@contractspec/lib.workflow-composer 3.7.16 → 3.7.18

package/dist/browser/index.js

@@ -1,339 +1 @@
-// src/composer.ts
-import { satisfies } from "compare-versions";
-
-// src/injector.ts
-import {
-  validateWorkflowSpec
-} from "@contractspec/lib.contracts-spec/workflow";
-
-// src/validator.ts
-function validateExtension(extension, base) {
-  const issues = [];
-  const baseStepIds = new Set(base.definition.steps.map((step) => step.id));
-  const hiddenSteps = new Set(extension.hiddenSteps ?? []);
-  const visibleStepIds = new Set(baseStepIds);
-  const visibleTransitions = base.definition.transitions.filter((transition) => visibleStepIds.has(transition.from) && visibleStepIds.has(transition.to)).map((transition) => ({ ...transition }));
-  if (!extension.workflow.trim()) {
-    issues.push({
-      code: "workflow.extension.workflow",
-      message: "workflow is required"
-    });
-  }
-  if (extension.workflow !== base.meta.key) {
-    issues.push({
-      code: "workflow.extension.workflow.mismatch",
-      message: `extension targets "${extension.workflow}" but base workflow is "${base.meta.key}"`
-    });
-  }
-  hiddenSteps.forEach((stepId) => {
-    if (!baseStepIds.has(stepId)) {
-      issues.push({
-        code: "workflow.extension.hidden-step",
-        message: `hidden step "${stepId}" does not exist`
-      });
-      return;
-    }
-    visibleStepIds.delete(stepId);
-  });
-  removeHiddenTransitions(visibleTransitions, hiddenSteps);
-  const availableAnchorSteps = new Set([...baseStepIds].filter((stepId) => !hiddenSteps.has(stepId)));
-  extension.customSteps?.forEach((injection, idx) => {
-    const injectionId = injection.inject.id?.trim();
-    if (!injectionId) {
-      issues.push({
-        code: "workflow.extension.step.id",
-        message: `customSteps[${idx}] is missing an id`
-      });
-      return;
-    }
-    if (injection.id && injection.id !== injectionId) {
-      issues.push({
-        code: "workflow.extension.step.id-mismatch",
-        message: `customSteps[${idx}] has mismatched id (id="${injection.id}", inject.id="${injectionId}")`
-      });
-    }
-    if (availableAnchorSteps.has(injectionId)) {
-      issues.push({
-        code: "workflow.extension.step.id.duplicate",
-        message: `customSteps[${idx}] injects duplicate step id "${injectionId}"`
-      });
-    }
-    if (injection.after && injection.before) {
-      issues.push({
-        code: "workflow.extension.step.anchor.multiple",
-        message: `customSteps[${idx}] cannot set both after and before`
-      });
-    }
-    if (!injection.after && !injection.before) {
-      issues.push({
-        code: "workflow.extension.step.anchor",
-        message: `customSteps[${idx}] must set after or before`
-      });
-    }
-    if (injection.after && !availableAnchorSteps.has(injection.after)) {
-      issues.push({
-        code: "workflow.extension.step.after",
-        message: `customSteps[${idx}] references unknown step "${injection.after}"`
-      });
-    }
-    if (injection.before && !availableAnchorSteps.has(injection.before)) {
-      issues.push({
-        code: "workflow.extension.step.before",
-        message: `customSteps[${idx}] references unknown step "${injection.before}"`
-      });
-    }
-    if (injection.transitionFrom && !availableAnchorSteps.has(injection.transitionFrom)) {
-      issues.push({
-        code: "workflow.extension.step.transition-from",
-        message: `customSteps[${idx}] references unknown transitionFrom step "${injection.transitionFrom}"`
-      });
-    }
-    if (injection.transitionTo && !availableAnchorSteps.has(injection.transitionTo)) {
-      issues.push({
-        code: "workflow.extension.step.transition-to",
-        message: `customSteps[${idx}] references unknown transitionTo step "${injection.transitionTo}"`
-      });
-    }
-    availableAnchorSteps.add(injectionId);
-    visibleStepIds.add(injectionId);
-    if (injection.transitionFrom) {
-      visibleTransitions.push({
-        from: injection.transitionFrom,
-        to: injectionId,
-        condition: injection.when
-      });
-    }
-    if (injection.transitionTo) {
-      visibleTransitions.push({
-        from: injectionId,
-        to: injection.transitionTo,
-        condition: injection.when
-      });
-    }
-  });
-  const entryStepId = base.definition.entryStepId ?? base.definition.steps[0]?.id;
-  if (entryStepId && hiddenSteps.has(entryStepId)) {
-    issues.push({
-      code: "workflow.extension.hidden-step.entry",
-      message: `hiddenSteps removes the entry step "${entryStepId}"`
-    });
-  }
-  if (entryStepId && !hiddenSteps.has(entryStepId)) {
-    const reachable = collectReachableSteps(entryStepId, visibleTransitions);
-    for (const stepId of visibleStepIds) {
-      if (!reachable.has(stepId)) {
-        issues.push({
-          code: "workflow.extension.hidden-step.orphan",
-          message: `extension leaves step "${stepId}" unreachable from entry step "${entryStepId}"`
-        });
-      }
-    }
-  }
-  if (issues.length) {
-    const reason = issues.map((issue) => `${issue.code}: ${issue.message}`).join("; ");
-    throw new Error(`Invalid workflow extension for ${extension.workflow}: ${reason}`);
-  }
-}
-function removeHiddenTransitions(transitions, hiddenSteps) {
-  for (let index = transitions.length - 1;index >= 0; index -= 1) {
-    const transition = transitions[index];
-    if (!transition) {
-      continue;
-    }
-    if (hiddenSteps.has(transition.from) || hiddenSteps.has(transition.to)) {
-      transitions.splice(index, 1);
-    }
-  }
-}
-function collectReachableSteps(entryStepId, transitions) {
-  const adjacency = new Map;
-  for (const transition of transitions) {
-    const next = adjacency.get(transition.from) ?? [];
-    next.push(transition.to);
-    adjacency.set(transition.from, next);
-  }
-  const reachable = new Set;
-  const queue = [entryStepId];
-  while (queue.length > 0) {
-    const current = queue.shift();
-    if (!current || reachable.has(current)) {
-      continue;
-    }
-    reachable.add(current);
-    for (const next of adjacency.get(current) ?? []) {
-      queue.push(next);
-    }
-  }
-  return reachable;
-}
-
-// src/injector.ts
-function applyWorkflowExtension(base, extension) {
-  validateExtension(extension, base);
-  const spec = cloneWorkflowSpec(base);
-  const steps = [...spec.definition.steps];
-  let transitions = [...spec.definition.transitions];
-  const hiddenSet = new Set(extension.hiddenSteps ?? []);
-  hiddenSet.forEach((stepId) => {
-    const idx = steps.findIndex((step) => step.id === stepId);
-    if (idx !== -1) {
