@elizaos/ui 2.0.0-beta.2 → 2.0.11-beta.7

package/cloud/approvals/ApprovalsRoute.d.ts

@@ -0,0 +1,27 @@
+/**
+ * In-app Approvals pane: a logged-in owner approves / denies / votes on their
+ * agent's pending items next to chat.
+ *
+ * Three tabs — Approvals (signature-gated approval requests), Sensitive
+ * (per-id sensitive-request lookup + cancel), Ballots (secret ballots with
+ * tally / cancel / vote). Net-new owner-facing surface: the public token pages
+ * (`/approve/:id`, `/ballot/:id`, `/sensitive-requests/:id`) are the
+ * sessionless recipient flow; this pane is the owner-side counterpart that lists
+ * and acts on the same records via the Bearer-gated collection / owner
+ * endpoints.
+ *
+ * Gates on the Steward session (the shell wraps non-public routes in
+ * `StewardAuthProvider`; this also checks `useRequireAuth` so a signed-out user
+ * sees a prompt instead of empty lists). The same {@link ApprovalsSurface} is
+ * exported so a settings-section or sidebar host can embed it without the route
+ * wrapper.
+ */
+/**
+ * The Approvals surface. Embeddable: used directly by an owner-facing settings
+ * section / sidebar panel and wrapped by {@link ApprovalsRoute} for the
+ * standalone route.
+ */
+export declare function ApprovalsSurface(): import("react/jsx-runtime").JSX.Element;
+/** Default export consumed by the cloud-route registry. */
+export default function ApprovalsRoute(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=ApprovalsRoute.d.ts.map

package/cloud/approvals/ApprovalsRoute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApprovalsRoute.d.ts","sourceRoot":"","sources":["../../../../../../src/cloud/approvals/ApprovalsRoute.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAeH;;;;GAIG;AACH,wBAAgB,gBAAgB,4CAoD/B;AAED,2DAA2D;AAC3D,MAAM,CAAC,OAAO,UAAU,cAAc,4CAErC"}

package/cloud/approvals/ApprovalsRoute.js

@@ -0,0 +1,45 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * In-app Approvals pane: a logged-in owner approves / denies / votes on their
+ * agent's pending items next to chat.
+ *
+ * Three tabs — Approvals (signature-gated approval requests), Sensitive
+ * (per-id sensitive-request lookup + cancel), Ballots (secret ballots with
+ * tally / cancel / vote). Net-new owner-facing surface: the public token pages
+ * (`/approve/:id`, `/ballot/:id`, `/sensitive-requests/:id`) are the
+ * sessionless recipient flow; this pane is the owner-side counterpart that lists
+ * and acts on the same records via the Bearer-gated collection / owner
+ * endpoints.
+ *
+ * Gates on the Steward session (the shell wraps non-public routes in
+ * `StewardAuthProvider`; this also checks `useRequireAuth` so a signed-out user
+ * sees a prompt instead of empty lists). The same {@link ApprovalsSurface} is
+ * exported so a settings-section or sidebar host can embed it without the route
+ * wrapper.
+ */
+import { ShieldCheck } from "lucide-react";
+import { DashboardLoadingState } from "../../cloud-ui/components/dashboard/route-placeholders.js";
+import { Tabs, TabsContent, TabsList, TabsTrigger, } from "../../components/primitives/index.js";
+import { ApprovalsTab } from "./components/approvals-tab.js";
+import { BallotsTab } from "./components/ballots-tab.js";
+import { SensitiveTab } from "./components/sensitive-tab.js";
+import { useRequireAuth } from "./lib/use-session-auth.js";
+/**
+ * The Approvals surface. Embeddable: used directly by an owner-facing settings
+ * section / sidebar panel and wrapped by {@link ApprovalsRoute} for the
+ * standalone route.
+ */
+export function ApprovalsSurface() {
+    const { ready, authenticated } = useRequireAuth();
+    if (!ready) {
+        return _jsx(DashboardLoadingState, { label: "Loading approvals" });
+    }
+    if (!authenticated) {
+        return (_jsxs("div", { className: "mx-auto max-w-md py-16 text-center", children: [_jsx(ShieldCheck, { className: "mx-auto h-8 w-8 text-accent" }), _jsx("h1", { className: "mt-4 text-lg font-semibold text-txt", children: "Sign in required" }), _jsx("p", { className: "mt-1 text-sm text-muted", children: "Log in with your Eliza Cloud account to review your agent's pending approvals." })] }));
+    }
+    return (_jsxs("div", { className: "mx-auto max-w-2xl space-y-4 p-4", children: [_jsxs("header", { className: "flex items-center gap-2", children: [_jsx(ShieldCheck, { className: "h-6 w-6 text-accent" }), _jsxs("div", { children: [_jsx("h1", { className: "text-xl font-semibold text-txt", children: "Approvals" }), _jsx("p", { className: "text-sm text-muted", children: "Review and act on your agent's pending requests." })] })] }), _jsxs(Tabs, { defaultValue: "approvals", children: [_jsxs(TabsList, { children: [_jsx(TabsTrigger, { value: "approvals", children: "Approvals" }), _jsx(TabsTrigger, { value: "sensitive", children: "Sensitive" }), _jsx(TabsTrigger, { value: "ballots", children: "Ballots" })] }), _jsx(TabsContent, { value: "approvals", children: _jsx(ApprovalsTab, {}) }), _jsx(TabsContent, { value: "sensitive", children: _jsx(SensitiveTab, {}) }), _jsx(TabsContent, { value: "ballots", children: _jsx(BallotsTab, {}) })] })] }));
+}
+/** Default export consumed by the cloud-route registry. */
+export default function ApprovalsRoute() {
+    return _jsx(ApprovalsSurface, {});
+}

