@vibesdotdev/chat 0.0.0-stage → 1.0.0-rc.1

package/dist/approval/approvals-client.js

@@ -0,0 +1,291 @@
+import { chatHttpFetch } from "../client/http-transport.js";
+/**
+ * `chat.approvals` — chat's runtime client for remote tool approvals.
+ *
+ * The ai-web → chat-web hop of the `chat-room` approval channel: it opens a
+ * pending approval on chat-web's internal tool-approvals API
+ * (`REMOTE_APPROVAL_INTERNAL_PATH_PREFIX`, service-token only) and polls for a
+ * terminal decision. A host whose runtime does not own the approval store
+ * (ai-web) supplies this client as its `chat/approval-host` transport; chat-web
+ * supplies its own store-backed host instead.
+ *
+ * Every path that is not an explicit approval resolves to a deny-shaped
+ * decision (fail-closed). Does not execute tools. chat-web exposes no decision
+ * event to this cross-app hop, so the client polls; the whole wait and each
+ * pause between polls run on its runtime's lifecycle (`wait` + `delay`), so
+ * the deadline, the caller's signal and runtime disposal all end it.
+ */
+import * as z from 'zod/v4';
+import { BaseRuntimeClient, getVibesClient } from '@vibesdotdev/kernel/client';
+import { CapabilityError, settle, CaughtFailureSchema, createRuntimeAsset, isCapabilityError, valueFreeFailure } from '@vibesdotdev/kernel';
+import { serviceOrigin } from '@vibesdotdev/infra-core/service';
+import { getLogger } from '@vibesdotdev/logging';
+import { resolveChatInternalServiceToken } from "../config/env.js";
+import { REMOTE_APPROVAL_INTERNAL_PATH_PREFIX, RemoteApprovalPollResultSchema } from "./remote.js";
+export const CHAT_APPROVALS_CLIENT_ID = 'chat.approvals';
+export const chatApprovalsClientDescriptor = createRuntimeAsset({
+    kind: 'runtime/client',
+    id: CHAT_APPROVALS_CLIENT_ID,
+    name: 'Chat Approvals Client',
+    description: 'Opens and awaits chat-room tool approvals on chat-web over its service-token internal API.'
+});
+/** The terminal-or-pending body chat-web answers an open with. */
+const RemoteApprovalOpenResponseSchema = z.object({
+    ok: z.literal(true),
+    result: z.enum(['opened', 'deferred'])
+});
+/**
+ * Explicit transport overrides for embedders and tests (the origin is pinned
+ * through the descriptor's `baseUrl`). Absent → the runtime resolves them.
+ */
+export const ChatApprovalsClientOptionsSchema = z.looseObject({
+    serviceToken: z.string().optional(),
+    fetch: z
+        .custom((value) => z.function().safeParse(value).success)
+        .optional(),
+    defaultTimeoutMs: z.number().optional(),
+    defaultPollIntervalMs: z.number().optional()
+});
+const LOGGER_ID = 'chat.approvals-client';
+/**
+ * The value-free facts of a failure (class name, typed code and reason): what
+ * approval logs and denial reasons carry. A token resolver's or transport's
+ * message can echo a URL with credentials or the token itself; it never
+ * reaches a log line, a decision `reason` or the agent.
+ */
+function failureFacts(error) {
+    return valueFreeFailure(CaughtFailureSchema.parse(error));
+}
+/** A denial reason's typed suffix: `CODE reason` when the failure is typed, else its class name. */
+function failureCode(error) {
+    const facts = valueFreeFailure(CaughtFailureSchema.parse(error));
+    return [facts.code, facts.reason].filter(Boolean).join(' ') || facts.name;
+}
+const DEFAULT_REMOTE_TIMEOUT_MS = 5 * 60_000;
+const DEFAULT_REMOTE_POLL_MS = 1_500;
+/** The transport overrides handed to the client do not have the documented shape. */
+export class ChatApprovalsClientOptionsError extends CapabilityError {
+    issues;
+    constructor(issues) {
+        const paths = issues.map((issue) => issue.path.map(String).join('.') || '(root)');
+        super(`Invalid chat.approvals client options at: ${paths.join(', ')}`, 'INVALID_INPUT', {
+            reason: 'chat-approvals-options-invalid',
+            details: { paths }
+        });
+        this.name = 'ChatApprovalsClientOptionsError';
+        this.issues = issues;
+    }
+}
+export class ChatApprovalsClient extends BaseRuntimeClient {
+    options;
+    constructor(descriptor = { id: CHAT_APPROVALS_CLIENT_ID, kind: 'runtime/client' }, context, runtime) {
+        super(descriptor, context, runtime);
+        const parsed = ChatApprovalsClientOptionsSchema.safeParse(context ?? {});
+        if (!parsed.success)
+            throw new ChatApprovalsClientOptionsError(parsed.error.issues);
+        this.options = parsed.data;
+    }
+    /**
+     * chat-web's origin: the descriptor's pinned `baseUrl`, else the declared
+     * `chat` `infra/service` in this runtime's configured service environment.
+     * An undeclared service throws `NOT_FOUND`, and every call fails closed.
+     */
