sandstream-kit 1.0.0

package/dist/apm-instrumentor.js

@@ -0,0 +1,225 @@
+import { IdGenerators } from "./id-generator.js";
+// ─── APMInstrumentor ──────────────────────────────────────────────────────────
+export class APMInstrumentor {
+    traces = new Map();
+    spans = new Map();
+    metrics = [];
+    serviceName;
+    constructor(serviceName = "default-service") {
+        this.serviceName = serviceName;
+    }
+    // ─── Tracing ──────────────────────────────────────────────────────────────
+    /**
+     * Start a new trace.
+     */
+    startTrace(name) {
+        const id = IdGenerators.trace();
+        const trace = {
+            id,
+            name,
+            startTime: new Date().toISOString(),
+            endTime: "",
+            duration: 0,
+            spans: [],
+            status: "pending",
+        };
+        this.traces.set(id, trace);
+        return trace;
+    }
+    /**
+     * End a trace.
+     */
+    endTrace(traceId, status = "success") {
+        const trace = this.traces.get(traceId);
+        if (!trace)
+            return null;
+        trace.endTime = new Date().toISOString();
+        trace.duration =
+            new Date(trace.endTime).getTime() - new Date(trace.startTime).getTime();
+        trace.status = status;
+        return trace;
+    }
+    /**
+     * Start a span within a trace.
+     */
+    startSpan(traceId, name, operation, parentId) {
+        const span = {
+            id: IdGenerators.span(),
+            traceId,
+            parentId,
+            name,
+            operation,
+            duration: 0,
+            startTime: new Date().toISOString(),
+            endTime: "",
+            status: "pending",
+            tags: {},
+            logs: [],
+        };
+        this.spans.set(span.id, span);
+        // Add span to trace
+        const trace = this.traces.get(traceId);
+        if (trace) {
+            trace.spans.push(span);
+        }
+        return span;
+    }
+    /**
+     * End a span.
+     */
+    endSpan(spanId, status = "success") {
+        const span = this.spans.get(spanId);
+        if (!span)
+            return null;
+        span.endTime = new Date().toISOString();
+        span.duration =
+            new Date(span.endTime).getTime() - new Date(span.startTime).getTime();
+        span.status = status;
+        return span;
+    }
+    /**
+     * Add tag to span.
+     */
+    addTag(spanId, key, value) {
+        const span = this.spans.get(spanId);
+        if (span) {
+            span.tags[key] = value;
+        }
+    }
+    /**
+     * Add log entry to span.
+     */
+    addLog(spanId, message) {
+        const span = this.spans.get(spanId);
+        if (span) {
+            span.logs.push({
+                timestamp: new Date().toISOString(),
+                message,
+            });
+        }
+    }
+    /**
+     * Get trace by ID.
+     */
+    getTrace(traceId) {
+        return this.traces.get(traceId) || null;
+    }
+    /**
+     * Get recent traces.
+     */
+    getRecentTraces(limit = 10) {
+        return [...this.traces.values()]
+            .filter((t) => t.endTime) // completed traces
+            .sort((a, b) => new Date(b.endTime).getTime() - new Date(a.endTime).getTime())
+            .slice(0, limit);
+    }
+    /**
+     * Get slow traces (above or equal to threshold).
+     */
+    getSlowTraces(thresholdMs = 1000) {
+        return [...this.traces.values()].filter((t) => t.endTime && t.duration >= thresholdMs);
+    }
+    // ─── Metrics ──────────────────────────────────────────────────────────────
+    /**
+     * Record performance metric.
+     */
+    recordMetric(name, value, unit = "ms") {
+        this.metrics.push({
+            name,
+            value,
+            unit,
+            timestamp: new Date().toISOString(),
+        });
+    }
+    /**
+     * Get service metrics.
