paygate-mcp 10.0.0 → 10.2.0

package/README.md

@@ -11,7 +11,7 @@ Monetize any MCP server with one command. Add API key auth, per-tool pricing, ra
 - [Quick Start](#quick-start)
 - [What It Does](#what-it-does)
 - [Usage](#usage) — Local stdio, remote HTTP, multi-server, client SDK
-- [API Reference](#api-reference) — All 187+ endpoints
+- [API Reference](#api-reference) — All 199+ endpoints
 - [CLI Options](#cli-options)
 - [Deployment](#deployment) — Docker, docker-compose, systemd, PM2
 - [Load Testing](#load-testing) — k6 benchmarking for production
@@ -66,7 +66,7 @@ Agent → PayGate (auth + billing) → Your MCP Server (stdio or HTTP)
 - **SSE Streaming** — Full MCP Streamable HTTP transport (POST SSE, GET notifications, DELETE sessions)
 - **Audit Log** — Structured audit trail with retention policies, query API, CSV/JSON export
 - **Registry/Discovery** — Agent-discoverable pricing via `/.well-known/mcp-payment`, `/pricing`, and `/.well-known/mcp.json` identity card
-- **OpenAPI 3.1 + Interactive Docs** — Auto-generated spec at `/openapi.json`, Swagger UI at `/docs` — all 187+ endpoints documented
+- **OpenAPI 3.1 + Interactive Docs** — Auto-generated spec at `/openapi.json`, Swagger UI at `/docs` — all 199+ endpoints documented
 - **Public Endpoint Rate Limiting** — Configurable per-IP rate limit (default 300/min) on `/health`, `/info`, `/pricing`, `/docs`, `/openapi.json`, `/.well-known/*`, `/robots.txt`, `/` — 429 with Retry-After header
 - **Robots.txt + HEAD Support** — Standard `/robots.txt` (allow public, disallow admin/keys), HEAD method on all public endpoints for uptime monitoring
 - **Prometheus Metrics** — `/metrics` endpoint with counters, gauges, and uptime in standard text format
@@ -177,6 +177,12 @@ Agent → PayGate (auth + billing) → Your MCP Server (stdio or HTTP)
 - **Request Tracing** — End-to-end structured tracing with span recording at gate, backend, and transform stages — trace/request ID lookup, timing breakdown (gateMs/backendMs/transformMs), configurable sample rate, retention limits, P95 latency tracking, JSON export, manage via `GET/POST/DELETE /admin/tracing`
 - **Budget Policy Engine** — Burn rate monitoring with progressive throttling — daily/monthly budget enforcement, credits/minute burn rate tracking over configurable windows, three actions (alert/throttle/deny), per-namespace and per-key targeting, budget remaining forecast, automatic daily/monthly reset, manage via `GET/POST/DELETE /admin/budget-policies`
 - **Tool Dependency Graph** — DAG-based workflow validation — register tool dependencies, enforce execution order, failure propagation (upstream failure blocks downstream), topological sort, cycle detection, per-workflow execution tracking, hard vs soft dependencies, group scoping, manage via `GET/POST/DELETE /admin/tool-deps`
+- **Quota Management** — Granular daily/weekly/monthly hard caps per API key — per-tool or global quotas, calls or credits metric, burst allowance (temporary over-limit percentage), three overage actions (deny/warn/throttle), UTC-based period boundaries (daily midnight, weekly Monday, monthly 1st), automatic period rollover, manage via `GET/POST/DELETE /admin/quota-rules`
