@connexum/ai-governance 1.0.0-beta.11

package/dist/esm/governance/approval-notifications.test.js

@@ -0,0 +1,192 @@
+/**
+ * RED-GREEN tests for F-NEW-PRODUCT-APPROVAL-CHANNEL-EMAIL-SMS (W1.10).
+ *
+ * Customer-path probe:
+ *   - Approval ticket needs a reviewer's attention
+ *   - Reviewer A wants email + dashboard; Reviewer B wants SMS; Reviewer C wants
+ *     all three
+ *   - Dispatcher fans out to each requested channel and reports delivery
+ *     outcomes per recipient+channel
+ *   - Recipients missing email / phone fail gracefully (no throw)
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-APPROVAL-CHANNEL-EMAIL-SMS
+ */
+import { describe, it } from 'node:test';
+import * as assert from 'node:assert/strict';
+import { ApprovalChannelDispatcher, } from './approval-notifications.js';
+function ctx() {
+    return {
+        ticketId: 'tic-001',
+        orgId: 'org-x',
+        agentId: 'agent-1',
+        toolName: 'Bash',
+        riskLevel: 'high',
+        summary: 'Bash: rm -rf /tmp/scratch',
+        approveUrl: 'https://my-cc.io/approve/tic-001?sig=abc',
+        denyUrl: 'https://my-cc.io/deny/tic-001?sig=abc',
+        slaDeadline: '2026-05-12T15:00:00.000Z',
+    };
+}
+function recordingEmail() {
+    const sent = [];
+    return {
+        sender: {
+            async send(p) {
+                sent.push(p);
+                return { ok: true, messageId: `email-${sent.length}` };
+            },
+        },
+        sent,
+    };
+}
+function recordingSms() {
+    const sent = [];
+    return {
+        sender: {
+            async send(p) {
+                sent.push(p);
+                return { ok: true, messageId: `sms-${sent.length}` };
+            },
+        },
+        sent,
+    };
+}
+describe('F-NEW-PRODUCT-APPROVAL-CHANNEL-EMAIL-SMS (W1.10)', () => {
+    it('email channel sends to the email transport and reports delivery', async () => {
+        const e = recordingEmail();
+        const dispatcher = new ApprovalChannelDispatcher({ emailSender: e.sender });
+        const outcomes = await dispatcher.dispatch(ctx(), [
+            {
+                reviewerId: 'alice',
+                name: 'Alice',
+                email: 'alice@example.com',
+                channels: ['email'],
+            },
+        ]);
+        assert.equal(outcomes.length, 1);
+        assert.equal(outcomes[0].channel, 'email');
+        assert.equal(outcomes[0].delivered, true);
+        assert.equal(outcomes[0].providerMessageId, 'email-1');
+        assert.equal(e.sent.length, 1);
+        assert.equal(e.sent[0].to, 'alice@example.com');
+        assert.match(e.sent[0].subject, /Approval needed/);
+        assert.match(e.sent[0].html, /Alice/);
+        assert.match(e.sent[0].html, /Bash/);
+    });
+    it('SMS channel sends to the SMS transport and reports delivery', async () => {
+        const s = recordingSms();
+        const dispatcher = new ApprovalChannelDispatcher({ smsSender: s.sender });
+        const outcomes = await dispatcher.dispatch(ctx(), [
+            {
+                reviewerId: 'bob',
+                name: 'Bob',
+                phoneE164: '+15551234567',
+                channels: ['sms'],
+            },
+        ]);
+        assert.equal(outcomes.length, 1);
+        assert.equal(outcomes[0].channel, 'sms');
+        assert.equal(outcomes[0].delivered, true);
+        assert.equal(s.sent.length, 1);
+        assert.equal(s.sent[0].to, '+15551234567');
+        assert.match(s.sent[0].body, /my-cc/);
+        assert.match(s.sent[0].body, /Bash/);
+        assert.match(s.sent[0].body, /Approve:/);
+    });
+    it('dashboard channel calls the dashboard sink and reports delivery', async () => {
+        const dashboardCalls = [];
+        const dispatcher = new ApprovalChannelDispatcher({
+            dashboardSink: (_c, r) => dashboardCalls.push(r),
+        });
+        const outcomes = await dispatcher.dispatch(ctx(), [
+            { reviewerId: 'carol', name: 'Carol', channels: ['dashboard'] },
+        ]);
+        assert.equal(outcomes[0].delivered, true);
+        assert.equal(outcomes[0].channel, 'dashboard');
