@nanobpm/urban 0.79.0 → 0.81.0

package/dist/runtime/core/modules/open-user-tasks-store.d.ts

@@ -56,6 +56,11 @@ export declare class OpenUserTasksStore {
     syncInstance(processInstanceKey: string, openTasks: readonly UserTaskSummary[]): void;
     /** Retire every projected open task for an instance (e.g. it terminated). Idempotent. */
     clearInstance(processInstanceKey: string): void;
+    /** Every distinct instance key currently projected as having ≥1 open user task. Used by the
+     *  reconciler to re-probe (and, when answered, RETIRE) keys that have dropped out of a binding's
+     *  `activeStatuses` allow-list — a projected row must be retired independently of the base-row
+     *  selector, or an answered escalation's row would linger and the derived edge tear (ADR 0065). */
+    instanceKeys(): string[];
     /** True iff the instance currently has any open user task — the "parked on a human" predicate. */
     hasOpenTask(processInstanceKey: string): boolean;
     /** The projected open tasks for an instance, in insertion order. */

package/dist/runtime/core/modules/open-user-tasks-store.js

@@ -113,6 +113,14 @@ export class OpenUserTasksStore {
             return;
         this.#db.run(`DELETE FROM ${OPEN_USER_TASKS_TABLE} WHERE process_instance_key = ?`, [processInstanceKey]);
     }
+    /** Every distinct instance key currently projected as having ≥1 open user task. Used by the
+     *  reconciler to re-probe (and, when answered, RETIRE) keys that have dropped out of a binding's
+     *  `activeStatuses` allow-list — a projected row must be retired independently of the base-row
+     *  selector, or an answered escalation's row would linger and the derived edge tear (ADR 0065). */
+    instanceKeys() {
+        const rows = this.#db.all(`SELECT DISTINCT process_instance_key FROM ${OPEN_USER_TASKS_TABLE}`);
+        return rows.map((r) => r.process_instance_key);
+    }
     /** True iff the instance currently has any open user task — the "parked on a human" predicate. */
     hasOpenTask(processInstanceKey) {
         if (!processInstanceKey)