+- **Webhook Replay (DLQ)** — Dead letter queue management for failed webhook deliveries — record failures with full request context (URL, headers, body, HMAC signature), replay individual or bulk failed deliveries, status tracking (pending → retrying → succeeded/exhausted), configurable max retries with timeout, purge by ID or status, age-based expiry, manage via `GET/POST/DELETE /admin/webhook-replay`
+- **Config Profiles** — Named configuration presets with save/activate/rollback — profile inheritance chains (base → child merging), SHA-256 checksums, flat-key diffing for comparison (onlyInA/onlyInB/changed/unchanged), import/export as JSON with merge or replace mode, activation history, circular inheritance detection, manage via `GET/POST/DELETE /admin/config-profiles`
+- **Scheduled Reports** — Automated periodic usage, billing, compliance, and security reports delivered via webhook — daily/weekly/monthly frequency with UTC period bounds, HMAC-SHA256 signed payloads, namespace/group/tool/key filters, report generation with delivery tracking, configurable timeouts, manage via `POST /admin/scheduled-reports`
+- **Approval Workflows** — Pre-execution approval gates for high-cost or sensitive tool calls — three conditions (cost_threshold, tool_match with glob, key_match with prefix), pending requests with configurable TTL (default 1h), approve/deny/expire lifecycle, trigger counting, manage via `POST /admin/approval-workflows`
+- **Gateway Hooks** — Pre/post request lifecycle hooks for custom logic — three stages (pre_gate, pre_backend, post_backend), four types (log, header_inject, metadata_tag, reject), priority-based execution pipeline, tool/key glob filtering, reject short-circuits processing, execution counting, manage via `POST /admin/gateway-hooks`
 - **Anomaly Detection** — `GET /admin/anomalies` identifies unusual patterns: keys with high denial rates, rapid credit depletion, low remaining credits, with severity ratings and detailed descriptions
 - **Usage Forecasting** — `GET /admin/forecast` predicts future credit consumption with per-key depletion estimates, calls remaining, at-risk key identification, system-wide consumption aggregates, and per-tool cost breakdown
 - **Compliance Report** — `GET /admin/compliance` generates compliance-ready report with key governance (expiry coverage), access control (ACL/IP/spending limit coverage), audit trail completeness, weighted overall score, and actionable recommendations
@@ -490,7 +496,7 @@ A real-time admin UI for managing keys, viewing usage, and monitoring tool calls
 | `/.well-known/mcp-payment` | GET | None | Server payment metadata (SEP-2007) |
 | `/.well-known/mcp.json` | GET | None | MCP Server Identity card (discovery) |
 | `/pricing` | GET | None | Full per-tool pricing breakdown |
-| `/openapi.json` | GET | None | OpenAPI 3.1 spec (all 187+ endpoints) |
+| `/openapi.json` | GET | None | OpenAPI 3.1 spec (all 199+ endpoints) |
 | `/docs` | GET | None | Interactive API docs (Swagger UI) |
 | `/robots.txt` | GET | None | Crawler directives (allow public, disallow admin/keys) |
 | `/portal` | GET | None | Self-service API key portal (browser UI, auth via X-API-Key prompt) |

package/dist/approval-workflows.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Approval Workflows — Pre-execution approval gates for tool calls.
+ *
+ * Define rules that require explicit admin approval before high-cost
+ * or sensitive tool calls are executed. Pending requests are held
+ * until approved or denied (or they expire).
