airlock-bot 0.2.37 → 0.2.38

package/dist/hitl/approval-dashboard.js

@@ -6,13 +6,10 @@ let latestVersionCache = null;
 const CACHE_TTL_MS = 60 * 60 * 1000;
 export class ApprovalDashboardRoutes {
     approvalApi;
-    clients = new Set();
-    pending = new Map();
-    constructor(approvalApi) {
+    stream;
+    constructor(approvalApi, stream) {
         this.approvalApi = approvalApi;
-    }
-    init() {
-        return Promise.resolve();
+        this.stream = stream;
     }
     registerRoutes(app, configPath) {
         app.get('/events', (request, reply) => this.handleEvents(request, reply));
@@ -21,44 +18,15 @@ export class ApprovalDashboardRoutes {
         app.get('/version', () => ({ version: VERSION }));
         app.get('/version/latest', async (_request, reply) => this.handleLatestVersion(reply));
     }
-    notify(requests) {
-        for (const request of requests) {
-            this.pending.set(request.code, request);
-            this.broadcast({ type: 'new', request });
-        }
-        return Promise.resolve();
-    }
-    stop() {
-        for (const client of this.clients) {
-            try {
-                client.end();
-            }
-            catch {
-                /* swallow */
-            }
-        }
-        this.clients.clear();
-        return Promise.resolve();
-    }
     handleEvents(request, reply) {
-        reply.hijack();
-        reply.raw.writeHead(200, {
-            'Content-Type': 'text/event-stream',
-            'Cache-Control': 'no-cache',
-            Connection: 'keep-alive',
-        });
-        this.clients.add(reply.raw);
-        for (const pendingRequest of this.pending.values()) {
-            reply.raw.write(`data: ${JSON.stringify({ type: 'new', request: pendingRequest })}\n\n`);
-        }
-        request.raw.on('close', () => this.clients.delete(reply.raw));
+        this.stream.addClient(request, reply);
     }
-    async handleApprove(request, reply, configPath) {
+    handleApprove(request, reply, configPath) {
         const query = request.query;
         const code = typeof query.code === 'string' ? query.code : '';
         if (!code)
             return { ok: true };
-        const pendingRequest = this.pending.get(code);
+        const pendingRequest = this.stream.getPendingByCode(code);
         const remember = typeof query.remember === 'string' ? query.remember : undefined;
         if (remember) {
             const result = this.rememberDecision(configPath, pendingRequest, remember, query.duration_ms);
@@ -67,9 +35,7 @@ export class ApprovalDashboardRoutes {
                 return { error: result.error };
             }
         }
-        this.pending.delete(code);
-        this.approvalApi.approve(code);
-        this.broadcast({ type: 'resolved', code, action: 'approved' });
+        this.approvalApi.approveByCode(code);
         log.info({ code }, 'Approved via dashboard');
         return { ok: true };
     }
@@ -77,9 +43,7 @@ export class ApprovalDashboardRoutes {
         const query = request.query;
         const code = typeof query.code === 'string' ? query.code : '';
         if (code) {
-            this.pending.delete(code);
-            this.approvalApi.deny(code, 'Denied via dashboard');
-            this.broadcast({ type: 'resolved', code, action: 'denied' });
+            this.approvalApi.denyByCode(code, 'Denied via dashboard');
             log.info({ code }, 'Denied via dashboard');
         }
         return { ok: true };
@@ -133,16 +97,5 @@ export class ApprovalDashboardRoutes {
             return { status: 500, error: 'Failed to update config' };
         }
     }
-    broadcast(data) {
-        const msg = `data: ${JSON.stringify(data)}\n\n`;
-        for (const client of this.clients) {
-            try {
-                client.write(msg);
-            }
-            catch {
-                /* swallow */
-            }
-        }
-    }
 }
 //# sourceMappingURL=approval-dashboard.js.map

