Invoice Process: Exception UI v3

[petervachon]

Draft preview of the invoice exception review v3 UI.

Changes

• Header disposition split button with gated approve (store-layer guard via approveGated)
• Wait and send-back disposition actions wired to runtime
• Suggested fix feedback loop with two-step flow (positive + correction paths)
• Correction path triggers 2s regen interval with interim loading state and seeded prose
• Primary-filled split button on PO action, footer legal line with info icon

🤖 Generated with Claude Code

[github-actions]

Apollo Coded App preview deployments are ready.

Project	Status	Preview	Updated (PT)
apollo-design	Ready	Preview · Logs	Jul 24, 2026, 05:44:05 AM
apollo-docs	Ready	Preview · Logs	Jul 24, 2026, 05:44:05 AM
apollo-landing	Ready	Preview · Logs	Jul 24, 2026, 05:44:05 AM
apollo-vertex	Ready	Preview · Logs	Jul 24, 2026, 05:44:05 AM

[github-actions]

Dependency License Review

• ✅ 1950 package(s) scanned
• ✅ No license issues found
• ⚠️ 2 package(s) excluded (see details below)

License distribution

License	Packages
MIT	1720
ISC	89
Apache-2.0	55
BSD-3-Clause	27
BSD-2-Clause	23
BlueOak-1.0.0	8
MPL-2.0	4
MIT-0	3
CC0-1.0	3
MIT OR Apache-2.0	2
(MIT OR Apache-2.0)	2
Unlicense	2
LGPL-3.0-or-later	1
Python-2.0	1
CC-BY-4.0	1
(MPL-2.0 OR Apache-2.0)	1
Unknown	1
Artistic-2.0	1
(WTFPL OR MIT)	1
(BSD-2-Clause OR MIT OR Apache-2.0)	1
CC-BY-3.0	1
0BSD	1
(MIT OR CC0-1.0)	1
MIT AND ISC	1

Excluded packages

Package	Version	License	Reason
@img/sharp-libvips-linux-x64	1.3.2	LGPL-3.0-or-later	LGPL pre-built binary, not linked
khroma	2.1.0	Unknown	MIT per GitHub repo, missing license field in package.json

[Copilot]

Pull request overview

Draft v3 of the Apollo Vertex invoice exception review prototype UI, plus a demo-grade Slack roundtrip listener and supporting runtime/store wiring. This lives under apps/apollo-vertex/templates/invoice-review/ and introduces new UI primitives (header split dispositions, suggested-fix feedback flow, supplier email modal) backed by an in-memory + sessionStorage runtime store.

Changes:

• Adds v3 invoice-review prototype surfaces (Suggested Fix feedback loop, supplier email modal, header disposition split button, runtime store updates).
• Introduces a standalone Slack Socket Mode listener (outside pnpm workspace) with JSON-file state sharing and Next.js proxy API routes for the demo.
• Adds shell extensibility (profile menu “extras” slot), new theme tokens, and a lint-time “type drift” guard script.

Reviewed changes

Copilot reviewed 32 out of 35 changed files in this pull request and generated 9 comments.

