Bug: RequestPermissionResponse missing outcome wrapper breaks gh CLI flows in openab-gemini

[Joseph19820124]

Summary

Using ghcr.io/openabdev/openab-gemini:latest as the base image, openab works for normal chat interactions and simple Linux commands, but any gh CLI command triggers a terminal-layer crash instead of returning normal command output.

The failure is reproducible.

Environment

• Image: ghcr.io/openabdev/openab-gemini:latest
• Agent backend: Gemini
• Auth: Gemini API key provided via GEMINI_API_KEY

What works

Inside the running environment, normal commands work as expected, for example:

ls -l /usr/bin/gh
ls /nonexistent
echo "gh"
echo "$GITHUB_TOKEN"

Also, regular chat interactions and basic Linux command execution work.

What fails

Any gh command causes the underlying terminal interface / agent wrapper to crash immediately. Examples:

gh auth status
gh --version
gh auth login -w

The observed internal error is:

Cannot read properties of undefined (reading 'outcome')

Expected behavior

gh commands should behave like other shell commands:

• gh --version should print the version
• gh auth status should print auth state
• gh auth login -w should print the browser URL and one-time code

Actual behavior

The command execution path crashes in the terminal/agent integration layer when gh is invoked, so gh output never reaches the user.

Repro steps

1. Start from ghcr.io/openabdev/openab-gemini:latest
2. Configure openab to use Gemini with a valid GEMINI_API_KEY
3. Verify normal command execution works with non-gh commands
4. Run any gh command such as gh --version or gh auth status
5. Observe the internal error:
   • Cannot read properties of undefined (reading 'outcome')

Notes

This does not look like a generic shell execution problem, because non-gh commands work. It appears specific to the interaction between the image/runtime and the terminal wrapper when gh is executed.

[Joseph19820124]

[CHC-Agent]

Issue at a Glance

User ──► openab ──► Gemini Agent (ACP)
                        │
                        ▼
                  agent calls terminal tool
                        │
                        ▼
                  openab sends permission response
                  { "approved": true }  ← missing "outcome" wrapper
                        │
                        ▼
                  Gemini SDK reads response.outcome → undefined 💥
                  "Cannot read properties of undefined (reading 'outcome')"

Hi @Joseph19820124,

This is the same root cause as #130 — openab's session/request_permission response is missing the outcome wrapper required by the ACP spec. Kiro CLI's loose parsing tolerates it, but strict SDK clients (Claude Code, Gemini) crash.

It's not specific to gh — any tool call that triggers a permission check will hit this. gh just happens to always require permission, while simpler commands like ls or echo may not.

Tracking this alongside #130. Fix will be in src/acp/connection.rs.

[CHC-Agent]

Duplicate of #130 — same root cause (missing outcome wrapper in session/request_permission response), different backend (Gemini vs Claude Code).

PR #147 fixes the shared ACP layer (src/acp/connection.rs), which will resolve both issues once merged.