@happyvertical/smrt-approvals 0.0.0-stage → 0.55.11

package/dist/types.d.ts

@@ -0,0 +1,136 @@
+/**
+ * Public vocabulary of `@happyvertical/smrt-approvals`: statuses, event
+ * types, principals, kind definitions, and the typed transition results.
+ *
+ * @packageDocumentation
+ */
+/** Every status an {@link ApprovalRequest} can hold. */
+export declare const APPROVAL_STATUSES: readonly ["pending", "approved", "rejected", "changes_requested", "cancelled", "expired"];
+/** Lifecycle status of an approval request. */
+export type ApprovalStatus = (typeof APPROVAL_STATUSES)[number];
+/** Every event type the append-only ledger records. */
+export declare const APPROVAL_EVENT_TYPES: readonly ["created", "approved", "rejected", "changes_requested", "cancelled", "expired", "consumed"];
+/** Type of an {@link ApprovalEvent} row. */
+export type ApprovalEventType = (typeof APPROVAL_EVENT_TYPES)[number];
+/** A decider's verdict. */
+export type ApprovalDecision = 'approve' | 'reject' | 'request_changes';
+/**
+ * What kind of actor a principal is. Only `human` principals may decide;
+ * `agent` (an autonomous principal: persona, assistant, worker) and
+ * `service` (a job or integration) may request, consume, and expire.
+ */
+export type ApprovalPrincipalType = 'human' | 'agent' | 'service';
+/** Every principal type, for validation. */
+export declare const APPROVAL_PRINCIPAL_TYPES: readonly ApprovalPrincipalType[];
+/**
+ * An actor whose authority is a set of permission slugs resolved for ONE
+ * tenant (the `principal.can(slug)` idiom shared with personas and support).
+ * Build it from `PermissionResolver.resolvePermissions(userId, tenantId)` in
+ * production; tests use {@link approvalPrincipalFromPermissions}.
+ */
+export interface ApprovalPrincipal {
+    /** Stable actor id recorded on events (a user or profile id). */
+    readonly id: string;
+    /** The tenant the permissions were resolved for. Required. */
+    readonly tenantId: string;
+    /** Actor type. Only `human` may approve, reject, or request changes. */
+    readonly type: ApprovalPrincipalType;
+    /** Whether this actor holds the permission slug in {@link tenantId}. */
+    can(slug: string): boolean;
+}
+/** Build an {@link ApprovalPrincipal} from an explicit set of granted slugs. */
+export declare function approvalPrincipalFromPermissions(permissions: Iterable<string>, options: {
+    id: string;
+    tenantId: string;
+    type: ApprovalPrincipalType;
+}): ApprovalPrincipal;
+/** Package defaults a kind declares; tenant policy may only tighten them. */
+export interface ApprovalKindDefaults {
+    /** Distinct approvers needed. Integer, 1-25. Default 1. */
+    requiredApprovals?: number;
+    /** Lifetime of a request in milliseconds. Default seven days. */
+    ttlMs?: number;
+}
+/** Input to {@link defineApprovalKind}. */
+export interface ApprovalKindInput {
+    /** Dotted, lower-case key, e.g. `social.post.publish`. Unique per process. */
+    key: string;
+    /** Qualified subject class, e.g. `@happyvertical/smrt-social:SocialPost`. */
+    subject: string;
+    /** Permission slug a principal must hold to decide a request of this kind. */
+    permission: string;
+    /** Package defaults. */
+    defaults?: ApprovalKindDefaults;
+}
+/** A registered, normalized approval kind. */
+export interface ApprovalKind {
+    readonly key: string;
+    readonly subject: string;
+    readonly permission: string;
+    readonly defaults: Readonly<Required<ApprovalKindDefaults>>;
+}
+/** The effective rules for one request: kind defaults tightened by policy. */
+export interface EffectiveApprovalRules {
+    requiredApprovals: number;
+    ttlMs: number;
+    /** Every slug a decider must hold (the kind's, plus policy additions). */
+    requiredPermissions: string[];
+}
+/** Why a transition was refused. */
+export type ApprovalRefusalReason = 
+/** No request with that id in the principal's tenant (or malformed id). */
+'not_found'
+/** The principal's tenant does not match the active tenant context. */
+ | 'tenant_mismatch'
+/** The request is not in a status this transition accepts. */
+ | 'not_pending'
