@acorex-platform/framework-server 0.0.10

package/workflow/src/lib/activities/workflow-activity.constants.d.ts

@@ -0,0 +1,4 @@
+export declare const WORKFLOW_EMPLOYEE_ENTITY = "HumanCapitalManagement.Employee";
+export declare const WORKFLOW_PERSON_ENTITY = "PersonCore.Person";
+export declare const WORKFLOW_USER_ENTITY = "SecurityManagement.User";
+export declare const WORKFLOW_ROLE_ENTITY = "SecurityManagement.Role";

package/workflow/src/lib/activities/workflow-activity.constants.js

@@ -0,0 +1,10 @@
+"use strict";
+//#region ---- Workflow activity entity constants ----
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WORKFLOW_ROLE_ENTITY = exports.WORKFLOW_USER_ENTITY = exports.WORKFLOW_PERSON_ENTITY = exports.WORKFLOW_EMPLOYEE_ENTITY = void 0;
+exports.WORKFLOW_EMPLOYEE_ENTITY = 'HumanCapitalManagement.Employee';
+exports.WORKFLOW_PERSON_ENTITY = 'PersonCore.Person';
+exports.WORKFLOW_USER_ENTITY = 'SecurityManagement.User';
+exports.WORKFLOW_ROLE_ENTITY = 'SecurityManagement.Role';
+//#endregion
+//# sourceMappingURL=workflow-activity.constants.js.map

package/workflow/src/lib/activities/workflow-activity.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-activity.constants.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/activities/workflow-activity.constants.ts"],"names":[],"mappings":";AAAA,sDAAsD;;;AAEzC,QAAA,wBAAwB,GAAG,iCAAiC,CAAC;AAC7D,QAAA,sBAAsB,GAAG,mBAAmB,CAAC;AAC7C,QAAA,oBAAoB,GAAG,yBAAyB,CAAC;AACjD,QAAA,oBAAoB,GAAG,yBAAyB,CAAC;AAE9D,YAAY"}

package/workflow/src/lib/activities/workflow-activity.registry.d.ts

@@ -0,0 +1,15 @@
+import type { WorkflowActivityExecutionContext, WorkflowActivityExecutionResult, WorkflowBackendActivityHandler } from './workflow-activity-execution.types';
+import { AssignToManagerActivityHandler, CheckPermissionActivityHandler, DistributionRecordActivityHandler, EntityCreateActivityHandler, EntityDeleteActivityHandler, EntityReadActivityHandler, EntityUpdateActivityHandler, GetCurrentSessionUserActivityHandler, GetCurrentUserManagerActivityHandler, HttpRequestActivityHandler, IfActivityHandler, ResolveEmployeeUserIdActivityHandler, SetVariableActivityHandler } from './handlers';
+/**
+ * Dispatches backend workflow activities by activity name (command key).
+ * Mirrors {@link AXCWorkflowManagementMockModule} command registrations on the frontend mock layer.
+ */
+export declare class WorkflowActivityRegistryService {
+    private readonly logger;
+    private readonly handlers;
+    constructor(checkPermission: CheckPermissionActivityHandler, getCurrentSessionUser: GetCurrentSessionUserActivityHandler, getCurrentUserManager: GetCurrentUserManagerActivityHandler, assignToManager: AssignToManagerActivityHandler, distributionRecord: DistributionRecordActivityHandler, entityCreate: EntityCreateActivityHandler, entityRead: EntityReadActivityHandler, entityUpdate: EntityUpdateActivityHandler, entityDelete: EntityDeleteActivityHandler, ifActivity: IfActivityHandler, setVariable: SetVariableActivityHandler, resolveEmployeeUserId: ResolveEmployeeUserIdActivityHandler, httpRequest: HttpRequestActivityHandler);
+    register(handler: WorkflowBackendActivityHandler): void;
+    unregister(activityName: string): void;
+    hasHandler(activityName: string): boolean;
+    execute(activityName: string, properties: Record<string, unknown>, context: WorkflowActivityExecutionContext): Promise<WorkflowActivityExecutionResult>;
+}

