@plumbus/core 0.7.1 → 0.8.0-beta.1

package/dist/approvals/service.js

@@ -0,0 +1,240 @@
+import { randomUUID } from 'node:crypto';
+import { ActionRiskTier, ReviewMandateReason } from './action-risk.js';
+import { requireHumanActor } from './actors.js';
+import { createAllowAllAuthorizationProvider } from './authorization.js';
+import { digestApprovalInput } from './digest.js';
+import { createSqlApprovalStore } from './sql-store.js';
+import { ApprovalRequestState, HUMAN_TASK_CONTRACT_VERSION, HumanTaskState, } from './types.js';
+function toIso(value) {
+    return typeof value === 'string' ? new Date(value).toISOString() : value.toISOString();
+}
+function isPast(expiresAt, now) {
+    return new Date(expiresAt).getTime() <= now.getTime();
+}
+function resolveStore(config) {
+    if (config.store) {
+        return config.store;
+    }
+    if (config.db) {
+        return createSqlApprovalStore({ db: config.db, schemaName: config.schemaName });
+    }
+    throw new Error('createApprovalService requires store or db');
+}
+export function createApprovalService(config) {
+    const store = resolveStore(config);
+    const authorization = config.authorization ?? createAllowAllAuthorizationProvider();
+    const nowFn = config.now ?? (() => new Date());
+    const idFn = config.id ?? (() => randomUUID());
+    async function persistRequest(row) {
+        await store.putRequest(row);
+        return { ...row };
+    }
+    async function expireIfNeeded(row, now) {
+        if (row.state === ApprovalRequestState.Pending && isPast(row.expiresAt, now)) {
+            return persistRequest({
+                ...row,
+                state: ApprovalRequestState.Expired,
+                updatedAt: now.toISOString(),
+                resolvedAt: now.toISOString(),
+            });
+        }
+        if (row.state === ApprovalRequestState.Approved && isPast(row.expiresAt, now)) {
+            return persistRequest({
+                ...row,
+                state: ApprovalRequestState.Expired,
+                updatedAt: now.toISOString(),
+                resolvedAt: row.resolvedAt ?? now.toISOString(),
+            });
+        }
+        return row;
+    }
+    async function invalidateMaterialChanges(capabilityId, definitionVersion, inputDigest, now) {
+        for (const existing of await store.listRequests()) {
+            if (existing.capabilityId !== capabilityId)
+                continue;
+            if (existing.inputDigest === inputDigest &&
+                existing.definitionVersion === definitionVersion) {
+                continue;
+            }
+            const sameCapability = existing.capabilityId === capabilityId &&
+                (existing.definitionVersion !== definitionVersion || existing.inputDigest !== inputDigest);
+            if (!sameCapability)
+                continue;
+            if (existing.state !== ApprovalRequestState.Pending &&
+                existing.state !== ApprovalRequestState.Approved) {
+                continue;
+            }
+            await persistRequest({
+                ...existing,
+                state: ApprovalRequestState.Invalidated,
+                updatedAt: now.toISOString(),
+                resolvedAt: now.toISOString(),
+                invalidatedReason: 'material-change',
+            });
+        }
+    }
+    return {
+        async requestApproval(input) {
+            // A prohibited action cannot be proposed for approval: creating the
+            // request must not make the action permissible.
+            if (input.riskClass === ActionRiskTier.Prohibited) {
+                throw new Error(`Approval cannot be requested for prohibited capability "${input.capabilityId}"`);
+            }
+            const now = nowFn();
+            const inputDigest = digestApprovalInput(input.input);
+            await invalidateMaterialChanges(input.capabilityId, input.definitionVersion, inputDigest, now);
+            const createdAt = now.toISOString();
+            const row = {
+                contractVersion: HUMAN_TASK_CONTRACT_VERSION,
+                approvalRequestId: idFn(),
+                capabilityId: input.capabilityId,
+                definitionVersion: input.definitionVersion,
+                inputDigest,
+                riskClass: input.riskClass,
+                reviewReason: input.reviewReason ?? ReviewMandateReason.RiskTier,
+                state: ApprovalRequestState.Pending,
+                executionId: input.executionId,
+                createdAt,
+                expiresAt: toIso(input.expiresAt),
+                updatedAt: createdAt,
+            };
+            return persistRequest(row);
+        },
+        async decide(input) {
+            requireHumanActor(input.auth, 'Approval decision');
+            const now = nowFn();
+            const existing = await store.getRequest(input.requestId);
+            if (!existing) {
