agentgate-runtime-control 2.13.10 → 2.13.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentgate-runtime-control",
-  "version": "2.13.10",
+  "version": "2.13.11",
   "type": "module",
   "description": "Runtime control plane and SaaS governance layer for AI agent tool execution",
   "exports": {

package/src/approval.js

@@ -12,10 +12,18 @@ export class ApprovalStore {
 
 export function createApprovalStore(options = {}) { return options.store || new ApprovalStore(options.limit || 500); }
 
+// Default: a pending approval expires after 15 minutes if nobody acts on it.
+// Pass ttlMs: null (or 0) to disable expiry for a given request.
+export const DEFAULT_APPROVAL_TTL_MS = 15 * 60 * 1000;
+
 export function createApprovalRequest(data = {}, store = new ApprovalStore()) {
+  const createdAt = new Date();
+  const ttlMs = data.ttlMs === undefined ? DEFAULT_APPROVAL_TTL_MS : data.ttlMs;
+  const expiresAt = ttlMs ? new Date(createdAt.getTime() + ttlMs).toISOString() : null;
   return store.add({
     id: data.id || `approval_${randomUUID()}`,
-    createdAt: new Date().toISOString(),
+    createdAt: createdAt.toISOString(),
+    expiresAt,
     status: APPROVAL_STATUS.PENDING,
     runId: data.runId,
     tenantId: data.tenantId || data.request?.tenantId || null,
@@ -27,4 +35,13 @@ export function createApprovalRequest(data = {}, store = new ApprovalStore()) {
   });
 }
 
+// A pending approval is expired once `expiresAt` has passed. Every approval
+// is single-use by construction: approve()/deny() flip `status` away from
+// PENDING synchronously (before any await), so a second call — concurrent
+// or not — always sees a non-pending status and is rejected. There is no
+// separate "already used" flag to track.
+export function isApprovalExpired(approval, now = Date.now()) {
+  return Boolean(approval?.expiresAt) && new Date(approval.expiresAt).getTime() <= now;
+}
+
 function clone(value) { try { return structuredClone(value); } catch { return JSON.parse(JSON.stringify(value)); } }

package/src/runtime.js

@@ -1,6 +1,6 @@
 import { evaluate } from './policy-engine.js';
 import { createPersistentRunStore, createPersistentApprovalStore } from './persistent-store.js';
-import { createApprovalStore, createApprovalRequest, APPROVAL_STATUS } from './approval.js';
+import { createApprovalStore, createApprovalRequest, APPROVAL_STATUS, isApprovalExpired } from './approval.js';
 
 export class RunStore {
   constructor(limit = 25000) { this.limit = limit; this.runs = []; }
@@ -45,6 +45,7 @@ export function createRuntime(options = {}) {
           decision: event.decision,
           risk: event.risk,
           reason: event.reason,
+          ttlMs: options.approvalTTLMs,
           metadata: { action: request.action || request.tool || null }
         }, approvalStore);
         event.status = 'pending_approval';
@@ -65,11 +66,28 @@ export function createRuntime(options = {}) {
     return { status: 'executed', value, agentgate: event };
   }
 
-  function approvals(status) { return approvalStore.list(status); }
-  function getApproval(id) { return approvalStore.get(id); }
+  // Lazily flips a PENDING-but-expired approval to EXPIRED and drops its
+  // pending execution, so a stale approval can never be actioned late.
+  function expireIfStale(approval) {
+    if (!approval || approval.status !== APPROVAL_STATUS.PENDING) return approval;
+    if (!isApprovalExpired(approval)) return approval;
+    approval.status = APPROVAL_STATUS.EXPIRED;
+    approval.resolvedAt = new Date().toISOString();
+    const item = pending.get(approval.id);
+    if (item) { item.event.status = 'expired'; item.event.approval = { status: approval.status, resolvedAt: approval.resolvedAt }; }
+    pending.delete(approval.id);
+    approvalStore.save?.();
+    return approval;
+  }
+
+  function approvals(status) {
+    approvalStore.list(APPROVAL_STATUS.PENDING).forEach(expireIfStale);
+    return approvalStore.list(status);
+  }
+  function getApproval(id) { return expireIfStale(approvalStore.get(id)); }
 
   async function approve(approvalId) {
-    const approval = approvalStore.get(approvalId);
+    const approval = expireIfStale(approvalStore.get(approvalId));
     if (!approval) return { ok: false, error: 'Approval not found' };
     if (approval.status !== APPROVAL_STATUS.PENDING) return { ok: false, error: `Approval is already ${approval.status}`, approval };
     const item = pending.get(approvalId);
@@ -99,7 +117,7 @@ export function createRuntime(options = {}) {
   }
 
   function deny(approvalId, reason = 'Denied by approver') {
-    const approval = approvalStore.get(approvalId);
+    const approval = expireIfStale(approvalStore.get(approvalId));
     if (!approval) return { ok: false, error: 'Approval not found' };
     if (approval.status !== APPROVAL_STATUS.PENDING) return { ok: false, error: `Approval is already ${approval.status}`, approval };
     const item = pending.get(approvalId);