Show a summary per file

File	Description
package.json	Adds root-level demo scripts to run Apollo Vertex + Slack listener together
apps/apollo-vertex/templates/invoice-review/README.md	Documents prototype status and lint-exclusion/migration guidance
apps/apollo-vertex/templates/invoice-review/next/SupplierEmailModal.tsx	New supplier email draft/confirm modal with send animation
apps/apollo-vertex/templates/invoice-review/next/SuggestedFixCard.tsx	New suggested-fix card with split-button PO linking + feedback regen flow
apps/apollo-vertex/templates/invoice-review/next/ReasonDialog.tsx	Shared “reason + note” dialog for park-family actions
apps/apollo-vertex/templates/invoice-review/next/invoice-runtime.tsx	Runtime store for invoice loop state, events, gating, and undo behavior
apps/apollo-vertex/templates/invoice-review/next/invoice-review-data.ts	Canonical invoice-review data model, fixtures, and seam stubs
apps/apollo-vertex/templates/invoice-review/next/HeaderDecision.tsx	Header disposition split button and associated dialogs
apps/apollo-vertex/templates/invoice-review/invoice-version.tsx	Adds a dev-only layout version switch (v1/v2/v3)
apps/apollo-vertex/templates/invoice-review/invoice-review.module.css	Adds AI correction glow keyframes/util class
apps/apollo-vertex/slack/store.js	File-backed shared demo state store with atomic writes
apps/apollo-vertex/slack/server.js	Slack Socket Mode listener (actions, thread ingestion, local HTTP trigger)
apps/apollo-vertex/slack/reset-demo.js	Resets Slack demo state and deletes bot messages
apps/apollo-vertex/slack/README.md	Setup/run instructions and Slack manifest for the listener
apps/apollo-vertex/slack/package.json	Isolated npm package for the Slack listener dependencies
apps/apollo-vertex/slack/escalation-card.js	Block Kit escalation card builder for the demo invoice
apps/apollo-vertex/scripts/check-type-drift.mjs	Lint-time guard to prevent off-scale text-[Npx] drift in timeline
apps/apollo-vertex/registry/shell/shell-user-profile-menu-items.tsx	Renders injected profile menu extras
apps/apollo-vertex/registry/shell/shell-profile-extras.tsx	New context/provider for profile menu extra items slot
apps/apollo-vertex/registry/button/button.tsx	Tweaks base button classes (adds pointer cursor)
apps/apollo-vertex/registry.json	Adds “insight-*” color tokens
apps/apollo-vertex/package.json	Adds demo scripts + runs type-drift guard in lint
apps/apollo-vertex/locales/en.json	Adds new i18n keys (“invoices”, “my_work”)
apps/apollo-vertex/lib/i18n.ts	Prevents re-initializing i18n and syncs document lang on re-entry
apps/apollo-vertex/app/invoice-review/page.tsx	Adds an invoice-review route wrapper rendering the template full-screen
apps/apollo-vertex/app/api/demo-trigger/route.ts	Proxies escalation trigger to the local Slack listener
apps/apollo-vertex/app/api/demo-state/route.ts	Serves demo Slack state JSON to the UI
apps/apollo-vertex/app/api/demo-reply/route.ts	Proxies Comms replies to the local Slack listener
apps/apollo-vertex/app/_meta.ts	Hides invoice-review route from nav/meta
apps/apollo-vertex/.oxlintrc.json	Excludes demo/prototype directories from oxlint
apps/apollo-vertex/.gitignore	Ignores demo runtime JSON and isolated Slack deps/lockfile
apps/apollo-vertex/.env.example	Adds Slack demo environment variable template

Comments suppressed due to low confidence (3)

apps/apollo-vertex/templates/invoice-review/next/SuggestedFixCard.tsx:109

• Clear the pending regen timeout on unmount to avoid state updates after the component is removed.
  apps/apollo-vertex/templates/invoice-review/next/SupplierEmailModal.tsx:63
• Add refs + cleanup for the send animation timers to prevent leaking timers and updating state after unmount.
  apps/apollo-vertex/templates/invoice-review/next/SupplierEmailModal.tsx:85
• Use the timer refs so repeated clicks don’t stack timers and so the cleanup effect can cancel the pending work.

[github-actions]

📊 Coverage + size by package

Per-package bundle size on this PR (no JS/TS source changes detected under packages/* or web-packages/*).

Package	Coverage	New-line coverage	Packed (gzip)	Unpacked	vs main
@uipath/apollo-core	9.0%	—	43.84 MB	57.45 MB	±0
@uipath/apollo-react	38.7%	—	7.45 MB	28.56 MB	±0
@uipath/apollo-wind	41.5%	—	401.6 KB	2.60 MB	+21 B
@uipath/ap-chat	85.8%	—	43.44 MB	55.94 MB	±0

_{"Coverage" is each package's own coverage.include scope (e.g. apollo-core instruments only scripts/). "Packed"/"Unpacked" come from npm pack --dry-run and only cover built packages — "—" means not measured this run (package not affected / not built). "vs main" is the packed (gzipped) delta against the last successful main build (the package-sizes artifact from the Release workflow); "—" there means no main baseline was available this run. The baseline is main's latest build, not this PR's exact merge-base, so it includes any drift since the branch diverged. Packages with no vitest config are omitted.}

[Copilot]

Pull request overview

Copilot reviewed 32 out of 35 changed files in this pull request and generated 6 comments.

Comments suppressed due to low confidence (5)

apps/apollo-vertex/registry/button/button.tsx:8

• Adding cursor-pointer at the base Button level also applies to disabled buttons, which can make a disabled action still look clickable. Prefer overriding the cursor for the disabled state.