package/workflow/src/lib/activities/workflow-activity.registry.js

@@ -0,0 +1,78 @@
+"use strict";
+var WorkflowActivityRegistryService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowActivityRegistryService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const handlers_1 = require("./handlers");
+//#region ---- Workflow activity registry ----
+/**
+ * Dispatches backend workflow activities by activity name (command key).
+ * Mirrors {@link AXCWorkflowManagementMockModule} command registrations on the frontend mock layer.
+ */
+let WorkflowActivityRegistryService = WorkflowActivityRegistryService_1 = class WorkflowActivityRegistryService {
+    constructor(checkPermission, getCurrentSessionUser, getCurrentUserManager, assignToManager, distributionRecord, entityCreate, entityRead, entityUpdate, entityDelete, ifActivity, setVariable, resolveEmployeeUserId, httpRequest) {
+        this.logger = new common_1.Logger(WorkflowActivityRegistryService_1.name);
+        this.handlers = new Map();
+        const allHandlers = [
+            checkPermission,
+            getCurrentSessionUser,
+            getCurrentUserManager,
+            assignToManager,
+            distributionRecord,
+            entityCreate,
+            entityRead,
+            entityUpdate,
+            entityDelete,
+            ifActivity,
+            setVariable,
+            resolveEmployeeUserId,
+            httpRequest,
+        ];
+        for (const handler of allHandlers) {
+            this.register(handler);
+        }
+    }
+    register(handler) {
+        if (this.handlers.has(handler.activityName)) {
+            this.logger.warn(`Replacing workflow activity handler: ${handler.activityName}`);
+        }
+        this.handlers.set(handler.activityName, handler);
+    }
+    unregister(activityName) {
+        this.handlers.delete(activityName);
+    }
+    hasHandler(activityName) {
+        return this.handlers.has(activityName);
+    }
+    async execute(activityName, properties, context) {
+        const handler = this.handlers.get(activityName);
+        if (!handler) {
+            this.logger.error(`Activity '${activityName}' is not registered for backend execution.`);
+            return {
+                output: { error: `Backend activity not registered: ${activityName}` },
+                outcomes: { Failed: true },
+            };
+        }
+        return handler.execute(properties, context);
+    }
+};
+exports.WorkflowActivityRegistryService = WorkflowActivityRegistryService;
+exports.WorkflowActivityRegistryService = WorkflowActivityRegistryService = WorkflowActivityRegistryService_1 = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [handlers_1.CheckPermissionActivityHandler,
+        handlers_1.GetCurrentSessionUserActivityHandler,
+        handlers_1.GetCurrentUserManagerActivityHandler,
+        handlers_1.AssignToManagerActivityHandler,
+        handlers_1.DistributionRecordActivityHandler,
+        handlers_1.EntityCreateActivityHandler,
+        handlers_1.EntityReadActivityHandler,
+        handlers_1.EntityUpdateActivityHandler,
+        handlers_1.EntityDeleteActivityHandler,
+        handlers_1.IfActivityHandler,
+        handlers_1.SetVariableActivityHandler,
+        handlers_1.ResolveEmployeeUserIdActivityHandler,
+        handlers_1.HttpRequestActivityHandler])
+], WorkflowActivityRegistryService);
+//#endregion
+//# sourceMappingURL=workflow-activity.registry.js.map

package/workflow/src/lib/activities/workflow-activity.registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-activity.registry.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/activities/workflow-activity.registry.ts"],"names":[],"mappings":";;;;;AAAA,2CAAoD;AAMpD,yCAcoB;AAEpB,8CAA8C;AAE9C;;;GAGG;AAEI,IAAM,+BAA+B,uCAArC,MAAM,+BAA+B;IAI1C,YACE,eAA+C,EAC/C,qBAA2D,EAC3D,qBAA2D,EAC3D,eAA+C,EAC/C,kBAAqD,EACrD,YAAyC,EACzC,UAAqC,EACrC,YAAyC,EACzC,YAAyC,EACzC,UAA6B,EAC7B,WAAuC,EACvC,qBAA2D,EAC3D,WAAuC;QAhBxB,WAAM,GAAG,IAAI,eAAM,CAAC,iCAA+B,CAAC,IAAI,CAAC,CAAC;QAC1D,aAAQ,GAAG,IAAI,GAAG,EAA0C,CAAC;QAiB5E,MAAM,WAAW,GAAqC;YACpD,eAAe;YACf,qBAAqB;YACrB,qBAAqB;YACrB,eAAe;YACf,kBAAkB;YAClB,YAAY;YACZ,UAAU;YACV,YAAY;YACZ,YAAY;YACZ,UAAU;YACV,WAAW;YACX,qBAAqB;YACrB,WAAW;SACZ,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,OAAuC;QAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,UAAU,CAAC,YAAoB;QAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IAED,UAAU,CAAC,YAAoB;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,YAAoB,EACpB,UAAmC,EACnC,OAAyC;QAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,aAAa,YAAY,4CAA4C,CACtE,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,EAAE,KAAK,EAAE,oCAAoC,YAAY,EAAE,EAAE;gBACrE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;aAC3B,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;CACF,CAAA;AAzEY,0EAA+B;0CAA/B,+BAA+B;IAD3C,IAAA,mBAAU,GAAE;6CAMQ,yCAA8B;QACxB,+CAAoC;QACpC,+CAAoC;QAC1C,yCAA8B;QAC3B,4CAAiC;QACvC,sCAA2B;QAC7B,oCAAyB;QACvB,sCAA2B;QAC3B,sCAA2B;QAC7B,4BAAiB;QAChB,qCAA0B;QAChB,+CAAoC;QAC9C,qCAA0B;GAjB9B,+BAA+B,CAyE3C;AAED,YAAY"}

