airlock-bot 0.2.35 → 0.2.36

package/dist/hitl/provider-factory.js

@@ -31,7 +31,7 @@ function createSingleProvider(cfg, approvalApi, options) {
         case 'macos':
             return new MacosHitlProvider(approvalApi, { sound: cfg.sound });
         case 'dashboard':
-            return new DashboardHitlProvider({ port: cfg.port, config_path: options.configPath }, approvalApi);
+            return new DashboardHitlProvider({ host: cfg.host, port: cfg.port, config_path: options.configPath }, approvalApi);
         case 'stdio':
             return new StdioHitlProvider(approvalApi);
         default:

package/dist/hitl/provider-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-factory.js","sourceRoot":"","sources":["../../src/hitl/provider-factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,GAAG,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;AAExC,MAAM,UAAU,kBAAkB,CAChC,GAA8C,EAC9C,WAAwB,EACxB,UAAmC,EAAE;IAErC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAChF,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAuB,EACvB,WAAwB,EACxB,OAAgC;IAEhC,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,IAAI,oBAAoB,CAC7B,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAClD,WAAW,CACZ,CAAC;QACJ,KAAK,UAAU;YACb,OAAO,IAAI,oBAAoB,CAC7B,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,EAChF,WAAW,CACZ,CAAC;QACJ,KAAK,OAAO;YACV,OAAO,IAAI,iBAAiB,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACjE,KAAK,SAAS;YACZ,OAAO,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,KAAK,KAAK;YACR,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,CAAC;QAC1C,KAAK,OAAO;YACV,OAAO,IAAI,iBAAiB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAClE,KAAK,WAAW;YACd,OAAO,IAAI,qBAAqB,CAC9B,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,EACnD,WAAW,CACZ,CAAC;QACJ,KAAK,OAAO;YACV,OAAO,IAAI,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC5C;YACE,GAAG,CAAC,IAAI,CACN,EAAE,IAAI,EAAG,GAAwB,CAAC,IAAI,EAAE,EACxC,mDAAmD,CACpD,CAAC;YACF,OAAO,IAAI,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}
+{"version":3,"file":"provider-factory.js","sourceRoot":"","sources":["../../src/hitl/provider-factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,GAAG,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;AAExC,MAAM,UAAU,kBAAkB,CAChC,GAA8C,EAC9C,WAAwB,EACxB,UAAmC,EAAE;IAErC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAChF,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAuB,EACvB,WAAwB,EACxB,OAAgC;IAEhC,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,IAAI,oBAAoB,CAC7B,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAClD,WAAW,CACZ,CAAC;QACJ,KAAK,UAAU;YACb,OAAO,IAAI,oBAAoB,CAC7B,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,EAChF,WAAW,CACZ,CAAC;QACJ,KAAK,OAAO;YACV,OAAO,IAAI,iBAAiB,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACjE,KAAK,SAAS;YACZ,OAAO,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,KAAK,KAAK;YACR,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,CAAC;QAC1C,KAAK,OAAO;YACV,OAAO,IAAI,iBAAiB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAClE,KAAK,WAAW;YACd,OAAO,IAAI,qBAAqB,CAC9B,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,EACnE,WAAW,CACZ,CAAC;QACJ,KAAK,OAAO;YACV,OAAO,IAAI,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC5C;YACE,GAAG,CAAC,IAAI,CACN,EAAE,IAAI,EAAG,GAAwB,CAAC,IAAI,EAAE,EACxC,mDAAmD,CACpD,CAAC;YACF,OAAO,IAAI,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/hitl/providers/dashboard.d.ts

@@ -1,18 +1,17 @@
-import type { HitlProvider, HitlNotification, ApprovalApi } from './types.js';
+import type { ApprovalApi, HitlNotification, HitlProvider } from './types.js';
 export interface DashboardHitlConfig {
+    host: string;
     port: number;
     config_path?: string;
 }
 export declare class DashboardHitlProvider implements HitlProvider {
     private config;
     private approvalApi;
-    private server?;
-    private clients;
-    private pending;
+    private app?;
+    private approvalRoutes?;
     constructor(config: DashboardHitlConfig, approvalApi: ApprovalApi);
     init(): Promise<void>;
     stop(): Promise<void>;
     notify(requests: HitlNotification[]): Promise<void>;
-    private broadcast;
 }
 //# sourceMappingURL=dashboard.d.ts.map

package/dist/hitl/providers/dashboard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../../src/hitl/providers/dashboard.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAQ9E,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,qBAAsB,YAAW,YAAY;IAMtD,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,WAAW;IANrB,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,OAAO,CAAoE;IACnF,OAAO,CAAC,OAAO,CAAuC;gBAG5C,MAAM,EAAE,mBAAmB,EAC3B,WAAW,EAAE,WAAW;IAG5B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAoJrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAe3B,MAAM,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnD,OAAO,CAAC,SAAS;CAUlB"}
