Open bug report

end_install_approval leaves the pending install-approval prompt on screen (and on top of Hydrogen)

John Lauer · 16d ago

Seen on winvm (ab 2.1.170 embedded under Hydrogen 1.0.556), 2026-10-06, while recording the setup-steps-pitfalls "not enough disk space" scenario.

Hydrogen's setup called request_install_approval at 21:13:17.147 and, 0.4 s later when setup stopped, end_install_approval (Hydrogen logged "install-approval window closed, normal prompting restored" at 21:13:17.543). The ab window still came to the front and kept showing the Permission requests card ("The cloud AI wants to run shell / system commands on this machine ... Approve to let it proceed", buttons 1 hour / 24 hours / Auto / Deny) minutes afterwards, on top of Hydrogen's own explanation of why setup stopped. A first-time user sees a scary "cloud AI wants to run commands" prompt for a request nobody is waiting on any more.

Expected: end_install_approval also withdraws a still-pending install-approval prompt (the window card, its toast and any mirrored card), the same way a decided prompt is retracted. And in embedded mode the prompt should not raise ab over Hydrogen (2.1.80 already routes click reveals to Hydrogen).

Hydrogen side (1.0.557): setup now requests the approval only once it reaches its first step after the workspace build, so this exact sequence no longer happens on a build-time halt. The withdraw gap is still real for any other halt after that point.

Screenshot: the ab window with the pending card at 21:15, two minutes after end_install_approval.

disk556-now.png

3 Replies

John Lauer · 16d ago

Related, seen three times today during Hydrogen setup on winvm (1.0.556 and 1.0.559): a Windows toast from Adom Bridge that says only "New important notification" with a View notification button. A first-time user cannot tell what it is about or whether it matters. If it is the install-approval request, the toast should say so in plain words (for example "Hydrogen setup asks for permission to finish on its own"); if it is something else, it should name it. Screenshot attached (bottom right).

card559-dead-session.png

John Lauer · 16d ago

Correction to my previous comment: winvm's Adom Bridge is in John's mesh, so that "New important notification" toast is most likely a mirrored alert from activity on his other machines (AdomLapper, arav-rog, ConfRoomROG), not something Hydrogen setup raised. A real single-PC user would not see it. Disregard it for this issue. The original report stands: the Permission requests card in the first screenshot was labelled THIS MACHINE and came from Hydrogen's own request_install_approval.

John Lauer · 14d ago

Shipped in 2.1.171 (insiders now).

  • Withdraw. end_install_approval now withdraws a still-pending install consent on every surface: the card in ab's window, its Windows toast, and every mirrored copy (Hydrogen and the user's other machines). The decision is recorded as withdrawn, not as a deny, so the 5-minute decline pause does not kick in. The reply carries withdrawnPrompt: true.
  • No raise over Hydrogen. request_install_approval no longer brings ab's window forward when a Hydrogen window is on screen. Hydrogen renders the mirrored prompt itself. Embedded ab was already kept hidden for prompts (2.1.23); this covers the moment before the embed handshake, which is probably where the winvm case sat.

Not yet proven live: every test box I can drive has a standing approval, so request_install_approval there answers alreadyApproved and no prompt is pending to withdraw. Leaving this open until a Hydrogen setup run on 2.1.171 shows the card going away after end_install_approval.

Log in to reply.