pi-daddy 0.46.0 → 0.47.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog — pi-daddy
 
+## 0.47.0 — 2026-10-09
+
+- Add an explicit session Auto permission switch in the dashboard and `/grants auto on|off`, with `PI_DADDY_AUTO_MODE=0|1` setting the startup default. Descendants consult the live owner for every new admission; OFF prevents future automatic admissions without canceling already admitted work or revoking manual approvals. Reload retains the choice, new sessions reset it, and unavailable control refuses automatic approval.
+- Put current work and actual pending approvals first in the terminal dashboard. Add keyboard navigation, focused details, a compact model view, collapsed history, resize-aware rendering and acknowledged Auto controls.
+- Show loaded versus installed ecosystem versions, package sources and explicit native Pi update commands. Old extensions report an unknown loaded generation rather than borrowing the version on disk.
+- Bound retained stdout/stderr snapshot growth using geometric checkpoints and a final bounded snapshot. Running captures indicate a not-yet-checkpointed suffix; a crash may omit that suffix. Recovered native-session reads no longer leave a false current-content-unavailable flag. Existing archive files are not removed.
+- Record automatic admissions distinctly as once-only `approvalSources: auto`, plus session Auto changes. Schema-pinned current-record consumers must update their pin; historical ledger readers remain separate. JEV and LoRA consent are unchanged.
+
+## 0.46.1 — 2026-10-08
+
+- Correct activity prompt/final attribution across consecutive root turns using Pi's actual hook order. Finalized message transformations are observed within the current turn; steering and canceled turns cannot seed the next task.
+- Interactive approvals now wait for the human by default. Explicit `PI_DADDY_APPROVAL_TIMEOUT` deadlines still work; expiry, dismissal and caller cancellation remain refusals with distinct outcomes and retry guidance. The published ledger `gateOutcome` enum adds `expired` and `aborted`; schema-pinned consumers must update their pin.
+- Show effective child wall/idle deadlines and diagnostic retention settings in `/grants`. Existing child defaults remain unchanged. Document a single-launch private native-session/diagnostic opt-in, separate from JEV/LoRA consent.
+
 ## 0.46.0 — 2026-10-08
 
 Qualify owned Herdr execution on Linux x64 with client/server 0.8.2 and protocol 20. Native ownership gates execution and independently reaps descendants after coordinator, launcher or server loss; final answers use the same Pi 1.0.4 settled/persisted checks as captured execution. Add a durable session settlement journal and trusted runtime snapshot bridge for one-shot Principal resume. Unsupported versions refuse without backend substitution.

package/README.md

@@ -1,6 +1,6 @@
 # pi-daddy
 
-Source target: **0.46.0**. Before installation, verify that `npm view pi-daddy version` and Git tag `v0.46.0` both resolve to this release.
+Source target: **0.47.0**. Before installation, verify that `npm view pi-daddy version` and Git tag `v0.47.0` both resolve to this release.
 
 **Capability governance and coordination for [pi](https://github.com/badlogic/pi-mono)'s multi-level agent system.**
 An orchestrator grants each sub-agent a deliberate subset of what it holds and withholds the rest. A sub-agent may
@@ -163,13 +163,26 @@ escape hatch for an operator who wants the old behaviour, and an explicitly empt
 
 ## Approvals
 
-A gated capability needs the UI of the session executing the delegation. Captured children use Pi's JSON mode
-without a UI; a gate with neither an inherited approval nor an available UI is denied. The answer is **once**, **for this session**, or **always** (persisted for a bounded period, offered only for a
+With Auto OFF, a gated capability needs a valid approval or the UI of the session executing the delegation. Captured children use Pi's JSON mode
+without a UI; a gate with neither a valid approval nor an available UI is denied. The answer is **once**, **for this session**, or **always** (persisted for a bounded period, offered only for a
 named definition, keyed `capability@subject`). Approvals inherit down the subtree intersected with each child's grant;
 a `once` never crosses a spawn. The approval store and governance ledger never store raw task text. `/grants
 approvals` lists what is persisted; `/grants revoke <capability>@<definition>` or `--all` removes it. The store lives
 in pi's agent directory, not in the workspace.
 
+**Auto mode** lets the operator approve every Daddy permission request for the current session and its descendants.
+Start Pi with `PI_DADDY_AUTO_MODE=1` for Auto ON, or `PI_DADDY_AUTO_MODE=0` (the default when unset) for Auto OFF.
+In the connected dashboard, press **a** to switch it on or off. `/grants auto on` and `/grants auto off` control the
+same session setting; `/grants` shows the current state and source. Reload preserves the session choice; a new
+Pi session starts from the environment default.
+
+Auto is checked again before each delegation or chain step. Turning it OFF stops future automatic admissions;
+already admitted work continues and independently granted manual approvals remain valid. Turning it ON can release
+an outstanding Daddy approval prompt. An unavailable owning session never grants automatic permission. Automatic
+decisions are recorded as `source: auto`, once for that admission, rather than banked as human or persistent approvals.
+Capability grants, definition identity, workspace routing and execution settlement checks still apply. JEV calls and
+LoRA storage retain their separate consent controls.
+
 Monetary usage is observational. It never pauses, stops or authorizes a child. Available usage remains in
 lifecycle records and episode reports; missing or partial coverage is not a zero-cost claim. Permission approvals,
 depth, fan-out limits and execution timeouts are separate controls.
@@ -216,7 +229,7 @@ work, final availability, subtree cleanup and optional observation completeness
 execution returns `isError` with its available evidence. Display, diagnostics and optional recording cannot replace
 the primary final. Unknown cleanup retains capacity and workspace exclusion.
 