-      steps.splice(idx, 1);
-    }
-  });
-  if (hiddenSet.size) {
-    transitions = transitions.filter((transition) => !hiddenSet.has(transition.from) && !hiddenSet.has(transition.to));
-  }
-  extension.customSteps?.forEach((injection) => {
-    insertStep(steps, injection);
-    wireTransitions(transitions, injection);
-  });
-  spec.definition.steps = steps;
-  spec.definition.transitions = dedupeTransitions(transitions);
-  spec.metadata = mergeRecords(spec.metadata, extension.metadata);
-  spec.annotations = mergeRecords(spec.annotations, extension.annotations);
-  const issues = validateWorkflowSpec(spec);
-  const blockingIssues = issues.filter((issue) => issue.level === "error");
-  if (blockingIssues.length > 0) {
-    throw new Error(`Invalid composed workflow ${spec.meta.key}.v${spec.meta.version}: ${blockingIssues.map((issue) => issue.message).join("; ")}`);
-  }
-  return spec;
-}
-function insertStep(steps, injection) {
-  const anchorIndex = resolveAnchorIndex(steps, injection);
-  if (anchorIndex === -1) {
-    throw new Error(`Unable to place injected step "${injection.inject.id}"`);
-  }
-  steps.splice(anchorIndex, 0, { ...injection.inject });
-}
-function resolveAnchorIndex(steps, injection) {
-  if (injection.after) {
-    const idx = steps.findIndex((step) => step.id === injection.after);
-    return idx === -1 ? -1 : idx + 1;
-  }
-  if (injection.before) {
-    const idx = steps.findIndex((step) => step.id === injection.before);
-    return idx === -1 ? -1 : idx;
-  }
-  return steps.length;
-}
-function wireTransitions(transitions, injection) {
-  if (!injection.inject.id)
-    return;
-  if (injection.transitionFrom) {
-    transitions.push({
-      from: injection.transitionFrom,
-      to: injection.inject.id,
-      condition: injection.when
-    });
-  }
-  if (injection.transitionTo) {
-    transitions.push({
-      from: injection.inject.id,
-      to: injection.transitionTo,
-      condition: injection.when
-    });
-  }
-}
-function dedupeTransitions(transitions) {
-  const seen = new Set;
-  const result = [];
-  transitions.forEach((transition) => {
-    const key = `${transition.from}->${transition.to}:${transition.condition ?? ""}`;
-    if (seen.has(key))
-      return;
-    seen.add(key);
-    result.push(transition);
-  });
-  return result;
-}
-function cloneWorkflowSpec(spec) {
-  return JSON.parse(JSON.stringify(spec));
-}
-function mergeRecords(base, patch) {
-  if (!base && !patch) {
-    return;
-  }
-  return {
-    ...base ?? {},
-    ...patch ?? {}
-  };
-}
-
-// src/merger.ts
-function mergeExtensions(extensions) {
-  return [...extensions].sort((a, b) => {
-    const priorityOrder = (a.priority ?? 0) - (b.priority ?? 0);
-    if (priorityOrder !== 0)
-      return priorityOrder;
-    const workflowOrder = a.workflow.localeCompare(b.workflow);
-    if (workflowOrder !== 0)
-      return workflowOrder;
-    const tenantOrder = (a.tenantId ?? "").localeCompare(b.tenantId ?? "");
-    if (tenantOrder !== 0)
-      return tenantOrder;
-    const roleOrder = (a.role ?? "").localeCompare(b.role ?? "");
-    if (roleOrder !== 0)
-      return roleOrder;
-    const deviceOrder = (a.device ?? "").localeCompare(b.device ?? "");
-    if (deviceOrder !== 0)
-      return deviceOrder;
-    return (a.baseVersion ?? "").localeCompare(b.baseVersion ?? "");
-  });
-}
-
-// src/composer.ts
-class WorkflowComposer {
-  extensions = [];
-  register(extension) {
-    this.extensions.push(extension);
-    return this;
-  }
-  registerMany(extensions) {
-    extensions.forEach((extension) => {
-      this.register(extension);
-    });
-    return this;
-  }
-  compose(params) {
-    const applicable = mergeExtensions(this.extensions.filter((extension) => matches(params, extension)));
-    return applicable.reduce((acc, extension) => applyWorkflowExtension(acc, extension), params.base);
-  }
-}
-function matches(params, extension) {
-  if (extension.workflow !== params.base.meta.key)
-    return false;
-  if (extension.baseVersion && !satisfies(params.base.meta.version, extension.baseVersion)) {
-    return false;
-  }
-  if (extension.tenantId && extension.tenantId !== params.tenantId) {
-    return false;
-  }
-  if (extension.role && extension.role !== params.role) {
-    return false;
-  }
-  if (extension.device && extension.device !== params.device) {
-    return false;
-  }
-  return true;
-}
-// src/templates.ts
-function approvalStepTemplate(options) {
-  return {
-    id: options.id,
-    label: options.label,
-    type: options.type ?? "human",
-    description: options.description ?? "Tenant-specific approval",
-    action: options.action,
-    guard: options.guardExpression ? {
-      type: "expression",
-      value: options.guardExpression
-    } : undefined
-  };
-}
-export {
-  validateExtension,
-  mergeExtensions,
-  approvalStepTemplate,
-  applyWorkflowExtension,
-  WorkflowComposer
-};
+import{satisfies as W}from"compare-versions";import{validateWorkflowSpec as i}from"@contractspec/lib.contracts-spec/workflow";function d(o,e){let r=[],s=new Set(e.definition.steps.map((t)=>t.id)),a=new Set(o.hiddenSteps??[]),f=new Set(s),m=e.definition.transitions.filter((t)=>f.has(t.from)&&f.has(t.to)).map((t)=>({...t}));if(!o.workflow.trim())r.push({code:"workflow.extension.workflow",message:"workflow is required"});if(o.workflow!==e.meta.key)r.push({code:"workflow.extension.workflow.mismatch",message:`extension targets "${o.workflow}" but base workflow is "${e.meta.key}"`});a.forEach((t)=>{if(!s.has(t)){r.push({code:"workflow.extension.hidden-step",message:`hidden step "${t}" does not exist`});return}f.delete(t)}),c(m,a);let w=new Set([...s].filter((t)=>!a.has(t)));o.customSteps?.forEach((t,p)=>{let u=t.inject.id?.trim();if(!u){r.push({code:"workflow.extension.step.id",message:`customSteps[${p}] is missing an id`});return}if(t.id&&t.id!