@jait/gateway 0.1.0

package/dist/scheduler/service.js

@@ -0,0 +1,188 @@
+import { eq, desc } from "drizzle-orm";
+import { scheduledJobs } from "../db/schema.js";
+import { uuidv7 } from "../lib/uuidv7.js";
+const MINUTE_MS = 60_000;
+function matchesCronMinute(cron, date) {
+    const parts = cron.trim().split(/\s+/);
+    if (parts.length !== 5)
+        return false;
+    const minute = parts[0] ?? "";
+    const hour = parts[1] ?? "";
+    const minuteValue = date.getUTCMinutes();
+    const hourValue = date.getUTCHours();
+    const minuteOk = minute === "*" || Number.parseInt(minute, 10) === minuteValue;
+    const hourOk = hour === "*" || Number.parseInt(hour, 10) === hourValue;
+    // keep support intentionally small for Sprint 7:
+    // day-of-month, month, day-of-week are wildcard only.
+    const day = parts[2] === "*";
+    const month = parts[3] === "*";
+    const weekday = parts[4] === "*";
+    return minuteOk && hourOk && day && month && weekday;
+}
+function isSameUtcMinute(iso, now) {
+    if (!iso)
+        return false;
+    const previous = new Date(iso);
+    if (Number.isNaN(previous.getTime()))
+        return false;
+    return previous.getUTCFullYear() === now.getUTCFullYear()
+        && previous.getUTCMonth() === now.getUTCMonth()
+        && previous.getUTCDate() === now.getUTCDate()
+        && previous.getUTCHours() === now.getUTCHours()
+        && previous.getUTCMinutes() === now.getUTCMinutes();
+}
+function parseInput(input) {
+    if (!input)
+        return {};
+    try {
+        return JSON.parse(input);
+    }
+    catch {
+        return {};
+    }
+}
+function normalizeToolName(name) {
+    const trimmed = name.trim();
+    if (!trimmed)
+        return trimmed;
+    const firstUnderscore = trimmed.indexOf("_");
+    if (firstUnderscore === -1)
+        return trimmed;
+    return `${trimmed.slice(0, firstUnderscore)}.${trimmed.slice(firstUnderscore + 1)}`;
+}
+function mapJob(row) {
+    return {
+        id: row.id,
+        userId: row.userId ?? null,
+        name: row.name,
+        cron: row.cron,
+        toolName: normalizeToolName(row.toolName),
+        input: parseInput(row.input),
+        sessionId: row.sessionId ?? "default",
+        workspaceRoot: row.workspaceRoot ?? process.cwd(),
+        enabled: row.enabled === 1,
+        lastRunAt: row.lastRunAt,
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt,
+    };
+}
+export class SchedulerService {
+    options;
+    timer = null;
+    ticking = false;
+    constructor(options) {
+        this.options = options;
+    }
+    start(pollMs = MINUTE_MS) {
+        if (this.timer)
+            return;
+        this.timer = setInterval(() => {
+            void this.tick();
+        }, pollMs);
+    }
+    stop() {
+        if (!this.timer)
+            return;
+        clearInterval(this.timer);
+        this.timer = null;
+    }
+    list(userId) {
+        const rows = this.options.db
+            .select()
+            .from(scheduledJobs)
+            .orderBy(desc(scheduledJobs.updatedAt))
+            .all();
+        const all = rows.map(mapJob);
+        if (!userId)
+            return all;
+        // Include both the user's own jobs AND system-level jobs (userId === null)
+        return all.filter((job) => job.userId === userId || job.userId === null);
+    }
+    create(params) {
+        const now = new Date().toISOString();
+        const id = uuidv7();
+        this.options.db.insert(scheduledJobs).values({
+            id,
+            userId: params.userId ?? null,
+            name: params.name,
+            cron: params.cron,
+            toolName: normalizeToolName(params.toolName),
+            input: JSON.stringify(params.input ?? {}),
+            sessionId: params.sessionId ?? "default",
+            workspaceRoot: params.workspaceRoot ?? process.cwd(),
+            enabled: params.enabled === false ? 0 : 1,
+            createdAt: now,
+            updatedAt: now,
+        }).run();
+        return this.get(id);
+    }
+    get(id, userId) {
+        const row = this.options.db.select().from(scheduledJobs).where(eq(scheduledJobs.id, id)).get();
+        const job = row ? mapJob(row) : null;
+        if (!job)
+            return null;
