airlock-bot 0.0.1 → 0.2.1

package/dist/hitl/providers/macos.js

@@ -0,0 +1,65 @@
+import { execFile } from 'child_process';
+import { childLogger } from '../../util/logger.js';
+const log = childLogger('hitl-macos');
+export class MacosHitlProvider {
+    approvalApi;
+    constructor(approvalApi) {
+        this.approvalApi = approvalApi;
+    }
+    init() {
+        log.info('macOS dialog HITL provider ready');
+        return Promise.resolve();
+    }
+    stop() {
+        return Promise.resolve();
+    }
+    async notify(requests) {
+        // Show each request as a separate dialog (in parallel)
+        await Promise.all(requests.map((req) => this.showDialog(req)));
+    }
+    showDialog(req) {
+        const argSummary = Object.entries(req.args)
+            .map(([k, v]) => {
+            const val = typeof v === 'string'
+                ? v.length > 100
+                    ? `${v.slice(0, 100)}...`
+                    : v
+                : JSON.stringify(v);
+            return `  ${k}: ${val}`;
+        })
+            .join('\n');
+        const timeoutSec = Math.ceil(req.timeoutMs / 1000);
+        const message = `Agent: ${req.agentId}\\nTool: ${req.tool}\\n\\n${argSummary}\\n\\nCode: ${req.code}`;
+        return new Promise((resolve) => {
+            execFile('osascript', [
+                '-e',
+                `display dialog "${message}" with title "Airlock Approval" buttons {"Deny", "Approve"} default button "Approve" with icon caution giving up after ${timeoutSec}`,
+            ], (err, stdout) => {
+                if (err) {
+                    // User closed the dialog or hit cancel — treat as deny
+                    log.info({ code: req.code }, 'macOS dialog dismissed, treating as deny');
+                    this.approvalApi.deny(req.code, 'Dialog dismissed');
+                    resolve();
+                    return;
+                }
+                const output = stdout.trim();
+                if (output.includes('gave up:true')) {
+                    log.info({ code: req.code }, 'macOS dialog timed out');
+                    // Let the engine's own timeout handle it
+                    resolve();
+                    return;
+                }
+                if (output.includes('Approve')) {
+                    log.info({ code: req.code }, 'Approved via macOS dialog');
+                    this.approvalApi.approve(req.code);
+                }
+                else {
+                    log.info({ code: req.code }, 'Denied via macOS dialog');
+                    this.approvalApi.deny(req.code, 'Denied via dialog');
+                }
+                resolve();
+            });
+        });
+    }
+}
+//# sourceMappingURL=macos.js.map

package/dist/hitl/providers/macos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"macos.js","sourceRoot":"","sources":["../../../src/hitl/providers/macos.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;AAEtC,MAAM,OAAO,iBAAiB;IACR;IAApB,YAAoB,WAAwB;QAAxB,gBAAW,GAAX,WAAW,CAAa;IAAG,CAAC;IAEhD,IAAI;QACF,GAAG,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC7C,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI;QACF,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAA4B;QACvC,uDAAuD;QACvD,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAEO,UAAU,CAAC,GAAqB;QACtC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;YACd,MAAM,GAAG,GACP,OAAO,CAAC,KAAK,QAAQ;gBACnB,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG;oBACd,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK;oBACzB,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACxB,OAAO,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;QAC1B,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,UAAU,GAAG,CAAC,OAAO,YAAY,GAAG,CAAC,IAAI,SAAS,UAAU,eAAe,GAAG,CAAC,IAAI,EAAE,CAAC;QAEtG,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,QAAQ,CACN,WAAW,EACX;gBACE,IAAI;gBACJ,mBAAmB,OAAO,0HAA0H,UAAU,EAAE;aACjK,EACD,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;gBACd,IAAI,GAAG,EAAE,CAAC;oBACR,uDAAuD;oBACvD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,0CAA0C,CAAC,CAAC;oBACzE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;oBACpD,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;oBACpC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;oBACvD,yCAAyC;oBACzC,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,2BAA2B,CAAC,CAAC;oBAC1D,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrC,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,yBAAyB,CAAC,CAAC;oBACxD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;gBACvD,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/hitl/providers/openclaw.d.ts