package/workflow/src/lib/activities/workflow-activity.utils.d.ts

@@ -0,0 +1,24 @@
+export type EmployeeOutputShape = {
+    displayName: string;
+    [key: string]: unknown;
+};
+/** Resolves a persisted FK or lookup snapshot to a scalar id. */
+export declare function scalarEntityId(value: unknown): string | null;
+/** Non-empty trimmed string or undefined (for optional workflow command inputs). */
+export declare function optionalTrimmedString(raw: unknown): string | undefined;
+export declare function mapEmployeeRowToOutput(emp: ({
+    displayName?: string;
+    person?: {
+        displayName?: string;
+    };
+    [key: string]: unknown;
+} & {
+    id?: string;
+}) | null): EmployeeOutputShape;
+export declare function extractSubjectEmployeeIdFromRecord(record: Record<string, unknown>): {
+    subjectEmployeeId: string | null;
+    nestedEmployeeHint: EmployeeOutputShape | null;
+    nameHint: string | undefined;
+};
+export declare function isEmptyPermissionKey(key: string): boolean;
+export declare function extractRoleIds(user: Record<string, unknown>): string[];

package/workflow/src/lib/activities/workflow-activity.utils.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scalarEntityId = scalarEntityId;
+exports.optionalTrimmedString = optionalTrimmedString;
+exports.mapEmployeeRowToOutput = mapEmployeeRowToOutput;
+exports.extractSubjectEmployeeIdFromRecord = extractSubjectEmployeeIdFromRecord;
+exports.isEmptyPermissionKey = isEmptyPermissionKey;
+exports.extractRoleIds = extractRoleIds;
+const lodash_es_1 = require("lodash-es");
+/** Resolves a persisted FK or lookup snapshot to a scalar id. */
+function scalarEntityId(value) {
+    if (value == null || value === '') {
+        return null;
+    }
+    if (typeof value === 'string' || typeof value === 'number') {
+        const s = String(value).trim();
+        return s.length > 0 ? s : null;
+    }
+    if (typeof value === 'object' && value !== null && 'id' in value) {
+        const id = value.id;
+        if (id == null || id === '') {
+            return null;
+        }
+        const s = String(id).trim();
+        return s.length > 0 ? s : null;
+    }
+    return null;
+}
+/** Non-empty trimmed string or undefined (for optional workflow command inputs). */
+function optionalTrimmedString(raw) {
+    if (raw == null || raw === '') {
+        return undefined;
+    }
+    const s = typeof raw === 'string' ? raw.trim() : String(raw).trim();
+    return s.length > 0 ? s : undefined;
+}
+function mapEmployeeRowToOutput(emp) {
+    if (!emp) {
+        return { displayName: '' };
+    }
+    return {
+        displayName: emp.person?.displayName ?? emp.displayName ?? '',
+        ...emp,
+    };
+}
+function extractSubjectEmployeeIdFromRecord(record) {
+    const scalarFields = [
+        'employeeId',
+        'assigneeEmployeeId',
+        'subjectEmployeeId',
+        'requesterEmployeeId',
+        'ownerEmployeeId',
+    ];
+    for (const field of scalarFields) {
+        const id = scalarEntityId(record[field]);
+        if (id) {
+            return { subjectEmployeeId: id, nestedEmployeeHint: null, nameHint: undefined };
+        }
+    }
+    const nestedFields = ['employee', 'assignee', 'subject'];
+    for (const field of nestedFields) {
+        const nested = record[field];
+        const id = scalarEntityId(nested);
+        if (!id) {
+            continue;
+        }
+        let hint = null;
+        if (nested !== null && typeof nested === 'object') {
+            const o = nested;
+            hint = {
+                displayName: o.person?.displayName ?? o.displayName ?? '',
+                ...o,
+            };
+        }
+        return { subjectEmployeeId: id, nestedEmployeeHint: hint, nameHint: undefined };
+    }
+    const nameHintRaw = record['employeeName'];
+    const nameHint = typeof nameHintRaw === 'string' && nameHintRaw.trim() !== ''
+        ? nameHintRaw.trim()
+        : typeof nameHintRaw === 'object' &&
+            nameHintRaw !== null &&
+            'en-US' in nameHintRaw
+            ? String(nameHintRaw['en-US'] ?? '').trim() || undefined
+            : undefined;
+    return {
+        subjectEmployeeId: null,
+        nestedEmployeeHint: null,
+        nameHint,
+    };
+}
+function isEmptyPermissionKey(key) {
+    return (0, lodash_es_1.isNil)(key) || String(key).trim().length === 0;
+}
+function extractRoleIds(user) {
+    const roleIds = (0, lodash_es_1.get)(user, 'roleIds');
+    if (Array.isArray(roleIds) && roleIds.length > 0) {
+        return roleIds.filter((id) => typeof id === 'string');
+    }
+    const roles = (0, lodash_es_1.get)(user, 'roles');
+    if (Array.isArray(roles) && roles.length > 0) {
+        return roles
+            .map((role) => (typeof role?.id === 'string' ? role.id : undefined))
+            .filter((id) => typeof id === 'string');
+    }
+    return [];
+}
+//#endregion
+//# sourceMappingURL=workflow-activity.utils.js.map

