@forumone/throughline-approvals 0.0.1 → 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,12 @@
+# @forumone/throughline-approvals
+
+## 0.2.0
+
+### Minor Changes
+
+- 3ef6f6a: Initial release. Conversational approval workflow server with HMAC-signed single-use action tokens, per-group approver resolution, first-decision-wins semantics, version-bound approvals, seven-day default expiration, an HTML confirmation flow on the action endpoint, and five MCP tools (`request_approval`, `respond_to_approval`, `get_approval_status`, `list_pending_approvals`, `list_my_requests`). The plugin's `onInit` attaches the approval resolver to the Payload instance under `Symbol.for('@forumone/throughline/approvals-resolver')` so the publishing server can look it up automatically.
+
+### Patch Changes
+
+- Updated dependencies [3ef6f6a]
+  - @forumone/throughline-publishing@0.2.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Forum One Communications Corporation
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,45 +1,103 @@
 # @forumone/throughline-approvals
 
-## ⚠️ IMPORTANT NOTICE ⚠️
-
-**This package is created solely for the purpose of setting up OIDC (OpenID Connect) trusted publishing with npm.**
-
-This is **NOT** a functional package and contains **NO** code or functionality beyond the OIDC setup configuration.
-
-## Purpose
-
-This package exists to:
-1. Configure OIDC trusted publishing for the package name `@forumone/throughline-approvals`
-2. Enable secure, token-less publishing from CI/CD workflows
-3. Establish provenance for packages published under this name
-
-## What is OIDC Trusted Publishing?
-
-OIDC trusted publishing allows package maintainers to publish packages directly from their CI/CD workflows without needing to manage npm access tokens. Instead, it uses OpenID Connect to establish trust between the CI/CD provider (like GitHub Actions) and npm.
-
-## Setup Instructions
-
-To properly configure OIDC trusted publishing for this package:
-
-1. Go to [npmjs.com](https://www.npmjs.com/) and navigate to your package settings
-2. Configure the trusted publisher (e.g., GitHub Actions)
-3. Specify the repository and workflow that should be allowed to publish
-4. Use the configured workflow to publish your actual package
-
-## DO NOT USE THIS PACKAGE
-
-This package is a placeholder for OIDC configuration only. It:
-- Contains no executable code
-- Provides no functionality
-- Should not be installed as a dependency
-- Exists only for administrative purposes
-
-## More Information
-
-For more details about npm's trusted publishing feature, see:
-- [npm Trusted Publishing Documentation](https://docs.npmjs.com/generating-provenance-statements)
-- [GitHub Actions OIDC Documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect)
-
----
-
-**Maintained for OIDC setup purposes only**
+Conversational approval workflow server for Throughline. Provides the resolver the publishing server consumes plus MCP tools and email-action endpoints for requesting and responding to approvals.
+
+## What this package provides
+
+- **Approvals collection** with target / request / decision / workflow-state fields and indexes for the common queries.
+- **Approval resolver** that the publishing server's `approvalStep` calls to check for active granted approvals (auto-attached on the Payload instance via Symbol — no manual wiring needed).
+- **HMAC-signed action tokens** (`generateActionToken` / `verifyActionToken`) for inline-action emails. Single-use enforcement via the per-record `consumedTokens` array prevents replay.
+- **HTTP action endpoint** at `/api/approvals/action` that handles email button clicks: verify token → confirmation page → record decision.
+- **Five MCP tools** served at `/api/approvals/mcp`:
+
+| Tool | Audit |
+|---|---|
+| `request_approval` | `approval.requested` |
+| `respond_to_approval` | `approval.granted` / `.declined` / `.changes_requested` |
+| `get_approval_status` | none (read-only) |
+| `list_pending_approvals` | none (read-only) |
+| `list_my_requests` | none (read-only) |
+
+## Installation
+
+```bash
+pnpm add @forumone/throughline-approvals
+```
+
+Peers: `payload@^3.0.0`, `inngest@^4.0.0`. Required runtime peer: `@forumone/throughline-core` (audit log).
+
+## Usage
+
+```ts
+import { buildConfig } from 'payload'
+import { auditPlugin, createInngestClient } from '@forumone/throughline-core'
+import { approvalsPlugin } from '@forumone/throughline-approvals'
+import { publishingPlugin } from '@forumone/throughline-publishing'
+
+const inngest = createInngestClient({ id: 'my-site' })
+
+export default buildConfig({
+  // collections, db, secret...
+  plugins: [