package/dist/hitl/approval-dashboard.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-dashboard.js","sourceRoot":"","sources":["../../src/hitl/approval-dashboard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAA0B,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAGxC,MAAM,GAAG,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;AAE1C,IAAI,kBAAkB,GAAkD,IAAI,CAAC;AAC7E,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpC,MAAM,OAAO,uBAAuB;IAId;IAHZ,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEtD,YAAoB,WAAwB;QAAxB,gBAAW,GAAX,WAAW,CAAa;IAAG,CAAC;IAEhD,IAAI;QACF,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,cAAc,CAAC,GAAoB,EAAE,UAAmB;QACtD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;QAC/F,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QACvE,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,CAAC,QAA4B;QACjC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI;QACF,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAEO,YAAY,CAAC,OAAuB,EAAE,KAAmB;QAC/D,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACvB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,KAAK,MAAM,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACnD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,OAAuB,EACvB,KAAmB,EACnB,UAAmB;QAEnB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAgC,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAE/B,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YAC9F,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACjC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAEO,UAAU,CAChB,OAAuB,EACvB,MAAoB;QAEpB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAgC,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;YACpD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,KAAmB;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,kBAAkB,IAAI,GAAG,GAAG,kBAAkB,CAAC,SAAS,GAAG,YAAY,EAAE,CAAC;YAC5E,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAChD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAC9E,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAClF,kBAAkB,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;YAC/D,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,yCAAyC,CAAC,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;IAEO,gBAAgB,CACtB,UAA8B,EAC9B,cAA4C,EAC5C,QAAgB,EAChB,eAAwB;QAExB,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;QACnF,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACtD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,cAAc;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QAExF,MAAM,UAAU,GACd,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,EAAE;YAC3D,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;YACzB,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC;YAClF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QACvD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,aAAa,CAAC;gBAC3B,UAAU;gBACV,OAAO,EAAE,cAAc,CAAC,OAAO;gBAC/B,IAAI,EAAE,cAAc,CAAC,IAAI;gBACzB,IAAI,EAAE,QAA6B;gBACnC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,uCAAuC,CAAC,CAAC;YAC1D,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,gDAAgD,CAAC,CAAC;YAC1G,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,IAAa;QAC7B,MAAM,GAAG,GAAG,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"approval-dashboard.js","sourceRoot":"","sources":["../../src/hitl/approval-dashboard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAA0B,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAIxC,MAAM,GAAG,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;AAE1C,IAAI,kBAAkB,GAAkD,IAAI,CAAC;AAC7E,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpC,MAAM,OAAO,uBAAuB;IAExB;IACA;IAFV,YACU,WAAwB,EACxB,MAAyB;QADzB,gBAAW,GAAX,WAAW,CAAa;QACxB,WAAM,GAAN,MAAM,CAAmB;IAChC,CAAC;IAEJ,cAAc,CAAC,GAAoB,EAAE,UAAmB;QACtD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;QAC/F,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QACvE,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IACzF,CAAC;IAEO,YAAY,CAAC,OAAuB,EAAE,KAAmB;QAC/D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAEO,aAAa,CACnB,OAAuB,EACvB,KAAmB,EACnB,UAAmB;QAEnB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAgC,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAE/B,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YAC9F,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACjC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAEO,UAAU,CAAC,OAAuB,EAAE,MAAoB;QAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAgC,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,KAAmB;QAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,kBAAkB,IAAI,GAAG,GAAG,kBAAkB,CAAC,SAAS,GAAG,YAAY,EAAE,CAAC;YAC5E,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAChD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAC9E,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAClF,kBAAkB,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;YAC/D,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,yCAAyC,CAAC,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;IAEO,gBAAgB,CACtB,UAA8B,EAC9B,cAA4C,EAC5C,QAAgB,EAChB,eAAwB;QAExB,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;QACnF,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACtD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,cAAc;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QAExF,MAAM,UAAU,GACd,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,EAAE;YAC3D,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;YACzB,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC;YAClF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QACvD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,aAAa,CAAC;gBAC3B,UAAU;gBACV,OAAO,EAAE,cAAc,CAAC,OAAO;gBAC/B,IAAI,EAAE,cAAc,CAAC,IAAI;gBACzB,IAAI,EAAE,QAA6B;gBACnC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,uCAAuC,CAAC,CAAC;YAC1D,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CACP,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,EAC5C,gDAAgD,CACjD,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;CACF"}

