From af9b8f9cb681473c01a11ff23db6eb446ad461ba Mon Sep 17 00:00:00 2001 From: J Date: Tue, 14 Jul 2026 01:29:05 +0800 Subject: [PATCH] docs(agent): correct handleAgentRequest comment to match grant/deny/error behavior Co-authored-by: multica-agent --- server/pkg/agent/hermes.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/server/pkg/agent/hermes.go b/server/pkg/agent/hermes.go index 2d24b3b32..f28b44713 100644 --- a/server/pkg/agent/hermes.go +++ b/server/pkg/agent/hermes.go @@ -585,7 +585,9 @@ func (c *hermesClient) handleLine(line string) { // handleAgentRequest replies to JSON-RPC requests the agent sends // us (agent → client direction). The only one we care about today is // `session/request_permission`: the daemon is headless and cannot -// actually prompt a user, so we auto-approve every action. +// actually prompt a user, so we answer it ourselves — granting when a +// safe option is offered, otherwise declining just this action or +// failing closed (see below). // // The reply MUST select one of the optionIds the agent actually // offered — the ACP permission contract is "pick from these options",