+ *
+ * @example
+ * ```ts
+ * const approvals = new ApprovalWorkflowManager();
+ * approvals.configure({ enabled: true });
+ *
+ * // Require approval for tool calls costing more than 100 credits
+ * approvals.createRule({
+ *   name: 'high-cost-gate',
+ *   condition: 'cost_threshold',
+ *   threshold: 100,
+ * });
+ * ```
+ */
+export type ApprovalCondition = 'cost_threshold' | 'tool_match' | 'key_match';
+export type ApprovalStatus = 'pending' | 'approved' | 'denied' | 'expired';
+export interface ApprovalRule {
+    id: string;
+    name: string;
+    condition: ApprovalCondition;
+    /** For cost_threshold: minimum credits to trigger */
+    threshold?: number;
+    /** For tool_match: tool name pattern (exact or glob with *) */
+    toolPattern?: string;
+    /** For key_match: specific API key prefix */
+    keyPrefix?: string;
+    enabled: boolean;
+    createdAt: string;
+    updatedAt: string;
+    triggerCount: number;
+}
+export interface ApprovalRuleCreateParams {
+    name: string;
+    condition: ApprovalCondition;
+    threshold?: number;
+    toolPattern?: string;
+    keyPrefix?: string;
+    enabled?: boolean;
+}
+export interface ApprovalRequest {
+    id: string;
+    ruleId: string;
+    ruleName: string;
+    apiKey: string;
+    tool: string;
+    creditCost: number;
+    status: ApprovalStatus;
+    reason?: string;
+    decidedBy?: string;
+    createdAt: string;
+    updatedAt: string;
+    expiresAt: string;
+}
+export interface ApprovalCheckResult {
+    requiresApproval: boolean;
+    matchedRules: string[];
+    requestId?: string;
+}
+export interface ApprovalDecision {
+    requestId: string;
+    status: 'approved' | 'denied';
+    reason?: string;
+    decidedBy?: string;
+}
+export interface ApprovalWorkflowStats {
+    totalRules: number;
+    enabledRules: number;
+    totalRequests: number;
+    pendingRequests: number;
+    approvedRequests: number;
+    deniedRequests: number;
+    expiredRequests: number;
+    byCondition: Record<ApprovalCondition, number>;
+}
+export interface ApprovalWorkflowConfig {
+    enabled: boolean;
+    maxRules: number;
+    maxPendingRequests: number;
+    defaultExpiryMs: number;
+}
+export declare class ApprovalWorkflowManager {
+    private rules;
+    private requests;
+    private config;
+    createRule(params: ApprovalRuleCreateParams): ApprovalRule;
+    getRule(id: string): ApprovalRule | undefined;
+    listRules(filter?: {
+        condition?: ApprovalCondition;
+        enabled?: boolean;
+    }): ApprovalRule[];
+    updateRule(id: string, updates: Partial<Pick<ApprovalRule, 'name' | 'threshold' | 'toolPattern' | 'keyPrefix' | 'enabled'>>): ApprovalRule;
+    deleteRule(id: string): boolean;
+    check(apiKey: string, tool: string, creditCost: number): ApprovalCheckResult;
+    decide(decision: ApprovalDecision): ApprovalRequest;
+    getRequest(id: string): ApprovalRequest | undefined;
+    listRequests(filter?: {
+        status?: ApprovalStatus;
+        apiKey?: string;
+        tool?: string;
+    }): ApprovalRequest[];
+    expirePending(): number;
+    configure(updates: Partial<ApprovalWorkflowConfig>): ApprovalWorkflowConfig;
+    stats(): ApprovalWorkflowStats;
+    clear(): void;
+}
+//# sourceMappingURL=approval-workflows.d.ts.map

package/dist/approval-workflows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-workflows.d.ts","sourceRoot":"","sources":["../src/approval-workflows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAQH,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,GAAG,YAAY,GAAG,WAAW,CAAC;AAC9E,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE3E,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,iBAAiB,CAAC;IAC7B,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,iBAAiB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;CACzB;AAyBD,qBAAa,uBAAuB;IAClC,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,QAAQ,CAAsC;IACtD,OAAO,CAAC,MAAM,CAKZ;IAIF,UAAU,CAAC,MAAM,EAAE,wBAAwB,GAAG,YAAY;IA+C1D,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAI7C,SAAS,CAAC,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,iBAAiB,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,YAAY,EAAE;IAOxF,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,WAAW,GAAG,aAAa,GAAG,WAAW,GAAG,SAAS,CAAC,CAAC,GAAG,YAAY;IAqB1I,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAM/B,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,mBAAmB;IA6D5E,MAAM,CAAC,QAAQ,EAAE,gBAAgB,GAAG,eAAe;IAwBnD,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAInD,YAAY,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,cAAc,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,eAAe,EAAE;IAQrG,aAAa,IAAI,MAAM;IAevB,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,sBAAsB;IAQ3E,KAAK,IAAI,qBAAqB;IAmB9B,KAAK,IAAI,IAAI;CAId"}

package/dist/approval-workflows.js

@@ -0,0 +1,302 @@
+"use strict";
+/**
+ * Approval Workflows — Pre-execution approval gates for tool calls.
