@agimon-ai/po-approval 0.0.0-alpha.43

package/LICENSE

@@ -0,0 +1,149 @@
+License text copyright © 2017 MariaDB Corporation Ab, All Rights Reserved.
+"Business Source License" is a trademark of MariaDB Corporation Ab.
+
+Parameters
+
+Licensor:             Agimon Pty Ltd
+Licensed Work:        Po, the software in the Po source repository and the
+                      packages released from it, in each version released by
+                      the Licensor.
+                      The Licensed Work is (c) 2026 Agimon Pty Ltd.
+                      Material identified as third-party in the "Third-party
+                      components" section at the end of this file or in a
+                      NOTICE file, and any package or directory whose own
+                      license file grants a different license, is not part of
+                      the Licensed Work and remains under its own license.
+Additional Use Grant: You may make production use of the Licensed Work if
+  your use is Eligible Use. "Eligible Use" is production use that falls
+  within at least one of the following:
+
+  (a) Personal Use. Use by an individual for their own personal purposes,
+      and not on behalf of, or for the benefit of, an employer, client, or
+      other Organization. Use by an individual in the course of employment
+      or engagement by an Organization is use by that Organization.
+
+  (b) Small Organization Use. Use by or on behalf of an Organization whose
+      Annual Revenue is less than USD 1,000,000.
+
+  (c) Non-profit, Education and Research Use. Use, regardless of Annual
+      Revenue, by (i) an Organization registered or recognized as a
+      non-profit or charitable organization under the laws of its
+      jurisdiction, for its non-profit purposes; (ii) an accredited school,
+      college, or university, for teaching, learning, or academic research;
+      or (iii) a publicly funded research institution, for its research.
+
+  (d) Service Provider Use. Use by a consultant, contractor, agency, or other
+      service provider, regardless of its own Annual Revenue, solely to
+      build, deploy, host, operate, or support the Licensed Work for a client
+      whose own use would be Eligible Use under (a), (b), or (c). A service
+      provider's use for its own purposes is Eligible Use only if the service
+      provider itself qualifies under (b) or (c).
+
+
+  Hosted services. Offering the Licensed Work to third parties as a hosted
+  or managed service whose primary value is the Licensed Work is Eligible
+  Use only if each such third party's own use would be Eligible Use.
+
+  Definitions. "Organization" means any company, partnership, sole
+  proprietorship, trust, association, government body, or other entity, and
+  includes an individual acting in a business or professional capacity.
+  "Affiliate" means any entity that directly or indirectly controls, is
+  controlled by, or is under common control with an Organization, where
+  "control" means ownership of more than 50% of the voting interests of an
+  entity or the power to direct its management and policies by contract or
+  otherwise. "Annual Revenue" means the total gross revenue of an
+  Organization and all of its Affiliates combined, from all sources and
+  whether or not related to the Licensed Work, for its most recently
+  completed fiscal year, or, if it has not completed a fiscal year, for the
+  twelve months before the use (or since its formation, if shorter),
+  converted into US dollars at the average exchange rate for that period.
+  Proceeds of equity or debt financing are not revenue.
+
+  Threshold. If an Organization stops qualifying under (b), its existing
+  production use remains Eligible Use for 90 days after it stops
+  qualifying, after which it must obtain a commercial license or stop
+  production use. Use that was Eligible Use when it occurred never requires
+  a commercial license after the fact.
+Change Date:          Four years from the date a version of the Licensed Work
+                      is first publicly released by the Licensor.
+Change License:       Apache License, Version 2.0
+
+For information about alternative licensing arrangements for the Licensed
+Work, please visit: https://agimon.ai/licensing
+
+Notice
+
+The Business Source License (this document, or the "License") is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.
+
+-----------------------------------------------------------------------------
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License’s text to license
+your works, and to refer to it using the trademark “Business Source License”,
+as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License’s text and the “Business
+Source License” name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where “compatible” means that software provided under the Change License can
+   be included in a program with software provided under GPL Version 2.0 or a
+   later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text “None”.
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.

