crewly 1.3.30 → 1.4.0

package/dist/backend/backend/src/controllers/approvals/approvals.controller.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Approvals Controller
+ *
+ * HTTP request handlers for tool approval management endpoints.
+ * Allows external callers to list pending approvals and approve/reject them.
+ * Records audit trail entries for all approval resolutions.
+ *
+ * @module controllers/approvals/approvals.controller
+ */
+import type { Request, Response, NextFunction } from 'express';
+import type { ApprovalQueueService } from '../../services/agent/crewly-agent/approval-queue.service.js';
+/**
+ * Audit trail entry for an approval resolution (approve/reject).
+ */
+export interface ApprovalAuditEntry {
+    /** ISO timestamp of the resolution */
+    timestamp: string;
+    /** Approval ID that was resolved */
+    approvalId: string;
+    /** Tool name from the approval */
+    toolName: string;
+    /** Agent session that requested the tool */
+    sessionName: string;
+    /** Resolution action: 'approved' or 'rejected' */
+    action: 'approved' | 'rejected';
+    /** Who performed the resolution */
+    resolvedBy: string;
+    /** Reason for rejection (if applicable) */
+    reason?: string;
+}
+/**
+ * Set the ApprovalQueueService instance.
+ * Called during server initialization.
+ *
+ * @param service - The ApprovalQueueService instance
+ */
+export declare function setApprovalQueueService(service: ApprovalQueueService): void;
+/**
+ * Get the current ApprovalQueueService instance (for testing).
+ *
+ * @returns The current service or null
+ */
+export declare function getApprovalQueueService(): ApprovalQueueService | null;
+/**
+ * Get the approval audit log (for testing and API access).
+ *
+ * @param limit - Maximum entries to return (default: 50)
+ * @returns Most recent audit entries
+ */
+export declare function getApprovalAuditLog(limit?: number): ApprovalAuditEntry[];
+/**
+ * Clear the approval audit log (for testing only).
+ */
+export declare function clearApprovalAuditLog(): void;
+/**
+ * GET /api/approvals/pending
+ *
+ * List all pending tool approval requests.
+ * Optionally filter by sessionName query parameter.
+ *
+ * @param req - Express request with optional ?sessionName query param
+ * @param res - Express response with pending approvals array
+ * @param next - Express next function
+ */
+export declare function getPendingApprovals(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * POST /api/approvals/:id/approve
+ *
+ * Approve a pending tool execution request.
+ * Records an audit trail entry upon successful approval.
+ *
+ * @param req - Express request with approval ID in params
+ * @param res - Express response with resolution result
+ * @param next - Express next function
+ */
+export declare function approveRequest(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * POST /api/approvals/:id/reject
+ *
+ * Reject a pending tool execution request.
+ * Records an audit trail entry upon successful rejection.
+ *
+ * @param req - Express request with approval ID in params and optional reason in body
+ * @param res - Express response with resolution result
+ * @param next - Express next function
+ */
+export declare function rejectRequest(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * GET /api/approvals/audit
+ *
+ * Retrieve the approval audit trail.
+ * Optional ?limit query parameter (default: 50).
+ *
+ * @param req - Express request with optional ?limit query param
+ * @param res - Express response with audit log entries
+ * @param next - Express next function
+ */
+export declare function getAuditTrail(req: Request, res: Response, next: NextFunction): Promise<void>;
+//# sourceMappingURL=approvals.controller.d.ts.map

package/dist/backend/backend/src/controllers/approvals/approvals.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/approvals/approvals.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,oBAAoB,EAAmB,MAAM,6DAA6D,CAAC;AAWzH;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;IAChC,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAkCD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAE3E;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,oBAAoB,GAAG,IAAI,CAErE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,GAAE,MAAW,GAAG,kBAAkB,EAAE,CAE5E;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/dist/backend/backend/src/controllers/approvals/approvals.controller.js

