@adtl/gateway 0.1.1 → 0.2.0

package/dist/startup.js.map

@@ -1 +1 @@
-{"version":3,"file":"startup.js","sourceRoot":"","sources":["../src/startup.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AACxG,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEpH,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,cAAc,GAIf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAsB,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAQD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAA0B,CAAC;IAC7D,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,kBAAkB,CAAC,GAAG,GAAG,8EAA8E,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnG,MAAM,IAAI,kBAAkB,CAAC,GAAG,GAAG,6BAA6B,QAAQ,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,sBAAsB;IACpC,+FAA+F;IAC/F,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACtF,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,cAAc,CAAC,CAAgB,EAAE,OAAe;IACvD,OAAO,IAAI,oBAAoB,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,6FAA6F;QAC7F,GAAG,EAAE,EAAE,GAAG,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE;QAC7C,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,EAAU,EAAE,CAAW,EAAE,OAAe;IAC7D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5F,CAAC,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAoB,EACpB,OAA4D,EAAE;IAE9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,EAAE,CAAC;IAC7J,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE/F,IAAI,CAAC;QACH,mEAAmE;QACnE,MAAM,IAAI,GAAkB,MAAM,CAAC,OAAO,CAAC,YAAY;YACrD,CAAC,CAAC,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC;YAClE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,sBAAsB,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QACtG,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAAE,UAAU,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,kBAAkB,CAAC,+CAA+C,sBAAsB,YAAY,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAClD,KAAK,MAAM,QAAQ,IAAI,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,QAAQ,gCAAgC,CAAC,CAAC;YAClH,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChH,GAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QAEjF,sEAAsE;QACtE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAE,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAC9F,CAAC;QACF,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;YACnB,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtB,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC/B,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,sFAAsF,CAAC,CAAC;gBAClH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,MAAO,CAAC,CAAC,MAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,CAAC,CAAC;QAChG,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9G,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/G,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,EAAE,CAAC;QACjB,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"startup.js","sourceRoot":"","sources":["../src/startup.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AACxG,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEpH,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAiB,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,cAAc,GAIf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAsB,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAQD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAA0B,CAAC;IAC7D,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,kBAAkB,CAAC,GAAG,GAAG,8EAA8E,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnG,MAAM,IAAI,kBAAkB,CAAC,GAAG,GAAG,6BAA6B,QAAQ,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,sBAAsB;IACpC,+FAA+F;IAC/F,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACtF,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,cAAc,CAAC,CAAgB,EAAE,OAAe;IACvD,OAAO,IAAI,oBAAoB,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,6FAA6F;QAC7F,GAAG,EAAE,EAAE,GAAG,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE;QAC7C,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,EAAU,EAAE,CAAW,EAAE,OAAe;IAC7D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5F,CAAC,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAAC,GAAkB,EAAE,GAAsB,EAAE,GAAkB;IAC5F,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/F,GAAG,CAAC,IAAI,CAAC,2IAA2I,CAAC,CAAC;QACxJ,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,8FAA8F,CAAC,CAAC;IAC/I,GAAG,CAAC,IAAI,CAAC,cAAc,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC;IACjG,OAAO,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,cAAc,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;AACpF,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAoB,EACpB,OAA4D,EAAE;IAE9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,EAAE,CAAC;IAC7J,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE/F,IAAI,CAAC;QACH,mEAAmE;QACnE,MAAM,IAAI,GAAkB,MAAM,CAAC,OAAO,CAAC,YAAY;YACrD,CAAC,CAAC,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC;YAClE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,sBAAsB,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QACtG,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAAE,UAAU,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,kBAAkB,CAAC,+CAA+C,sBAAsB,YAAY,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAClD,KAAK,MAAM,QAAQ,IAAI,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,QAAQ,gCAAgC,CAAC,CAAC;YAClH,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChH,GAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QAEjF,sEAAsE;QACtE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAE,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAC9F,CAAC;QACF,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;YACnB,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtB,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC/B,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,sFAAsF,CAAC,CAAC;gBAClH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,MAAO,CAAC,CAAC,MAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,CAAC,CAAC;QAChG,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9G,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC;YAC9B,SAAS;YACT,OAAO;YACP,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,EAAE,CAAC;QACjB,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adtl/gateway",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Experimental: MCP gateway that labels every tool result and blocks risky tool calls using ADTL trust labels",
   "keywords": [
     "mcp",
@@ -46,9 +46,10 @@
     "url": "https://github.com/probita-ai/adtl/issues"
   },
   "dependencies": {
-    "@adtl/interceptors": "0.1.1",
-    "@adtl/labels": "0.1.1",
+    "@adtl/interceptors": "0.2.0",
+    "@adtl/labels": "0.2.0",
     "@modelcontextprotocol/sdk": "1.31.0",
+    "nodemailer": "10.0.12",
     "yaml": "2.9.1",
     "zod": "3.25.76"
   },