+                throw new Error(`Approval request "${input.requestId}" not found`);
+            }
+            const current = await expireIfNeeded(existing, now);
+            if (current.state !== ApprovalRequestState.Pending) {
+                throw new Error(`Approval request "${input.requestId}" is ${current.state}`);
+            }
+            if (input.outcome === 'approved') {
+                const check = await authorization.revalidate({
+                    auth: input.auth,
+                    capabilityId: current.capabilityId,
+                    request: current,
+                });
+                if (!check.allowed) {
+                    throw new Error(check.reason ?? 'authorization revalidation denied');
+                }
+            }
+            const decidedAt = now.toISOString();
+            await store.putDecision({
+                contractVersion: HUMAN_TASK_CONTRACT_VERSION,
+                approvalDecisionId: idFn(),
+                approvalRequestId: current.approvalRequestId,
+                approverAccountId: input.auth.userId,
+                decision: input.outcome,
+                decidedAt,
+            });
+            return persistRequest({
+                ...current,
+                state: input.outcome,
+                updatedAt: decidedAt,
+                resolvedAt: decidedAt,
+            });
+        },
+        async findByExecutionId(executionId) {
+            const matches = (await store.listRequests())
+                .filter((row) => row.executionId === executionId)
+                .sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
+            return matches[0];
+        },
+        async findMatchingApproval(binding) {
+            const now = binding.now ?? nowFn();
+            let match;
+            let expired;
+            for (const row of await store.listRequests()) {
+                if (row.capabilityId !== binding.capabilityId)
+                    continue;
+                if (row.definitionVersion !== binding.definitionVersion)
+                    continue;
+                if (row.inputDigest !== binding.inputDigest)
+                    continue;
+                const current = await expireIfNeeded(row, now);
+                if (current.state === ApprovalRequestState.Approved) {
+                    match = current;
+                }
+                else if (current.state === ApprovalRequestState.Expired) {
+                    expired = current;
+                }
+            }
+            return match ?? expired;
+        },
+        async findConflictingApproval(binding) {
+            const now = binding.now ?? nowFn();
+            for (const row of await store.listRequests()) {
+                if (row.capabilityId !== binding.capabilityId)
+                    continue;
+                const current = await expireIfNeeded(row, now);
+                if (current.state !== ApprovalRequestState.Pending &&
+                    current.state !== ApprovalRequestState.Approved) {
+                    continue;
+                }
+                if (current.definitionVersion !== binding.definitionVersion ||
+                    current.inputDigest !== binding.inputDigest) {
+                    return current;
+                }
+            }
+            return undefined;
+        },
+        async invalidateOnMaterialChange(binding) {
+            const now = binding.now ?? nowFn();
+            const before = await store.listRequests();
+            await invalidateMaterialChanges(binding.capabilityId, binding.definitionVersion, binding.inputDigest, now);
+            return (await store.listRequests()).filter((row) => row.state === ApprovalRequestState.Invalidated &&
+                !before.find((prior) => prior.approvalRequestId === row.approvalRequestId &&
+                    prior.state === ApprovalRequestState.Invalidated));
+        },
+        async createHumanTask(input) {
+            const now = nowFn();
+            const createdAt = now.toISOString();
+            const row = {
+                contractVersion: HUMAN_TASK_CONTRACT_VERSION,
+                humanTaskId: idFn(),
+                kind: input.kind,
+                state: HumanTaskState.Open,
+                approvalRequestId: input.approvalRequestId,
+                executionId: input.executionId,
+                createdAt,
+                expiresAt: toIso(input.expiresAt),
+                updatedAt: createdAt,
+            };
+            await store.putTask(row);
+            return { ...row };
+        },
+        async completeHumanTask(input) {
+            requireHumanActor(input.auth, 'Human task completion');
+            const now = nowFn();
+            const existing = await store.getTask(input.taskId);
+            if (!existing) {
+                throw new Error(`Human task "${input.taskId}" not found`);
+            }