+    async resolveOrigin() {
+        const pinned = this.descriptor.baseUrl?.trim();
+        if (pinned)
+            return pinned.replace(/\/+$/, '');
+        return (await serviceOrigin(this.runtime, 'chat')).replace(/\/+$/, '');
+    }
+    /**
+     * The internal service token, or `''` when none is configured. A resolver
+     * failure rejects typed (`UNAVAILABLE service-token-unresolved`, cause kept
+     * for the caller's report); both `open` and `awaitDecision` fail closed on
+     * either before any network call.
+     */
+    async serviceToken() {
+        if (this.options.serviceToken) {
+            return this.options.serviceToken.trim();
+        }
+        try {
+            return ((await resolveChatInternalServiceToken(this.runtime)) ?? '').trim();
+        }
+        catch (error) {
+            throw new CapabilityError('The chat internal service token could not be resolved.', 'UNAVAILABLE', {
+                reason: 'service-token-unresolved',
+                cause: error
+            });
+        }
+    }
+    fetchImpl() {
+        return chatHttpFetch(this.runtime, this.options.fetch);
+    }
+    /**
+     * Persist a pending approval on chat-web. `failed` means the pause cannot be
+     * trusted → the caller must deny (fail-closed).
+     */
+    async open(request, signal) {
+        const logger = getLogger(LOGGER_ID, this.runtime);
+        const authority = await settle(async () => ({
+            token: await this.serviceToken(),
+            base: await this.resolveOrigin()
+        }));
+        if (!authority.ok) {
+            logger.warn('remote approval open could not resolve its token or origin — fails closed', {
+                failure: valueFreeFailure(authority.cause)
+            });
+            return 'failed';
+        }
+        const { token, base } = authority.value;
+        if (!token || !base) {
+            logger.warn('remote approval open fails closed', {
+                missing: [!token ? 'service token' : null, !base ? 'chat origin' : null].filter(Boolean)
+            });
+            return 'failed';
+        }
+        const sent = await settle(async () => {
+            const res = await this.fetchImpl()(`${base}${REMOTE_APPROVAL_INTERNAL_PATH_PREFIX}`, {
+                method: 'POST',
+                headers: {
+                    authorization: `Bearer ${token}`,
+                    'content-type': 'application/json'
+                },
+                body: JSON.stringify(request),
+                signal
+            });
+            if (!res.ok) {
+                logger.warn('remote approval open rejected — fails closed', { status: res.status });
+                return 'failed';
+            }
+            const body = RemoteApprovalOpenResponseSchema.safeParse(await res.json());
+            if (!body.success) {
+                logger.warn('remote approval open answered an unrecognised body — fails closed', {
+                    paths: body.error.issues.map((issue) => issue.path.join('.'))
+                });
+                return 'failed';
+            }
+            return body.data.result;
+        });
+        if (!sent.ok) {
+            logger.warn('remote approval open failed in transport — fails closed', { failure: valueFreeFailure(sent.cause) });
+            return 'failed';
+        }
+        return sent.value;
+    }
+    /**
+     * Wait for a terminal decision. Timeout, abort, not-found, unauthorized and
+     * transport errors resolve to `{ approved: false, ... }` — never throw open.
+     */
+    async awaitDecision(keys, options) {
+        const timeoutMs = options?.timeoutMs ?? this.options.defaultTimeoutMs ?? DEFAULT_REMOTE_TIMEOUT_MS;
+        const pollIntervalMs = options?.pollIntervalMs ?? this.options.defaultPollIntervalMs ?? DEFAULT_REMOTE_POLL_MS;
+        const signal = options?.signal;
+        const fetchImpl = this.fetchImpl();
+        const logger = getLogger(LOGGER_ID, this.runtime);
+        const origin = await settle(() => this.resolveOrigin());
+        if (!origin.ok) {
+            return { approved: false, origin: 'unavailable', reason: `remote approval origin unresolved — denied (fail-closed): ${failureCode(origin.cause)}` };
+        }
+        const credential = await settle(() => this.serviceToken());
+        if (!credential.ok) {
+            logger.warn('remote approval token unresolved — denied (fail-closed)', { failure: valueFreeFailure(credential.cause) });
+            return { approved: false, origin: 'unavailable', reason: `remote approval token unresolved — denied (fail-closed): ${failureCode(credential.cause)}` };
+        }
+        const base = origin.value;
+        const token = credential.value;
+        if (!token) {
