@adtl/gateway 0.1.0 → 0.2.0

package/dist/config.d.ts

@@ -3,6 +3,7 @@
  *
  *   gateway:
  *     audit: ./adtl-audit.jsonl          # optional JSONL audit log
+ *     mode: audit                        # optional: log what would be stopped, stop nothing
  *     upstreams:
  *       github:                          # id must match `servers.github` in the label config
  *         command: npx
@@ -11,9 +12,16 @@
  *       docs:
  *         url: https://example.com/mcp
  *         headers: { Authorization: "Bearer ${DOCS_TOKEN}" }
+ *     approvals:                         # optional: make "ask" really ask
+ *       timeoutSeconds: 50
+ *       ntfy: { topic: "${ADTL_NTFY_TOPIC}" }
+ *       email:
+ *         smtp: { host: smtp.example.com, port: 465, user: "${SMTP_USER}", pass: "${SMTP_PASS}" }
+ *         from: adtl@example.com
+ *         to: you@example.com
  *
- * `${VAR}` in command, args, env, cwd, url and headers is replaced from the
- * gateway's environment. A missing variable is a config error.
+ * `${VAR}` in command, args, env, cwd, url, headers and approval settings is
+ * replaced from the gateway's environment. A missing variable is a config error.
  */
 import { z } from "zod";
 export declare const StdioUpstreamSchema: z.ZodObject<{
@@ -70,6 +78,184 @@ export declare const UpstreamSchema: z.ZodUnion<[z.ZodObject<{
 export type StdioUpstream = z.infer<typeof StdioUpstreamSchema>;
 export type HttpUpstream = z.infer<typeof HttpUpstreamSchema>;
 export type Upstream = z.infer<typeof UpstreamSchema>;
+export declare const NtfyConfigSchema: z.ZodObject<{
+    server: z.ZodDefault<z.ZodString>;
+    /** Topic approval requests are sent to. Anyone who can read it can approve: keep it secret. */
+    topic: z.ZodString;
+    /** Topic answers are posted to. Default: `<topic>-reply`. */
+    replyTopic: z.ZodOptional<z.ZodString>;
+    token: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    server: string;
+    topic: string;
+    replyTopic?: string | undefined;
+    token?: string | undefined;
+}, {
+    topic: string;
+    server?: string | undefined;
+    replyTopic?: string | undefined;
+    token?: string | undefined;
+}>;
+export declare const EmailConfigSchema: z.ZodObject<{
+    smtp: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodDefault<z.ZodNumber>;
+        /** TLS from the start. Default: true on port 465, otherwise STARTTLS. */
+        secure: z.ZodOptional<z.ZodBoolean>;
+        user: z.ZodOptional<z.ZodString>;
+        pass: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        host: string;
+        port: number;
+        secure?: boolean | undefined;
+        user?: string | undefined;
+        pass?: string | undefined;
+    }, {
+        host: string;
+        port?: number | undefined;
+        secure?: boolean | undefined;
+        user?: string | undefined;
+        pass?: string | undefined;
+    }>;
+    from: z.ZodString;
+    to: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "atleastone">]>;
+    on: z.ZodDefault<z.ZodArray<z.ZodEnum<["pending", "blocked", "approved", "denied", "timeout", "undeliverable"]>, "atleastone">>;
+}, "strict", z.ZodTypeAny, {
+    smtp: {
+        host: string;
+        port: number;
+        secure?: boolean | undefined;
+        user?: string | undefined;
+        pass?: string | undefined;
+    };
+    from: string;
+    to: string | [string, ...string[]];
+    on: ["pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable", ...("pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable")[]];
+}, {
+    smtp: {
+        host: string;
+        port?: number | undefined;
+        secure?: boolean | undefined;
+        user?: string | undefined;
+        pass?: string | undefined;
+    };
+    from: string;
+    to: string | [string, ...string[]];
+    on?: ["pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable", ...("pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable")[]] | undefined;
+}>;
+export declare const ApprovalsConfigSchema: z.ZodObject<{
+    /**
+     * How long a call waits for an answer; no answer means deny. Many MCP
+     * clients give up on a request after 60 seconds, hence the default.
