5 Commits

Author	SHA1	Message	Date
NCBM	d6616d0da3	core/tools: timed human allow for denylisted commands ... Denylist hits ask the user (default deny, timeout) instead of only hard rejecting when a policy hook is installed. Independent of YOLO soft-confirm; session grants skip re-prompt for the same basename. CLI installs the hook via install_cli_limit_hooks.	2026-07-20 03:02:34 +08:00
NCBM	1012894f0d	core/cli: multi-line boxed tool confirm prompts ... Echo a terminal-width box with wrapped reason (argv / -c code) before a short Allow? y/N prompt so shell confirms are not jammed on one line.	2026-07-18 18:41:00 +08:00
NCBM	f77ac7eea8	core/prompting+tools: shared ask/choose/form and chat tools ... Add process-wide prompting backends for interactive human I/O; wire CLI limit/confirm/workspace prompts through it. Expose ask_user, choose_user, and form_user under tools/chat and include them in DEFAULT_TOOLS.	2026-07-15 11:51:44 +08:00
NCBM	bcfd1098f8	core/cli+config: confirm destructive tools and path denylist ... Wire [agent] confirm_destructive / path_denylist into CLI; default confirm prompt denies; document Phase C safety hooks.	2026-07-14 23:30:17 +08:00
NCBM	a634021a80	core/cli: interactive continue prompts for loop and PTY limits ... on_limit raises tool-round allowance; PTY session/budget limits can prompt to raise; MaxRoundsEvent.continued marks extended runs.	2026-07-14 19:53:34 +08:00