@hotmeshio/long-tail 0.20.0 → 0.21.1

package/build/api/escalations/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.timelineByFacet = exports.aggregateByFacets = exports.claimByFacets = exports.claimGroups = exports.searchByFacets = exports.bulkCancel = exports.cancelSingleEscalation = exports.resolveByMetadata = exports.claimByMetadata = exports.findByMetadata = exports.resolveBatchItemByMetadata = exports.resolveBatchItemBySignalKey = exports.resolveBatchItem = exports.resolveAllOrNone = exports.resolveByIds = exports.resolveBySignalKey = exports.resolveEscalation = exports.bulkTriage = exports.bulkEscalate = exports.bulkUnassign = exports.bulkAssign = exports.bulkClaim = exports.updatePriority = exports.releaseExpiredClaims = exports.releaseEscalation = exports.claimEscalation = exports.getEscalationLookups = exports.escalateToRole = exports.getEscalationsByWorkflowId = exports.getEscalation = exports.getStationMetrics = exports.getEscalationStats = exports.listFacetValues = exports.listFacetKeys = exports.listDistinctTypes = exports.listAvailableEscalations = exports.listEscalations = exports.createEscalation = void 0;
+exports.timelineByFacet = exports.aggregateByFacets = exports.claimByFacets = exports.claimGroups = exports.searchByFacets = exports.bulkCancel = exports.cancelSingleEscalation = exports.resolveByMetadata = exports.claimByMetadata = exports.findByMetadata = exports.itemsView = exports.getEscalationItemsBySignalKey = exports.getEscalationItems = exports.removeItemByMetadata = exports.removeItemBySignalKey = exports.removeItem = exports.accumulateItemByMetadata = exports.accumulateItemBySignalKey = exports.accumulateItem = exports.resolveBatchItemByMetadata = exports.resolveBatchItemBySignalKey = exports.resolveBatchItem = exports.resolveAllOrNone = exports.resolveByIds = exports.resolveBySignalKey = exports.resolveEscalation = exports.bulkTriage = exports.bulkEscalate = exports.bulkUnassign = exports.bulkAssign = exports.bulkClaim = exports.updatePriority = exports.releaseExpiredClaims = exports.releaseEscalation = exports.claimEscalation = exports.getEscalationLookups = exports.escalateToRole = exports.getEscalationsByWorkflowId = exports.getEscalation = exports.getStationMetrics = exports.getEscalationStats = exports.listFacetValues = exports.listFacetKeys = exports.listDistinctTypes = exports.listAvailableEscalations = exports.listEscalations = exports.createEscalation = void 0;
 var create_1 = require("./create");
 Object.defineProperty(exports, "createEscalation", { enumerable: true, get: function () { return create_1.createEscalation; } });
 var list_1 = require("./list");
@@ -37,6 +37,16 @@ var resolve_batch_1 = require("./resolve-batch");
 Object.defineProperty(exports, "resolveBatchItem", { enumerable: true, get: function () { return resolve_batch_1.resolveBatchItem; } });
 Object.defineProperty(exports, "resolveBatchItemBySignalKey", { enumerable: true, get: function () { return resolve_batch_1.resolveBatchItemBySignalKey; } });
 Object.defineProperty(exports, "resolveBatchItemByMetadata", { enumerable: true, get: function () { return resolve_batch_1.resolveBatchItemByMetadata; } });
+var accumulate_1 = require("./accumulate");
+Object.defineProperty(exports, "accumulateItem", { enumerable: true, get: function () { return accumulate_1.accumulateItem; } });
+Object.defineProperty(exports, "accumulateItemBySignalKey", { enumerable: true, get: function () { return accumulate_1.accumulateItemBySignalKey; } });
+Object.defineProperty(exports, "accumulateItemByMetadata", { enumerable: true, get: function () { return accumulate_1.accumulateItemByMetadata; } });
+Object.defineProperty(exports, "removeItem", { enumerable: true, get: function () { return accumulate_1.removeItem; } });
+Object.defineProperty(exports, "removeItemBySignalKey", { enumerable: true, get: function () { return accumulate_1.removeItemBySignalKey; } });
+Object.defineProperty(exports, "removeItemByMetadata", { enumerable: true, get: function () { return accumulate_1.removeItemByMetadata; } });
+Object.defineProperty(exports, "getEscalationItems", { enumerable: true, get: function () { return accumulate_1.getEscalationItems; } });
+Object.defineProperty(exports, "getEscalationItemsBySignalKey", { enumerable: true, get: function () { return accumulate_1.getEscalationItemsBySignalKey; } });
+Object.defineProperty(exports, "itemsView", { enumerable: true, get: function () { return accumulate_1.itemsView; } });
 var metadata_1 = require("./metadata");
 Object.defineProperty(exports, "findByMetadata", { enumerable: true, get: function () { return metadata_1.findByMetadata; } });
 Object.defineProperty(exports, "claimByMetadata", { enumerable: true, get: function () { return metadata_1.claimByMetadata; } });