+     */
+    timeoutSeconds: z.ZodDefault<z.ZodNumber>;
+    ntfy: z.ZodOptional<z.ZodObject<{
+        server: z.ZodDefault<z.ZodString>;
+        /** Topic approval requests are sent to. Anyone who can read it can approve: keep it secret. */
+        topic: z.ZodString;
+        /** Topic answers are posted to. Default: `<topic>-reply`. */
+        replyTopic: z.ZodOptional<z.ZodString>;
+        token: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        server: string;
+        topic: string;
+        replyTopic?: string | undefined;
+        token?: string | undefined;
+    }, {
+        topic: string;
+        server?: string | undefined;
+        replyTopic?: string | undefined;
+        token?: string | undefined;
+    }>>;
+    email: z.ZodOptional<z.ZodObject<{
+        smtp: z.ZodObject<{
+            host: z.ZodString;
+            port: z.ZodDefault<z.ZodNumber>;
+            /** TLS from the start. Default: true on port 465, otherwise STARTTLS. */
+            secure: z.ZodOptional<z.ZodBoolean>;
+            user: z.ZodOptional<z.ZodString>;
+            pass: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            host: string;
+            port: number;
+            secure?: boolean | undefined;
+            user?: string | undefined;
+            pass?: string | undefined;
+        }, {
+            host: string;
+            port?: number | undefined;
+            secure?: boolean | undefined;
+            user?: string | undefined;
+            pass?: string | undefined;
+        }>;
+        from: z.ZodString;
+        to: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "atleastone">]>;
+        on: z.ZodDefault<z.ZodArray<z.ZodEnum<["pending", "blocked", "approved", "denied", "timeout", "undeliverable"]>, "atleastone">>;
+    }, "strict", z.ZodTypeAny, {
+        smtp: {
+            host: string;
+            port: number;
+            secure?: boolean | undefined;
+            user?: string | undefined;
+            pass?: string | undefined;
+        };
+        from: string;
+        to: string | [string, ...string[]];
+        on: ["pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable", ...("pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable")[]];
+    }, {
+        smtp: {
+            host: string;
+            port?: number | undefined;
+            secure?: boolean | undefined;
+            user?: string | undefined;
+            pass?: string | undefined;
+        };
+        from: string;
+        to: string | [string, ...string[]];
+        on?: ["pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable", ...("pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable")[]] | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    timeoutSeconds: number;
+    ntfy?: {
+        server: string;
+        topic: string;
+        replyTopic?: string | undefined;
+        token?: string | undefined;
+    } | undefined;
+    email?: {
+        smtp: {
+            host: string;
+            port: number;
+            secure?: boolean | undefined;
+            user?: string | undefined;
+            pass?: string | undefined;
+        };
+        from: string;
+        to: string | [string, ...string[]];
+        on: ["pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable", ...("pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable")[]];
+    } | undefined;
+}, {
+    ntfy?: {
+        topic: string;
+        server?: string | undefined;
+        replyTopic?: string | undefined;
+        token?: string | undefined;
+    } | undefined;
+    email?: {
+        smtp: {
+            host: string;
+            port?: number | undefined;
+            secure?: boolean | undefined;
+            user?: string | undefined;
+            pass?: string | undefined;
+        };
+        from: string;
+        to: string | [string, ...string[]];
+        on?: ["pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable", ...("pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable")[]] | undefined;
+    } | undefined;
+    timeoutSeconds?: number | undefined;
+}>;
+export type ApprovalsConfig = z.infer<typeof ApprovalsConfigSchema>;
 export declare const GatewayConfigSchema: z.ZodObject<{
     upstreams: z.ZodEffects<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodObject<{
         command: z.ZodString;
@@ -147,6 +333,124 @@ export declare const GatewayConfigSchema: z.ZodObject<{
     }>>;
     /** Path of a JSONL audit log. Relative paths are resolved against the config file's directory. */
     audit: z.ZodOptional<z.ZodString>;
+    /**
+     * `active` (default) enforces the policy. `audit` stops and changes nothing, and
+     * logs what would have been stopped: for trying a policy out safely.