+        // Allow access to system-level jobs (userId === null) for any authenticated user
+        if (userId && job.userId !== null && job.userId !== userId)
+            return null;
+        return job;
+    }
+    remove(id, userId) {
+        const exists = this.get(id, userId);
+        if (!exists)
+            return false;
+        this.options.db.delete(scheduledJobs).where(eq(scheduledJobs.id, id)).run();
+        return true;
+    }
+    update(id, patch, userId) {
+        const existing = this.get(id, userId);
+        if (!existing)
+            return null;
+        this.options.db.update(scheduledJobs).set({
+            name: patch.name ?? existing.name,
+            cron: patch.cron ?? existing.cron,
+            toolName: patch.toolName ? normalizeToolName(patch.toolName) : existing.toolName,
+            enabled: patch.enabled === undefined ? (existing.enabled ? 1 : 0) : (patch.enabled ? 1 : 0),
+            input: patch.input === undefined ? JSON.stringify(existing.input) : JSON.stringify(patch.input),
+            updatedAt: new Date().toISOString(),
+        }).where(eq(scheduledJobs.id, id)).run();
+        return this.get(id, userId);
+    }
+    async trigger(id, userId, runAt = new Date()) {
+        const job = this.get(id, userId);
+        if (!job) {
+            throw new Error(`Job not found: ${id}`);
+        }
+        const actionId = uuidv7();
+        const result = await this.options.executeTool({
+            toolName: normalizeToolName(job.toolName),
+            input: job.input,
+            sessionId: job.sessionId,
+            workspaceRoot: job.workspaceRoot,
+            userId: job.userId,
+        });
+        this.options.db.update(scheduledJobs).set({
+            lastRunAt: runAt.toISOString(),
+            updatedAt: new Date().toISOString(),
+        }).where(eq(scheduledJobs.id, id)).run();
+        const payload = { jobId: id, actionId, result };
+        this.options.onExecuted?.(payload);
+        return payload;
+    }
+    async tick(now = new Date()) {
+        if (this.ticking)
+            return;
+        this.ticking = true;
+        try {
+            const jobs = this.list().filter((j) => j.enabled);
+            for (const job of jobs) {
+                if (matchesCronMinute(job.cron, now) && !isSameUtcMinute(job.lastRunAt, now)) {
+                    await this.trigger(job.id, undefined, now);
+                }
+            }
+        }
+        finally {
+            this.ticking = false;
+        }
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/scheduler/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/scheduler/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAsC1C,MAAM,SAAS,GAAG,MAAM,CAAC;AAEzB,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAAU;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAErC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE5B,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,QAAQ,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,WAAW,CAAC;IAC/E,MAAM,MAAM,GAAG,IAAI,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,SAAS,CAAC;IAEvE,iDAAiD;IACjD,sDAAsD;IACtD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;IAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;IAEjC,OAAO,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,KAAK,IAAI,OAAO,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,GAAkB,EAAE,GAAS;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,QAAQ,CAAC,cAAc,EAAE,KAAK,GAAG,CAAC,cAAc,EAAE;WACpD,QAAQ,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE;WAC5C,QAAQ,CAAC,UAAU,EAAE,KAAK,GAAG,CAAC,UAAU,EAAE;WAC1C,QAAQ,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE;WAC5C,QAAQ,CAAC,aAAa,EAAE,KAAK,GAAG,CAAC,aAAa,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,UAAU,CAAC,KAAoB;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAC7B,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,eAAe,KAAK,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3C,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,MAAM,CAAC,GAAsC;IACpD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;QAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;QACrC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,EAAE;QACjD,