+        assert.equal(dashboardCalls.length, 1);
+        assert.equal(dashboardCalls[0].reviewerId, 'carol');
+    });
+    it('fan-out: one reviewer with all 3 channels emits 3 outcomes', async () => {
+        const e = recordingEmail();
+        const s = recordingSms();
+        const dashboardCalls = [];
+        const dispatcher = new ApprovalChannelDispatcher({
+            emailSender: e.sender,
+            smsSender: s.sender,
+            dashboardSink: (_c, r) => dashboardCalls.push(r),
+        });
+        const outcomes = await dispatcher.dispatch(ctx(), [
+            {
+                reviewerId: 'dave',
+                name: 'Dave',
+                email: 'dave@example.com',
+                phoneE164: '+15559999999',
+                channels: ['dashboard', 'email', 'sms'],
+            },
+        ]);
+        assert.equal(outcomes.length, 3);
+        assert.ok(outcomes.every((o) => o.delivered));
+        assert.equal(e.sent.length, 1);
+        assert.equal(s.sent.length, 1);
+        assert.equal(dashboardCalls.length, 1);
+    });
+    it('fail-gracefully: email channel with missing email reports delivered=false', async () => {
+        const dispatcher = new ApprovalChannelDispatcher({ emailSender: recordingEmail().sender });
+        const outcomes = await dispatcher.dispatch(ctx(), [
+            { reviewerId: 'eve', name: 'Eve', channels: ['email'] /* no email */ },
+        ]);
+        assert.equal(outcomes[0].delivered, false);
+        assert.match(outcomes[0].error ?? '', /no email/);
+    });
+    it('fail-gracefully: SMS channel with missing phone reports delivered=false', async () => {
+        const dispatcher = new ApprovalChannelDispatcher({ smsSender: recordingSms().sender });
+        const outcomes = await dispatcher.dispatch(ctx(), [
+            { reviewerId: 'frank', name: 'Frank', channels: ['sms'] /* no phone */ },
+        ]);
+        assert.equal(outcomes[0].delivered, false);
+        assert.match(outcomes[0].error ?? '', /no phone number/);
+    });
+    it('default channel is dashboard when channels not specified', async () => {
+        const dashboardCalls = [];
+        const dispatcher = new ApprovalChannelDispatcher({
+            dashboardSink: (_c, r) => dashboardCalls.push(r),
+        });
+        const outcomes = await dispatcher.dispatch(ctx(), [
+            { reviewerId: 'gina', name: 'Gina' /* no channels */ },
+        ]);
+        assert.equal(outcomes.length, 1);
+        assert.equal(outcomes[0].channel, 'dashboard');
+        assert.equal(dashboardCalls.length, 1);
+    });
+    it('NOOP senders return delivered=false with structured error (no throw)', async () => {
+        const dispatcher = new ApprovalChannelDispatcher();
+        const outcomes = await dispatcher.dispatch(ctx(), [
+            { reviewerId: 'h', name: 'H', email: 'h@example.com', channels: ['email'] },
+            { reviewerId: 'i', name: 'I', phoneE164: '+15550000000', channels: ['sms'] },
+        ]);
+        assert.equal(outcomes.length, 2);
+        assert.equal(outcomes[0].delivered, false);
+        assert.match(outcomes[0].error ?? '', /no email sender/);
+        assert.equal(outcomes[1].delivered, false);
+        assert.match(outcomes[1].error ?? '', /no SMS sender/);
+    });
+    it('email body HTML escapes hostile names + tool inputs', async () => {
+        const e = recordingEmail();
+        const dispatcher = new ApprovalChannelDispatcher({ emailSender: e.sender });
+        const hostileCtx = ctx();
+        hostileCtx.agentId = '<script>alert(1)</script>';
+        hostileCtx.summary = 'rm -rf "<sneaky>"';
+        await dispatcher.dispatch(hostileCtx, [
+            {
+                reviewerId: 'j',
+                name: '<img onerror=1>',
+                email: 'j@example.com',
+                channels: ['email'],
+            },
+        ]);
+        assert.ok(!e.sent[0].html.includes('<script>'));
+        assert.ok(!e.sent[0].html.includes('<img onerror'));
+        assert.ok(e.sent[0].html.includes('&lt;script&gt;'));
+    });
+});
+//# sourceMappingURL=approval-notifications.test.js.map