+{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../../src/hitl/providers/dashboard.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI9E,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,qBAAsB,YAAW,YAAY;IAKtD,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,WAAW;IALrB,OAAO,CAAC,GAAG,CAAC,CAAkB;IAC9B,OAAO,CAAC,cAAc,CAAC,CAA0B;gBAGvC,MAAM,EAAE,mBAAmB,EAC3B,WAAW,EAAE,WAAW;IAG5B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAU3B,MAAM,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAIpD"}

package/dist/hitl/providers/dashboard.js

@@ -1,490 +1,50 @@
-import { createServer } from 'http';
+import { createConfigureWebApp } from '../../configure-web/cli.js';
 import { childLogger } from '../../util/logger.js';
-import { VERSION } from '../../version.js';
-import { rememberAllow } from '../../config/mutator.js';
+import { ApprovalDashboardRoutes } from '../approval-dashboard.js';
 const log = childLogger('hitl-dashboard');
-let latestVersionCache = null;
-const CACHE_TTL_MS = 60 * 60 * 1000; // 1 hour
 export class DashboardHitlProvider {
     config;
     approvalApi;
-    server;
-    clients = new Set();
-    pending = new Map();
+    app;
+    approvalRoutes;
     constructor(config, approvalApi) {
         this.config = config;
         this.approvalApi = approvalApi;
     }
     async init() {
-        this.server = createServer((req, res) => {
-            const url = new URL(req.url ?? '/', `http://localhost:${this.config.port}`);
-            if (url.pathname === '/') {
-                res.writeHead(200, { 'Content-Type': 'text/html' });
-                res.end(DASHBOARD_HTML);
-                return;
-            }
-            if (url.pathname === '/events') {
-                res.writeHead(200, {
-                    'Content-Type': 'text/event-stream',
-                    'Cache-Control': 'no-cache',
-                    Connection: 'keep-alive',
-                });
-                this.clients.add(res);
-                // Send current pending requests
-                for (const req of this.pending.values()) {
-                    res.write(`data: ${JSON.stringify({ type: 'new', request: req })}\n\n`);
-                }
-                req.on('close', () => this.clients.delete(res));
-                return;
-            }
-            if (req.method === 'POST' && url.pathname === '/approve') {
-                const code = url.searchParams.get('code');
-                if (code) {
-                    const pendingRequest = this.pending.get(code);
-                    const remember = url.searchParams.get('remember');
-                    if (remember) {
-                        if (!this.config.config_path) {
-                            res.writeHead(400, { 'Content-Type': 'application/json' });
-                            res.end(JSON.stringify({ error: 'Config mutation is not available' }));
-                            return;
-                        }
-                        if (remember !== 'always' && remember !== 'temporary') {
-                            res.writeHead(400, { 'Content-Type': 'application/json' });
-                            res.end(JSON.stringify({ error: 'Invalid remember mode' }));
-                            return;
-                        }
-                        if (!pendingRequest) {
-                            res.writeHead(404, { 'Content-Type': 'application/json' });
-                            res.end(JSON.stringify({ error: 'No pending request found for code' }));
-                            return;
-                        }
-                        const durationMsParam = url.searchParams.get('duration_ms');
-                        const durationMs = durationMsParam ? Number(durationMsParam) : undefined;
-                        if (durationMs !== undefined && (!Number.isFinite(durationMs) || durationMs <= 0)) {
-                            res.writeHead(400, { 'Content-Type': 'application/json' });
-                            res.end(JSON.stringify({ error: 'Invalid duration_ms' }));
-                            return;
-                        }
-                        try {
-                            const result = rememberAllow({
-                                configPath: this.config.config_path,
-                                agentId: pendingRequest.agentId,
-                                tool: pendingRequest.tool,
-                                mode: remember,
-                                ...(durationMs ? { durationMs } : {}),
-                            });
-                            log.info(result, 'Updated config from approval decision');
-                        }
-                        catch (err) {
-                            log.error({ err, code, remember }, 'Failed to update config from approval decision');