+            // Same guard as open: no service token means no authenticated poll; deny before any network call.
+            return { approved: false, origin: 'unavailable', reason: 'remote approval has no service token — denied (fail-closed)' };
+        }
+        const auth = `Bearer ${token}`;
+        const pollUrl = `${base}${REMOTE_APPROVAL_INTERNAL_PATH_PREFIX}/${encodeURIComponent(keys.roomId)}/${encodeURIComponent(keys.requestId)}`;
+        const lifecycle = this.runtime.lifecycle;
+        const waited = await settle(async () => {
+            const waitOptions = {
+                timeoutMs,
+                reason: `remote approval ${keys.roomId}/${keys.requestId}`
+            };
+            if (signal)
+                waitOptions.signal = signal;
+            return await lifecycle.wait(async (waitSignal) => {
+                for (;;) {
+                    const decision = await pollOnce(this.runtime, fetchImpl, pollUrl, auth, keys, waitSignal);
+                    if (decision)
+                        return decision;
+                    await lifecycle.delay(pollIntervalMs, waitSignal);
+                }
+            }, waitOptions);
+        });
+        if (!waited.ok) {
+            const error = waited.cause;
+            if (error instanceof Error && isCapabilityError(error) && error.code === 'TIMEOUT') {
+                return { approved: false, origin: 'timeout', reason: 'remote approval timed out — denied (fail-closed)' };
+            }
+            if (signal?.aborted || (error instanceof Error && isCapabilityError(error) && error.code === 'CANCELLED')) {
+                return { approved: false, origin: 'cancelled', reason: 'run was cancelled while awaiting remote approval' };
+            }
+            logger.warn('remote approval wait failed — denied (fail-closed)', {
+                roomId: keys.roomId,
+                requestId: keys.requestId,
+                failure: failureFacts(error)
+            });
+            return { approved: false, origin: 'unavailable', reason: `remote approval failed — denied (fail-closed): ${failureCode(error)}` };
+        }
+        return waited.value;
+    }
+}
+/**
+ * One poll. Returns the terminal decision, or `null` while the approval is
+ * still pending (a 5xx, an unrecognised body or a transport error keeps it
+ * pending until the deadline denies). A failure caused by the wait's own
+ * signal propagates so the wait settles as cancelled or timed out.
+ */
+async function pollOnce(runtime, fetchImpl, pollUrl, auth, keys, signal) {
+    const polled = await settle(async () => {
+        const res = await fetchImpl(pollUrl, { method: 'GET', headers: { authorization: auth }, signal });
+        if (res.status === 401 || res.status === 403) {
+            return { approved: false, origin: 'unavailable', reason: 'remote approval unauthorized — denied (fail-closed)' };
+        }
+        if (!res.ok)
+            return null;
+        const body = RemoteApprovalPollResultSchema.safeParse(await res.json());
+        if (!body.success) {
+            getLogger(LOGGER_ID, runtime).warn('remote approval poll answered an unrecognised body — still pending', {
+                roomId: keys.roomId,
+                requestId: keys.requestId,
+                paths: body.error.issues.map((issue) => issue.path.join('.'))
+            });
+            return null;
+        }
+        const poll = body.data;
+        if (poll.status === 'approved') {
+            const decision = { approved: true, origin: poll.origin };
+            if (poll.reason)
+                decision.reason = poll.reason;
+            return decision;
+        }
+        if (poll.status === 'denied') {
+            return { approved: false, origin: poll.origin, reason: poll.reason ?? 'Approval was not granted.' };
+        }
+        if (poll.status === 'not-found') {
+            return { approved: false, origin: 'unavailable', reason: 'remote approval not found — denied (fail-closed)' };
+        }
+        return null;
+    });
+    if (!polled.ok) {
+        const error = polled.cause;
+        if (signal.aborted)
+            throw error;
+        getLogger(LOGGER_ID, runtime).warn('remote approval poll failed in transport — still pending until the deadline', {
+            roomId: keys.roomId,
+            requestId: keys.requestId,
+            failure: failureFacts(error)
+        });
+        return null;
+    }
+    return polled.value;
+}
+/** Resolve chat's approvals client from the runtime (the `chat` plugin registers it). */
+export async function getVibesChatApprovalsClient(runtime) {
+    return getVibesClient(CHAT_APPROVALS_CLIENT_ID, runtime);
+}
+//# sourceMappingURL=approvals-client.js.map