+            if (existing.state !== HumanTaskState.Open && existing.state !== HumanTaskState.Claimed) {
+                throw new Error(`Human task "${input.taskId}" is ${existing.state}`);
+            }
+            if (isPast(existing.expiresAt, now)) {
+                const expired = {
+                    ...existing,
+                    state: HumanTaskState.Expired,
+                    updatedAt: now.toISOString(),
+                    resolvedAt: now.toISOString(),
+                };
+                await store.putTask(expired);
+                throw new Error(`Human task "${input.taskId}" is expired`);
+            }
+            const completed = {
+                ...existing,
+                state: HumanTaskState.Completed,
+                updatedAt: now.toISOString(),
+                resolvedAt: now.toISOString(),
+            };
+            await store.putTask(completed);
+            return { ...completed };
+        },
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/approvals/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/approvals/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,mCAAmC,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAyB,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,cAAc,GASf,MAAM,YAAY,CAAC;AAgBpB,SAAS,KAAK,CAAC,KAAoB;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,MAAM,CAAC,SAAiB,EAAE,GAAS;IAC1C,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CAAC,MAA6B;IACjD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IACD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,sBAAsB,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,mCAAmC,EAAE,CAAC;IACpF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;IAE/C,KAAK,UAAU,cAAc,CAAC,GAA0B;QACtD,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;IACpB,CAAC;IAED,KAAK,UAAU,cAAc,CAC3B,GAA0B,EAC1B,GAAS;QAET,IAAI,GAAG,CAAC,KAAK,KAAK,oBAAoB,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7E,OAAO,cAAc,CAAC;gBACpB,GAAG,GAAG;gBACN,KAAK,EAAE,oBAAoB,CAAC,OAAO;gBACnC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;gBAC5B,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;aAC9B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,KAAK,oBAAoB,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;YAC9E,OAAO,cAAc,CAAC;gBACpB,GAAG,GAAG;gBACN,KAAK,EAAE,oBAAoB,CAAC,OAAO;gBACnC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;gBAC5B,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,WAAW,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,UAAU,yBAAyB,CACtC,YAAoB,EACpB,iBAAyB,EACzB,WAAmB,EACnB,GAAS;QAET,KAAK,MAAM,QAAQ,IAAI,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;YAClD,IAAI,QAAQ,CAAC,YAAY,KAAK,YAAY;gBAAE,SAAS;YACrD,IACE,QAAQ,CAAC,WAAW,KAAK,WAAW;gBACpC,QAAQ,CAAC,iBAAiB,KAAK,iBAAiB,EAChD,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,cAAc,GAClB,QAAQ,CAAC,YAAY,KAAK,YAAY;gBACtC,CAAC,QAAQ,CAAC,iBAAiB,KAAK,iBAAiB,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;YAC7F,IAAI,CAAC,cAAc;gBAAE,SAAS;YAC9B,IACE,QAAQ,CAAC,KAAK,KAAK,oBAAoB,CAAC,OAAO;gBAC/C,QAAQ,CAAC,KAAK,KAAK,oBAAoB,CAAC,QAAQ,EAChD,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,cAAc,CAAC;gBACnB,GAAG,QAAQ;gBACX,KAAK,EAAE,oBAAoB,CAAC,WAAW;gBACvC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;gBAC5B,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;gBAC7B,iBAAiB,EAAE,iBAAiB;aACrC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,eAAe,CAAC,KAA2B;YAC/C,oEAAoE;YACpE,gDAAgD;YAChD,IAAI,KAAK,CAAC,SAAS,KAAK,cAAc,CAAC,UAAU,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CACb,2DAA2D,KAAK,CAAC,YAAY,GAAG,CACjF,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,yBAAyB,CAC7B,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,iBAAiB,EACvB,WAAW,EACX,GAAG,CACJ,CAAC;YACF,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,GAAG,GAA0B;gBACjC,eAAe,EAAE,2BAA2B;gBAC5C,iBAAiB,EAAE,IAAI,EAAE;gBACzB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,WAAW;gBACX,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,mBAAmB,CAAC,QAAQ;gBAChE,KAAK,EAAE,oBAAoB,CAAC,OAAO;gBACnC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,SAAS;gBACT,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;gBACjC,SAAS,EAAE,SAAS;aACrB,CAAC;YACF,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAA0B;YACrC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,CAAC,SAAS,aAAa,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACpD,IAAI,OAAO,CAAC,KAAK,KAAK,oBAAoB,CAAC,OAAO,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,CAAC,SAAS,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC;oBAC3C,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,mCAAmC,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,KAAK,CAAC,WAAW,CAAC;gBACtB,eAAe,EAAE,2BAA2B;gBAC5C,kBAAkB,EAAE,IAAI,EAAE;gBAC1B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC5C,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,MAAgB;gBAC9C,QAAQ,EAAE,KAAK,CAAC,OAAO;gBACvB,SAAS;aACV,CAAC,CAAC;YAEH,OAAO,cAAc,CAAC;gBACpB,GAAG,OAAO;gBACV,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,SAAS,EAAE,SAAS;gBACpB,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,WAAmB;YACzC,MAAM,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,YAAY,EAAE,CAAC;iBACzC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,WAAW,CAAC;iBAChD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1D,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,OAAO;YAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;YACnC,IAAI,KAAwC,CAAC;YAC7C,IAAI,OAA0C,CAAC;YAC/C,KAAK,MAAM,GAAG,IAAI,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7C,IAAI,GAAG,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;oBAAE,SAAS;gBACxD,IAAI,GAAG,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB;oBAAE,SAAS;gBAClE,IAAI,GAAG,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;oBAAE,SAAS;gBACtD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC/C,IAAI,OAAO,CAAC,KAAK,KAAK,oBAAoB,CAAC,QAAQ,EAAE,CAAC;oBACpD,KAAK,GAAG,OAAO,CAAC;gBAClB,CAAC;qBAAM,IAAI,OAAO,CAAC,KAAK,KAAK,oBAAoB,CAAC,OAAO,EAAE,CAAC;oBAC1D,OAAO,GAAG,OAAO,CAAC;gBACpB,CAAC;YACH,CAAC;YACD,OAAO,KAAK,IAAI,OAAO,CAAC;QAC1B,CAAC;QAED,KAAK,CAAC,uBAAuB,CAAC,OAAO;YACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;YACnC,KAAK,MAAM,GAAG,IAAI,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7C,IAAI,GAAG,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;oBAAE,SAAS;gBACxD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC/C,IACE,OAAO,CAAC,KAAK,KAAK,oBAAoB,CAAC,OAAO;oBAC9C,OAAO,CAAC,KAAK,KAAK,oBAAoB,CAAC,QAAQ,EAC/C,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IACE,OAAO,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB;oBACvD,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAC3C,CAAC;oBACD,OAAO,OAAO,CAAC;gBACjB,CAAC;YACH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,KAAK,CAAC,0BAA0B,CAAC,OAAO;YACtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,CAAC;YAC1C,MAAM,yBAAyB,CAC7B,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,WAAW,EACnB,GAAG,CACJ,CAAC;YACF,OAAO,CAAC,MAAM,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CACxC,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,KAAK,KAAK,oBAAoB,CAAC,WAAW;gBAC9C,CAAC,MAAM,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,iBAAiB,KAAK,GAAG,CAAC,iBAAiB;oBACjD,KAAK,CAAC,KAAK,KAAK,oBAAoB,CAAC,WAAW,CACnD,CACJ,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,KAA2B;YAC/C,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG;gBACV,eAAe,EAAE,2BAA2B;gBAC5C,WAAW,EAAE,IAAI,EAAE;gBACnB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,cAAc,CAAC,IAAI;gBAC1B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,SAAS;gBACT,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;gBACjC,SAAS,EAAE,SAAS;aACrB,CAAC;YACF,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,KAAK;YAC3B,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC,MAAM,aAAa,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,QAAQ,CAAC,KAAK,KAAK,cAAc,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;gBACxF,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC,MAAM,QAAQ,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG;oBACd,GAAG,QAAQ;oBACX,KAAK,EAAE,cAAc,CAAC,OAAO;oBAC7B,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;oBAC5B,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;iBAC9B,CAAC;gBACF,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC,MAAM,cAAc,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,SAAS,GAAG;gBAChB,GAAG,QAAQ;gBACX,KAAK,EAAE,cAAc,CAAC,SAAS;gBAC/B,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;gBAC5B,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;aAC9B,CAAC;YACF,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/B,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/approvals/sql-store.d.ts

@@ -0,0 +1,9 @@
+import type { PostgresJsDatabase } from 'drizzle-orm/postgres-js';
+import { type ApprovalStore } from './types.js';
+export type ApprovalDbHandle = PostgresJsDatabase | (() => PostgresJsDatabase | Promise<PostgresJsDatabase>);
+export interface SqlApprovalStoreConfig {
+    db: ApprovalDbHandle;
+    schemaName?: string;
+}
+export declare function createSqlApprovalStore(config: SqlApprovalStoreConfig): ApprovalStore;
+//# sourceMappingURL=sql-store.d.ts.map

package/dist/approvals/sql-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-store.d.ts","sourceRoot":"","sources":["../../src/approvals/sql-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAKlE,OAAO,EAML,KAAK,aAAa,EAInB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAE7D,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,gBAAgB,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA4FD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,GAAG,aAAa,CA2HpF"}

package/dist/approvals/sql-store.js

@@ -0,0 +1,179 @@
+// Tenant-local approval store against an existing Postgres handle.
+// Hosts pass the data-plane db (or a resolver that returns it). No new driver.
