@almadar/std 16.190.0 → 16.192.0

package/behaviors/registry/infra/atoms/std-approval-gate.orb

@@ -1,5 +1,5 @@
 {
-  "description": "std-approval-gate — generic approval gate / approver workflow. Use when a user voices that an action must be reviewed, approved, signed off, or authorized by a privileged role before it proceeds (admin approval, supervisor sign-off, manager approval, gatekeeper review, editor approval, senior editor approval, reviewer approval, publishing approval, draft approval, content review, submit drafts then editors review and approve or reject, needs approval before going live, requires sign-off before publish). Persists ApprovalRequest rows + surfaces them in a review queue with Approve / Deny / Reject actions, optionally requiring a written rejection reason or feedback comment. On approval emits ApprovalGranted; on denial emits ApprovalDenied. Compose onto any orbital whose action you want to gate: the target orbital emits an external event, an ApprovalRequest row is created, and downstream effects wait on ApprovalGranted. Differs from std-mod-queue, which is content-moderation-specific.",
+  "description": "std-approval-gate — generic approval gate / approver workflow. Use when a user voices that an action must be reviewed, approved, signed off, or authorized by a privileged role before it proceeds (admin approval, supervisor sign-off, manager approval, gatekeeper review, editor approval, senior editor approval, reviewer approval, publishing approval, draft approval, content review, submit drafts then editors review and approve or reject, needs approval before going live, requires sign-off before publish). Persists ApprovalRequest rows + surfaces the PENDING ones in a review queue showing what is being approved and who asked, with Approve / Deny actions — Deny captures a written reason. approverRoles is ENFORCED by the review transitions themselves: an APPROVE/DENY from a viewer whose role is not listed does not fire. On approval emits ApprovalGranted; on denial emits ApprovalDenied (with the reason). Hosts that replay the gated action MUST route a failed replay back via APPROVAL_REPLAY_FAILED so the request reopens instead of being silently consumed. Compose onto any orbital whose action you want to gate: the target orbital emits an external event, an ApprovalRequest row is created (stamp subjectLabel/subjectId/requestedBy so reviewers see what they are judging), and downstream effects wait on ApprovalGranted. Differs from std-mod-queue, which is content-moderation-specific.",
   "ledger": {
     "entries": {
       "ent_01KXG04EYQFWN6TM97JNWHHSF4": {
@@ -109,6 +109,42 @@
         "parent": "trt_01KXG04EYQYT20ZWYKAD2EJAHM",
         "renames": []
       },
+      "evt_01M169J81G3QNKWFZEEWM8N90Z": {
+        "bakedName": "APPROVAL_REPLAY_FAILED",
+        "curName": "APPROVAL_REPLAY_FAILED",
+        "id": "evt_01M169J81G3QNKWFZEEWM8N90Z",
+        "kind": "event",
+        "owner": "workspace",
+        "parent": "trt_01KXG04EYQYT20ZWYKAD2EJAHM",
+        "renames": []
+      },
+      "evt_01M169J81G7ZGXNXN8MZSP7K88": {
+        "bakedName": "OPEN_SUBJECT",
+        "curName": "OPEN_SUBJECT",
+        "id": "evt_01M169J81G7ZGXNXN8MZSP7K88",
+        "kind": "event",
+        "owner": "workspace",
+        "parent": "trt_01KXG04EYQYT20ZWYKAD2EJAHM",
+        "renames": []
+      },
+      "evt_01M169J81GX0QRNWDXQE75V3E8": {
+        "bakedName": "CANCEL_DENY",
+        "curName": "CANCEL_DENY",
+        "id": "evt_01M169J81GX0QRNWDXQE75V3E8",
+        "kind": "event",
+        "owner": "workspace",
+        "parent": "trt_01KXG04EYQYT20ZWYKAD2EJAHM",
+        "renames": []
+      },
+      "evt_01M169J81GZWG6Q9MYCQT7F92E": {
+        "bakedName": "CONFIRM_DENY",
+        "curName": "CONFIRM_DENY",
+        "id": "evt_01M169J81GZWG6Q9MYCQT7F92E",
+        "kind": "event",
+        "owner": "workspace",
+        "parent": "trt_01KXG04EYQYT20ZWYKAD2EJAHM",
+        "renames": []
+      },
       "orb_01KXG04EYQYD1ZSZEZ5TG89KZ6": {
         "bakedName": "ApprovalGateOrbital",
         "curName": "ApprovalGateOrbital",
@@ -196,6 +232,22 @@
         "kind": "trait",
         "owner": "workspace",
         "renames": []
+      },
+      "trt_01M169J81G3JQKD0N73BVPJPS4": {
+        "bakedName": "DenyReasonTitle",
+        "curName": "DenyReasonTitle",
+        "id": "trt_01M169J81G3JQKD0N73BVPJPS4",
+        "kind": "trait",
+        "owner": "workspace",
+        "renames": []
+      },
+      "trt_01M169J81G73K4NB9HRPVZA8HX": {
+        "bakedName": "DenyReasonHint",
+        "curName": "DenyReasonHint",
+        "id": "trt_01M169J81G73K4NB9HRPVZA8HX",
+        "kind": "trait",
+        "owner": "workspace",
+        "renames": []
       }
     },
     "schemaVersion": 1
@@ -204,6 +256,9 @@
   "orbitals": [
     {
       "entity": {
+        "access_waivers": {
+          "read": "Shared review surface: submitters watch their requests, approvers work the queue; decision authority is enforced at the transitions, not by hiding rows."