+     */
+    mode: z.ZodDefault<z.ZodEnum<["active", "audit"]>>;
+    /** Human approvals for "ask" decisions. Without an answering channel, "ask" blocks. */
+    approvals: z.ZodOptional<z.ZodObject<{
+        /**
+         * How long a call waits for an answer; no answer means deny. Many MCP
+         * clients give up on a request after 60 seconds, hence the default.
+         */
+        timeoutSeconds: z.ZodDefault<z.ZodNumber>;
+        ntfy: z.ZodOptional<z.ZodObject<{
+            server: z.ZodDefault<z.ZodString>;
+            /** Topic approval requests are sent to. Anyone who can read it can approve: keep it secret. */
+            topic: z.ZodString;
+            /** Topic answers are posted to. Default: `<topic>-reply`. */
+            replyTopic: z.ZodOptional<z.ZodString>;
+            token: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            server: string;
+            topic: string;
+            replyTopic?: string | undefined;
+            token?: string | undefined;
+        }, {
+            topic: string;
+            server?: string | undefined;
+            replyTopic?: string | undefined;
+            token?: string | undefined;
+        }>>;
+        email: z.ZodOptional<z.ZodObject<{
+            smtp: z.ZodObject<{
+                host: z.ZodString;
+                port: z.ZodDefault<z.ZodNumber>;
+                /** TLS from the start. Default: true on port 465, otherwise STARTTLS. */
+                secure: z.ZodOptional<z.ZodBoolean>;
+                user: z.ZodOptional<z.ZodString>;
+                pass: z.ZodOptional<z.ZodString>;
+            }, "strict", z.ZodTypeAny, {
+                host: string;
+                port: number;
+                secure?: boolean | undefined;
+                user?: string | undefined;
+                pass?: string | undefined;
+            }, {
+                host: string;
+                port?: number | undefined;
+                secure?: boolean | undefined;
+                user?: string | undefined;
+                pass?: string | undefined;
+            }>;
+            from: z.ZodString;
+            to: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "atleastone">]>;
+            on: z.ZodDefault<z.ZodArray<z.ZodEnum<["pending", "blocked", "approved", "denied", "timeout", "undeliverable"]>, "atleastone">>;
+        }, "strict", z.ZodTypeAny, {
+            smtp: {
+                host: string;
+                port: number;
+                secure?: boolean | undefined;
+                user?: string | undefined;
+                pass?: string | undefined;
+            };
+            from: string;
+            to: string | [string, ...string[]];
+            on: ["pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable", ...("pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable")[]];
+        }, {
+            smtp: {
+                host: string;
+                port?: number | undefined;
+                secure?: boolean | undefined;
+                user?: string | undefined;
+                pass?: string | undefined;
+            };
+            from: string;
+            to: string | [string, ...string[]];
+            on?: ["pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable", ...("pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable")[]] | undefined;
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        timeoutSeconds: number;
+        ntfy?: {
+            server: string;
+            topic: string;
+            replyTopic?: string | undefined;
+            token?: string | undefined;
+        } | undefined;
+        email?: {
+            smtp: {
+                host: string;
+                port: number;
+                secure?: boolean | undefined;
+                user?: string | undefined;
+                pass?: string | undefined;
+            };
+            from: string;
+            to: string | [string, ...string[]];
+            on: ["pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable", ...("pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable")[]];
+        } | undefined;
+    }, {
+        ntfy?: {
+            topic: string;
+            server?: string | undefined;
+            replyTopic?: string | undefined;
+            token?: string | undefined;
+        } | undefined;