package/dist/hitl/approval-stream.d.ts

@@ -0,0 +1,34 @@
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import type { AirlockActivityEvent } from '../activity/stream.js';
+import type { HitlNotification, HitlProvider } from './providers/types.js';
+type ApprovalStatus = Parameters<NonNullable<HitlProvider['updateApprovalStatus']>>[0];
+interface ActivityReplaySource {
+    recent(): AirlockActivityEvent[];
+}
+export interface ApprovalStreamClient {
+    addClient(request: FastifyRequest, reply: FastifyReply): void;
+}
+export declare class ApprovalStreamHub implements ApprovalStreamClient, HitlProvider {
+    private options;
+    private clients;
+    private pending;
+    private pendingCodeIndex;
+    constructor(options?: {
+        activityStream?: ActivityReplaySource;
+    });
+    init(): Promise<void>;
+    notify(requests: HitlNotification[]): Promise<void>;
+    updateApprovalStatus(status: ApprovalStatus): Promise<void>;
+    notifyActivity(event: AirlockActivityEvent): Promise<void>;
+    addClient(request: FastifyRequest, reply: FastifyReply): void;
+    getPendingById(id: string): HitlNotification | undefined;
+    getPendingByCode(code: string): HitlNotification | undefined;
+    pendingCount(): number;
+    stop(): Promise<void>;
+    private broadcast;
+    private writeEvent;
+    private write;
+    private removeClient;
+}
+export {};
+//# sourceMappingURL=approval-stream.d.ts.map

package/dist/hitl/approval-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-stream.d.ts","sourceRoot":"","sources":["../../src/hitl/approval-stream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE5D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAI3E,KAAK,cAAc,GAAG,UAAU,CAAC,WAAW,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEvF,UAAU,oBAAoB;IAC5B,MAAM,IAAI,oBAAoB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;CAC/D;AAED,qBAAa,iBAAkB,YAAW,oBAAoB,EAAE,YAAY;IAK9D,OAAO,CAAC,OAAO;IAJ3B,OAAO,CAAC,OAAO,CAA6C;IAC5D,OAAO,CAAC,OAAO,CAAuC;IACtD,OAAO,CAAC,gBAAgB,CAA6B;gBAEjC,OAAO,GAAE;QAAE,cAAc,CAAC,EAAE,oBAAoB,CAAA;KAAO;IAE3E,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,MAAM,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IASnD,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAc3D,cAAc,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1D,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI;IA4B7D,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAIxD,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAK5D,YAAY,IAAI,MAAM;IAItB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAerB,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,KAAK;IAQb,OAAO,CAAC,YAAY;CAKrB"}