package/dist/approval/approvals-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals-client.js","sourceRoot":"","sources":["../../src/approval/approvals-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EACN,iBAAiB,EACjB,cAAc,EAEd,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACN,eAAe,EACf,MAAM,EACN,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAEhB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAEhE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,+BAA+B,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EACN,oCAAoC,EACpC,8BAA8B,EAI9B,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AAEzD,MAAM,CAAC,MAAM,6BAA6B,GAAG,kBAAkB,CAAC;IAC/D,IAAI,EAAE,gBAAgB;IACtB,EAAE,EAAE,wBAAwB;IAC5B,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACV,4FAA4F;CAC7F,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;CACtC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,WAAW,CAAC;IAC7D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,CAAC;SACN,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAChD;SACA,QAAQ,EAAE;IACZ,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAGH,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAAc;IACnC,OAAO,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,oGAAoG;AACpG,SAAS,WAAW,CAAC,KAAc;IAClC,MAAM,KAAK,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,MAAM,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAC;AAC7C,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC,qFAAqF;AACrF,MAAM,OAAO,+BAAgC,SAAQ,eAAe;IAC1D,MAAM,CAAqB;IACpC,YAAY,MAA0B;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC;QAClF,KAAK,CAAC,6CAA6C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,EAAE;YACvF,MAAM,EAAE,gCAAgC;YACxC,OAAO,EAAE,EAAE,KAAK,EAAE;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;CACD;AAED,MAAM,OAAO,mBAAoB,SAAQ,iBAAiB;IACxC,OAAO,CAA6B;IAErD,YACC,aAAsC,EAAE,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC9F,OAAqB,EACrB,OAAoB;QAEpB,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,+BAA+B,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpF,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,aAAa;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QAC/C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,YAAY;QACzB,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACzC,CAAC;QACD,IAAI,CAAC;YACJ,OAAO,CAAC,CAAC,MAAM,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CAAC,wDAAwD,EAAE,aAAa,EAAE;gBAClG,MAAM,EAAE,0BAA0B;gBAClC,KAAK,EAAE,KAAK;aACZ,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,SAAS;QAChB,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,OAAkC,EAAE,MAAoB;QAClE,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC3C,KAAK,EAAE,MAAM,IAAI,CAAC,YAAY,EAAE;YAChC,IAAI,EAAE,MAAM,IAAI,CAAC,aAAa,EAAE;SAChC,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,2EAA2E,EAAE;gBACxF,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC;aAC1C,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBAChD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;aACxF,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,IAAuC,EAAE;YACvE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,oCAAoC,EAAE,EAAE;gBACpF,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACR,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,cAAc,EAAE,kBAAkB;iBAClC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM;aACN,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBACpF,OAAO,QAAQ,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,GAAG,gCAAgC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,mEAAmE,EAAE;oBAChF,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;iBAC7D,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClH,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAClB,IAA2C,EAC3C,OAA+E;QAE/E,MAAM,SAAS,GACd,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,yBAAyB,CAAC;QAClF,MAAM,cAAc,GACnB,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,qBAAqB,IAAI,sBAAsB,CAAC;QACzF,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,6DAA6D,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACrJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,4DAA4D,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACxJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,kGAAkG;YAClG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;QAC1H,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,GAAG,IAAI,GAAG,oCAAoC,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1I,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAEzC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;YACtC,MAAM,WAAW,GAAuB;gBACvC,SAAS;gBACT,MAAM,EAAE,mBAAmB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE;aAC1D,CAAC;YACF,IAAI,MAAM;gBAAE,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC;YACxC,OAAO,MAAM,SAAS,CAAC,IAAI,CAC1B,KAAK,EAAE,UAAU,EAAE,EAAE;gBACpB,SAAS,CAAC;oBACT,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;oBAC1F,IAAI,QAAQ;wBAAE,OAAO,QAAQ,CAAC;oBAC9B,MAAM,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;gBACnD,CAAC;YACF,CAAC,EACD,WAAW,CACX,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,IAAI,KAAK,YAAY,KAAK,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACpF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;YAC3G,CAAC;YACD,IAAI,MAAM,EAAE,OAAO,IAAI,CAAC,KAAK,YAAY,KAAK,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;gBAC3G,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;YAC7G,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;gBACjE,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC;aAC5B,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,kDAAkD,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACnI,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC;IACrB,CAAC;CACD;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CACtB,OAAmB,EACnB,SAAmE,EACnE,OAAe,EACf,IAAY,EACZ,IAA2C,EAC3C,MAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,IAA0C,EAAE;QAC5E,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAClG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC9C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;QAClH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,8BAA8B,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,oEAAoE,EAAE;gBACxG,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAyB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/E,IAAI,IAAI,CAAC,MAAM;gBAAE,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC/C,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,2BAA2B,EAAE,CAAC;QACrG,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACjC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;QAC/G,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,KAAK,CAAC;QAChC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,6EAA6E,EAAE;YACjH,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACrB,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAmB;IACpE,OAAO,cAAc,CAAsB,wBAAwB,EAAE,OAAO,CAAC,CAAC;AAC/E,CAAC"}

