@nocobase/app-plugin-projects 0.0.0-stage → 0.1.0-beta.10

package/dist/database/migrations/202610240010_pm_fixed_statuses.js

@@ -0,0 +1,189 @@
+import { defineMigration } from '@nocobase/db';
+// Issues move through six fixed statuses (backlog, in_progress, blocked, in_review, done, cancelled) and workflows are
+// gone, with the approvals and checklists their transitions and statuses held. This migration
+//
+// - moves every issue to a fixed status: first by its key (`todo`, `analysis` and `proposal_review` to in_progress,
+//   `ui_review` to in_review, a fixed key stays), then, for a key no fixed status has, by the category the status has
+//   in the issue's workflow (its project's, else the default one): `unstarted` and `started` to in_progress, `done` to
+//   done, `closed` to cancelled; a key no workflow defines goes to backlog;
+// - drops the workflows (`pmWorkflows`, `pmProjects.workflowId`), the approval requests (`pmApprovalRequests`) and the
+//   checklist items (`pmIssueChecklistItems`).
+//
+// Nothing is woken: rows change directly. `down` recreates the dropped tables and column, empty, as the migrations that
+// created them defined them; the issues keep their fixed statuses, since the old ones are not kept.
+//
+// Self-contained on purpose: the status keys and categories are written out here, not imported.
+const BY_KEY = {
+    backlog: 'backlog',
+    todo: 'in_progress',
+    analysis: 'in_progress',
+    proposal_review: 'in_progress',
+    in_progress: 'in_progress',
+    blocked: 'blocked',
+    in_review: 'in_review',
+    ui_review: 'in_review',
+    done: 'done',
+    cancelled: 'cancelled',
+};
+const BY_CATEGORY = {
+    unstarted: 'in_progress',
+    started: 'in_progress',
+    done: 'done',
+    closed: 'cancelled',
+};
+const FALLBACK = 'backlog';
+const CHUNK = 500;
+/** A column read as text, or null. */
+const text = (value) => typeof value === 'string' ? value : null;
+const parseJson = (value) => typeof value === 'string' ? JSON.parse(value) : value;
+/** A workflow definition's status categories, by key. */
+function categoriesOf(definition) {
+    const parsed = parseJson(definition);
+    const states = Array.isArray(parsed?.states) ? parsed.states : [];
+    const categories = new Map();
+    for (const state of states)
+        if (typeof state?.key === 'string' && typeof state.category === 'string')
+            categories.set(state.key, state.category);
+    return categories;
+}
+const migration = defineMigration({
+    name: '202610240010_pm_fixed_statuses',
+    async up({ builder, query }) {
+        // Statuses with a key of their own, everywhere at once.
+        for (const [from, to] of Object.entries(BY_KEY))
+            if (from !== to)
+                await query
+                    .updateTable('pmIssues')
+                    .set({ statusKey: to })
+                    .where('statusKey', '=', from)
+                    .execute();
+        // The rest by their category in the issue's workflow.
+        const rest = await query
+            .selectFrom('pmIssues')
+            .select(['id', 'projectId', 'statusKey'])
+            .where('statusKey', 'not in', Object.keys(BY_KEY))
+            .execute();
+        if (rest.length > 0) {
+            const workflows = await query
+                .selectFrom('pmWorkflows')
+                .select(['id', 'isDefault', 'definition'])
+                .execute();
+            const byId = new Map(workflows.map((row) => [text(row.id), categoriesOf(row.definition)]));
+            const defaultId = text(workflows.find((row) => Boolean(row.isDefault))?.id);
+            const fallback = byId.get(defaultId) ?? new Map();
+            const projects = await query
+                .selectFrom('pmProjects')
+                .select(['id', 'workflowId'])
+                .execute();
+            const workflowOf = new Map(projects.map((row) => [text(row.id), text(row.workflowId)]));
+            const targets = new Map();
+            for (const issue of rest) {
+                const projectId = text(issue.projectId);
+                const workflowId = projectId === null ? null : (workflowOf.get(projectId) ?? null);
+                const categories = (workflowId === null ? undefined : byId.get(workflowId)) ?? fallback;
+                const category = categories.get(text(issue.statusKey) ?? '');
+                const to = (category && BY_CATEGORY[category]) ?? FALLBACK;
+                const id = text(issue.id);
+                if (id !== null)
+                    targets.set(to, [...(targets.get(to) ?? []), id]);
+            }
+            for (const [to, ids] of targets)
+                for (let at = 0; at < ids.length; at += CHUNK)
+                    await query
+                        .updateTable('pmIssues')
+                        .set({ statusKey: to })
+                        .where('id', 'in', ids.slice(at, at + CHUNK))
