fix(webapp): render output-denied as a terminal HITL state

ericallam · ericallam · commit 0b02f58f6272 · 2026-06-04T17:08:00.000+01:00
A denied human-in-the-loop tool can land in the terminal `output-denied`
state, not just `approval-responded`. The conversation view now shows
the denial label for `output-denied`, and the buffered `.in` resolution
overlay treats `output-denied` as terminal so a later replay cannot
overwrite it, matching the SDK authoritative-state semantics.
diff --git a/apps/webapp/app/components/runs/v3/agent/AgentMessageView.tsx b/apps/webapp/app/components/runs/v3/agent/AgentMessageView.tsx
@@ -129,7 +129,7 @@ export function renderPart(part: UIMessage["parts"][number], i: number) {
       resultSummary = "calling...";
     } else if (p.state === "approval-requested") {
       resultSummary = "awaiting approval";
-    } else if (p.state === "approval-responded") {
+    } else if (p.state === "approval-responded" || p.state === "output-denied") {
       resultSummary = p.approval?.approved
         ? "approved"
         : `denied${p.approval?.reason ? `: ${p.approval.reason}` : ""}`;
diff --git a/apps/webapp/app/components/runs/v3/agent/AgentView.tsx b/apps/webapp/app/components/runs/v3/agent/AgentView.tsx
@@ -311,7 +311,10 @@ function useAgentSessionMessages({
         const idx = parts.findIndex((p) => (p as { toolCallId?: string }).toolCallId === toolCallId);
         if (idx < 0) continue;
         const cur = parts[idx]!;
-        const terminal = cur.state === "output-available" || cur.state === "output-error";
+        const terminal =
+          cur.state === "output-available" ||
+          cur.state === "output-error" ||
+          cur.state === "output-denied";
         const nextState = res.state != null && !terminal ? res.state : cur.state;
         const sameApproval = JSON.stringify(cur.approval) === JSON.stringify(res.approval);
         if (