+    auditPlugin({ inngest }),
+    approvalsPlugin({
+      inngest,
+      groups: [
+        { slug: 'editorial', name: 'Editorial review' },
+        { slug: 'legal', name: 'Legal review' },
+      ],
+      groupResolver: {
+        async resolveUsers(slugs) {
+          // Return users belonging to any of the listed groups.
+          return payload.find({
+            collection: 'users',
+            where: { groups: { in: slugs } },
+          })
+        },
+      },
+      tokenSecret: process.env.APPROVAL_TOKEN_SECRET,
+    }),
+    publishingPlugin({
+      inngest,
+      collections: [{ slug: 'pages' }],
+      // No `approvalResolver` is needed — approvalsPlugin attaches it
+      // automatically via Symbol. Pass one explicitly only if you need
+      // to override.
+    }),
+  ],
+})
+```
+
+## Wiring with the publishing server
+
+The publishing server's `approvalStep` does not require an `approvalResolver` in its options. When approvalsPlugin is registered, it attaches the resolver to the Payload instance under `Symbol.for('@forumone/throughline/approvals-resolver')`, and publishing's approval step looks it up at publish time.
+
+If you need a custom resolver (e.g. you store approvals in an external system), pass `approvalResolver` directly to `publishingPlugin` — it takes precedence over the symbol lookup.
+
+## Phase 1 semantics
+
+- **First-decision-wins.** Multi-party approvals (e.g. legal AND communications must both approve) are deferred to Phase 2. The Phase 1 model handles "any one approver from the configured groups," which covers the most common case.
+- **Approvals are tied to versions.** An approval granted against one draft does not apply to a subsequent edit. The resolver checks `targetVersion` against the document version under consideration.
+- **Action tokens are single-use, 14-day validity.** Once an approver clicks an action link, the token is appended to the request's `consumedTokens` array; reusing it returns an error.
+- **Self-approval is blocked.** The respond_to_approval tool refuses if the caller is the requester.
+- **Group resolution is configurable.** Clients define what "editorial" or "legal" means via the `groupResolver.resolveUsers` callback. Core does not hardcode group membership logic.
+
+## Action endpoint
+
+The plugin registers a GET endpoint at `${routePrefix}/action` (default `/api/approvals/action`) that accepts a `?token=` query param. Flow:
+
+1. Verify the HMAC signature and check the token hasn't expired.
+2. Load the approval; bail if it's already decided or the token has been consumed.
+3. First hit: render a confirmation page. Second hit (with `?confirm=true`): record the decision, append the token to `consumedTokens`, fire `approval/decided`, write the audit record.
+
+The confirmation page is intentionally minimal. Clients that want a branded action page can register their own endpoint that calls `verifyActionToken` and `previewVerification` directly — both are exported from the package entry point.
+
+## The `_meta` payload
+
+`request_approval` and `respond_to_approval` accept the framework's `_meta` payload (via `withMeta` from `@forumone/throughline-core`). Audit records carry the prompt and reasoning fields for later "why was this approved?" queries.
+
+## Related packages
+
+- `@forumone/throughline-core` — required peer; provides the audit log and MCP handler this plugin builds on
+- `@forumone/throughline-publishing` — peer plugin that consumes the resolver this plugin attaches
+- `@forumone/throughline-email` (C11) — will subscribe to `approval/requested` and `approval/decided` to send notifications

package/dist/collection.d.ts

@@ -0,0 +1,18 @@
+import type { CollectionConfig } from 'payload';
+export interface CreateApprovalsCollectionOptions {
+    /** Override the collection slug. Default: 'approvals'. */
+    slug?: string;
+    /** Slug of the users collection that approver/requester relationships point at. Default: 'users'. */
+    usersSlug?: string;
+    /** Allowed group slugs from the plugin's `groups` option. Used as the select options on the approverGroups field. */
+    groupSlugs: string[];
+}
+export declare const DEFAULT_APPROVALS_SLUG = "approvals";
+/**
+ * Builds the approvals collection config. The collection is read-mostly:
+ * `create` is system-only (the plugin's tools mint records via the local
+ * API), `update` is admin-only (so a stuck pending record can be corrected),
+ * `delete` is denied (audit trail must remain).
+ */
+export declare function createApprovalsCollection(options: CreateApprovalsCollectionOptions): CollectionConfig;
+//# sourceMappingURL=collection.d.ts.map