+                        .execute();
+        }
+        await builder.dropCollection('pmIssueChecklistItems');
+        await builder.dropCollection('pmApprovalRequests');
+        await builder.alterCollection('pmProjects', (collection) => {
+            collection.dropField('workflowId');
+        });
+        await builder.dropCollection('pmWorkflows');
+    },
+    async down({ builder }) {
+        await builder.createCollections([
+            {
+                name: 'pmWorkflows',
+                definition: (collection) => {
+                    collection.string('id', { length: 64 }).primary().notNull();
+                    collection.string('name', { length: 100 }).notNull();
+                    collection.text('description').nullable();
+                    collection.boolean('isDefault').notNull().defaultTo(false);
+                    collection.string('builtInKey', { length: 64 }).nullable();
+                    collection.json('definition').notNull();
+                    collection.integer('revision').notNull().defaultTo(1);
+                    collection.optimisticLock('revision');
+                    collection.datetimeTz('createdAt').notNull();
+                    collection.datetimeTz('updatedAt').notNull();
+                    collection.unique(['name']);
+                },
+            },
+        ]);
+        await builder.alterCollection('pmProjects', (collection) => {
+            collection.string('workflowId', { length: 64 }).nullable();
+        });
+        await builder.createCollections([
+            {
+                name: 'pmApprovalRequests',
+                definition: (collection) => {
+                    collection.string('id', { length: 64 }).primary().notNull();
+                    collection.string('issueId', { length: 64 }).notNull();
+                    collection.string('fromStatus', { length: 32 }).notNull();
+                    collection.string('toStatus', { length: 32 }).notNull();
+                    collection.string('requestedByType', { length: 32 }).notNull();
+                    collection.string('requestedById', { length: 64 }).notNull();
+                    collection.json('approvers').notNull();
+                    collection.json('approverUserIds').notNull();
+                    collection
+                        .enum('status', {
+                        values: ['pending', 'approved', 'rejected', 'withdrawn', 'stale'],
+                    })
+                        .notNull()
+                        .defaultTo('pending');
+                    collection.string('decidedById', { length: 64 }).nullable();
+                    collection.datetimeTz('decidedAt').nullable();
+                    collection.text('comment').nullable();
+                    collection.datetimeTz('createdAt').notNull();
+                    collection.datetimeTz('updatedAt').notNull();
+                    collection.index(['issueId', 'status']);
+                    collection.index(['status', 'createdAt']);
+                    collection
+                        .belongsTo('issue', 'pmIssues')
+                        .targetKey('id')
+                        .foreignKey('issueId')
+                        .constraints(true)
+                        .onDelete('cascade');
+                },
+            },
+            {
+                name: 'pmIssueChecklistItems',
+                definition: (collection) => {
+                    collection.string('id', { length: 64 }).primary().notNull();
+                    collection.string('issueId', { length: 64 }).notNull();
+                    collection.string('statusKey', { length: 32 }).notNull();
+                    collection.string('itemKey', { length: 64 }).notNull();
+                    collection.string('label', { length: 200 }).notNull();
+                    collection.boolean('required').notNull().defaultTo(false);
+                    collection.integer('position').notNull().defaultTo(0);
+                    collection.string('checkedByType', { length: 32 }).nullable();
+                    collection.string('checkedById', { length: 64 }).nullable();
+                    collection.datetimeTz('checkedAt').nullable();
+                    collection.datetimeTz('createdAt').notNull();
+                    collection.datetimeTz('updatedAt').notNull();
+                    collection.unique(['issueId', 'statusKey', 'itemKey']);
+                    collection
+                        .belongsTo('issue', 'pmIssues')
+                        .targetKey('id')
+                        .foreignKey('issueId')
+                        .constraints(true)
+                        .onDelete('cascade');
+                },
+            },
+        ]);
+    },
+});
+export default migration;
+//# sourceMappingURL=202610240010_pm_fixed_statuses.js.map
+// @nocobase/task-manifest v1