+        },
         "collection": "approval_requests",
         "fields": [
           {
@@ -218,6 +273,34 @@
             "synonyms": "trigger, event, source",
             "type": "string"
           },
+          {
+            "default": "",
+            "description": "Human title of the thing being approved (the article's headline, the page's title) — what the reviewer sees in the queue.",
+            "name": "subjectLabel",
+            "synonyms": "title, subject, what is being approved",
+            "type": "string"
+          },
+          {
+            "default": "",
+            "description": "Id of the record being approved, for a queue row's View click-through to the subject's own surface.",
+            "name": "subjectId",
+            "synonyms": "record id, target id, article id, page id",
+            "type": "string"
+          },
+          {
+            "default": "",
+            "description": "User id of the submitter.",
+            "name": "requestedBy",
+            "synonyms": "submitter, author, requester id",
+            "type": "string"
+          },
+          {
+            "default": "",
+            "description": "Display name of the submitter shown in the queue.",
+            "name": "requestedByName",
+            "synonyms": "submitter name, requester, who asked",
+            "type": "string"
+          },
           {
             "default": "pending",
             "description": "Current state of the approval process.",
@@ -261,9 +344,9 @@
           },
           {
             "default": "",
-            "description": "Free-form text providing additional context or details.",
+            "description": "The reviewer's written reason, captured by the deny step.",
             "name": "notes",
-            "synonyms": "comments, remarks, explanation, details",
+            "synonyms": "comments, remarks, explanation, reason, details",
             "type": "string"
           },
           {
@@ -299,8 +382,7 @@
           "linkedEntity": "ApprovalRequest",
           "linkedEntityId": "ent_01KXG04EYQFWN6TM97JNWHHSF4",
           "name": "LoadingSpinner",
-          "ref": "Spinner.traits.SpinnerRender",
-          "refId": "trt_01KXG04KQTE55FSTDE4V4XKESN"
+          "ref": "Spinner.traits.SpinnerRender"
         },
         {
           "config": {
@@ -313,8 +395,7 @@
           "linkedEntity": "ApprovalRequest",
           "linkedEntityId": "ent_01KXG04EYQFWN6TM97JNWHHSF4",
           "name": "ErrorSpinner",
-          "ref": "Spinner.traits.SpinnerRender",
-          "refId": "trt_01KXG04KQTE55FSTDE4V4XKESN"
+          "ref": "Spinner.traits.SpinnerRender"
         },
         {
           "config": {
@@ -335,8 +416,7 @@
           "linkedEntity": "ApprovalRequest",
           "linkedEntityId": "ent_01KXG04EYQFWN6TM97JNWHHSF4",
           "name": "LoadingText",
-          "ref": "Typography.traits.TypographyRender",
-          "refId": "trt_01KXG04MN4YEZRM29MVNFTYM98"
+          "ref": "Typography.traits.TypographyRender"
         },
         {
           "config": {
@@ -349,8 +429,7 @@
           "linkedEntity": "ApprovalRequest",
           "linkedEntityId": "ent_01KXG04EYQFWN6TM97JNWHHSF4",
           "name": "ShieldCheckIcon",
-          "ref": "Icon.traits.IconRender",
-          "refId": "trt_01KXG04K2JE4GSQVWEWHAHDE2A"
+          "ref": "Icon.traits.IconRender"
         },
         {
           "config": {
@@ -367,8 +446,45 @@
           "linkedEntity": "ApprovalRequest",
           "linkedEntityId": "ent_01KXG04EYQFWN6TM97JNWHHSF4",
           "name": "ApprovalQueueTitle",
-          "ref": "Typography.traits.TypographyRender",
-          "refId": "trt_01KXG04MN4YEZRM29MVNFTYM98"
+          "ref": "Typography.traits.TypographyRender"
+        },
+        {
+          "config": {
+            "content": {
+              "default": "Deny request",
+              "type": "unknown"
+            },
+            "variant": {
+              "default": "h3",
+              "type": "unknown"
+            }
+          },
+          "id": "trt_01M169J81G3JQKD0N73BVPJPS4",
+          "linkedEntity": "ApprovalRequest",
+          "linkedEntityId": "ent_01KXG04EYQFWN6TM97JNWHHSF4",
+          "name": "DenyReasonTitle",
+          "ref": "Typography.traits.TypographyRender"
+        },
+        {
+          "config": {
+            "color": {
+              "default": "muted",
+              "type": "unknown"
+            },
+            "content": {
+              "default": "Tell the submitter why — the reason is recorded on the request.",
+              "type": "unknown"
+            },
+            "variant": {
+              "default": "caption",
+              "type": "unknown"
+            }
+          },
+          "id": "trt_01M169J81G73K4NB9HRPVZA8HX",
+          "linkedEntity": "ApprovalRequest",
+          "linkedEntityId": "ent_01KXG04EYQFWN6TM97JNWHHSF4",
+          "name": "DenyReasonHint",
+          "ref": "Typography.traits.TypographyRender"
         },
         {
           "config": {
@@ -393,16 +509,14 @@
           "linkedEntity": "ApprovalRequest",
           "linkedEntityId": "ent_01KXG04EYQFWN6TM97JNWHHSF4",
           "name": "CloseButton",
-          "ref": "Button.traits.ButtonRender",
