approvers

type DashboardApprover struct{}

type HumanApprover struct {
	// Channel is the destination channel, chat id, or equivalent
	// notifier-specific target.
	Channel string `hcl:"channel"`
	// Credential references the notifier credential used to post
	// approval requests. Leave empty for dashboard-only approval.
	Credential string `hcl:"credential,optional"`
	// Timeout overrides the gateway's human_timeout for this approver,
	// in seconds.
	Timeout int `hcl:"timeout,optional"`
	// RequireApprovers is the number of separate human approvals
	// required before the request is allowed.
	RequireApprovers int `hcl:"require_approvers,optional"`
	// SyncWaitTimeout is the HTTP hold budget before an async-capable
	// HITL request returns 202 and moves to polling/retry-grant mode.
	// Optional, including when async_grant is enabled: when unset the
	// gateway parks the request synchronously for the full approval
	// window (it holds the connection until a human decides) and never
	// hands back a 202 — the async retry-grant path stays dormant.
	SyncWaitTimeout string `hcl:"sync_wait_timeout,optional" json:"sync_wait_timeout,omitempty"`
	// AsyncGrant configures v1 HITL async retry grants for this approver.
	// The nested block must set enabled = true, and the active profile must
	// also set hitl_async_grants = true, before async behavior is effective.
	AsyncGrant *config.HITLAsyncGrantConfig `hcl:"async_grant,block" json:"async_grant,omitempty"`
	// Interactive toggles in-channel approve/deny buttons. Requires the
	// referenced credential's signing_secret slot pasted via the
	// dashboard AND Slack's Interactivity URL pointed at the gateway.
	// Default false: message includes only an "Open dashboard" link.
	Interactive bool `hcl:"interactive,optional"`
	// Classifier optionally references an llm_approver by name. When set,
	// the approver calls the classifier's Summarize method before posting
	// the HITL notification, enriching the Slack card with request summary
	// metadata. Classifier failures are non-fatal — the generic card is used
	// as fallback.
	Classifier string `hcl:"classifier,optional"`
	// Message is an optional Go-template-style string with {{var}}
	// placeholders. When set, the expanded text replaces the default
	// section body in the Slack (or other notifier) card. Supported
	// vars mirror the CEL facet namespace: {{http.method}},
	// {{http.path}}, {{k8s.verb}}, {{sql.tables}}, {{http.body_json.resource_id}},
	// {{profile}}, {{endpoint}}, {{reason}}, etc.
	// Classifier (if also set) still runs; Message takes display precedence.
	Message string `hcl:"message,optional"`
}

type LLMApprover struct {
	// Model is the model id used for policy judgment, such as a
	// claude-*, gpt-*, or o*-prefixed model.
	Model string `hcl:"model"`
	// Credential references the HTTP credential used to authenticate
	// the model API call.
	Credential string `hcl:"credential"`
	// Policy is the prose the model judges requests against. Typically
	// a heredoc on the approver block.
	Policy string `hcl:"policy,optional"`
}