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAgB;IAIP;IAHZ,KAAK,GAA0C,IAAI,CAAC;IACpD,OAAO,GAAG,KAAK,CAAC;IAExB,YAAoB,OAAyB;QAAzB,YAAO,GAAP,OAAO,CAAkB;IAAG,CAAC;IAEjD,KAAK,CAAC,MAAM,GAAG,SAAS;QACtB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC,EAAE,MAAM,CAAC,CAAC;IACb,CAAC;IAED,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,IAAI,CAAC,MAAe;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;aACzB,MAAM,EAAE;aACR,IAAI,CAAC,aAAa,CAAC;aACnB,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;aACtC,GAAG,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC;QACxB,2EAA2E;QAC3E,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,CAAC,MASN;QACC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;YAC3C,EAAE;YACF,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC5C,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;YACxC,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,EAAE;YACpD,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzC,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC,GAAG,EAAE,CAAC;QAET,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;IACvB,CAAC;IAED,GAAG,CAAC,EAAU,EAAE,MAAe;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/F,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,iFAAiF;QACjF,IAAI,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACxE,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,MAAe;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CACJ,EAAU,EACV,KAA8F,EAC9F,MAAe;QAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC;YACxC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI;YACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ;YAChF,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3F,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;YAC/F,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAEzC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,MAAe,EAAE,KAAK,GAAG,IAAI,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YAC5C,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzC,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC;YACxC,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE;YAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAEzC,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;QACzB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAClD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC7E,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;CACF"}

package/dist/security/consent-executor.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Consent-Aware Tool Executor — Sprint 4.7
+ *
+ * Wraps ToolRegistry.execute() with consent checking. When a tool requires
+ * consent (based on permissions + trust level), execution is paused and a
+ * consent request is created. The tool only runs after approval.
+ *
+ * In dry-run mode, the executor returns the plan (what would happen)
+ * without executing anything, regardless of consent level.
+ */
+import type { ToolContext, ToolResult } from "../tools/contracts.js";
+import type { ToolRegistry } from "../tools/registry.js";
+import type { AuditWriter } from "../services/audit.js";
+import type { ConsentManager } from "./consent-manager.js";
+import type { TrustEngine } from "./trust-engine.js";
+import type { ToolPermission } from "./tool-permissions.js";
+export interface ConsentAwareExecutorOptions {
+    toolRegistry: ToolRegistry;
+    consentManager: ConsentManager;
+    trustEngine: TrustEngine;
+    audit?: AuditWriter;
+    /** Permission map: toolName -> ToolPermission */
+    permissions: Map<string, ToolPermission>;
+    /** Session-scoped set of tools approved via "once" */
+    sessionApprovals: Set<string>;
+}
+export interface ExecuteOptions {
+    /** If true, return the plan without executing */
+    dryRun?: boolean;
+    /** Consent timeout override (ms) */
+    consentTimeoutMs?: number;
+}
+export declare class ConsentAwareExecutor {
+    private readonly toolRegistry;
+    private readonly consentManager;
+    private readonly trustEngine;
+    private readonly audit?;
+    private readonly permissions;
+    private readonly sessionApprovals;
+    constructor(opts: ConsentAwareExecutorOptions);
+    /**
+     * Execute a tool with consent checking and trust-level awareness.
