Commit d81afa0a6f403bd6e5562ffcee2484089a1fdc3f | the-knife

author	Theo Browne <me@t3.gg> 2026-10-08 15:39:09-07:00
committer	GitHub <noreply@github.com> 2026-10-08 15:39:09-07:00
log	d81afa0a6f403bd6e5562ffcee2484089a1fdc3f
tree	bbe783a502a90b482f5aede7491ed238f68c6db4
parent	48b71f0eb323d08c8fcadfe54adf34becb2984da
signature	Signed by PGP key B5690EEEBB952194

fix(muse): workflow subagents no longer stall on hidden approvals (#17329)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

3 files changed, 187 insertions(+), 66 deletions(-)

apps
- server
  - src
    orchestration-v2
    Adapters
    MuseAdapterV2.test.ts
    MuseAdapterV2.ts
    provider
    museProtocol.ts

apps/server/src/orchestration-v2/Adapters/MuseAdapterV2.test.ts+59

...	@@ -809,6 +809,65 @@ describe("MuseAdapterV2", () => {	...	@@ -809,6 +809,65 @@ describe("MuseAdapterV2", () => {
809	}).pipe(Effect.scoped, Effect.provide(testLayer)),	809	}).pipe(Effect.scoped, Effect.provide(testLayer)),
810	);	810	);
811		811
		812	it.effect("approves a workflow child's approval in full access after its turn ended", () =>
		813	Effect.gen(function* () {
		814	const fake = yield* makeFakeMuse();
		815	const harness = yield* makeHarness(fake);
		816	const { nativeId } = yield* startConversation(harness, fake);
		817	yield* fake.emit("turn/completed", { turnId: nativeId, terminal: "completed" });
		818	yield* harness.takeEvent("turn.terminal");
		819	// Muse runs workflow children without the session's allowAll mode.
		820	const childApproval = { ...approval("child-run-1"), subagentOrigin: { subagentId: "a7" } };
		821	yield* fake.emit("approval/requested", childApproval);
		822	const asked = yield* harness.takeEvent("runtime_request.updated");
		823	assert.strictEqual(asked.runtimeRequest.status, "pending");
		824	assert.isNull(asked.runtimeRequest.providerTurnId);
		825	const decision = yield* fake.takeCall("approval/decide");
		826	assert.strictEqual(decision.params.choiceId, "once");
		827	yield* fake.emit("approval/resolved", childApproval);
		828	const resolved = yield* harness.takeEvent("runtime_request.updated");
		829	assert.strictEqual(resolved.runtimeRequest.status, "resolved");
		830	assert.strictEqual(resolved.runtimeRequest.decision, "accept");
		831	}).pipe(Effect.scoped, Effect.provide(testLayer)),
		832	);
		833
		834	it.effect("keeps a workflow child's approval pending for the user past the turn's end", () =>
		835	Effect.gen(function* () {
		836	const fake = yield* makeFakeMuse();
		837	const policy = ProviderAdapterV2RuntimePolicy.make({
		838	...runtimePolicy,
		839	runtimeMode: "approval-required",
		840	});
		841	const harness = yield* makeHarness(
		842	fake,
		843	INSTANCE_ID,
		844	undefined,
		845	undefined,
		846	undefined,
		847	policy,
		848	);
		849	const { nativeId } = yield* startConversation(harness, fake);
		850	const childApproval = { ...approval("child-run-1"), subagentOrigin: { subagentId: "a7" } };
		851	yield* fake.emit("approval/requested", childApproval);
		852	const asked = yield* harness.takeEvent("runtime_request.updated");
		853	assert.isNull(asked.runtimeRequest.providerTurnId);
		854	yield* fake.emit("turn/completed", { turnId: nativeId, terminal: "completed" });
		855	yield* harness.takeEvent("turn.terminal");
		856	assert.isFalse(
		857	harness.allEvents.some(
		858	(event) =>
		859	event.type === "runtime_request.updated" && event.runtimeRequest.status !== "pending",
		860	),
		861	);
		862	yield* harness.runtime.respondToRuntimeRequest({
		863	requestId: asked.runtimeRequest.id,
		864	decision: "decline",
		865	});
		866	const decision = yield* fake.takeCall("approval/decide");
		867	assert.strictEqual(decision.params.choiceId, "deny");
		868	}).pipe(Effect.scoped, Effect.provide(testLayer)),
		869	);
		870
812	it.effect("validates structured answers and preserves selected labels with a custom note", () =>	871	it.effect("validates structured answers and preserves selected labels with a custom note", () =>
813	Effect.gen(function* () {	872	Effect.gen(function* () {
814	const fake = yield* makeFakeMuse();	873	const fake = yield* makeFakeMuse();