package/cloud/approvals/components/approvals-tab.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Approvals tab: lists the owner's pending approval requests and lets them
+ * approve (via the wallet-signature gate) or deny inline.
+ *
+ * Approve flow (wallet-signature gate, zero backend change): for `wallet`
+ * challenges we offer a one-click "Sign with wallet" that runs `personal_sign`
+ * on the challenge message via the injected provider and submits the signature;
+ * a paste-signature textarea is always available as the fallback (and the only
+ * path for `ed25519` / non-wallet signers). The server-side
+ * `IdentityVerificationGatekeeper` validates the signature exactly as it does
+ * for the public approval page.
+ */
+export declare function ApprovalsTab(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=approvals-tab.d.ts.map

package/cloud/approvals/components/approvals-tab.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals-tab.d.ts","sourceRoot":"","sources":["../../../../../../../src/cloud/approvals/components/approvals-tab.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAmMH,wBAAgB,YAAY,4CAyC3B"}

package/cloud/approvals/components/approvals-tab.js

@@ -0,0 +1,98 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Approvals tab: lists the owner's pending approval requests and lets them
+ * approve (via the wallet-signature gate) or deny inline.
+ *
+ * Approve flow (wallet-signature gate, zero backend change): for `wallet`
+ * challenges we offer a one-click "Sign with wallet" that runs `personal_sign`
+ * on the challenge message via the injected provider and submits the signature;
+ * a paste-signature textarea is always available as the fallback (and the only
+ * path for `ed25519` / non-wallet signers). The server-side
+ * `IdentityVerificationGatekeeper` validates the signature exactly as it does
+ * for the public approval page.
+ */
+import { CheckCircle2, Loader2, ShieldCheck, Wallet } from "lucide-react";
+import { useCallback, useState } from "react";
+import { Alert, AlertDescription, AlertTitle, Button, Textarea, } from "../../../components/primitives/index.js";
+import { formatApprovalTimestamp, useApprovalRequests, useApproveRequest, useDenyRequest, } from "../lib/approvals.js";
+import { isInjectedWalletAvailable, signApprovalChallenge, WalletSignError, } from "../lib/wallet-sign.js";
+import { StatusBadge } from "./status-badge.js";
+function errorMessage(error, fallback) {
+    if (error instanceof Error && error.message)
+        return error.message;
+    return fallback;
+}
+function ApprovalCard({ request }) {
+    const approve = useApproveRequest();
+    const deny = useDenyRequest();
+    const [signature, setSignature] = useState("");
+    const [signing, setSigning] = useState(false);
+    const [error, setError] = useState(null);
+    const challenge = request.challengePayload;
+    const signerKind = challenge.signerKind;
+    const isTerminal = request.status === "approved" ||
+        request.status === "denied" ||
+        request.status === "expired" ||
+        request.status === "canceled";
+    const walletCapable = signerKind === "wallet" && isInjectedWalletAvailable();
+    const busy = approve.isPending || deny.isPending || signing;
+    const submitSignature = useCallback(async (value) => {
+        const trimmed = value.trim();
+        if (!trimmed)
+            return;
+        setError(null);
+        try {
+            await approve.mutateAsync({ id: request.id, signature: trimmed });
+        }
+        catch (caught) {
+            setError(errorMessage(caught, "Failed to submit signature."));
+        }
+    }, [approve, request.id]);
+    const handleSignWithWallet = useCallback(async () => {
+        setError(null);
+        setSigning(true);
+        try {
+            const sig = await signApprovalChallenge(challenge.message);
+            await submitSignature(sig);
+        }
+        catch (caught) {
+            setError(caught instanceof WalletSignError
+                ? caught.message