package/dist/esm/governance/approval-notifications.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-notifications.test.js","sourceRoot":"","sources":["../../../src/governance/approval-notifications.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAE7C,OAAO,EACL,yBAAyB,GAK1B,MAAM,0BAA0B,CAAC;AAElC,SAAS,GAAG;IACV,OAAO;QACL,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,MAAM;QACjB,OAAO,EAAE,2BAA2B;QACpC,UAAU,EAAE,0CAA0C;QACtD,OAAO,EAAE,uCAAuC;QAChD,WAAW,EAAE,0BAA0B;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,OAAO;QACL,MAAM,EAAE;YACN,KAAK,CAAC,IAAI,CAAC,CAAC;gBACV,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACzD,CAAC;SACF;QACD,IAAI;KACL,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,OAAO;QACL,MAAM,EAAE;YACN,KAAK,CAAC,IAAI,CAAC,CAAC;gBACV,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACvD,CAAC;SACF;QACD,IAAI;KACL,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE;YAChD;gBACE,UAAU,EAAE,OAAO;gBACnB,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,mBAAmB;gBAC1B,QAAQ,EAAE,CAAC,OAAO,CAAC;aACpB;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAE1E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE;YAChD;gBACE,UAAU,EAAE,KAAK;gBACjB,IAAI,EAAE,KAAK;gBACX,SAAS,EAAE,cAAc;gBACzB,QAAQ,EAAE,CAAC,KAAK,CAAC;aAClB;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,cAAc,GAAoC,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC;YAC/C,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;SACjD,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE;YAChD,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE;SAChE,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC;QACzB,MAAM,cAAc,GAAU,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC;YAC/C,WAAW,EAAE,CAAC,CAAC,MAAM;YACrB,SAAS,EAAE,CAAC,CAAC,MAAM;YACnB,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;SACjD,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE;YAChD;gBACE,UAAU,EAAE,MAAM;gBAClB,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,kBAAkB;gBACzB,SAAS,EAAE,cAAc;gBACzB,QAAQ,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC;aACxC;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAE3F,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE;YAChD,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE;SACvE,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAEvF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE;YAChD,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE;SACzE,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,cAAc,GAAU,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC;YAC/C,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;SACjD,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE;YAChD,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,iBAAiB,EAAE;SACvD,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,UAAU,GAAG,IAAI,yBAAyB,EAAE,CAAC;QAEnD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE;YAChD,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE;YAC3E,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE;SAC7E,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,eAAe,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAE5E,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC;QACzB,UAAU,CAAC,OAAO,GAAG,2BAA2B,CAAC;QACjD,UAAU,CAAC,OAAO,GAAG,mBAAmB,CAAC;QAEzC,MAAM,UAAU,CAAC,QAAQ,CAAC,UAAU,EAAE;YACpC;gBACE,UAAU,EAAE,GAAG;gBACf,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,eAAe;gBACtB,QAAQ,EAAE,CAAC,OAAO,CAAC;aACpB;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/esm/governance/approval-queue-store.js

@@ -0,0 +1,112 @@
+/**
+ * ApprovalQueueStore -- Storage abstraction for the ApprovalGateEnforcer.
+ *
+ * Follows the same interface + InMemory pattern used by HealthMetricsStore
+ * (src/observability/health-metrics-store.ts) so future drop-ins
+ * (Redis, Prisma) can be swapped without changing the enforcer.
+ *
+ * Relationship to PR #24 (ApprovalQueue):
+ *   PR #24 ships ApprovalQueue, which is a file-backed persistent queue
+ *   coupled to the AutonomySpectrumEnforcer workflow (poll-based, HMAC
+ *   token verification). That class is reused as-is for the autonomy-
+ *   spectrum path.
