@cogenta/channels 0.1.0

package/dist/adapter.d.ts

@@ -0,0 +1,111 @@
+/**
+ * L6 — "Un message est décrit de façon abstraite — titre, sections, niveau
+ * de sévérité, actions — et chaque adaptateur le rend selon ses capacités.
+ * On n'écrit pas de Markdown Telegram dans le code métier." Three fixed
+ * levels (`## Formats de message`), each a distinct shape rather than one
+ * loose bag of optional fields, so a caller cannot accidentally send an
+ * "Alerte" with no `expectedAction` or a one-line "Notification" carrying a
+ * wall of text — the type itself enforces the lot's own formatting rules.
+ */
+export type ChannelSeverity = 'info' | 'warning' | 'critical';
+/** A one-click action on a message (e.g. "Approuver"/"Refuser"). Resolving
+ * what `id` means (a single-use approval token, later a lot task) is not
+ * this layer's job — this is just the shape a `ChannelAdapter` renders as a
+ * button (or, on a channel without `capabilities.buttons`, as a link). */
+export interface ChannelAction {
+    readonly id: string;
+    readonly label: string;
+}
+export interface ChannelMessageSection {
+    readonly heading?: string;
+    readonly body: string;
+}
+export interface ChannelKeyFigure {
+    readonly label: string;
+    readonly value: string;
+}
+/** "Titre, gravité, une phrase de contexte, l'action attendue, un lien vers l'admin." */
+export interface AlertChannelMessage {
+    readonly level: 'alert';
+    readonly title: string;
+    readonly severity: ChannelSeverity;
+    readonly context: string;
+    readonly expectedAction: string;
+    readonly adminUrl: string;
+    readonly actions?: readonly ChannelAction[];
+}
+/** "Structure fixe, chiffres clés en tête, détail ensuite, jamais plus d'un
+ * écran sans repli." `moreUrl` is that repli (fallback) — the point past
+ * which detail lives in the admin, not in the message itself. */
+export interface ReportChannelMessage {
+    readonly level: 'report';
+    readonly title: string;
+    readonly keyFigures: readonly ChannelKeyFigure[];
+    readonly sections: readonly ChannelMessageSection[];
+    readonly moreUrl?: string;
+}
+/** "Information sans action. Une ligne." No title, no sections, no actions —
+ * the type has nowhere to put them, which is the point. */
+export interface NotificationChannelMessage {
+    readonly level: 'notification';
+    readonly text: string;
+}
+export type ChannelMessage = AlertChannelMessage | ReportChannelMessage | NotificationChannelMessage;
+/** Opaque handle to a sent message, returned by `send` and usable by `update`. */
+export type MessageId = string;
+/** Where a message goes on a given channel — a platform-side chat/user/channel
+ * identifier. Opaque to everything above the adapter: core logic never
+ * inspects `id`, it only ever received it from `verifyIdentity`/linking. */
+export interface ChannelTarget {
+    readonly id: string;
+}
+/**
+ * A channel-side identity, always distinct from a Cogenta user account.
+ *
+ * `linkedUserId` is `null` until L6 task 2's linking flow verifies this
+ * channel identity belongs to a real Cogenta user — "Une identité de canal
+ * non liée à un compte est ignorée, sans réponse" (the security rule this
+ * type exists to make representable, not yet enforced here). Nothing in
+ * this package may treat a `null` `linkedUserId` as a real user's identity.
+ */
+export interface ChannelIdentity {
+    readonly channelName: string;
+    readonly channelUserId: string;
+    readonly linkedUserId: string | null;
+}
+/**
+ * A raw inbound command, always carrying the `ChannelIdentity` it came
+ * from — "Une commande entrante s'exécute avec les permissions de l'humain
+ * identifié, jamais avec celles de l'agent." A later task's router is what
+ * turns `identity.linkedUserId` into real permission checks; this shape
+ * exists so that seam cannot be bypassed by construction — there is no way
+ * to receive a command without also receiving who (if anyone) sent it.
+ */
+export interface InboundCommand {
+    readonly text: string;
+    readonly identity: ChannelIdentity;
+}
+export type InboundHandler = (command: InboundCommand) => Promise<void> | void;
+/**
+ * One implementation per platform (Telegram, Slack, Discord, email,
+ * webhook — L6 tasks 4/8/9/10/11). `update`/`onInbound` are optional
+ * because not every channel supports editing a sent message or receiving
+ * commands (`capabilities` says which); `send`/`verifyIdentity` are not
+ * optional — every channel can at least deliver a message and check a
+ * linking proof.
+ */
+export interface ChannelAdapter {
+    readonly name: string;
+    readonly capabilities: {
+        readonly richText: boolean;
+        readonly buttons: boolean;
+        readonly threads: boolean;
+        readonly attachments: boolean;
+        readonly inbound: boolean;
+    };
+    send(target: ChannelTarget, message: ChannelMessage): Promise<MessageId>;
+    update?(id: MessageId, message: ChannelMessage): Promise<void>;
+    onInbound?(handler: InboundHandler): void;
+    verifyIdentity(proof: unknown): Promise<ChannelIdentity>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAA;AAE7D;;;0EAG0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,yFAAyF;AACzF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,aAAa,EAAE,CAAA;CAC5C;AAED;;iEAEiE;AACjE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAA;IAChD,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAA;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED;2DAC2D;AAC3D,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,cAAc,GAAG,mBAAmB,GAAG,oBAAoB,GAAG,0BAA0B,CAAA;AAEpG,kFAAkF;AAClF,MAAM,MAAM,SAAS,GAAG,MAAM,CAAA;AAE9B;;4EAE4E;AAC5E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CACrC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;CACnC;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AAE9E;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;QAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;QACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;QACzB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;QAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAC1B,CAAA;IACD,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxE,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,SAAS,CAAC,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAAA;IACzC,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CACzD"}