+                : errorMessage(caught, "Wallet signing failed."));
+        }
+        finally {
+            setSigning(false);
+        }
+    }, [challenge.message, submitSignature]);
+    const handleDeny = useCallback(async () => {
+        setError(null);
+        try {
+            await deny.mutateAsync({ id: request.id });
+        }
+        catch (caught) {
+            setError(errorMessage(caught, "Failed to deny approval."));
+        }
+    }, [deny, request.id]);
+    const expiresAt = formatApprovalTimestamp(request.expiresAt);
+    return (_jsxs("div", { className: "rounded-md border border-border bg-card p-4", children: [_jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(ShieldCheck, { className: "h-5 w-5 text-accent" }), _jsxs("div", { children: [_jsxs("p", { className: "text-sm font-medium text-txt", children: [request.challengeKind, " approval"] }), expiresAt ? (_jsxs("p", { className: "text-xs text-muted", children: ["Expires ", expiresAt] })) : null] })] }), _jsx(StatusBadge, { status: request.status })] }), challenge.message ? (_jsx("pre", { className: "mt-3 max-h-40 overflow-auto whitespace-pre-wrap break-all rounded bg-surface p-3 text-xs text-muted-strong", children: challenge.message })) : null, error ? (_jsxs(Alert, { className: "mt-3", variant: "destructive", children: [_jsx(AlertTitle, { children: "Approval issue" }), _jsx(AlertDescription, { children: error })] })) : null, !isTerminal ? (_jsxs("div", { className: "mt-4 space-y-3", children: [walletCapable ? (_jsxs(Button, { type: "button", onClick: handleSignWithWallet, disabled: busy, className: "w-full", children: [signing ? (_jsx(Loader2, { className: "h-4 w-4 animate-spin" })) : (_jsx(Wallet, { className: "h-4 w-4" })), "Sign with wallet & approve"] })) : null, _jsxs("div", { className: "space-y-2", children: [_jsx("label", { htmlFor: `sig-${request.id}`, className: "block text-xs font-medium text-muted", children: walletCapable
+                                    ? "Or paste a signature"
+                                    : "Paste signature to approve" }), _jsx(Textarea, { id: `sig-${request.id}`, value: signature, onChange: (event) => setSignature(event.target.value), rows: 3, disabled: busy, spellCheck: false, placeholder: signerKind === "wallet"
+                                    ? "0x..."
+                                    : signerKind === "ed25519"
+                                        ? "base64 ed25519 signature"
+                                        : "Paste signature", className: "font-mono text-xs" })] }), _jsxs("div", { className: "flex gap-2", children: [_jsxs(Button, { type: "button", onClick: () => void submitSignature(signature), disabled: busy || signature.trim().length === 0, children: [approve.isPending ? (_jsx(Loader2, { className: "h-4 w-4 animate-spin" })) : (_jsx(CheckCircle2, { className: "h-4 w-4" })), "Approve"] }), _jsxs(Button, { type: "button", variant: "outline", onClick: handleDeny, disabled: busy, children: [deny.isPending ? (_jsx(Loader2, { className: "h-4 w-4 animate-spin" })) : null, "Deny"] })] })] })) : null] }));
+}
+export function ApprovalsTab() {
+    const query = useApprovalRequests();
+    if (query.isLoading) {
+        return (_jsx("div", { className: "flex items-center justify-center py-12", children: _jsx(Loader2, { className: "h-5 w-5 animate-spin text-muted" }) }));
+    }
+    if (query.isError) {
+        return (_jsxs(Alert, { variant: "destructive", children: [_jsx(AlertTitle, { children: "Could not load approvals" }), _jsx(AlertDescription, { children: errorMessage(query.error, "Try again in a moment.") })] }));
+    }
+    const pending = (query.data ?? []).filter((request) => request.status === "pending" || request.status === "delivered");
+    if (pending.length === 0) {
+        return (_jsx("p", { className: "py-12 text-center text-sm text-muted", children: "No pending approval requests." }));
+    }
+    return (_jsx("div", { className: "space-y-3", children: pending.map((request) => (_jsx(ApprovalCard, { request: request }, request.id))) }));
+}