package/dist/collection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.d.ts","sourceRoot":"","sources":["../src/collection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAE/C,MAAM,WAAW,gCAAgC;IAC/C,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,qGAAqG;IACrG,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,qHAAqH;IACrH,UAAU,EAAE,MAAM,EAAE,CAAA;CACrB;AAED,eAAO,MAAM,sBAAsB,cAAc,CAAA;AAEjD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gCAAgC,GACxC,gBAAgB,CA4FlB"}

package/dist/collection.js

@@ -0,0 +1,95 @@
+export const DEFAULT_APPROVALS_SLUG = 'approvals';
+/**
+ * Builds the approvals collection config. The collection is read-mostly:
+ * `create` is system-only (the plugin's tools mint records via the local
+ * API), `update` is admin-only (so a stuck pending record can be corrected),
+ * `delete` is denied (audit trail must remain).
+ */
+export function createApprovalsCollection(options) {
+    const slug = options.slug ?? DEFAULT_APPROVALS_SLUG;
+    const usersSlug = options.usersSlug ?? 'users';
+    return {
+        slug,
+        admin: {
+            useAsTitle: 'targetTitle',
+            defaultColumns: ['targetTitle', 'status', 'requestedBy', 'requestedAt', 'expiresAt'],
+            description: 'Approval workflow state. Read-mostly through the admin; writes happen via the Approvals Server tools and the action endpoint.',
+        },
+        access: {
+            read: ({ req }) => {
+                const roles = req.user?.['roles'] ?? [];
+                return roles.includes('admin') || roles.includes('editor') || roles.includes('approver');
+            },
+            create: () => false,
+            update: ({ req }) => (req.user?.['roles'] ?? []).includes('admin'),
+            delete: () => false,
+        },
+        fields: [
+            // Target
+            { name: 'targetCollection', type: 'text', required: true },
+            { name: 'targetId', type: 'text', required: true },
+            { name: 'targetTitle', type: 'text', required: true },
+            {
+                name: 'targetVersion',
+                type: 'text',
+                required: true,
+                admin: { description: 'Document version at request time. Approvals are tied to this version.' },
+            },
+            { name: 'previewUrl', type: 'text' },
+            // Request
+            { name: 'requestedBy', type: 'relationship', relationTo: usersSlug, required: true },
+            {
+                name: 'requestedAt',
+                type: 'date',
+                required: true,
+                defaultValue: () => new Date().toISOString(),
+            },
+            { name: 'requestReason', type: 'textarea' },
+            { name: 'changesSummary', type: 'textarea', required: true },
+            {
+                name: 'approverGroups',
+                type: 'select',
+                hasMany: true,
+                required: true,
+                options: options.groupSlugs.map((s) => ({ label: s, value: s })),
+            },
+            // Decision
+            {
+                name: 'status',
+                type: 'select',
+                required: true,
+                defaultValue: 'pending',
+                options: [
+                    { label: 'Pending', value: 'pending' },
+                    { label: 'Granted', value: 'granted' },
+                    { label: 'Declined', value: 'declined' },
+                    { label: 'Changes requested', value: 'changes-requested' },
+                    { label: 'Expired', value: 'expired' },
+                ],
+            },
+            { name: 'decidedBy', type: 'relationship', relationTo: usersSlug },
+            { name: 'decidedAt', type: 'date' },
+            { name: 'decisionNotes', type: 'textarea' },
+            // Workflow state
+            {
+                name: 'notifiedApprovers',
+                type: 'json',
+                defaultValue: [],
+                admin: { description: 'IDs of users notified for this request.' },
+            },
+            { name: 'expiresAt', type: 'date', required: true },
+            {
+                name: 'consumedTokens',
+                type: 'json',
+                defaultValue: [],
+                admin: { description: 'Action tokens already consumed; prevents replay.' },
+            },
+        ],
+        indexes: [
+            { fields: ['targetCollection', 'targetId', 'status'] },
+            { fields: ['status', 'expiresAt'] },
+            { fields: ['requestedBy', 'requestedAt'] },
+        ],
+    };
+}
+//# sourceMappingURL=collection.js.map

