feat: add --query-policy flag for Otto headless mode

Threads the query_policy parameter through the CLI, TUI, core model,
and MCP server to support Otto headless execution modes. The flag
controls approval-boundary behavior for headless sessions: safe
(default) auto-runs read-only queries, unsafe auto-approves all
queries, and strict rejects all queries.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: ntammineedi

crates/ascend-tools-cli/src/otto.rs

@@ -196,6 +196,10 @@ pub(crate) enum OttoCommands {
         /// Resume the most recent conversation
         #[arg(long, conflicts_with_all = ["thread", "conversation"])]
         resume: bool,
+
+        /// Query execution policy: safe (default), unsafe, strict
+        #[arg(long, value_parser = ["safe", "unsafe", "strict"])]
+        query_policy: Option<String>,
     },
     /// Manage Otto providers
     Provider {
@@ -247,6 +251,10 @@ pub(crate) enum OttoCommands {
         /// Resume the most recent conversation
         #[arg(long, conflicts_with = "conversation")]
         resume: bool,
+
+        /// Query execution policy: safe (default), unsafe, strict
+        #[arg(long, value_parser = ["safe", "unsafe", "strict"])]
+        query_policy: Option<String>,
     },
 }
 
@@ -285,6 +293,7 @@ pub(crate) fn handle_otto_cmd(
             thread,
             conversation,
             resume,
+            query_policy,
         } => {
             let runtime_uuid = client.resolve_optional_runtime_target(
                 workspace.as_deref(),
@@ -304,6 +313,7 @@ pub(crate) fn handle_otto_cmd(
                 runtime_uuid,
                 thread_id,
                 model: client.resolve_otto_model(provider.as_deref(), model.as_deref())?,
+                query_policy,
             };
 
             match output {
@@ -434,6 +444,7 @@ pub(crate) fn handle_otto_cmd(
             model,
             conversation,
             resume,
+            query_policy,
         } => {
             let runtime_uuid = client.resolve_optional_runtime_target(
                 workspace.as_deref(),
@@ -447,7 +458,7 @@ pub(crate) fn handle_otto_cmd(
                 .or(deployment.as_deref().map(|d| format!("deployment:{d}")));
             let thread_id =
                 crate::conversation::resolve_conversation_flag(client, None, conversation, resume)?;
-            ascend_tools_tui::run_tui(client, runtime_uuid, otto_model, context_label, thread_id)
+            ascend_tools_tui::run_tui(client, runtime_uuid, otto_model, context_label, thread_id, query_policy)
         }
     }
 }

crates/ascend-tools-core/src/models.rs

@@ -267,6 +267,11 @@ pub struct OttoChatRequest {
     pub thread_id: Option<String>,
     #[serde(skip_serializing_if = "Option::is_none")]
     pub model: Option<OttoModel>,
+    /// Query execution policy for headless sessions.
+    /// "safe" (default): auto-runs read-only queries, rejects writes.
+    /// "unsafe": auto-approves all queries. "strict": rejects all queries.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub query_policy: Option<String>,
 }
 
 /// Terminal status for an Otto stream.

crates/ascend-tools-mcp/src/server.rs

@@ -524,6 +524,7 @@ impl AscendMcpServer {
                 runtime_uuid,
                 thread_id,
                 model,
+                query_policy: None,
             })
         })
         .await

crates/ascend-tools-tui/src/lib.rs

@@ -318,6 +318,7 @@ struct App {
     provider_label: Option<String>,
     model_label: String,
     context_label: Option<String>,
+    query_policy: Option<String>,
     pending_request: Option<OttoChatRequest>,
     should_quit: bool,
     spinner_frame: usize,
@@ -348,6 +349,7 @@ impl App {
         model_label: String,
         context_label: Option<String>,
         thread_id: Option<String>,
+        query_policy: Option<String>,
     ) -> Self {
         Self {
             messages: Vec::new(),
@@ -367,6 +369,7 @@ impl App {
             provider_label,
             model_label,
             context_label,
+            query_policy,
             pending_request: None,
             should_quit: false,
             spinner_frame: 0,
@@ -823,6 +826,7 @@ impl App {
             runtime_uuid: self.runtime_uuid.clone(),
             thread_id: self.thread_id.clone(),
             model: self.otto_model.clone(),
+            query_policy: self.query_policy.clone(),
         });
         self.streaming = true;
         self.stream_buffer.clear();
@@ -2399,6 +2403,7 @@ pub fn run_tui(
     otto_model: Option<OttoModel>,
     context_label: Option<String>,
     thread_id: Option<String>,
+    query_policy: Option<String>,
 ) -> Result<()> {
     // Setup terminal
     terminal::enable_raw_mode()?;
@@ -2452,6 +2457,7 @@ pub fn run_tui(
             String::new(),
             context_label,
             thread_id.clone(),
+            query_policy,
         );
 
         // If resuming a conversation, load its history in the background
@@ -2653,7 +2659,7 @@ mod tests {
     use std::sync::atomic::AtomicU64;
 
     fn test_app() -> App {
-        App::new(None, None, None, String::new(), None, None)
+        App::new(None, None, None, String::new(), None, None, None)
     }
 
     // -- Stream lifecycle --------------------------------------------------