package/README.md

@@ -0,0 +1,33 @@
+# Po Approval
+
+Asks the person before a tool or code-mode method that declares approval runs in a Po session.
+
+## What it binds
+
+The session service `po/approval` (`PO_APPROVAL_CONTRACT` from `@agimon-ai/po-core/approval`). Po core's gate calls it for any
+direct tool or code-mode namespace member that declares `approval: { requirement, describe }`. Without this package
+bound, `ask` calls run without asking and `human` calls are refused.
+
+## How a call is asked
+
+Each gated call opens one Approve/Deny dialog on the session's client. The dialog carries the bounded text the package's
+`describe` returned (title, summary, up to 12 details), never the call's arguments. The decision is:
+
+- `approved`: only from an explicit Approve that arrives before the call is aborted or its deadline passes.
+- `denied`: the person chose Deny. The agent is told not to retry unless asked.
+- `cancelled`: dismissed, aborted, expired, or the session or server closed while waiting.
+
+Only `approved` runs the call, once. A restart cancels every pending approval; nothing is replayed.
+
+## Where nobody can answer
+
+The host sets `interaction: 'unattended'` for workflow and new calendar-created sessions. Subagents and background `exec`
+scripts are always unattended, even if their session is interactive. `ask` calls run there without asking; `human` calls
+are hidden or refused before this service is reached. The field survives restart and host/container handoff.
+
+Absent `interaction` means interactive. Provenance labels stay opaque, and tool arguments cannot change presence.
+
+## Limits
+
+`ask` is a courtesy, not a security boundary: it is skipped where nobody can answer. Pi tools, Bash and raw code are not
+gated.

package/dist/apiContracts.cjs

@@ -0,0 +1,53 @@
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+let _agimon_ai_po_core_apiContracts = require("@agimon-ai/po-core/apiContracts");
+let _agimon_ai_po_core_approval = require("@agimon-ai/po-core/approval");
+let typebox = require("typebox");
+//#region src/schemas/apiContracts.ts
+const VoiceApprovalAnswerSchema = typebox.Type.Object({
+	approvalId: typebox.Type.String({
+		minLength: 1,
+		maxLength: 200
+	}),
+	decision: typebox.Type.Union([typebox.Type.Literal("approved"), typebox.Type.Literal("denied")]),
+	channel: typebox.Type.Literal("voice")
+});
+const apiContracts = (0, _agimon_ai_po_core_apiContracts.defineApiContract)({
+	version: 1,
+	http: [{
+		id: "approval.current",
+		scope: "session",
+		basePath: "approval",
+		path: "/current",
+		method: "GET",
+		authentication: "owner",
+		description: "Read the visible head approval, or null when another dialog is at the head.",
+		responses: (0, _agimon_ai_po_core_apiContracts.jsonApiResponses)(typebox.Type.Union([_agimon_ai_po_core_approval.PoApprovalPromptSchema, typebox.Type.Null()]))
+	}, {
+		id: "approval.answer",
+		scope: "session",
+		basePath: "approval",
+		path: "/current",
+		method: "POST",
+		authentication: "owner",
+		description: "Answer the current ask approval through Voice. Human approvals are app-only.",
+		body: {
+			required: true,
+			contentType: "application/json",
+			schema: VoiceApprovalAnswerSchema
+		},
+		responses: {
+			...(0, _agimon_ai_po_core_apiContracts.jsonApiResponses)(typebox.Type.Object({ answered: typebox.Type.Boolean() })),
+			"400": { description: "Invalid approval answer." }
+		}
+	}],
+	sockets: [],
+	dynamic: []
+});
+//#endregion
+exports.apiContracts = apiContracts;
+exports.default = apiContracts;
+
+//# sourceMappingURL=apiContracts.cjs.map

