@forumone/throughline-approvals 0.0.1 → 0.2.0

package/dist/tools/list-pending-approvals.js

@@ -0,0 +1,62 @@
+import { z } from 'zod';
+import { withMeta } from '@forumone/throughline-core';
+import { DEFAULT_APPROVALS_SLUG } from '../collection.js';
+export function createListPendingApprovalsTool(deps) {
+    const inputSchema = withMeta({
+        limit: z
+            .number()
+            .int()
+            .positive()
+            .max(100)
+            .optional()
+            .describe('Max results. Default: 25'),
+    });
+    return {
+        name: 'list_pending_approvals',
+        description: "Returns pending approval requests routed to one of the caller's approver groups. Use to answer 'what do I need to review?'. Read-only.",
+        inputSchema,
+        handler: async (input, ctx) => {
+            if (!ctx.user)
+                return { error: 'Must be authenticated to list pending approvals' };
+            const userGroups = ctx.user.groups;
+            if (userGroups.length === 0)
+                return { pending: [] };
+            const result = await deps.payload.find({
+                collection: deps.options.collectionSlug ?? DEFAULT_APPROVALS_SLUG,
+                where: {
+                    and: [
+                        { status: { equals: 'pending' } },
+                        { approverGroups: { in: userGroups } },
+                    ],
+                },
+                limit: input.limit ?? 25,
+                sort: '-requestedAt',
+            });
+            const docs = result.docs;
+            return {
+                pending: docs.map((doc) => ({
+                    approvalId: String(doc['id']),
+                    targetCollection: doc['targetCollection'],
+                    targetId: doc['targetId'],
+                    targetTitle: doc['targetTitle'],
+                    changesSummary: doc['changesSummary'],
+                    requestedBy: unwrapRelationshipId(doc['requestedBy']),
+                    requestedAt: doc['requestedAt'],
+                    expiresAt: doc['expiresAt'],
+                    previewUrl: doc['previewUrl'],
+                })),
+            };
+        },
+    };
+}
+function unwrapRelationshipId(value) {
+    if (value === null || value === undefined)
+        return null;
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'object' && 'id' in value) {
+        return String(value.id);
+    }
+    return null;
+}
+//# sourceMappingURL=list-pending-approvals.js.map

package/dist/tools/list-pending-approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-pending-approvals.js","sourceRoot":"","sources":["../../src/tools/list-pending-approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAErD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAQzD,MAAM,UAAU,8BAA8B,CAC5C,IAA8B;IAE9B,MAAM,WAAW,GAAG,QAAQ,CAAC;QAC3B,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,0BAA0B,CAAC;KACxC,CAAC,CAAA;IAEF,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,wIAAwI;QAC1I,WAAW;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,OAAO,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAA;YAClF,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAA;YAClC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;YAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBACrC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,sBAAsB;gBACjE,KAAK,EAAE;oBACL,GAAG,EAAE;wBACH,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;wBACjC,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE;qBACvC;iBACF;gBACD,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;gBACxB,IAAI,EAAE,cAAc;aACrB,CAAC,CAAA;YAEF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAsC,CAAA;YAC1D,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC1B,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7B,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,CAAC;oBACzC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC;oBACzB,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC;oBAC/B,cAAc,EAAE,GAAG,CAAC,gBAAgB,CAAC;oBACrC,WAAW,EAAE,oBAAoB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;oBACrD,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC;oBAC/B,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC;oBAC3B,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC;iBAC9B,CAAC,CAAC;aACJ,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAE,KAAyB,CAAC,EAAE,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/tools/request-approval.d.ts

