@forumone/throughline 0.0.0 → 1.0.0-next.0

package/dist/approvals/endpoints/action.d.ts

@@ -0,0 +1,31 @@
+import type { Endpoint, Payload } from 'payload';
+import type { AuditWriter } from '../../audit/writer.js';
+import type { ApprovalsPluginOptions } from '../options.js';
+import { type VerifyResult } from '../tokens.js';
+export interface CreateActionEndpointDeps {
+    options: ApprovalsPluginOptions & {
+        tokenSecret: string;
+    };
+    auditWriter: AuditWriter;
+}
+/**
+ * Builds the GET endpoint that handles inline action links from emails.
+ * The flow is:
+ *   - First request: render a confirmation page so a single misclicked
+ *     link can't act on the approval.
+ *   - Second request (with `confirm=true`): verify the token wasn't
+ *     already consumed and apply the decision.
+ *
+ * Uses HTML responses (intentionally minimal styling — clients can drop
+ * a custom-branded endpoint in front if they want).
+ */
+export declare function createActionEndpoint(deps: CreateActionEndpointDeps): Endpoint;
+/** Lower-level helper exported for test consumers and custom action endpoints. */
+export type ActionVerification = VerifyResult;
+export declare function previewVerification(token: string, payload: Payload, options: ApprovalsPluginOptions & {
+    tokenSecret: string;
+}): Promise<{
+    verification: VerifyResult;
+    approval: Record<string, unknown> | null;
+}>;
+//# sourceMappingURL=action.d.ts.map

package/dist/approvals/endpoints/action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../src/approvals/endpoints/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAE3D,OAAO,EAEL,KAAK,YAAY,EAElB,MAAM,cAAc,CAAA;AAErB,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,sBAAsB,GAAG;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;IACzD,WAAW,EAAE,WAAW,CAAA;CACzB;AAqBD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,wBAAwB,GAAG,QAAQ,CA+H7E;AAED,kFAAkF;AAClF,MAAM,MAAM,kBAAkB,GAAG,YAAY,CAAA;AAE7C,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,sBAAsB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC;IAAE,YAAY,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAAE,CAAC,CAQnF"}