+import { eq } from 'drizzle-orm';
+import { FRAMEWORK_SCHEMA } from '../data/schema-generator.js';
+import { isActionRiskTier } from './action-risk.js';
+import { createTenantApprovalTables } from './schema.js';
+import { HUMAN_TASK_CONTRACT_VERSION, } from './types.js';
+function toDate(value) {
+    return new Date(value);
+}
+function toIso(value) {
+    if (value == null)
+        return undefined;
+    if (value instanceof Date)
+        return value.toISOString();
+    return new Date(value).toISOString();
+}
+function mapRequest(row) {
+    if (!isActionRiskTier(row.riskClass)) {
+        throw new Error(`approval_request ${row.approvalRequestId} has unknown risk_class`);
+    }
+    return {
+        contractVersion: HUMAN_TASK_CONTRACT_VERSION,
+        approvalRequestId: row.approvalRequestId,
+        capabilityId: row.capabilityId,
+        definitionVersion: row.definitionVersion,
+        inputDigest: row.inputDigest,
+        riskClass: row.riskClass,
+        reviewReason: row.reviewReason,
+        state: row.state,
+        executionId: row.executionId ?? undefined,
+        createdAt: toIso(row.createdAt),
+        expiresAt: toIso(row.expiresAt),
+        updatedAt: toIso(row.updatedAt),
+        resolvedAt: toIso(row.resolvedAt),
+        invalidatedReason: row.invalidatedReason ?? undefined,
+    };
+}
+function mapDecision(row) {
+    return {
+        contractVersion: HUMAN_TASK_CONTRACT_VERSION,
+        approvalDecisionId: row.approvalDecisionId,
+        approvalRequestId: row.approvalRequestId,
+        approverAccountId: row.approverAccountId,
+        decision: row.decision,
+        decidedAt: toIso(row.decidedAt),
+    };
+}
+function mapTask(row) {
+    return {
+        contractVersion: HUMAN_TASK_CONTRACT_VERSION,
+        humanTaskId: row.humanTaskId,
+        kind: row.kind,
+        state: row.state,
+        approvalRequestId: row.approvalRequestId ?? undefined,
+        executionId: row.executionId ?? undefined,
+        createdAt: toIso(row.createdAt),
+        expiresAt: toIso(row.expiresAt),
+        updatedAt: toIso(row.updatedAt),
+        resolvedAt: toIso(row.resolvedAt),
+    };
+}
+export function createSqlApprovalStore(config) {
+    const tables = createTenantApprovalTables(config.schemaName ?? FRAMEWORK_SCHEMA);
+    async function resolveDb() {
+        return typeof config.db === 'function' ? await config.db() : config.db;
+    }
+    return {
+        async putRequest(row) {
+            const db = await resolveDb();
+            const values = {
+                approvalRequestId: row.approvalRequestId,
+                capabilityId: row.capabilityId,
+                definitionVersion: row.definitionVersion,
+                inputDigest: row.inputDigest,
+                riskClass: row.riskClass,
+                reviewReason: row.reviewReason,
+                state: row.state,
+                executionId: row.executionId ?? null,
+                createdAt: toDate(row.createdAt),
+                expiresAt: toDate(row.expiresAt),
+                updatedAt: toDate(row.updatedAt),
+                resolvedAt: row.resolvedAt ? toDate(row.resolvedAt) : null,
+                invalidatedReason: row.invalidatedReason ?? null,
+            };
+            await db
+                .insert(tables.approvalRequest)
+                .values(values)
+                .onConflictDoUpdate({
+                target: tables.approvalRequest.approvalRequestId,
+                set: {
+                    capabilityId: values.capabilityId,
+                    definitionVersion: values.definitionVersion,
+                    inputDigest: values.inputDigest,
+                    riskClass: values.riskClass,
+                    reviewReason: values.reviewReason,
+                    state: values.state,
+                    executionId: values.executionId,
+                    expiresAt: values.expiresAt,
+                    updatedAt: values.updatedAt,
+                    resolvedAt: values.resolvedAt,
+                    invalidatedReason: values.invalidatedReason,
+                },
+            });
+        },
+        async getRequest(id) {
+            const db = await resolveDb();
+            const rows = await db
+                .select()
+                .from(tables.approvalRequest)
+                .where(eq(tables.approvalRequest.approvalRequestId, id));
+            return rows[0] ? mapRequest(rows[0]) : undefined;
+        },
+        async listRequests() {
+            const db = await resolveDb();
+            const rows = await db.select().from(tables.approvalRequest);
+            return rows.map(mapRequest);
+        },
+        async putDecision(row) {
+            const db = await resolveDb();
+            await db
+                .insert(tables.approvalDecision)
+                .values({
+                approvalDecisionId: row.approvalDecisionId,
+                approvalRequestId: row.approvalRequestId,
+                approverAccountId: row.approverAccountId,
+                decision: row.decision,
+                decidedAt: toDate(row.decidedAt),
+            })
+                .onConflictDoNothing();
+        },
+        async listDecisions(requestId) {
+            const db = await resolveDb();
+            const rows = await db
+                .select()
+                .from(tables.approvalDecision)
+                .where(eq(tables.approvalDecision.approvalRequestId, requestId));
+            return rows.map(mapDecision);
+        },
+        async putTask(row) {
+            const db = await resolveDb();
+            const values = {
+                humanTaskId: row.humanTaskId,
+                kind: row.kind,
+                state: row.state,
+                approvalRequestId: row.approvalRequestId ?? null,
+                executionId: row.executionId ?? null,
+                createdAt: toDate(row.createdAt),
+                expiresAt: toDate(row.expiresAt),
+                updatedAt: toDate(row.updatedAt),
+                resolvedAt: row.resolvedAt ? toDate(row.resolvedAt) : null,
+            };
+            await db
+                .insert(tables.humanTask)
+                .values(values)
+                .onConflictDoUpdate({
+                target: tables.humanTask.humanTaskId,
+                set: {
+                    kind: values.kind,
+                    state: values.state,
+                    approvalRequestId: values.approvalRequestId,
+                    executionId: values.executionId,