+     */
+    execute(toolName: string, input: unknown, context: ToolContext, options?: ExecuteOptions): Promise<ToolResult>;
+    private buildSummary;
+    private buildPreview;
+}
+//# sourceMappingURL=consent-executor.d.ts.map

package/dist/security/consent-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-executor.d.ts","sourceRoot":"","sources":["../../src/security/consent-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,iDAAiD;IACjD,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzC,sDAAsD;IACtD,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,iDAAiD;IACjD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAc;gBAEnC,IAAI,EAAE,2BAA2B;IAS7C;;OAEG;IACG,OAAO,CACX,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,WAAW,EACpB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,UAAU,CAAC;IAgGtB,OAAO,CAAC,YAAY;IA2BpB,OAAO,CAAC,YAAY;CAqBrB"}

package/dist/security/consent-executor.js

@@ -0,0 +1,158 @@
+/**
+ * Consent-Aware Tool Executor — Sprint 4.7
+ *
+ * Wraps ToolRegistry.execute() with consent checking. When a tool requires
+ * consent (based on permissions + trust level), execution is paused and a
+ * consent request is created. The tool only runs after approval.
+ *
+ * In dry-run mode, the executor returns the plan (what would happen)
+ * without executing anything, regardless of consent level.
+ */
+import { requiresConsent, isCommandAllowed } from "./tool-permissions.js";
+export class ConsentAwareExecutor {
+    toolRegistry;
+    consentManager;
+    trustEngine;
+    audit;
+    permissions;
+    sessionApprovals;
+    constructor(opts) {
+        this.toolRegistry = opts.toolRegistry;
+        this.consentManager = opts.consentManager;
+        this.trustEngine = opts.trustEngine;
+        this.audit = opts.audit;
+        this.permissions = opts.permissions;
+        this.sessionApprovals = opts.sessionApprovals;
+    }
+    /**
+     * Execute a tool with consent checking and trust-level awareness.
+     */
+    async execute(toolName, input, context, options = {}) {
+        const permission = this.permissions.get(toolName);
+        const trustLevel = this.trustEngine.getLevel(toolName);
+        // Build a summary for the consent card
+        const summary = this.buildSummary(toolName, input);
+        const preview = this.buildPreview(toolName, input);
+        // ── Dry-run mode: return plan without executing ──
+        if (options.dryRun) {
+            const needsConsent = requiresConsent(permission, trustLevel, this.sessionApprovals);
+            return {
+                ok: true,
+                message: "Dry-run: showing plan without executing",
+                data: {
+                    dryRun: true,
+                    toolName,
+                    input,
+                    summary,
+                    preview,
+                    requiresConsent: needsConsent,
+                    trustLevel,
+                    consentLevel: permission?.consentLevel ?? "unknown",
+                    risk: permission?.risk ?? "high",
+                },
+            };
+        }
+        // ── Command allow/deny check (for terminal tools) ──
+        if (toolName === "terminal.run" || toolName === "terminal.stream") {
+            const command = input?.command;
+            if (typeof command === "string") {
+                const cmdCheck = isCommandAllowed(command, permission);
+                if (!cmdCheck.allowed) {
+                    return {
+                        ok: false,
+                        message: `Command blocked: ${cmdCheck.reason}`,
+                    };
+                }
+            }
+        }
+        // ── Auto-execute if no consent required ──
+        const needsConsent = requiresConsent(permission, trustLevel, this.sessionApprovals);
+        const approveAllEnabled = this.consentManager.isApproveAllEnabledForSession(context.sessionId);
+        const isScheduler = context.requestedBy === "scheduler";
+        if (!needsConsent || approveAllEnabled || isScheduler) {
+            const result = await this.toolRegistry.execute(toolName, input, context, this.audit);
+            // Record successful approval for trust progression
+            if (result.ok) {
+                this.trustEngine.recordApproval(toolName);
+            }
+            return result;
+        }
+        // ── Consent required: create request and wait ──
+        const decision = await this.consentManager.requestConsent({
+            actionId: context.actionId,
+            toolName,
+            summary,