package/dist/database/migrations/202610240010_pm_fixed_statuses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"202610240010_pm_fixed_statuses.js","sourceRoot":"","sources":["../../../database/migrations/202610240010_pm_fixed_statuses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAA4B,MAAM,cAAc,CAAC;AAEzE,uHAAuH;AACvH,8FAA8F;AAC9F,EAAE;AACF,oHAAoH;AACpH,sHAAsH;AACtH,uHAAuH;AACvH,4EAA4E;AAC5E,uHAAuH;AACvH,+CAA+C;AAC/C,EAAE;AACF,wHAAwH;AACxH,oGAAoG;AACpG,EAAE;AACF,gGAAgG;AAEhG,MAAM,MAAM,GAAqC;IAC/C,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,aAAa;IACnB,QAAQ,EAAE,aAAa;IACvB,eAAe,EAAE,aAAa;IAC9B,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,WAAW;CACvB,CAAC;AAEF,MAAM,WAAW,GAAqC;IACpD,SAAS,EAAE,aAAa;IACxB,OAAO,EAAE,aAAa;IACtB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,WAAW;CACpB,CAAC;AAEF,MAAM,QAAQ,GAAG,SAAS,CAAC;AAC3B,MAAM,KAAK,GAAG,GAAG,CAAC;AAElB,sCAAsC;AACtC,MAAM,IAAI,GAAG,CAAC,KAAc,EAAiB,EAAE,CAC7C,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAE3C,MAAM,SAAS,GAAG,CAAC,KAAc,EAAW,EAAE,CAC5C,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAExD,yDAAyD;AACzD,SAAS,YAAY,CAAC,UAAmB;IACvC,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAgC,CAAC;IACpE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,MAAiD;QACnE,IAAI,OAAO,KAAK,EAAE,GAAG,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;YACtE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,SAAS,GAAwB,eAAe,CAAC;IACrD,IAAI,EAAE,gCAAgC;IAEtC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;QACzB,wDAAwD;QACxD,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YAC7C,IAAI,IAAI,KAAK,EAAE;gBACb,MAAM,KAAK;qBACR,WAAW,CAAC,UAAU,CAAC;qBACvB,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;qBACtB,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC;qBAC7B,OAAO,EAAE,CAAC;QAEjB,sDAAsD;QACtD,MAAM,IAAI,GAAG,MAAM,KAAK;aACrB,UAAU,CAAC,UAAU,CAAC;aACtB,MAAM,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;aACxC,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;aACjD,OAAO,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,MAAM,KAAK;iBAC1B,UAAU,CAAC,aAAa,CAAC;iBACzB,MAAM,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;iBACzC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CACrE,CAAC;YACF,MAAM,SAAS,GAAG,IAAI,CACpB,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CACpD,CAAC;YACF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC;YAClE,MAAM,QAAQ,GAAG,MAAM,KAAK;iBACzB,UAAU,CAAC,YAAY,CAAC;iBACxB,MAAM,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;iBAC5B,OAAO,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAC5D,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;YAC5C,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACxC,MAAM,UAAU,GACd,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC;gBAClE,MAAM,UAAU,GACd,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,QAAQ,CAAC;gBACvE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7D,MAAM,EAAE,GAAG,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,QAAQ,CAAC;gBAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC1B,IAAI,EAAE,KAAK,IAAI;oBAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC;YACD,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,OAAO;gBAC7B,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,KAAK;oBAC3C,MAAM,KAAK;yBACR,WAAW,CAAC,UAAU,CAAC;yBACvB,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;yBACtB,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC;yBAC5C,OAAO,EAAE,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC;QACtD,MAAM,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;QACnD,MAAM,OAAO,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;YACzD,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE;QACpB,MAAM,OAAO,CAAC,iBAAiB,CAAC;YAC9B;gBACE,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE;oBACzB,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;oBAC5D,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBACrD,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC;oBAC1C,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBAC3D,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;oBAC3D,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;oBACxC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;oBACtD,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;oBACtC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC7C,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC7C,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC9B,CAAC;aACF;SACF,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;YACzD,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7D,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,iBAAiB,CAAC;YAC9B;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE;oBACzB,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;oBAC5D,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBACvD,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC1D,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBACxD,UAAU,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC/D,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC7D,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;oBACvC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC7C,UAAU;yBACP,IAAI,CAAC,QAAQ,EAAE;wBACd,MAAM,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC;qBAClE,CAAC;yBACD,OAAO,EAAE;yBACT,SAAS,CAAC,SAAS,CAAC,CAAC;oBACxB,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;oBAC5D,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;oBAC9C,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACtC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC7C,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC7C,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;oBACxC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;oBAC1C,UAAU;yBACP,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC;yBAC9B,SAAS,CAAC,IAAI,CAAC;yBACf,UAAU,CAAC,SAAS,CAAC;yBACrB,WAAW,CAAC,IAAI,CAAC;yBACjB,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACzB,CAAC;aACF;YACD;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE;oBACzB,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;oBAC5D,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBACvD,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBACzD,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBACvD,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBACtD,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBAC1D,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;oBACtD,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;oBAC9D,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;oBAC5D,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;oBAC9C,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC7C,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC7C,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;oBACvD,UAAU;yBACP,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC;yBAC9B,SAAS,CAAC,IAAI,CAAC;yBACf,UAAU,CAAC,SAAS,CAAC;yBACrB,WAAW,CAAC,IAAI,CAAC;yBACjB,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACzB,CAAC;aACF;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH,eAAe,SAAS,CAAC"}