+ *
+ *   This module is a SEPARATE, lighter-weight store designed for the
+ *   ApprovalGateEnforcer's synchronous-blocking workflow. It holds
+ *   PendingApproval records in memory and resolves them via Promise
+ *   callbacks. No HMAC, no file I/O required here -- the enforcer layer
+ *   owns replay-protection and audit integration.
+ *
+ * @connexum/ai-governance P3-T2
+ */
+import * as crypto from 'crypto';
+// ---------------------------------------------------------------------------
+// InMemoryApprovalQueueStore -- default implementation
+// ---------------------------------------------------------------------------
+/**
+ * Default in-memory implementation of ApprovalQueueStore.
+ *
+ * All data is lost on process restart. Suitable for testing and single-
+ * process deployments. Production deployments that span multiple processes
+ * or require crash-recovery should use a Prisma or Redis-backed store.
+ *
+ * PT-APPROVAL-3: The `_decided` set tracks all approvalIds that have been
+ * resolved or timed out. `resolve()` and `timeout()` silently return false
+ * if the ID is already in this set, preventing duplicate decisions.
+ */
+export class InMemoryApprovalQueueStore {
+    records = new Map();
+    _decided = new Set();
+    insert(record) {
+        const approvalId = `apg_${Date.now()}_${crypto.randomBytes(4).toString('hex')}`;
+        const entry = {
+            ...record,
+            approvalId,
+            status: 'pending',
+        };
+        this.records.set(approvalId, entry);
+        return approvalId;
+    }
+    get(approvalId) {
+        return this.records.get(approvalId) ?? null;
+    }
+    resolve(approvalId, decision, approverId, reason) {
+        // PT-APPROVAL-3: replay protection -- ignore if already decided.
+        if (this._decided.has(approvalId))
+            return false;
+        const record = this.records.get(approvalId);
+        if (!record || record.status !== 'pending')
+            return false;
+        record.status = decision;
+        record.approverId = approverId;
+        record.reason = reason;
+        record.decidedAt = new Date().toISOString();
+        this._decided.add(approvalId);
+        return true;
+    }
+    timeout(approvalId) {
+        if (this._decided.has(approvalId))
+            return false;
+        const record = this.records.get(approvalId);
+        if (!record || record.status !== 'pending')
+            return false;
+        record.status = 'timed-out';
+        record.decidedAt = new Date().toISOString();
+        record.reason = 'Timed out waiting for human approval. Default action: deny.';
+        this._decided.add(approvalId);
+        return true;
+    }
+    getPending(filter) {
+        const results = [];
+        for (const record of this.records.values()) {
+            if (record.status !== 'pending')
+                continue;
+            if (filter?.actionClass && record.actionClass !== filter.actionClass)
+                continue;
+            if (filter?.initiator && record.initiator !== filter.initiator)
+                continue;
+            results.push({ ...record });
+        }
+        return results.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
+    }
+    getAll() {
+        return Array.from(this.records.values())
+            .map(r => ({ ...r }))
+            .sort((a, b) => a.createdAt.localeCompare(b.createdAt));
+    }
+    prune(maxAgeMs = 86_400_000) {
+        const cutoff = Date.now() - maxAgeMs;
+        let removed = 0;
+        for (const [id, record] of this.records) {
+            if (record.status !== 'pending' && record.decidedAt) {
+                if (new Date(record.decidedAt).getTime() < cutoff) {
+                    this.records.delete(id);
+                    this._decided.delete(id);
+                    removed++;
+                }
+            }
+        }
+        return removed;
+    }
+}
+//# sourceMappingURL=approval-queue-store.js.map

package/dist/esm/governance/approval-queue-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-queue-store.js","sourceRoot":"","sources":["../../../src/governance/approval-queue-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAwFjC,8EAA8E;AAC9E,uDAAuD;AACvD,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,OAAO,0BAA0B;IACpB,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC7C,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9C,MAAM,CAAC,MAAsD;QAC3D,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,KAAK,GAAoB;YAC7B,GAAG,MAAM;YACT,UAAU;YACV,MAAM,EAAE,SAAS;SAClB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACpC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,GAAG,CAAC,UAAkB;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED,OAAO,CACL,UAAkB,EAClB,QAAiC,EACjC,UAAkB,EAClB,MAAe;QAEf,iEAAiE;QACjE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAEhD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAEzD,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC;QACzB,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;QAC/B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,UAAkB;QACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAEhD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAEzD,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;QAC5B,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,CAAC,MAAM,GAAG,6DAA6D,CAAC;QAE9E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,MAAqD;QAC9D,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YAC1C,IAAI,MAAM,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;gBAAE,SAAS;YAC/E,IAAI,MAAM,EAAE,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;gBAAE,SAAS;YACzE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;aACrC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;aACpB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,WAAmB,UAAU;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QACrC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACpD,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;oBAClD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACzB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/esm/governance/approval-queue.js

@@ -0,0 +1,291 @@
+/**
+ * ApprovalQueue -- Manages APPROVAL_REQUIRED workflow for tool access.