-                            res.writeHead(500, { 'Content-Type': 'application/json' });
-                            res.end(JSON.stringify({ error: 'Failed to update config' }));
-                            return;
-                        }
-                    }
-                    this.pending.delete(code);
-                    this.approvalApi.approve(code);
-                    this.broadcast({ type: 'resolved', code, action: 'approved' });
-                    log.info({ code }, 'Approved via dashboard');
-                }
-                res.writeHead(200);
-                res.end('ok');
-                return;
-            }
-            if (req.method === 'POST' && url.pathname === '/deny') {
-                const code = url.searchParams.get('code');
-                if (code) {
-                    this.pending.delete(code);
-                    this.approvalApi.deny(code, 'Denied via dashboard');
-                    this.broadcast({ type: 'resolved', code, action: 'denied' });
-                    log.info({ code }, 'Denied via dashboard');
-                }
-                res.writeHead(200);
-                res.end('ok');
-                return;
-            }
-            if (req.method === 'GET' && url.pathname === '/version') {
-                res.writeHead(200, { 'Content-Type': 'application/json' });
-                res.end(JSON.stringify({ version: VERSION }));
-                return;
+        if (!this.config.config_path) {
+            log.warn('Dashboard provider requires a config path; running without dashboard UI');
+            return;
+        }
+        this.approvalRoutes = new ApprovalDashboardRoutes(this.approvalApi);
+        this.app = createConfigureWebApp(this.config.config_path, { approvals: this.approvalRoutes });
+        try {
+            await this.app.listen({ port: this.config.port, host: this.config.host });
+            log.info({ host: this.config.host, port: this.config.port }, 'Airlock dashboard listening');
+        }
+        catch (err) {
+            const code = err && typeof err === 'object' && 'code' in err ? err.code : undefined;
+            if (code === 'EADDRINUSE') {
+                log.warn({ port: this.config.port }, 'Dashboard port in use; running without dashboard UI');
             }
-            if (req.method === 'GET' && url.pathname === '/version/latest') {
-                const now = Date.now();
-                if (latestVersionCache && now - latestVersionCache.fetchedAt < CACHE_TTL_MS) {
-                    res.writeHead(200, { 'Content-Type': 'application/json' });
-                    res.end(JSON.stringify({ latest: latestVersionCache.version }));
-                    return;
-                }
-                fetch('https://registry.npmjs.org/airlock-bot/latest')
-                    .then((r) => r.json())
-                    .then((data) => {
-                    latestVersionCache = { version: data.version, fetchedAt: now };
-                    res.writeHead(200, { 'Content-Type': 'application/json' });
-                    res.end(JSON.stringify({ latest: data.version }));
-                })
-                    .catch((err) => {
-                    log.warn({ err }, 'Failed to fetch latest version from npm');
-                    res.writeHead(502, { 'Content-Type': 'application/json' });
-                    res.end(JSON.stringify({ error: 'Failed to fetch latest version' }));
-                });
-                return;
+            else {
+                log.error({ err }, 'Dashboard server error');
             }
-            res.writeHead(404);
-            res.end('not found');
-        });
-        await new Promise((resolve) => {
-            this.server.on('error', (err) => {
-                if (err.code === 'EADDRINUSE') {
-                    log.warn({ port: this.config.port }, 'Dashboard port in use — running without dashboard UI');
-                    this.server = undefined;
-                    resolve();
-                }
-                else {
-                    log.error({ err }, 'Dashboard server error');
-                    resolve(); // don't crash the process
-                }
-            });
-            this.server.listen(this.config.port, '127.0.0.1', () => {
-                log.info({ port: this.config.port }, 'HITL dashboard listening');
-                resolve();
-            });
-        });
+            this.app = undefined;
+            this.approvalRoutes = undefined;
+        }
     }
     async stop() {
-        for (const client of this.clients) {
-            try {
-                client.end();
-            }
-            catch {
-                /* swallow */
-            }
+        this.approvalRoutes?.stop();
+        this.approvalRoutes = undefined;
