@fabricorg/platform-host 8.3.0 → 8.4.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @fabricorg/platform-host
 
+## 8.4.0
+
+### Minor Changes
+
+- f1b6def: Add the parked action invocation ID and durable invocation record to `authorizeApproval` input so applications can authorize decisions for the specific proposal being resumed.
+
 ## 8.3.0
 
 ### Minor Changes

package/README.md

@@ -738,6 +738,8 @@ An approval workflow calls `resumeApprovedInvocation()` instead of invoking the
 host authorizes the approver (using `authorizeApproval` when provided), then atomically persists the
 decision and changes `waiting_for_approval` to either leased `running` or terminal `failed`. This keeps
 the decision in the mutation ledger and prevents an approval/worker race.
+`authorizeApproval` receives the parked `actionInvocationId` and durable, post-redaction `invocation`
+record so the application can verify the approver's authority over that specific invocation.
 
 ```ts
 await host.resumeApprovedInvocation(actionInvocationId, tenantId, spaceId, {

package/dist/index.cjs

@@ -3441,7 +3441,9 @@ function createGovernedActionHost(options) {
 		const entitled = await options.authorization.checkEntitlement(approvalAuthorizationInput);
 		const authorized = options.authorization.authorizeApproval ? await options.authorization.authorizeApproval({
 			...approvalAuthorizationInput,
-			decision
+			actionInvocationId,
+			decision,
+			invocation: structuredClone(invocation)
 		}) : await options.authorization.authorize(approvalAuthorizationInput);
 		if (!entitled || !authorized) return {
 			...actionResult(invocation),