package/dist/approvals/endpoints/action.js

@@ -0,0 +1,205 @@
+import { DEFAULT_APPROVALS_SLUG } from '../collection.js';
+import { verifyActionToken, } from '../tokens.js';
+const DECISION_STATUS_MAP = {
+    approve: 'granted',
+    decline: 'declined',
+    changes: 'changes-requested',
+};
+const DECISION_AUDIT_MAP = {
+    approve: 'approval.granted',
+    decline: 'approval.declined',
+    changes: 'approval.changes_requested',
+};
+const ACTION_LABEL = {
+    approve: 'Approve',
+    decline: 'Decline',
+    changes: 'Request changes',
+    discuss: 'Start discussion',
+};
+/**
+ * Builds the GET endpoint that handles inline action links from emails.
+ * The flow is:
+ *   - First request: render a confirmation page so a single misclicked
+ *     link can't act on the approval.
+ *   - Second request (with `confirm=true`): verify the token wasn't
+ *     already consumed and apply the decision.
+ *
+ * Uses HTML responses (intentionally minimal styling — clients can drop
+ * a custom-branded endpoint in front if they want).
+ */
+export function createActionEndpoint(deps) {
+    return {
+        path: '/approvals/action',
+        method: 'get',
+        handler: async (req) => {
+            const url = new URL(req.url ?? 'http://localhost');
+            const token = url.searchParams.get('token');
+            if (!token)
+                return htmlResponse(renderError('Missing action token'), 400);
+            const verification = await verifyActionToken(token, deps.options.tokenSecret);
+            if (!verification.ok) {
+                return htmlResponse(renderError(verification.error), 401);
+            }
+            const collectionSlug = deps.options.collectionSlug ?? DEFAULT_APPROVALS_SLUG;
+            const approval = (await req.payload.findByID({
+                collection: collectionSlug,
+                id: verification.token.approvalId,
+            }));
+            if (!approval)
+                return htmlResponse(renderError('Approval not found'), 404);
+            const status = String(approval['status']);
+            if (status !== 'pending') {
+                return htmlResponse(renderInfo(`This request was already ${status}.`));
+            }
+            const consumed = approval['consumedTokens'] ?? [];
+            if (consumed.includes(token)) {
+                return htmlResponse(renderError('This action link has already been used'), 400);
+            }
+            const expiresAtRaw = approval['expiresAt'];
+            if (typeof expiresAtRaw === 'string' &&
+                Date.parse(expiresAtRaw) < Date.now()) {
+                return htmlResponse(renderInfo('This approval request has expired.'));
+            }
+            const action = verification.token.action;
+            const confirm = url.searchParams.get('confirm') === 'true';
+            if (!confirm) {
+                return htmlResponse(renderConfirmation({
+                    token,
+                    action,
+                    targetTitle: stringOrFallback(approval['targetTitle'], 'this document'),
+                    changesSummary: stringOrFallback(approval['changesSummary'], ''),
+                }));
+            }
+            if (action === 'discuss') {
+                // Discuss isn't a decision — surface a message and don't mutate state.
+                // C11 listens for the 'approval/discussed' event to thread it into
+                // the email reply UX once that lands.
+                await deps.options.inngest.send({
+                    name: 'approval/discussed',
+                    data: {
+                        approvalId: verification.token.approvalId,
+                        approverId: verification.token.approverId,
+                    },
+                });
+                await deps.auditWriter({
+                    actor: { type: 'user', userId: verification.token.approverId, apiKeyName: 'action-token' },
+                    action: 'approval.discussed',
+                    mcpServer: 'approvals',
+                    mcpTool: 'action-endpoint',
+                    targetCollection: String(approval['targetCollection']),
+                    targetId: String(approval['targetId']),
+                    approvalRequestId: verification.token.approvalId,
+                    success: true,
+                });
+                return htmlResponse(renderInfo('Thanks — a discussion thread will follow up by email.'));
+            }
+            const newStatus = DECISION_STATUS_MAP[action];
+            const decidedAt = new Date().toISOString();
+            await req.payload.update({
+                collection: collectionSlug,
+                id: verification.token.approvalId,
+                data: {
+                    status: newStatus,
+                    decidedBy: verification.token.approverId,
+                    decidedAt,
+                    consumedTokens: [...consumed, token],
+                },
+            });
+            await deps.options.inngest.send({
+                name: 'approval/decided',
+                data: {
+                    approvalId: verification.token.approvalId,
+                    decision: newStatus,
+                    decidedBy: verification.token.approverId,
+                    decidedAt,
+                    targetCollection: String(approval['targetCollection']),
+                    targetId: String(approval['targetId']),
+                },
+            });
+            await deps.auditWriter({
+                actor: {
+                    type: 'user',
+                    userId: verification.token.approverId,
+                    apiKeyName: 'action-token',
+                },
+                action: DECISION_AUDIT_MAP[action],
+                mcpServer: 'approvals',
+                mcpTool: 'action-endpoint',
+                targetCollection: String(approval['targetCollection']),
+                targetId: String(approval['targetId']),
+                targetTitle: stringOrFallback(approval['targetTitle'], String(approval['targetId'])),
+                approvalRequestId: verification.token.approvalId,
+                success: true,
+            });
+            return htmlResponse(renderSuccess(ACTION_LABEL[action], stringOrFallback(approval['targetTitle'], 'this document')));
+        },
+    };
+}
+export async function previewVerification(token, payload, options) {
+    const verification = await verifyActionToken(token, options.tokenSecret);
+    if (!verification.ok)
+        return { verification, approval: null };
+    const approval = (await payload.findByID({
+        collection: options.collectionSlug ?? DEFAULT_APPROVALS_SLUG,
+        id: verification.token.approvalId,
+    }));
+    return { verification, approval };
+}
+function htmlResponse(html, status = 200) {
+    return new Response(html, {
+        status,
+        headers: { 'content-type': 'text/html; charset=utf-8' },
+    });
+}
+function renderConfirmation(args) {
+    const label = ACTION_LABEL[args.action];
+    const summary = args.changesSummary
+        ? `<p><strong>What's changing:</strong> ${escape(args.changesSummary)}</p>`
+        : '';
+    return htmlPage(`
+    <h1>${escape(label)}</h1>
+    <p>You're about to <strong>${escape(label.toLowerCase())}</strong> the request for <em>${escape(args.targetTitle)}</em>.</p>
+    ${summary}
+    <form method="GET">
+      <input type="hidden" name="token" value="${escape(args.token)}" />
+      <input type="hidden" name="confirm" value="true" />
+      <button type="submit">Confirm: ${escape(label)}</button>
+    </form>
+  `);
+}
+function renderSuccess(label, title) {
+    return htmlPage(`<h1>${escape(label)}</h1><p>Your decision on <em>${escape(title)}</em> has been recorded.</p>`);
+}
+function renderError(message) {
+    return htmlPage(`<h1>Action could not be completed</h1><p>${escape(message)}</p>`);
+}
+function renderInfo(message) {
+    return htmlPage(`<h1>Notice</h1><p>${escape(message)}</p>`);
+}
+function htmlPage(body) {
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <title>Approval action</title>
+  <style>
+    body { font-family: system-ui, -apple-system, BlinkMacSystemFont, sans-serif; max-width: 600px; margin: 3rem auto; padding: 0 1rem; color: #18181b; line-height: 1.6; }
+    h1 { font-size: 1.5rem; }
+    button { background: #18181b; color: white; padding: 0.75rem 1.5rem; border: none; border-radius: 0.25rem; font-size: 1rem; cursor: pointer; }
+    em { font-style: italic; }
+  </style>
+</head>
+<body>${body}</body>
+</html>`;
+}
+function escape(text) {
+    return String(text ?? '')
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;');
+}
+function stringOrFallback(value, fallback) {
+    return typeof value === 'string' ? value : fallback;
+}
+//# sourceMappingURL=action.js.map