-Pi and TypeBox are wildcard host-provided peers so Pi's extension loader supplies one shared runtime copy. Development and release qualification pin exact Pi **1.0.4**; later Pi versions require new qualification. Prefer a Pi-managed install under a host pinned to 1.0.4. An ordinary standalone npm install may resolve newer peer versions and is outside this qualification. In a Pi-managed no-peer install, standalone help, version and reporting remain available; run initialization inside Pi with `/grants init`. Use Principal **4.8.0** with this runtime's `delegate_describe` contract. Native phases use `plan`, `build`, `review`, `debug`, and `investigate` with their returned `definitionId`; independent parallel work uses one `delegate_all` batch.
+Pi and TypeBox are wildcard host-provided peers so Pi's extension loader supplies one shared runtime copy. Development and release qualification pin exact Pi **1.0.4**; later Pi versions require new qualification. Prefer a Pi-managed install under a host pinned to 1.0.4. An ordinary standalone npm install may resolve newer peer versions and is outside this qualification. In a Pi-managed no-peer install, standalone help, version and reporting remain available; run initialization inside Pi with `/grants init`. Use Principal **4.11.2** with this runtime's `delegate_describe` contract. Native phases use `plan`, `build`, `review`, `debug`, and `investigate` with their returned `definitionId`; independent parallel work uses one `delegate_all` batch.
 
 Final capture preserves whitespace and concatenates text blocks without inserting separators. Tool-call terminals, empty visible finals and non-`stop` reasons are unavailable. Persisted message comparisons ignore object key order while preserving array order and every field value. The shared `final-conformance.json` table checks these semantics in both runtime and harness. Capture remains bounded: 4 MiB visible final, 32 MiB protocol line, 64 MiB persisted session, and a 3-second bounded session read. Exceeding a limit reports an unavailable final and blocks dependent handoffs; it does not imply the worker failed to settle.
 
@@ -247,12 +260,29 @@ operator authorization, candidate and artifacts before consuming its checkpoint
 This bridge never grants capabilities, approves work or calls JEV/OpenAI/other models. The ledger schema is unchanged.
 Same-user hostile filesystem or co-loaded-extension authenticity is outside this cooperative ownership boundary.
 
-`pi-daddy-dashboard` renders a ledger or activity timeline in a terminal; `/grants dashboard` opens it in a Herdr pane
-beside the session. Its execution history and current episode cost are
-read-only. A dashboard connected through `/grants dashboard` accepts
-`m <definition> <provider:model> <thinking>` (or `m all ...`) over a private session-local socket and applies the same
-in-memory overrides and `session_config` audit event as `/grants models`; a standalone dashboard is read-only, and
-neither form can affect enforcement.
+`pi-daddy-dashboard` shows current work and actual pending approvals first; completed history is collapsed by default.
+`/grants dashboard` opens it beside the session in a Herdr pane. The header shows Auto ON/OFF and connection state.
+Use **a** to switch Auto, arrow keys to select a row, **Enter** for details, **m** for session models, **h** for history,
+and **?** for help. The view fits the terminal and follows resize events. A disconnected control displays its state
+as unavailable until the owning session acknowledges a fresh snapshot.
+
+A connected dashboard sends explicit Auto choices and model edits over a private session-local socket. Model edits
+use the same in-memory overrides and `session_config` audit path as `/grants models`; `m <definition>
+<provider:model> <thinking>` and `m all ...` remain available in command mode. A standalone dashboard is read-only.
+Execution history and cost remain observations, and incomplete usage is shown as unavailable rather than zero.
+
+Press **v** for ecosystem versions. Pi, Daddy, Principal and Harness each show the loaded package generation,
+version currently installed on disk, source and path. A mismatch calls for a reload (restart for Pi itself).
+Older extensions without the reporter show their installed version with the loaded version explicitly unknown.
+Multiple sources are flagged for inspection rather than choosing one arbitrarily. Package versions describe
+what is present; they do not establish compatibility qualification or that npm has no newer release.
+Version details provide native Pi commands for changing an explicit npm pin and rechecking Principal's installed
+agent definitions. `pi update --extensions` retains pinned versions; use `pi install npm:<package>@<version>` to
+replace a pin, then deliberately reload. There are no background registry checks or silent installations.
+
+**:** opens command mode, **Tab** changes the task filter, **p/f** shows retained prompt/final content,
+**Esc** returns to the previous view and **q** closes the dashboard.
+
 
 ## Bounds and configuration
 
@@ -261,7 +291,7 @@ configuration where both exist.
 