+                    expiresAt: values.expiresAt,
+                    updatedAt: values.updatedAt,
+                    resolvedAt: values.resolvedAt,
+                },
+            });
+        },
+        async getTask(id) {
+            const db = await resolveDb();
+            const rows = await db
+                .select()
+                .from(tables.humanTask)
+                .where(eq(tables.humanTask.humanTaskId, id));
+            return rows[0] ? mapTask(rows[0]) : undefined;
+        },
+    };
+}
+//# sourceMappingURL=sql-store.js.map

package/dist/approvals/sql-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-store.js","sourceRoot":"","sources":["../../src/approvals/sql-store.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,+EAA+E;AAE/E,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,2BAA2B,GAS5B,MAAM,YAAY,CAAC;AAWpB,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAID,SAAS,KAAK,CAAC,KAAuC;IACpD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACtD,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,UAAU,CAAC,GAcnB;IACC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,iBAAiB,yBAAyB,CAAC,CAAC;IACtF,CAAC;IACD,OAAO;QACL,eAAe,EAAE,2BAA2B;QAC5C,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,YAAY,EAAE,GAAG,CAAC,YAAmC;QACrD,KAAK,EAAE,GAAG,CAAC,KAA6B;QACxC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;QACzC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/B,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,SAAS;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAMpB;IACC,OAAO;QACL,eAAe,EAAE,2BAA2B;QAC5C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,QAAQ,EAAE,GAAG,CAAC,QAAmC;QACjD,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,GAUhB;IACC,OAAO;QACL,eAAe,EAAE,2BAA2B;QAC5C,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,IAAI,EAAE,GAAG,CAAC,IAAqB;QAC/B,KAAK,EAAE,GAAG,CAAC,KAAuB;QAClC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,SAAS;QACrD,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;QACzC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/B,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAA8B;IACnE,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAC;IAEjF,KAAK,UAAU,SAAS;QACtB,OAAO,OAAO,MAAM,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACzE,CAAC;IAED,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,GAAG;YAClB,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG;gBACb,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;gBACpC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;gBAChC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;gBAChC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;gBAChC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC1D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI;aACjD,CAAC;YACF,MAAM,EAAE;iBACL,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;iBAC9B,MAAM,CAAC,MAAM,CAAC;iBACd,kBAAkB,CAAC;gBAClB,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,iBAAiB;gBAChD,GAAG,EAAE;oBACH,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;oBAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;iBAC5C;aACF,CAAC,CAAC;QACP,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,EAAE;YACjB,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;iBAC5B,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,CAAC;QAED,KAAK,CAAC,YAAY;YAChB,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,GAAG;YACnB,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;YAC7B,MAAM,EAAE;iBACL,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;iBAC/B,MAAM,CAAC;gBACN,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;gBAC1C,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;aACjC,CAAC;iBACD,mBAAmB,EAAE,CAAC;QAC3B,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,SAAS;YAC3B,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;iBAC7B,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG;gBACb,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI;gBAChD,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;gBACpC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;gBAChC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;gBAChC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;gBAChC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;aAC3D,CAAC;YACF,MAAM,EAAE;iBACL,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;iBACxB,MAAM,CAAC,MAAM,CAAC;iBACd,kBAAkB,CAAC;gBAClB,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW;gBACpC,GAAG,EAAE;oBACH,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;oBAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B;aACF,CAAC,CAAC;QACP,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,EAAE;YACd,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;iBACtB,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/approvals/types.d.ts

@@ -0,0 +1,156 @@
+import type { AuthContext } from '../types/security.js';
+import type { ActionRiskTier, ReviewMandateReason } from './action-risk.js';
+export declare const HUMAN_TASK_CONTRACT_VERSION: "0.1.0";
+export declare const HumanTaskKind: {
+    readonly Input: "input";
+    readonly Review: "review";
+    readonly Correction: "correction";
+    readonly Handoff: "handoff";
+    readonly Approval: "approval";
+};
+export type HumanTaskKind = (typeof HumanTaskKind)[keyof typeof HumanTaskKind];
+export declare const HumanTaskState: {
+    readonly Open: "open";
+    readonly Claimed: "claimed";
+    readonly Completed: "completed";
+    readonly Rejected: "rejected";
+    readonly Expired: "expired";
+    readonly Cancelled: "cancelled";
+    readonly Invalidated: "invalidated";
+};
+export type HumanTaskState = (typeof HumanTaskState)[keyof typeof HumanTaskState];
+export declare const ApprovalRequestState: {
+    readonly Pending: "pending";
+    readonly Approved: "approved";
+    readonly Rejected: "rejected";
+    readonly ChangesRequested: "changes-requested";
+    readonly Expired: "expired";
+    readonly Invalidated: "invalidated";
+};
+export type ApprovalRequestState = (typeof ApprovalRequestState)[keyof typeof ApprovalRequestState];
+/** Default human decision outcomes. `expired` is a system state, not a decision. */
+export declare const ApprovalDecisionOutcome: {
+    readonly Approved: "approved";
+    readonly Rejected: "rejected";
+    readonly ChangesRequested: "changes-requested";
+};
+export type ApprovalDecisionOutcome = (typeof ApprovalDecisionOutcome)[keyof typeof ApprovalDecisionOutcome];
+/**
+ * Tenant-local approval request — v1 field subset of human-task.schema.json.
