open-loam 0.1.0

data/lib/generators/loam/install/templates/admin/imports_summary.html.erb

@@ -0,0 +1,32 @@
+<h1>Dry run — <%%= @entity_type %></h1>
+
+<p>Nothing was committed. This is what an import WOULD do:</p>
+<ul>
+  <li>Create: <strong><%%= @result.created %></strong></li>
+  <li>Update: <strong><%%= @result.updated %></strong></li>
+  <li>Failed: <strong><%%= @result.failed %></strong></li>
+</ul>
+
+<%% if @result.errors.any? %>
+  <h2>Failed rows</h2>
+  <table>
+    <thead><tr><th>Row</th><th>Reason</th></tr></thead>
+    <tbody>
+      <%% @result.errors.each do |error| %>
+        <tr><td><%%= error["row"] %></td><td><%%= error["message"] %></td></tr>
+      <%% end %>
+    </tbody>
+  </table>
+
+  <%%= form_with url: download_errors_admin_imports_path, method: :post do %>
+    <%%= hidden_field_tag :entity_type, @entity_type %>
+    <%%= hidden_field_tag :csv, @csv %>
+    <%% params[:mapping].to_unsafe_h.each do |header, target| %>
+      <%%= hidden_field_tag "mapping[#{header}]", target %>
+    <%% end %>
+    <%%= hidden_field_tag :match_key, params[:match_key] %>
+    <%%= submit_tag "Download error file" %>
+  <%% end %>
+<%% end %>
+
+<p><%%= link_to "Back", new_admin_import_path(entity_type: @entity_type) %></p>

data/lib/generators/loam/install/templates/admin/inbound_webhook_sources_controller.rb

@@ -0,0 +1,61 @@
+module Admin
+  # Manage the external systems allowed to POST webhooks into this tenant
+  # (Loam::InboundWebhookSource) — manager-only. Create a source (token + secret
+  # are generated), copy the receive URL and secret to the sender, rotate either,
+  # toggle active, and see the most recent received deliveries.
+  class InboundWebhookSourcesController < BaseController
+    before_action { require_role!(:manager) }
+    before_action :set_source, only: %i[destroy rotate_secret rotate_token toggle]
+
+    def index
+      @sources = Loam::InboundWebhookSource.order(:name)
+      @recent = Loam::InboundWebhookDelivery.order(received_at: :desc).limit(20)
+    end
+
+    def new
+      @source = Loam::InboundWebhookSource.new(event_name: "inbound.webhook.received")
+    end
+
+    def create
+      @source = Loam::InboundWebhookSource.new(source_params)
+      if @source.save
+        redirect_to admin_inbound_webhook_sources_path, notice: "Source created. Copy the secret now — it signs every call."
+      else
+        render :new, status: :unprocessable_entity
+      end
+    end
+
+    def destroy
+      @source.destroy!
+      redirect_to admin_inbound_webhook_sources_path, notice: "Source deleted."
+    end
+
+    def rotate_secret
+      @source.rotate_secret!
+      redirect_to admin_inbound_webhook_sources_path, notice: "Secret rotated — update the sender."
+    end
+
+    def rotate_token
+      @source.rotate_token!
+      redirect_to admin_inbound_webhook_sources_path, notice: "Token rotated — update the sender's URL."
+    end
+
+    def toggle
+      @source.update!(active: !@source.active?)
+      redirect_to admin_inbound_webhook_sources_path, notice: "Source #{@source.active? ? 'enabled' : 'disabled'}."
+    end
+
+    private
+
+    def set_source
+      @source = Loam::InboundWebhookSource.find(params[:id])
+    end
+
+    def source_params
+      params.require(:inbound_webhook_source).permit(
+        :name, :event_name, :signature_header, :delivery_id_header,
+        :timestamp_header, :timestamp_tolerance
+      )
+    end
+  end
+end

data/lib/generators/loam/install/templates/admin/inbound_webhook_sources_index.html.erb