package/dist/runtime/core/modules/pages.js

@@ -28,8 +28,11 @@ import { errorMessage, isRecord } from "../guards.js";
 import { html, json } from "../router.js";
 import { cancelInstanceReconciling } from "./cancel.js";
 import { apiDocsPath } from "./api.js";
+import { FORMJS_JS } from "./formjs.gen.js";
+import { completeUserTaskResponse, resolveFormResponse } from "./forms.js";
 import { quoteIdent } from "./gateway.js";
 import { RENDERER_JS } from "./runtime.gen.js";
+import { isSqlIdentifier } from "../read-model.js";
 /** A JavaScript-body response (the renderer module served at the fingerprinted
  * `/app/runtime.<hash>.js`, and its `/app/runtime.js` back-compat route). */
 function javascript(body, status = 200, extraHeaders) {
@@ -116,9 +119,10 @@ async function serveAsset(read, filePath) {
         return { status: 404, headers: { "content-type": "text/plain; charset=utf-8" }, body: "not found" };
     }
 }
-/** A SQL identifier guard — a table name must be a bare identifier *and* a known table
- * (checked against `schema()`), so `/app/data/:table` can never inject SQL. */
-const IDENT = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/** A table name must be a bare SQL identifier ({@link isSqlIdentifier}, the runtime-wide single source
+ * of truth) *and* a known table (checked against `schema()`), so `/app/data/:table` can never inject
+ * SQL. Reusing the shared guard (rather than a private regex) keeps this surface from drifting from
+ * manifest / read-model / data-source identifier validation. */
 // A query flag (e.g. ?count=1) is "on" when present and not one of the falsy
 // spellings. A bare `?count` (empty string) still counts as on, so a caller can
 // opt in without inventing a value.
@@ -297,7 +301,7 @@ export function createPagesRoutes(opts, deps) {
             // source is rejected rather than silently served off the default.
             if (source !== sourceName)
                 return json({ error: `unknown datasource "${source}"` }, 404);
-            if (!IDENT.test(table))
+            if (!isSqlIdentifier(table))
                 return json({ error: "invalid table name" }, 400);
             let tables;
             try {
@@ -489,6 +493,26 @@ export function createPagesRoutes(opts, deps) {
             }
         },
     });
+    // ── GET /app/actions/form  &  POST /app/actions/complete (ADR 0026, #457) ───
+    // Engine-declared forms in a `dataGrid` detail drawer. A grid whose `detail`
+    // opts into `engineForm` resolves the selected row's `form_key` here and
+    // completes the row's user task here — the SAME two seams the `taskInbox`
+    // surface uses, reused (not forked) via `forms.ts` so the resolution gate and
+    // the completion contract can't drift between the two surfaces. This closes the
+    // form-duplication drift class: the grid renders the authoritative deployed
+    // `.form` rather than a hand-authored page-local `detail.form` copy.
+    routes.push({
+        method: "GET",
+        path: "/app/actions/form",
+        source: "surface:pages",
+        handler: (req) => resolveFormResponse(engine, req.query.get("formKey") ?? undefined, req.query.get("formId") ?? undefined),
+    });
+    routes.push({
+        method: "POST",
+        path: "/app/actions/complete",
+        source: "surface:pages",
+        handler: async (req) => completeUserTaskResponse(engine, await req.text()),
+    });
     // ── nested (multi-appView) sidecars (#442) ──────────────────────────────
     // An app with more than one `appView` cannot share the four FLAT sidecar names above:
     // each view ships its own SUBDIR sidecar — e.g. `pages/cockpit.page.json` →
@@ -603,6 +627,7 @@ function rendererShell(homePage, apiDocsPath) {
 </head>
 <body>${apiDocsBadge}
   <main id="page" data-home="${escapeAttr(homePage)}"><p class="pc-empty">Loading…</p></main>
+  <script>${FORMJS_JS}</script>
   <script type="module" src=".${RUNTIME_JS_PATH}"></script>
 </body>
 </html>`;
@@ -669,6 +694,19 @@ body { margin:0; font:15px/1.5 system-ui,sans-serif; padding:2rem; max-width:64r
 .pc-field-check input { width:auto; padding:0; accent-color:var(--nano-accent); cursor:pointer; }
 .pc-btn { padding:.5rem .9rem; border:0; border-radius:.4rem; background:var(--nano-accent); color:var(--nano-on-accent); font:inherit; cursor:pointer; }
 .pc-btn:disabled { opacity:.5; cursor:default; }
+/* The shared engine-form renderer (NanoFormJs, ADR 0026/#457) styled to match the
+   page runtime's native detail controls. njf-* are its stable class names; both
+   this surface and the taskInbox page style the same renderer output. */
+.njf-form { display:flex; flex-direction:column; gap:.4rem; margin-top:.5rem; }
+.njf-heading { font-size:1rem; margin:0 0 .25rem; }
+.njf-text { color:var(--nano-text-muted); margin:.25rem 0; }
+.njf-field { display:flex; flex-direction:column; gap:.25rem; }
+.njf-field label { font-size:.8rem; color:var(--nano-text-muted); }
+.njf-field input:not([type=checkbox]):not([type=radio]), .njf-field textarea, .njf-field select { padding:.5rem .6rem; border:1px solid var(--nano-edge); border-radius:.4rem; font:inherit; background:var(--nano-inset); color:var(--nano-text); max-width:24rem; }
+.njf-actions { display:flex; gap:.5rem; margin-top:.4rem; }
+.njf-actions button { padding:.5rem .9rem; border:0; border-radius:.4rem; background:var(--nano-accent); color:var(--nano-on-accent); font:inherit; cursor:pointer; }
+.njf-msg { font-size:.85rem; margin-top:.35rem; }
+.njf-msg.err { color:var(--nano-danger); }
 .pc-msg { font-size:.85rem; margin-top:.5rem; min-height:1.2em; }
 .pc-msg.err { color:var(--nano-danger); }
 .pc-msg.ok { color:var(--nano-ok); }