 | Area | Variables |
 | :--- | :--- |
-| Governance | `PI_DADDY_GOVERNANCE`, `PI_DADDY_GRANT`, `PI_DADDY_GATED`, `PI_DADDY_MAX_DEPTH`, `PI_DADDY_FANOUT`, `PI_DADDY_LEDGER`, `PI_DADDY_APPROVAL_TIMEOUT` |
+| Governance | `PI_DADDY_GOVERNANCE`, `PI_DADDY_GRANT`, `PI_DADDY_GATED`, `PI_DADDY_MAX_DEPTH`, `PI_DADDY_FANOUT`, `PI_DADDY_LEDGER`, `PI_DADDY_APPROVAL_TIMEOUT`, `PI_DADDY_AUTO_MODE` |
 | Child execution | `PI_DADDY_HERDR`, `PI_DADDY_HERDR_WORKSPACE`, `PI_DADDY_HERDR_KEEP_PANE`, `PI_DADDY_CHILD_IDLE_TIMEOUT`, `PI_DADDY_CHILD_TIMEOUT`, `PI_DADDY_ALLOW_UNRESOLVED_MODELS` |
 | Workspaces and retention | `PI_DADDY_WORKSPACE_REGISTRY`, `PI_DADDY_WORKSPACE_LEASE_DIR`, `PI_DADDY_EXECUTION_ARCHIVE`, `PI_DADDY_RETAIN_NATIVE_SESSIONS`, `PI_DADDY_NATIVE_SESSION_ROOT` |
 | Activity | `PI_DADDY_ACTIVITY_TIMELINE`, `PI_DADDY_ACTIVITY_CONTENT` |
@@ -276,6 +306,16 @@ limits still apply independently; this is not a lifetime call quota.
 The retired `PI_DADDY_EPISODE_COST_CEILING`, `PI_DADDY_ADVISOR`, `PI_DADDY_ADVISOR_KEY`,
 `PI_DADDY_ADVISOR_MODEL` and `PI_DADDY_ADVISOR_TASK_EGRESS` inputs are inert compatibility inputs.
 
+Interactive approval prompts wait for the human by default. Set `PI_DADDY_APPROVAL_TIMEOUT` to canonical
+whole seconds (1 through 2,147,483) for an explicit deadline; unset it or use literal `0` to wait indefinitely.
+Expiry, user dismissal and caller cancellation have distinct `expired`, `dismissed` and `aborted` outcomes.
+Each grants no permission and explains how to retry the delegation for a new prompt. Existing approvals
+remain usable without consulting an unused timeout setting. Malformed values refuse a needed new prompt.
+
+`/grants` shows effective child deadlines, approval waiting policy, and diagnostic retention settings.
+Child wall/idle controls remain runtime safety bounds; zero or malformed child settings select their defaults.
+They do not add time or token instructions to model prompts.
+
 `PI_DADDY_CHILD_IDLE_TIMEOUT` is seconds without activity before a child is stopped (default fifteen minutes);
 activity is output, a child-session-file change, or Linux process-tree CPU/descendant activity.
 `PI_DADDY_CHILD_TIMEOUT` is the runaway ceiling for a child that never goes quiet (default six hours). The remaining
@@ -315,6 +355,32 @@ or a connected dashboard to edit session overrides. Delegation never opens an au
 Valid thinking values are `off`, `minimal`, `low`, `medium`, `high`, `xhigh`, and `max`. `/grants` shows the
 resolved value and source for every displayed definition.
 
+### Keep evidence for one diagnostic session
+
+Native child transcripts and execution diagnostics are separate opt-ins. To retain them for one Pi launch,
+create private local directories outside the repository and scope the settings to that command:
+
+```bash
+diagnostic_root=$(mktemp -d "${TMPDIR:-/tmp}/pi-daddy-diagnostic.XXXXXX")
+mkdir -m 700 "$diagnostic_root/native" "$diagnostic_root/archive"
+PI_DADDY_RETAIN_NATIVE_SESSIONS=1 \
+PI_DADDY_NATIVE_SESSION_ROOT="$diagnostic_root/native" \
+PI_DADDY_EXECUTION_ARCHIVE="$diagnostic_root/archive" \
+pi
+```
+
+Use `/grants` to confirm the session's opt-in and destinations. The native root must be an existing canonical
+absolute path owned by your user, mode 0700, without symlink ancestors. Each delegated execution gets a fresh
+native JSONL session. The coordinator keeps its normal Pi session. Diagnostic manifests and bounded captured
+bytes go under `archive`; inspect each delegation result's retention status and manifest coverage for losses.
+An opt-in is not a claim that every observation was retained. Keep the private directory until diagnosis is done;
+the operator controls its lifetime and disposal.
+
+These files may contain task text, tool output and private model reasoning. Local diagnostic retention does not
+enable JEV, provider egress, LoRA collection or training. Existing `/skill-harness` consent remains separate.
+Without native-session opt-in, temporary child transcripts are removed after settlement and cannot be recovered
+later from the activity timeline.
+
 ## Retired intervention inputs
 
