feat(sdk): expose ConfirmationInheritance in Python and Node SDKs

Adds confirmation_inheritance field to WorkerAgentSpec and AgentDefinition
in both Python (PyO3) and Node (napi-rs) SDKs, mirroring the Rust core API.

Values: "auto_approve" (default), "deny_on_ask", "inherit_parent"

Changes:
- core/src/lib.rs: export ConfirmationInheritance from subagent module
- sdk/node: add confirmationInheritance to WorkerAgentSpec/AgentDefinition
- sdk/node: add parse/convert helpers for the enum
- sdk/node: regenerate index.d.ts with napi build
- sdk/python: add confirmation_inheritance to PyWorkerAgentSpec/PyAgentDefinition
- sdk/python: add parse/convert helpers for the enum

Both SDKs now expose the full capability inheritance contract introduced
in commit 2535474.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: claude

core/src/lib.rs

@@ -130,6 +130,6 @@ pub use run::{
     RunStatus,
 };
 pub use subagent::{
-    AgentDefinition, AgentRegistry, CattleAgentKind, CattleAgentSpec, WorkerAgentKind,
-    WorkerAgentSpec,
+    AgentDefinition, AgentRegistry, CattleAgentKind, CattleAgentSpec, ConfirmationInheritance,
+    WorkerAgentKind, WorkerAgentSpec,
 };

sdk/node/index.d.ts

@@ -226,6 +226,8 @@ export interface WorkerAgentSpec {
   prompt?: string
   /** Maximum execution steps/tool rounds. */
   maxSteps?: number
+  /** How child runs resolve Ask decisions: "auto_approve" (default), "deny_on_ask", or "inherit_parent". */
+  confirmationInheritance?: string
 }
 export interface AgentDefinition {
   name: string
@@ -235,6 +237,8 @@ export interface AgentDefinition {
   model?: string
   prompt?: string
   maxSteps?: number
+  /** How child runs resolve Ask decisions: "auto_approve", "deny_on_ask", or "inherit_parent". */
+  confirmationInheritance?: string
 }
 /**
  * HITL confirmation policy configuration.

sdk/node/src/lib.rs

@@ -1494,6 +1494,8 @@ pub struct WorkerAgentSpec {
     pub prompt: Option<String>,
     /// Maximum execution steps/tool rounds.
     pub max_steps: Option<u32>,
+    /// How child runs resolve Ask decisions: "auto_approve" (default), "deny_on_ask", or "inherit_parent".
+    pub confirmation_inheritance: Option<String>,
 }
 
 #[napi(object)]
@@ -1505,6 +1507,8 @@ pub struct AgentDefinition {
     pub model: Option<String>,
     pub prompt: Option<String>,
     pub max_steps: Option<u32>,
+    /// How child runs resolve Ask decisions: "auto_approve", "deny_on_ask", or "inherit_parent".
+    pub confirmation_inheritance: Option<String>,
 }
 
 /// HITL confirmation policy configuration.
@@ -2229,6 +2233,9 @@ fn js_worker_agent_spec_to_rust(spec: WorkerAgentSpec) -> napi::Result<RustWorke
     if let Some(max_steps) = spec.max_steps {
         worker = worker.with_max_steps(max_steps as usize);
     }
+    if let Some(ci) = spec.confirmation_inheritance {
+        worker = worker.with_confirmation(parse_confirmation_inheritance(&ci)?);
+    }
     Ok(worker)
 }
 
@@ -2238,6 +2245,32 @@ fn parse_worker_agent_kind(kind: Option<&str>) -> napi::Result<RustWorkerAgentKi
         .map_err(|e| napi::Error::from_reason(e.to_string()))
 }
 