+ *
+ * Define rules that require explicit admin approval before high-cost
+ * or sensitive tool calls are executed. Pending requests are held
+ * until approved or denied (or they expire).
+ *
+ * @example
+ * ```ts
+ * const approvals = new ApprovalWorkflowManager();
+ * approvals.configure({ enabled: true });
+ *
+ * // Require approval for tool calls costing more than 100 credits
+ * approvals.createRule({
+ *   name: 'high-cost-gate',
+ *   condition: 'cost_threshold',
+ *   threshold: 100,
+ * });
+ * ```
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApprovalWorkflowManager = void 0;
+const crypto = __importStar(require("crypto"));
+/* ------------------------------------------------------------------ */
+/*  Helpers                                                            */
+/* ------------------------------------------------------------------ */
+function makeRuleId() {
+    return 'ar_' + crypto.randomBytes(8).toString('hex');
+}
+function makeRequestId() {
+    return 'areq_' + crypto.randomBytes(8).toString('hex');
+}
+function matchesGlob(pattern, value) {
+    if (pattern === '*')
+        return true;
+    if (!pattern.includes('*'))
+        return pattern === value;
+    const regex = new RegExp('^' + pattern.replace(/\*/g, '.*') + '$');
+    return regex.test(value);
+}
+/* ------------------------------------------------------------------ */
+/*  Manager                                                            */
+/* ------------------------------------------------------------------ */
+class ApprovalWorkflowManager {
+    rules = new Map();
+    requests = new Map();
+    config = {
+        enabled: false,
+        maxRules: 100,
+        maxPendingRequests: 5000,
+        defaultExpiryMs: 3600_000, // 1 hour
+    };
+    /* ── Rule CRUD ─────────────────────────────────────────────────── */
+    createRule(params) {
+        if (!this.config.enabled)
+            throw new Error('Approval workflows are disabled');
+        if (this.rules.size >= this.config.maxRules) {
+            throw new Error(`Maximum rules reached (${this.config.maxRules})`);
+        }
+        if (!params.name || !params.condition) {
+            throw new Error('name and condition are required');
+        }
+        const VALID_CONDITIONS = ['cost_threshold', 'tool_match', 'key_match'];
+        if (!VALID_CONDITIONS.includes(params.condition)) {
+            throw new Error(`Invalid condition: ${params.condition}`);
+        }
+        if (params.condition === 'cost_threshold' && (params.threshold === undefined || params.threshold <= 0)) {
+            throw new Error('threshold must be > 0 for cost_threshold condition');
+        }
+        if (params.condition === 'tool_match' && !params.toolPattern) {
+            throw new Error('toolPattern is required for tool_match condition');
+        }
+        if (params.condition === 'key_match' && !params.keyPrefix) {
+            throw new Error('keyPrefix is required for key_match condition');
+        }
+        // Check duplicate name
+        for (const r of this.rules.values()) {
+            if (r.name === params.name)
+                throw new Error(`Rule name '${params.name}' already exists`);
+        }
+        const now = new Date().toISOString();
+        const rule = {
+            id: makeRuleId(),
+            name: params.name,
+            condition: params.condition,
+            threshold: params.threshold,
+            toolPattern: params.toolPattern,
+            keyPrefix: params.keyPrefix,
+            enabled: params.enabled !== false,
+            createdAt: now,
+            updatedAt: now,
+            triggerCount: 0,
+        };
+        this.rules.set(rule.id, rule);
+        return rule;
+    }
+    getRule(id) {
+        return this.rules.get(id);
+    }
+    listRules(filter) {
+        let result = Array.from(this.rules.values());
+        if (filter?.condition)
+            result = result.filter(r => r.condition === filter.condition);
+        if (filter?.enabled !== undefined)
+            result = result.filter(r => r.enabled === filter.enabled);
+        return result;
+    }
+    updateRule(id, updates) {
+        const rule = this.rules.get(id);
+        if (!rule)
+            throw new Error(`Rule not found: ${id}`);
+        if (updates.name !== undefined) {
+            for (const r of this.rules.values()) {
+                if (r.id !== id && r.name === updates.name) {
+                    throw new Error(`Rule name '${updates.name}' already exists`);
+                }
+            }
+            rule.name = updates.name;
+        }
+        if (updates.threshold !== undefined)
+            rule.threshold = updates.threshold;