package/dist/approval/chat-room.approval-channel.impl.d.ts

@@ -0,0 +1,11 @@
+import type { KindContext } from '@vibesdotdev/kernel/schemas/kind';
+import type { RuntimeDescriptor } from '@vibesdotdev/kernel/schemas/descriptor';
+import type { ToolApprovalChannelInterface } from '@vibesdotdev/tools/agents/approval/channel';
+export default class ChatRoomApprovalChannel implements ToolApprovalChannelInterface {
+    #private;
+    constructor(_descriptor: RuntimeDescriptor, context: KindContext);
+    createRuntime(correlation: Record<string, string>, options?: {
+        signal?: AbortSignal;
+    }): import("@vibesdotdev/tools/agents/approval/types").ToolApprovalRuntime | undefined;
+}
+//# sourceMappingURL=chat-room.approval-channel.impl.d.ts.map

package/dist/approval/chat-room.approval-channel.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-room.approval-channel.impl.d.ts","sourceRoot":"","sources":["../../src/approval/chat-room.approval-channel.impl.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAW/F,MAAM,CAAC,OAAO,OAAO,uBAAwB,YAAW,4BAA4B;;gBAGvE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,WAAW;IAUhE,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE;CAoBrF"}

package/dist/approval/chat-room.approval-channel.impl.js

@@ -0,0 +1,39 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { createRemoteBackedApprovalRuntime } from "./remote.js";
+import { CHAT_ROOM_APPROVAL_HOST_CONTEXT_ID, ChatRoomApprovalHostSchema } from "./chat-room.js";
+export default class ChatRoomApprovalChannel {
+    #host;
+    constructor(_descriptor, context) {
+        const host = ChatRoomApprovalHostSchema.safeParse(context[CHAT_ROOM_APPROVAL_HOST_CONTEXT_ID]);
+        if (!host.success) {
+            throw new CapabilityError('Chat approval host is unavailable or invalid.', 'UNAVAILABLE', {
+                reason: 'chat-approval-host-invalid'
+            });
+        }
+        this.#host = host.data;
+    }
+    createRuntime(correlation, options) {
+        const roomId = correlation.roomId?.trim();
+        const runId = correlation.runId?.trim();
+        const userId = correlation.userId?.trim();
+        const messageId = correlation.messageId?.trim();
+        const agentId = correlation.agentId?.trim();
+        const requestTarget = correlation.requestTarget === 'hq' ? 'hq' : 'chat';
+        if (!roomId || !runId || !userId)
+            return undefined;
+        const context = {
+            roomId,
+            runId,
+            userId,
+            requestTarget
+        };
+        if (messageId)
+            context.messageId = messageId;
+        if (agentId)
+            context.agentId = agentId;
+        if (options?.signal)
+            context.signal = options.signal;
+        return createRemoteBackedApprovalRuntime(this.#host, context);
+    }
+}
+//# sourceMappingURL=chat-room.approval-channel.impl.js.map

package/dist/approval/chat-room.approval-channel.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-room.approval-channel.impl.js","sourceRoot":"","sources":["../../src/approval/chat-room.approval-channel.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAItD,OAAO,EACN,iCAAiC,EAEjC,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,kCAAkC,EAClC,0BAA0B,EAE1B,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,OAAO,OAAO,uBAAuB;IAClC,KAAK,CAAuB;IAErC,YAAY,WAA8B,EAAE,OAAoB;QAC/D,MAAM,IAAI,GAAG,0BAA0B,CAAC,SAAS,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC/F,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,+CAA+C,EAAE,aAAa,EAAE;gBACzF,MAAM,EAAE,4BAA4B;aACpC,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;IAED,aAAa,CAAC,WAAmC,EAAE,OAAkC;QACpF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,WAAW,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACzE,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAEnD,MAAM,OAAO,GAAiC;YAC7C,MAAM;YACN,KAAK;YACL,MAAM;YACN,aAAa;SACb,CAAC;QACF,IAAI,SAAS;YAAE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7C,IAAI,OAAO;YAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;QACvC,IAAI,OAAO,EAAE,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACrD,OAAO,iCAAiC,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;CACD"}

package/dist/approval/chat-room.d.ts

@@ -0,0 +1,47 @@
+export { ChatRoomApprovalHostSchema, type ChatRoomApprovalHost } from '../schemas/approval-host.ts';
+export declare const CHAT_ROOM_APPROVAL_CHANNEL_ID = "chat-room";
+export declare const CHAT_ROOM_APPROVAL_HOST_CONTEXT_ID = "chat/approval-host";
+/**
+ * Host transport for Chat's room-scoped approval channel.
+ *
+ * Chat owns correlation, previewing, and fail-closed behavior. A host supplies
+ * only the durable/remote transport appropriate to its runtime: a local
+ * approval store and publisher, or an authenticated HTTP awaiter.
+ */
+export declare const chatRoomApprovalHostContextDescriptor: {
+    id: string;
+    kind: "context";
+    name?: string | undefined;
+    description?: string | undefined;
+    tags?: string[] | undefined;
+    hardware?: string[] | undefined;
+    enabled?: boolean | undefined;
+    priority?: number | undefined;
+    capabilityId?: string | undefined;
+    requiredContext?: string[] | undefined;
+    optionalContext?: string[] | undefined;
+    retention?: string | {
+        reason: string;
+        maxAgeDays?: number | undefined;
+        maxEntries?: number | undefined;
+        maxBytes?: number | undefined;
+        cascadeFrom?: string | undefined;
+        ageField?: string | undefined;
+        enforcedBy?: string | undefined;
+    } | undefined;
+    valueKind?: "data" | "service" | undefined;
+    valueSchema?: unknown;
+    config?: {
+        sources: ("literal" | "workspace" | "floor")[];
+        subset?: true | undefined;
+    } | undefined;
+};
+export declare const chatRoomApprovalChannelDescriptor: {
+    readonly id: "chat-room";
+    readonly kind: "tools/approval-channel";
+    readonly enabled: true;
+    readonly name: "Chat room approval";
+    readonly description: "Requests a tool approval decision from the authorized participant in a chat room.";
+    readonly requiredContext: readonly ["chat/approval-host"];
+};
+//# sourceMappingURL=chat-room.d.ts.map