package/cloud/approvals/components/ballots-tab.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Ballots tab: lists the owner's secret ballots with inline tally / cancel, and
+ * a per-ballot vote form (paste scoped token + value) for when the owner holds a
+ * participant token. Votes are gated server-side on the token hash, not the
+ * session, so the owner can only vote with a real scoped token they were issued.
+ */
+export declare function BallotsTab(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=ballots-tab.d.ts.map

package/cloud/approvals/components/ballots-tab.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ballots-tab.d.ts","sourceRoot":"","sources":["../../../../../../../src/cloud/approvals/components/ballots-tab.tsx"],"names":[],"mappings":"AAAA;;;;;GAKG;AA8LH,wBAAgB,UAAU,4CAqCzB"}

package/cloud/approvals/components/ballots-tab.js

@@ -0,0 +1,86 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Ballots tab: lists the owner's secret ballots with inline tally / cancel, and
+ * a per-ballot vote form (paste scoped token + value) for when the owner holds a
+ * participant token. Votes are gated server-side on the token hash, not the
+ * session, so the owner can only vote with a real scoped token they were issued.
+ */
+import { CheckCircle2, Loader2, Vote } from "lucide-react";
+import { useCallback, useState } from "react";
+import { Alert, AlertDescription, AlertTitle, Button, Input, Textarea, } from "../../../components/primitives/index.js";
+import { formatApprovalTimestamp, useBallots, useCancelBallot, useTallyBallot, useVoteBallot, } from "../lib/approvals.js";
+import { StatusBadge } from "./status-badge.js";
+function errorMessage(error, fallback) {
+    if (error instanceof Error && error.message)
+        return error.message;
+    return fallback;
+}
+function BallotCard({ ballot }) {
+    const tally = useTallyBallot();
+    const cancel = useCancelBallot();
+    const vote = useVoteBallot();
+    const [scopedToken, setScopedToken] = useState("");
+    const [value, setValue] = useState("");
+    const [error, setError] = useState(null);
+    const [voteMessage, setVoteMessage] = useState(null);
+    const isOpen = ballot.status === "open";
+    const busy = tally.isPending || cancel.isPending || vote.isPending;
+    const expiresAt = formatApprovalTimestamp(ballot.expiresAt);
+    const voteCount = ballot.tallyResult?.totalVotes ?? null;
+    const handleTally = useCallback(async () => {
+        setError(null);
+        try {
+            const result = await tally.mutateAsync({ id: ballot.id });
+            if (!result.tallied) {
+                setError("Threshold not met yet — not enough votes to tally.");
+            }
+        }
+        catch (caught) {
+            setError(errorMessage(caught, "Failed to tally ballot."));
+        }
+    }, [ballot.id, tally]);
+    const handleCancel = useCallback(async () => {
+        setError(null);
+        try {
+            await cancel.mutateAsync({ id: ballot.id });
+        }
+        catch (caught) {
+            setError(errorMessage(caught, "Failed to cancel ballot."));
+        }
+    }, [ballot.id, cancel]);
+    const handleVote = useCallback(async () => {
+        if (!scopedToken.trim() || !value.trim())
+            return;
+        setError(null);
+        setVoteMessage(null);
+        try {
+            const result = await vote.mutateAsync({
+                id: ballot.id,
+                scopedToken: scopedToken.trim(),
+                value: value.trim(),
+            });
+            setVoteMessage(result.outcome === "replay_same_value"
+                ? "Vote already recorded."