package/build/api/roles.d.ts

@@ -1,3 +1,4 @@
+import { type RolePin, type RolePortal } from '../services/role/types';
 import type { LTApiResult } from '../types/sdk';
 /**
  * List all distinct role names in the system.
@@ -89,11 +90,9 @@ export declare function updateRole(input: {
     /** The escalation LIST schema — rich formatting for this role's list page. */
     list_schema?: Record<string, any> | null;
     /** Pinned-view seeds for the role's members: [{ label, url, badge? }] or null to clear. */
-    default_pins?: {
-        label: string;
-        url: string;
-        badge?: boolean;
-    }[] | null;
+    default_pins?: RolePin[] | null;
+    /** The role's named portals, each rows of pin cells; null to clear. */
+    portals?: RolePortal[] | null;
     properties?: Record<string, any> | null;
     ops_visible?: boolean;
     /** Make this role's sequence the home Pace Board's default segment (single-holder: setting it clears the previous holder). */

package/build/api/roles.js

@@ -48,6 +48,7 @@ exports.getRoleListSchema = getRoleListSchema;
 exports.listRoleListSchemaVersions = listRoleListSchemaVersions;
 exports.deleteRole = deleteRole;
 const roleService = __importStar(require("../services/role"));
+const types_1 = require("../services/role/types");
 const facet_sql_1 = require("../services/escalation/facet-sql");
 /**
  * List all distinct role names in the system.
@@ -201,6 +202,50 @@ async function replaceEscalationTargets(input) {
         return { status: 500, error: err.message };
     }
 }
+/** A pinned view: a non-blank label over a dashboard-relative url, optionally badged. */
+function isRolePin(p) {
+    if (!p || typeof p !== 'object')
+        return false;
+    const pin = p;
+    return typeof pin.label === 'string' && pin.label.trim() !== ''
+        && typeof pin.url === 'string' && pin.url.startsWith('/')
+        && (pin.badge === undefined || typeof pin.badge === 'boolean');
+}
+/** Rows of pin cells within the portal bounds; every row carries at least one pin. */
+function isPortalRows(value) {
+    return Array.isArray(value)
+        && value.length >= 1 && value.length <= types_1.PORTAL_LIMITS.MAX_ROWS
+        && value.every((row) => Array.isArray(row)
+            && row.length >= 1 && row.length <= types_1.PORTAL_LIMITS.MAX_COLS
+            && row.every(isRolePin));
+}
+/** A count tile: a pin plus an optional blurb. */
+function isPortalCount(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const blurb = value.blurb;
+    return isRolePin(value) && (blurb === undefined || typeof blurb === 'string');
+}
+/** A named portal: slug key, non-blank label, a valid matrix, optional bounded counts. */
+function isRolePortal(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const portal = value;
+    const countsOk = portal.counts === undefined
+        || (Array.isArray(portal.counts) && portal.counts.length <= types_1.PORTAL_LIMITS.MAX_COUNTS && portal.counts.every(isPortalCount));
+    return typeof portal.key === 'string' && types_1.PORTAL_KEY.test(portal.key)
+        && typeof portal.label === 'string' && portal.label.trim() !== ''
+        && isPortalRows(portal.rows)
+        && countsOk;
+}
+/** The role's portals: bounded in number, every key unique. */
+function isPortalList(value) {
+    if (!Array.isArray(value) || value.length < 1 || value.length > types_1.PORTAL_LIMITS.MAX_PORTALS)
+        return false;
+    if (!value.every(isRolePortal))
+        return false;
+    return new Set(value.map((p) => p.key)).size === value.length;
+}
 /**
  * Update role metadata. Fields omitted from input are left unchanged.
  * form_schema, metadata_schema, and parent_role can be set to null to clear them.
@@ -241,14 +286,17 @@ async function updateRole(input) {
             return { status: 400, error: 'parent_role must reference a different role' };
         }
         if (input.default_pins != null) {
-            const pinsValid = Array.isArray(input.default_pins) && input.default_pins.every((p) => p && typeof p === 'object'
-                && typeof p.label === 'string' && p.label.trim() !== ''
-                && typeof p.url === 'string' && p.url.startsWith('/')
-                && (p.badge === undefined || typeof p.badge === 'boolean'));
+            const pinsValid = Array.isArray(input.default_pins) && input.default_pins.every(isRolePin);
             if (!pinsValid) {
                 return { status: 400, error: 'default_pins must be [{ label, url, badge? }] with dashboard-relative urls' };
             }
         }
+        if (input.portals != null && !isPortalList(input.portals)) {
+            return {
+                status: 400,
+                error: `portals must be 1..${types_1.PORTAL_LIMITS.MAX_PORTALS} of { key (slug, unique), label, rows, counts? }, rows being 1..${types_1.PORTAL_LIMITS.MAX_ROWS} rows of 1..${types_1.PORTAL_LIMITS.MAX_COLS} pins [{ label, url, badge? }] with dashboard-relative urls, counts up to ${types_1.PORTAL_LIMITS.MAX_COUNTS} of { label, url, blurb? }`,
+            };
+        }
         if (input.upstream_roles != null) {
             if (!Array.isArray(input.upstream_roles) || input.upstream_roles.some((u) => typeof u !== 'string' || !u.trim())) {
                 return { status: 400, error: 'upstream_roles must be an array of role names' };
@@ -269,6 +317,7 @@ async function updateRole(input) {
             metadata_schema: input.metadata_schema,
             list_schema: input.list_schema,
             default_pins: input.default_pins,
+            portals: input.portals,
             properties: input.properties,
             ops_visible: input.ops_visible,
             ops_home_default: input.ops_home_default,

