---
name: "project-oma-console-hitl-approvals"
title: "OMA Console HITL approvals and notice bell"
description: "Console posts user.tool_confirmation from ApprovalCard; session cards + notice bell for mobile-compact HITL"
type: "project"
category: "agents"
tags: ["project", "oma", "console", "hitl", "mobile"]
related: ["[[project-open-managed-agents]]", "[[project-oma-console-monitor]]", "[[project-oma-verify-skill]]"]
sources: ["https://github.com/duyet/oma", "https://app.oma.duyet.net"]
aliases: ["oma-hitl", "oma-tool-confirmation"]
---
In [[project-open-managed-agents]] Console, `always_ask` tool calls are approved from an `ApprovalCard` pinned above the session composer. Deny / Approve POST `user.tool_confirmation`. "Don't ask again this session" writes an `oma.hitl.allow:<session>` policy.

Also shipped in the same slice: compact session cards and a notice bell for pending approvals — usable on phone without Web Push.

**Why:** Operators could not approve HITL from mobile; Console never POSTed tool confirmation.
**How to apply:** Recert signed-in session with a pending always_ask tool; expect ApprovalCard + notice. Out of scope: agent `default_tool_policy`, timeout auto-deny, CLI HITL.