+     */
+    getServiceMetrics() {
+        const traces = [...this.traces.values()].filter((t) => t.endTime);
+        const responseTimes = traces.map((t) => t.duration).sort((a, b) => a - b);
+        const getPercentile = (p) => {
+            if (responseTimes.length === 0)
+                return 0;
+            const index = Math.ceil((responseTimes.length * p) / 100) - 1;
+            return Math.max(0, responseTimes[index] || 0);
+        };
+        const errors = traces.filter((t) => t.status === "error").length;
+        const totalDuration = traces.reduce((sum, t) => sum + t.duration, 0);
+        const avgResponseTime = traces.length > 0 ? totalDuration / traces.length : 0;
+        // Calculate throughput (requests per second)
+        const timespan = traces.length > 0
+            ? (new Date(traces[traces.length - 1].startTime).getTime() -
+                new Date(traces[0].startTime).getTime()) /
+                1000
+            : 0;
+        const throughput = timespan > 0 ? traces.length / timespan : 0;
+        return {
+            serviceName: this.serviceName,
+            requestCount: traces.length,
+            errorCount: errors,
+            averageResponseTime: Math.round(avgResponseTime),
+            p95ResponseTime: getPercentile(95),
+            p99ResponseTime: getPercentile(99),
+            throughput: Math.round(throughput * 100) / 100,
+        };
+    }
+    /**
+     * Get metrics by name.
+     */
+    getMetricsByName(name) {
+        return this.metrics.filter((m) => m.name === name);
+    }
+    /**
+     * Get all metrics.
+     */
+    getAllMetrics() {
+        return [...this.metrics];
+    }
+    /**
+     * Get metric statistics.
+     */
+    getMetricStats(name) {
+        const metrics = this.getMetricsByName(name);
+        if (metrics.length === 0)
+            return null;
+        const values = metrics.map((m) => m.value);
+        const sum = values.reduce((a, b) => a + b, 0);
+        return {
+            min: Math.min(...values),
+            max: Math.max(...values),
+            average: sum / values.length,
+            count: values.length,
+        };
+    }
+    // ─── Health Check ────────────────────────────────────────────────────────
+    /**
+     * Check service health based on metrics.
+     */
+    checkHealth() {
+        const metrics = this.getServiceMetrics();
+        const errorRate = metrics.requestCount > 0 ? metrics.errorCount / metrics.requestCount : 0;
+        let healthy = true;
+        let status = "healthy";
+        if (metrics.averageResponseTime > 2000) {
+            healthy = false;
+            status = "degraded - slow response times";
+        }
+        else if (errorRate > 0.05) {
+            // > 5% error rate
+            healthy = false;
+            status = "unhealthy - high error rate";
+        }
+        return { healthy, status, metrics };
+    }
+    // ─── Cache helpers ────────────────────────────────────────────────────────
+    getTraceCache() {
+        return this.traces;
+    }
+    getSpanCache() {
+        return this.spans;
+    }
+    getMetricsCache() {
+        return this.metrics;
+    }
+}
+//# sourceMappingURL=apm-instrumentor.js.map

package/dist/apm-instrumentor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apm-instrumentor.js","sourceRoot":"","sources":["../src/apm-instrumentor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AA4CjD,iFAAiF;AAEjF,MAAM,OAAO,eAAe;IAClB,MAAM,GAAuB,IAAI,GAAG,EAAE,CAAC;IACvC,KAAK,GAA2B,IAAI,GAAG,EAAE,CAAC;IAC1C,OAAO,GAAwB,EAAE,CAAC;IAClC,WAAW,CAAS;IAE5B,YAAY,cAAsB,iBAAiB;QACjD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,6EAA6E;IAE7E;;OAEG;IACH,UAAU,CAAC,IAAY;QACrB,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,KAAK,GAAU;YACnB,EAAE;YACF,IAAI;YACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,EAAE;YACX,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,SAAS;SAClB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