+/** The request's expiry has passed. */
+ | 'expired'
+/** The requester tried to decide their own request. */
+ | 'self_approval'
+/** A non-human principal tried to decide. */
+ | 'not_human'
+/** The principal lacks a required permission. */
+ | 'forbidden'
+/** This principal already recorded a decision on the request. */
+ | 'already_decided'
+/** `consume` was called with a different subject revision hash. */
+ | 'revision_mismatch'
+/** The request row says approved but its event ledger does not. */
+ | 'unbacked_approval'
+/** The approval was already consumed. */
+ | 'already_consumed'
+/** The request is not approved (consume) or not yet expired (expire). */
+ | 'not_approved' | 'not_expired'
+/** A `requestKey` was reused for a different subject or revision. */
+ | 'request_key_conflict'
+/** Concurrent transitions kept winning; retry later. */
+ | 'contention';
+/** Outcome of a transition. */
+export type ApprovalTransitionOutcome = 
+/** This call performed the transition. */
+'transitioned'
+/** The same request already existed (idempotent `requestKey` replay). */
+ | 'already_applied'
+/** Fail-closed; see `refusal`. */
+ | 'refused';
+/** Result of every {@link ApprovalService} transition. */
+export interface ApprovalTransitionResult<T = unknown> {
+    outcome: ApprovalTransitionOutcome;
+    /** The request re-read after commit; `null` when refused as not found. */
+    request: T | null;
+    /** Set exactly when `outcome` is `refused`. */
+    refusal?: {
+        reason: ApprovalRefusalReason;
+        detail: string;
+    };
+}
+/** Typed error for invalid input (programming errors, not refusals). */
+export declare class ApprovalError extends Error {
+    /** Machine-readable code. */
+    readonly code: ApprovalErrorCode;
+    constructor(code: ApprovalErrorCode, message: string);
+}
+/** Codes carried by {@link ApprovalError}. */
+export type ApprovalErrorCode = 'APPROVAL_INVALID' | 'APPROVAL_KIND_UNKNOWN' | 'APPROVAL_KIND_CONFLICT' | 'APPROVAL_POLICY_LOOSENS' | 'APPROVAL_FORBIDDEN' | 'APPROVAL_NO_TRANSACTION';
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wDAAwD;AACxD,eAAO,MAAM,iBAAiB,2FAOpB,CAAC;AAEX,+CAA+C;AAC/C,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,uDAAuD;AACvD,eAAO,MAAM,oBAAoB,uGAQvB,CAAC;AAEX,4CAA4C;AAC5C,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,2BAA2B;AAC3B,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,QAAQ,GAAG,iBAAiB,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAElE,4CAA4C;AAC5C,eAAO,MAAM,wBAAwB,EAAE,SAAS,qBAAqB,EAIpE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,iEAAiE;IACjE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,wEAAwE;IACxE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5B;AAED,gFAAgF;AAChF,wBAAgB,gCAAgC,CAC9C,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,EAC7B,OAAO,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,qBAAqB,CAAA;CAAE,GACrE,iBAAiB,CAQnB;AAED,6EAA6E;AAC7E,MAAM,WAAW,oBAAoB;IACnC,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,2CAA2C;AAC3C,MAAM,WAAW,iBAAiB;IAChC,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC;AAED,8CAA8C;AAC9C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC;CAC7D;AAED,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,oCAAoC;AACpC,MAAM,MAAM,qBAAqB;AAC/B,2EAA2E;AACzE,WAAW;AACb,uEAAuE;GACrE,iBAAiB;AACnB,8DAA8D;GAC5D,aAAa;AACf,uCAAuC;GACrC,SAAS;AACX,uDAAuD;GACrD,eAAe;AACjB,6CAA6C;GAC3C,WAAW;AACb,iDAAiD;GAC/C,WAAW;AACb,iEAAiE;GAC/D,iBAAiB;AACnB,mEAAmE;GACjE,mBAAmB;AACrB,mEAAmE;GACjE,mBAAmB;AACrB,yCAAyC;GACvC,kBAAkB;AACpB,yEAAyE;GACvE,cAAc,GACd,aAAa;AACf,qEAAqE;GACnE,sBAAsB;AACxB,wDAAwD;GACtD,YAAY,CAAC;AAEjB,+BAA+B;AAC/B,MAAM,MAAM,yBAAyB;AACnC,0CAA0C;AACxC,cAAc;AAChB,yEAAyE;GACvE,iBAAiB;AACnB,kCAAkC;GAChC,SAAS,CAAC;AAEd,0DAA0D;AAC1D,MAAM,WAAW,wBAAwB,CAAC,CAAC,GAAG,OAAO;IACnD,OAAO,EAAE,yBAAyB,CAAC;IACnC,0EAA0E;IAC1E,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC;IAClB,+CAA+C;IAC/C,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,qBAAqB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7D;AAED,wEAAwE;AACxE,qBAAa,aAAc,SAAQ,KAAK;IACtC,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;gBAErB,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM;CAKrD;AAED,8CAA8C;AAC9C,MAAM,MAAM,iBAAiB,GACzB,kBAAkB,GAClB,uBAAuB,GACvB,wBAAwB,GACxB,yBAAyB,GACzB,oBAAoB,GACpB,yBAAyB,CAAC"}