package/dist/database/migrations/202610240011_pm_issue_progress.d.ts

@@ -0,0 +1,4 @@
+import { type MigrationDefinition } from '@nocobase/db';
+declare const migration: MigrationDefinition;
+export default migration;
+//# sourceMappingURL=202610240011_pm_issue_progress.d.ts.map

package/dist/database/migrations/202610240011_pm_issue_progress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"202610240011_pm_issue_progress.d.ts","sourceRoot":"","sources":["../../../database/migrations/202610240011_pm_issue_progress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEzE,QAAA,MAAM,SAAS,EAAE,mBAcf,CAAC;AAEH,eAAe,SAAS,CAAC"}

package/dist/database/migrations/202610240011_pm_issue_progress.js

@@ -0,0 +1,19 @@
+import { defineMigration } from '@nocobase/db';
+const migration = defineMigration({
+    name: '202610240011_pm_issue_progress',
+    async up({ builder }) {
+        await builder.alterCollection('pmIssues', (collection) => {
+            collection.text('needsYou').nullable();
+            collection.text('next').nullable();
+        });
+    },
+    async down({ builder }) {
+        await builder.alterCollection('pmIssues', (collection) => {
+            collection.dropField('next');
+            collection.dropField('needsYou');
+        });
+    },
+});
+export default migration;
+//# sourceMappingURL=202610240011_pm_issue_progress.js.map
+// @nocobase/task-manifest v1

package/dist/database/migrations/202610240011_pm_issue_progress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"202610240011_pm_issue_progress.js","sourceRoot":"","sources":["../../../database/migrations/202610240011_pm_issue_progress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAA4B,MAAM,cAAc,CAAC;AAEzE,MAAM,SAAS,GAAwB,eAAe,CAAC;IACrD,IAAI,EAAE,gCAAgC;IACtC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE;QAClB,MAAM,OAAO,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE;YACvD,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;YACvC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE;QACpB,MAAM,OAAO,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE;YACvD,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC7B,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH,eAAe,SAAS,CAAC"}

package/dist/database/migrations/202610240012_pm_issue_acceptance.d.ts

@@ -0,0 +1,4 @@
+import { type MigrationDefinition } from '@nocobase/db';
+declare const migration: MigrationDefinition;
+export default migration;
+//# sourceMappingURL=202610240012_pm_issue_acceptance.d.ts.map

package/dist/database/migrations/202610240012_pm_issue_acceptance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"202610240012_pm_issue_acceptance.d.ts","sourceRoot":"","sources":["../../../database/migrations/202610240012_pm_issue_acceptance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEzE,QAAA,MAAM,SAAS,EAAE,mBAYf,CAAC;AAEH,eAAe,SAAS,CAAC"}

package/dist/database/migrations/202610240012_pm_issue_acceptance.js

@@ -0,0 +1,17 @@
+import { defineMigration } from '@nocobase/db';
+const migration = defineMigration({
+    name: '202610240012_pm_issue_acceptance',
+    async up({ builder }) {
+        await builder.alterCollection('pmIssues', (collection) => {
+            collection.text('acceptance').nullable();
+        });
+    },
+    async down({ builder }) {
+        await builder.alterCollection('pmIssues', (collection) => {
+            collection.dropField('acceptance');
+        });
+    },
+});
+export default migration;
+//# sourceMappingURL=202610240012_pm_issue_acceptance.js.map
+// @nocobase/task-manifest v1

package/dist/database/migrations/202610240012_pm_issue_acceptance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"202610240012_pm_issue_acceptance.js","sourceRoot":"","sources":["../../../database/migrations/202610240012_pm_issue_acceptance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAA4B,MAAM,cAAc,CAAC;AAEzE,MAAM,SAAS,GAAwB,eAAe,CAAC;IACrD,IAAI,EAAE,kCAAkC;IACxC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE;QAClB,MAAM,OAAO,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE;YACvD,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE;QACpB,MAAM,OAAO,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE;YACvD,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH,eAAe,SAAS,CAAC"}

package/dist/database/seeds/.manifest.json

@@ -0,0 +1,9 @@
+{
+  "version": 1,
+  "files": {
+    "202609300005_pm_default_settings.js": {
+      "sourceChecksum": "6d01b224234eca16f3c14d751cbd9a80ac36eeca15a9a43f50a4f28253726a56",
+      "artifactChecksum": "8e028bc65749e54de2e29b8a27d498cb2484fbcb80280b66b827894b5cbf8231"
+    }
+  }
+}

package/dist/database/seeds/202609300005_pm_default_settings.d.ts

@@ -0,0 +1,4 @@
+import { type SeedDefinition } from '@nocobase/db';
+declare const seed: SeedDefinition;
+export default seed;
+//# sourceMappingURL=202609300005_pm_default_settings.d.ts.map

package/dist/database/seeds/202609300005_pm_default_settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"202609300005_pm_default_settings.d.ts","sourceRoot":"","sources":["../../../database/seeds/202609300005_pm_default_settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAG/D,QAAA,MAAM,IAAI,EAAE,cAuBV,CAAC;AAEH,eAAe,IAAI,CAAC"}

package/dist/database/seeds/202609300005_pm_default_settings.js

@@ -0,0 +1,29 @@
+import { defineSeed } from '@nocobase/db';
+// The single settings row. An existing row is left as it is.
+const seed = defineSeed({
+    name: '202609300005_pm_default_settings',
+    async run({ query }) {
+        const existing = await query
+            .selectFrom('pmSettings')
+            .select('id')
+            .where('id', '=', 'default')
+            .executeTakeFirst();
+        if (existing)
+            return;
+        const now = new Date();
+        await query
+            .insertInto('pmSettings')
+            .values({
+            id: 'default',
+            issuePrefix: 'PM',
+            issueCounter: 0,
+            values: JSON.stringify({}),
+            createdAt: now,
+            updatedAt: now,
+        })
+            .execute();
+    },
+});
+export default seed;
+//# sourceMappingURL=202609300005_pm_default_settings.js.map
+// @nocobase/task-manifest v1