package/dist/adapter.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=adapter.js.map

package/dist/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":""}

package/dist/approvals/commands.d.ts

@@ -0,0 +1,28 @@
+import type { ApprovalQueue, AuditLogLike } from '@cogenta/agents';
+import type { ChannelIdentity, NotificationChannelMessage } from '../adapter.js';
+import type { RegisteredCommand } from '../inbound/router.js';
+import type { ApprovalTokenStore } from './store.js';
+export interface ApprovalCommandsOptions {
+    readonly tokenStore: ApprovalTokenStore;
+    readonly approvalQueue: ApprovalQueue;
+    readonly auditLog: AuditLogLike;
+    readonly getUserRoles: (userId: string) => Promise<readonly string[]>;
+    /** How a command handler replies — the channel of origin, since `route()` itself never sends anything (see `inbound/router.ts`'s `RouteResult`). */
+    readonly reply: (identity: ChannelIdentity, message: NotificationChannelMessage) => Promise<void>;
+    readonly channelName: string;
+}
+/**
+ * Builds the `/approve <token>` and `/deny <token>` commands — the channel
+ * side of "Un agent en niveau `execute_with_approval` produit une entrée
+ * dans la file d'approbation [...] deux actions : approuver, refuser."
+ * Registered with `requiredRoles: []` on the router deliberately: the role a
+ * decider actually needs varies per approval request (whatever the
+ * underlying tool requires, e.g. `content.publish`), not per command name,
+ * so the router's static per-command check cannot express it — the real
+ * check happens here, per token, against `ApprovalTokenRecord.requiredRole`.
+ */
+export declare function createApprovalCommands(options: ApprovalCommandsOptions): {
+    readonly approve: RegisteredCommand;
+    readonly deny: RegisteredCommand;
+};
+//# sourceMappingURL=commands.d.ts.map

package/dist/approvals/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/approvals/commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAA;AAChF,OAAO,KAAK,EAAuB,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAEpD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAA;IACvC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAC/B,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAA;IACrE,oJAAoJ;IACpJ,QAAQ,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACjG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAMD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG;IACxE,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CACjC,CAoEA"}