package/dist/apiContracts.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiContracts.cjs","names":["Type","defineApiContract","jsonApiResponses","PoApprovalPromptSchema"],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses } from '@agimon-ai/po-core/apiContracts';\nimport { PoApprovalPromptSchema } from '@agimon-ai/po-core/approval';\nimport { Type } from 'typebox';\n\nexport const VoiceApprovalAnswerSchema = Type.Object({\n  approvalId: Type.String({ minLength: 1, maxLength: 200 }),\n  decision: Type.Union([Type.Literal('approved'), Type.Literal('denied')]),\n  channel: Type.Literal('voice'),\n});\n\nexport const apiContracts = defineApiContract({\n  version: 1,\n  http: [\n    {\n      id: 'approval.current',\n      scope: 'session',\n      basePath: 'approval',\n      path: '/current',\n      method: 'GET',\n      authentication: 'owner',\n      description: 'Read the visible head approval, or null when another dialog is at the head.',\n      responses: jsonApiResponses(Type.Union([PoApprovalPromptSchema, Type.Null()])),\n    },\n    {\n      id: 'approval.answer',\n      scope: 'session',\n      basePath: 'approval',\n      path: '/current',\n      method: 'POST',\n      authentication: 'owner',\n      description: 'Answer the current ask approval through Voice. Human approvals are app-only.',\n      body: { required: true, contentType: 'application/json', schema: VoiceApprovalAnswerSchema },\n      responses: {\n        ...jsonApiResponses(Type.Object({ answered: Type.Boolean() })),\n        '400': { description: 'Invalid approval answer.' },\n      },\n    },\n  ],\n  sockets: [],\n  dynamic: [],\n});\nexport default apiContracts;\n"],"mappings":";;;;;;;;AAIA,MAAa,4BAA4BA,QAAAA,KAAK,OAAO;CACnD,YAAYA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAI,CAAC;CACxD,UAAUA,QAAAA,KAAK,MAAM,CAACA,QAAAA,KAAK,QAAQ,UAAU,GAAGA,QAAAA,KAAK,QAAQ,QAAQ,CAAC,CAAC;CACvE,SAASA,QAAAA,KAAK,QAAQ,OAAO;AAC/B,CAAC;AAED,MAAa,gBAAA,GAAeC,gCAAAA,kBAAAA,CAAkB;CAC5C,SAAS;CACT,MAAM,CACJ;EACE,IAAI;EACJ,OAAO;EACP,UAAU;EACV,MAAM;EACN,QAAQ;EACR,gBAAgB;EAChB,aAAa;EACb,YAAA,GAAWC,gCAAAA,iBAAAA,CAAiBF,QAAAA,KAAK,MAAM,CAACG,4BAAAA,wBAAwBH,QAAAA,KAAK,KAAK,CAAC,CAAC,CAAC;CAC/E,GACA;EACE,IAAI;EACJ,OAAO;EACP,UAAU;EACV,MAAM;EACN,QAAQ;EACR,gBAAgB;EAChB,aAAa;EACb,MAAM;GAAE,UAAU;GAAM,aAAa;GAAoB,QAAQ;EAA0B;EAC3F,WAAW;GACT,IAAA,GAAGE,gCAAAA,iBAAAA,CAAiBF,QAAAA,KAAK,OAAO,EAAE,UAAUA,QAAAA,KAAK,QAAQ,EAAE,CAAC,CAAC;GAC7D,OAAO,EAAE,aAAa,2BAA2B;EACnD;CACF,CACF;CACA,SAAS,CAAC;CACV,SAAS,CAAC;AACZ,CAAC"}

package/dist/apiContracts.d.mts

@@ -0,0 +1,53 @@
+import { Type } from "typebox";
+//#region src/schemas/apiContracts.d.ts
+export declare const apiContracts: {
+  version: 1;
+  protocols?: Record<string, string> | undefined;
+  schemas?: Record<string, boolean | object> | undefined;
+  http: {
+    id: string;
+    scope: "global" | "session" | "workspace";
+    basePath?: string | undefined;
+    path: string;
+    method: "DELETE" | "GET" | "HEAD" | "OPTIONS" | "PATCH" | "POST" | "PUT";
+    description: string;
+    availability?: string | undefined;
+    authentication: "device" | "none" | "owner";
+    parameters?: {
+      name: string;
+      in: "header" | "path" | "query";
+      required: boolean;
+      schema: boolean | object;
+    }[] | undefined;
+    body?: {
+      contentType: string;
+      contentTypes?: string[] | undefined;
+      required: boolean;
+      schema: boolean | object;
+    } | undefined;
+    responses: Record<string, {
+      description: string;
+      contentType?: string | undefined;
+      schema?: boolean | object | undefined;
+      events?: Record<string, boolean | object> | undefined;
+    }>;
+  }[];
+  sockets: {
+    id: string;
+    scope: "global" | "session" | "workspace";
+    description: string;
+    availability?: string | undefined;
+    service: string;
+    member: string;
+    direction: "client-to-server" | "server-to-client";
+    kind: "channel" | "method" | "state";
+    input: boolean | object;
+    output?: boolean | object | undefined;
+    errors?: boolean | object | undefined;
+  }[];
+  dynamic: string[];
+  gaps?: string[] | undefined;
+};
+//#endregion
+export { apiContracts as default };
+//# sourceMappingURL=apiContracts.d.mts.map

package/dist/apiContracts.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiContracts.d.mts","names":[],"sources":["../src/schemas/apiContracts.ts"],"mappings":";;qBAUa"}