+                : "Vote recorded.");
+            setValue("");
+        }
+        catch (caught) {
+            setError(errorMessage(caught, "Unable to record vote."));
+        }
+    }, [ballot.id, scopedToken, value, vote]);
+    return (_jsxs("div", { className: "rounded-md border border-border bg-card p-4", children: [_jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Vote, { className: "h-5 w-5 text-accent" }), _jsxs("div", { children: [_jsx("p", { className: "text-sm font-medium text-txt", children: ballot.purpose }), _jsxs("p", { className: "text-xs text-muted", children: [ballot.threshold, " of ", ballot.participants.length, " required", voteCount !== null ? ` · ${voteCount} votes` : "", expiresAt ? ` · expires ${expiresAt}` : ""] })] })] }), _jsx(StatusBadge, { status: ballot.status })] }), ballot.tallyResult ? (_jsxs("div", { className: "mt-3 rounded bg-surface p-3 text-xs text-muted-strong", children: [_jsx("p", { className: "font-medium text-txt", children: "Tally" }), _jsx("ul", { className: "mt-1 space-y-0.5", children: Object.entries(ballot.tallyResult.counts).map(([key, count]) => (_jsxs("li", { children: [key, ": ", count] }, key))) })] })) : null, error ? (_jsxs(Alert, { className: "mt-3", variant: "destructive", children: [_jsx(AlertTitle, { children: "Ballot issue" }), _jsx(AlertDescription, { children: error })] })) : null, voteMessage ? (_jsx("p", { className: "mt-3 text-xs text-success", children: voteMessage })) : null, isOpen ? (_jsxs("div", { className: "mt-4 space-y-3", children: [_jsxs("div", { className: "space-y-2", children: [_jsx("label", { htmlFor: `ballot-token-${ballot.id}`, className: "block text-xs font-medium text-muted", children: "Vote with a scoped token" }), _jsx(Input, { id: `ballot-token-${ballot.id}`, value: scopedToken, onChange: (event) => setScopedToken(event.target.value), placeholder: "sb_...", autoComplete: "off", spellCheck: false, disabled: busy, className: "font-mono text-xs" }), _jsx(Textarea, { value: value, onChange: (event) => setValue(event.target.value), rows: 2, placeholder: "Your vote", disabled: busy })] }), _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsxs(Button, { type: "button", onClick: () => void handleVote(), disabled: busy || !scopedToken.trim() || !value.trim(), children: [vote.isPending ? (_jsx(Loader2, { className: "h-4 w-4 animate-spin" })) : (_jsx(CheckCircle2, { className: "h-4 w-4" })), "Submit vote"] }), _jsxs(Button, { type: "button", variant: "outline", onClick: () => void handleTally(), disabled: busy, children: [tally.isPending ? (_jsx(Loader2, { className: "h-4 w-4 animate-spin" })) : null, "Tally"] }), _jsx(Button, { type: "button", variant: "ghost", onClick: () => void handleCancel(), disabled: busy, children: "Cancel ballot" })] })] })) : null] }));
+}
+export function BallotsTab() {
+    const query = useBallots();
+    if (query.isLoading) {
+        return (_jsx("div", { className: "flex items-center justify-center py-12", children: _jsx(Loader2, { className: "h-5 w-5 animate-spin text-muted" }) }));
+    }
+    if (query.isError) {
+        return (_jsxs(Alert, { variant: "destructive", children: [_jsx(AlertTitle, { children: "Could not load ballots" }), _jsx(AlertDescription, { children: errorMessage(query.error, "Try again in a moment.") })] }));
+    }
+    const open = (query.data ?? []).filter((ballot) => ballot.status === "open");
+    if (open.length === 0) {
+        return (_jsx("p", { className: "py-12 text-center text-sm text-muted", children: "No open ballots." }));
+    }
+    return (_jsx("div", { className: "space-y-3", children: open.map((ballot) => (_jsx(BallotCard, { ballot: ballot }, ballot.id))) }));
+}