,OAAe,EAAE,SAA8B,SAAS;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,KAAK,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,KAAK,CAAC,QAAQ;YACZ,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1E,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;QAEtB,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,SAAS,CACP,OAAe,EACf,IAAY,EACZ,SAAiB,EACjB,QAAiB;QAEjB,MAAM,IAAI,GAAc;YACtB,EAAE,EAAE,YAAY,CAAC,IAAI,EAAE;YACvB,OAAO;YACP,QAAQ;YACR,IAAI;YACJ,SAAS;YACT,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,EAAE;SACT,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAE9B,oBAAoB;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,MAAc,EAAE,SAA8B,SAAS;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,IAAI,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ;YACX,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACxE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAc,EAAE,GAAW,EAAE,KAAc;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAc,EAAE,OAAe;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,OAAO;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,OAAe;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,KAAK,GAAG,EAAE;QACxB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,mBAAmB;aAC5C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7E,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,cAAsB,IAAI;QACtC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,IAAI,WAAW,CAAC,CAAC;IACzF,CAAC;IAED,6EAA6E;IAE7E;;OAEG;IACH,YAAY,CAAC,IAAY,EAAE,KAAa,EAAE,OAAe,IAAI;QAC3D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChB,IAAI;YACJ,KAAK;YACL,IAAI;YACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE1E,MAAM,aAAa,GAAG,CAAC,CAAS,EAAU,EAAE;YAC1C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;QACjE,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,eAAe,GACnB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAExD,6CAA6C;QAC7C,MAAM,QAAQ,GACZ,MAAM,CAAC,MAAM,GAAG,CAAC;YACf,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;gBACtD,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC1C,IAAI;YACN,CAAC,CAAC,CAAC,CAAC;QACR,MAAM,UAAU,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/D,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,UAAU,EAAE,MAAM;YAClB,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;YAChD,eAAe,EAAE,aAAa,CAAC,EAAE,CAAC;YAClC,eAAe,EAAE,aAAa,CAAC,EAAE,CAAC;YAClC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG;SAC/C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,IAAY;QAMzB,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAE9C,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;YACxB,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;YACxB,OAAO,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM;YAC5B,KAAK,EAAE,MAAM,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC;IAED,4EAA4E;IAE5E;;OAEG;IACH,WAAW;QACT,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAE3F,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,MAAM,GAAG,SAAS,CAAC;QAEvB,IAAI,OAAO,CAAC,mBAAmB,GAAG,IAAI,EAAE,CAAC;YACvC,OAAO,GAAG,KAAK,CAAC;YAChB,MAAM,GAAG,gCAAgC,CAAC;QAC5C,CAAC;aAAM,IAAI,SAAS,GAAG,IAAI,EAAE,CAAC;YAC5B,kBAAkB;YAClB,OAAO,GAAG,KAAK,CAAC;YAChB,MAAM,GAAG,6BAA6B,CAAC;QACzC,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACtC,CAAC;IAED,6EAA6E;IAE7E,aAAa;QACX,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/dist/approval-model.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Governance & Approvals System — data models
+ * Approval workflows, policies, change tracking
+ */
+export type ChangeType = "config_change" | "secret_access" | "service_integration" | "policy_update" | "member_role_change";
+export type ApprovalStatus = "pending" | "approved" | "rejected" | "expired";
+export type ApprovalDecision = "approve" | "reject";
+export interface ChangeRequest {
+    id: string;
+    team_id: string;
+    type: ChangeType;
+    requester_id: string;
+    requester_email: string;
+    resource_type: string;
