import { StewardClient } from "@stwd/sdk";

const steward = new StewardClient({
  baseUrl: process.env.STEWARD_API_URL!,
  bearerToken: process.env.STEWARD_JWT!,
  tenantId: process.env.STEWARD_TENANT_ID!,
});

const action = await steward.providerActions.invoke({
  workspaceId: "workspace_123",
  providerAccountId: "provider_account_123",
  operationKey: "github.issue.list",
  arguments: { owner: "Steward-Fi", repo: "steward", state: "open" },
  idempotencyKey: crypto.randomUUID(),
});

if (action.status === "denied_access" || action.status === "denied_policy") {
  console.log(`Denied and persisted as ${action.id}: ${action.reasonCode}`);
} else if (action.status === "pending_approval") {
  console.log("Blocked pending human approval; no provider request was dispatched.");
}

const status = await steward.providerActions.get(action.id);
console.log(status.status);

// Run with a separately constructed, authenticated human-session client.
const approval = await humanSteward.providerActions.getApproval(action.id);
await humanSteward.providerActions.decideApproval(action.id, {
  decision: "approve",
  expectedVersion: approval.version,
  expectedRequestHash: approval.requestHash,
  expectedActionDigest: approval.actionDigest,
  idempotencyKey: crypto.randomUUID(),
});

// The submitting agent may request safe resume only after the server verifies
// the persisted approval and exact action binding.
await steward.providerActions.execute(action.id);

const manifest = await humanSteward.providerActions.getCase(action.id);
const evidence = await humanSteward.providerActions.getEvidence(action.id);