CLI tool approvals

import readline from "node:readline/promises";
import { stdin as input, stdout as output } from "node:process";
import { prompt } from "@use-crux/core";
import { approvalMiddleware } from "@use-crux/core/tool-middleware";
import { toolApprovalResponse } from "@use-crux/core/adapter/tool";
import { generate, tool } from "@use-crux/ai";
import { openai } from "@ai-sdk/openai";
import { z } from "zod";

const shell = tool({
  description: "Run a safe shell command.",
  inputSchema: z.object({ command: z.string() }),
  execute: async ({ command }) => runAllowedCommand(command),
});

const assistant = prompt({
  id: "cli-agent",
  input: z.object({ task: z.string() }),
  system: "Help with local maintenance. Ask for approval before running shell.",
  prompt: ({ input }) => input.task,
  tools: { shell },
  toolMiddleware: [
    approvalMiddleware({
      id: "shell-approval",
      match: ["shell"],
      onApproved: ({ input }) => audit.write({ action: "approved", input }),
      onDenied: ({ reason }) => audit.write({ action: "denied", reason }),
    }),
  ],
});

const first = await generate(assistant, {
  model: openai("gpt-4o"),
  input: { task: "Clean temporary files." },
});

const request = first.response.messages
  .flatMap((message) => (Array.isArray(message.content) ? message.content : []))
  .find((part) => part.type === "tool-approval-request");

if (!request) {
  console.log(first.text);
  process.exit(0);
}

const rl = readline.createInterface({ input, output });
const answer = await rl.question(
  `Approve ${request.toolCall.toolName}? [y/N] `,
);
rl.close();

const approved = answer.toLowerCase() === "y";

const final = await generate(assistant, {
  model: openai("gpt-4o"),
  input: { task: "Clean temporary files." },
  messages: [
    ...first.response.messages,
    {
      role: "tool",
      content: [
        toolApprovalResponse({
          approvalId: request.approvalId,
          approved,
          ...(!approved ? { reason: "Denied in CLI" } : {}),
        }),
      ],
    },
  ],
});

console.log(final.text);