Files
hapi/shared
6c69e2f315 fix(cli,hub): finalize canceled permission requests and surface stale answers (#1854)
* fix(cli,hub): finalize canceled permission requests and surface stale answers

When Claude Code sends control_cancel_request for a pending AskUserQuestion,
the abort handler only removed the local pendingRequests entry and rejected
the promise — it never finalized the request in agentState the way the
session-level cancelPendingRequests path already does. A late answer to the
now-stale widget would still pass the hub's requests[id] check, forward via
RPC, land on a CLI that had already forgotten the request, and get silently
absorbed with no error anywhere.

Two changes, needed together:
- permissionHandler.ts's abort handler now calls finalizeRequest with
  status: 'canceled', so cancellation is reflected in agentState the same
  way a session-level cancel already is. Once synced to the hub, the
  existing requests[requestId] check in permissions.ts naturally rejects a
  late answer with 404 before it ever reaches the CLI.
- For the narrower race where an answer's RPC reaches the CLI before that
  sync lands, handleMissingPendingResponse now throws instead of only
  logging. RpcHandlerManager.handleRequest already turns a thrown error
  into a `{ error }` RPC response; RpcGateway.approvePermission/
  denyPermission now check for that and throw a typed
  PermissionRequestNotFoundError, which the hub route turns into a 409
  instead of silently returning { ok: true }.

Fixes #1735

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* fix(cli,hub): match the specific not-found message instead of any RPC error

approvePermission/denyPermission treated any error on the Permission RPC
method as "request not found", reasoning only in a code comment that
nothing else on that path currently throws. Share the exact message via a
new PERMISSION_REQUEST_NOT_FOUND_MESSAGE constant in shared/rpcMethods.ts,
imported by both sides, so a future unrelated throw in handlePermissionResponse
surfaces as itself instead of being relabeled as a stale request.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

---------

Co-authored-by: Ian Stevenson <is@lockhouse.systems>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-15 09:01:05 +08:00
..
2026-01-03 14:43:59 +08:00