package/dist/apiContracts.mjs

@@ -0,0 +1,48 @@
+import { defineApiContract, jsonApiResponses } from "@agimon-ai/po-core/apiContracts";
+import { PoApprovalPromptSchema } from "@agimon-ai/po-core/approval";
+import { Type } from "typebox";
+//#region src/schemas/apiContracts.ts
+const VoiceApprovalAnswerSchema = Type.Object({
+	approvalId: Type.String({
+		minLength: 1,
+		maxLength: 200
+	}),
+	decision: Type.Union([Type.Literal("approved"), Type.Literal("denied")]),
+	channel: Type.Literal("voice")
+});
+const apiContracts = defineApiContract({
+	version: 1,
+	http: [{
+		id: "approval.current",
+		scope: "session",
+		basePath: "approval",
+		path: "/current",
+		method: "GET",
+		authentication: "owner",
+		description: "Read the visible head approval, or null when another dialog is at the head.",
+		responses: jsonApiResponses(Type.Union([PoApprovalPromptSchema, Type.Null()]))
+	}, {
+		id: "approval.answer",
+		scope: "session",
+		basePath: "approval",
+		path: "/current",
+		method: "POST",
+		authentication: "owner",
+		description: "Answer the current ask approval through Voice. Human approvals are app-only.",
+		body: {
+			required: true,
+			contentType: "application/json",
+			schema: VoiceApprovalAnswerSchema
+		},
+		responses: {
+			...jsonApiResponses(Type.Object({ answered: Type.Boolean() })),
+			"400": { description: "Invalid approval answer." }
+		}
+	}],
+	sockets: [],
+	dynamic: []
+});
+//#endregion
+export { apiContracts, apiContracts as default };
+
+//# sourceMappingURL=apiContracts.mjs.map

package/dist/apiContracts.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiContracts.mjs","names":[],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses } from '@agimon-ai/po-core/apiContracts';\nimport { PoApprovalPromptSchema } from '@agimon-ai/po-core/approval';\nimport { Type } from 'typebox';\n\nexport const VoiceApprovalAnswerSchema = Type.Object({\n  approvalId: Type.String({ minLength: 1, maxLength: 200 }),\n  decision: Type.Union([Type.Literal('approved'), Type.Literal('denied')]),\n  channel: Type.Literal('voice'),\n});\n\nexport const apiContracts = defineApiContract({\n  version: 1,\n  http: [\n    {\n      id: 'approval.current',\n      scope: 'session',\n      basePath: 'approval',\n      path: '/current',\n      method: 'GET',\n      authentication: 'owner',\n      description: 'Read the visible head approval, or null when another dialog is at the head.',\n      responses: jsonApiResponses(Type.Union([PoApprovalPromptSchema, Type.Null()])),\n    },\n    {\n      id: 'approval.answer',\n      scope: 'session',\n      basePath: 'approval',\n      path: '/current',\n      method: 'POST',\n      authentication: 'owner',\n      description: 'Answer the current ask approval through Voice. Human approvals are app-only.',\n      body: { required: true, contentType: 'application/json', schema: VoiceApprovalAnswerSchema },\n      responses: {\n        ...jsonApiResponses(Type.Object({ answered: Type.Boolean() })),\n        '400': { description: 'Invalid approval answer.' },\n      },\n    },\n  ],\n  sockets: [],\n  dynamic: [],\n});\nexport default apiContracts;\n"],"mappings":";;;;AAIA,MAAa,4BAA4B,KAAK,OAAO;CACnD,YAAY,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAI,CAAC;CACxD,UAAU,KAAK,MAAM,CAAC,KAAK,QAAQ,UAAU,GAAG,KAAK,QAAQ,QAAQ,CAAC,CAAC;CACvE,SAAS,KAAK,QAAQ,OAAO;AAC/B,CAAC;AAED,MAAa,eAAe,kBAAkB;CAC5C,SAAS;CACT,MAAM,CACJ;EACE,IAAI;EACJ,OAAO;EACP,UAAU;EACV,MAAM;EACN,QAAQ;EACR,gBAAgB;EAChB,aAAa;EACb,WAAW,iBAAiB,KAAK,MAAM,CAAC,wBAAwB,KAAK,KAAK,CAAC,CAAC,CAAC;CAC/E,GACA;EACE,IAAI;EACJ,OAAO;EACP,UAAU;EACV,MAAM;EACN,QAAQ;EACR,gBAAgB;EAChB,aAAa;EACb,MAAM;GAAE,UAAU;GAAM,aAAa;GAAoB,QAAQ;EAA0B;EAC3F,WAAW;GACT,GAAG,iBAAiB,KAAK,OAAO,EAAE,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAC;GAC7D,OAAO,EAAE,aAAa,2BAA2B;EACnD;CACF,CACF;CACA,SAAS,CAAC;CACV,SAAS,CAAC;AACZ,CAAC"}