package/dist/collection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.js","sourceRoot":"","sources":["../src/collection.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAAA;AAEjD;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAyC;IAEzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,sBAAsB,CAAA;IACnD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAA;IAE9C,OAAO;QACL,IAAI;QACJ,KAAK,EAAE;YACL,UAAU,EAAE,aAAa;YACzB,cAAc,EAAE,CAAC,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,CAAC;YACpF,WAAW,EACT,+HAA+H;SAClI;QACD,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;gBAChB,MAAM,KAAK,GAAI,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAA0B,IAAI,EAAE,CAAA;gBACjE,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;YAC1F,CAAC;YACD,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;YACnB,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAClB,CAAE,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAA0B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzE,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;SACpB;QACD,MAAM,EAAE;YACN,SAAS;YACT,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1D,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;YAClD,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;YACrD;gBACE,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,EAAE,WAAW,EAAE,uEAAuE,EAAE;aAChG;YACD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE;YAEpC,UAAU;YACV,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;YACpF;gBACE,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7C;YACD,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE;YAC3C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC5D;gBACE,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;aACjE;YAED,WAAW;YACX;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,SAAS;gBACvB,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;oBACtC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;oBACtC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE;oBACxC,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,EAAE;oBAC1D,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;iBACvC;aACF;YACD,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE;YAClE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE;YACnC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE;YAE3C,iBAAiB;YACjB;gBACE,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,MAAM;gBACZ,YAAY,EAAE,EAAE;gBAChB,KAAK,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE;aAClE;YACD,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;YACnD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,MAAM;gBACZ,YAAY,EAAE,EAAE;gBAChB,KAAK,EAAE,EAAE,WAAW,EAAE,kDAAkD,EAAE;aAC3E;SACF;QACD,OAAO,EAAE;YACP,EAAE,MAAM,EAAE,CAAC,kBAAkB,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE;YACtD,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE;YACnC,EAAE,MAAM,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC,EAAE;SAC3C;KACF,CAAA;AACH,CAAC"}

package/dist/endpoints/action.d.ts

@@ -0,0 +1,31 @@
+import type { Endpoint, Payload } from 'payload';
+import type { AuditWriter } from '@forumone/throughline-core';
+import type { ApprovalsPluginOptions } from '../options.js';
+import { type VerifyResult } from '../tokens.js';
+export interface CreateActionEndpointDeps {
+    options: ApprovalsPluginOptions & {
+        tokenSecret: string;
+    };
+    auditWriter: AuditWriter;
+}
+/**
+ * Builds the GET endpoint that handles inline action links from emails.
+ * The flow is:
+ *   - First request: render a confirmation page so a single misclicked
+ *     link can't act on the approval.
+ *   - Second request (with `confirm=true`): verify the token wasn't
+ *     already consumed and apply the decision.
+ *
+ * Uses HTML responses (intentionally minimal styling — clients can drop
+ * a custom-branded endpoint in front if they want).
+ */
+export declare function createActionEndpoint(deps: CreateActionEndpointDeps): Endpoint;
+/** Lower-level helper exported for test consumers and custom action endpoints. */
+export type ActionVerification = VerifyResult;
+export declare function previewVerification(token: string, payload: Payload, options: ApprovalsPluginOptions & {
+    tokenSecret: string;
+}): Promise<{
+    verification: VerifyResult;
+    approval: Record<string, unknown> | null;
+}>;
+//# sourceMappingURL=action.d.ts.map

package/dist/endpoints/action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../src/endpoints/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAC7D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAE3D,OAAO,EAEL,KAAK,YAAY,EAElB,MAAM,cAAc,CAAA;AAErB,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,sBAAsB,GAAG;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;IACzD,WAAW,EAAE,WAAW,CAAA;CACzB;AAqBD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,wBAAwB,GAAG,QAAQ,CA+H7E;AAED,kFAAkF;AAClF,MAAM,MAAM,kBAAkB,GAAG,YAAY,CAAA;AAE7C,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,sBAAsB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC;IAAE,YAAY,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAAE,CAAC,CAQnF"}