package/dist/types.js

@@ -0,0 +1,45 @@
+//#region src/types.ts
+var APPROVAL_STATUSES = [
+	"pending",
+	"approved",
+	"rejected",
+	"changes_requested",
+	"cancelled",
+	"expired"
+];
+var APPROVAL_EVENT_TYPES = [
+	"created",
+	"approved",
+	"rejected",
+	"changes_requested",
+	"cancelled",
+	"expired",
+	"consumed"
+];
+var APPROVAL_PRINCIPAL_TYPES = [
+	"human",
+	"agent",
+	"service"
+];
+function approvalPrincipalFromPermissions(permissions, options) {
+	const granted = new Set(permissions);
+	return {
+		id: options.id,
+		tenantId: options.tenantId,
+		type: options.type,
+		can: (slug) => granted.has(slug)
+	};
+}
+var ApprovalError = class extends Error {
+	/** Machine-readable code. */
+	code;
+	constructor(code, message) {
+		super(message);
+		this.name = "ApprovalError";
+		this.code = code;
+	}
+};
+//#endregion
+export { APPROVAL_EVENT_TYPES, APPROVAL_PRINCIPAL_TYPES, APPROVAL_STATUSES, ApprovalError, approvalPrincipalFromPermissions };
+
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","names":[],"sources":["../src/types.ts"],"sourcesContent":["/**\n * Public vocabulary of `@happyvertical/smrt-approvals`: statuses, event\n * types, principals, kind definitions, and the typed transition results.\n *\n * @packageDocumentation\n */\n\n/** Every status an {@link ApprovalRequest} can hold. */\nexport const APPROVAL_STATUSES = [\n  'pending',\n  'approved',\n  'rejected',\n  'changes_requested',\n  'cancelled',\n  'expired',\n] as const;\n\n/** Lifecycle status of an approval request. */\nexport type ApprovalStatus = (typeof APPROVAL_STATUSES)[number];\n\n/** Every event type the append-only ledger records. */\nexport const APPROVAL_EVENT_TYPES = [\n  'created',\n  'approved',\n  'rejected',\n  'changes_requested',\n  'cancelled',\n  'expired',\n  'consumed',\n] as const;\n\n/** Type of an {@link ApprovalEvent} row. */\nexport type ApprovalEventType = (typeof APPROVAL_EVENT_TYPES)[number];\n\n/** A decider's verdict. */\nexport type ApprovalDecision = 'approve' | 'reject' | 'request_changes';\n\n/**\n * What kind of actor a principal is. Only `human` principals may decide;\n * `agent` (an autonomous principal: persona, assistant, worker) and\n * `service` (a job or integration) may request, consume, and expire.\n */\nexport type ApprovalPrincipalType = 'human' | 'agent' | 'service';\n\n/** Every principal type, for validation. */\nexport const APPROVAL_PRINCIPAL_TYPES: readonly ApprovalPrincipalType[] = [\n  'human',\n  'agent',\n  'service',\n];\n\n/**\n * An actor whose authority is a set of permission slugs resolved for ONE\n * tenant (the `principal.can(slug)` idiom shared with personas and support).\n * Build it from `PermissionResolver.resolvePermissions(userId, tenantId)` in\n * production; tests use {@link approvalPrincipalFromPermissions}.\n */\nexport interface ApprovalPrincipal {\n  /** Stable actor id recorded on events (a user or profile id). */\n  readonly id: string;\n  /** The tenant the permissions were resolved for. Required. */\n  readonly tenantId: string;\n  /** Actor type. Only `human` may approve, reject, or request changes. */\n  readonly type: ApprovalPrincipalType;\n  /** Whether this actor holds the permission slug in {@link tenantId}. */\n  can(slug: string): boolean;\n}\n\n/** Build an {@link ApprovalPrincipal} from an explicit set of granted slugs. */\nexport function approvalPrincipalFromPermissions(\n  permissions: Iterable<string>,\n  options: { id: string; tenantId: string; type: ApprovalPrincipalType },\n): ApprovalPrincipal {\n  const granted = new Set(permissions);\n  return {\n    id: options.id,\n    tenantId: options.tenantId,\n    type: options.type,\n    can: (slug: string) => granted.has(slug),\n  };\n}\n\n/** Package defaults a kind declares; tenant policy may only tighten them. */\nexport interface ApprovalKindDefaults {\n  /** Distinct approvers needed. Integer, 1-25. Default 1. */\n  requiredApprovals?: number;\n  /** Lifetime of a request in milliseconds. Default seven