package/src/approvals.ts

@@ -0,0 +1,219 @@
+/**
+ * Human approvals for "ask" decisions.
+ *
+ * When adtl.policy answers `ask`, the gateway holds the call and asks the
+ * broker. The broker sends the request to every notifier and waits for an
+ * answer from a notifier that can carry one (e.g. ntfy). No answer before the
+ * timeout means deny.
+ *
+ * Answers are signed tokens: HMAC over the approval id, the call's hash, the
+ * decision and an expiry. A token only ever answers the one pending call it
+ * was made for, and only once. Anyone who can read the push channel can still
+ * use the tokens sent on it, so that channel must stay private.
+ */
+import { createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+
+export type ApprovalDecision = "allow" | "deny";
+export type ApprovalOutcome = "approved" | "denied" | "timeout" | "undeliverable";
+
+export interface ApprovalRequest {
+  id: string;
+  sessionId: string;
+  server: string;
+  tool: string;
+  callHash: string;
+  reason: string;
+  matched: string[];
+  /** The session label that triggered the rule (no arguments or results). */
+  sessionLabel?: unknown;
+  createdAt: Date;
+  expiresAt: Date;
+}
+
+export interface ApprovalResult {
+  outcome: ApprovalOutcome;
+  /** Notifier that delivered the answer. */
+  channel?: string;
+  approver?: string;
+  waitedMs: number;
+}
+
+export type ApprovalEvent =
+  | { kind: "pending"; request: ApprovalRequest; tokens: Record<ApprovalDecision, string> }
+  | { kind: "resolved"; request: ApprovalRequest; result: ApprovalResult }
+  | { kind: "blocked"; sessionId: string; server: string; tool: string; reason: string; matched: string[] };
+
+/** Called by a notifier with every answer it receives. Returns true if the answer was accepted. */
+export type AnswerFn = (token: string, approver?: string) => boolean;
+
+export interface Notifier {
+  readonly name: string;
+  /** Deliver an event. Throwing marks the delivery as failed; it never stops the call by itself. */
+  notify(event: ApprovalEvent): Promise<void>;
+  /**
+   * Notifiers that can carry answers: pass every answer for `request` to
+   * `answer` until `signal` aborts. Called before the pending event is sent.
+   */
+  listen?(request: ApprovalRequest, answer: AnswerFn, signal: AbortSignal): Promise<void>;
+}
+
+const TOKEN_PREFIX = "adtl1";
+
+/** Error message plus its cause, e.g. "fetch failed (ECONNRESET)". */
+export function errorText(err: unknown): string {
+  if (!(err instanceof Error)) return String(err);
+  const cause = err.cause as { code?: string; message?: string } | undefined;
+  const detail = cause?.code ?? cause?.message;
+  return detail && !err.message.includes(detail) ? `${err.message} (${detail})` : err.message;
+}
+
+export class ApprovalTokens {
+  constructor(private readonly secret: Buffer = randomBytes(32)) {}
+
+  sign(request: Pick<ApprovalRequest, "id" | "callHash" | "expiresAt">, decision: ApprovalDecision): string {
+    const exp = Math.floor(request.expiresAt.getTime() / 1000);
+    return `${TOKEN_PREFIX}.${request.id}.${decision}.${exp}.${this.mac(request.id, request.callHash, decision, exp)}`;
+  }
+
+  /** Parse a token without verifying it. */
+  static parse(token: string): { id: string; decision: ApprovalDecision; exp: number; sig: string } | undefined {
+    const parts = token.trim().split(".");
+    if (parts.length !== 5 || parts[0] !== TOKEN_PREFIX) return undefined;
+    const [, id, decision, exp, sig] = parts as [string, string, string, string, string];
+    if (decision !== "allow" && decision !== "deny") return undefined;
+    if (!/^\d+$/.test(exp)) return undefined;
+    return { id, decision, exp: Number(exp), sig };
+  }
+
+  /** Verify a token against the pending request it claims to answer. */
+  verify(token: string, request: Pick<ApprovalRequest, "id" | "callHash">, now: Date): ApprovalDecision | undefined {
+    const t = ApprovalTokens.parse(token);
+    if (!t || t.id !== request.id) return undefined;
+    if (now.getTime() > t.exp * 1000) return undefined;
+    const expected = Buffer.from(this.mac(t.id, request.callHash, t.decision, t.exp));
+    const given = Buffer.from(t.sig);
+    if (given.length !== expected.length || !timingSafeEqual(given, expected)) return undefined;
+    return t.decision;
+  }
+
+  private mac(id: string, callHash: string, decision: ApprovalDecision, exp: number): string {
+    return createHmac("sha256", this.secret).update(`${id}\n${callHash}\n${decision}\n${exp}`).digest("base64url");
+  }
+}
+
+export interface ApprovalBrokerOptions {