package/dist/endpoints/action.js

@@ -0,0 +1,205 @@
+import { DEFAULT_APPROVALS_SLUG } from '../collection.js';
+import { verifyActionToken, } from '../tokens.js';
+const DECISION_STATUS_MAP = {
+    approve: 'granted',
+    decline: 'declined',
+    changes: 'changes-requested',
+};
+const DECISION_AUDIT_MAP = {
+    approve: 'approval.granted',
+    decline: 'approval.declined',
+    changes: 'approval.changes_requested',
+};
+const ACTION_LABEL = {
+    approve: 'Approve',
+    decline: 'Decline',
+    changes: 'Request changes',
+    discuss: 'Start discussion',
+};
+/**
+ * Builds the GET endpoint that handles inline action links from emails.
+ * The flow is:
+ *   - First request: render a confirmation page so a single misclicked
+ *     link can't act on the approval.
+ *   - Second request (with `confirm=true`): verify the token wasn't
+ *     already consumed and apply the decision.
+ *
+ * Uses HTML responses (intentionally minimal styling — clients can drop
+ * a custom-branded endpoint in front if they want).
+ */
+export function createActionEndpoint(deps) {
+    return {
+        path: '/approvals/action',
+        method: 'get',
+        handler: async (req) => {
+            const url = new URL(req.url ?? 'http://localhost');
+            const token = url.searchParams.get('token');
+            if (!token)
+                return htmlResponse(renderError('Missing action token'), 400);
+            const verification = await verifyActionToken(token, deps.options.tokenSecret);
+            if (!verification.ok) {
+                return htmlResponse(renderError(verification.error), 401);
+            }
+            const collectionSlug = deps.options.collectionSlug ?? DEFAULT_APPROVALS_SLUG;
+            const approval = (await req.payload.findByID({
+                collection: collectionSlug,
+                id: verification.token.approvalId,
+            }));
+            if (!approval)
+                return htmlResponse(renderError('Approval not found'), 404);
+            const status = String(approval['status']);
+            if (status !== 'pending') {
+                return htmlResponse(renderInfo(`This request was already ${status}.`));
+            }
+            const consumed = approval['consumedTokens'] ?? [];
+            if (consumed.includes(token)) {
+                return htmlResponse(renderError('This action link has already been used'), 400);
+            }
+            const expiresAtRaw = approval['expiresAt'];
+            if (typeof expiresAtRaw === 'string' &&
+                Date.parse(expiresAtRaw) < Date.now()) {
+                return htmlResponse(renderInfo('This approval request has expired.'));
+            }
+            const action = verification.token.action;
+            const confirm = url.searchParams.get('confirm') === 'true';
+            if (!confirm) {
+                return htmlResponse(renderConfirmation({
+                    token,
+                    action,
+                    targetTitle: stringOrFallback(approval['targetTitle'], 'this document'),
+                    changesSummary: stringOrFallback(approval['changesSummary'], ''),
+                }));
+            }
+            if (action === 'discuss') {
+                // Discuss isn't a decision — surface a message and don't mutate state.
+                // C11 listens for the 'approval/discussed' event to thread it into
+                // the email reply UX once that lands.
+                await deps.options.inngest.send({
+                    name: 'approval/discussed',
+                    data: {
+                        approvalId: verification.token.approvalId,
+                        approverId: verification.token.approverId,
+                    },
+                });
+                await deps.auditWriter({
+                    actor: { type: 'user', userId: verification.token.approverId, apiKeyName: 'action-token' },
+                    action: 'approval.discussed',
+                    mcpServer: 'approvals',
+                    mcpTool: 'action-endpoint',
+                    targetCollection: String(approval['targetCollection']),
+                    targetId: String(approval['targetId']),
+                    approvalRequestId: verification.token.approvalId,
+                    success: true,
+                });
+                return htmlResponse(renderInfo('Thanks — a discussion thread will follow up by email.'));