+        if (this.app) {
+            await this.app.close().catch(() => { });
+            this.app = undefined;
         }
-        this.clients.clear();
-        await new Promise((resolve) => {
-            if (this.server)
-                this.server.close(() => resolve());
-            else
-                resolve();
-        });
     }
     notify(requests) {
-        for (const req of requests) {
-            this.pending.set(req.code, req);
-            this.broadcast({ type: 'new', request: req });
-        }
+        this.approvalRoutes?.notify(requests);
         return Promise.resolve();
     }
-    broadcast(data) {
-        const msg = `data: ${JSON.stringify(data)}\n\n`;
-        for (const client of this.clients) {
-            try {
-                client.write(msg);
-            }
-            catch {
-                /* swallow */
-            }
-        }
-    }
 }
-const DASHBOARD_HTML = `<!DOCTYPE html>
-<html>
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>Airlock</title>
-<style>
-  * { box-sizing: border-box; margin: 0; padding: 0; }
-  body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; background: #0d1117; color: #c9d1d9; padding: 20px; }
-  header { display: flex; align-items: center; margin-bottom: 16px; gap: 12px; }
-  h1 { font-size: 18px; color: #58a6ff; }
-  .settings-btn { background: none; border: 1px solid #30363d; border-radius: 6px; color: #8b949e; cursor: pointer; padding: 4px 8px; font-size: 12px; }
-  .settings-btn:hover { border-color: #58a6ff; color: #c9d1d9; }
-  #settings { display: none; background: #161b22; border: 1px solid #30363d; border-radius: 8px; padding: 12px 16px; margin-bottom: 12px; }
-  #settings.open { display: block; }
-  #settings label { display: flex; align-items: center; gap: 8px; font-size: 13px; color: #c9d1d9; cursor: pointer; margin-bottom: 6px; }
-  #settings label:last-child { margin-bottom: 0; }
-  #empty { color: #484f58; font-style: italic; }
-  .card { background: #161b22; border: 1px solid #30363d; border-radius: 8px; padding: 16px; margin-bottom: 12px; cursor: pointer; transition: border-color 0.15s; }
-  .card:hover { border-color: #58a6ff; }
-  .card.approved { border-color: #238636; opacity: 0.5; }
-  .card.denied { border-color: #da3633; opacity: 0.5; }
-  .card .actions { position: relative; z-index: 2; }
-  .tool { font-weight: 600; color: #f0883e; font-size: 15px; }
-  .agent { color: #8b949e; font-size: 13px; margin-top: 2px; }
-  .args { font-family: "SF Mono", Monaco, monospace; font-size: 12px; background: #0d1117; border-radius: 4px; padding: 8px; margin: 8px 0; white-space: pre-wrap; word-break: break-all; color: #8b949e; max-height: 120px; overflow-y: auto; }
-  .code { font-family: "SF Mono", Monaco, monospace; font-size: 11px; color: #484f58; margin-bottom: 8px; }
-  .actions { display: flex; gap: 8px; }
-  .btn { border: none; padding: 6px 16px; border-radius: 6px; font-size: 13px; font-weight: 600; cursor: pointer; }
-  .btn-approve { background: #238636; color: #fff; }
-  .btn-approve:hover { background: #2ea043; }
-  .btn-deny { background: #21262d; color: #f85149; border: 1px solid #da3633; }
-  .btn-deny:hover { background: #da3633; color: #fff; }
-  .btn kbd { display: inline-block; background: rgba(255,255,255,0.1); border-radius: 3px; padding: 0 4px; font-size: 11px; font-family: inherit; margin-left: 6px; opacity: 0.7; }
-  .status { font-size: 12px; font-weight: 600; margin-top: 8px; }
-  .status.approved { color: #3fb950; }
-  .status.denied { color: #f85149; }
-  .version-info { margin-top: 12px; font-size: 12px; color: #484f58; }
-  .version-info .current { color: #8b949e; }
-  .version-info .update-available { color: #f0883e; margin-top: 4px; }
-  .version-info .update-available code { background: #21262d; padding: 2px 6px; border-radius: 4px; font-size: 11px; }
-  .modal-overlay { display: none; position: fixed; inset: 0; background: rgba(0,0,0,0.6); z-index: 100; justify-content: center; align-items: center; }
-  .modal-overlay.open { display: flex; }
-  .modal { background: #161b22; border: 1px solid #30363d; border-radius: 10px; width: 90vw; max-width: 600px; max-height: 80vh; display: flex; flex-direction: column; animation: modalIn 0.15s ease-out; }
-  @keyframes modalIn { from { opacity: 0; transform: scale(0.95); } to { opacity: 1; transform: scale(1); } }
-  .modal-header { display: flex; justify-content: space-between; align-items: center; padding: 16px; border-bottom: 1px solid #30363d; }
-  .modal-header .tool { margin: 0; }
-  .modal-close { background: none; border: none; color: #8b949e; font-size: 20px; cursor: pointer; padding: 4px 8px; border-radius: 4px; }
-  .modal-close:hover { background: #21262d; color: #c9d1d9; }
-  .modal-body { padding: 16px; overflow-y: auto; flex: 1; }