@@ -0,0 +1,21 @@
+import type { HitlProvider, HitlNotification, ApprovalApi } from './types.js';
+interface OpenClawConfig {
+    gateway_url: string;
+    token: string;
+    session_key: string;
+}
+export declare class OpenClawHitlProvider implements HitlProvider {
+    private config;
+    private approvalApi;
+    private ws?;
+    private reconnectTimer?;
+    private stopped;
+    constructor(config: OpenClawConfig, approvalApi: ApprovalApi);
+    init(): Promise<void>;
+    private connect;
+    private handleMessage;
+    notify(requests: HitlNotification[]): Promise<void>;
+    stop(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=openclaw.d.ts.map

package/dist/hitl/providers/openclaw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw.d.ts","sourceRoot":"","sources":["../../../src/hitl/providers/openclaw.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAK9E,UAAU,cAAc;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,oBAAqB,YAAW,YAAY;IAMrD,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,WAAW;IANrB,OAAO,CAAC,EAAE,CAAC,CAAiC;IAC5C,OAAO,CAAC,cAAc,CAAC,CAAiB;IACxC,OAAO,CAAC,OAAO,CAAS;gBAGd,MAAM,EAAE,cAAc,EACtB,WAAW,EAAE,WAAW;IAG5B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,OAAO,CAAC,OAAO;IAsCf,OAAO,CAAC,aAAa;IAgBrB,MAAM,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBnD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAMtB"}

package/dist/hitl/providers/openclaw.js

@@ -0,0 +1,106 @@
+import { WebSocket } from 'ws';
+import { formatBatch } from '../formatter.js';
+import { parseApprovalCommand } from '../parser.js';
+import { generateId } from '../../util/id.js';
+import { childLogger } from '../../util/logger.js';
+const log = childLogger('hitl-openclaw');
+export class OpenClawHitlProvider {
+    config;
+    approvalApi;
+    ws;
+    reconnectTimer;
+    stopped = false;
+    constructor(config, approvalApi) {
+        this.config = config;
+        this.approvalApi = approvalApi;
+    }
+    async init() {
+        await this.connect();
+    }
+    connect() {
+        return new Promise((resolve, reject) => {
+            const ws = new WebSocket(this.config.gateway_url, {
+                headers: { Authorization: `Bearer ${this.config.token}` },
+            });
+            ws.once('open', () => {
+                log.info({ url: this.config.gateway_url }, 'OpenClaw WS connected');
+                this.ws = ws;
+                resolve();
+            });
+            ws.once('error', (err) => {
+                log.error({ err }, 'OpenClaw WS connection error');
+                reject(err);
+            });
+            ws.on('message', (data) => {
+                try {
+                    const msg = JSON.parse(data.toString());
+                    this.handleMessage(msg);
+                }
+                catch {
+                    // ignore non-JSON
+                }
+            });
+            ws.on('close', () => {
+                if (!this.stopped) {
+                    log.warn('OpenClaw WS disconnected, reconnecting in 5s');
+                    this.reconnectTimer = setTimeout(() => {
+                        void this.connect().catch(() => { });
+                    }, 5000);
+                    this.reconnectTimer.unref();
+                }
+            });
+        });
+    }
+    handleMessage(msg) {
+        const text = extractText(msg);
+        if (!text)
+            return;
+        const parsed = parseApprovalCommand(text);
+        if (!parsed)
+            return;
+        if (parsed.type === 'approve') {
+            log.info({ code: parsed.code }, 'Approve via OpenClaw');
+            this.approvalApi.approve(parsed.code);
+        }
+        else {
+            log.info({ code: parsed.code }, 'Deny via OpenClaw');
+            this.approvalApi.deny(parsed.code, parsed.reason);
+        }
+    }
+    notify(requests) {
+        if (!this.ws || this.ws.readyState !== WebSocket.OPEN) {
+            log.error('OpenClaw WS not connected, cannot send HITL notification');
+            return Promise.resolve();
+        }
+        const message = formatBatch(requests);
+        const rpc = {
+            jsonrpc: '2.0',
+            id: generateId(),
+            method: 'chat.send',
+            params: {
+                sessionKey: this.config.session_key,
+                message,
+                idempotencyKey: generateId(),
+            },
+        };
+        this.ws.send(JSON.stringify(rpc));
+        return Promise.resolve();
+    }
+    stop() {
+        this.stopped = true;
+        clearTimeout(this.reconnectTimer);
+        this.ws?.close();
+        return Promise.resolve();
+    }
+}
+function extractText(msg) {
+    // Try common message shapes
+    const text = msg['text'] ?? msg['content'] ?? msg['message'] ?? msg['params'];
+    if (typeof text === 'string')
+        return text;
+    if (typeof text === 'object' && text !== null) {
+        return extractText(text);
+    }
+    return null;
+}
+//# sourceMappingURL=openclaw.js.map