@@ -0,0 +1,49 @@
+<h1>Inbound webhooks</h1>
+
+<p>External systems allowed to POST webhooks into this tenant. The <strong>URL</strong>
+identifies a source; the <strong>secret</strong> (HMAC-SHA256 over the raw body,
+sent in the signature header) authenticates each call. A verified delivery is
+published on the event bus as its <code>event_name</code>.
+<%%= link_to "New source", new_admin_inbound_webhook_source_path %></p>
+
+<table>
+  <thead>
+    <tr><th>Name</th><th>Receive URL</th><th>Event</th><th>Active</th><th></th></tr>
+  </thead>
+  <tbody>
+    <%% @sources.each do |s| %>
+      <tr>
+        <td><%%= s.name %></td>
+        <td><code><%%= "#{request.base_url}/webhooks/#{s.token}" %></code><br>
+          <small>secret: <code><%%= s.secret %></code></small></td>
+        <td><code><%%= s.event_name %></code></td>
+        <td><%%= s.active? ? "yes" : "no" %></td>
+        <td>
+          <%%= button_to "Rotate token", rotate_token_admin_inbound_webhook_source_path(s), form: { style: "display:inline" } %>
+          <%%= button_to "Rotate secret", rotate_secret_admin_inbound_webhook_source_path(s), form: { style: "display:inline" } %>
+          <%%= button_to (s.active? ? "Disable" : "Enable"), toggle_admin_inbound_webhook_source_path(s), form: { style: "display:inline" } %>
+          <%%= button_to "Delete", admin_inbound_webhook_source_path(s), method: :delete, form: { style: "display:inline" } %>
+        </td>
+      </tr>
+    <%% end %>
+  </tbody>
+</table>
+
+<h2>Recent deliveries</h2>
+<%% if @recent.any? %>
+  <table>
+    <thead><tr><th>Source</th><th>Event</th><th>External id</th><th>Received</th></tr></thead>
+    <tbody>
+      <%% @recent.each do |d| %>
+        <tr>
+          <td><%%= d.source.name %></td>
+          <td><code><%%= d.event_name %></code></td>
+          <td><small><%%= truncate(d.external_id, length: 24) %></small></td>
+          <td><%%= d.received_at&.strftime("%Y-%m-%d %H:%M UTC") %></td>
+        </tr>
+      <%% end %>
+    </tbody>
+  </table>
+<%% else %>
+  <p>No deliveries received yet.</p>
+<%% end %>

data/lib/generators/loam/install/templates/admin/inbound_webhook_sources_new.html.erb

@@ -0,0 +1,32 @@
+<h1>New inbound webhook source</h1>
+<p><%%= link_to "Back", admin_inbound_webhook_sources_path %></p>
+
+<%%= form_with model: @source, url: admin_inbound_webhook_sources_path, method: :post do |f| %>
+  <%% if @source.errors.any? %>
+    <ul><%% @source.errors.full_messages.each do |m| %><li><%%= m %></li><%% end %></ul>
+  <%% end %>
+  <p>
+    <%%= f.label :name %><br>
+    <%%= f.text_field :name %>
+  </p>
+  <p>
+    <%%= f.label :event_name, "Publish as event (domain.thing.happened)" %><br>
+    <%%= f.text_field :event_name %>
+  </p>
+  <p>
+    <%%= f.label :signature_header, "Signature header (default X-Loam-Signature)" %><br>
+    <%%= f.text_field :signature_header, placeholder: "X-Loam-Signature" %>
+    <small>e.g. X-Hub-Signature-256 for GitHub.</small>
+  </p>
+  <p>
+    <%%= f.label :delivery_id_header, "Delivery-id header (optional, for dedupe)" %><br>
+    <%%= f.text_field :delivery_id_header %>
+    <small>Blank = dedupe on a hash of the body.</small>
+  </p>
+  <p>
+    <%%= f.label :timestamp_header, "Timestamp header (optional, enables freshness window)" %><br>
+    <%%= f.text_field :timestamp_header %>
+    <%%= f.number_field :timestamp_tolerance, placeholder: "300 (seconds)" %>
+  </p>
+  <%%= f.submit "Create source" %>
+<%% end %>