+    resource_id: string;
+    resource_name: string;
+    description: string;
+    proposed_changes: Record<string, unknown>;
+    status: "pending" | "approved" | "rejected" | "executed" | "rolled_back";
+    policy_id?: string;
+    required_approvals: number;
+    collected_approvals: number;
+    created_at: string;
+    expires_at: string;
+    executed_at?: string;
+    auto_execute?: boolean;
+}
+export interface ApprovalPolicy {
+    id: string;
+    team_id: string;
+    resource_type: string;
+    change_types: ChangeType[];
+    required_approvers: number;
+    allowed_approver_roles: string[];
+    auto_approve_for_roles?: string[];
+    timeout_hours: number;
+    notification_channels: string[];
+    created_at: string;
+    updated_at: string;
+}
+export interface Approval {
+    id: string;
+    request_id: string;
+    team_id: string;
+    approver_id: string;
+    approver_email: string;
+    decision: ApprovalDecision;
+    status: ApprovalStatus;
+    comment?: string;
+    approved_at?: string;
+    created_at: string;
+}
+export interface GovernanceLog {
+    id: string;
+    team_id: string;
+    event_type: "change_requested" | "approval_requested" | "approval_given" | "change_executed" | "change_rejected" | "policy_violated" | "policy_created";
+    actor_id: string;
+    actor_email: string;
+    resource_type: string;
+    resource_id: string;
+    details: Record<string, unknown>;
+    timestamp: string;
+}
+/**
+ * Policy evaluation result
+ */
+export interface PolicyEvaluation {
+    requiresApproval: boolean;
+    policy?: ApprovalPolicy;
+    requiredApprovals: number;
+    reason: string;
+}
+/**
+ * Approval statistics for dashboard
+ */
+export interface ApprovalMetrics {
+    total_pending: number;
+    total_approved: number;
+    total_rejected: number;
+    avg_approval_time_hours: number;
+    approval_rate_percent: number;
+}

package/dist/approval-model.js

@@ -0,0 +1,6 @@
+/**
+ * Governance & Approvals System — data models
+ * Approval workflows, policies, change tracking
+ */
+export {};
+//# sourceMappingURL=approval-model.js.map

package/dist/approval-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-model.js","sourceRoot":"","sources":["../src/approval-model.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/approval-service.d.ts

@@ -0,0 +1,39 @@
+import type { ChangeRequest, ApprovalPolicy, Approval, GovernanceLog, ChangeType, ApprovalDecision, ApprovalMetrics } from "./approval-model.js";
+/**
+ * Create approval policy
+ */
+export declare function createApprovalPolicy(team_id: string, resource_type: string, required_approvers: number, allowed_roles?: string[]): {
+    policy: ApprovalPolicy;
+    error?: string;
+};
+/**
+ * Request change approval
+ */
+export declare function requestChangeApproval(team_id: string, change_type: ChangeType, requester_id: string, requester_email: string, resource_type: string, resource_id: string, resource_name: string, description: string, proposed_changes: Record<string, unknown>): {
+    request: ChangeRequest;
+    error?: string;
+};
+/**
+ * Approve or reject change
+ */
+export declare function respondToApprovalRequest(request_id: string, approver_id: string, approver_email: string, decision: ApprovalDecision, comment?: string): {
+    approval: Approval;
+    error?: string;
+};
+/**
+ * Get pending approvals for user
+ */
+export declare function getPendingApprovalsForUser(user_id: string): {
+    requests: ChangeRequest[];
+};
+/**
+ * Get approval metrics
+ */
+export declare function getApprovalMetrics(team_id: string): ApprovalMetrics;
+/**
+ * Get governance logs
+ */
+export declare function getGovernanceLogs(team_id: string, limit?: number): {
+    logs: GovernanceLog[];
+    total: number;
+};

package/dist/approval-service.js

@@ -0,0 +1,236 @@
+import { randomUUID } from "node:crypto";
+/**
+ * In-memory storage (production would use database)
+ */
+const changeRequests = new Map();