package/dist/approvalCoordinator-Be6utzFg.cjs

@@ -0,0 +1,73 @@
+//#region src/services/approvalCoordinator/index.ts
+/** setTimeout fires at once past this many milliseconds, so a far expiry waits in steps no longer than it. */
+const MAX_TIMER_MS = 2147483647;
+/** The options of every approval dialog. Clients match the labels; the values come back as the decision. */
+const APPROVAL_OPTIONS = Object.freeze([Object.freeze({
+	label: "Approve",
+	value: "approved"
+}), Object.freeze({
+	label: "Deny",
+	value: "denied"
+})]);
+/**
+* Asks the person through the session's dialog channel: one Approve/Deny `select` per call, carrying the bounded
+* approval card and never the call's arguments. Resolves `approved` only from an explicit Approve that arrived before
+* abort or expiry; everything else, including a closed client, is `cancelled` or `denied`, so nothing runs.
+*/
+function createApprovalCoordinator(client) {
+	return { async request(request) {
+		const target = client();
+		const remaining = request.expiresAt === void 0 ? void 0 : request.expiresAt - Date.now();
+		if (target === void 0 || request.signal?.aborted === true || remaining !== void 0 && remaining <= 0) return "cancelled";
+		const expiry = new AbortController();
+		let timer;
+		const wait = () => {
+			const left = (request.expiresAt ?? 0) - Date.now();
+			timer = left <= 0 ? void 0 : setTimeout(wait, Math.min(left, MAX_TIMER_MS));
+			if (left <= 0) expiry.abort();
+		};
+		if (remaining !== void 0) wait();
+		const signal = request.signal === void 0 ? expiry.signal : AbortSignal.any([request.signal, expiry.signal]);
+		const { title, summary, details } = request.description;
+		const approval = {
+			id: crypto.randomUUID(),
+			toolCallId: request.toolCallId,
+			operation: request.operation,
+			requirement: request.requirement,
+			title,
+			summary,
+			...details === void 0 ? {} : { details },
+			...request.expiresAt === void 0 ? {} : { expiresAt: request.expiresAt }
+		};
+		try {
+			const answer = await target.request({
+				kind: "select",
+				title,
+				message: summary,
+				options: APPROVAL_OPTIONS,
+				approval
+			}, signal);
+			if (signal.aborted) return "cancelled";
+			return answer === "approved" || answer === "denied" ? answer : "cancelled";
+		} catch {
+			return "cancelled";
+		} finally {
+			clearTimeout(timer);
+		}
+	} };
+}
+//#endregion
+Object.defineProperty(exports, "APPROVAL_OPTIONS", {
+	enumerable: true,
+	get: function() {
+		return APPROVAL_OPTIONS;
+	}
+});
+Object.defineProperty(exports, "createApprovalCoordinator", {
+	enumerable: true,
+	get: function() {
+		return createApprovalCoordinator;
+	}
+});
+
+//# sourceMappingURL=approvalCoordinator-Be6utzFg.cjs.map

