say it plainly rather than letting the flag imply a capability. See the
+        // module header: the bridge ignores the body on /approve entirely.
+        deps.writeErr(`[${action}] --edit cannot modify parameters — the bridge has no such capability.\n` +
+            `  Showing the queued action for review instead; approving sends it unchanged.\n`);
+    }
+    if (wantReview) {
+        let entry;
+        try {
+            const res = await deps.fetchFn(`${base}/approvals`, { headers: auth });
+            if (res.ok) {
+                const list = (await res.json());
+                if (Array.isArray(list)) {
+                    entry = list.find((e) => e?.callId === callId);
+                }
+            }
+        }
+        catch {
+            /* fall through — review is a courtesy, not a gate */
+        }
+        if (!entry) {
+            deps.writeErr(`[${action}] ${callId} is not in the pending list. It may have been decided\n` +
+                `  already, or expired. Continuing would 404 or 409.\n`);
+            deps.exit(1);
+            return;
+        }
+        deps.write(`About to ${action}:\n${describeEntry(entry)}\n`);
+        if (!deps.isTTY) {
+            // Same discipline as `members set-password`: a confirmation that cannot
+            // be given must not be assumed. Refusing a pipe is the safe default for
+            // a command whose whole purpose is a deliberate human decision.
+            deps.writeErr(`[${action}] --review needs an interactive terminal to confirm.\n` +
+                `  Drop --review to ${action} without the prompt.\n`);
+            deps.exit(1);
+            return;
+        }
+        const ok = await deps.confirm(`${action} this action? [y/N] `);
+        if (!ok) {
+            deps.write(`Cancelled — nothing was ${action}d.\n`);
+            deps.exit(0);
+            return;
+        }
+    }
+    const url = `${base}/${action}/${callId}`;
+    let res;
+    try {
+        res = await deps.fetchFn(url, {
+            method: "POST",
+            headers: { ...auth, "Content-Type": "application/json" },
+            body: JSON.stringify(reason !== undefined ? { reason } : {}),
+        });
+    }
+    catch (err) {
+        deps.writeErr(`[${action}] could not reach the bridge at ${base}: ${err instanceof Error ? err.message : String(err)}\n`);
+        deps.exit(1);
+        return;
+    }
+    let body = {};
+    try {
+        body = (await res.json());
+    }
+    catch {
+        /* a non-JSON body is reported via status alone below */
+    }
+    if (wantJson) {
+        deps.write(`${JSON.stringify({ status: res.status, ...body }, null, 2)}\n`);
+        deps.exit(res.ok ? 0 : 1);
+        return;
+    }
+    if (res.ok) {
+        const decision = typeof body.decision === "string" ? body.decision : action;
+        deps.write(`${decision === "allow" ? "Approved" : "Rejected"} ${callId}\n`);
+        deps.exit(0);
+        return;
+    }
+    // Distinguish the three failures an operator can actually act on. A generic
+    // "request failed" would send them to check the bridge when the real answer
+    // is that a colleague already decided it.
+    if (res.status === 409 && body.error === "already_decided") {
+        deps.writeErr(`[${action}] ${callId} was already decided (${String(body.decision)}).\n` +
+            `  Nothing changed. A concurrent dashboard or phone action got there first.\n`);
+    }
+    else if (res.status === 404) {
+        deps.writeErr(`[${action}] ${callId} is not pending — it may have expired or never existed.\n` +
+            `  Run: patchwork approvals\n`);
+    }
+    else if (res.status === 401) {
+        deps.writeErr(`[${action}] the bridge rejected this credential (401). The lock file's token\n` +
+            `  may be stale — restart the bridge, or check ~/.claude/ide/.\n`);
+    }
+    else {
+        deps.writeErr(`[${action}] bridge returned ${res.status}: ${typeof body.error === "string" ? body.error : "(no error field)"}\n`);
+    }
+    deps.exit(1);
+}
+//# sourceMappingURL=approve.js.map