package/cloud/approvals/components/sensitive-tab.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Sensitive tab: look up one sensitive request by id and cancel it.
+ *
+ * Unlike Approvals / Ballots, the backend exposes no owner *collection* endpoint
+ * for sensitive requests — only POST-create, per-id GET, and cancel. So this tab
+ * is a per-id lookup: the owner arrives with (or pastes) a request id and can
+ * cancel a still-pending request. The recipient actually *submits* the value on
+ * the public token page (or, for owner_app_inline secrets, on the inline chat
+ * block) — this pane does not collect secrets. Adding a list endpoint is backend
+ * work tracked as a follow-up.
+ */
+export declare function SensitiveTab(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=sensitive-tab.d.ts.map

package/cloud/approvals/components/sensitive-tab.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive-tab.d.ts","sourceRoot":"","sources":["../../../../../../../src/cloud/approvals/components/sensitive-tab.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAuBH,wBAAgB,YAAY,4CAsH3B"}

package/cloud/approvals/components/sensitive-tab.js

@@ -0,0 +1,50 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Sensitive tab: look up one sensitive request by id and cancel it.
+ *
+ * Unlike Approvals / Ballots, the backend exposes no owner *collection* endpoint
+ * for sensitive requests — only POST-create, per-id GET, and cancel. So this tab
+ * is a per-id lookup: the owner arrives with (or pastes) a request id and can
+ * cancel a still-pending request. The recipient actually *submits* the value on
+ * the public token page (or, for owner_app_inline secrets, on the inline chat
+ * block) — this pane does not collect secrets. Adding a list endpoint is backend
+ * work tracked as a follow-up.
+ */
+import { Loader2, LockKeyhole, Search } from "lucide-react";
+import { useCallback, useState } from "react";
+import { Alert, AlertDescription, AlertTitle, Button, Input, } from "../../../components/primitives/index.js";
+import { formatApprovalTimestamp, useCancelSensitiveRequest, useSensitiveRequest, } from "../lib/approvals.js";
+import { StatusBadge } from "./status-badge.js";
+function errorMessage(error, fallback) {
+    if (error instanceof Error && error.message)
+        return error.message;
+    return fallback;
+}
+export function SensitiveTab() {
+    const [pendingId, setPendingId] = useState("");
+    const [lookupId, setLookupId] = useState(null);
+    const query = useSensitiveRequest(lookupId);
+    const cancel = useCancelSensitiveRequest();
+    const [cancelError, setCancelError] = useState(null);
+    const handleLookup = useCallback((event) => {
+        event.preventDefault();
+        setCancelError(null);
+        setLookupId(pendingId.trim() || null);
+    }, [pendingId]);
+    const request = query.data ?? null;
+    const handleCancel = useCallback(async () => {
+        if (!request)
+            return;
+        setCancelError(null);
+        try {
+            await cancel.mutateAsync({ id: request.id });
+        }
+        catch (caught) {
+            setCancelError(errorMessage(caught, "Failed to cancel request."));
+        }
+    }, [cancel, request]);
+    const expiresAt = request?.expiresAt
+        ? formatApprovalTimestamp(request.expiresAt)
+        : null;
+    return (_jsxs("div", { className: "space-y-4", children: [_jsxs("form", { className: "flex gap-2", onSubmit: handleLookup, children: [_jsx(Input, { value: pendingId, onChange: (event) => setPendingId(event.target.value), placeholder: "Sensitive request id", autoComplete: "off", spellCheck: false, className: "font-mono text-xs" }), _jsxs(Button, { type: "submit", disabled: !pendingId.trim(), children: [_jsx(Search, { className: "h-4 w-4" }), "Look up"] })] }), lookupId && query.isLoading ? (_jsx("div", { className: "flex items-center justify-center py-8", children: _jsx(Loader2, { className: "h-5 w-5 animate-spin text-muted" }) })) : null, lookupId && query.isError ? (_jsxs(Alert, { variant: "destructive", children: [_jsx(AlertTitle, { children: "Request not found" }), _jsx(AlertDescription, { children: errorMessage(query.error, "No sensitive request with that id is visible to you.") })] })) : null, request ? (_jsxs("div", { className: "rounded-md border border-border bg-card p-4", children: [_jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(LockKeyhole, { className: "h-5 w-5 text-accent" }), _jsxs("div", { children: [_jsx("p", { className: "text-sm font-medium text-txt", children: request.target?.key ?? request.kind }), _jsxs("p", { className: "text-xs text-muted", children: [request.kind, expiresAt ? ` · expires ${expiresAt}` : ""] })] })] }), _jsx(StatusBadge, { status: request.status })] }), request.reason ? (_jsx("p", { className: "mt-3 text-sm text-muted-strong", children: request.reason })) : null, cancelError ? (_jsxs(Alert, { className: "mt-3", variant: "destructive", children: [_jsx(AlertTitle, { children: "Cancel failed" }), _jsx(AlertDescription, { children: cancelError })] })) : null, request.status === "pending" ? (_jsxs("div", { className: "mt-4", children: [_jsxs(Button, { type: "button", variant: "outline", onClick: () => void handleCancel(), disabled: cancel.isPending, children: [cancel.isPending ? (_jsx(Loader2, { className: "h-4 w-4 animate-spin" })) : null, "Cancel request"] }), _jsx("p", { className: "mt-2 text-xs text-muted", children: "The recipient submits the value on the secure link sent to them." })] })) : null] })) : null] }));
+}

