Keep humans in control of critical AI decisions.

// 1) Ask for authorization
const res = await fetch("https://omegaengine.ai/api/authorize", {
  method: "POST",
  headers: { "Content-Type": "application/json", "x-api-key": process.env.OMEGA_API_KEY },
  body: JSON.stringify({
    agent_id: "payments-agent",
    action: "wire_transfer",
    tool_name: "bank.wire_transfer",
    tool_args: { destination_account: "external-bank", amount: 15000, currency: "USD" },
    amount: 15000,
    vendor: "external-bank",
    risk_level: "high",
    metadata: { user_id: "user_123" },
  }),
});
const response = await res.json();

if (response.decision === "escalated") {
  // 2) Poll response.approval_status_url until a human approves
  //    at response.human_action_url (/ops/approvals).

  // 3) Claim the one-time execution capability (Idempotency-Key required)
  const claim = await fetch("https://omegaengine.ai/api/authorize/approval/claim", {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      "x-api-key": process.env.OMEGA_API_KEY,
      "Idempotency-Key": crypto.randomUUID(),
    },
    body: JSON.stringify({
      authorization_id: response.authorization_id,
      agent_id: "payments-agent",
    }),
  });
  const claimed = await claim.json();
  // claimed → { ok, decision: "approved", execution_capability, capability_expires_at, ... }
  // Still pending → 409 { status: "pending" }; already claimed → 409 CAPABILITY_ALREADY_CLAIMED.
  await executeTransfer({ capability: claimed.execution_capability });
} else if (response.decision === "approved" && response.execution_capability) {
  // Low-risk exact action: proceed with the capability.
  await executeTransfer({ capability: response.execution_capability });
}

// Fired to your configured approval webhook (APPROVAL_WEBHOOK_URL)
// on escalated | approved | rejected — HMAC-signed when a secret is set.
{
  "event": "approved",
  "timestamp": "2026-02-05T15:30:00Z",
  "approval": {
    "id": "apr_abc123",
    "title": "wire_transfer",
    "kind": "authorize_action",
    "riskScore": 0.82,
    "agentId": "payments-agent",
    "status": "approved",
    "escalationLevel": 0,
    "reviewedBy": "user_reviewer"
  },
  "sla": {
    "timeoutHours": 24,
    "deadline": "2026-02-06T15:30:00Z",
    "currentRole": "operator"
  }
}