==u)r.push({code:"workflow.extension.step.id-mismatch",message:`customSteps[${p}] has mismatched id (id="${t.id}", inject.id="${u}")`});if(w.has(u))r.push({code:"workflow.extension.step.id.duplicate",message:`customSteps[${p}] injects duplicate step id "${u}"`});if(t.after&&t.before)r.push({code:"workflow.extension.step.anchor.multiple",message:`customSteps[${p}] cannot set both after and before`});if(!t.after&&!t.before)r.push({code:"workflow.extension.step.anchor",message:`customSteps[${p}] must set after or before`});if(t.after&&!w.has(t.after))r.push({code:"workflow.extension.step.after",message:`customSteps[${p}] references unknown step "${t.after}"`});if(t.before&&!w.has(t.before))r.push({code:"workflow.extension.step.before",message:`customSteps[${p}] references unknown step "${t.before}"`});if(t.transitionFrom&&!w.has(t.transitionFrom))r.push({code:"workflow.extension.step.transition-from",message:`customSteps[${p}] references unknown transitionFrom step "${t.transitionFrom}"`});if(t.transitionTo&&!w.has(t.transitionTo))r.push({code:"workflow.extension.step.transition-to",message:`customSteps[${p}] references unknown transitionTo step "${t.transitionTo}"`});if(w.add(u),f.add(u),t.transitionFrom)m.push({from:t.transitionFrom,to:u,condition:t.when});if(t.transitionTo)m.push({from:u,to:t.transitionTo,condition:t.when})});let l=e.definition.entryStepId??e.definition.steps[0]?.id;if(l&&a.has(l))r.push({code:"workflow.extension.hidden-step.entry",message:`hiddenSteps removes the entry step "${l}"`});if(l&&!a.has(l)){let t=g(l,m);for(let p of f)if(!t.has(p))r.push({code:"workflow.extension.hidden-step.orphan",message:`extension leaves step "${p}" unreachable from entry step "${l}"`})}if(r.length){let t=r.map((p)=>`${p.code}: ${p.message}`).join("; ");throw Error(`Invalid workflow extension for ${o.workflow}: ${t}`)}}function c(o,e){for(let r=o.length-1;r>=0;r-=1){let s=o[r];if(!s)continue;if(e.has(s.from)||e.has(s.to))o.splice(r,1)}}function g(o,e){let r=new Map;for(let f of e){let m=r.get(f.from)??[];m.push(f.to),r.set(f.from,m)}let s=new Set,a=[o];while(a.length>0){let f=a.shift();if(!f||s.has(f))continue;s.add(f);for(let m of r.get(f)??[])a.push(m)}return s}function h(o,e){d(e,o);let r=v(o),s=[...r.definition.steps],a=[...r.definition.transitions],f=new Set(e.hiddenSteps??[]);if(f.forEach((l)=>{let t=s.findIndex((p)=>p.id===l);if(t!==-1)s.splice(t,1)}),f.size)a=a.filter((l)=>!f.has(l.from)&&!f.has(l.to));e.customSteps?.forEach((l)=>{S(s,l),$(a,l)}),r.definition.steps=s,r.definition.transitions=E(a),r.metadata=n(r.metadata,e.metadata),r.annotations=n(r.annotations,e.annotations);let w=i(r).filter((l)=>l.level==="error");if(w.length>0)throw Error(`Invalid composed workflow ${r.meta.key}.v${r.meta.version}: ${w.map((l)=>l.message).join("; ")}`);return r}function S(o,e){let r=y(o,e);if(r===-1)throw Error(`Unable to place injected step "${e.inject.id}"`);o.splice(r,0,{...e.inject})}function y(o,e){if(e.after){let r=o.findIndex((s)=>s.id===e.after);return r===-1?-1:r+1}if(e.before){let r=o.findIndex((s)=>s.id===e.before);return r===-1?-1:r}return o.length}function $(o,e){if(!e.inject.id)return;if(e.transitionFrom)o.push({from:e.transitionFrom,to:e.inject.id,condition:e.when});if(e.transitionTo)o.push({from:e.inject.id,to:e.transitionTo,condition:e.when})}function E(o){let e=new Set,r=[];return o.forEach((s)=>{let a=`${s.from}->${s.to}:${s.condition??""}`;if(e.has(a))return;e.add(a),r.push(s)}),r}function v(o){return JSON.parse(JSON.stringify(o))}function n(o,e){if(!o&&!e)return;return{...o??{},...e??{}}}function k(o){return[...o].sort((e,r)=>{let s=(e.priority??0)-(r.priority??0);if(s!==0)return s;let a=e.workflow.localeCompare(r.workflow);if(a!==0)return a;let f=(e.tenantId??"").localeCompare(r.tenantId??"");if(f!==0)return f;let m=(e.role??"").localeCompare(r.role??"");if(m!==0)return m;let w=(e.device??"").localeCompare(r.device??"");if(w!==0)return w;return(e.baseVersion??"").localeCompare(r.baseVersion??"")})}class x{extensions=[];register(o){return this.extensions.push(o),this}registerMany(o){return o.forEach((e)=>{this.register(e)}),this}compose(o){return k(this.extensions.filter((r)=>T(o,r))).reduce((r,s)=>h(r,s),o.base)}}function T(o,e){if(e.workflow!==o.base.meta.key)return!1;if(e.baseVersion&&!W(o.base.meta.version,e.baseVersion))return!1;if(e.tenantId&&e.tenantId!==o.tenantId)return!1;if(e.role&&e.role!==o.role)return!1;if(e.device&&e.device!==o.device)return!1;return!0}function H(o){return{id:o.id,label:o.label,type:o.type??"human",description:o.description??"Tenant-specific approval",action:o.action,guard:o.guardExpression?{type:"expression",value:o.guardExpression}:void 0}}export{d as validateExtension,k as mergeExtensions,H as approvalStepTemplate,h as applyWorkflowExtension,x as WorkflowComposer};

package/dist/index.js

@@ -1,340 +1,2 @@
 // @bun
-// src/composer.ts
-import { satisfies } from "compare-versions";
-
-// src/injector.ts
-import {
-  validateWorkflowSpec
-} from "@contractspec/lib.contracts-spec/workflow";
-
-// src/validator.ts
-function validateExtension(extension, base) {
-  const issues = [];
-  const baseStepIds = new Set(base.definition.steps.map((step) => step.id));
-  const hiddenSteps = new Set(extension.hiddenSteps ?? []);
-  const visibleStepIds = new Set(baseStepIds);
-  const visibleTransitions = base.definition.transitions.filter((transition) => visibleStepIds.has(transition.from) && visibleStepIds.has(transition.to)).map((transition) => ({ ...transition }));
-  if (!extension.workflow.trim()) {
-    issues.push({
-      code: "workflow.extension.workflow",
-      message: "workflow is required"
-    });
-  }
-  if (extension.workflow !== base.meta.key) {
-    issues.push({
-      code: "workflow.extension.workflow.mismatch",
-      message: `extension targets "${extension.workflow}" but base workflow is "${base.meta.key}"`
-    });
-  }
-  hiddenSteps.forEach((stepId) => {
-    if (!baseStepIds.has(stepId)) {
-      issues.push({
-        code: "workflow.extension.hidden-step",
-        message: `hidden step "${stepId}" does not exist`
-      });
-      return;
-    }
-    visibleStepIds.delete(stepId);
-  });
-  removeHiddenTransitions(visibleTransitions, hiddenSteps);
-  const availableAnchorSteps = new Set([...baseStepIds].filter((stepId) => !hiddenSteps.has(stepId)));
-  extension.customSteps?.forEach((injection, idx) => {
-    const injectionId = injection.inject.id?.trim();
-    if (!injectionId) {
-      issues.push({
-        code: "workflow.extension.step.id",
-        message: `customSteps[${idx}] is missing an id`
-      });
-      return;
-    }
-    if (injection.id && injection.id !== injectionId) {
-      issues.push({
-        code: "workflow.extension.step.id-mismatch",
-        message: `customSteps[${idx}] has mismatched id (id="${injection.id}", inject.id="${injectionId}")`
-      });
-    }
-    if (availableAnchorSteps.has(injectionId)) {
-      issues.push({
-        code: "workflow.extension.step.id.duplicate",
-        message: `customSteps[${idx}] injects duplicate step id "${injectionId}"`
-      });
-    }
-    if (injection.after && injection.before) {
-      issues.push({
-        code: "workflow.extension.step.anchor.multiple",
-        message: `customSteps[${idx}] cannot set both after and before`
-      });
-    }
-    if (!injection.after && !injection.before) {
-      issues.push({
-        code: "workflow.extension.step.anchor",