package/dist/approvalCoordinator-Be6utzFg.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvalCoordinator-Be6utzFg.cjs","names":[],"sources":["../src/services/approvalCoordinator/index.ts"],"sourcesContent":["import type {\n  PoApprovalDecision,\n  PoApprovalPrompt,\n  PoApprovalRequest,\n  PoApprovalService,\n} from '@agimon-ai/po-core/approval';\nimport type { PoHeadlessClient } from '@agimon-ai/po-core/headless';\n\n/** setTimeout fires at once past this many milliseconds, so a far expiry waits in steps no longer than it. */\nconst MAX_TIMER_MS = 2_147_483_647;\n\n/** The options of every approval dialog. Clients match the labels; the values come back as the decision. */\nexport const APPROVAL_OPTIONS = Object.freeze([\n  Object.freeze({ label: 'Approve', value: 'approved' }),\n  Object.freeze({ label: 'Deny', value: 'denied' }),\n]);\n\n/**\n * Asks the person through the session's dialog channel: one Approve/Deny `select` per call, carrying the bounded\n * approval card and never the call's arguments. Resolves `approved` only from an explicit Approve that arrived before\n * abort or expiry; everything else, including a closed client, is `cancelled` or `denied`, so nothing runs.\n */\nexport function createApprovalCoordinator(client: () => PoHeadlessClient | undefined): PoApprovalService {\n  return {\n    async request(request: PoApprovalRequest): Promise<PoApprovalDecision> {\n      const target = client();\n      const remaining = request.expiresAt === undefined ? undefined : request.expiresAt - Date.now();\n      if (target === undefined || request.signal?.aborted === true || (remaining !== undefined && remaining <= 0))\n        return 'cancelled';\n      const expiry = new AbortController();\n      let timer: ReturnType<typeof setTimeout> | undefined;\n      const wait = (): void => {\n        const left = (request.expiresAt ?? 0) - Date.now();\n        timer = left <= 0 ? undefined : setTimeout(wait, Math.min(left, MAX_TIMER_MS));\n        if (left <= 0) expiry.abort();\n      };\n      if (remaining !== undefined) wait();\n      const signal = request.signal === undefined ? expiry.signal : AbortSignal.any([request.signal, expiry.signal]);\n      const { title, summary, details } = request.description;\n      const approval: PoApprovalPrompt = {\n        id: crypto.randomUUID(),\n        toolCallId: request.toolCallId,\n        operation: request.operation,\n        requirement: request.requirement,\n        title,\n        summary,\n        ...(details === undefined ? {} : { details }),\n        ...(request.expiresAt === undefined ? {} : { expiresAt: request.expiresAt }),\n      };\n      try {\n        const answer = await target.request(\n          { kind: 'select', title, message: summary, options: APPROVAL_OPTIONS, approval },\n          signal,\n        );\n        if (signal.aborted) return 'cancelled';\n        return answer === 'approved' || answer === 'denied' ? answer : 'cancelled';\n      } catch {\n        // A closed client (the session or server ended) or a refused envelope: nobody approved, so nothing runs.\n        return 'cancelled';\n      } finally {\n        clearTimeout(timer);\n      }\n    },\n  };\n}\n"],"mappings":";;AASA,MAAM,eAAe;;AAGrB,MAAa,mBAAmB,OAAO,OAAO,CAC5C,OAAO,OAAO;CAAE,OAAO;CAAW,OAAO;AAAW,CAAC,GACrD,OAAO,OAAO;CAAE,OAAO;CAAQ,OAAO;AAAS,CAAC,CAClD,CAAC;;;;;;AAOD,SAAgB,0BAA0B,QAA+D;CACvG,OAAO,EACL,MAAM,QAAQ,SAAyD;EACrE,MAAM,SAAS,OAAO;EACtB,MAAM,YAAY,QAAQ,cAAc,KAAA,IAAY,KAAA,IAAY,QAAQ,YAAY,KAAK,IAAI;EAC7F,IAAI,WAAW,KAAA,KAAa,QAAQ,QAAQ,YAAY,QAAS,cAAc,KAAA,KAAa,aAAa,GACvG,OAAO;EACT,MAAM,SAAS,IAAI,gBAAgB;EACnC,IAAI;EACJ,MAAM,aAAmB;GACvB,MAAM,QAAQ,QAAQ,aAAa,KAAK,KAAK,IAAI;GACjD,QAAQ,QAAQ,IAAI,KAAA,IAAY,WAAW,MAAM,KAAK,IAAI,MAAM,YAAY,CAAC;GAC7E,IAAI,QAAQ,GAAG,OAAO,MAAM;EAC9B;EACA,IAAI,cAAc,KAAA,GAAW,KAAK;EAClC,MAAM,SAAS,QAAQ,WAAW,KAAA,IAAY,OAAO,SAAS,YAAY,IAAI,CAAC,QAAQ,QAAQ,OAAO,MAAM,CAAC;EAC7G,MAAM,EAAE,OAAO,SAAS,YAAY,QAAQ;EAC5C,MAAM,WAA6B;GACjC,IAAI,OAAO,WAAW;GACtB,YAAY,QAAQ;GACpB,WAAW,QAAQ;GACnB,aAAa,QAAQ;GACrB;GACA;GACA,GAAI,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ;GAC3C,GAAI,QAAQ,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,QAAQ,UAAU;EAC5E;EACA,IAAI;GACF,MAAM,SAAS,MAAM,OAAO,QAC1B;IAAE,MAAM;IAAU;IAAO,SAAS;IAAS,SAAS;IAAkB;GAAS,GAC/E,MACF;GACA,IAAI,OAAO,SAAS,OAAO;GAC3B,OAAO,WAAW,cAAc,WAAW,WAAW,SAAS;EACjE,QAAQ;GAEN,OAAO;EACT,UAAU;GACR,aAAa,KAAK;EACpB;CACF,EACF;AACF"}