package/build/api/scan-codes/context.d.ts

@@ -16,8 +16,21 @@ export interface StepContext {
 }
 export declare function targetFilter(step: ScanStep, ctx: StepContext): Record<string, any>;
 export declare function templateContext(ctx: StepContext): scanCodeService.ScanTemplateContext;
+/**
+ * The metadata of the acting user's single live claim, or undefined when
+ * they hold none or more than one. One scoped list query, read before the
+ * guarded write; the write re-checks everything under lock.
+ */
+export declare function liveClaimMetadata(ctx: StepContext): Promise<Record<string, unknown> | undefined>;
+/**
+ * The template context for one step: the scan tokens, the located item row's
+ * metadata when the verb has one, and the actor's live claim when the step's
+ * params mention `{claim.…}` (the lookup costs one query, so it runs only
+ * then).
+ */
+export declare function stepTemplate(step: ScanStep, ctx: StepContext, item?: LTEscalationRecord): Promise<scanCodeService.ScanTemplateContext>;
 export declare function provenance(ctx: StepContext): Record<string, any>;
-export declare function interpolatedMetadata(step: ScanStep, ctx: StepContext): Record<string, any>;
+export declare function interpolatedMetadata(step: ScanStep, ctx: StepContext, tpl?: scanCodeService.ScanTemplateContext): Record<string, any>;
 export declare function executed(escalation: LTEscalationRecord | Record<string, any> | undefined, step: Pick<ScanStep, 'verb'>): LTApiResult<ScanExecuteResponse>;
 export declare function forbidden(error?: string): LTApiResult<ScanExecuteResponse>;
 export declare function conflict(error?: string): LTApiResult<ScanExecuteResponse>;