+  notifiers: Notifier[];
+  timeoutMs: number;
+  tokens?: ApprovalTokens;
+  now?: () => Date;
+  log?: { warn(msg: string): void };
+}
+
+interface Pending {
+  request: ApprovalRequest;
+  settle(decision: ApprovalDecision, channel: string, approver?: string): void;
+}
+
+export class ApprovalBroker {
+  private readonly notifiers: Notifier[];
+  private readonly timeoutMs: number;
+  private readonly tokens: ApprovalTokens;
+  private readonly now: () => Date;
+  private readonly log: { warn(msg: string): void };
+  private readonly pending = new Map<string, Pending>();
+
+  constructor(opts: ApprovalBrokerOptions) {
+    this.notifiers = opts.notifiers;
+    this.timeoutMs = opts.timeoutMs;
+    this.tokens = opts.tokens ?? new ApprovalTokens();
+    this.now = opts.now ?? (() => new Date());
+    this.log = opts.log ?? { warn: () => {} };
+  }
+
+  /** True if at least one notifier can carry answers. Without one, "ask" stays a block. */
+  get canApprove(): boolean {
+    return this.notifiers.some((n) => n.listen);
+  }
+
+  /** Ask for approval and wait for the answer, the timeout, or a failure to reach anyone. */
+  async request(input: Omit<ApprovalRequest, "id" | "createdAt" | "expiresAt">): Promise<ApprovalResult> {
+    const createdAt = this.now();
+    const request: ApprovalRequest = {
+      ...input,
+      id: randomUUID(),
+      createdAt,
+      expiresAt: new Date(createdAt.getTime() + this.timeoutMs),
+    };
+    const started = performance.now();
+    const waited = () => Math.round(performance.now() - started);
+    const abort = new AbortController();
+
+    let finish!: (r: ApprovalResult) => void;
+    const result = new Promise<ApprovalResult>((resolve) => {
+      const timer = setTimeout(() => finish({ outcome: "timeout", waitedMs: waited() }), this.timeoutMs);
+      finish = (r) => {
+        if (!this.pending.delete(request.id)) return; // already settled
+        clearTimeout(timer);
+        abort.abort();
+        resolve(r);
+      };
+    });
+    this.pending.set(request.id, {
+      request,
+      settle: (decision, channel, approver) =>
+        finish({ outcome: decision === "allow" ? "approved" : "denied", channel, ...(approver ? { approver } : {}), waitedMs: waited() }),
+    });
+
+    // Start listening before anyone can answer, then send the request everywhere.
+    const listeners = this.notifiers.filter((n) => n.listen);
+    for (const n of listeners) {
+      n.listen!(request, (token, approver) => this.answer(token, n.name, approver), abort.signal).catch((err: unknown) =>
+        this.log.warn(`${n.name}: stopped listening for approvals: ${errorText(err)}`),
+      );
+    }
+    const tokens = { allow: this.tokens.sign(request, "allow"), deny: this.tokens.sign(request, "deny") };
+    const sent = this.notifiers.map((n) =>
+      n.notify({ kind: "pending", request, tokens }).then(
+        () => true,
+        (err: unknown) => {
+          this.log.warn(`${n.name}: could not send approval request: ${errorText(err)}`);
+          return false;
+        },
+      ),
+    );
+    // Nobody who could answer was reached: deny now rather than wait out the timeout.
+    // Notify-only channels (email) are not waited for.
+    void Promise.all(sent.filter((_, i) => this.notifiers[i]!.listen)).then((ok) => {
+      if (!ok.includes(true)) finish({ outcome: "undeliverable", waitedMs: waited() });
+    });
+
+    const r = await result;
+    this.broadcast({ kind: "resolved", request, result: r });
+    return r;
+  }
+
+  /** Handle an answer token from a channel. Returns true if it settled a pending approval. */
+  answer(token: string, channel: string, approver?: string): boolean {
+    const parsed = ApprovalTokens.parse(token);
+    const p = parsed && this.pending.get(parsed.id);
+    if (!p) return false; // not ours, already answered, or garbage
+    const decision = this.tokens.verify(token, p.request, this.now());
+    if (!decision) {
+      this.log.warn(`${channel}: ignored an approval answer with a bad or expired signature`);
+      return false;
+    }
+    p.settle(decision, channel, approver);
+    return true;
+  }
+
+  /** Tell notifiers a call was blocked. Fire and forget. */
+  blocked(event: Omit<Extract<ApprovalEvent, { kind: "blocked" }>, "kind">): void {
+    this.broadcast({ kind: "blocked", ...event });
+  }
+
+  private broadcast(event: ApprovalEvent): void {
+    for (const n of this.notifiers) {
+      n.notify(event).catch((err: unknown) => this.log.warn(`${n.name}: could not send ${event.kind} notice: ${errorText(err)}`));
+    }
+  }
+}

