Function newToolApproveCommand

internal/cli/tool_operator.go:174–222

(deps commandDeps)

}

func newToolApproveCommand(deps commandDeps) *cobra.Command {
	var flags toolApprovalFlags
	cmd := &cobra.Command{
		Use:   "approve <tool_id>",
		Short: "Mint a one-shot approval token for one tool invocation",
		Args:  exactOneNonBlankArg(),
		RunE: func(cmd *cobra.Command, args []string) error {
			id, err := parseToolIDArg(args[0])
			if err != nil {
				return writeToolCommandError(cmd, err)
			}
			input, err := resolveToolApprovalInput(cmd, flags)
			if err != nil {
				return writeToolCommandError(cmd, toolValidationCommandError(id, "tool approval input is invalid", err))
			}
			if strings.TrimSpace(flags.scope.sessionID) == "" {
				return writeToolCommandError(cmd, toolValidationCommandError(
					id,
					"tool approval scope is invalid",
					toolspkg.NewValidationError(
						"session_id",
						toolspkg.ReasonSchemaInvalid,
						"session id is required",
					),
				))
			}
			return runToolCommand(cmd, deps, func(client DaemonClient) error {
				request := ToolApprovalRequest{
					SessionID:   strings.TrimSpace(flags.scope.sessionID),
					WorkspaceID: strings.TrimSpace(flags.scope.workspaceID),
					AgentName:   strings.TrimSpace(flags.scope.agentName),
					Input:       input,
					InputDigest: strings.TrimSpace(flags.inputDigest),
				}
				approval, err := client.CreateToolApproval(cmd.Context(), id.String(), request)
				if err != nil {
					return err
				}
				return writeCommandOutput(cmd, toolApprovalBundle(approval))
			})
		},
	}
	flags.scope.bind(cmd)
	cmd.Flags().StringVar(&flags.input, "input", "", "Inline JSON input")
	cmd.Flags().StringVar(&flags.inputFile, "input-file", "", "Path to JSON input file, or '-' for stdin")
	cmd.Flags().StringVar(&flags.inputDigest, "input-digest", "", "Precomputed input digest")
	mustMarkFlagRequired(cmd, "session")
	return cmd
}

func newToolInvokeCommand(deps commandDeps) *cobra.Command {
	var flags toolInvokeFlags