package/dist/approvals/commands.js

@@ -0,0 +1,66 @@
+function notify(text) {
+    return { level: 'notification', text };
+}
+/**
+ * Builds the `/approve <token>` and `/deny <token>` commands — the channel
+ * side of "Un agent en niveau `execute_with_approval` produit une entrée
+ * dans la file d'approbation [...] deux actions : approuver, refuser."
+ * Registered with `requiredRoles: []` on the router deliberately: the role a
+ * decider actually needs varies per approval request (whatever the
+ * underlying tool requires, e.g. `content.publish`), not per command name,
+ * so the router's static per-command check cannot express it — the real
+ * check happens here, per token, against `ApprovalTokenRecord.requiredRole`.
+ */
+export function createApprovalCommands(options) {
+    async function handle(decision, input) {
+        const token = input.args[0];
+        if (token === undefined) {
+            await options.reply(input.identity, notify('Précise le jeton : /approve <jeton>.'));
+            return;
+        }
+        const outcome = options.tokenStore.peek(token);
+        if (outcome.kind === 'invalid') {
+            await options.reply(input.identity, notify('Ce jeton d’approbation est invalide.'));
+            return;
+        }
+        if (outcome.kind === 'expired') {
+            await options.reply(input.identity, notify('Ce jeton d’approbation a expiré.'));
+            return;
+        }
+        if (outcome.kind === 'already_decided') {
+            await options.reply(input.identity, notify(outcome.decision === 'approved'
+                ? 'Cette demande a déjà été approuvée.'
+                : 'Cette demande a déjà été refusée.'));
+            return;
+        }
+        if (outcome.requiredRole !== null) {
+            const heldRoles = await options.getUserRoles(input.userId);
+            if (!heldRoles.includes(outcome.requiredRole)) {
+                await options.reply(input.identity, notify(`Il te faut le rôle "${outcome.requiredRole}" pour décider de cette demande.`));
+                return;
+            }
+        }
+        options.tokenStore.markDecided(token, decision);
+        await options.approvalQueue.decide(outcome.requestId, decision, input.userId);
+        await options.auditLog.record({
+            actorId: input.userId,
+            actorRoles: outcome.requiredRole === null ? [] : [outcome.requiredRole],
+            action: 'channel.approval.decide',
+            diff: { channel: options.channelName, requestId: outcome.requestId, decision },
+        });
+        await options.reply(input.identity, notify(decision === 'approved' ? 'Approuvé.' : 'Refusé.'));
+    }
+    return {
+        approve: {
+            name: 'approve',
+            requiredRoles: [],
+            handler: (input) => handle('approved', input),
+        },
+        deny: {
+            name: 'deny',
+            requiredRoles: [],
+            handler: (input) => handle('rejected', input),
+        },
+    };
+}
+//# sourceMappingURL=commands.js.map

package/dist/approvals/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/approvals/commands.ts"],"names":[],"mappings":"AAeA,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CAAA;AACxC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IAIrE,KAAK,UAAU,MAAM,CACnB,QAAiC,EACjC,KAA0B;QAE1B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,sCAAsC,CAAC,CAAC,CAAA;YACnF,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAE9C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,sCAAsC,CAAC,CAAC,CAAA;YACnF,OAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,kCAAkC,CAAC,CAAC,CAAA;YAC/E,OAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACvC,MAAM,OAAO,CAAC,KAAK,CACjB,KAAK,CAAC,QAAQ,EACd,MAAM,CACJ,OAAO,CAAC,QAAQ,KAAK,UAAU;gBAC7B,CAAC,CAAC,qCAAqC;gBACvC,CAAC,CAAC,mCAAmC,CACxC,CACF,CAAA;YACD,OAAM;QACR,CAAC;QAED,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YAC1D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9C,MAAM,OAAO,CAAC,KAAK,CACjB,KAAK,CAAC,QAAQ,EACd,MAAM,CAAC,uBAAuB,OAAO,CAAC,YAAY,kCAAkC,CAAC,CACtF,CAAA;gBACD,OAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;QAC/C,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QAC7E,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5B,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,UAAU,EAAE,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;YACvE,MAAM,EAAE,yBAAyB;YACjC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE;SAC/E,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IAChG,CAAC;IAED,OAAO;QACL,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,aAAa,EAAE,EAAE;YACjB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC;SAC9C;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,MAAM;YACZ,aAAa,EAAE,EAAE;YACjB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC;SAC9C;KACF,CAAA;AACH,CAAC"}

package/dist/approvals/dispatch.d.ts

@@ -0,0 +1,22 @@
+import type { ApprovalRequest } from '@cogenta/agents';
+import type { ChannelAdapter, ChannelTarget, MessageId } from '../adapter.js';
+import type { ApprovalTokenStore } from './store.js';
+export interface DispatchApprovalOptions {
+    readonly adapter: ChannelAdapter;
+    readonly target: ChannelTarget;
+    readonly tokenStore: ApprovalTokenStore;
+    /** The role the underlying tool requires to approve/deny it — `null` (or omitted) means any linked user may decide. This is per-request because different tools need different permissions (`content.publish`, `deps.patch`, ...), which `ApprovalRequest` itself does not encode. */
+    readonly requiredRole?: string | null;
+    readonly buildAdminUrl: (requestId: string) => string;
+}
+/**
+ * "Un agent en niveau `execute_with_approval` produit une entrée dans la
+ * file d'approbation. Le canal reçoit un message [...]" — this is that
+ * send: issues two one-time tokens (approve/deny), renders the request as
+ * an `AlertChannelMessage`, and delivers it through the given adapter.
+ * Whoever wires an agent's approval flow to a channel calls this once per
+ * `ApprovalRequest`; the resulting tokens are what `createApprovalCommands`
+ * later redeems.
+ */
+export declare function dispatchApproval(request: ApprovalRequest, options: DispatchApprovalOptions): Promise<MessageId>;
+//# sourceMappingURL=dispatch.d.ts.map