package/dist/approvals/endpoints/action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../../../src/approvals/endpoints/action.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,EAGL,iBAAiB,GAClB,MAAM,cAAc,CAAA;AAOrB,MAAM,mBAAmB,GAA0D;IACjF,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,UAAU;IACnB,OAAO,EAAE,mBAAmB;CAC7B,CAAA;AAED,MAAM,kBAAkB,GAAG;IACzB,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,mBAAmB;IAC5B,OAAO,EAAE,4BAA4B;CAC7B,CAAA;AAEV,MAAM,YAAY,GAAsC;IACtD,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,kBAAkB;CAC5B,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA8B;IACjE,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAA;YAClD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC3C,IAAI,CAAC,KAAK;gBAAE,OAAO,YAAY,CAAC,WAAW,CAAC,sBAAsB,CAAC,EAAE,GAAG,CAAC,CAAA;YAEzE,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;YAC7E,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,YAAY,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAA;YAC3D,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,sBAAsB,CAAA;YAC5E,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC3C,UAAU,EAAE,cAAc;gBAC1B,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;aAClC,CAAC,CAAmC,CAAA;YAErC,IAAI,CAAC,QAAQ;gBAAE,OAAO,YAAY,CAAC,WAAW,CAAC,oBAAoB,CAAC,EAAE,GAAG,CAAC,CAAA;YAE1E,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;YACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,YAAY,CAAC,UAAU,CAAC,4BAA4B,MAAM,GAAG,CAAC,CAAC,CAAA;YACxE,CAAC;YAED,MAAM,QAAQ,GAAI,QAAQ,CAAC,gBAAgB,CAA0B,IAAI,EAAE,CAAA;YAC3E,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,YAAY,CAAC,WAAW,CAAC,wCAAwC,CAAC,EAAE,GAAG,CAAC,CAAA;YACjF,CAAC;YAED,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAA;YAC1C,IACE,OAAO,YAAY,KAAK,QAAQ;gBAChC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EACrC,CAAC;gBACD,OAAO,YAAY,CAAC,UAAU,CAAC,oCAAoC,CAAC,CAAC,CAAA;YACvE,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAA;YACxC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,MAAM,CAAA;YAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,YAAY,CACjB,kBAAkB,CAAC;oBACjB,KAAK;oBACL,MAAM;oBACN,WAAW,EAAE,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC;oBACvE,cAAc,EAAE,gBAAgB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;iBACjE,CAAC,CACH,CAAA;YACH,CAAC;YAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,uEAAuE;gBACvE,mEAAmE;gBACnE,sCAAsC;gBACtC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC9B,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE;wBACJ,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;wBACzC,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;qBAC1C;iBACF,CAAC,CAAA;gBACF,MAAM,IAAI,CAAC,WAAW,CAAC;oBACrB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE;oBAC1F,MAAM,EAAE,oBAAoB;oBAC5B,SAAS,EAAE,WAAW;oBACtB,OAAO,EAAE,iBAAiB;oBAC1B,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;oBACtD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;oBACtC,iBAAiB,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;oBAChD,OAAO,EAAE,IAAI;iBACd,CAAC,CAAA;gBACF,OAAO,YAAY,CAAC,UAAU,CAAC,uDAAuD,CAAC,CAAC,CAAA;YAC1F,CAAC;YAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;YAC7C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAE1C,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;gBACvB,UAAU,EAAE,cAAc;gBAC1B,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;gBACjC,IAAI,EAAE;oBACJ,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;oBACxC,SAAS;oBACT,cAAc,EAAE,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC;iBACrC;aACF,CAAC,CAAA;YAEF,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC9B,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE;oBACJ,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;oBACzC,QAAQ,EAAE,SAAS;oBACnB,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;oBACxC,SAAS;oBACT,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;oBACtD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;iBACvC;aACF,CAAC,CAAA;YAEF,MAAM,IAAI,CAAC,WAAW,CAAC;gBACrB,KAAK,EAAE;oBACL,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;oBACrC,UAAU,EAAE,cAAc;iBAC3B;gBACD,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC;gBAClC,SAAS,EAAE,WAAW;gBACtB,OAAO,EAAE,iBAAiB;gBAC1B,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;gBACtD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACtC,WAAW,EAAE,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;gBACpF,iBAAiB,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;gBAChD,OAAO,EAAE,IAAI;aACd,CAAC,CAAA;YAEF,OAAO,YAAY,CACjB,aAAa,CACX,YAAY,CAAC,MAAM,CAAC,EACpB,gBAAgB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC,CAC3D,CACF,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa,EACb,OAAgB,EAChB,OAAyD;IAEzD,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IACxE,IAAI,CAAC,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IAC7D,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC;QACvC,UAAU,EAAE,OAAO,CAAC,cAAc,IAAI,sBAAsB;QAC5D,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU;KAClC,CAAC,CAAmC,CAAA;IACrC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAA;AACnC,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAM,GAAG,GAAG;IAC9C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;KACxD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAK3B;IACC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc;QACjC,CAAC,CAAC,wCAAwC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM;QAC3E,CAAC,CAAC,EAAE,CAAA;IACN,OAAO,QAAQ,CAAC;UACR,MAAM,CAAC,KAAK,CAAC;iCACU,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;MAC/G,OAAO;;iDAEoC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;;uCAE5B,MAAM,CAAC,KAAK,CAAC;;GAEjD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAa;IACjD,OAAO,QAAQ,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,gCAAgC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAA;AAClH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,QAAQ,CAAC,4CAA4C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;AACpF,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,QAAQ,CAAC,qBAAqB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;AAC7D,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO;;;;;;;;;;;;QAYD,IAAI;QACJ,CAAA;AACR,CAAC;AAED,SAAS,MAAM,CAAC,IAAa;IAC3B,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,QAAgB;IACxD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAA;AACrD,CAAC"}