package/build/api/scan-codes/context.js

@@ -35,6 +35,8 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.targetFilter = targetFilter;
 exports.templateContext = templateContext;
+exports.liveClaimMetadata = liveClaimMetadata;
+exports.stepTemplate = stepTemplate;
 exports.provenance = provenance;
 exports.interpolatedMetadata = interpolatedMetadata;
 exports.executed = executed;
@@ -42,6 +44,7 @@ exports.forbidden = forbidden;
 exports.conflict = conflict;
 exports.notPrimed = notPrimed;
 const scanCodeService = __importStar(require("../../services/scan-code"));
+const escalationService = __importStar(require("../../services/escalation"));
 const types_1 = require("../../types");
 function targetFilter(step, ctx) {
     return { [ctx.scheme.target_facet]: ctx.parsed.target, ...(step.query?.facets ?? {}) };
@@ -49,6 +52,31 @@ function targetFilter(step, ctx) {
 function templateContext(ctx) {
     return { target: ctx.parsed.target, category: ctx.parsed.category, scannedAt: ctx.scannedAt };
 }
+/**
+ * The metadata of the acting user's single live claim, or undefined when
+ * they hold none or more than one. One scoped list query, read before the
+ * guarded write; the write re-checks everything under lock.
+ */
+async function liveClaimMetadata(ctx) {
+    const { escalations } = await escalationService.listEscalations({
+        assigned_to: ctx.auth.userId,
+        status: 'pending',
+        limit: 2,
+    });
+    const live = escalations.filter(types_1.isEffectivelyClaimed);
+    return live.length === 1 ? (live[0].metadata ?? {}) : undefined;
+}
+/**
+ * The template context for one step: the scan tokens, the located item row's
+ * metadata when the verb has one, and the actor's live claim when the step's
+ * params mention `{claim.…}` (the lookup costs one query, so it runs only
+ * then).
+ */
+async function stepTemplate(step, ctx, item) {
+    const base = templateContext(ctx);
+    const claim = scanCodeService.mentionsClaimToken(step.params) ? await liveClaimMetadata(ctx) : undefined;
+    return { ...base, ...(item ? { item: item.metadata ?? {} } : {}), ...(claim ? { claim } : {}) };
+}
 function provenance(ctx) {
     return {
         [types_1.SCAN_PROVENANCE_KEYS.SCHEME]: ctx.scheme.version,
@@ -60,9 +88,9 @@ function provenance(ctx) {
         ...(ctx.acting ? { [types_1.SCAN_PROVENANCE_KEYS.STATION]: ctx.stationAuth.userId } : {}),
     };
 }
-function interpolatedMetadata(step, ctx) {
+function interpolatedMetadata(step, ctx, tpl = templateContext(ctx)) {
     return step.params?.metadata
-        ? scanCodeService.interpolateScanTemplate(step.params.metadata, templateContext(ctx))
+        ? scanCodeService.interpolateScanTemplate(step.params.metadata, tpl)
         : {};
 }
 function executed(escalation, step) {

package/build/api/scan-codes/execute.js

@@ -171,6 +171,8 @@ async function executeStep(step, index, ctx) {
             return (0, verbs_1.releaseStep)(step, ctx);
         case types_1.SCAN_VERBS.CANCEL:
             return (0, verbs_1.cancelStep)(step, ctx);
+        case types_1.SCAN_VERBS.ACCUMULATE:
+            return (0, verbs_1.accumulateStep)(step, ctx);
         default:
             throw new Error(`unknown scan verb "${step.verb}"`);
     }

package/build/api/scan-codes/identity.js

@@ -94,6 +94,7 @@ async function executeIdentityScan(parsed, scheme, rule, previousActingToken) {
             actor: { id: user.id, displayName: user.display_name || user.external_id },
             actingToken: (0, ephemeral_1.formatEphemeralToken)(uuid, types_1.ACTING_IDENTITY_LABEL),
             expiresAt,
+            maxUses: scheme.grant_max_uses ?? 0,
         },
     };
 }

package/build/api/scan-codes/verbs.d.ts

@@ -13,3 +13,24 @@ export declare function releaseStep(step: ScanStep, ctx: StepContext): Promise<L
  */
 export declare function dispatchChoiceVerb(step: ScanStep, ctx: StepContext, row: Record<string, any>): Promise<LTApiResult<ScanExecuteResponse>>;
 export declare function cancelStep(step: ScanStep, ctx: StepContext): Promise<LTApiResult<ScanExecuteResponse> | null>;
+/**
+ * Adds the scanned item to an accumulator. Two modes, one atomic write:
+ *
+ * - Item-locate (`params.accumulate.containerFacet`): the scan locates the
+ *   item's own pending row through the scheme facet, reads the container
+ *   facet value it carries, and adds the target to the container that shares
+ *   it, writing the item row as the reciprocal in the same statement. An
+ *   item with no row, or no container facet, falls through. An item whose
+ *   container has closed and whose successor has not parked yet answers
+ *   `no_open_container` with the item row, so the station can say "scan
+ *   again" instead of showing the bag with no hint.
+ * - Container-locate (no `containerFacet`): the scan locates the container
+ *   by the scheme facet and adds `params.itemKey` (template).
+ *
+ * Templates may read `{claim.<facet>}` (the actor's live claim) and, in item
+ * mode, `{item.<facet>}` (the located row); an unresolvable token falls
+ * through. The write is the SDK's guarded statement; the locate only picks
+ * ids. A container already holding the item answers conflict, never a
+ * second add.
+ */
+export declare function accumulateStep(step: ScanStep, ctx: StepContext): Promise<LTApiResult<ScanExecuteResponse> | null>;