package/dist/approvals/dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../src/approvals/dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAE7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAEpD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAA;IACvC,sRAAsR;IACtR,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAA;CACtD;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,SAAS,CAAC,CAYpB"}

package/dist/approvals/dispatch.js

@@ -0,0 +1,22 @@
+import { renderApprovalMessage } from './message.js';
+/**
+ * "Un agent en niveau `execute_with_approval` produit une entrée dans la
+ * file d'approbation. Le canal reçoit un message [...]" — this is that
+ * send: issues two one-time tokens (approve/deny), renders the request as
+ * an `AlertChannelMessage`, and delivers it through the given adapter.
+ * Whoever wires an agent's approval flow to a channel calls this once per
+ * `ApprovalRequest`; the resulting tokens are what `createApprovalCommands`
+ * later redeems.
+ */
+export async function dispatchApproval(request, options) {
+    const requiredRole = options.requiredRole ?? null;
+    const approve = options.tokenStore.issue(request.id, requiredRole);
+    const deny = options.tokenStore.issue(request.id, requiredRole);
+    const message = renderApprovalMessage(request, {
+        adminUrl: options.buildAdminUrl(request.id),
+        approveToken: approve.token,
+        denyToken: deny.token,
+    });
+    return options.adapter.send(options.target, message);
+}
+//# sourceMappingURL=dispatch.js.map

package/dist/approvals/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../src/approvals/dispatch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAYpD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAwB,EACxB,OAAgC;IAEhC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAA;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAA;IAE/D,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE;QAC7C,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,YAAY,EAAE,OAAO,CAAC,KAAK;QAC3B,SAAS,EAAE,IAAI,CAAC,KAAK;KACtB,CAAC,CAAA;IAEF,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AACtD,CAAC"}

package/dist/approvals/message.d.ts

@@ -0,0 +1,18 @@
+import type { ApprovalRequest } from '@cogenta/agents';
+import type { AlertChannelMessage } from '../adapter.js';
+export interface RenderApprovalMessageOptions {
+    readonly adminUrl: string;
+    readonly approveToken: string;
+    readonly denyToken: string;
+}
+/**
+ * "Le canal reçoit un message avec le diff résumé et deux actions :
+ * approuver, refuser." `input` is summarised rather than dumped — a
+ * `Report`-level wall of JSON is exactly what `## Formats de message`'s
+ * "jamais plus d'un écran sans repli" rule exists to prevent; the full
+ * input lives at `adminUrl`. Built through `buildAlert` (L6 task 6) rather
+ * than the literal, so this call site gets the same required-field
+ * validation every other alert producer gets, for free.
+ */
+export declare function renderApprovalMessage(request: ApprovalRequest, options: RenderApprovalMessageOptions): AlertChannelMessage;
+//# sourceMappingURL=message.d.ts.map

package/dist/approvals/message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.d.ts","sourceRoot":"","sources":["../../src/approvals/message.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAGxD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,4BAA4B,GACpC,mBAAmB,CAerB"}