package/dist/approvals/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * `@forumone/throughline/approvals`: approval requests, the resolver
+ * publishing consults, signed action links, and the job that expires stale
+ * requests. Was `@forumone/throughline-approvals` in 0.x.
+ */
+export { approvalsPlugin } from './plugin.js';
+export { approvalsEnv } from './options.js';
+export type { ApprovalsPluginOptions, ApproverGroup, GroupResolver, ResolvedApprover, } from './options.js';
+export { DEFAULT_APPROVALS_SLUG, createApprovalsCollection } from './collection.js';
+export type { CreateApprovalsCollectionOptions } from './collection.js';
+export { attachApprovalResolver, createApprovalResolver } from './resolver.js';
+export type { CreateApprovalResolverOptions } from './resolver.js';
+export { createActionEndpoint } from './endpoints/action.js';
+export type { CreateActionEndpointDeps } from './endpoints/action.js';
+export { generateActionToken, verifyActionToken, buildActionUrl } from './tokens.js';
+export type { ActionToken, ActionTokenAction, VerifyOptions, VerifyResult } from './tokens.js';
+export { expireStaleApprovalsJob } from './jobs/expire-stale-approvals.js';
+export type { ExpireStaleApprovalsOptions } from '../jobs/workflow-types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/approvals/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/approvals/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE3C,YAAY,EACV,sBAAsB,EACtB,aAAa,EACb,aAAa,EACb,gBAAgB,GACjB,MAAM,cAAc,CAAA;AAErB,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AACnF,YAAY,EAAE,gCAAgC,EAAE,MAAM,iBAAiB,CAAA;AAEvE,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAC9E,YAAY,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAA;AAElE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAC5D,YAAY,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAErE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACpF,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE9F,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAA;AAC1E,YAAY,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAA"}