+            preview,
+            risk: permission?.risk ?? "high",
+            sessionId: context.sessionId,
+            timeoutMs: options.consentTimeoutMs,
+        });
+        if (!decision.approved) {
+            return {
+                ok: false,
+                message: decision.decidedVia === "timeout"
+                    ? `Consent timed out for ${toolName}`
+                    : `User rejected ${toolName}: ${decision.reason ?? "no reason given"}`,
+                data: { consentRejected: true, decidedVia: decision.decidedVia },
+            };
+        }
+        // ── Approved: execute the tool ──
+        const result = await this.toolRegistry.execute(toolName, input, context, this.audit);
+        // Record for trust progression
+        if (result.ok) {
+            this.trustEngine.recordApproval(toolName);
+            // Mark as session-approved for "once" consent level
+            if (permission?.consentLevel === "once") {
+                this.sessionApprovals.add(toolName);
+            }
+        }
+        return result;
+    }
+    // ── Helpers ────────────────────────────────────────────────────────
+    buildSummary(toolName, input) {
+        const inp = input;
+        switch (toolName) {
+            case "terminal.run":
+                return `Run command: ${inp?.command ?? "(unknown)"}`;
+            case "terminal.stream":
+                return "Open a new terminal session";
+            case "file.write":
+                return `Write to file: ${inp?.path ?? "(unknown)"}`;
+            case "file.patch":
+                return `Patch file: ${inp?.path ?? "(unknown)"}`;
+            case "file.read":
+                return `Read file: ${inp?.path ?? "(unknown)"}`;
+            case "os.install":
+                return `Install package: ${inp?.package ?? "(unknown)"}`;
+            case "os.query":
+                return `Query OS: ${inp?.type ?? "(unknown)"}`;
+            case "surfaces.start":
+                return `Start surface: ${inp?.type ?? "(unknown)"}`;
+            case "surfaces.stop":
+                return `Stop surface: ${inp?.id ?? "(unknown)"}`;
+            default:
+                return `Execute tool: ${toolName}`;
+        }
+    }
+    buildPreview(toolName, input) {
+        const inp = input;
+        switch (toolName) {
+            case "terminal.run":
+                return { command: inp?.command, timeout: inp?.timeout };
+            case "file.write":
+                return {
+                    path: inp?.path,
+                    content: typeof inp?.content === "string"
+                        ? inp.content.slice(0, 500)
+                        : undefined,
+                };
+            case "file.patch":
+                return { path: inp?.path, search: inp?.search, replace: inp?.replace };
+            case "os.install":
+                return { package: inp?.package };
+            default:
+                return inp ?? {};
+        }
+    }
+}
+//# sourceMappingURL=consent-executor.js.map

package/dist/security/consent-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-executor.js","sourceRoot":"","sources":["../../src/security/consent-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAoB1E,MAAM,OAAO,oBAAoB;IACd,YAAY,CAAe;IAC3B,cAAc,CAAiB;IAC/B,WAAW,CAAc;IACzB,KAAK,CAAe;IACpB,WAAW,CAA8B;IACzC,gBAAgB,CAAc;IAE/C,YAAY,IAAiC;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,QAAgB,EAChB,KAAc,EACd,OAAoB,EACpB,UAA0B,EAAE;QAE5B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEvD,uCAAuC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEnD,oDAAoD;QACpD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACpF,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,yCAAyC;gBAClD,IAAI,EAAE;oBACJ,MAAM,EAAE,IAAI;oBACZ,QAAQ;oBACR,KAAK;oBACL,OAAO;oBACP,OAAO;oBACP,eAAe,EAAE,YAAY;oBAC7B,UAAU;oBACV,YAAY,EAAE,UAAU,EAAE,YAAY,IAAI,SAAS;oBACnD,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,MAAM;iBACjC;aACF,CAAC;QACJ,CAAC;QAED,sDAAsD;QACtD,IAAI,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;YAClE,MAAM,OAAO,GAAI,KAAiC,EAAE,OAAO,CAAC;YAC5D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACvD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACtB,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,OAAO,EAAE,oBAAoB,QAAQ,CAAC,MAAM,EAAE;qBAC/C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,MAAM,YAAY,GAAG,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACpF,MAAM,iBAAiB,GAAG,IAAI,CAAC,cAAc,CAAC,6BAA6B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