-          "refId": "trt_01KXG04JBQPWD7RW8X33NXPXG9"
+          "ref": "Button.traits.ButtonRender"
         },
         {
           "id": "trt_01KY21K6QC0P4NS69R6ATZPC18",
           "linkedEntity": "ApprovalRequest",
           "linkedEntityId": "ent_01KXG04EYQFWN6TM97JNWHHSF4",
           "name": "ApprovalDivider",
-          "ref": "Divider.traits.DividerRender",
-          "refId": "trt_01KXG04JVTJZ479S2KPR7HD1KB"
+          "ref": "Divider.traits.DividerRender"
         },
         {
           "config": {
@@ -419,8 +533,7 @@
           "linkedEntity": "ApprovalRequest",
           "linkedEntityId": "ent_01KXG04EYQFWN6TM97JNWHHSF4",
           "name": "ErrorAlert",
-          "ref": "Alert.traits.AlertRender",
-          "refId": "trt_01KXG04MT125AX1BGFS3ZNGX67"
+          "ref": "Alert.traits.AlertRender"
         },
         {
           "capabilities": [
@@ -430,7 +543,7 @@
           "config": {
             "approverRoles": {
               "default": [],
-              "description": "Roles eligible to approve. The host application enforces role-gating on the page.",
+              "description": "Roles eligible to decide. ENFORCED by the APPROVE/DENY transition guards: a viewer whose @user.role is not listed cannot fire a decision, from the button or from the bus. Empty = every signed-in viewer may decide (ungated).",
               "items": {
                 "type": "string"
               },
@@ -535,6 +648,22 @@
                       "name": "gatedEvent",
                       "type": "string"
                     },
+                    {
+                      "name": "subjectLabel",
+                      "type": "string"
+                    },
+                    {
+                      "name": "subjectId",
+                      "type": "string"
+                    },
+                    {
+                      "name": "requestedBy",
+                      "type": "string"
+                    },
+                    {
+                      "name": "requestedByName",
+                      "type": "string"
+                    },
                     {
                       "name": "status",
                       "type": "string"
@@ -571,7 +700,7 @@
               "tier": "domain"
             },
             {
-              "description": "Signals that an approval request has been denied.",
+              "description": "Opens the deny step for a request; the decision commits with the written reason.",
               "event": "DENY",
               "eventId": "evt_01KXG04EZ0ZFMGKFBB34B7PMEE",
               "payloadSchema": [
@@ -592,6 +721,22 @@
                       "name": "gatedEvent",
                       "type": "string"
                     },
+                    {
+                      "name": "subjectLabel",
+                      "type": "string"
+                    },
+                    {
+                      "name": "subjectId",
+                      "type": "string"
+                    },
+                    {
+                      "name": "requestedBy",
+                      "type": "string"
+                    },
+                    {
+                      "name": "requestedByName",
+                      "type": "string"
+                    },
                     {
                       "name": "status",
                       "type": "string"
@@ -627,6 +772,60 @@
               "synonyms": "reject, decline",
               "tier": "domain"
             },
+            {
+              "description": "A reviewer clicked View on a queue row. Hosts route subjectId to the subject record's own surface so the reviewer can read what they are approving. Scalars only — the row stays in the queue.",
+              "event": "OPEN_SUBJECT",
+              "eventId": "evt_01M169J81G7ZGXNXN8MZSP7K88",
+              "payloadSchema": [
+                {
+                  "name": "id",
+                  "required": true,
+                  "type": "string"
+                },
+                {
+                  "name": "subjectId",
+                  "type": "string"
+                },
+                {
+                  "name": "subjectLabel",
+                  "type": "string"
+                }
+              ],
+              "scope": "external",
+              "synonyms": "view subject, open record, inspect request, see the article",
+              "tier": "domain"
+            },
+            {
+              "description": "The deny form committed; data carries the request id + the written reason.",
+              "event": "CONFIRM_DENY",
+              "eventId": "evt_01M169J81GZWG6Q9MYCQT7F92E",
+              "payloadSchema": [
+                {
+                  "name": "data",
+                  "properties": [
+                    {
+                      "name": "id",
+                      "required": true,
+                      "type": "string"
+                    },
+                    {
+                      "name": "notes",
+                      "type": "string"
+                    }
+                  ],
+                  "type": "object"
+                }
+              ],
+              "synonyms": "submit denial, confirm rejection",
+              "tier": "internal"
+            },