-  .modal-body .detail-label { font-size: 11px; color: #484f58; text-transform: uppercase; letter-spacing: 0.5px; margin-top: 12px; margin-bottom: 4px; }
-  .modal-body .detail-label:first-child { margin-top: 0; }
-  .modal-body .detail-value { font-size: 13px; color: #c9d1d9; }
-  .modal-body .detail-value.mono { font-family: "SF Mono", Monaco, monospace; font-size: 12px; color: #8b949e; }
-  .modal-body .args-full { max-height: 50vh; overflow-y: auto; }
-  .modal-body .arg-entry { margin-bottom: 10px; }
-  .modal-body .arg-entry:last-child { margin-bottom: 0; }
-  .modal-body .arg-key { font-family: "SF Mono", Monaco, monospace; font-size: 12px; color: #79c0ff; margin-bottom: 4px; }
-  .modal-body .arg-val { font-family: "SF Mono", Monaco, monospace; font-size: 12px; background: #0d1117; border-radius: 4px; padding: 10px; white-space: pre-wrap; word-break: break-word; color: #c9d1d9; overflow-x: auto; }
-  .modal-body .arg-val pre { margin: 0; white-space: pre-wrap; word-break: break-word; }
-  .modal-body .arg-val code.hljs { background: transparent; padding: 0; }
-  .modal-footer { padding: 12px 16px; border-top: 1px solid #30363d; display: flex; gap: 8px; }
-  .modal-footer .status { margin: 0; padding: 6px 0; }
-</style>
-<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.11.1/styles/github-dark.min.css" crossorigin="anonymous" referrerpolicy="no-referrer">
-<script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.11.1/highlight.min.js" crossorigin="anonymous" referrerpolicy="no-referrer"></scr` +
-    `ipt>
-</head>
-<body>
-<header>
-  <h1>Airlock Approvals</h1>
-  <button class="settings-btn" onclick="document.getElementById('settings').classList.toggle('open')">Settings</button>
-</header>
-<div id="settings">
-  <label><input type="checkbox" id="notifs" checked> Browser notifications</label>
-  <label><input type="checkbox" id="sound" checked> Sound</label>
-  <div class="version-info" id="version-info"></div>
-</div>
-<div id="list"><div id="empty">No pending requests</div></div>
-<div class="modal-overlay" id="modal-overlay" onclick="closeModal(event)">
-  <div class="modal" onclick="event.stopPropagation()">
-    <div class="modal-header">
-      <div class="tool" id="modal-tool"></div>
-      <button class="modal-close" onclick="closeModal()">&times;</button>
-    </div>
-    <div class="modal-body" id="modal-body"></div>
-    <div class="modal-footer" id="modal-footer"></div>
-  </div>
-</div>
-<script>
-var list = document.getElementById('list');
-var empty = document.getElementById('empty');
-var cards = new Map();
-var requestData = new Map();
-
-// Settings — persisted in localStorage
-var notifsEl = document.getElementById('notifs');
-var soundEl = document.getElementById('sound');
-
-notifsEl.checked = localStorage.getItem('airlock:notifs') === 'true';
-soundEl.checked = localStorage.getItem('airlock:sound') !== 'false';
-notifsEl.onchange = function() { localStorage.setItem('airlock:notifs', notifsEl.checked); };
-soundEl.onchange = function() { localStorage.setItem('airlock:sound', soundEl.checked); };
-
-// Version check
-(async function checkVersion() {
-  try {
-    var curRes = await fetch('/version').then(function(r) { return r.json(); });
-    var latestRes = await fetch('/version/latest').then(function(r) { return r.json(); });
-    var el = document.getElementById('version-info');
-    var html = '<div class="current">Version: v' + esc(curRes.version) + '</div>';
-    if (latestRes.latest && isNewer(latestRes.latest, curRes.version)) {
-      html += '<div class="update-available">New version available: v' + esc(latestRes.latest) + ' &mdash; run <code>npm update -g airlock-bot</code></div>';
-    }
-    el.innerHTML = html;
-  } catch (e) { /* ignore version check failures */ }
-})();
-
-function isNewer(latest, current) {
-  var a = latest.split('.').map(Number);
-  var b = current.split('.').map(Number);
-  for (var i = 0; i < 3; i++) {
-    if ((a[i] || 0) > (b[i] || 0)) return true;
-    if ((a[i] || 0) < (b[i] || 0)) return false;
-  }
-  return false;
-}
-
-// Syntax highlight via highlight.js if loaded, otherwise plain escaped text
-function highlight(code, lang) {
-  if (typeof hljs !== 'undefined') {
-    try {
-      if (lang) return hljs.highlight(code, { language: lang }).value;
-      return hljs.highlightAuto(code).value;
-    } catch (e) { /* fall through */ }
-  }
-  return esc(code);
-}
-
-// Render a single arg value — strings get displayed directly (with highlighting
-// for multiline content), objects/arrays get JSON-formatted
-function renderArgValue(val) {
-  if (typeof val === 'string') {
-    if (val.includes('\\n') && val.length > 60) {
-      return '<div class="arg-val"><pre><code>' + highlight(val) + '</code></pre></div>';
-    }
-    return '<div class="arg-val">' + esc(val) + '</div>';
-  }