package/dist/hitl/providers/openclaw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw.js","sourceRoot":"","sources":["../../../src/hitl/providers/openclaw.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,MAAM,GAAG,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;AAQzC,MAAM,OAAO,oBAAoB;IAMrB;IACA;IANF,EAAE,CAAkC;IACpC,cAAc,CAAkB;IAChC,OAAO,GAAG,KAAK,CAAC;IAExB,YACU,MAAsB,EACtB,WAAwB;QADxB,WAAM,GAAN,MAAM,CAAgB;QACtB,gBAAW,GAAX,WAAW,CAAa;IAC/B,CAAC;IAEJ,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAEO,OAAO;QACb,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;gBAChD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE;aAC1D,CAAC,CAAC;YAEH,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;gBACnB,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,uBAAuB,CAAC,CAAC;gBACpE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAC9B,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAC;gBACnD,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAqB,EAAE,EAAE;gBACzC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAA4B,CAAC;oBACnE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,kBAAkB;gBACpB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBAClB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,GAAG,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;oBACzD,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;wBACpC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACtC,CAAC,EAAE,IAAI,CAAC,CAAC;oBACT,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;gBAC9B,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,GAA4B;QAChD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;YACxD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAC;YACrD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,MAAM,CAAC,QAA4B;QACjC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACtD,GAAG,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;YACtE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG;YACV,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,UAAU,EAAE;YAChB,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE;gBACN,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gBACnC,OAAO;gBACP,cAAc,EAAE,UAAU,EAAE;aAC7B;SACF,CAAC;QAEF,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAED,SAAS,WAAW,CAAC,GAA4B;IAC/C,4BAA4B;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9E,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,WAAW,CAAC,IAA+B,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/hitl/providers/slack.d.ts

@@ -0,0 +1,12 @@
+import type { HitlProvider, HitlNotification } from './types.js';
+export interface SlackHitlConfig {
+    webhook_url: string;
+}
+export declare class SlackHitlProvider implements HitlProvider {
+    private cfg;
+    constructor(cfg: SlackHitlConfig);
+    init(): Promise<void>;
+    stop(): Promise<void>;
+    notify(requests: HitlNotification[]): Promise<void>;
+}
+//# sourceMappingURL=slack.d.ts.map

package/dist/hitl/providers/slack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/hitl/providers/slack.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAIjE,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,iBAAkB,YAAW,YAAY;IACxC,OAAO,CAAC,GAAG;gBAAH,GAAG,EAAE,eAAe;IAElC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAErB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAErB,MAAM,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAc1D"}

package/dist/hitl/providers/slack.js

@@ -0,0 +1,24 @@
+import { formatBatch } from '../formatter.js';
+import { childLogger } from '../../util/logger.js';
+const log = childLogger('hitl-slack');
+export class SlackHitlProvider {
+    cfg;
+    constructor(cfg) {
+        this.cfg = cfg;
+    }
+    async init() { }
+    async stop() { }
+    async notify(requests) {
+        const text = formatBatch(requests);
+        const body = JSON.stringify({ text });
+        const res = await fetch(this.cfg.webhook_url, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body,
+        });
+        if (!res.ok) {
+            log.warn({ status: res.status }, 'Slack webhook returned non-2xx');
+        }
+    }
+}
+//# sourceMappingURL=slack.js.map