data/lib/generators/loam/install/templates/admin/layout.html.erb

@@ -0,0 +1,76 @@
+<!DOCTYPE html>
+<html>
+  <head>
+    <title>Admin</title>
+    <%%= csrf_meta_tags %>
+    <%%= stylesheet_link_tag "admin", media: "all" %>
+  </head>
+  <body>
+    <%% flash.each do |type, message| %>
+      <div class="flash flash-<%%= type.to_s == "alert" ? "alert" : "notice" %>"><%%= message %></div>
+    <%% end %>
+    <%% if defined?(current_tenant) && current_tenant %>
+      <div class="context">
+        <%%= t("loam.chrome.tenant") %>: <strong><%%= current_tenant.name %></strong> ·
+        <%%= t("loam.chrome.user") %>: <strong><%%= current_actor&.name %></strong> ·
+        <%%= button_to t("loam.chrome.sign_out"), admin_session_path, method: :delete, form: { style: "display:inline" } %>
+      </div>
+      <nav>
+        <%%= link_to t("loam.nav.dashboard"), admin_root_path %>
+        <%%= link_to admin_notifications_path do %><%%= t("loam.nav.notifications") %> (<span id="loam-notification-count"><%%= unread_notification_count %></span>)<%% end %>
+        <%%= link_to t("loam.nav.api_tokens"), admin_api_tokens_path %>
+        <%%= link_to t("loam.nav.security"), admin_mfa_path %>
+        <%%= link_to "#{t('loam.nav.approvals')} (#{pending_approval_count})", admin_pending_actions_path %>
+        <%%= link_to t("loam.nav.settings"), admin_configs_path %>
+        <%%= link_to t("loam.nav.features"), admin_features_path %>
+        <%%= link_to t("loam.nav.rules"), admin_business_rules_path %>
+        <%%= link_to t("loam.nav.sso"), admin_sso_providers_path %>
+        <%%= link_to t("loam.nav.dictionaries"), admin_dictionaries_path %>
+        <%%= link_to t("loam.nav.tasks"), admin_progress_jobs_path %>
+        <%%= link_to t("loam.nav.schedules"), admin_scheduled_jobs_path %>
+        <%%= link_to t("loam.nav.deliveries"), admin_event_deliveries_path %>
+        <%%= link_to t("loam.nav.inbound"), admin_inbound_webhook_sources_path %>
+        <%%= link_to t("loam.nav.api_docs"), admin_api_docs_path %>
+        <%%= link_to t("loam.nav.overrides"), admin_overrides_path %>
+        <%%= form_with url: admin_search_path, method: :get, class: "search" do %>
+          <%%= text_field_tag :q, params[:q], placeholder: t("loam.chrome.search") %>
+        <%% end %>
+        <%%# Locale switcher (Loam::Translatable): overlays content onto the picked language. %>
+        <%% if Loam.locales.size > 1 %>
+          <span class="locale">
+            <%% Loam.locales.each do |loc| %><%%= link_to loc.upcase, "#{request.path}?locale=#{loc}", style: (loc == current_locale ? "font-weight:bold" : "") %> <%% end %>
+          </span>
+        <%% end %>
+      </nav>
+
+      <%%# Live updates over SSE (Loam::EventStream). Degrades gracefully: if
+          EventSource is unavailable or the stream drops, the per-page-load bell
+          count above still works. %>
+      <script>
+        (function () {
+          if (typeof EventSource === "undefined") return;
+          var source = new EventSource("<%%= admin_events_stream_path %>");
+          source.addEventListener("loam.notification.created", function () {
+            var badge = document.getElementById("loam-notification-count");
+            if (badge) badge.textContent = (parseInt(badge.textContent, 10) || 0) + 1;
+          });
+          // Live task progress (Loam::ProgressJob): move the matching bar. The
+          // frame carries only id/percent/status.
+          source.addEventListener("loam.progress.updated", function (e) {
+            var d = JSON.parse(e.data);
+            var fill = document.getElementById("progress-fill-" + d.id);
+            if (fill) fill.style.width = d.percent + "%";
+            var pct = document.getElementById("progress-percent-" + d.id);
+            if (pct) pct.textContent = d.percent + "%";
+            var st = document.getElementById("progress-status-" + d.id);
+            if (st) st.textContent = d.status;
+          });
+          source.onerror = function () {
+            if (source.readyState === EventSource.CLOSED) source.close();
+          };
+        })();
+      </script>
+    <%% end %>
+    <%%= yield %>
+  </body>
+</html>

data/lib/generators/loam/install/templates/admin/mfa_activated.html.erb

@@ -0,0 +1,12 @@
+<h1>Two-factor authentication is on</h1>
+
+<p><strong>Save these recovery codes now.</strong> Each works once if you lose
+your authenticator. This is the only time they are shown.</p>
+
+<ul>
+  <%% @recovery_codes.each do |code| %>
+    <li><code><%%= code %></code></li>
+  <%% end %>
+</ul>
+
+<p><%%= link_to "Done", admin_mfa_path %></p>

