@reaatech/tool-use-firewall-approvals

Status: Pre-1.0 — APIs may change in minor versions. Pin to a specific version in production.

Human-in-the-loop approval workflows for tool-use-firewall. Supports multi-level approval chains with timeout handling, an HTTP approval API, CLI prompts, and webhook, Slack, and Discord notifications.

Installation

npm install @reaatech/tool-use-firewall-approvals
# or
pnpm add @reaatech/tool-use-firewall-approvals

Feature Overview

• Approval workflow engine — Manages pending approvals with status tracking and timeout expiry
• Multi-level chains — Require approval from multiple groups with configurable minimum approvals
• HTTP API — Express-based REST API for listing, approving, and denying requests (Bearer token auth)
• Rate-limited API — Per-IP token bucket on the approval HTTP endpoint
• CLI approver — Console-based approval prompts (writes to stderr, never stdout)
• Webhook approver — Sends approval requests via HTTP POST with configurable API keys
• Slack & Discord approvers — Post approval requests to a Slack or Discord channel via incoming webhooks
• Bounded storage — FIFO eviction when pending queue exceeds capacity

Quick Start

import { ApprovalWorkflow, createApprovalApi } from "@reaatech/tool-use-firewall-approvals";
import { createRequestContext } from "@reaatech/tool-use-firewall-core";
 
const workflow = new ApprovalWorkflow({
  default_timeout_ms: 300000,
  max_pending_approvals: 1000,
  required_for: [{ tools: ["dangerous_tool"], approvers: ["admin"], min_approvals: 1 }],
});
 
// Create the Express approval API
const app = createApprovalApi(workflow, "your-api-key");
app.listen(8080);
 
// Request approval — returns an approval ID (does not throw)
const ctx = createRequestContext({
  requestId: "1", sessionId: "s1", method: "tools/call", toolName: "dangerous_tool",
});
const approvalId = await workflow.requestApproval(ctx);
console.log(approvalId); // "appr_<uuid>"

Exports

License

MIT