-  var json = JSON.stringify(val, null, 2);
-  return '<div class="arg-val"><pre><code>' + highlight(json, 'json') + '</code></pre></div>';
-}
-
-var currentModalCode = null;
-
-function openModal(code) {
-  var req = requestData.get(code);
-  if (!req) return;
-  currentModalCode = code;
-  var overlay = document.getElementById('modal-overlay');
-  document.getElementById('modal-tool').textContent = req.tool;
-  var body = document.getElementById('modal-body');
-  var html = '<div class="detail-label">Agent</div><div class="detail-value">' + esc(req.agentId) + '</div>';
-  html += '<div class="detail-label">Request Code</div><div class="detail-value mono">' + esc(req.code) + '</div>';
-  if (req.timeoutMs) {
-    html += '<div class="detail-label">Timeout</div><div class="detail-value">' + Math.round(req.timeoutMs / 1000) + 's</div>';
-  }
-  html += '<div class="detail-label">Arguments</div><div class="args-full">';
-  var keys = Object.keys(req.args || {});
-  if (keys.length === 0) {
-    html += '<div class="arg-val" style="color:#484f58">No arguments</div>';
-  } else {
-    for (var i = 0; i < keys.length; i++) {
-      html += '<div class="arg-entry"><div class="arg-key">' + esc(keys[i]) + '</div>' + renderArgValue(req.args[keys[i]]) + '</div>';
-    }
-  }
-  html += '</div>';
-  body.innerHTML = html;
-
-  var footer = document.getElementById('modal-footer');
-  var el = cards.get(code);
-  var resolved = el && (el.classList.contains('approved') || el.classList.contains('denied'));
-  if (resolved) {
-    var which = el.classList.contains('approved') ? 'approved' : 'denied';
-    footer.innerHTML = '<div class="status ' + which + '">' + which + '</div>';
-  } else {
-    footer.innerHTML = actionButtons(code, true);
-  }
-  overlay.classList.add('open');
-}
-
-function closeModal(e) {
-  if (e && e.target && e.target !== document.getElementById('modal-overlay')) return;
-  document.getElementById('modal-overlay').classList.remove('open');
-  currentModalCode = null;
-}
-
-function actAndClose(action, code, remember, durationMs) {
-  act(action, code, remember, durationMs);
-  document.getElementById('modal-overlay').classList.remove('open');
-  currentModalCode = null;
-}
-
-function actionButtons(code, closeAfter) {
-  var fn = closeAfter ? 'actAndClose' : 'act';
-  return '<button class="btn btn-approve" onclick="' + fn + '(\\x27approve\\x27,\\x27' + code + '\\x27)">Approve<kbd>A</kbd></button>' +
-    '<button class="btn btn-approve" onclick="' + fn + '(\\x27approve\\x27,\\x27' + code + '\\x27,\\x27temporary\\x27,3600000)">Allow 1h</button>' +
-    '<button class="btn btn-approve" onclick="' + fn + '(\\x27approve\\x27,\\x27' + code + '\\x27,\\x27always\\x27)">Always Allow</button>' +
-    '<button class="btn btn-deny" onclick="' + fn + '(\\x27deny\\x27,\\x27' + code + '\\x27)">Deny<kbd>D</kbd></button>';
-}
-
-function render(req) {
-  requestData.set(req.code, req);
-  var el = document.createElement('div');
-  el.className = 'card';
-  el.id = 'card-' + req.code;
-  el.onclick = function(e) {
-    if (e.target.closest('.actions')) return;
-    openModal(req.code);
-  };
-  var args = JSON.stringify(req.args, null, 2);
-  el.innerHTML =
-    '<div class="tool">' + esc(req.tool) + '</div>' +
-    '<div class="agent">agent: ' + esc(req.agentId) + '</div>' +
-    '<div class="args">' + esc(args) + '</div>' +
-    '<div class="code">' + req.code + '</div>' +
-    '<div class="actions">' +
-      actionButtons(req.code, false) +
-    '</div>';
-  cards.set(req.code, el);
-  list.prepend(el);
-  empty.style.display = 'none';
-}
-
-function act(action, code, remember, durationMs) {
-  var url = '/' + action + '?code=' + encodeURIComponent(code);
-  if (remember) url += '&remember=' + encodeURIComponent(remember);
-  if (durationMs) url += '&duration_ms=' + encodeURIComponent(String(durationMs));
-  fetch(url, { method: 'POST' });
-  var el = cards.get(code);
-  if (el) {
-    el.querySelector('.actions').innerHTML = '<div class="status ' + action + (action === 'approve' ? 'd' : '') + '">' + action + 'd</div>';
-    el.classList.add(action === 'approve' ? 'approved' : 'denied');
-  }
-}
-
-function esc(s) { var d = document.createElement('div'); d.textContent = s; return d.innerHTML; }
-
-// Only request notification permission if the user has notifications enabled
-if ('Notification' in window && notifsEl.checked) Notification.requestPermission();
-notifsEl.addEventListener('change', function() {
-  if (notifsEl.checked && 'Notification' in window) Notification.requestPermission();
-});
-
-// Keyboard shortcuts: a=approve, d=deny, Escape=close modal
-function getFirstPendingCode() {
-  for (var entry of cards) {
-    if (!entry[1].classList.contains('approved') && !entry[1].classList.contains('denied')) return entry[0];
-  }
-  return null;
-}
-