@@ -0,0 +1,13 @@
+import type { Payload } from 'payload';
+import { type AuditWriter } from '@forumone/throughline-core';
+import type { McpToolDefinition } from '@forumone/throughline-plugin-contract';
+import type { ApprovalsPluginOptions } from '../options.js';
+export interface RequestApprovalDeps {
+    payload: Payload;
+    options: ApprovalsPluginOptions & {
+        tokenSecret: string;
+    };
+    auditWriter: AuditWriter;
+}
+export declare function createRequestApprovalTool(deps: RequestApprovalDeps): McpToolDefinition;
+//# sourceMappingURL=request-approval.d.ts.map

package/dist/tools/request-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-approval.d.ts","sourceRoot":"","sources":["../../src/tools/request-approval.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,KAAK,WAAW,EAAY,MAAM,4BAA4B,CAAA;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAE9E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAE3D,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,sBAAsB,GAAG;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;IACzD,WAAW,EAAE,WAAW,CAAA;CACzB;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,mBAAmB,GAAG,iBAAiB,CA8HtF"}

package/dist/tools/request-approval.js

@@ -0,0 +1,118 @@
+import { z } from 'zod';
+import { withMeta } from '@forumone/throughline-core';
+import { DEFAULT_APPROVALS_SLUG } from '../collection.js';
+export function createRequestApprovalTool(deps) {
+    const inputSchema = withMeta({
+        collection: z.string(),
+        id: z.string(),
+        changesSummary: z
+            .string()
+            .min(20)
+            .describe('Clear description of what is changing and why, shown to approvers in notifications'),
+        requestReason: z
+            .string()
+            .optional()
+            .describe('Optional context about why the change is being made'),
+        approverGroups: z
+            .array(z.string())
+            .min(1)
+            .describe('Group slugs the request should be routed to'),
+    });
+    return {
+        name: 'request_approval',
+        description: "Kicks off the approval workflow for a document that requires approval before publishing. Provide a clear changesSummary explaining what changed and why; approvers see this in their notifications. Returns the approval ID, expiration time, and the list of approvers who were notified.",
+        inputSchema,
+        handler: async (input, ctx) => {
+            if (!ctx.user) {
+                return { error: 'Approval requests must be made by an authenticated user' };
+            }
+            const approverGroups = input.approverGroups;
+            const validGroupSlugs = new Set(deps.options.groups.map((g) => g.slug));
+            const unknownGroups = approverGroups.filter((g) => !validGroupSlugs.has(g));
+            if (unknownGroups.length > 0) {
+                return { error: `Unknown approver groups: ${unknownGroups.join(', ')}` };
+            }
+            const document = (await deps.payload.findByID({
+                collection: input.collection,
+                id: input.id,
+                draft: true,
+            }));
+            if (!document)
+                return { error: 'Document not found' };
+            const approvers = await deps.options.groupResolver.resolveUsers(approverGroups);
+            if (approvers.length === 0) {
+                return {
