Repository navigation
Return a read operation's output from operations propose - #27
Merged
Merged
Conversation
A read operation runs for real when it is proposed, but its play output lived only in the decision's .diff file, so an agent on the CLI or MCP could not read what it had just run. data.output now carries it, marked untrusted, and the read tool stops suggesting an approval. Closes #24 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01APTdZZw8Jw9PQF4TD55wMv
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #24
What changes
operations proposereturns a read operation's play output indata.output; the.difffile stays the recordexternalanddatacarries_trusted: falseoutput: nulldecisions approve --yesfor a run that needs no approvalWhy
Found in a spike where Nemotron 3 Super diagnosed a real disk-full incident through a declared catalog: read operations were the agent's only evidence, and it could not read them without opening files.
Checks
uv run pytest: 365 passed, two new CLI tests (read output returned and untrusted; no output for a proposed change)uv run ruff check .,uv run mypy: clean🤖 Generated with Claude Code
https://claude.ai/code/session_01APTdZZw8Jw9PQF4TD55wMv