 External advisors, monetary cost gates and the first-delegation model chooser were removed. These recognized old

package/contracts/ledger-record/v1/governance-event.schema.json

@@ -235,7 +235,8 @@
         "prompt",
         "session",
         "persisted",
-        "inherited"
+        "inherited",
+        "auto"
       ]
     },
     "approvalScope": {
@@ -411,6 +412,8 @@
           "enum": [
             "declined",
             "dismissed",
+            "expired",
+            "aborted",
             "no-ui",
             "error"
           ]
@@ -1151,7 +1154,8 @@
         "trigger": {
           "enum": [
             "first-delegation",
-            "grants-models"
+            "grants-models",
+            "auto-mode"
           ]
         },
         "overrides": {
@@ -1174,6 +1178,32 @@
             ],
             "additionalProperties": false
           }
+        },
+        "autoMode": {
+          "type": "object",
+          "properties": {
+            "enabled": {
+              "type": "boolean"
+            },
+            "source": {
+              "enum": [
+                "default",
+                "environment",
+                "session"
+              ]
+            },
+            "revision": {
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 9007199254740991
+            }
+          },
+          "required": [
+            "enabled",
+            "source",
+            "revision"
+          ],
+          "additionalProperties": false
         }
       },
       "required": [
@@ -1185,7 +1215,41 @@
         "trigger",
         "overrides"
       ],
-      "additionalProperties": false
+      "additionalProperties": false,
+      "oneOf": [
+        {
+          "properties": {
+            "trigger": {
+              "const": "auto-mode"
+            },
+            "outcome": {
+              "const": "changed"
+            },
+            "overrides": {
+              "type": "object",
+              "additionalProperties": false
+            }
+          },
+          "required": [
+            "autoMode"
+          ]
+        },
+        {
+          "properties": {
+            "trigger": {
+              "enum": [
+                "first-delegation",
+                "grants-models"
+              ]
+            }
+          },
+          "not": {
+            "required": [
+              "autoMode"
+            ]
+          }
+        }
+      ]
     },
     "episodeOutcome": {
       "type": "object",

package/dist/governance/approval-prompt.d.ts

@@ -9,6 +9,7 @@
  * Everything here denies on uncertainty. pi already agrees: in non-interactive modes it installs a
  * no-op UI context whose `select` resolves undefined, so even a missed `hasUI` check would deny.
  */
+import type { AutoModeReader } from "../kernel/auto-mode.ts";
 import { type ApprovalPath, type ApprovalScope } from "../kernel/approval.ts";
 import type { Capability } from "../kernel/resolve.ts";
 /** The slice of pi's `ExtensionUIContext` this module needs. */
@@ -32,20 +33,13 @@ export interface PromptRequest {
     bindingKey?: string;
     signal?: AbortSignal;
 }
-/**
- * Which of the five outcomes a request produced.
- *
- * `scope: null` alone conflates four different kinds of no — a caller that needs to know whether a
- * PERSON actually declined (as opposed to nobody being there to ask, a dismissal, or the dialog itself
- * breaking) cannot recover that from `scope` or from parsing `reason`. Only "declined" means a human said
- * no; the other three are absence-of-signal, not a signal.
- */
-export declare const PROMPT_OUTCOME_KINDS: readonly ["granted", "declined", "dismissed", "no-ui", "error"];
+/** Only declined means a human chose Deny. Expiry, cancellation and dismissal grant nothing. */
+export declare const PROMPT_OUTCOME_KINDS: readonly ["granted", "declined", "dismissed", "expired", "aborted", "no-ui", "error"];
 export type PromptOutcomeKind = (typeof PROMPT_OUTCOME_KINDS)[number];
 export interface PromptOutcome {
     /** The scope the human chose, or null for any form of no. */
     scope: ApprovalScope | null;
-    /** Which of the five outcomes this was. Set on every return path. */
+    /** Which outcome this was. Set on every return path. */
     kind: PromptOutcomeKind;
     /** Why, when the answer was no. */
     reason?: string;
@@ -59,6 +53,8 @@ export interface PromptOutcome {
      * one. The rider's honest source is `session`, and this flag is how the caller can tell.
      */
     joined?: boolean;
+    /** Provisional Auto permission; the admission caller must still check the live owner policy. */
+    source?: "auto";
 }
 export interface ApprovalGateOptions {
     ui: ApprovalUI;
@@ -68,6 +64,7 @@ export interface ApprovalGateOptions {
     mode: string;
     /** Resolve only when this caller must open a new dialog; unused invalid settings cannot revoke authority. */
     timeoutMs?: number | (() => number | undefined);
+    autoMode?: AutoModeReader;
 }
 export interface ApprovalGate {
     request(request: PromptRequest): Promise<PromptOutcome>;
@@ -75,7 +72,7 @@ export interface ApprovalGate {
 /**
  * Read `PI_DADDY_APPROVAL_TIMEOUT`, in SECONDS, into the milliseconds pi expects.
  *
- * Only literal `0` disables the deadline. Other values must be canonical whole seconds
+ * Absent or literal `0` waits for the human without a deadline. Other values must be canonical whole seconds
  * within Node's signed 32-bit millisecond timer limit; malformed settings refuse a needed prompt.
  */
 export declare function timeoutMsFromEnv(raw: string | undefined): number | undefined;