package/dist/approval/chat-room.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-room.d.ts","sourceRoot":"","sources":["../../src/approval/chat-room.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,0BAA0B,EAAE,KAAK,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEpG,eAAO,MAAM,6BAA6B,cAAc,CAAC;AACzD,eAAO,MAAM,kCAAkC,uBAAuB,CAAC;AAEvE;;;;;;GAMG;AAGH,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;;;;;;;;CAIhD,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;;CAOR,CAAC"}

package/dist/approval/chat-room.js

@@ -0,0 +1,24 @@
+import { createContextDescriptor } from '@vibesdotdev/kernel/factory/context';
+export { ChatRoomApprovalHostSchema } from "../schemas/approval-host.js";
+export const CHAT_ROOM_APPROVAL_CHANNEL_ID = 'chat-room';
+export const CHAT_ROOM_APPROVAL_HOST_CONTEXT_ID = 'chat/approval-host';
+/**
+ * Host transport for Chat's room-scoped approval channel.
+ *
+ * Chat owns correlation, previewing, and fail-closed behavior. A host supplies
+ * only the durable/remote transport appropriate to its runtime: a local
+ * approval store and publisher, or an authenticated HTTP awaiter.
+ */
+export const chatRoomApprovalHostContextDescriptor = createContextDescriptor({
+    id: CHAT_ROOM_APPROVAL_HOST_CONTEXT_ID,
+    description: 'Host transport used by the Chat-owned room approval channel to persist and await decisions.'
+});
+export const chatRoomApprovalChannelDescriptor = {
+    id: CHAT_ROOM_APPROVAL_CHANNEL_ID,
+    kind: 'tools/approval-channel',
+    enabled: true,
+    name: 'Chat room approval',
+    description: 'Requests a tool approval decision from the authorized participant in a chat room.',
+    requiredContext: [CHAT_ROOM_APPROVAL_HOST_CONTEXT_ID]
+};
+//# sourceMappingURL=chat-room.js.map

package/dist/approval/chat-room.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-room.js","sourceRoot":"","sources":["../../src/approval/chat-room.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE9E,OAAO,EAAE,0BAA0B,EAA6B,MAAM,6BAA6B,CAAC;AAEpG,MAAM,CAAC,MAAM,6BAA6B,GAAG,WAAW,CAAC;AACzD,MAAM,CAAC,MAAM,kCAAkC,GAAG,oBAAoB,CAAC;AAEvE;;;;;;GAMG;AAGH,MAAM,CAAC,MAAM,qCAAqC,GAAG,uBAAuB,CAAC;IAC5E,EAAE,EAAE,kCAAkC;IACtC,WAAW,EACV,6FAA6F;CAC9F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAChD,EAAE,EAAE,6BAA6B;IACjC,IAAI,EAAE,wBAAwB;IAC9B,OAAO,EAAE,IAAI;IACb,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,mFAAmF;IAChG,eAAe,EAAE,CAAC,kCAAkC,CAAC;CAChB,CAAC"}

package/dist/approval/index.d.ts

@@ -0,0 +1,4 @@
+export { CHAT_ROOM_APPROVAL_CHANNEL_ID, CHAT_ROOM_APPROVAL_HOST_CONTEXT_ID, chatRoomApprovalChannelDescriptor, chatRoomApprovalHostContextDescriptor, type ChatRoomApprovalHost } from './chat-room.ts';
+export { REMOTE_APPROVAL_INTERNAL_PATH_PREFIX, RemoteApprovalOpenRequestSchema, RemoteApprovalOpenResultSchema, RemoteApprovalPollResultSchema, type RemoteApprovalDecisionAwait, type RemoteApprovalOpenRequest, type RemoteApprovalOpenResult, type RemoteApprovalPollResult } from './remote.ts';
+export { CHAT_APPROVALS_CLIENT_ID, ChatApprovalsClient, getVibesChatApprovalsClient, type ChatApprovalsClientOptions } from './approvals-client.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/approval/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/approval/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,6BAA6B,EAC7B,kCAAkC,EAClC,iCAAiC,EACjC,qCAAqC,EACrC,KAAK,oBAAoB,EACzB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACN,oCAAoC,EACpC,+BAA+B,EAC/B,8BAA8B,EAC9B,8BAA8B,EAC9B,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,MAAM,aAAa,CAAC;AAErB,OAAO,EACN,wBAAwB,EACxB,mBAAmB,EACnB,2BAA2B,EAC3B,KAAK,0BAA0B,EAC/B,MAAM,uBAAuB,CAAC"}