package/build/api/scan-codes/verbs.js

@@ -39,24 +39,45 @@ exports.escalateStep = escalateStep;
 exports.releaseStep = releaseStep;
 exports.dispatchChoiceVerb = dispatchChoiceVerb;
 exports.cancelStep = cancelStep;
+exports.accumulateStep = accumulateStep;
 const scanCodeService = __importStar(require("../../services/scan-code"));
 const escalationService = __importStar(require("../../services/escalation"));
 const metadata_1 = require("../escalations/metadata");
+const accumulate_1 = require("../escalations/accumulate");
 const create_1 = require("../escalations/create");
 const claim_1 = require("../escalations/claim");
 const helpers_1 = require("../escalations/helpers");
 const types_1 = require("../../types");
 const context_1 = require("./context");
+const locate_1 = require("./locate");
 // ── Mutating verbs — each a single atomic operation under the ACTOR's RBAC ──
 // ctx.auth is the effective actor: the badged person when a grant rode the
 // request, otherwise the authenticated principal. Attribution and write
 // scoping both derive from it, live, inside the escalation APIs.
+/**
+ * Interpolates a step's params, or falls through when a `{claim.…}` or
+ * `{item.…}` token has nothing to read: a literal token never reaches a row.
+ */
+async function templated(step, ctx, render, item) {
+    const tpl = await (0, context_1.stepTemplate)(step, ctx, item);
+    try {
+        return render(tpl);
+    }
+    catch (err) {
+        if (err instanceof scanCodeService.ScanTemplateError)
+            return null;
+        throw err;
+    }
+}
 async function claimStep(step, ctx) {
+    const metadata = await templated(step, ctx, (tpl) => (0, context_1.interpolatedMetadata)(step, ctx, tpl));
+    if (metadata === null)
+        return null;
     const result = await (0, metadata_1.claimByMetadata)({
         key: ctx.scheme.target_facet,
         value: ctx.parsed.target,
         durationMinutes: step.params?.durationMinutes,
-        metadata: { ...(0, context_1.interpolatedMetadata)(step, ctx), ...(0, context_1.provenance)(ctx) },
+        metadata: { ...metadata, ...(0, context_1.provenance)(ctx) },
         restrictRoles: step.query?.roles,
     }, ctx.auth);
     if (result.status === 404)
@@ -68,11 +89,17 @@ async function claimStep(step, ctx) {
     return (0, context_1.executed)(result.data.escalation, step);
 }
 async function resolveStep(step, ctx) {
+    const rendered = await templated(step, ctx, (tpl) => ({
+        resolverPayload: scanCodeService.interpolateScanTemplate(step.params?.resolverPayload ?? {}, tpl),
+        metadata: (0, context_1.interpolatedMetadata)(step, ctx, tpl),
+    }));
+    if (rendered === null)
+        return null;
     const result = await (0, metadata_1.resolveByMetadata)({
         key: ctx.scheme.target_facet,
         value: ctx.parsed.target,
-        resolverPayload: scanCodeService.interpolateScanTemplate(step.params?.resolverPayload ?? {}, (0, context_1.templateContext)(ctx)),
-        metadata: { ...(0, context_1.interpolatedMetadata)(step, ctx), ...(0, context_1.provenance)(ctx) },
+        resolverPayload: rendered.resolverPayload,
+        metadata: { ...rendered.metadata, ...(0, context_1.provenance)(ctx) },
         restrictRoles: step.query?.roles,
         extraFacets: step.query?.facets,
     }, ctx.auth);
@@ -203,3 +230,95 @@ async function cancelStep(step, ctx) {
         return (0, context_1.conflict)('Escalation is not cancellable (already terminal)');
     return (0, context_1.executed)(cancelled, step);
 }
+/**
+ * Adds the scanned item to an accumulator. Two modes, one atomic write:
+ *
+ * - Item-locate (`params.accumulate.containerFacet`): the scan locates the
+ *   item's own pending row through the scheme facet, reads the container