package/dist/database/seeds/202609300005_pm_default_settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"202609300005_pm_default_settings.js","sourceRoot":"","sources":["../../../database/seeds/202609300005_pm_default_settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAuB,MAAM,cAAc,CAAC;AAE/D,6DAA6D;AAC7D,MAAM,IAAI,GAAmB,UAAU,CAAC;IACtC,IAAI,EAAE,kCAAkC;IAExC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE;QACjB,MAAM,QAAQ,GAAG,MAAM,KAAK;aACzB,UAAU,CAAC,YAAY,CAAC;aACxB,MAAM,CAAC,IAAI,CAAC;aACZ,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC;aAC3B,gBAAgB,EAAE,CAAC;QACtB,IAAI,QAAQ;YAAE,OAAO;QACrB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK;aACR,UAAU,CAAC,YAAY,CAAC;aACxB,MAAM,CAAC;YACN,EAAE,EAAE,SAAS;YACb,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,CAAC;YACf,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;aACD,OAAO,EAAE,CAAC;IACf,CAAC;CACF,CAAC,CAAC;AAEH,eAAe,IAAI,CAAC"}

package/dist/package.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=package.d.ts.map

package/dist/package.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package.d.ts","sourceRoot":"","sources":["../package.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC"}

package/dist/package.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=package.js.map

package/dist/package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package.js","sourceRoot":"","sources":["../package.ts"],"names":[],"mappings":""}

package/dist/server/access/request.d.ts

@@ -0,0 +1,37 @@
+/**
+ * The request side of access: after authentication and the authorization middleware, `viewerMiddleware` builds the
+ * request's `Viewer` and route handlers read it with `viewerOf`.
+ */
+import type { AuthEnv } from '@nocobase/app-plugin-authentication';
+import type { AuthorizationEnv } from '@nocobase/app-plugin-authorization';
+import type { Context, MiddlewareHandler } from 'hono';
+import type { DelegatedWrite, DelegatedWriteRequest, DelegatedWrites, ProjectsAccess, RequestActor } from '../tokens.js';
+import type { Viewer } from './viewer.js';
+declare const VIEWER = "pmViewer";
+declare const DELEGATED = "pmDelegatedWrites";
+export interface ViewerEnv {
+    Variables: AuthEnv['Variables'] & AuthorizationEnv['Variables'] & {
+        [VIEWER]?: Viewer;
+        [DELEGATED]?: DelegatedWrites;
+    };
+}
+/** What the application binds, resolved on each request (`projectsRequestActorToken`, `projectsDelegatedWritesToken`). */
+export interface ViewerHooks {
+    readonly actorOf?: () => RequestActor | undefined;
+    readonly delegated?: () => DelegatedWrites | undefined;
+}
+/** Builds the request's `Viewer`; install after `auth.required()` and `authz.middleware()`. */
+export declare function viewerMiddleware(access: Pick<ProjectsAccess, 'permissionsOf'>, hooks?: ViewerHooks): MiddlewareHandler<ViewerEnv>;
+export declare function viewerOf(context: Context<ViewerEnv>): Viewer;
+/**
+ * Hands a write to the application's delegated writes when the request's viewer acts for someone else
+ * (`DelegatedWrites`); undefined when it does not, and the route then writes through the services itself.
+ */
+export declare function delegatedWrite(context: Context<ViewerEnv>, request: DelegatedWriteRequest): Promise<DelegatedWrite | undefined>;
+/**
+ * Refuses a change made for someone else (a conversation's run acting for its asker) that the delegated writes do not
+ * cover, such as deleting an issue: 409 `PLAN_REQUIRED`, so it goes through a plan the person confirms.
+ */
+export declare function refuseDelegated(context: Context<ViewerEnv>): void;
+export {};
+//# sourceMappingURL=request.d.ts.map

package/dist/server/access/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../../server/access/request.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAGvD,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,YAAY,EACb,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,QAAA,MAAM,MAAM,aAAa,CAAC;AAC1B,QAAA,MAAM,SAAS,sBAAsB,CAAC;AAEtC,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,GAC7B,gBAAgB,CAAC,WAAW,CAAC,GAAG;QAC9B,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC;QAClB,CAAC,SAAS,CAAC,CAAC,EAAE,eAAe,CAAC;KAC/B,CAAC;CACL;AAED,0HAA0H;AAC1H,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,YAAY,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,eAAe,GAAG,SAAS,CAAC;CACxD;AAcD,+FAA+F;AAC/F,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,EAC7C,KAAK,GAAE,WAAgB,GACtB,iBAAiB,CAAC,SAAS,CAAC,CAoB9B;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,MAAM,CAK5D;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,EAC3B,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAIrC;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAOjE"}