package/src/audit.ts

@@ -19,6 +19,8 @@ export interface AuditEntry {
   decision?: string;
   /** Present when the gateway ran in audit mode: nothing was stopped or changed. */
   mode?: "audit";
+  /** Present when a human was asked: outcome, channel, approver (if known) and wait time. */
+  approval?: { outcome: string; channel?: string; approver?: string; waitedMs: number };
   reason?: string;
   matched?: unknown;
   callHash?: unknown;

package/src/config.ts

@@ -12,11 +12,19 @@
  *       docs:
  *         url: https://example.com/mcp
  *         headers: { Authorization: "Bearer ${DOCS_TOKEN}" }
+ *     approvals:                         # optional: make "ask" really ask
+ *       timeoutSeconds: 50
+ *       ntfy: { topic: "${ADTL_NTFY_TOPIC}" }
+ *       email:
+ *         smtp: { host: smtp.example.com, port: 465, user: "${SMTP_USER}", pass: "${SMTP_PASS}" }
+ *         from: adtl@example.com
+ *         to: you@example.com
  *
- * `${VAR}` in command, args, env, cwd, url and headers is replaced from the
- * gateway's environment. A missing variable is a config error.
+ * `${VAR}` in command, args, env, cwd, url, headers and approval settings is
+ * replaced from the gateway's environment. A missing variable is a config error.
  */
 import { z } from "zod";
+import { EMAIL_EVENTS } from "./email.js";
 
 const UPSTREAM_ID = /^[A-Za-z0-9-]+$/;
 
@@ -41,6 +49,48 @@ export type StdioUpstream = z.infer<typeof StdioUpstreamSchema>;
 export type HttpUpstream = z.infer<typeof HttpUpstreamSchema>;
 export type Upstream = z.infer<typeof UpstreamSchema>;
 
