Approve or reject agent actions

When an autonomous agent reaches a point it should not pass without a human, it pauses and asks for approval. SupaCloud surfaces that one pending decision as an interactive approval you can answer from any control surface — the web terminal, Telegram, or Discord. The agent stays blocked on exactly that decision until you respond (or its timeout policy resolves it for you).

There are four kinds of approval:

Kind	What it is	Example
Tool	A dangerous tool call the agent wants to run	A Bash command, a deploy, a migration
Question	An open question the agent asks before continuing	“Which environment should I target?”
Visual	A before/after screenshot sign-off	UI change captured for human review
Model class change	The pinned model class ran out and SupaCloud wants to drop to a weaker one	“Premium quota exhausted — continue on the standard class?”

Two of them can be raised by SupaCloud itself rather than by the agent: a safety hold (a Tool gate SupaCloud forces after the agent reached for something in the danger set — the run is interrupted and parked) and the model class change above. Both reach your chat with the same card and the same buttons; before, they were visible only in the web UI.

Note

At most one approval is pending per task — the whole task blocks on that one decision. The decision payload is redacted before it is sent to a chat surface (API keys, tokens and other secret-shaped values are masked), so a prompt safely shows what the agent wants without leaking credentials.

Approve from the web terminal

In the web terminal at /cli, list every paused agent in the active workspace and decide one by its short id.

Standalone commands

# List the interactive approvals waiting across the workspace
tool-approvals

# Approve or reject one by its (short) approval id; an optional note
# is passed back to the agent as your reason / answer
approve-tool <id> [note]
reject-tool <id> [note]

The id is resolved by prefix the same way task ids are: a unique prefix decides the gate; an ambiguous or unknown prefix is reported rather than guessed.

You can also list both interactive and workflow approvals together:

approvals                     # both sources, each under its own heading
approvals --filter=tool       # only the interactive tool/question/visual gates
approvals --filter=workflow   # only workflow human-gates

Live mode

After you follow (or run) a task and it pauses, the terminal renders the gate inline — the kind, the tool name or question, and any before/after image URLs — then waits for your next input line:

• approve, yes, y, or ok approves. Anything after the verb is sent as your note.
• reject, no, n, or deny rejects, with an optional reason.
• For a question gate, a plain free-text line (no verb) is treated as the answer and approves the gate, carrying your text back to the agent.

Caution

For a tool or visual gate, a line that is not a verdict is held — the gate stays open and the decide hint is reprinted — rather than being sent to the agent. The agent is blocked on the gate, so a stray line is never auto-approved.

Approve from Telegram or Discord

When a task you own pauses, SupaCloud posts an approval card to your linked chat — one message with the kind, the task title, the redacted detail, any before/after image previews, a direct link to the task, and inline Approve / Reject buttons. Tap a button to decide; you never type an id.

For a tool gate the card leads with the agent’s intent — the tool call’s own description, or the safety reason that held the run — then shows the actual command in monospace. A shell command whose every part only reads carries a small reads only chip as orientation; the raw call payload stays one tap away in a collapsed quote. After you decide, the card keeps the request visible and appends your verdict beneath it, so the chat history still says what was allowed or denied.

If the agent asks something that is not a gate — an open question mid-run — the push carries the question itself and a Reply button. Press it and simply type your answer: it is routed to that exact task, because the button carries the task reference. /intervene <id> <message> still works for scripts and automation, but it is no longer the only way to answer from a phone.

Note

A message that was merely delivered to an agent is not an alarm. Your own /intervene, and every automatic nudge SupaCloud sends an agent (keeping a coordinator waiting for its subtasks, resuming a resolved approval, changing the model or effort of a live run), no longer produces an “approval needed” push — the automatic ones produce no push at all and are labelled System in the live feed.

Telegram

• A paused task pushes the card automatically to the chat linked to the task owner. Tap Approve or Reject; the bot replies with a confirmation.

• To review what is waiting at any time:

  /approvals          # both human-gate and interactive approvals
  /approvals tool     # only the interactive tool/question/visual gates
  /approvals workflow # only workflow human-gates

Discord

• The same card is posted to the linked Discord identity, with Approve / Reject buttons. Visual gates embed the before/after screenshots inline.

• List pending approvals with:

  /approvals

Note

The card is only pushed to chat when the task owner has a chat account linked. If no chat is linked the web terminal (and the API) still resolve the same gate — nothing is lost. See Connect a Telegram bot or Connect a Discord bot to link an account.

The visual before/after card

A visual approval is a sign-off on a UI change. The card carries:

• The before/after screenshots as signed, time-limited image links (Telegram previews them, Discord embeds them; in the web terminal they print as URLs).
• The machine judge verdict when one ran — PASS, FAIL, or not run — human review — followed by the reasons the judge gave, so you can see why the automated check thinks the change passes or fails before you decide.

If the screenshot links cannot be built (the capture-serve secret is unset) the card degrades to text-only: it still lists what was captured and the judge verdict, so you can always make a decision.

What happens when an approval times out

Every approval carries a timeout policy that decides what happens if no human responds:

Policy	Behaviour	Used for
Hold	Blocks forever until a human decides — never auto-resolved	Deploys, migrations, and any action forced to wait on a human
Deny	Auto-denied after a deadline so the agent continues without the action	Optional questions and lower-risk gates

The deny deadlines are per kind: a tool waits 5 minutes, a question 30 minutes, and a visual sign-off 1 hour. When a deny gate times out the agent is unblocked with a denial and continues; a hold gate simply waits.

Caution

A mid-run danger signal forces a Hold approval even on a fully autonomous task — it overrides the autonomy level so the agent cannot proceed past a flagged action without you. The accompanying telemetry event records why the run was held.

See also

• Web terminal command reference
• Telegram commands
• Track usage and budget