package/workflow/src/lib/activities/workflow-activity.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-activity.utils.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/activities/workflow-activity.utils.ts"],"names":[],"mappings":";;AAOA,wCAiBC;AAGD,sDAMC;AAED,wDAgBC;AAED,gFAyDC;AAED,oDAEC;AAED,wCAcC;AAlID,yCAAuC;AAMvC,iEAAiE;AACjE,SAAgB,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;QACjE,MAAM,EAAE,GAAI,KAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,SAAgB,qBAAqB,CAAC,GAAY;IAChD,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACpE,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED,SAAgB,sBAAsB,CACpC,GAMQ;IAER,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE;QAC7D,GAAG,GAAG;KACP,CAAC;AACJ,CAAC;AAED,SAAgB,kCAAkC,CAAC,MAA+B;IAKhF,MAAM,YAAY,GAAG;QACnB,YAAY;QACZ,oBAAoB;QACpB,mBAAmB;QACnB,qBAAqB;QACrB,iBAAiB;KACT,CAAC;IAEX,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,IAAI,EAAE,EAAE,CAAC;YACP,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QAClF,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;IAClE,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,SAAS;QACX,CAAC;QACD,IAAI,IAAI,GAA+B,IAAI,CAAC;QAC5C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,MAIT,CAAC;YACF,IAAI,GAAG;gBACL,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE;gBACzD,GAAG,CAAC;aACL,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAClF,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAC3C,MAAM,QAAQ,GACZ,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE;QAC1D,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE;QACpB,CAAC,CAAC,OAAO,WAAW,KAAK,QAAQ;YAC7B,WAAW,KAAK,IAAI;YACpB,OAAO,IAAK,WAAsB;YACpC,CAAC,CAAC,MAAM,CAAE,WAAqC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS;YACnF,CAAC,CAAC,SAAS,CAAC;IAElB,OAAO;QACL,iBAAiB,EAAE,IAAI;QACvB,kBAAkB,EAAE,IAAI;QACxB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,OAAO,IAAA,iBAAK,EAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,SAAgB,cAAc,CAAC,IAA6B;IAC1D,MAAM,OAAO,GAAG,IAAA,eAAG,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,eAAG,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,KAAK;aACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;aACnE,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,YAAY"}

package/workflow/src/lib/activities/workflow-permission.service.d.ts

@@ -0,0 +1,21 @@
+import { EntityStorageMiddlewareService } from '@acorex-platform/framework-server/core';
+/**
+ * Resolves user permissions from entity storage for backend workflow activities.
+ * Mirrors {@link AXCApiPermissionLoader} on the frontend API connectivity layer.
+ */
+export declare class WorkflowPermissionService {
+    private readonly entityStorage;
+    constructor(entityStorage: EntityStorageMiddlewareService);
+    /**
+     * Returns true when the user has all requested permission keys.
+     */
+    authorize(userId: string | undefined, ...keys: string[]): Promise<boolean>;
+    /**
+     * Loads deduplicated permission keys for a platform user.
+     */
+    loadUserPermissions(userId: string): Promise<string[]>;
+    /**
+     * Resolves permission keys from role assignments on a user record.
+     */
+    private resolvePermissionsForUser;
+}