data/lib/generators/loam/install/templates/admin/mfa_controller.rb

@@ -0,0 +1,61 @@
+module Admin
+  # A user's own two-factor setup — self-service, so NOT role-gated (everyone
+  # manages their own MFA). Enrollment is two steps: `new` (GET) shows a
+  # CANDIDATE secret held in the session, `create` (POST) confirms a live code
+  # and only then adopts it. Crucially, GET never mutates the credential, and the
+  # old secret stays valid until the new one is proven — so neither a cross-site
+  # GET nor an abandoned re-enrollment can downgrade an active credential.
+  class MfaController < BaseController
+    # Shown in authenticator apps as the account issuer; defaults to the app name.
+    ISSUER = Rails.application.class.module_parent_name.freeze
+
+    # Replacing an ACTIVE credential (or disabling it) is sensitive, so gate those
+    # writes behind step-up. Initial enrollment (no active MFA yet) needs no sudo
+    # — there is nothing to protect and no second factor to prove.
+    before_action :require_sudo!, only: %i[create destroy], if: :active_mfa?
+
+    def show
+      @credential = Loam::MfaCredential.active_for(current_actor)
+    end
+
+    # READ-ONLY: mint a candidate secret into the (encrypted cookie) session and
+    # display it. No credential is touched, so this is safe to reach via GET.
+    def new
+      set_enrollment_secret
+    end
+
+    # Confirm the candidate against a live code, then adopt it and reveal the
+    # recovery codes once. The active secret is replaced only on success.
+    def create
+      secret = session[:mfa_enrollment_secret]
+      credential = Loam::MfaCredential.find_or_initialize_by(user_id: current_actor.id)
+      @recovery_codes = secret && credential.activate_with!(secret, params[:code])
+
+      if @recovery_codes
+        session.delete(:mfa_enrollment_secret)
+        render :activated
+      else
+        set_enrollment_secret
+        @error = "That code did not match. Check your authenticator and try again."
+        render :new, status: :unprocessable_entity
+      end
+    end
+
+    def destroy
+      Loam::MfaCredential.where(user_id: current_actor.id).delete_all
+      session.delete(:mfa_enrollment_secret)
+      redirect_to admin_mfa_path, notice: "Two-factor authentication disabled."
+    end
+
+    private
+
+    def set_enrollment_secret
+      @secret = (session[:mfa_enrollment_secret] ||= Loam::Totp.generate_secret)
+      @provisioning_uri = Loam::Totp.provisioning_uri(@secret, account: current_actor.email, issuer: ISSUER)
+    end
+
+    def active_mfa?
+      Loam::MfaCredential.active_for(current_actor).present?
+    end
+  end
+end

data/lib/generators/loam/install/templates/admin/mfa_new.html.erb

@@ -0,0 +1,23 @@
+<%% if @error %>
+  <p style="color:#b00"><%%= @error %></p>
+<%% end %>
+
+<h1>Set up two-factor authentication</h1>
+
+<p>Add this account to your authenticator app, then confirm a code to activate.
+Scan the QR (a later nicety) or enter the details by hand:</p>
+
+<ul>
+  <li>Secret: <code><%%= @secret %></code></li>
+  <li>otpauth URI: <code><%%= @provisioning_uri %></code></li>
+</ul>
+
+<%%= form_with url: admin_mfa_path, method: :post do |f| %>
+  <p>
+    <%%= label_tag :code, "Code from your app" %><br>
+    <%%= text_field_tag :code, nil, autofocus: true, autocomplete: "one-time-code", inputmode: "numeric" %>
+  </p>
+  <%%= f.submit "Activate" %>
+<%% end %>
+
+<p><%%= link_to "Cancel", admin_mfa_path %></p>