package/dist/approvalCoordinator-CRbOm-PY.mjs

@@ -0,0 +1,62 @@
+//#region src/services/approvalCoordinator/index.ts
+/** setTimeout fires at once past this many milliseconds, so a far expiry waits in steps no longer than it. */
+const MAX_TIMER_MS = 2147483647;
+/** The options of every approval dialog. Clients match the labels; the values come back as the decision. */
+const APPROVAL_OPTIONS = Object.freeze([Object.freeze({
+	label: "Approve",
+	value: "approved"
+}), Object.freeze({
+	label: "Deny",
+	value: "denied"
+})]);
+/**
+* Asks the person through the session's dialog channel: one Approve/Deny `select` per call, carrying the bounded
+* approval card and never the call's arguments. Resolves `approved` only from an explicit Approve that arrived before
+* abort or expiry; everything else, including a closed client, is `cancelled` or `denied`, so nothing runs.
+*/
+function createApprovalCoordinator(client) {
+	return { async request(request) {
+		const target = client();
+		const remaining = request.expiresAt === void 0 ? void 0 : request.expiresAt - Date.now();
+		if (target === void 0 || request.signal?.aborted === true || remaining !== void 0 && remaining <= 0) return "cancelled";
+		const expiry = new AbortController();
+		let timer;
+		const wait = () => {
+			const left = (request.expiresAt ?? 0) - Date.now();
+			timer = left <= 0 ? void 0 : setTimeout(wait, Math.min(left, MAX_TIMER_MS));
+			if (left <= 0) expiry.abort();
+		};
+		if (remaining !== void 0) wait();
+		const signal = request.signal === void 0 ? expiry.signal : AbortSignal.any([request.signal, expiry.signal]);
+		const { title, summary, details } = request.description;
+		const approval = {
+			id: crypto.randomUUID(),
+			toolCallId: request.toolCallId,
+			operation: request.operation,
+			requirement: request.requirement,
+			title,
+			summary,
+			...details === void 0 ? {} : { details },
+			...request.expiresAt === void 0 ? {} : { expiresAt: request.expiresAt }
+		};
+		try {
+			const answer = await target.request({
+				kind: "select",
+				title,
+				message: summary,
+				options: APPROVAL_OPTIONS,
+				approval
+			}, signal);
+			if (signal.aborted) return "cancelled";
+			return answer === "approved" || answer === "denied" ? answer : "cancelled";
+		} catch {
+			return "cancelled";
+		} finally {
+			clearTimeout(timer);
+		}
+	} };
+}
+//#endregion
+export { createApprovalCoordinator as n, APPROVAL_OPTIONS as t };
+
+//# sourceMappingURL=approvalCoordinator-CRbOm-PY.mjs.map

