Method requestSkillShellPermission

agent/query_engine.go:292–326

(ctx context.Context, out chan<- StreamEvent, req skills.SkillShellPermissionRequest)

	extraContext := coretools.ExecutionContext{
		"_session_id":         sid,
		"_agent_id":           q.CoreEngine.sessionMemoryAgentID(),
		"runtime_dir":         q.Config.ProjectRuntimeDir,
		"_skill_persistence":  q.CoreEngine.skillPersistence,
		"_skill_agent_scope":  "main",
		"_turn_count":         state.TurnCount,
		"_permission_runtime": q.CoreEngine,
	}
	return executor.Execute(ctx, skill, args, sid, func(req skills.SkillShellPermissionRequest) bool {
		return q.requestSkillShellPermission(ctx, out, req)
	}, q.CoreEngine.Registry, state, extraContext)
}

func (q *QueryEngine) requestSkillShellPermission(ctx context.Context, out chan<- StreamEvent, req skills.SkillShellPermissionRequest) bool {
	if q != nil && q.Config.Yolo {
		return true
	}
	ch := make(chan bool, 1)
	q.skillPermissionMu.Lock()
	if q.skillPermissionCh != nil {
		q.skillPermissionMu.Unlock()
		return false
	}
	q.skillPermissionCh = ch
	q.skillPermissionMu.Unlock()
	defer func() {
		q.skillPermissionMu.Lock()
		if q.skillPermissionCh == ch {
			q.skillPermissionCh = nil
		}
		q.skillPermissionMu.Unlock()
	}()

	event := NewStreamEvent("permission_needed", "", map[string]any{
		"skill_shell_request": req,
		"dangerous":           true,
		"risk":                "high",
	})
	if !sendStream(ctx, out, event) {