package/dist/approvals/message.js

@@ -0,0 +1,40 @@
+import { buildAlert } from '../formats/alert.js';
+/**
+ * "Le canal reçoit un message avec le diff résumé et deux actions :
+ * approuver, refuser." `input` is summarised rather than dumped — a
+ * `Report`-level wall of JSON is exactly what `## Formats de message`'s
+ * "jamais plus d'un écran sans repli" rule exists to prevent; the full
+ * input lives at `adminUrl`. Built through `buildAlert` (L6 task 6) rather
+ * than the literal, so this call site gets the same required-field
+ * validation every other alert producer gets, for free.
+ */
+export function renderApprovalMessage(request, options) {
+    return buildAlert({
+        title: `Approbation requise : ${request.toolName}`,
+        severity: 'warning',
+        context: `L'agent "${request.agentName}" demande à exécuter "${request.toolName}" : ${summariseInput(request.input)}`,
+        expectedAction: 'Approuver ou refuser cette action avant qu’elle ne s’exécute.',
+        adminUrl: options.adminUrl,
+        // `action.id` becomes the literal command text a button press routes as
+        // (`providers/telegram/render.ts`'s `callback_data: action.id`) — so it
+        // must be a full `CommandRouter`-parseable string, not the bare token.
+        actions: [
+            { id: `approve ${options.approveToken}`, label: 'Approuver' },
+            { id: `deny ${options.denyToken}`, label: 'Refuser' },
+        ],
+    });
+}
+function summariseInput(input) {
+    const entries = Object.entries(input);
+    if (entries.length === 0)
+        return '(aucun paramètre)';
+    const summary = entries
+        .slice(0, 3)
+        .map(([key, value]) => `${key}=${truncate(String(value))}`)
+        .join(', ');
+    return entries.length > 3 ? `${summary}, …` : summary;
+}
+function truncate(value) {
+    return value.length > 40 ? `${value.slice(0, 40)}…` : value;
+}
+//# sourceMappingURL=message.js.map

package/dist/approvals/message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.js","sourceRoot":"","sources":["../../src/approvals/message.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAQhD;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAwB,EACxB,OAAqC;IAErC,OAAO,UAAU,CAAC;QAChB,KAAK,EAAE,yBAAyB,OAAO,CAAC,QAAQ,EAAE;QAClD,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,YAAY,OAAO,CAAC,SAAS,yBAAyB,OAAO,CAAC,QAAQ,OAAO,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACrH,cAAc,EAAE,+DAA+D;QAC/E,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,OAAO,EAAE;YACP,EAAE,EAAE,EAAE,WAAW,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE;YAC7D,EAAE,EAAE,EAAE,QAAQ,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;SACtD;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAwC;IAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,mBAAmB,CAAA;IACpD,MAAM,OAAO,GAAG,OAAO;SACpB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;SAC1D,IAAI,CAAC,IAAI,CAAC,CAAA;IACb,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAA;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAA;AAC7D,CAAC"}

package/dist/approvals/signed-link.d.ts

@@ -0,0 +1,19 @@
+/**
+ * "Sur un canal sans boutons (email, webhook), l'action est un lien signé à
+ * usage unique." Same construction as `StorageDriver`'s `signedUrl`
+ * (`packages/core/src/storage/local.ts`, `signLocalUrl`/`verifyLocalSignedUrl`)
+ * — HMAC-SHA256 over the payload plus an expiry, constant-time comparison on
+ * verify. No route exists yet to receive a click on this link (no adapter
+ * without `capabilities.buttons` is built yet — email/webhook are later lot
+ * tasks); this is the primitive a future adapter constructs a URL from and
+ * a future verification endpoint calls to check it, tested in isolation.
+ */
+export declare function signApprovalLink(signingKey: string, token: string, decision: 'approved' | 'rejected', expiresAtSeconds: number): string;
+export declare function verifyApprovalLinkSignature(signingKey: string, token: string, decision: 'approved' | 'rejected', expiresAtSeconds: number, signature: string, nowSeconds?: number): boolean;
+/**
+ * Builds the full signed URL a buttonless channel would send — `baseUrl`
+ * points at whatever future route verifies it (not built here; no adapter
+ * consumes this yet).
+ */
+export declare function buildSignedApprovalLink(baseUrl: string, signingKey: string, token: string, decision: 'approved' | 'rejected', expiresInSeconds: number, nowSeconds?: number): string;
+//# sourceMappingURL=signed-link.d.ts.map

package/dist/approvals/signed-link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-link.d.ts","sourceRoot":"","sources":["../../src/approvals/signed-link.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,UAAU,GAAG,UAAU,EACjC,gBAAgB,EAAE,MAAM,GACvB,MAAM,CAIR;AAED,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,UAAU,GAAG,UAAU,EACjC,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,EACjB,UAAU,GAAE,MAAsC,GACjD,OAAO,CAUT;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,UAAU,GAAG,UAAU,EACjC,gBAAgB,EAAE,MAAM,EACxB,UAAU,GAAE,MAAsC,GACjD,MAAM,CAUR"}