package/dist/hitl/approval-stream.js

@@ -0,0 +1,111 @@
+const KEEPALIVE_MS = 25_000;
+export class ApprovalStreamHub {
+    options;
+    clients = new Map();
+    pending = new Map();
+    pendingCodeIndex = new Map();
+    constructor(options = {}) {
+        this.options = options;
+    }
+    init() {
+        return Promise.resolve();
+    }
+    notify(requests) {
+        for (const request of requests) {
+            this.pending.set(request.id, request);
+            this.pendingCodeIndex.set(request.code, request.id);
+            this.broadcast({ type: 'new', request });
+        }
+        return Promise.resolve();
+    }
+    updateApprovalStatus(status) {
+        this.pending.delete(status.id);
+        this.pendingCodeIndex.delete(status.code);
+        this.broadcast({
+            type: 'resolved',
+            id: status.id,
+            code: status.code,
+            action: status.result,
+            result: status.result,
+            badgeCount: status.badgeCount,
+        });
+        return Promise.resolve();
+    }
+    notifyActivity(event) {
+        this.broadcast({ type: 'activity', event });
+        return Promise.resolve();
+    }
+    addClient(request, reply) {
+        reply.hijack();
+        reply.raw.writeHead(200, {
+            'Content-Type': 'text/event-stream',
+            'Cache-Control': 'no-cache, no-transform',
+            Connection: 'keep-alive',
+            'X-Accel-Buffering': 'no',
+        });
+        const keepalive = setInterval(() => {
+            this.write(reply.raw, ': ping\n\n');
+        }, KEEPALIVE_MS);
+        keepalive.unref?.();
+        this.clients.set(reply.raw, keepalive);
+        this.write(reply.raw, ': connected\n\n');
+        for (const pendingRequest of this.pending.values()) {
+            this.writeEvent(reply.raw, { type: 'new', request: pendingRequest });
+        }
+        for (const event of [...(this.options.activityStream?.recent() ?? [])].reverse()) {
+            this.writeEvent(reply.raw, { type: 'activity', event });
+        }
+        const cleanup = () => this.removeClient(reply.raw);
+        request.raw.on('close', cleanup);
+        reply.raw.on('error', cleanup);
+    }
+    getPendingById(id) {
+        return this.pending.get(id);
+    }
+    getPendingByCode(code) {
+        const id = this.pendingCodeIndex.get(code);
+        return id ? this.pending.get(id) : undefined;
+    }
+    pendingCount() {
+        return this.pending.size;
+    }
+    stop() {
+        for (const client of this.clients.keys()) {
+            try {
+                client.end();
+            }
+            catch {
+                /* swallow */
+            }
+            this.removeClient(client);
+        }
+        this.clients.clear();
+        this.pending.clear();
+        this.pendingCodeIndex.clear();
+        return Promise.resolve();
+    }
+    broadcast(data) {
+        const msg = `data: ${JSON.stringify(data)}\n\n`;
+        for (const client of this.clients.keys()) {
+            this.write(client, msg);
+        }
+    }
+    writeEvent(client, data) {
+        this.write(client, `data: ${JSON.stringify(data)}\n\n`);
+    }
+    write(client, message) {
+        try {
+            client.write(message);
+        }
+        catch {
+            this.removeClient(client);
+        }
+    }
+    removeClient(client) {
+        const keepalive = this.clients.get(client);
+        if (keepalive)
+            clearInterval(keepalive);
+        this.clients.delete(client);
+    }
+}
+//# sourceMappingURL=approval-stream.js.map

package/dist/hitl/approval-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-stream.js","sourceRoot":"","sources":["../../src/hitl/approval-stream.ts"],"names":[],"mappings":"AAKA,MAAM,YAAY,GAAG,MAAM,CAAC;AAY5B,MAAM,OAAO,iBAAiB;IAKR;IAJZ,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IACpD,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC9C,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAErD,YAAoB,UAAqD,EAAE;QAAvD,YAAO,GAAP,OAAO,CAAgD;IAAG,CAAC;IAE/E,IAAI;QACF,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,QAA4B;QACjC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACtC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,oBAAoB,CAAC,MAAsB;QACzC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,cAAc,CAAC,KAA2B;QACxC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS,CAAC,OAAuB,EAAE,KAAmB;QACpD,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACvB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,wBAAwB;YACzC,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACtC,CAAC,EAAE,YAAY,CAAC,CAAC;QACjB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAEvC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACzC,KAAK,MAAM,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACnD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACjF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,cAAc,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,gBAAgB,CAAC,IAAY;QAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,IAAI;QACF,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAEO,SAAS,CAAC,IAAa;QAC7B,MAAM,GAAG,GAAG,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,MAAsB,EAAE,IAAa;QACtD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IAEO,KAAK,CAAC,MAAsB,EAAE,OAAe;QACnD,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAAsB;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,SAAS;YAAE,aAAa,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/dist/hitl/engine.d.ts