@@ -0,0 +1,183 @@
+/**
+ * Approvals Controller
+ *
+ * HTTP request handlers for tool approval management endpoints.
+ * Allows external callers to list pending approvals and approve/reject them.
+ * Records audit trail entries for all approval resolutions.
+ *
+ * @module controllers/approvals/approvals.controller
+ */
+/** Module-level reference to the approval queue service */
+let approvalQueue = null;
+/** In-memory audit trail for approval resolutions */
+const approvalAuditLog = [];
+/** Maximum audit entries to retain */
+const MAX_APPROVAL_AUDIT_ENTRIES = 500;
+/**
+ * Record an audit trail entry for an approval resolution.
+ *
+ * @param approval - The resolved approval
+ * @param action - The resolution action
+ * @param resolvedBy - Who resolved it
+ * @param reason - Optional rejection reason
+ */
+function recordApprovalAudit(approval, action, resolvedBy, reason) {
+    const entry = {
+        timestamp: new Date().toISOString(),
+        approvalId: approval.id,
+        toolName: approval.toolName,
+        sessionName: approval.sessionName,
+        action,
+        resolvedBy,
+        reason,
+    };
+    approvalAuditLog.push(entry);
+    // Enforce max entries
+    if (approvalAuditLog.length > MAX_APPROVAL_AUDIT_ENTRIES) {
+        approvalAuditLog.splice(0, approvalAuditLog.length - MAX_APPROVAL_AUDIT_ENTRIES);
+    }
+}
+/**
+ * Set the ApprovalQueueService instance.
+ * Called during server initialization.
+ *
+ * @param service - The ApprovalQueueService instance
+ */
+export function setApprovalQueueService(service) {
+    approvalQueue = service;
+}
+/**
+ * Get the current ApprovalQueueService instance (for testing).
+ *
+ * @returns The current service or null
+ */
+export function getApprovalQueueService() {
+    return approvalQueue;
+}
+/**
+ * Get the approval audit log (for testing and API access).
+ *
+ * @param limit - Maximum entries to return (default: 50)
+ * @returns Most recent audit entries
+ */
+export function getApprovalAuditLog(limit = 50) {
+    return approvalAuditLog.slice(-limit);
+}
+/**
+ * Clear the approval audit log (for testing only).
+ */
+export function clearApprovalAuditLog() {
+    approvalAuditLog.length = 0;
+}
+/**
+ * GET /api/approvals/pending
+ *
+ * List all pending tool approval requests.
+ * Optionally filter by sessionName query parameter.
+ *
+ * @param req - Express request with optional ?sessionName query param
+ * @param res - Express response with pending approvals array
+ * @param next - Express next function
+ */
+export async function getPendingApprovals(req, res, next) {
+    try {
+        if (!approvalQueue) {
+            res.status(503).json({ success: false, error: 'Approval queue not initialized' });
+            return;
+        }
+        const sessionName = req.query.sessionName;
+        const pending = approvalQueue.getPending(sessionName);
+        res.json({ success: true, data: pending });
+    }
+    catch (error) {
+        next(error);
+    }
+}
+/**
+ * POST /api/approvals/:id/approve
+ *
+ * Approve a pending tool execution request.
+ * Records an audit trail entry upon successful approval.
+ *
+ * @param req - Express request with approval ID in params
+ * @param res - Express response with resolution result
+ * @param next - Express next function
+ */
+export async function approveRequest(req, res, next) {
+    try {
+        if (!approvalQueue) {
+            res.status(503).json({ success: false, error: 'Approval queue not initialized' });
+            return;
+        }
+        const { id } = req.params;
+        const resolvedBy = req.body?.resolvedBy || 'api';
+        const result = approvalQueue.approve(id, resolvedBy);
+        if (!result.success) {
+            res.status(404).json({ success: false, error: result.error });
+            return;
+        }
+        // Record audit trail
+        if (result.approval) {
+            recordApprovalAudit(result.approval, 'approved', resolvedBy);
+        }
+        res.json({ success: true, data: result.approval });
+    }
+    catch (error) {
+        next(error);
+    }
+}
+/**
+ * POST /api/approvals/:id/reject
+ *
+ * Reject a pending tool execution request.
+ * Records an audit trail entry upon successful rejection.
+ *
+ * @param req - Express request with approval ID in params and optional reason in body
+ * @param res - Express response with resolution result
+ * @param next - Express next function
+ */
+export async function rejectRequest(req, res, next) {
+    try {
+        if (!approvalQueue) {
+            res.status(503).json({ success: false, error: 'Approval queue not initialized' });
+            return;
+        }
+        const { id } = req.params;
+        const resolvedBy = req.body?.resolvedBy || 'api';
+        const reason = req.body?.reason;
+        const result = approvalQueue.reject(id, resolvedBy, reason);
+        if (!result.success) {
+            res.status(404).json({ success: false, error: result.error });
+            return;
+        }
+        // Record audit trail
+        if (result.approval) {
+            recordApprovalAudit(result.approval, 'rejected', resolvedBy, reason);
+        }
+        res.json({ success: true, data: result.approval });
+    }
+    catch (error) {
+        next(error);
+    }
+}
+/**
+ * GET /api/approvals/audit
+ *
+ * Retrieve the approval audit trail.
+ * Optional ?limit query parameter (default: 50).
+ *
+ * @param req - Express request with optional ?limit query param
+ * @param res - Express response with audit log entries
+ * @param next - Express next function
+ */
+export async function getAuditTrail(req, res, next) {
+    try {
+        const limit = parseInt(req.query.limit, 10) || 50;
+        const entries = getApprovalAuditLog(limit);
+        res.json({ success: true, data: entries });
+    }
+    catch (error) {
+        next(error);
+    }
+}
+//# sourceMappingURL=approvals.controller.js.map