package/workflow/src/lib/activities/workflow-permission.service.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowPermissionService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const core_1 = require("@acorex-platform/framework-server/core");
+const platform_root_user_util_1 = require("../authorization/platform-root-user.util");
+const lodash_es_1 = require("lodash-es");
+const workflow_activity_constants_1 = require("./workflow-activity.constants");
+const workflow_activity_utils_1 = require("./workflow-activity.utils");
+//#region ---- Workflow permission service ----
+/**
+ * Resolves user permissions from entity storage for backend workflow activities.
+ * Mirrors {@link AXCApiPermissionLoader} on the frontend API connectivity layer.
+ */
+let WorkflowPermissionService = class WorkflowPermissionService {
+    constructor(entityStorage) {
+        this.entityStorage = entityStorage;
+    }
+    /**
+     * Returns true when the user has all requested permission keys.
+     */
+    async authorize(userId, ...keys) {
+        const normalizedKeys = keys.filter((k) => !(0, workflow_activity_utils_1.isEmptyPermissionKey)(k));
+        if (normalizedKeys.length === 0) {
+            return true;
+        }
+        if (!userId) {
+            return false;
+        }
+        if ((0, platform_root_user_util_1.isPlatformRootUserId)(userId)) {
+            return true;
+        }
+        const user = await this.entityStorage.getOne(workflow_activity_constants_1.WORKFLOW_USER_ENTITY, userId);
+        // TODO ?!
+        if (user && typeof user === 'object' && (0, platform_root_user_util_1.isPlatformRootUserRecord)(user)) {
+            return true;
+        }
+        const permissions = await this.resolvePermissionsForUser(user && typeof user === 'object' ? user : null);
+        if ((0, platform_root_user_util_1.hasPlatformOperatorWildcardPermission)(permissions)) {
+            return true;
+        }
+        return normalizedKeys.every((key) => permissions.includes(key));
+    }
+    /**
+     * Loads deduplicated permission keys for a platform user.
+     */
+    async loadUserPermissions(userId) {
+        if ((0, platform_root_user_util_1.isPlatformRootUserId)(userId)) {
+            return [];
+        }
+        const user = await this.entityStorage.getOne(workflow_activity_constants_1.WORKFLOW_USER_ENTITY, userId);
+        //TODO diff check
+        if (!user || typeof user !== 'object' || (0, platform_root_user_util_1.isPlatformRootUserRecord)(user)) {
+            return [];
+        }
+        return this.resolvePermissionsForUser(user);
+    }
+    /**
+     * Resolves permission keys from role assignments on a user record.
+     */
+    async resolvePermissionsForUser(user) {
+        if (!user) {
+            return [];
+        }
+        const roleIds = (0, workflow_activity_utils_1.extractRoleIds)(user);
+        if (roleIds.length === 0) {
+            return [];
+        }
+        const rolesResult = await this.entityStorage.query(workflow_activity_constants_1.WORKFLOW_ROLE_ENTITY, {
+            skip: 0,
+            take: 1000,
+            filter: {
+                logic: 'and',
+                filters: [{ field: 'id', operator: { type: 'in' }, value: roleIds }],
+            },
+        });
+        const items = (0, lodash_es_1.get)(rolesResult, 'items', []);
+        if (!Array.isArray(items)) {
+            return [];
+        }
+        return items
+            .flatMap((role) => {
+            if (!role || typeof role !== 'object') {
+                return [];
+            }
+            const perms = (0, lodash_es_1.get)(role, 'permissions', []);
+            return Array.isArray(perms) ? perms : [];
+        })
+            .filter((permission, index, array) => typeof permission === 'string' && array.indexOf(permission) === index);
+    }
+};
+exports.WorkflowPermissionService = WorkflowPermissionService;
+exports.WorkflowPermissionService = WorkflowPermissionService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [core_1.EntityStorageMiddlewareService])
+], WorkflowPermissionService);
+//#endregion
+//# sourceMappingURL=workflow-permission.service.js.map

package/workflow/src/lib/activities/workflow-permission.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-permission.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/activities/workflow-permission.service.ts"],"names":[],"mappings":";;;;AAAA,2CAA4C;AAC5C,iEAAwF;AACxF,sFAIkD;AAClD,yCAAgC;AAChC,+EAA2F;AAC3F,uEAAiF;AAEjF,+CAA+C;AAE/C;;;GAGG;AAEI,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IACpC,YAA6B,aAA6C;QAA7C,kBAAa,GAAb,aAAa,CAAgC;IAAG,CAAC;IAE9E;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,MAA0B,EAAE,GAAG,IAAc;QAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAA,8CAAoB,EAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,IAAA,8CAAoB,EAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,kDAAoB,EAAE,MAAM,CAAC,CAAC;QAC3E,UAAU;QACV,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAA,kDAAwB,EAAC,IAA+B,CAAC,EAAE,CAAC;YAClG,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,yBAAyB,CACtD,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,IAAI,CAC5E,CAAC;QACF,IAAI,IAAA,+DAAqC,EAAC,WAAW,CAAC,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,MAAc;QACtC,IAAI,IAAA,8CAAoB,EAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,kDAAoB,EAAE,MAAM,CAAC,CAAC;QAC3E,iBAAiB;QACjB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAA,kDAAwB,EAAC,IAA+B,CAAC,EAAE,CAAC;YACnG,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,IAAI,CAAC,yBAAyB,CAAC,IAA+B,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,yBAAyB,CAAC,IAAoC;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAG,IAAA,wCAAc,EAAC,IAAI,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,kDAAoB,EAAE;YACvE,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,IAAI;YACV,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;aACrE;SACF,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAA,eAAG,EAAC,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,KAAK;aACT,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAChB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,KAAK,GAAG,IAAA,eAAG,EAAC,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;YAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,CAAC;IACjH,CAAC;CACF,CAAA;AAzFY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;6CAEiC,qCAA8B;GAD/D,yBAAyB,CAyFrC;AAED,YAAY"}