/F,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC;QAExD,IAAI,CAAC,YAAY,IAAI,iBAAiB,IAAI,WAAW,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAErF,mDAAmD;YACnD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAC5C,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,kDAAkD;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YACxD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ;YACR,OAAO;YACP,OAAO;YACP,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,MAAM;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,gBAAgB;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,QAAQ,CAAC,UAAU,KAAK,SAAS;oBACxC,CAAC,CAAC,yBAAyB,QAAQ,EAAE;oBACrC,CAAC,CAAC,iBAAiB,QAAQ,KAAK,QAAQ,CAAC,MAAM,IAAI,iBAAiB,EAAE;gBACxE,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE;aACjE,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAErF,+BAA+B;QAC/B,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAC1C,oDAAoD;YACpD,IAAI,UAAU,EAAE,YAAY,KAAK,MAAM,EAAE,CAAC;gBACxC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sEAAsE;IAE9D,YAAY,CAAC,QAAgB,EAAE,KAAc;QACnD,MAAM,GAAG,GAAG,KAA4C,CAAC;QAEzD,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,cAAc;gBACjB,OAAO,gBAAgB,GAAG,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC;YACvD,KAAK,iBAAiB;gBACpB,OAAO,6BAA6B,CAAC;YACvC,KAAK,YAAY;gBACf,OAAO,kBAAkB,GAAG,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC;YACtD,KAAK,YAAY;gBACf,OAAO,eAAe,GAAG,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC;YACnD,KAAK,WAAW;gBACd,OAAO,cAAc,GAAG,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC;YAClD,KAAK,YAAY;gBACf,OAAO,oBAAoB,GAAG,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC;YAC3D,KAAK,UAAU;gBACb,OAAO,aAAa,GAAG,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC;YACjD,KAAK,gBAAgB;gBACnB,OAAO,kBAAkB,GAAG,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC;YACtD,KAAK,eAAe;gBAClB,OAAO,iBAAiB,GAAG,EAAE,EAAE,IAAI,WAAW,EAAE,CAAC;YACnD;gBACE,OAAO,iBAAiB,QAAQ,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,QAAgB,EAAE,KAAc;QACnD,MAAM,GAAG,GAAG,KAA4C,CAAC;QAEzD,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,cAAc;gBACjB,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YAC1D,KAAK,YAAY;gBACf,OAAO;oBACL,IAAI,EAAE,GAAG,EAAE,IAAI;oBACf,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ;wBACvC,CAAC,CAAE,GAAG,CAAC,OAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBACvC,CAAC,CAAC,SAAS;iBACd,CAAC;YACJ,KAAK,YAAY;gBACf,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YACzE,KAAK,YAAY;gBACf,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YACnC;gBACE,OAAO,GAAG,IAAI,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;CACF"}

package/dist/security/consent-manager.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Consent Manager — Sprint 4.1
+ *
+ * Manages a pending queue of consent requests. Tools that require
+ * consent produce a request; the operator must approve/reject before
+ * execution continues. Requests auto-timeout after a configurable period.
+ */
+import type { JaitDB } from "../db/connection.js";
+export type ConsentStatus = "pending" | "approved" | "rejected" | "timeout";
+export interface ConsentRequest {
+    id: string;
+    actionId: string;
+    toolName: string;
+    summary: string;
+    /** Preview of what will execute (command, file path, etc.) */
+    preview: Record<string, unknown>;
+    risk: "low" | "medium" | "high";
+    sessionId: string;
+    createdAt: string;
+    expiresAt: string;
+    status: ConsentStatus;
+}
+export interface ConsentDecision {
+    requestId: string;
+    actionId: string;
+    approved: boolean;
+    decidedAt: string;
+    decidedVia: "click" | "voice" | "auto" | "timeout";
+    reason?: string;
+}
+export interface ConsentManagerOptions {
+    /** Timeout in milliseconds before a request auto-rejects (default: 120_000 = 2 min) */
+    defaultTimeoutMs?: number;
+    /** DB instance for writing to consent_log table */
+    db?: JaitDB;
+    /** Called whenever a new consent request is created */
+    onRequest?: (request: ConsentRequest) => void;
+    /** Called whenever a consent decision is made */
+    onDecision?: (decision: ConsentDecision) => void;
+}
+export declare class ConsentManager {
+    private readonly pending;
+    private readonly approveAllSessions;
+    private readonly defaultTimeoutMs;
+    private readonly db?;
+    private readonly onRequest?;
+    private readonly onDecision?;
+    constructor(opts?: ConsentManagerOptions);
+    /**
+     * Create a consent request and wait for approval/rejection.