+            }
+            const newStatus = DECISION_STATUS_MAP[action];
+            const decidedAt = new Date().toISOString();
+            await req.payload.update({
+                collection: collectionSlug,
+                id: verification.token.approvalId,
+                data: {
+                    status: newStatus,
+                    decidedBy: verification.token.approverId,
+                    decidedAt,
+                    consumedTokens: [...consumed, token],
+                },
+            });
+            await deps.options.inngest.send({
+                name: 'approval/decided',
+                data: {
+                    approvalId: verification.token.approvalId,
+                    decision: newStatus,
+                    decidedBy: verification.token.approverId,
+                    decidedAt,
+                    targetCollection: String(approval['targetCollection']),
+                    targetId: String(approval['targetId']),
+                },
+            });
+            await deps.auditWriter({
+                actor: {
+                    type: 'user',
+                    userId: verification.token.approverId,
+                    apiKeyName: 'action-token',
+                },
+                action: DECISION_AUDIT_MAP[action],
+                mcpServer: 'approvals',
+                mcpTool: 'action-endpoint',
+                targetCollection: String(approval['targetCollection']),
+                targetId: String(approval['targetId']),
+                targetTitle: stringOrFallback(approval['targetTitle'], String(approval['targetId'])),
+                approvalRequestId: verification.token.approvalId,
+                success: true,
+            });
+            return htmlResponse(renderSuccess(ACTION_LABEL[action], stringOrFallback(approval['targetTitle'], 'this document')));
+        },
+    };
+}
+export async function previewVerification(token, payload, options) {
+    const verification = await verifyActionToken(token, options.tokenSecret);
+    if (!verification.ok)
+        return { verification, approval: null };
+    const approval = (await payload.findByID({
+        collection: options.collectionSlug ?? DEFAULT_APPROVALS_SLUG,
+        id: verification.token.approvalId,
+    }));
+    return { verification, approval };
+}
+function htmlResponse(html, status = 200) {
+    return new Response(html, {
+        status,
+        headers: { 'content-type': 'text/html; charset=utf-8' },
+    });
+}
+function renderConfirmation(args) {
+    const label = ACTION_LABEL[args.action];
+    const summary = args.changesSummary
+        ? `<p><strong>What's changing:</strong> ${escape(args.changesSummary)}</p>`
+        : '';
+    return htmlPage(`
+    <h1>${escape(label)}</h1>
+    <p>You're about to <strong>${escape(label.toLowerCase())}</strong> the request for <em>${escape(args.targetTitle)}</em>.</p>
+    ${summary}
+    <form method="GET">
+      <input type="hidden" name="token" value="${escape(args.token)}" />
+      <input type="hidden" name="confirm" value="true" />
+      <button type="submit">Confirm: ${escape(label)}</button>
+    </form>
+  `);
+}
+function renderSuccess(label, title) {
+    return htmlPage(`<h1>${escape(label)}</h1><p>Your decision on <em>${escape(title)}</em> has been recorded.</p>`);
+}
+function renderError(message) {
+    return htmlPage(`<h1>Action could not be completed</h1><p>${escape(message)}</p>`);
+}
+function renderInfo(message) {
+    return htmlPage(`<h1>Notice</h1><p>${escape(message)}</p>`);
+}
+function htmlPage(body) {
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <title>Approval action</title>
+  <style>
+    body { font-family: system-ui, -apple-system, BlinkMacSystemFont, sans-serif; max-width: 600px; margin: 3rem auto; padding: 0 1rem; color: #18181b; line-height: 1.6; }
+    h1 { font-size: 1.5rem; }
+    button { background: #18181b; color: white; padding: 0.75rem 1.5rem; border: none; border-radius: 0.25rem; font-size: 1rem; cursor: pointer; }
+    em { font-style: italic; }
+  </style>
+</head>
+<body>${body}</body>
+</html>`;
+}
+function escape(text) {
+    return String(text ?? '')
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;');
+}
+function stringOrFallback(value, fallback) {
+    return typeof value === 'string' ? value : fallback;
+}
+//# sourceMappingURL=action.js.map