+export const NtfyConfigSchema = z
+  .object({
+    server: z.string().min(1).default("https://ntfy.sh"),
+    /** Topic approval requests are sent to. Anyone who can read it can approve: keep it secret. */
+    topic: z.string().min(1),
+    /** Topic answers are posted to. Default: `<topic>-reply`. */
+    replyTopic: z.string().min(1).optional(),
+    token: z.string().min(1).optional(),
+  })
+  .strict();
+
+export const EmailConfigSchema = z
+  .object({
+    smtp: z
+      .object({
+        host: z.string().min(1),
+        port: z.number().int().positive().default(587),
+        /** TLS from the start. Default: true on port 465, otherwise STARTTLS. */
+        secure: z.boolean().optional(),
+        user: z.string().min(1).optional(),
+        pass: z.string().optional(),
+      })
+      .strict(),
+    from: z.string().min(1),
+    to: z.union([z.string().min(1), z.array(z.string().min(1)).nonempty()]),
+    on: z.array(z.enum(EMAIL_EVENTS)).nonempty().default(["pending", "blocked"]),
+  })
+  .strict();
+
+export const ApprovalsConfigSchema = z
+  .object({
+    /**
+     * How long a call waits for an answer; no answer means deny. Many MCP
+     * clients give up on a request after 60 seconds, hence the default.
+     */
+    timeoutSeconds: z.number().int().positive().max(3600).default(50),
+    ntfy: NtfyConfigSchema.optional(),
+    email: EmailConfigSchema.optional(),
+  })
+  .strict();
+export type ApprovalsConfig = z.infer<typeof ApprovalsConfigSchema>;
+
 export const GatewayConfigSchema = z
   .object({
     upstreams: z
@@ -58,6 +108,8 @@ export const GatewayConfigSchema = z
      * logs what would have been stopped: for trying a policy out safely.
      */
     mode: z.enum(["active", "audit"]).default("active"),
+    /** Human approvals for "ask" decisions. Without an answering channel, "ask" blocks. */
+    approvals: ApprovalsConfigSchema.optional(),
     /** Timeout for each interceptor invocation, in milliseconds. */
     interceptorTimeoutMs: z.number().int().positive().default(5000),
   })
@@ -101,6 +153,17 @@ export function expandUpstream<T extends Upstream>(id: string, u: T, env: NodeJS
   };
 }
 
+/** Expand `${VAR}` in every string of the approvals section. */
+export function expandApprovals(a: ApprovalsConfig, env: NodeJS.ProcessEnv): ApprovalsConfig {
+  const walk = (v: unknown, where: string): unknown => {
+    if (typeof v === "string") return expandEnv(v, env, where);
+    if (Array.isArray(v)) return v.map((x, i) => walk(x, `${where}[${i}]`));
+    if (v && typeof v === "object") return Object.fromEntries(Object.entries(v).map(([k, x]) => [k, walk(x, `${where}.${k}`)]));
+    return v;
+  };
+  return walk(a, "gateway.approvals") as ApprovalsConfig;
+}
+
 export function isHttpUpstream(u: Upstream): u is HttpUpstream {
   return "url" in u;
 }