+        if (updates.toolPattern !== undefined)
+            rule.toolPattern = updates.toolPattern;
+        if (updates.keyPrefix !== undefined)
+            rule.keyPrefix = updates.keyPrefix;
+        if (updates.enabled !== undefined)
+            rule.enabled = updates.enabled;
+        rule.updatedAt = new Date().toISOString();
+        return rule;
+    }
+    deleteRule(id) {
+        return this.rules.delete(id);
+    }
+    /* ── Check & Request ───────────────────────────────────────────── */
+    check(apiKey, tool, creditCost) {
+        if (!this.config.enabled)
+            return { requiresApproval: false, matchedRules: [] };
+        const matched = [];
+        for (const rule of this.rules.values()) {
+            if (!rule.enabled)
+                continue;
+            let matches = false;
+            switch (rule.condition) {
+                case 'cost_threshold':
+                    matches = creditCost >= (rule.threshold ?? Infinity);
+                    break;
+                case 'tool_match':
+                    matches = rule.toolPattern ? matchesGlob(rule.toolPattern, tool) : false;
+                    break;
+                case 'key_match':
+                    matches = rule.keyPrefix ? apiKey.startsWith(rule.keyPrefix) : false;
+                    break;
+            }
+            if (matches) {
+                matched.push(rule.id);
+                rule.triggerCount++;
+            }
+        }
+        if (matched.length === 0)
+            return { requiresApproval: false, matchedRules: [] };
+        // Create a pending request
+        const pendingCount = Array.from(this.requests.values()).filter(r => r.status === 'pending').length;
+        if (pendingCount >= this.config.maxPendingRequests) {
+            throw new Error('Maximum pending approval requests reached');
+        }
+        const firstRule = this.rules.get(matched[0]);
+        const now = new Date();
+        const request = {
+            id: makeRequestId(),
+            ruleId: firstRule.id,
+            ruleName: firstRule.name,
+            apiKey,
+            tool,
+            creditCost,
+            status: 'pending',
+            createdAt: now.toISOString(),
+            updatedAt: now.toISOString(),
+            expiresAt: new Date(now.getTime() + this.config.defaultExpiryMs).toISOString(),
+        };
+        this.requests.set(request.id, request);
+        return {
+            requiresApproval: true,
+            matchedRules: matched,
+            requestId: request.id,
+        };
+    }
+    /* ── Decision ──────────────────────────────────────────────────── */
+    decide(decision) {
+        const request = this.requests.get(decision.requestId);
+        if (!request)
+            throw new Error(`Request not found: ${decision.requestId}`);
+        if (request.status !== 'pending') {
+            throw new Error(`Request is not pending (current: ${request.status})`);
+        }
+        // Check expiry
+        if (new Date(request.expiresAt) < new Date()) {
+            request.status = 'expired';
+            request.updatedAt = new Date().toISOString();
+            throw new Error('Request has expired');
+        }
+        request.status = decision.status;
+        request.reason = decision.reason;
+        request.decidedBy = decision.decidedBy;
+        request.updatedAt = new Date().toISOString();
+        return request;
+    }
+    /* ── Request Queries ───────────────────────────────────────────── */
+    getRequest(id) {
+        return this.requests.get(id);
+    }
+    listRequests(filter) {
+        let result = Array.from(this.requests.values());
+        if (filter?.status)
+            result = result.filter(r => r.status === filter.status);
+        if (filter?.apiKey)
+            result = result.filter(r => r.apiKey === filter.apiKey);
+        if (filter?.tool)
+            result = result.filter(r => r.tool === filter.tool);
+        return result.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+    }
+    expirePending() {
+        const now = new Date();
+        let count = 0;
+        for (const req of this.requests.values()) {
+            if (req.status === 'pending' && new Date(req.expiresAt) < now) {
+                req.status = 'expired';
+                req.updatedAt = now.toISOString();
+                count++;
+            }
+        }
+        return count;
+    }
+    /* ── Config & Stats ────────────────────────────────────────────── */
+    configure(updates) {
+        if (updates.enabled !== undefined)
+            this.config.enabled = updates.enabled;
+        if (updates.maxRules !== undefined && updates.maxRules > 0)
