@fabricorg/platform-host 8.3.0 → 8.4.0

package/dist/index.d.cts

@@ -1174,6 +1174,14 @@ export interface ActionExecutionAuthorizationInput extends ActionAuthorizationIn
   invocation: Readonly<ActionInvocationRecord>;
   executionReason: ActionExecutionReason;
 }
+/** Trusted authorization input for deciding a parked approval. */
+export interface ActionApprovalAuthorizationInput extends ActionAuthorizationInput {
+  decision: ActionApprovalDecision;
+  /** The parked invocation being decided. */
+  actionInvocationId: string;
+  /** The durable (post-redaction) invocation record as read before the decision transition. */
+  invocation: Readonly<ActionInvocationRecord>;
+}
 /**
  * Input to `resolvePolicies`. Carries the invocation identity and the
  * schema-parsed durable (post-redaction) parameters so a resolver can choose
@@ -1193,9 +1201,7 @@ export interface PlatformHostAuthorization {
    */
   authorizeExecution?(input: ActionExecutionAuthorizationInput): Promise<boolean>;
   /** Optional distinct authorization boundary for human/system approval decisions. */
-  authorizeApproval?(input: ActionAuthorizationInput & {
-    decision: ActionApprovalDecision;
-  }): Promise<boolean>;
+  authorizeApproval?(input: ActionApprovalAuthorizationInput): Promise<boolean>;
   /**
    * Authorization for `requeueOutboxDeadLetter`. There is no action to fall
    * back to, so when this is absent every requeue is refused as

package/dist/index.d.ts

@@ -1174,6 +1174,14 @@ export interface ActionExecutionAuthorizationInput extends ActionAuthorizationIn
   invocation: Readonly<ActionInvocationRecord>;
   executionReason: ActionExecutionReason;
 }
+/** Trusted authorization input for deciding a parked approval. */
+export interface ActionApprovalAuthorizationInput extends ActionAuthorizationInput {
+  decision: ActionApprovalDecision;
+  /** The parked invocation being decided. */
+  actionInvocationId: string;
+  /** The durable (post-redaction) invocation record as read before the decision transition. */
+  invocation: Readonly<ActionInvocationRecord>;
+}
 /**
  * Input to `resolvePolicies`. Carries the invocation identity and the
  * schema-parsed durable (post-redaction) parameters so a resolver can choose
@@ -1193,9 +1201,7 @@ export interface PlatformHostAuthorization {
    */
   authorizeExecution?(input: ActionExecutionAuthorizationInput): Promise<boolean>;
   /** Optional distinct authorization boundary for human/system approval decisions. */
-  authorizeApproval?(input: ActionAuthorizationInput & {
-    decision: ActionApprovalDecision;
-  }): Promise<boolean>;
+  authorizeApproval?(input: ActionApprovalAuthorizationInput): Promise<boolean>;
   /**
    * Authorization for `requeueOutboxDeadLetter`. There is no action to fall
    * back to, so when this is absent every requeue is refused as

package/dist/index.js

@@ -3440,7 +3440,9 @@ function createGovernedActionHost(options) {
 		const entitled = await options.authorization.checkEntitlement(approvalAuthorizationInput);
 		const authorized = options.authorization.authorizeApproval ? await options.authorization.authorizeApproval({
 			...approvalAuthorizationInput,
-			decision
+			actionInvocationId,
+			decision,
+			invocation: structuredClone(invocation)
 		}) : await options.authorization.authorize(approvalAuthorizationInput);
 		if (!entitled || !authorized) return {
 			...actionResult(invocation),