apps/server/src/orchestration-v2/Adapters/MuseAdapterV2.ts+126-66

 @@ -18,6 +18,7 @@ import {
   type ProviderInstanceId,
   type PlanId,
   type OrchestrationV2PlanStep,
+  type ProviderApprovalDecision,
   type RuntimeRequestId,
   type ServerProviderModel,
 } from "@t3tools/contracts";
 @@ -157,7 +158,7 @@ const MuseProviderCapabilitiesV2 = {
     supportsApplyPatchApproval: false,
     approvalsHaveNativeRequestIds: true,
     approvalCallbacksAreLiveOnly: true,
-    approvalsCanOriginateFromSubagents: false,
+    approvalsCanOriginateFromSubagents: true,
   },
   planning: {
     emitsPlanUpdated: true,
 @@ -664,6 +665,8 @@ export function makeMuseAdapterV2(options: MuseAdapterV2Options): ProviderAdapte
         }
         observedChildren.clear();
         if (thread?.pendingBackgroundTasks?.length) yield* syncBackground();
+        // Only workflow children's requests outlive a turn; they end with the workflow.
+        for (const entry of pending.values()) yield* resolvePending(entry, "cancelled");
       });
       const resolvePending = Effect.fnUntraced(function* (
         entry: PendingRequest,
 @@ -718,7 +721,9 @@ export function makeMuseAdapterV2(options: MuseAdapterV2Options): ProviderAdapte
             yield* publishItem(turn, item, item.status === "inProgress" ? status : undefined);
         }
         turn.dirty.clear();
-        for (const entry of pending.values()) yield* resolvePending(entry, "cancelled");
+        // A workflow child's request is runless and keeps waiting after the turn ends.
+        for (const entry of pending.values())
+          if (entry.request.providerTurnId !== null) yield* resolvePending(entry, "cancelled");
         turn.providerTurn = { ...turn.providerTurn, status, completedAt };
         lastProviderTurn = turn.providerTurn;
         yield* emit({
 @@ -801,28 +806,54 @@ export function makeMuseAdapterV2(options: MuseAdapterV2Options): ProviderAdapte
       });
       const owns = (turn: ActiveTurn, turnId: string) =>
         turnId === turn.nativeId || turn.joined.has(turnId);
+      /** Sends T3's decision for a pending approval to Muse. */
+      const decideApproval = Effect.fnUntraced(function* (
+        entry: PendingRequest,
+        decision: ProviderApprovalDecision | undefined,
+      ) {
+        if (entry.native.type !== "approval") return;
+        const approval = entry.native.value;
+        const choice = decision && museApprovalChoices(approval).get(decision);
+        if (!choice) return yield* protocolError("Muse did not offer this approval decision");
+        // Recorded first: Muse can settle the approval before it acknowledges the command.
+        entry.response = { decision };
+        yield* request("approval/decide", {
+          approvalId: approval.approvalId,
+          requirementId: approval.currentRequirementId,
+          choiceId: choice.choiceId,
+        }).pipe(Effect.tapError(() => Effect.sync(() => delete entry.response)));
+      });
+      /**
+       * Shows a Muse approval or question as a T3 request. A workflow child's approval
+       * is runless: the turn that started the workflow may end long before the child
+       * asks, and T3 keeps a runless request on the thread until Muse settles it.
+       */
       const publishRequest = Effect.fnUntraced(function* (native: PendingRequest["native"]) {
-        const turn = active;
+        const child = native.type === "approval" && native.value.subagentOrigin !== undefined;
+        const turn = child ? undefined : active;
         if (
-          !turn ||
+          !thread ||
+          (!child && !turn) ||
           native.value.sessionId !== nativeSessionId ||
-          (native.value.turnId && !owns(turn, native.value.turnId))
+          (turn && native.value.turnId && !owns(turn, native.value.turnId))
         )
           return;
         const nativeId =
           native.type === "approval" ? native.value.approvalId : native.value.userInputId;