package/dist/governance/approval-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval-prompt.d.ts","sourceRoot":"","sources":["../../src/governance/approval-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAA8B,KAAK,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC1G,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,gEAAgE;AAChE,MAAM,WAAW,UAAU;IACzB,MAAM,CACJ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAChD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/B,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,IAAI,CAAC;CACpE;AAED,eAAO,MAAM,UAAU,SAAS,CAAC;AAEjC,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAItD,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iGAAiG;IACjG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,iEAAkE,CAAC;AACpG,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;IAC5B,qEAAqE;IACrE,IAAI,EAAE,iBAAiB,CAAC;IACxB,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,UAAU,CAAC;IACf,0FAA0F;IAC1F,KAAK,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,6GAA6G;IAC7G,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACzD;AAID;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAQ5E;AAKD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,iBAAiB,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,IAAI,CAAC,OAAO,EAAE,mBAAmB,KAAK,YAAY,CAG3F;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,mBAAmB,EAC5B,QAAQ,GAAE,iBAA6B,GACtC,YAAY,CA+Ed"}
+{"version":3,"file":"approval-prompt.d.ts","sourceRoot":"","sources":["../../src/governance/approval-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAA8B,KAAK,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC1G,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,gEAAgE;AAChE,MAAM,WAAW,UAAU;IACzB,MAAM,CACJ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAChD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/B,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,IAAI,CAAC;CACpE;AAED,eAAO,MAAM,UAAU,SAAS,CAAC;AAEjC,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAItD,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iGAAiG;IACjG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,gGAAgG;AAChG,eAAO,MAAM,oBAAoB,uFAQvB,CAAC;AACX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;IAC5B,wDAAwD;IACxD,IAAI,EAAE,iBAAiB,CAAC;IACxB,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,UAAU,CAAC;IACf,0FAA0F;IAC1F,KAAK,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,6GAA6G;IAC7G,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACzD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAO5E;AAoGD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,iBAAiB,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,IAAI,CAAC,OAAO,EAAE,mBAAmB,KAAK,YAAY,CAG3F;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,mBAAmB,EAC5B,QAAQ,GAAE,iBAA6B,GACtC,YAAY,CAgGd"}