package/dist/approvals/index.js

@@ -0,0 +1,13 @@
+/**
+ * `@forumone/throughline/approvals`: approval requests, the resolver
+ * publishing consults, signed action links, and the job that expires stale
+ * requests. Was `@forumone/throughline-approvals` in 0.x.
+ */
+export { approvalsPlugin } from './plugin.js';
+export { approvalsEnv } from './options.js';
+export { DEFAULT_APPROVALS_SLUG, createApprovalsCollection } from './collection.js';
+export { attachApprovalResolver, createApprovalResolver } from './resolver.js';
+export { createActionEndpoint } from './endpoints/action.js';
+export { generateActionToken, verifyActionToken, buildActionUrl } from './tokens.js';
+export { expireStaleApprovalsJob } from './jobs/expire-stale-approvals.js';
+//# sourceMappingURL=index.js.map

package/dist/approvals/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/approvals/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAS3C,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAGnF,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAG9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAG5D,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAGpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAA"}

package/dist/approvals/jobs/expire-stale-approvals.d.ts

@@ -0,0 +1,14 @@
+import type { ExpireStaleApprovalsOptions } from '../../jobs/workflow-types.js';
+import type { Job } from '../../jobs/types.js';
+import { type JobOptions } from '../../jobs/options.js';
+/**
+ * Cron that finds pending approvals whose `expiresAt` has passed and flips
+ * them to `status: 'expired'`. For each expired record it writes an
+ * `approval.expired` audit event and fires an `approval/expired` event so
+ * notification workflows (e.g. C11 email) can let the requester know without
+ * polling.
+ *
+ * As a runner-neutral job, for `inngestJobs` or `payloadJobs`.
+ */
+export declare function expireStaleApprovalsJob(options: JobOptions<ExpireStaleApprovalsOptions>): Job;
+//# sourceMappingURL=expire-stale-approvals.d.ts.map

package/dist/approvals/jobs/expire-stale-approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expire-stale-approvals.d.ts","sourceRoot":"","sources":["../../../src/approvals/jobs/expire-stale-approvals.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAA;AAE/E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAA;AAC9C,OAAO,EAAc,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAanE;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,UAAU,CAAC,2BAA2B,CAAC,GAC/C,GAAG,CAuFL"}