@@ -1,5 +1,6 @@
 import type { AuditLogger } from '../audit/logger.js';
 import type { SandboxDisplayInfo } from '../sandbox/index.js';
+import type { AirlockCallContext } from '../airlock/context.js';
 import type { HitlProvider, ApprovalApi } from './providers/types.js';
 export type HitlResult = 'approved' | 'denied' | 'timeout' | 'cancelled';
 export interface HitlTicket {
@@ -10,31 +11,39 @@ export interface HitlTicket {
 export declare class HitlEngine implements ApprovalApi {
     private auditLogger;
     private provider;
-    readonly timeoutMs: number;
+    private _timeoutMs;
     private pending;
     private byCode;
-    constructor(auditLogger: AuditLogger, provider: HitlProvider, timeoutMs: number);
+    constructor(auditLogger: AuditLogger, provider: HitlProvider, _timeoutMs: number);
+    get timeoutMs(): number;
+    setTimeoutMs(timeoutMs: number): void;
     create(params: {
         agentId: string;
         tool: string;
         args: Record<string, unknown>;
+        context?: AirlockCallContext;
         sandbox?: SandboxDisplayInfo;
     }): HitlTicket;
-    /** Approve by code (used by providers) or by id (used by API) */
-    approve(codeOrId: string): void;
+    approve(id: string): void;
+    approveByCode(code: string): void;
     /** Cancel a pending request (e.g. transport disconnected). */
     cancel(id: string): void;
-    /** Deny by code or id */
-    deny(codeOrId: string, reason?: string): void;
+    deny(id: string, reason?: string): void;
+    denyByCode(code: string, reason?: string): void;
     getPending(): Array<{
         id: string;
         code: string;
         agentId: string;
         tool: string;
         args: Record<string, unknown>;
+        context?: AirlockCallContext;
     }>;
-    private resolveRequest;
+    hasPending(id: string): boolean;
+    private resolveRequestByCode;
+    private approveRequest;
+    private denyRequest;
     /** Recover pending requests from DB on startup */
     recoverPending(): Promise<void>;
+    private updateApprovalStatus;
 }
 //# sourceMappingURL=engine.d.ts.map

package/dist/hitl/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/hitl/engine.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAKtE,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AAEzE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;CAC7B;AAaD,qBAAa,UAAW,YAAW,WAAW;IAK1C,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,QAAQ;IAChB,QAAQ,CAAC,SAAS,EAAE,MAAM;IAN5B,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,MAAM,CAA6B;gBAGjC,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,YAAY,EACrB,SAAS,EAAE,MAAM;IAG5B,MAAM,CAAC,MAAM,EAAE;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,EAAE,kBAAkB,CAAC;KAC9B,GAAG,UAAU;IAqCd,iEAAiE;IACjE,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAc/B,8DAA8D;IAC9D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAWxB,yBAAyB;IACzB,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAc7C,UAAU,IAAI,KAAK,CAAC;QAClB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/B,CAAC;IAWF,OAAO,CAAC,cAAc;IAStB,kDAAkD;IAE5C,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;CAsEtC"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/hitl/engine.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAKtE,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AAEzE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;CAC7B;AAyBD,qBAAa,UAAW,YAAW,WAAW;IAK1C,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,UAAU;IANpB,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,MAAM,CAA6B;gBAGjC,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,YAAY,EACtB,UAAU,EAAE,MAAM;IAG5B,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAIrC,MAAM,CAAC,MAAM,EAAE;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,EAAE,kBAAkB,CAAC;QAC7B,OAAO,CAAC,EAAE,kBAAkB,CAAC;KAC9B,GAAG,UAAU;IAuCd,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IASzB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IASjC,8DAA8D;IAC9D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAYxB,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IASvC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAS/C,UAAU,IAAI,KAAK,CAAC;QAClB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,EAAE,kBAAkB,CAAC;KAC9B,CAAC;IAYF,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI/B,OAAO,CAAC,oBAAoB;IAM5B,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,WAAW;IAUnB,kDAAkD;IAE5C,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IA+ErC,OAAO,CAAC,oBAAoB;CAa7B"}