package/dist/approvals/signed-link.js

@@ -0,0 +1,42 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+/**
+ * "Sur un canal sans boutons (email, webhook), l'action est un lien signé à
+ * usage unique." Same construction as `StorageDriver`'s `signedUrl`
+ * (`packages/core/src/storage/local.ts`, `signLocalUrl`/`verifyLocalSignedUrl`)
+ * — HMAC-SHA256 over the payload plus an expiry, constant-time comparison on
+ * verify. No route exists yet to receive a click on this link (no adapter
+ * without `capabilities.buttons` is built yet — email/webhook are later lot
+ * tasks); this is the primitive a future adapter constructs a URL from and
+ * a future verification endpoint calls to check it, tested in isolation.
+ */
+export function signApprovalLink(signingKey, token, decision, expiresAtSeconds) {
+    return createHmac('sha256', signingKey)
+        .update(`${token}:${decision}:${expiresAtSeconds}`)
+        .digest('hex');
+}
+export function verifyApprovalLinkSignature(signingKey, token, decision, expiresAtSeconds, signature, nowSeconds = Math.floor(Date.now() / 1000)) {
+    if (!Number.isFinite(expiresAtSeconds) || expiresAtSeconds <= nowSeconds)
+        return false;
+    const expected = Buffer.from(signApprovalLink(signingKey, token, decision, expiresAtSeconds), 'utf8');
+    const received = Buffer.from(signature, 'utf8');
+    if (expected.length !== received.length)
+        return false;
+    return timingSafeEqual(expected, received);
+}
+/**
+ * Builds the full signed URL a buttonless channel would send — `baseUrl`
+ * points at whatever future route verifies it (not built here; no adapter
+ * consumes this yet).
+ */
+export function buildSignedApprovalLink(baseUrl, signingKey, token, decision, expiresInSeconds, nowSeconds = Math.floor(Date.now() / 1000)) {
+    const expiresAtSeconds = nowSeconds + expiresInSeconds;
+    const signature = signApprovalLink(signingKey, token, decision, expiresAtSeconds);
+    const params = new URLSearchParams({
+        token,
+        decision,
+        expires: String(expiresAtSeconds),
+        signature,
+    });
+    return `${baseUrl}?${params.toString()}`;
+}
+//# sourceMappingURL=signed-link.js.map

package/dist/approvals/signed-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-link.js","sourceRoot":"","sources":["../../src/approvals/signed-link.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAEzD;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,KAAa,EACb,QAAiC,EACjC,gBAAwB;IAExB,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC;SACpC,MAAM,CAAC,GAAG,KAAK,IAAI,QAAQ,IAAI,gBAAgB,EAAE,CAAC;SAClD,MAAM,CAAC,KAAK,CAAC,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,UAAkB,EAClB,KAAa,EACb,QAAiC,EACjC,gBAAwB,EACxB,SAAiB,EACjB,UAAU,GAAW,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAElD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,IAAI,UAAU;QAAE,OAAO,KAAK,CAAA;IAEtF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAC1B,gBAAgB,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC,EAC/D,MAAM,CACP,CAAA;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACrD,OAAO,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,UAAkB,EAClB,KAAa,EACb,QAAiC,EACjC,gBAAwB,EACxB,UAAU,GAAW,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAElD,MAAM,gBAAgB,GAAG,UAAU,GAAG,gBAAgB,CAAA;IACtD,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAA;IACjF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,KAAK;QACL,QAAQ;QACR,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC;QACjC,SAAS;KACV,CAAC,CAAA;IACF,OAAO,GAAG,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;AAC1C,CAAC"}

package/dist/approvals/store.d.ts

@@ -0,0 +1,41 @@
+/**
+ * What redeeming a token found, so a channel adapter's reply is never a raw
+ * error — "Une entrée déjà traitée rend le bouton inopérant, avec message
+ * clair — pas d'erreur brute."
+ */
+export type ApprovalTokenOutcome = {
+    readonly kind: 'invalid';
+} | {
+    readonly kind: 'expired';
+} | {
+    readonly kind: 'already_decided';
+    readonly decision: 'approved' | 'rejected';
+} | {
+    readonly kind: 'ready';
+    readonly requestId: string;
+    readonly requiredRole: string | null;
+};
+export interface GeneratedApprovalToken {
+    readonly token: string;
+    readonly expiresAt: string;
+}
+export interface ApprovalTokenStore {
+    /** Issued when an `ApprovalRequest` is dispatched to a channel. */
+    issue(requestId: string, requiredRole?: string | null): GeneratedApprovalToken;
+    /** Read-only: does not mark the token used. Safe to call before checking the deciding user's role. */
+    peek(token: string): ApprovalTokenOutcome;
+    /** Marks a `ready` token as decided. Callers must have already confirmed `peek` returned `ready` and the deciding user is authorised — this function does not re-check either. */
+    markDecided(token: string, decision: 'approved' | 'rejected'): void;
+}
+export interface ApprovalTokenStoreOptions {
+    readonly now?: () => number;
+}
+/**
+ * In-memory, one store per running server — the same durability posture as
+ * `createMemoryApprovalQueue` (`@cogenta/agents`) it sits on top of: a
+ * request that outlives the process is already meaningless (the agent run
+ * it belongs to is gone too), so there is nothing a durable token store
+ * would add that the queue itself doesn't already need first.
+ */
+export declare function createApprovalTokenStore(options?: ApprovalTokenStoreOptions): ApprovalTokenStore;
+//# sourceMappingURL=store.d.ts.map