package/src/email.ts

@@ -0,0 +1,79 @@
+/**
+ * Email notices over SMTP. Notify only, on purpose: emails never contain
+ * approve links, because mail security scanners open links automatically and
+ * would approve calls by themselves. Approving happens on the push channel.
+ *
+ * Emails name the tool, server and reason, never arguments or results.
+ */
+import nodemailer from "nodemailer";
+import type { ApprovalEvent, Notifier } from "./approvals.js";
+
+export const EMAIL_EVENTS = ["pending", "blocked", "approved", "denied", "timeout", "undeliverable"] as const;
+export type EmailEvent = (typeof EMAIL_EVENTS)[number];
+
+export interface MailSender {
+  sendMail(mail: { from: string; to: string[]; subject: string; text: string }): Promise<unknown>;
+}
+
+export interface EmailOptions {
+  from: string;
+  to: string[];
+  /** Which events send an email. */
+  on: EmailEvent[];
+  /** SMTP settings, used unless `sender` is given. */
+  smtp?: { host: string; port: number; secure?: boolean; user?: string; pass?: string };
+  sender?: MailSender;
+}
+
+export class EmailNotifier implements Notifier {
+  readonly name = "email";
+  private readonly sender: MailSender;
+
+  constructor(private readonly opts: EmailOptions) {
+    if (opts.sender) {
+      this.sender = opts.sender;
+    } else if (opts.smtp) {
+      const { host, port, secure, user, pass } = opts.smtp;
+      this.sender = nodemailer.createTransport({
+        host,
+        port,
+        secure: secure ?? port === 465,
+        ...(user !== undefined ? { auth: { user, pass } } : {}),
+      });
+    } else {
+      throw new Error("EmailNotifier needs smtp settings or a sender");
+    }
+  }
+
+  async notify(event: ApprovalEvent): Promise<void> {
+    const kind: EmailEvent = event.kind === "resolved" ? event.result.outcome : event.kind;
+    if (!this.opts.on.includes(kind)) return;
+    const { subject, text } = this.compose(event);
+    await this.sender.sendMail({ from: this.opts.from, to: this.opts.to, subject, text });
+  }
+
+  private compose(event: ApprovalEvent): { subject: string; text: string } {
+    const footer = "\n\n-- \nSent by ADTL (adtl-gateway). This email never contains approve links; approve on your push channel.";
+    if (event.kind === "blocked") {
+      return {
+        subject: `ADTL blocked ${event.server}.${event.tool}`,
+        text: `ADTL blocked a call to ${event.server}.${event.tool}.\n\nReason: ${event.reason}\nRule: ${event.matched.join(", ") || "default"}\nSession: ${event.sessionId}${footer}`,
+      };
+    }
+    const r = event.request;
+    const subject = `${r.server}.${r.tool}`;
+    if (event.kind === "pending") {
+      return {
+        subject: `ADTL: approval needed for ${subject}`,
+        text:
+          `An agent wants to call ${subject} and ADTL needs your approval.\n\nReason: ${r.reason}\nRule: ${r.matched.join(", ") || "default"}\n` +
+          `Session: ${r.sessionId}\nExpires: ${r.expiresAt.toISOString()} (no answer means deny)${footer}`,
+      };
+    }
+    const res = event.result;
+    return {
+      subject: `ADTL: ${subject} ${res.outcome}`,
+      text: `The approval request for ${subject} was ${res.outcome}${res.channel ? ` via ${res.channel}` : ""} after ${Math.round(res.waitedMs / 1000)}s.\n\nReason it was asked: ${r.reason}\nSession: ${r.sessionId}${footer}`,
+    };
+  }
+}

package/src/gateway.ts

@@ -7,8 +7,11 @@
  *               interceptors (adtl.label) → agent
  *
  * When a call is stopped, the agent receives a normal tool result with
- * `isError: true` explaining why, so the model can tell the user. In v0.1 an
- * "ask" decision is treated as a block; approvals arrive in v0.2.
+ * `isError: true` explaining why, so the model can tell the user.
+ *
+ * An "ask" decision holds the call and asks a human through the approval
+ * broker (e.g. a phone notification). Approved calls run; denied, unanswered
+ * or undeliverable ones are stopped. Without an approval channel, "ask" blocks.
  *
  * In audit mode (the invoker runs every interceptor with `mode: "audit"`)
  * nothing is stopped or changed: calls the policy would stop are forwarded,
@@ -24,11 +27,12 @@ import {
   type Tool,
 } from "@modelcontextprotocol/sdk/types.js";
 import type { InvocationContext } from "@adtl/interceptors";
+import type { ApprovalBroker, ApprovalResult } from "./approvals.js";
 import type { AuditEntry, AuditSink } from "./audit.js";
 import { TOOL_SEPARATOR } from "./config.js";
 import type { Blocked, ChainOutcome, InterceptorInvoker } from "./invoker.js";
 
-export const GATEWAY_VERSION = "0.1.1";
+export const GATEWAY_VERSION = "0.2.0";
 
 /** `_meta` key on gateway-generated error results describing why a call was stopped. */
 export const GATEWAY_DECISION_KEY = "adtl/gateway";
@@ -56,8 +60,18 @@ export interface AdtlGatewayOptions {
   sessionId?: string;
   audit?: AuditSink;
   logger?: GatewayLogger;
+  /** Asks humans about "ask" decisions and sends notices. */
+  approvals?: ApprovalBroker;
+}
+
+export interface CallOptions {
+  /** Report progress to the client while a call waits for approval. */
+  progress?: (progress: number, message: string) => Promise<void>;
 }
 