+const approvalPolicies = new Map();
+const approvals = new Map();
+const governanceLogs = [];
+/**
+ * Default policies per resource type
+ */
+const DEFAULT_POLICIES = {
+    config_change: {
+        required_approvers: 1,
+        allowed_approver_roles: ["owner", "admin"],
+        timeout_hours: 24,
+    },
+    secret_access: {
+        required_approvers: 2,
+        allowed_approver_roles: ["owner"],
+        timeout_hours: 1,
+    },
+    service_integration: {
+        required_approvers: 1,
+        allowed_approver_roles: ["owner", "admin"],
+        timeout_hours: 24,
+    },
+};
+/**
+ * Create approval policy
+ */
+export function createApprovalPolicy(team_id, resource_type, required_approvers, allowed_roles = ["owner", "admin"]) {
+    if (required_approvers < 1) {
+        return { policy: {}, error: "At least 1 approver required" };
+    }
+    const policy = {
+        id: `policy_${randomUUID()}`,
+        team_id,
+        resource_type,
+        change_types: ["config_change", "secret_access", "service_integration"],
+        required_approvers,
+        allowed_approver_roles: allowed_roles,
+        timeout_hours: 24,
+        notification_channels: ["email"],
+        created_at: new Date().toISOString(),
+        updated_at: new Date().toISOString(),
+    };
+    approvalPolicies.set(policy.id, policy);
+    logGovernance(team_id, "system", "policy_created", resource_type, policy.id, {
+        required_approvers,
+        allowed_roles,
+    });
+    return { policy };
+}
+/**
+ * Request change approval
+ */
+export function requestChangeApproval(team_id, change_type, requester_id, requester_email, resource_type, resource_id, resource_name, description, proposed_changes) {
+    // Evaluate policy
+    const evaluation = evaluatePolicy(team_id, change_type, resource_type);
+    const timeoutHours = evaluation.policy?.timeout_hours ?? 24;
+    const changeRequest = {
+        id: `change_${randomUUID()}`,
+        team_id,
+        type: change_type,
+        requester_id,
+        requester_email,
+        resource_type,
+        resource_id,
+        resource_name,
+        description,
+        proposed_changes,
+        status: evaluation.requiresApproval ? "pending" : "approved",
+        policy_id: evaluation.policy?.id,
+        required_approvals: evaluation.requiredApprovals,
+        collected_approvals: 0,
+        created_at: new Date().toISOString(),
+        expires_at: new Date(Date.now() + timeoutHours * 60 * 60 * 1000).toISOString(),
+        auto_execute: true,
+    };
+    changeRequests.set(changeRequest.id, changeRequest);
+    logGovernance(team_id, requester_id, "change_requested", resource_type, resource_id, {
+        change_type,
+        requires_approval: evaluation.requiresApproval,
+        required_approvals: evaluation.requiredApprovals,
+    });
+    return { request: changeRequest };
+}
+/**
+ * Approve or reject change
+ */
+export function respondToApprovalRequest(request_id, approver_id, approver_email, decision, comment) {
+    const request = changeRequests.get(request_id);
+    if (!request) {
+        return { approval: {}, error: "Change request not found" };
+    }
+    // Check expiry
+    if (new Date(request.expires_at) < new Date()) {
+        return { approval: {}, error: "Approval request expired" };
+    }
+    // Check if already approved/rejected
+    if (request.status !== "pending") {
+        return { approval: {}, error: "Request already processed" };
+    }
+    const approval = {
+        id: `approval_${randomUUID()}`,
+        request_id,
+        team_id: request.team_id,
+        approver_id,
+        approver_email,
+        decision,
+        status: decision === "approve" ? "approved" : "rejected",
+        comment,
+        approved_at: new Date().toISOString(),
+        created_at: new Date().toISOString(),
+    };
+    approvals.set(approval.id, approval);
+    // Update request status
+    if (decision === "approve") {