+     * Returns the decision (approved=true/false). Rejects after timeout.
+     */
+    requestConsent(params: {
+        actionId: string;
+        toolName: string;
+        summary: string;
+        preview: Record<string, unknown>;
+        risk: "low" | "medium" | "high";
+        sessionId: string;
+        timeoutMs?: number;
+    }): Promise<ConsentDecision>;
+    /**
+     * Approve a pending request. Returns false if the request doesn't exist.
+     */
+    approve(requestId: string, via?: ConsentDecision["decidedVia"], reason?: string): boolean;
+    /**
+     * Reject a pending request. Returns false if the request doesn't exist.
+     */
+    reject(requestId: string, via?: ConsentDecision["decidedVia"], reason?: string): boolean;
+    /**
+     * Get a pending request by ID.
+     */
+    getRequest(requestId: string): ConsentRequest | undefined;
+    /**
+     * Get all pending requests, optionally filtered by session.
+     */
+    listPending(sessionId?: string): ConsentRequest[];
+    /**
+     * Get count of pending requests.
+     */
+    get pendingCount(): number;
+    /**
+     * Enable "approve all" mode for a session.
+     * While enabled, consent prompts for this session should be bypassed by the executor.
+     */
+    enableApproveAllForSession(sessionId: string): void;
+    /**
+     * Disable "approve all" mode for a session.
+     */
+    disableApproveAllForSession(sessionId: string): void;
+    /**
+     * Check whether "approve all" mode is enabled for a session.
+     */
+    isApproveAllEnabledForSession(sessionId: string): boolean;
+    /**
+     * Cancel all pending requests (e.g. during shutdown).
+     */
+    cancelAll(reason?: string): void;
+    private decide;
+    private handleTimeout;
+    private persistDecision;
+    private hydrateSessionApproveAll;
+    private persistSessionApproveAll;
+}
+//# sourceMappingURL=consent-manager.d.ts.map

package/dist/security/consent-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-manager.d.ts","sourceRoot":"","sources":["../../src/security/consent-manager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAOlD,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAE5E,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,uFAAuF;IACvF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mDAAmD;IACnD,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9C,iDAAiD;IACjD,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,IAAI,CAAC;CAClD;AAYD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAsC;gBAEtD,IAAI,GAAE,qBAA0B;IAQ5C;;;OAGG;IACG,cAAc,CAAC,MAAM,EAAE;QAC3B,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QAChC,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,eAAe,CAAC;IA8B5B;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,eAAe,CAAC,YAAY,CAAW,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO;IAIlG;;OAEG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,eAAe,CAAC,YAAY,CAAW,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO;IAIjG;;OAEG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIzD;;OAEG;IACH,WAAW,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE;IAMjD;;OAEG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;OAGG;IACH,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKnD;;OAEG;IACH,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKpD;;OAEG;IACH,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIzD;;OAEG;IACH,SAAS,CAAC,MAAM,SAAa,GAAG,IAAI;IAQpC,OAAO,CAAC,MAAM;IAqCd,OAAO,CAAC,aAAa;IAqBrB,OAAO,CAAC,eAAe;IAiBvB,OAAO,CAAC,wBAAwB;IAgBhC,OAAO,CAAC,wBAAwB;CA6BjC"}