implemented · native round-trip
Codex PermissionRequest
Session + turn + tool boundary enter the Gateway. Your decision returns as native allow/deny to the same waiting Codex tool call.
humanq connect codex
PermissionRequest → human://approve
→ allow | deny
implemented · conservative gate
Cursor high-risk shell
Conversation is observed continuously, while only explicit high-risk beforeShellExecution commands are routed for human approval.
humanq connect cursor
beforeShellExecution
→ permission: allow | deny | ask
implemented · semantic input
MCP human_ask
Clarification, choice, review or edit blocks inside the same MCP tool call and returns the human result to that exact invocation.
humanq mcp serve
human_ask({
uri: "human://clarify"
})
implemented · channel projection
Signed Webhook Channel
A bounded dialogue capsule can appear in another UI. The signed action comes back to the Gateway; the channel never owns a second queue.
humanq channel add webhook ops \
https://channel.example/human
X-Human-Channel-Signature: sha256=…
implemented · outbound-only channel
Telegram long-poll
human:// pushes bounded approval cards to your Telegram chat. A local worker receives callback_query events and resolves localhost — no public inbound Gateway port required.
humanq channel add telegram phone \
--bot-token "$BOT_TOKEN" \
--chat-id "$CHAT_ID"
humanq channel run phone