Approval Workflows

from flask import Flask, request, jsonify

app = Flask(__name__)

@app.route('/approvals', methods=['POST'])
def handle_approval():
    data = request.json
    tool_name = data.get('tool_name')
    arguments = data.get('arguments', {})
    amount = arguments.get('amount', 0)

    print(f"Approval requested for {tool_name}: {arguments}")

    # Auto-approve up to $25k
    if amount <= 25000:
        return jsonify({
            'decision': 'approved',
            'reason': 'Treasury auto-approval rule'
        })

    return jsonify({
        'decision': 'denied',
        'reason': 'Amount exceeds treasury limit'
    })

if __name__ == '__main__':
    app.run(port=8787)

import express from 'express';
import { WebClient } from '@slack/web-api';

const app = express();
app.use(express.json());

const slack = new WebClient(process.env.SLACK_BOT_TOKEN);
const pendingApprovals = new Map();

app.post('/approvals', async (req, res) => {
  const { call_id, tool_name, arguments: args, rule_name } = req.body;

  // Send approval request to Slack
  await slack.chat.postMessage({
    channel: '#approvals',
    text: `Approval needed for ${tool_name}`,
    blocks: [
      {
        type: 'section',
        text: {
          type: 'mrkdwn',
          text: `*${rule_name}*\n\`${tool_name}\`\n\`\`\`${JSON.stringify(args, null, 2)}\`\`\``,
        },
      },
      {
        type: 'actions',
        elements: [
          {
            type: 'button',
            text: { type: 'plain_text', text: 'Approve' },
            style: 'primary',
            action_id: 'approve',
            value: call_id,
          },
          {
            type: 'button',
            text: { type: 'plain_text', text: 'Deny' },
            style: 'danger',
            action_id: 'deny',
            value: call_id,
          },
        ],
      },
    ],
  });

  // Store resolver for this approval
  const { promise, resolve } = Promise.withResolvers();
  pendingApprovals.set(call_id, resolve);

  // Wait for Slack interaction
  const decision = await promise;
  res.json(decision);
});

// Slack interactive endpoint
app.post('/slack/interactions', async (req, res) => {
  const payload = JSON.parse(req.body.payload);
  const action = payload.actions[0];
  const call_id = action.value;

  const decision = action.action_id === 'approve'
    ? { decision: 'approved', reason: `Approved by ${payload.user.name}` }
    : { decision: 'denied', reason: `Denied by ${payload.user.name}` };

  const resolver = pendingApprovals.get(call_id);
  if (resolver) {
    resolver(decision);
    pendingApprovals.delete(call_id);
  }

  res.status(200).send();
});

app.listen(8787);