Tianyi Cui abe80cec68 fix(loop): record a durable prompt/blocked for every vetoed prompt ...

Address review on the interception-seams PR: PromptDecision.reason is
documented as the durable record of why a prompt was blocked, but the loop
only surfaced it via the fully-blocked batch's `rejected` turn/end. In a MIXED
batch — one queued prompt blocked, another allowed — the turn does not end
`rejected`, so the blocked prompt and its reason vanished from the session log
entirely.

Add a `prompt/blocked` SessionEventMap variant (content + source + reason),
appended in the open turn at the veto point in place of the user/message the
prompt would have become. It is a non-surface, turn-enclosed event (like
todo/write): it never reaches deriveMessages(). The fully-blocked batch still
also ends `rejected` for boundary balance + ACP settlement. Regression test
drives a mixed batch and asserts the blocked prompt is recorded while the
allowed one runs — proven red without the append.

2026-07-02 17:03:53 +08:00

..

bash.md

docs(bash): reframe stdin/env — the scrub is the security control, not a trust boundary

2026-07-02 04:08:24 +08:00

compaction.md

fix(compact): harden summarization convergence

2026-06-29 16:56:44 +08:00

core.md

fix(loop): record a durable prompt/blocked for every vetoed prompt

2026-07-02 17:03:53 +08:00

llm-streaming.md

simplify(llm): drop unconsumed adapter-change event and assembled call surfaces

2026-06-21 01:27:41 +08:00

persistence.md

docs: address review sync gaps

2026-07-01 12:56:13 +08:00

session.md

fix(loop): record a durable prompt/blocked for every vetoed prompt

2026-07-02 17:03:53 +08:00

subagent.md

Add the ACP subagent backend: out-of-process delegation (PR3)

2026-06-22 10:47:02 +08:00

tools.md

fix(events): address Codex review — protect post-execute result, purge stale tools/execute refs

2026-06-30 20:25:30 +08:00