package/cloud/approvals/components/status-badge.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Status pill for approvals / ballots / sensitive-requests.
+ *
+ * Maps each terminal/active status to a neutral, success, warning, or
+ * destructive tone — no blue (per the migration design rules). Pending/active
+ * states use the brand-accent (orange) outline; terminal-good uses success;
+ * terminal-bad uses the destructive token; neutral-terminal uses the muted
+ * outline.
+ */
+export declare function StatusBadge({ status }: {
+    status: string;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=status-badge.d.ts.map

package/cloud/approvals/components/status-badge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-badge.d.ts","sourceRoot":"","sources":["../../../../../../../src/cloud/approvals/components/status-badge.tsx"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA0CH,wBAAgB,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,2CAazD"}

package/cloud/approvals/components/status-badge.js

@@ -0,0 +1,49 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+/**
+ * Status pill for approvals / ballots / sensitive-requests.
+ *
+ * Maps each terminal/active status to a neutral, success, warning, or
+ * destructive tone — no blue (per the migration design rules). Pending/active
+ * states use the brand-accent (orange) outline; terminal-good uses success;
+ * terminal-bad uses the destructive token; neutral-terminal uses the muted
+ * outline.
+ */
+import { cn } from "../../../lib/utils.js";
+const TONE_CLASS = {
+    accent: "border-accent/40 text-accent bg-accent/10",
+    success: "border-success/40 text-success bg-success/10",
+    danger: "border-destructive/40 text-danger bg-destructive/10",
+    neutral: "border-border text-muted bg-bg-accent",
+};
+const STATUS_TONE = {
+    // approval-requests
+    pending: "accent",
+    delivered: "accent",
+    approved: "success",
+    denied: "danger",
+    expired: "neutral",
+    canceled: "neutral",
+    // ballots
+    open: "accent",
+    tallied: "success",
+    // sensitive-requests
+    fulfilled: "success",
+    failed: "danger",
+};
+const STATUS_LABEL = {
+    pending: "Pending",
+    delivered: "Awaiting signature",
+    approved: "Approved",
+    denied: "Denied",
+    expired: "Expired",
+    canceled: "Canceled",
+    open: "Open",
+    tallied: "Tallied",
+    fulfilled: "Fulfilled",
+    failed: "Failed",
+};
+export function StatusBadge({ status }) {
+    const tone = STATUS_TONE[status] ?? "neutral";
+    const label = STATUS_LABEL[status] ?? status;
+    return (_jsx("span", { className: cn("inline-flex items-center rounded-sm border px-2 py-0.5 text-xs font-medium", TONE_CLASS[tone]), children: label }));
+}

