[REPPL]

A host approval prompt for a shell command stalls an autonomous run. The host asks the person to approve a command it cannot check, and with nobody at the terminal the run waits until someone comes back.

What changes

• The hook. The host's PermissionRequest event for the shell tool now reaches abcd: hooks/permission-request.sh runs abcd hook permission-request.
• When it refuses. While a build or drain runs for the session's checkout, or the session works in one of a running build's lanes, the prompt is refused. The agent is told to rewrite the command into plain steps abcd can check, or to skip the step and say why.
  • A build counts while it is unfinished, waits on no person, and its state was written within the reservation lease (two hours).
  • A drain counts while it has not stopped and is within the same window.
  • A finished or discarded lane's worktree no longer counts.
• What it never does. It never grants a prompt. Every other session, a tool other than the shell, and any error leave the host's prompt as it is.
• The notice. build, build next and drain say once, on stderr, as they start, that refusals are on.
• Lanes it does not reach. A lane started through the claude runner runs with the host's hooks off. Its prompts are answered by the guard (abcd guard approve), as the build and drain pages now say.
• A dead run. A run that dies after its last write keeps counting until its lease runs out. The refusal says so, so an agent with a person at the terminal can tell them.

Records

• The fix resolves a major issue, iss-2610171110154902.
• It files two minor follow-ups:
  • iss-2610171200535090: a person-run switch to end refusal early;
  • iss-2610171200549757: a sandbox in place of the refusal.
• The review deferred one more minor, iss-2610222047465878: the path match is case-sensitive on a case-insensitive file system, which fails open.

A session wrote this work on 2026-10-17 and died before committing it. It was recovered after the 2026-10-22 crash, committed as found, merged with main, and then reviewed. An Opus and Sonnet pair reviewed it, and both rounds' findings are folded in:

• The docs overclaimed for runner lanes, and are now corrected.
• The build next notice had no test; it now has one.
• A finished lane counted as live, and no longer does.
• The dead-run wording was added to the refusal.
• Command names were removed from the brief's prose.
  Each new test was watched failing first.

Resolves: iss-2610171110154902
Refs: iss-2610171200535090
Refs: iss-2610171200549757
Refs: iss-2610222047465878

Assisted-by: Claude:claude-opus-5-5