+        email?: {
+            smtp: {
+                host: string;
+                port?: number | undefined;
+                secure?: boolean | undefined;
+                user?: string | undefined;
+                pass?: string | undefined;
+            };
+            from: string;
+            to: string | [string, ...string[]];
+            on?: ["pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable", ...("pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable")[]] | undefined;
+        } | undefined;
+        timeoutSeconds?: number | undefined;
+    }>>;
     /** Timeout for each interceptor invocation, in milliseconds. */
     interceptorTimeoutMs: z.ZodDefault<z.ZodNumber>;
 }, "strict", z.ZodTypeAny, {
@@ -159,6 +463,7 @@ export declare const GatewayConfigSchema: z.ZodObject<{
         url: string;
         headers: Record<string, string>;
     }>;
+    mode: "audit" | "active";
     interceptorTimeoutMs: number;
     interceptors?: {
         command: string;
@@ -167,6 +472,27 @@ export declare const GatewayConfigSchema: z.ZodObject<{
         cwd?: string | undefined;
     } | undefined;
     audit?: string | undefined;
+    approvals?: {
+        timeoutSeconds: number;
+        ntfy?: {
+            server: string;
+            topic: string;
+            replyTopic?: string | undefined;
+            token?: string | undefined;
+        } | undefined;
+        email?: {
+            smtp: {
+                host: string;
+                port: number;
+                secure?: boolean | undefined;
+                user?: string | undefined;
+                pass?: string | undefined;
+            };
+            from: string;
+            to: string | [string, ...string[]];
+            on: ["pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable", ...("pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable")[]];
+        } | undefined;
+    } | undefined;
 }, {
     upstreams: Record<string, {
         command: string;
@@ -184,6 +510,28 @@ export declare const GatewayConfigSchema: z.ZodObject<{
         cwd?: string | undefined;
     } | undefined;
     audit?: string | undefined;
+    mode?: "audit" | "active" | undefined;
+    approvals?: {
+        ntfy?: {
+            topic: string;
+            server?: string | undefined;
+            replyTopic?: string | undefined;
+            token?: string | undefined;
+        } | undefined;
+        email?: {
+            smtp: {
+                host: string;
+                port?: number | undefined;
+                secure?: boolean | undefined;
+                user?: string | undefined;
+                pass?: string | undefined;
+            };
+            from: string;
+            to: string | [string, ...string[]];
+            on?: ["pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable", ...("pending" | "blocked" | "approved" | "denied" | "timeout" | "undeliverable")[]] | undefined;
+        } | undefined;
+        timeoutSeconds?: number | undefined;
+    } | undefined;
     interceptorTimeoutMs?: number | undefined;
 }>;
 export type GatewayConfig = z.infer<typeof GatewayConfigSchema>;
@@ -195,5 +543,7 @@ export declare class EnvExpansionError extends Error {
 /** Replace `${VAR}` with values from `env`. `$${VAR}` keeps a literal `${VAR}`. */
 export declare function expandEnv(value: string, env: NodeJS.ProcessEnv, where: string): string;
 export declare function expandUpstream<T extends Upstream>(id: string, u: T, env: NodeJS.ProcessEnv): T;
+/** Expand `${VAR}` in every string of the approvals section. */
+export declare function expandApprovals(a: ApprovalsConfig, env: NodeJS.ProcessEnv): ApprovalsConfig;