+ *   facet value it carries, and adds the target to the container that shares
+ *   it, writing the item row as the reciprocal in the same statement. An
+ *   item with no row, or no container facet, falls through. An item whose
+ *   container has closed and whose successor has not parked yet answers
+ *   `no_open_container` with the item row, so the station can say "scan
+ *   again" instead of showing the bag with no hint.
+ * - Container-locate (no `containerFacet`): the scan locates the container
+ *   by the scheme facet and adds `params.itemKey` (template).
+ *
+ * Templates may read `{claim.<facet>}` (the actor's live claim) and, in item
+ * mode, `{item.<facet>}` (the located row); an unresolvable token falls
+ * through. The write is the SDK's guarded statement; the locate only picks
+ * ids. A container already holding the item answers conflict, never a
+ * second add.
+ */
+async function accumulateStep(step, ctx) {
+    const options = step.params?.accumulate;
+    let item;
+    if (options?.containerFacet) {
+        const located = await (0, locate_1.locateForStep)(step, ctx, 1);
+        item = located?.escalations[0];
+        if (!item)
+            return null;
+    }
+    const rendered = await templated(step, ctx, (tpl) => ({
+        payload: step.params?.resolverPayload
+            ? scanCodeService.interpolateScanTemplate(step.params.resolverPayload, tpl)
+            : undefined,
+        metadata: { ...(0, context_1.interpolatedMetadata)(step, ctx, tpl), ...(0, context_1.provenance)(ctx) },
+        itemKey: options?.containerFacet
+            ? ctx.parsed.target
+            : scanCodeService.interpolateScanTemplate(step.params.itemKey, tpl),
+    }), item);
+    if (rendered === null)
+        return null;
+    let request;
+    let container;
+    if (options?.containerFacet && item) {
+        const containerValue = item.metadata?.[options.containerFacet];
+        if (containerValue === undefined || containerValue === null || containerValue === '')
+            return null;
+        container = { facet: options.containerFacet, value: String(containerValue) };
+        request = {
+            key: container.facet,
+            value: container.value,
+            itemKey: rendered.itemKey,
+            payload: rendered.payload,
+            metadata: rendered.metadata,
+            restrictRoles: options.containerRoles,
+            ...(options.reciprocal === false ? {} : { reciprocal: { id: item.id } }),
+        };
+    }
+    else {
+        request = {
+            key: ctx.scheme.target_facet,
+            value: ctx.parsed.target,
+            itemKey: rendered.itemKey,
+            payload: rendered.payload,
+            metadata: rendered.metadata,
+            restrictRoles: step.query?.roles,
+        };
+    }
+    const result = await (0, accumulate_1.accumulateItemByMetadata)(request, ctx.auth);
+    if (result.status === 404) {
+        if (!container || !item)
+            return null;
+        return {
+            status: 200,
+            data: {
+                outcome: types_1.SCAN_OUTCOMES.NO_OPEN_CONTAINER,
+                verb: step.verb,
+                escalation: item,
+                container,
+                fallback: ctx.rule.fallback,
+                error: `No open container carries ${container.facet} = ${container.value}`,
+            },
+        };
+    }
+    if (result.status === 403)
+        return (0, context_1.forbidden)(result.error);
+    if (result.status === 409)
+        return (0, context_1.conflict)(result.error);
+    if (result.status !== 200)
+        return result;
+    const escalation = result.data.escalationId ? { id: result.data.escalationId, ...result.data } : undefined;
+    return (0, context_1.executed)(escalation, step);
+}