package/dist/server/access/request.js

@@ -0,0 +1,62 @@
+import { conflict, DomainError } from '../kernel/errors.js';
+const VIEWER = 'pmViewer';
+const DELEGATED = 'pmDelegatedWrites';
+/** The header the CLI's user mode sends: `nocoproject-cli/<version>`. */
+const CLIENT_HEADER = 'x-pm-client';
+const CLI_PREFIX = 'nocoproject-cli/';
+/** How an API-key request arrived (browsers never send a key). */
+function requestVia(context) {
+    if (!context.req.header('x-api-key'))
+        return undefined;
+    return (context.req.header(CLIENT_HEADER) ?? '').startsWith(CLI_PREFIX)
+        ? 'cli'
+        : 'api_key';
+}
+/** Builds the request's `Viewer`; install after `auth.required()` and `authz.middleware()`. */
+export function viewerMiddleware(access, hooks = {}) {
+    return async (context, next) => {
+        const auth = context.get('auth');
+        if (!auth)
+            throw new DomainError('unauthorized', 'UNAUTHORIZED', 'Sign in first.');
+        const userId = auth.user.id;
+        const via = requestVia(context);
+        const identity = context.get('authz').identity;
+        const projects = identity.keyScope?.objects('pm.projects') ?? 'all';
+        const acting = await hooks.actorOf?.()?.(context);
+        const delegated = hooks.delegated?.();
+        if (delegated)
+            context.set(DELEGATED, delegated);
+        context.set(VIEWER, {
+            userId,
+            actor: acting ?? { type: 'user', id: userId, ...(via ? { via } : {}) },
+            permissions: await access.permissionsOf(identity),
+            ...(projects === 'all' ? {} : { projectIds: projects }),
+        });
+        await next();
+    };
+}
+export function viewerOf(context) {
+    const viewer = context.get(VIEWER);
+    if (!viewer)
+        throw new DomainError('unauthorized', 'UNAUTHORIZED', 'Sign in first.');
+    return viewer;
+}
+/**
+ * Hands a write to the application's delegated writes when the request's viewer acts for someone else
+ * (`DelegatedWrites`); undefined when it does not, and the route then writes through the services itself.
+ */
+export async function delegatedWrite(context, request) {
+    const writes = context.get(DELEGATED);
+    const viewer = viewerOf(context);
+    return writes?.covers(viewer) ? writes.write(viewer, request) : undefined;
+}
+/**
+ * Refuses a change made for someone else (a conversation's run acting for its asker) that the delegated writes do not
+ * cover, such as deleting an issue: 409 `PLAN_REQUIRED`, so it goes through a plan the person confirms.
+ */
+export function refuseDelegated(context) {
+    const writes = context.get(DELEGATED);
+    if (writes?.covers(viewerOf(context)))
+        throw conflict('PLAN_REQUIRED', 'A conversation makes this change through a plan the person confirms; propose one.');
+}
+//# sourceMappingURL=request.js.map

package/dist/server/access/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../../server/access/request.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAG5D,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAgBtC,yEAAyE;AACzE,MAAM,aAAa,GAAG,aAAa,CAAC;AACpC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC,kEAAkE;AAClE,SAAS,UAAU,CAAC,OAAgB;IAClC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QACrE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,gBAAgB,CAC9B,MAA6C,EAC7C,QAAqB,EAAE;IAEvB,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACtC,IAAI,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;YAClB,MAAM;YACN,KAAK,EAAE,MAAM,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YACtE,WAAW,EAAE,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;YACjD,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;SACxD,CAAC,CAAC;QACH,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAA2B;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QACT,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA2B,EAC3B,OAA8B;IAE9B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAA2B;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,QAAQ,CACZ,eAAe,EACf,mFAAmF,CACpF,CAAC;AACN,CAAC"}