+            {
+              "description": "The deny form was dismissed without committing; the queue repaints.",
+              "event": "CANCEL_DENY",
+              "eventId": "evt_01M169J81GX0QRNWDXQE75V3E8",
+              "synonyms": "cancel denial, back to queue",
+              "tier": "internal"
+            },
             {
               "description": "Dismisses the review queue overlay.",
               "event": "CLOSE",
@@ -635,7 +834,7 @@
               "tier": "domain"
             },
             {
-              "description": "Signals that an approval process has been successfully completed; carries the held payload for the downstream listener to replay.",
+              "description": "Signals that an approval process has been successfully completed; carries the held payload for the downstream listener to replay. Contract: if the replay fails (access denial, write failure), the host MUST emit APPROVAL_REPLAY_FAILED back so the request reopens.",
               "event": "ApprovalGranted",
               "eventId": "evt_01KXG04EZ09QDH2K4ZAGX0JZDQ",
               "payloadSchema": [
@@ -653,13 +852,17 @@
               "tier": "domain"
             },
             {
-              "description": "Indicates an approval request has been denied.",
+              "description": "Indicates an approval request has been denied, with the reviewer's written reason.",
               "event": "ApprovalDenied",
               "eventId": "evt_01KXG04EZ0JF1Y4KS5KF3R9X8X",
               "payloadSchema": [
                 {
                   "name": "requestId",
                   "type": "string"
+                },
+                {
+                  "name": "reason",
+                  "type": "string"
                 }
               ],
               "scope": "external",
@@ -713,6 +916,22 @@
                       "name": "gatedEvent",
                       "type": "string"
                     },
+                    {
+                      "name": "subjectLabel",
+                      "type": "string"
+                    },
+                    {
+                      "name": "subjectId",
+                      "type": "string"
+                    },
+                    {
+                      "name": "requestedBy",
+                      "type": "string"
+                    },
+                    {
+                      "name": "requestedByName",
+                      "type": "string"
+                    },
                     {
                       "name": "status",
                       "type": "string"
@@ -768,8 +987,11 @@
           ],
           "entityContract": {
             "provides": [
+              "decidedAt",
+              "notes",
               "reviewer",
-              "status"
+              "status",
+              "subjectLabel"
             ],
             "requires": []
           },
@@ -834,6 +1056,25 @@
                 "synonyms": "load error, failed load, request failure",
                 "tier": "internal"
               },
+              {
+                "description": "The host could not apply the granted action (access denial, failed write). The request reopens as pending so a decision is never silently lost.",
+                "id": "evt_01M169J81G3QNKWFZEEWM8N90Z",
+                "key": "APPROVAL_REPLAY_FAILED",
+                "name": "Approval Replay Failed",
+                "payloadSchema": [
+                  {
+                    "name": "requestId",
+                    "required": true,
+                    "type": "string"
+                  },
+                  {
+                    "name": "error",
+                    "type": "string"
+                  }
+                ],
+                "synonyms": "replay failed, apply failed, approval rollback",
+                "tier": "domain"
+              },
               {
                 "description": "Summons the review queue (host nav/affordance requests it).",
                 "id": "evt_01KXG04EZ05HP9JSWYNV5XV2QW",
@@ -870,7 +1111,7 @@
                 "tier": "domain"
               },
               {
-                "description": "Signals that an approval request has been denied.",
+                "description": "Opens the deny step for a request; the decision commits with the written reason.",
                 "id": "evt_01KXG04EZ0ZFMGKFBB34B7PMEE",
                 "key": "DENY",
                 "name": "Deny",
@@ -888,6 +1129,29 @@
                 "synonyms": "reject, decline",
                 "tier": "domain"
               },
+              {
+                "description": "A reviewer clicked View on a queue row. Hosts route subjectId to the subject record's own surface so the reviewer can read what they are approving. Scalars only — the row stays in the queue.",
+                "id": "evt_01M169J81G7ZGXNXN8MZSP7K88",
+                "key": "OPEN_SUBJECT",
+                "name": "Open Subject",
+                "payloadSchema": [
+                  {
+                    "name": "id",
+                    "required": true,
+                    "type": "string"
+                  },
+                  {
+                    "name": "subjectId",
+                    "type": "string"
+                  },