+/** How often a waiting call reports progress, so clients that reset their timeout on progress keep waiting. */
+const PROGRESS_INTERVAL_MS = 10_000;
+
 function textError(text: string, meta: Record<string, unknown>): CallToolResult {
   return { content: [{ type: "text", text }], isError: true, _meta: { [GATEWAY_DECISION_KEY]: meta } };
 }
@@ -66,12 +80,24 @@ function blockedMessage(b: Blocked): string {
   if (b.decision === "ask") {
     return (
       `ADTL stopped this call because it needs a human's approval: ${b.reason}. ` +
-      `This version of ADTL cannot ask for approval yet, so the call was not run. Tell the user what you were trying to do.`
+      `No approval channel is configured, so the call was not run. Tell the user what you were trying to do.`
     );
   }
   return `ADTL blocked this call: ${b.reason}. The call was not run.`;
 }
 
+function approvalMessage(b: Blocked, a: ApprovalResult): string {
+  const why = `ADTL asked a human to approve this call because: ${b.reason}.`;
+  switch (a.outcome) {
+    case "denied":
+      return `${why} The request was denied, so the call was not run. Do not retry it; tell the user what you were trying to do.`;
+    case "timeout":
+      return `${why} Nobody answered in time, so the call was not run. Tell the user, who can approve it if you try again.`;
+    default:
+      return `${why} ADTL could not reach anyone to approve it, so the call was not run. Tell the user what you were trying to do.`;
+  }
+}
+
 function infoOf(outcome: ChainOutcome, interceptor: string): Record<string, unknown> {
   return outcome.results.find((r) => r.interceptor === interceptor)?.info ?? {};
 }
@@ -82,6 +108,7 @@ export class AdtlGateway {
   private readonly invoker: InterceptorInvoker;
   private readonly audit: AuditSink | undefined;
   private readonly log: GatewayLogger;
+  private readonly approvals: ApprovalBroker | undefined;
   private routes = new Map<string, Route>();
 
   constructor(opts: AdtlGatewayOptions) {
@@ -90,6 +117,7 @@ export class AdtlGateway {
     this.sessionId = opts.sessionId ?? randomUUID();
     this.audit = opts.audit;
     this.log = opts.logger ?? stderrLogger;
+    this.approvals = opts.approvals;
   }
 
   /** The downstream MCP server the agent connects to. */
@@ -104,7 +132,15 @@ export class AdtlGateway {
       },
     );
     server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: await this.listTools() }));
-    server.setRequestHandler(CallToolRequestSchema, async (req) => this.callTool(req.params.name, req.params.arguments ?? {}));
+    server.setRequestHandler(CallToolRequestSchema, async (req, extra) => {
+      const progressToken = req.params._meta?.progressToken;
+      const progress =
+        progressToken === undefined
+          ? undefined
+          : (progress: number, message: string) =>
+              extra.sendNotification({ method: "notifications/progress", params: { progressToken, progress, message } });
+      return this.callTool(req.params.name, req.params.arguments ?? {}, progress ? { progress } : {});
+    });
     return server;
   }
 
