Tianyi Cui abe80cec68 fix(loop): record a durable prompt/blocked for every vetoed prompt ... Address review on the interception-seams PR: PromptDecision.reason is documented as the durable record of why a prompt was blocked, but the loop only surfaced it via the fully-blocked batch's `rejected` turn/end. In a MIXED batch — one queued prompt blocked, another allowed — the turn does not end `rejected`, so the blocked prompt and its reason vanished from the session log entirely. Add a `prompt/blocked` SessionEventMap variant (content + source + reason), appended in the open turn at the veto point in place of the user/message the prompt would have become. It is a non-surface, turn-enclosed event (like todo/write): it never reaches deriveMessages(). The fully-blocked batch still also ends `rejected` for boundary balance + ACP settlement. Regression test drives a mixed batch and asserts the blocked prompt is recorded while the allowed one runs — proven red without the append.		2026-07-02 17:03:53 +08:00
..
bash.md	docs(bash): reframe stdin/env — the scrub is the security control, not a trust boundary	2026-07-02 04:08:24 +08:00
compaction.md	fix(compact): harden summarization convergence	2026-06-29 16:56:44 +08:00
core.md	fix(loop): record a durable prompt/blocked for every vetoed prompt	2026-07-02 17:03:53 +08:00
llm-streaming.md	simplify(llm): drop unconsumed adapter-change event and assembled call surfaces	2026-06-21 01:27:41 +08:00
persistence.md	docs: address review sync gaps	2026-07-01 12:56:13 +08:00
session.md	fix(loop): record a durable prompt/blocked for every vetoed prompt	2026-07-02 17:03:53 +08:00
subagent.md	Add the ACP subagent backend: out-of-process delegation (PR3)	2026-06-22 10:47:02 +08:00
tools.md	fix(events): address Codex review — protect post-execute result, purge stale tools/execute refs	2026-06-30 20:25:30 +08:00