+                  {
+                    "name": "subjectLabel",
+                    "type": "string"
+                  }
+                ],
+                "synonyms": "view subject, open record, inspect request, see the article",
+                "tier": "domain"
+              },
               {
                 "description": "Signals that an approval request has been reviewed.",
                 "id": "evt_01KXG04EZ0XXBA89NVB97J1NAM",
@@ -921,7 +1185,40 @@
                 "tier": "internal"
               },
               {
-                "description": "Signals that an approval process has been successfully completed; carries the held payload for the downstream listener to replay.",
+                "description": "The deny form committed; data carries the request id + the written reason.",
+                "id": "evt_01M169J81GZWG6Q9MYCQT7F92E",
+                "key": "CONFIRM_DENY",
+                "name": "Confirm Deny",
+                "payloadSchema": [
+                  {
+                    "name": "data",
+                    "properties": [
+                      {
+                        "name": "id",
+                        "required": true,
+                        "type": "string"
+                      },
+                      {
+                        "name": "notes",
+                        "type": "string"
+                      }
+                    ],
+                    "type": "object"
+                  }
+                ],
+                "synonyms": "submit denial, confirm rejection",
+                "tier": "internal"
+              },
+              {
+                "description": "The deny form was dismissed without committing; the queue repaints.",
+                "id": "evt_01M169J81GX0QRNWDXQE75V3E8",
+                "key": "CANCEL_DENY",
+                "name": "Cancel Deny",
+                "synonyms": "cancel denial, back to queue",
+                "tier": "internal"
+              },
+              {
+                "description": "Signals that an approval process has been successfully completed; carries the held payload for the downstream listener to replay. Contract: if the replay fails (access denial, write failure), the host MUST emit APPROVAL_REPLAY_FAILED back so the request reopens.",
                 "id": "evt_01KXG04EZ09QDH2K4ZAGX0JZDQ",
                 "key": "ApprovalGranted",
                 "name": "Approval granted",
@@ -939,7 +1236,7 @@
                 "tier": "domain"
               },
               {
-                "description": "Indicates an approval request has been denied.",
+                "description": "Indicates an approval request has been denied, with the reviewer's written reason.",
                 "id": "evt_01KXG04EZ0JF1Y4KS5KF3R9X8X",
                 "key": "ApprovalDenied",
                 "name": "Approval denied",
@@ -947,6 +1244,10 @@
                   {
                     "name": "requestId",
                     "type": "string"
+                  },
+                  {
+                    "name": "reason",
+                    "type": "string"
                   }
                 ],
                 "synonyms": "rejected, declined",
@@ -964,6 +1265,9 @@
               {
                 "name": "reviewing"
               },
+              {
+                "name": "denying"
+              },
               {
                 "name": "error"
               }
@@ -978,7 +1282,16 @@
                       "emit": {
                         "failure": "ApprovalRequestLoadFailed",
                         "success": "ApprovalRequestLoaded"
-                      }
+                      },
+                      "filter": [
+                        "=",
+                        [
+                          "object/get",
+                          "@entity",
+                          "status"
+                        ],
+                        "pending"
+                      ]
                     }
                   ]
                 ],
@@ -999,6 +1312,51 @@
                 "from": "idle",
                 "to": "idle"
               },
+              {
+                "effects": [
+                  [
+                    "set",
+                    "@entity.id",
+                    "@payload.requestId"
+                  ],
+                  [
+                    "set",
+                    "@entity.status",
+                    "pending"
+                  ],
+                  [
+                    "set",
+                    "@entity.reviewer",
+                    ""
+                  ],
+                  [
+                    "set",
+                    "@entity.decidedAt",
+                    0.0
+                  ],
+                  [
+                    "persist",
+                    "update",
+                    "ApprovalRequest",
+                    "@entity",
+                    {
+                      "emit": {
+                        "failure": "ApprovalRequestReviewFailed",
+                        "success": "ApprovalRequestReviewed"
+                      }
+                    }
+                  ],
+                  [
+                    "notify",
+                    "Approval could not be applied — the request was reopened.",