 export declare function isHttpUpstream(u: Upstream): u is HttpUpstream;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;EAOrB,CAAC;AAEZ,eAAO,MAAM,kBAAkB;;;;;;;;;EAKpB,CAAC;AAEZ,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;IAAqD,CAAC;AACjF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAQ5B,8GAA8G;;;;;;;;;;;;;;;;;IAE9G,kGAAkG;;IAElG,gEAAgE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGzD,CAAC;AACZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,qBAAa,iBAAkB,SAAQ,KAAK;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM;gBAAhB,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAIrD;AAED,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAOtF;AAMD,wBAAgB,cAAc,CAAC,CAAC,SAAS,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,CAAC,CAY9F;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,IAAI,YAAY,CAE7D"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;EAOrB,CAAC;AAEZ,eAAO,MAAM,kBAAkB;;;;;;;;;EAKpB,CAAC;AAEZ,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;IAAqD,CAAC;AACjF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,gBAAgB;;IAGzB,+FAA+F;;IAE/F,6DAA6D;;;;;;;;;;;;;EAItD,CAAC;AAEZ,eAAO,MAAM,iBAAiB;;;;QAMtB,yEAAyE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUtE,CAAC;AAEZ,eAAO,MAAM,qBAAqB;IAE9B;;;OAGG;;;;QA/BH,+FAA+F;;QAE/F,6DAA6D;;;;;;;;;;;;;;;;;;YAYzD,yEAAyE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBtE,CAAC;AACZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAQ5B,8GAA8G;;;;;;;;;;;;;;;;;IAE9G,kGAAkG;;IAElG;;;OAGG;;IAEH,uFAAuF;;QA5BvF;;;WAGG;;;;YA/BH,+FAA+F;;YAE/F,6DAA6D;;;;;;;;;;;;;;;;;;gBAYzD,yEAAyE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA4C7E,gEAAgE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGzD,CAAC;AACZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,qBAAa,iBAAkB,SAAQ,KAAK;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM;gBAAhB,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAIrD;AAED,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAOtF;AAMD,wBAAgB,cAAc,CAAC,CAAC,SAAS,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,CAAC,CAY9F;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,eAAe,CAQ3F;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,IAAI,YAAY,CAE7D"}

package/dist/config.js

@@ -3,6 +3,7 @@
  *
  *   gateway:
  *     audit: ./adtl-audit.jsonl          # optional JSONL audit log
+ *     mode: audit                        # optional: log what would be stopped, stop nothing
  *     upstreams:
  *       github:                          # id must match `servers.github` in the label config
  *         command: npx
@@ -11,11 +12,19 @@
  *       docs:
  *         url: https://example.com/mcp
  *         headers: { Authorization: "Bearer ${DOCS_TOKEN}" }
+ *     approvals:                         # optional: make "ask" really ask
+ *       timeoutSeconds: 50
+ *       ntfy: { topic: "${ADTL_NTFY_TOPIC}" }
+ *       email:
+ *         smtp: { host: smtp.example.com, port: 465, user: "${SMTP_USER}", pass: "${SMTP_PASS}" }
+ *         from: adtl@example.com
+ *         to: you@example.com
  *
- * `${VAR}` in command, args, env, cwd, url and headers is replaced from the
- * gateway's environment. A missing variable is a config error.
+ * `${VAR}` in command, args, env, cwd, url, headers and approval settings is
+ * replaced from the gateway's environment. A missing variable is a config error.
  */
 import { z } from "zod";
+import { EMAIL_EVENTS } from "./email.js";
 const UPSTREAM_ID = /^[A-Za-z0-9-]+$/;
 export const StdioUpstreamSchema = z
     .object({
@@ -32,6 +41,44 @@ export const HttpUpstreamSchema = z
 })
     .strict();
 export const UpstreamSchema = z.union([StdioUpstreamSchema, HttpUpstreamSchema]);
+export const NtfyConfigSchema = z
+    .object({
+    server: z.string().min(1).default("https://ntfy.sh"),
+    /** Topic approval requests are sent to. Anyone who can read it can approve: keep it secret. */
+    topic: z.string().min(1),
+    /** Topic answers are posted to. Default: `<topic>-reply`. */
+    replyTopic: z.string().min(1).optional(),
+    token: z.string().min(1).optional(),
+})
+    .strict();
+export const EmailConfigSchema = z
+    .object({
+    smtp: z
+        .object({
+        host: z.string().min(1),
+        port: z.number().int().positive().default(587),
+        /** TLS from the start. Default: true on port 465, otherwise STARTTLS. */
+        secure: z.boolean().optional(),
+        user: z.string().min(1).optional(),
+        pass: z.string().optional(),
+    })
+        .strict(),
+    from: z.string().min(1),
+    to: z.union([z.string().min(1), z.array(z.string().min(1)).nonempty()]),
+    on: z.array(z.enum(EMAIL_EVENTS)).nonempty().default(["pending", "blocked"]),
+})
+    .strict();
+export const ApprovalsConfigSchema = z
+    .object({
+    /**
+     * How long a call waits for an answer; no answer means deny. Many MCP
+     * clients give up on a request after 60 seconds, hence the default.