package/dist/hitl/providers/slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.js","sourceRoot":"","sources":["../../../src/hitl/providers/slack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;AAMtC,MAAM,OAAO,iBAAiB;IACR;IAApB,YAAoB,GAAoB;QAApB,QAAG,GAAH,GAAG,CAAiB;IAAG,CAAC;IAE5C,KAAK,CAAC,IAAI,KAAmB,CAAC;IAE9B,KAAK,CAAC,IAAI,KAAmB,CAAC;IAE9B,KAAK,CAAC,MAAM,CAAC,QAA4B;QACvC,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,gCAAgC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;CACF"}

package/dist/hitl/providers/stdio.d.ts

@@ -0,0 +1,12 @@
+import type { Readable } from 'stream';
+import type { HitlProvider, HitlNotification, ApprovalApi } from './types.js';
+export declare class StdioHitlProvider implements HitlProvider {
+    private approvalApi;
+    private inputStream;
+    private rl?;
+    constructor(approvalApi: ApprovalApi, inputStream?: Readable);
+    init(): Promise<void>;
+    notify(requests: HitlNotification[]): Promise<void>;
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=stdio.d.ts.map

package/dist/hitl/providers/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../../src/hitl/providers/stdio.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAGvC,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAK9E,qBAAa,iBAAkB,YAAW,YAAY;IAIlD,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,WAAW;IAJrB,OAAO,CAAC,EAAE,CAAC,CAAqB;gBAGtB,WAAW,EAAE,WAAW,EACxB,WAAW,GAAE,QAA+C;IAGtE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBrB,MAAM,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAItB"}

package/dist/hitl/providers/stdio.js

@@ -0,0 +1,41 @@
+import * as readline from 'readline';
+import { formatBatch } from '../formatter.js';
+import { parseApprovalCommand } from '../parser.js';
+import { childLogger } from '../../util/logger.js';
+const log = childLogger('hitl-stdio');
+export class StdioHitlProvider {
+    approvalApi;
+    inputStream;
+    rl;
+    constructor(approvalApi, inputStream = process.stdin) {
+        this.approvalApi = approvalApi;
+        this.inputStream = inputStream;
+    }
+    init() {
+        this.rl = readline.createInterface({ input: this.inputStream, terminal: false });
+        this.rl.on('line', (line) => {
+            const parsed = parseApprovalCommand(line);
+            if (!parsed)
+                return;
+            if (parsed.type === 'approve') {
+                log.info({ code: parsed.code }, 'Approve received via stdio');
+                this.approvalApi.approve(parsed.code);
+            }
+            else {
+                log.info({ code: parsed.code }, 'Deny received via stdio');
+                this.approvalApi.deny(parsed.code, parsed.reason);
+            }
+        });
+        log.info('Stdio HITL provider ready. Type: approve <CODE> or deny <CODE>');
+        return Promise.resolve();
+    }
+    notify(requests) {
+        process.stderr.write('\n' + formatBatch(requests) + '\n\n');
+        return Promise.resolve();
+    }
+    stop() {
+        this.rl?.close();
+        return Promise.resolve();
+    }
+}
+//# sourceMappingURL=stdio.js.map

package/dist/hitl/providers/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../../src/hitl/providers/stdio.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AAErC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;AAEtC,MAAM,OAAO,iBAAiB;IAIlB;IACA;IAJF,EAAE,CAAsB;IAEhC,YACU,WAAwB,EACxB,cAAwB,OAAO,CAAC,KAA4B;QAD5D,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAiD;IACnE,CAAC;IAEJ,IAAI;QACF,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM;gBAAE,OAAO;YAEpB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,4BAA4B,CAAC,CAAC;gBAC9D,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBAC3D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC3E,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,QAA4B;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC;QAC5D,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI;QACF,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/hitl/providers/telegram.d.ts