+                    "error"
+                  ]
+                ],
+                "event": "APPROVAL_REPLAY_FAILED",
+                "eventId": "evt_01M169J81G3QNKWFZEEWM8N90Z",
+                "from": "idle",
+                "to": "idle"
+              },
               {
                 "effects": [
                   [
@@ -1008,7 +1366,16 @@
                       "emit": {
                         "failure": "ApprovalRequestLoadFailed",
                         "success": "ApprovalRequestLoaded"
-                      }
+                      },
+                      "filter": [
+                        "=",
+                        [
+                          "object/get",
+                          "@entity",
+                          "status"
+                        ],
+                        "pending"
+                      ]
                     }
                   ],
                   [
@@ -1065,24 +1432,35 @@
                           "cols": 1.0,
                           "entity": "@payload.data",
                           "fields": [
+                            {
+                              "label": "What",
+                              "name": "subjectLabel",
+                              "variant": "h4"
+                            },
                             {
                               "label": "Action",
                               "name": "gatedEvent",
                               "variant": "badge"
                             },
                             {
-                              "label": "Requested",
-                              "name": "requestedAt",
+                              "label": "Requested by",
+                              "name": "requestedByName",
                               "variant": "caption"
                             },
                             {
-                              "label": "Status",
-                              "name": "status",
-                              "variant": "badge"
+                              "label": "Requested",
+                              "name": "requestedAt",
+                              "variant": "caption"
                             }
                           ],
                           "gap": "sm",
                           "itemActions": [
+                            {
+                              "event": "OPEN_SUBJECT",
+                              "icon": "eye",
+                              "label": "View",
+                              "variant": "ghost"
+                            },
                             {
                               "event": "APPROVE",
                               "icon": "check",
@@ -1159,6 +1537,13 @@
                     "@entity.reviewer",
                     "@user.id"
                   ],
+                  [
+                    "set",
+                    "@entity.decidedAt",
+                    [
+                      "time/now"
+                    ]
+                  ],
                   [
                     "persist",
                     "update",
@@ -1183,6 +1568,22 @@
                 "event": "APPROVE",
                 "eventId": "evt_01KXG04EZ0H0D5WC8FJKBRGBQE",
                 "from": "reviewing",
+                "guard": [
+                  "or",
+                  [
+                    "=",
+                    [
+                      "array/len",
+                      "@config.approverRoles"
+                    ],
+                    0.0
+                  ],
+                  [
+                    "array/includes",
+                    "@config.approverRoles",
+                    "@user.role"
+                  ]
+                ],
                 "to": "reviewing"
               },
               {
@@ -1192,6 +1593,197 @@
                     "@entity.id",
                     "@payload.id"
                   ],
+                  [
+                    "set",
+                    "@entity.subjectLabel",
+                    [
+                      "str/default",
+                      [
+                        "object/get",
+                        "@payload.row",
+                        "subjectLabel"
+                      ],
+                      ""
+                    ]
+                  ],
+                  [
+                    "render-ui",
+                    "@config.reviewSlot",
+                    {
+                      "children": [
+                        {
+                          "align": "center",
+                          "children": [
+                            "@trait.DenyReasonTitle",
+                            "@trait.CloseButton"
+                          ],
+                          "direction": "horizontal",
+                          "gap": "sm",
+                          "justify": "between",
+                          "type": "stack"
+                        },
+                        "@trait.DenyReasonHint",
+                        "@trait.ApprovalDivider",
+                        {
+                          "cancelEvent": "CANCEL_DENY",
+                          "entity": {
+                            "id": "@entity.id"
+                          },