days. */\n  ttlMs?: number;\n}\n\n/** Input to {@link defineApprovalKind}. */\nexport interface ApprovalKindInput {\n  /** Dotted, lower-case key, e.g. `social.post.publish`. Unique per process. */\n  key: string;\n  /** Qualified subject class, e.g. `@happyvertical/smrt-social:SocialPost`. */\n  subject: string;\n  /** Permission slug a principal must hold to decide a request of this kind. */\n  permission: string;\n  /** Package defaults. */\n  defaults?: ApprovalKindDefaults;\n}\n\n/** A registered, normalized approval kind. */\nexport interface ApprovalKind {\n  readonly key: string;\n  readonly subject: string;\n  readonly permission: string;\n  readonly defaults: Readonly<Required<ApprovalKindDefaults>>;\n}\n\n/** The effective rules for one request: kind defaults tightened by policy. */\nexport interface EffectiveApprovalRules {\n  requiredApprovals: number;\n  ttlMs: number;\n  /** Every slug a decider must hold (the kind's, plus policy additions). */\n  requiredPermissions: string[];\n}\n\n/** Why a transition was refused. */\nexport type ApprovalRefusalReason =\n  /** No request with that id in the principal's tenant (or malformed id). */\n  | 'not_found'\n  /** The principal's tenant does not match the active tenant context. */\n  | 'tenant_mismatch'\n  /** The request is not in a status this transition accepts. */\n  | 'not_pending'\n  /** The request's expiry has passed. */\n  | 'expired'\n  /** The requester tried to decide their own request. */\n  | 'self_approval'\n  /** A non-human principal tried to decide. */\n  | 'not_human'\n  /** The principal lacks a required permission. */\n  | 'forbidden'\n  /** This principal already recorded a decision on the request. */\n  | 'already_decided'\n  /** `consume` was called with a different subject revision hash. */\n  | 'revision_mismatch'\n  /** The request row says approved but its event ledger does not. */\n  | 'unbacked_approval'\n  /** The approval was already consumed. */\n  | 'already_consumed'\n  /** The request is not approved (consume) or not yet expired (expire). */\n  | 'not_approved'\n  | 'not_expired'\n  /** A `requestKey` was reused for a different subject or revision. */\n  | 'request_key_conflict'\n  /** Concurrent transitions kept winning; retry later. */\n  | 'contention';\n\n/** Outcome of a transition. */\nexport type ApprovalTransitionOutcome =\n  /** This call performed the transition. */\n  | 'transitioned'\n  /** The same request already existed (idempotent `requestKey` replay). */\n  | 'already_applied'\n  /** Fail-closed; see `refusal`. */\n  | 'refused';\n\n/** Result of every {@link ApprovalService} transition. */\nexport interface ApprovalTransitionResult<T = unknown> {\n  outcome: ApprovalTransitionOutcome;\n  /** The request re-read after commit; `null` when refused as not found. */\n  request: T | null;\n  /** Set exactly when `outcome` is `refused`. */\n  refusal?: { reason: ApprovalRefusalReason; detail: string };\n}\n\n/** Typed error for invalid input (programming errors, not refusals). */\nexport class ApprovalError extends Error {\n  /** Machine-readable code. */\n  readonly code: ApprovalErrorCode;\n\n  constructor(code: ApprovalErrorCode, message: string) {\n    super(message);\n    this.name = 'ApprovalError';\n    this.code = code;\n  }\n}\n\n/** Codes carried by {@link ApprovalError}. */\nexport type ApprovalErrorCode =\n  | 'APPROVAL_INVALID'\n  | 'APPROVAL_KIND_UNKNOWN'\n  | 'APPROVAL_KIND_CONFLICT'\n  | 'APPROVAL_POLICY_LOOSENS'\n  | 'APPROVAL_FORBIDDEN'\n  | 'APPROVAL_NO_TRANSACTION';\n"],"mappings":";AAQO,IAAM,oBAAoB;CAC/B;CACA;CACA;CACA;CACA;CACA;AACF;AAMO,IAAM,uBAAuB;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAgBO,IAAM,2BAA6D;CACxE;CACA;CACA;AACF;AAoBO,SAAS,iCACd,aACA,SACmB;CACnB,MAAM,UAAU,IAAI,IAAI,WAAW;CACnC,OAAO;EACL,IAAI,QAAQ;EACZ,UAAU,QAAQ;EAClB,MAAM,QAAQ;EACd,MAAM,SAAiB,QAAQ,IAAI,IAAI;CACzC;AACF;AAyFO,IAAM,gBAAN,cAA4B,MAAM;;CAE9B;CAET,YAAY,MAAyB,SAAiB;EACpD,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,OAAO;CACd;AACF"}

package/dist/write-capability.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Service-only write capability for approval requests and events.