data/lib/generators/loam/install/templates/admin/mfa_show.html.erb

@@ -0,0 +1,19 @@
+<h1>Two-factor authentication</h1>
+
+<%% if @credential %>
+  <p>Status: <strong>enabled</strong> — activated <%%= @credential.activated_at.to_date %>.</p>
+  <p>Unused recovery codes: <strong><%%= @credential.unused_recovery_code_count %></strong>.</p>
+
+  <p>
+    <%%= link_to "Re-enroll (new secret + codes)", new_admin_mfa_path %>
+  </p>
+  <%%# Disabling MFA is sensitive, so it is step-up gated (require_sudo!). %>
+  <%%= button_to "Disable two-factor", admin_mfa_path, method: :delete,
+        data: { turbo_confirm: "Disable two-factor authentication for your account?" } %>
+<%% else %>
+  <p>Status: <strong>not enabled</strong>. Protect your account with an
+  authenticator app.</p>
+  <p><%%= link_to "Set up two-factor authentication", new_admin_mfa_path %></p>
+<%% end %>
+
+<p><%%= link_to "Back to dashboard", admin_root_path %></p>

data/lib/generators/loam/install/templates/admin/notifications_controller.rb

@@ -0,0 +1,23 @@
+module Admin
+  # The bell. Every query here is scoped to the current actor, so there is no
+  # "read someone else's notifications" path to authorize and no per-record
+  # policy to write: tenancy is structural (Loam::Notification is a
+  # Loam::TenantRecord) and BaseController has already established that this
+  # actor is signed in to this tenant. Recipient scoping is the whole rule.
+  class NotificationsController < BaseController
+    def index
+      @records = notifications.order(created_at: :desc).limit(100)
+    end
+
+    def mark_read
+      notifications.find(params[:id]).mark_read!
+      redirect_to admin_notifications_path
+    end
+
+    private
+
+    def notifications
+      Loam::Notification.where(user_id: current_actor.id)
+    end
+  end
+end

data/lib/generators/loam/install/templates/admin/notifications_index.html.erb

@@ -0,0 +1,32 @@
+<h1>Notifications</h1>
+
+<p>Messages for <strong><%%= current_actor.name %></strong> in <strong><%%= current_tenant.name %></strong>.</p>
+
+<table>
+  <thead>
+    <tr>
+      <th>When</th>
+      <th>Title</th>
+      <th>About</th>
+      <th></th>
+    </tr>
+  </thead>
+  <tbody>
+    <%% @records.each do |record| %>
+      <tr>
+        <td><%%= record.created_at.to_fs(:short) %></td>
+        <td>
+          <%%= tag.strong record.title unless record.read? %>
+          <%%= record.title if record.read? %>
+          <%%= tag.div record.body, style: "color:#555" if record.body.present? %>
+        </td>
+        <td><%%= "#{record.source_type} ##{record.source_id}" if record.source_type %></td>
+        <td>
+          <%% unless record.read? %>
+            <%%= button_to "Mark read", mark_read_admin_notification_path(record), form: { style: "display:inline" } %>
+          <%% end %>
+        </td>
+      </tr>
+    <%% end %>
+  </tbody>
+</table>

data/lib/generators/loam/install/templates/admin/overrides_controller.rb

@@ -0,0 +1,14 @@
+module Admin
+  # Read-only view of the app's Loam::Overrides — which registry entries are
+  # disabled or replaced, plus any STALE overrides (a key that no longer exists).
+  # Manager-only, for legibility: it's config declared in an initializer, shown
+  # here so an operator can see what's been customized without reading code.
+  class OverridesController < BaseController
+    before_action { require_role!(:manager) }
+
+    def index
+      @overrides = Loam::Overrides.all
+      @stale = Loam::Overrides.stale
+    end
+  end
+end

data/lib/generators/loam/install/templates/admin/overrides_index.html.erb

@@ -0,0 +1,29 @@
+<h1>Overrides</h1>
+
+<p>Registry entries this app disables or replaces (declared in
+<code>config/initializers/loam.rb</code> via <code>Loam::Overrides</code>) —
+customization without forking. Structural pieces (views, controllers, routes)
+are overridden the Rails way (path shadowing), not here.</p>
+
+<%% if @stale.any? %>
+  <p style="color:#b00"><strong>Stale overrides</strong> (the key no longer exists — the override does nothing):
+    <%%= @stale.map { |reg, key| "#{reg}/#{key}" }.join(", ") %></p>
+<%% end %>
+
+<table>
+  <thead><tr><th>Registry</th><th>Key</th><th>Effect</th></tr></thead>
+  <tbody>
+    <%% @overrides.each do |registry, entries| %>
+      <%% entries.each do |key, value| %>
+        <tr>
+          <td><code><%%= registry %></code></td>
+          <td><code><%%= key %></code></td>
+          <td><%%= value == Loam::Overrides::DISABLED ? "disabled" : "replaced" %></td>
+        </tr>
+      <%% end %>
+    <%% end %>
+    <%% if @overrides.values.all?(&:empty?) %>
+      <tr><td colspan="3"><em>No overrides declared.</em></td></tr>
+    <%% end %>
+  </tbody>
+</table>