+ *
+ * When a tool call requires human approval, it's queued here. Supports:
+ *   - Timeout with configurable default action (deny)
+ *   - Escalation to a designated escalation agent
+ *   - Delegation (approved by another authorized agent)
+ *   - Persistent queue (survives process restart)
+ *
+ * Required by:
+ *   - SOC 2 CC6.1: Logical and physical access
+ *   - HIPAA 164.312(a)(1): Access control
+ *   - ISO 27001 A.9.2.3: Management of privileged access
+ *
+ * @connexum/ai-governance
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import * as crypto from 'crypto';
+/**
+ * DA-HIGH-5: returns true if any pack in the given list requires the
+ * `approval-queue` module, i.e. enforces human-in-the-loop. Used by
+ * higher-level init code (governance-server, CLI) to decide whether
+ * to pass `requireSecret: true` into the ApprovalQueue constructor.
+ *
+ * The import of CompliancePack type is deferred via duck-typing so
+ * this module stays at the bottom of the dependency graph.
+ */
+export function packsRequireApprovalQueue(packs) {
+    for (const pack of packs) {
+        const modules = pack.requiredModules ?? [];
+        for (const mod of modules) {
+            if (mod.name === 'approval-queue' && mod.required !== false) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+export class ApprovalQueue {
+    config;
+    queue = new Map();
+    queueFile;
+    constructor(config) {
+        this.config = {
+            timeoutMs: 600000, // 10 min (DEV MODE -- production: 300000 / 5min)
+            timeoutAction: 'deny',
+            escalationTarget: '',
+            delegateApprovers: [],
+            maxQueueSize: 100,
+            approvalSecret: '',
+            requireSecret: false,
+            // P4-RET-01 defaults: no classifier unless caller provides one (undefined is safe).
+            dataClassifier: undefined,
+            tenantId: '',
+            contractId: '',
+            activePackIds: [],
+            ...config,
+        };
+        if (this.config.timeoutAction === 'escalate' && !this.config.escalationTarget) {
+            throw new Error('escalationTarget is required when timeoutAction is "escalate"');
+        }
+        // DA-HIGH-5: when requireSecret is set (by callers who have an
+        // active HITL pack), refuse to run without a real HMAC secret.
+        if (this.config.requireSecret) {
+            if (!this.config.approvalSecret || this.config.approvalSecret.length < 32) {
+                throw new Error('SECURITY: ApprovalQueue requireSecret=true but approvalSecret is ' +
+                    'missing or under 32 characters. A HITL-required compliance pack ' +
+                    'is active; running without a verifiable approval token would ' +
+                    'silently degrade the human-in-the-loop control. ' +
+                    'Set APPROVAL_SECRET in the environment or disable HITL packs.');
+            }
+        }
+        if (!fs.existsSync(config.queueDir)) {
+            fs.mkdirSync(config.queueDir, { recursive: true });
+        }
+        this.queueFile = path.join(config.queueDir, 'approval-queue.json');
+        this.loadFromDisk();
+    }
+    /**
+     * Submit a tool call for approval.
+     * Returns the request ID for polling.