package/dist/approval/index.js

@@ -0,0 +1,4 @@
+export { CHAT_ROOM_APPROVAL_CHANNEL_ID, CHAT_ROOM_APPROVAL_HOST_CONTEXT_ID, chatRoomApprovalChannelDescriptor, chatRoomApprovalHostContextDescriptor } from "./chat-room.js";
+export { REMOTE_APPROVAL_INTERNAL_PATH_PREFIX, RemoteApprovalOpenRequestSchema, RemoteApprovalOpenResultSchema, RemoteApprovalPollResultSchema } from "./remote.js";
+export { CHAT_APPROVALS_CLIENT_ID, ChatApprovalsClient, getVibesChatApprovalsClient } from "./approvals-client.js";
+//# sourceMappingURL=index.js.map

package/dist/approval/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/approval/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,6BAA6B,EAC7B,kCAAkC,EAClC,iCAAiC,EACjC,qCAAqC,EAErC,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACN,oCAAoC,EACpC,+BAA+B,EAC/B,8BAA8B,EAC9B,8BAA8B,EAK9B,MAAM,aAAa,CAAC;AAErB,OAAO,EACN,wBAAwB,EACxB,mBAAmB,EACnB,2BAA2B,EAE3B,MAAM,uBAAuB,CAAC"}

package/dist/approval/remote.d.ts

@@ -0,0 +1,148 @@
+/**
+ * Remote approval: the wire contract and the behavior that runs against it
+ * (ai-web ↔ chat-web).
+ *
+ * A live {@link ToolApprovalDecision} producer cannot cross an app boundary, so
+ * a remote approval travels as data: the executing app opens a pending approval
+ * on the app that owns the approval store (chat-web serves
+ * `/api/internal/tool-approvals`), then polls for a terminal decision. Chat owns
+ * correlation and fail-closed behavior for its room channel, so it owns this
+ * exchange:
+ *
+ *   - the wire schemas (open request, open result, poll result) and the
+ *     internal path prefix;
+ *   - {@link RemoteApprovalDecisionAwait}, the await surface both sides type
+ *     against;
+ *   - `createRemoteBackedApprovalRuntime`, which adapts any awaiter into the
+ *     {@link ToolApprovalRuntime} the agent loop understands (chat resolves it
+ *     against its own approval store; ai-web against the HTTP awaiter below);
+ *   - the HTTP awaiter ai-web uses is the `chat.approvals` runtime client
+ *     (`./approvals-client.ts`), which opens and polls chat-web's internal
+ *     tool-approvals API with a service token.
+ *
+ * Every path that is not an explicit approval resolves to a deny-shaped
+ * decision (fail-closed). `deferred` means a durable authority accepted the
+ * request and will decide later; it is neither approval nor denial. Nothing
+ * here executes a tool. `fetch`, `setTimeout` and `crypto.subtle` are
+ * web-standard, so the module is universal.
+ */
+import * as z from 'zod/v4';
+import { type ToolApprovalDecision } from '@vibesdotdev/ai-schemas/agents/approval/types';
+import type { ToolApprovalRuntime } from '@vibesdotdev/ai/tools/approval/types';
+/** Internal path prefix the approval-store owner serves (service-token only). */
+export declare const REMOTE_APPROVAL_INTERNAL_PATH_PREFIX: "/api/internal/tool-approvals";
+/** Body for opening a pending approval on the approval-store owner. */
+export declare const RemoteApprovalOpenRequestSchema: z.ZodObject<{
+    requestId: z.ZodString;
+    roomId: z.ZodString;
+    runId: z.ZodString;
+    userId: z.ZodString;
+    toolId: z.ZodString;
+    toolName: z.ZodString;
+    argsPreview: z.ZodString;
+    argsFingerprint: z.ZodString;
+    messageId: z.ZodOptional<z.ZodString>;
+    agentId: z.ZodOptional<z.ZodString>;
+    requestTarget: z.ZodOptional<z.ZodEnum<{
+        chat: "chat";
+        hq: "hq";
+    }>>;
+    toolCallId: z.ZodOptional<z.ZodString>;
+    workspaceAccess: z.ZodOptional<z.ZodObject<{
+        fromLabel: z.ZodString;
+        toLabel: z.ZodString;
+        toRoot: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type RemoteApprovalOpenRequest = z.infer<typeof RemoteApprovalOpenRequestSchema>;
+/** Poll / get result for one (roomId, requestId). */
+export declare const RemoteApprovalPollResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    status: z.ZodLiteral<"pending">;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"approved">;
+    reason: z.ZodOptional<z.ZodString>;
+    origin: z.ZodOptional<z.ZodEnum<{
+        unavailable: "unavailable";
+        cancelled: "cancelled";
+        timeout: "timeout";
+        human: "human";
+    }>>;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"denied">;
+    reason: z.ZodOptional<z.ZodString>;
+    origin: z.ZodOptional<z.ZodEnum<{
+        unavailable: "unavailable";
+        cancelled: "cancelled";
+        timeout: "timeout";
+        human: "human";
+    }>>;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"not-found">;
+}, z.core.$strip>], "status">;
+export type RemoteApprovalPollResult = z.infer<typeof RemoteApprovalPollResultSchema>;
+/**
+ * Outcome of opening a remote approval. `failed` means the pause cannot be
+ * trusted and the caller must deny; `deferred` means a durable authority holds
+ * the request and will decide later.
+ */
+export declare const RemoteApprovalOpenResultSchema: z.ZodEnum<{
+    failed: "failed";
+    deferred: "deferred";
+    opened: "opened";
+}>;
+export type RemoteApprovalOpenResult = z.infer<typeof RemoteApprovalOpenResultSchema>;
+/**
+ * Await surface for a remote decision. Implementations may poll HTTP or read a
+ * shared store.
+ *
+ * Contract: never report "open" without a durable pending record the user can
+ * decide. Failures resolve to a deny-shaped {@link ToolApprovalDecision}.
+ */
+export interface RemoteApprovalDecisionAwait {
+    /**
+     * Persist a pending approval remotely. `failed` means the pause cannot be
+     * trusted → caller must deny (fail-closed).
+     */
+    open(request: RemoteApprovalOpenRequest, signal?: AbortSignal): Promise<RemoteApprovalOpenResult>;
+    /**
+     * Wait for a terminal decision. Timeout, abort, not-found, and transport
+     * errors MUST resolve to `{ approved: false, origin: 'unavailable', ... }` — never throw open.
+     */
+    awaitDecision(keys: {
+        roomId: string;
+        requestId: string;
+    }, options?: {
+        timeoutMs?: number;
+        pollIntervalMs?: number;
+        signal?: AbortSignal;
+    }): Promise<ToolApprovalDecision>;
+}
+export type RemoteApprovalRuntimeContext = {
+    roomId: string;
+    runId: string;
+    userId: string;
+    messageId?: string;
+    agentId?: string;
+    requestTarget?: 'chat' | 'hq';
+    /** Optional args preview helper; default is a tight JSON stringify + bound. */
+    previewArgs?: (args: ApprovalArguments) => string;
+    signal?: AbortSignal;
+};
+declare const ApprovalArgumentsSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+type ApprovalArguments = z.infer<typeof ApprovalArgumentsSchema>;
+/**
+ * Stable SHA-256 of a tool id and its canonical (key-order independent)
+ * arguments. This is the `argsFingerprint` on the open request.
+ */
+export declare function fingerprintToolApprovalArgs(toolId: string, args: ApprovalArguments): Promise<string>;
+/**
+ * Adapt a {@link RemoteApprovalDecisionAwait} into a {@link ToolApprovalRuntime}.
+ *
+ * The request id is stable for `(run, tool call, canonical arguments)`, so a
+ * resumed execution that asks again consumes the same terminal decision.
+ * Open failure denies immediately without polling; a `deferred` open returns
+ * the typed deferred decision (neither approval nor denial).
+ */
+export declare function createRemoteBackedApprovalRuntime(awaiter: RemoteApprovalDecisionAwait, context: RemoteApprovalRuntimeContext): ToolApprovalRuntime;
+export {};
+//# sourceMappingURL=remote.d.ts.map