-        message: `customSteps[${idx}] must set after or before`
-      });
-    }
-    if (injection.after && !availableAnchorSteps.has(injection.after)) {
-      issues.push({
-        code: "workflow.extension.step.after",
-        message: `customSteps[${idx}] references unknown step "${injection.after}"`
-      });
-    }
-    if (injection.before && !availableAnchorSteps.has(injection.before)) {
-      issues.push({
-        code: "workflow.extension.step.before",
-        message: `customSteps[${idx}] references unknown step "${injection.before}"`
-      });
-    }
-    if (injection.transitionFrom && !availableAnchorSteps.has(injection.transitionFrom)) {
-      issues.push({
-        code: "workflow.extension.step.transition-from",
-        message: `customSteps[${idx}] references unknown transitionFrom step "${injection.transitionFrom}"`
-      });
-    }
-    if (injection.transitionTo && !availableAnchorSteps.has(injection.transitionTo)) {
-      issues.push({
-        code: "workflow.extension.step.transition-to",
-        message: `customSteps[${idx}] references unknown transitionTo step "${injection.transitionTo}"`
-      });
-    }
-    availableAnchorSteps.add(injectionId);
-    visibleStepIds.add(injectionId);
-    if (injection.transitionFrom) {
-      visibleTransitions.push({
-        from: injection.transitionFrom,
-        to: injectionId,
-        condition: injection.when
-      });
-    }
-    if (injection.transitionTo) {
-      visibleTransitions.push({
-        from: injectionId,
-        to: injection.transitionTo,
-        condition: injection.when
-      });
-    }
-  });
-  const entryStepId = base.definition.entryStepId ?? base.definition.steps[0]?.id;
-  if (entryStepId && hiddenSteps.has(entryStepId)) {
-    issues.push({
-      code: "workflow.extension.hidden-step.entry",
-      message: `hiddenSteps removes the entry step "${entryStepId}"`
-    });
-  }
-  if (entryStepId && !hiddenSteps.has(entryStepId)) {
-    const reachable = collectReachableSteps(entryStepId, visibleTransitions);
-    for (const stepId of visibleStepIds) {
-      if (!reachable.has(stepId)) {
-        issues.push({
-          code: "workflow.extension.hidden-step.orphan",
-          message: `extension leaves step "${stepId}" unreachable from entry step "${entryStepId}"`
-        });
-      }
-    }
-  }
-  if (issues.length) {
-    const reason = issues.map((issue) => `${issue.code}: ${issue.message}`).join("; ");
-    throw new Error(`Invalid workflow extension for ${extension.workflow}: ${reason}`);
-  }
-}
-function removeHiddenTransitions(transitions, hiddenSteps) {
-  for (let index = transitions.length - 1;index >= 0; index -= 1) {
-    const transition = transitions[index];
-    if (!transition) {
-      continue;
-    }
-    if (hiddenSteps.has(transition.from) || hiddenSteps.has(transition.to)) {
-      transitions.splice(index, 1);
-    }
-  }
-}
-function collectReachableSteps(entryStepId, transitions) {
-  const adjacency = new Map;
-  for (const transition of transitions) {
-    const next = adjacency.get(transition.from) ?? [];
-    next.push(transition.to);
-    adjacency.set(transition.from, next);
-  }
-  const reachable = new Set;
-  const queue = [entryStepId];
-  while (queue.length > 0) {
-    const current = queue.shift();
-    if (!current || reachable.has(current)) {
-      continue;
-    }
-    reachable.add(current);
-    for (const next of adjacency.get(current) ?? []) {
-      queue.push(next);
-    }
-  }
-  return reachable;
-}
-
-// src/injector.ts
-function applyWorkflowExtension(base, extension) {
-  validateExtension(extension, base);
-  const spec = cloneWorkflowSpec(base);
-  const steps = [...spec.definition.steps];
-  let transitions = [...spec.definition.transitions];
-  const hiddenSet = new Set(extension.hiddenSteps ?? []);
-  hiddenSet.forEach((stepId) => {
-    const idx = steps.findIndex((step) => step.id === stepId);
-    if (idx !== -1) {
-      steps.splice(idx, 1);
-    }
-  });
-  if (hiddenSet.size) {
-    transitions = transitions.filter((transition) => !hiddenSet.has(transition.from) && !hiddenSet.has(transition.to));
-  }
-  extension.customSteps?.forEach((injection) => {
-    insertStep(steps, injection);
-    wireTransitions(transitions, injection);
-  });
-  spec.definition.steps = steps;
-  spec.definition.transitions = dedupeTransitions(transitions);
-  spec.metadata = mergeRecords(spec.metadata, extension.metadata);
-  spec.annotations = mergeRecords(spec.annotations, extension.annotations);
-  const issues = validateWorkflowSpec(spec);
-  const blockingIssues = issues.filter((issue) => issue.level === "error");
-  if (blockingIssues.length > 0) {
-    throw new Error(`Invalid composed workflow ${spec.meta.key}.v${spec.meta.version}: ${blockingIssues.map((issue) => issue.message).join("; ")}`);
-  }
-  return spec;
-}
-function insertStep(steps, injection) {
-  const anchorIndex = resolveAnchorIndex(steps, injection);
-  if (anchorIndex === -1) {
-    throw new Error(`Unable to place injected step "${injection.inject.id}"`);
-  }
-  steps.splice(anchorIndex, 0, { ...injection.inject });
-}
-function resolveAnchorIndex(steps, injection) {
-  if (injection.after) {
-    const idx = steps.findIndex((step) => step.id === injection.after);
-    return idx === -1 ? -1 : idx + 1;
-  }
-  if (injection.before) {
-    const idx = steps.findIndex((step) => step.id === injection.before);
-    return idx === -1 ? -1 : idx;
-  }
-  return steps.length;
-}
-function wireTransitions(transitions, injection) {
-  if (!injection.inject.id)
-    return;
-  if (injection.transitionFrom) {
-    transitions.push({
-      from: injection.transitionFrom,
-      to: injection.inject.id,
-      condition: injection.when
-    });
-  }
-  if (injection.transitionTo) {
-    transitions.push({
-      from: injection.inject.id,
-      to: injection.transitionTo,
-      condition: injection.when
-    });
-  }
-}
-function dedupeTransitions(transitions) {
-  const seen = new Set;
-  const result = [];
-  transitions.forEach((transition) => {
-    const key = `${transition.from}->${transition.to}:${transition.condition ?? ""}`;
-    if (seen.has(key))
-      return;
-    seen.add(key);
-    result.push(transition);
-  });
-  return result;
-}
-function cloneWorkflowSpec(spec) {
-  return JSON.parse(JSON.stringify(spec));
-}
-function mergeRecords(base, patch) {
-  if (!base && !patch) {
-    return;
-  }
-  return {
-    ...base ?? {},
-    ...patch ?? {}
-  };
-}
-
-// src/merger.ts
-function mergeExtensions(extensions) {
-  return [...extensions].sort((a, b) => {
-    const priorityOrder = (a.priority ?? 0) - (b.priority ?? 0);