package/build/index.d.ts

@@ -3,7 +3,8 @@ export { midnightTheme } from './themes/midnight';
 export { registerLT, createLTInterceptor } from './services/interceptor';
 export { createLTActivityInterceptor } from './services/interceptor/activity-interceptor';
 export { executeLT } from './services/orchestrator';
-export { conditional, conditionLT } from './services/orchestrator/condition';
+export { conditional, conditionLT, conditionalAccumulator } from './services/orchestrator/condition';
+export type { ConditionEscalationConfig, ConditionAccumulatorConfig } from './services/orchestrator/condition';
 export type { ExecuteLTOptions } from './services/orchestrator/types';
 export { JwtAuthAdapter, createAuthMiddleware, requireAuth, requireAdmin, signToken, setAuthAdapter } from './modules/auth';
 export * from './types';

package/build/index.js

@@ -36,8 +36,8 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getActivityIdentity = exports.McpEscalationStrategy = exports.DefaultEscalationStrategy = exports.escalationStrategyRegistry = exports.McpVisionServer = exports.McpTranslationServer = exports.McpServer = exports.McpClient = exports.McpService = exports.BuiltInMcpAdapter = exports.mcpRegistry = exports.defaultMaintenanceConfig = exports.maintenanceRegistry = exports.PinoLoggerAdapter = exports.loggerRegistry = exports.HoneycombTelemetryAdapter = exports.telemetryRegistry = exports.publishKnowledgeEvent = exports.publishAgentEvent = exports.publishWorkflowEvent = exports.publishActivityEvent = exports.publishEscalationEvent = exports.publishTaskEvent = exports.publishMilestoneEvent = exports.SocketIOEventAdapter = exports.InMemoryEventAdapter = exports.NatsEventAdapter = exports.eventRegistry = exports.ltConfig = exports.seedConfigTopics = exports.seedSystemTopics = exports.TopicService = exports.UserService = exports.ConfigService = exports.EscalationService = exports.TaskService = exports.setAuthAdapter = exports.signToken = exports.requireAdmin = exports.requireAuth = exports.createAuthMiddleware = exports.JwtAuthAdapter = exports.conditionLT = exports.conditional = exports.executeLT = exports.createLTActivityInterceptor = exports.createLTInterceptor = exports.registerLT = exports.midnightTheme = exports.start = void 0;
-exports.LTExpressAdapter = exports.api = exports.KnowledgeApi = exports.resolveCredential = exports.mimeFromPath = exports.getStorageBackend = exports.listOAuthConnections = exports.getFreshAccessToken = exports.createClient = exports.CallbackEventAdapter = exports.builtinMcpServerFactories = exports.getSystemAgents = exports.getSystemWorkers = exports.registerMcpTool = exports.getToolContext = void 0;
+exports.McpEscalationStrategy = exports.DefaultEscalationStrategy = exports.escalationStrategyRegistry = exports.McpVisionServer = exports.McpTranslationServer = exports.McpServer = exports.McpClient = exports.McpService = exports.BuiltInMcpAdapter = exports.mcpRegistry = exports.defaultMaintenanceConfig = exports.maintenanceRegistry = exports.PinoLoggerAdapter = exports.loggerRegistry = exports.HoneycombTelemetryAdapter = exports.telemetryRegistry = exports.publishKnowledgeEvent = exports.publishAgentEvent = exports.publishWorkflowEvent = exports.publishActivityEvent = exports.publishEscalationEvent = exports.publishTaskEvent = exports.publishMilestoneEvent = exports.SocketIOEventAdapter = exports.InMemoryEventAdapter = exports.NatsEventAdapter = exports.eventRegistry = exports.ltConfig = exports.seedConfigTopics = exports.seedSystemTopics = exports.TopicService = exports.UserService = exports.ConfigService = exports.EscalationService = exports.TaskService = exports.setAuthAdapter = exports.signToken = exports.requireAdmin = exports.requireAuth = exports.createAuthMiddleware = exports.JwtAuthAdapter = exports.conditionalAccumulator = exports.conditionLT = exports.conditional = exports.executeLT = exports.createLTActivityInterceptor = exports.createLTInterceptor = exports.registerLT = exports.midnightTheme = exports.start = void 0;
+exports.LTExpressAdapter = exports.api = exports.KnowledgeApi = exports.resolveCredential = exports.mimeFromPath = exports.getStorageBackend = exports.listOAuthConnections = exports.getFreshAccessToken = exports.createClient = exports.CallbackEventAdapter = exports.builtinMcpServerFactories = exports.getSystemAgents = exports.getSystemWorkers = exports.registerMcpTool = exports.getToolContext = exports.getActivityIdentity = void 0;
 const config_1 = require("./modules/config");
 const logger_1 = require("./lib/logger");
 const midnight_1 = require("./themes/midnight");
@@ -57,6 +57,7 @@ Object.defineProperty(exports, "executeLT", { enumerable: true, get: function ()
 var condition_1 = require("./services/orchestrator/condition");
 Object.defineProperty(exports, "conditional", { enumerable: true, get: function () { return condition_1.conditional; } });
 Object.defineProperty(exports, "conditionLT", { enumerable: true, get: function () { return condition_1.conditionLT; } });