@@ -0,0 +1,22 @@
+import type { HitlProvider, HitlNotification, ApprovalApi } from './types.js';
+interface TelegramConfig {
+    bot_token: string;
+    chat_id: string;
+}
+export declare class TelegramHitlProvider implements HitlProvider {
+    private config;
+    private approvalApi;
+    private polling;
+    private lastUpdateId;
+    private pollTimer?;
+    constructor(config: TelegramConfig, approvalApi: ApprovalApi);
+    private get apiBase();
+    init(): Promise<void>;
+    notify(requests: HitlNotification[]): Promise<void>;
+    private schedulePoll;
+    private poll;
+    private handleUpdate;
+    stop(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=telegram.d.ts.map

package/dist/hitl/providers/telegram.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telegram.d.ts","sourceRoot":"","sources":["../../../src/hitl/providers/telegram.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAK9E,UAAU,cAAc;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,oBAAqB,YAAW,YAAY;IAMrD,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,WAAW;IANrB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,SAAS,CAAC,CAAiB;gBAGzB,MAAM,EAAE,cAAc,EACtB,WAAW,EAAE,WAAW;IAGlC,OAAO,KAAK,OAAO,GAElB;IAED,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAOf,MAAM,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAYzD,OAAO,CAAC,YAAY;YAQN,IAAI;IAoBlB,OAAO,CAAC,YAAY;IAyBpB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAKtB"}

package/dist/hitl/providers/telegram.js

@@ -0,0 +1,87 @@
+import { formatBatch } from '../formatter.js';
+import { parseApprovalCommand } from '../parser.js';
+import { childLogger } from '../../util/logger.js';
+const log = childLogger('hitl-telegram');
+export class TelegramHitlProvider {
+    config;
+    approvalApi;
+    polling = false;
+    lastUpdateId = 0;
+    pollTimer;
+    constructor(config, approvalApi) {
+        this.config = config;
+        this.approvalApi = approvalApi;
+    }
+    get apiBase() {
+        return `https://api.telegram.org/bot${this.config.bot_token}`;
+    }
+    init() {
+        this.polling = true;
+        this.schedulePoll();
+        log.info({ chat_id: this.config.chat_id }, 'Telegram HITL provider started');
+        return Promise.resolve();
+    }
+    async notify(requests) {
+        const text = formatBatch(requests);
+        const res = await fetch(`${this.apiBase}/sendMessage`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ chat_id: this.config.chat_id, text, parse_mode: 'Markdown' }),
+        });
+        if (!res.ok) {
+            log.error({ status: res.status }, 'Failed to send Telegram notification');
+        }
+    }
+    schedulePoll() {
+        if (!this.polling)
+            return;
+        this.pollTimer = setTimeout(() => {
+            void this.poll();
+        }, 1000);
+        this.pollTimer.unref();
+    }
+    async poll() {
+        try {
+            const res = await fetch(`${this.apiBase}/getUpdates?offset=${this.lastUpdateId + 1}&timeout=25&allowed_updates=["message"]`);
+            if (!res.ok)
+                throw new Error(`getUpdates failed: ${res.status}`);
+            const data = (await res.json());
+            if (data.ok && data.result.length > 0) {
+                for (const update of data.result) {
+                    this.lastUpdateId = Math.max(this.lastUpdateId, update.update_id);
+                    this.handleUpdate(update);
+                }
+            }
+        }
+        catch (err) {
+            log.warn({ err }, 'Telegram poll error');
+        }
+        this.schedulePoll();
+    }
+    handleUpdate(update) {
+        const chatId = update.message?.chat?.id;
+        const text = update.message?.text ?? '';
+        // Only process messages from the configured chat
+        if (!chatId || String(chatId) !== this.config.chat_id) {
+            log.warn({ chatId, expected: this.config.chat_id }, 'Ignoring message from unauthorized chat');
+            return;
+        }
+        const parsed = parseApprovalCommand(text);
+        if (!parsed)
+            return;
+        if (parsed.type === 'approve') {
+            log.info({ code: parsed.code }, 'Approve via Telegram');
+            this.approvalApi.approve(parsed.code);
+        }
+        else {
+            log.info({ code: parsed.code }, 'Deny via Telegram');
+            this.approvalApi.deny(parsed.code, parsed.reason);
+        }
+    }
+    stop() {
+        this.polling = false;
+        clearTimeout(this.pollTimer);
+        return Promise.resolve();
+    }
+}
+//# sourceMappingURL=telegram.js.map