package/dist/server/access/viewer.d.ts

@@ -0,0 +1,30 @@
+/**
+ * A signed-in user acting through the browser API, with what they may do. Every user-facing service method takes one;
+ * the domain rules (who may see a project, who may close an issue) live with their domains and read it through the
+ * helpers below.
+ */
+import { type Business, type BusinessAction, type Permissions, type Scope, type SettingsAction, type SettingsItem } from '../../shared/access.js';
+import type { Actor } from '../kernel/actor.js';
+import type { ActivityExecution } from '../../shared/plans.js';
+export interface Viewer {
+    readonly userId: string;
+    /** The host's runner machine permission check. Absent: only the snapshotted owner sees machine facts. */
+    readonly seesExecutionMachine?: (execution: ActivityExecution) => boolean;
+    /** The same user as an actor, for the activity log and events. */
+    readonly actor: Actor;
+    readonly permissions: Permissions;
+    /**
+     * The projects a scoped API key is limited to (`keyScope.objects('pm.projects')`); undefined when every project is in
+     * reach. A limited viewer sees no other project, no issue outside these projects and none without a project.
+     */
+    readonly projectIds?: readonly string[];
+}
+/** Whether a project, or no project (null), is within the viewer's key scope. */
+export declare function inProjectScope(viewer: Pick<Viewer, 'projectIds'>, projectId: string | null): boolean;
+export declare function scopeOf<B extends Business>(viewer: Viewer, business: B, action: BusinessAction<B>): Scope;
+/** 403 unless the viewer holds the action at some scope. */
+export declare function requireAction<B extends Business>(viewer: Viewer, business: B, action: BusinessAction<B>, message: string): void;
+export declare function canUseSetting<S extends SettingsItem>(viewer: Viewer, item: S, action: SettingsAction<S>): boolean;
+/** 403 unless the viewer holds the settings capability. */
+export declare function requireSetting<S extends SettingsItem>(viewer: Viewer, item: S, action: SettingsAction<S>, message: string): void;
+//# sourceMappingURL=viewer.d.ts.map

package/dist/server/access/viewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewer.d.ts","sourceRoot":"","sources":["../../../server/access/viewer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,cAAc,EACnB,KAAK,YAAY,EAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG/D,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yGAAyG;IACzG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,OAAO,CAAC;IAC1E,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,iFAAiF;AACjF,wBAAgB,cAAc,CAC5B,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAClC,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,OAAO,CAGT;AAED,wBAAgB,OAAO,CAAC,CAAC,SAAS,QAAQ,EACxC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,CAAC,EACX,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,GACxB,KAAK,CAEP;AAED,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,CAAC,SAAS,QAAQ,EAC9C,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,CAAC,EACX,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EACzB,OAAO,EAAE,MAAM,GACd,IAAI,CAEN;AAED,wBAAgB,aAAa,CAAC,CAAC,SAAS,YAAY,EAClD,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,CAAC,EACP,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,GACxB,OAAO,CAET;AAED,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,CAAC,SAAS,YAAY,EACnD,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,CAAC,EACP,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,EACzB,OAAO,EAAE,MAAM,GACd,IAAI,CAEN"}

package/dist/server/access/viewer.js

@@ -0,0 +1,30 @@
+/**
+ * A signed-in user acting through the browser API, with what they may do. Every user-facing service method takes one;
+ * the domain rules (who may see a project, who may close an issue) live with their domains and read it through the
+ * helpers below.
+ */
+import { businessKey, settingsKey, } from '../../shared/access.js';
+import { forbidden } from '../kernel/errors.js';
+/** Whether a project, or no project (null), is within the viewer's key scope. */
+export function inProjectScope(viewer, projectId) {
+    if (!viewer.projectIds)
+        return true;
+    return projectId !== null && viewer.projectIds.includes(projectId);
+}
+export function scopeOf(viewer, business, action) {
+    return viewer.permissions.scopes[businessKey(business, action)];
+}
+/** 403 unless the viewer holds the action at some scope. */
+export function requireAction(viewer, business, action, message) {
+    if (scopeOf(viewer, business, action) === 'none')
+        throw forbidden(message);
+}
+export function canUseSetting(viewer, item, action) {
+    return viewer.permissions.settings[settingsKey(item, action)];
+}
+/** 403 unless the viewer holds the settings capability. */
+export function requireSetting(viewer, item, action, message) {
+    if (!canUseSetting(viewer, item, action))
+        throw forbidden(message);
+}
+//# sourceMappingURL=viewer.js.map

package/dist/server/access/viewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewer.js","sourceRoot":"","sources":["../../../server/access/viewer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,WAAW,EACX,WAAW,GAOZ,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAgBhD,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAC5B,MAAkC,EAClC,SAAwB;IAExB,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,MAAc,EACd,QAAW,EACX,MAAyB;IAEzB,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,QAAW,EACX,MAAyB,EACzB,OAAe;IAEf,IAAI,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,MAAM;QAAE,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,IAAO,EACP,MAAyB;IAEzB,OAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,IAAO,EACP,MAAyB,EACzB,OAAe;IAEf,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC;QAAE,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;AACrE,CAAC"}

