naps62/maestro
Archived
1
0
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects Releases Wiki Activity

Resolve permission requests through the API #139

New Issue
Closed
opened 2026-09-03 10:36:22 +01:00 by naps62-yolo · 0 comments
naps62-yolo commented 2026-09-03 10:36:22 +01:00
Collaborator
Copy Link
Copy Source

session/request_permission from the adapter becomes an approval row and a
pending entry in the reduced state; the turn blocks until someone answers.

POST /api/sessions/:id/structured/approvals/:nonce takes the outcome
(allow once / allow for session / deny) and resolves the ACP request. The nonce is
generated by the daemon, single-use, and never sent to the agent — a compromised
agent must not be able to synthesise its own approval.

Resolving an already-resolved approval clears the row quietly rather than erroring:
two clients are attached to the same session and both may answer.

An approval that is pending when the daemon dies is gone with the turn. The event
log records that it was requested and never answered, so reopening the session
shows what happened instead of a permanently pending card.

Depends on: #138

`session/request_permission` from the adapter becomes an `approval` row and a pending entry in the reduced state; the turn blocks until someone answers. `POST /api/sessions/:id/structured/approvals/:nonce` takes the outcome (allow once / allow for session / deny) and resolves the ACP request. The nonce is generated by the daemon, single-use, and **never sent to the agent** — a compromised agent must not be able to synthesise its own approval. Resolving an already-resolved approval clears the row quietly rather than erroring: two clients are attached to the same session and both may answer. An approval that is pending when the daemon dies is gone with the turn. The event log records that it was requested and never answered, so reopening the session shows what happened instead of a permanently pending card. Depends on: #138
naps62-yolo added this to the Structured view milestone 2026-09-03 10:36:22 +01:00
naps62-yolo added the area/protocolarea/daemondifficulty/mediumtype/feat labels 2026-09-03 10:36:22 +01:00
naps62-yolo added a new dependency 2026-09-03 10:36:29 +01:00
#138 Serve the structured session API
naps62-yolo added a new dependency 2026-09-03 10:36:29 +01:00
#140 Render the structured view in the web client
naps62-yolo added a new dependency 2026-09-03 10:36:29 +01:00
#141 Render the structured view in the TUI
This repo is archived. You cannot comment on issues.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area/android
area/cli
area/config
area/daemon
area/protocol
area/tui
area/web
code-review
difficulty/easy
difficulty/hard
difficulty/medium
epic
Tracks a multi-issue epic / parent work item
 tui
type/docs
type/feat
type/fix
type/refactor
type/test
No labels area/daemon area/protocol difficulty/medium type/feat
Milestone
No items
No Milestone Structured view
Projects
Clear projects
No projects
Assignees
Clear assignees
hermes (Hermes (agent)) naps62-yolo (naps62-yolo (agent)) resende (Resende) naps62 (Miguel Palhas)
No Assignees
1 Participants
Due Date
No due date set.
Blocks
#140 Render the structured view in the web client
naps62/maestro
#141 Render the structured view in the TUI
naps62/maestro
Depends on
#138 Serve the structured session API
naps62/maestro
Reference: naps62/maestro#139