+        request.collected_approvals += 1;
+        if (request.collected_approvals >= request.required_approvals) {
+            request.status = "approved";
+            logGovernance(request.team_id, approver_id, "change_executed", request.resource_type, request.resource_id, {
+                change_id: request.id,
+                total_approvals: request.collected_approvals,
+            });
+        }
+    }
+    else {
+        request.status = "rejected";
+        logGovernance(request.team_id, approver_id, "change_rejected", request.resource_type, request.resource_id, {
+            change_id: request.id,
+            reason: comment,
+        });
+    }
+    logGovernance(request.team_id, approver_id, "approval_given", request.resource_type, request.resource_id, {
+        change_id: request.id,
+        decision,
+        comment,
+    });
+    return { approval };
+}
+/**
+ * Evaluate if change requires approval based on policy
+ */
+function evaluatePolicy(team_id, change_type, resource_type) {
+    // Check for existing custom policy
+    const customPolicy = Array.from(approvalPolicies.values()).find((p) => p.team_id === team_id && p.resource_type === resource_type);
+    if (customPolicy) {
+        return {
+            requiresApproval: true,
+            policy: customPolicy,
+            requiredApprovals: customPolicy.required_approvers,
+            reason: `Requires ${customPolicy.required_approvers} approvals per team policy`,
+        };
+    }
+    // Check default policy based on change_type
+    const defaultPolicy = DEFAULT_POLICIES[change_type];
+    if (defaultPolicy) {
+        return {
+            requiresApproval: true,
+            requiredApprovals: defaultPolicy.required_approvers || 1,
+            reason: `Requires ${defaultPolicy.required_approvers || 1} approvals per default policy`,
+        };
+    }
+    return {
+        requiresApproval: false,
+        requiredApprovals: 0,
+        reason: "No approval policy configured",
+    };
+}
+/**
+ * Get pending approvals for user
+ */
+export function getPendingApprovalsForUser(user_id) {
+    const userApprovals = Array.from(approvals.values()).filter((a) => a.approver_id === user_id && a.status === "approved");
+    const requestIds = new Set(userApprovals.map((a) => a.request_id));
+    const pending = Array.from(changeRequests.values()).filter((r) => r.status === "pending" && !requestIds.has(r.id));
+    return { requests: pending };
+}
+/**
+ * Get approval metrics
+ */
+export function getApprovalMetrics(team_id) {
+    const teamRequests = Array.from(changeRequests.values()).filter((r) => r.team_id === team_id);
+    const approved = teamRequests.filter((r) => r.status === "approved");
+    const rejected = teamRequests.filter((r) => r.status === "rejected");
+    const pending = teamRequests.filter((r) => r.status === "pending");
+    let avgApprovalTime = 0;
+    if (approved.length > 0) {
+        const totalTime = approved.reduce((sum, r) => {
+            const created = new Date(r.created_at).getTime();
+            const executed = new Date(r.executed_at || r.created_at).getTime();
+            return sum + (executed - created);
+        }, 0);
+        avgApprovalTime = totalTime / approved.length / (60 * 60 * 1000); // Convert to hours
+    }
+    const approvalRate = approved.length + rejected.length > 0
+        ? (approved.length / (approved.length + rejected.length)) * 100
+        : 0;
+    return {
+        total_pending: pending.length,
+        total_approved: approved.length,
+        total_rejected: rejected.length,
+        avg_approval_time_hours: Math.round(avgApprovalTime * 10) / 10,
+        approval_rate_percent: Math.round(approvalRate),
+    };
+}
+/**
+ * Log governance event
+ */
+function logGovernance(team_id, actor_id, event_type, resource_type, resource_id, details) {
+    const log = {
+        id: `log_${randomUUID()}`,
+        team_id,
+        event_type: event_type,