-    if (priorityOrder !== 0)
-      return priorityOrder;
-    const workflowOrder = a.workflow.localeCompare(b.workflow);
-    if (workflowOrder !== 0)
-      return workflowOrder;
-    const tenantOrder = (a.tenantId ?? "").localeCompare(b.tenantId ?? "");
-    if (tenantOrder !== 0)
-      return tenantOrder;
-    const roleOrder = (a.role ?? "").localeCompare(b.role ?? "");
-    if (roleOrder !== 0)
-      return roleOrder;
-    const deviceOrder = (a.device ?? "").localeCompare(b.device ?? "");
-    if (deviceOrder !== 0)
-      return deviceOrder;
-    return (a.baseVersion ?? "").localeCompare(b.baseVersion ?? "");
-  });
-}
-
-// src/composer.ts
-class WorkflowComposer {
-  extensions = [];
-  register(extension) {
-    this.extensions.push(extension);
-    return this;
-  }
-  registerMany(extensions) {
-    extensions.forEach((extension) => {
-      this.register(extension);
-    });
-    return this;
-  }
-  compose(params) {
-    const applicable = mergeExtensions(this.extensions.filter((extension) => matches(params, extension)));
-    return applicable.reduce((acc, extension) => applyWorkflowExtension(acc, extension), params.base);
-  }
-}
-function matches(params, extension) {
-  if (extension.workflow !== params.base.meta.key)
-    return false;
-  if (extension.baseVersion && !satisfies(params.base.meta.version, extension.baseVersion)) {
-    return false;
-  }
-  if (extension.tenantId && extension.tenantId !== params.tenantId) {
-    return false;
-  }
-  if (extension.role && extension.role !== params.role) {
-    return false;
-  }
-  if (extension.device && extension.device !== params.device) {
-    return false;
-  }
-  return true;
-}
-// src/templates.ts
-function approvalStepTemplate(options) {
-  return {
-    id: options.id,
-    label: options.label,
-    type: options.type ?? "human",
-    description: options.description ?? "Tenant-specific approval",
-    action: options.action,
-    guard: options.guardExpression ? {
-      type: "expression",
-      value: options.guardExpression
-    } : undefined
-  };
-}
-export {
-  validateExtension,
-  mergeExtensions,
-  approvalStepTemplate,
-  applyWorkflowExtension,
-  WorkflowComposer
-};
+import{satisfies as W}from"compare-versions";import{validateWorkflowSpec as i}from"@contractspec/lib.contracts-spec/workflow";function d(o,e){let r=[],s=new Set(e.definition.steps.map((t)=>t.id)),a=new Set(o.hiddenSteps??[]),f=new Set(s),m=e.definition.transitions.filter((t)=>f.has(t.from)&&f.has(t.to)).map((t)=>({...t}));if(!o.workflow.trim())r.push({code:"workflow.extension.workflow",message:"workflow is required"});if(o.workflow!==e.meta.key)r.push({code:"workflow.extension.workflow.mismatch",message:`extension targets "${o.workflow}" but base workflow is "${e.meta.key}"`});a.forEach((t)=>{if(!s.has(t)){r.push({code:"workflow.extension.hidden-step",message:`hidden step "${t}" does not exist`});return}f.delete(t)}),c(m,a);let w=new Set([...s].filter((t)=>!a.has(t)));o.customSteps?.forEach((t,p)=>{let u=t.inject.id?.trim();if(!u){r.push({code:"workflow.extension.step.id",message:`customSteps[${p}] is missing an id`});return}if(t.id&&t.id!==u)r.push({code:"workflow.extension.step.id-mismatch",message:`customSteps[${p}] has mismatched id (id="${t.id}", inject.id="${u}")`});if(w.has(u))r.push({code:"workflow.extension.step.id.duplicate",message:`customSteps[${p}] injects duplicate step id "${u}"`});if(t.after&&t.before)r.push({code:"workflow.extension.step.anchor.multiple",message:`customSteps[${p}] cannot set both after and before`});if(!t.after&&!t.before)r.push({code:"workflow.extension.step.anchor",message:`customSteps[${p}] must set after or before`});if(t.after&&!w.has(t.after))r.push({code:"workflow.extension.step.after",message:`customSteps[${p}] references unknown step "${t.after}"`});if(t.before&&!w.has(t.before))r.push({code:"workflow.extension.step.before",message:`customSteps[${p}] references unknown step "${t.before}"`});if(t.transitionFrom&&!w.has(t.transitionFrom))r.push({code:"workflow.extension.step.transition-from",message:`customSteps[${p}] references unknown transitionFrom step "${t.transitionFrom}"`});if(t.transitionTo&&!w.has(t.transitionTo))r.push({code:"workflow.extension.step.transition-to",message:`customSteps[${p}] references unknown transitionTo step "${t.transitionTo}"`});if(w.add(u),f.add(u),t.transitionFrom)m.push({from:t.transitionFrom,to:u,condition:t.when});if(t.transitionTo)m.push({from:u,to:t.transitionTo,condition:t.when})});let l=e.definition.entryStepId??e.definition.steps[0]?.id;if(l&&a.has(l))r.push({code:"workflow.extension.hidden-step.entry",message:`hiddenSteps removes the entry step "${l}"`});if(l&&!a.has(l)){let t=g(l,m);for(let p of f)if(!t.has(p))r.push({code:"workflow.extension.hidden-step.orphan",message:`extension leaves step "${p}" unreachable from entry step "${l}"`})}if(r.length){let t=r.map((p)=>`${p.code}: ${p.message}`).join("; ");throw Error(`Invalid workflow extension for ${o.workflow}: ${t}`)}}function c(o,e){for(let r=o.length-1;r>=0;r-=1){let s=o[r];if(!s)continue;if(e.has(s.from)||e.has(s.to))o.splice(r,1)}}function g(o,e){let r=new Map;for(let f of e){let m=r.get(f.from)??[];m.push(f.to),r.set(f.from,m)}let s=new Set,a=[o];while(a.length>0){let f=a.shift();if(!f||s.has(f))continue;s.add(f);for(let m of r.get(f)??[])a.push(m)}return s}function h(o,e){d(e,o);let r=v(o),s=[...r.definition.steps],a=[...r.definition.transitions],f=new Set(e.hiddenSteps??[]);if(f.forEach((l)=>{let t=s.findIndex((p)=>p.id===l);if(t!==-1)s.splice(t,1)}),f.size)a=a.filter((l)=>!f.has(l.from)&&!f.has(l.to));e.customSteps?.forEach((l)=>{S(s,l),$(a,l)}),r.definition.steps=s,r.definition.transitions=E(a),r.metadata=n(r.metadata,e.metadata),r.annotations=n(r.annotations,e.annotations);let w=i(r).filter((l)=>l.level==="error");if(w.length>0)throw Error(`Invalid composed workflow ${r.meta.key}.v${r.meta.version}: ${w.map((l)=>l.message).join("; ")}`);return r}function S(o,e){let r=y(o,e);if(r===-1)throw Error(`Unable to place injected step "${e.inject.id}"`);o.splice(r,0,{...e.inject})}function y(o,e){if(e.after){let r=o.findIndex((s)=>s.id===e.after);return r===-1?-1:r+1}if(e.before){let r=o.findIndex((s)=>s.id===e.before);return r===-1?-1:r}return o.length}function $(o,e){if(!e.inject.id)return;if(e.transitionFrom)o.push({from:e.transitionFrom,to:e.inject.id,condition:e.when});if(e.transitionTo)o.push({from:e.inject.id,to:e.transitionTo,condition:e.when})}function E(o){let e=new Set,r=[];return o.forEach((s)=>{let a=`${s.from}->${s.to}:${s.condition??""}`;if(e.has(a))return;e.add(a),r.push(s)}),r}function v(o){return JSON.parse(JSON.stringify(o))}function n(o,e){if(!o&&!e)return;return{...o??