package/dist/backend/backend/src/controllers/approvals/approvals.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.controller.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/approvals/approvals.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,2DAA2D;AAC3D,IAAI,aAAa,GAAgC,IAAI,CAAC;AAEtD,qDAAqD;AACrD,MAAM,gBAAgB,GAAyB,EAAE,CAAC;AAElD,sCAAsC;AACtC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAsBvC;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAC1B,QAAyB,EACzB,MAA+B,EAC/B,UAAkB,EAClB,MAAe;IAEf,MAAM,KAAK,GAAuB;QAChC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,MAAM;QACN,UAAU;QACV,MAAM;KACP,CAAC;IAEF,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE7B,sBAAsB;IACtB,IAAI,gBAAgB,CAAC,MAAM,GAAG,0BAA0B,EAAE,CAAC;QACzD,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,gBAAgB,CAAC,MAAM,GAAG,0BAA0B,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAA6B;IACnE,aAAa,GAAG,OAAO,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE;IACpD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,WAAiC,CAAC;QAChE,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,UAAU,GAAI,GAAG,CAAC,IAAI,EAAE,UAAqB,IAAI,KAAK,CAAC;QAC7D,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAErD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,qBAAqB;QACrB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,mBAAmB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC/D,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,UAAU,GAAI,GAAG,CAAC,IAAI,EAAE,UAAqB,IAAI,KAAK,CAAC;QAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAA4B,CAAC;QACtD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAE5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,qBAAqB;QACrB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,mBAAmB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/backend/backend/src/controllers/approvals/approvals.routes.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Approvals Routes
+ *
+ * Router configuration for tool approval management endpoints.
+ *
+ * @module controllers/approvals/approvals.routes
+ */
+import { Router } from 'express';
+/**
+ * Create the approvals router with pending, approve, reject, and audit endpoints.
+ *
+ * @returns Express router for /api/approvals routes
+ */
+export declare function createApprovalsRouter(): Router;
+//# sourceMappingURL=approvals.routes.d.ts.map

package/dist/backend/backend/src/controllers/approvals/approvals.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.routes.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/approvals/approvals.routes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAgB9C"}

