[bwachman]

Summary

• An approval dropped by an interrupt or a worker's expiring ask is rejected on the rebuilt agent by every rebuild that keeps the session, until the store shows the call closed. The director commits that result without a new model turn, and the model sees it with the operator's next message.
• The TUI releases its rebuild hold when the director reports the drop settled.
• Builds on fix(reactor): keep rejected and timed-out approval results across a rebuild #1575, which keeps the rejection's result on disk across the rebuild.

Verification

• bun run check passes on each commit (9516 tests at the tip)
• e2e, over native Anthropic and OpenAI-shaped adapters: a drop settles on the rebuilt agent with no model request, the old deadline adds no result, and the next send carries the call and its result once. A deadline that passes during the rebuild settles the same way.

Related to CL-11433

[linear-code]

CL-11433

[corbits-triage]

Triage: Pass

No changes needed from you. A maintainer will review this pull request.

Stacked on #1575: only this pull request's own changes were checked.

[TheGreatAxios]

Review · Approve

Settles dropped approvals on a rebuilt agent without starting a new model turn.

No findings.

Reviewed ba3c091115d1c67be2376e65999a607caabd7db9 against this PR's declared #1575 base. Scoped architecture and permission lenses found no additional findings.

Verification: focused director, approval-resume, interrupt, exit, ask-wake, and reactor-reload suites: 278 passed. Temporary integration probes for an immediate operator send after settlement and interruption of a visible approval overlay each passed 10/10 runs; they were removed. bun run check: confirmed exit 0, 9,516 passed, 0 failed.