package/dist/approvals/jobs/expire-stale-approvals.js

@@ -0,0 +1,101 @@
+import { failureOptions } from '../../jobs/workflow-types.js';
+import { getAuditWriter } from '../../audit/plugin.js';
+import { defineJob } from '../../jobs/define.js';
+import { jobPayload } from '../../jobs/options.js';
+const DEFAULT_SCHEDULE = '0 2 * * *'; // daily at 2am UTC
+const DEFAULT_SLUG = 'approvals';
+/**
+ * Cron that finds pending approvals whose `expiresAt` has passed and flips
+ * them to `status: 'expired'`. For each expired record it writes an
+ * `approval.expired` audit event and fires an `approval/expired` event so
+ * notification workflows (e.g. C11 email) can let the requester know without
+ * polling.
+ *
+ * As a runner-neutral job, for `inngestJobs` or `payloadJobs`.
+ */
+export function expireStaleApprovalsJob(options) {
+    const schedule = options.schedule ?? DEFAULT_SCHEDULE;
+    const collectionSlug = options.collectionSlug ?? DEFAULT_SLUG;
+    return defineJob({
+        id: options.id ?? 'expire-stale-approvals',
+        /*
+        One at a time by default, for the same read-then-act reason as
+        `execute-scheduled-publishes`: `find-expired` collects pending approvals
+        past their expiry and the loop expires them. Two runs both find the same
+        approval, both write `status: 'expired'`, and both send the expiry email —
+        so the requester is told twice that their request lapsed.
+  
+        This is also the function 12 H1 is about. It threw every night for
+        eighteen days over a wrong collection slug; a cap does nothing for that,
+        and the `onFailure` above is what would have said so.
+        */
+        ...failureOptions(options, 1),
+        on: { cron: schedule },
+    }, async ({ step, logger, emit, payload: contextPayload }) => {
+        const payload = jobPayload(options.payload, contextPayload, options.id ?? 'expire-stale-approvals');
+        const now = new Date().toISOString();
+        const expired = await step.run('find-expired', async () => {
+            const result = await payload.find({
+                collection: collectionSlug,
+                where: {
+                    and: [
+                        { status: { equals: 'pending' } },
+                        { expiresAt: { less_than: now } },
+                    ],
+                },
+                limit: 500,
+            });
+            return result.docs.map((doc) => ({
+                id: String(doc['id']),
+                targetCollection: String(doc['targetCollection'] ?? ''),
+                targetId: String(doc['targetId'] ?? ''),
+                targetTitle: String(doc['targetTitle'] ?? doc['targetId'] ?? '(unknown)'),
+                requesterId: extractRequesterId(doc['requestedBy']),
+            }));
+        });
+        if (expired.length === 0) {
+            logger.info('No stale approvals to expire');
+            return { expiredCount: 0 };
+        }
+        const auditWriter = getAuditWriter(payload);
+        for (const approval of expired) {
+            await step.run(`expire-${approval.id}`, async () => {
+                await payload.update({
+                    collection: collectionSlug,
+                    id: approval.id,
+                    data: { status: 'expired' },
+                });
+                await auditWriter({
+                    actor: { type: 'system', apiKeyName: 'workflow:expire-stale-approvals' },
+                    action: 'approval.expired',
+                    mcpServer: 'approvals',
+                    mcpTool: 'expire-stale-approvals',
+                    targetCollection: approval.targetCollection,
+                    targetId: approval.targetId,
+                    targetTitle: approval.targetTitle,
+                    approvalRequestId: approval.id,
+                });
+                await emit({
+                    name: 'approval/expired',
+                    data: {
+                        approvalId: approval.id,
+                        requesterId: approval.requesterId,
+                        targetCollection: approval.targetCollection,
+                        targetId: approval.targetId,
+                    },
+                });
+            });
+        }
+        logger.info('Expired stale approvals', { count: expired.length });
+        return { expiredCount: expired.length };
+    });
+}
+function extractRequesterId(value) {
+    if (typeof value === 'string')
+        return value;
+    if (value && typeof value === 'object' && 'id' in value) {
+        return String(value.id);
+    }
+    return null;
+}
+//# sourceMappingURL=expire-stale-approvals.js.map

package/dist/approvals/jobs/expire-stale-approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expire-stale-approvals.js","sourceRoot":"","sources":["../../../src/approvals/jobs/expire-stale-approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAEhD,OAAO,EAAE,UAAU,EAAmB,MAAM,uBAAuB,CAAA;AAEnE,MAAM,gBAAgB,GAAG,WAAW,CAAA,CAAC,mBAAmB;AACxD,MAAM,YAAY,GAAG,WAAW,CAAA;AAUhC;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAgD;IAEhD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAA;IACrD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,YAAY,CAAA;IAE7D,OAAO,SAAS,CACd;QACE,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,wBAAwB;QAC1C;;;;;;;;;;UAUE;QACF,GAAG,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7B,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KACvB,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE;QACxD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,IAAI,wBAAwB,CAAC,CAAA;QACnG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAEpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,IAAgC,EAAE;YACpF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAChC,UAAU,EAAE,cAAc;gBAC1B,KAAK,EAAE;oBACL,GAAG,EAAE;wBACH,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;wBACjC,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;qBAClC;iBACF;gBACD,KAAK,EAAE,GAAG;aACX,CAAC,CAAA;YACF,OAAQ,MAAM,CAAC,IAAuC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACnE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrB,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;gBACvD,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACvC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC;gBACzE,WAAW,EAAE,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;aACpD,CAAC,CAAC,CAAA;QACL,CAAC,CAAC,CAAA;QAEF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;YAC3C,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;QAC5B,CAAC;QAED,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAE3C,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;gBACjD,MAAM,OAAO,CAAC,MAAM,CAAC;oBACnB,UAAU,EAAE,cAAc;oBAC1B,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;iBAC5B,CAAC,CAAA;gBAEF,MAAM,WAAW,CAAC;oBAChB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,iCAAiC,EAAE;oBACxE,MAAM,EAAE,kBAAkB;oBAC1B,SAAS,EAAE,WAAW;oBACtB,OAAO,EAAE,wBAAwB;oBACjC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;oBAC3C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,iBAAiB,EAAE,QAAQ,CAAC,EAAE;iBAC/B,CAAC,CAAA;gBAEF,MAAM,IAAI,CAAC;oBACT,IAAI,EAAE,kBAAkB;oBACxB,IAAI,EAAE;wBACJ,UAAU,EAAE,QAAQ,CAAC,EAAE;wBACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;wBACjC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;wBAC3C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;qBAC5B;iBACF,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QACjE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;IACzC,CAAC,CACF,CAAA;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;QACxD,OAAO,MAAM,CAAE,KAAyB,CAAC,EAAE,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/approvals/options.d.ts