package/dist/endpoints/action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../../src/endpoints/action.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,EAGL,iBAAiB,GAClB,MAAM,cAAc,CAAA;AAOrB,MAAM,mBAAmB,GAA0D;IACjF,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,UAAU;IACnB,OAAO,EAAE,mBAAmB;CAC7B,CAAA;AAED,MAAM,kBAAkB,GAAG;IACzB,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,mBAAmB;IAC5B,OAAO,EAAE,4BAA4B;CAC7B,CAAA;AAEV,MAAM,YAAY,GAAsC;IACtD,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,kBAAkB;CAC5B,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA8B;IACjE,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAA;YAClD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC3C,IAAI,CAAC,KAAK;gBAAE,OAAO,YAAY,CAAC,WAAW,CAAC,sBAAsB,CAAC,EAAE,GAAG,CAAC,CAAA;YAEzE,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;YAC7E,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,YAAY,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAA;YAC3D,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,sBAAsB,CAAA;YAC5E,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC3C,UAAU,EAAE,cAAc;gBAC1B,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;aAClC,CAAC,CAAmC,CAAA;YAErC,IAAI,CAAC,QAAQ;gBAAE,OAAO,YAAY,CAAC,WAAW,CAAC,oBAAoB,CAAC,EAAE,GAAG,CAAC,CAAA;YAE1E,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;YACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,YAAY,CAAC,UAAU,CAAC,4BAA4B,MAAM,GAAG,CAAC,CAAC,CAAA;YACxE,CAAC;YAED,MAAM,QAAQ,GAAI,QAAQ,CAAC,gBAAgB,CAA0B,IAAI,EAAE,CAAA;YAC3E,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,YAAY,CAAC,WAAW,CAAC,wCAAwC,CAAC,EAAE,GAAG,CAAC,CAAA;YACjF,CAAC;YAED,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAA;YAC1C,IACE,OAAO,YAAY,KAAK,QAAQ;gBAChC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EACrC,CAAC;gBACD,OAAO,YAAY,CAAC,UAAU,CAAC,oCAAoC,CAAC,CAAC,CAAA;YACvE,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAA;YACxC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,MAAM,CAAA;YAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,YAAY,CACjB,kBAAkB,CAAC;oBACjB,KAAK;oBACL,MAAM;oBACN,WAAW,EAAE,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC;oBACvE,cAAc,EAAE,gBAAgB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;iBACjE,CAAC,CACH,CAAA;YACH,CAAC;YAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,uEAAuE;gBACvE,mEAAmE;gBACnE,sCAAsC;gBACtC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC9B,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE;wBACJ,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;wBACzC,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;qBAC1C;iBACF,CAAC,CAAA;gBACF,MAAM,IAAI,CAAC,WAAW,CAAC;oBACrB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE;oBAC1F,MAAM,EAAE,oBAAoB;oBAC5B,SAAS,EAAE,WAAW;oBACtB,OAAO,EAAE,iBAAiB;oBAC1B,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;oBACtD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;oBACtC,iBAAiB,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;oBAChD,OAAO,EAAE,IAAI;iBACd,CAAC,CAAA;gBACF,OAAO,YAAY,CAAC,UAAU,CAAC,uDAAuD,CAAC,CAAC,CAAA;YAC1F,CAAC;YAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;YAC7C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAE1C,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;gBACvB,UAAU,EAAE,cAAc;gBAC1B,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;gBACjC,IAAI,EAAE;oBACJ,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;oBACxC,SAAS;oBACT,cAAc,EAAE,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC;iBACrC;aACF,CAAC,CAAA;YAEF,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC9B,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE;oBACJ,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;oBACzC,QAAQ,EAAE,SAAS;oBACnB,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;oBACxC,SAAS;oBACT,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;oBACtD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;iBACvC;aACF,CAAC,CAAA;YAEF,MAAM,IAAI,CAAC,WAAW,CAAC;gBACrB,KAAK,EAAE;oBACL,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;oBACrC,UAAU,EAAE,cAAc;iBAC3B;gBACD,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC;gBAClC,SAAS,EAAE,WAAW;gBACtB,OAAO,EAAE,iBAAiB;gBAC1B,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;gBACtD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACtC,WAAW,EAAE,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;gBACpF,iBAAiB,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;gBAChD,OAAO,EAAE,IAAI;aACd,CAAC,CAAA;YAEF,OAAO,YAAY,CACjB,aAAa,CACX,YAAY,CAAC,MAAM,CAAC,EACpB,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC,CAC3D,CACF,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa,EACb,OAAgB,EAChB,OAAyD;IAEzD,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IACxE,IAAI,CAAC,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IAC7D,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC;QACvC,UAAU,EAAE,OAAO,CAAC,cAAc,IAAI,sBAAsB;QAC5D,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;KAClC,CAAC,CAAmC,CAAA;IACrC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAA;AACnC,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAM,GAAG,GAAG;IAC9C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;KACxD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAK3B;IACC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc;QACjC,CAAC,CAAC,wCAAwC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM;QAC3E,CAAC,CAAC,EAAE,CAAA;IACN,OAAO,QAAQ,CAAC;UACR,MAAM,CAAC,KAAK,CAAC;iCACU,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;MAC/G,OAAO;;iDAEoC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;;uCAE5B,MAAM,CAAC,KAAK,CAAC;;GAEjD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAa;IACjD,OAAO,QAAQ,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,gCAAgC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAA;AAClH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,QAAQ,CAAC,4CAA4C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;AACpF,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,QAAQ,CAAC,qBAAqB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;AAC7D,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO;;;;;;;;;;;;QAYD,IAAI;QACJ,CAAA;AACR,CAAC;AAED,SAAS,MAAM,CAAC,IAAa;IAC3B,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,QAAgB;IACxD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAA;AACrD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export { approvalsPlugin } from './plugin.js';
+export type { ApprovalsPluginOptions, ApproverGroup, GroupResolver, ResolvedApprover, } from './options.js';
+export { DEFAULT_APPROVALS_SLUG, createApprovalsCollection, } from './collection.js';
+export type { CreateApprovalsCollectionOptions } from './collection.js';
+export { APPROVALS_RESOLVER_SYMBOL, attachApprovalResolver, createApprovalResolver, } from './resolver.js';
+export type { CreateApprovalResolverOptions } from './resolver.js';
+export { createActionEndpoint } from './endpoints/action.js';
+export type { CreateActionEndpointDeps } from './endpoints/action.js';
+export { generateActionToken, verifyActionToken, buildActionUrl, } from './tokens.js';
+export type { ActionToken, ActionTokenAction, VerifyOptions, VerifyResult, } from './tokens.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,YAAY,EACV,sBAAsB,EACtB,aAAa,EACb,aAAa,EACb,gBAAgB,GACjB,MAAM,cAAc,CAAA;AAErB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,gCAAgC,EAAE,MAAM,iBAAiB,CAAA;AAEvE,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAA;AAElE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAC5D,YAAY,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAErE,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,GACf,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,YAAY,GACb,MAAM,aAAa,CAAA"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { approvalsPlugin } from './plugin.js';
+export { DEFAULT_APPROVALS_SLUG, createApprovalsCollection, } from './collection.js';
+export { APPROVALS_RESOLVER_SYMBOL, attachApprovalResolver, createApprovalResolver, } from './resolver.js';
+export { createActionEndpoint } from './endpoints/action.js';
+export { generateActionToken, verifyActionToken, buildActionUrl, } from './tokens.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAS7C,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAG5D,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,GACf,MAAM,aAAa,CAAA"}