+                    error: `No approvers found in groups: ${approverGroups.join(', ')}`,
+                };
+            }
+            const targetVersion = String(document['updatedAt'] ?? document['id'] ?? input.id);
+            const targetTitle = typeof document['title'] === 'string' ? document['title'] : input.id;
+            const slug = typeof document['slug'] === 'string' ? document['slug'] : input.id;
+            const previewUrl = buildPreviewUrl(deps.options, input.collection, slug);
+            const expiresAt = new Date(Date.now() + (deps.options.expirationDays ?? 7) * 24 * 60 * 60 * 1000).toISOString();
+            const created = (await deps.payload.create({
+                collection: deps.options.collectionSlug ?? DEFAULT_APPROVALS_SLUG,
+                data: {
+                    targetCollection: input.collection,
+                    targetId: input.id,
+                    targetTitle,
+                    targetVersion,
+                    previewUrl,
+                    requestedBy: ctx.user.id,
+                    requestedAt: new Date().toISOString(),
+                    ...(input.requestReason ? { requestReason: input.requestReason } : {}),
+                    changesSummary: input.changesSummary,
+                    approverGroups: approverGroups,
+                    status: 'pending',
+                    expiresAt,
+                    notifiedApprovers: approvers.map((a) => a.id),
+                    consumedTokens: [],
+                },
+            }));
+            const approvalId = String(created.id);
+            await deps.options.inngest.send({
+                name: 'approval/requested',
+                data: {
+                    approvalId,
+                    targetCollection: input.collection,
+                    targetId: input.id,
+                    targetTitle,
+                    requestedBy: ctx.user.id,
+                    approverIds: approvers.map((a) => a.id),
+                    expiresAt,
+                },
+            });
+            await deps.auditWriter({
+                actor: {
+                    type: 'user',
+                    userId: ctx.user.id,
+                    userName: ctx.user.name,
+                    apiKeyName: ctx.apiKeyName,
+                },
+                action: 'approval.requested',
+                mcpServer: 'approvals',
+                mcpTool: 'request_approval',
+                targetCollection: input.collection,
+                targetId: input.id,
+                targetTitle,
+                prompt: input._meta?.userPrompt,
+                reasoning: input._meta?.reasoning,
+                changesSummary: input.changesSummary,
+                approvalRequestId: approvalId,
+                success: true,
+            });
+            return {
+                approvalId,
+                status: 'pending',
+                expiresAt,
+                approvers: approvers.map((a) => ({ id: a.id, name: a.name ?? a.email })),
+                previewUrl,
+            };
+        },
+    };
+}
+function buildPreviewUrl(options, collection, slug) {
+    const baseUrl = options.publicUrl ?? process.env['NEXT_PUBLIC_SERVER_URL'] ?? '';
+    return `${baseUrl.replace(/\/$/, '')}/api/preview?collection=${encodeURIComponent(collection)}&slug=${encodeURIComponent(slug)}`;
+}
+//# sourceMappingURL=request-approval.js.map