package/dist/hitl/providers/telegram.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telegram.js","sourceRoot":"","sources":["../../../src/hitl/providers/telegram.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,MAAM,GAAG,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;AAOzC,MAAM,OAAO,oBAAoB;IAMrB;IACA;IANF,OAAO,GAAG,KAAK,CAAC;IAChB,YAAY,GAAG,CAAC,CAAC;IACjB,SAAS,CAAkB;IAEnC,YACU,MAAsB,EACtB,WAAwB;QADxB,WAAM,GAAN,MAAM,CAAgB;QACtB,gBAAW,GAAX,WAAW,CAAa;IAC/B,CAAC;IAEJ,IAAY,OAAO;QACjB,OAAO,+BAA+B,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;IAChE,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC7E,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAA4B;QACvC,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,cAAc,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;SACrF,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,sCAAsC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,IAAI,CAAC,OAAO,sBAAsB,IAAI,CAAC,YAAY,GAAG,CAAC,yCAAyC,CACpG,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAEjE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8C,CAAC;YAC7E,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;oBAClE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,qBAAqB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,YAAY,CAAC,MAAsB;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;QAExC,iDAAiD;QACjD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EACzC,yCAAyC,CAC1C,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;YACxD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAC;YACrD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/hitl/providers/tui.d.ts

@@ -0,0 +1,16 @@
+import type { HitlProvider, HitlNotification, ApprovalApi } from './types.js';
+export declare class TuiHitlProvider implements HitlProvider {
+    private approvalApi;
+    private tty;
+    private items;
+    private selected;
+    private active;
+    constructor(approvalApi: ApprovalApi);
+    init(): Promise<void>;
+    stop(): Promise<void>;
+    notify(requests: HitlNotification[]): Promise<void>;
+    private handleKey;
+    private render;
+    private formatArgs;
+}
+//# sourceMappingURL=tui.d.ts.map

package/dist/hitl/providers/tui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui.d.ts","sourceRoot":"","sources":["../../../src/hitl/providers/tui.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAmB9E,qBAAa,eAAgB,YAAW,YAAY;IAMtC,OAAO,CAAC,WAAW;IAL/B,OAAO,CAAC,GAAG,CAAsC;IACjD,OAAO,CAAC,KAAK,CAAqB;IAClC,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,MAAM,CAAS;gBAEH,WAAW,EAAE,WAAW;IAKtC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgC3B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAUrB,MAAM,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnD,OAAO,CAAC,SAAS;IAoDjB,OAAO,CAAC,MAAM;IAgDd,OAAO,CAAC,UAAU;CAanB"}

