fix(approvals): restore queue targeting and plugin id prefixes

ui/src/ui/app-gateway.sessions.node.test.ts

@@ -49,6 +49,9 @@ vi.mock("./gateway.ts", () => ({
 }));
 
 const { handleGatewayEvent } = await import("./app-gateway.ts");
+const { addExecApproval } = await vi.importActual<typeof import("./controllers/exec-approval.ts")>(
+  "./controllers/exec-approval.ts",
+);
 
 function createHost() {
   return {
@@ -120,3 +123,28 @@ describe("handleGatewayEvent sessions.changed", () => {
     expect(loadSessionsMock).toHaveBeenCalledWith(host);
   });
 });
+
+describe("addExecApproval", () => {
+  it("keeps the newest approval at the front of the queue", () => {
+    const queue = addExecApproval(
+      [
+        {
+          id: "approval-old",
+          kind: "exec",
+          request: { command: "echo old" },
+          createdAtMs: 1,
+          expiresAtMs: Date.now() + 120_000,
+        },
+      ],
+      {
+        id: "approval-new",
+        kind: "exec",
+        request: { command: "echo new" },
+        createdAtMs: 2,
+        expiresAtMs: Date.now() + 120_000,
+      },
+    );
+
+    expect(queue.map((entry) => entry.id)).toEqual(["approval-new", "approval-old"]);
+  });
+});

ui/src/ui/controllers/exec-approval.ts

@@ -134,7 +134,7 @@ export function addExecApproval(
   entry: ExecApprovalRequest,
 ): ExecApprovalRequest[] {
   const next = pruneExecApprovalQueue(queue).filter((item) => item.id !== entry.id);
-  next.push(entry);
+  next.unshift(entry);
   return next;
 }