package/dist/tools/request-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-approval.js","sourceRoot":"","sources":["../../src/tools/request-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAoB,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAEvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AASzD,MAAM,UAAU,yBAAyB,CAAC,IAAyB;IACjE,MAAM,WAAW,GAAG,QAAQ,CAAC;QAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,GAAG,CAAC,EAAE,CAAC;aACP,QAAQ,CACP,oFAAoF,CACrF;QACH,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,qDAAqD,CAAC;QAClE,cAAc,EAAE,CAAC;aACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,6CAA6C,CAAC;KAC3D,CAAC,CAAA;IAEF,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,4RAA4R;QAC9R,WAAW;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,EAAE,KAAK,EAAE,yDAAyD,EAAE,CAAA;YAC7E,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,cAA0B,CAAA;YACvD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YACvE,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YAC3E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,EAAE,KAAK,EAAE,4BAA4B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAA;YAC1E,CAAC;YAED,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,KAAK,EAAE,IAAI;aACZ,CAAC,CAAmC,CAAA;YACrC,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAA;YAErD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;YAC/E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO;oBACL,KAAK,EAAE,iCAAiC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACpE,CAAA;YACH,CAAC;YAED,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAA;YACjF,MAAM,WAAW,GACf,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAA;YACtE,MAAM,IAAI,GACR,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAA;YACpE,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YAExE,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CACtE,CAAC,WAAW,EAAE,CAAA;YAEf,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBACzC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,sBAAsB;gBACjE,IAAI,EAAE;oBACJ,gBAAgB,EAAE,KAAK,CAAC,UAAU;oBAClC,QAAQ,EAAE,KAAK,CAAC,EAAE;oBAClB,WAAW;oBACX,aAAa;oBACb,UAAU;oBACV,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;oBACxB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACrC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,cAAc,EAAE,cAAc;oBAC9B,MAAM,EAAE,SAAS;oBACjB,SAAS;oBACT,iBAAiB,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7C,cAAc,EAAE,EAAE;iBACnB;aACF,CAAC,CAA4B,CAAA;YAE9B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAErC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC9B,IAAI,EAAE,oBAAoB;gBAC1B,IAAI,EAAE;oBACJ,UAAU;oBACV,gBAAgB,EAAE,KAAK,CAAC,UAAU;oBAClC,QAAQ,EAAE,KAAK,CAAC,EAAE;oBAClB,WAAW;oBACX,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;oBACxB,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,SAAS;iBACV;aACF,CAAC,CAAA;YAEF,MAAM,IAAI,CAAC,WAAW,CAAC;gBACrB,KAAK,EAAE;oBACL,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;oBACnB,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;oBACvB,UAAU,EAAE,GAAG,CAAC,UAAU;iBAC3B;gBACD,MAAM,EAAE,oBAAoB;gBAC5B,SAAS,EAAE,WAAW;gBACtB,OAAO,EAAE,kBAAkB;gBAC3B,gBAAgB,EAAE,KAAK,CAAC,UAAU;gBAClC,QAAQ,EAAE,KAAK,CAAC,EAAE;gBAClB,WAAW;gBACX,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU;gBAC/B,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS;gBACjC,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,iBAAiB,EAAE,UAAU;gBAC7B,OAAO,EAAE,IAAI;aACd,CAAC,CAAA;YAEF,OAAO;gBACL,UAAU;gBACV,MAAM,EAAE,SAAS;gBACjB,SAAS;gBACT,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACxE,UAAU;aACX,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CACtB,OAA+B,EAC/B,UAAkB,EAClB,IAAY;IAEZ,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAA;IAChF,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,kBAAkB,CAAC,UAAU,CAAC,SAAS,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAA;AAClI,CAAC"}

