feat: category-based approval for runtime tools

mirror of https://github.com/davidkaya/aryx.git synced 2026-08-28 13:47:12 +02:00

Replace 20+ individual runtime tool toggles with 5 permission categories
(read, write, shell, web_fetch, store_memory) matching how Copilot CLI,
Cline, and other coding agents handle approvals.

- Add resolveApprovalToolKey() to map permission kinds to category IDs
- Simplify fallbackRuntimeApprovalTools to 5 categories
- Thread alwaysApprove through PendingApprovalHandle → sidecar resolve
- Update ApprovalBanner to use category labels for Always Approve button
- Update ResolveApprovalCommand contract with alwaysApprove field
- Update tests for category-based model

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

This commit is contained in:

David Kaya

2026-03-27 21:36:27 +01:00

co-authored by

Copilot

parent f04e3b9dcc

commit 689b335220

8 changed files with 93 additions and 72 deletions

									
										src/shared/contracts/sidecar.ts
									
		+1
		
												View File
												
				@@ -93,6 +93,7 @@ export interface ResolveApprovalCommand {

				  requestId: string;

				  approvalId: string;

				  decision: ApprovalDecision;

				  alwaysApprove: boolean;

				}

				export interface ResolveUserInputCommand {