package/dist/commands/approve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.js","sourceRoot":"","sources":["../../src/commands/approve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AA+BH;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAErC,SAAS,KAAK,CAAC,MAA4B;IACzC,MAAM,KAAK,GACT,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,OAAO,CACL,oBAAoB,MAAM,gCAAgC,KAAK,MAAM;QACrE,oEAAoE;QACpE,0CAA0C;QAC1C,kDAAkD,CACnD,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAc,EAAE,IAAY;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,2EAA2E;IAC3E,oDAAoD;IACpD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,sDAAsD;AACtD,SAAS,aAAa,CAAC,CAAe;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,kBAAkB,CAAC;QAChC,CAAC;QACD,mEAAmE;QACnE,8CAA8C;QAC9C,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA4B,EAC5B,IAAc,EACd,IAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7E,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACtC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,2CAA2C;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAE7B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,CACX,IAAI,MAAM,MAAM,MAAM,6DAA6D;YACjF,8DAA8D,CACjE,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,QAAQ,CACX,IAAI,MAAM,gDAAgD;YACxD,+EAA+E;YAC/E,yDAAyD,CAC5D,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;IAE3D,IAAI,QAAQ,EAAE,CAAC;QACb,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,CAAC,QAAQ,CACX,IAAI,MAAM,0EAA0E;YAClF,iFAAiF,CACpF,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,KAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;gBAClD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ,CACX,IAAI,MAAM,KAAK,MAAM,yDAAyD;gBAC5E,uDAAuD,CAC1D,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,YAAY,MAAM,MAAM,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,wEAAwE;YACxE,wEAAwE;YACxE,gEAAgE;YAChE,IAAI,CAAC,QAAQ,CACX,IAAI,MAAM,wDAAwD;gBAChE,sBAAsB,MAAM,wBAAwB,CACvD,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,MAAM,sBAAsB,CAAC,CAAC;QAC/D,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,IAAI,CAAC,KAAK,CAAC,2BAA2B,MAAM,MAAM,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;IAC1C,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACxD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,CACX,IAAI,MAAM,mCAAmC,IAAI,KAC/C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,IAAI,CACL,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO;IACT,CAAC;IAED,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5E,IAAI,CAAC,KAAK,CAAC,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,IAAI,MAAM,IAAI,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO;IACT,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,0CAA0C;IAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;QAC3D,IAAI,CAAC,QAAQ,CACX,IAAI,MAAM,KAAK,MAAM,yBAAyB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;YACvE,8EAA8E,CACjF,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,CACX,IAAI,MAAM,KAAK,MAAM,2DAA2D;YAC9E,8BAA8B,CACjC,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,CACX,IAAI,MAAM,sEAAsE;YAC9E,iEAAiE,CACpE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,QAAQ,CACX,IAAI,MAAM,qBAAqB,GAAG,CAAC,MAAM,KACvC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,kBAChD,IAAI,CACL,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACf,CAAC"}

package/dist/index.js

@@ -213,6 +213,12 @@ const KNOWN_SUBCOMMANDS = [
     "shadow-scan",
     "workers",
     "approvals",
+    // `approve`/`reject` decide ONE queued action; `approvals` is the read-only
+    // KPI report. The near-identical spelling is why the unknown-command
+    // suggester used to answer "Did you mean: approvals?" to someone running the
+    // exact string the dashboard told them to copy.
+    "approve",
+    "reject",
     "gate",
     "outcomes",
     "butler",
@@ -2172,6 +2178,41 @@ if (process.argv[2] === "connect") {
         });
     })();
 }
+// `patchwork approve <callId>` / `patchwork reject <callId>` — decide a queued
+// approval from the terminal. The dashboard has copied these strings to the
+// clipboard for a long time while the subcommands did not exist; they are also
+// the fallback path for when the dashboard or the phone relay is unavailable.
+if (process.argv[2] === "approve" || process.argv[2] === "reject") {
+    const action = process.argv[2];
+    (async () => {
+        const { runApproveCommand } = await import("./commands/approve.js");
+        const { findBridgeLockForTask } = await import("./commands/task.js");
+        await runApproveCommand(action, process.argv.slice(3), {
+            findBridgeLock: (port) => findBridgeLockForTask(port),
+            fetchFn: fetch,
+            write: (s) => process.stdout.write(s),
+            writeErr: (s) => process.stderr.write(s),
+            exit: (code) => process.exit(code),
+            isTTY: Boolean(process.stdin.isTTY),
+            confirm: async (question) => {
+                const { createInterface } = await import("node:readline");
+                const rl = createInterface({
+                    input: process.stdin,
+                    output: process.stdout,
+                });
+                try {
+                    const answer = await new Promise((resolve) => {
+                        rl.question(question, resolve);
+                    });
+                    return /^y(es)?$/i.test(answer.trim());
+                }
+                finally {
+                    rl.close();
+                }
+            },
+        });
+    })();
+}
 // `patchwork analytics` — manage the self-hosted telemetry collector config.
 // Replaces the brittle "endpoint+secret in launchd plist" pattern with a
 // proper config file the bridge reads at startup.