package/cloud/approvals/index.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Approvals cloud domain — barrel + route registration.
+ *
+ * The in-app, owner-facing counterpart to the public token pages
+ * (`/approve/:id`, `/ballot/:id`, `/sensitive-requests/:id`). A logged-in owner
+ * uses this pane to list and act on their agent's pending approval requests,
+ * ballots, and sensitive requests next to chat.
+ *
+ *  - {@link ApprovalsSurface} is the zero-prop component a settings section /
+ *    sidebar host can embed.
+ *  - {@link approvalsCloudRoute} is registered **at import time** at
+ *    `dashboard/approvals`. This path has no `CloudRouterShell` redirect to
+ *    shadow, so eager registration is safe and keeps the standalone deep link
+ *    live (same precedent as `dashboard/documents`).
+ *    {@link registerApprovalsCloudRoute} is also exported for re-registration at
+ *    a custom path if needed.
+ */
+import { type CloudRouteDef } from "../shell/cloud-route-registry";
+export { ApprovalsSurface, default as ApprovalsRoute } from "./ApprovalsRoute";
+export { type ApprovalRequest, type Ballot, type SensitiveRequest, useApprovalRequests, useApproveRequest, useBallots, useCancelBallot, useCancelSensitiveRequest, useDenyRequest, useSensitiveRequest, useTallyBallot, useVoteBallot, } from "./lib/approvals";
+/** Stable view/section id + URL path slug for the Approvals surface. */
+export declare const APPROVALS_SECTION_ID = "approvals";
+export declare const APPROVALS_ROUTE_PATH = "dashboard/approvals";
+/** Cloud-route definition for the standalone Approvals pane. */
+export declare const approvalsCloudRoute: CloudRouteDef;
+/**
+ * Register (or re-register) the standalone Approvals route. Exported for an
+ * explicit custom-path mount; the default registration below runs at import time
+ * since `dashboard/approvals` has no shell redirect to collide with.
+ */
+export declare function registerApprovalsCloudRoute(override?: Partial<CloudRouteDef>): void;
+//# sourceMappingURL=index.d.ts.map

package/cloud/approvals/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/cloud/approvals/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,gBAAgB,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,MAAM,EACX,KAAK,gBAAgB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,yBAAyB,EACzB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,wEAAwE;AACxE,eAAO,MAAM,oBAAoB,cAAc,CAAC;AAChD,eAAO,MAAM,oBAAoB,wBAAwB,CAAC;AAK1D,gEAAgE;AAChE,eAAO,MAAM,mBAAmB,EAAE,aAIjC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAChC,IAAI,CAEN"}

package/cloud/approvals/index.js

@@ -0,0 +1,41 @@
+/**
+ * Approvals cloud domain — barrel + route registration.
+ *
+ * The in-app, owner-facing counterpart to the public token pages
+ * (`/approve/:id`, `/ballot/:id`, `/sensitive-requests/:id`). A logged-in owner
+ * uses this pane to list and act on their agent's pending approval requests,
+ * ballots, and sensitive requests next to chat.
+ *
+ *  - {@link ApprovalsSurface} is the zero-prop component a settings section /
+ *    sidebar host can embed.
+ *  - {@link approvalsCloudRoute} is registered **at import time** at
+ *    `dashboard/approvals`. This path has no `CloudRouterShell` redirect to
+ *    shadow, so eager registration is safe and keeps the standalone deep link
+ *    live (same precedent as `dashboard/documents`).
+ *    {@link registerApprovalsCloudRoute} is also exported for re-registration at
+ *    a custom path if needed.
+ */
+import { lazy } from "react";
+import { registerCloudRoute, } from "../shell/cloud-route-registry.js";
+export { ApprovalsSurface, default as ApprovalsRoute } from "./ApprovalsRoute.js";
+export { useApprovalRequests, useApproveRequest, useBallots, useCancelBallot, useCancelSensitiveRequest, useDenyRequest, useSensitiveRequest, useTallyBallot, useVoteBallot, } from "./lib/approvals.js";
+/** Stable view/section id + URL path slug for the Approvals surface. */
+export const APPROVALS_SECTION_ID = "approvals";
+export const APPROVALS_ROUTE_PATH = "dashboard/approvals";
+/** Lazy route element for the standalone Approvals pane (code-split). */
+const ApprovalsRouteLazy = lazy(() => import("./ApprovalsRoute.js"));
+/** Cloud-route definition for the standalone Approvals pane. */
+export const approvalsCloudRoute = {
+    path: APPROVALS_ROUTE_PATH,
+    element: ApprovalsRouteLazy,
+    group: "dashboard",
+};
+/**
+ * Register (or re-register) the standalone Approvals route. Exported for an
+ * explicit custom-path mount; the default registration below runs at import time
+ * since `dashboard/approvals` has no shell redirect to collide with.
+ */
+export function registerApprovalsCloudRoute(override) {
+    registerCloudRoute({ ...approvalsCloudRoute, ...override });
+}
+registerApprovalsCloudRoute();