package/dist/approvals/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/approvals/store.ts"],"names":[],"mappings":"AAUA;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,UAAU,CAAA;CAAE,GAChF;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAA;AAEhG,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,mEAAmE;IACnE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,sBAAsB,CAAA;IAC9E,sGAAsG;IACtG,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB,CAAA;IACzC,kLAAkL;IAClL,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAAA;CACpE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,yBAA8B,GACtC,kBAAkB,CA6BpB"}

package/dist/approvals/store.js

@@ -0,0 +1,41 @@
+import { APPROVAL_TOKEN_TTL_MS, generateApprovalToken, hashApprovalToken } from './token.js';
+/**
+ * In-memory, one store per running server — the same durability posture as
+ * `createMemoryApprovalQueue` (`@cogenta/agents`) it sits on top of: a
+ * request that outlives the process is already meaningless (the agent run
+ * it belongs to is gone too), so there is nothing a durable token store
+ * would add that the queue itself doesn't already need first.
+ */
+export function createApprovalTokenStore(options = {}) {
+    const now = options.now ?? Date.now;
+    const tokens = new Map();
+    return {
+        issue(requestId, requiredRole = null) {
+            const token = generateApprovalToken();
+            const expiresAt = now() + APPROVAL_TOKEN_TTL_MS;
+            tokens.set(hashApprovalToken(token), { requestId, requiredRole, expiresAt, decision: null });
+            return { token, expiresAt: new Date(expiresAt).toISOString() };
+        },
+        peek(token) {
+            const record = tokens.get(hashApprovalToken(token));
+            if (record === undefined)
+                return { kind: 'invalid' };
+            if (record.decision !== null)
+                return { kind: 'already_decided', decision: record.decision };
+            if (record.expiresAt <= now())
+                return { kind: 'expired' };
+            return { kind: 'ready', requestId: record.requestId, requiredRole: record.requiredRole };
+        },
+        markDecided(token, decision) {
+            const record = tokens.get(hashApprovalToken(token));
+            if (record === undefined)
+                return;
+            // First write wins: a caller is expected to have already checked
+            // `peek()` returned `ready`, but this is the actual enforcement point
+            // — a duplicate/racing call can never flip an already-recorded decision.
+            if (record.decision === null)
+                record.decision = decision;
+        },
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/approvals/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/approvals/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAuC5F;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAO,GAA8B,EAAE;IAEvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAA;IAErD,OAAO;QACL,KAAK,CAAC,SAAS,EAAE,YAAY,GAAG,IAAI;YAClC,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAA;YACrC,MAAM,SAAS,GAAG,GAAG,EAAE,GAAG,qBAAqB,CAAA;YAC/C,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;YAC5F,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAA;QAChE,CAAC;QAED,IAAI,CAAC,KAAK;YACR,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAA;YACnD,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;YACpD,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;YAC3F,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG,EAAE;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;YACzD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAA;QAC1F,CAAC;QAED,WAAW,CAAC,KAAK,EAAE,QAAQ;YACzB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAA;YACnD,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAM;YAChC,iEAAiE;YACjE,sEAAsE;YACtE,yEAAyE;YACzE,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;gBAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAA;QAC1D,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/approvals/token.d.ts