package/workflow/src/lib/activities/workflow-request-session.adapter.d.ts

@@ -0,0 +1,9 @@
+import type { WorkflowActivitySessionReader } from './workflow-activity-execution.types';
+/**
+ * Reads the authenticated user id from the current HTTP request without importing platform security.
+ */
+export declare class WorkflowRequestSessionAdapter implements WorkflowActivitySessionReader {
+    private readonly request;
+    constructor(request: Record<string, unknown>);
+    get userId(): string | undefined;
+}

package/workflow/src/lib/activities/workflow-request-session.adapter.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowRequestSessionAdapter = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+//#region ---- Request session adapter ----
+/** Must match {@link CURRENT_SESSION_KEY} in platform security. */
+const REQUEST_SESSION_KEY = 'acxRequestSession';
+/**
+ * Reads the authenticated user id from the current HTTP request without importing platform security.
+ */
+let WorkflowRequestSessionAdapter = class WorkflowRequestSessionAdapter {
+    constructor(request) {
+        this.request = request;
+    }
+    get userId() {
+        const session = this.request[REQUEST_SESSION_KEY];
+        return session?.userId;
+    }
+};
+exports.WorkflowRequestSessionAdapter = WorkflowRequestSessionAdapter;
+exports.WorkflowRequestSessionAdapter = WorkflowRequestSessionAdapter = tslib_1.__decorate([
+    (0, common_1.Injectable)({ scope: common_1.Scope.REQUEST }),
+    tslib_1.__param(0, (0, common_1.Inject)(core_1.REQUEST)),
+    tslib_1.__metadata("design:paramtypes", [Object])
+], WorkflowRequestSessionAdapter);
+//#endregion
+//# sourceMappingURL=workflow-request-session.adapter.js.map

package/workflow/src/lib/activities/workflow-request-session.adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-request-session.adapter.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/activities/workflow-request-session.adapter.ts"],"names":[],"mappings":";;;;AAAA,2CAA2D;AAC3D,uCAAuC;AAGvC,2CAA2C;AAE3C,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEhD;;GAEG;AAEI,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IACxC,YAA8C,OAAgC;QAAhC,YAAO,GAAP,OAAO,CAAyB;IAAG,CAAC;IAElF,IAAI,MAAM;QACR,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAoC,CAAC;QACrF,OAAO,OAAO,EAAE,MAAM,CAAC;IACzB,CAAC;CACF,CAAA;AAPY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,EAAC,EAAE,KAAK,EAAE,cAAK,CAAC,OAAO,EAAE,CAAC;IAEtB,mBAAA,IAAA,eAAM,EAAC,cAAO,CAAC,CAAA;;GADjB,6BAA6B,CAOzC;AAED,YAAY"}