-        if (turn.settledRequests.has(`${native.type}:${nativeId}`)) return;
+        if (turn?.settledRequests.has(`${native.type}:${nativeId}`)) return;
         const previous = [...pending.values()].find(
           (entry) =>
             entry.native.type === native.type &&
             entry.request.nativeRequestRef?.nativeId === nativeId,
         );
+        const providerTurnId = turn?.providerTurn.id ?? null;
+        const threadId = turn?.input.threadId ?? thread.appThreadId ?? input.threadId;
         const requestId =
           previous?.request.id ??
           (yield* idAllocator.allocate
             .runtimeRequest({
               driver: MUSE_PROVIDER,
-              providerTurnId: turn.providerTurn.id,
+              ...(providerTurnId ? { providerTurnId } : {}),
               nativeRequestId: nativeId,
             })
             .pipe(
 @@ -843,7 +874,7 @@ export function makeMuseAdapterV2(options: MuseAdapterV2Options): ProviderAdapte
         const runtimeRequest: OrchestrationV2RuntimeRequest = {
           id: requestId,
           nodeId,
-          providerTurnId: turn.providerTurn.id,
+          providerTurnId,
           nativeRequestRef: nativeRef(nativeId),
           kind,
           status: "pending",
 @@ -853,23 +884,37 @@ export function makeMuseAdapterV2(options: MuseAdapterV2Options): ProviderAdapte
         };
         const node: OrchestrationV2ExecutionNode = {
           id: nodeId,
-          threadId: turn.input.threadId,
+          threadId,
-          runId: turn.input.runId,
+          runId: turn?.input.runId ?? null,
-          parentNodeId: turn.input.rootNodeId,
+          parentNodeId: turn?.input.rootNodeId ?? null,
-          rootNodeId: turn.input.rootNodeId,
+          rootNodeId: turn?.input.rootNodeId ?? nodeId,
           kind: native.type === "approval" ? "approval_request" : "user_input_request",
           status: "waiting",
           countsForRun: false,
-          providerThreadId: turn.input.providerThread.id,
+          providerThreadId: thread.id,
-          providerTurnId: turn.providerTurn.id,
+          providerTurnId,
           nativeItemRef: nativeRef(nativeId),
           runtimeRequestId: requestId,
           checkpointScopeId: null,
           startedAt: runtimeRequest.createdAt,
           completedAt: null,
         };
+        const latestTurn = active?.providerTurn ?? lastProviderTurn;
         const base = {
-          ...baseItem(turn, `request:${nativeId}`, time),
+          ...(turn
+            ? baseItem(turn, `request:${nativeId}`, time)
+            : {
+                threadId,
+                runId: null,
+                providerThreadId: thread.id,
+                providerTurnId: null,
+                nativeItemRef: nativeRef(nativeId),
+                parentItemId: null,
+                // Sorts after the latest turn's items.
+                ordinal: previous?.item.ordinal ?? ((latestTurn?.ordinal ?? 0) + 1) * 100,
+                startedAt: runtimeRequest.createdAt,
+                updatedAt: time,
+              }),
           id: idAllocator.derive.approvalTurnItem({ requestId }),
           nodeId,
           status: "waiting" as const,
 @@ -909,16 +954,71 @@ export function makeMuseAdapterV2(options: MuseAdapterV2Options): ProviderAdapte
                   required: true,
                 })),
               };
-        pending.set(requestId, { native, request: runtimeRequest, node, item });
+        const entry: PendingRequest = { native, request: runtimeRequest, node, item };
+        pending.set(requestId, entry);
         yield* emit({
           type: "runtime_request.updated",
           driver: MUSE_PROVIDER,
-          threadId: turn.input.threadId,
+          threadId,
           runtimeRequest,
         });
         yield* emit({ type: "node.updated", driver: MUSE_PROVIDER, node });
         yield* emit({ type: "turn_item.updated", driver: MUSE_PROVIDER, turnItem: item });
         yield* updateSession("waiting");
