Interface ApprovalRouterOptions

Mount POST <basePath> (create). Default false — every first-party host creates records in-process from an observed suspension (host-kit's approval bridge), so the HTTP route is an inert "file a request" affordance at best. When enabled it force-sets requestedBy to the authenticated actor and 400s on any TCB_ONLY_CREATE_FIELDS member, so it can never author capability.

Route prefix. Default: '/api/approvals'.

Authenticates the request and binds the tenant-scoped service. The router's first line is resolve(request); the store the service wraps is constructed AFTER authentication, bound to the actor's tenant — there is no pre-auth service to leak through. undefined yields 401.