+     */
+    submit(agent, tool, inputSummary, reason) {
+        this.pruneExpired();
+        if (this.queue.size >= this.config.maxQueueSize) {
+            throw new Error(`Approval queue full (${this.config.maxQueueSize} max). ` +
+                'Resolve pending requests before submitting new ones.');
+        }
+        const now = new Date();
+        const request = {
+            id: `apr_${Date.now()}_${crypto.randomBytes(4).toString('hex')}`,
+            agent,
+            tool,
+            inputSummary,
+            reason,
+            status: 'pending',
+            createdAt: now.toISOString(),
+            expiresAt: new Date(now.getTime() + this.config.timeoutMs).toISOString(),
+        };
+        // P4-RET-01: Stamp DataClassTag at the approval-queue insert write site.
+        // Fail-closed: if a classifier is configured and classification throws,
+        // the write is refused (UnclassifiedWriteError or UnboundDataError).
+        if (this.config.dataClassifier) {
+            request.dataClassTag = this.config.dataClassifier.classify('approval-queue:insert', {
+                tenantId: this.config.tenantId ?? '',
+                contractId: this.config.contractId ?? '',
+                activePackIds: this.config.activePackIds ?? [],
+            });
+        }
+        this.queue.set(request.id, request);
+        this.saveToDisk();
+        return request;
+    }
+    /**
+     * Resolve an approval request (approve or deny).
+     * Only humans or authorized delegate agents can resolve.
+     */
+    resolve(decision) {
+        const request = this.queue.get(decision.requestId);
+        if (!request) {
+            throw new Error(`Approval request '${decision.requestId}' not found`);
+        }
+        if (request.status !== 'pending') {
+            throw new Error(`Request '${decision.requestId}' already resolved with status '${request.status}'`);
+        }
+        // Verify the resolver is authorized
+        const isHumanApproval = decision.resolvedBy.startsWith('human:');
+        const isDelegateApproval = this.config.delegateApprovers.includes(decision.resolvedBy);
+        if (isHumanApproval) {
+            // Human approvals require a valid HMAC token proving the approval
+            // came through an authenticated channel (dashboard, CLI, etc.)
+            if (!decision.approvalToken || !this.config.approvalSecret) {
+                throw new Error('Human approval requires a valid approvalToken and configured approvalSecret. ' +
+                    'Approvals must come through an authenticated channel.');
+            }
+            const expectedToken = crypto.createHmac('sha256', this.config.approvalSecret)
+                .update(`${decision.requestId}:${decision.status}`)
+                .digest('hex');
+            // F-NEW-CRIT-35: length-check before timingSafeEqual. Prior to this
+            // fix, a malformed approvalToken (wrong-length hex) crashed the
+            // server with uncaught RangeError [ERR_CRYPTO_TIMING_SAFE_EQUAL_LENGTH]
+            // -- DoS via the approvals API.
+            const tokenBuf = Buffer.from(decision.approvalToken, 'hex');
+            const expBuf = Buffer.from(expectedToken, 'hex');
+            if (tokenBuf.length !== expBuf.length || !crypto.timingSafeEqual(tokenBuf, expBuf)) {
+                throw new Error('Invalid approval token. Authorization denied.');
+            }
+        }
+        else if (!isDelegateApproval) {
+            throw new Error(`Agent '${decision.resolvedBy}' is not authorized to resolve approval requests. ` +
+                `Authorized delegates: ${this.config.delegateApprovers.join(', ') || 'none'}. ` +
+                'Human approvals must use format "human:<identity>" with a valid approvalToken.');
+        }
+        request.status = decision.status;
+        request.resolvedBy = decision.resolvedBy;
+        request.resolvedAt = new Date().toISOString();
+        request.note = decision.note;
+        this.saveToDisk();
+        return request;
+    }
+    /**
+     * Check the status of a request. Handles timeout/escalation.
+     */
+    check(requestId) {
+        const request = this.queue.get(requestId);
+        if (!request)
+            return null;
+        // Check expiry
+        if (request.status === 'pending') {
+            const now = Date.now();
+            const expiresAt = new Date(request.expiresAt).getTime();
+            if (now >= expiresAt) {
+                if (this.config.timeoutAction === 'escalate' && this.config.escalationTarget) {
+                    request.status = 'escalated';
+                    request.note = `Escalated to ${this.config.escalationTarget} after ${this.config.timeoutMs / 1000}s timeout`;
+                }
+                else {
+                    request.status = 'expired';
+                    request.note = `Auto-denied after ${this.config.timeoutMs / 1000}s timeout`;
+                }
+                request.resolvedAt = new Date().toISOString();
+                request.resolvedBy = 'system:timeout';
+                this.saveToDisk();
+            }
+        }
+        return { ...request };
+    }
+    /**
+     * Get all pending requests.