+        // Muse does not give workflow children the session's allowAll mode, so in full
+        // access T3 approves for them. If Muse rejects that, the request waits for the user.
+        if (child && input.runtimePolicy.runtimeMode === "full-access")
+          yield* decideApproval(entry, "accept").pipe(Effect.ignore, Effect.forkIn(scope));
+      });
+      /** Approval and question events; `turn` is undefined for a workflow child's approval. */
+      const handleRequestEvent = Effect.fnUntraced(function* (
+        method: string,
+        params: Record<string, unknown>,
+        turn: ActiveTurn | undefined,
+      ) {
+        switch (method) {
+          case "approval/requested":
+          case "approval/updated":
+            if (
+              method === "approval/updated" &&
+              ![...pending.values()].some(
+                (entry) =>
+                  entry.native.type === "approval" &&
+                  entry.native.value.approvalId === params.approvalId,
+              )
+            )
+              return;
+            return yield* publishRequest({
+              type: "approval",
+              value: yield* decode(MuseApproval, params),
+            });
+          case "userInput/requested":
+            return yield* publishRequest({
+              type: "question",
+              value: yield* decode(MuseUserInput, params),
+            });
+          case "approval/resolved":
+          case "userInput/settled": {
+            const id = method === "approval/resolved" ? params.approvalId : params.userInputId;
+            if (typeof id === "string")
+              turn?.settledRequests.add(
+                `${method === "approval/resolved" ? "approval" : "question"}:${id}`,
+              );
+            const entry = [...pending.values()].find(
+              (candidate) => candidate.request.nativeRequestRef?.nativeId === id,
+            );
+            if (entry) {
+              // An approval settled outside T3 still shows Muse's own decision.
+              const native =
+                method === "approval/resolved" && typeof params.decision === "string"
+                  ? museApprovalDecision({ decision: params.decision, scope: "once" })
+                  : undefined;
+              if (!entry.response && native) entry.response = { decision: native };
+              yield* resolvePending(entry, "resolved");
+            }
+            if (!pending.size) yield* updateSession(active ? "running" : "ready");
+          }
+        }
       });
       const handleNotification = Effect.fnUntraced(function* (method: string, data: unknown) {
         const params = yield* decode(recordSchema, data);
 @@ -962,6 +1062,10 @@ export function makeMuseAdapterV2(options: MuseAdapterV2Options): ProviderAdapte
             return;
           }
         }
+        // A workflow child's approval comes under the child's own run id, during a turn
+        // or after it, so it skips turn routing.
+        if (params.subagentOrigin !== undefined && method.startsWith("approval/"))
+          return yield* handleRequestEvent(method, params, undefined);
         // Muse starts a turn on its own when a workflow finishes, to report its result.
         // During a run, that run shows it. Otherwise hold it and ask the orchestrator for
         // a run; that run takes the held events, unless a user turn takes them first.
 @@ -1097,45 +1201,11 @@ export function makeMuseAdapterV2(options: MuseAdapterV2Options): ProviderAdapte
           }
           case "approval/requested":
           case "approval/updated":
-            if (
-              method === "approval/updated" &&
-              ![...pending.values()].some(
-                (entry) =>
-                  entry.native.type === "approval" &&
-                  entry.native.value.approvalId === params.approvalId,
-              )
-            )
-              break;