{},...e??{}}}function k(o){return[...o].sort((e,r)=>{let s=(e.priority??0)-(r.priority??0);if(s!==0)return s;let a=e.workflow.localeCompare(r.workflow);if(a!==0)return a;let f=(e.tenantId??"").localeCompare(r.tenantId??"");if(f!==0)return f;let m=(e.role??"").localeCompare(r.role??"");if(m!==0)return m;let w=(e.device??"").localeCompare(r.device??"");if(w!==0)return w;return(e.baseVersion??"").localeCompare(r.baseVersion??"")})}class x{extensions=[];register(o){return this.extensions.push(o),this}registerMany(o){return o.forEach((e)=>{this.register(e)}),this}compose(o){return k(this.extensions.filter((r)=>T(o,r))).reduce((r,s)=>h(r,s),o.base)}}function T(o,e){if(e.workflow!==o.base.meta.key)return!1;if(e.baseVersion&&!W(o.base.meta.version,e.baseVersion))return!1;if(e.tenantId&&e.tenantId!==o.tenantId)return!1;if(e.role&&e.role!==o.role)return!1;if(e.device&&e.device!==o.device)return!1;return!0}function H(o){return{id:o.id,label:o.label,type:o.type??"human",description:o.description??"Tenant-specific approval",action:o.action,guard:o.guardExpression?{type:"expression",value:o.guardExpression}:void 0}}export{d as validateExtension,k as mergeExtensions,H as approvalStepTemplate,h as applyWorkflowExtension,x as WorkflowComposer};

package/dist/node/index.js

@@ -1,339 +1 @@
-// src/composer.ts
-import { satisfies } from "compare-versions";
-
-// src/injector.ts
-import {
-  validateWorkflowSpec
-} from "@contractspec/lib.contracts-spec/workflow";
-
-// src/validator.ts
-function validateExtension(extension, base) {
-  const issues = [];
-  const baseStepIds = new Set(base.definition.steps.map((step) => step.id));
-  const hiddenSteps = new Set(extension.hiddenSteps ?? []);
-  const visibleStepIds = new Set(baseStepIds);
-  const visibleTransitions = base.definition.transitions.filter((transition) => visibleStepIds.has(transition.from) && visibleStepIds.has(transition.to)).map((transition) => ({ ...transition }));
-  if (!extension.workflow.trim()) {
-    issues.push({
-      code: "workflow.extension.workflow",
-      message: "workflow is required"
-    });
-  }
-  if (extension.workflow !== base.meta.key) {
-    issues.push({
-      code: "workflow.extension.workflow.mismatch",
-      message: `extension targets "${extension.workflow}" but base workflow is "${base.meta.key}"`
-    });
-  }
-  hiddenSteps.forEach((stepId) => {
-    if (!baseStepIds.has(stepId)) {
-      issues.push({
-        code: "workflow.extension.hidden-step",
-        message: `hidden step "${stepId}" does not exist`
-      });
-      return;
-    }
-    visibleStepIds.delete(stepId);
-  });
-  removeHiddenTransitions(visibleTransitions, hiddenSteps);
-  const availableAnchorSteps = new Set([...baseStepIds].filter((stepId) => !hiddenSteps.has(stepId)));
-  extension.customSteps?.forEach((injection, idx) => {
-    const injectionId = injection.inject.id?.trim();
-    if (!injectionId) {
-      issues.push({
-        code: "workflow.extension.step.id",
-        message: `customSteps[${idx}] is missing an id`
-      });
-      return;
-    }
-    if (injection.id && injection.id !== injectionId) {
-      issues.push({
-        code: "workflow.extension.step.id-mismatch",
-        message: `customSteps[${idx}] has mismatched id (id="${injection.id}", inject.id="${injectionId}")`
-      });
-    }
-    if (availableAnchorSteps.has(injectionId)) {
-      issues.push({
-        code: "workflow.extension.step.id.duplicate",
-        message: `customSteps[${idx}] injects duplicate step id "${injectionId}"`
-      });
-    }
-    if (injection.after && injection.before) {
-      issues.push({
-        code: "workflow.extension.step.anchor.multiple",
-        message: `customSteps[${idx}] cannot set both after and before`
-      });
-    }
-    if (!injection.after && !injection.before) {
-      issues.push({
-        code: "workflow.extension.step.anchor",
-        message: `customSteps[${idx}] must set after or before`
-      });
-    }
-    if (injection.after && !availableAnchorSteps.has(injection.after)) {
-      issues.push({
-        code: "workflow.extension.step.after",
-        message: `customSteps[${idx}] references unknown step "${injection.after}"`
-      });
-    }
-    if (injection.before && !availableAnchorSteps.has(injection.before)) {
-      issues.push({
-        code: "workflow.extension.step.before",
-        message: `customSteps[${idx}] references unknown step "${injection.before}"`
-      });
-    }
-    if (injection.transitionFrom && !availableAnchorSteps.has(injection.transitionFrom)) {
-      issues.push({
-        code: "workflow.extension.step.transition-from",
-        message: `customSteps[${idx}] references unknown transitionFrom step "${injection.transitionFrom}"`
-      });
-    }
-    if (injection.transitionTo && !availableAnchorSteps.has(injection.transitionTo)) {
-      issues.push({
-        code: "workflow.extension.step.transition-to",
-        message: `customSteps[${idx}] references unknown transitionTo step "${injection.transitionTo}"`
-      });
-    }
-    availableAnchorSteps.add(injectionId);
-    visibleStepIds.add(injectionId);
-    if (injection.transitionFrom) {
-      visibleTransitions.push({
-        from: injection.transitionFrom,
-        to: injectionId,
-        condition: injection.when
-      });
-    }
-    if (injection.transitionTo) {
-      visibleTransitions.push({
-        from: injectionId,
-        to: injection.transitionTo,
-        condition: injection.when
-      });
-    }
-  });
-  const entryStepId = base.definition.entryStepId ?? base.definition.steps[0]?.id;
-  if (entryStepId && hiddenSteps.has(entryStepId)) {
-    issues.push({
-      code: "workflow.extension.hidden-step.entry",
-      message: `hiddenSteps removes the entry step "${entryStepId}"`
-    });
-  }
-  if (entryStepId && !hiddenSteps.has(entryStepId)) {
-    const reachable = collectReachableSteps(entryStepId, visibleTransitions);
-    for (const stepId of visibleStepIds) {
-      if (!reachable.has(stepId)) {
-        issues.push({
-          code: "workflow.extension.hidden-step.orphan",
-          message: `extension leaves step "${stepId}" unreachable from entry step "${entryStepId}"`
-        });
-      }
-    }
-  }
-  if (issues.length) {
-    const reason = issues.map((issue) => `${issue.code}: ${issue.message}`).join("; ");
-    throw new Error(`Invalid workflow extension for ${extension.workflow}: ${reason}`);
-  }
-}
-function removeHiddenTransitions(transitions, hiddenSteps) {
-  for (let index = transitions.length - 1;index >= 0; index -= 1) {