+            this.config.maxRules = updates.maxRules;
+        if (updates.maxPendingRequests !== undefined && updates.maxPendingRequests > 0)
+            this.config.maxPendingRequests = updates.maxPendingRequests;
+        if (updates.defaultExpiryMs !== undefined && updates.defaultExpiryMs > 0)
+            this.config.defaultExpiryMs = updates.defaultExpiryMs;
+        return { ...this.config };
+    }
+    stats() {
+        const rules = Array.from(this.rules.values());
+        const requests = Array.from(this.requests.values());
+        const byCondition = { cost_threshold: 0, tool_match: 0, key_match: 0 };
+        for (const r of rules)
+            byCondition[r.condition]++;
+        return {
+            totalRules: rules.length,
+            enabledRules: rules.filter(r => r.enabled).length,
+            totalRequests: requests.length,
+            pendingRequests: requests.filter(r => r.status === 'pending').length,
+            approvedRequests: requests.filter(r => r.status === 'approved').length,
+            deniedRequests: requests.filter(r => r.status === 'denied').length,
+            expiredRequests: requests.filter(r => r.status === 'expired').length,
+            byCondition,
+        };
+    }
+    clear() {
+        this.rules.clear();
+        this.requests.clear();
+    }
+}
+exports.ApprovalWorkflowManager = ApprovalWorkflowManager;
+//# sourceMappingURL=approval-workflows.js.map

package/dist/approval-workflows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-workflows.js","sourceRoot":"","sources":["../src/approval-workflows.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,+CAAiC;AAgFjC,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,SAAS,UAAU;IACjB,OAAO,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,KAAa;IACjD,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,KAAK,KAAK,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;IACnE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,MAAa,uBAAuB;IAC1B,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IACxC,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC9C,MAAM,GAA2B;QACvC,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,GAAG;QACb,kBAAkB,EAAE,IAAI;QACxB,eAAe,EAAE,QAAQ,EAAE,SAAS;KACrC,CAAC;IAEF,sEAAsE;IAEtE,UAAU,CAAC,MAAgC;QACzC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,gBAAgB,GAAwB,CAAC,gBAAgB,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAC5F,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,KAAK,gBAAgB,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,CAAC;YACvG,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,uBAAuB;QACvB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,MAAM,CAAC,IAAI,kBAAkB,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,GAAiB;YACzB,EAAE,EAAE,UAAU,EAAE;YAChB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,KAAK;YACjC,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,YAAY,EAAE,CAAC;SAChB,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,SAAS,CAAC,MAA6D;QACrE,IAAI,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,SAAS;YAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;QACrF,IAAI,MAAM,EAAE,OAAO,KAAK,SAAS;YAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7F,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,UAAU,CAAC,EAAU,EAAE,OAAoG;QACzH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAEpD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACpC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;oBAC3C,MAAM,IAAI,KAAK,CAAC,cAAc,OAAO,CAAC,IAAI,kBAAkB,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC3B,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACxE,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAC9E,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACxE,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAElE,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,EAAU;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,sEAAsE;IAEtE,KAAK,CAAC,MAAc,EAAE,IAAY,EAAE,UAAkB;QACpD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAE/E,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAE5B,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;gBACvB,KAAK,gBAAgB;oBACnB,OAAO,GAAG,UAAU,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;oBACrD,MAAM;gBACR,KAAK,YAAY;oBACf,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;oBACzE,MAAM;gBACR,KAAK,WAAW;oBACd,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;oBACrE,MAAM;YACV,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtB,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAE/E,2BAA2B;QAC3B,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QACnG,IAAI,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAoB;YAC/B,EAAE,EAAE,aAAa,EAAE;YACnB,MAAM,EAAE,SAAS,CAAC,EAAE;YACpB,QAAQ,EAAE,SAAS,CAAC,IAAI;YACxB,MAAM;YACN,IAAI;YACJ,UAAU;YACV,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;YAC5B,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;YAC5B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE;SAC/E,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAEvC,OAAO;YACL,gBAAgB,EAAE,IAAI;YACtB,YAAY,EAAE,OAAO;YACrB,SAAS,EAAE,OAAO,CAAC,EAAE;SACtB,CAAC;IACJ,CAAC;IAED,sEAAsE;IAEtE,MAAM,CAAC,QAA0B;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACzE,CAAC;QAED,eAAe;QACf,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC7C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;YAC3B,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QACjC,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QACjC,OAAO,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QACvC,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE7C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,sEAAsE;IAEtE,UAAU,CAAC,EAAU;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,YAAY,CAAC,MAAoE;QAC/E,IAAI,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,IAAI,MAAM,EAAE,MAAM;YAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5E,IAAI,MAAM,EAAE,MAAM;YAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5E,IAAI,MAAM,EAAE,IAAI;YAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,aAAa;QACX,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,EAAE,CAAC;gBAC9D,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;gBACvB,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;gBAClC,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sEAAsE;IAEtE,SAAS,CAAC,OAAwC;QAChD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACpG,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,IAAI,OAAO,CAAC,kBAAkB,GAAG,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAC5I,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,CAAC,eAAe,GAAG,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAChI,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,MAAM,WAAW,GAAsC,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAE1G,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QAElD,OAAO;YACL,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;YACjD,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;YACpE,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM;YACtE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;YAClE,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;YACpE,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF;AAhPD,0DAgPC"}

package/dist/config-profiles.d.ts

@@ -0,0 +1,126 @@
+/**
+ * ConfigProfileManager — Named configuration presets.
+ *
+ * Store and switch between named configuration profiles for different
+ * environments (dev, staging, production) or use cases:
+ *   - Save current config as a named profile
+ *   - Switch between profiles at runtime
+ *   - Compare profiles to see differences
+ *   - Import/export profiles as JSON
+ *   - Profile inheritance (extend a base profile)
+ *   - Rollback to previous profile
+ *
+ * Zero external dependencies.
+ */
+export interface ConfigProfile {
+    id: string;
+    name: string;
+    /** Optional description of what this profile is for. */
+    description?: string;
+    /** The configuration snapshot. */
+    config: Record<string, unknown>;
+    /** Profile this extends (inherits values from). */
+    extendsProfile?: string;
+    /** SHA-256 checksum of the config JSON. */
+    checksum: string;
+    /** Whether this is the currently active profile. */
+    active: boolean;
+    createdAt: number;
+    updatedAt: number;
+}
+export interface ProfileDiff {
+    /** Keys only in profile A. */
+    onlyInA: string[];
+    /** Keys only in profile B. */
+    onlyInB: string[];
+    /** Keys present in both but with different values. */
+    changed: Array<{
+        key: string;
+        valueA: unknown;
+        valueB: unknown;
+    }>;
+    /** Keys with identical values in both. */
+    unchanged: string[];
+}
+export interface ProfileStats {
+    totalProfiles: number;
+    activeProfile: string | null;
+    switchCount: number;
+    lastSwitchAt: number | null;
+    rollbackAvailable: boolean;
+}
+export interface ConfigProfileManagerConfig {
+    enabled: boolean;
+    maxProfiles: number;
+    /** Max config size in bytes. Default 1MB. */
+    maxConfigSize: number;
+}
+export declare class ConfigProfileManager {
+    private config;
+    private profiles;
+    private activeProfileId;
+    private previousProfileId;
+    private _switchCount;
+    private _lastSwitchAt;
+    private counter;
+    constructor(config?: Partial<ConfigProfileManagerConfig>);
+    /**
+     * Save a configuration as a named profile.