-document.addEventListener('keydown', function(e) {
-  if (e.key === 'Escape') { closeModal(); return; }
-  if (e.target.tagName === 'INPUT' || e.target.tagName === 'TEXTAREA') return;
-  if (e.metaKey || e.ctrlKey || e.altKey) return;
-  var key = e.key.toLowerCase();
-  if (key === 'a' || key === 'd') {
-    var action = key === 'a' ? 'approve' : 'deny';
-    var code = currentModalCode || getFirstPendingCode();
-    if (!code) return;
-    var el = cards.get(code);
-    if (el && (el.classList.contains('approved') || el.classList.contains('denied'))) return;
-    if (currentModalCode) { actAndClose(action, code); } else { act(action, code); }
-  }
-});
-
-var es = new EventSource('/events');
-es.onmessage = function(e) {
-  var msg = JSON.parse(e.data);
-  if (msg.type === 'new') {
-    render(msg.request);
-    if (notifsEl.checked && Notification.permission === 'granted') {
-      new Notification('Airlock: ' + msg.request.tool, {
-        body: 'agent: ' + msg.request.agentId + '\\n' + msg.request.code,
-        tag: msg.request.code,
-        silent: !soundEl.checked,
-      });
-    }
-  }
-  if (msg.type === 'resolved') {
-    var el = cards.get(msg.code);
-    if (el) {
-      el.querySelector('.actions').innerHTML = '<div class="status ' + (msg.action === 'approved' ? 'approved' : 'denied') + '">' + msg.action + '</div>';
-      el.classList.add(msg.action);
-    }
-  }
-};
-</scr` +
-    `ipt>
-</body>
-</html>`;
 //# sourceMappingURL=dashboard.js.map

package/dist/hitl/providers/dashboard.js.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard.js","sourceRoot":"","sources":["../../../src/hitl/providers/dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,OAAO,EAAE,aAAa,EAA0B,MAAM,yBAAyB,CAAC;AAEhF,MAAM,GAAG,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;AAE1C,IAAI,kBAAkB,GAAkD,IAAI,CAAC;AAC7E,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAO9C,MAAM,OAAO,qBAAqB;IAMtB;IACA;IANF,MAAM,CAAU;IAChB,OAAO,GAAG,IAAI,GAAG,EAAyD,CAAC;IAC3E,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEtD,YACU,MAA2B,EAC3B,WAAwB;QADxB,WAAM,GAAN,MAAM,CAAqB;QAC3B,gBAAW,GAAX,WAAW,CAAa;IAC/B,CAAC;IAEJ,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAE5E,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC/B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBACjB,cAAc,EAAE,mBAAmB;oBACnC,eAAe,EAAE,UAAU;oBAC3B,UAAU,EAAE,YAAY;iBACzB,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACtB,gCAAgC;gBAChC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;oBACxC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;gBAC1E,CAAC;gBACD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACzD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAClD,IAAI,QAAQ,EAAE,CAAC;wBACb,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;4BAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;4BAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC,CAAC;4BACvE,OAAO;wBACT,CAAC;wBACD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;4BACtD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;4BAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;4BAC5D,OAAO;wBACT,CAAC;wBACD,IAAI,CAAC,cAAc,EAAE,CAAC;4BACpB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;4BAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC,CAAC;4BACxE,OAAO;wBACT,CAAC;wBAED,MAAM,eAAe,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;wBAC5D,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBACzE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC;4BAClF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;4BAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;4BAC1D,OAAO;wBACT,CAAC;wBAED,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,aAAa,CAAC;gCAC3B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gCACnC,OAAO,EAAE,cAAc,CAAC,OAAO;gCAC/B,IAAI,EAAE,cAAc,CAAC,IAAI;gCACzB,IAAI,EAAE,QAA6B;gCACnC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;6BACtC,CAAC,CAAC;4BACH,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,uCAAuC,CAAC,CAAC;wBAC5D,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,gDAAgD,CAAC,CAAC;4BACrF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;4BAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC;4BAC9D,OAAO;wBACT,CAAC;oBACH,CAAC;oBAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC1B,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC/B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;oBAC/D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;gBAC/C,CAAC;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACtD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC1B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;oBACpD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC7D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;gBAC7C,CAAC;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACxD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;gBAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,IAAI,kBAAkB,IAAI,GAAG,GAAG,kBAAkB,CAAC,SAAS,GAAG,YAAY,EAAE,CAAC;oBAC5E,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBAChE,OAAO;gBACT,CAAC;gBACD,KAAK,CAAC,+CAA+C,CAAC;qBACnD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAkC,CAAC;qBACrD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;oBACb,kBAAkB,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;oBAC/D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACpD,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,yCAAyC,CAAC,CAAC;oBAC7D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC,CAAC;gBACvE,CAAC,CAAC,CAAC;gBACL,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;gBACtD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC9B,GAAG,CAAC,IAAI,CACN,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAC1B,sDAAsD,CACvD,CAAC;oBACF,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;oBACxB,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;oBAC7C,OAAO,EAAE,CAAC,CAAC,0BAA0B;gBACvC,CAAC;YACH,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBACtD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,0BAA0B,CAAC,CAAC;gBACjE,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;;gBAC/C,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,QAA4B;QACjC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAEO,SAAS,CAAC,IAAa;QAC7B,MAAM,GAAG,GAAG,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,MAAM,cAAc,GAClB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sJAiEoJ;IACpJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAuOI;IACJ;;QAEM,CAAC"}
+{"version":3,"file":"dashboard.js","sourceRoot":"","sources":["../../../src/hitl/providers/dashboard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAGnE,MAAM,GAAG,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;AAQ1C,MAAM,OAAO,qBAAqB;IAKtB;IACA;IALF,GAAG,CAAmB;IACtB,cAAc,CAA2B;IAEjD,YACU,MAA2B,EAC3B,WAAwB;QADxB,WAAM,GAAN,MAAM,CAAqB;QAC3B,gBAAW,GAAX,WAAW,CAAa;IAC/B,CAAC;IAEJ,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpE,IAAI,CAAC,GAAG,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAE9F,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,6BAA6B,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,qDAAqD,CAAC,CAAC;YAC9F,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;YACrB,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAEhC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;QACvB,CAAC;IACH,CAAC;IAED,MAAM,CAAC,QAA4B;QACjC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/hook/api.d.ts

@@ -9,6 +9,8 @@ export interface HookApiOpts {
     hitlBatcher: HitlBatcher;
     auditLogger: AuditLogger;
     secret?: string;
+    authRequired?: boolean;
+    allowedOrigins?: string[];
 }
 export declare function hookApiPlugin(app: FastifyInstance, opts: HookApiOpts): Promise<void>;
 //# sourceMappingURL=api.d.ts.map

package/dist/hook/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/hook/api.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAatD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,eAAe,CAAC;IAC3B,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,WAAW,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAWD,wBAAsB,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA2E1F"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/hook/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAOtD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,eAAe,CAAC;IAC3B,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,WAAW,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAWD,wBAAsB,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA4E1F"}

package/dist/hook/api.js

@@ -1,23 +1,13 @@
-import { timingSafeEqual } from 'crypto';
 import { normalizeTool } from './normalizer.js';
 import { childLogger } from '../util/logger.js';
+import { checkRequestSecurity } from '../security/request.js';
 const log = childLogger('hook-api');
-function constantTimeEqual(a, b) {
-    const bufA = Buffer.from(a);
-    const bufB = Buffer.from(b);
-    if (bufA.length !== bufB.length)
-        return false;
-    return timingSafeEqual(bufA, bufB);
-}
 // eslint-disable-next-line @typescript-eslint/require-await
 export async function hookApiPlugin(app, opts) {
-    const { allowlist, hitlEngine, hitlBatcher, auditLogger, secret } = opts;
+    const { allowlist, hitlEngine, hitlBatcher, auditLogger } = opts;
     app.addHook('preHandler', async (request, reply) => {
-        if (!secret)
+        if (!checkRequestSecurity(request, reply, opts)) {
             return;
-        const auth = request.headers.authorization ?? '';
-        if (!constantTimeEqual(auth, `Bearer ${secret}`)) {
-            return reply.status(401).send({ error: 'Unauthorized' });
         }
     });
     app.post('/hook', async (request, reply) => {