-    const transition = transitions[index];
-    if (!transition) {
-      continue;
-    }
-    if (hiddenSteps.has(transition.from) || hiddenSteps.has(transition.to)) {
-      transitions.splice(index, 1);
-    }
-  }
-}
-function collectReachableSteps(entryStepId, transitions) {
-  const adjacency = new Map;
-  for (const transition of transitions) {
-    const next = adjacency.get(transition.from) ?? [];
-    next.push(transition.to);
-    adjacency.set(transition.from, next);
-  }
-  const reachable = new Set;
-  const queue = [entryStepId];
-  while (queue.length > 0) {
-    const current = queue.shift();
-    if (!current || reachable.has(current)) {
-      continue;
-    }
-    reachable.add(current);
-    for (const next of adjacency.get(current) ?? []) {
-      queue.push(next);
-    }
-  }
-  return reachable;
-}
-
-// src/injector.ts
-function applyWorkflowExtension(base, extension) {
-  validateExtension(extension, base);
-  const spec = cloneWorkflowSpec(base);
-  const steps = [...spec.definition.steps];
-  let transitions = [...spec.definition.transitions];
-  const hiddenSet = new Set(extension.hiddenSteps ?? []);
-  hiddenSet.forEach((stepId) => {
-    const idx = steps.findIndex((step) => step.id === stepId);
-    if (idx !== -1) {
-      steps.splice(idx, 1);
-    }
-  });
-  if (hiddenSet.size) {
-    transitions = transitions.filter((transition) => !hiddenSet.has(transition.from) && !hiddenSet.has(transition.to));
-  }
-  extension.customSteps?.forEach((injection) => {
-    insertStep(steps, injection);
-    wireTransitions(transitions, injection);
-  });
-  spec.definition.steps = steps;
-  spec.definition.transitions = dedupeTransitions(transitions);
-  spec.metadata = mergeRecords(spec.metadata, extension.metadata);
-  spec.annotations = mergeRecords(spec.annotations, extension.annotations);
-  const issues = validateWorkflowSpec(spec);
-  const blockingIssues = issues.filter((issue) => issue.level === "error");
-  if (blockingIssues.length > 0) {
-    throw new Error(`Invalid composed workflow ${spec.meta.key}.v${spec.meta.version}: ${blockingIssues.map((issue) => issue.message).join("; ")}`);
-  }
-  return spec;
-}
-function insertStep(steps, injection) {
-  const anchorIndex = resolveAnchorIndex(steps, injection);
-  if (anchorIndex === -1) {
-    throw new Error(`Unable to place injected step "${injection.inject.id}"`);
-  }
-  steps.splice(anchorIndex, 0, { ...injection.inject });
-}
-function resolveAnchorIndex(steps, injection) {
-  if (injection.after) {
-    const idx = steps.findIndex((step) => step.id === injection.after);
-    return idx === -1 ? -1 : idx + 1;
-  }
-  if (injection.before) {
-    const idx = steps.findIndex((step) => step.id === injection.before);
-    return idx === -1 ? -1 : idx;
-  }
-  return steps.length;
-}
-function wireTransitions(transitions, injection) {
-  if (!injection.inject.id)
-    return;
-  if (injection.transitionFrom) {
-    transitions.push({
-      from: injection.transitionFrom,
-      to: injection.inject.id,
-      condition: injection.when
-    });
-  }
-  if (injection.transitionTo) {
-    transitions.push({
-      from: injection.inject.id,
-      to: injection.transitionTo,
-      condition: injection.when
-    });
-  }
-}
-function dedupeTransitions(transitions) {
-  const seen = new Set;
-  const result = [];
-  transitions.forEach((transition) => {
-    const key = `${transition.from}->${transition.to}:${transition.condition ?? ""}`;
-    if (seen.has(key))
-      return;
-    seen.add(key);
-    result.push(transition);
-  });
-  return result;
-}
-function cloneWorkflowSpec(spec) {
-  return JSON.parse(JSON.stringify(spec));
-}
-function mergeRecords(base, patch) {
-  if (!base && !patch) {
-    return;
-  }
-  return {
-    ...base ?? {},
-    ...patch ?? {}
-  };
-}
-
-// src/merger.ts
-function mergeExtensions(extensions) {
-  return [...extensions].sort((a, b) => {
-    const priorityOrder = (a.priority ?? 0) - (b.priority ?? 0);
-    if (priorityOrder !== 0)
-      return priorityOrder;
-    const workflowOrder = a.workflow.localeCompare(b.workflow);
-    if (workflowOrder !== 0)
-      return workflowOrder;
-    const tenantOrder = (a.tenantId ?? "").localeCompare(b.tenantId ?? "");
-    if (tenantOrder !== 0)
-      return tenantOrder;
-    const roleOrder = (a.role ?? "").localeCompare(b.role ?? "");
-    if (roleOrder !== 0)
-      return roleOrder;
-    const deviceOrder = (a.device ?? "").localeCompare(b.device ?? "");
-    if (deviceOrder !== 0)
-      return deviceOrder;
-    return (a.baseVersion ?? "").localeCompare(b.baseVersion ?? "");
-  });
-}
-
-// src/composer.ts
-class WorkflowComposer {
-  extensions = [];
-  register(extension) {
-    this.extensions.push(extension);
-    return this;
-  }
-  registerMany(extensions) {
-    extensions.forEach((extension) => {
-      this.register(extension);
-    });
-    return this;
-  }
-  compose(params) {
-    const applicable = mergeExtensions(this.extensions.filter((extension) => matches(params, extension)));
-    return applicable.reduce((acc, extension) => applyWorkflowExtension(acc, extension), params.base);
-  }
-}
-function matches(params, extension) {
-  if (extension.workflow !== params.base.meta.key)
-    return false;
-  if (extension.baseVersion && !satisfies(params.base.meta.version, extension.baseVersion)) {
-    return false;
-  }
-  if (extension.tenantId && extension.tenantId !== params.tenantId) {
-    return false;
-  }
-  if (extension.role && extension.role !== params.role) {
-    return false;
-  }
-  if (extension.device && extension.device !== params.device) {
-    return false;
-  }
-  return true;
-}
-// src/templates.ts
-function approvalStepTemplate(options) {
-  return {
-    id: options.id,
-    label: options.label,
-    type: options.type ?? "human",
-    description: options.description ?? "Tenant-specific approval",
-    action: options.action,
-    guard: options.guardExpression ? {
-      type: "expression",
-      value: options.guardExpression
-    } : undefined
-  };
-}
-export {
-  validateExtension,
-  mergeExtensions,
-  approvalStepTemplate,
-  applyWorkflowExtension,
-  WorkflowComposer
-};