package/dist/hitl/engine.js

@@ -1,32 +1,42 @@
 import { generateId, generateApprovalCode } from '../util/id.js';
 import { childLogger } from '../util/logger.js';
 const log = childLogger('hitl-engine');
+function redactApprovalArgs(auditLogger, args) {
+    return (auditLogger.redactArgs?.(args) ?? args);
+}
 export class HitlEngine {
     auditLogger;
     provider;
-    timeoutMs;
+    _timeoutMs;
     pending = new Map(); // id → request
     byCode = new Map(); // code → id
-    constructor(auditLogger, provider, timeoutMs) {
+    constructor(auditLogger, provider, _timeoutMs) {
         this.auditLogger = auditLogger;
         this.provider = provider;
-        this.timeoutMs = timeoutMs;
+        this._timeoutMs = _timeoutMs;
+    }
+    get timeoutMs() {
+        return this._timeoutMs;
+    }
+    setTimeoutMs(timeoutMs) {
+        this._timeoutMs = timeoutMs;
     }
     create(params) {
         const id = generateId();
         const code = generateApprovalCode();
+        const approvalArgs = redactApprovalArgs(this.auditLogger, params.args);
         // Persist to DB synchronously before returning
         this.auditLogger.insertHitl({
             id,
             code,
             agent_id: params.agentId,
             tool: params.tool,
-            args: JSON.stringify(params.args),
+            args: JSON.stringify(withContext(approvalArgs, params.context)),
             status: 'pending',
             created_at: new Date().toISOString(),
         });
         const result = new Promise((resolve) => {
-            const req = { id, code, ...params, resolve };
+            const req = { id, code, ...params, args: approvalArgs, resolve };
             this.pending.set(id, req);
             this.byCode.set(code, id);
             if (this.timeoutMs > 0) {
@@ -35,6 +45,7 @@ export class HitlEngine {
                     this.byCode.delete(code);
                     this.auditLogger.updateHitlStatus(id, 'timeout');
                     log.warn({ id, code, tool: params.tool }, 'HITL request timed out');
+                    this.updateApprovalStatus(req, 'timeout');
                     resolve('timeout');
                 }, this.timeoutMs);
                 timer.unref();
@@ -44,20 +55,21 @@ export class HitlEngine {
         log.info({ id, code, agent: params.agentId, tool: params.tool }, 'HITL request created');
         return { id, code, result };
     }
-    /** Approve by code (used by providers) or by id (used by API) */
-    approve(codeOrId) {
-        const req = this.resolveRequest(codeOrId);
+    approve(id) {
+        const req = this.pending.get(id);
         if (!req) {
-            log.warn({ codeOrId }, 'No pending HITL request found');
+            log.warn({ id }, 'No pending HITL request found');
             return;
         }
-        if (req.timer)
-            clearTimeout(req.timer);
-        this.pending.delete(req.id);
-        this.byCode.delete(req.code);
-        this.auditLogger.updateHitlStatus(req.id, 'approved');
-        log.info({ id: req.id, code: req.code }, 'HITL approved');
-        req.resolve('approved');
+        this.approveRequest(req);
+    }
+    approveByCode(code) {
+        const req = this.resolveRequestByCode(code);
+        if (!req) {
+            log.warn({ code }, 'No pending HITL request found for approval code');
+            return;
+        }
+        this.approveRequest(req);
     }
     /** Cancel a pending request (e.g. transport disconnected). */
     cancel(id) {
@@ -70,22 +82,24 @@ export class HitlEngine {
         this.byCode.delete(req.code);
         this.auditLogger.updateHitlStatus(req.id, 'cancelled');
         log.info({ id: req.id, code: req.code }, 'HITL cancelled (session disconnected)');
+        this.updateApprovalStatus(req, 'cancelled');
         req.resolve('cancelled');
     }
-    /** Deny by code or id */
-    deny(codeOrId, reason) {
-        const req = this.resolveRequest(codeOrId);
+    deny(id, reason) {
+        const req = this.pending.get(id);
         if (!req) {
-            log.warn({ codeOrId }, 'No pending HITL request found');
+            log.warn({ id }, 'No pending HITL request found');
             return;
         }
-        if (req.timer)
-            clearTimeout(req.timer);
-        this.pending.delete(req.id);
-        this.byCode.delete(req.code);
-        this.auditLogger.updateHitlStatus(req.id, 'denied', reason);
-        log.info({ id: req.id, code: req.code, reason }, 'HITL denied');
-        req.resolve('denied');
+        this.denyRequest(req, reason);
+    }
+    denyByCode(code, reason) {
+        const req = this.resolveRequestByCode(code);
+        if (!req) {
+            log.warn({ code }, 'No pending HITL request found for approval code');
+            return;
+        }
+        this.denyRequest(req, reason);
     }
     getPending() {
         return Array.from(this.pending.values()).map((r) => ({
@@ -94,19 +108,39 @@ export class HitlEngine {
             agentId: r.agentId,
