const EXEC_APPROVAL_FOLLOWUP_RUNTIME_HANDOFF_TTL_MS = 5 * 60 * 1000;

/** Single-use capability payload consumed by a follow-up agent turn. */

export type ExecApprovalFollowupRuntimeHandoff = {

type ExecApprovalFollowupRuntimeHandoff = {

kind: "exec-approval-followup";

approvalId: string;

sessionKey: string;

};

/** Registration handle returned to the gateway approval callback. */

export type ExecApprovalFollowupRuntimeHandoffRegistration = {

type ExecApprovalFollowupRuntimeHandoffRegistration = {

handoffId: string;

idempotencyKey: string;

};

}

/** Gateway payload fields used to register or wait for an exec approval decision. */

export type RequestExecApprovalDecisionParams = {

type RequestExecApprovalDecisionParams = {

id: string;

command?: string;

commandArgv?: string[];

import type { AgentToolResult } from "./runtime/index.js";

/** Full input bundle for gateway-host allowlist and approval processing. */

export type ProcessGatewayAllowlistParams = {

type ProcessGatewayAllowlistParams = {

command: string;

workdir: string;

env: Record<string, string>;

};

/** Gateway allowlist outcome before command execution continues. */

export type ProcessGatewayAllowlistResult = {

type ProcessGatewayAllowlistResult = {

execCommandOverride?: string;

allowWithoutEnforcedCommand?: boolean;

pendingResult?: AgentToolResult<ExecToolDetails>;

import type { AgentToolResult } from "./runtime/index.js";

import { callGatewayTool } from "./tools/gateway.js";

export type { ExecuteNodeHostCommandParams } from "./bash-tools.exec-host-node.types.js";

const APPROVED_NODE_INVOKE_SCOPES = [WRITE_SCOPE, APPROVALS_SCOPE];

function resolveNodeAutoReviewReason(params: {