+     */
+    saveProfile(params: {
+        name: string;
+        config: Record<string, unknown>;
+        description?: string;
+        extendsProfile?: string;
+        activate?: boolean;
+    }): ConfigProfile;
+    /**
+     * Get a profile by ID.
+     */
+    getProfile(id: string): ConfigProfile | undefined;
+    /**
+     * Get a profile by name.
+     */
+    getProfileByName(name: string): ConfigProfile | undefined;
+    /**
+     * List all profiles.
+     */
+    listProfiles(): ConfigProfile[];
+    /**
+     * Delete a profile.
+     */
+    deleteProfile(id: string): boolean;
+    /**
+     * Activate a profile (makes it the current active profile).
+     * Returns the resolved configuration (with inheritance applied).
+     */
+    activateProfile(id: string): Record<string, unknown>;
+    /**
+     * Rollback to the previously active profile.
+     */
+    rollback(): Record<string, unknown> | null;
+    /**
+     * Get the currently active profile.
+     */
+    getActive(): ConfigProfile | null;
+    /**
+     * Resolve configuration for a profile, applying inheritance.
+     */
+    resolveConfig(id: string): Record<string, unknown>;
+    /**
+     * Compare two profiles and return the differences.
+     */
+    compare(idA: string, idB: string): ProfileDiff;
+    /**
+     * Export all profiles as JSON.
+     */
+    exportProfiles(): string;
+    /**
+     * Import profiles from JSON. Returns count imported.
+     */
+    importProfiles(json: string, mode?: 'merge' | 'replace'): number;
+    configure(updates: Partial<ConfigProfileManagerConfig>): ConfigProfileManagerConfig;
+    stats(): ProfileStats;
+    clear(): void;
+}
+//# sourceMappingURL=config-profiles.d.ts.map

package/dist/config-profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-profiles.d.ts","sourceRoot":"","sources":["../src/config-profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,8BAA8B;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,8BAA8B;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,sDAAsD;IACtD,OAAO,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAClE,0CAA0C;IAC1C,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,aAAa,EAAE,MAAM,CAAC;CACvB;AAmCD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,QAAQ,CAAoC;IACpD,OAAO,CAAC,eAAe,CAAuB;IAC9C,OAAO,CAAC,iBAAiB,CAAuB;IAGhD,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,aAAa,CAAuB;IAE5C,OAAO,CAAC,OAAO,CAAK;gBAER,MAAM,CAAC,EAAE,OAAO,CAAC,0BAA0B,CAAC;IAMxD;;OAEG;IACH,WAAW,CAAC,MAAM,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,GAAG,aAAa;IAmEjB;;OAEG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAMjD;;OAEG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IASzD;;OAEG;IACH,YAAY,IAAI,aAAa,EAAE;IAQ/B;;OAEG;IACH,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAelC;;;OAGG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAmBpD;;OAEG;IACH,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAO1C;;OAEG;IACH,SAAS,IAAI,aAAa,GAAG,IAAI;IAKjC;;OAEG;IACH,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IA+BlD;;OAEG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW;IAoC9C;;OAEG;IACH,cAAc,IAAI,MAAM;IAUxB;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,OAAO,GAAG,SAAmB,GAAG,MAAM;IA4BzE,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,0BAA0B,CAAC,GAAG,0BAA0B;IAOnF,KAAK,IAAI,YAAY;IAWrB,KAAK,IAAI,IAAI;CAOd"}