feat(node-sdk): add HITL confirmation policy support to SessionOptions

Add ConfirmationPolicy configuration to Node.js SDK to enable
Human-in-the-Loop confirmation for tool execution.

Changes:
- Add ConfirmationPolicy type with enabled, defaultTimeoutMs, timeoutAction
- Add confirmation_policy field to SessionOptions
- Import hitl module types (ConfirmationPolicy, TimeoutAction)
- Convert JS ConfirmationPolicy to Rust ConfirmationPolicy in js_session_options_to_rust
- Pass confirmation policy to session via with_confirmation_policy()

This fixes the "Tool requires confirmation but no HITL confirmation manager
is configured" error by allowing users to configure HITL confirmation policy
when creating sessions.

Usage:
```js
agent.session('.', {
  confirmationPolicy: {
    enabled: true,
    defaultTimeoutMs: 30000,
    timeoutAction: 'reject'
  }
});
```

When enabled, tools that require confirmation will emit ConfirmationRequired
events and wait for user approval before executing.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: claude

sdk/node/src/lib.rs

@@ -26,6 +26,10 @@ use a3s_code_core::config::{
     SearchConfig as RustSearchConfig, SearchEngineConfig as RustSearchEngineConfig,
     SearchHealthConfig as RustSearchHealthConfig,
 };
+use a3s_code_core::hitl::{
+    ConfirmationManager as RustConfirmationManager,
+    ConfirmationPolicy as RustConfirmationPolicy, TimeoutAction as RustTimeoutAction,
+};
 use a3s_code_core::hooks::{
     Hook as RustHook, HookConfig as RustHookConfig, HookEvent as RustHookEvent,
     HookEventType as RustHookEventType, HookHandler as RustHookHandler,
@@ -1258,6 +1262,20 @@ pub struct PermissionPolicy {
     pub enabled: Option<bool>,
 }
 
+/// HITL confirmation policy configuration.
+///
+/// Controls the runtime behavior of Human-in-the-Loop confirmation flow.
+#[napi(object)]
+#[derive(Default)]
+pub struct ConfirmationPolicy {
+    /// Whether HITL is enabled (default: false, all tools auto-approved).
+    pub enabled: Option<bool>,
+    /// Default timeout in milliseconds (default: 30000 = 30s).
+    pub default_timeout_ms: Option<u32>,
+    /// Action to take on timeout: "reject" or "auto_approve" (default: "reject").
+    pub timeout_action: Option<String>,
+}
+
 #[napi(object)]
 #[derive(Default)]
 pub struct SessionOptions {
@@ -1377,6 +1395,22 @@ pub struct SessionOptions {
     /// agent.session('.', { ahpTransport: new UnixSocketTransport('/tmp/ahp.sock') });
     /// ```
     pub ahp_transport: Option<JsAhpTransport>,
+    /// HITL confirmation policy configuration.
+    ///
+    /// Pass a confirmation policy to enable Human-in-the-Loop confirmation for tool execution.
+    /// When enabled, tools that require confirmation will emit ConfirmationRequired events
+    /// and wait for user approval before executing.
+    ///
+    /// ```js
+    /// agent.session('.', {
+    ///   confirmationPolicy: {
+    ///     enabled: true,
+    ///     defaultTimeoutMs: 30000,
+    ///     timeoutAction: 'reject'
+    ///   }
+    /// });
+    /// ```
+    pub confirmation_policy: Option<ConfirmationPolicy>,
 }
 
 /// A single message in conversation history.
@@ -1672,6 +1706,30 @@ fn js_session_options_to_rust(options: Option<SessionOptions>) -> RustSessionOpt
         opts = opts.with_max_continuation_turns(turns);
     }
 
+    // HITL confirmation policy configuration
+    if let Some(policy) = o.confirmation_policy {
+        let mut rust_policy = RustConfirmationPolicy::default();
+
+        if let Some(enabled) = policy.enabled {
+            if enabled {
+                rust_policy = RustConfirmationPolicy::enabled();
+            }
+        }
+
+        if let Some(timeout_ms) = policy.default_timeout_ms {
+            let timeout_action = match policy.timeout_action.as_deref() {
+                Some("auto_approve") => RustTimeoutAction::AutoApprove,
+                _ => RustTimeoutAction::Reject,
+            };
+            rust_policy = rust_policy.with_timeout(timeout_ms as u64, timeout_action);
+        }
+
+        // Create confirmation manager with the policy
+        // Note: We need access to event_tx from the session, so we'll set this up
+        // in the Agent's session creation logic instead
+        opts = opts.with_confirmation_policy(rust_policy);
+    }
+
     // AHP transport configuration
     #[cfg(feature = "ahp")]
     if let Some(ref transport) = o.ahp_transport {