package/dist/governance/approval-prompt.js

@@ -9,6 +9,7 @@
  * Everything here denies on uncertainty. pi already agrees: in non-interactive modes it installs a
  * no-op UI context whose `select` resolves undefined, so even a missed `hasUI` check would deny.
  */
+import { randomUUID } from "node:crypto";
 import { approvalKey, offeredScopes } from "../kernel/approval.js";
 export const DENY_LABEL = "Deny";
 export const SCOPE_LABELS = {
@@ -16,26 +17,24 @@ export const SCOPE_LABELS = {
     session: "Allow for this session",
     always: "Always allow in this project (30 days)",
 };
-/**
- * Which of the five outcomes a request produced.
- *
- * `scope: null` alone conflates four different kinds of no — a caller that needs to know whether a
- * PERSON actually declined (as opposed to nobody being there to ask, a dismissal, or the dialog itself
- * breaking) cannot recover that from `scope` or from parsing `reason`. Only "declined" means a human said
- * no; the other three are absence-of-signal, not a signal.
- */
-export const PROMPT_OUTCOME_KINDS = ["granted", "declined", "dismissed", "no-ui", "error"];
-const DEFAULT_TIMEOUT_MS = 120_000;
+/** Only declined means a human chose Deny. Expiry, cancellation and dismissal grant nothing. */
+export const PROMPT_OUTCOME_KINDS = [
+    "granted",
+    "declined",
+    "dismissed",
+    "expired",
+    "aborted",
+    "no-ui",
+    "error",
+];
 /**
  * Read `PI_DADDY_APPROVAL_TIMEOUT`, in SECONDS, into the milliseconds pi expects.
  *
- * Only literal `0` disables the deadline. Other values must be canonical whole seconds
+ * Absent or literal `0` waits for the human without a deadline. Other values must be canonical whole seconds
  * within Node's signed 32-bit millisecond timer limit; malformed settings refuse a needed prompt.
  */
 export function timeoutMsFromEnv(raw) {
-    if (raw === undefined)
-        return DEFAULT_TIMEOUT_MS;
-    if (raw === "0")
+    if (raw === undefined || raw === "0")
         return undefined;
     if (!/^[1-9][0-9]*$/.test(raw) || Number(raw) > 2_147_483)
         throw new Error("PI_DADDY_APPROVAL_TIMEOUT must be literal 0 or whole seconds 1..2147483 without signs, padding or units");
@@ -44,6 +43,99 @@ export function timeoutMsFromEnv(raw) {
 function labelToScope(label, scopes) {
     return scopes.find((s) => SCOPE_LABELS[s] === label) ?? null;
 }
+const autoApproval = () => ({ scope: "once", kind: "granted", source: "auto" });
+const interrupted = (request, kind) => ({
+    scope: null,
+    kind,
+    reason: `approval for ${request.capability} ${kind === "expired" ? "expired before an answer" : "was canceled"}. ` +
+        "No permission was granted. Retry the delegation to open a new approval prompt.",
+});
+/** Own the deadline so Pi's undefined dismissal cannot erase whether our timer or cancellation fired. */
+async function selectApproval(options, request, title, labels) {
+    const timeout = typeof options.timeoutMs === "function" ? options.timeoutMs() : options.timeoutMs;
+    const controller = new AbortController();
+    let outcome;
+    let settled = false;
+    let wake;
+    const stopped = new Promise((resolve) => {
+        wake = resolve;
+    });
+    const settle = (next) => {
+        if (settled)
+            return;
+        settled = true;
+        outcome = next;
+        // Resolve our tagged outcome before a UI reacts to abort by returning undefined.
+        wake(outcome);
+        controller.abort();
+    };
+    const stop = (kind) => settle(interrupted(request, kind));
+    const abort = () => stop("aborted");
+    request.signal?.addEventListener("abort", abort, { once: true });
+    const timer = timeout === undefined ? undefined : setTimeout(() => stop("expired"), timeout);
+    let untrack;
+    try {
+        if (request.signal?.aborted)
+            stop("aborted");
+        if (outcome)
+            return outcome;
+        untrack = options.autoMode?.trackPending({
+            id: randomUUID(),
+            subject: request.subject,
+            capability: request.capability,
+        });
+        const selection = options.ui.select(title, labels, { signal: controller.signal }).then((chosen) => {
+            settled = true;
+            return chosen;
+        });
+        if (options.autoMode) {
+            const auto = options.autoMode;
+            void (async () => {
+                while (!controller.signal.aborted) {
+                    await auto.waitEnabled(controller.signal);
+                    // A notification is not authority: ON may already have changed back to OFF.
+                    if (!controller.signal.aborted && (await auto.read()).enabled) {
+                        settle(autoApproval());
+                        return;
+                    }
+                }
+            })().catch((error) => {
+                if (!controller.signal.aborted)
+                    settle({
+                        scope: null,
+                        kind: "error",
+                        reason: `Auto permission policy unavailable, denying (${String(error)})`,
+                    });
+            });
+        }
+        const chosen = await Promise.race([selection, stopped]);
+        return outcome ?? chosen;
+    }
+    finally {
+        controller.abort();
+        untrack?.();
+        if (timer !== undefined)
+            clearTimeout(timer);
+        request.signal?.removeEventListener("abort", abort);
+    }
+}
+async function joinApproval(pending, request) {
+    if (!request.signal)
+        return pending;
+    let abort;
+    const stopped = new Promise((resolve) => {
+        abort = () => resolve(interrupted(request, "aborted"));
+        request.signal.addEventListener("abort", abort, { once: true });
+        if (request.signal.aborted)
+            abort();
+    });
+    try {
+        return await Promise.race([pending, stopped]);
+    }
+    finally {
+        request.signal.removeEventListener("abort", abort);
+    }
+}
 /**
  * Build gates that SHARE one single-flight queue.
  *
@@ -66,15 +158,22 @@ export function createApprovalGateProvider() {
  */
 export function createApprovalGate(options, inFlight = new Map()) {
     const ask = async (request) => {
+        // A queued once waiter owns its own decision. Auto may have changed while it joined another dialog.
+        if (options.autoMode) {
+            try {
+                if ((await options.autoMode.read()).enabled)
+                    return request.signal?.aborted ? interrupted(request, "aborted") : autoApproval();
+            }
+            catch (error) {
+                return { scope: null, kind: "error", reason: `Auto permission policy unavailable, denying (${String(error)})` };
+            }
+        }
         const scopes = offeredScopes(request.path);
         const title = `grants: approve ${request.capability} for ${request.subject}?` +
             (request.task ? `\n  task: ${request.task}` : "");
         let chosen;
         try {
-            chosen = await options.ui.select(title, [DENY_LABEL, ...scopes.map((s) => SCOPE_LABELS[s])], {
-                timeout: typeof options.timeoutMs === "function" ? options.timeoutMs() : options.timeoutMs,
-                signal: request.signal,
-            });
+            chosen = await selectApproval(options, request, title, [DENY_LABEL, ...scopes.map((s) => SCOPE_LABELS[s])]);
         }
         catch (error) {
             // A governance layer that errors must deny, not permit. This is a dialog malfunction, not a
@@ -82,10 +181,17 @@ export function createApprovalGate(options, inFlight = new Map()) {
             return { scope: null, kind: "error", reason: `approval dialog failed, denying (${String(error)})` };
         }
         if (request.signal?.aborted)
-            return { scope: null, kind: "dismissed", reason: `approval for ${request.capability} was canceled` };
-        // undefined covers dismissal, timeout, and abort. All are a no, but none is a person saying no.
+            return interrupted(request, "aborted");
+        if (typeof chosen === "object")
+            return chosen;
+        // Only an ordinary UI dismissal reaches undefined; our deadline and abort carry explicit outcomes.
         if (chosen === undefined) {
-            return { scope: null, kind: "dismissed", reason: `approval for ${request.capability} was dismissed` };
+            return {
+                scope: null,
+                kind: "dismissed",
+                reason: `approval for ${request.capability} was dismissed. No permission was granted. ` +
+                    "Retry the delegation to open a new approval prompt.",
+            };
         }
         if (chosen === DENY_LABEL) {
             return { scope: null, kind: "declined", reason: `${request.capability} was denied by a human` };
@@ -98,7 +204,15 @@ export function createApprovalGate(options, inFlight = new Map()) {
     return {
         async request(request) {
             if (request.signal?.aborted)
-                return { scope: null, kind: "dismissed", reason: `approval for ${request.capability} was canceled` };
+                return interrupted(request, "aborted");
+            try {
+                if (options.autoMode && (await options.autoMode.read()).enabled) {
+                    return request.signal?.aborted ? interrupted(request, "aborted") : autoApproval();
+                }
+            }
+            catch (error) {
+                return { scope: null, kind: "error", reason: `Auto permission policy unavailable, denying (${String(error)})` };
+            }
             if (!options.hasUI) {
                 // Nobody was there to ask — distinct from a person declining, which is why this is its own kind
                 // rather than being folded into "declined" (see PromptOutcomeKind).
@@ -119,9 +233,9 @@ export function createApprovalGate(options, inFlight = new Map()) {
                 const existing = inFlight.get(key);
                 if (!existing)
                     break;
-                const outcome = await existing;
+                const outcome = await joinApproval(existing, request);
                 if (request.signal?.aborted)
-                    return { scope: null, kind: "dismissed", reason: `approval for ${request.capability} was canceled` };
+                    return interrupted(request, "aborted");
                 // **`joined` marks the rider, and the ledger depends on it (R-66).** Sharing a non-`once` outcome
                 // is correct — the human authorised the capability for the session, not for one child — but the
                 // caller then stamped `approvalSource: "prompt"` on every one of them, so a fan-out of eight wrote