package/dist/tools/respond-to-approval.d.ts

@@ -0,0 +1,13 @@
+import type { Payload } from 'payload';
+import { type AuditWriter } from '@forumone/throughline-core';
+import type { McpToolDefinition } from '@forumone/throughline-plugin-contract';
+import type { ApprovalsPluginOptions } from '../options.js';
+export interface RespondToApprovalDeps {
+    payload: Payload;
+    options: ApprovalsPluginOptions & {
+        tokenSecret: string;
+    };
+    auditWriter: AuditWriter;
+}
+export declare function createRespondToApprovalTool(deps: RespondToApprovalDeps): McpToolDefinition;
+//# sourceMappingURL=respond-to-approval.d.ts.map

package/dist/tools/respond-to-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"respond-to-approval.d.ts","sourceRoot":"","sources":["../../src/tools/respond-to-approval.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,KAAK,WAAW,EAAY,MAAM,4BAA4B,CAAA;AAEvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAE9E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAE3D,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,sBAAsB,GAAG;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;IACzD,WAAW,EAAE,WAAW,CAAA;CACzB;AAcD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,qBAAqB,GAAG,iBAAiB,CAgG1F"}

package/dist/tools/respond-to-approval.js

@@ -0,0 +1,107 @@
+import { z } from 'zod';
+import { withMeta } from '@forumone/throughline-core';
+import { DEFAULT_APPROVALS_SLUG } from '../collection.js';
+const decisionToStatus = {
+    approve: 'granted',
+    decline: 'declined',
+    request_changes: 'changes-requested',
+};
+const decisionToAuditAction = {
+    approve: 'approval.granted',
+    decline: 'approval.declined',
+    request_changes: 'approval.changes_requested',
+};
+export function createRespondToApprovalTool(deps) {
+    const inputSchema = withMeta({
+        approvalId: z.string(),
+        decision: z.enum(['approve', 'decline', 'request_changes']),
+        notes: z
+            .string()
+            .optional()
+            .describe('Decision rationale, shown to the requester (optional but encouraged for declines)'),
+    });
+    return {
+        name: 'respond_to_approval',
+        description: "Records an approver's decision on a pending approval. Valid decisions: approve, decline, request_changes. Approvers can also act through the inline action links in their notification emails; this tool is for when they respond conversationally through Claude.",
+        inputSchema,
+        handler: async (input, ctx) => {
+            if (!ctx.user) {
+                return { error: 'Must be authenticated to respond to approvals' };
+            }
+            const collectionSlug = deps.options.collectionSlug ?? DEFAULT_APPROVALS_SLUG;
+            const approval = (await deps.payload.findByID({
+                collection: collectionSlug,
+                id: input.approvalId,
+            }));
+            if (!approval)
+                return { error: 'Approval not found' };
+            if (approval['status'] !== 'pending') {
+                return { error: `Approval is already ${String(approval['status'])}` };
+            }
+            const requesterId = unwrapRelationshipId(approval['requestedBy']);
+            if (requesterId === ctx.user.id) {
+                return { error: 'You cannot approve your own request' };
+            }
+            const approverGroups = approval['approverGroups'] ?? [];
+            const userGroups = ctx.user.groups;
+            const hasAccess = approverGroups.some((g) => userGroups.includes(g));
+            if (!hasAccess) {
+                return { error: 'You are not in an approver group for this request' };
+            }
+            const decision = input.decision;
+            const newStatus = decisionToStatus[decision];
+            const decidedAt = new Date().toISOString();
+            await deps.payload.update({
+                collection: collectionSlug,
+                id: input.approvalId,
+                data: {
+                    status: newStatus,
+                    decidedBy: ctx.user.id,
+                    decidedAt,
+                    ...(input.notes ? { decisionNotes: input.notes } : {}),
+                },
+            });
+            await deps.options.inngest.send({
+                name: 'approval/decided',
+                data: {
+                    approvalId: input.approvalId,
+                    decision: newStatus,
+                    decidedBy: ctx.user.id,
+                    decidedAt,
+                    targetCollection: String(approval['targetCollection']),
+                    targetId: String(approval['targetId']),
+                },
+            });
+            await deps.auditWriter({
+                actor: {
+                    type: 'user',
+                    userId: ctx.user.id,
+                    userName: ctx.user.name,
+                    apiKeyName: ctx.apiKeyName,
+                },
+                action: decisionToAuditAction[decision],
+                mcpServer: 'approvals',
+                mcpTool: 'respond_to_approval',
+                targetCollection: String(approval['targetCollection']),
+                targetId: String(approval['targetId']),
+                targetTitle: typeof approval['targetTitle'] === 'string'
+                    ? approval['targetTitle']
+                    : String(approval['targetId']),
+                prompt: input._meta?.userPrompt,
+                reasoning: input.notes ?? input._meta?.reasoning,
+                approvalRequestId: input.approvalId,
+                success: true,
+            });
+            return { success: true, status: newStatus, decidedAt };
+        },
+    };
+}
+function unwrapRelationshipId(value) {
+    if (typeof value === 'string')
+        return value;
+    if (value && typeof value === 'object' && 'id' in value) {
+        return String(value.id);
+    }
+    return null;
+}
+//# sourceMappingURL=respond-to-approval.js.map

