[TheGreatAxios]

Closes CL-11934 (Slice 4 of 5 for CL-11929; stacked on cl-11933-add-a-presenter-that-builds-a-package-for-one-audience).

Summary

• Add GET /api/tenants/:tenantId/projects/:projectId/packages/:version/zip using @corbits/zip to deterministically bundle deck.pptx, deck.pdf, README.md, manifest.json, and grounded documents/<kind>.md.
• Store review rounds in Postgres (approval_round table in apps/hub/src/db/schema.ts and migration 0036_approval_round.sql) with no idle parked workflow holding a sidecar slot.
• Add person-only Hub routes and @corbits-builder/client methods to start an approval round (recording the project owner's approval of that approval_package version), record or amend reviewer decisions (approve, request_changes, comment with overall and per-slide notes), and settle a round.
• Add the ContextualApprovalRounds reading-pane UI (apps/web/src/pages/workspace/approval-rounds.tsx) with zip download, native file share sheet, round creation, per-reviewer decision recording, and settlement.

[linear-code]

CL-11934

[corbits-triage]

Triage requests changes:

• CI green: required checks are failing

Nothing triage asked to change still fails, so this request no longer stands.

[TheGreatAxios]

Sharing a package and recording a reviewer decision match the PR. A decision is stored only on a reviewer id that belongs to the round for that tenant and project, and the round keeps the package version and sha256 it was started with. A reviewer id from another round is 404.

Two gaps:

1. Blocking. StartApprovalRound accepts a name or email of " " (string > 0 is not trimmed). The service trims that to "", inserts the round, then serialization throws because name and email must be non-empty. The row is already committed, and every later GET /:projectId/approval-rounds fails for that project. The web dialog trims before send. POST /:projectId/approval-rounds and the client do not. Reproduction: start a round with reviewers: [{ name: " ", persona: "VP" }].

2. recordDecision replaces the whole reviewers array from a stale read, with no row lock. Two decisions saved at the same time can drop one person's decision. The decision that remains is still on the right reviewer id.

[corbits-triage]

Triage requests changes:

• CI green: required checks are failing
  • lint
• Conventions: added code matches a code pattern
  • apps/hub/src/artifacts/approval-rounds.ts:799 promise-chain: Promise chain; use async/await with try/catch.

Nothing triage asked to change still fails, so this request no longer stands.

[corbits-triage]

Triage requests changes:

• CI green: required checks are failing
  • typecheck

Nothing triage asked to change still fails, so this request no longer stands.

[corbits-triage]

Triage requests changes:

• CI green: required checks are failing
  • typecheck

[corbits-triage]

Triage: Unsure

Asking a maintainer about:

• changes sensitive paths: schema: apps/hub/src/db/migrations/0037_approval_round.sql, schema: apps/hub/src/db/migrations/meta/0037_snapshot.json, schema: apps/hub/src/db/migrations/meta/_journal.json

Stacked on #59: only this pull request's own changes were checked.

Nothing triage asked to change still fails, so this request no longer stands.