@@ -0,0 +1,76 @@
+import { type McpToolCollector } from '../mcp/collector.js';
+import type { Inngest } from 'inngest';
+import type { BaseCorePluginOptions } from '../plugin-contract/index.js';
+import type { CollectionPluginOptions } from '../plugin-contract/admin.js';
+import type { EnvRequirement } from '../plugin-contract/env.js';
+export interface ApproverGroup {
+    /** Group slug, referenced by the policy.approverGroups field on requests. */
+    slug: string;
+    /** Human-readable group name shown in admin UI. */
+    name: string;
+    /** Optional description shown in admin. */
+    description?: string;
+}
+export interface ResolvedApprover {
+    id: string;
+    email: string;
+    name?: string;
+}
+export interface GroupResolver {
+    /**
+     * Given a list of group slugs, returns the users in those groups. Used
+     * when an approval is requested to materialize the actual approver list
+     * and again if the action endpoint needs to confirm a token-bearing user
+     * belongs to one of the request's groups.
+     */
+    resolveUsers: (groupSlugs: string[]) => Promise<ResolvedApprover[]>;
+}
+export interface ApprovalsPluginOptions extends BaseCorePluginOptions, CollectionPluginOptions {
+    /** Approver groups available in this deployment. */
+    groups: ApproverGroup[];
+    /** Resolver mapping group slugs to users. Required. */
+    groupResolver: GroupResolver;
+    /** Inngest client for firing approval/* events. Required. */
+    inngest: Inngest;
+    /** HMAC signing secret for action tokens. Falls back to APPROVAL_TOKEN_SECRET env var. */
+    tokenSecret?: string;
+    /** Days before a pending approval expires. Default: 7. */
+    expirationDays?: number;
+    /** Override the approvals collection slug. Default: 'approvals'. */
+    collectionSlug?: string;
+    /** Override the users collection slug used for approver/requester relationships. Default: 'users'. */
+    usersSlug?: string;
+    /** Public base URL used to build inline action links. Defaults to NEXT_PUBLIC_SERVER_URL. */
+    publicUrl?: string;
+    /**
+     * Where to put this server's MCP tools so Payload's own MCP plugin can serve
+     * them.
+     *
+     * `createMcpToolCollector()` from `@forumone/throughline`. The host hands
+     * its array to `@payloadcms/plugin-mcp` at config time and this plugin fills
+     * it at `onInit` — which is the first moment the tools can exist, since they
+     * close over `payload`, and still before any request reads the array.
+     *
+     * Omit it and nothing changes: this server keeps its own `/mcp` endpoint,
+     * which is what lets a host move one server at a time.
+     */
+    mcpTools?: McpToolCollector;
+}
+/**
+ * What `approvalsPlugin` reads from the environment when the matching option is
+ * omitted, and refuses to start without. Hand it to `assertEnvironment` from
+ * `@forumone/throughline` so a site reports it with everything else.
+ *
+ * Leave it out if you pass `tokenSecret` yourself. `NEXT_PUBLIC_SERVER_URL`
+ * (the `publicUrl` fallback) is not here: the plugin does not refuse to start
+ * without it, so it is the site's to require.
+ */
+export declare const approvalsEnv: readonly EnvRequirement[];
+/**
+ * Validates options at load time and resolves the token secret. Throws with
+ * a targeted error on each obvious misconfiguration.
+ */
+export declare function validateOptions(options: ApprovalsPluginOptions): ApprovalsPluginOptions & {
+    tokenSecret: string;
+};
+//# sourceMappingURL=options.d.ts.map