+ * Opaque contract refs (proposal, evidence, policy) are omitted until honestly populated.
+ */
+export interface ApprovalRequestRecord {
+    contractVersion: typeof HUMAN_TASK_CONTRACT_VERSION;
+    approvalRequestId: string;
+    capabilityId: string;
+    definitionVersion: string;
+    inputDigest: string;
+    riskClass: ActionRiskTier;
+    reviewReason: ReviewMandateReason;
+    state: ApprovalRequestState;
+    executionId?: string;
+    createdAt: string;
+    expiresAt: string;
+    updatedAt: string;
+    resolvedAt?: string;
+    invalidatedReason?: string;
+}
+export interface ApprovalDecisionRecord {
+    contractVersion: typeof HUMAN_TASK_CONTRACT_VERSION;
+    approvalDecisionId: string;
+    approvalRequestId: string;
+    approverAccountId: string;
+    decision: ApprovalDecisionOutcome;
+    decidedAt: string;
+}
+export interface HumanTaskRecord {
+    contractVersion: typeof HUMAN_TASK_CONTRACT_VERSION;
+    humanTaskId: string;
+    kind: HumanTaskKind;
+    state: HumanTaskState;
+    approvalRequestId?: string;
+    executionId?: string;
+    createdAt: string;
+    expiresAt: string;
+    updatedAt: string;
+    resolvedAt?: string;
+}
+export interface ApprovalStore {
+    putRequest(row: ApprovalRequestRecord): Promise<void>;
+    getRequest(id: string): Promise<ApprovalRequestRecord | undefined>;
+    listRequests(): Promise<ApprovalRequestRecord[]>;
+    putDecision(row: ApprovalDecisionRecord): Promise<void>;
+    listDecisions(requestId: string): Promise<ApprovalDecisionRecord[]>;
+    putTask(row: HumanTaskRecord): Promise<void>;
+    getTask(id: string): Promise<HumanTaskRecord | undefined>;
+}
+export interface AuthorizationRevalidateInput {
+    auth: AuthContext;
+    capabilityId: string;
+    request: ApprovalRequestRecord;
+}
+export interface AuthorizationProvider {
+    revalidate(input: AuthorizationRevalidateInput): Promise<{
+        allowed: boolean;
+        reason?: string;
+    }>;
+}
+export interface RequestApprovalInput {
+    capabilityId: string;
+    definitionVersion: string;
+    input: unknown;
+    riskClass: ActionRiskTier;
+    reviewReason?: ReviewMandateReason;
+    expiresAt: Date | string;
+    executionId?: string;
+}
+export interface DecideApprovalInput {
+    requestId: string;
+    outcome: ApprovalDecisionOutcome;
+    auth: AuthContext;
+}
+export interface CreateHumanTaskInput {
+    kind: HumanTaskKind;
+    expiresAt: Date | string;
+    approvalRequestId?: string;
+    executionId?: string;
+}
+export interface ApprovalService {
+    requestApproval(input: RequestApprovalInput): Promise<ApprovalRequestRecord>;
+    decide(input: DecideApprovalInput): Promise<ApprovalRequestRecord>;
+    findByExecutionId(executionId: string): Promise<ApprovalRequestRecord | undefined>;
+    findMatchingApproval(binding: {
+        capabilityId: string;
+        definitionVersion: string;
+        inputDigest: string;
+        now?: Date;
+    }): Promise<ApprovalRequestRecord | undefined>;
+    findConflictingApproval(binding: {
+        capabilityId: string;
+        definitionVersion: string;
+        inputDigest: string;
+        now?: Date;
+    }): Promise<ApprovalRequestRecord | undefined>;
+    invalidateOnMaterialChange(binding: {
+        capabilityId: string;
+        definitionVersion: string;
+        inputDigest: string;
+        now?: Date;
+    }): Promise<ApprovalRequestRecord[]>;
+    createHumanTask(input: CreateHumanTaskInput): Promise<HumanTaskRecord>;
+    completeHumanTask(input: {
+        taskId: string;
+        auth: AuthContext;
+    }): Promise<HumanTaskRecord>;
+}
+export type ApprovalGateCode = 'prohibited-capability' | 'missing-approval' | 'missing-approval-service' | 'expired-approval' | 'input-digest-mismatch' | 'definition-mismatch' | 'authorization-revalidation-denied';
+export type ApprovalGateResult = {
+    blocked: false;
+    request?: ApprovalRequestRecord;
+} | {
+    blocked: true;
+    reason: string;
+    code: ApprovalGateCode;