+        actor_id,
+        actor_email: `user_${actor_id}@kit.local`,
+        resource_type,
+        resource_id,
+        details,
+        timestamp: new Date().toISOString(),
+    };
+    governanceLogs.push(log);
+}
+/**
+ * Get governance logs
+ */
+export function getGovernanceLogs(team_id, limit = 100) {
+    const filtered = governanceLogs
+        .filter((log) => log.team_id === team_id)
+        .sort((a, b) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime())
+        .slice(0, limit);
+    return { logs: filtered, total: governanceLogs.filter((l) => l.team_id === team_id).length };
+}
+//# sourceMappingURL=approval-service.js.map

package/dist/approval-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-service.js","sourceRoot":"","sources":["../src/approval-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAYzC;;GAEG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,EAAyB,CAAC;AACxD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA0B,CAAC;AAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;AAC9C,MAAM,cAAc,GAAoB,EAAE,CAAC;AAE3C;;GAEG;AACH,MAAM,gBAAgB,GAA4C;IAChE,aAAa,EAAE;QACb,kBAAkB,EAAE,CAAC;QACrB,sBAAsB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1C,aAAa,EAAE,EAAE;KAClB;IACD,aAAa,EAAE;QACb,kBAAkB,EAAE,CAAC;QACrB,sBAAsB,EAAE,CAAC,OAAO,CAAC;QACjC,aAAa,EAAE,CAAC;KACjB;IACD,mBAAmB,EAAE;QACnB,kBAAkB,EAAE,CAAC;QACrB,sBAAsB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1C,aAAa,EAAE,EAAE;KAClB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,aAAqB,EACrB,kBAA0B,EAC1B,gBAA0B,CAAC,OAAO,EAAE,OAAO,CAAC;IAE5C,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,EAAoB,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,MAAM,GAAmB;QAC7B,EAAE,EAAE,UAAU,UAAU,EAAE,EAAE;QAC5B,OAAO;QACP,aAAa;QACb,YAAY,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,qBAAqB,CAAC;QACvE,kBAAkB;QAClB,sBAAsB,EAAE,aAAa;QACrC,aAAa,EAAE,EAAE;QACjB,qBAAqB,EAAE,CAAC,OAAO,CAAC;QAChC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IAEF,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACxC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,EAAE;QAC3E,kBAAkB;QAClB,aAAa;KACd,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,WAAuB,EACvB,YAAoB,EACpB,eAAuB,EACvB,aAAqB,EACrB,WAAmB,EACnB,aAAqB,EACrB,WAAmB,EACnB,gBAAyC;IAEzC,kBAAkB;IAClB,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IAEvE,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC;IAE5D,MAAM,aAAa,GAAkB;QACnC,EAAE,EAAE,UAAU,UAAU,EAAE,EAAE;QAC5B,OAAO;QACP,IAAI,EAAE,WAAW;QACjB,YAAY;QACZ,eAAe;QACf,aAAa;QACb,WAAW;QACX,aAAa;QACb,WAAW;QACX,gBAAgB;QAChB,MAAM,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;QAC5D,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE;QAChC,kBAAkB,EAAE,UAAU,CAAC,iBAAiB;QAChD,mBAAmB,EAAE,CAAC;QACtB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QAC9E,YAAY,EAAE,IAAI;KACnB,CAAC;IAEF,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACpD,aAAa,CACX,OAAO,EACP,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX;QACE,WAAW;QACX,iBAAiB,EAAE,UAAU,CAAC,gBAAgB;QAC9C,kBAAkB,EAAE,UAAU,CAAC,iBAAiB;KACjD,CACF,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAkB,EAClB,WAAmB,EACnB,cAAsB,EACtB,QAA0B,EAC1B,OAAgB;IAEhB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,QAAQ,EAAE,EAAc,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IACzE,CAAC;IAED,eAAe;IACf,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QAC9C,OAAO,EAAE,QAAQ,EAAE,EAAc,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IACzE,CAAC;IAED,qCAAqC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,EAAc,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,QAAQ,GAAa;QACzB,EAAE,EAAE,YAAY,UAAU,EAAE,EAAE;QAC9B,UAAU;QACV,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW;QACX,cAAc;QACd,QAAQ;QACR,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;QACxD,OAAO;QACP,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IAEF,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAErC,wBAAwB;IACxB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