package/dist/options.d.ts

@@ -0,0 +1,50 @@
+import type { Inngest } from 'inngest';
+import type { BaseCorePluginOptions } from '@forumone/throughline-plugin-contract';
+export interface ApproverGroup {
+    /** Group slug, referenced by the policy.approverGroups field on requests. */
+    slug: string;
+    /** Human-readable group name shown in admin UI. */
+    name: string;
+    /** Optional description shown in admin. */
+    description?: string;
+}
+export interface ResolvedApprover {
+    id: string;
+    email: string;
+    name?: string;
+}
+export interface GroupResolver {
+    /**
+     * Given a list of group slugs, returns the users in those groups. Used
+     * when an approval is requested to materialize the actual approver list
+     * and again if the action endpoint needs to confirm a token-bearing user
+     * belongs to one of the request's groups.
+     */
+    resolveUsers: (groupSlugs: string[]) => Promise<ResolvedApprover[]>;
+}
+export interface ApprovalsPluginOptions extends BaseCorePluginOptions {
+    /** Approver groups available in this deployment. */
+    groups: ApproverGroup[];
+    /** Resolver mapping group slugs to users. Required. */
+    groupResolver: GroupResolver;
+    /** Inngest client for firing approval/* events. Required. */
+    inngest: Inngest;
+    /** HMAC signing secret for action tokens. Falls back to APPROVAL_TOKEN_SECRET env var. */
+    tokenSecret?: string;
+    /** Days before a pending approval expires. Default: 7. */
+    expirationDays?: number;
+    /** Override the approvals collection slug. Default: 'approvals'. */
+    collectionSlug?: string;
+    /** Override the users collection slug used for approver/requester relationships. Default: 'users'. */
+    usersSlug?: string;
+    /** Public base URL used to build inline action links. Defaults to NEXT_PUBLIC_SERVER_URL. */
+    publicUrl?: string;
+}
+/**
+ * Validates options at load time and resolves the token secret. Throws with
+ * a targeted error on each obvious misconfiguration.
+ */
+export declare function validateOptions(options: ApprovalsPluginOptions): ApprovalsPluginOptions & {
+    tokenSecret: string;
+};
+//# sourceMappingURL=options.d.ts.map