+                          "fields": [
+                            "notes"
+                          ],
+                          "mode": "edit",
+                          "submitEvent": "CONFIRM_DENY",
+                          "type": "form-section"
+                        }
+                      ],
+                      "direction": "vertical",
+                      "gap": "md",
+                      "type": "stack"
+                    }
+                  ]
+                ],
+                "event": "DENY",
+                "eventId": "evt_01KXG04EZ0ZFMGKFBB34B7PMEE",
+                "from": "reviewing",
+                "guard": [
+                  "or",
+                  [
+                    "=",
+                    [
+                      "array/len",
+                      "@config.approverRoles"
+                    ],
+                    0.0
+                  ],
+                  [
+                    "array/includes",
+                    "@config.approverRoles",
+                    "@user.role"
+                  ]
+                ],
+                "to": "denying"
+              },
+              {
+                "event": "OPEN_SUBJECT",
+                "eventId": "evt_01M169J81G7ZGXNXN8MZSP7K88",
+                "from": "reviewing",
+                "to": "reviewing"
+              },
+              {
+                "effects": [
+                  [
+                    "fetch",
+                    "ApprovalRequest",
+                    {
+                      "emit": {
+                        "failure": "ApprovalRequestLoadFailed",
+                        "success": "ApprovalRequestLoaded"
+                      },
+                      "filter": [
+                        "=",
+                        [
+                          "object/get",
+                          "@entity",
+                          "status"
+                        ],
+                        "pending"
+                      ]
+                    }
+                  ]
+                ],
+                "event": "ApprovalRequestReviewed",
+                "eventId": "evt_01KXG04EZ0XXBA89NVB97J1NAM",
+                "from": "reviewing",
+                "to": "loading"
+              },
+              {
+                "effects": [
+                  [
+                    "render-ui",
+                    "@config.reviewSlot",
+                    {
+                      "children": [
+                        "@trait.ErrorAlert"
+                      ],
+                      "type": "stack"
+                    }
+                  ]
+                ],
+                "event": "ApprovalRequestReviewFailed",
+                "eventId": "evt_01KXG04EZ0HX0YV7MH4PXFQCM0",
+                "from": "reviewing",
+                "to": "reviewing"
+              },
+              {
+                "effects": [
+                  [
+                    "set",
+                    "@entity.id",
+                    "@payload.requestId"
+                  ],
+                  [
+                    "set",
+                    "@entity.status",
+                    "pending"
+                  ],
+                  [
+                    "set",
+                    "@entity.reviewer",
+                    ""
+                  ],
+                  [
+                    "set",
+                    "@entity.decidedAt",
+                    0.0
+                  ],
+                  [
+                    "persist",
+                    "update",
+                    "ApprovalRequest",
+                    "@entity",
+                    {
+                      "emit": {
+                        "failure": "ApprovalRequestReviewFailed",
+                        "success": "ApprovalRequestReviewed"
+                      }
+                    }
+                  ],
+                  [
+                    "notify",
+                    "Approval could not be applied — the request was reopened.",
+                    "error"
+                  ]
+                ],
+                "event": "APPROVAL_REPLAY_FAILED",
+                "eventId": "evt_01M169J81G3QNKWFZEEWM8N90Z",
+                "from": "reviewing",
+                "to": "reviewing"
+              },
+              {
+                "effects": [
+                  [
+                    "render-ui",
+                    "@config.reviewSlot",
+                    null
+                  ]
+                ],
+                "event": "CLOSE",
+                "eventId": "evt_01KXG04EZ0MS01J775W2VPESMJ",
+                "from": "reviewing",
+                "to": "idle"
+              },
+              {
+                "effects": [
+                  [
+                    "set",
+                    "@entity.id",
+                    [
+                      "object/get",
+                      "@payload.data",
+                      "id"
+                    ]
+                  ],
                   [
                     "set",
                     "@entity.status",
@@ -1202,6 +1794,26 @@
                     "@entity.reviewer",
                     "@user.id"
                   ],
+                  [
+                    "set",
+                    "@entity.decidedAt",