package/dist/hitl/providers/tui.js

@@ -0,0 +1,169 @@
+import { createReadStream } from 'fs';
+import { childLogger } from '../../util/logger.js';
+const log = childLogger('hitl-tui');
+// ANSI helpers
+const ESC = '\x1b[';
+const BOLD = `${ESC}1m`;
+const DIM = `${ESC}2m`;
+const RESET = `${ESC}0m`;
+const GREEN = `${ESC}32m`;
+const RED = `${ESC}31m`;
+const YELLOW = `${ESC}33m`;
+const CYAN = `${ESC}36m`;
+export class TuiHitlProvider {
+    approvalApi;
+    tty;
+    items = [];
+    selected = 0;
+    active = false;
+    constructor(approvalApi) {
+        this.approvalApi = approvalApi;
+        // Read keystrokes from /dev/tty — doesn't touch stdin/stdout
+        this.tty = createReadStream('/dev/tty', { encoding: 'utf8' });
+    }
+    async init() {
+        this.active = true;
+        // Put tty in raw mode to get individual keypresses
+        const fd = this.tty.fd;
+        if (typeof fd === 'number') {
+            try {
+                const tty = await import('tty');
+                if (tty.isatty(fd)) {
+                    // We need the actual tty fd for raw mode
+                    const { openSync } = await import('fs');
+                    const ttyFd = openSync('/dev/tty', 'r');
+                    const ttyReadStream = new tty.ReadStream(ttyFd);
+                    ttyReadStream.setRawMode(true);
+                    ttyReadStream.setEncoding('utf8');
+                    ttyReadStream.on('data', (key) => this.handleKey(key));
+                    ttyReadStream.resume();
+                    this.tty = ttyReadStream;
+                }
+            }
+            catch {
+                // Fallback: line-based input
+                this.tty.setEncoding('utf8');
+                this.tty.on('data', (chunk) => {
+                    for (const ch of String(chunk))
+                        this.handleKey(ch);
+                });
+                this.tty.resume();
+            }
+        }
+        log.info('TUI HITL provider ready — approve/deny from your terminal');
+    }
+    stop() {
+        this.active = false;
+        try {
+            this.tty.destroy?.();
+        }
+        catch {
+            /* swallow */
+        }
+        return Promise.resolve();
+    }
+    notify(requests) {
+        for (const req of requests) {
+            this.items.push({ req, status: 'pending' });
+        }
+        this.render();
+        return Promise.resolve();
+    }
+    handleKey(key) {
+        if (!this.active)
+            return;
+        const pending = this.items.filter((i) => i.status === 'pending');
+        if (pending.length === 0)
+            return;
+        // Ctrl-C
+        if (key === '\x03') {
+            process.exit(0);
+        }
+        // j / down arrow
+        if (key === 'j' || key === `${ESC}B`) {
+            this.selected = Math.min(this.selected + 1, pending.length - 1);
+            this.render();
+            return;
+        }
+        // k / up arrow
+        if (key === 'k' || key === `${ESC}A`) {
+            this.selected = Math.max(this.selected - 1, 0);
+            this.render();
+            return;
+        }
+        // a = approve
+        if (key === 'a' || key === 'A') {
+            const item = pending[this.selected];
+            if (item) {
+                item.status = 'approved';
+                this.approvalApi.approve(item.req.code);
+                log.info({ code: item.req.code }, 'Approved via TUI');
+                this.selected = Math.min(this.selected, Math.max(pending.length - 2, 0));
+                this.render();
+            }
+            return;
+        }
+        // d = deny
+        if (key === 'd' || key === 'D') {
+            const item = pending[this.selected];
+            if (item) {
+                item.status = 'denied';
+                this.approvalApi.deny(item.req.code, 'Denied via TUI');
+                log.info({ code: item.req.code }, 'Denied via TUI');
+                this.selected = Math.min(this.selected, Math.max(pending.length - 2, 0));
+                this.render();
+            }
+            return;
+        }
+    }
+    render() {
+        const out = process.stderr;
+        const pending = this.items.filter((i) => i.status === 'pending');
+        const resolved = this.items.filter((i) => i.status !== 'pending');
+        const lines = [];
+        lines.push('');
+        lines.push(`${BOLD}${CYAN}  Airlock Approvals${RESET}  ${DIM}[a]pprove  [d]eny  [j/k] navigate${RESET}`);
+        lines.push(`${DIM}  ${'─'.repeat(60)}${RESET}`);
+        if (pending.length === 0) {
+            lines.push(`${DIM}  No pending requests${RESET}`);
+        }
+        else {
+            for (let i = 0; i < pending.length; i++) {
+                const item = pending[i];
+                const selected = i === this.selected;
+                const prefix = selected ? `${BOLD}${YELLOW} ▸ ` : `${DIM}   `;
+                const args = this.formatArgs(item.req.args);
+                lines.push(`${prefix}${selected ? BOLD : ''}${item.req.tool}${RESET}` +
+                    `  ${DIM}agent:${item.req.agentId}${RESET}` +
+                    `  ${DIM}[${item.req.code}]${RESET}`);
+                lines.push(`${selected ? '     ' : '     '}${DIM}${args}${RESET}`);
+            }
+        }
+        // Show recently resolved
+        const recent = resolved.slice(-3);
+        if (recent.length > 0) {
+            lines.push(`${DIM}  ${'─'.repeat(60)}${RESET}`);
+            for (const item of recent) {
+                const color = item.status === 'approved' ? GREEN : RED;
+                lines.push(`${DIM}   ${color}${item.status}${RESET}${DIM}  ${item.req.tool}  [${item.req.code}]${RESET}`);
+            }
+        }
+        lines.push('');
+        // Clear previous output and write new
+        out.write(`${ESC}2J${ESC}H`); // clear screen, cursor to top
+        out.write(lines.join('\n'));
+    }
+    formatArgs(args) {
+        const parts = Object.entries(args).map(([k, v]) => {
+            const val = typeof v === 'string'
+                ? v.length > 40
+                    ? `"${v.slice(0, 40)}..."`
+                    : `"${v}"`
+                : JSON.stringify(v);
+            return `${k}: ${val}`;
+        });
+        const str = parts.join(', ');
+        return str.length > 70 ? str.slice(0, 70) + '...' : str;
+    }
+}
+//# sourceMappingURL=tui.js.map