+     */
+    timeoutSeconds: z.number().int().positive().max(3600).default(50),
+    ntfy: NtfyConfigSchema.optional(),
+    email: EmailConfigSchema.optional(),
+})
+    .strict();
 export const GatewayConfigSchema = z
     .object({
     upstreams: z
@@ -44,6 +91,13 @@ export const GatewayConfigSchema = z
     interceptors: StdioUpstreamSchema.optional(),
     /** Path of a JSONL audit log. Relative paths are resolved against the config file's directory. */
     audit: z.string().min(1).optional(),
+    /**
+     * `active` (default) enforces the policy. `audit` stops and changes nothing, and
+     * logs what would have been stopped: for trying a policy out safely.
+     */
+    mode: z.enum(["active", "audit"]).default("active"),
+    /** Human approvals for "ask" decisions. Without an answering channel, "ask" blocks. */
+    approvals: ApprovalsConfigSchema.optional(),
     /** Timeout for each interceptor invocation, in milliseconds. */
     interceptorTimeoutMs: z.number().int().positive().default(5000),
 })
@@ -84,6 +138,19 @@ export function expandUpstream(id, u, env) {
         ...(u.cwd !== undefined ? { cwd: expandEnv(u.cwd, env, `${where}.cwd`) } : {}),
     };
 }
+/** Expand `${VAR}` in every string of the approvals section. */
+export function expandApprovals(a, env) {
+    const walk = (v, where) => {
+        if (typeof v === "string")
+            return expandEnv(v, env, where);
+        if (Array.isArray(v))
+            return v.map((x, i) => walk(x, `${where}[${i}]`));
+        if (v && typeof v === "object")
+            return Object.fromEntries(Object.entries(v).map(([k, x]) => [k, walk(x, `${where}.${k}`)]));
+        return v;
+    };
+    return walk(a, "gateway.approvals");
+}
 export function isHttpUpstream(u) {
     return "url" in u;
 }

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAEtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAKjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC;SACT,MAAM,CAAC,cAAc,CAAC;SACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,0CAA0C,CAAC;SACpF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE;QACjE,OAAO,EAAE,gGAAgG;KAC1G,CAAC;IACJ,8GAA8G;IAC9G,YAAY,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC5C,kGAAkG;IAClG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,gEAAgE;IAChE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAChE,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AAEnC,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACrB;IAArB,YAAqB,QAAgB,EAAE,KAAa;QAClD,KAAK,CAAC,wBAAwB,QAAQ,wBAAwB,KAAK,GAAG,CAAC,CAAC;QADrD,aAAQ,GAAR,QAAQ,CAAQ;QAEnC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,GAAsB,EAAE,KAAa;IAC5E,OAAO,KAAK,CAAC,OAAO,CAAC,sCAAsC,EAAE,CAAC,KAAK,EAAE,MAAc,EAAE,IAAY,EAAE,EAAE;QACnG,IAAI,MAAM;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,GAA2B,EAAE,GAAsB,EAAE,KAAa;IACtF,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,cAAc,CAAqB,EAAU,EAAE,CAAI,EAAE,GAAsB;IACzF,MAAM,KAAK,GAAG,qBAAqB,EAAE,EAAE,CAAC;IACxC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACf,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,UAAU,CAAC,EAAE,CAAC;IACzH,CAAC;IACD,OAAO;QACL,GAAG,CAAC;QACJ,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,UAAU,CAAC;QACtD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,SAAS,CAAC,GAAG,CAAC,CAAC;QACpE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC;QAC7C,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAW;IACxC,OAAO,KAAK,IAAI,CAAC,CAAC;AACpB,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAEtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAKjF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACpD,+FAA+F;IAC/F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,6DAA6D;IAC7D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QAC9C,yEAAyE;QACzE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC;SACD,MAAM,EAAE;IACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;CAC7E,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN;;;OAGG;IACH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC;SACT,MAAM,CAAC,cAAc,CAAC;SACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