,mBAAmB,IAAI,CAAC,CAAC;QAEjC,IAAI,OAAO,CAAC,mBAAmB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC9D,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;YAC5B,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,EAAE;gBACzG,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,eAAe,EAAE,OAAO,CAAC,mBAAmB;aAC7C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;QAC5B,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,EAAE;YACzG,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,EAAE;QACxG,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,QAAQ;QACR,OAAO;KACR,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CACrB,OAAe,EACf,WAAuB,EACvB,aAAqB;IAErB,mCAAmC;IACnC,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC7D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,aAAa,KAAK,aAAa,CAClE,CAAC;IAEF,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO;YACL,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,YAAY;YACpB,iBAAiB,EAAE,YAAY,CAAC,kBAAkB;YAClD,MAAM,EAAE,YAAY,YAAY,CAAC,kBAAkB,4BAA4B;SAChF,CAAC;IACJ,CAAC;IAED,4CAA4C;IAC5C,MAAM,aAAa,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,gBAAgB,EAAE,IAAI;YACtB,iBAAiB,EAAE,aAAa,CAAC,kBAAkB,IAAI,CAAC;YACxD,MAAM,EAAE,YAAY,aAAa,CAAC,kBAAkB,IAAI,CAAC,+BAA+B;SACzF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,gBAAgB,EAAE,KAAK;QACvB,iBAAiB,EAAE,CAAC;QACpB,MAAM,EAAE,+BAA+B;KACxC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAe;IAEf,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACzD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAC5D,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACxD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACvD,CAAC;IAEF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAE9F,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAEnE,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YAC3C,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;YACnE,OAAO,GAAG,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC,CAAC;QACpC,CAAC,EAAE,CAAC,CAAC,CAAC;QACN,eAAe,GAAG,SAAS,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,mBAAmB;IACvF,CAAC;IAED,MAAM,YAAY,GAChB,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC;QACnC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG;QAC/D,CAAC,CAAC,CAAC,CAAC;IAER,OAAO;QACL,aAAa,EAAE,OAAO,CAAC,MAAM;QAC7B,cAAc,EAAE,QAAQ,CAAC,MAAM;QAC/B,cAAc,EAAE,QAAQ,CAAC,MAAM;QAC/B,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,EAAE,CAAC,GAAG,EAAE;QAC9D,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;KAChD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CACpB,OAAe,EACf,QAAgB,EAChB,UAAkB,EAClB,aAAqB,EACrB,WAAmB,EACnB,OAAgC;IAEhC,MAAM,GAAG,GAAkB;QACzB,EAAE,EAAE,OAAO,UAAU,EAAE,EAAE;QACzB,OAAO;QACP,UAAU,EAAE,UAAiB;QAC7B,QAAQ;QACR,WAAW,EAAE,QAAQ,QAAQ,YAAY;QACzC,aAAa;QACb,WAAW;QACX,OAAO;QACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,KAAK,GAAG,GAAG;IAEX,MAAM,QAAQ,GAAG,cAAc;SAC5B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC;SACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;SACjF,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAEnB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AAC/F,CAAC"}

package/dist/approval.d.ts

@@ -0,0 +1,22 @@
+import type { GovernanceConfig } from "./config.js";
+export interface ApprovalRequest {
+    operation: string;
+    environment: string;
+    reason: string;
+    agent_id?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface ApprovalResponse {
+    approved: boolean;
+    approval_id?: string;
+    denied_reason?: string;
+    timeout?: boolean;
+}
+/**
+ * Request human approval for an operation
+ */
+export declare function requestApproval(config: GovernanceConfig | undefined, request: ApprovalRequest, companyId?: string): Promise<boolean>;
+/**
+ * Check if an operation would require approval without actually requesting it
+ */
+export declare function wouldRequireApproval(config: GovernanceConfig | undefined, operation: string, environment: string): boolean;