package/dist/backend/backend/src/controllers/approvals/approvals.routes.js

@@ -0,0 +1,27 @@
+/**
+ * Approvals Routes
+ *
+ * Router configuration for tool approval management endpoints.
+ *
+ * @module controllers/approvals/approvals.routes
+ */
+import { Router } from 'express';
+import { getPendingApprovals, approveRequest, rejectRequest, getAuditTrail } from './approvals.controller.js';
+/**
+ * Create the approvals router with pending, approve, reject, and audit endpoints.
+ *
+ * @returns Express router for /api/approvals routes
+ */
+export function createApprovalsRouter() {
+    const router = Router();
+    // GET /api/approvals/pending — list pending approval requests
+    router.get('/pending', getPendingApprovals);
+    // GET /api/approvals/audit — retrieve the approval audit trail
+    router.get('/audit', getAuditTrail);
+    // POST /api/approvals/:id/approve — approve a pending request
+    router.post('/:id/approve', approveRequest);
+    // POST /api/approvals/:id/reject — reject a pending request
+    router.post('/:id/reject', rejectRequest);
+    return router;
+}
+//# sourceMappingURL=approvals.routes.js.map

package/dist/backend/backend/src/controllers/approvals/approvals.routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.routes.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/approvals/approvals.routes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE9G;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,8DAA8D;IAC9D,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IAE5C,+DAA+D;IAC/D,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAEpC,8DAA8D;IAC9D,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAE5C,4DAA4D;IAC5D,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAE1C,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/backend/backend/src/controllers/cloud/cloud-google-auth.controller.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Cloud Google OAuth Controller
+ *
+ * Handles Google OAuth login flow for the CrewlyAI Cloud Console.
+ * Provides both browser-redirect (GET) and API (POST) flows.
+ *
+ * Routes:
+ * - GET  /api/cloud/google/start    -> Redirects to Google consent screen
+ * - GET  /api/cloud/google/callback  -> Handles Google redirect, issues JWT, redirects to frontend
+ * - POST /api/cloud/google/url       -> Returns Google OAuth URL as JSON (for SPA clients)
+ * - POST /api/cloud/google/callback  -> Exchanges code for JWT, returns JSON (for SPA clients)
+ *
+ * @module controllers/cloud/cloud-google-auth.controller
+ */
+import type { Request, Response, NextFunction } from 'express';
+/**
+ * Sign a JWT using HMAC-SHA256.
+ *
+ * @param payload - JWT payload object
+ * @returns Signed JWT string (header.payload.signature)
+ */
+export declare function signJwt(payload: Record<string, unknown>): string;
+/**
+ * Verify a JWT signed with HMAC-SHA256.
+ *
+ * @param token - JWT string (header.payload.signature)
+ * @returns Decoded payload if valid, null if invalid or expired
+ */
+export declare function verifyJwt(token: string): Record<string, unknown> | null;
+/**
+ * GET /api/cloud/google/start
+ *
+ * Redirects the browser to the Google OAuth consent screen.
+ *
+ * @param req - Express request with optional query: { redirect }
+ * @param res - Express response (302 redirect)
+ * @param next - Next function for error propagation
+ */
+export declare function cloudGoogleStart(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * GET /api/cloud/google/callback
+ *
+ * Handles the Google OAuth redirect, exchanges code, issues JWT, and redirects.
+ *
+ * @param req - Express request with query: { code, state? }
+ * @param res - Express response (302 redirect to frontend)
+ * @param next - Next function for error propagation
+ */
+export declare function cloudGoogleCallback(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * POST /api/cloud/google/url
+ *
+ * Returns the Google OAuth consent URL as JSON (for SPA clients).
+ *
+ * @param req - Request with optional body: { redirectTo, redirectUrl }
+ * @param res - Response returning { success, data: { url } }
+ * @param next - Next function for error propagation
+ */
+export declare function cloudGoogleUrl(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * POST /api/cloud/google/callback
+ *
+ * SPA-friendly code exchange: accepts { code } in body, returns JWT + user as JSON.
+ *
+ * @param req - Request with body: { code }
+ * @param res - Response returning { success, data: { accessToken, refreshToken, expiresIn, user } }
+ * @param next - Next function for error propagation
+ */
+export declare function cloudGoogleCallbackPost(req: Request, res: Response, next: NextFunction): Promise<void>;
+//# sourceMappingURL=cloud-google-auth.controller.d.ts.map

package/dist/backend/backend/src/controllers/cloud/cloud-google-auth.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-google-auth.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/cloud/cloud-google-auth.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAwJ/D;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAShE;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAwBvE;AAMD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBrG;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAkExG;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBnG;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAgE5G"}