,0CAA0C,CAAC;SACpF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE;QACjE,OAAO,EAAE,gGAAgG;KAC1G,CAAC;IACJ,8GAA8G;IAC9G,YAAY,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC5C,kGAAkG;IAClG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC;;;OAGG;IACH,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACnD,uFAAuF;IACvF,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC3C,gEAAgE;IAChE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAChE,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AAEnC,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACrB;IAArB,YAAqB,QAAgB,EAAE,KAAa;QAClD,KAAK,CAAC,wBAAwB,QAAQ,wBAAwB,KAAK,GAAG,CAAC,CAAC;QADrD,aAAQ,GAAR,QAAQ,CAAQ;QAEnC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,GAAsB,EAAE,KAAa;IAC5E,OAAO,KAAK,CAAC,OAAO,CAAC,sCAAsC,EAAE,CAAC,KAAK,EAAE,MAAc,EAAE,IAAY,EAAE,EAAE;QACnG,IAAI,MAAM;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,GAA2B,EAAE,GAAsB,EAAE,KAAa;IACtF,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,cAAc,CAAqB,EAAU,EAAE,CAAI,EAAE,GAAsB;IACzF,MAAM,KAAK,GAAG,qBAAqB,EAAE,EAAE,CAAC;IACxC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACf,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,UAAU,CAAC,EAAE,CAAC;IACzH,CAAC;IACD,OAAO;QACL,GAAG,CAAC;QACJ,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,UAAU,CAAC;QACtD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,SAAS,CAAC,GAAG,CAAC,CAAC;QACpE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC;QAC7C,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,eAAe,CAAC,CAAkB,EAAE,GAAsB;IACxE,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,KAAa,EAAW,EAAE;QAClD,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5H,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,EAAE,mBAAmB,CAAoB,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAW;IACxC,OAAO,KAAK,IAAI,CAAC,CAAC;AACpB,CAAC"}

package/dist/email.d.ts

@@ -0,0 +1,35 @@
+import type { ApprovalEvent, Notifier } from "./approvals.js";
+export declare const EMAIL_EVENTS: readonly ["pending", "blocked", "approved", "denied", "timeout", "undeliverable"];
+export type EmailEvent = (typeof EMAIL_EVENTS)[number];
+export interface MailSender {
+    sendMail(mail: {
+        from: string;
+        to: string[];
+        subject: string;
+        text: string;
+    }): Promise<unknown>;
+}
+export interface EmailOptions {
+    from: string;
+    to: string[];
+    /** Which events send an email. */
+    on: EmailEvent[];
+    /** SMTP settings, used unless `sender` is given. */
+    smtp?: {
+        host: string;
+        port: number;
+        secure?: boolean;
+        user?: string;
+        pass?: string;
+    };
+    sender?: MailSender;
+}
+export declare class EmailNotifier implements Notifier {
+    private readonly opts;
+    readonly name = "email";
+    private readonly sender;
+    constructor(opts: EmailOptions);
+    notify(event: ApprovalEvent): Promise<void>;
+    private compose;
+}
+//# sourceMappingURL=email.d.ts.map

package/dist/email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../src/email.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE9D,eAAO,MAAM,YAAY,mFAAoF,CAAC;AAC9G,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjG;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,EAAE,CAAC;IACb,kCAAkC;IAClC,EAAE,EAAE,UAAU,EAAE,CAAC;IACjB,oDAAoD;IACpD,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtF,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,qBAAa,aAAc,YAAW,QAAQ;IAIhC,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,QAAQ,CAAC,IAAI,WAAW;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;gBAEP,IAAI,EAAE,YAAY;IAgBzC,MAAM,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAOjD,OAAO,CAAC,OAAO;CAwBhB"}

package/dist/email.js

@@ -0,0 +1,63 @@
+/**
+ * Email notices over SMTP. Notify only, on purpose: emails never contain
+ * approve links, because mail security scanners open links automatically and
+ * would approve calls by themselves. Approving happens on the push channel.
+ *
+ * Emails name the tool, server and reason, never arguments or results.