+    metadata: Record<string, unknown>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/approvals/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/approvals/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE5E,eAAO,MAAM,2BAA2B,EAAG,OAAgB,CAAC;AAE5D,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAE/E,eAAO,MAAM,cAAc;;;;;;;;CAQjB,CAAC;AACX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAElF,eAAO,MAAM,oBAAoB;;;;;;;CAOvB,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AAEpG,oFAAoF;AACpF,eAAO,MAAM,uBAAuB;;;;CAI1B,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,OAAO,uBAAuB,CAAC,CAAC;AAEzE;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,OAAO,2BAA2B,CAAC;IACpD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,cAAc,CAAC;IAC1B,YAAY,EAAE,mBAAmB,CAAC;IAClC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,OAAO,2BAA2B,CAAC;IACpD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,uBAAuB,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,OAAO,2BAA2B,CAAC;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,cAAc,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IACnE,YAAY,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACjD,WAAW,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,WAAW,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,qBAAqB,CAAC;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjG;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,cAAc,CAAC;IAC1B,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,uBAAuB,CAAC;IACjC,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnE,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IACnF,oBAAoB,CAAC,OAAO,EAAE;QAC5B,YAAY,EAAE,MAAM,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,GAAG,CAAC,EAAE,IAAI,CAAC;KACZ,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC/C,uBAAuB,CAAC,OAAO,EAAE;QAC/B,YAAY,EAAE,MAAM,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,GAAG,CAAC,EAAE,IAAI,CAAC;KACZ,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC/C,0BAA0B,CAAC,OAAO,EAAE;QAClC,YAAY,EAAE,MAAM,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,GAAG,CAAC,EAAE,IAAI,CAAC;KACZ,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACrC,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACvE,iBAAiB,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC3F;AAED,MAAM,MAAM,gBAAgB,GACxB,uBAAuB,GACvB,kBAAkB,GAClB,0BAA0B,GAC1B,kBAAkB,GAClB,uBAAuB,GACvB,qBAAqB,GACrB,mCAAmC,CAAC;AAExC,MAAM,MAAM,kBAAkB,GAC1B;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,OAAO,CAAC,EAAE,qBAAqB,CAAA;CAAE,GACnD;IACE,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC"}

package/dist/approvals/types.js

@@ -0,0 +1,32 @@
+export const HUMAN_TASK_CONTRACT_VERSION = '0.1.0';
+export const HumanTaskKind = {
+    Input: 'input',
+    Review: 'review',
+    Correction: 'correction',
+    Handoff: 'handoff',
+    Approval: 'approval',
+};
+export const HumanTaskState = {
+    Open: 'open',
+    Claimed: 'claimed',
+    Completed: 'completed',
+    Rejected: 'rejected',
+    Expired: 'expired',
+    Cancelled: 'cancelled',
+    Invalidated: 'invalidated',
+};
+export const ApprovalRequestState = {
+    Pending: 'pending',
+    Approved: 'approved',
+    Rejected: 'rejected',
+    ChangesRequested: 'changes-requested',
+    Expired: 'expired',
+    Invalidated: 'invalidated',
+};
+/** Default human decision outcomes. `expired` is a system state, not a decision. */
+export const ApprovalDecisionOutcome = {
+    Approved: 'approved',
+    Rejected: 'rejected',
+    ChangesRequested: 'changes-requested',
+};
+//# sourceMappingURL=types.js.map

package/dist/approvals/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/approvals/types.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,2BAA2B,GAAG,OAAgB,CAAC;AAE5D,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACZ,CAAC;AAGX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;CAClB,CAAC;AAGX,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,gBAAgB,EAAE,mBAAmB;IACrC,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,aAAa;CAClB,CAAC;AAGX,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,gBAAgB,EAAE,mBAAmB;CAC7B,CAAC"}