package/dist/approval/remote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../../src/approval/remote.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAGN,KAAK,oBAAoB,EAEzB,MAAM,+CAA+C,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAEhF,iFAAiF;AACjF,eAAO,MAAM,oCAAoC,EAAG,8BAAuC,CAAC;AAE5F,uEAAuE;AACvE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;iBAgB1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,qDAAqD;AACrD,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;6BAKzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;EAA2C,CAAC;AACvF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;;;;GAMG;AACH,MAAM,WAAW,2BAA2B;IAC3C;;;OAGG;IACH,IAAI,CAAC,OAAO,EAAE,yBAAyB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAElG;;;OAGG;IACH,aAAa,CACZ,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAC3C,OAAO,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,WAAW,CAAC;KACrB,GACC,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACjC;AAED,MAAM,MAAM,4BAA4B,GAAG;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,+EAA+E;IAC/E,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,iBAAiB,KAAK,MAAM,CAAC;IAClD,MAAM,CAAC,EAAE,WAAW,CAAC;CACrB,CAAC;AAEF,QAAA,MAAM,uBAAuB,wCAAoC,CAAC;AAClE,KAAK,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAUjE;;;GAGG;AACH,wBAAsB,2BAA2B,CAChD,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,iBAAiB,GACrB,OAAO,CAAC,MAAM,CAAC,CAMjB;AAWD;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAChD,OAAO,EAAE,2BAA2B,EACpC,OAAO,EAAE,4BAA4B,GACnC,mBAAmB,CAuDrB"}