+import{satisfies as W}from"compare-versions";import{validateWorkflowSpec as i}from"@contractspec/lib.contracts-spec/workflow";function d(o,e){let r=[],s=new Set(e.definition.steps.map((t)=>t.id)),a=new Set(o.hiddenSteps??[]),f=new Set(s),m=e.definition.transitions.filter((t)=>f.has(t.from)&&f.has(t.to)).map((t)=>({...t}));if(!o.workflow.trim())r.push({code:"workflow.extension.workflow",message:"workflow is required"});if(o.workflow!==e.meta.key)r.push({code:"workflow.extension.workflow.mismatch",message:`extension targets "${o.workflow}" but base workflow is "${e.meta.key}"`});a.forEach((t)=>{if(!s.has(t)){r.push({code:"workflow.extension.hidden-step",message:`hidden step "${t}" does not exist`});return}f.delete(t)}),c(m,a);let w=new Set([...s].filter((t)=>!a.has(t)));o.customSteps?.forEach((t,p)=>{let u=t.inject.id?.trim();if(!u){r.push({code:"workflow.extension.step.id",message:`customSteps[${p}] is missing an id`});return}if(t.id&&t.id!==u)r.push({code:"workflow.extension.step.id-mismatch",message:`customSteps[${p}] has mismatched id (id="${t.id}", inject.id="${u}")`});if(w.has(u))r.push({code:"workflow.extension.step.id.duplicate",message:`customSteps[${p}] injects duplicate step id "${u}"`});if(t.after&&t.before)r.push({code:"workflow.extension.step.anchor.multiple",message:`customSteps[${p}] cannot set both after and before`});if(!t.after&&!t.before)r.push({code:"workflow.extension.step.anchor",message:`customSteps[${p}] must set after or before`});if(t.after&&!w.has(t.after))r.push({code:"workflow.extension.step.after",message:`customSteps[${p}] references unknown step "${t.after}"`});if(t.before&&!w.has(t.before))r.push({code:"workflow.extension.step.before",message:`customSteps[${p}] references unknown step "${t.before}"`});if(t.transitionFrom&&!w.has(t.transitionFrom))r.push({code:"workflow.extension.step.transition-from",message:`customSteps[${p}] references unknown transitionFrom step "${t.transitionFrom}"`});if(t.transitionTo&&!w.has(t.transitionTo))r.push({code:"workflow.extension.step.transition-to",message:`customSteps[${p}] references unknown transitionTo step "${t.transitionTo}"`});if(w.add(u),f.add(u),t.transitionFrom)m.push({from:t.transitionFrom,to:u,condition:t.when});if(t.transitionTo)m.push({from:u,to:t.transitionTo,condition:t.when})});let l=e.definition.entryStepId??e.definition.steps[0]?.id;if(l&&a.has(l))r.push({code:"workflow.extension.hidden-step.entry",message:`hiddenSteps removes the entry step "${l}"`});if(l&&!a.has(l)){let t=g(l,m);for(let p of f)if(!t.has(p))r.push({code:"workflow.extension.hidden-step.orphan",message:`extension leaves step "${p}" unreachable from entry step "${l}"`})}if(r.length){let t=r.map((p)=>`${p.code}: ${p.message}`).join("; ");throw Error(`Invalid workflow extension for ${o.workflow}: ${t}`)}}function c(o,e){for(let r=o.length-1;r>=0;r-=1){let s=o[r];if(!s)continue;if(e.has(s.from)||e.has(s.to))o.splice(r,1)}}function g(o,e){let r=new Map;for(let f of e){let m=r.get(f.from)??[];m.push(f.to),r.set(f.from,m)}let s=new Set,a=[o];while(a.length>0){let f=a.shift();if(!f||s.has(f))continue;s.add(f);for(let m of r.get(f)??[])a.push(m)}return s}function h(o,e){d(e,o);let r=v(o),s=[...r.definition.steps],a=[...r.definition.transitions],f=new Set(e.hiddenSteps??[]);if(f.forEach((l)=>{let t=s.findIndex((p)=>p.id===l);if(t!==-1)s.splice(t,1)}),f.size)a=a.filter((l)=>!f.has(l.from)&&!f.has(l.to));e.customSteps?.forEach((l)=>{S(s,l),$(a,l)}),r.definition.steps=s,r.definition.transitions=E(a),r.metadata=n(r.metadata,e.metadata),r.annotations=n(r.annotations,e.annotations);let w=i(r).filter((l)=>l.level==="error");if(w.length>0)throw Error(`Invalid composed workflow ${r.meta.key}.v${r.meta.version}: ${w.map((l)=>l.message).join("; ")}`);return r}function S(o,e){let r=y(o,e);if(r===-1)throw Error(`Unable to place injected step "${e.inject.id}"`);o.splice(r,0,{...e.inject})}function y(o,e){if(e.after){let r=o.findIndex((s)=>s.id===e.after);return r===-1?-1:r+1}if(e.before){let r=o.findIndex((s)=>s.id===e.before);return r===-1?-1:r}return o.length}function $(o,e){if(!e.inject.id)return;if(e.transitionFrom)o.push({from:e.transitionFrom,to:e.inject.id,condition:e.when});if(e.transitionTo)o.push({from:e.inject.id,to:e.transitionTo,condition:e.when})}function E(o){let e=new Set,r=[];return o.forEach((s)=>{let a=`${s.from}->${s.to}:${s.condition??""}`;if(e.has(a))return;e.add(a),r.push(s)}),r}function v(o){return JSON.parse(JSON.stringify(o))}function n(o,e){if(!o&&!e)return;return{...o??{},...e??{}}}function k(o){return[...o].sort((e,r)=>{let s=(e.priority??0)-(r.priority??0);if(s!==0)return s;let a=e.workflow.localeCompare(r.workflow);if(a!==0)return a;let f=(e.tenantId??"").localeCompare(r.tenantId??"");if(f!==0)return f;let m=(e.role??"").localeCompare(r.role??"");if(m!==0)return m;let w=(e.device??"").localeCompare(r.device??"");if(w!==0)return w;return(e.baseVersion??"").localeCompare(r.baseVersion??"")})}class x{extensions=[];register(o){return this.extensions.push(o),this}registerMany(o){return o.forEach((e)=>{this.register(e)}),this}compose(o){return k(this.extensions.filter((r)=>T(o,r))).reduce((r,s)=>h(r,s),o.base)}}function T(o,e){if(e.workflow!==o.base.meta.key)return!1;if(e.baseVersion&&!W(o.base.meta.version,e.baseVersion))return!1;if(e.tenantId&&e.tenantId!==o.tenantId)return!1;if(e.role&&e.role!==o.role)return!1;if(e.device&&e.device!==o.device)return!1;return!0}function H(o){return{id:o.id,label:o.label,type:o.type??"human",description:o.description??"Tenant-specific approval",action:o.action,guard:o.guardExpression?{type:"expression",value:o.guardExpression}:void 0}}export{d as validateExtension,k as mergeExtensions,H as approvalStepTemplate,h as applyWorkflowExtension,x as WorkflowComposer};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contractspec/lib.workflow-composer",
-  "version": "3.7.16",
+  "version": "3.7.18",
   "description": "Tenant-aware workflow composition helpers for ContractSpec.",
   "keywords": [
     "contractspec",
@@ -24,21 +24,21 @@
     "dev": "contractspec-bun-build dev",
     "clean": "rimraf dist .turbo",
     "lint": "bun lint:fix",
-    "lint:fix": "biome check --write --unsafe --only=nursery/useSortedClasses . && biome check --write .",
-    "lint:check": "biome check .",
+    "lint:fix": "node ../../../scripts/biome.cjs check --write --unsafe --only=nursery/useSortedClasses . && node ../../../scripts/biome.cjs check --write .",
+    "lint:check": "node ../../../scripts/biome.cjs check .",
     "test": "bun test --pass-with-no-tests",
     "prebuild": "contractspec-bun-build prebuild",
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@contractspec/lib.contracts-spec": "5.0.4",
-    "@contractspec/lib.ai-providers": "3.7.12",
+    "@contractspec/lib.contracts-spec": "5.2.0",
+    "@contractspec/lib.ai-providers": "3.7.13",
     "compare-versions": "^6.1.1"
   },
   "devDependencies": {
-    "@contractspec/tool.typescript": "3.7.12",
+    "@contractspec/tool.typescript": "3.7.13",
     "typescript": "^5.9.3",
-    "@contractspec/tool.bun": "3.7.12"
+    "@contractspec/tool.bun": "3.7.14"
   },
   "exports": {
     ".": {