package/dist/governance/approval-prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-prompt.js","sourceRoot":"","sources":["../../src/governance/approval-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAyC,MAAM,uBAAuB,CAAC;AAa1G,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC;AAEjC,MAAM,CAAC,MAAM,YAAY,GAAkC;IACzD,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,wBAAwB;IACjC,MAAM,EAAE,wCAAwC;CACjD,CAAC;AAcF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AAoCpG,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAuB;IACtD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC;IACjD,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS;QACvD,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;IACJ,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;AAC5B,CAAC;AACD,SAAS,YAAY,CAAC,KAAa,EAAE,MAAuB;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC;AAC/D,CAAC;AAuBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B;IACxC,MAAM,QAAQ,GAAsB,IAAI,GAAG,EAAE,CAAC;IAC9C,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA4B,EAC5B,WAA8B,IAAI,GAAG,EAAE;IAEvC,MAAM,GAAG,GAAG,KAAK,EAAE,OAAsB,EAA0B,EAAE;QACnE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,KAAK,GACT,mBAAmB,OAAO,CAAC,UAAU,QAAQ,OAAO,CAAC,OAAO,GAAG;YAC/D,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEpD,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC3F,OAAO,EAAE,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS;gBAC1F,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4FAA4F;YAC5F,gEAAgE;YAChE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,oCAAoC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACtG,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YACzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,OAAO,CAAC,UAAU,eAAe,EAAE,CAAC;QAEvG,gGAAgG;QAChG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,OAAO,CAAC,UAAU,gBAAgB,EAAE,CAAC;QACxG,CAAC;QACD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,wBAAwB,EAAE,CAAC;QAClG,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,KAAK,KAAK,IAAI;YACnB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gCAAgC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE;YAC3G,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,OAAsB;YAClC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBACzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,OAAO,CAAC,UAAU,eAAe,EAAE,CAAC;YACvG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,gGAAgG;gBAChG,oEAAoE;gBACpE,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,IAAI,EAAE,OAAO;oBACb,MAAM,EACJ,GAAG,OAAO,CAAC,UAAU,8DAA8D;wBACnF,UAAU,OAAO,CAAC,IAAI,2EAA2E;iBACpG,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAEvH,oGAAoG;YACpG,kGAAkG;YAClG,oGAAoG;YACpG,gGAAgG;YAChG,2FAA2F;YAC3F,SAAS,CAAC;gBACR,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,CAAC,QAAQ;oBAAE,MAAM;gBACrB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC;gBAC/B,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;oBACzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,OAAO,CAAC,UAAU,eAAe,EAAE,CAAC;gBACvG,kGAAkG;gBAClG,gGAAgG;gBAChG,mGAAmG;gBACnG,iGAAiG;gBACjG,oGAAoG;gBACpG,kFAAkF;gBAClF,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM;oBAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACpE,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACjE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3B,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"approval-prompt.js","sourceRoot":"","sources":["../../src/governance/approval-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAyC,MAAM,uBAAuB,CAAC;AAa1G,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC;AAEjC,MAAM,CAAC,MAAM,YAAY,GAAkC;IACzD,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,wBAAwB;IACjC,MAAM,EAAE,wCAAwC;CACjD,CAAC;AAcF,gGAAgG;AAChG,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,SAAS;IACT,UAAU;IACV,WAAW;IACX,SAAS;IACT,SAAS;IACT,OAAO;IACP,OAAO;CACC,CAAC;AAuCX;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAuB;IACtD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS;QACvD,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;IACJ,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;AAC5B,CAAC;AACD,SAAS,YAAY,CAAC,KAAa,EAAE,MAAuB;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC;AAC/D,CAAC;AAED,MAAM,YAAY,GAAG,GAAkB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAE/F,MAAM,WAAW,GAAG,CAAC,OAAsB,EAAE,IAA2B,EAAiB,EAAE,CAAC,CAAC;IAC3F,KAAK,EAAE,IAAI;IACX,IAAI;IACJ,MAAM,EACJ,gBAAgB,OAAO,CAAC,UAAU,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,cAAc,IAAI;QAC1G,gFAAgF;CACnF,CAAC,CAAC;AAEH,yGAAyG;AACzG,KAAK,UAAU,cAAc,CAC3B,OAA4B,EAC5B,OAAsB,EACtB,KAAa,EACb,MAAgB;IAEhB,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAClG,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,OAAkC,CAAC;IACvC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,IAAqC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QACrD,IAAI,GAAG,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,EAAE;QACrC,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,GAAG,IAAI,CAAC;QACf,iFAAiF;QACjF,IAAI,CAAC,OAAO,CAAC,CAAC;QACd,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAA2B,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7F,IAAI,OAAiC,CAAC;IACtC,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC;YACvC,EAAE,EAAE,UAAU,EAAE;YAChB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAChG,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC9B,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAClC,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;oBAC1C,4EAA4E;oBAC5E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;wBAC9D,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;wBACvB,OAAO;oBACT,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACnB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;oBAC5B,MAAM,CAAC;wBACL,KAAK,EAAE,IAAI;wBACX,IAAI,EAAE,OAAO;wBACb,MAAM,EAAE,gDAAgD,MAAM,CAAC,KAAK,CAAC,GAAG;qBACzE,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACxD,OAAO,OAAO,IAAI,MAAM,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,CAAC;QACZ,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAA+B,EAAE,OAAsB;IACjF,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IACpC,IAAI,KAAkB,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QACrD,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,MAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAO,CAAC,OAAO;YAAE,KAAK,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAuBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B;IACxC,MAAM,QAAQ,GAAsB,IAAI,GAAG,EAAE,CAAC;IAC9C,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA4B,EAC5B,WAA8B,IAAI,GAAG,EAAE;IAEvC,MAAM,GAAG,GAAG,KAAK,EAAE,OAAsB,EAA0B,EAAE;QACnE,oGAAoG;QACpG,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO;oBACzC,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;YACtF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gDAAgD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAClH,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,KAAK,GACT,mBAAmB,OAAO,CAAC,UAAU,QAAQ,OAAO,CAAC,OAAO,GAAG;YAC/D,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEpD,IAAI,MAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4FAA4F;YAC5F,gEAAgE;YAChE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,oCAAoC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACtG,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAEpE,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC9C,mGAAmG;QACnG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,WAAW;gBACjB,MAAM,EACJ,gBAAgB,OAAO,CAAC,UAAU,6CAA6C;oBAC/E,qDAAqD;aACxD,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,wBAAwB,EAAE,CAAC;QAClG,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,KAAK,KAAK,IAAI;YACnB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gCAAgC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE;YAC3G,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,OAAsB;YAClC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,OAAO,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACpE,IAAI,CAAC;gBACH,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBAChE,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;gBACpF,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gDAAgD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAClH,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,gGAAgG;gBAChG,oEAAoE;gBACpE,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,IAAI,EAAE,OAAO;oBACb,MAAM,EACJ,GAAG,OAAO,CAAC,UAAU,8DAA8D;wBACnF,UAAU,OAAO,CAAC,IAAI,2EAA2E;iBACpG,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAEvH,oGAAoG;YACpG,kGAAkG;YAClG,oGAAoG;YACpG,gGAAgG;YAChG,2FAA2F;YAC3F,SAAS,CAAC;gBACR,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,CAAC,QAAQ;oBAAE,MAAM;gBACrB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACtD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;oBAAE,OAAO,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACpE,kGAAkG;gBAClG,gGAAgG;gBAChG,mGAAmG;gBACnG,iGAAiG;gBACjG,oGAAoG;gBACpG,kFAAkF;gBAClF,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM;oBAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACpE,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACjE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3B,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/governance/auto-mode-policy.d.ts