+fn parse_confirmation_inheritance(
+    value: &str,
+) -> napi::Result<a3s_code_core::subagent::ConfirmationInheritance> {
+    use a3s_code_core::subagent::ConfirmationInheritance;
+    match value {
+        "auto_approve" => Ok(ConfirmationInheritance::AutoApprove),
+        "deny_on_ask" => Ok(ConfirmationInheritance::DenyOnAsk),
+        "inherit_parent" => Ok(ConfirmationInheritance::InheritParent),
+        other => Err(napi::Error::from_reason(format!(
+            "invalid confirmation_inheritance: '{}' (expected: auto_approve, deny_on_ask, inherit_parent)",
+            other
+        ))),
+    }
+}
+
+fn confirmation_inheritance_to_js(
+    ci: &a3s_code_core::subagent::ConfirmationInheritance,
+) -> String {
+    use a3s_code_core::subagent::ConfirmationInheritance;
+    match ci {
+        ConfirmationInheritance::AutoApprove => "auto_approve".to_string(),
+        ConfirmationInheritance::DenyOnAsk => "deny_on_ask".to_string(),
+        ConfirmationInheritance::InheritParent => "inherit_parent".to_string(),
+    }
+}
+
 fn rust_agent_definition_to_js(def: RustAgentDefinition) -> AgentDefinition {
     AgentDefinition {
         name: def.name,
@@ -2247,6 +2280,10 @@ fn rust_agent_definition_to_js(def: RustAgentDefinition) -> AgentDefinition {
         model: def.model.map(|model| model.model_ref()),
         prompt: def.prompt,
         max_steps: def.max_steps.map(|steps| steps as u32),
+        confirmation_inheritance: def
+            .confirmation_inheritance
+            .as_ref()
+            .map(confirmation_inheritance_to_js),
     }
 }
 

sdk/python/src/lib.rs

@@ -3330,6 +3330,8 @@ struct PyWorkerAgentSpec {
     prompt: Option<String>,
     #[pyo3(get, set)]
     max_steps: Option<usize>,
+    #[pyo3(get, set)]
+    confirmation_inheritance: Option<String>,
 }
 
 #[pymethods]
@@ -3346,6 +3348,7 @@ impl PyWorkerAgentSpec {
             model: None,
             prompt: None,
             max_steps: None,
+            confirmation_inheritance: None,
         }
     }
 
@@ -3405,6 +3408,8 @@ struct PyAgentDefinition {
     prompt: Option<String>,
     #[pyo3(get)]
     max_steps: Option<usize>,
+    #[pyo3(get)]
+    confirmation_inheritance: Option<String>,
 }
 
 #[pymethods]
@@ -3450,9 +3455,38 @@ fn py_worker_agent_spec_to_rust(spec: PyWorkerAgentSpec) -> PyResult<RustWorkerA
     if let Some(max_steps) = spec.max_steps {
         worker = worker.with_max_steps(max_steps);
     }
+    if let Some(ci) = spec.confirmation_inheritance {
+        worker = worker.with_confirmation(parse_py_confirmation_inheritance(&ci)?);
+    }
     Ok(worker)
 }
 
+fn parse_py_confirmation_inheritance(
+    value: &str,
+) -> PyResult<a3s_code_core::subagent::ConfirmationInheritance> {
+    use a3s_code_core::subagent::ConfirmationInheritance;
+    match value {
+        "auto_approve" => Ok(ConfirmationInheritance::AutoApprove),
+        "deny_on_ask" => Ok(ConfirmationInheritance::DenyOnAsk),
+        "inherit_parent" => Ok(ConfirmationInheritance::InheritParent),
+        other => Err(PyValueError::new_err(format!(
+            "invalid confirmation_inheritance: '{}' (expected: auto_approve, deny_on_ask, inherit_parent)",
+            other
+        ))),
+    }
+}
+
+fn confirmation_inheritance_to_py(
+    ci: &a3s_code_core::subagent::ConfirmationInheritance,
+) -> String {
+    use a3s_code_core::subagent::ConfirmationInheritance;
+    match ci {
+        ConfirmationInheritance::AutoApprove => "auto_approve".to_string(),
+        ConfirmationInheritance::DenyOnAsk => "deny_on_ask".to_string(),
+        ConfirmationInheritance::InheritParent => "inherit_parent".to_string(),
+    }
+}
+
 fn rust_agent_definition_to_py(def: RustAgentDefinition) -> PyAgentDefinition {
     PyAgentDefinition {
         name: def.name,
@@ -3462,6 +3496,10 @@ fn rust_agent_definition_to_py(def: RustAgentDefinition) -> PyAgentDefinition {
         model: def.model.map(|model| model.model_ref()),
         prompt: def.prompt,
         max_steps: def.max_steps,
+        confirmation_inheritance: def
+            .confirmation_inheritance
+            .as_ref()
+            .map(confirmation_inheritance_to_py),
     }
 }