+     */
+    getPending() {
+        this.pruneExpired();
+        return Array.from(this.queue.values())
+            .filter(r => r.status === 'pending')
+            .sort((a, b) => a.createdAt.localeCompare(b.createdAt));
+    }
+    /**
+     * Get all requests for a specific agent.
+     */
+    getByAgent(agent) {
+        return Array.from(this.queue.values())
+            .filter(r => r.agent === agent)
+            .sort((a, b) => a.createdAt.localeCompare(b.createdAt));
+    }
+    /**
+     * Get all escalated requests that need attention.
+     */
+    getEscalated() {
+        this.pruneExpired();
+        return Array.from(this.queue.values())
+            .filter(r => r.status === 'escalated');
+    }
+    /**
+     * Get queue statistics.
+     */
+    getStats() {
+        const statuses = Array.from(this.queue.values()).map(r => r.status);
+        return {
+            total: statuses.length,
+            pending: statuses.filter(s => s === 'pending').length,
+            approved: statuses.filter(s => s === 'approved').length,
+            denied: statuses.filter(s => s === 'denied').length,
+            expired: statuses.filter(s => s === 'expired').length,
+            escalated: statuses.filter(s => s === 'escalated').length,
+        };
+    }
+    /**
+     * Clear resolved requests older than the given age in ms.
+     */
+    cleanup(maxAgeMs = 86400000) {
+        let removed = 0;
+        const cutoff = Date.now() - maxAgeMs;
+        for (const [id, request] of this.queue) {
+            if (request.status !== 'pending' && request.resolvedAt) {
+                if (new Date(request.resolvedAt).getTime() < cutoff) {
+                    this.queue.delete(id);
+                    removed++;
+                }
+            }
+        }
+        if (removed > 0)
+            this.saveToDisk();
+        return removed;
+    }
+    // --- Private helpers ---
+    pruneExpired() {
+        const now = Date.now();
+        for (const [, request] of this.queue) {
+            if (request.status === 'pending') {
+                const expiresAt = new Date(request.expiresAt).getTime();
+                if (now >= expiresAt) {
+                    if (this.config.timeoutAction === 'escalate' && this.config.escalationTarget) {
+                        request.status = 'escalated';
+                        request.note = `Escalated to ${this.config.escalationTarget} after timeout`;
+                    }
+                    else {
+                        request.status = 'expired';
+                        request.note = `Auto-denied after timeout`;
+                    }
+                    request.resolvedAt = new Date().toISOString();
+                    request.resolvedBy = 'system:timeout';
+                }
+            }
+        }
+        this.saveToDisk();
+    }
+    saveToDisk() {
+        try {
+            const data = Array.from(this.queue.values());
+            fs.writeFileSync(this.queueFile, JSON.stringify(data, null, 2));
+        }
+        catch (err) {
+            process.stderr.write(`[APPROVAL QUEUE CRITICAL] Failed to persist queue: ${err.message}\n`);
+        }
+    }
+    loadFromDisk() {
+        if (!fs.existsSync(this.queueFile))
+            return;
+        try {
+            const data = JSON.parse(fs.readFileSync(this.queueFile, 'utf-8'));
+            for (const request of data) {
+                this.queue.set(request.id, request);
+            }
+        }
+        catch (err) {
+            process.stderr.write(`[APPROVAL QUEUE] Failed to load persisted queue: ${err.message}\n`);
+        }
+    }
+}
+//# sourceMappingURL=approval-queue.js.map

package/dist/esm/governance/approval-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-queue.js","sourceRoot":"","sources":["../../../src/governance/approval-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AA4CjC;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAA+E;IAE/E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;gBAC5D,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AA2DD,MAAM,OAAO,aAAa;IAChB,MAAM,CAA8B;IACpC,KAAK,GAAiC,IAAI,GAAG,EAAE,CAAC;IAChD,SAAS,CAAS;IAE1B,YAAY,MAA2B;QACrC,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,MAAM,EAAE,iDAAiD;YACpE,aAAa,EAAE,MAAM;YACrB,gBAAgB,EAAE,EAAE;YACpB,iBAAiB,EAAE,EAAE;YACrB,YAAY,EAAE,GAAG;YACjB,cAAc,EAAE,EAAE;YAClB,aAAa,EAAE,KAAK;YACpB,oFAAoF;YACpF,cAAc,EAAE,SAAS;YACzB,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE;YACd,aAAa,EAAE,EAAE;YACjB,GAAG,MAAM;SACV,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QAED,+DAA+D;QAC/D,+DAA+D;QAC/D,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CACb,mEAAmE;oBACnE,kEAAkE;oBAClE,+DAA+D;oBAC/D,kDAAkD;oBAClD,+DAA+D,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;QACnE,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAa,EAAE,IAAY,EAAE,YAAoB,EAAE,MAAc;QACtE,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,MAAM,CAAC,YAAY,SAAS;gBACzD,sDAAsD,CACvD,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAoB;YAC/B,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YAChE,KAAK;YACL,IAAI;YACJ,YAAY;YACZ,MAAM;YACN,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;YAC5B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;SACzE,CAAC;QAEF,yEAAyE;QACzE,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC/B,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CACxD,uBAAuB,EACvB;gBACE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE;gBACpC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE;gBACxC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE;aAC/C,CACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,QAA0B;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,SAAS,aAAa,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,YAAY,QAAQ,CAAC,SAAS,mCAAmC,OAAO,CAAC,MAAM,GAAG,CACnF,CAAC;QACJ,CAAC;QAED,oCAAoC;QACpC,MAAM,eAAe,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACjE,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEvF,IAAI,eAAe,EAAE,CAAC;YACpB,kEAAkE;YAClE,+DAA+D;YAC/D,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC3D,MAAM,IAAI,KAAK,CACb,+EAA+E;oBAC/E,uDAAuD,CACxD,CAAC;YACJ,CAAC;YACD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;iBAC1E,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;iBAClD,MAAM,CAAC,KAAK,CAAC,CAAC;YACjB,oEAAoE;YACpE,gEAAgE;YAChE,wEAAwE;YACxE,gCAAgC;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnF,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,UAAU,QAAQ,CAAC,UAAU,oDAAoD;gBACjF,yBAAyB,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI;gBAC/E,gFAAgF,CACjF,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QACjC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACzC,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAE7B,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAiB;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,eAAe;QACf,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YAExD,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;gBACrB,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;oBAC7E,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;oBAC7B,OAAO,CAAC,IAAI,GAAG,gBAAgB,IAAI,CAAC,MAAM,CAAC,gBAAgB,UAAU,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,WAAW,CAAC;gBAC/G,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;oBAC3B,OAAO,CAAC,IAAI,GAAG,qBAAqB,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,WAAW,CAAC;gBAC9E,CAAC;gBACD,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC9C,OAAO,CAAC,UAAU,GAAG,gBAAgB,CAAC;gBACtC,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aACnC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;aACnC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,KAAa;QACtB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aACnC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC;aAC9B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,YAAY;QACV,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aACnC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,QAAQ;QAQN,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,MAAM;YACrD,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,MAAM;YACvD,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,MAAM;YACnD,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,MAAM;YACrD,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,MAAM;SAC1D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,WAAmB,QAAQ;QACjC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QAErC,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvD,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;oBACpD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACtB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,GAAG,CAAC;YAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,0BAA0B;IAElB,YAAY;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;gBACxD,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;oBACrB,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;wBAC7E,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;wBAC7B,OAAO,CAAC,IAAI,GAAG,gBAAgB,IAAI,CAAC,MAAM,CAAC,gBAAgB,gBAAgB,CAAC;oBAC9E,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;wBAC3B,OAAO,CAAC,IAAI,GAAG,2BAA2B,CAAC;oBAC7C,CAAC;oBACD,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBAC9C,OAAO,CAAC,UAAU,GAAG,gBAAgB,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sDAAuD,GAAa,CAAC,OAAO,IAAI,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO;QAE3C,IAAI,CAAC;YACH,MAAM,IAAI,GAAsB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YACrF,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oDAAqD,GAAa,CAAC,OAAO,IAAI,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}