+ *
+ * `ApprovalRequest` and `ApprovalEvent` rows are inserted only by
+ * `ApprovalService`. The service passes {@link SERVICE_WRITE} as a
+ * constructor option; the models record the instance here and refuse any
+ * insert that does not carry it. A symbol key can never arrive from JSON
+ * (REST body, MCP tool arguments) and this module is not part of the
+ * package's public exports, so `new ApprovalRequest({ status: 'approved' })`,
+ * `ApprovalRequestCollection.create(...)`, or a forged `approved` event are
+ * all refused at the model layer (the `runtime-report.ts` pattern in
+ * smrt-reports). This is an in-process API guard, not a defence against raw
+ * SQL; `consume()` additionally re-checks the ledger.
+ *
+ * @internal
+ * @packageDocumentation
+ */
+/** Constructor-option key carrying the capability. Never exported publicly. */
+export declare const SERVICE_WRITE: unique symbol;
+/** Constructor options fragment that grants the capability. */
+export declare function serviceWriteOption(): {
+    [SERVICE_WRITE]: object;
+};
+/** Record `instance` as service-minted when its options carry the token. */
+export declare function adoptServiceWrite(instance: object, options: unknown): void;
+/** Whether `instance` was minted by the service for insertion. */
+export declare function hasServiceWrite(instance: object): boolean;
+//# sourceMappingURL=write-capability.d.ts.map

package/dist/write-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-capability.d.ts","sourceRoot":"","sources":["../src/write-capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,aAAa,eAAwC,CAAC;AAQnE,+DAA+D;AAC/D,wBAAgB,kBAAkB,IAAI;IAAE,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,CAEhE;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAQ1E;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzD"}

package/package.json

@@ -1,6 +1,67 @@
 {
   "name": "@happyvertical/smrt-approvals",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.55.11",
+  "description": "Approval decision gate for the SMRT framework: revision-bound, single-use approvals with quorum, expiry, and an append-only event ledger",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "CLAUDE.md",
+    "AGENTS.md",
+    "agents"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./manifest": "./dist/manifest.json",
+    "./manifest.json": "./dist/manifest.json"
+  },
+  "dependencies": {
+    "@happyvertical/smrt-core": "0.55.11",
+    "@happyvertical/smrt-tenancy": "0.55.11",
+    "@happyvertical/smrt-users": "0.55.11",
+    "@happyvertical/sql": "^0.103.1"
+  },
+  "devDependencies": {
+    "@happyvertical/smrt-vitest": "0.55.11",
+    "@types/node": "24.13.6",
+    "typescript": "6.0.3",
+    "vite": "8.1.4",
+    "vitest": "4.1.10"
+  },
+  "smrtJsdoc": "strict",
+  "smrtRawPrimitives": "strict",
+  "keywords": [
+    "smrt",
+    "approvals",
+    "workflow",
+    "quorum",
+    "audit",
+    "multi-tenant"
+  ],
+  "author": "HappyVertical",
+  "license": "MIT",
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/happyvertical/smrt.git",
+    "directory": "packages/approvals"
+  },
+  "scripts": {
+    "build": "vite build --mode library",
+    "build:watch": "vite build --mode library --watch",
+    "clean": "rm -rf dist",
+    "dev": "vite build --mode library --watch",
+    "test": "vitest run",
+    "test:postgres": "node ../../scripts/run-with-ci-postgres.mjs -- pnpm exec vitest run optional.test.ts",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.test.json",
+    "verify:pack": "node ../../scripts/verify-package-types-exports.js ."
+  }
 }