             tool: r.tool,
             args: r.args,
+            ...(r.context ? { context: r.context } : {}),
             ...(r.sandbox ? { sandbox: r.sandbox } : {}),
         }));
     }
-    resolveRequest(codeOrId) {
-        // Try as id first
-        if (this.pending.has(codeOrId))
-            return this.pending.get(codeOrId);
-        // Try as code
-        const id = this.byCode.get(codeOrId);
+    hasPending(id) {
+        return this.pending.has(id);
+    }
+    resolveRequestByCode(code) {
+        const id = this.byCode.get(code);
         if (id)
             return this.pending.get(id);
         return undefined;
     }
+    approveRequest(req) {
+        if (req.timer)
+            clearTimeout(req.timer);
+        this.pending.delete(req.id);
+        this.byCode.delete(req.code);
+        this.auditLogger.updateHitlStatus(req.id, 'approved');
+        log.info({ id: req.id, code: req.code }, 'HITL approved');
+        this.updateApprovalStatus(req, 'approved');
+        req.resolve('approved');
+    }
+    denyRequest(req, reason) {
+        if (req.timer)
+            clearTimeout(req.timer);
+        this.pending.delete(req.id);
+        this.byCode.delete(req.code);
+        this.auditLogger.updateHitlStatus(req.id, 'denied', reason);
+        log.info({ id: req.id, code: req.code, reason }, 'HITL denied');
+        this.updateApprovalStatus(req, 'denied');
+        req.resolve('denied');
+    }
     /** Recover pending requests from DB on startup */
     // eslint-disable-next-line @typescript-eslint/require-await
     async recoverPending() {
@@ -128,12 +162,15 @@ export class HitlEngine {
                 remaining = this.timeoutMs - elapsed;
                 if (remaining <= 0) {
                     this.auditLogger.updateHitlStatus(row.id, 'timeout');
+                    this.updateApprovalStatus({ id: row.id, code: row.code }, 'timeout');
                     continue;
                 }
             }
             else {
                 remaining = 0; // no timeout
             }
+            const context = readContext(args);
+            const cleanArgs = stripStoredContext(args);
             // Re-arm without re-notifying (provider may not be ready yet)
             const promise = new Promise((resolve) => {
                 const req = {
@@ -141,7 +178,8 @@ export class HitlEngine {
                     code: row.code,
                     agentId: row.agent_id,
                     tool: row.tool,
-                    args,
+                    args: cleanArgs,
+                    ...(context ? { context } : {}),
                     resolve,
                 };
                 this.pending.set(row.id, req);
@@ -151,6 +189,7 @@ export class HitlEngine {
                         this.pending.delete(row.id);
                         this.byCode.delete(row.code);
                         this.auditLogger.updateHitlStatus(row.id, 'timeout');
+                        this.updateApprovalStatus(req, 'timeout');
                         resolve('timeout');
                     }, remaining);
                     timer.unref();
@@ -165,14 +204,49 @@ export class HitlEngine {
                     code: row.code,
                     agentId: row.agent_id,
                     tool: row.tool,
-                    args,
+                    args: cleanArgs,
+                    ...(context ? { context } : {}),
                     sandbox: undefined,
                     timeoutMs: remaining,
+                    badgeCount: this.getPending().length,
                 },
             ])
                 .catch((err) => log.warn({ err }, 'Failed to re-notify recovered HITL request'));
             void promise; // tracked in pending map
         }
     }
+    updateApprovalStatus(req, result) {
+        const badgeCount = this.getPending().length;
+        if (this.provider.updateApprovalStatus) {
+            void this.provider
+                .updateApprovalStatus({ id: req.id, code: req.code, result, badgeCount })
+                .catch((err) => log.warn({ err }, 'Failed to update approval status'));
+            return;
+        }
+        void this.provider
+            .updateBadge?.(badgeCount)
+            .catch((err) => log.warn({ err }, 'Failed to update approval badge count'));
+    }
+}
+function withContext(args, context) {
+    if (!context)
+        return args;
+    return { ...args, _airlock: context };
+}
+function readContext(args) {
+    const raw = args._airlock;
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return undefined;
+    const source = raw;
+    const context = {};
+    if (typeof source.reason === 'string')
+        context.reason = source.reason;
+    if (typeof source.note === 'string')
+        context.note = source.note;
+    return context.reason || context.note ? context : undefined;
+}
+function stripStoredContext(args) {
+    const { _airlock: _ignored, ...cleanArgs } = args;
+    return cleanArgs;
 }
 //# sourceMappingURL=engine.js.map