+ */
+import nodemailer from "nodemailer";
+export const EMAIL_EVENTS = ["pending", "blocked", "approved", "denied", "timeout", "undeliverable"];
+export class EmailNotifier {
+    opts;
+    name = "email";
+    sender;
+    constructor(opts) {
+        this.opts = opts;
+        if (opts.sender) {
+            this.sender = opts.sender;
+        }
+        else if (opts.smtp) {
+            const { host, port, secure, user, pass } = opts.smtp;
+            this.sender = nodemailer.createTransport({
+                host,
+                port,
+                secure: secure ?? port === 465,
+                ...(user !== undefined ? { auth: { user, pass } } : {}),
+            });
+        }
+        else {
+            throw new Error("EmailNotifier needs smtp settings or a sender");
+        }
+    }
+    async notify(event) {
+        const kind = event.kind === "resolved" ? event.result.outcome : event.kind;
+        if (!this.opts.on.includes(kind))
+            return;
+        const { subject, text } = this.compose(event);
+        await this.sender.sendMail({ from: this.opts.from, to: this.opts.to, subject, text });
+    }
+    compose(event) {
+        const footer = "\n\n-- \nSent by ADTL (adtl-gateway). This email never contains approve links; approve on your push channel.";
+        if (event.kind === "blocked") {
+            return {
+                subject: `ADTL blocked ${event.server}.${event.tool}`,
+                text: `ADTL blocked a call to ${event.server}.${event.tool}.\n\nReason: ${event.reason}\nRule: ${event.matched.join(", ") || "default"}\nSession: ${event.sessionId}${footer}`,
+            };
+        }
+        const r = event.request;
+        const subject = `${r.server}.${r.tool}`;
+        if (event.kind === "pending") {
+            return {
+                subject: `ADTL: approval needed for ${subject}`,
+                text: `An agent wants to call ${subject} and ADTL needs your approval.\n\nReason: ${r.reason}\nRule: ${r.matched.join(", ") || "default"}\n` +
+                    `Session: ${r.sessionId}\nExpires: ${r.expiresAt.toISOString()} (no answer means deny)${footer}`,
+            };
+        }
+        const res = event.result;
+        return {
+            subject: `ADTL: ${subject} ${res.outcome}`,
+            text: `The approval request for ${subject} was ${res.outcome}${res.channel ? ` via ${res.channel}` : ""} after ${Math.round(res.waitedMs / 1000)}s.\n\nReason it was asked: ${r.reason}\nSession: ${r.sessionId}${footer}`,
+        };
+    }
+}
+//# sourceMappingURL=email.js.map

package/dist/email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.js","sourceRoot":"","sources":["../src/email.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,UAAU,MAAM,YAAY,CAAC;AAGpC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAU,CAAC;AAiB9G,MAAM,OAAO,aAAa;IAIK;IAHpB,IAAI,GAAG,OAAO,CAAC;IACP,MAAM,CAAa;IAEpC,YAA6B,IAAkB;QAAlB,SAAI,GAAJ,IAAI,CAAc;QAC7C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5B,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACrB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;YACrD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,eAAe,CAAC;gBACvC,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,MAAM,IAAI,IAAI,KAAK,GAAG;gBAC9B,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAoB;QAC/B,MAAM,IAAI,GAAe,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACvF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO;QACzC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC;IAEO,OAAO,CAAC,KAAoB;QAClC,MAAM,MAAM,GAAG,8GAA8G,CAAC;QAC9H,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,gBAAgB,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE;gBACrD,IAAI,EAAE,0BAA0B,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,gBAAgB,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,cAAc,KAAK,CAAC,SAAS,GAAG,MAAM,EAAE;aAC/K,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QACxB,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,6BAA6B,OAAO,EAAE;gBAC/C,IAAI,EACF,0BAA0B,OAAO,6CAA6C,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,IAAI;oBACtI,YAAY,CAAC,CAAC,SAAS,cAAc,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,0BAA0B,MAAM,EAAE;aACnG,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,SAAS,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE;YAC1C,IAAI,EAAE,4BAA4B,OAAO,QAAQ,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,8BAA8B,CAAC,CAAC,MAAM,cAAc,CAAC,CAAC,SAAS,GAAG,MAAM,EAAE;SAC3N,CAAC;IACJ,CAAC;CACF"}