-            yield* publishRequest({ type: "approval", value: yield* decode(MuseApproval, params) });
-            break;
-          case "userInput/requested":
-            yield* publishRequest({
-              type: "question",
-              value: yield* decode(MuseUserInput, params),
-            });
-            break;
           case "approval/resolved":
-          case "userInput/settled": {
+          case "userInput/requested":
-            const id = method === "approval/resolved" ? params.approvalId : params.userInputId;
+          case "userInput/settled":
-            if (typeof id === "string")
+            yield* handleRequestEvent(method, params, turn);
-              turn.settledRequests.add(
-                `${method === "approval/resolved" ? "approval" : "question"}:${id}`,
-              );
-            const entry = [...pending.values()].find(
-              (candidate) => candidate.request.nativeRequestRef?.nativeId === id,
-            );
-            if (entry) {
-              // An approval settled outside T3 still shows Muse's own decision.
-              const native =
-                method === "approval/resolved" && typeof params.decision === "string"
-                  ? museApprovalDecision({ decision: params.decision, scope: "once" })
-                  : undefined;
-              if (!entry.response && native) entry.response = { decision: native };
-              yield* resolvePending(entry, "resolved");
-            }
-            if (!pending.size) yield* updateSession("running");
             break;
-          }
           case "session/tokenUsage": {
             const usage = yield* decode(MuseTokenUsageEvent, params);
             const previous = turn.providerTurn.turnTokenUsage;
 @@ -1892,18 +1962,8 @@ export function makeMuseAdapterV2(options: MuseAdapterV2Options): ProviderAdapte
           Effect.gen(function* () {
             const entry = pending.get(args.requestId);
             if (!entry) return yield* protocolError("This Muse request is no longer pending");
-            if (entry.native.type === "approval") {
+            if (entry.native.type === "approval") yield* decideApproval(entry, args.decision);
-              const approval = entry.native.value;
+            else {
-              const choice = args.decision && museApprovalChoices(approval).get(args.decision);
-              if (!choice) return yield* protocolError("Muse did not offer this approval decision");
-              // Recorded first: Muse can settle the approval before it acknowledges the command.
-              entry.response = { decision: args.decision };
-              yield* request("approval/decide", {
-                approvalId: approval.approvalId,
-                requirementId: approval.currentRequirementId,
-                choiceId: choice.choiceId,
-              }).pipe(Effect.tapError(() => Effect.sync(() => delete entry.response)));
-            } else {
               const questionRequest = entry.native.value;
               const answers = [];
               for (const question of questionRequest.questions) {

apps/server/src/provider/museProtocol.ts+2

...	@@ -91,6 +91,8 @@ export const MuseApproval = Schema.Struct({	...	@@ -91,6 +91,8 @@ export const MuseApproval = Schema.Struct({
91	itemId: Schema.optional(Schema.String),	91	itemId: Schema.optional(Schema.String),
92	toolName: Schema.optional(Schema.String),	92	toolName: Schema.optional(Schema.String),
93	rawArgs: Schema.optional(Schema.String),	93	rawArgs: Schema.optional(Schema.String),
		94	/** Set when a workflow child asks; `turnId` is then the child's run, not a session turn. */
		95	subagentOrigin: Schema.optional(Schema.Struct({ subagentId: NonEmptyString })),
94	currentRequirementId: Schema.Struct({ approvalId: NonEmptyString, sourceIndex: Schema.Int }),	96	currentRequirementId: Schema.Struct({ approvalId: NonEmptyString, sourceIndex: Schema.Int }),
95	availableChoices: Schema.Array(	97	availableChoices: Schema.Array(
96	Schema.Struct({	98	Schema.Struct({