@@ -0,0 +1,11 @@
+import type { AutoModeReader, AutoModeRef, AutoModeSnapshot, AutoModeSource } from "../kernel/auto-mode.ts";
+export interface AutoModeAuthority extends AutoModeReader {
+    snapshot(): AutoModeSnapshot;
+    set(enabled: boolean, source: AutoModeSource): AutoModeSnapshot;
+}
+export declare function createAutoModeAuthority(initial: {
+    enabled: boolean;
+    source: AutoModeSource;
+}): Promise<AutoModeAuthority>;
+export declare function connectAutoMode(reference: AutoModeRef): AutoModeReader;
+//# sourceMappingURL=auto-mode-policy.d.ts.map

package/dist/governance/auto-mode-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-mode-policy.d.ts","sourceRoot":"","sources":["../../src/governance/auto-mode-policy.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,cAAc,EAEf,MAAM,wBAAwB,CAAC;AAShC,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,QAAQ,IAAI,gBAAgB,CAAC;IAC7B,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,GAAG,gBAAgB,CAAC;CACjE;AAED,wBAAsB,uBAAuB,CAAC,OAAO,EAAE;IACrD,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;CACxB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA8J7B;AA8CD,wBAAgB,eAAe,CAAC,SAAS,EAAE,WAAW,GAAG,cAAc,CA8DtE"}