package/dist/hitl/providers/tui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui.js","sourceRoot":"","sources":["../../../src/hitl/providers/tui.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;AAEpC,eAAe;AACf,MAAM,GAAG,GAAG,OAAO,CAAC;AACpB,MAAM,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC;AACxB,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC;AACvB,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC;AACzB,MAAM,KAAK,GAAG,GAAG,GAAG,KAAK,CAAC;AAC1B,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK,CAAC;AACxB,MAAM,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC;AAC3B,MAAM,IAAI,GAAG,GAAG,GAAG,KAAK,CAAC;AAOzB,MAAM,OAAO,eAAe;IAMN;IALZ,GAAG,CAAsC;IACzC,KAAK,GAAkB,EAAE,CAAC;IAC1B,QAAQ,GAAG,CAAC,CAAC;IACb,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAoB,WAAwB;QAAxB,gBAAW,GAAX,WAAW,CAAa;QAC1C,6DAA6D;QAC7D,IAAI,CAAC,GAAG,GAAG,gBAAgB,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAEnB,mDAAmD;QACnD,MAAM,EAAE,GAAI,IAAI,CAAC,GAAwB,CAAC,EAAE,CAAC;QAC7C,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBACnB,yCAAyC;oBACzC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;oBACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;oBACxC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;oBAChD,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBAC/B,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;oBAClC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC/D,aAAa,CAAC,MAAM,EAAE,CAAC;oBACvB,IAAI,CAAC,GAAG,GAAG,aAA+D,CAAC;gBAC7E,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;gBAC7B,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC7B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;oBAC7C,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC;wBAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACrD,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IACxE,CAAC;IAED,IAAI;QACF,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACF,IAAI,CAAC,GAAgC,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,QAA4B;QACjC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,SAAS;QACT,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,iBAAiB;QACjB,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,GAAG,GAAG,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,eAAe;QACf,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,GAAG,GAAG,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,cAAc;QACd,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;gBACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,kBAAkB,CAAC,CAAC;gBACtD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACzE,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,CAAC;YACD,OAAO;QACT,CAAC;QAED,WAAW;QACX,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;gBACvB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACvD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;gBACpD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACzE,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,CAAC;YACD,OAAO;QACT,CAAC;IACH,CAAC;IAEO,MAAM;QACZ,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QAElE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,GAAG,IAAI,sBAAsB,KAAK,KAAK,GAAG,oCAAoC,KAAK,EAAE,CAC7F,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QAEhD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,wBAAwB,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACxB,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC;gBACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC;gBAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC5C,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,EAAE;oBACxD,KAAK,GAAG,SAAS,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,KAAK,EAAE;oBAC3C,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,EAAE,CACvC,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,GAAG,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;YAChD,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;gBACvD,KAAK,CAAC,IAAI,CACR,GAAG,GAAG,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,GAAG,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,EAAE,CAC9F,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,sCAAsC;QACtC,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,8BAA8B;QAC5D,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,CAAC;IAEO,UAAU,CAAC,IAA6B;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;YAChD,MAAM,GAAG,GACP,OAAO,CAAC,KAAK,QAAQ;gBACnB,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE;oBACb,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBAC1B,CAAC,CAAC,IAAI,CAAC,GAAG;gBACZ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACxB,OAAO,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1D,CAAC;CACF"}