+Object.defineProperty(exports, "conditionalAccumulator", { enumerable: true, get: function () { return condition_1.conditionalAccumulator; } });
 var auth_1 = require("./modules/auth");
 Object.defineProperty(exports, "JwtAuthAdapter", { enumerable: true, get: function () { return auth_1.JwtAuthAdapter; } });
 Object.defineProperty(exports, "createAuthMiddleware", { enumerable: true, get: function () { return auth_1.createAuthMiddleware; } });
@@ -168,6 +169,66 @@ async function main() {
             },
         },
         examples: true,
+        // Code-owned declaration for the reviewer queue the examples route to: a
+        // portal that leads with the queue's counts and lays its lists beneath.
+        // `reset` keeps the declaration applied on every boot.
+        roles: [
+            {
+                role: 'reviewer',
+                title: 'Reviewer',
+                reset: true,
+                portals: [
+                    {
+                        key: 'review-desk',
+                        label: 'Review desk',
+                        counts: [
+                            { label: 'Waiting', url: '/escalations/available?role=reviewer', blurb: 'Unclaimed items in the queue' },
+                            { label: 'In progress', url: '/escalations/available?role=reviewer&status=claimed', blurb: 'Claimed and being worked' },
+                            { label: 'Resolved', url: '/escalations/available?role=reviewer&status=resolved', blurb: 'Closed out by a reviewer' },
+                            { label: 'Expired', url: '/escalations/available?role=reviewer&status=expired', blurb: 'Timed out before anyone acted' },
+                            { label: 'Cancelled', url: '/escalations/available?role=reviewer&status=cancelled', blurb: 'Withdrawn by the workflow' },
+                        ],
+                        rows: [
+                            [
+                                { label: 'Waiting', url: '/escalations/available?role=reviewer&view=table&layout=compact', badge: true },
+                                { label: 'In progress', url: '/escalations/available?role=reviewer&status=claimed&view=table&layout=compact', badge: true },
+                            ],
+                        ],
+                    },
+                ],
+            },
+            {
+                // The rollup-bin example's container queue: the list shows each
+                // bin's fill level from the accumulator facets.
+                role: 'bin',
+                title: 'Bin',
+                description: 'Open containers filling with scanned bags. Ships at max or when the window closes.',
+                reset: true,
+                list_schema: {
+                    'x-lt-layout': 'facet-table',
+                    'x-lt-columns': [
+                        { label: 'Bin', value: '{{metadata.binKey}}' },
+                        { label: 'Held', value: '{{metadata.accumulate_count}}' },
+                        { label: 'Max', value: '{{metadata.accumulate_max}}', priority: 2 },
+                        { label: 'Open since', value: '{{escalation.created_at}}', format: 'age', priority: 2 },
+                    ],
+                },
+            },
+            {
+                role: 'bag',
+                title: 'Bag',
+                description: 'Bags waiting to be scanned into a bin.',
+                reset: true,
+                list_schema: {
+                    'x-lt-layout': 'facet-table',
+                    'x-lt-columns': [
+                        { label: 'Order', value: '{{metadata.orderId}}' },
+                        { label: 'Bin', value: '{{metadata.binKey}}', priority: 2 },
+                        { label: 'Waiting', value: '{{escalation.created_at}}', format: 'age', priority: 2 },
+                    ],
+                },
+            },
+        ],
         features: {
             // The examples ship the full scan demo (schemes 10/11); surface it.
             scanCodes: true,

package/build/lib/db/schemas/036_role_portals.sql

@@ -0,0 +1,12 @@
+-- Migration 036: Role portals
+--
+-- portals is a role-owned list of named portal views. Each portal is a matrix
+-- of pins: rows of cells, each cell a pinned view ({ label, url, badge? }).
+-- The dashboard renders a portal as one page of live list panels at
+-- /portal/:role/:portal, the visual form of the role's pinned views: one
+-- portal for urgent items by facility, another for the team's focus of the
+-- day, each cell named for a person and scoped to their facets. Unversioned
+-- config, like default_pins; null means the role declares no portal.
+
+ALTER TABLE lt_roles
+  ADD COLUMN IF NOT EXISTS portals JSONB;

package/build/routes/escalations/accumulate.d.ts

@@ -0,0 +1,7 @@
+import type { Router } from 'express';
+/**
+ * Open-accumulator routes. The literal single-segment paths are registered
+ * before the parameterized routes so /:id never shadows them; the /:id/*
+ * forms run as the effective work actor (badge continuity at a station).
+ */
+export declare function registerAccumulateRoutes(router: Router): void;