package/dist/tools/respond-to-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"respond-to-approval.js","sourceRoot":"","sources":["../../src/tools/respond-to-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAoB,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAGvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AASzD,MAAM,gBAAgB,GAAG;IACvB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,UAAU;IACnB,eAAe,EAAE,mBAAmB;CAC5B,CAAA;AAEV,MAAM,qBAAqB,GAAuD;IAChF,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,mBAAmB;IAC5B,eAAe,EAAE,4BAA4B;CAC9C,CAAA;AAED,MAAM,UAAU,2BAA2B,CAAC,IAA2B;IACrE,MAAM,WAAW,GAAG,QAAQ,CAAC;QAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAC3D,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,mFAAmF,CAAC;KACjG,CAAC,CAAA;IAEF,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,oQAAoQ;QACtQ,WAAW;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAA;YACnE,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,sBAAsB,CAAA;YAC5E,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC5C,UAAU,EAAE,cAAc;gBAC1B,EAAE,EAAE,KAAK,CAAC,UAAU;aACrB,CAAC,CAAmC,CAAA;YAErC,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAA;YAErD,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;gBACrC,OAAO,EAAE,KAAK,EAAE,uBAAuB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAA;YACvE,CAAC;YAED,MAAM,WAAW,GAAG,oBAAoB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAA;YACjE,IAAI,WAAW,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBAChC,OAAO,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAA;YACzD,CAAC;YAED,MAAM,cAAc,GAAI,QAAQ,CAAC,gBAAgB,CAA0B,IAAI,EAAE,CAAA;YACjF,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAA;YAClC,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;YACpE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAA;YACvE,CAAC;YAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAyC,CAAA;YAChE,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;YAC5C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAE1C,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBACxB,UAAU,EAAE,cAAc;gBAC1B,EAAE,EAAE,KAAK,CAAC,UAAU;gBACpB,IAAI,EAAE;oBACJ,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;oBACtB,SAAS;oBACT,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvD;aACF,CAAC,CAAA;YAEF,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC9B,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE;oBACJ,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,QAAQ,EAAE,SAAS;oBACnB,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;oBACtB,SAAS;oBACT,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;oBACtD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;iBACvC;aACF,CAAC,CAAA;YAEF,MAAM,IAAI,CAAC,WAAW,CAAC;gBACrB,KAAK,EAAE;oBACL,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;oBACnB,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;oBACvB,UAAU,EAAE,GAAG,CAAC,UAAU;iBAC3B;gBACD,MAAM,EAAE,qBAAqB,CAAC,QAAQ,CAAC;gBACvC,SAAS,EAAE,WAAW;gBACtB,OAAO,EAAE,qBAAqB;gBAC9B,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;gBACtD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACtC,WAAW,EACT,OAAO,QAAQ,CAAC,aAAa,CAAC,KAAK,QAAQ;oBACzC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;oBACzB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAClC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU;gBAC/B,SAAS,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,SAAS;gBAChD,iBAAiB,EAAE,KAAK,CAAC,UAAU;gBACnC,OAAO,EAAE,IAAI;aACd,CAAC,CAAA;YAEF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;QACxD,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;QACxD,OAAO,MAAM,CAAE,KAAyB,CAAC,EAAE,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/package.json

@@ -1,10 +1,67 @@
 {
   "name": "@forumone/throughline-approvals",
-  "version": "0.0.1",
-  "description": "OIDC trusted publishing setup package for @forumone/throughline-approvals",
+  "version": "0.2.0",
+  "description": "Conversational approval workflow server for Throughline. Provides the approval resolver the publishing server consumes plus MCP tools for requesting and responding to approvals.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md"
+  ],
   "keywords": [
-    "oidc",
-    "trusted-publishing",
-    "setup"
-  ]
-}
+    "throughline",
+    "payload",
+    "mcp",
+    "approvals",
+    "workflow"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/forumone/throughline.git",
+    "directory": "packages/approvals"
+  },
+  "homepage": "https://github.com/forumone/throughline/tree/main/packages/approvals#readme",
+  "bugs": {
+    "url": "https://github.com/forumone/throughline/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "payload": "^3.0.0",
+    "inngest": "^4.0.0"
+  },
+  "dependencies": {
+    "zod": "^3.23.0",
+    "@forumone/throughline-core": "0.2.0",
+    "@forumone/throughline-plugin-contract": "0.0.0",
+    "@forumone/throughline-publishing": "0.2.1"
+  },
+  "devDependencies": {
+    "@types/node": "^20.17.0",
+    "eslint": "^9.15.0",
+    "inngest": "^4.2.0",
+    "payload": "^3.83.0",
+    "typescript": "^5.6.0",
+    "vitest": "^2.1.0",
+    "@forumone/throughline-eslint-config": "0.0.0",
+    "@forumone/throughline-tsconfig": "0.0.0"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "dev": "tsc -b -w",
+    "clean": "rm -rf dist .turbo *.tsbuildinfo",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src",
+    "test": "vitest run"
+  }
+}