  "inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-lg text-sm font-medium transition-all cursor-pointer disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none [&_svg:not([class*='size-'])]:size-4 shrink-0 [&_svg]:shrink-0 outline-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive",

package.json:24

• The root demo scripts hardcode a path into apps/apollo-vertex/slack/node_modules/.bin, which breaks unless Slack deps have already been installed and is less portable. Since apollo-vertex already defines demo/demo:reset, the root scripts can delegate to those.
  apps/apollo-vertex/slack/server.js:222
• lastMessage is never read, so this assignment is dead code (and can be removed along with the variable declaration).

  lastMessage = { channel: res.channel, ts: res.ts };

apps/apollo-vertex/templates/invoice-review/next/SupplierEmailModal.tsx:65

• handleSendClick uses nested setTimeout without tracking ids, so the callbacks can fire after the modal has closed/unmounted (calling setSendPhase / onSend). Track the timers in refs and clear them before scheduling new ones.
  apps/apollo-vertex/templates/invoice-review/next/SupplierEmailModal.tsx:92
• When the dialog closes while a send animation is in flight, scheduled timeouts can still fire. Clear sendTimerRef/sentTimerRef when onOpenChange receives false so closing always cancels the pending callbacks.

[Copilot]

Pull request overview

Copilot reviewed 32 out of 35 changed files in this pull request and generated 2 comments.

Comments suppressed due to low confidence (7)

package.json:24

• The root-level demo scripts depend on apps/apollo-vertex/slack/node_modules/.bin/concurrently, which will fail unless the Slack listener has been npm installed and also hardcodes a non-portable node_modules path. Prefer delegating to the apollo-vertex package scripts so the entry point is stable.
  apps/apollo-vertex/package.json:10
• This demo script hardcodes slack/node_modules/.bin/concurrently, which breaks on a fresh clone until someone runs npm install in slack/ and is also brittle across OS/shells. Consider adding concurrently to this package (pnpm workspace) and using pnpm exec concurrently, or move the Slack listener into the workspace so pnpm -r can manage it.

    "dev": "pnpm generate:theme && next --turbopack",
    "demo": "slack/node_modules/.bin/concurrently --names APP,SLACK --prefix-colors cyan,magenta \"pnpm dev\" \"cd slack && npm start\"",
    "demo:reset": "cd slack && npm run reset-demo",

apps/apollo-vertex/app/api/demo-trigger/route.ts:14

• This demo-only API route proxies requests to http://localhost:${LISTENER_PORT}. If apollo-vertex is ever built/deployed outside local dev, leaving this endpoint enabled is an avoidable SSRF/operational risk (it will attempt to talk to a localhost service on the server). Add a production guard (or require an explicit opt-in env flag) and return 404/disabled in prod.

export async function POST(request: NextRequest) {
  let body = "{}";
  try {
    body = JSON.stringify(await request.json());
  } catch {

apps/apollo-vertex/app/api/demo-reply/route.ts:14

• This demo-only API route proxies requests to http://localhost:${LISTENER_PORT}. If apollo-vertex is ever built/deployed outside local dev, leaving this endpoint enabled is an avoidable SSRF/operational risk. Add a production guard (or require an explicit opt-in env flag) and return 404/disabled in prod.

export async function POST(request: NextRequest) {
  let body = "{}";
  try {
    body = JSON.stringify(await request.json());
  } catch {

apps/apollo-vertex/app/api/demo-state/route.ts:13

• This demo-only endpoint reads a local file and returns its contents. If this app is deployed, the route will still be callable and may leak environment-specific state or behave unexpectedly. Consider guarding it behind an explicit dev-only flag (or returning 404 in production).

export async function GET() {
  try {
    const file = path.join(process.cwd(), "data", "demo-state.json");
    const raw = await readFile(file, "utf8");
    return NextResponse.json(JSON.parse(raw));

apps/apollo-vertex/templates/invoice-review/next/SupplierEmailModal.tsx:84

• handleSendClick schedules nested setTimeout calls without any cleanup. If the modal unmounts (or open flips) before the timers fire, this can call setSendPhase on an unmounted component and also invoke onSend after teardown. Track timeout IDs in refs and clear them in an effect cleanup (and/or guard with an isMounted ref).
  apps/apollo-vertex/templates/invoice-review/next/SuggestedFixCard.tsx:213
• The regen flow schedules a 2s timer via regenTimerRef, but there is no unmount cleanup. Navigating away while the timer is pending can trigger setRegenLoading(false) on an unmounted component and fire onFeedbackRegen unexpectedly. Add a useEffect cleanup to clear regenTimerRef.current on unmount.