Hmbown/CodeWhale · error · anyhow::Error

Fleet tool authority cannot be combined with exec --resume,

Error message

Fleet tool authority cannot be combined with exec --resume, --session-id, or --continue

What it means

validate_exec_tool_authority_resume rejects combining fleet tool-authority JSON with exec session resumption (--resume, --session-id, --continue). A resumed session restores its own tool surface; applying fresh fleet authority to a restored conversation would change permissions mid-history, so the combination is refused before the turn starts.

Source

Thrown at crates/tui/src/lib.rs:11294

    model: String,
    prompt: String,
    output: String,
    tools: Vec<ExecToolEntry>,
    outcomes: Vec<ExecOutcome>,
    status: Option<String>,
    termination_reason: Option<String>,
    error_category: Option<String>,
    error: Option<String>,
    #[serde(skip_serializing_if = "Vec::is_empty")]
    released_services: Vec<crate::tools::shell::PersistentServiceReceipt>,
}

fn validate_exec_tool_authority_resume(
    tool_authority_json: Option<&str>,
    resuming: bool,
) -> Result<()> {
    if tool_authority_json.is_some() && resuming {
        bail!(
            "Fleet tool authority cannot be combined with exec --resume, --session-id, or --continue"
        );
    }
    Ok(())
}

fn exec_network_policy(
    config: &Config,
    outer_network_access: Option<bool>,
) -> Option<crate::network_policy::NetworkPolicyDecider> {
    // Fleet caps are an outer authority boundary: user configuration may
    // narrow them further, but it may never widen an explicit network denial.
    if outer_network_access == Some(false) {
        return Some(crate::network_policy::NetworkPolicyDecider::new(
            crate::network_policy::NetworkPolicy {
                default: crate::network_policy::DecisionToml::Deny,
                ..crate::network_policy::NetworkPolicy::default()
            },

View on GitHub (pinned to 0c42157ee5)

Solutions

  1. Drop --tool-authority when resuming a session
  2. Or start a fresh exec run instead of resuming
Defensive patterns

Strategy: validation

When it happens

Trigger: Thrown at crates/tui/src/lib.rs:11294 when the library encounters an invalid state.

Common situations: See trigger scenarios.


AI-assisted analysis of Hmbown/CodeWhale@0c42157ee5 (2026-08-20). Data as JSON: /api/errors/cabe7833d6ed580a. Report an issue: GitHub.