package/dist/approvalCoordinator-CRbOm-PY.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvalCoordinator-CRbOm-PY.mjs","names":[],"sources":["../src/services/approvalCoordinator/index.ts"],"sourcesContent":["import type {\n  PoApprovalDecision,\n  PoApprovalPrompt,\n  PoApprovalRequest,\n  PoApprovalService,\n} from '@agimon-ai/po-core/approval';\nimport type { PoHeadlessClient } from '@agimon-ai/po-core/headless';\n\n/** setTimeout fires at once past this many milliseconds, so a far expiry waits in steps no longer than it. */\nconst MAX_TIMER_MS = 2_147_483_647;\n\n/** The options of every approval dialog. Clients match the labels; the values come back as the decision. */\nexport const APPROVAL_OPTIONS = Object.freeze([\n  Object.freeze({ label: 'Approve', value: 'approved' }),\n  Object.freeze({ label: 'Deny', value: 'denied' }),\n]);\n\n/**\n * Asks the person through the session's dialog channel: one Approve/Deny `select` per call, carrying the bounded\n * approval card and never the call's arguments. Resolves `approved` only from an explicit Approve that arrived before\n * abort or expiry; everything else, including a closed client, is `cancelled` or `denied`, so nothing runs.\n */\nexport function createApprovalCoordinator(client: () => PoHeadlessClient | undefined): PoApprovalService {\n  return {\n    async request(request: PoApprovalRequest): Promise<PoApprovalDecision> {\n      const target = client();\n      const remaining = request.expiresAt === undefined ? undefined : request.expiresAt - Date.now();\n      if (target === undefined || request.signal?.aborted === true || (remaining !== undefined && remaining <= 0))\n        return 'cancelled';\n      const expiry = new AbortController();\n      let timer: ReturnType<typeof setTimeout> | undefined;\n      const wait = (): void => {\n        const left = (request.expiresAt ?? 0) - Date.now();\n        timer = left <= 0 ? undefined : setTimeout(wait, Math.min(left, MAX_TIMER_MS));\n        if (left <= 0) expiry.abort();\n      };\n      if (remaining !== undefined) wait();\n      const signal = request.signal === undefined ? expiry.signal : AbortSignal.any([request.signal, expiry.signal]);\n      const { title, summary, details } = request.description;\n      const approval: PoApprovalPrompt = {\n        id: crypto.randomUUID(),\n        toolCallId: request.toolCallId,\n        operation: request.operation,\n        requirement: request.requirement,\n        title,\n        summary,\n        ...(details === undefined ? {} : { details }),\n        ...(request.expiresAt === undefined ? {} : { expiresAt: request.expiresAt }),\n      };\n      try {\n        const answer = await target.request(\n          { kind: 'select', title, message: summary, options: APPROVAL_OPTIONS, approval },\n          signal,\n        );\n        if (signal.aborted) return 'cancelled';\n        return answer === 'approved' || answer === 'denied' ? answer : 'cancelled';\n      } catch {\n        // A closed client (the session or server ended) or a refused envelope: nobody approved, so nothing runs.\n        return 'cancelled';\n      } finally {\n        clearTimeout(timer);\n      }\n    },\n  };\n}\n"],"mappings":";;AASA,MAAM,eAAe;;AAGrB,MAAa,mBAAmB,OAAO,OAAO,CAC5C,OAAO,OAAO;CAAE,OAAO;CAAW,OAAO;AAAW,CAAC,GACrD,OAAO,OAAO;CAAE,OAAO;CAAQ,OAAO;AAAS,CAAC,CAClD,CAAC;;;;;;AAOD,SAAgB,0BAA0B,QAA+D;CACvG,OAAO,EACL,MAAM,QAAQ,SAAyD;EACrE,MAAM,SAAS,OAAO;EACtB,MAAM,YAAY,QAAQ,cAAc,KAAA,IAAY,KAAA,IAAY,QAAQ,YAAY,KAAK,IAAI;EAC7F,IAAI,WAAW,KAAA,KAAa,QAAQ,QAAQ,YAAY,QAAS,cAAc,KAAA,KAAa,aAAa,GACvG,OAAO;EACT,MAAM,SAAS,IAAI,gBAAgB;EACnC,IAAI;EACJ,MAAM,aAAmB;GACvB,MAAM,QAAQ,QAAQ,aAAa,KAAK,KAAK,IAAI;GACjD,QAAQ,QAAQ,IAAI,KAAA,IAAY,WAAW,MAAM,KAAK,IAAI,MAAM,YAAY,CAAC;GAC7E,IAAI,QAAQ,GAAG,OAAO,MAAM;EAC9B;EACA,IAAI,cAAc,KAAA,GAAW,KAAK;EAClC,MAAM,SAAS,QAAQ,WAAW,KAAA,IAAY,OAAO,SAAS,YAAY,IAAI,CAAC,QAAQ,QAAQ,OAAO,MAAM,CAAC;EAC7G,MAAM,EAAE,OAAO,SAAS,YAAY,QAAQ;EAC5C,MAAM,WAA6B;GACjC,IAAI,OAAO,WAAW;GACtB,YAAY,QAAQ;GACpB,WAAW,QAAQ;GACnB,aAAa,QAAQ;GACrB;GACA;GACA,GAAI,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ;GAC3C,GAAI,QAAQ,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,QAAQ,UAAU;EAC5E;EACA,IAAI;GACF,MAAM,SAAS,MAAM,OAAO,QAC1B;IAAE,MAAM;IAAU;IAAO,SAAS;IAAS,SAAS;IAAkB;GAAS,GAC/E,MACF;GACA,IAAI,OAAO,SAAS,OAAO;GAC3B,OAAO,WAAW,cAAc,WAAW,WAAW,SAAS;EACjE,QAAQ;GAEN,OAAO;EACT,UAAU;GACR,aAAa,KAAK;EACpB;CACF,EACF;AACF"}