data/lib/generators/loam/install/templates/admin/pagination.rb

@@ -0,0 +1,23 @@
+module Admin
+  # Pagination with no gem attached — the smallest thing that works:
+  #
+  #   @records, @page, @has_next = paginate(Equipment.order(created_at: :desc))
+  #
+  # Swap in pagy or kaminari when you need total counts, numbered pages or a
+  # window of links; callers only ever use these three values, so the change
+  # stays inside this module and the index views.
+  module Pagination
+    PER_PAGE = 25
+
+    def paginate(scope, per_page: PER_PAGE)
+      page = params[:page].to_i
+      page = 1 if page < 1
+
+      # One row more than a page is fetched and never rendered: it answers
+      # "is there a next page?" without a second COUNT over the whole table.
+      records = scope.limit(per_page + 1).offset((page - 1) * per_page).to_a
+
+      [ records.first(per_page), page, records.size > per_page ]
+    end
+  end
+end

data/lib/generators/loam/install/templates/admin/pending_actions_controller.rb

@@ -0,0 +1,38 @@
+module Admin
+  # The approval queue: staged mutations (Loam::PendingAction) waiting on a
+  # human. Manager-only — approving EXECUTES the change. The workflow's role gate
+  # is the deeper enforcement (approve!/reject! raise for a non-manager); this
+  # screen is a manager screen on top of it.
+  class PendingActionsController < BaseController
+    before_action { require_role!(:manager) }
+    before_action :set_pending_action, only: %i[approve reject]
+
+    def index
+      @pending = Loam::PendingAction.pending.order(created_at: :desc)
+    end
+
+    def approve
+      @pending_action.approve!(by: current_actor)
+      redirect_to admin_pending_actions_path, notice: approval_notice(@pending_action)
+    end
+
+    def reject
+      @pending_action.reject!(by: current_actor, reason: params[:reason])
+      redirect_to admin_pending_actions_path, notice: "Rejected: #{@pending_action.summary}"
+    end
+
+    private
+
+    def set_pending_action
+      @pending_action = Loam::PendingAction.find(params[:id])
+    end
+
+    def approval_notice(pending)
+      if pending.executed?
+        "Approved and applied: #{pending.summary}"
+      else
+        "Approved, but execution failed: #{pending.error}"
+      end
+    end
+  end
+end

data/lib/generators/loam/install/templates/admin/pending_actions_index.html.erb

@@ -0,0 +1,40 @@
+<h1>Approvals</h1>
+
+<p>Changes an agent (or any confirm-mode caller) staged for review. Approving
+executes the change; nothing has been applied yet.</p>
+
+<%% if @pending.empty? %>
+  <p>Nothing waiting for review.</p>
+<%% end %>
+
+<%% @pending.each do |pending| %>
+  <section style="border:1px solid #ccc; padding:1rem; margin-bottom:1rem">
+    <h2><%%= pending.summary %></h2>
+    <p>
+      <%%= pending.action_type %> on <%%= pending.target_type %><%%= " ##{pending.target_id}" if pending.target_id %> ·
+      staged by <%%= User.find_by(id: pending.actor_id)&.name || "—" %>
+      on <%%= pending.created_at.to_date %>
+    </p>
+
+    <table>
+      <thead>
+        <tr><th>Field</th><th>From</th><th>To</th></tr>
+      </thead>
+      <tbody>
+        <%% pending.preview.each do |field, change| %>
+          <tr>
+            <td><%%= field %></td>
+            <td><%%= change["from"].nil? ? "—" : change["from"] %></td>
+            <td><%%= change["to"] %></td>
+          </tr>
+        <%% end %>
+      </tbody>
+    </table>
+
+    <%%= button_to "Approve", approve_admin_pending_action_path(pending), form: { style: "display:inline" } %>
+    <%%= form_with url: reject_admin_pending_action_path(pending), method: :post, class: "reject" do %>
+      <%%= text_field_tag :reason, nil, placeholder: "Reason (optional)" %>
+      <%%= submit_tag "Reject" %>
+    <%% end %>
+  </section>
+<%% end %>