package/dist/approvals/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../src/approvals/options.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACxE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAE/D,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAA;IACZ,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAA;IACZ,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAA;CACpE;AAED,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB,EAAE,uBAAuB;IAC5F,oDAAoD;IACpD,MAAM,EAAE,aAAa,EAAE,CAAA;IACvB,uDAAuD;IACvD,aAAa,EAAE,aAAa,CAAA;IAC5B,6DAA6D;IAC7D,OAAO,EAAE,OAAO,CAAA;IAChB,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,oEAAoE;IACpE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,sGAAsG;IACtG,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,6FAA6F;IAC7F,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,EAAE,gBAAgB,CAAA;CAC5B;AAWD;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,EAAE,SAAS,cAAc,EAAuB,CAAA;AAEzE;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,sBAAsB,GAC9B,sBAAsB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CA6BlD"}

package/dist/approvals/options.js

@@ -0,0 +1,47 @@
+import { checkEnvValue } from '../env/index.js';
+const TOKEN_SECRET_ENV = {
+    name: 'APPROVAL_TOKEN_SECRET',
+    minLength: 32,
+    why: 'Signs the approve/decline links in approval emails; approvalsPlugin will not start ' +
+        'without it. Generate with `openssl rand -base64 48`. Changing it invalidates links ' +
+        'already sent.',
+};
+/**
+ * What `approvalsPlugin` reads from the environment when the matching option is
+ * omitted, and refuses to start without. Hand it to `assertEnvironment` from
+ * `@forumone/throughline` so a site reports it with everything else.
+ *
+ * Leave it out if you pass `tokenSecret` yourself. `NEXT_PUBLIC_SERVER_URL`
+ * (the `publicUrl` fallback) is not here: the plugin does not refuse to start
+ * without it, so it is the site's to require.
+ */
+export const approvalsEnv = [TOKEN_SECRET_ENV];
+/**
+ * Validates options at load time and resolves the token secret. Throws with
+ * a targeted error on each obvious misconfiguration.
+ */
+export function validateOptions(options) {
+    if (!options.groups || options.groups.length === 0) {
+        throw new Error('approvalsPlugin requires at least one group in options.groups');
+    }
+    if (!options.groupResolver) {
+        throw new Error('approvalsPlugin requires a groupResolver in options');
+    }
+    if (!options.inngest) {
+        throw new Error('approvalsPlugin requires an Inngest client in options.inngest');
+    }
+    // The backstop for a site that does not call `assertEnvironment`, driven by
+    // the same declaration it would have passed.
+    const secret = options.tokenSecret ?? process.env[TOKEN_SECRET_ENV.name];
+    if (secret === undefined || checkEnvValue(TOKEN_SECRET_ENV, secret)) {
+        throw new Error(`approvalsPlugin requires a tokenSecret in options or an ${TOKEN_SECRET_ENV.name} env var (${TOKEN_SECRET_ENV.minLength}+ characters)`);
+    }
+    // Group slugs must be unique.
+    const slugs = options.groups.map((g) => g.slug);
+    const dupes = slugs.filter((s, i) => slugs.indexOf(s) !== i);
+    if (dupes.length > 0) {
+        throw new Error(`approvalsPlugin: duplicate group slug${dupes.length === 1 ? '' : 's'}: ${dupes.join(', ')}`);
+    }
+    return { ...options, tokenSecret: secret };
+}
+//# sourceMappingURL=options.js.map

package/dist/approvals/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../src/approvals/options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAiE/C,MAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,uBAAuB;IAC7B,SAAS,EAAE,EAAE;IACb,GAAG,EACD,qFAAqF;QACrF,qFAAqF;QACrF,eAAe;CACgB,CAAA;AAEnC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAA8B,CAAC,gBAAgB,CAAC,CAAA;AAEzE;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA+B;IAE/B,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;IAClF,CAAC;IACD,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACxE,IAAI,MAAM,KAAK,SAAS,IAAI,aAAa,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,2DAA2D,gBAAgB,CAAC,IAAI,aAAa,gBAAgB,CAAC,SAAS,eAAe,CACvI,CAAA;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,wCAAwC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7F,CAAA;IACH,CAAC;IAED,OAAO,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAA;AAC5C,CAAC"}

package/dist/approvals/plugin.d.ts

@@ -0,0 +1,4 @@
+import type { CorePlugin } from '../plugin-contract/index.js';
+import { type ApprovalsPluginOptions } from './options.js';
+export declare const approvalsPlugin: CorePlugin<ApprovalsPluginOptions>;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/approvals/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/approvals/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAI7D,OAAO,EAAE,KAAK,sBAAsB,EAAmB,MAAM,cAAc,CAAA;AAiB3E,eAAO,MAAM,eAAe,EAAE,UAAU,CAAC,sBAAsB,CA2F5D,CAAA"}