@@ -0,0 +1,7 @@
+/** 20 minutes: long enough that a human notified on a phone has time to read a diff summary and decide, short enough that a stale approval request cannot be actioned days later against a world that has since moved on. */
+export declare const APPROVAL_TOKEN_TTL_MS: number;
+export declare function generateApprovalToken(): string;
+/** Stored hashed, exactly like the linking code and a session token — a leaked table hands out nothing usable. */
+export declare function hashApprovalToken(token: string): string;
+export declare function normalizeApprovalToken(token: string): string;
+//# sourceMappingURL=token.d.ts.map

package/dist/approvals/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/approvals/token.ts"],"names":[],"mappings":"AAwBA,6NAA6N;AAC7N,eAAO,MAAM,qBAAqB,QAAiB,CAAA;AAEnD,wBAAgB,qBAAqB,IAAI,MAAM,CAQ9C;AAED,kHAAkH;AAClH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5D"}

package/dist/approvals/token.js

@@ -0,0 +1,40 @@
+import { createHash, randomBytes } from 'node:crypto';
+/**
+ * Same alphabet as the linking code (`linking/codes.ts`) — Crockford-style,
+ * ambiguous characters removed, 32 symbols divides 256 evenly so a
+ * byte-to-index mapping via modulo carries no bias. Kept as its own copy
+ * rather than imported: this is only the second real usage of this exact
+ * alphabet in this package (the linking code is the first), one short of
+ * this codebase's "not before three usages" threshold for extracting a
+ * shared helper — and the two tokens have deliberately different lengths
+ * and TTLs, so a shared constant would need parameterising anyway.
+ */
+const TOKEN_ALPHABET = 'ABCDEFGHJKMNPQRSTUVWXYZ23456789';
+/**
+ * 12 symbols x 5 bits = 60 bits of entropy — longer than the 8-symbol (40
+ * bit) linking code, because an approval token authorises a real,
+ * consequential action (publishing content, patching a dependency, ...)
+ * rather than just proving "I received this code", and it lives for longer
+ * (`APPROVAL_TOKEN_TTL_MS`) than the linking code's short window, so it
+ * needs a wider brute-force margin.
+ */
+const TOKEN_LENGTH = 12;
+/** 20 minutes: long enough that a human notified on a phone has time to read a diff summary and decide, short enough that a stale approval request cannot be actioned days later against a world that has since moved on. */
+export const APPROVAL_TOKEN_TTL_MS = 20 * 60 * 1000;
+export function generateApprovalToken() {
+    const bytes = randomBytes(TOKEN_LENGTH);
+    let token = '';
+    for (let i = 0; i < TOKEN_LENGTH; i++) {
+        const byte = bytes[i] ?? 0;
+        token += TOKEN_ALPHABET[byte % TOKEN_ALPHABET.length];
+    }
+    return token;
+}
+/** Stored hashed, exactly like the linking code and a session token — a leaked table hands out nothing usable. */
+export function hashApprovalToken(token) {
+    return createHash('sha256').update(normalizeApprovalToken(token)).digest('base64url');
+}
+export function normalizeApprovalToken(token) {
+    return token.trim().toUpperCase();
+}
+//# sourceMappingURL=token.js.map

package/dist/approvals/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/approvals/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAErD;;;;;;;;;GASG;AACH,MAAM,cAAc,GAAG,iCAAiC,CAAA;AAExD;;;;;;;GAOG;AACH,MAAM,YAAY,GAAG,EAAE,CAAA;AAEvB,6NAA6N;AAC7N,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEnD,MAAM,UAAU,qBAAqB;IACnC,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,CAAA;IACvC,IAAI,KAAK,GAAG,EAAE,CAAA;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC1B,KAAK,IAAI,cAAc,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AACvF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AACnC,CAAC"}

package/dist/formats/alert.d.ts

@@ -0,0 +1,18 @@
+import type { AlertChannelMessage, ChannelAction, ChannelSeverity } from '../adapter.js';
+export interface BuildAlertInput {
+    readonly title: string;
+    readonly severity: ChannelSeverity;
+    readonly context: string;
+    readonly expectedAction: string;
+    readonly adminUrl: string;
+    readonly actions?: readonly ChannelAction[];
+}
+/**
+ * "Alerte — quelque chose demande une action. Titre, gravité, une phrase de
+ * contexte, l'action attendue, un lien vers l'admin." The one required
+ * constructor for every alert this package (or an agent) dispatches — never
+ * hand-assemble the discriminated union literal, so this validation cannot
+ * be skipped by a new call site.
+ */
+export declare function buildAlert(input: BuildAlertInput): AlertChannelMessage;
+//# sourceMappingURL=alert.d.ts.map

package/dist/formats/alert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alert.d.ts","sourceRoot":"","sources":["../../src/formats/alert.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAExF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,aAAa,EAAE,CAAA;CAC5C;AA2BD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,mBAAmB,CAetE"}