package/workflow/src/lib/activity/activity.types.d.ts

@@ -0,0 +1,130 @@
+import type { AXPCategoryEntity, AXPProperty, AXPMultiLanguageString } from '../runtime/platform-core.types';
+import type { AXPWorkflowOutputProperty } from '../runtime/workflow-definition.types';
+/**
+ * Type of task for inbox handling.
+ * - 'human-task': Requires inbox - needs human interaction
+ * - 'ui-activity': UI-only activity (no inbox) - immediate execution
+ * - 'system-activity': System/backend activity (no inbox) - automated execution
+ */
+export type AXPTaskType = 'human-task' | 'ui-activity' | 'system-activity';
+/**
+ * How the workflow engine should offer "continue to next step?" before an inline frontend activity.
+ * Declared on {@link AXPActivityDefinition} and copied onto {@link AXPWorkflowTask} at runtime.
+ */
+export type AXPWorkflowContinuationBeforeInteractive = 'default'
+/** Skip when opened from a task-board human-task primary action (e.g. start-fill, review). */
+ | 'skip-when-chained-from-human-task'
+/** Skip for the natural assignee; initiator / reassign users still get the prompt (workflow-management). */
+ | 'skip-for-assignee';
+/** Optional continuation UX metadata for an activity definition. */
+export interface AXPWorkflowContinuationMetadata {
+    beforeInteractive?: AXPWorkflowContinuationBeforeInteractive;
+}
+/**
+ * Activity Category - Extends AXPCategoryEntity for consistency and performance
+ *
+ * Inherited properties from AXPCategoryEntity:
+ * - id: string                   - Unique identifier
+ * - title: string                - Display name
+ * - description?: string         - Category description
+ * - parentId?: string            - Parent category ID
+ * - childrenCount: number        - Direct child categories count (enables lazy loading)
+ * - itemsCount?: number          - Direct activities count
+ * - totalChildrenCount?: number  - Total nested categories (optional, for analytics)
+ * - totalItemsCount?: number     - Total activities in tree (optional, for analytics)
+ */
+export interface AXPActivityCategory extends AXPCategoryEntity {
+}
+/**
+ * Lightweight category snapshot embedded in activity-definition records.
+ */
+export interface AXPActivityDefinitionCategoryRef {
+    id: string;
+    name: string;
+    title: AXPMultiLanguageString;
+}
+/**
+ * Activity Definition - Metadata for UI and tooling.
+ * Contains all metadata needed for displaying activities in toolbox and designer.
+ * The `name` property is used as the command key for execution.
+ */
+export interface AXPActivityDefinition {
+    /**
+     * Activity name - used as command key for execution.
+     * This is the unique identifier for the activity.
+     */
+    name: string;
+    /**
+     * Activity type (e.g., "workflow-activity:check-permission").
+     */
+    type: string;
+    /**
+     * Display name for UI (plain or per-locale map).
+     */
+    title?: AXPMultiLanguageString;
+    instanceTitle?: string;
+    /**
+     * Description of what the activity does (plain or per-locale map).
+     */
+    description?: AXPMultiLanguageString;
+    /**
+     * Category for grouping in toolbox.
+     */
+    category?: AXPActivityDefinitionCategoryRef;
+    /**
+     * Icon name or class.
+     */
+    icon?: string;
+    /**
+     * Where this activity should be executed.
+     * - 'frontend': Execute in browser (UI activities, console, events)
+     * - 'backend': Execute in backend (business logic, API calls)
+     * - 'both': Execute in both frontend and backend (hybrid activities)
+     *
+     * Default: 'frontend'
+     */
+    executionMode?: 'frontend' | 'backend' | 'both';
+    /**
+     * Type of task for inbox handling.
+     * - 'human-task': Requires inbox - needs human interaction
+     * - 'ui-activity': UI-only activity (no inbox) - immediate execution
+     * - 'system-activity': System/backend activity (no inbox) - automated execution
+     *
+     * Default: 'ui-activity' (for backward compatibility)
+     */
+    taskType?: AXPTaskType;
+    /**
+     * Input properties (form/schema for activity parameters).
+     */
+    inputs?: AXPProperty[];
+    /**
+     * Output properties (result shape + optional path/metadata).
+     */
+    outputs?: AXPWorkflowOutputProperty[];
+    /**
+     * Static outcomes (exit points).
+     * Example: ['Done', 'Success', 'Failed']
+     */
+    outcomes?: string[];
+    /**
+     * Whether this activity is browsable in the toolbox.
+     * Default: true
+     */
+    isBrowsable?: boolean;
+    /**
+     * Whether this activity is a container (can have children).
+     * Default: false
+     */
+    isContainer?: boolean;
+    /**
+     * Continuation prompt behavior when this activity runs inline in the workflow manager.
+     */
+    workflowContinuation?: AXPWorkflowContinuationMetadata;
+}
+/**
+ * Query result shape for activity-definition catalog endpoints.
+ */
+export interface AXPActivityDefinitionQueryResult {
+    total: number;
+    items: AXPActivityDefinition[];
+}

package/workflow/src/lib/activity/activity.types.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+// Note:
+// Previous versions defined dedicated activity result/command types here
+// (AXPActivityResult / AXPActivity) that wrapped output and outcome.
+// Activities are now modeled directly as AXPCommand with outcome stored in
+// AXPExecuteCommandResult.metadata.outcome.
+//# sourceMappingURL=activity.types.js.map

package/workflow/src/lib/activity/activity.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.types.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/activity/activity.types.ts"],"names":[],"mappings":";;AAiKA,QAAQ;AACR,yEAAyE;AACzE,qEAAqE;AACrE,2EAA2E;AAC3E,4CAA4C"}

package/workflow/src/lib/authorization/platform-root-user.util.d.ts

@@ -0,0 +1 @@
+export { PLATFORM_OPERATOR_WILDCARD_FEATURE, PLATFORM_OPERATOR_WILDCARD_PERMISSION, PLATFORM_ROOT_USER_IDS, PLATFORM_ROOT_USERNAMES, hasPlatformOperatorWildcardPermission, isPlatformOperator, isPlatformOperatorForFeatures, isPlatformRootSessionUser, isPlatformRootUserId, isPlatformRootUserRecord, isPlatformRootUsername, type PlatformRootUsername, } from '@acorex-platform/framework-server/security';