@@ -131,7 +167,7 @@ export class AdtlGateway {
     return tools;
   }
 
-  async callTool(name: string, args: Record<string, unknown>): Promise<CallToolResult> {
+  async callTool(name: string, args: Record<string, unknown>, opts: CallOptions = {}): Promise<CallToolResult> {
     const started = performance.now();
     let route = this.routes.get(name);
     if (!route) {
@@ -158,13 +194,39 @@ export class AdtlGateway {
     const requestPayload = { method: "tools/call", params: { name: route.tool, arguments: args } };
     const req = await this.invoker.runRequest({ event: "tools/call", payload: requestPayload, config, context });
     const policy = infoOf(req, "adtl.policy");
+    let approval: ApprovalResult | undefined;
     if (req.blocked) {
-      finish({ outcome: "blocked", decision: req.blocked.decision, reason: req.blocked.reason, matched: policy.matched, callHash: policy.callHash, sessionLabel: policy.sessionLabel, warnings: req.warnings });
-      this.log.info(`${req.blocked.decision} ${name}: ${req.blocked.reason}`);
-      return textError(blockedMessage(req.blocked), { ...req.blocked, callHash: policy.callHash });
+      const b = req.blocked;
+      const stopped = { decision: b.decision, reason: b.reason, matched: policy.matched, callHash: policy.callHash, sessionLabel: policy.sessionLabel };
+      const matched = Array.isArray(policy.matched) ? (policy.matched as string[]) : [];
+      if (b.decision === "ask" && this.approvals?.canApprove && typeof policy.callHash === "string") {
+        this.log.info(`ask ${name}: waiting for approval (${b.reason})`);
+        approval = await this.waitForApproval(opts, () =>
+          this.approvals!.request({
+            sessionId: this.sessionId,
+            server: route.upstream,
+            tool: route.tool,
+            callHash: policy.callHash as string,
+            reason: b.reason,
+            matched,
+            ...(policy.sessionLabel !== undefined ? { sessionLabel: policy.sessionLabel } : {}),
+          }),
+        );
+        this.log.info(`ask ${name}: ${approval.outcome}`);
+        if (approval.outcome !== "approved") {
+          finish({ outcome: "blocked", ...stopped, approval, warnings: req.warnings });
+          return textError(approvalMessage(b, approval), { ...b, callHash: policy.callHash, approval });
+        }
+      } else {
+        finish({ outcome: "blocked", ...stopped, warnings: req.warnings });
+        this.log.info(`${b.decision} ${name}: ${b.reason}`);
+        this.approvals?.blocked({ sessionId: this.sessionId, server: route.upstream, tool: route.tool, reason: b.reason, matched });
+        return textError(blockedMessage(b), { ...b, callHash: policy.callHash });
+      }
     }
     const forwarded = (req.payload as typeof requestPayload).params;
     const decision = policy["adtl/decision"] as string | undefined;
+    const approved = approval ? { approval } : {};
     const audit = this.invoker.modeOverride === "audit";
     // Only set in audit mode, for calls the policy would have stopped.
     const wouldStop =
@@ -179,7 +241,7 @@ export class AdtlGateway {
       result = (await client.callTool({ name: forwarded.name, arguments: forwarded.arguments })) as CallToolResult;
     } catch (err) {
       const reason = (err as Error).message;
-      finish({ outcome: "upstream_error", ...(decision ? { decision } : {}), reason, callHash: policy.callHash, ...(audit ? { mode: "audit" as const } : {}), warnings: req.warnings });
+      finish({ outcome: "upstream_error", ...(decision ? { decision } : {}), ...approved, reason, callHash: policy.callHash, ...(audit ? { mode: "audit" as const } : {}), warnings: req.warnings });
       return textError(`The ${route.upstream} server returned an error: ${reason}`, { reason: "upstream_error" });
     }
 
@@ -202,6 +264,7 @@ export class AdtlGateway {
       // Missing only if adtl.policy failed and was allowed to (audit mode); see warnings.
       ...(decision ? { decision } : {}),
       ...(wouldStop ?? {}),
+      ...approved,
       ...(audit ? { mode: "audit" as const } : {}),
       callHash: policy.callHash,
       label: label.label,
@@ -210,4 +273,18 @@ export class AdtlGateway {
     });
     return (res.payload as { result: CallToolResult }).result;
   }
+
+  /** Run an approval request, reporting progress to the client while it waits. */
+  private async waitForApproval(opts: CallOptions, ask: () => Promise<ApprovalResult>): Promise<ApprovalResult> {
+    if (!opts.progress) return ask();
+    let n = 0;
+    const report = () => void opts.progress!(++n, "Waiting for a human to approve this call").catch(() => undefined);
+    report();
+    const timer = setInterval(report, PROGRESS_INTERVAL_MS);
+    try {
+      return await ask();
+    } finally {
+      clearInterval(timer);
+    }
+  }
 }

package/src/index.ts

@@ -1,5 +1,8 @@
 export * from "./config.js";
 export * from "./invoker.js";
 export * from "./audit.js";
+export * from "./approvals.js";
+export * from "./ntfy.js";
+export * from "./email.js";
 export * from "./gateway.js";
 export * from "./startup.js";