+                    [
+                      "time/now"
+                    ]
+                  ],
+                  [
+                    "set",
+                    "@entity.notes",
+                    [
+                      "str/default",
+                      [
+                        "object/get",
+                        "@payload.data",
+                        "notes"
+                      ],
+                      ""
+                    ]
+                  ],
                   [
                     "persist",
                     "update",
@@ -1218,13 +1830,26 @@
                     "emit",
                     "ApprovalDenied",
                     {
-                      "requestId": "@payload.id"
+                      "reason": [
+                        "str/default",
+                        [
+                          "object/get",
+                          "@payload.data",
+                          "notes"
+                        ],
+                        ""
+                      ],
+                      "requestId": [
+                        "object/get",
+                        "@payload.data",
+                        "id"
+                      ]
                     }
                   ]
                 ],
-                "event": "DENY",
-                "eventId": "evt_01KXG04EZ0ZFMGKFBB34B7PMEE",
-                "from": "reviewing",
+                "event": "CONFIRM_DENY",
+                "eventId": "evt_01M169J81GZWG6Q9MYCQT7F92E",
+                "from": "denying",
                 "to": "reviewing"
               },
               {
@@ -1236,13 +1861,49 @@
                       "emit": {
                         "failure": "ApprovalRequestLoadFailed",
                         "success": "ApprovalRequestLoaded"
-                      }
+                      },
+                      "filter": [
+                        "=",
+                        [
+                          "object/get",
+                          "@entity",
+                          "status"
+                        ],
+                        "pending"
+                      ]
+                    }
+                  ]
+                ],
+                "event": "CANCEL_DENY",
+                "eventId": "evt_01M169J81GX0QRNWDXQE75V3E8",
+                "from": "denying",
+                "to": "loading"
+              },
+              {
+                "effects": [
+                  [
+                    "fetch",
+                    "ApprovalRequest",
+                    {
+                      "emit": {
+                        "failure": "ApprovalRequestLoadFailed",
+                        "success": "ApprovalRequestLoaded"
+                      },
+                      "filter": [
+                        "=",
+                        [
+                          "object/get",
+                          "@entity",
+                          "status"
+                        ],
+                        "pending"
+                      ]
                     }
                   ]
                 ],
                 "event": "ApprovalRequestReviewed",
                 "eventId": "evt_01KXG04EZ0XXBA89NVB97J1NAM",
-                "from": "reviewing",
+                "from": "denying",
                 "to": "loading"
               },
               {
@@ -1260,8 +1921,8 @@
                 ],
                 "event": "ApprovalRequestReviewFailed",
                 "eventId": "evt_01KXG04EZ0HX0YV7MH4PXFQCM0",
-                "from": "reviewing",
-                "to": "reviewing"
+                "from": "denying",
+                "to": "denying"
               },
               {
                 "effects": [
@@ -1273,7 +1934,7 @@
                 ],
                 "event": "CLOSE",
                 "eventId": "evt_01KXG04EZ0MS01J775W2VPESMJ",
-                "from": "reviewing",
+                "from": "denying",
                 "to": "idle"
               },
               {
@@ -1285,7 +1946,16 @@
                       "emit": {
                         "failure": "ApprovalRequestLoadFailed",
                         "success": "ApprovalRequestLoaded"
-                      }
+                      },
+                      "filter": [
+                        "=",
+                        [
+                          "object/get",
+                          "@entity",
+                          "status"
+                        ],
+                        "pending"
+                      ]
                     }
                   ],
                   [
@@ -1323,6 +1993,8 @@
             "ApprovalDivider": "trt_01KY21K6QC0P4NS69R6ATZPC18",
             "ApprovalQueueTitle": "trt_01KY21K6QCC5BFGZKJF8Q6HYMM",
             "CloseButton": "trt_01KY21K6QCRRFVK1BRAD774HXP",
+            "DenyReasonHint": "trt_01M169J81G73K4NB9HRPVZA8HX",
+            "DenyReasonTitle": "trt_01M169J81G3JQKD0N73BVPJPS4",
             "ErrorAlert": "trt_01KY21K6QC64ZQCX4WH65V7SKA",
             "ErrorSpinner": "trt_01KY21K6QCCHHN53WV6VF6NKE4",
             "LoadingSpinner": "trt_01KY21K6QC4NB1EVQJ94HWPN3B",
@@ -1360,5 +2032,5 @@
     }
   ],
   "schemaVersion": 1,
-  "version": "1.0.1"
+  "version": "1.1.0"
 }