package/dist/server/composition.d.ts

@@ -0,0 +1,98 @@
+/**
+ * The one place the plugin's services are assembled from their dependencies. The provider binds the result to
+ * `projectsToken`; tests call it directly against a real database.
+ *
+ * What a change or a comment starts (triggers) comes from `deps.triggers` when a plugin binds them, otherwise from the
+ * work handlers of the registered kinds (`kernel/work.ts`). Notices are planned in each transaction (`domains/notices`).
+ * The kinds of principal (`kernel/kinds.ts`) come from `projectsKindsToken`, where other plugins register theirs.
+ */
+import type { DatabaseManager } from '@nocobase/db';
+import type { ProjectsAccess } from './tokens.js';
+import { type ActivityRecorder } from './kernel/activity.js';
+import { type KindRegistry } from './kernel/kinds.js';
+import { type DomainEventBus } from './kernel/events.js';
+import { type TxRunner } from './kernel/tx.js';
+import { type IssueContextProvider, type IssueQueries, type IssueService, type IssueTriggers } from './domains/issues/index.js';
+import { type CommentQueries, type CommentService } from './domains/comments/index.js';
+import { type NoticeRules } from './domains/notices/index.js';
+import { type SubscriptionService } from './domains/subscriptions/index.js';
+import { type InvitationService, type UserInvitations } from './domains/invitations/index.js';
+import { type LabelService } from './domains/labels/index.js';
+import { type MemberService } from './domains/members/index.js';
+import { type ProjectService } from './domains/projects/index.js';
+import { type SettingsService } from './domains/settings/index.js';
+import { type StatusEventService, type StatusEventTypes } from './domains/statuses/index.js';
+import type { StatusService } from './domains/issues/index.js';
+import { type IssueReports } from './domains/reports/index.js';
+import { type SubtaskService } from './domains/subtasks/index.js';
+import { type PlanHooks, type PlanService } from './domains/plans/index.js';
+import { type IntakeAiService, type IntakeOrganizer, type IntakeService } from './domains/plans/intake/index.js';
+import { type AttachmentService, type AttachmentStorage } from './domains/attachments/index.js';
+export interface ProjectsDeps {
+    readonly database: Pick<DatabaseManager, 'transaction' | 'connection'>;
+    readonly idGenerator: {
+        generateString(): string;
+    };
+    /** The roles, kept by the application (`projectsAccessToken`). */
+    readonly access: ProjectsAccess;
+    /** The user management plugin's invitations. */
+    readonly invitations: UserInvitations;
+    /** The kinds of principal; built-in kinds only when left out. */
+    readonly kinds?: KindRegistry;
+    /** Status events other plugins contribute (`projectsStatusEventsToken`); none when left out. */
+    readonly statusEvents?: StatusEventTypes;
+    /**
+     * What a change or a comment starts, asked on each use; when left out or when it answers undefined, the work handlers
+     * of the registered kinds.
+     */
+    readonly triggers?: () => IssueTriggers | undefined;
+    /** What hears plans being decided (`projectsPlanHooksToken`), asked on each use. */
+    readonly planHooks?: () => PlanHooks | undefined;
+    /** Who organises intake with AI (`projectsIntakeOrganizerToken`), asked on each use; none when left out. */
+    readonly intakeOrganizer?: () => IntakeOrganizer | undefined;
+    /** Where files' bytes go (the file plugin and Drive); without it nothing can be uploaded. */
+    readonly storage?: AttachmentStorage;
+    /** The application's public base path, for the files' content URLs; empty when left out. */
+    readonly basePath?: () => string;
+    readonly onListenerError?: (error: unknown) => void;
+}
+export interface Projects {
+    /** Application-owned issue events, recorded in the transaction that caused them. */
+    readonly activity: ActivityRecorder;
+    readonly events: DomainEventBus;
+    readonly tx: TxRunner;
+    readonly members: MemberService;
+    readonly invitations: InvitationService;
+    readonly settings: SettingsService;
+    readonly labels: LabelService;
+    /** The fixed statuses (`shared/statuses.ts`) and where each kind may move an issue. */
+    readonly statuses: StatusService;
+    readonly projects: ProjectService;
+    readonly issues: IssueService;
+    readonly issueQueries: IssueQueries;
+    /** An issue as an executor of another kind needs it, read on the caller's connection. */
+    readonly issueContext: IssueContextProvider;
+    readonly comments: CommentService;
+    readonly commentQueries: CommentQueries;
+    readonly subscriptions: SubscriptionService;
+    /** Files on issues and comments (`shared/attachments.ts`). */
+    readonly attachments: AttachmentService;
+    /** Where files' bytes go; the intake stores its files through it too. */
+    readonly storage: AttachmentStorage;
+    /** Where other plugins add notice rules (`projectsNoticeRulesToken`). */
+    readonly noticeRules: NoticeRules;
+    readonly subtasks: SubtaskService;
+    /** Operation plans (`shared/plans.ts`). */
+    readonly plans: PlanService;
+    /** Requirement intake: files, their text and the rule split (`shared/intake.ts`). */
+    readonly intake: IntakeService;
+    /** Requirement intake with AI, through the bound organiser (`shared/intake-ai.ts`). */
+    readonly intakeAi: IntakeAiService;
+    readonly kinds: KindRegistry;
+    /** Contributed status events: their registry, and firing one for a batch of issues. */
+    readonly statusEvents: StatusEventService;
+    /** The issue side of the reports: counts over a date range, limited to what a viewer sees. */
+    readonly reports: IssueReports;
+}
+export declare function createProjects(deps: ProjectsDeps): Projects;
+//# sourceMappingURL=composition.d.ts.map