package/workflow/src/lib/authorization/platform-root-user.util.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isPlatformRootUsername = exports.isPlatformRootUserRecord = exports.isPlatformRootUserId = exports.isPlatformRootSessionUser = exports.isPlatformOperatorForFeatures = exports.isPlatformOperator = exports.hasPlatformOperatorWildcardPermission = exports.PLATFORM_ROOT_USERNAMES = exports.PLATFORM_ROOT_USER_IDS = exports.PLATFORM_OPERATOR_WILDCARD_PERMISSION = exports.PLATFORM_OPERATOR_WILDCARD_FEATURE = void 0;
+var security_1 = require("@acorex-platform/framework-server/security");
+Object.defineProperty(exports, "PLATFORM_OPERATOR_WILDCARD_FEATURE", { enumerable: true, get: function () { return security_1.PLATFORM_OPERATOR_WILDCARD_FEATURE; } });
+Object.defineProperty(exports, "PLATFORM_OPERATOR_WILDCARD_PERMISSION", { enumerable: true, get: function () { return security_1.PLATFORM_OPERATOR_WILDCARD_PERMISSION; } });
+Object.defineProperty(exports, "PLATFORM_ROOT_USER_IDS", { enumerable: true, get: function () { return security_1.PLATFORM_ROOT_USER_IDS; } });
+Object.defineProperty(exports, "PLATFORM_ROOT_USERNAMES", { enumerable: true, get: function () { return security_1.PLATFORM_ROOT_USERNAMES; } });
+Object.defineProperty(exports, "hasPlatformOperatorWildcardPermission", { enumerable: true, get: function () { return security_1.hasPlatformOperatorWildcardPermission; } });
+Object.defineProperty(exports, "isPlatformOperator", { enumerable: true, get: function () { return security_1.isPlatformOperator; } });
+Object.defineProperty(exports, "isPlatformOperatorForFeatures", { enumerable: true, get: function () { return security_1.isPlatformOperatorForFeatures; } });
+Object.defineProperty(exports, "isPlatformRootSessionUser", { enumerable: true, get: function () { return security_1.isPlatformRootSessionUser; } });
+Object.defineProperty(exports, "isPlatformRootUserId", { enumerable: true, get: function () { return security_1.isPlatformRootUserId; } });
+Object.defineProperty(exports, "isPlatformRootUserRecord", { enumerable: true, get: function () { return security_1.isPlatformRootUserRecord; } });
+Object.defineProperty(exports, "isPlatformRootUsername", { enumerable: true, get: function () { return security_1.isPlatformRootUsername; } });
+//# sourceMappingURL=platform-root-user.util.js.map

package/workflow/src/lib/authorization/platform-root-user.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-root-user.util.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/authorization/platform-root-user.util.ts"],"names":[],"mappings":";;;AAAA,uEAaoD;AAZlD,8HAAA,kCAAkC,OAAA;AAClC,iIAAA,qCAAqC,OAAA;AACrC,kHAAA,sBAAsB,OAAA;AACtB,mHAAA,uBAAuB,OAAA;AACvB,iIAAA,qCAAqC,OAAA;AACrC,8GAAA,kBAAkB,OAAA;AAClB,yHAAA,6BAA6B,OAAA;AAC7B,qHAAA,yBAAyB,OAAA;AACzB,gHAAA,oBAAoB,OAAA;AACpB,oHAAA,wBAAwB,OAAA;AACxB,kHAAA,sBAAsB,OAAA"}

package/workflow/src/lib/jobs/workflow-job-dispatcher.service.d.ts

@@ -0,0 +1,20 @@
+import type { Queue } from 'bullmq';
+import { BackendWorkflowEngineService } from '../runtime/workflow-engine.service';
+import { WorkflowExecutionStoreService } from '../runtime/workflow-execution-store.service';
+import { EntityStorageMiddlewareService } from '@acorex-platform/framework-server/core';
+import type { AXPStartWorkflowRequest } from '../runtime/workflow-runtime.types';
+import type { SyncEntityRecordWorkflowInfoParams } from '../runtime/entity-workflow-info.sync';
+import type { WorkflowStartJobPayload } from './workflow-start-job.types';
+/**
+ * Enqueues workflow starts on BullMQ when a queue is available; otherwise runs inline.
+ */
+export declare class WorkflowJobDispatcherService {
+    private readonly engine;
+    private readonly entityStorage;
+    private readonly store;
+    private readonly queue;
+    private readonly logger;
+    constructor(engine: BackendWorkflowEngineService, entityStorage: EntityStorageMiddlewareService, store: WorkflowExecutionStoreService, queue: Queue<WorkflowStartJobPayload> | null);
+    dispatchStart(request: AXPStartWorkflowRequest, syncEntity?: SyncEntityRecordWorkflowInfoParams): Promise<void>;
+    runStart(payload: WorkflowStartJobPayload): Promise<void>;
+}